Function at 0x100413be
Capabilities:
Check http status code
Delete registry value
Enumerate gui resources
Get common file path
Get geographical location
Get graphical window text
Get keyboard layout
Identify system language via api
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100711b4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
mov eax, 0x128c
call fcn.1006bcb0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x418], 0x68ec0ae9
mov dword [ebp - 0xbc], 0xfffffffc
mov dword [ebp - 0x170], 0xdeec5416
mov dword [ebp - 0x10b0], 0xd0fa5166
push 4
lea ecx, [ebp - 0xaf4]
call fcn.10021bd6
and dword [ebp - 4], 0
mov dword [ebp - 0x21c], 0xeec299e
mov dword [ebp - 0xb40], 0xfffffffd
mov dword [ebp - 0x36c], 0
jmp 0x1004144d
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 4
jge 0x1004146c
push dword [ebp - 0x36c]
lea ecx, [ebp - 0xaf4]
call fcn.10021c54
or dword [eax], 0xffffffff
jmp 0x10041440
mov dword [ebp - 0x418], 0xfffffffb
jmp 0x10041485
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0xfffffffe
jne 0x10041537
mov dword [ebp - 0xb28], 0xcce57bf5
push 1
lea ecx, [ebp - 0xe10]
call fcn.10021bd6
mov byte [ebp - 4], 1
mov dword [ebp - 0xfa8], 0xcd76ce4a
mov dword [ebp - 0x7bc], 0x8b24
mov dword [ebp - 0x37c], 0
jmp 0x100414da
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 1
jge 0x100414fc
push dword [ebp - 0x37c]
lea ecx, [ebp - 0xe10]
call fcn.10021c54
mov dword [eax], 4
jmp 0x100414cd
cmp dword [ebp - 0xb28], 0
je 0x10041516
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe10]
call fcn.10021c38
jmp 0x10041537
mov eax, dword [ebp - 0x7bc]
inc eax
mov dword [ebp - 0x7bc], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xe10]
call fcn.10021c38
jmp 0x10041478
mov dword [ebp - 0xbc], 0
jmp 0x10041550
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 9
jl 0x10041757
mov dword [ebp - 0xb50], 6
mov dword [ebp - 0x21c], 3
jmp 0x10041580
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0
jl 0x10041747
mov dword [ebp - 0x1a4], 0x6946cb4f
mov dword [ebp - 0x170], 0
jmp 0x100415b0
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jg 0x10041742
mov byte [ebp - 0x16c], 0
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x100415db
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
push dword [ebp - 0x170]
lea ecx, [ebp - 0xaf4]
call fcn.10021c54
cmp dword [eax], 0xffffffff
jg 0x100415fd
mov dword [ebp - 0xa10], 1
jmp 0x10041604
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x1a4]
jl 0x1004161e
mov dword [ebp - 0xa08], 1
jmp 0x10041625
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xa08], eax
jl 0x1004163f
mov dword [ebp - 0xb38], 1
jmp 0x10041646
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb40]
mov dword [ebp - 0x109c], eax
mov esi, dword [ebp - 0xbc]
add esi, 0x560277ed
push dword [ebp - 0x170]
lea ecx, [ebp - 0xaf4]
call fcn.10021c54
cmp dword [eax], esi
je 0x1004167f
mov dword [ebp - 0xa18], 1
jmp 0x10041686
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0xa10]
cmp eax, dword [ebp - 0xa18]
jl 0x100416a0
mov dword [ebp - 0xa20], 1
jmp 0x100416a7
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0xa20], 0x53c8
je 0x100416bf
mov dword [ebp - 0xa4c], 1
jmp 0x100416c6
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
sub eax, dword [ebp - 0x1a4]
cmp eax, 0x49e864ad
jne 0x100416e5
mov dword [ebp - 0xb48], 1
jmp 0x100416ec
and dword [ebp - 0xb48], 0
push dword [ebp - 0x21c]
lea ecx, [ebp - 0xaf4]
call fcn.10021c54
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xfb8], eax
cmp dword [ebp - 0x1a4], 0
mov esi, dword [ebp - 0x1a4]
push 1
lea ecx, [ebp - 0xaf4]
call fcn.10021c54
mov dword [eax], esi
jmp 0x100415a3
jmp 0x10041573
cmp dword [ebp - 0xb50], 0
je 0x10041752
jmp 0x10041757
jmp 0x10041543
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.10021c38
cmp dword [ebp + 0x10], 0
jbe 0x10041788
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10041788
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1003d104
pop ecx
pop ecx
jmp 0x1004a009
mov dword [ebp - 0x100], 1
mov dword [ebp - 0xa64], 0xffffffff
mov dword [ebp - 0xb58], 0xd28e
mov dword [ebp - 0x39c], 0
jmp 0x100417bf
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 4
jge 0x100417db
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0xcd8], 0xffffffff
jmp 0x100417b2
mov dword [ebp - 0x100], 3
jmp 0x100417f4
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jl 0x10041a82
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0x10a4], 0x58b39d20
mov dword [ebp - 0x1dc], 0xc44d4e2b
mov dword [ebp - 0xfc0], 0xd2a6f9a4
mov dword [ebp - 0x10ac], 0xe85fcb44
mov dword [ebp - 0xfc8], 0xffffffff
mov dword [ebp - 0xfec], 0xf13bcf59
mov dword [ebp - 0xfd0], 0x72305ab
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcd8], 0x2304b25b
mov dword [ebp - 0xe0], 3
jmp 0x1004187b
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x10041a7d
mov dword [ebp - 0x42c], 0x4af12a83
cmp dword [ebp - 0x100], 0xb9c2
jge 0x100418aa
mov dword [ebp - 0xa54], 1
jmp 0x100418b1
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xa54], eax
je 0x100418cb
mov dword [ebp - 0xa5c], 1
jmp 0x100418d2
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa5c]
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0xa64], 0
jne 0x100418ee
cmp dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x100]
sub eax, 4
cmp eax, 0xc86992f1
ja 0x1004190a
mov dword [ebp - 0xa6c], 1
jmp 0x10041911
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
cmp eax, dword [ebp - 0xe0]
jl 0x10041937
mov dword [ebp - 0xaa4], 1
jmp 0x1004193e
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0xcd8]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xa74]
mov dword [ebp + eax*4 - 0xcd8], ecx
imul eax, dword [ebp - 0xa74], 0x6f08
cmp eax, dword [ebp - 0xaa4]
jge 0x10041982
mov dword [ebp - 0xa68], 1
jmp 0x10041989
and dword [ebp - 0xa68], 0
cmp dword [ebp - 0xa68], 4
je 0x100419c1
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0xcd8], 0
je 0x100419a7
jmp 0x10041a7d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcd8], 0
je 0x100419bc
jmp 0x1004186e
jmp 0x10041a43
push 2
lea ecx, [ebp - 0xeac]
call fcn.10021bd6
mov dword [ebp - 4], 2
mov dword [ebp - 0x284], 0
jmp 0x100419ee
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x10041a10
push dword [ebp - 0x284]
lea ecx, [ebp - 0xeac]
call fcn.10021c54
mov dword [eax], 0x670fc244
jmp 0x100419e1
push 0
lea ecx, [ebp - 0xeac]
call fcn.10021c54
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x574]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeac]
call fcn.10021c38
mov dword [ebp - 0x1dc], 0
jmp 0x10041a5c
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jge 0x10041a78
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xcd8], 0xfffffffb
jmp 0x10041a4f
jmp 0x1004186e
jmp 0x100417e7
mov eax, dword [ebp - 0xb58]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xcd8], eax
cmp dword [ebp + 0x10], 0
jne 0x1004638d
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.10034db5
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x60], 0x90ac204e
push 1
lea ecx, [ebp - 0xab4]
call fcn.10021bd6
mov dword [ebp - 4], 3
mov dword [ebp - 0x41c], 0
jmp 0x10041ae3
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 1
jge 0x10041b05
push dword [ebp - 0x41c]
lea ecx, [ebp - 0xab4]
call fcn.10021c54
mov dword [eax], 0xa290be44
jmp 0x10041ad6
mov dword [ebp - 0x60], 0
jmp 0x10041b15
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffff7
jg 0x10041ba2
mov dword [ebp - 0x1e4], 3
mov dword [ebp - 0x1e4], 0
jmp 0x10041b42
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 7
jne 0x10041b8f
mov dword [ebp - 0x208], 0xfffffffc
mov dword [ebp - 0x208], 0
jmp 0x10041b6e
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x10041b8d
push dword [ebp - 0x208]
lea ecx, [ebp - 0xab4]
call fcn.10021c54
or dword [eax], 0xffffffff
jmp 0x10041b61
jmp 0x10041b35
cmp dword [ebp - 0x1e4], 0
je 0x10041b9d
jmp 0x10041b0e
jmp 0x10041b0e
mov dword [ebp - 0x60], 0
jmp 0x10041bb2
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffe9
jne 0x10041de9
mov dword [ebp - 0xa0], 0x95aad853
push 1
lea ecx, [ebp - 0xe7c]
call fcn.10021bd6
mov byte [ebp - 4], 4
mov dword [ebp - 0x28c], 0
jmp 0x10041bf0
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x10041c12
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xe7c]
call fcn.10021c54
mov dword [eax], 0x105fa2ef
jmp 0x10041be3
mov dword [ebp - 0xa0], 0
jmp 0x10041c2b
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x10041dd5
mov dword [ebp - 0x4f4], 9
mov dword [ebp - 0xb60], 4
cmp dword [ebp - 0xa0], 0xa43bddfa
jl 0x10041c64
mov dword [ebp - 0x970], 1
jmp 0x10041c6b
and dword [ebp - 0x970], 0
cmp dword [ebp - 0x970], 0x9986
jg 0x10041c83
mov dword [ebp - 0x4a8], 1
jmp 0x10041c8a
and dword [ebp - 0x4a8], 0
push 0
lea ecx, [ebp - 0xe7c]
call fcn.10021c54
mov ecx, dword [ebp - 0x4a8]
mov dword [eax], ecx
cmp dword [ebp - 0x4a8], 0
je 0x10041d0d
push 0
lea ecx, [ebp - 0xab4]
call fcn.10021c54
push 0
lea ecx, [ebp - 0xab4]
call fcn.10021c54
cmp dword [eax], 0
jne 0x10041ce2
push 0
lea ecx, [ebp - 0xab4]
call fcn.10021c54
cmp dword [eax], 0
jne 0x10041ce2
and dword [ebp - 0x4ec], 0
jmp 0x10041cec
mov dword [ebp - 0x4ec], 1
cmp dword [ebp - 0x4ec], 0x886a
je 0x10041d01
cmp dword [ebp - 0xa0], 0
je 0x10041d0d
mov dword [ebp - 0x978], 1
jmp 0x10041d14
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x4f4], eax
cmp dword [ebp - 0x4f4], 0
je 0x10041d3e
mov eax, 0x7292
test eax, eax
je 0x10041d3e
mov dword [ebp - 0x980], 1
jmp 0x10041d45
and dword [ebp - 0x980], 0
mov esi, dword [ebp - 0xa0]
imul esi, dword [ebp - 0x980]
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xab4]
call fcn.10021c54
cmp dword [eax], esi
jne 0x10041d73
mov dword [ebp - 0x4fc], 1
jmp 0x10041d7a
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0xa0]
test eax, eax
jle 0x10041d96
mov dword [ebp - 0x988], 1
jmp 0x10041d9d
and dword [ebp - 0x988], 0
cmp dword [ebp - 0x988], 1
je 0x10041db2
mov dword [ebp - 0x504], 1
jmp 0x10041db9
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xb60], eax
cmp dword [ebp - 0x60], 0
je 0x10041dd0
jmp 0x10041c1e
jmp 0x10041c1e
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xe7c]
call fcn.10021c38
jmp 0x10041bab
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab4]
call fcn.10021c38
mov dword [ebp - 0x218], 0x7ce5
mov dword [ebp - 0x218], 0xa5d6c05b
mov dword [ebp - 0x218], 0x12
jmp 0x10041e25
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xffffffff
jne 0x10041e7f
mov dword [ebp - 0xc20], 0x248c66f5
cmp dword [ebp - 0xc20], 0
je 0x10041e5f
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x10041e5d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x10041e7d
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x10041e7d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
jmp 0x10041e18
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x108], 1
mov dword [ebp - 0xa8], 0x62ee6d05
mov dword [ebp - 0x3a4], 0
jmp 0x10041eb3
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 1
jge 0x10041ecf
mov eax, dword [ebp - 0x3a4]
mov dword [ebp + eax*4 - 0x9a8], 0x8fb770a7
jmp 0x10041ea6
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x108]
neg eax
mov dword [ebp - 0x990], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x990]
mov dword [ebp + eax - 0x9a8], ecx
mov dword [ebp - 0xa8], 0x2faf
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x990], eax
jne 0x10041f1b
mov dword [ebp - 0x514], 1
jmp 0x10041f22
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x108], 0
jne 0x10041f3a
cmp dword [ebp - 0x7c], 0
jne 0x10041f3a
and dword [ebp - 0x50c], 0
jmp 0x10041f44
mov dword [ebp - 0x50c], 1
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0x50c]
jle 0x10041f5b
mov dword [ebp - 0xc28], 1
jmp 0x10041f62
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xff4], eax
cmp dword [ebp - 0x7c], 0x5890
jne 0x10041f80
mov dword [ebp - 0x998], 1
jmp 0x10041f87
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x998]
add eax, 0xeff3
cmp dword [ebp - 0x514], eax
jle 0x10041fb6
mov dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x9a0]
inc eax
mov dword [ebp - 0x9a0], eax
jmp 0x1004226f
mov dword [ebp - 0x178], 4
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x49c], 0x197cbb4
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 0x534], 0xe18bd2e8
push 3
lea ecx, [ebp - 0xd34]
call fcn.10021bd6
mov dword [ebp - 4], 5
mov dword [ebp - 0x294], 0
jmp 0x10042015
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x10042037
push dword [ebp - 0x294]
lea ecx, [ebp - 0xd34]
call fcn.10021c54
mov dword [eax], 0x8bfa0855
jmp 0x10042008
cmp dword [ebp - 0x178], 0
jne 0x1004219f
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x178]
jle 0x1004205e
mov dword [ebp - 0x51c], 1
jmp 0x10042065
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x51c], eax
je 0x1004207f
mov dword [ebp - 0x4c0], 1
jmp 0x10042086
and dword [ebp - 0x4c0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp + eax - 0x9a8], ecx
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x4c0], eax
jge 0x100420b3
mov dword [ebp - 0x524], 1
jmp 0x100420ba
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x524]
jl 0x100420d4
mov dword [ebp - 0xc30], 1
jmp 0x100420db
and dword [ebp - 0xc30], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xfd8], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x10f8], eax
mov eax, 0x1914cc5c
cmp eax, 0x8fb6f85a
jae 0x1004210b
mov dword [ebp - 0x9b0], 1
jmp 0x10042112
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
cmp eax, dword [ebp - 0x7c]
jle 0x10042135
mov dword [ebp - 0x52c], 1
jmp 0x1004213c
and dword [ebp - 0x52c], 0
mov dword [ebp - 0xa8], 0xd21462cc
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x52c]
jle 0x10042160
mov dword [ebp - 0xc38], 1
jmp 0x10042167
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xff8], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x9b8]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0
je 0x10042196
xor eax, eax
inc eax
jne 0x1004219f
and dword [ebp - 0x9c0], 0
jmp 0x100421a9
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x9c0], eax
jle 0x100421c0
mov dword [ebp - 0x53c], 1
jmp 0x100421c7
and dword [ebp - 0x53c], 0
push 0
lea ecx, [ebp - 0xd34]
call fcn.10021c54
mov ecx, dword [ebp - 0x53c]
mov dword [eax], ecx
mov dword [ebp - 0x108], 0
jmp 0x100421f5
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jg 0x10042260
mov dword [ebp - 0x1ec], 0
jmp 0x10042217
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jg 0x1004225e
mov dword [ebp - 0xa8], 0
jmp 0x10042239
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x1004225c
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xd34]
call fcn.10021c54
cmp dword [eax], 0
je 0x1004225a
jmp 0x1004225c
jmp 0x1004222c
jmp 0x1004220a
jmp 0x100421e8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd34]
call fcn.10021c38
cmp dword [0x1061950c], 0
jne 0x1004635b
mov dword [ebp - 0xc40], 0xedbb
lea eax, [ebp - 0xc40]
push eax
call fcn.1003cdb0
pop ecx
mov dword [ebp - 0x7cc], eax
mov dword [ebp - 0x1c], 7
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x210], 0x1d84
push 2
lea ecx, [ebp - 0xe1c]
call fcn.10021bd6
mov dword [ebp - 4], 6
mov dword [ebp - 0xc60], 0xfffffffc
mov dword [ebp - 0x9c8], 0x7857
mov dword [ebp - 0xc50], 0x10008ec8
cmp dword [ebp - 0x9c8], 0x79b3
jle 0x100423d6
push 0x2ea
call dword [sym.imp.USER32.dll_GetSysColor]
and dword [ebp - 0x3e4], 0
jmp 0x10042317
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x1281
jge 0x100423d6
and dword [ebp - 0x29c], 0
jmp 0x1004233d
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0x4cb4
jge 0x100423d1
and dword [ebp - 0x3ac], 0
jmp 0x10042363
mov eax, dword [ebp - 0x3ac]
inc eax
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0x4f75
jge 0x100423cc
mov eax, dword [ebp - 0x3e4]
and eax, dword [ebp - 0x29c]
and eax, dword [ebp - 0x3ac]
cdq
mov dword [ebp - 0xb6c], eax
mov dword [ebp - 0xb68], edx
push dword [ebp - 0xb68]
push dword [ebp - 0xb6c]
lea ecx, [ebp - 0x11e4]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0xc48], eax
mov ecx, dword [ebp - 0xc48]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x11e4]
call fcn.10021676
jmp 0x10042356
jmp 0x10042330
jmp 0x1004230a
mov dword [ebp - 0x2a4], 0
jmp 0x100423ef
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10042411
push dword [ebp - 0x2a4]
lea ecx, [ebp - 0xe1c]
call fcn.10021c54
mov dword [eax], 4
jmp 0x100423e2
mov byte [ebp - 4], 7
cmp dword [ebp - 0x9c8], 0x770a
jge 0x1004242d
push dword [ebp - 0xc50]
call fcn.10057a16
pop ecx
jmp 0x10042449
mov dword [ebp - 4], 6
jmp 0x10042459
mov eax, dword [ebp - 0x1c]
sub eax, 0x7d3bb8a2
cmp eax, 0xfffc
jae 0x10042474
mov dword [ebp - 0x544], 1
jmp 0x1004247b
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x544], eax
jg 0x10042492
mov dword [ebp - 0x9d0], 1
jmp 0x10042499
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x9d0]
test eax, eax
jne 0x100424b6
cmp dword [ebp - 0x1c], 0
jne 0x100424b6
and dword [ebp - 0xc58], 0
jmp 0x100424c0
mov dword [ebp - 0xc58], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10a8], eax
cmp dword [ebp - 0x1c], 0
jne 0x100424d6
cmp dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1004], eax
cmp dword [ebp - 0x1c], 0x8700
jl 0x100424f4
mov dword [ebp - 0x54c], 1
jmp 0x100424fb
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0xffff
jbe 0x10042513
mov dword [ebp - 0x9d8], 1
jmp 0x1004251a
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0
je 0x10042532
cmp dword [ebp - 0x1c], 0
jne 0x10042532
and dword [ebp - 0x554], 0
jmp 0x1004253c
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x554]
jge 0x10042553
mov dword [ebp - 0x9e0], 1
jmp 0x1004255a
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 0xbc21
jg 0x10042572
mov dword [ebp - 0x55c], 1
jmp 0x10042579
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x210]
imul eax, dword [ebp - 0x55c]
cmp eax, 1
ja 0x10042597
mov dword [ebp - 0x9e8], 1
jmp 0x1004259e
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x9e8], eax
jge 0x100425b8
mov dword [ebp - 0x564], 1
jmp 0x100425bf
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0x564]
lea eax, [ecx + eax - 0x28ad]
imul eax, dword [ebp - 0xc8]
test eax, eax
je 0x10042609
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x10042604
push 0x6bd
push 0x1731
push 0xb36
call dword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x100426cb
mov dword [ebp - 0xc8], 0
jmp 0x10042622
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jg 0x100426cb
mov dword [ebp - 0x1c], 0
jmp 0x1004263f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x1004265f
mov byte [ebp - 0x166], 0
movzx eax, byte [ebp - 0x166]
test eax, eax
je 0x1004265d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
jmp 0x10042638
mov dword [ebp - 0x210], 0
jmp 0x10042678
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jg 0x100426c6
mov dword [ebp - 0x1c], 0
jmp 0x10042691
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x100426c4
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x100426c2
push 0
push 0
push 0x1b43
push 0x1954
push 0x254f
call dword [sym.imp.USER32.dll_ScrollWindow]
jmp 0x1004268a
jmp 0x1004266b
jmp 0x10042615
push 0
lea ecx, [ebp - 0xe1c]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0xc60], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe1c]
call fcn.10021c38
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x180], 0x7762406c
mov dword [ebp - 0x110], 6
mov dword [ebp - 0xc80], 0x9d30cd94
mov dword [ebp - 0x844], 0x2d056b0c
push 3
lea ecx, [ebp - 0xc90]
call fcn.10021bd6
mov dword [ebp - 4], 9
mov dword [ebp - 0x64], 0
jmp 0x10042763
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10042779
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xb14], 0xc85f70ad
jmp 0x1004275c
mov dword [ebp - 0x64], 0
jmp 0x10042789
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x100427a5
push dword [ebp - 0x64]
lea ecx, [ebp - 0xc90]
call fcn.10021c54
mov dword [eax], 0x33ad2d1e
jmp 0x10042782
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x234], 3
jmp 0x100427d0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x234], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x234], 0
jl 0x100430dd
mov dword [ebp - 0x434], 0x1978e60d
push 3
lea ecx, [ebp - 0xd7c]
call fcn.10021bd6
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x488], 3
mov dword [ebp - 0x68], 0
jmp 0x10042818
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1004282b
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x30], 0x70a77c87
jmp 0x10042811
mov dword [ebp - 0x68], 0
jmp 0x1004283b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10042857
push dword [ebp - 0x68]
lea ecx, [ebp - 0xd7c]
call fcn.10021c54
mov dword [eax], 1
jmp 0x10042834
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x30], 0
jmp 0x1004287c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x30], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 3
jg 0x10042eac
mov dword [ebp - 0x198], 0xfffd
mov dword [ebp - 0x1f4], 0xa90ef874
mov dword [ebp - 0x404], 1
or eax, 0xffffffff
je 0x1004290a
mov eax, 0x1cd43096
test eax, eax
je 0x100428f9
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x234]
mov ecx, dword [ebp + ecx*4 - 0xb14]
imul ecx, dword [ebp + eax - 0x234]
test ecx, ecx
je 0x100428f9
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb14], 0
je 0x100428f9
mov dword [ebp - 0x9f0], 1
jmp 0x10042900
and dword [ebp - 0x9f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov eax, dword [ebp + eax*4 - 0xb14]
mov dword [ebp - 0x10e0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov dword [ebp - 0xef0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
cmp eax, dword [ebp - 0x198]
jne 0x10042962
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0
jne 0x10042962
and dword [ebp - 0x56c], 0
jmp 0x1004296c
mov dword [ebp - 0x56c], 1
cmp dword [ebp - 0x56c], 0x442
jle 0x10042984
mov dword [ebp - 0x9f8], 1
jmp 0x1004298b
and dword [ebp - 0x9f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x9f8], eax
je 0x100429a9
mov dword [ebp - 0xc68], 1
jmp 0x100429b0
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xef4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov eax, dword [ebp + eax*4 - 0xb14]
mov dword [ebp - 0xefc], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x30]
cmp ecx, dword [ebp + eax - 0x234]
jne 0x100429f9
mov dword [ebp - 0xa00], 1
jmp 0x10042a00
and dword [ebp - 0xa00], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov eax, dword [ebp + eax*4 - 0xb14]
cmp eax, dword [ebp - 0xa00]
jne 0x10042a27
mov dword [ebp - 0x81c], 1
jmp 0x10042a2e
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x198], 0
jmp 0x10042a53
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jg 0x10042ea7
push 4
lea ecx, [ebp - 0xa84]
call fcn.10021bd6
mov byte [ebp - 4], 0xb
push 2
lea ecx, [ebp - 0xe28]
call fcn.10021bd6
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x84], 0
jmp 0x10042a9b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x10042aba
push dword [ebp - 0x84]
lea ecx, [ebp - 0xa84]
call fcn.10021c54
and dword [eax], 0
jmp 0x10042a8e
mov dword [ebp - 0x84], 0
jmp 0x10042ad3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x10042af5
push dword [ebp - 0x84]
lea ecx, [ebp - 0xe28]
call fcn.10021c54
mov dword [eax], 2
jmp 0x10042ac6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xf04], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x234]
mov dword [ebp - 0xf0c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb14], 0xacc167df
ja 0x10042b49
cmp dword [ebp - 0x434], 0
jne 0x10042b49
and dword [ebp - 0x57c], 0
jmp 0x10042b53
mov dword [ebp - 0x57c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
add eax, dword [ebp - 0x57c]
mov dword [ebp - 0xa2c], eax
push 2
lea ecx, [ebp - 0xa84]
call fcn.10021c54
mov ecx, dword [ebp - 0xa2c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x180]
jg 0x10042ba4
mov dword [ebp - 0x584], 1
jmp 0x10042bab
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x404], eax
push 2
lea ecx, [ebp - 0xa84]
call fcn.10021c54
cmp dword [eax], 0
je 0x10042d2e
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x1f4]
jl 0x10042bf4
mov dword [ebp - 0x824], 1
jmp 0x10042bfb
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x824], eax
jl 0x10042c15
mov dword [ebp - 0xa1c], 1
jmp 0x10042c1c
and dword [ebp - 0xa1c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0
je 0x10042c3e
mov eax, 0x7135
test eax, eax
je 0x10042c3e
mov dword [ebp - 0x58c], 1
jmp 0x10042c45
and dword [ebp - 0x58c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x58c], eax
jl 0x10042c63
mov dword [ebp - 0x974], 1
jmp 0x10042c6a
and dword [ebp - 0x974], 0
push 2
lea ecx, [ebp - 0xa84]
call fcn.10021c54
mov eax, dword [eax]
mov ecx, dword [ebp - 0x974]
lea eax, [ecx + eax + 0x988a]
test eax, eax
jne 0x10042c9c
cmp dword [ebp - 0x1f4], 0
jne 0x10042c9c
and dword [ebp - 0x594], 0
jmp 0x10042ca6
mov dword [ebp - 0x594], 1
cmp dword [ebp - 0x594], 0x9f7c1ae2
jne 0x10042cbe
mov dword [ebp - 0x82c], 1
jmp 0x10042cc5
and dword [ebp - 0x82c], 0
mov esi, dword [ebp - 0x434]
imul esi, dword [ebp - 0x82c]
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10021c54
cmp esi, dword [eax]
je 0x10042cef
mov dword [ebp - 0x59c], 1
jmp 0x10042cf6
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x59c]
sub ecx, dword [ebp + eax - 0x234]
imul ecx, dword [ebp - 0xa1c]
mov dword [ebp - 0x404], ecx
mov eax, dword [ebp - 0x404]
add eax, 0xffff
je 0x10042d2e
mov dword [ebp - 0x5a4], 1
jmp 0x10042d35
and dword [ebp - 0x5a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
cmp dword [ebp - 0x5a4], eax
jge 0x10042d55
mov dword [ebp - 0x834], 1
jmp 0x10042d5c
and dword [ebp - 0x834], 0
push 3
lea ecx, [ebp - 0xa84]
call fcn.10021c54
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [eax]
je 0x10042d7f
mov dword [ebp - 0x5ac], 1
jmp 0x10042d86
and dword [ebp - 0x5ac], 0
cmp dword [ebp - 0x5ac], 0xffffffff
jne 0x10042d9b
mov dword [ebp - 0x97c], 1
jmp 0x10042da2
and dword [ebp - 0x97c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov eax, dword [ebp + eax*4 - 0xb14]
cmp dword [ebp - 0x97c], eax
jne 0x10042dc9
mov dword [ebp - 0x5b4], 1
jmp 0x10042dd0
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
add eax, 0xe871
jne 0x10042de9
mov dword [ebp - 0x83c], 1
jmp 0x10042df0
and dword [ebp - 0x83c], 0
push 2
lea ecx, [ebp - 0xa84]
call fcn.10021c54
mov ecx, dword [ebp - 0x83c]
cmp ecx, dword [eax]
je 0x10042e13
mov dword [ebp - 0x5bc], 1
jmp 0x10042e1a
and dword [ebp - 0x5bc], 0
push 2
lea ecx, [ebp - 0xa84]
call fcn.10021c54
mov ecx, dword [ebp - 0x5bc]
cmp ecx, dword [eax]
jge 0x10042e3d
mov dword [ebp - 0xa34], 1
jmp 0x10042e44
and dword [ebp - 0xa34], 0
cmp dword [ebp - 0xa34], 0xbf33464e
ja 0x10042e5c
mov dword [ebp - 0x5c4], 1
jmp 0x10042e63
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x180], eax
mov esi, dword [ebp - 0x180]
push 0
lea ecx, [ebp - 0xe28]
call fcn.10021c54
mov dword [eax], esi
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xe28]
call fcn.10021c38
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa84]
call fcn.10021c38
jmp 0x10042a46
jmp 0x10042867
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 1
jbe 0x10042ec5
mov dword [ebp - 0xc70], 1
jmp 0x10042ecc
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xf14], eax
push 2
lea ecx, [ebp - 0xc90]
call fcn.10021c54
mov dword [eax], 0xffff
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x30], 0xffff
jl 0x10042f07
mov dword [ebp - 0xc78], 1
jmp 0x10042f0e
and dword [ebp - 0xc78], 0
push 0
lea ecx, [ebp - 0xc90]
call fcn.10021c54
push 0
lea ecx, [ebp - 0xc90]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0x844]
cmp eax, dword [ebp - 0xc80]
jge 0x10042f4a
mov dword [ebp - 0x5cc], 1
jmp 0x10042f51
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0x5cc]
add eax, 0x4a103c28
mov dword [ebp - 0xd10], eax
mov eax, dword [ebp - 0x488]
inc eax
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0xcfc]
cmp eax, dword [ebp - 0xd10]
jl 0x10042f95
mov dword [ebp - 0x984], 1
jmp 0x10042f9c
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x984], eax
jne 0x10042fb6
mov dword [ebp - 0x5d4], 1
jmp 0x10042fbd
and dword [ebp - 0x5d4], 0
push 0
lea ecx, [ebp - 0xd7c]
call fcn.10021c54
mov ecx, dword [ebp - 0x5d4]
add ecx, dword [eax]
cmp ecx, 0x46b2
jne 0x10042fe6
mov dword [ebp - 0x84c], 1
jmp 0x10042fed
and dword [ebp - 0x84c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30]
cmp dword [ebp - 0x84c], eax
jge 0x1004300b
mov dword [ebp - 0x5dc], 1
jmp 0x10043012
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x5dc], eax
jne 0x1004302c
mov dword [ebp - 0xa24], 1
jmp 0x10043033
and dword [ebp - 0xa24], 0
cmp dword [ebp - 0xa24], 0xfffffffd
jne 0x1004304b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x234], 0
je 0x10043060
cmp dword [ebp - 0x180], 0
je 0x10043060
mov dword [ebp - 0x5e4], 1
jmp 0x10043067
and dword [ebp - 0x5e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x234]
mov eax, dword [ebp + eax*4 - 0xb14]
imul eax, dword [ebp - 0x5e4]
test eax, eax
jne 0x10043097
cmp dword [ebp - 0x110], 0
jne 0x10043097
and dword [ebp - 0x854], 0
jmp 0x100430a1
mov dword [ebp - 0x854], 1
cmp dword [ebp - 0x854], 7
jle 0x100430b6
mov dword [ebp - 0x5ec], 1
jmp 0x100430bd
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd7c]
call fcn.10021c38
jmp 0x100427b7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc90]
call fcn.10021c38
mov byte [ebp - 0x254], 8
mov byte [ebp - 0x253], 0xd4
mov byte [ebp - 0x252], 0xc
mov byte [ebp - 0x251], 0x38
mov byte [ebp - 0x250], 6
mov byte [ebp - 0x24f], 0x24
mov byte [ebp - 0x24e], 0
mov byte [ebp - 0x24d], 0x34
mov byte [ebp - 0x24c], 0xa
mov byte [ebp - 0x24b], 2
mov byte [ebp - 0x24a], 3
mov byte [ebp - 0x249], 0x13
mov byte [ebp - 0x248], 7
mov byte [ebp - 0x247], 0x3f
mov byte [ebp - 0x246], 0xb
mov byte [ebp - 0x245], 0x11
mov byte [ebp - 0x244], 5
mov byte [ebp - 0x243], 0xa
mov byte [ebp - 0x242], 3
mov byte [ebp - 0x241], 0x85
mov byte [ebp - 0x240], 0xc9
mov byte [ebp - 0x23f], 0xbd
mov byte [ebp - 0x23e], 4
mov byte [ebp - 0x23d], 0x17
mov byte [ebp - 0x23c], 1
mov byte [ebp - 0x23b], 0
mov byte [ebp - 0x23a], 2
mov byte [ebp - 0x239], 0x11
mov byte [ebp - 0x238], 9
mov byte [ebp - 0x237], 0x1a
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x254]
and eax, 0xbb
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x254]
or ecx, 0xbb
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x254]
mov byte [ebp + eax - 0xb04], cl
mov dword [ebp - 0x28], 2
and dword [ebp - 0x1f8], 0
jmp 0x10043214
mov eax, dword [ebp - 0x28]
inc eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1e
jae 0x10043ebe
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x254]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x28], eax
jne 0x10043557
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x254]
inc eax
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x48], 0x1f9c
push 2
lea ecx, [ebp - 0x4dc]
call fcn.10021bd6
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xda0], 3
mov dword [ebp - 0xd9c], 3
mov dword [ebp - 0xd98], 3
mov dword [ebp - 0xd94], 3
mov dword [ebp - 0x2ac], 0
jmp 0x100432a7
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x100432c9
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
mov dword [eax], 1
jmp 0x1004329a
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0
jmp 0x100432e0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jg 0x1004352e
mov dword [ebp - 0xf1c], 0xffffffff
mov dword [ebp - 0x5fc], 0xe9646b8d
mov dword [ebp - 0xd14], 0x555145cc
mov dword [ebp - 0xf24], 0xfffffffd
mov dword [ebp - 0xf2c], 0xffffffff
mov dword [ebp - 0xf34], 0xffffffff
mov dword [ebp - 0x43c], 0x1cb6a7f4
mov dword [ebp - 0x3b4], 0
jmp 0x10043349
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 1
jge 0x10043365
mov eax, dword [ebp - 0x3b4]
mov dword [ebp + eax*4 - 0x444], 0x66e9f086
jmp 0x1004333c
push 4
pop eax
imul esi, eax, 0
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp + esi - 0xda0], eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
mov eax, dword [ebp - 0x43c]
mov ecx, dword [ebp - 0x43c]
inc ecx
mov dword [ebp - 0x43c], ecx
test eax, eax
jne 0x100433bd
push 1
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
cmp dword [eax], 0
je 0x10043475
mov eax, 0x7ae9f903
test eax, eax
je 0x100433d8
cmp dword [ebp - 0x48], 0
je 0x100433d8
mov dword [ebp - 0x98c], 1
jmp 0x100433df
and dword [ebp - 0x98c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xda0]
cmp dword [ebp - 0x98c], eax
jg 0x10043400
mov dword [ebp - 0x5f4], 1
jmp 0x10043407
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0xbbfad0d7
jbe 0x1004341f
mov dword [ebp - 0x85c], 1
jmp 0x10043426
and dword [ebp - 0x85c], 0
cmp dword [ebp - 0x85c], 0x52bf
jl 0x1004343e
mov dword [ebp - 0xd18], 1
jmp 0x10043445
and dword [ebp - 0xd18], 0
mov eax, dword [ebp - 0xd14]
mov dword [ebp - 0xf3c], eax
push dword [ebp - 0x48]
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
imul eax, dword [eax], 0xf9e6
test eax, eax
je 0x10043475
mov dword [ebp - 0x484], 1
jmp 0x1004347c
and dword [ebp - 0x484], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x484]
mov dword [ebp + eax - 0x444], ecx
push 0
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
mov ecx, dword [ebp - 0x484]
cmp ecx, dword [eax]
jl 0x100434b2
mov dword [ebp - 0xbb4], 1
jmp 0x100434b9
and dword [ebp - 0xbb4], 0
push 1
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0xf4c], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x444]
push 1
lea ecx, [ebp - 0x4dc]
call fcn.10021c54
cmp esi, dword [eax]
jg 0x1004350f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x444], 1
jmp 0x10043529
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x10043529
push 0
call dword [sym.imp.USER32.dll_DestroyCursor]
jmp 0x100432d9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4dc]
call fcn.10021c38
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x254]
mov ecx, dword [ebp - 0x28]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x28], eax
jmp 0x1004320c
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x2b4], 0
jmp 0x1004357a
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 4
jge 0x10043596
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x129c], 0xb2c21353
jmp 0x1004356d
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x100435b9
push 0
push 0
push 0
push 0x3c9
call dword [sym.imp.GDI32.dll_PolyPolyline]
mov dword [ebp - 0x3ec], 0
jmp 0x100435d2
mov eax, dword [ebp - 0x3ec]
inc eax
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 3
jg 0x100437ba
mov dword [ebp - 0x2cc], 0x17be1879
mov dword [ebp - 0xa3c], 0x27cb
mov dword [ebp - 0xb30], 0x10008f48
cmp dword [ebp - 0xa3c], 0x2801
jle 0x10043715
and dword [ebp - 0x2bc], 0
jmp 0x10043623
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0x4d1d
jge 0x10043715
and dword [ebp - 0x3bc], 0
jmp 0x10043649
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0x6a83
jge 0x10043710
and dword [ebp - 0x2c4], 0
jmp 0x1004366f
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x82f
jge 0x1004370b
and dword [ebp - 0x414], 0
jmp 0x10043695
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 0x57c3
jge 0x10043706
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x3bc]
sub eax, dword [ebp - 0x2c4]
mov ecx, dword [ebp - 0x414]
sar eax, cl
cdq
mov dword [ebp - 0xb78], eax
mov dword [ebp - 0xb74], edx
push dword [ebp - 0xb74]
push dword [ebp - 0xb78]
lea ecx, [ebp - 0x1268]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0xd00], eax
mov ecx, dword [ebp - 0xd00]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x1268]
call fcn.10021676
jmp 0x10043688
jmp 0x10043662
jmp 0x1004363c
jmp 0x10043616
mov dword [ebp - 0x2cc], 0
jmp 0x1004372e
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jg 0x10043753
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x10043751
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x10043721
mov dword [ebp - 4], 0xe
cmp dword [ebp - 0xa3c], 0x257e
jge 0x10043772
push dword [ebp - 0xb30]
call fcn.10057a16
pop ecx
jmp 0x1004378e
or dword [ebp - 4], 0xffffffff
jmp 0x10043798
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x100437b5
push 0xf41
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x100435c5
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1f8]
movzx eax, byte [ebp + eax - 0x256]
movsx eax, byte [ebp + eax - 0xb04]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x253]
and ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1f8]
movzx eax, byte [ebp + eax - 0x256]
movsx eax, byte [ebp + eax - 0xb04]
mov edx, dword [ebp - 0x28]
movzx edx, byte [ebp + edx - 0x253]
and edx, eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x1f8]
movzx eax, byte [ebp + eax - 0x256]
movsx eax, byte [ebp + eax - 0xb04]
mov esi, dword [ebp - 0x28]
movzx ebx, byte [ebp + esi - 0x253]
add ebx, eax
sub ebx, edx
sub ebx, ecx
mov eax, dword [ebp - 0x28]
movzx eax, byte [ebp + eax - 0x254]
mov byte [ebp + eax - 0xb04], bl
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0xd8], 6
mov dword [ebp - 0x9ac], 0x3403e1fe
mov dword [ebp - 0x3c4], 0xfffffff6
mov dword [ebp - 0x45c], 0xffffffff
mov dword [ebp - 0x4a4], 0xd1edbcc7
mov dword [ebp - 0xb44], 0x8f4f80cf
cmp dword [ebp - 0x14], 6
jne 0x10043897
mov dword [ebp - 0xa44], 1
jmp 0x1004389e
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf54], eax
cmp dword [ebp - 0x14], 0
je 0x100438c5
cmp dword [ebp - 0x14], 0
je 0x100438c5
cmp dword [ebp - 0x14], 0
je 0x100438c5
mov dword [ebp - 0x604], 1
jmp 0x100438cc
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x604], eax
jle 0x100438e3
mov dword [ebp - 0x864], 1
jmp 0x100438ea
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x864], eax
je 0x10043901
mov dword [ebp - 0x60c], 1
jmp 0x10043908
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x60c], eax
jne 0x1004391f
mov dword [ebp - 0x994], 1
jmp 0x10043926
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x994], eax
jge 0x1004393d
mov dword [ebp - 0x614], 1
jmp 0x10043944
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x614], eax
jle 0x1004395b
mov dword [ebp - 0x86c], 1
jmp 0x10043962
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x86c], eax
jge 0x10043979
mov dword [ebp - 0x61c], 1
jmp 0x10043980
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0x1c2e
je 0x10043998
mov dword [ebp - 0x624], 1
jmp 0x1004399f
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0xa44]
imul eax, dword [ebp - 0x624]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 7
jl 0x10043d3f
mov dword [ebp - 0x1a0], 0xc164
mov dword [ebp - 0xb3c], 5
mov dword [ebp - 0x44c], 0xbac41177
mov dword [ebp - 0x48c], 1
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0xbb8], 0xe148cb42
mov dword [ebp - 0x9a4], 0xfffffff6
cmp dword [ebp - 0x14], 0
je 0x10043aff
cmp dword [ebp - 0x14], 1
jb 0x10043a21
mov dword [ebp - 0x874], 1
jmp 0x10043a28
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
sub eax, 0x90b8
cmp eax, dword [ebp - 0x14]
je 0x10043a44
mov dword [ebp - 0x62c], 1
jmp 0x10043a4b
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x62c], eax
jl 0x10043a65
mov dword [ebp - 0xb34], 1
jmp 0x10043a6c
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf5c], eax
cmp dword [ebp - 0x1a0], 0x82b5dfeb
jb 0x10043a8d
mov dword [ebp - 0xbb0], 1
jmp 0x10043a94
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xf64], eax
cmp dword [ebp - 0x1a0], 0x3380
je 0x10043ab8
mov dword [ebp - 0x99c], 1
jmp 0x10043abf
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x9ac], eax
xor eax, eax
inc eax
imul eax, eax, 0x2c1
imul eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
jne 0x10043af3
cmp dword [ebp - 0xb3c], 0
je 0x10043aff
mov dword [ebp - 0x634], 1
jmp 0x10043b06
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x44c]
cmp eax, dword [ebp - 0x45c]
jge 0x10043b2c
mov dword [ebp - 0x87c], 1
jmp 0x10043b33
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 0xe4d7
jle 0x10043b4b
mov dword [ebp - 0x63c], 1
jmp 0x10043b52
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x63c], eax
jg 0x10043b69
mov dword [ebp - 0xa30], 1
jmp 0x10043b70
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xa30], eax
jge 0x10043b87
mov dword [ebp - 0x644], 1
jmp 0x10043b8e
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x48c], eax
cmp dword [ebp - 0x48c], 0
jne 0x10043baf
mov dword [ebp - 0x884], 1
jmp 0x10043bb6
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 6
je 0x10043bd7
mov dword [ebp - 0x64c], 1
jmp 0x10043bde
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
add eax, 8
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0xf74], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0xd8]
add eax, dword [ebp - 0x9a4]
sub eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x1a0], eax
jle 0x10043c37
mov dword [ebp - 0x654], 1
jmp 0x10043c3e
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0x14], 0x76df
jge 0x10043c5f
mov dword [ebp - 0x664], 1
jmp 0x10043c66
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x4a4]
jne 0x10043c7d
mov dword [ebp - 0x88c], 1
jmp 0x10043c84
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x44c]
cmp dword [ebp - 0x88c], eax
jg 0x10043c9e
mov dword [ebp - 0x65c], 1
jmp 0x10043ca5
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 0
jne 0x10043ccc
cmp dword [ebp - 0x48c], 0
jne 0x10043ccc
and dword [ebp - 0xa98], 0
jmp 0x10043cd6
mov dword [ebp - 0xa98], 1
mov eax, dword [ebp - 0xa98]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
sub eax, 0x1c17
mov ecx, dword [ebp - 0x45c]
imul ecx, eax
test ecx, ecx
je 0x10043d06
mov dword [ebp - 0x894], 1
jmp 0x10043d0d
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x664]
cmp eax, dword [ebp - 0x894]
jg 0x10043d27
mov dword [ebp - 0x66c], 1
jmp 0x10043d2e
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x9ac], eax
jmp 0x10043eb2
mov dword [ebp - 0x674], 0xfffffffd
mov dword [ebp - 0x2d4], 0
jmp 0x10043d62
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x10043d7e
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xd64], 0xcccf04a
jmp 0x10043d55
mov dword [ebp - 0x14], 0
jmp 0x10043d8e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jg 0x10043eb2
mov dword [ebp - 0xbc0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xd64], 0
je 0x10043e39
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd64], 0
je 0x10043e39
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x674]
add ecx, dword [ebp + eax*4 - 0xd64]
cmp ecx, dword [ebp - 0x674]
jg 0x10043de6
mov dword [ebp - 0x454], 1
jmp 0x10043ded
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x454]
mov dword [ebp + eax*4 - 0xd64], ecx
mov eax, dword [ebp - 0x454]
dec eax
cmp eax, dword [ebp - 0xb44]
je 0x10043e18
mov dword [ebp - 0x89c], 1
jmp 0x10043e1f
and dword [ebp - 0x89c], 0
imul eax, dword [ebp - 0x89c], 0x9921
test eax, eax
je 0x10043e39
mov dword [ebp - 0x67c], 1
jmp 0x10043e40
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0xbc0]
cmp dword [ebp - 0x67c], eax
jle 0x10043e5a
mov dword [ebp - 0xa38], 1
jmp 0x10043e61
and dword [ebp - 0xa38], 0
cmp dword [ebp - 0xa38], 0xebdd5e18
je 0x10043e79
mov dword [ebp - 0x684], 1
jmp 0x10043e80
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x4a4]
cmp dword [ebp - 0x684], eax
jl 0x10043e9a
mov dword [ebp - 0x8a4], 1
jmp 0x10043ea1
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0x45c], eax
jmp 0x10043d87
and dword [ebp - 0x1f8], 0
jmp 0x1004320c
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0xb04], 0
push 2
lea ecx, [ebp - 0xca0]
call fcn.10021bd6
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x118], 0x2ee76f50
mov dword [ebp - 0x1fc], 0xfffffffd
mov dword [ebp - 0xf7c], 0xfffffffe
mov dword [ebp - 0x3f4], 0
jmp 0x10043f17
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 2
jge 0x10043f39
push dword [ebp - 0x3f4]
lea ecx, [ebp - 0xca0]
call fcn.10021c54
mov dword [eax], 1
jmp 0x10043f0a
mov dword [ebp - 0x118], 0
jmp 0x10043f52
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jg 0x1004413c
push 2
lea ecx, [ebp - 0xe40]
call fcn.10021bd6
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xf84], 0x6f8c7b5c
mov dword [ebp - 0x68c], 0x31e1
mov dword [ebp - 0x2dc], 0
jmp 0x10043f9d
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 2
jge 0x10043fbc
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xe40]
call fcn.10021c54
or dword [eax], 0xffffffff
jmp 0x10043f90
mov eax, dword [ebp - 0x68c]
dec eax
mov dword [ebp - 0x68c], eax
cmp dword [ebp - 0x1fc], 1
jbe 0x10043fde
mov dword [ebp - 0x9b4], 1
jmp 0x10043fe5
and dword [ebp - 0x9b4], 0
push dword [ebp - 0x118]
lea ecx, [ebp - 0xca0]
call fcn.10021c54
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9b4]
jl 0x1004400c
mov dword [ebp - 0xa70], 1
jmp 0x10044013
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xf8c], eax
push 0
lea ecx, [ebp - 0xca0]
call fcn.10021c54
cmp dword [ebp - 0x1fc], 0
jne 0x10044047
cmp dword [ebp - 0x1fc], 0
jne 0x10044047
and dword [ebp - 0x694], 0
jmp 0x10044051
mov dword [ebp - 0x694], 1
cmp dword [ebp - 0x694], 0xffffffff
jg 0x1004406c
mov eax, 0x60d743cc
test eax, eax
jne 0x1004406c
and dword [ebp - 0x8ac], 0
jmp 0x10044076
mov dword [ebp - 0x8ac], 1
push 0
lea ecx, [ebp - 0xe40]
call fcn.10021c54
mov ecx, dword [ebp - 0x8ac]
cmp ecx, dword [eax]
jl 0x10044099
mov dword [ebp - 0x69c], 1
jmp 0x100440a0
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 0xffffffff
jbe 0x100440b0
cmp dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x118]
jge 0x100440ca
mov dword [ebp - 0x6a4], 1
jmp 0x100440d1
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0xa70]
add eax, dword [ebp - 0x6a4]
cmp eax, 0x1210
je 0x100440f0
mov dword [ebp - 0x8b4], 1
jmp 0x100440f7
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 0xfffffffe
jne 0x1004410c
mov dword [ebp - 0x6ac], 1
jmp 0x10044113
and dword [ebp - 0x6ac], 0
push 0
lea ecx, [ebp - 0xca0]
call fcn.10021c54
mov ecx, dword [ebp - 0x6ac]
mov dword [eax], ecx
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe40]
call fcn.10021c38
jmp 0x10043f45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xca0]
call fcn.10021c38
lea eax, [ebp - 0xb04]
push eax
lea ecx, [ebp - 0x1238]
call fcn.1004afba
mov dword [ebp - 0xb4c], eax
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xbc8], eax
mov dword [ebp - 4], 0x12
mov edx, dword [ebp - 0x7cc]
mov ecx, dword [ebp - 0xbc8]
call fcn.10034db5
mov dword [0x1061950c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1238]
call fcn.10032e9e
push 2
lea ecx, [ebp - 0x1c0]
call fcn.10021bd6
mov dword [ebp - 4], 0x13
mov dword [ebp - 0xbd0], 0xc9995890
mov dword [ebp - 0xb5c], 0xffffffff
mov dword [ebp - 0x120], 0xfffffffd
mov dword [ebp - 0xb64], 3
mov dword [ebp - 0xb0], 0
jmp 0x100441f0
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1004420c
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x188], 0x4a8c6a53
jmp 0x100441e3
mov dword [ebp - 0xb0], 0
jmp 0x10044225
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10044247
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov dword [eax], 0x16df251d
jmp 0x10044218
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
and dword [eax], 0
jmp 0x1004427d
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov dword [ebp - 0x9bc], eax
mov eax, dword [ebp - 0x9bc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
cmp dword [eax], 0
jg 0x1004448e
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x188], 0
je 0x100442ca
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
cmp dword [eax], 0
je 0x100442ca
mov dword [ebp - 0xb54], 1
jmp 0x100442d1
and dword [ebp - 0xb54], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x188]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0xb5c], 1
jl 0x10044302
mov dword [ebp - 0x6b4], 1
jmp 0x10044309
and dword [ebp - 0x6b4], 0
mov esi, dword [ebp - 0x6b4]
inc esi
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
cmp esi, dword [eax]
jne 0x1004432d
mov dword [ebp - 0x8bc], 1
jmp 0x10044334
and dword [ebp - 0x8bc], 0
imul esi, dword [ebp - 0x8bc], 3
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
cmp dword [eax], esi
jl 0x10044358
mov dword [ebp - 0x6bc], 1
jmp 0x1004435f
and dword [ebp - 0x6bc], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov ecx, dword [ebp - 0x6bc]
cmp ecx, dword [eax]
jge 0x10044382
mov dword [ebp - 0xa40], 1
jmp 0x10044389
and dword [ebp - 0xa40], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x188]
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov ecx, dword [ebp - 0xa40]
sub ecx, dword [eax]
cmp ecx, esi
jge 0x100443c4
mov dword [ebp - 0x6c4], 1
jmp 0x100443cb
and dword [ebp - 0x6c4], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x188]
cmp dword [ebp - 0x6c4], eax
jle 0x100443f5
mov dword [ebp - 0x8c4], 1
jmp 0x100443fc
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
add eax, 0x2715
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x120]
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
add esi, dword [eax]
jne 0x10044446
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x188], 0
jne 0x10044446
and dword [ebp - 0xbd8], 0
jmp 0x10044450
mov dword [ebp - 0xbd8], 1
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x188]
mov dword [ebp - 0xb64], eax
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x10044489
push 0x1415
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x10044259
mov dword [ebp - 0x120], 0
jmp 0x100444a7
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jge 0x100444c9
push dword [ebp - 0x120]
lea ecx, [ebp - 0x1c0]
call fcn.10021c54
mov dword [eax], 8
jmp 0x1004449a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c0]
call fcn.10021c38
and dword [ebp - 0x2ec], 0
jmp 0x100444ee
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 0xe
jae 0x100446fa
mov dword [ebp - 0xd0], 0x5baf43b7
mov dword [ebp - 0x378], 0
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xd0], 0
jmp 0x10044535
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1a
jge 0x100446e7
mov dword [ebp - 0x3cc], 0xffffffff
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0x6e4], 0xa6b42be1
mov dword [ebp - 0x378], 0x266d210e
cmp dword [ebp - 0x378], 0
je 0x10044584
or eax, 0xffffffff
je 0x10044584
mov dword [ebp - 0x6cc], 1
jmp 0x1004458b
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xd0]
cmp eax, dword [ebp - 0x3cc]
je 0x100445a5
mov dword [ebp - 0x9c4], 1
jmp 0x100445ac
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x6cc]
cmp eax, dword [ebp - 0x9c4]
jl 0x100445c6
mov dword [ebp - 0xbe0], 1
jmp 0x100445cd
and dword [ebp - 0xbe0], 0
mov eax, 0xfa1e
test eax, eax
jne 0x100445e8
mov eax, 0x1912
test eax, eax
jne 0x100445e8
and dword [ebp - 0x6d4], 0
jmp 0x100445f2
mov dword [ebp - 0x6d4], 1
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x6d4], eax
jg 0x1004460c
mov dword [ebp - 0xb70], 1
jmp 0x10044613
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xf9c], eax
mov dword [ebp - 0x8cc], 0x946b
cmp dword [ebp - 0x8cc], 0x891c
jl 0x1004464d
mov dword [ebp - 0x6dc], 1
jmp 0x10044654
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x6dc], eax
jg 0x1004466e
mov dword [ebp - 0xaa0], 1
jmp 0x10044675
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x6e4], eax
cmp dword [ebp - 0x6e4], 0x7c14
jl 0x100446d7
mov dword [ebp - 0x2e4], 0
jmp 0x100446a6
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 2
jge 0x100446c2
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0x1000], 6
jmp 0x10044699
mov eax, dword [ebp - 0x378]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1000], eax
jmp 0x100446e2
cmp dword [ebp - 0x378], 0
je 0x100446e2
jmp 0x100446e7
jmp 0x10044528
mov eax, dword [ebp - 0x2ec]
mov byte [ebp + eax - 0xb04], 0
jmp 0x100444e1
push 1
lea ecx, [ebp - 0x428]
call fcn.10021bd6
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x380], 0
jmp 0x10044731
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jge 0x10044753
push dword [ebp - 0x380]
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov dword [eax], 0x3ae35568
jmp 0x10044724
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x10044771
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov dword [eax], 0xffffffe6
jmp 0x100447aa
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8d4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
cmp dword [eax], 0xffffffeb
jge 0x100449bd
mov dword [ebp - 0x44], 0x3eb60693
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
cmp dword [eax], 0
jne 0x100448a1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xfa4], eax
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov eax, dword [eax]
sub eax, 5
jne 0x1004480a
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1004480a
and dword [ebp - 0xbe8], 0
jmp 0x10044814
mov dword [ebp - 0xbe8], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xfac], eax
mov esi, dword [ebp - 0x44]
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
cmp dword [eax], esi
jl 0x1004483d
mov dword [ebp - 0x6ec], 1
jmp 0x10044844
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0x13244d51
jle 0x1004485c
mov dword [ebp - 0x9cc], 1
jmp 0x10044863
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x9cc], eax
jle 0x1004487a
mov dword [ebp - 0x6f4], 1
jmp 0x10044881
and dword [ebp - 0x6f4], 0
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax]
je 0x100448a1
and dword [ebp - 0x8dc], 0
jmp 0x100448ab
mov dword [ebp - 0x8dc], 1
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov ecx, dword [ebp - 0x8dc]
imul ecx, dword [eax]
test ecx, ecx
je 0x10044937
mov byte [ebp - 0x16b], 0
movzx eax, byte [ebp - 0x16b]
test eax, eax
je 0x100448df
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov dword [ebp - 0x44], 0
jmp 0x100448ef
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff5
jge 0x10044935
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x10044919
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10044933
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x100448e8
jmp 0x1004494c
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x44], 0
jmp 0x1004495c
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1a
jge 0x100449b8
mov dword [ebp - 0x200], 0x13
jmp 0x1004497b
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x13
jge 0x100449a2
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x100449a0
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
jmp 0x1004496e
push 0
lea ecx, [ebp - 0x428]
call fcn.10021c54
cmp dword [eax], 0
je 0x100449b6
jmp 0x10044955
jmp 0x10044955
jmp 0x10044786
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x428]
call fcn.10021c38
mov dword [ebp - 0x388], 1
mov dword [ebp - 0x2f4], 0
jmp 0x100449ef
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jge 0x10044a0b
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0xfb4], 0x8eac8b13
jmp 0x100449e2
mov dword [ebp - 0x388], 0
jmp 0x10044a24
mov eax, dword [ebp - 0x388]
dec eax
mov dword [ebp - 0x388], eax
cmp dword [ebp - 0x388], 0
jl 0x10044aef
mov dword [ebp - 0x390], 5
mov dword [ebp - 0xfbc], 0x3d4210e1
mov dword [ebp - 0x2fc], 0
jmp 0x10044a5e
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x10044a7a
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x1274], 0xe864896
jmp 0x10044a51
mov dword [ebp - 0x390], 0
jmp 0x10044a93
mov eax, dword [ebp - 0x390]
dec eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 0
jl 0x10044aea
mov dword [ebp - 0x6fc], 0
mov dword [ebp - 0x304], 0
jmp 0x10044abf
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 2
jge 0x10044adb
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x116c], 0x4c90d297
jmp 0x10044ab2
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
jmp 0x10044a86
jmp 0x10044a17
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x10044b0e
push 0
push 0x72b
call dword [sym.imp.GDI32.dll_GetClipBox]
push 2
lea ecx, [ebp - 0x1cc]
call fcn.10021bd6
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x9d4], 0x187b35f1
mov dword [ebp - 0x8ec], 0x2afe2499
mov dword [ebp - 0x1d4], 0x3cc9d6c8
push 4
lea ecx, [ebp - 0xd40]
call fcn.10021bd6
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1a8], 0x32a49e86
mov dword [ebp - 0xbf0], 6
mov dword [ebp - 0x8c], 0
jmp 0x10044b7e
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10044ba0
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov dword [eax], 0x9a57b5bf
jmp 0x10044b71
mov dword [ebp - 0x8c], 0
jmp 0x10044bb9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x10044bd8
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xd40]
call fcn.10021c54
and dword [eax], 0
jmp 0x10044bac
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp dword [eax], 0xffffffff
jl 0x10044bff
mov eax, 0x698d
test eax, eax
je 0x10044bff
mov dword [ebp - 0xa48], 1
jmp 0x10044c06
and dword [ebp - 0xa48], 0
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov ecx, dword [ebp - 0xa48]
cmp ecx, dword [eax]
jne 0x10044c29
mov dword [ebp - 0x704], 1
jmp 0x10044c30
and dword [ebp - 0x704], 0
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov esi, dword [ebp - 0x704]
add esi, dword [eax]
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp esi, dword [eax]
jg 0x10044c62
mov dword [ebp - 0x8e4], 1
jmp 0x10044c69
and dword [ebp - 0x8e4], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov esi, dword [ebp - 0x8e4]
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp dword [eax], esi
jge 0x10044c9c
mov dword [ebp - 0x70c], 1
jmp 0x10044ca3
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x9d4], eax
mov esi, dword [ebp - 0x9d4]
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp esi, dword [eax]
jne 0x10044cd2
mov dword [ebp - 0x714], 1
jmp 0x10044cd9
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x8ec], eax
mov esi, dword [ebp - 0x8ec]
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp esi, dword [eax]
je 0x10044d08
mov dword [ebp - 0x71c], 1
jmp 0x10044d0f
and dword [ebp - 0x71c], 0
mov esi, dword [ebp - 0x71c]
add esi, 0xf767
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
imul esi, dword [eax]
cmp esi, 0x2fd8
jne 0x10044d3f
mov dword [ebp - 0xa78], 1
jmp 0x10044d46
and dword [ebp - 0xa78], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov ecx, dword [ebp - 0xa78]
cmp ecx, dword [eax]
jge 0x10044d7b
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp dword [eax], 0
je 0x10044d7b
mov dword [ebp - 0x724], 1
jmp 0x10044d82
and dword [ebp - 0x724], 0
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov ecx, dword [ebp - 0x724]
sub ecx, dword [eax]
mov dword [ebp - 0x1d4], ecx
mov esi, dword [ebp - 0x1d4]
push 1
lea ecx, [ebp - 0xd40]
call fcn.10021c54
cmp esi, dword [eax]
jge 0x10044dc1
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov eax, 0x4a6f4440
sub eax, dword [ebp - 0x1d4]
jne 0x10044de0
cmp dword [ebp - 0x1d4], 0
jne 0x10044de0
and dword [ebp - 0x8f4], 0
jmp 0x10044dea
mov dword [ebp - 0x8f4], 1
push 1
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov eax, dword [eax]
sub eax, dword [ebp - 0x8f4]
je 0x10044e14
push 9
pop eax
test eax, eax
je 0x10044e14
mov dword [ebp - 0x72c], 1
jmp 0x10044e1b
and dword [ebp - 0x72c], 0
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
mov ecx, dword [ebp - 0x72c]
cmp ecx, dword [eax]
je 0x10044e3e
mov dword [ebp - 0x9dc], 1
jmp 0x10044e45
and dword [ebp - 0x9dc], 0
cmp dword [ebp - 0x9dc], 0xf5fd
jg 0x10044e5d
mov dword [ebp - 0x734], 1
jmp 0x10044e64
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 0xffffffff
jge 0x10044e79
mov dword [ebp - 0xb7c], 1
jmp 0x10044e80
and dword [ebp - 0xb7c], 0
push 1
lea ecx, [ebp - 0xd40]
call fcn.10021c54
mov esi, dword [ebp - 0x1d4]
sub esi, 7
push 0
lea ecx, [ebp - 0x1cc]
call fcn.10021c54
cmp esi, dword [eax]
jge 0x10044eb3
mov dword [ebp - 0x8fc], 1
jmp 0x10044eba
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
add eax, 3
cmp eax, 0x53c8cbf6
jle 0x10044ed6
mov dword [ebp - 0x73c], 1
jmp 0x10044edd
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0xbf0], eax
mov dword [ebp - 0x1a8], 0
jmp 0x10044f0e
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xffffffe3
je 0x10044f33
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10044f31
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
jmp 0x10044f01
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd40]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1cc]
call fcn.10021c38
mov byte [ebp - 0x274], 9
mov byte [ebp - 0x273], 0x78
mov byte [ebp - 0x272], 7
mov byte [ebp - 0x271], 0x11
mov byte [ebp - 0x270], 3
mov byte [ebp - 0x26f], 0x13
mov byte [ebp - 0x26e], 0
mov byte [ebp - 0x26d], 0x22
mov byte [ebp - 0x26c], 2
mov byte [ebp - 0x26b], 0x26
mov byte [ebp - 0x26a], 0xa
mov byte [ebp - 0x269], 0
mov byte [ebp - 0x268], 4
mov byte [ebp - 0x267], 0x11
mov byte [ebp - 0x266], 0xb
mov byte [ebp - 0x265], 7
mov byte [ebp - 0x264], 1
mov byte [ebp - 0x263], 1
mov byte [ebp - 0x262], 0xd
mov byte [ebp - 0x261], 0x25
mov byte [ebp - 0x260], 3
mov byte [ebp - 0x25f], 0xfb
mov byte [ebp - 0x25e], 0xa6
mov byte [ebp - 0x25d], 0xbb
mov byte [ebp - 0x25c], 0xc
mov byte [ebp - 0x25b], 0x24
mov byte [ebp - 0x25a], 8
mov byte [ebp - 0x259], 0x1c
mov byte [ebp - 0x258], 6
mov byte [ebp - 0x257], 0x3f
mov byte [ebp - 0x256], 5
mov byte [ebp - 0x255], 0x35
mov dword [ebp - 0x130], 9
mov dword [ebp - 0x398], 0
jmp 0x10045054
mov eax, dword [ebp - 0x398]
inc eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x398], 1
jge 0x10045070
mov eax, dword [ebp - 0x398]
mov dword [ebp + eax*4 - 0x128], 0xdd33
jmp 0x10045047
mov dword [ebp - 0x130], 0
jmp 0x10045089
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x100454ef
mov dword [ebp - 0x58], 8
mov dword [ebp - 0xc0], 9
mov dword [ebp - 0x58], 0
jmp 0x100450b7
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x100454ea
mov dword [ebp - 0x190], 0
mov dword [ebp - 0xbf8], 0xffffffff
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x100450f9
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x190], 0
jmp 0x10045112
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jg 0x100454e5
mov dword [ebp - 0x30c], 1
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0xb94], 0xfffffffd
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x128]
imul eax, dword [ebp - 0x190]
test eax, eax
jne 0x1004528f
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xfcc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
imul eax, dword [ebp - 0xc0]
test eax, eax
je 0x1004519a
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1004519a
mov dword [ebp - 0xa50], 1
jmp 0x100451a1
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x128]
cmp dword [ebp - 0xa50], eax
jge 0x100451bf
mov dword [ebp - 0x744], 1
jmp 0x100451c6
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
sub eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x1d8]
jl 0x100451e6
mov dword [ebp - 0x904], 1
jmp 0x100451ed
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x904]
test eax, eax
jne 0x10045210
cmp dword [ebp - 0x130], 0
jne 0x10045210
and dword [ebp - 0x74c], 0
jmp 0x1004521a
mov dword [ebp - 0x74c], 1
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x74c], eax
je 0x10045234
mov dword [ebp - 0x9e4], 1
jmp 0x1004523b
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xfd4], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xfdc], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xfe8], eax
mov eax, dword [ebp - 0x30c]
add eax, dword [ebp - 0x30c]
jne 0x1004528f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x128], 0
jne 0x1004528f
and dword [ebp - 0x754], 0
jmp 0x10045299
mov dword [ebp - 0x754], 1
cmp dword [ebp - 0x754], 8
jle 0x100452ae
mov dword [ebp - 0x90c], 1
jmp 0x100452b5
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x90c], eax
jne 0x100454cc
mov dword [ebp - 0x1d8], 0
jmp 0x100452dd
mov eax, dword [ebp - 0x1d8]
dec eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jl 0x100454ca
mov dword [ebp - 0xc0], 0
jmp 0x10045303
cmp dword [ebp - 0xc0], 0
jl 0x100454a1
mov eax, dword [ebp - 0xc0]
cmp dword [ebp + eax*4 - 0x128], 0
je 0x10045325
jmp 0x100454a1
mov byte [ebp - 0xf9], 0
mov dword [ebp - 0x75c], 0x6b88
mov dword [ebp - 0xb88], 0x10008fc4
cmp dword [ebp - 0x75c], 0x6c99
jle 0x10045440
push 0
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
and dword [ebp - 0x31c], 0
jmp 0x10045370
cmp dword [ebp - 0x31c], 0x4f53
jge 0x10045436
and dword [ebp - 0x3a8], 0
jmp 0x10045396
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10045453
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 4], 0x17
cmp dword [ebp - 0x75c], 0x69a6
jge 0x10045476
mov edx, dword [ebp - 0xb88]
mov ecx, 0x10617a78
call fcn.100250d0
jmp 0x10045492
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x100454c5
push 0x1687
push 0
push 0x1a98
call dword [sym.imp.USER32.dll_GetWindowTextW]
jmp 0x100452d0
jmp 0x100454d6
mov dword [ebp - 0xbf8], 0xfffffffb
mov dword [ebp - 0xb94], 0
jmp 0x10045105
jmp 0x100450b0
jmp 0x1004507c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov dword [ebp - 0x130], eax
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x274]
and eax, 0x1b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x274]
or ecx, 0x1b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x274]
mov byte [ebp + eax - 0xd28], cl
mov dword [ebp - 0xc00], 1
mov dword [ebp - 0x1014], 5
mov dword [ebp - 0x101c], 0x961c0f80
mov dword [ebp - 0xba0], 0xb5ca9869
mov dword [ebp - 0x494], 1
mov dword [ebp - 0xdb4], 0x3cf95751
mov dword [ebp - 0xdb0], 0x3cf95751
mov dword [ebp - 0xdac], 0x3cf95751
mov dword [ebp - 0xda8], 0x3cf95751
lea ecx, [ebp - 0x48d]
call fcn.10021c63
push eax
lea eax, [ebp - 0xda4]
push eax
lea eax, [ebp - 0xdb4]
push eax
lea ecx, [ebp - 0x11a4]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1134]
call fcn.10021c12
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x100455e4
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
imul eax, dword [ebp - 0xc00], 0xffff
test eax, eax
jne 0x10045612
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x494]
dec ecx
mov dword [ebp - 0x494], ecx
test eax, eax
jne 0x10045612
and dword [ebp - 0xaa8], 0
jmp 0x1004561c
mov dword [ebp - 0xaa8], 1
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0xba0], eax
lea ecx, [ebp - 0x1134]
call fcn.10021c38
mov dword [ebp - 0x38], 2
and dword [ebp - 0x334], 0
jmp 0x1004564b
cmp dword [ebp - 0x38], 0x20
jae 0x10045e57
mov dword [ebp - 0x1024], 0xfffffffe
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1004567b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x1004569a
push 0
push 0xb34
call dword [sym.imp.USER32.dll_EndDialog]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x274]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x38], eax
jne 0x10045986
mov dword [ebp - 0xc08], 0x15a13695
mov dword [ebp - 0x324], 0xffff
push 1
lea ecx, [ebp - 0xee8]
call fcn.10021bd6
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x9ec], 4
mov dword [ebp - 0xbac], 0xece3051e
mov dword [ebp - 0x3b0], 0
jmp 0x1004570a
mov eax, dword [ebp - 0x3b0]
inc eax
mov dword [ebp - 0x3b0], eax
cmp dword [ebp - 0x3b0], 1
jge 0x1004572c
push dword [ebp - 0x3b0]
lea ecx, [ebp - 0xee8]
call fcn.10021c54
mov dword [eax], 1
jmp 0x100456fd
cmp dword [ebp - 0x324], 0
cmp dword [ebp - 0x324], 0xf504
jge 0x1004574b
mov dword [ebp - 0x464], 1
jmp 0x10045752
and dword [ebp - 0x464], 0
push 0
lea ecx, [ebp - 0xee8]
call fcn.10021c54
mov ecx, dword [ebp - 0x464]
mov dword [eax], ecx
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x464]
je 0x10045781
mov dword [ebp - 0x764], 1
jmp 0x10045788
and dword [ebp - 0x764], 0
cmp dword [ebp - 0x764], 0xa6f44401
jb 0x100457a0
mov dword [ebp - 0x914], 1
jmp 0x100457a7
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x324]
cmp dword [ebp - 0x914], eax
jge 0x100457c1
mov dword [ebp - 0x76c], 1
jmp 0x100457c8
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0xc08]
cmp eax, dword [ebp - 0x9ec]
jg 0x100457ee
mov dword [ebp - 0x774], 1
jmp 0x100457f5
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0xbac], eax
mov byte [ebp - 0x15f], 0
movzx eax, byte [ebp - 0x15f]
test eax, eax
je 0x10045820
push 0
push 0x92e
call dword [sym.imp.USER32.dll_SetWindowTextW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xee8]
call fcn.10021c38
mov eax, dword [ebp - 0x38]
movzx eax, byte [ebp + eax - 0x274]
inc eax
mov dword [ebp - 0x334], eax
mov dword [ebp - 0x138], 0x8e5ccc90
mov dword [ebp - 0x1e0], 0x402e31d8
push 2
lea ecx, [ebp - 0xe64]
call fcn.10021bd6
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0xc10], 2
mov dword [ebp - 0x3b8], 0
jmp 0x1004588c
cmp dword [ebp - 0x3b8], 2
jge 0x100458ae
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x7a4], 0xb300
mov dword [ebp - 0x32c], 0
jmp 0x100459b7
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 2
jge 0x100459d3
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0xd90], 0xffffffff
jmp 0x100459aa
xor eax, eax
inc eax
je 0x10045b0d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
je 0x10045a3c
mov eax, dword [ebp - 0x34]
inc eax
cmp eax, dword [ebp - 0x34]
jg 0x100459fd
mov dword [ebp - 0x77c], 1
jmp 0x10045a04
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x77c]
je 0x10045a1b
mov dword [ebp - 0xa58], 1
jmp 0x10045a22
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0xa58]
test eax, eax
je 0x10045a3c
mov dword [ebp - 0x784], 1
jmp 0x10045a43
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x784], eax
jl 0x10045a5a
mov dword [ebp - 0x924], 1
jmp 0x10045a61
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x924]
sub eax, dword [ebp - 0x2c]
cmp eax, 0xc6d0
je 0x10045a81
mov dword [ebp - 0x78c], 1
jmp 0x10045a88
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x78c], eax
jne 0x10045a9f
mov dword [ebp - 0x9f4], 1
jmp 0x10045aa6
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
dec eax
jne 0x10045abe
cmp dword [ebp - 0x34], 0
jne 0x10045abe
and dword [ebp - 0x794], 0
jmp 0x10045ac8
mov dword [ebp - 0x794], 1
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jge 0x10045ae2
mov dword [ebp - 0xc18], 1
jmp 0x10045ae9
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1034], eax
cmp dword [ebp - 0x2c], 0xfffffffa
jne 0x10045b0d
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x92c], eax
jg 0x10045b2b
mov dword [ebp - 0xc64], 1
jmp 0x10045b32
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x103c], eax
mov eax, dword [ebp - 0x34]
add eax, 4
cmp eax, dword [ebp - 0x7a4]
je 0x10045b55
mov dword [ebp - 0x79c], 1
jmp 0x10045b5c
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 0xfffb
je 0x10045b74
mov dword [ebp - 0xa88], 1
jmp 0x10045b7b
and dword [ebp - 0xa88], 0
cmp dword [ebp - 0xa88], 0xc2a9
je 0x10045b93
mov dword [ebp - 0x934], 1
jmp 0x10045b9a
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x7a4]
add eax, dword [ebp - 0x934]
je 0x10045bba
cmp dword [ebp - 0x34], 0
je 0x10045bba
mov dword [ebp - 0x7ac], 1
jmp 0x10045bc1
and dword [ebp - 0x7ac], 0
imul eax, dword [ebp - 0x7ac], 0
add eax, dword [ebp - 0x2c]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd90], eax
mov dword [ebp - 0x34], 0
jmp 0x10045be8
cmp dword [ebp - 0x34], 1
jg 0x10045bff
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0xdc8], 0x6e871d97
mov dword [ebp - 0xdc4], 0x6e871d97
mov dword [ebp - 0xdc0], 0x6e871d97
mov dword [ebp - 0xdbc], 0x6e871d97
lea ecx, [ebp - 0x495]
call fcn.10021c63
push eax
lea eax, [ebp - 0xdb8]
push eax
lea eax, [ebp - 0xdc8]
push eax
lea ecx, [ebp - 0x11b4]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1158]
call fcn.10021c12
mov dword [ebp - 0x1e8], 0
jmp 0x10045ed7
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xffffffea
jne 0x10045f35
mov dword [ebp - 0x3c8], 0x2961c0f8
mov dword [ebp - 0x3c8], 0
jmp 0x10045f03
mov eax, dword [ebp - 0x3c8]
inc eax
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 3
jg 0x10045f33
mov byte [ebp - 0x167], 0
movzx eax, byte [ebp - 0x167]
test eax, eax
je 0x10045f31
push 0
push 0
push 0x1695
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x10045ef6
jmp 0x10045eca
mov dword [ebp - 0x1e8], 0x9c4185a1
lea ecx, [ebp - 0x1158]
call fcn.10021c38
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0xd28], 0
mov dword [ebp - 0xce8], 3
mov dword [ebp - 0x33c], 0
jmp 0x10045f7b
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x10045f97
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xfe4], 0x5d16df25
jmp 0x10045f6e
mov eax, dword [ebp - 0xce8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xfe4], eax
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x10045fc8
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
lea eax, [ebp - 0xd28]
push eax
lea ecx, [ebp - 0x128c]
call fcn.1004afba
mov dword [ebp - 0xbc4], eax
mov eax, dword [ebp - 0xbc4]
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 4], 0x1c
mov edx, dword [ebp - 0x7cc]
mov ecx, dword [ebp - 0xc6c]
call fcn.10034db5
mov dword [0x10619610], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x128c]
call fcn.10032e9e
mov dword [ebp - 0x4c], 0x469ad59e
mov dword [ebp - 0x3d0], 0
jmp 0x10046038
mov eax, dword [ebp - 0x3d0]
inc eax
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 1
jge 0x10046054
mov eax, dword [ebp - 0x3d0]
mov dword [ebp + eax*4 - 0xa04], 0
jmp 0x1004602b
mov dword [ebp - 0x4c], 0
jmp 0x10046064
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1004607b
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0xa04], 0
je 0x10046079
jmp 0x1004607b
jmp 0x1004605d
mov dword [ebp - 0x4c], 0
jmp 0x1004608b
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x100460a1
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xa04], 0xfffffff9
jmp 0x10046084
and dword [ebp - 0x354], 0
jmp 0x100460b7
cmp dword [ebp - 0x354], 0xf
jae 0x1004635b
mov eax, dword [0x1061950c]
cmp eax, dword [ebp - 0x2f8]
je 0x10046375
mov eax, dword [0x10619610]
cmp eax, dword [ebp - 0x2f8]
jne 0x1004638d
mov ecx, dword [ebp + 0xc]
call fcn.10021680
push eax
push dword [ebp + 8]
call fcn.1003d104
pop ecx
pop ecx
jmp 0x1004a009
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x95c], 0
mov dword [ebp - 0x3e8], 0
jmp 0x100463c0
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
cmp dword [ebp - 0x3e8], 3
jge 0x100463dc
mov eax, dword [ebp - 0x3e8]
mov dword [ebp + eax*4 - 0xe58], 0
jmp 0x100463b3
mov dword [ebp - 0x54], 0
jmp 0x100463ec
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10046402
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xe58], 0x256915a
jmp 0x100463e5
mov dword [ebp - 0x54], 0
jmp 0x10046412
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x10046645
mov dword [ebp - 0x35c], 0x6e5c7a00
mov dword [ebp - 0xbd4], 0xffffffff
mov byte [ebp - 0x163], 0
movzx eax, byte [ebp - 0x163]
test eax, eax
je 0x1004644d
push 0x15d2
call dword [sym.imp.USER32.dll_ShowCaret]
mov dword [ebp - 0x35c], 0
jmp 0x10046466
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 2
jg 0x10046640
mov dword [ebp - 0x148], 0xfffffffc
mov dword [ebp - 0x148], 0
jmp 0x10046496
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jg 0x1004663b
mov dword [ebp - 0x3f0], 0
jmp 0x100464bc
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 2
jge 0x100464d8
mov eax, dword [ebp - 0x3f0]
mov dword [ebp + eax*4 - 0x4c8], 0xfffffff8
jmp 0x100464af
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x100464f2
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x4c8], 0
jmp 0x10046520
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x4c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4c8], 2
jg 0x10046636
mov dword [ebp - 0x364], 0x47c4d145
mov dword [ebp - 0x364], 0
jmp 0x10046557
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 2
jg 0x1004657f
mov byte [ebp - 0x15a], 0
movzx eax, byte [ebp - 0x15a]
test eax, eax
je 0x1004657d
push 0x12fd
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x1004654a
mov eax, dword [ebp - 0x148]
cmp dword [ebp + eax*4 - 0xe58], 0
jne 0x1004659d
xor eax, eax
inc eax
jne 0x1004659d
and dword [ebp - 0x7f4], 0
jmp 0x100465a7
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp + eax*4 - 0xe58]
cmp dword [ebp - 0x7f4], eax
jge 0x100465c8
mov dword [ebp - 0x7fc], 1
jmp 0x100465cf
and dword [ebp - 0x7fc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54]
sub ecx, dword [ebp + eax - 0x4c8]
mov dword [ebp - 0x95c], ecx
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x10ec], eax
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x10f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c8]
cmp dword [ebp - 0x7fc], eax
jne 0x1004661e
mov dword [ebp - 0xa28], 1
jmp 0x10046625
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0xbd4], eax
jmp 0x10046505
jmp 0x10046489
jmp 0x10046459
jmp 0x1004640b
cmp dword [ebp - 0x3f8], 0
je 0x10049c76
mov eax, dword [ebp - 0x3f8]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10049c76
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [ebp - 0x3f8]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0xa4], 0xfffffff9
mov dword [ebp - 0x400], 0x4523830
mov dword [ebp - 0x598], 0x3ab76a10
mov dword [ebp - 0x374], 0xffffffff
mov dword [ebp - 0x5a8], 0x885c3b36
mov dword [ebp - 0x5c8], 0x263070b7
mov dword [ebp - 0xbdc], 0xffffffff
mov dword [ebp - 0x5f0], 0x2b13f3b7
mov dword [ebp - 0x608], 0xffffffff
mov dword [ebp - 0xcf0], 0x77d717f6
mov dword [ebp - 0x18], 0xe
jmp 0x100466f6
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffec
jne 0x10046870
mov dword [ebp - 0x278], 0
jmp 0x10046719
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x10046735
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x474], 0x3629aa81
jmp 0x1004670c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x474]
mov dword [ebp - 0x10fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x474]
mov dword [ebp - 0x1104], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x474]
add eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
je 0x10046782
cmp dword [ebp - 0x18], 0
je 0x10046782
mov dword [ebp - 0x804], 1
jmp 0x10046789
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
add eax, 0xffff
je 0x100467a8
cmp dword [ebp - 0x18], 0
je 0x100467a8
mov dword [ebp - 0x964], 1
jmp 0x100467af
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x964]
sub eax, dword [ebp - 0xa4]
cmp eax, 0xdfec
jge 0x100467ce
mov dword [ebp - 0xc74], 1
jmp 0x100467d5
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x110c], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10a0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x474]
mov dword [ebp - 0xff0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax - 0x474]
jg 0x1004681b
mov dword [ebp - 0x80c], 1
jmp 0x10046822
and dword [ebp - 0x80c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x474]
imul eax, dword [ebp - 0x80c]
sub eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xa4]
jne 0x1004684e
xor eax, eax
jne 0x1004684e
and dword [ebp - 0xa14], 0
jmp 0x10046858
mov dword [ebp - 0xa14], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa14]
mov dword [ebp + eax - 0x474], ecx
jmp 0x100466ef
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x1010], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xef8], eax
cmp dword [ebp - 0x400], 0x525b
jge 0x100468b2
mov dword [ebp - 0x814], 1
jmp 0x100468b9
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
sub eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x18]
jl 0x100468d6
mov dword [ebp - 0x96c], 1
jmp 0x100468dd
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x96c]
jg 0x100468f7
mov dword [ebp - 0x570], 1
jmp 0x100468fe
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x570], eax
jl 0x10046918
mov dword [ebp - 0x578], 1
jmp 0x1004691f
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x75e6
jl 0x10046937
mov dword [ebp - 0x580], 1
jmp 0x1004693e
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 8
je 0x10046953
mov dword [ebp - 0x588], 1
jmp 0x1004695a
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0x55a5481
jl 0x10046972
mov dword [ebp - 0x590], 1
jmp 0x10046979
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x590]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x598]
jne 0x100469a2
mov dword [ebp - 0x5a0], 1
jmp 0x100469a9
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x18]
jge 0x100469d9
xor eax, eax
jne 0x100469d9
and dword [ebp - 0x5b0], 0
jmp 0x100469e3
mov dword [ebp - 0x5b0], 1
cmp dword [ebp - 0x5b0], 0xcd02
jle 0x100469fb
mov dword [ebp - 0x5b8], 1
jmp 0x10046a02
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x5b8], 0xed967aac
je 0x10046a1a
mov dword [ebp - 0x5c0], 1
jmp 0x10046a21
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c8], eax
cmp dword [ebp - 0x5c8], 0
jne 0x10046a3d
cmp dword [ebp - 0x374], 0
or eax, 0xffffffff
cmp eax, 0xc1f62131
ja 0x10046a53
mov dword [ebp - 0x5d0], 1
jmp 0x10046a5a
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 0xffffffff
jae 0x10046a6f
mov dword [ebp - 0x5d8], 1
jmp 0x10046a76
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x5d8], eax
jne 0x10046a8d
mov dword [ebp - 0x5e0], 1
jmp 0x10046a94
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x10046abc
cmp dword [ebp - 0x374], 0
je 0x10046abc
mov dword [ebp - 0x5e8], 1
jmp 0x10046ac3
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x5e8]
imul eax, dword [ebp - 0xbdc]
mov dword [ebp - 0x5f0], eax
cmp dword [ebp - 0x5f0], 0xffff
jne 0x10046af5
mov dword [ebp - 0x5f8], 1
jmp 0x10046afc
and dword [ebp - 0x5f8], 0
cmp dword [ebp - 0x5f8], 0x6306
jge 0x10046b14
mov dword [ebp - 0x600], 1
jmp 0x10046b1b
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0x608]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x224]
cmp dword [eax], 0x4550
jne 0x10049c76
mov eax, dword [ebp - 0x224]
cmp dword [eax + 0x74], 0
jbe 0x10049c76
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
cmp dword [ecx + eax + 0x78], 0
je 0x10049c76
push 4
lea ecx, [ebp - 0xe70]
call fcn.10021bd6
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xbe4], 2
mov dword [ebp - 0x408], 0
jmp 0x10046ba3
mov eax, dword [ebp - 0x408]
inc eax
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 4
jge 0x10046bc5
push dword [ebp - 0x408]
lea ecx, [ebp - 0xe70]
call fcn.10021c54
mov dword [eax], 0x43b7c7ce
jmp 0x10046b96
push 1
lea ecx, [ebp - 0xe70]
call fcn.10021c54
cmp dword [eax], 0
je 0x10046bfb
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x10046bf9
push 0x21c8
push 0x8b9
call dword [sym.imp.USER32.dll_GetWindowLongA]
jmp 0x10046c15
mov byte [ebp - 0x15c], 0
movzx eax, byte [ebp - 0x15c]
test eax, eax
je 0x10046c15
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov dword [ebp - 0xbe4], 0xffffffff
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe70]
call fcn.10021c38
mov eax, dword [ebp + 8]
mov dword [ebp - 0x18c], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0x18c]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0xdc], edx
mov eax, 0xffff
mov word [ebp - 0x74], ax
or dword [ebp - 0x184], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x10047277
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x150], 0xfbefa5f9
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0xb24], 0x50098926
mov dword [ebp - 0xb20], 0x50098926
mov dword [ebp - 0xb1c], 0x50098926
mov dword [ebp - 0xb18], 0x50098926
mov dword [ebp - 0xc4], 0
jmp 0x10046ccc
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff5
jl 0x1004702c
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x46c], 0x80bfe737
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xc4], 0
jne 0x10046d12
cmp dword [ebp - 0x150], 0
jne 0x10046d12
and dword [ebp - 0x620], 0
jmp 0x10046d1c
mov dword [ebp - 0x620], 1
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x150]
jle 0x10046d3c
cmp dword [ebp - 0x410], 0
jne 0x10046d3c
and dword [ebp - 0x610], 0
jmp 0x10046d46
mov dword [ebp - 0x610], 1
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x610], eax
je 0x10046d60
mov dword [ebp - 0xc7c], 1
jmp 0x10046d67
and dword [ebp - 0xc7c], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xeec], eax
cmp dword [ebp - 0xc4], 0
je 0x10046d91
mov eax, 0xa6e8f591
test eax, eax
je 0x10046d91
mov dword [ebp - 0x618], 1
jmp 0x10046d98
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
sub eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x1f0]
je 0x10046dc4
mov dword [ebp - 0x628], 1
jmp 0x10046dcb
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x620]
imul eax, dword [ebp - 0x628]
test eax, eax
je 0x10046dfa
cmp dword [ebp - 0x1f0], 0
je 0x10046dfa
cmp dword [ebp - 0x410], 0
je 0x10046dfa
mov dword [ebp - 0x630], 1
jmp 0x10046e01
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0xcc], eax
imul eax, dword [ebp - 0xcc], 0
cmp eax, dword [ebp - 0x150]
jg 0x10046e34
mov dword [ebp - 0x638], 1
jmp 0x10046e3b
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x638], eax
jg 0x10046e55
mov dword [ebp - 0x640], 1
jmp 0x10046e5c
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0xb55e
jl 0x10046e74
mov dword [ebp - 0x648], 1
jmp 0x10046e7b
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0x12b94821
jg 0x10046e93
mov dword [ebp - 0x650], 1
jmp 0x10046e9a
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x650], eax
jg 0x10046eb4
mov dword [ebp - 0x658], 1
jmp 0x10046ebb
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0xffffffff
jne 0x10046ed0
mov dword [ebp - 0x660], 1
jmp 0x10046ed7
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x660], eax
jg 0x10046ef1
mov dword [ebp - 0x668], 1
jmp 0x10046ef8
and dword [ebp - 0x668], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x668]
mov dword [ebp + eax - 0xb24], ecx
mov dword [ebp - 0xcc], 0
jmp 0x10046f24
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jg 0x10047027
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0xb24]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x1018], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0xf08], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0x1108], eax
cmp dword [ebp - 0x1f0], 0x4227f44f
jl 0x10046f8e
mov dword [ebp - 0x670], 1
jmp 0x10046f95
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 0xffffffff
jg 0x10046faa
mov dword [ebp - 0x678], 1
jmp 0x10046fb1
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x678], eax
jne 0x10046fcb
mov dword [ebp - 0x680], 1
jmp 0x10046fd2
and dword [ebp - 0x680], 0
cmp dword [ebp - 0x680], 0xfffffffe
jge 0x10046fe7
mov dword [ebp - 0x688], 1
jmp 0x10046fee
and dword [ebp - 0x688], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
cmp dword [ebp - 0x688], eax
jne 0x1004700f
mov dword [ebp - 0x690], 1
jmp 0x10047016
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x1f0], eax
jmp 0x10046f17
jmp 0x10046cbf
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x10047272
mov dword [ebp - 0x1d0], 3
mov dword [ebp - 0x698], 5
mov dword [ebp - 0x6a0], 0xc58a012e
mov dword [ebp - 0x478], 1
mov dword [ebp - 0xf10], 0x78398922
mov dword [ebp - 0x6c8], 0xffffffff
mov dword [ebp - 0x6c0], 0xe703026d
mov dword [ebp - 0xddc], 0xfffffffe
mov dword [ebp - 0xdd8], 0xfffffffe
mov dword [ebp - 0xdd4], 0xfffffffe
mov dword [ebp - 0xdd0], 0xfffffffe
lea ecx, [ebp - 0x49d]
call fcn.10021c63
push eax
lea eax, [ebp - 0xdcc]
push eax
lea eax, [ebp - 0xddc]
push eax
lea ecx, [ebp - 0x118c]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe88]
call fcn.10021c12
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x47c], 0xfffffff6
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x698], eax
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x6a0], eax
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0xd08], eax
mov eax, dword [ebp - 0x47c]
dec eax
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0xbec]
cmp eax, dword [ebp - 0xd08]
jg 0x10047149
mov dword [ebp - 0xbf4], 1
jmp 0x10047150
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x1d0]
jne 0x1004716a
mov dword [ebp - 0x6a8], 1
jmp 0x10047171
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x6a8], eax
je 0x1004718b
mov dword [ebp - 0x6b0], 1
jmp 0x10047192
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 7
je 0x100471a7
mov dword [ebp - 0x6b8], 1
jmp 0x100471ae
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x10b8], eax
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0xf20], eax
push 0
lea ecx, [ebp - 0xe88]
call fcn.10021c54
cmp dword [eax], 0x3f46
jl 0x10047217
mov dword [ebp - 0x6d0], 1
jmp 0x1004721e
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x1d0]
imul eax, dword [ebp - 0x6d0]
dec eax
cmp eax, 0xfffd
je 0x1004723f
mov dword [ebp - 0x6d8], 1
jmp 0x10047246
and dword [ebp - 0x6d8], 0
push 0
lea ecx, [ebp - 0xe88]
call fcn.10021c54
mov ecx, dword [ebp - 0x6d8]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe88]
call fcn.10021c38
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x74], ax
jmp 0x10048d21
mov dword [ebp - 0xcf8], 1
mov dword [ebp - 0x6e0], 0x3d5d
mov dword [ebp - 0xbfc], 0x10009000
cmp dword [ebp - 0x6e0], 0x3f86
jle 0x1004737f
and dword [ebp - 0x3d4], 0
jmp 0x100472bb
mov eax, dword [ebp - 0x3d4]
inc eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0xeb9
jge 0x1004737f
and dword [ebp - 0x40c], 0
jmp 0x100472e1
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0x45d3
jge 0x1004737a
and dword [ebp - 0x384], 0
jmp 0x10047307
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x384], 0x2db1
jge 0x10047375
mov eax, dword [ebp - 0x40c]
cdq
idiv dword [ebp - 0x384]
mov eax, dword [ebp - 0x3d4]
mov ecx, edx
sar eax, cl
cdq
mov dword [ebp - 0xb90], eax
mov dword [ebp - 0xb8c], edx
push dword [ebp - 0xb8c]
push dword [ebp - 0xb90]
lea ecx, [ebp - 0x11fc]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0xc84], eax
mov ecx, dword [ebp - 0xc84]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x11fc]
call fcn.10021676
jmp 0x100472fa
jmp 0x100472d4
jmp 0x100472ae
push 3
lea ecx, [ebp - 0xeb8]
call fcn.10021bd6
mov dword [ebp - 4], 0x20
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x6e0], 0x3c41
jge 0x100473af
push dword [ebp - 0xbfc]
call fcn.10057a16
pop ecx
jmp 0x100473cb
mov dword [ebp - 4], 0x20
jmp 0x100473db
push 3
lea ecx, [ebp - 0xea0]
call fcn.10021bd6
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x94], 0
jmp 0x10047405
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10047427
push dword [ebp - 0x94]
lea ecx, [ebp - 0xeb8]
call fcn.10021c54
mov dword [eax], 0xfffffffd
jmp 0x100473f8
mov dword [ebp - 0x94], 0
jmp 0x10047440
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10047462
push dword [ebp - 0x94]
lea ecx, [ebp - 0xea0]
call fcn.10021c54
mov dword [eax], 0xbbef7d65
jmp 0x10047433
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x10047480
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [ebp - 0xcf8]
push 0
lea ecx, [ebp - 0xeb8]
call fcn.10021c54
mov dword [eax], esi
push 0
lea ecx, [ebp - 0xea0]
call fcn.10021c54
mov dword [eax], 0x1fc3eee
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xea0]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb8]
call fcn.10021c38
mov dword [ebp - 0x38c], 2
mov dword [ebp - 0x1028], 0x55e00fe1
mov byte [ebp - 0x15e], 0
movzx eax, byte [ebp - 0x15e]
test eax, eax
je 0x100474f6
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov dword [ebp - 0x38c], 2
jmp 0x1004750f
mov eax, dword [ebp - 0x38c]
dec eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 0xfffffff8
jne 0x1004752f
mov dword [ebp - 0xc04], 7
cmp dword [ebp - 0xc04], 0
je 0x1004752d
jmp 0x1004752f
jmp 0x10047502
mov eax, dword [0x10619604]
and eax, 1
jne 0x10047566
mov eax, dword [0x10619604]
or eax, 1
mov dword [0x10619604], eax
mov dword [ebp - 4], 0x24
mov ecx, 0x106195e4
call fcn.100332f8
push 0x1007162b
call fcn.100579ec
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x10619509]
test eax, eax
je 0x10047ae1
mov ecx, 0x106195e4
call fcn.1004b187
movzx eax, al
test eax, eax
jne 0x10047ae1
lea eax, [ebp - 0x2f8]
push eax
lea eax, [ebp - 0x6f8]
push eax
mov ecx, 0x106195e4
call fcn.10032fe8
lea eax, [ebp - 0xf28]
push eax
mov ecx, 0x106195e4
call fcn.10021c66
push eax
lea ecx, [ebp - 0x6f8]
call fcn.100332e5
movzx eax, al
test eax, eax
je 0x10047ae1
mov dword [ebp - 0x204], 6
mov dword [ebp - 0x10e8], 0xffffffff
mov dword [ebp - 0x6e8], 0x2524
mov dword [ebp - 0xc0c], 0x10009064
cmp dword [ebp - 0x6e8], 0x28f3
jle 0x10047712
and dword [ebp - 0x3dc], 0
jmp 0x10047618
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0x193
jge 0x1004770a
and dword [ebp - 0x27c], 0
jmp 0x1004763e
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x7180
jge 0x10047705
and dword [ebp - 0x3fc], 0
jmp 0x10047664
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0x3a4a
jge 0x10047700
and dword [ebp - 0x394], 0
jmp 0x1004768a
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0xfab
jge 0x100476fb
mov ecx, dword [ebp - 0x3fc]
add ecx, dword [ebp - 0x394]
mov eax, dword [ebp - 0x3dc]
add eax, dword [ebp - 0x27c]
sar eax, cl
cdq
mov dword [ebp - 0xb9c], eax
mov dword [ebp - 0xb98], edx
push dword [ebp - 0xb98]
push dword [ebp - 0xb9c]
lea ecx, [ebp - 0x1220]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0xc94], eax
mov ecx, dword [ebp - 0xc94]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x1220]
call fcn.10021676
jmp 0x1004767d
jmp 0x10047657
jmp 0x10047631
jmp 0x1004760b
push 0
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
push 1
lea ecx, [ebp - 0x1084]
call fcn.10021bd6
mov dword [ebp - 4], 0x25
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x6e8], 0x22d5
jge 0x10047742
push dword [ebp - 0xc0c]
call fcn.10057a16
pop ecx
jmp 0x1004775e
mov dword [ebp - 4], 0x25
jmp 0x1004776e
mov dword [ebp - 0x98], 0
jmp 0x10047787
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x100477a3
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x100c], 0xfffffff9
jmp 0x1004777a
mov dword [ebp - 0x98], 0
jmp 0x100477bc
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x100477de
push dword [ebp - 0x98]
lea ecx, [ebp - 0x1084]
call fcn.10021c54
mov dword [eax], 3
jmp 0x100477af
mov dword [ebp - 0x204], 0
jmp 0x100477f7
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jg 0x10047abe
mov dword [ebp - 0xf30], 0x44d513c6
mov dword [ebp - 0x1030], 0xdcd66a07
mov dword [ebp - 0xf38], 0xc234ac01
push 2
lea ecx, [ebp - 0x1074]
call fcn.10021bd6
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x9c], 0
jmp 0x1004784c
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10047868
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xad4], 0xb905d09e
jmp 0x1004783f
mov dword [ebp - 0x9c], 0
jmp 0x10047881
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x100478a0
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x1074]
call fcn.10021c54
or dword [eax], 0xffffffff
jmp 0x10047874
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x100478bd
push 0x1415
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xad4], 0
jmp 0x100478eb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xad4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xad4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xad4], 1
jg 0x10047aaa
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x10c0], 1
mov dword [ebp - 0xf40], 0xffffffff
push 3
lea ecx, [ebp - 0xed0]
call fcn.10021bd6
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x6f0], 0
mov dword [ebp - 0x280], 0
jmp 0x10047951
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x10047973
push dword [ebp - 0x280]
lea ecx, [ebp - 0xed0]
call fcn.10021c54
mov dword [eax], 0x81720d70
jmp 0x10047944
mov dword [ebp - 0x288], 0
jmp 0x1004798c
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jg 0x10047a72
mov dword [ebp - 0x1038], 0x61b583dc
mov dword [ebp - 0xf48], 0x5e82aa9d
push 1
lea ecx, [ebp - 0x1064]
call fcn.10021bd6
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0xac], 0
jmp 0x100479d7
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x100479f3
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x1100], 0x7207
jmp 0x100479ca
mov dword [ebp - 0xac], 0
jmp 0x10047a0c
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jge 0x10047a2e
push dword [ebp - 0xac]
lea ecx, [ebp - 0x1064]
call fcn.10021c54
mov dword [eax], 0xc07c2076
jmp 0x100479ff
mov byte [ebp - 0x160], 0
movzx eax, byte [ebp - 0x160]
test eax, eax
je 0x10047a51
push 0x112d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov eax, dword [ebp - 0x6f0]
dec eax
mov dword [ebp - 0x6f0], eax
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x1064]
call fcn.10021c38
jmp 0x1004797f
mov eax, dword [ebp - 0x204]
cmp dword [ebp + eax*4 - 0x100c], 0
je 0x10047a96
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xed0]
call fcn.10021c38
jmp 0x100478d0
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0xed0]
call fcn.10021c38
jmp 0x100478d0
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x1074]
call fcn.10021c38
jmp 0x100477ea
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1084]
call fcn.10021c38
lea ecx, [ebp - 0x6f8]
call fcn.1004b190
mov eax, dword [eax + 4]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xffffffff
jne 0x10048d21
mov ecx, 0x106195e4
call fcn.100332e1
mov ecx, dword [ebp - 0xdc]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x106195e4
call fcn.1004b1d4
and dword [ebp - 0x174], 0
jmp 0x10047b22
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x174]
cmp ecx, dword [eax + 0x18]
jae 0x10048d21
push 1
lea ecx, [ebp - 0xacc]
call fcn.10021bd6
mov dword [ebp - 4], 0x2b
mov dword [ebp - 0x5c], 0
push 1
lea ecx, [ebp - 0xd58]
call fcn.10021bd6
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x720], 0xfffffffb
mov dword [ebp - 0x740], 0x968cb667
mov dword [ebp - 0x90], 0
jmp 0x10047b90
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10047bb2
push dword [ebp - 0x90]
lea ecx, [ebp - 0xacc]
call fcn.10021c54
mov dword [eax], 0x2062
jmp 0x10047b83
mov dword [ebp - 0x90], 0
jmp 0x10047bcb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10047bed
push dword [ebp - 0x90]
lea ecx, [ebp - 0xd58]
call fcn.10021c54
mov dword [eax], 0xfffffffe
jmp 0x10047bbe
mov dword [ebp - 0x5c], 0
jmp 0x10047bfd
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x10047c21
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10047c1f
push 0
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x10047bf6
cmp dword [ebp - 0x5c], 0xf7e44142
jbe 0x10047c36
mov dword [ebp - 0x700], 1
jmp 0x10047c3d
and dword [ebp - 0x700], 0
push 0
lea ecx, [ebp - 0xacc]
call fcn.10021c54
mov ecx, dword [ebp - 0x700]
sub ecx, dword [eax]
mov dword [ebp - 0x708], ecx
push 0
lea ecx, [ebp - 0xd58]
call fcn.10021c54
mov ecx, dword [ebp - 0x708]
mov dword [eax], ecx
cmp dword [ebp - 0x708], 0xb060
je 0x10047c85
mov dword [ebp - 0x710], 1
jmp 0x10047c8c
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x710], eax
jge 0x10047ca3
mov dword [ebp - 0x718], 1
jmp 0x10047caa
and dword [ebp - 0x718], 0
push 0
lea ecx, [ebp - 0xacc]
call fcn.10021c54
mov eax, dword [eax]
imul eax, dword [ebp - 0x718]
mov dword [ebp - 0x720], eax
mov esi, dword [ebp - 0x720]
push 0
lea ecx, [ebp - 0xacc]
call fcn.10021c54
cmp esi, dword [eax]
jge 0x10047ce9
mov dword [ebp - 0x728], 1
jmp 0x10047cf0
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x728]
je 0x10047d19
push 0
lea ecx, [ebp - 0xd58]
call fcn.10021c54
cmp dword [eax], 0
je 0x10047d19
mov dword [ebp - 0x730], 1
jmp 0x10047d20
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x730]
je 0x10047d37
mov dword [ebp - 0x738], 1
jmp 0x10047d3e
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xf50], eax
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x1040], eax
push 0
lea ecx, [ebp - 0xacc]
call fcn.10021c54
mov esi, eax
push 0
lea ecx, [ebp - 0xacc]
call fcn.10021c54
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10047d96
mov eax, 0xcb44
test eax, eax
je 0x10047d96
mov dword [ebp - 0x748], 1
jmp 0x10047d9d
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xd58]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xacc]
call fcn.10021c38
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x174]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x6c], 0x76820624
push 2
lea ecx, [ebp - 0xd70]
call fcn.10021bd6
mov dword [ebp - 4], 0x2d
mov dword [ebp - 0x290], 0
jmp 0x10047e16
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x10047e38
push dword [ebp - 0x290]
lea ecx, [ebp - 0xd70]
call fcn.10021c54
mov dword [eax], 0xf95751cf
jmp 0x10047e09
mov dword [ebp - 0x6c], 0xfffffff9
jmp 0x10047e48
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x17
jl 0x10047efb
mov dword [ebp - 0x298], 0
jmp 0x10047e6b
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 2
jge 0x10047e87
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xadc], 0x71d976ff
jmp 0x10047e5e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xadc], 0
jmp 0x10047eb5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xadc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xadc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xadc], 0xc
jl 0x10047ef6
mov dword [ebp - 0xcc8], 0xfffffff8
mov byte [ebp - 0x162], 0
movzx eax, byte [ebp - 0x162]
test eax, eax
je 0x10047ee9
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [ebp - 0xcc8], 0
je 0x10047ef4
jmp 0x10047ef6
jmp 0x10047e9a
jmp 0x10047e41
mov dword [ebp - 0x6c], 0
jmp 0x10047f0b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 8
je 0x10047f39
mov esi, dword [ebp - 0x6c]
push 0
lea ecx, [ebp - 0xd70]
call fcn.10021c54
mov dword [eax], esi
push 0
lea ecx, [ebp - 0xd70]
call fcn.10021c54
cmp dword [eax], 0
je 0x10047f37
jmp 0x10047f04
jmp 0x10047f04
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd70]
call fcn.10021c38
cmp dword [ebp - 0x758], 0
je 0x10048d1c
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x2a0], 0
jmp 0x10047f78
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x10047f94
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xf58], 0x8eac8b13
jmp 0x10047f6b
mov dword [ebp - 0x2a8], 0
jmp 0x10047fad
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
jl 0x10048078
mov dword [ebp - 0x2b8], 5
mov dword [ebp - 0x10c8], 0x3d4210e1
mov dword [ebp - 0x2b0], 0
jmp 0x10047fe7
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x10048003
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x1208], 0xe864896
jmp 0x10047fda
mov dword [ebp - 0x2b8], 0
jmp 0x1004801c
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jl 0x10048073
mov dword [ebp - 0x750], 0
mov dword [ebp - 0x2c0], 0
jmp 0x10048048
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jge 0x10048064
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x119c], 0x4c90d297
jmp 0x1004803b
mov eax, dword [ebp - 0x750]
inc eax
mov dword [ebp - 0x750], eax
jmp 0x1004800f
jmp 0x10047fa0
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x10048097
push 0
push 0x72b
call dword [sym.imp.GDI32.dll_GetClipBox]
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x11cc]
call fcn.1004afba
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x70], 0
push 3
lea ecx, [ebp - 0xedc]
call fcn.10021bd6
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x2c8], 0
jmp 0x100480e9
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 3
jge 0x1004810b
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0xedc]
call fcn.10021c54
mov dword [eax], 0xfffffffd
jmp 0x100480dc
mov dword [ebp - 0x70], 0
jmp 0x1004811b
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x11
je 0x100483b7
mov dword [ebp - 0x20c], 0
push 1
lea ecx, [ebp - 0xd88]
call fcn.10021bd6
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x214], 0x650dfa01
mov dword [ebp - 0x2d0], 0
jmp 0x10048163
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jge 0x10048185
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0xd88]
call fcn.10021c54
mov dword [eax], 0xdf9481f3
jmp 0x10048156
cmp dword [ebp - 0x20c], 0
je 0x1004831c
cmp dword [ebp - 0x20c], 0
jne 0x100481ad
cmp dword [ebp - 0x20c], 0
jne 0x100481ad
and dword [ebp - 0x790], 0
jmp 0x100481b7
mov dword [ebp - 0x790], 1
push 0
lea ecx, [ebp - 0xd88]
call fcn.10021c54
mov dword [eax], 0xf3817d1d
cmp dword [ebp - 0x20c], 0xf3817d1d
jg 0x100481e2
mov dword [ebp - 0x760], 1
jmp 0x100481e9
and dword [ebp - 0x760], 0
cmp dword [ebp - 0x760], 4
jae 0x100481fe
mov dword [ebp - 0x768], 1
jmp 0x10048205
and dword [ebp - 0x768], 0
imul eax, dword [ebp - 0x768], 3
cmp eax, dword [ebp - 0x70]
je 0x1004822f
push 0
lea ecx, [ebp - 0xd88]
call fcn.10021c54
cmp dword [eax], 0
je 0x1004822f
mov dword [ebp - 0x770], 1
jmp 0x10048236
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x770], eax
jge 0x1004824d
mov dword [ebp - 0x778], 1
jmp 0x10048254
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 1
je 0x10048272
mov eax, 0x1e60e779
test eax, eax
je 0x10048272
mov dword [ebp - 0xc14], 1
jmp 0x10048279
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xf60], eax
cmp dword [ebp - 0x70], 0
jne 0x1004829a
cmp dword [ebp - 0x70], 0
jne 0x1004829a
and dword [ebp - 0x780], 0
jmp 0x100482a4
mov dword [ebp - 0x780], 1
cmp dword [ebp - 0x780], 0x18b47430
jg 0x100482bc
mov dword [ebp - 0x788], 1
jmp 0x100482c3
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x788], eax
jge 0x100482dd
mov dword [ebp - 0x798], 1
jmp 0x100482e4
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x790]
cmp eax, dword [ebp - 0x798]
jne 0x100482fe
mov dword [ebp - 0x7a0], 1
jmp 0x10048305
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
add eax, 5
je 0x1004831c
mov dword [ebp - 0x7a8], 1
jmp 0x10048323
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7a8], eax
je 0x1004833a
mov dword [ebp - 0x7b0], 1
jmp 0x10048341
and dword [ebp - 0x7b0], 0
push 0
lea ecx, [ebp - 0xedc]
call fcn.10021c54
mov ecx, dword [ebp - 0x7b0]
mov dword [eax], ecx
mov dword [ebp - 0x214], 0x14
jmp 0x1004836f
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xfffffff8
jle 0x100483a3
mov byte [ebp - 0x164], 0
movzx eax, byte [ebp - 0x164]
test eax, eax
je 0x100483a1
push 0x25ad
push 0
push 0xea9
push 0xbe8
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10048362
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0xd88]
call fcn.10021c38
jmp 0x10048114
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xedc]
call fcn.10021c38
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x11cc]
call fcn.10034db5
mov dword [ebp - 0x828], eax
mov dword [ebp - 0x1048], 0xd546
mov dword [ebp - 0xf68], 0x8659
push 2
lea ecx, [ebp - 0xe34]
call fcn.10021bd6
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x78], 0
jmp 0x1004840f
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10048425
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x10f0], 0x184c506d
jmp 0x10048408
mov dword [ebp - 0x78], 0
jmp 0x10048435
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1004844e
push dword [ebp - 0x78]
lea ecx, [ebp - 0xe34]
call fcn.10021c54
and dword [eax], 0
jmp 0x1004842e
push 1
lea ecx, [ebp - 0xe34]
call fcn.10021c54
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ecx], eax
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xe34]
call fcn.10021c38
movzx eax, byte [0x10619509]
test eax, eax
je 0x100484a1
mov ecx, 0x106195e4
call fcn.1004b187
movzx eax, al
test eax, eax
jne 0x1004871e
lea eax, [ebp - 0x828]
push eax
mov ecx, 0x106195e4
call fcn.1004b196
mov ecx, dword [ebp - 0x174]
mov dword [eax], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x7f8], 0xfffffffa
mov dword [ebp - 0x810], 0xf844ba92
mov dword [ebp - 0xc24], 7
mov dword [ebp - 0xcb4], 1
mov dword [ebp - 0x2d8], 0
jmp 0x1004850c
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x10048528
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x1164], 0xff446cd5
jmp 0x100484ff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf70], eax
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x10048545
mov dword [ebp - 0x7c0], 1
jmp 0x1004854c
and dword [ebp - 0x7c0], 0
cmp dword [ebp - 0x7c0], 0xfffffffa
jl 0x10048561
mov dword [ebp - 0xca4], 1
jmp 0x10048568
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x7c8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp + eax - 0x1164], ecx
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp - 0x480]
cmp eax, dword [ebp - 0x24]
jl 0x100485b5
mov eax, 0x51d77f17
test eax, eax
jne 0x100485b5
and dword [ebp - 0x7d0], 0
jmp 0x100485bf
mov dword [ebp - 0x7d0], 1
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x7d0]
je 0x100485d9
mov dword [ebp - 0x7d8], 1
jmp 0x100485e0
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x7d8], eax
jg 0x100485f7
mov dword [ebp - 0x7e0], 1
jmp 0x100485fe
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jle 0x10048618
mov dword [ebp - 0x7e8], 1
jmp 0x1004861f
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0xffff
je 0x10048637
mov dword [ebp - 0x7f0], 1
jmp 0x1004863e
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0xac254176
jb 0x10048662
mov dword [ebp - 0x800], 1
jmp 0x10048669
and dword [ebp - 0x800], 0
cmp dword [ebp - 0x800], 0x29ed7d41
jne 0x10048681
mov dword [ebp - 0x808], 1
jmp 0x10048688
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x810]
add eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
je 0x100486ae
mov dword [ebp - 0xc1c], 1
jmp 0x100486b5
and dword [ebp - 0xc1c], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf78], eax
cmp dword [ebp - 0x24], 0xccce
jge 0x100486d3
mov dword [ebp - 0x818], 1
jmp 0x100486da
and dword [ebp - 0x818], 0
cmp dword [ebp - 0x818], 0x426067bb
je 0x100486f2
mov dword [ebp - 0xcdc], 1
jmp 0x100486f9
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0xc24]
mov dword [ebp - 0x10d0], eax
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xcb4], eax
mov byte [0x10619509], 1
push 4
lea ecx, [ebp - 0xcb0]
call fcn.10021bd6
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x2e0], 0
jmp 0x10048748
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 4
jge 0x1004876a
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0xcb0]
call fcn.10021c54
mov dword [eax], 1
jmp 0x1004873b
push 2
lea ecx, [ebp - 0xcb0]
call fcn.10021c54
and dword [eax], 0
jmp 0x100487a0
push 2
lea ecx, [ebp - 0xcb0]
call fcn.10021c54
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x820]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xcb0]
call fcn.10021c54
cmp dword [eax], 0xfffffff0
jl 0x1004885e
push 1
lea ecx, [ebp - 0x1094]
call fcn.10021bd6
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x2f0], 0xfffffffd
mov dword [ebp - 0x2e8], 0
jmp 0x100487ea
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1004880c
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0x1094]
call fcn.10021c54
mov dword [eax], 1
jmp 0x100487dd
mov dword [ebp - 0x2f0], 0
jmp 0x10048825
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0
jg 0x1004884a
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10048848
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
jmp 0x10048818
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x1094]
call fcn.10021c38
jmp 0x1004877c
mov byte [ebp - 4], 0x2e
lea ecx, [ebp - 0xcb0]
call fcn.10021c38
cmp dword [ebp - 0x184], 0xffffffff
jne 0x10048d0d
mov eax, dword [ebp - 0x828]
cmp eax, dword [ebp - 0x2f8]
jne 0x10048d0d
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xe04], 0x18e418a5
mov dword [ebp - 0xe00], 0x18e418a5
mov dword [ebp - 0xdfc], 0x18e418a5
mov dword [ebp - 0xdf8], 0x18e418a5
lea ecx, [ebp - 0x45d]
call fcn.10021c63
push eax
lea eax, [ebp - 0xdf4]
push eax
lea eax, [ebp - 0xe04]
push eax
lea ecx, [ebp - 0x11ac]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe94]
call fcn.10021c12
mov byte [ebp - 4], 0x34
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x438], 0
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x830], 0x2a41
mov dword [ebp - 0xce4], 0x100090b0
cmp dword [ebp - 0x830], 0x2a69
jle 0x10048a18
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
and dword [ebp - 0x310], 0
jmp 0x10048954
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x5766
jge 0x10048a18
and dword [ebp - 0x300], 0
jmp 0x1004897a
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0x4b08
jge 0x10048a13
and dword [ebp - 0x308], 0
jmp 0x100489a0
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0x6333
jge 0x10048a0e
mov eax, dword [ebp - 0x300]
cdq
idiv dword [ebp - 0x308]
mov eax, dword [ebp - 0x310]
mov ecx, edx
shl eax, cl
cdq
mov dword [ebp - 0xba8], eax
mov dword [ebp - 0xba4], edx
push dword [ebp - 0xba4]
push dword [ebp - 0xba8]
lea ecx, [ebp - 0x1250]
call fcn.1000ab5a
pop ecx
pop ecx
mov dword [ebp - 0xc2c], eax
mov ecx, dword [ebp - 0xc2c]
call fcn.10021680
push eax
call fcn.10057a16
pop ecx
lea ecx, [ebp - 0x1250]
call fcn.10021676
jmp 0x10048993
jmp 0x1004896d
jmp 0x10048947
mov dword [ebp - 0xcec], 5
mov byte [ebp - 4], 0x35
cmp dword [ebp - 0x830], 0x2958
jge 0x10048a3e
push dword [ebp - 0xce4]
call fcn.10057a16
pop ecx
jmp 0x10048a5a
mov dword [ebp - 4], 0x34
jmp 0x10048a6a
mov dword [ebp - 0x318], 0
jmp 0x10048a83
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x10048a9f
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xc34], 0x1ee4cff1
jmp 0x10048a76
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xf80], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jge 0x10048abc
mov dword [ebp - 0x838], 1
jmp 0x10048ac3
and dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0xffffffff
jl 0x10048ad8
mov dword [ebp - 0x840], 1
jmp 0x10048adf
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x840], eax
jne 0x10048af6
mov dword [ebp - 0x848], 1
jmp 0x10048afd
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x848], 0x7990
je 0x10048b15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11cc]
call fcn.10032e9e
jmp 0x10047b15
cmp dword [ebp + 0x10], 0
jne 0x100490b4
cmp dword [ebp - 0x184], 0xffffffff
je 0x100490b4
mov dword [ebp - 0x17c], 0xaa6e
push 3
lea ecx, [ebp - 0x4b8]
call fcn.10021bd6
mov dword [ebp - 4], 0x37
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x908], 0xc914a3a6
mov dword [ebp - 0xc44], 0xe352601c
mov dword [ebp - 0x80], 0
jmp 0x10048d84
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10048d9a
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x4d0], 0xffffffff
jmp 0x10048d7d
mov dword [ebp - 0x80], 0
jmp 0x10048daa
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10048dc3
push dword [ebp - 0x80]
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
and dword [eax], 0
jmp 0x10048da3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4d0], 0
jne 0x10048e15
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x17c]
cmp ecx, dword [ebp + eax - 0x4d0]
jle 0x10048df4
mov dword [ebp - 0x8a8], 1
jmp 0x10048dfb
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x8a8]
test eax, eax
jne 0x10048e15
and dword [ebp - 0x8c0], 0
jmp 0x10048e1f
mov dword [ebp - 0x8c0], 1
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
mov esi, eax
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10048e4d
mov dword [ebp - 0x8b0], 1
jmp 0x10048e54
and dword [ebp - 0x8b0], 0
mov esi, dword [ebp - 0x8b0]
sub esi, 0x65256810
push 2
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
cmp esi, dword [eax]
jg 0x10048e7d
mov dword [ebp - 0x8b8], 1
jmp 0x10048e84
and dword [ebp - 0x8b8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x4d0]
imul ecx, dword [ebp - 0x8b8]
cmp ecx, dword [ebp + eax - 0x4d0]
jg 0x10048eb3
mov dword [ebp - 0x8c8], 1
jmp 0x10048eba
and dword [ebp - 0x8c8], 0
mov esi, dword [ebp - 0x8c0]
sub esi, dword [ebp - 0x8c8]
neg esi
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
cmp esi, dword [eax]
je 0x10048ee5
mov dword [ebp - 0x8d0], 1
jmp 0x10048eec
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x8d0], eax
jl 0x10048f06
mov dword [ebp - 0x8d8], 1
jmp 0x10048f0d
and dword [ebp - 0x8d8], 0
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
mov ecx, dword [ebp - 0x8d8]
mov dword [eax], ecx
mov eax, 0x3ba6
test eax, eax
je 0x10048f9b
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x17c]
jl 0x10048f45
mov dword [ebp - 0x8e0], 1
jmp 0x10048f4c
and dword [ebp - 0x8e0], 0
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0xf88], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x4d0]
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
cmp dword [eax], esi
jne 0x10048f9b
mov dword [ebp - 0x8f0], 1
jmp 0x10048fa2
and dword [ebp - 0x8f0], 0
cmp dword [ebp - 0x8f0], 0x58fc5674
jne 0x10048fba
mov dword [ebp - 0x440], 1
jmp 0x10048fc1
and dword [ebp - 0x440], 0
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
mov ecx, dword [ebp - 0x440]
mov dword [eax], ecx
cmp dword [ebp - 0x440], 0
jne 0x10048ffa
push 1
lea ecx, [ebp - 0x4b8]
call fcn.10021c54
cmp dword [eax], 0
jne 0x10048ffa
and dword [ebp - 0x8f8], 0
jmp 0x10049004
mov dword [ebp - 0x8f8], 1
cmp dword [ebp - 0x8f8], 0xfd99
jl 0x1004901c
mov dword [ebp - 0x900], 1
jmp 0x10049023
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x908], eax
cmp dword [ebp - 0x908], 0x491b
jge 0x10049047
mov dword [ebp - 0x910], 1
jmp 0x1004904e
and dword [ebp - 0x910], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4d0]
cmp eax, dword [ebp - 0x910]
jle 0x1004906f
mov dword [ebp - 0x918], 1
jmp 0x10049076
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x918]
sub eax, dword [ebp - 0x17c]
mov dword [ebp - 0xc44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b8]
call fcn.10021c38
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x184]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x74], ax
mov dword [ebp - 0x20], 7
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x220], 0x1d84
push 2
lea ecx, [ebp - 0xe4c]
call fcn.10021bd6
mov dword [ebp - 4], 0x38
mov dword [ebp - 0xc4c], 0xfffffffc
mov dword [ebp - 0x328], 0
jmp 0x10049106
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 2
jge 0x10049128
push dword [ebp - 0x328]
lea ecx, [ebp - 0xe4c]
call fcn.10021c54
mov dword [eax], 4
jmp 0x100490f9
mov eax, dword [ebp - 0x20]
sub eax, 0x7d3bb8a2
cmp eax, 0xfffc
jae 0x10049143
mov dword [ebp - 0x920], 1
jmp 0x1004914a
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x920], eax
jg 0x10049161
mov dword [ebp - 0x928], 1
jmp 0x10049168
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x928]
test eax, eax
jne 0x10049185
cmp dword [ebp - 0x20], 0
jne 0x10049185
and dword [ebp - 0xcf4], 0
jmp 0x1004918f
mov dword [ebp - 0xcf4], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1110], eax
cmp dword [ebp - 0x20], 0
jne 0x100491a5
cmp dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf90], eax
cmp dword [ebp - 0x20], 0x8700
jl 0x100491c3
mov dword [ebp - 0x930], 1
jmp 0x100491ca
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x930], 0xffff
jbe 0x100491e2
mov dword [ebp - 0x938], 1
jmp 0x100491e9
and dword [ebp - 0x938], 0
cmp dword [ebp - 0x938], 0
je 0x10049201
cmp dword [ebp - 0x20], 0
jne 0x10049201
and dword [ebp - 0x940], 0
jmp 0x1004920b
mov dword [ebp - 0x940], 1
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x940]
jge 0x10049222
mov dword [ebp - 0x948], 1
jmp 0x10049229
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x948], 0xbc21
jg 0x10049241
mov dword [ebp - 0x950], 1
jmp 0x10049248
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x220]
imul eax, dword [ebp - 0x950]
cmp eax, 1
ja 0x10049266
mov dword [ebp - 0x958], 1
jmp 0x1004926d
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x958], eax
jge 0x10049287
mov dword [ebp - 0x960], 1
jmp 0x1004928e
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x960]
lea eax, [ecx + eax - 0x28ad]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x100492d8
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x100492d3
push 0x6bd
push 0x1731
push 0xb36
call dword [sym.imp.USER32.dll_CheckDlgButton]
jmp 0x1004939a
mov dword [ebp - 0xd4], 0
jmp 0x100492f1
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jg 0x1004939a
mov dword [ebp - 0x20], 0
jmp 0x1004930e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x1004932e
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1004932c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
jmp 0x10049307
mov dword [ebp - 0x220], 0
jmp 0x10049347
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jg 0x10049395
mov dword [ebp - 0x20], 0
jmp 0x10049360
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jg 0x10049393
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x10049391
push 0
push 0
push 0x1b43
push 0x1954
push 0x254f
call dword [sym.imp.USER32.dll_ScrollWindow]
jmp 0x10049359
jmp 0x1004933a
jmp 0x100492e4
push 0
lea ecx, [ebp - 0xe4c]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0xc4c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4c]
call fcn.10021c38
movzx eax, word [ebp - 0x74]
cmp eax, 0xffff
je 0x10049c76
mov dword [ebp - 0x330], 0xd4e06482
mov dword [ebp - 0x330], 0xffffffeb
jmp 0x100493f0
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xffffffed
jl 0x1004946f
push 1
lea ecx, [ebp - 0xec4]
call fcn.10021bd6
mov dword [ebp - 4], 0x39
mov dword [ebp - 0x338], 0
jmp 0x10049426
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 1
jge 0x10049448
push dword [ebp - 0x338]
lea ecx, [ebp - 0xec4]
call fcn.10021c54
mov dword [eax], 0x34e6d4f2
jmp 0x10049419
push 0
lea ecx, [ebp - 0xec4]
call fcn.10021c54
mov dword [eax], 0x25b0e446
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec4]
call fcn.10021c38
jmp 0x100493e3
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x1004948b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
movzx eax, word [ebp - 0x74]
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0x18c]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0xd0c], eax
mov dword [ebp - 0x1078], 0xfffffffe
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x100494cd
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x100494ec
push 0
push 0xb34
call dword [sym.imp.USER32.dll_EndDialog]
mov eax, dword [ebp - 0xd0c]
mov ecx, dword [ebp - 0x18c]
add ecx, dword [eax]
mov dword [ebp - 0xe4], ecx
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xdc]
jbe 0x100499de
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0xdc]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0xe4], edx
jae 0x100499de
mov dword [ebp - 0x340], 0x7e2799ac
mov dword [ebp - 0xc54], 0xffffffff
mov dword [ebp - 0x340], 0
jmp 0x10049561
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0xfffffffa
jl 0x10049664
mov dword [ebp - 0x348], 0xe8b72fd4
mov dword [ebp - 0x348], 0
jmp 0x10049591
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0xfffffff7
jne 0x10049645
mov dword [ebp - 0x350], 0
jmp 0x100495b7
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 3
jge 0x100495d3
mov eax, dword [ebp - 0x350]
mov dword [ebp + eax*4 - 0xcc0], 0xa9d19ac1
jmp 0x100495aa
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xcc0], 0
jmp 0x10049601
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcc0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xcc0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcc0], 0xfffffff6
jg 0x1004962d
mov byte [ebp - 0xf4], 0
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x1004962b
push 0
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x100495e6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc0]
mov dword [ebp - 0xc54], eax
jmp 0x10049584
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1004965f
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x10049554
mov eax, dword [0x10619604]
and eax, 2
jne 0x10049696
mov eax, dword [0x10619604]
or eax, 2
mov dword [0x10619604], eax
mov dword [ebp - 4], 0x3a
push 0x117a9
call fcn.10028206
pop ecx
mov byte [0x1061960c], al
or dword [ebp - 4], 0xffffffff
mov byte [ebp - 0xb8], 2
mov byte [ebp - 0xb7], 0x17
mov byte [ebp - 0xb6], 0
mov byte [ebp - 0xb5], 8
mov byte [ebp - 0xb4], 1
mov byte [ebp - 0xb3], 8
mov byte [ebp - 0xb2], 1
mov byte [ebp - 0xb1], 0xed
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xb8]
and eax, 0x7b
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xb8]
or ecx, 0x7b
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb8]
mov byte [ebp + eax - 0x194], cl
mov dword [ebp - 0x3c], 2
and dword [ebp - 0x358], 0
jmp 0x1004971f
mov eax, dword [ebp - 0x3c]
inc eax
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 8
jae 0x100497d5
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xb8]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x3c], eax
jne 0x10049769
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0xb8]
inc eax
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0xb8]
mov ecx, dword [ebp - 0x3c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x3c], eax
jmp 0x10049717
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x358]
movzx eax, byte [ebp + eax - 0xba]
movsx eax, byte [ebp + eax - 0x194]
mov ecx, dword [ebp - 0x3c]
movzx ecx, byte [ebp + ecx - 0xb7]
and ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x358]
movzx eax, byte [ebp + eax - 0xba]
movsx eax, byte [ebp + eax - 0x194]
mov edx, dword [ebp - 0x3c]
movzx edx, byte [ebp + edx - 0xb7]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x3c]
movzx eax, byte [ebp + eax - 0xb8]
mov byte [ebp + eax - 0x194], dl
and dword [ebp - 0x358], 0
jmp 0x10049717
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x194], 0
mov eax, dword [0x10619604]
and eax, 4
jne 0x10049821
mov eax, dword [0x10619604]
or eax, 4
mov dword [0x10619604], eax
mov dword [ebp - 4], 0x3b
lea eax, [ebp - 0x194]
push eax
mov ecx, 0x10619660
call fcn.1004afba
push 0x1007161c
call fcn.100579ec
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x360], 0
jmp 0x10049837
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 4
jae 0x10049850
mov eax, dword [ebp - 0x360]
mov byte [ebp + eax - 0x194], 0
jmp 0x1004982a
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x158], eax
movsx eax, byte [0x1061960c]
mov ecx, dword [ebp - 0x158]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x1004987f
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
jmp 0x1004985c
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
push dword [ebp - 0x158]
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x1128]
call fcn.1004b641
mov dword [ebp - 4], 0x3c
push 0x10619660
lea ecx, [ebp - 0x1128]
call fcn.1004afdd
lea eax, [ebp - 0xf98]
push eax
lea ecx, [ebp - 0x1128]
call fcn.10033721
push dword [eax]
lea eax, [ebp - 0x10d8]
push eax
lea ecx, [ebp - 0x1128]
call fcn.1003370d
push dword [eax]
lea ecx, [ebp - 0x1184]
call fcn.1004b66a
mov byte [ebp - 4], 0x3d
lea eax, [ebp - 0x1184]
push eax
call fcn.10034fcb
pop ecx
mov dword [ebp - 0x448], eax
cmp dword [ebp - 0x448], 0
je 0x1004998a
push dword [ebp - 0x158]
lea ecx, [ebp - 0x114c]
call fcn.1004afba
mov byte [ebp - 4], 0x3e
lea edx, [ebp - 0xce0]
lea ecx, [ebp - 0x114c]
call fcn.10034e61
movzx eax, al
test eax, eax
je 0x1004995a
push 0
push dword [ebp - 0xce0]
push 0
push dword [ebp - 0x448]
call fcn.100413be
add esp, 0x10
mov dword [ebp - 0xe4], eax
jmp 0x10049979
push 1
push 0
lea eax, [ebp - 0x114c]
push eax
push dword [ebp - 0x448]
call fcn.100413be
add esp, 0x10
mov dword [ebp - 0xe4], eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x114c]
call fcn.10032e9e
jmp 0x100499c0
cmp dword [ebp + 0x10], 0
jne 0x100499a0
mov ecx, dword [ebp + 0xc]
call fcn.10021680
mov dword [ebp - 0x968], eax
jmp 0x100499aa
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x968], eax
push dword [ebp - 0x968]
push dword [ebp + 8]
call fcn.1003d104
pop ecx
pop ecx
mov dword [ebp - 0xe4], eax
mov byte [ebp - 4], 0x3c
lea ecx, [ebp - 0x1184]
call fcn.10032dd5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1128]
call fcn.10032e9e
push 1
lea ecx, [ebp - 0xac0]
call fcn.10021bd6
mov dword [ebp - 4], 0x3f
mov dword [ebp - 0x50], 0
push 1
lea ecx, [ebp - 0xd4c]
call fcn.10021bd6
mov byte [ebp - 4], 0x40
mov dword [ebp - 0x500], 0xfffffffb
mov dword [ebp - 0x520], 0x968cb667
mov dword [ebp - 0x88], 0
jmp 0x10049a37
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10049a59
push dword [ebp - 0x88]
lea ecx, [ebp - 0xac0]
call fcn.10021c54
mov dword [eax], 0x2062
jmp 0x10049a2a
mov dword [ebp - 0x88], 0
jmp 0x10049a72
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10049a94
push dword [ebp - 0x88]
lea ecx, [ebp - 0xd4c]
call fcn.10021c54
mov dword [eax], 0xfffffffe
jmp 0x10049a65
mov dword [ebp - 0x50], 0
jmp 0x10049aa4
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10049ac8
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10049ac6
push 0
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x10049a9d
cmp dword [ebp - 0x50], 0xf7e44142
jbe 0x10049add
mov dword [ebp - 0x4e4], 1
jmp 0x10049ae4
and dword [ebp - 0x4e4], 0
push 0
lea ecx, [ebp - 0xac0]
call fcn.10021c54
mov ecx, dword [ebp - 0x4e4]
sub ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
push 0
lea ecx, [ebp - 0xd4c]
call fcn.10021c54
mov ecx, dword [ebp - 0x4e8]
mov dword [eax], ecx
cmp dword [ebp - 0x4e8], 0xb060
je 0x10049b2c
mov dword [ebp - 0x4f0], 1
jmp 0x10049b33
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4f0], eax
jge 0x10049b4a
mov dword [ebp - 0x4f8], 1
jmp 0x10049b51
and dword [ebp - 0x4f8], 0
push 0
lea ecx, [ebp - 0xac0]
call fcn.10021c54
mov eax, dword [eax]
imul eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x500], eax
mov esi, dword [ebp - 0x500]
push 0
lea ecx, [ebp - 0xac0]
call fcn.10021c54
cmp esi, dword [eax]
jge 0x10049b90
mov dword [ebp - 0x508], 1
jmp 0x10049b97
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x508]
je 0x10049bc0
push 0
lea ecx, [ebp - 0xd4c]
call fcn.10021c54
cmp dword [eax], 0
je 0x10049bc0
mov dword [ebp - 0x510], 1
jmp 0x10049bc7
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x510]
je 0x10049bde
mov dword [ebp - 0x518], 1
jmp 0x10049be5
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x1088], eax
push 0
lea ecx, [ebp - 0xac0]
call fcn.10021c54
mov esi, eax
push 0
lea ecx, [ebp - 0xac0]
call fcn.10021c54
mov eax, dword [eax]
cmp eax, dword [esi]
jne 0x10049c3d
mov eax, 0xcb44
test eax, eax
je 0x10049c3d
mov dword [ebp - 0x528], 1
jmp 0x10049c44
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x3f
lea ecx, [ebp - 0xd4c]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac0]
call fcn.10021c38
mov eax, dword [ebp - 0xe4]
jmp 0x1004a009
mov dword [ebp - 0xdf0], 1
mov dword [ebp - 0xdec], 1
mov dword [ebp - 0xde8], 1
mov dword [ebp - 0xde4], 1
lea ecx, [ebp - 0x465]
call fcn.10021c63
push eax
lea eax, [ebp - 0xde0]
push eax
lea eax, [ebp - 0xdf0]
push eax
lea ecx, [ebp - 0x1194]
call fcn.10021c83
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c12
mov dword [ebp - 4], 0x41
push 1
lea ecx, [ebp - 0x1b4]
call fcn.10021bd6
mov byte [ebp - 4], 0x42
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x458], 0x7a9413e4
mov dword [ebp - 0xb2c], 0xa2a4f2a6
mov dword [ebp - 0x368], 0
jmp 0x10049d22
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x10049d44
push dword [ebp - 0x368]
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov dword [eax], 6
jmp 0x10049d15
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
and dword [eax], 0
jmp 0x10049d7a
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov dword [ebp - 0x530], eax
mov eax, dword [ebp - 0x530]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x530]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
cmp dword [eax], 3
jg 0x10049fe9
mov dword [ebp - 0x450], 0xb1ab4456
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
mov dword [ebp - 0x538], eax
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
mov ecx, dword [ebp - 0x538]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x538]
cmp dword [eax], 0
je 0x10049eba
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov eax, dword [eax]
mov dword [ebp - 0x370], eax
mov esi, dword [ebp - 0x370]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
cmp dword [eax], esi
jl 0x10049eba
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov esi, dword [eax]
add esi, 9
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
cmp esi, dword [eax]
jg 0x10049e59
mov dword [ebp - 0x540], 1
jmp 0x10049e60
and dword [ebp - 0x540], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov ecx, dword [ebp - 0x540]
cmp ecx, dword [eax]
je 0x10049e83
mov dword [ebp - 0x548], 1
jmp 0x10049e8a
and dword [ebp - 0x548], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
mov ecx, dword [ebp - 0x548]
cmp ecx, dword [eax]
jne 0x10049eba
mov dword [ebp - 0x550], 1
jmp 0x10049ec1
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x450], eax
push 2
lea ecx, [ebp - 0xa94]
call fcn.10021c54
mov dword [ebp - 0x370], 1
mov esi, dword [ebp - 0x370]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
cmp dword [eax], esi
je 0x10049f14
mov dword [ebp - 0xc5c], 1
jmp 0x10049f1b
and dword [ebp - 0xc5c], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
push dword [eax]
lea ecx, [ebp - 0xa94]
call fcn.10021c54
mov esi, dword [ebp - 0x458]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
cmp esi, dword [eax]
jl 0x10049f68
mov dword [ebp - 0x558], 1
jmp 0x10049f6f
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
sub eax, 0x20b275cf
imul eax, eax, 5
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x450], 0x9eb1
jl 0x10049f9b
mov dword [ebp - 0x560], 1
jmp 0x10049fa2
and dword [ebp - 0x560], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.10021c54
mov ecx, dword [ebp - 0x560]
cmp ecx, dword [eax]
jg 0x10049fc5
mov dword [ebp - 0x568], 1
jmp 0x10049fcc
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xb2c], eax
jmp 0x10049d56
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x1b4]
call fcn.10021c38
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa94]
call fcn.10021c38
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret