Function at 0x1002c698
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005cda6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x33c
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x2c], 0
jmp 0x1002c6cd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002c6e3
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x32c], 0xffffffff
jmp 0x1002c6c6
mov dword [ebp - 0x2c], 0
jmp 0x1002c6f3
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002c709
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x20c], 0x801897a4
jmp 0x1002c6ec
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002c735
push 0
push 0x24db
push 0xa15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x20c], 1
jmp 0x1002c763
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x20c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x20c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x20c], 0
jl 0x1002c787
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20c], 0
je 0x1002c785
jmp 0x1002c787
jmp 0x1002c748
mov dword [ebp - 0xbc], 0xfa860b4f
mov dword [ebp - 0x5c], 0x7bf0b96c
mov dword [ebp - 0x1c0], 9
mov dword [ebp - 0x6c], 0xffffffff
push 1
lea ecx, [ebp - 0x2bc]
call fcn.10003233
and dword [ebp - 4], 0
mov dword [ebp - 0x70], 0x2703
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x27c], 0x39bb
mov dword [ebp - 0x284], 0x7fae0cd5
mov dword [ebp - 0x64], 0
jmp 0x1002c7ec
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1002c805
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2bc]
call fcn.100032d2
and dword [eax], 0
jmp 0x1002c7e5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x6c]
jle 0x1002c9bc
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
je 0x1002c869
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x70]
jne 0x1002c844
cmp dword [ebp - 0x70], 0
jne 0x1002c844
and dword [ebp - 0x22c], 0
jmp 0x1002c84e
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x5c], 0
jne 0x1002c85d
mov eax, 0x7127
test eax, eax
je 0x1002c869
mov dword [ebp - 0x1d4], 1
jmp 0x1002c870
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1d4], eax
je 0x1002c887
mov dword [ebp - 0x220], 1
jmp 0x1002c88e
and dword [ebp - 0x220], 0
cmp dword [ebp - 0x220], 0x426ae69e
jge 0x1002c8a9
cmp dword [ebp - 0x30], 0
jne 0x1002c8a9
and dword [ebp - 0x228], 0
jmp 0x1002c8b3
mov dword [ebp - 0x228], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x228], eax
je 0x1002c8ca
mov dword [ebp - 0x1ac], 1
jmp 0x1002c8d1
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1ac]
test eax, eax
je 0x1002c8f1
cmp dword [ebp - 0x30], 0
je 0x1002c8f1
mov dword [ebp - 0x1b8], 1
jmp 0x1002c8f8
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x1b8], eax
jge 0x1002c90f
mov dword [ebp - 0xf8], 1
jmp 0x1002c916
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xf8], eax
jne 0x1002c930
mov dword [ebp - 0x1c8], 1
jmp 0x1002c937
and dword [ebp - 0x1c8], 0
push 0
lea ecx, [ebp - 0x2bc]
call fcn.100032d2
mov eax, dword [eax]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x100], eax
push 0
lea ecx, [ebp - 0x2bc]
call fcn.100032d2
mov ecx, dword [ebp - 0x100]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x1c8]
jl 0x1002c987
mov dword [ebp - 0x254], 1
jmp 0x1002c98e
and dword [ebp - 0x254], 0
cmp dword [ebp - 0xbc], 0xfffffffc
jge 0x1002c9a3
mov dword [ebp - 0x108], 1
jmp 0x1002c9aa
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 1
jle 0x1002c9bc
and dword [ebp - 0x1d0], 0
jmp 0x1002c9c6
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1d0], eax
jg 0x1002c9dd
mov dword [ebp - 0x25c], 1
jmp 0x1002c9e4
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x284], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2bc]
call fcn.100032b6
mov dword [ebp - 0x20], 0xffffffff
push 2
lea ecx, [ebp - 0x2a4]
call fcn.10003233
mov dword [ebp - 4], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x90], 0
jmp 0x1002ca43
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1002ca65
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2a4]
call fcn.100032d2
mov dword [eax], 0xfffffffa
jmp 0x1002ca36
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x20], 0
je 0x1002ca86
cmp dword [ebp - 0x20], 0
je 0x1002ca86
mov dword [ebp - 0x110], 1
jmp 0x1002ca8d
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x110], eax
jne 0x1002caa4
mov dword [ebp - 0x1d8], 1
jmp 0x1002caab
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x725245f5
jle 0x1002cac3
mov dword [ebp - 0x118], 1
jmp 0x1002caca
and dword [ebp - 0x118], 0
push 0
lea ecx, [ebp - 0x2a4]
call fcn.100032d2
mov ecx, dword [ebp - 0x118]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x308], eax
push 0
lea ecx, [ebp - 0x2a4]
call fcn.100032d2
mov eax, dword [eax]
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x20], 0x1b
jmp 0x1002cb0d
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jne 0x1002cb28
push 1
lea ecx, [ebp - 0x2a4]
call fcn.100032d2
mov dword [eax], 0xb5d1cb6a
jmp 0x1002cb06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.100032b6
mov dword [ebp - 0x28], 0
jmp 0x1002cb47
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002cb5d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x334], 0xffffffff
jmp 0x1002cb40
mov dword [ebp - 0x28], 0
jmp 0x1002cb6d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002cb83
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x218], 0x801897a4
jmp 0x1002cb66
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x1002cbaf
push 0
push 0x24db
push 0xa15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x218], 1
jmp 0x1002cbdd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x218]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x218], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x218], 0
jl 0x1002cc01
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x218], 0
je 0x1002cbff
jmp 0x1002cc01
jmp 0x1002cbc2
movzx eax, byte [0x1025a681]
test eax, eax
je 0x1002cc1f
mov esi, 0x10077860
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1002ddda
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x54], 0
jmp 0x1002cc36
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 7
jl 0x1002cc46
cmp dword [ebp - 0x54], 0
je 0x1002cc44
jmp 0x1002cc46
jmp 0x1002cc2f
mov byte [ebp - 0x42], 0
mov dword [ebp - 0x1e0], 0x1f51
mov dword [ebp - 0x24c], str.wasydb_vhavjr_lbmr_xkyzcvg_pdwfugllb_htllcsl_effk_shkkh_xbb_vrbsnkflh_oclmogjq_zxpotph_bcxuopyo_axvklluj
cmp dword [ebp - 0x1e0], 0x2185
jle 0x1002cd40
push 0x63
call dword [sym.imp.USER32.dll_GetSysColorBrush]
and dword [ebp - 0x7c], 0
jmp 0x1002cc83
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x2934
jge 0x1002cd40
and dword [ebp - 0x94], 0
jmp 0x1002cca6
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x4e86
jge 0x1002cd3b
and dword [ebp - 0x84], 0
jmp 0x1002cccc
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x644d
jge 0x1002cd36
and dword [ebp - 0xa4], 0
jmp 0x1002ccee
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x57f6
jge 0x1002cd34
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x94]
and eax, dword [ebp - 0x84]
or eax, dword [ebp - 0xa4]
cdq
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], edx
push dword [ebp - 0x264]
push dword [ebp - 0x268]
mov ecx, 0x10077e58
call fcn.100030bc
jmp 0x1002cce1
jmp 0x1002ccbf
jmp 0x1002cc99
jmp 0x1002cc7c
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002cd56
push 1
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 4], 2
cmp dword [ebp - 0x1e0], 0x1c88
jge 0x1002cd79
mov edx, dword [ebp - 0x24c]
mov ecx, 0x10077e58
call fcn.1000530a
jmp 0x1002cd95
or dword [ebp - 4], 0xffffffff
jmp 0x1002cd9f
mov dword [ebp - 0x2f8], 0x10077860
mov dword [ebp - 0x318], 0x10077864
mov byte [0x1025a681], 1
push 1
lea ecx, [ebp - 0x2dc]
call fcn.10003233
mov dword [ebp - 4], 4
mov dword [ebp - 0x58], 0xfffffffd
mov dword [ebp - 0x8c], 0
jmp 0x1002cdee
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1002ce10
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x2dc]
call fcn.100032d2
mov dword [eax], 0x6192
jmp 0x1002cde1
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002ce2a
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov dword [ebp - 0x58], 0
jmp 0x1002ce3a
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1002ce53
push dword [ebp - 0x58]
lea ecx, [ebp - 0x2dc]
call fcn.100032d2
or dword [eax], 0xffffffff
jmp 0x1002ce33
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2dc]
call fcn.100032b6
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10077350
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0x120], 0x5210
mov dword [ebp - 0x278], str.btahw_fdan_cwwf
cmp dword [ebp - 0x120], 0x528f
jle 0x1002cf44
and dword [ebp - 0x74], 0
jmp 0x1002cea7
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x736a
jge 0x1002cf44
and dword [ebp - 0x78], 0
jmp 0x1002cec1
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x18b1
jge 0x1002cf3f
and dword [ebp - 0x80], 0
jmp 0x1002ced7
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1c23
jge 0x1002cf3a
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0x78]
mov eax, edx
cdq
idiv dword [ebp - 0x80]
mov eax, edx
cdq
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], edx
push dword [ebp - 0x270]
push dword [ebp - 0x274]
lea ecx, [ebp - 0x34c]
call fcn.10001a84
pop ecx
pop ecx
mov dword [ebp - 0x238], eax
mov ecx, dword [ebp - 0x238]
call fcn.1000309c
push eax
call fcn.1004434f
pop ecx
lea ecx, [ebp - 0x34c]
call fcn.10003092
jmp 0x1002ced0
jmp 0x1002ceba
jmp 0x1002cea0
mov dword [ebp - 4], 5
cmp dword [ebp - 0x120], 0x4fac
jge 0x1002cf63
push dword [ebp - 0x278]
call fcn.1004434f
pop ecx
jmp 0x1002cf7f
or dword [ebp - 4], 0xffffffff
jmp 0x1002cf89
mov dword [ebp - 0x60], 0xf29acd40
mov dword [ebp - 0x294], 0x5261fc42
mov dword [ebp - 0x88], 0
jmp 0x1002cfb3
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1002cfcf
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xdc], 0xeac45307
jmp 0x1002cfa6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x300], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x1002d091
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x2ec], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x2e0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x60], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp + eax - 0xdc]
jle 0x1002d04d
cmp dword [ebp - 0x60], 0
jne 0x1002d04d
and dword [ebp - 0x240], 0
jmp 0x1002d057
mov dword [ebp - 0x240], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x2fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
cmp ecx, dword [ebp + eax - 0xdc]
jg 0x1002d085
mov eax, 0x1c58
test eax, eax
je 0x1002d091
mov dword [ebp - 0x1e8], 1
jmp 0x1002d098
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x1e8], eax
jge 0x1002d0b9
mov dword [ebp - 0x128], 1
jmp 0x1002d0c0
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
sub ecx, 0x770b168f
sub ecx, dword [ebp + eax - 0xdc]
jne 0x1002d0ea
cmp dword [ebp - 0x60], 0
jne 0x1002d0ea
and dword [ebp - 0x1f0], 0
jmp 0x1002d0f4
mov dword [ebp - 0x1f0], 1
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0x294], eax
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1002d114
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10077350
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xf4]
mov dword [0x10077860], eax
mov dword [ebp - 0x1c], 0xd4e06482
mov dword [ebp - 0x280], 0x4709ba87
mov dword [ebp - 0x1c], 0x13
jmp 0x1002d151
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffed
je 0x1002d16b
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1002d169
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
jmp 0x1002d14a
mov dword [ebp - 0x1c], 0xfffffff7
jmp 0x1002d17b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffff
jl 0x1002d2f0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x38], 0xfffffff3
jmp 0x1002d19c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff6
jg 0x1002d2eb
mov dword [ebp - 0x200], 0xb9725245
mov dword [ebp - 0x248], 0xff12f3cc
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1002d1ce
mov dword [ebp - 0x130], 1
jmp 0x1002d1d5
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x38]
jle 0x1002d1e9
mov dword [ebp - 0x1f8], 1
jmp 0x1002d1f0
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x1f8]
jle 0x1002d20a
mov dword [ebp - 0x14c], 1
jmp 0x1002d211
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x200]
cmp eax, dword [ebp - 0x38]
je 0x1002d231
mov dword [ebp - 0x13c], 1
jmp 0x1002d238
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x13c], eax
jl 0x1002d24f
mov dword [ebp - 0x204], 1
jmp 0x1002d256
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x204], eax
jg 0x1002d270
mov dword [ebp - 0x144], 1
jmp 0x1002d277
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 0xffff
ja 0x1002d28f
mov dword [ebp - 0x1b4], 1
jmp 0x1002d296
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1b4], eax
je 0x1002d2ad
mov dword [ebp - 0x1ec], 1
jmp 0x1002d2b4
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0x1ec]
cmp eax, 0x600d5493
jg 0x1002d2d3
mov dword [ebp - 0x154], 1
jmp 0x1002d2da
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x280], eax
jmp 0x1002d195
jmp 0x1002d174
mov eax, dword [ebp - 0xc8]
mov dword [0x10077864], eax
mov dword [ebp - 0x18], 0x2fd41e55
mov dword [ebp - 0x98], 0x3a065c2d
mov dword [ebp - 0x14], 0x11bbb4f5
cmp dword [ebp - 0x18], 0
je 0x1002db2f
mov dword [ebp - 0x24], 0x714ad38
mov dword [ebp - 0x40], 0x8169c147
mov dword [ebp - 0x2d0], 0x85f402be
mov dword [ebp - 0x2cc], 0x85f402be
mov dword [ebp - 0x2c8], 0x85f402be
mov dword [ebp - 0x2c4], 0x85f402be
lea ecx, [ebp - 0xcd]
call fcn.100032e1
push eax
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x2d0]
push eax
lea ecx, [ebp - 0x324]
call fcn.100032e4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb4]
call fcn.10003290
mov dword [ebp - 4], 7
mov dword [ebp - 0xc4], 0xfb49a5c1
mov dword [ebp - 0xb8], 0xf242
mov dword [ebp - 0x68], 0
jmp 0x1002d3b3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1002d3c9
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xe8], 0xffffffff
jmp 0x1002d3ac
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jge 0x1002d3e9
mov dword [ebp - 0x1bc], 1
jmp 0x1002d3f0
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x24]
cmp dword [ebp - 0x18], eax
jne 0x1002d41d
cmp dword [ebp - 0x98], 0
jne 0x1002d41d
and dword [ebp - 0x15c], 0
jmp 0x1002d427
mov dword [ebp - 0x15c], 1
cmp dword [ebp - 0x15c], 0xfb2c41ac
jb 0x1002d43f
mov dword [ebp - 0x21c], 1
jmp 0x1002d446
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x164], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0xe8], ecx
cmp dword [ebp - 0x164], 0
jne 0x1002d4a1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xe8], 1
mov dword [ebp - 0x40], 1
cmp dword [ebp - 0x40], 0
jne 0x1002d4a1
and dword [ebp - 0x1c4], 0
jmp 0x1002d4ab
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x1c4]
dec eax
sub eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
sub ecx, 0xfff8
cmp ecx, dword [ebp - 0x14]
jle 0x1002d4d1
mov dword [ebp - 0x16c], 1
jmp 0x1002d4d8
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1f4], eax
push 3
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov ecx, dword [ebp - 0x1f4]
mov dword [eax], ecx
cmp dword [ebp - 0x1f4], 0
jne 0x1002d512
xor eax, eax
jne 0x1002d512
and dword [ebp - 0x174], 0
jmp 0x1002d51c
mov dword [ebp - 0x174], 1
cmp dword [ebp - 0x174], 0
je 0x1002d53a
cmp dword [ebp - 0xc4], 0
je 0x1002d53a
mov dword [ebp - 0x1cc], 1
jmp 0x1002d541
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1cc], eax
jge 0x1002d558
mov dword [ebp - 0x17c], 1
jmp 0x1002d55f
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x17c]
test eax, eax
je 0x1002d760
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x18c], 0x8dfef28e
mov dword [ebp - 0x19c], 0xeaf79217
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x4c]
jge 0x1002d5a6
mov dword [ebp - 0x210], 1
jmp 0x1002d5ad
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x14]
jge 0x1002d5d6
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe8], 0
je 0x1002d5d6
mov dword [ebp - 0x184], 1
jmp 0x1002d5dd
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x14]
jne 0x1002d5f7
cmp dword [ebp - 0x4c], 0
jne 0x1002d5f7
and dword [ebp - 0xec], 0
jmp 0x1002d601
mov dword [ebp - 0xec], 1
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x4c]
jl 0x1002d624
mov dword [ebp - 0x1fc], 1
jmp 0x1002d62b
and dword [ebp - 0x1fc], 0
push 1
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov ecx, dword [ebp - 0x1fc]
cmp ecx, dword [eax]
jg 0x1002d64e
mov dword [ebp - 0x250], 1
jmp 0x1002d655
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x40], 1
je 0x1002d667
mov dword [ebp - 0x194], 1
jmp 0x1002d66e
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x4c]
imul eax, eax, 7
cmp eax, 0xffffffff
jl 0x1002d68f
mov dword [ebp - 0xcc], 1
jmp 0x1002d696
and dword [ebp - 0xcc], 0
push 3
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov ecx, dword [ebp - 0xcc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x14]
jl 0x1002d6c5
mov dword [ebp - 0x1dc], 1
jmp 0x1002d6cc
and dword [ebp - 0x1dc], 0
imul eax, dword [ebp - 0x1dc], 0x28
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x1002d6f4
mov dword [ebp - 0x224], 1
jmp 0x1002d6fb
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0
jae 0x1002d719
mov eax, 0xd591
test eax, eax
je 0x1002d719
mov dword [ebp - 0x1a4], 1
jmp 0x1002d720
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1a4], eax
jl 0x1002d73d
mov eax, 0x2acf
test eax, eax
jne 0x1002d73d
and dword [ebp - 0x1e4], 0
jmp 0x1002d747
mov dword [ebp - 0x1e4], 1
mov eax, dword [ebp - 0x1e4]
neg eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xe8], eax
jmp 0x1002db1e
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x14], 0
jmp 0x1002d77a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1002db05
mov dword [ebp - 0x298], 7
mov dword [ebp - 0xa8], 0xfacdc9f
mov dword [ebp - 0x288], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x18]
jg 0x1002d7b9
mov dword [ebp - 0x134], 1
jmp 0x1002d7c0
and dword [ebp - 0x134], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov ecx, dword [ebp - 0x134]
cmp ecx, dword [eax]
jle 0x1002d7e4
mov dword [ebp - 0x138], 1
jmp 0x1002d7eb
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x138], eax
jl 0x1002d805
mov dword [ebp - 0x140], 1
jmp 0x1002d80c
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 1
jge 0x1002d821
mov dword [ebp - 0x148], 1
jmp 0x1002d828
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x298], 7
je 0x1002d84c
mov eax, 0x8c6e
test eax, eax
je 0x1002d84c
mov dword [ebp - 0x150], 1
jmp 0x1002d853
and dword [ebp - 0x150], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov ecx, dword [ebp - 0x150]
cmp ecx, dword [eax]
jg 0x1002d880
mov eax, 0xdbc3
test eax, eax
je 0x1002d880
mov dword [ebp - 0x158], 1
jmp 0x1002d887
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
dec eax
cmp eax, 0x20d6cd47
jne 0x1002d8a1
mov dword [ebp - 0x160], 1
jmp 0x1002d8a8
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x160], eax
je 0x1002d8c8
mov dword [ebp - 0x168], 1
jmp 0x1002d8cf
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
inc eax
inc eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xc4]
jle 0x1002d8f7
mov dword [ebp - 0x258], 1
jmp 0x1002d8fe
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
cmp ecx, dword [ebp + eax - 0xe8]
jge 0x1002d928
mov dword [ebp - 0x170], 1
jmp 0x1002d92f
and dword [ebp - 0x170], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov esi, dword [eax]
add esi, dword [ebp - 0x170]
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
cmp dword [eax], esi
jne 0x1002d963
mov dword [ebp - 0x178], 1
jmp 0x1002d96a
and dword [ebp - 0x178], 0
mov esi, dword [ebp - 0x178]
sub esi, 0x3c92ac9e
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov dword [eax], esi
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x314], eax
push 1
lea ecx, [ebp - 0xb4]
call fcn.100032d2
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
mov dword [eax], 1
cmp dword [ebp - 0x14], 1
jg 0x1002d9c5
mov dword [ebp - 0x180], 1
jmp 0x1002d9cc
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x180], eax
jle 0x1002d9e3
mov dword [ebp - 0x188], 1
jmp 0x1002d9ea
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xa0]
jg 0x1002da10
mov dword [ebp - 0x260], 1
jmp 0x1002da17
and dword [ebp - 0x260], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x14], 0x3647
jle 0x1002da3e
mov dword [ebp - 0x190], 1
jmp 0x1002da45
and dword [ebp - 0x190], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
add eax, 0xf5e9
cmp eax, dword [ebp - 0x190]
jg 0x1002da6a
mov dword [ebp - 0x198], 1
jmp 0x1002da71
and dword [ebp - 0x198], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x198]
sub ecx, dword [ebp + eax - 0xe8]
cmp ecx, dword [ebp - 0xa8]
jle 0x1002da98
mov dword [ebp - 0x1a0], 1
jmp 0x1002da9f
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
add eax, 0xe5e1922
je 0x1002dacb
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb4]
call fcn.100032d2
cmp dword [eax], 0
je 0x1002dacb
mov dword [ebp - 0x1a8], 1
jmp 0x1002dad2
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x1a8], eax
jge 0x1002daec
mov dword [ebp - 0x1b0], 1
jmp 0x1002daf3
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x40], eax
jmp 0x1002d773
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1002db1e
push 0x213f
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4]
call fcn.100032b6
jmp 0x1002db5e
mov dword [ebp - 0x18], 0xffffffed
jmp 0x1002db3f
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe6
jge 0x1002db5e
mov dword [ebp - 0xf0], 1
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
jmp 0x1002db38
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
push dword [ecx + eax]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf4]
push dword [ecx + eax]
call fcn.1002c5c7
pop ecx
pop ecx
mov dword [ebp - 0x244], eax
mov dword [ebp - 0x50], 0x15e1abe8
mov dword [ebp - 0x34], 0xfffffffc
mov dword [ebp - 0xc0], 0xbf35dd75
mov dword [ebp - 0x11c], 0x6a218f0e
push 2
lea ecx, [ebp - 0x2b0]
call fcn.10003233
mov dword [ebp - 4], 8
mov dword [ebp - 0x234], 0xfffffff6
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x2e8], 0xfeea382
mov dword [ebp - 0x9c], 0
jmp 0x1002dbf6
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1002dc15
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x2b0]
call fcn.100032d2
and dword [eax], 0
jmp 0x1002dbe9
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x34]
jne 0x1002dcdf
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x50]
lea eax, [ecx + eax - 0x5411]
cmp eax, dword [ebp - 0x34]
jle 0x1002dc45
mov dword [ebp - 0xfc], 1
jmp 0x1002dc4c
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x50]
jne 0x1002dc66
cmp dword [ebp - 0x34], 0
jne 0x1002dc66
and dword [ebp - 0x104], 0
jmp 0x1002dc70
mov dword [ebp - 0x104], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x104], eax
jg 0x1002dc87
mov dword [ebp - 0x290], 1
jmp 0x1002dc8e
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x2e4], eax
xor eax, eax
inc eax
cmp eax, 0xfffffff7
ja 0x1002dcae
mov dword [ebp - 0x10c], 1
jmp 0x1002dcb5
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0x6cd0
jge 0x1002dccd
mov dword [ebp - 0x114], 1
jmp 0x1002dcd4
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x114], eax
jge 0x1002dce3
cmp dword [ebp - 0x34], 0
mov dword [ebp - 0x11c], 0x3271
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x11c]
jl 0x1002dd04
mov dword [ebp - 0x26c], 1
jmp 0x1002dd0b
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x310], eax
mov esi, dword [ebp - 0xc0]
inc esi
push 0
lea ecx, [ebp - 0x2b0]
call fcn.100032d2
cmp esi, dword [eax]
jg 0x1002dd38
mov dword [ebp - 0x124], 1
jmp 0x1002dd3f
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x124], eax
jle 0x1002dd59
mov dword [ebp - 0x12c], 1
jmp 0x1002dd60
and dword [ebp - 0x12c], 0
mov esi, dword [ebp - 0x12c]
add esi, 0x5b48
push 1
lea ecx, [ebp - 0x2b0]
call fcn.100032d2
cmp esi, dword [eax]
jge 0x1002dd89
mov dword [ebp - 0x230], 1
jmp 0x1002dd90
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x23c], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b0]
call fcn.100032b6
push dword [ebp - 0xc8]
mov edx, 0x10077734
mov ecx, dword [ebp - 0x244]
call fcn.1002c661
pop ecx
mov esi, 0x10077860
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret