Function at 0x1002954a
Capabilities:
Get disk size
Get file attributes
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006c136
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x358
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x33c], 0
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1002958f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x100295a3
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [ebp - 0x30], 0x7e2799ac
mov dword [ebp - 0x7c], 1
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x100295d4
push 0
push 0x2413
push 0x49c
push 0x5d3
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov dword [ebp - 0x30], 2
jmp 0x100295e4
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffe7
jle 0x10029846
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x1b8], 0xfffffff8
mov dword [ebp - 0x164], 0x83ca3077
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x18], 0
jne 0x10029759
cmp dword [ebp - 0x18], 0
jne 0x1002962f
xor eax, eax
jne 0x1002962f
and dword [ebp - 0x100], 0
jmp 0x10029639
mov dword [ebp - 0x100], 1
mov eax, dword [ebp - 0x100]
sub eax, dword [ebp - 0x18]
jne 0x10029650
mov dword [ebp - 0x1d8], 1
jmp 0x10029657
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d8], eax
jg 0x1002966e
mov dword [ebp - 0xb8], 1
jmp 0x10029675
and dword [ebp - 0xb8], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x18]
jge 0x10029698
mov dword [ebp - 0xc0], 1
jmp 0x1002969f
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0x18]
jmp 0x100296b6
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0x1a88af16
je 0x100296d5
mov dword [ebp - 0xc8], 1
jmp 0x100296dc
and dword [ebp - 0xc8], 0
cmp dword [ebp - 0xc8], 1
jne 0x100296f7
cmp dword [ebp - 0x18], 0
je 0x100296f7
mov dword [ebp - 0x1c8], 1
jmp 0x100296fe
and dword [ebp - 0x1c8], 0
cmp dword [ebp - 0x1c8], 0x312b9482
je 0x10029716
mov dword [ebp - 0x1e8], 1
jmp 0x1002971d
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x308], eax
imul eax, dword [ebp - 0x30], 0xb500
cmp eax, dword [ebp - 0x30]
jl 0x1002973e
mov dword [ebp - 0x1d0], 1
jmp 0x10029745
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1d0]
jne 0x10029759
and dword [ebp - 0x230], 0
jmp 0x10029763
mov dword [ebp - 0x230], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x30], 0x420e
je 0x10029786
or eax, 0xffffffff
je 0x10029786
mov dword [ebp - 0xd0], 1
jmp 0x1002978d
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xd0], eax
jl 0x100297a4
mov dword [ebp - 0x15c], 1
jmp 0x100297ab
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0xffffffff
jne 0x100297c0
mov dword [ebp - 0xe4], 1
jmp 0x100297c7
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe4], eax
jg 0x100297de
mov dword [ebp - 0x19c], 1
jmp 0x100297e5
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x19c], eax
jge 0x100297fc
mov dword [ebp - 0xec], 1
jmp 0x10029803
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0x7c]
add eax, 0x7511aee7
imul eax, eax, 0xfffffffc
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x18], 0
jmp 0x10029833
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x22
jg 0x10029841
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x7c], eax
jmp 0x1002982c
jmp 0x100295dd
push 4
lea ecx, [ebp - 0x2b4]
call fcn.10020368
and dword [ebp - 4], 0
mov dword [ebp - 0x10c], 0xffffffff
mov dword [ebp - 0x2dc], 0xc3825062
mov dword [ebp - 0x1f4], 0xd926128f
mov dword [ebp - 0x80], 0xa83d87e3
mov dword [ebp - 0x2d0], 0xfffc
mov dword [ebp - 0x2cc], 0xfffc
mov dword [ebp - 0x2c8], 0xfffc
mov dword [ebp - 0x2c4], 0xfffc
mov dword [ebp - 0x34], 0
jmp 0x100298b4
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100298d0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2b4]
call fcn.100203e6
mov dword [eax], 0xffff
jmp 0x100298ad
mov dword [ebp - 0x34], 0
jmp 0x100298e0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100298f6
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x26c], 1
jmp 0x100298d9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x26c], 3
jmp 0x10029921
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x26c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x26c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x26c], 0
jl 0x10029b86
mov dword [ebp - 0x104], 0xfffffffb
push 2
lea ecx, [ebp - 0x1e4]
call fcn.10020368
mov byte [ebp - 4], 1
mov dword [ebp - 0x60], 0
jmp 0x1002995f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1002997b
push dword [ebp - 0x60]
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
mov dword [eax], 0xca70051e
jmp 0x10029958
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x26c]
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
mov edi, dword [eax]
sub edi, esi
push 0
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
cmp dword [eax], edi
jle 0x100299b6
mov dword [ebp - 0xfc], 1
jmp 0x100299bd
and dword [ebp - 0xfc], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x26c], 1
je 0x100299d8
mov dword [ebp - 0xf4], 1
jmp 0x100299df
and dword [ebp - 0xf4], 0
mov esi, dword [ebp - 0xf4]
neg esi
push 2
lea ecx, [ebp - 0x2b4]
call fcn.100203e6
cmp esi, dword [eax]
jle 0x10029a04
mov dword [ebp - 0x1bc], 1
jmp 0x10029a0b
and dword [ebp - 0x1bc], 0
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1bc]
jge 0x10029a2e
mov dword [ebp - 0x16c], 1
jmp 0x10029a35
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0xfc]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x24c]
jl 0x10029a71
mov dword [ebp - 0x200], 1
jmp 0x10029a78
and dword [ebp - 0x200], 0
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x2ec], eax
mov eax, 0x23758185
test eax, eax
je 0x10029abb
mov eax, 0x1d0c0b80
test eax, eax
je 0x10029abb
mov dword [ebp - 0x1a4], 1
jmp 0x10029ac2
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x1a4], eax
jne 0x10029ae2
mov eax, 0x9032f829
test eax, eax
jne 0x10029ae2
and dword [ebp - 0x174], 0
jmp 0x10029aec
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0x174]
sub eax, 0x8b72
jne 0x10029b12
cmp dword [ebp - 0x1f4], 0
jne 0x10029b12
and dword [ebp - 0x114], 0
jmp 0x10029b1c
mov dword [ebp - 0x114], 1
mov eax, dword [ebp - 0x114]
neg eax
jne 0x10029b41
push 1
lea ecx, [ebp - 0x1e4]
call fcn.100203e6
cmp dword [eax], 0
jne 0x10029b41
and dword [ebp - 0x1cc], 0
jmp 0x10029b4b
mov dword [ebp - 0x1cc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0x2d0], ecx
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x10029b72
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1e4]
call fcn.100203ca
jmp 0x10029908
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b4]
call fcn.100203ca
mov dword [ebp - 0x20], 1
push 1
lea ecx, [ebp - 0x2c0]
call fcn.10020368
mov dword [ebp - 4], 2
mov dword [ebp - 0x124], 0xd1d8475
mov dword [ebp - 0x1ac], 0x728ad64d
mov dword [ebp - 0x144], 0xfffffff7
mov dword [ebp - 0xa0], 0x8036
mov dword [ebp - 0x90], 3
mov dword [ebp - 0x288], 0xe65dd4d1
mov dword [ebp - 0x284], 0xe65dd4d1
mov dword [ebp - 0x280], 0xe65dd4d1
mov dword [ebp - 0x27c], 0xe65dd4d1
lea ecx, [ebp - 0x85]
call fcn.100203f5
push eax
lea eax, [ebp - 0x278]
push eax
lea eax, [ebp - 0x288]
push eax
lea ecx, [ebp - 0x360]
call fcn.100203f8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x31c]
call fcn.100203a4
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c4], 0x2e0f6194
mov dword [ebp - 0x204], 0xd8ac507b
mov dword [ebp - 0x70], 0
jmp 0x10029c67
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10029c83
push dword [ebp - 0x70]
lea ecx, [ebp - 0x2c0]
call fcn.100203e6
mov dword [eax], 0xfffffff8
jmp 0x10029c60
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10029c97
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x20], 0x4872
jl 0x10029cb5
mov dword [ebp - 0x11c], 1
jmp 0x10029cbc
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 1
je 0x10029cd1
mov dword [ebp - 0x248], 1
jmp 0x10029cd8
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x20], 0xc0e0
jne 0x10029d08
mov eax, 0x570e
test eax, eax
je 0x10029d08
mov dword [ebp - 0xa8], 1
jmp 0x10029d0f
and dword [ebp - 0xa8], 0
push 0
lea ecx, [ebp - 0x2c0]
call fcn.100203e6
mov ecx, dword [ebp - 0xa8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xa8], eax
jne 0x10029d3b
mov dword [ebp - 0x17c], 1
jmp 0x10029d42
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x20]
jl 0x10029d71
mov dword [ebp - 0x1fc], 1
jmp 0x10029d78
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x144], 0x5cc48b16
jge 0x10029d99
mov dword [ebp - 0x12c], 1
jmp 0x10029da0
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x12c], eax
jle 0x10029db7
mov dword [ebp - 0x214], 1
jmp 0x10029dbe
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x20]
jl 0x10029dd5
mov dword [ebp - 0x184], 1
jmp 0x10029ddc
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x90]
mov dword [ebp - 0x134], eax
push 3
lea ecx, [ebp - 0x31c]
call fcn.100203e6
mov ecx, dword [ebp - 0x134]
mov dword [eax], ecx
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x90]
jg 0x10029e42
mov dword [ebp - 0x13c], 1
jmp 0x10029e49
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xf9af3922
jne 0x10029e61
mov dword [ebp - 0x18c], 1
jmp 0x10029e68
and dword [ebp - 0x18c], 0
imul eax, dword [ebp - 0x18c], 0xf12
sub eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0x144]
cmp dword [ebp - 0x20], eax
je 0x10029e8f
mov dword [ebp - 0x1b4], 1
jmp 0x10029e96
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x204], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x31c]
call fcn.100203ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c0]
call fcn.100203ca
movzx eax, byte [0x106d84d4]
test eax, eax
je 0x10029ede
mov esi, 0x10613858
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1002ab39
mov dword [ebp - 0x344], 0x10613858
mov dword [ebp - 0x340], 0x1061385c
mov byte [0x106d84d4], 1
mov dword [ebp - 0x29c], 0x25b0e446
mov dword [ebp - 0x298], 0x25b0e446
mov dword [ebp - 0x294], 0x25b0e446
mov dword [ebp - 0x290], 0x25b0e446
lea ecx, [ebp - 0xa9]
call fcn.100203f5
push eax
lea eax, [ebp - 0x28c]
push eax
lea eax, [ebp - 0x29c]
push eax
lea ecx, [ebp - 0x368]
call fcn.100203f8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x58]
call fcn.100203a4
mov dword [ebp - 4], 4
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x28], 0xffffffff
push 4
lea ecx, [ebp - 0xdc]
call fcn.10020368
mov byte [ebp - 4], 5
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x210], 6
mov dword [ebp - 0x1c], 0
jmp 0x10029f9d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10029fb3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x32c], 0x709ba87a
jmp 0x10029f96
mov dword [ebp - 0x1c], 0
jmp 0x10029fc3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10029fdc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xdc]
call fcn.100203e6
or dword [eax], 0xffffffff
jmp 0x10029fbc
mov dword [ebp - 0x1c], 0
jmp 0x10029fec
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002a002
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x274], 0x9034e105
jmp 0x10029fe5
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1002a022
push 2
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], 0
jne 0x1002a022
and dword [ebp - 0x14c], 0
jmp 0x1002a02c
mov dword [ebp - 0x14c], 1
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
push 1
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], esi
jl 0x1002a055
mov dword [ebp - 0x194], 1
jmp 0x1002a05c
and dword [ebp - 0x194], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x194]
mov dword [ebp + eax - 0x32c], ecx
push 2
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], 0xfffffff8
jle 0x1002a089
mov dword [ebp - 0x218], 1
jmp 0x1002a090
and dword [ebp - 0x218], 0
push 2
lea ecx, [ebp - 0x58]
call fcn.100203e6
push 3
lea ecx, [ebp - 0x58]
call fcn.100203e6
imul eax, dword [eax], 0xaea0
mov dword [ebp - 0x154], eax
push 3
lea ecx, [ebp - 0xdc]
call fcn.100203e6
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x154], eax
je 0x1002a0dc
mov dword [ebp - 0x1d4], 1
jmp 0x1002a0e3
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1002a0fd
mov dword [ebp - 0xcc], 1
jmp 0x1002a104
and dword [ebp - 0xcc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x274], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x310], eax
push 1
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], 0xfffffffe
jle 0x1002a13b
mov dword [ebp - 0xe0], 1
jmp 0x1002a142
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xe0], eax
jl 0x1002a159
mov dword [ebp - 0xe8], 1
jmp 0x1002a160
and dword [ebp - 0xe8], 0
mov esi, dword [ebp - 0xe8]
sub esi, dword [ebp - 0x14]
inc esi
inc esi
push 1
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], esi
jl 0x1002a185
mov dword [ebp - 0xf0], 1
jmp 0x1002a18c
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x28], 3
jmp 0x1002a1b4
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1002a5b0
push 1
lea ecx, [ebp - 0x25c]
call fcn.10020368
mov byte [ebp - 4], 6
mov dword [ebp - 0x84], 0xffff
mov dword [ebp - 0x150], 0x7e3b5251
mov dword [ebp - 0x68], 0
jmp 0x1002a1f3
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1002a20f
push dword [ebp - 0x68]
lea ecx, [ebp - 0x25c]
call fcn.100203e6
mov dword [eax], 0xcd3e
jmp 0x1002a1ec
mov dword [ebp - 0x14], 0
jmp 0x1002a21f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1002a59c
mov dword [ebp - 0x94], 0x1dbc46d7
push 3
lea ecx, [ebp - 0x2a8]
call fcn.10020368
mov byte [ebp - 4], 7
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0x228], 0x1fbc
mov dword [ebp - 0x48], 0
jmp 0x1002a268
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1002a284
push dword [ebp - 0x48]
lea ecx, [ebp - 0x2a8]
call fcn.100203e6
mov dword [eax], 0xde30ea3b
jmp 0x1002a261
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x1002a29d
push 0
push 0x11f4
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], 0
jne 0x1002a2b9
mov dword [ebp - 0x148], 1
jmp 0x1002a2c0
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2e0], eax
push 0
lea ecx, [ebp - 0x25c]
call fcn.100203e6
push dword [ebp - 0x14]
lea ecx, [ebp - 0x58]
call fcn.100203e6
mov esi, eax
push 0
lea ecx, [ebp - 0x25c]
call fcn.100203e6
mov eax, dword [eax]
cmp eax, dword [esi]
jge 0x1002a305
mov dword [ebp - 0x220], 1
jmp 0x1002a30c
and dword [ebp - 0x220], 0
mov esi, dword [ebp - 0x84]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp esi, dword [eax]
jle 0x1002a339
push 1
lea ecx, [ebp - 0x58]
call fcn.100203e6
cmp dword [eax], 0
jne 0x1002a339
and dword [ebp - 0xf8], 0
jmp 0x1002a343
mov dword [ebp - 0xf8], 1
cmp dword [ebp - 0xf8], 7
jbe 0x1002a358
mov dword [ebp - 0x98], 1
jmp 0x1002a35f
and dword [ebp - 0x98], 0
push 1
lea ecx, [ebp - 0x2a8]
call fcn.100203e6
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0xb0]
push 3
lea ecx, [ebp - 0xdc]
call fcn.100203e6
cmp esi, dword [eax]
je 0x1002a3a3
mov dword [ebp - 0x108], 1
jmp 0x1002a3aa
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
add eax, 0x7dfbf73e
cmp eax, 0x6aef2d6a
jne 0x1002a3c8
mov dword [ebp - 0x110], 1
jmp 0x1002a3cf
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x110], eax
jl 0x1002a3e6
mov dword [ebp - 0x118], 1
jmp 0x1002a3ed
and dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0xb93b5720
jb 0x1002a405
mov dword [ebp - 0x120], 1
jmp 0x1002a40c
and dword [ebp - 0x120], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xdc]
call fcn.100203e6
mov ecx, dword [ebp - 0x120]
add ecx, dword [eax]
jne 0x1002a43f
cmp dword [ebp - 0x84], 0
jne 0x1002a43f
mov eax, 0xc202eab
test eax, eax
jne 0x1002a43f
and dword [ebp - 0x128], 0
jmp 0x1002a449
mov dword [ebp - 0x128], 1
push dword [ebp - 0x28]
lea ecx, [ebp - 0xdc]
call fcn.100203e6
mov eax, dword [eax]
sub eax, dword [ebp - 0x128]
cmp eax, 0x5fae
jne 0x1002a472
mov dword [ebp - 0x130], 1
jmp 0x1002a479
and dword [ebp - 0x130], 0
mov esi, dword [ebp - 0x228]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xdc]
call fcn.100203e6
mov eax, dword [eax]
mov ecx, dword [ebp - 0x130]
lea eax, [ecx + eax + 1]
cmp eax, esi
jg 0x1002a4c1
cmp dword [ebp - 0x8c], 0
jne 0x1002a4c1
push 0
lea ecx, [ebp - 0x25c]
call fcn.100203e6
cmp dword [eax], 0
jne 0x1002a4c1
and dword [ebp - 0x138], 0
jmp 0x1002a4cb
mov dword [ebp - 0x138], 1
cmp dword [ebp - 0x138], 0xffffffff
jne 0x1002a4e0
mov dword [ebp - 0x140], 1
jmp 0x1002a4e7
and dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 0
mov edx, dword [ebp - 0x140]
sub edx, dword [ebp + ecx - 0x274]
add edx, dword [ebp + eax - 0x32c]
imul edx, dword [ebp - 0x148]
mov dword [ebp - 0x150], edx
cmp dword [ebp - 0x150], 0xffffffff
jbe 0x1002a528
mov dword [ebp - 0x158], 1
jmp 0x1002a52f
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x158]
je 0x1002a556
mov dword [ebp - 0x21c], 1
jmp 0x1002a55d
and dword [ebp - 0x21c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x58]
call fcn.100203e6
push 3
lea ecx, [ebp - 0xdc]
call fcn.100203e6
imul esi, dword [eax], 0x5c7e
push dword [ebp - 0x28]
lea ecx, [ebp - 0x58]
call fcn.100203e6
mov dword [eax], esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2a8]
call fcn.100203ca
jmp 0x1002a218
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x25c]
call fcn.100203ca
jmp 0x1002a1ad
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xdc]
call fcn.100203ca
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.100203ca
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10613648
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x2c], 0
jmp 0x1002a5ef
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002a602
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x78], 0xd313dd33
jmp 0x1002a5e8
mov dword [ebp - 0x2c], 0
jmp 0x1002a612
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002a628
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x338], 0xd97a
jmp 0x1002a60b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x78], 0x13
jmp 0x1002a64d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0x15
jle 0x1002a674
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x1002a672
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x1002a638
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10613648
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x24], 0xe1757117
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x24], 0
jmp 0x1002a6b0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1c
jle 0x1002a8f8
mov dword [ebp - 0x9c], 0x468a07c6
push 4
lea ecx, [ebp - 0x240]
call fcn.10020368
mov dword [ebp - 4], 8
mov dword [ebp - 0x5c], 0
jmp 0x1002a6e8
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1002a704
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x240]
call fcn.100203e6
mov dword [eax], 4
jmp 0x1002a6e1
mov dword [ebp - 0x178], 0x67a0
mov dword [ebp - 0x250], 0x100082b8
cmp dword [ebp - 0x178], 0x6b61
jle 0x1002a7a3
and dword [ebp - 0x64], 0
jmp 0x1002a731
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xfe5
jge 0x1002a798
and dword [ebp - 0x6c], 0
jmp 0x1002a747
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x44fb
jge 0x1002a796
and dword [ebp - 0x74], 0
jmp 0x1002a75d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x6f8e
jge 0x1002a794
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x74]
cdq
mov dword [ebp - 0x20c], eax
mov dword [ebp - 0x208], edx
push dword [ebp - 0x208]
push dword [ebp - 0x20c]
mov ecx, 0x10613e58
call fcn.10020128
jmp 0x1002a756
jmp 0x1002a740
jmp 0x1002a72a
push 0x2a2
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp dword [ebp - 0x24], 0x64f1
jg 0x1002a831
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x9c], 0x9695
mov eax, dword [ebp - 0x9c]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
sub eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x320], eax
push 3
lea ecx, [ebp - 0x240]
call fcn.100203e6
mov esi, dword [ebp - 0x24]
push 3
lea ecx, [ebp - 0x240]
call fcn.100203e6
cmp esi, dword [eax]
jge 0x1002a815
mov dword [ebp - 0x168], 1
jmp 0x1002a81c
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0xfffd
jae 0x1002a831
and dword [ebp - 0x234], 0
jmp 0x1002a83b
mov dword [ebp - 0x234], 1
push 3
lea ecx, [ebp - 0x240]
call fcn.100203e6
cmp dword [ebp - 0x24], 0x8a01
jge 0x1002a85d
mov dword [ebp - 0x170], 1
jmp 0x1002a864
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x224], eax
mov byte [ebp - 4], 9
cmp dword [ebp - 0x178], 0x63c1
jge 0x1002a890
mov edx, dword [ebp - 0x250]
mov ecx, 0x10613e58
call fcn.10022a20
jmp 0x1002a8ac
mov dword [ebp - 4], 8
jmp 0x1002a8bc
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1002a8e4
push 0x350
push 0x1fc1
push 0x158
push 0x233f
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.100203ca
jmp 0x1002a6a9
mov eax, dword [ebp - 0xbc]
mov dword [0x10613858], eax
mov dword [ebp - 0x38], 0x59e57ad9
mov dword [ebp - 0x180], 7
mov dword [ebp - 0x1ec], 7
mov dword [ebp - 0x198], 0x2a5bc422
mov dword [ebp - 0x1f0], 0x1b0cadfb
mov dword [ebp - 0x4c], 0
jmp 0x1002a942
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1002a958
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x358], 1
jmp 0x1002a93b
cmp dword [ebp - 0x38], 0
jne 0x1002aa61
cmp dword [ebp - 0x38], 0
je 0x1002a974
mov dword [ebp - 0x22c], 1
jmp 0x1002a97b
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2f0], eax
push 0xfffffffffffffff7
pop eax
sub eax, 0xd0188753
mov dword [ebp - 0x180], eax
je 0x1002a9a9
cmp dword [ebp - 0x1ec], 0
je 0x1002a9a9
mov dword [ebp - 0x188], 1
jmp 0x1002a9b0
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x188], eax
jg 0x1002a9c7
mov dword [ebp - 0x190], 1
jmp 0x1002a9ce
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jne 0x1002a9ef
mov dword [ebp - 0x1a0], 1
jmp 0x1002a9f6
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1a0], eax
jge 0x1002aa0d
mov dword [ebp - 0x1a8], 1
jmp 0x1002aa14
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1a8]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x358], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x358]
cmp eax, dword [ebp - 0x38]
jge 0x1002aa48
mov dword [ebp - 0x1b0], 1
jmp 0x1002aa4f
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0
jne 0x1002aa61
and dword [ebp - 0xb4], 0
jmp 0x1002aa6b
mov dword [ebp - 0xb4], 1
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x1f0], eax
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x1002aa8f
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov eax, dword [ebp - 0xa4]
mov dword [0x1061385c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xa4]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [eax + ecx]
call fcn.10029509
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x348], 0x62fd41e5
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x330], 0xc62e0897
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1002ab14
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push dword [ebp - 0xa4]
mov edx, 0x106135ec
mov ecx, dword [ebp - 0x1f8]
call fcn.10029515
pop ecx
mov esi, 0x10613858
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret