Function at 0x1002bdab
Capabilities:
Encrypt data using speck
Get common file path
Set thread local storage value

Disassembly:
mov eax, 0x10064df7
call fcn.10063468
sub esp, 0x660
mov ecx, dword [0x1009d504]
xor eax, eax
push ebx
push esi
inc eax
push edi
mov dword [ebp - 0x10], esp
test al, cl
jne 0x1002be05
or ecx, eax
mov dword [0x1009d504], ecx
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [0x1009d4fc], ebx
mov dword [0x1009d500], ebx
call fcn.100307b9
push 0x100655c5
mov dword [0x1009d4fc], eax
call fcn.1004e21b
or dword [ebp - 4], 0xffffffff
xor eax, eax
pop ecx
inc eax
jmp 0x1002be07
xor ebx, ebx
mov dword [ebp - 0x20], 0xfffffffa
lea ecx, [ebp - 0x214]
push eax
call fcn.10001ed2
lea ecx, [ebp - 0x274]
xor eax, eax
push ecx
inc eax
push ecx
mov dl, al
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x214]
call fcn.10026a87
pop ecx
pop ecx
push 4
mov dword [ebp - 0x20], 0xffffffee
pop edi
cmp dword [ebp - 0x20], 0x1a
jne 0x1002bfc1
mov dword [ebp - 0x1c], ebx
jmp 0x1002be61
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x15c], 0xf251d69f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002be50
mov dword [ebp - 0x15c], 0x15
jmp 0x1002bf96
push 1
lea ecx, [ebp - 0x4fc]
call fcn.10001ed2
push 2
lea ecx, [ebp - 0x520]
mov byte [ebp - 4], 2
call fcn.10001ed2
push 0x7016
push ecx
lea eax, [ebp - 0x2d8]
mov byte [ebp - 4], 3
push eax
push 0x424a
push 0x5a91
push 0x4ba6
push 0x4172
push 0x77d6
lea eax, [ebp - 0x4fc]
mov dword [ebp - 0x3c], edi
push eax
push 0x227b
push 0x5157
push 0x38df
push 0x6549
push 0xd39
push ecx
push 0x5402
mov cl, 1
call fcn.1002a4eb
add esp, 0x40
lea eax, [ebp - 0x2d8]
mov edx, 0xb72
push 0x710b
push eax
push 0x4d84
push 0x521b
lea eax, [ebp - 0x520]
push eax
push 0x3c96
push 1
push ecx
push 0x2c3d
call fcn.10026b4b
mov eax, dword [ebp - 0x15c]
add esp, 0x24
cmp dword [ebp - 0x154], ebx
je 0x1002bf43
cmp dword [ebp - 0x15c], ebx
je 0x1002bf43
xor edx, edx
inc edx
jmp 0x1002bf45
mov edx, ebx
mov eax, dword [ebp - 0x154]
xor ecx, ecx
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x15c]
cmp edx, eax
mov eax, dword [ebp - 0x214]
sete cl
cmp ecx, 0xe55a4419
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x3c], 1
call fcn.10001f55
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 1
call fcn.10001f55
dec dword [ebp - 0x15c]
cmp dword [ebp - 0x15c], 0xfffffffd
jge 0x1002be76
lea eax, [ebp - 0x7c]
mov byte [ebp - 0x7c], bl
push eax
push ecx
mov dl, 1
mov ecx, 0x7a3a
call fcn.1002951a
inc dword [ebp - 0x20]
pop ecx
pop ecx
jmp 0x1002be41
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x214]
cmp dword [eax], 0xf851
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x214]
setg cl
add eax, ecx
xor ecx, ecx
cmp dword [esi], eax
setge cl
xor eax, eax
cmp ecx, 0x5f885928
setne al
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, 0xc74b
setne dl
add eax, 3
mov dword [esi], edx
add eax, edx
je 0x1002c014
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x6406
setl cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x214]
or dword [ebp - 4], 0xffffffff
call fcn.10001f55
cmp byte [0x1008197d], 0
je 0x1002c10e
mov dword [ebp - 0xc4], 0x8bbca631
mov dword [ebp - 0x2f8], 0xae77ab39
mov dword [ebp - 0xc4], 0xffffffe7
jmp 0x1002c0fc
push 0x7729
push 0x3dbf
push ebx
push ecx
push 0x63ee
push 0x51d2
lea eax, [ebp - 0x2f8]
mov ecx, 0x411a
push eax
push 0x3fac
push 0x2b32
push 0x5424
push 0x6251
lea edx, [ebp - 0xc4]
call fcn.1002a073
mov byte [ebp - 0x29], bl
add esp, 0x2c
cmp byte [ebp - 0x29], 0
je 0x1002c0f6
xor eax, eax
mov ecx, 0x469b
inc eax
push eax
push 0x63fa
push 0x6b3e
push 0x3acf
push 0x2f91
push 0x1d3e
push 0x6158
push 0x7404
push 0x55c4
push eax
push 0x7217
push 0x1cf1
mov dl, al
call fcn.10029536
add esp, 0x30
inc dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], 0xfffffffc
jge 0x1002c063
jmp 0x1002f36b
push ecx
push ecx
xor dl, dl
call fcn.10027f37
pop ecx
pop ecx
push 0x64af
push 0x1008197d
push 0x4f4e
push 0xb3e
push ecx
mov cl, 1
call fcn.100283be
movdqa xmm0, xmmword [0x10072fc0]
lea eax, [ebp - 0x548]
add esp, 0x14
mov dword [ebp - 0x114], 0x1007daf0
mov dword [ebp - 0x120], 9
lea ecx, [ebp - 0x16c]
mov dword [ebp - 0x9c], 0x20bd2ab
mov dword [ebp - 0x58], 0x677b568b
push dword [ebp - 0x274]
movdqu xmmword [ebp - 0x558], xmm0
push eax
lea eax, [ebp - 0x558]
mov dword [ebp - 0x16c], ebx
push eax
push ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x164], ebx
call fcn.10001fbb
lea eax, [ebp - 0x16c]
mov dword [ebp - 4], edi
push eax
push 0x6fac
push ebx
push 0x4561
push 0x20d7
push ecx
push 0x2647
push ecx
push 0x2e8f
push 0x3dd
xor eax, eax
mov dword [ebp - 0x3c], 0x12f6
inc eax
lea edx, [ebp - 0x9c]
push eax
push 0x6f79
push 0x4e8d
push eax
push 0x6b66
lea eax, [ebp - 0x58]
push eax
push ecx
lea ecx, [ebp - 0x120]
call fcn.10028fde
add esp, 0x44
mov dword [ebp - 0x58], ebx
cmp dword [ebp - 0x58], 3
jg 0x1002c46d
mov dword [ebp - 0x90], 0x6e85fcb
mov dword [ebp - 0x28], 0x8c46158e
mov dword [ebp - 0x27c], 0x81f6
mov dword [ebp - 0x9c], ebx
jmp 0x1002c259
xor eax, eax
mov byte [ebp - 0x89], bl
inc eax
lea edx, [ebp - 0x89]
push 0x4fd7
push eax
push 0x1316
push eax
mov cl, al
call fcn.10029627
add esp, 0x10
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 3
jle 0x1002c22e
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x90]
imul eax, dword [ebp - 0x58]
cmp eax, 1
mov eax, dword [ebp - 0x90]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x16c]
sete dl
mov dword [eax + ecx*4], edx
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x120]
je 0x1002c2d5
cmp dword [ebp - 0x58], ebx
je 0x1002c2d5
mov eax, dword [ebp - 0x16c]
cmp dword [eax + 8], ebx
je 0x1002c2d5
xor ecx, ecx
inc ecx
jmp 0x1002c2d7
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfffffff7
setne al
cmp eax, 0xbe776e9f
sbb eax, eax
inc eax
cmp eax, 0xffffffff
jg 0x1002c301
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x16c]
cmp dword [eax + ecx*4], ebx
jne 0x1002c301
xor eax, eax
mov ecx, ebx
inc eax
jmp 0x1002c306
xor eax, eax
inc eax
mov ecx, eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
je 0x1002c445
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x19c], 0x8d9a65c8
push ebx
push ecx
mov dword [ebp - 0x2ec], 0xffffffff
mov dl, al
mov dword [ebp - 0x324], 6
mov cl, al
push 0x7516
call fcn.1002b8ee
mov dword [ebp - 0x18], 0x3c73
add esp, 0xc
cmp dword [ebp - 0x18], 0x3e98
jle 0x1002c3b5
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0xb0], ebx
cdq
idiv esi
mov edi, edx
mov eax, ebx
mov ecx, 0x10080838
xor eax, edi
cdq
push edx
push eax
call fcn.10010b40
inc ebx
cmp ebx, 0x7df5
jl 0x1002c36d
mov edi, dword [ebp - 0x28]
inc esi
push 0
pop ebx
cmp esi, 0x303c
jl 0x1002c360
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x2301
jl 0x1002c35e
push 0x1a2a
push 0x113b
call dword [sym.imp.USER32.dll_GetWindowLongW]
push 4
pop edi
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x120]
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x19c]
push eax
push 0x4654
push ecx
push ecx
lea eax, [ebp - 0x2ec]
push eax
push 0xf99
lea eax, [ebp - 0x16c]
push eax
push 1
lea eax, [ebp - 0x27c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.10026c5b
add esp, 0x34
mov byte [ebp - 4], 5
cmp dword [ebp - 0x18], 0x3a67
jge 0x1002c41c
mov edx, str.ewugmv_ctdzc_hklgs_ofhhph
mov ecx, 0x10080838
call fcn.10013913
mov dword [ebp - 4], edi
jmp 0x1002c465
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002c465
push ebx
push 0x2e6e
push 0x7d3c
xor dl, dl
mov cl, al
call fcn.10029329
add esp, 0xc
inc dword [ebp - 0x58]
jmp 0x1002c201
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.10001f55
push 2
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x140], 0xc
pop esi
push 1
lea ecx, [ebp - 0x350]
call fcn.10001ed2
lea eax, [ebp - 0x350]
mov dword [ebp - 4], 7
push eax
push ecx
lea eax, [ebp - 0x198]
mov dword [ebp - 0xa4], esi
push eax
push ecx
mov dword [ebp - 0x28c], 0xe469
mov edx, 0x2c6
mov cl, 1
call fcn.100296a6
mov byte [ebp - 0x29], bl
add esp, 0x10
cmp byte [ebp - 0x29], 0
je 0x1002c4f1
push 0x4916
push ecx
push ecx
push 0x243f
xor cl, cl
call fcn.1002a1bd
add esp, 0x10
mov dword [ebp - 0xa4], ebx
jmp 0x1002c58d
mov dword [ebp - 0xd8], 0x1fe77dd6
mov dword [ebp - 0x284], ebx
mov dword [ebp - 0xd8], ebx
cmp dword [ebp - 0xd8], ebx
jl 0x1002c587
lea eax, [ebp - 0x350]
mov dword [ebp - 0x184], 0x8f3d4210
push eax
lea eax, [ebp - 0x184]
mov edx, 0x4e8e
push eax
push ecx
push ebx
call fcn.10029cc5
add esp, 0x10
lea eax, [ebp - 0x284]
push eax
push 1
lea eax, [ebp - 0x184]
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0xd8]
push eax
push ecx
push 0xf45
lea eax, [ebp - 0xa4]
push eax
push 0x634f
lea ecx, [ebp - 0x350]
call fcn.10029bbd
add esp, 0x24
dec dword [ebp - 0xd8]
jns 0x1002c51a
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], ebx
jle 0x1002c4fc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10001f55
mov ecx, dword [ebp - 0x114]
mov edx, dword [ebp - 0x140]
mov al, byte [ecx]
cmp al, byte [edx + ecx]
je 0x1002c5d0
inc edx
mov dword [ebp - 0x140], edx
cmp edx, 0xe0
jl 0x1002c48f
jmp 0x1002c605
push 0xd2e
lea eax, [ebp - 0x140]
mov edx, 0x1417
push eax
xor eax, eax
mov ecx, 0x5666
inc eax
push eax
push ebx
push 0x267c
push eax
lea eax, [ebp - 0x138]
push eax
push 0x4ca0
call fcn.1002baf6
add esp, 0x20
push dword [ebp - 0x198]
movdqa xmm0, xmmword [0x10072f60]
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x5a8]
mov dword [ebp - 0x1c], ebx
push eax
mov dword [ebp - 0x24], 0x29a2a67f
lea ecx, [ebp - 0x224]
push ebx
movdqu xmmword [ebp - 0x5a8], xmm0
mov dword [ebp - 0x224], ebx
mov dword [ebp - 0x220], ebx
mov dword [ebp - 0x21c], ebx
call fcn.10001fbb
push 1
lea ecx, [ebp - 0x374]
mov dword [ebp - 4], 8
call fcn.10001ed2
push ecx
lea eax, [ebp - 0xbc]
mov byte [ebp - 4], 9
push eax
push ecx
push ecx
push 0x6976
lea eax, [ebp - 0x374]
push eax
push 1
call fcn.10027cf1
xor ecx, ecx
mov dword [ebp - 0xbc], ebx
add esp, 0x1c
inc ecx
jmp 0x1002c6a7
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xdc], edi
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], ecx
jl 0x1002c694
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x224]
setge cl
mov dword [eax + 8], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x374]
mov edx, dword [eax]
mov eax, dword [ebp - 0x1c]
cmp eax, 0xcde3
setl cl
imul ecx, dword [ebp - 0x24]
imul eax, ecx, 6
xor ecx, ecx
cmp eax, 0x6acb8f2b
setle cl
xor eax, eax
imul ecx, edx
cmp ecx, edx
setle al
xor ecx, ecx
inc ecx
cmp eax, ecx
jl 0x1002c712
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0xdc]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x374]
setne cl
mov dword [eax], ecx
lea ecx, [ebp - 0x374]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.10001f55
mov dword [ebp - 0x2d0], edi
lea ecx, [ebp - 0x414]
mov dword [ebp - 0x18], 0x52061f6
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x8f5f4990
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0xa8], 0xf72b5725
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x130], 0x5f7919ad
push edi
call fcn.10001ed2
push 3
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], 0xa
call fcn.10001ed2
mov byte [ebp - 4], 0xb
xor ecx, ecx
mov dword [ebp - 0x28], edi
inc ecx
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x308], 0xfffffffa
mov dword [ebp - 0x70], ebx
jmp 0x1002c7f0
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x3e4], 0xe6e7f737
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], esi
jl 0x1002c7df
push 0x751
push 0x3a7d
lea eax, [ebp - 0x70]
mov edx, 0x5d30
push eax
push ecx
push 0x11ce
push ecx
push 0x3161
push 0x5408
push 0x6edd
push 0x3ea4
push 0x4e71
push 0x137
lea eax, [ebp - 0x414]
push eax
push 0x7241
push 0x121e
push 0x34e3
push 0x4adb
push 0x15f9
call fcn.10029779
push 0x723a
push ebx
lea eax, [ebp - 0x70]
push eax
xor eax, eax
lea ecx, [ebp - 0x530]
inc eax
push 0x4f12
push eax
mov dl, al
call fcn.1002b745
mov eax, dword [ebp - 0x18]
add esp, 0x5c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
add eax, 0xbc37
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3e0]
dec dword [ebp - 0x28]
jne 0x1002c8a9
cmp dword [ebp - 0x130], ebx
jne 0x1002c8a9
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x1002c8ae
xor edx, edx
inc edx
mov ecx, edx
xor eax, eax
cmp ecx, 5
sete al
xor ecx, ecx
cmp eax, 0x2aee5a98
setl cl
xor eax, eax
imul ecx, dword [ebp - 0x1c]
cmp ecx, edx
setg al
cmp eax, dword [ebp - 0x130]
jl 0x1002ca4a
mov dword [ebp - 0x2a8], 0x15ea3766
mov dword [ebp - 0x78], 0x62e26a8a
mov dword [ebp - 0x2c0], edx
mov dword [ebp - 0x208], 0x4961f084
mov dword [ebp - 0x38], 0x15
cmp dword [ebp - 0x38], 0x10
jle 0x1002ca50
jmp 0x1002c90e
xor edx, edx
inc edx
lea eax, [ebp - 0x1a4]
mov dword [ebp - 0x1a4], 0x86bdae89
push eax
lea eax, [ebp - 0x180]
mov dword [ebp - 0x180], 0x718b
push eax
lea eax, [ebp - 0x78]
mov dword [ebp - 0x2c8], 7
push eax
push edx
push 0x27ec
push 0x7b7a
push ecx
push ecx
lea edx, [ebp - 0x294]
lea ecx, [ebp - 0x2a8]
call fcn.10027df4
add esp, 0x20
mov dword [ebp - 0x78], edi
jmp 0x1002ca31
lea eax, [ebp - 0x180]
mov dword [ebp - 0x2b8], 0x1937da87
push eax
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x2b0], 6
push eax
lea eax, [ebp - 0x2b8]
push eax
sub esp, 0xc
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x130]
push eax
push 1
lea eax, [ebp - 0x414]
push eax
push ecx
push ecx
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x2c8]
push eax
lea eax, [ebp - 0x1a4]
push eax
push ecx
push 0x3530
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x308]
push eax
call fcn.1002a918
add esp, 0x50
mov dword [ebp - 0xa8], 6
jmp 0x1002ca25
mov dword [ebp - 0x1c], 0x1c
jmp 0x1002ca19
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002ca16
push ecx
push 1
push ecx
push ecx
mov edx, 0x363d
mov ecx, 0x7de2
call fcn.1002988f
add esp, 0x10
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jge 0x1002c9f6
dec dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], 0xfffffff0
jle 0x1002c9ed
dec dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0xffffffe8
je 0x1002c967
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x10
jg 0x1002c90b
jmp 0x1002ca50
mov dword [ebp - 0x28], esi
inc dword [ebp - 0x28]
lea ecx, [ebp - 0x530]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0xf0], 0x1007dbd0
inc eax
lea ecx, [ebp - 0x498]
mov dword [ebp - 0x28], eax
push eax
call fcn.10001ed2
mov dword [ebp - 4], 0xc
lea ecx, [ebp - 0x3b0]
mov dword [ebp - 0x18], 1
push 3
call fcn.10001ed2
push 0x6b52
push ebx
push 0x6a72
push 0x7f25
push 0x60f4
push ecx
lea eax, [ebp - 0x498]
mov byte [ebp - 4], 0xd
push eax
lea eax, [ebp - 0x40]
mov ecx, 0x4acf
push 0x5717
push eax
call fcn.10029bbd
add esp, 0x24
mov dword [ebp - 0x40], ebx
push 3
pop edx
jmp 0x1002caf1
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x380], 0x95e3b372
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edx
jl 0x1002cae0
mov dword [ebp - 0x40], ebx
jmp 0x1002cb0c
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4dc], 0xfffffff6
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x1002cafb
mov dword [ebp - 0x40], ebx
jmp 0x1002cb29
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3b0]
mov dword [eax + ecx*4], 0x99a5671
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edx
jl 0x1002cb16
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x498]
cmp eax, dword [edx]
setl cl
mov dword [ebp - 0x37c], ecx
mov ecx, dword [edx]
xor edx, edx
lea eax, [ecx + 1]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x4dc], ecx
cmp ecx, dword [ebp - 0x28]
jge 0x1002cb6e
cmp dword [ebp - 0x18], ebx
jne 0x1002cb6e
mov eax, ebx
jmp 0x1002cb71
xor eax, eax
inc eax
cmp dword [ebp - 0x37c], 0xfffffffd
mov ecx, dword [ebp - 0x3b0]
mov dword [ecx + 4], eax
jne 0x1002cb8f
cmp dword [ebp - 0x378], ebx
jne 0x1002cb8f
mov eax, ebx
jmp 0x1002cb92
xor eax, eax
inc eax
mov dword [ecx + 4], eax
xor edx, edx
mov ecx, dword [ebp - 0x3b0]
mov eax, dword [ebp - 0x18]
cmp dword [ecx + 8], eax
lea ecx, [ebp - 0x3b0]
setg dl
xor eax, eax
cmp edx, 0xda2a
setne al
imul eax, eax, 0x378cabcc
mov dword [ebp - 0x37c], eax
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x498]
call fcn.10001f55
mov eax, dword [ebp - 0x114]
mov cl, byte [0x1007dbd0]
mov byte [ebp - 0x49], cl
mov dl, byte [eax]
call fcn.100307e4
mov byte [0x1007dbd0], al
lea ecx, [ebp - 0x480]
mov dword [ebp - 0x38], 0xfffffff8
push esi
call fcn.10001ed2
mov dword [ebp - 4], 0xe
lea eax, [ebp - 0x568]
push dword [ebp - 0x198]
movdqa xmm0, xmmword [0x10072f60]
lea ecx, [ebp - 0x234]
push eax
lea eax, [ebp - 0x578]
mov dword [ebp - 0x28], 0x26c312fb
push eax
mov dword [ebp - 0x18], 0x32fd2d1a
mov dword [ebp - 0x18], 8
push ebx
movdqu xmmword [ebp - 0x578], xmm0
mov dword [ebp - 0x234], ebx
mov dword [ebp - 0x230], ebx
mov dword [ebp - 0x22c], ebx
call fcn.10001fbb
sub esp, 0xc
mov byte [ebp - 4], 0xf
lea eax, [ebp - 0x480]
lea edx, [ebp - 0x4f0]
push eax
call fcn.10029991
add esp, 0x10
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], 0x1d
jl 0x1002ceb3
mov dword [ebp - 0x20], 0x1df82d83
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002ccb0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x66c], 0xadf890ba
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002cc9f
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x480]
mov eax, dword [ebp - 0x28]
mov dword [esi + 4], 0x91e2
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
setne cl
imul ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1002cdaa
push 3
lea ecx, [ebp - 0x42c]
call fcn.10001ed2
push ecx
push ecx
lea eax, [ebp - 0x42c]
mov byte [ebp - 4], 0x10
push eax
push ecx
xor dl, dl
lea ecx, [ebp - 0xb8]
call fcn.100299e0
add esp, 0x10
mov dword [ebp - 0xb8], ebx
jmp 0x1002cd3a
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x5c0], ebx
inc dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], 3
jl 0x1002cd27
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [esi + 4], 0xd4b4b26d
setne al
imul eax, eax, 0xdd61
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x42c]
cmp eax, dword [ecx]
mov esi, dword [ecx + 8]
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x234]
setne cl
xor edx, edx
sub ecx, esi
cmp esi, ecx
lea ecx, [ebp - 0x42c]
setg dl
imul edx, dword [eax + 8]
mov dword [ebp - 0x5c0], edx
mov byte [ebp - 4], 0xf
call fcn.10001f55
jmp 0x1002ce6a
mov dword [ebp - 0x18], 0x60b8
cmp dword [ebp - 0x18], 0x62d5
jle 0x1002ce04
push ebx
push 0x1ff6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x3c], ebx
mov ecx, ebx
lea eax, [esi + edi]
shl eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc ebx
cmp ebx, 0x1a9f
jl 0x1002cdcf
inc esi
push 0
pop ebx
cmp esi, 0x5156
jl 0x1002cdcc
inc edi
cmp edi, 0x2ea4
jl 0x1002cdca
push 4
pop edi
mov dword [ebp - 0x60], 0x8663c10b
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x18], 0x600e
jge 0x1002ce48
mov edx, str.etlim_gqgopxabw_apz_fuitp_vlmqg_tpcjy_mxmup_mpgkf_gtzkznago_pzlqdffr
mov ecx, 0x10080838
call fcn.10013913
jmp 0x1002ce48
push ecx
push ecx
mov dword [ebp - 4], 0xf
lea edx, [ebp - 0x310]
push ebx
mov dword [ebp - 0x310], 0x204
call fcn.10029b1d
add esp, 0xc
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], ebx
jl 0x1002ceab
mov dword [ebp - 0x20], ebx
jmp 0x1002cea0
lea eax, [ebp - 0x9f]
mov byte [ebp - 0x9f], bl
push eax
push ecx
push 0x26f4
mov dl, 1
mov ecx, 0x53c0
call fcn.100280f6
add esp, 0xc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1002ce7b
dec dword [ebp - 0x1c]
jns 0x1002ce76
inc dword [ebp - 0x38]
jmp 0x1002cc82
lea ecx, [ebp - 0x234]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x480]
call fcn.10001f55
xor esi, esi
inc esi
mov dword [ebp - 0x30], esi
push edi
lea ecx, [ebp - 0x50c]
call fcn.10001ed2
push ecx
push 0x4ce2
push ecx
lea eax, [ebp - 0x4ec]
mov dword [ebp - 4], 0x13
push eax
push ebx
push ecx
mov dword [ebp - 0x18], ebx
lea edx, [ebp - 0x50c]
mov ecx, 0x1876
call fcn.1002aeea
mov dword [ebp - 0x18], 3
add esp, 0x18
cmp dword [ebp - 0x18], ebx
jl 0x1002cf3d
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002cf38
push ecx
push ecx
push 0x5726
push ecx
mov dl, 1
mov ecx, 0x675a
call fcn.100299e0
add esp, 0x10
dec dword [ebp - 0x18]
jns 0x1002cf18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50c]
call fcn.10001f55
mov edi, dword [ebp - 0xf0]
xor ecx, ecx
inc ecx
mov al, byte [esi + edi]
mov byte [ebp - 0x61], al
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x1c], ebx
jmp 0x1002cf78
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x318], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002cf67
cmp dword [ebp - 0x20], ebx
jne 0x1002cfd8
mov eax, dword [ebp - 0x20]
xor edx, edx
mov esi, dword [ebp - 0x20]
mov dword [ebp - 0x318], esi
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp esi, ecx
mov ecx, 0x8cc3837a
setle al
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
imul eax, ecx, 0x9683
xor ecx, ecx
inc ecx
cmp eax, dword [ebp - 0x20]
mov eax, ebx
jne 0x1002cfda
mov eax, ecx
cmp eax, dword [ebp - 0x20]
jne 0x1002d006
push ecx
push ecx
push 0x20c4
push ecx
lea edx, [ebp - 0x320]
mov dword [ebp - 0x320], 0x1510afbd
mov ecx, 0x421b
call fcn.10029a40
add esp, 0x10
jmp 0x1002d01f
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002d01f
push ecx
push ecx
push ecx
mov edx, 0x700a
call fcn.10029b1d
add esp, 0xc
mov eax, dword [ebp - 0x30]
cdq
idiv dword [ebp - 0x138]
mov cl, byte [ebp - 0x61]
mov esi, edx
mov dl, byte [ebp - 0x49]
call fcn.100307e4
mov ecx, dword [ebp - 0x114]
mov dl, byte [esi + ecx]
mov cl, al
call fcn.100307e4
mov esi, dword [ebp - 0x30]
lea edx, [ebp - 0x71]
push 0x5745
push 0x137e
push ecx
mov byte [esi + edi], al
mov dword [ebp - 0x60], 0xfffffffe
push 1
mov byte [ebp - 0x71], bl
call fcn.10029cc5
pop ecx
pop ecx
push 1
mov ecx, 0x72c6
call fcn.1002807a
add esp, 0xc
lea ecx, [ebp - 0x61]
xor eax, eax
mov edx, 0x34bf
inc eax
push 0x7449
push 0x460f
push eax
push 0x5a0d
push ecx
push ecx
lea ecx, [ebp - 0x49]
push ecx
push ecx
push 0x49fd
push 0x6eff
push eax
push 0x4655
push 0x5982
push ebx
push 0x599a
push 0x69da
push ecx
mov ecx, 0xed5
call fcn.10028fde
add esp, 0x44
inc esi
mov dword [ebp - 0x30], esi
push 4
pop edi
cmp esi, edi
jl 0x1002ced3
mov dword [ebp - 0x28], 0x4a1a
cmp dword [ebp - 0x28], 0x4bf4
jle 0x1002d114
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0x4628
jl 0x1002d0ef
inc esi
cmp esi, 0xf5b
jl 0x1002d0ed
mov eax, 0x256915a
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x328], eax
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x28], 0x473b
jge 0x1002d150
mov edx, str.eattwjtpo_zzioc_cep_aeoysww_dihnt_srwriokcm_pez_owtrayfi_pgcuyxae_phuk_ynqqbcd_kbh_krqtzfck_ccpdqpwhj
mov ecx, 0x10080838
call fcn.10013913
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
push 0xa
pop edi
mov dword [ebp - 0x1c], ebx
jmp 0x1002d195
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x62c], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002d184
lea eax, [ebp - 0x8a]
mov byte [ebp - 0x8a], bl
push eax
push ecx
push 0x277a
push 0x70fb
push 0x82
push ebx
push ebx
mov edx, 0x7462
mov ecx, 0x5493
call fcn.1002abf1
add esp, 0x1c
push 2
pop esi
mov dword [ebp - 0x32c], esi
cmp dword [ebp - 0x32c], ebx
jl 0x1002d207
push 0x508f
lea eax, [ebp - 0x96]
mov byte [ebp - 0x96], bl
push eax
xor eax, eax
inc eax
push eax
mov dl, al
mov cl, al
call fcn.10029d1f
add esp, 0xc
dec dword [ebp - 0x32c]
jns 0x1002d1dd
mov eax, dword [ebp - 0xf0]
mov eax, dword [eax]
mov dword [ebp - 0x1a0], eax
test eax, eax
jle 0x1002f2ac
cmp eax, 0x2682
jae 0x1002f2ac
lea eax, [ebp - 0x49]
push eax
push 0x5eb0
push ecx
lea eax, [ebp - 0x114]
push eax
push 0x3648
push 0x3380
push 0x673b
lea eax, [ebp - 0x1a0]
push eax
push 0x1d9c
push ecx
push ebx
push ecx
push 0xf05
push 0x1320
push ecx
lea eax, [ebp - 0x138]
push 0x5be6
push eax
lea edx, [ebp - 0x2d0]
lea ecx, [ebp - 0xf0]
call fcn.1002acf5
add esp, 0x44
xor eax, eax
inc eax
mov ecx, 0x9e8
mov dl, al
push 0x2b4a
push 0x3133
push ebx
push 0x210f
push 0x62e7
push 0x58ee
push 0x6e4f
push eax
push 0x992
push 0x3ff1
push 0xb37
push 0x2cd6
call fcn.1002b265
mov eax, dword [0x1009d4fc]
add esp, 0x30
mov ecx, 0x1009d4fc
push dword [eax + 4]
call fcn.1001b116
mov eax, dword [0x1009d4fc]
mov edx, 0x6cb2
push 0xb5d
push 0x176a
push 0x6402
mov dword [eax + 4], eax
mov eax, dword [0x1009d4fc]
push ebx
push 0x2637
push 0x689
mov dword [eax], eax
mov eax, dword [0x1009d4fc]
mov dword [eax + 8], eax
xor eax, eax
mov dword [0x1009d500], ebx
inc eax
mov dword [ebp - 0x20], 0xfffffffc
mov cl, al
mov dword [ebp - 0x18], 0x9593
mov dword [ebp - 0xb0], 0x9a023703
push eax
call fcn.1002a736
add esp, 0x1c
mov dword [ebp - 0x20], ebx
jmp 0x1002d46a
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], 0x13
jmp 0x1002d45d
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x3c], 0xafb5
mov dword [ebp - 0x28], 0x1aa12afd
mov dword [ebp - 0x30], 0x9da9
mov dword [ebp - 0x28], 0xebbf
mov dword [ebp - 0x38], ebx
jmp 0x1002d393
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x398], 0xdb34e6d4
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
jl 0x1002d382
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x1002d457
xor edx, edx
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x28], 8
imul eax, dword [ebp - 0x24], 0xfffffffc
test eax, eax
je 0x1002d3c1
mov esi, edx
cmp dword [ebp - 0x18], ebx
jne 0x1002d3c3
mov esi, ebx
mov eax, dword [ebp - 0x394]
xor ecx, ecx
cmp eax, esi
setg cl
cmp ecx, dword [ebp - 0x3c]
jle 0x1002d3e1
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x398], ebx
jne 0x1002d3e3
mov edx, ebx
mov dword [ebp - 0x28], edx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + eax*4 - 0x398]
mov eax, dword [ebp - 0x28]
test eax, eax
setns cl
cmp ecx, edx
jl 0x1002d408
cmp dword [ebp - 0x1c], ebx
je 0x1002d408
xor esi, esi
inc esi
jmp 0x1002d40a
mov esi, ebx
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x398]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, esi
setg al
xor edx, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb0]
cmp ecx, eax
setge dl
cmp edx, 1
sbb eax, eax
neg eax
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x24]
jns 0x1002d3a5
push 2
pop esi
mov dword [ebp - 0x28], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x19
je 0x1002d35a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
je 0x1002d344
mov eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0x368]
add eax, 4
mov dword [ebp - 0xb4], ebx
push 1
mov dword [ebp - 0xb0], eax
call fcn.10001ed2
push ecx
lea eax, [ebp - 0x368]
mov dword [ebp - 4], 0x16
push eax
push ecx
push ecx
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x514]
mov dword [ebp - 0x3c], 0xe469
mov edx, 0x177
push ebx
call fcn.10028e6c
add esp, 0xc
mov byte [ebp - 0x79], bl
mov dl, 1
lea ecx, [ebp - 0x79]
call fcn.1002ab26
mov dword [ebp - 0x20], ebx
pop ecx
pop ecx
cmp dword [ebp - 0x20], ebx
jg 0x1002d5a4
mov dword [ebp - 0x24], 0x1fe77dd6
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1002d595
mov dword [ebp - 0x34], 0x8f3d4210
mov dword [ebp - 0x34], ebx
jmp 0x1002d544
xor eax, eax
mov dword [ebp - 0x218], 0x9cf30836
inc eax
lea ecx, [ebp - 0x218]
push eax
push 0x299b
push 0x6228
push 0x52d1
push ecx
push 0x1291
push 0x6b99
push eax
lea edx, [ebp - 0x368]
mov cl, al
call fcn.10029ebe
add esp, 0x20
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x1002d502
cmp dword [ebp - 0x24], ebx
je 0x1002d57f
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x368]
mov eax, dword [ebp - 0x34]
cmp dword [edx + esi*4], eax
setne cl
cmp ecx, 0x36d0
jl 0x1002d573
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24], 0xa1dd
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x24]
jns 0x1002d4f6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1002d4e0
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x368]
call fcn.10001f55
push 0x520d
xor eax, eax
xor dl, dl
inc eax
mov ecx, 0x445f
push eax
push 0x7fa1
push 0x2e9a
push eax
call fcn.1002a25b
add esp, 0x14
xor ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0xf0ddd9cd
push 6
pop edx
mov dword [ebp - 0x200], edx
mov dword [ebp - 0x1fc], edx
mov dword [ebp - 0x1f8], edx
mov dword [ebp - 0x1f4], edx
mov dword [ebp - 0x34], 0xffffffe6
jmp 0x1002d6e7
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], 0xdc1b6eab
mov dword [ebp - 0x20], ebx
jmp 0x1002d631
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x160], 0x951ad386
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002d620
mov dword [ebp - 0x20], ebx
jmp 0x1002d648
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5b4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002d63b
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1002d6a6
mov dword [ebp - 0x28], 0xfa51669
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x160]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x28], 0xa0d7
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5ac], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffffa
dec dword [ebp - 0x1c]
jns 0x1002d656
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], esi
jg 0x1002d6e4
lea eax, [ebp - 0x92]
mov byte [ebp - 0x92], bl
push eax
push ecx
push 0x4848
push 0x1467
mov dl, cl
mov ecx, 0x366d
push ebx
call fcn.1002b745
add esp, 0x14
inc dword [ebp - 0x38]
push 1
pop ecx
cmp dword [ebp - 0x38], esi
jle 0x1002d6ae
push 6
pop edx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffff2
jg 0x1002d60a
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
je 0x1002d752
mov eax, dword [ebp - 0x24]
sub eax, 3
jne 0x1002d71d
mov ecx, dword [ebp - 0x200]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x1f8]
jne 0x1002d71d
mov edx, ebx
jmp 0x1002d720
xor edx, edx
inc edx
mov eax, dword [ebp - 0x200]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1f8]
setle cl
cmp ecx, 0x88ff7673
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
cmp ecx, 0x7e12fd89
jge 0x1002d752
xor edx, edx
inc edx
mov esi, edx
jmp 0x1002d757
xor edx, edx
mov esi, ebx
inc edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp esi, eax
setge cl
add ecx, dword [ebp - 0x200]
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x84], bl
mov dword [ebp - 0x83], 0x943402f6
mov dword [ebp - 0x1c], 0x9bf39019
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002d7a4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x128], 3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002d793
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x1c]
jge 0x1002d8e1
mov dword [ebp - 0x20], 0x5898f01b
lea ecx, [ebp - 0x35c]
mov dword [ebp - 0x18], edx
push 4
call fcn.10001ed2
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x1c], ebx
jmp 0x1002d7f6
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x35c]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002d7e3
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], ebx
jne 0x1002d814
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1c]
jge 0x1002d814
mov esi, ebx
jmp 0x1002d817
xor esi, esi
inc esi
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20], 0x889e
test eax, eax
je 0x1002d82f
cmp dword [ebp - 0x20], ebx
je 0x1002d82f
xor ecx, ecx
inc ecx
jmp 0x1002d831
mov ecx, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0xef703c57
jbe 0x1002d850
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], esi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x35c]
cmp dword [ebp - 0x124], 0xcadfb1af
mov dword [eax + 8], ecx
sbb eax, eax
neg eax
xor edx, edx
mov dword [ebp - 0x34], eax
inc edx
mov dword [ebp - 0x24], ebx
jmp 0x1002d8d1
mov dword [ebp - 0x20], ebx
jmp 0x1002d89c
mov dword [ebp - 0x34], ebx
jmp 0x1002d893
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x128], 0xe3f36a5b
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x1002d882
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1002d87d
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x128]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x128]
cmp eax, 0x631c
mov eax, dword [ebp - 0x35c]
setle cl
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jle 0x1002d878
lea ecx, [ebp - 0x35c]
jmp 0x1002da21
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x244]
mov dword [ebp - 0x60], 0xfffffffc
mov dword [ebp - 0x28], 0x9978317d
push edx
call fcn.10001ed2
push 0x7986
push 0x5ea0
push ebx
xor eax, eax
mov dword [ebp - 4], 0x17
inc eax
lea edx, [ebp - 0x244]
push eax
push 0xd53
push eax
lea eax, [ebp - 0x534]
mov ecx, 0x4423
push 0x6cc6
push eax
call fcn.1002baf6
add esp, 0x20
mov dword [ebp - 0x34], 0x11
jmp 0x1002d9f4
mov dword [ebp - 0x18], 0x8e12b6a3
xor ecx, ecx
inc ecx
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x340], ecx
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x338], ecx
dec dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x124], ebx
je 0x1002d983
cmp dword [ebp - 0x340], ebx
jne 0x1002d985
mov ecx, ebx
mov eax, dword [ebp - 0x244]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x18]
setg dl
sub edx, 0xebda
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x128]
setl cl
sub ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x34]
je 0x1002d9cc
mov eax, dword [ebp - 0x244]
cmp dword [eax], ebx
jne 0x1002d9cc
mov eax, ebx
jmp 0x1002d9cf
xor eax, eax
inc eax
mov dword [ebp - 0x28], ebx
xor edx, edx
mov ecx, dword [ebp - 0x28]
imul ecx, eax
mov eax, dword [ebp - 0x244]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x338]
setg dl
imul eax, edx
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x13
je 0x1002d945
sub esp, 0xc
push 0x1d2e
push ecx
push ecx
push 0x44f
push 1
call fcn.1002a03e
add esp, 0x20
lea ecx, [ebp - 0x244]
or dword [ebp - 4], 0xffffffff
call fcn.10001f55
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002da3d
push 1
push 0x37bd
call fcn.10028e3a
pop ecx
pop ecx
mov word [ebp - 0xe0], di
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x24], 0x7bc35240
mov dword [ebp - 0x1c], ebx
jmp 0x1002da6b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x10c], 0x2afe01bd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1002da5a
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 0xb
je 0x1002de20
mov dword [ebp - 0x34], 0xe8c9f369
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x28], 0x5104
cmp dword [ebp - 0x28], 0x5157
jle 0x1002dad4
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10080838
and eax, esi
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0x2288
jl 0x1002daa0
inc esi
cmp esi, 0x7d93
jl 0x1002da9e
push 0x1c0e
push 0x21f4
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x28], 0x4fa7
jge 0x1002daf6
mov edx, str.pem_mwwhmsijy_gwvzia_clnfkdrrz_thh_fumpu_honnez_idos
mov ecx, 0x10080838
call fcn.10013913
or dword [ebp - 4], 0xffffffff
xor eax, eax
inc eax
push eax
push 0x1ccd
mov edx, 0x29da
call fcn.1002a16a
mov dword [ebp - 0x34], 3
pop ecx
pop ecx
cmp dword [ebp - 0x34], ebx
jl 0x1002de18
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x10c], 0xffffffff
jne 0x1002db78
cmp dword [ebp - 0x108], ebx
je 0x1002db78
xor edx, edx
inc edx
jmp 0x1002db7a
mov edx, ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0xc6076fda
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x24]
imul ecx, edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setle dl
sub eax, edx
je 0x1002dbae
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x108]
cmp eax, ecx
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x38]
setne dl
add eax, edx
add ecx, eax
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
inc edx
cmp ecx, edx
jb 0x1002dd8d
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x18], 0x6ac6dea2
mov dword [ebp - 0x18], 0xea3fee22
mov dword [ebp - 0x20], ebx
jmp 0x1002dd7e
push 4
lea ecx, [ebp - 0x444]
call fcn.10001ed2
push 0x6e89
push 0x261f
xor eax, eax
mov dword [ebp - 4], 0x1a
inc eax
lea ecx, [ebp - 0x444]
push eax
push 0x3917
push ecx
push 0x7bb8
push 0x5736
lea ecx, [ebp - 0x13c]
mov edx, 0x1ee2
push ecx
push eax
push ebx
mov ecx, 0x4003
call fcn.1002b545
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov edx, dword [ebp - 0x100]
add esp, 0x28
mov eax, dword [ebp - 0x104]
imul edx, eax
mov eax, dword [ebp - 0x3c]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x10c]
test eax, eax
sete cl
sub ecx, edx
sub ecx, 4
cmp ecx, dword [ebp - 0x10c]
jle 0x1002dca5
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x10c]
test eax, eax
mov esi, dword [ebp - 0x444]
sete cl
mov dword [esi + 8], ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
cmp dword [esi + 8], ebx
je 0x1002dd60
cmp dword [ebp - 0x30], ebx
je 0x1002dd3f
mov eax, dword [ebp - 0x34]
xor edx, edx
imul eax, dword [esi + 8]
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0x64b
setne al
cmp eax, 0xffffffff
jge 0x1002dd1c
cmp dword [ebp - 0x28], ebx
jne 0x1002dd1e
mov edx, ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
imul eax, edx
test eax, eax
je 0x1002dd39
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [esi + 8], ebx
setg al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x1002dd60
mov eax, ebx
jmp 0x1002dd63
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x444]
mov eax, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
mov dword [esi + 8], eax
call fcn.10001f55
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1002dbf7
jmp 0x1002de0f
mov dword [ebp - 0x28], 0x9edd65e7
mov dword [ebp - 0x30], ebx
jmp 0x1002dda6
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x5dc], edx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x1002dd99
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x28], ebx
je 0x1002ddca
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
cmp dword [ebp - 0x28], 0xda3982ae
je 0x1002dde4
cmp dword [ebp - 0x38], ebx
jne 0x1002dde4
mov edx, ebx
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [ebp - 0x18]
inc eax
sub ecx, eax
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
imul eax, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x10c]
add eax, 0xfffffff9
add eax, ecx
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x34]
jns 0x1002db1f
inc dword [ebp - 0x1c]
jmp 0x1002da74
push 2
pop edi
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x30], edi
cmp edi, 5
jae 0x1002e411
push 2
lea ecx, [ebp - 0x4b0]
call fcn.10001ed2
mov dword [ebp - 4], 0x1b
lea eax, [ebp - 0x578]
push dword [ebp - 0x13c]
movdqa xmm0, xmmword [0x10072fa0]
lea ecx, [ebp - 0x254]
push eax
lea eax, [ebp - 0x588]
mov dword [ebp - 0x254], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x588], xmm0
mov dword [ebp - 0x250], ebx
mov dword [ebp - 0x24c], ebx
call fcn.10001fbb
lea eax, [ebp - 0x4b0]
mov byte [ebp - 4], 0x1c
push eax
push ecx
lea edx, [ebp - 0xc0]
call fcn.1002839a
pop ecx
pop ecx
push 2
mov dword [ebp - 0xc0], ebx
pop esi
jmp 0x1002dec6
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x3dc], 0x29207965
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], esi
jl 0x1002deaf
push 0xbac
push 0x7580
push 0x47b1
push 1
push 0x781
push ebx
push 0x2218
lea eax, [ebp - 0x254]
mov edx, 0x529
push eax
push 0x3de
push 0x76f1
push 0x6165
push 0x3fb0
push 0xe03
push 0x3809
push 0x725e
lea eax, [ebp - 0x4b0]
xor cl, cl
push eax
push 0x52
push 0x4099
call fcn.10029779
add esp, 0x48
lea ecx, [ebp - 0x254]
dec dword [ebp - 0x3d8]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b0]
call fcn.10001f55
movzx eax, byte [ebp - 0x84]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x1002e017
push esi
lea ecx, [ebp - 0x3fc]
call fcn.10001ed2
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x228], 0x833fcb50
mov dword [ebp - 0x18], ebx
jmp 0x1002df98
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3fc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002df89
lea eax, [ebp - 0x228]
push eax
push ecx
push ecx
lea eax, [ebp - 0x3fc]
mov cl, 1
push eax
call fcn.1002a1bd
add esp, 0xc
mov edx, 0x40ff
push 0x36e6
push ecx
push 1
call fcn.1002a217
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3fc]
add esp, 0x10
call fcn.10001f55
movzx esi, byte [ebp + edi - 0x84]
mov ecx, 0x23a2
push 0x2acf
lea eax, [esi + 1]
mov dword [ebp - 0x150], eax
xor eax, eax
inc eax
push eax
push 0x594c
push 0x2d92
push eax
mov dl, al
call fcn.1002a25b
dec edi
add esp, 0x14
add edi, esi
jmp 0x1002e409
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x28], 0xfffb
mov dword [ebp - 0x48], 0x83398963
mov dword [ebp - 0x18], ebx
jmp 0x1002e041
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2a0], 0xcff0ea75
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002e030
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ecx
jg 0x1002e133
push 0xfffffffffffffff9
pop edi
push dword [ebp - 0x13c]
movdqa xmm0, xmmword [0x10072fb0]
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x598]
mov dword [ebp - 0x1c8], ebx
push eax
push ebx
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x1c4], ebx
movdqu xmmword [ebp - 0x598], xmm0
mov dword [ebp - 0x1c0], ebx
call fcn.10001fbb
mov esi, dword [ebp - 0x1c8]
mov dword [ebp - 0x18], 0x360de574
cmp dword [esi + 8], ebx
jne 0x1002e0b2
cmp dword [ebp - 0x28], ebx
jne 0x1002e0b2
mov eax, ebx
jmp 0x1002e0b5
xor eax, eax
inc eax
cmp edi, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x1c8]
setne cl
xor edx, edx
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0x29c]
setle dl
xor ecx, ecx
test edx, edx
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x1c8]
setge dl
sub edx, eax
sub edx, 0xeb32
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x29c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2a0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
sub eax, dword [esi + 8]
mov dword [ebp - 0x48], eax
call fcn.10001f55
inc dword [ebp - 0x1c]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jle 0x1002e055
mov edi, dword [ebp - 0x30]
push ecx
lea eax, [ebp - 0x7b]
mov byte [ebp - 0x7b], bl
push 0x69e0
mov dl, cl
xor cl, cl
push eax
call fcn.1002b8ee
movzx edx, byte [ebp + edi - 0x83]
mov eax, edi
sub eax, dword [ebp - 0x150]
add esp, 0xc
movzx eax, byte [ebp + eax - 0x86]
push 4
movzx ecx, word [ebp + eax*2 - 0xe0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x84]
add ecx, edx
mov word [ebp + eax*2 - 0xe0], cx
lea ecx, [ebp - 0x3a4]
call fcn.10001ed2
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x5c], ebx
jmp 0x1002e1c1
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x608], 0xec2e0cf5
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 3
jl 0x1002e1b0
lea eax, [ebp - 0x3a4]
mov edx, 0x19de
push eax
push ebx
lea eax, [ebp - 0x5c]
push eax
xor eax, eax
inc eax
push eax
mov cl, al
call fcn.10029627
add esp, 0x10
mov dword [ebp - 0x5c], ebx
jmp 0x1002e1fc
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x4e8], 1
inc dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], 2
jl 0x1002e1eb
mov eax, dword [ebp - 0x3a4]
add eax, 0xc
mov dword [eax], ebx
cmp dword [eax], 2
jg 0x1002e378
push dword [ebp - 0x13c]
movdqa xmm0, xmmword [0x10072f80]
lea eax, [ebp - 0x558]
push eax
lea eax, [ebp - 0x568]
mov dword [ebp - 0x60], 0xfffffff8
push eax
mov dword [ebp - 0x60], ebx
lea ecx, [ebp - 0x38c]
mov dword [ebp - 0x60], 2
push ebx
movdqu xmmword [ebp - 0x568], xmm0
mov dword [ebp - 0x38c], ebx
mov dword [ebp - 0x388], ebx
mov dword [ebp - 0x384], ebx
call fcn.10001fbb
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x60], 0xfffffffc
mov dword [ebp - 0x24], 0x1d14
cmp dword [ebp - 0x24], 0x2060
jle 0x1002e2ed
mov dword [ebp - 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x1c], 0xc7e
mov dword [ebp - 0x18], eax
mov esi, ebx
mov ecx, ebx
mov edi, 0x287c
mov dword [ebp - 0x28], ecx
shl eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
add ecx, esi
mov dword [ebp - 0x28], ecx
dec edi
jne 0x1002e29f
inc esi
cmp esi, 0x4d29
jl 0x1002e295
mov edi, dword [ebp - 0x38]
add eax, edi
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jne 0x1002e293
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x42ed
jl 0x1002e287
push ebx
push 0x9fd
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov edi, dword [ebp - 0x30]
xor eax, eax
inc eax
mov dword [ebp - 0x2e0], eax
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x24], 0x1be6
jge 0x1002e339
mov edx, str.rbawax_karxepsjk_wwztjdqs_bvnxf_uirffx
mov ecx, 0x10080838
call fcn.10013913
xor eax, eax
inc eax
jmp 0x1002e339
push eax
lea ecx, [ebp - 0x2e0]
mov dword [ebp - 4], 0x1f
push 0x3cb4
push ecx
mov dl, al
xor cl, cl
call fcn.10029329
add esp, 0xc
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x38c]
call fcn.10001f55
mov eax, dword [ebp - 0x3a4]
add eax, 0xc
inc dword [eax]
jmp 0x1002e20d
mov dword [ebp - 0x18], 0xffffffe5
jmp 0x1002e3df
push 2
lea ecx, [ebp - 0x408]
call fcn.10001ed2
xor eax, eax
lea ecx, [ebp - 0x500]
inc eax
lea edx, [ebp - 0x408]
push eax
push eax
push ecx
mov dword [ebp - 0x48], eax
mov cl, al
call fcn.1002a3db
mov eax, dword [ebp - 0x48]
add esp, 0xc
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4e4]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x408]
xor eax, eax
cmp dword [ecx + 4], 0x5367
setne al
mov dword [ecx + 4], eax
lea ecx, [ebp - 0x408]
call fcn.10001f55
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
jle 0x1002e381
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a4]
call fcn.10001f55
push 0x375f
push ecx
xor dl, dl
lea ecx, [ebp - 0x150]
call fcn.1002951a
pop ecx
pop ecx
add edi, 2
jmp 0x1002de29
mov dword [ebp - 0x44], 0xd2edc755
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x18], 0x50b5f0b1
mov dword [ebp - 0xec], 1
push 3
call fcn.10001ed2
push ecx
lea eax, [ebp - 0x1d4]
mov dword [ebp - 4], 0x22
push eax
lea eax, [ebp - 0x4e0]
mov dword [ebp - 0x54], 5
push 1
mov dword [ebp - 0x28], 0x4adca1a1
mov dword [ebp - 0x48], ebx
push eax
call fcn.1002afd4
mov eax, dword [ebp - 0x44]
add esp, 0x10
imul eax, dword [ebp - 0x44], 0xb0bb
test eax, eax
jne 0x1002e47e
cmp dword [ebp - 0x44], ebx
jne 0x1002e47e
mov ecx, ebx
jmp 0x1002e481
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x44]
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x44]
add eax, ecx
mov dword [ebp - 0xec], eax
mov esi, dword [ebp - 0xec]
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x18]
mov dword [eax + 8], esi
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setge dl
sub edx, esi
imul eax, edx, 0xffff
cmp dword [ebp - 0x44], eax
jl 0x1002e4ca
cmp dword [ebp - 0xec], ebx
jne 0x1002e4ca
xor edx, edx
mov esi, ebx
inc edx
jmp 0x1002e4cf
xor edx, edx
inc edx
mov esi, edx
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp esi, eax
sete cl
cmp edx, ecx
sbb eax, eax
neg eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x1002e5f7
mov dword [ebp - 0x1c], ebx
mov eax, 0x98962600
mov dword [ebp - 0x28], 0xaee51190
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], eax
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x54], ebx
jmp 0x1002e566
mov dword [ebp - 0x44], 0xffffffed
jmp 0x1002e55e
push ecx
push edx
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x44]
push eax
call fcn.10028b57
add esp, 8
mov byte [ebp - 0x9e], bl
lea eax, [ebp - 0x9e]
push eax
push 1
push ecx
mov ecx, 0x3b8d
call fcn.1002b95f
add esp, 0x14
xor edx, edx
inc dword [ebp - 0x44]
inc edx
cmp dword [ebp - 0x44], edx
jne 0x1002e526
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0xa
jl 0x1002e51d
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
add edx, 0xcf71
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x264], ebx
je 0x1002e5ae
mov eax, dword [ebp - 0x270]
mov eax, dword [ebp - 0x1d4]
xor edx, edx
mov eax, dword [eax + 4]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x1d4]
setge dl
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x264], ebx
jne 0x1002e5e4
cmp dword [ebp - 0x44], ebx
jne 0x1002e5e4
mov ecx, ebx
jmp 0x1002e5e7
xor ecx, ecx
inc ecx
xor eax, eax
inc eax
sub eax, ecx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
jmp 0x1002e63d
push 0x685d
push 0x6d50
push edx
lea eax, [ebp - 0xec]
mov dword [ebp - 0x238], 0xd232
push eax
push edx
push edx
lea edx, [ebp - 0x54]
mov ecx, 0x71aa
call fcn.1002a457
pop ecx
push 1
lea eax, [ebp - 0x44]
push eax
push ecx
push 0x7662
lea ecx, [ebp - 0x238]
call fcn.1002a67c
add esp, 0x24
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x454], 7
mov word [ebp - 0xde], ax
lea ecx, [ebp - 0x468]
mov word [ebp - 0x468], ax
lea eax, [ebp - 0xe0]
push eax
mov dword [ebp - 0x458], ebx
call fcn.100194c0
push 8
pop esi
cmp dword [ebp - 0x454], esi
lea eax, [ebp - 0x468]
push ebx
cmovae eax, dword [ebp - 0x468]
lea ecx, [ebp - 0x468]
push 1
movzx eax, word [eax]
mov dword [ebp - 0x298], eax
call fcn.10011831
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0xd0], 0x12
jmp 0x1002e787
push 0x62f3
push 0xee7
lea eax, [ebp - 0xd0]
mov dword [ebp - 0xc8], 0x1c97412d
push eax
xor eax, eax
lea edx, [ebp - 0xc8]
inc eax
push eax
push 0x27d1
push 0x5836
push eax
mov cl, al
call fcn.1002a736
add esp, 0x1c
mov dword [ebp - 0xc8], 0x17
cmp dword [ebp - 0xc8], 0x2c
jg 0x1002e781
push 4
pop ecx
mov dword [ebp - 0x20], ebx
jmp 0x1002e72a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5fc], 0xfffffffc
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002e719
mov dword [ebp - 0x20], ebx
jmp 0x1002e745
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e0], 0x59310c13
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002e734
mov dword [ebp - 0x1d8], ebx
jmp 0x1002e76a
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x5fc], 1
inc dword [ebp - 0x1d8]
cmp dword [ebp - 0x1d8], ecx
jl 0x1002e753
inc dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], 0x2c
jle 0x1002e714
inc dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], 0x14
je 0x1002e6c4
mov edi, ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x24], 0x15912491
mov dword [ebp - 0x30], 0x9c9fb37b
mov dword [ebp - 0xd4], 0xfffffffb
mov dword [ebp - 0x48], 0x1c91
cmp dword [ebp - 0x48], 0x9d8
jge 0x1002e8a1
lea eax, [ebp - 0x188]
push eax
push 0x1006ffb8
call fcn.1004df5b
xor eax, eax
inc eax
mov edi, eax
mov dword [ebp - 0x30], eax
pop ecx
pop ecx
cmp dword [ebp - 0x188], eax
jl 0x1002e89e
lea eax, [ebp - 0x12c]
push eax
push 0x1006ffb8
call fcn.1004df5b
cmp dword [ebp - 0x12c], 0
pop ecx
pop ecx
mov byte [ebp - 0x28], bl
mov dword [ebp - 0x48], ebx
jle 0x1002e842
mov esi, 0x1009bdc0
mov edi, ebx
push esi
push 0x1006ffb8
call fcn.1004df5b
cmp dword [esi], ebx
pop ecx
pop ecx
mov ecx, dword [ebp - 0x28]
push 1
movzx ecx, cl
pop eax
cmove ecx, eax
inc edi
add esi, 4
mov dword [ebp - 0x28], ecx
cmp edi, dword [ebp - 0x12c]
jl 0x1002e815
mov edi, dword [ebp - 0x30]
push 0x1a440
push 0xffffffffffffffff
push 0x10081980
call fcn.10045ff0
mov ecx, dword [ebp - 0x12c]
add esp, 0xc
mov edx, 0xa4
lea ecx, [ecx - 1]
call fcn.1002bce9
test eax, eax
jne 0x1002e877
cmp byte [ebp - 0x28], al
jne 0x1002e877
or eax, 0xffffffff
jmp 0x1002e87c
cdq
sub eax, edx
sar eax, 1
push eax
push edi
push str.Case__d:__d_n
call fcn.1004e245
add esp, 0xc
inc edi
mov dword [ebp - 0x30], edi
cmp edi, dword [ebp - 0x188]
jle 0x1002e7ec
push 8
pop esi
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x1b8], esi
lea ecx, [ebp - 0x3bc]
mov dword [ebp - 0x1b4], esi
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1ac], esi
push 3
call fcn.10001ed2
lea eax, [ebp - 0xac]
mov dword [ebp - 4], 0x23
push eax
push ebx
push 0x24ef
lea eax, [ebp - 0x3bc]
mov dword [ebp - 0x1c], 0xe56e
push eax
xor eax, eax
mov dword [ebp - 0x30], 0xffffffff
inc eax
mov dword [ebp - 0x18], 0xcc73ee49
mov dword [ebp - 0x20], 0x5dbf
mov dl, al
mov dword [ebp - 0x38], esi
mov ecx, 0x2c12
push eax
call fcn.1002a25b
add esp, 0x14
mov dword [ebp - 0xac], ebx
jmp 0x1002e932
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x5ec], 0x91f28f68
inc dword [ebp - 0xac]
cmp dword [ebp - 0xac], 4
jl 0x1002e91b
cmp dword [ebp - 0x24], ebx
je 0x1002e999
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0xd4], ecx
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x1b0]
cmp eax, dword [ebp - 0x1b0]
jge 0x1002e981
mov eax, dword [ebp - 0x3bc]
cmp dword [eax + 4], ebx
je 0x1002e981
xor edx, edx
inc edx
jmp 0x1002e983
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, 3
sbb eax, eax
neg eax
cmp eax, 7
jae 0x1002e9a3
cmp dword [ebp - 0x30], ebx
je 0x1002e9a3
xor esi, esi
inc esi
jmp 0x1002e9a5
mov esi, ebx
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
xor eax, eax
cmp esi, 0x4b4b26d8
mov dword [ebp - 0x30], edx
setge al
xor edx, edx
imul ecx, eax, 0xea3d
mov eax, dword [ebp - 0x3bc]
sub ecx, 0x1ae
cmp ecx, dword [eax + 4]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x30]
setle dl
imul ecx, edx
imul eax, ecx
xor ecx, ecx
cmp eax, 0x342b
setl cl
xor eax, eax
test ecx, ecx
setg al
inc eax
je 0x1002ea3c
push ebx
push ecx
push 0x22c1
push 0x4adf
push 0xff4
push 0x5a95
push ecx
push 0x46ee
lea edx, [ebp - 0x2e8]
mov dword [ebp - 0x2e8], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.1002889f
add esp, 0x20
jmp 0x1002ead2
push 1
lea ecx, [ebp - 0x420]
call fcn.10001ed2
mov dword [ebp - 0x20], ebx
jmp 0x1002ea5f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5cc], 0x80d0e101
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002ea4e
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x1002ea80
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x420]
mov dword [eax + ecx*4], 0xfff9752e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1002ea6d
mov dword [ebp - 0x1c], 0xfffffff0
jmp 0x1002ea9a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c8], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x21
jg 0x1002ea8e
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0x2cdf
mov eax, dword [ebp - 0x420]
setge cl
mov dword [eax], ecx
mov dword [ebp - 0x20], 0xa7c
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x1b4], ecx
lea ecx, [ebp - 0x420]
call fcn.10001f55
cmp dword [ebp - 0x1b0], ebx
jne 0x1002eb0b
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x1b0]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1b0]
cmp ecx, eax
setl dl
cmp edx, 0xffffffff
jne 0x1002eb0b
mov ecx, ebx
jmp 0x1002eb0e
xor ecx, ecx
inc ecx
inc dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xd4]
cmp ecx, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
setg dl
add ecx, edx
xor edx, edx
cmp eax, ecx
setl dl
xor ecx, ecx
cmp edx, 1
setle cl
xor eax, eax
cmp ecx, 0xffffffff
setg al
xor edx, edx
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x5ec]
mov eax, dword [ebp - 0x24]
inc eax
cmp eax, 0x572a
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
imul eax, ecx, 0xb75a
mov ecx, dword [ebp - 0x30]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0xd4], ecx
lea ecx, [ebp - 0x3bc]
or dword [ebp - 4], 0xffffffff
call fcn.10001f55
xor eax, eax
mov word [ebp + edi*2 - 0xe0], ax
inc edi
mov dword [ebp - 0x18], edi
push 8
pop esi
cmp edi, 2
jb 0x1002e799
mov dword [ebp - 0xfc], esi
lea ecx, [ebp - 0x450]
mov dword [ebp - 0x68], 9
mov dword [ebp - 0xf4], 9
push 4
call fcn.10001ed2
push ecx
push ecx
push 0x3252
push 0x1278
mov dword [ebp - 4], 0x24
lea edx, [ebp - 0x450]
push 1
push ecx
mov dword [ebp - 0x170], 0xc587c7ab
lea ecx, [ebp - 0x524]
mov dword [ebp - 0x48], 0x71b70561
call fcn.1002a88d
add esp, 0x18
lea eax, [ebp - 0x170]
mov edx, 0x21ce
push 1
push ecx
push eax
lea eax, [ebp - 0xf4]
push eax
lea eax, [ebp - 0xfc]
push eax
lea eax, [ebp - 0x450]
push eax
push ecx
lea eax, [ebp - 0x68]
mov ecx, 0x4c1f
push eax
call fcn.1002889f
add esp, 0x20
mov dword [ebp - 0x68], 0x10
jmp 0x1002ed56
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1002ec64
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x438], 0xb1495dd6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002ec53
cmp dword [ebp - 0x24], ebx
jne 0x1002ecaa
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x24]
test eax, eax
sets cl
xor eax, eax
test ecx, ecx
setg al
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x170], ebx
je 0x1002ed47
xor eax, eax
mov dword [ebp - 0x18], 0x6463
inc eax
lea ecx, [ebp - 0x94]
push ebx
push ecx
mov dword [ebp - 0x30], eax
mov dl, al
mov dword [ebp - 0x28], 0xfffffffa
mov cl, al
mov byte [ebp - 0x94], bl
push 0x23ee
call fcn.10029329
mov eax, dword [ebp - 0x28]
add esp, 0xc
mov eax, dword [ebp - 0x68]
xor ecx, ecx
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x430]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x68]
cmp eax, 0x9674
setge cl
cmp ecx, dword [ebp - 0x18]
jne 0x1002ed26
cmp dword [ebp - 0x430], ebx
je 0x1002ed26
xor ecx, ecx
inc ecx
jmp 0x1002ed28
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setge dl
xor ecx, ecx
add edx, 2
cmp edx, eax
setg cl
mov dword [ebp - 0xfc], ecx
jmp 0x1002ed53
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x68]
cmp dword [ebp - 0x68], 0xc
jle 0x1002ec47
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x450]
call fcn.10001f55
mov eax, dword [ebp - 0x1a0]
shr eax, 1
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0xb4]
inc eax
cmp eax, dword [ebp - 0x48]
jae 0x1002f2ac
mov dword [ebp - 0xcc], 0x8cff0ea7
lea edx, [ebp - 0x7a]
push 1
push ecx
mov dword [ebp - 0x1a8], 0x99d94b4b
mov dword [ebp - 0x4d4], 0xfffffff9
push ecx
mov dword [ebp - 0x204], 0xffffffff
mov ecx, 0xab4
mov byte [ebp - 0x7a], bl
call fcn.1002a8d3
add esp, 0xc
mov dword [ebp - 0xcc], ebx
jmp 0x1002ef04
xor eax, eax
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0xffffffe6
cmp dword [ebp - 0x88], 0x16
jg 0x1002ee97
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x258], 0xffffffff
push ecx
lea ecx, [ebp - 0x248]
mov dword [ebp - 0x248], 0xffffffff
push ecx
push 0x24a9
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2f0], ebx
push ecx
push eax
lea eax, [ebp - 0x258]
push eax
push ecx
push ecx
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0xcc]
push eax
push 0xc56
call fcn.1002a9c2
add esp, 0x2c
mov byte [ebp - 0x91], bl
xor eax, eax
lea ecx, [ebp - 0x91]
inc eax
mov edx, 0x163a
push 0x3ffd
push eax
push ecx
push 0x4a9c
push 0x20f3
push eax
push eax
mov ecx, 0x37de
call fcn.1002abf1
add esp, 0x1c
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 0x16
push 1
pop eax
jle 0x1002edf4
push 0x2ee1
push 0x3dc2
push 0x554
push eax
lea ecx, [ebp - 0x1a8]
mov edx, 0x6e51
push ecx
push eax
push 0x1fcd
push 0x76e0
push 0x1619
lea eax, [ebp - 0x88]
xor cl, cl
push eax
push 0x5f2d
push 0x1e51
push 0x22e3
push 0x3159
lea eax, [ebp - 0x204]
push eax
push 0x6004
push 0x7717
push 0x3071
call fcn.10029779
add esp, 0x48
dec dword [ebp - 0xcc]
cmp dword [ebp - 0xcc], 0xffffffea
jne 0x1002edd4
mov edi, dword [ebp - 0xb4]
mov esi, dword [ebp - 0xb0]
lea ecx, [esi + edi*2]
call fcn.100268b3
lea ecx, [esi + 4]
mov dword [ebp - 0xf8], eax
lea ecx, [ecx + edi*2]
call fcn.100268b3
mov esi, eax
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x24], 0xdb8e9646
lea ecx, [ebp - 0x474]
push 3
mov dword [ebp - 0x20], esi
call fcn.10001ed2
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x18], ebx
jmp 0x1002ef75
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x474]
mov dword [eax + ecx*4], 0x9ba87a5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002ef62
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, 0xfffe
setne cl
xor edx, edx
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, 6
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x474]
sub ecx, 0x63d7522
mov dword [eax], ecx
mov dword [ebp - 0x24], ebx
jmp 0x1002f01a
cmp dword [ebp - 0x24], 0xf
jle 0x1002efd5
mov dword [ebp - 0x31c], 0xe1757117
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 0x2cc], 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x25c], 0x951bb35b
inc ebx
mov dword [ebp - 0x2c4], 0xffffffff
push 4
mov dword [ebp - 0x2f4], ebx
call fcn.10001ed2
push 0x47c3
push 0x61c8
push ebx
push ebx
lea eax, [ebp - 0x510]
mov dword [ebp - 4], 0x3c
push eax
push ebx
push 0x7a47
push 0x13b7
mov edx, 0xc27
lea ecx, [ebp - 0x4bc]
call fcn.1002baf6
add esp, 0x1c
lea eax, [ebp - 0x2f4]
mov dl, bl
mov ecx, 0x6614
push eax
push 0x60f7
lea eax, [ebp - 0x2c4]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x25c]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.1002bc49
add esp, 0x20
lea ecx, [ebp - 0x4bc]
call fcn.10001f55
mov ecx, dword [ebp - 0xc]
mov eax, 0x1009d4fc
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret