Function at 0x1002fc8c
Capabilities:
Authenticate hmac
Parse pe header
Read .ini file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005dd14
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x6f8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xbc], 0xca4f833f
mov dword [ebp - 0x5f8], 0xe164caf
mov dword [ebp - 0x1b4], 0
jmp 0x1002fcde
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1002fcfa
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x3d8], 0xfffffff8
jmp 0x1002fcd1
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1002fd21
push 0
push 0x25bc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
mov dword [ebp - 0xbc], 0
jmp 0x1002fd3a
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jg 0x1002ff30
push 3
lea ecx, [ebp - 0x5a4]
call fcn.10001eb9
and dword [ebp - 4], 0
mov dword [ebp - 0x2fc], 0x7ae6
mov dword [ebp - 0x464], str.fwytn_tomjg_fdrtcp_cmlrffukl_ykiikr
cmp dword [ebp - 0x2fc], 0x7d4a
jle 0x1002fe5b
and dword [ebp - 0x1bc], 0
jmp 0x1002fd92
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0x673f
jge 0x1002fe51
and dword [ebp - 0x170], 0
jmp 0x1002fdb8
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0x2a77
jge 0x1002fe4c
and dword [ebp - 0x108], 0
jmp 0x1002fdde
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x7064
jge 0x1002fe47
mov eax, dword [ebp - 0x1bc]
sub eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x108]
cdq
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x47c], edx
push dword [ebp - 0x47c]
push dword [ebp - 0x480]
lea ecx, [ebp - 0x6f0]
call fcn.10001a85
pop ecx
pop ecx
mov dword [ebp - 0x448], eax
mov ecx, dword [ebp - 0x448]
call fcn.10001d0f
push eax
call fcn.10045794
pop ecx
lea ecx, [ebp - 0x6f0]
call fcn.10001d05
jmp 0x1002fdd1
jmp 0x1002fdab
jmp 0x1002fd85
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x14c], 0
jmp 0x1002fe74
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x1002fe96
push dword [ebp - 0x14c]
lea ecx, [ebp - 0x5a4]
call fcn.10001f58
mov dword [eax], 6
jmp 0x1002fe67
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2fc], 0x7781
jge 0x1002feb2
push dword [ebp - 0x464]
call fcn.10045794
pop ecx
jmp 0x1002fece
and dword [ebp - 4], 0
jmp 0x1002fed8
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ebp + ecx*4 - 0x3d8]
cmp ecx, dword [ebp + eax - 0x3d8]
jl 0x1002ff00
mov dword [ebp - 0x3e0], 1
jmp 0x1002ff07
and dword [ebp - 0x3e0], 0
push 2
lea ecx, [ebp - 0x5a4]
call fcn.10001f58
mov ecx, dword [ebp - 0x3e0]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a4]
call fcn.10001f3c
jmp 0x1002fd2d
cmp dword [ebp + 0x10], 0
jbe 0x10030435
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10030435
mov dword [ebp - 0x14], 0xa5043c4a
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x3d0], 0xfffffffe
mov dword [ebp - 0x504], 0x6219e206
mov dword [ebp - 0x110], 0
jmp 0x1002ff88
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1002ffa4
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x584], 0xffffffff
jmp 0x1002ff7b
or eax, 0xffffffff
sub eax, dword [ebp - 0x14]
je 0x1002ffb0
cmp dword [ebp - 0x14], 0
cmp dword [ebp - 0x14], 0xffff
jbe 0x1002ffc5
mov dword [ebp - 0x46c], 1
jmp 0x1002ffcc
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
je 0x1002ffed
mov dword [ebp - 0x3fc], 1
jmp 0x1002fff4
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x3fc]
add eax, 0x2106f928
imul eax, eax, 0
inc eax
cmp eax, 1
jae 0x10030014
mov dword [ebp - 0x414], 1
jmp 0x1003001b
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x414]
imul eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
je 0x1003003c
cmp dword [ebp - 0x14], 0
jne 0x1003003c
and dword [ebp - 0x400], 0
jmp 0x10030046
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x9b78
je 0x10030064
mov dword [ebp - 0x3ac], 1
jmp 0x1003006b
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x3ac]
test eax, eax
je 0x10030317
push 1
lea ecx, [ebp - 0x438]
call fcn.10001eb9
mov dword [ebp - 4], 3
mov dword [ebp - 0xa8], 0x32c75278
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0x154], 0
jmp 0x100300be
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x100300dd
push dword [ebp - 0x154]
lea ecx, [ebp - 0x438]
call fcn.10001f58
and dword [eax], 0
jmp 0x100300b1
mov dword [ebp - 0x3c], 0
jmp 0x100300ed
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x10030306
mov dword [ebp - 0x230], 8
mov dword [ebp - 0x4f4], 0x16e149f7
mov dword [ebp - 0x14], 0
jmp 0x1003011b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x10030301
mov dword [ebp - 0x1dc], 0x364f
mov dword [ebp - 0x34], 0
jmp 0x1003013f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x100302ba
mov dword [ebp - 0x238], 0x2506ed55
mov esi, dword [ebp - 0x1dc]
push dword [ebp - 0x34]
lea ecx, [ebp - 0x438]
call fcn.10001f58
cmp esi, dword [eax]
jg 0x10030189
push 0
lea ecx, [ebp - 0x438]
call fcn.10001f58
cmp dword [eax], 0
je 0x10030189
mov dword [ebp - 0x474], 1
jmp 0x10030190
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x14], 0
jbe 0x100301ab
mov dword [ebp - 0x228], 1
jmp 0x100301b2
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1dc]
cmp dword [ebp - 0x228], eax
je 0x100301cc
mov dword [ebp - 0x3a8], 1
jmp 0x100301d3
and dword [ebp - 0x3a8], 0
imul eax, dword [ebp - 0x3a8], 0xb1aa
cmp eax, 0x1552b9cb
jle 0x100301f0
mov dword [ebp - 0x3b0], 1
jmp 0x100301f7
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x438]
call fcn.10001f58
mov eax, dword [eax]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1dc]
imul eax, dword [ebp - 0x3b0]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x1e4]
jle 0x10030254
cmp dword [ebp - 0x1e4], 0
je 0x10030254
mov dword [ebp - 0x3b8], 1
jmp 0x1003025b
and dword [ebp - 0x3b8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x438]
call fcn.10001f58
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3b8]
jl 0x10030286
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10030286
mov dword [ebp - 0x240], 1
jmp 0x1003028d
and dword [ebp - 0x240], 0
cmp dword [ebp - 0x240], 1
jae 0x100302a2
mov dword [ebp - 0x3c0], 1
jmp 0x100302a9
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x4f4], eax
jmp 0x10030138
mov dword [ebp - 0xa8], 0
jmp 0x100302d3
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x100302fc
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x100302fa
push 0
push 0x1583
push 0x10d3
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x100302c6
jmp 0x10030114
jmp 0x100300e6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x438]
call fcn.10001f3c
jmp 0x10030350
mov dword [ebp - 0x248], 0xbbbd28a2
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10030350
push 0
push 0
push 0x1ea7
push 0xf44
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0x584], ecx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3c8], eax
jg 0x10030387
mov dword [ebp - 0x4fc], 1
jmp 0x1003038e
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x3d0]
jne 0x100303b7
mov dword [ebp - 0x254], 1
jmp 0x100303be
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x34]
cmp eax, 0x9b58ece9
jae 0x100303da
mov dword [ebp - 0x33c], 1
jmp 0x100303e1
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x33c]
je 0x1003040e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x584], 0
je 0x1003040e
mov dword [ebp - 0x25c], 1
jmp 0x10030415
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x504], eax
movzx eax, word [ebp + 0x10]
push eax
push dword [ebp + 8]
call fcn.1002af15
pop ecx
pop ecx
jmp 0x100331d7
mov dword [ebp - 0x3ec], 0x7432
mov dword [ebp - 0x50c], str.nbfhjarso_dgowg_hws_gpnsrah_xlwubxiot_dperx_vcshtw_hqrxl
cmp dword [ebp - 0x3ec], 0x7441
jle 0x10030504
and dword [ebp - 0x118], 0
jmp 0x1003046f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0x5330
jge 0x10030504
and dword [ebp - 0x15c], 0
jmp 0x10030495
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x752d
jge 0x100304ff
and dword [ebp - 0x100], 0
jmp 0x100304b7
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1c44
jge 0x100304fd
mov eax, dword [ebp - 0x118]
cdq
idiv dword [ebp - 0x15c]
xor edx, dword [ebp - 0x100]
mov eax, edx
cdq
mov dword [ebp - 0x48c], eax
mov dword [ebp - 0x488], edx
push dword [ebp - 0x488]
push dword [ebp - 0x48c]
mov ecx, 0x10078fb8
call fcn.10001d2f
jmp 0x100304aa
jmp 0x10030488
jmp 0x10030462
mov dword [ebp - 0x18], 0x38a1
mov dword [ebp - 4], 4
cmp dword [ebp - 0x3ec], 0x73c2
jge 0x1003052e
mov edx, dword [ebp - 0x50c]
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x1003054a
or dword [ebp - 4], 0xffffffff
jmp 0x10030554
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x20], 0xad816f93
mov dword [ebp - 0x164], 0
jmp 0x10030582
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 2
jge 0x1003059e
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0x42c], 0xfffffff7
jmp 0x10030575
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x60c], eax
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
je 0x100305c4
mov dword [ebp - 0x264], 1
jmp 0x100305cb
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x18], 0
jne 0x100305dd
mov dword [ebp - 0x514], 1
jmp 0x100305e4
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x264]
mov dword [ebp - 0x20], eax
push 6
pop eax
cmp eax, 0xffffffff
jbe 0x10030617
mov dword [ebp - 0x344], 1
jmp 0x1003061e
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x344], eax
jl 0x10030635
mov dword [ebp - 0x26c], 1
jmp 0x1003063c
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0xd76270e7
jb 0x10030654
mov dword [ebp - 0x3b4], 1
jmp 0x1003065b
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x3b4], eax
jl 0x10030672
mov dword [ebp - 0x274], 1
jmp 0x10030679
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jge 0x10030693
mov dword [ebp - 0x34c], 1
jmp 0x1003069a
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x34c], eax
jne 0x100306b7
mov eax, 0x9d9e
test eax, eax
jne 0x100306b7
and dword [ebp - 0x27c], 0
jmp 0x100306c1
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x27c], eax
jle 0x100306ed
mov byte [ebp - 0x7f], 0
movzx eax, byte [ebp - 0x7f]
test eax, eax
je 0x100306e8
push 0x53d
push 0x2e4
call dword [sym.imp.USER32.dll_SetCaretPos]
jmp 0x1003089c
mov dword [ebp - 0x20], 0
jmp 0x100306fd
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffec
je 0x10030866
mov dword [ebp - 0x18], 0
jmp 0x10030717
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xc
jl 0x10030861
mov dword [ebp - 0x4e0], 0xe91c
mov dword [ebp - 0x3f4], 0x35a6
mov dword [ebp - 0x450], str.xsvoor_adxhdfaf_mkfbrmbxf_nybjcabex_qni_ogoyuavpa_anww_xngb_btvzog_zlp_oaopeih
cmp dword [ebp - 0x3f4], 0x3718
jle 0x100307f5
and dword [ebp - 0x128], 0
jmp 0x10030765
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x702c
jge 0x100307f5
and dword [ebp - 0x198], 0
jmp 0x1003078b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0x887
jge 0x100307f0
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x198]
shl eax, cl
cdq
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x494], edx
push dword [ebp - 0x494]
push dword [ebp - 0x498]
lea ecx, [ebp - 0x6d8]
call fcn.10001a85
pop ecx
pop ecx
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
call fcn.10001d0f
push eax
call fcn.10045794
pop ecx
lea ecx, [ebp - 0x6d8]
call fcn.10001d05
jmp 0x1003077e
jmp 0x10030758
mov dword [ebp - 0x30], 0xffffffef
jmp 0x10030805
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x19
jle 0x10030817
mov dword [ebp - 0x4e0], 0xffffffff
jmp 0x100307fe
mov dword [ebp - 4], 6
cmp dword [ebp - 0x3f4], 0x3226
jge 0x10030836
push dword [ebp - 0x450]
call fcn.10045794
pop ecx
jmp 0x10030852
or dword [ebp - 4], 0xffffffff
jmp 0x1003085c
jmp 0x10030710
jmp 0x100306f6
mov dword [ebp - 0x20], 1
jmp 0x10030876
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1003089c
mov byte [ebp - 0x7e], 0
movzx eax, byte [ebp - 0x7e]
test eax, eax
je 0x1003089a
push 0x232
push 0x1c16
push 0
call dword [sym.imp.USER32.dll_InflateRect]
jmp 0x1003086f
mov dword [ebp - 0x20], 0
jmp 0x100308ac
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff7
jne 0x10030bc7
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x178], 0xb2b29335
mov dword [ebp - 0x458], 0x179d740f
mov dword [ebp - 0x58], 0
jmp 0x100308e4
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x35
jge 0x10030bc2
mov dword [ebp - 0x90], 0x4120
mov dword [ebp - 0x45c], 0xdb5cf635
mov dword [ebp - 0x18], 0
jmp 0x10030912
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x100309ee
mov dword [ebp - 0x130], 0xb13b1067
mov eax, 0x26aece01
test eax, eax
je 0x10030938
cmp dword [ebp - 0x90], 0
jne 0x1003094a
cmp dword [ebp - 0x130], 0
jne 0x1003094a
and dword [ebp - 0x284], 0
jmp 0x10030954
mov dword [ebp - 0x284], 1
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x284]
imul eax, dword [ebp - 0x130]
test eax, eax
jne 0x10030983
cmp dword [ebp - 0x45c], 0
jne 0x10030983
and dword [ebp - 0x540], 0
jmp 0x1003098d
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0xb0]
jne 0x100309b0
mov dword [ebp - 0x28c], 1
jmp 0x100309b7
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x42c]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x42c], ecx
mov eax, dword [ebp - 0x354]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x178], eax
jmp 0x1003090b
cmp dword [ebp - 0x90], 1
jg 0x10030a09
mov eax, 0x6ffb
test eax, eax
jne 0x10030a09
and dword [ebp - 0x3bc], 0
jmp 0x10030a13
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x178], eax
imul eax, dword [ebp - 0x178], 0x3def
test eax, eax
jne 0x10030a42
cmp dword [ebp - 0x30], 0
jne 0x10030a42
and dword [ebp - 0x294], 0
jmp 0x10030a4c
mov dword [ebp - 0x294], 1
mov eax, 0xd52f
sub eax, dword [ebp - 0x294]
cmp eax, dword [ebp - 0xb0]
jne 0x10030a6b
mov dword [ebp - 0x35c], 1
jmp 0x10030a72
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
add eax, 0xd35e
mov ecx, dword [ebp - 0xb0]
imul ecx, eax
imul ecx, dword [ebp - 0x90]
test ecx, ecx
je 0x10030a98
cmp dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
cmp eax, dword [ebp - 0xb0]
jne 0x10030ab9
mov dword [ebp - 0x29c], 1
jmp 0x10030ac0
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x29c], eax
jge 0x10030ada
mov dword [ebp - 0x3f0], 1
jmp 0x10030ae1
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x3f0], eax
je 0x10030afb
mov dword [ebp - 0x2a4], 1
jmp 0x10030b02
and dword [ebp - 0x2a4], 0
cmp dword [ebp - 0x2a4], 1
jg 0x10030b1d
cmp dword [ebp - 0x90], 0
jne 0x10030b1d
and dword [ebp - 0x364], 0
jmp 0x10030b27
mov dword [ebp - 0x364], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x364], eax
jg 0x10030b3e
mov dword [ebp - 0x2ac], 1
jmp 0x10030b45
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
cmp eax, dword [ebp - 0x2ac]
jle 0x10030b66
mov dword [ebp - 0x3c4], 1
jmp 0x10030b6d
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, 0x5b212f01
cmp eax, 8
jne 0x10030b89
mov dword [ebp - 0x2b4], 1
jmp 0x10030b90
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x2b4]
jg 0x10030baa
mov dword [ebp - 0x36c], 1
jmp 0x10030bb1
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x458], eax
jmp 0x100308dd
jmp 0x100308a5
cmp dword [ebp + 0x10], 0
jne 0x10032283
mov dword [ebp - 0x2bc], 0x3a37
mov dword [ebp - 0x460], str.bdnjr_dia_yyzfsmbv_gir_gdvhn_xtxpztzh_iwtisqw_whurkaviu_vhsf_veyhirx_sayr_wkzsddohg
cmp dword [ebp - 0x2bc], 0x3bba
jle 0x10030d04
and dword [ebp - 0x138], 0
jmp 0x10030c0b
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x2c6f
jge 0x10030d04
and dword [ebp - 0x1b8], 0
jmp 0x10030c31
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x5cd6
jge 0x10030cff
and dword [ebp - 0x140], 0
jmp 0x10030c57
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x283d
jge 0x10030cfa
and dword [ebp - 0x180], 0
jmp 0x10030c7d
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x1ae7
jge 0x10030cf5
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x1b8]
sar eax, cl
mov ecx, dword [ebp - 0x140]
sar eax, cl
mov ecx, dword [ebp - 0x180]
shl eax, cl
cdq
mov dword [ebp - 0x4a4], eax
mov dword [ebp - 0x4a0], edx
push dword [ebp - 0x4a0]
push dword [ebp - 0x4a4]
lea ecx, [ebp - 0x708]
call fcn.10001a85
pop ecx
pop ecx
mov dword [ebp - 0x4e8], eax
mov ecx, dword [ebp - 0x4e8]
call fcn.10001d0f
push eax
call fcn.10045794
pop ecx
lea ecx, [ebp - 0x708]
call fcn.10001d05
jmp 0x10030c70
jmp 0x10030c4a
jmp 0x10030c24
jmp 0x10030bfe
mov dword [ebp - 4], 8
cmp dword [ebp - 0x2bc], 0x36e5
jge 0x10030d23
push dword [ebp - 0x460]
call fcn.10045794
pop ecx
jmp 0x10030d3f
or dword [ebp - 4], 0xffffffff
jmp 0x10030d49
mov dword [ebp - 0x518], 0x5b49d585
mov dword [ebp - 0x57c], 0x7689a5a4
mov dword [ebp - 0x578], 0x7689a5a4
mov dword [ebp - 0x574], 0x7689a5a4
mov dword [ebp - 0x570], 0x7689a5a4
push 3
lea ecx, [ebp - 0x524]
call fcn.10001eb9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x3f8], 0x81826fbd
mov dword [ebp - 0x48], 0
jmp 0x10030db3
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10030dc9
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1f0], 0x48f69f7f
jmp 0x10030dac
mov dword [ebp - 0x48], 0
jmp 0x10030dd9
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10030df2
push dword [ebp - 0x48]
lea ecx, [ebp - 0x524]
call fcn.10001f58
and dword [eax], 0
jmp 0x10030dd2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
mov dword [ebp - 0x5d0], eax
push 2
lea ecx, [ebp - 0x524]
call fcn.10001f58
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x418]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x374]
cmp ecx, dword [ebp + eax - 0x57c]
jg 0x10030e4a
mov dword [ebp - 0x2c4], 1
jmp 0x10030e51
and dword [ebp - 0x2c4], 0
push 2
lea ecx, [ebp - 0x524]
call fcn.10001f58
push 7
pop ecx
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x2c4]
jg 0x10030e77
mov dword [ebp - 0x2cc], 1
jmp 0x10030e7e
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x2cc], eax
jle 0x10030e98
mov dword [ebp - 0x3cc], 1
jmp 0x10030e9f
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x3cc]
sub edx, dword [ebp + ecx - 0x1f0]
add edx, dword [ebp + eax - 0x1f0]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f0], edx
jg 0x10030eec
push 2
lea ecx, [ebp - 0x524]
call fcn.10001f58
cmp dword [eax], 0
je 0x10030eec
mov dword [ebp - 0x2d4], 1
jmp 0x10030ef3
and dword [ebp - 0x2d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp - 0x2d4], eax
jle 0x10030f14
mov dword [ebp - 0x37c], 1
jmp 0x10030f1b
and dword [ebp - 0x37c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp - 0x37c], eax
jne 0x10030f3c
mov dword [ebp - 0x2dc], 1
jmp 0x10030f43
and dword [ebp - 0x2dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1f0]
cmp dword [ebp - 0x2dc], eax
jle 0x10030f5f
cmp dword [ebp - 0x518], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x57c]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x57c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x524]
call fcn.10001f3c
mov edx, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
call fcn.10021609
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x74], 0xe8e56f9b
mov dword [ebp - 0x468], 0xad9bacc5
mov dword [ebp - 0x148], 0
jmp 0x10030fcf
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x10030feb
mov eax, dword [ebp - 0x148]
mov dword [ebp + eax*4 - 0x384], 0xbdde0bcd
jmp 0x10030fc2
mov dword [ebp - 0x74], 0
jmp 0x10030ffb
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1003101d
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x1003101b
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
jmp 0x10030ff4
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x2e4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp + eax - 0x384], ecx
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
je 0x10031064
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x384], 0
je 0x10031064
mov dword [ebp - 0x2ec], 1
jmp 0x1003106b
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0xffffffff
jae 0x10031080
mov dword [ebp - 0x3d4], 1
jmp 0x10031087
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x2f4], 0x6ed4
mov dword [ebp - 0x4f0], str.aybfdfo_fmfhjdgm_nfjx_seba_jfmk_azraasdgm_ayujrn_emdepa_wyajxdvwf
cmp dword [ebp - 0x2f4], 0x6f1c
jle 0x10031132
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
and dword [ebp - 0x1a0], 0
jmp 0x100310d1
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x2eda
jge 0x10031132
and dword [ebp - 0x150], 0
jmp 0x100310f3
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x3ee9
jge 0x10031130
mov eax, dword [ebp - 0x1a0]
and eax, dword [ebp - 0x150]
cdq
mov dword [ebp - 0x4b0], eax
mov dword [ebp - 0x4ac], edx
push dword [ebp - 0x4ac]
push dword [ebp - 0x4b0]
mov ecx, 0x10078fb8
call fcn.10001d2f
jmp 0x100310e6
jmp 0x100310c4
mov dword [ebp - 4], 0xb
cmp dword [ebp - 0x2f4], 0x6c97
jge 0x10031155
mov edx, dword [ebp - 0x4f0]
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x10031171
or dword [ebp - 4], 0xffffffff
jmp 0x1003117b
mov dword [ebp - 0x200], 5
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x1c8], 3
mov dword [ebp - 0x188], 0x3b28
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x100311d5
mov dword [ebp - 0x38c], 1
jmp 0x100311dc
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x38c], eax
jge 0x100311f6
mov dword [ebp - 0x220], 1
jmp 0x100311fd
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
add eax, 0x7902a290
cmp eax, 0x2a30a4cc
jle 0x1003121b
mov dword [ebp - 0x410], 1
jmp 0x10031222
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x410], eax
jle 0x10031239
mov dword [ebp - 0x304], 1
jmp 0x10031240
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x304], eax
jle 0x1003125a
mov dword [ebp - 0x394], 1
jmp 0x10031261
and dword [ebp - 0x394], 0
mov dword [ebp - 0x1c8], 0xd208
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x28]
jg 0x10031288
mov dword [ebp - 0x30c], 1
jmp 0x1003128f
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x30c], eax
jl 0x100312a6
mov dword [ebp - 0x3dc], 1
jmp 0x100312ad
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x3dc]
sub eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x188]
je 0x100312d1
mov dword [ebp - 0x314], 1
jmp 0x100312d8
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xfffffff5
jmp 0x100312f1
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe3
jne 0x10031364
mov dword [ebp - 0x470], 0x5ec56044
mov eax, 0x34a938f7
test eax, eax
je 0x10031328
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x200], 0
je 0x10031328
mov dword [ebp - 0x39c], 1
jmp 0x1003132f
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0
je 0x10031344
mov dword [ebp - 0x31c], 1
jmp 0x1003134b
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x470], 0
je 0x10031362
jmp 0x100312ea
jmp 0x100312ea
mov dword [ebp - 0x550], 0x48d327cb
mov dword [ebp - 0x54c], 0x48d327cb
mov dword [ebp - 0x548], 0x48d327cb
mov dword [ebp - 0x544], 0x48d327cb
mov dword [ebp - 0x88], 4
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x1b0], 0xffffffff
mov dword [ebp - 0x7c], 0xfffffff6
mov dword [ebp - 0x88], 3
jmp 0x100313ca
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x10031617
mov dword [ebp - 0x44], 0x4c405b40
mov dword [ebp - 0x1e8], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x100313f8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x10031612
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x1d0], 0xfffffff9
mov dword [ebp - 0x270], 3
mov dword [ebp - 0x554], 6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x608], eax
mov dword [ebp - 0x1b0], 1
cmp dword [ebp - 0x1b0], 0
je 0x1003145b
cmp dword [ebp - 0x158], 0
je 0x1003145b
mov dword [ebp - 0x3e8], 1
jmp 0x10031462
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0xfffffff9
jg 0x10031477
mov dword [ebp - 0x3a4], 1
jmp 0x1003147e
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x550]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x550], ecx
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0x3a4]
jl 0x100314b8
mov dword [ebp - 0x32c], 1
jmp 0x100314bf
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x32c], eax
je 0x100314d9
mov dword [ebp - 0x3e4], 1
jmp 0x100314e0
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 1
jbe 0x100314fe
mov eax, 0x9bf5
test eax, eax
je 0x100314fe
mov dword [ebp - 0x334], 1
jmp 0x10031505
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
je 0x1003152f
cmp dword [ebp - 0x1e8], 0
je 0x1003152f
mov dword [ebp - 0x24c], 1
jmp 0x10031536
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x158], eax
push 0xfffffffffffffffc
pop eax
sub eax, dword [ebp - 0x158]
cmp eax, dword [ebp - 0x1d0]
jle 0x1003155f
mov dword [ebp - 0x250], 1
jmp 0x10031566
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0x44]
jge 0x10031589
mov dword [ebp - 0x258], 1
jmp 0x10031590
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 0xa5d87207
jb 0x100315a8
mov dword [ebp - 0x260], 1
jmp 0x100315af
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x260], eax
jg 0x100315c9
mov dword [ebp - 0x268], 1
jmp 0x100315d0
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x268]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0xfffffff8
jl 0x100315f7
mov dword [ebp - 0x278], 1
jmp 0x100315fe
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x278]
mov dword [ebp - 0x554], eax
jmp 0x100313f1
jmp 0x100313bd
mov eax, 0xa87ea82b
test eax, eax
je 0x10031699
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x1b0]
jl 0x1003163a
mov dword [ebp - 0x280], 1
jmp 0x10031641
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x280], eax
jl 0x1003165b
mov dword [ebp - 0x288], 1
jmp 0x10031662
and dword [ebp - 0x288], 0
cmp dword [ebp - 0x288], 1
jbe 0x10031677
mov dword [ebp - 0x290], 1
jmp 0x1003167e
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
je 0x10031699
mov dword [ebp - 0x298], 1
jmp 0x100316a0
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x298], eax
jne 0x100316ba
mov dword [ebp - 0x2a0], 1
jmp 0x100316c1
and dword [ebp - 0x2a0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x550]
cmp dword [ebp - 0x2a0], eax
jle 0x100316e2
mov dword [ebp - 0x2a8], 1
jmp 0x100316e9
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x2a8], eax
je 0x1003171f
mov dword [ebp - 0x7c], 0
jmp 0x10031707
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1003171d
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x550], 0x213633e7
jmp 0x10031700
jmp 0x1003173f
mov dword [ebp - 0x478], 0xf849
mov dword [ebp - 0x4f8], 0xf4aca62e
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x4f8], eax
cmp dword [0x1013d824], 0
jne 0x10031dca
push 3
lea ecx, [ebp - 0x444]
call fcn.10001eb9
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x484], 0x969a
mov dword [ebp - 0x1d8], 0xfffffffc
mov dword [ebp - 0x1f4], 0x86aeba4d
mov dword [ebp - 0x38], 0
jmp 0x1003178e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100317aa
push dword [ebp - 0x38]
lea ecx, [ebp - 0x444]
call fcn.10001f58
mov dword [eax], 0xa75c19c5
jmp 0x10031787
mov dword [ebp - 0x38], 0
jmp 0x100317ba
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x100317d0
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x600], 0xd83d7839
jmp 0x100317b3
push 0
lea ecx, [ebp - 0x444]
call fcn.10001f58
cmp dword [eax], 0
je 0x100318b3
push 0
lea ecx, [ebp - 0x444]
call fcn.10001f58
push 0
lea ecx, [ebp - 0x444]
call fcn.10001f58
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x614], eax
mov eax, dword [ebp - 0x1f4]
sub eax, 0x36c33dac
imul eax, dword [ebp - 0x1f4]
imul eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1d8]
jge 0x10031845
mov dword [ebp - 0x2b8], 1
jmp 0x1003184c
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x600]
mov dword [ebp - 0x2b0], eax
push 0
lea ecx, [ebp - 0x444]
call fcn.10001f58
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2b0]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2b8]
jl 0x10031892
mov dword [ebp - 0x2c0], 1
jmp 0x10031899
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 1
jle 0x100318b3
xor eax, eax
inc eax
je 0x100318b3
mov dword [ebp - 0x2c8], 1
jmp 0x100318ba
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x1f4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x444]
call fcn.10001f3c
mov dword [ebp - 0x528], 0x14958
lea eax, [ebp - 0x528]
push eax
call fcn.1002aee1
pop ecx
mov dword [ebp - 0x2d0], eax
mov byte [ebp - 0xfc], 1
mov byte [ebp - 0xfb], 0x6d
mov byte [ebp - 0xfa], 7
mov byte [ebp - 0xf9], 0xc
mov byte [ebp - 0xf8], 4
mov byte [ebp - 0xf7], 0xfc
mov byte [ebp - 0xf6], 0xac
mov byte [ebp - 0xf5], 0x9d
mov byte [ebp - 0xf4], 0xa
mov byte [ebp - 0xf3], 0xb
mov byte [ebp - 0xf2], 0x11
mov byte [ebp - 0xf1], 0xa
mov byte [ebp - 0xf0], 0x3d
mov byte [ebp - 0xef], 0
mov byte [ebp - 0xee], 2
mov byte [ebp - 0xed], 3
mov byte [ebp - 0xec], 0x11
mov byte [ebp - 0xeb], 5
mov byte [ebp - 0xea], 0x24
mov byte [ebp - 0xe9], 2
mov byte [ebp - 0xe8], 6
mov byte [ebp - 0xe7], 9
mov byte [ebp - 0xe6], 0x1a
mov byte [ebp - 0xe5], 8
mov byte [ebp - 0xe4], 1
mov byte [ebp - 0xe3], 4
mov byte [ebp - 0xe2], 0xa
mov byte [ebp - 0xe1], 0xc
mov byte [ebp - 0xe0], 0x32
mov byte [ebp - 0xdf], 6
mov byte [ebp - 0xde], 0x24
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xfc]
and eax, 8
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xfc]
or ecx, 8
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xfc]
mov byte [ebp + eax - 0x538], cl
mov dword [ebp - 0x24], 2
and dword [ebp - 0x160], 0
jmp 0x10031a1c
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1f
jae 0x10031ad2
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xfc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10031a66
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xfc]
inc eax
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xfc]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
jmp 0x10031a14
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x160]
movzx eax, byte [ebp + eax - 0xfe]
movsx eax, byte [ebp + eax - 0x538]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0xfb]
and ecx, eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x160]
movzx eax, byte [ebp + eax - 0xfe]
movsx eax, byte [ebp + eax - 0x538]
mov edx, dword [ebp - 0x24]
movzx edx, byte [ebp + edx - 0xfb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0xfc]
mov byte [ebp + eax - 0x538], dl
and dword [ebp - 0x160], 0
jmp 0x10031a14
xor eax, eax
inc eax
imul eax, eax, 0xd
mov byte [ebp + eax - 0x538], 0
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x6a8]
call fcn.10034c3c
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x500], eax
mov dword [ebp - 4], 0xe
mov edx, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x500]
call fcn.10021609
mov dword [0x1013d824], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a8]
call fcn.1000f46c
and dword [ebp - 0x190], 0
jmp 0x10031b46
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xe
jae 0x10031b5f
mov eax, dword [ebp - 0x190]
mov byte [ebp + eax - 0x538], 0
jmp 0x10031b39
mov byte [ebp - 0xdc], 4
mov byte [ebp - 0xdb], 0x9b
mov byte [ebp - 0xda], 3
mov byte [ebp - 0xd9], 0x15
mov byte [ebp - 0xd8], 0xd
mov byte [ebp - 0xd7], 0x36
mov byte [ebp - 0xd6], 0
mov byte [ebp - 0xd5], 0x14
mov byte [ebp - 0xd4], 5
mov byte [ebp - 0xd3], 0x26
mov byte [ebp - 0xd2], 1
mov byte [ebp - 0xd1], 0x2f
mov byte [ebp - 0xd0], 0xc
mov byte [ebp - 0xcf], 0x16
mov byte [ebp - 0xce], 7
mov byte [ebp - 0xcd], 1
mov byte [ebp - 0xcc], 6
mov byte [ebp - 0xcb], 0x22
mov byte [ebp - 0xca], 0xb
mov byte [ebp - 0xc9], 0x23
mov byte [ebp - 0xc8], 9
mov byte [ebp - 0xc7], 0x10
mov byte [ebp - 0xc6], 1
mov byte [ebp - 0xc5], 0x11
mov byte [ebp - 0xc4], 8
mov byte [ebp - 0xc3], 0x1d
mov byte [ebp - 0xc2], 2
mov byte [ebp - 0xc1], 0xa
mov byte [ebp - 0xc0], 0xa
mov byte [ebp - 0xbf], 0
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0xdc]
and eax, 0xef
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0xdc]
or ecx, 0xef
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xdc]
mov byte [ebp + eax - 0x56c], cl
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x168], 0
jmp 0x10031c87
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1e
jae 0x10031d3d
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0xdc]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10031cd1
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xdc]
inc eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xdc]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x10031c7f
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x168]
movzx eax, byte [ebp + eax - 0xde]
movsx eax, byte [ebp + eax - 0x56c]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0xdb]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x168]
movzx eax, byte [ebp + eax - 0xde]
movsx eax, byte [ebp + eax - 0x56c]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0xdb]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0xdc]
mov byte [ebp + eax - 0x56c], dl
and dword [ebp - 0x168], 0
jmp 0x10031c7f
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x56c], 0
lea eax, [ebp - 0x56c]
push eax
lea ecx, [ebp - 0x6c0]
call fcn.10034c3c
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x558], eax
mov dword [ebp - 4], 0xf
mov edx, dword [ebp - 0x2d0]
mov ecx, dword [ebp - 0x558]
call fcn.10021609
mov dword [0x1013ecf4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c0]
call fcn.1000f46c
and dword [ebp - 0x1a8], 0
jmp 0x10031db1
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xf
jae 0x10031dca
mov eax, dword [ebp - 0x1a8]
mov byte [ebp + eax - 0x56c], 0
jmp 0x10031da4
mov dword [ebp - 0x12c], 2
push 3
lea ecx, [ebp - 0x424]
call fcn.10001eb9
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x120], 0xae8ef335
mov dword [ebp - 0x1c], 0
jmp 0x10031e02
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10031e18
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x40c], 2
jmp 0x10031dfb
mov dword [ebp - 0x1c], 0
jmp 0x10031e28
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10031e44
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x424]
call fcn.10001f58
mov dword [eax], 4
jmp 0x10031e21
mov dword [ebp - 0x1c], 0
jmp 0x10031e54
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10031e6a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa4], 5
jmp 0x10031e4d
mov dword [ebp - 0x1c], 0
jmp 0x10031e7a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10031e90
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4b4], 0xfffffffc
jmp 0x10031e73
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa4]
dec eax
mov dword [ebp - 0x4a8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp + eax - 0xa4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40c]
mov dword [ebp - 0x5b4], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x12c]
add ecx, dword [ebp + eax - 0x40c]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], ecx
jle 0x10031ef7
mov dword [ebp - 0x2d8], 1
jmp 0x10031efe
and dword [ebp - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x40c]
cmp ecx, dword [ebp + eax - 0xa4]
je 0x10031f26
push 2
lea ecx, [ebp - 0x424]
call fcn.10001f58
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40c], 0
jne 0x10031f4f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40c], 0
jne 0x10031f4f
and dword [ebp - 0x508], 0
jmp 0x10031f59
mov dword [ebp - 0x508], 1
push 2
lea ecx, [ebp - 0x424]
call fcn.10001f58
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0xccbb
jne 0x10031f85
mov dword [ebp - 0x2e0], 1
jmp 0x10031f8c
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2d8]
cmp eax, dword [ebp - 0x2e0]
je 0x10031fa6
mov dword [ebp - 0x2e8], 1
jmp 0x10031fad
and dword [ebp - 0x2e8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x40c]
cmp dword [ebp - 0x2e8], eax
jg 0x10031fd4
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x10031fd4
mov dword [ebp - 0x2f0], 1
jmp 0x10031fdb
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
add ecx, 0x8db3
imul ecx, dword [ebp + eax - 0x40c]
test ecx, ecx
jne 0x1003200b
cmp dword [ebp - 0x12c], 0
jne 0x1003200b
and dword [ebp - 0x1e0], 0
jmp 0x10032015
mov dword [ebp - 0x1e0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x4b4], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 7
jb 0x1003205b
push 1
lea ecx, [ebp - 0x424]
call fcn.10001f58
cmp dword [eax], 0
je 0x1003205b
mov dword [ebp - 0x1f8], 1
jmp 0x10032062
and dword [ebp - 0x1f8], 0
push 2
lea ecx, [ebp - 0x424]
call fcn.10001f58
mov ecx, dword [ebp - 0x1f8]
mov dword [eax], ecx
cmp dword [ebp - 0x1f8], 0
je 0x10032221
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x2f8], 0xcfadbac
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa4], 0xf191
je 0x100320b7
mov dword [ebp - 0x308], 1
jmp 0x100320be
and dword [ebp - 0x308], 0
mov dword [ebp - 0x2f8], 0x909f
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x2f8]
jne 0x100320e2
mov dword [ebp - 0x1c4], 1
jmp 0x100320e9
and dword [ebp - 0x1c4], 0
push 2
lea ecx, [ebp - 0x424]
call fcn.10001f58
mov ecx, dword [ebp - 0x1c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c4]
sub eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
jle 0x1003211e
mov dword [ebp - 0x300], 1
jmp 0x10032125
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x300], eax
jl 0x10032148
cmp dword [ebp - 0x120], 0
je 0x10032148
mov dword [ebp - 0x310], 1
jmp 0x1003214f
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x310]
jl 0x10032169
mov dword [ebp - 0x318], 1
jmp 0x10032170
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x318], eax
jge 0x1003218a
mov dword [ebp - 0x320], 1
jmp 0x10032191
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x320]
test eax, eax
je 0x100321b7
mov eax, 0x7680dd33
test eax, eax
je 0x100321b7
mov dword [ebp - 0x328], 1
jmp 0x100321be
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x328]
sub ecx, dword [ebp + eax - 0x40c]
jne 0x100321df
mov dword [ebp - 0x330], 1
jmp 0x100321e6
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
add eax, 0x5ebe30cc
je 0x1003220c
mov eax, 0x1da8
test eax, eax
je 0x1003220c
xor eax, eax
je 0x1003220c
mov dword [ebp - 0x338], 1
jmp 0x10032213
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x12c], eax
jmp 0x10032242
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x10032242
push 0
push 0x25bc
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.10001f3c
mov eax, dword [0x1013d824]
cmp eax, dword [ebp - 0x17c]
je 0x1003226b
mov eax, dword [0x1013ecf4]
cmp eax, dword [ebp - 0x17c]
jne 0x10032283
mov ecx, dword [ebp + 0xc]
call fcn.10001d0f
push eax
push dword [ebp + 8]
call fcn.1002af15
pop ecx
pop ecx
jmp 0x100331d7
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x53c], 0xbc383c67
mov dword [ebp - 0x358], 0xd013d0bb
mov dword [ebp - 0x510], 0x3813bf58
or dword [ebp - 0x598], 0xffffffff
or dword [ebp - 0x594], 0xffffffff
or dword [ebp - 0x590], 0xffffffff
or dword [ebp - 0x58c], 0xffffffff
lea ecx, [ebp - 0x1bd]
call fcn.10001f67
push eax
lea eax, [ebp - 0x588]
push eax
lea eax, [ebp - 0x598]
push eax
lea ecx, [ebp - 0x660]
call fcn.10001f6a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x5c4]
call fcn.10001f16
mov dword [ebp - 4], 0x11
push 2
lea ecx, [ebp - 0x5b0]
call fcn.10001eb9
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x134], 0
jmp 0x1003232d
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x1003234f
push dword [ebp - 0x134]
lea ecx, [ebp - 0x5b0]
call fcn.10001f58
mov dword [eax], 0x15cc7c44
jmp 0x10032320
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10032363
push 0
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0xa0], 0xffffffff
jne 0x1003239c
mov dword [ebp - 0x340], 1
jmp 0x100323a3
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0xa0], 0x3faa
je 0x100323c7
mov dword [ebp - 0x348], 1
jmp 0x100323ce
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 0x9507
jle 0x100323e6
mov dword [ebp - 0x350], 1
jmp 0x100323ed
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 0
jne 0x1003240e
mov dword [ebp - 0x4c0], 1
jmp 0x10032415
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x5b8], eax
mov eax, 0xffff
imul eax, eax, 0x2d7a
test eax, eax
je 0x10032439
mov eax, 0xe974
test eax, eax
jne 0x1003244b
mov eax, 0x94ff5452
test eax, eax
jne 0x1003244b
and dword [ebp - 0x360], 0
jmp 0x10032455
mov dword [ebp - 0x360], 1
mov eax, dword [ebp - 0x360]
add eax, 0xb064
cmp eax, dword [ebp - 0x510]
je 0x10032474
mov dword [ebp - 0x1cc], 1
jmp 0x1003247b
and dword [ebp - 0x1cc], 0
push 1
lea ecx, [ebp - 0x5c4]
call fcn.10001f58
mov ecx, dword [ebp - 0x1cc]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x5b0]
call fcn.10001f58
mov ecx, dword [ebp - 0x1cc]
mov dword [eax], ecx
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x5b0]
call fcn.10001f3c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c4]
call fcn.10001f3c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x13c], 0x3342eb9
mov dword [ebp - 0x13c], 0
jmp 0x100324ef
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0xf
jne 0x10032611
mov dword [ebp - 0x368], 0x6e0a
mov dword [ebp - 0x4cc], str.wrpw_wrqlqfs_dysu_mzvgeriip_nkbcaj_fvm_ioim_hvxnivg_jdhkemrl
cmp dword [ebp - 0x368], 0x70cf
jle 0x10032594
and dword [ebp - 0x144], 0
jmp 0x10032532
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x7f88
jge 0x10032594
and dword [ebp - 0x104], 0
jmp 0x10032554
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x2314
jge 0x10032592
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x4bc], eax
mov dword [ebp - 0x4b8], edx
push dword [ebp - 0x4b8]
push dword [ebp - 0x4bc]
mov ecx, 0x10078fb8
call fcn.10001d2f
jmp 0x10032547
jmp 0x10032525
mov byte [ebp - 0x6a], 0
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x368], 0x6d8b
jge 0x100325bb
mov edx, dword [ebp - 0x4cc]
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x100325d7
or dword [ebp - 4], 0xffffffff
jmp 0x100325e1
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x100325f6
push 0
push 0x1058
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov byte [ebp - 0x80], 0
movzx eax, byte [ebp - 0x80]
test eax, eax
je 0x1003260c
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
jmp 0x100324e2
mov dword [ebp - 0x3a0], 0x2e8d
mov dword [ebp - 0x4ec], str.ixj_hrmmo_olmzbeitz_qkbsclo_coaf_fgonp_ztvhqjl_wosttdj_mtnkagjx_vuvvdoztb
cmp dword [ebp - 0x3a0], 0x2fc6
jle 0x10032712
and dword [ebp - 0x11c], 0
jmp 0x1003264b
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x6792
jge 0x10032712
and dword [ebp - 0x16c], 0
jmp 0x10032671
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x49f0
jge 0x1003270d
and dword [ebp - 0x10c], 0
jmp 0x10032697
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0x7b19
jge 0x10032708
and dword [ebp - 0x114], 0
jmp 0x100326b9
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x32c1
jge 0x10032706
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x114]
mov edx, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x16c]
shl edx, cl
xor eax, edx
cdq
mov dword [ebp - 0x4c8], eax
mov dword [ebp - 0x4c4], edx
push dword [ebp - 0x4c4]
push dword [ebp - 0x4c8]
mov ecx, 0x10078fb8
call fcn.10001d2f
jmp 0x100326ac
jmp 0x1003268a
jmp 0x10032664
jmp 0x1003263e
cmp dword [ebp - 0x174], 0
je 0x10032e41
mov eax, dword [ebp - 0x174]
movzx eax, word [eax]
cmp eax, 0x5a4d
jne 0x10032e41
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x174]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0xb4], ecx
mov eax, dword [ebp - 0xb4]
cmp dword [eax], 0x4550
jne 0x10032e41
mov eax, dword [ebp - 0xb4]
cmp dword [eax + 0x74], 0
jbe 0x10032e41
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
cmp dword [ecx + eax + 0x78], 0
je 0x10032e41
mov eax, dword [ebp + 8]
mov dword [ebp - 0x94], eax
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x94]
add edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x5c], edx
mov eax, 0xffff
mov word [ebp - 0x40], ax
or dword [ebp - 0x8c], 0xffffffff
cmp dword [ebp + 0x10], 0
jbe 0x100327d1
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp + 0x10]
cmp ecx, dword [eax + 0x14]
ja 0x100327cc
mov eax, dword [ebp + 0x10]
dec eax
mov word [ebp - 0x40], ax
jmp 0x10032994
mov eax, dword [0x1013ed3c]
and eax, 1
jne 0x10032808
mov eax, dword [0x1013ed3c]
or eax, 1
mov dword [0x1013ed3c], eax
mov dword [ebp - 4], 0x15
mov ecx, 0x1013ecbc
call fcn.1001c673
push 0x1005e424
call fcn.1004576a
pop ecx
or dword [ebp - 4], 0xffffffff
movzx eax, byte [0x1013d828]
test eax, eax
je 0x10032874
mov ecx, 0x1013ecbc
call fcn.10034d41
movzx eax, al
test eax, eax
jne 0x10032874
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x370]
push eax
mov ecx, 0x1013ecbc
call fcn.1001c64b
lea eax, [ebp - 0x5cc]
push eax
mov ecx, 0x1013ecbc
call fcn.1001c63d
push eax
lea ecx, [ebp - 0x370]
call fcn.1001c660
movzx eax, al
test eax, eax
je 0x10032874
lea ecx, [ebp - 0x370]
call fcn.10034d4a
mov eax, dword [eax + 4]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffff
jne 0x10032994
mov ecx, 0x1013ecbc
call fcn.1001c796
mov ecx, dword [ebp - 0x5c]
add eax, dword [ecx + 0x18]
push eax
mov ecx, 0x1013ecbc
call fcn.10034d9d
and dword [ebp - 0x98], 0
jmp 0x100328b2
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x98]
cmp ecx, dword [eax + 0x18]
jae 0x10032994
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax + 0x20]
mov eax, dword [ebp - 0x98]
lea eax, [ecx + eax*4]
mov dword [ebp - 0x378], eax
cmp dword [ebp - 0x378], 0
je 0x1003298f
mov eax, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x690]
call fcn.10034c3c
mov dword [ebp - 4], 0x16
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x690]
call fcn.10021609
mov dword [ebp - 0x380], eax
movzx eax, byte [0x1013d828]
test eax, eax
je 0x1003293d
mov ecx, 0x1013ecbc
call fcn.10034d41
movzx eax, al
test eax, eax
jne 0x1003295d
lea eax, [ebp - 0x380]
push eax
mov ecx, 0x1013ecbc
call fcn.10034d5f
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov byte [0x1013d828], 1
cmp dword [ebp - 0x8c], 0xffffffff
jne 0x10032980
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x17c]
jne 0x10032980
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x8c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x690]
call fcn.1000f46c
jmp 0x100328a5
cmp dword [ebp + 0x10], 0
jne 0x100329bd
cmp dword [ebp - 0x8c], 0xffffffff
je 0x100329bd
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax + 0x24]
mov eax, dword [ebp - 0x8c]
mov ax, word [ecx + eax*2]
mov word [ebp - 0x40], ax
movzx eax, word [ebp - 0x40]
cmp eax, 0xffff
je 0x10032e41
movzx eax, word [ebp - 0x40]
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ebp - 0x94]
add edx, dword [ecx + 0x1c]
lea eax, [edx + eax*4]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [ebp - 0x94]
add ecx, dword [eax]
mov dword [ebp - 0x60], ecx
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x5c]
jbe 0x10032e39
push 8
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x5c]
add edx, dword [ecx + eax + 0x7c]
cmp dword [ebp - 0x60], edx
jae 0x10032e39
mov eax, dword [0x1013ed3c]
and eax, 2
jne 0x10032a50
mov eax, dword [0x1013ed3c]
or eax, 2
mov dword [0x1013ed3c], eax
mov dword [ebp - 4], 0x17
push 0xd75e
call fcn.100133d3
pop ecx
mov byte [0x1013ec88], al
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x388], 0x3c7f
mov dword [ebp - 0x4d8], str.cuvihbdqk_qpvknkell_bto_emggdm_ujdmltd_azbnvycu_kfklanv_spdia_bflgox_xdycdsn_dmd_rklx_lwxqkgzv
cmp dword [ebp - 0x388], 0x3e14
jle 0x10032b55
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
and dword [ebp - 0x19c], 0
jmp 0x10032a92
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x3a75
jge 0x10032b55
and dword [ebp - 0x184], 0
jmp 0x10032ab8
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x1c97
jge 0x10032b50
and dword [ebp - 0x18c], 0
jmp 0x10032ade
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x598b
jge 0x10032b4b
and dword [ebp - 0x194], 0
jmp 0x10032b00
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x6b12
jge 0x10032b49
mov eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x18c]
xor eax, dword [ebp - 0x194]
or eax, dword [ebp - 0x19c]
cdq
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0x4d0], edx
push dword [ebp - 0x4d0]
push dword [ebp - 0x4d4]
mov ecx, 0x10078fb8
call fcn.10001d2f
jmp 0x10032af3
jmp 0x10032ad1
jmp 0x10032aab
jmp 0x10032a85
mov byte [ebp - 0x50], 0
mov byte [ebp - 0x4f], 0x38
mov byte [ebp - 0x4e], 2
mov byte [ebp - 0x4d], 8
mov byte [ebp - 0x4c], 1
mov byte [ebp - 0x4b], 0
mov dword [ebp - 4], 0x18
cmp dword [ebp - 0x388], 0x3abc
jge 0x10032b90
mov edx, dword [ebp - 0x4d8]
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x10032bac
or dword [ebp - 4], 0xffffffff
jmp 0x10032bb6
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x50]
and eax, 0x5c
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x50]
or ecx, 0x5c
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x9c], cl
mov dword [ebp - 0x64], 2
and dword [ebp - 0x390], 0
jmp 0x10032bfe
mov eax, dword [ebp - 0x64]
inc eax
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 6
jae 0x10032c57
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x390]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x9c]
mov ecx, dword [ebp - 0x64]
movzx ecx, byte [ebp + ecx - 0x4f]
and ecx, eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x390]
movzx eax, byte [ebp + eax - 0x52]
movsx eax, byte [ebp + eax - 0x9c]
mov edx, dword [ebp - 0x64]
movzx edx, byte [ebp + edx - 0x4f]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x64]
movzx eax, byte [ebp + eax - 0x50]
mov byte [ebp + eax - 0x9c], dl
jmp 0x10032bf6
xor eax, eax
inc eax
imul eax, eax, 3
mov byte [ebp + eax - 0x9c], 0
mov eax, dword [0x1013ed3c]
and eax, 4
jne 0x10032ca3
mov eax, dword [0x1013ed3c]
or eax, 4
mov dword [0x1013ed3c], eax
mov dword [ebp - 4], 0x1a
lea eax, [ebp - 0x9c]
push eax
mov ecx, 0x1013ecdc
call fcn.10034c3c
push 0x1005e415
call fcn.1004576a
pop ecx
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x1a4], 0
jmp 0x10032cb9
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jae 0x10032cd2
mov eax, dword [ebp - 0x1a4]
mov byte [ebp + eax - 0x9c], 0
jmp 0x10032cac
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], eax
movsx eax, byte [0x1013ec88]
mov ecx, dword [ebp - 0x68]
movsx ecx, byte [ecx]
cmp ecx, eax
je 0x10032cf2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
jmp 0x10032cd8
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
push dword [ebp - 0x68]
push dword [ebp - 0x60]
lea ecx, [ebp - 0x640]
call fcn.10035320
mov dword [ebp - 4], 0x1b
push 0x1013ecdc
lea ecx, [ebp - 0x640]
call fcn.10034c6b
lea eax, [ebp - 0x5d4]
push eax
lea ecx, [ebp - 0x640]
call fcn.1000f5e2
push dword [eax]
lea eax, [ebp - 0x5dc]
push eax
lea ecx, [ebp - 0x640]
call fcn.1000f8a3
push dword [eax]
lea ecx, [ebp - 0x678]
call fcn.10035349
mov byte [ebp - 4], 0x1c
lea eax, [ebp - 0x678]
push eax
call fcn.100222a1
pop ecx
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
je 0x10032de8
push dword [ebp - 0x68]
lea ecx, [ebp - 0x658]
call fcn.10034c3c
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0x4e4]
lea ecx, [ebp - 0x658]
call fcn.10021785
movzx eax, al
test eax, eax
je 0x10032dbb
push 0
push dword [ebp - 0x4e4]
push 0
push dword [ebp - 0x1d4]
call fcn.1002fc8c
add esp, 0x10
mov dword [ebp - 0x60], eax
jmp 0x10032dd7
push 1
push 0
lea eax, [ebp - 0x658]
push eax
push dword [ebp - 0x1d4]
call fcn.1002fc8c
add esp, 0x10
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x658]
call fcn.1000f46c
jmp 0x10032e1b
cmp dword [ebp + 0x10], 0
jne 0x10032dfe
mov ecx, dword [ebp + 0xc]
call fcn.10001d0f
mov dword [ebp - 0x398], eax
jmp 0x10032e08
movzx eax, word [ebp + 0x10]
mov dword [ebp - 0x398], eax
push dword [ebp - 0x398]
push dword [ebp + 8]
call fcn.1002af15
pop ecx
pop ecx
mov dword [ebp - 0x60], eax
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x678]
call fcn.10001ea4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x640]
call fcn.1000f46c
mov eax, dword [ebp - 0x60]
jmp 0x100331d7
mov dword [ebp - 4], 0x1e
cmp dword [ebp - 0x3a0], 0x2b7b
jge 0x10032e64
mov edx, dword [ebp - 0x4ec]
mov ecx, 0x10078fb8
call fcn.10003c4d
jmp 0x10032e80
or dword [ebp - 4], 0xffffffff
jmp 0x10032e8a
push 3
lea ecx, [ebp - 0x21c]
call fcn.10001eb9
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x210], 0xfffffff8
mov dword [ebp - 0x20c], 0xfffffff8
mov dword [ebp - 0x208], 0xfffffff8
mov dword [ebp - 0x204], 0xfffffff8
mov dword [ebp - 0xb8], 0x4902314a
mov dword [ebp - 0x5e4], 0
mov dword [ebp - 0x1ac], 0
jmp 0x10032ef3
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x10032f15
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
mov dword [eax], 0x7f82
jmp 0x10032ee6
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x210], 0
jmp 0x10032f40
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x210]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x210], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x210], 2
jg 0x100331a5
mov dword [ebp - 0x54], 0x39d20578
mov dword [ebp - 0x454], 0
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x210]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
cmp dword [eax], 0
je 0x10032fb8
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x210]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
mov esi, eax
push 2
lea ecx, [ebp - 0x21c]
call fcn.10001f58
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10032fb8
mov dword [ebp - 0x224], 1
jmp 0x10032fbf
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0x224]
push 4
pop ecx
shl ecx, 1
mov esi, dword [ebp + ecx - 0x210]
add esi, eax
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x210]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
cmp dword [eax], esi
jge 0x10033000
mov dword [ebp - 0x22c], 1
jmp 0x10033007
and dword [ebp - 0x22c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x22c]
dec ecx
dec ecx
cmp ecx, dword [ebp + eax - 0x210]
je 0x1003302d
push 6
pop eax
test eax, eax
jne 0x1003302d
and dword [ebp - 0x44c], 0
jmp 0x10033037
mov dword [ebp - 0x44c], 1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x210], 0xfffffffe
jl 0x10033052
mov dword [ebp - 0x234], 1
jmp 0x10033059
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x234]
dec ecx
dec ecx
cmp ecx, dword [ebp + eax - 0x210]
jg 0x1003307c
mov dword [ebp - 0x23c], 1
jmp 0x10033083
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0
jmp 0x1003309c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x100331a0
mov dword [ebp - 0xb8], 0
jmp 0x100330bf
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jg 0x10033193
mov dword [ebp - 0xac], 0x1f06e85f
mov dword [ebp - 0xac], 2
jmp 0x100330ef
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1003318e
mov byte [ebp - 0x6c], 0
movzx eax, byte [ebp - 0x6c]
test eax, eax
je 0x10033127
push 0x23d7
push 0x95f
push 0x206d
push 0x12e8
push 0x1297
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
push dword [ebp - 0x54]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
cmp dword [ebp - 0xac], 0
push dword [ebp - 0x54]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
push 0xfffffffffffffffa
pop esi
sub esi, dword [eax]
push 4
pop eax
shl eax, 1
push dword [ebp + eax - 0x210]
lea ecx, [ebp - 0x21c]
call fcn.10001f58
cmp esi, dword [eax]
jl 0x10033176
mov dword [ebp - 0x244], 1
jmp 0x1003317d
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x454], eax
jmp 0x100330e2
jmp 0x100330b2
cmp dword [ebp - 0x54], 0
je 0x1003319b
jmp 0x100331a0
jmp 0x10033095
jmp 0x10032f27
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x100331c6
push 0x46a
push 0x24a6
push 0x1295
call dword [sym.imp.USER32.dll_EnableScrollBar]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x21c]
call fcn.10001f3c
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret