Function at 0x10029230
Capabilities:
Get geographical location
Query or enumerate registry value

Disassembly:
mov eax, 0x1005876b
call fcn.100579d8
sub esp, 0x2f0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x2c], 0xa0d461e3
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10029274
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10029263
mov dword [ebp - 0x18], ebx
jmp 0x10029290
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], 7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002927f
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x100292ac
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002929e
mov dword [ebp - 0x18], ebx
jmp 0x100292c7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbc], 0xc821f997
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100292b6
mov esi, edx
cmp dword [ebp - 0x80], ebx
jne 0x100292d5
mov esi, ebx
mov eax, dword [ebp - 0x84]
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 0x84]
sete cl
add eax, ecx
mov ecx, dword [ebp - 0x80]
imul ecx, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jne 0x100292ff
cmp dword [ebp - 0x80], ebx
jne 0x100292ff
mov edx, ebx
mov eax, dword [ebp - 0x80]
lea ecx, [edx - 1]
xor edx, edx
cmp eax, ecx
setle dl
mov dword [ebp - 0x124], edx
xor edx, edx
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x80]
cmp ecx, 0xcfda
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
imul eax, ecx, 5
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x124], eax
test eax, eax
jne 0x10029363
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0x7c]
mov ecx, 0xcb0b
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x78]
sub ecx, eax
cmp dword [ebp - 0x84], ecx
jle 0x10029385
cmp dword [ebp - 0x78], ebx
je 0x10029385
xor eax, eax
inc eax
jmp 0x10029387
mov eax, ebx
xor edx, edx
cmp eax, 0x7b17b4d2
mov eax, dword [ebp - 0x78]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x78]
setle cl
xor edx, edx
add ecx, 0xdbb7a2e2
cmp ecx, eax
setge dl
mov dword [ebp - 0xbc], edx
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x34], 0xe7c14ab6
mov dword [ebp - 0x24], ebx
jmp 0x100293d4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1d4], 0x9b27fa3d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100293c3
cmp dword [ebp - 0x18], ebx
jne 0x100293f8
mov eax, dword [ebp - 0x18]
xor ecx, ecx
test eax, eax
mov eax, ebx
setg cl
imul ecx, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
je 0x100293fa
mov eax, edx
mov dword [ebp - 0x1d0], eax
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
test eax, eax
setg cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10029431
push 0x1cd4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
xor edx, edx
inc edx
push 5
pop ecx
mov word [ebp - 0x70], 0xf202
mov byte [ebp - 0x6e], cl
mov word [ebp - 0x6d], 0x603
mov byte [ebp - 0x6b], 0x30
mov byte [ebp - 0x6a], dl
mov dword [ebp - 0x69], 0x31b001b
mov word [ebp - 0x65], 0x425
mov byte [ebp - 0x63], 3
mov byte [ebp - 0x62], dl
mov byte [ebp - 0x61], 0xd
mov dword [ebp - 0x18], ebx
jmp 0x10029478
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], 0xbb2c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10029467
mov dword [ebp - 0x18], ebx
jmp 0x10029491
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0x94e8fe75
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10029483
cmp dword [ebp - 0x8c], ebx
je 0x1002955c
push 3
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], ebx
pop edi
jmp 0x100294be
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb8], 0x25260417
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x100294ad
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
mov eax, dword [ebp - 0xb8]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0xb4]
je 0x100294fe
cmp dword [ebp - 0x4c], ebx
je 0x100294fe
xor ecx, ecx
inc ecx
jmp 0x10029500
mov ecx, ebx
mov eax, dword [ebp - 0x90]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x8c]
jne 0x1002952b
cmp dword [ebp - 0xb8], ebx
jne 0x1002952b
mov edx, ebx
jmp 0x1002952e
xor edx, edx
inc edx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffff7
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4c], 0xdb370cc3
pop edx
jmp 0x100295b1
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x8c], ebx
je 0x10029587
mov eax, dword [ebp - 0x18]
sub ecx, eax
jne 0x10029571
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x18], 9
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x18]
jle 0x10029587
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
neg edx
push 0xfffffffffffffff7
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov eax, dword [ebp - 0x4c]
cmp edx, eax
pop edx
setle cl
xor eax, eax
cmp ecx, edx
push 3
setl al
mov dword [ebp - 0x4c], eax
pop edi
push 0x6f
pop eax
mov word [ebp - 0x110], ax
push 2
mov dword [ebp - 0x20], 0xd4e06482
mov dword [ebp - 0x20], ebx
pop esi
cmp dword [ebp - 0x20], 7
jg 0x10029738
mov dword [ebp - 0x18], 0xf37d45db
push 4
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x100295f1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1f0], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100295e4
mov dword [ebp - 0x18], ebx
jmp 0x1002961c
mov dword [ebp - 0x2c], 0xc9ed9ba0
mov dword [ebp - 0x2c], ebx
jmp 0x10029614
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1f0], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10029607
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100295fb
mov dword [ebp - 0x18], 0xc
cmp dword [ebp - 0x18], 0x12
je 0x1002972d
mov dword [ebp - 0x2c], 0xc97412df
mov dword [ebp - 0x2c], 0xfffffffb
jmp 0x10029671
mov dword [ebp - 0x24], ebx
jmp 0x10029658
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x194], 0xb8e9646b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10029647
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x190], ecx
mov eax, dword [ebp - 0x18]
add eax, ecx
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffd
jne 0x10029642
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10029725
mov dword [ebp - 0x44], 0xd0f
cmp dword [ebp - 0x44], 0xd78
jle 0x100296ff
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0x5bf5
xor eax, ecx
lea ecx, [ebp - 0x2b8]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100296c1
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b8]
call fcn.10009a96
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
jne 0x100296a7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp eax, 0x10c0
jl 0x1002969d
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0xe99
jl 0x10029698
push 0x199
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp dword [ebp - 0x44], 0xa11
jge 0x10029721
push str.pzfqldc_aynyyggaw_yffzr
call fcn.1003f93c
pop ecx
or dword [ebp - 4], 0xffffffff
inc dword [ebp - 0x18]
jmp 0x10029628
inc dword [ebp - 0x20]
push 0xfffffffffffffff7
pop edx
jmp 0x100295c8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1002974d
push 0xede
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
mov edx, esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], edx
cmp edx, 0x10
jae 0x10029978
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x20], 0xf
cmp dword [ebp - 0x20], 0x1d
je 0x1002979b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10029780
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1002978f
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jne 0x10029772
mov edx, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x70]
lea eax, [eax*2 + 2]
cmp edx, eax
jne 0x100298cd
movzx eax, byte [ebp + edx - 0x70]
mov dword [ebp - 0x3c], 0xe387fb0b
mov dword [ebp - 0x3c], 0x1ec2db22
mov dword [ebp - 0x3c], 0x4768c0aa
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], eax
inc eax
mov dword [ebp - 0x18], 0x5dad
cmp dword [ebp - 0x18], 0x6145
mov dword [ebp - 0x30], eax
jle 0x1002987b
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov ecx, ebx
mov dword [ebp - 0x44], ebx
cdq
idiv ecx
mov eax, dword [ebp - 0x2c]
mov ecx, edx
mov dword [ebp - 0x28], ebx
sar eax, cl
mov dword [ebp - 0x34], eax
xor eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x264]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029825
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x264]
call fcn.10009a96
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp eax, 0x5e73
mov eax, dword [ebp - 0x34]
jl 0x1002980a
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x6b26
jl 0x100297fa
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x2a7f
jl 0x100297f5
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x3edc
jl 0x100297f0
mov dword [ebp - 0x20], ebx
jmp 0x10029891
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2f8], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10029880
cmp dword [ebp - 0x18], 0x5c30
jge 0x100298ab
push str.hodifiwvw_wtx_zqczoalia_czsrkyv_vdff_yjwc_vydb
call fcn.1003f93c
pop ecx
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100298be
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edx, dword [ebp - 0x24]
dec dword [ebp - 0x38]
dec edx
add edx, dword [ebp - 0x48]
jmp 0x10029971
mov dword [ebp - 0x3c], 0x6f9b2cfb
xor ecx, ecx
mov dword [ebp - 0x3c], 0xffffffff
inc ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 0x86b6feb9
mov dword [ebp - 0x3c], 0xf4a8fe24
mov dword [ebp - 0x18], ebx
jmp 0x10029905
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x15c], 0xbcd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100298f4
mov dword [ebp - 0x18], ebx
jmp 0x1002991c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x230], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002990f
mov dword [ebp - 0x18], ebx
jmp 0x10029933
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10029926
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x30]
dec dword [ebp - 0x94]
movzx edx, byte [ebp + edx - 0x6f]
mov dword [ebp - 0x30], ebx
movzx eax, byte [ebp + eax - 0x72]
movzx eax, word [ebp + eax*2 - 0x114]
mov ecx, eax
and eax, edx
or ecx, edx
mov edx, dword [ebp - 0x24]
sub ecx, eax
movzx eax, byte [ebp + edx - 0x70]
mov word [ebp + eax*2 - 0x114], cx
add edx, esi
jmp 0x10029752
xor eax, eax
mov dword [ebp - 0x140], 7
mov word [ebp - 0x106], ax
lea ecx, [ebp - 0x154]
mov word [ebp - 0x154], ax
lea eax, [ebp - 0x114]
push eax
mov dword [ebp - 0x144], ebx
call fcn.10009b82
mov dword [ebp - 4], 4
lea edi, [ebp - 0x114]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x44], 0x773b
cmp dword [ebp - 0x44], 0x7979
jle 0x10029a3d
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, edi
mov dword [ebp - 0x48], ebx
sar eax, cl
mov edi, ebx
mov dword [ebp - 0x34], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x27c]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100299ff
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x27c]
call fcn.10009a96
mov eax, dword [ebp - 0x34]
inc edi
cmp edi, 0x3404
jl 0x100299e3
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x558
jl 0x100299d7
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x46b
jl 0x100299d2
mov dword [ebp - 0x2c], 0xfffffffd
cmp dword [ebp - 0x44], 0x751c
jge 0x10029a58
push str.qlknbk_dtyzvr_mbbg_tudqtephj_vjqiw_pia_anfane_rrzlmugt_tzt_vjgxzphrb
call fcn.1003f93c
pop ecx
mov dword [ebp - 4], 4
mov dword [ebp - 0x2c], ebx
jmp 0x10029afc
mov dword [ebp - 0x3c], 0xfffffffe
xor edx, edx
mov dword [ebp - 0x48], 0x45c2f1fc
inc edx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jge 0x10029a90
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc8], edx
inc dword [ebp - 0x18]
jmp 0x10029a7b
mov dword [ebp - 0x18], ebx
jmp 0x10029aa6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x188], 0xfffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10029a95
mov dword [ebp - 0xc8], 0x1a
jmp 0x10029aeb
mov dword [ebp - 0x20], 0x2fb5a5ef
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x10029ae5
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x188]
cmp eax, edx
setle cl
imul eax, ecx, 0xffffbae3
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x20]
jns 0x10029ac6
dec dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], 0xf
jle 0x10029ab7
cmp dword [ebp - 0x2c], ebx
jne 0x10029b06
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe3
jne 0x10029a67
push dword [ebp - 0x40]
lea ecx, [ebp - 0x1ac]
call fcn.10009699
push 0x5c
mov byte [ebp - 4], 7
mov edi, esi
pop eax
mov dword [ebp - 0x50], 0x94013f00
mov ecx, ebx
mov word [ebp - 0x5c], ax
cmp edi, esi
jne 0x10029b34
mov ecx, esi
mov edi, esi
jmp 0x10029b5d
movzx edx, byte [ebp + edi - 0x4f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x5c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x5c], cx
mov ecx, ebx
add edi, esi
cmp edi, 4
jb 0x10029b2a
xor eax, eax
mov dword [ebp - 0xe8], 7
mov word [ebp - 0x5a], ax
lea ecx, [ebp - 0xfc]
mov word [ebp - 0xfc], ax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0xec], ebx
call fcn.10009b82
mov byte [ebp - 4], 8
mov dword [ebp - 0x20], 0x7df2f4a8
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x44], 0x4764
cmp dword [ebp - 0x44], 0x499a
jle 0x10029c02
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, edi
mov dword [ebp - 0x48], ebx
mov edi, eax
mov dword [ebp - 0x40], eax
sar edi, cl
mov eax, ebx
mov ecx, 0x1006f958
and eax, edi
cdq
push edx
push eax
call fcn.10009584
inc ebx
cmp ebx, 0x4106
jl 0x10029bc8
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x38], edi
push 0
pop ebx
cmp edi, 0x2be2
jl 0x10029bbc
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x4f28
jl 0x10029bb7
mov dword [ebp - 0x24], 0x9333
mov byte [ebp - 4], 9
cmp dword [ebp - 0x44], 0x4385
jge 0x10029c46
mov edx, str.uge_etnag_wrqwxdz_yegwhkuaa_pvd_hbvmedja_vvim_scvlte_lcbfvn_kqvtgohxq
mov ecx, 0x1006f958
call fcn.1000b719
jmp 0x10029c46
mov dword [ebp - 4], 8
mov dword [ebp - 0x44], 0xb7b
cmp dword [ebp - 0x44], 0xbf8
jle 0x10029cda
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x38], ebx
cdq
idiv edi
mov dword [ebp - 0x40], ebx
mov edi, ebx
mov ecx, edx
mov dword [ebp - 0x48], ecx
mov eax, edi
or eax, ecx
lea ecx, [ebp - 0x2a0]
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029c90
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2a0]
call fcn.10009a96
mov ecx, dword [ebp - 0x48]
inc edi
cmp edi, 0x5bdb
jl 0x10029c74
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x6d3d
jl 0x10029c67
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x3c41
jl 0x10029c62
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
cmp dword [ebp - 0x44], 0xa0b
jge 0x10029cee
push str.mdycw_tjihwdbg_qhivca_ybfho_tplxvk_pmdivn_ohhifxaq_khwr
call fcn.1003f93c
pop ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xe4a6b2c4
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], ebx
jmp 0x10029d1f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10029d0e
mov dword [ebp - 0x18], ebx
jmp 0x10029d36
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10029d29
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10029d4c
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
cmp dword [ebp - 0x20], ebx
je 0x10029dec
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
xor eax, eax
cmp ecx, 0x24b5
push 0xfffffffffffffff7
setle al
pop ecx
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x1b8], ebx
jne 0x10029d8a
cmp dword [ebp - 0x118], ebx
jne 0x10029d8a
mov eax, ebx
jmp 0x10029d8d
xor eax, eax
inc eax
cmp eax, 0xd4a55f07
sbb eax, eax
add eax, 0xffff000b
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1b8]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp eax, 7
setl cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0x336a
setl cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x20], eax
jl 0x10029dec
xor eax, eax
inc eax
jmp 0x10029dee
mov eax, ebx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], 0xffffffff
push 3
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x10029e1e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c8], 0x25a8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10029e0d
mov dword [ebp - 0x18], ebx
jmp 0x10029e39
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x24c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10029e28
mov dword [ebp - 0x18], ebx
jmp 0x10029e54
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x220], 0x4f9a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10029e43
mov eax, dword [ebp - 0x2c]
xor edx, edx
cmp eax, 0xe52d
mov eax, dword [ebp - 0x2c]
push 2
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
imul eax, ecx, 0xe83
pop ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ecx
jg 0x1002a0ca
mov dword [ebp - 0x3c], 0x53413f08
mov dword [ebp - 0x20], 0x901
cmp dword [ebp - 0x20], 0x925
jle 0x10029f31
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov eax, edi
mov dword [ebp - 0x40], ebx
cdq
idiv esi
mov edi, dword [ebp - 0x30]
mov esi, ebx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x38], 0x336e
mov eax, esi
lea ecx, [ebp - 0x2e8]
xor eax, edi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10029ee4
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2e8]
call fcn.10009a96
add esi, dword [ebp - 0x48]
dec dword [ebp - 0x38]
jne 0x10029ec8
mov esi, dword [ebp - 0x44]
mov edi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x44], esi
cmp esi, 0x28e4
jl 0x10029eb1
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x4cb7
jl 0x10029eac
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x3b6d
jl 0x10029ea7
mov dword [ebp - 0x40], 0xfffffff7
cmp dword [ebp - 0x20], 0x8a9
jge 0x10029f4c
push str.amviiylds_dqdsphte_datwmwjl_nbylxj_gjwd_tczv_qlv_rucapp_hdkh_yqw_gfi_gesyn_wim_soegmj
call fcn.1003f93c
pop ecx
mov dword [ebp - 4], 8
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10029f70
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], 9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10029f5f
push 2
pop ecx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1002a0b9
push 3
pop edx
mov dword [ebp - 0x24], 0xfa3a92bd
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x38], 0xfff7
mov dword [ebp - 0x20], ebx
jmp 0x10029fb9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x228], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10029fa8
mov dword [ebp - 0x24], ebx
jmp 0x1002a0a7
mov dword [ebp - 0x18], 0xf6a715cc
mov dword [ebp - 0x3c], 0xc20f746e
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10029fe9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x288], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10029fdc
mov dword [ebp - 0x18], ebx
jmp 0x1002a004
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e0], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10029ff3
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ecx
jg 0x1002a0a4
mov dword [ebp - 0x3c], 0xbb7a1405
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1002a035
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x134], 0xcc19583e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002a024
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x238]
je 0x1002a052
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x30]
mov eax, dword [ebp - 0x1d8]
neg eax
sbb eax, eax
lea ecx, [eax + 0xa]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1c8]
add eax, dword [ebp - 0x30]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, 0x747eab1a
jl 0x1002a08a
cmp dword [ebp - 0x134], ebx
je 0x1002a08a
xor eax, eax
inc eax
jmp 0x1002a08c
mov eax, ebx
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x38]
inc dword [ebp - 0x18]
push 2
pop ecx
cmp dword [ebp - 0x18], ecx
jle 0x1002a015
push 3
pop edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10029fc6
dec dword [ebp - 0x28]
jns 0x10029f88
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x2c]
jmp 0x10029e80
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x28], ebx
jmp 0x1002a0e7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x200], 0x8c6a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1002a0d6
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1002a1c1
mov dword [ebp - 0x34], 0x6575
cmp dword [ebp - 0x34], 0x6743
jle 0x1002a154
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x2d0]
or eax, esi
cdq
push edx
push eax
call fcn.10001a65
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002a12d
mov eax, dword [eax]
push eax
call fcn.1003f93c
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2d0]
call fcn.10009a96
inc edi
cmp edi, 0x56ca
jl 0x1002a111
inc esi
cmp esi, 0x5f5b
jl 0x1002a10f
mov dword [ebp - 0x20], 0x7b1891f7
cmp dword [ebp - 0x34], 0x6397
jge 0x1002a16f
push str.iwaucx_kqs_bvfg_mnb
call fcn.1003f93c
pop ecx
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x200], ebx
jne 0x1002a1c1
mov dword [ebp - 0x20], ebx
jmp 0x1002a1b3
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x1002a1aa
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002a1a7
push 0x1ea1
call dword [sym.imp.KERNEL32.dll_SetLastError]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x1002a193
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1002a187
dec dword [ebp - 0x24]
jmp 0x1002a0f4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002a1db
push 0x2645
push 0xc15
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
push 0x5f
pop eax
push 2
mov edi, ebx
mov byte [ebp - 0x58], bl
mov dword [ebp - 0x57], 0xd60b0485
mov word [ebp - 0x53], 0xc270
mov word [ebp - 0x60], ax
pop esi
mov dword [ebp - 0x28], edi
push 7
pop ecx
mov dword [ebp - 0x38], esi
cmp esi, ecx
jae 0x1002a2e9
mov dword [ebp - 0x34], 0x5e93
cmp dword [ebp - 0x34], 0x6050
jle 0x1002a24c
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
mov edi, ebx
mov dword [ebp - 0x40], ebx
lea eax, [ebx + edi]
mov ecx, 0x1006f958
cdq
push edx
push eax
call fcn.10009584
inc ebx
cmp ebx, 0x7132
jl 0x1002a224
inc edi
push 0
pop ebx
cmp edi, 0x4836
jl 0x1002a221
mov edi, dword [ebp - 0x28]
movzx eax, byte [ebp - 0x58]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1002a26b
movzx eax, byte [ebp + esi - 0x58]
dec esi
add esi, eax
lea edi, [eax + 1]
mov dword [ebp - 0x28], edi
jmp 0x1002a2e1
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x34], 0x5bfb
jge 0x1002a2ae
mov edx, str.ahmv_htl_ykvdfom_rpbqiyeb_jgsor_tfyxjwjzz_nnq_pylednp_qhtsjxtwr_fwn
mov ecx, 0x1006f958
call fcn.1000b719
jmp 0x1002a2ae
mov eax, esi
mov dword [ebp - 4], 8
movzx edx, byte [ebp + esi - 0x57]
sub eax, edi
mov edi, ebx
mov dword [ebp - 0x28], ebx
movzx eax, byte [ebp + eax - 0x5a]
movzx ecx, word [ebp + eax*2 - 0x60]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x58]
add ecx, edx
mov word [ebp + eax*2 - 0x60], cx
add esi, 2
jmp 0x1002a1fa
xor eax, eax
mov word [ebp - 0x5e], ax
push 3
mov dword [ebp - 0x18], 8
mov dword [ebp - 0x28], ebx
pop edi
jmp 0x1002a30b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x168], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1002a2fe
mov dword [ebp - 0x18], ebx
jmp 0x1002a326
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x40], 0x1dba3399
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1002a315
mov dword [ebp - 0x18], ebx
jmp 0x1002a364
mov dword [ebp - 0x24], 0x85c9e53
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x1002a361
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x168], ebx
jne 0x1002a361
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x168], ebx
jne 0x1002a361
dec dword [ebp - 0x24]
jns 0x1002a344
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1002a331
xor eax, eax
mov dword [ebp - 0x16c], ecx
mov word [ebp - 0x180], ax
lea ecx, [ebp - 0x180]
lea eax, [ebp - 0x60]
mov dword [ebp - 0x170], ebx
push eax
call fcn.10009b82
mov byte [ebp - 4], 0x13
xor edx, edx
inc edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x40], 0x8ed4
mov dword [ebp - 0x48], 0x4ffd8143
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], ebx
jmp 0x1002a3c2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xac], edx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1002a3b5
push 2
mov dword [ebp - 0x18], ebx
pop esi
cmp dword [ebp - 0x18], esi
jg 0x1002a44f
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xac]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0xa4]
test edx, edx
jne 0x1002a408
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0xac], ebx
jne 0x1002a408
mov edx, ebx
jmp 0x1002a40b
xor edx, edx
inc edx
mov eax, dword [ebp - 0xa8]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x40], ebx
je 0x1002a42d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1002a3d2
xor edx, edx
inc edx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x3c], 0xc4b7c700
push 4
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], 0xc18ab9c
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x4ea33a4d
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x18], ebx
jmp 0x1002a4a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x158], 0xc85f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002a494
mov dword [ebp - 0x18], ebx
jmp 0x1002a4c0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x210], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002a4af
mov dword [ebp - 0x2c], 0x675c
cmp dword [ebp - 0x2c], 0x6939
jle 0x1002a547
mov eax, ebx
mov dword [ebp - 0x30], ebx
mov ecx, ebx
mov dword [ebp - 0x44], ebx
cdq
idiv ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x40], edx
mov ecx, ebx
mov ebx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov eax, ebx
cdq
idiv ecx
mov eax, dword [ebp - 0x40]
mov ecx, edx
sar eax, cl
mov ecx, 0x1006f958
cdq
push edx
push eax
call fcn.10009584
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x1e92
jl 0x1002a4f0
inc ebx
push 0
mov dword [ebp - 0x38], ebx
cmp ebx, 0x3e6
pop ebx
jl 0x1002a4e8
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x44], ecx
cmp ecx, 0x6052
jl 0x1002a4df
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x515f
jl 0x1002a4da
xor edx, edx
inc edx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x1002a62a
mov eax, 0x95d1c58b
mov dword [ebp - 0x24], 0x58fb770a
mov dword [ebp - 0x34], 0xde9e8436
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x1002a59b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x9c], 0xcf3d0097
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x1002a58a
cmp dword [ebp - 0x48], ebx
jne 0x1002a5ba
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x88]
xor ecx, ecx
cmp eax, edx
push 1
setge cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
inc dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20c]
sub edx, 0x20b
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 0xcc], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
add ecx, 0x6a83b1d3
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov eax, 0x95d1c58b
dec dword [ebp - 0x9c]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1002a558
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x2c], 0x6432
jge 0x1002a66a
mov edx, str.key_gnowxztkx_rajwf_wkuumm
mov ecx, 0x1006f958
call fcn.1000b719
jmp 0x1002a66a
mov dword [ebp - 4], 0x13
push dword [ebp - 0xec]
cmp dword [ebp - 0xe8], 8
lea eax, [ebp - 0xfc]
push ebx
cmovae eax, dword [ebp - 0xfc]
lea ecx, [ebp - 0x1ac]
push eax
call fcn.10011064
cmp eax, 0xffffffff
je 0x1002a6b7
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x180]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1ac]
call fcn.100116f4
jmp 0x1002a671
mov dword [ebp - 0x20], 0x667a876e
xor ecx, ecx
mov dword [ebp - 0x88], 0x943af780
inc ecx
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x74], 0x278ee3f2
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x28], 0xc1f7b400
mov dword [ebp - 0x34], 0x2b5d
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002a717
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0xff60
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002a706
mov dword [ebp - 0x18], ebx
jmp 0x1002a72e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x104], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002a721
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], ebx
jl 0x1002a88a
mov dword [ebp - 0x24], 0x2395e2de
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x40], 0x3c017f21
mov dword [ebp - 0x34], 0x18ebdb8
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x30], 0xfffe
mov dword [ebp - 0x18], ebx
jmp 0x1002a777
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002a76a
mov dword [ebp - 0x18], ebx
jmp 0x1002a792
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa0], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002a781
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xe4]
test eax, eax
setns cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x24]
sub eax, 0xed5b
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xe4]
cmp eax, 0xfffa
mov edx, dword [ebp - 0x3c]
setne cl
xor eax, eax
cmp ecx, 0x4166da9a
setne al
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x44]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x88]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x138]
setl dl
neg edx
sub eax, edx
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0xe4]
jle 0x1002a85a
cmp dword [ebp - 0x74], ebx
je 0x1002a85a
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x1002a85f
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ebx
jl 0x1002a881
mov dword [ebp - 0x24], ebx
jmp 0x1002a877
cmp dword [ebp - 0x2c], ebx
jne 0x1002a87c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x1002a86f
dec dword [ebp - 0x28]
jns 0x1002a86a
dec dword [ebp - 0x20]
jns 0x1002a73f
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002a899
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov ecx, dword [ebp - 0x98]
lea eax, [ebp - 0x1ac]
push eax
lea edx, [ebp - 0x154]
call fcn.1002abc9
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x180]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0xfc]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10009ca4
push ebx
push 1
lea ecx, [ebp - 0x154]
call fcn.10009ca4
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x98]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret