Function at 0x100381be
Capabilities:
Check os version

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10068de9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x494
push esi
push edi
push 1
lea ecx, [ebp - 0x32c]
call fcn.1002a48a
and dword [ebp - 4], 0
mov dword [ebp - 0x3ac], 0xd0a7084b
mov dword [ebp - 0xc8], 0xffff
mov dword [ebp - 0x30], 0
jmp 0x10038213
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10038229
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x498], 0x3342eb9
jmp 0x1003820c
mov dword [ebp - 0x30], 0
jmp 0x10038239
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x10038255
push dword [ebp - 0x30]
lea ecx, [ebp - 0x32c]
call fcn.1002a571
mov dword [eax], 0x2cb13638
jmp 0x10038232
push 0
lea ecx, [ebp - 0x32c]
call fcn.1002a571
and dword [eax], 0
jmp 0x1003828b
push 0
lea ecx, [ebp - 0x32c]
call fcn.1002a571
mov dword [ebp - 0x14c], eax
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x14c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x32c]
call fcn.1002a571
cmp dword [eax], 1
jg 0x100382b3
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x100382b1
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
jmp 0x10038267
xor eax, eax
inc eax
je 0x100382f7
mov dword [ebp - 0xc8], 0
jmp 0x100382d1
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x3a
jle 0x100382f5
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x100382f3
push 0
push 0x1a86
call dword [sym.imp.USER32.dll_GetWindowPlacement]
jmp 0x100382c4
jmp 0x1003832b
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x10038310
push 0
push 0x120
call dword [sym.imp.USER32.dll_RemovePropA]
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x1003832b
push 0
push 0x1df5
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x32c]
call fcn.1002a563
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x164], 0xfffffff6
mov dword [ebp - 0x2e8], 1
cmp dword [ebp - 0x1c], 0
jne 0x100383ba
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jne 0x100383a1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
add eax, dword [ebp - 0x1c]
jne 0x100383a1
and dword [ebp - 0x284], 0
jmp 0x100383ab
mov dword [ebp - 0x284], 1
imul eax, dword [ebp - 0x284], 0x3c40
cmp eax, dword [ebp - 0x1c]
jne 0x100383cd
push 6
pop eax
test eax, eax
je 0x100383cd
mov dword [ebp - 0x288], 1
jmp 0x100383d4
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x2bc]
jl 0x100383f2
mov dword [ebp - 0x154], 1
jmp 0x100383f9
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
add eax, 0x5761be36
cmp eax, dword [ebp - 0x1c]
jg 0x10038415
mov dword [ebp - 0x1f4], 1
jmp 0x1003841c
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 1
jb 0x10038431
mov dword [ebp - 0x15c], 1
jmp 0x10038438
and dword [ebp - 0x15c], 0
cmp dword [ebp - 0x15c], 0xebbd
jle 0x10038450
mov dword [ebp - 0x244], 1
jmp 0x10038457
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x164], eax
jle 0x1003847a
mov dword [ebp - 0x1fc], 1
jmp 0x10038481
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x1c], 0
jmp 0x1003849d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x38
jl 0x100384ca
mov dword [ebp - 0x314], 0xfffffffb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x314], eax
mov byte [ebp - 0x46], 0
movzx eax, byte [ebp - 0x46]
test eax, eax
je 0x100384c8
call dword [sym.imp.KERNEL32.dll_GetVersion]
jmp 0x10038496
push 1
lea ecx, [ebp - 0x300]
call fcn.1002a48a
mov dword [ebp - 4], 1
mov dword [ebp - 0x3b8], 0xd0a7084b
mov dword [ebp - 0xfc], 0xffff
mov dword [ebp - 0x40], 0
jmp 0x10038502
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10038518
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x4a0], 0x3342eb9
jmp 0x100384fb
mov dword [ebp - 0x40], 0
jmp 0x10038528
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10038544
push dword [ebp - 0x40]
lea ecx, [ebp - 0x300]
call fcn.1002a571
mov dword [eax], 0x2cb13638
jmp 0x10038521
push 0
lea ecx, [ebp - 0x300]
call fcn.1002a571
and dword [eax], 0
jmp 0x1003857a
push 0
lea ecx, [ebp - 0x300]
call fcn.1002a571
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x16c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x300]
call fcn.1002a571
cmp dword [eax], 1
jg 0x100385a2
mov byte [ebp - 0x48], 0
movzx eax, byte [ebp - 0x48]
test eax, eax
je 0x100385a0
push 0
call dword [sym.imp.USER32.dll_RegisterClassA]
jmp 0x10038556
xor eax, eax
inc eax
je 0x100385e9
mov dword [ebp - 0xfc], 0
jmp 0x100385c0
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x3a
jle 0x100385e4
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x100385e2
push 0
push 0x1a86
call dword [sym.imp.USER32.dll_GetWindowPlacement]
jmp 0x100385b3
jmp 0x10038774
mov dword [ebp - 0x31c], 0x255a
cmp dword [ebp - 0x31c], 0x711
jge 0x10038740
lea eax, [ebp - 0x100]
push eax
push 0x10007ed8
call fcn.1004f52b
pop ecx
pop ecx
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x2e0], 0
je 0x10038740
lea eax, [ebp - 0x2b4]
push eax
lea eax, [ebp - 0xbc]
push eax
push 0x10007edc
call fcn.1004f52b
add esp, 0xc
and dword [ebp - 0x10c], 0
and dword [ebp - 0x124], 0
jmp 0x10038674
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0xbc]
jge 0x100386a9
lea eax, [ebp - 0x2b0]
push eax
push 0x10007ed8
call fcn.1004f52b
pop ecx
pop ecx
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x10c], eax
jmp 0x10038667
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0xbc]
jl 0x100386c0
cmp dword [ebp - 0xbc], 2
jg 0x100386d0
push 0x10007f1c
call fcn.10050992
pop ecx
jmp 0x10038616
mov eax, dword [ebp - 0x10c]
shl eax, 1
push eax
push 0x10007ee4
call fcn.1004fe4e
pop ecx
pop ecx
push dword [ebp - 0xbc]
push 0x100085b4
call fcn.1004fe4e
pop ecx
pop ecx
mov dword [ebp - 0xb8], 1
jmp 0x10038710
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
cmp eax, dword [ebp - 0xbc]
jge 0x1003873b
mov eax, dword [ebp - 0xb8]
inc eax
push eax
push dword [ebp - 0xb8]
push 0x100080c8
call fcn.1004fe4e
add esp, 0xc
jmp 0x10038703
jmp 0x10038616
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x10038759
push 0
push 0x120
call dword [sym.imp.USER32.dll_RemovePropA]
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10038774
push 0
push 0x1df5
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x300]
call fcn.1002a563
mov dword [ebp - 0x60], 0xde713a47
mov dword [ebp - 0x90], 0x3244d513
mov dword [ebp - 0x2c4], 0xffffffff
push 1
lea ecx, [ebp - 0x44c]
call fcn.1002a48a
mov dword [ebp - 4], 2
mov dword [ebp - 0x34], 0
jmp 0x100387c2
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x100387d8
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x84], 0xb6069300
jmp 0x100387bb
mov dword [ebp - 0x34], 0
jmp 0x100387e8
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10038804
push dword [ebp - 0x34]
lea ecx, [ebp - 0x44c]
call fcn.1002a571
mov dword [eax], 0xfffffffc
jmp 0x100387e1
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x10038822
push 0
push 0x1e82
push 0xd3a
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jl 0x10038836
mov dword [ebp - 0x134], 1
jmp 0x1003883d
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x84], ecx
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x134]
jle 0x10038867
mov dword [ebp - 0x26c], 1
jmp 0x1003886e
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x60]
jne 0x10038897
mov eax, 0x7dcd
test eax, eax
jne 0x10038897
and dword [ebp - 0x304], 0
jmp 0x100388a1
mov dword [ebp - 0x304], 1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x90], 0
je 0x100389f6
mov dword [ebp - 0x94], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x3c8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x84]
mov dword [ebp - 0x174], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x174]
mov dword [ebp + eax - 0x84], ecx
cmp dword [ebp - 0x174], 0
je 0x10038987
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3d8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
ja 0x10038942
cmp dword [ebp - 0x94], 0
jne 0x10038942
and dword [ebp - 0x204], 0
jmp 0x1003894c
mov dword [ebp - 0x204], 1
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x204], eax
jg 0x10038966
mov dword [ebp - 0x17c], 1
jmp 0x1003896d
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x17c], eax
jle 0x10038987
mov dword [ebp - 0x24c], 1
jmp 0x1003898e
and dword [ebp - 0x24c], 0
cmp dword [ebp - 0x24c], 0x2aba
jle 0x100389a6
mov dword [ebp - 0x184], 1
jmp 0x100389ad
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x184], eax
je 0x100389ca
cmp dword [ebp - 0x94], 0
jne 0x100389ca
and dword [ebp - 0x20c], 0
jmp 0x100389d4
mov dword [ebp - 0x20c], 1
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x100389f4
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x10038a6b
mov dword [ebp - 0x2a4], 0xfff7
mov dword [ebp - 0x320], 1
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x2a4], eax
xor eax, eax
sub eax, dword [ebp - 0x320]
jne 0x10038a2c
mov dword [ebp - 0x18c], 1
jmp 0x10038a33
and dword [ebp - 0x18c], 0
cmp dword [ebp - 0x2c4], 0x6ff52912
jl 0x10038a4b
mov dword [ebp - 0x280], 1
jmp 0x10038a52
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0x18c]
sub eax, dword [ebp - 0x280]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x84], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44c]
call fcn.1002a563
mov dword [ebp - 0x68], 0xde713a47
mov dword [ebp - 0x7c], 0x3244d513
mov dword [ebp - 0x2d4], 0xffffffff
push 1
lea ecx, [ebp - 0x45c]
call fcn.1002a48a
mov dword [ebp - 4], 3
mov dword [ebp - 0x3c], 0
jmp 0x10038ab6
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10038acc
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x8c], 0xb6069300
jmp 0x10038aaf
mov dword [ebp - 0x3c], 0
jmp 0x10038adc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10038af8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x45c]
call fcn.1002a571
mov dword [eax], 0xfffffffc
jmp 0x10038ad5
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x10038b16
push 0
push 0x1e82
push 0xd3a
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
jl 0x10038b2a
mov dword [ebp - 0x114], 1
jmp 0x10038b31
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x8c], ecx
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x114]
jle 0x10038b5b
mov dword [ebp - 0x194], 1
jmp 0x10038b62
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
sub eax, dword [ebp - 0x68]
jne 0x10038b85
mov eax, 0x7dcd
test eax, eax
jne 0x10038b85
and dword [ebp - 0x308], 0
jmp 0x10038b8f
mov dword [ebp - 0x308], 1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x7c], 0
je 0x10038cdb
mov dword [ebp - 0xb0], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x404], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x8c]
mov dword [ebp - 0x214], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x8c], ecx
cmp dword [ebp - 0x214], 0
je 0x10038c6f
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x414], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0
ja 0x10038c2a
cmp dword [ebp - 0xb0], 0
jne 0x10038c2a
and dword [ebp - 0x19c], 0
jmp 0x10038c34
mov dword [ebp - 0x19c], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x19c], eax
jg 0x10038c4e
mov dword [ebp - 0x254], 1
jmp 0x10038c55
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x254], eax
jle 0x10038c6f
mov dword [ebp - 0x1a4], 1
jmp 0x10038c76
and dword [ebp - 0x1a4], 0
cmp dword [ebp - 0x1a4], 0x2aba
jle 0x10038c8e
mov dword [ebp - 0x21c], 1
jmp 0x10038c95
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x21c], eax
je 0x10038cb2
cmp dword [ebp - 0xb0], 0
jne 0x10038cb2
and dword [ebp - 0x1ac], 0
jmp 0x10038cbc
mov dword [ebp - 0x1ac], 1
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10038cd9
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
jmp 0x10038d4d
mov dword [ebp - 0x2cc], 0xfff7
mov dword [ebp - 0x318], 1
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x2cc], eax
xor eax, eax
sub eax, dword [ebp - 0x318]
jne 0x10038d0e
mov dword [ebp - 0x274], 1
jmp 0x10038d15
and dword [ebp - 0x274], 0
cmp dword [ebp - 0x2d4], 0x6ff52912
jl 0x10038d2d
mov dword [ebp - 0x1b4], 1
jmp 0x10038d34
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x1b4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x45c]
call fcn.1002a563
movzx eax, byte [0x111e8020]
test eax, eax
je 0x10038d7a
mov esi, 0x1006f67c
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1003a2ad
mov dword [ebp - 0x80], 0x1c08901
mov dword [ebp - 0x490], 0xfffffff6
mov dword [ebp - 0x48c], 0xfffffff6
mov dword [ebp - 0x488], 0xfffffff6
mov dword [ebp - 0x484], 0xfffffff6
mov dword [ebp - 0x41c], 0xfffffffb
mov dword [ebp - 0x424], 0xffffffff
mov dword [ebp - 0x42c], 4
mov dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0
jmp 0x10038de8
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jg 0x10038e4e
mov dword [ebp - 0x434], 0x37b04800
mov dword [ebp - 0xf0], 0
jmp 0x10038e11
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10038e2d
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x43c], 0xdfe0091d
jmp 0x10038e04
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x10038e3f
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov eax, dword [ebp - 0x224]
dec eax
mov dword [ebp - 0x224], eax
jmp 0x10038de1
mov dword [ebp - 0x394], 0x1006f67c
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x408], 0xffffffff
mov dword [ebp - 0x39c], 0x5e0c0a10
mov dword [ebp - 0x438], 0x6658d83f
push 2
lea ecx, [ebp - 0x46c]
call fcn.1002a48a
mov dword [ebp - 4], 4
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0x410], 0x8aff65ce
push 1
lea ecx, [ebp - 0x388]
call fcn.1002a48a
mov byte [ebp - 4], 5
mov dword [ebp - 0x44], 0
jmp 0x10038ed0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10038eec
push dword [ebp - 0x44]
lea ecx, [ebp - 0x46c]
call fcn.1002a571
mov dword [eax], 0x7d8169b4
jmp 0x10038ec9
mov dword [ebp - 0x44], 0
jmp 0x10038efc
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10038f18
push dword [ebp - 0x44]
lea ecx, [ebp - 0x388]
call fcn.1002a571
mov dword [eax], 0xaf09
jmp 0x10038ef5
mov dword [ebp - 0x10], 0
jmp 0x10038f28
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xa
jne 0x100390ea
mov dword [ebp - 0x12c], 0xdb8e9646
mov dword [ebp - 0xd0], 0xca27289f
cmp dword [ebp - 0x10], 0
jne 0x10038fe8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x460], eax
mov dword [ebp - 0xa8], 4
push 7
pop eax
neg eax
cmp eax, dword [ebp - 0x12c]
jne 0x10038f85
mov dword [ebp - 0x1bc], 1
jmp 0x10038f8c
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1bc], eax
jg 0x10038fa3
mov dword [ebp - 0x25c], 1
jmp 0x10038faa
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x25c], eax
jne 0x10038fc4
mov dword [ebp - 0x1c4], 1
jmp 0x10038fcb
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c4]
je 0x10038fdf
cmp dword [ebp - 0xa8], 0
jne 0x10038fe8
and dword [ebp - 0x22c], 0
jmp 0x10038ff2
mov dword [ebp - 0x22c], 1
cmp dword [ebp - 0x22c], 0x5f5b1b6f
jl 0x1003900a
mov dword [ebp - 0x1cc], 1
jmp 0x10039011
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xa8], 0x4f9a0237
cmp dword [ebp - 0xa8], 0
jne 0x1003904c
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0xa8], 0xae9f9034
mov eax, dword [ebp - 0x10]
dec eax
je 0x10039055
cmp dword [ebp - 0xd0], 0
jne 0x10039064
cmp dword [ebp - 0x10], 0
jne 0x10039064
and dword [ebp - 0x27c], 0
jmp 0x1003906e
mov dword [ebp - 0x27c], 1
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x27c]
imul eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x1003908d
mov dword [ebp - 0x1d4], 1
jmp 0x10039094
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jge 0x100390ae
mov dword [ebp - 0x234], 1
jmp 0x100390b5
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x234], eax
jne 0x100390cf
mov dword [ebp - 0x1dc], 1
jmp 0x100390d6
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xd0], eax
jmp 0x10038f21
push 0
lea ecx, [ebp - 0x388]
call fcn.1002a571
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x264]
mov dword [ecx], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x388]
call fcn.1002a563
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x46c]
call fcn.1002a563
mov dword [ebp - 0x418], 0x1006f680
mov dword [ebp - 0x88], 0x1c08901
mov dword [ebp - 0x3f0], 0xfffffff6
mov dword [ebp - 0x3ec], 0xfffffff6
mov dword [ebp - 0x3e8], 0xfffffff6
mov dword [ebp - 0x3e4], 0xfffffff6
mov dword [ebp - 0x3bc], 0xfffffffb
mov dword [ebp - 0x440], 0xffffffff
mov dword [ebp - 0x3c4], 4
mov dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0
jmp 0x100391b6
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x1003921f
mov dword [ebp - 0x420], 0x37b04800
mov dword [ebp - 0xe8], 0
jmp 0x100391e2
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jge 0x100391fe
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x3cc], 0xdfe0091d
jmp 0x100391d5
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x10039210
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
jmp 0x100391a9
mov byte [0x111e8020], 1
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x480], 0xffffffff
mov dword [ebp - 0x3d4], 0x5e0c0a10
mov dword [ebp - 0x428], 0x6658d83f
push 2
lea ecx, [ebp - 0x47c]
call fcn.1002a48a
mov dword [ebp - 4], 6
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3e0], 0x8aff65ce
push 1
lea ecx, [ebp - 0x37c]
call fcn.1002a48a
mov byte [ebp - 4], 7
mov dword [ebp - 0x38], 0
jmp 0x1003929e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x100392ba
push dword [ebp - 0x38]
lea ecx, [ebp - 0x47c]
call fcn.1002a571
mov dword [eax], 0x7d8169b4
jmp 0x10039297
mov dword [ebp - 0x38], 0
jmp 0x100392ca
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100392e6
push dword [ebp - 0x38]
lea ecx, [ebp - 0x37c]
call fcn.1002a571
mov dword [eax], 0xaf09
jmp 0x100392c3
mov dword [ebp - 0x14], 0
jmp 0x100392f6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xa
jne 0x100394b8
mov dword [ebp - 0x11c], 0xdb8e9646
mov dword [ebp - 0xd8], 0xca27289f
cmp dword [ebp - 0x14], 0
jne 0x100393b6
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
mov dword [ebp - 0x98], 4
push 7
pop eax
neg eax
cmp eax, dword [ebp - 0x11c]
jne 0x10039353
mov dword [ebp - 0x23c], 1
jmp 0x1003935a
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x23c], eax
jg 0x10039371
mov dword [ebp - 0x1ec], 1
jmp 0x10039378
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1ec], eax
jne 0x10039392
mov dword [ebp - 0x148], 1
jmp 0x10039399
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x148]
je 0x100393ad
cmp dword [ebp - 0x98], 0
jne 0x100393b6
and dword [ebp - 0x150], 0
jmp 0x100393c0
mov dword [ebp - 0x150], 1
cmp dword [ebp - 0x150], 0x5f5b1b6f
jl 0x100393d8
mov dword [ebp - 0x158], 1
jmp 0x100393df
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x98], 0x4f9a0237
cmp dword [ebp - 0x98], 0
jne 0x1003941a
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x3f8], eax
mov dword [ebp - 0x98], 0xae9f9034
mov eax, dword [ebp - 0x14]
dec eax
je 0x10039423
cmp dword [ebp - 0xd8], 0
jne 0x10039432
cmp dword [ebp - 0x14], 0
jne 0x10039432
and dword [ebp - 0x160], 0
jmp 0x1003943c
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x1003945b
mov dword [ebp - 0x168], 1
jmp 0x10039462
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jge 0x1003947c
mov dword [ebp - 0x170], 1
jmp 0x10039483
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x170], eax
jne 0x1003949d
mov dword [ebp - 0x178], 1
jmp 0x100394a4
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x178]
mov dword [ebp - 0xd8], eax
jmp 0x100392ef
push 0
lea ecx, [ebp - 0x37c]
call fcn.1002a571
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x180]
mov dword [ecx], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x37c]
call fcn.1002a563
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x47c]
call fcn.1002a563
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xf8], 0
jmp 0x1003951d
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x10039539
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x358], 0x124f01c0
jmp 0x10039510
mov byte [ebp - 0x47], 0
movzx eax, byte [ebp - 0x47]
test eax, eax
je 0x1003954f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0x9c], 1
jmp 0x10039568
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x10039648
push 2
lea ecx, [ebp - 0x2a0]
call fcn.1002a48a
mov dword [ebp - 4], 8
mov dword [ebp - 0xe0], 0
jmp 0x100395a2
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x100395c4
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x2a0]
call fcn.1002a571
mov dword [eax], 0xd3f46721
jmp 0x10039595
push 0
lea ecx, [ebp - 0x2a0]
call fcn.1002a571
mov dword [eax], 1
jmp 0x100395fd
push 0
lea ecx, [ebp - 0x2a0]
call fcn.1002a571
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x188]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x2a0]
call fcn.1002a571
cmp dword [eax], 0
jl 0x10039634
push 0
lea ecx, [ebp - 0x2a0]
call fcn.1002a571
mov eax, dword [eax]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x358]
mov dword [ebp + ecx*4 - 0x358], eax
jmp 0x100395d9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.1002a563
jmp 0x1003955b
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1006f688
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x108], 1
mov dword [ebp - 0xa4], 0xfffffffa
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x190], 1
mov dword [ebp - 0x1a8], 0x2c25fcc5
push 2
lea ecx, [ebp - 0x350]
call fcn.1002a48a
mov dword [ebp - 4], 9
mov dword [ebp - 0x13c], 0xec3d4e70
mov dword [ebp - 0xc0], 0
jmp 0x100396c5
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x100396e7
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x350]
call fcn.1002a571
mov dword [eax], 0xe1dfe009
jmp 0x100396b8
mov eax, dword [ebp - 0x13c]
dec eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0xa4]
jge 0x10039714
mov dword [ebp - 0x1b0], 1
jmp 0x1003971b
and dword [ebp - 0x1b0], 0
push 1
lea ecx, [ebp - 0x350]
call fcn.1002a571
mov dword [eax], 1
mov dword [ebp - 0x190], 0xffffffff
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x190], eax
jg 0x10039752
mov dword [ebp - 0x198], 1
jmp 0x10039759
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x198], eax
jg 0x10039773
mov dword [ebp - 0x1a0], 1
jmp 0x1003977a
and dword [ebp - 0x1a0], 0
imul eax, dword [ebp - 0x1a0], 0xfffffffe
test eax, eax
jne 0x10039793
or eax, 0xffffffff
jne 0x10039793
and dword [ebp - 0x104], 0
jmp 0x1003979d
mov dword [ebp - 0x104], 1
push 0
lea ecx, [ebp - 0x350]
call fcn.1002a571
mov ecx, dword [ebp - 0x104]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
add eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0x108]
jl 0x100397e5
mov dword [ebp - 0x1b8], 1
jmp 0x100397ec
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x1b0]
imul eax, dword [ebp - 0x1b8]
test eax, eax
je 0x10039812
cmp dword [ebp - 0xa4], 0
je 0x10039812
mov dword [ebp - 0x1c0], 1
jmp 0x10039819
and dword [ebp - 0x1c0], 0
imul eax, dword [ebp - 0x1c0], 0x6c0b
mov dword [ebp - 0xa4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.1002a563
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1006f688
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x24], 0xd925b0e4
mov dword [ebp - 0x70], 0x4fc2
mov dword [ebp - 0x28], 0x5b1b6fd4
mov dword [ebp - 0xc4], 0
jmp 0x10039877
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x10039893
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x368], 1
jmp 0x1003986a
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jge 0x100398a7
mov dword [ebp - 0x1c8], 1
jmp 0x100398ae
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1c8], eax
je 0x100398c5
mov dword [ebp - 0x1d0], 1
jmp 0x100398cc
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x100398fb
mov dword [ebp - 0x2dc], 1
jmp 0x10039902
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x70], eax
je 0x10039916
mov dword [ebp - 0x1d8], 1
jmp 0x1003991d
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x1d8]
test eax, eax
jne 0x1003993d
mov eax, 0xd963
test eax, eax
jne 0x1003993d
and dword [ebp - 0x1e0], 0
jmp 0x10039947
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1e0], eax
jle 0x1003995e
mov dword [ebp - 0x2f4], 1
jmp 0x10039965
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x28], 0
je 0x10039996
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1003997d
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10039991
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x10039a3e
mov dword [ebp - 0x70], 0
jmp 0x100399a6
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 8
jge 0x10039a3e
mov dword [ebp - 0x24], 0
jmp 0x100399c0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10039a39
mov dword [ebp - 0x28], 0
jmp 0x100399d6
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x100399f2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x368]
mov dword [ebp + ecx*4 - 0x368], eax
jmp 0x100399cf
mov dword [ebp - 0x28], 0
jmp 0x10039a02
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x10039a37
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10039a23
push 0
push 0x1feb
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10039a35
call dword [sym.imp.USER32.dll_DestroyCaret]
jmp 0x100399fb
jmp 0x100399b9
jmp 0x1003999f
mov eax, dword [ebp - 0x1f0]
mov dword [0x1006f67c], eax
mov eax, dword [ebp - 0x138]
mov dword [0x1006f680], eax
mov dword [ebp - 0xac], 1
mov dword [ebp - 0xcc], 0
jmp 0x10039a77
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10039a93
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x360], 0x124f01c0
jmp 0x10039a6a
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x10039aa9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
mov dword [ebp - 0xac], 1
jmp 0x10039ac2
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x10039ba2
push 2
lea ecx, [ebp - 0x294]
call fcn.1002a48a
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xd4], 0
jmp 0x10039afc
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x10039b1e
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x294]
call fcn.1002a571
mov dword [eax], 0xd3f46721
jmp 0x10039aef
push 0
lea ecx, [ebp - 0x294]
call fcn.1002a571
mov dword [eax], 1
jmp 0x10039b57
push 0
lea ecx, [ebp - 0x294]
call fcn.1002a571
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x1e8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x294]
call fcn.1002a571
cmp dword [eax], 0
jl 0x10039b8e
push 0
lea ecx, [ebp - 0x294]
call fcn.1002a571
mov eax, dword [eax]
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x360]
mov dword [ebp + ecx*4 - 0x360], eax
jmp 0x10039b33
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x294]
call fcn.1002a563
jmp 0x10039ab5
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x138]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [eax + ecx]
call fcn.100381b2
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x110], 0x7b7e80d6
mov dword [ebp - 0xdc], 0xffffffff
push 3
lea ecx, [ebp - 0x338]
call fcn.1002a48a
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x18], 0
jmp 0x10039c0d
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10039c23
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x144], 0xb13638ec
jmp 0x10039c06
mov dword [ebp - 0x18], 0
jmp 0x10039c33
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10039c4f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x338]
call fcn.1002a571
mov dword [eax], 0x68f928d9
jmp 0x10039c2c
mov dword [ebp - 0x18], 0
jmp 0x10039c5f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10039c75
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x30c], 0xb7b83196
jmp 0x10039c58
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
mov dword [ebp - 0x470], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x144]
cmp dword [ebp + eax - 0x144], ecx
jl 0x10039cb0
mov dword [ebp - 0x2e4], 1
jmp 0x10039cb7
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
sub eax, 3
cmp eax, dword [ebp - 0x110]
je 0x10039cdb
mov dword [ebp - 0x1f8], 1
jmp 0x10039ce2
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x1f8], eax
jle 0x10039cf9
cmp dword [ebp - 0xdc], 0
je 0x10039d0e
cmp dword [ebp - 0xdc], 0
je 0x10039d0e
mov dword [ebp - 0x200], 1
jmp 0x10039d15
and dword [ebp - 0x200], 0
push 2
lea ecx, [ebp - 0x338]
call fcn.1002a571
mov ecx, dword [ebp - 0x200]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x338]
call fcn.1002a571
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x144]
cmp dword [eax], ecx
je 0x10039d54
mov dword [ebp - 0x208], 1
jmp 0x10039d5b
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x208], eax
jne 0x10039d75
mov dword [ebp - 0x2ec], 1
jmp 0x10039d7c
and dword [ebp - 0x2ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xdc]
sub ecx, dword [ebp - 0x110]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0x144]
add ecx, dword [ebp - 0xdc]
cmp dword [ebp + eax - 0x144], ecx
je 0x10039db6
mov dword [ebp - 0x210], 1
jmp 0x10039dbd
and dword [ebp - 0x210], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x210]
mov dword [ebp + eax - 0x30c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.1002a563
mov dword [ebp - 0x128], 1
mov dword [ebp - 0xb4], 0xfffffffa
mov dword [ebp - 0x2ac], 0xffffffff
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x230], 0x2c25fcc5
push 2
lea ecx, [ebp - 0x344]
call fcn.1002a48a
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x118], 0xec3d4e70
mov dword [ebp - 0xe4], 0
jmp 0x10039e48
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x10039e6a
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x344]
call fcn.1002a571
mov dword [eax], 0xe1dfe009
jmp 0x10039e3b
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x128]
add eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0xb4]
jge 0x10039e97
mov dword [ebp - 0x238], 1
jmp 0x10039e9e
and dword [ebp - 0x238], 0
push 1
lea ecx, [ebp - 0x344]
call fcn.1002a571
mov dword [eax], 1
mov dword [ebp - 0x218], 0xffffffff
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x218], eax
jg 0x10039ed5
mov dword [ebp - 0x220], 1
jmp 0x10039edc
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x220], eax
jg 0x10039ef6
mov dword [ebp - 0x228], 1
jmp 0x10039efd
and dword [ebp - 0x228], 0
imul eax, dword [ebp - 0x228], 0xfffffffe
test eax, eax
jne 0x10039f16
or eax, 0xffffffff
jne 0x10039f16
and dword [ebp - 0x120], 0
jmp 0x10039f20
mov dword [ebp - 0x120], 1
push 0
lea ecx, [ebp - 0x344]
call fcn.1002a571
mov ecx, dword [ebp - 0x120]
mov dword [eax], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x230]
add eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x128]
jl 0x10039f68
mov dword [ebp - 0x240], 1
jmp 0x10039f6f
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x238]
imul eax, dword [ebp - 0x240]
test eax, eax
je 0x10039f95
cmp dword [ebp - 0xb4], 0
je 0x10039f95
mov dword [ebp - 0x248], 1
jmp 0x10039f9c
and dword [ebp - 0x248], 0
imul eax, dword [ebp - 0x248], 0x6c0b
mov dword [ebp - 0xb4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x344]
call fcn.1002a563
mov dword [ebp - 0xec], 0x53bc6e5c
mov dword [ebp - 0x250], 0x47c4d14
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x258], 0xfffffff9
mov dword [ebp - 0x2c0], 4
cmp dword [ebp - 0xec], 0x386c
je 0x1003a005
mov dword [ebp - 0x2a8], 1
jmp 0x1003a00c
and dword [ebp - 0x2a8], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x250], 1
cmp dword [ebp - 0x250], 0
jne 0x1003a03d
cmp dword [ebp - 0xec], 0
jne 0x1003a03d
and dword [ebp - 0x2b8], 0
jmp 0x1003a047
mov dword [ebp - 0x2b8], 1
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x130]
add eax, dword [ebp - 0x130]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x2c0], eax
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x1003a093
push 0
push 0
call dword [sym.imp.USER32.dll_CopyRect]
push dword [ebp - 0x138]
mov edx, 0x1006f624
mov ecx, dword [ebp - 0x2c8]
call section..gefopk
pop ecx
mov dword [ebp - 0x20], 0xd925b0e4
mov dword [ebp - 0x78], 0x4fc2
mov dword [ebp - 0x2c], 0x5b1b6fd4
mov dword [ebp - 0xf4], 0
jmp 0x1003a0d8
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x1003a0f4
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x370], 1
jmp 0x1003a0cb
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jge 0x1003a108
mov dword [ebp - 0x260], 1
jmp 0x1003a10f
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x260], eax
je 0x1003a126
mov dword [ebp - 0x268], 1
jmp 0x1003a12d
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1003a15c
mov dword [ebp - 0x2d0], 1
jmp 0x1003a163
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x78], eax
je 0x1003a177
mov dword [ebp - 0x270], 1
jmp 0x1003a17e
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x270]
test eax, eax
jne 0x1003a19e
mov eax, 0xd963
test eax, eax
jne 0x1003a19e
and dword [ebp - 0x278], 0
jmp 0x1003a1a8
mov dword [ebp - 0x278], 1
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x278], eax
jle 0x1003a1bf
mov dword [ebp - 0x2d8], 1
jmp 0x1003a1c6
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2c], 0
je 0x1003a1f7
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret