Function at 0x10027740
Capabilities:
Allocate thread local storage
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10069a6f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x1168
call fcn.10065980
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 8]
test eax, eax
je 0x10027a9a
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x9d0], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xafc], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xb14], eax
lea eax, [ebp + 0x20]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
movzx eax, byte [eax]
test eax, eax
je 0x100277d4
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x544]
mov dword [ecx], eax
jmp 0x10027a95
mov dword [ebp - 0x858], 0x29ad
mov dword [ebp - 0xb04], 0x10009790
cmp dword [ebp - 0x858], 0x2b33
jle 0x10027898
and dword [ebp - 0x308], 0
jmp 0x1002780e
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x3077
jge 0x10027898
and dword [ebp - 0x168], 0
jmp 0x10027830
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x48c7
jge 0x10027893
mov eax, dword [ebp - 0x308]
add eax, dword [ebp - 0x168]
cdq
mov dword [ebp - 0x9e4], eax
mov dword [ebp - 0x9e0], edx
push dword [ebp - 0x9e0]
push dword [ebp - 0x9e4]
lea ecx, [ebp - 0x1130]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0xaf4], eax
mov ecx, dword [ebp - 0xaf4]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x1130]
call fcn.10033576
jmp 0x10027823
jmp 0x10027801
mov eax, dword [ebp - 0xafc]
mov dword [ebp - 0xb24], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x858], 0x27f0
jge 0x100278c0
push dword [ebp - 0xb04]
call fcn.10053d16
pop ecx
jmp 0x100278dc
or dword [ebp - 4], 0xffffffff
jmp 0x100278e6
mov dword [ebp - 0x84c], 0x4e1c
mov dword [ebp - 0xb1c], 0x10009808
cmp dword [ebp - 0x84c], 0x5109
jle 0x10027a1c
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
and dword [ebp - 0x178], 0
jmp 0x10027928
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x2b0f
jge 0x10027a1c
and dword [ebp - 0x258], 0
jmp 0x1002794e
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x15e9
jge 0x10027a17
and dword [ebp - 0x170], 0
jmp 0x10027974
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x482a
jge 0x10027a12
and dword [ebp - 0x2d0], 0
jmp 0x1002799a
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0x1ba6
jge 0x10027a0d
mov eax, dword [ebp - 0x258]
cdq
idiv dword [ebp - 0x170]
imul edx, dword [ebp - 0x2d0]
or edx, dword [ebp - 0x178]
mov eax, edx
cdq
mov dword [ebp - 0x9f0], eax
mov dword [ebp - 0x9ec], edx
push dword [ebp - 0x9ec]
push dword [ebp - 0x9f0]
lea ecx, [ebp - 0x107c]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0xb0c], eax
mov ecx, dword [ebp - 0xb0c]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x107c]
call fcn.10033576
jmp 0x1002798d
jmp 0x10027967
jmp 0x10027941
jmp 0x1002791b
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0xb2c], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x84c], 0x4b67
jge 0x10027a47
push dword [ebp - 0xb1c]
call fcn.10053d16
pop ecx
jmp 0x10027a63
or dword [ebp - 4], 0xffffffff
jmp 0x10027a6d
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0x9c8], eax
mov eax, dword [ebp - 0xb2c]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x9c8]
mov ecx, dword [ebp - 0x8b4]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x1002f590
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x8d4], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x8bc], eax
mov dword [ebp - 0x838], 0x2c11
mov dword [ebp - 0x9c0], 0x1000986c
cmp dword [ebp - 0x838], 0x2c28
jle 0x10027bc3
and dword [ebp - 0x328], 0
jmp 0x10027b01
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 0x6696
jge 0x10027bc3
and dword [ebp - 0x260], 0
jmp 0x10027b27
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0x2e7b
jge 0x10027bbe
and dword [ebp - 0x180], 0
jmp 0x10027b4d
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x2829
jge 0x10027bb9
mov eax, dword [ebp - 0x260]
cdq
idiv dword [ebp - 0x180]
add edx, dword [ebp - 0x328]
mov eax, edx
cdq
mov dword [ebp - 0x9fc], eax
mov dword [ebp - 0x9f8], edx
push dword [ebp - 0x9f8]
push dword [ebp - 0x9fc]
lea ecx, [ebp - 0x1034]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0xa84], eax
mov ecx, dword [ebp - 0xa84]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x1034]
call fcn.10033576
jmp 0x10027b40
jmp 0x10027b1a
jmp 0x10027af4
mov eax, dword [ebp - 0x8bc]
movzx eax, byte [eax]
test eax, eax
je 0x10027bdb
call dword [sym.imp.KERNEL32.dll_TlsAlloc]
jmp 0x1002f54b
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0x644], 0x13f6
mov dword [ebp - 0x8cc], 0x100098a0
cmp dword [ebp - 0x644], 0x1466
jle 0x10027cb1
and dword [ebp - 0x188], 0
jmp 0x10027c21
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x54e7
jge 0x10027cb1
and dword [ebp - 0x268], 0
jmp 0x10027c47
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0x150
jge 0x10027cac
mov eax, dword [ebp - 0x188]
mov ecx, dword [ebp - 0x268]
sar eax, cl
cdq
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], edx
push dword [ebp - 0xa04]
push dword [ebp - 0xa08]
lea ecx, [ebp - 0x10ac]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x8c4], eax
mov ecx, dword [ebp - 0x8c4]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x10ac]
call fcn.10033576
jmp 0x10027c3a
jmp 0x10027c14
mov eax, dword [ebp - 0xa90]
mov dword [ebp - 0x8c0], eax
mov dword [ebp - 4], 4
cmp dword [ebp - 0x644], 0x11b7
jge 0x10027cdc
push dword [ebp - 0x8cc]
call fcn.10053d16
pop ecx
jmp 0x10027cf8
or dword [ebp - 4], 0xffffffff
jmp 0x10027d02
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0xa9c]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x3d8], eax
mov dword [ebp - 0x11c], 0x20f8
push 4
lea ecx, [ebp - 0xd1c]
call fcn.100336b5
mov dword [ebp - 4], 6
push 0x6a7c
push 0x3c3b
lea eax, [ebp - 0xd1c]
push eax
lea eax, [ebp - 0xd90]
push eax
push 0
call fcn.10025393
add esp, 0x14
push 0
push 0x11bc
lea eax, [ebp - 0x11c]
push eax
push 0x33d
push 0x1948
lea eax, [ebp - 0xd1c]
push eax
push 0
call fcn.10025757
add esp, 0x1c
mov dword [ebp - 0x11c], 0xffffffeb
jmp 0x10027dab
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0xfffffffb
jle 0x10027dea
push 0x3b10
push 0
push 0x5de8
push 0x4964
push 0x4a5e
push 0x1e5e
push 0
push 0x79c9
push 0x21af
push 0x61a7
call fcn.10011524
add esp, 0x28
jmp 0x10027d9e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd1c]
call fcn.10033737
mov dword [ebp - 0x840], 0x6004
mov dword [ebp - 0xc08], 0x10009900
cmp dword [ebp - 0x840], 0x62b9
jle 0x10027f31
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
and dword [ebp - 0x190], 0
jmp 0x10027e3d
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x447f
jge 0x10027f31
and dword [ebp - 0x2d8], 0
jmp 0x10027e63
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xdfe
jge 0x10027f2c
and dword [ebp - 0x198], 0
jmp 0x10027e89
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x108e
jge 0x10027f27
and dword [ebp - 0x270], 0
jmp 0x10027eaf
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x772a
jge 0x10027f22
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x2d8]
shl eax, cl
mov ecx, dword [ebp - 0x198]
shl eax, cl
and eax, dword [ebp - 0x270]
cdq
mov dword [ebp - 0xa14], eax
mov dword [ebp - 0xa10], edx
push dword [ebp - 0xa10]
push dword [ebp - 0xa14]
lea ecx, [ebp - 0x1160]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x8dc], eax
mov ecx, dword [ebp - 0x8dc]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x1160]
call fcn.10033576
jmp 0x10027ea2
jmp 0x10027e7c
jmp 0x10027e56
jmp 0x10027e30
mov dword [ebp - 4], 7
cmp dword [ebp - 0x840], 0x5e53
jge 0x10027f50
push dword [ebp - 0xc08]
call fcn.10053d16
pop ecx
jmp 0x10027f6c
or dword [ebp - 4], 0xffffffff
jmp 0x10027f76
mov dword [ebp - 0x1a0], 0
jmp 0x10027f8f
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x10027fab
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xe90], 0x60b4ffb8
jmp 0x10027f82
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe90], 0
mov byte [ebp - 0xd5], 0
lea eax, [ebp - 0xd5]
push eax
push 0
call fcn.1000f43b
pop ecx
pop ecx
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0x114], 0xccc89593
mov dword [ebp - 0xc8c], 0xdca27289
mov dword [ebp - 0xc88], 0xdca27289
mov dword [ebp - 0xc84], 0xdca27289
mov dword [ebp - 0xc80], 0xdca27289
lea ecx, [ebp - 0x3e5]
call fcn.10033762
push eax
lea eax, [ebp - 0xc7c]
push eax
lea eax, [ebp - 0xc8c]
push eax
lea ecx, [ebp - 0xfdc]
call fcn.10033765
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc58]
call fcn.10033711
mov dword [ebp - 4], 9
mov dword [ebp - 0x8e4], 0x23b4709b
mov dword [ebp - 0xca0], 0x2bf5f40e
mov dword [ebp - 0xc9c], 0x2bf5f40e
mov dword [ebp - 0xc98], 0x2bf5f40e
mov dword [ebp - 0xc94], 0x2bf5f40e
lea ecx, [ebp - 0x345]
call fcn.10033762
push eax
lea eax, [ebp - 0xc90]
push eax
lea eax, [ebp - 0xca0]
push eax
lea ecx, [ebp - 0xfec]
call fcn.10033765
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xeb4]
call fcn.10033711
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x3a4], 0xfe30
jge 0x10028154
cmp dword [ebp - 0x3a4], 0xfffffffc
jle 0x100280db
mov dword [ebp - 0x410], 1
jmp 0x100280e2
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x410], eax
jne 0x100280fc
mov dword [ebp - 0x650], 1
jmp 0x10028103
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x650]
jne 0x10028123
cmp dword [ebp - 0x114], 0
jne 0x10028123
and dword [ebp - 0x418], 0
jmp 0x1002812d
mov dword [ebp - 0x418], 1
imul esi, dword [ebp - 0x418], 0xf3d3
push 0
lea ecx, [ebp - 0xc58]
call fcn.10033753
cmp esi, dword [eax]
jle 0x10028154
mov dword [ebp - 0x754], 1
jmp 0x1002815b
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x754], eax
jg 0x10028175
mov dword [ebp - 0x420], 1
jmp 0x1002817c
and dword [ebp - 0x420], 0
mov esi, dword [ebp - 0x8e4]
imul esi, dword [ebp - 0x420]
push 2
lea ecx, [ebp - 0xc58]
call fcn.10033753
cmp esi, dword [eax]
je 0x100281a6
mov dword [ebp - 0x64c], 1
jmp 0x100281ad
and dword [ebp - 0x64c], 0
cmp dword [ebp - 0x64c], 0
jg 0x100281c2
mov dword [ebp - 0x428], 1
jmp 0x100281c9
and dword [ebp - 0x428], 0
push 2
lea ecx, [ebp - 0xc58]
call fcn.10033753
mov ecx, dword [ebp - 0x428]
add ecx, dword [eax]
mov dword [ebp - 0x114], ecx
mov esi, dword [ebp - 0x114]
push 3
lea ecx, [ebp - 0xeb4]
call fcn.10033753
mov dword [eax], esi
push 0
push 1
push 0
push 0x2c8a
push 0x2c67
push 0x4cb8
call fcn.1000f0fb
add esp, 0x18
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xeb4]
call fcn.10033737
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc58]
call fcn.10033737
mov dword [ebp - 0x30], 0x20f8
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0xdf8], 0xba2afe01
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xaa8], 0xce55
mov dword [ebp - 0x310], 0
jmp 0x1002827c
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 2
jge 0x10028298
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0xff4], 0
jmp 0x1002826f
mov dword [ebp - 0x1a8], 0xffffffe7
jmp 0x100282b1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x19
jl 0x10028374
mov dword [ebp - 0xe00], 4
mov dword [ebp - 0xf58], 0x7f2fb5a5
push 3
lea ecx, [ebp - 0xc40]
call fcn.100336b5
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x278], 0
jmp 0x100282ff
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x1002831e
push dword [ebp - 0x278]
lea ecx, [ebp - 0xc40]
call fcn.10033753
or dword [eax], 0xffffffff
jmp 0x100282f2
push 0x26c9
push 0x7f71
push 0
push 0x69ed
lea eax, [ebp - 0xaa8]
push eax
push 0
call fcn.10022df6
add esp, 0x18
push 1
lea ecx, [ebp - 0xc40]
call fcn.10033753
mov esi, eax
push 1
lea ecx, [ebp - 0xc40]
call fcn.10033753
mov eax, dword [eax]
mov dword [esi], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc40]
call fcn.10033737
jmp 0x100282a4
push 4
lea ecx, [ebp - 0xcf8]
call fcn.100336b5
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x7dc], 0xf28
mov dword [ebp - 0xbc0], 0x10009974
cmp dword [ebp - 0x7dc], 0xfda
jle 0x1002848e
and dword [ebp - 0x1b0], 0
jmp 0x100283cc
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 0xed0
jge 0x1002848e
and dword [ebp - 0x2e0], 0
jmp 0x100283f2
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0xca3
jge 0x10028489
and dword [ebp - 0x1b8], 0
jmp 0x10028418
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x39f3
jge 0x10028484
mov eax, dword [ebp - 0x1b0]
cdq
idiv dword [ebp - 0x2e0]
or edx, dword [ebp - 0x1b8]
mov eax, edx
cdq
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xa1c], edx
push dword [ebp - 0xa1c]
push dword [ebp - 0xa20]
lea ecx, [ebp - 0x10dc]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x8ec], eax
mov ecx, dword [ebp - 0x8ec]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x10dc]
call fcn.10033576
jmp 0x1002840b
jmp 0x100283e5
jmp 0x100283bf
mov dword [ebp - 0x764], 1
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x7dc], 0xc8f
jge 0x100284b4
push dword [ebp - 0xbc0]
call fcn.10053d16
pop ecx
jmp 0x100284d0
mov dword [ebp - 4], 0xc
jmp 0x100284e0
mov dword [ebp - 0x3ac], 1
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x36c], 0xf04b064b
mov dword [ebp - 0xac0], 0x36fe5ab0
mov dword [ebp - 0x1d0], 0x632c5b64
mov dword [ebp - 0x364], 0x46e74a6e
mov dword [ebp - 0x8fc], 2
mov dword [ebp - 0x430], 0x3777
mov dword [ebp - 0xab4], 0x100099b0
cmp dword [ebp - 0x430], 0x393c
jle 0x10028653
and dword [ebp - 0x1c8], 0
jmp 0x10028560
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x56c6
jge 0x10028653
and dword [ebp - 0x338], 0
jmp 0x10028586
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x6701
jge 0x1002864e
and dword [ebp - 0x280], 0
jmp 0x100285ac
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0xc48
jge 0x10028649
and dword [ebp - 0x1c0], 0
jmp 0x100285d2
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xcbf
jge 0x10028644
mov ecx, dword [ebp - 0x280]
imul ecx, dword [ebp - 0x1c0]
mov eax, dword [ebp - 0x338]
sar eax, cl
xor eax, dword [ebp - 0x1c8]
cdq
mov dword [ebp - 0xa2c], eax
mov dword [ebp - 0xa28], edx
push dword [ebp - 0xa28]
push dword [ebp - 0xa2c]
lea ecx, [ebp - 0x104c]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x8f4], eax
mov ecx, dword [ebp - 0x8f4]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x104c]
call fcn.10033576
jmp 0x100285c5
jmp 0x1002859f
jmp 0x10028579
jmp 0x10028553
mov dword [ebp - 0x288], 0
jmp 0x1002866c
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x10028688
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x3c4], 0xdca1a1f0
jmp 0x1002865f
mov byte [ebp - 4], 0xf
cmp dword [ebp - 0x430], 0x3542
jge 0x100286a4
push dword [ebp - 0xab4]
call fcn.10053d16
pop ecx
jmp 0x100286c0
mov dword [ebp - 4], 0xc
jmp 0x100286d0
mov eax, dword [ebp - 0x3ac]
cmp eax, dword [ebp - 0x1d0]
jl 0x100286ea
mov dword [ebp - 0x654], 1
jmp 0x100286f1
and dword [ebp - 0x654], 0
imul eax, dword [ebp - 0x654], 0xe280
add eax, dword [ebp - 0x8fc]
jne 0x1002871c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 0
jne 0x1002871c
and dword [ebp - 0x75c], 0
jmp 0x10028726
mov dword [ebp - 0x75c], 1
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x904], eax
mov eax, dword [ebp - 0x364]
dec eax
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0xc04]
cmp eax, dword [ebp - 0x904]
jle 0x10028771
mov dword [ebp - 0x440], 1
jmp 0x10028778
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x12b94821
jl 0x10028790
mov dword [ebp - 0x65c], 1
jmp 0x10028797
and dword [ebp - 0x65c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
add eax, dword [ebp - 0x65c]
cmp eax, dword [ebp - 0x36c]
jle 0x100287cb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 0
jne 0x100287cb
and dword [ebp - 0x448], 0
jmp 0x100287d5
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x448], eax
jl 0x100287ef
mov dword [ebp - 0x854], 1
jmp 0x100287f6
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 0x5009
jl 0x1002880e
mov dword [ebp - 0x450], 1
jmp 0x10028815
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 0x1e9a
jle 0x10028839
mov dword [ebp - 0x664], 1
jmp 0x10028840
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0xac0]
cmp dword [ebp - 0x664], eax
jl 0x1002885a
mov dword [ebp - 0x458], 1
jmp 0x10028861
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x458], eax
jge 0x1002887b
mov dword [ebp - 0x460], 1
jmp 0x10028882
and dword [ebp - 0x460], 0
mov dword [ebp - 0x764], 0
imul eax, dword [ebp - 0x764], 0
imul eax, dword [ebp - 0x460]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x1d0]
je 0x100288ba
mov dword [ebp - 0x66c], 1
jmp 0x100288c1
and dword [ebp - 0x66c], 0
cmp dword [ebp - 0x66c], 0x4e630971
jl 0x100288e2
cmp dword [ebp - 0x468], 0
je 0x100288e2
mov dword [ebp - 0x7e4], 1
jmp 0x100288e9
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x90c], 0xb165
mov dword [ebp - 0xbc8], 0x44ad3740
mov dword [ebp - 0x914], 0x1fd9d089
mov dword [ebp - 0xe08], 0xfffffffb
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10028952
push 0x7976
push 0x72d4
push 0x470c
push 0x11c6
push 0x513a
push 0
call fcn.10010695
add esp, 0x18
push 0
lea eax, [ebp - 0x90c]
push eax
lea eax, [ebp - 0xbc8]
push eax
push 0
push 0x448
lea eax, [ebp - 0x914]
push eax
call fcn.10010fb4
add esp, 0x18
push 0x7e8c
push 0
lea eax, [ebp - 0xcf8]
push eax
push 0x6406
lea eax, [ebp - 0xef8]
push eax
call fcn.1000f82d
add esp, 0x14
mov dword [ebp - 0x470], 0x5412
mov dword [ebp - 0xacc], 0x10009a38
cmp dword [ebp - 0x470], 0x5659
jle 0x10028ab2
and dword [ebp - 0x290], 0
jmp 0x100289d4
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0x4c2
jge 0x10028a99
and dword [ebp - 0x2e8], 0
jmp 0x100289fa
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0x2104
jge 0x10028a94
and dword [ebp - 0x1d8], 0
jmp 0x10028a20
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0x4ae4
jge 0x10028a8f
and dword [ebp - 0x154], 0
jmp 0x10028a42
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x6180
jge 0x10028a8d
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x154]
sar eax, cl
or eax, dword [ebp - 0x290]
cdq
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0xa34], edx
push dword [ebp - 0xa34]
push dword [ebp - 0xa38]
mov ecx, 0x10612a38
call fcn.100335a0
jmp 0x10028a35
jmp 0x10028a13
jmp 0x100289ed
jmp 0x100289c7
push 0
push 0
push 0x24c5
push 0x1f91
push 0xbdd
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x470], 0x5324
jge 0x10028ad2
mov edx, dword [ebp - 0xacc]
mov ecx, 0x10612a38
call fcn.1003504a
jmp 0x10028aee
mov dword [ebp - 4], 0xc
jmp 0x10028afe
push 2
lea ecx, [ebp - 0xc28]
call fcn.100336b5
mov byte [ebp - 4], 0x13
push 2
lea ecx, [ebp - 0xd28]
call fcn.100336b5
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xdc], 0xffffffff
mov dword [ebp - 0xe10], 0x6a4137d6
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x6c], 0
jmp 0x10028b4e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10028b6a
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xc28]
call fcn.10033753
mov dword [eax], 0x5d6c
jmp 0x10028b47
mov dword [ebp - 0x6c], 0
jmp 0x10028b7a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10028b96
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xd28]
call fcn.10033753
mov dword [eax], 1
jmp 0x10028b73
push 0
push 1
push 0x18cc
push 0
lea eax, [ebp - 0xd28]
push eax
lea eax, [ebp - 0xc28]
push eax
push 0xc08
push 0x1744
push 0x128b
push 0x2ef9
push 0x1e4f
lea eax, [ebp - 0xdc]
push eax
push 0x68d7
call fcn.10013db9
add esp, 0x34
mov dword [ebp - 0xdc], 0
jmp 0x10028bf5
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x10028c53
mov dword [ebp - 0xf80], 0x1c84132d
mov dword [ebp - 0xe18], 0xfffffffb
push 0
lea eax, [ebp - 0x8a8]
push eax
push 0x1134
push 0x6475
push 0x5c31
push 0x5212
push 1
call fcn.10025757
add esp, 0x1c
push dword [ebp - 0xdc]
lea ecx, [ebp - 0xc28]
call fcn.10033753
cmp dword [eax], 0
je 0x10028c51
jmp 0x10028be8
jmp 0x10028be8
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xd28]
call fcn.10033737
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xc28]
call fcn.10033737
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x30], 0
je 0x10028cd9
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xe20], eax
cmp dword [ebp - 0x30], 1
jne 0x10028c9b
mov dword [ebp - 0x674], 1
jmp 0x10028ca2
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
sub eax, dword [ebp - 0x30]
test eax, eax
jg 0x10028cbb
mov dword [ebp - 0x478], 1
jmp 0x10028cc2
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x30]
je 0x10028cd9
mov dword [ebp - 0x76c], 1
jmp 0x10028ce0
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
sub eax, 0x1e19
cmp eax, dword [ebp - 0x30]
jne 0x10028cfc
mov dword [ebp - 0x480], 1
jmp 0x10028d03
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x480], eax
jne 0x10028d1a
mov dword [ebp - 0x67c], 1
jmp 0x10028d21
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x67c], eax
jl 0x10028d38
mov dword [ebp - 0x488], 1
jmp 0x10028d3f
and dword [ebp - 0x488], 0
push 3
lea ecx, [ebp - 0xcf8]
call fcn.10033753
mov ecx, dword [ebp - 0x488]
mov dword [eax], ecx
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x28], 0x14b733c6
mov dword [ebp - 0xb4], 2
mov dword [ebp - 0x134], 0x20a6ff60
push 3
lea ecx, [ebp - 0x898]
call fcn.100336b5
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x1e0], 0
jmp 0x10028da3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 3
jge 0x10028dc5
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x898]
call fcn.10033753
mov dword [eax], 0x6f8f
jmp 0x10028d96
mov dword [ebp - 0x4e0], 0x3dc0
mov dword [ebp - 0xad8], 0x10009ac4
cmp dword [ebp - 0x4e0], 0x40a9
jle 0x10028efa
and dword [ebp - 0x1f0], 0
jmp 0x10028dff
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x26cf
jge 0x10028eef
and dword [ebp - 0x318], 0
jmp 0x10028e25
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0x49a4
jge 0x10028eea
and dword [ebp - 0x1e8], 0
jmp 0x10028e4b
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0x1d97
jge 0x10028ee5
and dword [ebp - 0x298], 0
jmp 0x10028e71
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 0x58dc
jge 0x10028ee0
mov eax, dword [ebp - 0x318]
add eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x298]
and eax, dword [ebp - 0x1f0]
cdq
mov dword [ebp - 0xa44], eax
mov dword [ebp - 0xa40], edx
push dword [ebp - 0xa40]
push dword [ebp - 0xa44]
lea ecx, [ebp - 0x1064]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0xbfc], eax
mov ecx, dword [ebp - 0xbfc]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x1064]
call fcn.10033576
jmp 0x10028e64
jmp 0x10028e3e
jmp 0x10028e18
jmp 0x10028df2
push 0xb63
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
cmp dword [ebp - 0xb4], 0
jne 0x10028f0c
cmp dword [ebp - 0xb4], 0
je 0x10028f21
cmp dword [ebp - 0xb4], 0
je 0x10028f21
mov dword [ebp - 0x824], 1
jmp 0x10028f28
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x824], eax
jge 0x10028f42
mov dword [ebp - 0x490], 1
jmp 0x10028f49
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x490], eax
jle 0x10028f69
mov eax, 0x1afd061a
test eax, eax
je 0x10028f69
mov dword [ebp - 0x684], 1
jmp 0x10028f70
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x684], eax
jne 0x10028f8a
mov dword [ebp - 0x498], 1
jmp 0x10028f91
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x498], eax
jg 0x10028fa8
mov dword [ebp - 0x774], 1
jmp 0x10028faf
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x774], eax
jl 0x10028fcf
mov eax, 0xc7e4
test eax, eax
jne 0x10028fcf
and dword [ebp - 0x4a0], 0
jmp 0x10028fd9
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x4a0]
jle 0x10028ff0
mov dword [ebp - 0x68c], 1
jmp 0x10028ff7
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x134]
jne 0x10029020
mov eax, 0xcadd635
test eax, eax
jne 0x10029020
and dword [ebp - 0x4a8], 0
jmp 0x1002902a
mov dword [ebp - 0x4a8], 1
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x88], eax
jl 0x10029064
push 1
push 0
push 1
lea eax, [ebp - 0xb4]
push eax
push 0x24c5
lea eax, [ebp - 0x898]
push eax
call fcn.1000f0fb
add esp, 0x18
jmp 0x1002940d
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x2f0], 0
jmp 0x10029087
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 4
jge 0x100290a3
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0xf78], 0x7f039d3c
jmp 0x1002907a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x7ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp + eax - 0xf78], ecx
cmp dword [ebp - 0x7ec], 0
jne 0x100290da
cmp dword [ebp - 0x8c], 0
jne 0x100290da
and dword [ebp - 0x4c0], 0
jmp 0x100290e4
mov dword [ebp - 0x4c0], 1
xor eax, eax
jne 0x10029123
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x134]
jle 0x10029102
mov dword [ebp - 0x4b0], 1
jmp 0x10029109
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x4b0]
test eax, eax
jne 0x10029123
and dword [ebp - 0x694], 0
jmp 0x1002912d
mov dword [ebp - 0x694], 1
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x694], eax
jle 0x10029147
mov dword [ebp - 0x4b8], 1
jmp 0x1002914e
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0
je 0x1002916c
cmp dword [ebp - 0x88], 0
je 0x1002916c
mov dword [ebp - 0x77c], 1
jmp 0x10029173
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x77c], eax
jne 0x1002918d
mov dword [ebp - 0x69c], 1
jmp 0x10029194
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x4c0]
add eax, dword [ebp - 0x69c]
cmp eax, dword [ebp - 0x8c]
jg 0x100291bb
push 8
pop eax
test eax, eax
je 0x100291bb
mov dword [ebp - 0x4c8], 1
jmp 0x100291c2
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x4c8]
jl 0x100291ee
push 1
lea ecx, [ebp - 0x898]
call fcn.10033753
cmp dword [eax], 0
je 0x100291ee
mov dword [ebp - 0x844], 1
jmp 0x100291f5
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
sub eax, dword [ebp - 0x8c]
je 0x100293b5
push 2
lea ecx, [ebp - 0xd40]
call fcn.100336b5
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1f8], 0
jmp 0x10029231
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x10029253
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0xd40]
call fcn.10033753
mov dword [eax], 0xfffffffa
jmp 0x10029224
mov dword [ebp - 0x28], 0x12
jmp 0x10029263
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x29
jne 0x100293a4
mov dword [ebp - 0x2a0], 0x2d86
cmp dword [ebp - 0x8c], 0
je 0x1002937f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf78]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x2a0]
imul eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x2a0]
sub ecx, eax
je 0x100292bc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf78], 0
mov eax, 0xd63f7cec
cmp eax, 0x7138bf9c
jne 0x100292d4
mov dword [ebp - 0x4d0], 1
jmp 0x100292db
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x4d0], eax
jne 0x100292f5
mov dword [ebp - 0x6a4], 1
jmp 0x100292fc
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x6a4], eax
jl 0x10029316
mov dword [ebp - 0x4d8], 1
jmp 0x1002931d
and dword [ebp - 0x4d8], 0
mov esi, dword [ebp - 0x88]
add esi, dword [ebp - 0x4d8]
imul esi, dword [ebp - 0x2a0]
push 0
lea ecx, [ebp - 0xd40]
call fcn.10033753
cmp esi, dword [eax]
jl 0x1002934d
mov dword [ebp - 0x924], 1
jmp 0x10029354
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xe28], eax
or eax, 0xffffffff
je 0x10029378
push 9
pop eax
test eax, eax
je 0x10029378
mov dword [ebp - 0x784], 1
jmp 0x1002937f
and dword [ebp - 0x784], 0
push 1
lea ecx, [ebp - 0x898]
call fcn.10033753
mov eax, dword [eax]
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0xb4], 0
je 0x1002939f
jmp 0x100293a4
jmp 0x1002925c
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd40]
call fcn.10033737
jmp 0x1002940d
mov dword [ebp - 0x28], 0
jmp 0x100293c5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100293e7
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x898]
push eax
push 0
push 0x5d83
call fcn.1001045c
add esp, 0x10
jmp 0x100293be
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1002940d
push 0
push 0x6507
push 0x7d53
call fcn.1000f750
add esp, 0xc
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x4e0], 0x3b9a
jge 0x10029429
push dword [ebp - 0xad8]
call fcn.10053d16
pop ecx
jmp 0x10029445
mov dword [ebp - 4], 0x15
jmp 0x10029455
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x898]
call fcn.10033737
mov dword [ebp - 0x30], 0xffffffeb
jmp 0x10029474
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffffb
jle 0x1002a1ad
mov dword [ebp - 0xbc], 0xad6
mov dword [ebp - 0x794], 0x4ea33a4d
mov dword [ebp - 0x10c], 1
mov dword [ebp - 0x210], 5
mov dword [ebp - 0x3c8], 0x7cf8fb6f
mov dword [ebp - 0x6d4], 0x988a21d
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
je 0x1002973d
mov dword [ebp - 0x6ac], 0x8d32ffab
push 2
lea ecx, [ebp - 0xb3c]
call fcn.100336b5
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x92c], 0xd402da3c
mov dword [ebp - 0x374], 0x15a8df04
mov dword [ebp - 0x500], 0x1701
mov dword [ebp - 0x4f8], 5
push 0x296a
push 0x70fb
lea eax, [ebp - 0xf18]
push eax
push 0
lea eax, [ebp - 0xb3c]
push eax
call fcn.1001c939
add esp, 0x14
push 0x4b10
push 0x2b6
push 0x6cde
push 0x12c2
push 0x2722
push 1
lea eax, [ebp - 0xb3c]
push eax
lea eax, [ebp - 0x6ac]
push eax
push 0
push 0x189b
push 0
push 0x11df
call fcn.1001a3be
add esp, 0x30
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10033753
cmp dword [eax], 0
jne 0x100295ad
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xe30], eax
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0xf84], eax
cmp dword [ebp - 0x6ac], 0xffffffff
jle 0x100295ad
and dword [ebp - 0x4e8], 0
jmp 0x100295b7
mov dword [ebp - 0x4e8], 1
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
je 0x100295e1
mov eax, 0x1191
test eax, eax
je 0x100295e1
mov dword [ebp - 0xbd0], 1
jmp 0x100295e8
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe38], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xe40], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe74], eax
cmp dword [ebp - 0xbc], 0x5d1c
jne 0x10029630
mov dword [ebp - 0x7f4], 1
jmp 0x10029637
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0
ja 0x10029658
mov dword [ebp - 0x4f0], 1
jmp 0x1002965f
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0x4f0], eax
jge 0x10029679
mov dword [ebp - 0x6b4], 1
jmp 0x10029680
and dword [ebp - 0x6b4], 0
push 1
lea ecx, [ebp - 0xb3c]
call fcn.10033753
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0xe48], eax
cmp dword [ebp - 0x210], 1
je 0x100296ba
mov dword [ebp - 0x78c], 1
jmp 0x100296c1
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0xacc0136e
jne 0x100296d9
mov dword [ebp - 0x6bc], 1
jmp 0x100296e0
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x500]
cmp dword [ebp - 0x6bc], eax
jl 0x100296fa
mov dword [ebp - 0x508], 1
jmp 0x10029701
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 3
je 0x10029716
mov dword [ebp - 0x82c], 1
jmp 0x1002971d
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x3c8], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb3c]
call fcn.10033737
jmp 0x10029a72
mov dword [ebp - 0xe4], 0xcf54
mov dword [ebp - 0xd68], 0x57240e60
mov dword [ebp - 0xd64], 0x57240e60
mov dword [ebp - 0xd60], 0x57240e60
mov dword [ebp - 0xd5c], 0x57240e60
mov dword [ebp - 0x538], 0x2006
mov dword [ebp - 0xc0c], 0x10009b20
cmp dword [ebp - 0x538], 0x221b
jle 0x10029885
push 0
push 0x2003
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
and dword [ebp - 0x200], 0
jmp 0x100297b8
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x7ab6
jge 0x10029885
and dword [ebp - 0x330], 0
jmp 0x100297de
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0x7962
jge 0x10029880
and dword [ebp - 0x208], 0
jmp 0x10029804
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x3223
jge 0x1002987b
and dword [ebp - 0x2a8], 0
jmp 0x10029826
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0x3d82
jge 0x10029876
mov eax, dword [ebp - 0x200]
cdq
idiv dword [ebp - 0x330]
mov ecx, dword [ebp - 0x208]
shl edx, cl
mov ecx, dword [ebp - 0x2a8]
shl edx, cl
mov eax, edx
cdq
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0xa4c], edx
push dword [ebp - 0xa4c]
push dword [ebp - 0xa50]
mov ecx, 0x10612a38
call fcn.100335a0
jmp 0x10029819
jmp 0x100297f7
jmp 0x100297d1
jmp 0x100297ab
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xe7c], eax
cmp dword [ebp - 0xe4], 0
jl 0x100298a6
mov dword [ebp - 0x510], 1
jmp 0x100298ad
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
sub eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0xe4]
jne 0x100298cd
mov dword [ebp - 0x934], 1
jmp 0x100298d4
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x3c8]
jl 0x100298ee
mov dword [ebp - 0x6c4], 1
jmp 0x100298f5
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x6c4], eax
jge 0x10029915
cmp dword [ebp - 0xe4], 0
jne 0x10029915
and dword [ebp - 0x518], 0
jmp 0x1002991f
mov dword [ebp - 0x518], 1
cmp dword [ebp - 0x518], 1
jne 0x10029934
mov dword [ebp - 0x520], 1
jmp 0x1002993b
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x794]
cmp dword [ebp - 0x520], eax
jne 0x1002995b
cmp dword [ebp - 0xbc], 0
jne 0x1002995b
and dword [ebp - 0xae4], 0
jmp 0x10029965
mov dword [ebp - 0xae4], 1
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xe50], eax
cmp dword [ebp - 0x10c], 0
jne 0x10029986
mov dword [ebp - 0x93c], 1
jmp 0x1002998d
and dword [ebp - 0x93c], 0
cmp dword [ebp - 0x10c], 1
ja 0x100299a2
mov dword [ebp - 0x6cc], 1
jmp 0x100299a9
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x6cc], eax
jl 0x100299c3
mov dword [ebp - 0x528], 1
jmp 0x100299ca
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x528], eax
je 0x100299e4
mov dword [ebp - 0x7fc], 1
jmp 0x100299eb
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 0
jae 0x10029a00
mov dword [ebp - 0x530], 1
jmp 0x10029a07
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd68], eax
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x538], 0x1c56
jge 0x10029a46
mov edx, dword [ebp - 0xc0c]
mov ecx, 0x10612a38
call fcn.1003504a
jmp 0x10029a62
mov dword [ebp - 4], 0xc
jmp 0x10029a72
push 2
lea ecx, [ebp - 0x880]
call fcn.100336b5
mov byte [ebp - 4], 0x1c
push 1
lea ecx, [ebp - 0x3f4]
call fcn.100336b5
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x228], 9
mov dword [ebp - 0x104], 0xcb1a
push 1
lea ecx, [ebp - 0xc34]
call fcn.100336b5
mov byte [ebp - 4], 0x1e
push 2
lea ecx, [ebp - 0xd58]
call fcn.100336b5
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x4c], 0
jmp 0x10029ada
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10029af6
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x880]
call fcn.10033753
mov dword [eax], 1
jmp 0x10029ad3
lea eax, [ebp - 0x3f4]
push eax
push 0x5b5c
lea eax, [ebp - 0x4c]
push eax
push 0
push 0x5c90
call fcn.1001bebd
add esp, 0x14
mov dword [ebp - 0x79c], 0x4d0f
mov dword [ebp - 0xaf0], 0x10009b70
cmp dword [ebp - 0x79c], 0x500b
jle 0x10029c47
and dword [ebp - 0x2f8], 0
jmp 0x10029b4f
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0x7bdf
jge 0x10029c47
and dword [ebp - 0x218], 0
jmp 0x10029b75
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0x2614
jge 0x10029c42
and dword [ebp - 0x2b0], 0
jmp 0x10029b9b
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0x410a
jge 0x10029c3d
and dword [ebp - 0x220], 0
jmp 0x10029bc1
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x6154
jge 0x10029c38
mov eax, dword [ebp - 0x2f8]
imul eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x2b0]
shl eax, cl
mov ecx, dword [ebp - 0x220]
sar eax, cl
cdq
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0xa58], edx
push dword [ebp - 0xa58]
push dword [ebp - 0xa5c]
lea ecx, [ebp - 0x1094]
call fcn.1000dd90
pop ecx
pop ecx
mov dword [ebp - 0x944], eax
mov ecx, dword [ebp - 0x944]
call fcn.10033580
push eax
call fcn.10053d16
pop ecx
lea ecx, [ebp - 0x1094]
call fcn.10033576
jmp 0x10029bb4
jmp 0x10029b8e
jmp 0x10029b68
jmp 0x10029b42
mov dword [ebp - 0x4c], 0
jmp 0x10029c57
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x10029c73
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xc34]
call fcn.10033753
mov dword [eax], 7
jmp 0x10029c50
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x79c], 0x4b98
jge 0x10029c8f
push dword [ebp - 0xaf0]
call fcn.10053d16
pop ecx
jmp 0x10029cab
mov dword [ebp - 4], 0x1f
jmp 0x10029cbb
push 0x2724
push 0
push 0x2b44
lea eax, [ebp - 0x4c]
push eax
push 0x2933
lea eax, [ebp - 0xd58]
push eax
call fcn.100250c4
add esp, 0x18
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
mov dword [eax], 1
jmp 0x10029d18
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x540]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
cmp dword [eax], 0
jl 0x1002a05b
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x320], 0
jmp 0x10029d4e
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 3
jge 0x10029d6a
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0xfb0], 0
jmp 0x10029d41
mov dword [ebp - 0x34], 0
jmp 0x10029d7a
cmp dword [ebp - 0x34], 1
jg 0x1002a018
mov dword [ebp - 0xbd8], 1
push 0x132f
push 0x1a22
push 0x7501
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x228]
push eax
lea eax, [ebp - 0x880]
push eax
lea eax, [ebp - 0x3f4]
push eax
push 0x646d
push 0
push 0x299c
push 0x97
push 0
push 0x3140
call fcn.1000e1a7
add esp, 0x34
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
mov esi, dword [ebp - 0x104]
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
push dword [eax]
lea ecx, [ebp - 0x880]
call fcn.10033753
cmp esi, dword [eax]
jl 0x10029e13
mov dword [ebp - 0x6dc], 1
jmp 0x10029e1a
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xffffffff
jle 0x10029e2f
mov dword [ebp - 0x558], 1
jmp 0x10029e36
and dword [ebp - 0x558], 0
push 0
lea ecx, [ebp - 0xc34]
call fcn.10033753
mov eax, dword [eax]
mov dword [ebp - 0x228], eax
mov esi, dword [ebp - 0x228]
push 0
lea ecx, [ebp - 0xc34]
call fcn.10033753
cmp esi, dword [eax]
jge 0x10029e80
push 0
lea ecx, [ebp - 0x3f4]
call fcn.10033753
cmp dword [eax], 0
je 0x10029e80
mov dword [ebp - 0x548], 1
jmp 0x10029e87
and dword [ebp - 0x548], 0
mov esi, dword [ebp - 0x548]
sub esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0xd58]
call fcn.10033753
cmp esi, dword [eax]
jg 0x10029eb6
mov eax, 0xfc16
test eax, eax
je 0x10029eb6
mov dword [ebp - 0x848], 1
jmp 0x10029ebd
and dword [ebp - 0x848], 0
push 1
lea ecx, [ebp - 0x880]
call fcn.10033753
mov ecx, dword [ebp - 0x848]
cmp ecx, dword [eax]
jl 0x10029ee0
mov dword [ebp - 0x550], 1
jmp 0x10029ee7
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0xffffffff
jl 0x10029efc
mov dword [ebp - 0x6e4], 1
jmp 0x10029f03
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x6e4]
cmp dword [ebp - 0x558], eax
je 0x10029f26
cmp dword [ebp - 0x104], 0
jne 0x10029f26
mov dword [ebp - 0x94c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfb0]
mov dword [ebp - 0xe84], eax
mov eax, 0x1361131e
test eax, eax
je 0x10029faa
mov dword [ebp - 0x34], 1
jmp 0x1002a028
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x1002a056
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x1002a054
push 0x6ae5
push 0
push 0x1fe6
call fcn.10022c22
add esp, 0xc
jmp 0x1002a021
jmp 0x10029cf4
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0xd58]
call fcn.10033737
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xc34]
call fcn.10033737
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3f4]
call fcn.10033737
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x880]
call fcn.10033737
mov byte [ebp - 0xc6], 0
mov dword [ebp - 0xe58], 0xfffffff8
push 4
lea ecx, [ebp - 0xd4c]
call fcn.100336b5
mov byte [ebp - 4], 0x22
mov dword [ebp - 0xec], 0xffffffff
push 0x7dc6
push 0
lea eax, [ebp - 0xd4c]
push eax
push 0x3ac2
push 0x12e6
lea eax, [ebp - 0xf28]
push eax
push 0x372e
push 0
call fcn.1001b906
add esp, 0x20
push 0
push 0x34cd
lea eax, [ebp - 0xec]
push eax
push 1
push 0x3147
call fcn.1000dfb3
add esp, 0x14
mov dword [ebp - 0xec], 0
jmp 0x1002a127
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x1002a165
mov dword [ebp - 0x95c], 0x147b80be
push 0x70bf
push 0
lea eax, [ebp - 0xec]
push eax
push 0x7800
lea eax, [ebp - 0xd4c]
push eax
lea eax, [ebp - 0x95c]
push eax
call fcn.1000f852
add esp, 0x18
jmp 0x1002a11a
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd4c]
call fcn.10033737
lea eax, [ebp - 0xc6]
push eax
push 0x7ca3
push 0x2255
push 0x49ac
push 0x4b23
push 0x5f09
push 0x57b6
push 0
push 0x6220
call fcn.10011be3
add esp, 0x24
jmp 0x1002946d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcf8]
call fcn.10033737
mov dword [ebp - 0xc4], 0x6e83
mov dword [ebp - 0x570], 0x5e1abe8f
push 1
lea ecx, [ebp - 0xb4c]
call fcn.100336b5
mov dword [ebp - 4], 0x23
push 1
lea ecx, [ebp - 0xd10]
call fcn.100336b5
mov byte [ebp - 4], 0x24
mov dword [ebp - 0xd78], 0x18f0ed69
mov dword [ebp - 0xd74], 0x18f0ed69
mov dword [ebp - 0xd70], 0x18f0ed69
mov dword [ebp - 0xd6c], 0x18f0ed69
mov dword [ebp - 0xb00], 0xffff
mov dword [ebp - 0xe78], 0x9d07
push 0x557e
push 1
push 0x78b9
lea eax, [ebp - 0xb4c]
push eax
push 0x3a01
push 0
push 0x7650
push 0x4c50
push 0x6bc9
lea eax, [ebp - 0x1c]
push eax
call fcn.10014556
add esp, 0x28
mov dword [ebp - 0x1c], 0
jmp 0x1002a276
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002a28c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbf0], 0x2bf35dd7
jmp 0x1002a26f
mov dword [ebp - 0x1c], 0
jmp 0x1002a29c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1002a2b8
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xd10]
call fcn.10033753
mov dword [eax], 0xfffffffa
jmp 0x1002a295
mov dword [ebp - 0x1c], 0
jmp 0x1002a2c8
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002a2de
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xfc8], 0xffffffff
jmp 0x1002a2c1
cmp dword [ebp - 0xc4], 1
jne 0x1002a2f3
mov dword [ebp - 0x804], 1
jmp 0x1002a2fa
and dword [ebp - 0x804], 0
cmp dword [ebp - 0xc4], 0
jne 0x1002a315
cmp dword [ebp - 0xc4], 0
jne 0x1002a315
and dword [ebp - 0x7a4], 0
jmp 0x1002a31f
mov dword [ebp - 0x7a4], 1
cmp dword [ebp - 0x7a4], 0x62f6
jle 0x1002a337
mov dword [ebp - 0x37c], 1
jmp 0x1002a33e
and dword [ebp - 0x37c], 0
push 0
lea ecx, [ebp - 0xb4c]
call fcn.10033753
mov ecx, dword [ebp - 0x37c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x37c]
sub eax, dword [ebp - 0xc4]
cmp eax, 0x94b748ab
jb 0x1002a372
mov dword [ebp - 0x560], 1
jmp 0x1002a379
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 6
jge 0x1002a3a0
push 0
lea ecx, [ebp - 0xb4c]
call fcn.10033753
cmp dword [eax], 0
je 0x1002a3a0
mov dword [ebp - 0x6ec], 1
jmp 0x1002a3a7
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0x23cc
je 0x1002a3c5
cmp dword [ebp - 0xc4], 0
jne 0x1002a3c5
and dword [ebp - 0x568], 0
jmp 0x1002a3cf
mov dword [ebp - 0x568], 1
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x568], eax
jle 0x1002a3e9
mov dword [ebp - 0x3b4], 1
jmp 0x1002a3f0
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0xbf0], ecx
xor eax, eax
inc eax
cmp eax, 0x9b6cd04c
ja 0x1002a419
mov dword [ebp - 0x6f4], 1
jmp 0x1002a420
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
cmp eax, dword [ebp - 0x6f4]
jge 0x1002a458
push 0
lea ecx, [ebp - 0xb4c]
call fcn.10033753
cmp dword [eax], 0
je 0x1002a458
mov dword [ebp - 0x578], 1
jmp 0x1002a45f
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x578]
jg 0x1002a479
mov dword [ebp - 0x384], 1
jmp 0x1002a480
and dword [ebp - 0x384], 0
push 0
lea ecx, [ebp - 0xd10]
call fcn.10033753
mov ecx, dword [ebp - 0x384]
mov dword [eax], ecx
cmp dword [ebp - 0x384], 0x1639
je 0x1002a4ad
mov dword [ebp - 0x3e4], 1
jmp 0x1002a4b4
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0xd78], ecx
cmp dword [ebp - 0x3e4], 0xd91b
jne 0x1002a51b
mov dword [ebp - 0x964], 0xffffffff
push 0x3727
push 0x7f7d
push 0x3a32
push 0
push 0x4cb3
push 1
push 0x6f28
lea eax, [ebp - 0x964]
push eax
push 0x3707
push 0x2c7d
push 0
push 0x2f6d
call fcn.1002468c
add esp, 0x30
jmp 0x1002a553
mov dword [ebp - 0xf3c], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xfc8], 0xb481d3ef
push 0
push 0x4755
push 0
push 0x1d1b
lea eax, [ebp - 0xb00]
push eax
call fcn.1001b541
add esp, 0x14
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0xd10]
call fcn.10033737
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4c]
call fcn.10033737
cmp dword [ebp - 0x3d8], 0
jle 0x1002f54b
mov dword [ebp - 0x7c], 0x76942a1e
mov dword [ebp - 0x834], 0x210e164c
mov dword [ebp - 0x230], 0xb051af7f
mov dword [ebp - 0x38c], 0x3d4a1cf0
mov dword [ebp - 0xbe0], 0xffffffff
mov dword [ebp - 0x2b8], 0
jmp 0x1002a5c6
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x1002a5e2
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x96c], 0x9f196e6c
jmp 0x1002a5b9
push 0x48d4
push 1
push 0x5803
push 0x1f57
push 0x3aba
push 0x15b8
push 0
push 0x5af4
push 0x41cb
push 0x453e
push 0x68f4
call fcn.1000e485
add esp, 0x2c
cmp dword [ebp - 0x7c], 0
jne 0x1002a698
mov dword [ebp - 0x230], 0xffffffff
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x230]
jge 0x1002a645
mov dword [ebp - 0x7ac], 1
jmp 0x1002a64c
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x7ac], eax
jl 0x1002a666
mov dword [ebp - 0x580], 1
jmp 0x1002a66d
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x580]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xe80], eax
cmp dword [ebp - 0x38c], 0
jne 0x1002a698
and dword [ebp - 0x6fc], 0
jmp 0x1002a6a2
mov dword [ebp - 0x6fc], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x6fc], eax
jne 0x1002a6c2
cmp dword [ebp - 0x38c], 0
je 0x1002a6c2
mov dword [ebp - 0x3bc], 1
jmp 0x1002a6c9
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0x96c], ecx
mov eax, dword [ebp - 0x3bc]
sub eax, dword [ebp - 0x7c]
cmp eax, 0xe5878ed7
ja 0x1002a6f8
mov dword [ebp - 0x588], 1
jmp 0x1002a6ff
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x7c]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x7c]
imul eax, dword [ebp - 0x588]
mov ecx, dword [ebp - 0x834]
add ecx, eax
add ecx, dword [ebp - 0x7c]
mov dword [ebp - 0xbe0], ecx
mov dword [ebp - 0x238], 0x399841b3
push 2
lea ecx, [ebp - 0xec4]
call fcn.100336b5
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x300], 0
jmp 0x1002a75e
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x1002a77d
push dword [ebp - 0x300]
lea ecx, [ebp - 0xec4]
call fcn.10033753
or dword [eax], 0xffffffff
jmp 0x1002a751
mov dword [ebp - 0x238], 8
jmp 0x1002a796
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xffffffe3
jle 0x1002a84a
mov dword [ebp - 0x2c0], 0x748f69f7
mov dword [ebp - 0x2c0], 1
jmp 0x1002a7c6
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jl 0x1002a845
mov dword [ebp - 0x240], 0x9dd952ea
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x1002a7f6
push 0x199e
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov dword [ebp - 0x240], 0
jmp 0x1002a80f
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jg 0x1002a840
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1002a83e
push 0x2516
push 0
push 0x2e55
call fcn.1001a8cb
add esp, 0xc
jmp 0x1002a802
jmp 0x1002a7b9
jmp 0x1002a789
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec4]
call fcn.10033737
mov dword [ebp - 0xcc], 0x6e83
mov dword [ebp - 0x97c], 8
mov dword [ebp - 0xbf8], 0xc3c39ba0
mov dword [ebp - 0x984], 1
mov dword [ebp - 0xb10], 0xfffffff9
mov dword [ebp - 0x98c], 0xc3d6c1df
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x1002aa4a
push 0x51d7
push 0x7418
push 0
push 0x26d9
push 0x1de1
call fcn.1001a385
add esp, 0x14
mov dword [ebp - 0x590], 0x279d
mov dword [ebp - 0xb08], 0x10009bc0
cmp dword [ebp - 0x590], 0x295c
jle 0x1002aa05
and dword [ebp - 0x250], 0
jmp 0x1002a903
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0x330
jge 0x1002a9fb
and dword [ebp - 0x2c8], 0
jmp 0x1002a929
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0x2419
jge 0x1002a9f6
and dword [ebp - 0x340], 0
jmp 0x1002a94f
cmp dword [ebp - 0x340], 0x6876
jge 0x1002a9f1
and dword [ebp - 0x248], 0
jmp 0x1002a975
cmp dword [ebp - 0x248], 0x6e88
jge 0x1002a9ec
jmp 0x1002a91c
jmp 0x1002a8f6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
mov dword [ebp - 4], 0x26
cmp dword [ebp - 0x590], 0x247f
jge 0x1002aa24
push dword [ebp - 0xb08]
call fcn.10053d16
pop ecx
jmp 0x1002aa40
or dword [ebp - 4], 0xffffffff
jmp 0x1002aa4a
lea eax, [ebp - 0x97c]
push eax
push 0x2d1b
lea eax, [ebp - 0xbf8]
push eax
push 0x735e
push 0x481f
push 0x6428
push 0xd6
lea eax, [ebp - 0x984]
push eax
push 0
lea eax, [ebp - 0xb10]
push eax
push 0x3edb
push 1
lea eax, [ebp - 0x98c]
push eax
call fcn.1000e1a7
add esp, 0x34
mov dword [ebp - 0x4d4], 0x5e1abe8f
push 1
lea ecx, [ebp - 0xb9c]
call fcn.100336b5
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x2c], 0xd013d0bb
push 1
lea ecx, [ebp - 0xb5c]
call fcn.100336b5
mov byte [ebp - 4], 0x29
lea eax, [ebp - 0xf38]
push eax
push 0
lea eax, [ebp - 0xb5c]
push eax
push 0x3574
push 0x71d6
push 1
call fcn.1000deb3
add esp, 0x18
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xe88], eax
mov eax, 0xf3faa32f
test eax, eax
je 0x1002ab1b
or eax, 0xffffffff
je 0x1002ab1b
mov dword [ebp - 0x704], 1
jmp 0x1002ab22
and dword [ebp - 0x704], 0
cmp dword [ebp - 0x704], 0xc3414b5
jne 0x1002ab3a
mov dword [ebp - 0xbe8], 1
jmp 0x1002ab41
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd8c], eax
cmp dword [ebp - 0x14], 0xe64fd9e2
jne 0x1002ab5f
mov dword [ebp - 0x598], 1
jmp 0x1002ab66
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x14]
jge 0x1002ab83
mov dword [ebp - 0x7b4], 1
jmp 0x1002ab8a
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x7b4], eax
jg 0x1002aba1
mov dword [ebp - 0x5a0], 1
jmp 0x1002aba8
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5a0], eax
jne 0x1002abbf
mov dword [ebp - 0x70c], 1
jmp 0x1002abc6
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x70c]
cmp eax, dword [ebp - 0x14]
je 0x1002abe3
cmp dword [ebp - 0x14], 0
jne 0x1002abe3
and dword [ebp - 0x5a8], 0
jmp 0x1002abed
mov dword [ebp - 0x5a8], 1
cmp dword [ebp - 0x5a8], 1
je 0x1002ac02
mov dword [ebp - 0x80c], 1
jmp 0x1002ac09
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x80c], eax
jl 0x1002ac20
mov dword [ebp - 4], 0x53
cmp dword [ebp - 0x838], 0x2b89
jge 0x1002f56a
push dword [ebp - 0x9c0]
call fcn.10053d16
pop ecx
jmp 0x1002f586
or dword [ebp - 4], 0xffffffff
jmp 0x1002f590
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret