Function at 0x1003c560
Capabilities:
Delete file
Enumerate gui resources
Get common file path
Terminate process

Disassembly:
mov eax, 0x100740f9
call fcn.100729d8
sub esp, 0xa94
push ebx
push esi
push edi
push 4
pop eax
mov dword [ebp - 0x6c], ecx
lea ecx, [ebp - 0x400]
push eax
mov byte [ebp - 0x5d], dl
call fcn.10013d2b
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1003c5a3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2e0], 0xfffffff6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003c592
push 4
mov dword [ebp - 0x24], ebx
pop edx
jmp 0x1003c5c4
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x400]
mov dword [eax + ecx*4], 0xe83c773
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1003c5b1
mov dword [ebp - 0x24], ebx
jmp 0x1003c5df
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x228], 0x3afc3718
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1003c5ce
mov edi, dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], bl
je 0x1003c5f6
push ebx
call edi
mov esi, dword [ebp - 0x400]
mov dword [esi + 0xc], 2
mov dword [ebp - 0x1c], 0xd86e52d8
mov dword [ebp - 0x2c], 0xb416c011
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1003c7ae
mov dword [ebp - 0x24], 0x1d847576
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x224]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setle cl
imul eax, ecx
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x1c], ebx
je 0x1003c6aa
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x1003c7a4
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x2e0]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2e0], ecx
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003c6a0
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
dec dword [ebp - 0x24]
jns 0x1003c67c
jmp 0x1003c7a4
xor eax, eax
mov dword [ebp - 0x20], 0xe8ee72c9
mov dword [ebp - 0x24], ebx
inc eax
jmp 0x1003c73c
mov dword [ebp - 0x28], 0x4daed0f1
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 2
jg 0x1003c739
push 2
lea ecx, [ebp - 0x564]
call fcn.10013d2b
mov dword [ebp - 0x20], ebx
jmp 0x1003c6f1
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x564]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003c6de
mov edx, dword [ebp - 0x564]
mov dword [edx + 4], ebx
xor ebx, ebx
inc ebx
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp + eax*4 - 0x2e0]
mov eax, dword [ebp - 0x24]
inc dword [edx + 4]
mov dword [ebp + eax*4 - 0x2dc], ecx
cmp dword [edx + 4], ebx
jle 0x1003c703
lea ecx, [ebp - 0x564]
call fcn.100148da
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
push 0
pop ebx
jle 0x1003c6cc
xor eax, eax
inc eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1003c6bc
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [eax + 8]
mov eax, dword [ebp - 0x24]
cmp ecx, 0xffffffff
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
imul ecx, ecx, 0xeddd
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
je 0x1003c785
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x20], ebx
je 0x1003c793
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x224]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1003c622
dec dword [esi + 0xc]
jns 0x1003c603
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x400]
call fcn.100148da
push 4
pop eax
push eax
lea ecx, [ebp - 0x3dc]
call fcn.10013d2b
xor eax, eax
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1003c7fb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2f0], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003c7ea
push 4
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1003c81c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3dc]
mov dword [eax + ecx*4], 0xe83c773
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003c809
mov dword [ebp - 0x1c], ebx
jmp 0x1003c837
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x240], 0x3afc3718
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003c826
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003c849
push ebx
call edi
mov esi, dword [ebp - 0x3dc]
mov dword [esi + 0xc], 2
mov dword [ebp - 0x1c], 0xd86e52d8
mov dword [ebp - 0x2c], 0xb416c011
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x1c], ebx
jmp 0x1003ca01
mov dword [ebp - 0x24], 0x1d847576
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x23c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setle cl
imul eax, ecx
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x1c], ebx
je 0x1003c8fd
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x1003c9f7
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x2f0]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2f0], ecx
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003c8f3
push ebx
call dword [sym.imp.USER32.dll_DestroyIcon]
dec dword [ebp - 0x24]
jns 0x1003c8cf
jmp 0x1003c9f7
xor eax, eax
mov dword [ebp - 0x20], 0xe8ee72c9
mov dword [ebp - 0x24], ebx
inc eax
jmp 0x1003c98f
mov dword [ebp - 0x28], 0x4daed0f1
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 2
jg 0x1003c98c
push 2
lea ecx, [ebp - 0x768]
call fcn.10013d2b
mov dword [ebp - 0x20], ebx
jmp 0x1003c944
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x768]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003c931
mov edx, dword [ebp - 0x768]
mov dword [edx + 4], ebx
xor ebx, ebx
inc ebx
mov eax, dword [esi + 0xc]
mov ecx, dword [ebp + eax*4 - 0x2f0]
mov eax, dword [ebp - 0x24]
inc dword [edx + 4]
mov dword [ebp + eax*4 - 0x2ec], ecx
cmp dword [edx + 4], ebx
jle 0x1003c956
lea ecx, [ebp - 0x768]
call fcn.100148da
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
push 0
pop ebx
jle 0x1003c91f
xor eax, eax
inc eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1003c90f
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3dc]
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [eax + 8]
mov eax, dword [ebp - 0x24]
cmp ecx, 0xffffffff
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl cl
xor edx, edx
imul ecx, ecx, 0xeddd
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
je 0x1003c9d8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x20], ebx
je 0x1003c9e6
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x23c]
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfffffffa
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1003c875
dec dword [esi + 0xc]
jns 0x1003c856
or edi, 0xffffffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 4], edi
call fcn.100148da
push 4
pop eax
push eax
lea ecx, [ebp - 0x558]
call fcn.10013d2b
xor ecx, ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1003ca50
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0x40d7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003ca3f
push 4
mov dword [ebp - 0x18], ebx
pop edx
cmp dword [ebp - 0x18], edx
jge 0x1003ca77
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x558]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003ca60
xor ecx, ecx
inc ecx
mov esi, dword [ebp - 0x558]
mov dword [esi + 8], ebx
jmp 0x1003ca85
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x30], 0x1ec2
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x2c], 0x78cca699
mov dword [ebp - 0x20], ebx
jmp 0x1003cab3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x818], 0x5c8a52b4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003caa2
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cac9
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cae8
push 0x1fa2
push ebx
push 0xe28
push 0xe4d
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x1003cb6b
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [esi + 8]
cmp dword [ebp + eax*4 - 0x84], ecx
jne 0x1003cb1b
mov eax, dword [ebp - 0x818]
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x2c], eax
imul eax, dword [ebp - 0x2c], 3
sub eax, 0x2488a74d
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x84]
jne 0x1003cb4b
mov eax, dword [esi + 8]
cmp dword [ebp + eax*4 - 0x84], ebx
jne 0x1003cb4b
mov edx, ebx
jmp 0x1003cb50
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x84]
lea eax, [edx + 0x695c]
imul ecx, eax
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x28]
jns 0x1003caf0
inc dword [esi + 8]
cmp dword [esi + 8], 0
jle 0x1003ca82
lea ecx, [ebp - 0x558]
call fcn.100148da
mov dword [ebp - 0x1c], 0xe0648261
xor eax, eax
push 0xfffffffffffffff7
mov dword [ebp - 0x30], 2
inc eax
pop esi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], esi
jmp 0x1003cc3d
push 2
lea ecx, [ebp - 0x678]
call fcn.10013d2b
mov dword [ebp - 0x18], ebx
jmp 0x1003cbc5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9ec], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003cbb4
push 2
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1003cbe2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x678]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003cbd3
mov ecx, dword [ebp - 0x678]
mov dword [ecx + 4], edx
mov dword [ebp - 0x14], 0xdc9ed9ba
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ebx
jl 0x1003cc10
mov eax, dword [ecx + 4]
cmp dword [ebp + eax*4 - 0x9ec], ebx
jne 0x1003cc10
dec dword [ebp - 0x14]
jns 0x1003cbff
dec dword [ecx + 4]
jns 0x1003cbf0
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x678]
call fcn.100148da
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff2
jl 0x1003cba2
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cc67
push ebx
push 0x14a6
push ebx
push 0x139e
push 0x1761
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
mov dword [ebp - 0x28], 0x25b9b55b
inc eax
lea ecx, [ebp - 0x570]
push eax
call fcn.10013d2b
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x1003cc94
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x570]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003cc85
mov dword [ebp - 0x28], ebx
jmp 0x1003ccba
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], ebx
jne 0x1003ccc0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x570]
mov dword [eax], ecx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffc
jl 0x1003cc9e
lea ecx, [ebp - 0x570]
call fcn.100148da
push 4
pop esi
push esi
lea ecx, [ebp - 0x490]
call fcn.10013d2b
push 2
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x708]
mov dword [ebp - 0x30], 0x7cb3f4f4
push eax
call fcn.10013d2b
mov dword [ebp - 0x20], ebx
jmp 0x1003cd07
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x708]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003ccf8
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cd22
push ebx
push 0x176e
call dword [sym.imp.USER32.dll_MapDialogRect]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x708]
mov dword [eax], ecx
lea ecx, [ebp - 0x708]
call fcn.100148da
mov dword [ebp - 0x4c], ebx
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cd56
push 0xd4a
push ebx
push 0x181f
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cd69
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
push esi
lea ecx, [ebp - 0x8a4]
call fcn.10013d2b
mov dword [ebp - 0x28], ebx
push 4
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1003cd92
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8a4]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003cd83
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cda7
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push 3
mov dword [ebp - 0x28], ebx
pop ecx
jmp 0x1003ce41
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x20], ebx
jmp 0x1003cddc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9c8], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1003cdcf
mov dword [ebp - 0x9c0], 0xfffffff7
mov dword [ebp - 0x390], ecx
cmp dword [ebp - 0x390], ebx
jl 0x1003ce3e
mov dword [ebp - 0x20], 0x6c516535
mov dword [ebp - 0x20], ebx
jmp 0x1003ce2a
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003ce27
push ebx
push 0x1698
push 0x6ad
push 0x1324
call dword [sym.imp.KERNEL32.dll_RaiseException]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x1003ce05
mov dword [ebp - 0x30], 0xc902dafb
dec dword [ebp - 0x390]
jns 0x1003cdf9
inc dword [ebp - 0x28]
mov eax, 0x22263126
cmp dword [ebp - 0x28], ecx
jle 0x1003cdb2
lea ecx, [ebp - 0x8a4]
call fcn.100148da
mov dword [ebp - 0x1c], ebx
jmp 0x1003ce70
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x348], 0xfffffff6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003ce5f
push 2
lea ecx, [ebp - 0x8b8]
call fcn.10013d2b
mov dword [ebp - 0x28], 0x57a7c203
mov dword [ebp - 0x20], ebx
jmp 0x1003cea2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8b8]
mov dword [eax + ecx*4], 0x7862fd41
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003ce8f
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003cebc
push 0x55c
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov dword [ebp - 0x28], ebx
jmp 0x1003cedb
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x1003ced5
push 0x10d8
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x28]
xor eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jle 0x1003cec1
lea ecx, [ebp - 0x8b8]
call fcn.100148da
push 4
mov dword [ebp - 0x1c], ebx
pop edx
jmp 0x1003cf09
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x490]
mov dword [eax + ecx*4], 0xe83c773
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1003cef6
mov dword [ebp - 0x1c], ebx
jmp 0x1003cf24
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x220], 0x3afc3718
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1003cf13
xor eax, eax
lea ecx, [ebp - 0x8d0]
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x14], 0x355fff83
mov dword [ebp - 0x40], 0x7af2c9a1
mov dword [ebp - 0x4c], 0xf15cc7c4
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x4c], 0x31ea062
mov dword [ebp - 0x4c], 0xc6dd3ed2
mov dword [ebp - 0x4c], 0xfffffffa
push edx
call fcn.10013d2b
push 4
mov byte [ebp - 4], 3
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1003cf88
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8d0]
mov dword [eax + ecx*4], 0x7f4a1d2d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003cf75
xor ebx, ebx
inc ebx
mov dword [ebp - 0x44], ebx
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
neg edx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sbb edx, edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
neg edx
cmp edx, ebx
sete cl
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x14]
add ecx, 0x74ca
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setle cl
xor edx, edx
cmp ecx, edi
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x58aae07e
je 0x1003d029
xor ebx, ebx
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], bl
je 0x1003d087
push ebx
push 0x26c5
push 0x1272
push 0x14f1
call dword [sym.imp.USER32.dll_SetDlgItemInt]
jmp 0x1003d087
mov dword [ebp - 0x4c], 0xfffffffe
lea ecx, [ebp - 0x588]
push 2
call fcn.10013d2b
xor ebx, ebx
xor edx, edx
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1003d054
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x828], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003d047
mov dword [ebp - 0x18], ebx
jmp 0x1003d06d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x588]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003d05e
mov eax, dword [ebp - 0x588]
lea ecx, [ebp - 0x588]
inc dword [eax + 4]
call fcn.100148da
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 4], 2
call fcn.100148da
push 4
pop eax
push eax
lea ecx, [ebp - 0x270]
call fcn.10013d2b
push 4
pop edx
mov byte [ebp - 4], dl
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x2c], 0xf3b7
mov dword [ebp - 0x30], 0x7c93e255
mov dword [ebp - 0x18], ebx
jmp 0x1003d0db
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x270]
mov dword [eax + ecx*4], 0x824a8c6a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003d0c8
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x1003d0f9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc0], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003d0e8
mov esi, dword [ebp - 0x270]
mov dword [esi + 8], ebx
jmp 0x1003d10c
mov dword [ebp - 0x18], 3
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x14], 0xfffffffb
push edx
call fcn.10013d2b
push 5
pop eax
push 4
mov byte [ebp - 4], al
mov dword [ebp - 0x20], ebx
pop edx
jmp 0x1003d14e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x300]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003d13b
cmp dword [esi + 8], ebx
jne 0x1003d306
mov eax, dword [ebp - 0x270]
xor ecx, ecx
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
setne cl
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x270]
xor eax, eax
cmp ecx, dword [edi + 0xc]
setl al
dec eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], ebx
je 0x1003d23e
mov dword [ebp - 0x40], 9
lea ecx, [ebp - 0x690]
push eax
call fcn.10013d2b
xor edx, edx
inc edx
mov dword [ebp - 0x3c0], edx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x3b8], edx
mov dword [ebp - 0x3b4], edx
mov dword [ebp - 0x20], ebx
jmp 0x1003d1dc
xor edx, edx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
cmp ecx, eax
mov eax, dword [ebp - 0xc0]
setl dl
xor ecx, ecx
cmp edx, dword [edi + 0xc]
setl cl
xor edx, edx
imul ecx, dword [esi + 8]
cmp ecx, eax
mov eax, dword [ebp - 0x38]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x300]
setne cl
xor edx, edx
cmp ecx, dword [eax + 4]
setne dl
imul edx, dword [eax + 8]
mov eax, dword [ebp - 0x1c]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
add eax, 0x361ae7d5
add ecx, eax
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x38], ecx
jne 0x1003d2e0
lea ecx, [ebp - 0x300]
call fcn.100148da
push 4
mov dword [ebp - 0x1c], ebx
pop eax
cmp dword [ebp - 0x1c], eax
jge 0x1003d337
xor edx, edx
push eax
inc edx
pop ebx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x270]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003d321
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 2
call fcn.100148da
mov dword [ebp - 0x30], 0x1659
cmp dword [ebp - 0x30], 0x1358
jge 0x1003d3a2