Function at 0x1002933e
Capabilities:
Enumerate pe sections
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100622d2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x9ac
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x20]
test eax, eax
je 0x1002de03
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x714], eax
lea eax, [ebp + 0x24]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x69c], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x68c], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x5f0], eax
lea eax, [ebp + 0x10]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x5a8]
movzx eax, byte [eax]
test eax, eax
je 0x1002a1a5
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x724]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x7e0], 6
mov dword [ebp - 0x7dc], 6
mov dword [ebp - 0x7d8], 6
mov dword [ebp - 0x7d4], 6
lea ecx, [ebp - 0x255]
call fcn.10015a31
push eax
lea eax, [ebp - 0x7d0]
push eax
lea eax, [ebp - 0x7e0]
push eax
lea ecx, [ebp - 0x944]
call fcn.10015a34
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x56c]
call fcn.100159e0
and dword [ebp - 4], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x244], 0x737e0d1b
mov dword [ebp - 0x4a8], 1
mov dword [ebp - 0x270], 0xa1c33c01
mov dword [ebp - 0x814], 0xa80278ee
mov dword [ebp - 0x810], 0xa80278ee
mov dword [ebp - 0x80c], 0xa80278ee
mov dword [ebp - 0x808], 0xa80278ee
mov dword [ebp - 0x74c], 0xdb88dcfd
mov dword [ebp - 0x1b0], 0
jmp 0x100294b7
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x100294d3
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x734], 0xfffffff8
jmp 0x100294aa
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x734]
mov dword [ebp - 0x2a8], eax
push 2
lea ecx, [ebp - 0x56c]
call fcn.10015a22
mov ecx, dword [ebp - 0x2a8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x244]
mov ecx, dword [ebp - 0x2a8]
cmp dword [ecx], eax
jge 0x10029519
mov dword [ebp - 0x544], 1
jmp 0x10029520
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x544]
add eax, 8
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0x744]
je 0x10029562
mov dword [ebp - 0x54c], 1
jmp 0x10029569
and dword [ebp - 0x54c], 0
push 3
lea ecx, [ebp - 0x56c]
call fcn.10015a22
mov eax, dword [eax]
cmp eax, dword [ebp - 0x54c]
je 0x1002958c
mov dword [ebp - 0x554], 1
jmp 0x10029593
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
neg eax
mov dword [ebp - 0x4a8], eax
je 0x100295b4
xor eax, eax
inc eax
je 0x100295b4
mov dword [ebp - 0x524], 1
jmp 0x100295bb
and dword [ebp - 0x524], 0
push 2
lea ecx, [ebp - 0x56c]
call fcn.10015a22
mov esi, dword [eax]
imul esi, dword [ebp - 0x524]
push 2
lea ecx, [ebp - 0x56c]
call fcn.10015a22
cmp esi, dword [eax]
jne 0x100295ee
mov dword [ebp - 0x268], 1
jmp 0x100295f5
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x268], eax
jne 0x1002960f
mov dword [ebp - 0x52c], 1
jmp 0x10029616
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x244]
je 0x1002963c
mov dword [ebp - 0x534], 1
jmp 0x10029643
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0xfffffff8
jne 0x10029658
mov dword [ebp - 0x53c], 1
jmp 0x1002965f
and dword [ebp - 0x53c], 0
cmp dword [ebp - 0x53c], 6
jge 0x10029674
mov dword [ebp - 0x27c], 1
jmp 0x1002967b
and dword [ebp - 0x27c], 0
push 2
lea ecx, [ebp - 0x56c]
call fcn.10015a22
mov eax, dword [eax]
cmp eax, dword [ebp - 0x27c]
jl 0x1002969e
mov dword [ebp - 0x20c], 1
jmp 0x100296a5
and dword [ebp - 0x20c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x20c]
mov dword [ebp + eax - 0x814], ecx
push 2
lea ecx, [ebp - 0x56c]
call fcn.10015a22
mov ecx, dword [ebp - 0x20c]
sub ecx, dword [eax]
mov dword [ebp - 0x74c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x56c]
call fcn.10015a06
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x754]
add ecx, dword [eax]
mov dword [ebp - 0x740], ecx
mov dword [ebp - 0x3c], 0x99841b3c
mov dword [ebp - 0xe0], 0xc865b49d
mov dword [ebp - 0x3c], 0xffffffff
jmp 0x10029719
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jg 0x100297ea
mov dword [ebp - 0x7cc], 0x48f6
mov dword [ebp - 0x7c8], 0x48f6
mov dword [ebp - 0x7c4], 0x48f6
mov dword [ebp - 0x7c0], 0x48f6
lea ecx, [ebp - 0x23d]
call fcn.10015a31
push eax
lea eax, [ebp - 0x7bc]
push eax
lea eax, [ebp - 0x7cc]
push eax
lea ecx, [ebp - 0x95c]
call fcn.10015a34
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x89c]
call fcn.100159e0
mov dword [ebp - 4], 1
mov dword [ebp - 0x764], 0xc6338430
mov dword [ebp - 0x75c], 0xffffffff
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x75c]
push eax
push 0
lea eax, [ebp - 0x89c]
push eax
push 1
push 0x2104
push 0x2767
lea eax, [ebp - 0xe0]
push eax
push 0x51e4
lea eax, [ebp - 0x764]
push eax
call fcn.10028bc1
add esp, 0x28
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x89c]
call fcn.10015a06
jmp 0x10029712
cmp dword [ebp - 0xe0], 0
jg 0x100297ff
mov dword [ebp - 0x40c], 1
jmp 0x10029806
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x40c]
jg 0x1002981d
mov dword [ebp - 0x284], 1
jmp 0x10029824
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x284]
cmp dword [ebp - 0x3c], eax
jne 0x10029842
mov dword [ebp - 0x404], 1
jmp 0x10029849
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x404], eax
jl 0x10029863
mov dword [ebp - 0x28c], 1
jmp 0x1002986a
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x28c], eax
jle 0x10029881
mov dword [ebp - 0x76c], 1
jmp 0x10029888
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x864], eax
cmp dword [ebp - 0xe0], 0xadd5
jg 0x100298a9
mov dword [ebp - 0x400], 1
jmp 0x100298b0
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
add eax, 8
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x500], 0xfffffff7
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x34], 0xf82baef6
mov dword [ebp - 0x4b0], 0x3bd5
push 0x6742
push 0x1409
push 0
push 1
push 1
push 0x5f1a
call fcn.10029183
add esp, 0x18
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x34]
jne 0x1002993f
cmp dword [ebp - 0x58], 0
jne 0x1002993f
and dword [ebp - 0x684], 0
jmp 0x10029949
mov dword [ebp - 0x684], 1
mov eax, 0x1fd9
cmp eax, 2
jae 0x10029962
cmp dword [ebp - 0x34], 0
jne 0x10029962
and dword [ebp - 0x294], 0
jmp 0x1002996c
mov dword [ebp - 0x294], 1
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x500]
jle 0x100299a1
mov dword [ebp - 0x408], 1
jmp 0x100299a8
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x29c]
imul eax, dword [ebp - 0x408]
test eax, eax
je 0x10029a36
mov dword [ebp - 0x8f0], 0x60df3928
mov dword [ebp - 0x5e4], 0
cmp dword [ebp - 0x5e4], 1
jg 0x100299e2
mov dword [ebp - 0x2a4], 1
jmp 0x100299e9
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x2a4], eax
jne 0x10029a00
mov dword [ebp - 0x2ac], 1
jmp 0x10029a07
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x4b0]
cmp dword [ebp - 0x2ac], eax
jl 0x10029a21
mov dword [ebp - 0x410], 1
jmp 0x10029a28
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x34], eax
jmp 0x10029b32
push 2
lea ecx, [ebp - 0x804]
call fcn.10015984
mov dword [ebp - 4], 2
push 0
lea eax, [ebp - 0x804]
push eax
lea eax, [ebp - 0x854]
push eax
push 0xf94
call fcn.10030c49
add esp, 0x10
mov byte [ebp - 0x89], 0
push 0x7a4a
push 0x2eed
push 0
push 0x45ab
lea eax, [ebp - 0x89]
push eax
call fcn.1002df09
add esp, 0x14
mov dword [ebp - 0x58], 0
jmp 0x10029a9e
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xffffffea
jge 0x10029b23
mov dword [ebp - 0x5c4], 0x35cf
mov dword [ebp - 0x34], 0
jmp 0x10029abe
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jg 0x10029b10
mov byte [ebp - 0x8a], 0
push 0
push 0x591d
lea eax, [ebp - 0x8a]
push eax
push 0x2eb4
call fcn.10030528
add esp, 0x10
lea eax, [ebp - 0x34]
push eax
push 0x4374
push 1
push 1
push 0x2d70
lea eax, [ebp - 0x804]
push eax
push 0x3b43
push 1
call fcn.100288cf
add esp, 0x20
jmp 0x10029ab7
cmp dword [ebp - 0x5c4], 0
je 0x10029b1e
jmp 0x10029a97
jmp 0x10029a97
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
call fcn.10015a06
and dword [ebp - 0x234], 0
jmp 0x10029b56
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x1b8]
inc eax
inc eax
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov eax, dword [eax + 4]
sub eax, 8
shr eax, 1
cmp dword [ebp - 0x234], eax
jae 0x1002a08e
mov dword [ebp - 0x7b8], 6
mov dword [ebp - 0x7b4], 6
mov dword [ebp - 0x7b0], 6
mov dword [ebp - 0x7ac], 6
lea ecx, [ebp - 0x245]
call fcn.10015a31
push eax
lea eax, [ebp - 0x7a8]
push eax
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0x94c]
call fcn.10015a34
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x578]
call fcn.100159e0
mov dword [ebp - 4], 3
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x254], 0x737e0d1b
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x2d4], 0xa1c33c01
mov dword [ebp - 0x824], 0xa80278ee
mov dword [ebp - 0x820], 0xa80278ee
mov dword [ebp - 0x81c], 0xa80278ee
mov dword [ebp - 0x818], 0xa80278ee
mov dword [ebp - 0x5d0], 0xdb88dcfd
mov dword [ebp - 0x114], 0
jmp 0x10029c49
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 1
jge 0x10029c65
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x680], 0xfffffff8
jmp 0x10029c3c
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x680]
mov dword [ebp - 0x2b4], eax
push 2
lea ecx, [ebp - 0x578]
call fcn.10015a22
mov ecx, dword [ebp - 0x2b4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x254]
mov ecx, dword [ebp - 0x2b4]
cmp dword [ecx], eax
jge 0x10029cab
mov dword [ebp - 0x540], 1
jmp 0x10029cb2
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x540]
add eax, 8
mov dword [ebp - 0x708], eax
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
mov eax, dword [ebp - 0x5c8]
cmp eax, dword [ebp - 0x708]
je 0x10029cf4
mov dword [ebp - 0x2bc], 1
jmp 0x10029cfb
and dword [ebp - 0x2bc], 0
push 3
lea ecx, [ebp - 0x578]
call fcn.10015a22
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2bc]
je 0x10029d1e
mov dword [ebp - 0x418], 1
jmp 0x10029d25
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
neg eax
mov dword [ebp - 0x2c4], eax
je 0x10029d46
xor eax, eax
inc eax
je 0x10029d46
mov dword [ebp - 0x4b8], 1
jmp 0x10029d4d
and dword [ebp - 0x4b8], 0
push 2
lea ecx, [ebp - 0x578]
call fcn.10015a22
mov esi, dword [eax]
imul esi, dword [ebp - 0x4b8]
push 2
lea ecx, [ebp - 0x578]
call fcn.10015a22
cmp esi, dword [eax]
jne 0x10029d80
mov dword [ebp - 0x2cc], 1
jmp 0x10029d87
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x2cc], eax
jne 0x10029da1
mov dword [ebp - 0x420], 1
jmp 0x10029da8
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x254]
je 0x10029dce
mov dword [ebp - 0x508], 1
jmp 0x10029dd5
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 0xfffffff8
jne 0x10029dea
mov dword [ebp - 0x2dc], 1
jmp 0x10029df1
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 6
jge 0x10029e06
mov dword [ebp - 0x428], 1
jmp 0x10029e0d
and dword [ebp - 0x428], 0
push 2
lea ecx, [ebp - 0x578]
call fcn.10015a22
mov eax, dword [eax]
cmp eax, dword [ebp - 0x428]
jl 0x10029e30
mov dword [ebp - 0x21c], 1
jmp 0x10029e37
and dword [ebp - 0x21c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x21c]
mov dword [ebp + eax - 0x824], ecx
push 2
lea ecx, [ebp - 0x578]
call fcn.10015a22
mov ecx, dword [ebp - 0x21c]
sub ecx, dword [eax]
mov dword [ebp - 0x5d0], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x578]
call fcn.10015a06
mov dword [ebp - 0x1e4], 0x27cb3f4f
mov dword [ebp - 0x1e4], 0
jmp 0x10029e97
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0x18
je 0x10029ed9
mov byte [ebp - 0x69], 0
push 0x6f41
push 0x657e
push 1
push 0x752a
push 1
push 0x63d
lea eax, [ebp - 0x69]
push eax
push 0x3d4c
push 0x4fba
push 0x2c03
call fcn.10028bc1
add esp, 0x28
jmp 0x10029e8a
mov byte [ebp - 0x8c], 0
movzx eax, byte [ebp - 0x8c]
test eax, eax
je 0x10029f01
push 0
push 0x6565
push 1
push 0x2a1
call fcn.100385f7
add esp, 0x10
mov eax, dword [ebp - 0x1b8]
movzx eax, word [eax]
sar eax, 0xc
mov dword [ebp - 0x688], eax
mov dword [ebp - 0x60], 1
mov dword [ebp - 0x4c0], 0xfffffffe
push 0x7601
push 0x7e11
push 0x19fd
push 0x1e10
push 1
push 0x7cf0
push 0x4e13
push 0x694
lea eax, [ebp - 0x4c0]
push eax
push 1
push 0
lea eax, [ebp - 0x60]
push eax
push 0x6ff5
push 0x20bd
call fcn.1002ef91
add esp, 0x38
cmp dword [ebp - 0x60], 0
je 0x10029fe9
mov dword [ebp - 0x11c], 0
jmp 0x10029f89
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 4
jge 0x10029fa5
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x900], 0
jmp 0x10029f7c
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x900]
cmp ecx, dword [ebp + eax - 0x900]
jle 0x10029fcd
mov dword [ebp - 0x2e4], 1
jmp 0x10029fd4
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x900], ecx
jmp 0x1002a02e
push 1
lea eax, [ebp - 0x4c0]
push eax
push 0x14b0
lea eax, [ebp - 0x60]
push eax
push 1
call fcn.10028d75
add esp, 0x14
mov dword [ebp - 0x60], 0
jmp 0x1002a015
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x26
je 0x1002a02e
push 1
push 0
push 0x5335
call fcn.1002e92c
add esp, 0xc
jmp 0x1002a00e
mov eax, dword [ebp - 0x1b8]
movzx eax, word [eax]
and eax, 0xfff
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x688]
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x5d8], 3
je 0x1002a05b
jmp 0x1002a089
mov eax, dword [ebp - 0x740]
add eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x690], eax
lea eax, [ebp - 0x690]
push eax
push 0
push 0x7120
push dword [ebp - 0x5e8]
call fcn.1002e8ee
add esp, 0x10
jmp 0x10029b3b
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x124], 0
jmp 0x1002a0b1
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1002a0cd
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x580], 0x5540d7f8
jmp 0x1002a0a4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x580], 0xfffffff4
jmp 0x1002a0fb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x580]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x580], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x580], 0xfffffff5
jge 0x1002a138
mov byte [ebp - 0x8e], 0
push 1
push 0x7012
push 0x2d2b
push 1
push 1
push 0x5766
lea eax, [ebp - 0x8e]
push eax
call fcn.10028e76
add esp, 0x1c
jmp 0x1002a0e0
mov dword [ebp - 0x108], 0
jmp 0x1002a151
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 5
jle 0x1002a185
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x1002a183
push 0x1588
push 0x6e4c
push 1
push 1
push 1
push 0x12bf
call fcn.10029183
add esp, 0x18
jmp 0x1002a144
mov eax, dword [ebp - 0x94]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x94]
mov ecx, dword [ecx]
add ecx, dword [eax + 4]
mov eax, dword [ebp - 0x94]
mov dword [eax], ecx
jmp 0x1002de01
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x634], eax
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x5fc], eax
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x2ec], 0x2905
mov dword [ebp - 0x5f8], 0x100097c8
cmp dword [ebp - 0x2ec], 0x293b
jle 0x1002a2d9
push 0x1703
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
and dword [ebp - 0x134], 0
jmp 0x1002a212
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xeee
jge 0x1002a2d9
and dword [ebp - 0x1d8], 0
jmp 0x1002a238
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x5318
jge 0x1002a2d4
and dword [ebp - 0x12c], 0
jmp 0x1002a25e
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x8da
jge 0x1002a2cf
and dword [ebp - 0x1c0], 0
jmp 0x1002a280
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x5903
jge 0x1002a2cd
mov eax, dword [ebp - 0x12c]
cdq
idiv dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x1d8]
add eax, edx
cdq
mov dword [ebp - 0x698], eax
mov dword [ebp - 0x694], edx
push dword [ebp - 0x694]
push dword [ebp - 0x698]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002a273
jmp 0x1002a251
jmp 0x1002a22b
jmp 0x1002a205
mov dword [ebp - 4], 4
cmp dword [ebp - 0x2ec], 0x27bd
jge 0x1002a2fc
mov edx, dword [ebp - 0x5f8]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002a318
or dword [ebp - 4], 0xffffffff
jmp 0x1002a322
mov dword [ebp - 0x14], 0xf89b546
mov dword [ebp - 0x13c], 0
jmp 0x1002a342
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1002a35e
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0xf8], 0x85f70ad6
jmp 0x1002a335
mov dword [ebp - 0x14], 0
jmp 0x1002a36e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x1002a597
mov dword [ebp - 0x600], 0xfffffff9
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov dword [ebp - 0x8d0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0xf8]
jge 0x1002a3ca
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xf8], 0
jne 0x1002a3ca
and dword [ebp - 0x430], 0
jmp 0x1002a3d4
mov dword [ebp - 0x430], 1
cmp dword [ebp - 0x430], 0xa33a
jge 0x1002a3ec
mov dword [ebp - 0x2f4], 1
jmp 0x1002a3f3
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 1
jl 0x1002a408
mov dword [ebp - 0x530], 1
jmp 0x1002a40f
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
neg eax
cmp eax, dword [ebp - 0x14]
jle 0x1002a42a
or eax, 0xffffffff
jne 0x1002a42a
and dword [ebp - 0x2fc], 0
jmp 0x1002a434
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x14]
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x2fc]
sub edx, dword [ebp + ecx - 0xf8]
cmp edx, dword [ebp + eax*4 - 0xf8]
je 0x1002a45f
mov dword [ebp - 0x438], 1
jmp 0x1002a466
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp dword [ebp - 0x438], eax
jge 0x1002a484
mov dword [ebp - 0x304], 1
jmp 0x1002a48b
and dword [ebp - 0x304], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x304], eax
jl 0x1002a4ac
mov dword [ebp - 0x4c8], 1
jmp 0x1002a4b3
and dword [ebp - 0x4c8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x4c8], eax
jne 0x1002a4d3
mov dword [ebp - 0x30c], 1
jmp 0x1002a4da
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp eax, dword [ebp - 0x30c]
jg 0x1002a4f8
mov dword [ebp - 0x758], 1
jmp 0x1002a4ff
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf8]
mov dword [ebp - 0x8d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
mov ecx, dword [ebp - 0x14]
mov dword [ebp + ecx*4 - 0xf8], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xf8], 0
je 0x1002a54e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf8], 0
je 0x1002a54e
mov dword [ebp - 0x440], 1
jmp 0x1002a555
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x34ad
jle 0x1002a56d
mov dword [ebp - 0x314], 1
jmp 0x1002a574
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xf8], 0
je 0x1002a592
jmp 0x1002a367
jmp 0x1002a367
mov dword [ebp - 0x14], 0
jmp 0x1002a5a7
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffff
jl 0x1002a60a
mov dword [ebp - 0x6a8], 0xfffffff6
cmp dword [ebp - 0x6a8], 0
je 0x1002a5c2
jmp 0x1002a60a
mov byte [ebp - 0x79], 0
push 1
push 1
push 0x7ed4
push 0x6a6d
lea eax, [ebp - 0x79]
push eax
push 0x141f
push 0x7505
push 0x70bc
push 0x5b5e
push 0xe2b
push 0x5f8d
push 0x33bb
push 0x3eb0
call fcn.1001c6cd
add esp, 0x34
jmp 0x1002a5a0
push 1
lea ecx, [ebp - 0x598]
call fcn.10015984
mov dword [ebp - 4], 6
mov dword [ebp - 0x720], 0x74489b46
mov dword [ebp - 0x1c8], 0
jmp 0x1002a641
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1002a663
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0x598]
call fcn.10015a22
mov dword [eax], 0x1f7e2799
jmp 0x1002a634
push 0
lea ecx, [ebp - 0x598]
call fcn.10015a22
mov dword [eax], 0xfffffff2
jmp 0x1002a69c
push 0
lea ecx, [ebp - 0x598]
call fcn.10015a22
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x510]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x510]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x598]
call fcn.10015a22
cmp dword [eax], 0x16
jne 0x1002a6f7
mov dword [ebp - 0x608], 0xfffffff8
mov dword [ebp - 0x610], 0x6de6
push 1
lea eax, [ebp - 0x598]
push eax
lea eax, [ebp - 0x608]
push eax
push 0
push 1
lea eax, [ebp - 0x720]
push eax
push 0x4635
call fcn.10028e76
add esp, 0x1c
cmp dword [ebp - 0x610], 0
je 0x1002a6f5
jmp 0x1002a6f7
jmp 0x1002a678
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x598]
call fcn.10015a06
mov dword [ebp - 0x828], 4
mov dword [ebp - 0xec], 2
mov dword [ebp - 0x618], 0xffffffff
mov dword [ebp - 0x748], 0xe6b6
mov dword [ebp - 0xac], 0x7f8b4dfe
mov dword [ebp - 0x8dc], 3
mov dword [ebp - 0x50], 0
jmp 0x1002a752
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002a768
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x930], 0x63700168
jmp 0x1002a74b
mov dword [ebp - 0x31c], 0x6684
mov dword [ebp - 0x6b4], 0x10009858
cmp dword [ebp - 0x31c], 0x68cd
jle 0x1002a875
and dword [ebp - 0x1a4], 0
jmp 0x1002a7a2
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x66b3
jge 0x1002a868
and dword [ebp - 0x144], 0
jmp 0x1002a7c8
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x7596
jge 0x1002a863
and dword [ebp - 0x1a0], 0
jmp 0x1002a7ee
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x3ca4
jge 0x1002a85e
and dword [ebp - 0x14c], 0
jmp 0x1002a810
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x61c7
jge 0x1002a85c
mov ecx, dword [ebp - 0x144]
imul ecx, dword [ebp - 0x1a0]
sub ecx, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x1a4]
sar eax, cl
cdq
mov dword [ebp - 0x6a4], eax
mov dword [ebp - 0x6a0], edx
push dword [ebp - 0x6a0]
push dword [ebp - 0x6a4]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002a803
jmp 0x1002a7e1
jmp 0x1002a7bb
jmp 0x1002a795
push 0
push 0x2503
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebp - 0x50], 0
jmp 0x1002a885
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002a89b
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x8ac], 0xc23c
jmp 0x1002a87e
mov dword [ebp - 4], 7
cmp dword [ebp - 0x31c], 0x63cf
jge 0x1002a8be
mov edx, dword [ebp - 0x6b4]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002a8da
or dword [ebp - 4], 0xffffffff
jmp 0x1002a8e4
push 6
pop eax
test eax, eax
je 0x1002a9e7
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xec]
jl 0x1002a909
mov dword [ebp - 0x448], 1
jmp 0x1002a910
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0xfffffffb
jb 0x1002a92e
mov eax, 0xbc99
test eax, eax
je 0x1002a92e
mov dword [ebp - 0x324], 1
jmp 0x1002a935
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x618]
cmp dword [ebp - 0x324], eax
jne 0x1002a94f
mov dword [ebp - 0x4d0], 1
jmp 0x1002a956
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xfff8
jb 0x1002a96e
mov dword [ebp - 0x32c], 1
jmp 0x1002a975
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x748]
cmp dword [ebp - 0x32c], eax
jge 0x1002a98f
mov dword [ebp - 0x23c], 1
jmp 0x1002a996
and dword [ebp - 0x23c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x23c]
mov dword [ebp + eax - 0x930], ecx
imul eax, dword [ebp - 0x23c], 0xe55a
cmp dword [ebp - 0xec], eax
je 0x1002a9c6
mov dword [ebp - 0x450], 1
jmp 0x1002a9cd
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x450], eax
jg 0x1002a9e7
mov dword [ebp - 0x334], 1
jmp 0x1002a9ee
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x334]
jl 0x1002aa08
mov dword [ebp - 0x550], 1
jmp 0x1002aa0f
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x92e3f915
ja 0x1002aa27
mov dword [ebp - 0x33c], 1
jmp 0x1002aa2e
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x33c], eax
jg 0x1002aa48
mov dword [ebp - 0x458], 1
jmp 0x1002aa4f
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xac], 1
jmp 0x1002aa74
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xd
jge 0x1002aacc
mov dword [ebp - 0x914], 0xfffffffc
mov dword [ebp - 0x910], 0xfffffffc
mov dword [ebp - 0x90c], 0xfffffffc
mov dword [ebp - 0x908], 0xfffffffc
mov dword [ebp - 0x86c], 0x1edb6b7b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8ac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8ac], eax
jmp 0x1002aa67
mov dword [ebp - 0x87c], 1
mov dword [ebp - 0x874], 0xdce9d05b
mov dword [ebp - 0x22c], 0
push 3
lea ecx, [ebp - 0x784]
call fcn.10015984
mov dword [ebp - 4], 9
mov dword [ebp - 0x34c], 0xa98ceef
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x24], 0
jmp 0x1002ab22
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002ab38
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa0], 1
jmp 0x1002ab1b
mov dword [ebp - 0x24], 0
jmp 0x1002ab48
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1002ab5e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x884], 0xa831eb23
jmp 0x1002ab41
mov dword [ebp - 0x24], 0
jmp 0x1002ab6e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1002ab87
push dword [ebp - 0x24]
lea ecx, [ebp - 0x784]
call fcn.10015a22
or dword [eax], 0xffffffff
jmp 0x1002ab67
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 1
jne 0x1002aba3
mov dword [ebp - 0x24c], 1
jmp 0x1002abaa
and dword [ebp - 0x24c], 0
mov eax, 0xadb8
test eax, eax
je 0x1002abcf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa0], 0
je 0x1002abcf
mov dword [ebp - 0x344], 1
jmp 0x1002abd6
and dword [ebp - 0x344], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa0]
imul ecx, dword [ebp - 0x344]
sub ecx, 0x508d4a8e
sub ecx, dword [ebp + eax - 0xa0]
cmp ecx, 1
je 0x1002ac0e
mov dword [ebp - 0x4d8], 1
jmp 0x1002ac15
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 0x691f6f49
jl 0x1002ac2d
mov dword [ebp - 0x224], 1
jmp 0x1002ac34
and dword [ebp - 0x224], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24c]
mov dword [ebp + eax - 0x884], ecx
push 2
lea ecx, [ebp - 0x784]
call fcn.10015a22
mov ecx, dword [ebp - 0x224]
mov dword [eax], ecx
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x34c], eax
imul eax, dword [ebp - 0x34c], 0x32e2
cmp dword [ebp - 0x24c], eax
jge 0x1002ac86
mov dword [ebp - 0x460], 1
jmp 0x1002ac8d
and dword [ebp - 0x460], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0]
neg eax
cmp eax, dword [ebp - 0x460]
jge 0x1002acb0
mov dword [ebp - 0x354], 1
jmp 0x1002acb7
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
neg eax
cmp eax, 0xfff7
je 0x1002acd2
mov dword [ebp - 0x518], 1
jmp 0x1002acd9
and dword [ebp - 0x518], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x518]
mov dword [ebp + eax - 0xa0], ecx
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x888], eax
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x8eb16e2c
jb 0x1002ad1d
mov dword [ebp - 0x620], 1
jmp 0x1002ad24
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x8e0], eax
push 2
lea ecx, [ebp - 0x784]
call fcn.10015a22
mov eax, dword [eax]
mov dword [ebp - 0x204], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x784]
call fcn.10015a06
or dword [ebp - 0x7a4], 0xffffffff
or dword [ebp - 0x7a0], 0xffffffff
or dword [ebp - 0x79c], 0xffffffff
or dword [ebp - 0x798], 0xffffffff
lea ecx, [ebp - 0x24d]
call fcn.10015a31
push eax
lea eax, [ebp - 0x794]
push eax
lea eax, [ebp - 0x7a4]
push eax
lea ecx, [ebp - 0x954]
call fcn.10015a34
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x93c]
call fcn.100159e0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x78], 0x571177e8
push 1
lea ecx, [ebp - 0x8bc]
call fcn.10015984
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x470], 0xa4abff1e
lea eax, [ebp - 0x8bc]
push eax
push 1
push 0x6c61
push 1
lea eax, [ebp - 0x890]
push eax
push 0x6bb5
call fcn.1001cd62
add esp, 0x18
mov dword [ebp - 0x78], 0
jmp 0x1002ae02
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xffffffeb
jg 0x1002b1b6
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x628], 0x7b9c5c93
mov dword [ebp - 0x154], 0
jmp 0x1002ae39
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0xffffffe3
jg 0x1002b1b1
mov dword [ebp - 0xc8], 0x7ad4351c
mov dword [ebp - 0xc8], 0xfffffffa
jmp 0x1002ae69
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x11
jg 0x1002b1ac
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x98], 0
jmp 0x1002ae99
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x1002b1a7
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x208], 0x3e8f0887
mov dword [ebp - 0xa8], 0
jmp 0x1002aed3
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jg 0x1002b0c7
push 2
lea ecx, [ebp - 0x7f8]
call fcn.10015984
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x35c], 0x7218
mov dword [ebp - 0x6c0], 0x10009920
cmp dword [ebp - 0x35c], 0x7270
jle 0x1002affe
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
and dword [ebp - 0x1b4], 0
jmp 0x1002af31
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x1070
jge 0x1002affe
and dword [ebp - 0x1ac], 0
jmp 0x1002af57
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x7a66
jge 0x1002aff9
and dword [ebp - 0x15c], 0
jmp 0x1002af7d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x20b6
jge 0x1002aff4
and dword [ebp - 0x164], 0
jmp 0x1002af9f
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x345e
jge 0x1002afef
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x15c]
mov edx, dword [ebp - 0x1b4]
sub edx, eax
mov ecx, dword [ebp - 0x164]
sar edx, cl
mov eax, edx
cdq
mov dword [ebp - 0x6b0], eax
mov dword [ebp - 0x6ac], edx
push dword [ebp - 0x6ac]
push dword [ebp - 0x6b0]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002af92
jmp 0x1002af70
jmp 0x1002af4a
jmp 0x1002af24
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x35c], 0x6fb8
jge 0x1002b01e
mov edx, dword [ebp - 0x6c0]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002b03a
mov dword [ebp - 4], 0xc
jmp 0x1002b04a
mov dword [ebp - 0x1bc], 0
jmp 0x1002b063
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x1002b085
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x7f8]
call fcn.10015a22
mov dword [eax], 0x7979b389
jmp 0x1002b056
push 0x4369
push 0x1925
push 0
push 0x5daf
push 1
lea eax, [ebp - 0x7f8]
push eax
push 0x2943
push 0
push 0x7832
call fcn.10036f17
add esp, 0x24
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x7f8]
call fcn.10015a06
jmp 0x1002aec6
mov eax, 0x7c694a6
test eax, eax
je 0x1002b15c
cmp dword [ebp - 0x98], 0
je 0x1002b11c
mov dword [ebp - 0xa8], 1
cmp dword [ebp - 0xa8], 0x30054750
jle 0x1002b108
cmp dword [ebp - 0x208], 0
je 0x1002b108
mov dword [ebp - 0x468], 1
jmp 0x1002b10f
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
add eax, 0x388a
jne 0x1002b123
cmp dword [ebp - 0x208], 0
imul eax, dword [ebp - 0x78], 0xffffffff
cmp eax, dword [ebp - 0x208]
jl 0x1002b13b
mov dword [ebp - 0x364], 1
jmp 0x1002b142
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x78]
cmp dword [ebp - 0x78], eax
je 0x1002b15c
mov dword [ebp - 0x4e0], 1
jmp 0x1002b163
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x4e0], eax
jle 0x1002b17d
mov dword [ebp - 0x36c], 1
jmp 0x1002b184
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
add eax, dword [ebp - 0x98]
mov dword [ebp - 0x628], eax
jmp 0x1002ae8c
jmp 0x1002ae5c
jmp 0x1002ae2c
jmp 0x1002adfb
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x8bc]
call fcn.10015a06
mov dword [ebp - 0x904], 9
mov dword [ebp - 0x630], 0xefa9d19a
mov dword [ebp - 0x48], 0
jmp 0x1002b1e9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1002b1ff
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x728], 0x799ac789
jmp 0x1002b1e2
mov dword [ebp - 0x48], 0
jmp 0x1002b20f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1002b225
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x5c0], 0x7a4a12b5
jmp 0x1002b208
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x5c0], 0
jmp 0x1002b253
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x5c0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x5c0], 1
jge 0x1002b27d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5c0]
mov dword [ebp + eax*4 - 0x728], 0xd4914d2e
jmp 0x1002b238
push 0
push 0xad7
lea eax, [ebp - 0x630]
push eax
push 0x330
push 1
call fcn.10028d75
add esp, 0x14
mov dword [ebp - 0x8a0], 0xffffffff
mov dword [ebp - 0x82c], 0xea0d
mov dword [ebp - 0x490], 0x314a
mov dword [ebp - 0x830], 0xb2c593c8
mov dword [ebp - 0x40], 0x4a8c6a53
mov dword [ebp - 0x38c], 0x860bc23c
mov dword [ebp - 0x638], 0x9dfeee83
push 0
push 0x5c97
push 1
push 0x3d5f
call fcn.10036618
add esp, 0x10
mov dword [ebp - 0x40], 0
jmp 0x1002b303
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe6
jne 0x1002b662
push 2
lea ecx, [ebp - 0x104]
call fcn.10015984
mov byte [ebp - 4], 0xf
mov dword [ebp - 0xc0], 0
jmp 0x1002b337
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x1002b350
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x5c], 1
jmp 0x1002b32a
push 0x7130
lea eax, [ebp - 0x104]
push eax
push 1
push 0
push 0
lea eax, [ebp - 0xc0]
push eax
call fcn.10029183
add esp, 0x18
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1002b38e
push 0x15ce
push 0
push 1
call fcn.10027cf9
add esp, 0xc
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
and dword [eax], 0
jmp 0x1002b3c4
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x374]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
cmp dword [eax], 0
jl 0x1002b64e
mov dword [ebp - 0x39c], 0xd437f1bd
mov dword [ebp - 0x3a4], 7
mov dword [ebp - 0x6cc], 0xd9248e6b
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x5c], 0
je 0x1002b636
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
cmp dword [eax], 0
je 0x1002b4f5
cmp dword [ebp - 0x40], 0
je 0x1002b4b8
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x5c]
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
cmp dword [eax], esi
je 0x1002b468
cmp dword [ebp - 0x40], 0
je 0x1002b468
mov dword [ebp - 0x538], 1
jmp 0x1002b46f
and dword [ebp - 0x538], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x5c]
cmp dword [ebp - 0x538], eax
je 0x1002b496
mov dword [ebp - 0x37c], 1
jmp 0x1002b49d
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x37c]
sub eax, dword [ebp - 0x40]
je 0x1002b4b8
mov dword [ebp - 0x478], 1
jmp 0x1002b4bf
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0xd383de46
jne 0x1002b4d7
mov dword [ebp - 0x384], 1
jmp 0x1002b4de
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x384], eax
jne 0x1002b4f5
mov dword [ebp - 0x4e8], 1
jmp 0x1002b4fc
and dword [ebp - 0x4e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
imul eax, dword [ebp - 0x4e8]
test eax, eax
jne 0x1002b525
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x5c], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x5c]
mov dword [ebp - 0x38c], eax
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
imul ecx, dword [ebp - 0x38c], 0x2ff3
cmp ecx, dword [ebp + eax*4 - 0x5c]
jge 0x1002b569
mov dword [ebp - 0x480], 1
jmp 0x1002b570
and dword [ebp - 0x480], 0
push 1
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov ecx, dword [ebp - 0x480]
cmp ecx, dword [eax]
jle 0x1002b593
mov dword [ebp - 0x394], 1
jmp 0x1002b59a
and dword [ebp - 0x394], 0
push 0
lea ecx, [ebp - 0x104]
call fcn.10015a22
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x5c]
cmp eax, dword [ebp - 0x394]
jl 0x1002b5c1
mov dword [ebp - 0x520], 1
jmp 0x1002b5c8
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 0
jne 0x1002b5e9
mov dword [ebp - 0x488], 1
jmp 0x1002b5f0
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
cmp eax, dword [ebp - 0x6cc]
jne 0x1002b616
mov dword [ebp - 0x4f0], 1
jmp 0x1002b61d
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
sub eax, 0x7cbd7c9c
je 0x1002b636
mov dword [ebp - 0x3ac], 1
jmp 0x1002b63d
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x638], eax
jmp 0x1002b3a0
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x104]
call fcn.10015a06
jmp 0x1002b2fc
mov dword [ebp - 0x768], 0x79dc
mov eax, dword [ebp - 0x490]
inc eax
mov dword [ebp - 0x490], eax
push 0x1194
push 0x201a
push 1
push 1
push 0x7f55
lea eax, [ebp - 0x768]
push eax
call fcn.1001cf78
add esp, 0x18
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x93c]
call fcn.10015a06
mov eax, dword [ebp - 0x110]
mov eax, dword [eax + 4]
mov dword [ebp - 0x3f0], eax
mov dword [ebp - 0xd0], 0x40d7f825
mov dword [ebp - 0xd0], 9
jmp 0x1002b6dc
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jge 0x1002b8bf
mov dword [ebp - 0x54], 2
mov dword [ebp - 0x6d8], 8
mov dword [ebp - 0x3b4], 0x26f0
mov dword [ebp - 0x640], 0x100099a0
cmp dword [ebp - 0x3b4], 0x2ac1
jle 0x1002b791
and dword [ebp - 0x16c], 0
jmp 0x1002b730
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x67da
jge 0x1002b791
and dword [ebp - 0x1c4], 0
jmp 0x1002b752
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x932
jge 0x1002b78f
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x6bc], eax
mov dword [ebp - 0x6b8], edx
push dword [ebp - 0x6b8]
push dword [ebp - 0x6bc]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002b745
jmp 0x1002b723
mov dword [ebp - 4], 0x10
cmp dword [ebp - 0x3b4], 0x2330
jge 0x1002b7b4
mov edx, dword [ebp - 0x640]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002b7d0
or dword [ebp - 4], 0xffffffff
jmp 0x1002b7da
mov dword [ebp - 0x174], 0
jmp 0x1002b7f3
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jge 0x1002b80f
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x838], 0
jmp 0x1002b7e6
mov dword [ebp - 0x54], 0
jmp 0x1002b81f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x19
jne 0x1002b883
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1cc], 0
jmp 0x1002b848
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0
jg 0x1002b876
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1002b874
push 0
push 0xd33
push 0
call fcn.10034060
add esp, 0xc
jmp 0x1002b83b
cmp dword [ebp - 0xd0], 0
je 0x1002b881
jmp 0x1002b818
jmp 0x1002b818
mov dword [ebp - 0x54], 0
jmp 0x1002b893
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1002b8ba
lea eax, [ebp - 0x6d8]
push eax
push 0x2953
push 1
push 1
push 0
push 0x5548
call fcn.10029183
add esp, 0x18
jmp 0x1002b88c
jmp 0x1002b6cf
mov dword [ebp - 0x2c], 0xb0e1b1b5
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0x80], 4
push 2
lea ecx, [ebp - 0x790]
call fcn.10015984
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x840], 7
mov dword [ebp - 0x17c], 0
jmp 0x1002b918
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 2
jge 0x1002b93a
push dword [ebp - 0x17c]
lea ecx, [ebp - 0x790]
call fcn.10015a22
mov dword [eax], 0x2846
jmp 0x1002b90b
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x9c]
je 0x1002b95a
mov dword [ebp - 0x548], 1
jmp 0x1002b961
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x548], eax
je 0x1002b978
mov dword [ebp - 0x3c4], 1
jmp 0x1002b97f
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x2c], 0x6a056ebf
jl 0x1002b994
mov dword [ebp - 0x3bc], 1
jmp 0x1002b99b
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3bc], eax
jle 0x1002b9b5
cmp dword [ebp - 0x2c], 0
jne 0x1002b9b5
and dword [ebp - 0x498], 0
jmp 0x1002b9bf
mov dword [ebp - 0x498], 1
mov eax, dword [ebp - 0x498]
sub eax, 0xa
cmp eax, 1
jae 0x1002b9d9
mov dword [ebp - 0x4f8], 1
jmp 0x1002b9e0
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x3c4]
cmp eax, dword [ebp - 0x4f8]
jge 0x1002ba00
cmp dword [ebp - 0x9c], 0
jne 0x1002ba00
and dword [ebp - 0x3cc], 0
jmp 0x1002ba0a
mov dword [ebp - 0x3cc], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3cc], eax
jl 0x1002ba21
mov dword [ebp - 0x4a0], 1
jmp 0x1002ba28
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4a0], eax
jne 0x1002ba3f
mov dword [ebp - 0x3d4], 1
jmp 0x1002ba46
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0xbed5
jle 0x1002ba5e
mov dword [ebp - 0x528], 1
jmp 0x1002ba65
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x528]
add eax, 0x8abb
cmp eax, dword [ebp - 0x2c]
jge 0x1002ba85
mov dword [ebp - 0x3dc], 1
jmp 0x1002ba8c
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3dc], eax
je 0x1002baa3
mov dword [ebp - 0x3f8], 1
jmp 0x1002baaa
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 2
jb 0x1002babf
mov dword [ebp - 0x3e4], 1
jmp 0x1002bac6
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3e4], eax
jle 0x1002badd
mov dword [ebp - 0x3fc], 1
jmp 0x1002bae4
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x3fc], eax
jl 0x1002bc5c
mov dword [ebp - 0x3ec], 0x4cd021a
mov dword [ebp - 0x3f4], 0x5eee
mov dword [ebp - 0x650], 0x100099d8
cmp dword [ebp - 0x3f4], 0x62d5
jle 0x1002bc02
call dword [sym.imp.USER32.dll_CreateMenu]
and dword [ebp - 0x1e0], 0
jmp 0x1002bb40
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x24f2
jge 0x1002bc02
and dword [ebp - 0x1d4], 0
jmp 0x1002bb66
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0x5266
jge 0x1002bbfd
and dword [ebp - 0x184], 0
jmp 0x1002bb8c
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x1a1c
jge 0x1002bbf8
mov eax, dword [ebp - 0x1d4]
cdq
idiv dword [ebp - 0x184]
add edx, dword [ebp - 0x1e0]
mov eax, edx
cdq
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], edx
push dword [ebp - 0x6c4]
push dword [ebp - 0x6c8]
lea ecx, [ebp - 0x974]
call fcn.1000d990
pop ecx
pop ecx
mov dword [ebp - 0x730], eax
mov ecx, dword [ebp - 0x730]
call fcn.1000ddee
push eax
call fcn.1004c266
pop ecx
lea ecx, [ebp - 0x974]
call fcn.1000dde4
jmp 0x1002bb7f
jmp 0x1002bb59
jmp 0x1002bb33
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x3f4], 0x5cda
jge 0x1002bc2b
push dword [ebp - 0x650]
call fcn.1004c266
pop ecx
jmp 0x1002bc47
mov dword [ebp - 4], 0x12
jmp 0x1002bc57
jmp 0x1002be40
mov dword [ebp - 0xe4], 0x7030fc35
mov dword [ebp - 0x6f0], 0x9956a218
push 0x1579
lea eax, [ebp - 0x80]
push eax
push 1
push 0
call fcn.10028b10
add esp, 0x10
mov dword [ebp - 0x80], 0
jmp 0x1002bc95
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jg 0x1002be40
mov dword [ebp - 0xa4], 6
mov dword [ebp - 0x658], 2
mov dword [ebp - 0x750], 0x3db237e2
push 1
push 0x510d
push 0
call fcn.10034060
add esp, 0xc
mov dword [ebp - 0x9c], 4
cmp dword [ebp - 0x9c], 0
je 0x1002be0a
mov dword [ebp - 0x274], 0
mov dword [ebp - 0xe4], 0
jmp 0x1002bd08
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jg 0x1002be08
mov dword [ebp - 0x6e4], 0xcc027682
push 0x4589
push 0
lea eax, [ebp - 0x790]
push eax
push 0x556d
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xa4]
push eax
push 1
push 1
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x6e4]
push eax
call fcn.10026b0f
add esp, 0x28
mov dword [ebp - 0xa4], 1
jmp 0x1002bd70
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1002be03
mov dword [ebp - 0x660], 0xffffffff
push 0x456e
lea eax, [ebp - 0x658]
push eax
push 1
push 0x297e
lea eax, [ebp - 0x750]
push eax
lea eax, [ebp - 0x274]
push eax
push 0x2f76
push 0x2662
lea eax, [ebp - 0x80]
push eax
push 0x3d40
push 0x3e2c
lea eax, [ebp - 0x9c]
push eax
push 0x481
lea eax, [ebp - 0x660]
push eax
lea eax, [ebp - 0x6f0]
push eax
lea eax, [ebp - 0xa4]
push eax
push 1
lea eax, [ebp - 0xe4]
push eax
lea eax, [ebp - 0x790]
push eax
push 0x7e91
call fcn.1001d34d
add esp, 0x50
jmp 0x1002bd63
jmp 0x1002bcfb
jmp 0x1002be3b
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1002be3b
push 0x22c
push 0x3bf7
push 1
push 0x43dc
push 1
push 0x614f
push 0x186a
call fcn.1001d840
add esp, 0x1c
jmp 0x1002bc8e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x790]
call fcn.10015a06
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x280], 0xe7308f47
mov dword [ebp - 0xe8], 0x7d711e7b
mov dword [ebp - 0xd8], 0
jmp 0x1002be86
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jl 0x1002c11b
mov dword [ebp - 0x88], 0x402e31d8
mov dword [ebp - 0x668], 0xd67a4bed
cmp dword [ebp - 0x88], 0
je 0x1002bed0
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x88]
cmp dword [ebp - 0x668], eax
jg 0x1002bed0
mov dword [ebp - 0x278], 1
jmp 0x1002bed7
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x280]
jg 0x1002befd
mov dword [ebp - 0x288], 1
jmp 0x1002bf04
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x88], 0
jmp 0x1002bf29
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xffffffec
jle 0x1002c116
mov dword [ebp - 0xe8], 0
jmp 0x1002bf4f
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jl 0x1002c111
mov dword [ebp - 0x290], 0x4a55
mov dword [ebp - 0x738], 0x10009a18
cmp dword [ebp - 0x290], 0x4a75
jle 0x1002c05c
and dword [ebp - 0x194], 0
jmp 0x1002bf96
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x6fb5
jge 0x1002c05c
and dword [ebp - 0x1f0], 0
jmp 0x1002bfbc
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x6a3e
jge 0x1002c057
and dword [ebp - 0x18c], 0
jmp 0x1002bfe2
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x1943
jge 0x1002c052
and dword [ebp - 0x1e8], 0
jmp 0x1002c004
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x5f48
jge 0x1002c050
mov eax, dword [ebp - 0x18c]
imul eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x194]
or ecx, dword [ebp - 0x1f0]
or eax, ecx
cdq
mov dword [ebp - 0x6d4], eax
mov dword [ebp - 0x6d0], edx
push dword [ebp - 0x6d0]
push dword [ebp - 0x6d4]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002bff7
jmp 0x1002bfd5
jmp 0x1002bfaf
jmp 0x1002bf89
mov byte [ebp - 0x81], 0
mov dword [ebp - 4], 0x15
cmp dword [ebp - 0x290], 0x4785
jge 0x1002c086
mov edx, dword [ebp - 0x738]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002c0a2
or dword [ebp - 4], 0xffffffff
jmp 0x1002c0ac
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1002c0d9
push 0x1d3
push 1
push 0x3ddf
push 1
push 0x739f
push 0x7c8c
push 1
call fcn.1001d9d6
add esp, 0x1c
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x1002c10c
push 0x4df
push 0x5da0
push 1
push 1
push 0x2a9d
push 0x2ab8
push 0x24d
push 0
call fcn.100288cf
add esp, 0x20
jmp 0x1002bf42
jmp 0x1002bf1c
jmp 0x1002be79
mov dword [ebp - 0x1c], 0x11151
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x298], 0x7628
mov dword [ebp - 0x670], 0x10009a70
cmp dword [ebp - 0x298], 0x79da
jle 0x1002c22a
and dword [ebp - 0x19c], 0
jmp 0x1002c163
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x63d4
jge 0x1002c22a
and dword [ebp - 0x1dc], 0
jmp 0x1002c189
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x4382
jge 0x1002c225
and dword [ebp - 0x1ec], 0
jmp 0x1002c1af
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x7ecb
jge 0x1002c220
and dword [ebp - 0x1a8], 0
jmp 0x1002c1d1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x6423
jge 0x1002c21e
mov eax, dword [ebp - 0x19c]
mov ecx, dword [ebp - 0x1dc]
shl eax, cl
mov ecx, dword [ebp - 0x1ec]
sar eax, cl
or eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0x6e0], eax
mov dword [ebp - 0x6dc], edx
push dword [ebp - 0x6dc]
push dword [ebp - 0x6e0]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002c1c4
jmp 0x1002c1a2
jmp 0x1002c17c
jmp 0x1002c156
mov dword [ebp - 0x210], 0xffffffff
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x298], 0x73a2
jge 0x1002c257
mov edx, dword [ebp - 0x670]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002c273
or dword [ebp - 4], 0xffffffff
jmp 0x1002c27d
mov dword [ebp - 0x2e8], 0x64d07ddb
or eax, 0xffffffff
je 0x1002c2fb
imul eax, dword [ebp - 0x1c], 0x8f4f
dec eax
imul eax, dword [ebp - 0x1c]
test eax, eax
jne 0x1002c2ab
cmp dword [ebp - 0x1c], 0
jne 0x1002c2ab
and dword [ebp - 0x2a0], 0
jmp 0x1002c2b5
mov dword [ebp - 0x2a0], 1
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x1c]
add ecx, eax
imul ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x18]
jl 0x1002c2dd
mov dword [ebp - 0x25c], 1
jmp 0x1002c2e4
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x25c]
jle 0x1002c2fb
mov dword [ebp - 0x2b0], 1
jmp 0x1002c302
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x2b0], eax
jle 0x1002c31c
mov dword [ebp - 0x2b8], 1
jmp 0x1002c323
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x1c], eax
je 0x1002c343
cmp dword [ebp - 0x1c], 0
je 0x1002c343
mov dword [ebp - 0x6fc], 1
jmp 0x1002c34a
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x210]
jle 0x1002c361
mov dword [ebp - 0x2c0], 1
jmp 0x1002c368
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x1c], 0
jmp 0x1002c384
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1002c5a0
mov dword [ebp - 0x1d0], 0
jmp 0x1002c3a7
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x1002c3c0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x64], 2
jmp 0x1002c39a
mov dword [ebp - 0x18], 0
jmp 0x1002c3d0
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1002c3e3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x64], 0
jmp 0x1002c3c9
mov dword [ebp - 0x18], 0
jmp 0x1002c3f3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1002c59b
mov dword [ebp - 0x308], 0xd4416da8
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x64]
jl 0x1002c429
mov dword [ebp - 0x2c8], 1
jmp 0x1002c430
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x2c8], eax
jl 0x1002c44e
mov dword [ebp - 0x2d0], 1
jmp 0x1002c455
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0x8cd908fb
jb 0x1002c46d
mov dword [ebp - 0x2d8], 1
jmp 0x1002c474
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x2d8]
neg eax
cmp dword [ebp - 0x1c], eax
jne 0x1002c48d
mov dword [ebp - 0x678], 1
jmp 0x1002c494
and dword [ebp - 0x678], 0
push 3
pop eax
test eax, eax
jne 0x1002c4a7
mov dword [ebp - 0x2e0], 1
jmp 0x1002c4ae
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x2e0], eax
jle 0x1002c4c8
mov dword [ebp - 0x2f0], 1
jmp 0x1002c4cf
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2f0]
jl 0x1002c4e9
mov dword [ebp - 0x2f8], 1
jmp 0x1002c4f0
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x64]
cmp eax, dword [ebp - 0x2f8]
jge 0x1002c50b
mov dword [ebp - 0x300], 1
jmp 0x1002c512
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x848], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
mov dword [ebp - 0x850], eax
cmp dword [ebp - 0x18], 0xa7412631
je 0x1002c54f
mov dword [ebp - 0x310], 1
jmp 0x1002c556
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x318]
cmp ecx, dword [ebp + eax*4 - 0x64]
jl 0x1002c57d
mov dword [ebp - 0x320], 1
jmp 0x1002c584
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x320]
sub eax, 0x67d5b44
mov ecx, dword [ebp - 0x18]
mov dword [ebp + ecx*4 - 0x64], eax
jmp 0x1002c3ec
jmp 0x1002c37d
mov dword [ebp - 0x858], 0x2e0cf572
push 1
push 0x7165
push 0x4ec8
push 1
push 0x5664
push 0x5ca
call fcn.1001dca3
add esp, 0x18
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1002c5ef
push 0x76c0
push 0
push 0x60b9
push 0x4fa5
call fcn.1003ba0f
add esp, 0x10
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
movzx eax, word [eax + 0x14]
mov ecx, dword [ebp - 0x110]
mov ecx, dword [ecx]
lea eax, [ecx + eax + 0x18]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x860], 0xbca63185
mov byte [ebp - 0x8b], 0
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x1002c63a
push 0x2b40
push 0
push 0x34ec
call fcn.10037c1d
add esp, 0xc
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x1002c658
push 0
push 0x5bb
push 0x11b5
call dword [sym.imp.USER32.dll_GetScrollInfo]
push 3
lea ecx, [ebp - 0x7ec]
call fcn.10015984
mov dword [ebp - 4], 0x19
push 3
lea ecx, [ebp - 0x5a4]
call fcn.10015984
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x7ec]
push eax
push 0
lea eax, [ebp - 0xc4]
push eax
call fcn.1003027b
add esp, 0xc
mov dword [ebp - 0xc4], 0
jmp 0x1002c6ae
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x1002c6d0
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x5a4]
call fcn.10015a22
mov dword [eax], 0xaeef20fe
jmp 0x1002c6a1
push 2
lea ecx, [ebp - 0x5a4]
call fcn.10015a22
mov dword [eax], 2
jmp 0x1002c709
push 2
lea ecx, [ebp - 0x5a4]
call fcn.10015a22
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x328]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x5a4]
call fcn.10015a22
cmp dword [eax], 0
jl 0x1002c780
mov dword [ebp - 0x10c], 0xad4351cd
mov dword [ebp - 0x10c], 0
jmp 0x1002c73e
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jg 0x1002c77b
push 1
push 0
push 0x4ec5
call fcn.10027d8b
add esp, 0xc
push 2
lea ecx, [ebp - 0x5a4]
call fcn.10015a22
push dword [eax]
lea ecx, [ebp - 0x7ec]
call fcn.10015a22
cmp dword [eax], 0
je 0x1002c779
jmp 0x1002c731
jmp 0x1002c731
jmp 0x1002c6e5
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x1002c7a2
push 1
push 0x5238
push 1
push 0x7dac
call fcn.100267fd
add esp, 0x10
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x5a4]
call fcn.10015a06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ec]
call fcn.10015a06
and dword [ebp - 0x218], 0
jmp 0x1002c7df
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x4c]
add eax, 0x28
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
movzx eax, word [eax + 6]
cmp dword [ebp - 0x218], eax
jge 0x1002de01
push 4
lea ecx, [ebp - 0xbc]
call fcn.10015984
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x330], 0x6d52
mov dword [ebp - 0x5b4], 0x10009ac0
cmp dword [ebp - 0x330], 0x6dee
jle 0x1002c8d9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
and dword [ebp - 0x118], 0
jmp 0x1002c84f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x40f
jge 0x1002c8d9
and dword [ebp - 0x120], 0
jmp 0x1002c871
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x357d
jge 0x1002c8d4
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x120]
cdq
mov dword [ebp - 0x6ec], eax
mov dword [ebp - 0x6e8], edx
push dword [ebp - 0x6e8]
push dword [ebp - 0x6ec]
lea ecx, [ebp - 0x9a4]
call fcn.1000d990
pop ecx
pop ecx
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x760]
call fcn.1000ddee
push eax
call fcn.1004c266
pop ecx
lea ecx, [ebp - 0x9a4]
call fcn.1000dde4
jmp 0x1002c864
jmp 0x1002c842
mov dword [ebp - 0x28], 0xffffffff
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x330], 0x6b3e
jge 0x1002c8fc
push dword [ebp - 0x5b4]
call fcn.1004c266
pop ecx
jmp 0x1002c918
mov dword [ebp - 4], 0x1b
jmp 0x1002c928
push 3
lea ecx, [ebp - 0x560]
call fcn.10015984
mov byte [ebp - 4], 0x1e
push 3
lea ecx, [ebp - 0x778]
call fcn.10015984
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x338], 0x891
mov dword [ebp - 0x5cc], 0x10009b18
cmp dword [ebp - 0x338], 0x8bf
jle 0x1002ca44
and dword [ebp - 0x138], 0
jmp 0x1002c984
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x789a
jge 0x1002ca44
and dword [ebp - 0x128], 0
jmp 0x1002c9aa
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x595c
jge 0x1002ca3f
and dword [ebp - 0x130], 0
jmp 0x1002c9d0
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x41d2
jge 0x1002ca3a
mov eax, dword [ebp - 0x128]
imul eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x138]
cdq
mov dword [ebp - 0x6f8], eax
mov dword [ebp - 0x6f4], edx
push dword [ebp - 0x6f4]
push dword [ebp - 0x6f8]
lea ecx, [ebp - 0x98c]
call fcn.1000d990
pop ecx
pop ecx
mov dword [ebp - 0x5b0], eax
mov ecx, dword [ebp - 0x5b0]
call fcn.1000ddee
push eax
call fcn.1004c266
pop ecx
lea ecx, [ebp - 0x98c]
call fcn.1000dde4
jmp 0x1002c9c3
jmp 0x1002c99d
jmp 0x1002c977
mov dword [ebp - 0x20], 0
jmp 0x1002ca54
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1002ca70
push dword [ebp - 0x20]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov dword [eax], 0xf75dcec3
jmp 0x1002ca4d
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x338], 0x577
jge 0x1002ca8c
push dword [ebp - 0x5cc]
call fcn.1004c266
pop ecx
jmp 0x1002caa8
mov dword [ebp - 4], 0x1f
jmp 0x1002cab8
mov dword [ebp - 0x20], 0
jmp 0x1002cac8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002cae4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x560]
call fcn.10015a22
mov dword [eax], 0xfffffff9
jmp 0x1002cac1
mov dword [ebp - 0x20], 0
jmp 0x1002caf4
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002cb10
push dword [ebp - 0x20]
lea ecx, [ebp - 0x778]
call fcn.10015a22
mov dword [eax], 0xb1a25d00
jmp 0x1002caed
mov dword [ebp - 0x28], 3
jmp 0x1002cb20
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002d157
mov dword [ebp - 0x30], 0x2937a3a1
mov dword [ebp - 0x5ac], 0x24061354
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov esi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov eax, dword [eax]
mov dword [esi], eax
mov dword [ebp - 0x30], 3
jmp 0x1002cb6d
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1002d152
mov dword [ebp - 0x38], 0xfffffff9
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
push 3
lea ecx, [ebp - 0xbc]
call fcn.10015a22
push 1
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov eax, dword [eax]
neg eax
cmp dword [ebp - 0x38], eax
je 0x1002cbbb
mov dword [ebp - 0x340], 1
jmp 0x1002cbc2
and dword [ebp - 0x340], 0
push 1
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov ecx, dword [ebp - 0x340]
cmp ecx, dword [eax]
jne 0x1002cbe5
mov dword [ebp - 0x348], 1
jmp 0x1002cbec
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x348], eax
jg 0x1002cc03
mov dword [ebp - 0x5d4], 1
jmp 0x1002cc0a
and dword [ebp - 0x5d4], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov eax, 0x78c0
cmp eax, 1
jne 0x1002cc2e
mov dword [ebp - 0x350], 1
jmp 0x1002cc35
and dword [ebp - 0x350], 0
push 0
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov ecx, dword [ebp - 0x350]
cmp ecx, dword [eax]
jge 0x1002cc58
mov dword [ebp - 0x358], 1
jmp 0x1002cc5f
and dword [ebp - 0x358], 0
mov esi, dword [ebp - 0x28]
add esi, dword [ebp - 0x358]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
cmp esi, dword [eax]
jl 0x1002cc86
mov dword [ebp - 0x360], 1
jmp 0x1002cc8d
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x360], eax
jl 0x1002cca4
mov dword [ebp - 0x368], 1
jmp 0x1002ccab
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x368]
jge 0x1002ccc2
mov dword [ebp - 0x370], 1
jmp 0x1002ccc9
and dword [ebp - 0x370], 0
push 1
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jg 0x1002ccf2
cmp dword [ebp - 0x30], 0
je 0x1002ccf2
mov dword [ebp - 0x378], 1
jmp 0x1002ccf9
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x38]
je 0x1002cf07
mov dword [ebp - 0x5dc], 0xfffffff8
push dword [ebp - 0x30]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov dword [eax], 7
push dword [ebp - 0x30]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x868], eax
mov eax, 0x8d6db9e
test eax, eax
jne 0x1002cd52
mov dword [ebp - 0x380], 1
jmp 0x1002cd59
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x38]
je 0x1002cd73
mov dword [ebp - 0x388], 1
jmp 0x1002cd7a
and dword [ebp - 0x388], 0
cmp dword [ebp - 0x388], 0xffff
jae 0x1002cd92
mov dword [ebp - 0x390], 1
jmp 0x1002cd99
and dword [ebp - 0x390], 0
imul eax, dword [ebp - 0x390], 0xffff
test eax, eax
je 0x1002cdb7
xor eax, eax
je 0x1002cdb7
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x398], eax
jg 0x1002cdd5
mov byte [ebp - 0x6b], 0
push 0x6247
push 0x362c
push 0
push 0x634a
push 1
push 0x5104
lea eax, [ebp - 0x6b]
push eax
push 0x6c84
push 1
call fcn.1003619e
add esp, 0x24
push 0
lea ecx, [ebp - 0x778]
call fcn.10015a22
mov esi, dword [ebp - 0x38]
push 1
lea ecx, [ebp - 0x560]
call fcn.10015a22
add esi, dword [eax]
push 2
lea ecx, [ebp - 0xbc]
call fcn.10015a22
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x560]
call fcn.10015a22
cmp esi, dword [eax]
jl 0x1002cf82
mov dword [ebp - 0x5ec], 1
jmp 0x1002cf89
and dword [ebp - 0x5ec], 0
push 1
lea ecx, [ebp - 0x560]
call fcn.10015a22
push 2
lea ecx, [ebp - 0x560]
call fcn.10015a22
mov esi, dword [ebp - 0x38]
push 1
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov edi, eax
push 0
lea ecx, [ebp - 0x778]
call fcn.10015a22
mov eax, dword [eax]
add eax, dword [edi]
cmp eax, esi
jg 0x1002d13a
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1002d138
push 0x2ddc
push 1
push 0x7e74
push 0x137d
push 0x5d4e
push 0x2715
push 1
push 0
push 0x105e
push 8
call fcn.10026b0f
add esp, 0x28
mov dword [ebp - 0x3d8], 0x79db
mov dword [ebp - 0x5f4], 0x10009ba8
cmp dword [ebp - 0x3d8], 0x7caa
jle 0x1002d0ec
and dword [ebp - 0x150], 0
jmp 0x1002d046
mov byte [ebp - 4], 0x22
cmp dword [ebp - 0x3d8], 0x76fc
jge 0x1002d10c
jmp 0x1002d14d
mov esi, dword [ebp - 0x30]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xbc]
call fcn.10015a22
mov dword [eax], esi
jmp 0x1002cb66
jmp 0x1002cb19
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1002d180
push 0
push 0
push 0
push 0x1c2
push 0x4ae
push 0
push 0x1f09
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x778]
call fcn.10015a06
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x560]
call fcn.10015a06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.10015a06
mov eax, dword [ebp - 0x4c]
cmp dword [eax + 0x10], 0
jne 0x1002d448
push 0
lea eax, [ebp - 0x238]
push eax
push dword [ebp - 0x5fc]
push 1
push dword [ebp - 0x4c]
push dword [ebp - 0x3f0]
call fcn.1001dca3
add esp, 0x18
push 1
lea ecx, [ebp - 0x58c]
call fcn.10015984
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x60c], 0x74489b46
mov dword [ebp - 0x158], 0
jmp 0x1002d213
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x1002d235
push dword [ebp - 0x158]
lea ecx, [ebp - 0x58c]
call fcn.10015a22
mov dword [eax], 0x1f7e2799
jmp 0x1002d206
push 0
lea ecx, [ebp - 0x58c]
call fcn.10015a22
mov dword [eax], 0xfffffff2
jmp 0x1002d26e
push 0
lea ecx, [ebp - 0x58c]
call fcn.10015a22
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0x3e0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3e0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x58c]
call fcn.10015a22
cmp dword [eax], 0x16
jne 0x1002d2e8
mov dword [ebp - 0x604], 0xfffffff8
mov dword [ebp - 0x614], 0x6de6
push 0x7772
push 0x1dcf
push 0x1d94
push 0x6d63
lea eax, [ebp - 0x58c]
push eax
push 0x68c1
push 1
lea eax, [ebp - 0x604]
push eax
push 0x5ed1
push 1
lea eax, [ebp - 0x60c]
push eax
push 0x664d
call fcn.100268dc
add esp, 0x30
cmp dword [ebp - 0x614], 0
je 0x1002d2e3
jmp 0x1002d2e8
jmp 0x1002d24a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58c]
call fcn.10015a06
mov dword [ebp - 0x3e8], 0x45e9
mov dword [ebp - 0x624], 0x10009c38
cmp dword [ebp - 0x3e8], 0x487e
jle 0x1002d3fe
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
and dword [ebp - 0x160], 0
jmp 0x1002d337
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x5b7a
jge 0x1002d3f6
and dword [ebp - 0x168], 0
jmp 0x1002d35d
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x3570
jge 0x1002d3f1
and dword [ebp - 0x170], 0
jmp 0x1002d383
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x67aa
jge 0x1002d3ec
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x170]
cdq
mov dword [ebp - 0x710], eax
mov dword [ebp - 0x70c], edx
push dword [ebp - 0x70c]
push dword [ebp - 0x710]
lea ecx, [ebp - 0x9bc]
call fcn.1000d990
pop ecx
pop ecx
mov dword [ebp - 0x61c], eax
mov ecx, dword [ebp - 0x61c]
call fcn.1000ddee
push eax
call fcn.1004c266
pop ecx
lea ecx, [ebp - 0x9bc]
call fcn.1000dde4
jmp 0x1002d376
jmp 0x1002d350
jmp 0x1002d32a
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x1002c7c9
push 1
push 0x37c6
push 0x1c2e
push 0x203e
push 0x3942
push 0x5b4b
push 0
call fcn.100272f3
add esp, 0x1c
mov dword [ebp - 0x414], 0x442f
mov dword [ebp - 0x62c], 0x10009ca4
cmp dword [ebp - 0x414], 0x4683
jle 0x1002d506
and dword [ebp - 0x178], 0
jmp 0x1002d4a3
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x3644
jge 0x1002d506
and dword [ebp - 0x180], 0
jmp 0x1002d4c5
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x3bee
jge 0x1002d504
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x180]
shl eax, cl
cdq
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x718], edx
push dword [ebp - 0x718]
push dword [ebp - 0x71c]
mov ecx, 0x1060a8b8
call fcn.1000de0e
jmp 0x1002d4b8
jmp 0x1002d496
push 4
push 0x1000
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x3f0]
add ecx, dword [eax + 0xc]
push ecx
push 0x12390
push 0x1149e
call fcn.10015535
pop ecx
pop ecx
call eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 4], 0x27
cmp dword [ebp - 0x414], 0x43a6
jge 0x1002d55c
mov edx, dword [ebp - 0x62c]
mov ecx, 0x1060a8b8
call fcn.1000f7c5
jmp 0x1002d578
or dword [ebp - 4], 0xffffffff
jmp 0x1002d582
mov eax, dword [ebp - 0x4c]
push dword [eax + 0x10]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x634]
add ecx, dword [eax + 0x14]
push ecx
push dword [ebp - 0x238]
call fcn.100155e2
add esp, 0xc
mov dword [ebp - 0x44], 0x78f3c34e
mov dword [ebp - 0xdc], 0xe34edf6b
mov dword [ebp - 0x190], 1
mov dword [ebp - 0xcc], 0x69ff4caa
mov dword [ebp - 0x228], 0xffffffff
mov dword [ebp - 0x43c], 0xfffffff6
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x68], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x198], 0x8d08
mov dword [ebp - 0x230], 5
lea eax, [ebp - 0xdc]
push eax
push 1
push 0x5628
lea eax, [ebp - 0x44]
push eax
push 0x1b0e
push 0x36f5
push 1
push 1
push 0x66a
push 0x229f
call fcn.10026b0f
add esp, 0x28
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x88c], eax
cmp dword [ebp - 0x230], 0xf4aedf2
jg 0x1002d677
mov dword [ebp - 0x63c], 1
jmp 0x1002d67e
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0xb0]
jle 0x1002d6a7
mov eax, 0xae26
test eax, eax
je 0x1002d6a7
mov dword [ebp - 0x41c], 1
jmp 0x1002d6ae
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0
jne 0x1002d6c3
mov dword [ebp - 0x644], 1
jmp 0x1002d6ca
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x8ec], eax
mov eax, dword [ebp - 0x68]
neg eax
cmp eax, dword [ebp - 0x68]
je 0x1002d6ec
mov dword [ebp - 0x424], 1
jmp 0x1002d6f3
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x424], eax
jle 0x1002d70a
mov dword [ebp - 0x434], 1
jmp 0x1002d711
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
cmp eax, dword [ebp - 0x434]
jl 0x1002d743
mov dword [ebp - 0x444], 1
jmp 0x1002d74a
and dword [ebp - 0x444], 0
mov dword [ebp - 0x198], 0xd58e
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x43c]
sub eax, dword [ebp - 0x444]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffff
jge 0x1002d787
mov dword [ebp - 0x44c], 1
jmp 0x1002d78e
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xdcf2
je 0x1002d7a6
mov dword [ebp - 0x454], 1
jmp 0x1002d7ad
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
sub eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x68]
jge 0x1002d7c7
mov dword [ebp - 0x45c], 1
jmp 0x1002d7ce
and dword [ebp - 0x45c], 0
imul eax, dword [ebp - 0x45c], 0xffff
imul eax, dword [ebp - 0x68]
test eax, eax
je 0x1002d7f5
cmp dword [ebp - 0x190], 0
je 0x1002d7f5
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x464], eax
jne 0x1002d813
jmp 0x1002de21
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x67c], eax
push 1
push 0x4b1c
push dword [ebp - 0x67c]
call fcn.1002792d
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret