Function at 0x1002db54
Capabilities:
Encode data using base64
Encrypt data using speck
Get common file path

Disassembly:
mov eax, 0x1005f2d8
call fcn.1005dcd4
sub esp, 0x638
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
push 0x6886
push ecx
mov dword [ebp - 0x18], ebx
mov ecx, 0x7d06
mov dword [ebp - 0x208], ebx
push ebx
call fcn.1002b607
add esp, 0xc
mov dword [ebp - 0x18], ebx
jmp 0x1002dbbd
push ecx
push 0x5461
push 0x3ae9
lea eax, [ebp - 0x208]
mov edx, 0x5b0b
push eax
push 1
push ecx
push 0x511d
push 0x3906
call fcn.10028fbd
add esp, 0x20
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1a
jl 0x1002db8e
mov dword [ebp - 0x5c], 1
or edi, 0xffffffff
mov dword [ebp - 0x1c], 0x41449c9f
mov dword [ebp - 0x40], 4
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x5c], 0x14
jmp 0x1002dc3b
lea eax, [ebp - 0xa5]
mov byte [ebp - 0xa5], bl
push eax
push 0x44dc
push 0x25f6
push 0x5953
push 0x1d80
push 0x556d
push 0x5c2
push 0x5a93
push 1
xor dl, dl
mov cl, 1
call fcn.1002a8cd
add esp, 0x24
mov edx, 0x105a
push 0xb2c
push 1
call fcn.1002910f
dec dword [ebp - 0x5c]
pop ecx
pop ecx
cmp dword [ebp - 0x5c], 0xfffffffa
jne 0x1002dbe7
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], 5
jae 0x1002dc65
cmp dword [ebp - 0x5c], ebx
jne 0x1002dc65
mov ecx, ebx
jmp 0x1002dc68
xor ecx, ecx
inc ecx
xor edx, edx
mov dword [ebp - 0x1c], 0xfffffffb
mov eax, dword [ebp - 0x5c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x5c]
sete dl
sub esi, eax
mov eax, dword [ebp - 0x40]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp ecx, 0xfffffffa
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x5c]
setle cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
cmp esi, eax
setne cl
sub ecx, dword [ebp - 0x28]
je 0x1002ddf3
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x3c], 0x76be
cmp dword [ebp - 0x3c], 0x791d
jle 0x1002dcfb
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10079b38
cdq
push edx
push eax
call fcn.10006e46
inc edi
cmp edi, 0xfb9
jl 0x1002dcd3
inc esi
cmp esi, 0x51d6
jl 0x1002dcd1
or edi, 0xffffffff
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x3c], 0x734b
jge 0x1002dd3e
mov edx, str.ypbffgpin_wrm_xaodoga_nkk_buhy
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x1002dd3e
mov dword [ebp - 4], edi
mov dword [ebp - 0x3c], 0xf60700c0
cmp dword [ebp - 0x1c], ebx
je 0x1002ddd6
mov dword [ebp - 0x20], 0xfffffffd
mov eax, dword [ebp - 0x20]
dec eax
je 0x1002dd68
cmp dword [ebp - 0x20], ebx
je 0x1002dd68
xor eax, eax
inc eax
jmp 0x1002dd6a
mov eax, ebx
mov dword [ebp - 0x5c], 6
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, 0xffa8
imul ecx, eax, 0x5019
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
mov dword [ebp - 0x1c], edx
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setne dl
cmp dword [ebp - 0x5c], edx
jle 0x1002ddab
cmp dword [ebp - 0x18], ebx
je 0x1002ddab
xor ecx, ecx
inc ecx
jmp 0x1002ddad
mov ecx, ebx
mov eax, dword [ebp - 0x18]
add ecx, 0xad11748e
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
sub edx, 0xfffc
cmp edx, eax
setge cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
push ecx
push ebx
push ecx
push ecx
lea eax, [ebp - 0x5c]
mov dword [ebp - 0x3c], 1
push eax
push ecx
call fcn.1002c444
xor ecx, ecx
add esp, 0x18
inc ecx
jmp 0x1002de5d
mov dword [ebp - 0x28], ebx
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c8], ecx
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002de27
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4e4], 0x55375bb7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002de16
cmp dword [ebp - 0x28], ebx
je 0x1002de41
mov dword [ebp - 0x30], 0xb036c860
dec dword [ebp - 0x2c4]
jmp 0x1002de5d
mov dword [ebp - 0x1c], ebx
jmp 0x1002de57
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2c8], 0x75ba
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002de46
mov eax, dword [0x100a9df0]
test cl, al
jne 0x1002de9b
or eax, ecx
mov dword [0x100a9df0], eax
mov dword [ebp - 4], 2
mov dword [0x100a9df8], ebx
mov dword [0x100a9dfc], ebx
call fcn.100324a7
push 0x1005f961
mov dword [0x100a9df8], eax
call fcn.10046013
pop ecx
xor ecx, ecx
mov dword [ebp - 4], edi
inc ecx
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xd0], 0x914d2edc
push eax
push ecx
push ecx
push 0x19f7
lea eax, [ebp - 0x27c]
mov dword [ebp - 0x27c], 0xae4b9a73
push eax
mov dword [ebp - 0x240], edi
lea edx, [ebp - 0x240]
push ecx
call fcn.1002b745
add esp, 0x18
mov dword [ebp - 0xd0], 7
jmp 0x1002def7
push ebx
mov edx, 0x45a9
call fcn.1002bb2d
inc dword [ebp - 0xd0]
pop ecx
cmp dword [ebp - 0xd0], 0x35
jge 0x1002dee5
cmp byte [0x100a894c], 0
je 0x1002e244
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x88], 0x6a9ef72d
mov dword [ebp - 0x21c], 0x9f3c5a4a
mov dword [ebp - 0x1c], 0x6f40
cmp dword [ebp - 0x1c], 0x6fab
jle 0x1002dfb0
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov ecx, esi
mov dword [ebp - 0x3c], 0x6d12
mov dword [ebp - 0x2c], ecx
mov edi, ebx
mov esi, ebx
mov eax, esi
and eax, edi
xor eax, ecx
lea ecx, [ebp - 0x578]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002df6b
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x578]
call fcn.100078fb
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x50cc
jl 0x1002df4d
inc edi
cmp edi, 0x12d4
jl 0x1002df4b
dec ecx
dec dword [ebp - 0x3c]
mov dword [ebp - 0x2c], ecx
jne 0x1002df49
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x744d
jl 0x1002df3d
or edi, 0xffffffff
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff5
jl 0x1002e21b
push 1
push 0x51b4
lea eax, [ebp - 0x88]
mov dword [ebp - 0x58], 0x8b10
push eax
push ebx
push 0x17af
xor dl, dl
lea ecx, [ebp - 0x58]
call fcn.1002b87a
mov eax, dword [ebp - 0x58]
add esp, 0x14
cmp dword [ebp - 0x18], ebx
je 0x1002e02d
push 0x6b2c
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0x1e0], 0xd65121ac
push eax
push 0x1556
push 1
push 0x2c74
push 0x5b75
push ebx
push ebx
mov edx, 0x1131
mov ecx, 0x5bd
call fcn.1002acf4
add esp, 0x20
jmp 0x1002e213
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x24], ebx
jmp 0x1002e04a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x138], 0x13281d21
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1002e039
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], 1
jg 0x1002e210
mov dword [ebp - 0x2c], 0xeee
cmp dword [ebp - 0x2c], 0xfbf
jle 0x1002e0f4
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x44], 0x4e63
mov esi, dword [ebp - 0x20]
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x3c], ebx
mov eax, edi
cdq
idiv ecx
mov eax, esi
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x5d8]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e0ad
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5d8]
call fcn.100078fb
mov ecx, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x3c], ecx
cmp ecx, 0x43d2
jl 0x1002e08a
inc edi
cmp edi, 0x34cc
jl 0x1002e085
dec dword [ebp - 0x20]
dec dword [ebp - 0x44]
jne 0x1002e080
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x39ec
jl 0x1002e076
or edi, 0xffffffff
mov byte [ebp - 0x31], bl
cmp dword [ebp - 0x2c], 0xe49
jge 0x1002e10b
push str.coadbue_dtw_zuyhju_dknh_mxfqcz_ycgvpsih_qga_vjtpc_lshwab_gmefdps_xyss
call fcn.1004603d
pop ecx
mov dword [ebp - 4], edi
cmp byte [ebp - 0x31], 0
je 0x1002e13b
push ecx
push 0x742d
push 0x298d
push ebx
push 1
push 0x12b1
push 0x5482
mov dl, 1
mov ecx, 0x64a0
call fcn.1002b583
add esp, 0x1c
mov dword [ebp - 0x88], ebx
jmp 0x1002e1fb
mov dword [ebp - 0x24], 0x858f9c25
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], ebx
jl 0x1002e1f5
mov dword [ebp - 0x28], 0xfffffffa
xor edx, edx
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + eax*4 - 0x138]
mov eax, dword [ebp - 0x58]
add ecx, 0x1c2b8ad2
mov eax, dword [ebp + eax*4 - 0x138]
add eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x40]
jg 0x1002e1c7
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x138], ebx
jne 0x1002e1c7
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x138]
mov eax, dword [ebp - 0x58]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x138]
test eax, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setle cl
mov dword [ebp + eax*4 - 0x138], ecx
dec dword [ebp - 0x24]
jns 0x1002e164
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 1
jle 0x1002e146
inc dword [ebp - 0x58]
jmp 0x1002e053
mov eax, dword [ebp - 0x40]
dec dword [ebp - 0x18]
jmp 0x1002dfb3
cmp dword [ebp - 0x1c], 0x6def
jge 0x1002e22f
push str.hvcyetmsi_gdcfnoef_acozzsxdd
call fcn.1004603d
pop ecx
push ebx
lea edx, [ebp - 0x21c]
mov dword [ebp - 4], edi
call fcn.10029f14
pop ecx
jmp 0x10031ded
push 0x7d6a
push 0x3019
push ecx
mov dl, 1
mov ecx, 0x100a894c
call fcn.1002b26b
mov dword [ebp - 0x1c], 0xc3099cf
add esp, 0xc
mov dword [ebp - 0x18], 0x2baef6e2
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], ebx
jmp 0x1002e285
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x250], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002e274
imul eax, dword [ebp - 0x1c], 0xdd44
test eax, eax
jne 0x1002e299
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x250], ebx
mov ecx, 0xdca8fecf
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
add eax, 3
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x18], ebx
je 0x1002e2cf
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
je 0x1002e353
mov dword [ebp - 0x118], 0xea5d
mov dword [ebp - 0x224], 0x1153aa9
mov dword [ebp - 0x1c], ebx
jmp 0x1002e34b
mov dword [ebp - 0x22c], 5
lea edx, [ebp - 0x234]
mov dword [ebp - 0x234], ebx
mov cl, 1
mov eax, dword [ebp - 0x118]
imul eax, dword [ebp - 0x118]
push 0x4c24
add eax, 4
mov dword [ebp - 0x250], eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x118]
push eax
push 1
push ebx
lea eax, [ebp - 0x22c]
push 0x26af
push eax
call fcn.100298d9
add esp, 0x1c
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
jle 0x1002e2f0
jmp 0x1002e37e
mov dword [ebp - 0x28], 0x4bbc
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x250], eax
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1002e37e
push ebx
push 0x1f18
push ebx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [ebp - 0xf8], 0x100765c8
mov eax, 0x4c23
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], 0x3c7730f9
mov dword [ebp - 0xd4], 0x42a4
mov dword [ebp - 0x164], eax
push ebx
mov dword [ebp - 0x160], eax
push ecx
mov dword [ebp - 0x15c], eax
mov ecx, 0x38b3
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0xd4]
push 0x34b4
push eax
push 0xaa2
call fcn.1002a60c
add esp, 0x14
mov dword [ebp - 0xd4], 4
jmp 0x1002e415
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], ebx
jl 0x1002e40f
push 1
push 0xd62
mov edx, 0x7fd1
call fcn.1002a7b1
dec dword [ebp - 0x2c]
pop ecx
pop ecx
jns 0x1002e3f7
inc dword [ebp - 0xd4]
cmp dword [ebp - 0xd4], 0x24
jle 0x1002e3eb
push 0xc
pop edx
mov dword [ebp - 0x104], edx
cmp edx, 0xe0
jge 0x1002e712
push 2
lea ecx, [ebp - 0x414]
call fcn.10001cd0
push 1
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 4], 7
call fcn.10001cd0
mov dword [ebp - 0xc4], ebx
jmp 0x1002e471
mov ecx, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x414]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], 2
jl 0x1002e45c
push ecx
push 0x5c3e
push 0x4581
push 1
push ebx
lea eax, [ebp - 0x3fc]
xor dl, dl
push eax
push 0x6372
lea ecx, [ebp - 0xc4]
call fcn.1002b583
mov edx, dword [ebp - 0x414]
add esp, 0x1c
mov dword [edx + 4], ebx
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x18], ebx
jmp 0x1002e4ca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4f4], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002e4b9
mov dword [ebp - 0x18], 0xfffffff0
jmp 0x1002e504
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x3c], 0x69f30cc
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3fc]
mov dword [eax], ecx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4e8], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1a
jne 0x1002e4d9
dec dword [edx + 4]
cmp dword [edx + 4], 0xfffffffd
jge 0x1002e4ad
lea ecx, [ebp - 0x3fc]
call fcn.10001d53
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], edi
call fcn.10001d53
mov ecx, dword [ebp - 0xf8]
mov edx, dword [ebp - 0x104]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
je 0x1002e545
inc edx
jmp 0x1002e421
lea eax, [ebp - 0x104]
mov edx, 0x49a2
push eax
push 0x4b6a
lea eax, [ebp - 0x110]
mov ecx, 0x50b8
push eax
push 1
push ebx
push ebx
push 0x35b8
push 0x7256
call fcn.1002a63e
add esp, 0x20
mov dword [ebp - 0x24], 0x4e064826
lea eax, [ebp - 0x95]
mov dword [ebp - 0x20], 0x4e2bf5f4
mov byte [ebp - 0x95], bl
push eax
push ecx
push 0x2124
push 1
push 0x668a
call fcn.1002a7f2
add esp, 0x14
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xffffffed
jg 0x1002e712
mov dword [ebp - 0x18], 0xd925b0e4
mov dword [ebp - 0x3c], 0x61cc
cmp dword [ebp - 0x3c], 0x6277
jle 0x1002e63e
push ebx
push 0x2614
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
lea ecx, [esi + edi]
shl eax, cl
lea ecx, [ebp - 0x524]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e5fe
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x524]
call fcn.100078fb
mov eax, dword [ebp - 0x2c]
inc esi
cmp esi, 0x5b1c
jl 0x1002e5e1
inc edi
cmp edi, 0x5b85
jl 0x1002e5df
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x6c11
jl 0x1002e5dd
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
or edi, 0xffffffff
cmp dword [ebp - 0x3c], 0x6048
jge 0x1002e652
push str.ppo_alyhem_gpimn_awhql_may_qqykd_grioedgk_kllzbszq_thbozp_eoigltf
call fcn.1004603d
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], ebx
jmp 0x1002e667
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4d0], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e65a
mov dword [ebp - 0x18], ebx
jmp 0x1002e700
mov dword [ebp - 0x40], 0x887cf2e5
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x40], ebx
jmp 0x1002e6f7
mov dword [ebp - 0x2c], 1
cmp dword [ebp - 0x2c], ebx
je 0x1002e6d7
cmp dword [ebp - 0x40], ebx
jne 0x1002e69c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
inc ecx
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xffffd504
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x1002e6db
cmp dword [ebp - 0x2c], ebx
jne 0x1002e6db
mov eax, ebx
jmp 0x1002e6de
xor eax, eax
inc eax
mov edx, dword [ebp - 0x40]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x20]
cmp edx, eax
setl cl
mov dword [ebp - 0x4d0], ecx
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x10
jg 0x1002e688
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
jne 0x1002e675
dec dword [ebp - 0x24]
jmp 0x1002e5ab
mov dword [ebp - 0x78], 0xfffffff9
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 0x3c], 0x35ca4204
push 3
call fcn.10001cd0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0xb288586f
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002e759
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2d4]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e746
push ecx
lea eax, [ebp - 0x78]
mov ecx, 0x29db
push 1
push eax
call fcn.1002a8ac
mov eax, dword [ebp - 0x78]
add esp, 0xc
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3c], ebx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x78]
imul ecx, eax
mov eax, dword [ebp - 0x78]
imul eax, ecx
mov ecx, dword [ebp - 0x2d4]
test eax, eax
jne 0x1002e7a0
cmp dword [ecx], ebx
jne 0x1002e7a0
mov edx, ebx
jmp 0x1002e7a3
xor edx, edx
inc edx
xor eax, eax
cmp edx, dword [ecx]
setg al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x78]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x78], ecx
lea ecx, [ebp - 0x2d4]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x28], eax
mov dword [ebp - 4], edi
call fcn.10001d53
mov dword [ebp - 0x3c], 0x444d
cmp dword [ebp - 0x3c], 0x4524
jle 0x1002e85d
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
lea eax, [ecx + edx]
or eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5a8]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e816
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5a8]
call fcn.100078fb
mov ecx, dword [ebp - 0x2c]
inc esi
cmp esi, 0x5c1a
jl 0x1002e7f3
inc edi
cmp edi, 0x3f47
jl 0x1002e7f1
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x842
jl 0x1002e7ef
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x3949
jl 0x1002e7ea
or edi, 0xffffffff
cmp dword [ebp - 0x3c], 0x4397
mov dword [ebp - 0x270], 4
jge 0x1002e87b
push str.bmd_yhabtper_nwqaxa_baiokmfi_fvijsdm_cdvbsekhg_ojv_ojzl_sfgxpx_kqqzzdarq_ehtphy_hfad
call fcn.1004603d
pop ecx
mov dword [ebp - 4], edi
mov dword [ebp - 0x1ac], 0x100766a8
mov dword [ebp - 0x18], ebx
jmp 0x1002e89e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x170], 0x8bbca631
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002e88d
mov dword [ebp - 0x16c], ebx
jmp 0x1002e8d8
push 0x23d6
push 1
push ebx
push 0x22e4
push 0x8c1
push 1
mov edx, 0x5e2b
mov ecx, 0x1fcb
call fcn.1002a9d2
add esp, 0x18
dec dword [ebp - 0x16c]
cmp dword [ebp - 0x16c], 0xffffffe8
jge 0x1002e8ac
mov al, byte [0x100766a8]
mov byte [ebp - 0x51], al
mov dword [ebp - 0x18], 0x2bdc
cmp dword [ebp - 0x18], 0x2bee
jle 0x1002e977
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x38], 0x502a
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0x35f7
mov edi, eax
mov esi, 0x4c30
mov eax, edi
lea ecx, [ebp - 0x53c]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e933
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x53c]
call fcn.100078fb
dec edi
dec esi
jne 0x1002e919
mov eax, dword [ebp - 0x3c]
dec eax
dec dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
jne 0x1002e912
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x2c]
add eax, esi
dec dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
jne 0x1002e908
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x79d0
jl 0x1002e8fc
or edi, 0xffffffff
cmp dword [ebp - 0x18], 0x2aa0
jge 0x1002e98b
push str.prfoijyc_iiqhz_umhradbzl
call fcn.1004603d
pop ecx
mov dword [ebp - 4], edi
push 0xa
mov dword [ebp - 0x18], 0xdb3ae355
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1002ea48
mov dword [ebp - 0x23c], edi
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x18c], ebx
push 1
call fcn.10001cd0
push 0x1c56
push 0x5149
push 0x54a
push 0x79ee
lea eax, [ebp - 0x42c]
mov dword [ebp - 4], 0xf
push eax
lea eax, [ebp - 0x44c]
mov dl, 1
push eax
push 0x5ab7
push 0x432f
push 1
mov cl, dl
call fcn.1002a8cd
add esp, 0x20
lea eax, [ebp - 0x18c]
lea edx, [ebp - 0x42c]
push eax
push ecx
push ecx
push ebx
push ecx
lea eax, [ebp - 0x23c]
push eax
push ecx
push ecx
call fcn.100298ad
add esp, 0x24
lea eax, [ebp - 0x18c]
mov edx, 0x3d0a
push ebx
push eax
push ecx
mov ecx, 0x5343
call fcn.1002a985
add esp, 0xc
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x42c]
call fcn.10001d53
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jne 0x1002e9a0
mov eax, dword [ebp - 0xf8]
mov cl, byte [0x100766a8]
mov dl, byte [eax]
call fcn.100324d2
xor esi, esi
mov byte [0x100766a8], al
inc esi
push 8
mov dword [ebp - 0x3c], esi
pop eax
mov dword [ebp - 0x24], 0xd5e48d32
mov dword [ebp - 0x24], 0x16
jmp 0x1002eac4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffe4
jle 0x1002eac1
push 0x4223
push 1
push 1
push 0x69a6
push 0x66e0
push 1
mov edx, 0x2446
mov ecx, 0x1384
call fcn.1002a9d2
add esp, 0x18
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe4
jg 0x1002ea8e
push 8
pop eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe5
jne 0x1002ea82
mov eax, esi
mov cl, byte [esi + 0x100766a8]
cdq
idiv dword [ebp - 0x110]
mov byte [ebp - 0x31], cl
mov esi, edx
mov dl, byte [ebp - 0x51]
call fcn.100324d2
mov ecx, dword [ebp - 0xf8]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.100324d2
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0x304]
push 1
mov byte [esi + 0x100766a8], al
call fcn.10001cd0
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x360]
mov dword [ebp - 0x90], 0xe83c7730
push 2
call fcn.10001cd0
push 1
lea ecx, [ebp - 0x3d8]
mov byte [ebp - 4], 0x11
call fcn.10001cd0
mov byte [ebp - 4], 0x12
mov eax, 0x3253
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x68], ebx
jmp 0x1002eb74
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x304]
mov dword [eax + ecx*4], 0xec2e
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 1
jl 0x1002eb61
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x68]
push eax
push 1
call fcn.1002d892
add esp, 0xc
mov dword [ebp - 0x68], ebx
jmp 0x1002eba7
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x3d8]
mov dword [eax + ecx*4], 0x61949f0d
inc dword [ebp - 0x68]
cmp dword [ebp - 0x68], 1
jl 0x1002eb94
mov dword [ebp - 0x90], ebx
jmp 0x1002ec08
mov dword [ebp - 0x18], ebx
jmp 0x1002ebcb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], 0xbb11accb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002ebba
mov dword [ebp - 0x17c], ebx
jmp 0x1002ebfa
push 0x4aea
push ecx
push ebx
lea edx, [ebp - 0x90]
lea ecx, [ebp - 0x304]
call fcn.1002a6f5
add esp, 0xc
inc dword [ebp - 0x17c]
cmp dword [ebp - 0x17c], ebx
jle 0x1002ebd9
inc dword [ebp - 0x90]
cmp dword [ebp - 0x90], ebx
jle 0x1002ebb5
push ecx
push 0x3ef2
push ecx
lea eax, [ebp - 0x304]
mov ecx, 0x65a5
push eax
push ebx
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0x3d8]
push eax
call fcn.1002ac61
add esp, 0x20
lea ecx, [ebp - 0x3d8]
call fcn.10001d53
lea ecx, [ebp - 0x360]
call fcn.10001d53
lea ecx, [ebp - 0x304]
mov dword [ebp - 4], edi
call fcn.10001d53
mov al, byte [ebp - 0x31]
inc esi
mov byte [ebp - 0x51], al
mov dword [ebp - 0x3c], esi
push 8
pop eax
cmp esi, 4
jl 0x1002ea72
mov eax, dword [0x100766a8]
mov dword [ebp - 0x1a0], eax
test eax, eax
jle 0x10030d20
cmp eax, 0x297e
jae 0x10030d20
mov dword [ebp - 0x18], 0x1a049fe3
mov dword [ebp - 0x18], ebx
jmp 0x1002ecc3
push ebx
push ecx
mov dword [ebp - 0x244], edi
lea ecx, [ebp - 0x244]
push 0x374c
call fcn.1002da8d
add esp, 0xc
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffd
jle 0x1002eca5
push 0x5c34
push 0x303d
lea eax, [ebp - 0x1ac]
push eax
lea eax, [ebp - 0x51]
push eax
push ebx
lea eax, [ebp - 0xf8]
push eax
push 1
push 0x28ca
push 0x1ec2
lea eax, [ebp - 0x1a0]
push eax
push ecx
push 0x4f18
push 1
push 0x5802
lea eax, [ebp - 0x110]
mov ecx, 0x6d9
push eax
push 0x3942
push 0x744b
lea edx, [ebp - 0x270]
call fcn.1002b110
mov dword [ebp - 0x3c], 0x1a3e
add esp, 0x44
cmp dword [ebp - 0x3c], 0x1a5e
jle 0x1002ed77
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, esi
mov ecx, 0x10079b38
cdq
idiv ebx
lea eax, [edi + edx]
cdq
push edx
push eax
call fcn.10006e46
inc ebx
cmp ebx, 0x68bc
jl 0x1002ed41
inc esi
push 0
pop ebx
cmp esi, 0x7fa7
jl 0x1002ed3e
inc edi
cmp edi, 0x54ad
jl 0x1002ed3c
or edi, 0xffffffff
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x3c], 0x16cc
jge 0x1002edb7
mov edx, str.eavj_suaastrz_vfjske_lqjibypbu_ipwc_lus_wfa_gyrbb_wae_xfwpuq_bnkodknzx
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x1002edb7
mov dword [ebp - 4], edi
mov ecx, 0x100a9df8
mov eax, dword [0x100a9df8]
push dword [eax + 4]
call fcn.100322b7
mov eax, dword [0x100a9df8]
mov dword [eax + 4], eax
mov eax, dword [0x100a9df8]
mov dword [eax], eax
mov eax, dword [0x100a9df8]
mov dword [eax + 8], eax
mov dword [0x100a9dfc], ebx
mov dword [ebp - 0x298], 0xba07
mov dword [ebp - 0x280], edi
mov dword [ebp - 0x38], 0x1847
cmp dword [ebp - 0x38], 0x1a97
jle 0x1002ee60
mov eax, ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x3c], 0x5db6
mov esi, ebx
mov edi, ebx
mov ebx, dword [ebp - 0x20]
mov eax, edi
mov ecx, 0x10079b38
xor eax, esi
or eax, ebx
cdq
push edx
push eax
call fcn.10006e46
inc edi
cmp edi, 0x65ac
jl 0x1002ee1f
inc esi
push 0
pop ebx
cmp esi, 0x792f
jl 0x1002ee1a
dec dword [ebp - 0x20]
dec dword [ebp - 0x3c]
jne 0x1002ee18
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp eax, 0x4dcf
jl 0x1002ee0e
or edi, 0xffffffff
mov dword [ebp - 0x278], edi
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x38], 0x1523
jge 0x1002eea6
mov edx, str.lpfxfpupa_evpiwehxw_xrjnu_aflig_fboh
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x1002eea6
push 2
lea ecx, [ebp - 0x438]
mov dword [ebp - 4], edi
call fcn.10001cd0
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x3c], 0x1198
cmp dword [ebp - 0x3c], 0x1467
jle 0x1002ef22
push 0x689
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov edi, ebx
mov esi, ebx
mov eax, esi
lea ecx, [ebp - 0x560]
or eax, edi
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002eef8
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x560]
call fcn.100078fb
inc esi
cmp esi, 0x6f90
jl 0x1002eedc
inc edi
cmp edi, 0x591e
jl 0x1002eeda
or edi, 0xffffffff
cmp dword [ebp - 0x3c], 0xf77
jge 0x1002ef36
push str.umksjzcpx_coak_hneaa_qpbor_odcyutpas_ggsavlo_nqamv_lspjs
call fcn.1004603d
pop ecx
push 0x7aa2
push 0x5fbc
push 0x2358
push 0x3162
push ebx
push 0x32a1
lea eax, [ebp - 0x438]
mov dword [ebp - 4], 0x17
push eax
lea eax, [ebp - 0xe4]
xor dl, dl
push 1
push eax
mov ecx, 0x55a
call fcn.1002c324
add esp, 0x24
mov dword [ebp - 0xe4], ebx
jmp 0x1002ef95
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x33c], 0xaea0a9f4
inc dword [ebp - 0xe4]
cmp dword [ebp - 0xe4], 2
jl 0x1002ef7e
push 0xda4
push 0x5b73
lea eax, [ebp - 0x278]
mov edx, 0x6a40
push eax
push 0x62ce
lea eax, [ebp - 0x280]
xor cl, cl
push eax
push 0x6b8b
push 0x56ac
lea eax, [ebp - 0x298]
push eax
push 1
push 0x47a3
push 1
push 0x3c54
call fcn.10029ff7
add esp, 0x30
lea ecx, [ebp - 0x438]
dec dword [ebp - 0x33c]
mov dword [ebp - 4], edi
call fcn.10001d53
mov dword [ebp - 0xbc], ebx
xor ecx, ecx
mov dword [ebp - 0xcc], 0xc03342eb
inc ecx
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xec], 0xfffffffe
mov dword [ebp - 0xf4], ecx
push 4
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1002f042
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50c], 0x62c4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002f031
mov dword [ebp - 0xcc], ebx
cmp dword [ebp - 0xcc], 0xfffffff6
jl 0x1002f1b4
push 3
pop edx
mov dword [ebp - 0x6c], edi
mov dword [ebp - 0x6c], 0xfffffff6
cmp dword [ebp - 0x6c], 0xffffffe6
jg 0x1002f141
push ecx
mov dword [ebp - 0x2a0], 0xfffffff6
lea ecx, [ebp - 0x468]
call fcn.10001cd0
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x18], ebx
jmp 0x1002f0a6
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x468]
mov dword [eax + ecx*4], 0xf27a4129
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1002f093
push ecx
push 1
push ecx
push ecx
push 0x6640
push ecx
call fcn.1002c444
add esp, 0x18
lea eax, [ebp - 0x2a0]
mov edx, 0x58c7
push eax
lea eax, [ebp - 0x9c]
push eax
push 0x3858
push 0x298
push 1
push 0x690e
push ebx
lea eax, [ebp - 0x6c]
push eax
lea eax, [ebp - 0xec]
push eax
push 0x37e8
push ecx
push 0x2286
push ebx
lea eax, [ebp - 0xcc]
mov ecx, 0x1ae4
push eax
push 0x595e
lea eax, [ebp - 0xf4]
push eax
push 0x572c
call fcn.1002b110
add esp, 0x44
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x468]
call fcn.10001d53
dec dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 0xffffffe6
push 1
pop ecx
jle 0x1002f071
push 3
pop edx
mov dword [ebp - 0xf4], edx
cmp dword [ebp - 0xf4], ebx
jl 0x1002f1a1
mov dword [ebp - 0x6c], ebx
jmp 0x1002f194
mov dword [ebp - 0xec], edx
cmp dword [ebp - 0xec], ebx
jl 0x1002f191
mov dword [ebp - 0x9c], ebx
jmp 0x1002f181
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x50c], 0x9628
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], esi
jl 0x1002f16a
dec dword [ebp - 0xec]
jns 0x1002f162
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], edx
jle 0x1002f154
dec dword [ebp - 0xf4]
jns 0x1002f14f
dec dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], 0xfffffff6
jge 0x1002f05d
mov eax, dword [ebp - 0x1ac]
mov edx, 0x583e
push 0x16b
push 0x79ac
push 0x45b1
add eax, 4
mov dword [ebp - 0xdc], 0xcea5d6c0
push ecx
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0xdc]
push eax
push 0x195a
push ecx
push ecx
mov dword [ebp - 0x2a4], 0xc5534bf8
lea ecx, [ebp - 0x2a4]
call fcn.1002acf4
add esp, 0x20
mov dword [ebp - 0xdc], 0x18
jmp 0x1002f23f
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1002f239
push ecx
push 0x49f5
push ecx
push ecx
push 1
push ecx
push 0x397b
push ecx
push ecx
mov edx, 0x15b9
call fcn.100298ad
add esp, 0x24
inc dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], 0x1c
je 0x1002f211
mov dword [ebp - 0x18], edi
lea ecx, [ebp - 0x478]
mov dword [ebp - 0x30], 0x4f84b811
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 0xfffffff9
push 3
call fcn.10001cd0
push 1
lea eax, [ebp - 0x478]
mov dword [ebp - 4], 0x1b
push eax
push 1
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x30], 5
push eax
push 1
mov edx, 0x124f
mov ecx, 0x2a96
call fcn.1002ad6e
add esp, 0xc
push 1
push ecx
push 0x781e
push ecx
push 0x538
call fcn.1002ade3
add esp, 0x1c
mov dword [ebp - 0x18], ebx
jmp 0x1002f3a8
push 1
lea ecx, [ebp - 0x4a0]
call fcn.10001cd0
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x4b4]
push dword [ebp - 0x20c]
movdqa xmm0, xmmword [0x1006c890]
lea ecx, [ebp - 0x328]
mov dword [ebp - 0x30], 0xfffffffe
push eax
mov dword [ebp - 0x30], edi
lea eax, [ebp - 0x4c4]
mov dword [ebp - 0x30], 0x8eb98764
push eax
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xb64fda7e
mov dword [ebp - 0x30], edi
push ebx
movdqu xmmword [ebp - 0x4c4], xmm0
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x320], ebx
call fcn.10001db9
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0x4a0]
mov dword [ebp - 0x30], 6
push eax
push ecx
push 0x67b4
push ecx
mov dword [ebp - 0x30], edi
push ecx
mov dword [ebp - 0x30], 0xfffffff7
xor cl, cl
mov dword [ebp - 0x1dc], 0xfffffffd
call fcn.1002b46d
add esp, 0x18
lea eax, [ebp - 0x1dc]
mov edx, 0x168c
push eax
push ecx
push 1
mov ecx, 0x56d7
call fcn.1002afc8
add esp, 0xc
lea ecx, [ebp - 0x328]
call fcn.10001d53
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x1b
call fcn.10001d53
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
je 0x1002f2bf
lea ecx, [ebp - 0x478]
mov dword [ebp - 4], edi
call fcn.10001d53
mov dword [ebp - 0x18], 0xdb3ae355
mov dword [ebp - 0x18], ebx
jmp 0x1002f4aa
mov dword [ebp - 0x288], edi
lea ecx, [ebp - 0x408]
mov dword [ebp - 0xb8], ebx
push 1
call fcn.10001cd0
push 0x51ec
push ecx
lea eax, [ebp - 0x408]
mov dword [ebp - 4], 0x1e
push eax
lea eax, [ebp - 0x45c]
xor dl, dl
push eax
push ecx
mov ecx, 0x26e7
call fcn.1002b65c
add esp, 0x14
lea eax, [ebp - 0x408]
mov edx, 0x5c16
push 0x3115
push 0x7951
push 0x17ec
push 0xc8d
push 1
push 0x635c
push 1
push 0x163b
push 0x4894
push 0x530
push ecx
push eax
push 1
push 0x5e7
push 0x4f4b
lea eax, [ebp - 0x288]
push 0x7e06
push eax
lea ecx, [ebp - 0xb8]
call fcn.1002b110
add esp, 0x44
mov dword [ebp - 0xb8], 0xffffffe3
jmp 0x1002f490
mov dword [ebp - 0x28], 0x3c61c71b
cmp dword [ebp - 0x28], ebx
jne 0x1002f499
inc dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 0xffffffed
jge 0x1002f47e
lea ecx, [ebp - 0x408]
mov dword [ebp - 4], edi
call fcn.10001d53
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xa
jne 0x1002f3cf
mov byte [ebp - 0xb0], bl
mov eax, 0x4c23
mov dword [ebp - 0xaf], 0x21c90345
mov byte [ebp - 0xab], 0x7c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x290], 0x3c7730f9
mov dword [ebp - 0x24], 0x42a4
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x158], eax
inc dword [ebp - 0x24]
mov dword [ebp - 0x24], esi
jmp 0x1002f522
push ebx
lea eax, [ebp - 0x290]
mov edx, 0x4283
push eax
push ecx
mov ecx, 0x2207
call fcn.1002a271
add esp, 0xc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x24
jle 0x1002f504
push 0xa
pop eax
mov word [ebp - 0xf0], ax
lea ecx, [ebp - 0x310]
mov dword [ebp - 0x1c], 0x97f6af11
push 3
call fcn.10001cd0
lea eax, [ebp - 0x310]
mov dword [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x480]
mov dword [ebp - 0x120], 0x333ee676
push eax
push ecx
mov dword [ebp - 0x2c], 0x8129ec6e
xor dl, dl
mov ecx, 0x404c
call fcn.1002b26b
add esp, 0xc
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xfffffffe
jg 0x1002f82d
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x12c], edi
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x18], 0x48fd
cmp dword [ebp - 0x18], 0x4bce
jle 0x1002f61b
mov edi, ebx
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x44], 0x7c6d
mov dword [ebp - 0x20], ecx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x590]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f5e4
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x590]
call fcn.100078fb
mov ecx, dword [ebp - 0x20]
add ecx, esi
dec dword [ebp - 0x44]
mov dword [ebp - 0x20], ecx
jne 0x1002f5c8
inc esi
cmp esi, 0x91d
jl 0x1002f5bc
inc edi
cmp edi, 0x72ac
jl 0x1002f5ba
or edi, 0xffffffff
mov dword [ebp - 0x4c], edi
cmp dword [ebp - 0x18], 0x470e
jge 0x1002f632
push str.hdn_fmrorawm_pdhzgwb_bdlwyqh
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x12c], 0xfffffffb
jmp 0x1002f7a5
mov dword [ebp - 0x40], 0xcafa32fd
xor edx, edx
mov dword [ebp - 0x24], ebx
xor ecx, ecx
mov dword [ebp - 0x18], 0xfffffffd
inc edx
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x130]
cmp eax, 0xffff
mov eax, dword [ebp - 0x310]
setne cl
mov dword [eax + 8], ecx
mov dword [ebp - 0x120], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setl cl
xor edx, edx
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
cmp ecx, 0x42bb
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x124]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x18]
je 0x1002f74f
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x18], 1
jmp 0x1002f747
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], 0xffffffef
jmp 0x1002f73e
mov dword [ebp - 0x40], ebx
jmp 0x1002f735
push 0xd3b
push 0x372d
push ecx
mov dword [ebp - 0x28], 0xadf5
push 1
call fcn.1002b3d6
mov eax, dword [ebp - 0x24]
add esp, 0x10
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jle 0x1002f704
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffef
je 0x1002f6ff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x29
jge 0x1002f6f3
jmp 0x1002f788
push 0x5f13
lea eax, [ebp - 0x310]
mov dl, 1
push eax
lea eax, [ebp - 0x120]
mov ecx, 0x6177
push eax
push 0x6bd9
push ebx
push 0x2502
push 0x2f0
push 1
push 0x6cc9
call fcn.1002c324
add esp, 0x24
push ebx
push ecx
lea eax, [ebp - 0x9e]
mov byte [ebp - 0x9e], bl
push eax
call fcn.1002a2cd
add esp, 0xc
dec dword [ebp - 0x12c]
cmp dword [ebp - 0x12c], 0xffffffe4
jl 0x1002f648
cmp dword [ebp - 0x38], 1
jge 0x1002f7c1
cmp dword [ebp - 0x2c], ebx
jne 0x1002f7c1
mov edx, ebx
jmp 0x1002f7c4
xor edx, edx
inc edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x120]
setle cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
sete dl
inc edx
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x4c]
cmp edx, 2
je 0x1002f7f7
cmp dword [ebp - 0x38], ebx
jne 0x1002f7f7
mov esi, ebx
jmp 0x1002f7fa
xor esi, esi
inc esi
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x124], ecx
mov eax, dword [ebp - 0x38]
cmp ecx, eax
sete dl
imul eax, esi, 0x8da5
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 4
setg al
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x1c]
jmp 0x1002f57f
lea ecx, [ebp - 0x310]
mov dword [ebp - 4], edi
call fcn.10001d53
movzx eax, byte [ebp - 0xb0]
mov ecx, ebx
push 2
pop esi
mov dword [ebp - 0x100], ecx
lea eax, [eax*2 + 2]
mov dword [ebp - 0x48], eax
cmp esi, eax
jne 0x1002f8d1
movzx ecx, byte [ebp + esi - 0xb0]
dec esi
add esi, ecx
lea eax, [ecx + 1]
xor ecx, ecx
mov dword [ebp - 0x100], eax
inc ecx
mov dword [ebp - 0x1e8], ecx
mov dword [ebp - 0x1b0], edi
mov dword [ebp - 0x18], ebx
jmp 0x1002f894
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x43c], 0x849
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002f883
push ecx
push 0x7c03
push ecx
push ecx
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x1b0]
call fcn.1002a458
add esp, 0x10
lea eax, [ebp - 0x1b0]
mov cl, 1
push eax
push 0x172b
call fcn.1002b433
add esp, 0xc
jmp 0x1002fa9d
movzx edx, byte [ebp + esi - 0xaf]
mov eax, esi
sub eax, ecx
push 0xfffffffffffffff9
movzx eax, byte [ebp + eax - 0xb2]
movzx eax, word [ebp + eax*2 - 0xf0]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0xb0]
pop edx
mov word [ebp + eax*2 - 0xf0], cx
mov dword [ebp - 0x50], 0x65e08ccc
mov dword [ebp - 0xc0], 4
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x20], 0x9b37d022
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
add eax, 2
mov dword [ebp - 0x20], eax
xor eax, eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x1fc4
imul ecx, dword [ebp - 0xc0]
cmp ecx, 0xa720
setle al
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
cmp edx, eax
mov eax, dword [ebp - 0x50]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x50]
je 0x1002fa4d
push 3
lea ecx, [ebp - 0x2ec]
call fcn.10001cd0
push 1
lea eax, [ebp - 0x2ec]
mov dword [ebp - 4], 0x22
push eax
push ecx
lea eax, [ebp - 0x214]
push eax
call fcn.10029ce5
add esp, 0x10
mov dword [ebp - 0x50], ebx
jmp 0x1002fa37
push 0x71ad
lea eax, [ebp - 0x2ec]
xor dl, dl
push eax
push 0x6ac0
lea eax, [ebp - 0x50]
xor cl, cl
push eax
push 0x6f03
push 0x2ff5
push 0x7428
lea eax, [ebp - 0xc0]
push eax
push 1
call fcn.1002a8cd
add esp, 0x24
lea eax, [ebp - 0x2ec]
push 0x4882
push ecx
push eax
lea eax, [ebp - 0x50]
push ebx
push eax
call fcn.1002a7f2
add esp, 0x14
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 2
jle 0x1002f9e1
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 4], edi
call fcn.10001d53
jmp 0x1002fa71
push 0x22b0
push 0x7601
push ecx
lea eax, [ebp - 0x92]
mov byte [ebp - 0x92], bl
push eax
push ecx
push ecx
mov cl, 1
call fcn.1002b46d
add esp, 0x18
push ecx
push 0x562a
push 0x9e3
lea eax, [ebp - 0x100]
mov edx, 0x70e0
push eax
push 0x26de
push ecx
push 0x8ca
xor cl, cl
call fcn.1002c53c
add esp, 0x1c
add esi, 2
cmp esi, 6
jae 0x1002fab3
mov ecx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x48]
jmp 0x1002f857
push dword [ebp - 0x214]
movdqa xmm0, xmmword [0x1006c8a0]
lea eax, [ebp - 0x4a4]
push eax
lea eax, [ebp - 0x4b4]
mov dword [ebp - 0x24], 0x9c4185a1
push eax
mov dword [ebp - 0x74], 5
lea ecx, [ebp - 0x198]
push ebx
movdqu xmmword [ebp - 0x4b4], xmm0
mov dword [ebp - 0x198], ebx
mov dword [ebp - 0x194], ebx
mov dword [ebp - 0x190], ebx
call fcn.10001db9
push 1
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 4], 0x23
call fcn.10001cd0
push 0x1992
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 0x24
push eax
lea eax, [ebp - 0x1c8]
mov cl, 1
push eax
call fcn.1002a411
mov dword [ebp - 0x18], 0x6083
add esp, 0xc
cmp dword [ebp - 0x18], 0x62df
jle 0x1002fba2
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x38], 0x712b
mov dword [ebp - 0x44], ecx
mov edi, ecx
mov dword [ebp - 0x20], 0x7a04
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
mov ecx, 0x10079b38
cdq
push edx
push eax
call fcn.10006e46
inc esi
cmp esi, 0x7480
jl 0x1002fb62
dec edi
dec dword [ebp - 0x20]
jne 0x1002fb60
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
add ecx, eax
dec dword [ebp - 0x38]
mov dword [ebp - 0x44], ecx
jne 0x1002fb57
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x3728
jl 0x1002fb4b
or edi, 0xffffffff
mov byte [ebp - 4], 0x25
cmp dword [ebp - 0x18], 0x5d35
jge 0x1002fbdf
mov edx, str.pfnrc_gtbf_iccen_etw_lfw_dcijfji_ieg_pzhv_yeszua_ouhpnr
mov ecx, 0x10079b38
call fcn.10009b61
jmp 0x1002fbdf
push 0xa
pop esi
push ebx
push 0x59f0
push 1
push 1
push 0x22a8
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x94]
mov byte [ebp - 0x94], bl
mov edx, 0x13f3
push 0x4cfb
call fcn.1002a30c
mov ecx, dword [ebp - 0x74]
xor edx, edx
mov eax, dword [ebp - 0x198]
add esp, 0x18
mov dword [eax], ecx
mov eax, dword [ebp - 0x74]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c8]
setne cl
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c8]
setg cl
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c8]
imul eax, dword [eax], 0xde9a
cmp eax, 0xe871d976
mov eax, dword [ebp - 0x74]
setne cl
xor edx, edx
cmp ecx, 0xbb743d8
setl dl
add eax, edx
je 0x1002fe3c
mov dword [ebp - 0x74], ebx
cmp dword [ebp - 0x74], ebx
jg 0x1002fe70
mov dword [ebp - 0x44], 0x63c
cmp dword [ebp - 0x44], 0x81f
jle 0x1002fcfc
push ebx
push 0xac3
call dword [sym.imp.USER32.dll_SetMenu]
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, esi
mov esi, 0x43a9
mov eax, edi
lea ecx, [ebp - 0x5c0]
cdq
push edx
push eax
call fcn.1000288f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002fcd1
mov eax, dword [eax]
push eax
call fcn.1004603d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x5c0]
call fcn.100078fb
dec edi
dec esi
jne 0x1002fcb7
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x146a
jl 0x1002fcb0
or edi, 0xffffffff
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x44], 0x4de
jge 0x1002fd13
push str.zhszx_yowylsxu_seayi_aaycyieq_wtn_niukj_zhwaeokek_mzr_ncocifyep_yxrczse_ikd_uxqwncboh_voz
call fcn.1004603d
pop ecx
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x1c], ebx
jmp 0x1002fd2c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4dc], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002fd1f
mov dword [ebp - 0x1c], ebx
jmp 0x1002fd48
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x25c], 0x28aea381
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002fd37
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002fe34
mov dword [ebp - 0x18], 0xb441791e
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x1002fe2b
mov esi, dword [ebp - 0x198]
mov dword [ebp - 0x30], 0x7d660f18
mov dword [ebp - 0x28], 0x831e341f
mov dword [ebp - 0x40], ebx
jmp 0x1002fd97
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x248], 0x81fdf20b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 1
jl 0x1002fd86
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c8]
cmp dword [eax + ecx*4], ebx
sete dl
xor eax, eax
cmp edx, 7
setg al
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff7
jb 0x1002fdcc
cmp dword [ebp - 0x18], ebx
je 0x1002fdcc
xor ecx, ecx
inc ecx
jmp 0x1002fdce
mov ecx, ebx
xor eax, eax
mov dword [ebp - 0x248], ecx
test ecx, ecx
sete al
mov dword [ebp - 0x4d4], eax
cmp eax, dword [ebp - 0x25c]
jl 0x1002fdf6
cmp dword [ebp - 0x25c], ebx
je 0x1002fdf6
xor eax, eax
inc eax
jmp 0x1002fdf8
mov eax, ebx
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0x3a5c25cc
mov eax, dword [ebp - 0x198]
setg cl
sub ecx, dword [eax]
lea eax, [ecx - 0x6ac8]
mov dword [ebp - 0x258], eax
mov dword [esi + 8], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002fd73
dec dword [ebp - 0x24]
jns 0x1002fd5a
inc dword [ebp - 0x74]
jmp 0x1002fc86
push ecx
lea ecx, [ebp - 0x1f0]
xor eax, eax
push ecx
inc eax
lea ecx, [ebp - 0x198]
push ecx
push eax
push eax
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x1f0], eax
push 0x4567
push ecx
mov dl, al
mov ecx, 0x76c4
call fcn.1002b583
add esp, 0x1c
jmp 0x1002fe73
push 0xa
pop esi
lea ecx, [ebp - 0x1c8]
call fcn.10001d53
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], edi
call fcn.10001d53
xor eax, eax
lea ecx, [ebp - 0x3a8]
mov word [ebp - 0xee], ax
mov dword [ebp - 0x38], 0xfddd3f46
push 4
call fcn.10001cd0
push ecx
push ecx
push 0x19c8
xor eax, eax
mov dword [ebp - 4], 0x29
inc eax
mov edx, 0x64bf
push 0x1afe
push eax
mov dword [ebp - 0x28], eax
mov ecx, 0xac0
lea eax, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x3a8]
push 0x74fc
push eax
call fcn.10029df5
add esp, 0x20
mov dword [ebp - 0xc8], ebx
jmp 0x1002ff07
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x268], 0xfffffff6
inc dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], 2
jl 0x1002fef0
mov eax, dword [ebp - 0x38]
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
push 1
setg dl
cmp edx, 0xfffffffa
mov dword [ebp - 0x264], edx
sbb eax, eax
neg eax
cmp eax, 0x1124f01c
jne 0x1002ff65
push ecx
mov byte [ebp - 0x89], bl
lea edx, [ebp - 0x89]
push ecx
call fcn.1002c03b
add esp, 0xc
mov byte [ebp - 0x8a], bl
lea edx, [ebp - 0x8a]
push 1
call fcn.1002bb2d
pop ecx
jmp 0x1003002b
lea ecx, [ebp - 0x2e0]
call fcn.10001cd0
lea ecx, [ebp - 0x484]
mov byte [ebp - 4], 0x2a
push ecx
xor eax, eax
inc eax
push ecx
push eax
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 0x18], eax
call fcn.1002b607
mov eax, dword [ebp - 0x2e0]
add esp, 0xc
cmp dword [eax], 0xfffffffc
jle 0x1002ffa8
mov eax, dword [ebp - 0x264]
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x38], 0xd020
test eax, eax
jne 0x1002ffbc
cmp dword [ebp - 0x28], ebx
jne 0x1002ffbc
mov edx, ebx
jmp 0x1002ffbf
xor edx, edx
inc edx
mov eax, dword [ebp - 0x3a8]
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x2e0]
setg cl
imul ecx, dword [eax]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], 0xffffffea
jmp 0x1003001a
mov dword [ebp - 0x28], 0xe2d58412
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
jmp 0x10030001
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x284], 0x3fca5eb5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1002fff0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x19
jg 0x1002ffe1
lea ecx, [ebp - 0x2e0]
call fcn.10001d53
lea ecx, [ebp - 0x3a8]
mov dword [ebp - 4], edi
call fcn.10001d53
xor eax, eax
mov dword [ebp - 0x37c], 7
mov word [ebp - 0x390], ax
lea ecx, [ebp - 0x390]
lea eax, [ebp - 0xf0]
mov dword [ebp - 0x380], ebx
push eax
call fcn.10007a99
cmp dword [ebp - 0x37c], 8
lea eax, [ebp - 0x390]
push ebx
cmovae eax, dword [ebp - 0x390]
lea ecx, [ebp - 0x390]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x238], eax
call fcn.10007bf6
mov dword [ebp - 0x30], 0x53606de7
mov dword [ebp - 0x18], 0x3eb905d0
mov dword [ebp - 0x40], 0x111738ab
mov dword [ebp - 0x24], 0x3eb60693
mov dword [ebp - 0x28], 0xb7ab61b5
mov dword [ebp - 0x38], 0x6acb8f2b
mov dword [ebp - 0x1c], 0x34ac0198
mov dword [ebp - 0x4c], 0xca4
mov dword [ebp - 0x18], ebx
jmp 0x100300dd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x150], 0x8d526d2e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100300cc
inc dword [ebp - 0x1c]
je 0x10030227
mov ecx, dword [ebp - 0x150]
mov eax, dword [ebp - 0x1c]
imul ecx, eax
cmp ecx, dword [ebp - 0x28]
jg 0x10030227
mov dword [ebp - 0x48], 0x385e13cd
mov dword [ebp - 0x40], 0xffffffed
jmp 0x1003021c
mov dword [ebp - 0x38], 0xf
cmp dword [ebp - 0x38], ebx
jl 0x1003025a
push 1
push 0x7d9d
push 0x142f
push 1
push 0x459b
xor dl, dl
mov ecx, 0x467e
call fcn.1002b87a
add esp, 0x14
dec dword [ebp - 0x38]
jns 0x10030233
mov dword [ebp - 0xf0], ebx
mov dword [ebp - 0x44], 0x7cd9
cmp dword [ebp - 0x44], 0x803b
jle 0x100302bd
mov dword [ebp - 0x18], 2
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 0x30], 0xd7770b16
mov dword [ebp - 0x28], 0x2268f62c
push 2
call fcn.10001cd0
mov dword [ebp - 4], 0x4c
mov dword [ebp - 0x30], 0xb30477ae
mov dword [ebp - 0x1c], ebx
jmp 0x10031d5f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x204], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10031d4e
mov dword [ebp - 0x1c], ebx
jmp 0x10031d7d
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3e4]
mov dword [eax + ecx*4], 0xec1fcc8a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10031d6a
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x10031d95
push ecx
mov cl, 1
call fcn.1002c58e
pop ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
push 0
setg dl
xor eax, eax
imul edx, dword [ebp - 0x18]
cmp edx, edi
pop edx
setge al
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x8e3bf118
sbb ecx, ecx
inc ecx
mov ecx, dword [ebp - 0x3e4]
sets dl
add edx, dword [ecx]
lea ecx, [ebp - 0x3e4]
mov dword [ebp - 0x30], edx
call fcn.10001d53
mov ecx, dword [ebp - 0xc]
mov eax, 0x100a9df8
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret