Function at 0x1002c664
Capabilities:
Allocate thread local storage
Clear file content
Enumerate gui resources
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100594d5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xd0c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x114], 0x24f84b81
mov dword [ebp - 0x7a8], 0xffffffff
mov dword [ebp - 0x310], 0xe21a
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0x3d4], 0x28be
mov dword [ebp - 0x8d4], str.rfdnovzxg_cnc_rxoxx
cmp dword [ebp - 0x3d4], 0x28c8
jle 0x1002c749
and dword [ebp - 0x1ac], 0
jmp 0x1002c6e7
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x6ce2
jge 0x1002c749
and dword [ebp - 0x170], 0
jmp 0x1002c709
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x6fcb
jge 0x1002c747
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 0x7b8], edx
push dword [ebp - 0x7b8]
push dword [ebp - 0x7bc]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x1002c6fc
jmp 0x1002c6da
and dword [ebp - 4], 0
cmp dword [ebp - 0x3d4], 0x2849
jge 0x1002c769
mov edx, dword [ebp - 0x8d4]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x1002c785
or dword [ebp - 4], 0xffffffff
jmp 0x1002c78f
mov dword [ebp - 0x1d0], 0
jmp 0x1002c7a8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x1002c7c4
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xb94], 1
jmp 0x1002c79b
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
je 0x1002c913
mov eax, 0x64fd
test eax, eax
je 0x1002c913
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [ebp + eax - 0xb94]
jle 0x1002c810
mov dword [ebp - 0x6ac], 1
jmp 0x1002c817
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0xfffffff9
jg 0x1002c82c
mov dword [ebp - 0x6c8], 1
jmp 0x1002c833
and dword [ebp - 0x6c8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb94]
cmp eax, dword [ebp - 0x6c8]
jne 0x1002c853
mov dword [ebp - 0x6d0], 1
jmp 0x1002c85a
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0xeaf8
jne 0x1002c872
mov dword [ebp - 0x6d8], 1
jmp 0x1002c879
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x6d8], eax
jg 0x1002c893
mov dword [ebp - 0x6d4], 1
jmp 0x1002c89a
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x6d4], eax
jg 0x1002c8b4
mov dword [ebp - 0x528], 1
jmp 0x1002c8bb
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0xffffffff
jne 0x1002c8d0
mov dword [ebp - 0x6a4], 1
jmp 0x1002c8d7
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x114]
add eax, dword [ebp - 0x6a4]
cmp eax, dword [ebp - 0x144]
je 0x1002c8f7
mov dword [ebp - 0x358], 1
jmp 0x1002c8fe
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 1
jne 0x1002c913
mov dword [ebp - 0x688], 1
jmp 0x1002c91a
and dword [ebp - 0x688], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x688]
mov dword [ebp + eax - 0xb94], ecx
mov dword [ebp - 0x144], 0xffffffe9
jmp 0x1002c945
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x25
jge 0x1002ca07
mov dword [ebp - 0x530], 0x857617c0
cmp dword [ebp - 0x530], 0
je 0x1002c9ea
mov dword [ebp - 0xac0], 6
push 2
lea ecx, [ebp - 0xb34]
call fcn.100013ad
mov dword [ebp - 4], 2
mov dword [ebp - 0x360], 1
mov dword [ebp - 0x178], 0
jmp 0x1002c9aa
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1002c9cc
push dword [ebp - 0x178]
lea ecx, [ebp - 0xb34]
call fcn.10001426
mov dword [eax], 0xe1b8d813
jmp 0x1002c99d
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb34]
call fcn.1000140a
jmp 0x1002ca02
mov dword [ebp - 0x530], 1
cmp dword [ebp - 0x7a8], 0
je 0x1002ca02
jmp 0x1002c938
jmp 0x1002c938
mov dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0xac8], 9
mov dword [ebp - 0xb38], 0
mov dword [ebp - 0xad0], 0x84b81147
mov dword [ebp - 0xb7c], 0x39ed080c
mov dword [ebp - 0xad8], 0xfffffff7
mov dword [ebp - 0xb48], 0x34eea2a3
mov dword [ebp - 0xae0], 0
mov dword [ebp - 0xbac], 0xfffffff9
mov dword [ebp - 0xa38], 0x5bfc88eb
mov dword [ebp - 0xa3c], 0x76038591
mov dword [ebp - 0xa44], 0xfffffffb
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xa54], 0xfffffffc
mov dword [ebp - 0xa5c], 0x65420764
mov dword [ebp - 0xa64], 0xc54c9751
mov dword [ebp - 0xa6c], 0xdcee34ed
mov dword [ebp - 0xa84], 0x13e19f23
mov dword [ebp - 0xa8c], 7
mov dword [ebp - 0x368], 0xf0ebf903
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [0x10074490], 0
jne 0x1003142b
push 2
lea ecx, [ebp - 0xb44]
call fcn.100013ad
mov dword [ebp - 4], 3
mov dword [ebp - 0x180], 0x13532fe2
mov dword [ebp - 0x1d8], 0
jmp 0x1002cb20
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x1002cb42
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xb44]
call fcn.10001426
mov dword [eax], 0xffff
jmp 0x1002cb13
mov dword [ebp - 0x180], 0
jmp 0x1002cb5b
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jg 0x1002cbdf
mov dword [ebp - 0x1e0], 0x252604
mov dword [ebp - 0x1e0], 0
jmp 0x1002cb87
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jg 0x1002cbda
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x188], 1
jmp 0x1002cbb3
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0
jl 0x1002cbd8
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1002cbd6
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
jmp 0x1002cba6
jmp 0x1002cb7a
jmp 0x1002cb4e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb44]
call fcn.1000140a
mov byte [ebp - 0x140], 2
mov byte [ebp - 0x13f], 0xeb
mov byte [ebp - 0x13e], 5
mov byte [ebp - 0x13d], 0x1e
mov byte [ebp - 0x13c], 8
mov byte [ebp - 0x13b], 0x42
mov byte [ebp - 0x13a], 1
mov byte [ebp - 0x139], 0x40
mov byte [ebp - 0x138], 4
mov byte [ebp - 0x137], 0x4b
mov byte [ebp - 0x136], 0xb
mov byte [ebp - 0x135], 9
mov byte [ebp - 0x134], 6
mov byte [ebp - 0x133], 0x5f
mov byte [ebp - 0x132], 0
mov byte [ebp - 0x131], 0x78
mov byte [ebp - 0x130], 1
mov byte [ebp - 0x12f], 0x2e
mov byte [ebp - 0x12e], 7
mov byte [ebp - 0x12d], 0x57
mov byte [ebp - 0x12c], 0xa
mov byte [ebp - 0x12b], 0x5e
mov byte [ebp - 0x12a], 9
mov byte [ebp - 0x129], 8
mov byte [ebp - 0x128], 3
mov byte [ebp - 0x127], 0xa
mov dword [ebp - 0xa0c], 0xbdde
mov dword [ebp - 0xa08], 0xbdde
mov dword [ebp - 0xa04], 0xbdde
mov dword [ebp - 0xa00], 0xbdde
mov dword [ebp - 0x9c0], 1
mov dword [ebp - 0x9bc], 1
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 0x9b4], 1
lea ecx, [ebp - 0x301]
call fcn.10001586
push eax
lea eax, [ebp - 0x9b0]
push eax
lea eax, [ebp - 0x9c0]
push eax
lea ecx, [ebp - 0xbd4]
call fcn.10004539
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8ec]
call fcn.10004513
mov dword [ebp - 4], 4
push 1
lea ecx, [ebp - 0x8ec]
call fcn.10001426
mov dword [eax], 3
jmp 0x1002cd69
push 1
lea ecx, [ebp - 0x8ec]
call fcn.10001426
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x618]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x8ec]
call fcn.10001426
cmp dword [eax], 0
jl 0x1002cdba
push 1
lea ecx, [ebp - 0x8ec]
call fcn.10001426
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xa0c], 0
je 0x1002cd96
jmp 0x1002cdba
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1002cdb8
push 0x522
push 0x229c
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x1002cd45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ec]
call fcn.1000140a
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x140]
and eax, 0x99
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x140]
or ecx, 0x99
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x140]
mov word [ebp + eax*2 - 0xa28], cx
mov dword [ebp - 0x20], 2
and dword [ebp - 0x124], 0
jmp 0x1002ce20
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
jae 0x1002ddda
mov dword [ebp - 0x390], 0x1c16
mov dword [ebp - 0x8b4], str.leizpjziz_vgahixmy_krnfrs_flk_uzfq
cmp dword [ebp - 0x390], 0x1edc
jle 0x1002cf6e
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
and dword [ebp - 0x1f0], 0
jmp 0x1002ce6c
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x6ea5
jge 0x1002cf64
and dword [ebp - 0x198], 0
jmp 0x1002ce92
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xfc0
jge 0x1002cf5f
and dword [ebp - 0x1e8], 0
jmp 0x1002ceb8
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x4337
jge 0x1002cf5a
and dword [ebp - 0x190], 0
jmp 0x1002cede
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x4da8
jge 0x1002cf55
mov eax, dword [ebp - 0x1e8]
cdq
idiv dword [ebp - 0x190]
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x198]
shl eax, cl
xor eax, edx
cdq
mov dword [ebp - 0x7c8], eax
mov dword [ebp - 0x7c4], edx
push dword [ebp - 0x7c4]
push dword [ebp - 0x7c8]
lea ecx, [ebp - 0xcf4]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7b0]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xcf4]
call fcn.10001398
jmp 0x1002ced1
jmp 0x1002ceab
jmp 0x1002ce85
jmp 0x1002ce5f
push 0x4f
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 0xf4], 0xfffffffe
mov dword [ebp - 0x6c4], 0xffffffff
mov dword [ebp - 0x370], 0x34d6
mov dword [ebp - 0x8a4], str.ilyg_oyc_grrrn_pjdva_jrlbn_fic_dgrevgks_qletwhaj_pwrdowzos_eupoe_tzb
cmp dword [ebp - 0x370], 0x3604
jle 0x1002d085
and dword [ebp - 0x200], 0
jmp 0x1002cfbc
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x3ce5
jge 0x1002d085
and dword [ebp - 0x168], 0
jmp 0x1002cfe2
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x6567
jge 0x1002d080
and dword [ebp - 0x1f8], 0
jmp 0x1002d008
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x1e4f
jge 0x1002d07b
and dword [ebp - 0x1a0], 0
jmp 0x1002d02a
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x5079
jge 0x1002d079
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1a0]
sar eax, cl
mov edx, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x168]
shl edx, cl
or eax, edx
cdq
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x7d0], edx
push dword [ebp - 0x7d0]
push dword [ebp - 0x7d4]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x1002d01d
jmp 0x1002cffb
jmp 0x1002cfd5
jmp 0x1002cfaf
mov dword [ebp - 0x380], 0
mov dword [ebp - 4], 5
cmp dword [ebp - 0x370], 0x3244
jge 0x1002d0b2
mov edx, dword [ebp - 0x8a4]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x1002d0ce
or dword [ebp - 4], 0xffffffff
jmp 0x1002d0d8
mov dword [ebp - 0x8ac], 0x5405732a
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1002d107
push 0
push 0
push 0x2360
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
cmp dword [ebp - 0xf4], 0
jne 0x1002d11c
mov dword [ebp - 0x538], 1
jmp 0x1002d123
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xa9c], eax
cmp dword [ebp - 0xf4], 0
jne 0x1002d154
push 5
pop eax
test eax, eax
jne 0x1002d154
and dword [ebp - 0x378], 0
jmp 0x1002d15e
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x378]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0xf4]
jg 0x1002d196
mov dword [ebp - 0x540], 1
jmp 0x1002d19d
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 0xffffffff
jb 0x1002d1b2
mov dword [ebp - 0x388], 1
jmp 0x1002d1b9
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 1
jg 0x1002d1ce
mov dword [ebp - 0x620], 1
jmp 0x1002d1d5
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 4], 7
cmp dword [ebp - 0x390], 0x18f8
jge 0x1002d200
push dword [ebp - 0x8b4]
call fcn.10040c20
pop ecx
jmp 0x1002d21c
or dword [ebp - 4], 0xffffffff
jmp 0x1002d226
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x140]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x1002d685
mov dword [ebp - 0x300], 0xfffffffe
mov dword [ebp - 0x548], 0x6988
mov dword [ebp - 0x8c4], str.nwixexk_usqukqpde_hjvyu_cbrn_wxt_xsdnp_owkxhdxgp_eoj_kbuxn_ehkurtt_muj_hxyzbssa_erru_pgadeh
cmp dword [ebp - 0x548], 0x6d3c
jle 0x1002d347
and dword [ebp - 0x1b4], 0
jmp 0x1002d285
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x5a59
jge 0x1002d347
and dword [ebp - 0x208], 0
jmp 0x1002d2ab
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x2e5c
jge 0x1002d342
and dword [ebp - 0x23c], 0
jmp 0x1002d2d1
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x7b0c
jge 0x1002d33d
mov ecx, dword [ebp - 0x208]
imul ecx, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x1b4]
sar eax, cl
cdq
mov dword [ebp - 0x7e0], eax
mov dword [ebp - 0x7dc], edx
push dword [ebp - 0x7dc]
push dword [ebp - 0x7e0]
lea ecx, [ebp - 0xcb8]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x8bc], eax
mov ecx, dword [ebp - 0x8bc]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xcb8]
call fcn.10001398
jmp 0x1002d2c4
jmp 0x1002d29e
jmp 0x1002d278
mov dword [ebp - 0x1bc], 4
mov dword [ebp - 4], 9
cmp dword [ebp - 0x548], 0x6878
jge 0x1002d370
push dword [ebp - 0x8c4]
call fcn.10040c20
pop ecx
jmp 0x1002d38c
or dword [ebp - 4], 0xffffffff
jmp 0x1002d396
mov dword [ebp - 0xe8], 0xc40ed3c1
mov dword [ebp - 0x284], 0
jmp 0x1002d3b9
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1002d3d5
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xa34], 1
jmp 0x1002d3ac
mov eax, 0xf759609c
test eax, eax
je 0x1002d41f
cmp dword [ebp - 0x300], 0x3c0b
jge 0x1002d3f6
mov dword [ebp - 0x398], 1
jmp 0x1002d3fd
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x398]
je 0x1002d41f
cmp dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0xe8], 0
jmp 0x1002d44a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x26
jne 0x1002d472
mov dword [ebp - 0x8cc], 0xffffffff
mov eax, dword [ebp - 0x8cc]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa34], eax
jmp 0x1002d43d
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x140]
inc eax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x38], 0xd95e17ca
mov dword [ebp - 0x3a8], 0x5bc42206
mov dword [ebp - 0x628], 9
mov dword [ebp - 0x8dc], 0xdfb1af9d
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1002d4c3
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xaac], eax
imul eax, dword [ebp - 0x38], 9
cmp eax, dword [ebp - 0x38]
jne 0x1002d4ea
mov dword [ebp - 0x690], 1
jmp 0x1002d4f1
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x690], eax
jg 0x1002d514
cmp dword [ebp - 0x38], 0
je 0x1002d514
cmp dword [ebp - 0x38], 0
je 0x1002d514
mov dword [ebp - 0x3a0], 1
jmp 0x1002d51b
and dword [ebp - 0x3a0], 0
imul eax, dword [ebp - 0x3a0], 0x86e3
cmp eax, 0x5bbb
jge 0x1002d53c
xor eax, eax
je 0x1002d53c
mov dword [ebp - 0x550], 1
jmp 0x1002d543
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x38]
je 0x1002d566
mov dword [ebp - 0x72c], 1
jmp 0x1002d56d
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xabc], eax
mov dword [ebp - 0x628], 0xa6d0811
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x8dc], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x140]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
push 2
lea ecx, [ebp - 0x8fc]
call fcn.100013ad
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x870], 1
mov dword [ebp - 0x558], 0xc556123d
mov dword [ebp - 0x244], 0
jmp 0x1002d5eb
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1002d60d
push dword [ebp - 0x244]
lea ecx, [ebp - 0x8fc]
call fcn.10001426
mov dword [eax], 0xe0a8eac8
jmp 0x1002d5de
push 0
lea ecx, [ebp - 0x8fc]
call fcn.10001426
mov dword [eax], 0x12
jmp 0x1002d646
push 0
lea ecx, [ebp - 0x8fc]
call fcn.10001426
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3b0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x8fc]
call fcn.10001426
cmp dword [eax], 0xffffffe5
jge 0x1002d664
mov dword [ebp - 0x870], 0x77dd6887
jmp 0x1002d622
mov eax, dword [ebp - 0x558]
inc eax
mov dword [ebp - 0x558], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8fc]
call fcn.1000140a
jmp 0x1002ce18
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x98], 0xd1cb6a7f
mov dword [ebp - 0xb8], 0xfffffff7
mov dword [ebp - 0xa0], 0x76a95236
mov dword [ebp - 0xfc], 0x393a39d8
mov dword [ebp - 0x648], 7
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x3b8], 0x41c6
mov dword [ebp - 0x7a0], str.lmpfzb_dwglphm_zmnsi
cmp dword [ebp - 0x3b8], 0x4236
jle 0x1002d7f2
and dword [ebp - 0x1c4], 0
jmp 0x1002d702
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x3ca9
jge 0x1002d7f2
and dword [ebp - 0x2c4], 0
jmp 0x1002d728
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x7ee8
jge 0x1002d7ed
and dword [ebp - 0x1cc], 0
jmp 0x1002d74e
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6e3c
jge 0x1002d7e8
and dword [ebp - 0x24c], 0
jmp 0x1002d774
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x16fa
jge 0x1002d7e3
mov eax, dword [ebp - 0x1c4]
and eax, dword [ebp - 0x2c4]
and eax, dword [ebp - 0x1cc]
and eax, dword [ebp - 0x24c]
cdq
mov dword [ebp - 0x7ec], eax
mov dword [ebp - 0x7e8], edx
push dword [ebp - 0x7e8]
push dword [ebp - 0x7ec]
lea ecx, [ebp - 0xc64]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x734]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xc64]
call fcn.10001398
jmp 0x1002d767
jmp 0x1002d741
jmp 0x1002d71b
jmp 0x1002d6f5
mov dword [ebp - 0x1d4], 0
jmp 0x1002d80b
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x1002d827
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x744], 0xb39d90dc
jmp 0x1002d7fe
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x3b8], 0x3f8e
jge 0x1002d846
push dword [ebp - 0x7a0]
call fcn.10040c20
pop ecx
jmp 0x1002d862
or dword [ebp - 4], 0xffffffff
jmp 0x1002d86c
imul eax, dword [ebp - 0x24], 0x3ccd
cmp eax, 1
jle 0x1002d884
mov dword [ebp - 0x6dc], 1
jmp 0x1002d88b
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
add eax, 0xfffc
cmp eax, dword [ebp - 0x24]
jg 0x1002d8a7
mov dword [ebp - 0x3c0], 1
jmp 0x1002d8ae
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x24]
jle 0x1002d8c9
mov dword [ebp - 0x560], 1
jmp 0x1002d8d0
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x560], eax
je 0x1002d8ea
mov dword [ebp - 0x3c8], 1
jmp 0x1002d8f1
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
add ecx, eax
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xb8]
cmp eax, 0x2afd77cc
jle 0x1002d924
mov dword [ebp - 0x630], 1
jmp 0x1002d92b
and dword [ebp - 0x630], 0
imul eax, dword [ebp - 0x630], 0xa0a9
cmp eax, dword [ebp - 0x98]
je 0x1002d949
mov dword [ebp - 0x3d0], 1
jmp 0x1002d950
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x3d0]
cmp eax, 0xacb6d64b
je 0x1002d96f
mov dword [ebp - 0x568], 1
jmp 0x1002d976
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0xfffffffd
jl 0x1002d98b
mov dword [ebp - 0x3d8], 1
jmp 0x1002d992
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x3d8], eax
jle 0x1002d9ac
mov dword [ebp - 0x698], 1
jmp 0x1002d9b3
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 5
jae 0x1002d9d4
mov eax, 0x54d8142
test eax, eax
jne 0x1002d9d4
cmp dword [ebp - 0x24], 0
jne 0x1002d9d4
and dword [ebp - 0x3e0], 0
jmp 0x1002d9de
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0xb167d3d8
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x98]
jne 0x1002da0b
mov dword [ebp - 0x88c], 1
jmp 0x1002da12
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0xb8], 0x42d9
jl 0x1002da2a
mov dword [ebp - 0x570], 1
jmp 0x1002da31
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0x9b05f673
je 0x1002da49
mov dword [ebp - 0x3e8], 1
jmp 0x1002da50
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
neg eax
jne 0x1002da61
cmp dword [ebp - 0xb8], 0
cmp dword [ebp - 0xa0], 6
jb 0x1002da76
mov dword [ebp - 0x638], 1
jmp 0x1002da7d
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
dec eax
cmp eax, 0xe2fc3c73
jae 0x1002da97
mov dword [ebp - 0x3f0], 1
jmp 0x1002da9e
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x3f0], eax
jge 0x1002dab8
mov dword [ebp - 0x578], 1
jmp 0x1002dabf
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x578]
cmp eax, 0xda8f9e1c
je 0x1002dae4
cmp dword [ebp - 0xa0], 0
jne 0x1002dae4
and dword [ebp - 0x3f8], 0
jmp 0x1002daee
mov dword [ebp - 0x3f8], 1
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x3f8]
jne 0x1002db0e
mov eax, 0xfd6825d0
test eax, eax
jne 0x1002db0e
and dword [ebp - 0x6cc], 0
jmp 0x1002db18
mov dword [ebp - 0x6cc], 1
imul eax, dword [ebp - 0x6cc], 0xffff
cmp eax, dword [ebp - 0xfc]
jle 0x1002db36
mov dword [ebp - 0x400], 1
jmp 0x1002db3d
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 1
ja 0x1002db52
mov dword [ebp - 0x580], 1
jmp 0x1002db59
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xffff
ja 0x1002db71
mov dword [ebp - 0x408], 1
jmp 0x1002db78
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x408], eax
jge 0x1002db92
mov dword [ebp - 0x640], 1
jmp 0x1002db99
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x640]
jl 0x1002dbb0
mov dword [ebp - 0x73c], 1
jmp 0x1002dbb7
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x24], 0xaab93b57
jne 0x1002dbcc
mov dword [ebp - 0x410], 1
jmp 0x1002dbd3
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x410], eax
je 0x1002dbed
mov dword [ebp - 0x588], 1
jmp 0x1002dbf4
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 1
jne 0x1002dc09
mov dword [ebp - 0x418], 1
jmp 0x1002dc10
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0
je 0x1002dc25
mov dword [ebp - 0x6a0], 1
jmp 0x1002dc2c
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x6a0], eax
jle 0x1002dc43
mov dword [ebp - 0x420], 1
jmp 0x1002dc4a
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0xfc]
jg 0x1002dc6d
mov dword [ebp - 0x590], 1
jmp 0x1002dc74
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0xfffffffb
jne 0x1002dc89
mov dword [ebp - 0x428], 1
jmp 0x1002dc90
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x648], eax
cmp dword [ebp - 0x648], 9
jge 0x1002dcb1
mov dword [ebp - 0x430], 1
jmp 0x1002dcb8
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x430]
test eax, eax
je 0x1002dcde
mov eax, 0x15d11e90
test eax, eax
je 0x1002dcde
mov dword [ebp - 0x598], 1
jmp 0x1002dce5
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x598]
sub eax, dword [ebp - 0xfc]
mov dword [ebp - 0x868], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x868]
mov dword [ebp + eax - 0x744], ecx
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xac4], eax
xor eax, eax
cmp eax, 0xa8f4439d
jne 0x1002dd32
mov dword [ebp - 0x438], 1
jmp 0x1002dd39
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x894], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x124]
movzx eax, byte [ebp + eax - 0x142]
movzx eax, word [ebp + eax*2 - 0xa28]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x13f]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x124]
movzx eax, byte [ebp + eax - 0x142]
movzx eax, word [ebp + eax*2 - 0xa28]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x13f]
and edx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x124]
movzx eax, byte [ebp + eax - 0x142]
movzx eax, word [ebp + eax*2 - 0xa28]
mov esi, dword [ebp - 0x20]
movzx esi, byte [ebp + esi - 0x13f]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x140]
mov word [ebp + eax*2 - 0xa28], si
and dword [ebp - 0x124], 0
jmp 0x1002ce18
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xa28], cx
mov dword [ebp - 0x74c], 2
mov dword [ebp - 0x28c], 0
jmp 0x1002de0d
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x1002de26
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x3c], 0xfffffff7
jmp 0x1002de00
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3c], 1
jmp 0x1002de4b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c], 0xfffffffa
jne 0x1002df8c
mov dword [ebp - 0x2d8], 7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xacc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0x2d8], 0x8bdfadf6
jbe 0x1002de9e
mov dword [ebp - 0x6f0], 1
jmp 0x1002dea5
and dword [ebp - 0x6f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp eax, dword [ebp - 0x6f0]
jle 0x1002decc
cmp dword [ebp - 0x2d8], 0
je 0x1002decc
mov dword [ebp - 0x440], 1
jmp 0x1002ded3
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
add eax, 0xb8b7
jne 0x1002defb
mov eax, 0x8b
test eax, eax
jne 0x1002defb
mov eax, 0xea964a90
test eax, eax
jne 0x1002defb
and dword [ebp - 0x5a0], 0
jmp 0x1002df05
mov dword [ebp - 0x5a0], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3c]
imul ecx, dword [ebp - 0x5a0]
cmp ecx, dword [ebp + eax - 0x3c]
jl 0x1002df2e
mov dword [ebp - 0x448], 1
jmp 0x1002df35
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x448], eax
jg 0x1002df4f
mov dword [ebp - 0x650], 1
jmp 0x1002df56
and dword [ebp - 0x650], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c]
cmp dword [ebp - 0x650], eax
je 0x1002df74
mov dword [ebp - 0x450], 1
jmp 0x1002df7b
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x74c], eax
jmp 0x1002de36
lea eax, [ebp - 0xa28]
push eax
lea ecx, [ebp - 0xd0c]
call fcn.1000eb46
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x754], eax
mov dword [ebp - 4], 0xe
push dword [ebp - 0x754]
call fcn.10025573
pop ecx
mov dword [ebp - 0x5d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0c]
call fcn.100043c2
and dword [ebp - 0x1dc], 0
jmp 0x1002dfee
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xd
jae 0x1002e009
xor eax, eax
mov ecx, dword [ebp - 0x1dc]
mov word [ebp + ecx*2 - 0xa28], ax
jmp 0x1002dfe1
mov dword [ebp - 0x80], 4
push 4
lea ecx, [ebp - 0x348]
call fcn.100013ad
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x5b0], 0x6e82a74
mov dword [ebp - 0x50], 0
jmp 0x1002e048
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002e061
push dword [ebp - 0x50]
lea ecx, [ebp - 0x348]
call fcn.10001426
and dword [eax], 0
jmp 0x1002e041
mov dword [ebp - 0x50], 0
jmp 0x1002e071
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002e087
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xbfc], 2
jmp 0x1002e06a
mov dword [ebp - 0x80], 0
jmp 0x1002e097
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffed
jl 0x1002e39c
mov dword [ebp - 0x488], 0xffffffff
mov dword [ebp - 0x34], 0xc5d9b4e9
mov dword [ebp - 0x254], 0xffffffff
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1002e0da
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
cmp dword [ebp - 0x80], 0
je 0x1002e0fe
push 2
lea ecx, [ebp - 0x348]
call fcn.10001426
cmp dword [eax], 0
je 0x1002e0fe
mov dword [ebp - 0x6b4], 1
jmp 0x1002e105
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xadc], eax
push 1
lea ecx, [ebp - 0x348]
call fcn.10001426
mov esi, eax
push 2
lea ecx, [ebp - 0x348]
call fcn.10001426
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x1002e140
push 8
pop eax
test eax, eax
jne 0x1002e140
and dword [ebp - 0x5a8], 0
jmp 0x1002e14a
mov dword [ebp - 0x5a8], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5a8], eax
jl 0x1002e161
mov dword [ebp - 0x458], 1
jmp 0x1002e168
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 0x6a9b
jge 0x1002e180
mov dword [ebp - 0x6a8], 1
jmp 0x1002e187
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x6a8], eax
jge 0x1002e19e
mov dword [ebp - 0x460], 1
jmp 0x1002e1a5
and dword [ebp - 0x460], 0
push 2
lea ecx, [ebp - 0x348]
call fcn.10001426
mov ecx, dword [ebp - 0x460]
cmp ecx, dword [eax]
je 0x1002e1c8
mov dword [ebp - 0x910], 1
jmp 0x1002e1cf
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x34]
neg eax
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0x254]
jge 0x1002e1f4
mov dword [ebp - 0x75c], 1
jmp 0x1002e1fb
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x34], 0x22f8
jle 0x1002e21c
mov dword [ebp - 0x878], 1
jmp 0x1002e223
and dword [ebp - 0x878], 0
push 2
lea ecx, [ebp - 0x348]
call fcn.10001426
cmp dword [ebp - 0x34], 0xb388
jne 0x1002e245
mov dword [ebp - 0x468], 1
jmp 0x1002e24c
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x468], eax
jl 0x1002e263
mov dword [ebp - 0x658], 1
jmp 0x1002e26a
and dword [ebp - 0x658], 0
mov esi, dword [ebp - 0x80]
push 3
lea ecx, [ebp - 0x348]
call fcn.10001426
mov ecx, dword [ebp - 0x658]
imul ecx, dword [eax]
cmp ecx, esi
jne 0x1002e293
mov dword [ebp - 0x470], 1
jmp 0x1002e29a
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x254]
add eax, dword [ebp - 0x470]
add eax, dword [ebp - 0x34]
imul eax, eax, 0xd5cc
test eax, eax
jne 0x1002e2bf
mov dword [ebp - 0x5b8], 1
jmp 0x1002e2c6
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x5b8], eax
jl 0x1002e2dd
mov dword [ebp - 0x478], 1
jmp 0x1002e2e4
and dword [ebp - 0x478], 0
mov esi, dword [ebp - 0x478]
sub esi, dword [ebp - 0x34]
push 1
lea ecx, [ebp - 0x348]
call fcn.10001426
cmp esi, dword [eax]
jle 0x1002e30a
mov dword [ebp - 0x5c0], 1
jmp 0x1002e311
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x480]
imul eax, dword [ebp - 0x5c0]
cmp eax, 0x3bbb
jne 0x1002e346
cmp dword [ebp - 0x254], 0
jne 0x1002e346
and dword [ebp - 0x660], 0
jmp 0x1002e350
mov dword [ebp - 0x660], 1
mov dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
cmp eax, dword [ebp - 0x660]
je 0x1002e374
mov dword [ebp - 0x318], 1
jmp 0x1002e37b
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x318]
mov dword [ebp + eax - 0xbfc], ecx
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x34], eax
jmp 0x1002e090
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x348]
call fcn.1000140a
cmp dword [ebp - 0x5d4], 0
je 0x1003142b
push 2
lea ecx, [ebp - 0x90c]
call fcn.100013ad
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x498], 1
mov dword [ebp - 0x1e4], 0
jmp 0x1002e3f9
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1002e41b
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x90c]
call fcn.10001426
mov dword [eax], 0x9b3198a8
jmp 0x1002e3ec
mov dword [ebp - 0x104], 0
jmp 0x1002e434
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x1002e781
push 3
lea ecx, [ebp - 0x6fc]
call fcn.100013ad
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x6b0], 0xbb4aad9d
mov dword [ebp - 0x2ac], 0
jmp 0x1002e475
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x1002e497
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x6fc]
call fcn.10001426
mov dword [eax], 0xfd94fe5f
jmp 0x1002e468
push dword [ebp - 0x104]
lea ecx, [ebp - 0x90c]
call fcn.10001426
cmp dword [eax], 0
je 0x1002e4c1
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6fc]
call fcn.1000140a
jmp 0x1002e781
push 1
lea ecx, [ebp - 0x90c]
call fcn.10001426
cmp dword [eax], 0
je 0x1002e4e7
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6fc]
call fcn.1000140a
jmp 0x1002e781
push 2
lea ecx, [ebp - 0x6fc]
call fcn.10001426
and dword [eax], 0
jmp 0x1002e51d
push 2
lea ecx, [ebp - 0x6fc]
call fcn.10001426
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x490]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x6fc]
call fcn.10001426
cmp dword [eax], 1
jg 0x1002e76d
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x10c], 1
jmp 0x1002e556
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x1002e746
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x11c], 0
jmp 0x1002e586
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1002e723
mov dword [ebp - 0x5c8], 0x7093
mov dword [ebp - 0x8d0], str.howneucfb_lghlyujqb_upgthssge_ehxjpni
cmp dword [ebp - 0x5c8], 0x7156
jle 0x1002e6be
and dword [ebp - 0x1ec], 0
jmp 0x1002e5cd
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x323d
jge 0x1002e6be
and dword [ebp - 0x25c], 0
jmp 0x1002e5f3
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x1ef3
jge 0x1002e6b9
and dword [ebp - 0x1f4], 0
jmp 0x1002e619
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x5ac2
jge 0x1002e6b4
and dword [ebp - 0x294], 0
jmp 0x1002e63f
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x7e6e
jge 0x1002e6af
mov eax, dword [ebp - 0x1ec]
imul eax, dword [ebp - 0x25c]
and eax, dword [ebp - 0x1f4]
and eax, dword [ebp - 0x294]
cdq
mov dword [ebp - 0x7f8], eax
mov dword [ebp - 0x7f4], edx
push dword [ebp - 0x7f4]
push dword [ebp - 0x7f8]
lea ecx, [ebp - 0xc1c]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x764], eax
mov ecx, dword [ebp - 0x764]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xc1c]
call fcn.10001398
jmp 0x1002e632
jmp 0x1002e60c
jmp 0x1002e5e6
jmp 0x1002e5c0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x5c8], 0x6e90
jge 0x1002e6da
push dword [ebp - 0x8d0]
call fcn.10040c20
pop ecx
jmp 0x1002e6f6
mov dword [ebp - 4], 0x11
jmp 0x1002e706
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x90c]
call fcn.10001426
cmp dword [eax], 0
je 0x1002e71e
jmp 0x1002e723
jmp 0x1002e579
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1002e741
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
jmp 0x1002e549
mov dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x10c], eax
jmp 0x1002e4f9
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x6fc]
call fcn.1000140a
jmp 0x1002e427
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x90c]
call fcn.1000140a
push 2
lea ecx, [ebp - 0x708]
call fcn.100013ad
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x9ac], 0x6d44418
mov dword [ebp - 0x9a8], 0x6d44418
mov dword [ebp - 0x9a4], 0x6d44418
mov dword [ebp - 0x9a0], 0x6d44418
lea ecx, [ebp - 0x2c9]
call fcn.10001586
push eax
lea eax, [ebp - 0x99c]
push eax
lea eax, [ebp - 0x9ac]
push eax
lea ecx, [ebp - 0xc04]
call fcn.10004539
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x328]
call fcn.10004513
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x1fc], 0
jmp 0x1002e81e
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1002e840
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x708]
call fcn.10001426
mov dword [eax], 0x57fd5464
jmp 0x1002e811
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
and dword [eax], 0
jmp 0x1002e876
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4a0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
cmp dword [eax], 1
jg 0x1002eb2c
mov dword [ebp - 0x880], 8
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
push dword [eax]
lea ecx, [ebp - 0x708]
call fcn.10001426
mov esi, eax
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
push dword [eax]
lea ecx, [ebp - 0x708]
call fcn.10001426
mov eax, dword [eax]
mov dword [esi], eax
mov dword [ebp - 0x5d8], 0xf2c
mov dword [ebp - 0x774], str.ycznbllu_tos_uehfptzl
cmp dword [ebp - 0x5d8], 0x1150
jle 0x1002e9fc
and dword [ebp - 0x20c], 0
jmp 0x1002e90a
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x1695
jge 0x1002e9fc
and dword [ebp - 0x2bc], 0
jmp 0x1002e930
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x97b
jge 0x1002e9f7
and dword [ebp - 0x264], 0
jmp 0x1002e956
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x5348
jge 0x1002e9f2
and dword [ebp - 0x204], 0
jmp 0x1002e97c
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x301b
jge 0x1002e9ed
mov ecx, dword [ebp - 0x264]
add ecx, dword [ebp - 0x204]
mov eax, dword [ebp - 0x2bc]
sar eax, cl
or eax, dword [ebp - 0x20c]
cdq
mov dword [ebp - 0x804], eax
mov dword [ebp - 0x800], edx
push dword [ebp - 0x800]
push dword [ebp - 0x804]
lea ecx, [ebp - 0xcdc]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x76c]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xcdc]
call fcn.10001398
jmp 0x1002e96f
jmp 0x1002e949
jmp 0x1002e923
jmp 0x1002e8fd
push 0
lea ecx, [ebp - 0x708]
call fcn.10001426
mov esi, eax
push 3
lea ecx, [ebp - 0x328]
call fcn.10001426
mov eax, dword [eax]
add eax, dword [esi]
cmp eax, 0xffff
je 0x1002ea2f
mov dword [ebp - 0x5d0], 1
jmp 0x1002ea36
and dword [ebp - 0x5d0], 0
push 1
lea ecx, [ebp - 0x328]
call fcn.10001426
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5d0]
je 0x1002ea68
push 1
lea ecx, [ebp - 0x708]
call fcn.10001426
cmp dword [eax], 0
jne 0x1002ea68
and dword [ebp - 0x4a8], 0
jmp 0x1002ea72
mov dword [ebp - 0x4a8], 1
push 0
lea ecx, [ebp - 0x328]
call fcn.10001426
mov ecx, dword [ebp - 0x4a8]
cmp ecx, dword [eax]
jg 0x1002ea95
mov dword [ebp - 0x668], 1
jmp 0x1002ea9c
and dword [ebp - 0x668], 0
push 2
lea ecx, [ebp - 0x328]
call fcn.10001426
push dword [eax]
lea ecx, [ebp - 0x708]
call fcn.10001426
mov eax, dword [eax]
cmp eax, dword [ebp - 0x668]
jne 0x1002eacc
mov dword [ebp - 0x4b0], 1
jmp 0x1002ead3
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x880], eax
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x5d8], 0xe92
jge 0x1002eafb
push dword [ebp - 0x774]
call fcn.10040c20
pop ecx
jmp 0x1002eb17
mov dword [ebp - 4], 0x15
jmp 0x1002eb27
jmp 0x1002e852
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x328]
call fcn.1000140a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x708]
call fcn.1000140a
mov byte [ebp - 0x164], 3
mov byte [ebp - 0x163], 0xf8
mov byte [ebp - 0x162], 6
mov byte [ebp - 0x161], 0x33
mov byte [ebp - 0x160], 5
mov byte [ebp - 0x15f], 0xc
mov byte [ebp - 0x15e], 1
mov byte [ebp - 0x15d], 0xa
mov byte [ebp - 0x15c], 1
mov byte [ebp - 0x15b], 0x9d
mov byte [ebp - 0x15a], 0
mov byte [ebp - 0x159], 0x22
mov byte [ebp - 0x158], 0xa
mov byte [ebp - 0x157], 0x35
mov byte [ebp - 0x156], 0xb
mov byte [ebp - 0x155], 0x17
mov byte [ebp - 0x154], 9
mov byte [ebp - 0x153], 1
mov byte [ebp - 0x152], 0xc
mov byte [ebp - 0x151], 0x17
mov byte [ebp - 0x150], 0xd
mov byte [ebp - 0x14f], 0
mov byte [ebp - 0x14e], 8
mov byte [ebp - 0x14d], 0x17
mov byte [ebp - 0x14c], 4
mov byte [ebp - 0x14b], 0x16
mov byte [ebp - 0x14a], 7
mov byte [ebp - 0x149], 0x33
mov byte [ebp - 0x148], 2
mov byte [ebp - 0x147], 0x35
mov dword [ebp - 0xec], 0x8876942a
mov dword [ebp - 0x1c], 0xfff8
mov dword [ebp - 0x214], 1
push 2
lea ecx, [ebp - 0x6e8]
call fcn.100013ad
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x26c], 0
jmp 0x1002ec64
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jge 0x1002ec83
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
and dword [eax], 0
jmp 0x1002ec57
cmp dword [ebp - 0x1c], 0
je 0x1002ec9b
cmp dword [ebp - 0x1c], 0
je 0x1002ec9b
mov dword [ebp - 0x4b8], 1
jmp 0x1002eca2
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
sub eax, dword [ebp - 0x1c]
je 0x1002ecb4
push 8
pop eax
test eax, eax
jne 0x1002ecc3
cmp dword [ebp - 0x1c], 0
jne 0x1002ecc3
and dword [ebp - 0x6b8], 0
jmp 0x1002eccd
mov dword [ebp - 0x6b8], 1
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x6b8]
cmp dword [ebp - 0xec], eax
jne 0x1002ecea
mov dword [ebp - 0x4c0], 1
jmp 0x1002ecf1
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0x2038
jne 0x1002ed09
mov dword [ebp - 0x5e0], 1
jmp 0x1002ed10
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5e0], eax
jle 0x1002ed27
mov dword [ebp - 0x4c8], 1
jmp 0x1002ed2e
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0x1af7f3e7
je 0x1002ed46
mov dword [ebp - 0x670], 1
jmp 0x1002ed4d
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x1c], 0
jmp 0x1002ed69
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1002f030
mov dword [ebp - 0x93c], 0x842b4cf2
mov dword [ebp - 0x77c], 1
push 3
lea ecx, [ebp - 0x958]
call fcn.100013ad
mov byte [ebp - 4], 0x19
push 1
lea ecx, [ebp - 0x9d8]
call fcn.100013ad
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x58], 0
jmp 0x1002edb9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002edd5
push dword [ebp - 0x58]
lea ecx, [ebp - 0x958]
call fcn.10001426
mov dword [eax], 0xf259
jmp 0x1002edb2
mov dword [ebp - 0x58], 0
jmp 0x1002ede5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002ee01
push dword [ebp - 0x58]
lea ecx, [ebp - 0x9d8]
call fcn.10001426
mov dword [eax], 0xad21dd8e
jmp 0x1002edde
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x1002ee1d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0xec], 0
jmp 0x1002ee36
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jg 0x1002f00d
mov dword [ebp - 0x4e0], 0xf5ee8790
mov dword [ebp - 0x784], 1
mov esi, dword [ebp - 0x93c]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
imul esi, dword [eax]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
cmp esi, dword [eax]
jl 0x1002ee8c
mov dword [ebp - 0x4d0], 1
jmp 0x1002ee93
and dword [ebp - 0x4d0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
mov eax, dword [eax]
neg eax
cmp eax, dword [ebp - 0x4d0]
jg 0x1002eeb9
mov dword [ebp - 0x5e8], 1
jmp 0x1002eec0
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0
jle 0x1002eef1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
cmp dword [eax], 0
je 0x1002eef1
cmp dword [ebp - 0x214], 0
je 0x1002eef1
mov dword [ebp - 0x4d8], 1
jmp 0x1002eef8
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x77c]
cmp dword [ebp - 0x4d8], eax
jle 0x1002ef12
mov dword [ebp - 0x6c0], 1
jmp 0x1002ef19
and dword [ebp - 0x6c0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
mov ecx, dword [ebp - 0x6c0]
add ecx, dword [eax]
neg ecx
jne 0x1002ef41
or eax, 0xffffffff
jne 0x1002ef41
and dword [ebp - 0x888], 0
jmp 0x1002ef4b
mov dword [ebp - 0x888], 1
push 0
lea ecx, [ebp - 0x958]
call fcn.10001426
mov eax, dword [eax]
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x4e0], eax
cmp dword [ebp - 0x4e0], 0xe283
jl 0x1002ef84
mov dword [ebp - 0x5f0], 1
jmp 0x1002ef8b
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x5f0], eax
jl 0x1002efa2
mov dword [ebp - 0x4e8], 1
jmp 0x1002efa9
and dword [ebp - 0x4e8], 0
push 0
lea ecx, [ebp - 0x958]
call fcn.10001426
mov esi, dword [ebp - 0x4e8]
imul esi, dword [eax]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e8]
call fcn.10001426
cmp dword [eax], esi
jg 0x1002efdd
mov dword [ebp - 0x2e0], 1
jmp 0x1002efe4
and dword [ebp - 0x2e0], 0
push 0
lea ecx, [ebp - 0x9d8]
call fcn.10001426
mov ecx, dword [ebp - 0x2e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2e0]
add eax, 5
mov dword [ebp - 0x784], eax
jmp 0x1002ee29
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x9d8]
call fcn.1000140a
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x958]
call fcn.1000140a
jmp 0x1002ed62
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e8]
call fcn.1000140a
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x164]
and eax, 0xa8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x164]
or ecx, 0xa8
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x164]
mov byte [ebp + eax - 0x94c], cl
mov dword [ebp - 0x4f8], 5
mov dword [ebp - 0x520], 0xffffffff
mov dword [ebp - 0x608], 0xfffffffd
mov dword [ebp - 0x308], 3
mov dword [ebp - 0x600], 0xc1747346
mov dword [ebp - 0x2e8], 9
mov dword [ebp - 0x29c], 0
jmp 0x1002f0d2
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1002f0ee
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x500], 0x33c63384
jmp 0x1002f0c5
mov dword [ebp - 0x354], 0x3d4c
mov dword [ebp - 0x794], str.hvk_tzsj_hkx_thkuvgqf_sbigycqpc_ojctdiy
cmp dword [ebp - 0x354], 0x4069
jle 0x1002f1ba
and dword [ebp - 0x21c], 0
jmp 0x1002f128
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x5f6c
jge 0x1002f1ba
and dword [ebp - 0x274], 0
jmp 0x1002f14e
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x743
jge 0x1002f1b5
and dword [ebp - 0x224], 0
jmp 0x1002f170
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x37e8
jge 0x1002f1b3
mov eax, dword [ebp - 0x21c]
add eax, dword [ebp - 0x274]
add eax, dword [ebp - 0x224]
cdq
mov dword [ebp - 0x810], eax
mov dword [ebp - 0x80c], edx
push dword [ebp - 0x80c]
push dword [ebp - 0x810]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x1002f163
jmp 0x1002f141
jmp 0x1002f11b
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0x4f8], 0
jne 0x1002f1f6
xor eax, eax
inc eax
jne 0x1002f1f6
and dword [ebp - 0x678], 0
jmp 0x1002f200
mov dword [ebp - 0x678], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x500]
imul eax, dword [ebp - 0x678]
cmp eax, 1
jge 0x1002f225
mov dword [ebp - 0x4f0], 1
jmp 0x1002f22c
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x4f0]
jle 0x1002f246
mov dword [ebp - 0x5f8], 1
jmp 0x1002f24d
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x5f8]
cmp dword [ebp - 0x4f8], eax
jle 0x1002f447
mov dword [ebp - 0xa8], 0x3de81d53
mov dword [ebp - 0x2b4], 1
mov dword [ebp - 0x510], 0x4a52d86a
mov dword [ebp - 0x6ec], 0xd593b88a
mov dword [ebp - 0x890], 0xfffffffd
cmp dword [ebp - 0x608], 0
je 0x1002f432
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0xb04], eax
mov dword [ebp - 0x2b4], 1
cmp dword [ebp - 0x2b4], 0
je 0x1002f2d6
cmp dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0x2b4]
add eax, dword [ebp - 0xa8]
cmp eax, 2
ja 0x1002f2f3
mov dword [ebp - 0x6bc], 1
jmp 0x1002f2fa
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0
jae 0x1002f314
or eax, 0xffffffff
je 0x1002f314
mov dword [ebp - 0x8d8], 1
jmp 0x1002f31b
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0xb0c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xb14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x500], 0
jne 0x1002f355
mov eax, 0x5f98
test eax, eax
jne 0x1002f355
and dword [ebp - 0x78c], 0
jmp 0x1002f35f
mov dword [ebp - 0x78c], 1
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xb1c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x600]
je 0x1002f391
mov dword [ebp - 0x508], 1
jmp 0x1002f398
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x508], eax
jg 0x1002f3b2
mov dword [ebp - 0x680], 1
jmp 0x1002f3b9
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x510]
cmp eax, dword [ebp - 0x608]
je 0x1002f3df
mov dword [ebp - 0x518], 1
jmp 0x1002f3e6
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
sub eax, 5
jne 0x1002f40f
cmp dword [ebp - 0x520], 0
jne 0x1002f40f
and dword [ebp - 0x610], 0
jmp 0x1002f419
mov dword [ebp - 0x610], 1
mov eax, dword [ebp - 0x610]
sub eax, 0xfffa
je 0x1002f432
mov dword [ebp - 0x350], 1
jmp 0x1002f439
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x890], eax
jmp 0x1002f461
mov byte [ebp - 0x8a], 0
movzx eax, byte [ebp - 0x8a]
test eax, eax
je 0x1002f461
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x354], 0x3b6d
jge 0x1002f484
mov edx, dword [ebp - 0x794]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x1002f4a0
or dword [ebp - 4], 0xffffffff
jmp 0x1002f4aa
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x1002f4e1
push 0
push 0x2105
push 0
push 0
push 0x25bc
push 0x1543
push 0x27c
push 0x1db4
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [ebp - 0x28], 2
and dword [ebp - 0x18c], 0
jmp 0x1002f4f9
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1e
jae 0x1003038e
mov dword [ebp - 0x920], 0xfffffff8
mov dword [ebp - 0xc0], 0xebf9
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x79c], 0xffffffff
mov dword [ebp - 0x22c], 0
jmp 0x1002f544
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1002f560
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x33c], 2
jmp 0x1002f537
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
inc eax
mov dword [ebp - 0x920], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
mov dword [ebp - 0xb68], eax
cmp dword [ebp - 0xc0], 0
je 0x1002f5a1
xor eax, eax
inc eax
je 0x1002f5a1
mov dword [ebp - 0x35c], 1
jmp 0x1002f5a8
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x364], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
cmp eax, dword [ebp - 0x364]
jge 0x1002f5d5
mov dword [ebp - 0x36c], 1
jmp 0x1002f5dc
and dword [ebp - 0x36c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
cmp eax, dword [ebp - 0x36c]
je 0x1002f5fd
mov dword [ebp - 0x374], 1
jmp 0x1002f604
and dword [ebp - 0x374], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x33c]
imul ecx, dword [ebp - 0x374]
cmp ecx, dword [ebp + eax - 0x33c]
jne 0x1002f633
mov dword [ebp - 0x37c], 1
jmp 0x1002f63a
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0xffffd24e
je 0x1002f652
mov dword [ebp - 0x384], 1
jmp 0x1002f659
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x79c], eax
mov dword [ebp - 0xc0], 0
jmp 0x1002f684
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x1002f6c7
mov dword [ebp - 0x38c], 0xfffffffe
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x1002f6b8
push 0
push 0x1f69
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov eax, dword [ebp - 0x38c]
dec eax
mov dword [ebp - 0x38c], eax
jmp 0x1002f677
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x164]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1002fc80
mov dword [ebp - 0x394], 0x2643
mov dword [ebp - 0x898], str.rbrueyu_sxhio_sob_gsfdcctg_qlpbs_gbk_uaobzvr_dvwln_vajde_nkfkomgs_pnclzs_vfbuv
cmp dword [ebp - 0x394], 0x26a8
jle 0x1002f7ba
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
and dword [ebp - 0x27c], 0
jmp 0x1002f724
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x65ad
jge 0x1002f7ba
and dword [ebp - 0x234], 0
jmp 0x1002f74a
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x4bd9
jge 0x1002f7b5
and dword [ebp - 0x2a4], 0
jmp 0x1002f76c
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x2c9e
jge 0x1002f7b3
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x234]
shl eax, cl
mov ecx, dword [ebp - 0x2a4]
shl eax, cl
cdq
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0x818], edx
push dword [ebp - 0x818]
push dword [ebp - 0x81c]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x1002f75f
jmp 0x1002f73d
jmp 0x1002f717
mov dword [ebp - 0xe0], 0
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x394], 0x2540
jge 0x1002f7e7
mov edx, dword [ebp - 0x898]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x1002f803
or dword [ebp - 4], 0xffffffff
jmp 0x1002f80d
mov dword [ebp - 0x7a4], 0x52cb1363
push 3
lea ecx, [ebp - 0x9f0]
call fcn.100013ad
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x1a8], 0
jmp 0x1002f844
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x1002f866
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0x9f0]
call fcn.10001426
mov dword [eax], 5
jmp 0x1002f837
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x7a4], eax
mov dword [ebp - 0xe0], 0
jmp 0x1002f88b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x1002f8ad
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x9f0]
call fcn.10001426
mov dword [eax], 0x3b6182ea
jmp 0x1002f87e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9f0]
call fcn.1000140a
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x164]
inc eax
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x164]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0xb70], 0xffffffff
mov dword [ebp - 0xb78], 0x78d8ef06
mov dword [ebp - 0xb80], 9
mov dword [ebp - 0xbb0], 0xfffffffc
mov dword [ebp - 0xbb8], 0xce570888
mov dword [ebp - 0x1b0], 0
jmp 0x1002f935
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x1002f951
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xd1c], 0
jmp 0x1002f928
mov dword [ebp - 0x68], 0x19
jmp 0x1002f961
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jg 0x1002fc7b
mov dword [ebp - 0x39c], 0x4618
mov dword [ebp - 0x7ac], str.gmfr_lqfn_dqqfmhr_wmmlz_agalqbvma_szchdht_gfhz_zpjmuck
cmp dword [ebp - 0x39c], 0x4792
jle 0x1002fa69
and dword [ebp - 0x1b8], 0
jmp 0x1002f9a5
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x24a
jge 0x1002fa69
and dword [ebp - 0x1c0], 0
jmp 0x1002f9cb
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x2d8d
jge 0x1002fa64
and dword [ebp - 0x1c8], 0
jmp 0x1002f9f1
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x54cf
jge 0x1002fa5f
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x1c0]
mov ecx, dword [ebp - 0x1c8]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x824], edx
push dword [ebp - 0x824]
push dword [ebp - 0x828]
lea ecx, [ebp - 0xc34]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x8e0], eax
mov ecx, dword [ebp - 0x8e0]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xc34]
call fcn.10001398
jmp 0x1002f9e4
jmp 0x1002f9be
jmp 0x1002f998
mov dword [ebp - 0xc8], 0x9ea4
mov dword [ebp - 4], 0x20
cmp dword [ebp - 0x39c], 0x4449
jge 0x1002fa92
push dword [ebp - 0x7ac]
call fcn.10040c20
pop ecx
jmp 0x1002faae
or dword [ebp - 4], 0xffffffff
jmp 0x1002fab8
mov dword [ebp - 0x8a0], 0xffffffff
mov dword [ebp - 0xbc0], 0xfffffff8
mov dword [ebp - 0xb84], 2
mov dword [ebp - 0xae8], 0xfffffffa
mov dword [ebp - 0xa74], 0x13cef33
mov dword [ebp - 0xa7c], 1
mov dword [ebp - 0xa40], 0x61fb9a31
mov dword [ebp - 0xb58], 0xfffffff6
mov dword [ebp - 0xa48], 0x21589afc
mov dword [ebp - 0xaf0], 1
mov dword [ebp - 0xa50], 2
mov dword [ebp - 0xb5c], 0xf9f41adf
mov dword [ebp - 0xa58], 0x66d9918c
mov dword [ebp - 0xaf8], 1
mov dword [ebp - 0xa60], 1
mov dword [ebp - 0x16c], 0
jmp 0x1002fb67
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jge 0x1002fb83
mov eax, dword [ebp - 0x16c]
mov dword [ebp + eax*4 - 0xc88], 0x461302d9
jmp 0x1002fb5a
cmp dword [ebp - 0xc8], 0
je 0x1002fba7
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jge 0x1002fba0
mov dword [ebp - 0x3a4], 1
jmp 0x1002fba7
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0xc8], 0
jmp 0x1002fbcc
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x12
jge 0x1002fc76
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x1002fbf3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002fc09
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xcc4], 0x78c3
jmp 0x1002fbec
mov dword [ebp - 0x44], 0
jmp 0x1002fc19
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002fc2f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x7b4], 0xe76d238e
jmp 0x1002fc12
mov eax, dword [ebp - 0x30c]
dec eax
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x68], eax
jle 0x1002fc57
mov dword [ebp - 0x3ac], 1
jmp 0x1002fc5e
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0x7b4], ecx
jmp 0x1002fbbf
jmp 0x1002f95a
jmp 0x1002f4f1
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x78], 0x4108fa7a
mov dword [ebp - 0x2f0], 0
mov dword [ebp - 0x7cc], 0xffffffff
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jl 0x1002fccb
mov dword [ebp - 0x934], 1
jmp 0x1002fcd2
and dword [ebp - 0x934], 0
cmp dword [ebp - 0x14], 0
jbe 0x1002fce4
mov dword [ebp - 0x7c0], 1
jmp 0x1002fceb
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
je 0x1002fd1b
cmp dword [ebp - 0x14], 0
je 0x1002fd1b
mov dword [ebp - 0x3b4], 1
jmp 0x1002fd22
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0x14]
jne 0x1002fd3d
mov dword [ebp - 0x3bc], 1
jmp 0x1002fd44
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0xffff
jb 0x1002fd65
mov eax, 0xc47a
test eax, eax
je 0x1002fd65
mov dword [ebp - 0x3c4], 1
jmp 0x1002fd6c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
neg eax
cmp eax, dword [ebp - 0x14]
jne 0x1002fd85
mov dword [ebp - 0x3cc], 1
jmp 0x1002fd8c
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x3cc]
add eax, 0xb300
cmp eax, dword [ebp - 0x14]
je 0x1002fdaf
cmp dword [ebp - 0x14], 0
jne 0x1002fdaf
and dword [ebp - 0x34c], 0
jmp 0x1002fdb9
mov dword [ebp - 0x34c], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x34c], eax
jle 0x1002fdd0
mov dword [ebp - 0x3dc], 1
jmp 0x1002fdd7
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0
jle 0x1002fdec
mov dword [ebp - 0x3e4], 1
jmp 0x1002fdf3
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 8
jae 0x1002fe08
mov dword [ebp - 0x3ec], 1
jmp 0x1002fe0f
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x3ec]
jle 0x1002fe28
xor eax, eax
inc eax
jne 0x1002fe28
and dword [ebp - 0x3f4], 0
jmp 0x1002fe32
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2f0]
je 0x1002fe73
cmp dword [ebp - 0x78], 0
jne 0x1002fe73
cmp dword [ebp - 0x2f0], 0
jne 0x1002fe73
and dword [ebp - 0x3fc], 0
jmp 0x1002fe7d
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3fc], eax
jg 0x1002fe94
mov dword [ebp - 0x404], 1
jmp 0x1002fe9b
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0x3f0e
jne 0x1002feb3
mov dword [ebp - 0x40c], 1
jmp 0x1002feba
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 0xa25a
jge 0x1002fed2
mov dword [ebp - 0x8a8], 1
jmp 0x1002fed9
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x78], 0xffffffea
jmp 0x1002fefb
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff3
jl 0x10030180
mov dword [ebp - 0x998], 1
mov dword [ebp - 0x994], 1
mov dword [ebp - 0x990], 1
mov dword [ebp - 0x98c], 1
mov dword [ebp - 0x2c], 0
jmp 0x1002ff3d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1002ff59
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x998]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp + ecx*4 - 0x998], eax
jmp 0x1002ff36
mov dword [ebp - 0x2c], 3
jmp 0x1002ff69
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1003017b
mov dword [ebp - 0x8f0], 0x18c2
cmp dword [ebp - 0x8f0], 0x9fb
jge 0x10030136
mov dword [ebp - 0xa70], 0x30d47
lea eax, [ebp - 0x314]
push eax
push str._ld_n
call fcn.10041362
pop ecx
pop ecx
and dword [ebp - 0x7d8], 0
lea eax, [ebp - 0x7d8]
push eax
push 0x30d47
lea ecx, [ebp - 0x728]
call fcn.100237bd
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x15]
push eax
push str._c__ld_n
call fcn.10041362
add esp, 0xc
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x728]
call fcn.10001426
and dword [eax], 0
or dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x17c], 1
mov eax, dword [ebp - 0x314]
dec eax
mov dword [ebp - 0x314], eax
je 0x10030127
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0x15]
push eax
push str._c__ld_n
call fcn.10041362
add esp, 0xc
movsx eax, byte [ebp - 0x15]
cmp eax, 0x4c
jne 0x1003006b
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x728]
call fcn.10001426
mov ecx, dword [ebp - 0x174]
mov dword [eax], ecx
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
jmp 0x10030122
movsx eax, byte [ebp - 0x15]
cmp eax, 0x52
jne 0x1003009f
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x728]
call fcn.10001426
mov ecx, dword [ebp - 0x17c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
jmp 0x10030122
movsx eax, byte [ebp - 0x15]
cmp eax, 0x3f
jne 0x10030122
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x728]
call fcn.10001426
mov eax, dword [eax]
dec eax
sub eax, dword [ebp - 0x174]
mov dword [ebp - 0x414], eax
mov esi, dword [ebp - 0x17c]
dec esi
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x728]
call fcn.10001426
sub esi, dword [eax]
mov dword [ebp - 0x41c], esi
mov eax, dword [ebp - 0x414]
cmp eax, dword [ebp - 0x41c]
jge 0x10030104
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x424], eax
jmp 0x10030110
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x424], eax
push dword [ebp - 0x424]
push str._ld_n
call fcn.10040c20
pop ecx
pop ecx
jmp 0x1003000c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x728]
call fcn.1000140a
mov dword [ebp - 0xd0], 3
jmp 0x1003014f
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x10030176
mov byte [ebp - 0x90], 0
movzx eax, byte [ebp - 0x90]
test eax, eax
je 0x10030174
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
jmp 0x10030142
jmp 0x1002ff62
jmp 0x1002fef4
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18c]
movzx eax, byte [ebp + eax - 0x166]
movsx eax, byte [ebp + eax - 0x94c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x163]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18c]
movzx eax, byte [ebp + eax - 0x166]
movsx eax, byte [ebp + eax - 0x94c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x163]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x164]
mov byte [ebp + eax - 0x94c], dl
mov dword [ebp - 0x8b0], 2
mov dword [ebp - 0x184], 0
jmp 0x10030203
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x1003021c
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x40], 0xfffffff7
jmp 0x100301f6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x40], 1
jmp 0x10030241
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0xfffffffa
jne 0x10030382
mov dword [ebp - 0x2f8], 7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xb64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xa78], eax
cmp dword [ebp - 0x2f8], 0x8bdfadf6
jbe 0x10030294
mov dword [ebp - 0x42c], 1
jmp 0x1003029b
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp eax, dword [ebp - 0x42c]
jle 0x100302c2
cmp dword [ebp - 0x2f8], 0
je 0x100302c2
mov dword [ebp - 0x434], 1
jmp 0x100302c9
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
add eax, 0xb8b7
jne 0x100302f1
mov eax, 0x8b
test eax, eax
jne 0x100302f1
mov eax, 0xea964a90
test eax, eax
jne 0x100302f1
and dword [ebp - 0x43c], 0
jmp 0x100302fb
mov dword [ebp - 0x43c], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x40]
imul ecx, dword [ebp - 0x43c]
cmp ecx, dword [ebp + eax - 0x40]
jl 0x10030324
mov dword [ebp - 0x444], 1
jmp 0x1003032b
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x444], eax
jg 0x10030345
mov dword [ebp - 0x44c], 1
jmp 0x1003034c
and dword [ebp - 0x44c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp dword [ebp - 0x44c], eax
je 0x1003036a
mov dword [ebp - 0x454], 1
jmp 0x10030371
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x8b0], eax
jmp 0x1003022c
and dword [ebp - 0x18c], 0
jmp 0x1002f4f1
mov dword [ebp - 0xbc], 6
push 1
lea ecx, [ebp - 0x71c]
call fcn.100013ad
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x2dc], 0x55459eed
mov dword [ebp - 0x2d4], 0x51
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x2d0], 8
mov dword [ebp - 0x8b8], 0x5aa1ede5
mov dword [ebp - 0x194], 0
jmp 0x100303f4
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x10030413
push dword [ebp - 0x194]
lea ecx, [ebp - 0x71c]
call fcn.10001426
and dword [eax], 0
jmp 0x100303e7
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xa80], eax
mov esi, dword [ebp - 0xbc]
push 0
lea ecx, [ebp - 0x71c]
call fcn.10001426
cmp esi, dword [eax]
je 0x10030454
push 0
lea ecx, [ebp - 0x71c]
call fcn.10001426
cmp dword [eax], 0
je 0x10030469
cmp dword [ebp - 0xbc], 0
je 0x10030469
mov dword [ebp - 0x31c], 1
jmp 0x10030470
and dword [ebp - 0x31c], 0
push 0
lea ecx, [ebp - 0x71c]
call fcn.10001426
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x31c], eax
jl 0x1003049f
mov dword [ebp - 0x45c], 1
jmp 0x100304a6
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xbbc], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xa88], eax
cmp dword [ebp - 0x2d0], 0x58f28d92
jg 0x100304df
mov dword [ebp - 0x464], 1
jmp 0x100304e6
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x464], eax
jge 0x10030504
xor eax, eax
je 0x10030504
mov dword [ebp - 0x46c], 1
jmp 0x1003050b
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
neg eax
sub eax, dword [ebp - 0x6c]
sub eax, 0x1434e8bd
cmp eax, 3
jae 0x1003052c
mov dword [ebp - 0x7e4], 1
jmp 0x10030533
and dword [ebp - 0x7e4], 0
cmp dword [ebp - 0x6c], 0xffff
ja 0x10030548
mov dword [ebp - 0x474], 1
jmp 0x1003054f
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x474]
jne 0x10030566
mov dword [ebp - 0x47c], 1
jmp 0x1003056d
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0x6c]
cmp eax, 0xfffffffa
jl 0x10030587
mov dword [ebp - 0x484], 1
jmp 0x1003058e
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x484], eax
je 0x100305a5
mov dword [ebp - 0x48c], 1
jmp 0x100305ac
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0xf55f5dd
jge 0x100305c4
mov dword [ebp - 0x494], 1
jmp 0x100305cb
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x494], eax
je 0x100305e2
mov dword [ebp - 0x49c], 1
jmp 0x100305e9
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0xfff8
ja 0x10030601
mov dword [ebp - 0x4a4], 1
jmp 0x10030608
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x4a4], eax
jne 0x10030622
mov dword [ebp - 0x4ac], 1
jmp 0x10030629
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x4ac]
add eax, 0x54f9
mov dword [ebp - 0x7f0], eax
mov eax, dword [ebp - 0x2d4]
dec eax
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x930]
cmp eax, dword [ebp - 0x7f0]
je 0x1003066d
mov dword [ebp - 0x4b4], 1
jmp 0x10030674
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x4b4], eax
jne 0x1003068b
mov dword [ebp - 0x4bc], 1
jmp 0x10030692
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x4bc], eax
jne 0x100306ac
mov dword [ebp - 0x4c4], 1
jmp 0x100306b3
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x4c4], eax
jne 0x100306dc
push 0
lea ecx, [ebp - 0x71c]
call fcn.10001426
cmp dword [eax], 0
jne 0x100306dc
and dword [ebp - 0x4cc], 0
jmp 0x100306e6
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x8b8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x71c]
call fcn.1000140a
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x94c], 0
mov dword [ebp - 0x30], 0x2c70bb74
mov dword [ebp - 0x48], 0x2b9193c1
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x86c], 0xfffffff6
mov dword [ebp - 0x19c], 0
jmp 0x1003074a
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 3
jge 0x10030766
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0x334], 0xfffa
jmp 0x1003073d
mov dword [ebp - 0x30], 0
jmp 0x10030776
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10030b54
mov dword [ebp - 0x218], 0x5d9c727
mov dword [ebp - 0x514], 0xfb5c4ce1
mov dword [ebp - 0x938], 5
xor eax, eax
je 0x10030b20
mov dword [ebp - 0x60], 0x307b5ca9
mov dword [ebp - 0x534], 0x8b922806
mov dword [ebp - 0x8c0], 0x4108fa7a
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x334], 0
je 0x100307d3
jmp 0x10030b54
mov dword [ebp - 0x60], 0
jmp 0x100307e3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x10030b1e
mov dword [ebp - 0x4d4], 0x3d28
mov dword [ebp - 0x900], str.aifjy_rvgfzd_tmpbnwo_cqzb_yjmkt_llowszw_tzeyixsph_qsrri_poriimff_hkvqqb
cmp dword [ebp - 0x4d4], 0x4093
jle 0x100308b8
and dword [ebp - 0x1a4], 0
jmp 0x10030827
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x1c5c
jge 0x100308b8
and dword [ebp - 0x210], 0
jmp 0x1003084d
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x1041
jge 0x100308b3
mov eax, dword [ebp - 0x1a4]
cdq
idiv dword [ebp - 0x210]
mov eax, edx
cdq
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x830], edx
push dword [ebp - 0x830]
push dword [ebp - 0x834]
lea ecx, [ebp - 0xc4c]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7fc]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xc4c]
call fcn.10001398
jmp 0x10030840
jmp 0x1003081a
mov dword [ebp - 0x4dc], 0x77eb
mov dword [ebp - 4], 0x24
cmp dword [ebp - 0x4d4], 0x3b02
jge 0x100308e1
push dword [ebp - 0x900]
call fcn.10040c20
pop ecx
jmp 0x100308fd
or dword [ebp - 4], 0xffffffff
jmp 0x10030907
mov eax, dword [ebp - 0x4dc]
inc eax
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x334], 0xffffffff
ja 0x1003092d
mov dword [ebp - 0x808], 1
jmp 0x10030934
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x218]
jge 0x10030964
cmp dword [ebp - 0x218], 0
jne 0x10030964
and dword [ebp - 0x4e4], 0
jmp 0x1003096e
mov dword [ebp - 0x4e4], 1
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x4e4], eax
jg 0x10030988
mov dword [ebp - 0x4ec], 1
jmp 0x1003098f
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0x3295
je 0x100309a7
mov dword [ebp - 0x4f4], 1
jmp 0x100309ae
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 1
je 0x100309c3
mov dword [ebp - 0x4fc], 1
jmp 0x100309ca
and dword [ebp - 0x4fc], 0
imul eax, dword [ebp - 0x4fc], 0xca
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
sub eax, 0x684abf0a
jne 0x100309f3
mov eax, 0x84eb300a
test eax, eax
jne 0x100309f3
and dword [ebp - 0x504], 0
jmp 0x100309fd
mov dword [ebp - 0x504], 1
cmp dword [ebp - 0x504], 0xe1c2
jne 0x10030a15
mov dword [ebp - 0x50c], 1
jmp 0x10030a1c
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0xb6c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x334], 0xfffffffc
jne 0x10030a5c
mov dword [ebp - 0x51c], 1
jmp 0x10030a63
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x534]
cmp dword [ebp - 0x51c], eax
jl 0x10030a7d
mov dword [ebp - 0x524], 1
jmp 0x10030a84
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0xfffffff7
jg 0x10030a99
mov dword [ebp - 0x814], 1
jmp 0x10030aa0
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x938]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0xb18], eax
cmp dword [ebp - 0x60], 0
je 0x10030adb
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x334], 0
je 0x10030adb
mov dword [ebp - 0x820], 1
jmp 0x10030ae2
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xaa0], eax
cmp dword [ebp - 0x60], 0
je 0x10030b06
cmp dword [ebp - 0xf0], 0
je 0x10030b06
mov dword [ebp - 0x52c], 1
jmp 0x10030b0d
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x534], eax
jmp 0x100307dc
jmp 0x10030b4f
mov dword [ebp - 0x48], 2
jmp 0x10030b30
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x10030b4f
mov dword [ebp - 0x53c], 0xfffffff9
mov eax, dword [ebp - 0x53c]
dec eax
mov dword [ebp - 0x53c], eax
jmp 0x10030b29
jmp 0x1003076f
mov eax, dword [ebp - 0x30]
dec eax
dec eax
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x334], eax
jle 0x10030b73
mov dword [ebp - 0x544], 1
jmp 0x10030b7a
and dword [ebp - 0x544], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
imul ecx, dword [ebp + ecx - 0x334], 0xffffffff
cmp ecx, dword [ebp + eax - 0x334]
jl 0x10030ba2
mov dword [ebp - 0x54c], 1
jmp 0x10030ba9
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x54c]
jg 0x10030bc9
mov dword [ebp - 0x554], 1
jmp 0x10030bd0
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x30], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp + eax - 0x334]
jne 0x10030bf7
mov dword [ebp - 0x8c8], 1
jmp 0x10030bfe
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0xf0]
jge 0x10030c21
mov dword [ebp - 0x82c], 1
jmp 0x10030c28
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xf0], eax
lea eax, [ebp - 0x94c]
push eax
lea ecx, [ebp - 0xbec]
call fcn.100358b9
mov dword [ebp - 4], 0x26
and dword [ebp - 0x250], 0
jmp 0x10030c78
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0xf
jae 0x100311ed
push 1
lea ecx, [ebp - 0x91c]
call fcn.100013ad
mov byte [ebp - 4], 0x27
mov dword [ebp - 0xcc], 0xd7839892
mov dword [ebp - 0x2e4], 0xb6bc3ec3
mov dword [ebp - 0x55c], 0x2c66
mov dword [ebp - 0x838], str.ewexdsi_unqdqij_rsz_uzkhbj_cza_ayyuuh_hjasr_ctopna_kvt_crb
cmp dword [ebp - 0x55c], 0x2fcc
jle 0x10030d43
and dword [ebp - 0x220], 0
jmp 0x10030ce0
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x534b
jge 0x10030d43
and dword [ebp - 0x228], 0
jmp 0x10030d02
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x333a
jge 0x10030d41
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x228]
sar eax, cl
cdq
mov dword [ebp - 0x840], eax
mov dword [ebp - 0x83c], edx
push dword [ebp - 0x83c]
push dword [ebp - 0x840]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x10030cf5
jmp 0x10030cd3
mov dword [ebp - 0x248], 0
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x55c], 0x296b
jge 0x10030d6d
mov edx, dword [ebp - 0x838]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x10030d89
mov dword [ebp - 4], 0x27
jmp 0x10030d99
mov dword [ebp - 0x850], 0xffffffff
mov dword [ebp - 0xc4], 0x2db785b6
mov dword [ebp - 0x4c], 0
jmp 0x10030dbd
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10030dd9
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x91c]
call fcn.10001426
mov dword [eax], 0x29ea4144
jmp 0x10030db6
mov dword [ebp - 0x564], 0x657e
mov dword [ebp - 0x844], str.aqpvxrrdn_fdtu_bztqnq_jyouech_xlwk_tdp_qxkj_vzsdhr_btqtgpdt_pqyjyzc_lbepvhoev
cmp dword [ebp - 0x564], 0x6836
jle 0x10030ed2
and dword [ebp - 0x230], 0
jmp 0x10030e13
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x1e13
jge 0x10030ed2
and dword [ebp - 0x238], 0
jmp 0x10030e39
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x60aa
jge 0x10030ecd
and dword [ebp - 0x240], 0
jmp 0x10030e5f
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x7d85
jge 0x10030ec8
mov eax, dword [ebp - 0x230]
sub eax, dword [ebp - 0x238]
or eax, dword [ebp - 0x240]
cdq
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x848], edx
push dword [ebp - 0x848]
push dword [ebp - 0x84c]
lea ecx, [ebp - 0xc7c]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x874], eax
mov ecx, dword [ebp - 0x874]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xc7c]
call fcn.10001398
jmp 0x10030e52
jmp 0x10030e2c
jmp 0x10030e06
mov dword [ebp - 0x4c], 0
jmp 0x10030ee2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10030ef8
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xf8], 0x72d714f9
jmp 0x10030edb
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x564], 0x628e
jge 0x10030f14
push dword [ebp - 0x844]
call fcn.10040c20
pop ecx
jmp 0x10030f30
mov dword [ebp - 4], 0x27
jmp 0x10030f40
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x56c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x56c]
mov dword [ebp + eax - 0xf8], ecx
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x56c]
imul esi, eax, 0xc58a
push 0
lea ecx, [ebp - 0x91c]
call fcn.10001426
add esi, dword [eax]
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
test esi, esi
je 0x10030fd5
cmp dword [ebp - 0xcc], 0
jne 0x10030fa7
mov dword [ebp - 0x87c], 1
jmp 0x10030fae
and dword [ebp - 0x87c], 0
push 0
lea ecx, [ebp - 0x91c]
call fcn.10001426
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x850]
jg 0x10030fd5
mov dword [ebp - 0x574], 1
jmp 0x10030fdc
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x574], eax
jne 0x10030ff6
mov dword [ebp - 0x57c], 1
jmp 0x10030ffd
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
sub eax, dword [ebp - 0x248]
add eax, 0x2e605aad
cmp eax, dword [ebp - 0xcc]
jne 0x10031022
mov dword [ebp - 0x584], 1
jmp 0x10031029
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0xcc], 0
jne 0x10031166
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xcc]
jge 0x10031068
mov dword [ebp - 0x884], 1
jmp 0x1003106f
and dword [ebp - 0x884], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 6
je 0x1003108b
mov dword [ebp - 0x85c], 1
jmp 0x10031092
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xb74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0x4613
jge 0x100310bd
mov dword [ebp - 0x58c], 1
jmp 0x100310c4
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x58c], eax
jl 0x100310de
mov dword [ebp - 0x594], 1
jmp 0x100310e5
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0x101eae88
jle 0x100310fd
mov dword [ebp - 0x59c], 1
jmp 0x10031104
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x81cdffa8
jne 0x1003111c
mov dword [ebp - 0x5a4], 1
jmp 0x10031123
and dword [ebp - 0x5a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5a4]
neg ecx
sub ecx, dword [ebp + eax - 0xf8]
mov dword [ebp - 0x5ac], ecx
push 0
lea ecx, [ebp - 0x91c]
call fcn.10001426
mov ecx, dword [ebp - 0x5ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5ac]
neg eax
jne 0x10031166
and dword [ebp - 0x5b4], 0
jmp 0x10031170
mov dword [ebp - 0x5b4], 1
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x5b4], eax
jle 0x1003118a
mov dword [ebp - 0x5bc], 1
jmp 0x10031191
and dword [ebp - 0x5bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5bc]
sub ecx, dword [ebp + eax - 0xf8]
cmp ecx, dword [ebp - 0x248]
jle 0x100311b8
mov dword [ebp - 0x5c4], 1
jmp 0x100311bf
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x2e4], eax
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x91c]
call fcn.1000140a
mov eax, dword [ebp - 0x250]
mov byte [ebp + eax - 0x94c], 0
jmp 0x10030c6b
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x748], 0
cmp dword [ebp - 0xd4], 0
je 0x100313e8
mov dword [ebp - 0x5cc], 0x647c
mov dword [ebp - 0x738], str.kbdccaf_qwqom_ngiak_inazni_mche_noyedzl_bgxisjbd_bzanzh_ganvorr_jpb
cmp dword [ebp - 0x5cc], 0x64b9
jle 0x10031341
and dword [ebp - 0x268], 0
jmp 0x10031248
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x4127
jge 0x10031341
and dword [ebp - 0x270], 0
jmp 0x1003126e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x3fe0
jge 0x1003133c
and dword [ebp - 0x258], 0
jmp 0x10031294
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x60f6
jge 0x10031337
and dword [ebp - 0x260], 0
jmp 0x100312ba
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x3ae4
jge 0x10031332
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x260]
sar eax, cl
mov edx, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x270]
sar edx, cl
or eax, edx
cdq
mov dword [ebp - 0x858], eax
mov dword [ebp - 0x854], edx
push dword [ebp - 0x854]
push dword [ebp - 0x858]
lea ecx, [ebp - 0xca0]
call fcn.10001331
pop ecx
pop ecx
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x730]
call fcn.100013a2
push eax
call fcn.10040c20
pop ecx
lea ecx, [ebp - 0xca0]
call fcn.10001398
jmp 0x100312ad
jmp 0x10031287
jmp 0x10031261
jmp 0x1003123b
mov dword [ebp - 0xd4], 0
jmp 0x1003135a
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jl 0x1003139e
mov dword [ebp - 0x278], 0xfffffff8
mov dword [ebp - 0x278], 0xffffffe8
jmp 0x10031386
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffffe
jg 0x1003139c
cmp dword [ebp - 0xd4], 0
je 0x1003139a
jmp 0x1003139c
jmp 0x10031379
jmp 0x1003134d
mov byte [ebp - 4], 0x2c
cmp dword [ebp - 0x5cc], 0x6434
jge 0x100313ba
push dword [ebp - 0x738]
call fcn.10040c20
pop ecx
jmp 0x100313d6
mov dword [ebp - 4], 0x26
jmp 0x100313e6
jmp 0x100313fe
mov dword [ebp - 0x740], 1
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x748], eax
push 1
push 0
lea eax, [ebp - 0xbec]
push eax
push dword [ebp - 0x5d4]
call fcn.10032122
add esp, 0x10
mov dword [0x10074490], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbec]
call fcn.10004480
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x74], 0xfffffffe
mov dword [ebp - 0x108], 0x24b54114
mov dword [ebp - 0xdc], 0x67457993
push 1
lea ecx, [ebp - 0xb54]
call fcn.100013ad
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x54], 0
jmp 0x10031474
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10031490
push dword [ebp - 0x54]
lea ecx, [ebp - 0xb54]
call fcn.10001426
mov dword [eax], 0x95761be3
jmp 0x1003146d
mov dword [ebp - 0x54], 0
jmp 0x100314a0
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x100314b6
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x978], 0x45cb296a
jmp 0x10031499
cmp dword [ebp - 0xb0], 0xffff
jae 0x100314ce
mov dword [ebp - 0x5dc], 1
jmp 0x100314d5
and dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x5dc], 1
jle 0x100314ea
mov dword [ebp - 0x5e4], 1
jmp 0x100314f1
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x74]
jle 0x10031514
mov dword [ebp - 0x5ec], 1
jmp 0x1003151b
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x5ec], eax
jl 0x10031532
mov dword [ebp - 0x5f4], 1
jmp 0x10031539
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x74], eax
push 4
pop eax
sub eax, dword [ebp - 0x74]
sub eax, 0x3ee7
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0xdc]
jl 0x10031570
mov dword [ebp - 0x5fc], 1
jmp 0x10031577
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xdc], 0
jmp 0x1003159c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jg 0x1003189e
mov dword [ebp - 0x288], 0xda781b5f
mov dword [ebp - 0xe4], 0xc5a4a104
mov dword [ebp - 0x988], 0xb108f980
mov dword [ebp - 0x984], 0xb108f980
mov dword [ebp - 0x980], 0xb108f980
mov dword [ebp - 0x97c], 0xb108f980
push 1
lea ecx, [ebp - 0x970]
call fcn.100013ad
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x280], 0
jmp 0x1003160f
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 1
jge 0x10031631
push dword [ebp - 0x280]
lea ecx, [ebp - 0x970]
call fcn.10001426
mov dword [eax], 0xe89c674f
jmp 0x10031602
mov dword [ebp - 0xb0], 0
jmp 0x1003164a
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10031842
mov dword [ebp - 0x100], 0x2a6add33
mov dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0xe4]
jge 0x10031685
mov dword [ebp - 0x604], 1
jmp 0x1003168c
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x604]
jle 0x100316ac
mov dword [ebp - 0x60c], 1
jmp 0x100316b3
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x60c], eax
jle 0x100316cd
mov dword [ebp - 0x614], 1
jmp 0x100316d4
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x614], eax
jge 0x100316ee
mov dword [ebp - 0x61c], 1
jmp 0x100316f5
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0x40a9711f
jg 0x1003170d
mov dword [ebp - 0x624], 1
jmp 0x10031714
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x624], eax
jle 0x1003172e
mov dword [ebp - 0x62c], 1
jmp 0x10031735
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x62c]
test eax, eax
je 0x1003175b
cmp dword [ebp - 0x100], 0
je 0x1003175b
mov dword [ebp - 0x634], 1
jmp 0x10031762
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
sub eax, 0x3395cc9e
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x978], eax
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0xe4]
jl 0x10031794
mov dword [ebp - 0x63c], 1
jmp 0x1003179b
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x63c]
je 0x100317bb
cmp dword [ebp - 0x288], 0
jne 0x100317bb
and dword [ebp - 0x644], 0
jmp 0x100317c5
mov dword [ebp - 0x644], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x644]
mov dword [ebp + eax - 0x988], ecx
cmp dword [ebp - 0x74], 0
je 0x100317f3
cmp dword [ebp - 0x100], 0
je 0x100317f3
mov dword [ebp - 0x64c], 1
jmp 0x100317fa
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0xe4], 0
jmp 0x1003181f
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jg 0x1003183d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x978]
mov dword [ebp - 0x750], eax
jmp 0x10031812
jmp 0x1003163d
push 0
lea ecx, [ebp - 0x970]
call fcn.10001426
mov esi, eax
push 0
lea ecx, [ebp - 0x970]
call fcn.10001426
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10031870
mov dword [ebp - 0x654], 1
jmp 0x10031877
and dword [ebp - 0x654], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x654]
mov dword [ebp + eax - 0x988], ecx
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0x970]
call fcn.1000140a
jmp 0x1003158f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.1000140a
cmp dword [0x10074490], 0
je 0x10031ee5
mov dword [ebp - 0xba8], 0xcf5720e
mov dword [ebp - 0xba4], 0xcf5720e
mov dword [ebp - 0xba0], 0xcf5720e
mov dword [ebp - 0xb9c], 0xcf5720e
mov dword [ebp - 0x7c], 0xfffffffd
mov dword [ebp - 0x7c], 3
jmp 0x100318f9
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x100319c0
mov dword [ebp - 0x290], 0
jmp 0x1003191c
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x10031938
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x710], 1
jmp 0x1003190f
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x10031961
push 0
push 0x187d
push 0x1f38
push 0x980
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x710], 3
jmp 0x1003198f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x710]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x710], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x710], 0
jl 0x100319bb
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x100319b9
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
jmp 0x10031974
jmp 0x100318f2
mov dword [ebp - 0x7c], 0
jmp 0x100319d0
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 6
jle 0x10031bb8
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x110], 0x92bd
mov dword [ebp - 0x298], 0
jmp 0x10031a07
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x15
jg 0x10031a3e
cmp dword [ebp - 0x110], 0
je 0x10031a1b
jmp 0x10031a3e
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x10031a3c
push 0
push 1
push 0x2393
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
jmp 0x100319fa
mov dword [ebp - 0x110], 0
jmp 0x10031a57
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jg 0x10031bb3
mov byte [ebp - 0xb1], 0
mov dword [ebp - 0x65c], 0x7189
mov dword [ebp - 0x758], str.apsewr_jdrlw_zsjpgboua_domwsj_cajhka_jzux
cmp dword [ebp - 0x65c], 0x743c
jle 0x10031b3a
and dword [ebp - 0x2b0], 0
jmp 0x10031aa5
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x2b5b
jge 0x10031b3a
and dword [ebp - 0x2a0], 0
jmp 0x10031acb
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x7d8b
jge 0x10031b35
and dword [ebp - 0x2a8], 0
jmp 0x10031aed
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x210
jge 0x10031b33
mov eax, dword [ebp - 0x2a0]
cdq
idiv dword [ebp - 0x2a8]
mov eax, dword [ebp - 0x2b0]
sub eax, edx
cdq
mov dword [ebp - 0x864], eax
mov dword [ebp - 0x860], edx
push dword [ebp - 0x860]
push dword [ebp - 0x864]
mov ecx, 0x10073038
call fcn.10004272
jmp 0x10031ae0
jmp 0x10031abe
jmp 0x10031a98
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10031b4d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x65c], 0x6e7e
jge 0x10031b70
mov edx, dword [ebp - 0x758]
mov ecx, 0x10073038
call fcn.100062fd
jmp 0x10031b8c
or dword [ebp - 4], 0xffffffff
jmp 0x10031b96
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x10031bae
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
jmp 0x10031a4a
jmp 0x100319c9
mov eax, dword [ebp + 8]
mov dword [ebp - 0x760], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x768], 0xf4288a13
mov dword [ebp - 0x2b8], 0xffffffff
mov dword [ebp - 0xab8], 0
mov dword [ebp - 0x118], 0x10d21dfe
mov dword [ebp - 0xb28], 8
push 3
lea ecx, [ebp - 0x9cc]
call fcn.100013ad
mov dword [ebp - 4], 0x32
mov dword [ebp - 0x120], 0xcd9d75
push 1
lea ecx, [ebp - 0x964]
call fcn.100013ad
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x5c], 0
jmp 0x10031c51
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10031c6d
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x9cc]
call fcn.10001426
mov dword [eax], 0x439cb61d
jmp 0x10031c4a
mov dword [ebp - 0x5c], 0
jmp 0x10031c7d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10031c99
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x964]
call fcn.10001426
mov dword [eax], 0x1fc2da8a
jmp 0x10031c76
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x768]
cmp eax, dword [ebp - 0x84]
je 0x10031cc0
mov dword [ebp - 0x664], 1
jmp 0x10031cc7
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x664], eax
jl 0x10031ce1
mov dword [ebp - 0x66c], 1
jmp 0x10031ce8
and dword [ebp - 0x66c], 0
push 0
lea ecx, [ebp - 0x964]
call fcn.10001426
mov ecx, dword [ebp - 0x66c]
mov dword [eax], ecx
mov dword [ebp - 0x118], 2
jmp 0x10031d16
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x10031dc2
mov dword [ebp - 0x84], 0
jmp 0x10031d3c
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10031d5e
push dword [ebp - 0x84]
lea ecx, [ebp - 0x9cc]
call fcn.10001426
mov dword [eax], 0xa2ff3e14
jmp 0x10031d2f
mov dword [ebp - 0x2b8], 0
jmp 0x10031d77
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jl 0x10031dbd
mov dword [ebp - 0x120], 0
jmp 0x10031d99
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x10031dbb
push dword [ebp - 0x120]
lea ecx, [ebp - 0x964]
call fcn.10001426
mov dword [eax], 0x53d2ae45
jmp 0x10031d8c
jmp 0x10031d6a
jmp 0x10031d09
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x964]
call fcn.1000140a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9cc]
call fcn.1000140a
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x778], eax
push dword [ebp - 0x778]
push dword [ebp - 0x780]
call dword [0x10074490]
mov dword [ebp - 0x790], eax
push 2
lea ecx, [ebp - 0x92c]
call fcn.100013ad
mov dword [ebp - 4], 0x34
mov dword [ebp - 0x788], 1
mov dword [ebp - 0x67c], 0xc556123d
mov dword [ebp - 0x2c0], 0
jmp 0x10031e45
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jge 0x10031e67
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x92c]
call fcn.10001426
mov dword [eax], 0xe0a8eac8
jmp 0x10031e38
push 0
lea ecx, [ebp - 0x92c]
call fcn.10001426
mov dword [eax], 0x12
jmp 0x10031ea0
push 0
lea ecx, [ebp - 0x92c]
call fcn.10001426
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x674]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x92c]
call fcn.10001426
cmp dword [eax], 0xffffffe5
jge 0x10031ebe
mov dword [ebp - 0x788], 0x77dd6887
jmp 0x10031e7c
mov eax, dword [ebp - 0x67c]
inc eax
mov dword [ebp - 0x67c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x92c]
call fcn.1000140a
mov eax, dword [ebp - 0x790]
jmp 0x10032111
mov dword [ebp - 0x70], 0xfffffff8
push 1
lea ecx, [ebp - 0x9e4]
call fcn.100013ad
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x64], 0
jmp 0x10031f10
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10031f26
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x9fc], 2
jmp 0x10031f09
mov dword [ebp - 0x64], 0
jmp 0x10031f36
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10031f52
push dword [ebp - 0x64]
lea ecx, [ebp - 0x9e4]
call fcn.10001426
mov dword [eax], 0xdb8e9646
jmp 0x10031f2f
mov dword [ebp - 0x70], 0
jmp 0x10031f62
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jg 0x100320de
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x798], 0x9725
mov dword [ebp - 0x2c8], 0
jmp 0x10031f99
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x10031fb5
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xbcc], 0xc345fe46
jmp 0x10031f8c
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x70]
mov ecx, dword [ebp + ecx*4 - 0x9fc]
cmp ecx, dword [ebp + eax*4 - 0x9fc]
je 0x10031fd7
mov dword [ebp - 0x2f4], 1
jmp 0x10031fde
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x2ec]
jle 0x10031ff8
mov dword [ebp - 0x684], 1
jmp 0x10031fff
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x684]
mov dword [ebp - 0x68c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0xbcc], ecx
cmp dword [ebp - 0x68c], 0x959310c1
jbe 0x10032039
mov dword [ebp - 0x694], 1
jmp 0x10032040
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x694]
jge 0x1003205a
mov dword [ebp - 0x69c], 1
jmp 0x10032061
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x9fc], ecx
mov eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x69c]
jle 0x1003208b
mov dword [ebp - 0x2fc], 1
jmp 0x10032092
and dword [ebp - 0x2fc], 0
push 0
lea ecx, [ebp - 0x9e4]
call fcn.10001426
mov ecx, dword [ebp - 0x2fc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x798], eax
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x100320d9
push 0
push 0
push 0x262d
push 0x2011
call dword [sym.imp.USER32.dll_SetScrollInfo]
jmp 0x10031f5b
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x10032100
push 0x24ff
push 0x103f
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9e4]
call fcn.1000140a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret