Function at 0x100296b6
Capabilities:
Delete file
Get session user name
Identify system language via api
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10088ab6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1450
call fcn.10083e10
push esi
push edi
push 1
lea ecx, [ebp - 0xe7c]
call fcn.100280d9
and dword [ebp - 4], 0
push 2
lea ecx, [ebp - 0xe1c]
call fcn.100280d9
mov byte [ebp - 4], 1
mov dword [ebp - 0x280], 0xffff
mov dword [ebp - 0xea4], 1
mov dword [ebp - 0xf68], 0x7e318b47
mov dword [ebp - 0x74], 0
jmp 0x1002972a
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10029746
push dword [ebp - 0x74]
lea ecx, [ebp - 0xe7c]
call fcn.10028177
mov dword [eax], 0x9dfc
jmp 0x10029723
mov dword [ebp - 0x74], 0
jmp 0x10029756
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10029772
push dword [ebp - 0x74]
lea ecx, [ebp - 0xe1c]
call fcn.10028177
mov dword [eax], 0x807cfaf4
jmp 0x1002974f
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10028177
cmp dword [eax], 0
jae 0x10029790
mov dword [ebp - 0x8ec], 1
jmp 0x10029797
and dword [ebp - 0x8ec], 0
push 1
lea ecx, [ebp - 0xe1c]
call fcn.10028177
mov ecx, dword [ebp - 0x8ec]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0xe1c]
call fcn.10028177
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10028177
mov esi, eax
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x100297e7
mov dword [ebp - 0xd68], 1
jmp 0x100297ee
and dword [ebp - 0xd68], 0
mov esi, dword [ebp - 0x280]
add esi, dword [ebp - 0xd68]
imul esi, dword [ebp - 0x280]
push 1
lea ecx, [ebp - 0xe1c]
call fcn.10028177
cmp esi, dword [eax]
jge 0x1002981e
mov dword [ebp - 0xd70], 1
jmp 0x10029825
and dword [ebp - 0xd70], 0
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0xd70]
jle 0x10029848
mov dword [ebp - 0xd78], 1
jmp 0x1002984f
and dword [ebp - 0xd78], 0
push 1
lea ecx, [ebp - 0xe1c]
call fcn.10028177
mov ecx, dword [ebp - 0xd78]
cmp ecx, dword [eax]
jle 0x10029872
mov dword [ebp - 0x4e4], 1
jmp 0x10029879
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0xe1c]
call fcn.10028177
mov ecx, dword [ebp - 0x4e4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x4e4], eax
jne 0x100298a8
mov dword [ebp - 0xd80], 1
jmp 0x100298af
and dword [ebp - 0xd80], 0
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10028177
mov ecx, dword [ebp - 0xd80]
sub ecx, dword [ebp - 0xea4]
cmp dword [eax], ecx
jne 0x100298d8
mov dword [ebp - 0xd88], 1
jmp 0x100298df
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0xd88], eax
jle 0x100298f9
mov dword [ebp - 0xd90], 1
jmp 0x10029900
and dword [ebp - 0xd90], 0
cmp dword [ebp - 0xd90], 0xfffffff7
jne 0x10029915
mov dword [ebp - 0xf60], 1
jmp 0x1002991c
and dword [ebp - 0xf60], 0
mov eax, 0x6eb2
dec eax
cmp eax, 0x801465ee
jb 0x10029935
mov dword [ebp - 0xd98], 1
jmp 0x1002993c
and dword [ebp - 0xd98], 0
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0xf68], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe1c]
call fcn.1002815b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.1002815b
push 1
lea ecx, [ebp - 0xe64]
call fcn.100280d9
mov dword [ebp - 4], 2
push 2
lea ecx, [ebp - 0xe34]
call fcn.100280d9
mov byte [ebp - 4], 3
mov dword [ebp - 0x34c], 0xffff
mov dword [ebp - 0xf70], 1
mov dword [ebp - 0xf80], 0x7e318b47
mov dword [ebp - 0x64], 0
jmp 0x100299b9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x100299d5
push dword [ebp - 0x64]
lea ecx, [ebp - 0xe64]
call fcn.10028177
mov dword [eax], 0x9dfc
jmp 0x100299b2
mov dword [ebp - 0x64], 0
jmp 0x100299e5
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10029a01
push dword [ebp - 0x64]
lea ecx, [ebp - 0xe34]
call fcn.10028177
mov dword [eax], 0x807cfaf4
jmp 0x100299de
push 0
lea ecx, [ebp - 0xe64]
call fcn.10028177
cmp dword [eax], 0
jae 0x10029a1f
mov dword [ebp - 0xda0], 1
jmp 0x10029a26
and dword [ebp - 0xda0], 0
push 1
lea ecx, [ebp - 0xe34]
call fcn.10028177
mov ecx, dword [ebp - 0xda0]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0xe34]
call fcn.10028177
push 0
lea ecx, [ebp - 0xe64]
call fcn.10028177
mov esi, eax
push 0
lea ecx, [ebp - 0xe64]
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x10029a76
mov dword [ebp - 0xda8], 1
jmp 0x10029a7d
and dword [ebp - 0xda8], 0
mov esi, dword [ebp - 0x34c]
add esi, dword [ebp - 0xda8]
imul esi, dword [ebp - 0x34c]
push 1
lea ecx, [ebp - 0xe34]
call fcn.10028177
cmp esi, dword [eax]
jge 0x10029aad
mov dword [ebp - 0xdb0], 1
jmp 0x10029ab4
and dword [ebp - 0xdb0], 0
push 0
lea ecx, [ebp - 0xe64]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0xdb0]
jle 0x10029ad7
mov dword [ebp - 0xdb8], 1
jmp 0x10029ade
and dword [ebp - 0xdb8], 0
push 1
lea ecx, [ebp - 0xe34]
call fcn.10028177
mov ecx, dword [ebp - 0xdb8]
cmp ecx, dword [eax]
jle 0x10029b01
mov dword [ebp - 0x4ec], 1
jmp 0x10029b08
and dword [ebp - 0x4ec], 0
push 0
lea ecx, [ebp - 0xe34]
call fcn.10028177
mov ecx, dword [ebp - 0x4ec]
mov dword [eax], ecx
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x4ec], eax
jne 0x10029b37
mov dword [ebp - 0xdc0], 1
jmp 0x10029b3e
and dword [ebp - 0xdc0], 0
push 0
lea ecx, [ebp - 0xe64]
call fcn.10028177
mov ecx, dword [ebp - 0xdc0]
sub ecx, dword [ebp - 0xf70]
cmp dword [eax], ecx
jne 0x10029b67
mov dword [ebp - 0xdc8], 1
jmp 0x10029b6e
and dword [ebp - 0xdc8], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0xdc8], eax
jle 0x10029b88
mov dword [ebp - 0xdd0], 1
jmp 0x10029b8f
and dword [ebp - 0xdd0], 0
cmp dword [ebp - 0xdd0], 0xfffffff7
jne 0x10029ba4
mov dword [ebp - 0xf78], 1
jmp 0x10029bab
and dword [ebp - 0xf78], 0
mov eax, 0x6eb2
dec eax
cmp eax, 0x801465ee
jb 0x10029bc4
mov dword [ebp - 0xdd8], 1
jmp 0x10029bcb
and dword [ebp - 0xdd8], 0
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0xf80], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe34]
call fcn.1002815b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe64]
call fcn.1002815b
mov dword [ebp - 0xb8c], 0x10f7
mov dword [ebp - 0x4f4], 0x528ace4b
push 4
lea ecx, [ebp - 0x1070]
call fcn.100280d9
mov dword [ebp - 4], 4
mov dword [ebp - 0x4fc], 0x53f3ac9d
mov dword [ebp - 0xf88], 9
push 2
lea ecx, [ebp - 0x11a4]
call fcn.100280d9
mov byte [ebp - 4], 5
mov dword [ebp - 0xf90], 0xffffffff
mov dword [ebp - 0x84], 0
jmp 0x10029c65
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10029c87
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1070]
call fcn.10028177
mov dword [eax], 1
jmp 0x10029c58
mov dword [ebp - 0x84], 0
jmp 0x10029ca0
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x10029cc2
push dword [ebp - 0x84]
lea ecx, [ebp - 0x11a4]
call fcn.10028177
mov dword [eax], 0x79facd4a
jmp 0x10029c93
mov eax, dword [ebp - 0xb8c]
mov dword [ebp - 0x12ac], eax
cmp dword [ebp - 0xb8c], 0xad94
jge 0x10029ce6
mov dword [ebp - 0x554], 1
jmp 0x10029ced
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xda4], eax
push 0
lea ecx, [ebp - 0x1070]
call fcn.10028177
mov ecx, dword [ebp - 0xda4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4fc]
imul eax, dword [ebp - 0xda4]
test eax, eax
je 0x10029d47
cmp dword [ebp - 0x4f4], 0
je 0x10029d47
push 4
pop eax
test eax, eax
je 0x10029d47
mov dword [ebp - 0x55c], 1
jmp 0x10029d4e
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0xf88]
cmp dword [ebp - 0x55c], eax
jle 0x10029d68
mov dword [ebp - 0xb94], 1
jmp 0x10029d6f
and dword [ebp - 0xb94], 0
cmp dword [ebp - 0xb94], 0
je 0x10029d84
mov dword [ebp - 0x564], 1
jmp 0x10029d8b
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
add eax, 0x6d8ff8cd
jne 0x10029db3
push 0
lea ecx, [ebp - 0x1070]
call fcn.10028177
cmp dword [eax], 0
jne 0x10029db3
and dword [ebp - 0xbc4], 0
jmp 0x10029dbd
mov dword [ebp - 0xbc4], 1
mov eax, dword [ebp - 0xbc4]
sub eax, dword [ebp - 0x4fc]
je 0x10029dd2
cmp dword [ebp - 0x4fc], 0
or eax, 0xffffffff
je 0x10029df5
push 0
lea ecx, [ebp - 0x1070]
call fcn.10028177
cmp dword [eax], 0
je 0x10029df5
mov dword [ebp - 0x504], 1
jmp 0x10029dfc
and dword [ebp - 0x504], 0
push 0
lea ecx, [ebp - 0x11a4]
call fcn.10028177
mov ecx, dword [ebp - 0x504]
mov dword [eax], ecx
cmp dword [ebp - 0x504], 0x351f2000
jl 0x10029e29
mov dword [ebp - 0x56c], 1
jmp 0x10029e30
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x13532fe2
jne 0x10029e48
mov dword [ebp - 0xb9c], 1
jmp 0x10029e4f
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0xf90], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x11a4]
call fcn.1002815b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1070]
call fcn.1002815b
push 1
lea ecx, [ebp - 0xe10]
call fcn.100280d9
mov dword [ebp - 4], 6
push 2
lea ecx, [ebp - 0x11bc]
call fcn.100280d9
mov byte [ebp - 4], 7
mov dword [ebp - 0x228], 2
mov dword [ebp - 0x288], 0
jmp 0x10029ec1
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x10029ee3
push dword [ebp - 0x288]
lea ecx, [ebp - 0x11bc]
call fcn.10028177
mov dword [eax], 9
jmp 0x10029eb4
mov dword [ebp - 0x228], 1
jmp 0x10029efc
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jl 0x10029f78
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x344], 0
jmp 0x10029f28
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 1
jg 0x10029f73
mov byte [ebp - 0x1a6], 0
movzx eax, byte [ebp - 0x1a6]
test eax, eax
je 0x10029f59
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
push dword [ebp - 0x228]
lea ecx, [ebp - 0x11bc]
call fcn.10028177
cmp dword [eax], 0
je 0x10029f71
jmp 0x10029f73
jmp 0x10029f1b
jmp 0x10029eef
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x11bc]
call fcn.1002815b
push 2
lea ecx, [ebp - 0xe4c]
call fcn.100280d9
mov byte [ebp - 4], 8
mov dword [ebp - 0x348], 0xffff
mov dword [ebp - 0x94], 0xfcc58a01
mov dword [ebp - 0x430], 0xe76d238e
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0xec], 0xffffffff
mov dword [ebp - 0x210], 0xffffffff
mov dword [ebp - 0x116c], 8
mov dword [ebp - 0x1168], 8
mov dword [ebp - 0x1164], 8
mov dword [ebp - 0x1160], 8
lea ecx, [ebp - 0x425]
call fcn.10008cd5
push eax
lea eax, [ebp - 0x115c]
push eax
lea eax, [ebp - 0x116c]
push eax
lea ecx, [ebp - 0x1414]
call fcn.10028186
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x11d4]
call fcn.10028135
mov byte [ebp - 4], 9
mov eax, 0x4fddd3f4
test eax, eax
je 0x1002a143
cmp dword [ebp - 0x94], 2
jl 0x1002a143
xor eax, eax
jne 0x1002a059
cmp dword [ebp - 0x94], 0
je 0x1002a06b
cmp dword [ebp - 0x94], 0
jne 0x1002a06b
and dword [ebp - 0x574], 0
jmp 0x1002a075
mov dword [ebp - 0x574], 1
mov eax, dword [ebp - 0x574]
add eax, 8
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x94], 0xf068cd54
jbe 0x1002a0ae
mov eax, 0x493876a4
test eax, eax
je 0x1002a0ae
mov dword [ebp - 0xbc8], 1
jmp 0x1002a0b5
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xe6fc2e60
jb 0x1002a0d9
mov dword [ebp - 0x57c], 1
jmp 0x1002a0e0
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x57c], eax
jne 0x1002a0fa
mov dword [ebp - 0xba4], 1
jmp 0x1002a101
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xba4], eax
jge 0x1002a11b
mov dword [ebp - 0x584], 1
jmp 0x1002a122
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
je 0x1002a143
mov dword [ebp - 0xbd0], 1
jmp 0x1002a14a
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xbd0], eax
jg 0x1002a164
mov dword [ebp - 0x58c], 1
jmp 0x1002a16b
and dword [ebp - 0x58c], 0
mov esi, dword [ebp - 0x94]
imul esi, dword [ebp - 0x58c]
push 2
lea ecx, [ebp - 0x11d4]
call fcn.10028177
cmp esi, dword [eax]
jle 0x1002a195
mov dword [ebp - 0xbac], 1
jmp 0x1002a19c
and dword [ebp - 0xbac], 0
cmp dword [ebp - 0xbac], 1
jb 0x1002a360
mov dword [ebp - 0x59c], 0
mov dword [ebp - 0x5a4], 1
mov dword [ebp - 0xbb4], 0xffffffff
mov dword [ebp - 0x290], 0
jmp 0x1002a1e0
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x1002a1fc
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x13fc], 0
jmp 0x1002a1d3
mov dword [ebp - 0x210], 0xfffffffe
jmp 0x1002a215
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xfffffff3
jg 0x1002a23a
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x1002a238
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
jmp 0x1002a208
mov dword [ebp - 0xec], 0
jmp 0x1002a253
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 9
jne 0x1002a35b
mov dword [ebp - 0x5b4], 0xa7b48fe2
mov dword [ebp - 0xfa0], 7
cmp dword [ebp - 0x5a4], 0x81cd
jge 0x1002a28c
mov dword [ebp - 0x594], 1
jmp 0x1002a293
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x59c]
imul eax, dword [ebp - 0x594]
cmp eax, dword [ebp - 0x430]
je 0x1002a2b4
mov dword [ebp - 0xbd8], 1
jmp 0x1002a2bb
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x59c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0xbb4], eax
mov esi, dword [ebp - 0xbb4]
push 2
lea ecx, [ebp - 0x11d4]
call fcn.10028177
cmp esi, dword [eax]
jle 0x1002a2f6
mov dword [ebp - 0xbe0], 1
jmp 0x1002a2fd
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0xbe0], eax
jle 0x1002a317
mov dword [ebp - 0x5ac], 1
jmp 0x1002a31e
and dword [ebp - 0x5ac], 0
cmp dword [ebp - 0x5ac], 0x6eb81f94
jge 0x1002a336
mov dword [ebp - 0xbbc], 1
jmp 0x1002a33d
and dword [ebp - 0xbbc], 0
imul eax, dword [ebp - 0xbbc], 0
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xfa0], eax
jmp 0x1002a246
jmp 0x1002a411
mov dword [ebp - 0x380], 0
jmp 0x1002a379
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 3
jge 0x1002a395
mov eax, dword [ebp - 0x380]
mov dword [ebp + eax*4 - 0x13c8], 0xffffffff
jmp 0x1002a36c
mov dword [ebp - 0x2c], 0
jmp 0x1002a3a5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002a3e9
mov dword [ebp - 0xfa8], 0xffffffff
mov eax, dword [ebp - 0xfa8]
mov dword [ebp - 0xec], eax
mov byte [ebp - 0x18d], 0
movzx eax, byte [ebp - 0x18d]
test eax, eax
je 0x1002a3e7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
jmp 0x1002a39e
mov dword [ebp - 0x2c], 0
jmp 0x1002a3f9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xf
je 0x1002a411
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x13c8], 0x609e00c2
jmp 0x1002a3f2
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11d4]
call fcn.1002815b
mov dword [ebp - 0xfc8], 1
mov dword [ebp - 0x268], 0x9696
push 1
lea ecx, [ebp - 0x11ec]
call fcn.100280d9
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x298], 0
jmp 0x1002a45e
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x1002a47d
push dword [ebp - 0x298]
lea ecx, [ebp - 0x11ec]
call fcn.10028177
or dword [eax], 0xffffffff
jmp 0x1002a451
cmp dword [ebp - 0x268], 1
jbe 0x1002a492
mov dword [ebp - 0xbe8], 1
jmp 0x1002a499
and dword [ebp - 0xbe8], 0
push 0
lea ecx, [ebp - 0x11ec]
call fcn.10028177
mov ecx, dword [ebp - 0xbe8]
mov dword [eax], ecx
mov dword [ebp - 0x268], 0
jmp 0x1002a4c7
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x37
jne 0x1002a4f3
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1002a4f1
push 0x851
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
jmp 0x1002a4ba
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x11ec]
call fcn.1002815b
mov dword [ebp - 0xfd8], 0x7e318b47
push 1
lea ecx, [ebp - 0x1080]
call fcn.100280d9
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x340], 0
jmp 0x1002a536
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x1002a558
push dword [ebp - 0x340]
lea ecx, [ebp - 0x1080]
call fcn.10028177
mov dword [eax], 4
jmp 0x1002a529
push 0
lea ecx, [ebp - 0x1080]
call fcn.10028177
and dword [eax], 0
jmp 0x1002a58e
push 0
lea ecx, [ebp - 0x1080]
call fcn.10028177
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x5bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1080]
call fcn.10028177
cmp dword [eax], 0xffffffe5
jne 0x1002a5c6
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x1002a5c4
push 0x389
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
jmp 0x1002a56a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1080]
call fcn.1002815b
mov dword [ebp - 0x6c], 0
jmp 0x1002a5e5
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1002a601
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xe10]
call fcn.10028177
mov dword [eax], 0x9dfc
jmp 0x1002a5de
mov dword [ebp - 0x1298], 1
mov dword [ebp - 0x1320], 0xfffffffb
mov dword [ebp - 0x12a0], 4
push 1
lea ecx, [ebp - 0x1378]
call fcn.100280d9
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x974], 0x61c71bc7
mov dword [ebp - 0x2a0], 0
jmp 0x1002a653
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x1002a672
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x1378]
call fcn.10028177
or dword [eax], 0xffffffff
jmp 0x1002a646
mov eax, dword [ebp - 0x974]
inc eax
mov dword [ebp - 0x974], eax
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x1002a69f
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1378]
call fcn.1002815b
mov dword [ebp - 0x6c], 0
jmp 0x1002a6be
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1002a6da
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xe4c]
call fcn.10028177
mov dword [eax], 0x807cfaf4
jmp 0x1002a6b7
and dword [ebp - 0x1130], 0
and dword [ebp - 0x112c], 0
and dword [ebp - 0x1128], 0
and dword [ebp - 0x1124], 0
lea ecx, [ebp - 0x4a9]
call fcn.10008cd5
push eax
lea eax, [ebp - 0x1120]
push eax
lea eax, [ebp - 0x1130]
push eax
lea ecx, [ebp - 0x140c]
call fcn.10028186
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028135
mov byte [ebp - 4], 0xd
push 1
lea ecx, [ebp - 0x1d4]
call fcn.100280d9
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x44], 0xec0351a9
mov dword [ebp - 0x8c], 0xf0ed6937
mov dword [ebp - 0x3c0], 0
jmp 0x1002a76a
mov eax, dword [ebp - 0x3c0]
inc eax
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 1
jge 0x1002a78c
push dword [ebp - 0x3c0]
lea ecx, [ebp - 0x1d4]
call fcn.10028177
mov dword [eax], 6
jmp 0x1002a75d
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
and dword [eax], 0
jmp 0x1002a7c2
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
cmp dword [eax], 3
jg 0x1002af03
mov dword [ebp - 0x7c], 0xa8d7d2a7
push 2
lea ecx, [ebp - 0x514]
call fcn.100280d9
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x9c8], 0xffffffff
mov dword [ebp - 0x438], 0xf3e8e036
mov dword [ebp - 0x2a8], 0
jmp 0x1002a81d
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x1002a83c
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0x514]
call fcn.10028177
and dword [eax], 0
jmp 0x1002a810
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
cmp dword [eax], 0
jne 0x1002a934
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov esi, eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1002a89a
mov dword [ebp - 0x970], 1
jmp 0x1002a8a1
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x970]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x13b4], eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
cmp dword [eax], 0x10a83afd
jne 0x1002a8e1
mov dword [ebp - 0x5cc], 1
jmp 0x1002a8e8
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0xfc35
jle 0x1002a900
mov dword [ebp - 0x980], 1
jmp 0x1002a907
and dword [ebp - 0x980], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, dword [ebp - 0x980]
cmp ecx, dword [eax]
je 0x1002a934
and dword [ebp - 0x5d4], 0
jmp 0x1002a93e
mov dword [ebp - 0x5d4], 1
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, dword [ebp - 0x5d4]
cmp ecx, dword [eax]
jl 0x1002a96e
mov dword [ebp - 0x988], 1
jmp 0x1002a975
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
inc eax
inc eax
cmp eax, 0xfff8
jne 0x1002a99c
mov dword [ebp - 0x5dc], 1
jmp 0x1002a9a3
and dword [ebp - 0x5dc], 0
cmp dword [ebp - 0x5dc], 3
jge 0x1002a9b8
mov dword [ebp - 0x990], 1
jmp 0x1002a9bf
and dword [ebp - 0x990], 0
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x990]
jle 0x1002a9e8
mov dword [ebp - 0xfb0], 1
jmp 0x1002a9ef
and dword [ebp - 0xfb0], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
cmp dword [ebp - 0x7c], 0xad5b481d
jb 0x1002aa27
mov eax, 0xe35f
test eax, eax
je 0x1002aa27
mov dword [ebp - 0x5e4], 1
jmp 0x1002aa2e
and dword [ebp - 0x5e4], 0
push 1
lea ecx, [ebp - 0x514]
call fcn.10028177
mov ecx, dword [ebp - 0x5e4]
cmp ecx, dword [eax]
jle 0x1002aa51
mov dword [ebp - 0x998], 1
jmp 0x1002aa58
and dword [ebp - 0x998], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, dword [ebp - 0x998]
cmp ecx, dword [eax]
jge 0x1002aa88
mov dword [ebp - 0x4a8], 1
jmp 0x1002aa8f
and dword [ebp - 0x4a8], 0
push 1
lea ecx, [ebp - 0x514]
call fcn.10028177
mov ecx, dword [ebp - 0x4a8]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, dword [ebp - 0x4a8]
cmp ecx, dword [eax]
jle 0x1002aad4
mov dword [ebp - 0xfb8], 1
jmp 0x1002aadb
and dword [ebp - 0xfb8], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
push 3
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov ecx, 0x5c2f
sub ecx, dword [eax]
cmp ecx, 0x25a33ed8
jge 0x1002ab41
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
cmp dword [eax], 0
je 0x1002aeb5
mov dword [ebp - 0x214], 0xcc19ab5a
mov dword [ebp - 0xfc0], 0xffffffff
mov dword [ebp - 0x8c], 9
jmp 0x1002ab6e
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xfffffff8
jl 0x1002ab95
mov byte [ebp - 0x195], 0
movzx eax, byte [ebp - 0x195]
test eax, eax
je 0x1002ab93
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x1002ab61
mov dword [ebp - 0x44], 1
jmp 0x1002aba5
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1002aeb3
mov dword [ebp - 0x7c], 0
jmp 0x1002abbf
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1002abd8
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x514]
call fcn.10028177
or dword [eax], 0xffffffff
jmp 0x1002abb8
push dword [ebp - 0x44]
lea ecx, [ebp - 0x514]
call fcn.10028177
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
mov esi, eax
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1002ac17
cmp dword [ebp - 0x7c], 0
jne 0x1002ac17
and dword [ebp - 0x5ec], 0
jmp 0x1002ac21
mov dword [ebp - 0x5ec], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5ec], eax
jne 0x1002ac47
push 0
lea ecx, [ebp - 0x514]
call fcn.10028177
cmp dword [eax], 0
jne 0x1002ac47
and dword [ebp - 0x9a0], 0
jmp 0x1002ac51
mov dword [ebp - 0x9a0], 1
mov eax, dword [ebp - 0x9c8]
cmp eax, dword [ebp - 0x9a0]
jle 0x1002ac6b
mov dword [ebp - 0x5f4], 1
jmp 0x1002ac72
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 1
jb 0x1002ac87
mov dword [ebp - 0x9a8], 1
jmp 0x1002ac8e
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xa4cb52c2
je 0x1002acbe
mov dword [ebp - 0x5fc], 1
jmp 0x1002acc5
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
sub eax, dword [ebp - 0x214]
sub eax, dword [ebp - 0x214]
sub eax, 0x2ca82e93
jne 0x1002acf9
push 1
lea ecx, [ebp - 0x514]
call fcn.10028177
cmp dword [eax], 0
jne 0x1002acf9
and dword [ebp - 0x9b0], 0
jmp 0x1002ad03
mov dword [ebp - 0x9b0], 1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x514]
call fcn.10028177
mov ecx, dword [ebp - 0x9b0]
cmp ecx, dword [eax]
jl 0x1002ad27
mov dword [ebp - 0x604], 1
jmp 0x1002ad2e
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x604], eax
je 0x1002ad48
mov dword [ebp - 0x9b8], 1
jmp 0x1002ad4f
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x9b8], eax
jle 0x1002ad69
mov dword [ebp - 0x60c], 1
jmp 0x1002ad70
and dword [ebp - 0x60c], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.10028177
push dword [eax]
lea ecx, [ebp - 0x3f4]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0x60c]
jne 0x1002adaf
push 0
lea ecx, [ebp - 0x514]
call fcn.10028177
cmp dword [eax], 0
jne 0x1002adaf
and dword [ebp - 0x9c0], 0
jmp 0x1002adb9
mov dword [ebp - 0x9c0], 1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x514]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9c0]
jne 0x1002addd
mov dword [ebp - 0x614], 1
jmp 0x1002ade4
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 2
je 0x1002adf9
mov dword [ebp - 0x61c], 1
jmp 0x1002ae00
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x9c8]
cmp dword [ebp - 0x61c], eax
jne 0x1002ae1a
mov dword [ebp - 0x9d0], 1
jmp 0x1002ae21
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x9d0], eax
jl 0x1002ae3b
mov dword [ebp - 0x624], 1
jmp 0x1002ae42
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0xffffffff
jl 0x1002ae57
mov dword [ebp - 0x9d8], 1
jmp 0x1002ae5e
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x9d8], eax
jne 0x1002ae78
mov dword [ebp - 0x62c], 1
jmp 0x1002ae7f
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
sub eax, 0x5c40
cmp eax, 1
jb 0x1002ae9b
mov dword [ebp - 0x9e0], 1
jmp 0x1002aea2
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0xfc0], eax
jmp 0x1002ab9e
jmp 0x1002aeef
mov dword [ebp - 0x1274], 0x3984
mov dword [ebp - 0x1270], 0x3984
mov dword [ebp - 0x126c], 0x3984
mov dword [ebp - 0x1268], 0x3984
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1274]
mov dword [ebp - 0x438], eax
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x514]
call fcn.1002815b
jmp 0x1002a79e
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x1d4]
call fcn.1002815b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x3f4]
call fcn.1002815b
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028177
cmp dword [eax], 0
jae 0x1002af3f
mov dword [ebp - 0x634], 1
jmp 0x1002af46
and dword [ebp - 0x634], 0
push 1
lea ecx, [ebp - 0xe4c]
call fcn.10028177
mov ecx, dword [ebp - 0x634]
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0xe4c]
call fcn.10028177
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028177
mov esi, eax
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1002af96
mov dword [ebp - 0x9e8], 1
jmp 0x1002af9d
and dword [ebp - 0x9e8], 0
mov esi, dword [ebp - 0x348]
add esi, dword [ebp - 0x9e8]
imul esi, dword [ebp - 0x348]
push 1
lea ecx, [ebp - 0xe4c]
call fcn.10028177
cmp esi, dword [eax]
jge 0x1002afcd
mov dword [ebp - 0x63c], 1
jmp 0x1002afd4
and dword [ebp - 0x63c], 0
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0x63c]
jle 0x1002aff7
mov dword [ebp - 0x9f0], 1
jmp 0x1002affe
and dword [ebp - 0x9f0], 0
push 1
lea ecx, [ebp - 0xe4c]
call fcn.10028177
mov ecx, dword [ebp - 0x9f0]
cmp ecx, dword [eax]
jle 0x1002b021
mov dword [ebp - 0x508], 1
jmp 0x1002b028
and dword [ebp - 0x508], 0
push 0
lea ecx, [ebp - 0xe4c]
call fcn.10028177
mov ecx, dword [ebp - 0x508]
mov dword [eax], ecx
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x508], eax
jne 0x1002b057
mov dword [ebp - 0x644], 1
jmp 0x1002b05e
and dword [ebp - 0x644], 0
push 0
lea ecx, [ebp - 0xe10]
call fcn.10028177
mov ecx, dword [ebp - 0x644]
sub ecx, dword [ebp - 0xfc8]
cmp dword [eax], ecx
jne 0x1002b087
mov dword [ebp - 0x9f8], 1
jmp 0x1002b08e
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x9f8], eax
jle 0x1002b0a8
mov dword [ebp - 0x64c], 1
jmp 0x1002b0af
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0xfffffff7
jne 0x1002b0c4
mov dword [ebp - 0xfd0], 1
jmp 0x1002b0cb
and dword [ebp - 0xfd0], 0
mov eax, 0x6eb2
dec eax
cmp eax, 0x801465ee
jb 0x1002b0e4
mov dword [ebp - 0xa00], 1
jmp 0x1002b0eb
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0xfd8], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xe4c]
call fcn.1002815b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe10]
call fcn.1002815b
mov dword [ebp - 0x1c], 0x841b3c69
mov dword [ebp - 0x664], 0x9d585ed0
mov dword [ebp - 0xa10], 1
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x4b0], 1
mov dword [ebp - 0xff8], 0xffffffff
mov dword [ebp - 0xa68], 0x563ade4
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1002b174
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x1c], 0
jmp 0x1002b184
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 5
jne 0x1002b805
mov dword [ebp - 0xf4], 0x579253a3
mov dword [ebp - 0x9c], 4
push 1
lea ecx, [ebp - 0xde8]
call fcn.100280d9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6b4], 0xbc3fa0e8
mov dword [ebp - 0x2b0], 0
jmp 0x1002b1d9
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x1002b1fb
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov dword [eax], 0xe434392f
jmp 0x1002b1cc
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jge 0x1002b20f
mov dword [ebp - 0x654], 1
jmp 0x1002b216
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x654], eax
je 0x1002b22d
mov dword [ebp - 0x440], 1
jmp 0x1002b234
and dword [ebp - 0x440], 0
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov ecx, dword [ebp - 0x440]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x440], eax
jl 0x1002b263
mov dword [ebp - 0xa08], 1
jmp 0x1002b26a
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0xa08], 0
jg 0x1002b27f
mov dword [ebp - 0x65c], 1
jmp 0x1002b286
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x65c]
jle 0x1002b29d
mov dword [ebp - 0xfe0], 1
jmp 0x1002b2a4
and dword [ebp - 0xfe0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x12a8], eax
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov eax, dword [eax]
mov dword [ebp - 0xa10], eax
mov eax, dword [ebp - 0xa10]
mov dword [ebp - 0x1328], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x12b0], eax
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x664]
mov dword [ebp - 0x9c], eax
je 0x1002b310
mov dword [ebp - 0xa18], 1
jmp 0x1002b317
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0xa18]
sub eax, dword [ebp - 0x1c]
cmp eax, 0x534a2c93
jne 0x1002b333
mov dword [ebp - 0x66c], 1
jmp 0x1002b33a
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
je 0x1002b364
cmp dword [ebp - 0xf4], 0
je 0x1002b364
mov dword [ebp - 0xa20], 1
jmp 0x1002b36b
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0xa20], 0x39d3cd36
jne 0x1002b383
mov dword [ebp - 0x674], 1
jmp 0x1002b38a
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x674], eax
jl 0x1002b3a4
mov dword [ebp - 0xa28], 1
jmp 0x1002b3ab
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x9c], 0
jmp 0x1002b3d0
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x1b
jl 0x1002b7f1
mov dword [ebp - 0xa50], 0xbd6cd538
mov dword [ebp - 0x448], 0xffffffff
mov dword [ebp - 0x388], 0xcffae3c
mov dword [ebp - 0x6c4], 0x57f0
mov dword [ebp - 0x230], 1
mov dword [ebp - 0x1018], 0xfffffffb
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x388]
je 0x1002b43a
mov dword [ebp - 0x67c], 1
jmp 0x1002b441
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0xdcb3
jl 0x1002b459
mov dword [ebp - 0xfe8], 1
jmp 0x1002b460
and dword [ebp - 0xfe8], 0
cmp dword [ebp - 0x388], 0
je 0x1002b47c
push 3
pop eax
test eax, eax
je 0x1002b47c
mov dword [ebp - 0xa30], 1
jmp 0x1002b483
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa50]
sub eax, 0x230
cmp eax, dword [ebp - 0xa30]
jne 0x1002b4a2
mov dword [ebp - 0xff0], 1
jmp 0x1002b4a9
and dword [ebp - 0xff0], 0
mov eax, 0x790eb5cf
sub eax, dword [ebp - 0xa68]
je 0x1002b4cb
mov eax, 0xffff
test eax, eax
je 0x1002b4cb
mov dword [ebp - 0x684], 1
jmp 0x1002b4d2
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 0x5a1b
jl 0x1002b4ea
mov dword [ebp - 0xa38], 1
jmp 0x1002b4f1
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x388]
cmp eax, dword [ebp - 0xa38]
jl 0x1002b50b
mov dword [ebp - 0x68c], 1
jmp 0x1002b512
and dword [ebp - 0x68c], 0
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov ecx, dword [ebp - 0x68c]
sub ecx, dword [eax]
sub ecx, dword [ebp - 0xff8]
cmp ecx, dword [ebp - 0x9c]
jle 0x1002b541
mov dword [ebp - 0xa40], 1
jmp 0x1002b548
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0xa40], eax
je 0x1002b562
mov dword [ebp - 0x694], 1
jmp 0x1002b569
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x6c4]
cmp dword [ebp - 0x694], eax
jne 0x1002b583
mov dword [ebp - 0x1000], 1
jmp 0x1002b58a
and dword [ebp - 0x1000], 0
mov eax, 0xa102
imul eax, eax, 0x266a
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
jne 0x1002b5b0
mov dword [ebp - 0xa48], 1
jmp 0x1002b5b7
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x1010], eax
mov eax, dword [ebp - 0x448]
inc eax
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x1008]
cmp eax, dword [ebp - 0x1010]
je 0x1002b5f6
mov dword [ebp - 0x69c], 1
jmp 0x1002b5fd
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 8
jg 0x1002b612
mov dword [ebp - 0x6a4], 1
jmp 0x1002b619
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xa50]
cmp eax, dword [ebp - 0x6a4]
jle 0x1002b633
mov dword [ebp - 0xa58], 1
jmp 0x1002b63a
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0xa58], eax
jl 0x1002b654
mov dword [ebp - 0x6ac], 1
jmp 0x1002b65b
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x230], 0x17
jmp 0x1002b680
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0xffffffee
jle 0x1002b7ec
mov dword [ebp - 0x218], 0x503a
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x137c], eax
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
cmp dword [eax], 1
je 0x1002b6ce
mov dword [ebp - 0xa60], 1
jmp 0x1002b6d5
and dword [ebp - 0xa60], 0
imul eax, dword [ebp - 0xa60], 0
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
add eax, dword [ebp - 0xa68]
mov ecx, dword [ebp - 0x250]
lea eax, [eax + ecx - 0x7151]
cmp eax, dword [ebp - 0x218]
jl 0x1002b70f
mov dword [ebp - 0x6bc], 1
jmp 0x1002b716
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0xffffffff
ja 0x1002b72b
mov dword [ebp - 0xa70], 1
jmp 0x1002b732
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x6c4], eax
jne 0x1002b758
mov dword [ebp - 0xa78], 1
jmp 0x1002b75f
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xa78], eax
jne 0x1002b779
mov dword [ebp - 0x6cc], 1
jmp 0x1002b780
and dword [ebp - 0x6cc], 0
push 0
lea ecx, [ebp - 0xde8]
call fcn.10028177
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6cc]
jne 0x1002b7a9
cmp dword [ebp - 0x218], 0
jne 0x1002b7a9
and dword [ebp - 0xa80], 0
jmp 0x1002b7b3
mov dword [ebp - 0xa80], 1
mov eax, dword [ebp - 0xa80]
mov dword [ebp - 0x1018], eax
mov byte [ebp - 0x1b3], 0
movzx eax, byte [ebp - 0x1b3]
test eax, eax
je 0x1002b7e7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x1002b673
jmp 0x1002b3c3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xde8]
call fcn.1002815b
jmp 0x1002b17d
mov dword [ebp - 0x238], 8
mov dword [ebp - 0x1020], 0xe58b
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0xfc], 0xa4ccfd66
mov dword [ebp - 0x104], 0x4a938f73
cmp dword [ebp - 0x238], 0
je 0x1002b971
mov dword [ebp - 0xa88], 0xfff7
mov dword [ebp - 0xa98], 0xffffffff
mov dword [ebp - 0x2b8], 0
jmp 0x1002b871
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 2
jge 0x1002b88d
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x1358], 0xfffffffa
jmp 0x1002b864
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x12b8], eax
mov eax, dword [ebp - 0x1020]
cmp dword [ebp - 0x238], eax
jl 0x1002b8b3
mov dword [ebp - 0x6d4], 1
jmp 0x1002b8ba
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0x6fc], eax
jl 0x1002b8d4
mov dword [ebp - 0x1028], 1
jmp 0x1002b8db
and dword [ebp - 0x1028], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x1330], eax
mov eax, dword [ebp - 0x6d4]
imul eax, dword [ebp - 0xa88]
mov dword [ebp - 0x6dc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6dc]
mov dword [ebp + eax - 0x1358], ecx
cmp dword [ebp - 0x6dc], 0xa17d
jge 0x1002b925
mov dword [ebp - 0xa90], 1
jmp 0x1002b92c
and dword [ebp - 0xa90], 0
cmp dword [ebp - 0xa90], 0x5ba1
jl 0x1002b94d
mov eax, 0x8858
test eax, eax
je 0x1002b94d
mov dword [ebp - 0x6e4], 1
jmp 0x1002b954
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xfc], eax
jmp 0x1002babb
mov dword [ebp - 0x4f0], 8
mov dword [ebp - 0xaa8], 0x5b01d976
mov dword [ebp - 0x1038], 2
mov dword [ebp - 0xfc], 0
jmp 0x1002b9a8
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xfffffffa
jge 0x1002babb
mov dword [ebp - 0x1030], 0x8be
mov dword [ebp - 0x104], 0xf8609561
cmp dword [ebp - 0x104], 0
jne 0x1002b9e9
mov eax, dword [ebp - 0x4f0]
cmp dword [ebp - 0xfc], eax
jl 0x1002b9e9
and dword [ebp - 0x6ec], 0
jmp 0x1002b9f3
mov dword [ebp - 0x6ec], 1
mov eax, dword [ebp - 0x4f0]
add eax, dword [ebp - 0x6ec]
cmp eax, dword [ebp - 0x4f0]
jg 0x1002ba19
cmp dword [ebp - 0x238], 0
jne 0x1002ba19
and dword [ebp - 0xaa0], 0
jmp 0x1002ba23
mov dword [ebp - 0xaa0], 1
cmp dword [ebp - 0xaa0], 0xd0d4
jge 0x1002ba3b
mov dword [ebp - 0x6f4], 1
jmp 0x1002ba42
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x1030]
cmp dword [ebp - 0xaa8], eax
jl 0x1002ba68
mov dword [ebp - 0xab0], 1
jmp 0x1002ba6f
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0xab0], eax
jge 0x1002ba89
mov dword [ebp - 0x704], 1
jmp 0x1002ba90
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
mov dword [ebp - 0x1038], eax
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1002bab6
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1002b99b
mov dword [ebp - 0x104], 0x15
jmp 0x1002bad4
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 9
jle 0x1002bb46
mov dword [ebp - 0xab8], 0xf908
cmp dword [ebp - 0xab8], 0
je 0x1002bafd
cmp dword [ebp - 0xab8], 0
je 0x1002bafb
jmp 0x1002bb46
jmp 0x1002bb1e
mov dword [ebp - 0x1040], 0xfffffff7
mov eax, dword [ebp - 0x1040]
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0x104], 0
je 0x1002bb1e
jmp 0x1002bac7
mov byte [ebp - 0x19d], 0
movzx eax, byte [ebp - 0x19d]
test eax, eax
je 0x1002bb44
push 0
push 0xea5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x1002bac7
mov dword [ebp - 0x3c], 0x841b3c69
mov dword [ebp - 0x71c], 0x9d585ed0
mov dword [ebp - 0xac8], 1
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x4b8], 1
mov dword [ebp - 0x1060], 0xffffffff
mov dword [ebp - 0xb20], 0x563ade4
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1002bba5
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x3c], 0
jmp 0x1002bbb5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 5
jne 0x1002c236
mov dword [ebp - 0x10c], 0x579253a3
mov dword [ebp - 0xc4], 4
push 1
lea ecx, [ebp - 0xdf8]
call fcn.100280d9
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x76c], 0xbc3fa0e8
mov dword [ebp - 0x350], 0
jmp 0x1002bc0a
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 1
jge 0x1002bc2c
push dword [ebp - 0x350]
lea ecx, [ebp - 0xdf8]
call fcn.10028177
mov dword [eax], 0xe434392f
jmp 0x1002bbfd
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jge 0x1002bc40
mov dword [ebp - 0x70c], 1
jmp 0x1002bc47
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x70c], eax
je 0x1002bc5e
mov dword [ebp - 0x450], 1
jmp 0x1002bc65
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10028177
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x450], eax
jl 0x1002bc94
mov dword [ebp - 0xac0], 1
jmp 0x1002bc9b
and dword [ebp - 0xac0], 0
cmp dword [ebp - 0xac0], 0
jg 0x1002bcb0
mov dword [ebp - 0x714], 1
jmp 0x1002bcb7
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x714]
jle 0x1002bcce
mov dword [ebp - 0x1048], 1
jmp 0x1002bcd5
and dword [ebp - 0x1048], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x12c0], eax
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10028177
mov eax, dword [eax]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0xac8]
mov dword [ebp - 0x1390], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x12c8], eax
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10028177
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x71c]
mov dword [ebp - 0xc4], eax
je 0x1002bd41
mov dword [ebp - 0xad0], 1
jmp 0x1002bd48
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0xad0]
sub eax, dword [ebp - 0x3c]
cmp eax, 0x534a2c93
jne 0x1002bd64
mov dword [ebp - 0x724], 1
jmp 0x1002bd6b
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
je 0x1002bd95
cmp dword [ebp - 0x10c], 0
je 0x1002bd95
mov dword [ebp - 0xad8], 1
jmp 0x1002bd9c
and dword [ebp - 0xad8], 0
cmp dword [ebp - 0xad8], 0x39d3cd36
jne 0x1002bdb4
mov dword [ebp - 0x72c], 1
jmp 0x1002bdbb
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x72c], eax
jl 0x1002bdd5
mov dword [ebp - 0xae0], 1
jmp 0x1002bddc
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0xc4], 0
jmp 0x1002be01
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1b
jl 0x1002c222
mov dword [ebp - 0xb08], 0xbd6cd538
mov dword [ebp - 0x458], 0xffffffff
mov dword [ebp - 0x2c0], 0xcffae3c
mov dword [ebp - 0x77c], 0x57f0
mov dword [ebp - 0x21c], 1
mov dword [ebp - 0xec8], 0xfffffffb
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x2c0]
je 0x1002be6b
mov dword [ebp - 0x734], 1
jmp 0x1002be72
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 0xdcb3
jl 0x1002be8a
mov dword [ebp - 0x1050], 1
jmp 0x1002be91
and dword [ebp - 0x1050], 0
cmp dword [ebp - 0x2c0], 0
je 0x1002bead
push 3
pop eax
test eax, eax
je 0x1002bead
mov dword [ebp - 0xae8], 1
jmp 0x1002beb4
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xb08]
sub eax, 0x230
cmp eax, dword [ebp - 0xae8]
jne 0x1002bed3
mov dword [ebp - 0x1058], 1
jmp 0x1002beda
and dword [ebp - 0x1058], 0
mov eax, 0x790eb5cf
sub eax, dword [ebp - 0xb20]
je 0x1002befc
mov eax, 0xffff
test eax, eax
je 0x1002befc
mov dword [ebp - 0x73c], 1
jmp 0x1002bf03
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0x5a1b
jl 0x1002bf1b
mov dword [ebp - 0xaf0], 1
jmp 0x1002bf22
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x2c0]
cmp eax, dword [ebp - 0xaf0]
jl 0x1002bf3c
mov dword [ebp - 0x744], 1
jmp 0x1002bf43
and dword [ebp - 0x744], 0
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10028177
mov ecx, dword [ebp - 0x744]
sub ecx, dword [eax]
sub ecx, dword [ebp - 0x1060]
cmp ecx, dword [ebp - 0xc4]
jle 0x1002bf72
mov dword [ebp - 0xaf8], 1
jmp 0x1002bf79
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xaf8], eax
je 0x1002bf93
mov dword [ebp - 0x74c], 1
jmp 0x1002bf9a
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x77c]
cmp dword [ebp - 0x74c], eax
jne 0x1002bfb4
mov dword [ebp - 0xf58], 1
jmp 0x1002bfbb
and dword [ebp - 0xf58], 0
mov eax, 0xa102
imul eax, eax, 0x266a
mov dword [ebp - 0x4b8], eax
cmp dword [ebp - 0x4b8], 0
jne 0x1002bfe1
mov dword [ebp - 0xb00], 1
jmp 0x1002bfe8
and dword [ebp - 0xb00], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x458]
inc eax
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0xf38]
cmp eax, dword [ebp - 0xed0]
je 0x1002c027
mov dword [ebp - 0x754], 1
jmp 0x1002c02e
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 8
jg 0x1002c043
mov dword [ebp - 0x75c], 1
jmp 0x1002c04a
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0xb08]
cmp eax, dword [ebp - 0x75c]
jle 0x1002c064
mov dword [ebp - 0xb10], 1
jmp 0x1002c06b
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0xb10], eax
jl 0x1002c085
mov dword [ebp - 0x764], 1
jmp 0x1002c08c
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x21c], eax
mov dword [ebp - 0x21c], 0x17
jmp 0x1002c0b1
cmp dword [ebp - 0x21c], 0xffffffee
jle 0x1002c21d
mov dword [ebp - 0x1fc], 0x503a
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1338], eax
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10028177
cmp dword [eax], 1
je 0x1002c0ff
mov dword [ebp - 0xb18], 1
jmp 0x1002c106
and dword [ebp - 0xb18], 0
imul eax, dword [ebp - 0xb18], 0
mov dword [ebp - 0x76c], eax
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0xb20]
mov ecx, dword [ebp - 0x260]
lea eax, [eax + ecx - 0x7151]
cmp eax, dword [ebp - 0x1fc]
jl 0x1002c140
jmp 0x1002bdf4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdf8]
call fcn.1002815b
jmp 0x1002bbae
push 4
lea ecx, [ebp - 0x3dc]
call fcn.100280d9
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x2c8], 0xfffffffe
mov dword [ebp - 0x4c], 0
jmp 0x1002c264
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1002c27a
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x114], 0x39b
jmp 0x1002c25d
mov dword [ebp - 0x4c], 0
jmp 0x1002c28a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1002c2a6
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov dword [eax], 0x743d837b
jmp 0x1002c283
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
and dword [eax], 0
jmp 0x1002c2dc
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x78c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
cmp dword [eax], 0
jl 0x1002c4cc
push 3
lea ecx, [ebp - 0x121c]
call fcn.100280d9
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x3a8], 0
jmp 0x1002c31c
mov eax, dword [ebp - 0x3a8]
inc eax
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 3
jge 0x1002c33e
push dword [ebp - 0x3a8]
lea ecx, [ebp - 0x121c]
call fcn.10028177
mov dword [eax], 0xb9193c1d
jmp 0x1002c30f
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x114]
cmp dword [ebp + esi*4 - 0x114], eax
je 0x1002c378
mov dword [ebp - 0xb40], 1
jmp 0x1002c37f
and dword [ebp - 0xb40], 0
cmp dword [ebp - 0xb40], 0x8d92
jne 0x1002c397
mov dword [ebp - 0xebc], 1
jmp 0x1002c39e
and dword [ebp - 0xebc], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x114]
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
sub esi, dword [ebp + eax*4 - 0x114]
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
cmp esi, dword [ebp + eax*4 - 0x114]
jg 0x1002c3fb
mov dword [ebp - 0x794], 1
jmp 0x1002c402
and dword [ebp - 0x794], 0
cmp dword [ebp - 0x794], 0xffff
jae 0x1002c41a
mov dword [ebp - 0xb48], 1
jmp 0x1002c421
and dword [ebp - 0xb48], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x114]
cmp eax, dword [ebp - 0xb48]
je 0x1002c44b
mov dword [ebp - 0x79c], 1
jmp 0x1002c452
and dword [ebp - 0x79c], 0
push 0
lea ecx, [ebp - 0x3dc]
call fcn.10028177
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x114]
add eax, dword [ebp - 0x79c]
imul eax, eax, 0
cmp eax, 0x307b5ca9
jl 0x1002c484
mov dword [ebp - 0xb50], 1
jmp 0x1002c48b
and dword [ebp - 0xb50], 0
push 0
lea ecx, [ebp - 0x121c]
call fcn.10028177
mov ecx, dword [ebp - 0xb50]
mov dword [eax], ecx
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1002c4b8
call dword [sym.imp.USER32.dll_GetCapture]
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x121c]
call fcn.1002815b
jmp 0x1002c2b8
mov dword [ebp - 0x2c8], 0
jmp 0x1002c4e5
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xffffffe4
jle 0x1002c518
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1002c516
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
jmp 0x1002c4d8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3dc]
call fcn.1002815b
mov dword [ebp - 0x240], 8
mov dword [ebp - 0x100c], 0xe58b
mov dword [ebp - 0x7cc], 0
mov dword [ebp - 0x11c], 0xa4ccfd66
mov dword [ebp - 0x124], 0x4a938f73
cmp dword [ebp - 0x240], 0
je 0x1002c693
mov dword [ebp - 0xb58], 0xfff7
mov dword [ebp - 0xb68], 0xffffffff
mov dword [ebp - 0x358], 0
jmp 0x1002c593
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 2
jge 0x1002c5af
mov eax, dword [ebp - 0x358]
mov dword [ebp + eax*4 - 0x1364], 0xfffffffa
jmp 0x1002c586
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x12d0], eax
mov eax, dword [ebp - 0x100c]
cmp dword [ebp - 0x240], eax
jl 0x1002c5d5
mov dword [ebp - 0x7a4], 1
jmp 0x1002c5dc
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xb58]
cmp dword [ebp - 0x7cc], eax
jl 0x1002c5f6
mov dword [ebp - 0xec4], 1
jmp 0x1002c5fd
and dword [ebp - 0xec4], 0
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0x138c], eax
mov eax, dword [ebp - 0x7a4]
imul eax, dword [ebp - 0xb58]
mov dword [ebp - 0x7ac], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp + eax - 0x1364], ecx
cmp dword [ebp - 0x7ac], 0xa17d
jge 0x1002c647
mov dword [ebp - 0xb60], 1
jmp 0x1002c64e
and dword [ebp - 0xb60], 0
cmp dword [ebp - 0xb60], 0x5ba1
jl 0x1002c66f
mov eax, 0x8858
test eax, eax
je 0x1002c66f
mov dword [ebp - 0x7b4], 1
jmp 0x1002c676
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0x11c], eax
jmp 0x1002c7dd
mov dword [ebp - 0x528], 8
mov dword [ebp - 0xb78], 0x5b01d976
mov dword [ebp - 0xecc], 2
mov dword [ebp - 0x11c], 0
jmp 0x1002c6ca
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffffa
jge 0x1002c7dd
mov dword [ebp - 0xfa4], 0x8be
mov dword [ebp - 0x124], 0xf8609561
cmp dword [ebp - 0x124], 0
jne 0x1002c70b
mov eax, dword [ebp - 0x528]
cmp dword [ebp - 0x11c], eax
jl 0x1002c70b
and dword [ebp - 0x7bc], 0
jmp 0x1002c715
mov dword [ebp - 0x7bc], 1
mov eax, dword [ebp - 0x528]
add eax, dword [ebp - 0x7bc]
cmp eax, dword [ebp - 0x528]
jg 0x1002c73b
cmp dword [ebp - 0x240], 0
jne 0x1002c73b
and dword [ebp - 0xb70], 0
jmp 0x1002c745
mov dword [ebp - 0xb70], 1
cmp dword [ebp - 0xb70], 0xd0d4
jge 0x1002c75d
mov dword [ebp - 0x7c4], 1
jmp 0x1002c764
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x7c4]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0xfa4]
cmp dword [ebp - 0xb78], eax
jl 0x1002c78a
mov dword [ebp - 0xb80], 1
jmp 0x1002c791
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0x7cc]
cmp dword [ebp - 0xb80], eax
jge 0x1002c7ab
mov dword [ebp - 0x7d4], 1
jmp 0x1002c7b2
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0xecc], eax
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1002c7d8
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1002c6bd
mov dword [ebp - 0x124], 0x15
jmp 0x1002c7f6
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 9
jle 0x1002c868
mov dword [ebp - 0xb88], 0xf908
cmp dword [ebp - 0xb88], 0
je 0x1002c81f
cmp dword [ebp - 0xb88], 0
je 0x1002c81d
jmp 0x1002c868
jmp 0x1002c840
mov dword [ebp - 0x1044], 0xfffffff7
mov eax, dword [ebp - 0x1044]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x124], 0
je 0x1002c840
jmp 0x1002c7e9
mov byte [ebp - 0x1b8], 0
movzx eax, byte [ebp - 0x1b8]
test eax, eax
je 0x1002c866
push 0
push 0xea5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x1002c7e9
mov dword [ebp - 0xa4], 0xfcc58a01
mov dword [ebp - 0x460], 0xe76d238e
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x1158], 8
mov dword [ebp - 0x1154], 8
mov dword [ebp - 0x1150], 8
mov dword [ebp - 0x114c], 8
lea ecx, [ebp - 0x4b1]
call fcn.10008cd5
push eax
lea eax, [ebp - 0x1148]
push eax
lea eax, [ebp - 0x1158]
push eax
lea ecx, [ebp - 0x141c]
call fcn.10028186
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1234]
call fcn.10028135
mov dword [ebp - 4], 0x14
mov eax, 0x4fddd3f4
test eax, eax
je 0x1002ca0c
cmp dword [ebp - 0xa4], 2
jl 0x1002ca0c
xor eax, eax
jne 0x1002c922
cmp dword [ebp - 0xa4], 0
je 0x1002c934
cmp dword [ebp - 0xa4], 0
jne 0x1002c934
and dword [ebp - 0x7dc], 0
jmp 0x1002c93e
mov dword [ebp - 0x7dc], 1
mov eax, dword [ebp - 0x7dc]
add eax, 8
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0xa4], 0xf068cd54
jbe 0x1002c977
mov eax, 0x493876a4
test eax, eax
je 0x1002c977
mov dword [ebp - 0xb90], 1
jmp 0x1002c97e
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0xe6fc2e60
jb 0x1002c9a2
mov dword [ebp - 0x7e4], 1
jmp 0x1002c9a9
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x7e4], eax
jne 0x1002c9c3
mov dword [ebp - 0xb98], 1
jmp 0x1002c9ca
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xb98], eax
jge 0x1002c9e4
mov dword [ebp - 0x7ec], 1
jmp 0x1002c9eb
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x1002ca0c
mov dword [ebp - 0xba0], 1
jmp 0x1002ca13
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xba0], eax
jg 0x1002ca2d
mov dword [ebp - 0x7f4], 1
jmp 0x1002ca34
and dword [ebp - 0x7f4], 0
mov esi, dword [ebp - 0xa4]
imul esi, dword [ebp - 0x7f4]
push 2
lea ecx, [ebp - 0x1234]
call fcn.10028177
cmp esi, dword [eax]
jle 0x1002ca5e
mov dword [ebp - 0xba8], 1
jmp 0x1002ca65
and dword [ebp - 0xba8], 0
cmp dword [ebp - 0xba8], 1
jb 0x1002cc29
mov dword [ebp - 0x804], 0
mov dword [ebp - 0x80c], 1
mov dword [ebp - 0xbb8], 0xffffffff
mov dword [ebp - 0x2d0], 0
jmp 0x1002caa9
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 2
jge 0x1002cac5
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x1434], 0
jmp 0x1002ca9c
mov dword [ebp - 0x1e4], 0xfffffffe
jmp 0x1002cade
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xfffffff3
jg 0x1002cb03
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002cb01
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
jmp 0x1002cad1
mov dword [ebp - 0x12c], 0
jmp 0x1002cb1c
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 9
jne 0x1002cc24
mov dword [ebp - 0x81c], 0xa7b48fe2
mov dword [ebp - 0xed4], 7
cmp dword [ebp - 0x80c], 0x81cd
jge 0x1002cb55
mov dword [ebp - 0x7fc], 1
jmp 0x1002cb5c
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x804]
imul eax, dword [ebp - 0x7fc]
cmp eax, dword [ebp - 0x460]
je 0x1002cb7d
mov dword [ebp - 0xbb0], 1
jmp 0x1002cb84
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x804]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0xbb8], eax
mov esi, dword [ebp - 0xbb8]
push 2
lea ecx, [ebp - 0x1234]
call fcn.10028177
cmp esi, dword [eax]
jle 0x1002cbbf
mov dword [ebp - 0xbc0], 1
jmp 0x1002cbc6
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0x80c]
cmp dword [ebp - 0xbc0], eax
jle 0x1002cbe0
mov dword [ebp - 0x814], 1
jmp 0x1002cbe7
and dword [ebp - 0x814], 0
cmp dword [ebp - 0x814], 0x6eb81f94
jge 0x1002cbff
mov dword [ebp - 0xbf8], 1
jmp 0x1002cc06
and dword [ebp - 0xbf8], 0
imul eax, dword [ebp - 0xbf8], 0
mov dword [ebp - 0x81c], eax
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0xed4], eax
jmp 0x1002cb0f
jmp 0x1002ccda
mov dword [ebp - 0x390], 0
jmp 0x1002cc42
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 3
jge 0x1002cc5e
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0x13e0], 0xffffffff
jmp 0x1002cc35
mov dword [ebp - 0x24], 0
jmp 0x1002cc6e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002ccb2
mov dword [ebp - 0xfac], 0xffffffff
mov eax, dword [ebp - 0xfac]
mov dword [ebp - 0x12c], eax
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1002ccb0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
jmp 0x1002cc67
mov dword [ebp - 0x24], 0
jmp 0x1002ccc2
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xf
je 0x1002ccda
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x13e0], 0x609e00c2
jmp 0x1002ccbb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1234]
call fcn.1002815b
mov dword [ebp - 0x34], 0x841b3c69
mov dword [ebp - 0xc10], 0x9d585ed0
mov dword [ebp - 0x82c], 1
mov dword [ebp - 0x220], 1
mov dword [ebp - 0x468], 1
mov dword [ebp - 0xfb4], 0xffffffff
mov dword [ebp - 0x884], 0x563ade4
mov byte [ebp - 0x1b7], 0
movzx eax, byte [ebp - 0x1b7]
test eax, eax
je 0x1002cd48
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x34], 0
jmp 0x1002cd58
cmp dword [ebp - 0x34], 5
jne 0x1002d3d9
mov dword [ebp - 0x134], 0x579253a3
mov dword [ebp - 0xbc], 4
push 1
lea ecx, [ebp - 0xcdc]
call fcn.100280d9
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xc60], 0xbc3fa0e8
mov dword [ebp - 0x2d8], 0
jmp 0x1002cdad
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 1
jge 0x1002cdcf
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0xcdc]
call fcn.10028177
mov dword [eax], 0xe434392f
jmp 0x1002cda0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jge 0x1002cde3
mov dword [ebp - 0xc00], 1
jmp 0x1002cdea
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0xc00], eax
je 0x1002ce01
mov dword [ebp - 0x4c0], 1
jmp 0x1002ce08
and dword [ebp - 0x4c0], 0
push 0
lea ecx, [ebp - 0xcdc]
call fcn.10028177
mov ecx, dword [ebp - 0x4c0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x4c0], eax
jl 0x1002ce37
mov dword [ebp - 0x824], 1
jmp 0x1002ce3e
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 0
jg 0x1002ce53
mov dword [ebp - 0xc08], 1
jmp 0x1002ce5a
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0xc08]
jle 0x1002ce71
mov dword [ebp - 0x8ac], 0xb0ad8ea5
push 1
lea ecx, [ebp - 0x124c]
call fcn.100280d9
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x10f8], 0x20b5
mov dword [ebp - 0x10f4], 0x20b5
mov dword [ebp - 0x10f0], 0x20b5
mov dword [ebp - 0x10ec], 0x20b5
mov dword [ebp - 0x101c], 1
mov dword [ebp - 0x50], 0
jmp 0x1002d439
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002d44f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x524], 0x236432a2
jmp 0x1002d432
mov dword [ebp - 0x50], 0
jmp 0x1002d45f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1002d478
push dword [ebp - 0x50]
lea ecx, [ebp - 0x124c]
call fcn.10028177
or dword [eax], 0xffffffff
jmp 0x1002d458
mov byte [ebp - 0x1b0], 0
movzx eax, byte [ebp - 0x1b0]
test eax, eax
je 0x1002d499
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x524]
mov dword [ebp - 0x12e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x524]
mov dword [ebp - 0x1348], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0xfffb
jb 0x1002d4dd
mov dword [ebp - 0xc80], 1
jmp 0x1002d4e4
and dword [ebp - 0xc80], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x524]
imul eax, dword [ebp - 0xc80]
cmp eax, 0xfffffff9
jne 0x1002d508