Function at 0x1002aeeb
Capabilities:
Modify service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100570c7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x420
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x7c], 0
jmp 0x1002af38
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1002af4e
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xec], 0xbe1d925b
jmp 0x1002af31
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x130], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0xec], ecx
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x58], 2
jmp 0x1002af83
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1002b13d
mov dword [ebp - 0x2a8], 0x54d8142
mov dword [ebp - 0xb8], 0
jmp 0x1002afb0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1002afcc
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x3e4], 0xffffffff
jmp 0x1002afa3
mov dword [ebp - 0x28], 0
jmp 0x1002afdc
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1002b138
mov dword [ebp - 0x28c], 0xffffffff
mov dword [ebp - 0x26c], 0x4ea14c55
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xec]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34c], eax
mov eax, dword [ebp - 0x28]
push 4
pop ecx
shl ecx, 1
mov edx, dword [ebp - 0x28c]
imul edx, dword [ebp + ecx - 0xec]
cmp edx, dword [ebp + eax*4 - 0xec]
je 0x1002b03e
mov dword [ebp - 0xcc], 1
jmp 0x1002b045
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x3e4], ecx
mov eax, dword [ebp - 0x26c]
add eax, dword [ebp - 0xcc]
je 0x1002b071
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xec], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0x26c]
jge 0x1002b08f
mov dword [ebp - 0x224], 1
jmp 0x1002b096
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xec]
cmp eax, dword [ebp - 0x224]
jne 0x1002b0b7
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xec], 0
je 0x1002b0cc
mov eax, 0x2afd77cc
test eax, eax
je 0x1002b0cc
mov dword [ebp - 0xfc], 1
jmp 0x1002b0d3
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0xfc], eax
jle 0x1002b0f4
mov dword [ebp - 0x22c], 1
jmp 0x1002b0fb
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
add eax, 0xf9a8
cmp eax, 0xffff
jne 0x1002b119
mov dword [ebp - 0x104], 1
jmp 0x1002b120
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x104]
mov dword [ebp - 0x2ec], eax
jmp 0x1002afd5
jmp 0x1002af7c
mov dword [ebp - 0x354], 0x2dafbbd
mov dword [ebp - 0x14], 0
jmp 0x1002b157
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002b16d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x35c], 0xfffffffd
jmp 0x1002b150
mov dword [ebp - 0x14], 0
jmp 0x1002b17d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002b193
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x278], 1
jmp 0x1002b176
mov dword [ebp - 0x14], 0
jmp 0x1002b1a3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002b1b9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x418], 0xffffffff
jmp 0x1002b19c
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x278], 0
jmp 0x1002b1e7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x278]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x278], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x278], 0
jl 0x1002b406
mov dword [ebp - 0x234], 0x1ef3
mov dword [ebp - 0x2f4], str.onqnvxw_fkgfirerl_acsj
cmp dword [ebp - 0x234], 0x20db
jle 0x1002b2b3
and dword [ebp - 0x70], 0
jmp 0x1002b22c
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x641d
jge 0x1002b2a4
and dword [ebp - 0xac], 0
jmp 0x1002b24b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x6fc5
jge 0x1002b2a2
and dword [ebp - 0x64], 0
jmp 0x1002b264
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x6053
jge 0x1002b2a0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x64]
cdq
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], edx
push dword [ebp - 0x2b0]
push dword [ebp - 0x2b4]
mov ecx, 0x1006f978
call fcn.100032ed
jmp 0x1002b25d
jmp 0x1002b23e
jmp 0x1002b225
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0x78], 0xed23b618
and dword [ebp - 4], 0
cmp dword [ebp - 0x234], 0x1e26
jge 0x1002b2da
mov edx, dword [ebp - 0x2f4]
mov ecx, 0x1006f978
call fcn.1000548e
jmp 0x1002b2f6
or dword [ebp - 4], 0xffffffff
jmp 0x1002b300
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0x10c], 0x4129b857
mov dword [ebp - 0x78], 0
jmp 0x1002b32e
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x1002b401
mov dword [ebp - 0xc0], 0x9565e08c
mov dword [ebp - 0x374], 5
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x384], 0xfffffff6
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002b37e
push 0x2508
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0xc0], 0
jmp 0x1002b397
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x1002b3fc
mov dword [ebp - 0x38c], 0xfffffff9
mov dword [ebp - 0x394], 0xb4ef66b1
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x320], 0xfffffffa
mov dword [ebp - 0x3b4], 0x9bdd7770
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002b3ed
push 0
push 0xb9a
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
jmp 0x1002b38a
jmp 0x1002b327
jmp 0x1002b1cc
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002b428
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov dword [ebp - 0x23c], 0x4fff
mov dword [ebp - 0x2a0], str.ghthic_xmdjthxvt_xjpcmegwc_spmyonyub_unyj
cmp dword [ebp - 0x23c], 0x53c1
jle 0x1002b4f2
and dword [ebp - 0x84], 0
jmp 0x1002b462
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x6d2e
jge 0x1002b4f2
and dword [ebp - 0xb4], 0
jmp 0x1002b488
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x5fbc
jge 0x1002b4ed
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xb4]
shl eax, cl
cdq
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], edx
push dword [ebp - 0x2bc]
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0x40c]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x294], eax
mov ecx, dword [ebp - 0x294]
call fcn.100032cd
push eax
call fcn.1003cd2f
pop ecx
lea ecx, [ebp - 0x40c]
call fcn.100032c3
jmp 0x1002b47b
jmp 0x1002b455
mov dword [ebp - 4], 2
cmp dword [ebp - 0x23c], 0x4fb4
jge 0x1002b511
push dword [ebp - 0x2a0]
call fcn.1003cd2f
pop ecx
jmp 0x1002b52d
or dword [ebp - 4], 0xffffffff
jmp 0x1002b537
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x8c], 0x1a
jmp 0x1002b55a
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffff
je 0x1002b5ac
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0xc8], 0x12
jmp 0x1002b586
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffff5
jle 0x1002b5aa
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1002b5a8
push 0xe95
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x1002b579
jmp 0x1002b54d
mov dword [ebp - 0x68], 0x7e2799ac
mov dword [ebp - 0x328], 0xc9cc1417
mov dword [ebp - 0x380], 5
mov dword [ebp - 0x330], 0x89a69576
mov dword [ebp - 0x3ac], 0
mov dword [ebp - 0x338], 0xed1e12aa
mov dword [ebp - 0x388], 0xffffffff
mov dword [ebp - 0x340], 0xab06c0e2
mov dword [ebp - 0x39c], 0xffffffff
mov dword [ebp - 0x318], 0xca1a1f05
mov dword [ebp - 0x390], 0xfffffffb
mov dword [ebp - 0x350], 0xe74a6e8f
mov dword [ebp - 0x114], 0x25ed
mov dword [ebp - 0x2d0], str.yivpig_lyjyx_udlfyti_ejavce_adio
cmp dword [ebp - 0x114], 0x293f
jle 0x1002b6d2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
and dword [ebp - 0x94], 0
jmp 0x1002b671
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x501
jge 0x1002b6d2
and dword [ebp - 0xbc], 0
jmp 0x1002b693
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x4d24
jge 0x1002b6d0
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0xbc]
cdq
mov dword [ebp - 0x2cc], eax
mov dword [ebp - 0x2c8], edx
push dword [ebp - 0x2c8]
push dword [ebp - 0x2cc]
mov ecx, 0x1006f978
call fcn.100032ed
jmp 0x1002b686
jmp 0x1002b664
mov dword [ebp - 0x3a0], 0x74a71a6e
mov dword [ebp - 4], 4
cmp dword [ebp - 0x114], 0x226e
jge 0x1002b6ff
mov edx, dword [ebp - 0x2d0]
mov ecx, 0x1006f978
call fcn.1000548e
jmp 0x1002b71b
or dword [ebp - 4], 0xffffffff
jmp 0x1002b725
mov dword [ebp - 0x9c], 0
jmp 0x1002b73e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x1002b75a
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x244], 0x80bfe737
jmp 0x1002b731
mov dword [ebp - 0x11c], 0x288a
mov dword [ebp - 0x2f0], str.ikwbpx_zjfzped_qxpfqh_wwt_lhqajfdr_ayhqhcr_rubcafhih_pri_xtgngi
cmp dword [ebp - 0x11c], 0x28c0
jle 0x1002b7f1
and dword [ebp - 0xc4], 0
jmp 0x1002b790
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xcf8
jge 0x1002b7f1
and dword [ebp - 0xa4], 0
jmp 0x1002b7b2
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x7b37
jge 0x1002b7ef
mov eax, dword [ebp - 0xc4]
and eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], edx
push dword [ebp - 0x2d4]
push dword [ebp - 0x2d8]
mov ecx, 0x1006f978
call fcn.100032ed
jmp 0x1002b7a5
jmp 0x1002b783
mov dword [ebp - 0x68], 0
jmp 0x1002b801
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xa
jg 0x1002b8c7
mov dword [ebp - 0x29c], 0xfffffffc
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x398], 0xb101aae4
mov dword [ebp - 0x360], 0x4b64b5c6
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x368], 0xefa5f9c7
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0x370], 0x45dcefbd
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x378], 0
mov dword [ebp - 0x6c], 0
jmp 0x1002b87f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 4
jge 0x1002b895
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x3f4], 0xd2edc755
jmp 0x1002b878
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0x29c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x244]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x244], eax
jmp 0x1002b7fa
mov dword [ebp - 4], 6
cmp dword [ebp - 0x11c], 0x25b4
jge 0x1002b8ea
mov edx, dword [ebp - 0x2f0]
mov ecx, 0x1006f978
call fcn.1000548e
jmp 0x1002b906
or dword [ebp - 4], 0xffffffff
jmp 0x1002b910
movzx eax, byte [0x1007118a]
test eax, eax
je 0x1002b92e
mov esi, 0x1006ee58
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1002ca7d
mov dword [ebp - 0x31c], 0x1006ee58
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x30], 0xfffffff8
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1002ba8a
mov dword [ebp - 0x24c], 0x6adf
mov dword [ebp - 0x2dc], str.fmt_nncuqceug_iqhonff_bqbix_lqz_xpyp_onzxzdn_vthvkqdn_aaviyb_dpgvpyxuu_qxxpwjvbw_hju
cmp dword [ebp - 0x24c], 0x6ddc
jle 0x1002ba2a
and dword [ebp - 0x88], 0
jmp 0x1002b990
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x2579
jge 0x1002ba2a
and dword [ebp - 0x74], 0
jmp 0x1002b9ad
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2d40
jge 0x1002ba25
and dword [ebp - 0x80], 0
jmp 0x1002b9c3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x72ab
jge 0x1002ba23
mov eax, dword [ebp - 0x74]
and eax, dword [ebp - 0x80]
or eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x2e0], edx
push dword [ebp - 0x2e0]
push dword [ebp - 0x2e4]
lea ecx, [ebp - 0x430]
call fcn.10001a94
pop ecx
pop ecx
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
call fcn.100032cd
push eax
call fcn.1003cd2f
pop ecx
lea ecx, [ebp - 0x430]
call fcn.100032c3
jmp 0x1002b9bc
jmp 0x1002b9a6
jmp 0x1002b983
push 0
push 0xfdb
push 0
push 0
push 0x1464
push 0x48d
call dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [ebp - 4], 8
cmp dword [ebp - 0x24c], 0x6702
jge 0x1002ba64
push dword [ebp - 0x2dc]
call fcn.1003cd2f
pop ecx
jmp 0x1002ba80
or dword [ebp - 4], 0xffffffff
jmp 0x1002ba8a
mov dword [ebp - 0x38], 0
jmp 0x1002ba9a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffc
je 0x1002bc3c
mov dword [ebp - 0x5c], 0xfffffffb
mov dword [ebp - 0x308], 4
mov dword [ebp - 0x2b8], 0xccaea0a9
mov dword [ebp - 0x90], 0
jmp 0x1002bad8
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1002baf4
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x148], 0xa14c5530
jmp 0x1002bacb
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x5c]
jle 0x1002bb15
mov dword [ebp - 0x124], 1
jmp 0x1002bb1c
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0xffff
jne 0x1002bb37
cmp dword [ebp - 0x5c], 0
jne 0x1002bb37
and dword [ebp - 0x254], 0
jmp 0x1002bb41
mov dword [ebp - 0x254], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x254], eax
jg 0x1002bb58
mov dword [ebp - 0x2ac], 1
jmp 0x1002bb5f
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x30], 0x8664
jl 0x1002bb74
mov dword [ebp - 0x12c], 1
jmp 0x1002bb7b
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x12c], eax
jl 0x1002bb92
mov dword [ebp - 0x25c], 1
jmp 0x1002bb99
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x25c]
jle 0x1002bbb0
mov dword [ebp - 0x264], 1
jmp 0x1002bbb7
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x134], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x148], ecx
cmp dword [ebp - 0x134], 0
je 0x1002bbfa
cmp dword [ebp - 0x30], 0
je 0x1002bbfa
mov dword [ebp - 0x228], 1
jmp 0x1002bc01
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x228]
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x30], 0
jmp 0x1002bc21
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1002bc37
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x148], 0
jmp 0x1002bc1a
jmp 0x1002ba93
mov dword [ebp - 0x32c], 0x1006ee5c
mov byte [0x1007118a], 1
mov dword [ebp - 0x20], 0x3e34b64b
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x98], 3
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x218], 0x84addbfd
mov dword [ebp - 0x1c], 0
jmp 0x1002bc89
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002bc9f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x304], 0
jmp 0x1002bc82
mov dword [ebp - 0x1c], 0
jmp 0x1002bcaf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002bcc5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xdc], 0x6603fa8b
jmp 0x1002bca8
mov dword [ebp - 0x1c], 0
jmp 0x1002bcd5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1002bceb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3d8], 0x9a9257de
jmp 0x1002bcce
cmp dword [ebp - 0x20], 0
jne 0x1002bcfd
mov dword [ebp - 0xd4], 1
jmp 0x1002bd04
and dword [ebp - 0xd4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd4]
mov dword [ebp + eax - 0x304], ecx
mov eax, 0x50098926
test eax, eax
jne 0x1002bd39
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x304], 0
jne 0x1002bd39
and dword [ebp - 0x1e0], 0
jmp 0x1002bd43
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x20], eax
je 0x1002bd62
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x304], 0
je 0x1002bd75
push 5
pop eax
test eax, eax
je 0x1002bd75
mov dword [ebp - 0x150], 1
jmp 0x1002bd7c
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x20]
imul eax, eax, 5
test eax, eax
jne 0x1002bd9b
cmp dword [ebp - 0x4c], 0
jne 0x1002bd9b
and dword [ebp - 0x250], 0
jmp 0x1002bda5
mov dword [ebp - 0x250], 1
cmp dword [ebp - 0x250], 0xfffffffb
je 0x1002bdba
mov dword [ebp - 0x158], 1
jmp 0x1002bdc1
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x158], eax
jne 0x1002bddb
cmp dword [ebp - 0x4c], 0
jne 0x1002bddb
and dword [ebp - 0x1e8], 0
jmp 0x1002bde5
mov dword [ebp - 0x1e8], 1
cmp dword [ebp - 0x1e8], 0x3ca30775
jne 0x1002bdfd
mov dword [ebp - 0x160], 1
jmp 0x1002be04
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0
jne 0x1002be19
mov dword [ebp - 0x230], 1
jmp 0x1002be20
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
sub eax, 0x7f44fb66
je 0x1002be40
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1002be40
mov dword [ebp - 0x168], 1
jmp 0x1002be47
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x4c]
cmp eax, 0x2600bf09
jg 0x1002be63
mov dword [ebp - 0x1f0], 1
jmp 0x1002be6a
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1f0], eax
je 0x1002be81
mov dword [ebp - 0x170], 1
jmp 0x1002be88
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x170]
jge 0x1002be9f
mov dword [ebp - 0x270], 1
jmp 0x1002bea6
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xabc1
jne 0x1002beca
mov dword [ebp - 0x178], 1
jmp 0x1002bed1
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x178], eax
jne 0x1002bee8
mov dword [ebp - 0x1f8], 1
jmp 0x1002beef
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x180], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0xdc], ecx
cmp dword [ebp - 0x180], 0xfffffff6
je 0x1002bf26
mov dword [ebp - 0x238], 1
jmp 0x1002bf2d
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x20]
cmp eax, 0x8485bdf6
je 0x1002bf49
mov dword [ebp - 0x188], 1
jmp 0x1002bf50
and dword [ebp - 0x188], 0
imul eax, dword [ebp - 0x188], 0xbc15
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x200], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x200]
mov dword [ebp + eax - 0x3d8], ecx
cmp dword [ebp - 0x200], 0
jne 0x1002bf92
cmp dword [ebp - 0x1b8], 0
jne 0x1002bf92
and dword [ebp - 0x190], 0
jmp 0x1002bf9c
mov dword [ebp - 0x190], 1
cmp dword [ebp - 0x190], 0
jge 0x1002bfb1
mov dword [ebp - 0x258], 1
jmp 0x1002bfb8
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x218], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
mov dword [ebp - 0x198], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x198]
mov dword [ebp + eax - 0x304], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x208], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0xdc], ecx
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x208]
jle 0x1002c020
mov dword [ebp - 0x240], 1
jmp 0x1002c027
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x20], 0
je 0x1002c03f
cmp dword [ebp - 0x98], 0
jne 0x1002c03f
and dword [ebp - 0x1a0], 0
jmp 0x1002c049
mov dword [ebp - 0x1a0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d8]
mov ecx, dword [ebp - 0x1a0]
lea eax, [ecx + eax - 1]
cmp dword [ebp - 0x240], eax
jle 0x1002c074
mov dword [ebp - 0x1a8], 1
jmp 0x1002c07b
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0xafb55e8a
jbe 0x1002c093
mov dword [ebp - 0x210], 1
jmp 0x1002c09a
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x210], eax
jl 0x1002c0b1
mov dword [ebp - 0x1b0], 1
jmp 0x1002c0b8
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 1
je 0x1002c0cd
mov dword [ebp - 0x268], 1
jmp 0x1002c0d4
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
cmp eax, dword [ebp - 0x268]
jne 0x1002c0f4
mov dword [ebp - 0x2e8], 1
jmp 0x1002c0fb
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x334], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp eax, dword [ebp - 0x20]
jl 0x1002c125
mov dword [ebp - 0x1c0], 1
jmp 0x1002c12c
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x1c0]
imul eax, eax, 3
mov dword [ebp - 0x98], eax
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1006efc8
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x2c], 0xf89b546
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0xa0], 0
jmp 0x1002c17f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1002c19b
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x140], 0x85f70ad6
jmp 0x1002c172
mov dword [ebp - 0x2c], 2
jmp 0x1002c1ab
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002c2d0
mov dword [ebp - 0x50], 0xfb770a77
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x140], 0
je 0x1002c1ce
jmp 0x1002c2d0
mov dword [ebp - 0x50], 2
jmp 0x1002c1de
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1002c2cb
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x140]
add eax, 0x10005
cmp dword [ebp - 0x50], eax
jl 0x1002c208
mov dword [ebp - 0x248], 1
jmp 0x1002c20f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x140]
cmp dword [ebp - 0x248], eax
jle 0x1002c22d
mov dword [ebp - 0x1c8], 1
jmp 0x1002c234
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x140]
cmp dword [ebp - 0x1c8], eax
je 0x1002c252
mov dword [ebp - 0x220], 1
jmp 0x1002c259
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x140]
cmp eax, dword [ebp - 0x220]
jge 0x1002c277
mov dword [ebp - 0x1d0], 1
jmp 0x1002c27e
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x1d0]
add ecx, 3
cmp ecx, dword [ebp + eax*4 - 0x140]
je 0x1002c29f
mov dword [ebp - 0x260], 1
jmp 0x1002c2a6
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x140]
mov ecx, dword [ebp - 0x50]
mov dword [ebp + ecx*4 - 0x140], eax
jmp 0x1002c1d7
jmp 0x1002c1a4
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1002c2f5
push 0x85e
push 0
push 0x2041
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1006efc8
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x128]
mov dword [0x1006ee58], eax
mov dword [ebp - 0x40], 0x5c68ec0a
mov dword [ebp - 0xa8], 0
jmp 0x1002c331
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x1002c34d
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x288], 0xfffffffb
jmp 0x1002c324
mov dword [ebp - 0x40], 0
jmp 0x1002c35d
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
jg 0x1002c3ef
mov dword [ebp - 0x1d8], 0xffffffff
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1002c3a2
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x1396
push 0x10c7
push 0x1b6c
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
cmp dword [ebp - 0x1d8], 0
jne 0x1002c3cd
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x288], 0
jne 0x1002c3cd
cmp dword [ebp - 0x1d8], 0
jne 0x1002c3cd
and dword [ebp - 0xf0], 0
jmp 0x1002c3d7
mov dword [ebp - 0xf0], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf0]
mov dword [ebp + eax - 0x288], ecx
jmp 0x1002c356
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x288], 0
jne 0x1002c40d
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x288], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x288]
mov dword [ebp - 0x33c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x288], 0
jg 0x1002c43b
mov dword [ebp - 0x144], 1
jmp 0x1002c442
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x144]
jg 0x1002c459
mov dword [ebp - 0x14c], 1
jmp 0x1002c460
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x288]
cmp dword [ebp - 0x14c], eax
jle 0x1002c481
mov dword [ebp - 0x154], 1
jmp 0x1002c488
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x81320f2d
jae 0x1002c4a6
mov dword [ebp - 0x15c], 1
jmp 0x1002c4ad
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x15c]
neg eax
cmp eax, 0x3d59
je 0x1002c4c8
mov dword [ebp - 0x164], 1
jmp 0x1002c4cf
and dword [ebp - 0x164], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x288], ecx
mov eax, dword [ebp - 0xe0]
mov dword [0x1006ee5c], eax
mov dword [ebp - 0x24], 0x3e34b64b
mov dword [ebp - 0x54], 0
mov dword [ebp - 0xb0], 3
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x118], 0x84addbfd
mov dword [ebp - 0x18], 0
jmp 0x1002c528
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002c53e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x314], 0
jmp 0x1002c521
mov dword [ebp - 0x18], 0
jmp 0x1002c54e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002c564
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], 0x6603fa8b
jmp 0x1002c547
mov dword [ebp - 0x18], 0
jmp 0x1002c574
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1002c58a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c8], 0x9a9257de
jmp 0x1002c56d
cmp dword [ebp - 0x24], 0
jne 0x1002c59c
mov dword [ebp - 0xd0], 1
jmp 0x1002c5a3
and dword [ebp - 0xd0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd0]
mov dword [ebp + eax - 0x314], ecx
mov eax, 0x50098926
test eax, eax
jne 0x1002c5d8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x314], 0
jne 0x1002c5d8
and dword [ebp - 0x16c], 0
jmp 0x1002c5e2
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x16c]
cmp dword [ebp - 0x24], eax
je 0x1002c601
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x314], 0
je 0x1002c614
push 5
pop eax
test eax, eax
je 0x1002c614
mov dword [ebp - 0x174], 1
jmp 0x1002c61b
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
sub eax, dword [ebp - 0x24]
imul eax, eax, 5
test eax, eax
jne 0x1002c63a
cmp dword [ebp - 0x54], 0
jne 0x1002c63a
and dword [ebp - 0x17c], 0
jmp 0x1002c644
mov dword [ebp - 0x17c], 1
cmp dword [ebp - 0x17c], 0xfffffffb
je 0x1002c659
mov dword [ebp - 0x184], 1
jmp 0x1002c660
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
jne 0x1002c67a
cmp dword [ebp - 0x54], 0
jne 0x1002c67a
and dword [ebp - 0x18c], 0
jmp 0x1002c684
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0x18c], 0x3ca30775
jne 0x1002c69c
mov dword [ebp - 0x194], 1
jmp 0x1002c6a3
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0
jne 0x1002c6b8
mov dword [ebp - 0x19c], 1
jmp 0x1002c6bf
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
sub eax, 0x7f44fb66
je 0x1002c6df
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1002c6df
mov dword [ebp - 0x1a4], 1
jmp 0x1002c6e6
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x54]
cmp eax, 0x2600bf09
jg 0x1002c702
mov dword [ebp - 0x1ac], 1
jmp 0x1002c709
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1ac], eax
je 0x1002c720
mov dword [ebp - 0x1b4], 1
jmp 0x1002c727
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1b4]
jge 0x1002c73e
mov dword [ebp - 0x1bc], 1
jmp 0x1002c745
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0xabc1
jne 0x1002c769
mov dword [ebp - 0x1c4], 1
jmp 0x1002c770
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x1c4], eax
jne 0x1002c787
mov dword [ebp - 0x1cc], 1
jmp 0x1002c78e
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp + eax - 0xd8], ecx
cmp dword [ebp - 0x1d4], 0xfffffff6
je 0x1002c7c5
mov dword [ebp - 0x1dc], 1
jmp 0x1002c7cc
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x24]
cmp eax, 0x8485bdf6
je 0x1002c7e8
mov dword [ebp - 0x1e4], 1
jmp 0x1002c7ef
and dword [ebp - 0x1e4], 0
imul eax, dword [ebp - 0x1e4], 0xbc15
imul eax, dword [ebp - 0x54]
mov dword [ebp - 0x1ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp + eax - 0x3c8], ecx
cmp dword [ebp - 0x1ec], 0
jne 0x1002c831
cmp dword [ebp - 0x110], 0
jne 0x1002c831
and dword [ebp - 0x1f4], 0
jmp 0x1002c83b
mov dword [ebp - 0x1f4], 1
cmp dword [ebp - 0x1f4], 0
jge 0x1002c850
mov dword [ebp - 0x1fc], 1
jmp 0x1002c857
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x118], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x314]
mov dword [ebp - 0x204], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x204]
mov dword [ebp + eax - 0x314], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x20c]
mov dword [ebp + eax - 0xd8], ecx
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x20c]
jle 0x1002c8bf
mov dword [ebp - 0x21c], 1
jmp 0x1002c8c6
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x24], 0
je 0x1002c8de
cmp dword [ebp - 0xb0], 0
jne 0x1002c8de
and dword [ebp - 0x214], 0
jmp 0x1002c8e8
mov dword [ebp - 0x214], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c8]
mov ecx, dword [ebp - 0x214]
lea eax, [ecx + eax - 1]
cmp dword [ebp - 0x21c], eax
jle 0x1002c913
mov dword [ebp - 0xf4], 1
jmp 0x1002c91a
and dword [ebp - 0xf4], 0
cmp dword [ebp - 0xf4], 0xafb55e8a
jbe 0x1002c932
mov dword [ebp - 0xf8], 1
jmp 0x1002c939
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0xf8], eax
jl 0x1002c950
mov dword [ebp - 0x100], 1
jmp 0x1002c957
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x100], 1
je 0x1002c96c
mov dword [ebp - 0x108], 1
jmp 0x1002c973
and dword [ebp - 0x108], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3c8]
cmp eax, dword [ebp - 0x108]
jne 0x1002c993
mov dword [ebp - 0x2f8], 1
jmp 0x1002c99a
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x344], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
cmp eax, dword [ebp - 0x24]
jl 0x1002c9c4
mov dword [ebp - 0x120], 1
jmp 0x1002c9cb
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x120]
imul eax, eax, 3
mov dword [ebp - 0xb0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe0]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
push dword [ecx + eax]
call fcn.1002ae1e
pop ecx
pop ecx
mov dword [ebp - 0x298], eax
mov dword [ebp - 0x60], 0xddc85f70
mov dword [ebp - 0x60], 0
jmp 0x1002ca22
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 7
jne 0x1002ca3d
mov dword [ebp - 0x290], 0xffffffff
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x290], eax
jmp 0x1002ca1b
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1002ca58
push 0x25ee
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
push dword [ebp - 0xe0]
mov edx, 0x1006ee9c
mov ecx, dword [ebp - 0x298]
call fcn.1002aeb8
pop ecx
mov esi, 0x1006ee58
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret