Function at 0x10032a3d
Capabilities:
Allocate thread local storage
Create a process with modified i/o handles and window
Create process on windows
Create process suspended
Extract resource via kernel32 functions
Get common file path
Get disk size
Get file attributes
Get file system object information
Get geographical location
Get graphical window text
Get system information on windows
Identify system language via api
Log keystrokes
Log keystrokes via polling
Parse pe header
Query environment variable
Query or enumerate registry key
Suspend thread
Terminate process

Disassembly:
mov eax, 0x1008c6ca
call fcn.1008a830
mov eax, 0x1cf4
call fcn.10088560
push ebx
push esi
push edi
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x14e8]
push 3
mov byte [ebp - 0x71], dl
call fcn.10018e8a
xor eax, eax
or esi, 0xffffffff
mov dword [ebp - 4], eax
xor ebx, ebx
mov dword [ebp - 0x3c], esi
mov edi, 0x44f4cc51
mov dword [ebp - 0x38], esi
inc ebx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032aab
push dword [ebp - 0x18]
lea ecx, [ebp - 0x14e8]
call fcn.10018f28
mov dword [eax], 0x334
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032a8c
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10032aca
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a70], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032ab6
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
jl 0x10032b9a
movdqa xmm0, xmmword [0x10009510]
lea eax, [ebp - 0x15ac]
push eax
mov dword [ebp - 0x38], 0x6ff23b1a
lea eax, [ebp - 0x15bc]
mov dword [ebp - 0x38], 0xfffffffe
lea ecx, [ebp - 0x1a80]
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], esi
push eax
movdqu xmmword [ebp - 0x15bc], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x229]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1974]
push dword [esi]
call fcn.10018ee6
xor eax, eax
lea ecx, [ebp - 0x12f8]
inc eax
push eax
mov byte [ebp - 4], al
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], eax
jmp 0x10032b63
push dword [ebp - 0x10]
call fcn.10018f28
mov dword [eax], 0x7dcda720
inc dword [ebp - 0x10]
xor eax, eax
lea ecx, [ebp - 0x12f8]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032b52
dec dword [ebp - 0x48]
call fcn.10018f0c
xor eax, eax
lea ecx, [ebp - 0x1974]
mov byte [ebp - 4], al
call fcn.10018f0c
dec dword [ebp - 0x3c]
push 0xffffffffffffffff
pop esi
jns 0x10032ad6
xor ebx, ebx
inc ebx
or esi, esi
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x14e8]
mov dword [ebp - 4], esi
call fcn.10018f0c
push 3
lea ecx, [ebp - 0x1448]
call fcn.10018e8a
push 3
pop ecx
mov dword [ebp - 4], ecx
xor eax, eax
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10032bf3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1448]
call fcn.10018f28
mov dword [eax], 0x334
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032bd4
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10032c12
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1a28], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032bfe
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
jl 0x10032cdf
movdqa xmm0, xmmword [0x10009510]
lea eax, [ebp - 0x176c]
push eax
mov dword [ebp - 0x38], 0x6ff23b1a
lea eax, [ebp - 0x177c]
mov dword [ebp - 0x38], 0xfffffffe
lea ecx, [ebp - 0x1b60]
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], esi
push eax
movdqu xmmword [ebp - 0x177c], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x22b]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x19ec]
push dword [esi]
call fcn.10018ee6
push ebx
lea ecx, [ebp - 0x1310]
mov byte [ebp - 4], 4
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x10], eax
jmp 0x10032ca9
push dword [ebp - 0x10]
call fcn.10018f28
mov dword [eax], 0x7dcda720
inc dword [ebp - 0x10]
xor eax, eax
lea ecx, [ebp - 0x1310]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032c98
dec dword [ebp - 0x48]
call fcn.10018f0c
lea ecx, [ebp - 0x19ec]
mov byte [ebp - 4], 3
call fcn.10018f0c
dec dword [ebp - 0x3c]
push 1
pop ebx
push 0xffffffffffffffff
pop esi
jns 0x10032c1e
or esi, esi
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x1448]
mov dword [ebp - 4], esi
call fcn.10018f0c
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x3c], ebx
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10032d1e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe8c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032d0a
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10032d3e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1328], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032d26
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032ec0
push 2
lea ecx, [ebp - 0x580]
call fcn.10018e8a
push 6
pop eax
push 3
lea ecx, [ebp - 0xbec]
mov dword [ebp - 4], eax
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10032d90
push dword [ebp - 0x18]
lea ecx, [ebp - 0x580]
call fcn.10018f28
mov dword [eax], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10032d75
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10032dac
push dword [ebp - 0x18]
lea ecx, [ebp - 0xbec]
call fcn.10018f28
mov dword [eax], 0x166941fc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032d95
push ebx
lea ecx, [ebp - 0x580]
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x580]
mov dword [eax], 0xffffffe7
call fcn.10018f28
cmp dword [eax], 0
je 0x10032ea4
push ebx
lea ecx, [ebp - 0xc28]
call fcn.10018e8a
push 8
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x10], eax
inc eax
cmp dword [ebp - 0x10], eax
jge 0x10032e15
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc28]
call fcn.10018f28
mov dword [eax], 0xd7d393e7
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032df6
push eax
lea ecx, [ebp - 0x580]
call fcn.10018f28
mov esi, eax
lea ecx, [ebp - 0xbec]
xor eax, eax
inc eax
push eax
call fcn.10018f28
mov ecx, dword [esi]
xor ebx, ebx
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0xc28]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xe8c], eax
add eax, 0xffffab43
mov dword [ebp - 0x3c], eax
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 7
cmp ecx, 0xddd9cd44
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc28]
call fcn.10018f0c
xor eax, eax
lea ecx, [ebp - 0x580]
inc eax
push eax
call fcn.10018f28
lea ecx, [ebp - 0x580]
inc dword [eax]
xor eax, eax
inc eax
push eax
call fcn.10018f28
push 1
cmp dword [eax], ebx
pop ebx
jne 0x10032dd9
or esi, 0xffffffff
lea ecx, [ebp - 0xbec]
call fcn.10018f0c
lea ecx, [ebp - 0x580]
mov dword [ebp - 4], esi
call fcn.10018f0c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x14
jl 0x10032d46
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0xe88]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov eax, dword [ebp - 0x1328]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0xda37
jne 0x10032f00
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10032f00
mov ecx, eax
jmp 0x10032f05
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x1328]
sub ecx, eax
mov eax, 0xffff
cmp eax, ecx
mov eax, dword [ebp - 0x34]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
sub ecx, 0x7a88
mov dword [ebp - 0xe8c], ecx
mov dword [ebp - 0x2c], 0x20e83c77
mov dword [ebp - 0x48], 0x6542
mov dword [ebp - 0x38], 0xdb6d0374
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032f71
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x153c], 0xf37831e4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10032f58
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10032f87
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8bc], 0xb11accba
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10032f76
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1500]
mov dword [ebp - 0x1534], eax
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1538], eax
push 3
call fcn.10018e8a
mov dword [ebp - 4], 9
lea eax, [ebp - 0x15cc]
movdqa xmm0, xmmword [0x100094c0]
lea ecx, [ebp - 0x1bb8]
push eax
mov dword [ebp - 0x3c], esi
lea eax, [ebp - 0x15dc]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], 0x6ff55e00
mov dword [ebp - 0x48], 7
push eax
movdqu xmmword [ebp - 0x15dc], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x22d]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x8a0]
push dword [esi]
call fcn.10018ee6
xor eax, eax
mov byte [ebp - 4], 0xa
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], al
je 0x10033033
push eax
push 0xea6
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x8a0]
mov eax, dword [ebp - 0x3c]
xor ebx, ebx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
push ebx
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, 0xe7ed
push ebx
setge dl
xor ecx, ecx
cmp edx, dword [eax]
setne cl
imul esi, ecx, 0x9869
lea ecx, [ebp - 0x8a0]
call fcn.10018f28
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x8a0]
sub edi, esi
neg edi
push ebx
sbb edi, edi
inc edi
add edi, dword [eax]
call fcn.10018f28
push 3
lea ecx, [ebp - 0x8a0]
cmp edi, dword [eax]
setle bl
call fcn.10018f28
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 4], 9
mov dword [eax], ebx
call fcn.10018f0c
xor ebx, ebx
mov dword [ebp - 0x34], 0x44f4cc51
inc ebx
lea ecx, [ebp - 0x1340]
mov dword [ebp - 0x44], ebx
push 2
call fcn.10018e8a
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x3c], 0x57976326
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100330fb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1340]
call fcn.10018f28
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100330df
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x3c], eax
jl 0x1003312e
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10033129
push eax
push eax
push 0x13f8
push 0xe75
call ebx
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x10033109
lea ecx, [ebp - 0x1340]
mov byte [ebp - 4], 9
call fcn.10018f0c
mov dword [ebp - 0x30], 0x464b
lea ecx, [ebp - 0x990]
mov dword [ebp - 0x28], 0x4c506d44
xor eax, eax
mov dword [ebp - 0x10], 0x7b1c2a2c
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x48], 0xcf09cc25
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x38], 0x368a9017
mov dword [ebp - 0x38], 0xf298
mov dword [ebp - 0x3c], eax
push 3
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x18], eax
or edi, 0xffffffff
cmp dword [ebp - 0x18], 1
jge 0x100331ba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2ec], edi
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100331a3
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100331d0
push dword [ebp - 0x18]
call fcn.10018f28
mov dword [eax], 0x2d14b432
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
lea ecx, [ebp - 0x990]
jl 0x100331bf
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0x6e60be62
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x3c]
xor eax, eax
inc eax
push eax
call fcn.10018f28
cmp dword [eax], 0
je 0x10033210
push 2
lea ecx, [ebp - 0x990]
call fcn.10018f28
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
test eax, eax
setg cl
sub ecx, dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x2ec], ecx
lea ecx, [ebp - 0x990]
mov byte [ebp - 4], 9
call fcn.10018f0c
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033269
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1500]
call fcn.10018f28
mov dword [eax], 0x334
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033252
mov dword [ebp - 0x3c], 0xba394643
lea ecx, [ebp - 0x1460]
mov dword [ebp - 0x38], 0xa622a149
mov dword [ebp - 0x38], 0x672ca3c0
push 8
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x38], 0xd658edfe
mov dword [ebp - 0x38], 0x87a7525d
mov dword [ebp - 0x38], 0x9cf13e13
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x38], 0xa165018
mov dword [ebp - 0x38], 0x28405cef
push 3
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0xd
inc eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], 0x16488a97
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003330a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1cf0], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100332f1
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033332
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1460]
call fcn.10018f28
mov dword [eax], 0x64f6cbcb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033313
xor eax, eax
mov dword [ebp - 0x3c], 3
cmp dword [ebp - 0x3c], eax
jl 0x10033362
mov dword [ebp - 0x48], 0x9609c3fb
inc dword [ebp - 0x48]
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x1003335d
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x1003333e
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x1460]
mov byte [ebp - 4], 9
call fcn.10018f0c
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10033395
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc8], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10033381
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
jl 0x1003345d
movdqa xmm0, xmmword [0x10009510]
lea eax, [ebp - 0x184c]
push eax
mov dword [ebp - 0x38], 0x6ff23b1a
lea eax, [ebp - 0x185c]
mov dword [ebp - 0x38], 0xfffffffe
lea ecx, [ebp - 0x1be0]
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], edi
push eax
movdqu xmmword [ebp - 0x185c], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x22f]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1944]
push dword [esi]
call fcn.10018ee6
xor eax, eax
mov byte [ebp - 4], 0xe
inc eax
lea ecx, [ebp - 0x1358]
push eax
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x10], eax
jmp 0x1003342f
push dword [ebp - 0x10]
call fcn.10018f28
mov dword [eax], 0x7dcda720
inc dword [ebp - 0x10]
xor eax, eax
lea ecx, [ebp - 0x1358]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1003341e
dec dword [ebp - 0x34]
call fcn.10018f0c
lea ecx, [ebp - 0x1944]
mov byte [ebp - 4], 9
call fcn.10018f0c
dec dword [ebp - 0x3c]
jns 0x100333a1
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x1500]
mov dword [ebp - 4], edi
call fcn.10018f0c
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x28], eax
inc ebx
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x3c], ebx
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1003349f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc1c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003348b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x100334bf
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11ac], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100334a7
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1003363d
push 2
lea ecx, [ebp - 0x514]
call fcn.10018e8a
push 3
lea ecx, [ebp - 0xfdc]
mov dword [ebp - 4], 0x10
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10033512
push dword [ebp - 0x18]
lea ecx, [ebp - 0x514]
call fcn.10018f28
mov dword [eax], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100334f7
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003352e
push dword [ebp - 0x18]
lea ecx, [ebp - 0xfdc]
call fcn.10018f28
mov dword [eax], 0x166941fc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033517
push ebx
lea ecx, [ebp - 0x514]
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x514]
mov dword [eax], 0xffffffe7
call fcn.10018f28
cmp dword [eax], 0
je 0x10033621
push ebx
lea ecx, [ebp - 0xc04]
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x10], eax
inc eax
cmp dword [ebp - 0x10], eax
jge 0x10033595
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc04]
call fcn.10018f28
mov dword [eax], 0xd7d393e7
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10033576
push eax
lea ecx, [ebp - 0x514]
call fcn.10018f28
mov esi, eax
lea ecx, [ebp - 0xfdc]
xor eax, eax
inc eax
push eax
call fcn.10018f28
mov ecx, dword [esi]
xor ebx, ebx
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0xc04]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc1c], eax
add eax, 0xffffab43
mov dword [ebp - 0x3c], eax
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 0x11
cmp ecx, 0xddd9cd44
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc04]
call fcn.10018f0c
xor eax, eax
lea ecx, [ebp - 0x514]
inc eax
push eax
call fcn.10018f28
lea ecx, [ebp - 0x514]
inc dword [eax]
xor eax, eax
inc eax
push eax
call fcn.10018f28
push 1
cmp dword [eax], ebx
pop ebx
jne 0x1003355b
lea ecx, [ebp - 0xfdc]
call fcn.10018f0c
lea ecx, [ebp - 0x514]
mov dword [ebp - 4], edi
call fcn.10018f0c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x14
jl 0x100334c7
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0xc18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov eax, dword [ebp - 0x11ac]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0xda37
jne 0x1003367d
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x1003367d
mov ecx, eax
jmp 0x10033685
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x11ac]
sub ecx, eax
mov eax, 0xffff
cmp eax, ecx
mov eax, dword [ebp - 0x34]
push ebx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, 0x7a88
mov dword [ebp - 0xc1c], ecx
lea ecx, [ebp - 0x110]
call fcn.10018e8a
mov dword [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x28], 0xc75286e8
inc eax
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], 0x67e307b
mov dword [ebp - 0x14], 0x9ec4279c
mov dword [ebp - 0x34], 0x147b80be
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10033723
push dword [ebp - 0x10]
lea ecx, [ebp - 0x110]
call fcn.10018f28
mov dword [eax], 0x24039b64
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10033702
xor eax, eax
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x110]
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x20]
mov eax, 0xffffa1f5
sub eax, ecx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x48], eax
xor eax, eax
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x48]
xor ebx, ebx
neg ecx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x110]
setg bl
xor eax, eax
push eax
call fcn.10018f28
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x110]
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp ecx, dword [ebp - 0x2c]
mov esi, eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
setg dl
sub ecx, edx
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 3
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
imul eax, ecx, 0x6768
add eax, dword [esi]
jne 0x100337bb
cmp dword [ebp - 0x34], eax
jne 0x100337bb
xor ebx, ebx
inc ebx
jmp 0x100337c0
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
xor eax, eax
push eax
call fcn.10018f28
mov edx, dword [ebp - 0x3c]
mov esi, eax
mov ecx, dword [ebp - 0x14]
xor eax, eax
cmp ecx, edx
setg al
xor ecx, ecx
cmp eax, dword [esi]
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sete dl
xor ecx, ecx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 7
je 0x10033854
mov dword [ebp - 0x28], eax
jmp 0x10033849
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10033846
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffb
jge 0x10033832
jmp 0x10033966
mov dword [ebp - 0x34], 0x39b6
mov dword [ebp - 0x48], 0x1f9d99d
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], al
je 0x10033879
push eax
push 0xc0a
push eax
call dword [sym.imp.GDI32.dll_GetEnhMetaFileHeader]
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003395d
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x30], 0xf0cdbbf8
mov dword [ebp - 0x48], 0xec2c04dd
mov dword [ebp - 0x24], 0xfffffffe
push dword [ebp - 0x14]
call fcn.10018f28
push dword [ebp - 0x14]
lea ecx, [ebp - 0x110]
call fcn.10018f28
xor ebx, ebx
cmp dword [eax], ebx
jne 0x100338db
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x34], eax
jne 0x100338d9
push dword [ebp - 0x14]
lea ecx, [ebp - 0x110]
call fcn.10018f28
xor ebx, ebx
push dword [ebp - 0x14]
lea ecx, [ebp - 0x110]
call fcn.10018f28
push dword [ebp - 0x14]
lea ecx, [ebp - 0x110]
call fcn.10018f28
cmp dword [eax], ebx
je 0x10033912
push ebx
lea ecx, [ebp - 0x110]
call fcn.10018f28
cmp dword [eax], ebx
je 0x10033912
xor eax, eax
lea edx, [eax + 1]
jmp 0x10033918
xor eax, eax
xor ebx, ebx
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, 0x17e5ed53
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x110]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x14]
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x110]
call fcn.10018f28
xor ecx, ecx
push 1
cmp dword [eax], ebx
pop ebx
setne cl
mov dword [ebp - 0x48], ecx
inc dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
jle 0x10033881
lea ecx, [ebp - 0x110]
mov dword [ebp - 4], edi
call fcn.10018f0c
mov dword [ebp - 0x24], 0xe1757117
lea ecx, [ebp - 0x1370]
push 2
call fcn.10018e8a
xor eax, eax
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100339b9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1370]
call fcn.10018f28
mov dword [eax], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003399a
xor eax, eax
mov dword [ebp - 0x24], 4
cmp dword [ebp - 0x24], 0x12
jne 0x10033a19
xor ebx, ebx
inc ebx
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x10], eax
jmp 0x100339f9
inc dword [ebp - 0x48]
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x100339f6
push 0x12e3
push eax
push eax
push eax
push 0x268c
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x100339d4
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10033a10
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
je 0x100339c9
lea ecx, [ebp - 0x1370]
mov dword [ebp - 4], edi
call fcn.10018f0c
push 3
lea ecx, [ebp - 0x11e0]
call fcn.10018e8a
mov dword [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x2c], 0x20e83c77
mov dword [ebp - 0x48], 0x6542
mov dword [ebp - 0x38], 0xdb6d0374
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033a74
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1478], 0xf37831e4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033a5b
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033a8a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x794], 0xb11accba
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10033a79
mov eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x1bf0]
movdqa xmm0, xmmword [0x100094c0]
mov dword [ebp - 0x1470], eax
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1474], eax
lea eax, [ebp - 0x15ec]
push eax
lea eax, [ebp - 0x15fc]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x3c], 0x6ff55e00
mov dword [ebp - 0x48], 7
push eax
movdqu xmmword [ebp - 0x15fc], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x231]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x820]
push dword [esi]
call fcn.10018ee6
xor eax, eax
mov byte [ebp - 4], 0x16
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], al
je 0x10033b1f
push eax
push 0xea6
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x820]
mov eax, dword [ebp - 0x3c]
xor ebx, ebx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
push ebx
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, 0xe7ed
push ebx
setge dl
xor ecx, ecx
cmp edx, dword [eax]
setne cl
imul esi, ecx, 0x9869
lea ecx, [ebp - 0x820]
call fcn.10018f28
mov edi, dword [ebp - 0x48]
lea ecx, [ebp - 0x820]
sub edi, esi
neg edi
push ebx
sbb edi, edi
inc edi
add edi, dword [eax]
call fcn.10018f28
push 3
lea ecx, [ebp - 0x820]
cmp edi, dword [eax]
setle bl
call fcn.10018f28
lea ecx, [ebp - 0x820]
mov byte [ebp - 4], 0x15
mov dword [eax], ebx
call fcn.10018f0c
push 2
lea ecx, [ebp - 0x1388]
call fcn.10018e8a
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x3c], 0x57976326
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10033bda
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1388]
call fcn.10018f28
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033bbe
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], eax
jl 0x10033c10
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10033c0b
push eax
push eax
push 0x13f8
push 0xe75
call edi
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageW]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x10033beb
lea ecx, [ebp - 0x1388]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
or esi, 0xffffffff
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0x38], esi
xor eax, eax
mov dword [ebp - 0x30], 0x464b
mov dword [ebp - 0x10], 0x4c506d44
mov dword [ebp - 0x34], 0x7b1c2a2c
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x48], 0xcf09cc25
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x38], 0x368a9017
mov dword [ebp - 0x38], 0xf298
mov dword [ebp - 0x3c], eax
push 3
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10033ca1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x254], esi
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10033c87
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
jmp 0x10033cb7
push dword [ebp - 0x18]
call fcn.10018f28
mov dword [eax], 0x2d14b432
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
lea ecx, [ebp - 0xac8]
jl 0x10033ca6
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], 0x6e60be62
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x254]
mov eax, dword [ebp - 0x3c]
push ebx
call fcn.10018f28
cmp dword [eax], 0
je 0x10033cf4
push 2
lea ecx, [ebp - 0xac8]
call fcn.10018f28
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
test eax, eax
setg cl
sub ecx, dword [ebp - 0x254]
mov eax, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov dword [ebp - 0x254], ecx
lea ecx, [ebp - 0xac8]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
mov dword [ebp - 0x2c], 0x44f4cc51
lea ecx, [ebp - 0x1564]
mov dword [ebp - 0x3c], 0xba394643
mov dword [ebp - 0x38], 0xa622a149
mov dword [ebp - 0x38], 0x672ca3c0
push 8
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xd658edfe
mov dword [ebp - 0x38], 0x87a7525d
mov dword [ebp - 0x38], 0x9cf13e13
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x38], 0xa165018
mov dword [ebp - 0x38], 0x28405cef
push 3
call fcn.10018e8a
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0x16488a97
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10033dce
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ca0], 3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10033db5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033df6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1564]
call fcn.10018f28
mov dword [eax], 0x64f6cbcb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033dd7
xor eax, eax
mov dword [ebp - 0x3c], 3
cmp dword [ebp - 0x3c], eax
jl 0x10033e26
mov dword [ebp - 0x48], 0x9609c3fb
inc dword [ebp - 0x48]
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10033e21
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x10033e02
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x1564]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
mov dword [ebp - 0x30], ebx
xor eax, eax
mov dword [ebp - 0x18], 4
mov dword [ebp - 0x28], 0xa32a17d0
mov dword [ebp - 0x38], 0x7267
mov dword [ebp - 0x10], eax
jmp 0x10033e64
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1400], esi
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10033e57
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003405c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10033eb6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xae0], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033e9d
xor eax, eax
mov dword [ebp - 0x28], 3
cmp dword [ebp - 0x28], eax
jl 0x10034059
push 3
lea ecx, [ebp - 0x6ec]
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x1a
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xb5b06a83
mov dword [ebp - 0x10], eax
jmp 0x10033eff
push dword [ebp - 0x10]
call fcn.10018f28
mov dword [eax], 0x5610a143
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
lea ecx, [ebp - 0x6ec]
jl 0x10033eee
xor ebx, ebx
inc ebx
push ebx
call fcn.10018f28
mov dword [eax], 3
jmp 0x1003402a
push 8
pop eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x38], 0x525ac89d
push 3
mov dword [ebp - 0x48], 0xdc32
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x10033f95
mov dword [ebp - 0x24], 0x4491d0b6
mov dword [ebp - 0x38], 0x4db1d70f
mov dword [ebp - 0x24], eax
jmp 0x10033f8d
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x38], 0xaa435c52
mov dword [ebp - 0x38], 0x31364f2c
cmp dword [ebp - 0x10], eax
jne 0x10033f92
mov dword [ebp - 0x10], eax
jmp 0x10033f85
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], ebx
inc dword [ebp - 0x48]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10033f76
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10033f57
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10033f44
mov eax, dword [ebp - 0xae0]
mov ecx, 0x92e18e6f
cmp ecx, eax
mov eax, dword [ebp - 0x34]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xadc]
setl dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x3c]
setge bl
xor edx, edx
cmp eax, ecx
setne dl
xor eax, eax
cmp ebx, edx
setge al
cmp eax, dword [ebp - 0xadc]
je 0x10033fec
xor eax, eax
cmp dword [ebp - 0xad8], eax
jne 0x10033fec
mov edx, eax
jmp 0x10033ff1
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x7b0
setne al
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, esi
setne cl
xor ebx, ebx
mov dword [ebp - 0xadc], ecx
inc ebx
push ebx
lea ecx, [ebp - 0x6ec]
call fcn.10018f28
dec dword [eax]
push ebx
lea ecx, [ebp - 0x6ec]
call fcn.10018f28
cmp dword [eax], 0
jge 0x10033f1f
lea ecx, [ebp - 0x6ec]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
dec dword [ebp - 0x28]
jns 0x10033ec6
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
jge 0x10033e94
mov dword [ebp - 0x38], 0xfffffff8
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10034085
push eax
push 0x25fa
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
xor eax, eax
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x1003409c
push 0x2133
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ebx
jmp 0x100340bb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x11e0]
call fcn.10018f28
mov dword [eax], 0x334
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100340a4
push ebx
lea ecx, [ebp - 0x13a0]
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100340fb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x13a0]
call fcn.10018f28
mov dword [eax], 0x28c1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100340dd
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
inc ebx
cmp dword [ebp - 0x18], ebx
jge 0x10034124
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x43c], 0x16580849
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10034106
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x3c], 2
cmp dword [ebp - 0x3c], eax
jl 0x1003413e
push 6
pop eax
mov dword [ebp - 0x43c], eax
dec dword [ebp - 0x3c]
jns 0x10034133
mov dword [ebp - 0x43c], ebx
lea ecx, [ebp - 0x13a0]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10034174
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c00], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10034160
xor eax, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x24], 0xd2250db8
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], 0x3f9150fa
mov dword [ebp - 0x48], 0xbe8c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100341ac
push 0xfffffffffffffff6
pop edx
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x594], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1003419a
push 6
pop eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe8
jle 0x100341eb
mov dword [ebp - 0x48], 0x380
mov dword [ebp - 0x34], 0x62b000c
mov dword [ebp - 0x48], 9
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
xor eax, eax
inc eax
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe8
jg 0x100341b8
xor ebx, ebx
inc ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x594]
mov edx, dword [ebp - 0x590]
mov eax, dword [ebp - 0x24]
sub edx, 0x3b017290
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x594]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xcc7
setle al
imul edx, eax, 0x7a83
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x20]
cmp ecx, edx
setl al
cmp eax, ebx
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xf0b9
mov eax, dword [ebp - 0x594]
setne dl
sub edx, 0x71c2
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x10034bf6
jmp 0x100342a5
mov dword [ebp - 0x38], 0x6ff23b1a
lea ecx, [ebp - 0xea4]
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x34], 0x7186
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0x64ba8b35
push 3
call fcn.10018e8a
mov byte [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100342fc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1574], 0xb39523dd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100342e3
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034318
push dword [ebp - 0x18]
lea ecx, [ebp - 0xea4]
call fcn.10018f28
mov dword [eax], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034301
mov eax, dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1003432f
mov edx, ebx
cmp dword [ebp - 0x10], eax
jne 0x10034331
mov edx, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], 0x6729
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
jne 0x1003434f
cmp dword [ebp - 0x10], eax
jne 0x1003434f
mov ecx, eax
jmp 0x10034357
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x34]
sub ecx, eax
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp edx, ecx
setl al
imul eax, dword [ebp - 0x10]
sub eax, 0x7c8b
neg eax
sbb eax, eax
inc eax
cmp eax, 6
jle 0x10034385
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10034387
mov eax, ebx
mov esi, dword [ebp - 0x1574]
lea ecx, [ebp - 0xea4]
imul esi, eax
xor eax, eax
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x156c]
xor edx, edx
cmp esi, ecx
setg dl
mov dword [eax], edx
mov eax, dword [ebp - 0x1574]
mov eax, dword [ebp - 0x10]
add eax, 4
jne 0x100343c0
cmp dword [ebp - 0x24], eax
je 0x100343c2
mov eax, ebx
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
mov dword [ebp - 0x38], 0xfffffffc
or eax, 0xffffffff
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x18], 0xda439beb
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x34], 0xfffffffe
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003441a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x280], 0xbca6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10034401
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003443c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1150], 0x30dfddae
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034423
xor eax, eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x100345f9
xor eax, eax
lea ecx, [ebp - 0x58c]
inc eax
mov dword [ebp - 0x48], eax
push eax
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x10], eax
jmp 0x1003447c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x58c]
call fcn.10018f28
mov dword [eax], 4
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10034465
mov eax, dword [ebp - 0x18]
xor ebx, ebx
xor edx, edx
inc ebx
mov eax, dword [ebp + eax*4 - 0x280]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x280], edx
je 0x100344d6
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x280]
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x1148]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x280]
cmp eax, 0x14b1
mov eax, ebx
setne cl
cmp ecx, 0xa4c5706b
jbe 0x100344d8
mov eax, edx
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, 0xc7c44d99
setne dl
sub edx, 0xb91ee4c
neg edx
sbb edx, edx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
mov eax, dword [ebp + eax*4 - 0x280]
cmp ecx, eax
setg dl
sub edx, 0x271
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1148]
sub ecx, 0xaf90
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
lea ecx, [ebp - 0x58c]
setne bl
xor eax, eax
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x1144]
xor edx, edx
cmp ebx, ecx
lea ecx, [ebp - 0x58c]
setle dl
mov dword [eax], edx
xor eax, eax
push eax
call fcn.10018f28
mov ecx, dword [ebp - 0x34]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x114c], ecx
mov dword [ebp - 0x24], eax
inc eax
cmp dword [ebp - 0x24], eax
jg 0x100345de
xor ebx, ebx
mov eax, 0xffff
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x18]
push ebx
mov eax, dword [ebp + eax*4 - 0x280]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x280]
call fcn.10018f28
mov ecx, dword [ebp - 0x24]
mov edx, 0x458230b8
sub edx, ecx
lea ecx, [ebp - 0x58c]
push ebx
mov dword [eax], edx
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x58c]
mov esi, eax
call fcn.10018f28
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jle 0x10034581
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
dec dword [ebp - 0x18]
jns 0x10034448
xor ebx, ebx
inc ebx
movdqa xmm0, xmmword [0x10009510]
lea eax, [ebp - 0x178c]
push eax
lea eax, [ebp - 0x179c]
push eax
lea ecx, [ebp - 0x1b10]
movdqu xmmword [ebp - 0x179c], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x233]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x198c]
push dword [esi]
call fcn.10018ee6
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x11c4]
mov dword [ebp - 0x24], 0xe1757117
push 2
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10034686
push dword [ebp - 0x10]
lea ecx, [ebp - 0x11c4]
call fcn.10018f28
mov dword [eax], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034667
xor eax, eax
mov dword [ebp - 0x24], 4
or esi, 0xffffffff
cmp dword [ebp - 0x24], 0x12
jne 0x100346e2
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x10], eax
jmp 0x100346c6
inc dword [ebp - 0x48]
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x100346c3
push 0x12e3
push eax
push eax
push eax
push 0x268c
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x100346a1
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x100346dd
push eax
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
xor eax, eax
inc dword [ebp - 0x24]
jmp 0x10034690
lea ecx, [ebp - 0x11c4]
mov byte [ebp - 4], 0x1e
call fcn.10018f0c
push ebx
lea ecx, [ebp - 0x11d0]
call fcn.10018e8a
push 2
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x20
call fcn.10018e8a
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x9a8]
mov dword [ebp - 0x14], ebx
mov eax, 0xfffd
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x44], 0xab8d2321
push 4
call fcn.10018e8a
push ebx
lea ecx, [ebp - 0xa8c]
mov byte [ebp - 4], 0x22
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10034775
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.10018f28
mov dword [eax], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003475a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10034799
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9a8]
call fcn.10018f28
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1003477e
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100347c3
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa8c]
call fcn.10018f28
mov dword [eax], ebx
xor eax, eax
inc dword [ebp - 0x14]
inc eax
push eax
pop ebx
cmp dword [ebp - 0x14], eax
jl 0x100347a1
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x100349c5
jmp 0x100347d3
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], 0xdf2ddfda
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x100347f6
push eax
push eax
push 0x115a
call edi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x14c]
push dword [ebp - 0x14]
call fcn.10018f28
lea ecx, [ebp - 0x14c]
imul eax, dword [eax], 0xfffffffd
mov dword [ebp - 0x44], eax
push dword [ebp - 0x14]
call fcn.10018f28
mov edx, dword [ebp - 0x44]
xor ebx, ebx
mov ecx, dword [ebp - 0x14]
cmp edx, ecx
push dword [ebp - 0x14]
setl bl
lea ecx, [ebp - 0x14c]
add ebx, 0xdfa9
imul ebx, dword [eax]
mov dword [ebp - 0x3c], ebx
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x14c]
setge bl
xor eax, eax
push eax
call fcn.10018f28
xor ecx, ecx
push 3
cmp ebx, dword [eax]
setle cl
xor eax, eax
cmp eax, ecx
lea ecx, [ebp - 0x9a8]
sbb esi, esi
inc esi
call fcn.10018f28
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x34]
cmp eax, esi
setge cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
je 0x10034890
mov eax, dword [ebp - 0x44]
xor eax, eax
push eax
lea ecx, [ebp - 0x14c]
call fcn.10018f28
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x48]
add edx, ecx
xor ecx, ecx
cmp edx, dword [eax]
setl cl
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x14c]
push dword [ebp - 0x14]
call fcn.10018f28
imul eax, dword [eax], 0x8bd2
test eax, eax
jne 0x100348d3
push 2
lea ecx, [ebp - 0x9a8]
call fcn.10018f28
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x14c]
xor eax, eax
inc eax
push eax
call fcn.10018f28
cmp dword [eax], 0
je 0x100348f6
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x100348f8
lea esi, [eax + 1]
jmp 0x100348fa
xor eax, eax
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.10018f28
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x14c]
setne dl
xor ebx, ebx
cmp edx, esi
setg bl
xor eax, eax
push eax
call fcn.10018f28
lea ecx, [ebp - 0xa8c]
sub ebx, dword [eax]
xor eax, eax
push eax
call fcn.10018f28
sub ebx, dword [eax]
or eax, 0xffffffff
cmp ebx, eax
jl 0x10034943
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.10018f28
xor eax, eax
lea ecx, [ebp - 0xa8c]
push eax
call fcn.10018f28
push dword [ebp - 0x14]
xor ebx, ebx
lea ecx, [ebp - 0x14c]
xor esi, esi
cmp dword [eax], esi
setne bl
call fcn.10018f28
imul ecx, ebx, 0x36f
cmp ecx, dword [eax]
jg 0x10034996
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.10018f28
cmp dword [eax], esi
jne 0x10034996
xor eax, eax
jmp 0x1003499b
xor eax, eax
lea esi, [eax + 1]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x14c]
call fcn.10018f28
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x48]
setg cl
imul eax, ecx
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x14]
jns 0x100347d1
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0xa8c]
call fcn.10018f0c
lea ecx, [ebp - 0x9a8]
call fcn.10018f0c
lea ecx, [ebp - 0x14c]
mov byte [ebp - 4], 0x20
call fcn.10018f0c
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034a12
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x11d4], 0x48261f9c
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100349f7
xor eax, eax
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10034a24
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x10034a48
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10034a43
push 0x207c
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x10034a2c
mov dword [ebp - 0x10], eax
jmp 0x10034a64
push dword [ebp - 0x10]
lea ecx, [ebp - 0x11d0]
call fcn.10018f28
mov dword [eax], 0x7dcda720
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10034a4d
lea eax, [ebp - 0x160c]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x161c]
push eax
lea ecx, [ebp - 0x1a18]
movdqu xmmword [ebp - 0x161c], xmm0
call fcn.10018f37
lea ecx, [ebp - 0x2fe]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x8e0]
push dword [esi]
call fcn.10018ee6
mov byte [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x44], 0xa07563ff
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10034af2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2fc], 5
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10034ad7
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x10034b16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2f4], 0xe4c7ba3f
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10034afb
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10034b2c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c18], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10034b1b
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x8e0]
call fcn.10018f28
cmp dword [eax], 0
je 0x10034b85
mov eax, dword [ebp - 0x2f4]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x2f4]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10034b68
push ebx
lea ecx, [ebp - 0x8e0]
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x8e0]
call fcn.10018f28
xor eax, eax
mov dword [ebp - 0x2fc], 0xe71c
lea esi, [eax + 1]
jmp 0x10034b89
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0x8e0]
call fcn.10018f28
mov eax, dword [eax]
sub eax, esi
je 0x10034c3d
xor eax, eax
mov dword [ebp - 0x48], 0x1260
push 6
mov dword [ebp - 0x24], eax
pop eax
jmp 0x10034bba
mov dword [ebp - 0x48], 0xfffffffd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jl 0x10034bb0
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x8e0]
call fcn.10018f0c
dec dword [ebp - 0x2c]
lea ecx, [ebp - 0x11d0]
call fcn.10018f0c
lea ecx, [ebp - 0x198c]
mov byte [ebp - 4], 0x15
call fcn.10018f0c
dec dword [ebp - 0x28]
jns 0x100342a3
push 4
lea ecx, [ebp - 0x644]
call fcn.10018e8a
push 4
mov byte [ebp - 4], 0x25
xor eax, eax
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10034c35
push dword [ebp - 0x18]
lea ecx, [ebp - 0x644]
call fcn.10018f28
push 8
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034c17
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034d07
xor ebx, ebx
mov dword [ebp - 0x38], 0x3ca5435
inc ebx
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034c6e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1950], 0x3db9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034c55
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034c94
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c4], 6
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10034c76
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x48], 0x680a
cmp dword [ebp - 0x48], eax
je 0x10034ca6
dec dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1948]
xor ecx, ecx
cmp eax, ebx
mov eax, dword [ebp - 0x1c14]
setg cl
sub ecx, 0xd293d0ae
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x2fc]
setl dl
sub eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x2fc]
neg eax
sbb eax, eax
inc eax
imul eax, edx
imul ecx, eax
mov eax, dword [ebp - 0x3c]
imul eax, ecx
mov dword [ebp - 0x8c4], eax
jmp 0x10034bc2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x19d4], 0xd78f4f82
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034cf6
push ebx
lea ecx, [ebp - 0x644]
call fcn.10018f28
and dword [eax], 0
jmp 0x10034dcc
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0x509c
mov dword [ebp - 0x24], eax
jmp 0x10034d43
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x19a4], 0xfebfb2c4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10034d32
mov eax, dword [ebp - 0x3c]
mov ecx, 0xc80fc3a0
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setg dl
xor ebx, ebx
cmp eax, edx
setg bl
xor ecx, ecx
mov dword [ebp - 0x19d0], ebx
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x10]
cmp eax, ebx
setne cl
xor eax, eax
mov dword [ebp - 0x199c], ecx
inc eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], 0xc
cmp dword [ebp - 0x10], eax
jle 0x10034dbb
xor eax, eax
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], 0
je 0x10034daf
push 0x225d
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jg 0x10034d98
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x644]
call fcn.10018f28
xor ebx, ebx
inc dword [eax]
inc ebx
push ebx
lea ecx, [ebp - 0x644]
call fcn.10018f28
cmp dword [eax], 0x13
jge 0x10034d21
xor eax, eax
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], al
je 0x10034dff
push 0xeeb
push eax
push 0x16ac
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
lea ecx, [ebp - 0x644]
call fcn.10018f0c
dec dword [ebp - 0x30]
lea ecx, [ebp - 0x11e0]
mov dword [ebp - 4], esi
call fcn.10018f0c
push 2
lea ecx, [ebp - 0xe4]
call fcn.10018e8a
mov dword [ebp - 4], 0x26
xor eax, eax
mov dword [ebp - 0x14], 0xa876e6ba
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10034e63
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe4]
call fcn.10018f28
mov dword [eax], 0x99ff6065
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10034e44
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10034e85
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14a8], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10034e6c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10034eab
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8d4], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10034e8d
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], ebx
mov edi, 0x42c1fe72
cmp dword [ebp - 0x14], eax
jl 0x1003501c
mov dword [ebp - 0x2c], 0xfffffffd
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x10], 0xf748dc16
push dword [ebp - 0x14]
call fcn.10018f28
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe4]
mov esi, eax
call fcn.10018f28
mov ecx, dword [eax]
mov dword [esi], ecx
test ecx, ecx
jne 0x10034ffa
xor ebx, ebx
lea ecx, [ebp - 0xe4]
push ebx
call fcn.10018f28
push ebx
lea ecx, [ebp - 0xe4]
call fcn.10018f28
xor eax, eax
lea ecx, [ebp - 0xe4]
inc eax
push eax
call fcn.10018f28
lea ecx, [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
push dword [ebp - 0x14]
call fcn.10018f28
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0xe4]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push ebx
call fcn.10018f28
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe4]
call fcn.10018f28
push dword [ebp - 0x14]
xor ecx, ecx
cmp dword [eax], 1
setg cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xe4]
call fcn.10018f28
push dword [ebp - 0x14]
xor ecx, ecx
cmp dword [eax], ebx
sete cl
cmp ecx, dword [ebp - 0x2c]
lea ecx, [ebp - 0xe4]
setle bl
call fcn.10018f28
push dword [ebp - 0x14]
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
sub ecx, edi
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xe4]
call fcn.10018f28
mov ecx, dword [ebp - 0x2c]
cmp ecx, dword [eax]
jge 0x10034fce
xor eax, eax
lea ecx, [ebp - 0xe4]
inc eax
push eax
call fcn.10018f28
xor ebx, ebx
cmp dword [eax], ebx
je 0x10034fd0
xor eax, eax
inc eax
jmp 0x10034fd2
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xe4]
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x14a8], esi
push dword [ebp - 0x14]
call fcn.10018f28
cmp esi, dword [eax]
jg 0x10034ff7
mov eax, ebx
xor ebx, ebx
inc ebx
jmp 0x10034ffc
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x8d4], eax
lea ecx, [ebp - 0xe4]
push dword [ebp - 0x14]
call fcn.10018f28
dec dword [ebp - 0x14]
jns 0x10034ebc
or esi, 0xffffffff
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], esi
call fcn.10018f0c
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x3c], ebx
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10035058
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035044
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10035078
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11f0], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035060
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x100351f9
push 2
lea ecx, [ebp - 0x538]
call fcn.10018e8a
push 3
lea ecx, [ebp - 0x1084]
mov dword [ebp - 4], 0x27
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100350cb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x538]
call fcn.10018f28
mov dword [eax], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100350b0
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100350e7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1084]
call fcn.10018f28
mov dword [eax], 0x166941fc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100350d0
push ebx
lea ecx, [ebp - 0x538]
call fcn.10018f28
push ebx
lea ecx, [ebp - 0x538]
mov dword [eax], 0xffffffe7
call fcn.10018f28
cmp dword [eax], 0
je 0x100351dd
push ebx
lea ecx, [ebp - 0xc34]
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x29
mov dword [ebp - 0x10], eax
inc eax
cmp dword [ebp - 0x10], eax
jge 0x1003514e
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc34]
call fcn.10018f28
mov dword [eax], 0xd7d393e7
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1003512f
push eax
lea ecx, [ebp - 0x538]
call fcn.10018f28
mov esi, eax
lea ecx, [ebp - 0x1084]
xor eax, eax
inc eax
push eax
call fcn.10018f28
mov ecx, dword [esi]
xor ebx, ebx
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0xc34]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc4c], eax
add eax, 0xffffab43
mov dword [ebp - 0x3c], eax
call fcn.10018f28
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x28]
mov byte [ebp - 4], 0x28
cmp ecx, 0xddd9cd44
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xc34]
call fcn.10018f0c
xor eax, eax
lea ecx, [ebp - 0x538]
inc eax
push eax
call fcn.10018f28
lea ecx, [ebp - 0x538]
inc dword [eax]
xor eax, eax
inc eax
push eax
call fcn.10018f28
push 1
cmp dword [eax], ebx
pop ebx
jne 0x10035114
or esi, 0xffffffff
lea ecx, [ebp - 0x1084]
call fcn.10018f0c
lea ecx, [ebp - 0x538]
mov dword [ebp - 4], esi
call fcn.10018f0c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x14
jl 0x10035080
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0xc48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
cmp eax, ebx
mov eax, dword [ebp - 0x11f0]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, 0xda37
jne 0x10035239
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10035239
mov ecx, eax
jmp 0x10035241
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x11f0]
sub ecx, eax
movdqa xmm0, xmmword [0x10009590]
mov eax, 0xffff
cmp eax, ecx
mov eax, dword [ebp - 0x34]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
movdqu xmmword [ebp - 0x18fc], xmm0
setle dl
xor ecx, ecx
cmp edx, eax
lea eax, [ebp - 0x18ec]
push eax
setle cl
lea eax, [ebp - 0x18fc]
sub ecx, 0x7a88
mov dword [ebp - 0xc4c], ecx
lea ecx, [ebp - 0x1bf8]
push eax
call fcn.10018f37
lea ecx, [ebp - 0x2a8]
mov esi, eax
call fcn.1000a6f3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1ac]
push dword [esi]
call fcn.10018ee6
mov dword [ebp - 4], 0x2a
or esi, 0xffffffff
mov dword [ebp - 0x48], 0x96f377cc
mov eax, 0xffff
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x2c], 0x2ff7a2d4
mov dword [ebp - 0x30], 0x2fdd
mov dword [ebp - 0x44], 0xb334fe9d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10035311
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c], 0x184c506d
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100352f6
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10035334
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4a4], 0x3196add8
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10035319
xor eax, eax
push 3
pop ebx
mov dword [ebp - 0x6c], ebx
cmp dword [ebp - 0x6c], eax
jl 0x10035673
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x30c]
mov dword [ebp - 0xaf0], 0xbbfefa2e
mov dword [ebp - 0xaec], 0xbbfefa2e
mov dword [ebp - 0xae8], 0xbbfefa2e
mov dword [ebp - 0xae4], 0xbbfefa2e
push ebx
call fcn.10018e8a
xor eax, eax
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x10], eax
jmp 0x1003539c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x30c]
call fcn.10018f28
mov dword [eax], 2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035385
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1ac]
call fcn.10018f28
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x1ac]
call fcn.10018f28
mov ecx, dword [ebp - 0x6c]
xor edx, edx
mov dword [eax], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
lea ecx, [ebp - 0x1ac]
setle dl
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x6c]
call fcn.10018f28
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
jle 0x1003556c
mov dword [ebp - 0x10], 5
lea ecx, [ebp - 0x1ac]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x6c]
call fcn.10018f28
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xaec], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x3c], eax
jge 0x10035431
push ebx
lea ecx, [ebp - 0xebc]
call fcn.10018e8a
mov byte [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x34], 0x86206571
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x10], eax
jmp 0x100355a4
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 4], esi
call fcn.10018f0c
mov dword [ebp - 0x18], 0xa61928c1
xor eax, eax
mov dword [ebp - 0x30], 0xcf7921e1
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x2c], 0xc6578637
mov byte [ebp - 0x1a], al
cmp byte [ebp - 0x1a], al
je 0x100356b0
push eax
call dword [sym.imp.KERNEL32.dll_SuspendThread]
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
inc ebx
cmp dword [ebp - 0x18], 0xfffffff8
je 0x1003577e
jmp 0x100356c4
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x2c], 0xcf5aa05
cmp dword [ebp - 0x18], eax
jne 0x10035739
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
add eax, 0x5466bc65
je 0x100356ef
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, ebx
setne al
cmp dword [ebp - 0x18], eax
jge 0x10035760
push 2
lea ecx, [ebp - 0xcc]
call fcn.10018e8a
mov dword [ebp - 4], 0x2d
xor eax, eax
mov dword [ebp - 0x14], 0xa876e6ba
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100357c6
push dword [ebp - 0x14]
lea ecx, [ebp - 0xcc]
call fcn.10018f28
mov dword [eax], 0x99ff6065
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100357a7
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100357e8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1218], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100357cf
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003580e