Function at 0x10035963
Capabilities:
Check http status code
Clear file content
Compare security identifiers
Get common file path
Get geographical location
Get keyboard layout
Get memory capacity
Parse pe header
Query environment variable
Terminate process

Disassembly:
mov eax, 0x1008ba16
call fcn.1008a128
mov eax, 0x164c
call fcn.100861f0
push ebx
push esi
push edi
mov dword [ebp - 0x28], 0x9ad59e57
or esi, 0xffffffff
push 3
mov dword [ebp - 0x14], esi
xor eax, eax
mov dword [ebp - 0x5c], ecx
pop ecx
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x10], eax
push 1
mov byte [ebp - 0x71], dl
pop edi
cmp dword [ebp - 0x10], ecx
jge 0x100359b8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb00], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100359a4
xor eax, eax
push 2
mov dword [ebp - 0x28], eax
pop ebx
cmp dword [ebp - 0x28], ebx
jg 0x10035a35
mov esi, 0xffff
mov dword [ebp - 0x34], 6
xor ecx, ecx
mov dword [ebp - 0x2c], edi
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xb00]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0xb00]
mov eax, dword [ebp - 0x34]
dec eax
cmp edx, eax
setge cl
cmp ecx, esi
sbb ecx, ecx
xor eax, eax
add ecx, 0x44421409
cmp ecx, 4
setge al
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x100359c8
push 3
xor eax, eax
or esi, 0xffffffff
pop ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10035a55
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb00], 0x6d0811fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10035a3d
xor eax, eax
mov dword [ebp - 0x28], 0x9ad59e57
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10035a82
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa94], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10035a6e
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jg 0x10035afc
mov esi, 0xffff
mov dword [ebp - 0x34], 6
xor ecx, ecx
mov dword [ebp - 0x2c], edi
inc dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0xa94]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0xa94]
mov eax, dword [ebp - 0x34]
dec eax
cmp edx, eax
setge cl
cmp ecx, esi
sbb ecx, ecx
xor eax, eax
add ecx, 0x44421409
cmp ecx, 4
setge al
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x10035a8f
push 3
xor eax, eax
or esi, 0xffffffff
pop ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10035b1c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa94], 0x6d0811fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10035b04
xor eax, eax
push 0xfffffffffffffff9
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x34], 0x87d6364d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10035b50
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38c], 0x85f70ad6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10035b38
xor eax, eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10035b6d
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x38c], 0
jne 0x10035b6d
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
jns 0x10035b58
imul eax, dword [ebp - 0x18], 0x7e78
test eax, eax
je 0x10035bc9
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x40], eax
jg 0x10035b97
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10035b99
mov eax, edi
jmp 0x10035b99
xor eax, eax
mov edx, dword [ebp - 0x38c]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x18]
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x388]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x384]
setg dl
sub edx, eax
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x34], edi
jl 0x10035be0
xor eax, eax
cmp dword [ebp - 0x34], eax
jne 0x10035be0
cmp dword [ebp - 0x18], eax
je 0x10035be2
mov eax, edi
mov dword [ebp - 0x384], eax
lea ecx, [ebp - 0x4a4]
push 9
mov dword [ebp - 0x24], ebx
pop eax
mov dword [ebp - 0x14], 0x465ee6d5
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x40], 0x1d5f49dc
mov dword [ebp - 0x40], eax
push edi
call fcn.10018b61
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x34], 0x1f7977f4
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10035c3f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x968], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035c27
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10035c5b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4a4]
call fcn.10018bff
mov dword [eax], 0xe7c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10035c44
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10035c6c
mov eax, edi
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
sub edx, 0xb8b9
jne 0x10035c8f
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10035c91
mov eax, edi
mov dword [ebp - 0x10], eax
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
cmp dword [ebp - 0x24], edx
jl 0x10035cad
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10035caf
mov eax, edi
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x14]
push 9
pop ecx
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, edi
setle cl
mov dword [ebp - 0x960], ecx
lea ecx, [ebp - 0x4a4]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10018bff
xor eax, eax
lea ecx, [ebp - 0x4a4]
push eax
call fcn.10018bff
xor eax, eax
lea ecx, [ebp - 0x4a4]
push eax
call fcn.10018bff
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x24]
setge dl
sub eax, edx
je 0x10035d20
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x10035d22
mov esi, edi
jmp 0x10035d24
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x4a4]
call fcn.10018bff
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x4a4]
mov esi, dword [ebp - 0x960]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10018bff
mov edx, dword [ebp - 0x960]
sub edx, dword [ebp - 0x960]
neg edx
push 0xfffffffffffffffd
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
pop edx
setle cl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0x4a4]
setl al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
imul eax, esi
or esi, 0xffffffff
imul eax, eax, 0x3725
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], esi
call fcn.10018be3
xor eax, eax
lea ecx, [ebp - 0x34c]
mov dword [ebp - 0x414], eax
mov dword [ebp - 0x410], eax
mov dword [ebp - 0x40c], eax
mov dword [ebp - 0x408], eax
push 4
call fcn.10018b61
mov dword [ebp - 4], edi
xor eax, eax
mov dword [ebp - 0x40], 0x19d81479
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x10], eax
jmp 0x10035dee
push dword [ebp - 0x10]
call fcn.10018bff
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
lea ecx, [ebp - 0x34c]
jl 0x10035de1
inc dword [ebp - 0x40]
push ebx
call fcn.10018bff
mov ecx, dword [ebp - 0x40c]
xor ebx, ebx
cmp ecx, 0x6ec7
lea ecx, [ebp - 0x34c]
push 2
setle bl
sub ebx, 0x2f20
imul ebx, dword [eax]
pop eax
push eax
call fcn.10018bff
xor ecx, ecx
push 2
cmp ebx, dword [eax]
mov eax, 0xfffb
setne cl
cmp eax, ecx
lea ecx, [ebp - 0x34c]
pop eax
sbb esi, esi
push eax
inc esi
call fcn.10018bff
xor ecx, ecx
cmp esi, dword [eax]
setg cl
imul eax, ecx, 0x2e41
cmp eax, 0xfffffffa
je 0x10035e6c
xor eax, eax
cmp dword [ebp - 0x40c], eax
je 0x10035e6e
mov esi, edi
jmp 0x10035e70
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x34c]
call fcn.10018bff
mov ecx, dword [ebp - 0x40c]
xor edx, edx
cmp ecx, 0x7fd1
mov ecx, dword [ebp - 0x408]
push 2
setl dl
add ecx, esi
add ecx, edx
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x34c]
pop esi
push esi
setl bl
call fcn.10018bff
push esi
lea ecx, [ebp - 0x34c]
mov dword [eax], ebx
call fcn.10018bff
mov esi, dword [ebp - 0x40c]
lea ecx, [ebp - 0x34c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10018bff
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x40c]
setg dl
xor ebx, ebx
sub edx, 8
cmp edx, eax
setge bl
xor ecx, ecx
cmp esi, 0x6982
setl cl
xor eax, eax
cmp ecx, ebx
lea ecx, [ebp - 0x34c]
setge al
or esi, 0xffffffff
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40c], eax
mov dword [ebp - 4], esi
call fcn.10018be3
mov dword [ebp - 0x28], 0x9ad59e57
lea ecx, [ebp - 0x5b4]
mov dword [ebp - 0x10], 0x7013
xor ebx, ebx
mov dword [ebp - 0x14], 0x94d03572
inc ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x2c], 0x244c3f4
mov dword [ebp - 0x54], esi
push ebx
call fcn.10018b61
push 2
pop esi
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x24], 0x6ee3e4f6
mov dword [ebp - 0x40], 0x3db47dc4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10035f8b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5b4]
call fcn.10018bff
mov dword [eax], 0x184e5a94
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10035f6d
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10035f9d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa48], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10035f90
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
inc dword [ebp - 0x24]
cmp eax, ecx
jge 0x10035fb6
mov edx, ebx
jmp 0x10035fba
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
neg eax
push 3
sbb eax, eax
neg eax
pop ecx
cmp ecx, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, ebx
sbb eax, eax
neg eax
cmp edx, eax
jle 0x10035fee
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
xor edx, edx
sub eax, dword [ebp - 0x44]
cmp eax, 0x33df
mov eax, dword [ebp - 0x10]
setle dl
sub edx, 0x881f6c98
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, 0xffff
setne cl
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0xa48]
jg 0x10036032
mov eax, dword [ebp - 0x44]
xor eax, eax
lea ecx, [ebp - 0x5b4]
push eax
call fcn.10018bff
mov ecx, dword [ebp - 0x10]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
sub ecx, dword [eax]
je 0x10036096
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10036074
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5b4]
call fcn.10018bff
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10036057
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003619e
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x1003619e
push esi
lea ecx, [ebp - 0x980]
call fcn.10018b61
push 3
pop eax
mov byte [ebp - 4], al
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0x1b0f05ba
mov dword [ebp - 0x2c], 0x2d8b6467
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100360ef
push 9
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x980]
call fcn.10018bff
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100360d2
xor ebx, ebx
xor eax, eax
inc ebx
push eax
lea ecx, [ebp - 0x5b4]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1003613b
push ebx
lea ecx, [ebp - 0x980]
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x54], ebx
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xfffa
cmp eax, dword [ebp - 0xa48]
jge 0x1003613b
xor eax, eax
mov ecx, eax
jmp 0x1003613d
mov ecx, ebx
xor eax, eax
cmp ecx, 0xabb25a59
push ebx
sete al
lea ecx, [ebp - 0x980]
sub eax, 0xca8a51d4
neg eax
sbb eax, eax
add eax, 0x10fb1b37
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
call fcn.10018bff
mov ecx, dword [ebp - 0x40]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x5b4]
sete bl
xor eax, eax
push eax
call fcn.10018bff
lea ecx, [ebp - 0x980]
mov eax, dword [eax]
imul eax, ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
call fcn.10018be3
xor ebx, ebx
inc ebx
or eax, 0xffffffff
lea ecx, [ebp - 0x5b4]
mov dword [ebp - 4], eax
call fcn.10018be3
or eax, 0xffffffff
lea ecx, [ebp - 0x1ec]
push 3
mov dword [ebp - 0x14], eax
pop eax
mov dword [ebp - 0x38], 0xfffffffe
push eax
call fcn.10018b61
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x18], 0xa394643c
mov dword [ebp - 0x2c], ebx
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003620c
push ecx
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
mov dword [eax], 0xc93b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100361eb
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x100362f9
jmp 0x1003621c
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 0x4c], 0xa8628405
push ebx
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push ebx
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1ec]
call fcn.10018bff
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1ec]
setge dl
mov dword [ebp - 0x40], edx
push dword [ebp - 0x18]
call fcn.10018bff
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
add edx, 0x1650
cmp eax, edx
setg cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100362f0
push 0xe94
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
dec dword [ebp - 0x18]
jns 0x1003621a
or eax, 0xffffffff
lea ecx, [ebp - 0x1ec]
mov dword [ebp - 4], eax
call fcn.10018be3
push 4
lea ecx, [ebp - 0x5d8]
call fcn.10018b61
mov dword [ebp - 4], 5
xor eax, eax
mov dword [ebp - 0x14], 0xa32b1cec
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003634c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5d8]
call fcn.10018bff
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10036330
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jg 0x10036504
movdqa xmm0, xmmword [0x10007f70]
lea eax, [ebp - 0x11b0]
push eax
lea eax, [ebp - 0x11c0]
push eax
lea ecx, [ebp - 0x1584]
movdqu xmmword [ebp - 0x11c0], xmm0
call fcn.10018c0e
lea ecx, [ebp - 0x259]
mov esi, eax
call fcn.10008ea3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x45c]
push dword [esi]
call fcn.10018bbd
mov byte [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x40], 0xfdad5a51
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100363ce
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13c0], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100363ba
xor eax, eax
push eax
lea ecx, [ebp - 0x45c]
call fcn.10018bff
push 3
pop ecx
mov dword [eax], ecx
jmp 0x100364a8
xor eax, eax
mov dword [ebp - 0x24], 0x2eaa29c1
push 3
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x10036452
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10036415
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x668], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100363fd
xor eax, eax
mov dword [ebp - 0x664], eax
cmp dword [ebp - 0x664], 4
jge 0x1003644f
push dword [ebp - 0x664]
lea ecx, [ebp - 0x5d8]
call fcn.10018bff
mov dword [eax], 0xacf25792
inc dword [ebp - 0x664]
cmp dword [ebp - 0x664], 4
jl 0x10036424
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x100363f5
push eax
lea ecx, [ebp - 0x45c]
call fcn.10018bff
lea ecx, [ebp - 0x5d8]
push dword [eax]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1003648d
push ebx
lea ecx, [ebp - 0x45c]
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x1003648f
mov eax, ebx
mov dword [ebp - 0x13c0], eax
lea ecx, [ebp - 0x45c]
mov dword [ebp - 0x24], eax
xor eax, eax
push eax
call fcn.10018bff
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x45c]
push eax
call fcn.10018bff
cmp dword [eax], 0
jge 0x100363e4
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5d8]
call fcn.10018bff
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5d8]
mov esi, eax
call fcn.10018bff
mov ecx, dword [esi]
mov byte [ebp - 4], 5
mov dword [eax], ecx
lea ecx, [ebp - 0x45c]
call fcn.10018be3
inc dword [ebp - 0x14]
push 3
pop eax
cmp dword [ebp - 0x14], eax
jle 0x1003635b
push 2
xor eax, eax
pop esi
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x5d8]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10018be3
xor eax, eax
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10036539
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xaac], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10036525
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], esi
jg 0x10036783
push ecx
mov dword [ebp - 0x50], 6
lea ecx, [ebp - 0x998]
mov dword [ebp - 0x2c], ebx
call fcn.10018b61
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x2c], 0xfffffffa
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100365a3
push ecx
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x998]
call fcn.10018bff
mov dword [eax], 0x10c93b4e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036582
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x10036709
mov dword [ebp - 0x34], 0x3a6c9cd4
lea ecx, [ebp - 0xd4c]
push ebx
call fcn.10018b61
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100365eb
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd4c]
call fcn.10018bff
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100365d0
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1003660e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1450], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100365f6
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10036622
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xd4c]
mov dword [ebp - 0x40], eax
xor eax, eax
mov esi, dword [ebp - 0x40]
push eax
call fcn.10018bff
push dword [ebp - 0x20]
lea ecx, [ebp - 0x998]
mov dword [eax], esi
call fcn.10018bff
push dword [ebp - 0x20]
lea ecx, [ebp - 0x998]
mov esi, eax
call fcn.10018bff
xor edx, edx
mov ecx, dword [eax]
mov dword [esi], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xfff9
mov eax, dword [ebp - 0x20]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setle bl
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, 0x4255ebda
setne dl
xor ecx, ecx
sub eax, edx
cmp dword [esi], eax
mov eax, dword [ebp - 0x20]
sete cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x4886
setle al
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
xor ecx, ecx
inc ebx
cmp eax, ebx
mov eax, dword [ebp - 0x1448]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xd4c]
setle dl
imul eax, edx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 7
call fcn.10018be3
dec dword [ebp - 0x20]
jns 0x100365af
push 2
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x998]
mov dword [ebp - 4], eax
call fcn.10018be3
inc dword [ebp - 0x50]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
push 3
mov eax, dword [ebp + eax*4 - 0xaac]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0xaac]
mov eax, dword [ebp - 0x50]
dec eax
cmp edx, eax
mov eax, 0xffff
setge cl
cmp ecx, eax
sbb ecx, ecx
xor eax, eax
add ecx, 0x44421409
cmp ecx, 4
setge al
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x28]
pop ecx
cmp dword [ebp - 0x28], esi
jle 0x10036545
xor eax, eax
push 0xfffffffffffffffd
pop ecx
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003679b
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100367af
call edi
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x100367d2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xaac], 0x6d0811fc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100367ba
xor eax, eax
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x34], 0x87d6364d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10036807
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x37c], 0x85f70ad6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100367ef
xor eax, eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x10036824
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x37c], 0
jne 0x10036824
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
jns 0x1003680f
imul eax, dword [ebp - 0x18], 0x7e78
test eax, eax
je 0x10036880
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x40], eax
jg 0x1003684e
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10036850
mov eax, ebx
jmp 0x10036850
xor eax, eax
mov edx, dword [ebp - 0x37c]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x18]
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x378]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x374]
setg dl
sub edx, eax
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x34], ebx
jl 0x10036897
xor eax, eax
cmp dword [ebp - 0x34], eax
jne 0x10036897
cmp dword [ebp - 0x18], eax
je 0x10036899
mov eax, ebx
mov dword [ebp - 0x374], eax
lea ecx, [ebp - 0x474]
mov dword [ebp - 0x24], esi
xor eax, eax
push 9
pop esi
mov dword [ebp - 0x14], 0x465ee6d5
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x40], 0x1d5f49dc
mov dword [ebp - 0x40], eax
push ebx
call fcn.10018b61
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x34], 0x1f7977f4
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x100368f6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x914], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100368de
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10036912
push dword [ebp - 0x18]
lea ecx, [ebp - 0x474]
call fcn.10018bff
mov dword [eax], 0xe7c6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100368fb
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10036923
mov eax, ebx
or edx, 0xffffffff
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x24]
setge cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
sub edx, 0xb8b9
jne 0x10036949
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1003694b
mov eax, ebx
mov dword [ebp - 0x10], eax
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setg dl
cmp dword [ebp - 0x24], edx
jl 0x10036967
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10036969
mov eax, ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x14]
cmp esi, eax
sbb eax, eax
xor ecx, ecx
inc eax
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, ebx
setle cl
mov dword [ebp - 0x90c], ecx
lea ecx, [ebp - 0x474]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10018bff
xor eax, eax
lea ecx, [ebp - 0x474]
push eax
call fcn.10018bff
xor eax, eax
lea ecx, [ebp - 0x474]
push eax
call fcn.10018bff
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x24]
setge dl
sub eax, edx
je 0x100369d7
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x100369d9
mov esi, ebx
jmp 0x100369db
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x474]
call fcn.10018bff
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x474]
mov esi, dword [ebp - 0x90c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10018bff
mov edx, dword [ebp - 0x90c]
sub edx, dword [ebp - 0x90c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
setle cl
xor eax, eax
cmp ecx, 0xfffffffd
lea ecx, [ebp - 0x474]
setl al
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
imul eax, esi
or esi, 0xffffffff
imul eax, eax, 0x3725
mov dword [ebp - 0x10], eax
mov dword [ebp - 4], esi
call fcn.10018be3
xor eax, eax
lea ecx, [ebp - 0x2ec]
mov dword [ebp - 0x424], eax
mov dword [ebp - 0x420], eax
mov dword [ebp - 0x41c], eax
mov dword [ebp - 0x418], eax
push 4
call fcn.10018b61
mov dword [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x40], 0x19d81479
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x10], eax
jmp 0x10036aa7
push dword [ebp - 0x10]
call fcn.10018bff
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
lea ecx, [ebp - 0x2ec]
jl 0x10036a9a
inc dword [ebp - 0x40]
push 2
pop esi
push esi
call fcn.10018bff
mov ecx, dword [ebp - 0x41c]
xor ebx, ebx
cmp ecx, 0x6ec7
lea ecx, [ebp - 0x2ec]
push esi
setle bl
sub ebx, 0x2f20
imul ebx, dword [eax]
call fcn.10018bff
xor ecx, ecx
push 2
cmp ebx, dword [eax]
mov eax, 0xfffb
setne cl
cmp eax, ecx
lea ecx, [ebp - 0x2ec]
pop eax
sbb esi, esi
push eax
inc esi
call fcn.10018bff
xor ecx, ecx
cmp esi, dword [eax]
setg cl
imul eax, ecx, 0x2e41
cmp eax, 0xfffffffa
je 0x10036b26
xor eax, eax
cmp dword [ebp - 0x41c], eax
je 0x10036b28
xor esi, esi
inc esi
jmp 0x10036b2a
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x2ec]
call fcn.10018bff
mov ecx, dword [ebp - 0x41c]
xor edx, edx
cmp ecx, 0x7fd1
mov ecx, dword [ebp - 0x418]
push 2
setl dl
xor ebx, ebx
add ecx, edx
add ecx, esi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x2ec]
pop esi
push esi
setl bl
call fcn.10018bff
push esi
lea ecx, [ebp - 0x2ec]
mov dword [eax], ebx
call fcn.10018bff
mov esi, dword [ebp - 0x41c]
lea ecx, [ebp - 0x2ec]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10018bff
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x41c]
setg dl
xor ebx, ebx
sub edx, 8
cmp edx, eax
setge bl
xor ecx, ecx
cmp esi, 0x6982
setl cl
xor eax, eax
cmp ecx, ebx
lea ecx, [ebp - 0x2ec]
setge al
or ebx, 0xffffffff
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x41c], eax
mov dword [ebp - 4], ebx
call fcn.10018be3
mov dword [ebp - 0x18], 0x9ad59e57
lea ecx, [ebp - 0x6e0]
mov dword [ebp - 0x10], 0x7013
xor esi, esi
mov dword [ebp - 0x14], 0x94d03572
inc esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x2c], 0x244c3f4
mov dword [ebp - 0x54], ebx
push esi
call fcn.10018b61
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x24], 0x6ee3e4f6
mov dword [ebp - 0x40], 0x3db47dc4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10036c46
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6e0]
call fcn.10018bff
mov dword [eax], 0x184e5a94
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10036c28
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ebx
jmp 0x10036c5b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa10], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10036c4e
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
inc dword [ebp - 0x24]
cmp eax, ecx
jge 0x10036c74
mov edx, esi
jmp 0x10036c78
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
neg eax
push 3
sbb eax, eax
neg eax
pop ecx
cmp ecx, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
inc eax
cmp eax, esi
sbb eax, eax
neg eax
cmp edx, eax
jle 0x10036cac
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
xor edx, edx
sub eax, dword [ebp - 0x44]
cmp eax, 0x33df
mov eax, dword [ebp - 0x10]
setle dl
sub edx, 0x881f6c98
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, 0xffff
setne cl
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0xa10]
jg 0x10036cf0
mov eax, dword [ebp - 0x44]
xor eax, eax
lea ecx, [ebp - 0x6e0]
push eax
call fcn.10018bff
mov ecx, dword [ebp - 0x10]
sub ecx, dword [eax]
je 0x10036d4e
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10036d2c
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6e0]
call fcn.10018bff
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10036d0f
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10036e54
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x10036e54
push ebx
lea ecx, [ebp - 0x9b0]
call fcn.10018b61
mov byte [ebp - 4], 0xc
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], 0x1b0f05ba
mov dword [ebp - 0x2c], 0x2d8b6467
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10036da5
push 9
pop esi
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9b0]
call fcn.10018bff
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036d88
xor esi, esi
xor eax, eax
inc esi
push eax
lea ecx, [ebp - 0x6e0]
call fcn.10018bff
cmp dword [eax], 0
jne 0x10036df1
push esi
lea ecx, [ebp - 0x9b0]
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x54], esi
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xfffa
cmp eax, dword [ebp - 0xa10]
jge 0x10036df1
xor eax, eax
mov ecx, eax
jmp 0x10036df3
mov ecx, esi
xor eax, eax
cmp ecx, 0xabb25a59
push esi
sete al
lea ecx, [ebp - 0x9b0]
sub eax, 0xca8a51d4
neg eax
sbb eax, eax
add eax, 0x10fb1b37
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
call fcn.10018bff
mov ecx, dword [ebp - 0x40]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x6e0]
sete bl
xor eax, eax
push eax
call fcn.10018bff
lea ecx, [ebp - 0x9b0]
mov eax, dword [eax]
imul eax, ebx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
call fcn.10018be3
push 2
pop ebx
or eax, 0xffffffff
lea ecx, [ebp - 0x6e0]
mov dword [ebp - 4], eax
call fcn.10018be3
or eax, 0xffffffff
lea ecx, [ebp - 0x1c8]
push 3
mov dword [ebp - 0x14], eax
pop eax
push eax
call fcn.10018b61
mov dword [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x18], 0xa394643c
mov dword [ebp - 0x2c], esi
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10036eb9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push 3
mov dword [eax], 0xc93b
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10036e98
xor eax, eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10036fa6
jmp 0x10036ec9
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 0x4c], 0xa8628405
push esi
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push esi
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c8]
call fcn.10018bff
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1c8]
setge dl
mov dword [ebp - 0x40], edx
push dword [ebp - 0x18]
call fcn.10018bff
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
add edx, 0x1650
cmp eax, edx
setg cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10036f9d
push 0xe94
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
dec dword [ebp - 0x18]
jns 0x10036ec7
or eax, 0xffffffff
lea ecx, [ebp - 0x1c8]
mov dword [ebp - 4], eax
call fcn.10018be3
mov dword [ebp - 0x38], 0xfffffffe
lea ecx, [ebp - 0x680]
push 4
call fcn.10018b61
mov dword [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x14], 0xa32b1cec
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10037000
push dword [ebp - 0x10]
lea ecx, [ebp - 0x680]
call fcn.10018bff
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10036fe4
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jg 0x100371bc
movdqa xmm0, xmmword [0x10007f70]
lea eax, [ebp - 0x11e0]
push eax
lea eax, [ebp - 0x11f0]
push eax
lea ecx, [ebp - 0x1574]
movdqu xmmword [ebp - 0x11f0], xmm0
call fcn.10018c0e
lea ecx, [ebp - 0x26c]
mov esi, eax
call fcn.10008ea3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x48c]
push dword [esi]
call fcn.10018bbd
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x40], 0xfdad5a51
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10037082
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13d8], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1003706e
xor eax, eax
push eax
lea ecx, [ebp - 0x48c]
call fcn.10018bff
push 3
pop ecx
mov dword [eax], ecx
jmp 0x10037160
xor eax, eax
mov dword [ebp - 0x24], 0x2eaa29c1
push 3
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x10037106
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100370c9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5f0], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100370b1
xor eax, eax
mov dword [ebp - 0x5ec], eax
cmp dword [ebp - 0x5ec], 4
jge 0x10037103
push dword [ebp - 0x5ec]
lea ecx, [ebp - 0x680]
call fcn.10018bff
mov dword [eax], 0xacf25792
inc dword [ebp - 0x5ec]
cmp dword [ebp - 0x5ec], 4
jl 0x100370d8
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x100370a9
push eax
lea ecx, [ebp - 0x48c]
call fcn.10018bff
lea ecx, [ebp - 0x680]
push dword [eax]
call fcn.10018bff
cmp dword [eax], 0
jne 0x10037144
xor eax, eax
lea ecx, [ebp - 0x48c]
inc eax
push eax
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10037147
xor eax, eax
inc eax
mov dword [ebp - 0x13d8], eax
lea ecx, [ebp - 0x48c]
mov dword [ebp - 0x24], eax
xor eax, eax
push eax
call fcn.10018bff
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x48c]
push eax
call fcn.10018bff
cmp dword [eax], 0
jge 0x10037098
push dword [ebp - 0x14]
lea ecx, [ebp - 0x680]
call fcn.10018bff
push dword [ebp - 0x14]
lea ecx, [ebp - 0x680]
mov esi, eax
call fcn.10018bff
mov ecx, dword [esi]
mov byte [ebp - 4], 0xe
mov dword [eax], ecx
lea ecx, [ebp - 0x48c]
call fcn.10018be3
inc dword [ebp - 0x14]
push 3
pop eax
cmp dword [ebp - 0x14], eax
jle 0x1003700f
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x680]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10018be3
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100371e9
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100371fd
call edi
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
xor eax, eax
push 3
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10037212
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xadc], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10037205
push ecx
lea ecx, [ebp - 0x9c8]
call fcn.10018b61
mov dword [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x2c], 0xfffffffa
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10037269
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9c8]
call fcn.10018bff
push 3
mov dword [eax], 0x10c93b4e
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10037248
xor eax, eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x100373cf
mov dword [ebp - 0x34], 0x3a6c9cd4
lea ecx, [ebp - 0xc74]
push esi
call fcn.10018b61
xor eax, eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100372b1
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc74]
call fcn.10018bff
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10037296
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x100372d4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1498], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100372bc
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100372e8
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xc74]
mov dword [ebp - 0x40], eax
xor eax, eax
mov esi, dword [ebp - 0x40]
push eax
call fcn.10018bff
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9c8]
mov dword [eax], esi
call fcn.10018bff
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9c8]
mov esi, eax
call fcn.10018bff
xor edx, edx
mov ecx, dword [eax]
mov dword [esi], ecx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xfff9
mov eax, dword [ebp - 0x20]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setle bl
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, 0x4255ebda
setne dl
xor ecx, ecx
sub eax, edx
cmp dword [esi], eax
mov eax, dword [ebp - 0x20]
sete cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x4886
setle al
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor esi, esi
inc eax
xor ecx, ecx
inc esi
cmp eax, esi
mov eax, dword [ebp - 0x1490]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xc74]
setle dl
imul eax, edx
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x10
call fcn.10018be3
dec dword [ebp - 0x20]
jns 0x10037275
push 2
pop ebx
or eax, 0xffffffff
lea ecx, [ebp - 0x9c8]
mov dword [ebp - 4], eax
call fcn.10018be3
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jg 0x100379cc
mov ebx, 0xedf2
jmp 0x100373fd
xor eax, eax
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x10], eax
jmp 0x10037421
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x88], 0x374b1b05
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10037410
mov eax, dword [ebp - 0x20]
xor edx, edx
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x14], eax
jmp 0x10037502
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x100374ff
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10037475
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x88]
cmp eax, dword [ebp - 0x20]
je 0x100374e5
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x88]
cmp eax, esi
mov eax, dword [ebp - 0x20]
sete cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x88]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
dec edx
mov eax, dword [ebp + eax*4 - 0x88]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
cmp ecx, 0x8b0d58e7
mov eax, dword [ebp + eax*4 - 0x88]
sbb ecx, ecx
sub eax, dword [ebp - 0x2c]
neg ecx
cmp eax, ecx
jle 0x100375f7
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100375f9
mov ecx, esi
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x88], ecx
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10037465
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x10037456
mov dword [ebp - 0x20], 6
xor edx, edx
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x10], 0xebf90350
mov dword [ebp - 0x24], 7
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
push 3
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, edx
setge cl
xor edx, edx
add ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop eax
setg dl
sub edx, eax
neg edx
sbb edx, edx
add edx, 0xec1e60de
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x1b35d569
setle al
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, 0x22124f84
setl cl
inc ecx
jne 0x10037699
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x10037699
push 0xfffffffffffffff6
pop ecx
mov dword [ebp - 0x23c], ecx
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x234], ecx
mov dword [ebp - 0x230], ecx
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100375e5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1564], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100375cd
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 7
jge 0x100376e7
or edi, 0xffffffff
jmp 0x10037603
xor eax, eax
mov ecx, eax
jmp 0x100374e7
push 2
pop ecx
push ecx
mov dword [ebp - 0x40], edi
lea ecx, [ebp - 0x1104]
mov dword [ebp - 0x38], 0xe10ef7d5
call fcn.10018b61
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0xa40], ebx
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0xa38], ebx
mov dword [ebp - 0xa34], ebx
push 2
mov dword [ebp - 0x10], eax
pop esi
cmp dword [ebp - 0x10], esi
jge 0x10037668
push esi
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1104]
call fcn.10018bff
mov dword [eax], 0xd1a6f322
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10037647
mov ebx, 0xedf2
inc dword [ebp - 0x40]
lea ecx, [ebp - 0x1104]
inc dword [ebp - 0xa34]
mov dword [ebp - 4], edi
call fcn.10018be3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 7
jl 0x10037600
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
xor esi, esi
xor eax, eax
inc esi
jmp 0x100376e7
mov dword [ebp - 0x50], 0xfffffff6
mov dword [ebp - 0x38], 0xe215169f
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x34], 0x7d2ae857
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
inc dword [ebp - 0x34]
cmp ecx, eax
jge 0x100376ce
mov edx, esi
jmp 0x100376d2
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x50]
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x2c], esi
lea ecx, [ebp - 0xac4]
mov dword [ebp - 0x44], 0x10e1
mov dword [ebp - 0x2c], 0x16b471df
mov dword [ebp - 0x40], eax
push 9
pop eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], esi
push esi
call fcn.10018b61
xor eax, eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x10], eax
jmp 0x10037731
push dword [ebp - 0x10]
lea ecx, [ebp - 0xac4]
call fcn.10018bff
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1003771e
dec dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setle dl
cmp edx, 0x6cc9ca31
jle 0x1003775a
mov eax, dword [ebp - 0x40]
xor eax, eax
lea ecx, [ebp - 0xac4]
push eax
call fcn.10018bff
mov dword [eax], 0x2aff635
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1003777f
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
or eax, 0xffffffff
lea ecx, [ebp - 0xac4]
mov dword [ebp - 4], eax
call fcn.10018be3
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x24], eax
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100377c1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x110], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100377ad
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x10037882
push 3
mov dword [ebp - 0x34], 0x82bdb979
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x100377ed
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdc4], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100377dc
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x110]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x110]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sete dl
cmp edx, dword [ebp + eax*4 - 0x110]
jge 0x10037871
mov eax, dword [ebp - 0x34]
xor eax, eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xdc4]
cmp dword [ebp - 0x34], esi
jl 0x10037838
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0xdc4], eax
je 0x1003783a
mov ecx, esi
mov eax, dword [ebp - 0x24]
xor edx, edx
mov dword [ebp + eax*4 - 0x110], 0xdb6d
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0xdc4]
neg edx
sbb edx, edx
inc edx
imul eax, edx, 0xdb6d
test eax, eax
je 0x10037871
mov eax, esi
jmp 0x10037873
xor eax, eax
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x100377cd
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10037897
push 0x10b1
push eax
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
inc dword [ebp - 0x20]
lea eax, [ebp - 0x12a0]
movdqa xmm0, xmmword [0x10007f70]
lea ecx, [ebp - 0x151c]
push eax
lea eax, [ebp - 0x12b0]
push eax
movdqu xmmword [ebp - 0x12b0], xmm0
call fcn.10018c0e
lea ecx, [ebp - 0x23d]
mov esi, eax
call fcn.10008ea3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf54]
push dword [esi]
call fcn.10018bbd
mov dword [ebp - 4], 0x14
xor eax, eax
push 3
mov dword [ebp - 0x10], eax
pop ecx
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jl 0x10037952
push ecx
pop ebx
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jg 0x10037934
mov dword [ebp - 0x2c], 0xfffffffc
lea ecx, [ebp - 0xf54]
mov dword [ebp - 0x2c], 0x949dfcf0
push dword [ebp - 0x14]
call fcn.10018bff
cmp dword [eax], 0
jne 0x10037932
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10037909
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10037948
push 0x119a
push eax
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
jns 0x100378fa
mov ebx, 0xedf2
or eax, 0xffffffff
lea ecx, [ebp - 0xf54]
mov dword [ebp - 4], eax
call fcn.10018be3
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
push 2
mov eax, dword [ebp + eax*4 - 0xadc]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0xadc]
mov eax, dword [ebp - 0x20]
dec eax
cmp edx, eax
mov eax, 0xffff
setge cl
cmp ecx, eax
sbb ecx, ecx
xor eax, eax
add ecx, 0x44421409
cmp ecx, 4
setge al
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
pop eax
sete cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x18]
push 1
pop esi
cmp dword [ebp - 0x18], eax
jle 0x100373fb
push eax
pop ebx
push ebx
lea ecx, [ebp - 0x608]
call fcn.10018b61
mov dword [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x10], 0x11accbad
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10037a0e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x608]
call fcn.10018bff
mov dword [eax], 0x24ec2e0c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100379f0
xor eax, eax
push eax
lea ecx, [ebp - 0x608]
call fcn.10018bff
mov dword [eax], 0xa
jmp 0x10037a43
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10037a35
push eax
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
xor eax, eax
push eax
lea ecx, [ebp - 0x608]
call fcn.10018bff
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x608]
push eax
call fcn.10018bff
cmp dword [eax], 0xfffffff5
jl 0x10037a22
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x10037a84
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10037a7f
push 0x268
push 0x2607
push eax
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10037a63
or eax, 0xffffffff
lea ecx, [ebp - 0x608]
mov dword [ebp - 4], eax
call fcn.10018be3
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10037c1b
push 2
pop edx
push 9
pop edi
mov dword [ebp - 0x20], 0xe0a8eac8
mov dword [ebp - 0x28], 0xb302aff6
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edx
jge 0x10037ae1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x564], 0x47d2038e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10037ac9
xor eax, eax
mov dword [ebp - 0x20], 0xffffffe7
cmp dword [ebp - 0x20], 0xffffffed
jle 0x10037b7f
jmp 0x10037af6
xor eax, eax
mov dword [ebp - 0x28], 0x164caf14
mov dword [ebp - 0x10], eax
jmp 0x10037b13
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15f4], 0x9fe5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10037b02
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x560], eax
test eax, eax
jne 0x10037b36
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x10037b38
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x15f4]
jne 0x10037b56
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x560], eax
je 0x10037b58
mov ecx, ebx
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffed
jg 0x10037af4
push 2
pop edx
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10037b93
mov dword [ebp - 0x560], edi
mov ecx, eax
cmp dword [ebp - 0x28], edi
jne 0x10037b95
mov ecx, ebx
xor eax, eax
test ecx, ecx
setne al
cmp eax, dword [ebp - 0x20]
jge 0x10037ba8
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10037baa
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], ebx
xor eax, eax
cmp dword [ebp - 0x24], eax
jl 0x10037bf5
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edx
jge 0x10037bf0
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x564], 0x63b88216
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x10037bd8
xor eax, eax
dec dword [ebp - 0x24]
jns 0x10037bd0
mov eax, dword [ebp - 0x14]
push 3
mov dword [ebp + eax*4 - 0xadc], 0x6d0811fc
inc dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], eax
push 0
pop eax
jl 0x10037aac
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, 0x251d69f4
mov edx, 0xccb03629
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xffffffe6
cmp dword [ebp - 0x24], 0x18
push 0xfffffffffffffff2
pop ecx
jl 0x10037c67
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 8
jmp 0x10037c57
mov dword [ebp - 0x2c], 0xcb61
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jne 0x10037c47
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jge 0x10037c3b
xor eax, eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xffffffe6
cmp dword [ebp - 0x24], 0x18
jl 0x10037ca6
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 8
jmp 0x10037c96
mov dword [ebp - 0x2c], 0xcb61
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jne 0x10037c86
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jge 0x10037c7a
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10037cc5
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd0], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10037cb1
xor eax, eax
mov dword [ebp - 0xd0], eax
jmp 0x10037cf2
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10037cec
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
xor eax, eax
inc dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], 4
jne 0x10037ccd
mov dword [ebp - 0x58], esi
lea ecx, [ebp - 0xc8c]
mov dword [ebp - 0x10], 0x5f88
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xb611fb8e
mov dword [ebp - 0x2c], 0x8a13c444
mov dword [ebp - 0x4c], 0xfffa
push 4
call fcn.10018b61
xor eax, eax
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10037d4f
push 0xfffffffffffffff9
pop ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x64], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10037d3e
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10037d6b
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc8c]
call fcn.10018bff
mov dword [eax], 0xcd5c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10037d54
mov eax, dword [ebp - 0x64]
add eax, 0x49f4ffcf
jne 0x10037d7e
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
or edx, 0xffffffff
neg eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x64]
neg eax
cmp eax, edx
sbb eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jg 0x10037dde
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x64]
cmp eax, edx
mov eax, dword [ebp - 0x14]
setne cl
imul eax, ecx
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10037de0
mov edx, ebx
jmp 0x10037de2
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x64]
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setge dl
sub edx, 5
mov dword [ebp - 0x2c], edx
jne 0x10037e0d
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x4c], eax
je 0x10037e0f
mov esi, ebx
push 3
pop eax
push eax
lea ecx, [ebp - 0xc8c]
call fcn.10018bff
mov ecx, dword [ebp - 0x64]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0xc8c]
setg dl
mov dword [eax], edx
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10018be3
movdqa xmm0, xmmword [0x10007ec0]
lea ecx, [ebp - 0x152c]
xor eax, eax
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x1200]
push eax
lea eax, [ebp - 0x1210]
push eax
movdqu xmmword [ebp - 0x1210], xmm0
call fcn.10018c0e
lea ecx, [ebp - 0x23e]
mov esi, eax
call fcn.10008ea3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xaf4]
push dword [esi]
call fcn.10018bbd
mov dword [ebp - 4], 0x17
xor eax, eax
push 2
mov dword [ebp - 0x20], eax
pop esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x2c], 0x4c9d8d92
push 3
mov dword [ebp - 0x2c], 0xfaead221
pop ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
jl 0x10037f9b
or edi, 0xffffffff
jmp 0x10037ebd
xor eax, eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x50], 0xc8a81d5f
cmp dword [ebp - 0x20], eax
je 0x10037edf
cmp dword [ebp - 0x34], 0x5a63a74a
jle 0x10037edf
mov ecx, ebx
cmp dword [ebp - 0x20], eax
jne 0x10037ee1
mov ecx, eax
mov eax, dword [ebp - 0x20]
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x40], eax
imul eax, dword [ebp - 0x40], 0xe77
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
cmp eax, 0xfffffffd
setne cl
xor eax, eax
cmp ecx, 0xb2d3650d
setne al
cmp eax, 7
jl 0x10037f19
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10037f1b
mov eax, ebx
jmp 0x10037f1b
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xaf4]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
push dword [ebp - 0x20]
call fcn.10018bff
push dword [ebp - 0x20]
lea ecx, [ebp - 0xaf4]
mov esi, eax
call fcn.10018bff
mov ecx, dword [eax]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
sub edx, 0xba96
neg edx
mov dword [esi], ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setle cl
xor edx, edx
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x50]
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
inc edx
cmp edx, edi
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10037f92
dec dword [ebp - 0x20]
push 2
pop esi
jns 0x10037ebb
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
push 2
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], eax
call fcn.10018be3
mov dword [ebp - 0x58], 0xffffffe6
jmp 0x100384d9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10037fd8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x394], 0xfffffff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10037fc0
xor eax, eax
push 9
pop ecx
mov dword [ebp - 0x394], ecx
jmp 0x1003800a
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0xfffffff4
jmp 0x10037ffe
mov dword [ebp - 0x2c], 0xfffe
cmp dword [ebp - 0x2c], eax
jne 0x10038004
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 6
jle 0x10037fef
dec dword [ebp - 0x394]
cmp dword [ebp - 0x394], 0xfffffff0
jle 0x10037fe3
push 3
pop eax
mov dword [ebp - 0x18], 0xccb03629
lea ecx, [ebp - 0x450]
push eax
call fcn.10018b61
mov dword [ebp - 4], 0x18
xor eax, eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x40], 0x16747b1d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003805c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10038044
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10038092
push ecx
pop ebx
or edi, 0xffffffff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x450]
call fcn.10018bff
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1003806c
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
xor ebx, ebx
push 3
xor eax, eax
inc ebx
pop ecx
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], ecx
jl 0x10038327
jmp 0x100380a8
xor eax, eax
mov dword [ebp - 0x3c], 0xfffffff6
mov dword [ebp - 0x28], 0x3eee2fde
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x3c], eax
jmp 0x10038276
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x38], 0xde57
mov dword [ebp - 0x14], 0x7216709e
dec dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x22
je 0x10038273
mov dword [ebp - 0x50], 0xebbd485
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x20], eax
jne 0x100380fb
mov eax, dword [ebp - 0x50]
dec dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
sub eax, 0xfffc
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10038117
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x13c]
lea ecx, [ebp - 0x450]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
push esi
call fcn.10018bff
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
add edx, 0x5909c114
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x18]
jne 0x1003815a
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1003815c
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jg 0x10038263
push 3
pop ebx
mov dword [ebp - 0x2c], 0x62b1
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], eax
jl 0x10038254
push ebx
lea ecx, [ebp - 0x884]
call fcn.10018b61
xor eax, eax
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100381c1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x884]
call fcn.10018bff
mov dword [eax], 0xf98093af
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100381a3
xor eax, eax
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x1003823a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x450]
call fcn.10018bff
push esi
lea ecx, [ebp - 0x884]
call fcn.10018bff
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x884]
push esi
call fcn.10018bff
push dword [ebp - 0x14]
lea ecx, [ebp - 0x450]
call fcn.10018bff
mov ecx, dword [ebp - 0x50]
xor edx, edx
cmp ecx, 0xc9e5
setg dl
sub edx, 0xa600
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
inc edx
mov dword [eax], edx
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10038235
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
dec dword [ebp - 0x28]
jns 0x100381c9
lea ecx, [ebp - 0x884]
mov byte [ebp - 4], 0x18
call fcn.10018be3
dec dword [ebp - 0x14]
jns 0x10038189
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10038176
xor ebx, ebx
inc ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x22
push 0
pop eax
jne 0x100380e6
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ebx
je 0x100380c1
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x13c]
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x10038299
mov ecx, ebx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x450]
push esi
call fcn.10018bff
mov ecx, dword [ebp - 0x28]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x20]
setle dl
xor ebx, ebx
cmp eax, edx
setg bl
sub ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setge cl
cmp dword [ebp - 0x40], ecx
jl 0x100382ea
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x100382ea
xor ebx, ebx
mov esi, eax
inc ebx
jmp 0x100382ef
xor ebx, ebx
inc ebx
mov esi, ebx
push ebx
lea ecx, [ebp - 0x450]
call fcn.10018bff
xor edx, edx
push 3
cmp dword [eax], esi
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
pop eax
setge cl
mov dword [ebp - 0x3c], ecx
inc dword [ebp - 0x13c]
push 2
pop esi
cmp dword [ebp - 0x13c], eax
jge 0x100380a6
or eax, 0xffffffff
lea ecx, [ebp - 0x450]
mov dword [ebp - 4], eax
call fcn.10018be3
mov dword [ebp - 0x18], 8
jmp 0x100384cc
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10038368
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3a4], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10038354
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003837c
push 0x119a
push eax
push eax
call edi
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jl 0x100383ce
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x3a4]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3a4], ecx
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100383c7
push 0xa78
push eax
push 0xd41
push 0x1fc5
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharacterPlacementW]
dec dword [ebp - 0x14]
jns 0x10038384
xor eax, eax
mov dword [ebp - 0x2c], 0xcb61
mov dword [ebp - 0x28], 0xdb3ae355
mov dword [ebp - 0x14], 0x2a67
mov dword [ebp - 0x2c], 0x6cedda56
mov dword [ebp - 0x28], 0x16
cmp dword [ebp - 0x28], 5
jle 0x100384c3
jmp 0x100383ff
xor eax, eax
mov dword [ebp - 0x24], 0x8c443eb6
mov dword [ebp - 0x2c], 0xde7504ed
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10038426
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10038446
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
test eax, eax
setns cl
xor eax, eax
imul ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x14], eax
je 0x1003847b
mov dword [ebp - 0x14], 0xffffffee
jmp 0x10038473
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x19
je 0x1003846a
jmp 0x100384b6
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100384a0
push 0x18f8
push 0x3fe
push 0xfed
push 0x8f4
push eax
call dword [sym.imp.USER32.dll_SetRect]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100384b6
push 0xb7e
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 5
jg 0x100383fd
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff2
jne 0x10038344
inc dword [ebp - 0x58]
xor eax, eax
cmp dword [ebp - 0x58], 0x18
jge 0x10037fb8
push 0xfffffffffffffffd
mov dword [ebp - 0x3c], 0x17ca0029
lea ecx, [ebp - 0x334]
mov dword [ebp - 0x28], eax
pop eax
push 3
mov dword [ebp - 0x44], eax
pop eax
push eax
call fcn.10018b61
mov dword [ebp - 4], 0x1a
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], ebx
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003854c
push ecx
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0x334]
call fcn.10018bff
mov dword [eax], 0x4361
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003852a
xor ebx, ebx
push 3
inc ebx
pop ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x3c]
jl 0x10038560
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x28]
mov edi, dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x3c], esi
cmp dword [ebp - 0x3c], eax
jl 0x10038793
jmp 0x10038594
mov dword [ebp - 0x40], 0xf0adc109
mov dword [ebp - 0x54], 0xd978029
push ecx
mov dword [ebp - 0x2c], 0xe360abed
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 0x38], 0xce5f1497
call fcn.10018b61
mov byte [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x38], ebx
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x100385f3
push ecx
pop ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb0c]
call fcn.10018bff
mov dword [eax], 0x3fa8726a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100385d2
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10038613
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x740], 0x9f7e48ff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100385fb
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10038669
lea ecx, [ebp - 0x334]
cmp dword [ebp - 0x28], esi
jle 0x10038618
or eax, 0xffffffff
lea ecx, [ebp - 0x334]
mov dword [ebp - 4], eax
call fcn.10018be3
mov dword [ebp - 0x24], 0x251d69f4
xor eax, eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xffffffe6
cmp dword [ebp - 0x24], 0x18
jl 0x100387ee
mov dword [ebp - 0x14], 0xccb03629
mov dword [ebp - 0x14], 8
jmp 0x100387dd
mov dword [ebp - 0x2c], 0xcb61
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff2
jne 0x100387cd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jge 0x100387bd
push 3
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0xca4]
mov dword [ebp - 0x50], eax
pop eax
push eax
call fcn.10018b61
xor eax, eax
mov dword [ebp - 4], 0x1d
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003883a
push ecx
pop ebx
push dword [ebp - 0x10]
lea ecx, [ebp - 0xca4]
call fcn.10018bff
mov dword [eax], 0x1f6f49c2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10038819
xor ebx, ebx
xor eax, eax
inc ebx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10038870
push eax
push 0xbd1
push eax
push eax
push 0x2481
push 0x8db
push 0x1993
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
xor eax, eax
mov dword [ebp - 0x18], 0xffffffe2
cmp dword [ebp - 0x18], 0xffffffea
je 0x100389fa
jmp 0x10038885
or eax, 0xffffffff
lea ecx, [ebp - 0xca4]
mov dword [ebp - 4], eax
call fcn.10018be3
xor eax, eax
mov dword [ebp - 0x3c], 0x17ca0029
push 0xfffffffffffffffd
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x304]
pop eax
push 3
mov dword [ebp - 0x44], eax
pop eax
push eax
call fcn.10018b61
mov dword [ebp - 4], 0x1e
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], ebx
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10038a74