Function at 0x1002a9a3
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
sub esp, 0x30
lea ebp, [esp - 4]
mov eax, dword [0x10068510]
xor eax, ebp
mov dword [ebp + 0x30], eax
push 0xa4
mov eax, 0x10053d77
call fcn.10037ea9
mov esi, ecx
mov dword [ebp - 0x20], esi
mov ebx, dword [ebp + 0x3c]
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp + 0x40]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp + 0x54]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp + 0x58]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp + 0x5c]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp + 0x64]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp + 0x68]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp + 0x6c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp + 0x74]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp + 0x78]
mov dword [ebp + 4], eax
xor edi, edi
mov dword [ebp + 0x14], edi
mov dword [ebp - 4], edi
push 0x10056210
push dword [ebp - 0x28]
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
jne 0x1002aa72
mov eax, dword [ebp + 0x4c]
or eax, dword [ebp + 0x50]
je 0x1002aa72
cmp dword [ebp + 0x50], edi
jg 0x1002aa72
jl 0x1002aa4a
cmp dword [ebp + 0x4c], 0x19000
jae 0x1002aa72
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x30]
xor ecx, ebp
call fcn.10037e67
add ebp, 0x34
leave
ret 0x44
push str.__frag_
push ebx
call fcn.10038894
pop ecx
pop ecx
test eax, eax
je 0x1002aaf7
mov byte [ebp + 0xb], 0
push ebx
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [ebp], eax
cmp eax, edi
je 0x1002aaf7
push 0x3a
push eax
call fcn.10039375
pop ecx
pop ecx
mov ebx, eax
cmp ebx, edi
je 0x1002aae4
add ebx, 6
push 0x10058e2c
push ebx
call fcn.1003945d
pop ecx
pop ecx
cmp eax, edi
je 0x1002aae4
xor ecx, ecx
mov word [eax], cx
push str..dailymotion.com
push ebx
call fcn.10038894
pop ecx
pop ecx
test eax, eax
jne 0x1002aae0
push str..dmcdn.net
push ebx
call fcn.10038894
pop ecx
pop ecx
test eax, eax
je 0x1002aae4
mov byte [ebp + 0xb], 1
push dword [ebp]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp byte [ebp + 0xb], 0
jne 0x1002aa53
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp + 0x24]
call fcn.1000499f
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x18]
call fcn.1000499f
mov byte [ebp - 4], 2
cmp dword [esi + 0x1d4], edi
je 0x1002ab41
lea eax, [esi + 0x1cc]
cmp dword [eax], edi
je 0x1002ab2b
mov eax, dword [eax]
jmp 0x1002ab2e
add eax, 4
lea ecx, [ebp + 0x18]
push ecx
lea ecx, [ebp + 0x24]
push ecx
push eax
call fcn.10002f3c
add esp, 0xc
jmp 0x1002ab65
lea eax, [esi + 0xa4]
cmp dword [eax], edi
je 0x1002ab4f
mov eax, dword [eax]
jmp 0x1002ab52
add eax, 4
lea ecx, [ebp + 0x18]
push ecx
lea ecx, [ebp + 0x24]
push ecx
push eax
mov ecx, 0x1006a478
call fcn.1002a256
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 3
cmp dword [esi + 0xc4], edi
je 0x1002ab8e
lea eax, [esi + 0xbc]
cmp dword [eax], edi
je 0x1002ab82
mov eax, dword [eax]
jmp 0x1002ab85
add eax, 4
push eax
lea ecx, [ebp - 0x4c]
call fcn.1000528d
mov dword [ebp - 0x54], edi
mov byte [ebp - 4], 4
cmp dword [ebp + 0x2c], edi
je 0x1002abad
mov eax, dword [ebp + 0x24]
cmp eax, edi
jne 0x1002aba4
lea eax, [ebp + 0x28]
push eax
lea ecx, [ebp - 0x54]
call fcn.1000528d
mov dword [ebp - 0x44], edi
mov byte [ebp - 4], 5
cmp dword [ebp + 0x20], edi
je 0x1002abcc
mov eax, dword [ebp + 0x18]
cmp eax, edi
jne 0x1002abc3
lea eax, [ebp + 0x1c]
push eax
lea ecx, [ebp - 0x44]
call fcn.1000528d
mov dword [ebp - 0x3c], edi
mov byte [ebp - 4], 6
cmp dword [esi + 0xe8], edi
je 0x1002abf5
lea eax, [esi + 0xe0]
cmp dword [eax], edi
je 0x1002abe9
mov eax, dword [eax]
jmp 0x1002abec
add eax, 4
push eax
lea ecx, [ebp - 0x3c]
call fcn.1000528d
mov dword [ebp - 0x58], edi
mov byte [ebp - 4], 7
cmp dword [esi + 0x260], edi
je 0x1002ac1e
lea eax, [esi + 0x258]
cmp dword [eax], edi
je 0x1002ac12
mov eax, dword [eax]
jmp 0x1002ac15
add eax, 4
push eax
lea ecx, [ebp - 0x58]
call fcn.1000528d
mov dword [ebp - 0x18], edi
mov byte [ebp - 4], 8
cmp dword [esi + 0xb8], edi
je 0x1002ac47
lea eax, [esi + 0xb0]
cmp dword [eax], edi
je 0x1002ac3b
mov eax, dword [eax]
jmp 0x1002ac3e
add eax, 4
push eax
lea ecx, [ebp - 0x18]
call fcn.1000528d
mov dword [ebp - 0x1c], edi
mov eax, dword [esi + 0x30]
cmp eax, edi
je 0x1002ac8e
cmp dword [esi + 0x34], edi
je 0x1002ac8e
push edi
push edi
push 0xffffffffffffffff
push eax
push edi
push edi
mov ebx, dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
call ebx
mov dword [ebp + 0x10], eax
cmp eax, edi
je 0x1002ac88
push eax
push edi
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x1002ac88
push dword [ebp + 0x10]
push eax
push 0xffffffffffffffff
push dword [esi + 0x30]
push edi
push edi
call ebx
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 0x9c], edi
lea eax, [esi + 0xa4]
cmp dword [eax], edi
je 0x1002aca2
mov eax, dword [eax]
jmp 0x1002aca5
add eax, 4
lea ecx, [ebp - 0x9c]
push ecx
lea ecx, [ebp - 0xac]
push ecx
push dword [ebp - 0x28]
push eax
call fcn.100204f5
add esp, 0x10
mov ecx, dword [ebp - 0x24]
cmp dword [ebp - 0xac], edi
je 0x1002acd0
mov dword [ecx], 2
mov dword [ebp - 0x64], edi
cmp eax, edi
je 0x1002b94d
cmp dword [ebp - 0x9c], edi
je 0x1002ad19
mov eax, dword [ebp + 0x4c]
or eax, dword [ebp + 0x50]
je 0x1002ad19
cmp dword [ebp + 0x50], edi
jg 0x1002ad19
jl 0x1002acfd
mov eax, dword [ebp - 0x9c]
cmp dword [ebp + 0x4c], eax
jae 0x1002ad19
cmp dword [ebp - 0x5c], edi
jne 0x1002ad19
cmp dword [ebp - 0x40], edi
jne 0x1002ad19
cmp dword [ebp + 4], edi
jne 0x1002ad19
mov dword [ecx], 2
mov dword [ebp - 0x64], 1
mov dword [ecx], 2
mov dword [ebp - 0x60], edi
cmp dword [esi + 0x104], edi
je 0x1002ad33
mov dword [ebp - 0x60], 3
jmp 0x1002ad42
cmp dword [esi + 0x108], edi
je 0x1002ad42
mov dword [ebp - 0x60], 4
lea ecx, [ebp - 0x80]
call fcn.10005ad2
mov byte [ebp - 4], 9
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x78], 1
mov byte [ebp - 4], 0xa
cmp dword [esi + 0x1c0], edi
je 0x1002ad88
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x80]
push eax
push dword [esi + 0x1a4]
mov ecx, 0x100698a4
call fcn.10001ccc
mov dword [ebp - 0x78], eax
jmp 0x1002adbf
mov dword [ebp + 0x10], edi
mov byte [ebp - 4], 0xb
push edi
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp + 0x10]
push eax
push dword [esi + 0x1a4]
push dword [esi + 0x78]
mov ecx, 0x100698a4
call fcn.10002429
mov dword [ebp - 0x78], eax
mov byte [ebp - 4], 0xa
push dword [ebp + 0x10]
call ebx
mov dword [ebp - 4], 9
jmp 0x1002add8
xor ebx, ebx
mov edi, dword [ebp - 0x28]
cmp dword [esi + 0x1c0], ebx
je 0x1002ade8
mov dword [ebp - 0x78], ebx
cmp dword [ebp - 0x78], ebx
jne 0x1002b15b
mov dword [ebp - 0x48], 1
push 0x10056588
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10056580
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10057454
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10056578
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10056570
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10056568
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
je 0x1002ae6f
push 0x10056560
push edi
call fcn.10038ffd
pop ecx
pop ecx
test eax, eax
jne 0x1002ae76
mov dword [ebp - 0x48], 2
xor eax, eax
cmp dword [ebp - 0x2c], ebx
sete al
mov dword [ebp], eax
xor edi, edi
inc edi
cmp dword [ebp + 0x48], ebx
je 0x1002ae8f
mov dword [esi + 0x26c], edi
cmp dword [esi + 0x1a0], ebx
je 0x1002aea3
cmp dword [ebp - 0x34], edi
jne 0x1002aea3
mov dword [ebp - 0x34], 0xfffffffe
push 0x358
call fcn.10038d8f
pop ecx
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 0xd
cmp eax, ebx
je 0x1002b061
cmp dword [ebp - 0x34], 0xfffffffe
jle 0x1002aed1
mov eax, dword [esi + 0x98]
mov dword [ebp - 0x50], eax
jmp 0x1002aed4
mov dword [ebp - 0x50], ebx
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1002aee6
lea ecx, [ebp - 0x18]
jmp 0x1002aef3
mov dword [ebp - 0x74], ebx
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xe
mov dword [ebp + 0x14], edi
cmp dword [esi + 0x260], ebx
je 0x1002af00
lea edx, [ebp - 0x58]
jmp 0x1002af11
mov dword [ebp - 0x7c], ebx
lea edx, [ebp - 0x7c]
mov dword [ebp - 4], 0xf
or dword [ebp + 0x14], 2
cmp dword [esi + 0xe8], ebx
je 0x1002af1e
lea edi, [ebp - 0x3c]
jmp 0x1002af2f
mov dword [ebp - 0x6c], ebx
lea edi, [ebp - 0x6c]
mov dword [ebp - 4], 0x10
or dword [ebp + 0x14], 4
cmp dword [ebp + 0x20], ebx
je 0x1002af39
lea ebx, [ebp - 0x44]
jmp 0x1002af51
and dword [ebp - 0x88], 0
lea ebx, [ebp - 0x88]
mov dword [ebp - 4], 0x11
or dword [ebp + 0x14], 8
cmp dword [ebp + 0x2c], 0
je 0x1002af5f
lea eax, [ebp - 0x54]
mov dword [ebp + 0x10], eax
jmp 0x1002af7a
and dword [ebp - 0xa0], 0
lea eax, [ebp - 0xa0]
mov dword [ebp + 0x10], eax
mov dword [ebp - 4], 0x12
or dword [ebp + 0x14], 0x10
cmp dword [esi + 0xc4], 0
je 0x1002af8b
lea eax, [ebp - 0x4c]
mov dword [ebp + 0xc], eax
jmp 0x1002afa6
and dword [ebp - 0xa4], 0
lea eax, [ebp - 0xa4]
mov dword [ebp + 0xc], eax
mov dword [ebp - 4], 0x13
or dword [ebp + 0x14], 0x20
mov eax, dword [esi + 0x94]
mov ecx, dword [ecx]
mov edx, dword [edx]
mov edi, dword [edi]
mov ebx, dword [ebx]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
mov dword [ebp - 0x70], ebx
mov ebx, dword [ebp + 0xc]
mov ebx, dword [ebx]
mov dword [ebp - 0x68], ebx
push dword [ebp - 0x64]
push dword [ebp + 0x7c]
push dword [ebp + 4]
push dword [ebp + 0x70]
push dword [ebp - 0x5c]
push dword [ebp - 0x40]
push dword [ebp - 0x90]
push dword [ebp + 0x60]
push dword [ebp - 0x98]
push dword [ebp - 0x94]
push dword [ebp - 0x8c]
push dword [ebp - 0x60]
push dword [ebp + 0x50]
push dword [ebp + 0x4c]
push dword [ebp - 0x48]
push dword [ebp]
push dword [esi + 0x44]
push dword [esi + 0xa0]
push dword [esi + 0x9c]
push dword [ebp - 0x50]
push eax
push dword [esi + 0x90]
push dword [ebp - 0x28]
push ecx
push edx
push edi
push dword [ebp - 0x20]
push dword [ebp - 0x70]
push dword [ebp - 0x1c]
push ebx
push dword [ebp - 0x38]
push dword [ebp - 0x30]
push dword [ebp - 0x2c]
push dword [ebp - 0x34]
push dword [ebp - 0x80]
push dword [esi + 0x1b4]
push dword [esi + 0x1c0]
push dword [esi + 0x1a4]
push dword [esi + 0x78]
mov ecx, dword [ebp - 0x84]
call fcn.1000f0d0
mov edi, eax
xor ebx, ebx
jmp 0x1002b063
xor edi, edi
mov dword [ebp - 4], 0x18
test byte [ebp + 0x14], 0x20
je 0x1002b080
and dword [ebp + 0x14], 0xffffffdf
push dword [ebp - 0xa4]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0x17
test byte [ebp + 0x14], 0x10
je 0x1002b09d
and dword [ebp + 0x14], 0xffffffef
push dword [ebp - 0xa0]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0x16
test byte [ebp + 0x14], 8
je 0x1002b0ba
and dword [ebp + 0x14], 0xfffffff7
push dword [ebp - 0x88]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0x15
test byte [ebp + 0x14], 4
je 0x1002b0d4
and dword [ebp + 0x14], 0xfffffffb
push dword [ebp - 0x6c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 0x14
test byte [ebp + 0x14], 2
je 0x1002b0ee
and dword [ebp + 0x14], 0xfffffffd
push dword [ebp - 0x7c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov dword [ebp - 4], 9
test byte [ebp + 0x14], 1
je 0x1002b108
and dword [ebp + 0x14], 0xfffffffe
push dword [ebp - 0x74]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp edi, ebx
je 0x1002b145
cmp dword [edi + 0x40], ebx
jne 0x1002b11b
cmp dword [edi + 0x10], ebx
jne 0x1002b11b
cmp dword [edi + 0x14], ebx
je 0x1002b137
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
cmp dword [edi + 0x10], ebx
je 0x1002b12e
mov eax, dword [edi + 0x10]
jmp 0x1002b131
mov eax, dword [edi + 0x14]
mov dword [esi + 0x1b0], eax
cmp dword [edi + 0x10], ebx
jne 0x1002b145
mov eax, dword [edi]
push 1
mov ecx, edi
call dword [eax + 0x18]
cmp dword [ebp - 0x2c], ebx
je 0x1002b939
push dword [ebp - 0x2c]
call fcn.10037fd1
jmp 0x1002b938
cmp dword [esi + 0x1a0], ebx
je 0x1002b4b6
push dword [esi + 0x1a4]
mov ecx, 0x100698a4
call fcn.10001c95
mov dword [ebp], eax
cmp eax, ebx
je 0x1002b939
push 0x88
call fcn.10038d8f
pop ecx
mov dword [ebp - 0x20], eax
mov byte [ebp - 4], 0x1a
cmp eax, ebx
je 0x1002b1a3
mov ecx, eax
call fcn.10028040
mov edi, eax
jmp 0x1002b1a5
xor edi, edi
mov byte [ebp - 4], 9
mov dword [ebp - 0xb0], edi
cmp edi, ebx
je 0x1002b939
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [ebp + 0xc], eax
cmp eax, ebx
je 0x1002b939
mov dword [edi + 0x7c], eax
push dword [ebp - 0x30]
mov ecx, edi
call fcn.10001f52
mov eax, dword [esi + 0x1a4]
mov dword [edi + 0x48], eax
push dword [ebp - 0x38]
lea ecx, [edi + 4]
call fcn.10001f52
cmp dword [esi + 0xc4], ebx
je 0x1002b1fb
lea eax, [ebp - 0x4c]
jmp 0x1002b20c
mov dword [ebp - 0x50], ebx
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 0x1b
mov dword [ebp + 0x14], 0x40
push eax
lea ecx, [edi + 8]
call fcn.100023b7
mov dword [ebp - 4], 9
test byte [ebp + 0x14], 0x40
je 0x1002b22f
and dword [ebp + 0x14], 0xffffffbf
push dword [ebp - 0x50]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x1c]
lea ecx, [edi + 0xc]
call fcn.10001f52
cmp dword [ebp + 0x2c], ebx
je 0x1002b244
lea eax, [ebp - 0x54]
jmp 0x1002b255
mov dword [ebp - 0x48], ebx
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x1c
or dword [ebp + 0x14], 0x80
push eax
lea ecx, [edi + 0x10]
call fcn.100023b7
mov dword [ebp - 4], 9
test byte [ebp + 0x14], 0x80
je 0x1002b27b
and dword [ebp + 0x14], 0xffffff7f
push dword [ebp - 0x48]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp + 0x20], ebx
je 0x1002b285
lea eax, [ebp - 0x44]
jmp 0x1002b296
mov dword [ebp - 0x40], ebx
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
or dword [ebp + 0x14], 0x100
push eax
lea ecx, [edi + 0x14]
call fcn.100023b7
mov dword [ebp - 4], 9
test dword [ebp + 0x14], 0x100
je 0x1002b2bf
and dword [ebp + 0x14], 0xfffffeff
push dword [ebp - 0x40]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 0xe8], ebx
je 0x1002b2cc
lea eax, [ebp - 0x3c]
jmp 0x1002b2dd
mov dword [ebp - 0x5c], ebx
lea eax, [ebp - 0x5c]
mov byte [ebp - 4], 0x1e
or dword [ebp + 0x14], 0x200
push eax
lea ecx, [edi + 0x18]
call fcn.100023b7
mov dword [ebp - 4], 9
test dword [ebp + 0x14], 0x200
je 0x1002b306
and dword [ebp + 0x14], 0xfffffdff
push dword [ebp - 0x5c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 0x260], ebx
je 0x1002b313
lea eax, [ebp - 0x58]
jmp 0x1002b324
mov dword [ebp - 0x38], ebx
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1f
or dword [ebp + 0x14], 0x400
push eax
lea ecx, [edi + 0x1c]
call fcn.100023b7
mov dword [ebp - 4], 9
test dword [ebp + 0x14], 0x400
je 0x1002b34d
and dword [ebp + 0x14], 0xfffffbff
push dword [ebp - 0x38]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1002b35f
lea eax, [ebp - 0x18]
jmp 0x1002b370
mov dword [ebp - 0x30], ebx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x20
or dword [ebp + 0x14], 0x800
push eax
lea ecx, [edi + 0x20]
call fcn.100023b7
mov dword [ebp - 4], 9
test dword [ebp + 0x14], 0x800
je 0x1002b399
and dword [ebp + 0x14], 0xfffff7ff
push dword [ebp - 0x30]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x28]
lea ecx, [edi + 0x24]
call fcn.10001f52
mov eax, dword [esi + 0x90]
mov dword [edi + 0x44], eax
lea eax, [esi + 0x94]
push eax
lea ecx, [edi + 0x4c]
call fcn.100023b7
mov eax, dword [esi + 0x98]
mov dword [edi + 0x50], eax
mov eax, dword [esi + 0x9c]
mov dword [edi + 0x54], eax
mov eax, dword [esi + 0xa0]
mov dword [edi + 0x58], eax
mov eax, dword [esi + 0x44]
mov dword [edi + 0x5c], eax
mov dword [edi + 0x60], 1
mov eax, dword [ebp + 0x4c]
mov dword [edi + 0x70], eax
mov eax, dword [ebp + 0x50]
mov dword [edi + 0x74], eax
mov eax, dword [ebp - 0x60]
mov dword [edi + 0x78], eax
push dword [ebp - 0x8c]
lea ecx, [edi + 0x28]
call fcn.10001f52
push dword [ebp - 0x94]
lea ecx, [edi + 0x2c]
call fcn.10001f52
push dword [ebp - 0x98]
lea ecx, [edi + 0x30]
call fcn.10002ef0
mov eax, dword [ebp + 0x60]
mov dword [edi + 0x3c], eax
push dword [ebp - 0x90]
lea ecx, [edi + 0x40]
call fcn.10001f52
mov eax, dword [ebp + 0x7c]
mov dword [edi + 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [edi + 0x68], eax
lea eax, [edi + 0x80]
push eax
call fcn.1003bc5b
push 8
call fcn.10038d8f
pop ecx
pop ecx
cmp eax, ebx
je 0x1002b46a
lea ecx, [esi + 0x1bc]
mov dword [eax], ecx
lea ecx, [esi + 0x1b0]
mov dword [eax + 4], ecx
push edi
push eax
push 0x465
push dword [ebp]
call dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [ebp + 0x48], ebx
je 0x1002b489
mov dword [esi + 0x26c], 1
push 0x7d0
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp dword [esi + 0x1bc], ebx
je 0x1002b4a8
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1002b939
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x7c], eax
xor ecx, ecx
mov eax, dword [0x100698a8]
cmp eax, 1
sete cl
mov dword [ebp - 0x6c], ecx
lea edi, [eax + eax]
mov dword [ebp - 0x74], edi
cmp edi, ebx
jle 0x1002b939
xor ecx, ecx
mov eax, edi
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10037a76
pop ecx
mov dword [ebp + 4], eax
cmp eax, ebx
je 0x1002b939
xor ecx, ecx
mov eax, edi
push 4
pop edx
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.10037a76
pop ecx
mov dword [ebp + 0x10], eax
cmp eax, ebx
jne 0x1002b529
push dword [ebp + 4]
call fcn.10037fd1
pop ecx
mov dword [ebp + 4], ebx
cmp dword [ebp + 4], ebx
je 0x1002b939
mov dword [ebp - 0x14], ebx
mov dword [ebp + 0xc], ebx
mov eax, dword [ebp + 0xc]
cmp eax, dword [0x100698a8]
jge 0x1002b90d
xor cl, cl
xor eax, eax
mov edx, dword [0x100698b0]
cmp eax, dword [ebp - 0x14]
jge 0x1002b570
mov edi, dword [ebp + 0xc]
imul edi, edi, 0x1c
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx + eax*4]
cmp ebx, dword [edi + edx]
je 0x1002b903
inc eax
xor ebx, ebx
jmp 0x1002b551
test cl, cl
jne 0x1002b905
mov eax, dword [ebp - 0x74]
dec eax
cmp dword [ebp - 0x14], eax
jge 0x1002b90d
mov ebx, dword [ebp + 0xc]
imul ebx, ebx, 0x1c
lea ecx, [ebx + edx]
mov eax, dword [ecx + 0x14]
mov dword [ebp - 0x88], eax
test eax, eax
je 0x1002b903
mov edx, dword [ebp - 0x7c]
cmp edx, dword [ecx]
je 0x1002b903
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1002b903
push 0x88
call fcn.10038d8f
pop ecx
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 0x21
test eax, eax
je 0x1002b5dd
mov ecx, eax
call fcn.10028040
mov edi, eax
jmp 0x1002b5df
xor edi, edi
mov byte [ebp - 4], 9
test edi, edi
je 0x1002b903
cmp dword [esi + 0x104], 0
je 0x1002b640
and dword [edi + 0x7c], 0
mov eax, dword [ebp - 0x14]
shl eax, 2
mov ecx, dword [edi + 0x7c]
mov edx, dword [ebp + 4]
mov dword [eax + edx], ecx
mov ecx, dword [0x100698b0]
mov ecx, dword [ebx + ecx]
mov edx, dword [ebp + 0x10]
mov dword [eax + edx], ecx
inc dword [ebp - 0x14]
push dword [ebp - 0x30]
mov ecx, edi
call fcn.10001f52
and dword [edi + 0x48], 0
push dword [ebp - 0x38]
lea ecx, [edi + 4]
call fcn.10001f52
cmp dword [esi + 0xc4], 0
je 0x1002b662
lea eax, [ebp - 0x4c]
jmp 0x1002b67a
xor eax, eax
push eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
mov dword [edi + 0x7c], eax
test eax, eax
jne 0x1002b5f8
push 1
mov ecx, edi
call fcn.100100e4
jmp 0x1002b903
and dword [ebp - 0xa8], 0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x22
or dword [ebp + 0x14], 0x1000
push eax
lea ecx, [edi + 8]
call fcn.100023b7
push 9
pop ebx
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x1000
je 0x1002b6a5
and dword [ebp + 0x14], 0xffffefff
push dword [ebp - 0xa8]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x1c]
lea ecx, [edi + 0xc]
call fcn.10001f52
cmp dword [ebp + 0x2c], 0
je 0x1002b6bb
lea eax, [ebp - 0x54]
jmp 0x1002b6d3
and dword [ebp - 0x84], 0
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0x23
or dword [ebp + 0x14], 0x2000
push eax
lea ecx, [edi + 0x10]
call fcn.100023b7
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x2000
je 0x1002b6fb
and dword [ebp + 0x14], 0xffffdfff
push dword [ebp - 0x84]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp + 0x20], 0
je 0x1002b706
lea eax, [ebp - 0x44]
jmp 0x1002b718
and dword [ebp - 0x68], 0
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x24
or dword [ebp + 0x14], 0x4000
push eax
lea ecx, [edi + 0x14]
call fcn.100023b7
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x4000
je 0x1002b73d
and dword [ebp + 0x14], 0xffffbfff
push dword [ebp - 0x68]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 0xe8], 0
je 0x1002b74b
lea eax, [ebp - 0x3c]
jmp 0x1002b75d
and dword [ebp - 0x70], 0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 0x25
or dword [ebp + 0x14], 0x8000
push eax
lea ecx, [edi + 0x18]
call fcn.100023b7
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x8000
je 0x1002b782
and dword [ebp + 0x14], 0xffff7fff
push dword [ebp - 0x70]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [esi + 0x260], 0
je 0x1002b790
lea eax, [ebp - 0x58]
jmp 0x1002b7a2
and dword [ebp - 0x20], 0
lea eax, [ebp - 0x20]
mov byte [ebp - 4], 0x26
or dword [ebp + 0x14], 0x10000
push eax
lea ecx, [edi + 0x1c]
call fcn.100023b7
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x10000
je 0x1002b7c7
and dword [ebp + 0x14], 0xfffeffff
push dword [ebp - 0x20]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_VariantInit]
test eax, eax
je 0x1002b7d9
lea eax, [ebp - 0x18]
jmp 0x1002b7eb
and dword [ebp], 0
lea eax, [ebp]
mov byte [ebp - 4], 0x27
or dword [ebp + 0x14], 0x20000
push eax
lea ecx, [edi + 0x20]
call fcn.100023b7
mov dword [ebp - 4], ebx
test dword [ebp + 0x14], 0x20000
je 0x1002b810
and dword [ebp + 0x14], 0xfffdffff
push dword [ebp]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
push dword [ebp - 0x28]
lea ecx, [edi + 0x24]
call fcn.10001f52
mov eax, dword [esi + 0x90]
mov dword [edi + 0x44], eax
lea eax, [esi + 0x94]
push eax
lea ecx, [edi + 0x4c]
call fcn.100023b7
mov eax, dword [esi + 0x98]
mov dword [edi + 0x50], eax
mov eax, dword [esi + 0x9c]
mov dword [edi + 0x54], eax
mov eax, dword [esi + 0xa0]
mov dword [edi + 0x58], eax
mov eax, dword [esi + 0x44]
mov dword [edi + 0x5c], eax
mov eax, dword [ebp - 0x6c]
mov dword [edi + 0x60], eax
mov eax, dword [ebp + 0x4c]
mov dword [edi + 0x70], eax
mov eax, dword [ebp + 0x50]
mov dword [edi + 0x74], eax
mov eax, dword [ebp - 0x60]
mov dword [edi + 0x78], eax
push dword [ebp - 0x8c]
lea ecx, [edi + 0x28]
call fcn.10001f52
push dword [ebp - 0x94]
lea ecx, [edi + 0x2c]
call fcn.10001f52
push dword [ebp - 0x98]
lea ecx, [edi + 0x30]
call fcn.10002ef0
mov eax, dword [ebp + 0x60]
mov dword [edi + 0x3c], eax
push dword [ebp - 0x90]
lea ecx, [edi + 0x40]
call fcn.10001f52
mov eax, dword [ebp + 0x7c]
mov dword [edi + 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [edi + 0x68], eax
lea eax, [edi + 0x80]
push eax
call fcn.1003bc5b
push 8
call fcn.10038d8f
pop ecx
pop ecx
test eax, eax
je 0x1002b8e0
lea ecx, [esi + 0x1bc]
mov dword [eax], ecx
lea ecx, [esi + 0x1b0]
mov dword [eax + 4], ecx
push edi
push eax
push 0x465
push dword [ebp - 0x88]
call dword [sym.imp.USER32.dll_PostMessageA]
cmp dword [ebp + 0x48], 0
je 0x1002b903
mov dword [esi + 0x26c], 1
xor ebx, ebx
inc dword [ebp + 0xc]
jmp 0x1002b538
cmp dword [ebp - 0x14], ebx
jle 0x1002b927
cmp dword [esi + 0x104], ebx
je 0x1002b9ae
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
push dword [ebp + 4]
call fcn.10037fd1
push dword [ebp + 0x10]
call fcn.10037fd1
pop ecx
pop ecx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x80]
call fcn.1001e586
xor edi, edi
mov ebx, dword [sym.imp.OLEAUT32.dll_SysStringLen]
cmp dword [ebp - 0x1c], edi
je 0x1002b957
push dword [ebp - 0x1c]
call ebx
mov byte [ebp - 4], 7
push dword [ebp - 0x18]
call ebx
mov byte [ebp - 4], 6
push dword [ebp - 0x58]
call ebx
mov byte [ebp - 4], 5
push dword [ebp - 0x3c]
call ebx
mov byte [ebp - 4], 4
push dword [ebp - 0x44]
call ebx
mov byte [ebp - 4], 3
push dword [ebp - 0x54]
call ebx
mov byte [ebp - 4], 2
push dword [ebp - 0x4c]
call ebx
mov byte [ebp - 4], 1
lea ecx, [ebp + 0x18]
call fcn.10002c1a
mov byte [ebp - 4], 0
lea ecx, [ebp + 0x24]
call fcn.10002c1a
or dword [ebp - 4], 0xffffffff
jmp 0x1002aa53
push 0x7d0
push 1
mov edi, dword [ebp + 4]
push edi
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp dword [esi + 0x1bc], ebx
je 0x1002b9d3
mov eax, dword [ebp - 0x24]
mov dword [eax], 2
xor esi, esi
cmp esi, dword [ebp - 0x14]
jge 0x1002b927
push dword [edi + esi*4]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
inc esi
jmp 0x1002b9d5