Function at 0x1002aabd
Capabilities:
Get common file path
Get disk information
Get geographical location
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10077609
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x4b0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 3
lea ecx, [ebp - 0x3d0]
call fcn.10025cee
and dword [ebp - 4], 0
mov dword [ebp - 0x30], 0
jmp 0x1002ab03
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002ab1f
push dword [ebp - 0x30]
lea ecx, [ebp - 0x3d0]
call fcn.10025d6c
mov dword [eax], 0xfdf99ff6
jmp 0x1002aafc
mov dword [ebp - 0x30], 0
jmp 0x1002ab2f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1002ab45
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x360], 0x32667a87
jmp 0x1002ab28
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x360], 0
jmp 0x1002ab70
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x360]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x360], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x360], 3
jge 0x1002ab9e
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x360]
lea ecx, [ebp - 0x3d0]
call fcn.10025d6c
mov dword [eax], 3
jmp 0x1002ab57
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3d0]
call fcn.10025d50
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0xe0], 0x9c3997b0
mov dword [ebp - 0x15c], 0xfffffff9
mov dword [ebp - 0x60], 0x4f4cc511
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x2e8], 0x21b9
cmp dword [ebp - 0x2e8], 0x889
jge 0x1002ad1d
lea eax, [ebp - 0x3a4]
push eax
lea eax, [ebp - 0xf8]
push eax
push 0x10008890
call fcn.1005e2fb
add esp, 0xc
mov dword [ebp - 0xc8], 0xa
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1d8], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1d4], eax
xor eax, eax
inc eax
je 0x1002ad04
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push dword [ebp - 0xf4]
push dword [ebp - 0xf8]
call fcn.10076830
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], edx
mov eax, dword [ebp - 0x320]
add eax, 1
mov ecx, dword [ebp - 0x31c]
adc ecx, 0
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push ecx
push eax
call fcn.10076830
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], edx
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x3a0]
jl 0x1002acba
jg 0x1002acb8
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x3a4]
jbe 0x1002acba
jmp 0x1002ad04
mov eax, dword [ebp - 0xf8]
sub eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0xf4]
sbb ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1d4], ecx
push 0
push 0xa
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
call fcn.10062420
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], edx
jmp 0x1002ac37
push dword [ebp - 0x1d4]
push dword [ebp - 0x1d8]
push 0x1000889c
call fcn.1005e68c
add esp, 0xc
mov dword [ebp - 0x70], 0xb0ce
mov dword [ebp - 0x260], 0xe548e01a
mov dword [ebp - 0x30c], 0x771b7056
cmp dword [ebp - 0x2c], 0
je 0x1002ae41
imul eax, dword [ebp - 0x2c], 0x1c77
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x2c]
je 0x1002ad66
mov dword [ebp - 0x2ec], 1
jmp 0x1002ad6d
and dword [ebp - 0x2ec], 0
mov eax, 0x68f6
neg eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x2c]
jg 0x1002ad91
mov dword [ebp - 0x304], 1
jmp 0x1002ad98
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x60]
jg 0x1002adac
mov dword [ebp - 0x27c], 1
jmp 0x1002adb3
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0x637b3047
je 0x1002add7
mov dword [ebp - 0x26c], 1
jmp 0x1002adde
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
je 0x1002adf0
cmp dword [ebp - 0x60], 0
mov eax, dword [ebp - 0xe0]
cmp eax, dword [ebp - 0x60]
jle 0x1002ae07
mov dword [ebp - 0x274], 1
jmp 0x1002ae0e
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x274], 0xfffffff8
jb 0x1002ae23
mov dword [ebp - 0x114], 1
jmp 0x1002ae2a
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x114], eax
jle 0x1002ae41
mov dword [ebp - 0x110], 1
jmp 0x1002ae48
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x110], eax
jl 0x1002ae5f
mov dword [ebp - 0x1dc], 1
jmp 0x1002ae66
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1dc]
sub eax, dword [ebp - 0x70]
cmp dword [ebp - 0x2c], eax
jne 0x1002ae84
mov dword [ebp - 0x118], 1
jmp 0x1002ae8b
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x260], eax
mov eax, dword [ebp - 0x260]
sub eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x2c]
jg 0x1002aeb1
mov dword [ebp - 0x120], 1
jmp 0x1002aeb8
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x30c], eax
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1002aee2
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
mov dword [ebp - 0x54], 0x831713b9
mov dword [ebp - 0xb4], 0
jmp 0x1002af02
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1002af1e
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x49c], 0
jmp 0x1002aef5
mov dword [ebp - 0x54], 2
jmp 0x1002af2e
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jge 0x1002b0d1
push 3
lea ecx, [ebp - 0x2d8]
call fcn.10025cee
mov dword [ebp - 4], 1
mov dword [ebp - 0x238], 0x67101392
mov dword [ebp - 0x7c], 0
jmp 0x1002af66
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1002af82
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x2d8]
call fcn.10025d6c
mov dword [eax], 0x8462751c
jmp 0x1002af5f
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002af9a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10025d6c
mov dword [eax], 1
jmp 0x1002afd3
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10025d6c
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1e0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10025d6c
cmp dword [eax], 0
jl 0x1002b0bd
mov dword [ebp - 0x58], 0x61bab593
mov dword [ebp - 0x1e8], 0x92085949
mov dword [ebp - 0x58], 1
jmp 0x1002b00a
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1002b0b8
mov dword [ebp - 0x128], 0xdc2a
mov dword [ebp - 0x36c], 0xd7582ba8
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x238], 0x80e033c2
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x54]
jle 0x1002b056
mov dword [ebp - 0x314], 1
jmp 0x1002b05d
and dword [ebp - 0x314], 0
mov esi, dword [ebp - 0x54]
mov edi, dword [ebp - 0x58]
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10025d6c
mov eax, dword [eax]
sub eax, edi
add eax, esi
jne 0x1002b088
push 5
pop eax
test eax, eax
jne 0x1002b088
and dword [ebp - 0x130], 0
jmp 0x1002b092
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x36c], eax
jmp 0x1002b003
jmp 0x1002afaf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2d8]
call fcn.10025d50
jmp 0x1002af27
mov dword [ebp - 0x374], 7
mov dword [ebp - 0x384], 0xad3b3152
cmp dword [ebp - 0x374], 0
je 0x1002b106
mov dword [ebp - 0x37c], 0x546158d3
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x384], eax
jmp 0x1002b11e
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x1002b11e
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
movzx eax, byte [0x10622230]
test eax, eax
je 0x1002b13c
mov esi, 0x1007e820
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1002cb6e
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0xcc], 0
jmp 0x1002b15c
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x1002b178
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x488], 4
jmp 0x1002b14f
mov dword [ebp - 0x28], 2
jmp 0x1002b188
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002b2e5
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x1002b1a9
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1002b2e0
push 3
lea ecx, [ebp - 0x2a8]
call fcn.10025cee
mov dword [ebp - 4], 2
mov dword [ebp - 0x84], 0
jmp 0x1002b1e0
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1002b1ff
push dword [ebp - 0x84]
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
and dword [eax], 0
jmp 0x1002b1d3
push 1
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
and dword [eax], 0
jmp 0x1002b235
push 1
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x138]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
cmp dword [eax], 2
jg 0x1002b262
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x1002b260
push 0x14a0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryA]
jmp 0x1002b211
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x488], 0x6f65e790
jl 0x1002b27e
mov dword [ebp - 0x278], 1
jmp 0x1002b285
and dword [ebp - 0x278], 0
mov esi, dword [ebp - 0x68]
push 2
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
cmp dword [eax], esi
je 0x1002b2a5
mov dword [ebp - 0x140], 1
jmp 0x1002b2ac
and dword [ebp - 0x140], 0
mov esi, 0x6b471dfd
sub esi, dword [ebp - 0x278]
add esi, dword [ebp - 0x140]
push 1
lea ecx, [ebp - 0x2a8]
call fcn.10025d6c
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a8]
call fcn.10025d50
jmp 0x1002b1a2
jmp 0x1002b181
mov dword [ebp - 0x28], 0
jmp 0x1002b2f5
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffee
jg 0x1002b333
mov dword [ebp - 0x38c], 0x9753
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x1002b328
push 0
push 0x20f6
push 0x1bd8
push 0x1eaf
call dword [sym.imp.GDI32.dll_SetPixel]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38c], eax
jmp 0x1002b2ee
mov dword [ebp - 0x40c], 0x1007e820
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0
jmp 0x1002b354
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jl 0x1002b41a
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0xbc], 0xffffffe4
jmp 0x1002b381
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xe
jl 0x1002b415
push 1
lea ecx, [ebp - 0x3c4]
call fcn.10025cee
mov dword [ebp - 4], 3
mov dword [ebp - 0x8c], 0
jmp 0x1002b3bb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x1002b3dd
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x3c4]
call fcn.10025d6c
mov dword [eax], 0xb401
jmp 0x1002b3ae
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10025d6c
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1f0]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3c4]
call fcn.10025d50
jmp 0x1002b374
jmp 0x1002b34d
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jge 0x1002b42e
mov dword [ebp - 0x148], 1
jmp 0x1002b435
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x148]
cmp eax, 0xffffffff
jne 0x1002b459
mov dword [ebp - 0x394], 1
jmp 0x1002b460
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x468], 0x1007e824
mov dword [ebp - 0x9c], 0x91a049fe
mov dword [ebp - 0x41c], 0x4b1b055c
mov dword [ebp - 0x240], 0x410
mov dword [ebp - 0x39c], 0x100088a4
cmp dword [ebp - 0x240], 0x47f
jle 0x1002b526
and dword [ebp - 0xd4], 0
jmp 0x1002b4c3
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x5071
jge 0x1002b526
and dword [ebp - 0x94], 0
jmp 0x1002b4e5
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x7b77
jge 0x1002b524
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x94]
shl eax, cl
cdq
mov dword [ebp - 0x32c], eax
mov dword [ebp - 0x328], edx
push dword [ebp - 0x328]
push dword [ebp - 0x32c]
mov ecx, 0x106205d8
call fcn.10025bd9
jmp 0x1002b4d8
jmp 0x1002b4b6
mov dword [ebp - 0x450], 0x591b68de
mov dword [ebp - 4], 4
cmp dword [ebp - 0x240], 0x31c
jge 0x1002b553
mov edx, dword [ebp - 0x39c]
mov ecx, 0x106205d8
call fcn.100294ba
jmp 0x1002b56f
or dword [ebp - 4], 0xffffffff
jmp 0x1002b579
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0xdc], 0
jmp 0x1002b59c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 4
jge 0x1002b5b8
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x47c], 0x7ef5d870
jmp 0x1002b58f
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x1002b5cc
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov dword [ebp - 0x9c], 0
jmp 0x1002b5e5
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x12
je 0x1002b87f
push 4
lea ecx, [ebp - 0x2cc]
call fcn.10025cee
mov dword [ebp - 4], 6
push 4
lea ecx, [ebp - 0x2b4]
call fcn.10025cee
mov byte [ebp - 4], 7
mov dword [ebp - 0x34], 0
jmp 0x1002b627
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002b643
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov dword [eax], 0xcd50997
jmp 0x1002b620
mov dword [ebp - 0x34], 0
jmp 0x1002b653
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1002b66f
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2b4]
call fcn.10025d6c
mov dword [eax], 0xfffffffe
jmp 0x1002b64c
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
cmp dword [eax], 0
jne 0x1002b68d
mov dword [ebp - 0x200], 1
jmp 0x1002b694
and dword [ebp - 0x200], 0
push 3
lea ecx, [ebp - 0x2b4]
call fcn.10025d6c
cmp dword [eax], 1
jge 0x1002b6b2
mov dword [ebp - 0x150], 1
jmp 0x1002b6b9
and dword [ebp - 0x150], 0
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
mov ecx, dword [ebp - 0x150]
cmp ecx, dword [eax]
jle 0x1002b6dc
mov dword [ebp - 0x1f8], 1
jmp 0x1002b6e3
and dword [ebp - 0x1f8], 0
push 3
lea ecx, [ebp - 0x2b4]
call fcn.10025d6c
mov ecx, dword [ebp - 0x1f8]
cmp ecx, dword [eax]
jle 0x1002b706
mov dword [ebp - 0x158], 1
jmp 0x1002b70d
and dword [ebp - 0x158], 0
push 2
lea ecx, [ebp - 0x2b4]
call fcn.10025d6c
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [eax]
je 0x1002b730
mov dword [ebp - 0x268], 1
jmp 0x1002b737
and dword [ebp - 0x268], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x47c]
inc eax
mov dword [ebp - 0x160], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax - 0x47c], ecx
mov eax, dword [ebp - 0x2f4]
add eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x160]
cmp dword [ebp - 0x200], eax
jg 0x1002b7c8
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1002b78e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 3
lea ecx, [ebp - 0x2cc]
call fcn.10025d6c
cmp dword [eax], 0
je 0x1002b7c3
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b4]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2cc]
call fcn.10025d50
jmp 0x1002b87f
jmp 0x1002b85c
push 2
lea ecx, [ebp - 0x3dc]
call fcn.10025cee
mov byte [ebp - 4], 8
mov dword [ebp - 0xd8], 0
jmp 0x1002b7f2
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x1002b814
push dword [ebp - 0xd8]
lea ecx, [ebp - 0x3dc]
call fcn.10025d6c
mov dword [eax], 0xab56
jmp 0x1002b7e5
push 1
lea ecx, [ebp - 0x3dc]
call fcn.10025d6c
mov esi, eax
push 3
lea ecx, [ebp - 0x2b4]
call fcn.10025d6c
mov eax, dword [eax]
mov dword [esi], eax
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1002b84d
push 0
push 0x111
call dword [sym.imp.GDI32.dll_SetLayout]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x3dc]
call fcn.10025d50
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2b4]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2cc]
call fcn.10025d50
jmp 0x1002b5d8
mov byte [0x10622230], 1
push 1
lea ecx, [ebp - 0x438]
call fcn.10025cee
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0x354]
call fcn.10025cee
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x38], 0
jmp 0x1002b8bb
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1002b8d7
push dword [ebp - 0x38]
lea ecx, [ebp - 0x438]
call fcn.10025d6c
mov dword [eax], 4
jmp 0x1002b8b4
mov dword [ebp - 0x38], 0
jmp 0x1002b8e7
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1002b903
push dword [ebp - 0x38]
lea ecx, [ebp - 0x354]
call fcn.10025d6c
mov dword [eax], 0xb4ffb87
jmp 0x1002b8e0
push 0
lea ecx, [ebp - 0x354]
call fcn.10025d6c
and dword [eax], 0
jmp 0x1002b939
push 0
lea ecx, [ebp - 0x354]
call fcn.10025d6c
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x168]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x354]
call fcn.10025d6c
cmp dword [eax], 0
jg 0x1002b982
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002b962
push 0x2548
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x1002b980
push 0x681
push 0x64a
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
jmp 0x1002b915
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x354]
call fcn.10025d50
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.10025d50
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1007e610
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0xec], 0xfffffffa
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x64], 0x5b0bb8bf
mov dword [ebp - 0x424], 0
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3e8], 0x1f050678
mov dword [ebp - 0xe8], 0xefbde283
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x400], 0xbb66efe0
mov dword [ebp - 0x408], 0xfffffffa
mov dword [ebp - 0xa4], 0
jmp 0x1002ba3f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1002ba5b
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x4a8], 0x3ae5d5ec
jmp 0x1002ba32
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x1c], 0xc196a162
ja 0x1002ba79
mov dword [ebp - 0x2fc], 1
jmp 0x1002ba80
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x1c], 0
je 0x1002ba98
cmp dword [ebp - 0x1c], 0
je 0x1002ba98
mov dword [ebp - 0x248], 1
jmp 0x1002ba9f
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x248], eax
jge 0x1002bab6
mov dword [ebp - 0x2f8], 1
jmp 0x1002babd
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x428], eax
mov dword [ebp - 0x64], 0x64b5c6f8
mov dword [ebp - 0x64], 0
jmp 0x1002bb01
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x11
jge 0x1002bcf7
mov dword [ebp - 0x444], 7
mov dword [ebp - 0x44c], 0x53f0d3ec
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x300], 1
mov dword [ebp - 0x380], 5
push 2
lea ecx, [ebp - 0x29c]
call fcn.10025cee
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x208], 0xffff
mov dword [ebp - 0x308], 0xd45e
mov dword [ebp - 0x3c], 0
jmp 0x1002bb7f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1002bb95
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x464], 0x280bfe73
jmp 0x1002bb78
mov dword [ebp - 0x3c], 0
jmp 0x1002bba5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002bbc1
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
mov dword [eax], 8
jmp 0x1002bb9e
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x1c], 1
jmp 0x1002bbde
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1002bce3
mov dword [ebp - 0xe8], 1
cmp dword [ebp - 0xe8], 0xfffffffd
ja 0x1002bc07
mov dword [ebp - 0x178], 1
jmp 0x1002bc0e
and dword [ebp - 0x178], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x178]
jne 0x1002bc32
mov dword [ebp - 0x364], 1
jmp 0x1002bc39
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x3f0], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x3ec], eax
push 1
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
mov esi, dword [ebp - 0xe8]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
cmp esi, dword [eax]
je 0x1002bc9c
mov dword [ebp - 0x288], 1
jmp 0x1002bca3
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 0xfcf4
je 0x1002bcbb
mov dword [ebp - 0x180], 1
jmp 0x1002bcc2
and dword [ebp - 0x180], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x29c]
call fcn.10025d6c
mov eax, dword [eax]
add eax, dword [ebp - 0x180]
mov dword [ebp - 0x308], eax
jmp 0x1002bbd7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x29c]
call fcn.10025d50
jmp 0x1002bafa
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1007e610
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x40], 0x622b6078
mov dword [ebp - 0x188], 0x5a9390df
mov dword [ebp - 0x1a0], 0x12ef314d
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x270], 0xa8d6e859
mov dword [ebp - 0xac], 0xd909cc0f
mov dword [ebp - 0xf0], 0xd4d3380d
mov dword [ebp - 0x280], 0x3c62ed5b
mov dword [ebp - 0x310], 6
mov dword [ebp - 0xd0], 0
jmp 0x1002bd7f
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x1002bd9b
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x494], 0
jmp 0x1002bd72
cmp dword [ebp - 0x48], 0
je 0x1002bea1
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
je 0x1002bdb9
mov dword [ebp - 0x210], 1
jmp 0x1002bdc0
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x40]
jne 0x1002bde3
mov dword [ebp - 0x250], 1
jmp 0x1002bdea
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
neg eax
sub eax, dword [ebp - 0x40]
jne 0x1002bdfd
cmp dword [ebp - 0x48], 0
je 0x1002be01
cmp dword [ebp - 0x48], 0
cmp dword [ebp - 0x40], 1
ja 0x1002be13
mov dword [ebp - 0x190], 1
jmp 0x1002be1a
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x1a0]
imul eax, dword [ebp - 0x190]
cmp eax, 7
jl 0x1002be38
mov dword [ebp - 0x218], 1
jmp 0x1002be3f
and dword [ebp - 0x218], 0
cmp dword [ebp - 0x218], 0xffffffff
jl 0x1002be54
mov dword [ebp - 0x198], 1
jmp 0x1002be5b
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x198], eax
jne 0x1002be72
mov dword [ebp - 0x368], 1
jmp 0x1002be79
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x460], eax
mov eax, 0x495e
add eax, 0x3cc9
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0xac], 0
je 0x1002bed6
cmp dword [ebp - 0xac], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x1a0]
cmp eax, 4
jb 0x1002bef1
mov dword [ebp - 0x220], 1
jmp 0x1002bef8
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x220], eax
jne 0x1002bf0f
mov dword [ebp - 0x1a8], 1
jmp 0x1002bf16
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x1a8], eax
jne 0x1002bf2d
mov dword [ebp - 0x258], 1
jmp 0x1002bf34
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0xc0]
jl 0x1002bf5a
mov dword [ebp - 0x1b0], 1
jmp 0x1002bf61
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1b0], eax
jg 0x1002bf76
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1002bf88
cmp dword [ebp - 0xf0], 0
jne 0x1002bf88
and dword [ebp - 0x228], 0
jmp 0x1002bf92
mov dword [ebp - 0x228], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x494]
cmp dword [ebp - 0x228], eax
jne 0x1002bfb3
mov dword [ebp - 0x1b8], 1
jmp 0x1002bfba
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x280]
jne 0x1002bfdd
mov dword [ebp - 0x1c0], 1
jmp 0x1002bfe4
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0xc7f2bac4
jb 0x1002bffc
mov dword [ebp - 0x230], 1
jmp 0x1002c003
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x1a4]
mov dword [0x1007e820], eax
mov dword [ebp - 0x14], 0xfffffffc
push 2
lea ecx, [ebp - 0x2e4]
call fcn.10025cee
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x14c], 0x993911e7
mov dword [ebp - 0x18c], 0x5d33
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x74], 0
jmp 0x1002c063
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1002c07f
push dword [ebp - 0x74]
lea ecx, [ebp - 0x2e4]
call fcn.10025d6c
mov dword [eax], 0xfffffff7
jmp 0x1002c05c
cmp dword [ebp - 0x14], 0
jne 0x1002c1bb
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x1002c09d
mov dword [ebp - 0x1c8], 1
jmp 0x1002c0a4
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0xffffffff
jle 0x1002c0b9
mov dword [ebp - 0x1d0], 1
jmp 0x1002c0c0
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
sub eax, 5
cmp eax, 0x27f0
jne 0x1002c0dc
mov dword [ebp - 0x108], 1
jmp 0x1002c0e3
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x108]
cmp eax, 0xffffffff
jg 0x1002c0fd
mov dword [ebp - 0x10c], 1
jmp 0x1002c104
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x10c]
cmp eax, 0x819d3388
jb 0x1002c119
cmp dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
inc eax
sub eax, dword [ebp - 0x14]
cmp eax, 0x951b
jg 0x1002c133
mov dword [ebp - 0x104], 1
jmp 0x1002c13a
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x104]
sub eax, dword [ebp - 0x14]
jne 0x1002c149
cmp dword [ebp - 0x14], 0
mov eax, 0x547507a
neg eax
cmp eax, dword [ebp - 0x14]
jl 0x1002c161
mov dword [ebp - 0x11c], 1
jmp 0x1002c168
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x11c], eax
jle 0x1002c17f
mov dword [ebp - 0x124], 1
jmp 0x1002c186
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x124]
jg 0x1002c19d
mov dword [ebp - 0x12c], 1
jmp 0x1002c1a4
and dword [ebp - 0x12c], 0
imul eax, dword [ebp - 0x12c], 0xba56
test eax, eax
jne 0x1002c1bb
and dword [ebp - 0x134], 0
jmp 0x1002c1c5
mov dword [ebp - 0x134], 1
cmp dword [ebp - 0x134], 9
jge 0x1002c1da
mov dword [ebp - 0x13c], 1
jmp 0x1002c1e1
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x14]
jge 0x1002c3da
or eax, 0xffffffff
je 0x1002c3da
mov dword [ebp - 0x6c], 0x6a4a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x14], 0
jmp 0x1002c21b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1002c3d8
mov dword [ebp - 0x390], 0xfffffff6
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2e4]
call fcn.10025d6c
cmp dword [ebp - 0x6c], 0
je 0x1002c254
or eax, 0xffffffff
je 0x1002c254
mov dword [ebp - 0x144], 1
jmp 0x1002c25b
and dword [ebp - 0x144], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2e4]
call fcn.10025d6c
mov ecx, dword [ebp - 0x144]
cmp ecx, dword [eax]
jne 0x1002c27f
mov dword [ebp - 0x154], 1
jmp 0x1002c286
and dword [ebp - 0x154], 0
mov dword [ebp - 0x14c], 0xfffffff8
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x154]
je 0x1002c2aa
mov dword [ebp - 0xfc], 1
jmp 0x1002c2b1
and dword [ebp - 0xfc], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2e4]
call fcn.10025d6c
mov ecx, dword [ebp - 0xfc]
imul ecx, dword [eax]
cmp ecx, 0x3d4f39ab
jge 0x1002c2dc
mov dword [ebp - 0x164], 1
jmp 0x1002c2e3
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0
jne 0x1002c2f8
mov dword [ebp - 0x16c], 1
jmp 0x1002c2ff
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x16c]
jle 0x1002c311
cmp dword [ebp - 0x18c], 0
imul eax, dword [ebp - 0x390], 0
sub eax, 0x6715623a
cmp eax, 0xa41183d9
jae 0x1002c330
mov dword [ebp - 0x174], 1
jmp 0x1002c337
and dword [ebp - 0x174], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2e4]
call fcn.10025d6c
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [eax]
je 0x1002c35b
mov dword [ebp - 0x17c], 1
jmp 0x1002c362
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x17c]
jle 0x1002c379
mov dword [ebp - 0x184], 1
jmp 0x1002c380
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 0xe6de11d6
jbe 0x1002c39f
push 5
pop eax
test eax, eax
je 0x1002c39f
mov dword [ebp - 0x194], 1
jmp 0x1002c3a6
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x194], eax
jle 0x1002c3c0
mov dword [ebp - 0x19c], 1
jmp 0x1002c3c7
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x318], eax
jmp 0x1002c214
jmp 0x1002c3ed
mov dword [ebp - 0x370], 0xfffffffe
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x370], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e4]
call fcn.10025d50
mov eax, dword [ebp - 0xe4]
mov dword [0x1007e824], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xe4]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [eax + ecx]
call fcn.1002aa7c
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x1ac], 0x1f9d
mov dword [ebp - 0x388], 0x100088e0
cmp dword [ebp - 0x1ac], 0x20a3
jle 0x1002c509
and dword [ebp - 0x88], 0
jmp 0x1002c46a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3a30
jge 0x1002c509
and dword [ebp - 0x78], 0
jmp 0x1002c487
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x6d9c
jge 0x1002c504
and dword [ebp - 0x80], 0
jmp 0x1002c49d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x74fc
jge 0x1002c4ff
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x80]
sar eax, cl
and eax, dword [ebp - 0x88]
cdq
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], edx
push dword [ebp - 0x334]
push dword [ebp - 0x338]
lea ecx, [ebp - 0x4c0]
call fcn.1000b1a5
pop ecx
pop ecx
mov dword [ebp - 0x324], eax
mov ecx, dword [ebp - 0x324]
call fcn.100259bb
push eax
call fcn.1005e68c
pop ecx
lea ecx, [ebp - 0x4c0]
call fcn.1002599d
jmp 0x1002c496
jmp 0x1002c480
jmp 0x1002c45d
mov dword [ebp - 0x5c], 2
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x1ac], 0x1f69
jge 0x1002c52f
push dword [ebp - 0x388]
call fcn.1005e68c
pop ecx
jmp 0x1002c54b
or dword [ebp - 4], 0xffffffff
jmp 0x1002c555
mov dword [ebp - 0x1bc], 9
cmp dword [ebp - 0x5c], 0
je 0x1002c718
mov dword [ebp - 0x5c], 0
jmp 0x1002c579
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x1b
jne 0x1002c713
push 1
lea ecx, [ebp - 0x2c0]
call fcn.10025cee
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1b4], 0x47e5
mov dword [ebp - 0x330], 0x10008948
cmp dword [ebp - 0x1b4], 0x47fb
jle 0x1002c630
and dword [ebp - 0x90], 0
jmp 0x1002c5cd
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x1342
jge 0x1002c630
and dword [ebp - 0x98], 0
jmp 0x1002c5ef
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x70d7
jge 0x1002c62e
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x98]
shl eax, cl
cdq
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x340], edx
push dword [ebp - 0x340]
push dword [ebp - 0x344]
mov ecx, 0x106205d8
call fcn.10025bd9
jmp 0x1002c5e2
jmp 0x1002c5c0
mov dword [ebp - 0xa0], 0
jmp 0x1002c649
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1002c66b
push dword [ebp - 0xa0]
lea ecx, [ebp - 0x2c0]
call fcn.10025d6c
mov dword [eax], 0x7a00
jmp 0x1002c63c
mov byte [ebp - 4], 0x10
cmp dword [ebp - 0x1b4], 0x444c
jge 0x1002c68b
mov edx, dword [ebp - 0x330]
mov ecx, 0x106205d8
call fcn.100294ba
jmp 0x1002c6a7
mov dword [ebp - 4], 0xf
jmp 0x1002c6b7
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10025d6c
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10025d6c
mov eax, dword [eax]
mov dword [ebp - 0x1bc], eax
push 0
lea ecx, [ebp - 0x2c0]
call fcn.10025d6c
cmp dword [eax], 0
je 0x1002c6ff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.10025d50
jmp 0x1002c572
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.10025d50
jmp 0x1002c572
jmp 0x1002c79b
mov dword [ebp - 0xa8], 0
jmp 0x1002c731
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1002c74d
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3ac], 0xffffffff
jmp 0x1002c724
cmp dword [ebp - 0x1bc], 0x5047
jg 0x1002c781
cmp dword [ebp - 0x5c], 0x6f44
jl 0x1002c781
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ac], 0xfff6
jbe 0x1002c781
mov dword [ebp - 0x1c4], 1
jmp 0x1002c788
and dword [ebp - 0x1c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp + eax - 0x3ac], ecx
push dword [ebp - 0xe4]
mov edx, 0x1007e84c
mov ecx, dword [ebp - 0x378]
call fcn.1002aa88
pop ecx
mov dword [ebp - 0x18], 2
mov dword [ebp - 0x20], 0x378f1e0c
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10025cee
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x244], 2
mov dword [ebp - 0xb0], 0
jmp 0x1002c7f7
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1002c819
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x3b8]
call fcn.10025d6c
mov dword [eax], 1
jmp 0x1002c7ea
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x18], 0xfffffffa
jle 0x1002c88b
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x18], 0
jne 0x1002c845
xor eax, eax
inc eax
jne 0x1002c845
and dword [ebp - 0x1cc], 0
jmp 0x1002c84f
mov dword [ebp - 0x1cc], 1
mov eax, dword [ebp - 0x1cc]
neg eax
cmp eax, 0xa21e
jle 0x1002c870
cmp dword [ebp - 0x18], 0
je 0x1002c870
mov dword [ebp - 0x1e4], 1
jmp 0x1002c877
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1e4], eax
je 0x1002c88b
and dword [ebp - 0x1ec], 0
jmp 0x1002c895
mov dword [ebp - 0x1ec], 1
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x1002c8b3
cmp dword [ebp - 0x18], 0
jne 0x1002c8b3
and dword [ebp - 0x1f4], 0
jmp 0x1002c8bd
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1f4], eax
jg 0x1002c8d4
mov dword [ebp - 0x1fc], 1
jmp 0x1002c8db
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1fc], eax
je 0x1002c8f2
mov dword [ebp - 0x204], 1
jmp 0x1002c8f9
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
je 0x1002c913
mov dword [ebp - 0x20c], 1
jmp 0x1002c91a
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x20c], eax
jge 0x1002c931
mov dword [ebp - 0x214], 1
jmp 0x1002c938
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x214], eax
jg 0x1002c94f
mov dword [ebp - 0x33c], 1
jmp 0x1002c956
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x18], 0
je 0x1002c9cc
mov dword [ebp - 0x20], 0
jmp 0x1002c975
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff3
je 0x1002c9c7
mov dword [ebp - 0x18], 0xfffffff5
jmp 0x1002c98b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffa
jle 0x1002c9c5
mov dword [ebp - 0x398], 0xbdb88dcf
cmp dword [ebp - 0x398], 0
je 0x1002c9a6
jmp 0x1002c9c5
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x1002c9c3
push 0x2366
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x1002c984
jmp 0x1002c96e
jmp 0x1002cb51
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0x234], 0xb8a442f2
mov dword [ebp - 0x348], 0xfffffffe
mov dword [ebp - 0x2f0], 0xfffffffc
cmp dword [ebp - 0xb8], 8
jne 0x1002ca09
mov dword [ebp - 0x21c], 1
jmp 0x1002ca10
and dword [ebp - 0x21c], 0
imul eax, dword [ebp - 0x21c], 0xa8d6
cmp eax, 0x35d5
jge 0x1002ca2d
mov dword [ebp - 0x224], 1
jmp 0x1002ca34
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x224], eax
je 0x1002ca4b
mov dword [ebp - 0x22c], 1
jmp 0x1002ca52
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0xb8]
jne 0x1002ca7b
cmp dword [ebp - 0x18], 0
jne 0x1002ca7b
and dword [ebp - 0x23c], 0
jmp 0x1002ca85
mov dword [ebp - 0x23c], 1
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x24c], eax
push 0
lea ecx, [ebp - 0x3b8]
call fcn.10025d6c
mov ecx, dword [ebp - 0x24c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x24c], eax
jle 0x1002cacc
mov dword [ebp - 0x254], 1
jmp 0x1002cad3
and dword [ebp - 0x254], 0
cmp dword [ebp - 0x254], 0xffff
ja 0x1002caeb
mov dword [ebp - 0x25c], 1
jmp 0x1002caf2
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x25c]
imul eax, dword [ebp - 0x348]
cmp dword [ebp - 0x20], eax
jg 0x1002cb14
mov dword [ebp - 0x264], 1
jmp 0x1002cb1b
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x264]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff7
jg 0x1002cb3d
mov dword [ebp - 0x100], 1
jmp 0x1002cb44
and dword [ebp - 0x100], 0
imul eax, dword [ebp - 0x100], 3
mov dword [ebp - 0x2f0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b8]
call fcn.10025d50
mov esi, 0x1007e820
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret