Function at 0x10003fd0
Capabilities:
Authenticate hmac
Contain obfuscated stackstrings
Encode data using base64
Encode data using xor
Parse credit card information

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x12928
call fcn.1010df20
push esi
push edi
mov eax, 0xe3
mov word [ebp - 0x6f88], ax
movsx ecx, word [ebp - 0x6f88]
mov dword [ebp - 0x1281c], ecx
cmp dword [ebp - 0x1281c], 0xe3
je 0x10004019
cmp dword [ebp - 0x1281c], 0x7a0
je 0x100040b3
jmp 0x100040eb
movsx edx, word [ebp - 0x6f88]
mov dword [ebp - 0x12820], edx
cmp dword [ebp - 0x12820], 0x68
je 0x10004084
cmp dword [ebp - 0x12820], 0xe3
je 0x1000403d
jmp 0x100040b1
movsx eax, word [ebp - 0x6f88]
mov dword [ebp - 0x12824], eax
cmp dword [ebp - 0x12824], 0x172
je 0x10004058
jmp 0x10004082
movsx ecx, word [ebp - 0x6f88]
add ecx, 0x2a
mov word [ebp - 0x6f88], cx
movsx edx, word [ebp - 0x6f88]
sub edx, 0x50d
mov word [ebp - 0x6f88], dx
call fcn.10003c00
jmp 0x100040b1
lea eax, [ebp - 0x108e8]
push eax
push fcn.10002910
mov ecx, dword [ebp - 0x108e8]
push ecx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0xc000], eax
mov edx, 0xc9
mov ecx, 0x2e
call fcn.10003120
jmp 0x100040eb
movsx edx, word [ebp - 0x6f88]
and edx, 0x3d2
mov word [ebp - 0x6f88], dx
movsx eax, word [ebp - 0x6f88]
sar eax, 0xd
mov word [ebp - 0x6f88], ax
lea ecx, [ebp - 0x75b8]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x3248], eax
mov dword [ebp - 0xfbf0], 0x54f6
movsx edx, word [ebp - 0x6f88]
cmp edx, 0x40d
jge 0x10004171
movsx eax, word [ebp - 0x6f88]
mov dword [ebp - 0x12828], eax
cmp dword [ebp - 0x12828], 0xe3
je 0x10004141
cmp dword [ebp - 0x12828], 0x1bd
je 0x1000412b
jmp 0x10004167
movsx ecx, word [ebp - 0x6f88]
xor ecx, 0x751
mov word [ebp - 0x6f88], cx
jmp 0x10004167
mov edx, dword [ebp - 0x3248]
mov dword [ebp - 0xbf28], edx
mov ax, word [ebp - 0x6f88]
mov word [ebp - 0x10dc4], ax
mov ecx, dword [ebp - 0x3248]
mov dword [ebp - 0x33d8], ecx
mov dword [ebp - 0xadb8], 0xdbed
mov edx, 0x26
mov word [ebp - 0x7218], dx
movzx eax, word [ebp - 0x7218]
or eax, 0x996
mov word [ebp - 0x7218], ax
mov edx, dword [ebp - 0x33d8]
mov ecx, dword [ebp - 0x3248]
shl edx, cl
mov dword [ebp - 0xbf28], edx
movsx eax, word [ebp - 0x10dc4]
sub eax, 0x10
mov word [ebp - 0x6f88], ax
movzx ecx, word [ebp - 0x7218]
add ecx, 0xe81
mov word [ebp - 0x7218], cx
movsx edx, word [ebp - 0x6f88]
and edx, 0x72f
mov word [ebp - 0x10dc4], dx
movsx eax, word [ebp - 0x10dc4]
add eax, 0x6d0
mov word [ebp - 0x6f88], ax
mov ecx, dword [ebp - 0x3248]
sub ecx, dword [ebp - 0xbf28]
mov dword [ebp - 0x33d8], ecx
movzx edx, word [ebp - 0x7218]
add edx, 0x438
mov word [ebp - 0x7218], dx
movsx eax, word [ebp - 0x6f88]
sub eax, 0x31c
mov word [ebp - 0x10dc4], ax
movzx ecx, word [ebp - 0x7218]
or ecx, 0x29e
mov word [ebp - 0x7218], cx
mov edx, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0x3248]
sar edx, cl
mov dword [ebp - 0x33d8], edx
movsx eax, word [ebp - 0x10dc4]
shl eax, 0xb
mov word [ebp - 0x6f88], ax
mov ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], ecx
mov edx, dword [ebp - 0x33d8]
xor edx, dword [ebp - 0xbf28]
mov dword [ebp - 0x3248], edx
mov eax, dword [ebp - 0xbf28]
and eax, dword [ebp - 0x3248]
mov dword [ebp - 0x33d8], eax
mov ecx, dword [ebp - 0x33d8]
sub ecx, dword [ebp - 0xbf28]
mov dword [ebp - 0x3248], ecx
movzx edx, word [ebp - 0x7218]
add edx, 0xe1
mov word [ebp - 0x7218], dx
movsx eax, word [ebp - 0x6f88]
sub eax, 0x1a2
mov word [ebp - 0x10dc4], ax
mov ecx, dword [ebp - 0xbf28]
add ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], ecx
movzx edx, word [ebp - 0x7218]
and edx, 0xb3c
mov word [ebp - 0x7218], dx
movsx eax, word [ebp - 0x10dc4]
sub eax, 0x7ac
mov word [ebp - 0x6f88], ax
mov ecx, dword [ebp - 0xbf28]
add ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], ecx
movsx edx, word [ebp - 0x10dc4]
add edx, 0x460
mov word [ebp - 0x6f88], dx
mov eax, dword [ebp - 0x33d8]
sub eax, dword [ebp - 0x3248]
mov dword [ebp - 0xbf28], eax
movsx ecx, word [ebp - 0x6f88]
sar ecx, 2
mov word [ebp - 0x10dc4], cx
mov edx, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0x3248]
shl edx, cl
mov dword [ebp - 0x33d8], edx
mov eax, dword [ebp - 0xbf28]
xor eax, dword [ebp - 0x3248]
mov dword [ebp - 0x33d8], eax
mov ecx, dword [ebp - 0xfbf0]
add ecx, 0x2c
mov dword [ebp - 0xfbf0], ecx
movzx edx, word [ebp - 0x7218]
or edx, 0x4f
mov word [ebp - 0x7218], dx
movzx eax, word [ebp - 0x7218]
and eax, 0x36e
mov word [ebp - 0x7218], ax
movsx ecx, word [ebp - 0x10dc4]
sub ecx, 0x220
mov word [ebp - 0x6f88], cx
movzx edx, word [ebp - 0x7218]
add edx, 0xd88
mov word [ebp - 0x7218], dx
movzx eax, word [ebp - 0x7218]
add eax, 0x717
mov word [ebp - 0x7218], ax
mov ecx, dword [ebp - 0xbf28]
sub ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], ecx
movzx edx, word [ebp - 0x7218]
sub edx, 0xed9
mov word [ebp - 0x7218], dx
cmp dword [ebp - 0xfbf0], 0x612a
jne 0x1000417d
mov dword [ebp - 0x7a9c], 0x9ee7
movzx eax, word [ebp - 0x7218]
mov dword [ebp - 0x1282c], eax
cmp dword [ebp - 0x1282c], 0x2ca
je 0x10004448
cmp dword [ebp - 0x1282c], 0xd23
je 0x10004481
jmp 0x100044a5
push 0
mov ecx, dword [ebp - 0x6e48]
push ecx
mov edx, dword [ebp - 0x6e4c]
push edx
mov eax, dword [ebp - 0x18c4]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x33d8], eax
movzx ecx, word [ebp - 0x7218]
and ecx, 0x5f4
mov word [ebp - 0x7218], cx
jmp 0x100044a5
mov edx, dword [ebp - 0x7a9c]
add edx, 0x2001
mov dword [ebp - 0x7a9c], edx
mov eax, dword [ebp - 0xbf28]
sub eax, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], eax
cmp dword [ebp - 0x7a9c], 0xeee1
jae 0x1000453e
mov ecx, dword [ebp - 0x3248]
add ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0xbf28], ecx
movzx edx, word [ebp - 0x7218]
mov dword [ebp - 0x12830], edx
cmp dword [ebp - 0x12830], 0x77b
je 0x100044e2
jmp 0x1000450e
push 0xf1
mov eax, dword [ebp - 0x11a84]
push eax
mov ecx, dword [ebp - 0x8e9c]
push ecx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
movzx edx, word [ebp - 0x7218]
sar edx, 5
mov word [ebp - 0x7218], dx
jmp 0x1000453e
mov eax, dword [ebp - 0x7a9c]
mov dword [ebp - 0x11810], eax
mov ecx, dword [ebp - 0x3248]
mov dword [ebp - 0x86c4], ecx
lea edx, [ebp - 0x3248]
mov dword [ebp - 0x1a84], edx
mov eax, dword [ebp - 0x7a9c]
mov dword [ebp - 0xfed8], eax
mov cx, word [ebp - 0x7218]
mov word [ebp - 0x404], cx
mov edx, dword [ebp - 0x7a9c]
or edx, dword [ebp - 0xfed8]
cmp edx, dword [ebp - 0x11810]
je 0x100045ae
mov eax, dword [ebp - 0x1a84]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x86c4]
shl edx, cl
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
push 0x82
lea ecx, [ebp - 0x6e4c]
push ecx
push fcn.10003120
mov edx, dword [ebp - 0x8e9c]
push edx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x12ac], eax
movsx eax, word [ebp - 0x10dc4]
xor eax, 0x2f6
mov word [ebp - 0x6f88], ax
mov eax, dword [ebp - 0x7a9c]
xor edx, edx
div dword [ebp - 0x11810]
mov dword [ebp - 0xfed8], eax
mov ecx, dword [ebp - 0x11810]
mov dword [ebp - 0x12834], ecx
cmp dword [ebp - 0x12834], 0x3bf9
je 0x100045eb
cmp dword [ebp - 0x12834], 0x7ba6
je 0x10004606
jmp 0x10004699
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
and eax, dword [ebp - 0x86c4]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
jmp 0x10004699
movzx edx, word [ebp - 0x404]
sub edx, 0xd6b
mov word [ebp - 0x7218], dx
push 0x96
push 0x84
push 0xe0
mov eax, dword [ebp - 0x18c4]
push eax
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x8854], eax
movsx ecx, word [ebp - 0x10dc4]
add ecx, 0x461
movsx edx, word [ebp - 0x6f88]
cmp ecx, edx
jge 0x10004699
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x86c4]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xbf28]
sub ecx, dword [eax]
mov dword [ebp - 0x33d8], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
push eax
push 0x42
movzx ecx, word [ebp - 0x404]
push ecx
mov dl, 0xef
mov cl, 0x35
call fcn.10002f50
mov edx, dword [ebp - 0xfed8]
mov dword [ebp - 0x11c30], edx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x86c4]
mov dword [ebp - 0x33d8], ecx
lea edx, [ebp - 0x86c4]
mov dword [ebp - 0x1a88], edx
mov byte [ebp - 0x6b99], 0xbd
mov dword [ebp - 0xff60], 0x6ad7
lea eax, [ebp - 0x404]
mov dword [ebp - 0xd658], eax
mov dword [ebp - 0x10358], 0x879a
mov ecx, dword [ebp - 0xfed8]
add ecx, dword [ebp - 0x11810]
mov dword [0x1013db78], ecx
movzx edx, byte [ebp - 0x6b99]
cmp edx, 0xa5
jl 0x100f68f2
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x404]
add ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x33d8]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
movzx ecx, word [ebp - 0x404]
movzx edx, word [ebp - 0x7218]
add ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
movzx ecx, word [ebp - 0x404]
movzx edx, word [ebp - 0x7218]
sub ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
mov ecx, dword [ebp - 0x11810]
sub ecx, dword [ebp - 0x11c30]
mov dword [ebp - 0x7a9c], ecx
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7218]
add eax, ecx
mov edx, dword [ebp - 0xd658]
mov word [edx], ax
movzx eax, byte [ebp - 0x6b99]
sub eax, 0x26
mov byte [ebp - 0x6b99], al
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
and edx, eax
mov word [ebp - 0x404], dx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x33d8]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov edx, dword [0x1013db78]
mov ecx, dword [ebp - 0x7a9c]
shl edx, cl
mov dword [ebp - 0x11810], edx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x3248]
or ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
mov eax, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0x3248]
sar eax, cl
mov dword [ebp - 0x86c4], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x404]
add edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
movzx edx, byte [ebp - 0x6b99]
add edx, 0xb3
mov byte [ebp - 0x6b99], dl
mov eax, dword [ebp - 0x33d8]
and eax, dword [ebp - 0x86c4]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
sub eax, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
movsx edx, word [ebp - 0x6f88]
add edx, 0x171
mov word [ebp - 0x10dc4], dx
mov eax, dword [ebp - 0x86c4]
sub eax, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], eax
movzx ecx, word [ebp - 0x404]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0x7218], cx
movzx ecx, byte [ebp - 0x6b99]
add ecx, 0x17
mov byte [ebp - 0x6b99], cl
mov edx, dword [ebp - 0x11c30]
add edx, dword [ebp - 0xfed8]
mov dword [ebp - 0x7a9c], edx
mov eax, dword [ebp - 0x3248]
sub eax, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x33d8]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
xor eax, dword [ebp - 0x86c4]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x33d8]
sar eax, cl
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0x3248]
or eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
movzx edx, word [ebp - 0x404]
movzx ecx, word [ebp - 0x7218]
shl edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0xbf28], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
add edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], eax
mov eax, dword [ebp - 0x11810]
and eax, dword [ebp - 0xfed8]
mov dword [0x1013db78], eax
mov ecx, dword [ebp - 0xadb8]
add ecx, 0x16
mov dword [ebp - 0xadb8], ecx
movzx edx, byte [ebp - 0x6b99]
sub edx, 0xa4
mov byte [ebp - 0x6b99], dl
movzx eax, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x404]
add eax, ecx
mov edx, dword [ebp - 0xd658]
mov word [edx], ax
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x86c4]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x33d8]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x11c30]
add eax, dword [ebp - 0x11810]
mov dword [ebp - 0x7a9c], eax
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0xbf28], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x33d8]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
movzx ecx, word [ebp - 0x7218]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
or ecx, eax
mov word [ebp - 0x404], cx
mov ecx, dword [ebp - 0x11810]
xor ecx, dword [ebp - 0xfed8]
mov dword [0x1013db78], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
and eax, dword [ebp - 0xbf28]
mov dword [ebp - 0x33d8], eax
cmp dword [ebp - 0xadb8], 0xdec3
jbe 0x10004711
lea ecx, [ebp - 0x33d8]
mov dword [ebp - 0xeff4], ecx
movzx edx, byte [ebp - 0x6b99]
cmp edx, 0x69
je 0x100f6832
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
add ecx, edx
movzx eax, word [ebp - 0x404]
cmp ecx, eax
jle 0x10004b85
movsx ecx, word [ebp - 0x10dc4]
sub ecx, 0x8b
movsx edx, word [ebp - 0x6f88]
cmp ecx, edx
jle 0x10004b1f
mov eax, dword [ebp - 0xeff4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xbf28]
shl edx, cl
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
jmp 0x10004b54
mov ecx, dword [ebp - 0x11810]
or ecx, dword [ebp - 0x11c30]
mov dword [ebp - 0xfed8], ecx
push 1
mov edx, dword [ebp - 0x9380]
push edx
mov eax, dword [ebp - 0x9384]
push eax
mov ecx, dword [ebp - 0x8e9c]
push ecx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x33d8], eax
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0x86c4]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0xbf28], ecx
call fcn.10003c00
movzx edx, byte [ebp - 0x6b99]
cmp edx, 0xb6
jge 0x10004bbb
mov eax, dword [ebp - 0x11810]
sub eax, dword [ebp - 0x11c30]
mov dword [ebp - 0x7a9c], eax
mov ecx, dword [ebp - 0x11c30]
push ecx
push 0xffffffffffffff9c
mov edx, dword [ebp - 0x3248]
push edx
call fcn.10002410
lea eax, [ebp - 0x10dc4]
mov dword [ebp - 0xc6c], eax
mov dword [ebp - 0x63fc], 0x10eea
mov dword [ebp - 0x6cdc], 0x18ff
movzx ecx, word [ebp - 0x404]
mov dword [ebp - 0x12838], ecx
cmp dword [ebp - 0x12838], 0
je 0x10004bf6
jmp 0x10004cc4
movzx edx, byte [ebp - 0x6b99]
add edx, 0xe1
cmp edx, 0x91
jge 0x10004c90
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x10dc4]
add eax, ecx
mov edx, dword [ebp - 0xc6c]
mov word [edx], ax
push 0xfd
push 0x41
push 0xc3
mov eax, dword [ebp - 0x4c90]
push eax
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x30a4], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
sub edx, eax
mov word [ebp - 0x404], dx
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x404]
add edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x33d8], ecx
mov dl, byte [ebp - 0x6b99]
mov byte [ebp - 0x3531], dl
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
mov dword [0x101400fc], ecx
mov dx, word [ebp - 0x7218]
mov word [ebp - 0xc284], dx
mov dword [ebp - 0x1718], 0xddc0
jmp 0x10004cd9
mov eax, dword [ebp - 0x7a9c]
push eax
push 0x3a
mov ecx, dword [ebp - 0xbf28]
push ecx
call fcn.10002410
lea edx, [ebp - 0xfed8]
mov dword [ebp - 0xa4fc], edx
lea eax, [ebp - 0x33d8]
mov dword [ebp - 0xe000], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3248]
mov dword [ebp - 0x86c4], edx
mov dword [ebp - 0x1438], 0xc1b0
lea eax, [ebp - 0x7a9c]
mov dword [ebp - 0x3720], eax
movzx ecx, word [ebp - 0x404]
movzx edx, word [ebp - 0xc284]
add ecx, edx
movzx eax, word [ebp - 0x7218]
mov edx, dword [ebp - 0xd658]
movzx edx, word [edx]
sub eax, edx
cmp ecx, eax
jg 0x10004e19
movzx eax, word [ebp - 0x404]
movzx ecx, word [ebp - 0x7218]
xor eax, ecx
mov edx, dword [ebp - 0xd658]
movzx edx, word [edx]
movzx ecx, word [ebp - 0xc284]
shl edx, cl
cmp eax, edx
jl 0x10004e00
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [0x101400fc]
and ecx, dword [eax]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
add eax, dword [ebp - 0xbf28]
cmp ecx, eax
jle 0x10004dfe
mov cl, byte [ebp - 0x3531]
mov byte [ebp - 0x1283c], cl
cmp byte [ebp - 0x1283c], 0x9d
je 0x10004da6
jmp 0x10004de5
push 0xf7
mov edx, dword [ebp - 0x18c4]
push edx
mov eax, dword [ebp - 0x45dc]
push eax
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov ecx, dword [ebp - 0xc6c]
movzx edx, word [ecx]
push edx
movzx eax, byte [ebp - 0x6b99]
push eax
mov ecx, dword [ebp - 0xc6c]
movzx edx, word [ecx]
push edx
call fcn.100022f0
add esp, 0xc
jmp 0x10004dfe
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x10dc4]
sub eax, ecx
mov edx, dword [ebp - 0xc6c]
mov word [edx], ax
jmp 0x10004e17
movzx eax, word [ebp - 0x404]
movzx ecx, word [ebp - 0xc284]
add eax, ecx
mov word [ebp - 0x7218], ax
jmp 0x10004e2d
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
sub eax, dword [ebp - 0xbf28]
mov dword [ebp - 0x3248], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x86c4]
add edx, dword [ecx]
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x3248], edx
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x10dc4]
and eax, ecx
mov edx, dword [ebp - 0xc6c]
mov word [edx], ax
movzx eax, word [ebp - 0xc284]
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x404], ax
mov eax, dword [ebp - 0xfed8]
mov ecx, dword [ebp - 0x11c30]
shr eax, cl
mov ecx, dword [ebp - 0xa4fc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ebp - 0x3720]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x11810], ecx
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
xor eax, dword [ebp - 0x11810]
mov dword [ebp - 0x11c30], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x33d8]
shl edx, cl
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0x3248]
add edx, dword [ecx]
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0x3720]
mov ecx, dword [ebp - 0x11810]
add ecx, dword [eax]
mov edx, dword [ebp - 0xa4fc]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x404]
sub ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
mov ecx, dword [ebp - 0xfed8]
add ecx, dword [ebp - 0x7a9c]
mov dword [ebp - 0x11c30], ecx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
sub eax, dword [ebp - 0x86c4]
mov dword [ebp - 0x33d8], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x33d8]
add edx, dword [ecx]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x11c30]
add ecx, dword [0x1013db78]
mov edx, dword [ebp - 0xa4fc]
mov dword [edx], ecx
movzx eax, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x7218]
sub eax, ecx
mov word [ebp - 0x404], ax
movzx edx, byte [ebp - 0x6b99]
and edx, 0x4d
mov byte [ebp - 0x3531], dl
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x10dc4]
or eax, ecx
mov edx, dword [ebp - 0xc6c]
mov word [edx], ax
mov eax, dword [ebp - 0x6cdc]
add eax, 0x27
mov dword [ebp - 0x6cdc], eax
movzx ecx, word [ebp - 0x7218]
movzx edx, word [ebp - 0x404]
xor ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
mov edx, dword [ebp - 0x11810]
mov ecx, dword [ebp - 0x7a9c]
shl edx, cl
mov dword [ebp - 0xfed8], edx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [ebp - 0xbf28], edx
movzx eax, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x404]
sub eax, ecx
mov word [ebp - 0xc284], ax
movzx edx, byte [ebp - 0x3531]
sub edx, 9
mov byte [ebp - 0x6b99], dl
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0x86c4]
and ecx, dword [eax]
mov dword [ebp - 0xbf28], ecx
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ebp - 0x11c30]
add eax, dword [edx]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3248]
add edx, dword [ebp - 0xbf28]
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
mov ecx, dword [ebp - 0x33d8]
sub ecx, dword [ebp - 0xbf28]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
mov eax, dword [ebp - 0x11c30]
add eax, dword [ebp - 0xfed8]
mov dword [0x1013db78], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
add edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0x7a9c]
sub eax, dword [edx]
mov dword [ebp - 0x11810], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3248]
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
mov ecx, dword [ebp - 0xbf28]
add ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x3248], ecx
cmp dword [ebp - 0x6cdc], 0x2445
jb 0x10004e2d
cmp dword [ebp - 0x1718], 0xece4
je 0x10005528
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x33d8], ecx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x86c4]
shl eax, cl
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
movsx edx, word [ebp - 0x6f88]
movsx eax, word [ebp - 0x10dc4]
or edx, eax
mov ecx, dword [ebp - 0xc6c]
mov word [ecx], dx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
mov ecx, dword [0x101400fc]
sar eax, cl
mov dword [ebp - 0xbf28], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x86c4]
and edx, dword [ecx]
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0x1718]
add eax, 0x4c
mov dword [ebp - 0x1718], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0x86c4]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov ecx, dword [0x1013db78]
sub ecx, dword [ebp - 0x11c30]
mov edx, dword [ebp - 0x3720]
mov dword [edx], ecx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x11810]
mov edx, dword [ebp - 0xa4fc]
mov dword [edx], ecx
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x404]
add ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
movzx ecx, byte [ebp - 0x6b99]
add ecx, 0x61
mov byte [ebp - 0x3531], cl
mov edx, dword [ebp - 0x86c4]
sub edx, dword [ebp - 0x3248]
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x3720]
add ecx, dword [edx]
mov dword [ebp - 0xfed8], ecx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [0x101400fc]
sub ecx, dword [eax]
mov dword [ebp - 0xbf28], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
xor eax, dword [ebp - 0x33d8]
mov dword [0x101400fc], eax
movzx edx, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x7218]
sar edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
movzx edx, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x404]
shl edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
mov ecx, dword [ebp - 0x11c30]
or ecx, dword [ebp - 0x7a9c]
mov dword [ebp - 0xfed8], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x33d8]
and eax, dword [edx]
mov ecx, dword [ebp - 0xe000]
mov dword [ecx], eax
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x6f88]
add eax, ecx
mov word [ebp - 0x10dc4], ax
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10dc4]
add eax, ecx
mov edx, dword [ebp - 0xc6c]
mov word [edx], ax
movzx eax, byte [ebp - 0x3531]
add eax, 0x1e
mov byte [ebp - 0x6b99], al
movzx ecx, word [ebp - 0x7218]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
sub ecx, eax
mov word [ebp - 0xc284], cx
mov ecx, dword [ebp - 0x11c30]
and ecx, dword [ebp - 0x7a9c]
mov dword [0x1013db78], ecx
mov edx, dword [ebp - 0xe000]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
add eax, dword [ecx]
mov dword [ebp - 0x3248], eax
mov edx, dword [ebp - 0xe000]
mov eax, dword [ebp - 0x33d8]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ebp - 0xfed8]
sub eax, dword [edx]
mov dword [ebp - 0x11810], eax
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ebp - 0xbf28]
sub edx, dword [ecx]
mov dword [ebp - 0x86c4], edx
movzx eax, byte [ebp - 0x3531]
xor eax, 0xfb
mov byte [ebp - 0x6b99], al
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0x404]
sar edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0xe000]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0xeff4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x11810], ecx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [0x101400fc], ecx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
add eax, dword [ebp - 0x33d8]
mov dword [ebp - 0x86c4], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
add edx, eax
mov word [ebp - 0xc284], dx
movzx ecx, byte [ebp - 0x3531]
add ecx, 3
mov byte [ebp - 0x6b99], cl
movsx edx, word [ebp - 0x6f88]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0x10dc4], dx
mov edx, dword [ebp - 0x11810]
sub edx, dword [ebp - 0x7a9c]
mov eax, dword [ebp - 0x3720]
mov dword [eax], edx
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0x3720]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x7a9c], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x86c4]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x404]
sub edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
mov edx, dword [ebp - 0x11810]
sub edx, dword [ebp - 0x7a9c]
mov dword [0x1013db78], edx
mov eax, dword [ebp - 0x3720]
mov edx, dword [ebp - 0xfed8]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe000]
mov eax, dword [edx]
or eax, dword [ebp - 0xbf28]
mov dword [ebp - 0x33d8], eax
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0x3720]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x7a9c], eax
movsx ecx, word [ebp - 0x10dc4]
movsx edx, word [ebp - 0x6f88]
and ecx, edx
mov eax, dword [ebp - 0xc6c]
mov word [eax], cx
jmp 0x10005111
movsx ecx, word [ebp - 0x10dc4]
mov dword [ebp - 0x12840], ecx
cmp dword [ebp - 0x12840], 0x46e
je 0x10005556
cmp dword [ebp - 0x12840], 0x512
je 0x10005613
jmp 0x10005666
mov dl, byte [ebp - 0x3531]
mov byte [ebp - 0x12844], dl
cmp byte [ebp - 0x12844], 0xa6
je 0x10005570
jmp 0x100055fe
push 0
mov eax, dword [ebp - 0x3d30]
push eax
mov ecx, dword [ebp - 0x3d34]
push ecx
mov edx, dword [ebp - 0x108e8]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x3248], eax
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
sub ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x33d8], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [0x101400fc]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x86c4]
push ecx
movzx edx, byte [ebp - 0x3531]
push edx
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
push ecx
mov dl, 0x80
mov cl, 0x9c
call fcn.10002f50
jmp 0x10005611
lea edx, [ebp - 0x75b8]
push edx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0xbf28], eax
jmp 0x10005666
mov eax, dword [ebp - 0x3720]
mov ecx, dword [ebp - 0x11810]
add ecx, dword [eax]
mov dword [0x1013db78], ecx
mov edx, dword [ebp - 0x86c4]
sub edx, dword [ebp - 0x33d8]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0x33d8]
add ecx, dword [ebp - 0x3248]
mov dword [ebp - 0x86c4], ecx
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
push eax
push 0x30
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ecx]
push edx
call fcn.10002410
mov al, byte [ebp - 0x3531]
mov byte [ebp - 0x12848], al
cmp byte [ebp - 0x12848], 0x61
je 0x10005693
cmp byte [ebp - 0x12848], 0x9e
je 0x10005689
jmp 0x10005735
call fcn.10003c00
jmp 0x10005735
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
movsx eax, word [ebp - 0x6f88]
and edx, eax
mov word [ebp - 0x10dc4], dx
mov cl, byte [ebp - 0x3531]
mov byte [ebp - 0x1284c], cl
cmp byte [ebp - 0x1284c], 0x8a
je 0x100056cc
cmp byte [ebp - 0x1284c], 0xe8
je 0x1000571a
jmp 0x10005735
lea edx, [ebp - 0x12ac]
push edx
push fcn.10002410
mov eax, dword [ebp - 0x45dc]
push eax
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2588], eax
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x404]
add edx, eax
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
movzx edx, byte [ebp - 0x6b99]
or edx, 0xfb
mov byte [ebp - 0x3531], dl
jmp 0x10005735
mov eax, dword [ebp - 0xd658]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x7218]
shl edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ecx]
mov ecx, dword [0x1013db78]
shr edx, cl
mov dword [ebp - 0x7a9c], edx
movsx eax, word [ebp - 0x6f88]
mov dword [ebp - 0x12850], eax
cmp dword [ebp - 0x12850], 0x48f
je 0x10005779
cmp dword [ebp - 0x12850], 0x4e6
je 0x100058b0
jmp 0x10005905
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
mov dword [ebp - 0xac58], edx
mov al, byte [ebp - 0x3531]
mov byte [ebp - 0x12854], al
cmp byte [ebp - 0x12854], 0x24
je 0x100057ae
cmp byte [ebp - 0x12854], 0xec
je 0x10005898
jmp 0x100058ae
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x11c30]
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x11810]
cmp edx, ecx
jb 0x1000585a
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7218]
add eax, ecx
mov word [ebp - 0xc284], ax
movsx edx, word [ebp - 0x10dc4]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
sub edx, ecx
movsx eax, word [ebp - 0x6f88]
cmp edx, eax
jge 0x1000584a
lea ecx, [ebp - 0x6b99]
mov dword [ebp - 0x5570], ecx
mov edx, dword [ebp - 0xfed8]
mov dword [ebp - 0x87d0], edx
mov eax, dword [ebp - 0x33d8]
sub eax, dword [ebp - 0xbf28]
mov dword [ebp - 0xac58], eax
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xac58]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
jmp 0x10005858
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ecx]
push edx
call fcn.10002910
jmp 0x10005896
mov eax, dword [ebp - 0x11810]
and eax, dword [ebp - 0x7a9c]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0x11c30]
sub edx, dword [ecx]
cmp eax, edx
jbe 0x10005896
lea eax, [ebp - 0xe000]
push eax
push fcn.10002410
mov ecx, dword [ebp - 0x10a7c]
push ecx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0xc000], eax
jmp 0x100058ae
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ebp - 0x3720]
mov ecx, dword [edx]
and ecx, dword [eax]
mov dword [ebp - 0x11810], ecx
jmp 0x10005905
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0x1a84]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov eax, dword [ebp - 0xe000]
mov ecx, dword [0x101400fc]
xor ecx, dword [eax]
cmp edx, ecx
je 0x10005905
movzx edx, byte [ebp - 0x6b99]
movzx ecx, byte [ebp - 0x3531]
shl edx, cl
mov eax, dword [ebp - 0x5570]
mov byte [eax], dl
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ecx]
push edx
push 0xfffffffffffffff2
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
push ecx
call fcn.10002410
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0x11c30]
or eax, dword [edx]
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0x11810]
add edx, dword [ecx]
cmp eax, edx
jae 0x1000594c
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x404]
sub ecx, edx
mov word [ebp - 0xc284], cx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [eax]
push ecx
call fcn.10002910
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
mov dword [ebp - 0xfafc], eax
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
imul edx, dword [ebp - 0x7a9c]
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x87d0]
cmp edx, ecx
je 0x100059aa
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], eax
mov byte [ebp - 0x35a1], 0x71
mov eax, dword [ebp - 0xc6c]
mov cx, word [eax]
mov word [ebp - 0x5c3c], cx
lea edx, [ebp - 0x7218]
mov dword [ebp - 0xaf3c], edx
mov al, byte [ebp - 0x35a1]
mov byte [ebp - 0x12858], al
cmp byte [ebp - 0x12858], 0x10
je 0x100059dd
cmp byte [ebp - 0x12858], 0x5f
je 0x10005a6a
jmp 0x10005b65
push 0x1b
lea ecx, [ebp - 0x11c30]
push ecx
push fcn.10003120
mov edx, dword [ebp - 0x45dc]
push edx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x12ac], eax
movzx eax, word [ebp - 0x7218]
mov dword [ebp - 0x1285c], eax
cmp dword [ebp - 0x1285c], 0xa5f
je 0x10005a24
cmp dword [ebp - 0x1285c], 0xb02
je 0x10005a3e
jmp 0x10005a65
movzx ecx, byte [ebp - 0x3531]
movzx edx, byte [ebp - 0x6b99]
add ecx, edx
mov eax, dword [ebp - 0x5570]
mov byte [eax], cl
jmp 0x10005a65
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ecx]
add edx, dword [ebp - 0x87d0]
mov dword [ebp - 0x11c30], edx
mov eax, dword [ebp - 0xa4fc]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xc284]
call fcn.10003120
jmp 0x10005b65
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3248]
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x33d8]
cmp edx, ecx
jge 0x10005b44
mov edx, dword [ebp - 0x7a9c]
sub edx, dword [ebp - 0x87d0]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
lea ecx, [ebp - 0x3794]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0xac58], eax
mov edx, dword [ebp - 0x5570]
mov al, byte [edx]
mov byte [ebp - 0x12860], al
cmp byte [ebp - 0x12860], 0x48
je 0x10005ace
jmp 0x10005b29
mov ecx, dword [ebp - 0x3248]
sub ecx, dword [ebp - 0xbf28]
mov dword [0x101400fc], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xfafc], ecx
mov edx, dword [ebp - 0xfafc]
mov ecx, dword [0x101400fc]
shl edx, cl
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
mov ecx, dword [ebp - 0x87d0]
push ecx
movzx edx, byte [ebp - 0x35a1]
push edx
mov eax, dword [ebp - 0x33d8]
push eax
call fcn.10002410
jmp 0x10005b42
movzx ecx, word [ebp - 0x7218]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
xor ecx, eax
mov word [ebp - 0xc284], cx
jmp 0x10005b65
push 0xa2
push 0xbe
push 0xe3
mov ecx, dword [ebp - 0x8e9c]
push ecx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x3750], eax
mov edx, dword [ebp - 0x5570]
mov al, byte [edx]
mov byte [ebp - 0xbe7d], al
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ecx]
mov dword [ebp - 0x5058], edx
movzx eax, byte [ebp - 0xbe7d]
movzx ecx, byte [ebp - 0x3531]
cdq
idiv ecx
mov edx, dword [ebp - 0x5570]
movzx ecx, byte [edx]
movzx edx, byte [ebp - 0x6b99]
or ecx, edx
cmp eax, ecx
jg 0x100f6794
mov eax, dword [ebp - 0x11810]
sub eax, dword [ebp - 0x7a9c]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xa4fc]
add edx, dword [ecx]
cmp eax, edx
je 0x10005c72
movsx edx, byte [ebp - 0x35a1]
or edx, 0x6e
mov byte [0x1013db75], dl
mov eax, dword [ebp - 0x5570]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0xbe7d]
sar edx, cl
mov byte [ebp - 0x6b99], dl
movsx eax, word [ebp - 0x10dc4]
movsx ecx, word [ebp - 0x6f88]
cdq
idiv ecx
mov word [ebp - 0x5c3c], ax
lea edx, [ebp - 0x35a1]
mov dword [ebp - 0x4964], edx
mov eax, dword [ebp - 0x7a9c]
mov dword [ebp - 0x11110], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
xor eax, dword [edx]
mov dword [ebp - 0x3248], eax
lea ecx, [ebp - 0x3531]
mov dword [ebp - 0xfffc], ecx
mov edx, dword [ebp - 0xaf3c]
mov ax, word [edx]
mov word [ebp - 0x117ec], ax
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xbf28]
shl edx, cl
mov dword [ebp - 0xfafc], edx
jmp 0x10005ca8
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [ebp - 0xfed8]
add ecx, dword [eax]
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
add eax, dword [0x1013db78]
cmp ecx, eax
jbe 0x10005ca8
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0x11c30]
and edx, dword [ecx]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3248]
mov dword [ebp - 0xf300], ecx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
add eax, dword [ebp - 0xfafc]
mov ecx, dword [ebp - 0x3248]
add ecx, dword [ebp - 0xf300]
cmp eax, ecx
jl 0x100f677c
movzx edx, word [ebp - 0x7218]
movzx eax, word [ebp - 0xc284]
sub edx, eax
mov word [ebp - 0x404], dx
cmp dword [ebp - 0xff60], 0x69a5
jb 0x100060d1
movzx ecx, byte [ebp - 0x6b99]
movzx edx, byte [ebp - 0x3531]
and ecx, edx
mov eax, dword [ebp - 0xfffc]
mov byte [eax], cl
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x11810], eax
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0x33d8]
sub edx, dword [ecx]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xff60]
sub ecx, 0x12
mov dword [ebp - 0xff60], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [0x101400fc]
add eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
add eax, dword [ecx]
mov dword [ebp - 0x33d8], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
mov eax, dword [ebp - 0x4964]
movsx edx, byte [eax]
movsx ecx, byte [0x1013db75]
sar edx, cl
mov byte [ebp - 0x35a1], dl
mov eax, dword [ebp - 0xc6c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x6f88]
shl edx, cl
mov eax, dword [ebp - 0xc6c]
mov word [eax], dx
movzx ecx, word [ebp - 0x404]
movzx edx, word [ebp - 0x7218]
xor ecx, edx
mov eax, dword [ebp - 0xaf3c]
mov word [eax], cx
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0xbe7d]
and edx, eax
mov ecx, dword [ebp - 0x5570]
mov byte [ecx], dl
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
sub eax, dword [ebp - 0xfed8]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0x87d0]
sub edx, dword [ebp - 0x11c30]
mov dword [ebp - 0x11810], edx
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xbe7d]
sub ecx, edx
mov eax, dword [ebp - 0xfffc]
mov byte [eax], cl
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xc284]
add edx, eax
mov word [ebp - 0x404], dx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0xac58]
add edx, dword [ecx]
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0x5058], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0xbf28]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x3248]
mov dword [ebp - 0x86c4], ecx
movzx edx, byte [ebp - 0x6b99]
movzx eax, byte [ebp - 0x3531]
add edx, eax
mov byte [ebp - 0xbe7d], dl
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx ecx, word [ebp - 0xc284]
sar edx, cl
mov word [ebp - 0x7218], dx
mov eax, dword [ebp - 0x11c30]
xor eax, dword [ebp - 0xfed8]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
or ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
movsx eax, byte [ebp - 0x35a1]
movsx ecx, byte [0x1013db75]
shl eax, cl
mov ecx, dword [ebp - 0x4964]
mov byte [ecx], al
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0x7a9c]
and eax, dword [edx]
mov dword [0x1013db78], eax
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x3531]
add edx, eax
mov ecx, dword [ebp - 0xfffc]
mov byte [ecx], dl
movzx edx, word [ebp - 0xc284]
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
sub edx, ecx
mov eax, dword [ebp - 0xaf3c]
mov word [eax], dx
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x7a9c]
mov eax, dword [ebp - 0x3720]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0xf300]
sub edx, dword [ecx]
mov dword [ebp - 0x86c4], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0x86c4]
add ecx, dword [eax]
mov dword [ebp - 0x3248], ecx
mov edx, dword [ebp - 0x87d0]
sub edx, dword [ebp - 0xfed8]
mov dword [ebp - 0x11c30], edx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xbf28]
and ecx, dword [eax]
mov dword [ebp - 0xac58], ecx
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x6b99]
add eax, ecx
mov edx, dword [ebp - 0x5570]
mov byte [edx], al
movzx eax, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x117ec]
shl eax, cl
mov ecx, dword [ebp - 0xd658]
mov word [ecx], ax
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xac58]
sar eax, cl
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
or eax, dword [0x1013db78]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
xor ecx, dword [eax]
mov dword [ebp - 0x3248], ecx
mov edx, dword [ebp - 0xf300]
sub edx, dword [ebp - 0x3248]
mov dword [ebp - 0xac58], edx
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
and ecx, eax
mov edx, dword [ebp - 0x5570]
mov byte [edx], cl
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0xc284]
sub ecx, edx
mov word [ebp - 0x7218], cx
mov eax, dword [ebp - 0x4964]
movsx ecx, byte [eax]
movsx edx, byte [0x1013db75]
add ecx, edx
mov eax, dword [ebp - 0x4964]
mov byte [eax], cl
movsx ecx, word [ebp - 0x5c3c]
movsx edx, word [ebp - 0x6f88]
sub ecx, edx
mov word [ebp - 0x10dc4], cx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x87d0]
mov edx, dword [ebp - 0xa4fc]
mov dword [edx], ecx
jmp 0x10005ced
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
add ecx, dword [edx]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x11810]
mov dword [ebp - 0x12864], ecx
cmp dword [ebp - 0x12864], 0xc930
je 0x10006103
jmp 0x10006131
mov edx, dword [ebp - 0xd2a0]
push edx
call dword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [ebp - 0x2588], eax
movzx eax, word [ebp - 0x117ec]
movzx ecx, word [ebp - 0x404]
sub eax, ecx
mov edx, dword [ebp - 0xd658]
mov word [edx], ax
jmp 0x1000615d
mov al, byte [ebp - 0xbe7d]
mov byte [ebp - 0xdf69], al
lea ecx, [ebp - 0x87d0]
mov dword [ebp - 0x1d10], ecx
mov edx, dword [ebp - 0xe000]
mov eax, dword [edx]
add eax, dword [ebp - 0xf300]
mov dword [ebp - 0xac58], eax
mov ecx, dword [ebp - 0xac58]
mov dword [ebp - 0xfe90], ecx
mov edx, dword [ebp - 0x5058]
and edx, dword [ebp - 0x11810]
mov dword [ebp - 0x7a9c], edx
lea eax, [ebp - 0x404]
mov dword [ebp - 0x126f4], eax
movzx ecx, word [ebp - 0x404]
movzx edx, word [ebp - 0x7218]
or ecx, edx
mov eax, dword [ebp - 0x126f4]
movzx edx, word [eax]
mov eax, dword [ebp - 0xaf3c]
movzx eax, word [eax]
xor edx, eax
cmp ecx, edx
jle 0x100061fe
mov ecx, dword [ebp - 0x4964]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x35a1]
add edx, eax
mov byte [0x1013db75], dl
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0x33d8]
add edx, dword [ecx]
mov dword [ebp - 0xbf28], edx
lea eax, [ebp - 0xc000]
push eax
push fcn.10002410
mov ecx, dword [ebp - 0x18c4]
push ecx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x12ac], eax
jmp 0x1000631e
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
and eax, dword [0x101400fc]
mov ecx, dword [ebp - 0xeff4]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1d10]
mov eax, dword [edx]
mov dword [ebp - 0x8568], eax
movsx ecx, word [ebp - 0x6f88]
movsx edx, word [ebp - 0x5c3c]
sub ecx, edx
mov eax, dword [ebp - 0xc6c]
movsx edx, word [eax]
movsx eax, word [ebp - 0x10dc4]
sub edx, eax
cmp ecx, edx
jle 0x100062f6
movzx ecx, byte [ebp - 0x3531]
movzx edx, byte [ebp - 0xbe7d]
add ecx, edx
movzx eax, byte [ebp - 0x6b99]
movzx edx, byte [ebp - 0xdf69]
add eax, edx
cmp ecx, eax
jl 0x100062de
mov al, byte [ebp - 0x35a1]
mov byte [ebp - 0x12868], al
cmp byte [ebp - 0x12868], 0x7f
je 0x10006287
jmp 0x100062c1
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xbf28]
mov dword [ebp - 0x33d8], edx
lea eax, [ebp - 0xbf28]
mov dword [ebp - 0xb45c], eax
lea ecx, [ebp - 0x6f88]
mov dword [ebp - 0x10bc0], ecx
lea edx, [ebp - 0x35a1]
mov dword [ebp - 0xe4b0], edx
jmp 0x100062dc
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
add ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
jmp 0x100062f6
movsx edx, byte [ebp - 0x35a1]
mov eax, dword [ebp - 0x4964]
movsx ecx, byte [eax]
sar edx, cl
mov byte [0x1013db75], dl
mov ecx, dword [ebp - 0x11110]
or ecx, dword [ebp - 0xfed8]
mov dword [ebp - 0x8568], ecx
mov edx, dword [ebp - 0xe000]
mov eax, dword [edx]
mov ecx, dword [0x101400fc]
shl eax, cl
mov dword [ebp - 0x86c4], eax
mov ecx, dword [ebp - 0xfffc]
movzx ecx, byte [ecx]
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
xor ecx, eax
movzx eax, byte [ebp - 0xdf69]
movzx esi, byte [ebp - 0x6b99]
cdq
idiv esi
cmp ecx, eax
jl 0x100f6747
movzx ecx, word [ebp - 0x7218]
mov edx, dword [ebp - 0x126f4]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
movzx edx, word [ebp - 0x404]
and eax, edx
cmp ecx, eax
jg 0x100f6702
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
imul ecx, eax
movzx edx, byte [ebp - 0x6b99]
movzx eax, byte [ebp - 0xbe7d]
add edx, eax
cmp ecx, edx
jne 0x10006413
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
sub edx, dword [0x101400fc]
mov eax, dword [ebp - 0xf300]
sub eax, dword [ebp - 0x33d8]
cmp edx, eax
jle 0x100063d6
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [0x101400fc]
mov ecx, dword [ebp - 0xac58]
shl edx, cl
mov dword [ebp - 0xf300], edx
mov eax, dword [ebp - 0xc6c]
movzx ecx, word [eax]
push ecx
movzx edx, word [ebp - 0x5c3c]
push edx
mov eax, dword [ebp - 0x10bc0]
movzx ecx, word [eax]
push ecx
call fcn.10003860
add esp, 0xc
jmp 0x1000651d
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
add eax, dword [ebp - 0x11110]
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x11810]
cmp eax, edx
jbe 0x1000651d
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xac58]
xor ecx, dword [eax]
mov dword [ebp - 0xbf28], ecx
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
mov dword [ebp - 0x1286c], eax
cmp dword [ebp - 0x1286c], 0x15
je 0x10006478
cmp dword [ebp - 0x1286c], 0x9ff
je 0x10006507
jmp 0x1000651d
push 5
lea ecx, [ebp - 0x10dc4]
push ecx
push fcn.100022f0
mov edx, dword [ebp - 0x18c4]
push edx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xc000], eax
mov eax, dword [ebp - 0x3720]
mov edx, dword [ebp - 0xfed8]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0x4964]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
and edx, ecx
mov byte [0x1013db75], dl
movzx edx, byte [ebp - 0x3531]
movzx eax, byte [ebp - 0x6b99]
add edx, eax
mov ecx, dword [ebp - 0xfffc]
mov byte [ecx], dl
push 1
mov edx, dword [ebp - 0xc510]
push edx
mov eax, dword [ebp - 0xc514]
push eax
mov ecx, dword [ebp - 0x108e8]
push ecx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x33d8], eax
jmp 0x1000651d
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xfafc], ecx
movzx edx, word [ebp - 0x7218]
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x126f4]
movzx ecx, word [eax]
mov eax, dword [ebp - 0xaf3c]
movzx eax, word [eax]
sub ecx, eax
cmp edx, ecx
jl 0x100f66b5
mov cl, byte [ebp - 0xdf69]
mov byte [ebp - 0xcd9d], cl
movzx edx, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x404]
sar edx, cl
mov eax, dword [ebp - 0x126f4]
mov word [eax], dx
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov dword [ebp - 0x3074], edx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3720]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x11c30]
cmp edx, ecx
ja 0x10006647
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
mov dword [ebp - 0x12870], eax
cmp dword [ebp - 0x12870], 0x687
je 0x100065cf
cmp dword [ebp - 0x12870], 0xb57
je 0x1000662f
jmp 0x10006642
push 0xc1
mov ecx, dword [ebp - 0x108e8]
push ecx
mov edx, dword [ebp - 0xd2a0]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [ebp - 0xfed8]
and ecx, dword [eax]
mov edx, dword [ebp - 0xa4fc]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [ebp - 0xac58]
sub ecx, dword [eax]
mov dword [ebp - 0xfe90], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
sub eax, dword [ebp - 0xbf28]
mov ecx, dword [ebp - 0xb45c]
mov dword [ecx], eax
call fcn.10003c00
jmp 0x10006642
lea edx, [ebp - 0xe440]
push edx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x86c4], eax
jmp 0x10006735
movzx eax, byte [ebp - 0x3531]
movzx ecx, byte [ebp - 0xbe7d]
or eax, ecx
mov edx, dword [ebp - 0x5570]
movzx ecx, byte [edx]
movzx edx, byte [ebp - 0xdf69]
imul ecx, edx
cmp eax, ecx
jl 0x10006735
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xac58]
sub ecx, dword [eax]
mov dword [ebp - 0x86c4], ecx
movsx edx, byte [ebp - 0x35a1]
movsx eax, byte [0x1013db75]
add edx, eax
mov ecx, dword [ebp - 0x4964]
movsx eax, byte [ecx]
mov ecx, dword [ebp - 0xe4b0]
movsx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jl 0x100066e1
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xbe7d]
add eax, ecx
mov edx, dword [ebp - 0x5570]
mov byte [edx], al
movzx eax, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x117ec]
add eax, ecx
mov word [ebp - 0x404], ax
jmp 0x10006735
movzx edx, word [ebp - 0x7218]
movzx eax, word [ebp - 0x117ec]
and edx, eax
mov ecx, dword [ebp - 0x126f4]
movzx eax, word [ecx]
mov ecx, dword [ebp - 0xaf3c]
movzx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jl 0x10006735
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
push eax
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
push edx
movzx eax, word [ebp - 0x404]
push eax
mov dl, byte [ebp - 0x35a1]
mov cl, byte [ebp - 0x35a1]
call fcn.10002f50
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8568]
shl edx, cl
mov eax, dword [ebp - 0x1d10]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x86c4]
mov eax, dword [ebp - 0xe000]
mov dword [eax], edx
mov dword [ebp - 0xb07c], 0xbf1a
lea ecx, [ebp - 0xf300]
mov dword [ebp - 0xe254], ecx
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0x87d0]
or eax, dword [edx]
mov dword [ebp - 0x3074], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0x33d8]
mov ecx, dword [ecx]
sar edx, cl
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0xfffc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xdf69], cl
movsx ecx, word [ebp - 0x5c3c]
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0x10bc0]
mov word [edx], cx
mov eax, dword [ebp - 0xb07c]
add eax, 4
mov dword [ebp - 0xb07c], eax
movsx ecx, byte [0x1013db75]
mov edx, dword [ebp - 0x4964]
movsx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x35a1], cl
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa4fc]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1d10]
mov dword [ecx], edx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
sub eax, dword [ebp - 0xf300]
mov dword [ebp - 0xfafc], eax
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
sub edx, eax
mov ecx, dword [ebp - 0xaf3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x5570]
mov byte [ecx], al
mov edx, dword [ebp - 0xe000]
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0xe000]
mov dword [edx], ecx
mov eax, dword [ebp - 0x7a9c]
add eax, dword [ebp - 0x11110]
mov dword [0x1013db78], eax
mov edx, dword [ebp - 0x3248]
mov ecx, dword [ebp - 0xac58]
sar edx, cl
mov eax, dword [ebp - 0xe000]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0xbf28]
or edx, dword [ecx]
mov eax, dword [ebp - 0xe000]
mov dword [eax], edx
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
xor edx, ecx
mov byte [ebp - 0xcd9d], dl
movzx edx, word [ebp - 0x404]
movzx ecx, word [ebp - 0x117ec]
shl edx, cl
mov eax, dword [ebp - 0xaf3c]
mov word [eax], dx
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0x3720]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x3074], eax
mov ecx, dword [ebp - 0xe254]
mov edx, dword [ecx]
and edx, dword [ebp - 0xfe90]
mov dword [ebp - 0x86c4], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xfe90]
mov dword [ebp - 0x3248], ecx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
sub eax, dword [ebp - 0xac58]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ebp - 0xbf28]
add eax, dword [edx]
mov dword [0x101400fc], eax
cmp dword [ebp - 0xb07c], 0xbf86
jb 0x1000678d
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
mov dword [ebp - 0x12874], edx
cmp dword [ebp - 0x12874], 0xae6
je 0x1000697d
jmp 0x100069a0
push 0xbd
push 0xb1
push 0x89
mov eax, dword [ebp - 0x45dc]
push eax
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x30a4], eax
jmp 0x100069e0
lea ecx, [ebp - 0x35a1]
mov dword [ebp - 0x9a4c], ecx
mov edx, dword [ebp - 0xc6c]
mov ax, word [edx]
mov word [ebp - 0xb6dc], ax
movzx ecx, byte [ebp - 0xcd9d]
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x6b99], cl
lea ecx, [ebp - 0xc284]
mov dword [ebp - 0xe090], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
mov dword [ebp - 0x12878], eax
cmp dword [ebp - 0x12878], 0x39f0
je 0x10006a08
cmp dword [ebp - 0x12878], 0x3adf
je 0x10006a20
jmp 0x10006a5a
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ecx]
add edx, dword [ebp - 0x7a9c]
mov eax, dword [ebp - 0x3720]
mov dword [eax], edx
jmp 0x10006a5a
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1d10]
add edx, dword [eax]
mov dword [ebp - 0x8568], edx
mov ecx, dword [ebp - 0xc6c]
movzx edx, word [ecx]
push edx
movzx eax, word [ebp - 0xb6dc]
push eax
mov ecx, dword [ebp - 0xc6c]
movzx edx, word [ecx]
push edx
call fcn.10003860
add esp, 0xc
movzx eax, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x117ec]
sub eax, ecx
mov edx, dword [ebp - 0xaf3c]
mov word [edx], ax
lea eax, [ebp - 0x3531]
mov dword [ebp - 0x2f24], eax
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
and edx, dword [0x1013db78]
mov dword [0x1013db7c], edx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xe000]
mov edx, dword [eax]
or edx, dword [ecx]
mov dword [ebp - 0x33d8], edx
lea eax, [ebp - 0x11c30]
mov dword [ebp - 0xc3a8], eax
mov cl, byte [ebp - 0xbe7d]
mov byte [ebp - 0x1287c], cl
cmp byte [ebp - 0x1287c], 0x27
je 0x10006acf
jmp 0x100f650e
movzx edx, word [ebp - 0xc284]
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x117ec], dx
movzx edx, byte [ebp - 0x3531]
movzx eax, byte [ebp - 0xdf69]
add edx, eax
mov byte [ebp - 0x6b99], dl
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0x87d0]
add edx, dword [ecx]
mov dword [ebp - 0x11110], edx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [ebp - 0xe000]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0xb45c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xf300]
xor ecx, dword [ebp - 0x33d8]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], ecx
mov eax, dword [ebp - 0x87d0]
or eax, dword [ebp - 0x5058]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ebp - 0xe000]
mov edx, dword [edx]
mov ecx, dword [eax]
sar edx, cl
mov dword [ebp - 0x3248], edx
movzx eax, byte [ebp - 0xdf69]
movzx ecx, byte [ebp - 0x3531]
and eax, ecx
mov edx, dword [ebp - 0x2f24]
mov byte [edx], al
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
add ecx, eax
mov edx, dword [ebp - 0xe090]
mov word [edx], cx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xfafc]
mov edx, dword [ebp - 0xb45c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xc3a8]
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0xfed8], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0xf300]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1a88]
mov dword [edx], ecx
mov eax, dword [ebp - 0xfafc]
mov dword [ebp - 0xa430], eax
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x7218]
sub edx, eax
mov ecx, dword [ebp - 0xe090]
mov word [ecx], dx
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xbe7d]
add eax, ecx
mov byte [ebp - 0xdf69], al
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x6f88]
sub eax, ecx
mov word [ebp - 0x5c3c], ax
movsx edx, byte [ebp - 0x35a1]
mov eax, dword [ebp - 0x4964]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x1013db75], dl
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x7a9c], ecx
mov edx, dword [ebp - 0xb45c]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x33d8]
sar eax, cl
mov dword [ebp - 0xf300], eax
movzx ecx, word [ebp - 0x117ec]
mov edx, dword [ebp - 0x126f4]
movzx eax, word [edx]
xor ecx, eax
mov edx, dword [ebp - 0xaf3c]
mov word [edx], cx
mov eax, dword [ebp - 0x5570]
movzx edx, byte [eax]
movzx ecx, byte [ebp - 0x6b99]
shl edx, cl
mov byte [ebp - 0xcd9d], dl
mov eax, dword [ebp - 0xfed8]
and eax, dword [ebp - 0x87d0]
mov dword [ebp - 0x3074], eax
mov ecx, dword [ebp - 0xb45c]
mov edx, dword [ecx]
add edx, dword [ebp - 0xa430]
mov eax, dword [ebp - 0xe254]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe254]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xe000]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], edx
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x7a9c], ecx
movsx edx, byte [ebp - 0x35a1]
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
add edx, ecx
mov byte [0x1013db75], dl
movzx edx, word [ebp - 0x117ec]
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ebp - 0xa430]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x3248]
mov dword [ebp - 0x33d8], edx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x7a9c]
mov edx, dword [ebp - 0xc3a8]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xa430]
mov edx, dword [ebp - 0xe000]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeff4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0xbf28]
sar edx, cl
mov dword [ebp - 0xac58], edx
movsx eax, byte [0x1013db75]
mov ecx, dword [ebp - 0x9a4c]
movsx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0x35a1], al
mov eax, dword [ebp - 0x10bc0]
movsx edx, word [eax]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
shl edx, cl
mov word [ebp - 0xb6dc], dx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
or edx, dword [ebp - 0xbf28]
mov dword [0x101400fc], edx
movzx eax, byte [ebp - 0xdf69]
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2f24]
mov byte [ecx], al
mov edx, dword [ebp - 0x11c30]
add edx, dword [ebp - 0x87d0]
mov eax, dword [ebp - 0xc3a8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xac58], eax
movzx ecx, byte [ebp - 0x3531]
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
add ecx, eax
mov byte [ebp - 0x6b99], cl
mov ecx, dword [ebp - 0x63fc]
sub ecx, 0x40
mov dword [ebp - 0x63fc], ecx
movzx edx, word [ebp - 0x117ec]
movzx eax, word [ebp - 0x7218]
add edx, eax
mov word [ebp - 0x404], dx
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0x87d0], eax
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ecx]
and edx, dword [0x101400fc]
mov eax, dword [ebp - 0xe000]
mov dword [eax], edx
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xa430]
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0x3720]
mov ecx, dword [ebp - 0x11c30]
add ecx, dword [eax]
mov dword [0x1013db7c], ecx
mov edx, dword [ebp - 0x126f4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xaf3c]
mov word [ecx], ax
movzx edx, byte [ebp - 0xcd9d]
movzx ecx, byte [ebp - 0xbe7d]
sar edx, cl
mov eax, dword [ebp - 0xfffc]
mov byte [eax], dl
mov ecx, dword [ebp - 0xac58]
xor ecx, dword [0x101400fc]
mov dword [ebp - 0xfafc], ecx
cmp dword [ebp - 0x63fc], 0xf9ea
jae 0x10006acf
mov edx, dword [ebp - 0x1d10]
mov eax, dword [edx]
mov dword [ebp - 0x12880], eax
cmp dword [ebp - 0x12880], 0
je 0x10006f37
jmp 0x100070d5
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
mov dword [ebp - 0x12884], edx
cmp dword [ebp - 0x12884], 0x4c8
je 0x10006f57
jmp 0x10006fe8
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [eax]
mov dword [ebp - 0x12888], ecx
cmp dword [ebp - 0x12888], 0x3445
je 0x10006f73
jmp 0x10006fcb
lea edx, [ebp - 0x404]
push edx
push fcn.10002410
mov eax, dword [ebp - 0x8e9c]
push eax
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0xc000], eax
mov edx, dword [0x101400fc]
mov ecx, dword [ebp - 0xac58]
shl edx, cl
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0xc6c]
movzx ecx, word [eax]
push ecx
mov edx, dword [ebp - 0xc6c]
movzx eax, word [edx]
push eax
movzx ecx, word [ebp - 0xb6dc]
push ecx
call fcn.10003860
add esp, 0xc
jmp 0x10006fe3
movsx edx, byte [ebp - 0x35a1]
movsx eax, byte [0x1013db75]
or edx, eax
mov ecx, dword [ebp - 0xe4b0]
mov byte [ecx], dl
jmp 0x100070d3
movsx edx, byte [ebp - 0x35a1]
mov eax, dword [ebp - 0x9a4c]
movsx ecx, byte [eax]
and edx, ecx
movsx eax, byte [0x1013db75]
mov ecx, dword [ebp - 0xe4b0]
movsx ecx, byte [ecx]
add eax, ecx
cmp edx, eax
jne 0x100070c7
mov dl, byte [ebp - 0x35a1]
mov byte [ebp - 0x1288c], dl
cmp byte [ebp - 0x1288c], 0
je 0x1000702e
jmp 0x100070af
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
sub ecx, eax
movsx edx, word [ebp - 0x6f88]
movsx eax, word [ebp - 0x10dc4]
add edx, eax
cmp ecx, edx
jg 0x100070ad
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
sub edx, ecx
mov word [ebp - 0xb6dc], dx
push 0x8b
push 0xc2
push 0xa3
mov edx, dword [ebp - 0x108e8]
push edx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x10f08], eax
movzx eax, word [ebp - 0x404]
mov ecx, dword [ebp - 0x126f4]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0xe090]
mov word [ecx], ax
jmp 0x100070c7
movzx edx, byte [ebp - 0xbe7d]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0x3531], dl
mov dl, byte [0x1013db75]
mov byte [0x1013f44e], dl
jmp 0x100070e1
mov eax, dword [ebp - 0xbf28]
push eax
call fcn.10002910
mov ecx, dword [ebp - 0x11c30]
and ecx, dword [ebp - 0x87d0]
mov edx, dword [ebp - 0x11110]
add edx, dword [ebp - 0xfed8]
cmp ecx, edx
jb 0x1000713a
lea eax, [ebp - 0x11110]
push eax
push fcn.10003860
mov ecx, dword [ebp - 0x4c90]
push ecx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2588], eax
mov edx, dword [ebp - 0x3720]
mov eax, dword [ebp - 0xa4fc]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0x1d10]
mov dword [eax], edx
jmp 0x100f64d5
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ebp - 0x3248]
sub edx, dword [ecx]
mov dword [ebp - 0xfe90], edx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [eax]
mov dword [ebp - 0x10de0], ecx
mov dword [ebp - 0x31ec], 0xe5f3
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov dword [ebp - 0x12890], eax
cmp dword [ebp - 0x12890], 0
je 0x1000718e
cmp dword [ebp - 0x12890], 0x765c
je 0x100071f9
jmp 0x10007225
mov ecx, dword [ebp - 0x9a4c]
mov dl, byte [ecx]
mov byte [ebp - 0x12894], dl
cmp byte [ebp - 0x12894], 0x19
je 0x100071b0
cmp byte [ebp - 0x12894], 0x41
je 0x100071c4
jmp 0x100071f7
mov eax, dword [ebp - 0xac58]
and eax, dword [ebp - 0xf300]
mov dword [ebp - 0xfe90], eax
jmp 0x100071f7
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
movzx eax, word [ebp - 0x117ec]
sub edx, eax
mov ecx, dword [ebp - 0x126f4]
mov word [ecx], dx
movzx edx, byte [ebp - 0xdf69]
mov eax, dword [ebp - 0xfffc]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xbe7d], dl
jmp 0x10007225
mov edx, dword [ebp - 0xac58]
push edx
mov eax, dword [ebp - 0x2f24]
movzx ecx, byte [eax]
push ecx
movzx edx, word [ebp - 0x404]
push edx
mov eax, dword [ebp - 0xe4b0]
mov dl, byte [eax]
mov cl, byte [ebp - 0x35a1]
call fcn.10002f50
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x1d10]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], edx
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x10bc0]
movsx edx, word [ecx]
add eax, edx
movsx ecx, word [ebp - 0xb6dc]
movsx edx, word [ebp - 0x10dc4]
add ecx, edx
cmp eax, ecx
jl 0x10007310
mov al, byte [ebp - 0x35a1]
mov byte [ebp - 0x12898], al
cmp byte [ebp - 0x12898], 0x25
je 0x10007280
jmp 0x100072a5
push 0xb8
lea ecx, [ebp - 0x10dc4]
push ecx
push fcn.10002f50
mov edx, dword [ebp - 0x55a4]
push edx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0x2588], eax
jmp 0x100072fa
movzx eax, word [ebp - 0x117ec]
movzx ecx, word [ebp - 0xc284]
add eax, ecx
movzx edx, word [ebp - 0x7218]
movzx ecx, word [ebp - 0x404]
add edx, ecx
cmp eax, edx
jle 0x100072f5
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [edx]
and ecx, dword [eax]
mov edx, dword [ebp - 0xb45c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [ebp - 0xbf28]
xor ecx, dword [eax]
mov dword [0x101400fc], ecx
call fcn.10003c00
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0xc3a8]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0x11c30], ecx
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2f24]
movzx ecx, byte [ecx]
sar eax, cl
mov edx, dword [ebp - 0x5570]
mov byte [edx], al
cmp dword [ebp - 0x1438], 0xdf10
ja 0x100074db
mov eax, dword [ebp - 0x1438]
add eax, 0x50
mov dword [ebp - 0x1438], eax
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
shl edx, cl
mov ecx, dword [ebp - 0xd658]
mov word [ecx], dx
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10dc4]
add eax, ecx
mov word [ebp - 0x6f88], ax
mov edx, dword [ebp - 0x9a4c]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x35a1]
add eax, ecx
mov edx, dword [ebp - 0x9a4c]
mov byte [edx], al
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [eax]
and edx, dword [ecx]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
mov ecx, dword [ebp - 0xe254]
mov edx, dword [ebp - 0xbf28]
add edx, dword [ecx]
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
movzx ecx, byte [ebp - 0x3531]
movzx edx, byte [ebp - 0xbe7d]
sub ecx, edx
mov eax, dword [ebp - 0x5570]
mov byte [eax], cl
mov ecx, dword [ebp - 0x10de0]
sub ecx, dword [ebp - 0xfe90]
mov dword [0x101400fc], ecx
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ebp - 0xe254]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xfe90], ecx
mov edx, dword [ebp - 0x87d0]
add edx, dword [ebp - 0x5058]
mov eax, dword [ebp - 0xc3a8]
mov dword [eax], edx
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0xfafc]
sub edx, dword [ecx]
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x10de0]
sub ecx, dword [eax]
mov dword [ebp - 0xf300], ecx
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3531]
add eax, ecx
mov edx, dword [ebp - 0xfffc]
mov byte [edx], al
movzx eax, word [ebp - 0x7218]
mov ecx, dword [ebp - 0xd658]
movzx edx, word [ecx]
or eax, edx
mov word [ebp - 0x117ec], ax
mov eax, dword [ebp - 0xc3a8]
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x3720]
mov dword [eax], edx
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ebp - 0xe000]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xb45c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe254]
mov eax, dword [ebp - 0xf300]
mov ecx, dword [edx]
sar eax, cl
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe254]
mov eax, dword [edx]
and eax, dword [ebp - 0xfe90]
mov dword [ebp - 0xac58], eax
jmp 0x1000732c
movzx ecx, byte [ebp - 0xcd9d]
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
add ecx, eax
movzx edx, byte [ebp - 0xdf69]
movzx eax, byte [ebp - 0x3531]
add edx, eax
cmp ecx, edx
je 0x100f64bd
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0x1d10]
mov ecx, dword [ecx]
sub ecx, dword [edx]
cmp eax, ecx
jb 0x10007630
lea edx, [ebp - 0xfafc]
mov dword [ebp - 0x9f2c], edx
mov dword [ebp - 0xa798], 0x3a58
mov eax, dword [ebp - 0x9a4c]
mov cl, byte [eax]
mov byte [ebp - 0xda41], cl
mov edx, dword [ebp - 0xe254]
mov eax, dword [ebp - 0xf300]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xac58]
cmp eax, edx
je 0x1000762e
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x5c3c]
xor eax, ecx
mov edx, dword [ebp - 0x10bc0]
mov word [edx], ax
movzx eax, word [ebp - 0x117ec]
mov ecx, dword [ebp - 0xaf3c]
movzx ecx, word [ecx]
sar eax, cl
movzx edx, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x404]
and edx, ecx
cmp eax, edx
jle 0x100075f8
movzx edx, word [ebp - 0xc284]
movzx eax, word [ebp - 0x404]
add edx, eax
mov word [ebp - 0x7218], dx
movzx ecx, byte [ebp - 0x6b99]
movzx edx, byte [ebp - 0xbe7d]
add ecx, edx
mov eax, dword [ebp - 0xfffc]
mov byte [eax], cl
lea ecx, [ebp - 0x3794]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x86c4], eax
jmp 0x1000762e
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0xfe90]
add eax, dword [edx]
cmp ecx, eax
jne 0x1000762e
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ebp - 0x87d0]
and edx, dword [ecx]
mov dword [ebp - 0x7a9c], edx
jmp 0x10007644
mov eax, dword [ebp - 0x3074]
add eax, dword [ebp - 0x11110]
mov ecx, dword [ebp - 0xa4fc]
mov dword [ecx], eax
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xdf69]
sub eax, ecx
mov edx, dword [ebp - 0x5570]
movzx ecx, byte [edx]
mov edx, dword [ebp - 0xfffc]
movzx edx, byte [edx]
sub ecx, edx
cmp eax, ecx
je 0x100077d4
movzx eax, byte [ebp - 0xcd9d]
movzx ecx, byte [ebp - 0x3531]
sar eax, cl
mov byte [0x1013db76], al
mov ecx, dword [ebp - 0x9a4c]
mov dl, byte [ecx]
mov byte [ebp - 0x1289c], dl
cmp byte [ebp - 0x1289c], 0x30
je 0x100076a0
jmp 0x1000770a
mov eax, dword [ebp - 0x126f4]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
xor ecx, edx
movzx eax, word [ebp - 0xc284]
mov edx, dword [ebp - 0xaf3c]
movzx edx, word [edx]
or eax, edx
cmp ecx, eax
jg 0x10007705
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
and ecx, eax
mov word [ebp - 0x117ec], cx
movzx ecx, word [ebp - 0x5c3c]
push ecx
movzx edx, byte [ebp - 0x6b99]
push edx
mov eax, dword [ebp - 0xc6c]
movzx ecx, word [eax]
push ecx
call fcn.100022f0
add esp, 0xc
jmp 0x100077cf
mov dl, byte [ebp - 0xda41]
mov byte [ebp - 0x128a0], dl
cmp byte [ebp - 0x128a0], 0
je 0x10007724
jmp 0x100077bc
mov eax, dword [ebp - 0x2f24]
mov cl, byte [eax]
mov byte [ebp - 0x128a4], cl
cmp byte [ebp - 0x128a4], 0
je 0x10007746
cmp byte [ebp - 0x128a4], 0xc5
je 0x100077a0
jmp 0x100077ba
movzx edx, byte [ebp - 0xbe7d]
imul edx, edx, 0xe
mov byte [ebp - 0xcd9d], dl
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
mov dword [ebp - 0x3bd0], ecx
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x3720]
add eax, dword [ecx]
mov edx, dword [ebp - 0x1d10]
mov dword [edx], eax
mov eax, dword [ebp - 0xe000]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xeff4]
add ecx, dword [edx]
mov dword [ebp - 0xac58], ecx
lea eax, [ebp - 0x86c4]
mov dword [ebp - 0xf940], eax
jmp 0x100077ba
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x2f24]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xbe7d], dl
jmp 0x100077cf
mov edx, dword [ebp - 0x8e9c]
push edx
call dword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [ebp - 0xb3c0], eax
jmp 0x100078dc
mov eax, dword [ebp - 0xf940]
mov ecx, dword [eax]
mov dword [ebp - 0x128a8], ecx
cmp dword [ebp - 0x128a8], 0x16ca
je 0x10007803
cmp dword [ebp - 0x128a8], 0x4ef0
je 0x100078c1
jmp 0x100078dc
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
sub eax, edx
movsx ecx, word [ebp - 0x5c3c]
movsx edx, word [ebp - 0xb6dc]
sub ecx, edx
cmp eax, ecx
je 0x1000787c
movzx eax, word [ebp - 0x404]
movzx ecx, word [ebp - 0xc284]
sub eax, ecx
mov edx, dword [ebp - 0x126f4]
mov word [edx], ax
mov eax, dword [0x1013db78]
sub eax, dword [ebp - 0x11c30]
mov dword [0x1013db7c], eax
mov ecx, dword [ebp - 0xe000]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
xor eax, dword [edx]
mov ecx, dword [ebp - 0xb45c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf940]
mov eax, dword [edx]
push eax
call fcn.10002910
jmp 0x100078bf
movzx ecx, byte [ebp - 0xdf69]
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
and ecx, eax
movzx edx, byte [ebp - 0x6b99]
mov eax, dword [ebp - 0x5570]
movzx eax, byte [eax]
add edx, eax
cmp ecx, edx
jg 0x100078bf
push 0x21
push 0x93
push 0x7a
mov ecx, dword [ebp - 0xd2a0]
push ecx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x8854], eax
jmp 0x100078dc
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
or eax, edx
mov word [ebp - 0x10dc4], ax
mov eax, dword [ebp - 0x9a4c]
mov cl, byte [eax]
mov byte [ebp - 0x10bd], cl
movsx edx, word [ebp - 0x5c3c]
movsx ecx, word [ebp - 0x6f88]
shl edx, cl
movsx eax, word [ebp - 0xb6dc]
mov ecx, dword [ebp - 0xc6c]
movsx ecx, word [ecx]
sar eax, cl
cmp edx, eax
je 0x10007943
mov edx, dword [ebp - 0xe090]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7218]
add eax, ecx
mov edx, dword [ebp - 0x126f4]
mov word [edx], ax
movzx eax, byte [ebp - 0x6b99]
movzx ecx, byte [0x1013db76]
add eax, ecx
mov byte [ebp - 0xbe7d], al
jmp 0x100079b6
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
add eax, dword [ebp - 0x11810]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [ebp - 0xbf28]
mov dword [ebp - 0x128ac], edx
cmp dword [ebp - 0x128ac], 0
je 0x1000798c
cmp dword [ebp - 0x128ac], 0x185d
je 0x1000797c
jmp 0x100079b6
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
push ecx
call fcn.10002910
jmp 0x100079b6
mov edx, dword [ebp - 0x10de0]
mov dword [ebp - 0x101b0], edx
mov eax, dword [ebp - 0xac58]
sub eax, dword [ebp - 0xfafc]
mov dword [ebp - 0xbf28], eax
lea ecx, [ebp - 0xac58]
mov dword [0x10140670], ecx
mov edx, dword [0x1013db7c]
mov dword [ebp - 0x128b0], edx
cmp dword [ebp - 0x128b0], 0x2abd
je 0x100079d0
jmp 0x10007a15
push 1
mov eax, dword [ebp - 0xc510]
push eax
mov ecx, dword [ebp - 0xc514]
push ecx
mov edx, dword [ebp - 0x8e9c]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x12048], eax
mov eax, dword [ebp - 0x11110]
sub eax, dword [ebp - 0x8568]
mov ecx, dword [ebp - 0xc3a8]
mov dword [ecx], eax
mov edx, dword [ebp - 0x33d8]
mov dword [ebp - 0x12048], edx
jmp 0x10007a91
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
movzx edx, byte [0x1013db76]
sub ecx, edx
movzx eax, byte [ebp - 0x6b99]
mov edx, dword [ebp - 0x2f24]
movzx edx, byte [edx]
and eax, edx
cmp ecx, eax
jle 0x10007a91
mov eax, dword [ebp - 0xaf3c]
mov cx, word [eax]
mov word [ebp - 0x89e8], cx
mov dword [ebp - 0xad54], 0x9400
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0x3531]
sub eax, ecx
mov byte [ebp - 0xcd9d], al
mov edx, dword [ebp - 0xa430]
mov ecx, dword [ebp - 0x33d8]
sar edx, cl
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
lea ecx, [ebp - 0x11110]
mov dword [ebp - 0xb274], ecx
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
mov ecx, dword [ebp - 0x10bc0]
movsx edx, word [ecx]
or eax, edx
movsx ecx, word [ebp - 0x10dc4]
movsx edx, word [ebp - 0x6f88]
xor ecx, edx
cmp eax, ecx
jle 0x10007b82
movzx eax, byte [ebp - 0x6b99]
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x2f24]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xdf69]
add edx, ecx
cmp eax, edx
jg 0x10007b7d
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ebp - 0x10de0]
add eax, dword [edx]
mov dword [ebp - 0x33d8], eax
mov dword [ebp - 0xb230], 0x101400fc
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x3531]
sub edx, eax
movzx ecx, byte [ebp - 0xcd9d]
movzx eax, byte [ebp - 0xbe7d]
add ecx, eax
cmp edx, ecx
jl 0x10007b7d
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [0x101400fc]
sub edx, dword [ecx]
mov eax, dword [0x10140670]
mov dword [eax], edx
push 1
mov ecx, dword [ebp - 0xebd0]
push ecx
mov edx, dword [ebp - 0xebd4]
push edx
mov eax, dword [ebp - 0x18c4]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xfe90], eax
movzx ecx, byte [ebp - 0xdf69]
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
and ecx, eax
mov byte [ebp - 0xbe7d], cl
jmp 0x10007c1f
mov ecx, dword [ebp - 0x3720]
mov edx, dword [0x1013db7c]
mov ecx, dword [ecx]
shl edx, cl
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x11110]
cmp edx, ecx
jbe 0x10007c1f
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x10dc4], ax
movsx eax, byte [ebp - 0x10bd]
movsx ecx, byte [ebp - 0x35a1]
or eax, ecx
movsx edx, byte [ebp - 0xda41]
movsx ecx, byte [0x1013db75]
sar edx, cl
cmp eax, edx
jg 0x10007c1f
mov eax, dword [ebp - 0xe4b0]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x9a4c]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xe4b0]
mov byte [ecx], dl
movzx edx, word [ebp - 0x10dc4]
push edx
movzx eax, word [ebp - 0x10dc4]
push eax
movzx ecx, word [ebp - 0x10dc4]
push ecx
call fcn.10003860
add esp, 0xc
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa4fc]
add eax, dword [ecx]
mov edx, dword [ebp - 0xc3a8]
mov dword [edx], eax
mov eax, dword [ebp - 0xfafc]
sub eax, dword [ebp - 0xfe90]
mov dword [ebp - 0x33d8], eax
lea ecx, [ebp - 0xdf69]
mov dword [ebp - 0x7434], ecx
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x7434]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
mov ecx, dword [ebp - 0xfffc]
movzx ecx, byte [ecx]
sub edx, ecx
cmp eax, edx
jl 0x10007ccd
movzx edx, word [ebp - 0x117ec]
movzx eax, word [ebp - 0x404]
sub edx, eax
mov word [ebp - 0x89e8], dx
push 0x74
push 0x2a
push 2
mov ecx, dword [ebp - 0xd2a0]
push ecx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x10f08], eax
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xa4fc]
add eax, dword [ecx]
mov edx, dword [ebp - 0xb274]
mov dword [edx], eax
jmp 0x10007d9e
mov eax, dword [ebp - 0x9a4c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0xe4b0]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0x4964]
movsx eax, byte [edx]
movsx edx, byte [ebp - 0x10bd]
add eax, edx
cmp ecx, eax
jne 0x10007d9e
mov eax, dword [ebp - 0xe4b0]
mov cl, byte [eax]
mov byte [ebp - 0x128b4], cl
cmp byte [ebp - 0x128b4], 0
je 0x10007d14
jmp 0x10007d88
mov edx, dword [ebp - 0x7434]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xcd9d]
sub eax, ecx
mov byte [0x1013db77], al
mov edx, dword [ebp - 0x9f2c]
mov eax, dword [edx]
sub eax, dword [ebp - 0x3bd0]
mov dword [ebp - 0xa430], eax
mov ecx, dword [0x101400fc]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0xb274]
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x11c30], ecx
movzx edx, word [ebp - 0x404]
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x117ec], dx
lea ecx, [ebp - 0x3531]
mov dword [ebp - 0x99d8], ecx
jmp 0x10007d9e
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ebp - 0xb230]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0xfafc], ecx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
xor eax, dword [ebp - 0x10de0]
mov dword [ebp - 0x3248], eax
mov ecx, dword [ebp - 0x8568]
mov dword [ebp - 0x9f4c], ecx
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [ebp - 0x3720]
mov edx, dword [edx]
mov ecx, dword [eax]
shr edx, cl
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x9f4c]
cmp edx, ecx
ja 0x10007e53
movsx edx, word [ebp - 0xb6dc]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
sub edx, ecx
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x10dc4]
imul eax, ecx
cmp edx, eax
je 0x10007e49
mov edx, dword [ebp - 0xfafc]
and edx, dword [ebp - 0x3bd0]
mov eax, dword [0x10140670]
mov dword [eax], edx
push 0xc8
mov ecx, dword [ebp - 0x108e8]
push ecx
mov edx, dword [ebp - 0x8e9c]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov eax, dword [ebp - 0x9f2c]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xbf28]
mov dword [ebp - 0xa430], ecx
call fcn.10003c00
jmp 0x100f64a7
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xc6c]
movsx edx, word [ecx]
imul eax, edx
movsx ecx, word [ebp - 0x5c3c]
movsx edx, word [ebp - 0xb6dc]
sub ecx, edx
cmp eax, ecx
jg 0x100f64a7
mov eax, dword [ebp - 0xfffc]
mov cl, byte [eax]
mov byte [ebp - 0x128b8], cl
cmp byte [ebp - 0x128b8], 0
je 0x10007ef5
cmp byte [ebp - 0x128b8], 0x6f
je 0x10007ea5
jmp 0x100f6438
mov edx, dword [ebp - 0x7434]
movzx eax, byte [edx]
movzx ecx, byte [ebp - 0xbe7d]
or eax, ecx
mov edx, dword [ebp - 0x5570]
mov byte [edx], al
mov eax, dword [ebp - 0x126f4]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x89e8]
sar edx, cl
mov word [ebp - 0x117ec], dx
mov eax, dword [ebp - 0xc3a8]
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [eax]
mov ecx, dword [ecx]
shl edx, cl
mov dword [ebp - 0x5058], edx
jmp 0x100f6438
mov eax, dword [ebp - 0xf940]
mov ecx, dword [ebp - 0x3bd0]
xor ecx, dword [eax]
mov edx, dword [ebp - 0xb45c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xfffc]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xdf69]
and ecx, edx
mov eax, dword [ebp - 0x99d8]
mov byte [eax], cl
mov ecx, dword [ebp - 0xc3a8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x11810]
mov dword [0x1013db7c], edx
mov eax, dword [ebp - 0xa4fc]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x87d0]
mov dword [ebp - 0x9f4c], ecx
mov edx, dword [0x10140670]
mov eax, dword [ebp - 0xf300]
add eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
mov dword [ecx], eax
mov edx, dword [ebp - 0x1a84]
mov eax, dword [edx]
sub eax, dword [ebp - 0xac58]
mov dword [ebp - 0xf300], eax
mov ecx, dword [ebp - 0xb274]
mov edx, dword [ebp - 0x3720]
mov eax, dword [ecx]
and eax, dword [edx]
mov ecx, dword [ebp - 0xc3a8]
mov dword [ecx], eax
movzx edx, word [ebp - 0xc284]
movzx eax, word [ebp - 0x117ec]
add edx, eax
mov ecx, dword [ebp - 0xaf3c]
mov word [ecx], dx
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x3531], al
mov eax, dword [0x10140670]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0xbf28], ecx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0xac58], ecx
mov edx, dword [ebp - 0x10358]
sub edx, 0xc
mov dword [ebp - 0x10358], edx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [0x10140670]
mov edx, dword [eax]
mov ecx, dword [ecx]
sar edx, cl
mov dword [0x101400fc], edx
movsx eax, byte [ebp - 0x10bd]
movsx ecx, byte [ebp - 0x35a1]
or eax, ecx
mov edx, dword [ebp - 0xe4b0]
mov byte [edx], al
movzx eax, byte [ebp - 0x6b99]
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
xor eax, edx
mov byte [ebp - 0xcd9d], al
cmp dword [ebp - 0x10358], 0x8662
ja 0x10007ef5
mov eax, dword [ebp - 0xc6c]
movsx edx, word [eax]
movsx ecx, word [ebp - 0x5c3c]
shl edx, cl
movsx eax, word [ebp - 0xb6dc]
mov ecx, dword [ebp - 0x10bc0]
movsx ecx, word [ecx]
and eax, ecx
cmp edx, eax
jge 0x100f63ab
mov edx, dword [ebp - 0xe254]
mov eax, dword [edx]
add eax, dword [ebp - 0x3248]
mov dword [ebp - 0x10de0], eax
mov ecx, dword [ebp - 0xb230]
mov edx, dword [ebp - 0x9f2c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb274]
mov eax, dword [edx]
mov dword [ebp - 0x128bc], eax
cmp dword [ebp - 0x128bc], 0x35ef
je 0x100080d9
cmp dword [ebp - 0x128bc], 0x30006272
je 0x10008168
jmp 0x10008199
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [ecx]
or eax, dword [edx]
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0xb274]
mov esi, dword [ecx]
mov ecx, dword [edx]
shr esi, cl
cmp eax, esi
ja 0x10008126
mov eax, dword [ebp - 0x86c4]
and eax, dword [ebp - 0x3248]
mov dword [ebp - 0x3bd0], eax
mov ecx, dword [ebp - 0xc3a8]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x7218]
call fcn.10003120
jmp 0x10008166
push 1
mov edx, dword [ebp - 0xebd0]
push edx
mov eax, dword [ebp - 0xebd4]
push eax
mov ecx, dword [ebp - 0xdac0]
push ecx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xfafc], eax
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x10bd]
push ecx
mov edx, dword [ebp - 0xa430]
push edx
call fcn.10002410
jmp 0x10008199
lea eax, [ebp - 0x3531]
mov dword [ebp - 0xf2e0], eax
mov cx, word [ebp - 0xc284]
mov word [0x10140630], cx
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [ebp - 0x3720]
mov ecx, dword [edx]
imul ecx, dword [eax]
mov dword [ebp - 0xfed8], ecx
mov edx, dword [ebp - 0xa430]
mov dword [ebp - 0x5cd4], edx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x101b0]
sub ecx, dword [eax]
mov dword [ebp - 0x5cd4], ecx
cmp dword [ebp - 0xad54], 0xaa72
jae 0x100084db
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0xfed8]
sub eax, dword [edx]
mov dword [ebp - 0x7a9c], eax
mov ecx, dword [ebp - 0x126f4]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x404], dx
mov edx, dword [ebp - 0xad54]
add edx, 0xa9
mov dword [ebp - 0xad54], edx
mov eax, dword [ebp - 0xf2e0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x7434]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0xbe7d], cl
movsx ecx, byte [ebp - 0x10bd]
mov edx, dword [ebp - 0x9a4c]
movsx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xe4b0]
mov byte [edx], cl
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0x5c3c]
sub eax, ecx
mov word [ebp - 0x10dc4], ax
mov edx, dword [ebp - 0xb230]
mov eax, dword [ebp - 0xfafc]
and eax, dword [edx]
mov ecx, dword [0x10140670]
mov dword [ecx], eax
mov edx, dword [0x10140670]
mov eax, dword [edx]
add eax, dword [ebp - 0x10de0]
mov dword [ebp - 0x101b0], eax
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
movzx eax, byte [ebp - 0x6b99]
xor edx, eax
mov ecx, dword [ebp - 0x7434]
mov byte [ecx], dl
mov edx, dword [ebp - 0x126f4]
movzx eax, word [edx]
movzx ecx, word [0x10140630]
or eax, ecx
mov word [ebp - 0xc284], ax
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0xb45c]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov eax, dword [ebp - 0xf940]
mov dword [eax], edx
mov edx, dword [ebp - 0x11110]
mov ecx, dword [0x1013db7c]
shr edx, cl
mov dword [ebp - 0xfed8], edx
mov eax, dword [ebp - 0xbf28]
sub eax, dword [ebp - 0x33d8]
mov dword [ebp - 0xac58], eax
mov ecx, dword [ebp - 0xb230]
mov edx, dword [ecx]
mov dword [ebp - 0x12048], edx
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xe090]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0x126f4]
mov word [edx], cx
mov eax, dword [ebp - 0x2f24]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x7434]
movzx eax, byte [edx]
add ecx, eax
mov byte [0x1013db77], cl
mov ecx, dword [ebp - 0xa4fc]
mov edx, dword [ebp - 0x87d0]
sub edx, dword [ecx]
mov dword [ebp - 0xfed8], edx
mov eax, dword [0x10140670]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x659c]
mov dword [ebp - 0xa430], ecx
mov edx, dword [ebp - 0xbf28]
sub edx, dword [ebp - 0x3248]
mov dword [ebp - 0xa430], edx
mov eax, dword [ebp - 0x9f2c]
mov ecx, dword [eax]
mov edx, dword [0x10140670]
add ecx, dword [edx]
mov dword [ebp - 0x86c4], ecx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x33d8]
mov edx, dword [ebp - 0xb230]
mov dword [edx], ecx
movsx eax, byte [ebp - 0xda41]
mov ecx, dword [ebp - 0x9a4c]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x35a1], al
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
mov edx, dword [ebp - 0xc6c]
movsx eax, word [edx]
and ecx, eax
mov word [ebp - 0x10dc4], cx
movzx edx, word [ebp - 0x89e8]
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x117ec], dx
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xf300]
sar edx, cl
mov eax, dword [0x10140670]
mov dword [eax], edx
mov ecx, dword [ebp - 0x3074]
or ecx, dword [ebp - 0x11c30]
mov dword [ebp - 0x9f4c], ecx
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [edx]
xor eax, dword [0x1013db7c]
mov dword [ebp - 0x7a9c], eax
movzx ecx, word [ebp - 0x7218]
movzx edx, word [ebp - 0x404]
add ecx, edx
mov word [ebp - 0xc284], cx
movzx eax, byte [ebp - 0x6b99]
movzx ecx, byte [ebp - 0x3531]
add eax, ecx
mov byte [ebp - 0xcd9d], al
mov edx, dword [0x101400fc]
and edx, dword [ebp - 0x10de0]
mov dword [ebp - 0xfe90], edx
mov eax, dword [ebp - 0xc3a8]
mov ecx, dword [ebp - 0x5058]
add ecx, dword [eax]
mov edx, dword [ebp - 0xb274]
mov dword [edx], ecx
mov eax, dword [0x10140670]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0xac58]
mov edx, dword [ebp - 0xb230]
mov dword [edx], ecx
mov eax, dword [ebp - 0xf940]
mov ecx, dword [ebp - 0xf300]
sub ecx, dword [eax]
mov dword [ebp - 0xfafc], ecx
movzx edx, byte [ebp - 0xbe7d]
mov eax, dword [ebp - 0xfffc]
movzx ecx, byte [eax]
add edx, ecx
mov byte [0x1013db76], dl
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0x126f4]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x89e8], ax
jmp 0x100081b9
movzx eax, word [ebp - 0xc284]
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
sub eax, edx
movzx ecx, word [0x10140630]
mov edx, dword [ebp - 0xe090]
movzx edx, word [edx]
sub ecx, edx
cmp eax, ecx
jg 0x10008547
lea eax, [ebp - 0xfed8]
mov dword [ebp - 0x1b38], eax
mov ecx, dword [ebp - 0x86c4]
sub ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0xf300], ecx
mov edx, dword [ebp - 0x4964]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x10bd]
or eax, ecx
mov edx, dword [ebp - 0x4964]
mov byte [edx], al
lea eax, [ebp - 0xb6dc]
mov dword [ebp - 0xab44], eax
lea ecx, [ebp - 0xcd9d]
mov dword [ebp - 0xec90], ecx
mov dword [ebp - 0x4e4], 0x4189
movzx edx, word [ebp - 0x89e8]
movzx ecx, word [ebp - 0xc284]
shl edx, cl
mov eax, dword [ebp - 0xd658]
mov word [eax], dx
lea ecx, [ebp - 0x9f4c]
mov dword [ebp - 0x7d94], ecx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [edx]
mov dword [ebp - 0x128c0], eax
cmp dword [ebp - 0x128c0], 0
je 0x100085ae
cmp dword [ebp - 0x128c0], 0x23eb
je 0x100f6373
jmp 0x100f637f
mov ecx, dword [ebp - 0xab44]
movsx edx, word [ecx]
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
and edx, ecx
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
movsx eax, word [ebp - 0x6f88]
imul ecx, eax
cmp edx, ecx
jne 0x100085ea
mov edx, dword [ebp - 0x11110]
mov ecx, dword [ebp - 0x117ec]
call fcn.10003120
movzx ecx, byte [ebp - 0xbe7d]
movzx edx, byte [ebp - 0x3531]
add ecx, edx
mov eax, dword [ebp - 0x5570]
movzx edx, byte [eax]
mov eax, dword [ebp - 0x99d8]
movzx eax, byte [eax]
add edx, eax
cmp ecx, edx
jle 0x10008628
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0xb274]
mov eax, dword [ecx]
and eax, dword [edx]
mov dword [ebp - 0x9f4c], eax
mov ecx, dword [ebp - 0xe254]
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
sub eax, dword [edx]
mov dword [ebp - 0xf300], eax
movzx ecx, byte [0x1013db76]
movzx edx, byte [ebp - 0x3531]
add ecx, edx
mov byte [ebp - 0xcd9d], cl
lea eax, [ebp - 0x7218]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x31ec], 0x10959
jae 0x100089f4
mov ecx, dword [ebp - 0xb45c]
mov edx, dword [ecx]
add edx, dword [ebp - 0x3bd0]
mov eax, dword [ebp - 0x9f2c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb274]
mov edx, dword [ecx]
sub edx, dword [ebp - 0x7a9c]
mov dword [ebp - 0x9f4c], edx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [ebp - 0xfe90]
sub ecx, dword [eax]
mov dword [ebp - 0xac58], ecx
mov edx, dword [ebp - 0x33d8]
mov ecx, dword [ebp - 0xbf28]
shl edx, cl
mov dword [0x101400fc], edx
movzx eax, word [ebp - 0x7218]
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
xor eax, edx
mov word [ebp - 0x89e8], ax
mov eax, dword [ebp - 0x7434]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xbe7d]
or ecx, edx
mov byte [ebp - 0x3531], cl
movsx eax, word [ebp - 0x6f88]
movsx ecx, word [ebp - 0xb6dc]
sar eax, cl
mov ecx, dword [ebp - 0xab44]
mov word [ecx], ax
mov edx, dword [ebp - 0xe4b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x9a4c]
movsx edx, byte [ecx]
and eax, edx
mov byte [ebp - 0xda41], al
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x9f4c]
mov dword [ebp - 0x8568], ecx
mov edx, dword [ebp - 0xe000]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
add eax, dword [ecx]
mov edx, dword [ebp - 0xeff4]
mov dword [edx], eax
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
movzx edx, word [0x10140630]
sub ecx, edx
mov word [ebp - 0x117ec], cx
mov eax, dword [ebp - 0x99d8]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0xbe7d]
add ecx, edx
mov eax, dword [ebp - 0x2f24]
mov byte [eax], cl
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0x87d0]
and edx, dword [ecx]
mov dword [0x1013db78], edx
mov eax, dword [ebp - 0xac58]
add eax, dword [ebp - 0x3bd0]
mov dword [ebp - 0xf300], eax
mov ecx, dword [ebp - 0xbf28]
add ecx, dword [ebp - 0x659c]
mov dword [ebp - 0xa430], ecx
mov edx, dword [ebp - 0x7d94]
mov eax, dword [ebp - 0x1b38]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov dword [ebp - 0x11110], ecx
mov edx, dword [ebp - 0xfffc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xec90]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x3531], al
mov eax, dword [ebp - 0x38]
movzx edx, word [eax]
movzx ecx, word [ebp - 0x404]
shl edx, cl
mov word [ebp - 0x117ec], dx
mov eax, dword [ebp - 0xe254]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0xac58]
mov dword [ebp - 0x3248], ecx
mov edx, dword [ebp - 0x9f2c]
mov eax, dword [edx]
or eax, dword [ebp - 0x12048]
mov dword [ebp - 0x3bd0], eax
mov ecx, dword [ebp - 0x1b38]
mov edx, dword [ebp - 0x3720]
mov eax, dword [ecx]
mov ecx, dword [edx]
shr eax, cl
mov dword [ebp - 0x11c30], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3248]
mov dword [0x101400fc], edx
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0xf300]
sub ecx, dword [eax]
mov edx, dword [ebp - 0x9f2c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x9a4c]
movsx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x4964]
mov byte [edx], cl
mov eax, dword [ebp - 0xab44]
movsx ecx, word [eax]
movsx edx, word [ebp - 0x10dc4]
sub ecx, edx
mov eax, dword [ebp - 0xab44]
mov word [eax], cx
mov ecx, dword [ebp - 0x38]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x38]
mov word [eax], dx
mov ecx, dword [ebp - 0xec90]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0x6b99], dl
mov edx, dword [ebp - 0x1b38]
mov eax, dword [0x1013db7c]
and eax, dword [edx]
mov ecx, dword [ebp - 0xb274]
mov dword [ecx], eax
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0x33d8]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xb230]
mov dword [ecx], eax
movzx edx, word [ebp - 0x404]
mov eax, dword [ebp - 0x126f4]
movzx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x89e8], dx
mov edx, dword [ebp - 0xe000]
mov eax, dword [ebp - 0xfe90]
add eax, dword [edx]
mov ecx, dword [0x10140670]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb274]
mov eax, dword [ebp - 0x11810]
mov ecx, dword [edx]
shr eax, cl
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
mov edx, dword [0x10140670]
mov eax, dword [edx]
xor eax, dword [ebp - 0x33d8]
mov dword [ebp - 0xac58], eax
mov ecx, dword [ebp - 0x31ec]
add ecx, 0xc5
mov dword [ebp - 0x31ec], ecx
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ebp - 0xe000]
mov ecx, dword [edx]
or ecx, dword [eax]
mov dword [ebp - 0xa430], ecx
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0xa4fc]
mov edx, dword [edx]
mov ecx, dword [eax]
shl edx, cl
mov dword [ebp - 0xfed8], edx
movzx eax, word [ebp - 0x117ec]
movzx ecx, word [ebp - 0x89e8]
and eax, ecx
mov word [ebp - 0x7218], ax
movzx edx, byte [ebp - 0xdf69]
movzx eax, byte [ebp - 0x3531]
add edx, eax
mov ecx, dword [ebp - 0x2f24]
mov byte [ecx], dl
mov edx, dword [ebp - 0xeff4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0xe000]
add eax, dword [ecx]
mov dword [ebp - 0x12048], eax
mov edx, dword [ebp - 0xfe90]
sub edx, dword [ebp - 0xa430]
mov dword [ebp - 0x3248], edx
jmp 0x1000865d
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x89e8]
sub ecx, edx
movzx eax, word [ebp - 0xc284]
movzx edx, word [ebp - 0x7218]
sub eax, edx
cmp ecx, eax
jl 0x100f6241
mov eax, dword [ebp - 0x12048]
add eax, dword [0x101400fc]
mov dword [ebp - 0xfafc], eax
movzx ecx, word [ebp - 0x89e8]
mov dword [ebp - 0x128c4], ecx
cmp dword [ebp - 0x128c4], 0
je 0x10008a48
jmp 0x10008a9c
mov edx, dword [ebp - 0xbf28]
mov dword [ebp - 0xaa04], edx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xeff4]
add ecx, dword [edx]
mov dword [ebp - 0xf300], ecx
movzx eax, byte [ebp - 0x6b99]
mov ecx, dword [ebp - 0xec90]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0xdf69], al
movzx eax, word [ebp - 0xc284]
mov ecx, dword [ebp - 0x126f4]
movzx edx, word [ecx]
add eax, edx
mov word [str.5_ah], ax
jmp 0x10008abe
movzx eax, word [ebp - 0x5c3c]
push eax
mov ecx, dword [ebp - 0x10bc0]
movzx edx, word [ecx]
push edx
movzx eax, word [ebp - 0x10dc4]
push eax
call fcn.10003860
add esp, 0xc
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
mov dword [ebp - 0xdc4c], edx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [0x10140670]
mov edx, dword [eax]
and edx, dword [ecx]
mov dword [ebp - 0xa430], edx
lea eax, [ebp - 0x12048]
mov dword [ebp - 0xf65c], eax
movzx edx, word [ebp - 0x7218]
mov eax, dword [ebp - 0x126f4]
movzx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0xd658]
movzx eax, word [ecx]
movzx ecx, word [0x10140630]
or eax, ecx
cmp edx, eax
jle 0x10008b2c
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [edx]
sub eax, dword [ebp - 0x9f4c]
mov dword [ebp - 0x11810], eax
jmp 0x10008b91
movsx edx, byte [ebp - 0x35a1]
movsx ecx, byte [ebp - 0xda41]
shl edx, cl
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
mov eax, dword [ebp - 0x9a4c]
movsx eax, byte [eax]
xor ecx, eax
cmp edx, ecx
je 0x10008b91
push 0
mov ecx, dword [ebp - 0x17e8]
push ecx
mov edx, dword [ebp - 0x17ec]
push edx
mov eax, dword [ebp - 0x10a7c]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xbf28], eax
movzx ecx, byte [ebp - 0xbe7d]
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0x2f24]
mov byte [edx], cl
mov eax, dword [ebp - 0x38]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
and ecx, edx
mov word [ebp - 0x89e8], cx
mov eax, dword [ebp - 0xab44]
movsx ecx, word [eax]
movsx edx, word [ebp - 0xb6dc]
add ecx, edx
mov word [ebp - 0x10dc4], cx
mov eax, dword [ebp - 0xec90]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xf2e0]
movzx eax, byte [edx]
add ecx, eax
movzx edx, byte [ebp - 0xcd9d]
mov eax, dword [ebp - 0x7434]
movzx eax, byte [eax]
sub edx, eax
cmp ecx, edx
jl 0x100f61ca
movsx ecx, word [ebp - 0x5c3c]
movsx edx, word [ebp - 0xb6dc]
sub ecx, edx
movsx eax, word [ebp - 0x10dc4]
mov edx, dword [ebp - 0xc6c]
movsx edx, word [edx]
or eax, edx
cmp ecx, eax
je 0x10008d06
mov eax, dword [ebp - 0x4964]
mov cl, byte [eax]
mov byte [ebp - 0x128c8], cl
cmp byte [ebp - 0x128c8], 0x1f
je 0x10008c34
jmp 0x10008ce1
lea edx, [ebp - 0xfe90]
push edx
push fcn.100022f0
mov eax, dword [ebp - 0x108e8]
push eax
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x12ac], eax
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [0x10140670]
mov eax, dword [ecx]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0xfafc], eax
movzx ecx, word [ebp - 0xc284]
movzx edx, word [ebp - 0x7218]
and ecx, edx
mov eax, dword [ebp - 0xe090]
mov word [eax], cx
mov ecx, dword [ebp - 0xe090]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xc284]
sub edx, eax
mov ecx, dword [ebp - 0x38]
movzx eax, word [ecx]
movzx ecx, word [ebp - 0x404]
add eax, ecx
cmp edx, eax
jge 0x10008cc7
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0x10bd]
push ecx
mov edx, dword [ebp - 0x33d8]
push edx
call fcn.10002410
jmp 0x10008cdf
mov eax, dword [ebp - 0x2f24]
movzx ecx, byte [eax]
movzx edx, byte [ebp - 0x6b99]
add ecx, edx
mov byte [ebp - 0x3531], cl
jmp 0x10008d01
push 0x7b
lea eax, [ebp - 0x3531]
push eax
push fcn.10002f50
mov ecx, dword [ebp - 0x18c4]
push ecx
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xc000], eax
jmp 0x10008dd2
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x101b0]
xor eax, dword [edx]
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [ebp - 0xeff4]
mov esi, dword [ecx]
mov ecx, dword [edx]
sar esi, cl
cmp eax, esi
jg 0x10008dd2
mov eax, dword [ebp - 0xb274]
mov ecx, dword [ebp - 0xfed8]
add ecx, dword [eax]
mov edx, dword [ebp - 0xa4fc]
mov eax, dword [ebp - 0x11c30]
sub eax, dword [edx]
cmp ecx, eax
jbe 0x10008dd2
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [0x101400fc]
or edx, dword [ecx]
mov eax, dword [ebp - 0xf65c]
mov dword [eax], edx
movzx edx, word [ebp - 0x117ec]
movzx ecx, word [ebp - 0x89e8]
shl edx, cl
mov eax, dword [ebp - 0x126f4]
movzx eax, word [eax]
movzx ecx, word [str.5_ah]
sar eax, cl
cmp edx, eax
jg 0x10008db5
mov ecx, dword [ebp - 0x5058]
add ecx, dword [ebp - 0xdc4c]
mov dword [ebp - 0x7a9c], ecx
mov edx, dword [ebp - 0xb274]
mov edx, dword [edx]
mov eax, dword [ebp - 0x38]
mov cx, word [eax]
call fcn.10003120
jmp 0x10008dd2
mov ecx, dword [ebp - 0x1b38]
mov edx, dword [ecx]
push edx
movzx eax, byte [ebp - 0xda41]
push eax
mov ecx, dword [0x101400fc]
push ecx
call fcn.10002410
mov edx, dword [ebp - 0x11110]
mov dword [ebp - 0x128cc], edx
cmp dword [ebp - 0x128cc], 0
je 0x10008dfc
cmp dword [ebp - 0x128cc], 0x1f9c
je 0x10008e9f
jmp 0x10008ed1
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [eax]
mov dword [ebp - 0x150c], ecx
mov edx, dword [ebp - 0x3720]
mov eax, dword [edx]
mov dword [ebp - 0x128d0], eax
cmp dword [ebp - 0x128d0], 0x821d
je 0x10008e26
jmp 0x10008e9d
mov ecx, dword [ebp - 0x38]
movzx edx, word [ecx]
movzx eax, word [ebp - 0xc284]
sub edx, eax
mov ecx, dword [ebp - 0x126f4]
movzx eax, word [ecx]
mov ecx, dword [ebp - 0xaf3c]
movzx ecx, word [ecx]
sub eax, ecx
cmp edx, eax
jl 0x10008e9d
mov edx, dword [0x10140670]
mov eax, dword [edx]
and eax, dword [ebp - 0x33d8]
mov ecx, dword [ebp - 0xb230]
mov dword [ecx], eax
push 0xf
lea edx, [ebp - 0x30a4]
push edx
push fcn.10002410
mov eax, dword [ebp - 0xdac0]
push eax
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xe9b4], eax
mov ecx, dword [ebp - 0x99d8]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xf2e0]
movzx ecx, byte [eax]
sub edx, ecx
mov byte [ebp - 0xbe7d], dl
jmp 0x10008ed1
movzx edx, word [ebp - 0x89e8]
movzx eax, word [ebp - 0x7218]
add edx, eax
mov word [0x10140630], dx
mov ecx, dword [ebp - 0x1d10]
mov edx, dword [ebp - 0x3074]
add edx, dword [ecx]
mov eax, dword [ebp - 0xb274]
mov dword [eax], edx
call fcn.10003c00
movzx ecx, word [ebp - 0x117ec]
mov dword [ebp - 0x128d4], ecx
cmp dword [ebp - 0x128d4], 0
je 0x10008eec
jmp 0x10008f6d
mov edx, dword [0x10140670]
mov eax, dword [edx]
add eax, dword [ebp - 0x101b0]
mov ecx, dword [ebp - 0xf940]
mov dword [ecx], eax
mov edx, dword [ebp - 0x3bd0]
mov dword [ebp - 0x12134], edx
mov eax, dword [ebp - 0xe000]
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [eax]
xor edx, dword [ecx]
mov eax, dword [ebp - 0xf65c]
mov dword [eax], edx
mov ecx, dword [0x10140670]
mov edx, dword [ecx]
mov dword [ebp - 0x6fc8], edx
mov eax, dword [ebp - 0x9a4c]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x4964]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xe4b0]
mov byte [ecx], dl
movsx edx, word [ebp - 0xb6dc]
mov eax, dword [ebp - 0xab44]
movsx ecx, word [eax]
sar edx, cl
mov ecx, dword [ebp - 0x10bc0]
mov word [ecx], dx
jmp 0x10008fbf
movzx edx, byte [0x1013db76]
mov eax, dword [ebp - 0xec90]
movzx ecx, byte [eax]
or edx, ecx
mov byte [ebp - 0xcd9d], dl
mov edx, dword [ebp - 0x8e9c]
push edx
call dword [sym.imp.COMCTL32.dll_MakeDragList]
mov dword [ebp - 0xc000], eax
mov eax, dword [ebp - 0x86c4]
and eax, dword [ebp - 0x5cd4]
mov ecx, dword [0x10140670]
mov dword [ecx], eax
mov edx, dword [ebp - 0xb274]
mov eax, dword [0x1013db7c]
add eax, dword [edx]
mov dword [ebp - 0x87d0], eax
mov ecx, dword [ebp - 0x4964]
mov dl, byte [ecx]
mov byte [ebp - 0x128d8], dl
cmp byte [ebp - 0x128d8], 0
je 0x10008fe8
cmp byte [ebp - 0x128d8], 0x1c
je 0x100f60df
jmp 0x100f61ad
lea eax, [ebp - 0xdf69]
mov dword [ebp - 0x9ca0], eax
mov ecx, dword [ebp - 0x33d8]
sub ecx, dword [ebp - 0xf300]
mov edx, dword [ebp - 0x9f2c]
mov dword [edx], ecx
movzx eax, word [ebp - 0x117ec]
mov dword [ebp - 0x128dc], eax
cmp dword [ebp - 0x128dc], 0
je 0x10009033
cmp dword [ebp - 0x128dc], 0x168
je 0x100f5f74
jmp 0x100f5fe9
mov ecx, dword [ebp - 0x38]
movzx edx, word [ecx]
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
add edx, ecx
mov eax, dword [ebp - 0x126f4]
mov word [eax], dx
movzx edx, byte [ebp - 0xdf69]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
shl edx, cl
mov byte [ebp - 0x3531], dl
mov ecx, dword [ebp - 0xc3a8]
mov edx, dword [ecx]
xor edx, dword [ebp - 0x3074]
mov dword [ebp - 0x9f4c], edx
mov eax, dword [0x10140670]
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [eax]
or edx, dword [ecx]
mov eax, dword [0x10140670]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [ebp - 0xe254]
mov eax, dword [ecx]
mov ecx, dword [edx]
sar eax, cl
mov dword [ebp - 0x12134], eax
mov ecx, dword [ebp - 0x7d94]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xb274]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1b38]
mov dword [ecx], edx
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x12134]
and eax, dword [edx]
mov dword [ebp - 0x33d8], eax
movzx ecx, word [ebp - 0x117ec]
movzx edx, word [ebp - 0x89e8]
sub ecx, edx
mov eax, dword [ebp - 0x38]
mov word [eax], cx
movzx ecx, byte [0x1013db77]
movzx edx, byte [ebp - 0xcd9d]
sub ecx, edx
mov eax, dword [ebp - 0x99d8]
mov byte [eax], cl
mov ecx, dword [ebp - 0xe254]
mov edx, dword [ebp - 0xeff4]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xe254]
mov dword [ecx], eax
mov edx, dword [ebp - 0x4e4]
add edx, 0xf8
mov dword [ebp - 0x4e4], edx
mov eax, dword [ebp - 0xb274]
mov ecx, dword [ebp - 0x3720]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x9f4c], edx
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [ebp - 0xfafc]
add ecx, dword [eax]
mov edx, dword [ebp - 0xb230]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [eax]
sub ecx, dword [ebp - 0x659c]
mov dword [0x101400fc], ecx
movzx edx, byte [ebp - 0x3531]
mov eax, dword [ebp - 0x99d8]
movzx ecx, byte [eax]
add edx, ecx
mov byte [ebp - 0xcd9d], dl
movzx edx, word [ebp - 0x7218]
movzx eax, word [ebp - 0xc284]
and edx, eax
mov word [ebp - 0x117ec], dx
movsx edx, byte [0x1013f44e]
movsx ecx, byte [ebp - 0x10bd]
shl edx, cl
mov eax, dword [ebp - 0x4964]
mov byte [eax], dl
movsx ecx, word [ebp - 0x6f88]
movsx edx, word [ebp - 0x10dc4]
xor ecx, edx
mov word [ebp - 0xb6dc], cx
mov eax, dword [ebp - 0x3074]
or eax, dword [ebp - 0x11110]
mov ecx, dword [ebp - 0x1d10]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf300]
mov ecx, dword [ebp - 0xaa04]
sar edx, cl
mov dword [ebp - 0xbf28], edx
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
add ecx, edx
mov eax, dword [ebp - 0x126f4]
mov word [eax], cx
mov ecx, dword [ebp - 0x7434]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xec90]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf2e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0xb230]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3bd0]
mov eax, dword [0x10140670]
mov dword [eax], edx
mov ecx, dword [0x10140670]
mov edx, dword [ecx]
sub edx, dword [ebp - 0xac58]
mov dword [ebp - 0x6fc8], edx
mov eax, dword [ebp - 0xf65c]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xb230]
add ecx, dword [edx]
mov eax, dword [ebp - 0x1a84]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x7d94]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xa4fc]
add edx, dword [eax]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], edx
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xe090]
movzx edx, word [ecx]
sub eax, edx
mov ecx, dword [ebp - 0x126f4]
mov word [ecx], ax
movzx edx, byte [ebp - 0x6b99]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
sub edx, ecx
mov eax, dword [ebp - 0xf2e0]
mov byte [eax], dl
mov ecx, dword [ebp - 0x33d8]
add ecx, dword [ebp - 0x86c4]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0xb230]
mov eax, dword [edx]
add eax, dword [ebp - 0x5cd4]
mov dword [ebp - 0x3bd0], eax
mov ecx, dword [ebp - 0x87d0]
add ecx, dword [0x1013db78]
mov dword [ebp - 0xdc4c], ecx
mov edx, dword [ebp - 0xbf28]
or edx, dword [ebp - 0x12048]
mov eax, dword [0x10140670]
mov dword [eax], edx
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [ecx]
xor edx, dword [ebp - 0xf300]
mov dword [ebp - 0xac58], edx
movsx eax, byte [ebp - 0x10bd]
mov ecx, dword [ebp - 0xe4b0]
movsx ecx, byte [ecx]
shl eax, cl
mov edx, dword [ebp - 0x9a4c]
mov byte [edx], al
movsx eax, word [ebp - 0x10dc4]
mov ecx, dword [ebp - 0x10bc0]
movsx ecx, word [ecx]
sar eax, cl
mov edx, dword [ebp - 0xab44]
mov word [edx], ax
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
mov edx, dword [ebp - 0xaf3c]
movzx eax, word [edx]
and ecx, eax
mov edx, dword [ebp - 0xe090]
mov word [edx], cx
mov eax, dword [ebp - 0xec90]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x99d8]
movzx eax, byte [edx]
sub ecx, eax
mov byte [ebp - 0x3531], cl
mov ecx, dword [ebp - 0x1b38]
mov edx, dword [ebp - 0x7d94]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xa4fc]
mov dword [ecx], eax
mov edx, dword [ebp - 0xe254]
mov eax, dword [ebp - 0x3248]
and eax, dword [edx]
mov dword [ebp - 0x12048], eax
movzx ecx, byte [ebp - 0xcd9d]
mov edx, dword [ebp - 0x7434]
movzx eax, byte [edx]
add ecx, eax
mov edx, dword [ebp - 0xf2e0]
mov byte [edx], cl
mov eax, dword [ebp - 0xe000]
mov ecx, dword [eax]
add ecx, dword [ebp - 0xa430]
mov edx, dword [0x10140670]
mov dword [edx], ecx
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xb274]
add ecx, dword [edx]
mov eax, dword [ebp - 0x7d94]
mov dword [eax], ecx
mov ecx, dword [0x10140670]
mov edx, dword [ebp - 0x3248]
sub edx, dword [ecx]
mov dword [ebp - 0x3bd0], edx
mov eax, dword [ebp - 0x9f2c]
mov ecx, dword [ebp - 0xac58]
sub ecx, dword [eax]
mov dword [ebp - 0x101b0], ecx
mov edx, dword [ebp - 0x3074]
or edx, dword [ebp - 0x5058]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
movzx edx, word [ebp - 0x404]
mov eax, dword [ebp - 0xe090]
movzx ecx, word [eax]
shl edx, cl
mov word [ebp - 0x117ec], dx
movzx ecx, byte [ebp - 0xbe7d]
movzx edx, byte [ebp - 0xcd9d]
xor ecx, edx
mov eax, dword [ebp - 0xf2e0]
mov byte [eax], cl
mov edx, dword [0x101400fc]
mov ecx, dword [ebp - 0x12134]
sar edx, cl
mov eax, dword [ebp - 0xf65c]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb230]
mov edx, dword [ebp - 0x150c]
and edx, dword [ecx]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xb230]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xb45c]
add edx, dword [eax]
mov ecx, dword [0x10140670]
mov dword [ecx], edx
mov edx, dword [ebp - 0x4964]
movsx eax, byte [edx]
movsx ecx, byte [ebp - 0x35a1]
add eax, ecx
mov edx, dword [ebp - 0xe4b0]
mov byte [edx], al
cmp dword [ebp - 0x4e4], 0x9d91
jne 0x10009033
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
mov dword [ebp - 0x128e0], ecx
cmp dword [ebp - 0x128e0], 0
je 0x100094ef
jmp 0x10009570
mov dl, byte [ebp - 0xda41]
mov byte [ebp - 0x128e4], dl
cmp byte [ebp - 0x128e4], 0
je 0x10009506
jmp 0x1000954b
mov eax, dword [ebp - 0x7434]
mov cl, byte [eax]
mov byte [ebp - 0x8de2], cl
movzx edx, word [ebp - 0x89e8]
movzx eax, word [ebp - 0x117ec]
sub edx, eax
mov word [ebp - 0xc284], dx
mov ecx, dword [ebp - 0x11c30]
sub ecx, dword [0x1013db78]
mov dword [ebp - 0x11810], ecx
lea edx, [ebp - 0x11810]
mov dword [ebp - 0x2c6c], edx
jmp 0x1000956e
push 0
mov eax, dword [ebp - 0xc510]
push eax
mov ecx, dword [ebp - 0xc514]
push ecx
mov edx, dword [ebp - 0x4c90]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xfe90], eax
jmp 0x1000959e
mov eax, dword [ebp - 0x33d8]
push eax
mov ecx, dword [ebp - 0xf2e0]
movzx edx, byte [ecx]
push edx
mov eax, dword [ebp - 0x126f4]
movzx ecx, word [eax]
push ecx
mov dl, byte [ebp - 0xda41]
mov eax, dword [ebp - 0x4964]
mov cl, byte [eax]
call fcn.10002f50
mov ecx, dword [ebp - 0xf940]
mov edx, dword [ecx]
and edx, dword [ebp - 0x3bd0]
mov eax, dword [ebp - 0xf65c]
mov ecx, dword [ebp - 0xb45c]
mov eax, dword [eax]
sub eax, dword [ecx]
cmp edx, eax
jge 0x10009625
mov ecx, dword [ebp - 0xf65c]
mov edx, dword [ebp - 0xb45c]
mov eax, dword [ecx]
sub eax, dword [edx]
mov ecx, dword [ebp - 0xf65c]
mov dword [ecx], eax
mov edx, dword [ebp - 0xf2e0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x2f24]
movzx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xfffc]
movzx edx, byte [ecx]
movzx ecx, byte [ebp - 0xdf69]
add edx, ecx
cmp eax, edx
jl 0x10009614
mov eax, dword [ebp - 0x9f2c]
mov edx, dword [eax]
xor edx, dword [ebp - 0x12134]
mov eax, dword [0x10140670]
mov esi, dword [ebp - 0x10de0]
mov ecx, dword [eax]
shl esi, cl
cmp edx, esi
jl 0x100f5e21
mov cl, byte [ebp - 0x35a1]
mov byte [ebp - 0x12924], cl
cmp byte [ebp - 0x12924], 0x6b
je 0x100f5f8b
jmp 0x100f5f9e
mov edx, dword [ebp - 0xb274]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x7218]
call fcn.10003120
mov eax, dword [ebp - 0xe254]
mov ecx, dword [ebp - 0xac58]
add ecx, dword [eax]
mov dword [ebp - 0x659c], ecx
mov edx, dword [ebp - 0x4964]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x9a4c]
movsx edx, byte [ecx]
add eax, edx
mov ecx, dword [ebp - 0xe4b0]
mov byte [ecx], al
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
mov ecx, dword [ebp - 0xab44]
movsx edx, word [ecx]
and eax, edx
mov word [ebp - 0x6f88], ax
mov eax, dword [ebp - 0x9f4c]
sub eax, dword [ebp - 0x7a9c]
mov ecx, dword [ebp - 0x3720]
mov dword [ecx], eax
movsx edx, byte [0x1013f44e]
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0x9a4c]
movsx eax, byte [ecx]
movsx ecx, byte [ebp - 0x35a1]
sar eax, cl
cmp edx, eax
jne 0x100f609f
mov ecx, dword [ebp - 0x9f2c]
mov edx, dword [ebp - 0xe000]
mov eax, dword [ecx]
or eax, dword [edx]
mov dword [ebp - 0x3248], eax
lea ecx, [ebp - 0xc13c]
push ecx
push fcn.10003860
mov edx, dword [ebp - 0x10a7c]
push edx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2588], eax
mov eax, dword [ebp - 0xb45c]
mov ecx, dword [eax]
xor ecx, dword [ebp - 0x659c]
mov edx, dword [ebp - 0xb45c]
mov dword [edx], ecx
movzx eax, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x89e8]
and eax, ecx
mov word [0x10140630], ax
mov edx, dword [ebp - 0x5570]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xf2e0]
movzx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x6b99], al
mov eax, dword [ebp - 0x3720]
mov ecx, dword [eax]
mov edx, dword [ebp - 0xa4fc]
add ecx, dword [edx]
mov eax, dword [ebp - 0x1b38]
mov dword [eax], ecx
push 0
mov ecx, dword [ebp - 0x9380]
push ecx
mov edx, dword [ebp - 0x9384]
push edx
mov eax, dword [ebp - 0xe5ec]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x12134], eax
jmp 0x100f61ad
mov ecx, dword [ebp - 0xf940]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x9f2c]
add edx, dword [eax]
mov ecx, dword [ebp - 0x1a88]
mov eax, dword [ecx]
add eax, dword [ebp - 0x150c]
cmp edx, eax
jl 0x100f6161
mov ecx, dword [ebp - 0x7d94]
mov edx, dword [ebp - 0x87d0]
and edx, dword [ecx]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
lea ecx, [ebp - 0xd658]
push ecx
push fcn.100022f0
mov edx, dword [ebp - 0xc13c]
push edx
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2588], eax
movzx eax, word [ebp - 0xc284]
movzx ecx, word [ebp - 0x7218]
add eax, ecx
mov word [ebp - 0x404], ax
mov edx, dword [ebp - 0x3720]
mov edx, dword [edx]
mov ecx, dword [ebp - 0x404]
call fcn.10003120
jmp 0x100f61ad
mov eax, dword [ebp - 0x4964]
movsx ecx, byte [eax]
movsx edx, byte [ebp - 0x35a1]
sub ecx, edx
mov eax, dword [ebp - 0xe4b0]
movsx edx, byte [eax]
mov eax, dword [ebp - 0x9a4c]
movsx eax, byte [eax]
sub edx, eax
cmp ecx, edx
jl 0x100f61ad
movzx ecx, word [ebp - 0x6f88]
push ecx
movzx edx, word [ebp - 0xb6dc]
push edx
mov eax, dword [ebp - 0xc6c]
movzx ecx, word [eax]
push ecx
call fcn.10003860
add esp, 0xc
mov edx, dword [ebp - 0xc3a8]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0xda41]
push ecx
mov edx, dword [ebp - 0x12048]
push edx
call fcn.10002410
mov eax, dword [ebp - 0x1b38]
mov ecx, dword [ebp - 0x9f4c]
add ecx, dword [eax]
mov edx, dword [ebp - 0xb274]
mov eax, dword [edx]
mov edx, dword [ebp - 0x7d94]
add eax, dword [edx]
cmp ecx, eax
jb 0x100f6204
movsx eax, byte [ebp - 0x10bd]
mov ecx, dword [ebp - 0x4964]
movsx edx, byte [ecx]
sub eax, edx
mov byte [ebp - 0x35a1], al
mov eax, dword [ebp - 0xe254]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x33d8]
mov edx, dword [0x10140670]
mov dword [edx], ecx
mov eax, dword [ebp - 0xc6c]
movzx ecx, word [eax]
push ecx
movzx edx, byte [ebp - 0xcd9d]
push edx
movzx eax, word [ebp - 0x10dc4]
push eax
call fcn.100022f0
add esp, 0xc
jmp 0x100f633a
mov ecx, dword [ebp - 0xc3a8]
mov edx, dword [ecx]
add edx, dword [ebp - 0x9f4c]
mov eax, dword [ebp - 0x3720]
mov ecx, dword [eax]
and ecx, dword [ebp - 0x5058]
cmp edx, ecx
jae 0x100f633a
mov edx, dword [ebp - 0x10bc0]
movsx eax, word [edx]
movsx ecx, word [ebp - 0x10dc4]
or eax, ecx
mov word [ebp - 0xb6dc], ax
movzx edx, byte [ebp - 0xbe7d]
mov eax, dword [ebp - 0xec90]
movzx ecx, byte [eax]
shl edx, cl
mov ecx, dword [ebp - 0xf2e0]
mov byte [ecx], dl
mov edx, dword [ebp - 0x87d0]
xor edx, dword [0x1013db78]
mov eax, dword [ebp - 0x7a9c]
mov ecx, dword [ebp - 0x8568]
shr eax, cl
cmp edx, eax
jae 0x100f62fe
push 0xe3
mov ecx, dword [ebp - 0xd2a0]
push ecx
mov edx, dword [ebp - 0x4c90]
push edx
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
movzx edx, word [ebp - 0x7218]
sub ecx, edx
mov word [ebp - 0x89e8], cx
mov eax, dword [ebp - 0x11110]
add eax, dword [ebp - 0x9f4c]
mov ecx, dword [ebp - 0x1d10]
mov dword [ecx], eax
jmp 0x100f633a
movsx edx, word [ebp - 0x5c3c]
mov eax, dword [ebp - 0x10bc0]
movsx ecx, word [eax]
sub edx, ecx
movsx eax, word [ebp - 0xb6dc]
mov ecx, dword [ebp - 0xc6c]
movsx ecx, word [ecx]
and eax, ecx
cmp edx, eax
jl 0x100f633a
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x9f4c]
sub eax, dword [edx]
mov dword [ebp - 0x5058], eax
push 1
mov ecx, dword [ebp - 0xf4bc]
push ecx
mov edx, dword [ebp - 0xf4c0]
push edx
mov eax, dword [ebp - 0x55a4]
push eax
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x3bd0], eax
mov ecx, dword [ebp - 0xbf28]
sub ecx, dword [ebp - 0x5cd4]
mov edx, dword [0x10140670]
mov dword [edx], ecx
jmp 0x100f637f
mov eax, dword [ebp - 0x3bd0]
push eax
call fcn.10002910
mov edx, dword [ebp - 0x3248]
mov ecx, dword [0x101400fc]
sar edx, cl
mov eax, dword [0x10140670]
mov dword [eax], edx
mov ecx, dword [ebp - 0x101b0]
xor ecx, dword [ebp - 0xfe90]
mov dword [ebp - 0xbf28], ecx
jmp 0x100f6433
movsx edx, byte [ebp - 0x10bd]
mov eax, dword [ebp - 0xe4b0]
movsx ecx, byte [eax]
sub edx, ecx
movsx eax, byte [ebp - 0x35a1]
movsx ecx, byte [ebp - 0xda41]
sub eax, ecx
cmp edx, eax
jg 0x100f6433
push 0x6d
lea edx, [ebp - 0xc3a8]
push edx
push fcn.10002910
mov eax, dword [ebp - 0x55a4]
push eax
call sub.COMCTL32.dll_SetWindowSubclass
mov dword [ebp - 0xc000], eax
movzx ecx, word [ebp - 0x89e8]
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
sub ecx, eax
mov edx, dword [ebp - 0x126f4]
mov word [edx], cx
mov eax, dword [0x1013db7c]
and eax, dword [ebp - 0x5058]
mov dword [ebp - 0x9f4c], eax
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
add edx, dword [ebp - 0x11810]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
call fcn.10003c00
movzx ecx, byte [ebp - 0x3531]
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
sub ecx, eax
movzx edx, byte [ebp - 0xcd9d]
movzx eax, byte [ebp - 0xbe7d]
add edx, eax
cmp ecx, edx
jle 0x100f6491
movsx ecx, byte [ebp - 0x35a1]
movsx edx, byte [ebp - 0xda41]
add ecx, edx
mov eax, dword [ebp - 0x4964]
mov byte [eax], cl
mov ecx, dword [ebp - 0x10bc0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x10dc4], dx
push 3
mov edx, dword [ebp - 0x55a4]
push edx
mov eax, dword [ebp - 0xbe20]
push eax
call dword [sym.imp.COMCTL32.dll_DrawInsert]
mov ecx, dword [ebp - 0xb274]
mov edx, dword [ecx]
mov eax, dword [ebp - 0xaf3c]
mov cx, word [eax]
call fcn.10003120
push 0x1a
push 0x7d
push 0x53
mov ecx, dword [ebp - 0x11a84]
push ecx
call sub.COMCTL32.dll_DefSubclassProc
mov dword [ebp - 0x30a4], eax
mov edx, dword [ebp - 0x87d0]
xor edx, dword [ebp - 0x3074]
mov dword [ebp - 0x7a9c], edx
movzx eax, word [ebp - 0x5c3c]
push eax
movzx ecx, word [ebp - 0x5c3c]
push ecx
mov edx, dword [ebp - 0x10bc0]
movzx eax, word [edx]
push eax
call fcn.10003860
add esp, 0xc
jmp 0x100f65d3
mov ecx, dword [ebp - 0x10bc0]
movsx edx, word [ecx]
mov dword [ebp - 0x12928], edx
cmp dword [ebp - 0x12928], 0x3ee
je 0x100f65b9
cmp dword [ebp - 0x12928], 0x684
je 0x100f653e
jmp 0x100f65d3
push 1
mov eax, dword [ebp - 0x6368]
push eax
mov ecx, dword [ebp - 0x636c]
push ecx
mov edx, dword [ebp - 0x18c4]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xa430], eax
mov eax, dword [ebp - 0xe000]
mov ecx, dword [0x101400fc]
add ecx, dword [eax]
mov edx, dword [ebp - 0xb45c]
mov dword [edx], ecx
mov eax, dword [ebp - 0xeff4]
mov ecx, dword [ebp - 0x33d8]
sub ecx, dword [eax]
mov dword [0x101400fc], ecx
mov edx, dword [ebp - 0xb45c]
mov eax, dword [edx]
push eax
movzx ecx, byte [ebp - 0xdf69]
push ecx
movzx edx, word [ebp - 0xc284]
push edx
mov eax, dword [ebp - 0xe4b0]
mov dl, byte [eax]
mov cl, byte [ebp - 0x35a1]
call fcn.10002f50
jmp 0x100f65d3
mov ecx, dword [ebp - 0xe4b0]
movsx edx, byte [ecx]
movsx eax, byte [ebp - 0x35a1]
add edx, eax
mov ecx, dword [ebp - 0xe4b0]
mov byte [ecx], dl
movzx eax, byte [ebp - 0xcd9d]
mov edx, dword [ebp - 0x2f24]
movzx ecx, byte [edx]
cdq
idiv ecx
mov edx, dword [ebp - 0x5570]
movzx edx, byte [edx]
mov ecx, dword [ebp - 0xfffc]
movzx ecx, byte [ecx]
shl edx, cl
cmp eax, edx
jge 0x100f6646
mov edx, dword [ebp - 0xe000]
mov eax, dword [ebp - 0xfafc]
sub eax, dword [edx]
mov ecx, dword [ebp - 0x1a84]
mov dword [ecx], eax
lea edx, [ebp - 0xb45c]
push edx
push fcn.100022f0
mov eax, dword [ebp - 0x11a84]
push eax
call sub.COMCTL32.dll_RemoveWindowSubclass
mov dword [ebp - 0x2588], eax
mov ecx, dword [ebp - 0xac58]
sub ecx, dword [ebp - 0x3248]
mov dword [ebp - 0xfafc], ecx
jmp 0x100f66b3
movzx edx, byte [ebp - 0xdf69]
mov eax, dword [ebp - 0x5570]
movzx ecx, byte [eax]
xor edx, ecx
movzx eax, byte [ebp - 0x3531]
mov ecx, dword [ebp - 0x2f24]
movzx ecx, byte [ecx]
sar eax, cl
cmp edx, eax
jl 0x100f66b3
movzx edx, word [ebp - 0x7218]
movzx eax, word [ebp - 0x404]
and edx, eax
mov word [ebp - 0xc284], dx
movzx ecx, byte [ebp - 0x3531]
mov edx, dword [ebp - 0x2f24]
movzx eax, byte [edx]
sub ecx, eax
mov edx, dword [ebp - 0xfffc]
mov byte [edx], cl
mov eax, dword [ebp - 0x1d10]
mov ecx, dword [eax]
add ecx, dword [ebp - 0x87d0]
mov dword [ebp - 0x11110], ecx
jmp 0x100f66cf
mov edx, dword [ebp - 0xe4b0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x4964]
movsx edx, byte [ecx]
add eax, edx
mov byte [ebp - 0x35a1], al
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0xeff4]
mov edx, dword [eax]
sub edx, dword [ecx]
mov eax, dword [ebp - 0x1a84]
mov dword [eax], edx
mov ecx, dword [ebp - 0x10bc0]
movsx edx, word [ecx]
mov eax, dword [ebp - 0xc6c]
movsx ecx, word [eax]
add edx, ecx
mov word [ebp - 0x5c3c], dx
push 1
mov edx, dword [ebp - 0x1f30]
push edx
mov eax, dword [ebp - 0x1f34]
push eax
mov ecx, dword [ebp - 0x45dc]
push ecx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0xbf28], eax
movzx edx, word [ebp - 0x10dc4]
push edx
mov eax, dword [ebp - 0xfffc]
movzx ecx, byte [eax]
push ecx
movzx edx, word [ebp - 0x6f88]
push edx
call fcn.100022f0
add esp, 0xc
movzx eax, byte [ebp - 0xdf69]
mov ecx, dword [ebp - 0x5570]
movzx edx, byte [ecx]
and eax, edx
mov ecx, dword [ebp - 0xfffc]
mov byte [ecx], al
mov edx, dword [ebp - 0x126f4]
movzx eax, word [edx]
mov ecx, dword [ebp - 0xaf3c]
movzx edx, word [ecx]
sub eax, edx
mov word [ebp - 0x117ec], ax
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [ebp - 0x1a88]
mov edx, dword [eax]
sub edx, dword [ecx]
mov dword [ebp - 0x86c4], edx
jmp 0x100f680a
movsx eax, byte [ebp - 0x35a1]
cmp eax, 0x3d
jne 0x100f680a
mov ecx, dword [ebp - 0x3720]
mov edx, dword [ecx]
and edx, dword [ebp - 0x11810]
mov eax, dword [ebp - 0xa4fc]
mov dword [eax], edx
lea ecx, [ebp - 0x6f68]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0xbf28], eax
movzx edx, word [ebp - 0xc284]
movzx eax, word [ebp - 0x7218]
sub edx, eax
mov word [ebp - 0x404], dx
mov ecx, dword [ebp - 0x86c4]
push ecx
movzx edx, byte [ebp - 0xbe7d]
push edx
mov eax, dword [ebp - 0xaf3c]
movzx ecx, word [eax]
push ecx
mov dl, byte [ebp - 0x35a1]
mov cl, byte [ebp - 0x35a1]
call fcn.10002f50
mov edx, dword [ebp - 0x86c4]
add edx, dword [ebp - 0xfafc]
mov eax, dword [ebp - 0xeff4]
mov dword [eax], edx
mov ecx, dword [ebp - 0xac58]
sub ecx, dword [0x101400fc]
mov dword [ebp - 0x33d8], ecx
jmp 0x100f6886
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0x1a84]
mov ecx, dword [edx]
sub ecx, dword [eax]
mov edx, dword [ebp - 0xbf28]
add edx, dword [ebp - 0x3248]
cmp ecx, edx
jge 0x100f6886
mov eax, dword [ebp - 0xbf28]
sub eax, dword [ebp - 0x86c4]
mov dword [ebp - 0x3248], eax
mov ecx, dword [ebp - 0x33d8]
push ecx
movzx edx, byte [ebp - 0x6b99]
push edx
mov eax, dword [ebp - 0xd658]
movzx ecx, word [eax]
push ecx
mov dl, 0x36
mov cl, 0xc2
call fcn.10002f50
lea edx, [ebp - 0x3c4]
push edx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0xbf28], eax
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [ebp - 0x3248]
add ecx, dword [eax]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
movzx eax, byte [ebp - 0x6b99]
sub eax, 0xc1
mov byte [ebp - 0x6b99], al
movzx ecx, word [ebp - 0x7218]
movzx edx, word [ebp - 0x404]
and ecx, edx
mov eax, dword [ebp - 0xd658]
mov word [eax], cx
lea ecx, [ebp - 0x6f68]
push ecx
call dword [sym.imp.COMCTL32.dll_PropertySheetW]
mov dword [ebp - 0x3248], eax
jmp 0x100f69a7
mov edx, dword [ebp - 0xd658]
movzx eax, word [edx]
movzx ecx, word [ebp - 0x7218]
and eax, ecx
movzx edx, word [ebp - 0x404]
cmp eax, edx
jge 0x100f69a7
mov eax, dword [ebp - 0x1a88]
mov ecx, dword [eax]
or ecx, dword [ebp - 0x33d8]
mov dword [ebp - 0x86c4], ecx
mov edx, dword [ebp - 0x1a88]
mov eax, dword [ebp - 0x86c4]
mov ecx, dword [edx]
shl eax, cl
mov dword [ebp - 0xbf28], eax
mov ecx, dword [ebp - 0x1a84]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0xbf28]
sar edx, cl
mov eax, dword [ebp - 0x1a88]
mov dword [eax], edx
mov eax, dword [ebp - 0xfed8]
xor edx, edx
div dword [ebp - 0x11c30]
mov ecx, dword [ebp - 0x7a9c]
xor ecx, dword [ebp - 0x11810]
cmp eax, ecx
jb 0x100f6987
mov edx, dword [ebp - 0x1a84]
mov eax, dword [ebp - 0x3248]
and eax, dword [edx]
mov dword [ebp - 0xbf28], eax
movzx ecx, word [ebp - 0x10dc4]
push ecx
movzx edx, word [ebp - 0x10dc4]
push edx
movzx eax, word [ebp - 0x6f88]
push eax
call fcn.10003860
add esp, 0xc
mov ecx, dword [ebp - 0x33d8]
sub ecx, dword [ebp - 0x3248]
mov edx, dword [ebp - 0x1a84]
mov dword [edx], ecx
push 0
mov eax, dword [ebp - 0x6368]
push eax
mov ecx, dword [ebp - 0x636c]
push ecx
mov edx, dword [ebp - 0x45dc]
push edx
call dword [sym.imp.COMCTL32.dll_LBItemFromPt]
mov dword [ebp - 0x3248], eax
mov eax, 9
pop edi
pop esi
mov esp, ebp
pop ebp
ret 0xc