Function at 0x100327d8
Capabilities:
Check os version
Create process on windows
Delete file
Get common file path
Get disk information
Get file system object information
Get graphical window text
Identify system language via api
Log keystrokes
Log keystrokes via polling
Parse pe header
Query service status
Read .ini file
Suspend thread

Disassembly:
mov eax, 0x1007ae9f
call fcn.10079570
mov eax, 0x157c
call fcn.10077190
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x6c], ecx
push edi
inc ebx
mov dword [ebp - 0x1c], 0
push ebx
lea ecx, [ebp - 0x928]
mov byte [ebp - 0x61], dl
call fcn.10008f68
xor eax, eax
lea ecx, [ebp - 0x3e0]
push 2
mov dword [ebp - 4], eax
pop eax
mov dword [ebp - 0x44], 0xfffffff8
push eax
call fcn.10008f68
mov byte [ebp - 4], bl
xor eax, eax
mov dword [ebp - 0x38], 0x4ed09eb8
mov dword [ebp - 0x54], 0x1cc545e2
mov dword [ebp - 0x2c], eax
push 2
pop esi
cmp dword [ebp - 0x2c], ebx
jge 0x1003285e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x928]
call fcn.10009009
mov dword [eax], esi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x10032844
xor eax, eax
push 0xfffffffffffffffd
mov dword [ebp - 0x2c], eax
pop edi
jmp 0x10032873
push dword [ebp - 0x2c]
call fcn.10009009
mov dword [eax], edi
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0x3e0]
cmp dword [ebp - 0x2c], esi
jl 0x10032866
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
add esi, eax
push ebx
call fcn.10009009
xor ebx, ebx
mov dword [eax], esi
test esi, esi
jne 0x100328ad
push ebx
lea ecx, [ebp - 0x3e0]
call fcn.10009009
cmp dword [eax], ebx
je 0x100328bc
xor eax, eax
lea ecx, [ebp - 0x3e0]
inc eax
push eax
call fcn.10009009
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x3e0]
mov eax, dword [ebp - 0x44]
xor eax, eax
inc eax
push eax
call fcn.10009009
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x928]
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x1c]
push ebx
call fcn.10009009
push ebx
lea ecx, [ebp - 0x3e0]
mov dword [eax], esi
call fcn.10009009
mov ecx, dword [ebp - 0x38]
xor edx, edx
push 0xfffffffffffffffa
cmp dword [eax], ecx
mov eax, dword [ebp - 0x1c]
setg dl
add eax, esi
imul ecx, edx, 0x9ce
xor edx, edx
cmp eax, ecx
pop eax
setne dl
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x3e0]
call fcn.10008fed
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x928]
call fcn.10008fed
mov dword [ebp - 0x20], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x28], 0xd2f2
mov dword [ebp - 0x38], 0xe62699ff
mov dword [ebp - 0x38], 0x1f205951
push 2
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jge 0x10032982
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x100], 0x8bbca631
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003296a
xor eax, eax
push 3
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jge 0x100329a5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x334], 0xf58aae07
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003298d
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
jmp 0x100329f7
mov dword [ebp - 0x10], 0x65ab3e90
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x100329f4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], ecx
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100329ed
push 0x11a5
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
dec dword [ebp - 0x10]
jns 0x100329bc
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100329ad
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x100]
mov dword [ebp - 0xfc], ecx
mov eax, dword [ebp - 0x32c]
sub eax, 0xa814
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
jle 0x10032a28
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x32c]
xor edx, edx
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x32c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x28]
je 0x10032a5e
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
xor eax, eax
imul edx, dword [ebp - 0x32c]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], eax
je 0x10032a86
cmp dword [ebp - 0x334], eax
je 0x10032a86
mov eax, ebx
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xfc]
sub ecx, dword [ebp - 0x28]
neg ecx
push 2
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfbc0
lea ecx, [ebp - 0x940]
pop esi
setl al
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], ebx
push esi
call fcn.10008f68
push ebx
lea ecx, [ebp - 0x7c0]
mov dword [ebp - 4], esi
call fcn.10008f68
push 3
pop eax
push esi
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], al
call fcn.10008f68
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb80]
mov dword [ebp - 0x44], ebx
push esi
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 5
push esi
mov dword [ebp - 0x30], eax
pop ecx
cmp dword [ebp - 0x30], ecx
jge 0x10032b13
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2e4], 0x8256
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x10032afb
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10032b3c
push dword [ebp - 0x30]
lea ecx, [ebp - 0x7c0]
call fcn.10009009
mov dword [eax], 0x4888999d
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10032b1b
push 2
xor eax, eax
pop ecx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ecx
jge 0x10032b65
push dword [ebp - 0x30]
lea ecx, [ebp - 0x168]
call fcn.10009009
push 2
pop ecx
mov dword [eax], 0xa831d26e
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x10032b44
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ecx
jge 0x10032b91
push 2
pop ebx
push dword [ebp - 0x30]
lea ecx, [ebp - 0xb80]
call fcn.10009009
mov dword [eax], 0x36717b38
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10032b70
xor ebx, ebx
xor eax, eax
inc ebx
cmp dword [ebp - 0x2e0], eax
jne 0x10032bbe
push eax
lea ecx, [ebp - 0x7c0]
call fcn.10009009
xor ecx, ecx
cmp dword [eax], 0x3281d21f
setge cl
cmp dword [ebp - 0x2e4], ecx
jne 0x10032bbe
xor eax, eax
mov esi, eax
jmp 0x10032bc0
mov esi, ebx
push ebx
lea ecx, [ebp - 0x168]
call fcn.10009009
neg esi
lea ecx, [ebp - 0x168]
push ebx
mov dword [eax], esi
call fcn.10009009
xor edi, edi
xor ebx, ebx
inc edi
cmp dword [eax], ebx
jne 0x10032c21
push edi
lea ecx, [ebp - 0x168]
call fcn.10009009
xor ecx, ecx
mov eax, dword [eax]
sub eax, 0x374fd522
cmp eax, 0x335900b0
setne cl
cmp ecx, dword [ebp - 0x2e4]
jne 0x10032c21
push edi
lea ecx, [ebp - 0x168]
call fcn.10009009
cmp dword [eax], ebx
jne 0x10032c21
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x10032c24
mov dword [ebp - 0x40], edi
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x168]
push edi
call fcn.10009009
push edi
lea ecx, [ebp - 0x168]
mov esi, eax
call fcn.10009009
mov esi, dword [esi]
lea ecx, [ebp - 0x168]
push edi
imul esi, dword [eax]
call fcn.10009009
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp ecx, esi
mov edi, eax
mov ecx, dword [ebp - 0x2e0]
setl dl
xor ebx, ebx
neg edx
cmp edx, dword [ebp - 0x40]
setg bl
xor eax, eax
cmp ebx, ecx
mov ecx, dword [edi]
setl al
sub ecx, eax
sub ecx, 0x6db4abf8
je 0x10032c8f
xor eax, eax
lea ecx, [ebp - 0x168]
push eax
call fcn.10009009
mov eax, dword [ebp - 0x2e0]
lea ecx, [ebp - 0x7c0]
xor eax, eax
push eax
call fcn.10009009
xor ebx, ebx
lea ecx, [ebp - 0xb80]
inc ebx
push ebx
call fcn.10009009
lea ecx, [ebp - 0xb80]
mov dword [eax], ebx
call fcn.10008fed
lea ecx, [ebp - 0x168]
call fcn.10008fed
push 2
pop eax
lea ecx, [ebp - 0x7c0]
mov byte [ebp - 4], al
call fcn.10008fed
mov edi, 0x6f25db2b
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xb8d8131d
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf7d59448
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x40], 0x376e
mov dword [ebp - 0x10], eax
push 2
pop eax
cmp dword [ebp - 0x10], eax
jge 0x10032d34
push eax
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x940]
call fcn.10009009
mov dword [eax], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032d15
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov esi, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
sub esi, edx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp esi, ecx
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x2c]
jle 0x10032d79
mov esi, eax
cmp dword [ebp - 0x2c], eax
je 0x10032d7b
mov esi, ebx
push eax
lea ecx, [ebp - 0x940]
call fcn.10009009
xor ecx, ecx
test esi, esi
setne cl
imul ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea ecx, [ebp - 0x940]
dec dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
push 2
pop eax
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xc1c]
push eax
call fcn.10008f68
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xb8d8131d
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf7d59448
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x40], 0x376e
mov dword [ebp - 0x10], eax
push 2
pop eax
cmp dword [ebp - 0x10], eax
jge 0x10032e12
push eax
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc1c]
call fcn.10009009
mov dword [eax], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032df3
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov esi, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
sub esi, edx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp esi, ecx
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x2c]
jle 0x10032e57
mov esi, eax
cmp dword [ebp - 0x2c], eax
je 0x10032e59
mov esi, ebx
push eax
lea ecx, [ebp - 0xc1c]
call fcn.10009009
xor ecx, ecx
test esi, esi
setne cl
imul ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea ecx, [ebp - 0xc1c]
dec dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
push 2
pop eax
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x958]
push eax
call fcn.10008f68
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], 0xb8d8131d
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf7d59448
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x40], 0x376e
mov dword [ebp - 0x10], eax
push 2
pop eax
cmp dword [ebp - 0x10], eax
jge 0x10032ef1
push eax
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x958]
call fcn.10009009
mov dword [eax], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032ed2
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov esi, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
sub esi, edx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp esi, ecx
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x2c]
jle 0x10032f36
mov esi, eax
cmp dword [ebp - 0x2c], eax
je 0x10032f38
mov esi, ebx
push eax
lea ecx, [ebp - 0x958]
call fcn.10009009
xor ecx, ecx
test esi, esi
setne cl
imul ecx, dword [ebp - 0x2c]
mov dword [eax], ecx
lea ecx, [ebp - 0x958]
dec dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0xfd8]
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffffb
push 3
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xbdbaf9eb
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf2b8319b
mov dword [ebp - 0x24], 0x3e2e1665
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xd8b26de0
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032ff1
push 3
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0xfd8]
call fcn.10009009
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032fd0
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], 0xffffffed
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x1003312c
jmp 0x10033006
xor eax, eax
mov dword [ebp - 0x44], 0x60b0
mov dword [ebp - 0x3c], 0x3e38693
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033031
push 2
pop ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6b4], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003301f
inc dword [ebp - 0x44]
jne 0x100330c0
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x3c]
setl cl
sub edx, ecx
mov dword [ebp - 0x6b4], edx
mov eax, dword [ebp - 0x1c]
add eax, edx
je 0x1003306e
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10033070
mov edx, ebx
jmp 0x10033072
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [ebp - 0x3c]
jle 0x100330c0
xor eax, eax
mov dword [ebp - 0x38], 0x41a4
mov dword [ebp - 0x10], eax
jmp 0x100330b5
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100330b2
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe3
jl 0x10033099
mov eax, dword [ebp - 0x38]
jmp 0x1003311f
movdqa xmm0, xmmword [0x10007d50]
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x1020]
push eax
lea ecx, [ebp - 0x12ac]
movdqu xmmword [ebp - 0x1020], xmm0
call fcn.1000901b
lea ecx, [ebp - 0x15c]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x11d0]
push dword [esi]
call fcn.10008fc7
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x11d0]
mov dword [ebp - 0x44], 0x8da91e53
dec dword [ebp - 0x44]
call fcn.10008fed
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jle 0x10033004
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd8]
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x28], 0xb9f9b31
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10033167
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe18], 0xdd8d1303
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1003314f
xor eax, eax
mov dword [ebp - 0x28], 0xe
cmp dword [ebp - 0x28], eax
jne 0x100331ba
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], 7
jmp 0x100331a7
cmp dword [ebp - 0xe18], eax
jne 0x100331ad
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100331a4
push 0x4db
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffed
jle 0x1003317f
cmp dword [ebp - 0x10], eax
jne 0x100331b7
dec dword [ebp - 0x28]
je 0x10033173
push 2
pop ecx
mov dword [ebp - 0x38], 0x9aed23b6
mov dword [ebp - 0x10], 0x45307222
mov dword [ebp - 0x2c], 0xe08cccdd
mov dword [ebp - 0x28], 0xf576c516
push ecx
mov dword [ebp - 0x3c], 0x516a205b
lea ecx, [ebp - 0x970]
mov dword [ebp - 0x54], eax
call fcn.10008f68
push 9
pop esi
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], eax
jmp 0x1003320c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x970]
call fcn.10009009
mov dword [eax], ebx
inc dword [ebp - 0x10]
push 2
pop edx
cmp dword [ebp - 0x10], edx
jl 0x100331f9
mov eax, dword [ebp - 0x38]
neg eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
add ecx, 0x64228890
add eax, ecx
mov ecx, 0xa7b7e80d
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, eax, 0xb0b4
cmp eax, 0x27a4129b
jne 0x10033267
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10033269
mov eax, ebx
mov ecx, 0xfff6
cmp ecx, eax
sbb eax, eax
neg eax
neg eax
cmp eax, 0xbd0a7084
jbe 0x1003336b
mov dword [ebp - 0x44], 0xeaf6
lea ecx, [ebp - 0xb2c]
mov dword [ebp - 0x58], 0xe11771b7
mov dword [ebp - 0x40], 0x895c4b79
push edx
call fcn.10008f68
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x38], 0x55833a
mov dword [ebp - 0x1c], eax
push 2
pop eax
cmp dword [ebp - 0x1c], eax
jge 0x100332df
push eax
pop ebx
push 6
pop edi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb2c]
call fcn.10009009
mov dword [eax], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100332bf
xor ebx, ebx
mov edi, 0x6f25db2b
inc ebx
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x44]
setge dl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x3c]
setne cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, 0xec1e183a
neg edx
sbb edx, edx
inc edx
add edx, dword [ebp - 0x58]
sub edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, esi
cmp eax, edx
setg cl
xor eax, eax
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], eax
jne 0x10033334
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c], ebx
jle 0x10033342
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0xb2c]
mov eax, dword [ebp - 0x3c]
push ebx
call fcn.10009009
mov ecx, dword [ebp - 0x58]
mov eax, dword [eax]
sub eax, ecx
lea ecx, [ebp - 0xb2c]
mov dword [ebp - 0x38], eax
call fcn.10008fed
jmp 0x10033390
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], edx
jge 0x10033390
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x970]
call fcn.10009009
push 2
mov dword [eax], ebx
inc dword [ebp - 0x2c]
pop eax
cmp dword [ebp - 0x2c], eax
jl 0x10033375
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x970]
call fcn.10008fed
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x20], 0xffffffed
jmp 0x1003345d
push 3
pop eax
push eax
lea ecx, [ebp - 0x63c]
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c], eax
push 3
pop eax
cmp dword [ebp - 0x1c], eax
jge 0x100333fd
push eax
pop ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x63c]
call fcn.10009009
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100333e1
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x63c]
mov esi, dword [ebp - 0x20]
neg esi
push ebx
sbb esi, esi
neg esi
call fcn.10009009
mov ecx, dword [ebp - 0x20]
sub esi, ecx
xor ecx, ecx
cmp esi, ebx
setle cl
sub ecx, 2
cmp ecx, dword [eax]
jne 0x1003342b
mov eax, dword [ebp - 0x20]
push ebx
lea ecx, [ebp - 0x63c]
call fcn.10009009
push ebx
lea ecx, [ebp - 0x63c]
imul esi, dword [eax], 0xde90829f
call fcn.10009009
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x63c]
mov dword [eax], esi
call fcn.10008fed
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff6
jl 0x100333bc
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10033477
cmp dword [ebp - 0x20], 0x7f59ec13
jge 0x10033479
mov eax, ebx
mov dword [ebp - 0x20], eax
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
push 2
setge cl
xor edx, edx
cmp eax, ecx
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp edx, eax
setle cl
xor eax, eax
imul ecx, dword [ebp - 0x10]
cmp ecx, 0xffffffff
lea ecx, [ebp - 0x9b8]
setge al
mov dword [ebp - 0x10], eax
pop eax
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xbd4]
push ebx
call fcn.10008f68
push 2
pop eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x380]
mov dword [ebp - 0x44], 0xfffffff8
push eax
call fcn.10008f68
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x38], 0x4ed09eb8
mov dword [ebp - 0x54], 0x1cc545e2
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jge 0x10033539
push 2
pop edi
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xbd4]
call fcn.10009009
mov dword [eax], edi
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x1003351a
xor eax, eax
mov edi, 0x6f25db2b
mov dword [ebp - 0x2c], eax
push 2
pop eax
cmp dword [ebp - 0x2c], eax
jge 0x10033565
push eax
pop ebx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x380]
call fcn.10009009
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x10033546
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x380]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
add esi, eax
push ebx
call fcn.10009009
xor ebx, ebx
mov dword [eax], esi
test esi, esi
jne 0x1003359a
push ebx
lea ecx, [ebp - 0x380]
call fcn.10009009
cmp dword [eax], ebx
je 0x100335a9
xor eax, eax
lea ecx, [ebp - 0x380]
inc eax
push eax
call fcn.10009009
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x380]
mov eax, dword [ebp - 0x44]
xor eax, eax
inc eax
push eax
call fcn.10009009
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0xbd4]
mov eax, dword [ebp - 0x44]
mov esi, dword [ebp - 0x1c]
push ebx
call fcn.10009009
push ebx
lea ecx, [ebp - 0x380]
mov dword [eax], esi
call fcn.10009009
mov ecx, dword [ebp - 0x38]
xor edx, edx
push 0xfffffffffffffffa
cmp dword [eax], ecx
mov eax, dword [ebp - 0x1c]
setg dl
add eax, esi
imul ecx, edx, 0x9ce
xor edx, edx
cmp eax, ecx
pop eax
setne dl
sub edx, eax
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x380]
call fcn.10008fed
lea ecx, [ebp - 0xbd4]
mov byte [ebp - 4], 0xc
call fcn.10008fed
mov dword [ebp - 0x24], edi
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x28], 0xd2f2
mov dword [ebp - 0x38], 0xe62699ff
mov dword [ebp - 0x38], 0x1f205951
push 2
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jge 0x10033672
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x108], 0x8bbca631
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003365a
xor eax, eax
push 3
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jge 0x10033695
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2a0], 0xf58aae07
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003367d
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
jmp 0x100336e7
mov dword [ebp - 0x10], 0x65ab3e90
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x100336e4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x108]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x108], ecx
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100336dd
push 0x11a5
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
dec dword [ebp - 0x10]
jns 0x100336ac
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1003369d
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x108]
mov dword [ebp - 0x104], ecx
mov eax, dword [ebp - 0x298]
sub eax, 0xa814
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
jle 0x10033718
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0x298]
xor edx, edx
mov eax, dword [ebp - 0x298]
mov eax, dword [ebp - 0x298]
mov eax, dword [ebp - 0x298]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x28]
je 0x1003374e
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
xor eax, eax
imul edx, dword [ebp - 0x298]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], eax
je 0x10033776
cmp dword [ebp - 0x2a0], eax
je 0x10033776
mov eax, ebx
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x104]
sub ecx, dword [ebp - 0x28]
neg ecx
push ebx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfbc0
lea ecx, [ebp - 0x7f0]
setl al
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], 0xb8d8131d
call fcn.10008f68
push 2
pop eax
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0xf
call fcn.10008f68
push 2
pop eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x988]
mov dword [ebp - 0x44], ebx
push eax
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 0x11
push 2
mov dword [ebp - 0x30], eax
pop ecx
cmp dword [ebp - 0x30], ecx
jge 0x100337fa
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x264], 0x8256
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x100337e2
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10033823
push dword [ebp - 0x30]
lea ecx, [ebp - 0x7f0]
call fcn.10009009
mov dword [eax], 0x4888999d
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10033802
push 2
xor eax, eax
pop ecx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ecx
jge 0x1003384c
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1b0]
call fcn.10009009
push 2
pop ecx
mov dword [eax], 0xa831d26e
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x1003382b
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ecx
jge 0x10033878
push 2
pop ebx
push dword [ebp - 0x30]
lea ecx, [ebp - 0x988]
call fcn.10009009
mov dword [eax], 0x36717b38
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10033857
xor ebx, ebx
xor eax, eax
inc ebx
cmp dword [ebp - 0x260], eax
jne 0x100338a5
push eax
lea ecx, [ebp - 0x7f0]
call fcn.10009009
xor ecx, ecx
cmp dword [eax], 0x3281d21f
setge cl
cmp dword [ebp - 0x264], ecx
jne 0x100338a5
xor eax, eax
mov esi, eax
jmp 0x100338a7
mov esi, ebx
push ebx
lea ecx, [ebp - 0x1b0]
call fcn.10009009
neg esi
lea ecx, [ebp - 0x1b0]
push ebx
mov dword [eax], esi
call fcn.10009009
xor edi, edi
xor ebx, ebx
inc edi
cmp dword [eax], ebx
jne 0x10033905
push edi
lea ecx, [ebp - 0x1b0]
call fcn.10009009
xor ecx, ecx
mov eax, dword [eax]
sub eax, 0x374fd522
cmp eax, 0x335900b0
setne cl
cmp ecx, dword [ebp - 0x264]
jne 0x10033905
push edi
lea ecx, [ebp - 0x1b0]
call fcn.10009009
cmp dword [eax], ebx
jne 0x10033905
xor eax, eax
jmp 0x10033907
mov ebx, edi
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x1b0]
push edi
call fcn.10009009
push edi
lea ecx, [ebp - 0x1b0]
mov esi, eax
call fcn.10009009
lea ecx, [ebp - 0x1b0]
mov edi, dword [eax]
xor eax, eax
imul edi, dword [esi]
inc eax
push eax
call fcn.10009009
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp ecx, edi
mov esi, eax
mov ecx, dword [ebp - 0x260]
setl dl
xor eax, eax
neg edx
cmp edx, ebx
setg al
xor edx, edx
cmp eax, ecx
mov eax, dword [esi]
setl dl
sub eax, edx
sub eax, 0x6db4abf8
je 0x10033973
xor eax, eax
lea ecx, [ebp - 0x1b0]
push eax
call fcn.10009009
mov eax, dword [ebp - 0x260]
lea ecx, [ebp - 0x7f0]
xor eax, eax
push eax
call fcn.10009009
xor ebx, ebx
lea ecx, [ebp - 0x988]
inc ebx
push ebx
call fcn.10009009
lea ecx, [ebp - 0x988]
mov dword [eax], ebx
call fcn.10008fed
lea ecx, [ebp - 0x1b0]
call fcn.10008fed
lea ecx, [ebp - 0x7f0]
mov byte [ebp - 4], 0xc
call fcn.10008fed
push 3
pop eax
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x204]
push eax
call fcn.10008f68
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xb44]
mov dword [ebp - 0x20], 4
push ebx
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10033a1d
push 3
pop ebx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x204]
call fcn.10009009
mov dword [eax], 0xb9b55bb2
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x100339fc
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jge 0x10033a43
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xb44]
call fcn.10009009
mov dword [eax], 0xdcd16652
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x10033a25
xor eax, eax
push 2
mov dword [ebp - 0x20], eax
pop edi
cmp dword [ebp - 0x20], edi
jg 0x10033b40
mov edi, 0x885ea6ed
jmp 0x10033a5b
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10033a71
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1354], 0x51ae9a07
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033a60
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
call fcn.10009009
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
mov esi, eax
call fcn.10009009
mov ecx, dword [esi]
sub ecx, dword [eax]
je 0x10033af8
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
call fcn.10009009
xor eax, eax
lea ecx, [ebp - 0xb44]
push eax
call fcn.10009009
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
mov esi, eax
call fcn.10009009
push dword [ebp - 0x20]
mov ecx, dword [eax]
mov dword [esi], ecx
lea ecx, [ebp - 0x204]
call fcn.10009009
cmp edi, dword [eax]
sbb eax, eax
neg eax
sub eax, 0x8ace
neg eax
sbb eax, eax
inc eax
cmp dword [esi], eax
je 0x10033af4
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10033afa
mov esi, ebx
jmp 0x10033afc
xor eax, eax
mov esi, eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x204]
call fcn.10009009
push dword [ebp - 0x20]
xor ebx, ebx
lea ecx, [ebp - 0x204]
cmp esi, dword [eax]
setge bl
call fcn.10009009
xor ecx, ecx
push 2
cmp ebx, dword [eax]
pop eax
setne cl
mov dword [ebp - 0x1350], ecx
inc dword [ebp - 0x20]
push 1
pop ebx
cmp dword [ebp - 0x20], eax
jle 0x10033a59
push eax
pop edi
lea ecx, [ebp - 0xb44]
call fcn.10008fed
lea ecx, [ebp - 0x204]
mov byte [ebp - 4], 0xc
call fcn.10008fed
mov dword [ebp - 0x24], 0xf7d59448
xor eax, eax
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x10], eax
jmp 0x10033b77
cmp dword [ebp - 0x10], eax
jne 0x10033b7d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1c
jg 0x10033b6f
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10033b8c
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x398]
push ebx
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033bcb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.10009009
mov dword [eax], 0x91a049fe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033bad
xor eax, eax
push eax
lea ecx, [ebp - 0x398]
call fcn.10009009
xor ebx, ebx
mov dword [eax], ebx
jmp 0x10033c21
push ebx
lea ecx, [ebp - 0x398]
mov dword [ebp - 0x10], 0xfffffffb
call fcn.10009009
cmp dword [eax], ebx
jne 0x10033c32
mov dword [ebp - 0x10], 0xfffffff1
jmp 0x10033c0d
mov dword [ebp - 0x38], 0x8f3c34ee
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff8
jl 0x10033bfd
push ebx
lea ecx, [ebp - 0x398]
call fcn.10009009
inc dword [eax]
push ebx
lea ecx, [ebp - 0x398]
call fcn.10009009
cmp dword [eax], 0xe
jge 0x10033bdd
lea ecx, [ebp - 0x398]
mov byte [ebp - 4], 0xc
call fcn.10008fed
mov dword [ebp - 0x30], 0x376e
xor ebx, ebx
mov dword [ebp - 0x10], 0xdb22
inc ebx
mov dword [ebp - 0x20], ebx
xor eax, eax
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x40], ebx
push 7
pop esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x40], 0x8a597fb6
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x10], eax
jne 0x10033c9e
mov eax, dword [ebp - 0x10]
xor edx, edx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setge dl
inc edx
jne 0x10033c9e
xor eax, eax
jmp 0x10033ca0
mov eax, ebx
cmp eax, dword [ebp - 0x10]
je 0x10033e4b
mov dword [ebp - 0x38], 0xffffffff
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10033cd3
push eax
push 0x208b
push 0x2050
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10033d02
push 2
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9b8]
call fcn.10009009
mov dword [eax], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033cde
xor ebx, ebx
xor eax, eax
push 2
inc ebx
pop edi
mov ecx, 0xffff
xor edx, edx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x24], 0xe17ca002
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x578], eax
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x40]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov esi, dword [ebp - 0x14]
setge dl
xor ecx, ecx
sub esi, edx
mov edx, dword [ebp - 0x14]
imul edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setne cl
xor edx, edx
cmp esi, ecx
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x14]
jle 0x10033d8f
mov esi, eax
cmp dword [ebp - 0x14], eax
je 0x10033d91
mov esi, ebx
push eax
lea ecx, [ebp - 0x9b8]
call fcn.10009009
xor ecx, ecx
test esi, esi
push 3
setne cl
imul ecx, dword [ebp - 0x14]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0xe30]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffffb
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xbdbaf9eb
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf2b8319b
mov dword [ebp - 0x24], 0x3e2e1665
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xd8b26de0
push eax
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10033e35
push 3
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe30]
call fcn.10009009
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033e14
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], 0xffffffed
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x100341b7
jmp 0x10034097
mov dword [ebp - 0x10], 0x974edf0e
xor eax, eax
mov dword [ebp - 0x40], 0xaab56411
mov dword [ebp - 0x54], 0xae857b1a
mov dword [ebp - 0x4c], 0x162d50c8
mov dword [ebp - 0x24], 0xc0ec0dce
mov dword [ebp - 0x3c], 0x9c309ab8
mov dword [ebp - 0x38], 0x943ec3e1
mov dword [ebp - 0x58], 0xfffffff7
mov dword [ebp - 0x44], 0x3579
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 9
je 0x10033f86
mov dword [ebp - 0x38], 0x5db2
push 3
mov dword [ebp - 0x24], 0x215169ff
mov dword [ebp - 0x1c], eax
pop ecx
jmp 0x10033ec7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9a0], 0xfffffffd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10033eb6
mov eax, dword [ebp - 0x44]
dec dword [ebp - 0x44]
test eax, eax
je 0x10033ee4
xor eax, eax
cmp dword [ebp - 0x99c], eax
je 0x10033ee6
mov edx, ebx
jmp 0x10033ee8
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x99c]
xor ecx, ecx
cmp eax, 0x1563
setg cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x40]
jge 0x10033f13
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x10033f15
mov ecx, ebx
jmp 0x10033f17
xor eax, eax
mov ecx, eax
xor eax, eax
cmp edx, ecx
setne al
cmp dword [ebp - 0x38], eax
jg 0x10033f2e
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x10033f30
mov edx, ebx
jmp 0x10033f32
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
setne cl
cmp dword [ebp - 0x10], ecx
jg 0x10033f48
xor eax, eax
cmp dword [ebp - 0x58], eax
je 0x10033f4a
mov eax, ebx
add eax, 0xc891cf0c
cmp eax, ebx
mov eax, dword [ebp - 0x50]
push 0
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
sub ecx, dword [ebp - 0x998]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 9
jne 0x10033ea0
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], 0x2e
jg 0x10033cd1
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0xc4c]
mov dword [ebp - 0x40], 0x181ca8fd
push ebx
call fcn.10008f68
xor eax, eax
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x1c], eax
jmp 0x10033fcb
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc4c]
call fcn.10009009
mov dword [eax], 0xa53cc61b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10033fb4
mov dword [ebp - 0x20], 0x11
jmp 0x10034071
mov dword [ebp - 0x44], 0x3428
xor ecx, ecx
mov dword [ebp - 0x54], 0xfd024ca9
mov dword [ebp - 0x58], ebx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
cmp eax, 0xc9717
setg cl
imul eax, ecx, 0x25c9
cmp dword [ebp - 0x40], eax
jl 0x10034022
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10034024
mov esi, ebx
jmp 0x10034026
xor eax, eax
mov esi, eax
mov dword [ebp - 0x40], 0xcf28
lea ecx, [ebp - 0xc4c]
push eax
call fcn.10009009
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x2c]
cmp esi, eax
mov eax, dword [ebp - 0x48]
sete cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, 7
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x40]
mov dword [ebp - 0x40], edx
xor edx, edx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setl dl
mov dword [ebp - 0x54], edx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffff
je 0x10033fdc
lea ecx, [ebp - 0xc4c]
mov byte [ebp - 4], 0xc
call fcn.10008fed
inc dword [ebp - 0x10]
push 0
pop eax
jmp 0x10033f89
xor eax, eax
mov dword [ebp - 0x44], 0x60b0
mov dword [ebp - 0x3c], 0x3e38693
mov dword [ebp - 0x10], eax
jmp 0x100340b7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x620], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100340aa
inc dword [ebp - 0x44]
jne 0x1003414b
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x3c]
setl cl
sub edx, ecx
mov dword [ebp - 0x620], edx
mov eax, dword [ebp - 0x1c]
add eax, edx
je 0x100340f9
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x100340fb
mov edx, ebx
jmp 0x100340fd
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [ebp - 0x3c]
jle 0x1003414b
xor eax, eax
mov dword [ebp - 0x48], 0x41a4
mov dword [ebp - 0x10], eax
jmp 0x10034140
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003413d
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe3
jl 0x10034124
mov eax, dword [ebp - 0x48]
jmp 0x100341aa
movdqa xmm0, xmmword [0x10007d50]
lea eax, [ebp - 0x10d0]
push eax
lea eax, [ebp - 0x10e0]
push eax
lea ecx, [ebp - 0x12bc]
movdqu xmmword [ebp - 0x10e0], xmm0
call fcn.1000901b
lea ecx, [ebp - 0x13b]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1290]
push dword [esi]
call fcn.10008fc7
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x1290]
mov dword [ebp - 0x44], 0x8da91e53
dec dword [ebp - 0x44]
call fcn.10008fed
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jle 0x10034095
lea ecx, [ebp - 0xe30]
call fcn.10008fed
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x9b8]
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xb5c]
push 2
mov dword [ebp - 0x48], eax
pop eax
mov dword [ebp - 0x10], 0x5561
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0x17
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10034225
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe60], 0x7f3e76e5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003420d
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1003424f
push 2
pop ebx
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb5c]
call fcn.10009009
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10034230
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0xd4a1cf04
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x1003426d
mov eax, dword [ebp - 0x1c]
push ebx
lea ecx, [ebp - 0xb5c]
call fcn.10009009
mov ecx, dword [ebp - 0xe60]
mov ebx, dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov edi, dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0x10
cmp dword [ebp - 0x1c], 0x19
jg 0x100342f5
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100342bc
push 0x1844
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x100342e6
dec dword [ebp - 0x40]
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100342e3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
jne 0x100342c5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x19
jle 0x1003429c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb5c]
call fcn.10008fed
xor esi, esi
lea ecx, [ebp - 0xf90]
xor eax, eax
inc esi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffffb
push 3
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xbdbaf9eb
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf2b8319b
mov dword [ebp - 0x24], 0x3e2e1665
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xd8b26de0
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10034392
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf90]
call fcn.10009009
push 3
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10034371
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffed
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x100344d0
jmp 0x100343a7
xor eax, eax
mov dword [ebp - 0x44], 0x60b0
mov dword [ebp - 0x3c], 0x3e38693
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100343d2
push 2
pop ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x624], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100343c0
inc dword [ebp - 0x44]
jne 0x10034461
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x3c]
setl cl
sub edx, ecx
mov dword [ebp - 0x624], edx
mov eax, dword [ebp - 0x1c]
add eax, edx
je 0x1003440f
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10034411
mov edx, esi
jmp 0x10034413
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [ebp - 0x3c]
jle 0x10034461
xor eax, eax
mov dword [ebp - 0x48], 0x41a4
mov dword [ebp - 0x10], eax
jmp 0x10034456
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034453
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe3
jl 0x1003443a
mov eax, dword [ebp - 0x48]
jmp 0x100344c3
movdqa xmm0, xmmword [0x10007d50]
lea eax, [ebp - 0x1050]
push eax
lea eax, [ebp - 0x1060]
push eax
lea ecx, [ebp - 0x12cc]
movdqu xmmword [ebp - 0x1060], xmm0
call fcn.1000901b
lea ecx, [ebp - 0x154]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x11e8]
push dword [esi]
call fcn.10008fc7
xor esi, esi
lea ecx, [ebp - 0x11e8]
inc esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], 0x8da91e53
dec dword [ebp - 0x44]
call fcn.10008fed
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jle 0x100343a5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf90]
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10034504
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 0x8c6a53d0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100344ef
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x10034522
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x7c], 0
jne 0x10034520
inc dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x20], eax
jle 0x1003450c
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x1003457d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10034578
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x7c], ecx
jne 0x10034568
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x7c], ecx
jne 0x10034561
cmp dword [ebp - 0x20], 0x9689
je 0x10034555
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x1c]
jns 0x10034537
xor eax, eax
dec dword [ebp - 0x20]
jns 0x1003452a
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xe44]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffffb
push 3
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xbdbaf9eb
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xf2b8319b
mov dword [ebp - 0x24], 0x3e2e1665
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], 0xd8b26de0
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10034606
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe44]
call fcn.10009009
push 3
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x100345e5
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffed
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x10034744
jmp 0x1003461b
xor eax, eax
mov dword [ebp - 0x44], 0x60b0
mov dword [ebp - 0x3c], 0x3e38693
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10034646
push 2
pop ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x594], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034634
inc dword [ebp - 0x44]
jne 0x100346d5
mov ecx, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [ebp - 0x3c]
setl cl
sub edx, ecx
mov dword [ebp - 0x594], edx
mov eax, dword [ebp - 0x1c]
add eax, edx
je 0x10034683
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10034685
mov edx, esi
jmp 0x10034687
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [ebp - 0x3c]
jle 0x100346d5
xor eax, eax
mov dword [ebp - 0x48], 0x41a4
mov dword [ebp - 0x10], eax
jmp 0x100346ca
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100346c7
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe3
jl 0x100346ae
mov eax, dword [ebp - 0x48]
jmp 0x10034737
movdqa xmm0, xmmword [0x10007d50]
lea eax, [ebp - 0x1150]
push eax
lea eax, [ebp - 0x1160]
push eax
lea ecx, [ebp - 0x12dc]
movdqu xmmword [ebp - 0x1160], xmm0
call fcn.1000901b
lea ecx, [ebp - 0xf5]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1248]
push dword [esi]
call fcn.10008fc7
xor esi, esi
lea ecx, [ebp - 0x1248]
inc esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], 0x8da91e53
dec dword [ebp - 0x44]
call fcn.10008fed
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jle 0x10034619
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe44]
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x9d0]
push 2
mov dword [ebp - 0x48], eax
pop eax
mov dword [ebp - 0x10], 0x5561
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0x1a
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x100347a4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe74], 0x7f3e76e5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003478c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x100347cb
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9d0]
call fcn.10009009
push 2
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], eax
jl 0x100347ac
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0xd4a1cf04
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x100347e9
mov eax, dword [ebp - 0x1c]
push esi
lea ecx, [ebp - 0x9d0]
call fcn.10009009
mov ecx, dword [ebp - 0xe74]
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0x10
cmp dword [ebp - 0x1c], 0x19
jg 0x10034865
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003482c
push 0x1844
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x10034856
dec dword [ebp - 0x40]
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034853
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
jne 0x10034835
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x19
jle 0x1003480c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d0]
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10034899
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x80], 0x8c6a53d0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034884
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x100348b7
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x80], 0
jne 0x100348b5
inc dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x20], eax
jle 0x100348a1
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x10034912
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x1003490d
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x80], ecx
jne 0x100348fd
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x80], ecx
jne 0x100348f6
cmp dword [ebp - 0x20], 0x9689
je 0x100348ea
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x1c]
jns 0x100348cc
xor eax, eax
dec dword [ebp - 0x20]
jns 0x100348bf
mov dword [ebp - 0x24], 0xe56f
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x4c], 0xb999fb02
mov dword [ebp - 0x24], 0xde05dae5
push 5
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x50], 0xe8e1b881
mov dword [ebp - 0x3c], 0xd9bacc5d
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], 0x5ee28fde
mov dword [ebp - 0x48], 0x8fa8f90a
mov dword [ebp - 0x24], 0x949f4ffc
mov dword [ebp - 0x40], 0x3e93d0b5
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x54], 8
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], 0x1720348f
mov dword [ebp - 0x58], 0x307a329e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x44], ecx
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x100349bf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x12ec], 0x85f88e10
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100349a7
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x100349e1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x136c], 0x9192
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100349c8
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x100349f7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5c4], 0x9b45c761
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100349e6
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x38]
jne 0x10034a10
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x40], eax
jne 0x10034a12
mov edx, esi
dec dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
push 2
setge cl
imul ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1368], ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c4]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
xor edx, edx
neg eax
sub eax, dword [ebp - 0x50]
imul ecx, eax, 6
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
lea ecx, [ebp - 0xbec]
setge dl
xor eax, eax
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], eax
pop eax
mov dword [ebp - 0x10], 0x5561
push eax
call fcn.10008f68
xor eax, eax
mov dword [ebp - 4], 0x1b
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10034aa5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe88], 0x7f3e76e5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10034a8d
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10034acc
push dword [ebp - 0x14]
lea ecx, [ebp - 0xbec]
call fcn.10009009
push 2
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], eax
jl 0x10034aad
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0xd4a1cf04
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jge 0x10034aea
mov eax, dword [ebp - 0x1c]
push esi
lea ecx, [ebp - 0xbec]
call fcn.10009009
mov ecx, dword [ebp - 0xe88]
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0x10
cmp dword [ebp - 0x1c], 0x19
jg 0x10034b66
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034b2d
push 0x1844
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x10034b57
dec dword [ebp - 0x40]
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034b54
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
jne 0x10034b36
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x19
jle 0x10034b0d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbec]
call fcn.10008fed
push 4
lea ecx, [ebp - 0x808]
call fcn.10008f68
mov dword [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x44], 0x48bbe26b
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10034bc1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x808]
call fcn.10009009
mov dword [eax], 0xfffffffc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034ba2
xor eax, eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x10034ce6
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x130c]
lea eax, [ebp - 0x1070]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1080]
push eax
movdqu xmmword [ebp - 0x1080], xmm0
call fcn.1000901b
lea ecx, [ebp - 0x15b]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x9e8]
push dword [esi]
call fcn.10008fc7
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
xor esi, esi
mov dword [ebp - 0x48], 0xffffffff
inc esi
mov dword [ebp - 0x10], eax
jmp 0x10034c46
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x118], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034c35
mov dword [ebp - 0x28], 0x14eb4c8f
lea ecx, [ebp - 0x808]
mov eax, dword [ebp - 0x28]
push esi
call fcn.10009009
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x9e8]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
push esi
call fcn.10009009
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x808]
call fcn.10009009
push esi
lea ecx, [ebp - 0x9e8]
mov dword [eax], esi
call fcn.10009009
mov dword [eax], esi
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 0x118]
sub ecx, 0x3a60
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0x118]
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x9e8]
mov byte [ebp - 4], 0x1c
call fcn.10008fed
dec dword [ebp - 0x1c]
jns 0x10034bd1
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x808]
mov dword [ebp - 0x44], eax
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
push 4
lea ecx, [ebp - 0x1000]
call fcn.10008f68
mov dword [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10034d40
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1000]
call fcn.10009009
mov dword [eax], 0xbbca
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034d21
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034d5e
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
xor eax, eax
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], eax
jl 0x10034dab
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034da6
push eax
push 0x569
push 0x70d
push 0x1685
push 0x2408
push 0x15c4
push 0x20a1
push 0x747
push 0x6ff
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
xor eax, eax
dec dword [ebp - 0x28]
jns 0x10034d6a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1000]
call fcn.10008fed
movdqa xmm0, xmmword [0x10007d30]
lea eax, [ebp - 0x10f0]
push eax
lea eax, [ebp - 0x1100]
mov dword [ebp - 0x2c], esi
push eax
lea ecx, [ebp - 0x131c]
movdqu xmmword [ebp - 0x1100], xmm0
call fcn.1000901b
lea ecx, [ebp - 0x13f]
mov esi, eax
call fcn.10009018
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1200]
push dword [esi]
call fcn.10008fc7
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x44], 0x1de6fc60
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10034e33
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x470], 0xfffffff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10034e1b
xor eax, eax
xor esi, esi
mov dword [ebp - 0x468], eax
inc esi
cmp dword [ebp - 0x468], 0xa
je 0x10034e76
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], eax
jl 0x10034e6e
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034e66
push 0x20b3
call dword [sym.imp.USER32.dll_GetSysColor]
xor eax, eax
dec dword [ebp - 0x28]
jns 0x10034e50
push 3
pop ecx
inc dword [ebp - 0x468]
jmp 0x10034e3c
mov dword [ebp - 0x10], 0x19
cmp dword [ebp - 0x10], 0x13
jle 0x10034edf
push 0xfffffffffffffffd
pop esi
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], 0xf1860ec0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xffffffff
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x580], eax
mov dword [ebp - 0x57c], eax
mov dword [ebp - 0x578], eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
push 0
sbb eax, eax
neg eax
mov dword [ebp - 0x468], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x13
pop eax
jg 0x10034e86
xor esi, esi
inc esi
lea ecx, [ebp - 0x1200]
call fcn.10008fed
xor eax, eax
lea ecx, [ebp - 0xb74]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1c], eax
push 2
pop eax
mov dword [ebp - 0x10], 0x565e08cc
mov dword [ebp - 0x44], 0xfffffff6
push eax
call fcn.10008f68
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10034f37
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb74]
call fcn.10009009
or dword [eax], 0xffffffff
inc dword [ebp - 0x1c]
push 2
pop eax
cmp dword [ebp - 0x1c], eax
jl 0x10034f23
mov dword [ebp - 0x1c], 5
xor edx, edx
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
cmp edx, 0xffffffff
jg 0x10034f64
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x10], eax
je 0x10034f66
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xb74]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10009009
mov ecx, dword [eax]
lea edx, [ecx - 0x68f62c4d]
inc ecx
mov dword [eax], ecx
cmp edx, esi
je 0x10034f9c
mov edx, esi
jmp 0x10034fa0
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, dword [ebp - 0x1c]
jg 0x10034fb8
cmp dword [ebp - 0x1c], eax
je 0x10034fb8
mov eax, esi
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xb74]
or dword [ebp - 4], 0xffffffff
call fcn.10008fed
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x2c], 0x9ef4
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x1c], 5
push 2
mov dword [ebp - 0x28], 0x7e294b58
mov dword [ebp - 0x14], eax
pop ecx
jmp 0x1003500b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xe9c], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10034ffa
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x44]
imul edx, dword [ebp - 0x10]
push 0
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe9c]
cmp edx, eax
mov eax, 0xf7e29192
setg cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
imul ecx, eax, 0x5f99
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
neg edx
pop edx
sets dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x1c], 0xffffffef
cmp dword [ebp - 0x1c], 0x17
jle 0x100350df
push 0xfffffffffffffffa
pop esi
mov dword [ebp - 0x40], 0xa19ae86a
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, esi
mov eax, dword [ebp - 0x40]
setge dl
sub edx, 0x955d4826
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x40]
setl cl
xor edx, edx
cmp ecx, 0x4db503b5
setne dl
xor ecx, ecx
cmp eax, edx
setle cl
imul ecx, dword [ebp - 0x28]
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x17
jg 0x1003508b
xor esi, esi
inc esi
mov dword [ebp - 0x24], 0xfffffffc
xor eax, eax
mov dword [ebp - 0x28], 0x48afa2fa
mov dword [ebp - 0x24], 0xb6f85a06
mov dword [ebp - 0x24], 0xa88acc16
mov dword [ebp - 0x24], 0xd2e84cbf
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x289ed5b6
mov dword [ebp - 0x24], 0xad14ca72
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10035138
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x158], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10035120
cmp dword [ebp - 0x158], eax
je 0x100352aa