Function at 0x1002b335
Capabilities:
Set environment variable
Start service

Disassembly:
mov eax, 0x10062ec5
call fcn.10061bc4
sub esp, 0x270
mov dword [ebp - 0x24], 0x8901
mov dword [ebp - 0x2c], 0x49c9fb37
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x24], 9
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
push ebx
xor ebx, ebx
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x24], 0x8d383303
mov dword [ebp - 0x94], edx
sbb eax, eax
mov dword [ebp - 0x198], ebx
inc eax
xor ecx, ecx
cmp eax, 0x2fd2
mov eax, dword [ebp - 0x24]
push esi
setne cl
xor edx, edx
cmp eax, ecx
push edi
setne dl
mov dword [ebp - 0x10], esp
xor eax, eax
cmp edx, 1
setge al
xor ecx, ecx
sub eax, 4
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x34]
setge cl
xor edx, edx
inc edx
cmp ecx, edx
mov ecx, dword [ebp - 0x30]
sbb eax, eax
neg eax
sub ecx, eax
dec ecx
neg ecx
sbb ecx, ecx
or edi, 0xffffffff
inc ecx
cmp ecx, edi
jge 0x1002b3fc
cmp dword [ebp - 0x24], ebx
je 0x1002b3fc
cmp dword [ebp - 0x30], ebx
je 0x1002b3fc
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1002b3ea
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], bl
je 0x1002b461
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x1002b461
mov dword [ebp - 0x30], 0x8cd54673
mov dword [ebp - 0x1c], 0x279e56e6
mov dword [ebp - 0x40], 0xdf47f28a
mov dword [ebp - 0x34], 0xca862934
mov dword [ebp - 0x34], 0x41adf890
cmp dword [ebp - 0x24], ebx
jne 0x1002b44e
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setl cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x34], ecx
inc edx
mov ecx, ebx
jmp 0x1002b450
mov ecx, edx
mov eax, dword [ebp - 0x30]
add eax, ecx
je 0x1002b45c
cmp dword [ebp - 0x1c], ebx
jne 0x1002b45e
mov edx, ebx
mov dword [ebp - 0x34], edx
push dword [ebp - 0x38]
movdqa xmm0, xmmword [0x10070e60]
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0xb8], ebx
push eax
push ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xb4], ebx
movdqu xmmword [ebp - 0x1dc], xmm0
mov dword [ebp - 0xb0], ebx
call fcn.10001fc0
push 2
pop esi
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x194]
mov dword [ebp - 0x38], 7
push esi
call fcn.10001ed7
mov dword [ebp - 0x38], 0x307976b5
mov dword [ebp - 0x38], 0x214c259d
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002b4e2
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x194]
mov dword [eax + ecx*4], 0x801465ee
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002b4cf
mov eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0x194]
mov dword [eax], ebx
call fcn.10001f5a
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], edi
call fcn.10001f5a
mov dword [ebp - 0x70], 0x3e03d506
xor edx, edx
mov dword [ebp - 0x6c], 0x28022500
inc edx
mov dword [ebp - 0x68], 0xd050e04
mov byte [ebp - 0x64], dl
mov dword [ebp - 0x63], 0xe5f80200
mov dword [ebp - 0x24], 0xad313dd3
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x24], 0xfffffff4
jmp 0x1002b602
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x18], 0x18
jmp 0x1002b587
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x34], 0x834d8a94
mov dword [ebp - 0x1c], ebx
jmp 0x1002b57e
mov dword [ebp - 0x34], 0xbd035c57
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jne 0x1002b574
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 6
jge 0x1002b561
mov dword [ebp - 0x18], 0xfffffff8
cmp dword [ebp - 0x18], 0xffffffed
jg 0x1002b5ff
mov dword [ebp - 0x1c], 0xd907c4e7
mov eax, 0xc4aee507
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x73637828
sub ecx, dword [ebp - 0x40]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
jne 0x1002b5c2
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1002b5c4
mov ecx, edx
mov eax, dword [ebp - 0x3c]
sub ecx, eax
mov eax, dword [ebp - 0x18]
add ecx, 3
cmp edx, ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jne 0x1002b5e6
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xbbda73a1
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffed
push 1
pop edx
jle 0x1002b59a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xe
jl 0x1002b54e
movdqa xmm0, xmmword [0x10070e40]
lea ecx, [ebp - 0xac]
push 0x5c
pop eax
push dword [ebp - 0x38]
mov word [ebp - 0xf8], ax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1cc]
mov dword [ebp - 0xac], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1cc], xmm0
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xa4], ebx
call fcn.10001fc0
push 2
xor edi, edi
lea ecx, [ebp - 0x158]
pop esi
inc edi
push esi
mov dword [ebp - 4], edi
call fcn.10001ed7
mov dword [ebp - 0x1c], ebx
jmp 0x1002b682
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0xdead9bac
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002b66f
mov eax, dword [ebp - 0xac]
lea ecx, [ebp - 0x158]
mov dword [eax], ebx
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac]
call fcn.10001f5a
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], 0xe1f6f084
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x2c], 0x160cbeb9
mov dword [ebp - 0x2c], 9
push esi
call fcn.10001ed7
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x140]
mov dword [ebp - 0x2c], 0xffffffff
push esi
call fcn.10001ed7
mov dword [ebp - 0x34], 0xb79dc866
mov dword [ebp - 0x18], ebx
jmp 0x1002b701
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002b6f2
mov dword [ebp - 0x18], ebx
jmp 0x1002b71e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0x758b39d2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002b70b
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jne 0x1002b735
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x128]
mov dword [eax], ecx
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x140]
sub edx, 0xcea445a8
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [eax], edx
mov eax, dword [ebp - 0x28]
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x140]
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128]
call fcn.10001f5a
mov eax, dword [ebp - 0x1c]
cmp eax, 0xe
jne 0x1002b7a9
push 0xf
mov dword [ebp - 0x30], 3
pop eax
jmp 0x1002b7dc
movzx edx, byte [ebp + eax - 0x6f]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], ebx
movzx eax, byte [ebp + eax - 0x72]
movzx eax, word [ebp + eax*2 - 0x104]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x70]
mov word [ebp + eax*2 - 0x104], cx
mov eax, dword [ebp - 0x1c]
add eax, esi
mov dword [ebp - 0x1c], eax
cmp eax, 0x11
jb 0x1002b6af
xor eax, eax
lea ecx, [ebp - 0x110]
push edi
mov word [ebp - 0xf6], ax
call fcn.10001ed7
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x38], 0x53d42374
push esi
call fcn.10001ed7
mov dword [ebp - 0x38], 0x7647f1a
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x38], 0xc6548aa
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x1002b869
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0x91a049fe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002b856
mov dword [ebp - 0x18], ebx
jmp 0x1002b886
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a4]
mov dword [eax + ecx*4], 0xfffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002b873
mov dword [ebp - 0x18], ebx
jmp 0x1002b8a1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x248], 0xec0dcee0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002b890
mov eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x1a4]
mov dword [eax], 0xffffffea
call fcn.10001f5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x110]
call fcn.10001f5a
xor eax, eax
mov dword [ebp - 0x174], 7
mov word [ebp - 0x188], ax
lea ecx, [ebp - 0x188]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x178], ebx
push eax
call fcn.1002a447
mov dword [ebp - 4], 5
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x2c], 0x6b09
cmp dword [ebp - 0x2c], 0x6c4f
jle 0x1002b947
mov edi, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
mov ecx, 0x1007f138
cdq
idiv ebx
mov eax, edx
cdq
push edx
push eax
call fcn.10002c1c
inc ebx
cmp ebx, 0x4f34
jl 0x1002b91e
inc edi
push 0
pop ebx
cmp edi, 0x3a79
jl 0x1002b91b
mov dword [ebp - 0x38], 0x62bb2c59
mov byte [ebp - 4], 6
cmp dword [ebp - 0x2c], 0x673c
jge 0x1002b98b
mov edx, str.ymboo_ttwv_sufyro_ehsc_iey_miuzvka_aqyudjgvj_kbws_mywdgn
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1002b98b
mov dword [ebp - 4], 5
lea eax, [ebp - 0x1dc]
movdqa xmm0, xmmword [str._b_b_b_b_t_t_t_t]
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x38], 0x2f1e5c8a
push dword [ebp - 0x38]
movdqu xmmword [ebp - 0x1ec], xmm0
push eax
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0xdc], ebx
push eax
push ebx
mov dword [ebp - 0xd8], ebx
mov dword [ebp - 0xd4], ebx
call fcn.10001fc0
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x1002b9ea
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x44], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002b9e0
mov dword [ebp - 0x18], ebx
jmp 0x1002ba92
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xcedb7758
mov dword [ebp - 0x38], 0x78cca699
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], ebx
je 0x1002ba3c
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setg dl
sub eax, 0xd035
imul eax, edx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x44]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], ecx
mov dword [ebp - 0x28], ebx
jmp 0x1002ba8a
mov dword [ebp - 0x1c], ebx
jmp 0x1002ba6e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x20c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002ba5d
mov dword [ebp - 0x24], ebx
jmp 0x1002ba82
inc dword [ebp - 0x204]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1002ba79
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x1002ba58
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002b9f7
lea ecx, [ebp - 0xdc]
call fcn.10001f5a
xor eax, eax
lea edi, [ebp - 0x104]
stosd dword es:[edi], eax
lea ecx, [ebp - 0xa0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor edi, edi
mov dword [ebp - 0x24], 0xffffffff
inc edi
mov dword [ebp - 0x28], 0xaafbebf0
mov dword [ebp - 0x30], 0xaaf19195
push edi
call fcn.10001ed7
mov byte [ebp - 4], 8
xor edx, edx
mov dword [ebp - 0x1c], 6
inc edx
mov dword [ebp - 0x3c], 0xae792f69
mov dword [ebp - 0x38], 0xa6c6106a
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x34], 0x552b
mov dword [ebp - 0x18], ebx
jmp 0x1002bb12
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x218], 0x32a2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002bb01
mov dword [ebp - 0x18], ebx
jmp 0x1002bb30
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002bb1d
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 7
je 0x1002be05
xor edi, edi
inc edi
push esi
lea ecx, [ebp - 0x80]
call fcn.10001ed7
push esi
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 9
call fcn.10001ed7
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x2c], 0xfc518f82
push 2
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1002bb87
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0x25260
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002bb77
mov dword [ebp - 0x18], ebx
jmp 0x1002bba4
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002bb91
mov eax, dword [ebp - 0x80]
mov esi, dword [ebp - 0xc4]
mov dword [ebp - 0x3c], esi
mov dword [eax], edx
mov dword [ebp - 0x2c], 0xdf2e
cmp dword [eax], ebx
je 0x1002bbd8
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002bbef
push 0x632
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x1002bbef
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], ebx
jmp 0x1002bbea
mov dword [esi + 4], 0x5e81a7ec
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x1002bbe0
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xed16
mov eax, dword [ebp - 0x210]
setle cl
xor edx, edx
cmp ecx, edi
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
imul eax, dword [esi + 4]
cmp eax, 0x94be3d0e
setne cl
cmp edi, ecx
sbb eax, eax
inc eax
cmp eax, 0x24ad
jle 0x1002bc39
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x80]
mov dword [esi + 4], 0x9b8db370
push 2
pop edx
dec dword [eax]
jns 0x1002bbb7
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x40], ebx
jne 0x1002bc5d
mov esi, ebx
cmp dword [ebp - 0x30], ebx
je 0x1002bc5f
mov esi, edi
mov edx, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0xa0]
mov dword [eax], edx
mov eax, dword [ebp - 0x30]
cmp eax, edx
setge cl
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], esi
mov ecx, dword [ebp - 0x80]
jne 0x1002bc84
cmp dword [ecx + 4], ebx
je 0x1002bc8a
mov edx, edi
cmp dword [ecx], ebx
jne 0x1002bc8c
mov edx, ebx
mov esi, dword [ebp - 0x3c]
xor eax, eax
cmp edx, dword [ecx]
setl al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x30]
cmp ecx, 5
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov dword [esi + 4], ecx
mov eax, dword [ebp - 0x80]
sete dl
xor ecx, ecx
imul edx, dword [eax + 4]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setne cl
cmp ecx, 0x9395830
jne 0x1002bd87
mov dword [ebp - 0x18], edi
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x40]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, 0x991a
setle cl
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x24]
jne 0x1002bd3d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setge dl
imul edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, 0x10ca
setle cl
xor eax, eax
cmp ecx, 0x253de912
setl al
xor ecx, ecx
imul eax, eax, 0x511e
cmp eax, 0x4b0b
setle cl
mov dword [ebp - 0x3c], ecx
jmp 0x1002bdde
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x80]
mov dword [eax], ecx
xor ecx, ecx
cmp dword [esi + 4], 0x9072
mov eax, dword [ebp - 0x34]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xa0]
setle dl
xor ecx, ecx
sub edx, 0x5783
cmp edx, dword [eax]
mov eax, dword [ebp - 0x28]
setne cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
cmp dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0xc4]
setl cl
imul ecx, ecx, 0x1cc4
mov dword [eax], ecx
lea ecx, [ebp - 0xc4]
call fcn.10001f5a
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 8
call fcn.10001f5a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 7
push 2
pop esi
jne 0x1002bb45
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 5
call fcn.10001f5a
push dword [ebp - 0x94]
lea ecx, [ebp - 0x1bc]
call fcn.10011821
push 0x5c
pop eax
mov byte [ebp - 4], 0xa
mov ecx, ebx
push 2
mov byte [ebp - 0x54], bl
mov dword [ebp - 0x53], 0xb2bb020c
mov word [ebp - 0x5c], ax
pop esi
cmp esi, 2
jne 0x1002be4b
push 3
pop ecx
push ecx
pop esi
jmp 0x1002be74
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x56]
movzx ecx, word [ebp + eax*2 - 0x5c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
add ecx, edx
mov word [ebp + eax*2 - 0x5c], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1002be3f
xor eax, eax
lea ecx, [ebp - 0x134]
push 2
mov word [ebp - 0x5a], ax
call fcn.10001ed7
push 2
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x1002beaa
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0xbca63185
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002be97
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002bec7
push ebx
push ebx
push 0x1309
push ebx
push ebx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
mov eax, dword [ebp - 0x134]
lea ecx, [ebp - 0x134]
mov dword [eax], ebx
call fcn.10001f5a
xor eax, eax
mov dword [ebp - 0xe0], 7
mov word [ebp - 0xf4], ax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x5c]
mov dword [ebp - 0xe4], ebx
push eax
call fcn.1002a447
push esi
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xb
call fcn.10001ed7
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x38], 0xba3f
mov dword [ebp - 0x1c], ebx
jmp 0x1002bf34
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002bf21
mov edi, dword [ebp - 0x90]
xor edx, edx
mov dword [ebp - 0x2c], edi
inc edx
mov dword [edi], 0xa
mov dword [ebp - 0x3c], 0xf77722ab
mov dword [ebp - 0x18], ebx
jmp 0x1002bf64
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1fc], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002bf57
mov dword [ebp - 0x18], ebx
jmp 0x1002bf80
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0xc234ac01
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002bf6f
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
je 0x1002bfb7
xor ecx, ecx
cmp dword [eax], 0x7631615e
setl cl
xor eax, eax
imul ecx, dword [ebp - 0x1fc]
cmp ecx, 0x28cae2fe
setl al
cmp eax, dword [ebp - 0x1f4]
mov eax, edx
jge 0x1002bfb9
mov eax, ebx
mov dword [ebp - 0x84], eax
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp dword [edi + 4], eax
setg cl
test ecx, ecx
je 0x1002bfdd
mov eax, dword [ebp - 0x90]
cmp dword [eax], ebx
mov eax, ebx
je 0x1002bfdf
mov eax, edx
imul eax, eax, 0xa4b1
test eax, eax
je 0x1002bff0
mov edi, edx
cmp dword [ebp - 0x3c], ebx
jne 0x1002bff2
mov edi, ebx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edi, eax
mov edi, dword [ebp - 0x2c]
sete cl
xor eax, eax
cmp ecx, 0xd09e
setle al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x90]
dec dword [eax]
cmp dword [eax], 0xfffffff7
jg 0x1002bf4b
lea ecx, [ebp - 0x90]
call fcn.10001f5a
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x38], 0x3342eb90
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002c0f3
mov dword [ebp - 0x3c], 0x5404
cmp dword [ebp - 0x3c], 0x5574
jle 0x1002c0a6
push ebx
push 0x26b8
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov eax, ebx
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
xor eax, edi
mov ecx, 0x1007f138
xor eax, ebx
cdq
push edx
push eax
call fcn.10002c1c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x21ce
jl 0x1002c06f
inc edi
push 0
pop ebx
cmp edi, 0x7cf9
jl 0x1002c067
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x77
jl 0x1002c065
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x3c], 0x5105
jge 0x1002c0ec
mov edx, str.sfj_idol_usx_qgrioz
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1002c0ec
mov dword [ebp - 4], 0xb
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002c109
push ebx
push 0x1882
push ebx
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov dword [ebp - 0x28], 0xc7bf
xor edx, edx
inc edx
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0x15b01d97
mov dword [ebp - 0x24], 0x254f8d36
mov dword [ebp - 0x18], 0x7854c3eb
mov dword [ebp - 0x18], ebx
jmp 0x1002c147
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x224], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002c136
mov dword [ebp - 0x18], ebx
jmp 0x1002c163
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x234], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002c152
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
push 3
setl cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
imul ecx, dword [ebp - 0x40], 0x25e4
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
xor ecx, ecx
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub edx, 3
neg eax
cmp eax, edx
pop edx
setle cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], ebx
jl 0x1002c205
mov dword [ebp - 0x18], ebx
jmp 0x1002c1fb
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], ebx
jl 0x1002c1f8
mov dword [ebp - 0x28], ebx
jmp 0x1002c1ee
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x234]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x224], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x1002c1d7
dec dword [ebp - 0x1c]
jns 0x1002c1d2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1002c1ca
dec dword [ebp - 0x24]
jns 0x1002c1c5
push 0x5f
pop eax
push 2
mov byte [ebp - 0x4c], bl
mov ecx, ebx
mov dword [ebp - 0x4b], 0x2a2a02e6
mov word [ebp - 0x58], ax
pop esi
cmp esi, 2
jne 0x1002c226
mov ecx, edx
mov esi, edx
jmp 0x1002c252
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
push 3
movzx eax, byte [ebp + eax - 0x4e]
movzx ecx, word [ebp + eax*2 - 0x58]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
add ecx, edx
pop edx
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1002c21b
xor eax, eax
lea ecx, [ebp - 0x14c]
mov word [ebp - 0x56], ax
mov dword [ebp - 0x24], 0xfffffff8
push 2
call fcn.10001ed7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x28], 0x1320f2d6
mov dword [ebp - 0x38], 0xa37d7c86
push 3
call fcn.10001ed7
push 2
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1002c2ae
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0x61780eec
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002c29b
mov dword [ebp - 0x18], ebx
jmp 0x1002c2cb
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xff444262
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002c2b8
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 7
cmp dword [ebp - 0x24], ebx
jne 0x1002c2ed
mov dword [ebp - 0x24], 0xd0fa5166
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
xor edi, edi
mov eax, dword [ebp - 0x24]
inc edi
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], 0xd594
jge 0x1002c30e
cmp dword [ebp - 0x28], ebx
je 0x1002c30e
mov eax, edi
cmp dword [ebp - 0x38], ebx
jne 0x1002c310
mov eax, ebx
xor ecx, ecx
cmp eax, 0x7d6b5922
mov eax, dword [ebp - 0x11c]
setle cl
mov dword [eax + 4], ecx
mov dword [ebp - 0x28], 0x1a
jmp 0x1002c341
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002c33e
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff4
jge 0x1002c32c
lea ecx, [ebp - 0x11c]
call fcn.10001f5a
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0xb
call fcn.10001f5a
xor eax, eax
mov dword [ebp - 0x15c], 7
mov word [ebp - 0x170], ax
lea ecx, [ebp - 0x170]
lea eax, [ebp - 0x58]
mov dword [ebp - 0x160], ebx
push eax
call fcn.1002a447
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x1c], 0x22bb
cmp dword [ebp - 0x1c], 0x2572
jle 0x1002c42c
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov edx, ebx
xor eax, ecx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x38], eax
mov eax, edx
mov dword [ebp - 0x3c], 0x23f9
mov dword [ebp - 0x34], eax
or eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x260]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002c3dc
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x260]
call fcn.10002ff9
mov eax, dword [ebp - 0x34]
dec eax
dec dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
jne 0x1002c3c1
mov edx, dword [ebp - 0x30]
inc edx
mov dword [ebp - 0x30], edx
cmp edx, 0x4a72
jl 0x1002c3b5
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x78d4
jl 0x1002c3ab
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x25e3
jl 0x1002c3a6
cmp dword [ebp - 0x1c], 0x1f9c
mov dword [ebp - 0x58], ebx
jge 0x1002c443
push str.sbbg_tqwryi_snlbv_lilwbdyrc_khy_ngtcps_bedm_ybyct_uyz
call fcn.10049a06
pop ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x40], 0x6a37
cmp dword [ebp - 0x40], 0x6cc7
jle 0x1002c4e3
push ebx
push 0x1129
call dword [sym.imp.USER32.dll_EnableWindow]
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov edi, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv edi
mov dword [ebp - 0x34], ebx
mov ecx, edx
mov dword [ebp - 0x3c], ecx
mov edi, ebx
mov ebx, dword [ebp - 0x34]
mov eax, ebx
cdq
idiv edi
or edx, ecx
mov ecx, 0x1007f138
mov eax, edx
cdq
push edx
push eax
call fcn.10002c1c
mov ecx, dword [ebp - 0x3c]
inc edi
cmp edi, 0x45d0
jl 0x1002c484
inc ebx
push 0
mov dword [ebp - 0x34], ebx
cmp ebx, 0x1c68
pop ebx
jl 0x1002c47f
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
inc edi
mov dword [ebp - 0x30], edi
cmp edi, 0x7598
jl 0x1002c474
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x7e54
jl 0x1002c46f
push 0xf33
push 0x2617
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x40], 0x6902
jge 0x1002c529
mov edx, str.keuuso_ajurjvin_kjusnmo_knvtt_any_yskpx_kgckz
mov ecx, 0x1007f138
call fcn.100045d3
jmp 0x1002c526
xor ecx, ecx
inc ecx
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1c], ebx
jmp 0x1002c542
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x23c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002c535
mov dword [ebp - 0x18], ebx
jmp 0x1002c5e8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jl 0x1002c5e5
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x28], ebx
jmp 0x1002c5d7
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1002c5b8
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002c5b0
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], ebx
jl 0x1002c5ad
mov dword [ebp - 0x38], ebx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002c5a5
push ebx
push 0x19da
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
dec dword [ebp - 0x40]
jns 0x1002c58c
xor ecx, ecx
inc ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x1002c57e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x1002c572
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1002c5d4
push 0x268a
call dword [sym.imp.GDI32.dll_GetStockObject]
xor ecx, ecx
inc ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x1002c56a
dec dword [ebp - 0x30]
jns 0x1002c55e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1002c54f
xor edi, edi
inc edi
push dword [ebp - 0xe4]
cmp dword [ebp - 0xe0], 8
lea eax, [ebp - 0xf4]
push ebx
cmovae eax, dword [ebp - 0xf4]
lea ecx, [ebp - 0x1bc]
push eax
call fcn.1002cbaa
cmp eax, 0xffffffff
je 0x1002c639
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x170]
push ecx
push edi
push eax
lea ecx, [ebp - 0x1bc]
call fcn.100152b4
jmp 0x1002c5f4
mov dword [ebp - 0x3c], 0x60b5
cmp dword [ebp - 0x3c], 0x6119
jle 0x1002c6a6
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
sar eax, cl
lea ecx, [ebp - 0x278]
cdq
push edx
push eax
call fcn.10002a23
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002c66d
mov eax, dword [eax]
push eax
call fcn.10049a06
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x278]
call fcn.10002ff9
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x3137
jl 0x1002c653
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x7ab6
jl 0x1002c64e
push ebx
push ebx
call dword [sym.imp.USER32.dll_CharLowerBuffW]
push esi
lea ecx, [ebp - 0xd0]
call fcn.10001ed7
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x34], 0x37f20bab
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x1002c6e9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0x28ea3888
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002c6d6
mov esi, dword [ebp - 0xd0]
mov eax, dword [esi + 4]
mov dword [ebp - 0x30], eax
xor eax, eax
cmp dword [esi], edi
setl al
xor ecx, ecx
cmp eax, dword [esi + 4]
setg cl
xor eax, eax
cmp ecx, 0x94fb
setle al
cmp eax, 0xb6d700d1
mov eax, dword [ebp - 0x30]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
cmp dword [esi + 4], 7
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
add ecx, 0x393131ec
cmp ecx, dword [esi + 4]
setle al
cmp eax, dword [ebp - 0x2c]
jle 0x1002c75e
mov eax, dword [ebp - 0xd0]
cmp dword [eax], ebx
mov eax, ebx
jne 0x1002c760
mov eax, edi
mov dword [ebp - 0x30], eax
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp eax, 0xfbc7
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xd0]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
call fcn.10001f5a
cmp dword [ebp - 0x3c], 0x5d12
jge 0x1002c7a2
push str.wos_mbthgo_bddtetkn_uqhqman_zvs_azvidd_hukun_wvpnnxsuv_xhf_hbt_slmlzo_sunzzqo_hzsyrxdor
call fcn.10049a06
pop ecx
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0x188]
mov dword [ebp - 4], 0xf
call fcn.1002cc4d
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x170]
call fcn.1001231a
push ebx
push edi
lea ecx, [ebp - 0xf4]
call fcn.1001231a
push ebx
push edi
lea ecx, [ebp - 0x1bc]
call fcn.1001231a
push ebx
push edi
lea ecx, [ebp - 0x188]
call fcn.1001231a
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x74]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret