Function at 0x1002e36c
Capabilities:
Allocate thread local storage
Create pipe
Create thread
Create two anonymous pipes
Enumerate gui resources
Get common file path
Get geographical location
Get graphical window text
Get memory capacity
Get session user name
Log keystrokes via polling
Query environment variable
Query or enumerate registry value

Disassembly:
mov eax, 0x1008fac9
call fcn.1008f474
mov eax, 0x1324
call fcn.10075fe0
xor eax, eax
mov byte [ebp - 0x7d], dl
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], 0xfffffffb
push ebx
mov dword [ebp - 0x38], eax
mov ebx, 0x5aba8b03
push esi
mov dword [ebp - 0x20], 7
mov esi, 0xe101
push edi
mov dword [ebp - 0x48], esi
xor edi, edi
mov dword [ebp - 0x28], ebx
inc edi
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x14], edi
jge 0x1002e3d2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x4800fa7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002e3ba
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002e3f4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x574], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002e3db
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1002e403
cmp dword [ebp - 0xa0], eax
je 0x1002e403
mov eax, edi
cmp eax, dword [ebp - 0x20]
jg 0x1002e40e
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x48]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x1002e44f
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1002e451
mov edx, edi
jmp 0x1002e453
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
add ecx, 0x190
je 0x1002e46e
mov ecx, edi
cmp dword [ebp - 0x34], eax
jne 0x1002e470
mov ecx, eax
mov eax, dword [ebp - 0x38]
xor eax, eax
test ecx, ecx
sete al
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
dec dword [ebp - 0x570]
mov eax, dword [ebp - 0x570]
mov ecx, dword [ebp - 0x34]
imul ecx, eax
test ecx, ecx
jne 0x1002e4a0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xa0]
xor edx, edx
mov ecx, dword [ebp - 0xa0]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
add ecx, 0xffff079f
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002e502
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb8], 0x4800fa7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002e4ea
xor eax, eax
push 2
mov dword [ebp - 0x14], eax
pop ebx
cmp dword [ebp - 0x14], ebx
jge 0x1002e525
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x580], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e50d
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1002e534
cmp dword [ebp - 0xb8], eax
je 0x1002e534
mov eax, edi
cmp eax, dword [ebp - 0x20]
jg 0x1002e53f
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x48]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x1002e580
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1002e582
mov edx, edi
jmp 0x1002e584
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
add ecx, 0x190
je 0x1002e59f
mov ecx, edi
cmp dword [ebp - 0x34], eax
jne 0x1002e5a1
mov ecx, eax
mov eax, dword [ebp - 0x38]
xor eax, eax
test ecx, ecx
sete al
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
dec dword [ebp - 0x57c]
mov eax, dword [ebp - 0x57c]
mov ecx, dword [ebp - 0x34]
imul ecx, eax
test ecx, ecx
jne 0x1002e5d1
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xb8]
xor edx, edx
mov ecx, dword [ebp - 0xb8]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x48]
add ecx, 0xffff079f
cmp ecx, eax
mov eax, 0x71e9942c
setne dl
mov dword [ebp - 0xb8], edx
mov dword [ebp - 0x1c], 0x31551da6
mov dword [ebp - 0x40], 0xfff6
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x20], 0x131e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x61e7
sub eax, ecx
je 0x1002e659
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1002e65b
mov ecx, edi
jmp 0x1002e65d
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
push 5
setle dl
xor ecx, ecx
pop eax
sub edx, eax
mov eax, dword [ebp - 0x40]
cmp edx, eax
mov eax, dword [ebp - 0x40]
push 3
setge cl
sub eax, ecx
neg eax
pop esi
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x5d580090
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x9e62
setl al
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
sub ecx, 0x1ef5c421
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1e4]
sub edx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1e4]
add ecx, edx
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0x8c5cecce
setne al
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], eax
jl 0x1002e8bc
mov dword [ebp - 0x54], 0xa7da9fc5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1002e72c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x860], 0xd14a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002e714
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x1002e8aa
mov dword [ebp - 0x34], 0x1021f5eb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002e75b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3e8], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002e743
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x1002e8a7
cmp dword [ebp - 0x34], eax
jne 0x1002e77c
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x1ec], 0
jne 0x1002e77c
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x85c]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1ec], edi
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x1e8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, 0x4171b3fe
setl cl
cmp ecx, 0xd3b05e26
ja 0x1002e7da
xor eax, eax
cmp dword [ebp - 0x860], eax
jne 0x1002e8a5
jmp 0x1002e899
mov dword [ebp - 0x14], 0x106df3f1
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3e8]
cmp ecx, eax
setg dl
xor eax, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x14], eax
jmp 0x1002e890
mov dword [ebp - 0x10], eax
jmp 0x1002e814
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf6c], 0x1b866267
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002e803
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1ec]
jne 0x1002e82a
mov eax, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0xf68]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1002e884
mov dword [ebp - 0x4c], 0x237a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1ec]
neg eax
mov dword [ebp - 0x4c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
jne 0x1002e86b
inc dword [ebp - 0x14]
push 0
pop eax
cmp dword [ebp - 0x14], edi
jl 0x1002e7fe
dec dword [ebp - 0x20]
push 0
pop eax
jns 0x1002e767
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jle 0x1002e734
dec dword [ebp - 0x30]
jns 0x1002e705
mov dword [ebp - 0x1c], 0x44555950
mov dword [ebp - 0x20], 0x88dd0bb2
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1002e8d7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
push 4
pop edx
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0x1c], eax
je 0x1002e927
mov dword [ebp - 0x4c], 0x814b
xor edx, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle dl
mov dword [ebp - 0x10], edx
jmp 0x1002e9f6
mov dword [ebp - 0x34], 0xf4a1d2da
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x10], eax
jmp 0x1002e943
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x11d4], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002e936
mov dword [ebp - 0x1c], 6
cmp dword [ebp - 0x1c], 0x20
jl 0x1002e9f9
mov dword [ebp - 0x14], 0x8c84060a
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x1002e96e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x14], edi
je 0x1002e997
cmp dword [ebp - 0x1c], eax
je 0x1002e997
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002e992
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
dec dword [ebp - 0x20]
jmp 0x1002e9e6
mov dword [ebp - 0x14], eax
jmp 0x1002e9b1
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002e9ae
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
jg 0x1002e99c
mov dword [ebp - 0x14], eax
jmp 0x1002e9e0
mov dword [ebp - 0x20], eax
jmp 0x1002e9d7
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002e9d4
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1002e9c1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1002e9bc
inc dword [ebp - 0x54]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x20
jge 0x1002e959
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], 0x25
jl 0x1002ea36
xor eax, eax
mov dword [ebp - 0x54], ecx
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002ea2d
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
or ecx, 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x25
jge 0x1002ea15
mov dword [ebp - 0x40], 0xfffffffb
xor eax, eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002ea62
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcf0], 0x329e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002ea4a
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1002ea8a
mov dword [ebp - 0x10], eax
jmp 0x1002ea7d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x528], 0xfb63
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002ea6c
mov dword [ebp - 0x528], ecx
jmp 0x1002eb08
mov dword [ebp - 0x4c], 0xfffffff7
mov dword [ebp - 0x54], 0x4f934f54
mov dword [ebp - 0x54], 0x23e93d0b
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jg 0x1002eb08
jmp 0x1002eaaf
xor eax, eax
mov dword [ebp - 0x38], 2
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002eaca
push 0x720
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
xor eax, eax
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], eax
jne 0x1002eae4
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x17
jle 0x1002eaad
xor eax, eax
mov dword [ebp - 0x10], 0x76820624
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002eb2d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x127c], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002eb19
xor eax, eax
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
cmp dword [ebp - 0x14], edi
jge 0x1002eb4c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x340], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002eb38
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1002eb5a
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], esi
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe9
jne 0x1002eb51
inc dword [ebp - 0x340]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x38], 0xfff6
mov dword [ebp - 0x638], edi
mov dword [ebp - 0x634], edi
mov dword [ebp - 0x630], edi
mov dword [ebp - 0x62c], edi
mov dword [ebp - 0x14], 0x3aaf5bfb
mov dword [ebp - 0x20], 0xefcdf11b
mov dword [ebp - 0x34], 0xc27f355c
mov dword [ebp - 0x54], 0xfffc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x20], 0xffff
test eax, eax
je 0x1002ebc7
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1002ebc9
mov ecx, edi
jmp 0x1002ebcb
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x6335c0de
je 0x1002ebf0
mov edx, eax
cmp dword [ebp - 0x20], eax
je 0x1002ebf2
mov edx, edi
mov dword [ebp - 0x38], eax
xor ecx, ecx
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x62c], esi
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setg dl
xor eax, eax
imul edx, dword [ebp - 0x34]
cmp esi, edi
setne al
add edx, eax
imul edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x34]
jne 0x1002ec3d
xor eax, eax
cmp eax, dword [ebp - 0x34]
je 0x1002ecaa
mov eax, edi
cmp eax, dword [ebp - 0x34]
jle 0x1002ecaa
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x4c], 8
mov dword [ebp - 0x24], 0xc298c245
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002ec6c
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setl dl
xor eax, eax
cmp dword [ebp - 0x10], edx
jl 0x1002ec8a
mov edx, edi
cmp dword [ebp - 0x54], eax
jne 0x1002ec8c
mov edx, eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
neg ecx
push 2
sbb ecx, ecx
add eax, edx
inc ecx
imul ecx, eax
pop esi
mov dword [ebp - 0x3c], ecx
jmp 0x1002ed9f
xor eax, eax
push 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], eax
pop esi
jmp 0x1002ecc8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1a4], 0xcd908fbd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002ecb7
mov ecx, dword [ebp - 0x14]
xor edx, edx
imul ecx, dword [ebp - 0x62c]
mov eax, dword [ebp - 0x14]
add ecx, 4
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x1a0]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setl cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x1a0]
cmp eax, 0x934e
jg 0x1002ed1a
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x62c]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1a4]
setge bl
xor ecx, ecx
cmp eax, 0x7412
setge cl
xor edx, edx
cmp ecx, ebx
mov ecx, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x62c]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
setle dl
add ecx, edx
xor edx, edx
cmp ecx, eax
sete dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1a4], eax
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002eda1
push 0x19e5
call ebx
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor eax, eax
mov dword [ebp - 0x38], 0xe101
mov dword [ebp - 0x28], 0x5aba8b03
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002edcf
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0x4800fa7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002edb7
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002edef
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x640], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002edd7
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1002edfe
cmp dword [ebp - 0xa4], eax
je 0x1002edfe
mov eax, edi
cmp eax, dword [ebp - 0x44]
jg 0x1002ee09
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
dec eax
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x38]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x1002ee4a
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x1002ee4c
mov edx, edi
jmp 0x1002ee4e
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
add ecx, 0x190
je 0x1002ee69
mov ecx, edi
cmp dword [ebp - 0x40], eax
jne 0x1002ee6b
mov ecx, eax
mov eax, dword [ebp - 0x48]
xor eax, eax
test ecx, ecx
sete al
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
dec dword [ebp - 0x63c]
mov eax, dword [ebp - 0x63c]
mov ecx, dword [ebp - 0x40]
imul ecx, eax
test ecx, ecx
jne 0x1002ee9b
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0xa4]
xor edx, edx
mov ecx, dword [ebp - 0xa4]
imul ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
push 9
add ecx, 0xffff079f
cmp ecx, eax
pop eax
setne dl
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002eee9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x220], 0x24f01c08
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002eed1
xor eax, eax
mov edx, 0xd4e70302
cmp dword [ebp - 0x220], eax
je 0x1002ef14
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002f03d
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_SetMenu]
xor eax, eax
jmp 0x1002f03d
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x4c], eax
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1002ef41
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xedc], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1002ef28
xor eax, eax
mov edx, 0xd4e70302
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], eax
jg 0x1002f03d
mov dword [ebp - 0x14], 0x3f467215
mov dword [ebp - 0x10], 0x3cc25429
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002f029
mov dword [ebp - 0x54], 0xfffffffc
mov dword [ebp - 0x10], eax
jmp 0x1002ef84
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9b4], 0x6d238e48
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1002ef73
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x9ac]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x220]
cmp edx, eax
mov eax, dword [ebp - 0x14]
sbb esi, esi
xor edx, edx
inc esi
mov dword [ebp + eax*4 - 0x220], esi
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x9b0], ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setge dl
xor eax, eax
add edx, dword [ebp - 0x14]
test esi, esi
sete al
imul edx, eax
xor eax, eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], eax
je 0x1002eff7
cmp dword [ebp - 0x10], eax
je 0x1002eff7
mov eax, edi
mov dword [ebp - 0x54], eax
xor edx, edx
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
push 0
setge dl
xor eax, eax
cmp eax, edx
mov edx, 0xd4e70302
sbb eax, eax
neg eax
mov dword [ebp - 0xed4], eax
dec dword [ebp - 0x14]
pop eax
push 3
pop ecx
jns 0x1002ef67
inc dword [ebp - 0x34]
mov edx, 0xd4e70302
cmp dword [ebp - 0x34], eax
jle 0x1002ef4d
push 2
pop esi
mov dword [ebp - 0x14], 0x5b9b55bb
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002f067
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc], 0x89351f20
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002f04f
xor eax, eax
push 0xfffffffffffffff9
mov dword [ebp - 0x14], eax
pop edx
jmp 0x1002f292
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x34], 0x94e8fe75
mov dword [ebp - 0x28], 0x7cce45d7
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x38], 0x552b8909
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x1002f0ad
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc5c], 0xcd4a7974
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002f095
xor eax, eax
push 4
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x1002f0d0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xec0], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1002f0b8
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x1002f0f0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc94], 0xa125
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002f0d8
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x1002f110
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x408], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1002f0f8
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x1002f287
or ecx, 0xffffffff
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 0xee72c34c
mov dword [ebp - 0x44], 0xa165f5c9
mov dword [ebp - 0x4c], 0xcc321a0
mov dword [ebp - 0x28], 0x44469448
mov dword [ebp - 0x28], 0x34ffdeab
mov dword [ebp - 0x28], 0xa83fb18b
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], 0x804524be
mov dword [ebp - 0x28], 0x76492a41
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], edx
mov dword [ebp - 0x70], edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xfc]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x14]
jg 0x1002f1cc
inc dword [ebp - 0x38]
jne 0x1002f1a7
xor eax, eax
cmp dword [ebp - 0xfc], eax
je 0x1002f1a2
cmp dword [ebp - 0x4c], eax
jne 0x1002f1a7
cmp dword [ebp - 0x24], eax
je 0x1002f1a9
mov eax, edi
imul ecx, eax, 9
mov eax, dword [ebp - 0xeb8]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setne dl
sub edx, eax
jne 0x1002f1cc
xor eax, eax
mov ecx, eax
jmp 0x1002f1ce
mov ecx, edi
mov eax, dword [ebp - 0xfc]
add eax, ecx
xor ecx, ecx
cmp eax, 0xd22
setl cl
mov dword [ebp - 0x20], ecx
imul eax, dword [ebp - 0x20], 0xa093
cmp eax, dword [ebp - 0xfc]
jl 0x1002f1fb
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x14], eax
je 0x1002f1fd
mov ecx, edi
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xc94]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
or eax, 0xffffffff
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x14], eax
je 0x1002f222
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xeb8]
xor edx, edx
mov ecx, dword [ebp - 0xc5c]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x38]
jle 0x1002f240
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x408]
mov eax, dword [ebp - 0x10]
push 0
mov eax, dword [ebp + eax*4 - 0xfc]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x408]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
pop eax
setle dl
mov dword [ebp - 0x54], edx
dec dword [ebp - 0x10]
push 0xfffffffffffffff9
pop edx
jns 0x1002f11c
cmp dword [ebp - 0xfc], eax
jne 0x1002f29c
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe6
je 0x1002f072
mov dword [ebp - 0x44], eax
mov ecx, 0xffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xfffffff5
cmp dword [ebp - 0x34], 6
jne 0x1002f343
jmp 0x1002f2bc
xor eax, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x10], eax
jmp 0x1002f2d1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002f2c4
mov eax, dword [ebp - 0x588]
xor ecx, ecx
mov eax, dword [ebp - 0x588]
mov eax, dword [ebp - 0x34]
cmp eax, 0x184d
setl cl
imul ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, 0x3c236633
jne 0x1002f309
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x34], eax
je 0x1002f30b
mov edx, edi
mov eax, dword [ebp - 0x588]
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002f331
push 0x393
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
inc dword [ebp - 0x34]
mov ecx, 0xffff
cmp dword [ebp - 0x34], 6
je 0x1002f2ba
mov dword [ebp - 0x48], 0xfffffffb
mov eax, 0x71e9942c
mov dword [ebp - 0x1c], 0x31551da6
mov ecx, 0x61e7
mov dword [ebp - 0x40], 0xfff6
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x20], 0x131e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
je 0x1002f3ac
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1002f3ae
mov ecx, edi
jmp 0x1002f3b0
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x30]
xor edx, edx
cmp ecx, eax
push 5
setle dl
xor ecx, ecx
pop eax
sub edx, eax
mov eax, dword [ebp - 0x40]
cmp edx, eax
mov eax, dword [ebp - 0x40]
push 3
setge cl
sub eax, ecx
neg eax
pop esi
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x5d580090
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x9e62
setl al
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
sub ecx, 0x1ef5c421
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x1f4]
sub edx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1f4]
add ecx, edx
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0x8c5cecce
setne al
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], eax
jl 0x1002f611
mov dword [ebp - 0x54], 0xa7da9fc5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002f481
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x870], 0xd14a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1002f468
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x1002f5ff
mov dword [ebp - 0x34], 0x1021f5eb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002f4b0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x404], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002f498
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x1002f5fc
cmp dword [ebp - 0x34], eax
jne 0x1002f4d1
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x1fc], 0
jne 0x1002f4d1
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x86c]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x1fc], edi
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
cmp eax, 0x4171b3fe
setl cl
cmp ecx, 0xd3b05e26
ja 0x1002f52f
xor eax, eax
cmp dword [ebp - 0x870], eax
jne 0x1002f5fa
jmp 0x1002f5ee
mov dword [ebp - 0x14], 0x106df3f1
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x404]
cmp ecx, eax
setg dl
xor eax, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x14], eax
jmp 0x1002f5e5
mov dword [ebp - 0x10], eax
jmp 0x1002f569
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x102c], 0x1b866267
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002f558
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1fc]
jne 0x1002f57f
mov eax, dword [ebp - 0x404]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov eax, dword [ebp - 0x1028]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x1fc]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1002f5d9
mov dword [ebp - 0x4c], 0x237a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x1fc]
neg eax
mov dword [ebp - 0x4c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x10
jne 0x1002f5c0
inc dword [ebp - 0x14]
push 0
pop eax
cmp dword [ebp - 0x14], edi
jl 0x1002f553
dec dword [ebp - 0x20]
push 0
pop eax
jns 0x1002f4bc
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jle 0x1002f489
dec dword [ebp - 0x30]
jns 0x1002f458
mov dword [ebp - 0x1c], 0x44555950
mov dword [ebp - 0x20], 0x88dd0bb2
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1002f62c
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1002f670
mov dword [ebp - 0x4c], 0x814b
xor edx, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setle dl
mov dword [ebp - 0x10], edx
jmp 0x1002f743
push 4
mov dword [ebp - 0x34], 0xf4a1d2da
pop ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1002f69a
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1294], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002f688
mov dword [ebp - 0x1c], 6
jmp 0x1002f739
mov dword [ebp - 0x14], 0x8c84060a
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x1002f6bb
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x14], edi
je 0x1002f6e4
cmp dword [ebp - 0x1c], eax
je 0x1002f6e4
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002f6df
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
dec dword [ebp - 0x20]
jmp 0x1002f733
mov dword [ebp - 0x14], eax
jmp 0x1002f6fe
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002f6fb
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1c
jg 0x1002f6e9
mov dword [ebp - 0x14], eax
jmp 0x1002f72d
mov dword [ebp - 0x20], eax
jmp 0x1002f724
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002f721
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1002f70e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1002f709
inc dword [ebp - 0x54]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x20
jge 0x1002f6a6
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], 0x25
jl 0x1002f783
xor eax, eax
mov dword [ebp - 0x54], ecx
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002f77a
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
or ecx, 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x25
jge 0x1002f762
xor eax, eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1002f7a8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdb8], 0x329e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002f790
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1002f7d0
mov dword [ebp - 0x10], eax
jmp 0x1002f7c3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x608], 0xfb63
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002f7b2
mov dword [ebp - 0x608], ecx
jmp 0x1002f84e
mov dword [ebp - 0x4c], 0xfffffff7
mov dword [ebp - 0x54], 0x4f934f54
mov dword [ebp - 0x54], 0x23e93d0b
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jg 0x1002f84e
jmp 0x1002f7f5
xor eax, eax
mov dword [ebp - 0x38], 2
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002f810
push 0x720
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
xor eax, eax
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], eax
jne 0x1002f82a
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x17
jle 0x1002f7f3
mov dword [ebp - 0x30], 7
xor eax, eax
mov dword [ebp - 0x10], 0x76820624
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002f87a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12ac], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002f866
xor eax, eax
mov dword [ebp - 0x14], eax
or ecx, 0xffffffff
cmp dword [ebp - 0x14], edi
jge 0x1002f899
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x400], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002f885
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1002f8a7
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], esi
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe9
jne 0x1002f89e
inc dword [ebp - 0x400]
mov dword [ebp - 0x3c], 0xe101
mov dword [ebp - 0x38], 0xfff6
mov dword [ebp - 0x650], edi
mov dword [ebp - 0x64c], edi
mov dword [ebp - 0x648], edi
mov dword [ebp - 0x644], edi
mov dword [ebp - 0x14], 0x3aaf5bfb
mov dword [ebp - 0x20], 0xefcdf11b
mov dword [ebp - 0x34], 0xc27f355c
mov dword [ebp - 0x54], 0xfffc
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x20], 0xffff
test eax, eax
je 0x1002f911
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1002f913
mov ecx, edi
jmp 0x1002f915
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x14]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x6335c0de
je 0x1002f93a
mov edx, eax
cmp dword [ebp - 0x20], eax
je 0x1002f93c
mov edx, edi
mov dword [ebp - 0x38], eax
xor ecx, ecx
mov esi, dword [ebp - 0x38]
mov dword [ebp - 0x644], esi
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setg dl
xor eax, eax
imul edx, dword [ebp - 0x34]
cmp esi, edi
setne al
add edx, eax
imul edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x34]
jne 0x1002f987
xor eax, eax
cmp eax, dword [ebp - 0x34]
je 0x1002f9f4
mov eax, edi
cmp eax, dword [ebp - 0x34]
jle 0x1002f9f4
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x4c], 8
mov dword [ebp - 0x24], 0xc298c245
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002f9b6
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, dword [ebp - 0x4c]
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setl dl
xor eax, eax
cmp dword [ebp - 0x10], edx
jl 0x1002f9d4
mov edx, edi
cmp dword [ebp - 0x54], eax
jne 0x1002f9d6
mov edx, eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
neg ecx
push 2
sbb ecx, ecx
add eax, edx
inc ecx
imul ecx, eax
pop esi
mov dword [ebp - 0x38], ecx
jmp 0x1002fae7
xor eax, eax
push 2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], eax
pop esi
jmp 0x1002fa12
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1d8], 0xcd908fbd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002fa01
mov ecx, dword [ebp - 0x14]
xor edx, edx
imul ecx, dword [ebp - 0x644]
mov eax, dword [ebp - 0x14]
add ecx, 4
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1d4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setl cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x1d4]
cmp eax, 0x934e
jg 0x1002fa64
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x644]
mov eax, dword [ebp - 0x1d8]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1d8]
setge bl
xor ecx, ecx
cmp eax, 0x7412
setge cl
xor edx, edx
cmp ecx, ebx
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x644]
setle dl
add ecx, edx
xor edx, edx
cmp ecx, eax
sete dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1d8], eax
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1002fae9
push 0x19e5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor eax, eax
mov dword [ebp - 0x28], 0x5aba8b03
mov dword [ebp - 0x10], 0x824a8c6a
push 3
mov dword [ebp - 0x10], eax
pop ebx
cmp dword [ebp - 0x10], ebx
jge 0x1002fb1a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc0], 0x7b1891f7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002fb02
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1002fb2c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1002fb3e
mov dword [ebp - 0xfc0], 0xfffffffb
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff5
jge 0x1002fb31
mov dword [ebp - 0x14], edi
push 0xfffffffffffffffe
pop ecx
mov dword [ebp - 0x418], ecx
mov dword [ebp - 0x414], ecx
mov dword [ebp - 0x410], ecx
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x54], 0x920b2455
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002fb89
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x490], 0x8c45cdbe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002fb71
xor eax, eax
push 4
mov dword [ebp - 0x14], eax
pop ecx
jmp 0x1002fba2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xae4], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1002fb91
mov eax, dword [ebp - 0x490]
xor ecx, ecx
mov eax, dword [ebp - 0x488]
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0xadc]
cmp eax, 0xfce2
setg cl
mov dword [ebp - 0x418], ecx
mov eax, dword [ebp - 0xae0]
mov eax, dword [ebp - 0x490]
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x490], eax
xor eax, eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x1002fc6d
mov dword [ebp - 0x4c], 8
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x418], 0
jne 0x1002fc6b
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xae4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x418]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x418]
mov eax, dword [ebp - 0x54]
sub eax, 0xa1331cb
cmp eax, ecx
mov eax, dword [ebp - 0x418]
setle dl
imul edx, eax
cmp edx, dword [ebp - 0x14]
jl 0x1002fc4d
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x1002fc53
mov eax, dword [ebp - 0x418]
mov eax, dword [ebp - 0xadc]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x418]
mov dword [ebp - 0x4c], eax
dec dword [ebp - 0x14]
jns 0x1002fbf4
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002fc8d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0x4800fa7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002fc75
xor eax, eax
mov dword [ebp - 0x14], 0x81c2900
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002fcb7
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf8], 0x1713b910
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002fc9f
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002fcd6
push 9
pop ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x880], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002fcc2
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x1002fd8c
push 5
pop edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x10], eax
jmp 0x1002fcfe
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc64], 0xca335c22
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002fced
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
sub eax, 0x6c7d95fb
jne 0x1002fd1e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x14]
push 0
mov eax, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, 0xb593
mov dword [ebp + eax*4 - 0xf8], edx
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0xc64], edx
mov eax, dword [ebp - 0x87c]
cmp edx, eax
pop eax
setg cl
mov dword [ebp - 0x87c], ecx
dec dword [ebp - 0x14]
jns 0x1002fce5
xor edi, edi
inc edi
mov dword [ebp - 0x14], eax
jmp 0x1002fda2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6d4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002fd91
mov dword [ebp - 0x1c], 8
mov eax, 0xa65742d1
mov dword [ebp - 0x34], 0xa0d018d3
mov dword [ebp - 0x10], 0xf4f88039
mov dword [ebp - 0x14], 0xc2184e5a
mov dword [ebp - 0x20], 0x5a596def
mov dword [ebp - 0xb34], eax
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0xb2c], eax
mov dword [ebp - 0xb28], eax
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1002fdff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b8], 0xb395
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002fdee
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, 0x594d
setg al
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
xor edx, edx
add eax, 0x677b568c
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
mov dword [ebp - 0x10], edx
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, ebx
setg dl
sub eax, edx
sub eax, dword [ebp - 0x1c]
je 0x1002fe62
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x1002fe6b
jmp 0x1002fe64
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x1002fe6d
mov ecx, edi
mov eax, dword [ebp - 0x1c]
sub ecx, eax
xor eax, eax
mov dword [ebp - 0x10], eax
inc ecx
je 0x1002ff3b
cmp dword [ebp - 0x10], ebx
jge 0x1002fe9b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbe0], 0x73e70d2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002fe83
xor eax, eax
mov dword [ebp - 0x14], 0xe
jmp 0x1002ff2c
or ecx, 0xffffffff
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], 0x4716
mov dword [ebp - 0x10], eax
jmp 0x1002fecd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19c], 0x218670fc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1002febc
dec dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp - 0xbdc]
mov eax, dword [ebp - 0x19c]
mov eax, dword [ebp - 0xbd8]
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x19c]
add ecx, 8
cmp ecx, eax
mov eax, dword [ebp - 0x14]
push 0
setge dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0xfffffffb
dec dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], 7
jle 0x1002fea7
jmp 0x1002ffea
cmp dword [ebp - 0x10], ebx
jge 0x1002ff58
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x720], 0x47dc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002ff40
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1002ff64
mov ecx, edi
cmp dword [ebp - 0x14], eax
jne 0x1002ff66
mov ecx, eax
cmp dword [ebp - 0x71c], eax
jne 0x1002ff7f
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x1b4]
jge 0x1002ff7f
xor eax, eax
mov edx, eax
jmp 0x1002ff81
mov edx, edi
mov eax, dword [ebp - 0x71c]
imul eax, edx
sub ecx, eax
sub ecx, 0x722525a5
jne 0x1002ffa0
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x71c], eax
je 0x1002ffa2
mov edx, edi
mov eax, dword [ebp - 0x1b4]
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x71c]
jne 0x1002ffbd
mov eax, dword [ebp - 0x71c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], eax
jmp 0x1002ffe5
mov eax, dword [ebp - 0x20]
or ecx, 0xffffffff
add eax, dword [ebp - 0x1b4]
xor edx, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp eax, 0x35e44
setl cl
cmp ecx, 6
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb30], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x1003007c
cmp dword [ebp - 0xac], eax
je 0x1003007c
cmp eax, dword [ebp - 0x30]
jg 0x10030087