Function at 0x1002718d
Capabilities:
Accept command line arguments
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005f9ae
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x544
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x28]
test eax, eax
je 0x1002924a
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x2c8], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x348], eax
lea eax, [ebp + 0x1c]
mov dword [ebp - 0x2d8], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x294]
movzx eax, byte [eax]
test eax, eax
je 0x100272ba
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x24c], eax
push dword [ebp - 0x24c]
mov eax, dword [ebp - 0x2cc]
push dword [eax]
mov eax, dword [ebp - 0x254]
push dword [eax]
lea eax, [ebp - 0x4c4]
push eax
call fcn.10023c30
add esp, 0x10
mov dword [ebp - 0x334], eax
push dword [ebp - 0x334]
mov ecx, dword [ebp - 0x25c]
call fcn.10001d4e
lea ecx, [ebp - 0x4c4]
call fcn.10001d73
jmp 0x10029248
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x3a8], 0xb57fd546
mov dword [ebp - 0x3a4], 0xb57fd546
mov dword [ebp - 0x3a0], 0xb57fd546
mov dword [ebp - 0x39c], 0xb57fd546
lea ecx, [ebp - 0xe1]
call fcn.1000f072
push eax
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x3a8]
push eax
lea ecx, [ebp - 0x49c]
call fcn.1000f075
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x430]
call fcn.1000f021
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 0x6d444182
mov dword [ebp - 0x26c], 0x95998ab5
mov dword [ebp - 0x3d8], 0x24f20479
mov dword [ebp - 0x3fc], 0x817d1dc6
mov dword [ebp - 0x64], 0
jmp 0x10027365
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1002737b
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x434], 0xa955a63a
jmp 0x1002735e
mov dword [ebp - 0x54], 3
jmp 0x1002738b
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10027521
mov dword [ebp - 0x200], 0x5925ef2c
mov dword [ebp - 0x404], 0x7cfaf42
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x3c4], 0x70012af0
mov dword [ebp - 0x3c8], 0x8a9017ca
mov dword [ebp - 0x3d0], 0xfffffff8
mov dword [ebp - 0x3ac], 6
mov dword [ebp - 0x3b0], 0xfffffffc
mov dword [ebp - 0x34c], 0xffffffff
mov dword [ebp - 0x3f8], 9
mov dword [ebp - 0x400], 0xe779066
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x418], 8
mov dword [ebp - 0x420], 0
mov dword [ebp - 0x458], 1
mov dword [ebp - 0x24], 0
jmp 0x1002744f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10027465
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4e8], 1
jmp 0x10027448
mov dword [ebp - 0x24], 0
jmp 0x10027475
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002748b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x38c], 0
jmp 0x1002746e
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
je 0x10027503
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x38c]
inc eax
mov dword [ebp - 0x220], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x220]
mov dword [ebp + eax - 0x38c], ecx
cmp dword [ebp - 0x220], 0
je 0x100274d9
mov dword [ebp - 0x104], 1
jmp 0x100274e0
and dword [ebp - 0x104], 0
push 3
lea ecx, [ebp - 0x430]
call fcn.1000f063
mov eax, dword [eax]
cmp eax, dword [ebp - 0x104]
jg 0x10027503
mov dword [ebp - 0x218], 1
jmp 0x1002750a
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
sub eax, dword [ebp - 0x34c]
mov dword [ebp - 0x26c], eax
jmp 0x10027384
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x430]
call fcn.1000f047
mov eax, dword [0x1109365c]
and eax, 1
jne 0x10027567
mov eax, dword [0x1109365c]
or eax, 1
mov dword [0x1109365c], eax
mov dword [ebp - 4], 1
mov ecx, 0x11093664
call fcn.1002de77
push 0x10060144
call fcn.10047d0a
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x4c], 0
cmp dword [ebp - 0xc4], 0
je 0x10027596
cmp dword [ebp - 0xc4], 0
je 0x10027596
mov dword [ebp - 0x2e4], 1
jmp 0x1002759d
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jg 0x100275b1
mov dword [ebp - 0x100], 1
jmp 0x100275b8
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x4c]
jge 0x100275d9
mov dword [ebp - 0x194], 1
jmp 0x100275e0
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x194]
test eax, eax
je 0x10027640
push 0x5187
push 0
push 0
push 0x24f3
push 0x2206
push 0x43a8
push 1
push 0x85a
push 0x3a7f
lea eax, [ebp - 0xc4]
push eax
call fcn.10022ec6
add esp, 0x28
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x1002763e
push 0x7863
push 1
push 0
call fcn.10025029
add esp, 0xc
jmp 0x1002768a
mov dword [ebp - 0xd8], 3
mov dword [ebp - 0x274], 8
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
push 0
push 1
push 0x416a
push 0x3976
push 0xa79
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.10022cfc
add esp, 0x1c
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
call fcn.10020ec5
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x6c], 0
jmp 0x100276aa
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x100276c0
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x4a4], 0xea75c96d
jmp 0x100276a3
mov byte [ebp - 0x3b], 0
push 0
lea eax, [ebp - 0x3b]
push eax
push 1
push 0x6491
call fcn.10022ab2
add esp, 0x10
push 1
push 0
push 0x572f
push 0x46d5
push 0x6e09
push 0
push 0x5c2d
call fcn.1002a8fc
add esp, 0x1c
cmp dword [ebp - 0xe0], 3
jae 0x100277f1
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x344], eax
lea eax, [ebp - 0x454]
push eax
mov ecx, 0x11093664
call fcn.1002df2e
push eax
lea eax, [ebp - 0x344]
push eax
lea eax, [ebp - 0x3b4]
push eax
mov ecx, 0x11093664
call fcn.1002df3c
mov ecx, eax
call fcn.1002e205
movzx eax, al
test eax, eax
je 0x100277f1
mov dword [ebp - 0x2f0], 0x47dfa860
mov dword [ebp - 0x28c], 0xffffffff
mov dword [ebp - 0x340], 0xbb2f1448
mov dword [ebp - 0x284], 0xf906d8bc
mov dword [ebp - 0x27c], 0
push 1
push 1
lea eax, [ebp - 0x27c]
push eax
push 0x1d8c
lea eax, [ebp - 0x2f0]
push eax
push 0x6f88
push 0x50a2
lea eax, [ebp - 0x284]
push eax
push 0x873
lea eax, [ebp - 0x340]
push eax
lea eax, [ebp - 0x28c]
push eax
call fcn.100217f2
add esp, 0x2c
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
mov dword [ebp - 0x2fc], eax
lea eax, [ebp - 0x2fc]
push eax
mov ecx, 0x11093664
call fcn.1002decb
push eax
mov ecx, dword [ebp - 0x210]
call fcn.10017494
jmp 0x10029262
mov dword [ebp - 0x10c], 0x62f9
mov dword [ebp - 0x350], str.cetda_imlt_ubhbhf_griu
cmp dword [ebp - 0x10c], 0x64a6
jle 0x100278a8
and dword [ebp - 0xac], 0
jmp 0x1002782b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x71ce
jge 0x100278a8
and dword [ebp - 0x74], 0
jmp 0x10027844
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x16c1
jge 0x100278a3
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 0x74]
sar eax, cl
cdq
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d0], edx
push dword [ebp - 0x2d0]
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0x518]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x230], eax
mov ecx, dword [ebp - 0x230]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x518]
call fcn.10001bd4
jmp 0x1002783d
jmp 0x1002781e
push 3
lea ecx, [ebp - 0x378]
call fcn.1000efc4
mov dword [ebp - 4], 2
mov byte [ebp - 4], 3
cmp dword [ebp - 0x10c], 0x6004
jge 0x100278d8
push dword [ebp - 0x350]
call fcn.10047d34
pop ecx
jmp 0x100278f4
mov dword [ebp - 4], 2
jmp 0x10027904
mov dword [ebp - 0x330], 1
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x328], 1
mov dword [ebp - 0x324], 1
mov dword [ebp - 0x29c], 0x8c9a01c7
mov dword [ebp - 0x1e4], 0xffffffff
push 0
push 0
lea eax, [ebp - 0x378]
push eax
push 0x44a8
lea eax, [ebp - 0x3e0]
push eax
push 0x657
call fcn.10029273
add esp, 0x18
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x330], 0
jmp 0x1002798f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x330]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x330], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x330], 2
jg 0x10027b40
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x100279c6
mov dword [ebp - 0x1dc], 1
jmp 0x100279cd
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1dc], eax
jne 0x100279e4
mov dword [ebp - 0x114], 1
jmp 0x100279eb
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x114], eax
jl 0x10027a02
mov dword [ebp - 0x19c], 1
jmp 0x10027a09
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0xd9ba5f27
je 0x10027a21
mov dword [ebp - 0x11c], 1
jmp 0x10027a28
and dword [ebp - 0x11c], 0
push 0
lea ecx, [ebp - 0x378]
call fcn.1000f063
mov esi, dword [eax]
add esi, dword [ebp - 0x11c]
push 2
lea ecx, [ebp - 0x378]
call fcn.1000f063
cmp dword [eax], esi
jne 0x10027a5a
mov dword [ebp - 0x21c], 1
jmp 0x10027a61
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0xb857
jne 0x10027a79
mov dword [ebp - 0x124], 1
jmp 0x10027a80
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x124], eax
jge 0x10027aa0
cmp dword [ebp - 0x30], 0
je 0x10027aa0
mov dword [ebp - 0x1a4], 1
jmp 0x10027aa7
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x1a4], eax
jne 0x10027ac1
mov dword [ebp - 0x12c], 1
jmp 0x10027ac8
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x12c]
jne 0x10027ae8
cmp dword [ebp - 0x1e4], 0
je 0x10027ae8
mov dword [ebp - 0x134], 1
jmp 0x10027aef
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
sub eax, 0x8e3b
cmp eax, 0x565e
je 0x10027b0d
mov dword [ebp - 0x1ac], 1
jmp 0x10027b14
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1ac], eax
jg 0x10027b2b
mov dword [ebp - 0x13c], 1
jmp 0x10027b32
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x30], eax
jmp 0x10027976
mov byte [ebp - 0x3c], 0
push 1
push 0
push 0x2aaa
lea eax, [ebp - 0x3c]
push eax
push 0x2cb2
call fcn.100225e1
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x378]
call fcn.1000f047
lea eax, [ebp - 0x53c]
push eax
call fcn.1001e4cd
pop ecx
mov esi, eax
lea edi, [ebp - 0x47c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x47c]
lea edi, [ebp - 0x494]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x14], 0x87013dce
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0xa4], 0x7ffeac8e
mov dword [ebp - 0x174], 2
mov dword [ebp - 0x204], 0x19bd
mov dword [ebp - 0x308], str.iayjzcip_unnmv_aeknrj_sxdmw_ydci_xmsfeo_raieeqed_dpdxklku
cmp dword [ebp - 0x204], 0x1c39
jle 0x10027c9f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
and dword [ebp - 0x84], 0
jmp 0x10027bfd
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x5165
jge 0x10027c9f
and dword [ebp - 0xb4], 0
jmp 0x10027c23
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0x1f49
jge 0x10027c9a
and dword [ebp - 0x5c], 0
jmp 0x10027c3c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x5127
jge 0x10027c95
and dword [ebp - 0x7c], 0
jmp 0x10027c52
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x429d
jge 0x10027c93
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x7c]
xor eax, dword [ebp - 0xb4]
or eax, dword [ebp - 0x84]
cdq
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], edx
push dword [ebp - 0x2dc]
push dword [ebp - 0x2e0]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x10027c4b
jmp 0x10027c35
jmp 0x10027c16
jmp 0x10027bf0
mov dword [ebp - 0xc0], 0
jmp 0x10027cb8
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x10027cd4
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0xf4], 0xd7f825e
jmp 0x10027cab
mov dword [ebp - 4], 5
cmp dword [ebp - 0x204], 0x16cb
jge 0x10027cf7
mov edx, dword [ebp - 0x308]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x10027d13
or dword [ebp - 4], 0xffffffff
jmp 0x10027d1d
mov dword [ebp - 0x14], 0
jmp 0x10027d2d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10028220
mov dword [ebp - 0x17c], 0xfffffff6
mov dword [ebp - 0x8c], 0
jmp 0x10027d5a
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10027d73
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x20], 0xda4d073f
jmp 0x10027d4d
mov dword [ebp - 0x1cc], 0x67fe
mov dword [ebp - 0x338], str.lyepjrusk_ssaj_ajcjqoyl_troqsg_eavqzntej_ddhzvudtn
cmp dword [ebp - 0x1cc], 0x696c
jle 0x10027eb0
push 0xdec
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
and dword [ebp - 0xbc], 0
jmp 0x10027dbc
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x51ad
jge 0x10027eb0
and dword [ebp - 0x94], 0
jmp 0x10027de2
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x4fed
jge 0x10027eab
and dword [ebp - 0xcc], 0
jmp 0x10027e08
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x3503
jge 0x10027ea6
and dword [ebp - 0x9c], 0
jmp 0x10027e2e
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x16f2
jge 0x10027ea1
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x94]
shl eax, cl
mov ecx, dword [ebp - 0xcc]
sar eax, cl
or eax, dword [ebp - 0x9c]
cdq
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x2e8], edx
push dword [ebp - 0x2e8]
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0x4dc]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x2a4], eax
mov ecx, dword [ebp - 0x2a4]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.10001bd4
jmp 0x10027e21
jmp 0x10027dfb
jmp 0x10027dd5
jmp 0x10027daf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x20], 2
jmp 0x10027ed5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x20], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jl 0x100281c8
mov dword [ebp - 0x44], 0x8110cbbb
mov dword [ebp - 0x3f0], 0xf433c8a0
push 2
lea ecx, [ebp - 0x440]
call fcn.1000efc4
mov dword [ebp - 4], 7
push 1
push 0
push 0x6118
push 0
lea eax, [ebp - 0x440]
push eax
push 0x7638
lea eax, [ebp - 0x3cc]
push eax
push 0x4cee
call fcn.1002d628
add esp, 0x20
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf4]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0xf4]
jl 0x10027f61
mov dword [ebp - 0x154], 1
jmp 0x10027f68
and dword [ebp - 0x154], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x20]
mov ecx, dword [ebp + ecx*4 - 0xf4]
cmp ecx, dword [ebp + eax - 0xf4]
jge 0x10027f94
mov dword [ebp - 0x144], 1
jmp 0x10027f9b
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf4]
imul eax, dword [ebp - 0x144]
sub eax, 0xcedb
cmp eax, dword [ebp - 0x14]
jne 0x10027fc2
mov dword [ebp - 0x1b4], 1
jmp 0x10027fc9
and dword [ebp - 0x1b4], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x14]
push 4
pop esi
imul esi, esi, 0
mov esi, dword [ebp + esi - 0x20]
mov esi, dword [ebp + esi*4 - 0xf4]
imul esi, dword [ebp - 0x1b4]
sub esi, dword [ebp + edx*4 - 0xf4]
imul esi, dword [ebp + ecx - 0x20]
cmp esi, dword [ebp + eax - 0x20]
jl 0x10028022
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp + eax*4 - 0xf4], 0
je 0x10028022
mov dword [ebp - 0x14c], 1
jmp 0x10028029
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0x6e8
jg 0x10028041
mov dword [ebp - 0x1ec], 1
jmp 0x10028048
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x14]
jge 0x10028065
mov dword [ebp - 0x1bc], 1
jmp 0x1002806c
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x1bc]
je 0x10028086
mov dword [ebp - 0x15c], 1
jmp 0x1002808d
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp dword [ebp - 0x15c], eax
jl 0x100280ab
mov dword [ebp - 0x214], 1
jmp 0x100280b2
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
mov eax, dword [ebp + eax*4 - 0xf4]
cmp eax, dword [ebp - 0x214]
je 0x100280d7
mov dword [ebp - 0x164], 1
jmp 0x100280de
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x164], eax
jge 0x10028108
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf4], 0
jne 0x10028108
and dword [ebp - 0x1c4], 0
jmp 0x10028112
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1c4], eax
jl 0x10028129
mov dword [ebp - 0x16c], 1
jmp 0x10028130
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x16c], eax
je 0x10028147
mov dword [ebp - 0x1f4], 1
jmp 0x1002814e
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x44], 0
jmp 0x1002816a
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jg 0x100281b4
mov dword [ebp - 0xc8], 0
jmp 0x10028189
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x100281a5
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x4ac], 0x52783de7
jmp 0x1002817c
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
jmp 0x10028163
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x440]
call fcn.1000f047
jmp 0x10027ec0
mov dword [ebp - 4], 8
cmp dword [ebp - 0x1cc], 0x66ea
jge 0x100281e7
push dword [ebp - 0x338]
call fcn.10047d34
pop ecx
jmp 0x10028203
or dword [ebp - 4], 0xffffffff
jmp 0x1002820d
cmp dword [ebp - 0x17c], 0
je 0x1002821b
jmp 0x10027d26
jmp 0x10027d26
mov dword [ebp - 0xa4], 0
jmp 0x10028239
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jg 0x1002827c
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1002827a
push 0x5fa8
push 0x2065
push 0
push 0x2092
push 0
push 1
push 0x22f5
push 0x5a1a
push 0x4805
call fcn.1002da3c
add esp, 0x24
jmp 0x1002822c
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
call fcn.10020ef8
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x238], 0x4227f44f
mov dword [ebp - 0x28], 0
jmp 0x100282ad
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x100282c3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xd4], 0xe8b72fd4
jmp 0x100282a6
mov dword [ebp - 0x28], 0
jmp 0x100282d3
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x100282e9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3bc], 0
jmp 0x100282cc
mov dword [ebp - 0x38], 0
jmp 0x100282f9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 5
je 0x1002837a
mov dword [ebp - 0x2ac], 0x7555b7ce
mov dword [ebp - 0x314], 5
mov byte [ebp - 0x3a], 0
push 1
push 0
lea eax, [ebp - 0x3a]
push eax
push 1
push 0x6bf8
push 0x262d
push 0x1afc
push 0x364
call fcn.1002d628
add esp, 0x20
push 0x5e73
push 0x3819
push 0x2835
push 0xe76
push 0x2c1e
push 1
push 0
lea eax, [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x314]
push eax
push 0x40d3
call fcn.1002274e
add esp, 0x28
jmp 0x100282f2
mov dword [ebp - 0x38], 1
jmp 0x1002838a
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10028813
mov dword [ebp - 0x18], 0x4a6e8f59
push 1
lea ecx, [ebp - 0x36c]
call fcn.1000efc4
mov dword [ebp - 4], 0xa
push 1
push 1
lea eax, [ebp - 0x36c]
push eax
push 0x395e
lea eax, [ebp - 0x3d4]
push eax
push 0
push 0x78dc
call fcn.1002a8fc
add esp, 0x1c
mov dword [ebp - 0x20c], 0xf80
mov dword [ebp - 0x33c], str.kukdyzln_ghvzg_iml_ptr_dnad_kspdbm_ogmtol_yqh
cmp dword [ebp - 0x20c], 0xfb7
jle 0x1002849d
and dword [ebp - 0x70], 0
jmp 0x10028406
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x388a
jge 0x1002849d
and dword [ebp - 0x60], 0
jmp 0x10028420
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x3504
jge 0x10028498
and dword [ebp - 0x68], 0
jmp 0x10028436
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x2a09
jge 0x10028496
mov eax, dword [ebp - 0x60]
cdq
idiv dword [ebp - 0x68]
and edx, dword [ebp - 0x70]
mov eax, edx
cdq
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], edx
push dword [ebp - 0x2f4]
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0x500]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x2b4], eax
mov ecx, dword [ebp - 0x2b4]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x500]
call fcn.10001bd4
jmp 0x1002842f
jmp 0x10028419
jmp 0x100283ff
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20c], 0xdb2
jge 0x100284b9
push dword [ebp - 0x33c]
call fcn.10047d34
pop ecx
jmp 0x100284d5
mov dword [ebp - 4], 0xa
jmp 0x100284e5
mov dword [ebp - 0x120], 0x2d30
mov dword [ebp - 0x240], str.vdajzp_tuqx_qxi_soiebmg_owahpmat_qjpnfmoc_xolcsp_jwhlihe_plzzpkrp_kehhydbuo_gehidg
cmp dword [ebp - 0x120], 0x3030
jle 0x10028609
call dword [sym.imp.USER32.dll_DestroyCaret]
and dword [ebp - 0x88], 0
jmp 0x10028525
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x7c18
jge 0x100285fc
and dword [ebp - 0x78], 0
jmp 0x10028542
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x3a4a
jge 0x100285f7
and dword [ebp - 0x80], 0
jmp 0x1002855c
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x5841
jge 0x100285f2
and dword [ebp - 0x90], 0
jmp 0x1002857f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x68a8
jge 0x100285ed
mov eax, dword [ebp - 0x78]
cdq
idiv dword [ebp - 0x80]
mov eax, dword [ebp - 0x88]
sub eax, edx
mov ecx, dword [ebp - 0x90]
shl eax, cl
cdq
mov dword [ebp - 0x304], eax
mov dword [ebp - 0x300], edx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
lea ecx, [ebp - 0x530]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x2bc], eax
mov ecx, dword [ebp - 0x2bc]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x530]
call fcn.10001bd4
jmp 0x10028572
jmp 0x10028555
jmp 0x1002853b
jmp 0x10028518
push 0
push 0x163a
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov dword [ebp - 0x18], 1
jmp 0x10028619
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x100287b7
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x108], 0xfffffff8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x450], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd4], 0x32c2a4e6
je 0x10028666
mov dword [ebp - 0x234], 1
jmp 0x1002866d
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd4]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0xd4]
jle 0x10028698
mov dword [ebp - 0x184], 1
jmp 0x1002869f
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd4]
cmp eax, dword [ebp - 0x1d4]
je 0x100286c9
mov dword [ebp - 0x18c], 1
jmp 0x100286d0
and dword [ebp - 0x18c], 0
mov esi, dword [ebp - 0x18c]
neg esi
push 0
lea ecx, [ebp - 0x36c]
call fcn.1000f063
cmp esi, dword [eax]
jg 0x100286f5
mov dword [ebp - 0x1fc], 1
jmp 0x100286fc
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x758a8ce9
jl 0x10028714
mov dword [ebp - 0xfc], 1
jmp 0x1002871b
and dword [ebp - 0xfc], 0
push 0
lea ecx, [ebp - 0x36c]
call fcn.1000f063
mov eax, dword [eax]
imul eax, dword [ebp - 0xfc]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd4]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0
jne 0x10028763
cmp dword [ebp - 0x18], 0
jne 0x10028763
and dword [ebp - 0x110], 0
jmp 0x1002876d
mov dword [ebp - 0x110], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
add eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + ecx*4 - 0xd4], eax
je 0x10028798
mov dword [ebp - 0x118], 1
jmp 0x1002879f
and dword [ebp - 0x118], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0x3bc], ecx
jmp 0x10028612
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x120], 0x2b96
jge 0x100287d3
push dword [ebp - 0x240]
call fcn.10047d34
pop ecx
jmp 0x100287ef
mov dword [ebp - 4], 0xa
jmp 0x100287ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x36c]
call fcn.1000f047
jmp 0x10028383
lea eax, [ebp - 0x494]
push eax
push dword [ebp - 0x248]
push dword [ebp - 0xe0]
lea eax, [ebp - 0x470]
push eax
call fcn.10020f58
add esp, 0x10
mov dword [ebp - 4], 0xf
push 3
lea ecx, [ebp - 0x360]
call fcn.1000efc4
mov byte [ebp - 4], 0x10
push 2
lea ecx, [ebp - 0x22c]
call fcn.1000efc4
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x128], 0x12e2
mov dword [ebp - 0x258], str.yfmehkt_wkfnnlk_jvc_dzugurcw_vfyptl_tjarh_zpir_xwpomt_xdwfgt_ypsybtu_weekxiw_kejqez
cmp dword [ebp - 0x128], 0x1331
jle 0x10028928
and dword [ebp - 0x98], 0
jmp 0x10028898
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x1e13
jge 0x10028922
and dword [ebp - 0xa0], 0
jmp 0x100288ba
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x5f61
jge 0x1002891d
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0xa0]
cdq
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], edx
push dword [ebp - 0x30c]
push dword [ebp - 0x310]
lea ecx, [ebp - 0x554]
call fcn.10001a55
pop ecx
pop ecx
mov dword [ebp - 0x250], eax
mov ecx, dword [ebp - 0x250]
call fcn.10001bde
push eax
call fcn.10047d34
pop ecx
lea ecx, [ebp - 0x554]
call fcn.10001bd4
jmp 0x100288ad
jmp 0x1002888b
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0x150], 0x5cefd06
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x128], 0x1202
jge 0x1002894e
push dword [ebp - 0x258]
call fcn.10047d34
pop ecx
jmp 0x1002896a
mov dword [ebp - 4], 0x11
jmp 0x1002897a
mov dword [ebp - 0x158], 3
push 3
lea ecx, [ebp - 0x384]
call fcn.1000efc4
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x278], 7
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x280], 0xffffffff
push 0x59e3
push 0x5d00
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x130]
push eax
push 0x1bd0
push 0x2722
push 1
push 0x633b
push 0
push 0x4b50
call fcn.10023cd3
add esp, 0x28
push 0x1f98
push 0
push 0x5862
lea eax, [ebp - 0x130]
push eax
push 0x7cc9
push 0x51db
lea eax, [ebp - 0x22c]
push eax
push 0x2b01
push 0x44cd
push 0x6f4a
push 0x1f14
push 1
push 0x40bd
call fcn.10022060
add esp, 0x34
push 1
push 0x29ac
lea eax, [ebp - 0x130]
push eax
push 0
push 0x6e1c
push 0x799a
push 0x3af0
push 0x607d
lea eax, [ebp - 0x384]
push eax
push 0x128c
push 0x526e
push 0x7229
push 0x6610
push 0x49d7
push 0
call fcn.10024389
add esp, 0x3c
mov dword [ebp - 0x148], 0x5223
mov dword [ebp - 0x270], str.zhtcdcvob_pehgyq_rzspopjwl_mmns_zdowpvfy_xbohvyuxy_eywwrrf_hystm_jnr
cmp dword [ebp - 0x148], 0x5476
jle 0x10028b63
and dword [ebp - 0xb8], 0
jmp 0x10028ac4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7fd5
jge 0x10028b56
and dword [ebp - 0xa8], 0
jmp 0x10028aea
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x7689
jge 0x10028b51
and dword [ebp - 0xb0], 0
jmp 0x10028b0c
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0x1032
jge 0x10028b4f
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xb0]
or eax, dword [ebp - 0xb8]
cdq
mov dword [ebp - 0x31c], eax
mov dword [ebp - 0x318], edx
push dword [ebp - 0x318]
push dword [ebp - 0x31c]
mov ecx, 0x1007ab78
call fcn.10001bfe
jmp 0x10028aff
jmp 0x10028add
jmp 0x10028ab7
push 0x1f57
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
push 0
lea ecx, [ebp - 0x22c]
call fcn.1000f063
mov dword [eax], 2
jmp 0x10028b9c
push 0
lea ecx, [ebp - 0x22c]
call fcn.1000f063
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x138]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x22c]
call fcn.1000f063
cmp dword [eax], 0
jl 0x10028c6f
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x140], 0
push 0x3b66
push 0x4d73
push 0x355b
push 0x4714
push 0x1b0b
push 0x549
push 0x437d
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x158]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x268]
push eax
lea eax, [ebp - 0x140]
push eax
push 0x259b
push 0x1757
push 0x6e22
push 1
push 0x7547
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x160]
push eax
push 1
push 0x3c90
push 0x2d9a
lea eax, [ebp - 0x150]
push eax
call fcn.10021055
add esp, 0x60
cmp dword [ebp - 0x140], 0
je 0x10028c6a
jmp 0x10028b78
jmp 0x10028b78
mov byte [ebp - 4], 0x15
cmp dword [ebp - 0x148], 0x50b6
jge 0x10028c8f
mov edx, dword [ebp - 0x270]
mov ecx, 0x1007ab78
call fcn.100039fb
jmp 0x10028cab
mov dword [ebp - 4], 0x14
jmp 0x10028cbb
push 0
lea eax, [ebp - 0x278]
push eax
push 0x13f0
push 1
lea eax, [ebp - 0x360]
push eax
lea eax, [ebp - 0x150]
push eax
push 0x331
lea eax, [ebp - 0x158]
push eax
push 0x1ac1
lea eax, [ebp - 0x280]
push eax
lea eax, [ebp - 0x288]
push eax
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x160]
push eax
push 1
call fcn.10024389
add esp, 0x3c
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x384]
call fcn.1000f047
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x22c]
call fcn.1000f047
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x360]
call fcn.1000f047
lea eax, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x470]
push eax
push dword [ebp - 0x50]
push 1
push 1
push 0x11093664
push 0xe5d
call fcn.100216de
add esp, 0x1c
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0xe8], 0x9124c6e1
mov dword [ebp - 0x2a0], 0
mov dword [ebp - 0x2b0], 1
cmp dword [ebp - 0x1c], 1
jle 0x10028db0
mov dword [ebp - 0x168], 1
jmp 0x10028db7
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x168], eax
jl 0x10028dce
mov dword [ebp - 0x170], 1
jmp 0x10028dd5
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 0x9fa553fc
jb 0x10028dee
xor eax, eax
jne 0x10028dee
and dword [ebp - 0x178], 0
jmp 0x10028df8
mov dword [ebp - 0x178], 1
mov eax, dword [ebp - 0x178]
neg eax
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x34]
je 0x10028e16
mov dword [ebp - 0x180], 1
jmp 0x10028e1d
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x180], eax
jge 0x10028e34
mov dword [ebp - 0x188], 1
jmp 0x10028e3b
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x188], eax
jge 0x10028e52
mov dword [ebp - 0x190], 1
jmp 0x10028e59
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x190], eax
je 0x10028e70
mov dword [ebp - 0x198], 1
jmp 0x10028e77
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x198], eax
jl 0x10028e8e
mov dword [ebp - 0x1a0], 1
jmp 0x10028e95
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1a0]
je 0x10028eac
mov dword [ebp - 0x1a8], 1
jmp 0x10028eb3
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1a8], eax
jne 0x10028eca
mov dword [ebp - 0x290], 1
jmp 0x10028ed1
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x1c], 0x1fb9
je 0x10028eef
mov dword [ebp - 0x1b0], 1
jmp 0x10028ef6
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
sub eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x10028f10
mov dword [ebp - 0x1b8], 1
jmp 0x10028f17
and dword [ebp - 0x1b8], 0
imul eax, dword [ebp - 0x1b8], 0x4b26
cmp eax, dword [ebp - 0x34]
jne 0x10028f32
mov dword [ebp - 0x1c0], 1
jmp 0x10028f39
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0
jge 0x10028f65
mov byte [ebp - 0x3e], 0
push 0x1553
push 1
lea eax, [ebp - 0x3e]
push eax
push 0x212a
push 0
call fcn.10022b1d
add esp, 0x14
jmp 0x100291f4
mov dword [ebp - 0x48], 0xffff
mov dword [ebp - 0x298], 0x2ee8b720
mov dword [ebp - 0x2c], 0
jmp 0x10028f86
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10028f9c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x394], 9
jmp 0x10028f7f
mov dword [ebp - 0x2c], 0
jmp 0x10028fac
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10028fc2
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x488], 0xb8a8
jmp 0x10028fa5
mov byte [ebp - 0x39], 0
lea eax, [ebp - 0x39]
push eax
push 0xfe5
push 0xa85
push 1
push 0
call fcn.1002409d
add esp, 0x14
cmp dword [ebp - 0x48], 0
je 0x10028ffe
cmp dword [ebp - 0x48], 0
je 0x10028ffe
cmp dword [ebp - 0x1c], 0
je 0x10028ffe
mov dword [ebp - 0x1c8], 1
jmp 0x10029005
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x1c8]
je 0x10029025
mov dword [ebp - 0x1d0], 1
jmp 0x1002902c
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
je 0x10029041
cmp dword [ebp - 0xe8], 0
imul eax, dword [ebp - 0x298], 0x2bb1
sub eax, 0x4a5bf585
je 0x100291d9
mov dword [ebp - 0xdc], 0x9c94
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x48]
jge 0x100290a1
mov dword [ebp - 0x1d8], 1
jmp 0x100290a8
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xe821
jle 0x100290ba
cmp dword [ebp - 0x58], 0
jne 0x100290c9
cmp dword [ebp - 0x58], 0
jne 0x100290c9
and dword [ebp - 0x1e0], 0
jmp 0x100290d3
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x1e0]
jne 0x100290ec
or eax, 0xffffffff
jne 0x100290ec
and dword [ebp - 0x1e8], 0
jmp 0x100290f6
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1e8]
add eax, 0x8a13
cmp eax, 0xb7df
jl 0x10029114
mov dword [ebp - 0x1f0], 1
jmp 0x1002911b
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x1f0], eax
jg 0x10029135
mov dword [ebp - 0x1f8], 1
jmp 0x1002913c
and dword [ebp - 0x1f8], 0
cmp dword [ebp - 0x1f8], 0xd5e8e059
ja 0x10029154
mov dword [ebp - 0xf8], 1
jmp 0x1002915b
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xf8], eax
jle 0x10029175
mov dword [ebp - 0x2a8], 1
jmp 0x1002917c
and dword [ebp - 0x2a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x444], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
imul ecx, dword [ebp + ecx - 0x488], 0xf60
cmp ecx, dword [ebp + eax - 0x394]
je 0x100291c7
mov dword [ebp - 0x208], 1
jmp 0x100291ce
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x58], eax
jmp 0x100291f4
push 0x7a28
push 0x4ffd
push 1
push 1
push 0x4a8e
call fcn.10021e26
add esp, 0x14
push 0x116c
push 0
push 1
push 0xa0f
push 0x47ff
lea eax, [ebp - 0x2b0]
push eax
call fcn.10024ba7
add esp, 0x18
lea eax, [ebp - 0x470]
push eax
mov ecx, dword [ebp - 0x210]
call fcn.10017494
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x470]
call fcn.1001748a
jmp 0x10029262
jmp 0x10029262
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2b8], eax
push 0
push dword [ebp - 0x2b8]
call fcn.10026dfc
pop ecx
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret