Function at 0x10030aaf
Capabilities:
Allocate thread local storage
Delete file
Get file attributes
Get geographical location
Get session user name
Get thread local storage value
Parse pe header
Query environment variable
Query or enumerate registry value
Set thread local storage value

Disassembly:
mov eax, 0x100828b8
call fcn.10080960
mov eax, 0x1954
call fcn.1007cd80
mov dword [ebp - 0x40], 8
push ebx
push esi
xor esi, esi
mov byte [ebp - 0x65], dl
inc esi
mov dword [ebp - 0x60], ecx
xor edx, edx
mov ebx, 0xda2ae7b7
push edi
or edi, 0xffffffff
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x54], 0x8d9a2b82
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
neg eax
cmp eax, 0x8b16
mov eax, dword [ebp - 0x40]
setl cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x40]
setg cl
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xd0e
setle al
mov dword [ebp - 0x54], eax
xor eax, eax
mov byte [ebp - 0x55], al
cmp byte [ebp - 0x55], al
je 0x10030b67
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
xor eax, eax
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x55], al
cmp byte [ebp - 0x55], 0
je 0x10030b88
push 0x1ebf
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
mov byte [ebp - 0x55], al
cmp byte [ebp - 0x55], 0
je 0x10030b9a
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], 0x9c3d069f
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x18], 0x435
mov dword [ebp - 0x24], 0x7348
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], esi
jge 0x10030bf5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x10ec], edi
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x10030be1
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x19
je 0x10030cbb
or esi, 0xffffffff
jmp 0x10030c0f
xor eax, eax
mov dword [ebp - 0x48], 0x638ecf54
mov byte [ebp - 0x55], al
cmp byte [ebp - 0x55], 0
je 0x10030c2e
push eax
push 0xbc
call edi
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x48], 0xd
jmp 0x10030ca5
push 4
lea ecx, [ebp - 0x978]
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0x23b1a956
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10030c78
push dword [ebp - 0x40]
lea ecx, [ebp - 0x978]
call fcn.100161ad
mov dword [eax], 0x7222
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 4
jl 0x10030c59
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10030c8e
push dword [ebp - 0x1c]
call fcn.100161ad
mov dword [eax], 0x8cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x978]
jl 0x10030c7d
mov dword [ebp - 4], esi
call fcn.10016191
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffffffa
je 0x10030c37
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x19
jne 0x10030c0d
xor esi, esi
inc esi
cmp dword [ebp - 0x54], 0xae2718b9
jne 0x10030cc7
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10030ce6
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], 0xe1dc630d
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0x8d9a2b82
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
push 3
setle dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
neg eax
cmp eax, 0x8b16
mov eax, dword [ebp - 0x28]
setl cl
xor ebx, ebx
cmp ecx, eax
setge bl
sub ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xd0e
lea ecx, [ebp - 0xf54]
setle al
xor ebx, ebx
mov dword [ebp - 0x44], eax
inc ebx
mov dword [ebp - 0x1c], 0xec2e0cf5
or esi, 0xffffffff
mov dword [ebp - 0x24], 0x2ae7b79f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x9ebf495e
mov dword [ebp - 0x24], 2
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x526c7153
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x6e523240
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10030dfa
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf54]
call fcn.100161ad
mov dword [eax], 0xd40a7fc
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10030ddb
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 6
jge 0x10030f55
mov dword [ebp - 0x24], 0x5af8b513
lea ecx, [ebp - 0x93c]
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x24], 0xba29f583
mov dword [ebp - 0x24], ebx
push 2
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10030e5c
mov ecx, 0xffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17d0], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10030e47
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10030e7a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x338], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10030e65
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10030e9c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18ac], 0x5f8d9a2b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10030e83
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10030ec4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x93c]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10030ea5
xor eax, eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], ebx
jg 0x10030f37
jmp 0x10030ed6
xor eax, eax
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x9af3
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], eax
jmp 0x10030f00
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x17e0], 0xfffffff7
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jl 0x10030eef
push ebx
lea ecx, [ebp - 0x93c]
call fcn.100161ad
mov edx, dword [ebp - 0x44]
mov esi, dword [eax]
lea ecx, [esi - 1]
mov dword [eax], ecx
cmp edx, esi
jge 0x10030f24
mov eax, ebx
jmp 0x10030f26
xor eax, eax
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x338]
cmp dword [ebp - 0x338], ebx
jle 0x10030ed4
lea ecx, [ebp - 0x93c]
mov byte [ebp - 4], bl
call fcn.10016191
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jl 0x10030e07
or esi, 0xffffffff
lea ecx, [ebp - 0xf54]
mov dword [ebp - 4], esi
call fcn.10016191
xor eax, eax
mov byte [ebp - 0xd], al
mov dword [ebp - 0x44], 0xb7c7ce53
mov dword [ebp - 0x1c], 0xe97eede0
mov dword [ebp - 0x24], 0xfffffff6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10030fa1
mov byte [ebp - 0x55], al
cmp byte [ebp - 0x55], 0
je 0x10030f9e
call edi
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x10030f8a
cmp byte [ebp - 0xd], 0
je 0x1003142d
movdqa xmm0, xmmword [0x10007f10]
lea eax, [ebp - 0x1294]
push eax
lea eax, [ebp - 0x12a4]
push eax
lea ecx, [ebp - 0x17f0]
movdqu xmmword [ebp - 0x12a4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x167]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x6e8]
push dword [esi]
call fcn.1001616b
push 3
pop ecx
mov dword [ebp - 4], ecx
or esi, 0xffffffff
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x30], 0x5bed8572
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], eax
jl 0x10031414
jmp 0x10031025
push 3
pop ecx
push ecx
mov dword [ebp - 0x3c], 0x2e31d832
lea ecx, [ebp - 0x954]
mov dword [ebp - 0x2c], 0xfffffff9
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1003106d
push dword [ebp - 0x40]
lea ecx, [ebp - 0x954]
call fcn.100161ad
mov dword [eax], 0x401bc10b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x1003104e
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x100313f3
push 2
pop edi
movdqa xmm0, xmmword [0x10007f30]
lea eax, [ebp - 0x12d4]
push eax
lea eax, [ebp - 0x12e4]
push eax
lea ecx, [ebp - 0x1800]
movdqu xmmword [ebp - 0x12e4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x169]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x104]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x104]
push edi
mov dword [ebp - 0x38], 0x98e64e6d
call fcn.100161ad
and dword [eax], 0
jmp 0x1003110d
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
lea ecx, [ebp - 0x6e8]
push dword [eax]
call fcn.100161ad
push edi
lea ecx, [ebp - 0x104]
mov dword [eax], 0xedcc590f
call fcn.100161ad
inc dword [eax]
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
cmp dword [eax], 4
jl 0x100310e0
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x100313d7
movdqa xmm0, xmmword [0x10007f40]
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x1464]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x44], 0x85b
lea ecx, [ebp - 0x16c0]
push eax
movdqu xmmword [ebp - 0x1464], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x16b]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xce4]
push dword [esi]
call fcn.1001616b
xor eax, eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x100311a4
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x418], 0xfffffffa
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x1003118c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x10031250
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x100311ed
cmp dword [ebp - 0x3c], eax
je 0x100311c1
mov eax, dword [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x3c]
jge 0x100311ed
xor eax, eax
mov ebx, eax
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
lea edx, [ebx + 1]
xor ebx, ebx
cmp edx, ecx
setl bl
imul ebx, dword [eax]
mov eax, dword [ebp - 0x3c]
sub ebx, eax
cmp ebx, 0xfffffff9
sbb eax, eax
inc eax
dec eax
jne 0x10031221
cmp dword [ebp - 0x3c], eax
jne 0x10031221
xor ebx, ebx
inc ebx
jmp 0x10031226
xor ebx, ebx
inc ebx
mov eax, ebx
cmp eax, dword [ebp - 0x3c]
je 0x1003122e
mov eax, dword [ebp - 0x44]
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
push 0
mov dword [eax], 0x1cf6a124
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
pop eax
jle 0x100311b1
cmp dword [ebp - 0x28], eax
je 0x1003126c
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
cmp dword [eax], 0
je 0x1003126a
mov edi, ebx
jmp 0x1003126e
xor eax, eax
mov edi, eax
push ebx
lea ecx, [ebp - 0x6e8]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
mov esi, eax
xor eax, eax
cmp edi, ecx
setne al
xor edx, edx
add eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xa8ff013e
setne dl
cmp eax, edx
sbb eax, eax
neg eax
cmp eax, dword [esi]
jle 0x100312b8
push 3
lea ecx, [ebp - 0x6e8]
call fcn.100161ad
cmp dword [eax], 0
jne 0x100312b8
xor eax, eax
jmp 0x100312ba
mov eax, ebx
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
imul edx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setg al
cmp eax, dword [ebp - 0x3c]
jl 0x100312e2
xor eax, eax
lea ecx, [ebp - 0x104]
push eax
call fcn.100161ad
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x100312ee
cmp dword [ebp - 0x38], eax
jne 0x100312f0
mov ebx, eax
push 3
lea ecx, [ebp - 0xce4]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ebx, ecx
sete dl
xor ebx, ebx
imul edx, dword [eax]
mov eax, dword [ebp - 0x30]
cmp edx, 0x9c7d
mov edx, dword [ebp - 0x3c]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x418]
setne cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x104]
mov esi, dword [ebp - 0x30]
push eax
call fcn.100161ad
mov dword [eax], esi
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0x418]
mov eax, dword [ebp - 0x34]
add eax, ecx
cmp eax, dword [ebp - 0x38]
je 0x10031382
push 3
lea ecx, [ebp - 0xce4]
call fcn.100161ad
push 2
pop edi
cmp dword [eax], 0
jne 0x10031385
push edi
lea ecx, [ebp - 0x104]
call fcn.100161ad
jmp 0x10031385
push 2
pop edi
mov eax, dword [ebp - 0x2c]
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
push edi
setg bl
lea ecx, [ebp - 0x954]
imul ebx, dword [ebp - 0x38]
sub ebx, dword [ebp - 0x28]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.100161ad
lea ecx, [ebp - 0xce4]
mov dword [eax], ebx
mov dword [ebp - 0x418], ebx
mov byte [ebp - 4], 5
call fcn.10016191
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
push 1
pop ebx
jle 0x1003112d
lea ecx, [ebp - 0x104]
mov byte [ebp - 4], 4
call fcn.10016191
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jle 0x1003107d
lea ecx, [ebp - 0x954]
mov byte [ebp - 4], 3
call fcn.10016191
dec dword [ebp - 0x28]
jns 0x10031022
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
or esi, 0xffffffff
lea ecx, [ebp - 0x6e8]
mov dword [ebp - 4], esi
call fcn.10016191
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov dword [ebp - 0x1c], 0xb55bb2c2
lea ecx, [ebp - 0xf00]
mov dword [ebp - 0x24], 0xfffffffa
push 2
call fcn.1001610f
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x24], 0x8d96753f
mov dword [ebp - 0x34], 0x4469
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x10031487
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf00]
call fcn.100161ad
mov dword [eax], 0x2a8358bd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 2
jl 0x10031468
xor eax, eax
mov dword [ebp - 0x1c], 0x11
cmp dword [ebp - 0x1c], 0xb
jg 0x100314ee
push 4
pop ecx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x21c3a23
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xbdbdf7c
mov dword [ebp - 0x24], 0x282d564c
mov dword [ebp - 0x24], 0x9b2b534d
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ecx
jge 0x100314e2
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x190c], ecx
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ecx
jl 0x100314ce
xor eax, eax
inc dword [ebp - 0x34]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xb
jle 0x10031497
lea ecx, [ebp - 0xf00]
mov dword [ebp - 4], esi
call fcn.10016191
push 4
lea ecx, [ebp - 0x96c]
call fcn.1001610f
mov dword [ebp - 4], 8
mov dword [ebp - 0x48], ebx
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xaa50887c
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x24], 0xe2499e68
mov dword [ebp - 0x14], ebx
push 4
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x50b7f45b
mov dword [ebp - 0x24], 0x93cc9d6c
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], 0xc67a9553
mov dword [ebp - 0x24], 0x4f5fdfda
mov dword [ebp - 0x24], 0x726f2c0e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x24], 0x41af53c8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0x5ce76562
mov dword [ebp - 0x24], 0x1c721796
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x100315b7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x96c]
call fcn.100161ad
mov dword [eax], 0xd72276b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10031598
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100315d7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe7c], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100315bf
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x100315f1
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, ebx
setg cl
cmp ecx, dword [ebp - 0x48]
jge 0x100315f1
xor eax, eax
mov esi, eax
jmp 0x100315f3
mov esi, ebx
push 3
lea ecx, [ebp - 0x96c]
call fcn.100161ad
xor ecx, ecx
mov edx, 0x54165132
push 2
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
cmp esi, eax
pop esi
setl cl
xor eax, eax
cmp ecx, edx
setle al
inc eax
neg eax
sbb eax, eax
inc eax
cmp eax, 0xe61780ee
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0xab3c
setl al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xffffffed
cmp dword [ebp - 0x1c], 0xffffffe4
jle 0x1003186d
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xb64]
mov dword [ebp - 0x24], 0xfafe44fa
push esi
call fcn.1001610f
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf18]
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x34], 0xa8e8
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], 0xfffffffb
push ebx
call fcn.1001610f
lea eax, [ebp - 0x12f4]
mov byte [ebp - 4], 0xa
movdqa xmm0, xmmword [0x10007f80]
lea ecx, [ebp - 0x1848]
push eax
lea eax, [ebp - 0x1304]
mov dword [ebp - 0x4c], 0xfff7
push eax
movdqu xmmword [ebp - 0x1304], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x16d]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf6c]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x48], 0x18e49b9d
mov dword [ebp - 0x28], 0x3b75a479
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10031729
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1524], 0x6171
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10031710
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop esi
cmp dword [ebp - 0x18], esi
jge 0x10031752
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb64]
call fcn.100161ad
mov dword [eax], 0x7b187b35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10031734
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10031770
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1840], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003175b
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003178c
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf18]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10031775
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x54]
jne 0x100317ec
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xf6c]
mov eax, dword [ebp - 0x50]
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x34]
xor edx, edx
neg eax
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x1520]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0xb64]
setl dl
xor ebx, ebx
cmp edx, 0xe6a4
setne bl
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [eax]
add eax, ebx
jne 0x100317e9
xor ebx, ebx
inc ebx
jmp 0x100317ee
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1838], ecx
mov eax, dword [ebp - 0x1520]
dec eax
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
sete cl
cmp ecx, 0xfff7
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul eax, ecx, 0x3af9
lea ecx, [ebp - 0xf6c]
mov dword [ebp - 0x44], eax
call fcn.10016191
lea ecx, [ebp - 0xf18]
call fcn.10016191
lea ecx, [ebp - 0xb64]
mov byte [ebp - 4], 8
call fcn.10016191
dec dword [ebp - 0x1c]
jmp 0x10031652
or eax, 0xffffffff
lea ecx, [ebp - 0x96c]
mov dword [ebp - 4], eax
call fcn.10016191
mov dword [ebp - 0x48], 8
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 0x1c], 0x91a049fe
push esi
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], esi
jge 0x100318c7
push dword [ebp - 0x40]
lea ecx, [ebp - 0xc6c]
call fcn.100161ad
mov dword [eax], 0x2374
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x100318a9
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
jl 0x10031963
push ebx
lea ecx, [ebp - 0x874]
call fcn.1001610f
mov byte [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x40], eax
jmp 0x10031909
push dword [ebp - 0x40]
lea ecx, [ebp - 0x874]
call fcn.100161ad
mov dword [eax], 0x70cd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x100318f2
push ebx
lea ecx, [ebp - 0xc6c]
call fcn.100161ad
mov esi, eax
lea ecx, [ebp - 0x874]
xor eax, eax
push eax
call fcn.100161ad
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov dword [esi], ecx
push eax
lea ecx, [ebp - 0x874]
call fcn.100161ad
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x874]
mov byte [ebp - 4], 0xc
call fcn.10016191
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jge 0x100318d4
push 2
xor eax, eax
pop esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003197c
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
or eax, 0xffffffff
lea ecx, [ebp - 0xc6c]
mov dword [ebp - 4], eax
call fcn.10016191
mov dword [ebp - 0x30], 0x4c90d297
lea ecx, [ebp - 0xf84]
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x38], 0xe043eef7
or edx, 0xffffffff
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], 0xcc90c63b
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x9d073d4
mov dword [ebp - 0x24], 0xc17a3f0a
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfe1f230
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xde6b786a
mov dword [ebp - 0x24], 0x181f51b4
push esi
call fcn.1001610f
mov dword [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x2c], 0xb96bc97
mov dword [ebp - 0x40], eax
jmp 0x10031a1f
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf84]
call fcn.100161ad
mov dword [eax], 0x5e175309
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x10031a08
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 0x56e7
setne cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xa1cf
mov eax, dword [ebp - 0x30]
setge cl
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x30]
setge dl
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setge al
add eax, dword [ebp - 0x38]
jne 0x10031a74
mov ecx, eax
cmp dword [ebp - 0x28], eax
je 0x10031a76
mov ecx, ebx
xor eax, eax
cmp ecx, 0x1f0d
setl al
xor edx, edx
cmp eax, 0xcc9f
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
add ecx, dword [ebp - 0x38]
je 0x10031acd
cmp dword [ebp - 0x38], eax
je 0x10031acd
mov dword [ebp - 0x34], 0x2d683a7e
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0xfffffff0
cmp dword [ebp - 0x28], 0xfffffff6
jg 0x10031b06
xor eax, eax
cmp dword [ebp - 0x34], eax
jne 0x10031b06
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff6
jle 0x10031abd
jmp 0x10031b06
mov ecx, 0xfff7
mov dword [ebp - 0xd98], ecx
mov dword [ebp - 0xd94], ecx
mov dword [ebp - 0xd90], ecx
mov dword [ebp - 0xd8c], ecx
mov dword [ebp - 0x38], eax
jmp 0x10031b00
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xd98], 5
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x10031aef
inc dword [ebp - 0x2c]
lea ecx, [ebp - 0xf84]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10016191
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x40], 0x9000d4e7
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], esi
jge 0x10031b49
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1798], 0xb9102071
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x10031b31
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x10031b7e
mov dword [ebp - 0x4c], 5
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], eax
jl 0x10031b7b
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031b76
push 0xda3
call edi
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor eax, eax
dec dword [ebp - 0x4c]
jns 0x10031b5d
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jle 0x10031b4e
push ebx
lea ecx, [ebp - 0x3ac]
call fcn.1001610f
mov dword [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
jge 0x10031bc5
push dword [ebp - 0x40]
lea ecx, [ebp - 0x3ac]
call fcn.100161ad
mov dword [eax], 0x665683c8
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x10031ba7
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031bd9
call edi
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
push eax
lea ecx, [ebp - 0x3ac]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x3ac]
push eax
call fcn.100161ad
xor ebx, ebx
lea ecx, [ebp - 0x3ac]
cmp dword [eax], ebx
sete bl
xor eax, eax
push eax
call fcn.100161ad
xor ecx, ecx
cmp ebx, dword [eax]
sete cl
xor eax, eax
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x3ac]
push eax
call fcn.100161ad
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x3ac]
setg bl
xor eax, eax
push eax
call fcn.100161ad
xor ecx, ecx
mov esi, 0x7cb3
cmp ebx, dword [eax]
setne cl
xor eax, eax
sub esi, ecx
lea ecx, [ebp - 0x3ac]
push eax
call fcn.100161ad
or ebx, 0xffffffff
lea ecx, [ebp - 0x3ac]
mov dword [ebp - 4], ebx
mov dword [eax], esi
call fcn.10016191
mov dword [ebp - 0x34], 0xfb0b0297
mov ecx, 0xfffc
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffff6
cmp dword [ebp - 0x1c], 5
jne 0x10031cfb
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10031cc7
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1324], 0xb055cc25
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 4
jl 0x10031cae
xor eax, eax
dec dword [ebp - 0x1324]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031cf2
push 0x20a3
push 0x870
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
je 0x10031ca5
mov dword [ebp - 0x34], 0xda2ae7b7
xor esi, esi
inc esi
xor edx, edx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x44], 0x8d9a2b82
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
neg eax
cmp eax, 0x8b16
mov eax, dword [ebp - 0x48]
setl cl
xor ebx, ebx
cmp ecx, eax
setge bl
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xd0e
setle al
mov dword [ebp - 0x44], eax
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10031db3
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10031d96
push 0x1ebf
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031da8
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
xor eax, eax
mov dword [ebp - 0x30], eax
or ebx, 0xffffffff
mov dword [ebp - 0x2c], 0x9c3d069f
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x4c], 5
mov dword [ebp - 0x38], 0x435
mov dword [ebp - 0x24], 0x7348
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], esi
jge 0x10031e0e
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x10fc], ebx
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x10031dfa
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x19
je 0x10031ecc
jmp 0x10031e1f
xor eax, eax
mov dword [ebp - 0x48], 0x638ecf54
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031e3e
push eax
push 0xbc
call edi
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x48], 0xd
jmp 0x10031eb9
push 4
lea ecx, [ebp - 0x984]
call fcn.1001610f
mov dword [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x1c], 0x23b1a956
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10031e8c
push dword [ebp - 0x40]
lea ecx, [ebp - 0x984]
call fcn.100161ad
mov dword [eax], 0x7222
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 4
jl 0x10031e6d
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10031ea2
push dword [ebp - 0x1c]
call fcn.100161ad
mov dword [eax], 0x8cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x984]
jl 0x10031e91
mov dword [ebp - 4], ebx
call fcn.10016191
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffffffa
je 0x10031e47
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x19
jne 0x10031e1d
cmp dword [ebp - 0x44], 0xae2718b9
jne 0x10031ed8
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10031ef7
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x35c]
mov eax, dword [ebp - 0x4c]
inc dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], 0xe1dc630d
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x44], eax
push esi
call fcn.1001610f
mov dword [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], esi
jge 0x10031f55
push dword [ebp - 0x40]
lea ecx, [ebp - 0x35c]
call fcn.100161ad
mov dword [eax], 0x665683c8
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x10031f37
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10031f69
call edi
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
push eax
lea ecx, [ebp - 0x35c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x35c]
push eax
call fcn.100161ad
xor ebx, ebx
lea ecx, [ebp - 0x35c]
cmp dword [eax], ebx
sete bl
xor eax, eax
push eax
call fcn.100161ad
xor ecx, ecx
cmp ebx, dword [eax]
sete cl
xor eax, eax
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x35c]
push eax
call fcn.100161ad
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x35c]
setg bl
xor eax, eax
push eax
call fcn.100161ad
xor ecx, ecx
mov esi, 0x7cb3
cmp ebx, dword [eax]
setne cl
xor eax, eax
sub esi, ecx
lea ecx, [ebp - 0x35c]
push eax
call fcn.100161ad
lea ecx, [ebp - 0x35c]
mov dword [eax], esi
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10016191
xor eax, eax
mov dword [ebp - 0x14], 8
mov dword [ebp - 0x24], eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10032019
push 0x1ebf
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10032029
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
or eax, 0xffffffff
lea ecx, [ebp - 0xdf4]
mov dword [ebp - 0x2c], eax
xor ebx, ebx
mov dword [ebp - 0x1c], 0xec2e0cf5
inc ebx
mov dword [ebp - 0x24], 0x2ae7b79f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x9ebf495e
push 2
pop esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x526c7153
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x6e523240
push 3
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100320b6
push dword [ebp - 0x40]
lea ecx, [ebp - 0xdf4]
call fcn.100161ad
mov dword [eax], 0xd40a7fc
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10032097
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100321fb
mov dword [ebp - 0x24], 0x5af8b513
lea ecx, [ebp - 0xb7c]
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x24], 0xba29f583
mov dword [ebp - 0x24], ebx
push esi
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10032110
mov ecx, 0xffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1808], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100320fc
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003212c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3b8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10032118
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003214e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18dc], 0x5f8d9a2b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032135
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10032174
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb7c]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10032156
xor eax, eax
mov dword [ebp - 0x3b8], eax
cmp dword [ebp - 0x3b8], ebx
jg 0x100321e9
jmp 0x10032186
xor eax, eax
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x9af3
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], eax
jmp 0x100321b0
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1668], 0xfffffff7
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jl 0x1003219f
push ebx
lea ecx, [ebp - 0xb7c]
call fcn.100161ad
mov edx, dword [ebp - 0x44]
mov esi, dword [eax]
lea ecx, [esi - 1]
mov dword [eax], ecx
cmp edx, esi
jge 0x100321d3
mov eax, ebx
jmp 0x100321d5
xor eax, eax
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x3b8]
push 2
pop esi
cmp dword [ebp - 0x3b8], ebx
jle 0x10032184
lea ecx, [ebp - 0xb7c]
mov byte [ebp - 4], 0x12
call fcn.10016191
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jl 0x100320be
or esi, 0xffffffff
lea ecx, [ebp - 0xdf4]
mov dword [ebp - 4], esi
call fcn.10016191
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x4c], 0x9c3d069f
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x3c], 0x435
mov dword [ebp - 0x24], 0x7348
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
jge 0x10032270
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xe8c], esi
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x1003225c
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x19
je 0x10032327
xor ebx, ebx
mov dword [ebp - 0x48], 0x638ecf54
mov byte [ebp - 0xd], bl
cmp byte [ebp - 0xd], 0
je 0x1003229e
push ebx
push 0xbc
call edi
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x48], 0xd
jmp 0x10032311
push 4
lea ecx, [ebp - 0x99c]
call fcn.1001610f
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x1c], 0x23b1a956
mov dword [ebp - 0x40], ebx
jmp 0x100322de
push dword [ebp - 0x40]
lea ecx, [ebp - 0x99c]
call fcn.100161ad
mov dword [eax], 0x7222
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 4
jl 0x100322c7
mov dword [ebp - 0x1c], ebx
jmp 0x100322fa
push dword [ebp - 0x1c]
call fcn.100161ad
mov dword [eax], 0x8cc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x99c]
jl 0x100322e9
mov dword [ebp - 4], esi
call fcn.10016191
dec dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xfffffffa
je 0x100322a7
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x19
jne 0x1003227f
xor ebx, ebx
inc ebx
cmp dword [ebp - 0x44], 0xae2718b9
jne 0x10032333
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x54]
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10032352
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], 0xe1dc630d
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0xb7c7ce53
mov dword [ebp - 0x1c], 0xe97eede0
mov dword [ebp - 0x24], 0xfffffff6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100323a7
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100323a4
call edi
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x10032390
movdqa xmm0, xmmword [0x10007f10]
lea eax, [ebp - 0x1474]
push eax
lea eax, [ebp - 0x1484]
mov dword [ebp - 0x34], 0xda2ae7b7
push eax
lea ecx, [ebp - 0x1678]
movdqu xmmword [ebp - 0x1484], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x16f]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x70c]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x15
or esi, 0xffffffff
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x30], 0x5bed8572
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], eax
jl 0x10032814
mov dword [ebp - 0x3c], 0x2e31d832
lea ecx, [ebp - 0x9b4]
mov dword [ebp - 0x48], 0xfffffff9
push 3
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10032471
push dword [ebp - 0x40]
lea ecx, [ebp - 0x9b4]
call fcn.100161ad
mov dword [eax], 0x401bc10b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10032452
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jg 0x100327f9
push 2
pop edi
movdqa xmm0, xmmword [0x10007f30]
lea eax, [ebp - 0x1334]
push eax
lea eax, [ebp - 0x1344]
push eax
lea ecx, [ebp - 0x1688]
movdqu xmmword [ebp - 0x1344], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x18d]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xec]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xec]
push edi
mov dword [ebp - 0x38], 0x98e64e6d
call fcn.100161ad
and dword [eax], 0
jmp 0x10032511
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
lea ecx, [ebp - 0x70c]
push dword [eax]
call fcn.100161ad
push edi
lea ecx, [ebp - 0xec]
mov dword [eax], 0xedcc590f
call fcn.100161ad
inc dword [eax]
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
cmp dword [eax], 4
jl 0x100324e4
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x100327dd
movdqa xmm0, xmmword [0x10007f40]
lea eax, [ebp - 0x1574]
push eax
lea eax, [ebp - 0x1584]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x44], 0x85b
lea ecx, [ebp - 0x1698]
push eax
movdqu xmmword [ebp - 0x1584], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x158]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xd2c]
push dword [esi]
call fcn.1001616b
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x100325a8
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x438], 0xfffffffa
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x10032590
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x10032654
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x100325f1
cmp dword [ebp - 0x3c], eax
je 0x100325c5
mov eax, dword [ebp - 0x1c]
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x3c]
jge 0x100325f1
xor eax, eax
mov ebx, eax
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
lea edx, [ebx + 1]
xor ebx, ebx
cmp edx, ecx
setl bl
imul ebx, dword [eax]
mov eax, dword [ebp - 0x3c]
sub ebx, eax
cmp ebx, 0xfffffff9
sbb eax, eax
inc eax
dec eax
jne 0x10032625
cmp dword [ebp - 0x3c], eax
jne 0x10032625
xor ebx, ebx
inc ebx
jmp 0x1003262a
xor ebx, ebx
inc ebx
mov eax, ebx
cmp eax, dword [ebp - 0x3c]
je 0x10032632
mov eax, dword [ebp - 0x44]
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
push 0
mov dword [eax], 0x1cf6a124
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
pop eax
jle 0x100325b5
cmp dword [ebp - 0x28], eax
je 0x10032670
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
cmp dword [eax], 0
je 0x1003266e
mov edi, ebx
jmp 0x10032672
xor eax, eax
mov edi, eax
push ebx
lea ecx, [ebp - 0x70c]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
mov esi, eax
xor eax, eax
cmp edi, ecx
setne al
xor edx, edx
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xa8ff013e
setne dl
cmp eax, edx
sbb eax, eax
neg eax
cmp eax, dword [esi]
jle 0x100326be
push 3
lea ecx, [ebp - 0x70c]
call fcn.100161ad
cmp dword [eax], 0
jne 0x100326be
xor eax, eax
mov ecx, eax
jmp 0x100326c0
mov ecx, ebx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
imul eax, ecx
inc edx
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x3c]
jl 0x100326e8
xor eax, eax
lea ecx, [ebp - 0xec]
push eax
call fcn.100161ad
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x100326f4
cmp dword [ebp - 0x38], eax
jne 0x100326f6
mov ebx, eax
push 3
lea ecx, [ebp - 0xd2c]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ebx, ecx
sete dl
xor ebx, ebx
imul edx, dword [eax]
mov eax, dword [ebp - 0x30]
cmp edx, 0x9c7d
mov edx, dword [ebp - 0x3c]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x438]
setne cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0xec]
mov esi, dword [ebp - 0x30]
push eax
call fcn.100161ad
mov dword [eax], esi
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x438]
add eax, ecx
cmp eax, dword [ebp - 0x38]
je 0x10032788
push 3
lea ecx, [ebp - 0xd2c]
call fcn.100161ad
push 2
pop edi
cmp dword [eax], 0
jne 0x1003278b
push edi
lea ecx, [ebp - 0xec]
call fcn.100161ad
jmp 0x1003278b
push 2
pop edi
mov eax, dword [ebp - 0x48]
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
push edi
setg bl
lea ecx, [ebp - 0x9b4]
imul ebx, dword [ebp - 0x38]
sub ebx, dword [ebp - 0x28]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.100161ad
lea ecx, [ebp - 0xd2c]
mov dword [eax], ebx
mov dword [ebp - 0x438], ebx
mov byte [ebp - 4], 0x17
call fcn.10016191
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
push 1
pop ebx
jle 0x10032531
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x16
call fcn.10016191
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 3
jle 0x10032481
lea ecx, [ebp - 0x9b4]
mov byte [ebp - 4], 0x15
call fcn.10016191
dec dword [ebp - 0x28]
jns 0x10032428
or esi, 0xffffffff
lea ecx, [ebp - 0x70c]
mov dword [ebp - 4], esi
call fcn.10016191
mov dword [ebp - 0x1c], 0xec2e0cf5
lea ecx, [ebp - 0xf9c]
mov dword [ebp - 0x24], 0x2ae7b79f
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x9ebf495e
push 2
pop edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x526c7153
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x6e523240
push 3
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x100328a6
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf9c]
call fcn.100161ad
mov dword [eax], 0xd40a7fc
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10032887
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 6
jge 0x100329fa
mov dword [ebp - 0x24], 0x5af8b513
lea ecx, [ebp - 0xb94]
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x24], 0xba29f583
mov dword [ebp - 0x24], ebx
push edi
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10032905
mov ecx, 0xffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16a8], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100328f1
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10032921
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x348], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003290d
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032943
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18d0], 0x5f8d9a2b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003292a
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10032969
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb94]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003294b
xor eax, eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], ebx
jg 0x100329db
jmp 0x1003297b
xor eax, eax
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0x9af3
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x40], eax
jmp 0x100329a5
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x16b8], 0xfffffff7
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x10032994
push ebx
lea ecx, [ebp - 0xb94]
call fcn.100161ad
mov edx, dword [ebp - 0x44]
mov esi, dword [eax]
lea ecx, [esi - 1]
mov dword [eax], ecx
cmp edx, esi
jge 0x100329c8
mov eax, ebx
jmp 0x100329ca
xor eax, eax
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x348]
cmp dword [ebp - 0x348], ebx
jle 0x10032979
lea ecx, [ebp - 0xb94]
mov byte [ebp - 4], 0x19
call fcn.10016191
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 6
jl 0x100328b3
or esi, 0xffffffff
lea ecx, [ebp - 0xf9c]
mov dword [ebp - 4], esi
call fcn.10016191
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x44], 0xb7c7ce53
mov dword [ebp - 0x1c], 0xe97eede0
mov dword [ebp - 0x24], 0xfffffff6
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10032a48
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10032a45
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jge 0x10032a2d
push 4
lea ecx, [ebp - 0xc84]
call fcn.1001610f
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x48], ebx
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], 0xaa50887c
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x24], 0xe2499e68
mov dword [ebp - 0x30], ebx
push 4
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x50b7f45b
mov dword [ebp - 0x24], 0x93cc9d6c
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], 0xc67a9553
mov dword [ebp - 0x24], 0x4f5fdfda
mov dword [ebp - 0x24], 0x726f2c0e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x24], 0x41af53c8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0x5ce76562
mov dword [ebp - 0x24], 0x1c721796
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x10032b09
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc84]
call fcn.100161ad
mov dword [eax], 0xd72276b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032aea
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10032b29
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x110c], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032b11
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x10032b43
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, ebx
setg cl
cmp ecx, dword [ebp - 0x48]
jge 0x10032b43
xor eax, eax
mov esi, eax
jmp 0x10032b45
mov esi, ebx
push 3
lea ecx, [ebp - 0xc84]
call fcn.100161ad
xor ecx, ecx
mov edx, 0x54165132
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
cmp esi, eax
setl cl
xor eax, eax
cmp ecx, edx
setle al
inc eax
neg eax
sbb eax, eax
inc eax
cmp eax, 0xe61780ee
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0xab3c
setl al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xffffffed
jmp 0x10032daf
mov dword [ebp - 0x4c], ebx
lea ecx, [ebp - 0x9cc]
mov dword [ebp - 0x24], 0xfafe44fa
push edi
call fcn.1001610f
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x1134]
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x34], 0xa8e8
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0xfffffffb
push ebx
call fcn.1001610f
lea eax, [ebp - 0x1354]
mov byte [ebp - 4], 0x1d
movdqa xmm0, xmmword [0x10007f80]
lea ecx, [ebp - 0x16c8]
push eax
lea eax, [ebp - 0x1364]
mov dword [ebp - 0x40], 0xfff7
push eax
movdqu xmmword [ebp - 0x1364], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x242]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf34]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x38], 0x18e49b9d
mov dword [ebp - 0x20], 0x3b75a479
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10032c73
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x14a4], 0x6171
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10032c5a
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10032c99
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9cc]
call fcn.100161ad
mov dword [eax], 0x7b187b35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10032c7b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10032cb7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1858], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10032ca2
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10032cd3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1134]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10032cbc
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x54]
jne 0x10032d33
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0xf34]
mov eax, dword [ebp - 0x50]
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x34]
xor edx, edx
neg eax
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x14a0]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
lea ecx, [ebp - 0x9cc]
setl dl
xor ebx, ebx
cmp edx, 0xe6a4
setne bl
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [eax]
add eax, ebx
jne 0x10032d30
xor ebx, ebx
inc ebx
jmp 0x10032d35
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x4c], eax
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x1850], ecx
mov eax, dword [ebp - 0x14a0]
dec eax
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
sete cl
cmp ecx, 0xfff7
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul eax, ecx, 0x3af9
lea ecx, [ebp - 0xf34]
mov dword [ebp - 0x44], eax
call fcn.10016191
lea ecx, [ebp - 0x1134]
call fcn.10016191
lea ecx, [ebp - 0x9cc]
mov byte [ebp - 4], 0x1b
call fcn.10016191
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe4
jg 0x10032ba6
or esi, 0xffffffff
lea ecx, [ebp - 0xc84]
mov dword [ebp - 4], esi
call fcn.10016191
mov dword [ebp - 0x44], 0x8d9a2b82
lea ecx, [ebp - 0x9e4]
mov dword [ebp - 0x1c], 0x91a049fe
push edi
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x10032e13
push dword [ebp - 0x40]
lea ecx, [ebp - 0x9e4]
call fcn.100161ad
mov dword [eax], 0x2374
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x10032df5
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
jl 0x10032eaf
push ebx
lea ecx, [ebp - 0x7cc]
call fcn.1001610f
mov byte [ebp - 4], 0x20
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x40], eax
jmp 0x10032e55
push dword [ebp - 0x40]
lea ecx, [ebp - 0x7cc]
call fcn.100161ad
mov dword [eax], 0x70cd
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jl 0x10032e3e
push ebx
lea ecx, [ebp - 0x9e4]
call fcn.100161ad
mov esi, eax
lea ecx, [ebp - 0x7cc]
xor eax, eax
push eax
call fcn.100161ad
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov dword [esi], ecx
push eax
lea ecx, [ebp - 0x7cc]
call fcn.100161ad
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x7cc]
mov byte [ebp - 4], 0x1f
call fcn.10016191
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jge 0x10032e20
xor eax, eax
or esi, 0xffffffff
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10032ecc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
lea ecx, [ebp - 0x9e4]
mov dword [ebp - 4], esi
call fcn.10016191
movdqa xmm0, xmmword [0x10007f10]
lea eax, [ebp - 0x1374]
push eax
lea eax, [ebp - 0x1384]
push eax
lea ecx, [ebp - 0x16d8]
movdqu xmmword [ebp - 0x1384], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x15a]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x724]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x21
or esi, 0xffffffff
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x30], 0x5bed8572
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], eax
jl 0x10033333
mov dword [ebp - 0x3c], 0x2e31d832
lea ecx, [ebp - 0x9fc]
mov dword [ebp - 0x48], 0xfffffff9
push 3
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10032f97
push dword [ebp - 0x40]
lea ecx, [ebp - 0x9fc]
call fcn.100161ad
mov dword [eax], 0x401bc10b
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 3
jl 0x10032f78
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x1003330b
movdqa xmm0, xmmword [0x10007f30]
lea eax, [ebp - 0x1534]
push eax
lea eax, [ebp - 0x1544]
push eax
lea ecx, [ebp - 0x16e8]
movdqu xmmword [ebp - 0x1544], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x21d]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x11c]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x11c]
push edi
mov dword [ebp - 0x38], 0x98e64e6d
call fcn.100161ad
and dword [eax], 0
jmp 0x1003302f
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
lea ecx, [ebp - 0x724]
push dword [eax]
call fcn.100161ad
push edi
lea ecx, [ebp - 0x11c]
mov dword [eax], 0xedcc590f
call fcn.100161ad
inc dword [eax]
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
cmp dword [eax], 4
jl 0x10033002
xor eax, eax
mov dword [ebp - 0x38], eax
jmp 0x100332ec
movdqa xmm0, xmmword [0x10007f40]
lea eax, [ebp - 0x1394]
push eax
lea eax, [ebp - 0x13a4]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x44], 0x85b
lea ecx, [ebp - 0x16f8]
push eax
movdqu xmmword [ebp - 0x13a4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x15e]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xbac]
push dword [esi]
call fcn.1001616b
xor eax, eax
mov byte [ebp - 4], 0x24
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], edi
jge 0x100330c1
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x448], 0xfffffffa
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], edi
jl 0x100330a9
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1003316d
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x1003310a
cmp dword [ebp - 0x3c], eax
je 0x100330de
mov eax, dword [ebp - 0x1c]
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x3c]
jge 0x1003310a
xor eax, eax
mov ebx, eax
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
lea edx, [ebx + 1]
xor ebx, ebx
cmp edx, ecx
setl bl
imul ebx, dword [eax]
mov eax, dword [ebp - 0x3c]
sub ebx, eax
cmp ebx, 0xfffffff9
sbb eax, eax
inc eax
dec eax
jne 0x1003313e
cmp dword [ebp - 0x3c], eax
jne 0x1003313e
xor ebx, ebx
inc ebx
jmp 0x10033143
xor ebx, ebx
inc ebx
mov eax, ebx
cmp eax, dword [ebp - 0x3c]
je 0x1003314b
mov eax, dword [ebp - 0x44]
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
push 0
mov dword [eax], 0x1cf6a124
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
pop eax
jle 0x100330ce
cmp dword [ebp - 0x28], eax
je 0x10033189
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
cmp dword [eax], 0
je 0x10033187
mov edi, ebx
jmp 0x1003318b
xor eax, eax
mov edi, eax
push ebx
lea ecx, [ebp - 0x724]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
mov esi, eax
xor eax, eax
cmp edi, ecx
setne al
xor edx, edx
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xa8ff013e
setne dl
cmp eax, edx
sbb eax, eax
neg eax
cmp eax, dword [esi]
jle 0x100331d7
push 3
lea ecx, [ebp - 0x724]
call fcn.100161ad
cmp dword [eax], 0
jne 0x100331d7
xor eax, eax
mov ecx, eax
jmp 0x100331d9
mov ecx, ebx
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
imul eax, ecx
inc edx
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x3c]
jl 0x10033201
xor eax, eax
lea ecx, [ebp - 0x11c]
push eax
call fcn.100161ad
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1003320d
cmp dword [ebp - 0x38], eax
jne 0x1003320f
mov ebx, eax
push 3
lea ecx, [ebp - 0xbac]
call fcn.100161ad
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ebx, ecx
sete dl
xor ebx, ebx
imul edx, dword [eax]
mov eax, dword [ebp - 0x30]
cmp edx, 0x9c7d
mov edx, dword [ebp - 0x3c]
setne bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x448]
setne cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x11c]
mov esi, dword [ebp - 0x30]
push eax
call fcn.100161ad
mov dword [eax], esi
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0x448]
mov eax, dword [ebp - 0x34]
add eax, ecx
cmp eax, dword [ebp - 0x38]
je 0x100332a1
push 3
lea ecx, [ebp - 0xbac]
call fcn.100161ad
push 2
pop edi
cmp dword [eax], 0
jne 0x100332a4
push edi
lea ecx, [ebp - 0x11c]
call fcn.100161ad
jmp 0x100332a4
push 2
pop edi
mov eax, dword [ebp - 0x48]
xor ebx, ebx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
push edi
setg bl
lea ecx, [ebp - 0x9fc]
imul ebx, dword [ebp - 0x38]
sub ebx, dword [ebp - 0x28]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.100161ad
lea ecx, [ebp - 0xbac]
mov dword [eax], ebx
mov dword [ebp - 0x448], ebx
mov byte [ebp - 4], 0x23
call fcn.10016191
inc dword [ebp - 0x38]
push 1
pop ebx
cmp dword [ebp - 0x38], 3
jle 0x1003304a
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 0x22
call fcn.10016191
inc dword [ebp - 0x3c]
push 1
pop ebx
cmp dword [ebp - 0x3c], 3
jle 0x10032f9f
lea ecx, [ebp - 0x9fc]
mov byte [ebp - 4], 0x21
call fcn.10016191
dec dword [ebp - 0x28]
push 1
pop ebx
jns 0x10032f4e
or esi, 0xffffffff
lea ecx, [ebp - 0x724]
mov dword [ebp - 4], esi
call fcn.10016191
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov edi, 0x9000d4e7
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setle dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
neg eax
cmp eax, 0x8b16
mov eax, dword [ebp - 0x14]
setl cl
xor ebx, ebx
cmp ecx, eax
setge bl
sub ebx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xd0e
setle al
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100333d1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x17a0], 0xb9102071
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100333b8
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x14], eax
inc ebx
jmp 0x1003340d
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], eax
jl 0x1003340a
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10033405
push 0xda3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x100333e8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x100333d9
push 4
lea ecx, [ebp - 0xa14]
call fcn.1001610f
mov dword [ebp - 4], 0x25
mov dword [ebp - 0x48], ebx
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], 0xaa50887c
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x24], 0xe2499e68
mov dword [ebp - 0x14], ebx
push 4
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x50b7f45b
mov dword [ebp - 0x24], 0x93cc9d6c
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], 0xc67a9553
mov dword [ebp - 0x24], 0x4f5fdfda
mov dword [ebp - 0x24], 0x726f2c0e
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x24], 0x41af53c8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x24], 0x5ce76562
mov dword [ebp - 0x24], 0x1c721796
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x100334cd
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa14]
call fcn.100161ad
mov dword [eax], 0xd72276b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100334ae
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100334ed
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe9c], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100334d5
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x10033507
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, ebx
setg cl
cmp ecx, dword [ebp - 0x48]
jge 0x10033507
xor eax, eax
mov esi, eax
jmp 0x10033509
mov esi, ebx
push 3
lea ecx, [ebp - 0xa14]
call fcn.100161ad
xor ecx, ecx
mov edx, 0x54165132
mov dword [eax], edx
mov eax, dword [ebp - 0x48]
cmp esi, eax
setl cl
xor eax, eax
cmp ecx, edx
setle al
inc eax
neg eax
sbb eax, eax
inc eax
cmp eax, 0xe61780ee
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0xab3c
setl al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xffffffed
jmp 0x10033776
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xcfc]
mov dword [ebp - 0x24], 0xfafe44fa
push 2
call fcn.1001610f
mov byte [ebp - 4], 0x26
lea ecx, [ebp - 0x114c]
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x34], 0xa8e8
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], 0xfffffffb
push ebx
call fcn.1001610f
lea eax, [ebp - 0x14b4]
mov byte [ebp - 4], 0x27
movdqa xmm0, xmmword [0x10007f80]
lea ecx, [ebp - 0x17b0]
push eax
lea eax, [ebp - 0x14c4]
mov dword [ebp - 0x4c], 0xfff7
push eax
movdqu xmmword [ebp - 0x14c4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x1c9]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf48]
push dword [esi]
call fcn.1001616b
mov byte [ebp - 4], 0x28
xor eax, eax
mov dword [ebp - 0x48], 0x18e49b9d
mov dword [ebp - 0x28], 0x3b75a479
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10033638
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13c4], 0x6171
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003361f
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10033660
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcfc]
call fcn.100161ad
mov dword [eax], 0x7b187b35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10033641
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003367e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1870], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10033669
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003369a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x114c]
call fcn.100161ad
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033683
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x54]
jne 0x100336fa
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0xf48]
mov eax, dword [ebp - 0x50]
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x34]
xor edx, edx
neg eax
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x13c0]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0xcfc]
setl dl
xor ebx, ebx
cmp edx, 0xe6a4
setne bl
xor eax, eax
push eax
call fcn.100161ad
mov eax, dword [eax]
add eax, ebx
jne 0x100336f7
xor ebx, ebx
inc ebx
jmp 0x100336fc
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x1868], ecx
mov eax, dword [ebp - 0x13c0]
dec eax
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
sete cl
cmp ecx, 0xfff7
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul eax, ecx, 0x3af9
lea ecx, [ebp - 0xf48]
mov dword [ebp - 0x44], eax
call fcn.10016191
lea ecx, [ebp - 0x114c]
call fcn.10016191
lea ecx, [ebp - 0xcfc]
mov byte [ebp - 4], 0x25
call fcn.10016191
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe4
jg 0x1003356a
or esi, 0xffffffff
lea ecx, [ebp - 0xa14]
mov dword [ebp - 4], esi
call fcn.10016191
mov dword [ebp - 0x34], 0xfb0b0297
mov ecx, 0xfffc
mov dword [ebp - 0x44], 2
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffff6
cmp dword [ebp - 0x1c], 5
jne 0x10033829
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100337f1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x15c4], 0xb055cc25
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100337d8
xor eax, eax
dec dword [ebp - 0x15c4]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10033820
push 0x20a3
push 0x870
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
je 0x100337cf
xor eax, eax
lea ecx, [ebp - 0xbc4]
mov byte [ebp - 0x55], al
mov dword [ebp - 0x1c], 0x91a049fe
push 2
call fcn.1001610f
xor eax, eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10033873
push dword [ebp - 0x14]
lea ecx, [ebp - 0xbc4]
call fcn.100161ad
mov dword [eax], 0x2374
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033854
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffee
jl 0x1003390f
push ebx
lea ecx, [ebp - 0x82c]
call fcn.1001610f
mov byte [ebp - 4], 0x2a
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x14], eax
jmp 0x100338b5
push dword [ebp - 0x14]
lea ecx, [ebp - 0x82c]
call fcn.100161ad
mov dword [eax], 0x70cd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1003389e
push ebx
lea ecx, [ebp - 0xbc4]
call fcn.100161ad
mov esi, eax
lea ecx, [ebp - 0x82c]
xor eax, eax
push eax
call fcn.100161ad
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov dword [esi], ecx
push eax
lea ecx, [ebp - 0x82c]
call fcn.100161ad
mov dword [ebp - 0x44], ebx
lea ecx, [ebp - 0x82c]
mov byte [ebp - 4], 0x29
call fcn.10016191
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jge 0x10033880
xor eax, eax
or esi, 0xffffffff
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003392c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
lea ecx, [ebp - 0xbc4]
mov dword [ebp - 4], esi
call fcn.10016191
cmp byte [ebp - 0x55], 0
je 0x1003394b
xor eax, eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
movdqa xmm0, xmmword [0x10007e90]
lea eax, [ebp - 0x13d4]
push eax
lea eax, [ebp - 0x13e4]
push eax
lea ecx, [ebp - 0x1810]
movdqu xmmword [ebp - 0x13e4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x164]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x17c]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x2b
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], 0xfffffffc
mov dword [ebp - 0x3c], 3
cmp dword [ebp - 0x3c], eax
jl 0x10033b0b
or eax, 0xffffffff
lea ecx, [ebp - 0x17c]
mov dword [ebp - 0x48], eax
push dword [ebp - 0x3c]
call fcn.100161ad
cmp dword [eax], 0
jne 0x10033b0b
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x10033af8
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0xa2c]
push 3
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10033a1a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa2c]
call fcn.100161ad
mov dword [eax], 0x658069d1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100339fb
xor eax, eax
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], eax
jl 0x10033ae0
mov dword [ebp - 0x2c], 0xfffffff8
lea ecx, [ebp - 0x17c]
push dword [ebp - 0x3c]
call fcn.100161ad
push dword [ebp - 0x48]
lea ecx, [ebp - 0x17c]
mov esi, eax
call fcn.100161ad
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], eax
jl 0x10033ad7
mov dword [ebp - 0x44], 0x87662b0a
lea ecx, [ebp - 0x17c]
push dword [ebp - 0x3c]
call fcn.100161ad
mov ecx, dword [ebp - 0x30]
xor ebx, ebx
push dword [ebp - 0x3c]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x17c]
setne bl
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x17c]
sub ebx, dword [eax]
sub ebx, 0x48bd921b
call fcn.100161ad
xor esi, esi
xor ecx, ecx
inc esi
cmp dword [eax], esi
setl cl
xor eax, eax
cmp ecx, ebx
setle al
xor ebx, ebx
add eax, 9
je 0x10033bad
inc ebx
lea ecx, [ebp - 0x17c]
push ebx
call fcn.100161ad
cmp dword [eax], 0
jne 0x10033ad7
dec dword [ebp - 0x2c]
jns 0x10033a61
dec dword [ebp - 0x30]
jns 0x10033a2a
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xa2c]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x2b
call fcn.10016191
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x100339dc
dec dword [ebp - 0x3c]
jns 0x100339b5
or eax, 0xffffffff
lea ecx, [ebp - 0x17c]
mov dword [ebp - 4], eax
call fcn.10016191
movdqa xmm0, xmmword [0x10007e90]
lea eax, [ebp - 0x14d4]
push eax
lea eax, [ebp - 0x14e4]
push eax
lea ecx, [ebp - 0x1760]
movdqu xmmword [ebp - 0x14e4], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x155]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x18c]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x2e
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], 0xfffffffc
mov dword [ebp - 0x3c], 3
cmp dword [ebp - 0x3c], eax
jl 0x10033dbf
or eax, 0xffffffff
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x48], eax
push dword [ebp - 0x3c]
call fcn.100161ad
cmp dword [eax], 0
jne 0x10033dbf
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x10033dac
or eax, 0xffffffff
mov dword [ebp - 0x40], 0x5b1510af
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x40], eax
inc ebx
cmp dword [ebp - 0x40], 3
jg 0x10033ad2
push 2
lea ecx, [ebp - 0x6b8]
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x14], eax
jmp 0x10033bf9
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6b8]
call fcn.100161ad
mov dword [eax], 0xa2f617a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033be2
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x17c]
push dword [ebp - 0x3c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x6b8]
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x6b8]
xor eax, eax
push eax
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x17c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x6b8]
push eax
call fcn.100161ad
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x17c]
push dword [ebp - 0x48]
call fcn.100161ad
push 2
lea ecx, [ebp - 0xa2c]
mov esi, eax
call fcn.100161ad
mov ecx, dword [eax]
add ecx, dword [esi]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x6b8]
mov dword [ebp - 0x44], 0x74d921f3
mov byte [ebp - 4], 0x2c
call fcn.10016191
inc dword [ebp - 0x40]
jmp 0x10033bc0
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0xc9c]
push 3
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x2f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10033cce
push dword [ebp - 0x14]
lea ecx, [ebp - 0xc9c]
call fcn.100161ad
mov dword [eax], 0x658069d1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10033caf
xor eax, eax
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], eax
jl 0x10033d94
mov dword [ebp - 0x2c], 0xfffffff8
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x3c]
call fcn.100161ad
push dword [ebp - 0x48]
lea ecx, [ebp - 0x18c]
mov esi, eax
call fcn.100161ad
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], eax
jl 0x10033d8b
mov dword [ebp - 0x44], 0x87662b0a
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x3c]
call fcn.100161ad
mov ecx, dword [ebp - 0x30]
xor ebx, ebx
push dword [ebp - 0x3c]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x18c]
setne bl
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x18c]
sub ebx, dword [eax]
sub ebx, 0x48bd921b
call fcn.100161ad
xor esi, esi
xor ecx, ecx
inc esi
cmp dword [eax], esi
setl cl
xor eax, eax
cmp ecx, ebx
setle al
xor ebx, ebx
add eax, 9
je 0x10033e61
inc ebx
lea ecx, [ebp - 0x18c]
push ebx
call fcn.100161ad
cmp dword [eax], 0
jne 0x10033d8b
dec dword [ebp - 0x2c]
jns 0x10033d15
dec dword [ebp - 0x30]
jns 0x10033cde
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xc9c]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x2e
call fcn.10016191
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x10033c90
dec dword [ebp - 0x3c]
jns 0x10033b86
or eax, 0xffffffff
lea ecx, [ebp - 0x18c]
mov dword [ebp - 4], eax
call fcn.10016191
movdqa xmm0, xmmword [0x10007e90]
lea eax, [ebp - 0x13f4]
push eax
lea eax, [ebp - 0x1404]
push eax
lea ecx, [ebp - 0x1780]
movdqu xmmword [ebp - 0x1404], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x168]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x19c]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x31
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], 0xfffffffc
mov dword [ebp - 0x3c], 3
cmp dword [ebp - 0x3c], eax
jl 0x10034073
or eax, 0xffffffff
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x48], eax
push dword [ebp - 0x3c]
call fcn.100161ad
cmp dword [eax], 0
jne 0x10034073
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x10034060
or eax, 0xffffffff
mov dword [ebp - 0x40], 0x5b1510af
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x40], eax
inc ebx
cmp dword [ebp - 0x40], 3
jg 0x10033d86
push 2
lea ecx, [ebp - 0x608]
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x30
mov dword [ebp - 0x14], eax
jmp 0x10033ead
push dword [ebp - 0x14]
lea ecx, [ebp - 0x608]
call fcn.100161ad
mov dword [eax], 0xa2f617a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033e96
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x3c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x608]
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x608]
xor eax, eax
push eax
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x18c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x608]
push eax
call fcn.100161ad
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x18c]
push dword [ebp - 0x48]
call fcn.100161ad
push 2
lea ecx, [ebp - 0xc9c]
mov esi, eax
call fcn.100161ad
mov ecx, dword [eax]
add ecx, dword [esi]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x44], 0x74d921f3
mov byte [ebp - 4], 0x2f
call fcn.10016191
inc dword [ebp - 0x40]
jmp 0x10033e74
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0xa44]
push 3
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x32
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10033f82
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa44]
call fcn.100161ad
mov dword [eax], 0x658069d1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10033f63
xor eax, eax
mov dword [ebp - 0x30], 3
cmp dword [ebp - 0x30], eax
jl 0x10034048
mov dword [ebp - 0x2c], 0xfffffff8
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x3c]
call fcn.100161ad
push dword [ebp - 0x48]
lea ecx, [ebp - 0x19c]
mov esi, eax
call fcn.100161ad
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], eax
jl 0x1003403f
mov dword [ebp - 0x44], 0x87662b0a
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x3c]
call fcn.100161ad
mov ecx, dword [ebp - 0x30]
xor ebx, ebx
push dword [ebp - 0x3c]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x19c]
setne bl
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x19c]
sub ebx, dword [eax]
sub ebx, 0x48bd921b
call fcn.100161ad
xor esi, esi
xor ecx, ecx
inc esi
cmp dword [eax], esi
setl cl
xor eax, eax
cmp ecx, ebx
setle al
xor ebx, ebx
add eax, 9
je 0x1003415e
inc ebx
lea ecx, [ebp - 0x19c]
push ebx
call fcn.100161ad
cmp dword [eax], 0
jne 0x1003403f
dec dword [ebp - 0x2c]
jns 0x10033fc9
dec dword [ebp - 0x30]
jns 0x10033f92
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0xa44]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x31
call fcn.10016191
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 3
jle 0x10033f44
dec dword [ebp - 0x3c]
jns 0x10033e3a
or esi, 0xffffffff
lea ecx, [ebp - 0x19c]
mov dword [ebp - 4], esi
call fcn.10016191
push 3
lea ecx, [ebp - 0xbdc]
call fcn.1001610f
push ebx
lea ecx, [ebp - 0xf60]
mov dword [ebp - 4], 0x34
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100340d8
push dword [ebp - 0x20]
lea ecx, [ebp - 0xbdc]
call fcn.100161ad
mov dword [eax], 0x4a2a4f40
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100340b9
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100340fe
push dword [ebp - 0x20]
lea ecx, [ebp - 0xf60]
call fcn.100161ad
mov dword [eax], 0x7c7be02
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100340e0
xor eax, eax
push eax
lea ecx, [ebp - 0xbdc]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0xf60]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
call fcn.10016191
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 4], esi
call fcn.10016191
mov dword [ebp - 0x14], edi
xor eax, eax
push 2
mov dword [ebp - 0x14], eax
pop edi
cmp dword [ebp - 0x14], edi
jge 0x10034156
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1790], 0xb9102071
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1003413e
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10034275
or eax, 0xffffffff
mov dword [ebp - 0x40], 0x5b1510af
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x40], eax
inc ebx
cmp dword [ebp - 0x40], 3
jg 0x1003403a
push 2
lea ecx, [ebp - 0x68c]
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x14], eax
jmp 0x100341aa
push dword [ebp - 0x14]
lea ecx, [ebp - 0x68c]
call fcn.100161ad
mov dword [eax], 0xa2f617a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10034193
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x3c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x68c]
push eax
call fcn.100161ad
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x68c]
xor eax, eax
push eax
call fcn.100161ad
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x19c]
call fcn.100161ad
xor eax, eax
lea ecx, [ebp - 0x68c]
push eax
call fcn.100161ad
mov dword [ebp - 0x34], ebx
lea ecx, [ebp - 0x19c]
push dword [ebp - 0x48]
call fcn.100161ad
push 2
lea ecx, [ebp - 0xa44]
mov esi, eax
call fcn.100161ad
mov ecx, dword [eax]
add ecx, dword [esi]
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x68c]
mov dword [ebp - 0x44], 0x74d921f3
mov byte [ebp - 4], 0x32
call fcn.10016191
inc dword [ebp - 0x40]
jmp 0x10034171
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], eax
jl 0x10034272
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003426d
push 0xda3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x10034250
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10034241
mov dword [ebp - 0x34], 0xfb0b0297
mov ecx, 0xfffc
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffff6
cmp dword [ebp - 0x1c], 5
jne 0x1003430e
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100342d6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1564], 0xb055cc25
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100342bd
xor eax, eax
dec dword [ebp - 0x1564]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034305
push 0x20a3
push 0x870
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 5
je 0x100342b4
movdqa xmm0, xmmword [0x10007e90]
lea eax, [ebp - 0x1414]
push eax
lea eax, [ebp - 0x1424]
push eax
lea ecx, [ebp - 0x16b0]
movdqu xmmword [ebp - 0x1424], xmm0
call fcn.100161bc
lea ecx, [ebp - 0x23e]
mov esi, eax
call fcn.10008f33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1c8]
push dword [esi]
call fcn.1001616b
mov dword [ebp - 4], 0x36
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x2c], 0x9d8d9242
mov dword [ebp - 0x44], 0x976b5a7d
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x14], 4
mov dword [ebp - 0x34], 0xd33b
mov dword [ebp - 0x44], 0xa4309063
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jge 0x100343d6
mov dword [ebp - 0x34], ebx
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x100343aa
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xc7e318b4
setge dl
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], ebx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
push 3
setg cl
xor eax, eax
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xa5c]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xfffffffc
mov dword [ebp - 0x34], 0x67b38eb1
call fcn.1001610f
xor eax, eax
mov byte [ebp - 4], 0x37
mov dword [ebp - 0x14], eax
jmp 0x1003444a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa5c]
call fcn.100161ad
mov dword [eax], 0xa61940c9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10034433
mov eax, dword [ebp - 0x3c]
mov esi, 0xab2aee5a
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x10034526
mov dword [ebp - 0x2c], 0x4990069f
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xd3380ee9
mov dword [ebp - 0x3c], eax
jmp 0x1003450c
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034534