Function at 0x100356d3
Capabilities:
Encode data using xor
Encrypt data using speck
Terminate process

Disassembly:
mov eax, 0x100576d6
call fcn.10056410
sub esp, 0x2a8
push ebx
xor ebx, ebx
mov dword [ebp - 0x20], 1
push esi
push edi
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10035714
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f0], 0x82062403
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10035703
mov dword [ebp - 0x18], ebx
jmp 0x10035730
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1003571f
mov dword [ebp - 0x20], ebx
jmp 0x1003574c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1f0], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003573b
push 3
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x7632667a
mov dword [ebp - 0x14], ebx
jmp 0x10035775
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c8], 0xdf99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10035764
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x100358f8
push 1
lea ecx, [ebp - 0x88]
call fcn.1000c530
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100357af
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0x6a485bf2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1003579c
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003585d
mov dword [ebp - 0x18], 0x3dba
cmp dword [ebp - 0x18], 0x3fe7
jle 0x10035841
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetParent]
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov eax, edi
cdq
idiv esi
mov esi, 0x3d46
mov edi, edx
mov eax, edi
lea ecx, [ebp - 0x208]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003580a
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x208]
call fcn.1000c8ef
dec edi
dec esi
jne 0x100357f0
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x1431
jl 0x100357e4
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x43a8
jl 0x100357df
push ebx
push ebx
call dword [sym.imp.USER32.dll_ScreenToClient]
cmp dword [ebp - 0x18], 0x3a3a
jge 0x1003585d
push str.oetyue_bcqopb_jfp_xguuw_hfgdedjre_iuxhoaxla
call fcn.1004139c
pop ecx
mov eax, dword [ebp - 0x88]
mov dword [eax], ebx
mov dword [ebp - 0x14], 0x6782
cmp dword [ebp - 0x14], 0x6891
jle 0x100358a5
mov esi, ebx
mov edi, esi
mov ebx, 0x1610
mov eax, edi
mov ecx, 0x1006cbb8
cdq
push edx
push eax
call fcn.1000c318
dec edi
dec ebx
jne 0x1003587e
inc esi
cmp esi, 0x282d
jl 0x10035877
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_SetRect]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x1c8], 0x543b
cmp dword [ebp - 0x14], 0x6636
jge 0x100358d0
mov edx, str.yceox_eod_uwm_iryfu_brffxqkom_yagfuenx_jyl_wjjficcc_orfn_abjp_qmore_xrwuf_sqbnb
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov eax, dword [ebp - 0x88]
inc dword [eax]
cmp dword [eax], 4
jl 0x10035865
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x88]
call fcn.1000c5b3
dec dword [ebp - 0x1c]
jns 0x10035787
push 3
pop ecx
mov byte [ebp - 0x47], cl
push ecx
mov dword [ebp - 0x50], 0xd048d01
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x4c], 0xed1302
mov byte [ebp - 0x48], 0x26
mov dword [ebp - 0x46], 0x60d0225
mov word [ebp - 0x42], 0x533
mov byte [ebp - 0x40], 0x30
mov dword [ebp - 0x20], 0xfffffff8
call fcn.1000c530
mov dword [ebp - 0x14], ebx
jmp 0x10035949
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0xc74aa0d7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10035936
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035960
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor esi, esi
mov dword [ebp - 0x20], ebx
inc esi
cmp dword [ebp - 0x20], 0xfffffff9
jl 0x10035997
mov dword [ebp - 0x28], 0x5166941f
mov dword [ebp - 0x14], ebx
jmp 0x10035989
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d0], 0x7a6deec5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10035978
mov dword [ebp - 0x28], esi
dec dword [ebp - 0x20]
jmp 0x10035966
lea ecx, [ebp - 0x160]
call fcn.1000c5b3
push 0x6c
pop eax
mov word [ebp - 0xc2], ax
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x20], 0x491e29ea
mov dword [ebp - 0x1c], 0x1df82d83
mov dword [ebp - 0x18], 0x89226c31
push esi
call fcn.1000c530
mov dword [ebp - 0x1c], 0x6d238e48
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100359ef
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0xc3ec3d4e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100359dc
cmp dword [ebp - 0x20], ebx
jne 0x10035a22
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0x67b33aec
dec dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp eax, 0x19fa553f
mov eax, ebx
setne cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
je 0x10035a24
mov eax, esi
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x20], 0xffffffff
jl 0x10035a3c
mov eax, dword [ebp - 0xa8]
mov edx, esi
cmp dword [eax], ebx
jne 0x10035a3e
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0xa8]
call fcn.1000c5b3
push 2
pop esi
mov edi, ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0x2716
cmp dword [ebp - 0x20], 0x2952
jle 0x10035abc
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], 0x7d8e
mov eax, ebx
mov ecx, 0x1006cbb8
xor eax, edi
cdq
push edx
push eax
call fcn.1000c318
add ebx, esi
dec dword [ebp - 0x14]
jne 0x10035a89
inc esi
push 0
pop ebx
cmp esi, 0x79ef
jl 0x10035a7f
inc edi
cmp edi, 0x4237
jl 0x10035a7d
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], 0x2600
jge 0x10035ad4
mov edx, str.wegco_hkjmuqh_btcbctmf_pnvuaqlq_wbh_olymtiam_adwskffcg_jnu
mov ecx, 0x1006cbb8
call fcn.1000e58f
push 3
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x14], ebx
pop ecx
jmp 0x10035af4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x184], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10035ae3
inc dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
jmp 0x10035b25
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x10035b22
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x184], ebx
mov eax, dword [ebp - 0x180]
dec dword [ebp - 0x14]
jns 0x10035b0d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 9
jl 0x10035b01
cmp esi, 4
jne 0x10035b3d
mov edi, ecx
push 5
mov dword [ebp - 0x1c], edi
pop esi
jmp 0x10035bf3
mov dword [ebp - 0x18], 0xa48bbca6
mov dword [ebp - 0x30], 0x3ed23c5a
mov dword [ebp - 0x14], ebx
jmp 0x10035b61
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x268], 0x47dc4b4e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10035b50
mov dword [ebp - 0x18], ebx
jmp 0x10035b7e
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035b7b
push ebx
call dword [sym.imp.USER32.dll_DispatchMessageA]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
je 0x10035b6b
mov dword [ebp - 0x18], ebx
jmp 0x10035bbb
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x1c], 0xbcabebf3
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor edx, edx
neg eax
add eax, 0x669b68bc
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setne dl
mov dword [ebp - 0x1c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10035b89
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, edi
mov dword [ebp - 0x1c], ebx
mov edi, ebx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0xc4]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0xc4], cx
add esi, 2
mov dword [ebp - 0x18], esi
cmp esi, 0x11
jb 0x10035a61
mov dword [ebp - 0x20], 0x648b
cmp dword [ebp - 0x20], 0x64fb
jle 0x10035c7a
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], 0x3412
mov eax, esi
lea ecx, [ebp - 0x298]
and eax, edi
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035c3f
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.1000c8ef
dec esi
dec dword [ebp - 0x1c]
jne 0x10035c23
mov esi, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x14], esi
cmp esi, 0x7d34
jl 0x10035c19
inc edi
cmp edi, 0x7f87
jl 0x10035c14
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0x1c], 0x571d
cmp dword [ebp - 0x1c], 0x58b7
jle 0x10035cc2
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov ecx, 0x1006cbb8
or eax, esi
or eax, edi
cdq
push edx
push eax
call fcn.1000c318
inc ebx
cmp ebx, 0x4f33
jl 0x10035c91
inc esi
push 0
pop ebx
cmp esi, 0x7705
jl 0x10035c8e
inc edi
cmp edi, 0x123d
jl 0x10035c8c
cmp dword [ebp - 0x1c], 0x5695
jge 0x10035cda
mov edx, str.qxftykto_mdjcscqkc_twqmmtpa_wsgojc_qubjd_deruvpogs_skbb_iiurt
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x1c], 0x7632667a
mov dword [ebp - 0x14], ebx
jmp 0x10035cf7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1e0], 0xdf99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10035ce6
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x10035d71
push 1
lea ecx, [ebp - 0x100]
call fcn.1000c530
mov dword [ebp - 0x14], ebx
jmp 0x10035d2e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], 0x6a485bf2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x10035d1b
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035d45
push ebx
push ebx
call dword [sym.imp.USER32.dll_ScreenToClient]
mov ecx, dword [ebp - 0x100]
mov dword [ecx], ebx
mov eax, dword [ecx]
inc dword [ecx]
cmp dword [ecx], 4
mov dword [ebp + eax*4 - 0x1e0], 0x543b
jl 0x10035d4d
lea ecx, [ebp - 0x100]
call fcn.1000c5b3
dec dword [ebp - 0x1c]
jns 0x10035d09
cmp dword [ebp - 0x20], 0x60d8
jge 0x10035d85
push str.fgxwe_naxwrs_hndwqcw_lopdwn_vddwc_afrikvfr_eypcisx_akqgq_uxc_biydmp_yjds_kryoh_yhrh
call fcn.1004139c
pop ecx
xor eax, eax
mov word [ebp - 0xb6], ax
mov dword [ebp - 0x18], 0x687
cmp dword [ebp - 0x18], 0xa5c
jle 0x10035e03
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], 0x42f8
mov esi, dword [ebp - 0x1c]
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x220]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035dce
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x220]
call fcn.1000c8ef
inc edi
cmp edi, 0x1c37
jl 0x10035db0
mov esi, dword [ebp - 0x20]
add dword [ebp - 0x1c], esi
dec dword [ebp - 0x14]
jne 0x10035dab
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x1c15
jl 0x10035da1
mov dword [ebp - 0x20], 9
cmp dword [ebp - 0x18], 0x5cb
jge 0x10035e1e
push str.stbdvid_wmanpnirm_gjmsx_rrowf_tieh_eune_ttgcqnar_cwb_lvnfy_uif
call fcn.1004139c
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x10035e34
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x244], 0x6bacd795
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10035e23
mov dword [ebp - 0x20], ebx
jmp 0x10035ecd
mov dword [ebp - 0x1c], 0x85bf25cb
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035e5a
push ebx
push ebx
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x10035eca
push 2
lea ecx, [ebp - 0xe8]
call fcn.1000c530
mov dword [ebp - 0x14], ebx
jmp 0x10035e8b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10035e78
mov esi, dword [ebp - 0xe8]
mov dword [esi + 4], ebx
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035eb1
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_ExtTextOutA]
inc dword [esi + 4]
cmp dword [esi + 4], 2
jle 0x10035e9a
lea ecx, [ebp - 0xe8]
call fcn.1000c5b3
dec dword [ebp - 0x1c]
jns 0x10035e66
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
jle 0x10035e42
xor eax, eax
mov dword [ebp - 0x140], 7
mov word [ebp - 0x154], ax
lea ecx, [ebp - 0x154]
lea eax, [ebp - 0xc4]
mov dword [ebp - 0x144], ebx
push eax
call fcn.1000c9db
xor esi, esi
mov eax, 0xffff
inc esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x18], ebx
je 0x10035f35
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10035fd3
push ebx
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x10035fd3
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xb4]
push 3
call fcn.1000c530
mov dword [ebp - 0x14], ebx
jmp 0x10035f5d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10035f4a
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
sub eax, 0x3773672
jne 0x10035f83
mov ecx, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10035f85
mov ecx, esi
mov eax, dword [ebp - 0x18]
xor edx, edx
sub eax, ecx
cmp eax, 0x2fd2d1a4
mov eax, dword [ebp - 0xb4]
setl dl
xor ecx, ecx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10035fc2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0x4be76d23
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035faf
lea ecx, [ebp - 0xb4]
call fcn.1000c5b3
xor eax, eax
lea edi, [ebp - 0xc4]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], 0x1589afca
mov dword [ebp - 0x18], ebx
jmp 0x10035ffc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035fee
mov dword [ebp - 0x18], ebx
jmp 0x10036015
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10036007
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp eax, 8
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, dword [ebp - 0x20]
jne 0x10036038
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x78]
xor ecx, ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x20]
cmp eax, esi
mov eax, dword [ebp - 0x20]
setle cl
cmp ecx, 0x8d383303
push dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setl dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 7
setge al
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x78]
cmp eax, ecx
lea ecx, [ebp - 0x19c]
setne dl
mov dword [ebp - 0x6c], edx
mov dword [ebp - 0x28], edx
call fcn.1000c42d
mov byte [ebp - 4], 2
mov dword [ebp - 0x30], 0x7cc6
cmp dword [ebp - 0x30], 0x7e28
jle 0x10036131
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov edx, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov edi, ebx
lea ecx, [edi + esi]
sar eax, cl
lea ecx, [ebp - 0x238]
or eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100360ed
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.1000c8ef
mov eax, dword [ebp - 0x1c]
inc edi
mov edx, dword [ebp - 0x14]
cmp edi, 0x5a7d
jl 0x100360ce
inc esi
cmp esi, 0x16cc
jl 0x100360cc
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x4d74
jl 0x100360ca
inc edx
mov dword [ebp - 0x14], edx
cmp edx, 0x7ce8
jl 0x100360c5
mov dword [ebp - 0x1c], 0xbf2b2994
lea ecx, [ebp - 0x10c]
push 2
call fcn.1000c530
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x2c], 0x17bf
cmp dword [ebp - 0x2c], 0x19a8
jle 0x100361eb
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edx, edi
mov dword [ebp - 0x28], ebx
mov ecx, esi
mov edi, ebx
shl edx, cl
mov dword [ebp - 0x14], edx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x25c]
xor eax, edi
xor eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100361a3
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.1000c8ef
mov edx, dword [ebp - 0x14]
inc esi
cmp esi, 0x7eb3
jl 0x10036185
inc edi
cmp edi, 0x13ec
jl 0x10036183
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x18]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x2163
jl 0x10036175
inc edi
mov dword [ebp - 0x18], edi
cmp edi, 0x36cf
jl 0x10036170
mov eax, 0xd5f49dcb
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x2c], 0x17ad
jge 0x1003621c
push str.dfri_orjh_ribgnlm_qplovbtx_qaaphnyj_pwkieg_leqv_rqhkot_iurxffvwj_hkltbyrrl_ccujnan_ajepsfp
call fcn.1004139c
pop ecx
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10036232
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60], 0x5457d670
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036224
mov dword [ebp - 0x18], ebx
jmp 0x1003624f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], 0x49a2f381
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003623c
mov eax, dword [ebp - 0x10c]
cmp dword [eax], ebx
jne 0x10036261
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x60]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
sete cl
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x5c]
jne 0x10036294
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x5c]
xor edi, edi
xor edx, edx
inc edi
cmp eax, edi
mov eax, dword [ebp - 0x60]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x11c], ecx
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 2
call fcn.1000c5b3
cmp dword [ebp - 0x30], 0x7bf2
jge 0x100362d4
push str.piqvgwqc_hqhhno_wwlqx
call fcn.1004139c
pop ecx
push dword [ebp - 0x98]
movdqa xmm0, xmmword [0x10066990]
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x94], ebx
push eax
push ebx
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x90], ebx
movdqu xmmword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x8c], ebx
call fcn.1000eb10
mov byte [ebp - 4], 4
mov dword [ebp - 0x14], 0x5d0b
cmp dword [ebp - 0x14], 0x601e
jle 0x100363a8
push ebx
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, esi
mov dword [ebp - 0x30], 0x46d4
mov dword [ebp - 0x1c], ecx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
and eax, ecx
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036363
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.1000c8ef
mov ecx, dword [ebp - 0x1c]
inc esi
cmp esi, 0x2c6d
jl 0x10036346
inc edi
cmp edi, 0x399c
jl 0x10036344
dec ecx
dec dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
jne 0x10036342
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x1872
jl 0x10036336
xor edi, edi
inc edi
cmp dword [ebp - 0x14], 0x5cd5
jge 0x100363bc
push str.nwptlx_xtdqjbm_bycxhh
call fcn.1004139c
pop ecx
mov dword [ebp - 0x14], ebx
jmp 0x100363cb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100363c1
mov esi, dword [ebp - 0x94]
mov dword [esi + 8], 0x1c
mov dword [ebp - 0x18], 0xd811f07b
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1003645e
mov dword [ebp - 0x20], 0xc3938dd4
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x7c], ebx
jne 0x1003645e
mov dword [ebp - 0x20], ebx
jmp 0x10036454
push 3
lea ecx, [ebp - 0x118]
call fcn.1000c530
mov dword [ebp - 0x28], 0x7921e124
mov dword [ebp - 0x14], ebx
jmp 0x1003642d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 0x93e0566a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003641a
mov eax, dword [ebp - 0x118]
mov dword [eax], ebx
dec dword [eax]
mov dword [ebp - 0x28], 0xf6e229ed
jns 0x1003643b
lea ecx, [ebp - 0x118]
call fcn.1000c5b3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10036401
dec dword [ebp - 0x18]
jns 0x100363ec
dec dword [esi + 8]
cmp dword [esi + 8], 7
jne 0x100363dd
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 2
call fcn.1000c5b3
push 0x5c
pop eax
push 2
mov byte [ebp - 0x3c], bl
mov ecx, ebx
mov dword [ebp - 0x3b], 0x152d0350
mov byte [ebp - 0x37], 0x3e
mov word [ebp - 0x34], ax
pop esi
cmp esi, 2
jne 0x100364a0
push 4
pop ecx
push ecx
pop esi
jmp 0x100364c7
movzx edx, byte [ebp + esi - 0x3b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x3e]
movzx eax, word [ebp + eax*2 - 0x34]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x3c]
mov word [ebp + eax*2 - 0x34], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x10036494
xor eax, eax
mov dword [ebp - 0xc8], 7
mov word [ebp - 0x32], ax
lea ecx, [ebp - 0xdc]
mov word [ebp - 0xdc], ax
lea eax, [ebp - 0x34]
push eax
mov dword [ebp - 0xcc], ebx
call fcn.1000c9db
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], 0xbc58
mov dword [ebp - 0x28], ebx
push 4
call fcn.1000c530
mov byte [ebp - 4], 6
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x4e1a
cmp dword [ebp - 0x28], 0x4f3e
jle 0x100365aa
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edx, esi
mov dword [ebp - 0x30], 0x2083
mov dword [ebp - 0x1c], edx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x2b0]
and eax, edx
cdq
push edx
push eax
call fcn.100019c5
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036565
mov eax, dword [eax]
push eax
call fcn.1004139c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b0]
call fcn.1000c8ef
mov edx, dword [ebp - 0x1c]
inc esi
cmp esi, 0x2f2f
jl 0x10036545
inc edi
cmp edi, 0x7582
jl 0x10036543
dec edx
dec dword [ebp - 0x30]
mov dword [ebp - 0x1c], edx
jne 0x10036541
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4982
jl 0x10036535
xor edi, edi
inc edi
mov dword [ebp - 0x18], ebx
jmp 0x100365be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100365af
cmp dword [ebp - 0x28], 0x4dec
jge 0x100365d8
push str.isywfky_nce_dxhbpd_lfytsuwh_ipsi_kiti_kswaimx_rdnkjt_cnkbgnln_etrxqmnk
call fcn.1004139c
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x100365ee
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b8], 0x351a938
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100365dd
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jl 0x1003662a
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0xaa43b2b
setg cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0xf4]
setne dl
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x14]
mov ecx, 0xa421
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1b8], ecx
mov eax, dword [ebp - 0x14]
sub eax, ecx
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 5
call fcn.1000c5b3
mov dword [ebp - 0x34], ebx
or esi, 0xffffffff
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], 0xd77cccae
mov dword [ebp - 0x28], 0x9034e105
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10036682
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_PostMessageA]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x5eaf
setne cl
xor edx, edx
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
setne dl
mov eax, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
je 0x100366d4
mov edx, edi
cmp dword [ebp - 0x14], ebx
jne 0x100366d6
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
push 0x5f
setle cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x178]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], 5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
pop eax
mov word [ebp - 0x54], ax
xor eax, eax
mov word [ebp - 0x52], ax
mov word [ebp - 0x178], ax
lea eax, [ebp - 0x54]
push eax
mov byte [ebp - 0x58], bl
mov byte [ebp - 0x57], 0xae
mov dword [ebp - 0x164], 7
mov dword [ebp - 0x168], ebx
call fcn.1000c9db
mov byte [ebp - 4], 7
mov dword [ebp - 0x54], ebx
push dword [ebp - 0xcc]
cmp dword [ebp - 0xc8], 8
lea eax, [ebp - 0xdc]
push ebx
cmovae eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0x19c]
push eax
call fcn.10036b7f
cmp eax, esi
je 0x1003678c
push esi
push ebx
lea ecx, [ebp - 0x178]
push ecx
push edi
push eax
lea ecx, [ebp - 0x19c]
call fcn.1000f366
jmp 0x10036749
mov dword [ebp - 0x18], 0x3e2f
mov eax, 0xadb5d230
mov dword [ebp - 0x1c], ebx
mov esi, 0xffff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], 0x81d6
mov dword [ebp - 0x28], 0xbf698ba8
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], edi
jge 0x100367dd
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], esi
inc dword [ebp - 0x1c]
jmp 0x100367cc
mov eax, dword [ebp - 0x18]
sub eax, 0x1521fafb
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setne dl
cmp edx, dword [ebp - 0x20]
je 0x10036818
mov eax, edi
cmp dword [ebp - 0x20], ebx
jne 0x1003681a
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jne 0x10036822
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x18], eax
jl 0x10036840
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x10036842
mov ecx, edi
xor eax, eax
cmp ecx, 0xf12959af
sete al
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x20]
dec eax
cmp esi, eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x18]
sub eax, 0x67c7
add eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xb7835602
jae 0x10036887
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x10036889
mov eax, edi
mov ecx, dword [ebp - 0x9c]
lea edx, [ebp - 0x154]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x19c]
dec dword [ebp - 0x64]
push eax
call fcn.10036c22
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x178]
call fcn.1000cafd
push ebx
push edi
lea ecx, [ebp - 0xdc]
call fcn.1000cafd
push ebx
push edi
lea ecx, [ebp - 0x19c]
call fcn.1000cafd
push ebx
push edi
lea ecx, [ebp - 0x154]
call fcn.1000cafd
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x9c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret