Function at 0x100268c7
Capabilities:
Accept command line arguments
Delete file
Parse pe header
Resolve function by parsing pe exports
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c023
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x638
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x10026ae9
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10026ae9
mov dword [ebp - 0x34], 0xfffc
mov dword [ebp - 0xa4], 0xfffffff6
mov dword [ebp - 0x174], 0
jmp 0x1002692c
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x10026948
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x4ec], 0x8067e307
jmp 0x1002691f
mov dword [ebp - 0x1f0], 0x2e8f
mov dword [ebp - 0x3a4], str.ascxzk_uendh_qqxuunvj_bsttu_ipq_hxy_avwer_ggeim_mktx_ctj_iggxp
cmp dword [ebp - 0x1f0], 0x2edf
jle 0x10026a14
and dword [ebp - 0x17c], 0
jmp 0x10026982
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x5d1
jge 0x10026a0c
and dword [ebp - 0x140], 0
jmp 0x100269a4
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x21f9
jge 0x10026a07
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x140]
cdq
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], edx
push dword [ebp - 0x350]
push dword [ebp - 0x354]
lea ecx, [ebp - 0x648]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x370]
call fcn.10001ebd
push eax
call fcn.10042c54
pop ecx
lea ecx, [ebp - 0x648]
call fcn.10001eb3
jmp 0x10026997
jmp 0x10026975
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xa4], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x1f0], 0x2ce7
jge 0x10026a39
push dword [ebp - 0x3a4]
call fcn.10042c54
pop ecx
jmp 0x10026a55
or dword [ebp - 4], 0xffffffff
jmp 0x10026a5f
mov dword [ebp - 0xa4], 0
jmp 0x10026a78
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffe5
jl 0x10026ad5
mov dword [ebp - 0x34], 0
jmp 0x10026a91
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x2f
jl 0x10026aad
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x10026aab
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x10026a8a
mov dword [ebp - 0x34], 0
jmp 0x10026abd
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10026ad3
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4ec], 0x69ec4279
jmp 0x10026ab6
jmp 0x10026a6b
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.100210d1
pop ecx
pop ecx
jmp 0x1002961c
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x114], 0xbe7e5505
push 3
lea ecx, [ebp - 0x470]
call fcn.10002067
mov dword [ebp - 4], 2
mov dword [ebp - 0x19c], 0x27163995
push 3
lea ecx, [ebp - 0x320]
call fcn.10002067
mov byte [ebp - 4], 3
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x24], 0
jmp 0x10026b46
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10026b5c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x10c], 0x9827359b
jmp 0x10026b3f
mov dword [ebp - 0x24], 0
jmp 0x10026b6c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10026b88
push dword [ebp - 0x24]
lea ecx, [ebp - 0x470]
call fcn.10002106
mov dword [eax], 0x51162f63
jmp 0x10026b65
mov dword [ebp - 0x24], 0
jmp 0x10026b98
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10026bb4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x320]
call fcn.10002106
mov dword [eax], 0x6a69eed0
jmp 0x10026b91
imul eax, dword [ebp - 0xf0], 0x8462
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jne 0x10026eb7
cmp dword [ebp - 0xf0], 0xffff
jae 0x10026be9
mov dword [ebp - 0x2e8], 1
jmp 0x10026bf0
and dword [ebp - 0x2e8], 0
imul eax, dword [ebp - 0x2e8], 0xfffffffd
cmp eax, dword [ebp - 0x19c]
jle 0x10026c06
push 6
pop eax
test eax, eax
je 0x10026c1b
mov eax, 0x7652
test eax, eax
je 0x10026c1b
mov dword [ebp - 0x2f0], 1
jmp 0x10026c22
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x2f0], eax
jge 0x10026c43
mov dword [ebp - 0x2f8], 1
jmp 0x10026c4a
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x2f8], eax
jg 0x10026c64
mov dword [ebp - 0x300], 1
jmp 0x10026c6b
and dword [ebp - 0x300], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x300], eax
jl 0x10026c8c
mov dword [ebp - 0x310], 1
jmp 0x10026c93
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x310], eax
jg 0x10026cad
mov dword [ebp - 0x1a4], 1
jmp 0x10026cb4
and dword [ebp - 0x1a4], 0
push 1
lea ecx, [ebp - 0x470]
call fcn.10002106
mov dword [ebp - 0x194], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp + eax - 0x10c], ecx
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x194]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x3b4]
jge 0x10026d1f
mov dword [ebp - 0x2cc], 1
jmp 0x10026d26
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
sub eax, 0xffff
jne 0x10026d43
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0
je 0x10026d61
push 1
lea ecx, [ebp - 0x320]
call fcn.10002106
cmp dword [eax], 0
je 0x10026d61
mov dword [ebp - 0x2e0], 1
jmp 0x10026d68
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0x8de0f4c9
jae 0x10026d80
mov dword [ebp - 0x1d4], 1
jmp 0x10026d87
and dword [ebp - 0x1d4], 0
push 0
lea ecx, [ebp - 0x320]
call fcn.10002106
mov ecx, dword [ebp - 0x1d4]
cmp ecx, dword [eax]
jl 0x10026daa
mov dword [ebp - 0x27c], 1
jmp 0x10026db1
and dword [ebp - 0x27c], 0
cmp dword [ebp - 0x27c], 0xfffffffd
jbe 0x10026dc6
mov dword [ebp - 0x1dc], 1
jmp 0x10026dcd
and dword [ebp - 0x1dc], 0
push 2
pop eax
sub eax, dword [ebp - 0x1dc]
cmp eax, 0xc2f0
jl 0x10026de9
mov dword [ebp - 0x314], 1
jmp 0x10026df0
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x314], eax
jl 0x10026e0a
mov dword [ebp - 0x1e4], 1
jmp 0x10026e11
and dword [ebp - 0x1e4], 0
push 1
lea ecx, [ebp - 0x320]
call fcn.10002106
mov ecx, dword [ebp - 0x1e4]
imul ecx, dword [eax]
cmp ecx, 0xfff9
je 0x10026e3b
mov dword [ebp - 0x284], 1
jmp 0x10026e42
and dword [ebp - 0x284], 0
push 1
lea ecx, [ebp - 0x320]
call fcn.10002106
mov ecx, dword [ebp - 0x284]
cmp ecx, dword [eax]
jge 0x10026e65
mov dword [ebp - 0x1ec], 1
jmp 0x10026e6c
and dword [ebp - 0x1ec], 0
mov dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x1ec]
jne 0x10026e90
mov dword [ebp - 0x2d4], 1
jmp 0x10026e97
and dword [ebp - 0x2d4], 0
push 0
lea ecx, [ebp - 0x320]
call fcn.10002106
mov ecx, dword [ebp - 0x2d4]
add ecx, dword [eax]
jne 0x10026eb7
and dword [ebp - 0x1f4], 0
jmp 0x10026ec1
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x1f4], eax
jl 0x10026edb
mov dword [ebp - 0x28c], 1
jmp 0x10026ee2
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x3bc], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x320]
call fcn.100020ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.100020ea
cmp dword [ebp + 0x10], 0
jne 0x100284f6
mov dword [ebp - 0x100], 0xbcd8c45c
mov dword [ebp - 0x4c], 0xffffffff
push 1
lea ecx, [ebp - 0x47c]
call fcn.10002067
mov dword [ebp - 4], 4
mov dword [ebp - 0xe4], 0
jmp 0x10026f54
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x10026f73
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x47c]
call fcn.10002106
and dword [eax], 0
jmp 0x10026f47
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0xfffffffc
jmp 0x10026f8c
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe5
je 0x100270a3
mov dword [ebp - 0x11c], 0xfa8f
mov eax, 0xffff0008
test eax, eax
je 0x10026fbe
cmp dword [ebp - 0x11c], 0
je 0x10026fbe
mov dword [ebp - 0x1fc], 1
jmp 0x10026fc5
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x1fc], eax
jg 0x1002704e
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x11c]
jl 0x10026fea
mov dword [ebp - 0x2fc], 1
jmp 0x10026ff1
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0x4a0426a7
jg 0x10027009
mov dword [ebp - 0x204], 1
jmp 0x10027010
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
sub eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x4c], eax
jne 0x1002702d
mov dword [ebp - 0x294], 1
jmp 0x10027034
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x294], eax
jne 0x1002704e
mov dword [ebp - 0x20c], 1
jmp 0x10027055
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x20c], eax
jne 0x1002706c
mov dword [ebp - 0x3c4], 1
jmp 0x10027073
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x4f8], eax
push 0
lea ecx, [ebp - 0x47c]
call fcn.10002106
mov dword [eax], 0x6c7f05f4
jmp 0x10026f85
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.100020ea
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1001a196
mov dword [ebp - 0x13c], eax
push 3
lea ecx, [ebp - 0x4ac]
call fcn.10002067
mov dword [ebp - 4], 5
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x180], 0
jmp 0x100270fa
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x1002711c
push dword [ebp - 0x180]
lea ecx, [ebp - 0x4ac]
call fcn.10002106
mov dword [eax], 0x2e91a049
jmp 0x100270ed
mov dword [ebp - 0xa0], 0
jmp 0x10027135
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10027157
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x4ac]
call fcn.10002106
mov dword [eax], 0x971c1ec2
jmp 0x10027128
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1002726d
mov dword [ebp - 0x2dc], 0x7dc3
mov dword [ebp - 0x3cc], str.epflbyrls_drb_qrt_mcaxwd_sehqlsehy
cmp dword [ebp - 0x2dc], 0x7e98
jle 0x1002721b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
and dword [ebp - 0x108], 0
jmp 0x100271b7
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x4892
jge 0x1002721b
and dword [ebp - 0x148], 0
jmp 0x100271d9
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x398
jge 0x10027219
mov eax, dword [ebp - 0x108]
cdq
idiv dword [ebp - 0x148]
mov eax, edx
cdq
mov dword [ebp - 0x360], eax
mov dword [ebp - 0x35c], edx
push dword [ebp - 0x35c]
push dword [ebp - 0x360]
mov ecx, 0x10075eb8
call fcn.10001edd
jmp 0x100271cc
jmp 0x100271aa
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2dc], 0x7c1c
jge 0x10027241
mov edx, dword [ebp - 0x3cc]
mov ecx, 0x10075eb8
call fcn.10003d9f
jmp 0x1002725d
mov dword [ebp - 4], 5
jmp 0x1002726d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4ac]
call fcn.100020ea
cmp dword [0x10077010], 0
jne 0x10028382
push 2
lea ecx, [ebp - 0x32c]
call fcn.10002067
mov dword [ebp - 4], 8
mov dword [ebp - 0x214], 0x4cbb
mov dword [ebp - 0x404], str.pofvakh_vavxztf_glslrcdtn_vcgkcpl_xwzf_mhwuvwgf
cmp dword [ebp - 0x214], 0x4e46
jle 0x10027336
and dword [ebp - 0x110], 0
jmp 0x100272d3
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x2b6b
jge 0x10027336
and dword [ebp - 0x168], 0
jmp 0x100272f5
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x186c
jge 0x10027334
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x168]
shl eax, cl
cdq
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], edx
push dword [ebp - 0x368]
push dword [ebp - 0x36c]
mov ecx, 0x10075eb8
call fcn.10001edd
jmp 0x100272e8
jmp 0x100272c6
mov dword [ebp - 0x118], 0
jmp 0x1002734f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x10027371
push dword [ebp - 0x118]
lea ecx, [ebp - 0x32c]
call fcn.10002106
mov dword [eax], 0xfffffffd
jmp 0x10027342
mov byte [ebp - 4], 9
cmp dword [ebp - 0x214], 0x4a70
jge 0x10027391
mov edx, dword [ebp - 0x404]
mov ecx, 0x10075eb8
call fcn.10003d9f
jmp 0x100273ad
mov dword [ebp - 4], 8
jmp 0x100273bd
push 0
lea ecx, [ebp - 0x32c]
call fcn.10002106
and dword [eax], 0
jmp 0x100273f3
push 0
lea ecx, [ebp - 0x32c]
call fcn.10002106
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x29c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x32c]
call fcn.10002106
cmp dword [eax], 0xffffffe8
jl 0x10027449
mov dword [ebp - 0x150], 0xfffffff8
mov dword [ebp - 0x150], 0
jmp 0x10027428
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xfffffff7
je 0x10027447
push 0
lea ecx, [ebp - 0x32c]
call fcn.10002106
cmp dword [eax], 0
je 0x10027445
jmp 0x10027447
jmp 0x1002741b
jmp 0x100273cf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x32c]
call fcn.100020ea
mov dword [ebp - 0x3d8], 0x7c2b
lea eax, [ebp - 0x3d8]
push eax
call fcn.1002107f
pop ecx
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x21c], 0x1eb4
mov dword [ebp - 0x3d0], str.zhchk_rfrbln_iltksbbds_qfcb_qfmm
cmp dword [ebp - 0x21c], 0x2087
jle 0x1002751e
and dword [ebp - 0x120], 0
jmp 0x100274af
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0xa47
jge 0x10027511
and dword [ebp - 0x178], 0
jmp 0x100274d1
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x5cd7
jge 0x1002750f
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x178]
cdq
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x374], edx
push dword [ebp - 0x374]
push dword [ebp - 0x378]
mov ecx, 0x10075eb8
call fcn.10001edd
jmp 0x100274c4
jmp 0x100274a2
push 0x213a
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x21c], 0x1c52
jge 0x10027541
mov edx, dword [ebp - 0x3d0]
mov ecx, 0x10075eb8
call fcn.10003d9f
jmp 0x1002755d
or dword [ebp - 4], 0xffffffff
jmp 0x10027567
mov dword [ebp - 0x4c0], 0xf94964a5
mov dword [ebp - 0x500], 0xc3099cfe
mov dword [ebp - 0x4c8], 1
mov dword [ebp - 0x348], 0xffffffff
mov dword [ebp - 0x508], 0x811f07b4
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x454], 1
mov dword [ebp - 0x450], 1
mov dword [ebp - 0x44c], 1
lea ecx, [ebp - 0x18d]
call fcn.10002115
push eax
lea eax, [ebp - 0x448]
push eax
lea eax, [ebp - 0x458]
push eax
lea ecx, [ebp - 0x5c4]
call fcn.10002118
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x568]
call fcn.100020c4
mov dword [ebp - 0x4d8], 1
mov dword [ebp - 0x1a8], 0x15466bc6
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
neg eax
mov dword [ebp - 0x348], eax
lea ecx, [ebp - 0x568]
call fcn.100020ea
mov dword [ebp - 0x2c], 0x462d5e48
mov dword [ebp - 0x510], 0x33e7a329
mov dword [ebp - 0x2c], 0
jmp 0x10027651
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x15
jne 0x10027661
cmp dword [ebp - 0x2c], 0
je 0x1002765f
jmp 0x10027661
jmp 0x1002764a
mov dword [ebp - 0x2c], 0xfffffffe
jmp 0x10027671
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x16
je 0x10027a99
push 2
lea ecx, [ebp - 0x1b8]
call fcn.10002067
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x20], 0x22e6e7f7
mov dword [ebp - 0x8c], 0x9ab8a87e
mov dword [ebp - 0x518], 9
mov dword [ebp - 0x534], 0x32f1efa
mov dword [ebp - 0x44], 0
jmp 0x100276c4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x100276e0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
mov dword [eax], 0x5b40194
jmp 0x100276bd
mov dword [ebp - 0x44], 0
jmp 0x100276f0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10027706
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x618], 0xc23988f1
jmp 0x100276e9
mov dword [ebp - 0x20], 1
jmp 0x10027716
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10027a85
mov dword [ebp - 0x244], 5
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
mov eax, dword [eax]
mov dword [esi], eax
cmp dword [ebp - 0x20], 0
je 0x100278fb
mov dword [ebp - 0x358], 1
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x22c], 1
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10002106
cmp dword [eax], 0
je 0x10027798
cmp dword [ebp - 0x20], 0
je 0x10027798
mov dword [ebp - 0x34c], 1
jmp 0x1002779f
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x2c], 0xf5e4
jle 0x100277b4
mov dword [ebp - 0x3f4], 1
jmp 0x100277bb
and dword [ebp - 0x3f4], 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10002106
cmp dword [ebp - 0x20], 0
je 0x100277e3
cmp dword [ebp - 0x358], 0
je 0x100277e3
mov dword [ebp - 0x308], 1
jmp 0x100277ea
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x224], eax
mov esi, dword [ebp - 0x224]
imul esi, dword [ebp - 0x2c]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
cmp esi, dword [eax]
jge 0x10027821
mov dword [ebp - 0x2a4], 1
jmp 0x10027828
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
add eax, 0x9c2b
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x2c]
test eax, eax
jne 0x10027856
mov dword [ebp - 0x2e4], 1
jmp 0x1002785d
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2e4], eax
jl 0x10027874
mov dword [ebp - 0x234], 1
jmp 0x1002787b
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x234], 0xffff246b
jne 0x10027893
mov dword [ebp - 0x2ac], 1
jmp 0x1002789a
and dword [ebp - 0x2ac], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
mov eax, dword [eax]
sub eax, 0x11a5679c
cmp eax, dword [ebp - 0x2ac]
jle 0x100278c3
mov dword [ebp - 0x23c], 1
jmp 0x100278ca
and dword [ebp - 0x23c], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b8]
call fcn.10002106
mov esi, dword [ebp - 0x23c]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10002106
sub esi, dword [eax]
mov dword [ebp - 0x8c], esi
jmp 0x10027a80
mov dword [ebp - 0x304], 0x3c80
mov dword [ebp - 0x3fc], str.pfok_ivcgnf_jvhmssfm_wwpm_ruujpwpwv_lba_xerhcvpx_ywmqk_nvnesraz_dhuiqsr_aghbmt_eca_kiwugynj_qwpjld
cmp dword [ebp - 0x304], 0x3e92
jle 0x100279c9
and dword [ebp - 0x130], 0
jmp 0x10027935
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x2a5a
jge 0x100279c9
and dword [ebp - 0x128], 0
jmp 0x1002795b
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x271e
jge 0x100279c4
and dword [ebp - 0x158], 0
jmp 0x1002797d
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x180d
jge 0x100279c2
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x158]
sar eax, cl
xor eax, dword [ebp - 0x130]
cdq
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x380], edx
push dword [ebp - 0x380]
push dword [ebp - 0x384]
mov ecx, 0x10075eb8
call fcn.10001edd
jmp 0x10027970
jmp 0x1002794e
jmp 0x10027928
mov dword [ebp - 0x4fc], 1
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x304], 0x391e
jge 0x100279f3
mov edx, dword [ebp - 0x3fc]
mov ecx, 0x10075eb8
call fcn.10003d9f
jmp 0x10027a0f
mov dword [ebp - 4], 0xd
jmp 0x10027a1f
mov dword [ebp - 0x524], 9
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x8c], 0
jmp 0x10027a4c
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffe9
jge 0x10027a80
mov dword [ebp - 0x544], 0x5af8
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
mov byte [ebp - 0x66], 0
movzx eax, byte [ebp - 0x66]
test eax, eax
je 0x10027a7e
call dword [sym.imp.USER32.dll_GetMessageTime]
jmp 0x10027a3f
jmp 0x1002770f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.100020ea
jmp 0x1002766a
mov byte [ebp - 0xc4], 9
mov byte [ebp - 0xc3], 0x25
mov byte [ebp - 0xc2], 6
mov byte [ebp - 0xc1], 0x1d
mov byte [ebp - 0xc0], 3
mov byte [ebp - 0xbf], 0x25
mov byte [ebp - 0xbe], 4
mov byte [ebp - 0xbd], 0x33
mov byte [ebp - 0xbc], 0xb
mov byte [ebp - 0xbb], 0x1d
mov byte [ebp - 0xba], 1
mov byte [ebp - 0xb9], 0x1d
mov byte [ebp - 0xb8], 0
mov byte [ebp - 0xb7], 0x22
mov byte [ebp - 0xb6], 2
mov byte [ebp - 0xb5], 0x33
mov byte [ebp - 0xb4], 0xc
mov byte [ebp - 0xb3], 0x23
mov byte [ebp - 0xb2], 5
mov byte [ebp - 0xb1], 0x25
mov byte [ebp - 0xb0], 2
mov byte [ebp - 0xaf], 6
mov byte [ebp - 0xae], 0x3c
mov byte [ebp - 0xad], 7
mov byte [ebp - 0xac], 0x1b
mov byte [ebp - 0xab], 0xa
mov byte [ebp - 0xaa], 0x2c
mov byte [ebp - 0xa9], 8
mov byte [ebp - 0xa8], 0x2a
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xc4]
and eax, 0x4b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xc4]
or ecx, 0x4b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc4]
mov byte [ebp + eax - 0x33c], cl
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x98], 0
jmp 0x10027bb5
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1d
jae 0x10027c93
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xc4]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10027bff
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xc4]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xc4]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x10027bad
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0xc6]
movsx eax, byte [ebp + eax - 0x33c]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0xc3]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0xc6]
movsx eax, byte [ebp + eax - 0x33c]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0xc3]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x98]
movzx eax, byte [ebp + eax - 0xc6]
movsx eax, byte [ebp + eax - 0x33c]
mov esi, dword [ebp - 0x1c]
movzx ebx, byte [ebp + esi - 0xc3]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0xc4]
mov byte [ebp + eax - 0x33c], bl
and dword [ebp - 0x98], 0
jmp 0x10027bad
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x33c], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10002067
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x24c], 0x455f992d
mov dword [ebp - 0x170], 0
jmp 0x10027cdf
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x10027d01
push dword [ebp - 0x170]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov dword [eax], 1
jmp 0x10027cd2
mov dword [ebp - 0x30], 0
jmp 0x10027d11
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x10027d58
mov dword [ebp - 0x364], 0xb023ed15
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
cmp dword [eax], 0xfff8
je 0x10027d43
mov dword [ebp - 0x2b4], 1
jmp 0x10027d4a
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x364], eax
jmp 0x10027d0a
mov dword [ebp - 0x30], 0
jmp 0x10027d68
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe6
je 0x10027fd9
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x2bc], 0xb5b0d69b
cmp dword [ebp - 0x18], 0
je 0x10027fa8
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x88], 0x4015fb26
mov dword [ebp - 0x18], 0
jmp 0x10027db1
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10027f92
mov dword [ebp - 0x37c], 8
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
cmp dword [ebp - 0x18], 0
jne 0x10027f02
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x30]
jne 0x10027e12
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
cmp dword [eax], 0
jne 0x10027e12
and dword [ebp - 0x3f8], 0
jmp 0x10027e1c
mov dword [ebp - 0x3f8], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x52c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x88]
jl 0x10027e5d
mov dword [ebp - 0x340], 1
jmp 0x10027e64
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x18], 0xbe46552d
je 0x10027e85
mov dword [ebp - 0x254], 1
jmp 0x10027e8c
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0x42e5f0e7
jne 0x10027ea4
mov dword [ebp - 0x3e0], 1
jmp 0x10027eab
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x88]
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x761b
jg 0x10027ed2
mov dword [ebp - 0x25c], 1
jmp 0x10027ed9
and dword [ebp - 0x25c], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [eax]
jne 0x10027ef9
cmp dword [ebp - 0x88], 0
jne 0x10027f02
and dword [ebp - 0x30c], 0
jmp 0x10027f0c
mov dword [ebp - 0x30c], 1
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov ecx, dword [ebp - 0x30c]
cmp ecx, dword [eax]
jle 0x10027f2f
mov dword [ebp - 0x264], 1
jmp 0x10027f36
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x264], eax
jg 0x10027f50
mov dword [ebp - 0x2c4], 1
jmp 0x10027f57
and dword [ebp - 0x2c4], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov ecx, dword [ebp - 0x2c4]
cmp ecx, dword [eax]
jle 0x10027f7a
mov dword [ebp - 0x26c], 1
jmp 0x10027f81
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x37c], eax
jmp 0x10027daa
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10027fa6
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
jmp 0x10027fd4
mov dword [ebp - 0x18], 0
jmp 0x10027fb8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10027fd4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c4]
call fcn.10002106
mov dword [eax], 0xc444c9ca
jmp 0x10027fb1
jmp 0x10027d61
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.100020ea
lea eax, [ebp - 0x33c]
push eax
lea ecx, [ebp - 0x5dc]
call fcn.1002b0f8
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x388], eax
mov dword [ebp - 4], 0x11
mov edx, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x388]
call fcn.1001a196
mov dword [0x10077010], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5dc]
call fcn.10015fe7
and dword [ebp - 0x138], 0
jmp 0x1002804e
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xe
jae 0x10028067
mov eax, dword [ebp - 0x138]
mov byte [ebp + eax - 0x33c], 0
jmp 0x10028041
mov dword [ebp - 0x274], 0x25e
mov dword [ebp - 0x394], str.urwvglsu_klh_siytgqos_troe_kum_yjrynt_lvaeb
cmp dword [ebp - 0x274], 0x3cb
jle 0x10028131
and dword [ebp - 0x160], 0
jmp 0x100280a1
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x5c2c
jge 0x10028131
and dword [ebp - 0xf8], 0
jmp 0x100280c7
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0x2a4f
jge 0x1002812c
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0xf8]
shl eax, cl
cdq
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], edx
push dword [ebp - 0x38c]
push dword [ebp - 0x390]
lea ecx, [ebp - 0x60c]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x3e8], eax
mov ecx, dword [ebp - 0x3e8]
call fcn.10001ebd
push eax
call fcn.10042c54
pop ecx
lea ecx, [ebp - 0x60c]
call fcn.10001eb3
jmp 0x100280ba
jmp 0x10028094
mov byte [ebp - 0xe0], 0xd
mov byte [ebp - 0xdf], 0xb7
mov byte [ebp - 0xde], 1
mov byte [ebp - 0xdd], 0x25
mov byte [ebp - 0xdc], 3
mov byte [ebp - 0xdb], 0x13
mov byte [ebp - 0xda], 0xa
mov byte [ebp - 0xd9], 4
mov byte [ebp - 0xd8], 9
mov byte [ebp - 0xd7], 6
mov byte [ebp - 0xd6], 0xb
mov byte [ebp - 0xd5], 0x10
mov byte [ebp - 0xd4], 8
mov byte [ebp - 0xd3], 0x1c
mov byte [ebp - 0xd2], 0xc
mov byte [ebp - 0xd1], 0x1c
mov byte [ebp - 0xd0], 5
mov byte [ebp - 0xcf], 0x16
mov byte [ebp - 0xce], 0
mov byte [ebp - 0xcd], 0x26
mov byte [ebp - 0xcc], 4
mov byte [ebp - 0xcb], 0x37
mov byte [ebp - 0xca], 2
mov byte [ebp - 0xc9], 0x11
mov byte [ebp - 0xc8], 6
mov byte [ebp - 0xc7], 0x35
mov byte [ebp - 0xc6], 7
mov byte [ebp - 0xc5], 0x22
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xe0]
and eax, 0xe0
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xe0]
or ecx, 0xe0
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xe0]
mov byte [ebp + eax - 0x42c], cl
mov dword [ebp - 0x48], 2
and dword [ebp - 0x2f4], 0
jmp 0x1002824b
mov eax, dword [ebp - 0x48]
inc eax
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x1c
jae 0x100282b3
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x2f4]
movzx eax, byte [ebp + eax - 0xe2]
movsx eax, byte [ebp + eax - 0x42c]
mov ecx, dword [ebp - 0x48]
movzx ecx, byte [ebp + ecx - 0xdf]
and ecx, eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x2f4]
movzx eax, byte [ebp + eax - 0xe2]
movsx eax, byte [ebp + eax - 0x42c]
mov edx, dword [ebp - 0x48]
movzx edx, byte [ebp + edx - 0xdf]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x48]
movzx eax, byte [ebp + eax - 0xe0]
mov byte [ebp + eax - 0x42c], dl
jmp 0x10028243
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x42c], 0
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x274], 2
jge 0x100282dd
push dword [ebp - 0x394]
call fcn.10042c54
pop ecx
jmp 0x100282f9
or dword [ebp - 4], 0xffffffff
jmp 0x10028303
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0x630]
call fcn.1002b0f8
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 4], 0x14
mov edx, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x3a0]
call fcn.1001a196
mov dword [0x10077660], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x630]
call fcn.10015fe7
and dword [ebp - 0xfc], 0
jmp 0x10028369
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xf
jae 0x10028382
mov eax, dword [ebp - 0xfc]
mov byte [ebp + eax - 0x42c], 0
jmp 0x1002835c
mov dword [ebp - 0x50], 0xdb3ae355
mov dword [ebp - 0x104], 0
jmp 0x100283a2
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x100283be
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x574], 1
jmp 0x10028395
mov dword [ebp - 0x50], 0
jmp 0x100283ce
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffffa
jl 0x100284c4
mov dword [ebp - 0x3f0], 1
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x100283f9
push 0x143f
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [ebp - 0x50], 0
je 0x100284a5
xor eax, eax
jne 0x1002843a
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x3f0]
jg 0x1002841e
mov dword [ebp - 0x1d0], 1
jmp 0x10028425
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0xfff9
ja 0x1002843a
and dword [ebp - 0x1d8], 0
jmp 0x10028444
mov dword [ebp - 0x1d8], 1
cmp dword [ebp - 0x1d8], 0xfffffffc
jge 0x10028459
mov dword [ebp - 0x1e0], 1
jmp 0x10028460
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x1e0]
test eax, eax
jne 0x1002847d
cmp dword [ebp - 0x50], 0
jne 0x1002847d
and dword [ebp - 0x1e8], 0
jmp 0x10028487
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1e8]
sub eax, 0x583dc0e3
cmp eax, 0x631615e8
jne 0x100284a5
mov dword [ebp - 0x1c8], 1
jmp 0x100284ac
and dword [ebp - 0x1c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp + eax - 0x574], ecx
jmp 0x100283c7
mov eax, dword [0x10077010]
cmp eax, dword [ebp - 0x13c]
je 0x100284de
mov eax, dword [0x10077660]
cmp eax, dword [ebp - 0x13c]
jne 0x100284f6
mov ecx, dword [ebp + 0xc]
call fcn.10001ebd
push eax
push dword [ebp + 8]
call fcn.100210d1
pop ecx
pop ecx
jmp 0x1002961c
push 4
lea ecx, [ebp - 0x444]
call fcn.10002067
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x7c], 0x1febaeef
mov dword [ebp - 0x3a8], 0xffffffff
push 2
lea ecx, [ebp - 0x438]
call fcn.10002067
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x53c], 0xfffffffd
push 2
lea ecx, [ebp - 0x4e4]
call fcn.10002067
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x51c], 0x5344
mov dword [ebp - 0x4f0], 0xc9c8a038
push 3
lea ecx, [ebp - 0x494]
call fcn.10002067
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x14], 0
jmp 0x10028586
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100285a2
push dword [ebp - 0x14]
lea ecx, [ebp - 0x444]
call fcn.10002106
mov dword [eax], 0x7571
jmp 0x1002857f
mov dword [ebp - 0x14], 0
jmp 0x100285b2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100285ce
push dword [ebp - 0x14]
lea ecx, [ebp - 0x438]
call fcn.10002106
mov dword [eax], 0x5231fbf6
jmp 0x100285ab
mov dword [ebp - 0x14], 0
jmp 0x100285de
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100285fa
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4e4]
call fcn.10002106
mov dword [eax], 0xfffffffd
jmp 0x100285d7
mov dword [ebp - 0x14], 0
jmp 0x1002860a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10028626
push dword [ebp - 0x14]
lea ecx, [ebp - 0x494]
call fcn.10002106
mov dword [eax], 3
jmp 0x10028603
mov dword [ebp - 0x7c], 3
jmp 0x10028636
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1002890e
mov dword [ebp - 0x9c], 0x1e2c0d37
mov dword [ebp - 0x41c], 0xfffffff9
push 2
lea ecx, [ebp - 0x488]
call fcn.10002067
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x3b0], 0x2500428
mov dword [ebp - 0x4b4], 1
mov dword [ebp - 0x4bc], 0x67b9c5c9
mov dword [ebp - 0x4b0], 0x843c6bcf
mov dword [ebp - 0x520], 0xfffffffa
mov dword [ebp - 0x528], 0x6d23205e
push 1
lea ecx, [ebp - 0x4d4]
call fcn.10002067
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x40], 0
jmp 0x100286cc
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x100286e8
push dword [ebp - 0x40]
lea ecx, [ebp - 0x488]
call fcn.10002106
mov dword [eax], 0x6c89
jmp 0x100286c5
mov dword [ebp - 0x40], 0
jmp 0x100286f8
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10028714
push dword [ebp - 0x40]
lea ecx, [ebp - 0x4d4]
call fcn.10002106
mov dword [eax], 1
jmp 0x100286f1
mov dword [ebp - 0x9c], 0
jmp 0x1002872d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jg 0x100288c7
push 1
lea ecx, [ebp - 0x464]
call fcn.10002067
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0xe8], 0
jmp 0x10028764
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x10028786
push dword [ebp - 0xe8]
lea ecx, [ebp - 0x464]
call fcn.10002106
mov dword [eax], 0x9ca3eaa3
jmp 0x10028757
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x444]
call fcn.10002106
cmp dword [eax], 0
ja 0x100287a5
mov dword [ebp - 0x1f8], 1
jmp 0x100287ac
and dword [ebp - 0x1f8], 0
imul eax, dword [ebp - 0x1f8], 0xffff
test eax, eax
jne 0x100287d7
xor eax, eax
inc eax
je 0x100287c6
cmp dword [ebp - 0x3a8], 0
or eax, 0xffffffff
cmp eax, 9
jb 0x100287d7
and dword [ebp - 0x200], 0
jmp 0x100287e1
mov dword [ebp - 0x200], 1
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x200], eax
jg 0x100287fb
mov dword [ebp - 0x208], 1
jmp 0x10028802
and dword [ebp - 0x208], 0
push 1
lea ecx, [ebp - 0x438]
call fcn.10002106
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x530], eax
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x444]
call fcn.10002106
push 1
lea ecx, [ebp - 0x488]
call fcn.10002106
mov eax, dword [eax]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x198], eax
push 0
lea ecx, [ebp - 0x438]
call fcn.10002106
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x464]
call fcn.10002106
mov ecx, dword [ebp - 0x198]
mov dword [eax], ecx
mov dword [ebp - 0x218], 1
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0x198], eax
jg 0x100288a0
mov dword [ebp - 0x220], 1
jmp 0x100288a7
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x3b0], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x464]
call fcn.100020ea
jmp 0x10028720
push 1
lea ecx, [ebp - 0x494]
call fcn.10002106
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x228]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x228]
mov dword [ecx], eax
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4d4]
call fcn.100020ea
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x488]
call fcn.100020ea
jmp 0x1002862f
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x494]
call fcn.100020ea
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4e4]
call fcn.100020ea
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x438]
call fcn.100020ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x444]
call fcn.100020ea
mov eax, dword [ebp + 8]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0xec], 0
jmp 0x1002896c
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x10028988
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0xf4], 0xffffffff
jmp 0x1002895f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf4], 0
jmp 0x100289b6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf4], 9
jne 0x10028b24
push 3
lea ecx, [ebp - 0x4a0]
call fcn.10002067
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x418], 0x5043c4ab
mov dword [ebp - 0x414], 0x5043c4ab
mov dword [ebp - 0x410], 0x5043c4ab
mov dword [ebp - 0x40c], 0x5043c4ab
mov dword [ebp - 0x124], 0
jmp 0x10028a1f
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 3
jge 0x10028a41
push dword [ebp - 0x124]
lea ecx, [ebp - 0x4a0]
call fcn.10002106
mov dword [eax], 0xa3399244
jmp 0x10028a12
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x418], 2
jmp 0x10028a6c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x418]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x418], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x418], 0
jl 0x10028b10
mov dword [ebp - 0x90], 9
mov dword [ebp - 0x12c], 0
jmp 0x10028aa2
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x10028abe
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x3d4], 0xfffffffe
jmp 0x10028a95
mov dword [ebp - 0x90], 0
jmp 0x10028ad7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x10028b0b
push dword [ebp - 0x90]
lea ecx, [ebp - 0x4a0]
call fcn.10002106
cmp dword [eax], 0
je 0x10028af8
jmp 0x10028b0b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3d4], 0x2daab72b
jmp 0x10028aca
jmp 0x10028a53
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.100020ea
jmp 0x1002899b
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10028b3f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
cmp dword [ebp - 0x134], 0
je 0x10029299
mov eax, dword [ebp - 0x134]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10029299
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x134]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x94], ecx
mov eax, dword [ebp - 0x94]
cmp dword [eax], 0x4550
jne 0x10029299
mov eax, dword [ebp - 0x94]
cmp dword [eax + 0x74], 0
jbe 0x10029299
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
cmp dword [ecx + eax + 0x78], 0
je 0x10029299
mov eax, dword [ebp + 8]
mov dword [ebp - 0x78], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x54], edx
mov eax, 0xffff
mov word [ebp - 0x3c], ax
or dword [ebp - 0x84], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10028bf8
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10028bf3
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x3c], ax
jmp 0x10028da0
mov eax, dword [0x100776b0]
and eax, 1
jne 0x10028c2f
mov eax, dword [0x100776b0]
or eax, 1
mov dword [0x100776b0], eax
mov dword [ebp - 4], 0x1d
mov ecx, 0x10077614
call fcn.10016167
push 0x1005cc07
call fcn.10042c2a
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10077008]
test eax, eax
je 0x10028c9b
mov ecx, 0x10077614
call fcn.1002b184
movzx eax, al
test eax, eax
jne 0x10028c9b
lea eax, [ebp - 0x13c]
push eax
lea eax, [ebp - 0x230]
push eax
mov ecx, 0x10077614
call fcn.1001613f
lea eax, [ebp - 0x538]
push eax
mov ecx, 0x10077614
call fcn.10016131
push eax
lea ecx, [ebp - 0x230]
call fcn.10016154
movzx eax, al
test eax, eax
je 0x10028c9b
lea ecx, [ebp - 0x230]
call fcn.1002b18d
mov eax, dword [eax + 4]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffff
jne 0x10028da0
mov ecx, 0x10077614
call fcn.1002b1d1
mov ecx, dword [ebp - 0x54]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x10077614
call fcn.1002b1d5
and dword [ebp - 0x74], 0
jmp 0x10028cd0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x74]
cmp ecx, dword [eax + 0x18]
jae 0x10028da0
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x74]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
je 0x10028d9b
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x5a4]
call fcn.1002b0f8
mov dword [ebp - 4], 0x1e
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x5a4]
call fcn.1001a196
mov dword [ebp - 0x240], eax
movzx eax, byte [0x10077008]
test eax, eax
je 0x10028d4f
mov ecx, 0x10077614
call fcn.1002b184
movzx eax, al
test eax, eax
jne 0x10028d6c
lea eax, [ebp - 0x240]
push eax
mov ecx, 0x10077614
call fcn.1002b193
mov ecx, dword [ebp - 0x74]
mov dword [eax], ecx
mov byte [0x10077008], 1
cmp dword [ebp - 0x84], 0xffffffff
jne 0x10028d8c
mov eax, dword [ebp - 0x240]
cmp eax, dword [ebp - 0x13c]
jne 0x10028d8c
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x84], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a4]
call fcn.10015fe7
jmp 0x10028cc9
cmp dword [ebp + 0x10], 0
jne 0x10028dc6
cmp dword [ebp - 0x84], 0xffffffff
je 0x10028dc6
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x84]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x3c], ax
movzx eax, word [ebp - 0x3c]
cmp eax, 0xffff
je 0x10029299
movzx eax, word [ebp - 0x3c]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x78]
add ecx, dword [eax]
mov dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x54]
jbe 0x10029291
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x94]
mov edx, dword [ebp - 0x54]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x58], edx
jae 0x10029291
mov eax, dword [0x100776b0]
and eax, 2
jne 0x10028e53
mov eax, dword [0x100776b0]
or eax, 2
mov dword [0x100776b0], eax
mov dword [ebp - 4], 0x1f
push 0x695c
call fcn.1000dc1a
pop ecx
mov byte [0x10077658], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x64], 1
mov byte [ebp - 0x63], 0xc4
mov byte [ebp - 0x62], 2
mov byte [ebp - 0x61], 0
mov byte [ebp - 0x60], 3
mov byte [ebp - 0x5f], 0x99
mov byte [ebp - 0x5e], 0x9d
mov byte [ebp - 0x5d], 0x66
mov byte [ebp - 0x5c], 0
mov byte [ebp - 0x5b], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x64]
and eax, 0xa8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x64]
or ecx, 0xa8
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x64]
mov byte [ebp + eax - 0x80], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x144], 0
jmp 0x10028ec5
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xa
jae 0x10028f5a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x64]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10028f06
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x64]
inc eax
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x64]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10028ebd
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x144]
movzx eax, byte [ebp + eax - 0x66]
movsx eax, byte [ebp + eax - 0x80]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x63]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x144]
movzx eax, byte [ebp + eax - 0x66]
movsx eax, byte [ebp + eax - 0x80]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x63]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x64]
mov byte [ebp + eax - 0x80], dl
and dword [ebp - 0x144], 0
jmp 0x10028ebd
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x80], 0
mov eax, dword [0x100776b0]
and eax, 4
jne 0x10028fa0
mov eax, dword [0x100776b0]
or eax, 4
mov dword [0x100776b0], eax
mov dword [ebp - 4], 0x20
lea eax, [ebp - 0x80]
push eax
mov ecx, 0x100776b8
call fcn.1002b0f8
push 0x1005cbf8
call fcn.10042c2a
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x14c], 0
jmp 0x10028fb6
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 4
jae 0x10028fcc
mov eax, dword [ebp - 0x14c]
mov byte [ebp + eax - 0x80], 0
jmp 0x10028fa9
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
movsx eax, byte [0x10077658]
mov ecx, dword [ebp - 0x6c]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10028fec
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
jmp 0x10028fd2
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
push dword [ebp - 0x6c]
push dword [ebp - 0x58]
lea ecx, [ebp - 0x55c]
call fcn.1002b4ca
mov dword [ebp - 4], 0x21
push 0x100776b8
lea ecx, [ebp - 0x55c]
call fcn.1002b127
lea eax, [ebp - 0x540]
push eax
lea ecx, [ebp - 0x55c]
call fcn.10016536
push dword [eax]
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x55c]
call fcn.10016522
push dword [eax]
lea ecx, [ebp - 0x5bc]
call fcn.1002b4f3
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x5bc]
push eax
call fcn.1001aeb1
pop ecx
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
je 0x10029240
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x58c]
call fcn.1002b0f8
mov byte [ebp - 4], 0x23
lea edx, [ebp - 0x3c0]
lea ecx, [ebp - 0x58c]
call fcn.1001a271
movzx eax, al
test eax, eax
je 0x10029213
mov dword [ebp - 0x248], 0x519f
mov dword [ebp - 0x3e4], str.vifpllvmi_gbepigo_nwcocs_qdamubmnw_ujyiitdn_qtgpphzku_yln_qgnhunz
cmp dword [ebp - 0x248], 0x53f8
jle 0x100291ae
and dword [ebp - 0x164], 0
jmp 0x100290da
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x11cf
jge 0x1002919b
and dword [ebp - 0x154], 0
jmp 0x10029100
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x3fe2
jge 0x10029196
and dword [ebp - 0x15c], 0
jmp 0x10029126
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x1a16
jge 0x10029191
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x15c]
sar eax, cl
xor eax, dword [ebp - 0x164]
cdq
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], edx
push dword [ebp - 0x398]
push dword [ebp - 0x39c]
lea ecx, [ebp - 0x5f4]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x3dc], eax
mov ecx, dword [ebp - 0x3dc]
call fcn.10001ebd
push eax
call fcn.10042c54
pop ecx
lea ecx, [ebp - 0x5f4]
call fcn.10001eb3
jmp 0x10029119
jmp 0x100290f3
jmp 0x100290cd
push 0x7c2b
push 0x4b44
call fcn.1002a81f
pop ecx
pop ecx
call eax
push 0
push dword [ebp - 0x3c0]
push 0
push dword [ebp - 0x1ac]
call fcn.100268c7
add esp, 0x10
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x24
cmp dword [ebp - 0x248], 0x4eb5
jge 0x100291e5
push dword [ebp - 0x3e4]
call fcn.10042c54
pop ecx
jmp 0x10029201
mov dword [ebp - 4], 0x23
jmp 0x10029211
jmp 0x1002922f
push 1
push 0
lea eax, [ebp - 0x58c]
push eax
push dword [ebp - 0x1ac]
call fcn.100268c7
add esp, 0x10
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x58c]
call fcn.10015fe7
jmp 0x10029273
cmp dword [ebp + 0x10], 0
jne 0x10029256
mov ecx, dword [ebp + 0xc]
call fcn.10001ebd
mov dword [ebp - 0x250], eax
jmp 0x10029260
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x250], eax
push dword [ebp - 0x250]
push dword [ebp + 8]
call fcn.100210d1
pop ecx
pop ecx
mov dword [ebp - 0x58], eax
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x5bc]
call fcn.10002052
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55c]
call fcn.10015fe7
mov eax, dword [ebp - 0x58]
jmp 0x1002961c
mov dword [ebp - 0x1a0], 0
push 1
lea ecx, [ebp - 0x18c]
call fcn.10002067
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x2a0], 8
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2d0], 0xffff
mov dword [ebp - 0x344], 0x576dbd8d
mov dword [ebp - 0x16c], 0
jmp 0x100292ff
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x10029321
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov dword [eax], 0xfffffffd
jmp 0x100292f2
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp dword [ebp - 0x38], 0
jne 0x100293cd
mov esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp esi, dword [eax]
jg 0x10029358
mov dword [ebp - 0x258], 1
jmp 0x1002935f
and dword [ebp - 0x258], 0
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov esi, dword [ebp - 0x258]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp esi, dword [eax]
jle 0x10029391
mov dword [ebp - 0x260], 1
jmp 0x10029398
and dword [ebp - 0x260], 0
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov ecx, dword [ebp - 0x260]
cmp ecx, dword [eax]
jl 0x100293bb
mov dword [ebp - 0x268], 1
jmp 0x100293c2
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x268]
jg 0x100293eb
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp dword [eax], 0
je 0x100293eb
mov dword [ebp - 0x270], 1
jmp 0x100293f2
and dword [ebp - 0x270], 0
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov ecx, dword [ebp - 0x270]
cmp ecx, dword [eax]
jle 0x10029415
mov dword [ebp - 0x278], 1
jmp 0x1002941c
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 0x8db3
je 0x10029434
mov dword [ebp - 0x280], 1
jmp 0x1002943b
and dword [ebp - 0x280], 0
mov esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov ecx, dword [ebp - 0x280]
sub ecx, dword [eax]
inc ecx
inc ecx
cmp ecx, esi
jl 0x10029474
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp dword [eax], 0
jne 0x10029474
and dword [ebp - 0x288], 0
jmp 0x1002947e
mov dword [ebp - 0x288], 1
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
mov ecx, dword [ebp - 0x288]
mov dword [eax], ecx
mov esi, dword [ebp - 0x38]
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp dword [eax], esi
jge 0x100294b3
mov dword [ebp - 0x3c8], 1
jmp 0x100294ba
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x38], 0xd790
jge 0x100294cf
mov dword [ebp - 0x290], 1
jmp 0x100294d6
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x290], eax
jg 0x100294ed
mov dword [ebp - 0x298], 1
jmp 0x100294f4
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x38]
jne 0x10029523
mov dword [ebp - 0x2b0], 1
jmp 0x1002952a
and dword [ebp - 0x2b0], 0
cmp dword [ebp - 0x2b0], 0xa9a18045
jb 0x10029542
mov dword [ebp - 0x2b8], 1
jmp 0x10029549
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x2b8], eax
jne 0x10029581
cmp dword [ebp - 0x38], 0
je 0x10029581
mov eax, 0x4153
test eax, eax
je 0x10029581
push 0
lea ecx, [ebp - 0x18c]
call fcn.10002106
cmp dword [eax], 0
je 0x10029581
mov dword [ebp - 0x2c0], 1
jmp 0x10029588
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x51a
jl 0x100295a0
mov dword [ebp - 0x2c8], 1
jmp 0x100295a7
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x2c8], eax
jg 0x100295c1
mov dword [ebp - 0x3ec], 1
jmp 0x100295c8
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xea418246
jbe 0x100295f8
mov dword [ebp - 0x2d8], 1
jmp 0x100295ff
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x344], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18c]
call fcn.100020ea
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret