Function at 0x10032d56
Capabilities:
Accept command line arguments
Create directory
Create pipe
Create process on windows
Create thread
Delete directory
Delete file
Delete registry value
Get common file path
Get disk information
Get disk size
Get file attributes
Get graphical window text
Log keystrokes via polling
Parse pe header
Query environment variable
Query or enumerate registry key
Read .ini file
Set thread local storage value
Start service
Terminate process

Disassembly:
mov eax, 0x10086fb1
call fcn.100859c8
mov eax, 0x13bc
call fcn.10081890
push ebx
push esi
mov dword [ebp - 0x2c], 0xfffffff8
xor eax, eax
push edi
mov dword [ebp - 0x4c], 0x5c0de450
mov dword [ebp - 0x24], 0xddbf4df7
push 3
mov dword [ebp - 0x40], 0xda3bb1d4
pop edi
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0x939efd91
push 2
mov dword [ebp - 0x10], eax
pop esi
mov byte [ebp - 0x7d], dl
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x10], esi
jge 0x10032dc1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x128], 0xc80fc3a0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10032da9
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x10032ddb
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x128]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x124]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
sbb eax, eax
neg eax
cmp dword [ebp - 0x2c], eax
je 0x10032e76
mov eax, dword [ebp - 0x124]
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10032e89
cmp dword [ebp - 0x128], eax
jne 0x10032e89
mov edx, eax
jmp 0x10032e8e
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
sete cl
xor edx, edx
cmp eax, ecx
setl dl
sub edx, 0xd145
neg edx
sbb edx, edx
xor eax, eax
inc edx
or ebx, 0xffffffff
cmp edx, ebx
setl al
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x4c], 0x5c0de450
mov dword [ebp - 0x24], 0xddbf4df7
mov dword [ebp - 0x40], 0xda3bb1d4
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0x939efd91
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10032f02
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x148], 0xc80fc3a0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10032eea
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x10032f1c
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x144]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x144]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
sbb eax, eax
neg eax
cmp dword [ebp - 0x2c], eax
je 0x10032fb7
mov eax, dword [ebp - 0x144]
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10032fca
cmp dword [ebp - 0x148], eax
jne 0x10032fca
mov edx, eax
jmp 0x10032fcf
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
sete cl
xor edx, edx
cmp eax, ecx
setl dl
sub edx, 0xd145
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, ebx
setl al
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x2c], 0xfffffff8
inc eax
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x3c], 0x21c3a23f
mov dword [ebp - 0x3c], 0x7ecc2443
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], 0xe7528ace
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], eax
jge 0x10033045
mov eax, dword [ebp - 0x10]
xor ecx, ecx
inc ecx
mov dword [ebp + eax*4 - 0xe68], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1003302d
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x10033068
mov dword [ebp - 0x3c], 0x6652
mov dword [ebp - 0x3c], 0xb7f609b2
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x10]
push 1
pop eax
cmp dword [ebp - 0x10], 0xfffffff1
jge 0x1003304e
mov dword [ebp - 0x40], 0xfffffffe
xor ecx, ecx
inc ecx
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], 0xe88b1495
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100330a8
xor edi, edi
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x138], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033091
push 3
xor eax, eax
pop edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100330c4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8f8], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100330b0
xor eax, eax
cmp dword [ebp - 0x134], eax
jge 0x100330d2
jne 0x100330d2
mov edx, eax
jmp 0x100330d7
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x134]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xff23
jge 0x100330fa
xor eax, eax
cmp dword [ebp - 0x134], eax
jne 0x100330fa
mov ecx, eax
jmp 0x100330ff
xor eax, eax
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, 0x409884cb
setne al
cmp eax, 0xecf54c3c
ja 0x10033117
mov eax, dword [ebp - 0x134]
mov eax, dword [ebp - 0x134]
mov ecx, 0x5f27a412
xor eax, eax
cmp dword [ebp - 0x138], eax
je 0x10033283
mov dword [ebp - 0x580], ecx
mov dword [ebp - 0x57c], ecx
mov dword [ebp - 0x578], ecx
mov dword [ebp - 0x574], ecx
mov dword [ebp - 0x58], 0xc9aa6f57
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1003316e
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1198], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003315a
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033184
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x668], 0x7da828c0
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10033173
mov eax, dword [ebp - 0x134]
xor ecx, ecx
mov eax, dword [ebp - 0x134]
test eax, eax
mov eax, dword [ebp - 0x57c]
setns cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x134], edx
mov eax, dword [ebp - 0x574]
cmp edx, eax
mov edx, dword [ebp - 0x40]
setle cl
imul edx, ecx
xor ecx, ecx
mov dword [ebp - 0x1198], edx
mov eax, dword [ebp - 0x57c]
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x40]
jl 0x100331e8
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x100331e8
mov ecx, eax
jmp 0x100331ed
xor eax, eax
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, ebx
setne al
sub eax, 0x718b9628
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
inc ecx
add eax, dword [ebp - 0x8f4]
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, 0xfffffffa
je 0x1003321d
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x1003321d
mov edx, eax
jmp 0x10033222
xor eax, eax
lea edx, [eax + 1]
mov dword [ebp - 0x668], edx
xor ecx, ecx
mov eax, dword [ebp - 0x8f4]
sub edx, eax
mov eax, dword [ebp - 0x40]
cmp eax, edx
mov eax, dword [ebp - 0x578]
setge cl
xor edx, edx
cmp ecx, 0x4c3d
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x1700
setne al
cmp dword [ebp - 0x578], eax
jl 0x10033272
cmp dword [ebp - 0x30], 0
je 0x10033272
xor eax, eax
lea edx, [eax + 1]
jmp 0x10033274
xor edx, edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x58], ecx
jmp 0x100332aa
xor ebx, ebx
mov dword [ebp - 0x24], eax
inc ebx
cmp dword [ebp - 0x24], ebx
jg 0x100332a7
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x100332a2
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
xor eax, eax
inc dword [ebp - 0x24]
jmp 0x10033289
or ebx, 0xffffffff
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], al
je 0x100332d0
push eax
push 0xfa4
push 0xd77
push eax
push 0x66
push 0x12e7
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
xor eax, eax
mov dword [ebp - 0x4c], 0x5c0de450
mov dword [ebp - 0x24], 0xddbf4df7
mov dword [ebp - 0x40], 0xda3bb1d4
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x30], 0x939efd91
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1003330f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x118], 0xc80fc3a0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100332f7
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x10033329
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x118]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x114]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
sbb eax, eax
neg eax
cmp dword [ebp - 0x2c], eax
je 0x100333c4
mov eax, dword [ebp - 0x114]
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x100333d7
cmp dword [ebp - 0x118], eax
jne 0x100333d7
mov edx, eax
jmp 0x100333dc
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
push 4
sete cl
xor edx, edx
cmp eax, ecx
lea ecx, [ebp - 0x38c]
setl dl
sub edx, 0xd145
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, ebx
setl al
mov dword [ebp - 0x30], eax
call fcn.100189bc
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0xb0881d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10033447
xor edi, edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.10018a43
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10033429
push 3
xor eax, eax
pop edi
xor ecx, ecx
mov dword [ebp - 0x18], eax
inc ecx
cmp dword [ebp - 0x18], ecx
jge 0x1003346a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 0xe1e87df2
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10033452
xor eax, eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], edi
jg 0x10033621
push edi
lea ecx, [ebp - 0x288]
call fcn.100189bc
xor eax, eax
inc eax
mov byte [ebp - 4], al
mov dword [ebp - 0x40], 0x761be360
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], edi
jge 0x100334ba
push dword [ebp - 0x10]
lea ecx, [ebp - 0x288]
call fcn.10018a43
mov dword [eax], 0x801fc3ee
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1003349b
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x288]
call fcn.10018a43
xor ebx, ebx
lea ecx, [ebp - 0x288]
inc ebx
xor edi, edi
push ebx
mov dword [eax], edi
call fcn.10018a43
push 3
pop edi
cmp dword [eax], edi
jg 0x1003352e
push dword [ebp - 0x78]
lea ecx, [ebp - 0x38c]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x288]
mov esi, eax
call fcn.10018a43
lea ecx, [ebp - 0x38c]
push dword [eax]
call fcn.10018a43
mov ecx, dword [esi]
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0x288]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x288]
inc dword [eax]
call fcn.10018a43
cmp dword [eax], edi
jle 0x100334e0
push 2
pop esi
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x38c]
push edi
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x288]
call fcn.10018a43
push esi
lea ecx, [ebp - 0x288]
call fcn.10018a43
mov ecx, dword [ebp - 0x40]
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x288]
call fcn.10018a43
cmp dword [eax], 0x37c57f39
jne 0x1003357c
cmp dword [ebp - 0x78], 0
je 0x1003357c
xor eax, eax
lea edx, [eax + 1]
jmp 0x1003357e
xor edx, edx
mov eax, dword [ebp - 0x78]
xor ecx, ecx
mov esi, dword [ebp - 0x40]
cmp edx, eax
push dword [ebp - 0x78]
setne cl
imul esi, ecx
lea ecx, [ebp - 0x38c]
neg esi
sbb esi, esi
neg esi
call fcn.10018a43
push dword [ebp - 0x78]
xor ebx, ebx
lea ecx, [ebp - 0x38c]
cmp dword [eax], esi
setl bl
call fcn.10018a43
mov eax, dword [eax]
add eax, ebx
jne 0x100335c0
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x78]
lea ecx, [ebp - 0x38c]
call fcn.10018a43
cmp dword [ebp - 0x40], 0xd21f1eb3
jb 0x100335f0
mov dword [ebp - 0x1c], 0
jmp 0x100335e9
cmp dword [ebp - 0x78], 0
jne 0x10033600
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x100335e0
jmp 0x10033600
mov byte [ebp - 0x45], 0
cmp byte [ebp - 0x45], 0
je 0x10033600
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0
call fcn.10018a3e
inc dword [ebp - 0x78]
push 2
pop esi
cmp dword [ebp - 0x78], edi
jle 0x10033476
or ebx, 0xffffffff
mov dword [ebp - 0x1c], 0xfffffff8
jmp 0x10033644
mov dword [ebp - 0x30], 0x8e5161e3
mov dword [ebp - 0x58], 0xfffffff7
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x1003362a
lea ecx, [ebp - 0x38c]
mov dword [ebp - 4], ebx
call fcn.10018a3e
push esi
lea ecx, [ebp - 0xcf8]
call fcn.100189bc
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1003368f
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcf8]
call fcn.10018a43
mov dword [eax], 0x1928
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033671
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x100336a1
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x100336b4
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
lea ecx, [ebp - 0xcf8]
mov dword [ebp - 4], ebx
call fcn.10018a3e
mov dword [ebp - 0x1c], 0xdde0bcd8
lea ecx, [ebp - 0x840]
push edi
call fcn.100189bc
mov dword [ebp - 4], edi
mov dword [ebp - 0x40], 7
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x30], 0x11f31773
mov dword [ebp - 0x18], 0
jmp 0x1003370d
push dword [ebp - 0x18]
lea ecx, [ebp - 0x840]
call fcn.10018a43
mov dword [eax], 0xbacc5d9b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100336f6
xor ebx, ebx
mov dword [ebp - 0x18], 0
inc ebx
jmp 0x1003372b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x228], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1003371e
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xfffffff9
cmp dword [ebp - 0x1c], 0x23
jle 0x100338a1
mov dword [ebp - 0x30], esi
or eax, 0xffffffff
mov dword [ebp - 0x34], 0xe1b88146
mov dword [ebp - 0x28], 0x5ee28fde
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x3c], 0x23e93d0b
mov dword [ebp - 0x3c], 0x9e9d60a2
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0x720348f4
mov dword [ebp - 0x3c], 0x4307a329
mov dword [ebp - 0x3c], 0xfffffffd
mov dword [ebp - 0x50], 0x8e10e5e5
mov dword [ebp - 0x40], 0x260389a9
mov dword [ebp - 0x10], 0
jmp 0x100337a9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5f4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003379c
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
dec dword [ebp - 0x40]
cmp eax, ecx
jg 0x100337bf
mov esi, ebx
jmp 0x100337c1
xor esi, esi
push ebx
lea ecx, [ebp - 0x840]
call fcn.10018a43
or ecx, 0xffffffff
push 2
mov dword [eax], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x34]
cmp eax, ecx
lea ecx, [ebp - 0x840]
setle bl
call fcn.10018a43
mov dword [eax], ebx
xor eax, eax
cmp ebx, 0xb9ce
sete al
imul eax, dword [ebp - 0x58]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x1c]
je 0x10033811
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10033811
xor ebx, ebx
inc ebx
jmp 0x10033816
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x40], eax
xor ecx, ecx
mov eax, dword [ebp - 0x40]
cmp eax, ebx
setle cl
xor eax, eax
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], eax
je 0x10033834
mov ecx, ebx
cmp dword [ebp - 0x1c], eax
jne 0x10033836
mov ecx, eax
mov eax, 0xe5a82a6f
sub eax, ecx
add eax, dword [ebp - 0x54]
je 0x1003384f
cmp dword [ebp - 0x5f4], 0
je 0x1003384f
mov eax, ebx
jmp 0x10033851
xor eax, eax
cmp eax, dword [ebp - 0x50]
jle 0x10033859
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x228]
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x28], 0x42c5
add edx, esi
push 2
pop esi
cmp edx, eax
setg cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x23
jg 0x10033744
or eax, 0xffffffff
lea ecx, [ebp - 0x840]
mov dword [ebp - 4], eax
call fcn.10018a3e
mov dword [ebp - 0x2c], 0xfffffff8
or eax, 0xffffffff
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x28], 0x147909b7
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x28], 0xe9120837
mov dword [ebp - 0x30], 0x796840eb
mov dword [ebp - 0x10], 0
jmp 0x100338f5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf00], 0x6950a4ba
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100338e4
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0xf00], edx
mov eax, dword [ebp - 0x18]
sub edx, eax
add edx, dword [ebp - 0x18]
xor eax, eax
cmp edx, 0x3245f1db
setg al
cmp eax, dword [ebp - 0x18]
jle 0x10033951
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10033953
mov ecx, ebx
jmp 0x10033955
xor eax, eax
mov ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x10], 9
mov dword [ebp - 0x3c], 0x21c3a23f
mov dword [ebp - 0x3c], 0x7ecc2443
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x28], 0xe7528ace
mov dword [ebp - 0x10], eax
jmp 0x10033989
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf38], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003397c
mov dword [ebp - 0x10], 0xffffffeb
jmp 0x100339ae
mov dword [ebp - 0x3c], 0x6652
mov dword [ebp - 0x3c], 0xb7f609b2
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff1
jge 0x10033997
mov dword [ebp - 0x4c], 0x5c0de450
or eax, 0xffffffff
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x30], 0xe88b1495
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100339f5
xor edi, edi
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x110], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100339de
push 3
xor eax, eax
pop edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033a11
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x908], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100339fd
xor eax, eax
cmp dword [ebp - 0x10c], eax
jge 0x10033a1d
mov edx, eax
je 0x10033a1f
mov edx, ebx
mov eax, dword [ebp - 0x10c]
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xff23
jge 0x10033a40
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x10c], eax
je 0x10033a42
mov ecx, ebx
xor eax, eax
cmp ecx, 0x409884cb
setne al
cmp eax, 0xecf54c3c
ja 0x10033a5a
mov eax, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x10c]
xor eax, eax
cmp dword [ebp - 0x110], eax
je 0x10033bb3
mov ecx, 0x5f27a412
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x5d8], ecx
mov dword [ebp - 0x5d4], ecx
mov dword [ebp - 0x58], 0xc9aa6f57
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10033aae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x10f0], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10033a9a
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033ac4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x618], 0x7da828c0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033ab3
mov eax, dword [ebp - 0x10c]
xor ecx, ecx
mov eax, dword [ebp - 0x10c]
test eax, eax
mov eax, dword [ebp - 0x5dc]
setns cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x10c], edx
mov eax, dword [ebp - 0x5d4]
cmp edx, eax
mov edx, dword [ebp - 0x40]
setle cl
imul edx, ecx
xor ecx, ecx
mov dword [ebp - 0x10f0], edx
mov eax, dword [ebp - 0x5dc]
cmp edx, eax
sete cl
cmp ecx, dword [ebp - 0x40]
jl 0x10033b23
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x24], eax
je 0x10033b25
mov ecx, ebx
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setne al
sub eax, 0x718b9628
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x904]
cmp eax, ebx
sbb eax, eax
neg eax
cmp eax, 0xfffffffa
je 0x10033b53
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x10033b55
mov edx, ebx
mov dword [ebp - 0x618], edx
xor ecx, ecx
mov eax, dword [ebp - 0x904]
sub edx, eax
mov eax, dword [ebp - 0x40]
cmp eax, edx
mov eax, dword [ebp - 0x5d8]
setge cl
xor edx, edx
cmp ecx, 0x4c3d
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0x1700
setne al
cmp dword [ebp - 0x5d8], eax
jl 0x10033ba2
cmp dword [ebp - 0x30], 0
je 0x10033ba2
mov edx, ebx
jmp 0x10033ba4
xor edx, edx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x58], ecx
jmp 0x10033bd4
mov dword [ebp - 0x24], eax
jmp 0x10033bcf
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033bcc
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10033bb8
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], al
je 0x10033bf8
push eax
push 0xfa4
push 0xd77
push eax
push 0x66
push 0x12e7
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x24], 0xddbf4df7
lea ecx, [ebp - 0xf0c]
mov dword [ebp - 0x3c], ebx
push 4
call fcn.100189bc
push 4
pop ecx
mov dword [ebp - 4], ecx
xor eax, eax
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10033c45
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf0c]
call fcn.10018a43
mov dword [eax], 0x8e56f9b2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033c26
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033c72
push 0x17ca
push eax
push 0x48a
push 0x22a4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
inc dword [ebp - 0x28]
lea ecx, [ebp - 0xf0c]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10018a3e
mov dword [ebp - 0x40], 0xda3bb1d4
xor eax, eax
mov dword [ebp - 0x20], 0x9b4e94f9
mov dword [ebp - 0x38], 0x126c7f05
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0xce35a12a
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x10], eax
jmp 0x10033cc4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9c0], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10033cb3
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 0xfff7
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
neg edx
cmp edx, eax
jle 0x10033d34
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10033d36
mov ecx, eax
jmp 0x10033d38
xor eax, eax
mov ecx, ebx
cmp ecx, dword [ebp - 0x20]
push 5
pop ecx
jne 0x10033e52
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], 0xbbb531ea
mov dword [ebp - 0x30], 0x585f1c2b
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033d78
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x230], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033d64
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffed
jg 0x10033e61
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], eax
jmp 0x10033db0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10033dad
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x9c0], 0xd4826422
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10033d95
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
je 0x10033d8d
mov eax, dword [ebp - 0x20]
xor edx, edx
dec dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x230]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jg 0x10033df6
cmp dword [ebp - 0x38], eax
je 0x10033dfe
cmp dword [ebp - 0x230], eax
jne 0x10033e01
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x9bc]
xor edx, edx
mov dword [ebp - 0x38], 0x89ef
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
push 0
setge dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x9bc]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
imul eax, edx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffed
pop eax
jle 0x10033d85
jmp 0x10033e5f
mov dword [ebp - 0x30], 0xca00
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x10], 0xf6af1124
mov dword [ebp - 0x10], eax
jmp 0x10033e9c
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033e82
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033e99
push 0x1580
push eax
call dword [sym.imp.USER32.dll_GetSubMenu]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xe
jle 0x10033e70
mov dword [ebp - 0x30], 0x939efd91
lea ecx, [ebp - 0xd10]
push esi
call fcn.100189bc
push 5
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10033ee4
xor edi, edi
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd10]
call fcn.10018a43
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033ec7
push 3
xor eax, eax
pop edi
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033efc
push eax
push 0x17e
push eax
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
xor eax, eax
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033f22
push eax
push 0xa50
push eax
push 0x12ac
push 0xffa
push eax
push 0x13e3
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
or eax, 0xffffffff
lea ecx, [ebp - 0xd10]
mov dword [ebp - 4], eax
call fcn.10018a3e
mov dword [ebp - 0x10], 0
jmp 0x10033f4d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x120], 0xc80fc3a0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033f3c
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 0
jmp 0x10033f6f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3bc], 0xf37d45db
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033f5e
mov dword [ebp - 0x10], 0x10
jmp 0x10033fb2
mov dword [ebp - 0x24], 0xfffffffe
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3bc], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033fa9
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10033fa6
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1c
jg 0x10033f94
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffe
je 0x10033f7d
xor eax, eax
mov dword [ebp - 0x3bc], 0x7e4fc228
cmp dword [ebp - 0x2c], eax
je 0x10033fde
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], 0xfffffffc
mov eax, dword [ebp - 0x120]
mov edx, dword [ebp - 0x24]
sub edx, eax
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x2c]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x11c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
sbb eax, eax
neg eax
cmp dword [ebp - 0x2c], eax
je 0x10034079
mov eax, dword [ebp - 0x11c]
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x1003408a
mov edx, eax
cmp dword [ebp - 0x120], eax
je 0x1003408c
mov edx, ebx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x4c]
sete cl
xor edx, edx
cmp eax, ecx
setl dl
sub edx, 0xd145
neg edx
sbb edx, edx
xor eax, eax
inc edx
or ecx, 0xffffffff
cmp edx, ecx
setl al
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x20], 0x9b4e94f9
mov dword [ebp - 0x38], 0x126c7f05
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0xce35a12a
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x10], eax
jmp 0x100340ef
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x984], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100340de
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 0xfff7
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
neg edx
cmp edx, eax
jle 0x1003415f
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10034161
mov ecx, eax
jmp 0x10034163
xor eax, eax
mov ecx, ebx
cmp ecx, dword [ebp - 0x20]
jne 0x1003427f
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], 0xbbb531ea
mov dword [ebp - 0x30], 0x585f1c2b
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100341a4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x238], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003418c
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffed
jg 0x1003428c
jmp 0x100341b5
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], eax
jmp 0x100341e0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x100341dd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x984], 0xd4826422
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100341c5
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 8
je 0x100341bd
mov eax, dword [ebp - 0x20]
xor edx, edx
dec dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setg dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x238]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jg 0x10034226
cmp dword [ebp - 0x38], eax
je 0x1003422e
cmp dword [ebp - 0x238], eax
jne 0x10034231
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x980]
xor edx, edx
mov dword [ebp - 0x38], 0x89ef
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setge dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x980]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
imul eax, edx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xffffffed
jle 0x100341b3
jmp 0x1003428c
mov dword [ebp - 0x30], 0xca00
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
push 4
lea ecx, [ebp - 0x3dc]
call fcn.100189bc
mov dword [ebp - 4], 6
mov dword [ebp - 0x1c], 0xb0881d
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 4
jge 0x100342d2
xor edi, edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3dc]
call fcn.10018a43
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100342b6
push 3
pop edi
mov dword [ebp - 0x18], 0
jmp 0x100342e9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0xe1e87df2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100342db
mov dword [ebp - 0x74], 0
cmp dword [ebp - 0x74], edi
jg 0x10034492
push edi
lea ecx, [ebp - 0x2c4]
call fcn.100189bc
mov byte [ebp - 4], 7
mov dword [ebp - 0x40], 0x761be360
mov dword [ebp - 0x10], 0
jmp 0x1003432f
push dword [ebp - 0x10]
call fcn.10018a43
mov dword [eax], 0x801fc3ee
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x2c4]
cmp dword [ebp - 0x10], edi
jl 0x1003431e
push ebx
call fcn.10018a43
xor edi, edi
lea ecx, [ebp - 0x2c4]
push ebx
mov dword [eax], edi
call fcn.10018a43
push 3
pop edi
cmp dword [eax], edi
jg 0x100343a5
push dword [ebp - 0x74]
lea ecx, [ebp - 0x3dc]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2c4]
mov esi, eax
call fcn.10018a43
lea ecx, [ebp - 0x3dc]
push dword [eax]
call fcn.10018a43
mov ecx, dword [esi]
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0x2c4]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2c4]
inc dword [eax]
call fcn.10018a43
cmp dword [eax], edi
jle 0x10034357
push 2
pop esi
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x3dc]
push edi
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2c4]
call fcn.10018a43
push esi
lea ecx, [ebp - 0x2c4]
call fcn.10018a43
mov ecx, dword [ebp - 0x40]
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2c4]
call fcn.10018a43
cmp dword [eax], 0x37c57f39
jne 0x100343f0
cmp dword [ebp - 0x74], 0
je 0x100343f0
mov edx, ebx
jmp 0x100343f2
xor edx, edx
mov eax, dword [ebp - 0x74]
xor ecx, ecx
mov esi, dword [ebp - 0x40]
cmp edx, eax
push dword [ebp - 0x74]
setne cl
imul esi, ecx
lea ecx, [ebp - 0x3dc]
neg esi
sbb esi, esi
neg esi
call fcn.10018a43
push dword [ebp - 0x74]
xor ebx, ebx
lea ecx, [ebp - 0x3dc]
cmp dword [eax], esi
setl bl
call fcn.10018a43
mov eax, dword [eax]
add eax, ebx
jne 0x10034434
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x74]
lea ecx, [ebp - 0x3dc]
call fcn.10018a43
cmp dword [ebp - 0x40], 0xd21f1eb3
jb 0x10034461
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1003445a
cmp dword [ebp - 0x74], eax
jne 0x10034471
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x10034452
jmp 0x10034471
mov byte [ebp - 0x45], 0
cmp byte [ebp - 0x45], 0
je 0x10034471
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
lea ecx, [ebp - 0x2c4]
mov byte [ebp - 4], 6
call fcn.10018a3e
inc dword [ebp - 0x74]
push 1
pop ebx
push 2
pop esi
cmp dword [ebp - 0x74], edi
jle 0x100342fe
mov dword [ebp - 0x1c], 0xfffffff8
jmp 0x100344b5
mov dword [ebp - 0x30], 0x8e5161e3
mov dword [ebp - 0x58], 0xfffffff7
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x1003449b
or eax, 0xffffffff
lea ecx, [ebp - 0x3dc]
mov dword [ebp - 4], eax
call fcn.10018a3e
push 4
lea ecx, [ebp - 0x368]
call fcn.100189bc
mov dword [ebp - 4], 8
mov dword [ebp - 0x1c], 0xb0881d
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 4
jge 0x1003450f
xor edi, edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x368]
call fcn.10018a43
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100344f6
mov dword [ebp - 0x18], 0
jmp 0x10034526
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xe1e87df2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10034518
push 3
pop esi
mov dword [ebp - 0x7c], 0
cmp dword [ebp - 0x7c], esi
jg 0x100346cf
push esi
lea ecx, [ebp - 0x2ac]
call fcn.100189bc
mov byte [ebp - 4], 9
mov dword [ebp - 0x40], 0x761be360
mov dword [ebp - 0x10], 0
jmp 0x1003456f
push dword [ebp - 0x10]
call fcn.10018a43
mov dword [eax], 0x801fc3ee
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x2ac]
cmp dword [ebp - 0x10], esi
jl 0x1003455e
push ebx
call fcn.10018a43
xor edi, edi
lea ecx, [ebp - 0x2ac]
push ebx
mov dword [eax], edi
call fcn.10018a43
jmp 0x100345d6
push dword [ebp - 0x7c]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2ac]
mov esi, eax
call fcn.10018a43
lea ecx, [ebp - 0x368]
push dword [eax]
call fcn.10018a43
mov ecx, dword [esi]
push ebx
mov dword [eax], ecx
lea ecx, [ebp - 0x2ac]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2ac]
inc dword [eax]
call fcn.10018a43
push 3
pop esi
lea ecx, [ebp - 0x368]
cmp dword [eax], esi
jle 0x10034592
mov eax, dword [ebp - 0x40]
push esi
call fcn.10018a43
push ebx
lea ecx, [ebp - 0x2ac]
call fcn.10018a43
push 2
pop edi
push edi
lea ecx, [ebp - 0x2ac]
call fcn.10018a43
mov ecx, dword [ebp - 0x40]
push 0
mov dword [eax], ecx
lea ecx, [ebp - 0x2ac]
call fcn.10018a43
cmp dword [eax], 0x37c57f39
jne 0x10034628
cmp dword [ebp - 0x7c], 0
je 0x10034628
mov edx, ebx
jmp 0x1003462a
xor edx, edx
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
mov esi, dword [ebp - 0x40]
cmp edx, eax
push dword [ebp - 0x7c]
setne cl
imul esi, ecx
lea ecx, [ebp - 0x368]
neg esi
sbb esi, esi
neg esi
call fcn.10018a43
push dword [ebp - 0x7c]
xor ebx, ebx
lea ecx, [ebp - 0x368]
cmp dword [eax], esi
setl bl
call fcn.10018a43
mov eax, dword [eax]
add eax, ebx
jne 0x1003466c
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x368]
call fcn.10018a43
cmp dword [ebp - 0x40], 0xd21f1eb3
jb 0x1003469c
xor eax, eax
push 3
mov dword [ebp - 0x1c], eax
pop esi
jmp 0x10034695
cmp dword [ebp - 0x7c], eax
jne 0x100346af
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1003468d
jmp 0x100346af
mov byte [ebp - 0x45], 0
cmp byte [ebp - 0x45], 0
je 0x100346ac
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push 3
pop esi
lea ecx, [ebp - 0x2ac]
mov byte [ebp - 4], 8
call fcn.10018a3e
inc dword [ebp - 0x7c]
push 1
pop ebx
cmp dword [ebp - 0x7c], esi
jle 0x1003453e
jmp 0x100346d2
push 2
pop edi
mov dword [ebp - 0x1c], 0xfffffff8
jmp 0x100346f5
mov dword [ebp - 0x30], 0x8e5161e3
mov dword [ebp - 0x58], 0xfffffff7
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe5
jg 0x100346db
or eax, 0xffffffff
lea ecx, [ebp - 0x368]
mov dword [ebp - 4], eax
call fcn.10018a3e
push edi
lea ecx, [ebp - 0xdc]
call fcn.100189bc
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0xad4]
mov dword [ebp - 0x20], 0xa66fe7d8
mov dword [ebp - 0x58], 0x2b5b
mov dword [ebp - 0x28], 0xfffffff7
push edi
call fcn.100189bc
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003476c
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov dword [eax], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003474e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003478c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x240], 0x9a0165d3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10034774
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x100347b2
push dword [ebp - 0x20]
lea ecx, [ebp - 0xad4]
call fcn.10018a43
mov dword [eax], 0xc987
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10034794
xor eax, eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x10034a09
mov dword [ebp - 0x44], 0x772304b2
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x100349ca
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xdc]
push dword [ebp - 0x20]
call fcn.10018a43
mov esi, dword [ebp - 0x44]
lea ecx, [ebp - 0xdc]
push dword [ebp - 0x20]
add esi, dword [eax]
call fcn.10018a43
push ebx
lea ecx, [ebp - 0xdc]
mov edi, dword [eax]
imul edi, esi
call fcn.10018a43
xor ecx, ecx
cmp edi, dword [eax]
setge cl
xor ebx, ebx
neg ecx
cmp ecx, 0xfc24489
lea ecx, [ebp - 0xdc]
setge bl
xor eax, eax
inc eax
push eax
call fcn.10018a43
push dword [ebp - 0x20]
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov ecx, dword [ebp - 0x44]
mov esi, eax
xor eax, eax
cmp ecx, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x44]
push dword [ebp - 0x20]
setge al
xor edx, edx
cmp eax, ecx
lea ecx, [ebp - 0xdc]
setle dl
xor ebx, ebx
imul edx, dword [esi]
imul eax, edx, 0x70d2
cmp eax, 0x4879
setl bl
call fcn.10018a43
xor ecx, ecx
push 0
cmp ebx, dword [eax]
setl cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov ecx, dword [eax]
imul ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
sub ecx, eax
jne 0x100348b3
cmp dword [ebp - 0x20], ecx
jne 0x100348b3
xor ebx, ebx
inc ebx
mov eax, ebx
jmp 0x100348b8
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jne 0x100348c3
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov eax, dword [eax]
mov dword [ebp - 0x240], eax
test eax, eax
je 0x100348ff
mov eax, dword [ebp - 0x240]
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x240], 0
je 0x10034927
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
push dword [ebp - 0x20]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push 3
pop esi
add eax, esi
push 2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xfffffff4
pop edi
cmp dword [ebp - 0x24], 7
jg 0x100349bf
mov dword [ebp - 0x38], 0x54656e2e
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], edi
jge 0x1003498c
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf14], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1003497a
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xf10], eax
mov dword [ebp - 0x38], 0
jmp 0x100349b5
push dword [ebp - 0x38]
lea ecx, [ebp - 0xdc]
call fcn.10018a43
mov dword [eax], 0x56cf
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], edi
jl 0x1003499e
inc dword [ebp - 0x24]
jmp 0x1003495e
dec dword [ebp - 0x44]
jns 0x100347db
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], eax
jg 0x10034a00
or ecx, 0xffffffff
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0xad4]
mov dword [ebp - 0x3c], 0x15f74462
mov dword [ebp - 0x3c], 0x85b5f732
push eax
call fcn.10018a43
push 0
dec dword [eax]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0
pop eax
jle 0x100349d2
dec dword [ebp - 0x20]
jns 0x100347be
lea ecx, [ebp - 0xad4]
call fcn.10018a3e
or eax, 0xffffffff
lea ecx, [ebp - 0xdc]
mov dword [ebp - 4], eax
call fcn.10018a3e
mov dword [ebp - 0x20], 0x9b4e94f9
xor eax, eax
mov dword [ebp - 0x38], 0x126c7f05
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x18], 0xce35a12a
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x10], eax
jmp 0x10034a5c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x99c], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034a4b
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 0xfff7
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
neg edx
cmp edx, eax
jle 0x10034acb
cmp dword [ebp - 0x38], 0
jne 0x10034acb
xor eax, eax
jmp 0x10034acd
mov eax, ebx
cmp eax, dword [ebp - 0x20]
jne 0x10034be6
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], 0xbbb531ea
mov dword [ebp - 0x30], 0x585f1c2b
mov dword [ebp - 0x58], 8
mov dword [ebp - 0x10], 0
jmp 0x10034b08
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x24c], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10034af7
mov dword [ebp - 0x44], 0
jmp 0x10034bda
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 0
jmp 0x10034b47
cmp dword [ebp - 0x20], 8
je 0x10034b25
cmp dword [ebp - 0x44], 0xffffffed
jle 0x10034b19
jmp 0x10034bf3
mov dword [ebp - 0x30], 0xca00
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
or eax, 0xffffffff
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x38], eax
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
cmp eax, 0xb4ef66b1
setge cl
cmp ecx, dword [ebp - 0x38]
jl 0x10034c77
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x18], 0xfffffffe
cmp dword [ebp - 0x18], 0x18
jle 0x10034ca7
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1b
jne 0x10034c6c
mov dword [ebp - 0x58], 0xa01c77dc
mov byte [ebp - 0x45], al
cmp byte [ebp - 0x45], 0
je 0x10034c5a
push 0xab3
push eax
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x1b
push 0
pop eax
je 0x10034c3d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
jg 0x10034c34
jmp 0x10034ca7
mov byte [ebp - 0x45], 0
cmp byte [ebp - 0x45], 0
je 0x10034c89
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov byte [ebp - 0x45], 0
cmp byte [ebp - 0x45], 0
je 0x10034ca7
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov dword [ebp - 0x20], 0x9b4e94f9
mov dword [ebp - 0x38], 0x126c7f05
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x18], 0xce35a12a
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x10], 0
jmp 0x10034ce4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb7c], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034cd3
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 0xfff7
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
xor eax, eax
neg edx
cmp edx, dword [ebp - 0x20]
jle 0x10034d50