Function at 0x1002f186
Capabilities:
Create directory

Disassembly:
mov eax, 0x10061ac0
call fcn.10060610
sub esp, 0x2a8
push ebx
mov dword [ebp - 0x3c], 0xb4e1
xor ebx, ebx
push esi
mov dword [ebp - 0x40], 0x64b9
cmp dword [ebp - 0x40], 0x65ad
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x194], ebx
jle 0x1002f219
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], 0x2639
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
inc edi
cmp edi, 0x4fff
jl 0x1002f1df
dec esi
dec dword [ebp - 0x24]
jne 0x1002f1dd
mov esi, dword [ebp - 0x30]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x3d41
jl 0x1002f1d3
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov byte [ebp - 0x29], bl
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x40], 0x61d8
jge 0x1002f237
mov edx, str.vlhip_jqaxo_eqn_ofysh_bcvbtjfd
mov ecx, 0x1007bf78
call fcn.1001ac5a
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x29], 0
je 0x1002f256
push ebx
push 0x2414
push ebx
push 0x1b80
push ebx
push 0x16
call dword [sym.imp.USER32.dll_DrawTextExW]
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002f26f
push 0x1148
push 0x5ed
call dword [sym.imp.GDI32.dll_SetTextAlign]
mov dword [ebp - 0x30], 0x30eb
cmp dword [ebp - 0x30], 0x3311
jle 0x1002f2d1
xor edi, edi
mov esi, ebx
inc edi
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x26c]
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f2a5
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x26c]
call fcn.10017003
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x2c87
jl 0x1002f289
inc esi
cmp esi, 0x1a59
jl 0x1002f284
cmp dword [ebp - 0x30], 0x3072
jge 0x1002f2e5
push str.ylwvp_tdpjj_hxhkhvc_bntmc_wzlavyfk_vlbq_cnwvyj_krnyeajp_rggonqhj
call fcn.10049d9f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
push 2
call fcn.1000216e
push 4
xor edx, edx
inc edx
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x24], 0x97a2
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jge 0x1002f33a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002f31e
push 4
pop ecx
mov dword [ebp - 0x18], ebx
jmp 0x1002f375
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a4], 0x51ae9a07
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1002f364
mov dword [ebp - 0x28], 0x2f30
cmp dword [ebp - 0x28], 0x32c3
jle 0x1002f3df
xor edi, edi
mov esi, ebx
inc edi
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, esi
shl eax, cl
lea ecx, [ebp - 0x23c]
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f3b0
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x23c]
call fcn.10017003
mov ecx, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x72fe
jl 0x1002f394
inc esi
cmp esi, 0x64bc
jl 0x1002f38f
xor edx, edx
inc edx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], edx
jg 0x1002f4ea
mov dword [ebp - 0x30], 0x8ace4b0a
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x3c], 0xffffffff
push edx
call fcn.1000216e
mov dword [ebp - 0x3c], 9
xor edi, edi
mov dword [ebp - 0x34], 0xd4ac961f
inc edi
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x1c], ebx
jmp 0x1002f43c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 0xc5d177cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002f429
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
push 0xfffffffffffffff8
setg dl
xor ebx, ebx
add edx, dword [ebp - 0x1a0]
mov eax, dword [ebp - 0xbc]
cmp dword [eax + esi*4], edx
mov eax, dword [ebp - 0x38]
setl bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x19c]
setne dl
sub edx, eax
xor eax, eax
cmp edx, 0x4e48
mov dword [ebp - 0x198], edx
pop edx
setle al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xbc]
cmp edx, dword [eax + ecx*4]
lea ecx, [ebp - 0x188]
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
call fcn.100021cb
inc dword [ebp - 0x18]
xor edx, edx
inc edx
push 0
pop ebx
cmp dword [ebp - 0x18], edx
jle 0x1002f3eb
cmp dword [ebp - 0x28], 0x2ca3
jge 0x1002f4fe
push str.pddohccy_sbxusvye_mirjkmi_ekiep_uajarxohj_yiwfmwzww_elk_zbnb_bugicyeew_xlw
call fcn.10049d9f
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.100021cb
mov dword [ebp - 0x18], 0x3b26bdde
xor edx, edx
mov dword [ebp - 0x24], 0x3faa058a
inc edx
mov dword [ebp - 0x40], 0x89b93b3b
mov dword [ebp - 0x30], 0xb2c3cc8c
mov dword [ebp - 0x38], 0x2db22c08
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1002f54d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0x389a9b8f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002f53f
mov dword [ebp - 0x18], ebx
jmp 0x1002f568
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x190], 0xfdda7840
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002f557
mov dword [ebp - 0x18], 0xfffffff5
jmp 0x1002f605
mov dword [ebp - 0x24], 0xe93d
mov dword [ebp - 0x1c], ebx
jmp 0x1002f597
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf4], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002f586
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002f5b0
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
xor edx, edx
inc edx
mov dword [ebp - 0xf0], edx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x24]
test eax, eax
setns cl
cmp ecx, 0xfffffff6
jne 0x1002f5d5
mov ecx, edx
cmp dword [ebp - 0x18], ebx
jne 0x1002f5d7
mov ecx, ebx
xor eax, eax
cmp ecx, 0xe5e5
setle al
xor ecx, ecx
cmp eax, 0xfff6
setne cl
xor eax, eax
cmp eax, ecx
sbb eax, eax
add eax, 0xdb76efde
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jne 0x1002f57a
mov dword [ebp - 0x18], 0xce22
cmp dword [ebp - 0x18], ebx
je 0x1002f627
mov dword [ebp - 0x18], 0x422f
cmp dword [ebp - 0x18], ebx
jne 0x1002f629
mov edx, ebx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
sete cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setge dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setle dl
sub edx, eax
mov eax, 0x8f438361
cmp eax, edx
mov eax, dword [ebp - 0x4c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setne dl
sub eax, edx
je 0x1002f683
cmp dword [ebp - 0x40], ebx
je 0x1002f683
xor edi, edi
inc edi
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp - 0x4c]
jmp 0x1002f686
mov dword [ebp - 0x4c], ebx
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ebx, ebx
cmp edx, 0x6370
setne bl
xor ecx, ecx
cmp ebx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
je 0x1002f6b5
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x30]
sub edx, eax
mov eax, dword [ebp - 0x28]
neg edx
mov word [ebp - 0x78], 0x5602
push 0x6f
sbb edx, edx
mov dword [ebp - 0x75], 0x3300603
xor ecx, ecx
mov dword [ebp - 0x71], 0x42981fd
inc edx
mov dword [ebp - 0x6d], 0x3033d
cmp edx, eax
mov word [ebp - 0x69], 0x525
mov byte [ebp - 0x67], 0x2b
setge cl
xor eax, eax
mov dword [ebp - 0x18c], ecx
inc eax
pop ecx
mov byte [ebp - 0x76], al
mov word [ebp - 0x100], cx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xffffffe5
jmp 0x1002f721
cmp dword [ebp - 0x1c], ebx
jne 0x1002f727
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe3
jl 0x1002f719
mov byte [ebp - 0x29], bl
mov dword [ebp - 0x38], 0x6e4b
cmp dword [ebp - 0x38], 0x6e68
jle 0x1002f79e
push 0x191e
call dword [sym.imp.GDI32.dll_GetBkColor]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x40], ebx
mov ecx, esi
mov edi, ebx
and ecx, eax
mov dword [ebp - 0x30], ecx
mov esi, ebx
lea eax, [esi + edi]
xor eax, ecx
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
mov ecx, dword [ebp - 0x30]
inc esi
cmp esi, 0x1e3b
jl 0x1002f75a
inc edi
cmp edi, 0x2fb3
jl 0x1002f758
mov esi, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x40], esi
cmp esi, 0x464c
jl 0x1002f74f
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x28a9
jl 0x1002f74a
cmp byte [ebp - 0x29], bl
je 0x1002f7a9
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 4], 7
cmp dword [ebp - 0x38], 0x6d65
jge 0x1002f7c8
mov edx, str.ysy_rlrzce_kgatalpj_wraqdiwcd_akyj_njjgq_xhwvc_cpeugc_urtuckpda
mov ecx, 0x1007bf78
call fcn.1001ac5a
or dword [ebp - 4], 0xffffffff
push 2
xor edi, edi
mov dword [ebp - 0x40], ebx
pop esi
inc edi
mov dword [ebp - 0x1c], esi
cmp esi, 0x12
jae 0x1002ff41
push 4
lea ecx, [ebp - 0xac]
call fcn.1000216e
mov dword [ebp - 4], 9
mov dword [ebp - 0x20], 0xa32b1cec
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x1b4], 0xffffffff
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x3c], 0x69d0863e
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x38], 0xa97d63f7
mov dword [ebp - 0x28], ebx
jmp 0x1002f87a
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xac]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1002f86a
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x1002f99e
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x48], 0xbc712bad
mov dword [ebp - 0x30], 0x77c1
cmp dword [ebp - 0x30], 0x787d
jle 0x1002f8fd
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
add eax, esi
lea ecx, [ebp - 0x29c]
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f8d2
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x29c]
call fcn.10017003
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x77bf
jl 0x1002f8b8
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xf9d
jl 0x1002f8b6
cmp dword [ebp - 0x30], 0x774e
jge 0x1002f911
push str.stmclv_nklhuvicd_mpoxu_wjfjr
call fcn.10049d9f
pop ecx
mov dword [ebp - 4], 9
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1002f92d
push ebx
push 0x2164
call dword [sym.imp.GDI32.dll_SetLayout]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
cmp dword [eax + ecx*4], ebx
jne 0x1002f970
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xac]
setle dl
xor ecx, ecx
cmp edx, dword [eax + esi*4]
setl cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov ecx, 0xbd6cd538
mov eax, dword [ebp - 0x20]
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0xac]
sbb ecx, ecx
inc ecx
sub ecx, dword [eax + 4]
neg ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [eax + edx*4]
mov dword [ebp - 0x48], ecx
inc dword [ebp - 0x20]
jmp 0x1002f883
inc dword [ebp - 0x38]
lea ecx, [ebp - 0xac]
or dword [ebp - 4], 0xffffffff
call fcn.100021cb
movzx eax, byte [ebp - 0x78]
mov esi, dword [ebp - 0x1c]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x1002fc96
movzx esi, byte [ebp + esi - 0x78]
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x24], 0x8654
mov dword [ebp - 0x28], 0x31d8b9db
mov dword [ebp - 0x3c], 0xfffffff7
lea eax, [esi + 1]
mov dword [ebp - 0x3c], 0x734e2e0f
mov dword [ebp - 0x3c], 4
push 2
mov dword [ebp - 0x40], eax
call fcn.1000216e
mov dword [ebp - 0x3c], 0x5b97
mov dword [ebp - 0x18], ebx
jmp 0x1002fa1a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x164], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002fa0d
mov dword [ebp - 0x18], ebx
jmp 0x1002fa35
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002fa25
cmp dword [ebp - 0x28], ebx
je 0x1002fa46
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], 0x86e52d8c
lea ecx, [ebp - 0x128]
mov eax, dword [ebp - 0x24]
mov eax, 0x6e33a79c
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x164]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x128]
inc dword [eax]
call fcn.100021cb
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x18], 6
add eax, esi
mov dword [ebp - 0x34], 0xfffffff9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], ebx
jmp 0x1002fab8
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x158], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1002faa7
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x1002fc64
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x1002fc5c
mov dword [ebp - 0x44], 0x330d
cmp dword [ebp - 0x44], 0x331c
jle 0x1002fb44
mov edi, ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x38], 0x4e8d
mov dword [ebp - 0x24], eax
mov ecx, ebx
mov dword [ebp - 0x30], ebx
shl eax, cl
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x7e9
jl 0x1002fb07
add eax, esi
dec dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
jne 0x1002fb02
inc esi
cmp esi, 0x22db
jl 0x1002faf6
inc edi
cmp edi, 0x6633
jl 0x1002faf4
mov byte [ebp - 0x29], bl
mov dword [ebp - 0x20], 0x164d
cmp dword [ebp - 0x20], 0x19c8
jle 0x1002fbb0
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov edx, eax
mov ecx, esi
shl edx, cl
mov edi, ebx
mov dword [ebp - 0x38], edx
mov eax, ebx
mov dword [ebp - 0x30], ebx
and eax, edi
mov ecx, 0x1007bf78
xor eax, edx
cdq
push edx
push eax
call fcn.100168d8
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x3da1
jl 0x1002fb6e
inc edi
cmp edi, 0x3de6
jl 0x1002fb69
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x2617
jl 0x1002fb5e
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x7bdb
jl 0x1002fb5c
cmp byte [ebp - 0x29], 0
je 0x1002fbbe
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 4], 0xc
cmp dword [ebp - 0x20], 0x154c
jge 0x1002fbfb
mov edx, str.inmumeu_iimjwqjd_eice_xubnewoh_isd_vrhyek_nfkitiu_nsrhdrusm_vlznngou_qwschl_enwpwyl
mov ecx, 0x1007bf78
call fcn.1001ac5a
jmp 0x1002fbfb
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x44], 0x325f
jge 0x1002fc1a
mov edx, str.xrbhftop_belsjtcnx_kjsqupg_exyodk_slvqvjsig_wuw_wneqm_ycpbq_jgw
mov ecx, 0x1007bf78
call fcn.1001ac5a
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x158], ecx
dec dword [ebp - 0x28]
jmp 0x1002fad9
inc dword [ebp - 0x18]
jmp 0x1002fac1
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1002fc88
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x158], ebx
jne 0x1002fc88
dec dword [ebp - 0x18]
jns 0x1002fc70
mov esi, dword [ebp - 0x1c]
xor edi, edi
inc edi
add esi, 2
jmp 0x1002f7d5
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], 0xad8ea5f3
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0xb0], 0xfffffff8
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x84], 0xffff
mov dword [ebp - 0x3c], 0x468e576d
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xfffffff7
je 0x1002ff08
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0xf51ae9a0
mov dword [ebp - 0x44], 0x5920
cmp dword [ebp - 0x44], 0x5cfc
jle 0x1002fd63
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
cdq
idiv esi
xor edx, ecx
lea ecx, [ebp - 0x254]
mov eax, edx
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002fd22
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x254]
call fcn.10017003
mov eax, dword [ebp - 0x24]
inc esi
mov ecx, dword [ebp - 0x30]
cmp esi, 0x4d30
jl 0x1002fd03
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x79f7
jl 0x1002fd01
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x35ec
jl 0x1002fcfc
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0x18], 0xfffffffc
cmp dword [ebp - 0x44], 0x57cf
jge 0x1002fd7e
push str.zsbt_ihuchrck_xvr_ftqk_ixssc_lykc_ppyi_vwpkgi_aazeun
call fcn.10049d9f
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x3c], 0xebe
mov dword [ebp - 0x38], 0x2656
cmp dword [ebp - 0x38], 0x27c4
jle 0x1002fde9
push ebx
push ebx
push ebx
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov ecx, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], 0x52f7
mov dword [ebp - 0x44], eax
and eax, ecx
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x30]
add eax, esi
dec dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
jne 0x1002fdb5
inc esi
cmp esi, 0x4715
jl 0x1002fda9
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x29c7
jl 0x1002fda7
mov dword [ebp - 0x24], edi
mov dword [ebp - 4], 0x12
cmp dword [ebp - 0x38], 0x2457
jge 0x1002fe0b
mov edx, str.xtgnl_szmmt_cye_rnwdkbxm_yjf_gwbybu_gotwlormc_fgsztq_yrjuetqtk_fko_uxsmwxk_cucvuwkf_pnjz
mov ecx, 0x1007bf78
call fcn.1001ac5a
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 0xfffffffe
setl cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setge dl
cmp edi, edx
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xb0]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x18], ebx
jne 0x1002fe9c
cmp dword [ebp - 0x20], ebx
jne 0x1002fe9c
xor edx, edx
mov esi, ebx
inc edx
jmp 0x1002fea1
xor edx, edx
inc edx
mov esi, edx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
add eax, 0xd2af
cmp eax, esi
setg cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jne 0x1002febb
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x48], ebx
je 0x1002fecd
mov eax, edx
cmp dword [ebp - 0x84], ebx
jne 0x1002fecf
mov eax, ebx
neg eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x41536c74
jge 0x1002fee4
mov ecx, edx
cmp dword [ebp - 0x3c], ebx
jne 0x1002fee6
mov ecx, ebx
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edi, edi
mov dword [ebp - 0x3c], ecx
dec dword [ebp - 0x28]
inc edi
jmp 0x1002fcd3
mov esi, dword [ebp - 0x1c]
mov eax, esi
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], ebx
movzx edx, byte [ebp + esi - 0x77]
movzx eax, byte [ebp + eax - 0x7a]
movzx ecx, word [ebp + eax*2 - 0x104]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x78]
add ecx, edx
mov word [ebp + eax*2 - 0x104], cx
jmp 0x1002fc8e
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002ffb6
mov dword [ebp - 0x18], 0xb96ca2cb
mov dword [ebp - 0x3c], 0xfaab39e
mov dword [ebp - 0x18], 0x13
jmp 0x1002ffad
push 4
lea ecx, [ebp - 0x170]
call fcn.1000216e
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x28], ebx
jmp 0x1002ff90
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x170]
mov dword [eax + ecx*4], 0x3c4ab274
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1002ff7d
mov eax, dword [ebp - 0x170]
lea ecx, [ebp - 0x170]
mov dword [eax + 8], ebx
call fcn.100021cb
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffff
jle 0x1002ff64
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff0
je 0x1002ff4d
mov dword [ebp - 0x34], 0x1493
cmp dword [ebp - 0x34], 0x14c5
jle 0x1003001b
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov eax, esi
or eax, ecx
lea ecx, [ebp - 0x284]
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ffef
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x284]
call fcn.10017003
mov ecx, dword [ebp - 0x24]
inc esi
cmp esi, 0xae6
jl 0x1002ffd3
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x42ed
jl 0x1002ffd1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x34], 0x11ae
jge 0x10030035
push str.dlsl_xtow_sirshb_qtccudvf_ehq_mxbte_fhfqazu_mcys_qpipeyy_anefi_cwyscilr_yryrurd_azyfthy
call fcn.10049d9f
pop ecx
or dword [ebp - 4], 0xffffffff
xor eax, eax
mov word [ebp - 0xf6], ax
mov dword [ebp - 0x34], 0x14f9
cmp dword [ebp - 0x34], 0x1689
jle 0x1003007b
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
inc edi
cmp edi, 0x1605
jl 0x10030056
inc esi
cmp esi, 0x19f7
jl 0x10030054
mov dword [ebp - 0x1c], 0x36b16b47
mov dword [ebp - 4], 0x16
cmp dword [ebp - 0x34], 0x138a
jge 0x100300bf
mov edx, str.rtmkl_whoryfs_wrffiulor_yfwo_wgfzx_flctqwz_fcrb_guwj_eqytm_uvs_dozoiul_whlp_aeobyx_jaf
mov ecx, 0x1007bf78
call fcn.1001ac5a
jmp 0x100300bf
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x3c], 0xffffffff
inc ecx
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x18], ebx
jmp 0x100300e6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100300d9
mov dword [ebp - 0x18], ebx
jmp 0x10030102
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x208], 0x1b4373c9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100300f1
mov dword [ebp - 0x9c], ebx
jmp 0x10030159
mov dword [ebp - 0x24], 0xb8f3
mov dword [ebp - 0x28], ebx
jmp 0x1003012d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x224], 0x5309757a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1003011c
cmp dword [ebp - 0x24], ebx
jne 0x10030147
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x21c], eax
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], 0xa
jle 0x10030110
mov dword [ebp - 0x1c], ecx
jmp 0x10030188
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10030185
push ebx
push 0x2414
push ebx
push 0x1b80
push ebx
push 0x16
call dword [sym.imp.USER32.dll_DrawTextExW]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe7
jle 0x10030167
xor eax, eax
mov dword [ebp - 0x1b8], 7
mov word [ebp - 0x1cc], ax
lea ecx, [ebp - 0x1cc]
lea eax, [ebp - 0x104]
mov dword [ebp - 0x1bc], ebx
push eax
call fcn.10017284
xor edi, edi
mov dword [ebp - 4], 0x18
mov eax, ebx
inc edi
mov dword [ebp - 0x1c], eax
cmp eax, 8
jae 0x1003041b
mov dword [ebp - 0x48], 0x48
cmp dword [ebp - 0x48], 0x1ea
jle 0x10030220
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov esi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
sar eax, cl
mov ecx, 0x1007bf78
cdq
push edx
push eax
call fcn.100168d8
mov ecx, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x6b05
jl 0x100301ef
inc esi
cmp esi, 0x16e
jl 0x100301ea
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x48], 0xfffffe43
jge 0x1003025d
mov edx, str.qqtl_ndwmzvkzz_hnium
mov ecx, 0x1007bf78
call fcn.1001ac5a
jmp 0x1003025d
mov dword [ebp - 4], 0x18
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x18], 9
mov dword [ebp - 0x30], 2
push 4
call fcn.1000216e
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x34], 0xca70051
push 3
call fcn.1000216e
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], 0x3107
cmp dword [ebp - 0x38], 0x3363
jle 0x10030328
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0x6dad
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x34], 0x7dcb
mov esi, ebx
mov ecx, esi
shl eax, cl
lea ecx, [ebp - 0x2b4]
cdq
push edx
push eax
call fcn.10002b6b
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100302e5
mov eax, dword [eax]
push eax
call fcn.10049d9f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x2b4]
call fcn.10017003
mov eax, dword [ebp - 0x24]
inc esi
cmp esi, 0x7bd1
jl 0x100302c9
dec eax
dec dword [ebp - 0x34]
mov dword [ebp - 0x24], eax
jne 0x100302c7
mov eax, dword [ebp - 0x48]
dec eax
dec dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
jne 0x100302bd
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x49b5
jl 0x100302b3
cmp dword [ebp - 0x38], 0x2f25
jge 0x1003033c
push str.xraphs_ytgj_bcoq_bwd_hfcry_xmboubj_nyyfeha_unikva_aidsafj_lfneszs_skqqlcj_llbdtewbe
call fcn.10049d9f
pop ecx
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x20], ebx
jmp 0x1003035b
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0x5251c607
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10030348
mov dword [ebp - 0x20], ebx
jmp 0x10030375
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10030366
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
jne 0x100303aa
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], edi
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
add eax, ecx
cmp eax, 0x5062
mov eax, ebx
jge 0x100303ac
mov eax, edi
mov dword [ebp - 0x34], eax
xor edx, edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x14c]
setge dl
mov dword [eax], edx
test edx, edx
je 0x100303cb
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x18]
cmp dword [edx + 4], eax
setge cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x14c]
call fcn.100021cb
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x18
call fcn.100021cb
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov word [ebp + eax*2 - 0x104], cx
inc eax
jmp 0x100301c5
push edi
lea ecx, [ebp - 0xc8]
call fcn.1000216e
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x30], 0x25996fd0
mov dword [ebp - 0x1c], 0x37f5e175
mov dword [ebp - 0x1c], ebx
jmp 0x10030458
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xa8ea
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10030445
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x100304d1
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x3c], 0x123d4a1c
cmp dword [ebp - 0x20], ebx
jne 0x1003047f
mov eax, dword [ebp - 0xc8]
cmp dword [eax], ebx
je 0x10030489
cmp dword [ebp - 0x24], ebx
je 0x10030489
xor edx, edx
inc edx
jmp 0x1003048b
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
cmp ecx, 0x5358
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, 0xaa08ecb3
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
test ecx, ecx
sets al
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x20]
jns 0x10030466
mov dword [ebp - 0x20], 0x13
jmp 0x100305ca
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x100305bd
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x3c], 2
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x100305ba
push 1
lea ecx, [ebp - 0x17c]
call fcn.1000216e
xor edx, edx
mov dword [ebp - 0x1c], ebx
inc edx
jmp 0x1003052a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x17c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003051b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
je 0x10030547
cmp dword [ebp - 0x18], ebx
je 0x10030547
mov ebx, edx
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx + eax*4]
add eax, ebx
xor ebx, ebx
cmp dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x18]
setle bl
xor edx, edx
cmp ebx, eax
setne dl
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
neg edx
sub edx, 0x1b43
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor ebx, ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100305a1
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x17c]
mov dword [eax], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10030593
lea ecx, [ebp - 0x17c]
call fcn.100021cb
dec dword [ebp - 0x18]
jns 0x10030506
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
jl 0x100304ec
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffb
jne 0x100304dd
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 0x18
call fcn.100021cb
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x1fc]
call fcn.100169ed
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x110]
push 0x5c
pop eax
mov word [ebp - 0x58], ax
xor edi, edi
mov dword [ebp - 0x64], 0x72040300
inc edi
mov word [ebp - 0x60], 0x7709
mov byte [ebp - 0x5e], 0x71
mov dword [ebp - 0x24], 0x20398070
mov dword [ebp - 0x1c], 0xe08974b6
mov dword [ebp - 0x34], 0xc8f0d071
push edi
call fcn.1000216e
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1003064f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x110]
mov dword [eax + ecx*4], 0xfcdf11bb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003063c
mov dword [ebp - 0x18], ebx
jmp 0x10030666
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x90], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10030659
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x1003068e
push ebx
push 0x185b
push 0x218e
push 0x1c8b
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
xor edx, edx
inc edx
cmp dword [ebp - 0x24], ebx
je 0x1003069a
mov esi, edx
cmp dword [ebp - 0x1c], ebx
jne 0x1003069c
mov esi, ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x110]
neg ecx
sbb ecx, ecx
xor edi, edi
neg ecx
xor edx, edx
inc edi
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
cmp ecx, edi
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x8c]
setg cl
xor edx, edx
cmp ecx, 0x56df
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x8c]
jle 0x100306e7
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, 0x55c0c8fb
setge cl
cmp ecx, 0x8bbd1883
sbb eax, eax
xor ecx, ecx
inc eax
cmp esi, eax
setle cl
mov dword [ebp - 0x8c], ecx
lea ecx, [ebp - 0x110]
call fcn.100021cb
push 2
pop esi
mov ecx, ebx
cmp esi, 2
jne 0x10030735
push 5
pop ecx
push ecx
pop esi
jmp 0x1003075e
movzx edx, byte [ebp + esi - 0x63]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x66]
movzx ecx, word [ebp + eax*2 - 0x58]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x64]
add ecx, edx
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 7
jb 0x10030729
xor eax, eax
mov dword [ebp - 0xd8], 7
mov word [ebp - 0x56], ax
lea ecx, [ebp - 0xec]
mov word [ebp - 0xec], ax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0xdc], ebx
call fcn.10017284
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x100307ba
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x80], 0x3df7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100307ac
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x10030932
mov dword [ebp - 0x34], 0x3498e64e
lea ecx, [ebp - 0x140]
push 2
call fcn.1000216e
push edi
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x22
call fcn.1000216e
mov dword [ebp - 0x34], 0xa0e40209
mov dword [ebp - 0x3c], 0x543f36fc
mov dword [ebp - 0x20], ebx
jmp 0x10030812
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10030803
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10030833
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10030820
mov dword [ebp - 0x20], ebx
jmp 0x1003084e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x214], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003083d
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x80], ecx
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x7c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x140]
setne cl
mov esi, dword [eax + 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
sub ecx, eax
cmp ecx, esi
je 0x100308a7
mov eax, edx
test esi, esi
jne 0x100308a9
mov eax, ebx
add eax, esi
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x80]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x66e5dc64
mov ecx, 0xcdf5ef88
setne al
cmp ecx, eax
mov eax, dword [ebp - 0x134]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x80], ebx
je 0x100308eb
cmp dword [ebp - 0x24], ebx
jne 0x100308ed
mov edx, ebx
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x214], edx
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x134]
call fcn.100021cb
lea ecx, [ebp - 0x140]
mov byte [ebp - 4], 0x21
call fcn.100021cb
dec dword [ebp - 0x18]
push 1
pop edi
jns 0x100307cc
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x20], 0xdb3ae355
mov dword [ebp - 0x40], 0xd3f7bf48
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x84], 0xfffffffe
mov dword [ebp - 0x34], 0xcaa0
mov dword [ebp - 0x20], 2
jmp 0x10030b16
mov dword [ebp - 0x18], 0xfffffffc
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x28], 0xd526d2e8
mov dword [ebp - 0x1c], 0x7c2076ac
push 3
call fcn.1000216e
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x28], ebx
jmp 0x100309ab
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xd7006986
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x10030998
cmp dword [ebp - 0x20], ebx
je 0x100309d0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], 0x61fb
mov dword [ebp - 0x38], 0x973063d6
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov esi, dword [ebp - 0x11c]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [esi + 4], 0x3fde7504
setg al
xor ecx, ecx
cmp eax, 0xeb81
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x30]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x30]
imul edx, dword [ebp - 0x40]
test edx, edx
je 0x10030a50
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10030a2c
push ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
push 2
mov dword [ebp - 0x18], ebx
pop eax
jmp 0x10030a49
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jl 0x10030a46
cmp dword [ebp - 0x20], ebx
jne 0x10030a46
dec dword [ebp - 0x28]
jns 0x10030a3c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10030a34
jmp 0x10030a89
mov dword [ebp - 0x3c], 0xfffffffd
cmp dword [esi + 4], ebx
jne 0x10030a7e
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp eax, ecx
mov eax, ebx
setl dl
add edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x38]
neg edx
sbb edx, edx
inc edx
cmp edx, 0x2560
jge 0x10030a80
mov eax, edi
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10030a94
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov ecx, 0xfa1c18a1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, 0xfb12
setg cl
sub eax, dword [ebp - 0x1c]
add ecx, 0x62ac93c6
cmp eax, ecx
jl 0x10030ad3
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp eax, edi
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x11c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
call fcn.100021cb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 5
je 0x1003096a
push 0x5f
pop eax
push 2
mov dword [ebp - 0x54], 0x74029b00
mov ecx, ebx
mov byte [ebp - 0x50], 0x4c
mov word [ebp - 0x5c], ax
pop esi
cmp esi, 2
jne 0x10030b43
push 3
pop ecx
push ecx
pop esi
jmp 0x10030b6c
movzx edx, byte [ebp + esi - 0x53]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x56]
movzx ecx, word [ebp + eax*2 - 0x5c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x54]
add ecx, edx
mov word [ebp + eax*2 - 0x5c], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x10030b37
xor eax, eax
mov dword [ebp - 0x1d0], 7
mov word [ebp - 0x5a], ax
lea ecx, [ebp - 0x1e4]
mov word [ebp - 0x1e4], ax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x1d4], ebx
call fcn.10017284
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x5c], ebx
push dword [ebp - 0xdc]
cmp dword [ebp - 0xd8], 8
lea eax, [ebp - 0xec]
push ebx
cmovae eax, dword [ebp - 0xec]
lea ecx, [ebp - 0x1fc]
push eax
call fcn.1002e81b
cmp eax, 0xffffffff
je 0x10030bec
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1e4]
push ecx
push edi
push eax
lea ecx, [ebp - 0x1fc]
call fcn.1002ecde
jmp 0x10030ba7
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x1fc]
push eax
lea edx, [ebp - 0x1cc]
call fcn.10030e59
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x1e4]
call fcn.1001730c
push ebx
push edi
lea ecx, [ebp - 0xec]
call fcn.1001730c
push ebx
push edi
lea ecx, [ebp - 0x1fc]
call fcn.1001730c
push ebx
push edi
lea ecx, [ebp - 0x1cc]
call fcn.1001730c
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x88]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret