Function at 0x1002dbae
Capabilities:
Get disk information

Disassembly:
mov eax, 0x100628d7
call fcn.100615d8
sub esp, 0x310
push ebx
push esi
mov dword [ebp - 0x24], 0x8a61928c
xor ebx, ebx
push edi
mov dword [ebp - 0x2c], 0xb5cabfc3
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xec], edx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x24], 0xfffffff1
cmp dword [ebp - 0x24], 0x14
jl 0x1002dcb7
mov dword [ebp - 0x28], 0x5f28
cmp dword [ebp - 0x28], 0x6252
jle 0x1002dc4a
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov eax, edi
shl eax, cl
mov ecx, 0x1007dbf8
xor eax, esi
cdq
push edx
push eax
call fcn.100036f4
inc ebx
cmp ebx, 0x59a9
jl 0x1002dc0e
inc edi
push 0
pop ebx
cmp edi, 0x7bd9
jl 0x1002dc0b
inc esi
cmp esi, 0x5448
jl 0x1002dc09
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x28], 0x5db1
jge 0x1002dc65
mov edx, str.mwknxuq_wwcicczhn_ntaimv_scozfg_hvt_oott_rxaygu_qabqrmd_fcawggk_sluepbxsh_enss_nchjusmxc_npfx_cgy
mov ecx, 0x1007dbf8
call fcn.10007689
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002dca1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x260], 0x99c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002dc90
cmp dword [ebp - 0x25c], ebx
jne 0x1002dcb7
inc dword [ebp - 0x24]
jmp 0x1002dbed
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0xfffffffd
jl 0x1002dce8
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x2c], 0xc662a2b3
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002dcdf
call esi
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffd
jge 0x1002dcc6
mov dword [ebp - 0x18], 0x2e56
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x30], 0xffffffff
push 4
call fcn.100039a6
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x28], 0xbc46d767
mov dword [ebp - 0x40], 0x6e12
cmp dword [ebp - 0x40], 0x6e1d
jle 0x1002dd88
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x28], 0x3ca5
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x294]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002dd55
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x294]
call fcn.10003d33
inc edi
cmp edi, 0x5f3
jl 0x1002dd39
dec esi
dec dword [ebp - 0x28]
jne 0x1002dd37
mov esi, dword [ebp - 0x38]
inc esi
mov dword [ebp - 0x38], esi
cmp esi, 0x18f3
jl 0x1002dd2d
mov dword [ebp - 0x38], 0xef4fc6a3
cmp dword [ebp - 0x40], 0x6beb
jge 0x1002dda3
push str.fwxrw_zrbv_ugyixe
call fcn.1004a873
pop ecx
xor edx, edx
push 8
inc edx
mov dword [ebp - 0x24], edx
pop edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], 0x8d7
mov dword [ebp - 0x1c], ebx
jmp 0x1002ddce
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x118]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002ddbb
cmp dword [ebp - 0x18], ebx
je 0x1002dde2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x118]
inc eax
push 0xfffffffffffffff8
pop ecx
cmp ecx, eax
mov dword [esi + 0xc], eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xf4d4e2
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov dword [ebp - 0x28], ecx
je 0x1002de34
cmp dword [ebp - 0x28], ebx
jne 0x1002de36
mov edx, ebx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x18]
cmp eax, 0x1ddb
mov eax, dword [ebp - 0x18]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp edx, eax
mov eax, dword [ebp - 0x18]
sbb edx, edx
inc edx
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x18]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
je 0x1002deb8
cmp dword [ebp - 0x38], ebx
je 0x1002deb8
xor eax, eax
inc eax
jmp 0x1002deba
mov eax, ebx
cmp eax, dword [ebp - 0x18]
jle 0x1002dec2
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov ecx, 0xfffffd17
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x118]
sub ecx, dword [esi + 0xc]
or dword [ebp - 4], 0xffffffff
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x118]
call fcn.10003a29
xor eax, eax
mov dword [ebp - 0x64], 0x3d060d04
inc eax
mov dword [ebp - 0x60], 0x3023005
mov byte [ebp - 0x53], al
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 0x5c], 0x1c040d03
mov word [ebp - 0x58], 0xa95b
mov byte [ebp - 0x56], pe_nt_image_headers32
mov byte [ebp - 0x55], bl
mov byte [ebp - 0x54], 0x25
mov byte [ebp - 0x52], 0x2b
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], eax
push eax
call fcn.100039a6
xor edx, edx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1002df5c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], 0xba4d3ec9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002df4b
mov dword [ebp - 0x18], ebx
jmp 0x1002df79
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 0x2c6eb81f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002df66
mov dword [ebp - 0x34], ebx
jmp 0x1002e03e
mov dword [ebp - 0x24], 0xe76d238e
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x1c], ebx
jmp 0x1002dfaa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b8], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002df99
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x9c], eax
test eax, eax
jne 0x1002dfcc
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x9c]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setg dl
cmp edx, 0xf68993dd
sbb ecx, ecx
xor eax, eax
neg ecx
add ecx, dword [ebp - 0x24]
cmp esi, ecx
sete al
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, 0xc328129e
setne dl
cmp eax, edx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x30]
je 0x1002e01b
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x24]
inc edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1b0]
mov dword [eax], edx
dec dword [ebp - 0x38]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x1d
jle 0x1002df86
lea ecx, [ebp - 0x1b0]
call fcn.10003a29
push 0x61
pop eax
push 2
mov esi, ebx
mov word [ebp - 0x160], ax
pop edi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], edi
cmp edi, 0x13
jae 0x1002e73b
movzx eax, byte [ebp - 0x64]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1002e237
movdqa xmm0, xmmword [0x10070900]
lea eax, [ebp - 0x228]
mov dword [ebp - 0x34], 6
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x3c], 0x9e07
mov dword [ebp - 0x3c], 5
push dword [ebp - 0x3c]
movdqu xmmword [ebp - 0x238], xmm0
push eax
lea eax, [ebp - 0x238]
mov dword [ebp - 0xdc], ebx
push eax
push ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
call fcn.10008040
mov dword [ebp - 4], 5
mov dword [ebp - 0x1c], ebx
jmp 0x1002e0f5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 0xa1245c81
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002e0e4
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0xffffffe9
jl 0x1002e20c
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 4
lea ecx, [ebp - 0xa8]
call fcn.100039a6
mov byte [ebp - 4], 6
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002e13a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0x439beb06
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002e127
mov eax, dword [ebp - 0xa8]
mov dword [eax], 0xe
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002e15e
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
mov eax, dword [ebp - 0xa8]
dec dword [eax]
cmp dword [eax], 0xfffffff0
jne 0x1002e14c
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1002e1ed
mov esi, dword [ebp - 0xa8]
push 2
lea ecx, [ebp - 0x124]
call fcn.100039a6
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002e1a1
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002e192
mov eax, dword [ebp - 0x124]
mov dword [eax], ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x24]
mov dword [esi + 8], eax
mov eax, dword [ebp - 0xa8]
mov edx, dword [esi + 8]
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x2c], edx
inc dword [eax]
cmp dword [eax], 3
jle 0x1002e1af
lea ecx, [ebp - 0x124]
call fcn.10003a29
dec dword [ebp - 0x24]
jns 0x1002e17d
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 5
call fcn.10003a29
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe9
jge 0x1002e10e
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0xdc]
lea ecx, [ebp - 0xdc]
dec dword [eax + 0xc]
or dword [ebp - 4], 0xffffffff
call fcn.10003a29
movzx eax, byte [ebp + edi - 0x64]
dec edi
add edi, eax
lea esi, [eax + 1]
mov dword [ebp - 0x38], esi
jmp 0x1002e733
mov dword [ebp - 0x18], 6
lea ecx, [ebp - 0x1d8]
mov dword [ebp - 0x28], 0x50b5f0b1
mov dword [ebp - 0x2c], 0x1a1f
push 1
call fcn.100039a6
xor edx, edx
mov dword [ebp - 4], 7
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1002e278
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1d8]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1002e268
mov dword [ebp - 0x18], edx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setge cl
sub eax, ecx
je 0x1002e2ae
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x18]
jge 0x1002e2c6
cmp dword [ebp - 0x2c], ebx
je 0x1002e2c6
xor eax, eax
inc eax
jmp 0x1002e2c8
mov eax, ebx
cmp eax, dword [ebp - 0x18]
je 0x1002e394
mov dword [ebp - 0x18], 0xfffffffa
cmp dword [ebp - 0x18], 0x23
je 0x1002e3ea
mov dword [ebp - 0x28], 0x7f14
cmp dword [ebp - 0x28], 0x82cc
jle 0x1002e351
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x2dc]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e311
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10003d33
inc esi
cmp esi, 0x6ccd
jl 0x1002e2f6
inc edi
cmp edi, 0x7835
jl 0x1002e2f4
push ebx
push ebx
push 0x219f
push 0xe9b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002e371
push ebx
push 0x17d6
push ebx
push 0x336
push 0x1b56
call dword [sym.imp.GDI32.dll_ExtCreatePen]
cmp dword [ebp - 0x28], 0x7b72
jge 0x1002e385
push str.cwm_gjqfmrhpa_wxuf_gquwstubc_hyccfodqy_hfcgyx_plsztz_cxrklp_rswrg_gzndorrcv_ecgocieg_wuqpjtgo
call fcn.1004a873
pop ecx
mov dword [ebp - 4], 7
inc dword [ebp - 0x18]
jmp 0x1002e2d8
mov dword [ebp - 0x2c], 0xfffffff6
cmp dword [ebp - 0x28], ebx
je 0x1002e3ce
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x1002e3e1
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002e3c1
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_EndPaint]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002e3ae
mov esi, dword [ebp - 0x38]
jmp 0x1002e3e1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002e3e1
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov dword [ebp - 0x2c], 1
jmp 0x1002e3f0
mov esi, dword [ebp - 0x38]
mov edi, dword [ebp - 0x30]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d8]
call fcn.10003a29
movzx edx, byte [ebp + edi - 0x63]
mov eax, edi
sub eax, esi
push 3
movzx eax, byte [ebp + eax - 0x66]
movzx eax, word [ebp + eax*2 - 0x168]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x64]
mov word [ebp + eax*2 - 0x168], cx
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x24], 0xad43
mov dword [ebp - 0x38], 0x7909b792
mov dword [ebp - 0x2c], 0x8e22
call fcn.100039a6
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x3c], 0x9a67b9c5
mov dword [ebp - 0x1c], 0xace
cmp dword [ebp - 0x1c], 0xbd3
jle 0x1002e4da
push ebx
push 0xbda
push ebx
push ebx
push 0xdaf
push 0x1d2e
push 0xa5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x28], 0x2f28
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007dbf8
cdq
push edx
push eax
call fcn.100036f4
inc edi
cmp edi, 0x3671
jl 0x1002e4a6
dec esi
dec dword [ebp - 0x28]
jne 0x1002e4a4
mov esi, dword [ebp - 0x40]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x6144
jl 0x1002e49a
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x40], 6
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x1c], 0x762
jge 0x1002e51e
mov edx, str.joq_obewrcy_nrburxs_ufrbp_nnwv_ihiqzo_dkrowzop_cenwxqjcp_mzd_uvmn
mov ecx, 0x1007dbf8
call fcn.10007689
jmp 0x1002e51e
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], 0x7500
cmp dword [ebp - 0x18], 0x78d3
jle 0x1002e5cd
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov esi, ebx
mov ecx, edi
mov ebx, eax
mov dword [ebp - 0x1c], esi
shl ebx, cl
mov edi, esi
mov esi, 0x16c2
mov eax, edi
mov ecx, 0x1007dbf8
and eax, ebx
cdq
push edx
push eax
call fcn.100036f4
dec edi
dec esi
jne 0x1002e555
mov esi, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x1c], esi
cmp esi, 0x80a
jl 0x1002e54e
mov edi, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
inc edi
mov dword [ebp - 0x34], edi
push 0
pop ebx
cmp edi, 0x5e33
jl 0x1002e543
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x67bc
jl 0x1002e53e
push ebx
push 0x103b
push 0xb7d
push 0x22a0
push 0x5d8
push 0x1e6d
push 0x70a
push 0x1b83
push 0x8d5
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x28], 0x29794902
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x18], 0x723c
jge 0x1002e611
mov edx, str.ria_thqnpb_weowmexe
mov ecx, 0x1007dbf8
call fcn.10007689
jmp 0x1002e611
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], ebx
jmp 0x1002e62e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xfc], 0x7e71f09a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002e61d
mov dword [ebp - 0x18], ebx
jmp 0x1002e64c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 0xfffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e639
mov eax, dword [ebp - 0x180]
inc dword [eax + 4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x40], ebx
je 0x1002e6c9
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x24], 0xfffffffe
jmp 0x1002e6b7
cmp dword [ebp - 0x3c], ebx
jne 0x1002e6bd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x32
jge 0x1002e6af
mov dword [ebp - 0xf4], 9
jmp 0x1002e71f
push dword [ebp - 0xd0]
movdqa xmm0, xmmword [0x10070870]
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x248]
mov dword [ebp - 0xe8], ebx
push eax
push ebx
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xe4], ebx
movdqu xmmword [ebp - 0x248], xmm0
mov dword [ebp - 0xe0], ebx
call fcn.10008040
mov eax, dword [ebp - 0xe8]
lea ecx, [ebp - 0xe8]
dec dword [eax + 4]
call fcn.10003a29
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x180]
call fcn.10003a29
mov esi, ebx
mov dword [ebp - 0x38], ebx
add edi, 2
jmp 0x1002e065
xor eax, eax
mov word [ebp - 0x15a], ax
mov dword [ebp - 0x18], 0xf75d
cmp dword [ebp - 0x18], ebx
je 0x1002e772
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], al
je 0x1002e81e
push 0x942
push 0xa44
push ebx
call dword [sym.imp.USER32.dll_OffsetRect]
jmp 0x1002e81e
mov dword [ebp - 0x1c], ebx
jmp 0x1002e785
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], 0xc4d8e5cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002e777
mov dword [ebp - 0x18], ebx
jmp 0x1002e814
cmp dword [ebp - 0x48], ebx
jne 0x1002e79b
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x4c]
imul eax, dword [ebp - 0x18]
test eax, eax
je 0x1002e7ad
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x18]
inc edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
sub edx, eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x4c]
mov ecx, dword [ebp - 0x18]
imul ecx, edx
sub ecx, eax
jne 0x1002e7e1
cmp dword [ebp - 0x18], ebx
jne 0x1002e7e1
mov ecx, ebx
jmp 0x1002e7e4
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x4c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x4c]
cmp eax, edx
mov eax, dword [ebp - 0x48]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
mov dword [ebp + eax*4 - 0x4c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jle 0x1002e793
xor eax, eax
mov dword [ebp - 0x1dc], 7
mov word [ebp - 0x1f0], ax
lea ecx, [ebp - 0x1f0]
lea eax, [ebp - 0x168]
mov dword [ebp - 0x1e0], ebx
push eax
call fcn.1000c006
push dword [ebp - 0xec]
mov dword [ebp - 4], 0xf
lea edi, [ebp - 0x168]
xor eax, eax
lea ecx, [ebp - 0x228]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10003809
mov byte [ebp - 4], 0x10
mov eax, 0x8ade19d2
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x3c], 0x4e6d4f28
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x2c], 0xf5e3d1aa
mov dword [ebp - 0x2c], 0x8ef8a6eb
mov dword [ebp - 0x18], ebx
jmp 0x1002e8c0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x26c], 0x623b4709
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e8af
mov dword [ebp - 0x18], ebx
jmp 0x1002e8d9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1002e8cb
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xfffffff3
cmp dword [ebp - 0x30], 0xffffffff
jg 0x1002ea10
mov dword [ebp - 0x1c], 0x64a11600
xor ecx, ecx
mov dword [ebp - 0x2c], 4
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x268], edx
mov eax, dword [ebp - 0x7c]
cmp eax, 0xfffffffd
setg cl
mov dword [ebp - 0x2c], ecx
cmp edx, dword [ebp - 0x2c]
je 0x1002e932
cmp dword [ebp - 0x154], ebx
jne 0x1002e932
mov ecx, ebx
jmp 0x1002e935
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x7c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x7c]
sete dl
sub edx, 0xffff
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
setg dl
add ecx, 0x2db8e964
add ecx, edx
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
add edx, 0xb
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0x7cbb
cmp dword [ebp - 0x2c], 0x7dcc
jle 0x1002e9e8
push ebx
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
mov edi, ebx
mov esi, ebx
lea eax, [esi + edi]
cdq
lea ecx, [ebp - 0x2ac]
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002e9c1
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2ac]
call fcn.10003d33
inc esi
cmp esi, 0x2a5b
jl 0x1002e9a6
inc edi
cmp edi, 0x2b4b
jl 0x1002e9a4
cmp dword [ebp - 0x1c], ebx
jne 0x1002ea10
cmp dword [ebp - 0x2c], 0x7a58
jge 0x1002ea01
push str.ufxuhppo_gfh_ygfstals_luh_cwz_sjnybdz_rmsuvxt_passdsbfy_xwovmp
call fcn.1004a873
pop ecx
mov dword [ebp - 4], 0x10
inc dword [ebp - 0x30]
jmp 0x1002e8f2
mov dword [ebp - 0x38], 0xfffffff6
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x30], 0xa61bf079
push 1
call fcn.100039a6
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], 0xbb35b689
mov dword [ebp - 0x1c], ebx
jmp 0x1002ea75
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x198]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002ea66
mov dword [ebp - 0x40], 0x549e
cmp dword [ebp - 0x40], 0x57be
jle 0x1002eaeb
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x2c], 0x536b
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x2c4]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002eab8
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10003d33
inc edi
cmp edi, 0x6d29
jl 0x1002ea9c
dec esi
dec dword [ebp - 0x2c]
jne 0x1002ea9a
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0xf97
jl 0x1002ea90
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x104], eax
test eax, eax
jne 0x1002eb1f
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x1002eb1f
mov ecx, ebx
jmp 0x1002eb22
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x198]
mov dword [eax], ecx
cmp ecx, dword [ebp - 0x30]
jg 0x1002eb38
cmp dword [ebp - 0x24], ebx
je 0x1002eb38
mov ecx, ebx
jmp 0x1002eb3b
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x30]
neg ecx
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x40], 0x50ba
jge 0x1002eb5e
push str.ttsxkmczj_tsg_cii_giq_pbokw_kpeygpvm_mwly_qxpg_uydvefw_ecbhnxoh_epfabf_jakav
call fcn.1004a873
pop ecx
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], 0x10
call fcn.10003a29
mov eax, 0x469ad59e
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], eax
push 3
call fcn.100039a6
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x2c], 2
push 3
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002ebb8
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002ebab
mov dword [ebp - 0x18], ebx
jmp 0x1002ebd5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0x2a5bc422
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002ebc2
mov dword [ebp - 0x6c], ebx
jmp 0x1002ee22
mov dword [ebp - 0x18], 0xc80ae7b1
mov dword [ebp - 0x3c], 0xf5d9aeb8
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x8c], ebx
je 0x1002ecb5
mov eax, dword [ebp - 0x6c]
xor edx, edx
mov esi, dword [ebp - 0xcc]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x6c]
setg dl
mov dword [esi + 8], ebx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x8c]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
sub ecx, dword [esi + 8]
sub ecx, eax
je 0x1002ec3e
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x88]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x6c]
setge cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x8c]
cmp dword [ebp - 0x3c], eax
setl cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setle dl
sub edx, eax
xor eax, eax
cmp edx, 0x1e7bf5cb
setge al
sub eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x8c]
jl 0x1002ecb5
xor ecx, ecx
mov eax, ebx
inc ecx
jmp 0x1002ecba
xor ecx, ecx
inc ecx
mov eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x6c]
jg 0x1002ee08
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1002edfc
mov dword [ebp - 0x38], 0x53d0c964
mov dword [ebp - 0x1c], ebx
jmp 0x1002ecf4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1cc], 0xaeb8f83f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002ece3
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1002edf4
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x174]
push 4
call fcn.100039a6
mov dword [ebp - 0x2c], 0xea9b924e
mov dword [ebp - 0x1c], ebx
jmp 0x1002ed39
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002ed26
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xcc]
cmp dword [eax + ecx*4], ebx
je 0x1002ed76
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x6c]
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x24]
cmp dword [ecx + esi*4], eax
mov eax, dword [ebp - 0xcc]
setl dl
mov dword [eax + edi*4], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x8c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x174]
mov dword [eax + 8], 1
cmp dword [ebp - 0x1c4], ebx
je 0x1002ed9e
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c4]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x3c], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ede0
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
lea ecx, [ebp - 0x174]
call fcn.10003a29
dec dword [ebp - 0x18]
jns 0x1002ed0a
cmp dword [ebp - 0x30], ebx
jne 0x1002ee1f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
je 0x1002ecd7
jmp 0x1002ee1f
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ee1f
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
inc dword [ebp - 0x6c]
cmp dword [ebp - 0x6c], 2
jle 0x1002ebe2
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002ee42
push ebx
push 0x1802
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 0x10
call fcn.10003a29
push 0x5c
pop eax
mov byte [ebp - 0x44], bl
mov word [ebp - 0x43], 0x108
mov byte [ebp - 0x41], 0xf6
mov word [ebp - 0x50], ax
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x28], ebx
push 4
lea ecx, [ebp - 0xb4]
call fcn.100039a6
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1002eeab
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb4]
mov dword [eax + ecx*4], 0x20f8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002ee98
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x2c], ecx
mov eax, dword [ecx + 4]
mov edi, dword [ecx + 0xc]
mov esi, dword [ecx + 8]
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
sub edx, edi
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
mov edx, dword [ebp - 0x2c]
setl cl
xor eax, eax
cmp ecx, esi
setg al
xor ecx, ecx
cmp dword [edx + 4], eax
setg cl
xor eax, eax
cmp ecx, esi
mov esi, dword [edx + 8]
setle al
xor ecx, ecx
imul eax, eax, 0xffff
cmp eax, edi
mov eax, dword [ebp - 0x30]
setl cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0xffff
sbb eax, eax
neg eax
cmp eax, 0xe11a796d
sbb eax, eax
xor ecx, ecx
inc eax
cmp esi, eax
mov eax, dword [ebp - 0x34]
setg cl
xor edx, edx
add ecx, 9
cmp ecx, 0xc3d21462
setne dl
xor ecx, ecx
sub edx, esi
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setge cl
mov eax, dword [eax + 8]
add eax, eax
sub eax, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x34], ebx
jmp 0x1002efd9
mov dword [ebp - 0x3c], 0xffff
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1002efd6
mov dword [ebp - 0x1c], ebx
jmp 0x1002ef84
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c0], 1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002ef73
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], ebx
jl 0x1002efbf
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb4]
mov edx, dword [ebp - 0xb4]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x30]
jns 0x1002ef96
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x24]
jns 0x1002ef6e
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x1002ef5b
lea ecx, [ebp - 0xb4]
call fcn.10003a29
mov esi, dword [ebp - 0x38]
cmp esi, 2
jne 0x1002effb
mov dword [ebp - 0x28], esi
jmp 0x1002f024
movzx edx, byte [ebp + esi - 0x43]
mov eax, esi
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], ebx
movzx eax, byte [ebp + eax - 0x46]
movzx eax, word [ebp + eax*2 - 0x50]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x44]
mov word [ebp + eax*2 - 0x50], cx
add esi, 2
mov dword [ebp - 0x38], esi
cmp esi, 4
jb 0x1002ee6f
xor eax, eax
mov dword [ebp - 0x134], 7
mov word [ebp - 0x4e], ax
lea ecx, [ebp - 0x148]
mov word [ebp - 0x148], ax
lea eax, [ebp - 0x50]
push eax
mov dword [ebp - 0x138], ebx
call fcn.1000c006
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x30], 0xdb3ae355
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x3c], 0x88d0d3f7
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x2513244d
mov dword [ebp - 0x1c], 0x258a
cmp dword [ebp - 0x1c], 0x28d8
jle 0x1002f111
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov edx, eax
mov ecx, esi
shl edx, cl
mov edi, ebx
mov dword [ebp - 0x38], edx
mov esi, ebx
mov dword [ebp - 0x2c], 0x70a3
mov eax, esi
lea ecx, [ebp - 0x2f4]
and eax, edx
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f0cc
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2f4]
call fcn.10003d33
mov edx, dword [ebp - 0x38]
add esi, edi
dec dword [ebp - 0x2c]
jne 0x1002f0b0
inc edi
cmp edi, 0x263f
jl 0x1002f0a7
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x32cf
jl 0x1002f09c
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5651
jl 0x1002f097
or esi, 0xffffffff
mov dword [ebp - 0x3c], esi
cmp dword [ebp - 0x1c], 0x2501
jge 0x1002f12b
push str.jvrpj_cng_katw
call fcn.1004a873
pop ecx
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002f14a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x300], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002f13d
mov dword [ebp - 0x30], 0x16
jmp 0x1002f19f
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002f17c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1f8], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1002f16b
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x28]
cmp eax, 0xfff9
jbe 0x1002f194
xor eax, eax
inc eax
jmp 0x1002f196
mov eax, ebx
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x2c]
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffed
jl 0x1002f159
push 0x5f
pop eax
mov word [ebp - 0x78], ax
lea ecx, [ebp - 0x210]
xor eax, eax
mov dword [ebp - 0x50], ebx
mov word [ebp - 0x76], ax
mov word [ebp - 0x210], ax
lea eax, [ebp - 0x78]
push eax
mov byte [ebp - 0x80], bl
mov byte [ebp - 0x7f], 0xb5
mov dword [ebp - 0x1fc], 7
mov dword [ebp - 0x200], ebx
call fcn.1000c006
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x3c], 0xbf5cd53b
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x2c], 0xfffffff8
push 1
call fcn.100039a6
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x3c], 0x4093
mov dword [ebp - 0x18], ebx
jmp 0x1002f225
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x98], 0x68ec0ae9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002f214
mov dword [ebp - 0x18], ebx
jmp 0x1002f23f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1002f230
mov dword [ebp - 0x18], ebx
jmp 0x1002f25b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x27c], 0xa81d68c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002f24a
mov dword [ebp - 0x98], ebx
jmp 0x1002f333
push 1
lea ecx, [ebp - 0x130]
call fcn.100039a6
mov dword [ebp - 0x2c], ebx
xor edx, edx
mov dword [ebp - 0x2c], 0x6d4f509e
inc edx
mov dword [ebp - 0x38], 0xcbf6
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x1c], ebx
jmp 0x1002f2a8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1002f299
dec dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x18c]
mov edx, dword [eax]
test edx, edx
setne cl
xor eax, eax
cmp ecx, 0x4b4f
setne al
xor ecx, ecx
cmp edx, eax
setne cl
inc ecx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp edx, 0x6b9ec499
setge al
cmp eax, ecx
jle 0x1002f2f0
cmp dword [ebp - 0x3c], ebx
je 0x1002f2f0
xor eax, eax
inc eax
jmp 0x1002f2f2
mov eax, ebx
inc dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x270]
mov eax, dword [ebp - 0x130]
jne 0x1002f31d
cmp dword [eax], ebx
jne 0x1002f31d
mov ecx, ebx
jmp 0x1002f320
xor ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x130]
call fcn.10003a29
dec dword [ebp - 0x98]
cmp dword [ebp - 0x98], 0xfffffffb
jg 0x1002f26c
mov dword [ebp - 0x3c], 0x267a5e2b
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 0x1a
call fcn.10003a29
push 4
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x78], ebx
call fcn.100039a6
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x18], 0x22ba3946
mov dword [ebp - 0x28], 0x2e77e815
mov dword [ebp - 0x34], 0xa41b8700
mov dword [ebp - 0x1c], ebx
jmp 0x1002f397
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002f384
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x1002f6dc
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1002f4c7
mov dword [ebp - 0x1c], 0x2cf3e4c9
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], 0x9e62b560
cmp dword [ebp - 0x34], ebx
je 0x1002f41c
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0xac3e
inc dword [ebp - 0x2c]
jmp 0x1002f4b9
mov dword [ebp - 0x40], 8
xor edx, edx
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setge dl
cmp dword [ebp - 0x38], edx
jl 0x1002f441
cmp dword [ebp - 0x1c], ebx
jne 0x1002f441
mov eax, ebx
jmp 0x1002f444
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x1c]
add eax, 3
mov esi, dword [ebp - 0x40]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setge dl
add eax, edx
add esi, eax
sub esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp eax, esi
setne cl
cmp ecx, 0x2eeda7d
jl 0x1002f47e
cmp dword [ebp - 0x1c], ebx
jne 0x1002f47e
mov eax, ebx
jmp 0x1002f481
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x24]
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx + 0xc]
mov dword [edx + esi*4], eax
mov eax, dword [ebp - 0x30]
dec eax
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp dword [edx + esi*4], eax
mov eax, dword [ebp - 0x40]
setge cl
sub ecx, eax
or esi, 0xffffffff
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x34], ebx
jne 0x1002f4c7
dec dword [ebp - 0x24]
jns 0x1002f3c3
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 3
jg 0x1002f6d1
push 4
lea ecx, [ebp - 0x1a4]
call fcn.100039a6
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x38], 0x1035
cmp dword [ebp - 0x38], 0x11a5
jle 0x1002f57a
push ebx
call dword [sym.imp.USER32.dll_CharNextW]
mov dword [ebp - 0x28], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
mov ecx, ebx
cdq
idiv esi
mov dword [ebp - 0x2c], ecx
mov eax, edx
mov dword [ebp - 0x3c], eax
sar eax, cl
lea ecx, [ebp - 0x318]
or eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.10001a6a
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f533
mov eax, dword [eax]
push eax
call fcn.1004a873
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x318]
call fcn.10003d33
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x1f77
jl 0x1002f516
inc esi
cmp esi, 0x7b8a
jl 0x1002f507
inc edi
cmp edi, 0x5f59
jl 0x1002f505
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x12ba
jl 0x1002f503
cmp dword [ebp - 0x38], 0xee8
jge 0x1002f58e
push str.eccrds_bsm_ruxltaej_zecbexee
call fcn.1004a873
pop ecx
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x34], ebx
jmp 0x1002f5ab
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x254], 2
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x1002f59a
mov dword [ebp - 0x34], ebx
jmp 0x1002f5c9
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0x4210
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x1002f5b6
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002f5f6
push 0x124d
push 0x1ad0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov dword [ebp - 0x34], ebx
jmp 0x1002f6b0
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002f610
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xc0]
cmp dword [eax + ecx*4], ebx
je 0x1002f6a2
cmp dword [ebp - 0x24c], 0xfffb
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0xc0]
sbb eax, eax
neg eax
imul eax, eax, 0x7b98
push 0
add esi, eax
mov eax, dword [ebp - 0x18]
sub esi, dword [edi + 4]
neg esi
mov dword [ebp - 0x38], eax
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
sbb esi, esi
mov ecx, dword [ebp - 0xc0]
inc esi
neg esi
neg esi
sbb esi, esi
neg esi
imul eax, esi
cmp dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x1a4]
pop edx
setl dl
xor ecx, ecx
cmp edx, 0x8f5b
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x24]
setle cl
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, dword [edi + 4]
setl al
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
je 0x1002f6a2
xor eax, eax
inc eax
jmp 0x1002f6a4
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x1002f5fe
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x1c
call fcn.10003a29
inc dword [ebp - 0x30]
jmp 0x1002f4ca
inc dword [ebp - 0x18]
or esi, 0xffffffff
jmp 0x1002f3a0
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x1a
call fcn.10003a29
push 8
pop edi
push dword [ebp - 0x138]
cmp dword [ebp - 0x134], edi
lea eax, [ebp - 0x148]
push ebx
cmovae eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x228]
push eax
call fcn.1002fa53
cmp eax, esi
je 0x1002f731
push esi
push ebx
lea ecx, [ebp - 0x210]
push ecx
push 1
push eax
lea ecx, [ebp - 0x228]
call fcn.10017f27
jmp 0x1002f6ee
mov dword [ebp - 0x28], 0xc68ec0ae
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x2c], 0x23b0
cmp dword [ebp - 0x2c], 0x2562
jle 0x1002f775
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1007dbf8
cdq
push edx
push eax
call fcn.100036f4
inc edi
cmp edi, 0x3a14
jl 0x1002f753
inc esi
cmp esi, 0x6ec2
jl 0x1002f751
mov byte [ebp - 0x1d], bl
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x2c], 0x2202
jge 0x1002f7b2
mov edx, str.qovazb_momvflar_cdr_cxifdmmxo_fuqjied_mhin_ipbhuwi_odubbb_orukvs_cktmwftb_iucaus
mov ecx, 0x1007dbf8
call fcn.10007689
jmp 0x1002f7b2
mov dword [ebp - 4], 0x1a
cmp byte [ebp - 0x1d], 0
je 0x1002f7c9
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x28], 0xffffffe5
jmp 0x1002f7e6
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002f7e3
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadMenuW]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffeb
jl 0x1002f7d2
mov ecx, dword [ebp - 0x90]
lea eax, [ebp - 0x228]
push eax
lea edx, [ebp - 0x1f0]
call fcn.1002faf6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x210]
call fcn.1000400a
push ebx
push 1
lea ecx, [ebp - 0x148]
call fcn.1000400a
push ebx
push 1
lea ecx, [ebp - 0x228]
call fcn.1000400a
push ebx
push 1
lea ecx, [ebp - 0x1f0]
call fcn.1000400a
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x90]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret