Function at 0x1002c679
Capabilities:
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005c489
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x200
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xb4], 0x25d6
mov dword [ebp - 0xfc], str.wadhd_tzix_zpaee_ijtrjiekf_ejuyb_fevwfuggy_upakvpn_dttmkrelw_icigpflax_hthmj
cmp dword [ebp - 0xb4], 0x2697
jle 0x1002c78a
and dword [ebp - 0x48], 0
jmp 0x1002c6cf
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x379b
jge 0x1002c78a
and dword [ebp - 0x58], 0
jmp 0x1002c6e9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x264b
jge 0x1002c785
and dword [ebp - 0x40], 0
jmp 0x1002c703
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x276
jge 0x1002c780
and dword [ebp - 0x3c], 0
jmp 0x1002c719
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1f2
jge 0x1002c77b
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x58]
shl eax, cl
or eax, dword [ebp - 0x48]
cdq
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], edx
push dword [ebp - 0x114]
push dword [ebp - 0x118]
lea ecx, [ebp - 0x1f8]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x134], eax
mov ecx, dword [ebp - 0x134]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x1f8]
call fcn.100013f2
jmp 0x1002c712
jmp 0x1002c6fc
jmp 0x1002c6e2
jmp 0x1002c6c8
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x1002d35d
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x138], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xdc], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x138]
movzx eax, byte [eax]
test eax, eax
je 0x1002d343
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0x1b8]
call fcn.10001424
and dword [ebp - 4], 0
push 4
lea ecx, [ebp - 0xcc]
call fcn.10001471
mov byte [ebp - 4], 1
push 1
lea ecx, [ebp - 0x78]
call fcn.10001471
mov byte [ebp - 4], 2
mov dword [ebp - 0x2c], 0
jmp 0x1002c842
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002c85e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xcc]
call fcn.10001510
mov dword [eax], 0xfffffffa
jmp 0x1002c83b
push 0
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.10030e56
add esp, 0xc
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
and dword [eax], 0
jmp 0x1002c8a0
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
cmp dword [eax], 3
jg 0x1002cc72
mov dword [ebp - 0x18], 0x17f75960
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x18], 0
jmp 0x1002c8d4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x1002cb37
mov dword [ebp - 0x1c], 0x31551da6
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0x33147f59
mov dword [ebp - 0x1c], 3
jmp 0x1002c903
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002cb1a
mov dword [ebp - 0xe8], 0xfffffff9
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcc]
call fcn.10001510
cmp dword [eax], 0
jne 0x1002c97a
mov eax, dword [ebp - 0x80]
neg eax
mov ecx, dword [ebp - 0x80]
dec ecx
mov dword [ebp - 0x80], ecx
test eax, eax
je 0x1002c971
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcc]
call fcn.10001510
mov dword [ebp - 0xc0], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcc]
call fcn.10001510
mov ecx, dword [ebp - 0xc0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc0]
cmp dword [eax], 0
jne 0x1002c97a
and dword [ebp - 0xa0], 0
jmp 0x1002c984
mov dword [ebp - 0xa0], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c0], eax
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov esi, dword [ebp - 0x7c]
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
cmp esi, dword [eax]
je 0x1002c9c3
mov dword [ebp - 0x90], 1
jmp 0x1002c9ca
and dword [ebp - 0x90], 0
cmp dword [ebp - 0x90], 0xd580090a
jae 0x1002c9e5
cmp dword [ebp - 0x18], 0
jne 0x1002c9e5
and dword [ebp - 0x10c], 0
jmp 0x1002c9ef
mov dword [ebp - 0x10c], 1
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
cmp dword [eax], 0x6095
jg 0x1002ca0d
mov dword [ebp - 0xb8], 1
jmp 0x1002ca14
and dword [ebp - 0xb8], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax]
jle 0x1002ca34
mov dword [ebp - 0x98], 1
jmp 0x1002ca3b
and dword [ebp - 0x98], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x98], eax
je 0x1002ca56
xor eax, eax
jne 0x1002ca56
and dword [ebp - 0xb0], 0
jmp 0x1002ca60
mov dword [ebp - 0xb0], 1
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
mov ecx, dword [ebp - 0xb0]
cmp ecx, dword [eax]
jle 0x1002ca80
mov dword [ebp - 0x88], 1
jmp 0x1002ca87
and dword [ebp - 0x88], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x88]
jge 0x1002caa1
mov dword [ebp - 0x110], 1
jmp 0x1002caa8
and dword [ebp - 0x110], 0
push 0
lea ecx, [ebp - 0x78]
call fcn.10001510
cmp dword [eax], 0x3a34071e
jge 0x1002cac6
mov dword [ebp - 0xa8], 1
jmp 0x1002cacd
and dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x1002caf6
push 0x673f
push 0
push 0x3d92
push 1
call fcn.1002d492
add esp, 0x10
jmp 0x1002cb15
push 0x61ab
lea eax, [ebp - 0x7c]
push eax
push 1
push 0x5a66
push 1
push 0x107d
call fcn.1002c4df
add esp, 0x18
jmp 0x1002c8fc
push 0x6d06
push 0
push 0x385f
push 1
push 1
call fcn.1002eb10
add esp, 0x14
jmp 0x1002c8cd
mov dword [ebp - 0x8c], 0x47fc
mov dword [ebp - 0xf8], str.ixmlszr_uqoem_eqnmqb_docx_tvywoak_ihqlnfqxe
cmp dword [ebp - 0x8c], 0x4b9f
jle 0x1002cbdb
and dword [ebp - 0x68], 0
jmp 0x1002cb68
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x5002
jge 0x1002cbdb
and dword [ebp - 0x50], 0
jmp 0x1002cb7e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x47f0
jge 0x1002cbd9
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x50]
cdq
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], edx
push dword [ebp - 0x120]
push dword [ebp - 0x124]
lea ecx, [ebp - 0x1e0]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0xf0], eax
mov ecx, dword [ebp - 0xf0]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x1e0]
call fcn.100013f2
jmp 0x1002cb77
jmp 0x1002cb61
lea eax, [ebp - 0x18]
push eax
push 0x3e1a
push 1
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x128]
push eax
push 0x2b3
push 0x80c
lea eax, [ebp - 0xcc]
push eax
push 0x2a1a
push 0x4898
push 0x5bc3
push 0x20ef
push 0xff1
push 1
call fcn.1002bd22
add esp, 0x38
mov byte [ebp - 4], 3
cmp dword [ebp - 0x8c], 0x46e8
jge 0x1002cc41
push dword [ebp - 0xf8]
call fcn.1004498a
pop ecx
jmp 0x1002cc5d
mov dword [ebp - 4], 2
jmp 0x1002cc6d
jmp 0x1002c87f
push 0x4d0a
push 0x68ca
push 0x589b
push 0
call fcn.1002f43a
add esp, 0x10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x78]
call fcn.100014f4
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.100014f4
push dword [ebp - 0x94]
push 0xfe0
push 0x794c
push 0x3c10
push 1
push 0x2b6c
push 1
push 0x7a50
lea eax, [ebp - 0x1b8]
push eax
call fcn.1002bf0d
add esp, 0x24
and dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x30]
cmp ecx, dword [eax]
jae 0x1002d289
push 2
lea ecx, [ebp - 0x188]
call fcn.10001471
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], 0
jmp 0x1002cd0e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002cd2a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x188]
call fcn.10001510
mov dword [eax], 0xd3df
jmp 0x1002cd07
mov dword [ebp - 0x14], 0
jmp 0x1002cd3a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002cd4d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0x490c4d8e
jmp 0x1002cd33
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x60], 1
jmp 0x1002cd72
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x60], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0
jl 0x1002cdf0
push 4
lea ecx, [ebp - 0x164]
call fcn.10001471
mov byte [ebp - 4], 6
mov dword [ebp - 0x38], 0
jmp 0x1002cda0
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1002cdbc
push dword [ebp - 0x38]
lea ecx, [ebp - 0x164]
call fcn.10001510
mov dword [eax], 0x2e31d832
jmp 0x1002cd99
push 0
push 0x42a9
push 0x5cc0
lea eax, [ebp - 0x164]
push eax
push 0x3be1
call fcn.1002ee2d
add esp, 0x14
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x164]
call fcn.100014f4
jmp 0x1002cd5d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x188]
call fcn.100014f4
mov dword [ebp - 0x1a0], 0xffffffff
mov dword [ebp - 0x9c], 0x7dec
mov dword [ebp - 0x100], str.uvyptysn_gukzftrxu_fnyh_oeanffzsi_ihcnly_vfhptidg_axzgya_mvt
cmp dword [ebp - 0x9c], 0x7f10
jle 0x1002cee5
and dword [ebp - 0x54], 0
jmp 0x1002ce3a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x34ed
jge 0x1002cece
and dword [ebp - 0x44], 0
jmp 0x1002ce54
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x2874
jge 0x1002cec9
and dword [ebp - 0x4c], 0
jmp 0x1002ce6a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x760b
jge 0x1002cec7
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x4c]
xor eax, dword [ebp - 0x54]
cdq
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], edx
push dword [ebp - 0x12c]
push dword [ebp - 0x130]
lea ecx, [ebp - 0x210]
call fcn.10002a51
pop ecx
pop ecx
mov dword [ebp - 0x11c], eax
mov ecx, dword [ebp - 0x11c]
call fcn.1000b0ad
push eax
call fcn.1004498a
pop ecx
lea ecx, [ebp - 0x210]
call fcn.100013f2
jmp 0x1002ce63
jmp 0x1002ce4d
jmp 0x1002ce33
push 0x235
push 0
push 0x1344
push 0xf14
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
mov dword [ebp - 0x174], 0xfffffffa
mov byte [ebp - 4], 7
cmp dword [ebp - 0x9c], 0x7a3e
jge 0x1002cf0b
push dword [ebp - 0x100]
call fcn.1004498a
pop ecx
jmp 0x1002cf27
and dword [ebp - 4], 0
jmp 0x1002cf31
mov dword [ebp - 0x168], 0x2b57e8b7
mov dword [ebp - 0x17c], 0xd2edc755
mov dword [ebp - 0x18c], 7
mov dword [ebp - 0x1bc], 0x96a162c9
mov dword [ebp - 0x19c], 0x3bf38c08
mov dword [ebp - 0x198], 0x3bf38c08
mov dword [ebp - 0x194], 0x3bf38c08
mov dword [ebp - 0x190], 0x3bf38c08
mov dword [ebp - 0x16c], 0xfbde283b
mov dword [ebp - 0x34], 0
jmp 0x1002cf9b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1002cfb1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x14c], 0xadca1a1f
jmp 0x1002cf94
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14c], eax
lea eax, [ebp - 0x84]
mov dword [ebp - 0xd4], eax
push 2
lea ecx, [ebp - 0x144]
call fcn.10001471
mov byte [ebp - 4], 9
mov dword [ebp - 0x24], 0xf833fcb5
mov dword [ebp - 0xd8], 0x9475
mov dword [ebp - 0x108], 0x1aa08ecb
lea eax, [ebp - 0x170]
push eax
lea eax, [ebp - 0x144]
push eax
push 0
call fcn.1002ddef
add esp, 0xc
mov dword [ebp - 0x24], 0
jmp 0x1002d02c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002d08e
push 0x60c9
push 0x51fe
lea eax, [ebp - 0x24]
push eax
push 0x6f3e
push 0x751
push 0x799
lea eax, [ebp - 0x144]
push eax
push 0x4527
push 0x67e4
push 0x77ba
push 0x6278
push 0x162e
push 0
push 0x18ae
push 1
push 0x1ee6
push 1
push 0x824
call fcn.1002de68
add esp, 0x48
jmp 0x1002d025
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x108]
push eax
lea eax, [ebp - 0xd8]
push eax
push 0
call fcn.1002d6de
add esp, 0x14
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x144]
call fcn.100014f4
and dword [ebp - 0x5c], 0
jmp 0x1002d0d4
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x5c], 2
jae 0x1002d245
mov dword [ebp - 0x28], 0x6db50520
push 1
lea ecx, [ebp - 0x158]
call fcn.10001471
mov byte [ebp - 4], 0xa
push 0x4033
lea eax, [ebp - 0x178]
push eax
push 0x145a
push 0x19c7
push 0x15d5
push 0x76ff
push 0x6ac2
push 0x445b
push 0x64aa
push 0x31d8
lea eax, [ebp - 0x158]
push eax
push 0
push 1
call fcn.1002f7ae
add esp, 0x34
push 0x303e
push 0x359a
push 0x3884
push 0x1550
push 0
push 0xd46
push 0x2b2f
push 0x7759
push 0x6dbe
push 0x5531
push 1
push 0x4f27
lea eax, [ebp - 0x28]
push eax
push 0x4572
push 0x457a
push 0x63d9
call fcn.10031820
add esp, 0x40
mov dword [ebp - 0x28], 0
jmp 0x1002d19e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x1002d1ea
push 0x2c68
push 0x26a5
push 0x1f4b
push 0x5019
push 1
lea eax, [ebp - 0x158]
push eax
push 0x5e4c
push 1
push 0x2470
push 0x25db
lea eax, [ebp - 0x28]
push eax
push 0x3666
push 0x4b9a
call fcn.1002c245
add esp, 0x34
jmp 0x1002d197
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x158]
call fcn.100014f4
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
add eax, dword [ebp - 0x30]
xor edx, edx
div dword [0x10076a40]
mov eax, dword [ebp - 0xac]
mov eax, dword [eax + 4]
movzx edx, byte [eax + edx]
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
add eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx]
movzx ecx, byte [ecx + eax]
call fcn.1000d42d
mov ecx, dword [ebp - 0xd4]
add ecx, dword [ebp - 0x5c]
mov byte [ecx], al
jmp 0x1002d0c6
push 1
push 0x6357
push 0x3d1c
push 0x6300
push 0x6304
push 0x75a8
push 0x1eaa
push 0
push 0x4cb6
lea eax, [ebp - 0x84]
push eax
push 0
lea eax, [ebp - 0x1b8]
push eax
call fcn.10030a9f
add esp, 0x30
jmp 0x1002ccdc
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x64], 0
jmp 0x1002d2a0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1002d2b6
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1c8], 0xfffffffd
jmp 0x1002d299
mov dword [ebp - 0x6c], 0
jmp 0x1002d2c6
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jg 0x1002d30c
mov byte [ebp - 0x1e], 0
push 1
push 0x44d6
push 0x34e4
push 0x6df2
push 0x5f0f
lea eax, [ebp - 0x1e]
push eax
push 0x62a0
push 1
push 0x30b3
push 0x6217
push 0
push 0x44ef
call fcn.10030a9f
add esp, 0x30
jmp 0x1002d2bf
lea eax, [ebp - 0x1b8]
push eax
mov ecx, dword [ebp - 0xe4]
call fcn.1000b207
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b8]
call fcn.1000145c
jmp 0x1002d3de
mov byte [ebp - 0x1d], 0
movzx eax, byte [ebp - 0x1d]
test eax, eax
je 0x1002d35b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1002d399
mov eax, dword [ebp + 8]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xec], eax
push 1
push dword [ebp - 0xec]
push 0x3b9c
push 0x424a
push dword [ebp - 0xf4]
push 0x3173
push 0x167a
call fcn.1002a8e0
add esp, 0x1c
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0xb4], 0x24b1
jge 0x1002d3b8
push dword [ebp - 0xfc]
call fcn.1004498a
pop ecx
jmp 0x1002d3d4
or dword [ebp - 4], 0xffffffff
jmp 0x1002d3de
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret