Function at 0x1002dac4
Capabilities:
Get common file path
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061c6b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x7d4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
cmp dword [ebp + 0x10], 0
jbe 0x1002def7
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x1002def7
mov dword [ebp - 0xb4], 0xffffffff
mov dword [ebp - 0x5c], 0x7457
push 2
lea ecx, [ebp - 0x4b0]
call fcn.1000457d
and dword [ebp - 4], 0
mov dword [ebp - 0x400], 0x22803359
mov dword [ebp - 0xd4], 0x1f0ef2f3
mov dword [ebp - 0x464], 0x51b3
mov dword [ebp - 0x4ec], str.wic_uosfadkw_eju_ajwwz_jtmuizmja_qkxpcx_bnoqsz_krabg_paciss_txy
cmp dword [ebp - 0x464], 0x525f
jle 0x1002dc03
and dword [ebp - 0x1dc], 0
jmp 0x1002db6f
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x64b1
jge 0x1002dc03
and dword [ebp - 0x1cc], 0
jmp 0x1002db95
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x6858
jge 0x1002dbfe
and dword [ebp - 0x1d4], 0
jmp 0x1002dbb7
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x301d
jge 0x1002dbfc
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1d4]
sar eax, cl
and eax, dword [ebp - 0x1dc]
cdq
mov dword [ebp - 0x51c], eax
mov dword [ebp - 0x518], edx
push dword [ebp - 0x518]
push dword [ebp - 0x51c]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002dbaa
jmp 0x1002db88
jmp 0x1002db62
mov dword [ebp - 0x1e4], 0
jmp 0x1002dc1c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1002dc3e
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
mov dword [eax], 0xc7d24b5e
jmp 0x1002dc0f
mov byte [ebp - 4], 1
cmp dword [ebp - 0x464], 0x4f33
jge 0x1002dc5e
mov edx, dword [ebp - 0x4ec]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x1002dc7a
and dword [ebp - 4], 0
jmp 0x1002dc84
cmp dword [ebp - 0xb4], 0
jne 0x1002ddfc
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb4]
jg 0x1002dcab
mov dword [ebp - 0x460], 1
jmp 0x1002dcb2
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
neg eax
cmp eax, 0xa4c924b5
jae 0x1002dccd
mov dword [ebp - 0x468], 1
jmp 0x1002dcd4
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x4571
je 0x1002dcef
cmp dword [ebp - 0x5c], 0
jne 0x1002dcef
and dword [ebp - 0x1f0], 0
jmp 0x1002dcf9
mov dword [ebp - 0x1f0], 1
push 0
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
mov ecx, dword [ebp - 0x1f0]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1f0], eax
jne 0x1002dd28
mov dword [ebp - 0x470], 1
jmp 0x1002dd2f
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 1
je 0x1002dd44
mov dword [ebp - 0x478], 1
jmp 0x1002dd4b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x478]
neg eax
jne 0x1002dd77
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002dd77
and dword [ebp - 0x480], 0
jmp 0x1002dd81
mov dword [ebp - 0x480], 1
cmp dword [ebp - 0x480], 0x7c57f39c
je 0x1002dd99
mov dword [ebp - 0x488], 1
jmp 0x1002dda0
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0x94b4
jle 0x1002ddb8
mov dword [ebp - 0x4a0], 1
jmp 0x1002ddbf
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
add eax, 0x24b2e809
jne 0x1002ddde
cmp dword [ebp - 0xb4], 0
jne 0x1002ddde
and dword [ebp - 0x2b4], 0
jmp 0x1002dde8
mov dword [ebp - 0x2b4], 1
mov eax, dword [ebp - 0x2b4]
add eax, 3
jne 0x1002ddfc
and dword [ebp - 0x25c], 0
jmp 0x1002de06
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 0
jne 0x1002de36
push 1
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002de36
and dword [ebp - 0x594], 0
jmp 0x1002de40
mov dword [ebp - 0x594], 1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd4], 0
jmp 0x1002de62
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
je 0x1002ded4
mov dword [ebp - 0x5c], 0
jmp 0x1002de7b
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jg 0x1002ded2
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1002deae
push 0
push 0x2105
push 0
push 0xa98
push 0
push 0x1579
call dword [sym.imp.USER32.dll_DrawTextExW]
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
mov esi, eax
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x4b0]
call fcn.1000461c
mov eax, dword [eax]
mov dword [esi], eax
jmp 0x1002de74
jmp 0x1002de55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.10004600
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.10027106
pop ecx
pop ecx
jmp 0x100316fb
mov dword [ebp - 0x6c], 4
mov dword [ebp - 0x69c], 0
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x210], 1
mov dword [ebp - 0x18c], 0xfff9
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x5b4], 0x1663
mov dword [ebp - 0x5cc], 0xc249dd62
mov dword [ebp - 0x1ec], 0
jmp 0x1002df5d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 3
jge 0x1002df79
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x618], 5
jmp 0x1002df50
mov dword [ebp - 0x6c], 0xfffffff9
jmp 0x1002df89
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe7
je 0x1002e5b4
push 1
lea ecx, [ebp - 0x250]
call fcn.1000457d
mov dword [ebp - 4], 3
push 2
lea ecx, [ebp - 0x244]
call fcn.1000457d
mov byte [ebp - 4], 4
mov dword [ebp - 0x264], 0xca8
mov dword [ebp - 0x59c], str.hwqnqawhc_lnyox_rwywed_edvxbvfw_tok_xwnzo_ynkcu_nauikhbf_xeedwgy_cnisv_rojjf
cmp dword [ebp - 0x264], 0xced
jle 0x1002e087
and dword [ebp - 0x13c], 0
jmp 0x1002dff2
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x6e2c
jge 0x1002e087
and dword [ebp - 0x1d0], 0
jmp 0x1002e018
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x4e4
jge 0x1002e082
and dword [ebp - 0x184], 0
jmp 0x1002e03a
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x4c00
jge 0x1002e080
mov ecx, dword [ebp - 0x1d0]
imul ecx, dword [ebp - 0x184]
mov eax, dword [ebp - 0x13c]
shl eax, cl
cdq
mov dword [ebp - 0x528], eax
mov dword [ebp - 0x524], edx
push dword [ebp - 0x524]
push dword [ebp - 0x528]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002e02d
jmp 0x1002e00b
jmp 0x1002dfe5
mov dword [ebp - 0x2ac], 9
mov byte [ebp - 4], 5
cmp dword [ebp - 0x264], 0x982
jge 0x1002e0b1
mov edx, dword [ebp - 0x59c]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x1002e0cd
mov dword [ebp - 4], 4
jmp 0x1002e0dd
mov dword [ebp - 0x5a4], 0
push 2
lea ecx, [ebp - 0x4bc]
call fcn.1000457d
mov byte [ebp - 4], 7
mov dword [ebp - 0x2c], 0
jmp 0x1002e108
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002e124
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov dword [eax], 0x13a473eb
jmp 0x1002e101
mov dword [ebp - 0x2c], 0
jmp 0x1002e134
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002e150
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x244]
call fcn.1000461c
mov dword [eax], 0xfffffff6
jmp 0x1002e12d
mov dword [ebp - 0x2c], 0
jmp 0x1002e160
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002e17c
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4bc]
call fcn.1000461c
mov dword [eax], 0x20f9
jmp 0x1002e159
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
and dword [eax], 0
jmp 0x1002e1b2
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x408]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x408]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
cmp dword [eax], 0
jl 0x1002e2ea
mov dword [ebp - 0x418], 2
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6bc], eax
mov esi, dword [ebp - 0x418]
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
push dword [eax]
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov eax, dword [eax]
lea esi, [esi + eax - 0x53470d46]
push 0
lea ecx, [ebp - 0x244]
call fcn.1000461c
cmp esi, dword [eax]
jge 0x1002e221
mov dword [ebp - 0x26c], 1
jmp 0x1002e228
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x26c], eax
je 0x1002e24e
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002e24e
and dword [ebp - 0x410], 0
jmp 0x1002e258
mov dword [ebp - 0x410], 1
cmp dword [ebp - 0x410], 0xc0198ab7
je 0x1002e270
mov dword [ebp - 0x274], 1
jmp 0x1002e277
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x274]
cmp eax, 0xffffffff
jne 0x1002e294
mov dword [ebp - 0x27c], 1
jmp 0x1002e29b
and dword [ebp - 0x27c], 0
mov esi, dword [ebp - 0x418]
push 0
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov edi, eax
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
push dword [eax]
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov ebx, dword [eax]
add ebx, dword [edi]
sub ebx, esi
add ebx, dword [ebp - 0x27c]
push 0
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov dword [eax], ebx
jmp 0x1002e18e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x618]
mov ecx, dword [ebp - 0x18c]
mov edx, dword [ebp - 0x18c]
inc edx
mov dword [ebp - 0x18c], edx
cmp ecx, eax
jl 0x1002e563
xor eax, eax
jne 0x1002e492
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x284], eax
push 1
lea ecx, [ebp - 0x244]
call fcn.1000461c
mov ecx, dword [ebp - 0x284]
mov dword [eax], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x618]
add eax, 0x52d9
cmp dword [ebp - 0x284], eax
jl 0x1002e36c
mov dword [ebp - 0x428], 1
jmp 0x1002e373
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 2
jne 0x1002e388
mov dword [ebp - 0x28c], 1
jmp 0x1002e38f
and dword [ebp - 0x28c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x618]
add eax, dword [ebp - 0x28c]
jne 0x1002e3be
push 0
lea ecx, [ebp - 0x250]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002e3be
and dword [ebp - 0x5ac], 0
jmp 0x1002e3c8
mov dword [ebp - 0x5ac], 1
mov eax, 0xfff7
test eax, eax
jne 0x1002e3e3
cmp dword [ebp - 0x5b4], 0
jne 0x1002e3e3
and dword [ebp - 0x5bc], 0
jmp 0x1002e3ed
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x694], eax
push 4
pop esi
shl esi, 1
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000461c
mov eax, dword [eax]
mov dword [ebp + esi - 0x618], eax
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x430]
jg 0x1002e432
mov dword [ebp - 0x294], 1
jmp 0x1002e439
and dword [ebp - 0x294], 0
push 1
lea ecx, [ebp - 0x4bc]
call fcn.1000461c
mov ecx, dword [ebp - 0x294]
cmp ecx, dword [eax]
jge 0x1002e45c
mov dword [ebp - 0x5c4], 1
jmp 0x1002e463
and dword [ebp - 0x5c4], 0
push 0
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov esi, dword [ebp - 0x5cc]
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000461c
mov eax, dword [eax]
sub eax, esi
jne 0x1002e492
and dword [ebp - 0x438], 0
jmp 0x1002e49c
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x438], eax
jl 0x1002e4b6
mov dword [ebp - 0x29c], 1
jmp 0x1002e4bd
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x29c], eax
jne 0x1002e4d7
mov dword [ebp - 0x440], 1
jmp 0x1002e4de
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x46c42882
jle 0x1002e4f6
mov dword [ebp - 0x2a4], 1
jmp 0x1002e4fd
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0xecb4
jl 0x1002e515
mov dword [ebp - 0x448], 1
jmp 0x1002e51c
and dword [ebp - 0x448], 0
mov esi, dword [ebp - 0x448]
sub esi, dword [ebp - 0x2ac]
push 0
lea ecx, [ebp - 0x4bc]
call fcn.1000461c
cmp esi, dword [eax]
je 0x1002e545
mov dword [ebp - 0x450], 1
jmp 0x1002e54c
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x450]
jne 0x1002e563
and dword [ebp - 0x458], 0
jmp 0x1002e56d
mov dword [ebp - 0x458], 1
push 0
lea ecx, [ebp - 0x250]
call fcn.1000461c
mov ecx, dword [ebp - 0x458]
mov dword [eax], ecx
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4bc]
call fcn.10004600
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x244]
call fcn.10004600
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.10004600
jmp 0x1002df82
mov dword [ebp - 0x144], 0xa8eac8b
mov byte [ebp - 0x88], 0
movzx eax, byte [ebp - 0x88]
test eax, eax
je 0x1002e5e1
push 0
push 1
push 0x1909
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [ebp - 0x144], 0
jmp 0x1002e5fa
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 9
jle 0x1002e6bc
push 2
lea ecx, [ebp - 0x674]
call fcn.1000457d
mov dword [ebp - 4], 8
mov dword [ebp - 0x14c], 0x942a1e94
mov dword [ebp - 0x194], 0
jmp 0x1002e63e
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x1002e660
push dword [ebp - 0x194]
lea ecx, [ebp - 0x674]
call fcn.1000461c
mov dword [eax], 0xfffffff9
jmp 0x1002e631
mov dword [ebp - 0x14c], 1
jmp 0x1002e679
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x1002e6a8
mov byte [ebp - 0x86], 0
movzx eax, byte [ebp - 0x86]
test eax, eax
je 0x1002e6a6
push 0xc55
push 0x2323
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x1002e66c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x674]
call fcn.10004600
jmp 0x1002e5ed
cmp dword [ebp + 0x10], 0
jne 0x10030b9c
push 2
lea ecx, [ebp - 0x12c]
call fcn.1000457d
mov dword [ebp - 4], 9
mov dword [ebp - 0x218], 5
mov dword [ebp - 0x3c4], 0x6971db95
mov dword [ebp - 0x130], 0xfffffffd
mov dword [ebp - 0x3cc], 0xfebdab6a
mov dword [ebp - 0x5d4], 0x2ffa36fe
mov dword [ebp - 0x60c], 6
mov dword [ebp - 0x40], 0
jmp 0x1002e726
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1002e742
push dword [ebp - 0x40]
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov dword [eax], 1
jmp 0x1002e71f
mov dword [ebp - 0x40], 0
jmp 0x1002e752
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1002e768
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x76c], 0xfffffff9
jmp 0x1002e74b
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002e8f4
push 0
lea ecx, [ebp - 0x12c]
call fcn.1000461c
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002e7a1
xor eax, eax
je 0x1002e7bf
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002e7bf
mov dword [ebp - 0x498], 1
jmp 0x1002e7c6
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xfffd
jae 0x1002e7ea
mov dword [ebp - 0x2bc], 1
jmp 0x1002e7f1
and dword [ebp - 0x2bc], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov ecx, dword [ebp - 0x2bc]
cmp ecx, dword [eax]
jl 0x1002e814
mov dword [ebp - 0x3bc], 1
jmp 0x1002e81b
and dword [ebp - 0x3bc], 0
push 0
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov ecx, dword [ebp - 0x3bc]
cmp ecx, dword [eax]
jle 0x1002e83e
mov dword [ebp - 0x2c4], 1
jmp 0x1002e845
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0xfffe
jae 0x1002e85d
mov dword [ebp - 0x43c], 1
jmp 0x1002e864
and dword [ebp - 0x43c], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov esi, dword [ebp - 0x43c]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp esi, dword [eax]
jg 0x1002e896
mov dword [ebp - 0x2cc], 1
jmp 0x1002e89d
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0x3c4], eax
mov esi, dword [ebp - 0x3c4]
push 0
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp esi, dword [eax]
jle 0x1002e8cc
mov dword [ebp - 0x2d4], 1
jmp 0x1002e8d3
and dword [ebp - 0x2d4], 0
imul esi, dword [ebp - 0x2d4], 0xfffffff7
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
cmp esi, dword [eax]
jne 0x1002e8f4
and dword [ebp - 0x47c], 0
jmp 0x1002e8fe
mov dword [ebp - 0x47c], 1
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov ecx, dword [ebp - 0x47c]
cmp ecx, dword [eax]
jne 0x1002e921
mov dword [ebp - 0x2dc], 1
jmp 0x1002e928
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x130]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0x130]
jne 0x1002e96c
mov dword [ebp - 0x2e4], 1
jmp 0x1002e973
and dword [ebp - 0x2e4], 0
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
mov esi, dword [eax]
add esi, dword [ebp - 0x2e4]
push 1
lea ecx, [ebp - 0x12c]
call fcn.1000461c
imul esi, dword [eax]
cmp esi, 0xfffffffd
jne 0x1002e9a9
mov dword [ebp - 0x444], 1
jmp 0x1002e9b0
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x444], eax
jne 0x1002e9ca
mov dword [ebp - 0x2ec], 1
jmp 0x1002e9d1
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0xcdd5376e
jae 0x1002e9e9
mov dword [ebp - 0x3d4], 1
jmp 0x1002e9f0
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x5d4], eax
mov dword [ebp - 0x60c], 0x3ac16b40
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12c]
call fcn.10004600
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.1002083a
mov dword [ebp - 0x160], eax
push 3
lea ecx, [ebp - 0x98]
call fcn.1000457d
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x2f4], 0x29f0
mov dword [ebp - 0x5c0], str.xbuvytfuo_adkyuimvz_rffwhdk_ofna_oecgumkm
cmp dword [ebp - 0x2f4], 0x2db7
jle 0x1002eb3a
and dword [ebp - 0x154], 0
jmp 0x1002ea7b
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x6ee5
jge 0x1002eb3a
and dword [ebp - 0x19c], 0
jmp 0x1002eaa1
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x762d
jge 0x1002eb35
and dword [ebp - 0x15c], 0
jmp 0x1002eac7
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x2481
jge 0x1002eb30
mov eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x15c]
cdq
mov dword [ebp - 0x534], eax
mov dword [ebp - 0x530], edx
push dword [ebp - 0x530]
push dword [ebp - 0x534]
lea ecx, [ebp - 0x7b4]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x600], eax
mov ecx, dword [ebp - 0x600]
call fcn.100042ab
push eax
call fcn.10049ba3
pop ecx
lea ecx, [ebp - 0x7b4]
call fcn.100042a1
jmp 0x1002eaba
jmp 0x1002ea94
jmp 0x1002ea6e
mov dword [ebp - 0x1b4], 0xffffffff
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x2f4], 0x28fe
jge 0x1002eb60
push dword [ebp - 0x5c0]
call fcn.10049ba3
pop ecx
jmp 0x1002eb7c
mov dword [ebp - 4], 0xa
jmp 0x1002eb8c
mov dword [ebp - 0xb0], 0xba8dad4f
mov dword [ebp - 0x1a4], 0
jmp 0x1002ebaf
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x1002ebce
push dword [ebp - 0x1a4]
lea ecx, [ebp - 0x98]
call fcn.1000461c
and dword [eax], 0
jmp 0x1002eba2
mov dword [ebp - 0x14], 2
jmp 0x1002ebde
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002f196
mov dword [ebp - 0x70], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002f186
mov dword [ebp - 0xbc], 0xa680
mov dword [ebp - 0x16c], 0x2e809b4a
mov dword [ebp - 0x510], 0x49cff29c
push 2
lea ecx, [ebp - 0x5e4]
call fcn.1000457d
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x164], 0
jmp 0x1002ec4e
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1002ec70
push dword [ebp - 0x164]
lea ecx, [ebp - 0x5e4]
call fcn.1000461c
mov dword [eax], 0x3202f603
jmp 0x1002ec41
cmp dword [ebp - 0xbc], 0
je 0x1002eef3
mov dword [ebp - 0x314], 0x3c5a4a10
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1002eca1
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x70]
jl 0x1002ecb5
mov dword [ebp - 0x490], 1
jmp 0x1002ecbc
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x16c], eax
mov esi, dword [ebp - 0x16c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov eax, dword [eax]
sub eax, esi
je 0x1002ed01
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002ed01
mov dword [ebp - 0x2fc], 1
jmp 0x1002ed08
and dword [ebp - 0x2fc], 0
push 0
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov ecx, dword [ebp - 0x2fc]
cmp ecx, dword [eax]
je 0x1002ed2b
mov dword [ebp - 0x4f4], 1
jmp 0x1002ed32
and dword [ebp - 0x4f4], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
push 1
lea ecx, [ebp - 0x98]
call fcn.1000461c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0xbc]
jne 0x1002ed7b
cmp dword [ebp - 0x510], 0
jne 0x1002ed7b
and dword [ebp - 0x3dc], 0
jmp 0x1002ed85
mov dword [ebp - 0x3dc], 1
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x27d373ee
jle 0x1002eda9
mov dword [ebp - 0x304], 1
jmp 0x1002edb0
and dword [ebp - 0x304], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov ecx, dword [ebp - 0x304]
cmp ecx, dword [eax]
je 0x1002edd4
mov dword [ebp - 0x598], 1
jmp 0x1002eddb
and dword [ebp - 0x598], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x1002ee19
mov dword [ebp - 0x44c], 1
jmp 0x1002ee20
and dword [ebp - 0x44c], 0
imul esi, dword [ebp - 0x44c], 0x8a36
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
cmp esi, dword [eax]
je 0x1002ee48
mov dword [ebp - 0x30c], 1
jmp 0x1002ee4f
and dword [ebp - 0x30c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x30c]
jg 0x1002ee73
mov dword [ebp - 0x3e4], 1
jmp 0x1002ee7a
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0x70]
push 2
lea ecx, [ebp - 0x98]
call fcn.1000461c
cmp dword [eax], esi
jge 0x1002eeb2
mov dword [ebp - 0x484], 1
jmp 0x1002eeb9
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xdd33d73c
ja 0x1002eed1
mov dword [ebp - 0x31c], 1
jmp 0x1002eed8
and dword [ebp - 0x31c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
jmp 0x1002f175
mov dword [ebp - 0x4fc], 0xfffffff8
mov dword [ebp - 0x1ac], 0
jmp 0x1002ef16
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1002ef32
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x624], 0
jmp 0x1002ef09
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1002ef57
push 0
lea ecx, [ebp - 0x5e4]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002ef57
mov dword [ebp - 0x220], 1
jmp 0x1002ef5e
and dword [ebp - 0x220], 0
push 1
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov ecx, dword [ebp - 0x220]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x220], eax
jne 0x1002ef8d
mov dword [ebp - 0x3ec], 1
jmp 0x1002ef94
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x624]
sub eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0xbc], eax
je 0x1002efcd
or eax, 0xffffffff
jne 0x1002efcd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x624], 0
jne 0x1002efcd
and dword [ebp - 0x324], 0
jmp 0x1002efd7
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x324]
je 0x1002eff7
cmp dword [ebp - 0x70], 0
je 0x1002eff7
mov dword [ebp - 0x454], 1
jmp 0x1002effe
and dword [ebp - 0x454], 0
mov esi, dword [ebp - 0x70]
add esi, dword [ebp - 0x454]
push 0
lea ecx, [ebp - 0x5e4]
call fcn.1000461c
cmp esi, dword [eax]
jg 0x1002f043
cmp dword [ebp - 0x14], 0
je 0x1002f043
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x624], 0
je 0x1002f043
cmp dword [ebp - 0xbc], 0
je 0x1002f043
mov dword [ebp - 0x32c], 1
jmp 0x1002f04a
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0xb0]
sub eax, dword [ebp - 0x32c]
sub eax, 0x78be
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xb0], 3
mov esi, dword [ebp - 0xb0]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov dword [eax], esi
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x6c0], eax
push 2
lea ecx, [ebp - 0x98]
call fcn.1000461c
cmp dword [eax], 0
jl 0x1002f0a8
mov dword [ebp - 0x3f4], 1
jmp 0x1002f0af
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x14]
jge 0x1002f0c9
mov dword [ebp - 0x334], 1
jmp 0x1002f0d0
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
sub eax, dword [ebp - 0x70]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x624], eax
jge 0x1002f0f4
mov dword [ebp - 0x494], 1
jmp 0x1002f0fb
and dword [ebp - 0x494], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x98]
call fcn.1000461c
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jge 0x1002f11f
mov dword [ebp - 0x33c], 1
jmp 0x1002f126
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
je 0x1002f14d
push 0
lea ecx, [ebp - 0x5e4]
call fcn.1000461c
cmp dword [eax], 0
jne 0x1002f15f
cmp dword [ebp - 0x1b4], 0
jne 0x1002f15f
and dword [ebp - 0x3fc], 0
jmp 0x1002f169
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x4fc], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x5e4]
call fcn.10004600
jmp 0x1002f191
cmp dword [ebp - 0xb0], 0
je 0x1002f191
jmp 0x1002f196
jmp 0x1002ebd7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.10004600
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0xac], 0xfffffff8
mov dword [ebp - 0x174], 0xfffffff7
mov dword [ebp - 0xe4], 0xfffffff9
mov dword [ebp - 0x234], 0xdbd3d38e
mov dword [ebp - 0x5fc], 2
push 1
lea ecx, [ebp - 0x5f4]
call fcn.1000457d
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x18], 0
jmp 0x1002f202
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002f218
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdc], 0x6200
jmp 0x1002f1fb
mov dword [ebp - 0x18], 0
jmp 0x1002f228
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1002f23e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x540], 0x22cbd4da
jmp 0x1002f221
mov dword [ebp - 0x18], 0
jmp 0x1002f24e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002f26a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5f4]
call fcn.1000461c
mov dword [eax], 3
jmp 0x1002f247
mov dword [ebp - 0x18], 0
jmp 0x1002f27a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1002f290
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x700], 1
jmp 0x1002f273
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1002f2a4
mov dword [ebp - 0x354], 1
jmp 0x1002f2ab
and dword [ebp - 0x354], 0
cmp dword [ebp - 0x1c], 0
jne 0x1002f2c0
cmp dword [ebp - 0x1c], 0
jne 0x1002f2c0
and dword [ebp - 0x344], 0
jmp 0x1002f2ca
mov dword [ebp - 0x344], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x344], eax
jg 0x1002f2e1
mov dword [ebp - 0x45c], 1
jmp 0x1002f2e8
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x1c]
je 0x1002f30b
mov dword [ebp - 0x34c], 1
jmp 0x1002f312
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x34c], eax
jne 0x1002f329
mov dword [ebp - 0x5d0], 1
jmp 0x1002f330
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x1c]
jl 0x1002f347
mov dword [ebp - 0x404], 1
jmp 0x1002f34e
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
add eax, 0x2c76ae02
je 0x1002f36e
push 5
pop eax
test eax, eax
je 0x1002f36e
mov dword [ebp - 0x504], 1
jmp 0x1002f375
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x1002f389
mov dword [ebp - 0x48c], 1
jmp 0x1002f390
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 0x48c]
je 0x1002f3aa
mov dword [ebp - 0x35c], 1
jmp 0x1002f3b1
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x35c], eax
jl 0x1002f3c8
mov dword [ebp - 0x228], 1
jmp 0x1002f3cf
and dword [ebp - 0x228], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0xdc], ecx
cmp dword [ebp - 0x228], 0
je 0x1002f407
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x1002f407
mov dword [ebp - 0x5a0], 1
jmp 0x1002f40e
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
je 0x1002f431
mov dword [ebp - 0x40c], 1
jmp 0x1002f438
and dword [ebp - 0x40c], 0
cmp dword [ebp - 0x40c], 1
je 0x1002f44d
mov dword [ebp - 0x50c], 1
jmp 0x1002f454
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x6c8], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x690], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x678], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x364], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x364]
mov dword [ebp + eax - 0x540], ecx
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0xe4]
jge 0x1002f4bb
mov dword [ebp - 0x254], 1
jmp 0x1002f4c2
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x254]
lea eax, [ecx + eax - 0x7848f276]
test eax, eax
jne 0x1002f4ec
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1002f4ec
mov dword [ebp - 0x36c], 1
jmp 0x1002f4f3
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
sub eax, dword [ebp - 0xe4]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x688], eax
xor eax, eax
cmp eax, 0xfffffff6
jae 0x1002f524
mov dword [ebp - 0x414], 1
jmp 0x1002f52b
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x5fc], eax
mov esi, dword [ebp - 0x174]
push 0
lea ecx, [ebp - 0x5f4]
call fcn.1000461c
mov dword [eax], esi
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x540], 0
je 0x1002f606
cmp dword [ebp - 0x1c], 0xc8f381c4
jne 0x1002f585
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x1002f585
mov dword [ebp - 0x514], 1
jmp 0x1002f58c
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x6a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp eax, dword [ebp - 0x234]
jge 0x1002f5bd
push 9
pop eax
test eax, eax
jne 0x1002f5bd
and dword [ebp - 0x374], 0
jmp 0x1002f5c7
mov dword [ebp - 0x374], 1
cmp dword [ebp - 0x374], 0xb104b5bc
je 0x1002f5df
mov dword [ebp - 0x49c], 1
jmp 0x1002f5e6
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
sub eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0x174]
je 0x1002f606
mov dword [ebp - 0x37c], 1
jmp 0x1002f60d
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x37c], eax
jl 0x1002f628
xor eax, eax
jne 0x1002f628
and dword [ebp - 0x41c], 0
jmp 0x1002f632
mov dword [ebp - 0x41c], 1
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x41c]
jg 0x1002f64c
mov dword [ebp - 0x5a8], 1
jmp 0x1002f653
and dword [ebp - 0x5a8], 0
xor eax, eax
inc eax
je 0x1002f7e5
mov dword [ebp - 0xc0], 0x1aabb774
mov dword [ebp - 0x21c], 0x45d95411
mov dword [ebp - 0x1bc], 0x1fbfe3ac
mov dword [ebp - 0x520], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x540], 0
jne 0x1002f7b1
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
je 0x1002f6ff
cmp dword [ebp - 0x1bc], 0
jne 0x1002f6f5
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x520]
jne 0x1002f6dc
mov dword [ebp - 0x384], 1
jmp 0x1002f6e3
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 0xffffffff
jg 0x1002f6f5
and dword [ebp - 0x46c], 0
jmp 0x1002f6ff
mov dword [ebp - 0x46c], 1
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x700]
cmp ecx, dword [ebp + eax - 0x700]
je 0x1002f727
mov dword [ebp - 0x38c], 1
jmp 0x1002f72e
and dword [ebp - 0x38c], 0
push 0
lea ecx, [ebp - 0x5f4]
call fcn.1000461c
mov ecx, dword [ebp - 0x38c]
cmp ecx, dword [eax]
jl 0x1002f751
mov dword [ebp - 0x424], 1
jmp 0x1002f758
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x424], eax
jne 0x1002f772
mov dword [ebp - 0x394], 1
jmp 0x1002f779
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x394]
test eax, eax
jne 0x1002f791
cmp dword [ebp - 0x21c], 0
mov esi, dword [ebp - 0xc0]
push 0
lea ecx, [ebp - 0x5f4]
call fcn.1000461c
cmp dword [eax], esi
jg 0x1002f7b1
and dword [ebp - 0x4a4], 0
jmp 0x1002f7bb
mov dword [ebp - 0x4a4], 1
cmp dword [ebp - 0x4a4], 1
jge 0x1002f7d0
mov dword [ebp - 0x39c], 1
jmp 0x1002f7d7
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xc0], eax
jmp 0x1002f802
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1002f802
push 0
push 0x1d6c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f4]
call fcn.10004600
mov dword [ebp - 0x42c], 0x7ff7
mov dword [ebp - 0x5d8], str.bddziwk_jye_sxix_cvqerqevt_elz_xukhzmf_ezvqnjrip_ttbalabf_snj_rccqqiue_ixxve_ghml_pbgrozyy_qnjyzfhfn
cmp dword [ebp - 0x42c], 0x812c
jle 0x1002f8ba
and dword [ebp - 0x1c4], 0
jmp 0x1002f84b
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x55a8
jge 0x1002f8ac
and dword [ebp - 0x180], 0
jmp 0x1002f86d
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1164
jge 0x1002f8aa
mov eax, dword [ebp - 0x1c4]
add eax, dword [ebp - 0x180]
cdq
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x548], edx
push dword [ebp - 0x548]
push dword [ebp - 0x54c]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x1002f860
jmp 0x1002f83e
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 4], 0xf
cmp dword [ebp - 0x42c], 0x7c94
jge 0x1002f8dd
mov edx, dword [ebp - 0x5d8]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x1002f8f9
or dword [ebp - 4], 0xffffffff
jmp 0x1002f903
push 4
lea ecx, [ebp - 0xd0]
call fcn.1000457d
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0xa8], 0x26fbc79a
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x204], 8
mov dword [ebp - 0x230], 3
mov dword [ebp - 0x544], 0xf82eddaa
mov dword [ebp - 0x1b8], 0
jmp 0x1002f969
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 4
jge 0x1002f98b
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov dword [eax], 0x4e2
jmp 0x1002f95c
mov dword [ebp - 0x20], 0
jmp 0x1002f99b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1002fed2
mov dword [ebp - 0x30], 0xbf390197
mov dword [ebp - 0x2d0], 0x1216
mov dword [ebp - 0x5b0], str.xgwtqyyca_ntptjfg_ppnhc_aghd_wfcx_elutt_crysudaj
cmp dword [ebp - 0x2d0], 0x13d8
jle 0x1002fada
and dword [ebp - 0x1c0], 0
jmp 0x1002f9e6
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x1841
jge 0x1002fada
and dword [ebp - 0x188], 0
jmp 0x1002fa0c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x53bc
jge 0x1002fad5
and dword [ebp - 0x1e0], 0
jmp 0x1002fa32
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x7758
jge 0x1002fad0
and dword [ebp - 0x190], 0
jmp 0x1002fa58
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x6989
jge 0x1002facb
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x1e0]
shl eax, cl
mov ecx, dword [ebp - 0x190]
shl eax, cl
or eax, dword [ebp - 0x1c0]
cdq
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x554], edx
push dword [ebp - 0x554]
push dword [ebp - 0x558]
lea ecx, [ebp - 0x7e4]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x52c], eax
mov ecx, dword [ebp - 0x52c]
call fcn.100042ab
push eax
call fcn.10049ba3
pop ecx
lea ecx, [ebp - 0x7e4]
call fcn.100042a1
jmp 0x1002fa4b
jmp 0x1002fa25
jmp 0x1002f9ff
jmp 0x1002f9d9
mov dword [ebp - 0x30], 3
jmp 0x1002faea
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002fd22
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x2b0], 0xab46
or dword [ebp - 0x640], 0xffffffff
or dword [ebp - 0x63c], 0xffffffff
or dword [ebp - 0x638], 0xffffffff
or dword [ebp - 0x634], 0xffffffff
lea ecx, [ebp - 0x205]
call fcn.1000462b
push eax
lea eax, [ebp - 0x630]
push eax
lea eax, [ebp - 0x640]
push eax
lea ecx, [ebp - 0x730]
call fcn.1000462e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x684]
call fcn.100045da
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x74], 0
jmp 0x1002fb74
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jg 0x1002fd0e
mov dword [ebp - 0x434], 0x86a6c65b
mov esi, dword [ebp - 0x74]
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
cmp dword [eax], esi
jl 0x1002fba9
mov dword [ebp - 0x3a4], 1
jmp 0x1002fbb0
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x6b0], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x698], eax
push 2
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov esi, dword [ebp - 0x20]
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
imul esi, dword [eax]
mov eax, dword [ebp - 0x3a4]
add eax, 0x1e01
cmp eax, esi
jg 0x1002fc07
cmp dword [ebp - 0x1fc], 0
jne 0x1002fc07
and dword [ebp - 0x474], 0
jmp 0x1002fc11
mov dword [ebp - 0x474], 1
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov ecx, dword [ebp - 0x474]
cmp ecx, dword [eax]
jl 0x1002fc35
mov dword [ebp - 0x3ac], 1
jmp 0x1002fc3c
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
sub eax, dword [ebp - 0x74]
cmp eax, 0x5cf0
jle 0x1002fc67
cmp dword [ebp - 0x30], 0
jne 0x1002fc67
and dword [ebp - 0x3b4], 0
jmp 0x1002fc71
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x2b0], eax
mov esi, dword [ebp - 0x2b0]
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
cmp esi, dword [eax]
jle 0x1002fca1
mov dword [ebp - 0x2b8], 1
jmp 0x1002fca8
and dword [ebp - 0x2b8], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov ecx, dword [ebp - 0x2b8]
cmp ecx, dword [eax]
jl 0x1002fccc
mov dword [ebp - 0x2c0], 1
jmp 0x1002fcd3
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x2c0], eax
jne 0x1002fced
mov dword [ebp - 0x2c8], 1
jmp 0x1002fcf4
and dword [ebp - 0x2c8], 0
push 1
lea ecx, [ebp - 0x684]
call fcn.1000461c
mov ecx, dword [ebp - 0x2c8]
mov dword [eax], ecx
jmp 0x1002fb6d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x684]
call fcn.10004600
jmp 0x1002fae3
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x2d0], 0x114c
jge 0x1002fd3e
push dword [ebp - 0x5b0]
call fcn.10049ba3
pop ecx
jmp 0x1002fd5a
mov dword [ebp - 4], 0x11
jmp 0x1002fd6a
xor eax, eax
jne 0x1002fda9
push 1
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov eax, dword [eax]
add eax, 6
neg eax
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0xa8]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
sub esi, dword [eax]
jne 0x1002fda9
and dword [ebp - 0x2d8], 0
jmp 0x1002fdb3
mov dword [ebp - 0x2d8], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2d8], eax
jl 0x1002fdca
mov dword [ebp - 0x2e0], 1
jmp 0x1002fdd1
and dword [ebp - 0x2e0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov ecx, dword [ebp - 0x2e0]
cmp ecx, dword [eax]
jle 0x1002fdf5
mov dword [ebp - 0x2e8], 1
jmp 0x1002fdfc
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x2e8]
test eax, eax
jne 0x1002fe1a
push 4
pop eax
test eax, eax
jne 0x1002fe1a
and dword [ebp - 0x538], 0
jmp 0x1002fe24
mov dword [ebp - 0x538], 1
push 2
lea ecx, [ebp - 0xd0]
call fcn.1000461c
mov esi, dword [ebp - 0x20]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
add esi, dword [eax]
cmp esi, 0xffffffff
jae 0x1002fe55
mov dword [ebp - 0x2f0], 1
jmp 0x1002fe5c
and dword [ebp - 0x2f0], 0
mov dword [ebp - 0x30], 0
mov esi, dword [ebp - 0x30]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
imul esi, dword [eax]
cmp esi, dword [ebp - 0x2f0]
je 0x1002fe8b
mov dword [ebp - 0x2f8], 1
jmp 0x1002fe92
and dword [ebp - 0x2f8], 0
imul esi, dword [ebp - 0x2f8], 0xbc59
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.1000461c
cmp esi, dword [eax]
je 0x1002feba
mov dword [ebp - 0x300], 1
jmp 0x1002fec1
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x224], eax
jmp 0x1002f994
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xa8]
jne 0x1002feff
mov dword [ebp - 0x308], 1
jmp 0x1002ff06
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
neg eax
cmp eax, dword [ebp - 0x230]
jl 0x1002ff22
mov dword [ebp - 0x310], 1
jmp 0x1002ff29
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x310], eax
jg 0x1002ff43
mov dword [ebp - 0x604], 1
jmp 0x1002ff4a
and dword [ebp - 0x604], 0
or eax, 0xffffffff
cmp eax, 3
jae 0x1002ff5e
mov dword [ebp - 0x318], 1
jmp 0x1002ff65
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x318], eax
je 0x1002ff91
push 3
lea ecx, [ebp - 0xd0]
call fcn.1000461c
cmp dword [eax], 0
je 0x1002ff91
mov dword [ebp - 0x320], 1
jmp 0x1002ff98
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x20]
jne 0x1002ffb5
mov dword [ebp - 0x328], 1
jmp 0x1002ffbc
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 1
jne 0x1002ffd1
mov dword [ebp - 0x330], 1
jmp 0x1002ffd8
and dword [ebp - 0x330], 0
cmp dword [ebp - 0x330], 2
jae 0x1002ffed
mov dword [ebp - 0x338], 1
jmp 0x1002fff4
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x544]
cmp dword [ebp - 0x338], eax
jle 0x1003000e
mov dword [ebp - 0x340], 1
jmp 0x10030015
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0xffffffff
jbe 0x1003002a
mov dword [ebp - 0x348], 1
jmp 0x10030031
and dword [ebp - 0x348], 0
imul eax, dword [ebp - 0x348], 0xffffffff
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x204]
jg 0x10030052
mov dword [ebp - 0x350], 1
jmp 0x10030059
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jne 0x10030089
push 1
lea ecx, [ebp - 0xd0]
call fcn.1000461c
cmp dword [eax], 0
jne 0x10030089
and dword [ebp - 0x358], 0
jmp 0x10030093
mov dword [ebp - 0x358], 1
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xa8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd0]
call fcn.10004600
cmp dword [0x1007d250], 0
jne 0x10030b6a
mov dword [ebp - 0x64], 0xfff7
mov dword [ebp - 0x34], 0x36b16b47
push 1
lea ecx, [ebp - 0x4c8]
call fcn.1000457d
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x198], 0
jmp 0x100300f6
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x10030118
push dword [ebp - 0x198]
lea ecx, [ebp - 0x4c8]
call fcn.1000461c
mov dword [eax], 1
jmp 0x100300e9
cmp dword [ebp - 0x64], 0
je 0x100302e5
mov dword [ebp - 0x20c], 9
mov dword [ebp - 0x5b8], 0x5a7b
mov dword [ebp - 0x368], 7
mov dword [ebp - 0x370], 0xfffffff9
mov dword [ebp - 0x550], 0x74e8
push 3
lea ecx, [ebp - 0x658]
call fcn.1000457d
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x48], 0
jmp 0x10030175
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1003018b
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x62c], 0x7f3e76e5
jmp 0x1003016e
mov dword [ebp - 0x48], 0
jmp 0x1003019b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x100301b7
push dword [ebp - 0x48]
lea ecx, [ebp - 0x658]
call fcn.1000461c
mov dword [eax], 0xfffffffb
jmp 0x10030194
cmp dword [ebp - 0x20c], 0xffffffff
jae 0x100301cc
mov dword [ebp - 0x360], 1
jmp 0x100301d3
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x360]
jge 0x100301ed
mov dword [ebp - 0x378], 1
jmp 0x100301f4
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x20c]
je 0x10030214
cmp dword [ebp - 0x5b8], 0
je 0x10030214
mov dword [ebp - 0x238], 1
jmp 0x1003021b
and dword [ebp - 0x238], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x62c], ecx
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
sub eax, dword [ebp - 0x550]
cmp dword [ebp - 0x34], eax
jl 0x10030263
mov dword [ebp - 0x380], 1
jmp 0x1003026a
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x380]
jle 0x10030284
mov dword [ebp - 0x388], 1
jmp 0x1003028b
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x64]
cmp eax, 0xfffffff8
jne 0x100302a5
mov dword [ebp - 0x390], 1
jmp 0x100302ac
and dword [ebp - 0x390], 0
push 0
lea ecx, [ebp - 0x658]
call fcn.1000461c
mov ecx, dword [ebp - 0x390]
mov dword [eax], ecx
mov eax, dword [ebp - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x62c], eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x658]
call fcn.10004600
jmp 0x1003047e
mov dword [ebp - 0x64], 0
jmp 0x100302f5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x2a
jle 0x1003045f
mov dword [ebp - 0x398], 0x2a1efe0c
push 1
lea ecx, [ebp - 0x64c]
call fcn.1000457d
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1d8], 0
jmp 0x10030333
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x10030355
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x64c]
call fcn.1000461c
mov dword [eax], 0x8694a219
jmp 0x10030326
mov dword [ebp - 0x34], 0
jmp 0x10030365
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1003044b
push dword [ebp - 0x34]
lea ecx, [ebp - 0x4c8]
call fcn.1000461c
cmp dword [eax], 0
je 0x1003042a
cmp dword [ebp - 0x34], 0
je 0x100303bc
push dword [ebp - 0x34]
lea ecx, [ebp - 0x4c8]
call fcn.1000461c
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x4c8]
call fcn.1000461c
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x100303bc
mov dword [ebp - 0x5e8], 1
jmp 0x100303c3
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x398], 0
jne 0x100303de
cmp dword [ebp - 0x398], 0
jne 0x100303de
and dword [ebp - 0x3a0], 0
jmp 0x100303e8
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x3a0]
jle 0x100303ff
mov dword [ebp - 0x3a8], 1
jmp 0x10030406
and dword [ebp - 0x3a8], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x4c8]
call fcn.1000461c
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [eax]
je 0x1003042a
mov dword [ebp - 0x3b0], 1
jmp 0x10030431
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x64c]
call fcn.1000461c
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
jmp 0x1003035e
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x64c]
call fcn.10004600
jmp 0x100302ee
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1003047e
push 0
push 0x9b1
call dword [sym.imp.USER32.dll_GetClientRect]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c8]
call fcn.10004600
mov dword [ebp - 0x55c], 0x7687
lea eax, [ebp - 0x55c]
push eax
call fcn.100270df
pop ecx
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x1a0], 0xfffffffb
mov dword [ebp - 0x1a0], 0
jmp 0x100304cd
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xfffffff6
jne 0x10030520
mov dword [ebp - 0x1c8], 0x1f665683
mov dword [ebp - 0x1c8], 0xfffffffa
jmp 0x100304f9
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jne 0x1003051e
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1003051c
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x100304ec
jmp 0x100304c0
mov byte [ebp - 0x104], 0
mov byte [ebp - 0x103], 0x8a
mov byte [ebp - 0x102], 3
mov byte [ebp - 0x101], 0x18
mov byte [ebp - 0x100], 0xed
mov byte [ebp - 0xff], 0xfa
mov byte [ebp - 0xfe], 8
mov byte [ebp - 0xfd], 0x28
mov byte [ebp - 0xfc], 5
mov byte [ebp - 0xfb], 0x1d
mov byte [ebp - 0xfa], 7
mov byte [ebp - 0xf9], 0x1b
mov byte [ebp - 0xf8], 4
mov byte [ebp - 0xf7], 0xc
mov byte [ebp - 0xf6], 0xa
mov byte [ebp - 0xf5], 0x20
mov byte [ebp - 0xf4], 6
mov byte [ebp - 0xf3], 0x36
mov byte [ebp - 0xf2], 3
mov byte [ebp - 0xf1], 0x25
mov byte [ebp - 0xf0], 0xb
mov byte [ebp - 0xef], 0x2e
mov byte [ebp - 0xee], 9
mov byte [ebp - 0xed], 0x16
mov byte [ebp - 0xec], 1
mov byte [ebp - 0xeb], 0xb
mov byte [ebp - 0xea], 0xc
mov byte [ebp - 0xe9], 0x32
mov byte [ebp - 0xe8], 2
mov byte [ebp - 0xe7], 0x23
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x104]
and eax, 0xcd
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x104]
or ecx, 0xcd
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x104]
mov byte [ebp + eax - 0x4d8], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0xe0], 0
jmp 0x10030648
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1e
jae 0x1003089f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x104]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x1003080b
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x104]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x104]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x3b8], 0x23d1
mov dword [ebp - 0x568], str.tbwlcel_yadko_mqjch
cmp dword [ebp - 0x3b8], 0x24ec
jle 0x100307c1
and dword [ebp - 0x1b0], 0
jmp 0x100306ce
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x1aaf
jge 0x100307c1
and dword [ebp - 0x178], 0
jmp 0x100306f4
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x6884
jge 0x100307bc
and dword [ebp - 0x1a8], 0
jmp 0x1003071a
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x6117
jge 0x100307b7
and dword [ebp - 0x1e8], 0
jmp 0x10030740
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x7f18
jge 0x100307b2
mov eax, dword [ebp - 0x1a8]
imul eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1b0]
xor ecx, dword [ebp - 0x178]
or eax, ecx
cdq
mov dword [ebp - 0x564], eax
mov dword [ebp - 0x560], edx
push dword [ebp - 0x560]
push dword [ebp - 0x564]
lea ecx, [ebp - 0x79c]
call fcn.10001a65
pop ecx
pop ecx
mov dword [ebp - 0x578], eax
mov ecx, dword [ebp - 0x578]
call fcn.100042ab
push eax
call fcn.10049ba3
pop ecx
lea ecx, [ebp - 0x79c]
call fcn.100042a1
jmp 0x10030733
jmp 0x1003070d
jmp 0x100306e7
jmp 0x100306c1
jmp 0x10030640
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
movzx eax, byte [ebp + eax - 0x106]
movsx eax, byte [ebp + eax - 0x4d8]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x103]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
movzx eax, byte [ebp + eax - 0x106]
movsx eax, byte [ebp + eax - 0x4d8]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0x103]
and edx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0xe0]
movzx eax, byte [ebp + eax - 0x106]
movsx eax, byte [ebp + eax - 0x4d8]
mov esi, dword [ebp - 0x24]
movzx ebx, byte [ebp + esi - 0x103]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x104]
mov byte [ebp + eax - 0x4d8], bl
and dword [ebp - 0xe0], 0
jmp 0x10030640
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x4d8], 0
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x7cc]
call fcn.1003516e
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x574], eax
mov dword [ebp - 4], 0x1a
mov edx, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x574]
call fcn.1002083a
mov dword [0x1007d250], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7cc]
call fcn.100044ea
and dword [ebp - 0x17c], 0
jmp 0x10030913
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0xe
jae 0x1003092c
mov eax, dword [ebp - 0x17c]
mov byte [ebp + eax - 0x4d8], 0
jmp 0x10030906
mov byte [ebp - 0x120], 8
mov byte [ebp - 0x11f], 0xb4
mov byte [ebp - 0x11e], 0
mov byte [ebp - 0x11d], 0x2c
mov byte [ebp - 0x11c], 4
mov byte [ebp - 0x11b], 0x37
mov byte [ebp - 0x11a], 0xd
mov byte [ebp - 0x119], 0x23
mov byte [ebp - 0x118], 1
mov byte [ebp - 0x117], 0x25
mov byte [ebp - 0x116], 3
mov byte [ebp - 0x115], 0x13
mov byte [ebp - 0x114], 0xc
mov byte [ebp - 0x113], 0x12
mov byte [ebp - 0x112], 9
mov byte [ebp - 0x111], 0x10
mov byte [ebp - 0x110], 6
mov byte [ebp - 0x10f], 0x33
mov byte [ebp - 0x10e], 2
mov byte [ebp - 0x10d], 0x35
mov byte [ebp - 0x10c], 0xb
mov byte [ebp - 0x10b], 0x16
mov byte [ebp - 0x10a], 7
mov byte [ebp - 0x109], 1
mov byte [ebp - 0x108], 5
mov byte [ebp - 0x107], 0x17
mov byte [ebp - 0x106], 0xa
mov byte [ebp - 0x105], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x120]
and eax, 0xdb
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x120]
or ecx, 0xdb
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x120]
mov byte [ebp + eax - 0x4e8], cl
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x214], 0
jmp 0x10030a46
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1c
jae 0x10030add
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x214]
movzx eax, byte [ebp + eax - 0x122]
movsx eax, byte [ebp + eax - 0x4e8]
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0x11f]
and ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x214]
movzx eax, byte [ebp + eax - 0x122]
movsx eax, byte [ebp + eax - 0x4e8]
mov edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0x11f]
and edx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x214]
movzx eax, byte [ebp + eax - 0x122]
movsx eax, byte [ebp + eax - 0x4e8]
mov esi, dword [ebp - 0x3c]
movzx ebx, byte [ebp + esi - 0x11f]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0x120]
mov byte [ebp + eax - 0x4e8], bl
jmp 0x10030a3e
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x4e8], 0
lea eax, [ebp - 0x4e8]
push eax
lea ecx, [ebp - 0x784]
call fcn.1003516e
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x58c], eax
mov dword [ebp - 4], 0x1b
mov edx, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x58c]
call fcn.1002083a
mov dword [0x1007e708], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x784]
call fcn.100044ea
and dword [ebp - 0x134], 0
jmp 0x10030b51
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xf
jae 0x10030b6a
mov eax, dword [ebp - 0x134]
mov byte [ebp + eax - 0x4e8], 0
jmp 0x10030b44
mov eax, dword [0x1007d250]
cmp eax, dword [ebp - 0x160]
je 0x10030b84
mov eax, dword [0x1007e708]
cmp eax, dword [ebp - 0x160]
jne 0x10030b9c
mov ecx, dword [ebp + 0xc]
call fcn.100042ab
push eax
push dword [ebp + 8]
call fcn.10027106
pop ecx
pop ecx
jmp 0x100316fb
mov dword [ebp - 0x270], 0x61f7
mov dword [ebp - 0x5c8], str.kjbgoypla_hsd_oumgw_bcarps
cmp dword [ebp - 0x270], 0x645d
jle 0x10030ca5
push 0xcb5
call dword [sym.imp.USER32.dll_DrawMenuBar]
and dword [ebp - 0x148], 0
jmp 0x10030be1
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0x75ff
jge 0x10030ca5
and dword [ebp - 0x138], 0
jmp 0x10030c07
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x17b5
jge 0x10030ca0
and dword [ebp - 0x140], 0
jmp 0x10030c2d
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x5e85
jge 0x10030c9b
and dword [ebp - 0x150], 0
jmp 0x10030c4f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x7aaf
jge 0x10030c99
mov eax, dword [ebp - 0x138]
imul eax, dword [ebp - 0x140]
or eax, dword [ebp - 0x148]
or eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x570], eax
mov dword [ebp - 0x56c], edx
push dword [ebp - 0x56c]
push dword [ebp - 0x570]
mov ecx, 0x1007c0d8
call fcn.100042cb
jmp 0x10030c42
jmp 0x10030c20
jmp 0x10030bfa
jmp 0x10030bd4
mov dword [ebp - 0x38], 0x9b55bb2c
mov dword [ebp - 0x38], 0
jmp 0x10030cbc
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1b
jl 0x10030f28
mov dword [ebp - 0x9c], 0xa23fe5e8
push 1
lea ecx, [ebp - 0x664]
call fcn.1000457d
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x588], 0xfb29d945
mov dword [ebp - 0x44], 0
jmp 0x10030cfe
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10030d1a
push dword [ebp - 0x44]
lea ecx, [ebp - 0x664]
call fcn.1000461c
mov dword [eax], 0xae9a07b3
jmp 0x10030cf7
mov dword [ebp - 0x44], 0
jmp 0x10030d2a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10030d40
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x710], 0xe72ee72
jmp 0x10030d23
cmp dword [ebp - 0x9c], 1
je 0x10030d55
mov dword [ebp - 0x580], 1
jmp 0x10030d5c
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x9c], 0
je 0x10030df6
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3c8], eax
push 0
lea ecx, [ebp - 0x664]
call fcn.1000461c
mov ecx, dword [ebp - 0x3c8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x3c8], eax
jl 0x10030daa
mov dword [ebp - 0x3d0], 1
jmp 0x10030db1
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0xd3be
jg 0x10030dc9
mov dword [ebp - 0x3d8], 1
jmp 0x10030dd0
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x38]
test eax, eax
je 0x10030df6
cmp dword [ebp - 0x38], 0
je 0x10030df6
mov dword [ebp - 0x3e0], 1
jmp 0x10030dfd
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x4aaf
je 0x10030e15
mov dword [ebp - 0x3e8], 1
jmp 0x10030e1c
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x3e8], eax
jg 0x10030e36
mov dword [ebp - 0x3f0], 1
jmp 0x10030e3d
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x9c]
add eax, dword [ebp - 0x3f0]
je 0x10030e5d
cmp dword [ebp - 0x38], 0
je 0x10030e5d
mov dword [ebp - 0x3f8], 1
jmp 0x10030e64
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0x9744
je 0x10030e7c
mov dword [ebp - 0x258], 1
jmp 0x10030e83
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x710]
cmp dword [ebp - 0x258], eax
jle 0x10030ea4
mov dword [ebp - 0x608], 1
jmp 0x10030eab
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x6c4], eax
mov eax, 0x65f5c9b8
cmp eax, 0xcc321a07
jbe 0x10030ed0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x710], 0
jne 0x10030edf
cmp dword [ebp - 0x38], 0
jne 0x10030edf
and dword [ebp - 0x260], 0
jmp 0x10030ee9
mov dword [ebp - 0x260], 1
cmp dword [ebp - 0x260], 0x486cae8e
jle 0x10030f01
mov dword [ebp - 0x268], 1
jmp 0x10030f08
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x588], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x664]
call fcn.10004600
jmp 0x10030cb5
mov dword [ebp - 4], 0x1d
cmp dword [ebp - 0x270], 0x611e
jge 0x10030f4b
mov edx, dword [ebp - 0x5c8]
mov ecx, 0x1007c0d8
call fcn.10006d07
jmp 0x10030f67
or dword [ebp - 4], 0xffffffff
jmp 0x10030f71
mov eax, dword [ebp + 8]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
je 0x100315d7
mov eax, dword [ebp - 0x158]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x100315d7
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x158]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xd8], ecx
mov eax, dword [ebp - 0xd8]
cmp dword [eax], 0x4550
jne 0x100315d7
mov eax, dword [ebp - 0xd8]
cmp dword [eax + 0x74], 0
jbe 0x100315d7
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
cmp dword [ecx + eax + 0x78], 0
je 0x100315d7
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa4], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x60], edx
mov eax, 0xffff
mov word [ebp - 0x4c], ax
or dword [ebp - 0xa0], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10031039
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10031034
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x4c], ax
jmp 0x100311fc
mov eax, dword [0x1007e75c]
and eax, 1
jne 0x10031070
mov eax, dword [0x1007e75c]
or eax, 1
mov dword [0x1007e75c], eax
mov dword [ebp - 4], 0x1f
mov ecx, 0x1007e760
call fcn.1001692b
push 0x10062529
call fcn.10049b79
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1007d254]
test eax, eax
je 0x100310dc
mov ecx, 0x1007e760
call fcn.100351fe
movzx eax, al
test eax, eax
jne 0x100310dc
lea eax, [ebp - 0x160]
push eax
lea eax, [ebp - 0x278]
push eax
mov ecx, 0x1007e760
call fcn.100169f0
lea eax, [ebp - 0x6a4]
push eax
mov ecx, 0x1007e760
call fcn.100169e2
push eax
lea ecx, [ebp - 0x278]
call fcn.10016a05
movzx eax, al
test eax, eax
je 0x100310dc
lea ecx, [ebp - 0x278]
call fcn.10035207
mov eax, dword [eax + 4]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xffffffff
jne 0x100311fc
mov ecx, 0x1007e760
call fcn.100351bc
mov ecx, dword [ebp - 0x60]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1007e760
call fcn.1003524b
and dword [ebp - 0xb8], 0
jmp 0x1003111a
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xb8]
cmp ecx, dword [eax + 0x18]
jae 0x100311fc
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0xb8]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
je 0x100311f7
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x760]
call fcn.1003516e
mov dword [ebp - 4], 0x20
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x760]
call fcn.1002083a
mov dword [ebp - 0x288], eax
movzx eax, byte [0x1007d254]
test eax, eax
je 0x100311a5
mov ecx, 0x1007e760
call fcn.100351fe
movzx eax, al
test eax, eax
jne 0x100311c5
lea eax, [ebp - 0x288]
push eax
mov ecx, 0x1007e760
call fcn.1003520d
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov byte [0x1007d254], 1
cmp dword [ebp - 0xa0], 0xffffffff
jne 0x100311e8
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x160]
jne 0x100311e8
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xa0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x760]
call fcn.100044ea
jmp 0x1003110d
cmp dword [ebp + 0x10], 0
jne 0x10031225
cmp dword [ebp - 0xa0], 0xffffffff
je 0x10031225
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0xa0]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x4c], ax
movzx eax, word [ebp - 0x4c]
cmp eax, 0xffff
je 0x100315d7
movzx eax, word [ebp - 0x4c]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0xa4]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x590]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [eax]
mov dword [ebp - 0x68], ecx
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x60]
jbe 0x100315cf
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0x60]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x68], edx
jae 0x100315cf
mov eax, dword [0x1007e75c]
and eax, 2
jne 0x100312b8
mov eax, dword [0x1007e75c]
or eax, 2
mov dword [0x1007e75c], eax
mov dword [ebp - 4], 0x21
push 0x7938
call fcn.1000bf81
pop ecx
mov byte [0x1007e700], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x58], 2
mov byte [ebp - 0x57], 0xa0
mov byte [ebp - 0x56], 1
mov byte [ebp - 0x55], 0
mov byte [ebp - 0x54], 0
mov byte [ebp - 0x53], 8
mov byte [ebp - 0x52], 3
mov byte [ebp - 0x51], 0x15
mov byte [ebp - 0x50], 0x8f
mov byte [ebp - 0x4f], 0x39
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x58]
and eax, 0xcc
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x58]
or ecx, 0xcc
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x58]
mov byte [ebp + eax - 0x7c], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0xc4], 0
jmp 0x1003132a
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xa
jae 0x100313de
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x58]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x1003136b
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x58]
inc eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x58]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x10031322
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xc4]
movzx eax, byte [ebp + eax - 0x5a]
movsx eax, byte [ebp + eax - 0x7c]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x57]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xc4]
movzx eax, byte [ebp + eax - 0x5a]
movsx eax, byte [ebp + eax - 0x7c]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x57]
and edx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0xc4]
movzx eax, byte [ebp + eax - 0x5a]
movsx eax, byte [ebp + eax - 0x7c]
mov esi, dword [ebp - 0x28]
movzx ebx, byte [ebp + esi - 0x57]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x58]
mov byte [ebp + eax - 0x7c], bl
and dword [ebp - 0xc4], 0
jmp 0x10031322
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x7c], 0
mov eax, dword [0x1007e75c]
and eax, 4
jne 0x10031424
mov eax, dword [0x1007e75c]
or eax, 4
mov dword [0x1007e75c], eax
mov dword [ebp - 4], 0x22
lea eax, [ebp - 0x7c]
push eax
mov ecx, 0x1007e6c8
call fcn.1003516e
push 0x1006251a
call fcn.10049b79
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x168], 0
jmp 0x1003143a
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 4
jae 0x10031450
mov eax, dword [ebp - 0x168]
mov byte [ebp + eax - 0x7c], 0
jmp 0x1003142d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x84], eax
movsx eax, byte [0x1007e700]
mov ecx, dword [ebp - 0x84]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1003147c
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
jmp 0x10031459
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
push dword [ebp - 0x84]
push dword [ebp - 0x68]
lea ecx, [ebp - 0x6f0]
call fcn.10035542
mov dword [ebp - 4], 0x23
push 0x1007e6c8
lea ecx, [ebp - 0x6f0]
call fcn.1003519d
lea eax, [ebp - 0x6cc]
push eax
lea ecx, [ebp - 0x6f0]
call fcn.10004ca9
push dword [eax]
lea eax, [ebp - 0x6ac]
push eax
lea ecx, [ebp - 0x6f0]
call fcn.10005d1b
push dword [eax]
lea ecx, [ebp - 0x748]
call fcn.1003556b
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0x748]
push eax
call fcn.10023a86
pop ecx
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
je 0x1003157e
push dword [ebp - 0x84]
lea ecx, [ebp - 0x728]
call fcn.1003516e
mov byte [ebp - 4], 0x25
lea edx, [ebp - 0x5f8]
lea ecx, [ebp - 0x728]
call fcn.100208eb
movzx eax, al
test eax, eax
je 0x10031551
push 0
push dword [ebp - 0x5f8]
push 0
push dword [ebp - 0x22c]
call fcn.1002dac4
add esp, 0x10
mov dword [ebp - 0x68], eax
jmp 0x1003156d
push 1
push 0
lea eax, [ebp - 0x728]
push eax
push dword [ebp - 0x22c]
call fcn.1002dac4
add esp, 0x10
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x728]
call fcn.100044ea
jmp 0x100315b1
cmp dword [ebp + 0x10], 0
jne 0x10031594
mov ecx, dword [ebp + 0xc]
call fcn.100042ab
mov dword [ebp - 0x290], eax
jmp 0x1003159e
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x290], eax
push dword [ebp - 0x290]
push dword [ebp + 8]
call fcn.10027106
pop ecx
pop ecx
mov dword [ebp - 0x68], eax
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x748]
call fcn.1000441b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6f0]
call fcn.100044ea
mov eax, dword [ebp - 0x68]
jmp 0x100316fb
mov dword [ebp - 0x1f4], 0x5baf43b7
mov dword [ebp - 0x200], 0xfffffffb
mov dword [ebp - 0x298], 2
mov dword [ebp - 0x4f0], 0x15d7249a
mov dword [ebp - 0x2a0], 0x65720b96
mov dword [ebp - 0x6d4], 0xfffffff9
mov dword [ebp - 0x508], 0x210ec320
mov dword [ebp - 0x6b4], 0xffffffff
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x170], 0
jmp 0x1003164a
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x10031666
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x6d0], 7
jmp 0x1003163d
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x298]
sub eax, dword [ebp - 0x2a0]
sub eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x4f8]
cmp eax, dword [ebp - 0x500]
jle 0x100316d5
mov dword [ebp - 0x2a8], 1
jmp 0x100316dc
and dword [ebp - 0x2a8], 0
mov dword [ebp - 0x200], 0x5a9c4c8d
mov eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x508], eax
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret