Function at 0x10032f62
Capabilities:
Check os version
Compare security identifiers
Enumerate gui resources
Get disk size
Get graphical window text
Get session user name
Identify system language via api
Parse pe header
Query or enumerate registry key
Read .ini file

Disassembly:
mov eax, 0x1008a0b8
call fcn.100885f0
mov eax, 0x1bd4
call fcn.10084da0
push ebx
push esi
push edi
mov dword [ebp - 0x6c], ecx
lea ecx, [ebp - 0x294]
push 2
mov byte [ebp - 0x75], dl
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10032fb9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x294]
call fcn.1001866d
mov dword [eax], 0xd4e06482
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032f9a
xor eax, eax
push eax
lea ecx, [ebp - 0x294]
call fcn.1001866d
lea ecx, [ebp - 0x294]
and dword [eax], 0
xor eax, eax
push eax
call fcn.1001866d
mov ebx, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
jmp 0x100330d6
movdqa xmm0, xmmword [0x10007bf0]
lea eax, [ebp - 0x13a4]
push eax
lea eax, [ebp - 0x13b4]
push eax
lea ecx, [ebp - 0x19c4]
movdqu xmmword [ebp - 0x13b4], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x209]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x590]
push dword [esi]
call fcn.10018642
xor eax, eax
lea ecx, [ebp - 0x294]
inc eax
mov byte [ebp - 4], al
xor eax, eax
push eax
call fcn.1001866d
lea ecx, [ebp - 0x590]
cmp dword [eax], 0
jne 0x100330e1
xor eax, eax
inc eax
push eax
call fcn.1001866d
mov dword [eax], 0xffffffed
jmp 0x10033094
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10033083
push 0x230b
push 0x2355
push 0x1f47
call edi
push eax
xor eax, eax
push eax
call ebx
xor eax, eax
lea ecx, [ebp - 0x590]
inc eax
push eax
call fcn.1001866d
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x590]
inc eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffee
jl 0x10033062
xor eax, eax
lea ecx, [ebp - 0x590]
mov byte [ebp - 4], al
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x294]
push eax
call fcn.1001866d
lea ecx, [ebp - 0x294]
dec dword [eax]
xor eax, eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jg 0x10032fe7
jmp 0x100330eb
xor eax, eax
mov byte [ebp - 4], al
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x294]
push eax
call fcn.1001866d
cmp dword [eax], 0
jne 0x1003310c
xor eax, eax
lea ecx, [ebp - 0x294]
push eax
call fcn.1001866d
xor eax, eax
lea ecx, [ebp - 0x294]
inc eax
push eax
call fcn.1001866d
push 9
pop ecx
or esi, 0xffffffff
mov dword [eax], ecx
lea ecx, [ebp - 0x294]
mov dword [ebp - 4], esi
call fcn.10018668
push 2
lea ecx, [ebp - 0x2ac]
call fcn.100185e1
push 2
pop ecx
xor eax, eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1003316d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2ac]
call fcn.1001866d
mov dword [eax], 0xd4e06482
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003314e
xor eax, eax
push eax
lea ecx, [ebp - 0x2ac]
call fcn.1001866d
lea ecx, [ebp - 0x2ac]
and dword [eax], 0
xor eax, eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jle 0x10033296
movdqa xmm0, xmmword [0x10007bf0]
lea eax, [ebp - 0x1644]
push eax
lea eax, [ebp - 0x1654]
push eax
lea ecx, [ebp - 0x195c]
movdqu xmmword [ebp - 0x1654], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x20b]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x734]
push dword [esi]
call fcn.10018642
xor eax, eax
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2ac]
call fcn.1001866d
lea ecx, [ebp - 0x734]
cmp dword [eax], 0
jne 0x1003328a
xor eax, eax
inc eax
push eax
call fcn.1001866d
mov dword [eax], 0xffffffed
jmp 0x1003323e
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1003322d
push 0x230b
push 0x2355
push 0x1f47
call edi
push eax
xor eax, eax
push eax
call ebx
xor eax, eax
lea ecx, [ebp - 0x734]
inc eax
push eax
call fcn.1001866d
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x734]
inc eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffee
jl 0x1003320c
lea ecx, [ebp - 0x734]
mov byte [ebp - 4], 2
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x2ac]
push eax
call fcn.1001866d
lea ecx, [ebp - 0x2ac]
dec dword [eax]
xor eax, eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jg 0x10033193
jmp 0x10033293
mov byte [ebp - 4], 2
call fcn.10018668
or esi, 0xffffffff
xor eax, eax
lea ecx, [ebp - 0x2ac]
push eax
call fcn.1001866d
cmp dword [eax], 0
jne 0x100332b7
xor eax, eax
lea ecx, [ebp - 0x2ac]
push eax
call fcn.1001866d
xor eax, eax
lea ecx, [ebp - 0x2ac]
inc eax
push eax
call fcn.1001866d
push 9
pop ecx
mov dword [ebp - 4], esi
mov dword [eax], ecx
lea ecx, [ebp - 0x2ac]
call fcn.10018668
mov dword [ebp - 0x14], 0x6feb9e9d
xor eax, eax
mov dword [ebp - 0x2c], 0xa2b8ea2c
xor edx, edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], 0x56fd8c65
mov dword [ebp - 0x20], 0x707e294
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x14]
cmp edx, 0x23f
jne 0x10033333
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10033333
xor ecx, ecx
inc ecx
jmp 0x10033338
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, dword [ebp - 0x14]
jge 0x10033346
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1003334f
jmp 0x10033348
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1003334f
mov eax, ecx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x100333ae
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
jne 0x100333ab
mov dword [ebp - 0x20], 0xfffc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe7
push 0
pop eax
je 0x1003338c
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffe2
jne 0x10033383
push 2
lea ecx, [ebp - 0x12cc]
call fcn.100185e1
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x10], 0x667a876e
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100333f9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x12cc]
call fcn.1001866d
mov dword [eax], 0xdf99ff60
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100333da
xor eax, eax
mov edi, dword [sym.imp.GDI32.dll_GetBitmapBits]
mov dword [ebp - 0x10], 1
cmp dword [ebp - 0x10], eax
jl 0x10033424
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1003341f
push eax
push 0x101b
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
jns 0x1003340b
lea ecx, [ebp - 0x12cc]
mov dword [ebp - 4], esi
call fcn.10018668
push 2
lea ecx, [ebp - 0x2dc]
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10033470
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2dc]
call fcn.1001866d
mov dword [eax], 0xd4e06482
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033451
xor eax, eax
push eax
lea ecx, [ebp - 0x2dc]
call fcn.1001866d
lea ecx, [ebp - 0x2dc]
and dword [eax], 0
xor eax, eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jle 0x1003359d
movdqa xmm0, xmmword [0x10007bf0]
lea eax, [ebp - 0x13e4]
push eax
lea eax, [ebp - 0x13f4]
push eax
lea ecx, [ebp - 0x1a04]
movdqu xmmword [ebp - 0x13f4], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x20d]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x5a8]
push dword [esi]
call fcn.10018642
xor eax, eax
mov byte [ebp - 4], 6
push eax
lea ecx, [ebp - 0x2dc]
call fcn.1001866d
lea ecx, [ebp - 0x5a8]
cmp dword [eax], 0
jne 0x10033591
xor eax, eax
inc eax
push eax
call fcn.1001866d
mov dword [eax], 0xffffffed
jmp 0x10033545
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10033534
push 0x230b
push 0x2355
push 0x1f47
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
call ebx
xor eax, eax
lea ecx, [ebp - 0x5a8]
inc eax
push eax
call fcn.1001866d
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x5a8]
inc eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffee
jl 0x1003350f
lea ecx, [ebp - 0x5a8]
mov byte [ebp - 4], 5
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x2dc]
push eax
call fcn.1001866d
lea ecx, [ebp - 0x2dc]
dec dword [eax]
xor eax, eax
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jg 0x10033496
jmp 0x1003359a
mov byte [ebp - 4], 5
call fcn.10018668
or esi, 0xffffffff
xor eax, eax
lea ecx, [ebp - 0x2dc]
push eax
call fcn.1001866d
cmp dword [eax], 0
jne 0x100335be
xor eax, eax
lea ecx, [ebp - 0x2dc]
push eax
call fcn.1001866d
xor eax, eax
lea ecx, [ebp - 0x2dc]
inc eax
push eax
call fcn.1001866d
push 9
pop ecx
mov dword [ebp - 4], esi
mov dword [eax], ecx
lea ecx, [ebp - 0x2dc]
call fcn.10018668
push 2
pop ebx
mov dword [ebp - 0x30], 0xa9a97186
lea ecx, [ebp - 0xab0]
push ebx
call fcn.100185e1
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x6c8]
mov dword [ebp - 0x48], 3
push ebx
call fcn.100185e1
push 8
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1003363d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9d4], 0x7d214c40
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10033624
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033663
push dword [ebp - 0x14]
lea ecx, [ebp - 0xab0]
call fcn.1001866d
mov dword [eax], 0x1d102278
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10033645
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033689
push dword [ebp - 0x14]
lea ecx, [ebp - 0x6c8]
call fcn.1001866d
mov dword [eax], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1003366b
xor eax, eax
cmp dword [ebp - 0x9d0], eax
je 0x100336b5
mov edx, dword [ebp - 0x9d4]
sub edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, dword [ebp - 0x30]
jg 0x100336b5
inc eax
mov esi, eax
jmp 0x100336ba
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0xab0]
call fcn.1001866d
lea ecx, [ebp - 0x6c8]
mov dword [eax], esi
xor eax, eax
inc eax
mov dword [ebp - 0x48], esi
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x48]
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x6c8]
mov eax, dword [ebp - 0x9d0]
setne dl
xor ebx, ebx
cmp eax, edx
setg bl
xor eax, eax
inc eax
push eax
call fcn.1001866d
mov edx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x9d0]
sub edx, ebx
neg edx
sbb edx, edx
inc edx
sub ecx, edx
xor edx, edx
cmp ecx, 0x3d47941c
setle dl
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x30]
setl bl
xor ecx, ecx
cmp ebx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x9d0], eax
jne 0x10033745
cmp dword [ebp - 0x48], eax
jne 0x10033745
mov esi, eax
inc eax
jmp 0x1003374a
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0x6c8]
call fcn.1001866d
xor ebx, ebx
lea ecx, [ebp - 0x6c8]
cmp dword [eax], ebx
setne bl
xor eax, eax
inc eax
push eax
call fcn.1001866d
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0x9d0]
setne cl
add ecx, esi
sub ecx, eax
jne 0x1003378b
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1003378b
mov esi, eax
inc eax
jmp 0x10033790
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0xab0]
call fcn.1001866d
lea ecx, [ebp - 0x6c8]
mov dword [eax], esi
call fcn.10018668
or ebx, 0xffffffff
lea ecx, [ebp - 0xab0]
mov dword [ebp - 4], ebx
call fcn.10018668
movdqa xmm0, xmmword [0x10007ce0]
lea eax, [ebp - 0x1584]
mov dword [ebp - 0x30], 0x831713b9
lea ecx, [ebp - 0x18bc]
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x38], 0x62751c76
mov dword [ebp - 0x38], ebx
xor ebx, ebx
push eax
lea eax, [ebp - 0x1594]
mov dword [ebp - 0x38], 0xb5934215
inc ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0x69be541
push eax
movdqu xmmword [ebp - 0x1594], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x221]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x12e4]
push dword [esi]
call fcn.10018642
push 9
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003385b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xff4], 0x34678dc2
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1003383d
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], eax
jmp 0x10033871
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x19cc], 0x1a93826a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033860
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x10033924
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x10c4]
mov dword [ebp - 0x38], 0x74c38b6b
mov dword [ebp - 0x10], 0x552bf338
push ebx
call fcn.100185e1
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100338d2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10c4]
call fcn.1001866d
mov dword [eax], 0xccde6bc0
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100338ae
xor ebx, ebx
xor eax, eax
inc ebx
push eax
lea ecx, [ebp - 0x12e4]
call fcn.1001866d
inc dword [eax]
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1003390b
mov dword [ebp - 0x10], eax
jmp 0x10033902
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x100338ff
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x100338ec
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x100338e7
push 9
pop eax
lea ecx, [ebp - 0x10c4]
mov byte [ebp - 4], al
call fcn.10018668
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xc
push 0xfffffffffffffff6
pop eax
jl 0x10033883
or esi, 0xffffffff
lea ecx, [ebp - 0x12e4]
mov dword [ebp - 4], esi
call fcn.10018668
push 2
lea ecx, [ebp - 0x2c4]
call fcn.100185e1
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0x16
jmp 0x10033979
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10033976
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x1c
jg 0x10033964
mov dword [ebp - 0x40], eax
jmp 0x100339b2
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], eax
jmp 0x100339a9
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x100339a6
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xd
jge 0x1003398c
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffef
jle 0x10033984
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100339e0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c4]
call fcn.1001866d
mov dword [eax], 0xd4e06482
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100339c1
xor eax, eax
mov dword [ebp - 0x2c], 0xc45cdbe8
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10033a06
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10d8], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100339f2
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ecx
jge 0x10033a23
push 0xfffffffffffffffd
pop edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x10d8], edx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10033a11
mov eax, dword [ebp - 0x10d4]
xor ecx, ecx
cmp eax, 0x999f
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
and dword [eax], 0
jmp 0x100341b5
mov dword [ebp - 0x14], 0x6feb9e9d
xor eax, eax
mov dword [ebp - 0x2c], 0xa2b8ea2c
xor edx, edx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], 0x56fd8c65
mov dword [ebp - 0x20], 0x707e294
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x14]
cmp edx, 0x23f
jne 0x10033aa1
xor eax, eax
cmp eax, dword [ebp - 0x14]
je 0x10033ab1
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jge 0x10033ab1
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10033aba
jmp 0x10033ab3
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10033aba
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x10033b19
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe7
jne 0x10033b16
mov dword [ebp - 0x20], 0xfffc
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x14]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe7
push 0
pop eax
je 0x10033af7
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffe2
jne 0x10033aee
movdqa xmm0, xmmword [0x10007bf0]
lea eax, [ebp - 0x1404]
push eax
lea eax, [ebp - 0x1414]
push eax
lea ecx, [ebp - 0x19d4]
movdqu xmmword [ebp - 0x1414], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x18a]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x5c0]
push dword [esi]
call fcn.10018642
push 2
lea ecx, [ebp - 0x12fc]
mov byte [ebp - 4], 0xc
call fcn.100185e1
mov byte [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x10], 0x667a876e
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10033bac
push dword [ebp - 0x10]
lea ecx, [ebp - 0x12fc]
call fcn.1001866d
mov dword [eax], 0xdf99ff60
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033b8d
xor eax, eax
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x10033bcd
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10033bc8
push eax
push 0x101b
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10033bb4
lea ecx, [ebp - 0x12fc]
mov byte [ebp - 4], 0xc
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
cmp dword [eax], 0
jne 0x100341ce
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0xcbc]
push 2
call fcn.100185e1
xor eax, eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x10], eax
or esi, 0xffffffff
cmp dword [ebp - 0x10], 2
lea ecx, [ebp - 0xcbc]
jge 0x10033c2a
push dword [ebp - 0x10]
call fcn.1001866d
mov dword [eax], esi
inc dword [ebp - 0x10]
jmp 0x10033c0f
push ebx
call fcn.1001866d
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10033c5c
push eax
push 0x222c
push eax
push 0x2484
push 0x1bf5
push eax
push 0x13c7
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
lea ecx, [ebp - 0xcbc]
mov byte [ebp - 4], 0xc
call fcn.10018668
push ebx
lea ecx, [ebp - 0x5c0]
call fcn.1001866d
mov dword [eax], 0xffffffed
jmp 0x10034181
mov dword [ebp - 0x14], 0x546158d3
xor eax, eax
mov dword [ebp - 0x2c], 0x2fafd11d
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10033cbb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1820], 0x11914cc5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10033ca2
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10033d1e
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
add eax, 0x964
cmp eax, dword [ebp - 0x14]
jl 0x10033cd3
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0xe11a
mov eax, dword [ebp - 0x2c]
setg cl
xor edx, edx
cmp ecx, 0xc921
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setl cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setle cl
cmp dword [ebp - 0x48], ecx
jle 0x10033d1e
xor eax, eax
jmp 0x10033d20
mov eax, ebx
mov edx, dword [ebp - 0x14]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x14], eax
jmp 0x10033d4a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1820], 0x40ee1d45
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10033d39
xor eax, eax
mov dword [ebp - 0x30], 0x6ce125d
inc eax
lea ecx, [ebp - 0xdd0]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xa137b189
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0x3629aa81
push eax
call fcn.100185e1
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x48], 0x9d0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10033db1
push dword [ebp - 0x10]
lea ecx, [ebp - 0xdd0]
call fcn.1001866d
mov dword [eax], 0xe4b28306
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10033d90
xor eax, eax
inc dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
jmp 0x10033dca
push dword [ebp - 0x30]
call fcn.1001866d
mov dword [eax], 0xb000cd9d
inc dword [ebp - 0x30]
xor eax, eax
lea ecx, [ebp - 0xdd0]
inc eax
cmp dword [ebp - 0x30], eax
jl 0x10033db9
mov byte [ebp - 4], 0xc
call fcn.10018668
xor eax, eax
xor ebx, ebx
mov byte [ebp - 0x25], al
inc ebx
mov dword [ebp - 0x2c], 0xbf506e60
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], 0x938d
mov dword [ebp - 0x10], eax
jmp 0x10033e16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x308], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033e05
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, esi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
sub ecx, eax
mov eax, dword [ebp - 0x308]
cmp ecx, eax
setg dl
sub edx, 0xffff
mov dword [ebp - 0x44], edx
xor edx, edx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x308]
mov ecx, dword [ebp - 0x304]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setge dl
xor eax, eax
cmp edx, 4
setg al
mov dword [ebp - 0x20], eax
cmp byte [ebp - 0x25], 0
je 0x10034173
movdqa xmm0, xmmword [0x10007cd0]
lea eax, [ebp - 0x16e4]
push eax
lea eax, [ebp - 0x16f4]
push eax
lea ecx, [ebp - 0x19ec]
movdqu xmmword [ebp - 0x16f4], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x18c]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x220]
push dword [esi]
call fcn.10018642
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x220]
mov dword [ebp - 0x40], 0xf0a9b27f
xor eax, eax
mov dword [ebp - 0x2c], 0xfffd
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x20], 0x546153b7
mov dword [ebp - 0x38], 0xf0fc5a51
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xbaba27fa
mov dword [ebp - 0x38], 0xe9becc42
push 3
mov dword [ebp - 0x54], 0xfffb
call fcn.1001866d
xor ebx, ebx
cmp dword [eax], ebx
jne 0x10033f43
push 3
lea ecx, [ebp - 0x220]
call fcn.1001866d
cmp dword [eax], ebx
jne 0x10033f43
xor eax, eax
mov esi, eax
jmp 0x10033f48
xor eax, eax
lea esi, [eax + 1]
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x220]
call fcn.1001866d
mov eax, dword [eax]
add eax, esi
je 0x10033fbd
push ebx
lea ecx, [ebp - 0x220]
call fcn.1001866d
push ebx
lea ecx, [ebp - 0x220]
cmp dword [eax], 1
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
call fcn.1001866d
mov ecx, dword [ebp - 0x40]
imul ecx, dword [eax]
test ecx, ecx
je 0x10033f8c
mov eax, dword [ebp - 0x2c]
xor eax, eax
lea ecx, [ebp - 0x220]
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp ecx, 0xa9bc
mov ecx, 0xb5cf1c94
setle dl
cmp ecx, edx
sbb ecx, ecx
inc ecx
cmp ecx, dword [eax]
jg 0x10033fbd
xor eax, eax
lea esi, [eax + 1]
jmp 0x10033fc1
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0x220]
call fcn.1001866d
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
sub esi, ecx
lea ecx, [ebp - 0x220]
sub esi, 0x1ba6b42b
cmp esi, dword [eax]
push 3
setl bl
call fcn.1001866d
cmp ebx, dword [eax]
jge 0x100340bf
mov dword [ebp - 0x20], 0x620a3418
xor eax, eax
mov dword [ebp - 0x44], 0xb10079d6
xor ebx, ebx
mov dword [ebp - 0x40], eax
inc ebx
mov dword [ebp - 0x2c], 0xffffffe6
cmp dword [ebp - 0x2c], 0x1b
jne 0x100340ea
mov dword [ebp - 0x10], 0x12f8ba79
mov dword [ebp - 0x48], 0x6f2ba10f
mov dword [ebp - 0x50], 0xfffffffb
mov dword [ebp - 0x60], 0x798564db
cmp dword [ebp - 0x40], eax
jne 0x10034041
cmp dword [ebp - 0x20], ebx
je 0x10034043
mov eax, ebx
xor ecx, ecx
mov edx, 0xfff6
sub edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setg dl
xor eax, eax
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], eax
jne 0x10034071
mov eax, dword [ebp - 0x44]
push ebx
lea ecx, [ebp - 0x220]
call fcn.1001866d
mov edx, dword [ebp - 0x48]
mov esi, eax
add edx, dword [ebp - 0x3c]
xor eax, eax
mov ecx, dword [ebp - 0x50]
cmp edx, ecx
setne al
add eax, dword [ebp - 0x48]
cmp dword [esi], eax
jge 0x100340aa
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x100340aa
push 3
lea ecx, [ebp - 0x220]
call fcn.1001866d
mov dword [ebp - 0x60], ebx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1b
push 0
pop eax
je 0x1003401b
jmp 0x100340ea
mov dword [ebp - 0x20], 0xfffffffb
xor ebx, ebx
mov dword [ebp - 0x48], 0xa798be49
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
xor eax, eax
inc ebx
mov dword [ebp - 0x3c], 0xfffffff8
jmp 0x1003413c
mov dword [ebp - 0x20], 0xe682
mov dword [ebp - 0x38], 0x2489afff
mov dword [ebp - 0x38], 0xef6f1ac2
mov dword [ebp - 0x38], 0x25d8284a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10034131
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19fc], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034118
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10034142
inc dword [ebp - 0x54]
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 5
jge 0x100340f3
lea ecx, [ebp - 0x220]
mov byte [ebp - 4], 0xc
call fcn.10018668
push 0x230b
push 0x2355
push 0x1f47
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
or esi, 0xffffffff
push ebx
lea ecx, [ebp - 0x5c0]
call fcn.1001866d
inc dword [eax]
push ebx
lea ecx, [ebp - 0x5c0]
call fcn.1001866d
cmp dword [eax], 0xffffffee
jl 0x10033c82
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0xb
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
cmp dword [eax], 0xffffffe6
jg 0x10033a4c
jmp 0x100341e0
lea ecx, [ebp - 0x5c0]
mov byte [ebp - 4], 0xb
call fcn.10018668
or esi, 0xffffffff
mov eax, 0xce125d16
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x774], eax
mov dword [ebp - 0x770], eax
xor eax, eax
mov dword [ebp - 0x38], 0x2d34caa8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x38], 0x91b86007
mov dword [ebp - 0x48], 0xeccdf493
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10034249
push 8
pop ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3d8], ecx
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1003422f
xor ebx, ebx
xor eax, eax
inc ebx
push 4
mov dword [ebp - 0x14], eax
pop edi
cmp dword [ebp - 0x14], edi
jge 0x1003426c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1b3c], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10034254
xor eax, eax
mov dword [ebp - 0x774], eax
cmp dword [ebp - 0x774], eax
jl 0x1003434a
push ebx
lea ecx, [ebp - 0x4a0]
call fcn.100185e1
xor eax, eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100342ba
push dword [ebp - 0x10]
lea ecx, [ebp - 0x4a0]
call fcn.1001866d
mov dword [eax], ebx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ebx
cmp dword [ebp - 0x10], eax
jl 0x10034298
xor ebx, ebx
xor eax, eax
inc ebx
push eax
lea ecx, [ebp - 0x4a0]
call fcn.1001866d
and dword [eax], 0
jmp 0x1003431a
xor eax, eax
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x774]
mov ecx, dword [ebp + ecx*4 - 0x3d8]
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x3d8], ecx
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1003430c
push 0x21c0
push 0x1555
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
xor eax, eax
push eax
lea ecx, [ebp - 0x4a0]
call fcn.1001866d
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4a0]
push eax
call fcn.1001866d
lea ecx, [ebp - 0x4a0]
cmp dword [eax], 0
jle 0x100342cb
mov byte [ebp - 4], 0xb
call fcn.10018668
dec dword [ebp - 0x774]
jns 0x1003427e
xor eax, eax
inc dword [ebp - 0x48]
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
cmp dword [eax], 0
jne 0x1003436c
xor eax, eax
lea ecx, [ebp - 0x2c4]
push eax
call fcn.1001866d
push ebx
lea ecx, [ebp - 0x2c4]
call fcn.1001866d
push 9
pop ecx
mov dword [ebp - 4], esi
mov dword [eax], ecx
lea ecx, [ebp - 0x2c4]
call fcn.10018668
mov dword [ebp - 0x40], 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], 0xfd78db58
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x100343c1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x123c], 0x1da7bc99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100343a9
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x100343dd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1038], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100343c9
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x17
jne 0x10034436
mov dword [ebp - 0x30], esi
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x123c], ebx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp eax, edx
push 8
setl cl
pop eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, esi
setne al
mov dword [ebp - 0x1038], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x17
je 0x100343e6
xor eax, eax
push 9
pop ecx
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0xfffffff0
jne 0x1003452c
jmp 0x1003444a
xor eax, eax
mov dword [ebp - 0x34], 0xeb382e58
lea ecx, [ebp - 0x10ec]
mov dword [ebp - 0x38], 0x5ee56e31
mov dword [ebp - 0x38], 0x7e0fa1a8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], 0xb8342836
inc eax
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xe83adeb9
mov dword [ebp - 0x38], 0x4e5477a7
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x1f08a1ba
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xfffffffc
push 3
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], 0x12
xor ebx, ebx
mov dword [ebp - 0x10], eax
inc ebx
cmp dword [ebp - 0x10], 3
jge 0x100344db
push dword [ebp - 0x10]
lea ecx, [ebp - 0x10ec]
call fcn.1001866d
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100344c0
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1003450c
mov dword [ebp - 0x38], 0xe4ed383d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10034503
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1bcc], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100344ef
xor eax, eax
dec dword [ebp - 0x48]
inc dword [ebp - 0x54]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x100344e0
lea ecx, [ebp - 0x10ec]
mov dword [ebp - 4], esi
call fcn.10018668
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff0
je 0x10034448
mov dword [ebp - 0x40], 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], 0xfd78db58
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10034562
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1250], 0x1da7bc99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003454a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1003457e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x104c], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1003456a
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x17
jne 0x100345d7
mov dword [ebp - 0x30], esi
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1250], ebx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp eax, edx
push 8
setl cl
pop eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, esi
setne al
mov dword [ebp - 0x104c], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x17
je 0x10034587
xor eax, eax
push 9
pop ecx
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0xfffffff0
jne 0x100346cd
jmp 0x100345eb
xor eax, eax
mov dword [ebp - 0x34], 0xeb382e58
lea ecx, [ebp - 0x1314]
mov dword [ebp - 0x38], 0x5ee56e31
mov dword [ebp - 0x38], 0x7e0fa1a8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], 0xb8342836
inc eax
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xe83adeb9
mov dword [ebp - 0x38], 0x4e5477a7
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x1f08a1ba
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xfffffffc
push 3
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], 0x13
xor ebx, ebx
mov dword [ebp - 0x10], eax
inc ebx
cmp dword [ebp - 0x10], 3
jge 0x1003467c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1314]
call fcn.1001866d
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034661
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x100346ad
mov dword [ebp - 0x38], 0xe4ed383d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100346a4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b6c], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034690
xor eax, eax
dec dword [ebp - 0x48]
inc dword [ebp - 0x54]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x10034681
lea ecx, [ebp - 0x1314]
mov dword [ebp - 4], esi
call fcn.10018668
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff0
je 0x100345e9
push edi
lea ecx, [ebp - 0x710]
call fcn.100185e1
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x132c]
mov dword [ebp - 0x30], 0x6fe7d8a8
mov dword [ebp - 0x60], 2
push ebx
call fcn.100185e1
push ebx
lea ecx, [ebp - 0x1100]
mov byte [ebp - 4], 0x15
call fcn.100185e1
mov byte [ebp - 4], 0x16
xor eax, eax
mov dword [ebp - 0x54], 0xe07b88c8
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10034740
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x710]
call fcn.1001866d
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10034725
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1003476c
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x132c]
call fcn.1001866d
mov dword [eax], 0x2314af12
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10034748
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034798
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1100]
call fcn.1001866d
mov dword [eax], 0x90cb933d
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10034774
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100347ba
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a14], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100347a1
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x100349f8
jmp 0x100347d2
xor ebx, ebx
inc ebx
push 9
pop eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xac8]
push ebx
call fcn.100185e1
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0x3de7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003481d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xac8]
call fcn.1001866d
mov dword [eax], 2
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100347fc
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x100348ab
mov dword [ebp - 0x20], 7
lea ecx, [ebp - 0xac8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor edx, edx
test ecx, ecx
lea ecx, [ebp - 0x710]
setns dl
imul edx, dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov dword [eax], edx
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
push dword [ebp - 0x1c]
cmp dword [eax], ecx
lea ecx, [ebp - 0x710]
setle bl
call fcn.1001866d
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x100348a0
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x1003482a
xor eax, eax
dec dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x100349d9
xor ebx, ebx
inc ebx
jmp 0x100348c2
xor eax, eax
movdqa xmm0, xmmword [0x10007be0]
lea ecx, [ebp - 0x1834]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x1424]
push eax
lea eax, [ebp - 0x1434]
mov dword [ebp - 0x20], ebx
push eax
movdqu xmmword [ebp - 0x1434], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x279]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1778]
push dword [esi]
call fcn.10018642
mov byte [ebp - 4], 0x18
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x100349ba
mov dword [ebp - 0x10], 0x72305aba
lea ecx, [ebp - 0x710]
inc dword [ebp - 0x10]
push dword [ebp - 0x1c]
call fcn.1001866d
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10034960
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10034962
mov eax, ebx
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x10034985
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x710]
call fcn.1001866d
cmp dword [eax], 0
jne 0x10034985
xor eax, eax
mov esi, eax
jmp 0x1003498d
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xac8]
call fcn.1001866d
mov ecx, dword [ebp - 0x10]
imul ecx, esi
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x1c]
jns 0x1003492e
inc dword [ebp - 0x54]
lea ecx, [ebp - 0x1778]
mov byte [ebp - 4], 0x17
call fcn.10018668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x100348c0
lea ecx, [ebp - 0xac8]
mov byte [ebp - 4], 0x16
call fcn.10018668
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x100347cf
or esi, 0xffffffff
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x1100]
mov dword [ebp - 0x20], eax
call fcn.10018668
lea ecx, [ebp - 0x132c]
call fcn.10018668
lea ecx, [ebp - 0x710]
mov dword [ebp - 4], esi
call fcn.10018668
mov dword [ebp - 0x40], 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], 0xfd78db58
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10034a58
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1264], 0x1da7bc99
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10034a40
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10034a78
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1060], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10034a60
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x40], eax
inc ebx
cmp dword [ebp - 0x40], 0x17
jne 0x10034ad4
mov dword [ebp - 0x30], esi
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1264], ebx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
cmp eax, edx
push 8
setl cl
pop eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, esi
setne al
mov dword [ebp - 0x1060], eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x17
je 0x10034a84
xor eax, eax
push 9
pop ecx
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0xfffffff0
jne 0x10034bcc
jmp 0x10034ae8
xor eax, eax
mov dword [ebp - 0x34], 0xeb382e58
lea ecx, [ebp - 0x1114]
mov dword [ebp - 0x38], 0x5ee56e31
mov dword [ebp - 0x38], 0x7e0fa1a8
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], 0xb8342836
inc eax
mov dword [ebp - 0x38], 0xfffffff9
mov dword [ebp - 0x38], 0xe83adeb9
mov dword [ebp - 0x38], 0x4e5477a7
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0x1f08a1ba
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 0xfffffffc
push 3
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], 0x19
xor ebx, ebx
mov dword [ebp - 0x10], eax
inc ebx
cmp dword [ebp - 0x10], 3
jge 0x10034b79
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1114]
call fcn.1001866d
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034b5e
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10034bac
mov dword [ebp - 0x38], 0xe4ed383d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10034ba3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1bac], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034b8e
xor eax, eax
dec dword [ebp - 0x48]
inc dword [ebp - 0x54]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jle 0x10034b7e
lea ecx, [ebp - 0x1114]
mov dword [ebp - 4], esi
call fcn.10018668
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xfffffff0
je 0x10034ae6
push 3
pop ecx
mov dword [ebp - 0x14], ecx
xor eax, eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0x4af7bdd4
mov dword [ebp - 0x48], 0xfffffff6
mov dword [ebp - 0x38], 0x14f16367
mov dword [ebp - 0x10], eax
jmp 0x10034c01
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc80], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10034bf4
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0xc78]
cmp ecx, eax
mov eax, ebx
setle dl
sub eax, edx
cmp eax, esi
jl 0x10034c3f
mov dword [ebp - 0x48], 0x81d21f1e
mov dword [ebp - 0x14], 5
jmp 0x10034c34
inc dword [ebp - 0x48]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff4
jle 0x10034c2e
jmp 0x10034cfe
mov dword [ebp - 0x10], 0x333c7d24
mov dword [ebp - 0x14], 0xf
jmp 0x10034cf4
xor eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xf8c], eax
mov dword [ebp - 0xf88], eax
mov dword [ebp - 0xf84], eax
mov dword [ebp - 0xf80], eax
mov eax, dword [ebp - 0x44]
cmp eax, esi
setl cl
xor edx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc7c]
cmp eax, ecx
setg dl
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0xc78]
sub edx, eax
mov eax, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, 0x881
setge cl
xor eax, eax
cmp edx, ecx
setge al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x54]
je 0x10034ce8
cmp dword [ebp - 0x10], eax
je 0x10034ce8
xor ebx, ebx
inc ebx
mov eax, ebx
jmp 0x10034ceb
xor ebx, ebx
inc ebx
mov dword [ebp - 0xf88], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff7
jl 0x10034c52
mov dword [ebp - 0x20], 0xe2db58e4
lea ecx, [ebp - 0xed8]
push 2
call fcn.100185e1
xor eax, eax
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10034d43
push dword [ebp - 0x10]
lea ecx, [ebp - 0xed8]
call fcn.1001866d
mov dword [eax], 0x29bf39
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034d24
xor eax, eax
cmp dword [ebp - 0x20], eax
mov byte [ebp - 0x25], al
je 0x10034d5f
cmp byte [ebp - 0x25], 0
je 0x10034d6c
push 0x382
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
jmp 0x10034d6c
cmp byte [ebp - 0x25], 0
je 0x10034d6c
push eax
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
push ebx
lea ecx, [ebp - 0xed8]
call fcn.1001866d
lea ecx, [ebp - 0xed8]
inc dword [eax]
mov dword [ebp - 4], esi
call fcn.10018668
push 4
lea ecx, [ebp - 0x5d8]
call fcn.100185e1
mov dword [ebp - 4], 0x1b
lea ecx, [ebp - 0x1128]
mov dword [ebp - 0x30], 0x6fe7d8a8
mov dword [ebp - 0x60], 2
push ebx
call fcn.100185e1
push ebx
lea ecx, [ebp - 0x1344]
mov byte [ebp - 4], 0x1c
call fcn.100185e1
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x54], 0xe07b88c8
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10034dfe
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5d8]
call fcn.1001866d
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10034de2
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034e2a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1128]
call fcn.1001866d
mov dword [eax], 0x2314af12
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10034e06
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034e56
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1344]
call fcn.1001866d
mov dword [eax], 0x90cb933d
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10034e32
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10034e78
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x196c], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10034e5f
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x100350b0
jmp 0x10034e8a
xor ebx, ebx
inc ebx
push 9
pop eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xae0]
push ebx
call fcn.100185e1
mov byte [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0x3de7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034ed5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xae0]
call fcn.1001866d
mov dword [eax], 2
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10034eb4
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x10034f63
mov dword [ebp - 0x20], 7
lea ecx, [ebp - 0xae0]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor edx, edx
test ecx, ecx
lea ecx, [ebp - 0x5d8]
setns dl
imul edx, dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov dword [eax], edx
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
push dword [ebp - 0x1c]
cmp dword [eax], ecx
lea ecx, [ebp - 0x5d8]
setle bl
call fcn.1001866d
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10034f58
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10034ee2
xor eax, eax
dec dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x10035091
xor ebx, ebx
inc ebx
jmp 0x10034f7a
xor eax, eax
movdqa xmm0, xmmword [0x10007be0]
lea ecx, [ebp - 0x1a54]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x15a4]
push eax
lea eax, [ebp - 0x15b4]
mov dword [ebp - 0x20], ebx
push eax
movdqu xmmword [ebp - 0x15b4], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x190]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1730]
push dword [esi]
call fcn.10018642
mov byte [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x10035072
mov dword [ebp - 0x10], 0x72305aba
lea ecx, [ebp - 0x5d8]
inc dword [ebp - 0x10]
push dword [ebp - 0x1c]
call fcn.1001866d
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x10035018
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1003501a
mov eax, ebx
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x1003503d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5d8]
call fcn.1001866d
cmp dword [eax], 0
jne 0x1003503d
xor eax, eax
mov esi, eax
jmp 0x10035045
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xae0]
call fcn.1001866d
mov ecx, dword [ebp - 0x10]
imul ecx, esi
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x1c]
jns 0x10034fe6
inc dword [ebp - 0x54]
lea ecx, [ebp - 0x1730]
mov byte [ebp - 4], 0x1e
call fcn.10018668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x10034f78
lea ecx, [ebp - 0xae0]
mov byte [ebp - 4], 0x1d
call fcn.10018668
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x10034e87
or esi, 0xffffffff
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x1344]
mov dword [ebp - 0x20], eax
call fcn.10018668
lea ecx, [ebp - 0x1128]
call fcn.10018668
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 4], esi
call fcn.10018668
mov dword [ebp - 0x30], 0xc74a
xor eax, eax
mov dword [ebp - 0x48], 0x54bcd76c
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 0xece3051e
mov dword [ebp - 0x44], 0xd4431fad
mov dword [ebp - 0x2c], 0xf2d6273d
mov dword [ebp - 0x20], 0x3ed13222
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1003512c
push 0xfffffffffffffffd
pop ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3a8], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10035115
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1003515d
mov eax, dword [ebp - 0x44]
dec dword [ebp - 0x44]
test eax, eax
jne 0x10035140
lea ecx, [eax + 1]
jmp 0x10035144
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
neg eax
push 4
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setl dl
mov dword [ebp - 0x3a8], edx
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, 0xf260c96e
setl dl
xor ecx, ecx
sub eax, edx
mov dword [ebp - 0x3a8], edx
cmp eax, 0xfffffff8
mov eax, dword [ebp - 0x3c]
setne cl
add eax, 0x66197039
add eax, ecx
lea ecx, [ebp - 0x6e0]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
call fcn.100185e1
xor ebx, ebx
mov dword [ebp - 4], 0x20
inc ebx
mov dword [ebp - 0x30], 0x6fe7d8a8
mov dword [ebp - 0x60], 2
lea ecx, [ebp - 0x113c]
push ebx
call fcn.100185e1
push ebx
lea ecx, [ebp - 0x135c]
mov byte [ebp - 4], 0x21
call fcn.100185e1
mov byte [ebp - 4], 0x22
xor eax, eax
mov dword [ebp - 0x54], 0xe07b88c8
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10035238
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e0]
call fcn.1001866d
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003521c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10035264
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x113c]
call fcn.1001866d
mov dword [eax], 0x2314af12
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x10035240
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10035290
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x135c]
call fcn.1001866d
mov dword [eax], 0x90cb933d
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x1003526c
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x100352b2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x197c], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10035299
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x100354e8
push 9
pop eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0xaf8]
push ebx
call fcn.100185e1
mov byte [ebp - 4], 0x23
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0x3de7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003530a
push dword [ebp - 0x10]
lea ecx, [ebp - 0xaf8]
call fcn.1001866d
mov dword [eax], 2
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100352e9
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x10035398
mov dword [ebp - 0x20], 7
lea ecx, [ebp - 0xaf8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor edx, edx
test ecx, ecx
lea ecx, [ebp - 0x6e0]
setns dl
imul edx, dword [ebp - 0x1c]
push dword [ebp - 0x1c]
mov dword [eax], edx
call fcn.1001866d
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
push dword [ebp - 0x1c]
cmp dword [eax], ecx
lea ecx, [ebp - 0x6e0]
setle bl
call fcn.1001866d
xor ecx, ecx
cmp dword [eax], ebx
sete cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1003538d
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x10035317
xor eax, eax
dec dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x100354c6
xor ebx, ebx
inc ebx
jmp 0x100353af
xor eax, eax
movdqa xmm0, xmmword [0x10007be0]
lea ecx, [ebp - 0x198c]
mov dword [ebp - 0x44], eax
push 8
pop eax
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x1444]
push eax
lea eax, [ebp - 0x1454]
mov dword [ebp - 0x20], ebx
push eax
movdqu xmmword [ebp - 0x1454], xmm0
call fcn.1001867c
lea ecx, [ebp - 0x192]
mov esi, eax
call fcn.10008d33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x17d8]
push dword [esi]
call fcn.10018642
mov byte [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], 3
cmp dword [ebp - 0x1c], eax
jl 0x100354a7
mov dword [ebp - 0x10], 0x72305aba
lea ecx, [ebp - 0x6e0]
inc dword [ebp - 0x10]
push dword [ebp - 0x1c]
call fcn.1001866d
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x1003544d
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1003544f
mov eax, ebx
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x10035472
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e0]
call fcn.1001866d
cmp dword [eax], 0
jne 0x10035472
xor eax, eax
mov esi, eax
jmp 0x1003547a
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xaf8]
call fcn.1001866d
mov ecx, dword [ebp - 0x10]
imul ecx, esi
mov edx, dword [eax]
mov eax, dword [ebp - 0x60]
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
inc ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x1c]
jns 0x1003541b
inc dword [ebp - 0x54]
lea ecx, [ebp - 0x17d8]
mov byte [ebp - 4], 0x23
call fcn.10018668
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x100353ad
lea ecx, [ebp - 0xaf8]
mov byte [ebp - 4], 0x22
call fcn.10018668
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
push 1
pop ebx
jle 0x100352bf
or esi, 0xffffffff
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x135c]
mov dword [ebp - 0x20], eax
call fcn.10018668
lea ecx, [ebp - 0x113c]
call fcn.10018668
lea ecx, [ebp - 0x6e0]
mov dword [ebp - 4], esi
call fcn.10018668
push 3
xor ebx, ebx
pop ecx
mov dword [ebp - 0x14], ecx
inc ebx
mov dword [ebp - 0x48], ebx
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x48], 0x4af7bdd4
mov dword [ebp - 0x48], 0xfffffff6
mov dword [ebp - 0x38], 0x14f16367
mov dword [ebp - 0x10], eax
jmp 0x1003554a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc98], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1003553d
mov ecx, dword [ebp - 0xc90]
xor edx, edx
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, ebx
setle dl
sub eax, edx
cmp eax, esi
jl 0x10035588
mov dword [ebp - 0x48], 0x81d21f1e
mov dword [ebp - 0x14], 5
jmp 0x1003557d
inc dword [ebp - 0x48]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff4
jle 0x10035577
jmp 0x10035645
mov dword [ebp - 0x10], 0x333c7d24
mov dword [ebp - 0x14], 0xf
jmp 0x1003563b
xor eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xf6c], eax
mov dword [ebp - 0xf68], eax
mov dword [ebp - 0xf64], eax
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x44]
cmp eax, esi
setl cl
xor edx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0xc94]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
mov dword [ebp - 0x48], edx
mov edx, dword [ebp - 0xc90]
sub edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, 0x881
setge cl
xor eax, eax
cmp edx, ecx
setge al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
imul ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x54]
je 0x1003562f
cmp dword [ebp - 0x10], eax
je 0x1003562f
xor ebx, ebx
inc ebx
mov eax, ebx
jmp 0x10035632
xor ebx, ebx
inc ebx
mov dword [ebp - 0xf68], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff7
jl 0x1003559b
mov dword [ebp - 0x14], 0xca4f833f
lea ecx, [ebp - 0x5f0]
push 2
call fcn.100185e1
mov dword [ebp - 4], 0x25
xor eax, eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003568b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f4], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1003566d
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100356b3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x5f0]
call fcn.1001866d
mov dword [eax], 0x36d0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10035694
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003571e
mov dword [ebp - 0x10], 0x1fe77dd6
mov dword [ebp - 0x30], 0xe164caf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jg 0x1003571b
mov dword [ebp - 0x20], 0x1dfd9475
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], eax
jg 0x10035711
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1f4], ecx
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10035707
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x100356e5
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x100356ce
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x100356b8
push 8
mov dword [ebp - 0x14], eax
pop ecx
jmp 0x10035883
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x2c], eax
jmp 0x10035877
cmp dword [ebp - 0x2c], ecx
jle 0x1003573d
cmp dword [ebp - 0x14], ecx
jge 0x1003572e
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 4], esi
call fcn.10018668
xor eax, eax
lea ecx, [ebp - 0xcb0]
inc eax
mov dword [ebp - 0x34], eax
push eax
call fcn.100185e1
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0xde8]
mov dword [ebp - 0x38], 0x32b7b88c
push 3
call fcn.100185e1
xor eax, eax
mov byte [ebp - 4], 0x27
xor ebx, ebx
mov dword [ebp - 0x14], eax
inc ebx
cmp dword [ebp - 0x14], ebx
jge 0x100358fc
push dword [ebp - 0x14]
lea ecx, [ebp - 0xcb0]
call fcn.1001866d
mov dword [eax], 0xeb77278f
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x100358d8
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10035924