Function at 0x10031e4b
Capabilities:
Delete file
Delete registry value
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1005e6fa
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x790
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x2c]
test eax, eax
je 0x10031e91
push 0
push 0x4f3b
push 0x129b
call fcn.1004048a
add esp, 0xc
jmp 0x100356a0
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x530], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x4dc], eax
lea eax, [ebp + 0x14]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x3e4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x480], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x4e4]
movzx eax, byte [eax]
test eax, eax
je 0x10032201
mov dword [ebp - 0x25c], 0x2463
mov dword [ebp - 0x488], 0x1000a398
cmp dword [ebp - 0x25c], 0x246d
jle 0x10032005
and dword [ebp - 0x154], 0
jmp 0x10031f3f
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1765
jge 0x10032005
and dword [ebp - 0x16c], 0
jmp 0x10031f65
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0x2d28
jge 0x10032000
and dword [ebp - 0x1ac], 0
jmp 0x10031f8b
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x3c39
jge 0x10031ffb
and dword [ebp - 0xc4], 0
jmp 0x10031fad
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x666f
jge 0x10031ff9
mov eax, dword [ebp - 0x16c]
cdq
idiv dword [ebp - 0x1ac]
sub edx, dword [ebp - 0xc4]
or edx, dword [ebp - 0x154]
mov eax, edx
cdq
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x490], edx
push dword [ebp - 0x490]
push dword [ebp - 0x494]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10031fa0
jmp 0x10031f7e
jmp 0x10031f58
jmp 0x10031f32
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x4f0], eax
and dword [ebp - 4], 0
cmp dword [ebp - 0x25c], 0x219b
jge 0x10032031
mov edx, dword [ebp - 0x488]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x1003204d
or dword [ebp - 4], 0xffffffff
jmp 0x10032057
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x4c0], eax
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x208], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x208]
mov eax, dword [eax]
mov dword [ebp - 0x670], eax
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x3bc]
mov edx, dword [ebp - 0xa8]
mov edx, dword [edx]
sub edx, dword [ecx]
cmp edx, dword [eax]
jge 0x1003211d
mov dword [ebp - 0x3c4], 1
jmp 0x10032124
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3c4]
jl 0x10032140
mov dword [ebp - 0x3cc], 1
jmp 0x10032147
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3b8]
mov eax, dword [eax]
cmp dword [ebp - 0x3cc], eax
jge 0x10032163
mov dword [ebp - 0x3d4], 1
jmp 0x1003216a
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0x2f6
jl 0x10032182
mov dword [ebp - 0x3b4], 1
jmp 0x10032189
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 1
je 0x100321a6
mov eax, dword [ebp - 0x208]
cmp dword [eax], 0
jne 0x100321a6
and dword [ebp - 0x210], 0
jmp 0x100321b0
mov dword [ebp - 0x210], 1
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x210]
mov dword [eax], ecx
mov eax, dword [ebp - 0xa8]
mov eax, dword [eax]
mov dword [ebp - 0x6b0], eax
push 0
mov ecx, dword [ebp - 0x2f8]
call fcn.1000e93c
mov dword [eax], 0x600a
push 0
mov ecx, dword [ebp - 0x2f8]
call fcn.1000e93c
mov eax, dword [ebp - 0x4d4]
mov ecx, dword [ebp - 0xa8]
mov ecx, dword [ecx]
mov dword [eax], ecx
jmp 0x100356a0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x218], 0x2136
mov dword [ebp - 0x40c], 0x1000a410
cmp dword [ebp - 0x218], 0x244b
jle 0x10032317
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
and dword [ebp - 0x15c], 0
jmp 0x10032251
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x1d9c
jge 0x10032317
and dword [ebp - 0xcc], 0
jmp 0x10032277
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x7577
jge 0x10032312
and dword [ebp - 0x19c], 0
jmp 0x1003229d
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x5bb
jge 0x1003230d
and dword [ebp - 0xd4], 0
jmp 0x100322bf
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0x48a0
jge 0x1003230b
mov ecx, dword [ebp - 0xcc]
imul ecx, dword [ebp - 0x19c]
sub ecx, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x15c]
sar eax, cl
cdq
mov dword [ebp - 0x4a0], eax
mov dword [ebp - 0x49c], edx
push dword [ebp - 0x49c]
push dword [ebp - 0x4a0]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x100322b2
jmp 0x10032290
jmp 0x1003226a
jmp 0x10032244
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x468], eax
mov dword [ebp - 4], 2
cmp dword [ebp - 0x218], 0x1ece
jge 0x10032346
mov edx, dword [ebp - 0x40c]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10032362
or dword [ebp - 4], 0xffffffff
jmp 0x1003236c
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x584]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0xdc], 0xfffffff7
mov byte [ebp - 0x72], 0
push 0
push 0xfc6
push 0
push 0x2472
lea eax, [ebp - 0x72]
push eax
push 0x146
push 0x63f
call fcn.100269bc
add esp, 0x1c
mov dword [ebp - 0xdc], 0
jmp 0x100323de
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x16
jne 0x10032433
mov dword [ebp - 0x168], 0x97eede0b
mov dword [ebp - 0x168], 0
jmp 0x1003240a
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xa
jg 0x10032431
mov byte [ebp - 0x61], 0
push 0x4c95
push 0x1212
lea eax, [ebp - 0x61]
push eax
push 0
call fcn.1003d433
add esp, 0x10
jmp 0x100323fd
jmp 0x100323d1
mov dword [ebp - 0x18], 1
push 3
lea ecx, [ebp - 0x590]
call fcn.1000e8c4
mov dword [ebp - 4], 4
mov dword [ebp - 0x3c8], 0xa88a
mov dword [ebp - 0x424], 5
mov dword [ebp - 0x53c], 0xfffffffe
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x590]
push eax
push 0
call fcn.100400b2
add esp, 0xc
mov dword [ebp - 0x368], 0x184
mov dword [ebp - 0x41c], 0x1000a480
cmp dword [ebp - 0x368], 0x218
jle 0x1003252a
and dword [ebp - 0xe4], 0
jmp 0x100324be
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0x2485
jge 0x1003251f
and dword [ebp - 0xb8], 0
jmp 0x100324e0
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0x7d2c
jge 0x1003251d
mov eax, dword [ebp - 0xe4]
and eax, dword [ebp - 0xb8]
cdq
mov dword [ebp - 0x4ac], eax
mov dword [ebp - 0x4a8], edx
push dword [ebp - 0x4a8]
push dword [ebp - 0x4ac]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x100324d3
jmp 0x100324b1
push 0x224d
call dword [sym.imp.GDI32.dll_EndDoc]
mov dword [ebp - 0xa0], 0
jmp 0x10032543
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1003255f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x680], 0xe8bfa085
jmp 0x10032536
mov byte [ebp - 4], 5
cmp dword [ebp - 0x368], 0xfffffdc9
jge 0x1003257f
mov edx, dword [ebp - 0x41c]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x1003259b
mov dword [ebp - 4], 4
jmp 0x100325ab
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6bc], eax
cmp dword [ebp - 0x18], 0xdf0442e1
jbe 0x100325c9
mov dword [ebp - 0x220], 1
jmp 0x100325d0
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x220], eax
je 0x100325e2
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x100325f3
or eax, 0xffffffff
je 0x100325f3
mov dword [ebp - 0x300], 1
jmp 0x100325fa
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x300]
jg 0x10032611
mov dword [ebp - 0x228], 1
jmp 0x10032618
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x228], eax
je 0x1003262f
mov dword [ebp - 0x3a0], 1
jmp 0x10032636
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x3a0]
imul eax, eax, 0xfffffff7
cmp eax, dword [ebp - 0x18]
jle 0x10032654
mov dword [ebp - 0x230], 1
jmp 0x1003265b
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x230]
jle 0x10032672
mov dword [ebp - 0x308], 1
jmp 0x10032679
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xc6f7
jge 0x10032694
cmp dword [ebp - 0x18], 0
jne 0x10032694
and dword [ebp - 0x1b8], 0
jmp 0x1003269e
mov dword [ebp - 0x1b8], 1
push 1
lea ecx, [ebp - 0x590]
call fcn.1000e93c
mov ecx, dword [ebp - 0x1b8]
mov dword [eax], ecx
cmp dword [ebp - 0x1b8], 0
jne 0x100326d7
cmp dword [ebp - 0x18], 0
jne 0x100326d7
mov eax, 0xef6f0c3d
test eax, eax
je 0x100326d7
mov dword [ebp - 0x238], 1
jmp 0x100326de
and dword [ebp - 0x238], 0
cmp dword [ebp - 0x238], 0x50e8
jg 0x100326f6
mov dword [ebp - 0x370], 1
jmp 0x100326fd
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x370], eax
jg 0x10032714
mov dword [ebp - 0x240], 1
jmp 0x1003271b
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x240], eax
jg 0x10032741
push 0
lea ecx, [ebp - 0x590]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10032741
and dword [ebp - 0x310], 0
jmp 0x1003274b
mov dword [ebp - 0x310], 1
mov eax, dword [ebp - 0x310]
sub eax, dword [ebp - 0x3c8]
cmp eax, 0xdf2d
jge 0x1003276a
mov dword [ebp - 0x248], 1
jmp 0x10032771
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x248], eax
jle 0x10032788
mov dword [ebp - 0x3d8], 1
jmp 0x1003278f
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x424]
cmp eax, dword [ebp - 0x3c8]
jne 0x100327af
cmp dword [ebp - 0x18], 0
je 0x100327af
mov dword [ebp - 0x250], 1
jmp 0x100327b6
and dword [ebp - 0x250], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x680]
add eax, dword [ebp - 0x250]
cmp eax, 0x4615
je 0x100327dc
mov dword [ebp - 0x318], 1
jmp 0x100327e3
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x53c]
cmp dword [ebp - 0x318], eax
jne 0x1003280c
push 1
lea ecx, [ebp - 0x590]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x1003280c
and dword [ebp - 0x258], 0
jmp 0x10032816
mov dword [ebp - 0x258], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x258]
mov dword [ebp + eax - 0x680], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x590]
call fcn.1000e920
mov dword [ebp - 0x174], 0xfffffff7
mov dword [ebp - 0x42c], 0
mov dword [ebp - 0x4ec], 0x928fbc78
push 0
lea eax, [ebp - 0x42c]
push eax
push 1
push 0x6baa
push 1
lea eax, [ebp - 0x4ec]
push eax
push 0x272a
call fcn.10028767
add esp, 0x1c
mov byte [ebp - 0x75], 0
mov dword [ebp - 0xec], 8
push 3
lea ecx, [ebp - 0x59c]
call fcn.1000e8c4
mov dword [ebp - 4], 7
mov dword [ebp - 0x330], 0xbb8bffb
mov dword [ebp - 0x320], 0x56574b60
mov dword [ebp - 0x4f4], 0xfffffffc
mov dword [ebp - 0x380], 5
mov dword [ebp - 0x444], 0x3bbb66ef
mov dword [ebp - 0x1c4], 0xeab3ae5d
mov dword [ebp - 0x328], 8
push 0
push 0x1fcd
push 0x7684
lea eax, [ebp - 0x59c]
push eax
lea eax, [ebp - 0x90]
push eax
call fcn.100356b1
add esp, 0x14
mov dword [ebp - 0x90], 0
jmp 0x1003291f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1003293b
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x6dc], 0xfe737448
jmp 0x10032912
mov dword [ebp - 0xec], 0x15
jmp 0x10032954
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jl 0x10032e1d
mov dword [ebp - 0x3c], 0x2b57e8b7
mov dword [ebp - 0x378], 0x5171
mov dword [ebp - 0x434], 0x1000a4f8
cmp dword [ebp - 0x378], 0x5182
jle 0x10032a12
push 0x1f52
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
and dword [ebp - 0x164], 0
jmp 0x100329b1
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0x18ca
jge 0x10032a12
and dword [ebp - 0xf4], 0
jmp 0x100329d3
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0x1371
jge 0x10032a10
mov eax, dword [ebp - 0x164]
and eax, dword [ebp - 0xf4]
cdq
mov dword [ebp - 0x4b8], eax
mov dword [ebp - 0x4b4], edx
push dword [ebp - 0x4b4]
push dword [ebp - 0x4b8]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x100329c6
jmp 0x100329a4
mov dword [ebp - 0x1cc], 0xd63d2c82
mov byte [ebp - 4], 8
cmp dword [ebp - 0x378], 0x50b0
jge 0x10032a3c
mov edx, dword [ebp - 0x434]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10032a58
mov dword [ebp - 4], 7
jmp 0x10032a68
mov dword [ebp - 0x170], 0
jmp 0x10032a81
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x10032a9d
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x5b4], 0x50678e04
jmp 0x10032a74
mov dword [ebp - 0x3c], 0
jmp 0x10032aad
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff1
jg 0x10032c60
mov dword [ebp - 0xb0], 0xfffffff7
mov dword [ebp - 0xb0], 0
jmp 0x10032ada
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jg 0x10032c5b
mov dword [ebp - 0x260], 0xec3
mov dword [ebp - 0x43c], 0x1000a544
cmp dword [ebp - 0x260], 0x116f
jle 0x10032be1
and dword [ebp - 0xfc], 0
jmp 0x10032b21
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1c58
jge 0x10032be1
and dword [ebp - 0x1b4], 0
jmp 0x10032b47
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x2861
jge 0x10032bdc
and dword [ebp - 0x104], 0
jmp 0x10032b6d
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x649b
jge 0x10032bd7
mov eax, dword [ebp - 0xfc]
imul eax, dword [ebp - 0x1b4]
xor eax, dword [ebp - 0x104]
cdq
mov dword [ebp - 0x4fc], eax
mov dword [ebp - 0x4f8], edx
push dword [ebp - 0x4f8]
push dword [ebp - 0x4fc]
lea ecx, [ebp - 0x738]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x56c], eax
mov ecx, dword [ebp - 0x56c]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x738]
call fcn.1000e785
jmp 0x10032b60
jmp 0x10032b3a
jmp 0x10032b14
lea eax, [ebp - 0x330]
push eax
push 0
push 0x480e
push 0x354b
push 1
lea eax, [ebp - 0x59c]
push eax
push 0
lea eax, [ebp - 0xb0]
push eax
call fcn.100404b3
add esp, 0x20
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x260], 0xc7b
jge 0x10032c2a
push dword [ebp - 0x43c]
call fcn.10048556
pop ecx
jmp 0x10032c46
mov dword [ebp - 4], 7
jmp 0x10032c56
jmp 0x10032acd
jmp 0x10032aa6
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x268], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x5b4], ecx
mov eax, dword [ebp - 0x320]
cmp eax, dword [ebp - 0x268]
jg 0x10032cf3
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x444]
test eax, eax
jne 0x10032cc6
cmp dword [ebp - 0x1cc], 0
jne 0x10032cc6
and dword [ebp - 0x3a8], 0
jmp 0x10032cd0
mov dword [ebp - 0x3a8], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x6dc]
imul eax, dword [ebp - 0x3a8]
test eax, eax
je 0x10032cf3
mov dword [ebp - 0x270], 1
jmp 0x10032cfa
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x328], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x5b4]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x380]
cmp dword [ebp - 0x1c4], eax
jge 0x10032d4f
mov dword [ebp - 0x278], 1
jmp 0x10032d56
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x278]
cmp eax, dword [ebp - 0x380]
je 0x10032d73
mov dword [ebp - 0x280], 1
jmp 0x10032d7a
and dword [ebp - 0x280], 0
push 2
lea ecx, [ebp - 0x59c]
call fcn.1000e93c
mov ecx, dword [ebp - 0x280]
cmp ecx, dword [eax]
je 0x10032d9d
mov dword [ebp - 0x288], 1
jmp 0x10032da4
and dword [ebp - 0x288], 0
mov eax, dword [ebp - 0x330]
cmp dword [ebp - 0x288], eax
jg 0x10032dbe
mov dword [ebp - 0x3c0], 1
jmp 0x10032dc5
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c]
neg eax
cmp eax, dword [ebp - 0x3c0]
je 0x10032dde
mov dword [ebp - 0x290], 1
jmp 0x10032de5
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x290]
shl ecx, 1
cmp ecx, dword [ebp + eax - 0x6dc]
jne 0x10032e08
mov dword [ebp - 0x338], 1
jmp 0x10032e0f
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x3c], eax
jmp 0x10032947
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x59c]
call fcn.1000e920
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x10032e44
push 0x244b
push 0x4cc
call dword [sym.imp.USER32.dll_SetParent]
mov dword [ebp - 0x174], 0
jmp 0x10032e5d
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x16
jne 0x10033345
mov dword [ebp - 0x10c], 0x97eede0b
mov dword [ebp - 0x10c], 0
jmp 0x10032e8d
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xa
jg 0x10033340
mov dword [ebp - 0x298], 0xfffc
mov dword [ebp - 0x548], 0xc203
mov dword [ebp - 0x388], 0xfffffffb
cmp dword [ebp - 0x298], 0
je 0x10032ee9
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x10032edb
push 0
push 0x11c1
call fcn.100315f1
pop ecx
pop ecx
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x388], eax
jmp 0x10032f0a
mov byte [ebp - 0x77], 0
push 0x130c
push 0
lea eax, [ebp - 0x77]
push eax
push 0x421
push 0x33b4
call fcn.10035eda
add esp, 0x14
lea eax, [ebp - 0x298]
push eax
push 0
push 0x6460
push 0x2b46
lea eax, [ebp - 0x388]
push eax
call fcn.1003d0af
add esp, 0x14
mov byte [ebp - 0x70], 0
mov dword [ebp - 0x500], 0x399841b3
push 2
lea ecx, [ebp - 0x5fc]
call fcn.1000e8c4
mov dword [ebp - 4], 0xc
push 1
lea ecx, [ebp - 0x614]
call fcn.1000e8c4
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x44c], 0xb4b72b41
mov dword [ebp - 0x98], 0
jmp 0x10032f82
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x10032fa4
push dword [ebp - 0x98]
lea ecx, [ebp - 0x5fc]
call fcn.1000e93c
mov dword [eax], 0xfffffffe
jmp 0x10032f75
push 0
push 0x322d
push 1
lea eax, [ebp - 0x614]
push eax
push 0
push 0x6dad
lea eax, [ebp - 0x98]
push eax
push 0x1173
call fcn.10029789
add esp, 0x20
push 0x6a29
lea eax, [ebp - 0x44c]
push eax
push 0x451d
lea eax, [ebp - 0x500]
push eax
push 0
push 0
push 0x6550
push 1
lea eax, [ebp - 0x614]
push eax
lea eax, [ebp - 0x5fc]
push eax
call fcn.1002d175
add esp, 0x28
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x614]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5fc]
call fcn.1000e920
movzx eax, byte [ebp - 0x70]
test eax, eax
je 0x1003333b
push 2
lea ecx, [ebp - 0x1dc]
call fcn.1000e8c4
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x14], 0xeef20fe6
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x1b0], 0
jmp 0x1003306d
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x1003308f
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
mov dword [eax], 0x571177e8
jmp 0x10033060
mov dword [ebp - 0x14], 1
jmp 0x1003309f
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1003330f
mov esi, dword [ebp - 0x14]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
cmp dword [eax], esi
je 0x100330ca
mov dword [ebp - 0x2b8], 1
jmp 0x100330d1
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x14], 0
jne 0x1003315e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
cmp dword [eax], 4
jge 0x100330fa
mov dword [ebp - 0x2a0], 1
jmp 0x10033101
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
add eax, 0x5a2c821b
jne 0x1003311d
cmp dword [ebp - 0x14], 0
jne 0x1003311d
and dword [ebp - 0x340], 0
jmp 0x10033127
mov dword [ebp - 0x340], 1
mov esi, dword [ebp - 0x14]
imul esi, dword [ebp - 0x340]
push 0
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
cmp esi, dword [eax]
jge 0x1003314e
mov dword [ebp - 0x2a8], 1
jmp 0x10033155
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
je 0x1003317d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
cmp dword [eax], 0
je 0x1003317d
mov dword [ebp - 0x454], 1
jmp 0x10033184
and dword [ebp - 0x454], 0
cmp dword [ebp - 0x50], 0x8af066b7
je 0x10033199
mov dword [ebp - 0x3b0], 1
jmp 0x100331a0
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0x3b0], 0xb6890635
jbe 0x100331b8
mov dword [ebp - 0x2b0], 1
jmp 0x100331bf
and dword [ebp - 0x2b0], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2b0]
cmp ecx, dword [eax]
je 0x100331e3
mov dword [ebp - 0x348], 1
jmp 0x100331ea
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x50], eax
mov esi, dword [ebp - 0x50]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
cmp esi, dword [eax]
jne 0x10033214
mov dword [ebp - 0x390], 1
jmp 0x1003321b
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x390]
jg 0x10033235
mov dword [ebp - 0x2c0], 1
jmp 0x1003323c
and dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0x8877
jle 0x10033254
mov dword [ebp - 0x350], 1
jmp 0x1003325b
and dword [ebp - 0x350], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1dc]
call fcn.1000e93c
mov ecx, dword [ebp - 0x350]
cmp ecx, dword [eax]
je 0x100332aa
mov dword [ebp - 0x57c], 0xf3c88fed
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x50c], 0x2500428
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x45c], eax
cmp dword [ebp - 0x50c], 0
je 0x100332a8
jmp 0x1003330f
jmp 0x1003330a
mov dword [ebp - 0x554], 0xfffffffe
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x50], 1
jmp 0x100332ce
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1003330a
mov dword [ebp - 0x46c], 0xbf0bb9a6
lea eax, [ebp - 0x464]
push eax
lea eax, [ebp - 0x554]
push eax
lea eax, [ebp - 0x1dc]
push eax
push 0
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x46c]
push eax
call fcn.1002e022
add esp, 0x18
jmp 0x100332c7
jmp 0x10033098
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1dc]
call fcn.1000e920
push 1
push 0x2143
push 0
push 0
push 0xcec
push 0x3b21
call fcn.10027c4e
add esp, 0x18
jmp 0x10032e80
jmp 0x10032e50
mov dword [ebp - 0x2c], 0x2cb13638
mov dword [ebp - 0x518], 0x589b5833
mov dword [ebp - 0x114], 0
jmp 0x1003336f
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x1003338b
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0x1e4], 0x3342eb9
jmp 0x10033362
mov dword [ebp - 0x2c], 0
jmp 0x1003339b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x100334c8
mov dword [ebp - 0x84], 6
push 3
lea ecx, [ebp - 0x5e4]
call fcn.1000e8c4
mov dword [ebp - 4], 0xf
push 0
lea eax, [ebp - 0x6c4]
push eax
push 1
push 0x6738
push 0x684c
lea eax, [ebp - 0x5e4]
push eax
push 0x4a3
call fcn.100269bc
add esp, 0x1c
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x1e4]
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x1e4], 0
je 0x10033434
xor eax, eax
inc eax
je 0x10033419
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x1e4], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x1e4]
add eax, dword [ebp - 0x2c]
je 0x10033434
mov dword [ebp - 0x2c8], 1
jmp 0x1003343b
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x1e4]
add eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x84], 0
jmp 0x1003346a
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x100334b4
mov byte [ebp - 0x74], 0
movzx eax, byte [ebp - 0x74]
test eax, eax
je 0x10033497
push 0
push 0x4fef
push 1
push 0
push 0x35c1
call fcn.1003d375
add esp, 0x14
push 0
push 0x5a64
push 0x1263
lea eax, [ebp - 0x5e4]
push eax
call fcn.1003c8c8
add esp, 0x10
jmp 0x1003345d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e4]
call fcn.1000e920
jmp 0x10033394
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
sub eax, 0x7b7e
mov dword [ebp - 0x518], eax
cmp dword [ebp - 0x1c8], 0
jle 0x100356a0
mov dword [ebp - 0x20], 1
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000e8c4
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x3d0], 0x4f8
mov dword [ebp - 0x574], 0x1000a598
cmp dword [ebp - 0x3d0], 0x575
jle 0x10033614
and dword [ebp - 0x17c], 0
jmp 0x10033542
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x32f7
jge 0x10033602
and dword [ebp - 0x11c], 0
jmp 0x10033568
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x2d71
jge 0x100335fd
and dword [ebp - 0x1a8], 0
jmp 0x1003358e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x44d3
jge 0x100335f8
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0x11c]
or eax, dword [ebp - 0x1a8]
cdq
mov dword [ebp - 0x508], eax
mov dword [ebp - 0x504], edx
push dword [ebp - 0x504]
push dword [ebp - 0x508]
lea ecx, [ebp - 0x708]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x474], eax
mov ecx, dword [ebp - 0x474]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x708]
call fcn.1000e785
jmp 0x10033581
jmp 0x1003355b
jmp 0x10033535
push 0x1e0c
push 0x180b
push 0
call dword [sym.imp.GDI32.dll_PtInRegion]
mov dword [ebp - 0x244], 0xd6ba8dad
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x3d0], 0x453
jge 0x1003363a
push dword [ebp - 0x574]
call fcn.10048556
pop ecx
jmp 0x10033656
mov dword [ebp - 4], 0x10
jmp 0x10033666
mov dword [ebp - 0x254], 0x3f8c
lea eax, [ebp - 0x1f8]
push eax
push 0
lea eax, [ebp - 0x6cc]
push eax
call fcn.1004062b
add esp, 0xc
mov dword [ebp - 0x24c], 0x3a59
mov dword [ebp - 0x4d0], 0x1000a618
cmp dword [ebp - 0x24c], 0x3c50
jle 0x10033752
and dword [ebp - 0x124], 0
jmp 0x100336c2
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x47ba
jge 0x10033752
and dword [ebp - 0x184], 0
jmp 0x100336e8
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x7135
jge 0x1003374d
mov eax, dword [ebp - 0x124]
mov ecx, dword [ebp - 0x184]
sar eax, cl
cdq
mov dword [ebp - 0x514], eax
mov dword [ebp - 0x510], edx
push dword [ebp - 0x510]
push dword [ebp - 0x514]
lea ecx, [ebp - 0x720]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x47c], eax
mov ecx, dword [ebp - 0x47c]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x720]
call fcn.1000e785
jmp 0x100336db
jmp 0x100336b5
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2d0], eax
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2d0]
mov dword [eax], ecx
cmp dword [ebp - 0x2d0], 0
je 0x100337ee
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
mov dword [eax], 0xfff9
mov eax, 0xfff9
sub eax, 0xfffe
cmp eax, 0xd373ee76
jne 0x100337a9
mov dword [ebp - 0x358], 1
jmp 0x100337b0
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x358], eax
jle 0x100337c7
mov dword [ebp - 0x2d8], 1
jmp 0x100337ce
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x2d8]
je 0x100337e2
mov eax, 0x54114571
test eax, eax
je 0x100337ee
mov dword [ebp - 0x398], 1
jmp 0x100337f5
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x398], eax
jge 0x1003380c
mov dword [ebp - 0x2e0], 1
jmp 0x10033813
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x2e0]
je 0x1003382a
mov dword [ebp - 0x360], 1
jmp 0x10033831
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x360]
jl 0x10033848
mov dword [ebp - 0x200], 1
jmp 0x1003384f
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x200], eax
jge 0x10033866
mov dword [ebp - 0x204], 1
jmp 0x1003386d
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x204], eax
jne 0x10033884
mov dword [ebp - 0x20c], 1
jmp 0x1003388b
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20c], eax
jne 0x100338a2
mov dword [ebp - 0x214], 1
jmp 0x100338a9
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x214]
test eax, eax
je 0x100339e1
mov dword [ebp - 0x524], 0x336ae3d4
mov dword [ebp - 0x484], 6
mov dword [ebp - 0x23c], 0x1b5f7a0d
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x524]
je 0x100338f0
mov dword [ebp - 0x21c], 1
jmp 0x100338f7
and dword [ebp - 0x21c], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
mov eax, dword [eax]
cmp eax, dword [ebp - 0x21c]
jge 0x1003391a
mov dword [ebp - 0x22c], 1
jmp 0x10033921
and dword [ebp - 0x22c], 0
xor eax, eax
jne 0x10033940
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10033940
and dword [ebp - 0x224], 0
jmp 0x1003394a
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x22c]
add eax, 0x1254f
cmp eax, 0xf1f
je 0x1003396f
cmp dword [ebp - 0x23c], 0
cmp dword [ebp - 0x20], 0x7c57
jge 0x10033984
mov dword [ebp - 0x234], 1
jmp 0x1003398b
and dword [ebp - 0x234], 0
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x234]
cmp ecx, dword [eax]
jg 0x100339b4
cmp dword [ebp - 0x23c], 0
jne 0x100339b4
and dword [ebp - 0x1bc], 0
jmp 0x100339be
mov dword [ebp - 0x1bc], 1
push 0
lea ecx, [ebp - 0x1f8]
call fcn.1000e93c
mov ecx, dword [ebp - 0x1bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x244], eax
jmp 0x10033a24
mov dword [ebp - 0x48c], 0x649d9592
mov dword [ebp - 0x4bc], 8
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x1f8]
push eax
push 0
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x48c]
push eax
push 0x2ed0
lea eax, [ebp - 0x20]
push eax
call fcn.100278fa
add esp, 0x1c
mov byte [ebp - 4], 0x13
cmp dword [ebp - 0x24c], 0x36a1
jge 0x10033a40
push dword [ebp - 0x4d0]
call fcn.10048556
pop ecx
jmp 0x10033a5c
mov dword [ebp - 4], 0x10
jmp 0x10033a6c
mov eax, dword [ebp - 0x254]
dec eax
mov dword [ebp - 0x254], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.1000e920
mov dword [ebp - 0x1fc], 0x3edfa831
mov dword [ebp - 0x498], 0xd479
mov dword [ebp - 0x4d8], 0xb5af9f7c
mov dword [ebp - 0x12c], 0
jmp 0x10033abf
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jge 0x10033ad8
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x7c], 0xfffffff7
jmp 0x10033ab2
mov byte [ebp - 0x6c], 0
push 0x5d98
push 0xc44
push 1
push 0
push 0x77e6
lea eax, [ebp - 0x6c]
push eax
call fcn.1002939c
add esp, 0x18
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 0xc
jmp 0x10033b20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 9
jge 0x10033c82
push 3
lea ecx, [ebp - 0x5c0]
call fcn.1000e8c4
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x274], 0x5c1d1022
mov dword [ebp - 0x1a0], 0
jmp 0x10033b68
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 3
jge 0x10033b8a
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0x5c0]
call fcn.1000e93c
mov dword [eax], 8
jmp 0x10033b5b
push 2
lea ecx, [ebp - 0x5c0]
call fcn.1000e93c
cmp dword [eax], 0
je 0x10033c39
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x648], eax
mov dword [ebp - 0x1fc], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp eax, dword [ebp - 0x1fc]
jne 0x10033bd8
mov dword [ebp - 0x264], 1
jmp 0x10033bdf
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0x35edade0
je 0x10033bf7
mov dword [ebp - 0x26c], 1
jmp 0x10033bfe
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x26c], eax
jl 0x10033c18
mov dword [ebp - 0x27c], 1
jmp 0x10033c1f
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x27c], eax
jle 0x10033c39
mov dword [ebp - 0x284], 1
jmp 0x10033c40
and dword [ebp - 0x284], 0
cmp dword [ebp - 0x284], 9
jg 0x10033c55
mov dword [ebp - 0x28c], 1
jmp 0x10033c5c
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x498]
add eax, dword [ebp - 0x28c]
mov dword [ebp - 0x4d8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c0]
call fcn.1000e920
jmp 0x10033b0b
mov dword [ebp - 0x24], 0x2cb13638
mov dword [ebp - 0x40], 0
jmp 0x10033c99
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10033caf
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x66c], 0x7862
jmp 0x10033c92
mov dword [ebp - 0x40], 0
jmp 0x10033cbf
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10033cd5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x5ac], 0x96960f57
jmp 0x10033cb8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5ac], 0
jmp 0x10033d03
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5ac], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5ac], 2
jge 0x10033d2d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
mov dword [ebp + eax*4 - 0x66c], 0xfffffff6
jmp 0x10033ce8
mov dword [ebp - 0x458], 0x589b5833
mov dword [ebp - 0x28], 0xf80c3414
mov dword [ebp - 0x58], 0x3c67ee39
mov dword [ebp - 0x6ac], 4
mov dword [ebp - 0x650], 0xfffffffc
mov dword [ebp - 0x6c0], 0x13d0bb9
push 4
lea ecx, [ebp - 0x2f0]
call fcn.1000e8c4
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x48], 0xcff26af9
mov dword [ebp - 0x4e8], 0xd231
mov dword [ebp - 0x1c], 0
jmp 0x10033d9f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10033db2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 0x9beb0647
jmp 0x10033d98
mov dword [ebp - 0x1c], 0
jmp 0x10033dc2
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10033dde
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
mov dword [eax], 0xf2301355
jmp 0x10033dbb
mov dword [ebp - 0x1c], 0
jmp 0x10033dee
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10033e04
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5cc], 8
jmp 0x10033de7
mov byte [ebp - 0x6a], 0
movzx eax, byte [ebp - 0x6a]
test eax, eax
je 0x10033e4b
push 0x5922
push 0x4939
push 0x12c1
push 0x48a8
push 0x2bf7
push 0x82b
push 0
push 0
push 0x804
push 0x3a1
push 1
push 0x4b48
call fcn.1002e76d
add esp, 0x30
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x48], ecx
test eax, eax
jne 0x10033e81
push 3
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
push 3
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
cmp dword [eax], 0
jne 0x10033e81
and dword [ebp - 0x294], 0
jmp 0x10033e8b
mov dword [ebp - 0x294], 1
push 3
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
mov ecx, dword [ebp - 0x294]
mov dword [eax], ecx
xor eax, eax
jne 0x10033eb6
mov eax, 0xa898
test eax, eax
jne 0x10033eb6
and dword [ebp - 0x29c], 0
jmp 0x10033ec0
mov dword [ebp - 0x29c], 1
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x60]
add ecx, dword [ebp + eax - 0x60]
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x29c]
jne 0x10033eee
mov dword [ebp - 0x2a4], 1
jmp 0x10033ef5
and dword [ebp - 0x2a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp dword [ebp - 0x2a4], eax
jl 0x10033f13
mov dword [ebp - 0x2ac], 1
jmp 0x10033f1a
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x2ac], eax
jg 0x10033f31
mov dword [ebp - 0x2b4], 1
jmp 0x10033f38
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0x39bf
je 0x10033f50
mov dword [ebp - 0x2bc], 1
jmp 0x10033f57
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, 0x518854c7
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x2c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x5cc], ecx
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x2c4]
push 4
pop ecx
imul ecx, ecx, 0
cmp dword [ebp + ecx - 0x60], eax
jge 0x10034176
push 1
lea ecx, [ebp - 0x4cc]
call fcn.1000e8c4
mov byte [ebp - 4], 0x17
push 0x597
push 1
lea eax, [ebp - 0x658]
push eax
lea eax, [ebp - 0x4cc]
push eax
push 0x79a2
push 0
push 0x6772
call fcn.10027a88
add esp, 0x1c
mov dword [ebp - 0x80], 0
jmp 0x10033fe1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10033ff4
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x60], 0x2699ff93
jmp 0x10033fda
mov dword [ebp - 0x48], 0x10
jmp 0x10034004
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x32
jge 0x10034165
mov dword [ebp - 0x4e0], 0x7e94
cmp dword [ebp - 0x48], 0x2f52
jg 0x1003402d
mov dword [ebp - 0x4a4], 1
jmp 0x10034034
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5cc]
mov dword [ebp - 0x6b8], eax
xor eax, eax
jb 0x10034057
mov dword [ebp - 0x2cc], 1
jmp 0x1003405e
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x4e0]
cmp dword [ebp - 0x2cc], eax
jl 0x10034078
mov dword [ebp - 0x4b0], 1
jmp 0x1003407f
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5cc]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x660], eax
push 0
lea ecx, [ebp - 0x4cc]
call fcn.1000e93c
mov esi, eax
push 1
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
mov eax, dword [eax]
cmp eax, dword [esi]
jle 0x100340c6
mov dword [ebp - 0x2d4], 1
jmp 0x100340cd
and dword [ebp - 0x2d4], 0
mov esi, dword [ebp - 0x4e8]
add esi, dword [ebp - 0x2d4]
push 0
lea ecx, [ebp - 0x4cc]
call fcn.1000e93c
cmp esi, dword [eax]
jne 0x100340f6
mov dword [ebp - 0x2dc], 1
jmp 0x100340fd
and dword [ebp - 0x2dc], 0
push 0
lea ecx, [ebp - 0x4cc]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2dc]
cmp ecx, dword [eax]
jl 0x10034120
mov dword [ebp - 0x2e4], 1
jmp 0x10034127
and dword [ebp - 0x2e4], 0
push 3
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
mov ecx, dword [ebp - 0x2e4]
mov dword [eax], ecx
mov dword [ebp - 0x58], 0
jmp 0x1003414c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jg 0x10034160
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x60], 0
je 0x1003415e
jmp 0x10034160
jmp 0x10034145
jmp 0x10033ffd
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x4cc]
call fcn.1000e920
jmp 0x100341a9
mov dword [ebp - 0x28], 0
jmp 0x10034186
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x100341a9
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
add eax, 3
push eax
lea ecx, [ebp - 0x2f0]
call fcn.1000e93c
mov eax, dword [eax]
mov dword [ebp + esi*4 - 0x60], eax
jmp 0x1003417f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f0]
call fcn.1000e920
mov dword [ebp - 0x134], 0
jmp 0x100341d1
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x100341ed
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x1ec], 0x3342eb9
jmp 0x100341c4
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x30], 0
jmp 0x10034207
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1003421d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6e8], 1
jmp 0x10034200
mov dword [ebp - 0x30], 0
jmp 0x1003422d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10034243
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x7a0], 1
jmp 0x10034226
mov dword [ebp - 0x18c], 2
jmp 0x1003425c
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x100342a6
mov dword [ebp - 0x88], 0xfffffff7
mov dword [ebp - 0x88], 0
jmp 0x10034288
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x100342a4
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x6e8], 0xe77dd688
jmp 0x1003427b
jmp 0x1003424f
push 0x26ac
push 0x5211
push 0
push 0x747b
push 0x675e
push 0
push 0x3387
call fcn.100290e6
add esp, 0x1c
mov dword [ebp - 0x24], 0
jmp 0x100342db
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x10034eaa
mov dword [ebp - 0xa4], 6
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x3e0], 1
push 3
lea ecx, [ebp - 0x5f0]
call fcn.1000e8c4
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x3f8], 0xfffffffd
mov dword [ebp - 0x3e8], 0x5ab136
push 2
lea ecx, [ebp - 0x5d8]
call fcn.1000e8c4
mov byte [ebp - 4], 0x19
push 1
push 0xeaf
lea eax, [ebp - 0x8c]
push eax
push 0x6498
push 0
push 0x180a
push 0x5fbc
lea eax, [ebp - 0x5f0]
push eax
call fcn.10027eae
add esp, 0x20
mov dword [ebp - 0x8c], 0
jmp 0x10034383
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x100343a5
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x5d8]
call fcn.1000e93c
mov dword [eax], 0xeb256cd2
jmp 0x10034376
mov dword [ebp - 0x94], 0
jmp 0x100343be
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffe2
jne 0x1003447e
mov dword [ebp - 0x3dc], 0xfffffffb
mov dword [ebp - 0x3f0], 0xcf3e4c99
lea eax, [ebp - 0x5f0]
push eax
push 0x5e86
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x3dc]
push eax
lea eax, [ebp - 0x5d8]
push eax
push 0
lea eax, [ebp - 0x3e0]
push eax
lea eax, [ebp - 0x3e8]
push eax
lea eax, [ebp - 0x3f0]
push eax
lea eax, [ebp - 0x3f8]
push eax
push 0
call fcn.1002dc7b
add esp, 0x2c
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x10034479
push 0x711
push 1
push 0
push 0x116c
push 0x52ec
push 0x6b17
push 0x3cc9
push 0x191e
push 0x1ed
push 0x3b2a
push 0x7481
push 0x5963
push 0
push 0x59c2
call fcn.10031949
add esp, 0x38
jmp 0x100343b1
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x5d8]
call fcn.1000e920
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5f0]
call fcn.1000e920
push 3
lea ecx, [ebp - 0x620]
call fcn.1000e8c4
mov dword [ebp - 4], 0x1a
push 0
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x6c8]
push eax
push 1
call fcn.10027e1a
add esp, 0x10
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1ec], 0
je 0x10034512
xor eax, eax
inc eax
je 0x100344f7
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1ec], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1ec]
add eax, dword [ebp - 0x24]
je 0x10034512
mov dword [ebp - 0x2f4], 1
jmp 0x10034519
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1ec]
add eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x1a4], 0xffffffff
mov dword [ebp - 0x6a8], 2
mov dword [ebp - 0x13c], 0
jmp 0x1003455c
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x10034578
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x408], 0xfffffff9
jmp 0x1003454f
mov dword [ebp - 0x1a4], 0xa
jmp 0x10034591
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xffffffe6
jg 0x10034825
mov dword [ebp - 0x2fc], 0x718e
mov dword [ebp - 0x400], 0x1000a644
cmp dword [ebp - 0x2fc], 0x73d8
jle 0x10034647
and dword [ebp - 0x144], 0
jmp 0x100345d8
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x6d74
jge 0x1003463b
and dword [ebp - 0x194], 0
jmp 0x100345fa
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x1f5a
jge 0x10034639
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x194]
shl eax, cl
cdq
mov dword [ebp - 0x520], eax
mov dword [ebp - 0x51c], edx
push dword [ebp - 0x51c]
push dword [ebp - 0x520]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x100345ed
jmp 0x100345cb
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
mov dword [ebp - 0x9c], 0x5ba77230
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x2fc], 0x6f59
jge 0x10034671
mov edx, dword [ebp - 0x400]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x1003468d
mov dword [ebp - 4], 0x1a
jmp 0x1003469d
mov byte [ebp - 0x6b], 0
movzx eax, byte [ebp - 0x6b]
test eax, eax
je 0x100346d3
push 0x9d7
push 0x4147
push 0x7237
push 0x3df2
push 0
push 0x53bd
push 0
push 0xb86
call fcn.1002c85e
add esp, 0x20
mov dword [ebp - 0x304], 0x100
mov dword [ebp - 0x410], 0x1000a6a4
cmp dword [ebp - 0x304], 0x1e0
jle 0x1003479f
and dword [ebp - 0x14c], 0
jmp 0x1003470d
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0x7a9d
jge 0x1003479f
and dword [ebp - 0xbc], 0
jmp 0x10034733
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1431
jge 0x1003479a
and dword [ebp - 0xc0], 0
jmp 0x10034755
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x3ec1
jge 0x10034798
mov eax, dword [ebp - 0x14c]
add eax, dword [ebp - 0xbc]
xor eax, dword [ebp - 0xc0]
cdq
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0x528], edx
push dword [ebp - 0x528]
push dword [ebp - 0x52c]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10034748
jmp 0x10034726
jmp 0x10034700
mov dword [ebp - 0x9c], 0
jmp 0x100347b8
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x100347d4
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x408], 0xffffffff
jmp 0x100347ab
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x304], 0xfffffec5
jge 0x100347f4
mov edx, dword [ebp - 0x410]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x10034810
mov dword [ebp - 4], 0x1a
jmp 0x10034820
jmp 0x10034584
mov dword [ebp - 0xa4], 0
jmp 0x1003483e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jg 0x10034e96
mov dword [ebp - 0xc8], 0xfffffff9
mov dword [ebp - 0xc8], 0
jmp 0x1003486e
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffea
jge 0x10034902
mov dword [ebp - 0xac], 0x8ecf54c3
push 1
lea eax, [ebp - 0xac]
push eax
push 0
push 0x815
push 1
push 0x63d2
push 0x42b6
push 0x6d4b
call fcn.10029789
add esp, 0x20
mov dword [ebp - 0xac], 4
jmp 0x100348c7
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x12
jne 0x100348fd
mov byte [ebp - 0x6e], 0
push 0
push 0x6e02
push 0x2e2a
push 0x29bf
push 0x67c4
lea eax, [ebp - 0x6e]
push eax
push 0x2a2
call fcn.1003e02a
add esp, 0x1c
jmp 0x100348ba
jmp 0x10034861
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10034c1c
mov dword [ebp - 0xd0], 0x25b9b55b
push 2
lea ecx, [ebp - 0x690]
call fcn.1000e8c4
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x684], 0x1c3a23fe
mov dword [ebp - 0x34], 0
jmp 0x10034947
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10034963
push dword [ebp - 0x34]
lea ecx, [ebp - 0x690]
call fcn.1000e93c
mov dword [eax], 0x6893
jmp 0x10034940
mov dword [ebp - 0x34], 0
jmp 0x10034973
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10034989
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x6b4], 9
jmp 0x1003496c
mov dword [ebp - 0xd0], 0
jmp 0x100349a2
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffe4
jle 0x10034c05
mov dword [ebp - 0xf0], 0x260417be
mov dword [ebp - 0x694], 3
mov byte [ebp - 0x6d], 0
mov dword [ebp - 0x30c], 0x4730
mov dword [ebp - 0x420], 0x1000a708
cmp dword [ebp - 0x30c], 0x479c
jle 0x10034ac2
and dword [ebp - 0xe8], 0
jmp 0x10034a01
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0x65ef
jge 0x10034ac2
and dword [ebp - 0xd8], 0
jmp 0x10034a27
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x7768
jge 0x10034abd
and dword [ebp - 0xe0], 0
jmp 0x10034a4d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x2eab
jge 0x10034ab8
mov ecx, dword [ebp - 0xd8]
add ecx, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe8]
sar eax, cl
cdq
mov dword [ebp - 0x538], eax
mov dword [ebp - 0x534], edx
push dword [ebp - 0x534]
push dword [ebp - 0x538]
lea ecx, [ebp - 0x750]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x418], eax
mov ecx, dword [ebp - 0x418]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x750]
call fcn.1000e785
jmp 0x10034a40
jmp 0x10034a1a
jmp 0x100349f4
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10034ae0
push 0x21b7
push 0x70ed
push 0
push 0
call fcn.1002d7ef
add esp, 0x10
mov byte [ebp - 4], 0x20
cmp dword [ebp - 0x30c], 0x45f5
jge 0x10034afc
push dword [ebp - 0x420]
call fcn.10048556
pop ecx
jmp 0x10034b18
mov dword [ebp - 4], 0x1f
jmp 0x10034b28
mov dword [ebp - 0xf0], 1
jmp 0x10034b41
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x10034c00
mov dword [ebp - 0xf8], 4
mov byte [ebp - 0x6f], 0
push 0
push 0
push 0x7a4
push 0x4fc6
push 0x6ac7
lea eax, [ebp - 0x6f]
push eax
call fcn.100283da
add esp, 0x18
mov dword [ebp - 0xf8], 0
jmp 0x10034b94
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jg 0x10034bfb
push 2
lea ecx, [ebp - 0x608]
call fcn.1000e8c4
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x608]
push eax
push 0
lea eax, [ebp - 0x628]
push eax
call fcn.1002c0da
add esp, 0xc
push 0
lea ecx, [ebp - 0x608]
call fcn.1000e93c
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x314]
mov dword [ecx], eax
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x608]
call fcn.1000e920
jmp 0x10034b87
jmp 0x10034b34
jmp 0x10034995
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x690]
call fcn.1000e920
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x33c], 0x2b15
mov dword [ebp - 0x438], 0x1000a790
cmp dword [ebp - 0x33c], 0x2b49
jle 0x10034d15
and dword [ebp - 0x100], 0
jmp 0x10034c56
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x187f
jge 0x10034d15
and dword [ebp - 0x108], 0
jmp 0x10034c7c
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0x1f36
jge 0x10034d10
and dword [ebp - 0x110], 0
jmp 0x10034ca2
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x664a
jge 0x10034d0b
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x108]
sub eax, dword [ebp - 0x110]
cdq
mov dword [ebp - 0x544], eax
mov dword [ebp - 0x540], edx
push dword [ebp - 0x540]
push dword [ebp - 0x544]
lea ecx, [ebp - 0x780]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x428], eax
mov ecx, dword [ebp - 0x428]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x780]
call fcn.1000e785
jmp 0x10034c95
jmp 0x10034c6f
jmp 0x10034c49
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x38], 0x928fbc78
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x10034d47
mov dword [ebp - 0x32c], 1
jmp 0x10034d4e
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
test eax, eax
jne 0x10034d89
cmp dword [ebp - 0x38], 0xf6802998
jb 0x10034d6e
mov dword [ebp - 0x31c], 1
jmp 0x10034d75
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
sub eax, dword [ebp - 0x38]
jne 0x10034d89
and dword [ebp - 0x324], 0
jmp 0x10034d93
mov dword [ebp - 0x324], 1
cmp dword [ebp - 0x324], 1
jne 0x10034da8
mov dword [ebp - 0x334], 1
jmp 0x10034daf
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x32c]
cmp eax, dword [ebp - 0x334]
jge 0x10034df2
cmp dword [ebp - 0x38], 0
je 0x10034df2
mov dword [ebp - 0x430], 0x468a
mov dword [ebp - 0x38], 0xfffffff0
jmp 0x10034ddd
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
jg 0x10034df0
cmp dword [ebp - 0x430], 0
je 0x10034dee
jmp 0x10034df0
jmp 0x10034dd6
jmp 0x10034e25
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10034e25
push 0x4f93
push 0
push 0x6c3c
push 0x43cd
push 1
push 0x42e0
push 1
push 0x5041
call fcn.100404b3
add esp, 0x20
mov byte [ebp - 4], 0x23
cmp dword [ebp - 0x33c], 0x294a
jge 0x10034e41
push dword [ebp - 0x438]
call fcn.10048556
pop ecx
jmp 0x10034e5d
mov dword [ebp - 4], 0x1a
jmp 0x10034e6d
push 1
lea ecx, [ebp - 0x620]
call fcn.1000e93c
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x344]
mov dword [ecx], eax
jmp 0x10034831
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x620]
call fcn.1000e920
jmp 0x100342d4
push 2
lea ecx, [ebp - 0x6a0]
call fcn.1000e8c4
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x118], 0x13532fe2
mov dword [ebp - 0x62c], 0x2a8358bd
mov dword [ebp - 0x634], 0xf0bc5021
mov dword [ebp - 0x63c], 0xffffffff
mov dword [ebp - 0x644], 0x6652d0da
push 0x1141
push 0x5094
lea eax, [ebp - 0x6a0]
push eax
push 0
lea eax, [ebp - 0x64c]
push eax
push 0
call fcn.100313e5
add esp, 0x18
mov dword [ebp - 0x118], 1
jmp 0x10034f2d
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x100352bb
mov dword [ebp - 0x148], 0x20002526
mov dword [ebp - 0x120], 0
jmp 0x10034f5d
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 4
jge 0x10034f79
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0x790], 2
jmp 0x10034f50
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x10034f8d
push 0
call fcn.1002a24e
pop ecx
mov dword [ebp - 0x35c], 0x50e6
mov dword [ebp - 0x450], 0x1000a7d8
cmp dword [ebp - 0x35c], 0x51ba
jle 0x100350af
push 0xaf7
push 0x16a9
push 0xff
push 0x6cc
call dword [sym.imp.USER32.dll_CheckRadioButton]
and dword [ebp - 0x140], 0
jmp 0x10034fe1
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0x4a7
jge 0x100350a7
and dword [ebp - 0x138], 0
jmp 0x10035007
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0x492d
jge 0x100350a2
and dword [ebp - 0x128], 0
jmp 0x1003502d
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x57ac
jge 0x1003509d
and dword [ebp - 0x130], 0
jmp 0x1003504f
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0x74e8
jge 0x1003509b
mov ecx, dword [ebp - 0x128]
imul ecx, dword [ebp - 0x130]
add ecx, dword [ebp - 0x138]
mov eax, dword [ebp - 0x140]
sar eax, cl
cdq
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x54c], edx
push dword [ebp - 0x54c]
push dword [ebp - 0x550]
mov ecx, 0x10607538
call fcn.1000e7af
jmp 0x10035042
jmp 0x10035020
jmp 0x10034ffa
jmp 0x10034fd4
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x148], 0
jmp 0x100350c8
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jg 0x1003526a
mov dword [ebp - 0x354], 0xffffffff
mov dword [ebp - 0x34c], 0x1f11
mov dword [ebp - 0x448], 0x1000a820
cmp dword [ebp - 0x34c], 0x201b
jle 0x100351d9
and dword [ebp - 0x160], 0
jmp 0x10035119
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x376a
jge 0x100351d9
and dword [ebp - 0x150], 0
jmp 0x1003513f
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0x7e6d
jge 0x100351d4
and dword [ebp - 0x158], 0
jmp 0x10035165
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0x7f20
jge 0x100351cf
mov eax, dword [ebp - 0x150]
imul eax, dword [ebp - 0x158]
xor eax, dword [ebp - 0x160]
cdq
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0x558], edx
push dword [ebp - 0x558]
push dword [ebp - 0x55c]
lea ecx, [ebp - 0x768]
call fcn.1000d330
pop ecx
pop ecx
mov dword [ebp - 0x440], eax
mov ecx, dword [ebp - 0x440]
call fcn.1000e78f
push eax
call fcn.10048556
pop ecx
lea ecx, [ebp - 0x768]
call fcn.1000e785
jmp 0x10035158
jmp 0x10035132
jmp 0x1003510c
mov byte [ebp - 0x59], 0
push 0x1e0
push 0x2af3
push 0
push 0x21d2
push 0
push 0xd88
lea eax, [ebp - 0x59]
push eax
push 0x31c5
push 0x4a33
push 0xf6c
call fcn.1003cf2f
add esp, 0x28
mov byte [ebp - 4], 0x26
cmp dword [ebp - 0x34c], 0x1e88
jge 0x1003522c
push dword [ebp - 0x448]
call fcn.10048556
pop ecx
jmp 0x10035248
mov dword [ebp - 4], 0x25
jmp 0x10035258
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
jmp 0x100350bb
mov byte [ebp - 4], 0x28
cmp dword [ebp - 0x35c], 0x4e83
jge 0x1003528a
mov edx, dword [ebp - 0x450]
mov ecx, 0x10607538
call fcn.1001021f
jmp 0x100352a6
mov dword [ebp - 4], 0x25
jmp 0x100352b6
jmp 0x10034f20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6a0]
call fcn.1000e920
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
sub eax, 0x7b7e
mov dword [ebp - 0x458], eax
mov dword [ebp - 0x68], 0x874b
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0xb4], 0xd373ee76
mov dword [ebp - 0x374], 0xd4752e4a
mov dword [ebp - 0x188], 0xcdc0f1fa
mov dword [ebp - 0x178], 0
jmp 0x1003532a
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jge 0x10035346
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0x568], 1
jmp 0x1003531d
mov dword [ebp - 0x68], 0x54db
mov eax, dword [ebp - 0x68]
neg eax
mov ecx, 0x3c40
sub ecx, eax
mov dword [ebp - 0x180], ecx
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x68]
cmp eax, 0xf7bd
jge 0x10035387
mov dword [ebp - 0x364], 1
jmp 0x1003538e
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x364]
jne 0x100353a8
mov dword [ebp - 0x36c], 1
jmp 0x100353af
and dword [ebp - 0x36c], 0
cmp dword [ebp - 0x36c], 0x407374fd
jge 0x100353cb
push 0xfffffffffffffffe
pop eax
test eax, eax
jne 0x100353cb
and dword [ebp - 0x460], 0
jmp 0x100353d5
mov dword [ebp - 0x460], 1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x664], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x374], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
cmp ecx, dword [ebp + eax - 0x568]
jg 0x1003541d
mov dword [ebp - 0x37c], 1
jmp 0x10035424
and dword [ebp - 0x37c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x568]
cmp dword [ebp - 0x37c], eax
je 0x10035445
mov dword [ebp - 0x384], 1
jmp 0x1003544c
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
neg eax
cmp eax, 0x4f16
jg 0x10035467
mov dword [ebp - 0x38c], 1
jmp 0x1003546e
and dword [ebp - 0x38c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x38c]
mov dword [ebp + eax - 0x568], ecx
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0x188]
cmp eax, 0xffffffff
je 0x1003549e
mov dword [ebp - 0x394], 1
jmp 0x100354a5
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x394], eax
jne 0x100354bf
mov dword [ebp - 0x39c], 1
jmp 0x100354c6
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x39c], eax
je 0x100354e0
mov dword [ebp - 0x3a4], 1
jmp 0x100354e7
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0
je 0x100354f6
cmp dword [ebp - 0x68], 0
jne 0x100354fd
cmp dword [ebp - 0xb4], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x188], eax
push 4
push 0x1000
push dword [ebp - 0x1c8]
mov eax, dword [ebp - 0x3ac]
mov ecx, dword [ebp - 0x468]
add ecx, dword [eax + 0xc]
push ecx
push 0x6bf2
push 0x528e
call fcn.1001a734
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x1d0]
mov dword [ecx], eax
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x190], 0
jmp 0x10035561
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1003557d
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x6f0], 0xcff0ea75
jmp 0x10035554
mov dword [ebp - 0x44], 0
jmp 0x1003558d
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x100355e6
mov dword [ebp - 0x470], 0
push 0x30dc
push 1
push 0
push 0x2737
push 0x4238
push 0x38fb
push 0x60fa
push 0x4c0e
push 0x196d
push 0x123c
push 0x3c28
lea eax, [ebp - 0x470]
push eax
push 1
push 0x67a0
call fcn.10031949
add esp, 0x38
jmp 0x10035586
mov dword [ebp - 0x44], 0
jmp 0x100355f6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x1003566e
mov dword [ebp - 0x198], 2
mov dword [ebp - 0x198], 0
jmp 0x1003561f
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jg 0x1003566c
mov byte [ebp - 0x73], 0
movzx eax, byte [ebp - 0x73]
test eax, eax
je 0x1003566a
push 0x5eeb
push 0x7c44
push 0x3ace
push 1
push 0x37e7
push 0x2de3
push 0x146f
push 0x5480
push 0
push 0
push 0x4d11
call fcn.1003fbd3
add esp, 0x2c
jmp 0x10035612
jmp 0x100355ef
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x3ac]
push eax
push 0
push 1
call fcn.1002d7ef
add esp, 0x10
push dword [ebp - 0x1c8]
push 0
mov eax, dword [ebp - 0x1d0]
push dword [eax]
call fcn.1001a990
add esp, 0xc
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret