Function at 0x10039f6a
Capabilities:
Encrypt data using speck
Get file attributes

Disassembly:
mov eax, 0x1005eb7c
call fcn.1005d528
sub esp, 0x204
cmp byte [ebp + 8], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
je 0x1003afff
mov ecx, dword [ebp + 0x18]
or esi, 0xffffffff
mov dword [ebp - 0x18], 0x9519
xor ebx, ebx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x1c], 0x3b2c57e7
mov dword [ebp - 0x24], 0x18144871
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x14], ebx
jmp 0x10039fc8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 0x2b441a62
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10039fb7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
test eax, eax
je 0x1003a002
mov eax, dword [ebp - 0x18]
mov eax, 0x6840eb44
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1003a002
xor eax, eax
inc eax
jmp 0x1003a004
mov eax, ebx
xor ecx, ecx
cmp eax, 0x56c37fc0
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
push 0
setl dl
add edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
pop eax
setl dl
sub edx, 0x193208af
neg edx
sbb edx, edx
inc edx
setns al
sub eax, 0x68906353
cmp eax, 0xfffc
jae 0x1003a093
mov dword [ebp - 0x14], 0xfffffffb
cmp dword [ebp - 0x14], ebx
jne 0x1003a069
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
xor ecx, ecx
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
cmp eax, 0x5e60d1f
mov eax, dword [ebp - 0x24]
setne cl
inc eax
add eax, ecx
mov dword [ebp - 0x20], eax
jmp 0x1003a0c7
mov dword [ebp - 0x14], 0x11e745c5
mov dword [ebp - 0x1c], ebx
jmp 0x1003a0c1
mov dword [ebp - 0x18], 0xdbc8b697
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x94]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe8
je 0x1003a09f
xor edi, edi
lea ecx, [ebp - 0x100]
inc edi
push edi
call fcn.1000a704
mov dword [ebp - 4], ebx
lea edx, [ebp - 0x44]
mov dword [ebp - 0x38], edi
push ecx
mov dword [ebp - 0x2c], esi
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xb4], 0x64e4
mov dword [ebp - 0xd8], 0xb132dc1b
push 0x775
call fcn.1003c274
mov dword [ebp - 0x1c], 0x3840
cmp dword [ebp - 0x1c], 0x3b94
pop ecx
pop ecx
jle 0x1003a1a8
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov esi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, esi
mov dword [ebp - 0x18], ebx
mov edx, eax
mov esi, ebx
shl edx, cl
mov dword [ebp - 0x20], edx
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x198]
xor eax, edx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a158
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x198]
call fcn.1000aac7
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x6745
jl 0x1003a13a
inc esi
cmp esi, 0x4bda
jl 0x1003a135
mov esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x1aa0
jl 0x1003a127
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x1ff1
jl 0x1003a122
cmp dword [ebp - 0x1c], 0x379e
jge 0x1003a1bc
push str.dujbxgth_flzhf_qkah
call fcn.10046acc
pop ecx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x44], ebx
jmp 0x1003a1d5
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x98], 0x24b2e809
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 1
jl 0x1003a1c4
xor edi, edi
mov dword [ebp - 0x38], ebx
inc edi
cmp dword [ebp - 0x38], ebx
jl 0x1003a375
mov dword [ebp - 0xf4], 0xb296ad98
mov dword [ebp - 0x18], 0x75b1
cmp dword [ebp - 0x18], 0x77df
jle 0x1003a250
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
xor eax, esi
lea ecx, [ebp - 0x1c8]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a225
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1c8]
call fcn.1000aac7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x72b7
jl 0x1003a20b
inc esi
cmp esi, 0x2444
jl 0x1003a206
mov dword [ebp - 0xe0], 0x3f559cde
cmp dword [ebp - 0x18], 0x7481
jge 0x1003a26e
push str.cbdzadt_ckmbh_cvhkv_rjnfwby_aneqmiqsk_nhuimnmsx_ggvwgodn_nfhosqw_lgpiqvcgf_doemuodjq_tqf_hxkcpx_vannsdkc_zsdtwch
call fcn.10046acc
pop ecx
mov dword [ebp - 4], ebx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x100]
cmp dword [eax + ecx*4], ebx
je 0x1003a2a3
push edi
lea eax, [ebp - 0x2c]
mov dword [ebp - 0xc4], 0x1fc3eee2
push eax
push ecx
lea eax, [ebp - 0xc4]
push eax
call fcn.10037dc4
add esp, 0x10
jmp 0x1003a36d
mov dword [ebp - 0x74], 0x70ab227d
mov dword [ebp - 0xcc], 0xeabf554
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0x2c], ebx
jmp 0x1003a319
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x100]
mov ecx, dword [eax + ecx*4]
sub ecx, dword [eax + edx*4]
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x74]
cmp eax, 0xa8db
setne cl
xor eax, eax
cmp ecx, 0x2803
setne al
mov dword [ebp - 0x98], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1003a2bf
push ebx
lea eax, [ebp - 0xf4]
push eax
push ecx
push ecx
push 0x34b8
push 0x6353
push ecx
lea eax, [ebp - 0xd0]
push eax
push ecx
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xb4]
push eax
push 0x6dc1
sub esp, 0xc
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0xcc]
call fcn.10037fd0
add esp, 0x44
dec dword [ebp - 0x38]
jmp 0x1003a1e1
or esi, 0xffffffff
lea ecx, [ebp - 0x100]
mov dword [ebp - 4], esi
call fcn.1000a787
mov dword [ebp - 0x54], 0x7004b300
mov word [ebp - 0x50], 0xea1
mov byte [ebp - 0x4e], 0xe6
mov dword [ebp - 0x18], 0x431b
cmp dword [ebp - 0x18], 0x46fe
jle 0x1003a3f6
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x14], ebx
xor eax, esi
lea ecx, [ebp - 0x1f8]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a3c8
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1f8]
call fcn.1000aac7
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x5f90
jl 0x1003a3ae
inc esi
cmp esi, 0x3c0f
jl 0x1003a3a9
or esi, 0xffffffff
mov dword [ebp - 0x20], 0x5b9b55bb
cmp dword [ebp - 0x18], 0x3f47
jge 0x1003a411
push str.mdjqc_nnnvpkjb_qnpss_pvx_fsbbz_ugms_yvf_qtmual_sdiu_helzxyes_sjk_bgyrojgt
call fcn.10046acc
pop ecx
push 2
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], esi
call fcn.1000a704
push ecx
lea eax, [ebp - 0xf0]
mov dword [ebp - 4], 7
push eax
push ecx
mov dword [ebp - 0x14], 0xfffffff6
lea edx, [ebp - 0x120]
push ebx
call fcn.10038624
add esp, 0x10
mov dword [ebp - 0x20], 0x16
push 0x18
pop eax
cmp dword [ebp - 0x20], eax
jg 0x1003a51f
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x1003a510
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x14], 0x6652d0da
mov dword [ebp - 0x14], ebx
jmp 0x1003a498
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x180], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003a48b
mov eax, dword [ebp - 0x120]
xor ecx, ecx
cmp dword [eax], 0xfffe
setne cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
push 0x6dfc
mov dword [ebp - 0x180], eax
lea eax, [ebp - 0x3b]
push eax
push ecx
push 0x3c54
push 0x6549
push 0x37fd
push ecx
push 0x30a1
mov byte [ebp - 0x3b], bl
mov ecx, 0x2a0e
push ebx
call fcn.10038a39
add esp, 0x28
dec dword [ebp - 0x18]
jns 0x1003a471
push 0x18
pop eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1003a45a
xor edi, edi
inc edi
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], esi
call fcn.1000a787
push 0x7c
pop eax
mov word [ebp - 0x48], ax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0xa7ad11e7
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1003a55a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xec], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003a549
mov dword [ebp - 0x1c], ebx
jmp 0x1003a572
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x164], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003a565
mov dword [ebp - 0x20], 0xc
jmp 0x1003a651
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x14], 0xb81fdf20
mov dword [ebp - 0x24], ebx
jmp 0x1003a644
mov eax, dword [ebp - 0x24]
xor edx, edx
mov esi, dword [ebp + eax*4 - 0xec]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xec], esi
mov eax, dword [ebp - 0x20]
cmp eax, 0x1e6e2bfb
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0xcf5a
setg al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
inc edx
cmp esi, eax
mov eax, 0x9ec4
setl cl
sub eax, ecx
cmp eax, edx
jge 0x1003a604
push ebx
mov edx, 0x1cef
mov ecx, 0xeaa
call fcn.1003b351
pop ecx
jmp 0x1003a625
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], edi
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1003a63b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xec], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003a62a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1003a5a1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1a
jg 0x1003a584
mov eax, dword [ebp - 0x18]
mov ecx, ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
push 2
mov dword [ebp - 0x18], eax
pop esi
mov dword [ebp - 0x6c], ecx
cmp esi, 2
jne 0x1003a68d
push 5
pop ecx
push ecx
mov dword [ebp - 0x6c], ecx
pop esi
jmp 0x1003a6c1
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x56]
movzx eax, word [ebp + eax*2 - 0x48]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
push ecx
push ecx
mov word [ebp + eax*2 - 0x48], cx
lea ecx, [ebp - 0x6c]
call fcn.1003b2f1
pop ecx
pop ecx
mov ecx, dword [ebp - 0x6c]
add esi, 2
cmp esi, 7
jb 0x1003a67e
push ecx
mov dword [ebp - 0x24], 0xf6af1124
mov edx, 0x2057
mov ecx, 0x48fa
call fcn.1003b53b
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x16
pop ecx
jl 0x1003a872
push 0x18
pop esi
push dword [ebp - 0xf0]
movdqa xmm0, xmmword [0x1006c2c0]
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x174]
mov dword [ebp - 0x18], 0xfff8
push eax
push ebx
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x10c], ebx
movdqu xmmword [ebp - 0x174], xmm0
mov dword [ebp - 0x108], ebx
mov dword [ebp - 0x104], ebx
call fcn.1000d2d6
mov dword [ebp - 4], 8
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0xffffffea
jmp 0x1003a84c
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x1c], esi
jmp 0x1003a76f
mov byte [ebp - 0x3a], bl
cmp byte [ebp - 0x3a], 0
je 0x1003a76c
push ecx
call fcn.10038c92
pop ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff4
jg 0x1003a75c
mov dword [ebp - 0x1c], 0xf
cmp dword [ebp - 0x1c], 0xffffffe6
jle 0x1003a849
push 3
pop eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 2
jge 0x1003a7a9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x80], 0xbb6bc3ec
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003a792
push 3
pop eax
mov dword [ebp - 0x7c], ebx
jmp 0x1003a833
mov dword [ebp - 0x20], 0x4f98cafa
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1003a7fa
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jl 0x1003a7f5
push ecx
push 0x1737
mov byte [ebp - 0x3c], bl
lea ecx, [ebp - 0x3c]
push 0x3169
mov edx, 0x342c
call fcn.1003962a
add esp, 0xc
dec dword [ebp - 0x14]
jns 0x1003a7cf
push 3
pop eax
dec dword [ebp - 0x20]
jns 0x1003a7c0
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1003a830
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jl 0x1003a82b
push ecx
push 0x1338
push ecx
push 1
mov edx, 0x16d5
call fcn.10038624
add esp, 0x10
dec dword [ebp - 0x14]
jns 0x1003a80d
push 3
pop eax
dec dword [ebp - 0x20]
jns 0x1003a802
inc dword [ebp - 0x7c]
cmp dword [ebp - 0x7c], eax
jle 0x1003a7b1
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
jg 0x1003a789
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xc
jge 0x1003a750
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10c]
call fcn.1000a787
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x16
jge 0x1003a6f1
xor eax, eax
mov cl, 1
push 0x6d43
push 0x5db8
mov word [ebp - 0x46], ax
call fcn.10038763
mov dword [ebp - 0x14], 0x5458
cmp dword [ebp - 0x14], 0x55f6
pop ecx
pop ecx
jle 0x1003a8fa
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
cdq
lea ecx, [ebp - 0x1b0]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003a8c1
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1b0]
call fcn.1000aac7
inc edi
cmp edi, 0x6602
jl 0x1003a8a6
inc esi
cmp esi, 0x5561
jl 0x1003a8a4
push 0x1213
push ebx
push ebx
push 0xeb6
call dword [sym.imp.GDI32.dll_PolyPolygon]
xor eax, eax
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
lea ecx, [ebp - 0x144]
lea eax, [ebp - 0x48]
mov dword [ebp - 0x134], ebx
push eax
call fcn.1000ad0d
mov edx, dword [ebp + 0x10]
lea eax, [ebp - 0x144]
push 9
pop esi
push eax
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], esi
call fcn.10037d44
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x144]
call fcn.1000ae2f
cmp dword [ebp - 0x14], 0x52d7
jge 0x1003a960
push str.zckx_smrpp_mjhrcnad_xob_hgtuqf_vqoc_ublvcg_xsaakz_jpg_vpw_tfteuer
call fcn.10046acc
pop ecx
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x4c], 0xfffffffd
mov dword [ebp - 0x4c], 8
cmp dword [ebp - 0x4c], 0xffffffed
jl 0x1003aa8a
push 1
push 0x66d5
push ecx
push ecx
lea eax, [ebp - 0xd4]
mov dword [ebp - 0xd4], 0xfffffffc
push eax
lea eax, [ebp - 0x4c]
mov dword [ebp - 0xdc], 0xd2d1a4e6
push eax
push ecx
push 0x36da
push ecx
push 0x17ce
push 0xf6a
push 0x662f
push 0x25dd
lea eax, [ebp - 0xdc]
mov edx, 0x7661
push eax
sub esp, 0xc
mov ecx, 0x1428
call fcn.10037fd0
mov dword [ebp - 0x14], 0x7457
add esp, 0x44
cmp dword [ebp - 0x14], 0x7537
jle 0x1003aa28
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x100792f8
xor eax, esi
cdq
push edx
push eax
call fcn.1000a4ec
inc edi
cmp edi, 0x353a
jl 0x1003a9f5
inc esi
cmp esi, 0x605c
jl 0x1003a9f3
push ebx
push 0x23c8
push ebx
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
push 9
pop esi
mov byte [ebp - 0x3d], bl
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x14], 0x7367
jge 0x1003aa71
mov edx, str.gyuilsxgv_pdmkuxmfg_ubbyidx_zzla_jacr_hclnp_sgkbf_fhbcc
mov ecx, 0x100792f8
call fcn.1000c8f5
jmp 0x1003aa71
push ecx
lea ecx, [ebp - 0x3d]
mov dword [ebp - 4], 0xb
call fcn.10039790
dec dword [ebp - 0x4c]
pop ecx
jmp 0x1003a978
push 2
mov word [ebp - 0xb0], si
mov dword [ebp - 0x60], 0x42033200
mov dword [ebp - 0x5c], 0x2903cf49
mov dword [ebp - 0x58], 0x7022d01
pop esi
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x20], esi
cmp esi, 0xc
jae 0x1003aba3
mov dword [ebp - 0x18], 0x7e24
cmp dword [ebp - 0x18], 0x8025
jle 0x1003ab2b
mov ecx, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
and edx, ecx
lea ecx, [ebp - 0x1e0]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1003aaf2
mov eax, dword [eax]
push eax
call fcn.10046acc
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1e0]
call fcn.1000aac7
mov ecx, dword [ebp - 0x14]
inc esi
cmp esi, 0x59ae
jl 0x1003aad1
inc edi
cmp edi, 0x28af
jl 0x1003aacf
inc ecx
mov dword [ebp - 0x14], ecx
cmp ecx, 0x1b9e
jl 0x1003aacd
mov esi, dword [ebp - 0x20]
movzx eax, byte [ebp - 0x60]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1003ab4a
movzx ecx, byte [ebp + esi - 0x60]
dec esi
add esi, ecx
lea eax, [ecx + 1]
mov dword [ebp - 0x64], eax
jmp 0x1003ab9b
cmp dword [ebp - 0x18], 0x7b49
jge 0x1003ab5e
push str.ygvjtth_qliuyqh_urs_pldxuq_ljeq_jgqra_cave_ewxtagv_esjoti_rxm_bnqc
call fcn.10046acc
pop ecx
mov dword [ebp - 4], 0xb
mov eax, esi
sub eax, dword [ebp - 0x64]
movzx edx, byte [ebp + esi - 0x5f]
movzx eax, byte [ebp + eax - 0x62]
movzx eax, word [ebp + eax*2 - 0xb0]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
push ecx
mov word [ebp + eax*2 - 0xb0], cx
lea ecx, [ebp - 0x64]
call fcn.100398c2
pop ecx
add esi, 2
jmp 0x1003aaac
xor eax, eax
mov dword [ebp - 0x148], 7
mov word [ebp - 0xa8], ax
lea ecx, [ebp - 0x15c]
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0xb0]
push eax
mov dword [ebp - 0x14c], ebx
call fcn.1000ad0d
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x18], 0x53b26bdd
push 6
mov dword [ebp - 0x24], 0xfffffff8
pop esi
mov dword [ebp - 0x84], esi
mov dword [ebp - 0x18], ebx
jmp 0x1003ad6c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1003ac15
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c], 0xee28
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003ac04
mov eax, dword [ebp - 0x88]
cmp esi, eax
sbb eax, eax
neg eax
imul eax, eax, 0x88146cdf
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x88]
test eax, eax
je 0x1003ad32
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x12c]
push 3
call fcn.1000a704
mov dword [ebp - 0x14], 0x3b5b0d69
mov dword [ebp - 0x20], ebx
jmp 0x1003ac7d
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x6a9b03be
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003ac6a
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jle 0x1003acb7
cmp dword [ebp - 0x1c], ebx
jne 0x1003acb7
mov ecx, ebx
jmp 0x1003acba
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x12c]
xor edx, edx
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x8c]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x14], 0xfffffff6
cmp dword [ebp - 0x14], 3
jl 0x1003ad25
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
jl 0x1003ad1c
push 2
pop edx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x1003ad17
mov dword [ebp - 0x1c], ebx
jmp 0x1003ad0d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003ad00
dec dword [ebp - 0x20]
jns 0x1003acfb
dec dword [ebp - 0x24]
jns 0x1003acf3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jge 0x1003ace8
lea ecx, [ebp - 0x12c]
call fcn.1000a787
jmp 0x1003ad39
mov dword [ebp - 0x1c], 0x2dcbded6
push 0x49bb
push 0x12b0
push 0x164a
lea eax, [ebp - 0x39]
mov byte [ebp - 0x39], bl
push eax
push ecx
push 0x250b
push 0x8bc
push 1
mov edx, 0x4cc9
call fcn.10038926
add esp, 0x20
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
jle 0x1003abf8
xor eax, eax
lea edi, [ebp - 0xb0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosw word es:[edi], ax
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0xc8], 3
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xa
jge 0x1003af82
push 2
pop edi
mov dword [ebp - 0x30], 0x2d14
lea ecx, [ebp - 0xa4]
push 3
call fcn.1000a704
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x14], ebx
jmp 0x1003add6
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1003adc7
cmp dword [ebp - 0x30], ebx
je 0x1003aeb2
mov dword [ebp - 0x18], 0xffffffff
xor edx, edx
mov dword [ebp - 0x14], 0xce96f8f9
inc edx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1003ae0c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x70], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1003adfe
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], 0xc8d4675
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x70]
sub ecx, esi
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 7
setne al
mov dword [ebp - 0x70], eax
test eax, eax
je 0x1003ae53
mov eax, edx
cmp dword [ebp - 0x14], ebx
jne 0x1003ae55
mov eax, ebx
xor ecx, ecx
cmp eax, 0x3a34
setge cl
xor eax, eax
cmp ecx, 0x3de8
setle al
cmp dword [ebp - 0x28], eax
je 0x1003ae76
mov eax, edx
cmp dword [ebp - 0x18], ebx
jne 0x1003ae78
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0xa4]
add esi, 8
mov dword [esi], edx
mov dword [ebp - 0x18], ebx
jmp 0x1003aeab
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
cmp dword [ebp - 0x70], ebx
jne 0x1003aefc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x1003ae91
jmp 0x1003aefc
push ecx
lea eax, [ebp - 0xc8]
mov dword [ebp - 0x78], 0xffffffff
push eax
push 0x1223
push ecx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x28]
push eax
push ecx
lea eax, [ebp - 0xa4]
push eax
push 1
lea ecx, [ebp - 0x78]
call fcn.10038a39
mov eax, dword [ebp - 0x78]
add esp, 0x28
mov esi, dword [ebp - 0xa4]
add esi, 8
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [esi], eax
mov dword [ebp - 0x34], edi
cmp dword [ebp - 0x34], ebx
jl 0x1003af63
mov dword [ebp - 0x14], ebx
jmp 0x1003af1a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x114], 0x6f056e99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1003af09
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], edx
mov ecx, dword [ebp - 0x30]
add ecx, dword [esi]
mov eax, dword [ebp - 0x110]
imul eax, ecx
cmp eax, 0xbf9cc53a
ja 0x1003af4c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
or ecx, 0xffffffff
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x114], eax
dec dword [ebp - 0x34]
jns 0x1003af04
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0x12
call fcn.1000a787
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xa
push 6
pop esi
jl 0x1003adaa
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xc0]
push 0x18
pop esi
cdq
idiv esi
mov dword [ebp - 0x68], ebx
mov esi, eax
test esi, esi
je 0x1003afd5
sub esp, 0xc
lea eax, [ebp - 0x68]
lea ecx, [ebp - 0xc0]
push eax
push 0x2d25
push 1
lea eax, [ebp - 0x15c]
push eax
push 0xf1e
push 0x156c
call fcn.1003be95
mov eax, dword [ebp - 0x68]
add esp, 0x24
inc eax
mov dword [ebp - 0x68], eax
cmp eax, esi
jb 0x1003af9d
mov ecx, dword [ebp + 0x18]
lea eax, [ebp - 0xc0]
push eax
call fcn.1003c78d
push ebx
push 1
lea ecx, [ebp - 0x15c]
call fcn.1000ae2f
lea ecx, [ebp - 0xc0]
call fcn.1003cc18
jmp 0x1003b029
mov eax, dword [ebp + 0x20]
push 0xffffffffffffffff
push dword [eax]
lea eax, [ebp - 0x210]
push eax
call fcn.1003c66a
push eax
mov ecx, esi
call fcn.1001ae6b
push 0
push 1
lea ecx, [ebp - 0x210]
call fcn.1000ae2f
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret