Function at 0x100308dc
Capabilities:
Create pipe
Get common file path
Get session user name
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005d3ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x604
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa8], 0xcea5d6c0
mov dword [ebp - 0x524], 1
mov dword [ebp - 0xa8], 0
jmp 0x1003092e
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffff9
jle 0x1003094f
mov dword [ebp - 0x3c4], 0x66f5
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x3c4], eax
jmp 0x10030921
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10030965
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x164], 0
jmp 0x1003098f
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x100309ab
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x584], 0xffffffff
jmp 0x10030982
mov dword [ebp - 0x1c], 0
jmp 0x100309bb
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x10030bc1
mov dword [ebp - 0x94], 0xfffffffc
mov dword [ebp - 0x394], 0xfffffffa
mov dword [ebp - 0x188], 0
jmp 0x100309f2
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x10030a0e
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x424], 0x2da3c3d2
jmp 0x100309e5
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x10030a24
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1c], 0
je 0x10030a48
mov eax, 0xfffd
test eax, eax
je 0x10030a48
mov dword [ebp - 0x378], 1
jmp 0x10030a4f
and dword [ebp - 0x378], 0
cmp dword [ebp - 0x378], 0
jne 0x10030a64
mov dword [ebp - 0x3b4], 1
jmp 0x10030a6b
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x3b4], eax
jle 0x10030a85
mov dword [ebp - 0x2f0], 1
jmp 0x10030a8c
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x2f0], eax
jg 0x10030aa3
mov eax, 0x33a4
test eax, eax
je 0x10030ab5
cmp dword [ebp - 0x1c], 0
je 0x10030ab5
mov dword [ebp - 0x38c], 1
jmp 0x10030abc
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x38c], eax
jle 0x10030ad6
mov dword [ebp - 0x1ac], 1
jmp 0x10030add
and dword [ebp - 0x1ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ac]
mov dword [ebp + eax - 0x424], ecx
cmp dword [ebp - 0x1ac], 0x44653ff
je 0x10030b08
mov dword [ebp - 0x20c], 1
jmp 0x10030b0f
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x94]
jg 0x10030b35
mov dword [ebp - 0x214], 1
jmp 0x10030b3c
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x214]
mov ecx, dword [ebp - 0x94]
imul ecx, eax
cmp ecx, 0xcc5c6a3f
ja 0x10030b62
mov dword [ebp - 0x39c], 1
jmp 0x10030b69
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x584]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x584], ecx
mov eax, dword [ebp - 0x39c]
sub eax, dword [ebp - 0x94]
cmp dword [ebp - 0x21c], eax
jne 0x10030ba9
mov dword [ebp - 0x3a4], 1
jmp 0x10030bb0
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x94], eax
jmp 0x100309b4
mov dword [ebp - 0x1c], 0
jmp 0x10030bd1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10030be7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x584], 0x2c51978e
jmp 0x10030bca
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x3ac], 0x19a5
mov dword [ebp - 0x498], str.ujwcs_vcea_dqt_bshogsv_hasbfyjsx_pbpvbs
cmp dword [ebp - 0x3ac], 0x1a62
jle 0x10030c9b
push 0
push 0x10a3
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
and dword [ebp - 0xbc], 0
jmp 0x10030c38
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x2678
jge 0x10030c9b
and dword [ebp - 0x154], 0
jmp 0x10030c5a
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x60c1
jge 0x10030c99
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x154]
shl eax, cl
cdq
mov dword [ebp - 0x430], eax
mov dword [ebp - 0x42c], edx
push dword [ebp - 0x42c]
push dword [ebp - 0x430]
mov ecx, 0x100758b8
call fcn.10004429
jmp 0x10030c4d
jmp 0x10030c2b
mov dword [ebp - 0x574], 0xa0e6
mov dword [ebp - 0x570], 0xa0e6
mov dword [ebp - 0x56c], 0xa0e6
mov dword [ebp - 0x568], 0xa0e6
and dword [ebp - 4], 0
cmp dword [ebp - 0x3ac], 0x15d0
jge 0x10030ce3
mov edx, dword [ebp - 0x498]
mov ecx, 0x100758b8
call fcn.100067d6
jmp 0x10030cff
or dword [ebp - 4], 0xffffffff
jmp 0x10030d09
mov dword [ebp - 0xc4], 0xffffffe4
jmp 0x10030d22
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff2
jge 0x10030dd3
mov dword [ebp - 0x190], 0
jmp 0x10030d48
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x10030d64
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xcc], 0x6942a1e9
jmp 0x10030d3b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcc], 3
jmp 0x10030d92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc], 0
jl 0x10030dce
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10030dcc
push 0xc4c
push 0
push 0x2205
push 0
push 0x503
push 0xb5f
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
jmp 0x10030d77
jmp 0x10030d15
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x10030df8
push 0x1d36
push 0x11ba
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov dword [ebp - 0x58], 0xad9b
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x10030e20
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10030e36
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3c0], 0
jmp 0x10030e19
mov dword [ebp - 0x34], 0
jmp 0x10030e46
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10030e5c
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x554], 0xfffffff8
jmp 0x10030e3f
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
cmp ecx, dword [ebp + eax - 0x3c0]
jl 0x10030e7a
mov dword [ebp - 0x228], 1
jmp 0x10030e81
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x554]
cmp dword [ebp - 0x228], eax
jge 0x10030ea2
mov dword [ebp - 0x358], 1
jmp 0x10030ea9
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x358]
jl 0x10030ec0
mov dword [ebp - 0x230], 1
jmp 0x10030ec7
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x230]
je 0x10030ede
mov dword [ebp - 0x2f8], 1
jmp 0x10030ee5
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x9e9d
jle 0x10030f03
mov dword [ebp - 0x238], 1
jmp 0x10030f0a
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x554]
cmp dword [ebp - 0x238], eax
jle 0x10030f2b
mov dword [ebp - 0x4a0], 1
jmp 0x10030f32
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c0]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c0]
cmp ecx, dword [ebp + eax - 0x3c0]
jl 0x10030f6d
mov dword [ebp - 0x3b0], 1
jmp 0x10030f74
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0x3b0], 0xde0bcd8c
jae 0x10030f99
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10030f94
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x10031107
mov dword [ebp - 0x1cc], 0xffffffff
mov dword [ebp - 0x300], 0xfffffff7
mov dword [ebp - 0x5c], 0xfffffff9
jmp 0x10030fbd
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x18
jg 0x100310ba
mov dword [ebp - 0x58], 0
jmp 0x10030fd7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xb
jge 0x100310b5
mov dword [ebp - 0x15c], 0x94abc248
mov dword [ebp - 0x15c], 7
jmp 0x10031004
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xfffffff2
jne 0x100310a6
mov dword [ebp - 0xd4], 0xfffffffa
mov dword [ebp - 0xd4], 0
jmp 0x10031034
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x100310a1
mov dword [ebp - 0x198], 4
mov dword [ebp - 0x198], 0
jmp 0x10031060
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xfffffff3
je 0x1003109f
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1003109d
push 0
push 0xae1
push 0x10a9
push 0x1c57
push 0x1dca
push 0x24e1
push 0xc3e
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x10031053
jmp 0x10031027
jmp 0x10030ff7
mov dword [ebp - 0x1cc], 0xfffffffc
jmp 0x10030fd0
jmp 0x10030fb6
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x1cc], 0
jge 0x100310db
mov dword [ebp - 0x240], 1
jmp 0x100310e2
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x300]
imul eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x248]
jge 0x100310fe
cmp dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x5c], eax
movzx eax, byte [0x10076a19]
test eax, eax
je 0x10031125
mov esi, 0x100752d4
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1003364a
mov dword [ebp - 0xa0], 0x48bbca63
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x64], 1
mov dword [ebp - 0xdc], 0
jmp 0x10031156
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10031172
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x1dc], 0x1f3813bf
jmp 0x10031149
mov dword [ebp - 0xa0], 0xfffffffe
jmp 0x1003118b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffff
jge 0x1003165a
mov dword [ebp - 0x20], 0x32f3
mov dword [ebp - 0x1b4], 0xcc7c44d9
mov dword [ebp - 0x360], 0x1fb7
mov dword [ebp - 0x488], str.qlhljicle_lig_oainutyn_vcjk_vtdblmmuc
cmp dword [ebp - 0x360], 0x204b
jle 0x100312b0
push 0x10d6
call dword [sym.imp.GDI32.dll_GetStockObject]
and dword [ebp - 0x184], 0
jmp 0x100311ee
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x2698
jge 0x100312b0
and dword [ebp - 0x1a0], 0
jmp 0x10031214
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x524e
jge 0x100312ab
and dword [ebp - 0xe4], 0
jmp 0x1003123a
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x544f
jge 0x100312a6
mov ecx, dword [ebp - 0x1a0]
imul ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x184]
shl eax, cl
cdq
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x438], edx
push dword [ebp - 0x438]
push dword [ebp - 0x43c]
lea ecx, [ebp - 0x5fc]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x41c], eax
mov ecx, dword [ebp - 0x41c]
call fcn.10004409
push eax
call fcn.100442bc
pop ecx
lea ecx, [ebp - 0x5fc]
call fcn.100043ff
jmp 0x1003122d
jmp 0x10031207
jmp 0x100311e1
mov dword [ebp - 0x3e8], 0xffffffff
mov dword [ebp - 4], 2
cmp dword [ebp - 0x360], 0x1dd5
jge 0x100312d9
push dword [ebp - 0x488]
call fcn.100442bc
pop ecx
jmp 0x100312f5
or dword [ebp - 4], 0xffffffff
jmp 0x100312ff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4dc], eax
cmp dword [ebp - 0x20], 0
jne 0x1003133e
cmp dword [ebp - 0x50], 0
jne 0x1003133e
and dword [ebp - 0x3e0], 0
jmp 0x10031348
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x50]
imul ecx, dword [ebp - 0x50]
add ecx, dword [ebp + eax - 0x1dc]
je 0x1003137d
cmp dword [ebp - 0x20], 0
je 0x1003137d
mov dword [ebp - 0x250], 1
jmp 0x10031384
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0x40c3f30b
jne 0x1003139c
mov dword [ebp - 0x308], 1
jmp 0x100313a3
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xffffffff
jne 0x100313b8
mov dword [ebp - 0x258], 1
jmp 0x100313bf
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0x1b4]
cmp eax, dword [ebp - 0x20]
jle 0x100313e2
mov dword [ebp - 0x390], 1
jmp 0x100313e9
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
add eax, 0x71db
je 0x1003140b
mov eax, 0xbebf3b8c
test eax, eax
je 0x1003140b
mov dword [ebp - 0x260], 1
jmp 0x10031412
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0x9ae77ab3
jae 0x1003142a
mov dword [ebp - 0x434], 1
jmp 0x10031431
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x3e8], eax
mov dword [ebp - 0x64], 0
jmp 0x1003145d
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x10031655
mov dword [ebp - 0x50], 0
jmp 0x10031477
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x1003162a
mov byte [ebp - 0x65], 0
mov dword [ebp - 0x310], 0x3a0e
mov dword [ebp - 0x470], str.pvj_smuhybwk_sqymajvdf_ioxnvo_qyvo_ssypeykkc_ojola_dnbuutb_ojamk
cmp dword [ebp - 0x310], 0x3b14
jle 0x100315af
and dword [ebp - 0xec], 0
jmp 0x100314bf
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x2fa2
jge 0x10031587
and dword [ebp - 0xb0], 0
jmp 0x100314e5
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x453e
jge 0x10031582
and dword [ebp - 0xf4], 0
jmp 0x1003150b
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1e36
jge 0x1003157d
and dword [ebp - 0x16c], 0
jmp 0x1003152d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x5bd7
jge 0x1003157b
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xf4]
sar eax, cl
mov ecx, dword [ebp - 0x16c]
sar eax, cl
cdq
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], edx
push dword [ebp - 0x444]
push dword [ebp - 0x448]
mov ecx, 0x100758b8
call fcn.10004429
jmp 0x10031520
jmp 0x100314fe
jmp 0x100314d8
jmp 0x100314b2
push 0x17dc
push 0x8cc
push 0xd67
push 0x1715
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x100315cd
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetClipBox]
mov dword [ebp - 4], 4
cmp dword [ebp - 0x310], 0x38e4
jge 0x100315f0
mov edx, dword [ebp - 0x470]
mov ecx, 0x100758b8
call fcn.100067d6
jmp 0x1003160c
or dword [ebp - 4], 0xffffffff
jmp 0x10031616
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0x1dc], 0
je 0x10031625
jmp 0x1003162a
jmp 0x10031470
mov dword [ebp - 0x20], 0
jmp 0x1003163a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x10031650
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1dc], 0xdb62b2fa
jmp 0x10031633
jmp 0x10031456
jmp 0x1003117e
mov dword [ebp - 0x4f4], 0x100752d4
mov dword [ebp - 0x194], 0x14b733c6
mov dword [ebp - 0x1d4], 0x6b6eb6b9
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x3f8], 0xf2fdad5a
mov dword [ebp - 0x84], 0x479b69b2
mov dword [ebp - 0x4fc], 2
mov dword [ebp - 0x1c4], 0x807383cc
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x44c], 0x5c829ed8
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x544], 1
mov dword [ebp - 0x24], 0
jmp 0x100316dc
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x100316f2
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3d8], 0xc1464f16
jmp 0x100316d5
mov dword [ebp - 0x24], 0
jmp 0x10031702
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10031718
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x104], 1
jmp 0x100316fb
mov dword [ebp - 0x24], 0
jmp 0x10031728
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003173e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1ec], 0xfffffff6
jmp 0x10031721
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x194]
jge 0x10031764
mov dword [ebp - 0x1bc], 1
jmp 0x1003176b
and dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp + eax - 0x3d8], ecx
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x194]
je 0x100317a3
mov dword [ebp - 0x270], 1
jmp 0x100317aa
and dword [ebp - 0x270], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x104]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x104], eax
mov eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x440]
jne 0x100317fe
mov dword [ebp - 0x268], 1
jmp 0x10031805
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x268], eax
jg 0x1003181c
mov dword [ebp - 0x368], 1
jmp 0x10031823
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 1
jl 0x10031838
mov dword [ebp - 0x318], 1
jmp 0x1003183f
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x318]
cmp eax, 0xfffffff9
jne 0x1003185c
mov dword [ebp - 0x278], 1
jmp 0x10031863
and dword [ebp - 0x278], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x1ec], ecx
cmp dword [ebp - 0x30], 0
jne 0x1003193c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d8], 0
jne 0x100318b7
push 4
pop eax
shl eax, 1
xor ecx, ecx
sub ecx, dword [ebp + eax - 0x1ec]
mov eax, dword [ebp - 0x30]
sub eax, ecx
jne 0x100318b7
mov eax, 0x49ef
test eax, eax
jne 0x100318b7
and dword [ebp - 0x3a8], 0
jmp 0x100318c1
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x3a8], eax
jl 0x100318d8
mov dword [ebp - 0x280], 1
jmp 0x100318df
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0xb430688c
jae 0x100318f7
mov dword [ebp - 0x320], 1
jmp 0x100318fe
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xfffffff7
ja 0x10031925
cmp dword [ebp - 0x1c4], 0
je 0x10031925
cmp dword [ebp - 0x1d4], 0
je 0x10031925
mov dword [ebp - 0x288], 1
jmp 0x1003192c
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0x8b4b72b4
jb 0x10031a63
mov dword [ebp - 0x298], 0x1111919b
mov dword [ebp - 0x55c], 0xc7e9a03a
mov dword [ebp - 0x564], 0xfffffffa
mov dword [ebp - 0x534], 0xfffffff8
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0x398], 9
mov dword [ebp - 0xfc], 0
jmp 0x10031991
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x100319ad
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x5a8], 0x6aeab669
jmp 0x10031984
mov eax, 0x563ade45
test eax, eax
je 0x10031a23
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x98]
jge 0x100319dc
mov dword [ebp - 0x290], 1
jmp 0x100319e3
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x370], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x1ec], ecx
mov eax, dword [ebp - 0x370]
cmp eax, dword [ebp - 0x290]
jl 0x10031a1c
mov dword [ebp - 0x328], 1
jmp 0x10031a23
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
sub ecx, dword [ebp + eax - 0x104]
sub ecx, dword [ebp - 0x98]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
imul eax, ecx
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
jmp 0x10031c5d
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x84], 0
jmp 0x10031a86
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10031c5d
mov dword [ebp - 0x200], 0xad959fc8
mov dword [ebp - 0x48], 0
jmp 0x10031aad
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10031b5e
mov dword [ebp - 0x2a0], 0xfffffff7
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x1e8], 0x7fe6d7bf
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x3d8], 0
jne 0x10031af8
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x3d8], 0
je 0x10031af8
and dword [ebp - 0x1e0], 0
jmp 0x10031b02
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x3d0], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x1ec]
imul eax, dword [ebp - 0x2a0]
sub eax, 0x197ad996
je 0x10031b46
xor eax, eax
je 0x10031b46
mov dword [ebp - 0x330], 1
jmp 0x10031b4d
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x200], eax
jmp 0x10031aa6
mov dword [ebp - 0x30], 0
jmp 0x10031b6e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10031c58
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x1ec], 0x3fd4
je 0x10031b94
mov dword [ebp - 0x2a8], 1
jmp 0x10031b9b
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x49c]
cmp dword [ebp - 0x2a8], eax
jg 0x10031bb5
mov dword [ebp - 0x400], 1
jmp 0x10031bbc
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x528], eax
or eax, 0xffffffff
jne 0x10031c0b
mov eax, 0x41910978
test eax, eax
jne 0x10031c0b
and dword [ebp - 0x2b0], 0
jmp 0x10031c15
mov dword [ebp - 0x2b0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2b0]
sub ecx, dword [ebp + eax - 0x3d8]
cmp ecx, dword [ebp - 0x44c]
jne 0x10031c3c
mov dword [ebp - 0x338], 1
jmp 0x10031c43
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x1ec], ecx
jmp 0x10031b67
jmp 0x10031a79
mov dword [ebp - 0x4c8], 0x100752d8
mov dword [ebp - 0x2b8], 0x12f7
mov dword [ebp - 0x408], str.mgfp_vsrcanl_diishf_wszigoxq_wiuimzh_lwbm_kbhvlnlx_vasvmyo
cmp dword [ebp - 0x2b8], 0x14ab
jle 0x10031d6f
and dword [ebp - 0x174], 0
jmp 0x10031ca1
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x3ec4
jge 0x10031d6f
and dword [ebp - 0x10c], 0
jmp 0x10031cc7
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x1dc9
jge 0x10031d6a
and dword [ebp - 0x18c], 0
jmp 0x10031ced
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x553e
jge 0x10031d65
and dword [ebp - 0x114], 0
jmp 0x10031d0f
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x7d48
jge 0x10031d60
mov eax, dword [ebp - 0x174]
cdq
idiv dword [ebp - 0x10c]
mov eax, edx
cdq
idiv dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x114]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x450], edx
push dword [ebp - 0x450]
push dword [ebp - 0x454]
mov ecx, 0x100758b8
call fcn.10004429
jmp 0x10031d02
jmp 0x10031ce0
jmp 0x10031cba
jmp 0x10031c94
mov dword [ebp - 0x14], 0x6fe7d8a8
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2b8], 0x1210
jge 0x10031d99
mov edx, dword [ebp - 0x408]
mov ecx, 0x100758b8
call fcn.100067d6
jmp 0x10031db5
or dword [ebp - 4], 0xffffffff
jmp 0x10031dbf
mov dword [ebp - 0x40], 0
jmp 0x10031dcf
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10031de5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1fc], 3
jmp 0x10031dc8
mov dword [ebp - 0x40], 0
jmp 0x10031df5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10031e0b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x47c], 0xffffffff
jmp 0x10031dee
mov dword [ebp - 0x14], 0
jmp 0x10031e1b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10032018
mov dword [ebp - 0x17c], 0
jmp 0x10031e3e
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
jge 0x10031e5a
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x3a0], 7
jmp 0x10031e31
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1fc], 0
jne 0x10031e99
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4d0], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp + eax*4 - 0x1fc], 0x12a8
cmp eax, dword [ebp - 0x14]
jg 0x10031e99
cmp dword [ebp - 0x14], 0
je 0x10031eb4
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
je 0x10031eb4
mov dword [ebp - 0x3b8], 1
jmp 0x10031ebb
and dword [ebp - 0x3b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x1fc]
cmp ecx, dword [ebp + eax - 0x1fc]
je 0x10031ee0
mov dword [ebp - 0x2c0], 1
jmp 0x10031ee7
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1fc]
imul eax, dword [ebp - 0x2c0]
test eax, eax
je 0x10031f15
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x1fc], 0
je 0x10031f15
mov dword [ebp - 0x340], 1
jmp 0x10031f1c
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1fc]
imul eax, dword [ebp - 0x340]
test eax, eax
jne 0x10031f49
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1fc], 0
jne 0x10031f49
and dword [ebp - 0x2c8], 0
jmp 0x10031f53
mov dword [ebp - 0x2c8], 1
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp - 0x2c8], 0xf9a4
cmp ecx, dword [ebp + eax - 0x1fc]
jge 0x10031f78
mov dword [ebp - 0x380], 1
jmp 0x10031f7f
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x1fc]
cmp dword [ebp - 0x380], eax
jge 0x10031f9d
mov dword [ebp - 0x2d0], 1
jmp 0x10031fa4
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x3a0], ecx
cmp dword [ebp - 0x348], 0
je 0x10031fe4
mov eax, 0x723
test eax, eax
je 0x10031fe4
mov dword [ebp - 0x2d8], 1
jmp 0x10031feb
and dword [ebp - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax - 0x47c], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
je 0x10032013
jmp 0x10031e14
jmp 0x10031e14
mov byte [0x10076a19], 1
mov dword [ebp - 0x244], 0x5ce5
mov dword [ebp - 0x494], str.jsq_gjwfeba_qwnlnykmx_wocjjhe_saao_affkvxujd_mprtylqym_sfgokm_bbqxrno_odlgxbwt_zom_xrfc_esckdx_bbwhd
cmp dword [ebp - 0x244], 0x5d0c
jle 0x10032101
and dword [ebp - 0x11c], 0
jmp 0x10032059
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x3404
jge 0x100320eb
and dword [ebp - 0x19c], 0
jmp 0x1003207f
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x43f7
jge 0x100320e6
and dword [ebp - 0x124], 0
jmp 0x100320a1
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x37f7
jge 0x100320e4
mov eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0x124]
cdq
mov dword [ebp - 0x460], eax
mov dword [ebp - 0x45c], edx
push dword [ebp - 0x45c]
push dword [ebp - 0x460]
mov ecx, 0x100758b8
call fcn.10004429
jmp 0x10032094
jmp 0x10032072
jmp 0x1003204c
push 0
push 0
push 0x2218
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x2e0], 0x94f
mov dword [ebp - 0x410], str.hgkkp_fxk_zfup_peifpdbd_ijfrecqf
cmp dword [ebp - 0x2e0], 0xa94
jle 0x1003220a
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
and dword [ebp - 0x160], 0
jmp 0x10032143
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x1426
jge 0x1003220a
and dword [ebp - 0x12c], 0
jmp 0x10032169
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x6953
jge 0x10032205
and dword [ebp - 0x168], 0
jmp 0x1003218f
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x380e
jge 0x10032200
and dword [ebp - 0x134], 0
jmp 0x100321b1
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xb07
jge 0x100321fe
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x134]
sar eax, cl
cdq
mov dword [ebp - 0x46c], eax
mov dword [ebp - 0x468], edx
push dword [ebp - 0x468]
push dword [ebp - 0x46c]
mov ecx, 0x100758b8
call fcn.10004429
jmp 0x100321a4
jmp 0x10032182
jmp 0x1003215c
jmp 0x10032136
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2e0], 0x8bb
jge 0x1003222d
mov edx, dword [ebp - 0x410]
mov ecx, 0x100758b8
call fcn.100067d6
jmp 0x10032249
or dword [ebp - 4], 0xffffffff
jmp 0x10032253
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x224], 0x39ecf4a
mov dword [ebp - 0x418], 0xc8ef34ea
mov dword [ebp - 0x530], 0x2f744ed2
mov dword [ebp - 0x170], 0
jmp 0x1003229b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x100322b7
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x23c], 0xfffffff6
jmp 0x1003228e
cmp dword [ebp - 0x44], 0
jne 0x10032352
cmp dword [ebp - 0x44], 0
jne 0x100322dd
mov eax, dword [ebp - 0x44]
add eax, 0x4f27d270
cmp eax, 1
ja 0x100322dd
and dword [ebp - 0x350], 0
jmp 0x100322e7
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x350], eax
jg 0x100322fe
mov dword [ebp - 0x2e8], 1
jmp 0x10032305
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffffd
jl 0x10032326
mov dword [ebp - 0x1a8], 1
jmp 0x1003232d
and dword [ebp - 0x1a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x23c], ecx
cmp dword [ebp - 0x1a8], 0
jne 0x10032352
and dword [ebp - 0x388], 0
jmp 0x1003235c
mov dword [ebp - 0x388], 1
cmp dword [ebp - 0x388], 0xf17e
jg 0x10032374
mov dword [ebp - 0x220], 1
jmp 0x1003237b
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x44], 5
jmp 0x10032397
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x14
jge 0x100324cf
mov dword [ebp - 0xa4], 0x6fd5d705
mov dword [ebp - 0x178], 0x29c8ddac
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x234], 0x15b01d97
mov dword [ebp - 0x13c], 0
jmp 0x100323e2
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 2
jge 0x100323fe
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x508], 0xf585950c
jmp 0x100323d5
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jne 0x10032492
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0xa4]
jg 0x10032451
mov dword [ebp - 0x1b0], 1
jmp 0x10032458
and dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b0]
mov dword [ebp + eax - 0x508], ecx
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x22c]
sub eax, dword [ebp - 0x9c]
je 0x10032492
cmp dword [ebp - 0x234], 0
imul eax, dword [ebp - 0x234], 0xffff
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax - 0x23c], ecx
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x418], eax
jmp 0x10032390
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x244], 0x5c33
jge 0x100324f2
mov edx, dword [ebp - 0x494]
mov ecx, 0x100758b8
call fcn.100067d6
jmp 0x1003250e
or dword [ebp - 4], 0xffffffff
jmp 0x10032518
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10074dc8
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x18], 0xfffffffd
mov dword [ebp - 0x88], 0xfffffffa
mov dword [ebp - 0x18], 0
jmp 0x1003254d
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff9
jl 0x10032c97
mov dword [ebp - 0x6c], 0x2d76715f
mov dword [ebp - 0x144], 0
jmp 0x10032577
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x10032590
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x28], 0xfffffffa
jmp 0x1003256a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 0
jmp 0x100325b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0xffffffe6
jle 0x10032bea
mov dword [ebp - 0x24c], 0x60dc
mov dword [ebp - 0x464], str.ypwez_oakq_alsyi_sbqmemuh_pqefg_lswqd_scok_hqatfwcxt_vnnnei_oxrcred_dcyhaf_ykewc
cmp dword [ebp - 0x24c], 0x64a2
jle 0x100326f8
and dword [ebp - 0xb8], 0
jmp 0x10032600
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x432f
jge 0x100326f8
and dword [ebp - 0xb4], 0
jmp 0x10032626
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x4e6f
jge 0x100326f3
and dword [ebp - 0x180], 0
jmp 0x1003264c
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x7529
jge 0x100326ee
and dword [ebp - 0x14c], 0
jmp 0x10032672
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x539
jge 0x100326e9
mov eax, dword [ebp - 0x180]
cdq
idiv dword [ebp - 0x14c]
mov ecx, dword [ebp - 0xb4]
sub ecx, edx
mov eax, dword [ebp - 0xb8]
sar eax, cl
cdq
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x474], edx
push dword [ebp - 0x474]
push dword [ebp - 0x478]
lea ecx, [ebp - 0x5c0]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
call fcn.10004409
push eax
call fcn.100442bc
pop ecx
lea ecx, [ebp - 0x5c0]
call fcn.100043ff
jmp 0x10032665
jmp 0x1003263f
jmp 0x10032619
jmp 0x100325f3
mov dword [ebp - 0x8c], 0xfffffff8
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x24c], 0x5eb9
jge 0x10032721
push dword [ebp - 0x464]
call fcn.100442bc
pop ecx
jmp 0x1003273d
or dword [ebp - 4], 0xffffffff
jmp 0x10032747
mov dword [ebp - 0x2a4], 1
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x4e0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax - 0x28]
jle 0x10032775
mov dword [ebp - 0x428], 1
jmp 0x1003277c
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x538], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x88]
cmp ecx, dword [ebp + eax - 0x28]
jle 0x100327a9
mov dword [ebp - 0x254], 1
jmp 0x100327b0
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x254], eax
jne 0x100327d4
cmp dword [ebp - 0x8c], 0
jne 0x100327d4
and dword [ebp - 0x25c], 0
jmp 0x100327de
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x25c], eax
je 0x100327f8
mov dword [ebp - 0x264], 1
jmp 0x100327ff
and dword [ebp - 0x264], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
imul eax, dword [ebp - 0x264]
test eax, eax
jne 0x10032821
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
je 0x10032833
cmp dword [ebp - 0x18], 0
je 0x10032833
mov dword [ebp - 0x26c], 1
jmp 0x1003283a
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x26c]
jle 0x10032851
mov dword [ebp - 0x274], 1
jmp 0x10032858
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 0xfe3d2f55
jne 0x10032870
mov dword [ebp - 0x27c], 1
jmp 0x10032877
and dword [ebp - 0x27c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x27c]
jne 0x10032895
mov dword [ebp - 0x284], 1
jmp 0x1003289c
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 0xed4bca92
ja 0x100328b4
mov dword [ebp - 0x28c], 1
jmp 0x100328bb
and dword [ebp - 0x28c], 0
imul eax, dword [ebp - 0x28c], 0x1ee0
add eax, dword [ebp - 0x18]
je 0x10032bdd
mov dword [ebp - 0xe8], 0xad1532d4
mov dword [ebp - 0x2c4], 0x73e7
mov dword [ebp - 0x3dc], str.lvyfnhkts_vgaxz_zgbzne_trnitmjyn
cmp dword [ebp - 0x2c4], 0x7724
jle 0x10032a04
and dword [ebp - 0xd8], 0
jmp 0x10032912
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x5752
jge 0x10032a04
and dword [ebp - 0xc0], 0
jmp 0x10032938
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x741a
jge 0x100329ff
and dword [ebp - 0xc8], 0
jmp 0x1003295e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xeaa
jge 0x100329fa
and dword [ebp - 0xd0], 0
jmp 0x10032984
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x6f3
jge 0x100329f5
mov ecx, dword [ebp - 0xc0]
sub ecx, dword [ebp - 0xc8]
add ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xd8]
shl eax, cl
cdq
mov dword [ebp - 0x484], eax
mov dword [ebp - 0x480], edx
push dword [ebp - 0x480]
push dword [ebp - 0x484]
lea ecx, [ebp - 0x5e4]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x3c8], eax
mov ecx, dword [ebp - 0x3c8]
call fcn.10004409
push eax
call fcn.100442bc
pop ecx
lea ecx, [ebp - 0x5e4]
call fcn.100043ff
jmp 0x10032977
jmp 0x10032951
jmp 0x1003292b
jmp 0x10032905
mov dword [ebp - 0x6c], 0xfffffff0
jmp 0x10032a14
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x16
jl 0x10032b96
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x2a4]
cmp eax, dword [ebp - 0x88]
je 0x10032a7d
cmp dword [ebp - 0xe8], 0
jne 0x10032a7d
and dword [ebp - 0x294], 0
jmp 0x10032a87
mov dword [ebp - 0x294], 1
cmp dword [ebp - 0x294], 1
je 0x10032a9c
mov dword [ebp - 0x29c], 1
jmp 0x10032aa3
and dword [ebp - 0x29c], 0
imul eax, dword [ebp - 0x29c], 0xffff
test eax, eax
jne 0x10032ab8
cmp dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0xe0]
jge 0x10032ad9
mov dword [ebp - 0x2ac], 1
jmp 0x10032ae0
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x8c]
jle 0x10032b61
or eax, 0xffffffff
je 0x10032b61
mov dword [ebp - 0x2b4], 0xcabd
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x10032b52
push 0x16ff
push 0x234f
push 0x1ffb
push 0x3eb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
jmp 0x10032b7a
cmp dword [ebp - 0x2bc], 0
je 0x10032b6c
jmp 0x10032b96
cmp dword [ebp - 0x8c], 0
je 0x10032b7a
jmp 0x10032a0d
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10032b91
push 0xa03
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x10032a0d
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x2c4], 0x7257
jge 0x10032bb5
push dword [ebp - 0x3dc]
call fcn.100442bc
pop ecx
jmp 0x10032bd1
or dword [ebp - 4], 0xffffffff
jmp 0x10032bdb
jmp 0x10032be5
cmp dword [ebp - 0x18], 0
je 0x10032be5
jmp 0x10032bea
jmp 0x100325a0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x6c]
jge 0x10032c05
mov dword [ebp - 0x2cc], 1
jmp 0x10032c0c
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x88]
cmp eax, 0xf8a8ff01
ja 0x10032c28
mov dword [ebp - 0x3e4], 1
jmp 0x10032c2f
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x2cc]
test eax, eax
jne 0x10032c58
mov eax, 0x23bfa4ac
test eax, eax
jne 0x10032c58
and dword [ebp - 0x2d4], 0
jmp 0x10032c62
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2d4], eax
jle 0x10032c7f
cmp dword [ebp - 0x18], 0
je 0x10032c7f
mov dword [ebp - 0x2dc], 1
jmp 0x10032c86
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x88], eax
jmp 0x10032546
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10074dc8
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x38], 0x8bac04ee
mov dword [ebp - 0xf0], 0
jmp 0x10032cc8
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10032ce1
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x2c], 0xfffffff7
jmp 0x10032cbb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 0
jmp 0x10032d06
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0xffffffec
jg 0x10032d22
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x38], eax
jmp 0x10032cf1
mov dword [ebp - 0x38], 0
jmp 0x10032d32
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xf
jne 0x10032f99
mov dword [ebp - 0x90], 0xfffffffa
mov dword [ebp - 0x3ec], 0xfc1c5751
mov dword [ebp - 0xf8], 0
jmp 0x10032d69
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x10032d85
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x1b8], 8
jmp 0x10032d5c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x10032dac
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x10032f94
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x10032dda
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10032ed8
mov dword [ebp - 0x314], 0x8b166c19
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x2c]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x2c], ecx
cmp dword [ebp - 0x2e4], 0
je 0x10032e34
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x90]
je 0x10032e34
mov dword [ebp - 0x2ec], 1
jmp 0x10032e3b
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0xfffffffd
je 0x10032e50
mov dword [ebp - 0x2f4], 1
jmp 0x10032e57
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x2f4], eax
je 0x10032e6e
mov dword [ebp - 0x2fc], 1
jmp 0x10032e75
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x2fc], eax
jge 0x10032e8c
mov dword [ebp - 0x304], 1
jmp 0x10032e93
and dword [ebp - 0x304], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
cmp dword [ebp - 0x304], eax
je 0x10032eb4
mov dword [ebp - 0x30c], 1
jmp 0x10032ebb
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1c0], eax
jmp 0x10032dd3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b8], 0
je 0x10032f16
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x500], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x50c], eax
cmp dword [ebp - 0x38], 0x6e2c9bf5
jg 0x10032f25
cmp dword [ebp - 0x38], 0
jne 0x10032f25
and dword [ebp - 0x31c], 0
jmp 0x10032f2f
mov dword [ebp - 0x31c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b8]
imul eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x1c0]
jge 0x10032f57
mov dword [ebp - 0x324], 1
jmp 0x10032f5e
and dword [ebp - 0x324], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c]
cmp dword [ebp - 0x324], eax
je 0x10032f7c
mov dword [ebp - 0x32c], 1
jmp 0x10032f83
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x3ec], eax
jmp 0x10032d9f
jmp 0x10032d2b
mov eax, dword [ebp - 0x218]
mov dword [0x100752d4], eax
mov dword [ebp - 0x120], 0xccdd
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x404], 0xffffffff
mov dword [ebp - 0x334], 0x4346
mov dword [ebp - 0x3fc], str.qzcvdp_lgbdken_etd_ulgma_xrf_acrgmel_avfsnfiw_okxnklpbl_dslbfumb_mjnalnhpy
cmp dword [ebp - 0x334], 0x447e
jle 0x100330f5
and dword [ebp - 0x110], 0
jmp 0x10032ffc
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x6c4d
jge 0x100330f5
and dword [ebp - 0x118], 0
jmp 0x10033022
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x3764
jge 0x100330f0
and dword [ebp - 0x100], 0
jmp 0x10033048
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x552b
jge 0x100330eb
and dword [ebp - 0x108], 0
jmp 0x1003306e
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7d1f
jge 0x100330e6
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x108]
sar eax, cl
mov edx, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x118]
sar edx, cl
and eax, edx
cdq
mov dword [ebp - 0x490], eax
mov dword [ebp - 0x48c], edx
push dword [ebp - 0x48c]
push dword [ebp - 0x490]
lea ecx, [ebp - 0x614]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x3f4], eax
mov ecx, dword [ebp - 0x3f4]
call fcn.10004409
push eax
call fcn.100442bc
pop ecx
lea ecx, [ebp - 0x614]
call fcn.100043ff
jmp 0x10033061
jmp 0x1003303b
jmp 0x10033015
jmp 0x10032fef
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x334], 0x40cf
jge 0x10033114
push dword [ebp - 0x3fc]
call fcn.100442bc
pop ecx
jmp 0x10033130
or dword [ebp - 4], 0xffffffff
jmp 0x1003313a
mov dword [ebp - 0x3c], 0
jmp 0x1003314a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x10033160
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x594], 0xffffffff
jmp 0x10033143
mov dword [ebp - 0x3c], 0
jmp 0x10033170
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10033186
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x354], 0xffff
jmp 0x10033169
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x33c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0x594], ecx
cmp dword [ebp - 0x33c], 0
jbe 0x100331ba
mov dword [ebp - 0x344], 1
jmp 0x100331c1
and dword [ebp - 0x344], 0
xor eax, eax
sub eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x344]
test eax, eax
je 0x100331f6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 0
je 0x100331f6
mov dword [ebp - 0x34c], 1
jmp 0x100331fd
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0xffffffff
jge 0x10033212
mov dword [ebp - 0x35c], 1
jmp 0x10033219
and dword [ebp - 0x35c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp dword [ebp - 0x35c], eax
jge 0x1003323a
mov dword [ebp - 0x364], 1
jmp 0x10033241
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x364], eax
jg 0x1003326b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x594], 0
je 0x1003326b
mov dword [ebp - 0x36c], 1
jmp 0x10033272
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x1d8]
mov dword [0x100752d8], eax
mov dword [ebp - 0x74], 0xb3c692be
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x208], 3
mov dword [ebp - 0x128], 0
jmp 0x100332d3
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jge 0x100332ef
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0x514], 0
jmp 0x100332c6
cmp dword [ebp - 0x74], 0
je 0x1003330e
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x10033309
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
jmp 0x10033491
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x130], 0
jmp 0x10033331
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 1
jge 0x1003334d
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x1d0], 4
jmp 0x10033324
mov dword [ebp - 0x74], 0
jmp 0x1003335d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jg 0x100333c9
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1003337e
push 0x1a5c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0xac], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp + eax*4 - 0x514]
add eax, 0x5526feaf
cmp eax, 4
jbe 0x100333b4
mov dword [ebp - 0x37c], 1
jmp 0x100333bb
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x1c8], eax
jmp 0x10033356
imul eax, dword [ebp - 0x40c], 0x99b9
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xac]
imul edx, dword [ebp + ecx - 0x1d0]
cmp edx, dword [ebp + eax - 0x1d0]
jg 0x10033429
mov dword [ebp - 0x384], 1
jmp 0x10033430
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0
jg 0x10033445
mov dword [ebp - 0x204], 1
jmp 0x1003344c
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xe87122a2
jb 0x10033470
mov dword [ebp - 0x210], 1
jmp 0x10033477
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x208]
imul eax, dword [ebp - 0x210]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1d0], eax
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x100334aa
push 0x693
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d8]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x218]
push dword [ecx + eax]
call fcn.1003080b
pop ecx
pop ecx
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x140], 0x42c70bb7
mov dword [ebp - 0x138], 0
jmp 0x100334f8
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x10033514
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x5cc], 6
jmp 0x100334eb
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1003352f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
mov dword [ebp - 0x140], 2
jmp 0x10033548
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jl 0x10033599
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0x148], 2
jmp 0x10033574
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x10033597
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x10033595
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
jmp 0x10033567
jmp 0x1003353b
push dword [ebp - 0x1d8]
mov edx, 0x100751a4
mov ecx, dword [ebp - 0x414]
call fcn.100308a5
pop ecx
mov dword [ebp - 0x150], 0xd5e48d32
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x100335d1
push 0xbff
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov dword [ebp - 0x150], 0
jmp 0x100335ea
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xe
jl 0x1003363c
mov dword [ebp - 0x158], 0
jmp 0x1003360c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x10033628
mov eax, dword [ebp - 0x158]
mov dword [ebp + eax*4 - 0x5a0], 0x3c8fc558
jmp 0x100335ff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5a0], 0
je 0x1003363a
jmp 0x1003363c
jmp 0x100335dd
mov esi, 0x100752d4
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret