Function at 0x1002a18e
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100860f6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x14ec
call fcn.10081530
push esi
push edi
mov dword [ebp - 0x113c], 0xe91a049f
mov dword [ebp - 0x1138], 0xe91a049f
mov dword [ebp - 0x1134], 0xe91a049f
mov dword [ebp - 0x1130], 0xe91a049f
mov dword [ebp - 0x2a8], 0x971c1ec2
mov byte [ebp - 0x22b], 0
movzx eax, byte [ebp - 0x22b]
test eax, eax
je 0x1002a200
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov dword [ebp - 0x2a8], 0
jmp 0x1002a219
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 4
jge 0x1002a235
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x113c], 8
jmp 0x1002a20c
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x3c0], 0xc407858f
mov dword [ebp - 0xd08], 0x24b5
mov dword [ebp - 0xd10], 3
mov byte [ebp - 0x219], 0
movzx eax, byte [ebp - 0x219]
test eax, eax
je 0x1002a277
push 0xce1
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1350], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x1354], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1274], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x3c0], eax
jne 0x1002a2b5
mov dword [ebp - 0x5fc], 1
jmp 0x1002a2bc
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x5fc]
je 0x1002a2d3
mov dword [ebp - 0xc5c], 1
jmp 0x1002a2da
and dword [ebp - 0xc5c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x13f4], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x127c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x135c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1284], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0xd08]
mov dword [ebp - 0x128c], eax
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xd10], eax
mov dword [ebp - 0x115c], 0xe91a049f
mov dword [ebp - 0x1158], 0xe91a049f
mov dword [ebp - 0x1154], 0xe91a049f
mov dword [ebp - 0x1150], 0xe91a049f
mov dword [ebp - 0x8c], 0xe8cff0ea
mov dword [ebp - 0x4c], 0x8999d94b
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x6c], 0xfffffff7
push 2
lea ecx, [ebp - 0xbf4]
call fcn.100289a7
and dword [ebp - 4], 0
mov dword [ebp - 0x15c], 0x38140a97
mov dword [ebp - 0xd30], 0xa600
mov dword [ebp - 0x3c8], 0
jmp 0x1002a3a7
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 2
jge 0x1002a3c9
push dword [ebp - 0x3c8]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov dword [eax], 0x5741311e
jmp 0x1002a39a
mov dword [ebp - 0x8c], 0
jmp 0x1002a3e2
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xfffffff7
jne 0x1002a409
mov byte [ebp - 0x1e5], 0
movzx eax, byte [ebp - 0x1e5]
test eax, eax
je 0x1002a407
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
jmp 0x1002a3d5
cmp dword [ebp - 0x8c], 0
jne 0x1002a4f0
cmp dword [ebp - 0x4c], 0
jne 0x1002a42e
cmp dword [ebp - 0x20c], 0
jne 0x1002a42e
and dword [ebp - 0xb30], 0
jmp 0x1002a438
mov dword [ebp - 0xb30], 1
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xb30]
jg 0x1002a44f
mov dword [ebp - 0xd18], 1
jmp 0x1002a456
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x20c], eax
jge 0x1002a470
mov dword [ebp - 0xb38], 1
jmp 0x1002a477
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 0xfffffffd
jb 0x1002a48c
mov dword [ebp - 0xb40], 1
jmp 0x1002a493
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x20c]
imul eax, dword [ebp - 0xb40]
test eax, eax
jne 0x1002a4b2
xor eax, eax
inc eax
jne 0x1002a4b2
and dword [ebp - 0xd20], 0
jmp 0x1002a4bc
mov dword [ebp - 0xd20], 1
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x136c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1294], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x12b8], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x129c], eax
cmp dword [ebp - 0x6c], 0
je 0x1002a82b
mov dword [ebp - 0x224], 0x846b51f0
mov dword [ebp - 0x2a4], 0x336
push 1
lea ecx, [ebp - 0x10fc]
call fcn.100289a7
mov byte [ebp - 4], 1
mov dword [ebp - 0x2c8], 0
jmp 0x1002a52e
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
jge 0x1002a550
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x10fc]
call fcn.10028a14
mov dword [eax], 0x9242039c
jmp 0x1002a521
mov dword [ebp - 0x6c], 1
jmp 0x1002a560
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1002a689
mov dword [ebp - 0xb94], 8
cmp dword [ebp - 0x224], 0x2803
jl 0x1002a58c
mov dword [ebp - 0xb50], 1
jmp 0x1002a593
and dword [ebp - 0xb50], 0
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov dword [ebp - 0xb48], eax
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov ecx, dword [ebp - 0xb48]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb48]
mov eax, dword [eax]
imul eax, dword [ebp - 0xb50]
test eax, eax
je 0x1002a5e7
cmp dword [ebp - 0x2a4], 0
je 0x1002a5e7
mov dword [ebp - 0xb9c], 1
jmp 0x1002a5ee
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x6c], eax
jne 0x1002a605
mov dword [ebp - 0xb58], 1
jmp 0x1002a60c
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0xb58]
sub eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
jge 0x1002a626
mov dword [ebp - 0xb60], 1
jmp 0x1002a62d
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xb94]
cmp dword [ebp - 0xb60], eax
je 0x1002a647
mov dword [ebp - 0xd28], 1
jmp 0x1002a64e
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x12bc], eax
mov eax, dword [ebp - 0xb94]
cmp dword [ebp - 0xb9c], eax
jl 0x1002a671
mov dword [ebp - 0xba4], 1
jmp 0x1002a678
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0xba4]
mov dword [ebp - 0x8c], eax
jmp 0x1002a559
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x2a4], eax
je 0x1002a6a3
mov dword [ebp - 0xbac], 1
jmp 0x1002a6aa
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xbb4], eax
push 0
lea ecx, [ebp - 0x10fc]
call fcn.10028a14
mov ecx, dword [ebp - 0xbb4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xbbc], eax
push 0
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov ecx, dword [ebp - 0xbbc]
mov dword [eax], ecx
mov eax, dword [ebp - 0xbb4]
cmp eax, dword [ebp - 0xbbc]
jle 0x1002a71b
mov dword [ebp - 0xbc4], 1
jmp 0x1002a722
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0xbc4], eax
jg 0x1002a73c
mov dword [ebp - 0xbcc], 1
jmp 0x1002a743
and dword [ebp - 0xbcc], 0
xor eax, eax
inc eax
neg eax
imul eax, dword [ebp - 0xbcc]
sub eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0xd30]
jge 0x1002a76f
mov dword [ebp - 0xbd4], 1
jmp 0x1002a776
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0xbd4], eax
jl 0x1002a790
mov dword [ebp - 0xbdc], 1
jmp 0x1002a797
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0xbdc], eax
jle 0x1002a7b1
mov dword [ebp - 0xbe4], 1
jmp 0x1002a7b8
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x15c]
imul eax, dword [ebp - 0xbe4]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xd40], eax
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0xd38]
cmp eax, dword [ebp - 0xd40]
je 0x1002a80a
mov dword [ebp - 0x4ec], 1
jmp 0x1002a811
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x10fc]
call fcn.10028a0f
jmp 0x1002a8a1
mov dword [ebp - 0x15c], 0
jmp 0x1002a844
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jg 0x1002a867
push dword [ebp - 0x15c]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002a865
jmp 0x1002a867
jmp 0x1002a837
mov dword [ebp - 0x4c], 0
jmp 0x1002a877
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x1002a8a1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov esi, eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xbf4]
call fcn.10028a14
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1002a870
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf4]
call fcn.10028a0f
mov dword [ebp - 0x2b4], 0x971c1ec2
mov dword [ebp - 0x38], 0xfb0b0297
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x12a4], 0xb817
mov dword [ebp - 0x3a4], 0
jmp 0x1002a8ee
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x1002a907
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
jmp 0x1002a8e1
mov dword [ebp - 0x38], 0
jmp 0x1002a917
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1002acf5
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x170], 0xfffffff9
mov dword [ebp - 0x3f0], 0x734bd47c
push 3
pop eax
test eax, eax
je 0x1002a984
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x64]
mov ecx, dword [ebp - 0x38]
imul eax, dword [ebp + ecx*4 - 0x64]
mov ecx, dword [ebp - 0x38]
sub eax, dword [ebp + ecx*4 - 0x64]
add eax, 0xd606
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 0xe215
jl 0x1002a99c
mov dword [ebp - 0xae0], 1
jmp 0x1002a9a3
and dword [ebp - 0xae0], 0
cmp dword [ebp - 0xae0], 0xf1a969ac
jbe 0x1002a9bb
mov dword [ebp - 0x4f4], 1
jmp 0x1002a9c2
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x64]
imul eax, dword [ebp - 0x4f4]
cmp eax, 0x237f
je 0x1002a9e3
mov dword [ebp - 0xae8], 1
jmp 0x1002a9ea
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
add eax, 0x17a84e60
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ebp + ecx*4 - 0x64]
jge 0x1002aa0a
mov dword [ebp - 0x4fc], 1
jmp 0x1002aa11
and dword [ebp - 0x4fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x4fc], eax
jge 0x1002aa2f
mov dword [ebp - 0xaf0], 1
jmp 0x1002aa36
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
neg eax
mov dword [ebp - 0x504], eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x61943ec3
jle 0x1002aa68
mov dword [ebp - 0xaf8], 1
jmp 0x1002aa6f
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0xaf8]
add ecx, 0x131d
cmp dword [ebp + eax*4 - 0x64], ecx
jl 0x1002aa90
mov dword [ebp - 0x50c], 1
jmp 0x1002aa97
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x64]
sub eax, dword [ebp - 0x50c]
mov dword [ebp - 0xb00], 1
jmp 0x1002aab7
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x64]
add eax, dword [ebp - 0xb00]
mov ecx, dword [ebp - 0x38]
imul eax, dword [ebp + ecx*4 - 0x64]
mov ecx, dword [ebp - 0x38]
add eax, dword [ebp + ecx*4 - 0x64]
je 0x1002abb4
mov dword [ebp - 0x514], 0x1a6f
mov dword [ebp - 0x214], 0
jmp 0x1002aafc
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jl 0x1002aba5
mov dword [ebp - 0x12c4], 1
mov dword [ebp - 0x160], 0
jmp 0x1002ab2c
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jg 0x1002ab94
mov dword [ebp - 0x12c0], 0xffffffff
mov dword [ebp - 0x137c], 0x6ac39b39
mov dword [ebp - 0x170], 0
jmp 0x1002ab62
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jg 0x1002ab85
mov byte [ebp - 0x21b], 0
movzx eax, byte [ebp - 0x21b]
test eax, eax
je 0x1002ab83
call dword [sym.imp.USER32.dll_WaitMessage]
jmp 0x1002ab55
mov eax, dword [ebp - 0x514]
inc eax
mov dword [ebp - 0x514], eax
jmp 0x1002ab1f
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x170], eax
jmp 0x1002aaef
mov dword [ebp - 0x160], 0xfffffff8
jmp 0x1002acf0
mov dword [ebp - 0x10a8], 0xc9a8
mov dword [ebp - 0x10a4], 0xc9a8
mov dword [ebp - 0x10a0], 0xc9a8
mov dword [ebp - 0x109c], 0xc9a8
lea ecx, [ebp - 0x429]
call fcn.1000935a
push eax
lea eax, [ebp - 0x1098]
push eax
lea eax, [ebp - 0x10a8]
push eax
lea ecx, [ebp - 0x14a0]
call fcn.10028a23
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe00]
call fcn.100289e9
mov dword [ebp - 4], 2
push 3
lea ecx, [ebp - 0xe00]
call fcn.10028a14
mov esi, eax
push 3
lea ecx, [ebp - 0xe00]
call fcn.10028a14
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1002ac46
mov dword [ebp - 0xb08], 1
jmp 0x1002ac4d
and dword [ebp - 0xb08], 0
cmp dword [ebp - 0xb08], 1
jge 0x1002ac62
mov dword [ebp - 0x51c], 1
jmp 0x1002ac69
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x3f0]
cmp dword [ebp - 0x51c], eax
je 0x1002aca3
push 3
lea ecx, [ebp - 0xe00]
call fcn.10028a14
push 1
lea ecx, [ebp - 0xe00]
call fcn.10028a14
cmp dword [ebp - 0x3f0], 0
jne 0x1002aca3
and dword [ebp - 0xb10], 0
jmp 0x1002acad
mov dword [ebp - 0xb10], 1
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x160], eax
mov byte [ebp - 0x1ed], 0
movzx eax, byte [ebp - 0x1ed]
test eax, eax
je 0x1002ace1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe00]
call fcn.10028a0f
jmp 0x1002a910
mov byte [ebp - 0x21d], 0
movzx eax, byte [ebp - 0x21d]
test eax, eax
je 0x1002ad2f
push 0
push 0x1b90
push 0x676
push 0x269
push 0xd19
push 0x1b26
push 0x1703
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov byte [ebp - 0x225], 0
mov dword [ebp - 0x2ac], 8
mov dword [ebp - 0x374], 0
jmp 0x1002ad59
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 1
jge 0x1002ad75
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0xd48], 1
jmp 0x1002ad4c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd48]
mov dword [ebp - 0x2ac], eax
mov dword [ebp - 0x2ac], 0xfffffffb
jmp 0x1002ada1
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x18
jl 0x1002ae98
push 1
lea ecx, [ebp - 0xe10]
call fcn.100289a7
mov dword [ebp - 4], 3
mov dword [ebp - 0x2d4], 0
jmp 0x1002addb
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 1
jge 0x1002adfd
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0xe10]
call fcn.10028a14
mov dword [eax], 0x2a1836cc
jmp 0x1002adce
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028a14
mov dword [eax], 0xfffffff3
jmp 0x1002ae36
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028a14
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x524]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028a14
cmp dword [eax], 0xffffffe8
jne 0x1002ae84
mov byte [ebp - 0x1f5], 0
movzx eax, byte [ebp - 0x1f5]
test eax, eax
je 0x1002ae82
push 0x25e7
push 0xca6
push 0x2e7
push 0x894
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
jmp 0x1002ae12
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe10]
call fcn.10028a0f
jmp 0x1002ad94
movzx eax, byte [ebp - 0x225]
test eax, eax
je 0x1002aead
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov dword [ebp - 0x2b4], 0
jmp 0x1002aec6
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 4
jge 0x1002aee2
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x115c], 8
jmp 0x1002aeb9
mov dword [ebp - 0xb0], 0xfcb50bf3
mov dword [ebp - 0x12c8], 0xffffffff
mov dword [ebp - 0x1164], 0x7b051af7
mov dword [ebp - 0x1168], 0xffffffff
mov dword [ebp - 0x1170], 1
mov dword [ebp - 0x1178], 9
mov dword [ebp - 0x1180], 1
mov dword [ebp - 0x1188], 0x6e74e800
push 3
lea ecx, [ebp - 0x1368]
call fcn.100289a7
mov dword [ebp - 4], 4
mov dword [ebp - 0xb20], 0xfffffff6
mov dword [ebp - 0xc8], 0
jmp 0x1002af69
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1002af85
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xf88], 7
jmp 0x1002af5c
mov dword [ebp - 0xc8], 0
jmp 0x1002af9e
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1002afc0
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x1368]
call fcn.10028a14
mov dword [eax], 0xecb302af
jmp 0x1002af91
mov dword [ebp - 0xb0], 2
jmp 0x1002afd9
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x1002b09e
mov dword [ebp - 0xd70], 0xe864896e
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp + eax*4 - 0xf88]
mov ecx, dword [ebp - 0xb0]
imul eax, dword [ebp + ecx*4 - 0xf88]
test eax, eax
jne 0x1002b01d
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0xf88], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp + eax*4 - 0xf88], 0x71dfd947
jne 0x1002b03c
mov dword [ebp - 0xb18], 1
jmp 0x1002b043
and dword [ebp - 0xb18], 0
cmp dword [ebp - 0xb18], 0xffffffff
jae 0x1002b058
mov dword [ebp - 0x52c], 1
jmp 0x1002b05f
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x52c]
mov dword [ebp - 0xd70], eax
mov byte [ebp - 0x227], 0
movzx eax, byte [ebp - 0x227]
test eax, eax
je 0x1002b099
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x1002afcc
mov eax, dword [ebp - 0xb20]
dec eax
mov dword [ebp - 0xb20], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1368]
call fcn.10028a0f
push 1
lea ecx, [ebp - 0x1018]
call fcn.100289a7
mov dword [ebp - 4], 5
mov dword [ebp - 0xd0], 0
jmp 0x1002b0e7
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 1
jge 0x1002b109
push dword [ebp - 0xd0]
lea ecx, [ebp - 0x1018]
call fcn.10028a14
mov dword [eax], 0x9f9b3198
jmp 0x1002b0da
mov dword [ebp - 0xd0], 0
jmp 0x1002b122
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1002b13e
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x49c], 0x8094a188
jmp 0x1002b115
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x49c], 0
jmp 0x1002b16c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x49c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x49c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x49c], 0
jl 0x1002b1b4
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x49c]
lea ecx, [ebp - 0x1018]
call fcn.10028a14
mov esi, eax
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x49c]
lea ecx, [ebp - 0x1018]
call fcn.10028a14
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1002b151
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1018]
call fcn.10028a0f
mov dword [ebp - 0x114c], 0xe91a049f
mov dword [ebp - 0x1148], 0xe91a049f
mov dword [ebp - 0x1144], 0xe91a049f
mov dword [ebp - 0x1140], 0xe91a049f
mov dword [ebp - 0x9c], 0x2e91a04
mov dword [ebp - 0xd90], 0xc857617
mov dword [ebp - 0x9c], 0
jmp 0x1002b218
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe5
jne 0x1002b2fd
push 1
lea ecx, [ebp - 0x10b4]
call fcn.100289a7
mov dword [ebp - 4], 6
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x37c], 0
jmp 0x1002b25c
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 1
jge 0x1002b27e
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x10b4]
call fcn.10028a14
mov dword [eax], 0x24f84b81
jmp 0x1002b24f
mov dword [ebp - 0x298], 0
jmp 0x1002b297
mov eax, dword [ebp - 0x298]
dec eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0
jl 0x1002b2e9
mov dword [ebp - 0xd78], 9
mov byte [ebp - 0x1f8], 0
movzx eax, byte [ebp - 0x1f8]
test eax, eax
je 0x1002b2ce
push 0x105f
push 0
push 0xa0
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, dword [ebp - 0xd78]
push dword [ebp - 0x298]
lea ecx, [ebp - 0x10b4]
call fcn.10028a14
mov dword [eax], esi
jmp 0x1002b28a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10b4]
call fcn.10028a0f
jmp 0x1002b20b
mov dword [ebp - 0x9c], 0xfffffff4
jmp 0x1002b316
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xffffffe3
jge 0x1002b54e
push 3
lea ecx, [ebp - 0xe20]
call fcn.100289a7
mov dword [ebp - 4], 7
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x2dc], 0
jmp 0x1002b35a
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x1002b37c
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xe20]
call fcn.10028a14
mov dword [eax], 0x88eb9876
jmp 0x1002b34d
mov byte [ebp - 0x216], 0
movzx eax, byte [ebp - 0x216]
test eax, eax
je 0x1002b398
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov dword [ebp - 0x234], 2
jmp 0x1002b3b1
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x1002b53a
mov dword [ebp - 0x258], 0xffffffff
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x234], eax
je 0x1002b3e2
mov dword [ebp - 0xb28], 1
jmp 0x1002b3e9
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0xb28], eax
jl 0x1002b403
mov dword [ebp - 0xd80], 1
jmp 0x1002b40a
and dword [ebp - 0xd80], 0
push 0
lea ecx, [ebp - 0xe20]
call fcn.10028a14
mov ecx, dword [ebp - 0x234]
cmp dword [eax], ecx
jne 0x1002b42d
mov dword [ebp - 0x538], 1
jmp 0x1002b434
and dword [ebp - 0x538], 0
push 1
lea ecx, [ebp - 0xe20]
call fcn.10028a14
mov eax, dword [eax]
cmp eax, dword [ebp - 0x538]
jne 0x1002b457
mov dword [ebp - 0xd88], 1
jmp 0x1002b45e
and dword [ebp - 0xd88], 0
mov eax, 0x4caa5d73
test eax, eax
je 0x1002b470
cmp dword [ebp - 0x258], 0
jne 0x1002b482
cmp dword [ebp - 0x258], 0
jne 0x1002b482
and dword [ebp - 0xba8], 0
jmp 0x1002b48c
mov dword [ebp - 0xba8], 1
push 0
lea ecx, [ebp - 0xe20]
call fcn.10028a14
mov ecx, dword [ebp - 0xba8]
cmp ecx, dword [eax]
jle 0x1002b4af
mov dword [ebp - 0x540], 1
jmp 0x1002b4b6
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x540]
cmp eax, dword [ebp - 0x9c]
jl 0x1002b4d6
mov dword [ebp - 0x8ac], 1
jmp 0x1002b4dd
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x258]
cmp eax, dword [ebp - 0x8ac]
jl 0x1002b4f7
mov dword [ebp - 0x548], 1
jmp 0x1002b4fe
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0xd90], eax
mov byte [ebp - 0x1fa], 0
movzx eax, byte [ebp - 0x1fa]
test eax, eax
je 0x1002b535
push 0
push 0x1708
push 0
push 0x1335
push 0x2520
call dword [sym.imp.GDI32.dll_ExtCreatePen]
jmp 0x1002b3a4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe20]
call fcn.10028a0f
jmp 0x1002b309
mov dword [ebp - 0x268], 0x971c1ec2
push 2
lea ecx, [ebp - 0x10c0]
call fcn.100289a7
mov dword [ebp - 4], 8
mov dword [ebp - 0x2b0], 0xfffffffc
mov dword [ebp - 0x384], 0
jmp 0x1002b58f
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 2
jge 0x1002b5b1
push dword [ebp - 0x384]
lea ecx, [ebp - 0x10c0]
call fcn.10028a14
mov dword [eax], 0x571177e8
jmp 0x1002b582
mov dword [ebp - 0x2b0], 0
jmp 0x1002b5ca
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jg 0x1002b5ed
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0x10c0]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002b5eb
jmp 0x1002b5ed
jmp 0x1002b5bd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10c0]
call fcn.10028a0f
mov byte [ebp - 0x1fc], 0
push 4
lea ecx, [ebp - 0xe30]
call fcn.100289a7
mov dword [ebp - 4], 9
mov dword [ebp - 0x174], 0x19d29be1
push 1
lea ecx, [ebp - 0x10d8]
call fcn.100289a7
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x28], 0
jmp 0x1002b642
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1002b65e
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe30]
call fcn.10028a14
mov dword [eax], 4
jmp 0x1002b63b
mov dword [ebp - 0x28], 0
jmp 0x1002b66e
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1002b684
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x12b0], 0xffffffff
jmp 0x1002b667
mov dword [ebp - 0x28], 0
jmp 0x1002b694
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1002b6b0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x10d8]
call fcn.10028a14
mov dword [eax], 0xc01e
jmp 0x1002b68d
mov dword [ebp - 0x174], 0
jmp 0x1002b6c9
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jg 0x1002b8e8
mov dword [ebp - 0x260], 0x4e6d4f28
mov dword [ebp - 0x1190], 0xd5493e6
mov dword [ebp - 0x1198], 0x6a7f4ea1
mov dword [ebp - 0x11a0], 0xfffffffa
mov dword [ebp - 0x11a8], 0x13f5e3d1
mov dword [ebp - 0x11b0], 0xcaea0a9f
mov dword [ebp - 0x2e4], 0
jmp 0x1002b72b
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 3
jge 0x1002b747
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x14c0], 0x3703acb6
jmp 0x1002b71e
mov dword [ebp - 0x260], 3
jmp 0x1002b760
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jl 0x1002b8bf
mov dword [ebp - 0x38c], 0
jmp 0x1002b786
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 3
jge 0x1002b7a2
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x1030], 0xba07e4fc
jmp 0x1002b779
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1030], 0
jmp 0x1002b7d0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1030]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1030], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1030], 3
jg 0x1002b8ba
mov dword [ebp - 0xda0], 0
push dword [ebp - 0x174]
lea ecx, [ebp - 0xe30]
call fcn.10028a14
cmp dword [eax], 0
jb 0x1002b810
mov dword [ebp - 0xa5c], 1
jmp 0x1002b817
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa5c]
sub eax, 0xfffc
mov dword [ebp - 0x550], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x550]
mov dword [ebp + eax - 0x12b0], ecx
cmp dword [ebp - 0x550], 0
je 0x1002b857
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1002b857
mov dword [ebp - 0xd98], 1
jmp 0x1002b85e
and dword [ebp - 0xd98], 0
push dword [ebp - 0x174]
lea ecx, [ebp - 0xe30]
call fcn.10028a14
push dword [ebp - 0x174]
lea ecx, [ebp - 0xe30]
call fcn.10028a14
cmp dword [eax], 0x3ddc
jl 0x1002b894
mov dword [ebp - 0x8b4], 1
jmp 0x1002b89b
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0xda0], eax
cmp dword [ebp - 0x260], 0
je 0x1002b8b5
jmp 0x1002b7b5
jmp 0x1002b7b5
jmp 0x1002b753
push 0
lea ecx, [ebp - 0x10d8]
call fcn.10028a14
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x558]
mov dword [ecx], eax
jmp 0x1002b6bc
mov byte [ebp - 0x226], 0
movzx eax, byte [ebp - 0x226]
test eax, eax
je 0x1002b914
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x10d8]
call fcn.10028a0f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe30]
call fcn.10028a0f
movzx eax, byte [ebp - 0x1fc]
test eax, eax
je 0x1002b947
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov dword [ebp - 0x570], 0x57a55752
mov dword [ebp - 0x30], 0
jmp 0x1002b961
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002b977
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc58], 0xd7f825e
jmp 0x1002b95a
mov dword [ebp - 0x30], 0
jmp 0x1002b987
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1002b99d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2c4], 0x87013dce
jmp 0x1002b980
mov dword [ebp - 0x30], 0
jmp 0x1002b9ad
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002b9c3
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4d4], 0
jmp 0x1002b9a6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2c4], 2
jmp 0x1002b9f1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2c4], 0
jl 0x1002ba6e
mov byte [ebp - 0x218], 0
movzx eax, byte [ebp - 0x218]
test eax, eax
je 0x1002ba22
push 0
push 0x1ec7
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov byte [ebp - 0x1fe], 0
movzx eax, byte [ebp - 0x1fe]
test eax, eax
je 0x1002ba69
push 0x631
push 0x790
push 0x98f
push 0x2603
push 0x1866
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x1002b9d6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4d4], 2
jmp 0x1002ba9c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4d4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4d4], 0
jl 0x1002bd41
mov dword [ebp - 0x1c], 0xd2ab60e7
mov dword [ebp - 0x434], 0x5aba9a98
mov dword [ebp - 0x1c], 0
jmp 0x1002bad1
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1002bd23
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d4]
mov eax, dword [ebp + eax*4 - 0xc58]
mov dword [ebp - 0x11b8], eax
push 4
pop eax
shl eax, 0
xor ecx, ecx
inc ecx
sub ecx, dword [ebp + eax - 0x4d4]
cmp ecx, dword [ebp - 0x1c]
jle 0x1002bb16
mov dword [ebp - 0xb34], 1
jmp 0x1002bb1d
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0xb34]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x434]
add eax, 0x5721
jne 0x1002bb4b
cmp dword [ebp - 0x434], 0
jne 0x1002bb4b
and dword [ebp - 0x560], 0
jmp 0x1002bb55
mov dword [ebp - 0x560], 1
cmp dword [ebp - 0x560], 0xe67e
jle 0x1002bb6d
mov dword [ebp - 0x8bc], 1
jmp 0x1002bb74
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x8bc]
sub ecx, dword [ebp + eax*4 - 0x2c4]
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax*4 - 0xc58]
jle 0x1002bb9c
mov dword [ebp - 0x568], 1
jmp 0x1002bba3
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0x792891f4
jg 0x1002bbbb
mov dword [ebp - 0xa64], 1
jmp 0x1002bbc2
and dword [ebp - 0xa64], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa64]
sub ecx, dword [ebp + eax - 0xc58]
mov dword [ebp - 0x570], ecx
mov eax, dword [ebp - 0x570]
add eax, 0xe769
imul eax, dword [ebp - 0x1c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x4d4]
cmp dword [ebp + ecx*4 - 0xc58], eax
jne 0x1002bc0c
mov dword [ebp - 0x43c], 1
jmp 0x1002bc13
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x43c]
mov dword [ebp + eax - 0xc58], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x2c4]
cmp dword [ebp - 0x43c], eax
jge 0x1002bc44
mov dword [ebp - 0x8c4], 1
jmp 0x1002bc4b
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x2c4]
cmp dword [ebp - 0x8c4], eax
jle 0x1002bc6f
mov eax, 0xa016
test eax, eax
jne 0x1002bc6f
and dword [ebp - 0x578], 0
jmp 0x1002bc79
mov dword [ebp - 0x578], 1
cmp dword [ebp - 0x578], 0xe8ea
jne 0x1002bc91
mov dword [ebp - 0xbe8], 1
jmp 0x1002bc98
and dword [ebp - 0xbe8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbe8]
sub ecx, dword [ebp + eax - 0x4d4]
mov eax, dword [ebp - 0x1c]
cmp ecx, dword [ebp + eax*4 - 0x2c4]
jge 0x1002bcc3
mov dword [ebp - 0x580], 1
jmp 0x1002bcca
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x2c4]
cmp eax, dword [ebp - 0x580]
jg 0x1002bce8
mov dword [ebp - 0x8cc], 1
jmp 0x1002bcef
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 0x59141a9
jl 0x1002bd07
mov dword [ebp - 0x588], 1
jmp 0x1002bd0e
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x588]
mov dword [ebp + eax*4 - 0x2c4], ecx
jmp 0x1002baca
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d4]
cmp dword [ebp + eax*4 - 0xc58], 0
je 0x1002bd3c
jmp 0x1002bd41
jmp 0x1002ba81
mov dword [ebp - 0x268], 0
jmp 0x1002bd5a
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 4
jge 0x1002c2a1
mov dword [ebp - 0x394], 1
mov dword [ebp - 0xda8], 0xc0021fbb
mov dword [ebp - 0x11c0], 0xfffb
mov dword [ebp - 0x2ec], 0
jmp 0x1002bd9e
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 3
jge 0x1002bdba
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x14cc], 0x585ed065
jmp 0x1002bd91
mov dword [ebp - 0x394], 0
jmp 0x1002bdd3
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 2
jne 0x1002c28b
mov dword [ebp - 0xd8], 0x2d149feb
mov dword [ebp - 0x3b8], 0xffffffff
push 3
lea ecx, [ebp - 0xc4c]
call fcn.100289a7
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x11c8], 0
mov dword [ebp - 0xdb8], 0x479b69b2
mov dword [ebp - 0xdc0], 0x73468807
mov dword [ebp - 0xa4], 0
jmp 0x1002be3f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1002be61
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xc4c]
call fcn.10028a14
mov dword [eax], 0xe814b733
jmp 0x1002be32
mov dword [ebp - 0xa4], 0
jmp 0x1002be7a
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x1002be96
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x2fc], 0
jmp 0x1002be6d
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0xd8], 2
jmp 0x1002bebb
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1002c277
mov dword [ebp - 0x11d0], 0xffffffff
mov dword [ebp - 0x3b0], 0x47d1afd0
mov dword [ebp - 0x11d8], 0x70cadd63
push 2
lea ecx, [ebp - 0x100c]
call fcn.100289a7
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x290], 0x1e69d086
mov dword [ebp - 0x2f4], 0
jmp 0x1002bf1a
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x1002bf3c
push dword [ebp - 0x2f4]
lea ecx, [ebp - 0x100c]
call fcn.10028a14
mov dword [eax], 1
jmp 0x1002bf0d
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xc4c]
call fcn.10028a14
cmp dword [eax], 0xbf9a
jge 0x1002bf61
mov dword [ebp - 0xa6c], 1
jmp 0x1002bf68
and dword [ebp - 0xa6c], 0
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xc4c]
call fcn.10028a14
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa6c]
jle 0x1002bf8f
mov dword [ebp - 0x590], 1
jmp 0x1002bf96
and dword [ebp - 0x590], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2fc]
dec eax
mov dword [ebp - 0x8d4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8d4]
mov dword [ebp + eax - 0x2fc], ecx
mov eax, dword [ebp - 0x590]
cmp eax, dword [ebp - 0x8d4]
je 0x1002c1c3
mov dword [ebp - 0x11e0], 0x982b
mov dword [ebp - 0xdb0], 0xffffffff
mov dword [ebp - 0x11e8], 0xcab43068
mov dword [ebp - 0x39c], 0
jmp 0x1002c006
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 4
jge 0x1002c022
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x14e8], 0xfffffffe
jmp 0x1002bff9
push 0
lea ecx, [ebp - 0x100c]
call fcn.10028a14
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x44c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x44c]
cmp dword [eax], 0
jne 0x1002c192
cmp dword [ebp - 0x3b0], 0
jne 0x1002c07c
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x11f0], eax
mov eax, 0x8712
test eax, eax
jne 0x1002c07c
and dword [ebp - 0x5a0], 0
jmp 0x1002c086
mov dword [ebp - 0x5a0], 1
cmp dword [ebp - 0xda8], 5
jle 0x1002c0a1
cmp dword [ebp - 0xdb0], 0
jne 0x1002c0a1
and dword [ebp - 0x598], 0
jmp 0x1002c0ab
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x598], eax
jg 0x1002c0c5
mov dword [ebp - 0xb3c], 1
jmp 0x1002c0cc
and dword [ebp - 0xb3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2fc]
cmp dword [ebp - 0xb3c], eax
jge 0x1002c0ed
mov dword [ebp - 0x8dc], 1
jmp 0x1002c0f4
and dword [ebp - 0x8dc], 0
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xc4c]
call fcn.10028a14
mov eax, dword [eax]
imul eax, dword [ebp - 0x5a0]
cmp eax, dword [ebp - 0x8dc]
jg 0x1002c122
mov dword [ebp - 0x5a8], 1
jmp 0x1002c129
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0xdb8]
cmp dword [ebp - 0x5a8], eax
je 0x1002c143
mov dword [ebp - 0xa74], 1
jmp 0x1002c14a
and dword [ebp - 0xa74], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2fc]
imul eax, dword [ebp - 0xa74]
inc eax
cmp eax, 0xffae3c77
jb 0x1002c172
mov dword [ebp - 0x5b0], 1
jmp 0x1002c179
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
sub eax, dword [ebp - 0x3b0]
neg eax
jne 0x1002c192
and dword [ebp - 0x46c], 0
jmp 0x1002c19c
mov dword [ebp - 0x46c], 1
push dword [ebp - 0xd8]
lea ecx, [ebp - 0xc4c]
call fcn.10028a14
mov ecx, dword [ebp - 0x46c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x3b8], eax
jmp 0x1002c204
mov dword [ebp - 0x1080], 0xc7e9a03a
mov dword [ebp - 0x107c], 0xc7e9a03a
mov dword [ebp - 0x1078], 0xc7e9a03a
mov dword [ebp - 0x1074], 0xc7e9a03a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1080]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1080], eax
mov dword [ebp - 0x290], 0xffffffe7
jmp 0x1002c21d
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x33
je 0x1002c263
mov dword [ebp - 0x11f8], 0xbff0
push 1
lea ecx, [ebp - 0x100c]
call fcn.10028a14
mov eax, dword [eax]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x1200], eax
imul eax, dword [ebp - 0xdc0], 0xfff9
mov dword [ebp - 0x3b8], eax
jmp 0x1002c210
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x100c]
call fcn.10028a0f
jmp 0x1002beae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4c]
call fcn.10028a0f
jmp 0x1002bdc6
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x114c], 8
jmp 0x1002bd4d
mov dword [ebp - 0xc4], 0xfcb50bf3
mov dword [ebp - 0x1208], 0xffffffff
mov dword [ebp - 0x1210], 0x7b051af7
mov dword [ebp - 0x1218], 0xffffffff
mov dword [ebp - 0x1220], 1
mov dword [ebp - 0x1228], 9
mov dword [ebp - 0x1230], 1
mov dword [ebp - 0x1238], 0x6e74e800
push 3
lea ecx, [ebp - 0x1378]
call fcn.100289a7
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xbb0], 0xfffffff6
mov dword [ebp - 0xfc], 0
jmp 0x1002c328
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x1002c344
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0xfac], 7
jmp 0x1002c31b
mov dword [ebp - 0xfc], 0
jmp 0x1002c35d
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x1002c37f
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x1378]
call fcn.10028a14
mov dword [eax], 0xecb302af
jmp 0x1002c350
mov dword [ebp - 0xc4], 2
jmp 0x1002c398
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1002c45d
mov dword [ebp - 0xdc8], 0xe864896e
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0xfac]
mov ecx, dword [ebp - 0xc4]
imul eax, dword [ebp + ecx*4 - 0xfac]
test eax, eax
jne 0x1002c3dc
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0xfac], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp + eax*4 - 0xfac], 0x71dfd947
jne 0x1002c3fb
mov dword [ebp - 0x8e4], 1
jmp 0x1002c402
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0xffffffff
jae 0x1002c417
mov dword [ebp - 0x5b8], 1
jmp 0x1002c41e
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x5b8]
mov dword [ebp - 0xdc8], eax
mov byte [ebp - 0x22e], 0
movzx eax, byte [ebp - 0x22e]
test eax, eax
je 0x1002c458
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x1002c38b
mov eax, dword [ebp - 0xbb0]
dec eax
mov dword [ebp - 0xbb0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1378]
call fcn.10028a0f
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x34], 0
jmp 0x1002c490
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffffe
jl 0x1002cd40
push 1
lea ecx, [ebp - 0x494]
call fcn.100289a7
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x47c], 8
mov dword [ebp - 0x308], 0
jmp 0x1002c4d1
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jge 0x1002c4f3
push dword [ebp - 0x308]
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov dword [eax], 0xaa9ac70c
jmp 0x1002c4c4
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov dword [eax], 0xffffffe9
jmp 0x1002c52c
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
cmp dword [eax], 0x10
jle 0x1002cd2c
mov dword [ebp - 0x184], 0x45d811f0
mov dword [ebp - 0x310], 6
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0x184], 0
jmp 0x1002c579
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 1
jge 0x1002cd27
mov dword [ebp - 0x3a8], 0x6721f7d9
mov dword [ebp - 0x17c], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
je 0x1002c5ae
mov dword [ebp - 0x5c8], 1
jmp 0x1002c5b5
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x184], 0
jne 0x1002c5ef
cmp dword [ebp - 0x34], 0x93bd
je 0x1002c5d3
mov dword [ebp - 0x8ec], 1
jmp 0x1002c5da
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 0x7863718b
jl 0x1002c5ef
and dword [ebp - 0xa7c], 0
jmp 0x1002c5f9
mov dword [ebp - 0xa7c], 1
mov eax, dword [ebp - 0x5c8]
neg eax
cmp eax, dword [ebp - 0xa7c]
jl 0x1002c615
mov dword [ebp - 0x5d0], 1
jmp 0x1002c61c
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5d0], eax
jl 0x1002c633
mov dword [ebp - 0x8f4], 1
jmp 0x1002c63a
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0x3b0cf5aa
jle 0x1002c652
mov dword [ebp - 0xdd0], 1
jmp 0x1002c659
and dword [ebp - 0xdd0], 0
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x1240], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jl 0x1002c686
mov dword [ebp - 0x5d8], 1
jmp 0x1002c68d
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x1002c6ae
mov dword [ebp - 0xb44], 1
jmp 0x1002c6b5
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x17c], 0x1c
jmp 0x1002c6da
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x2b
jne 0x1002cd22
mov dword [ebp - 0xcc], 0xffffffff
mov dword [ebp - 0xb4c], 0xffffffff
push 4
lea ecx, [ebp - 0xe50]
call fcn.100289a7
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x370], 0
jmp 0x1002c725
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 4
jge 0x1002c747
push dword [ebp - 0x370]
lea ecx, [ebp - 0xe50]
call fcn.10028a14
mov dword [eax], 0x51a330c1
jmp 0x1002c718
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov ecx, dword [ebp - 0xcc]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x34]
jne 0x1002c76d
mov dword [ebp - 0x8fc], 1
jmp 0x1002c774
and dword [ebp - 0x8fc], 0
cmp dword [ebp - 0x310], 0
je 0x1002c79b
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002c79b
mov dword [ebp - 0x5e0], 1
jmp 0x1002c7a2
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x8fc]
add eax, 8
je 0x1002cce1
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x11c], 0
jmp 0x1002c7e0
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 2
jge 0x1002c7fc
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x1038], 0x81dd571b
jmp 0x1002c7d3
mov dword [ebp - 0x11c], 0
jmp 0x1002c815
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1002c831
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0xe40], 0
jmp 0x1002c808
cmp dword [ebp - 0xcc], 0
je 0x1002c84e
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe50]
call fcn.10028a0f
jmp 0x1002cd22
mov dword [ebp - 0xcc], 0xffffffe5
jmp 0x1002c867
cmp dword [ebp - 0xcc], 0xffffffe7
jl 0x1002ccdf
mov dword [ebp - 0x18c], 1
cmp dword [ebp - 0xcc], 0
je 0x1002c9b9
cmp dword [ebp - 0x3a8], 0
jne 0x1002c8cd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1038]
dec eax
mov dword [ebp - 0x5e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp + eax - 0x1038], ecx
cmp dword [ebp - 0x5e8], 0
jne 0x1002c8cd
and dword [ebp - 0x904], 0
jmp 0x1002c8d7
mov dword [ebp - 0x904], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x34], eax
jne 0x1002c8ee
mov dword [ebp - 0xa84], 1
jmp 0x1002c8f5
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x47c], eax
je 0x1002c91b
mov dword [ebp - 0x5f0], 1
jmp 0x1002c922
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x5f0], eax
je 0x1002c93c
mov dword [ebp - 0xdd8], 1
jmp 0x1002c943
and dword [ebp - 0xdd8], 0
cmp dword [ebp - 0x904], 0x3def
jl 0x1002c95b
mov dword [ebp - 0xde0], 1
jmp 0x1002c962
and dword [ebp - 0xde0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe40]
mov dword [ebp - 0x1248], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe40]
mov dword [ebp - 0x1250], eax
push 3
pop eax
cmp eax, 0xffffffff
jne 0x1002c99b
mov dword [ebp - 0x5f8], 1
jmp 0x1002c9a2
and dword [ebp - 0x5f8], 0
imul eax, dword [ebp - 0x5f8], 6
test eax, eax
je 0x1002c9b9
mov dword [ebp - 0xbd8], 1
jmp 0x1002c9c0
and dword [ebp - 0xbd8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe40]
imul eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0x310], 0xd68e480b
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x184]
je 0x1002ca05
push 8
pop eax
test eax, eax
je 0x1002ca05
mov dword [ebp - 0x600], 1
jmp 0x1002ca0c
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x298b2365
je 0x1002ca24
mov dword [ebp - 0x90c], 1
jmp 0x1002ca2b
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x90c], 0x12f0
jl 0x1002ca43
mov dword [ebp - 0x608], 1
jmp 0x1002ca4a
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x608], eax
jle 0x1002ca64
mov dword [ebp - 0xa8c], 1
jmp 0x1002ca6b
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xa8c], eax
jne 0x1002ca85
mov dword [ebp - 0x610], 1
jmp 0x1002ca8c
and dword [ebp - 0x610], 0
imul eax, dword [ebp - 0x610], 0xbb84
cmp eax, dword [ebp - 0x34]
jge 0x1002caa7
mov dword [ebp - 0x914], 1
jmp 0x1002caae
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0xb4c]
cmp dword [ebp - 0x914], eax
je 0x1002cac8
mov dword [ebp - 0x618], 1
jmp 0x1002cacf
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 0xffffffff
jbe 0x1002cae4
mov dword [ebp - 0x620], 1
jmp 0x1002caeb
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0xb4c]
cmp dword [ebp - 0x620], eax
jl 0x1002cb05
mov dword [ebp - 0x91c], 1
jmp 0x1002cb0c
and dword [ebp - 0x91c], 0
cmp dword [ebp - 0x91c], 0x7196
jl 0x1002cb1c
cmp dword [ebp - 0x34], 0
xor eax, eax
imul eax, eax, 0xfffc
sub eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x18c]
je 0x1002cb3e
mov dword [ebp - 0x628], 1
jmp 0x1002cb45
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
sub eax, dword [ebp - 0x18c]
je 0x1002cb71
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002cb71
mov dword [ebp - 0xa94], 1
jmp 0x1002cb78
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0xa94], 0x145db5e4
jge 0x1002cb90
mov dword [ebp - 0x630], 1
jmp 0x1002cb97
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0x2c906c22
jle 0x1002cbaf
mov dword [ebp - 0x924], 1
jmp 0x1002cbb6
and dword [ebp - 0x924], 0
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
mov ecx, dword [ebp - 0x924]
cmp ecx, dword [eax]
jg 0x1002cbd9
mov dword [ebp - 0x638], 1
jmp 0x1002cbe0
and dword [ebp - 0x638], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x638]
sub ecx, dword [ebp + eax - 0xe40]
cmp dword [ebp - 0x18c], ecx
jle 0x1002cc07
jmp 0x1002cceb
mov dword [ebp - 0x47c], 0xe761d3f
push 0
lea ecx, [ebp - 0x494]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002cd0e
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe50]
call fcn.10028a0f
jmp 0x1002cd22
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xe50]
call fcn.10028a0f
jmp 0x1002c6cd
jmp 0x1002c56c
jmp 0x1002c508
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x494]
call fcn.10028a0f
jmp 0x1002c489
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x318], 0xc407858f
mov dword [ebp - 0xf7c], 0x24b5
mov dword [ebp - 0xf78], 3
mov byte [ebp - 0x200], 0
movzx eax, byte [ebp - 0x200]
test eax, eax
je 0x1002cd85
push 0xce1
call dword [sym.imp.USER32.dll_MessageBeep]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1258], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x1260], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1268], eax
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x318], eax
jne 0x1002cdcf
mov dword [ebp - 0x658], 1
jmp 0x1002cdd6
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x658]
je 0x1002cdf0
mov dword [ebp - 0xdf0], 1
jmp 0x1002cdf7
and dword [ebp - 0xdf0], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1270], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1288], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1290], eax
mov eax, dword [ebp - 0xf7c]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xf78], eax
mov dword [ebp - 0x94], 0xe8cff0ea
mov dword [ebp - 0x48], 0x8999d94b
mov dword [ebp - 0x194], 1
mov dword [ebp - 0x70], 0xfffffff7
push 2
lea ecx, [ebp - 0xc04]
call fcn.100289a7
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x168], 0x38140a97
mov dword [ebp - 0xc6c], 0xa600
mov dword [ebp - 0x378], 0
jmp 0x1002ceae
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 2
jge 0x1002ced0
push dword [ebp - 0x378]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov dword [eax], 0x5741311e
jmp 0x1002cea1
mov dword [ebp - 0x94], 0
jmp 0x1002cee9
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff7
jne 0x1002cf10
mov byte [ebp - 0x21a], 0
movzx eax, byte [ebp - 0x21a]
test eax, eax
je 0x1002cf0e
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
jmp 0x1002cedc
cmp dword [ebp - 0x94], 0
jne 0x1002cff7
cmp dword [ebp - 0x48], 0
jne 0x1002cf35
cmp dword [ebp - 0x194], 0
jne 0x1002cf35
and dword [ebp - 0xb54], 0
jmp 0x1002cf3f
mov dword [ebp - 0xb54], 1
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0xb54]
jg 0x1002cf56
mov dword [ebp - 0xd54], 1
jmp 0x1002cf5d
and dword [ebp - 0xd54], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x194], eax
jge 0x1002cf77
mov dword [ebp - 0x660], 1
jmp 0x1002cf7e
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0xfffffffd
jb 0x1002cf93
mov dword [ebp - 0x93c], 1
jmp 0x1002cf9a
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x194]
imul eax, dword [ebp - 0x93c]
test eax, eax
jne 0x1002cfb9
xor eax, eax
inc eax
jne 0x1002cfb9
and dword [ebp - 0xd00], 0
jmp 0x1002cfc3
mov dword [ebp - 0xd00], 1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x12a0], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x12a8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x12d8], eax
cmp dword [ebp - 0x70], 0
je 0x1002d332
mov dword [ebp - 0x19c], 0x846b51f0
mov dword [ebp - 0x294], 0x336
push 1
lea ecx, [ebp - 0x10f0]
call fcn.100289a7
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x320], 0
jmp 0x1002d035
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 1
jge 0x1002d057
push dword [ebp - 0x320]
lea ecx, [ebp - 0x10f0]
call fcn.10028a14
mov dword [eax], 0x9242039c
jmp 0x1002d028
mov dword [ebp - 0x70], 1
jmp 0x1002d067
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1002d190
mov dword [ebp - 0x678], 8
cmp dword [ebp - 0x19c], 0x2803
jl 0x1002d093
mov dword [ebp - 0xaa4], 1
jmp 0x1002d09a
and dword [ebp - 0xaa4], 0
push dword [ebp - 0x70]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov dword [ebp - 0x668], eax
push dword [ebp - 0x70]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov ecx, dword [ebp - 0x668]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x668]
mov eax, dword [eax]
imul eax, dword [ebp - 0xaa4]
test eax, eax
je 0x1002d0ee
cmp dword [ebp - 0x294], 0
je 0x1002d0ee
mov dword [ebp - 0xb68], 1
jmp 0x1002d0f5
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x70], eax
jne 0x1002d10c
mov dword [ebp - 0x670], 1
jmp 0x1002d113
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
sub eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jge 0x1002d12d
mov dword [ebp - 0x944], 1
jmp 0x1002d134
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x678]
cmp dword [ebp - 0x944], eax
je 0x1002d14e
mov dword [ebp - 0xca0], 1
jmp 0x1002d155
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x12e0], eax
mov eax, dword [ebp - 0x678]
cmp dword [ebp - 0xb68], eax
jl 0x1002d178
mov dword [ebp - 0x680], 1
jmp 0x1002d17f
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x94], eax
jmp 0x1002d060
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x294], eax
je 0x1002d1aa
mov dword [ebp - 0x94c], 1
jmp 0x1002d1b1
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x688], eax
push 0
lea ecx, [ebp - 0x10f0]
call fcn.10028a14
mov ecx, dword [ebp - 0x688]
mov dword [eax], ecx
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xaac], eax
push 0
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov ecx, dword [ebp - 0xaac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x688]
cmp eax, dword [ebp - 0xaac]
jle 0x1002d222
mov dword [ebp - 0x690], 1
jmp 0x1002d229
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x690], eax
jg 0x1002d243
mov dword [ebp - 0x954], 1
jmp 0x1002d24a
and dword [ebp - 0x954], 0
xor eax, eax
inc eax
neg eax
imul eax, dword [ebp - 0x954]
sub eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0xc6c]
jge 0x1002d276
mov dword [ebp - 0x698], 1
jmp 0x1002d27d
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x698], eax
jl 0x1002d297
mov dword [ebp - 0xb5c], 1
jmp 0x1002d29e
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0xb5c], eax
jle 0x1002d2b8
mov dword [ebp - 0x6a0], 1
jmp 0x1002d2bf
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0xef4], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0xef4]
cmp eax, dword [ebp - 0xc74]
je 0x1002d311
mov dword [ebp - 0x95c], 1
jmp 0x1002d318
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x48], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x10f0]
call fcn.10028a0f
jmp 0x1002d3a8
mov dword [ebp - 0x168], 0
jmp 0x1002d34b
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 1
jg 0x1002d36e
push dword [ebp - 0x168]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
cmp dword [eax], 0
je 0x1002d36c
jmp 0x1002d36e
jmp 0x1002d33e
mov dword [ebp - 0x48], 0
jmp 0x1002d37e
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x1002d3a8
push dword [ebp - 0x48]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov esi, eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0xc04]
call fcn.10028a14
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1002d377
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc04]
call fcn.10028a0f
mov dword [ebp - 0xd4], 0xfcb50bf3
mov dword [ebp - 0x12e8], 0xffffffff
mov dword [ebp - 0x12f0], 0x7b051af7
mov dword [ebp - 0x12f8], 0xffffffff
mov dword [ebp - 0x20], 0xfb0b0297
mov dword [ebp - 0xb7c], 1
mov dword [ebp - 0x1300], 0xb817
mov dword [ebp - 0x3c4], 0
jmp 0x1002d413
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 1
jge 0x1002d42c
mov eax, dword [ebp - 0x3c4]
mov dword [ebp + eax*4 - 0x68], 0xffffffff
jmp 0x1002d406
mov dword [ebp - 0x20], 0
jmp 0x1002d43c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jg 0x1002d81a
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x1a4], 1
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x484], 0x734bd47c
push 3
pop eax
test eax, eax
je 0x1002d4a9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
mov ecx, dword [ebp - 0x20]
imul eax, dword [ebp + ecx*4 - 0x68]
mov ecx, dword [ebp - 0x20]
sub eax, dword [ebp + ecx*4 - 0x68]
add eax, 0xd606
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0xe215
jl 0x1002d4c1
mov dword [ebp - 0x6a8], 1
jmp 0x1002d4c8
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0xf1a969ac
jbe 0x1002d4e0
mov dword [ebp - 0xab4], 1
jmp 0x1002d4e7
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
imul eax, dword [ebp - 0xab4]
cmp eax, 0x237f
je 0x1002d508
mov dword [ebp - 0x6b0], 1
jmp 0x1002d50f
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
add eax, 0x17a84e60
mov ecx, dword [ebp - 0x20]
cmp eax, dword [ebp + ecx*4 - 0x68]
jge 0x1002d52f
mov dword [ebp - 0x964], 1
jmp 0x1002d536
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x68]
cmp dword [ebp - 0x964], eax
jge 0x1002d554
mov dword [ebp - 0x6b8], 1
jmp 0x1002d55b
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
neg eax
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0xb7c]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x61943ec3
jle 0x1002d58d
mov dword [ebp - 0x6c0], 1
jmp 0x1002d594
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x6c0]
add ecx, 0x131d
cmp dword [ebp + eax*4 - 0x68], ecx
jl 0x1002d5b5
mov dword [ebp - 0x96c], 1
jmp 0x1002d5bc
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
sub eax, dword [ebp - 0x96c]
mov dword [ebp - 0x6c8], 1
jmp 0x1002d5dc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
add eax, dword [ebp - 0x6c8]
mov ecx, dword [ebp - 0x20]
imul eax, dword [ebp + ecx*4 - 0x68]
mov ecx, dword [ebp - 0x20]
add eax, dword [ebp + ecx*4 - 0x68]
je 0x1002d6d9
mov dword [ebp - 0xabc], 0x1a6f
mov dword [ebp - 0x1a4], 0
jmp 0x1002d621
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x1002d6ca
mov dword [ebp - 0x1308], 1
mov dword [ebp - 0x154], 0
jmp 0x1002d651
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jg 0x1002d6b9
mov dword [ebp - 0x1310], 0xffffffff
mov dword [ebp - 0x1318], 0x6ac39b39
mov dword [ebp - 0x1ac], 0
jmp 0x1002d687
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jg 0x1002d6aa
mov byte [ebp - 0x202], 0
movzx eax, byte [ebp - 0x202]
test eax, eax
je 0x1002d6a8
call dword [sym.imp.USER32.dll_WaitMessage]
jmp 0x1002d67a
mov eax, dword [ebp - 0xabc]
inc eax
mov dword [ebp - 0xabc], eax
jmp 0x1002d644
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x1ac], eax
jmp 0x1002d614
mov dword [ebp - 0x154], 0xfffffff8
jmp 0x1002d815
mov dword [ebp - 0x1094], 0xc9a8
mov dword [ebp - 0x1090], 0xc9a8
mov dword [ebp - 0x108c], 0xc9a8
mov dword [ebp - 0x1088], 0xc9a8
lea ecx, [ebp - 0x441]
call fcn.1000935a
push eax
lea eax, [ebp - 0x1084]
push eax
lea eax, [ebp - 0x1094]
push eax
lea ecx, [ebp - 0x14a8]
call fcn.10028a23
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe60]
call fcn.100289e9
mov dword [ebp - 4], 0x12
push 3
lea ecx, [ebp - 0xe60]
call fcn.10028a14
mov esi, eax
push 3
lea ecx, [ebp - 0xe60]
call fcn.10028a14
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1002d76b
mov dword [ebp - 0x6d0], 1
jmp 0x1002d772
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 1
jge 0x1002d787
mov dword [ebp - 0x974], 1
jmp 0x1002d78e
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x484]
cmp dword [ebp - 0x974], eax
je 0x1002d7c8
push 3
lea ecx, [ebp - 0xe60]
call fcn.10028a14
push 1
lea ecx, [ebp - 0xe60]
call fcn.10028a14
cmp dword [ebp - 0x484], 0
jne 0x1002d7c8
and dword [ebp - 0x6d8], 0
jmp 0x1002d7d2
mov dword [ebp - 0x6d8], 1
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x154], eax
mov byte [ebp - 0x228], 0
movzx eax, byte [ebp - 0x228]
test eax, eax
je 0x1002d806
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe60]
call fcn.10028a0f
jmp 0x1002d435
mov byte [ebp - 0x204], 0
movzx eax, byte [ebp - 0x204]
test eax, eax
je 0x1002d854
push 0
push 0x1b90
push 0x676
push 0x269
push 0xd19
push 0x1b26
push 0x1703
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov dword [ebp - 0x1320], 1
mov dword [ebp - 0x270], 8
mov dword [ebp - 0x328], 0
jmp 0x1002d881
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 1
jge 0x1002d89d
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0xdd4], 1
jmp 0x1002d874
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdd4]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x270], 0xfffffffb
jmp 0x1002d8c9
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x18
jl 0x1002d9c0
push 1
lea ecx, [ebp - 0xe70]
call fcn.100289a7
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x380], 0
jmp 0x1002d903
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jge 0x1002d925
push dword [ebp - 0x380]
lea ecx, [ebp - 0xe70]
call fcn.10028a14
mov dword [eax], 0x2a1836cc
jmp 0x1002d8f6
push 0
lea ecx, [ebp - 0xe70]
call fcn.10028a14
mov dword [eax], 0xfffffff3
jmp 0x1002d95e
push 0
lea ecx, [ebp - 0xe70]
call fcn.10028a14
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xb64]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe70]
call fcn.10028a14
cmp dword [eax], 0xffffffe8
jne 0x1002d9ac
mov byte [ebp - 0x21c], 0
movzx eax, byte [ebp - 0x21c]
test eax, eax
je 0x1002d9aa
push 0x25e7
push 0xca6
push 0x2e7
push 0x894
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
jmp 0x1002d93a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe70]
call fcn.10028a0f
jmp 0x1002d8bc
mov dword [ebp - 0x1328], 9
mov dword [ebp - 0x1330], 1
mov dword [ebp - 0x1338], 0x6e74e800
push 3
lea ecx, [ebp - 0x1388]
call fcn.100289a7
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x6e8], 0xfffffff6
mov dword [ebp - 0x104], 0
jmp 0x1002da15
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x1002da31
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0xff4], 7
jmp 0x1002da08
mov dword [ebp - 0x104], 0
jmp 0x1002da4a
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x1002da6c
push dword [ebp - 0x104]
lea ecx, [ebp - 0x1388]
call fcn.10028a14
mov dword [eax], 0xecb302af
jmp 0x1002da3d
mov dword [ebp - 0xd4], 2
jmp 0x1002da85
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x1002db4a
mov dword [ebp - 0xc7c], 0xe864896e
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp + eax*4 - 0xff4]
mov ecx, dword [ebp - 0xd4]
imul eax, dword [ebp + ecx*4 - 0xff4]
test eax, eax
jne 0x1002dac9
mov eax, dword [ebp - 0xd4]
cmp dword [ebp + eax*4 - 0xff4], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp + eax*4 - 0xff4], 0x71dfd947
jne 0x1002dae8
mov dword [ebp - 0x6e0], 1
jmp 0x1002daef
and dword [ebp - 0x6e0], 0
cmp dword [ebp - 0x6e0], 0xffffffff
jae 0x1002db04
mov dword [ebp - 0x97c], 1
jmp 0x1002db0b
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x97c]
mov dword [ebp - 0xc7c], eax
mov byte [ebp - 0x206], 0
movzx eax, byte [ebp - 0x206]
test eax, eax
je 0x1002db45
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x1002da78
mov eax, dword [ebp - 0x6e8]
dec eax
mov dword [ebp - 0x6e8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1388]
call fcn.10028a0f
mov dword [ebp - 0x6f8], 0xaea0a9f4
mov dword [ebp - 0x29c], 0xffffffff
mov dword [ebp - 0xc8c], 0x69a75015
mov dword [ebp - 0x12c], 0
jmp 0x1002db9d
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x1002dbb9
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x150], 0x5872
jmp 0x1002db90
mov dword [ebp - 0x12c], 0
jmp 0x1002dbd2
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x1002dbee
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0xfc4], 0xfffffff8
jmp 0x1002dbc5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x150], 0x87a5
jl 0x1002dc0d
mov dword [ebp - 0xac4], 1
jmp 0x1002dc14
and dword [ebp - 0xac4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xac4]
sub ecx, dword [ebp + eax - 0x150]
cmp ecx, 0x4c5530c4
jg 0x1002dc3b
mov dword [ebp - 0x6f0], 1
jmp 0x1002dc42
and dword [ebp - 0x6f0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x150]
imul eax, dword [ebp - 0x6f0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x150]
jg 0x1002dc71
mov dword [ebp - 0x984], 1
jmp 0x1002dc78
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x6f8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6f8]
imul ecx, dword [ebp + eax - 0x150]
mov dword [ebp - 0x29c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x150]
cmp eax, dword [ebp - 0x29c]
je 0x1002dcbf
mov dword [ebp - 0xb84], 1
jmp 0x1002dcc6
and dword [ebp - 0xb84], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x150]
cmp dword [ebp - 0xb84], eax
jne 0x1002dce7