Function at 0x100378f9
Capabilities:
Get graphical window text

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f4dd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x1e4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1003868a
mov dword [ebp - 0xbc], 0x38ce
mov dword [ebp - 0x128], str.jngok_indwwiqd_fwrgmuf_jawuwwwlj
cmp dword [ebp - 0xbc], 0x3928
jle 0x100379a4
and dword [ebp - 0x38], 0
jmp 0x10037957
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x778
jge 0x100379a4
and dword [ebp - 0x68], 0
jmp 0x1003796d
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x6a07
jge 0x100379a2
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x68]
cdq
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], edx
push dword [ebp - 0x15c]
push dword [ebp - 0x160]
mov ecx, 0x10079b38
call fcn.10006e46
jmp 0x10037966
jmp 0x10037950
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x144], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0xbc], 0x3647
jge 0x100379cd
mov edx, dword [ebp - 0x128]
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x100379e9
or dword [ebp - 4], 0xffffffff
jmp 0x100379f3
lea eax, [ebp + 8]
mov dword [ebp - 0x120], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x154]
movzx eax, byte [eax]
test eax, eax
je 0x10037a6a
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [eax], 0xffffffe3
jmp 0x10037a46
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x40]
mov dword [ecx], eax
mov eax, dword [ebp - 0x40]
cmp dword [eax], 0xffffffed
jl 0x10037a65
mov dword [ebp - 0x13c], 0x3c61c71b
cmp dword [ebp - 0x13c], 0
je 0x10037a63
jmp 0x10037a65
jmp 0x10037a3b
jmp 0x10038688
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x104], 0x3bf4
mov dword [ebp - 0x14c], str.zqno_rupcbb_nhiae
cmp dword [ebp - 0x104], 0x3f7a
jle 0x10037b1e
push 0x15da
call dword [sym.imp.USER32.dll_SetFocus]
and dword [ebp - 0x80], 0
jmp 0x10037ab7
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x475
jge 0x10037b1e
and dword [ebp - 0x48], 0
jmp 0x10037acd
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x6b50
jge 0x10037b1c
and dword [ebp - 0x70], 0
jmp 0x10037ae3
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x7e0c
jge 0x10037b1a
mov eax, dword [ebp - 0x80]
xor eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x70]
cdq
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], edx
push dword [ebp - 0x168]
push dword [ebp - 0x16c]
mov ecx, 0x10079b38
call fcn.10006e46
jmp 0x10037adc
jmp 0x10037ac6
jmp 0x10037ab0
mov dword [ebp - 4], 2
cmp dword [ebp - 0x104], 0x38e4
jge 0x10037b41
mov edx, dword [ebp - 0x14c]
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x10037b5d
or dword [ebp - 4], 0xffffffff
jmp 0x10037b67
mov dword [ebp - 0x12c], 0x4bc662a2
mov dword [ebp - 0x114], 0x6371
mov dword [ebp - 0x84], 0x270e7ad5
push 4
lea ecx, [ebp - 0x98]
call fcn.10001cd0
mov dword [ebp - 4], 4
mov dword [ebp - 0xb8], 1
mov dword [ebp - 0x164], 0x85d0
mov dword [ebp - 0x138], 0xfffffffe
mov dword [ebp - 0x1a8], 0x657a
mov dword [ebp - 0x1a4], 0x657a
mov dword [ebp - 0x1a0], 0x657a
mov dword [ebp - 0x19c], 0x657a
mov dword [ebp - 0x30], 0
jmp 0x10037bef
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10037c0b
push dword [ebp - 0x30]
lea ecx, [ebp - 0x98]
call fcn.10001d6f
mov dword [eax], 0x223dec99
jmp 0x10037be8
push 0x42c8
push 0
lea eax, [ebp - 0x84]
push eax
push 0x714
push 0x75c5
push 0x1306
push 1
push 0x7599
push 0x6301
lea eax, [ebp - 0x114]
push eax
push 0x1674
push 0x565e
push 0xf32
push 0x7836
push 0x2a81
lea eax, [ebp - 0x12c]
push eax
push 0x4e27
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0xb8]
push eax
call fcn.100359b2
add esp, 0x4c
cmp dword [ebp - 0x84], 0
jne 0x10037dec
push 2
lea ecx, [ebp - 0x98]
call fcn.10001d6f
cmp dword [eax], 0
jbe 0x10037ca7
mov eax, 0xe7baa9d7
test eax, eax
jne 0x10037ca7
and dword [ebp - 0x17c], 0
jmp 0x10037cb1
mov dword [ebp - 0x17c], 1
push 2
lea ecx, [ebp - 0x98]
call fcn.10001d6f
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x138]
jg 0x10037cd8
mov dword [ebp - 0xa8], 1
jmp 0x10037cdf
and dword [ebp - 0xa8], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x1a8]
imul esi, dword [ebp - 0xa8]
push 3
lea ecx, [ebp - 0x98]
call fcn.10001d6f
cmp esi, dword [eax]
jle 0x10037d10
mov dword [ebp - 0xfc], 1
jmp 0x10037d17
and dword [ebp - 0xfc], 0
push 3
lea ecx, [ebp - 0x98]
call fcn.10001d6f
mov ecx, dword [ebp - 0xfc]
cmp ecx, dword [eax]
jne 0x10037d47
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a8], 0
jne 0x10037d47
and dword [ebp - 0xa4], 0
jmp 0x10037d51
mov dword [ebp - 0xa4], 1
mov eax, dword [ebp - 0xa4]
dec eax
imul esi, eax, 0x1153
push 2
lea ecx, [ebp - 0x98]
call fcn.10001d6f
cmp esi, dword [eax]
jge 0x10037d7b
mov dword [ebp - 0xd8], 1
jmp 0x10037d82
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0xd8]
je 0x10037d9c
mov dword [ebp - 0xb0], 1
jmp 0x10037da3
and dword [ebp - 0xb0], 0
imul eax, dword [ebp - 0xb0], 0x5412
cmp eax, 1
ja 0x10037dbe
mov dword [ebp - 0xf0], 1
jmp 0x10037dc5
and dword [ebp - 0xf0], 0
push 2
lea ecx, [ebp - 0x98]
call fcn.10001d6f
mov ecx, dword [ebp - 0xf0]
mov dword [eax], ecx
mov eax, 0xffff
test eax, eax
jne 0x10037dec
and dword [ebp - 0x140], 0
jmp 0x10037df6
mov dword [ebp - 0x140], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a8]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0xb8], 0xbc6c2db6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.10001d53
mov eax, dword [0x100a9e60]
and eax, 1
jne 0x10037e59
mov eax, dword [0x100a9e60]
or eax, 1
mov dword [0x100a9e60], eax
mov dword [ebp - 4], 5
mov ecx, 0x100a9e20
call fcn.10020436
push 0x1005f97a
call fcn.10046013
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x194], eax
lea eax, [ebp - 0x1c8]
push eax
mov ecx, 0x100a9e20
call fcn.100204ed
push eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x1d0]
push eax
mov ecx, 0x100a9e20
call fcn.10020504
mov ecx, eax
call fcn.10020423
movzx eax, al
test eax, eax
je 0x10037ec7
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x148], eax
lea eax, [ebp - 0x148]
push eax
mov ecx, 0x100a9e20
call fcn.1003f240
mov ecx, dword [ebp - 0xf4]
mov al, byte [eax]
mov byte [ecx], al
jmp 0x10038698
mov dword [ebp - 0x1c], 1
and dword [ebp - 0x1bc], 0
and dword [ebp - 0x1b8], 0
and dword [ebp - 0x1b4], 0
and dword [ebp - 0x1b0], 0
lea ecx, [ebp - 0x89]
call fcn.10001d7e
push eax
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea ecx, [ebp - 0x1dc]
call fcn.10001d81
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x110]
call fcn.10001d2d
mov dword [ebp - 4], 6
mov dword [ebp - 0x88], 0xcb667f5a
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x1c], 0
jmp 0x10037f4a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x18
jle 0x1003825d
mov dword [ebp - 0xf8], 0x812c005d
mov dword [ebp - 0xa0], 0xd9532955
mov dword [ebp - 0x50], 0
jmp 0x10037f78
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10037f8b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x58], 0xfe1ca29
jmp 0x10037f71
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x58], 0
jmp 0x10037fb0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x58]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 3
jg 0x10038258
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0x150], 8
mov dword [ebp - 0xac], 0x6bc6
mov dword [ebp - 0x188], str.rknlcyc_tvqhgzrz_uoliiqaab_exslho_wwt_amezkp_szn_jlhckohl_ldcew_zuovykv_xxkozglo_irr_yjbgelg_flxje
cmp dword [ebp - 0xac], 0x6bf1
jle 0x10038097
push 0x1e45
call dword [sym.imp.KERNEL32.dll_IsValidCodePage]
and dword [ebp - 0x34], 0
jmp 0x10038011
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x7b8a
jge 0x10038097
and dword [ebp - 0x7c], 0
jmp 0x10038027
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x7092
jge 0x10038092
and dword [ebp - 0x60], 0
jmp 0x1003803d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1206
jge 0x10038090
and dword [ebp - 0x78], 0
jmp 0x10038053
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x7633
jge 0x1003808e
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x78]
and eax, dword [ebp - 0x34]
cdq
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], edx
push dword [ebp - 0x174]
push dword [ebp - 0x178]
mov ecx, 0x10079b38
call fcn.10006e46
jmp 0x1003804c
jmp 0x10038036
jmp 0x10038020
jmp 0x1003800a
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x110]
call fcn.10001d6f
mov dword [ebp - 0xe0], 1
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x1c]
jg 0x100380cd
mov dword [ebp - 0xc0], 1
jmp 0x100380d4
and dword [ebp - 0xc0], 0
push 2
lea ecx, [ebp - 0x110]
call fcn.10001d6f
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc0]
jl 0x100380f7
mov dword [ebp - 0x100], 1
jmp 0x100380fe
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x88], eax
mov esi, dword [ebp - 0x88]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x110]
call fcn.10001d6f
imul esi, dword [eax]
cmp esi, 0x7b6fe6d3
jle 0x1003813c
mov dword [ebp - 0xc8], 1
jmp 0x10038143
and dword [ebp - 0xc8], 0
mov esi, dword [ebp - 0x1c]
push 0
lea ecx, [ebp - 0x110]
call fcn.10001d6f
mov ecx, dword [ebp - 0xc8]
imul ecx, dword [eax]
cmp ecx, esi
jge 0x1003817b
push 1
lea ecx, [ebp - 0x110]
call fcn.10001d6f
cmp dword [eax], 0
jne 0x1003817b
and dword [ebp - 0x170], 0
jmp 0x10038185
mov dword [ebp - 0x170], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xe8], eax
mov esi, dword [ebp - 0xe8]
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x58]
lea ecx, [ebp - 0x110]
call fcn.10001d6f
cmp esi, dword [eax]
jne 0x100381d2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x58], 0
je 0x100381d2
mov dword [ebp - 0xd0], 1
jmp 0x100381d9
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xf8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp + eax - 0x58]
mov dword [ebp - 0xa0], ecx
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x150], eax
mov byte [ebp - 4], 7
cmp dword [ebp - 0xac], 0x68d6
jge 0x10038227
mov edx, dword [ebp - 0x188]
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x10038243
mov dword [ebp - 4], 6
jmp 0x10038253
jmp 0x10037f9b
jmp 0x10037f43
mov dword [ebp - 0xb4], 0x1534
mov dword [ebp - 0x158], str.wfexdsdo_ibccgrtfx_wbby_corngxo_muqcji_dzdtr_fvpkel_wwb_nghl_pam_xeywgsjaa_dhaykqhou
cmp dword [ebp - 0xb4], 0x1648
jle 0x100382d9
and dword [ebp - 0x3c], 0
jmp 0x1003828a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x3986
jge 0x100382d9
and dword [ebp - 0x44], 0
jmp 0x100382a0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x4ae7
jge 0x100382d7
mov eax, dword [ebp - 0x3c]
cdq
idiv dword [ebp - 0x44]
mov eax, edx
cdq
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x180], edx
push dword [ebp - 0x180]
push dword [ebp - 0x184]
mov ecx, 0x10079b38
call fcn.10006e46
jmp 0x10038299
jmp 0x10038283
mov byte [ebp - 0x22], 0
movzx eax, byte [ebp - 0x22]
test eax, eax
je 0x100382f7
push 0x86b
push 0
push 0x1851
call dword [sym.imp.USER32.dll_GetWindowTextA]
mov byte [ebp - 4], 9
cmp dword [ebp - 0xb4], 0x1303
jge 0x10038317
mov edx, dword [ebp - 0x158]
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x10038333
mov dword [ebp - 4], 6
jmp 0x10038343
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.10001d53
mov eax, dword [ebp - 0x4c]
push dword [eax]
lea eax, [ebp - 0x1f4]
push eax
call fcn.1003548f
pop ecx
pop ecx
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x134], eax
mov dword [ebp - 4], 0xb
mov ecx, dword [ebp - 0x134]
call fcn.10006e26
mov al, byte [eax]
mov byte [ebp - 0x15], al
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f4]
call fcn.1000ca4b
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x118]
push eax
mov ecx, 0x100a9e20
call fcn.1003f240
mov cl, byte [ebp - 0x15]
mov byte [eax], cl
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x20], 0xa2215256
mov dword [ebp - 0x5c], 0
jmp 0x100383dc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x100383ef
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x28], 1
jmp 0x100383d5
mov dword [ebp - 0x14], 1
cmp dword [ebp - 0x14], 0
je 0x1003840e
cmp dword [ebp - 0x14], 0
je 0x1003840e
mov dword [ebp - 0xc4], 1
jmp 0x10038415
and dword [ebp - 0xc4], 0
imul eax, dword [ebp - 0x14], 0xfffffffc
cmp eax, dword [ebp - 0x14]
jle 0x1003842a
mov dword [ebp - 0x9c], 1
jmp 0x10038431
and dword [ebp - 0x9c], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x1003844f
cmp dword [ebp - 0x14], 0
jne 0x1003844f
and dword [ebp - 0xcc], 0
jmp 0x10038459
mov dword [ebp - 0xcc], 1
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xcc]
jle 0x10038473
mov dword [ebp - 0xd4], 1
jmp 0x1003847a
and dword [ebp - 0xd4], 0
cmp dword [ebp - 0xd4], 0
jl 0x1003848f
mov dword [ebp - 0xdc], 1
jmp 0x10038496
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0xdc]
neg eax
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1cc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0x5f88
jg 0x100384e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
je 0x100384e7
mov dword [ebp - 0xe4], 1
jmp 0x100384ee
and dword [ebp - 0xe4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe4]
mov dword [ebp + eax - 0x28], ecx
mov dword [ebp - 0x14], 0
jmp 0x1003850e
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003867b
mov dword [ebp - 0xec], 0x39b
mov dword [ebp - 0x11c], str.booctxgmv_iatrpl_iaeu_rxgtxq_xtgu_wmngkof
cmp dword [ebp - 0xec], 0x458
jle 0x10038591
and dword [ebp - 0x64], 0
jmp 0x10038545
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x49ed
jge 0x10038591
and dword [ebp - 0x6c], 0
jmp 0x1003855b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x6bab
jge 0x1003858f
mov eax, dword [ebp - 0x64]
xor eax, dword [ebp - 0x6c]
cdq
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], edx
push dword [ebp - 0x18c]
push dword [ebp - 0x190]
mov ecx, 0x10079b38
call fcn.10006e46
jmp 0x10038554
jmp 0x1003853e
mov byte [ebp - 0x21], 0
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0xec], 0x224
jge 0x100385b8
mov edx, dword [ebp - 0x11c]
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x100385d4
or dword [ebp - 4], 0xffffffff
jmp 0x100385de
push 0
push 0x4645
push 0x6d3d
lea eax, [ebp - 0x21]
push eax
push 0x865
push 0x3b5f
push 1
push 0x6351
push 0x7f94
call fcn.10036ad0
add esp, 0x24
mov dword [ebp - 0x20], 0
jmp 0x1003861c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x10038676
mov dword [ebp - 0x74], 9
mov dword [ebp - 0x74], 0
jmp 0x10038639
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jl 0x10038674
mov dword [ebp - 0x2c], 0x15fb26c
mov dword [ebp - 0x2c], 0
jmp 0x10038656
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10038672
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x28], 0
je 0x10038668
jmp 0x10038672
cmp dword [ebp - 0x2c], 0
je 0x10038670
jmp 0x1003864f
jmp 0x1003864f
jmp 0x10038632
jmp 0x10038615
jmp 0x10038507
mov eax, dword [ebp - 0xf4]
mov cl, byte [ebp - 0x15]
mov byte [eax], cl
jmp 0x10038698
jmp 0x10038698
push 0x352f
push 0
call fcn.1003545c
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret