Function at 0x1002a3ad
Capabilities:
Accept command line arguments
Create directory
Encrypt data using speck
Enumerate gui resources
Get common file path
Get keyboard layout
Identify system language via api
Set environment variable
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10061718
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xf68
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x148], 0x48bbca63
mov dword [ebp - 0xd78], 0xfaaaeb9a
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc68], 0xfffffffa
push 1
lea ecx, [ebp - 0xdc4]
call fcn.1000199f
and dword [ebp - 4], 0
mov dword [ebp - 0x8f8], 0
mov dword [ebp - 0x88], 0
jmp 0x1002a42e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1002a450
push dword [ebp - 0x88]
lea ecx, [ebp - 0xdc4]
call fcn.10001a06
mov dword [eax], 8
jmp 0x1002a421
mov dword [ebp - 0x88], 0
jmp 0x1002a469
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1002a485
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xea4], 1
jmp 0x1002a45c
mov dword [ebp - 0x148], 0
jmp 0x1002a49e
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xe
jg 0x1002a66e
mov dword [ebp - 0x2c0], 5
mov dword [ebp - 0x6c4], 0x51b0
mov dword [ebp - 0x9ac], str.rcmtbtfuc_dvsachxfu_pygolnhp
cmp dword [ebp - 0x6c4], 0x53fb
jle 0x1002a5b4
and dword [ebp - 0x33c], 0
jmp 0x1002a4ef
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0x6f21
jge 0x1002a5b4
and dword [ebp - 0x328], 0
jmp 0x1002a515
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x5e21
jge 0x1002a5af
and dword [ebp - 0x334], 0
jmp 0x1002a53b
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0x7f42
jge 0x1002a5aa
and dword [ebp - 0x2a0], 0
jmp 0x1002a55d
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x1fed
jge 0x1002a5a8
mov ecx, dword [ebp - 0x328]
sub ecx, dword [ebp - 0x334]
mov eax, dword [ebp - 0x33c]
shl eax, cl
xor eax, dword [ebp - 0x2a0]
cdq
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa5c], edx
push dword [ebp - 0xa5c]
push dword [ebp - 0xa60]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002a550
jmp 0x1002a52e
jmp 0x1002a508
jmp 0x1002a4e2
mov dword [ebp - 0xc70], 1
mov byte [ebp - 4], 1
cmp dword [ebp - 0x6c4], 0x5133
jge 0x1002a5de
mov edx, dword [ebp - 0x9ac]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002a5fa
and dword [ebp - 4], 0
jmp 0x1002a604
mov dword [ebp - 0xc78], 0x7c10977a
mov dword [ebp - 0x2c0], 0
jmp 0x1002a627
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xfffffffe
jge 0x1002a65c
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1002a64f
push 0x2281
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
cmp dword [ebp - 0x148], 0
je 0x1002a65a
jmp 0x1002a61a
jmp 0x1002a61a
mov eax, dword [ebp - 0x8f8]
inc eax
mov dword [ebp - 0x8f8], eax
jmp 0x1002a491
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc4]
call fcn.10001a01
cmp dword [0x1009f66c], 0
jne 0x10030caf
mov dword [ebp - 0x48], 0x5912491e
mov dword [ebp - 0x920], 0x53f
mov dword [ebp - 0xa54], str.ujwhjtdln_xee_akdtpl
cmp dword [ebp - 0x920], 0x8be
jle 0x1002a8f4
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
and dword [ebp - 0x1b0], 0
jmp 0x1002a6d3
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x7040
jge 0x1002a8f4
and dword [ebp - 0x340], 0
jmp 0x1002a6f9
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x3c44
jge 0x1002a8ef
and dword [ebp - 0x1b8], 0
jmp 0x1002a71f
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x57cc
jge 0x1002a8ea
mov eax, dword [ebp - 0x1b0]
cdq
idiv dword [ebp - 0x340]
and edx, dword [ebp - 0x1b8]
mov eax, edx
cdq
mov dword [ebp - 0xa6c], eax
mov dword [ebp - 0xa68], edx
mov dword [ebp - 0xa44], 0x15dc
cmp dword [ebp - 0xa44], 0x1253
jge 0x1002a8cf
xor cl, cl
call fcn.1001e53a
lea ecx, [ebp - 0x3f8]
call fcn.10037798
mov dword [ebp - 4], 3
lea eax, [ebp - 0x350]
push eax
mov ecx, 0x1007c050
call fcn.1002119a
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0xa4c], 0
je 0x1002a8c0
lea eax, [ebp - 0xbf4]
push eax
lea edx, [ebp - 0x31]
mov ecx, 0x1007c050
call fcn.10037dca
mov ecx, eax
call fcn.100375f1
push dword [ebp - 0xbf0]
push dword [ebp - 0xbf4]
call fcn.1002a292
pop ecx
pop ecx
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0x3ec], edx
movsx eax, byte [ebp - 0x31]
cmp eax, 0x2b
jne 0x1002a854
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.1003785f
test eax, eax
ja 0x1002a829
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.100377ad
and dword [eax], 0
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.100377ad
mov dword [ebp - 0x900], eax
mov eax, dword [ebp - 0x900]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x900]
mov dword [ecx], eax
jmp 0x1002a8bb
movsx eax, byte [ebp - 0x31]
cmp eax, 0x2d
jne 0x1002a888
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.100377ad
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x918]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x918]
mov dword [ecx], eax
jmp 0x1002a8bb
movsx eax, byte [ebp - 0x31]
cmp eax, 0x3f
jne 0x1002a8bb
push fcn.1000a400
lea eax, [ebp - 0x3f0]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.100377ad
push dword [eax]
mov ecx, 0x1007bf98
call fcn.100212af
mov ecx, eax
call fcn.10007148
jmp 0x1002a795
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f8]
call fcn.10037836
push dword [ebp - 0xa68]
push dword [ebp - 0xa6c]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002a712
jmp 0x1002a6ec
jmp 0x1002a6c6
mov dword [ebp - 0x7c], 0xd714f98c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x920], 0x494
jge 0x1002a91e
mov edx, dword [ebp - 0xa54]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002a93a
or dword [ebp - 4], 0xffffffff
jmp 0x1002a944
mov dword [ebp - 0xb4], 0x874be76d
push 3
lea ecx, [ebp - 0x950]
call fcn.1000199f
mov dword [ebp - 4], 6
mov dword [ebp - 0xc80], 1
mov dword [ebp - 0xc88], 4
mov dword [ebp - 0x848], 0x26f84b87
mov dword [ebp - 0x858], 0x47bfe1a2
mov dword [ebp - 0xc90], 0
mov dword [ebp - 0x3b8], 0x17e40d8e
mov dword [ebp - 0xc98], 4
mov dword [ebp - 0xca0], 0xd46d8da5
mov dword [ebp - 0x2c8], 0
jmp 0x1002a9cb
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x1002a9ed
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x950]
call fcn.10001a06
mov dword [eax], 0xedfc3e8c
jmp 0x1002a9be
mov dword [ebp - 0x7c], 1
cmp dword [ebp - 0x7c], 0xfffffffb
jne 0x1002aa06
mov dword [ebp - 0x928], 1
jmp 0x1002aa0d
and dword [ebp - 0x928], 0
cmp dword [ebp - 0x48], 0
je 0x1002aa25
cmp dword [ebp - 0x48], 0
je 0x1002aa25
mov dword [ebp - 0x930], 1
jmp 0x1002aa2c
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x928]
cmp eax, dword [ebp - 0x930]
jne 0x1002aa46
mov dword [ebp - 0xb2c], 1
jmp 0x1002aa4d
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0x48], 0xffffffff
jb 0x1002aa8f
mov dword [ebp - 0x938], 1
jmp 0x1002aa96
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x938], eax
jge 0x1002aaad
mov dword [ebp - 0xb34], 1
jmp 0x1002aab4
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xcc8], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xcd0], eax
cmp dword [ebp - 0x48], 0
jne 0x1002aade
cmp dword [ebp - 0xb4], 0
jne 0x1002aade
and dword [ebp - 0x940], 0
jmp 0x1002aae8
mov dword [ebp - 0x940], 1
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x940], eax
je 0x1002aaff
mov dword [ebp - 0x394], 1
jmp 0x1002ab06
and dword [ebp - 0x394], 0
push 1
lea ecx, [ebp - 0x950]
call fcn.10001a06
mov ecx, dword [ebp - 0x394]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x394], eax
jge 0x1002acdc
mov dword [ebp - 0x128], 0xffffffff
mov dword [ebp - 0x90c], 0x266d991
mov dword [ebp - 0x838], 0xfff7
mov dword [ebp - 0x90c], 1
mov eax, dword [ebp - 0x90c]
imul eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xb4]
jge 0x1002ab73
mov dword [ebp - 0x4e4], 1
jmp 0x1002ab7a
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 1
jne 0x1002ab8f
mov dword [ebp - 0x818], 1
jmp 0x1002ab96
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x818]
cmp eax, 0x3d88101a
jg 0x1002abb5
mov dword [ebp - 0x414], 1
jmp 0x1002abbc
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0x461302d9
jl 0x1002abd4
mov dword [ebp - 0x820], 1
jmp 0x1002abdb
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x820], eax
jge 0x1002abfb
mov eax, 0xd0e
test eax, eax
jne 0x1002abfb
and dword [ebp - 0x41c], 0
jmp 0x1002ac05
mov dword [ebp - 0x41c], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x41c], eax
je 0x1002ac22
cmp dword [ebp - 0x48], 0
je 0x1002ac22
mov dword [ebp - 0x828], 1
jmp 0x1002ac29
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x424], eax
push 0
lea ecx, [ebp - 0x950]
call fcn.10001a06
mov ecx, dword [ebp - 0x424]
mov dword [eax], ecx
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x828]
mov ecx, dword [ebp - 0x424]
sub ecx, eax
cmp ecx, dword [ebp - 0x128]
jl 0x1002ac72
mov dword [ebp - 0x830], 1
jmp 0x1002ac79
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0x349124c6
jl 0x1002ac91
mov dword [ebp - 0x42c], 1
jmp 0x1002ac98
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x42c]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x7c], 0
jmp 0x1002acb8
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff9
je 0x1002acd7
mov dword [ebp - 0xcd8], 0xffffffff
mov eax, dword [ebp - 0x838]
inc eax
mov dword [ebp - 0x838], eax
jmp 0x1002acb1
jmp 0x1002b0fa
mov dword [ebp - 0x3cc], 5
mov dword [ebp - 0xb4c], 0xbc84814c
mov dword [ebp - 0x44c], 1
mov dword [ebp - 0xce0], 0
mov dword [ebp - 0xb6c], 1
mov dword [ebp - 0xce8], 0xfe49ba5c
mov dword [ebp - 0xb54], 0xfffffffb
mov dword [ebp - 0xcf0], 0x6f8a133a
mov dword [ebp - 0xcf8], 0xb1bda2dd
mov dword [ebp - 0x434], 0x6a9
mov dword [ebp - 0xb44], str.uln_ulyqv_qvjh_tuhlzxobh_wfajmh_xflavotj_xxsi
cmp dword [ebp - 0x434], 0x9d4
jle 0x1002ae70
and dword [ebp - 0x1c0], 0
jmp 0x1002ad70
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x7f69
jge 0x1002ae61
and dword [ebp - 0x308], 0
jmp 0x1002ad96
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x39d2
jge 0x1002ae5c
and dword [ebp - 0x1c8], 0
jmp 0x1002adbc
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x6bc9
jge 0x1002ae57
and dword [ebp - 0x2d0], 0
jmp 0x1002ade2
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x2bfe
jge 0x1002ae52
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x308]
add eax, dword [ebp - 0x1c8]
xor eax, dword [ebp - 0x2d0]
cdq
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0xa74], edx
push dword [ebp - 0xa74]
push dword [ebp - 0xa78]
lea ecx, [ebp - 0xf68]
call fcn.100025b7
pop ecx
pop ecx
mov dword [ebp - 0xb3c], eax
mov ecx, dword [ebp - 0xb3c]
call fcn.1000704b
push eax
call fcn.1004b05d
pop ecx
lea ecx, [ebp - 0xf68]
call fcn.10007041
jmp 0x1002add5
jmp 0x1002adaf
jmp 0x1002ad89
jmp 0x1002ad63
push 0
push 0x2078
push 0
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
mov dword [ebp - 0xd3c], 0xfffffffa
mov byte [ebp - 4], 7
cmp dword [ebp - 0x434], 0x3b9
jge 0x1002ae96
push dword [ebp - 0xb44]
call fcn.1004b05d
pop ecx
jmp 0x1002aeb2
mov dword [ebp - 4], 6
jmp 0x1002aec2
mov dword [ebp - 0xd44], 1
mov dword [ebp - 0xb64], 0x280e44e
mov dword [ebp - 0x8c], 0
jmp 0x1002aeef
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1002af0b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xecc], 0x33fe686b
jmp 0x1002aee2
mov dword [ebp - 0x8c], 0
jmp 0x1002af24
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1002af40
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3b0], 0xfaab159b
jmp 0x1002af17
cmp dword [ebp - 0xb4c], 0
je 0x1002af67
push 1
lea ecx, [ebp - 0x950]
call fcn.10001a06
cmp dword [eax], 0
je 0x1002af67
mov dword [ebp - 0x444], 1
jmp 0x1002af6e
and dword [ebp - 0x444], 0
push 1
lea ecx, [ebp - 0x950]
call fcn.10001a06
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b0]
mov dword [ebp - 0xd4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3b0], eax
mov eax, dword [ebp - 0xb54]
cmp eax, dword [ebp - 0xb4]
je 0x1002afc3
mov dword [ebp - 0x840], 1
jmp 0x1002afca
and dword [ebp - 0x840], 0
cmp dword [ebp - 0x840], 0xfffffffe
jb 0x1002afdf
mov dword [ebp - 0xb5c], 1
jmp 0x1002afe6
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0xd54], eax
mov esi, dword [ebp - 0x858]
push 1
lea ecx, [ebp - 0x950]
call fcn.10001a06
sub esi, dword [eax]
je 0x1002b027
push 2
lea ecx, [ebp - 0x950]
call fcn.10001a06
cmp dword [eax], 0
je 0x1002b027
mov dword [ebp - 0x43c], 1
jmp 0x1002b02e
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
sub eax, 0x6ff5
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x848]
cmp dword [ebp - 0x444], eax
jne 0x1002b065
mov dword [ebp - 0x850], 1
jmp 0x1002b06c
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
imul eax, dword [ebp - 0x858]
cmp eax, 0xa8b0
jge 0x1002b098
mov dword [ebp - 0x454], 1
jmp 0x1002b09f
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x454]
jg 0x1002b0c6
mov dword [ebp - 0x860], 1
jmp 0x1002b0cd
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x860], eax
jge 0x1002b0e7
mov dword [ebp - 0x45c], 1
jmp 0x1002b0ee
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0xb6c], eax
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x1002b119
push 0x23c6
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x950]
call fcn.10001a01
mov dword [ebp - 0x1d0], 0x91a049fe
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1002b14e
push 0
push 0x49
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov dword [ebp - 0x1d0], 0xffffffe6
jmp 0x1002b167
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0x15
jg 0x1002b1bf
mov dword [ebp - 0x1a4], 0x22124f84
mov dword [ebp - 0x1a4], 0x1a
jmp 0x1002b193
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x13
je 0x1002b1bd
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1002b1bb
push 0
push 0x182d
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
jmp 0x1002b186
jmp 0x1002b15a
mov byte [ebp - 0x174], 9
mov byte [ebp - 0x173], 0x17
mov byte [ebp - 0x172], 0xb
mov byte [ebp - 0x171], 8
mov byte [ebp - 0x170], 2
mov byte [ebp - 0x16f], 0x1e
mov byte [ebp - 0x16e], 4
mov byte [ebp - 0x16d], 0x17
mov byte [ebp - 0x16c], 8
mov byte [ebp - 0x16b], 0x4b
mov byte [ebp - 0x16a], 0
mov byte [ebp - 0x169], 0x65
mov byte [ebp - 0x168], 3
mov byte [ebp - 0x167], 0x25
mov byte [ebp - 0x166], 5
mov byte [ebp - 0x165], 2
mov byte [ebp - 0x164], 1
mov byte [ebp - 0x163], 9
mov byte [ebp - 0x162], 6
mov byte [ebp - 0x161], 0x56
mov byte [ebp - 0x160], 3
mov byte [ebp - 0x15f], 0x44
mov byte [ebp - 0x15e], 0x26
mov byte [ebp - 0x15d], 0x44
mov byte [ebp - 0x15c], 7
mov byte [ebp - 0x15b], 1
mov byte [ebp - 0x15a], 0xa
mov byte [ebp - 0x159], 0x5e
mov dword [ebp - 0x5c], 0x730f94f3
mov dword [ebp - 0x358], 0xf58382bd
mov dword [ebp - 0x2e0], 0xd0e75d
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x880], 0x2324067b
mov dword [ebp - 0x1d8], 0
jmp 0x1002b2cb
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x1002b2e7
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0xbe0], 0xec2e0cf5
jmp 0x1002b2be
mov dword [ebp - 0x5c], 2
jmp 0x1002b2f7
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1002b36b
mov dword [ebp - 0x2d8], 0xbad86e52
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1002b324
push 0x22a8
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
mov dword [ebp - 0x2d8], 0
jmp 0x1002b33d
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jg 0x1002b369
mov byte [ebp - 0xe0], 0
movzx eax, byte [ebp - 0xe0]
test eax, eax
je 0x1002b367
push 0x71
push 0x1d8a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1002b330
jmp 0x1002b2f0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbe0]
mov dword [ebp - 0x358], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbe0]
cmp eax, dword [ebp - 0x358]
jle 0x1002b3ab
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbe0], 0
jne 0x1002b3ab
and dword [ebp - 0x868], 0
jmp 0x1002b3b5
mov dword [ebp - 0x868], 1
mov eax, dword [ebp - 0x868]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jne 0x1002b3dc
mov eax, 0x9a2b82c4
test eax, eax
jne 0x1002b3dc
and dword [ebp - 0x464], 0
jmp 0x1002b3e6
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x1002b407
mov dword [ebp - 0xb74], 1
jmp 0x1002b40e
and dword [ebp - 0xb74], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbe0]
mov dword [ebp - 0xd5c], eax
cmp dword [ebp - 0x5c], 0
ja 0x1002b433
mov dword [ebp - 0x870], 1
jmp 0x1002b43a
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x870]
je 0x1002b920
mov dword [ebp - 0x46c], 0x6fc0
mov dword [ebp - 0xbc0], str.kvjdmfsrs_wpxaysqc_qxxzqlc_oib_rvnu_zfs_nxkpqkd_zwewd_qoz_fuoynw_hgiyseis_cpddoswam_nnytt
cmp dword [ebp - 0x46c], 0x70ba
jle 0x1002b543
and dword [ebp - 0x1e8], 0
jmp 0x1002b483
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x5ead
jge 0x1002b543
and dword [ebp - 0x1e0], 0
jmp 0x1002b4a9
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x4c8b
jge 0x1002b53e
and dword [ebp - 0x310], 0
jmp 0x1002b4cf
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x53f7
jge 0x1002b539
mov eax, dword [ebp - 0x1e0]
imul eax, dword [ebp - 0x310]
or eax, dword [ebp - 0x1e8]
cdq
mov dword [ebp - 0xa84], eax
mov dword [ebp - 0xa80], edx
push dword [ebp - 0xa80]
push dword [ebp - 0xa84]
lea ecx, [ebp - 0xefc]
call fcn.100025b7
pop ecx
pop ecx
mov dword [ebp - 0xb7c], eax
mov ecx, dword [ebp - 0xb7c]
call fcn.1000704b
push eax
call fcn.1004b05d
pop ecx
lea ecx, [ebp - 0xefc]
call fcn.10007041
jmp 0x1002b4c2
jmp 0x1002b49c
jmp 0x1002b476
mov dword [ebp - 0xe8], 1
mov dword [ebp - 4], 9
cmp dword [ebp - 0x46c], 0x6c15
jge 0x1002b56c
push dword [ebp - 0xbc0]
call fcn.1004b05d
pop ecx
jmp 0x1002b588
or dword [ebp - 4], 0xffffffff
jmp 0x1002b592
mov dword [ebp - 0x3a0], 0x2cbd
mov dword [ebp - 0xa3c], 0x29adbd3d
mov dword [ebp - 0x9a8], 0xfffffffd
mov dword [ebp - 0x9a4], 0xfffffffd
mov dword [ebp - 0x9a0], 0xfffffffd
mov dword [ebp - 0x99c], 0xfffffffd
mov dword [ebp - 0x48c], 0xa762
mov dword [ebp - 0x9b8], 0x1aabb774
cmp dword [ebp - 0xe8], 0
jg 0x1002b5f7
mov dword [ebp - 0x878], 1
jmp 0x1002b5fe
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x878], eax
jne 0x1002b618
mov dword [ebp - 0xb08], 1
jmp 0x1002b61f
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd64], eax
xor eax, eax
inc eax
je 0x1002b63f
cmp dword [ebp - 0x5c], 0
je 0x1002b63f
mov dword [ebp - 0x474], 1
jmp 0x1002b646
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x880]
cmp dword [ebp - 0x474], eax
je 0x1002b660
mov dword [ebp - 0x47c], 1
jmp 0x1002b667
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x880]
cmp dword [ebp - 0x47c], eax
jge 0x1002b687
cmp dword [ebp - 0x120], 0
jne 0x1002b687
and dword [ebp - 0x888], 0
jmp 0x1002b691
mov dword [ebp - 0x888], 1
cmp dword [ebp - 0x888], 0x9e6
jge 0x1002b6a9
mov dword [ebp - 0x484], 1
jmp 0x1002b6b0
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x484], eax
jl 0x1002b6ca
mov dword [ebp - 0xad0], 1
jmp 0x1002b6d1
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0x120]
jl 0x1002b6f4
mov dword [ebp - 0x890], 1
jmp 0x1002b6fb
and dword [ebp - 0x890], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x890]
mov dword [ebp + eax - 0x9a8], ecx
cmp dword [ebp - 0x48c], 0
jne 0x1002b729
cmp dword [ebp - 0x48c], 0
jne 0x1002b729
and dword [ebp - 0x4b4], 0
jmp 0x1002b733
mov dword [ebp - 0x4b4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a8]
mov dword [ebp - 0xd74], eax
xor eax, eax
inc eax
je 0x1002b760
cmp dword [ebp - 0x3a0], 0
je 0x1002b760
mov dword [ebp - 0x898], 1
jmp 0x1002b767
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x898], eax
jge 0x1002b781
mov dword [ebp - 0x494], 1
jmp 0x1002b788
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0x1f13
je 0x1002b7a0
mov dword [ebp - 0x8a0], 1
jmp 0x1002b7a7
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
je 0x1002b7d1
mov eax, 0x6a8e
test eax, eax
je 0x1002b7d1
mov dword [ebp - 0x49c], 1
jmp 0x1002b7d8
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
sub eax, dword [ebp - 0xa3c]
jne 0x1002b7f2
mov dword [ebp - 0x8a8], 1
jmp 0x1002b7f9
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x3a0]
cmp dword [ebp - 0x8a8], eax
jge 0x1002b813
mov dword [ebp - 0x4a4], 1
jmp 0x1002b81a
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 1
ja 0x1002b82f
mov dword [ebp - 0x8b0], 1
jmp 0x1002b836
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x9b8]
cmp dword [ebp - 0x8b0], eax
jle 0x1002b850
mov dword [ebp - 0x4ac], 1
jmp 0x1002b857
and dword [ebp - 0x4ac], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x9a8]
imul ecx, dword [ebp - 0x4ac]
cmp ecx, dword [ebp + eax - 0x9a8]
je 0x1002b886
mov dword [ebp - 0x8b8], 1
jmp 0x1002b88d
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 0xfffffffc
jle 0x1002b8a2
mov dword [ebp - 0xb90], 1
jmp 0x1002b8a9
and dword [ebp - 0xb90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a8]
mov dword [ebp - 0xd7c], eax
mov eax, dword [ebp - 0xe8]
add eax, dword [ebp - 0xe8]
cmp eax, 0xfe3aca47
ja 0x1002b8db
mov dword [ebp - 0x8c0], 1
jmp 0x1002b8e2
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x4b4]
cmp eax, dword [ebp - 0x8c0]
je 0x1002b902
cmp dword [ebp - 0xe8], 0
jne 0x1002b902
and dword [ebp - 0x4bc], 0
jmp 0x1002b90c
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x120], eax
jmp 0x1002b94a
mov dword [ebp - 0x8c8], 0xd004
mov dword [ebp - 0x9c0], 1
mov dword [ebp - 0x8c8], 0xf8626bad
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x9c0], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x174]
and eax, 0x73
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x174]
or ecx, 0x73
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x174]
mov word [ebp + eax*2 - 0xc5c], cx
mov dword [ebp - 0x4c4], 0x69ac
mov dword [ebp - 0xadc], str.ayljrske_mitb_puhsfl_zabr
cmp dword [ebp - 0x4c4], 0x69c4
jle 0x1002ba66
push 0x182b
call dword [sym.imp.USER32.dll_SetFocus]
and dword [ebp - 0x1f8], 0
jmp 0x1002b9c9
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0x18ab
jge 0x1002ba5e
and dword [ebp - 0x1f0], 0
jmp 0x1002b9ef
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x8af
jge 0x1002ba59
and dword [ebp - 0x338], 0
jmp 0x1002ba11
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x5c06
jge 0x1002ba57
mov eax, dword [ebp - 0x1f0]
cdq
idiv dword [ebp - 0x338]
add edx, dword [ebp - 0x1f8]
mov eax, edx
cdq
mov dword [ebp - 0xa90], eax
mov dword [ebp - 0xa8c], edx
push dword [ebp - 0xa8c]
push dword [ebp - 0xa90]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002ba04
jmp 0x1002b9e2
jmp 0x1002b9bc
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0xd84], 0x204e
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x4c4], 0x67ec
jge 0x1002ba93
mov edx, dword [ebp - 0xadc]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002baaf
or dword [ebp - 4], 0xffffffff
jmp 0x1002bab9
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1002bad5
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x1002baf4
push 0x2612
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov dword [ebp - 0x44], 2
and dword [ebp - 0x2d4], 0
jmp 0x1002bb0c
mov eax, dword [ebp - 0x44]
inc eax
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1c
jae 0x1002cc37
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x2e8], 0
jmp 0x1002bb36
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1002bb52
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0xf0], 0x48110cbb
jmp 0x1002bb29
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x1002bb66
mov dword [ebp - 0x8d0], 1
jmp 0x1002bb6d
and dword [ebp - 0x8d0], 0
cmp dword [ebp - 0x8d0], 0x3a0f
jne 0x1002bb85
mov dword [ebp - 0x4cc], 1
jmp 0x1002bb8c
and dword [ebp - 0x4cc], 0
imul eax, dword [ebp - 0x4cc], 0xffffffff
cmp eax, 7
jne 0x1002bb9c
cmp dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0
jne 0x1002bbae
mov dword [ebp - 0x8d8], 1
jmp 0x1002bbb5
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x8d8], eax
jne 0x1002bbcc
mov dword [ebp - 0x4d4], 1
jmp 0x1002bbd3
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
sub eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
imul ecx, eax
cmp ecx, dword [ebp - 0x14]
jge 0x1002bbf6
cmp dword [ebp - 0x14], 0
jne 0x1002bbf6
and dword [ebp - 0x8e0], 0
jmp 0x1002bc00
mov dword [ebp - 0x8e0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x8e0], eax
jge 0x1002bc17
mov dword [ebp - 0x4dc], 1
jmp 0x1002bc1e
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0xfffffff8
jne 0x1002bc33
mov dword [ebp - 0x9c8], 1
jmp 0x1002bc3a
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8e8]
mov dword [ebp + eax - 0xf0], ecx
cmp dword [ebp - 0x8e8], 0
jne 0x1002bc78
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
jne 0x1002bc78
and dword [ebp - 0x8f0], 0
jmp 0x1002bc82
mov dword [ebp - 0x8f0], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x8f0]
test eax, eax
jne 0x1002bca9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
jne 0x1002bca9
and dword [ebp - 0x72c], 0
jmp 0x1002bcb3
mov dword [ebp - 0x72c], 1
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x72c]
cmp dword [ebp - 0x14], eax
jne 0x1002bccd
mov dword [ebp - 0x4ec], 1
jmp 0x1002bcd4
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x4ec], 0x43657218
jge 0x1002bcec
mov dword [ebp - 0x978], 1
jmp 0x1002bcf3
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x978], 1
jbe 0x1002bd37
mov eax, 0x67e7
test eax, eax
je 0x1002bd37
mov dword [ebp - 0xb04], 0
mov dword [ebp - 0x14], 0xffffffff
jmp 0x1002bd1f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x14
jl 0x1002bd32
cmp dword [ebp - 0xb04], 0
je 0x1002bd30
jmp 0x1002bd32
jmp 0x1002bd18
jmp 0x1002bf55
mov dword [ebp - 0x2f0], 0x3de7
mov dword [ebp - 0x4f4], 4
mov dword [ebp - 0x9d0], 4
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1002bd6f
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x854], 0x59da
mov dword [ebp - 0x9d8], str.vmm_frur_mcijeis_kfity_rehdrwup_armv_uvx_mscm_qfxncagar
cmp dword [ebp - 0x854], 0x5adb
jle 0x1002be68
and dword [ebp - 0x200], 0
jmp 0x1002bda9
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x1db7
jge 0x1002be3f
and dword [ebp - 0x318], 0
jmp 0x1002bdcf
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x1441
jge 0x1002be3a
and dword [ebp - 0x208], 0
jmp 0x1002bdf1
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x2ee0
jge 0x1002be38
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x318]
shl eax, cl
mov ecx, dword [ebp - 0x208]
shl eax, cl
cdq
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0xa98], edx
push dword [ebp - 0xa98]
push dword [ebp - 0xa9c]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002bde4
jmp 0x1002bdc2
jmp 0x1002bd9c
push 0x1216
push 0x190e
push 0xf35
push 0x1f99
push 0x9e4
push 0xdfa
push 0x69b
call dword [sym.imp.GDI32.dll_RoundRect]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x2f0]
cmp eax, dword [ebp - 0x4f4]
je 0x1002be8b
mov dword [ebp - 0x4fc], 1
jmp 0x1002be92
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x2f0], 0
je 0x1002beac
xor eax, eax
inc eax
je 0x1002beac
mov dword [ebp - 0x734], 1
jmp 0x1002beb3
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x9d0]
cmp dword [ebp - 0x734], eax
jle 0x1002becd
mov dword [ebp - 0xae8], 1
jmp 0x1002bed4
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xd94], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
add eax, dword [ebp - 0x4fc]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf0], eax
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x854], 0x5806
jge 0x1002bf2f
mov edx, dword [ebp - 0x9d8]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002bf4b
or dword [ebp - 4], 0xffffffff
jmp 0x1002bf55
mov dword [ebp - 0x14], 0
jmp 0x1002bf65
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1002bf7b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf0], 0
jmp 0x1002bf5e
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x174]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x44], eax
jne 0x1002c607
mov dword [ebp - 0x73c], 0xeb2fc257
mov dword [ebp - 0x29c], 9
mov dword [ebp - 0x50c], 1
mov dword [ebp - 0x514], 0xffffffff
mov dword [ebp - 0x524], 1
mov dword [ebp - 0xaf4], 0xfffffffa
mov dword [ebp - 0x9e8], 0xd529
mov dword [ebp - 0xb14], 7
mov dword [ebp - 0x210], 0
jmp 0x1002bfff
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x1002c018
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x24], 0x23dcdf5e
jmp 0x1002bff2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0xd9c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x24]
cmp ecx, dword [ebp + eax - 0x24]
jle 0x1002c04a
mov dword [ebp - 0xb0c], 1
jmp 0x1002c051
and dword [ebp - 0xb0c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0xda4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x24]
imul ecx, dword [ebp + eax - 0x24]
add ecx, 0x1fe3
jne 0x1002c094
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x1002c094
and dword [ebp - 0x504], 0
jmp 0x1002c09e
mov dword [ebp - 0x504], 1
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x50c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0x50c]
jg 0x1002c0e0
mov dword [ebp - 0x8e4], 1
jmp 0x1002c0e7
and dword [ebp - 0x8e4], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x8e4]
imul eax, eax, 0xa0e4
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
jne 0x1002c11b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
jne 0x1002c11b
and dword [ebp - 0x744], 0
jmp 0x1002c125
mov dword [ebp - 0x744], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp eax, dword [ebp - 0x744]
jl 0x1002c143
mov dword [ebp - 0x51c], 1
jmp 0x1002c14a
and dword [ebp - 0x51c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x51c], eax
jle 0x1002c168
mov dword [ebp - 0x85c], 1
jmp 0x1002c16f
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
add eax, 0x2a773c54
jne 0x1002c189
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x24], 0
je 0x1002c19a
xor eax, eax
inc eax
je 0x1002c19a
mov dword [ebp - 0x9e0], 1
jmp 0x1002c1a1
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x524], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x524]
cmp ecx, dword [ebp + eax - 0x24]
jle 0x1002c1cb
mov dword [ebp - 0x74c], 1
jmp 0x1002c1d2
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x74c], eax
jne 0x1002c1f0
mov dword [ebp - 0x52c], 1
jmp 0x1002c1f7
and dword [ebp - 0x52c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x52c], eax
je 0x1002c212
mov eax, 0x6dfe1602
test eax, eax
jne 0x1002c224
mov eax, 0x8d6db9e
test eax, eax
jne 0x1002c224
and dword [ebp - 0x92c], 0
jmp 0x1002c22e
mov dword [ebp - 0x92c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x92c]
sub ecx, dword [ebp + eax - 0x24]
jne 0x1002c252
cmp dword [ebp - 0x29c], 0
jne 0x1002c252
and dword [ebp - 0x534], 0
jmp 0x1002c25c
mov dword [ebp - 0x534], 1
mov eax, dword [ebp - 0xaf4]
add eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0x9e8]
jne 0x1002c27c
mov dword [ebp - 0x754], 1
jmp 0x1002c283
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x174]
inc eax
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2a4], 0xe7d8a870
mov dword [ebp - 0x218], 0
jmp 0x1002c2c4
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x1002c2e0
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xee4], 0xd7f8
jmp 0x1002c2b7
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1002c2fc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x2a4], 0
jmp 0x1002c315
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jg 0x1002c3d6
mov dword [ebp - 0x220], 0x5b3b9da4
mov dword [ebp - 0x220], 1
jmp 0x1002c345
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jl 0x1002c3b2
mov dword [ebp - 0x2ac], 0
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1002c372
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov dword [ebp - 0x2ac], 0
jmp 0x1002c38b
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jg 0x1002c3b0
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1002c3ae
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
jmp 0x1002c37e
jmp 0x1002c338
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1002c3d1
push 0
push 0xbc1
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
jmp 0x1002c308
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x174]
mov ecx, dword [ebp - 0x44]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x2b4], 1
push 3
lea ecx, [ebp - 0xdd4]
call fcn.1000199f
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x228], 0
jmp 0x1002c422
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x1002c444
push dword [ebp - 0x228]
lea ecx, [ebp - 0xdd4]
call fcn.10001a06
mov dword [eax], 0x4351cdcb
jmp 0x1002c415
mov dword [ebp - 0x2b4], 0xfffffff3
jmp 0x1002c45d
mov eax, dword [ebp - 0x2b4]
dec eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0xffffffed
jl 0x1002c5f3
mov dword [ebp - 0x2c4], 0xf20fe6e3
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1002c493
push 0
push 0xb19
call dword [sym.imp.GDI32.dll_SetBkColor]
mov dword [ebp - 0x53c], 0x59cb
mov dword [ebp - 0x9f0], str.cwij_dkips_vdqhyai_cjg
cmp dword [ebp - 0x53c], 0x5ad5
jle 0x1002c561
and dword [ebp - 0x238], 0
jmp 0x1002c4cd
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x2b3e
jge 0x1002c561
and dword [ebp - 0x230], 0
jmp 0x1002c4f3
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x24ed
jge 0x1002c55c
and dword [ebp - 0x2bc], 0
jmp 0x1002c515
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x1f6e
jge 0x1002c55a
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x2bc]
sar eax, cl
and eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0xaa8], eax
mov dword [ebp - 0xaa4], edx
push dword [ebp - 0xaa4]
push dword [ebp - 0xaa8]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002c508
jmp 0x1002c4e6
jmp 0x1002c4c0
mov dword [ebp - 0x2c4], 0xe
jmp 0x1002c57a
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0xffffffe7
je 0x1002c5a2
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1002c5a0
push 0x62a
call dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x1002c56d
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x53c], 0x566c
jge 0x1002c5c2
mov edx, dword [ebp - 0x9f0]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002c5de
mov dword [ebp - 4], 0xf
jmp 0x1002c5ee
jmp 0x1002c450
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd4]
call fcn.10001a01
jmp 0x1002bb04
mov dword [ebp - 0x60], 0xd2e8588d
mov dword [ebp - 0x4c], 0xd513c61c
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0xbc], 0xd8b3d385
mov dword [ebp - 0x2cc], 0xfffffffd
mov dword [ebp - 0xa00], 0x428827c8
cmp dword [ebp - 0x60], 0x7c7747bb
jg 0x1002c652
mov dword [ebp - 0x864], 1
jmp 0x1002c659
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x864]
jne 0x1002c670
mov dword [ebp - 0x544], 1
jmp 0x1002c677
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x544]
jg 0x1002c694
mov dword [ebp - 0x75c], 1
jmp 0x1002c69b
and dword [ebp - 0x75c], 0
cmp dword [ebp - 0x75c], 0
jle 0x1002c6b0
mov dword [ebp - 0x54c], 1
jmp 0x1002c6b7
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x54c]
jge 0x1002c6ce
mov dword [ebp - 0x8ec], 1
jmp 0x1002c6d5
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 6
jle 0x1002c6ea
mov dword [ebp - 0x554], 1
jmp 0x1002c6f1
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0x3eb905d0
jl 0x1002c709
mov dword [ebp - 0xb00], 1
jmp 0x1002c710
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0x60], 0
jne 0x1002c72b
xor eax, eax
inc eax
je 0x1002c7ec
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp - 0x108]
add eax, 0x72c02a3
cmp eax, 1
jge 0x1002c75d
mov dword [ebp - 0x764], 1
jmp 0x1002c764
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x764]
jle 0x1002c77b
mov dword [ebp - 0x86c], 1
jmp 0x1002c782
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x55c]
cmp dword [ebp - 0x86c], eax
je 0x1002c79c
mov dword [ebp - 0x564], 1
jmp 0x1002c7a3
and dword [ebp - 0x564], 0
cmp dword [ebp - 0x564], 0xc7ba
jg 0x1002c7bb
mov dword [ebp - 0x76c], 1
jmp 0x1002c7c2
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x76c], 0xffffffff
jl 0x1002c7d7
mov dword [ebp - 0x56c], 1
jmp 0x1002c7de
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x4c], eax
jmp 0x1002c993
push 1
lea ecx, [ebp - 0x984]
call fcn.1000199f
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x240], 0
jmp 0x1002c819
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x1002c83b
push dword [ebp - 0x240]
lea ecx, [ebp - 0x984]
call fcn.10001a06
mov dword [eax], 0x9eb8
jmp 0x1002c80c
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xe38], eax
mov esi, dword [ebp - 0x60]
push 0
lea ecx, [ebp - 0x984]
call fcn.10001a06
sub esi, dword [eax]
jne 0x1002c86d
cmp dword [ebp - 0x108], 0
jne 0x1002c86d
and dword [ebp - 0x954], 0
jmp 0x1002c877
mov dword [ebp - 0x954], 1
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x954]
jg 0x1002c891
mov dword [ebp - 0x574], 1
jmp 0x1002c898
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x574], eax
jle 0x1002c8b2
mov dword [ebp - 0x774], 1
jmp 0x1002c8b9
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0x228d
je 0x1002c8d1
mov dword [ebp - 0x9f8], 1
jmp 0x1002c8d8
and dword [ebp - 0x9f8], 0
push 0
lea ecx, [ebp - 0x984]
call fcn.10001a06
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xe40], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xe48], eax
push 0
lea ecx, [ebp - 0x984]
call fcn.10001a06
cmp dword [eax], 0xb407
jge 0x1002c91d
mov dword [ebp - 0x57c], 1
jmp 0x1002c924
and dword [ebp - 0x57c], 0
push 0
lea ecx, [ebp - 0x984]
call fcn.10001a06
mov ecx, dword [ebp - 0x57c]
cmp ecx, dword [eax]
jg 0x1002c947
mov dword [ebp - 0x874], 1
jmp 0x1002c94e
and dword [ebp - 0x874], 0
cmp dword [ebp - 0x874], 0x5678
jg 0x1002c966
mov dword [ebp - 0xb1c], 1
jmp 0x1002c96d
and dword [ebp - 0xb1c], 0
push 0
lea ecx, [ebp - 0x984]
call fcn.10001a06
mov dword [ebp - 0xbc], 0x3db9622c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x984]
call fcn.10001a01
mov dword [ebp - 0x4c], 0xc1f4b9ef
cmp dword [ebp - 0x4c], 0
je 0x1002ca85
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x108]
jne 0x1002c9c7
cmp dword [ebp - 0x60], 0
jne 0x1002c9c7
and dword [ebp - 0x584], 0
jmp 0x1002c9d1
mov dword [ebp - 0x584], 1
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x584]
cmp eax, 0x7e55
jge 0x1002c9ee
mov dword [ebp - 0x77c], 1
jmp 0x1002c9f5
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x77c], eax
jne 0x1002ca0f
mov dword [ebp - 0x58c], 1
jmp 0x1002ca16
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0xc28d
jne 0x1002ca2e
mov dword [ebp - 0x8f4], 1
jmp 0x1002ca35
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0xfffffffb
ja 0x1002ca4a
mov dword [ebp - 0x594], 1
jmp 0x1002ca51
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x594], eax
jg 0x1002ca6b
mov dword [ebp - 0x784], 1
jmp 0x1002ca72
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x784]
je 0x1002ca81
cmp dword [ebp - 0x4c], 0
cmp dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xe50], eax
mov dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x4c]
neg eax
imul eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x2cc]
add ecx, eax
add ecx, dword [ebp - 0xbc]
je 0x1002cac9
cmp dword [ebp - 0x2cc], 0
je 0x1002cac9
mov dword [ebp - 0x59c], 1
jmp 0x1002cad0
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2d4]
movzx eax, byte [ebp + eax - 0x176]
movzx eax, word [ebp + eax*2 - 0xc5c]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x173]
and ecx, eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2d4]
movzx eax, byte [ebp + eax - 0x176]
movzx eax, word [ebp + eax*2 - 0xc5c]
mov edx, dword [ebp - 0x44]
movzx edx, byte [ebp + edx - 0x173]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x44]
movzx eax, byte [ebp + eax - 0x174]
mov word [ebp + eax*2 - 0xc5c], dx
mov dword [ebp - 0xbb4], 0
mov dword [ebp - 0xbb0], 0
mov dword [ebp - 0xbac], 0
mov dword [ebp - 0xba8], 0
mov dword [ebp - 0x248], 0
jmp 0x1002cb7e
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x1002cb9a
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xf50], 6
jmp 0x1002cb71
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbb4], 0
jmp 0x1002cbc8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbb4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xbb4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbb4], 2
jg 0x1002cc0c
mov dword [ebp - 0xb24], 0xfffa
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1002cbff
push 0x233c
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
cmp dword [ebp - 0xb24], 0
je 0x1002cc0a
jmp 0x1002cc0c
jmp 0x1002cbad
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1002cc2b
push 0
push 0x822
call dword [sym.imp.USER32.dll_SetWindowTextA]
and dword [ebp - 0x2d4], 0
jmp 0x1002bb04
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x88c], 0x954e
mov dword [ebp - 0x89c], 0xfffffffc
mov dword [ebp - 0x250], 0
jmp 0x1002cc6b
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x1002cc87
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xc04], 1
jmp 0x1002cc5e
mov dword [ebp - 0x74], 0x13
jmp 0x1002cc97
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x19
jg 0x1002d650
mov dword [ebp - 0xf8], 0xae7bf199
mov dword [ebp - 0x130], 0x8edf97ef
mov dword [ebp - 0xa20], 0xffffffff
mov dword [ebp - 0x7cc], 0xea342190
mov dword [ebp - 0x7c4], 0x8b70e9af
cmp dword [ebp - 0x74], 0
je 0x1002d4e7
mov dword [ebp - 0x90], 0xc90a35f3
mov dword [ebp - 0x50], 1
push 1
lea ecx, [ebp - 0x3e8]
call fcn.1000199f
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x3a8], 0xfffffffe
mov dword [ebp - 0x2dc], 0
jmp 0x1002cd25
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x1002cd47
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov dword [eax], 0xd1532d49
jmp 0x1002cd18
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1002cd5f
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x90], 0x12
jmp 0x1002cd78
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfffffff0
jne 0x1002d4d3
mov dword [ebp - 0x87c], 0x737f
mov dword [ebp - 0xb60], str.wptwgwxd_fahjn_rpftvyw_litqhiipn_gkqm_cvfokkho_gdiuveq_gerrvflnv
cmp dword [ebp - 0x87c], 0x755e
jle 0x1002cec8
push 0x1664
push 0x196d
push 0x88f
call dword [sym.imp.USER32.dll_SetWindowLongA]
and dword [ebp - 0x260], 0
jmp 0x1002cdd4
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x57dc
jge 0x1002cec8
and dword [ebp - 0x2ec], 0
jmp 0x1002cdfa
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x3bb8
jge 0x1002cec3
and dword [ebp - 0x258], 0
jmp 0x1002ce20
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x3215
jge 0x1002cebe
and dword [ebp - 0x2e4], 0
jmp 0x1002ce46
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x2bdc
jge 0x1002ceb9
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x2e4]
mov edx, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x2ec]
sar edx, cl
and eax, edx
cdq
mov dword [ebp - 0xab4], eax
mov dword [ebp - 0xab0], edx
push dword [ebp - 0xab0]
push dword [ebp - 0xab4]
lea ecx, [ebp - 0xf2c]
call fcn.100025b7
pop ecx
pop ecx
mov dword [ebp - 0xa08], eax
mov ecx, dword [ebp - 0xa08]
call fcn.1000704b
push eax
call fcn.1004b05d
pop ecx
lea ecx, [ebp - 0xf2c]
call fcn.10007041
jmp 0x1002ce39
jmp 0x1002ce13
jmp 0x1002cded
jmp 0x1002cdc7
mov dword [ebp - 0x5cc], 5
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x87c], 0x6fff
jge 0x1002ceee
push dword [ebp - 0xb60]
call fcn.1004b05d
pop ecx
jmp 0x1002cf0a
mov dword [ebp - 4], 0x13
jmp 0x1002cf1a
mov dword [ebp - 0x360], 1
mov dword [ebp - 0xb18], 1
mov dword [ebp - 0xe58], 0x41cee389
mov dword [ebp - 0xa28], 0xc1e2a2d6
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 0x974], 0x2fd3
mov dword [ebp - 0xa10], str.iqxfx_fyvvsfl_ctsx_egxrvwre_aqfrzpuwz_ylucbh_zzti_fdlin_bogjahfl_fitwllzw_vmi_fuwm
cmp dword [ebp - 0x974], 0x31f6
jle 0x1002d04c
and dword [ebp - 0x270], 0
jmp 0x1002cf86
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x3788
jge 0x1002d04c
and dword [ebp - 0x2fc], 0
jmp 0x1002cfac
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x5664
jge 0x1002d047
and dword [ebp - 0x268], 0
jmp 0x1002cfd2
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x4354
jge 0x1002d042
and dword [ebp - 0x2f4], 0
jmp 0x1002cff4
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 0x696a
jge 0x1002d040
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x2f4]
mov ecx, dword [ebp - 0x270]
imul ecx, dword [ebp - 0x2fc]
xor eax, ecx
cdq
mov dword [ebp - 0xac0], eax
mov dword [ebp - 0xabc], edx
push dword [ebp - 0xabc]
push dword [ebp - 0xac0]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002cfe7
jmp 0x1002cfc5
jmp 0x1002cf9f
jmp 0x1002cf79
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x95d7
jl 0x1002d06a
mov dword [ebp - 0x5a4], 1
jmp 0x1002d071
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0x36fc75df
jne 0x1002d089
mov dword [ebp - 0x78c], 1
jmp 0x1002d090
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
sub eax, 0xf71d
cmp dword [ebp - 0x5cc], eax
jne 0x1002d0af
mov dword [ebp - 0x5ac], 1
jmp 0x1002d0b6
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
sub eax, dword [ebp - 0x74]
cmp eax, 0xf1ba
jl 0x1002d0d2
mov dword [ebp - 0x934], 1
jmp 0x1002d0d9
and dword [ebp - 0x934], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov ecx, dword [ebp - 0x934]
cmp ecx, dword [eax]
jl 0x1002d0fc
mov dword [ebp - 0x5b4], 1
jmp 0x1002d103
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x5b4]
mov ecx, dword [ebp - 0xf8]
imul ecx, eax
test ecx, ecx
je 0x1002d131
cmp dword [ebp - 0xf8], 0
je 0x1002d131
mov dword [ebp - 0x794], 1
jmp 0x1002d138
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x794], eax
jge 0x1002d153
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x1002d153
and dword [ebp - 0x5bc], 0
jmp 0x1002d15d
mov dword [ebp - 0x5bc], 1
mov eax, dword [ebp - 0x5bc]
neg eax
cmp eax, 0xffa9
jle 0x1002d178
mov dword [ebp - 0x884], 1
jmp 0x1002d17f
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x360], eax
mov esi, dword [ebp - 0x90]
mov edi, dword [ebp - 0x360]
push 0
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
sub edi, dword [eax]
cmp edi, esi
jl 0x1002d1b6
mov dword [ebp - 0x5c4], 1
jmp 0x1002d1bd
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x88c]
cmp eax, dword [ebp - 0x5c4]
je 0x1002d1d7
mov dword [ebp - 0x79c], 1
jmp 0x1002d1de
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x79c], eax
jg 0x1002d1f5
mov dword [ebp - 0x8fc], 1
jmp 0x1002d1fc
and dword [ebp - 0x8fc], 0
mov esi, dword [ebp - 0x5cc]
imul esi, dword [ebp - 0x8fc]
push 0
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
cmp esi, dword [eax]
jl 0x1002d226
mov dword [ebp - 0x5d4], 1
jmp 0x1002d22d
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x5d4], eax
jne 0x1002d247
mov dword [ebp - 0x7a4], 1
jmp 0x1002d24e
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 0xc1ed5297
jb 0x1002d266
mov dword [ebp - 0x5dc], 1
jmp 0x1002d26d
and dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x5dc], 0xfffffff7
jge 0x1002d282
mov dword [ebp - 0x5e4], 1
jmp 0x1002d289
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x88c]
cmp dword [ebp - 0x5e4], eax
je 0x1002d2a3
mov dword [ebp - 0x7ac], 1
jmp 0x1002d2aa
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x7ac]
add eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xf8]
je 0x1002d2c8
cmp dword [ebp - 0x74], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0xf8]
jl 0x1002d2e2
mov dword [ebp - 0x5ec], 1
jmp 0x1002d2e9
and dword [ebp - 0x5ec], 0
push 0
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov ecx, dword [ebp - 0x5ec]
mov dword [eax], ecx
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x974], 0x2ca1
jge 0x1002d31e
mov edx, dword [ebp - 0xa10]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002d33a
mov dword [ebp - 4], 0x13
jmp 0x1002d34a
mov dword [ebp - 0x50], 0
jmp 0x1002d35a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x1002d4ce
mov dword [ebp - 0xe60], 0xffffffff
mov dword [ebp - 0xc30], 0x4e0f8cca
mov dword [ebp - 0xc2c], 0x4e0f8cca
mov dword [ebp - 0xc28], 0x4e0f8cca
mov dword [ebp - 0xc24], 0x4e0f8cca
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov esi, eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
mov dword [ebp - 0xe7c], eax
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
imul eax, dword [ebp - 0x278], 0x40a4
cmp eax, dword [ebp - 0x3a8]
jge 0x1002d3ff
cmp dword [ebp - 0x89c], 0
cmp dword [ebp - 0x360], 0xa3ecb10b
je 0x1002d417
mov dword [ebp - 0xb10], 1
jmp 0x1002d41e
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xa18], eax
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3e8]
call fcn.10001a06
mov ecx, dword [ebp - 0xa18]
mov dword [eax], ecx
mov eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x50]
jl 0x1002d45a
mov eax, 0x3f95
test eax, eax
jne 0x1002d45a
and dword [ebp - 0xbbc], 0
jmp 0x1002d464
mov dword [ebp - 0xbbc], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc30], 2
jg 0x1002d480
mov dword [ebp - 0x5f4], 1
jmp 0x1002d487
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0xa20]
add eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0xb18]
jle 0x1002d4b3
mov dword [ebp - 0x7b4], 1
jmp 0x1002d4ba
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
add eax, 9
mov dword [ebp - 0xa28], eax
jmp 0x1002d353
jmp 0x1002cd6b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3e8]
call fcn.10001a01
jmp 0x1002d64b
mov dword [ebp - 0x614], 1
mov dword [ebp - 0x5fc], 0x1f2bddc7
mov dword [ebp - 0x60c], 0
cmp dword [ebp - 0x7cc], 0
je 0x1002d523
cmp dword [ebp - 0x5fc], 0
je 0x1002d523
mov dword [ebp - 0x904], 1
jmp 0x1002d52a
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x5fc]
jl 0x1002d541
mov dword [ebp - 0x894], 1
jmp 0x1002d548
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x7c4]
cmp dword [ebp - 0x894], eax
jg 0x1002d562
mov dword [ebp - 0x604], 1
jmp 0x1002d569
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 0xffffffff
jne 0x1002d57e
mov dword [ebp - 0x7bc], 1
jmp 0x1002d585
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x904], eax
jne 0x1002d5ab
mov dword [ebp - 0xb68], 1
jmp 0x1002d5b2
and dword [ebp - 0xb68], 0
mov dword [ebp - 0x614], 0xf68c
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0x7c4], 0
je 0x1002d5de
xor eax, eax
jne 0x1002d5de
and dword [ebp - 0x61c], 0
jmp 0x1002d5e8
mov dword [ebp - 0x61c], 1
cmp dword [ebp - 0x61c], 1
jbe 0x1002d5fd
mov dword [ebp - 0x624], 1
jmp 0x1002d604
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x89c]
add eax, dword [ebp - 0x624]
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x130], 0
jmp 0x1002d62f
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1002d64b
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0xc04], 0xa621c2df
jmp 0x1002d622
jmp 0x1002cc90
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xc5c], cx
mov dword [ebp - 0x38], 0x9a924c00
mov dword [ebp - 0x118], 0xbe26b5cf
push 3
lea ecx, [ebp - 0x404]
call fcn.1000199f
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x31c], 0xbe2ff5ff
mov dword [ebp - 0x80], 0x9c821f9
mov dword [ebp - 0x368], 0x16da
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x3a4], 0x4840c2c6
mov dword [ebp - 0x304], 0
jmp 0x1002d6cd
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x1002d6ef
push dword [ebp - 0x304]
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov dword [eax], 0x638299fa
jmp 0x1002d6c0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jl 0x1002d718
mov dword [ebp - 0x62c], 1
jmp 0x1002d71f
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x62c], eax
jl 0x1002d739
cmp dword [ebp - 0x38], 0
jne 0x1002d739
and dword [ebp - 0x908], 0
jmp 0x1002d743
mov dword [ebp - 0x908], 1
cmp dword [ebp - 0x908], 0xe3d97867
ja 0x1002d75b
mov dword [ebp - 0x634], 1
jmp 0x1002d762
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x7d4], eax
push 1
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov ecx, dword [ebp - 0x7d4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x7d4]
sub eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jle 0x1002d7a9
mov dword [ebp - 0x63c], 1
jmp 0x1002d7b0
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x9c79ebef
je 0x1002d7ca
xor eax, eax
inc eax
jne 0x1002d7ca
and dword [ebp - 0xa30], 0
jmp 0x1002d7d4
mov dword [ebp - 0xa30], 1
push 0
lea ecx, [ebp - 0x404]
call fcn.10001a06
cmp dword [eax], 0x93d7f28
je 0x1002d7f5
mov dword [ebp - 0x8a4], 1
jmp 0x1002d7fc
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0x38]
jl 0x1002d81f
mov dword [ebp - 0x644], 1
jmp 0x1002d826
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0x298c
jg 0x1002d83e
mov dword [ebp - 0x7dc], 1
jmp 0x1002d845
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
add eax, 0x525c
cmp eax, dword [ebp - 0x38]
jge 0x1002d861
mov dword [ebp - 0x64c], 1
jmp 0x1002d868
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x64c], eax
jl 0x1002d87a
cmp dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x80]
jne 0x1002d891
mov dword [ebp - 0x910], 1
jmp 0x1002d898
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x368]
cmp dword [ebp - 0x910], eax
jg 0x1002d8b2
mov dword [ebp - 0x654], 1
jmp 0x1002d8b9
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
shl eax, 2
test eax, eax
je 0x1002d8e1
cmp dword [ebp - 0x368], 0
je 0x1002d8e1
mov dword [ebp - 0x7e4], 1
jmp 0x1002d8e8
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x7e4]
cmp eax, dword [ebp - 0x38]
jge 0x1002d902
mov dword [ebp - 0x65c], 1
jmp 0x1002d909
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x368]
jne 0x1002d92f
mov dword [ebp - 0x8ac], 1
jmp 0x1002d936
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x3a4], eax
mov dword [ebp - 0x80], 0xf
jmp 0x1002d952
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xfffffff6
jne 0x1002dcf7
mov dword [ebp - 0x2c], 0x4a3a
mov dword [ebp - 0x664], 0x5ad7
mov dword [ebp - 0xb20], str.kmjldfpkg_aligxims_wopsc_hgpgroe_yvivmkd_qxzxvlab_igfzni_nblpg_ryilm_zszu
cmp dword [ebp - 0x664], 0x5e60
jle 0x1002da74
push 0
push 0x20dc
push 0x25a9
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
and dword [ebp - 0x280], 0
jmp 0x1002d9af
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x72ae
jge 0x1002da74
and dword [ebp - 0x30c], 0
jmp 0x1002d9d5
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x79d6
jge 0x1002da6f
and dword [ebp - 0x288], 0
jmp 0x1002d9fb
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x6f84
jge 0x1002da6a
and dword [ebp - 0x314], 0
jmp 0x1002da1d
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x21ba
jge 0x1002da68
mov eax, dword [ebp - 0x280]
sub eax, dword [ebp - 0x30c]
mov ecx, dword [ebp - 0x288]
sar eax, cl
xor eax, dword [ebp - 0x314]
cdq
mov dword [ebp - 0xacc], eax
mov dword [ebp - 0xac8], edx
push dword [ebp - 0xac8]
push dword [ebp - 0xacc]
mov ecx, 0x1007bf98
call fcn.10007154
jmp 0x1002da10
jmp 0x1002d9ee
jmp 0x1002d9c8
jmp 0x1002d9a2
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x664], 0x57be
jge 0x1002da94
mov edx, dword [ebp - 0xb20]
mov ecx, 0x1007bf98
call fcn.1000a079
jmp 0x1002dab0
mov dword [ebp - 4], 0x18
jmp 0x1002dac0
mov dword [ebp - 0x290], 0
jmp 0x1002dad9
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x1002daf5
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xedc], 0x6f18880a
jmp 0x1002dacc
mov eax, 0x7e8b7dd1
test eax, eax
je 0x1002dc3e
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3a4]
test eax, eax
jne 0x1002db29
push 3
pop eax
test eax, eax
jne 0x1002db29
and dword [ebp - 0x7ec], 0
jmp 0x1002db33
mov dword [ebp - 0x7ec], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x7ec], eax
je 0x1002db4a
mov dword [ebp - 0xa38], 1
jmp 0x1002db51
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xe78], eax
push 2
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0xc74], eax
cmp dword [ebp - 0x31c], 4
ja 0x1002db85
mov dword [ebp - 0x66c], 1
jmp 0x1002db8c
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x66c]
imul eax, dword [ebp - 0x2c]
test eax, eax
jne 0x1002dba7
cmp dword [ebp - 0x3a4], 0
je 0x1002dbb9
cmp dword [ebp - 0x2c], 0
je 0x1002dbb9
mov dword [ebp - 0x93c], 1
jmp 0x1002dbc0
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x93c]
imul eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jne 0x1002dbe2
cmp dword [ebp - 0x2c], 0
jne 0x1002dbe2
and dword [ebp - 0x674], 0
jmp 0x1002dbec
mov dword [ebp - 0x674], 1
push 2
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov ecx, dword [ebp - 0x674]
cmp ecx, dword [eax]
jg 0x1002dc0f
mov dword [ebp - 0x7f4], 1
jmp 0x1002dc16
and dword [ebp - 0x7f4], 0
push 2
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov ecx, dword [ebp - 0x7f4]
mov dword [eax], ecx
mov dword [ebp - 0x118], 0x34ceb039
cmp dword [ebp - 0x118], 0
jne 0x1002dc59
push 1
lea ecx, [ebp - 0x404]
call fcn.10001a06
cmp dword [eax], 0
jne 0x1002dc59
and dword [ebp - 0x67c], 0
jmp 0x1002dc63
mov dword [ebp - 0x67c], 1
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x67c]
test eax, eax
jne 0x1002dc83
cmp dword [ebp - 0x298], 0
jne 0x1002dc83
and dword [ebp - 0x8b4], 0
jmp 0x1002dc8d
mov dword [ebp - 0x8b4], 1
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x298], eax
jl 0x1002dcab
mov dword [ebp - 0x684], 1
jmp 0x1002dcb2
and dword [ebp - 0x684], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x684]
mov dword [ebp + eax - 0xedc], ecx
mov dword [ebp - 0x2c], 0
jmp 0x1002dcd5
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffb
jne 0x1002dcf2
push 0
lea ecx, [ebp - 0x404]
call fcn.10001a06
mov eax, dword [eax]
mov dword [ebp - 0x118], eax
jmp 0x1002dcce
jmp 0x1002d94b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x404]
call fcn.10001a01
lea eax, [ebp - 0xc5c]
push eax
lea ecx, [ebp - 0xf44]
call fcn.100072a4
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0xa40], eax
mov dword [ebp - 4], 0x1b
push dword [ebp - 0xa40]
call fcn.10026722
pop ecx
mov dword [ebp - 0x7f0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf44]
call fcn.100072ee
mov dword [ebp - 0x54], 0x3580
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x100], 0xfffffffd
mov dword [ebp - 0x158], 3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x30]
je 0x1002dd97
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
je 0x1002dd97
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jne 0x1002dda6
cmp dword [ebp - 0x54], 0
jne 0x1002dda6
and dword [ebp - 0x7fc], 0
jmp 0x1002ddb0
mov dword [ebp - 0x7fc], 1
mov eax, dword [ebp - 0x7fc]
sub eax, 0x2ae7
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xc60], eax
mov eax, 0xe3b3
cmp eax, 0x5838
jge 0x1002dde5
mov dword [ebp - 0x68c], 1
jmp 0x1002ddec
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x158], 0
jmp 0x1002de11
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffeb
jg 0x1002df69
push 4
lea ecx, [ebp - 0xc20]
call fcn.1000199f
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x324], 0
jmp 0x1002de4b
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 4
jge 0x1002de6d
push dword [ebp - 0x324]
lea ecx, [ebp - 0xc20]
call fcn.10001a06
mov dword [eax], 9
jmp 0x1002de3e
mov dword [ebp - 0x54], 0
jmp 0x1002de7d
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x2b
jge 0x1002de9f
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1002de9d
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp 0x1002de76
mov dword [ebp - 0x100], 0
jmp 0x1002deb8
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x1002df55
mov dword [ebp - 0x30], 3
jmp 0x1002ded5
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002def1
mov dword [ebp - 0xb28], 0xfffffff9
mov dword [ebp - 0xb28], 1
jmp 0x1002dece
mov dword [ebp - 0x54], 0
jmp 0x1002df01
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1002df50
mov dword [ebp - 0x30], 0
jmp 0x1002df17
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1002df4e
push dword [ebp - 0x30]
lea ecx, [ebp - 0xc20]
call fcn.10001a06
cmp dword [eax], 0
je 0x1002df32
jmp 0x1002df4e
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1002df4c
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x1002df10
jmp 0x1002defa
jmp 0x1002deab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc20]
call fcn.10001a01
jmp 0x1002de04
and dword [ebp - 0x2a8], 0
jmp 0x1002df7f
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xd
jae 0x1002e13f
push 3
lea ecx, [ebp - 0xdf4]
call fcn.1000199f
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x32c], 0xfffffff8
mov dword [ebp - 0xc7c], 0x2bbef7d6
mov dword [ebp - 0xe08], 0x4888999d
mov dword [ebp - 0xc84], 0xeb32a831
push 1
lea ecx, [ebp - 0xde4]
call fcn.1000199f
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0xd80], 0
mov dword [ebp - 0x84], 0
jmp 0x1002dffc
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1002e01e
push dword [ebp - 0x84]
lea ecx, [ebp - 0xdf4]
call fcn.10001a06
mov dword [eax], 6
jmp 0x1002dfef
mov dword [ebp - 0x84], 0
jmp 0x1002e037
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1002e059
push dword [ebp - 0x84]
lea ecx, [ebp - 0xde4]
call fcn.10001a06
mov dword [eax], 0xfffffff6
jmp 0x1002e02a
mov dword [ebp - 0x32c], 0
jmp 0x1002e072
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 2
jg 0x1002e10c
mov dword [ebp - 0xc8c], 0
mov dword [ebp - 0xe4c], 0x6801fc3e
mov dword [ebp - 0xc94], 0xffffffff
mov dword [ebp - 0xd88], 0
mov dword [ebp - 0xc9c], 1
mov dword [ebp - 0xe18], 0
mov dword [ebp - 0x914], 0xf2f37fc0
mov dword [ebp - 0x330], 0
jmp 0x1002e0de
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 4
jge 0x1002e0fa
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xf78], 0xd4a55f07
jmp 0x1002e0d1
mov eax, dword [ebp - 0x914]
dec eax
mov dword [ebp - 0x914], eax
jmp 0x1002e065
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xde4]
call fcn.10001a01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf4]
call fcn.10001a01
xor eax, eax
mov ecx, dword [ebp - 0x2a8]
mov word [ebp + ecx*2 - 0xc5c], ax
jmp 0x1002df72
mov dword [ebp - 0x2f8], 8
mov dword [ebp - 0x2f8], 0xfffffff9
jmp 0x1002e162
mov eax, dword [ebp - 0x2f8]
dec eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0xfffffff7
je 0x1002e22a
mov dword [ebp - 0xc40], 0x13a4
mov dword [ebp - 0xc3c], 0x13a4
mov dword [ebp - 0xc38], 0x13a4
mov dword [ebp - 0xc34], 0x13a4
mov dword [ebp - 0x138], 0xea983111
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x1002e1f0
push 0xaa6
push 0x1076
push 0xd33
push 0x2254
push 0x24e1
push 0x2311
push 0x1475
push 0x14f5
push 0xccb
push 0x1f6f
push 0x198a
call dword [sym.imp.GDI32.dll_StretchBlt]
mov dword [ebp - 0x138], 0
jmp 0x1002e209
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 4
jge 0x1002e225
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xc40], 0x8ab6
jmp 0x1002e1fc
jmp 0x1002e155
cmp dword [ebp - 0x7f0], 0
je 0x10030caf
push 1
lea ecx, [ebp - 0x3c8]
call fcn.1000199f
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x68], 0xb4ffb87
mov dword [ebp - 0x6a4], 0xffffffff
mov dword [ebp - 0x2b0], 0
jmp 0x1002e275
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x1002e297
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov dword [eax], 8
jmp 0x1002e268
mov dword [ebp - 0x68], 0
jmp 0x1002e2a7
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jg 0x1002e47c
mov dword [ebp - 0x964], 0xedcad208
mov dword [ebp - 0xb70], 0xfffffff6
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov esi, dword [eax]
sub esi, 0xfffd
neg esi
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
cmp esi, dword [eax]
jl 0x1002e2fa
mov dword [ebp - 0x694], 1
jmp 0x1002e301
and dword [ebp - 0x694], 0
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov ecx, dword [ebp - 0x694]
cmp ecx, dword [eax]
jne 0x1002e324
mov dword [ebp - 0x804], 1
jmp 0x1002e32b
and dword [ebp - 0x804], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov ecx, dword [ebp - 0x804]
cmp ecx, dword [eax]
je 0x1002e34f
mov dword [ebp - 0x69c], 1
jmp 0x1002e356
and dword [ebp - 0x69c], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov ecx, dword [ebp - 0x69c]
cmp ecx, dword [eax]
jl 0x1002e37a
mov dword [ebp - 0x8bc], 1
jmp 0x1002e381
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x6a4], eax
cmp dword [ebp - 0x6a4], 0xfffc
jb 0x1002e3a5
mov dword [ebp - 0x80c], 1
jmp 0x1002e3ac
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 0xffffffff
jae 0x1002e3c7
mov eax, 0xc8ddac0f
test eax, eax
jne 0x1002e3c7
and dword [ebp - 0xa48], 0
jmp 0x1002e3d1
mov dword [ebp - 0xa48], 1
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
push 0
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov esi, eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x1002e40e
mov dword [ebp - 0x6ac], 1
jmp 0x1002e415
and dword [ebp - 0x6ac], 0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x3c8]
call fcn.10001a06
mov ecx, dword [ebp - 0x6ac]
cmp ecx, dword [eax]
jge 0x1002e439
mov dword [ebp - 0x6b4], 1
jmp 0x1002e440
and dword [ebp - 0x6b4], 0
mov dword [ebp - 0x964], 0xe6da504
mov eax, dword [ebp - 0x964]
cmp eax, dword [ebp - 0x6b4]
jne 0x1002e464
mov dword [ebp - 0x814], 1
jmp 0x1002e46b
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0xb70], eax
jmp 0x1002e2a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c8]
call fcn.10001a01
mov dword [ebp - 0x110], 1
mov dword [ebp - 0xca4], 1
mov dword [ebp - 0xd90], 0xcfd66c4a
mov dword [ebp - 0x6bc], 0xffffffff
mov dword [ebp - 0xa50], 0xfffffffc
mov dword [ebp - 0xb30], 0xffffffff
mov dword [ebp - 0x6bc], 1
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x6bc]
jle 0x1002e4f4
mov eax, 0x6d8bc0d1
test eax, eax
je 0x1002e4f4
mov dword [ebp - 0x8c4], 1
jmp 0x1002e4fb
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x8c4], eax
jg 0x1002e526
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002e521
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
jmp 0x1002e5a8
mov dword [ebp - 0x81c], 0xfffffffd
mov dword [ebp - 0x110], 0
jmp 0x1002e549
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 8
jge 0x1002e59c
cmp dword [ebp - 0x81c], 0x80f8
jg 0x1002e56a
mov dword [ebp - 0x408], 1
jmp 0x1002e571
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xa50], eax
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1002e59a
push 0x1e76
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x1002e53c
mov eax, dword [ebp - 0xb30]
mov dword [ebp - 0x81c], eax
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1002e5d0
push 0
push 0
push 0x17d2
push 0x41
push 0x844
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov byte [ebp - 0x194], 3
mov byte [ebp - 0x193], 0xe5
mov byte [ebp - 0x192], 8
mov byte [ebp - 0x191], 0x34
mov byte [ebp - 0x190], 0
mov byte [ebp - 0x18f], 0x23
mov byte [ebp - 0x18e], 1
mov byte [ebp - 0x18d], 0x22
mov byte [ebp - 0x18c], 1
mov byte [ebp - 0x18b], 0x2f
mov byte [ebp - 0x18a], 7
mov byte [ebp - 0x189], 0x24
mov byte [ebp - 0x188], 0xa
mov byte [ebp - 0x187], 0x33
mov byte [ebp - 0x186], 0xb
mov byte [ebp - 0x185], 0x17
mov byte [ebp - 0x184], 4
mov byte [ebp - 0x183], 0x17
mov byte [ebp - 0x182], 5
mov byte [ebp - 0x181], 0x1d
mov byte [ebp - 0x180], 0xc
mov byte [ebp - 0x17f], 0x1c
mov byte [ebp - 0x17e], 9
mov byte [ebp - 0x17d], 0x17
mov byte [ebp - 0x17c], 0xd
mov byte [ebp - 0x17b], 0x17
mov byte [ebp - 0x17a], 6
mov byte [ebp - 0x179], 0x10
mov byte [ebp - 0x178], 2
mov byte [ebp - 0x177], 0x17
mov dword [ebp - 0xa58], 0xfe57f6cc
mov dword [ebp - 0x94], 0
jmp 0x1002e6c5
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1002e6e1
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x990], 0xffffffff
jmp 0x1002e6b8
mov dword [ebp - 0x94], 0
jmp 0x1002e6fa
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x1002e716
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xbfc], 0x47d2038e
jmp 0x1002e6ed
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x990]
mov dword [ebp - 0xcac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x990], 0
jne 0x1002e750
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x990], 0
jne 0x1002e750
and dword [ebp - 0x6cc], 0
jmp 0x1002e75a
mov dword [ebp - 0x6cc], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6cc]
sub ecx, dword [ebp + eax - 0x990]
je 0x1002e798
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x990], 0
je 0x1002e798
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x990], 0
je 0x1002e798
mov dword [ebp - 0x91c], 1
jmp 0x1002e79f
and dword [ebp - 0x91c], 0
cmp dword [ebp - 0x91c], 0
jne 0x1002e7c1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x990], 0
jne 0x1002e7c1
and dword [ebp - 0x6d4], 0
jmp 0x1002e7cb
mov dword [ebp - 0x6d4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6d4]
sub ecx, dword [ebp + eax - 0xbfc]
jne 0x1002e7f2
mov eax, 0xfffd
test eax, eax
jne 0x1002e7f2
and dword [ebp - 0x824], 0
jmp 0x1002e7fc
mov dword [ebp - 0x824], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbfc]
cmp dword [ebp - 0x824], eax
je 0x1002e81d
mov dword [ebp - 0x6dc], 1
jmp 0x1002e824
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0xa58], eax
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1002e84c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x194]
and eax, 0xb5
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x194]
or ecx, 0xb5
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x194]
mov byte [ebp + eax - 0xbd4], cl
push 1
lea ecx, [ebp - 0x34c]
call fcn.1000199f
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x320], 0
jmp 0x1002e8be
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 1
jge 0x1002e8e0
push dword [ebp - 0x320]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov dword [eax], 0x1713b910
jmp 0x1002e8b1
mov dword [ebp - 0x20], 0
jmp 0x1002e8f0
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1002ed2b
push 2
lea ecx, [ebp - 0xb8c]
call fcn.1000199f
mov byte [ebp - 4], 0x21
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xba4], 0xfffffffc
mov dword [ebp - 0x2b8], 0
jmp 0x1002e938
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 2
jge 0x1002e95a
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0xb8c]
call fcn.10001a06
mov dword [eax], 0xfffffffb
jmp 0x1002e92b
or eax, 0xffffffff
je 0x1002e97e
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
cmp dword [eax], 0
je 0x1002e97e
mov dword [ebp - 0x8cc], 1
jmp 0x1002e985
and dword [ebp - 0x8cc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ecx, dword [ebp - 0x8cc]
cmp ecx, dword [eax]
jne 0x1002e9a9
mov dword [ebp - 0x6e4], 1
jmp 0x1002e9b0
and dword [ebp - 0x6e4], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6e4]
jle 0x1002e9d4
mov dword [ebp - 0x370], 1
jmp 0x1002e9db
and dword [ebp - 0x370], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ecx, dword [ebp - 0x370]
mov dword [eax], ecx
cmp dword [ebp - 0x370], 0
jne 0x1002ea3a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov dword [ebp - 0x82c], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ecx, dword [ebp - 0x82c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x82c]
cmp dword [eax], 0
jne 0x1002ea3a
and dword [ebp - 0x6ec], 0
jmp 0x1002ea44
mov dword [ebp - 0x6ec], 1
mov esi, dword [ebp - 0x20]
imul edi, dword [ebp - 0x6ec], 0xe03
push 0
lea ecx, [ebp - 0xb8c]
call fcn.10001a06
add edi, dword [eax]
cmp edi, esi
jge 0x1002ea70
mov dword [ebp - 0x944], 1
jmp 0x1002ea77
and dword [ebp - 0x944], 0
push 1
lea ecx, [ebp - 0xb8c]
call fcn.10001a06
mov ecx, dword [ebp - 0x944]
mov dword [eax], ecx
mov dword [ebp - 0xec], 0
jmp 0x1002eaa5
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffff1
jne 0x1002ed17
mov dword [ebp - 0xf4], 0xa83afd4
mov dword [ebp - 0x924], 0x618de0f4
mov dword [ebp - 0x8d4], 7
cmp dword [ebp - 0xec], 0
jge 0x1002ebe5
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xe64], eax
push 0
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xcb4], eax
mov esi, dword [ebp - 0x20]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov edi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ebx, dword [eax]
add ebx, dword [edi]
imul ebx, esi
push 0
lea ecx, [ebp - 0xb8c]
call fcn.10001a06
cmp dword [eax], ebx
jge 0x1002eb57
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
cmp dword [eax], 0
jne 0x1002eb57
and dword [ebp - 0x6f4], 0
jmp 0x1002eb61
mov dword [ebp - 0x6f4], 1
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax]
jle 0x1002eb8e
cmp dword [ebp - 0xf4], 0
je 0x1002eb8e
mov dword [ebp - 0x834], 1
jmp 0x1002eb95
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0xba4]
imul eax, dword [ebp - 0x834]
cmp eax, dword [ebp - 0x924]
jl 0x1002ebb6
mov dword [ebp - 0x3bc], 1
jmp 0x1002ebbd
and dword [ebp - 0x3bc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x34c]
call fcn.10001a06
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
cmp dword [ebp - 0x3bc], 0
jne 0x1002ebe5
and dword [ebp - 0x6fc], 0
jmp 0x1002ebef
mov dword [ebp - 0x6fc], 1
cmp dword [ebp - 0x6fc], 0xe9d070fe
jbe 0x1002ec1a
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x1002ec15
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
jmp 0x1002ed12
mov dword [ebp - 0x150], 0xfffffff9
mov dword [ebp - 0xf4], 0
jmp 0x1002ec3d
cmp dword [ebp - 0xf4], 0xfffffffa
je 0x1002ec53
cmp dword [ebp - 0x150], 0
je 0x1002ec51
jmp 0x1002ec53
jmp 0x1002ec30
mov dword [ebp - 0x150], 0
jmp 0x1002ec6c
cmp dword [ebp - 0x150], 0xfffffff7
jl 0x1002ed12
jmp 0x1002ea98
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xb8c]
call fcn.10001a01
jmp 0x1002e8e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34c]
call fcn.10001a01
mov dword [ebp - 0x40], 2
and dword [ebp - 0x1f4], 0
jmp 0x1002ed52
cmp dword [ebp - 0x40], 0x1e
jae 0x1002fa7e
mov dword [ebp - 0x70], 0x76820624
mov dword [ebp - 0x64], 0xfffffffe
mov dword [ebp - 0x4e0], 0xa0e1c2a9
push 2
lea ecx, [ebp - 0xe04]
call fcn.1000199f
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x1a8], 0
jmp 0x1002eda1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1002edc0
push dword [ebp - 0x1a8]
lea ecx, [ebp - 0xe04]
call fcn.10001a06
and dword [eax], 0
jmp 0x1002ed94
mov dword [ebp - 0x70], 0
jmp 0x1002edd0
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe5
je 0x1002eeda
mov dword [ebp - 0xc14], 0x961c0f80
mov dword [ebp - 0xc10], 0x961c0f80
mov dword [ebp - 0xc0c], 0x961c0f80
mov dword [ebp - 0xc08], 0x961c0f80
mov dword [ebp - 0xfc], 4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0xfc], 0
jne 0x1002eeb9
mov dword [ebp - 0x714], 0xcd9
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1002ee54
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov dword [ebp - 0xfc], 0
jmp 0x1002ee6d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x1002eeb7
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x714]
je 0x1002ee93
cmp dword [ebp - 0x714], 0
jne 0x1002ee93
and dword [ebp - 0x844], 0
jmp 0x1002ee9d
mov dword [ebp - 0x844], 1
mov eax, dword [ebp - 0x844]
add eax, 0x4dde9a
mov ecx, dword [ebp - 0xfc]
mov dword [ebp + ecx*4 - 0xc14], eax
jmp 0x1002ee60
jmp 0x1002eed5
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x1002eed5
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEnvironmentVariableW]
jmp 0x1002edc9
cmp dword [ebp - 0x70], 0xce1a812c
je 0x1002eeef
mov dword [ebp - 0x8dc], 1
jmp 0x1002eef6
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x70], 0
jne 0x1002ef30
cmp dword [ebp - 0x70], 0xca3
jne 0x1002ef11
mov dword [ebp - 0x71c], 1
jmp 0x1002ef18
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jne 0x1002ef30
and dword [ebp - 0x724], 0
jmp 0x1002ef3a
mov dword [ebp - 0x724], 1
mov eax, dword [ebp - 0x8dc]
cmp eax, dword [ebp - 0x724]
jle 0x1002ef54
mov dword [ebp - 0x84c], 1
jmp 0x1002ef5b
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x4e0]
jl 0x1002ef7b
mov dword [ebp - 0x4e8], 1
jmp 0x1002ef82
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x4e8], eax
jg 0x1002ef9c
mov dword [ebp - 0x4f0], 1
jmp 0x1002efa3
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0xce10
je 0x1002efbb
mov dword [ebp - 0x4f8], 1
jmp 0x1002efc2
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0xffffffff
jge 0x1002efd7
mov dword [ebp - 0x500], 1
jmp 0x1002efde
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0x1e6e
jge 0x1002f006
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1002f004
mov dword [ebp - 0xcbc], 0x81e21435
mov dword [ebp - 0x508], 0xa25a
mov dword [ebp - 0x64], 1
jmp 0x1002f02a
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0xbd4], 0
mov dword [ebp - 0xa4], 0xda4d073f
mov dword [ebp - 0x390], 3
mov dword [ebp - 0x3b4], 0xffffffff
mov dword [ebp - 0x618], 0xc8490231
mov dword [ebp - 0x18], 9
push 4
lea ecx, [ebp - 0x1a0]
call fcn.1000199f
mov dword [ebp - 4], 0x26
mov dword [ebp - 0xaa0], 0x2a9564
mov dword [ebp - 0x1fc], 0
jmp 0x1002faf2
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 4
jge 0x1002fb14
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
mov dword [eax], 0xebec5ec6
jmp 0x1002fae5
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xd00], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xcd4], eax
cmp dword [ebp - 0xa4], 1
jbe 0x1002fb41
mov dword [ebp - 0x5e8], 1
jmp 0x1002fb48
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xfffffff6
je 0x1002fb5d
mov dword [ebp - 0x5f0], 1
jmp 0x1002fb64
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x5f0], eax
jne 0x1002fb7b
cmp dword [ebp - 0xa4], 0
jne 0x1002fb8d
cmp dword [ebp - 0xa4], 0
jne 0x1002fb8d
and dword [ebp - 0x5f8], 0
jmp 0x1002fb97
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x5f8]
dec eax
mov ecx, dword [ebp - 0xa4]
neg ecx
cmp ecx, eax
je 0x1002fbb6
mov dword [ebp - 0x600], 1
jmp 0x1002fbbd
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x88039d6b
jne 0x1002fbde
mov eax, 0x2d62
test eax, eax
je 0x1002fbde
mov dword [ebp - 0x608], 1
jmp 0x1002fbe5
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x608], eax
je 0x1002fbff
mov dword [ebp - 0x610], 1
jmp 0x1002fc06
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0
jmp 0x1002fc37
cmp dword [ebp - 0x18], 3
jg 0x1002ff89
mov dword [ebp - 0x630], 4
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0x680], 0
mov dword [ebp - 0xb48], 0x47b5
mov dword [ebp - 0xaac], 0xddd7ad25
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
mov eax, dword [eax]
mov dword [esi], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
cmp dword [eax], 0
je 0x1002fcf0
cmp dword [ebp - 0x18], 0
je 0x1002fcd4
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x630], eax
mov esi, dword [ebp - 0x630]
push 2
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
sub esi, dword [eax]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1a0]
call fcn.10001a06
cmp esi, dword [eax]
je 0x1002fd3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a0]
call fcn.10001a01
lea eax, [ebp - 0xbd4]
push eax
lea ecx, [ebp - 0xebc]
call fcn.10037706
mov dword [ebp - 4], 0x27
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x398], 0xe8e6
mov dword [ebp - 0x748], 1
mov dword [ebp - 0xcdc], 0xfcb68b63
mov dword [ebp - 0x6a8], 0x7b9b
mov dword [ebp - 0xb50], str.mzuxjx_qal_dbk_awzghp
cmp dword [ebp - 0x6a8], 0x7c86
jle 0x100300af
and dword [ebp - 0x214], 0
jmp 0x1003001a
mov dword [ebp - 0xd0c], 0xe267355d
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x6a8], 0x7b5c
jge 0x100300d9
push 2
lea ecx, [ebp - 0xb9c]
call fcn.1000199f
mov dword [ebp - 4], 0x2f
push 1
lea ecx, [ebp - 0x970]
call fcn.1000199f
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x9c], 0
jmp 0x10030ced
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10030d0f
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xb9c]
call fcn.10001a06
mov dword [eax], 1
jmp 0x10030ce0
mov dword [ebp - 0x9c], 0
jmp 0x10030d28
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x10030d4a
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x970]
call fcn.10001a06
mov dword [eax], 0x622ba394
jmp 0x10030d1b
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
and dword [eax], 0
jmp 0x10030d80
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
mov dword [ebp - 0x7f8], eax
mov eax, dword [ebp - 0x7f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
cmp dword [eax], 1
jg 0x10030fd2
mov dword [ebp - 0x114], 0x17f75960
mov dword [ebp - 0x37c], 0x4da86284
mov dword [ebp - 0x114], 1
jmp 0x10030dc3
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x10030fa9
mov dword [ebp - 0x98], 7
mov dword [ebp - 0x800], 0x8ed40a16
mov dword [ebp - 0x98], 1
jmp 0x10030dfd
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10030e2a
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x10030e28
push 0xb52
push 0xb94
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
jmp 0x10030df0
mov dword [ebp - 0x98], 1
jmp 0x10030e43
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10030fa4
mov dword [ebp - 0x800], 0x44cf5927
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0x371d7b74
je 0x10030e7e
mov dword [ebp - 0x810], 1
jmp 0x10030e85
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x114]
jle 0x10030e9f
mov dword [ebp - 0x808], 1
jmp 0x10030ea6
and dword [ebp - 0x808], 0
cmp dword [ebp - 0x808], 1
ja 0x10030ebb
mov dword [ebp - 0x40c], 1
jmp 0x10030ec2
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x810]
cmp eax, dword [ebp - 0x40c]
je 0x10030edc
mov dword [ebp - 0x410], 1
jmp 0x10030ee3
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xffffffff
jge 0x10030ef8
mov dword [ebp - 0x418], 1
jmp 0x10030eff
and dword [ebp - 0x418], 0
push 0
lea ecx, [ebp - 0xb9c]
call fcn.10001a06
mov ecx, dword [ebp - 0x418]
cmp ecx, dword [eax]
jg 0x10030f22
mov dword [ebp - 0x9cc], 1
jmp 0x10030f29
and dword [ebp - 0x9cc], 0
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
cmp dword [eax], 0
jne 0x10030f4d
cmp dword [ebp - 0x37c], 0
jne 0x10030f4d
and dword [ebp - 0x420], 0
jmp 0x10030f57
mov dword [ebp - 0x420], 1
mov esi, dword [ebp - 0x420]
neg esi
add esi, dword [ebp - 0x114]
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
push dword [eax]
lea ecx, [ebp - 0xb9c]
call fcn.10001a06
mov edi, dword [eax]
sub edi, esi
push 0
lea ecx, [ebp - 0x970]
call fcn.10001a06
push dword [eax]
lea ecx, [ebp - 0xb9c]
call fcn.10001a06
mov dword [eax], edi
jmp 0x10030e36
jmp 0x10030db6
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10030fcd
push 0
push 0x1bde
push 0x1383
call dword [sym.imp.GDI32.dll_CreatePen]
jmp 0x10030d5c
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x970]
call fcn.10001a01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb9c]
call fcn.10001a01
cmp dword [0x1009f66c], 0
je 0x10031873
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x9d4], 0x8ee41b66
mov dword [ebp - 0xda8], 0x143e95aa
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1003103e
push 0
push 0
push 0
push 0xad8
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov dword [ebp - 0x11c], 0x1c
jmp 0x10031057
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jl 0x100310be
mov dword [ebp - 0x274], 0xad95e17c
mov dword [ebp - 0x274], 0
jmp 0x10031083
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xa
jge 0x100310a6
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100310a4
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x10031076
mov eax, dword [ebp - 0x11c]
neg eax
mov ecx, dword [ebp - 0x11c]
sub ecx, eax
mov dword [ebp - 0x9d4], ecx
jmp 0x1003104a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0x28], 0x7b5ca98
mov dword [ebp - 0x6c], 0xe6d39c7c
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x4b0], 0xffffffff
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd10], eax
mov dword [ebp - 0x6c], 4
cmp dword [ebp - 0x6c], 0xfdbd
jg 0x1003111d
cmp dword [ebp - 0x28], 0
je 0x1003111d
mov dword [ebp - 0x428], 1
jmp 0x10031124
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x428], eax
je 0x1003113b
mov dword [ebp - 0x9dc], 1
jmp 0x10031142
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x10031156
mov dword [ebp - 0x9e4], 1
jmp 0x1003115d
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xe30], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0x28], 0xb5c2
jle 0x1003118d
mov dword [ebp - 0x430], 1
jmp 0x10031194
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x430], eax
jne 0x100311ab
mov dword [ebp - 0x438], 1
jmp 0x100311b2
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jle 0x10031334
mov dword [ebp - 0x384], 0
mov eax, 0xb5978573
test eax, eax
je 0x10031303
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x6c]
jg 0x100311f9
mov dword [ebp - 0x440], 1
jmp 0x10031200
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x28]
add eax, 0x1a0e1c2a
cmp dword [ebp - 0x440], eax
jl 0x1003121c
mov dword [ebp - 0x448], 1
jmp 0x10031223
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x6c]
jle 0x1003124a
push 4
pop eax
test eax, eax
jne 0x1003124a
and dword [ebp - 0x450], 0
jmp 0x10031254
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x6c]
jg 0x1003126f
mov dword [ebp - 0x458], 1
jmp 0x10031276
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x384]
imul eax, dword [ebp - 0x458]
test eax, eax
je 0x1003129a
push 5
pop eax
test eax, eax
je 0x1003129a
mov dword [ebp - 0x460], 1
jmp 0x100312a1
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x460]
jne 0x100312be
mov eax, 0xf18
test eax, eax
jne 0x100312be
and dword [ebp - 0x468], 0
jmp 0x100312c8
mov dword [ebp - 0x468], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x468], eax
jge 0x100312df
mov dword [ebp - 0x470], 1
jmp 0x100312e6
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x384]
imul eax, dword [ebp - 0x470]
test eax, eax
je 0x10031303
mov dword [ebp - 0x478], 1
jmp 0x1003130a
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x6c], eax
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1003132f
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x10031437
mov dword [ebp - 0x144], 0xfffffff8
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x144]
jg 0x10031364
mov dword [ebp - 0x480], 1
jmp 0x1003136b
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x480], eax
jne 0x10031424
cmp dword [ebp - 0x28], 0xfffffffb
jg 0x1003138c
mov dword [ebp - 0x488], 1
jmp 0x10031393
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x4b0]
imul eax, dword [ebp - 0x488]
cmp eax, dword [ebp - 0x144]
jle 0x100313bd
cmp dword [ebp - 0x13c], 0
je 0x100313bd
mov dword [ebp - 0x490], 1
jmp 0x100313c4
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0x2f10
je 0x100313dc
mov dword [ebp - 0x498], 1
jmp 0x100313e3
and dword [ebp - 0x498], 0
imul eax, dword [ebp - 0x498], 0x9ff9
cmp eax, dword [ebp - 0x144]
jle 0x10031402
xor eax, eax
jne 0x10031402
and dword [ebp - 0x4a0], 0
jmp 0x1003140c
mov dword [ebp - 0x4a0], 1
cmp dword [ebp - 0x4a0], 0x15869b92
jne 0x10031424
mov dword [ebp - 0x4a8], 1
jmp 0x1003142b
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x28], 0xffffffe7
jmp 0x10031447
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x12
jge 0x10031475
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10031473
push 0x21d9
push 0
push 0
push 0x21cf
call dword [sym.imp.GDI32.dll_PolyPolygon]
jmp 0x10031440
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0x14c], 0xfe0a8eac
mov dword [ebp - 0xe34], 1
mov dword [ebp - 0x4b8], 0x1769
mov dword [ebp - 0x9fc], str.mbnrbvgw_kve_lzyounq_xoa_qqu_jroyav_yrzvhge_rmash_cojdw
cmp dword [ebp - 0x4b8], 0x18d0
jle 0x1003158e
and dword [ebp - 0x27c], 0
jmp 0x100314cf
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x7302
jge 0x1003158e
and dword [ebp - 0x284], 0
jmp 0x100314f5
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x7147
jge 0x10031589
and dword [ebp - 0x28c], 0
jmp 0x1003151b
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x308e
jge 0x10031584
mov eax, dword [ebp - 0x27c]
sub eax, dword [ebp - 0x284]
sub eax, dword [ebp - 0x28c]
cdq
mov dword [ebp - 0xafc], eax
mov dword [ebp - 0xaf8], edx
push dword [ebp - 0xaf8]
push dword [ebp - 0xafc]
lea ecx, [ebp - 0xf14]
call fcn.100025b7
pop ecx
pop ecx
mov dword [ebp - 0x9f4], eax
mov ecx, dword [ebp - 0x9f4]
call fcn.1000704b
push eax
call fcn.1004b05d
pop ecx
lea ecx, [ebp - 0xf14]
call fcn.10007041
jmp 0x1003150e
jmp 0x100314e8
jmp 0x100314c2
mov dword [ebp - 0xd28], 0
mov dword [ebp - 4], 0x31
cmp dword [ebp - 0x4b8], 0x1603
jge 0x100315b7
push dword [ebp - 0x9fc]
call fcn.1004b05d
pop ecx
jmp 0x100315d3
or dword [ebp - 4], 0xffffffff
jmp 0x100315dd
mov dword [ebp - 0xa14], 0
mov dword [ebp - 0x14c], 5
jmp 0x10031600
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0xb
jl 0x100316df
mov dword [ebp - 0x38c], 0xfffffffa
mov dword [ebp - 0xdb8], 0x736d0c11
mov dword [ebp - 0xa0c], 1
mov dword [ebp - 0xd30], 0xdfbc43cc
mov dword [ebp - 0x4c8], 0xfffffffb
cmp dword [ebp - 0x38c], 1
jne 0x10031654
mov dword [ebp - 0x4c0], 1
jmp 0x1003165b
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x4c8], eax
cmp dword [ebp - 0x4c8], 0xfffffffd
jl 0x10031682
cmp dword [ebp - 0x38c], 0
jne 0x10031682
and dword [ebp - 0x4d0], 0
jmp 0x1003168c
mov dword [ebp - 0x4d0], 1
mov eax, dword [ebp - 0x38c]
cmp eax, dword [ebp - 0x4d0]
jg 0x100316a6
mov dword [ebp - 0xa04], 1
jmp 0x100316ad
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0x14c]
jl 0x100316c7
mov dword [ebp - 0x4d8], 1
jmp 0x100316ce
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa14], eax
jmp 0x100315f3
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x100316fe
push 0
push 0xbc1
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
mov eax, dword [ebp - 0xa1c]
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xe80], 0xffffffff
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10031735
push 0
push 0x1d6a
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x1003174f
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
push dword [ebp - 0xa24]
push dword [ebp - 0xa2c]
call dword [0x1009f66c]
mov dword [ebp - 0xa34], eax
mov dword [ebp - 0xd38], 9
mov dword [ebp - 0xdc8], 0xffffffff
mov dword [ebp - 0xd40], 0x3df603fa
mov dword [ebp - 0xe3c], 0x5a654fdd
mov dword [ebp - 0xd48], 0xffffffff
mov dword [ebp - 0xdd8], 4
mov dword [ebp - 0xd50], 0xc9fb37b0
mov dword [ebp - 0xe5c], 8
mov dword [ebp - 0xd58], 2
mov dword [ebp - 0xde8], 0xfffffff6
mov dword [ebp - 0xd60], 6
mov dword [ebp - 0xe44], 0x89226c31
mov dword [ebp - 0xd68], 1
mov dword [ebp - 0xe74], 0x26d8d38
mov dword [ebp - 0xe70], 0x26d8d38
mov dword [ebp - 0xe6c], 0x26d8d38
mov dword [ebp - 0xe68], 0x26d8d38
mov dword [ebp - 0xdf8], 0xfffffff6
mov dword [ebp - 0x294], 0
jmp 0x10031834
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x10031850
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xe90], 0xa47cdedf
jmp 0x10031827
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe90]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe90], eax
mov eax, dword [ebp - 0xa34]
jmp 0x10031875
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret