Function at 0x100358be
Capabilities:
Create pipe

Disassembly:
mov eax, 0x1005de5b
call fcn.1005c4f8
sub esp, 0x290
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x34], 0x256915a
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xf4], edx
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x1a8], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100358ff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xfff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100358f1
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], ebx
jl 0x100359f1
mov dword [ebp - 0x1c], 0xcd53bc6e
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x100359e8
mov dword [ebp - 0x18], ebx
jmp 0x1003593a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0x651328f6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10035929
mov dword [ebp - 0x18], ebx
jmp 0x10035956
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], 0x5ff44426
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10035945
mov dword [ebp - 0x98], ebx
cmp dword [ebp - 0x98], ebx
jl 0x100359df
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x64], 0x54bc
jg 0x100359cd
mov eax, dword [ebp - 0x98]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x98]
cmp eax, 0xcee6
mov eax, dword [ebp - 0x98]
setl cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x98]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0x273d
cmp eax, dword [ebp - 0x98]
jne 0x100359ca
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x64], ebx
jne 0x100359cd
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xf0], 1
dec dword [ebp - 0x98]
jns 0x1003596a
dec dword [ebp - 0x1c]
jns 0x10035924
dec dword [ebp - 0x34]
jns 0x10035911
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x10035a00
push ebx
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x18], 0x5c68ec0a
mov dword [ebp - 0x1c], 0x3491
cmp dword [ebp - 0x1c], 0x3551
jle 0x10035a95
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov ecx, edi
mov dword [ebp - 0x28], esi
mov edi, esi
mov esi, ebx
shl edi, cl
mov eax, edi
lea ecx, [ebp - 0x280]
and eax, esi
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035a48
mov eax, dword [eax]
push eax
call fcn.10045794
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.1000224a
inc esi
cmp esi, 0x21b2
jl 0x10035a2c
mov edi, dword [ebp - 0x30]
mov esi, dword [ebp - 0x38]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x346d
jl 0x10035a21
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x69fa
jl 0x10035a1c
push ebx
push ebx
push 0x7fa
push ebx
push 1
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push 3
lea ecx, [ebp - 0x174]
call fcn.10001eb9
cmp dword [ebp - 0x1c], 0x3479
jge 0x10035ab6
push str.lxv_hpedmdtvt_fodufq_rhjbjz_evrlk_nczdftq_jyxp
call fcn.10045794
pop ecx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x1f0]
push dword [ebp - 0x3c]
movdqa xmm0, xmmword [0x1006bd80]
lea ecx, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0xcc], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x200], xmm0
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
call fcn.100045dd
mov byte [ebp - 4], 3
lea eax, [ebp - 0x200]
push dword [ebp - 0x3c]
movdqa xmm0, xmmword [0x1006bd90]
lea ecx, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x210]
mov dword [ebp - 0x24], 0x6c7a88ff
push eax
push ebx
movdqu xmmword [ebp - 0x210], xmm0
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
call fcn.100045dd
push 3
mov dword [ebp - 0x30], 0xa95534fd
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10035b64
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xf47
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10035b51
mov dword [ebp - 0x18], ebx
jmp 0x10035b7f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10035b6e
mov dword [ebp - 0x18], 0xf
jmp 0x10035bca
mov dword [ebp - 0x1c], 0x51ad386c
mov dword [ebp - 0x1c], ebx
jmp 0x10035bc1
mov dword [ebp - 0x34], 0x41651328
mov dword [ebp - 0x34], ebx
jmp 0x10035bb9
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xc74a
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edx
jl 0x10035ba6
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x10035b9a
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
jge 0x10035b8e
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
mov esi, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
test edx, edx
setne cl
mov dword [esi + 0xc], edx
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0x22c7
setne cl
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [eax]
je 0x10035c23
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
push 3
cmp dword [eax], 1
mov eax, dword [ebp - 0x18]
setg cl
sub ecx, eax
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
pop ecx
sub ecx, eax
add ecx, dword [ebp - 0x18]
je 0x10035cac
mov dword [ebp - 0x1c], 0x9e98c534
xor ecx, ecx
mov dword [ebp - 0x2c], 0xe54fd57e
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
cmp eax, 0xfffffffb
setne cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [esi + 0xc], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
jmp 0x10035ccb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10035ccb
push ebx
push 0x1ecf
push 0x580
push 0x104
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
lea ecx, [ebp - 0xc0]
call fcn.10001f3c
lea ecx, [ebp - 0xcc]
call fcn.10001f3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10001f3c
push 2
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x60], 0x5d02ef00
mov dword [ebp - 0x5c], 0x22503e1
mov dword [ebp - 0x58], 0x133060d
mov dword [ebp - 0x54], 0x50d0430
mov byte [ebp - 0x50], 0xd
call fcn.10001eb9
mov dword [ebp - 4], 4
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x18], 0xfffffff6
push 3
call fcn.10001eb9
mov byte [ebp - 4], 5
mov dword [ebp - 0x34], 0x4897
cmp dword [ebp - 0x34], 0x4929
jle 0x10035dab
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x1c], 0x31fe
mov esi, ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x30], esi
mov edi, esi
mov esi, 0x4645
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x10078fb8
cdq
push edx
push eax
call fcn.10001d2f
dec edi
dec esi
jne 0x10035d6a
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x2410
jl 0x10035d63
dec ebx
dec dword [ebp - 0x1c]
push 0
mov dword [ebp - 0x38], ebx
pop ebx
jne 0x10035d5b
mov edi, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x27a7
jl 0x10035d51
mov dword [ebp - 0x1c], 0xa7b7e80d
mov byte [ebp - 4], 6
cmp dword [ebp - 0x34], 0x453b
jge 0x10035dec
mov edx, str.oukikjda_puwtconlo_qfu_qgvbwkpu_nmjjru
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x10035dec
mov dword [ebp - 4], 5
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x38], 0xd82
cmp dword [ebp - 0x38], 0x1060
push 2
pop edi
jle 0x10035e78
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv esi
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
mov eax, edx
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
cdq
mov ecx, 0x10078fb8
idiv esi
lea eax, [ebx + edx]
cdq
push edx
push eax
call fcn.10001d2f
mov eax, dword [ebp - 0x34]
inc esi
cmp esi, 0x727e
jl 0x10035e2b
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x30], esi
push 0
pop ebx
cmp esi, 0x6108
jl 0x10035e1a
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x7d8f
jl 0x10035e15
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x70cb
jl 0x10035e10
mov byte [ebp - 4], 8
cmp dword [ebp - 0x38], 0xab1
jge 0x10035eb5
mov edx, str.bxrodzmdf_yqvuy_bkwwdpz_beyobb_rloadw_kpgffvc_dyipw
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x10035eb5
mov dword [ebp - 0x18], ebx
jmp 0x10035ecd
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0x42eb90da
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10035eba
mov dword [ebp - 0x18], ebx
jmp 0x10035eea
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0xc69aed23
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035ed7
mov eax, dword [ebp - 0x110]
dec dword [eax]
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x10035f58
mov dword [ebp - 0x30], 0x4ef66b17
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], 0xffffffff
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov edx, dword [ebp - 0x110]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [edx + esi*4]
setl cl
mov dword [ebp - 0x28], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10035f53
push 0x2365
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
dec dword [ebp - 0x18]
jns 0x10035f00
lea ecx, [ebp - 0x110]
call fcn.10001f3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.10001f3c
push 0x47
pop eax
mov word [ebp - 0x138], ax
mov esi, edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esi
cmp esi, 0x11
jae 0x1003637e
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10036285
movzx esi, byte [ebp + esi - 0x60]
mov dword [ebp - 0x3c], 0xffff
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
lea eax, [esi + 1]
mov dword [ebp - 0x30], eax
je 0x10035fc9
push 0x1e31
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreatePipe]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10035fdd
push 0x1274
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x18], 0x8a61928c
add eax, esi
mov dword [ebp - 0x28], 0x1ac3
cmp dword [ebp - 0x28], 0xb67
mov dword [ebp - 0x34], eax
jge 0x100360d3
push 0x1013d7d8
push 0x1013d7dc
push str._d__d
call fcn.10045c3e
add esp, 0xc
push 0xc3508
push 0xffffffffffffffff
push 0x1007a2d0
call fcn.10034935
xor esi, esi
add esp, 0xc
inc esi
mov ecx, esi
call fcn.10035829
inc esi
cmp esi, 0x186a1
jl 0x1003602f
xorps xmm0, xmm0
mov ecx, 0x1007a2d8
movlpd qword [0x1007a2d0], xmm0
mov eax, dword [ecx - 8]
add dword [ecx], eax
mov eax, dword [ecx - 4]
adc dword [ecx + 4], eax
add ecx, 8
cmp ecx, 0x1013d7d8
jl 0x1003604f
cmp dword [0x1013d7dc], 0
mov esi, ebx
jle 0x100360d3
push 0x1013d7e0
push 0x1007a114
push str._d__d
call fcn.10045c3e
mov ecx, dword [0x1013d7e0]
add esp, 0xc
mov eax, dword [0x1007a114]
mov edx, dword [ecx*8 + 0x1007a2d0]
sub edx, dword [eax*8 + 0x1007a2c8]
mov ecx, dword [ecx*8 + 0x1007a2d4]
sbb ecx, dword [eax*8 + 0x1007a2cc]
push ebx
push 0x3b9aca07
push ecx
push edx
call fcn.1005c5d0
push edx
push eax
push str._lld_n
call fcn.10045794
add esp, 0xc
inc esi
cmp esi, dword [0x1013d7dc]
jl 0x10036070
mov dword [ebp - 0x28], 0x7c769867
mov dword [ebp - 0x1c], ebx
jmp 0x100360f0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x180], 0x229edca8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100360df
mov dword [ebp - 0x18], 9
cmp dword [ebp - 0x18], 4
je 0x10036274
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0xf9e3d3b
mov dword [ebp - 0x2c], 0x10
cmp dword [ebp - 0x2c], 0xfffffff2
je 0x1003626c
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x28], 0x3e76
cmp dword [ebp - 0x28], 0x40e2
jle 0x1003619f
mov edx, ebx
mov dword [ebp - 0x1c], ebx
mov ecx, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov eax, esi
and eax, ecx
lea ecx, [ebp - 0x250]
xor eax, edx
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036163
mov eax, dword [eax]
push eax
call fcn.10045794
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.1000224a
mov ecx, dword [ebp - 0x38]
inc esi
mov edx, dword [ebp - 0x1c]
cmp esi, 0x5b71
jl 0x10036145
inc ecx
mov dword [ebp - 0x38], ecx
cmp ecx, 0x7927
jl 0x10036143
inc edx
mov dword [ebp - 0x1c], edx
cmp edx, 0xe46
jl 0x1003613e
mov dword [ebp - 0x1c], 1
cmp dword [ebp - 0x28], 0x3c0f
jge 0x100361ba
push str.pkuxyj_rtpmpi_har_mfcblqar_yhtq_szpmlqs_qafap_eurvt_srlvdxn_nvzscg_hnmfa_bka_akwq_kwcz
call fcn.10045794
pop ecx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], ebx
jne 0x100361cc
cmp dword [ebp - 0x24], ebx
jne 0x100361cc
mov eax, ebx
jmp 0x100361cf
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x100361d9
cmp dword [ebp - 0x1c], ebx
jne 0x100361dc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], 0x718b
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
sub eax, dword [ebp - 0x28]
sub edx, 0xdfe9
xor ecx, ecx
cmp eax, edx
setl cl
add ecx, dword [ebp - 0x2c]
jne 0x10036211
cmp dword [ebp - 0x18], ebx
jne 0x10036211
mov ecx, ebx
jmp 0x10036214
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2c]
sub ecx, eax
cmp ecx, dword [ebp - 0x18]
je 0x10036221
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x17c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
dec dword [ebp - 0x2c]
jmp 0x10036118
dec dword [ebp - 0x18]
jmp 0x100360fd
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x178], eax
jmp 0x10036377
mov dword [ebp - 0x1c], 0x3ae35568
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100362c3
mov dword [ebp - 0x38], 0x83111738
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100362ae
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jle 0x10036297
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, dword [ebp - 0x30]
push 3
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x138]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0x138], cx
lea ecx, [ebp - 0x168]
call fcn.10001eb9
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1003631f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003630c
mov dword [ebp - 0x18], ebx
jmp 0x1003633a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x104], 0xf01c0890
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10036329
mov dword [ebp - 0xfc], ebx
jmp 0x10036361
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x3df6
inc dword [ebp - 0xfc]
cmp dword [ebp - 0xfc], edx
jl 0x10036348
lea ecx, [ebp - 0x168]
call fcn.10001f3c
mov dword [ebp - 0x30], ebx
add esi, edi
jmp 0x10035f81
xor eax, eax
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x12a], ax
lea ecx, [ebp - 0x1c0]
mov word [ebp - 0x1c0], ax
lea eax, [ebp - 0x138]
push eax
mov dword [ebp - 0x1b0], ebx
call fcn.10009def
mov dword [ebp - 4], 0xc
lea eax, [ebp - 0x210]
push dword [ebp - 0x3c]
movdqa xmm0, xmmword [0x1006bdb0]
lea ecx, [ebp - 0xec]
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0xec], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x220], xmm0
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call fcn.100045dd
mov eax, dword [ebp - 0xec]
lea ecx, [ebp - 0xec]
mov dword [eax + 8], 0xffffffe5
call fcn.10001f3c
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0x571177e8
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 7
jg 0x100365eb
mov dword [ebp - 0x1c], 0x3245f1db
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x1c], 0x1a
jmp 0x100365d1
push 3
lea ecx, [ebp - 0x88]
call fcn.10001eb9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x30], 0xd6c34f1d
mov dword [ebp - 0x24], ebx
jmp 0x10036470
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0xcb363f9e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003645d
mov dword [ebp - 0x18], ebx
jmp 0x100365b4
mov dword [ebp - 0x24], 0xfba1a4d6
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x100365b1
mov ecx, dword [ebp - 0x88]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0xe0], 0x497f
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x18], ebx
je 0x100364b6
mov eax, dword [ebp - 0x18]
mov eax, dword [ecx + 8]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x2c]
imul edi, dword [ebp - 0x24]
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x88]
add edi, dword [eax + ecx*4]
mov eax, dword [ebp - 0x88]
sub edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x24]
imul eax, edi
sub edx, eax
mov eax, dword [ebp - 0x88]
add ecx, edx
mov edx, dword [ebp - 0x28]
imul ecx, dword [eax + edx*4]
test ecx, ecx
je 0x1003652b
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1003659d
push ebx
push ebx
push 0xe40
push ebx
push 0x20e5
push ebx
push 0x138e
push ebx
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x1003659d
mov dword [ebp - 0x40], 0xbcfb
mov dword [ebp - 0x2c], ebx
jmp 0x10036597
mov dword [ebp - 0x28], 0xe07ad46d
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x30], ebx
jg 0x10036555
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], 0xffffffff
xor edx, edx
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x88]
setl cl
xor edx, edx
cmp ecx, 0xfffffff7
setle dl
xor ecx, ecx
add edx, dword [eax + esi*4]
cmp dword [eax], edx
sete cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff2
jg 0x10036537
cmp dword [ebp - 0x34], ebx
jne 0x100365ae
dec dword [ebp - 0x24]
mov ecx, dword [ebp - 0x3c]
jns 0x100364a1
push 2
pop edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x1003647e
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x3c], eax
call fcn.10001f3c
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xe
jl 0x1003643d
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 7
jle 0x10036427
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov word [ebp + eax*2 - 0x138], cx
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 8
jb 0x10036413
mov dword [ebp - 0x1c], 0x2cf4
inc ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0xd8], ecx
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], 0x66193fe6
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x3c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x24], ecx
push dword [ebp - 0xf4]
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x454
setge cl
xor eax, eax
cmp ecx, 0x20f
setne al
sub eax, 7
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul ecx, eax, 0x40b3
mov eax, dword [ebp - 0xd8]
cmp eax, ecx
setl dl
mov dword [ebp - 0x30], edx
xor edx, edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
lea ecx, [ebp - 0x1f0]
setl dl
xor eax, eax
cmp edx, 0x9beb
setge al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
call fcn.10001e44
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x2c], 0xb110c93b
mov dword [ebp - 0x28], 0xfffffffc
push 3
call fcn.10001eb9
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x1c], ebx
jmp 0x1003670c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100366f9
mov dword [ebp - 0x2c], 8
jmp 0x1003682a
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x1c], 0xfffffffe
cmp dword [ebp - 0x1c], 0x10
jg 0x10036827
mov ecx, dword [ebp - 0x11c]
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x18], 0x12d2c87
imul eax, dword [ebp - 0x18], 7
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xa6c9cd49
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x2c]
sbb esi, esi
sub edx, dword [ebp - 0x2c]
inc esi
imul esi, eax
neg edx
mov eax, dword [ebp - 0x18]
sbb edx, edx
inc edx
mov dword [ecx + 8], esi
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x18]
setge cl
add edx, ecx
imul ecx, edx, 0xb1a7
xor edx, edx
cmp ecx, eax
setle dl
imul edx, dword [ebp - 0x2c]
test edx, edx
jne 0x100367c2
cmp dword [ebp - 0x18], ebx
jne 0x100367c2
mov dword [ebp - 0x3c], 0x4ddc8777
mov dword [ebp - 0x18], ebx
jmp 0x100367af
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100367a0
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
jmp 0x10036814
push 1
lea ecx, [ebp - 0x15c]
call fcn.10001eb9
mov dword [ebp - 0x24], ebx
jmp 0x100367e4
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x15c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x100367d4
mov dword [ebp - 0x18], ebx
jmp 0x10036804
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x3c], 0x80090ae7
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100367ef
lea ecx, [ebp - 0x15c]
call fcn.10001f3c
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
mov ecx, dword [ebp - 0x40]
jle 0x1003673f
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 7
jl 0x1003671e
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0xd
call fcn.10001f3c
push 0x5c
pop eax
mov word [ebp - 0x74], ax
xor eax, eax
mov byte [ebp - 0x78], bl
mov byte [ebp - 0x77], 0x1d
mov word [ebp - 0x72], ax
mov dword [ebp - 0x38], 0x746b
cmp dword [ebp - 0x38], 0x7630
jle 0x100368c9
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
add eax, esi
add eax, ebx
and eax, ecx
mov ecx, 0x10078fb8
cdq
push edx
push eax
call fcn.10001d2f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x7e49
jl 0x1003687f
inc esi
push 0
pop ebx
cmp esi, 0x33c9
jl 0x10036877
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x1871
jl 0x10036875
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x435f
jl 0x10036872
mov dword [ebp - 0x3c], 0x39b642c7
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x38], 0x72fe
jge 0x1003690d
mov edx, str.czjotjoi_usmseq_qqadia_lmyziitb_vhdhhih_yums_ofymln_udtbj_ddx_jde_eowx_hikorbz_ptmh
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x1003690d
mov dword [ebp - 4], 0xd
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1003692a
push ebx
push 0x1232
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1003693e
push 0x832
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
mov dword [ebp - 0x13c], 7
mov word [ebp - 0x150], ax
lea ecx, [ebp - 0x150]
lea eax, [ebp - 0x74]
mov dword [ebp - 0x140], ebx
push eax
call fcn.10009def
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x2c], 0xf1448112
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10036992
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0x99244325
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10036984
mov dword [ebp - 0x18], ebx
jmp 0x100369ae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003699d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
neg eax
je 0x100369d3
cmp dword [ebp - 0x68], ebx
je 0x100369d3
xor eax, eax
inc eax
jmp 0x100369d5
mov eax, ebx
mov ecx, 0xf29c8dda
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, 3
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
inc edx
mov eax, dword [ebp - 0x68]
xor ecx, ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x34], 0x54f8d36f
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa4]
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x3c], 0x364f2ca1
jle 0x10036a4e
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1c], eax
je 0x10036a5b
cmp dword [ebp - 0x2c], ebx
jne 0x10036a62
mov eax, ebx
cmp dword [ebp - 0x70], ebx
je 0x10036a64
mov eax, edx
xor ecx, ecx
shl eax, 3
cmp eax, 0x39bb
setle cl
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x34], ebx
jmp 0x10036abd
mov dword [ebp - 0x3c], 0x6bbbd28a
mov dword [ebp - 0x30], 0x33dc28bf
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jne 0x10036aab
mov eax, dword [ebp - 0x34]
mov esi, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x68]
jmp 0x10036aad
mov esi, ebx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp esi, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x19
jle 0x10036a79
mov dword [ebp - 0x28], 0x2de
cmp dword [ebp - 0x28], 0x628
jle 0x10036b19
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x268]
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036af2
mov eax, dword [eax]
push eax
call fcn.10045794
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.1000224a
inc edi
cmp edi, 0x55a8
jl 0x10036ad7
inc esi
cmp esi, 0x207c
jl 0x10036ad5
mov byte [ebp - 0x1d], bl
cmp dword [ebp - 0x28], 0x1a4
jge 0x10036b30
push str.tgcjzmgu_smfq_jau_tjgwhbxh_womx_fykh_yods_vxvewcu_rhrp_cyxusgad_emf_puefhct_mjldjc
call fcn.10045794
pop ecx
mov dword [ebp - 4], 0x11
cmp byte [ebp - 0x1d], 0
je 0x10036b48
push 0x164c
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, ebx
mov dword [ebp - 0x24], ebx
cmp esi, 2
jae 0x10036c08
mov dword [ebp - 0x38], 0x1f37
cmp dword [ebp - 0x38], 0x209d
jle 0x10036bdd
mov dword [ebp - 0x30], ebx
mov ecx, ebx
mov dword [ebp - 0x28], 0x7b6d
mov dword [ebp - 0x1c], ecx
mov esi, ebx
mov edi, ebx
mov eax, edi
or eax, esi
or eax, ecx
lea ecx, [ebp - 0x298]
cdq
push edx
push eax
call fcn.10001a85
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036b97
mov eax, dword [eax]
push eax
call fcn.10045794
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.1000224a
mov ecx, dword [ebp - 0x1c]
inc edi
cmp edi, 0x5476
jl 0x10036b79
inc esi
cmp esi, 0x5121
jl 0x10036b77
mov esi, dword [ebp - 0x30]
add ecx, esi
dec dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
jne 0x10036b75
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x7e14
jl 0x10036b69
mov esi, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x38], 0x1cc8
mov word [ebp + esi*2 - 0x74], ax
jge 0x10036bf8
push str.waa_xyaqn_lqmqge_rwol_zkjgn_pevnywof_sdpyx_vxnevx_gnmszdclq_ncl
call fcn.10045794
pop ecx
inc esi
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x24], esi
jmp 0x10036b4d
push 0x5f
pop eax
push 2
pop esi
push 7
mov byte [ebp - 0x4c], bl
mov ecx, ebx
mov dword [ebp - 0x4b], 0x806004f4
mov word [ebp - 0x47], 0xd26e
mov word [ebp - 0x44], ax
pop edi
cmp esi, 2
jne 0x10036c33
push 5
pop ecx
push ecx
pop esi
jmp 0x10036c5a
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx eax, word [ebp + eax*2 - 0x44]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
add esi, 2
cmp esi, edi
jb 0x10036c27
xor eax, eax
mov word [ebp - 0x42], ax
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x28], 0xfc36fe5a
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10036c9b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x228], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10036c8a
mov dword [ebp - 0x24], ebx
jmp 0x10036ce9
mov dword [ebp - 0x3c], 1
lea ecx, [ebp - 0x198]
push 1
call fcn.10001eb9
mov dword [ebp - 0x1c], ebx
jmp 0x10036cd2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], 0xcefa9d19
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10036cbf
inc dword [ebp - 0x28]
lea ecx, [ebp - 0x198]
call fcn.10001f3c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xc
jle 0x10036ca6
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x1d8]
xor eax, eax
mov dword [ebp - 0x1c4], edi
mov word [ebp - 0x1d8], ax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x1c8], ebx
call fcn.10009def
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x44], ebx
push dword [ebp - 0x140]
cmp dword [ebp - 0x13c], 8
lea eax, [ebp - 0x150]
push ebx
cmovae eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x1f0]
push eax
call fcn.10009e77
cmp eax, 0xffffffff
je 0x10036d63
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1d8]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1f0]
call fcn.10004215
jmp 0x10036d1d
push 2
lea ecx, [ebp - 0x128]
call fcn.10001eb9
push 0xfffffffffffffffa
pop esi
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x30], esi
push 3
call fcn.10001eb9
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x3c], 0x7666
mov dword [ebp - 0x40], esi
push 3
call fcn.10001eb9
mov dword [ebp - 0x18], ebx
jmp 0x10036dba
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xe469ad59
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10036da7
mov dword [ebp - 0x18], ebx
jmp 0x10036dd6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x238], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10036dc5
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10036df7
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0xab462a77
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036de4
mov dword [ebp - 0x18], ebx
jmp 0x10036e14
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0x9fa18394
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036e01
mov esi, dword [ebp - 0x128]
inc dword [esi + 4]
mov edx, dword [esi + 4]
cmp edx, dword [ebp - 0x30]
je 0x10036e33
test edx, edx
je 0x10036e33
xor ecx, ecx
inc ecx
jmp 0x10036e35
mov ecx, ebx
xor eax, eax
cmp ecx, 0x6a6c
setle al
xor ecx, ecx
cmp eax, edx
setle cl
imul ecx, edx
sub ecx, dword [ebp - 0x234]
mov eax, dword [ebp - 0xb4]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [esi + 4]
add ecx, 0xcf0a
mov dword [eax + 4], ecx
xor eax, eax
cmp ecx, 0xd018
setle al
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
mov edi, dword [ebp - 0xb4]
je 0x10036e89
cmp dword [edi], ebx
je 0x10036e89
xor ecx, ecx
inc ecx
jmp 0x10036e8b
mov ecx, ebx
xor eax, eax
cmp ecx, 9
setle al
xor ecx, ecx
imul eax, eax, 0xdb5a
cmp eax, 0x28e
setl cl
xor edx, edx
cmp ecx, 0xcdee
setg dl
xor eax, eax
cmp dword [esi + 4], edx
setge al
cmp eax, dword [esi + 4]
jg 0x10036ec3
cmp dword [edi], ebx
jne 0x10036ec3
mov ecx, ebx
jmp 0x10036ec6
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x128]
mov eax, dword [eax]
imul eax, ecx
cmp eax, dword [ebp - 0x3c]
jg 0x10036ee6
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 8], ebx
je 0x10036ee6
xor eax, eax
inc eax
jmp 0x10036ee8
mov eax, ebx
mov ecx, 0xcd1ac8c6
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18c]
lea ecx, [ebp - 0x18c]
setle dl
mov dword [eax + 4], edx
call fcn.10001f3c
lea ecx, [ebp - 0xb4]
call fcn.10001f3c
lea ecx, [ebp - 0x128]
mov byte [ebp - 4], 0x16
call fcn.10001f3c
mov ecx, dword [ebp - 0x7c]
lea eax, [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x1c0]
call fcn.100371f3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d8]
call fcn.100023b6
push ebx
push 1
lea ecx, [ebp - 0x150]
call fcn.100023b6
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.100023b6
push ebx
push 1
lea ecx, [ebp - 0x1c0]
call fcn.100023b6
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x7c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret