Function at 0x10028128
Capabilities:
Delete file
Get session user name
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100645d0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9ec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x58], 0xb064
mov dword [ebp - 0x53c], 1
push 2
lea ecx, [ebp - 0x7bc]
call fcn.10004d6b
and dword [ebp - 4], 0
mov dword [ebp - 0x94], 5
push 2
lea ecx, [ebp - 0x7b0]
call fcn.10004d6b
mov byte [ebp - 4], 1
mov dword [ebp - 0x40], 0
jmp 0x1002819a
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x100281b6
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7bc]
call fcn.10004de4
mov dword [eax], 0x383c67ee
jmp 0x10028193
mov dword [ebp - 0x40], 0
jmp 0x100281c6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x100281e2
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7b0]
call fcn.10004de4
mov dword [eax], 0xfffffff6
jmp 0x100281bf
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x864], eax
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x58]
jne 0x10028205
mov eax, 0x8e17c109
test eax, eax
jne 0x10028205
and dword [ebp - 0x2c0], 0
jmp 0x1002820f
mov dword [ebp - 0x2c0], 1
cmp dword [ebp - 0x2c0], 0xa1245c81
jne 0x10028227
mov dword [ebp - 0x534], 1
jmp 0x1002822e
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x53c]
jle 0x10028251
mov dword [ebp - 0x544], 1
jmp 0x10028258
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 0x707
je 0x10028270
mov dword [ebp - 0x288], 1
jmp 0x10028277
and dword [ebp - 0x288], 0
push 1
lea ecx, [ebp - 0x7bc]
call fcn.10004de4
mov ecx, dword [ebp - 0x288]
mov dword [eax], ecx
imul eax, dword [ebp - 0x288], 0
add eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jl 0x100282a7
mov dword [ebp - 0x55c], 1
jmp 0x100282ae
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x55c], eax
jge 0x100282c5
mov dword [ebp - 0x410], 1
jmp 0x100282cc
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x58]
jne 0x100282ef
mov dword [ebp - 0x52c], 1
jmp 0x100282f6
and dword [ebp - 0x52c], 0
push 1
lea ecx, [ebp - 0x7b0]
call fcn.10004de4
mov ecx, dword [ebp - 0x52c]
mov dword [eax], ecx
mov dword [ebp - 0x94], 0
jmp 0x10028324
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xf
je 0x1002876a
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1002834d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov dword [ebp - 0x2d0], 0x642
mov dword [ebp - 0x574], str.zmyrbb_imdpcyjse_peyiq_wdwwtm_hlr_tzbfxwsd_dgtnxrd_dpqqvitb_esfankcnv_kwwvqwi_szue
cmp dword [ebp - 0x2d0], 0x743
jle 0x100283e7
and dword [ebp - 0x268], 0
jmp 0x10028383
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x2fec
jge 0x100283e7
and dword [ebp - 0x264], 0
jmp 0x100283a5
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x28d2
jge 0x100283e5
mov eax, dword [ebp - 0x268]
cdq
idiv dword [ebp - 0x264]
mov eax, edx
cdq
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x604], edx
push dword [ebp - 0x604]
push dword [ebp - 0x608]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x10028398
jmp 0x10028376
mov byte [ebp - 0x7d], 0
mov dword [ebp - 0x700], 0x1cc3
cmp dword [ebp - 0x700], 0x4cf
jge 0x100286fa
lea eax, [ebp - 0x4b8]
push eax
mov ecx, 0x10081198
call fcn.1001480b
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2c8]
add ecx, dword [eax + 4]
call fcn.10007515
movzx eax, al
test eax, eax
je 0x100286fa
mov ecx, 0x1035e8b4
call fcn.10014a6c
push dword [ebp - 0x4b8]
mov ecx, 0x1035e8b4
call fcn.10014a13
and dword [ebp - 0x164], 0
jmp 0x1002846d
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
cmp eax, dword [ebp - 0x4b8]
jge 0x10028498
push dword [ebp - 0x164]
mov ecx, 0x1035e8b4
call fcn.10004de4
push eax
mov ecx, 0x10081198
call fcn.1001480b
jmp 0x10028460
lea eax, [ebp - 0xdc]
push eax
mov ecx, 0x10081198
call fcn.1001480b
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x5f4], eax
lea eax, [ebp - 0x830]
push eax
mov ecx, 0x1035e8b4
call fcn.10033616
push dword [eax]
lea eax, [ebp - 0x87c]
push eax
mov ecx, 0x1035e8b4
call fcn.10014ca3
push dword [eax]
call fcn.10033aa8
pop ecx
pop ecx
and dword [ebp - 0x12c], 0
jmp 0x10028505
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0xdc]
jg 0x1002869c
lea eax, [ebp - 0x884]
push eax
mov ecx, 0x1035e8b4
call fcn.10014ca3
push eax
lea eax, [ebp - 0x898]
push eax
mov ecx, 0x1035e8b4
call fcn.10033616
push dword [eax]
lea eax, [ebp - 0x8a0]
push eax
mov ecx, 0x1035e8b4
call fcn.10014ca3
push dword [eax]
lea edx, [ebp - 0x12c]
lea ecx, [ebp - 0x89c]
call fcn.10033acc
pop ecx
pop ecx
mov ecx, eax
call fcn.100336db
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x870]
push eax
mov ecx, 0x1035e8b4
call fcn.10014ca3
push eax
lea eax, [ebp - 0x854]
push eax
mov ecx, 0x1035e8b4
call fcn.10033616
push dword [eax]
lea eax, [ebp - 0x824]
push eax
mov ecx, 0x1035e8b4
call fcn.10014ca3
push dword [eax]
lea edx, [ebp - 0xdc]
lea ecx, [ebp - 0x85c]
call fcn.10033acc
pop ecx
pop ecx
mov ecx, eax
call fcn.100336db
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xac]
jne 0x10028615
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xac]
jne 0x10028697
mov eax, dword [ebp - 0xac]
inc eax
push eax
mov ecx, 0x1035e8b4
call fcn.10004de4
mov esi, eax
push dword [ebp - 0x9c]
mov ecx, 0x1035e8b4
call fcn.10004de4
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10028697
mov ecx, 0x1035e8b4
call fcn.1001520e
cmp dword [ebp - 0x9c], eax
je 0x10028697
mov ecx, 0x1035e8b4
call fcn.1001520e
cmp dword [ebp - 0xac], eax
je 0x10028697
push dword [ebp - 0xac]
mov ecx, 0x1035e8b4
call fcn.10004de4
mov esi, eax
push dword [ebp - 0x9c]
mov ecx, 0x1035e8b4
call fcn.10004de4
mov eax, dword [eax]
add eax, dword [esi]
cmp eax, dword [ebp - 0x5f4]
jne 0x10028697
push dword [ebp - 0x9c]
mov ecx, 0x1035e8b4
call fcn.10004de4
mov eax, dword [eax]
mov dword [ebp - 0x6f8], eax
push dword [ebp - 0xac]
mov ecx, 0x1035e8b4
call fcn.10004de4
mov eax, dword [eax]
mov dword [ebp - 0x5fc], eax
jmp 0x100284eb
push fcn.100173f1
push fcn.100173f1
push dword [ebp - 0x5fc]
push dword [ebp - 0x6f8]
mov edx, str.Peter_should_buy_books_whose_prices_are
mov ecx, 0x10081078
call fcn.10006f4f
mov ecx, eax
call fcn.1003335e
mov edx, str._and
mov ecx, eax
call fcn.10006f4f
mov ecx, eax
call fcn.1003335e
mov edx, 0x1006d1a0
mov ecx, eax
call fcn.10006f4f
mov ecx, eax
call fcn.100149ca
mov ecx, eax
call fcn.100149ca
jmp 0x10028405
mov byte [ebp - 4], 2
cmp dword [ebp - 0x2d0], 0x533
jge 0x1002871a
mov edx, dword [ebp - 0x574]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10028736
mov dword [ebp - 4], 1
jmp 0x10028746
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10028765
push 0x1d81
push 0x1964
push 0
push 0xdc2
call dword [sym.imp.USER32.dll_CreateCaret]
jmp 0x10028317
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x7b0]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7bc]
call fcn.10004dc8
cmp dword [0x1035e8f8], 0
jne 0x1002b80e
mov dword [ebp - 0x30], 0xa1e94870
mov dword [ebp - 0x68], 3
mov dword [ebp - 0x2e8], 0x188047d2
mov eax, dword [ebp - 0x30]
shl eax, 2
cmp dword [ebp - 0x30], eax
jg 0x100287c4
mov dword [ebp - 0x418], 1
jmp 0x100287cb
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x418]
jl 0x100287e2
mov dword [ebp - 0x548], 1
jmp 0x100287e9
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x30], 0
jbe 0x100287fb
mov dword [ebp - 0x2d8], 1
jmp 0x10028802
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x548], eax
je 0x10028822
mov dword [ebp - 0x2e0], 1
jmp 0x10028829
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0x30]
cmp eax, 4
jbe 0x10028843
mov dword [ebp - 0x420], 1
jmp 0x1002884a
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
sub eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2e8]
jge 0x10028877
mov dword [ebp - 0x758], 3
mov dword [ebp - 0x758], 8
jmp 0x10028b5c
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x2f0], 0x2546
mov dword [ebp - 0x73c], str.xsznb_qfpupjz_dnkq_zfxj_usqlmfclk_yicris_tnnchmoj_hoinf_ymici_rol_ixjs_vszldggc_hjerrjaas_tfnjrd
cmp dword [ebp - 0x2f0], 0x275c
jle 0x1002897c
and dword [ebp - 0x170], 0
jmp 0x100288b7
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x7134
jge 0x1002897c
and dword [ebp - 0x168], 0
jmp 0x100288dd
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x306d
jge 0x10028977
and dword [ebp - 0x134], 0
jmp 0x10028903
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x3b28
jge 0x10028972
and dword [ebp - 0x13c], 0
jmp 0x10028925
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x5ef6
jge 0x10028970
mov ecx, dword [ebp - 0x168]
add ecx, dword [ebp - 0x134]
mov eax, dword [ebp - 0x170]
shl eax, cl
or eax, dword [ebp - 0x13c]
cdq
mov dword [ebp - 0x614], eax
mov dword [ebp - 0x610], edx
push dword [ebp - 0x610]
push dword [ebp - 0x614]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x10028918
jmp 0x100288f6
jmp 0x100288d0
jmp 0x100288aa
mov dword [ebp - 0x30], 0xfffffffc
jmp 0x1002898c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x14
jg 0x10028b13
mov dword [ebp - 0x178], 0
jmp 0x100289af
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 4
jge 0x100289cb
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x8d4], 0xfffffffa
jmp 0x100289a2
mov dword [ebp - 0x4c0], 0x488d
mov dword [ebp - 0x704], str.abj_cgjuhobns_eswspn_flvuut_erffhau_wgqkx_iostvjrmx
cmp dword [ebp - 0x4c0], 0x4c69
jle 0x10028a9f
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
and dword [ebp - 0x144], 0
jmp 0x10028a0d
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x216a
jge 0x10028a9f
and dword [ebp - 0x180], 0
jmp 0x10028a33
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x6d55
jge 0x10028a9a
and dword [ebp - 0x14c], 0
jmp 0x10028a55
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7ffe
jge 0x10028a98
mov eax, dword [ebp - 0x144]
add eax, dword [ebp - 0x180]
or eax, dword [ebp - 0x14c]
cdq
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], edx
push dword [ebp - 0x61c]
push dword [ebp - 0x620]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x10028a48
jmp 0x10028a26
jmp 0x10028a00
mov dword [ebp - 0x68], 0
jmp 0x10028aaf
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x10028ac5
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x8d4], 0xfffffff9
jmp 0x10028aa8
mov dword [ebp - 4], 4
cmp dword [ebp - 0x4c0], 0x4511
jge 0x10028ae8
mov edx, dword [ebp - 0x704]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10028b04
or dword [ebp - 4], 0xffffffff
jmp 0x10028b0e
jmp 0x10028985
mov dword [ebp - 4], 6
cmp dword [ebp - 0x2f0], 0x2481
jge 0x10028b36
mov edx, dword [ebp - 0x73c]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10028b52
or dword [ebp - 4], 0xffffffff
jmp 0x10028b5c
mov byte [ebp - 0x8e], 0
movzx eax, byte [ebp - 0x8e]
test eax, eax
je 0x10028b76
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x154], 1
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x5ec], 0xac842f88
mov dword [ebp - 0x188], 0
jmp 0x10028bb7
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x10028bd3
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0x960], 0x4de6f885
jmp 0x10028baa
cmp dword [ebp - 0xc4], 0
jne 0x10028be8
mov dword [ebp - 0x300], 1
jmp 0x10028bef
and dword [ebp - 0x300], 0
cmp dword [ebp - 0xc4], 0
jne 0x10028c0a
cmp dword [ebp - 0xc4], 0
jne 0x10028c0a
and dword [ebp - 0x428], 0
jmp 0x10028c14
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x428]
add eax, 0x17e58134
imul eax, dword [ebp - 0x154]
test eax, eax
jbe 0x10028c36
mov dword [ebp - 0x2f8], 1
jmp 0x10028c3d
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x2f8]
jne 0x10028c60
cmp dword [ebp - 0xc4], 0
je 0x10028c60
mov dword [ebp - 0x510], 1
jmp 0x10028c67
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x300]
neg eax
sub eax, dword [ebp - 0x154]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xbc], 2
jmp 0x10028ca0
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x10028cb7
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x154], eax
jmp 0x10028c93
mov dword [ebp - 0x5c], 0x540d7f82
mov dword [ebp - 0xcc], 0x40fc0272
mov dword [ebp - 0x310], 0xfffffff9
mov dword [ebp - 0x430], 0x5af8
mov dword [ebp - 0x684], str.vsz_fieml_cpqmamsbf_fmigbyd_ygrqpn_gwtvqd_vvbejk_ytpw_bki_isbtbqxzg_cte_inskfumjp
cmp dword [ebp - 0x430], 0x5bc6
jle 0x10028d96
and dword [ebp - 0x190], 0
jmp 0x10028d0c
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x3d19
jge 0x10028d96
and dword [ebp - 0x15c], 0
jmp 0x10028d2e
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x49ab
jge 0x10028d91
mov eax, dword [ebp - 0x190]
or eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], edx
push dword [ebp - 0x628]
push dword [ebp - 0x62c]
lea ecx, [ebp - 0x9fc]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x580], eax
mov ecx, dword [ebp - 0x580]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x9fc]
call fcn.10004aa0
jmp 0x10028d21
jmp 0x10028cff
mov dword [ebp - 0x320], 0xfffffffa
mov dword [ebp - 4], 8
cmp dword [ebp - 0x430], 0x5a49
jge 0x10028dbf
push dword [ebp - 0x684]
call fcn.1004c653
pop ecx
jmp 0x10028ddb
or dword [ebp - 4], 0xffffffff
jmp 0x10028de5
mov dword [ebp - 0x5c], 0
jmp 0x10028df5
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe4
jg 0x10028fdd
mov dword [ebp - 0x48], 0xa83a
mov dword [ebp - 0x590], 1
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0
jne 0x10028fc2
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x82c], eax
cmp dword [ebp - 0x48], 0xf5eb
jge 0x10028e45
mov dword [ebp - 0x308], 1
jmp 0x10028e4c
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0x5ec6
jg 0x10028e64
mov dword [ebp - 0x4c8], 1
jmp 0x10028e6b
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x2f1e
jge 0x10028e8f
mov dword [ebp - 0x438], 1
jmp 0x10028e96
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x48]
jl 0x10028eb3
mov dword [ebp - 0x318], 1
jmp 0x10028eba
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x318], eax
jle 0x10028ed1
mov dword [ebp - 0x588], 1
jmp 0x10028ed8
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x48]
cmp eax, 0x578cca6
jg 0x10028efb
mov dword [ebp - 0x538], 1
jmp 0x10028f02
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x48]
cmp dword [ebp - 0xcc], eax
jl 0x10028f2b
mov dword [ebp - 0x6c4], 1
jmp 0x10028f32
and dword [ebp - 0x6c4], 0
cmp dword [ebp - 0x48], 0
je 0x10028f4a
cmp dword [ebp - 0x5c], 0
je 0x10028f4a
mov dword [ebp - 0x440], 1
jmp 0x10028f51
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x440], eax
jl 0x10028f68
mov dword [ebp - 0x328], 1
jmp 0x10028f6f
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x328], eax
jge 0x10028f89
mov dword [ebp - 0x4d0], 1
jmp 0x10028f90
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4d0], eax
je 0x10028fa7
mov dword [ebp - 0x330], 1
jmp 0x10028fae
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x330], eax
je 0x10028fc2
and dword [ebp - 0x448], 0
jmp 0x10028fcc
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x590], eax
jmp 0x10028dee
mov dword [ebp - 0x338], 0x7773
mov dword [ebp - 0x690], str.kxi_itswutfft_qkd_giekpn_dckmllblp_dslsruvyp
cmp dword [ebp - 0x338], 0x77d0
jle 0x100290e0
and dword [ebp - 0x16c], 0
jmp 0x10029017
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x1968
jge 0x100290e0
and dword [ebp - 0x198], 0
jmp 0x1002903d
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x4f6d
jge 0x100290db
and dword [ebp - 0x120], 0
jmp 0x10029063
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x2953
jge 0x100290d6
and dword [ebp - 0x1a0], 0
jmp 0x10029085
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x7cf5
jge 0x100290d4
mov eax, dword [ebp - 0x198]
cdq
idiv dword [ebp - 0x120]
mov eax, edx
cdq
idiv dword [ebp - 0x1a0]
mov eax, dword [ebp - 0x16c]
sub eax, edx
cdq
mov dword [ebp - 0x638], eax
mov dword [ebp - 0x634], edx
push dword [ebp - 0x634]
push dword [ebp - 0x638]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x10029078
jmp 0x10029056
jmp 0x10029030
jmp 0x1002900a
mov byte [ebp - 0x6e], 0
mov dword [ebp - 4], 0xa
cmp dword [ebp - 0x338], 0x749f
jge 0x10029107
mov edx, dword [ebp - 0x690]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10029123
or dword [ebp - 4], 0xffffffff
jmp 0x1002912d
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1002913d
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x100], 1
mov byte [ebp - 0xff], 0x74
mov byte [ebp - 0xfe], 0
mov byte [ebp - 0xfd], 0x2e
mov byte [ebp - 0xfc], 0xa
mov byte [ebp - 0xfb], 0x27
mov byte [ebp - 0xfa], 9
mov byte [ebp - 0xf9], 8
mov byte [ebp - 0xf8], 2
mov byte [ebp - 0xf7], 0x16
mov byte [ebp - 0xf6], 7
mov byte [ebp - 0xf5], 0x40
mov byte [ebp - 0xf4], 4
mov byte [ebp - 0xf3], 0x57
mov byte [ebp - 0xf2], 0xb
mov byte [ebp - 0xf1], 9
mov byte [ebp - 0xf0], 6
mov byte [ebp - 0xef], 0x5f
mov byte [ebp - 0xee], 5
mov byte [ebp - 0xed], 0x5f
mov byte [ebp - 0xec], 3
mov byte [ebp - 0xeb], 2
mov byte [ebp - 0xea], 8
mov byte [ebp - 0xe9], 0x40
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x100]
and eax, 0x11
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x100]
or ecx, 0x11
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x100]
mov word [ebp + eax*2 - 0x814], cx
mov dword [ebp - 0x38], 0xa1e94870
mov dword [ebp - 0x64], 3
mov dword [ebp - 0x350], 0x188047d2
mov eax, dword [ebp - 0x38]
shl eax, 2
cmp dword [ebp - 0x38], eax
jg 0x1002924e
mov dword [ebp - 0x518], 1
jmp 0x10029255
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x518]
jl 0x1002926c
mov dword [ebp - 0x450], 1
jmp 0x10029273
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x38], 0
jbe 0x10029285
mov dword [ebp - 0x340], 1
jmp 0x1002928c
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x450], eax
je 0x100292ac
mov dword [ebp - 0x348], 1
jmp 0x100292b3
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x38]
cmp eax, 4
jbe 0x100292cd
mov dword [ebp - 0x4d8], 1
jmp 0x100292d4
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
sub eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0x350]
jge 0x100292fe
mov dword [ebp - 0x598], 3
mov dword [ebp - 0x598], 8
jmp 0x10029377
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x38], 0xfffffffc
jmp 0x10029314
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x14
jg 0x10029377
mov dword [ebp - 0x1ec], 0
jmp 0x10029333
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x1002934f
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x90c], 0xfffffffa
jmp 0x10029326
mov dword [ebp - 0x64], 0
jmp 0x1002935f
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10029375
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x90c], 0xfffffff9
jmp 0x10029358
jmp 0x1002930d
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1002938b
push 0
call dword [sym.imp.GDI32.dll_GetObjectType]
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x2a0], 0
jmp 0x100293a3
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x18
jae 0x10029a12
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x17c], 0xfffffffd
mov dword [ebp - 0x368], 0xfffffffe
mov dword [ebp - 0xe8], 0x486c
push 4
lea ecx, [ebp - 0x7ec]
call fcn.10004d6b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x378], 0x3fa9a180
mov dword [ebp - 0x4e8], 0xe663439f
mov dword [ebp - 0x5a8], 0
mov dword [ebp - 0x50], 0
jmp 0x10029414
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10029430
push dword [ebp - 0x50]
lea ecx, [ebp - 0x7ec]
call fcn.10004de4
mov dword [eax], 1
jmp 0x1002940d
mov dword [ebp - 0x458], 0x3776
mov dword [ebp - 0x6c8], str.kchytyzlg_pnttxyoz_qhrtg_dsubdl_kssuvjwi_yxwh_hpbfc_nfuxpvb_age_waeqbjb_sbrvxxty
cmp dword [ebp - 0x458], 0x388d
jle 0x100294d9
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
and dword [ebp - 0x174], 0
jmp 0x10029478
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x1f6d
jge 0x100294d9
and dword [ebp - 0x22c], 0
jmp 0x1002949a
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x49a9
jge 0x100294d7
mov eax, dword [ebp - 0x174]
or eax, dword [ebp - 0x22c]
cdq
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], edx
push dword [ebp - 0x640]
push dword [ebp - 0x644]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002948d
jmp 0x1002946b
mov dword [ebp - 0x50], 0
jmp 0x100294e9
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x100294ff
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x8b0], 0xffffffff
jmp 0x100294e2
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x458], 0x34b0
jge 0x1002951f
mov edx, dword [ebp - 0x6c8]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002953b
mov dword [ebp - 4], 0xc
jmp 0x1002954b
cmp dword [ebp - 0x20], 0
je 0x10029723
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
jne 0x10029569
mov dword [ebp - 0x5a0], 1
jmp 0x10029570
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x834], eax
cmp dword [ebp - 0x20], 0xfffc
jb 0x1002958e
mov dword [ebp - 0x358], 1
jmp 0x10029595
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
je 0x100295bf
cmp dword [ebp - 0x17c], 0
je 0x100295bf
mov dword [ebp - 0x560], 1
jmp 0x100295c6
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x560]
imul eax, dword [ebp - 0x20]
cmp eax, 0xd73df2ef
jb 0x100295e9
cmp dword [ebp - 0x20], 0
jne 0x100295e9
and dword [ebp - 0x360], 0
jmp 0x100295f3
mov dword [ebp - 0x360], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x360], eax
je 0x1002960a
mov dword [ebp - 0x460], 1
jmp 0x10029611
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
je 0x1002963b
cmp dword [ebp - 0xe8], 0
je 0x1002963b
mov dword [ebp - 0x4e0], 1
jmp 0x10029642
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x4e0], eax
jl 0x10029659
mov dword [ebp - 0x69c], 1
jmp 0x10029660
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x86c], eax
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x20]
jge 0x10029683
mov dword [ebp - 0x2a4], 1
jmp 0x1002968a
and dword [ebp - 0x2a4], 0
push 2
lea ecx, [ebp - 0x7ec]
call fcn.10004de4
mov ecx, dword [ebp - 0x2a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2a4]
sub eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0xe8]
jge 0x100296c8
mov eax, 0x8fa
test eax, eax
je 0x100296c8
mov dword [ebp - 0x274], 1
jmp 0x100296cf
and dword [ebp - 0x274], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x274]
mov dword [ebp + eax - 0x8b0], ecx
cmp dword [ebp - 0x274], 0
je 0x10029707
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8b0], 0
je 0x10029707
mov dword [ebp - 0x370], 1
jmp 0x1002970e
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 1
je 0x10029723
mov dword [ebp - 0x468], 1
jmp 0x1002972a
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x378]
je 0x10029752
xor eax, eax
inc eax
je 0x10029752
mov dword [ebp - 0x520], 1
jmp 0x10029759
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0x1676492a
je 0x10029771
mov dword [ebp - 0x380], 1
jmp 0x10029778
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
add eax, 4
cmp eax, dword [ebp - 0xe8]
je 0x10029795
mov dword [ebp - 0x470], 1
jmp 0x1002979c
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x470]
cmp eax, 0xffffffff
jne 0x100297b7
mov dword [ebp - 0x388], 1
jmp 0x100297be
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x4e8], eax
cmp dword [ebp - 0x4e8], 0x1824
jle 0x100297e2
mov dword [ebp - 0x390], 1
jmp 0x100297e9
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x5a8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ec]
call fcn.10004dc8
mov dword [ebp - 0x478], 0x2de5
mov dword [ebp - 0x5b0], str.azqe_bcauuxr_mbteop_mbljnoglc
cmp dword [ebp - 0x478], 0x2f0c
jle 0x1002993f
and dword [ebp - 0x1f4], 0
jmp 0x1002983e
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x6314
jge 0x10029932
and dword [ebp - 0x184], 0
jmp 0x10029864
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x5f20
jge 0x1002992d
and dword [ebp - 0x24c], 0
jmp 0x1002988a
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x74b3
jge 0x10029928
and dword [ebp - 0x18c], 0
jmp 0x100298b0
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x698a
jge 0x10029923
mov eax, dword [ebp - 0x1f4]
imul eax, dword [ebp - 0x184]
cdq
idiv dword [ebp - 0x24c]
and edx, dword [ebp - 0x18c]
mov eax, edx
cdq
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], edx
push dword [ebp - 0x64c]
push dword [ebp - 0x650]
lea ecx, [ebp - 0x9e4]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x6d0], eax
mov ecx, dword [ebp - 0x6d0]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x9e4]
call fcn.10004aa0
jmp 0x100298a3
jmp 0x1002987d
jmp 0x10029857
jmp 0x10029831
push 0
push 0x1fd1
call dword [sym.imp.USER32.dll_BeginPaint]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x102]
movzx eax, word [ebp + eax*2 - 0x814]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0xff]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x102]
movzx eax, word [ebp + eax*2 - 0x814]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0xff]
and edx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2a0]
movzx eax, byte [ebp + eax - 0x102]
movzx eax, word [ebp + eax*2 - 0x814]
mov esi, dword [ebp - 0x2c]
movzx esi, byte [ebp + esi - 0xff]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x100]
mov word [ebp + eax*2 - 0x814], si
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x478], 0x2d2e
jge 0x100299e7
push dword [ebp - 0x5b0]
call fcn.1004c653
pop ecx
jmp 0x10029a03
or dword [ebp - 4], 0xffffffff
jmp 0x10029a0d
jmp 0x1002939b
mov dword [ebp - 0x6c], 0xb064
mov dword [ebp - 0x3a0], 1
push 2
lea ecx, [ebp - 0x7d4]
call fcn.10004d6b
mov dword [ebp - 4], 0x11
mov dword [ebp - 0xa4], 5
push 2
lea ecx, [ebp - 0x7f8]
call fcn.10004d6b
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x44], 0
jmp 0x10029a62
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10029a7e
push dword [ebp - 0x44]
lea ecx, [ebp - 0x7d4]
call fcn.10004de4
mov dword [eax], 0x383c67ee
jmp 0x10029a5b
mov dword [ebp - 0x44], 0
jmp 0x10029a8e
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10029aaa
push dword [ebp - 0x44]
lea ecx, [ebp - 0x7f8]
call fcn.10004de4
mov dword [eax], 0xfffffff6
jmp 0x10029a87
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x6c]
jne 0x10029acd
mov eax, 0x8e17c109
test eax, eax
jne 0x10029acd
and dword [ebp - 0x398], 0
jmp 0x10029ad7
mov dword [ebp - 0x398], 1
cmp dword [ebp - 0x398], 0xa1245c81
jne 0x10029aef
mov dword [ebp - 0x540], 1
jmp 0x10029af6
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3a0]
jle 0x10029b19
mov dword [ebp - 0x480], 1
jmp 0x10029b20
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x707
je 0x10029b38
mov dword [ebp - 0x27c], 1
jmp 0x10029b3f
and dword [ebp - 0x27c], 0
push 1
lea ecx, [ebp - 0x7d4]
call fcn.10004de4
mov ecx, dword [ebp - 0x27c]
mov dword [eax], ecx
imul eax, dword [ebp - 0x27c], 0
add eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
jl 0x10029b6f
mov dword [ebp - 0x3a8], 1
jmp 0x10029b76
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x3a8], eax
jge 0x10029b8d
mov dword [ebp - 0x4f0], 1
jmp 0x10029b94
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x6c]
jne 0x10029bb7
mov dword [ebp - 0x3b0], 1
jmp 0x10029bbe
and dword [ebp - 0x3b0], 0
push 1
lea ecx, [ebp - 0x7f8]
call fcn.10004de4
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
mov dword [ebp - 0xa4], 0
jmp 0x10029bec
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xf
je 0x10029c30
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x10029c0b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x10029c2e
push 0x1d81
push 0x1964
push 0
push 0xdc2
call dword [sym.imp.USER32.dll_CreateCaret]
jmp 0x10029bdf
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x7f8]
call fcn.10004dc8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7d4]
call fcn.10004dc8
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x814], cx
lea eax, [ebp - 0x814]
push eax
lea ecx, [ebp - 0x924]
call fcn.1001d77d
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x5b8], eax
mov dword [ebp - 4], 0x13
push dword [ebp - 0x5b8]
call fcn.1001fa9d
pop ecx
mov dword [ebp - 0x3b4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x924]
call fcn.10004c1a
mov dword [ebp - 0x1fc], 0xfffffffd
mov dword [ebp - 0x1fc], 0
jmp 0x10029ccd
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xe
jge 0x10029e26
mov dword [ebp - 0x3b8], 0xfffffffe
mov dword [ebp - 0x488], 0x36e3
mov dword [ebp - 0x6d8], str.pyu_ivyrv_nfnavpirg
cmp dword [ebp - 0x488], 0x387b
jle 0x10029db5
and dword [ebp - 0x194], 0
jmp 0x10029d1e
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x7d2
jge 0x10029db5
and dword [ebp - 0x234], 0
jmp 0x10029d44
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x6a94
jge 0x10029db0
and dword [ebp - 0x19c], 0
jmp 0x10029d66
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x1d3f
jge 0x10029dae
mov eax, dword [ebp - 0x194]
cdq
idiv dword [ebp - 0x234]
mov ecx, dword [ebp - 0x19c]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x65c], eax
mov dword [ebp - 0x658], edx
push dword [ebp - 0x658]
push dword [ebp - 0x65c]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x10029d59
jmp 0x10029d37
jmp 0x10029d11
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10029dcb
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x488], 0x3328
jge 0x10029dee
mov edx, dword [ebp - 0x6d8]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x10029e0a
or dword [ebp - 4], 0xffffffff
jmp 0x10029e14
mov eax, dword [ebp - 0x3b8]
inc eax
mov dword [ebp - 0x3b8], eax
jmp 0x10029cc0
and dword [ebp - 0x23c], 0
jmp 0x10029e3c
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xd
jae 0x1002a119
mov dword [ebp - 0x7c], 0x6580
mov dword [ebp - 0x204], 0x811f07b4
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x5c0], 0x82baef6e
mov dword [ebp - 0x5c8], 0xdad816f9
cmp dword [ebp - 0x7c], 0
jne 0x10029e8d
cmp dword [ebp - 0x7c], 0
jne 0x10029e8d
and dword [ebp - 0x528], 0
jmp 0x10029e97
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
je 0x10029f3d
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x840], eax
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x7c]
jge 0x10029ed3
mov dword [ebp - 0x3c0], 1
jmp 0x10029eda
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x3c0]
je 0x10029ef4
mov dword [ebp - 0x490], 1
jmp 0x10029efb
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x490], eax
jne 0x10029f15
mov dword [ebp - 0x6b4], 1
jmp 0x10029f1c
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x204], 0
je 0x10029f3d
mov dword [ebp - 0x3c8], 1
jmp 0x10029f44
and dword [ebp - 0x3c8], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x7c], 0
jmp 0x10029f63
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1e
je 0x10029f76
cmp dword [ebp - 0x1a4], 0
je 0x10029f74
jmp 0x10029f76
jmp 0x10029f5c
mov dword [ebp - 0x4f8], 0x3d4d
mov dword [ebp - 0x5d0], str.ankxm_uznqk_xfonyacg_ihvw_aengdzcw_uxxsogha_lrav_zbsfqfdce
cmp dword [ebp - 0x4f8], 0x4004
jle 0x1002a0bf
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
and dword [ebp - 0x20c], 0
jmp 0x10029fb8
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0x3ddf
jge 0x1002a0b0
and dword [ebp - 0x1b4], 0
jmp 0x10029fde
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xd8b
jge 0x1002a0ab
and dword [ebp - 0x25c], 0
jmp 0x1002a004
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x3870
jge 0x1002a0a6
and dword [ebp - 0x1ac], 0
jmp 0x1002a02a
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xf39
jge 0x1002a0a1
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x1ac]
sar eax, cl
mov ecx, dword [ebp - 0x20c]
imul ecx, dword [ebp - 0x1b4]
and eax, ecx
cdq
mov dword [ebp - 0x668], eax
mov dword [ebp - 0x664], edx
push dword [ebp - 0x664]
push dword [ebp - 0x668]
lea ecx, [ebp - 0x9c0]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x6e0], eax
mov ecx, dword [ebp - 0x6e0]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x9c0]
call fcn.10004aa0
jmp 0x1002a01d
jmp 0x10029ff7
jmp 0x10029fd1
jmp 0x10029fab
push 1
push 0
push 0xf3f
call dword [sym.imp.USER32.dll_SetWindowRgn]
xor eax, eax
mov ecx, dword [ebp - 0x23c]
mov word [ebp + ecx*2 - 0x814], ax
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x4f8], 0x3b5c
jge 0x1002a0ee
push dword [ebp - 0x5d0]
call fcn.1004c653
pop ecx
jmp 0x1002a10a
or dword [ebp - 4], 0xffffffff
jmp 0x1002a114
jmp 0x10029e2f
cmp dword [ebp - 0x3b4], 0
je 0x1002b80e
mov dword [ebp - 0x24], 0xfc4f27d2
mov dword [ebp - 0x4a0], 0xa4ccfd6
mov dword [ebp - 0x60c], 0xfffffffc
mov dword [ebp - 0x848], 0x22401dbd
mov dword [ebp - 0x3d0], 0x1c6d
mov dword [ebp - 0x6c0], str.ace_dzowr_uldtl_utgnqs_brxvxkm_bhkofkt_fedtbtpkg_khub_bnxkkfc_lum_uiyjr_diaukzr_wpvw_aulnlda
cmp dword [ebp - 0x3d0], 0x1f61
jle 0x1002a1e2
and dword [ebp - 0x1bc], 0
jmp 0x1002a181
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2be3
jge 0x1002a1e2
and dword [ebp - 0x214], 0
jmp 0x1002a1a3
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x4af3
jge 0x1002a1e0
mov eax, dword [ebp - 0x1bc]
or eax, dword [ebp - 0x214]
cdq
mov dword [ebp - 0x674], eax
mov dword [ebp - 0x670], edx
push dword [ebp - 0x670]
push dword [ebp - 0x674]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002a196
jmp 0x1002a174
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x3d0], 0x19e3
jge 0x1002a205
mov edx, dword [ebp - 0x6c0]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002a221
or dword [ebp - 4], 0xffffffff
jmp 0x1002a22b
mov dword [ebp - 0x3e8], 8
mov dword [ebp - 0x498], 0x738f
mov dword [ebp - 0x6d4], str.rdbuzfq_jfmpnnegq_lulgh_yeerlxpfa_qfhxyp_kbwunrazb_ebmj_iku_ppaarbqys_kkhen_oidpdb_tqrklzl
cmp dword [ebp - 0x498], 0x74cb
jle 0x1002a362
and dword [ebp - 0x1c4], 0
jmp 0x1002a26f
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x7e66
jge 0x1002a362
and dword [ebp - 0x254], 0
jmp 0x1002a295
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x4848
jge 0x1002a35d
and dword [ebp - 0x1cc], 0
jmp 0x1002a2bb
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6d9d
jge 0x1002a358
and dword [ebp - 0x21c], 0
jmp 0x1002a2e1
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x305e
jge 0x1002a353
mov eax, dword [ebp - 0x1c4]
cdq
idiv dword [ebp - 0x254]
sub edx, dword [ebp - 0x1cc]
sub edx, dword [ebp - 0x21c]
mov eax, edx
cdq
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], edx
push dword [ebp - 0x67c]
push dword [ebp - 0x680]
lea ecx, [ebp - 0x990]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x5d8], eax
mov ecx, dword [ebp - 0x5d8]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x990]
call fcn.10004aa0
jmp 0x1002a2d4
jmp 0x1002a2ae
jmp 0x1002a288
jmp 0x1002a262
mov dword [ebp - 0x1d4], 0
jmp 0x1002a37b
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1002a397
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x9cc], 0x80f885bd
jmp 0x1002a36e
mov dword [ebp - 4], 0x1a
cmp dword [ebp - 0x498], 0x706d
jge 0x1002a5f8
mov dword [ebp - 0x6e8], 0x15a4
cmp dword [ebp - 0x6e8], 0xf68
jge 0x1002a5ec
lea eax, [ebp - 0x1dc]
push eax
mov ecx, 0x10081198
call fcn.1001480b
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x720]
call fcn.10004d6b
mov dword [ebp - 0x878], eax
mov byte [ebp - 4], 0x1b
and dword [ebp - 0x244], 0
jmp 0x1002a40a
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x1dc]
jge 0x1002a441
push dword [ebp - 0x244]
lea ecx, [ebp - 0x720]
call fcn.10004de4
mov dword [ebp - 0x5e0], eax
push dword [ebp - 0x5e0]
mov ecx, 0x10081198
call fcn.1001480b
jmp 0x1002a3fd
lea ecx, [ebp - 0x710]
call fcn.10014a06
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 0x1c
and dword [ebp - 0xb4], 0
jmp 0x1002a46c
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x1dc]
jge 0x1002a529
mov byte [ebp - 0x25], 1
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0x224], eax
jmp 0x1002a49e
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
cmp eax, dword [ebp - 0x1dc]
jge 0x1002a4f4
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x720]
call fcn.10004de4
mov dword [ebp - 0x6f0], eax
push dword [ebp - 0x224]
lea ecx, [ebp - 0x720]
call fcn.10004de4
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x5e8]
mov eax, dword [eax]
cmp eax, dword [ecx]
jne 0x1002a4f2
mov byte [ebp - 0x25], 0
jmp 0x1002a4f4
jmp 0x1002a491
movzx eax, byte [ebp - 0x25]
test eax, eax
je 0x1002a524
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x720]
call fcn.10004de4
mov dword [ebp - 0x6cc], eax
push dword [ebp - 0x6cc]
lea ecx, [ebp - 0x710]
call fcn.10033625
jmp 0x1002a45f
lea ecx, [ebp - 0x710]
call fcn.1001520e
push eax
mov ecx, 0x10081078
call fcn.10033470
mov dword [ebp - 0x5f0], eax
push fcn.100173f1
mov ecx, dword [ebp - 0x5f0]
call fcn.100149ca
and dword [ebp - 0x1e4], 0
jmp 0x1002a56b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
lea ecx, [ebp - 0x710]
call fcn.1001520e
cmp dword [ebp - 0x1e4], eax
jae 0x1002a5bf
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x710]
call fcn.10004de4
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
push dword [eax]
mov ecx, 0x10081078
call fcn.1003335e
mov dword [ebp - 0x5f8], eax
mov edx, 0x1007097c
mov ecx, dword [ebp - 0x5f8]
call fcn.10006f4f
jmp 0x1002a55e
push fcn.100173f1
mov ecx, 0x10081078
call fcn.100149ca
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x710]
call fcn.10004dc8
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x720]
call fcn.10004dc8
push dword [ebp - 0x6d4]
call fcn.1004c653
pop ecx
jmp 0x1002a614
or dword [ebp - 4], 0xffffffff
jmp 0x1002a61e
cmp dword [ebp - 0x24], 0
jne 0x1002a633
cmp dword [ebp - 0x24], 0
jne 0x1002a633
and dword [ebp - 0x3d8], 0
jmp 0x1002a63d
mov dword [ebp - 0x3d8], 1
cmp dword [ebp - 0x3d8], 0
je 0x1002a652
mov dword [ebp - 0x600], 1
jmp 0x1002a659
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x890], eax
xor eax, eax
je 0x1002a678
cmp dword [ebp - 0x24], 0
je 0x1002a678
mov dword [ebp - 0x558], 1
jmp 0x1002a67f
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x558]
jge 0x1002a68e
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x858], eax
cmp dword [ebp - 0x24], 0
jne 0x1002a6ac
cmp dword [ebp - 0x24], 0
jne 0x1002a6ac
and dword [ebp - 0x3e0], 0
jmp 0x1002a6b6
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
add eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jle 0x1002a6dc
mov dword [ebp - 0x714], 1
jmp 0x1002a6e3
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
mov byte [ebp - 0x11c], 5
mov byte [ebp - 0x11b], 0x36
mov byte [ebp - 0x11a], 4
mov byte [ebp - 0x119], 0x1d
mov byte [ebp - 0x118], 0xa
mov byte [ebp - 0x117], 0
mov byte [ebp - 0x116], 0xb
mov byte [ebp - 0x115], 0x17
mov byte [ebp - 0x114], 1
mov byte [ebp - 0x113], 0
mov byte [ebp - 0x112], 0
mov byte [ebp - 0x111], 0x22
mov byte [ebp - 0x110], 8
mov byte [ebp - 0x10f], 0x23
mov byte [ebp - 0x10e], 0xc
mov byte [ebp - 0x10d], 0x17
mov byte [ebp - 0x10c], 3
mov byte [ebp - 0x10b], 0x23
mov byte [ebp - 0x10a], 7
mov byte [ebp - 0x109], 0x11
mov byte [ebp - 0x108], 6
mov byte [ebp - 0x107], 0x22
mov byte [ebp - 0x106], 9
mov byte [ebp - 0x105], 7
mov byte [ebp - 0x104], 2
mov byte [ebp - 0x103], 0x10
mov byte [ebp - 0x102], 0xd
mov byte [ebp - 0x101], 7
push 2
lea ecx, [ebp - 0x764]
call fcn.10004d6b
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x98], 0xfffffff6
mov dword [ebp - 0x124], 0
jmp 0x1002a7f7
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1002a819
push dword [ebp - 0x124]
lea ecx, [ebp - 0x764]
call fcn.10004de4
mov dword [eax], 1
jmp 0x1002a7ea
mov dword [ebp - 0x98], 1
jmp 0x1002a832
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1002a9ef
mov dword [ebp - 0x500], 0x5672
mov dword [ebp - 0x618], str.fxhrkpmxr_rybnepf_glsckyes_wynyow_wgbkl_latqnyf_jbxmjspcj_owrumvfk_bur_ivtba_wbvykkoj_nmvvm
cmp dword [ebp - 0x500], 0x56ef
jle 0x1002a97a
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
and dword [ebp - 0x128], 0
jmp 0x1002a881
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x163e
jge 0x1002a97a
and dword [ebp - 0x130], 0
jmp 0x1002a8a7
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x407f
jge 0x1002a975
and dword [ebp - 0x138], 0
jmp 0x1002a8cd
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x35fd
jge 0x1002a970
and dword [ebp - 0x140], 0
jmp 0x1002a8f3
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x7376
jge 0x1002a96b
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x130]
cdq
idiv dword [ebp - 0x138]
mov ecx, dword [ebp - 0x140]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x688], edx
push dword [ebp - 0x688]
push dword [ebp - 0x68c]
lea ecx, [ebp - 0x93c]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x6dc], eax
mov ecx, dword [ebp - 0x6dc]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x93c]
call fcn.10004aa0
jmp 0x1002a8e6
jmp 0x1002a8c0
jmp 0x1002a89a
jmp 0x1002a874
mov byte [ebp - 4], 0x1f
cmp dword [ebp - 0x500], 0x53a9
jge 0x1002a996
push dword [ebp - 0x618]
call fcn.1004c653
pop ecx
jmp 0x1002a9b2
mov dword [ebp - 4], 0x1e
jmp 0x1002a9c2
push dword [ebp - 0x98]
lea ecx, [ebp - 0x764]
call fcn.10004de4
mov esi, eax
push dword [ebp - 0x98]
lea ecx, [ebp - 0x764]
call fcn.10004de4
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1002a825
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x764]
call fcn.10004dc8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x11c]
and eax, 0x59
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x11c]
or ecx, 0x59
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x11c]
mov byte [ebp + eax - 0x570], cl
push 2
lea ecx, [ebp - 0x7e0]
call fcn.10004d6b
mov dword [ebp - 4], 0x21
mov dword [ebp - 0xd4], 0xfffffffe
mov dword [ebp - 0x148], 0
jmp 0x1002aa6e
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jge 0x1002aa90
push dword [ebp - 0x148]
lea ecx, [ebp - 0x7e0]
call fcn.10004de4
mov dword [eax], 1
jmp 0x1002aa61
mov dword [ebp - 0xd4], 0
jmp 0x1002aaa9
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jg 0x1002aacc
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x7e0]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002aaca
jmp 0x1002aacc
jmp 0x1002aa9c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7e0]
call fcn.10004dc8
mov dword [ebp - 0x34], 2
and dword [ebp - 0x298], 0
jmp 0x1002aaf3
mov eax, dword [ebp - 0x34]
inc eax
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x1c
jae 0x1002abf1
mov dword [ebp - 0x150], 0x62d5e48d
mov dword [ebp - 0x150], 0x14
jmp 0x1002ab20
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffe9
jge 0x1002ab64
mov dword [ebp - 0xe4], 0x665683c8
mov dword [ebp - 0xe4], 0xfffffffe
jmp 0x1002ab4c
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xffffffeb
je 0x1002ab62
cmp dword [ebp - 0xe4], 0
je 0x1002ab60
jmp 0x1002ab62
jmp 0x1002ab3f
jmp 0x1002ab13
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x298]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x570]
mov ecx, dword [ebp - 0x34]
movzx ecx, byte [ebp + ecx - 0x11b]
and ecx, eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x298]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x570]
mov edx, dword [ebp - 0x34]
movzx edx, byte [ebp + edx - 0x11b]
and edx, eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x298]
movzx eax, byte [ebp + eax - 0x11e]
movsx eax, byte [ebp + eax - 0x570]
mov esi, dword [ebp - 0x34]
movzx ebx, byte [ebp + esi - 0x11b]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x34]
movzx eax, byte [ebp + eax - 0x11c]
mov byte [ebp + eax - 0x570], bl
jmp 0x1002aaeb
mov dword [ebp - 0x2f4], 0x2872
mov dword [ebp - 0x724], str.rxviinzps_xprblfjck_eaux_npyqqasff_gxds_wsdgo_bbcvkxjqr_ckur
cmp dword [ebp - 0x2f4], 0x2975
jle 0x1002accd
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
and dword [ebp - 0x158], 0
jmp 0x1002ac39
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x65f
jge 0x1002accd
and dword [ebp - 0x160], 0
jmp 0x1002ac5f
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x2b80
jge 0x1002acc8
and dword [ebp - 0x1a8], 0
jmp 0x1002ac81
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x1bc5
jge 0x1002acc6
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x1a8]
shl eax, cl
cdq
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], edx
push dword [ebp - 0x694]
push dword [ebp - 0x698]
mov ecx, 0x10081078
call fcn.10004aca
jmp 0x1002ac74
jmp 0x1002ac52
jmp 0x1002ac2c
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x84], 0x13fe662d
mov dword [ebp - 0xa0], 0x64a11600
mov dword [ebp - 0xa8], 5
mov dword [ebp - 0x1b0], 0
jmp 0x1002ad0b
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x1002ad27
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x294], 0x6d64
jmp 0x1002acfe
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x45fe
jl 0x1002ad48
mov dword [ebp - 0x3f0], 1
jmp 0x1002ad4f
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jge 0x1002ad63
mov dword [ebp - 0x4a8], 1
jmp 0x1002ad6a
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x4a8]
jl 0x1002ad84
mov dword [ebp - 0x3f8], 1
jmp 0x1002ad8b
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0x12df
jl 0x1002ada3
mov dword [ebp - 0x530], 1
jmp 0x1002adaa
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 6
jl 0x1002adbf
mov dword [ebp - 0x400], 1
jmp 0x1002adc6
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x400]
cmp eax, dword [ebp - 0x18]
je 0x1002ade0
mov dword [ebp - 0x4b0], 1
jmp 0x1002ade7
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4b0], eax
jl 0x1002adfe
mov dword [ebp - 0x408], 1
jmp 0x1002ae05
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x408]
jle 0x1002ae22
mov eax, 0xffff
test eax, eax
jne 0x1002ae22
and dword [ebp - 0x508], 0
jmp 0x1002ae2c
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa8], 0
jmp 0x1002ae5d
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xffffffff
jl 0x1002b100
mov dword [ebp - 0x8c], 0xa9f4f9a0
mov dword [ebp - 0x6e4], 0xffffffff
mov dword [ebp - 0x630], 5
mov dword [ebp - 0x84], 0
jmp 0x1002aea1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xb
je 0x1002aedb
mov dword [ebp - 0xa0], 0xd
jmp 0x1002aec3
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffe6
jne 0x1002aed9
cmp dword [ebp - 0x8c], 0
je 0x1002aed7
jmp 0x1002aed9
jmp 0x1002aeb6
jmp 0x1002ae94
mov dword [ebp - 0x18], 0
jmp 0x1002aeeb
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1002b0fb
mov dword [ebp - 0x740], 5
mov dword [ebp - 0x2e4], 0xc01
mov dword [ebp - 0x8c], 0
jmp 0x1002af22
cmp dword [ebp - 0x8c], 1
jg 0x1002b0f6
mov dword [ebp - 0x2bc], 1
push 4
lea ecx, [ebp - 0x770]
call fcn.10004d6b
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x1b8], 0
jmp 0x1002af66
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 4
jge 0x1002af88
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0x770]
call fcn.10004de4
mov dword [eax], 0xa3f0bde8
jmp 0x1002af59
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
mov dword [ebp - 0x880], eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x740]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
add eax, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + ecx*4 - 0x294], eax
jg 0x1002afd2
mov dword [ebp - 0x2c4], 1
jmp 0x1002afd9
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
imul eax, dword [ebp - 0x2c4]
imul eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x84]
jle 0x1002b005
mov dword [ebp - 0x2cc], 1
jmp 0x1002b00c
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
cmp dword [ebp - 0x2cc], eax
je 0x1002b02a
mov dword [ebp - 0x624], 1
jmp 0x1002b031
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x860], eax
mov eax, 0xef21ddbc
cmp eax, 0xb167d3d8
ja 0x1002b055
mov dword [ebp - 0x2d4], 1
jmp 0x1002b05c
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x294]
cmp dword [ebp - 0x2d4], eax
jl 0x1002b07a
mov dword [ebp - 0x2dc], 1
jmp 0x1002b081
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x6e4]
imul eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x2ec], eax
push 1
lea ecx, [ebp - 0x770]
call fcn.10004de4
mov ecx, dword [ebp - 0x2ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x294], 0
je 0x1002b0e2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.10004dc8
jmp 0x1002af15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x770]
call fcn.10004dc8
jmp 0x1002af15
jmp 0x1002aee4
jmp 0x1002ae50
mov dword [ebp - 4], 0x23
cmp dword [ebp - 0x2f4], 0x2562
jge 0x1002b123
mov edx, dword [ebp - 0x724]
mov ecx, 0x10081078
call fcn.10006f4f
jmp 0x1002b13f
or dword [ebp - 4], 0xffffffff
jmp 0x1002b149
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x570], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xb0], 0x9694d2b5
mov dword [ebp - 0x324], 0xedb39523
push 2
lea ecx, [ebp - 0x7c8]
call fcn.10004d6b
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x4c], 0
jmp 0x1002b199
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1002b1af
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x754], 0x91cb4e76
jmp 0x1002b192
mov dword [ebp - 0x4c], 0
jmp 0x1002b1bf
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1002b1d8
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x7c8]
call fcn.10004de4
and dword [eax], 0
jmp 0x1002b1b8
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
xor edx, edx
inc edx
sub edx, dword [ebp + ecx - 0x754]
cmp edx, dword [ebp + eax - 0x754]
jl 0x1002b202
mov dword [ebp - 0x2fc], 1
jmp 0x1002b209
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0xfffffffd
jge 0x1002b21e
mov dword [ebp - 0x304], 1
jmp 0x1002b225
and dword [ebp - 0x304], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x754]
cmp dword [ebp - 0x304], eax
jl 0x1002b246
mov dword [ebp - 0x63c], 1
jmp 0x1002b24d
and dword [ebp - 0x63c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x754]
mov dword [ebp - 0x894], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x754]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x868], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x888], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x754], 0
jne 0x1002b2ad
cmp dword [ebp - 0xb0], 0
jne 0x1002b2ad
and dword [ebp - 0x30c], 0
jmp 0x1002b2b7
mov dword [ebp - 0x30c], 1
mov eax, dword [ebp - 0xc0]
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0xc0]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
je 0x1002b342
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x754], 0
je 0x1002b342
cmp dword [ebp - 0xb0], 0
je 0x1002b311
mov eax, 0xffff
test eax, eax
je 0x1002b311
and dword [ebp - 0x314], 0
cmp dword [ebp - 0x314], 0xfd074deb
je 0x1002b336
and dword [ebp - 0x31c], 0
imul eax, dword [ebp - 0x31c], 0xfcf4
mov dword [ebp - 0x324], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7c8]
call fcn.10004dc8
lea eax, [ebp - 0x570]
push eax
lea ecx, [ebp - 0x8ec]
call fcn.10033582
mov dword [ebp - 4], 0x26
and dword [ebp - 0x1c8], 0
jmp 0x1002b397
cmp dword [ebp - 0x1c8], 0xf
jae 0x1002b523
mov dword [ebp - 0x3c], 0xa1e94870
mov dword [ebp - 0x60], 3
mov dword [ebp - 0x354], 0x188047d2
mov eax, dword [ebp - 0x3c]
shl eax, 2
cmp dword [ebp - 0x3c], eax
jg 0x1002b3d3
mov dword [ebp - 0x1c], 0x71c1ec2d
mov dword [ebp - 0x3a4], 9
mov dword [ebp - 0x29c], 0xffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x838], eax
cmp dword [ebp - 0x1c], 0xaa39
jg 0x1002b55c
mov dword [ebp - 0x54], 0x3ae35568
mov dword [ebp - 0x3f4], 4
mov dword [ebp - 0x6f4], 0xf77722ab
mov dword [ebp - 0x1d8], 0
jmp 0x1002b842
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1002b85e
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x3c4], 0xe7631615
jmp 0x1002b835
mov dword [ebp - 0x54], 0
jmp 0x1002b86e
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffea
jg 0x1002b9d1
mov dword [ebp - 0xc8], 0x167c
mov dword [ebp - 0x28c], 0x34ac0198
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x3bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0x3c4], ecx
cmp dword [ebp - 0x3bc], 0
je 0x1002b8cd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 0
je 0x1002b8cd
mov dword [ebp - 0x3cc], 1
jmp 0x1002b8d4
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0xc8]
je 0x1002b8eb
mov dword [ebp - 0x3d4], 1
jmp 0x1002b8f2
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3cc]
add eax, dword [ebp - 0x3d4]
sub eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x54]
jne 0x1002b916
xor eax, eax
je 0x1002b916
mov dword [ebp - 0x3dc], 1
jmp 0x1002b91d
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
je 0x1002b947
cmp dword [ebp - 0xc8], 0
je 0x1002b947
mov dword [ebp - 0x3e4], 1
jmp 0x1002b94e
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x54]
jg 0x1002b971
mov eax, 0x1213
test eax, eax
jne 0x1002b971
and dword [ebp - 0x3ec], 0
jmp 0x1002b97b
mov dword [ebp - 0x3ec], 1
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 0x62a4
jle 0x1002b99f
mov dword [ebp - 0x3fc], 1
jmp 0x1002b9a6
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
sub eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x6f4], eax
cmp dword [ebp - 0x28c], 0
je 0x1002b9cc
jmp 0x1002b867
jmp 0x1002b867
cmp dword [0x1035e8f8], 0
je 0x1002c8b5
mov eax, dword [ebp + 8]
mov dword [ebp - 0x5ac], eax
mov dword [ebp - 0xd0], 0x13dd33a4
mov dword [ebp - 0xb8], 0xf7e813a3
mov dword [ebp - 0xd8], 0xffffffff
push 3
lea ecx, [ebp - 0x554]
call fcn.10004d6b
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x81c], 0x4471
mov dword [ebp - 0x1e0], 0
jmp 0x1002ba3c
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x1002ba5e
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x554]
call fcn.10004de4
mov dword [eax], 0xb739032f
jmp 0x1002ba2f
mov dword [ebp - 0xd0], 0x13
jmp 0x1002ba77
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffff9
jl 0x1002c01a
mov dword [ebp - 0x208], 0x24ce5545
mov dword [ebp - 0x210], 0xfec4
mov dword [ebp - 0x218], 0xf55f5dd
mov dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x208]
je 0x1002bac6
mov dword [ebp - 0x660], 1
jmp 0x1002bacd
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x820], eax
imul eax, dword [ebp - 0x208], 0xfffffff7
imul eax, eax, 0xefa2
cmp eax, 0xffff
jb 0x1002baf9
mov dword [ebp - 0x404], 1
jmp 0x1002bb00
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0xfffffff6
jne 0x1002bb15
mov dword [ebp - 0x40c], 1
jmp 0x1002bb1c
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x1002bf16
mov dword [ebp - 0x41c], 0xfda0246c
push 4
lea ecx, [ebp - 0x730]
call fcn.10004d6b
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x414], 0x19eb
mov dword [ebp - 0x66c], str.ijxyfeg_szausm_wss_jhhmuqap_sxr_hxql_omjchx_eqsx_qmmo
cmp dword [ebp - 0x414], 0x1ada
jle 0x1002bc49
and dword [ebp - 0x1f8], 0
jmp 0x1002bb8a
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x27a8
jge 0x1002bc49
and dword [ebp - 0x1e8], 0
jmp 0x1002bbb0
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x2531
jge 0x1002bc44
and dword [ebp - 0x1f0], 0
jmp 0x1002bbd6
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xa25
jge 0x1002bc3f
mov eax, dword [ebp - 0x1e8]
add eax, dword [ebp - 0x1f0]
or eax, dword [ebp - 0x1f8]
cdq
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], edx
push dword [ebp - 0x6a0]
push dword [ebp - 0x6a4]
lea ecx, [ebp - 0x954]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x734], eax
mov ecx, dword [ebp - 0x734]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x954]
call fcn.10004aa0
jmp 0x1002bbc9
jmp 0x1002bba3
jmp 0x1002bb7d
mov dword [ebp - 0x270], 0x7212
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x414], 0x176d
jge 0x1002bc6f
push dword [ebp - 0x66c]
call fcn.1004c653
pop ecx
jmp 0x1002bc8b
mov dword [ebp - 4], 0x29
jmp 0x1002bc9b
mov dword [ebp - 0x6fc], 0xcd58f28d
mov dword [ebp - 0x200], 0
jmp 0x1002bcbe
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x1002bce0
push dword [ebp - 0x200]
lea ecx, [ebp - 0x730]
call fcn.10004de4
mov dword [eax], 1
jmp 0x1002bcb1
mov esi, dword [ebp - 0x41c]
push 3
lea ecx, [ebp - 0x730]
call fcn.10004de4
mov dword [eax], esi
cmp dword [ebp - 0xb8], 0
jne 0x1002beec
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x210]
je 0x1002bd1c
mov dword [ebp - 0x43c], 1
jmp 0x1002bd23
and dword [ebp - 0x43c], 0
push 3
lea ecx, [ebp - 0x730]
call fcn.10004de4
push 0
lea ecx, [ebp - 0x554]
call fcn.10004de4
cmp dword [ebp - 0x41c], 0
jne 0x1002bd58
cmp dword [ebp - 0x270], 0
jne 0x1002bd58
and dword [ebp - 0x424], 0
jmp 0x1002bd62
mov dword [ebp - 0x424], 1
push 0
lea ecx, [ebp - 0x554]
call fcn.10004de4
mov ecx, dword [ebp - 0x424]
cmp ecx, dword [eax]
jl 0x1002bd85
mov dword [ebp - 0x42c], 1
jmp 0x1002bd8c
and dword [ebp - 0x42c], 0
push 2
lea ecx, [ebp - 0x554]
call fcn.10004de4
mov ecx, dword [ebp - 0x42c]
cmp ecx, dword [eax]
je 0x1002bdaf
mov dword [ebp - 0x434], 1
jmp 0x1002bdb6
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x434], eax
jne 0x1002bdd0
mov dword [ebp - 0x444], 1
jmp 0x1002bdd7
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x43c]
cmp eax, dword [ebp - 0x444]
jne 0x1002be03
push 3
lea ecx, [ebp - 0x730]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002be03
mov dword [ebp - 0x44c], 1
jmp 0x1002be0a
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x270]
jg 0x1002be2a
mov dword [ebp - 0x454], 1
jmp 0x1002be31
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x454]
jge 0x1002be4b
mov dword [ebp - 0x45c], 1
jmp 0x1002be52
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x208]
imul eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x210]
jge 0x1002be73
mov dword [ebp - 0x464], 1
jmp 0x1002be7a
and dword [ebp - 0x464], 0
push 0
lea ecx, [ebp - 0x554]
call fcn.10004de4
mov ecx, dword [ebp - 0x464]
cmp ecx, dword [eax]
jge 0x1002be9d
mov dword [ebp - 0x46c], 1
jmp 0x1002bea4
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x46c], eax
jne 0x1002bec7
cmp dword [ebp - 0x210], 0
je 0x1002bec7
mov dword [ebp - 0x474], 1
jmp 0x1002bece
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0
jne 0x1002beec
and dword [ebp - 0x47c], 0
jmp 0x1002bef6
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x678], eax
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x730]
call fcn.10004dc8
jmp 0x1002c015
mov dword [ebp - 0x578], 0x93a29add
push 2
lea ecx, [ebp - 0x554]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002bfff
mov dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0xfffffff6
jne 0x1002bf65
mov eax, dword [ebp - 0xd8]
sub eax, 0x8b80
cmp eax, dword [ebp - 0x578]
jl 0x1002bf65
and dword [ebp - 0x484], 0
jmp 0x1002bf6f
mov dword [ebp - 0x484], 1
cmp dword [ebp - 0x484], 8
jae 0x1002bf84
mov dword [ebp - 0x48c], 1
jmp 0x1002bf8b
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x48c], eax
jge 0x1002bfa5
mov dword [ebp - 0x494], 1
jmp 0x1002bfac
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x218], eax
mov esi, dword [ebp - 0x218]
add esi, 0xc267
push 0
lea ecx, [ebp - 0x554]
call fcn.10004de4
cmp esi, dword [eax]
je 0x1002bfe1
mov dword [ebp - 0x49c], 1
jmp 0x1002bfe8
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x49c]
jne 0x1002bfff
and dword [ebp - 0x4a4], 0
jmp 0x1002c009
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0xd8], eax
jmp 0x1002ba6a
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1002c034
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x554]
call fcn.10004dc8
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x4ac], 0x55ad
mov dword [ebp - 0x584], str.rch_nssgqz_moc_ztkuqc_xjxlhzdi_bmxxwrrl_zwpzbclv_wtfvhu
cmp dword [ebp - 0x4ac], 0x55cc
jle 0x1002c110
and dword [ebp - 0x220], 0
jmp 0x1002c086
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x413e
jge 0x1002c110
and dword [ebp - 0x228], 0
jmp 0x1002c0a8
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x8a6
jge 0x1002c10b
mov eax, dword [ebp - 0x220]
and eax, dword [ebp - 0x228]
cdq
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], edx
push dword [ebp - 0x6ac]
push dword [ebp - 0x6b0]
lea ecx, [ebp - 0x978]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x57c], eax
mov ecx, dword [ebp - 0x57c]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x978]
call fcn.10004aa0
jmp 0x1002c09b
jmp 0x1002c079
mov dword [ebp - 4], 0x2c
cmp dword [ebp - 0x4ac], 0x53e6
jge 0x1002c12f
push dword [ebp - 0x584]
call fcn.1004c653
pop ecx
jmp 0x1002c14b
or dword [ebp - 4], 0xffffffff
jmp 0x1002c155
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10004d6b
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x50c], 0xf5cbf793
mov dword [ebp - 0x514], 1
mov dword [ebp - 0x59c], 0xffffffff
mov dword [ebp - 0x5a4], 0xcd1ac8c6
mov dword [ebp - 0x14], 0
jmp 0x1002c1a1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002c1bd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
mov dword [eax], 0xa290be44
jmp 0x1002c19a
mov dword [ebp - 0x14], 0
jmp 0x1002c1cd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002c1e3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x1002c1c6
mov dword [ebp - 0x14], 0
jmp 0x1002c1f3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002c209
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x594], 6
jmp 0x1002c1ec
mov dword [ebp - 0x14], 0
jmp 0x1002c219
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002c22f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8bc], 0xbab72157
jmp 0x1002c212
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
mov esi, eax
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x1002c25d
mov dword [ebp - 0x4ec], 1
jmp 0x1002c264
and dword [ebp - 0x4ec], 0
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002c3f9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2b8], 0
je 0x1002c2a8
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002c2a8
mov dword [ebp - 0x4b4], 1
jmp 0x1002c2af
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 0xffff
je 0x1002c2cd
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
cmp dword [eax], 0
je 0x1002c2e2
mov eax, 0xadfb
test eax, eax
je 0x1002c2e2
mov dword [ebp - 0x4bc], 1
jmp 0x1002c2e9
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0xf9d6
je 0x1002c301
mov dword [ebp - 0x4c4], 1
jmp 0x1002c308
and dword [ebp - 0x4c4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c4]
sub ecx, 0x9338
cmp ecx, dword [ebp + eax - 0x2b8]
jge 0x1002c32f
mov dword [ebp - 0x4cc], 1
jmp 0x1002c336
and dword [ebp - 0x4cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x4cc], eax
jg 0x1002c357
mov dword [ebp - 0x58c], 1
jmp 0x1002c35e
and dword [ebp - 0x58c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x828], eax
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
cmp dword [eax], 0
jne 0x1002c38f
mov dword [ebp - 0x4d4], 1
jmp 0x1002c396
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xe3f3
jge 0x1002c3ae
mov dword [ebp - 0x4dc], 1
jmp 0x1002c3b5
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xffff
jbe 0x1002c3cd
mov dword [ebp - 0x278], 1
jmp 0x1002c3d4
and dword [ebp - 0x278], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x594], ecx
cmp dword [ebp - 0x278], 0
jne 0x1002c3f9
and dword [ebp - 0x4e4], 0
jmp 0x1002c403
mov dword [ebp - 0x4e4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x4e4], eax
jl 0x1002c424
mov dword [ebp - 0x4f4], 1
jmp 0x1002c42b
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4ec]
cmp eax, dword [ebp - 0x4f4]
je 0x1002c445
mov dword [ebp - 0x4fc], 1
jmp 0x1002c44c
and dword [ebp - 0x4fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x4fc], eax
jg 0x1002c46d
mov dword [ebp - 0x504], 1
jmp 0x1002c474
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
mov eax, dword [eax]
imul eax, dword [ebp - 0x504]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x514], eax
mov esi, dword [ebp - 0x514]
push 0
lea ecx, [ebp - 0x2b0]
call fcn.10004de4
imul esi, dword [eax]
test esi, esi
jne 0x1002c4c8
cmp dword [ebp - 0x59c], 0
jne 0x1002c4c8
and dword [ebp - 0x280], 0
jmp 0x1002c4d2
mov dword [ebp - 0x280], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x280]
mov dword [ebp + eax - 0x8bc], ecx
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1002c504
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b0]
call fcn.10004dc8
mov eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0xe0], 0x7730f94f
mov dword [ebp - 0xe0], 0xec2e0cf5
mov dword [ebp - 0xe0], 0x16
jmp 0x1002c54c
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x15
je 0x1002c5bb
mov dword [ebp - 0x5b4], 0xe3580d4
mov dword [ebp - 0x230], 0
jmp 0x1002c578
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x1002c594
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x784], 0xffffffff
jmp 0x1002c56b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x784], 0
je 0x1002c5a6
jmp 0x1002c5bb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x784]
mov dword [ebp - 0x5b4], eax
jmp 0x1002c53f
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x5c4], eax
push dword [ebp - 0x5c4]
push dword [ebp - 0x5cc]
call dword [0x1035e8f8]
mov dword [ebp - 0x5e4], eax
mov dword [ebp - 0x238], 0xfffffff6
mov dword [ebp - 0x238], 0x18
jmp 0x1002c602
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xffffffff
jl 0x1002c8ad
mov dword [ebp - 0x250], 0xe1d925b0
mov dword [ebp - 0x524], 0x37ac
mov dword [ebp - 0x5dc], str.ktu_mlueh_rpgihh_asdu_bti_bkv_dbuuypne
cmp dword [ebp - 0x524], 0x3954
jle 0x1002c6de
and dword [ebp - 0x240], 0
jmp 0x1002c653
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x4cbd
jge 0x1002c6de
and dword [ebp - 0x248], 0
jmp 0x1002c675
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x2c5a
jge 0x1002c6d9
mov eax, dword [ebp - 0x240]
imul eax, dword [ebp - 0x248]
cdq
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x6b8], edx
push dword [ebp - 0x6b8]
push dword [ebp - 0x6bc]
lea ecx, [ebp - 0x9a8]
call fcn.10001ab5
pop ecx
pop ecx
mov dword [ebp - 0x5d4], eax
mov ecx, dword [ebp - 0x5d4]
call fcn.10004aaa
push eax
call fcn.1004c653
pop ecx
lea ecx, [ebp - 0x9a8]
call fcn.10004aa0
jmp 0x1002c668
jmp 0x1002c646
mov dword [ebp - 0x250], 0
jmp 0x1002c6f7
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x12
jne 0x1002c847
mov dword [ebp - 0x258], 0x887cf2e5
mov dword [ebp - 0x258], 0
jmp 0x1002c727
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0xfffffffc
jge 0x1002c842
mov dword [ebp - 0x260], 0xc2285faa
mov dword [ebp - 0x260], 0x10
jmp 0x1002c757
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 1
jne 0x1002c83d
mov dword [ebp - 0x798], 0x2df3d37a
mov dword [ebp - 0x794], 0x2df3d37a
mov dword [ebp - 0x790], 0x2df3d37a
mov dword [ebp - 0x78c], 0x2df3d37a
lea ecx, [ebp - 0x269]
call fcn.100054df
push eax
lea eax, [ebp - 0x788]
push eax
lea eax, [ebp - 0x798]
push eax
lea ecx, [ebp - 0x8c4]
call fcn.1003367a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x77c]
call fcn.100335f0
mov dword [ebp - 4], 0x2f
push 0
lea ecx, [ebp - 0x77c]
call fcn.10004de4
mov dword [eax], 0xffffffe3
jmp 0x1002c801
push 0
lea ecx, [ebp - 0x77c]
call fcn.10004de4
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x51c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x77c]
call fcn.10004de4
cmp dword [eax], 3
jne 0x1002c829
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1002c827
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
jmp 0x1002c7dd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x77c]
call fcn.10004dc8
jmp 0x1002c74a
jmp 0x1002c71a
jmp 0x1002c6ea
mov dword [ebp - 4], 0x30
cmp dword [ebp - 0x524], 0x346f
jge 0x1002c866
push dword [ebp - 0x5dc]
call fcn.1004c653
pop ecx
jmp 0x1002c882
or dword [ebp - 4], 0xffffffff
jmp 0x1002c88c
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1002c8a8
push 0x1ad4
push 0x23a9
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
jmp 0x1002c5f5
mov eax, dword [ebp - 0x5e4]
jmp 0x1002c8b7
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret