Function at 0x1002e820
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100c1361
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x1010001c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0xf8], ebx
mov esi, ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 6
mov byte [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xc8], 0
mov word [ebp - 0xd8], ax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.100127d0
push 0x101009ec
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 3
push eax
call fcn.10008350
add esp, 0xc
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14c]
cmp edx, 8
jb 0x1002e911
mov ecx, dword [ebp - 0x160]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e907
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb58
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
mov ecx, str.coral_extract.dll
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
lea edx, [ecx + 2]
mov word [ebp - 0x60], ax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1002e950
sub ecx, edx
sar ecx, 1
push ecx
push str.coral_extract.dll
lea ecx, [ebp - 0x60]
call fcn.10003a30
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xa
call fcn.100127d0
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.10008350
add esp, 0xc
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x1002e9d5
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002e9cb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb5d
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x1002ea30
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ea26
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb62
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x12
push eax
call fcn.10006ad0
add esp, 4
test al, al
jne 0x1002eb2b
lea eax, [ebp - 0x104]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
call fcn.1002dfb0
add esp, 4
test al, al
jne 0x1002eb2b
mov ebx, 2
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1002eabc
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eab2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb67
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1002eb0e
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eb04
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb6c
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x1002f0e5
lea eax, [ebp - 0x48]
push eax
call fcn.10006ad0
add esp, 4
test al, al
jne 0x1002ebf1
mov ebx, 2
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1002eb82
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eb78
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb71
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1002ebd4
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ebca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb76
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x1002f0e5
lea ecx, [ebp - 0x30]
call fcn.100280a0
test al, al
jne 0x1002ecb3
mov ebx, 3
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1002ec44
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ec3a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb7b
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1002ec96
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ec8c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb80
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x1002f0e5
mov byte [ebp - 4], 0x2f
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0xa8]
call fcn.10006780
mov byte [ebp - 4], 0x33
test esi, esi
je 0x1002ef10
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x90]
push eax
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x30]
call fcn.10028740
add esp, 0xc
test al, al
jne 0x1002eef8
mov ebx, 6
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x1002ed84
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ed7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb85
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x64]
cmp edx, 8
jb 0x1002eddf
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002edd5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb8a
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x1002ee34
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ee2a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb8f
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1002ee89
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ee7f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb94
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1002eedb
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002eed1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb99
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x1002f0e5
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x90]
call fcn.1002dbf0
add esp, 4
lea eax, [ebp - 0xd8]
push eax
push ebx
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0xa8]
call fcn.1002dc70
add esp, 8
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x1002ef70
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002ef66
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fb9e
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x64]
cmp edx, 8
jb 0x1002efcb
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002efc1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fba3
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x1002f020
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f016
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fba8
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1002f075
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f06b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbad
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1002f0c7
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f0bd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbb2
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
mov ebx, dword [ebp - 0x10c]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.10023bf0
mov dword [ebp - 0x18], eax
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x10c], esp
mov byte [ebp - 0xf1], 0
push 0x10100a1c
call fcn.10006780
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x5e
call fcn.100141b0
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x60
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x61
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.100244b0
add esp, 8
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.uuid
call fcn.10024d40
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [ebp - 0x18]
call fcn.100251e0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x65
call fcn.1001fc10
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x66
call fcn.1001fc10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x60
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call edi
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x1002f21a
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f210
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbb7
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x10c], esp
mov byte [ebp - 0xf1], al
push 0x10100a1c
call fcn.10006780
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x5e
call fcn.100143a0
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6d
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.100244b0
add esp, 8
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.uuid2
call fcn.10024d40
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x18]
call fcn.100251e0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x71
call fcn.1001fc10
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x72
call fcn.1001fc10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
push eax
call edi
mov byte [ebp - 4], 0x73
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x1002f347
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f33d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbbc
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x77
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x78
push eax
call fcn.100ae190
add esp, 4
mov byte [ebp - 0xf1], 0
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x148]
call fcn.10023e60
add esp, 8
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.process_info
call fcn.10024d40
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0x18]
call fcn.100251e0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x7d
call fcn.1001fc10
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x7e
call fcn.1001fc10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
cmp dword [0x10100958], 2
mov eax, dword [ebp - 0xf8]
jne 0x1002f68d
test eax, eax
jne 0x1002f68d
mov esi, 0x16
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], ebx
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x7f
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.jsfw01
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x81
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x85
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x88
push eax
call edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], eax
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x89
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.jsfw02
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x8b
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x8f
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x92
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
lea ecx, [ebp - 0x130]
mov byte [ebp - 0xf1], 0
call fcn.1002afa0
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x93
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x94
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.100244b0
add esp, 8
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.jsfw03
call fcn.10024d40
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x96
push eax
lea ecx, [ebp - 0x18]
call fcn.100251e0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x98
call fcn.1001fc10
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x99
call fcn.1001fc10
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x93
push eax
call edi
mov byte [ebp - 4], 0x9a
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x1002f667
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f65d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbc1
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x78
jmp 0x1002f8d3
cmp eax, 1
jne 0x1002f7a7
mov esi, 0x16
mov byte [ebp - 0xf1], al
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], ebx
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x9e
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.stj01
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa0
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xa4
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xa7
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], eax
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xa8
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.stj02
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xaa
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xae
push eax
call edi
mov byte [ebp - 4], 0xb1
jmp 0x1002f8bd
cmp eax, 2
jne 0x1002f8d3
mov esi, 0x16
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], ebx
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb2
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.butj01
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb4
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xb8
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xbb
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], eax
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xbc
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.10023cc0
push eax
mov edx, str.butj02
mov byte [ebp - 4], 0xbd
lea ecx, [ebp - 0x170]
call fcn.10024080
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xbe
call fcn.10025110
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10024ed0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xc2
push eax
call edi
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x130]
push eax
call edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x78
push eax
call edi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0xf0]
call fcn.10018ae0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc6
push eax
lea eax, [ebp - 0x130]
push str.ACTION_POST_DATA:
push eax
call fcn.10003e30
add esp, 0xc
mov byte [ebp - 4], 0xc7
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x1002f944
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f93a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbc6
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0xcb
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0xf0]
call fcn.10014ff0
test ebx, ebx
sete bl
mov byte [ebp - 4], 0xcd
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x1002f9ce
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002f9c4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbcb
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0xd1
mov edx, dword [ebp - 0xdc]
cmp edx, 8
jb 0x1002fa26
mov ecx, dword [ebp - 0xf0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fa1c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbd0
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
mov byte [ebp - 4], 0xd5
mov edx, dword [ebp - 0xac]
cmp edx, 8
jb 0x1002fa87
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fa7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbd5
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push eax
push dword [eax]
lea eax, [ebp - 0xf8]
push eax
call fcn.10023200
push 0x58
push dword [ebp - 0x18]
call fcn.1008a52b
add esp, 8
mov byte [ebp - 4], 0xdb
mov edx, dword [ebp - 0xc4]
cmp edx, 8
jb 0x1002fb0e
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002fb04
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1002fbda
push edx
push ecx
call fcn.1008a52b
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.1001ab20
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1008a187
mov esp, ebp
pop ebp
ret
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
call fcn.1008e2b2
int3