Function at 0x1002a5d3
Capabilities:
Enumerate gui resources
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10066601
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x944
push esi
push edi
push 3
lea ecx, [ebp - 0x6ac]
call fcn.100243cd
and dword [ebp - 4], 0
mov dword [ebp - 0x58], 7
mov dword [ebp - 0x114], 0
jmp 0x1002a624
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x1002a646
push dword [ebp - 0x114]
lea ecx, [ebp - 0x6ac]
call fcn.100244e6
mov dword [eax], 1
jmp 0x1002a617
mov dword [ebp - 0x58], 2
jmp 0x1002a656
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1002a67c
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1002a67a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1002a64f
mov dword [ebp - 0x58], 0
jmp 0x1002a68c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1002a6a8
push dword [ebp - 0x58]
lea ecx, [ebp - 0x6ac]
call fcn.100244e6
mov dword [eax], 0xd23b6182
jmp 0x1002a685
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6ac]
call fcn.100244a4
push 3
lea ecx, [ebp - 0x694]
call fcn.100243cd
mov dword [ebp - 4], 1
mov dword [ebp - 0x5c], 7
mov dword [ebp - 0x158], 0
jmp 0x1002a6eb
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 3
jge 0x1002a70d
push dword [ebp - 0x158]
lea ecx, [ebp - 0x694]
call fcn.100244e6
mov dword [eax], 1
jmp 0x1002a6de
mov dword [ebp - 0x5c], 2
jmp 0x1002a71d
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1002a73d
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x1002a73b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1002a716
mov dword [ebp - 0x5c], 0
jmp 0x1002a74d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1002a769
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x694]
call fcn.100244e6
mov dword [eax], 0xd23b6182
jmp 0x1002a746
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x694]
call fcn.100244a4
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x1ac], 0xb4dfecbe
mov dword [ebp - 0x120], 0
jmp 0x1002a7a2
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 1
jge 0x1002a7be
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0xdc], 0x4a8c6a53
jmp 0x1002a795
mov byte [ebp - 0x6f], 0
movzx eax, byte [ebp - 0x6f]
test eax, eax
je 0x1002a7e5
push 0x1a2b
push 0
push 0x2327
push 0
push 0x1a6e
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 0x3c], 0
jmp 0x1002a7f5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1002a94b
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xdc]
neg eax
je 0x1002a8a1
cmp dword [ebp - 0x3c], 0
je 0x1002a832
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xdc]
sub eax, dword [ebp - 0x3c]
je 0x1002a832
mov dword [ebp - 0x374], 1
jmp 0x1002a839
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x374], eax
jge 0x1002a850
mov dword [ebp - 0x490], 1
jmp 0x1002a857
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xdc]
cmp dword [ebp - 0x490], eax
je 0x1002a875
mov dword [ebp - 0x56c], 1
jmp 0x1002a87c
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xdc]
mov dword [ebp - 0x700], eax
cmp dword [ebp - 0x1ac], 0
je 0x1002a8a1
mov dword [ebp - 0x498], 1
jmp 0x1002a8a8
and dword [ebp - 0x498], 0
imul eax, dword [ebp - 0x498], 0xe3f9
cmp eax, dword [ebp - 0x1ac]
jl 0x1002a8c6
mov dword [ebp - 0x4a0], 1
jmp 0x1002a8cd
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x2e58
jg 0x1002a8e6
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0xdc], 0
je 0x1002a8f8
cmp dword [ebp - 0x3c], 0
je 0x1002a8f8
mov dword [ebp - 0x4a8], 1
jmp 0x1002a8ff
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0
jg 0x1002a914
mov dword [ebp - 0x4b0], 1
jmp 0x1002a91b
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0x836ccb03
jne 0x1002a933
mov dword [ebp - 0x4b8], 1
jmp 0x1002a93a
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x1ac], eax
jmp 0x1002a7ee
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x1d4], 0xb4dfecbe
mov dword [ebp - 0x178], 0
jmp 0x1002a975
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jge 0x1002a991
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0xe8], 0x4a8c6a53
jmp 0x1002a968
mov byte [ebp - 0x78], 0
movzx eax, byte [ebp - 0x78]
test eax, eax
je 0x1002a9b8
push 0x1a2b
push 0
push 0x2327
push 0
push 0x1a6e
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
mov dword [ebp - 0x584], 0x1707
cmp dword [ebp - 0x584], 0x1243
jge 0x1002ab87
lea eax, [ebp - 0xc4]
push eax
lea eax, [ebp - 0xcc]
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0xd8]
push eax
lea eax, [ebp - 0xbc]
push eax
push 0x100079cc
call fcn.1004e57b
add esp, 0x1c
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x84]
jne 0x1002aa25
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0xcc]
je 0x1002aa41
mov eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x8c]
jne 0x1002aa51
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0xc4]
jne 0x1002aa51
push 0x100077e8
call fcn.1004f141
pop ecx
jmp 0x1002ab87
push dword [ebp - 0xc4]
push dword [ebp - 0x8c]
push dword [ebp - 0xd8]
push dword [ebp - 0x84]
push dword [ebp - 0xbc]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
jne 0x1002aad8
push dword [ebp - 0x8c]
push dword [ebp - 0xc4]
push dword [ebp - 0xd8]
push dword [ebp - 0xcc]
push dword [ebp - 0xbc]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
jne 0x1002aad8
push dword [ebp - 0xd8]
push dword [ebp - 0xc4]
push dword [ebp - 0x8c]
push dword [ebp - 0xcc]
push dword [ebp - 0x84]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
je 0x1002aae8
push 0x100079e4
call fcn.1004f141
pop ecx
jmp 0x1002ab87
push dword [ebp - 0xcc]
push dword [ebp - 0x84]
push dword [ebp - 0xbc]
push dword [ebp - 0x8c]
push dword [ebp - 0xd8]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
jne 0x1002ab6f
push dword [ebp - 0x84]
push dword [ebp - 0xcc]
push dword [ebp - 0xbc]
push dword [ebp - 0xc4]
push dword [ebp - 0xd8]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
jne 0x1002ab6f
push dword [ebp - 0xbc]
push dword [ebp - 0xcc]
push dword [ebp - 0x84]
push dword [ebp - 0xc4]
push dword [ebp - 0x8c]
call fcn.110dc035
add esp, 0x14
movzx eax, al
test eax, eax
je 0x1002ab7c
push 0x100079e4
call fcn.1004f141
pop ecx
jmp 0x1002ab87
push 0x100079e8
call fcn.1004f141
pop ecx
mov dword [ebp - 0x38], 0
jmp 0x1002ab97
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x1002aced
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xe8]
neg eax
je 0x1002ac43
cmp dword [ebp - 0x38], 0
je 0x1002abd4
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xe8]
sub eax, dword [ebp - 0x38]
je 0x1002abd4
mov dword [ebp - 0x420], 1
jmp 0x1002abdb
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x420], eax
jge 0x1002abf2
mov dword [ebp - 0x220], 1
jmp 0x1002abf9
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x220], eax
je 0x1002ac17
mov dword [ebp - 0x58c], 1
jmp 0x1002ac1e
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x718], eax
cmp dword [ebp - 0x1d4], 0
je 0x1002ac43
mov dword [ebp - 0x428], 1
jmp 0x1002ac4a
and dword [ebp - 0x428], 0
imul eax, dword [ebp - 0x428], 0xe3f9
cmp eax, dword [ebp - 0x1d4]
jl 0x1002ac68
mov dword [ebp - 0x228], 1
jmp 0x1002ac6f
and dword [ebp - 0x228], 0
cmp dword [ebp - 0x228], 0x2e58
jg 0x1002ac88
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xe8], 0
je 0x1002ac9a
cmp dword [ebp - 0x38], 0
je 0x1002ac9a
mov dword [ebp - 0x430], 1
jmp 0x1002aca1
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0
jg 0x1002acb6
mov dword [ebp - 0x230], 1
jmp 0x1002acbd
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0x836ccb03
jne 0x1002acd5
mov dword [ebp - 0x438], 1
jmp 0x1002acdc
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x1d4], eax
jmp 0x1002ab90
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0x128], 0
jmp 0x1002ad17
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jge 0x1002ad33
mov eax, dword [ebp - 0x128]
mov dword [ebp + eax*4 - 0xf8], 0x8206
jmp 0x1002ad0a
mov dword [ebp - 0x2c], 0
jmp 0x1002ad43
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1002aed6
mov dword [ebp - 0x160], 0
jmp 0x1002ad66
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x1002ad82
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x734], 6
jmp 0x1002ad59
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xf8]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0xf8], 0xe939
jle 0x1002adae
mov dword [ebp - 0x238], 1
jmp 0x1002adb5
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x238], eax
jg 0x1002adcc
mov dword [ebp - 0x440], 1
jmp 0x1002add3
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 3
jg 0x1002ade8
mov dword [ebp - 0x240], 1
jmp 0x1002adef
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp dword [ebp - 0x240], eax
jl 0x1002ae0d
mov dword [ebp - 0x448], 1
jmp 0x1002ae14
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
neg eax
mov dword [ebp - 0x248], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x248]
mov dword [ebp + eax - 0x734], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xf8]
cmp dword [ebp - 0x248], eax
je 0x1002ae53
mov dword [ebp - 0x450], 1
jmp 0x1002ae5a
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x450]
je 0x1002ae71
mov dword [ebp - 0x250], 1
jmp 0x1002ae78
and dword [ebp - 0x250], 0
cmp dword [ebp - 0x250], 0xfc6088b9
jne 0x1002ae90
mov dword [ebp - 0x458], 1
jmp 0x1002ae97
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
add eax, 8
je 0x1002aebe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0
je 0x1002aebe
mov dword [ebp - 0x258], 1
jmp 0x1002aec5
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xf0], eax
jmp 0x1002ad3c
mov dword [ebp - 0x2c], 0
jmp 0x1002aee6
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffff3
jge 0x1002b265
mov dword [ebp - 0x468], 0x2dc6d0f0
mov dword [ebp - 0xf0], 0
jmp 0x1002af13
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xc
jle 0x1002b252
push 4
lea ecx, [ebp - 0x55c]
call fcn.100243cd
mov dword [ebp - 4], 2
mov dword [ebp - 0x594], 0x24cc
cmp dword [ebp - 0x594], 0xfbc
jge 0x1002b15f
lea eax, [ebp - 0x460]
push eax
push 0x10007748
call fcn.1004e57b
pop ecx
pop ecx
xorpd xmm0, xmm0
movlpd qword [ebp - 0xb4], xmm0
and dword [ebp - 0xe0], 0
jmp 0x1002af83
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x460]
jge 0x1002afd3
mov eax, dword [ebp - 0xe0]
lea eax, [eax*4 + 0x10e13528]
push eax
push 0x10007748
call fcn.1004e57b
pop ecx
pop ecx
mov eax, dword [ebp - 0xe0]
mov eax, dword [eax*4 + 0x10e13528]
cdq
add eax, dword [ebp - 0xb4]
adc edx, dword [ebp - 0xb0]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
jmp 0x1002af76
push 0
push 3
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
call fcn.10065690
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x570], edx
mov eax, dword [ebp - 0x574]
or eax, dword [ebp - 0x570]
je 0x1002b012
push 0x100077e4
call fcn.1004f141
pop ecx
jmp 0x1002b15f
push 0
push 3
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
call fcn.100655e0
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], edx
xorpd xmm0, xmm0
movlpd qword [ebp - 0x19c], xmm0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x210], xmm0
xorpd xmm0, xmm0
movlpd qword [ebp - 0x208], xmm0
and dword [ebp - 0x130], 0
jmp 0x1002b06d
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x460]
dec eax
cmp dword [ebp - 0x130], eax
jge 0x1002b146
mov eax, dword [ebp - 0x130]
mov eax, dword [eax*4 + 0x10e13528]
cdq
add eax, dword [ebp - 0x19c]
adc edx, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x198], edx
push 0
push 2
push dword [ebp - 0xb0]
push dword [ebp - 0xb4]
call fcn.100529a0
mov dword [ebp - 0x5b0], eax
mov dword [ebp - 0x5ac], edx
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x5b0]
jne 0x1002b107
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x5ac]
jne 0x1002b107
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x20c]
adc ecx, dword [ebp - 0x204]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0xb4]
jne 0x1002b141
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0xb0]
jne 0x1002b141
mov eax, dword [ebp - 0x208]
add eax, 1
mov ecx, dword [ebp - 0x204]
adc ecx, 0
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
jmp 0x1002b060
push dword [ebp - 0x20c]
push dword [ebp - 0x210]
push 0x10007780
call fcn.1004eb95
add esp, 0xc
mov dword [ebp - 0x188], 0
jmp 0x1002b178
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 4
jge 0x1002b19a
push dword [ebp - 0x188]
lea ecx, [ebp - 0x55c]
call fcn.100244e6
mov dword [eax], 0xfffffffa
jmp 0x1002b16b
push 0
lea ecx, [ebp - 0x55c]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002b1d0
push 0
lea ecx, [ebp - 0x55c]
call fcn.100244e6
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x260]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x55c]
call fcn.100244e6
cmp dword [eax], 0
jl 0x1002b1f6
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1002b1f4
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x1002b1ac
cmp dword [ebp - 0x468], 0
je 0x1002b225
mov dword [ebp - 0x59c], 0x4151
cmp dword [ebp - 0x59c], 0
je 0x1002b223
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55c]
call fcn.100244a4
jmp 0x1002b252
jmp 0x1002b23e
mov byte [ebp - 0x7a], 0
movzx eax, byte [ebp - 0x7a]
test eax, eax
je 0x1002b23e
push 0
push 0x25a0
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x55c]
call fcn.100244a4
jmp 0x1002af06
cmp dword [ebp - 0x468], 0
je 0x1002b260
jmp 0x1002aedf
jmp 0x1002aedf
mov dword [ebp - 0x168], 2
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5e0], 0xfffffffb
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5d0], 0xe4a6f444
mov dword [ebp - 0x5c8], 0xacd7d393
mov dword [ebp - 0x1b4], 0x1b6e
mov dword [ebp - 0x138], 0
jmp 0x1002b2c1
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x1002b2dd
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0x62c], 0xfffffffe
jmp 0x1002b2b4
mov dword [ebp - 0x168], 6
jmp 0x1002b2f6
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xffffffe8
jge 0x1002b48c
mov dword [ebp - 0x5b8], 0x51ad386c
mov dword [ebp - 0x268], 0xfffffffb
mov dword [ebp - 0x720], 0xd0fa5166
mov dword [ebp - 0x660], 0xa57b5bf2
mov dword [ebp - 0x65c], 0xa57b5bf2
mov dword [ebp - 0x658], 0xa57b5bf2
mov dword [ebp - 0x654], 0xa57b5bf2
lea ecx, [ebp - 0x1d5]
call fcn.100244fb
push eax
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x660]
push eax
lea ecx, [ebp - 0x890]
call fcn.100244fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x858]
call fcn.1002447e
mov dword [ebp - 4], 3
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x1002b444
mov dword [ebp - 0x76c], 0xfffffffc
mov dword [ebp - 0x728], 0x849b76ee
mov dword [ebp - 0x774], 2
mov dword [ebp - 0x788], 0xfffffffe
push 3
lea ecx, [ebp - 0x740]
call fcn.100243cd
mov byte [ebp - 4], 4
mov dword [ebp - 0x5c0], 0x1b6f
cmp dword [ebp - 0x5c0], 0x9fe
mov dword [ebp - 0x140], 0
jmp 0x1002b404
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x1002b426
push dword [ebp - 0x140]
lea ecx, [ebp - 0x740]
call fcn.100244e6
mov dword [eax], 9
jmp 0x1002b3f7
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x740]
call fcn.100244a4
jmp 0x1002b478
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1002b458
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1002b478
push 0
push 0x20cc
push 0
push 0xb48
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x858]
call fcn.100244a4
jmp 0x1002b2e9
mov dword [ebp - 0x60], 0
jmp 0x1002b49c
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jg 0x1002b5b8
mov eax, dword [ebp - 0x5c8]
cmp dword [ebp - 0x5d0], eax
jle 0x1002b4c0
mov dword [ebp - 0x480], 1
jmp 0x1002b4c7
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x5d8], 0x372585fa
jne 0x1002b4df
mov dword [ebp - 0x470], 1
jmp 0x1002b4e6
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x5e0]
cmp dword [ebp - 0x470], eax
jge 0x1002b500
mov dword [ebp - 0x270], 1
jmp 0x1002b507
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x62c]
sub eax, dword [ebp - 0x270]
cmp eax, 0x1971
jne 0x1002b52a
mov dword [ebp - 0x478], 1
jmp 0x1002b531
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x62c]
cmp dword [ebp - 0x478], eax
jne 0x1002b54f
mov dword [ebp - 0x278], 1
jmp 0x1002b556
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x278], eax
jle 0x1002b570
mov dword [ebp - 0x488], 1
jmp 0x1002b577
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x480]
cmp eax, dword [ebp - 0x488]
jne 0x1002b591
mov dword [ebp - 0x284], 1
jmp 0x1002b598
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x62c]
imul eax, dword [ebp - 0x284]
mov ecx, dword [ebp - 0x60]
mov dword [ebp + ecx*4 - 0x62c], eax
jmp 0x1002b495
mov dword [ebp - 0xb8], 0xfffffff9
mov dword [ebp - 0x5f8], 0
mov dword [ebp - 0xb8], 0xfffffff1
jmp 0x1002b5e5
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x17
je 0x1002b8d9
mov dword [ebp - 0xd4], 0xd444182b
mov dword [ebp - 0x94], 4
mov dword [ebp - 0xd4], 0xfffffffd
jmp 0x1002b61f
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 5
jg 0x1002b8d4
mov dword [ebp - 0x530], 0xffffffff
mov dword [ebp - 0x52c], 0xffffffff
mov dword [ebp - 0x528], 0xffffffff
mov dword [ebp - 0x524], 0xffffffff
push 3
lea ecx, [ebp - 0x6c4]
call fcn.100243cd
mov dword [ebp - 4], 5
mov dword [ebp - 0x180], 0
jmp 0x1002b681
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x1002b6a3
push dword [ebp - 0x180]
lea ecx, [ebp - 0x6c4]
call fcn.100244e6
mov dword [eax], 5
jmp 0x1002b674
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x530], 0x14
jmp 0x1002b6d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x530]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x530], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x530], 0xffffffe3
jg 0x1002b844
mov dword [ebp - 0x5e8], 1
mov dword [ebp - 0x3cc], 0xdfa0148
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x7cc], eax
mov eax, 0x12168
test eax, eax
jne 0x1002b71e
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1002b71e
and dword [ebp - 0x3d0], 0
jmp 0x1002b728
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x3d0]
jne 0x1002b742
mov dword [ebp - 0x28c], 1
jmp 0x1002b749
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0x28c]
jge 0x1002b763
mov dword [ebp - 0x3c4], 1
jmp 0x1002b76a
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
add eax, 0x137f0de7
cmp eax, 0xfdd8
jl 0x1002b788
mov dword [ebp - 0x294], 1
jmp 0x1002b78f
and dword [ebp - 0x294], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x530]
cmp dword [ebp - 0x294], eax
jle 0x1002b7b0
mov dword [ebp - 0x454], 1
jmp 0x1002b7b7
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x5e8]
cmp dword [ebp - 0x454], eax
jg 0x1002b7d1
mov dword [ebp - 0x29c], 1
jmp 0x1002b7d8
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x94], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x530]
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x94], 0x18
jmp 0x1002b810
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xfffffff7
jge 0x1002b83f
mov byte [ebp - 0x7c], 0
movzx eax, byte [ebp - 0x7c]
test eax, eax
je 0x1002b832
push 0
push 0x64a
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
cmp dword [ebp - 0x3cc], 0
je 0x1002b83d
jmp 0x1002b803
jmp 0x1002b803
jmp 0x1002b6b6
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x530]
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0x94], eax
mov esi, dword [ebp - 0x94]
push 0
lea ecx, [ebp - 0x6c4]
call fcn.100244e6
add esi, dword [eax]
je 0x1002b890
mov eax, 0x47e29ac9
test eax, eax
je 0x1002b890
mov dword [ebp - 0x2a4], 1
jmp 0x1002b897
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 0x14b4322e
jge 0x1002b8af
mov dword [ebp - 0x5f0], 1
jmp 0x1002b8b6
and dword [ebp - 0x5f0], 0
mov dword [ebp - 0x5f8], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c4]
call fcn.100244a4
jmp 0x1002b612
jmp 0x1002b5d8
mov dword [ebp - 0x28], 2
mov dword [ebp - 0xec], 1
mov dword [ebp - 0x148], 0
jmp 0x1002b903
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x1002b91f
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0xe4], 0x8206
jmp 0x1002b8f6
mov dword [ebp - 0x28], 0
jmp 0x1002b92f
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002bac2
mov dword [ebp - 0x170], 0
jmp 0x1002b952
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x1002b96e
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x780], 6
jmp 0x1002b945
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe4]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0xe4], 0xe939
jle 0x1002b99a
mov dword [ebp - 0x49c], 1
jmp 0x1002b9a1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x49c], eax
jg 0x1002b9b8
mov dword [ebp - 0x2ac], 1
jmp 0x1002b9bf
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 3
jg 0x1002b9d4
mov dword [ebp - 0x3d4], 1
jmp 0x1002b9db
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp dword [ebp - 0x3d4], eax
jl 0x1002b9f9
mov dword [ebp - 0x2b4], 1
jmp 0x1002ba00
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
neg eax
mov dword [ebp - 0x45c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x45c]
mov dword [ebp + eax - 0x780], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xe4]
cmp dword [ebp - 0x45c], eax
je 0x1002ba3f
mov dword [ebp - 0x2bc], 1
jmp 0x1002ba46
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2bc]
je 0x1002ba5d
mov dword [ebp - 0x3dc], 1
jmp 0x1002ba64
and dword [ebp - 0x3dc], 0
cmp dword [ebp - 0x3dc], 0xfc6088b9
jne 0x1002ba7c
mov dword [ebp - 0x2c4], 1
jmp 0x1002ba83
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x2c4]
add eax, 8
je 0x1002baaa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x1002baaa
mov dword [ebp - 0x504], 1
jmp 0x1002bab1
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xec], eax
jmp 0x1002b928
mov dword [ebp - 0x28], 0
jmp 0x1002bad2
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff3
jge 0x1002bc26
mov dword [ebp - 0x3e4], 0x2dc6d0f0
mov dword [ebp - 0xec], 0
jmp 0x1002baff
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xc
jle 0x1002bc13
push 4
lea ecx, [ebp - 0x568]
call fcn.100243cd
mov dword [ebp - 4], 6
mov dword [ebp - 0x150], 0
jmp 0x1002bb39
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 4
jge 0x1002bb5b
push dword [ebp - 0x150]
lea ecx, [ebp - 0x568]
call fcn.100244e6
mov dword [eax], 0xfffffffa
jmp 0x1002bb2c
push 0
lea ecx, [ebp - 0x568]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002bb91
push 0
lea ecx, [ebp - 0x568]
call fcn.100244e6
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x568]
call fcn.100244e6
cmp dword [eax], 0
jl 0x1002bbb7
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x1002bbb5
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
jmp 0x1002bb6d
cmp dword [ebp - 0x3e4], 0
je 0x1002bbe6
mov dword [ebp - 0x600], 0x4151
cmp dword [ebp - 0x600], 0
je 0x1002bbe4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x568]
call fcn.100244a4
jmp 0x1002bc13
jmp 0x1002bbff
mov byte [ebp - 0x77], 0
movzx eax, byte [ebp - 0x77]
test eax, eax
je 0x1002bbff
push 0
push 0x25a0
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x568]
call fcn.100244a4
jmp 0x1002baf2
cmp dword [ebp - 0x3e4], 0
je 0x1002bc21
jmp 0x1002bacb
jmp 0x1002bacb
push 1
lea ecx, [ebp - 0x4d0]
call fcn.100243cd
mov dword [ebp - 4], 7
mov dword [ebp - 0x110], 6
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x190], 0
jmp 0x1002bc67
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1002bc89
push dword [ebp - 0x190]
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
mov dword [eax], 0xfffffff7
jmp 0x1002bc5a
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002bcbf
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
cmp dword [eax], 6
jne 0x1002bcde
cmp dword [ebp - 0x110], 0
je 0x1002bcdc
jmp 0x1002bcde
jmp 0x1002bc9b
cmp dword [ebp - 0x464], 0
jne 0x1002bcf3
mov dword [ebp - 0x2dc], 1
jmp 0x1002bcfa
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x464]
cmp dword [ebp - 0x2dc], eax
je 0x1002bd14
mov dword [ebp - 0x618], 1
jmp 0x1002bd1b
and dword [ebp - 0x618], 0
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
imul eax, dword [ebp - 0x110], 0xfff7
test eax, eax
jne 0x1002bd55
cmp dword [ebp - 0x110], 0
jne 0x1002bd55
and dword [ebp - 0x3ec], 0
jmp 0x1002bd5f
mov dword [ebp - 0x3ec], 1
mov esi, dword [ebp - 0x110]
add esi, dword [ebp - 0x3ec]
push 0
lea ecx, [ebp - 0x4d0]
call fcn.100244e6
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4d0]
call fcn.100244a4
mov dword [ebp - 0x124], 2
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5a4], 0xfffffffb
mov dword [ebp - 0x57c], 0
mov dword [ebp - 0x5d4], 0xe4a6f444
mov dword [ebp - 0x60c], 0xacd7d393
mov dword [ebp - 0x1f0], 0x1b6e
mov dword [ebp - 0x11c], 0
jmp 0x1002bde5
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1002be01
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x638], 0xfffffffe
jmp 0x1002bdd8
mov dword [ebp - 0x124], 6
jmp 0x1002be1a
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffe8
jge 0x1002bfa2
mov dword [ebp - 0x620], 0x51ad386c
mov dword [ebp - 0x2e4], 0xfffffffb
mov dword [ebp - 0x778], 0xd0fa5166
mov dword [ebp - 0x688], 0xa57b5bf2
mov dword [ebp - 0x684], 0xa57b5bf2
mov dword [ebp - 0x680], 0xa57b5bf2
mov dword [ebp - 0x67c], 0xa57b5bf2
lea ecx, [ebp - 0x1dd]
call fcn.100244fb
push eax
lea eax, [ebp - 0x678]
push eax
lea eax, [ebp - 0x688]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.100244fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x870]
call fcn.1002447e
mov dword [ebp - 4], 8
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
je 0x1002bf54
mov dword [ebp - 0x7d4], 0xfffffffc
mov dword [ebp - 0x784], 0x849b76ee
mov dword [ebp - 0x7fc], 2
mov dword [ebp - 0x78c], 0xfffffffe
push 3
lea ecx, [ebp - 0x74c]
call fcn.100243cd
mov byte [ebp - 4], 9
mov dword [ebp - 0x12c], 0
jmp 0x1002bf14
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jge 0x1002bf36
push dword [ebp - 0x12c]
lea ecx, [ebp - 0x74c]
call fcn.100244e6
mov dword [eax], 9
jmp 0x1002bf07
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x74c]
call fcn.100244a4
jmp 0x1002bf8e
mov byte [ebp - 0x7b], 0
movzx eax, byte [ebp - 0x7b]
test eax, eax
je 0x1002bf68
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1002bf8e
push 0
push 0x20cc
push 0
push 0xb48
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x870]
call fcn.100244a4
jmp 0x1002be0d
mov dword [ebp - 0x64], 0
jmp 0x1002bfb2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jg 0x1002c0ce
mov eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x5d4], eax
jle 0x1002bfd6
mov dword [ebp - 0x46c], 1
jmp 0x1002bfdd
and dword [ebp - 0x46c], 0
cmp dword [ebp - 0x57c], 0x372585fa
jne 0x1002bff5
mov dword [ebp - 0x4a4], 1
jmp 0x1002bffc
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x5a4]
cmp dword [ebp - 0x4a4], eax
jge 0x1002c016
mov dword [ebp - 0x2ec], 1
jmp 0x1002c01d
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0x638]
sub eax, dword [ebp - 0x2ec]
cmp eax, 0x1971
jne 0x1002c040
mov dword [ebp - 0x3f4], 1
jmp 0x1002c047
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0x638]
cmp dword [ebp - 0x3f4], eax
jne 0x1002c065
mov dword [ebp - 0x2f4], 1
jmp 0x1002c06c
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x2f4], eax
jle 0x1002c086
mov dword [ebp - 0x2fc], 1
jmp 0x1002c08d
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x2fc]
jne 0x1002c0a7
mov dword [ebp - 0x3fc], 1
jmp 0x1002c0ae
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0x638]
imul eax, dword [ebp - 0x3fc]
mov ecx, dword [ebp - 0x64]
mov dword [ebp + ecx*4 - 0x638], eax
jmp 0x1002bfab
movzx eax, byte [0x110d7eb8]
test eax, eax
je 0x1002c0ec
mov esi, 0x1006c610
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1002e7a0
push 2
lea ecx, [ebp - 0x1fc]
call fcn.100243cd
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x5dc], 0x48aa25e9
mov dword [ebp - 0x34], 0
jmp 0x1002c121
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1002c13d
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
mov dword [eax], 0xfffffffb
jmp 0x1002c11a
mov dword [ebp - 0x34], 0
jmp 0x1002c14d
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002c163
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x9c], 4
jmp 0x1002c146
mov dword [ebp - 0x34], 0
jmp 0x1002c173
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002c189
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x840], 0x9c819b53
jmp 0x1002c16c
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
mov dword [eax], 0x11
jmp 0x1002c1c2
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x304]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
cmp dword [eax], 4
jge 0x1002c7be
mov dword [ebp - 0x14], 0xf147909b
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x474], 0x9f7a
mov dword [ebp - 0xf4], 0xffffffff
cmp dword [ebp - 0xf4], 0
jne 0x1002c2f3
mov dword [ebp - 0x6c], 0x796
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x14], eax
je 0x1002c238
mov dword [ebp - 0x4d4], 1
jmp 0x1002c23f
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0xfffa
jbe 0x1002c257
mov dword [ebp - 0x30c], 1
jmp 0x1002c25e
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x593f9bea
jle 0x1002c279
cmp dword [ebp - 0x14], 0
jne 0x1002c279
and dword [ebp - 0x404], 0
jmp 0x1002c283
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x404], eax
jg 0x1002c2b5
cmp dword [ebp - 0x474], 0
je 0x1002c2b5
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002c2b5
mov dword [ebp - 0x314], 1
jmp 0x1002c2bc
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
sub eax, dword [ebp - 0x474]
mov dword [ebp - 0x31c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0x9c], ecx
cmp dword [ebp - 0x31c], 0
jne 0x1002c2f3
and dword [ebp - 0x40c], 0
jmp 0x1002c2fd
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x40c]
jne 0x1002c314
mov dword [ebp - 0x324], 1
jmp 0x1002c31b
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x14]
jge 0x1002c32f
cmp dword [ebp - 0x44], 0
je 0x1002c391
mov dword [ebp - 0x4ac], 0x1b185749
mov dword [ebp - 0x44], 0
jmp 0x1002c349
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jg 0x1002c38c
mov dword [ebp - 0x7dc], 1
mov dword [ebp - 0x79c], 1
mov eax, dword [ebp - 0x4ac]
dec eax
mov dword [ebp - 0x4ac], eax
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1002c38a
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1002c342
jmp 0x1002c5d3
mov dword [ebp - 0x6c], 0
jmp 0x1002c3a1
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe9
je 0x1002c5d3
mov dword [ebp - 0x580], 4
mov dword [ebp - 0x44], 0
jmp 0x1002c3c5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x11
je 0x1002c5ce
mov dword [ebp - 0x134], 0
jmp 0x1002c3e8
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 3
jge 0x1002c404
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x798], 0x2cca
jmp 0x1002c3db
mov dword [ebp - 0x14], 0
jmp 0x1002c414
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x1002c5c9
mov dword [ebp - 0x6f0], 1
push 1
lea ecx, [ebp - 0x7a8]
call fcn.100243cd
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x108], 0
jmp 0x1002c452
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x1002c474
push dword [ebp - 0x108]
lea ecx, [ebp - 0x7a8]
call fcn.100244e6
mov dword [eax], 0x283019c3
jmp 0x1002c445
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x9c], 0x9278a491
jbe 0x1002c490
mov dword [ebp - 0x32c], 1
jmp 0x1002c497
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x32c]
sub ecx, dword [ebp + eax*4 - 0x9c]
cmp ecx, 0xffff
jne 0x1002c4bb
mov dword [ebp - 0x414], 1
jmp 0x1002c4c2
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xfffffffe
jb 0x1002c4e0
cmp dword [ebp - 0x580], 0
je 0x1002c4e0
mov dword [ebp - 0x334], 1
jmp 0x1002c4e7
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x334]
je 0x1002c505
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1002c505
mov dword [ebp - 0x33c], 1
jmp 0x1002c50c
and dword [ebp - 0x33c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x798]
inc eax
mov dword [ebp - 0x47c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x47c]
mov dword [ebp + eax - 0x798], ecx
mov eax, dword [ebp - 0x47c]
dec eax
cmp eax, dword [ebp - 0x33c]
jge 0x1002c55e
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002c55e
mov dword [ebp - 0x41c], 1
jmp 0x1002c565
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x41c], eax
jne 0x1002c586
mov dword [ebp - 0x344], 1
jmp 0x1002c58d
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xfffffffe
jl 0x1002c5a2
mov dword [ebp - 0x4f4], 1
jmp 0x1002c5a9
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xf4], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x7a8]
call fcn.100244a4
jmp 0x1002c40d
jmp 0x1002c3be
jmp 0x1002c39a
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x6f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x34c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x9c], ecx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
mov ecx, dword [ebp - 0x34c]
cmp ecx, dword [eax]
jge 0x1002c625
mov dword [ebp - 0x424], 1
jmp 0x1002c62c
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x6fc], eax
mov eax, 0xa8004c3d
test eax, eax
jne 0x1002c64d
cmp dword [ebp - 0x14], 0
jne 0x1002c64d
and dword [ebp - 0x614], 0
jmp 0x1002c657
mov dword [ebp - 0x614], 1
mov eax, dword [ebp - 0x14]
neg eax
cmp eax, dword [ebp - 0x6c]
jl 0x1002c66d
mov dword [ebp - 0x354], 1
jmp 0x1002c674
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x424]
cmp eax, dword [ebp - 0x354]
jl 0x1002c68e
mov dword [ebp - 0x484], 1
jmp 0x1002c695
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
sub eax, dword [ebp - 0x14]
je 0x1002c6be
push 0
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002c6be
mov dword [ebp - 0x1bc], 1
jmp 0x1002c6c5
and dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1bc]
mov dword [ebp + eax - 0x840], ecx
cmp dword [ebp - 0x1bc], 0xba6c15a2
je 0x1002c6f0
mov dword [ebp - 0x35c], 1
jmp 0x1002c6f7
and dword [ebp - 0x35c], 0
cmp dword [ebp - 0x35c], 2
je 0x1002c70c
mov dword [ebp - 0x42c], 1
jmp 0x1002c713
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 0xffffffff
je 0x1002c728
mov dword [ebp - 0x364], 1
jmp 0x1002c72f
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x364], eax
je 0x1002c746
mov dword [ebp - 0x4b4], 1
jmp 0x1002c74d
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 1
jg 0x1002c762
mov dword [ebp - 0x588], 1
jmp 0x1002c769
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x704], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0x70c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x840]
mov dword [ebp - 0x714], eax
push 0
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
push 1
lea ecx, [ebp - 0x1fc]
call fcn.100244e6
mov eax, dword [eax]
mov dword [ebp - 0x5dc], eax
jmp 0x1002c19e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1fc]
call fcn.100244a4
mov dword [ebp - 0xc8], 0xfffffff9
mov dword [ebp - 0x598], 0
mov dword [ebp - 0xc8], 0xfffffff1
jmp 0x1002c7fa
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x17
je 0x1002caf4
mov dword [ebp - 0xc0], 0xd444182b
mov dword [ebp - 0xa4], 4
mov dword [ebp - 0xc0], 0xfffffffd
jmp 0x1002c834
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 5
jg 0x1002caef
mov dword [ebp - 0x550], 0xffffffff
mov dword [ebp - 0x54c], 0xffffffff
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x544], 0xffffffff
push 3
lea ecx, [ebp - 0x6a0]
call fcn.100243cd
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x13c], 0
jmp 0x1002c896
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 3
jge 0x1002c8b8
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x6a0]
call fcn.100244e6
mov dword [eax], 5
jmp 0x1002c889
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x550], 0x14
jmp 0x1002c8e6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x550], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x550], 0xffffffe3
jg 0x1002ca5f
mov dword [ebp - 0x590], 1
mov dword [ebp - 0x384], 0xdfa0148
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x71c], eax
mov eax, 0x12168
test eax, eax
jne 0x1002c933
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1002c933
and dword [ebp - 0x36c], 0
jmp 0x1002c93d
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x36c]
jne 0x1002c957
mov dword [ebp - 0x434], 1
jmp 0x1002c95e
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x434]
jge 0x1002c978
mov dword [ebp - 0x214], 1
jmp 0x1002c97f
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
add eax, 0x137f0de7
cmp eax, 0xfdd8
jl 0x1002c99d
mov dword [ebp - 0x48c], 1
jmp 0x1002c9a4
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
cmp dword [ebp - 0x48c], eax
jle 0x1002c9c5
mov dword [ebp - 0x37c], 1
jmp 0x1002c9cc
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x590]
cmp dword [ebp - 0x37c], eax
jg 0x1002c9e6
mov dword [ebp - 0x43c], 1
jmp 0x1002c9ed
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0xa4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x384], eax
mov dword [ebp - 0xa4], 0x18
jmp 0x1002ca25
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xfffffff7
jge 0x1002ca5a
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1002ca4d
push 0
push 0x64a
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
cmp dword [ebp - 0x384], 0
je 0x1002ca58
jmp 0x1002ca18
jmp 0x1002ca18
jmp 0x1002c8cb
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x550]
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xa4], eax
mov esi, dword [ebp - 0xa4]
push 0
lea ecx, [ebp - 0x6a0]
call fcn.100244e6
add esi, dword [eax]
je 0x1002caab
mov eax, 0x47e29ac9
test eax, eax
je 0x1002caab
mov dword [ebp - 0x4e4], 1
jmp 0x1002cab2
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x14b4322e
jge 0x1002caca
mov dword [ebp - 0x604], 1
jmp 0x1002cad1
and dword [ebp - 0x604], 0
mov dword [ebp - 0x598], 1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.100244a4
jmp 0x1002c827
jmp 0x1002c7ed
mov dword [ebp - 0x38c], 0xe42a43d9
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0x5e4], 0x9f58382b
push 3
lea ecx, [ebp - 0x6dc]
call fcn.100243cd
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x5a0], 0xa1405524
mov dword [ebp - 0x72c], 0xaac8
mov dword [ebp - 0x50], 0
jmp 0x1002cb4a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002cb60
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x888], 0xc48b1647
jmp 0x1002cb43
mov dword [ebp - 0x50], 0
jmp 0x1002cb70
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1002cb8c
push dword [ebp - 0x50]
lea ecx, [ebp - 0x6dc]
call fcn.100244e6
mov dword [eax], 0x20f746e3
jmp 0x1002cb69
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x80d416db
ja 0x1002cbb0
mov dword [ebp - 0x494], 1
jmp 0x1002cbb7
and dword [ebp - 0x494], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x888], 0xae7b79f6
cmp dword [ebp - 0x5e4], 0xae7b79f6
jl 0x1002cbe0
mov dword [ebp - 0x444], 1
jmp 0x1002cbe7
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x444], eax
jne 0x1002cc01
mov dword [ebp - 0x394], 1
jmp 0x1002cc08
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x394]
sub eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x494]
lea eax, [ecx + eax - 0x7af5af8b]
cmp eax, 0xa2b82c44
jb 0x1002cc34
mov dword [ebp - 0x1c4], 1
jmp 0x1002cc3b
and dword [ebp - 0x1c4], 0
push 1
lea ecx, [ebp - 0x6dc]
call fcn.100244e6
mov ecx, dword [ebp - 0x1c4]
mov dword [eax], ecx
cmp dword [ebp - 0x1c4], 0
jb 0x1002cc65
mov dword [ebp - 0x39c], 1
jmp 0x1002cc6c
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x6718e503
je 0x1002cc84
mov dword [ebp - 0x44c], 1
jmp 0x1002cc8b
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x5a0], eax
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x1002ccd0
push 0x134
push 0
push 0x336
push 0x116a
push 0x1021
push 0
push 0x509
push 0x1812
push 0x20c6
call dword [sym.imp.USER32.dll_DrawIconEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6dc]
call fcn.100244a4
mov dword [ebp - 0x7d0], 0x1006c610
mov dword [ebp - 0x674], 0xbac64a68
mov dword [ebp - 0x670], 0xbac64a68
mov dword [ebp - 0x66c], 0xbac64a68
mov dword [ebp - 0x668], 0xbac64a68
lea ecx, [ebp - 0x19d]
call fcn.100244fb
push eax
lea eax, [ebp - 0x664]
push eax
lea eax, [ebp - 0x674]
push eax
lea ecx, [ebp - 0x898]
call fcn.100244fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4f0]
call fcn.1002447e
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x7d8], 0xfffffffc
mov dword [ebp - 0x2a0], 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002cd97
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3a4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
cmp dword [eax], 0xffffffe6
je 0x1002d0f5
push 3
lea ecx, [ebp - 0x4e0]
call fcn.100243cd
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x48], 0x5043c4ab
mov dword [ebp - 0x144], 0
jmp 0x1002cdde
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jge 0x1002ce00
push dword [ebp - 0x144]
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
mov dword [eax], 0xa3399244
jmp 0x1002cdd1
mov dword [ebp - 0x48], 2
jmp 0x1002ce10
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1002d0e1
mov dword [ebp - 0x540], 0xbd085c9e
mov dword [ebp - 0x53c], 0xbd085c9e
mov dword [ebp - 0x538], 0xbd085c9e
mov dword [ebp - 0x534], 0xbd085c9e
mov dword [ebp - 0xfc], 0xc4a87fce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x540], 2
jmp 0x1002ce7a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x540]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x540], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x540], 0
jl 0x1002cf4d
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
cmp dword [eax], 0
jne 0x1002cece
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
mov esi, eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
imul eax, dword [eax], 9
cmp dword [esi], eax
jne 0x1002cece
and dword [ebp - 0x3bc], 0
jmp 0x1002ced8
mov dword [ebp - 0x3bc], 1
cmp dword [ebp - 0x3bc], 0xfffffffe
je 0x1002ceed
mov dword [ebp - 0x3ac], 1
jmp 0x1002cef4
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0x1f145ba1
jle 0x1002cf0c
mov dword [ebp - 0x3c0], 1
jmp 0x1002cf13
and dword [ebp - 0x3c0], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x540]
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
mov ecx, dword [ebp - 0x3c0]
mov dword [eax], ecx
mov esi, dword [ebp - 0x48]
neg esi
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
mov dword [eax], esi
jmp 0x1002ce5f
mov dword [ebp - 0xfc], 0
jmp 0x1002cf66
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jg 0x1002d0dc
mov eax, 0x4a93
test eax, eax
je 0x1002cf9a
push 1
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002cf9a
mov dword [ebp - 0x27c], 1
jmp 0x1002cfa1
and dword [ebp - 0x27c], 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
mov esi, eax
push 2
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1002cfcf
mov dword [ebp - 0x3b4], 1
jmp 0x1002cfd6
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0x1d976d9
je 0x1002cfee
mov dword [ebp - 0x3c8], 1
jmp 0x1002cff5
and dword [ebp - 0x3c8], 0
push 0
lea ecx, [ebp - 0x4f0]
call fcn.100244e6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3c8]
jle 0x1002d018
mov dword [ebp - 0x280], 1
jmp 0x1002d01f
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x280]
jne 0x1002d039
mov dword [ebp - 0x288], 1
jmp 0x1002d040
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x288], eax
je 0x1002d060
mov eax, 0xe708
test eax, eax
je 0x1002d060
mov dword [ebp - 0x290], 1
jmp 0x1002d067
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp + eax*4 - 0x540]
cmp eax, dword [ebp - 0x290]
jle 0x1002d088
mov dword [ebp - 0x298], 1
jmp 0x1002d08f
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
neg eax
inc eax
cmp eax, 0xac8e
jle 0x1002d0ab
mov dword [ebp - 0x200], 1
jmp 0x1002d0b2
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x53c], ecx
push 0
lea ecx, [ebp - 0x4e0]
call fcn.100244e6
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
jmp 0x1002cf59
jmp 0x1002ce09
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4e0]
call fcn.100244a4
jmp 0x1002cd73
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4f0]
call fcn.100244a4
push 1
lea ecx, [ebp - 0x500]
call fcn.100243cd
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x154], 6
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x14c], 0
jmp 0x1002d152
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jge 0x1002d174
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x500]
call fcn.100244e6
mov dword [eax], 0xfffffff7
jmp 0x1002d145
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002d1aa
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x2a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x2a8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
cmp dword [eax], 6
jne 0x1002d1c9
cmp dword [ebp - 0x154], 0
je 0x1002d1c7
jmp 0x1002d1c9
jmp 0x1002d186
cmp dword [ebp - 0x2b0], 0
jne 0x1002d1de
mov dword [ebp - 0x2b8], 1
jmp 0x1002d1e5
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x2b8], eax
je 0x1002d1ff
mov dword [ebp - 0x608], 1
jmp 0x1002d206
and dword [ebp - 0x608], 0
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
imul eax, dword [ebp - 0x154], 0xfff7
test eax, eax
jne 0x1002d240
cmp dword [ebp - 0x154], 0
jne 0x1002d240
and dword [ebp - 0x2c0], 0
jmp 0x1002d24a
mov dword [ebp - 0x2c0], 1
mov esi, dword [ebp - 0x154]
add esi, dword [ebp - 0x2c0]
push 0
lea ecx, [ebp - 0x500]
call fcn.100244e6
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x500]
call fcn.100244a4
mov dword [ebp - 0x7e0], 0x1006c614
mov dword [ebp - 0x24], 0xf94
mov dword [ebp - 0x18], 0x382bdb97
mov dword [ebp - 0x15c], 0
jmp 0x1002d2a5
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jge 0x1002d2c1
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x864], 0xe075257
jmp 0x1002d298
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x1002d2d8
push 0x1e77
call dword [sym.imp.GDI32.dll_GetStockObject]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x7f0], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x24]
jne 0x1002d2fe
mov dword [ebp - 0x2c8], 1
jmp 0x1002d305
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x18], eax
je 0x1002d323
xor eax, eax
je 0x1002d323
mov dword [ebp - 0x2d0], 1
jmp 0x1002d32a
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2d0], eax
jge 0x1002d341
mov dword [ebp - 0x2d8], 1
jmp 0x1002d348
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2d8]
je 0x1002d433
push 2
lea ecx, [ebp - 0x6b8]
call fcn.100243cd
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x10c], 0
jmp 0x1002d384
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x1002d3a3
push dword [ebp - 0x10c]
lea ecx, [ebp - 0x6b8]
call fcn.100244e6
or dword [eax], 0xffffffff
jmp 0x1002d377
mov dword [ebp - 0x18], 0x1a
jmp 0x1002d3b3
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffb
jg 0x1002d3d5
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1002d3d3
push 0
call dword [sym.imp.USER32.dll_CharUpperW]
jmp 0x1002d3ac
mov dword [ebp - 0x24], 0xd
jmp 0x1002d3e5
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffee
jle 0x1002d422
mov dword [ebp - 0x18], 1
jmp 0x1002d3fb
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1002d418
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6b8]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002d416
jmp 0x1002d418
jmp 0x1002d3f4
cmp dword [ebp - 0x24], 0
je 0x1002d420
jmp 0x1002d422
jmp 0x1002d3de
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b8]
call fcn.100244a4
jmp 0x1002d49a
mov dword [ebp - 0x18], 0xfffffffb
jmp 0x1002d443
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe4
jne 0x1002d49a
mov dword [ebp - 0x24], 2
jmp 0x1002d459
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1002d470
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x864], 0
je 0x1002d46e
jmp 0x1002d470
jmp 0x1002d452
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x1002d498
push 0x9f8
push 0
push 0x216e
push 0x1128
push 0x15c1
call dword [sym.imp.GDI32.dll_ExtFloodFill]
jmp 0x1002d43c
push 2
lea ecx, [ebp - 0x1ec]
call fcn.100243cd
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x5bc], 0x48aa25e9
mov dword [ebp - 0x30], 0
jmp 0x1002d4cf
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1002d4eb
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
mov dword [eax], 0xfffffffb
jmp 0x1002d4c8
mov dword [ebp - 0x30], 0
jmp 0x1002d4fb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1002d511
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xac], 4
jmp 0x1002d4f4
mov dword [ebp - 0x30], 0
jmp 0x1002d521
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x1002d537
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x830], 0x9c819b53
jmp 0x1002d51a
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
mov dword [eax], 0x11
jmp 0x1002d570
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2e0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
cmp dword [eax], 4
jge 0x1002dd8b
mov dword [ebp - 0x10], 0xf147909b
mov dword [ebp - 0x5a8], 0x1fc4
cmp dword [ebp - 0x5a8], 0x45b
jge 0x1002d7b2
push 0x100079ec
lea ecx, [ebp - 0x950]
call fcn.10023de2
mov byte [ebp - 4], 0x13
push 0x100079f4
lea ecx, [ebp - 0x938]
call fcn.10023de2
mov byte [ebp - 4], 0x14
push 0x100079fc
lea ecx, [ebp - 0x920]
call fcn.10023de2
mov byte [ebp - 4], 0x15
push 0x10007a08
lea ecx, [ebp - 0x908]
call fcn.10023de2
mov byte [ebp - 4], 0x16
push 0x10007a14
lea ecx, [ebp - 0x8f0]
call fcn.10023de2
mov byte [ebp - 4], 0x17
push 0x10007a1c
lea ecx, [ebp - 0x8d8]
call fcn.10023de2
mov byte [ebp - 4], 0x18
push 0x10007a28
lea ecx, [ebp - 0x8c0]
call fcn.10023de2
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x820]
call fcn.10023dd1
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x768]
call fcn.10023dd1
mov byte [ebp - 4], 0x1b
lea edx, [ebp - 0x820]
mov ecx, 0x10656e70
call fcn.1002881f
lea edx, [ebp - 0x768]
mov ecx, eax
call fcn.1002881f
lea edx, [ebp - 0x768]
lea ecx, [ebp - 0x820]
call fcn.100302be
movzx eax, al
test eax, eax
je 0x1002d6a6
push fcn.100287ed
mov edx, 0x10007834
mov ecx, 0x10656db8
call fcn.10028af2
mov ecx, eax
call fcn.1002418d
jmp 0x1002d760
and dword [ebp - 0xd0], 0
jmp 0x1002d6bc
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 7
jge 0x1002d760
imul eax, dword [ebp - 0xd0], 0x18
lea ecx, [ebp + eax - 0x950]
lea edx, [ebp - 0x820]
call fcn.100302be
movzx eax, al
test eax, eax
je 0x1002d75b
mov eax, dword [ebp - 0xd0]
inc eax
inc eax
cdq
push 7
pop ecx
idiv ecx
imul eax, edx, 0x18
lea ecx, [ebp + eax - 0x950]
lea edx, [ebp - 0x768]
call fcn.100302be
movzx eax, al
test eax, eax
jne 0x1002d73e
mov eax, dword [ebp - 0xd0]
add eax, 3
cdq
push 7
pop ecx
idiv ecx
imul eax, edx, 0x18
lea ecx, [ebp + eax - 0x950]
lea edx, [ebp - 0x768]
call fcn.100302be
movzx eax, al
test eax, eax
je 0x1002d759
push fcn.100287ed
mov edx, 0x10007834
mov ecx, 0x10656db8
call fcn.10028af2
mov ecx, eax
call fcn.1002418d
jmp 0x1002d760
jmp 0x1002d6af
push fcn.100287ed
mov edx, 0x10007838
mov ecx, 0x10656db8
call fcn.10028af2
mov ecx, eax
call fcn.1002418d
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x768]
call fcn.10023e11
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x820]
call fcn.10023e11
mov byte [ebp - 4], 0x12
push fcn.10023e11
push 7
push 0x18
lea eax, [ebp - 0x950]
push eax
call fcn.1004e94d
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x308], 0x9f7a
mov dword [ebp - 0x104], 0xffffffff
cmp dword [ebp - 0x104], 0
jne 0x1002d8c6
mov dword [ebp - 0x68], 0x796
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x10], eax
je 0x1002d80b
mov dword [ebp - 0x2e8], 1
jmp 0x1002d812
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0xfffa
jbe 0x1002d82a
mov dword [ebp - 0x2f0], 1
jmp 0x1002d831
and dword [ebp - 0x2f0], 0
cmp dword [ebp - 0x2f0], 0x593f9bea
jle 0x1002d84c
cmp dword [ebp - 0x10], 0
jne 0x1002d84c
and dword [ebp - 0x2f8], 0
jmp 0x1002d856
mov dword [ebp - 0x2f8], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x2f8], eax
jg 0x1002d888
cmp dword [ebp - 0x308], 0
je 0x1002d888
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002d888
mov dword [ebp - 0x300], 1
jmp 0x1002d88f
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x308]
mov dword [ebp - 0x310], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax - 0xac], ecx
cmp dword [ebp - 0x310], 0
jne 0x1002d8c6
and dword [ebp - 0x318], 0
jmp 0x1002d8d0
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x318]
jne 0x1002d8e7
mov dword [ebp - 0x320], 1
jmp 0x1002d8ee
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0x10]
jge 0x1002d902
cmp dword [ebp - 0x40], 0
je 0x1002d95e
mov dword [ebp - 0x328], 0x1b185749
mov dword [ebp - 0x40], 0
jmp 0x1002d91c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x1002d959
mov dword [ebp - 0x7f8], 1
mov dword [ebp - 0x800], 1
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1002d957
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1002d915
jmp 0x1002dba0
mov dword [ebp - 0x68], 0
jmp 0x1002d96e
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffe9
je 0x1002dba0
mov dword [ebp - 0x5ec], 4
mov dword [ebp - 0x40], 0
jmp 0x1002d992
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x11
je 0x1002db9b
mov dword [ebp - 0x164], 0
jmp 0x1002d9b5
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 3
jge 0x1002d9d1
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x7b8], 0x2cca
jmp 0x1002d9a8
mov dword [ebp - 0x10], 0
jmp 0x1002d9e1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1002db96
mov dword [ebp - 0x808], 1
push 1
lea ecx, [ebp - 0x7c8]
call fcn.100243cd
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x16c], 0
jmp 0x1002da1f
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jge 0x1002da41
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x7c8]
call fcn.100244e6
mov dword [eax], 0x283019c3
jmp 0x1002da12
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xac], 0x9278a491
jbe 0x1002da5d
mov dword [ebp - 0x330], 1
jmp 0x1002da64
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x330]
sub ecx, dword [ebp + eax*4 - 0xac]
cmp ecx, 0xffff
jne 0x1002da88
mov dword [ebp - 0x338], 1
jmp 0x1002da8f
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xfffffffe
jb 0x1002daad
cmp dword [ebp - 0x5ec], 0
je 0x1002daad
mov dword [ebp - 0x340], 1
jmp 0x1002dab4
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x340]
je 0x1002dad2
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1002dad2
mov dword [ebp - 0x350], 1
jmp 0x1002dad9
and dword [ebp - 0x350], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7b8]
inc eax
mov dword [ebp - 0x348], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x7b8], ecx
mov eax, dword [ebp - 0x348]
dec eax
cmp eax, dword [ebp - 0x350]
jge 0x1002db2b
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002db2b
mov dword [ebp - 0x358], 1
jmp 0x1002db32
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
cmp dword [ebp - 0x358], eax
jne 0x1002db53
mov dword [ebp - 0x360], 1
jmp 0x1002db5a
and dword [ebp - 0x360], 0
cmp dword [ebp - 0x360], 0xfffffffe
jl 0x1002db6f
mov dword [ebp - 0x368], 1
jmp 0x1002db76
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x368]
mov dword [ebp - 0x104], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x7c8]
call fcn.100244a4
jmp 0x1002d9da
jmp 0x1002d98b
jmp 0x1002d967
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x370], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0xac], ecx
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jge 0x1002dbf2
mov dword [ebp - 0x378], 1
jmp 0x1002dbf9
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6f8], eax
mov eax, 0xa8004c3d
test eax, eax
jne 0x1002dc1a
cmp dword [ebp - 0x10], 0
jne 0x1002dc1a
and dword [ebp - 0x5b4], 0
jmp 0x1002dc24
mov dword [ebp - 0x5b4], 1
mov eax, dword [ebp - 0x10]
neg eax
cmp eax, dword [ebp - 0x68]
jl 0x1002dc3a
mov dword [ebp - 0x380], 1
jmp 0x1002dc41
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x378]
cmp eax, dword [ebp - 0x380]
jl 0x1002dc5b
mov dword [ebp - 0x388], 1
jmp 0x1002dc62
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
sub eax, dword [ebp - 0x10]
je 0x1002dc8b
push 0
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002dc8b
mov dword [ebp - 0x1cc], 1
jmp 0x1002dc92
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0x830], ecx
cmp dword [ebp - 0x1cc], 0xba6c15a2
je 0x1002dcbd
mov dword [ebp - 0x390], 1
jmp 0x1002dcc4
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 2
je 0x1002dcd9
mov dword [ebp - 0x398], 1
jmp 0x1002dce0
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0xffffffff
je 0x1002dcf5
mov dword [ebp - 0x3a0], 1
jmp 0x1002dcfc
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x3a0], eax
je 0x1002dd13
mov dword [ebp - 0x3a8], 1
jmp 0x1002dd1a
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 1
jg 0x1002dd2f
mov dword [ebp - 0x610], 1
jmp 0x1002dd36
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xac]
mov dword [ebp - 0x6ec], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x830]
mov dword [ebp - 0x7e4], eax
push 0
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
push 1
lea ecx, [ebp - 0x1ec]
call fcn.100244e6
mov eax, dword [eax]
mov dword [ebp - 0x5bc], eax
jmp 0x1002d54c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.100244a4
mov byte [0x110d7eb8], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1006c620
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x3b0], 0xe42a43d9
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x5f4], 0x9f58382b
push 3
lea ecx, [ebp - 0x6d0]
call fcn.100243cd
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x5c4], 0xa1405524
mov dword [ebp - 0x708], 0xaac8
mov dword [ebp - 0x54], 0
jmp 0x1002de0b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1002de21
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x84c], 0xc48b1647
jmp 0x1002de04
mov dword [ebp - 0x54], 0
jmp 0x1002de31
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1002de4d
push dword [ebp - 0x54]
lea ecx, [ebp - 0x6d0]
call fcn.100244e6
mov dword [eax], 0x20f746e3
jmp 0x1002de2a
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x80d416db
ja 0x1002de71
mov dword [ebp - 0x3e0], 1
jmp 0x1002de78
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x84c], 0xae7b79f6
cmp dword [ebp - 0x5f4], 0xae7b79f6
jl 0x1002dea1
mov dword [ebp - 0x3b8], 1
jmp 0x1002dea8
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x3b8], eax
jne 0x1002dec2
mov dword [ebp - 0x3d8], 1
jmp 0x1002dec9
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x3e0]
lea eax, [ecx + eax - 0x7af5af8b]
cmp eax, 0xa2b82c44
jb 0x1002def5
mov dword [ebp - 0x1a8], 1
jmp 0x1002defc
and dword [ebp - 0x1a8], 0
push 1
lea ecx, [ebp - 0x6d0]
call fcn.100244e6
mov ecx, dword [ebp - 0x1a8]
mov dword [eax], ecx
cmp dword [ebp - 0x1a8], 0
jb 0x1002df26
mov dword [ebp - 0x3e8], 1
jmp 0x1002df2d
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x6718e503
je 0x1002df45
mov dword [ebp - 0x3f0], 1
jmp 0x1002df4c
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x5c4], eax
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x1002df91
push 0x134
push 0
push 0x336
push 0x116a
push 0x1021
push 0
push 0x509
push 0x1812
push 0x20c6
call dword [sym.imp.USER32.dll_DrawIconEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6d0]
call fcn.100244a4
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1006c620
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x64c], 0xbac64a68
mov dword [ebp - 0x648], 0xbac64a68
mov dword [ebp - 0x644], 0xbac64a68
mov dword [ebp - 0x640], 0xbac64a68
lea ecx, [ebp - 0x1cd]
call fcn.100244fb
push eax
lea eax, [ebp - 0x63c]
push eax
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x8a0]
call fcn.100244fe
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4c4]
call fcn.1002447e
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x7bc], 0xfffffffc
mov dword [ebp - 0x244], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
and dword [eax], 0
jmp 0x1002e05f
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
cmp dword [eax], 0xffffffe6
je 0x1002e3bd
push 3
lea ecx, [ebp - 0x510]
call fcn.100243cd
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x4c], 0x5043c4ab
mov dword [ebp - 0x174], 0
jmp 0x1002e0a6
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jge 0x1002e0c8
push dword [ebp - 0x174]
lea ecx, [ebp - 0x510]
call fcn.100244e6
mov dword [eax], 0xa3399244
jmp 0x1002e099
mov dword [ebp - 0x4c], 2
jmp 0x1002e0d8
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1002e3a9
mov dword [ebp - 0x520], 0xbd085c9e
mov dword [ebp - 0x51c], 0xbd085c9e
mov dword [ebp - 0x518], 0xbd085c9e
mov dword [ebp - 0x514], 0xbd085c9e
mov dword [ebp - 0x100], 0xc4a87fce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x520], 2
jmp 0x1002e142
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x520]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x520], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x520], 0
jl 0x1002e215
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x510]
call fcn.100244e6
cmp dword [eax], 0
jne 0x1002e196
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
mov esi, eax
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x510]
call fcn.100244e6
imul eax, dword [eax], 9
cmp dword [esi], eax
jne 0x1002e196
and dword [ebp - 0x400], 0
jmp 0x1002e1a0
mov dword [ebp - 0x400], 1
cmp dword [ebp - 0x400], 0xfffffffe
je 0x1002e1b5
mov dword [ebp - 0x408], 1
jmp 0x1002e1bc
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0x1f145ba1
jle 0x1002e1d4
mov dword [ebp - 0x410], 1
jmp 0x1002e1db
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x520]
lea ecx, [ebp - 0x510]
call fcn.100244e6
mov ecx, dword [ebp - 0x410]
mov dword [eax], ecx
mov esi, dword [ebp - 0x4c]
neg esi
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x510]
call fcn.100244e6
mov dword [eax], esi
jmp 0x1002e127
mov dword [ebp - 0x100], 0
jmp 0x1002e22e
cmp dword [ebp - 0x100], 3
jg 0x1002e3a4
mov eax, 0x4a93
test eax, eax
je 0x1002e262
push 1
lea ecx, [ebp - 0x510]
call fcn.100244e6
cmp dword [eax], 0
je 0x1002e262
mov dword [ebp - 0x21c], 1
jmp 0x1002e269
and dword [ebp - 0x21c], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
mov esi, eax
push 2
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1002e297
mov dword [ebp - 0x418], 1
jmp 0x1002e29e
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0x1d976d9
je 0x1002e2b6
mov dword [ebp - 0x218], 1
jmp 0x1002e2bd
and dword [ebp - 0x218], 0
push 0
lea ecx, [ebp - 0x4c4]
call fcn.100244e6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x218]
jle 0x1002e2e0
jmp 0x1002e0d1
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x510]
call fcn.100244a4
jmp 0x1002e03b
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4c4]
call fcn.100244a4
mov eax, dword [ebp - 0x274]
mov dword [0x1006c610], eax
mov dword [ebp - 0x20], 0xf94
mov dword [ebp - 0x1c], 0x382bdb97
mov dword [ebp - 0x17c], 0
jmp 0x1002e40b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1002e427
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0x87c], 0xe075257
jmp 0x1002e3fe
mov byte [ebp - 0x6e], 0
movzx eax, byte [ebp - 0x6e]
test eax, eax
je 0x1002e43e
push 0x1e77
call dword [sym.imp.GDI32.dll_GetStockObject]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x804], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x20]
jne 0x1002e464
mov dword [ebp - 0x24c], 1
jmp 0x1002e46b
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24c]
mov dword [ebp - 0x1c], eax
je 0x1002e489
xor eax, eax
je 0x1002e489
mov dword [ebp - 0x254], 1
jmp 0x1002e490
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x254], eax
jge 0x1002e4a7
mov dword [ebp - 0x25c], 1
jmp 0x1002e4ae
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x25c]
je 0x1002e596
push 2
lea ecx, [ebp - 0x6e8]
call fcn.100243cd
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x184], 0
jmp 0x1002e4ea
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x1002e509
push dword [ebp - 0x184]
lea ecx, [ebp - 0x6e8]
call fcn.100244e6
or dword [eax], 0xffffffff
jmp 0x1002e4dd
mov dword [ebp - 0x1c], 0x1a
jmp 0x1002e519
cmp dword [ebp - 0x1c], 0xfffffffb
jg 0x1002e535
mov byte [ebp - 0x70], 0
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1002e533
mov dword [ebp - 0x20], 0xd
jmp 0x1002e545
mov dword [ebp - 0x1c], 0xfffffffb
jmp 0x1002e5a6
cmp dword [ebp - 0x1c], 0xffffffe4
jne 0x1002e747
mov dword [ebp - 0x20], 2
jmp 0x1002e5c0
cmp dword [ebp - 0x20], 0
jl 0x1002e5d7
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x87c], 0
je 0x1002e5d5
mov dword [ebp - 0x61c], 0x1ab8
cmp dword [ebp - 0x61c], 0x7a3
jge 0x1002e71a
mov eax, dword [ebp - 0x1c8]
mov dword [0x1006c614], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x1c8]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x274]
mov ecx, dword [eax + ecx]
call fcn.1002a5c7
mov dword [ebp - 0x578], eax
push dword [ebp - 0x1c8]
mov edx, 0x1006c854
mov ecx, dword [ebp - 0x578]
call section..nlgrw
pop ecx
mov esi, 0x1006c610
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret