Function at 0x10030e6a
Capabilities:
Check os version
Connect pipe
Create process on windows
Create thread
Delete registry value
Get file attributes
Terminate process

Disassembly:
mov eax, 0x10069b66
call fcn.100689e8
sub esp, 0x98c
push ebx
push esi
mov dword [ebp - 0x6c], ecx
mov esi, 0x606de713
xor ecx, ecx
mov byte [ebp - 0x6d], dl
mov dword [ebp - 0xb8], ecx
xor ebx, ebx
push edi
mov dword [ebp - 0x44], esi
inc ebx
mov dword [ebp - 0x20], ecx
mov edi, 0x35568345
jmp 0x10030ead
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x180], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030ea0
mov dword [ebp - 0x44], ecx
jmp 0x10030f58
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], ecx
jg 0x10030f55
or ebx, 0xffffffff
mov dword [ebp - 0x1c], 0xe8588d0d
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x180], ecx
jne 0x10030f52
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ecx
jl 0x10030f46
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x10030efd
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
xor ecx, ecx
mov dword [ebp - 0x20], ecx
jmp 0x10030f3c
mov dword [ebp - 0x38], 0x747bb7ab
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x180], ecx
je 0x10030f1c
cmp dword [ebp - 0x44], ecx
jne 0x10030f41
jmp 0x10030f2f
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x10030f2f
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], 0x7182b47
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10030f02
dec dword [ebp - 0x1c]
jns 0x10030ee7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x10030ecc
xor ebx, ebx
inc ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ecx
jle 0x10030eba
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x10030f73
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
or edx, 0xffffffff
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jge 0x10030f90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x244], edx
inc dword [ebp - 0x14]
jmp 0x10030f7c
mov dword [ebp - 0x14], ecx
jmp 0x10030fa6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x94], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10030f95
mov dword [ebp - 0x94], ecx
jmp 0x10030fc6
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x244], edx
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], ebx
jl 0x10030fb3
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ecx
jl 0x10030ff8
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x10030ff3
push ecx
push 0x46e
push 0xdcc
push ecx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
xor ecx, ecx
dec dword [ebp - 0x1c]
jns 0x10030fd6
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x20], ecx
jmp 0x1003100d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x158], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10031000
mov dword [ebp - 0x30], ecx
mov ebx, 0xf4c5
mov dword [ebp - 0x4c], 5
cmp dword [ebp - 0x30], ecx
jg 0x1003183f
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], ecx
jg 0x10031833
mov dword [ebp - 0x48], 0xe8588d0d
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x158], ecx
jne 0x10031830
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], ecx
jl 0x10031824
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2c], 0x1c6076fd
mov dword [ebp - 0x38], 0x140b
cmp dword [ebp - 0x38], 0x7b0
jge 0x100311ca
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], ecx
push eax
push 0x1000b5ac
call fcn.1004e0eb
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
push 8
pop ebx
mul ebx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.100496c5
xor edi, edi
mov dword [ebp - 0x38], eax
add esp, 0xc
cmp dword [ebp - 0x9c], edi
jle 0x100310d8
mov esi, eax
push esi
push 0x1000b6b0
call fcn.1004e0eb
inc edi
add esi, ebx
pop ecx
pop ecx
cmp edi, dword [ebp - 0x9c]
jl 0x100310c0
xorps xmm0, xmm0
lea edi, [ebp - 0x898]
xor eax, eax
movlpd qword [ebp - 0x8a0], xmm0
mov ecx, ebx
lea esi, [ebp - 0x8a0]
rep stosd dword es:[edi], eax
push 5
pop eax
mov edi, eax
push esi
push 0x1000b6b0
call fcn.1004e0eb
pop ecx
add esi, ebx
pop ecx
dec edi
jne 0x100310fa
xorps xmm0, xmm0
lea edi, [ebp - 0x758]
mov ecx, ebx
movlpd qword [ebp - 0x58], xmm0
mov ebx, dword [ebp - 0x54]
xor eax, eax
movlpd qword [ebp - 0x760], xmm0
xor edx, edx
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x58]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x9c], eax
jle 0x1003118b
mov ecx, dword [ebp - 0x38]
mov esi, edx
add edi, dword [ecx + eax*8]
adc ebx, dword [ecx + eax*8 + 4]
push dword [ebp + esi - 0x87c]
push dword [ebp + esi - 0x880]
push ebx
push edi
call fcn.10064e00
add dword [ebp + esi - 0x740], eax
mov edi, ecx
adc dword [ebp + esi - 0x73c], edx
sub esi, 8
cmp esi, 0xffffffe0
jge 0x10031147
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x50], ebx
push 0
mov dword [ebp - 0x40], eax
pop edx
cmp eax, dword [ebp - 0x9c]
jl 0x1003113b
jmp 0x1003118e
mov dword [ebp - 0x50], ebx
push 5
mov esi, edx
pop ebx
push dword [ebp + esi*8 - 0x75c]
push dword [ebp + esi*8 - 0x760]
push 0x1000b78c
call fcn.1004e306
add esp, 0xc
inc esi
cmp esi, ebx
jl 0x10031193
mov ebx, dword [ebp - 0x50]
push ebx
push edi
push 0x1000b794
call fcn.1004e306
add esp, 0xc
mov ebx, 0xf4c5
push 2
pop esi
push esi
lea ecx, [ebp - 0x298]
call fcn.1000f1b6
xor eax, eax
lea ecx, [ebp - 0x4bc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x20], 0x5c2f
mov dword [ebp - 0x28], eax
inc eax
mov dword [ebp - 0x1c], 0x25bb5a27
push eax
call fcn.1000f1b6
mov dword [ebp - 0x38], 0x6fe0855b
xor edx, edx
mov dword [ebp - 0x18], 0xede5a1ae
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x44], 0xfffffffc
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], esi
jge 0x10031233
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x364], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10031221
mov dword [ebp - 0x18], edx
or edi, 0xffffffff
cmp dword [ebp - 0x18], esi
jge 0x1003124f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x298]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
jmp 0x10031239
mov dword [ebp - 0x18], edx
jmp 0x10031267
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4bc]
mov dword [eax + ecx*4], 0x5e34
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10031254
cmp dword [ebp - 0x14], edx
je 0x10031324
dec dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setle dl
mov dword [ebp - 0x360], edx
test edx, edx
jne 0x100312e6
mov eax, dword [ebp - 0x28]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x298]
setns cl
cmp ecx, 0xfce88636
mov eax, dword [eax + 4]
sbb ecx, ecx
add eax, 0xc19d36f6
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x364]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
imul ecx, eax
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x4bc]
setle dl
sub edx, 0x3978
neg edx
sbb edx, edx
inc edx
mov dword [eax], edx
je 0x100312f3
cmp dword [ebp - 0x20], 0
je 0x100312f3
xor eax, eax
lea ecx, [eax + 1]
jmp 0x100312f5
xor ecx, ecx
mov eax, dword [ebp - 0x298]
xor edx, edx
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x20]
imul ecx, ecx, 0x132c
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
xor edx, edx
sub eax, 0x4f952011
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push 8
pop esi
mov ecx, esi
sub ecx, eax
mov eax, dword [ebp - 0x28]
imul ecx, ecx, 0xb3df4c3
cmp ecx, eax
setg dl
xor ecx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x44], edx
cmp dword [eax], ecx
je 0x100313ca
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x44], 0xffffffed
jmp 0x100313c2
mov dword [ebp - 0x40], 0xfffd
mov dword [ebp - 0x50], 0x633c574c
mov dword [ebp - 0x38], 0x35584d57
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jne 0x10031397
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], ecx
jne 0x10031397
mov eax, ecx
jmp 0x1003139a
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x20]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
push 0
setne dl
xor ecx, ecx
add edx, 0xffff
cmp eax, edx
setle cl
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x44]
pop ecx
cmp dword [ebp - 0x44], 0xd
jl 0x10031367
jmp 0x1003142b
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ecx
jg 0x1003140c
xor eax, eax
inc eax
mov dword [ebp - 0x14], ecx
jmp 0x100313ff
mov dword [ebp - 0x28], ecx
jmp 0x100313f7
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x100313f4
push ecx
call dword [sym.imp.USER32.dll_ShowCursor]
xor eax, eax
xor ecx, ecx
inc eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x100313df
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x100313da
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x100313d5
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x1003142b
push ecx
push 0xb05
push 0x1eaa
push 0x1108
call dword [sym.imp.USER32.dll_SetScrollPos]
lea ecx, [ebp - 0x4bc]
call fcn.1000f212
lea ecx, [ebp - 0x298]
mov dword [ebp - 4], edi
call fcn.1000f212
xor eax, eax
mov dword [ebp - 0x20], edi
inc eax
mov dword [ebp - 0x28], 0xdf37d45d
mov dword [ebp - 0x14], 0xb8d96378
lea ecx, [ebp - 0x4ec]
push eax
call fcn.1000f1b6
xor ecx, ecx
inc ecx
xor edx, edx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x14], edx
jmp 0x1003147e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x320], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10031471
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ecx
jge 0x100314a7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4ec]
mov dword [eax + ecx*4], 0xfffffffd
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1003148c
cmp dword [ebp - 0x28], edx
je 0x100314e7
mov eax, dword [ebp - 0x28]
mov ecx, ebx
mov eax, dword [ebp - 0x28]
sub ecx, eax
mov eax, 0xfffb
mov dword [ebp - 0x318], ecx
cmp eax, ecx
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x28]
imul eax, edx, 0x2db8
test eax, eax
je 0x100314e7
xor ecx, ecx
inc ecx
xor ebx, ebx
mov eax, ecx
jmp 0x100314ee
xor ebx, ebx
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, esi
cmp eax, dword [ebp - 0x28]
jne 0x10031582
push ecx
lea ecx, [ebp - 0x2d8]
call fcn.1000f1b6
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10031526
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2d8]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10031513
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2d8]
cmp dword [eax], ebx
je 0x1003153d
cmp dword [ebp - 0x14], ebx
jne 0x1003153f
mov edx, ebx
mov eax, dword [ebp - 0x2d8]
push 4
mov ecx, dword [eax]
xor eax, eax
cmp edx, 4
setge al
xor edx, edx
imul eax, dword [ebp - 0x318]
cmp eax, ecx
pop eax
setge dl
imul edx, ecx
imul edx, ecx
sub edx, ecx
lea ecx, [ebp - 0x2d8]
neg edx
sbb edx, edx
inc edx
sub eax, edx
mov dword [ebp - 0x14], eax
call fcn.1000f212
jmp 0x1003169b
mov dword [ebp - 0x1c], 0x74f
mov dword [ebp - 0x2c], 0x5015
mov dword [ebp - 0x40], 0xf09d89c1
mov dword [ebp - 0x38], 0x81b93497
mov dword [ebp - 0x14], 0x1c
jmp 0x10031692
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x4d4]
push 4
call fcn.1000f1b6
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x20], ebx
jmp 0x100315d5
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4d4]
mov dword [eax + ecx*4], 0xce43c7d7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100315c2
cmp dword [ebp - 0x28], ebx
jne 0x10031628
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
mov eax, dword [ebp - 0x4d4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x318]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x318], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x1c], 0x42d9
xor edx, edx
mov eax, dword [ebp - 0x4ec]
cmp ecx, dword [eax]
setge dl
xor ecx, ecx
mov dword [ebp - 0x50], edx
xor edx, edx
mov eax, dword [ebp - 0x50]
inc edx
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setg cl
sub ecx, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
jge 0x10031663
mov eax, edx
cmp dword [ebp - 0x2c], ebx
jne 0x10031665
mov eax, ebx
neg eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10031684
push 0x17df
push 0x21f5
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0x4d4]
call fcn.1000f212
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jg 0x100315aa
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x100316af
push 0xe2d
call dword [sym.imp.USER32.dll_DrawMenuBar]
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 4], edi
call fcn.1000f212
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x100316ce
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov dword [ebp - 0x38], 0x1403
cmp dword [ebp - 0x38], 0xe3d
jge 0x100317d0
lea eax, [ebp - 0x17c]
push eax
push 0x1000b5ac
call fcn.1004e0eb
pop ecx
pop ecx
push 3
mov dword [ebp - 0x190], ebx
lea esi, [ebp - 0x190]
mov dword [ebp - 0x18c], ebx
mov dword [ebp - 0x188], ebx
pop edi
push esi
push 0x1000b5ac
call fcn.1004e0eb
mov eax, dword [esi]
pop ecx
pop ecx
and eax, 0x80000001
jns 0x1003172b
dec eax
or eax, 0xfffffffe
inc eax
mov dword [esi], eax
add esi, 4
dec edi
jne 0x10031710
mov eax, dword [ebp - 0x190]
xor edx, edx
mov cl, dl
mov esi, ebx
mov byte [ebp - 0x21], cl
cmp eax, dword [ebp - 0x18c]
jne 0x10031761
lea esi, [edi + 1]
sub esi, eax
cmp dword [ebp - 0x188], esi
jne 0x10031772
xor eax, eax
push 2
pop ebx
lea ecx, [eax + 1]
jmp 0x1003176f
xor ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [ebp - 0x188], eax
sete bl
mov byte [ebp - 0x21], cl
push 3
pop edi
mov dword [ebp - 0x168], edx
cmp dword [ebp - 0x17c], edi
jle 0x100317c0
test cl, cl
jne 0x100317c0
lea eax, [ebp - 0x168]
push eax
push 0x1000b5ac
call fcn.1004e0eb
mov eax, dword [ebp - 0x168]
pop ecx
pop ecx
and eax, 0x80000001
jns 0x100317ac
dec eax
or eax, 0xfffffffe
inc eax
cmp eax, esi
je 0x100317be
mov cl, byte [ebp - 0x21]
inc edi
cmp edi, dword [ebp - 0x17c]
jl 0x10031783
jmp 0x100317c0
mov ebx, edi
lea eax, [ebx + 1]
push eax
push 0x1000b5ec
call fcn.1004e306
pop ecx
pop ecx
xor ecx, ecx
mov dword [ebp - 0x20], ecx
jmp 0x10031811
mov dword [ebp - 0x38], 0x747bb7ab
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x158], ecx
je 0x100317f1
cmp dword [ebp - 0x30], ecx
jne 0x10031816
jmp 0x10031804
mov byte [ebp - 0x21], cl
cmp byte [ebp - 0x21], 0
je 0x10031804
push ecx
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
xor ecx, ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], 0x7182b47
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x100317d7
dec dword [ebp - 0x48]
mov ebx, 0xf4c5
jns 0x1003105f
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jle 0x1003103c
xor eax, eax
inc eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jle 0x1003102d
push 0xffffffffffffffe6
mov dword [ebp - 0x20], 0xfffffffb
xor ebx, ebx
pop esi
mov dword [ebp - 0x54], 0xfffffff9
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], esi
mov byte [ebp - 0x21], bl
jg 0x10031882
cmp byte [ebp - 0x21], bl
je 0x1003187d
push 0x1543
push ebx
push 0x780
push 0x12d7
push 0x667
call dword [sym.imp.GDI32.dll_TextOutA]
inc dword [ebp - 0x20]
jmp 0x10031855
cmp byte [ebp - 0x21], 0
je 0x1003188f
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 2
pop esi
push esi
lea ecx, [ebp - 0x65c]
call fcn.1000f1b6
push 4
lea ecx, [ebp - 0x644]
mov dword [ebp - 4], esi
call fcn.1000f1b6
mov byte [ebp - 4], 3
mov dword [ebp - 0x54], 0x285c
mov dword [ebp - 0x38], 0x1d01
cmp dword [ebp - 0x38], 0x51c
jge 0x10031a36
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0xbc]
push eax
push 0x1000b5dc
call fcn.1004e0eb
add esp, 0xc
lea ecx, [ebp - 0x438]
push dword [ebp - 0xbc]
call fcn.1000f23d
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x504]
push dword [ebp - 0x80]
call fcn.1000f23d
mov esi, dword [ebp - 0xbc]
xorps xmm0, xmm0
movlpd qword [ebp - 0x58], xmm0
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x58]
test esi, esi
jle 0x1003195a
mov ecx, dword [ebp - 0x438]
mov dword [ebp - 0x50], ecx
push ecx
push 0x1000b178
call fcn.1004e0eb
mov esi, dword [ebp - 0xbc]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx]
cdq
add ebx, eax
mov eax, dword [ebp - 0x40]
adc edi, edx
inc eax
add ecx, 4
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x50], ecx
cmp eax, esi
jl 0x1003192c
mov eax, dword [ebp - 0x80]
cdq
push edx
push eax
push edi
push ebx
call fcn.10068ac0
or eax, edx
je 0x1003197c
push 0x1000b5e8
call fcn.1004e4c6
mov esi, dword [ebp - 0xbc]
pop ecx
mov eax, dword [ebp - 0x80]
cdq
push edx
push eax
push edi
push ebx
call fcn.10068a10
mov ebx, eax
xor eax, eax
mov ecx, eax
mov edx, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x80], eax
jle 0x100319e3
mov edi, eax
cmp ecx, esi
jge 0x100319b5
mov edx, dword [ebp - 0x438]
cmp eax, ebx
jge 0x100319b2
add eax, dword [edx + ecx*4]
inc ecx
inc edi
cmp ecx, esi
jl 0x100319a5
mov edx, dword [ebp - 0x40]
cmp eax, ebx
jne 0x100319d5
mov eax, dword [ebp - 0x504]
mov dword [eax + edx*4], edi
inc edx
mov dword [ebp - 0x40], edx
cmp edx, dword [ebp - 0x80]
jge 0x100319e3
mov esi, dword [ebp - 0xbc]
xor eax, eax
jmp 0x10031999
push 0x1000b5e8
call fcn.1004e4c6
xor ebx, ebx
jmp 0x10031a1c
push 0x1000b5e4
call fcn.1004e4c6
xor ebx, ebx
mov esi, ebx
pop ecx
cmp dword [ebp - 0x80], ebx
jle 0x10031a12
mov eax, dword [ebp - 0x504]
push dword [eax + esi*4]
push 0x1000b18c
call fcn.1004e306
inc esi
pop ecx
pop ecx
cmp esi, dword [ebp - 0x80]
jl 0x100319f7
push 0x1000b0e5
call fcn.1004e4c6
pop ecx
lea ecx, [ebp - 0x504]
call fcn.1000f212
lea ecx, [ebp - 0x438]
call fcn.1000f212
push 2
pop esi
mov dword [ebp - 0x54], 0x24b54114
mov eax, 0x8143
mov dword [ebp - 0x404], eax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0x3fc], eax
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], esi
jge 0x10031a79
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x65c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10031a65
mov dword [ebp - 0x14], ebx
jmp 0x10031a91
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x644]
mov dword [eax + ecx*4], 0x2fde
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10031a7e
inc dword [ebp - 0x3f8]
lea ecx, [ebp - 0x644]
call fcn.1000f212
or edi, 0xffffffff
lea ecx, [ebp - 0x65c]
mov dword [ebp - 4], edi
call fcn.1000f212
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x54], 0xfffffff9
mov dword [ebp - 0x20], 0xffffffe6
jmp 0x10031af7
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10031af4
push 0x1543
push ebx
push 0x780
push 0x12d7
push 0x667
call dword [sym.imp.GDI32.dll_TextOutA]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe6
jle 0x10031ad0
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x278]
mov dword [ebp - 0x2c], 0x1c6076fd
push esi
call fcn.1000f1b6
push 5
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x4a4]
xor eax, eax
mov dword [ebp - 0x1c], 0x5c2f
inc eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x48], 0x25bb5a27
push eax
call fcn.1000f1b6
mov dword [ebp - 0x38], 0x6fe0855b
xor edx, edx
mov dword [ebp - 0x14], 0xede5a1ae
inc edx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], esi
jge 0x10031b6b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x394], edx
inc dword [ebp - 0x18]
jmp 0x10031b57
mov dword [ebp - 0x18], ebx
jmp 0x10031b7f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x278]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10031b70
mov dword [ebp - 0x18], ebx
jmp 0x10031b9c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4a4]
mov dword [eax + ecx*4], 0x5e34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10031b89
cmp dword [ebp - 0x28], ebx
je 0x10031c55
dec dword [ebp - 0x48]
xor edx, edx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setle dl
mov dword [ebp - 0x390], edx
test edx, edx
jne 0x10031c18
mov eax, dword [ebp - 0x34]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x278]
setns cl
cmp ecx, 0xfce88636
mov eax, dword [eax + 4]
sbb ecx, ecx
add eax, 0xc19d36f6
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x394]
add eax, ecx
mov ecx, dword [ebp - 0x48]
imul ecx, eax
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x4a4]
setle dl
sub edx, 0x3978
neg edx
sbb edx, edx
inc edx
mov dword [eax], edx
je 0x10031c24
cmp dword [ebp - 0x1c], ebx
je 0x10031c24
xor eax, eax
lea ecx, [eax + 1]
jmp 0x10031c26
mov ecx, ebx
mov eax, dword [ebp - 0x278]
xor edx, edx
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
imul ecx, ecx, 0x132c
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
xor edx, edx
sub eax, 0x4f952011
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
push 8
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x34]
imul ecx, ecx, 0xb3df4c3
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x30], edx
cmp dword [eax], ebx
je 0x10031cf7
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], 0xffffffed
jmp 0x10031cec
mov dword [ebp - 0x40], 0xfffd
mov dword [ebp - 0x50], 0x633c574c
mov dword [ebp - 0x38], 0x35584d57
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jne 0x10031cc4
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], ebx
jne 0x10031cc4
mov eax, ebx
jmp 0x10031cc7
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x20]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
add edx, 0xffff
cmp eax, edx
setle cl
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xd
jl 0x10031c94
jmp 0x10031e9c
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jg 0x10031e7d
xor eax, eax
inc eax
mov dword [ebp - 0x28], ebx
jmp 0x10031e65
mov dword [ebp - 0x34], ebx
jmp 0x10031e59
mov byte [ebp - 0x21], bl
mov dword [ebp - 0x38], 0x1c68
cmp dword [ebp - 0x38], 0x11fd
jge 0x10031e46
lea eax, [ebp - 0x164]
push eax
push 0x1000b5ac
call fcn.1004e0eb
xor eax, eax
inc eax
mov ebx, eax
pop ecx
pop ecx
cmp dword [ebp - 0x164], eax
jl 0x10031e44
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xb4]
push eax
push 0x1000b79c
call fcn.1004e0eb
mov ecx, dword [ebp - 0xb4]
add esp, 0xc
mov eax, ecx
cdq
idiv dword [ebp - 0xa4]
mov edi, eax
test edx, edx
jne 0x10031d84
dec edi
jmp 0x10031d9c
test ecx, ecx
jns 0x10031d9c
mov eax, dword [ebp - 0xa4]
sub eax, ecx
dec eax
cdq
idiv dword [ebp - 0xa4]
mov edi, eax
neg edi
push edi
push ebx
push 0x1000b7a4
call fcn.1004e306
mov esi, dword [ebp - 0xa4]
add esp, 0xc
mov ecx, dword [ebp - 0xb4]
imul edi, esi
sub ecx, edi
mov dword [ebp - 0xb4], ecx
cmp ecx, esi
jne 0x10031dd2
push 0x1000b7b4
call fcn.1004e306
jmp 0x10031e24
test ecx, ecx
je 0x10031e25
jmp 0x10031e09
idiv ecx
push eax
push 0x1000b7b8
call fcn.1004e306
mov esi, dword [ebp - 0xb4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4]
mov eax, ecx
cdq
idiv esi
mov dword [ebp - 0xa4], esi
imul eax, esi
sub ecx, eax
mov dword [ebp - 0xb4], ecx
mov eax, esi
cdq
idiv ecx
mov eax, esi
test edx, edx
cdq
jne 0x10031dd8
idiv ecx
dec eax
push eax
push 0x1000b7bc
call fcn.1004e306
pop ecx
pop ecx
push 0x1000b7c4
call fcn.1004e306
inc ebx
pop ecx
cmp ebx, dword [ebp - 0x164]
jle 0x10031d51
xor eax, eax
xor ebx, ebx
inc eax
jmp 0x10031e46
xor ebx, ebx
cmp byte [ebp - 0x21], 0
je 0x10031e56
push ebx
call dword [sym.imp.USER32.dll_ShowCursor]
xor eax, eax
inc eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x10031d16
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10031d0e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10031d06
or edi, 0xffffffff
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10031e9c
push ebx
push 0xb05
push 0x1eaa
push 0x1108
call dword [sym.imp.USER32.dll_SetScrollPos]
lea ecx, [ebp - 0x4a4]
call fcn.1000f212
lea ecx, [ebp - 0x278]
mov dword [ebp - 4], edi
call fcn.1000f212
xor eax, eax
mov dword [ebp - 0x20], 0x606de713
inc eax
mov dword [ebp - 0x28], 0xdf37d45d
mov dword [ebp - 0x14], 0xb8d96378
lea ecx, [ebp - 0x450]
push eax
call fcn.1000f1b6
mov dword [ebp - 4], 6
mov dword [ebp - 0x14], ebx
jmp 0x10031ef6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x338], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10031ee5
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
jmp 0x10031f17
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x450]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10031f04
cmp dword [ebp - 0x28], ebx
je 0x10031f5b
mov eax, dword [ebp - 0x28]
mov ecx, 0xf4c5
mov eax, dword [ebp - 0x28]
sub ecx, eax
mov eax, 0xfffb
mov dword [ebp - 0x330], ecx
cmp eax, ecx
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x28]
imul eax, edx, 0x2db8
xor edx, edx
inc edx
test eax, eax
mov eax, edx
jne 0x10031f5d
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 8
cmp eax, dword [ebp - 0x28]
jne 0x10031ff2
push edx
lea ecx, [ebp - 0x308]
call fcn.1000f1b6
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10031f96
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x308]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10031f83
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x308]
cmp dword [eax], ebx
je 0x10031fad
cmp dword [ebp - 0x14], ebx
jne 0x10031faf
mov edx, ebx
mov eax, dword [ebp - 0x308]
push 4
mov ecx, dword [eax]
xor eax, eax
cmp edx, 4
setge al
xor edx, edx
imul eax, dword [ebp - 0x330]
cmp eax, ecx
pop eax
setge dl
imul edx, ecx
imul edx, ecx
sub edx, ecx
lea ecx, [ebp - 0x308]
neg edx
sbb edx, edx
inc edx
sub eax, edx
mov dword [ebp - 0x14], eax
call fcn.1000f212
jmp 0x1003210b
mov dword [ebp - 0x48], 0x74f
mov dword [ebp - 0x2c], 0x5015
mov dword [ebp - 0x40], 0xf09d89c1
mov dword [ebp - 0x38], 0x81b93497
mov dword [ebp - 0x14], 0x1c
jmp 0x10032102
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x4e0]
push 4
call fcn.1000f1b6
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10032045
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4e0]
mov dword [eax + ecx*4], 0xce43c7d7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032032
cmp dword [ebp - 0x28], ebx
jne 0x10032098
mov ecx, dword [ebp - 0x30]
xor ebx, ebx
mov eax, dword [ebp - 0x4e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x330]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor ebx, ebx
mov dword [ebp - 0x330], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x48], 0x42d9
xor edx, edx
mov eax, dword [ebp - 0x450]
cmp ecx, dword [eax]
setge dl
xor ecx, ecx
mov dword [ebp - 0x50], edx
xor edx, edx
mov eax, dword [ebp - 0x50]
inc edx
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setg cl
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x48], ecx
jge 0x100320d3
mov eax, edx
cmp dword [ebp - 0x2c], ebx
jne 0x100320d5
mov eax, ebx
neg eax
mov dword [ebp - 0x38], eax
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x100320f4
push 0x17df
push 0x21f5
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
lea ecx, [ebp - 0x4e0]
call fcn.1000f212
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jg 0x1003201a
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003211f
push 0xe2d
call dword [sym.imp.USER32.dll_DrawMenuBar]
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], edi
call fcn.1000f212
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
jmp 0x10032146
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x16c], 0x35568345
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10032135
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x51c]
mov dword [ebp - 0x54], 0x9cd329b3
mov dword [ebp - 0x40], edi
push 4
call fcn.1000f1b6
mov dword [ebp - 0x34], 0x8700d35
xor edi, edi
mov dword [ebp - 0x38], 0x5761ac7e
inc edi
mov dword [ebp - 0x54], 0xd54ba4f
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 4
jge 0x10032197
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x51c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
jmp 0x10032180
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, edi
setle cl
imul ecx, dword [ebp - 0x30]
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov esi, dword [ebp - 0x51c]
mov dword [esi + 8], eax
cmp eax, dword [ebp - 0x30]
jg 0x100321c1
cmp dword [ebp - 0x34], ebx
jne 0x100321c1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
xor edx, edx
cmp dword [esi + 8], eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], 0x2f
jg 0x1003228c
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x38], 0xc7a429ad
mov dword [ebp - 0x64], 0xfffffff6
cmp dword [ebp - 0x28], ebx
jne 0x1003225c
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x28]
test eax, eax
jne 0x10032230
cmp dword [esi + 8], ebx
jne 0x10032230
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x10032235
xor edx, edx
inc edx
mov ecx, edx
mov eax, dword [ebp - 0x28]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp - 0x28]
je 0x10032247
cmp dword [ebp - 0x38], ebx
jne 0x10032249
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x30]
jg 0x1003225c
mov eax, ebx
jmp 0x1003225f
xor eax, eax
inc eax
mov dword [ebp - 0x64], eax
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x1003227c
push 0x4f
push ebx
push ebx
push ebx
push 0xadd
push ebx
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x2f
jle 0x100321e6
xor edi, edi
inc edi
lea ecx, [ebp - 0x51c]
call fcn.1000f212
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x100333fc
mov esi, 0xae88b149
xor edx, edx
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x30], ebx
jmp 0x100322c4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x74], 0xdf251d69
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edx
jl 0x100322b6
cmp dword [ebp - 0x74], ebx
jne 0x100322f0
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
je 0x100322e9
cmp dword [ebp - 0x74], ebx
jne 0x100322f0
mov ecx, ebx
cmp dword [ebp - 0x74], ebx
je 0x100322f2
mov ecx, edx
mov eax, dword [ebp - 0x74]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10032328
push 0xbd8
push 0x1ee4
push ebx
push 0x1d2e
call dword [sym.imp.USER32.dll_DrawFrameControl]
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jg 0x100333ed
or edi, 0xffffffff
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x40], 0xa1676492
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x1003236c
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10032364
push ebx
push ebx
push 0x1158
push 0x20c2
call dword [sym.imp.USER32.dll_PostMessageW]
xor edx, edx
inc edx
jmp 0x1003267d
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x38], 0x269a
cmp dword [ebp - 0x38], 0x592
jge 0x1003252c
lea eax, [ebp - 0xdc]
push eax
push 0x1000b178
call fcn.1004e0eb
xor eax, eax
mov dword [ebp - 0x30], ebx
pop ecx
inc eax
xor esi, esi
pop ecx
mov ecx, eax
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0xdc], eax
jl 0x100323d7
mov eax, dword [ebp - 0xdc]
cdq
idiv ecx
test edx, edx
cmove esi, eax
cmove ebx, ecx
inc ecx
mov eax, ecx
imul eax, ecx
cmp eax, dword [ebp - 0xdc]
jle 0x100323ab
push 5
pop eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], ebx
cmp ebx, eax
jge 0x100323e2
push 0x1000b7c8
call fcn.1004e4c6
pop ecx
xor eax, eax
mov byte [ebp - 0x7a], 0x64
mov dword [ebp - 0x240], eax
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
lea eax, [ebp - 0x7a]
push eax
push esi
call fcn.1003d910
xor eax, eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x234], eax
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], eax
lea eax, [ebp - 0x240]
push eax
push ebx
call fcn.1003d98c
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], 9
call fcn.1000f212
push ecx
lea ecx, [ebp - 0x674]
call fcn.1003d6b0
mov ecx, dword [ebp - 0x674]
xor eax, eax
mov ebx, dword [ebp - 0x234]
mov edx, eax
mov dword [ebp - 0x48], edx
mov edi, eax
mov dword [ebp - 0x2c], eax
mov dword [ecx], 0x6f696561
mov byte [ecx + 4], 0x75
mov esi, dword [ebp - 0xdc]
test esi, esi
je 0x100324cf
mov eax, dword [ebx]
mov dword [ebp - 0x40], eax
mov eax, edx
dec esi
cdq
idiv dword [ebp - 0x34]
cdq
idiv dword [ebp - 0x4c]
inc dword [ebp - 0x48]
mov al, byte [edx + ecx]
mov edx, dword [ebp - 0x40]
mov byte [edi + edx], al
mov eax, dword [ebp - 0x2c]
inc eax
cdq
idiv dword [ebp - 0x30]
lea eax, [edi + 1]
mov dword [ebp - 0x2c], edx
cdq
idiv dword [ebp - 0x34]
imul eax, dword [ebp - 0x2c], 0xc
mov edi, edx
mov eax, dword [eax + ebx]
mov dword [ebp - 0x40], eax
cmp byte [edi + eax], 0x64
je 0x100324c8
lea eax, [edi + 1]
cdq
idiv dword [ebp - 0x34]
mov edi, edx
mov edx, dword [ebp - 0x48]
test esi, esi
jne 0x10032484
mov edi, dword [ebp - 0x30]
test edi, edi
jle 0x10032509
mov eax, dword [ebp - 0x34]
xor esi, esi
test eax, eax
jle 0x10032500
mov edi, dword [ebp - 0x34]
mov eax, dword [ebx]
movsx eax, byte [esi + eax]
push eax
push 0x1000b714
call fcn.1004e306
inc esi
pop ecx
pop ecx
cmp esi, edi
jl 0x100324e2
mov edi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
add ebx, 0xc
dec edi
mov dword [ebp - 0x30], edi
jne 0x100324d9
lea ecx, [ebp - 0x674]
call fcn.1000f212
or edi, 0xffffffff
lea ecx, [ebp - 0x234]
mov dword [ebp - 4], edi
call fcn.1002f47e
xor ebx, ebx
mov esi, 0xae88b149
mov dword [ebp - 0x38], 0x3df2ef51
mov dword [ebp - 0x30], 0x8db3
mov dword [ebp - 0x40], edi
push 2
mov dword [ebp - 0x44], ebx
pop edi
jmp 0x10032556
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xd8], 0xfffffff9
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x10032545
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0x18], ebx
je 0x1003265d
xor eax, eax
inc eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10032649
mov dword [ebp - 0x64], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp eax, 0xa0cd95f
setne cl
cmp ecx, dword [ebp - 0x44]
jle 0x100325aa
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd8]
cmp eax, dword [ebp - 0x18]
jle 0x100325c2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, 0x2fb29d94
setl cl
xor edx, edx
imul ecx, dword [ebp + eax*4 - 0xd8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0xd8]
imul ecx, ecx, 0xddf3
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
mov dword [ebp + eax*4 - 0xd8], edx
test edx, edx
je 0x10032623
cmp dword [ebp - 0x18], ebx
je 0x10032623
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x10032628
xor ecx, ecx
mov eax, ebx
inc ecx
cmp eax, dword [ebp - 0x40]
jg 0x10032634
mov edx, ebx
cmp dword [ebp - 0x64], ebx
je 0x10032636
mov edx, ecx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jle 0x1003257e
mov eax, dword [ebp - 0x44]
xor edx, edx
mov dword [ebp - 0x40], eax
inc edx
jmp 0x1003267a
xor edx, edx
inc edx
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], ebx
jl 0x1003267a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xd8]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x30]
jns 0x10032668
or edi, 0xffffffff
mov dword [ebp - 0x2c], 0xe8588d0d
mov dword [ebp - 0x48], 0xdcad2086
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x54], 0x4a41637c
mov dword [ebp - 0x54], 0xfa32a17d
push 5
pop eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x60], 0xcfdfe92
mov dword [ebp - 0x5c], 0xcfdfe92
mov dword [ebp - 0x58], 0xcfdfe92
mov dword [ebp - 0x54], 0xcfdfe92
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x30], ebx
jmp 0x100326de
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x994], 0x1f145ba1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x100326cd
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], 7
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x48], eax
jge 0x10032700
mov ecx, edx
cmp dword [ebp - 0x48], ebx
jne 0x10032702
mov ecx, ebx
mov eax, 0xa2cb
sub eax, ecx
xor ecx, ecx
cmp eax, 0x2b21a35c
setg cl
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x16c], ebx
jne 0x100333e8
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x100333d7
jmp 0x1003273a
xor edx, edx
inc edx
mov dword [ebp - 0x50], 0xffff
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x48], 0xe813a3db
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x40], 0x251c6076
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x30], ebx
jmp 0x10032787
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x68c], 0x62d7bc3
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x10032776
cmp dword [ebp - 0x50], ebx
jne 0x100327e4
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x48], ebx
jne 0x100327a7
mov eax, ebx
cmp dword [ebp - 0x44], ebx
je 0x100327a9
mov eax, edx
mov dword [ebp - 0x34], 0xfffffffc
xor edx, edx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setne dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setl bl
xor ecx, ecx
cmp eax, ebx
setge cl
sub ecx, dword [ebp - 0x688]
mov dword [ebp - 0x44], ecx
je 0x100327f0
xor ebx, ebx
cmp dword [ebp - 0x64], ebx
je 0x100327f2
xor edx, edx
inc edx
mov ecx, edx
jmp 0x100327f7
xor ebx, ebx
xor edx, edx
mov ecx, ebx
inc edx
xor eax, eax
cmp ecx, 0x56237581
setl al
cmp dword [ebp - 0x50], eax
je 0x1003280e
mov eax, edx
cmp dword [ebp - 0x34], ebx
jne 0x10032810
mov eax, ebx
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], ebx
jmp 0x10032914
mov eax, 0x13a4
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x30], 0x3111738a
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], ebx
jl 0x100328f2
mov dword [ebp - 0x34], 0xd0d3f7bf
mov dword [ebp - 0x38], 0x18e7
cmp dword [ebp - 0x38], 0x6d6
jge 0x100328be
lea eax, [ebp - 0x2a0]
push eax
lea eax, [ebp - 0x5f0]
push eax
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x248]
push eax
push 0x1000b7cc
call fcn.1004e0eb
mov eax, dword [ebp - 0x250]
add esp, 0x14
add eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x2a0]
lea eax, [eax*2 + 4]
push eax
push 0x1000b184
call fcn.1004e306
pop ecx
pop ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x3b4], ebx
jne 0x100328f2
mov dword [ebp - 0x34], ebx
jmp 0x100328e3
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x3b4], ebx
jne 0x100328e9
cmp dword [ebp - 0x44], ebx
jne 0x100328e9
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x100328cf
dec dword [ebp - 0x30]
jns 0x10032858
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10032911
push 0x1f30
push ebx
push 0x1b9b
push 0xe0f
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffff1
jne 0x10032824
mov byte [ebp - 0xd], bl
mov dword [ebp - 0x18], 0xeb90da11
mov dword [ebp - 0x34], 0x9d44f4cc
mov dword [ebp - 0x18], ebx
jmp 0x10032b9d
mov dword [ebp - 0x14], 0xcb8f6c21
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x38], edi
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
je 0x1003297b
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
jne 0x10032959
cmp dword [ebp - 0x18], ebx
je 0x10032965
cmp dword [ebp - 0x18], ebx
je 0x10032965
xor eax, eax
lea edx, [eax + 1]
jmp 0x10032967
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x14]
jle 0x1003297b
xor eax, eax
inc eax
jmp 0x1003297d
mov eax, ebx
xor edx, edx
cmp eax, 0x118c
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xcc8af953
setne al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
add ecx, 0xffffd6a7
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
cmp eax, 0xe7aebb1b
jne 0x100329e0
cmp dword [ebp - 0x48], ebx
je 0x10032a0a
cmp dword [ebp - 0x14], ebx
je 0x10032a0a
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10032b95
push ebx
push ebx
push 0x25ff
push 0x255
push ebx
call dword [sym.imp.USER32.dll_InsertMenuA]
jmp 0x10032b95
mov dword [ebp - 0x38], 0x12cd0ab8
mov dword [ebp - 0x30], ebx
jmp 0x10032a27
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6a4], 0xfffffffd
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x10032a16
cmp dword [ebp - 0x18], ebx
je 0x10032a77
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
push 0
pop eax
sets al
xor edx, edx
cmp eax, 0x2b3f
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x69c]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setne cl
cmp esi, ecx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x69c]
jne 0x10032a77
xor eax, eax
lea edx, [eax + 1]
jmp 0x10032a79
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
xor eax, eax
sub edx, 6
cmp edx, 0x3a099773
setne al
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0x1cab
cmp dword [ebp - 0x38], 0xa13
jge 0x10032b60
push 0x10b2ed1c
push 0x10b2ed14
push 0x1000b5c8
call fcn.1004e0eb
mov ecx, dword [0x10b2ed14]
add esp, 0xc
mov edi, ebx
test ecx, ecx
jle 0x10032af5
mov esi, 0x10b08980
push esi
push 0x1000b5ac
call fcn.1004e0eb
pop ecx
pop ecx
mov ecx, dword [0x10b2ed14]
inc edi
add esi, 4
cmp edi, ecx
jl 0x10032ada
mov edi, ebx
mov ebx, dword [0x10b2ed1c]
test ebx, ebx
jle 0x10032b27
mov esi, 0x10b08b50
push esi
push 0x1000b5ac
call fcn.1004e0eb
mov ebx, dword [0x10b2ed1c]
inc edi
pop ecx
add esi, 4
pop ecx
cmp edi, ebx
jl 0x10032b06
mov ecx, dword [0x10b2ed14]
xor eax, eax
mov edi, eax
mov esi, eax
mov edx, eax
test ecx, ecx
jle 0x10032b4e
mov eax, dword [edx*4 + 0x10b08b50]
cmp eax, dword [esi*4 + 0x10b08980]
jl 0x10032b45
inc edx
inc edi
cmp edx, ebx
jge 0x10032b4e
inc esi
cmp esi, ecx
jl 0x10032b33
push edi
push 0x1000b5ec
call fcn.1004e306
pop ecx
xor ebx, ebx
or edi, 0xffffffff
pop ecx
mov dword [ebp - 0x34], 0xffffffe9
jmp 0x10032b8f
mov byte [ebp - 0x21], bl
cmp byte [ebp - 0x21], 0
je 0x10032b8c
push 0x200c
push 0xa51
push 0x17bc
push 0x1cd5
call dword [sym.imp.USER32.dll_CheckRadioButton]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffff7
jne 0x10032b69
dec dword [ebp - 0x18]
mov esi, 0xae88b149
cmp dword [ebp - 0x18], 0xfffffff0
jne 0x10032937
cmp byte [ebp - 0xd], 0
je 0x10032bb5
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x100333c4
push 2
pop edi
or esi, 0xffffffff
mov dword [ebp - 0x38], 0x747bb7ab
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x18], 0x80444555
mov dword [ebp - 0x48], 0xe39f3faa
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], 0xf5452fa8
push edi
call fcn.1000f1b6
mov dword [ebp - 0x30], ebx
jmp 0x10032c0a
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x468]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x10032bf7
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10032c27
push ebx
push ebx
push 0x13c5
push ebx
push ebx
call dword [sym.imp.USER32.dll_DialogBoxParamA]
cmp dword [ebp - 0x18], ebx
jne 0x10032c2f
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x2301355f
setne al
cmp dword [ebp - 0x18], eax
jge 0x10032c86
cmp dword [ebp - 0x48], ebx
je 0x10032c86
cmp dword [ebp - 0x18], ebx
je 0x10032c86
xor eax, eax
inc eax
jmp 0x10032c88
mov eax, ebx
cmp eax, 0xd7af2c9a
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x85299dad
mov eax, dword [ebp - 0x468]
sbb ecx, ecx
neg ecx
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x468]
call fcn.1000f212
mov dword [ebp - 0x38], 0x56915a13
xor edx, edx
mov dword [ebp - 0x40], 0xcce57bf5
inc edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x64], 6
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x30], 0xe4a6
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10032cfd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7b0], 0x1328f6c7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10032cec
mov dword [ebp - 0x14], ebx
jmp 0x10032d19
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0x4c6a37d7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10032d08
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x38]
dec dword [ebp - 0xac]
cmp eax, ecx
mov eax, edx
cmovg eax, ebx
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
sub eax, 6
imul eax, dword [ebp - 0x48]
sub eax, 0xa
cmp eax, esi
mov eax, dword [ebp - 0x30]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x7b0]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0xac]
jge 0x10032d82
cmp dword [ebp - 0xac], ebx
jne 0x10032d82
xor eax, eax
inc eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x16c], ebx
je 0x10032da2
dec dword [ebp - 0x2c]
mov esi, 0xae88b149
push 0xffffffffffffffff
pop edi
jns 0x10032737
or edi, edi
inc dword [ebp - 0x28]
mov esi, 0xae88b149
cmp dword [ebp - 0x28], ebx
jle 0x10032337
mov esi, 0xae88b149
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100322a8
xor edi, edi
inc edi
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033458
xor eax, eax
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x3c], 0xe1d925b0
mov dword [ebp - 0x1c], ebx
jmp 0x10033428
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7bc], 0x37d45db3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10033417
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7b8], eax
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1003344e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor edi, edi
inc edi
push 2
pop esi
push esi
lea ecx, [ebp - 0x6e8]
call fcn.1000f1b6
push 4
lea ecx, [ebp - 0x6d4]
mov dword [ebp - 4], 0xe
call fcn.1000f1b6
mov dword [ebp - 0x54], 0x285c
mov eax, 0x8143
mov dword [ebp - 0x54], 0x24b54114
mov dword [ebp - 0x35c], eax
mov dword [ebp - 0x358], eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x14], ebx
jmp 0x100334ba
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6e8]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100334ab
mov dword [ebp - 0x14], ebx
jmp 0x100334d7
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x6d4]
mov dword [eax + ecx*4], 0x2fde
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100334c4
inc dword [ebp - 0x350]
lea ecx, [ebp - 0x6d4]
call fcn.1000f212
or edi, 0xffffffff
lea ecx, [ebp - 0x6e8]
mov dword [ebp - 4], edi
call fcn.1000f212
mov dword [ebp - 0x54], 0x5c96dd1e
xor eax, eax
mov dword [ebp - 0x54], 0x2f4a8b10
inc eax
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x54], 6
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], ebx
push 3
pop eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0x1f1eb32a
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x3c]
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1003354b
push ebx
push ebx
push 0x24c4
push ebx
push ebx
call dword [sym.imp.USER32.dll_CreateDialogParamA]
push esi
lea ecx, [ebp - 0x700]
call fcn.1000f1b6
mov dword [ebp - 0x20], 0xb02971c
mov dword [ebp - 0x1c], ebx
jmp 0x10033572
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x700]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10033563
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033588
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
jmp 0x100335b4
mov dword [ebp - 0x1c], ebx
jmp 0x100335a2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x24c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10033595
mov dword [ebp - 0x24c], 0x14768c0a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10033590
lea ecx, [ebp - 0x700]
call fcn.1000f212
mov dword [ebp - 0x54], 0x862fd41e
mov dword [ebp - 0x54], 0xf57a7c20
mov dword [ebp - 0x20], 0x67f5ed9a
mov dword [ebp - 0x1c], 0xb95
mov dword [ebp - 0x30], 0x3ff14eb4
mov dword [ebp - 0x3c], 0xbefcdf11
mov dword [ebp - 0x54], 9
mov dword [ebp - 0x14], ebx
jmp 0x1003360b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x978], 0x167fa5c6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100335fa
mov dword [ebp - 0x14], ebx
jmp 0x10033623
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x668], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10033616
dec dword [ebp - 0x3c]
mov edi, 0x1000b7ec
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 0xffffffeb
jne 0x10033785
mov dword [ebp - 0x38], 0xfffd
lea ecx, [ebp - 0x5b0]
xor eax, eax
mov dword [ebp - 0x54], 0xfffffff6
inc eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 0xfffffffc
mov dword [ebp - 0x54], 0x83800955
push 3
call fcn.1000f1b6
mov dword [ebp - 0x4c], 0x21e0
cmp dword [ebp - 0x4c], 0x8f3
jge 0x10033709
lea eax, [ebp - 0x90]
mov esi, 0x1000b5ec
push eax
push esi
call fcn.1004e0eb
cmp dword [ebp - 0x90], 2
pop ecx
pop ecx
jg 0x100336a5
push 0x1000b7dc
jmp 0x100336b3
cmp dword [ebp - 0x90], 3
jne 0x100336bb
push 0x1000b7e4
call fcn.1004e306
pop ecx
jmp 0x10033709
push dword [ebp - 0x90]
push esi
call fcn.1004e306
mov eax, dword [ebp - 0x90]
pop ecx
pop ecx
push 2
pop esi
cmp eax, esi
jl 0x100336ec
push esi
push edi
call fcn.1004e306
mov eax, dword [ebp - 0x90]
add esi, 2
pop ecx
pop ecx
cmp esi, eax
jle 0x100336d6
xor ecx, ecx
inc ecx
mov esi, ecx
cmp eax, ecx
jl 0x10033709
push esi
push edi
call fcn.1004e306
add esi, 2
pop ecx
pop ecx
cmp esi, dword [ebp - 0x90]
jle 0x100336f5
mov dword [ebp - 0x1c], ebx
jmp 0x10033721
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5b0]
mov dword [eax + ecx*4], 0xce3d9786
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003370e
mov dword [ebp - 0x20], ebx
jmp 0x1003375e
mov dword [ebp - 0x1c], ebx
jmp 0x10033750
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1003374d
push ebx
push 7
push 0x2645
push 0x1348
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xd
jle 0x10033731
cmp dword [ebp - 0x38], ebx
jne 0x10033764
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe8
jne 0x1003372c
dec dword [ebp - 0x660]
lea ecx, [ebp - 0x5b0]
call fcn.1000f212
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffeb
je 0x1003363e
push 2
pop esi
push esi
lea ecx, [ebp - 0x5dc]
call fcn.1000f1b6
push 4
lea ecx, [ebp - 0x728]
mov dword [ebp - 4], 0xf
call fcn.1000f1b6
push 4
mov byte [ebp - 4], 0x10
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x4c], 0x48a2b8ea
mov dword [ebp - 0x1c], ebx
jmp 0x100337cc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x82c], 0xe5e53494
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100337bb
mov dword [ebp - 0x14], ebx
jmp 0x10033bbf
mov dword [ebp - 0x2c], 0xfff8
cmp dword [ebp - 0x14], ebx
je 0x10033830
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setne dl
sub edx, 0xe243
je 0x1003380f
cmp dword [ebp - 0x2c], ebx
je 0x1003380f
xor ecx, ecx
inc ecx
mov eax, ecx
jmp 0x10033814
xor ecx, ecx
mov eax, ebx
inc ecx
mov dword [ebp - 0x82c], eax
dec eax
cmp eax, dword [ebp - 0x2c]
jg 0x10033827
mov eax, ecx
cmp dword [ebp - 0x2c], ebx
jne 0x10033829
mov eax, ebx
cmp eax, dword [ebp - 0x14]
mov eax, ecx
jge 0x10033832
mov eax, ebx
mov dword [ebp - 0x4c], eax
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033bbc
mov dword [ebp - 0x4c], 0x25e0
cmp dword [ebp - 0x4c], 0xc2f
jge 0x10033b7d
lea eax, [ebp - 0x68]
push eax
push 0x1000b5ec
call fcn.1004e0eb
pop ecx
pop ecx
push dword [ebp - 0x68]
lea ecx, [ebp - 0x480]
call fcn.1000f23d
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x4f8]
push dword [ebp - 0x68]
call fcn.1000f23d
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x2e4]
push dword [ebp - 0x68]
call fcn.1000f23d
xor eax, eax
mov byte [ebp - 4], 0x13
inc eax
lea ecx, [ebp - 0x2cc]
mov byte [ebp - 0x79], al
lea eax, [ebp - 0x79]
push eax
push dword [ebp - 0x68]
call fcn.1002e689
mov edi, dword [ebp - 0x68]
mov dword [ebp - 0x3c], ebx
test edi, edi
jle 0x10033905
mov eax, dword [ebp - 0x4f8]
mov esi, eax
mov ebx, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x480]
sub ebx, eax
sub ecx, eax
mov dword [ebp - 0x4c], ecx
lea eax, [ebx + esi]
push eax
push esi
lea eax, [ecx + esi]
push eax
push 0x1000b7f0
call fcn.1004e0eb
mov eax, dword [ebp - 0x3c]
add esp, 0x10
mov edi, dword [ebp - 0x68]
inc eax
mov ecx, dword [ebp - 0x4c]
add esi, 4
mov dword [ebp - 0x3c], eax
cmp eax, edi
jl 0x100338d9
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0x1d4], ebx
mov esi, eax
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1d0], esi
mov byte [ebp - 4], 0x15
mov dword [ebp - 0xc0], eax
test edi, edi
jle 0x10033b07
push eax
lea eax, [ebp - 0x8b8]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.1002e70a
xor ecx, ecx
mov esi, dword [eax]
lea edx, [ecx + 1]
mov ecx, dword [eax + 4]
shl edx, cl
test dword [esi], edx
je 0x10033ae6
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x1d4]
call fcn.1003d65d
xor eax, eax
mov edx, eax
mov dword [ebp - 0x11c], eax
mov ecx, eax
mov dword [ebp - 0x124], edx
mov dword [ebp - 0x120], ecx
mov byte [ebp - 4], 0x16
mov edi, dword [ebp - 0xc0]
mov eax, dword [ebp - 0x480]
mov ebx, dword [eax + edi*4]
inc edi
mov dword [ebp - 0x108], edi
cmp edi, dword [ebp - 0x68]
jge 0x10033ac5
test ebx, ebx
jle 0x10033ab9
push edi
lea eax, [ebp - 0x834]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.1002e70a
xor ecx, ecx
mov esi, dword [eax]
lea edx, [ecx + 1]
mov ecx, dword [eax + 4]
shl edx, cl
test dword [esi], edx
je 0x10033a12
mov eax, dword [ebp - 0x2e4]
sub dword [eax + edi*4], ebx
dec ebx
cmp dword [eax + edi*4], 0
jge 0x10033a12
lea eax, [ebp - 0x108]
push eax
lea ecx, [ebp - 0x124]
call fcn.1003d65d
mov edi, dword [ebp - 0x108]
lea eax, [ebp - 0x8d0]
push 0
push ecx
push edi
push eax
lea ecx, [ebp - 0x2cc]
call fcn.1002e70a
pop ecx
mov ecx, eax
call fcn.1002e729
inc edi
mov dword [ebp - 0x108], edi
cmp edi, dword [ebp - 0x68]
jl 0x100339a1
jmp 0x10033ab9
add ecx, 0xfffffffc
mov dword [ebp - 0x120], ecx
mov ebx, dword [ecx]
lea edi, [ebx + 1]
mov dword [ebp - 0x100], edi
cmp edi, dword [ebp - 0x68]
jge 0x10033ac5
push edi
lea eax, [ebp - 0x84c]
push eax
lea ecx, [ebp - 0x2cc]
call fcn.1002e70a
xor ecx, ecx
mov esi, dword [eax]
lea edx, [ecx + 1]
mov ecx, dword [eax + 4]
shl edx, cl
test dword [esi], edx
je 0x10033aad
mov eax, dword [ebp - 0x4f8]
mov ecx, dword [ebp - 0x2e4]
mov eax, dword [eax + ebx*4]
sub dword [ecx + edi*4], eax
jns 0x10033aad
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x124]
call fcn.1003d65d
mov edi, dword [ebp - 0x100]
lea eax, [ebp - 0x928]
push 0
push ecx
push edi
push eax
lea ecx, [ebp - 0x2cc]
call fcn.1002e70a
pop ecx
mov ecx, eax
call fcn.1002e729
inc edi
mov dword [ebp - 0x100], edi
cmp edi, dword [ebp - 0x68]
jl 0x10033a40
mov ecx, dword [ebp - 0x120]
mov edx, dword [ebp - 0x124]
mov eax, ecx
sub eax, edx
sar eax, 2
test eax, eax
jne 0x10033a23
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 0x15
call fcn.1000f212
mov edi, dword [ebp - 0x68]
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp eax, edi
jl 0x1003392d
mov esi, dword [ebp - 0x1d0]
mov ebx, dword [ebp - 0x1d4]
sub esi, ebx
sar esi, 2
push esi
push 0x1000b184
call fcn.1004e306
pop ecx
xor edi, edi
pop ecx
test esi, esi
je 0x10033b35
mov eax, dword [ebx + edi*4]
inc eax
push eax
push 0x1000b7ec
call fcn.1004e306
inc edi
pop ecx
pop ecx
cmp edi, esi
jb 0x10033b1f
push 0x1000b0e5
call fcn.1004e4c6
pop ecx
lea ecx, [ebp - 0x1d4]
call fcn.1000f212
lea ecx, [ebp - 0x2cc]
call fcn.1002e6ea
lea ecx, [ebp - 0x2e4]
call fcn.1000f212
lea ecx, [ebp - 0x4f8]
call fcn.1000f212
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], 0x10
call fcn.1000f212
xor ebx, ebx
push 0x813
push 0x475
push ebx
push ebx
push 0x1c7a
push 0x1fcf
push 0x281
push 0x1998
push 0x5b0
push 0x7d5
push 0x60d
push 0x1fb5
push 0x9d8
call dword [sym.imp.GDI32.dll_StretchDIBits]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x19
jle 0x100337d9
mov dword [ebp - 0x54], 0x285c
mov eax, 0xffff
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b0], eax
xor eax, eax
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 3
jge 0x10033c12
or ecx, 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x19c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10033bff
mov dword [ebp - 0x4c], 0x171f
cmp dword [ebp - 0x4c], 0x422
jge 0x10033ce1
lea eax, [ebp - 0xd0]
push eax
push 0x1000b5ac
call fcn.1004e0eb
cmp dword [ebp - 0xd0], 0
pop ecx
pop ecx
je 0x10033ce1
lea eax, [ebp - 0x7dc]
push eax
push 0x1000b710
call fcn.1004e0eb
lea eax, [ebp - 0x7dc]
xor edi, edi
push eax
call fcn.1004e060
mov esi, eax
add esp, 0xc
xor eax, eax
mov edx, eax
test esi, esi
jle 0x10033c84
movsx ecx, byte [ebp + edx - 0x7dc]
add ebx, 0xffffffd0
add ebx, ecx
inc edx
cmp edx, esi
jl 0x10033c72
mov ecx, eax
test esi, esi
jle 0x10033cb3
imul edi, dword [ebp - 0xd0]
movsx eax, byte [ebp + ecx - 0x7dc]
add edi, 0xffffffd0
add eax, edi
cdq
idiv ebx
inc ecx
mov edi, edx
cmp ecx, esi
jl 0x10033c8a
test edi, edi
je 0x10033cb3
push 0x1000b804
jmp 0x10033cb8
push 0x1000b800
call fcn.1004e4c6
pop ecx
lea eax, [ebp - 0xd0]
push eax
push 0x1000b5ac
call fcn.1004e0eb
cmp dword [ebp - 0xd0], 0
pop ecx
pop ecx
push 0
pop ebx
jne 0x10033c46
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033cf6
push ebx
push 0xebc
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x19c], 0xfffffff7
or edi, 0xffffffff
cmp dword [ebp - 0x19c], 0xffffffed
jne 0x10033dc9
xor eax, eax
mov dword [ebp - 0x50], ebx
inc eax
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x40], 0xf9d4
push 3
call fcn.1000f1b6
mov dword [ebp - 0x1c], ebx
jmp 0x10033d48
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x420]
mov dword [eax + ecx*4], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10033d35
mov eax, dword [ebp - 0x40]
xor ebx, ebx
mov dword [ebp - 0x3c], 0x145ba13b
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x194]
inc dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x420]
mov dword [eax + 8], edx
mov eax, dword [ebp - 0x198]
cmp ecx, eax
setl bl
xor eax, eax
cmp edx, 0xf88
setle al
xor edx, edx
add eax, dword [ebp - 0x50]
cmp ebx, eax
mov eax, dword [ebp - 0x50]
setne dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x420]
call fcn.1000f212
dec dword [ebp - 0x19c]
cmp dword [ebp - 0x19c], 0xffffffed
push 0
pop ebx
je 0x10033d10
mov dword [ebp - 0x54], 0x24b54114
xor edx, edx
mov dword [ebp - 0x2c], 0xa9c4c8d3
inc edx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 8
mov dword [ebp - 0x54], 0xe23a266d
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x40], 3
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], edx
push 2
mov dword [ebp - 0x3c], 0x4ab6
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x10033e1b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x604], 0xd6b65720
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10033e0a
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033e33
push ebx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
xor edx, edx
inc edx
cmp dword [ebp - 0x2c], ebx
jne 0x10033e41
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x604], eax
mov eax, dword [ebp - 0x48]
inc dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4c], ebx
je 0x10033e65
mov ecx, edx
cmp dword [ebp - 0x40], ebx
jne 0x10033e67
mov ecx, ebx
xor eax, eax
cmp ecx, edx
sete al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x50], ebx
mov eax, 0x8143
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x20], 0x4b4e1265
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x4c], 0xcabebf3b
mov dword [ebp - 0x1c], ebx
jmp 0x10033ec8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x550], 0x55950707
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10033eb7
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x54c], eax
test eax, eax
je 0x10033ee8
mov eax, edx
cmp dword [ebp - 0x54c], ebx
jne 0x10033eea
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0x582f80c3
jle 0x10033f37
mov dword [ebp - 0x2c], 0x814b11f3
cmp dword [ebp - 0x20], ebx
je 0x10033f17
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x54c], eax
mov dword [ebp - 0x4c], eax
jmp 0x10033f55
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10033f55
push 0x6d0
push 0xb42
push 0x18d2
call dword [sym.imp.KERNEL32.dll_HeapCreate]
movdqa xmm0, xmmword [0x1000b950]
lea ecx, [ebp - 0x780]
push ecx
lea eax, [ebp - 0x770]
mov dword [ebp - 0x28], 0xef9d7865
push eax
mov dword [ebp - 0x2c], 0x4801465e
push ecx
mov dword [ebp - 0x20], 0xd9ae65c3
lea ecx, [ebp - 0x6c8]
mov dword [ebp - 0x48], 0x279329bf
movdqu xmmword [ebp - 0x780], xmm0
call fcn.1002e387
xor ecx, ecx
mov dword [ebp - 0x1c], ebx
inc ecx
jmp 0x10033fb0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2a8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10033fa3
mov eax, dword [ebp - 0x28]
xor ecx, ecx
sub eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 0xc6b7
mov eax, dword [ebp - 0x28]
setge cl
sub ecx, 7
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
cmp edi, ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
inc eax
cmp dword [ebp - 0x2c], eax
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
add ecx, 0xffff
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, dword [ebp - 0x20]
jne 0x1003402c
cmp dword [ebp - 0x2c], ebx
jne 0x1003402c
mov edx, ebx
jmp 0x10034031
xor eax, eax
lea edx, [eax + 1]
mov ecx, dword [ebp - 0x28]
xor ebx, ebx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle bl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setne cl
xor edx, edx
cmp ebx, ecx
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x6c8]
setne cl
xor edx, edx
cmp ecx, dword [eax + 8]
mov eax, dword [ebp - 0x48]
setle dl
xor ecx, ecx
sub edx, 0xb432
cmp edx, eax
setge cl
xor ebx, ebx
cmp ecx, dword [ebp - 0x48]
jge 0x10034088
cmp dword [ebp - 0x20], ebx
je 0x10034088
xor eax, eax
inc eax
jmp 0x1003408a
mov eax, ebx
mov dword [ebp - 0x2a8], eax
lea ecx, [ebp - 0x6c8]
call fcn.1000f212
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], esi
jge 0x100340bd
xor edi, edi
inc edi
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5dc]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100340a6
or edi, 0xffffffff
push esi
lea ecx, [ebp - 0x5cc]
call fcn.1000f1b6
xor eax, eax
mov dword [ebp - 0x54], 0xfffffff7
inc eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x54], 7
mov dword [ebp - 0x14], ebx
jmp 0x100340f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5cc]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100340e2
mov dword [ebp - 0x14], ebx
jmp 0x10034110
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5bc], 0xbb4f5ac3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100340ff
inc dword [ebp - 0x5bc]
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x10034130