Function at 0x1002f749
Capabilities:
Encode data using xor
Query or enumerate registry value

Disassembly:
mov eax, 0x10058839
call fcn.10057898
sub esp, 0x12c
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x7c], edx
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test cl, cl
je 0x1002f7a7
cmp byte [ebp + 0xc], 0
je 0x1002f794
push 0x17c7
push 1
lea eax, [ebp - 0x39]
mov byte [ebp - 0x39], 0
mov dl, 1
push 0x7b50
push eax
mov cl, dl
call fcn.1002ce9b
add esp, 0x10
jmp 0x100301f1
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x100301f1
cmp byte [ebp + 0x14], 0
je 0x1002f7c4
push 0x56d
push 0
push 0x220b
call dword [sym.imp.KERNEL32.dll_OpenProcess]
jmp 0x100301f1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x50], edx
xor dl, dl
push 0x3dd4
mov dword [ebp - 0x58], eax
call fcn.1002cd9c
xor ebx, ebx
mov dword [ebp - 0x88], 7
xor eax, eax
mov dword [ebp - 0x8c], ebx
pop ecx
mov word [ebp - 0x9c], ax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x2394
cmp dword [ebp - 0x20], 0x25b4
jle 0x1002f855
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x108]
xor eax, esi
cdq
push edx
push eax
call fcn.10001a21
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f82e
mov eax, dword [eax]
push eax
call fcn.1003f696
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x108]
call fcn.1000200c
inc edi
cmp edi, 0x1a2f
jl 0x1002f812
inc esi
cmp esi, 0xc14
jl 0x1002f810
cmp dword [ebp - 0x20], 0x2276
jge 0x1002f869
push str.zyeth_wublppo_wnug_byzhieqw_svj
call fcn.1003f696
pop ecx
mov dword [ebp - 4], ebx
xor ecx, ecx
mov dword [ebp - 0x14], 0xf665683c
inc ecx
push 8
pop esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], 0xfcf419c2
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x51fd9ab8
mov dword [ebp - 0x18], 0xdf7d
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x1002f8aa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], 0x38d679bd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002f89c
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x14], ecx
je 0x1002f8df
cmp dword [ebp - 0x1c], ebx
je 0x1002f8df
xor eax, eax
inc eax
jmp 0x1002f8e1
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jl 0x1002f8f0
cmp dword [ebp - 0x1c], ebx
je 0x1002f8f0
xor edx, edx
inc edx
jmp 0x1002f8f2
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, esi
jl 0x1002f903
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x14]
jg 0x1002f91d
cmp dword [ebp - 0x1c], ebx
jne 0x1002f91d
mov eax, ebx
jmp 0x1002f920
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
or edi, 0xffffffff
neg ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x14]
add eax, ecx
cmp eax, edi
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, 1
setg dl
add edx, esi
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
sub ecx, dword [ebp - 0x14]
cmp ecx, 0x593c
setne al
imul eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
cmp edi, eax
sbb eax, eax
neg eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1002fa6a
mov dword [ebp - 0x20], 0xff90
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x14], 0xfd6
cmp dword [ebp - 0x14], 0x1321
jle 0x1002fa26
mov ecx, ebx
mov dword [ebp - 0x18], ebx
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
xor eax, esi
xor eax, edi
xor eax, ecx
lea ecx, [ebp - 0x120]
cdq
push edx
push eax
call fcn.10001a21
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f9df
mov eax, dword [eax]
push eax
call fcn.1003f696
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x120]
call fcn.1000200c
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x29b
jl 0x1002f9c1
inc esi
cmp esi, 0x7cb7
jl 0x1002f9bc
inc edi
cmp edi, 0x57d2
jl 0x1002f9ba
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x1d4d
jl 0x1002f9b8
or edi, 0xffffffff
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov dword [ebp - 0x20], 0xfffffffb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
cmp edx, dword [ebp - 0x24]
jg 0x1002fa4b
cmp dword [ebp - 0x4c], ebx
jne 0x1002fa4b
mov eax, ebx
jmp 0x1002fa4e
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x14], 0xe6a
jge 0x1002fa65
push str.mubcy_lvmqkisoc_sfsvbnvgd_frbbkl_tnib_owphcj_dzv_kcoogqn_iakwct_xdrpppsch
call fcn.1003f696
pop ecx
mov dword [ebp - 4], ebx
jmp 0x1002fa76
push ebx
mov edx, 0x4bde
call fcn.1002ccec
pop ecx
push ecx
push ecx
push 0x4258
mov edx, 0xf07
xor cl, cl
call fcn.1002d737
mov eax, dword [ebp + 0x10]
add esp, 0xc
cmp eax, dword [ebp + 8]
ja 0x1002fc9a
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x24], 0x4793
cmp dword [ebp - 0x24], 0x4a09
jle 0x1002fb03
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x20], 0x54cd
mov dword [ebp - 0x2c], ebx
mov eax, edi
mov ecx, 0x1006f978
xor eax, ebx
cdq
push edx
push eax
call fcn.10001ca8
inc ebx
cmp ebx, 0x3128
jl 0x1002fabd
add edi, esi
dec dword [ebp - 0x20]
push 0
pop ebx
jne 0x1002faba
inc esi
cmp esi, 0x55cc
jl 0x1002fab1
push 0x811
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
mov byte [ebp - 4], 5
cmp dword [ebp - 0x24], 0x44b6
jge 0x1002fb1f
mov edx, str.dgwk_wqktsa_mjwxvywt_fhl_grh_hgjesvu_ukcprs_uggbx_kuqgf
mov ecx, 0x1006f978
call fcn.1000365f
mov esi, dword [ebp - 0x54]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1002fb60
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x60], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1002fb52
mov dword [ebp - 0x14], ebx
jmp 0x1002fb78
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe8], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002fb6b
mov dword [ebp - 0x14], ebx
jmp 0x1002fb91
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5c], 0xffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x1002fb83
mov dword [ebp - 0x14], 0xffffffef
jmp 0x1002fc77
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x2c], 0xeb4e5227
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], 0x4be495ee
mov dword [ebp - 0x28], 0xcc0f90b8
mov dword [ebp - 0x18], ebx
jmp 0x1002fbeb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0], 0xab8ac29b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002fbda
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
sbb eax, eax
inc eax
cmp eax, 1
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x78]
setl cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x14]
test edx, edx
je 0x1002fc36
cmp dword [ebp - 0x78], ebx
jne 0x1002fc39
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x60]
cmp eax, ecx
setg dl
mov dword [ebp - 0x18], edx
xor edx, edx
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x5c]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 5
jne 0x1002fba3
lea eax, [ebp - 0x9c]
cmp esi, eax
je 0x100301e3
push 0xffffffffffffffff
push ebx
push eax
mov ecx, esi
jmp 0x100301de
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002fcb3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], 0x648
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002fca2
push 2
pop esi
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x1002fce9
lea eax, [ebp - 0x31]
mov byte [ebp - 0x31], bl
push 1
push eax
xor dl, dl
mov cl, 1
call fcn.1002d5b7
mov eax, dword [ebp - 0x14]
pop ecx
pop ecx
cmp dword [ebp + eax*4 - 0xdc], ebx
jne 0x1002fce9
dec dword [ebp - 0x14]
jns 0x1002fcc4
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x1002fd1a
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1002fd15
push 0x7c1c
push ebx
xor dl, dl
mov ecx, 0x3210
call fcn.1002cd1e
dec dword [ebp - 0x18]
pop ecx
pop ecx
jns 0x1002fcfc
dec dword [ebp - 0x14]
jns 0x1002fcf1
push ecx
lea eax, [ebp - 0x9c]
push eax
push ecx
lea eax, [ebp - 0x58]
mov ecx, 0x7d16
push eax
push 1
lea edx, [ebp - 0x48]
call fcn.1002cb3d
mov dword [ebp - 0x24], 0x6ebd
add esp, 0x14
cmp dword [ebp - 0x24], 0x710b
jle 0x1002fd97
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov edi, esi
mov esi, 0x962
mov eax, edi
lea ecx, [ebp - 0x138]
cdq
push edx
push eax
call fcn.10001a21
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002fd6f
mov eax, dword [eax]
push eax
call fcn.1003f696
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x138]
call fcn.1000200c
dec edi
dec esi
jne 0x1002fd55
mov esi, dword [ebp - 0x20]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x3bec
jl 0x1002fd4e
cmp dword [ebp - 0x24], 0x6d37
jge 0x1002fdab
push str.tnxxbo_lvhoxdnou_xhkmj_wavvf_eoysnyv_gnw
call fcn.1003f696
pop ecx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x32]
mov dword [ebp - 0x28], 1
xor dl, dl
push eax
mov ecx, 0x4025
mov byte [ebp - 0x32], bl
call fcn.1002f1ba
mov dword [esp], 0x22f3
mov edx, 0x1655
push 1
push ebx
push 1
push 0x159e
mov ecx, 0x50d4
call fcn.1002e8d2
mov eax, dword [ebp - 0x48]
add esp, 0x14
cmp eax, dword [ebp - 0x58]
jae 0x1003001b
mov dword [ebp - 0x1c], 0xffff
xor edx, edx
mov dword [ebp - 0x24], 0x8b081589
inc edx
mov dword [ebp - 0x84], 0xafca6f77
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x1002fe24
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1002fe1a
mov dword [ebp - 0x14], ebx
jmp 0x1002fe3c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x38], 0x19d87263
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1002fe2e
cmp dword [ebp - 0x1c], ebx
jne 0x1002feb5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x18], 0xb221494f
mov dword [ebp - 0x20], 0xfbc7
mov dword [ebp - 0x1c], 0x88fefd6e
mov dword [ebp - 0x14], 0xd208dd2d
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x38]
jne 0x1002fe98
cmp dword [ebp - 0x38], ebx
je 0x1002fe96
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x24], 0xcfec76e8
jbe 0x1002fe98
mov edx, ebx
xor eax, eax
cmp edx, 0x84e2bba6
sete al
xor ecx, ecx
cmp eax, 0x4e266bc
setle cl
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
jmp 0x1002fef4
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x18], 0x559653e3
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x1002fff9
mov dword [ebp - 0x24], 0xdaad19dd
mov dword [ebp - 0x14], 0xa89a
mov dword [ebp - 0x20], 0x7bd5
cmp dword [ebp - 0x20], 0x7f8f
jle 0x1002ff44
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x1006f978
cdq
push edx
push eax
call fcn.10001ca8
inc edi
cmp edi, 0x4400
jl 0x1002ff22
inc esi
cmp esi, 0x60b0
jl 0x1002ff20
mov dword [ebp - 0x18], ebx
jmp 0x1002ff5a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], 0x5c00d4b3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002ff49
mov byte [ebp - 4], 9
cmp dword [ebp - 0x20], 0x7929
jge 0x1002ffa0
mov edx, str.yieozvwg_spfskndik_zkff_lwxaou_fvzclp
mov ecx, 0x1006f978
call fcn.1000365f
jmp 0x1002ffa0
push ecx
push ebx
lea edx, [ebp - 0x84]
mov dword [ebp - 4], ebx
call fcn.1002e7c3
pop ecx
pop ecx
cmp dword [ebp - 0x2c], ebx
je 0x1002ffd1
cmp dword [ebp - 0xa0], ebx
je 0x1002ffcb
cmp dword [ebp - 0x38], 0xeab9
jle 0x1002ffcb
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
cmp eax, 5
setl cl
mov dword [ebp - 0xa4], ecx
inc dword [ebp - 0x1c]
jmp 0x1002fef7
push 1
push ecx
push 0x30cf
lea eax, [ebp - 0x9c]
push eax
push ecx
lea edx, [ebp - 0x48]
mov ecx, 0x7f60
call fcn.1002c9ab
jmp 0x1002fde8
mov dword [ebp - 0x28], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x28], 0x6ce125d1
inc ecx
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb0], ecx
mov dword [ebp - 0x1c], 0xe6b6
mov dword [ebp - 0x30], 0xa2d34caa
mov dword [ebp - 0x28], 0xb171
mov dword [ebp - 0x24], 0x2630
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1003007c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003006f
push ecx
lea eax, [ebp - 0x30]
xor cl, cl
push eax
call fcn.1002d362
pop ecx
mov dword [ebp - 0x30], 0xffffffe6
cmp dword [ebp - 0x30], 0x35
pop ecx
jl 0x100301cb
xor ecx, ecx
push 2
inc ecx
pop esi
mov dword [ebp - 0x28], 0xa832
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x44], 0xa3e2be8c
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x28], 0xce33a902
mov dword [ebp - 0x2c], 0x4764fe60
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x20], 0x493ab76a
mov dword [ebp - 0x18], ebx
jmp 0x100300ec
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0x32e525b7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100300db
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xffffffef
jle 0x100301bb
mov dword [ebp - 0x18], 0x8592840c
mov dword [ebp - 0x50], 0x77d7e7d1
mov dword [ebp - 0x44], 0x4c1b
mov dword [ebp - 0x14], ebx
jmp 0x10030129
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10030118
mov dword [ebp - 0x14], ebx
jmp 0x10030142
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10030134
mov eax, dword [ebp - 0x24]
xor edx, edx
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setge dl
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x18]
dec eax
add ecx, eax
cmp ecx, dword [ebp - 0x20]
jle 0x10030198
cmp dword [ebp - 0x44], ebx
je 0x10030198
cmp dword [ebp - 0x64], ebx
je 0x10030198
xor edx, edx
inc edx
jmp 0x1003019a
mov edx, ebx
mov eax, dword [ebp - 0x80]
xor ecx, ecx
cmp edx, eax
setle cl
imul ecx, dword [ebp - 0x68]
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffef
jg 0x100300fe
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x35
jge 0x100300a6
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x9c]
cmp eax, ecx
je 0x100301e3
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.1000761a
push ebx
push 1
lea ecx, [ebp - 0x9c]
call fcn.1000748a
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret