Function at 0x10035b13
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
mov eax, 0x100567d1
call fcn.10055488
sub esp, 0x2a0
mov dword [ebp - 0x20], 0xfffffffe
mov eax, 0x752bf390
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
push ebx
xor ebx, ebx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x2c], 0xf4d4e209
push esi
push edi
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xfffffff2
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x18c], ebx
jle 0x10035c98
mov dword [ebp - 0x18], ebx
jmp 0x10035b98
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x184], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10035b87
mov dword [ebp - 0x18], ebx
jmp 0x10035bb4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0x5d1cb6a7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10035ba3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035bd3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
mov esi, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x184], esi
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
cmp eax, 0xd549
mov eax, 0xfff9
setle cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
add eax, dword [ebp - 0x8c]
cmp eax, 0x13f5
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x8c]
setg cl
xor edx, edx
cmp esi, ecx
setle dl
sub edx, 0xcaea0a9f
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 1
setl al
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffc
jne 0x10035c49
cmp dword [ebp - 0x28], ebx
je 0x10035c4c
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x20]
push 0
setne cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle bl
xor edx, edx
sub ebx, 8
cmp ebx, eax
mov eax, dword [ebp - 0x140]
pop ebx
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xe446df3
setl al
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff2
jg 0x10035b82
mov dword [ebp - 0x20], ebx
jmp 0x10035cba
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035cb7
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff4
jne 0x10035c9d
mov dword [ebp - 0x60], 0x78040500
mov dword [ebp - 0x5c], 0x52fd1f8
mov dword [ebp - 0x58], 0x603022b
mov dword [ebp - 0x54], 0x13e0333
mov word [ebp - 0x50], 0x40e
mov byte [ebp - 0x4e], 0xd
mov dword [ebp - 0x18], 0x3264
cmp dword [ebp - 0x18], 0x349c
jle 0x10035d6b
mov dword [ebp - 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x2a2b
mov dword [ebp - 0x30], eax
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x28], 0x804
xor eax, edi
lea ecx, [ebp - 0x238]
cdq
push edx
push eax
call fcn.10001ac1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035d2a
mov eax, dword [eax]
push eax
call fcn.1003d266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.1000217e
mov eax, dword [ebp - 0x30]
add edi, esi
dec dword [ebp - 0x28]
jne 0x10035d10
inc esi
cmp esi, 0x29ad
jl 0x10035d07
mov edi, dword [ebp - 0x38]
add eax, edi
dec dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
jne 0x10035d05
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x5a94
jl 0x10035cf9
cmp dword [ebp - 0x18], 0x2ebe
jge 0x10035d7f
push str.kgidkun_bib_clvbwzlq_gpguijj
call fcn.1003d266
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10035d9c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1ec], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10035d8b
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 2
jg 0x10035e1f
mov esi, 0xb4e1265a
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa8], esi
mov dword [ebp - 0xa4], esi
mov dword [ebp - 0xa4], 2
cmp dword [ebp - 0xa4], ebx
jl 0x10035e16
mov dword [ebp - 0x18], 0x44555950
mov dword [ebp - 0x18], ebx
jmp 0x10035e08
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035dfb
push 0x1ade
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1ec]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10035de6
dec dword [ebp - 0xa4]
jns 0x10035dda
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10035db0
push 0x47
pop eax
mov word [ebp - 0xfc], ax
mov eax, 0x62a4b15
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x28], 0x4ac0198a
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x20], 0x13
jmp 0x10035ebe
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x28], 0x3f300457
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
add eax, 0xffaf
jne 0x10035e80
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
dec edx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jne 0x10035ec4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x13
jl 0x10035e5d
push 2
pop edi
mov esi, ebx
xor edx, edx
mov dword [ebp - 0x38], edi
cmp edi, 0x13
jae 0x100363db
mov dword [ebp - 0x18], 0x2121
mov dword [ebp - 0x20], 0xe1c5
mov dword [ebp - 0x2c], 0x667120dd
mov dword [ebp - 0x28], 0xef3b0639
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x10035f13
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setg cl
cmp ecx, 0x1dab
jge 0x10035f3f
cmp dword [ebp - 0x18], ebx
jne 0x10035f3f
mov eax, ebx
jmp 0x10035f42
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x18]
neg edx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, 0xa6ae
setl cl
xor eax, eax
cmp edx, ecx
setle al
cmp eax, dword [ebp - 0x28]
jle 0x10035f81
cmp dword [ebp - 0x28], ebx
jne 0x10035f81
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035fa9
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x10035fa9
mov dword [ebp - 0x28], 0x1c84132d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035fa6
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
dec dword [ebp - 0x28]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10035fc7
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1003603c
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 0xa7275995
push 3
mov dword [ebp - 0x28], 0xffff
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x10036000
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035fef
mov dword [ebp - 0x18], ebx
jmp 0x1003601b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x214], 0x4b25b3b9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003600a
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x28]
movzx eax, byte [ebp + edi - 0x60]
dec edi
add edi, eax
lea esi, [eax + 1]
jmp 0x100363d3
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10036055
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x268], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10036044
mov dword [ebp - 0x24], ebx
jmp 0x1003608a
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], ebx
jl 0x10036087
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10036082
call dword [sym.imp.KERNEL32.dll_GetACP]
dec dword [ebp - 0x30]
jns 0x10036073
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10036060
movzx edx, byte [ebp + edi - 0x5f]
mov eax, edi
sub eax, esi
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0xfc]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x60]
add ecx, edx
mov word [ebp + eax*2 - 0xfc], cx
mov dword [ebp - 0x20], 0xed15de05
mov dword [ebp - 0x80], 0x60d00585
mov dword [ebp - 0x7c], 0x60d00585
mov dword [ebp - 0x78], 0x60d00585
mov dword [ebp - 0x74], 0x60d00585
mov dword [ebp - 0x28], 0x3816
cmp dword [ebp - 0x28], 0x385d
jle 0x10036152
mov edx, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov esi, ebx
mov ecx, esi
mov eax, edi
shl eax, cl
lea ecx, [ebp - 0x25c]
xor eax, edx
cdq
push edx
push eax
call fcn.10001ac1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036119
mov eax, dword [eax]
push eax
call fcn.1003d266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x25c]
call fcn.1000217e
mov edx, dword [ebp - 0x30]
inc esi
cmp esi, 0x9d5
jl 0x100360f9
inc edi
cmp edi, 0x3cb9
jl 0x100360f7
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0x7730
jl 0x100360f5
mov edi, dword [ebp - 0x38]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x28], 0x3439
jge 0x10036169
push str.cejraksqh_iwapge_pvb_kpznb_luwbtuu_patj_khdnmov_ewikyq_vet_wtxnox
call fcn.1003d266
pop ecx
or dword [ebp - 4], 0xffffffff
xor edx, edx
mov dword [ebp - 0x30], 0xfffffffc
inc edx
mov dword [ebp - 0xe0], edx
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x18], ebx
jmp 0x100361a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036194
mov dword [ebp - 0x18], ebx
jmp 0x100361bc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xec], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100361af
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x100361ef
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, ebx
setne cl
xor edx, edx
inc edx
mov dword [ebp - 0x78], ecx
test ecx, ecx
je 0x100361f1
mov eax, edx
mov ecx, 0xffff
cmp ecx, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x45cd
setg al
cmp eax, dword [ebp - 0x20]
jl 0x1003622d
mov dword [ebp - 0x20], ebx
jmp 0x10036222
mov dword [ebp - 0x28], edx
dec dword [ebp - 0x28]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jg 0x10036219
jmp 0x1003635c
mov dword [ebp - 0x34], 0x6422f8dc
mov dword [ebp - 0x20], 2
cmp dword [ebp - 0x20], 0xffffffe5
jge 0x10036359
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10036351
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
mov dword [ebp - 0x84], 0x4b58fe4d
mov eax, dword [ebp - 0x28]
add eax, 0x25e6517a
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
test eax, eax
sets cl
xor eax, eax
cmp ecx, edx
setg al
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0x1078
cmp dword [ebp - 0x2c], 0x128b
jle 0x10036300
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
sar eax, cl
mov ecx, 0x1006e038
xor eax, edi
cdq
push edx
push eax
call fcn.10001e16
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x61d5
jl 0x100362b4
inc esi
cmp esi, 0x43ae
jl 0x100362af
inc edi
cmp edi, 0x1a82
jl 0x100362ad
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
xor edx, edx
inc edx
cmp dword [ebp - 0x24], ebx
jne 0x10036351
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2c], 0x1068
jge 0x10036342
mov edx, str.kcz_tthpf_dyionvl_btbkuqdww
mov ecx, 0x1006e038
call fcn.100037d1
jmp 0x10036342
or dword [ebp - 4], 0xffffffff
xor edx, edx
inc edx
dec dword [ebp - 0x18]
jmp 0x10036252
dec dword [ebp - 0x20]
jmp 0x1003623b
mov edi, dword [ebp - 0x38]
cmp dword [ebp - 0x84], ebx
je 0x100363cc
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xe0]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0xec]
jne 0x10036395
cmp dword [ebp - 0xec], ebx
je 0x10036395
xor edx, edx
inc edx
jmp 0x10036397
mov edx, ebx
mov ecx, dword [ebp - 0xd4]
xor ebx, ebx
mov eax, dword [ebp - 0x80]
cmp ecx, eax
mov eax, dword [ebp - 0xd8]
setge bl
sub ebx, edx
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
inc ecx
je 0x100363ca
xor eax, eax
inc eax
xor ebx, ebx
jmp 0x100363ce
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x78], eax
mov esi, ebx
add edi, 2
jmp 0x10035ec9
mov dword [ebp - 0x18], 0x24a8c6a5
inc edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 0xd3335637
mov dword [ebp - 0x34], 0xbe92e3f9
mov dword [ebp - 0x24], ebx
jmp 0x1003640a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x220], 2
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100363f9
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff3
jne 0x10036460
mov ecx, 0x69f4288a
mov dword [ebp - 0x164], ecx
mov dword [ebp - 0x160], ecx
mov dword [ebp - 0x15c], ecx
mov dword [ebp - 0x158], ecx
mov dword [ebp - 0x20], 0xcb03629a
mov dword [ebp - 0x20], ebx
jmp 0x10036451
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x164], ebx
jne 0x10036457
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10036442
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff3
je 0x1003641e
push 0xfffffffffffffff7
mov dword [ebp - 0x18], 8
pop esi
cmp dword [ebp - 0x18], 0xffffffe6
jg 0x10036522
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x24], 0x1078932
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x24], ebx
jmp 0x100364f3
mov dword [ebp - 0x34], 0x2da8afc1
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x34], 0x8e55a441
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x34], 0x26f39384
mov dword [ebp - 0x2c], 0xe2e4ed
inc dword [ebp - 0x2c]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x100364c3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003651a
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
xor edx, edx
inc edx
dec dword [ebp - 0x18]
jmp 0x1003646a
xor eax, eax
mov word [ebp - 0xee], ax
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x20], 0x495e0e2b
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x10c], esi
mov dword [ebp - 0x108], esi
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x100], esi
mov dword [ebp - 0x2c], 0x7682c5a4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10036574
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x170], 0x6e4944c1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10036563
mov dword [ebp - 0x24], 9
cmp dword [ebp - 0x24], 0x17
jg 0x1003675a
mov dword [ebp - 0x38], 0x29000d4e
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], 0xffffffef
cmp dword [ebp - 0x38], 0xfffffffd
jg 0x10036752
mov dword [ebp - 0x18], 0xc588e1b6
mov dword [ebp - 0x18], ebx
jmp 0x100365ca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x134], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100365b9
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edx
jg 0x100366f0
mov dword [ebp - 0x20], 0xf21009d4
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x100366ac
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10036682
mov dword [ebp - 0x28], 0x2b75
cmp dword [ebp - 0x28], 0x2da3
jle 0x10036652
mov edi, ebx
mov esi, ebx
mov eax, edi
mov ecx, ebx
cdq
idiv esi
mov dword [ebp - 0x2c], ecx
mov eax, edx
mov dword [ebp - 0x34], eax
shl eax, cl
mov ecx, 0x1006e038
cdq
push edx
push eax
call fcn.10001e16
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x5350
jl 0x1003661f
inc esi
cmp esi, 0x8f6
jl 0x10036610
inc edi
cmp edi, 0x5532
jl 0x1003660e
push ebx
push 0x1e7b
push ebx
call dword [sym.imp.GDI32.dll_GetRegionData]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x2a8c
jge 0x1003667e
mov edx, str.weyd_scrf_qpefrady_bpz_twm_kqeyslpy_mkcqrr_foywhzhs
mov ecx, 0x1006e038
call fcn.100037d1
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x20]
jmp 0x100365e6
cmp dword [ebp - 0x24], ebx
je 0x100366b4
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
push 0xfffffffffffffff8
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x20]
sub ecx, 0x23cc
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x134]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
inc edx
jmp 0x100365d3
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x104], 4
mov eax, dword [ebp - 0x24]
add eax, 6
cmp eax, 4
setg cl
imul ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x38]
jg 0x1003671e
mov eax, edx
cmp dword [ebp - 0x18], ebx
jne 0x10036720
mov eax, ebx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x38]
jmp 0x100365a3
inc dword [ebp - 0x24]
jmp 0x10036581
xor eax, eax
mov dword [ebp - 0x190], 7
mov word [ebp - 0x1a4], ax
lea ecx, [ebp - 0x1a4]
lea eax, [ebp - 0xfc]
mov dword [ebp - 0x194], ebx
push eax
call fcn.10024b71
mov dword [ebp - 4], 8
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0xb8], 0xffffffff
push 3
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x100367c9
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1f8], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100367bc
mov dword [ebp - 0xc0], 0xffffffff
cmp dword [ebp - 0xc0], 0xfffffff1
jl 0x100368c5
mov dword [ebp - 0x30], 0x7116
cmp dword [ebp - 0x30], 0x7241
jle 0x10036858
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov dword [ebp - 0x34], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov eax, esi
mov ecx, 0x1006e038
and eax, edi
cdq
push edx
push eax
call fcn.10001e16
inc edi
cmp edi, 0x1cda
jl 0x10036820
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x2cb1
jl 0x10036814
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x284f
jl 0x1003680f
mov dword [ebp - 0x24], 0x485bf25c
mov byte [ebp - 4], 9
cmp dword [ebp - 0x30], 0x6fc3
jge 0x10036899
mov edx, str.arrqdcn_oybvsqfo_ueioitko_nuhe_upjbivkc_wjbmapk_dmlervzry_guwdd_yqcmm
mov ecx, 0x1006e038
call fcn.100037d1
jmp 0x10036899
mov dword [ebp - 4], 8
mov dword [ebp - 0x24], ebx
jmp 0x100368b4
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1f8], ebx
jne 0x100368ba
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x100368a5
dec dword [ebp - 0xc0]
jmp 0x100367d8
xor eax, eax
lea edi, [ebp - 0xfc]
stosd dword es:[edi], eax
xor ecx, ecx
inc ecx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x18], ebx
jmp 0x100368f1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x168], 0xf37d45db
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100368e0
mov dword [ebp - 0x18], ebx
jmp 0x1003690c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x188], 0xa07e4fc2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100368fb
mov dword [ebp - 0x18], 2
jmp 0x1003693c
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10036936
push 0x297
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
je 0x1003691a
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10036959
mov dword [ebp - 0x2c], 0xfffffff9
inc dword [ebp - 0x2c]
dec dword [ebp - 0x18]
jns 0x1003694a
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1d4]
call fcn.1000e82a
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x2c], 0x7fbb
cmp dword [ebp - 0x2c], 0x8399
jle 0x100369a5
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1006e038
and eax, esi
cdq
push edx
push eax
call fcn.10001e16
inc edi
cmp edi, 0x4865
jl 0x10036982
inc esi
cmp esi, 0x5f45
jl 0x10036980
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x2c], 0x7f0d
jge 0x100369df
mov edx, str.haxplzpot_wodoeiqs_zofa_eunhwxkej_icxx_gpkqrjoc_oaemhxx_hlgohnak_fcwca
mov ecx, 0x1006e038
call fcn.100037d1
jmp 0x100369df
push 0x5c
pop eax
mov dword [ebp - 4], 0xb
mov ecx, ebx
push 2
mov dword [ebp - 0x4c], 0x2404aa00
mov word [ebp - 0x48], 0xc9ed
mov byte [ebp - 0x46], 0xc1
mov word [ebp - 0x44], ax
pop esi
cmp esi, 2
jne 0x10036a0f
push 5
pop ecx
push ecx
pop esi
jmp 0x10036a38
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x44]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x10036a03
xor eax, eax
mov dword [ebp - 0x110], 7
mov word [ebp - 0x42], ax
lea ecx, [ebp - 0x124]
mov word [ebp - 0x124], ax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0x114], ebx
call fcn.10024b71
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x34], ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10036a83
push ebx
call dword [sym.imp.USER32.dll_DestroyCursor]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10036a92
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x44], ebx
mov eax, 0x891c5534
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x34], 0x8c66f5a9
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xaed6b657
mov dword [ebp - 0x2c], 0x8531d14
mov dword [ebp - 0x34], 0xf0a9
mov dword [ebp - 0x24], ebx
jmp 0x10036aee
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2a8], 0xfffffffc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10036add
mov dword [ebp - 0x38], ebx
jmp 0x10036b37
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0x34], 0xf307d7c1
mov dword [ebp - 0x34], 0x20e32cf4
mov dword [ebp - 0x24], ebx
jmp 0x10036b2b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x244], 0xab1943c6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10036b1a
dec dword [ebp - 0x2c]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x10
jg 0x10036af9
mov dword [ebp - 0x2c], 0x4fb4
cmp dword [ebp - 0x2c], 0x5306
jle 0x10036b94
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x298]
and eax, edi
cdq
push edx
push eax
call fcn.10001ac1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036b6d
mov eax, dword [eax]
push eax
call fcn.1003d266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.1000217e
inc esi
cmp esi, 0x515e
jl 0x10036b51
inc edi
cmp edi, 0x4b8b
jl 0x10036b4f
push 0x5f
pop eax
push 2
mov dword [ebp - 0x3c], 0xa9016600
mov ecx, ebx
mov word [ebp - 0x40], ax
pop esi
cmp esi, 2
jne 0x10036bb0
push esi
pop ecx
jmp 0x10036bd7
movzx edx, byte [ebp + esi - 0x3b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x3e]
movzx eax, word [ebp + eax*2 - 0x40]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x3c]
mov word [ebp + eax*2 - 0x40], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10036ba7
xor eax, eax
cmp dword [ebp - 0x2c], 0x4df5
mov word [ebp - 0x3e], ax
jge 0x10036bf9
push str.fjtvjomp_haetp_uopg_wnnlqt_gcucflt
call fcn.1003d266
pop ecx
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0x1bc]
xor eax, eax
mov dword [ebp - 0x1a8], 7
mov word [ebp - 0x1bc], ax
lea eax, [ebp - 0x40]
push eax
mov dword [ebp - 0x1ac], ebx
call fcn.10024b71
mov byte [ebp - 4], 0x11
xor edx, edx
mov dword [ebp - 0x20], 0xed15de05
inc edx
mov dword [ebp - 0x70], 0x60d00585
mov dword [ebp - 0x6c], 0x60d00585
mov dword [ebp - 0x68], 0x60d00585
mov dword [ebp - 0x64], 0x60d00585
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0xd0], edx
mov dword [ebp - 0xcc], edx
mov dword [ebp - 0xc8], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x18], ebx
jmp 0x10036c8a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036c79
mov dword [ebp - 0x18], ebx
jmp 0x10036ca1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10036c94
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x10036cd4
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, ebx
setne cl
xor edx, edx
inc edx
mov dword [ebp - 0x68], ecx
test ecx, ecx
je 0x10036cd6
mov eax, edx
mov esi, 0xffff
cmp esi, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x45cd
setg al
cmp eax, dword [ebp - 0x20]
jl 0x10036d0f
mov dword [ebp - 0x20], ebx
jmp 0x10036d07
mov dword [ebp - 0x2c], edx
dec dword [ebp - 0x2c]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jg 0x10036cfe
jmp 0x10036d84
mov dword [ebp - 0x34], 0x6422f8dc
mov dword [ebp - 0x20], 2
jmp 0x10036d7e
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10036d7b
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0xa0], 0x4b58fe4d
mov eax, dword [ebp - 0x2c]
add eax, 0x25e6517a
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
test eax, eax
sets cl
xor eax, eax
cmp ecx, edx
setg al
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jne 0x10036d7b
dec dword [ebp - 0x18]
jns 0x10036d31
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe5
jl 0x10036d1f
cmp dword [ebp - 0xa0], ebx
je 0x10036df4
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0xd0]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x12c]
jne 0x10036dbd
cmp dword [ebp - 0x12c], ebx
je 0x10036dbd
xor edx, edx
inc edx
jmp 0x10036dbf
mov edx, ebx
mov ecx, dword [ebp - 0xc4]
xor ebx, ebx
mov eax, dword [ebp - 0x70]
cmp ecx, eax
mov eax, dword [ebp - 0xc8]
setge bl
sub ebx, edx
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
inc ecx
je 0x10036df2
xor eax, eax
inc eax
xor ebx, ebx
jmp 0x10036df6
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x68], eax
mov edi, ebx
mov dword [ebp - 0x30], ebx
cmp edi, 2
jae 0x10036e8f
mov dword [ebp - 0x28], 0x37e1
cmp dword [ebp - 0x28], 0x39b8
jle 0x10036e64
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x2b92
mov eax, edi
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.10001ac1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036e3c
mov eax, dword [eax]
push eax
call fcn.1003d266
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.1000217e
add edi, esi
dec dword [ebp - 0x2c]
jne 0x10036e22
inc esi
cmp esi, 0x43a2
jl 0x10036e19
mov edi, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x28], 0x3585
mov word [ebp + edi*2 - 0x40], ax
jge 0x10036e7f
push str.ltmxk_lkkkjbdl_ajfjvzqi_yekkd
call fcn.1003d266
pop ecx
inc edi
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x30], edi
jmp 0x10036dfe
mov dword [ebp - 0x30], 0x3ae35568
mov dword [ebp - 0x30], 0xfffffffe
cmp dword [ebp - 0x30], 0x13
jle 0x10036f8d
xor ecx, ecx
mov esi, 0xffff
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0x14
jl 0x10036f7a
push 3
pop edx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10036edb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x208], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10036ece
mov dword [ebp - 0x18], ebx
jmp 0x10036ef7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], 0x167c28ca
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10036ee6
mov dword [ebp - 0x18], ebx
jmp 0x10036f61
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x34], 0xfa8bc07c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x38], ebx
jl 0x10036f5e
mov dword [ebp - 0x28], 0x1c71bc7d
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jl 0x10036f4f
mov dword [ebp - 0x24], 0xc17c7747
mov dword [ebp - 0x24], ebx
jmp 0x10036f45
mov dword [ebp - 0x34], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jle 0x10036f3b
dec dword [ebp - 0x28]
jns 0x10036f2f
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x208]
dec dword [ebp - 0x38]
jns 0x10036f20
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
je 0x10036f01
inc dword [ebp - 0x178]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x14
jge 0x10036ec2
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x13
jg 0x10036eaf
push dword [ebp - 0x114]
cmp dword [ebp - 0x110], 8
lea eax, [ebp - 0x124]
push ebx
cmovae eax, dword [ebp - 0x124]
lea ecx, [ebp - 0x1d4]
push eax
call fcn.10034a1c
cmp eax, 0xffffffff
je 0x10036fd3
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1bc]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1d4]
call fcn.100120b6
jmp 0x10036f8d
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x1d4]
push eax
lea edx, [ebp - 0x1a4]
call fcn.100372cf
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1bc]
call fcn.1000f361
push ebx
push 1
lea ecx, [ebp - 0x124]
call fcn.1000f361
push ebx
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1000f361
push ebx
push 1
lea ecx, [ebp - 0x1a4]
call fcn.1000f361
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x88]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret