Function at 0x1002b070
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10079991
mov eax, dword fs:[0]
push eax
sub esp, 0x790
mov eax, dword [0x10098f00]
xor eax, ebp
mov dword [ebp - 0x9c], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x770], ecx
mov eax, dword [ebp - 0x770]
cmp dword [eax + 0x3c], 0
jne 0x1002b0b5
jmp 0x1002c8f2
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x2c8], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x2b0], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x4f0], 0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x2a8], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x68], 0xff
mov dword [ebp - 0x10], 0xff
mov dword [ebp - 0x4c], 0xff
call fcn.10015760
mov ecx, eax
call fcn.10042d60
mov ecx, eax
call fcn.10030430
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x28], 0
mov word [ebp - 0x4e4], 0
push 0x206
push 0
lea edx, [ebp - 0x4e2]
push edx
call fcn.1005bf00
add esp, 0xc
mov word [ebp - 0x2a4], 0
push 0x206
push 0
lea eax, [ebp - 0x2a2]
push eax
call fcn.1005bf00
add esp, 0xc
lea ecx, [ebp - 0x2d8]
call fcn.1002dd40
mov ecx, dword [ebp + 8]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1002dd70
mov dword [ebp - 4], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x94], 0
lea edx, [ebp - 0x4f8]
push edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax + 0x3c]
add ecx, 4
call fcn.10022520
jmp 0x1002b2c5
push 0
lea ecx, [ebp - 0x578]
push ecx
lea ecx, [ebp - 0x4f8]
call fcn.1002dbc0
lea edx, [ebp - 0x580]
push edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax + 0x3c]
add ecx, 4
call fcn.10033780
push eax
lea ecx, [ebp - 0x4f8]
call fcn.1003e630
movzx ecx, al
test ecx, ecx
je 0x1002c8d9
lea ecx, [ebp - 0x4f8]
call fcn.1002dba0
mov dword [ebp - 0x500], eax
cmp dword [ebp - 0x500], 0
je 0x1002b351
push str.Display
mov ecx, dword [ebp - 0x500]
call fcn.100110d0
push eax
call fcn.1005eb9c
add esp, 8
test eax, eax
jne 0x1002b32f
jmp 0x1002b2b1
push 0x10083f98
mov ecx, dword [ebp - 0x500]
call fcn.100110d0
push eax
call fcn.1005eb9c
add esp, 8
test eax, eax
jne 0x1002b351
jmp 0x1002b2b1
lea ecx, [ebp - 0x4f8]
call fcn.1002dba0
add eax, 0x1c
mov dword [ebp - 0x510], eax
jne 0x1002b36c
jmp 0x1002b2b1
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
jne 0x1002b388
jmp 0x1002b2b1
lea ecx, [ebp - 0x4f8]
call fcn.1002dba0
push eax
mov ecx, dword [ebp - 0x770]
mov edx, dword [ecx + 0x40]
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax + 0x40]
mov edx, dword [edx]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x504], eax
mov dword [ebp - 0x50c], 0
cmp dword [ebp - 0x504], 0
je 0x1002b3d4
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x50c], edx
lea ecx, [ebp - 0x4f8]
call fcn.1002dba0
push eax
mov eax, dword [ebp - 0x770]
mov ecx, dword [eax + 0x44]
mov edx, dword [ebp - 0x770]
mov eax, dword [edx + 0x44]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x508], 0
je 0x1002b422
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x4fc], edx
lea eax, [ebp - 0x51c]
push eax
mov ecx, dword [ebp - 0x514]
add ecx, 4
call fcn.10022520
jmp 0x1002b44d
push 0
lea ecx, [ebp - 0x588]
push ecx
lea ecx, [ebp - 0x51c]
call fcn.1002dbc0
lea edx, [ebp - 0x590]
push edx
mov ecx, dword [ebp - 0x514]
add ecx, 4
call fcn.10033780
push eax
lea ecx, [ebp - 0x51c]
call fcn.1003e630
movzx eax, al
test eax, eax
je 0x1002c8d4
lea ecx, [ebp - 0x51c]
call fcn.1002dba0
mov dword [ebp - 0x534], eax
lea ecx, [ebp - 0x51c]
call fcn.1002dba0
add eax, 0x1c
mov dword [ebp - 0x528], eax
jne 0x1002b4a2
jmp 0x1002b439
mov ecx, dword [ebp - 0x528]
mov edx, dword [ecx]
mov dword [ebp - 0x524], edx
cmp dword [ebp - 0x524], 0
jne 0x1002b4be
jmp 0x1002b439
mov dword [ebp - 0x5c], 0
lea ecx, [ebp - 0x51c]
call fcn.1002dba0
push eax
mov eax, dword [ebp - 0x50c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x50c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x530], eax
mov dword [ebp - 0x52c], 0
cmp dword [ebp - 0x530], 0
je 0x1002b50b
mov ecx, dword [ebp - 0x530]
mov edx, dword [ecx]
mov dword [ebp - 0x52c], edx
lea ecx, [ebp - 0x51c]
call fcn.1002dba0
push eax
mov eax, dword [ebp - 0x4fc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x4fc]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x538], 0
cmp dword [ebp - 0x520], 0
je 0x1002b551
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx]
mov dword [ebp - 0x538], edx
mov eax, dword [ebp - 0x538]
cmp dword [eax + 4], 0
jne 0x1002b562
jmp 0x1002b439
mov dword [ebp - 0x64], 0
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0x18], 0
je 0x1002b6a1
mov dword [ebp - 0x5c], 0xffffffff
push 0x10083fa8
lea ecx, [ebp - 0x5ac]
call fcn.10001230
mov byte [ebp - 4], 1
lea edx, [ebp - 0x5ac]
push edx
mov eax, dword [ebp - 0x524]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x524]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5ac]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002b632
cmp dword [ebp - 0x52c], 0
je 0x1002b626
push str.imageDisable
lea ecx, [ebp - 0x5c8]
call fcn.10001230
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x5c8]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52c]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5c8]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b626
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x98], 0
jmp 0x1002b69c
cmp dword [ebp - 0x52c], 0
je 0x1002b692
push 0x10083fe0
lea ecx, [ebp - 0x5e4]
call fcn.10001230
mov byte [ebp - 4], 3
lea edx, [ebp - 0x5e4]
push edx
mov eax, dword [ebp - 0x52c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x52c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x5e4]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b692
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x98], 3
jmp 0x1002bbd9
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0x24], 0
jne 0x1002b813
mov dword [ebp - 0x5c], 0
push 0x10083fec
lea ecx, [ebp - 0x600]
call fcn.10001230
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x600]
push ecx
mov edx, dword [ebp - 0x524]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x524]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x600]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002b75e
cmp dword [ebp - 0x52c], 0
je 0x1002b75e
push 0x10083ff8
lea ecx, [ebp - 0x61c]
call fcn.10001230
mov byte [ebp - 4], 5
lea eax, [ebp - 0x61c]
push eax
mov ecx, dword [ebp - 0x52c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x52c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x61c]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b75e
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
push 0x10084004
lea ecx, [ebp - 0x638]
call fcn.10001230
mov byte [ebp - 4], 6
lea eax, [ebp - 0x638]
push eax
mov ecx, dword [ebp - 0x524]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x524]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x638]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002b804
cmp dword [ebp - 0x52c], 0
je 0x1002b804
push 0x10084020
lea ecx, [ebp - 0x654]
call fcn.10001230
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x654]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52c]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x654]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b804
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x98], 0
jmp 0x1002bbd9
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0x24], 2
jne 0x1002b94b
mov dword [ebp - 0x5c], 2
push 0x1008402c
lea ecx, [ebp - 0x670]
call fcn.10001230
mov byte [ebp - 4], 8
lea eax, [ebp - 0x670]
push eax
mov ecx, dword [ebp - 0x524]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x524]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x670]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002b8dc
cmp dword [ebp - 0x52c], 0
je 0x1002b8d0
push 0x10084044
lea ecx, [ebp - 0x68c]
call fcn.10001230
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x68c]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52c]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x68c]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b8d0
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x98], 0
jmp 0x1002b946
cmp dword [ebp - 0x52c], 0
je 0x1002b93c
push 0x1008405c
lea ecx, [ebp - 0x6a8]
call fcn.10001230
mov byte [ebp - 4], 0xa
lea edx, [ebp - 0x6a8]
push edx
mov eax, dword [ebp - 0x52c]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x52c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6a8]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002b93c
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x98], 1
jmp 0x1002bbd9
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0x24], 1
jne 0x1002ba83
mov dword [ebp - 0x5c], 1
push 0x10084068
lea ecx, [ebp - 0x6c4]
call fcn.10001230
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6c4]
push ecx
mov edx, dword [ebp - 0x524]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x524]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6c4]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002ba14
cmp dword [ebp - 0x52c], 0
je 0x1002ba08
push 0x1008407c
lea ecx, [ebp - 0x6e0]
call fcn.10001230
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x6e0]
push eax
mov ecx, dword [ebp - 0x52c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x52c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6e0]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002ba08
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x98], 0
jmp 0x1002ba7e
cmp dword [ebp - 0x52c], 0
je 0x1002ba74
push 0x10084090
lea ecx, [ebp - 0x6fc]
call fcn.10001230
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x6fc]
push eax
mov ecx, dword [ebp - 0x52c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x52c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x6fc]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002ba74
mov ecx, dword [ebp - 0x2bc]
mov edx, dword [ecx]
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x98], 2
jmp 0x1002bbd9
push 0x1008409c
lea ecx, [ebp - 0x718]
call fcn.10001230
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x718]
push eax
mov ecx, dword [ebp - 0x524]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x524]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x718]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002bb29
cmp dword [ebp - 0x52c], 0
je 0x1002bb29
push 0x100840a8
lea ecx, [ebp - 0x734]
call fcn.10001230
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x734]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52c]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x734]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002bb29
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
push str.imageDisplay
lea ecx, [ebp - 0x750]
call fcn.10001230
mov byte [ebp - 4], 0x10
lea edx, [ebp - 0x750]
push edx
mov eax, dword [ebp - 0x524]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x524]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x750]
call fcn.10001270
cmp dword [ebp - 0x50], 0
je 0x1002bbcf
cmp dword [ebp - 0x52c], 0
je 0x1002bbcf
push 0x100840d0
lea ecx, [ebp - 0x76c]
call fcn.10001230
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x76c]
push ecx
mov edx, dword [ebp - 0x52c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x52c]
mov edx, dword [eax + 0x1c]
call edx
mov dword [ebp - 0x2bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x76c]
call fcn.10001270
cmp dword [ebp - 0x2bc], 0
je 0x1002bbcf
mov eax, dword [ebp - 0x2bc]
mov ecx, dword [eax]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x98], 0
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x28]
mov dword [ebp - 0x2ac], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x34]
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x98], 0
jne 0x1002bc53
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x64]
mov dword [ebp - 0x2b8], edx
jmp 0x1002be09
cmp dword [ebp - 0x98], 1
jne 0x1002bcdb
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0x68], 1
jne 0x1002bca0
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x6c]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x70]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x74]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x78]
mov dword [ebp - 0x2b8], edx
jmp 0x1002bcd6
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x58]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x5c]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x60]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x64]
mov dword [ebp - 0x2b8], ecx
jmp 0x1002be09
cmp dword [ebp - 0x98], 2
jne 0x1002bd73
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0x7c], 1
jne 0x1002bd38
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x80]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x84]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x88]
mov dword [ebp - 0x4e8], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x8c]
mov dword [ebp - 0x2b8], ecx
jmp 0x1002bd6e
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x58]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x5c]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x60]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x64]
mov dword [ebp - 0x2b8], eax
jmp 0x1002be09
cmp dword [ebp - 0x98], 3
jne 0x1002be09
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0x90], 0
je 0x1002bdd3
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x94]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x98]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x9c]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0xa0]
mov dword [ebp - 0x2b8], eax
jmp 0x1002be09
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x58]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x5c]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x60]
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x64]
mov dword [ebp - 0x2b8], edx
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0x14], 1
jne 0x1002c11c
mov dword [ebp - 0x53c], 0
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0x18], 1
jne 0x1002be42
mov ecx, dword [ebp - 0x2c0]
call fcn.1002df50
mov dword [ebp - 0x53c], eax
jmp 0x1002bea4
cmp dword [ebp - 0x5c], 1
jne 0x1002be5b
mov ecx, dword [ebp - 0x2c0]
call fcn.1002df30
mov dword [ebp - 0x53c], eax
jmp 0x1002bea4
cmp dword [ebp - 0x5c], 2
jne 0x1002be74
mov ecx, dword [ebp - 0x2c0]
call fcn.1002df10
mov dword [ebp - 0x53c], eax
jmp 0x1002bea4
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0x1c], 1
jne 0x1002be93
mov ecx, dword [ebp - 0x2c0]
call fcn.1002df70
mov dword [ebp - 0x53c], eax
jmp 0x1002bea4
mov ecx, dword [ebp - 0x2c0]
call fcn.1002def0
mov dword [ebp - 0x53c], eax
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x48]
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0x50]
mov dword [ebp - 0x84], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0x54]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x2c0]
call fcn.10010f70
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x540], 0
mov dword [ebp - 0x548], 0
mov dword [ebp - 0x54c], 0
mov ecx, dword [ebp - 0x53c]
call fcn.10044a60
mov dword [ebp - 0x540], eax
mov ecx, dword [ebp - 0x53c]
call fcn.10028f00
mov dword [ebp - 0x548], eax
mov ecx, dword [ebp - 0x53c]
call fcn.1002ded0
mov dword [ebp - 0x54c], eax
fild dword [ebp - 0x78]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x4f0]
fstp dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x540]
fild dword [edx + 8]
fstp dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x540]
fild dword [eax + 0xc]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
mov ecx, dword [ebp - 0x540]
fild dword [ecx + 0xc]
push ecx
fstp dword [esp]
mov edx, dword [ebp - 0x540]
fild dword [edx + 8]
push ecx
fstp dword [esp]
mov eax, dword [ebp - 0x540]
fild dword [eax + 4]
push ecx
fstp dword [esp]
mov ecx, dword [ebp - 0x540]
fild dword [ecx]
push ecx
fstp dword [esp]
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
mov edx, dword [ebp - 0x78]
add edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x54c]
sub edx, dword [eax + 8]
mov dword [ebp - 0x774], edx
fild dword [ebp - 0x774]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x4f0]
fstp dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x54c]
fild dword [ecx + 8]
fstp dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x54c]
fild dword [edx + 0xc]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
mov eax, dword [ebp - 0x54c]
fild dword [eax + 0xc]
push ecx
fstp dword [esp]
mov ecx, dword [ebp - 0x54c]
fild dword [ecx + 8]
push ecx
fstp dword [esp]
mov edx, dword [ebp - 0x54c]
fild dword [edx + 4]
push ecx
fstp dword [esp]
mov eax, dword [ebp - 0x54c]
fild dword [eax]
push ecx
fstp dword [esp]
lea ecx, [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x544]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
mov ecx, dword [ebp - 0x540]
mov edx, dword [ebp - 0x78]
add edx, dword [ecx + 8]
mov dword [ebp - 0x778], edx
fild dword [ebp - 0x778]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x4f0]
fstp dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x540]
mov ecx, dword [ebp - 0x84]
sub ecx, dword [eax + 8]
mov edx, dword [ebp - 0x54c]
sub ecx, dword [edx + 8]
mov dword [ebp - 0x77c], ecx
fild dword [ebp - 0x77c]
fstp dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x548]
fild dword [eax + 0xc]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
mov ecx, dword [ebp - 0x548]
fild dword [ecx + 0xc]
push ecx
fstp dword [esp]
mov edx, dword [ebp - 0x548]
fild dword [edx + 8]
push ecx
fstp dword [esp]
mov eax, dword [ebp - 0x548]
fild dword [eax + 4]
push ecx
fstp dword [esp]
mov ecx, dword [ebp - 0x548]
fild dword [ecx]
push ecx
fstp dword [esp]
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
cmp dword [ebp - 0x64], 0
je 0x1002c795
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0xb4], 0xffffffff
jne 0x1002c1b3
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0xb8], 0xffffffff
jne 0x1002c1b3
fild dword [ebp - 0x2ac]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x2d4]
fild dword [ebp - 0x20]
fstp dword [ebp - 0x2d0]
fild dword [ebp - 0x2c8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea ecx, [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c795
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0xb4], 0xffffffff
je 0x1002c436
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0xb8], 0xffffffff
je 0x1002c436
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0xb4], 1
jne 0x1002c266
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0xb8], 1
jne 0x1002c266
fild dword [ebp - 0x2ac]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x2d4]
fild dword [ebp - 0x20]
fstp dword [ebp - 0x2d0]
fild dword [ebp - 0x2c8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c431
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
test edx, edx
jne 0x1002c283
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
mov dword [ebp - 0x38], eax
jmp 0x1002c293
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
add eax, 1
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
test edx, edx
jne 0x1002c2b6
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
mov dword [ebp - 0x2c], eax
jmp 0x1002c2c9
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
add eax, 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x550], 0
jmp 0x1002c2e4
mov edx, dword [ebp - 0x550]
add edx, 1
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x38]
jge 0x1002c431
mov dword [ebp - 0x554], 0
jmp 0x1002c30e
mov ecx, dword [ebp - 0x554]
add ecx, 1
mov dword [ebp - 0x554], ecx
mov edx, dword [ebp - 0x554]
cmp edx, dword [ebp - 0x2c]
jge 0x1002c42c
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x550]
add eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x780], eax
fild dword [ebp - 0x780]
fstp dword [ebp - 0x2d8]
mov ecx, dword [ebp - 0x2b8]
imul ecx, dword [ebp - 0x554]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x784], ecx
fild dword [ebp - 0x784]
fstp dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x38]
sub edx, 1
cmp dword [ebp - 0x550], edx
jne 0x1002c398
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x550]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x788], ecx
fild dword [ebp - 0x788]
fstp dword [ebp - 0x2d0]
jmp 0x1002c3a4
fild dword [ebp - 0x4e8]
fstp dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x2c]
sub edx, 1
cmp dword [ebp - 0x554], edx
jne 0x1002c3db
mov eax, dword [ebp - 0x2b8]
imul eax, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x2c8]
sub ecx, eax
mov dword [ebp - 0x78c], ecx
fild dword [ebp - 0x78c]
fstp dword [ebp - 0x2cc]
jmp 0x1002c3e7
fild dword [ebp - 0x2b8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea edx, [ebp - 0x2d8]
push edx
mov eax, dword [ebp - 0x64]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c2ff
jmp 0x1002c2d5
jmp 0x1002c795
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0xb4], 0xffffffff
je 0x1002c5e2
mov eax, dword [ebp - 0x538]
cmp dword [eax + 0xb4], 1
jne 0x1002c4c7
fild dword [ebp - 0x2ac]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x2d4]
fild dword [ebp - 0x20]
fstp dword [ebp - 0x2d0]
fild dword [ebp - 0x2c8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea ecx, [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c5dd
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
test edx, edx
jne 0x1002c4e4
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
mov dword [ebp - 0x38], eax
jmp 0x1002c4f4
mov eax, dword [ebp - 0x20]
cdq
idiv dword [ebp - 0x4e8]
add eax, 1
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x558], 0
jmp 0x1002c50f
mov ecx, dword [ebp - 0x558]
add ecx, 1
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x558]
cmp edx, dword [ebp - 0x38]
jge 0x1002c5dd
mov eax, dword [ebp - 0x4e8]
imul eax, dword [ebp - 0x558]
add eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x790], eax
fild dword [ebp - 0x790]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x2d4]
mov ecx, dword [ebp - 0x38]
sub ecx, 1
cmp dword [ebp - 0x558], ecx
jne 0x1002c580
mov edx, dword [ebp - 0x4e8]
imul edx, dword [ebp - 0x558]
mov eax, dword [ebp - 0x20]
sub eax, edx
mov dword [ebp - 0x794], eax
fild dword [ebp - 0x794]
fstp dword [ebp - 0x2d0]
jmp 0x1002c58c
fild dword [ebp - 0x4e8]
fstp dword [ebp - 0x2d0]
fild dword [ebp - 0x2b8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea ecx, [ebp - 0x2d8]
push ecx
mov edx, dword [ebp - 0x64]
mov eax, dword [edx + 4]
push eax
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c500
jmp 0x1002c795
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0xb8], 0xffffffff
je 0x1002c795
mov edx, dword [ebp - 0x538]
cmp dword [edx + 0xb8], 1
jne 0x1002c673
fild dword [ebp - 0x2ac]
fstp dword [ebp - 0x2d8]
fild dword [ebp - 0x1c]
fstp dword [ebp - 0x2d4]
fild dword [ebp - 0x20]
fstp dword [ebp - 0x2d0]
fild dword [ebp - 0x2c8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx + 4]
push edx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c795
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
test edx, edx
jne 0x1002c696
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
mov dword [ebp - 0x2c], eax
jmp 0x1002c6a9
mov eax, dword [ebp - 0x2c8]
cdq
idiv dword [ebp - 0x2b8]
add eax, 1
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x55c], 0
jmp 0x1002c6c4
mov eax, dword [ebp - 0x55c]
add eax, 1
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
cmp ecx, dword [ebp - 0x2c]
jge 0x1002c795
fild dword [ebp - 0x2ac]
fstp dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x2b8]
imul edx, dword [ebp - 0x55c]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x798], edx
fild dword [ebp - 0x798]
fstp dword [ebp - 0x2d4]
fild dword [ebp - 0x4e8]
fstp dword [ebp - 0x2d0]
mov eax, dword [ebp - 0x2c]
sub eax, 1
cmp dword [ebp - 0x55c], eax
jne 0x1002c744
mov ecx, dword [ebp - 0x2b8]
imul ecx, dword [ebp - 0x55c]
mov edx, dword [ebp - 0x2c8]
sub edx, ecx
mov dword [ebp - 0x79c], edx
fild dword [ebp - 0x79c]
fstp dword [ebp - 0x2cc]
jmp 0x1002c750
fild dword [ebp - 0x2b8]
fstp dword [ebp - 0x2cc]
push 0
push 0
push 0
push 2
fild dword [ebp - 0x2b8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x4e8]
push ecx
fstp dword [esp]
fild dword [ebp - 0x58]
push ecx
fstp dword [esp]
fild dword [ebp - 0x40]
push ecx
fstp dword [esp]
lea eax, [ebp - 0x2d8]
push eax
mov ecx, dword [ebp - 0x64]
mov edx, dword [ecx + 4]
push edx
lea ecx, [ebp - 0x48]
call fcn.1002ddd0
jmp 0x1002c6b5
mov ecx, dword [ebp - 0x538]
add ecx, 0xbc
call fcn.10010f90
movzx eax, al
test eax, eax
jne 0x1002c8cf
mov dword [ebp - 0x570], 0
mov dword [ebp - 0x56c], 0
mov dword [ebp - 0x568], 0
mov dword [ebp - 0x564], 0
mov ecx, dword [ebp - 0x538]
mov edx, dword [ecx + 0xa8]
mov dword [ebp - 0x570], edx
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0xa4]
mov dword [ebp - 0x56c], ecx
mov edx, dword [ebp - 0x538]
mov eax, dword [ebp - 0x570]
add eax, dword [edx + 0xac]
mov dword [ebp - 0x568], eax
mov ecx, dword [ebp - 0x538]
mov edx, dword [ebp - 0x56c]
add edx, dword [ecx + 0xb0]
mov dword [ebp - 0x564], edx
mov ecx, dword [ebp - 0x538]
add ecx, 0xbc
call fcn.10010f70
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x538]
mov ecx, dword [eax + 0xe4]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.GDI32.dll_SelectObject]
push 1
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.GDI32.dll_SetBkMode]
mov ecx, dword [ebp - 0x538]
cmp dword [ecx + 0x18], 1
jne 0x1002c88c
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0xe8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
jmp 0x1002c8a3
mov edx, dword [ebp - 0x538]
mov eax, dword [edx + 0xe8]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.GDI32.dll_SetTextColor]
push 5
lea edx, [ebp - 0x570]
push edx
mov eax, dword [ebp - 0x560]
push eax
mov ecx, dword [ebp - 0x538]
add ecx, 0xbc
call fcn.100110d0
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.USER32.dll_DrawTextW]
jmp 0x1002b439
jmp 0x1002b2b1
mov edx, dword [ebp - 0x24]
push edx
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x48]
call fcn.1002ddb0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x9c]
xor ecx, ebp
call fcn.1005b2a2
mov esp, ebp
pop ebp
ret 4