Function at 0x10032100
Capabilities:
Connect pipe
Delete file
Get common file path
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10084a5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1164
call fcn.1007fde0
push esi
push edi
mov dword [ebp - 0xf1c], 0x28c176b0
mov dword [ebp - 0x106c], 0xfffffffb
mov dword [ebp - 0xfb4], 0x2b165808
mov dword [ebp - 0x338], 0xfffffff9
push 2
lea ecx, [ebp - 0x1038]
call fcn.10026565
and dword [ebp - 4], 0
mov dword [ebp - 0x7a0], 0x57863718
mov dword [ebp - 0x7c], 0
jmp 0x10032177
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1003218d
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x114c], 0xfffffffb
jmp 0x10032170
mov dword [ebp - 0x7c], 0
jmp 0x1003219d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x100321b9
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1038]
call fcn.100265d2
mov dword [eax], 0xfffffffa
jmp 0x10032196
mov eax, dword [ebp - 0x7a0]
inc eax
mov dword [ebp - 0x7a0], eax
mov dword [ebp - 0x338], 0
jmp 0x100321df
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0x12
jl 0x10032204
mov byte [ebp - 0x123], 0
movzx eax, byte [ebp - 0x123]
test eax, eax
je 0x10032202
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x100321d2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1038]
call fcn.100265cd
mov dword [ebp - 0x10fc], 5
mov dword [ebp - 0xfbc], 0x94964a53
mov dword [ebp - 0x107c], 0xffffffff
mov dword [ebp - 0xfc4], 1
mov dword [ebp - 0x10ec], 0x849f845d
mov dword [ebp - 0xb68], 0x3050
mov dword [ebp - 0xfcc], 0x30385d06
mov dword [ebp - 0x98], 0
jmp 0x10032272
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1003228e
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1134], 9
jmp 0x10032265
mov dword [ebp - 0x98], 0
jmp 0x100322a7
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x100322c3
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1140], 7
jmp 0x1003229a
mov eax, dword [ebp - 0xb68]
inc eax
mov dword [ebp - 0xb68], eax
mov dword [ebp - 0x348], 0x256915a
mov dword [ebp - 0x108c], 0
mov dword [ebp - 0x340], 0
jmp 0x100322fd
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 1
jge 0x10032319
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0xfd4], 0xffff
jmp 0x100322f0
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x10032339
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov dword [ebp - 0x348], 0
jmp 0x10032352
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
jl 0x100323b5
mov dword [ebp - 0x214], 1
mov dword [ebp - 0x214], 0
jmp 0x1003237e
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jg 0x100323b3
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x100323b1
push 0xb4e
push 0
push 0
push 0
push 0x96f
push 0
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
jmp 0x10032371
jmp 0x10032345
push 1
lea ecx, [ebp - 0x40c]
call fcn.10026565
mov dword [ebp - 4], 1
mov dword [ebp - 0x1bc], 0x3f6a0837
mov dword [ebp - 0x2fc], 0
jmp 0x100323ec
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x1003240e
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0x40c]
call fcn.100265d2
mov dword [eax], 0x97f6af11
jmp 0x100323df
mov dword [ebp - 0x208], 0xf9b3198a
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x7e8], 0xd1299d62
mov dword [ebp - 0xf00], 0x6402d6fa
mov dword [ebp - 0x21c], 0
jmp 0x1003244f
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x1003246b
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x1b0], 4
jmp 0x10032442
mov dword [ebp - 0x208], 0xffffffe9
jmp 0x10032484
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x17
jg 0x1003292c
mov dword [ebp - 0x128], 0x8bb4
mov dword [ebp - 0xc68], 0xffffffff
mov dword [ebp - 0x1f8], 0xa42bbd4a
mov dword [ebp - 0xdc], 3
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x304], 0x23e6
mov dword [ebp - 0x358], 0
jmp 0x100324e3
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x358], 2
jge 0x100324ff
mov eax, dword [ebp - 0x358]
mov dword [ebp + eax*4 - 0xcac], 0x413e458c
jmp 0x100324d6
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x128], 0
jne 0x1003252c
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
jne 0x1003252c
and dword [ebp - 0xb78], 0
jmp 0x10032536
mov dword [ebp - 0xb78], 1
mov eax, dword [ebp - 0x128]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xcac]
imul ecx, dword [ebp - 0xc68]
sub eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1b0]
jl 0x1003256d
mov dword [ebp - 0xb70], 1
jmp 0x10032574
and dword [ebp - 0xb70], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0xb70], eax
jg 0x10032595
mov dword [ebp - 0xc6c], 1
jmp 0x1003259c
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xf10], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1b0], 0xfffffffb
jg 0x100325c4
mov dword [ebp - 0xb80], 1
jmp 0x100325cb
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb78]
add eax, dword [ebp - 0xb80]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0x1b0]
cmp eax, 0x1cd4
je 0x100325f7
mov dword [ebp - 0xb88], 1
jmp 0x100325fe
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xb88], eax
jne 0x10032628
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcac], 0
je 0x10032628
mov dword [ebp - 0xc70], 1
jmp 0x1003262f
and dword [ebp - 0xc70], 0
cmp dword [ebp - 0x224], 0x4485e09b
je 0x10032647
mov dword [ebp - 0xbb4], 1
jmp 0x1003264e
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xbb4], eax
jle 0x10032665
mov dword [ebp - 0xbbc], 1
jmp 0x1003266c
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0x128]
neg eax
imul eax, dword [ebp - 0xbbc]
cmp eax, 0xb06f8616
je 0x1003268e
mov dword [ebp - 0xbc4], 1
jmp 0x10032695
and dword [ebp - 0xbc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1b0]
cmp dword [ebp - 0xbc4], eax
jne 0x100326b6
mov dword [ebp - 0xc78], 1
jmp 0x100326bd
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xf20], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x208], eax
jne 0x100326ec
mov dword [ebp - 0xbcc], 1
jmp 0x100326f3
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0xbcc]
sub eax, dword [ebp - 0xdc]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1b0]
test eax, eax
je 0x10032723
cmp dword [ebp - 0x54], 0
je 0x10032723
mov dword [ebp - 0xbd4], 1
jmp 0x1003272a
and dword [ebp - 0xbd4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbd4]
sub ecx, dword [ebp + eax - 0x1b0]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1b0], ecx
mov dword [ebp - 0x54], 1
jmp 0x1003275a
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x10032927
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x1b0], 0
je 0x100327ab
mov dword [ebp - 0x1f8], 0
jmp 0x1003278a
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x100327a6
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x1b0], 0xfffffffd
jmp 0x1003277d
jmp 0x10032906
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0xdc], 0
jmp 0x100327ce
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jg 0x10032906
mov dword [ebp - 0x304], 1
jmp 0x100327f4
mov eax, dword [ebp - 0x304]
dec eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 0
jl 0x100328e7
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x3bc]
cmp dword [ebp + eax*4 - 0x1b0], ecx
jle 0x1003281f
mov dword [ebp - 0x7b4], 1
jmp 0x10032826
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x7b4], 0xffffffff
jb 0x1003283b
mov dword [ebp - 0x428], 1
jmp 0x10032842
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0xffffffff
jg 0x10032857
mov dword [ebp - 0x7ac], 1
jmp 0x1003285e
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x7ac], eax
jge 0x10032878
mov dword [ebp - 0x430], 1
jmp 0x1003287f
and dword [ebp - 0x430], 0
imul eax, dword [ebp - 0x430], 0
cmp eax, dword [ebp - 0x3bc]
je 0x1003289a
mov dword [ebp - 0x7e0], 1
jmp 0x100328a1
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x3bc]
imul ecx, dword [ebp - 0x7e0]
cmp dword [ebp + eax*4 - 0x1b0], ecx
jg 0x100328c9
mov dword [ebp - 0x438], 1
jmp 0x100328d0
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
neg eax
mov ecx, dword [ebp - 0x54]
mov dword [ebp + ecx*4 - 0xcac], eax
jmp 0x100327e7
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x10032901
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
jmp 0x100327c1
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x10032922
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
jmp 0x10032753
jmp 0x10032477
mov eax, dword [ebp - 0x7e8]
dec eax
mov dword [ebp - 0x7e8], eax
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
mov dword [eax], 0xffffffee
jmp 0x10032972
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x440]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
cmp dword [eax], 0x12
jle 0x10033374
mov dword [ebp - 0x7f0], 0xf251d69f
push 3
lea ecx, [ebp - 0x1048]
call fcn.10026565
mov byte [ebp - 4], 2
mov dword [ebp - 0x84], 0
jmp 0x100329bc
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x100329d8
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x111c], 0
jmp 0x100329af
mov dword [ebp - 0x84], 0
jmp 0x100329f1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10032a13
push dword [ebp - 0x84]
lea ecx, [ebp - 0x1048]
call fcn.100265d2
mov dword [eax], 1
jmp 0x100329e4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x111c]
mov dword [ebp - 0x7f0], eax
mov dword [ebp - 0x7f0], 0x37b1891f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1048]
call fcn.100265cd
mov dword [ebp - 0x18c], 0xfffffff7
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x800], 0
mov dword [ebp - 0x460], 0x7ed6f186
mov dword [ebp - 0x3c4], 0x5a8b060d
mov dword [ebp - 0x458], 0xdde9ab5c
mov dword [ebp - 0x200], 0xc
jmp 0x10032a94
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xfffffffa
jne 0x10032ab7
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x10032ab5
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x10032a87
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x200], eax
je 0x10032add
mov dword [ebp - 0x448], 1
jmp 0x10032ae4
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 0x448]
lea eax, [ecx + eax + 0x176df7e4]
cmp dword [ebp - 0x460], eax
jne 0x10032b0b
mov dword [ebp - 0x7f8], 1
jmp 0x10032b12
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x800]
cmp eax, dword [ebp - 0x7f8]
jne 0x10032b2c
mov dword [ebp - 0x450], 1
jmp 0x10032b33
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x93c1
jne 0x10032b4d
or eax, 0xffffffff
jne 0x10032b4d
and dword [ebp - 0xc80], 0
jmp 0x10032b57
mov dword [ebp - 0xc80], 1
mov eax, dword [ebp - 0x800]
add eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x458]
jl 0x10032b77
mov dword [ebp - 0x808], 1
jmp 0x10032b7e
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x460], eax
push 3
lea ecx, [ebp - 0xdd0]
call fcn.10026565
mov byte [ebp - 4], 3
mov dword [ebp - 0xc90], 0xeaba4a2c
mov dword [ebp - 0x22c], 0x24a8c6a5
mov dword [ebp - 0x22c], 7
jmp 0x10032bc8
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x1a
jle 0x10032da3
push 2
lea ecx, [ebp - 0xc1c]
call fcn.10026565
mov byte [ebp - 4], 4
mov dword [ebp - 0xa0], 0
jmp 0x10032bff
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x10032c1b
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x1058], 0xffffffff
jmp 0x10032bf2
mov dword [ebp - 0xa0], 0
jmp 0x10032c34
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x10032c53
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xc1c]
call fcn.100265d2
and dword [eax], 0
jmp 0x10032c27
push 1
lea ecx, [ebp - 0xc1c]
call fcn.100265d2
mov dword [eax], 2
jmp 0x10032c8c
push 1
lea ecx, [ebp - 0xc1c]
call fcn.100265d2
mov dword [ebp - 0x810], eax
mov eax, dword [ebp - 0x810]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x810]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xc1c]
call fcn.100265d2
cmp dword [eax], 0
jl 0x10032d6f
mov dword [ebp - 0x234], 0xfffffffd
push 1
lea ecx, [ebp - 0xe78]
call fcn.10026565
mov byte [ebp - 4], 5
mov dword [ebp - 0x33c], 0
jmp 0x10032cd6
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x10032cf8
push dword [ebp - 0x33c]
lea ecx, [ebp - 0xe78]
call fcn.100265d2
mov dword [eax], 8
jmp 0x10032cc9
mov dword [ebp - 0x234], 2
jmp 0x10032d11
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x10032d5b
push 1
lea ecx, [ebp - 0xc1c]
call fcn.100265d2
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x1058]
push 0
lea ecx, [ebp - 0xe78]
call fcn.100265d2
mov dword [eax], esi
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10032d59
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
jmp 0x10032d04
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe78]
call fcn.100265cd
jmp 0x10032c68
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1058], 0
je 0x10032d8f
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc1c]
call fcn.100265cd
jmp 0x10032da3
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc1c]
call fcn.100265cd
jmp 0x10032bbb
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10032dd5
push 0
push 0x1b43
push 0x83b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xa8], 0
jmp 0x10032df8
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x10032e14
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x354], 0x3fa75c19
jmp 0x10032deb
mov dword [ebp - 0xf30], 0x28c176b0
mov dword [ebp - 0xf38], 0xfffffffb
mov dword [ebp - 0xf40], 0x2b165808
mov dword [ebp - 0x30c], 0xfffffff9
push 2
lea ecx, [ebp - 0x1068]
call fcn.10026565
mov byte [ebp - 4], 6
mov dword [ebp - 0x468], 0x57863718
mov dword [ebp - 0x74], 0
jmp 0x10032e67
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10032e7d
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x1158], 0xfffffffb
jmp 0x10032e60
mov dword [ebp - 0x74], 0
jmp 0x10032e8d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10032ea9
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1068]
call fcn.100265d2
mov dword [eax], 0xfffffffa
jmp 0x10032e86
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x30c], 0
jmp 0x10032ecf
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0x12
jl 0x10032ef4
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10032ef2
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x10032ec2
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x1068]
call fcn.100265cd
mov dword [ebp - 0xa8], 0
jmp 0x10032f1c
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10032f3e
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xdd0]
call fcn.100265d2
mov dword [eax], 0x93dd61fb
jmp 0x10032f0f
mov dword [ebp - 0xf48], 5
mov dword [ebp - 0xf50], 0x94964a53
mov dword [ebp - 0xf58], 0xffffffff
mov dword [ebp - 0xf60], 1
mov dword [ebp - 0xf68], 0x849f845d
mov dword [ebp - 0x818], 0x3050
mov dword [ebp - 0xf70], 0x30385d06
mov dword [ebp - 0x94], 0
jmp 0x10032f9d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10032fb9
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1170], 9
jmp 0x10032f90
mov dword [ebp - 0x94], 0
jmp 0x10032fd2
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10032fee
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x1164], 7
jmp 0x10032fc5
mov eax, dword [ebp - 0x818]
inc eax
mov dword [ebp - 0x818], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x354], 0
jmp 0x10033029
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x354]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x354], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x354], 0xfffffff1
jl 0x10033293
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x130], 0x10
jmp 0x10033060
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x10
jge 0x1003307f
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
cmp dword [eax], 0
je 0x1003307d
jmp 0x1003307f
jmp 0x10033053
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0xf78], eax
mov esi, dword [ebp - 0x130]
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
cmp esi, dword [eax]
jge 0x100330b5
mov dword [ebp - 0x480], 1
jmp 0x100330bc
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0xfcc013ce
jae 0x100330e0
mov dword [ebp - 0x470], 1
jmp 0x100330e7
and dword [ebp - 0x470], 0
imul eax, dword [ebp - 0x470], 0xfff7
cmp eax, 0x279e56e
je 0x10033104
mov dword [ebp - 0x820], 1
jmp 0x1003310b
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x478], eax
push 2
lea ecx, [ebp - 0xdd0]
call fcn.100265d2
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
mov ecx, dword [ebp - 0x478]
cmp ecx, dword [eax]
jle 0x10033158
cmp dword [ebp - 0x18c], 0
jne 0x10033166
or eax, 0xffffffff
jne 0x10033166
and dword [ebp - 0x828], 0
jmp 0x10033170
mov dword [ebp - 0x828], 1
mov eax, dword [ebp - 0x828]
add eax, 0x9297
cmp dword [ebp - 0x480], eax
jne 0x1003318f
mov dword [ebp - 0x830], 1
jmp 0x10033196
and dword [ebp - 0x830], 0
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
mov ecx, dword [ebp - 0x830]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x354]
jl 0x100331c7
mov dword [ebp - 0x488], 1
jmp 0x100331ce
and dword [ebp - 0x488], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp dword [ebp - 0x488], eax
jne 0x100331f8
cmp dword [ebp - 0x18c], 0
je 0x100331f8
mov dword [ebp - 0x838], 1
jmp 0x100331ff
and dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 1
jl 0x10033214
mov dword [ebp - 0xc88], 1
jmp 0x1003321b
and dword [ebp - 0xc88], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0xf80], eax
mov esi, dword [ebp - 0xc90]
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
cmp esi, dword [eax]
jl 0x10033251
mov dword [ebp - 0x490], 1
jmp 0x10033258
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xc98]
cmp dword [ebp - 0x490], eax
jge 0x1003327b
cmp dword [ebp - 0x1bc], 0
je 0x1003327b
mov dword [ebp - 0x840], 1
jmp 0x10033282
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x130], eax
jmp 0x1003300e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x354], 0x31234912
jne 0x100332e4
push 0
lea ecx, [ebp - 0x40c]
call fcn.100265d2
cmp dword [eax], 0
je 0x100332c8
xor eax, eax
je 0x100332c8
mov dword [ebp - 0x498], 1
jmp 0x100332cf
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0xca5e
jl 0x100332e4
and dword [ebp - 0x848], 0
jmp 0x100332ee
mov dword [ebp - 0x848], 1
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0xfffffff7
jg 0x10033318
mov eax, 0x700c0d3
test eax, eax
je 0x10033318
mov dword [ebp - 0x4a0], 1
jmp 0x1003331f
and dword [ebp - 0x4a0], 0
imul eax, dword [ebp - 0x4a0], 0xe8f5
cmp dword [ebp - 0x1bc], eax
jl 0x1003333d
mov dword [ebp - 0x850], 1
jmp 0x10033344
and dword [ebp - 0x850], 0
push 2
lea ecx, [ebp - 0xdd0]
call fcn.100265d2
mov ecx, dword [ebp - 0x850]
imul ecx, dword [eax]
mov dword [ebp - 0x1bc], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xdd0]
call fcn.100265cd
jmp 0x1003294e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.100265cd
push 1
lea ecx, [ebp - 0x41c]
call fcn.10026565
mov dword [ebp - 4], 7
mov dword [ebp - 0x1c4], 0x3f6a0837
mov dword [ebp - 0x23c], 0
jmp 0x100333ba
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x100333dc
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x41c]
call fcn.100265d2
mov dword [eax], 0x97f6af11
jmp 0x100333ad
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
mov dword [eax], 0xffffffee
jmp 0x10033415
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4a8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
cmp dword [eax], 0x12
jle 0x10033843
mov dword [ebp - 0x1a8], 0xfffffff7
push 3
lea ecx, [ebp - 0xe0c]
call fcn.10026565
mov byte [ebp - 4], 8
mov dword [ebp - 0xcc0], 0xeaba4a2c
mov dword [ebp - 0xcc8], 0
mov dword [ebp - 0xb4], 0
jmp 0x10033473
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1003348f
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x360], 0x3fa75c19
jmp 0x10033466
mov dword [ebp - 0xb4], 0
jmp 0x100334a8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x100334ca
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xe0c]
call fcn.100265d2
mov dword [eax], 0x93dd61fb
jmp 0x1003349b
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x360], 0
jmp 0x100334f8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x360]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x360], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x360], 0xfffffff1
jl 0x10033762
mov dword [ebp - 0x138], 0xffffffff
mov dword [ebp - 0x138], 0x10
jmp 0x1003352f
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x10
jge 0x1003354e
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
cmp dword [eax], 0
je 0x1003354c
jmp 0x1003354e
jmp 0x10033522
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x360]
mov dword [ebp - 0xf88], eax
mov esi, dword [ebp - 0x138]
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
cmp esi, dword [eax]
jge 0x10033584
mov dword [ebp - 0x868], 1
jmp 0x1003358b
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xfcc013ce
jae 0x100335af
mov dword [ebp - 0x858], 1
jmp 0x100335b6
and dword [ebp - 0x858], 0
imul eax, dword [ebp - 0x858], 0xfff7
cmp eax, 0x279e56e
je 0x100335d3
mov dword [ebp - 0x4b0], 1
jmp 0x100335da
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x860], eax
push 2
lea ecx, [ebp - 0xe0c]
call fcn.100265d2
mov ecx, dword [ebp - 0x860]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
mov ecx, dword [ebp - 0x860]
cmp ecx, dword [eax]
jle 0x10033627
cmp dword [ebp - 0x1a8], 0
jne 0x10033635
or eax, 0xffffffff
jne 0x10033635
and dword [ebp - 0x4b8], 0
jmp 0x1003363f
mov dword [ebp - 0x4b8], 1
mov eax, dword [ebp - 0x4b8]
add eax, 0x9297
cmp dword [ebp - 0x868], eax
jne 0x1003365e
mov dword [ebp - 0x4c0], 1
jmp 0x10033665
and dword [ebp - 0x4c0], 0
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
mov ecx, dword [ebp - 0x4c0]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x360]
jl 0x10033696
mov dword [ebp - 0x870], 1
jmp 0x1003369d
and dword [ebp - 0x870], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x360]
cmp dword [ebp - 0x870], eax
jne 0x100336c7
cmp dword [ebp - 0x1a8], 0
je 0x100336c7
mov dword [ebp - 0x4c8], 1
jmp 0x100336ce
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 1
jl 0x100336e3
mov dword [ebp - 0xca0], 1
jmp 0x100336ea
and dword [ebp - 0xca0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x360]
mov dword [ebp - 0xf90], eax
mov esi, dword [ebp - 0xcc0]
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
cmp esi, dword [eax]
jl 0x10033720
mov dword [ebp - 0x878], 1
jmp 0x10033727
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0xcc8]
cmp dword [ebp - 0x878], eax
jge 0x1003374a
cmp dword [ebp - 0x1c4], 0
je 0x1003374a
mov dword [ebp - 0x4d0], 1
jmp 0x10033751
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x138], eax
jmp 0x100334dd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x360], 0x31234912
jne 0x100337b3
push 0
lea ecx, [ebp - 0x41c]
call fcn.100265d2
cmp dword [eax], 0
je 0x10033797
xor eax, eax
je 0x10033797
mov dword [ebp - 0x880], 1
jmp 0x1003379e
and dword [ebp - 0x880], 0
cmp dword [ebp - 0x880], 0xca5e
jl 0x100337b3
and dword [ebp - 0x4d8], 0
jmp 0x100337bd
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xfffffff7
jg 0x100337e7
mov eax, 0x700c0d3
test eax, eax
je 0x100337e7
mov dword [ebp - 0x888], 1
jmp 0x100337ee
and dword [ebp - 0x888], 0
imul eax, dword [ebp - 0x888], 0xe8f5
cmp dword [ebp - 0x1c4], eax
jl 0x1003380c
mov dword [ebp - 0x4e0], 1
jmp 0x10033813
and dword [ebp - 0x4e0], 0
push 2
lea ecx, [ebp - 0xe0c]
call fcn.100265d2
mov ecx, dword [ebp - 0x4e0]
imul ecx, dword [eax]
mov dword [ebp - 0x1c4], ecx
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xe0c]
call fcn.100265cd
jmp 0x100333f1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x41c]
call fcn.100265cd
push 1
lea ecx, [ebp - 0x3a0]
call fcn.10026565
mov dword [ebp - 4], 9
mov dword [ebp - 0x204], 0x3f6a0837
mov dword [ebp - 0x2ac], 0
jmp 0x10033889
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jge 0x100338ab
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
mov dword [eax], 0x97f6af11
jmp 0x1003387c
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
mov dword [eax], 0xffffffee
jmp 0x100338e4
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x890]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x890]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
cmp dword [eax], 0x12
jle 0x10033d12
mov dword [ebp - 0x170], 0xfffffff7
push 3
lea ecx, [ebp - 0xde8]
call fcn.10026565
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xcd8], 0xeaba4a2c
mov dword [ebp - 0xce0], 0
mov dword [ebp - 0x9c], 0
jmp 0x10033942
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1003395e
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x36c], 0x3fa75c19
jmp 0x10033935
mov dword [ebp - 0x9c], 0
jmp 0x10033977
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x10033999
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xde8]
call fcn.100265d2
mov dword [eax], 0x93dd61fb
jmp 0x1003396a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x36c], 0
jmp 0x100339c7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x36c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x36c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0xfffffff1
jl 0x10033c31
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x140], 0x10
jmp 0x100339fe
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x10
jge 0x10033a1d
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
cmp dword [eax], 0
je 0x10033a1b
jmp 0x10033a1d
jmp 0x100339f1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
mov dword [ebp - 0xf98], eax
mov esi, dword [ebp - 0x140]
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
cmp esi, dword [eax]
jge 0x10033a53
mov dword [ebp - 0x4f8], 1
jmp 0x10033a5a
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0xfcc013ce
jae 0x10033a7e
mov dword [ebp - 0x4e8], 1
jmp 0x10033a85
and dword [ebp - 0x4e8], 0
imul eax, dword [ebp - 0x4e8], 0xfff7
cmp eax, 0x279e56e
je 0x10033aa2
mov dword [ebp - 0x898], 1
jmp 0x10033aa9
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x4f0], eax
push 2
lea ecx, [ebp - 0xde8]
call fcn.100265d2
mov ecx, dword [ebp - 0x4f0]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
mov ecx, dword [ebp - 0x4f0]
cmp ecx, dword [eax]
jle 0x10033af6
cmp dword [ebp - 0x170], 0
jne 0x10033b04
or eax, 0xffffffff
jne 0x10033b04
and dword [ebp - 0x8a0], 0
jmp 0x10033b0e
mov dword [ebp - 0x8a0], 1
mov eax, dword [ebp - 0x8a0]
add eax, 0x9297
cmp dword [ebp - 0x4f8], eax
jne 0x10033b2d
mov dword [ebp - 0x8a8], 1
jmp 0x10033b34
and dword [ebp - 0x8a8], 0
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
mov ecx, dword [ebp - 0x8a8]
imul ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x36c]
jl 0x10033b65
mov dword [ebp - 0x500], 1
jmp 0x10033b6c
and dword [ebp - 0x500], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
cmp dword [ebp - 0x500], eax
jne 0x10033b96
cmp dword [ebp - 0x170], 0
je 0x10033b96
mov dword [ebp - 0x8b0], 1
jmp 0x10033b9d
and dword [ebp - 0x8b0], 0
cmp dword [ebp - 0x8b0], 1
jl 0x10033bb2
mov dword [ebp - 0xcd0], 1
jmp 0x10033bb9
and dword [ebp - 0xcd0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x36c]
mov dword [ebp - 0xfa0], eax
mov esi, dword [ebp - 0xcd8]
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
cmp esi, dword [eax]
jl 0x10033bef
mov dword [ebp - 0x508], 1
jmp 0x10033bf6
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0xce0]
cmp dword [ebp - 0x508], eax
jge 0x10033c19
cmp dword [ebp - 0x204], 0
je 0x10033c19
mov dword [ebp - 0x8b8], 1
jmp 0x10033c20
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x140], eax
jmp 0x100339ac
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0x31234912
jne 0x10033c82
push 0
lea ecx, [ebp - 0x3a0]
call fcn.100265d2
cmp dword [eax], 0
je 0x10033c66
xor eax, eax
je 0x10033c66
mov dword [ebp - 0x510], 1
jmp 0x10033c6d
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xca5e
jl 0x10033c82
and dword [ebp - 0x8c0], 0
jmp 0x10033c8c
mov dword [ebp - 0x8c0], 1
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffff7
jg 0x10033cb6
mov eax, 0x700c0d3
test eax, eax
je 0x10033cb6
mov dword [ebp - 0x518], 1
jmp 0x10033cbd
and dword [ebp - 0x518], 0
imul eax, dword [ebp - 0x518], 0xe8f5
cmp dword [ebp - 0x204], eax
jl 0x10033cdb
mov dword [ebp - 0x8c8], 1
jmp 0x10033ce2
and dword [ebp - 0x8c8], 0
push 2
lea ecx, [ebp - 0xde8]
call fcn.100265d2
mov ecx, dword [ebp - 0x8c8]
imul ecx, dword [eax]
mov dword [ebp - 0x204], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xde8]
call fcn.100265cd
jmp 0x100338c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.100265cd
mov dword [ebp - 0x244], 7
mov dword [ebp - 0x244], 0
jmp 0x10033d44
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xfffffffb
je 0x10033eba
push 2
lea ecx, [ebp - 0xd38]
call fcn.10026565
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xed4], 0x8d13
mov dword [ebp - 0xed0], 0x8d13
mov dword [ebp - 0xecc], 0x8d13
mov dword [ebp - 0xec8], 0x8d13
mov dword [ebp - 0xce8], 0xa37bb008
mov dword [ebp - 0x2b0], 0
jmp 0x10033db0
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x10033dd2
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xd38]
call fcn.100265d2
mov dword [eax], 0xa18885c6
jmp 0x10033da3
push 1
lea ecx, [ebp - 0xd38]
call fcn.100265d2
and dword [eax], 0
jmp 0x10033e08
push 1
lea ecx, [ebp - 0xd38]
call fcn.100265d2
mov dword [ebp - 0x520], eax
mov eax, dword [ebp - 0x520]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x520]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xd38]
call fcn.100265d2
cmp dword [eax], 0x14
jle 0x10033ea6
mov dword [ebp - 0x174], 0x23d1bca9
mov dword [ebp - 0x174], 3
jmp 0x10033e41
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jl 0x10033e96
mov dword [ebp - 0x24c], 0xfffffff6
mov dword [ebp - 0x24c], 3
jmp 0x10033e6d
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x10033e82
mov dword [ebp - 0xce8], 0x4b03e386
jmp 0x10033e60
mov eax, dword [ebp - 0x174]
cmp dword [ebp + eax*4 - 0xed4], 0
je 0x10033e94
jmp 0x10033e34
jmp 0x10033e34
cmp dword [ebp - 0x174], 0
je 0x10033ea1
jmp 0x10033ea6
jmp 0x10033de4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd38]
call fcn.100265cd
jmp 0x10033d37
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x2b8], 0
jmp 0x10033edd
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 1
jge 0x10033ef9
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x1ec], 0xfffffffa
jmp 0x10033ed0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1ec], 0
jmp 0x10033f27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0xffffffe4
jl 0x10033f74
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x10033f58
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov byte [ebp - 0x117], 0
movzx eax, byte [ebp - 0x117]
test eax, eax
je 0x10033f72
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10033f0c
mov dword [ebp - 0x254], 0x17
jmp 0x10033f8d
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xffffffed
jne 0x10034085
mov dword [ebp - 0x2c0], 0
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x10033fc7
push 0
push 0
push 0x1200
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x2c0], 0xffffffe4
jmp 0x10033fe0
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xffffffe6
jle 0x10034080
mov dword [ebp - 0x25c], 0
jmp 0x10034006
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x10034022
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x1cc], 0xffffffff
jmp 0x10033ff9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1cc], 0
jmp 0x10034050
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1cc], 0
jg 0x1003407b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
cmp dword [ebp + eax*4 - 0x1ec], 0
je 0x10034079
jmp 0x1003407b
jmp 0x10034035
jmp 0x10033fd3
jmp 0x10033f80
mov dword [ebp - 0x2c8], 7
mov dword [ebp - 0x2c8], 0
jmp 0x100340a8
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xfffffffb
je 0x1003421e
push 2
lea ecx, [ebp - 0xd48]
call fcn.10026565
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xee4], 0x8d13
mov dword [ebp - 0xee0], 0x8d13
mov dword [ebp - 0xedc], 0x8d13
mov dword [ebp - 0xed8], 0x8d13
mov dword [ebp - 0xcf0], 0xa37bb008
mov dword [ebp - 0x264], 0
jmp 0x10034114
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x10034136
push dword [ebp - 0x264]
lea ecx, [ebp - 0xd48]
call fcn.100265d2
mov dword [eax], 0xa18885c6
jmp 0x10034107
push 1
lea ecx, [ebp - 0xd48]
call fcn.100265d2
and dword [eax], 0
jmp 0x1003416c
push 1
lea ecx, [ebp - 0xd48]
call fcn.100265d2
mov dword [ebp - 0x8d0], eax
mov eax, dword [ebp - 0x8d0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8d0]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xd48]
call fcn.100265d2
cmp dword [eax], 0x14
jle 0x1003420a
mov dword [ebp - 0x19c], 0x23d1bca9
mov dword [ebp - 0x19c], 3
jmp 0x100341a5
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jl 0x100341fa
mov dword [ebp - 0x2d0], 0xfffffff6
mov dword [ebp - 0x2d0], 3
jmp 0x100341d1
mov eax, dword [ebp - 0x2d0]
dec eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jl 0x100341e6
mov dword [ebp - 0xcf0], 0x4b03e386
jmp 0x100341c4
mov eax, dword [ebp - 0x19c]
cmp dword [ebp + eax*4 - 0xee4], 0
je 0x100341f8
jmp 0x10034198
jmp 0x10034198
cmp dword [ebp - 0x19c], 0
je 0x10034205
jmp 0x1003420a
jmp 0x10034148
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd48]
call fcn.100265cd
jmp 0x1003409b
push 3
lea ecx, [ebp - 0xeb4]
call fcn.10026565
mov dword [ebp - 4], 0xd
mov dword [ebp - 0xcf8], 0x53aa9ac7
mov dword [ebp - 0x26c], 0
jmp 0x10034255
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x10034274
push dword [ebp - 0x26c]
lea ecx, [ebp - 0xeb4]
call fcn.100265d2
or dword [eax], 0xffffffff
jmp 0x10034248
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1003429b
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
push 1
lea ecx, [ebp - 0xeb4]
call fcn.100265d2
mov eax, dword [eax]
mov dword [ebp - 0xcf8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb4]
call fcn.100265cd
mov dword [ebp - 0x2d8], 7
mov dword [ebp - 0x2d8], 0
jmp 0x100342e2
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0xfffffffb
je 0x10034458
push 2
lea ecx, [ebp - 0xd58]
call fcn.10026565
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xec4], 0x8d13
mov dword [ebp - 0xec0], 0x8d13
mov dword [ebp - 0xebc], 0x8d13
mov dword [ebp - 0xeb8], 0x8d13
mov dword [ebp - 0xd00], 0xa37bb008
mov dword [ebp - 0x274], 0
jmp 0x1003434e
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x10034370
push dword [ebp - 0x274]
lea ecx, [ebp - 0xd58]
call fcn.100265d2
mov dword [eax], 0xa18885c6
jmp 0x10034341
push 1
lea ecx, [ebp - 0xd58]
call fcn.100265d2
and dword [eax], 0
jmp 0x100343a6
push 1
lea ecx, [ebp - 0xd58]
call fcn.100265d2
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x528]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xd58]
call fcn.100265d2
cmp dword [eax], 0x14
jle 0x10034444
mov dword [ebp - 0x17c], 0x23d1bca9
mov dword [ebp - 0x17c], 3
jmp 0x100343df
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x10034434
mov dword [ebp - 0x2e0], 0xfffffff6
mov dword [ebp - 0x2e0], 3
jmp 0x1003440b
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jl 0x10034420
mov dword [ebp - 0xd00], 0x4b03e386
jmp 0x100343fe
mov eax, dword [ebp - 0x17c]
cmp dword [ebp + eax*4 - 0xec4], 0
je 0x10034432
jmp 0x100343d2
jmp 0x100343d2
cmp dword [ebp - 0x17c], 0
je 0x1003443f
jmp 0x10034444
jmp 0x10034382
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd58]
call fcn.100265cd
jmp 0x100342d5
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x27c], 0
jmp 0x1003447b
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 1
jge 0x10034497
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0x1fc], 0xfffffffa
jmp 0x1003446e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1fc], 0
jmp 0x100344c5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1fc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1fc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1fc], 0xffffffe4
jl 0x10034512
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x100344f6
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x10034510
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x100344aa
mov dword [ebp - 0x2e8], 0x17
jmp 0x1003452b
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0xffffffed
jne 0x10034623
mov dword [ebp - 0x284], 0
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10034565
push 0
push 0
push 0x1200
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x284], 0xffffffe4
jmp 0x1003457e
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0xffffffe6
jle 0x1003461e
mov dword [ebp - 0x2f0], 0
jmp 0x100345a4
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jge 0x100345c0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x1d4], 0xffffffff
jmp 0x10034597
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1d4], 0
jmp 0x100345ee
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1d4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d4], 0
jg 0x10034619
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d4]
cmp dword [ebp + eax*4 - 0x1fc], 0
je 0x10034617
jmp 0x10034619
jmp 0x100345d3
jmp 0x10034571
jmp 0x1003451e
push 3
lea ecx, [ebp - 0xea8]
call fcn.10026565
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xd08], 0x53aa9ac7
mov dword [ebp - 0x28c], 0
jmp 0x1003465a
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 3
jge 0x10034679
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xea8]
call fcn.100265d2
or dword [eax], 0xffffffff
jmp 0x1003464d
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x100346a0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
push 1
lea ecx, [ebp - 0xea8]
call fcn.100265d2
mov eax, dword [eax]
mov dword [ebp - 0xd08], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.100265cd
mov dword [ebp - 0xbf4], 0xe8c9
mov dword [ebp - 0xbf0], 0xe8c9
mov dword [ebp - 0xbec], 0xe8c9
mov dword [ebp - 0xbe8], 0xe8c9
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x8d8], 0x5077045b
mov dword [ebp - 0x3cc], 0x12d29ed7
push 4
lea ecx, [ebp - 0xc64]
call fcn.10026565
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x194], 0xfffffff6
mov dword [ebp - 0xd10], 0xb9117a54
mov dword [ebp - 0x2f8], 0
jmp 0x1003474f
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 4
jge 0x10034771
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0xc64]
call fcn.100265d2
mov dword [eax], 0xe426067
jmp 0x10034742
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbf4], 0
je 0x1003494e
cmp dword [ebp - 0x3c], 0xffffffff
jl 0x10034797
mov dword [ebp - 0x8e0], 1
jmp 0x1003479e
and dword [ebp - 0x8e0], 0
mov dword [ebp - 0x8d8], 9
mov eax, dword [ebp - 0x8d8]
cmp dword [ebp - 0x3c], eax
jle 0x100347bf
mov dword [ebp - 0x530], 1
jmp 0x100347c6
and dword [ebp - 0x530], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbf4]
mov ecx, dword [ebp - 0x530]
lea eax, [ecx + eax - 0xbc22]
mov ecx, dword [ebp - 0x8e0]
sub ecx, eax
cmp ecx, 0x828451d7
jb 0x100347fc
mov dword [ebp - 0x538], 1
jmp 0x10034803
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x538], eax
je 0x1003481a
mov dword [ebp - 0x8e8], 1
jmp 0x10034821
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0xf1fcc103
jb 0x10034839
mov dword [ebp - 0x540], 1
jmp 0x10034840
and dword [ebp - 0x540], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbf4]
cmp dword [ebp - 0x540], eax
je 0x10034867
mov eax, 0xc4433ac2
test eax, eax
jne 0x10034867
and dword [ebp - 0x8f0], 0
jmp 0x10034871
mov dword [ebp - 0x8f0], 1
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0x1305
je 0x10034895
mov dword [ebp - 0x548], 1
jmp 0x1003489c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x548], eax
jl 0x100348b3
mov dword [ebp - 0x8f8], 1
jmp 0x100348ba
and dword [ebp - 0x8f8], 0
imul esi, dword [ebp - 0x8f8], 0x907c
push 3
lea ecx, [ebp - 0xc64]
call fcn.100265d2
cmp esi, dword [eax]
je 0x100348e1
mov dword [ebp - 0x550], 1
jmp 0x100348e8
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 2
jl 0x100348fd
mov dword [ebp - 0x900], 1
jmp 0x10034904
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x10034924
xor eax, eax
inc eax
je 0x10034924
mov dword [ebp - 0x558], 1
jmp 0x1003492b
and dword [ebp - 0x558], 0
push 3
lea ecx, [ebp - 0xc64]
call fcn.100265d2
mov ecx, dword [ebp - 0x558]
cmp ecx, dword [eax]
je 0x1003494e
mov dword [ebp - 0x908], 1
jmp 0x10034955
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x194], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbf4], 0xffffffff
jg 0x1003497d
mov dword [ebp - 0x560], 1
jmp 0x10034984
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
sub eax, dword [ebp - 0xd10]
je 0x100349bd
mov dword [ebp - 0x64], 0
jmp 0x100349a2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x100349b8
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xbf4], 0xfff8
jmp 0x1003499b
jmp 0x10034ce9
mov dword [ebp - 0xd20], 0xa1ed
mov dword [ebp - 0x3d4], 0xde8b3ec6
mov dword [ebp - 0x930], 0xfffffff6
mov dword [ebp - 0x294], 0
jmp 0x100349f4
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jge 0x10034a10
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xd18], 0xffffffff
jmp 0x100349e7
mov dword [ebp - 0x3c], 0
jmp 0x10034a20
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1e
jne 0x10034ad2
mov dword [ebp - 0x300], 0
jmp 0x10034a43
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x10034a5f
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0x10c8], 0
jmp 0x10034a36
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c8], 0xfffc
jne 0x10034a7e
mov dword [ebp - 0x910], 1
jmp 0x10034a85
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x194], 0
jmp 0x10034aaa
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xfffffff5
jne 0x10034acd
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x10034acb
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x10034a9d
jmp 0x10034a19
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbf4]
cmp dword [ebp - 0x3c], eax
jg 0x10034aef
mov dword [ebp - 0x568], 1
jmp 0x10034af6
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x568], eax
jge 0x10034b10
mov dword [ebp - 0x918], 1
jmp 0x10034b17
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x3cc]
sub eax, dword [ebp - 0x918]
imul eax, eax, 0x2185
mov dword [ebp - 0x570], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0xd18], ecx
cmp dword [ebp - 0x570], 0
je 0x10034b60
mov eax, 0xffff
test eax, eax
je 0x10034b60
mov dword [ebp - 0x920], 1
jmp 0x10034b67
and dword [ebp - 0x920], 0
cmp dword [ebp - 0x920], 4
jae 0x10034b7c
mov dword [ebp - 0x578], 1
jmp 0x10034b83
and dword [ebp - 0x578], 0
push 0
lea ecx, [ebp - 0xc64]
call fcn.100265d2
mov ecx, dword [ebp - 0x578]
imul ecx, dword [eax]
cmp ecx, 1
jge 0x10034baa
mov dword [ebp - 0x928], 1
jmp 0x10034bb1
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x928]
test eax, eax
jne 0x10034bda
push 1
lea ecx, [ebp - 0xc64]
call fcn.100265d2
cmp dword [eax], 0
jne 0x10034bda
and dword [ebp - 0x580], 0
jmp 0x10034be4
mov dword [ebp - 0x580], 1
mov eax, dword [ebp - 0xd20]
mov ecx, dword [ebp - 0x580]
dec ecx
dec ecx
sub eax, ecx
jne 0x10034c08
mov eax, 0x338a
test eax, eax
jne 0x10034c08
and dword [ebp - 0xd28], 0
jmp 0x10034c12
mov dword [ebp - 0xd28], 1
mov dword [ebp - 0x930], 0x3c57
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x930], eax
jne 0x10034c36
mov dword [ebp - 0x588], 1
jmp 0x10034c3d
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x588], eax
jl 0x10034c5d
mov eax, 0xc035
test eax, eax
je 0x10034c5d
mov dword [ebp - 0x938], 1
jmp 0x10034c64
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x938], eax
jl 0x10034c7b
mov dword [ebp - 0x590], 1
jmp 0x10034c82
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x590], eax
jne 0x10034cac
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xbf4], 0
je 0x10034cac
mov dword [ebp - 0x940], 1
jmp 0x10034cb3
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x940]
sub eax, 0x8d16
jne 0x10034cd6
mov eax, 0xaef40462
test eax, eax
jne 0x10034cd6
xor eax, eax
jne 0x10034cd6
and dword [ebp - 0x598], 0
jmp 0x10034ce0
mov dword [ebp - 0x598], 1
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x64], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc64]
call fcn.100265cd
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x29c], 0
jmp 0x10034d1b
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x10034d37
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1f4], 0xfffffffa
jmp 0x10034d0e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1f4], 0
jmp 0x10034d65
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1f4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1f4], 0xffffffe4
jl 0x10034db2
mov byte [ebp - 0x11b], 0
movzx eax, byte [ebp - 0x11b]
test eax, eax
je 0x10034d96
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10034db0
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10034d4a
mov dword [ebp - 0x308], 0x17
jmp 0x10034dcb
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 0xffffffed
jne 0x10034ec3
mov dword [ebp - 0x2a4], 0
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x10034e05
push 0
push 0
push 0x1200
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0x2a4], 0xffffffe4
jmp 0x10034e1e
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0xffffffe6
jle 0x10034ebe
mov dword [ebp - 0x310], 0
jmp 0x10034e44
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x10034e60
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x1dc], 0xffffffff
jmp 0x10034e37
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1dc], 0
jmp 0x10034e8e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1dc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 0
jg 0x10034eb9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp + eax*4 - 0x1f4], 0
je 0x10034eb7
jmp 0x10034eb9
jmp 0x10034e73
jmp 0x10034e11
jmp 0x10034dbe
push 3
lea ecx, [ebp - 0xe9c]
call fcn.10026565
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x950], 0xfffffff7
mov dword [ebp - 0x958], 1
mov dword [ebp - 0x5b0], 0x974edf0e
mov dword [ebp - 0x184], 0xfffffffe
mov dword [ebp - 0x970], 0xffffffff
mov dword [ebp - 0x5c8], 0xf995
mov dword [ebp - 0xc4], 0
jmp 0x10034f2c
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x10034f48
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xb94], 1
jmp 0x10034f1f
mov dword [ebp - 0xc4], 0
jmp 0x10034f61
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x10034f80
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xe9c]
call fcn.100265d2
and dword [eax], 0
jmp 0x10034f54
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
mov dword [ebp - 0xfa8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
mov dword [ebp - 0xfb0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb94], 0
je 0x10034fcb
mov eax, 0x969ac54c
test eax, eax
je 0x10034fcb
mov dword [ebp - 0x948], 1
jmp 0x10034fd2
and dword [ebp - 0x948], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x948]
add ecx, dword [ebp + eax - 0xb94]
mov dword [ebp - 0x5a0], ecx
push 0
lea ecx, [ebp - 0xe9c]
call fcn.100265d2
mov ecx, dword [ebp - 0x5a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x950], eax
cmp dword [ebp - 0x950], 7
jbe 0x10035021
mov dword [ebp - 0x5a8], 1
jmp 0x10035028
and dword [ebp - 0x5a8], 0
imul eax, dword [ebp - 0x5a8], 0x3e52
mov dword [ebp - 0x958], eax
mov eax, dword [ebp - 0x958]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x970]
cmp dword [ebp - 0x184], eax
jle 0x1003506a
mov dword [ebp - 0x960], 1
jmp 0x10035071
and dword [ebp - 0x960], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
cmp eax, dword [ebp - 0x960]
jle 0x10035092
mov dword [ebp - 0x5b8], 1
jmp 0x10035099
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x5b8], 0xeaf86f25
jb 0x100350b1
mov dword [ebp - 0x968], 1
jmp 0x100350b8
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
sub eax, 0xfff9
je 0x100350da
cmp dword [ebp - 0x5c8], 0
je 0x100350da
mov dword [ebp - 0x5c0], 1
jmp 0x100350e1
and dword [ebp - 0x5c0], 0
imul eax, dword [ebp - 0x5c0], 0xfffc
cmp eax, dword [ebp - 0x970]
jle 0x100350ff
mov dword [ebp - 0x978], 1
jmp 0x10035106
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x5c8]
imul eax, dword [ebp - 0x978]
test eax, eax
je 0x10035138
mov byte [ebp - 0x107], 0
movzx eax, byte [ebp - 0x107]
test eax, eax
je 0x10035136
push 0x1726
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
jmp 0x10035154
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x10035154
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0x184], 0
jmp 0x1003516d
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xfffffff7
je 0x10035199
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10035197
push 0x14c3
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
jmp 0x10035160
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe9c]
call fcn.100265cd
push 3
lea ecx, [ebp - 0xe3c]
call fcn.10026565
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xdbc], 0x53aa9ac7
mov dword [ebp - 0x20c], 0
jmp 0x100351df
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x100351fe
push dword [ebp - 0x20c]
lea ecx, [ebp - 0xe3c]
call fcn.100265d2
or dword [eax], 0xffffffff
jmp 0x100351d2
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x10035225
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
push 1
lea ecx, [ebp - 0xe3c]
call fcn.100265d2
mov eax, dword [eax]
mov dword [ebp - 0xdbc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe3c]
call fcn.100265cd
mov dword [ebp - 0x318], 0
jmp 0x10035262
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x1003527e
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xec], 0xffffffff
jmp 0x10035255
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xec], 0
jmp 0x100352ac
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0xfffffff8
je 0x10035674
mov dword [ebp - 0x314], 0xcfe04822
mov dword [ebp - 0x2b4], 0
jmp 0x100352e3
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 1
jge 0x100352ff
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0x9a0], 0
jmp 0x100352d6
mov dword [ebp - 0x314], 0
jmp 0x10035318
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 0
jg 0x1003566f
mov dword [ebp - 0x10], 0xededb5ca
push 4
lea ecx, [ebp - 0xc4c]
call fcn.10026565
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x2bc], 0
jmp 0x10035359
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
jge 0x1003537b
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0xc4c]
call fcn.100265d2
mov dword [eax], 0x223dec99
jmp 0x1003534c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
je 0x100353da
cmp dword [ebp - 0x10], 0
je 0x100353ad
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xec], 0
je 0x100353ad
mov dword [ebp - 0x5d0], 1
jmp 0x100353b4
and dword [ebp - 0x5d0], 0
mov eax, 0x3b6f
sub eax, dword [ebp - 0x5d0]
add eax, dword [ebp - 0x10]
jne 0x100353c8
cmp dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], 0
je 0x100353da
mov dword [ebp - 0x980], 1
jmp 0x100353e1
and dword [ebp - 0x980], 0
cmp dword [ebp - 0x980], 0x18bd8502
jl 0x100353f9
mov dword [ebp - 0x5d8], 1
jmp 0x10035400
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0xffffffff
ja 0x10035415
mov dword [ebp - 0x988], 1
jmp 0x1003541c
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x988], eax
jne 0x10035433
mov dword [ebp - 0x5e0], 1
jmp 0x1003543a
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0xffffffff
ja 0x1003544f
mov dword [ebp - 0x990], 1
jmp 0x10035456
and dword [ebp - 0x990], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
cmp dword [ebp - 0x990], eax
jne 0x10035477
mov dword [ebp - 0x5e8], 1
jmp 0x1003547e
and dword [ebp - 0x5e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec]
imul eax, dword [ebp - 0x5e8]
test eax, eax
je 0x100354a8
cmp dword [ebp - 0x10], 0
je 0x100354a8
mov dword [ebp - 0x998], 1
jmp 0x100354af
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x998]
je 0x100354c6
mov dword [ebp - 0x5f0], 1
jmp 0x100354cd
and dword [ebp - 0x5f0], 0
push 2
lea ecx, [ebp - 0xc4c]
call fcn.100265d2
mov ecx, dword [ebp - 0x5f0]
mov dword [eax], ecx
mov dword [ebp - 0x10], 0
jmp 0x100354f2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x1003565b
mov dword [ebp - 0x1a4], 8
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x10035531
push 0x835
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
mov dword [ebp - 0x1a4], 0
jmp 0x1003554a
cmp dword [ebp - 0x1a4], 0
jl 0x10035656
mov dword [ebp - 0x3dc], 0xfffffffc
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x9a0]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x10]
mov esi, dword [ebp + eax*4 - 0x9a0]
push 0
lea ecx, [ebp - 0xc4c]
call fcn.100265d2
cmp esi, dword [eax]
jne 0x10035598
mov dword [ebp - 0x5f8], 1
jmp 0x1003559f
and dword [ebp - 0x5f8], 0
mov dword [ebp - 0x3dc], 0x3038
mov eax, dword [ebp - 0x1a4]
add eax, dword [ebp - 0x5f8]
cmp dword [ebp - 0x3dc], eax
jle 0x100355c9
mov dword [ebp - 0xdc4], 1
jmp 0x100355d0
and dword [ebp - 0xdc4], 0
push 1
lea ecx, [ebp - 0xc4c]
call fcn.100265d2
cmp dword [ebp - 0x3dc], 0xdefc
je 0x100355f5
mov dword [ebp - 0x9a8], 1
jmp 0x100355fc
and dword [ebp - 0x9a8], 0
cmp dword [ebp - 0x9a8], 0x54668dac
jg 0x10035614
mov dword [ebp - 0x600], 1
jmp 0x1003561b
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x600], eax
jge 0x10035635
mov dword [ebp - 0x9b0], 1
jmp 0x1003563c
and dword [ebp - 0x9b0], 0
push 3
lea ecx, [ebp - 0xc4c]
call fcn.100265d2
mov ecx, dword [ebp - 0x9b0]
mov dword [eax], ecx
jmp 0x1003553d
jmp 0x100354eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4c]
call fcn.100265cd
jmp 0x1003530b
jmp 0x10035291
mov dword [ebp - 0xc04], 0xe8c9
mov dword [ebp - 0xc00], 0xe8c9
mov dword [ebp - 0xbfc], 0xe8c9
mov dword [ebp - 0xbf8], 0xe8c9
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x608], 0x5077045b
mov dword [ebp - 0x3e4], 0x12d29ed7
push 4
lea ecx, [ebp - 0xc28]
call fcn.10026565
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x16c], 0xfffffff6
mov dword [ebp - 0xdb8], 0xb9117a54
mov dword [ebp - 0x344], 0
jmp 0x100356ff
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 4
jge 0x10035721
push dword [ebp - 0x344]
lea ecx, [ebp - 0xc28]
call fcn.100265d2
mov dword [eax], 0xe426067
jmp 0x100356f2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc04], 0
je 0x100358fe
cmp dword [ebp - 0x44], 0xffffffff
jl 0x10035747
mov dword [ebp - 0x610], 1
jmp 0x1003574e
and dword [ebp - 0x610], 0
mov dword [ebp - 0x608], 9
mov eax, dword [ebp - 0x608]
cmp dword [ebp - 0x44], eax
jle 0x1003576f
mov dword [ebp - 0x9b8], 1
jmp 0x10035776
and dword [ebp - 0x9b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
mov ecx, dword [ebp - 0x9b8]
lea eax, [ecx + eax - 0xbc22]
mov ecx, dword [ebp - 0x610]
sub ecx, eax
cmp ecx, 0x828451d7
jb 0x100357ac
mov dword [ebp - 0x9c0], 1
jmp 0x100357b3
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x9c0], eax
je 0x100357ca
mov dword [ebp - 0x618], 1
jmp 0x100357d1
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 0xf1fcc103
jb 0x100357e9
mov dword [ebp - 0x9c8], 1
jmp 0x100357f0
and dword [ebp - 0x9c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc04]
cmp dword [ebp - 0x9c8], eax
je 0x10035817
mov eax, 0xc4433ac2
test eax, eax
jne 0x10035817
and dword [ebp - 0x620], 0
jmp 0x10035821
mov dword [ebp - 0x620], 1
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 0x1305
je 0x10035845
mov dword [ebp - 0x9d0], 1
jmp 0x1003584c
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x9d0], eax
jl 0x10035863
mov dword [ebp - 0x628], 1
jmp 0x1003586a
and dword [ebp - 0x628], 0
imul esi, dword [ebp - 0x628], 0x907c
push 3
lea ecx, [ebp - 0xc28]
call fcn.100265d2
cmp esi, dword [eax]
je 0x10035891
mov dword [ebp - 0x9d8], 1
jmp 0x10035898
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 2
jl 0x100358ad
mov dword [ebp - 0x630], 1
jmp 0x100358b4
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x100358d4
xor eax, eax
inc eax
je 0x100358d4
mov dword [ebp - 0x9e0], 1
jmp 0x100358db
and dword [ebp - 0x9e0], 0
push 3
lea ecx, [ebp - 0xc28]
call fcn.100265d2
mov ecx, dword [ebp - 0x9e0]
cmp ecx, dword [eax]
je 0x100358fe
mov dword [ebp - 0x638], 1
jmp 0x10035905
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x16c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc04], 0xffffffff
jg 0x1003592d
mov dword [ebp - 0x9e8], 1
jmp 0x10035934
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x9e8]
sub eax, dword [ebp - 0xdb8]
je 0x1003596d
mov dword [ebp - 0x5c], 0
jmp 0x10035952
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x10035968
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xc04], 0xfff8
jmp 0x1003594b
jmp 0x10035c99
mov dword [ebp - 0xc74], 0xa1ed
mov dword [ebp - 0x3ec], 0xde8b3ec6
mov dword [ebp - 0x660], 0xfffffff6
mov dword [ebp - 0x2c4], 0
jmp 0x100359a4
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x100359c0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xd4c], 0xffffffff
jmp 0x10035997
mov dword [ebp - 0x44], 0
jmp 0x100359d0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1e
jne 0x10035a82
mov dword [ebp - 0x31c], 0
jmp 0x100359f3
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x10035a0f
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0xfe0], 0
jmp 0x100359e6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfe0], 0xfffc
jne 0x10035a2e
mov dword [ebp - 0x640], 1
jmp 0x10035a35
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x16c], 0
jmp 0x10035a5a
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xfffffff5
jne 0x10035a7d
mov byte [ebp - 0x11f], 0
movzx eax, byte [ebp - 0x11f]
test eax, eax
je 0x10035a7b
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x10035a4d
jmp 0x100359c9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc04]
cmp dword [ebp - 0x44], eax
jg 0x10035a9f
mov dword [ebp - 0x9f0], 1
jmp 0x10035aa6
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x9f0], eax
jge 0x10035ac0
mov dword [ebp - 0x648], 1
jmp 0x10035ac7
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x3e4]
sub eax, dword [ebp - 0x648]
imul eax, eax, 0x2185
mov dword [ebp - 0x9f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp + eax - 0xd4c], ecx
cmp dword [ebp - 0x9f8], 0
je 0x10035b10
mov eax, 0xffff
test eax, eax
je 0x10035b10
mov dword [ebp - 0x650], 1
jmp 0x10035b17
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 4
jae 0x10035b2c
mov dword [ebp - 0xa00], 1
jmp 0x10035b33
and dword [ebp - 0xa00], 0
push 0
lea ecx, [ebp - 0xc28]
call fcn.100265d2
mov ecx, dword [ebp - 0xa00]
imul ecx, dword [eax]
cmp ecx, 1
jge 0x10035b5a
mov dword [ebp - 0x658], 1
jmp 0x10035b61
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x658]
test eax, eax
jne 0x10035b8a
push 1
lea ecx, [ebp - 0xc28]
call fcn.100265d2
cmp dword [eax], 0
jne 0x10035b8a
and dword [ebp - 0xa08], 0
jmp 0x10035b94
mov dword [ebp - 0xa08], 1
mov eax, dword [ebp - 0xc74]
mov ecx, dword [ebp - 0xa08]
dec ecx
dec ecx
sub eax, ecx
jne 0x10035bb8
mov eax, 0x338a
test eax, eax
jne 0x10035bb8
and dword [ebp - 0xd5c], 0
jmp 0x10035bc2
mov dword [ebp - 0xd5c], 1
mov dword [ebp - 0x660], 0x3c57
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x660], eax
jne 0x10035be6
mov dword [ebp - 0xa10], 1
jmp 0x10035bed
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xa10], eax
jl 0x10035c0d
mov eax, 0xc035
test eax, eax
je 0x10035c0d
mov dword [ebp - 0x668], 1
jmp 0x10035c14
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x668], eax
jl 0x10035c2b
mov dword [ebp - 0xa18], 1
jmp 0x10035c32
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0xa18], eax
jne 0x10035c5c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xc04], 0
je 0x10035c5c
mov dword [ebp - 0x670], 1
jmp 0x10035c63
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
sub eax, 0x8d16
jne 0x10035c86
mov eax, 0xaef40462
test eax, eax
jne 0x10035c86
xor eax, eax
jne 0x10035c86
and dword [ebp - 0xa20], 0
jmp 0x10035c90
mov dword [ebp - 0xa20], 1
mov eax, dword [ebp - 0xa20]
mov dword [ebp - 0x5c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc28]
call fcn.100265cd
mov dword [ebp - 0x30], 0xaa6e6f7
push 2
lea ecx, [ebp - 0xdf4]
call fcn.10026565
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xa40], 3
mov dword [ebp - 0xc84], 1
mov dword [ebp - 0xa4], 0
jmp 0x10035cf0
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10035d0c
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x1e4], 0xffffffff
jmp 0x10035ce3
mov dword [ebp - 0xa4], 0
jmp 0x10035d25
cmp dword [ebp - 0xa4], 2
jge 0x10035d47