Function at 0x10034d13
Capabilities:
Check os version
Delete file
Enumerate gui resources
Get common file path
Get file size
Parse pe header
Query or enumerate registry key
Query service status
Read .ini file
Set registry value

Disassembly:
mov eax, 0x1008c274
call fcn.1008ab58
mov eax, 0x16b4
call fcn.10085b40
push ebx
push esi
mov dword [ebp - 0x64], 1
mov esi, 0x1f782a18
mov dword [ebp - 0x48], esi
xor eax, eax
push edi
mov dword [ebp - 0x44], 8
mov edi, 0x8939f5fa
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x30], edi
push 4
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x54], eax
mov byte [ebp - 0xa5], dl
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10034d76
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x163c], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10034d65
mov eax, dword [ebp - 0x64]
xor edx, edx
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x64]
push 4
imul ecx, eax, 0xfffe
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x64]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x48]
setne bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor eax, eax
imul ecx, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], 8
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x1c], eax
pop ecx
jmp 0x10034df4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x168c], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10034de3
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x10]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 3
pop esi
push 0xffffffffffffffff
imul ecx, eax, 0xfffe
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x48]
setne bl
xor ecx, ecx
cmp eax, ebx
pop ebx
setge cl
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x54]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 9
jmp 0x10034fd5
xor eax, eax
lea ecx, [ebp - 0x870]
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], 0xfffffff9
push esi
call fcn.10019689
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10034e9e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x870]
call fcn.10019727
mov dword [eax], 0x62f63069
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034e80
xor eax, eax
mov dword [ebp - 0x38], 0xffffffef
cmp dword [ebp - 0x38], 0xffffffea
jne 0x10034fc4
jmp 0x10034eb3
xor eax, eax
mov dword [ebp - 0x18], 0xd3860a42
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
neg eax
jne 0x10034ecf
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10034ecf
mov ecx, eax
jmp 0x10034ed4
xor eax, eax
lea ecx, [eax + 1]
mov dword [ebp - 0x18], 0x44b0
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], ecx
imul eax, dword [ebp - 0x20], 0x3826
cmp eax, 0x56ebf4d3
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
cmp edx, eax
setge cl
xor eax, eax
add esi, ecx
lea ecx, [ebp - 0x870]
push eax
call fcn.10019727
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
add eax, esi
imul eax, dword [ebp - 0x3c]
test eax, eax
je 0x10034fae
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 0xfffffff9
jle 0x10034f9b
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10034f5c
push eax
push 0xc65
push 0x1448
push 0x1576
call edi
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10034f92
push dword [ebp - 0x18]
lea ecx, [ebp - 0x870]
call fcn.10019727
push dword [ebp - 0x18]
lea ecx, [ebp - 0x870]
mov esi, eax
call fcn.10019727
mov ecx, dword [esi]
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10034f65
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jg 0x10034f38
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10034fb4
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x10034fb4
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffea
je 0x10034eb1
push 3
pop esi
lea ecx, [ebp - 0x870]
mov dword [ebp - 4], ebx
call fcn.1001970b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xb
jle 0x10034e57
mov dword [ebp - 0x1c], 0x68206240
lea ecx, [ebp - 0xa18]
mov dword [ebp - 0x48], 8
mov dword [ebp - 0x44], 0xfffffff8
push 2
call fcn.10019689
push 4
xor ebx, ebx
lea ecx, [ebp - 0xb24]
pop eax
inc ebx
push eax
mov dword [ebp - 4], ebx
call fcn.10019689
mov byte [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x3c], 0xc29478c9
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1003504b
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa18]
call fcn.10019727
mov dword [eax], 0x1e6e2bf
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x1003502c
xor eax, eax
push 4
mov dword [ebp - 0x28], eax
pop ecx
cmp dword [ebp - 0x28], ecx
jge 0x10035073
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb24]
call fcn.10019727
push 4
mov dword [eax], ebx
inc dword [ebp - 0x28]
pop eax
cmp dword [ebp - 0x28], eax
jl 0x10035056
xor eax, eax
push 0xfffffffffffffffd
mov dword [ebp - 0x1c], 0x1b
pop ebx
jmp 0x10035098
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035095
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003507f
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0xb24]
push esi
call fcn.10019727
mov ecx, dword [ebp - 0x48]
lea ecx, [ebp - 0xa18]
dec dword [eax]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
xor eax, eax
push eax
call fcn.10019727
xor ebx, ebx
lea ecx, [ebp - 0xa18]
cmp dword [eax], 0x441791e6
setne bl
xor eax, eax
push eax
call fcn.10019727
lea ecx, [ebp - 0xb24]
mov dword [eax], ebx
call fcn.1001970b
or eax, 0xffffffff
lea ecx, [ebp - 0xa18]
mov dword [ebp - 4], eax
call fcn.1001970b
movdqa xmm0, xmmword [0x10007fd0]
lea eax, [ebp - 0x116c]
mov dword [ebp - 0x10], 0xfffffff6
lea ecx, [ebp - 0x149c]
mov dword [ebp - 0x1c], esi
push eax
mov dword [ebp - 0x18], 0x17ca4e8
lea eax, [ebp - 0x117c]
mov dword [ebp - 0x2c], 0xe6286c8a
mov dword [ebp - 0x44], 0x9329bfae
mov dword [ebp - 0x30], 0xc259dba5
push eax
movdqu xmmword [ebp - 0x117c], xmm0
call fcn.10019736
lea ecx, [ebp - 0x265]
mov esi, eax
call fcn.100093d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x8b0]
push dword [esi]
call fcn.100196e5
push 3
pop esi
mov dword [ebp - 4], esi
xor ebx, ebx
mov eax, dword [ebp - 0x10]
inc ebx
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, 0xcb7b
cmp ecx, dword [ebp - 0x18]
jne 0x1003521c
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0x421ad7ba
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x100351c8
cmp dword [ebp - 0x10], eax
jne 0x100351c8
mov edx, eax
jmp 0x100351d0
xor eax, eax
xor ebx, ebx
inc ebx
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x8b47
setne dl
xor ecx, ecx
sub edx, 9
cmp eax, edx
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, 0xdd9a
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setg cl
sub eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x10035311
mov dword [ebp - 0xa44], eax
mov dword [ebp - 0xa40], eax
mov dword [ebp - 0xa3c], eax
mov dword [ebp - 0xa38], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xbbbfefa2
mov dword [ebp - 0x60], 0xef321248
mov dword [ebp - 0x44], ebx
push 4
mov dword [ebp - 0x4c], 0x7be8
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10035263
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14c4], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10035256
inc dword [ebp - 0x44]
lea ecx, [ebp - 0x8b0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
push 2
call fcn.10019727
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xa44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x1c], 0xfff7
je 0x100352ae
cmp dword [ebp - 0x4c], eax
je 0x100352ae
xor ebx, ebx
lea edi, [eax + 1]
inc ebx
jmp 0x100352b0
mov edi, eax
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0x8b0]
mov dword [ebp - 0x44], eax
push 2
call fcn.10019727
push 2
lea ecx, [ebp - 0x8b0]
mov esi, eax
call fcn.10019727
mov esi, dword [esi]
xor ecx, ecx
push 3
imul esi, dword [eax]
mov eax, dword [ebp - 0x1c]
cmp edi, eax
mov eax, dword [ebp - 0xa44]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
sete cl
xor edx, edx
cmp ecx, 0xfff7
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setge cl
imul ecx, esi
pop esi
imul eax, ecx
mov dword [ebp - 0x14c4], eax
or eax, 0xffffffff
lea ecx, [ebp - 0x8b0]
mov dword [ebp - 4], eax
call fcn.1001970b
mov dword [ebp - 0x10], ebx
xor eax, eax
mov dword [ebp - 0x48], 0x1f782a18
mov dword [ebp - 0x44], 8
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x30], 0x8939f5fa
push 4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x1c], eax
pop ecx
jmp 0x1003535f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x166c], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003534e
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x10]
push 4
imul ecx, eax, 0xfffe
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x48]
setne bl
xor ecx, ecx
cmp eax, ebx
pop ebx
setge cl
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x54]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 9
cmp dword [ebp - 0x20], 0xb
jg 0x10035544
xor eax, eax
lea ecx, [ebp - 0x73c]
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], 0xfffffff9
push esi
call fcn.10019689
xor eax, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10035405
push dword [ebp - 0x10]
lea ecx, [ebp - 0x73c]
call fcn.10019727
mov dword [eax], 0x62f63069
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100353e7
xor eax, eax
mov dword [ebp - 0x38], 0xffffffef
cmp dword [ebp - 0x38], 0xffffffea
jne 0x1003552b
jmp 0x1003541a
xor eax, eax
mov dword [ebp - 0x18], 0xd3860a42
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
neg eax
jne 0x10035436
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10035436
mov ecx, eax
jmp 0x1003543b
xor eax, eax
lea ecx, [eax + 1]
mov dword [ebp - 0x18], 0x44b0
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], ecx
imul eax, dword [ebp - 0x20], 0x3826
cmp eax, 0x56ebf4d3
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
cmp edx, eax
setge cl
xor eax, eax
add esi, ecx
lea ecx, [ebp - 0x73c]
push eax
call fcn.10019727
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
add eax, esi
imul eax, dword [ebp - 0x3c]
test eax, eax
je 0x10035515
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], 0xfffffff9
jle 0x10035502
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100354c3
push eax
push 0xc65
push 0x1448
push 0x1576
call edi
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100354f9
push dword [ebp - 0x18]
lea ecx, [ebp - 0x73c]
call fcn.10019727
push dword [ebp - 0x18]
lea ecx, [ebp - 0x73c]
mov esi, eax
call fcn.10019727
mov ecx, dword [esi]
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100354cc
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jg 0x1003549f
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x1003551b
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1003551b
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffea
je 0x10035418
push 3
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x73c]
mov dword [ebp - 4], eax
call fcn.1001970b
inc dword [ebp - 0x20]
jmp 0x100353b4
mov dword [ebp - 0x10], 0xc0ce695e
lea ecx, [ebp - 0x534]
mov dword [ebp - 0x1c], 0x35555d5d
mov dword [ebp - 0x44], 0xdcede6a6
mov dword [ebp - 0x44], 0x5b818e96
push ebx
call fcn.10019689
mov dword [ebp - 4], 5
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x3c], 0xdcdedc29
mov dword [ebp - 0x48], 0x8019
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100355b0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e4], 0xb770a77c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10035598
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x100355d0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xce0], 0x5a0349b8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100355b8
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100355f6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x534]
call fcn.10019727
mov dword [eax], 0x431bb57c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100355d8
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1003560c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x590], 0xde87
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100355fb
mov eax, dword [ebp - 0x1e4]
mov ecx, 0x8552ad14
mov eax, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x1d8]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jne 0x1003564d
mov edx, eax
jmp 0x10035652
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1e0]
xor ecx, ecx
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x1c]
je 0x10035672
xor eax, eax
cmp dword [ebp - 0x1dc], eax
jne 0x10035672
mov edx, eax
jmp 0x10035677
xor eax, eax
lea edx, [eax + 1]
mov dword [ebp - 0xcd8], edx
xor ecx, ecx
mov eax, dword [ebp - 0x1dc]
cmp edx, eax
setle cl
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1d8]
mov eax, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1dc]
mov edx, dword [ebp - 0x10]
sub edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setle cl
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x1dc]
imul eax, dword [ebp - 0x10], 3
test eax, eax
je 0x100356d0
xor eax, eax
lea ecx, [ebp - 0x534]
push eax
call fcn.10019727
xor eax, eax
lea ecx, [ebp - 0x534]
push eax
call fcn.10019727
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xa21d
setle cl
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 5
jge 0x100356fb
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x100356fe
xor eax, eax
inc eax
cmp esi, eax
push 0xfffffffffffffff6
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xfffffffd
pop eax
setg cl
imul ecx, dword [ebp - 0x1e4]
neg ecx
sbb ecx, ecx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x58c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
lea ecx, [ebp - 0x534]
sete dl
xor eax, eax
sub edx, 0xd979
mov dword [ebp - 0x3c], edx
push eax
call fcn.10019727
mov ecx, dword [ebp - 0x3c]
xor ebx, ebx
push 7
pop edx
cmp ecx, edx
lea ecx, [ebp - 0x534]
setge bl
sub ebx, dword [eax]
xor eax, eax
push eax
call fcn.10019727
xor edx, edx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x5c78859b
setne al
xor ecx, ecx
cmp eax, 0x60ee
mov eax, 0xc96aae11
setle cl
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x58c]
jl 0x100357a9
xor eax, eax
cmp dword [ebp - 0xcd8], eax
je 0x100357ab
lea esi, [eax + 1]
jmp 0x100357ad
xor eax, eax
mov esi, eax
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x534]
call fcn.10019727
mov ecx, dword [ebp - 0x590]
xor edx, edx
cmp esi, ecx
push 4
setg dl
xor ecx, ecx
cmp edx, dword [eax]
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x58c]
setg cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
pop eax
setle cl
cmp ecx, eax
jne 0x100357f8
xor eax, eax
cmp dword [ebp - 0x1dc], eax
jne 0x100357f8
mov ecx, eax
jmp 0x100357fd
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x1e4]
imul eax, ecx
test eax, eax
je 0x10035819
xor eax, eax
cmp dword [ebp - 0xcd8], eax
je 0x1003581b
lea edx, [eax + 1]
jmp 0x1003581d
xor eax, eax
mov edx, eax
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebp - 0x1e4]
neg ecx
sbb ecx, ecx
add eax, 0xffff
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x48]
add ecx, edx
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x534]
setle dl
mov dword [ebp - 0x1dc], edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x44], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1001970b
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
xor eax, eax
push 3
mov dword [ebp - 0x10], 0xb9f9b31
mov dword [ebp - 0x10], 0xffffffe2
pop esi
cmp dword [ebp - 0x10], 0xffffffe8
jne 0x100359c9
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jg 0x100359bc
xor eax, eax
lea ecx, [ebp - 0x7e8]
inc eax
mov dword [ebp - 0x28], eax
push esi
call fcn.10019689
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x100358d0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7e8]
call fcn.10019727
mov dword [eax], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100358b2
xor eax, eax
mov dword [ebp - 0x28], 0xffffffe9
jmp 0x10035924
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ecx
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100358fc
push eax
push eax
push eax
push eax
push eax
push eax
push 0x1236
push eax
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1003591c
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035919
push eax
push 0xc6b
push eax
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10035901
inc dword [ebp - 0x28]
push 4
pop ecx
cmp dword [ebp - 0x28], ecx
jle 0x100358d9
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x1003599d
mov dword [ebp - 0x1c], 0x3dda37bb
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035956
push eax
push eax
push 0x2325
call edi
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10035995
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7e8]
call fcn.10019727
push dword [ebp - 0x28]
lea ecx, [ebp - 0x7e8]
mov esi, eax
call fcn.10019727
mov ecx, dword [esi]
push dword [ebp - 0x28]
mov dword [eax], ecx
lea ecx, [ebp - 0x7e8]
call fcn.10019727
dec dword [ebp - 0x1c]
jns 0x1003595e
xor eax, eax
dec dword [ebp - 0x28]
jns 0x10035934
push 3
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x7e8]
mov dword [ebp - 4], eax
call fcn.1001970b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10035890
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x100359c9
inc dword [ebp - 0x10]
jmp 0x10035877
mov dword [ebp - 0x44], 0x1f782a18
mov dword [ebp - 0x20], 0x25b9b55b
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100359f7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14ac], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100359df
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
cmp dword [ebp - 0x20], 0x1c
jle 0x10035a68
mov dword [ebp - 0x1c], 0x1f20
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x10035a5e
mov dword [ebp - 0x18], 0xbd4dfbd6
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jg 0x10035a5b
or ecx, 0xffffffff
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jg 0x10035a53
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035a48
push ebx
push 0x1075
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x10035a2f
or ecx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10035a24
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10035a12
inc dword [ebp - 0x20]
jmp 0x100359fd
push 8
pop eax
mov dword [ebp - 0x58], eax
lea ecx, [ebp - 0x970]
mov dword [ebp - 0x1c], 0x68206240
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 0xfffffff8
push 2
call fcn.10019689
push 7
pop eax
push 4
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xb3c]
pop eax
push eax
call fcn.10019689
mov byte [ebp - 4], 8
xor eax, eax
mov dword [ebp - 0x3c], 0xc29478c9
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10035ad6
push dword [ebp - 0x28]
lea ecx, [ebp - 0x970]
call fcn.10019727
mov dword [eax], 0x1e6e2bf
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10035ab7
xor eax, eax
push 4
mov dword [ebp - 0x28], eax
pop ecx
cmp dword [ebp - 0x28], ecx
jge 0x10035afe
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb3c]
call fcn.10019727
push 4
mov dword [eax], ebx
inc dword [ebp - 0x28]
pop eax
cmp dword [ebp - 0x28], eax
jl 0x10035ae1
xor eax, eax
push 0xfffffffffffffffd
mov dword [ebp - 0x1c], 0x1b
pop ebx
jmp 0x10035b23
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035b20
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetPropA]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10035b0a
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0xb3c]
push esi
call fcn.10019727
mov ecx, dword [ebp - 0x48]
lea ecx, [ebp - 0x970]
dec dword [eax]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x48]
xor eax, eax
push eax
call fcn.10019727
xor ebx, ebx
lea ecx, [ebp - 0x970]
cmp dword [eax], 0x441791e6
setne bl
xor eax, eax
push eax
call fcn.10019727
lea ecx, [ebp - 0xb3c]
mov dword [eax], ebx
call fcn.1001970b
or edi, 0xffffffff
lea ecx, [ebp - 0x970]
mov dword [ebp - 4], edi
call fcn.1001970b
movdqa xmm0, xmmword [0x10007fd0]
lea ecx, [ebp - 0x13c4]
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x12cc]
push 3
pop ebx
mov dword [ebp - 0x1c], ebx
push eax
mov dword [ebp - 0x18], 0x17ca4e8
lea eax, [ebp - 0x12dc]
mov dword [ebp - 0x2c], 0xe6286c8a
mov dword [ebp - 0x44], 0x9329bfae
mov dword [ebp - 0x30], 0xc259dba5
push eax
movdqu xmmword [ebp - 0x12dc], xmm0
call fcn.10019736
lea ecx, [ebp - 0x267]
mov esi, eax
call fcn.100093d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x8c8]
push dword [esi]
call fcn.100196e5
push 9
pop esi
mov dword [ebp - 4], esi
xor edx, edx
mov eax, dword [ebp - 0x10]
inc edx
mov eax, dword [ebp - 0x1c]
mov ecx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
cmp ecx, dword [ebp - 0x18]
jne 0x10035ca7
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0x421ad7ba
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10035c57
cmp dword [ebp - 0x10], eax
jne 0x10035c57
mov edx, eax
jmp 0x10035c5c
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x8b47
setne dl
xor ecx, ecx
sub edx, esi
cmp eax, edx
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, 0xdd9a
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setg cl
sub eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x10035d98
mov eax, 0xcb7b
mov dword [ebp - 0xa64], eax
mov dword [ebp - 0xa60], eax
mov dword [ebp - 0xa5c], eax
mov dword [ebp - 0xa58], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xbbbfefa2
mov dword [ebp - 0x60], 0xef321248
mov dword [ebp - 0x44], edx
push 4
mov dword [ebp - 0x4c], 0x7be8
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10035cf3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14dc], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10035ce6
inc dword [ebp - 0x44]
lea ecx, [ebp - 0x8c8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
push 2
call fcn.10019727
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xa64]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x1c], 0xfff7
je 0x10035d3b
cmp dword [ebp - 0x4c], eax
je 0x10035d3b
lea edi, [eax + 1]
jmp 0x10035d3d
mov edi, eax
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0x8c8]
mov dword [ebp - 0x44], eax
push 2
call fcn.10019727
push 2
lea ecx, [ebp - 0x8c8]
mov esi, eax
call fcn.10019727
mov esi, dword [esi]
xor ecx, ecx
imul esi, dword [eax]
mov eax, dword [ebp - 0x1c]
cmp edi, eax
mov eax, dword [ebp - 0xa64]
sete cl
xor edx, edx
cmp ecx, 0xfff7
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setge cl
imul ecx, esi
imul eax, ecx
or edi, 0xffffffff
mov dword [ebp - 0x14dc], eax
lea ecx, [ebp - 0x8c8]
mov dword [ebp - 4], edi
call fcn.1001970b
mov dword [ebp - 0x30], 0x8939f5fa
lea ecx, [ebp - 0x754]
push ebx
call fcn.10019689
mov dword [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x18], 0x432a2768
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035df2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x754]
call fcn.10019727
mov dword [eax], 0xbb2c2135
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035dd4
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x10035e8b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x754]
call fcn.10019727
xor ebx, ebx
cmp dword [eax], ebx
je 0x10035e2c
push dword [ebp - 0x18]
lea ecx, [ebp - 0x754]
call fcn.10019727
cmp dword [eax], ebx
je 0x10035e2c
xor eax, eax
lea esi, [eax + 1]
jmp 0x10035e30
xor eax, eax
mov esi, eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x754]
call fcn.10019727
cmp dword [eax], 0xffff
ja 0x10035e52
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10035e54
lea ecx, [eax + 1]
jmp 0x10035e56
xor eax, eax
mov ecx, eax
xor eax, eax
cmp esi, ecx
setle al
mov dword [ebp - 0x2c], eax
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10035e7b
push eax
push 0xff4
push 0x28b
call dword [sym.imp.GDI32.dll_CreatePen]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10035dff
push 3
pop ebx
lea ecx, [ebp - 0x754]
mov dword [ebp - 4], edi
call fcn.1001970b
xor edi, edi
lea ecx, [ebp - 0x9d0]
xor eax, eax
inc edi
mov dword [ebp - 0x40], eax
push edi
call fcn.10019689
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], 0x1ad67a4b
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x1c], 0x11e7bff4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10035ef6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9d0]
call fcn.10019727
mov dword [eax], 0x75dc
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10035ed2
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x1003600b
mov dword [ebp - 0x10], 5
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035f2f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1608], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035f17
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jg 0x10035f6c
mov dword [ebp - 0x30], 0xe7308f47
lea ecx, [ebp - 0x9d0]
push dword [ebp - 0x10]
call fcn.10019727
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9d0]
call fcn.10019727
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
xor eax, eax
inc dword [ebp - 0x1c]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10035f37
mov dword [ebp - 0x20], eax
jmp 0x10035fac
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035f82
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035fa9
push 0x6ec
push 0x1314
push 0x607
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10035f71
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x10036002
mov dword [ebp - 0x1c], eax
jmp 0x10035ff8
mov dword [ebp - 0x44], 0xc097bc8b
inc dword [ebp - 0x44]
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10035ff5
push eax
push eax
push eax
push 0x1e6c
push 0x1d82
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10035fbe
dec dword [ebp - 0x20]
jns 0x10035fb9
dec dword [ebp - 0x18]
jns 0x10035f02
or ebx, 0xffffffff
lea ecx, [ebp - 0x9d0]
mov dword [ebp - 4], ebx
call fcn.1001970b
push edi
lea ecx, [ebp - 0x210]
call fcn.10019689
lea eax, [ebp - 0x118c]
mov dword [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x119c]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x141c]
movdqu xmmword [ebp - 0x119c], xmm0
call fcn.10019736
lea ecx, [ebp - 0x269]
mov esi, eax
call fcn.100093d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x4ac]
push dword [esi]
call fcn.100196e5
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edi
jge 0x1003609b
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1a8], edi
xor eax, eax
inc dword [ebp - 0x28]
inc eax
push eax
pop edi
cmp dword [ebp - 0x28], eax
jl 0x1003607f
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edi
jge 0x100360c3
push dword [ebp - 0x28]
lea ecx, [ebp - 0x210]
call fcn.10019727
mov dword [eax], ebx
xor eax, eax
inc dword [ebp - 0x28]
inc eax
cmp dword [ebp - 0x28], eax
jl 0x100360a3
xor edi, edi
xor eax, eax
inc edi
push eax
lea ecx, [ebp - 0x210]
call fcn.10019727
and dword [eax], 0
jmp 0x100360ff
xor eax, eax
lea ecx, [ebp - 0x210]
push eax
call fcn.10019727
lea ecx, [ebp - 0x210]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x1a8], 0x743d
xor eax, eax
push eax
call fcn.10019727
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x210]
push eax
call fcn.10019727
cmp dword [eax], edi
jl 0x100360d4
xor eax, eax
lea ecx, [ebp - 0x4ac]
push eax
call fcn.10019727
lea ecx, [ebp - 0x4ac]
and dword [eax], 0
xor eax, eax
push eax
call fcn.10019727
cmp dword [eax], 0
jl 0x100362c0
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003615d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b4], 0xc4279c41
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10036144
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036178
push 0x1334
push 0x1cce
call dword [sym.imp.USER32.dll_SetCaretPos]
xor eax, eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], eax
jg 0x10036298
push 7
pop eax
mov dword [ebp - 0x44], 0x9193c1de
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x44], eax
push dword [ebp - 0x1b0]
call fcn.10019727
lea ecx, [ebp - 0x4ac]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
xor eax, eax
push eax
call fcn.10019727
mov esi, eax
lea ecx, [ebp - 0x4ac]
xor eax, eax
push eax
call fcn.10019727
xor ebx, ebx
mov ecx, dword [eax]
mov ecx, dword [ebp + ecx*4 - 0x1a8]
mov eax, dword [esi]
mov eax, dword [ebp + eax*4 - 0x1a8]
cmp eax, ecx
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0x210]
setl bl
call fcn.10019727
mov ecx, dword [ebp - 0x44]
xor edx, edx
push dword [ebp - 0x1b0]
cmp ecx, ebx
setge dl
xor ecx, ecx
cmp dword [eax], 0xfe6d39c7
setne cl
xor ebx, ebx
cmp ecx, edx
lea ecx, [ebp - 0x210]
setg bl
call fcn.10019727
mov dword [eax], ebx
test ebx, ebx
jne 0x10036240
xor eax, eax
lea ecx, [ebp - 0x210]
push eax
call fcn.10019727
cmp dword [eax], ebx
jne 0x10036240
xor eax, eax
mov esi, eax
jmp 0x10036245
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10019727
mov eax, dword [eax]
mov ecx, dword [ebp + eax*4 - 0x1a8]
xor eax, eax
cmp eax, esi
sbb eax, eax
neg eax
imul ecx, eax
imul eax, ecx, 0x1860
lea ecx, [ebp - 0x210]
mov dword [ebp - 0x44], eax
push dword [ebp - 0x1b0]
call fcn.10019727
mov ecx, dword [ebp - 0x44]
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x1b0]
cmp dword [ebp - 0x1b0], eax
jle 0x1003618a
push eax
lea ecx, [ebp - 0x4ac]
call fcn.10019727
lea ecx, [ebp - 0x4ac]
dec dword [eax]
xor eax, eax
push eax
call fcn.10019727
cmp dword [eax], 0
jge 0x10036139
xor edi, edi
inc edi
lea ecx, [ebp - 0x4ac]
call fcn.1001970b
or esi, 0xffffffff
lea ecx, [ebp - 0x210]
mov dword [ebp - 4], esi
call fcn.1001970b
xor eax, eax
push 4
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10036301
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x16ac], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100362e9
xor eax, eax
mov dword [ebp - 0x1c], 0x8c44
mov dword [ebp - 0x10], 0x244d513c
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x3c], 0xa4b15d3e
mov dword [ebp - 0x54], 0x86ff5291
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10036355
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x49c], edi
xor eax, eax
inc dword [ebp - 0x18]
inc eax
push eax
pop edi
cmp dword [ebp - 0x18], eax
jl 0x10036339
xor edi, edi
xor eax, eax
inc edi
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003636c
push eax
push eax
push 0x213e
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov eax, dword [ebp - 0x10]
mov ecx, 0x9dade661
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
sbb eax, eax
neg eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
cmp edi, eax
mov eax, dword [ebp - 0x1c]
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp eax, edx
setge cl
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0xc019
setge cl
add ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
sub edx, ecx
neg edx
sbb edx, edx
xor ebx, ebx
inc edx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setl cl
xor eax, eax
cmp ecx, 0x73063d62
mov ecx, 0xfff8
setl al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x44]
jl 0x1003648b
mov dword [ebp - 0x44], 0xacdd711a
xor eax, eax
mov dword [ebp - 0x30], 0x5e13cd4f
mov dword [ebp - 0x30], 0x1dd5c0ae
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x48], 0x8a57461d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10036446
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x468], 0x29b4
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10036428
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x44], 0x29a2a67f
mov dword [ebp - 0x1c], eax
jmp 0x10036480
mov dword [ebp - 0x30], edi
mov ecx, 0x33ec
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x468]
mov eax, dword [ebp - 0x48]
sub ecx, eax
add ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x48], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xb
jg 0x10036452
jmp 0x10036540
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], eax
jmp 0x100364a6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x244], 0x3b350b83
inc dword [ebp - 0x1c]
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10036495
mov eax, dword [ebp - 0x54]
add eax, ecx
je 0x100364ba
xor eax, eax
inc eax
jmp 0x100364bc
xor eax, eax
mov edx, eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp dword [ebp - 0x18], ecx
jge 0x100364df
cmp dword [ebp - 0x2c], eax
je 0x100364df
lea edx, [eax + 1]
jmp 0x100364e1
mov edx, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
add eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x49c]
setg dl
imul edx, eax
mov eax, dword [ebp - 0x49c]
add eax, edx
jne 0x1003650e
mov eax, dword [ebp - 0x244]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], 0xfffffffc
jne 0x10036540
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036537
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
je 0x10036524
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x38]
push 3
imul ecx, eax, 0xfffe
mov eax, dword [ebp - 0x58]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x44]
setne bl
xor ecx, ecx
cmp eax, ebx
pop ebx
setge cl
xor eax, eax
imul ecx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100365a3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x830], 0x69fdf99f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003658b
xor eax, eax
mov dword [ebp - 0x82c], eax
jmp 0x100365ce
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100365c8
push eax
push 0xf93
push 0x145
push eax
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
xor eax, eax
dec dword [ebp - 0x82c]
cmp dword [ebp - 0x82c], 0xffffffe7
jne 0x100365ab
inc dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 9
cmp dword [ebp - 0x20], 0xb
jg 0x1003677c
push 0xfffffffffffffff9
pop edi
xor eax, eax
lea ecx, [ebp - 0x76c]
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], edi
push ebx
call fcn.10019689
xor eax, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10036638
push dword [ebp - 0x10]
lea ecx, [ebp - 0x76c]
call fcn.10019727
mov dword [eax], 0x62f63069
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003661a
xor eax, eax
mov dword [ebp - 0x38], 0xffffffef
cmp dword [ebp - 0x38], 0xffffffea
jne 0x1003675f
mov dword [ebp - 0x18], 0xd3860a42
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
neg eax
jne 0x10036665
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10036665
mov ecx, eax
jmp 0x1003666a
xor eax, eax
lea ecx, [eax + 1]
mov dword [ebp - 0x18], 0x44b0
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], ecx
imul eax, dword [ebp - 0x20], 0x3826
cmp eax, 0x56ebf4d3
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
cmp edx, eax
setge cl
xor eax, eax
add esi, ecx
lea ecx, [ebp - 0x76c]
push eax
call fcn.10019727
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
add eax, esi
imul eax, dword [ebp - 0x3c]
test eax, eax
je 0x10036746
mov dword [ebp - 0x1c], 0x1d
cmp dword [ebp - 0x1c], edi
jle 0x10036733
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100366f5
push eax
push 0xc65
push 0x1448
push 0x1576
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x1003672b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x76c]
call fcn.10019727
push dword [ebp - 0x18]
lea ecx, [ebp - 0x76c]
mov esi, eax
call fcn.10019727
mov ecx, dword [esi]
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x100366fe
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jg 0x100366cd
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x1003674c
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
jmp 0x1003674c
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffea
push 0
pop eax
je 0x10036649
or esi, 0xffffffff
lea ecx, [ebp - 0x76c]
mov dword [ebp - 4], esi
call fcn.1001970b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xb
jle 0x100365f1
xor eax, eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x40], 0xf47a6de
mov dword [ebp - 0x10], eax
jmp 0x1003679c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe0], 0
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1003678b
mov eax, dword [ebp - 0x24]
sub eax, 0x56915a13
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x100367c6
lea ecx, [eax + 1]
jmp 0x100367c8
mov ecx, eax
mov eax, dword [ebp - 0x40]
xor eax, eax
cmp dword [ebp - 0xe0], eax
jle 0x100367d8
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
neg eax
mov edi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [sym.imp.USER32.dll_GetWindowLongW]
sbb eax, eax
mov ebx, dword [sym.imp.USER32.dll_PostMessageA]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x24]
imul eax, ecx, 0x37b1
xor ecx, ecx
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x24]
test eax, eax
setle cl
xor eax, eax
add ecx, dword [ebp - 0x24]
inc eax
cmp ecx, eax
je 0x10036890
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10036885
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x40], 0xffffffe8
jmp 0x10036861
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036859
push 0xc9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10036867
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x18
jg 0x10036840
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036882
push eax
push eax
push 0x1c48
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jle 0x10036834
jmp 0x10036996
push 2
lea ecx, [ebp - 0xd58]
call fcn.10019689
mov dword [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x2c], 0xa74b4fbf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100368d4
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd58]
call fcn.10019727
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100368b6
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x19
jne 0x10036971
xor ecx, ecx
mov dword [ebp - 0x30], 0x1494
mov dword [ebp - 0x10], eax
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003690f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1054], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ecx
cmp dword [ebp - 0x10], eax
jl 0x100368f3
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x24], 0xb
jmp 0x1003695b
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1003693e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x105c], 0x499e98c5
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10036920
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xd58]
push eax
call fcn.10019727
cmp dword [eax], 0
jne 0x10036961
dec dword [ebp - 0x24]
push 0
pop eax
push 1
pop ecx
cmp dword [ebp - 0x24], 0xffffffed
je 0x10036918
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x19
push 0
pop eax
je 0x100368e1
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036985
push eax
push 0x1903
push eax
push eax
push eax
call edi
or eax, 0xffffffff
lea ecx, [ebp - 0xd58]
mov dword [ebp - 4], eax
call fcn.1001970b
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x24], 0xf47a6de
mov dword [ebp - 0x10], eax
jmp 0x100369bb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf0], 0
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100369aa
mov eax, dword [ebp - 0x40]
sub eax, 0x56915a13
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0x24], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x100369e5
lea ecx, [eax + 1]
jmp 0x100369e7
mov ecx, eax
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0xf0], eax
jle 0x100369f7
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x40]
imul eax, ecx, 0x37b1
xor ecx, ecx
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x40]
test eax, eax
setle cl
xor eax, eax
add ecx, dword [ebp - 0x40]
inc eax
cmp ecx, eax
je 0x10036a9d
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x10036a92
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0xffffffe8
jmp 0x10036a6e
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036a66
push 0xc9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10036a74
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jg 0x10036a4d
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036a8f
push eax
push eax
push 0x1c48
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x12
jle 0x10036a41
jmp 0x10036ba3
push 2
lea ecx, [ebp - 0xb54]
call fcn.10019689
mov dword [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x2c], 0xa74b4fbf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10036ae1
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb54]
call fcn.10019727
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10036ac3
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x19
jne 0x10036b7e
xor ecx, ecx
mov dword [ebp - 0x30], 0x1494
mov dword [ebp - 0x10], eax
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x10036b1c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1064], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ecx
cmp dword [ebp - 0x10], eax
jl 0x10036b00
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x40], 0xb
jmp 0x10036b68
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10036b4b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10cc], 0x499e98c5
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10036b2d
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xb54]
push eax
call fcn.10019727
cmp dword [eax], 0
jne 0x10036b6e
dec dword [ebp - 0x40]
push 0
pop eax
push 1
pop ecx
cmp dword [ebp - 0x40], 0xffffffed
je 0x10036b25
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
push 0
pop eax
je 0x10036aee
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036b92
push eax
push 0x1903
push eax
push eax
push eax
call edi
or eax, 0xffffffff
lea ecx, [ebp - 0xb54]
mov dword [ebp - 4], eax
call fcn.1001970b
mov dword [ebp - 0x20], 8
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x10], eax
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x10036bd9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x90], 0x6e83
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10036bbe
xor eax, eax
cmp dword [ebp - 0x90], eax
jne 0x10036c30
mov eax, dword [ebp - 0x90]
xor ecx, ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x90]
cmp eax, 0xde6b
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x90]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x90]
setge cl
imul eax, ecx
test eax, eax
je 0x10036c33
xor eax, eax
inc eax
mov dword [ebp - 0x44], eax
mov ecx, 0xb3533b01
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x90]
xor eax, eax
cmp dword [ebp - 0x90], eax
je 0x10036d18
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x3c], 0xc2f00273
mov dword [ebp - 0x44], 0xc1a1fd29
mov dword [ebp - 0xd8c], ecx
mov dword [ebp - 0xd88], ecx
mov dword [ebp - 0xd84], ecx
mov dword [ebp - 0xd80], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x90]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x28]
je 0x10036c99
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x28]
jne 0x10036cbe
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10036cc1
xor eax, eax
inc eax
mov dword [ebp - 0x3c], eax
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
xor eax, eax
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], eax
jne 0x10036cde
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xd88], eax
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10036d06
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x24], 0xf47a6de
mov dword [ebp - 0x10], eax
jmp 0x10036d51
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffef
jle 0x10036d04
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036d3b
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
xor eax, eax
dec dword [ebp - 0x20]
jmp 0x10036d1b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf8], 0
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10036d40
mov eax, dword [ebp - 0x40]
sub eax, 0x56915a13
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x24], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10036d7b
lea ecx, [eax + 1]
jmp 0x10036d7d
mov ecx, eax
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0xf8], eax
jle 0x10036d8d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x40]
imul eax, ecx, 0x37b1
xor ecx, ecx
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x40]
test eax, eax
setle cl
xor eax, eax
add ecx, dword [ebp - 0x40]
inc eax
cmp ecx, eax
je 0x1003711c
xor eax, eax
mov dword [ebp - 0x40], eax
jmp 0x10036e2c
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], 0xffffffe8
jmp 0x10036e08
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036e00
push 0xc9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10036e0e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x18
jg 0x10036de7
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10036e29
push eax
push eax
push 0x1c48
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x12
jle 0x10036ddb
push 2
or esi, 0xffffffff
pop ebx
mov dword [ebp - 0x3c], 0x6f37911b
lea ecx, [ebp - 0x8e0]
push ebx
call fcn.10019689
mov dword [ebp - 4], 0x12
xor edi, edi
mov dword [ebp - 0x44], 0x7f95e19f
inc edi
push 0xfffffffffffffffd
mov dword [ebp - 0x44], 0xaead2214
pop eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10036e91
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc8], 0x57fd
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jl 0x10036e73
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10036eb4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff7
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jl 0x10036e99
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10036ed6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x8e0]
call fcn.10019727
mov dword [eax], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10036ebc
xor eax, eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], eax
jl 0x10036fd5
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0xc8]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
add eax, ecx
cmp eax, dword [ebp - 0x3c]
jne 0x10036eff
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x6c]
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xc8]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0xc8]
cmp eax, ecx
lea ecx, [ebp - 0x8e0]
setle bl
xor eax, eax
push eax
call fcn.10019727
mov ecx, dword [ebp - 0x6c]
xor edx, edx
mov ecx, dword [ebp + ecx*4 - 0xc8]
cmp ebx, ecx
sete dl
xor ecx, ecx
cmp edx, 0x4307
setg cl
xor edx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0xc8]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xc8]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp + eax*4 - 0xc8]
mov eax, dword [ebp - 0x6c]
add eax, dword [ebp - 0x44]
cmp eax, ecx
jl 0x10036f9e
push edi
lea ecx, [ebp - 0x8e0]
call fcn.10019727
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, 0x2b29
setl cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10036fc9
push 0x240a
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
dec dword [ebp - 0x6c]
jns 0x10036ee2
push 2
pop ebx
lea ecx, [ebp - 0x8e0]
mov dword [ebp - 4], esi
call fcn.1001970b
push ebx
lea ecx, [ebp - 0x2cc]
call fcn.10019689
xor eax, eax
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edi
jge 0x1003701e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xd8], 0xc204e2db
xor eax, eax
inc dword [ebp - 0x28]
inc eax
cmp dword [ebp - 0x28], eax
jl 0x10037000
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x10037044
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2cc]
call fcn.10019727
mov dword [eax], 0x9e57ad95
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x10037026
xor eax, eax
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10019727
lea ecx, [ebp - 0x2cc]
and dword [eax], 0
xor eax, eax
push eax
call fcn.10019727
cmp dword [eax], 0
jg 0x100372f5
xor eax, eax
mov dword [ebp - 0x10], 0xcf687292
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10019727
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xd8], 0
je 0x10037275
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x44], 0x19d87263
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x100372a9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100370cd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4b4], 0xfffffffb
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100370af
xor edi, edi
xor eax, eax
inc edi
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10019727
xor edx, edx
mov eax, dword [eax]
mov ecx, dword [ebp + eax*4 - 0xd8]
test ecx, ecx
mov eax, dword [ebp - 0x18]
setne dl
mov dword [ebp + eax*4 - 0xd8], ecx
mov eax, dword [ebp - 0x4b4]
cmp esi, eax
sbb eax, eax
inc eax
add eax, edx
je 0x10037224
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10037226
xor edi, edi
lea edx, [eax + 1]
inc edi
jmp 0x10037228
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xcf8]
call fcn.10019689
mov dword [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x2c], 0xa74b4fbf
or esi, 0xffffffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10037160
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcf8]
call fcn.10019727
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10037146
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x19
jne 0x100371fd
xor ecx, ecx
mov dword [ebp - 0x30], 0x1494
mov dword [ebp - 0x10], eax
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003719b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10d4], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ecx
cmp dword [ebp - 0x10], eax
jl 0x1003717f
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x40], 0xb
jmp 0x100371e7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100371ca
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10e4], 0x499e98c5
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100371ac
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xcf8]
push eax
call fcn.10019727
cmp dword [eax], 0
jne 0x100371ed
dec dword [ebp - 0x40]
push 0
pop eax
push 1
pop ecx
cmp dword [ebp - 0x40], 0xffffffed
je 0x100371a4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
push 0
pop eax
je 0x1003716d
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10037211
push eax
push 0x1903
push eax
push eax
push eax
call edi
lea ecx, [ebp - 0xcf8]
mov dword [ebp - 4], esi
call fcn.1001970b
jmp 0x10036e38
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x4b4]
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffff8
setl cl
xor edx, edx
cmp ecx, 0x98f0
pop eax
setg dl
xor ecx, ecx
sub eax, edx
cmp eax, 0xcc9105fa
setne cl
add ecx, 0x703c5764
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xd8], edi
xor eax, eax
mov dword [ebp - 0x44], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x100370a7
jmp 0x100372a9
xor eax, eax
lea ecx, [ebp - 0x2cc]
push eax
call fcn.10019727
lea ecx, [ebp - 0x2cc]
mov esi, dword [eax]
xor eax, eax
push eax
call fcn.10019727
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0xd8], esi
xor eax, eax
cmp dword [ebp - 0xd8], eax
jne 0x100372f2
or esi, 0xffffffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100372cd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd8], edi
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop edi
cmp dword [ebp - 0x10], eax
jl 0x100372b1
xor edi, edi
xor eax, eax
inc edi
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10019727
lea ecx, [ebp - 0x2cc]
inc dword [eax]
xor eax, eax
push eax
call fcn.10019727
cmp dword [eax], 0
jle 0x1003706a
or esi, 0xffffffff
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10037306
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 4], esi
call fcn.1001970b
movdqa xmm0, xmmword [0x10008080]
lea ecx, [ebp - 0x142c]
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x126c]
push eax
lea eax, [ebp - 0x127c]
push eax
movdqu xmmword [ebp - 0x127c], xmm0
call fcn.10019736
lea ecx, [ebp - 0x26b]
mov esi, eax
call fcn.100093d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x198]
push dword [esi]
call fcn.100196e5
push ebx
lea ecx, [ebp - 0x624]
mov dword [ebp - 4], 0x14
call fcn.10019689
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], eax
jmp 0x10037395
push dword [ebp - 0x10]
lea ecx, [ebp - 0x624]
call fcn.10019727
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10037381
push edi
lea ecx, [ebp - 0x198]
call fcn.10019727
xor eax, eax
lea ecx, [ebp - 0x198]
push eax
call fcn.10019727
push edi
lea ecx, [ebp - 0x198]
call fcn.10019727
push edi
lea ecx, [ebp - 0x198]
call fcn.10019727
push ebx
lea ecx, [ebp - 0x198]
call fcn.10019727
push edi
lea ecx, [ebp - 0x198]
call fcn.10019727
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x198]
call fcn.10019727
push ebx
lea ecx, [ebp - 0x198]
call fcn.10019727
push edi
lea ecx, [ebp - 0x198]
call fcn.10019727
mov esi, eax
lea ecx, [ebp - 0x198]
xor eax, eax
push eax
call fcn.10019727
xor ebx, ebx
push edi
mov ecx, dword [eax]
cmp ecx, dword [esi]
lea ecx, [ebp - 0x198]
setle bl
call fcn.10019727
push 3
lea ecx, [ebp - 0x198]
mov esi, dword [eax]
pop eax
push eax
imul esi, ebx
call fcn.10019727
sub esi, dword [eax]
cmp esi, 9
jle 0x10037459
xor eax, eax
lea ecx, [ebp - 0x198]
push eax
call fcn.10019727
push edi
lea ecx, [ebp - 0x624]
call fcn.10019727
xor ecx, ecx
cmp dword [eax], ecx
sete cl
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xfffffff0
cmp dword [ebp - 0x1c], 0xb
je 0x100375a0
xor eax, eax
mov dword [ebp - 0x10], 0x8f738f58
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe3
je 0x10037547
mov dword [ebp - 0x3c], 0xed55c59c
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], eax
je 0x1003750a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x624]
push edi
call fcn.10019727
push edi
lea ecx, [ebp - 0x198]
mov esi, eax
call fcn.10019727
lea ecx, [ebp - 0x624]
mov edi, dword [eax]
sub edi, dword [esi]
neg edi
sbb edi, edi
xor eax, eax
inc eax
inc edi
push eax
call fcn.10019727
lea ecx, [ebp - 0x624]
mov esi, dword [eax]
xor eax, eax
push eax
add esi, edi
call fcn.10019727
xor edi, edi
mov eax, dword [eax]
add eax, esi
je 0x10037507
inc edi
mov eax, edi
jmp 0x1003750a
xor eax, eax
inc edi
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
or eax, 0xffffffff
imul ecx, dword [ebp - 0x10]
sub eax, ecx
je 0x1003752c
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x1003752e
xor eax, eax
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10037545
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10037593
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 0x21d7
push 0x16d3
push 0x1e9e
call ebx
mov esi, dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
push eax
push 0x37b
push 0x4de
push 0xb54
push 0xc51
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xb
jne 0x10037482
lea ecx, [ebp - 0x624]
call fcn.1001970b
or ebx, 0xffffffff
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], ebx
call fcn.1001970b
mov dword [ebp - 0x38], 9
cmp dword [ebp - 0x38], 0xb
jg 0x10039763
push 3
pop esi
push esi
lea ecx, [ebp - 0x32c]
call fcn.10019689
mov dword [ebp - 4], 0x16
lea eax, [ebp - 0x11ac]
movdqa xmm0, xmmword [0x10008070]
lea ecx, [ebp - 0x13e4]
push eax
lea eax, [ebp - 0x11bc]
mov dword [ebp - 0x3c], 0xb5131d8b
mov dword [ebp - 0x44], ebx
push eax
movdqu xmmword [ebp - 0x11bc], xmm0
call fcn.10019736
lea ecx, [ebp - 0x26d]
mov esi, eax
call fcn.100093d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x10e0]
push dword [esi]
call fcn.100196e5
xor eax, eax
mov byte [ebp - 4], 0x17
push 3
mov dword [ebp - 0x10], eax
pop ebx
jmp 0x10037653
push dword [ebp - 0x10]
call fcn.10019727
mov dword [eax], 0x580d416d
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x32c]
cmp dword [ebp - 0x10], ebx
jl 0x10037642
push edi
call fcn.10019727
mov esi, eax
lea ecx, [ebp - 0x32c]
xor eax, eax
push eax
call fcn.10019727
mov ecx, dword [esi]
xor edx, edx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x32c]
setl dl
mov dword [ebp - 0x2c], edx
call fcn.10019727
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x32c]
setl bl
call fcn.10019727
cmp dword [eax], ebx
je 0x100376af
mov dword [ebp - 0x20], 8
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10039799
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x94], 0x6e83
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1003977b
xor edi, edi
xor eax, eax
inc edi
cmp dword [ebp - 0x94], eax
jne 0x100397f0
mov eax, dword [ebp - 0x94]
xor ecx, ecx
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
cmp eax, 0xde6b
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x94]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x94]
setge cl
imul eax, ecx
test eax, eax
je 0x100397f2
mov eax, edi
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x94]
xor eax, eax
cmp dword [ebp - 0x94], eax
je 0x100398c1