Function at 0x1003258d
Capabilities:
Check os version
Delete file
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get file size
Get graphical window text
Get session user name
Parse pe header
Query service status
Read .ini file

Disassembly:
mov eax, 0x10085de6
call fcn.10084430
mov eax, 0x15b4
call fcn.10080be0
push ebx
push esi
mov esi, 0x8c176b0f
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0xed4]
mov ebx, 0x4964a53a
mov byte [ebp - 0x6d], dl
mov dword [ebp - 0x3c], ebx
push edi
mov dword [ebp - 0x3c], 0xc3099cfe
mov dword [ebp - 0x3c], 0x16580849
mov dword [ebp - 0x3c], 0x11f07b4b
push 3
call fcn.100181d6
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003260d
xor edi, edi
inc edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0xed4]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100325f4
dec dword [ebp - 0x48]
lea ecx, [ebp - 0xed4]
or dword [ebp - 4], 0xffffffff
call fcn.10018258
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x1134]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0xc3099cfe
mov dword [ebp - 0x3c], 0x16580849
mov dword [ebp - 0x3c], 0x11f07b4b
push 3
call fcn.100181d6
xor eax, eax
inc eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032677
xor edi, edi
inc edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1134]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003265e
dec dword [ebp - 0x48]
lea ecx, [ebp - 0x1134]
or dword [ebp - 4], 0xffffffff
call fcn.10018258
xor eax, eax
mov dword [ebp - 0x48], 0x15a1
inc eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xeec]
mov dword [ebp - 0x58], 0xc299e885
push eax
call fcn.100181d6
push 2
pop edi
xor eax, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x18], eax
jmp 0x100326d4
push dword [ebp - 0x18]
lea ecx, [ebp - 0xeec]
call fcn.10018274
mov dword [eax], 0xab3c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100326bd
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
mov ebx, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp eax, 0x53bc
setne cl
xor eax, eax
sub ecx, 0xee61
imul ecx, dword [ebp - 0x48]
mov dword [ebp - 0x58], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10032750
push eax
push 0x1cf6
push eax
push eax
push eax
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeec]
call fcn.10018258
mov dword [ebp - 0x3c], esi
lea ecx, [ebp - 0x1094]
push 3
mov dword [ebp - 0x3c], 0x4964a53a
pop esi
mov dword [ebp - 0x3c], 0xc3099cfe
mov dword [ebp - 0x3c], 0x16580849
mov dword [ebp - 0x3c], 0x11f07b4b
push esi
call fcn.100181d6
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100327bf
xor edi, edi
inc edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1094]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100327a4
push 2
pop edi
dec dword [ebp - 0x48]
lea ecx, [ebp - 0x1094]
or dword [ebp - 4], 0xffffffff
call fcn.10018258
push esi
lea ecx, [ebp - 0x7ec]
call fcn.100181d6
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x28], 0xb13638ec
mov dword [ebp - 0x3c], 0xa205b290
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003281a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7ec]
call fcn.10018274
mov dword [eax], 0x3342eb90
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100327fc
xor eax, eax
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x28], eax
jl 0x1003293c
push esi
lea ecx, [ebp - 0x534]
call fcn.100181d6
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x18], eax
jmp 0x1003284e
push dword [ebp - 0x18]
call fcn.10018274
mov dword [eax], 0xc4530722
inc dword [ebp - 0x18]
lea ecx, [ebp - 0x534]
cmp dword [ebp - 0x18], esi
jl 0x1003283d
push edi
call fcn.10018274
mov dword [eax], edi
jmp 0x100328ea
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1003288c
push 0xd90
push 0x7e1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100328d7
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100328aa
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100328d4
push eax
push 0x1195
push 0x2180
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x10032891
push edi
lea ecx, [ebp - 0x534]
call fcn.10018274
dec dword [eax]
push edi
lea ecx, [ebp - 0x534]
call fcn.10018274
cmp dword [eax], 0
jge 0x10032866
push dword [ebp - 0x28]
lea ecx, [ebp - 0x7ec]
call fcn.10018274
push dword [ebp - 0x28]
lea ecx, [ebp - 0x7ec]
mov esi, eax
call fcn.10018274
mov ecx, dword [esi]
mov byte [ebp - 4], 4
mov dword [eax], ecx
lea ecx, [ebp - 0x534]
call fcn.10018258
dec dword [ebp - 0x28]
push 3
pop esi
jns 0x10032826
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7ec]
call fcn.10018258
xor eax, eax
mov dword [ebp - 0x48], 0x15a1
inc eax
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 0x58], 0xc299e885
push eax
call fcn.100181d6
xor eax, eax
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], eax
jmp 0x10032997
push dword [ebp - 0x18]
lea ecx, [ebp - 0xe7c]
call fcn.10018274
mov dword [eax], 0xab3c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10032980
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp eax, 0x53bc
setne cl
xor eax, eax
sub ecx, 0xee61
imul ecx, dword [ebp - 0x48]
mov dword [ebp - 0x58], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10032a0d
push eax
push 0x1cf6
push eax
push eax
push eax
push eax
call ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.10018258
mov dword [ebp - 0x48], 0x5d2d9150
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], 0x81a82e77
mov dword [ebp - 0x18], 0x16488a9
mov dword [ebp - 0x18], eax
jmp 0x10032a4f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf8], 0x58edfe01
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10032a3e
mov eax, dword [ebp - 0xf8]
xor edx, edx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0xf8]
setge dl
xor ecx, ecx
cmp edx, 0xcb8ce3e
setg cl
xor edx, edx
add ecx, 9
cmp ecx, eax
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x34]
sete dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xf8]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x34], 0xffffffeb
cmp dword [ebp - 0x34], 0x31
jg 0x10032b40
xor edi, edi
inc edi
mov dword [ebp - 0x14], 0xfffffff9
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10032b00
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10032b09
cmp dword [ebp - 0x18], eax
jne 0x10032b09
mov esi, eax
jmp 0x10032b0f
xor esi, esi
xor edi, edi
inc esi
inc edi
mov edx, dword [ebp - 0xf8]
sub edx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp esi, eax
setle cl
xor eax, eax
cmp edx, ecx
setge al
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x31
jle 0x10032ae2
push 2
pop edi
mov dword [ebp - 0x14], 0xfffffff6
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x40], 0x90c54408
push edi
call fcn.100181d6
push 7
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032b8e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11a8], 0xab227d37
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032b75
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10032ba1
push dword [ebp - 0x20]
call fcn.10018274
and dword [eax], 0
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xbdc]
cmp dword [ebp - 0x20], edi
jl 0x10032b93
mov eax, dword [ebp - 0x48]
xor edi, edi
inc edi
push edi
call fcn.10018274
mov edx, dword [ebp - 0x11a8]
mov esi, eax
mov ecx, dword [ebp - 0x40]
xor eax, eax
cmp ecx, edx
mov ecx, dword [ebp - 0x11a8]
push 3
setl al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setle dl
xor ebx, ebx
cmp edx, eax
setl bl
add ebx, dword [esi]
sub ebx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
neg ebx
pop esi
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
mov eax, 0xbecee1d3
push 8
setne cl
xor edx, edx
cmp ecx, 0x1be360de
pop ecx
setg dl
sub eax, edx
sub eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], esi
cmp dword [ebp - 0x34], 0xffffffe2
je 0x10032c65
xor eax, eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], eax
jne 0x10032c65
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe9
jne 0x10032c5c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032c50
push 0x19d7
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe9
je 0x10032c32
push 8
pop ecx
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffe2
jne 0x10032c21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbdc]
call fcn.10018258
push 2
pop ebx
mov dword [ebp - 0x3c], 0x8c176b0f
lea ecx, [ebp - 0x804]
push ebx
call fcn.100181d6
push 8
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0xc0c]
push 5
pop eax
mov dword [ebp - 0x654], eax
mov dword [ebp - 0x650], eax
mov dword [ebp - 0x64c], eax
mov dword [ebp - 0x648], eax
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x1d82c32b
mov dword [ebp - 0x14], 0x8f4e1c2e
mov dword [ebp - 0x3c], 0xe0c863cc
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x3c], 0xa60915bb
mov dword [ebp - 0x3c], eax
push esi
call fcn.100181d6
xor eax, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x10032d0d
push dword [ebp - 0x44]
lea ecx, [ebp - 0x804]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x10032cf3
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], edi
jge 0x10032d2d
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6cc], 5
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x10032d15
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], esi
jge 0x10032d53
push dword [ebp - 0x44]
lea ecx, [ebp - 0xc0c]
call fcn.10018274
mov dword [eax], 0x8ab8ac29
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jl 0x10032d35
xor eax, eax
mov dword [ebp - 0x64c], edi
cmp dword [ebp - 0x64c], eax
jl 0x10032f52
push 7
pop ebx
mov dword [ebp - 0x40], 0xffffffff
lea ecx, [ebp - 0x978]
mov dword [ebp - 0x58], 0xeb7161ab
push 4
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xbfb3a4d
mov dword [ebp - 0x3c], 0x812a3cc9
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0x3af7806a
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 0x18ebdb88
push esi
call fcn.100181d6
push edi
lea ecx, [ebp - 0xbf4]
mov byte [ebp - 4], 0xa
call fcn.100181d6
mov byte [ebp - 4], 0xb
mov eax, 0x5baed416
mov dword [ebp - 0x3c], 0x1d89
mov dword [ebp - 0xe40], eax
mov dword [ebp - 0xe3c], eax
mov dword [ebp - 0xe38], eax
mov dword [ebp - 0xe34], eax
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x10032e17
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x124c], 0x34f09465
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 4
jl 0x10032dfe
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], esi
jge 0x10032e39
push dword [ebp - 0x44]
lea ecx, [ebp - 0x978]
call fcn.10018274
mov dword [eax], ebx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jl 0x10032e1f
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x10032e52
push dword [ebp - 0x44]
lea ecx, [ebp - 0xbf4]
call fcn.10018274
or dword [eax], 0xffffffff
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], edi
jl 0x10032e3e
inc dword [ebp - 0x1240]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
xor eax, eax
cmp dword [ebp - 0x50], eax
je 0x10032e74
cmp dword [ebp - 0xe40], eax
je 0x10032e74
mov eax, edi
mov dword [ebp - 0x48], eax
xor ecx, ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
cmp eax, edi
setg cl
xor eax, eax
cmp ecx, 0x88c4b50
jne 0x10032e95
mov esi, edi
cmp dword [ebp - 0x40], eax
jne 0x10032e97
mov esi, eax
push dword [ebp - 0x64c]
lea ecx, [ebp - 0x804]
call fcn.10018274
lea ecx, [ebp - 0xbf4]
mov eax, dword [eax]
add eax, esi
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
xor eax, eax
push eax
call fcn.10018274
xor eax, eax
lea ecx, [ebp - 0x804]
push eax
call fcn.10018274
push edi
lea ecx, [ebp - 0x978]
call fcn.10018274
mov eax, dword [ebp - 0x6cc]
lea ecx, [ebp - 0xc0c]
push edi
call fcn.10018274
mov esi, eax
lea ecx, [ebp - 0x978]
push edi
dec dword [esi]
call fcn.10018274
xor ecx, ecx
cmp dword [eax], 0x6c33
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
cmp dword [esi], ecx
sete dl
sub edx, 0x2a59
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0xbf4]
call fcn.10018258
lea ecx, [ebp - 0x978]
mov byte [ebp - 4], 9
call fcn.10018258
dec dword [ebp - 0x64c]
push 3
pop esi
jns 0x10032d68
push 2
pop ebx
lea ecx, [ebp - 0xc0c]
call fcn.10018258
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x804]
call fcn.10018258
mov dword [ebp - 0x3c], 0x4964a53a
lea ecx, [ebp - 0xc24]
push ebx
call fcn.100181d6
mov dword [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x14], 0x3638ecf5
mov dword [ebp - 0x3c], 0x45307222
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10032fbc
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc24]
call fcn.10018274
mov dword [eax], 0x42eb90da
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10032f9e
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032fe7
push 0x26a8
push eax
push eax
push eax
push eax
push 0xdc8
push 0x83e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
xor eax, eax
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], eax
jl 0x10033020
mov dword [ebp - 0x24], esi
inc dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1003301b
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc24]
call fcn.10018274
mov dword [eax], 0xcddd1d8f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032ffd
xor eax, eax
dec dword [ebp - 0x14]
jns 0x10032fef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc24]
call fcn.10018258
xor eax, eax
mov dword [ebp - 0x3c], 0xc3099cfe
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033054
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x2bc], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033040
xor eax, eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0x10
push 0xfffffffffffffffe
pop esi
jge 0x100331b1
mov dword [ebp - 0x24], 0x7215
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x20], 0xfb37b048
push ebx
call fcn.100181d6
xor eax, eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x18], eax
jmp 0x100330a5
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5e8]
call fcn.10018274
mov dword [eax], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033092
mov dword [ebp - 0x24], 0x654f
mov ecx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
lea ecx, [ebp - 0x5e8]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
xor eax, eax
push eax
call fcn.10018274
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], eax
jl 0x1003318d
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], eax
jl 0x10033161
mov dword [ebp - 0x58], 0x92e6c0b3
lea ecx, [ebp - 0x5e8]
push dword [ebp - 0x24]
call fcn.10018274
cmp dword [eax], 0
je 0x10033132
mov eax, dword [ebp - 0x2b4]
lea ecx, [ebp - 0x5e8]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2bc]
push dword [ebp - 0x24]
call fcn.10018274
mov esi, edi
xor eax, eax
jmp 0x10033136
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x5e8]
call fcn.10018274
xor ecx, ecx
cmp esi, 0xfffffffa
setne cl
xor edx, edx
cmp ecx, dword [eax]
setne dl
add edx, 0xfffa
mov dword [ebp - 0x58], edx
dec dword [ebp - 0x20]
jns 0x100330f2
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x1003317c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10033179
push eax
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x10033166
dec dword [ebp - 0x24]
jns 0x100330ea
push 0xfffffffffffffffe
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5e8]
call fcn.10018258
inc dword [ebp - 0x2b4]
cmp dword [ebp - 0x2b4], 0x10
jl 0x1003306a
xor eax, eax
mov dword [ebp - 0x3c], 0x16580849
mov dword [ebp - 0x1c], 0xfeba
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x4c], 0x68029989
mov dword [ebp - 0x24], 0xee4e9120
mov dword [ebp - 0x2c], 0x1bf0
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], 0x8b697689
mov dword [ebp - 0x58], 0xd4f39ab1
mov dword [ebp - 0x40], 0xfbc9ee52
mov dword [ebp - 0x38], 0x6c5f514f
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1003323d
mov dword [ebp - 0x3c], 0x64f14790
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xc96c7979
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
sub ecx, 0x351cdcb3
inc dword [ebp - 0x24]
cmp eax, ecx
jge 0x10033233
mov eax, edi
jmp 0x10033235
xor eax, eax
mov dword [ebp - 0x4c], eax
jmp 0x1003341f
xor eax, eax
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], eax
jmp 0x10033258
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1180], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10033247
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0x696af5b5
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jle 0x10033421
push 8
pop ebx
mov dword [ebp - 0x48], 0x4abf
lea ecx, [ebp - 0xc3c]
mov dword [ebp - 0x34], 9
push edi
call fcn.100181d6
mov dword [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x28], 0xb80730a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x100332d1
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc3c]
call fcn.10018274
mov dword [eax], 0x4ea65d33
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100332b3
xor eax, eax
mov dword [ebp - 0x4c], 0xeaa3e8f0
cmp dword [ebp - 0x4c], eax
je 0x10033378
inc dword [ebp - 0x48]
lea ecx, [ebp - 0xc3c]
inc dword [ebp - 0x38]
push eax
call fcn.10018274
imul ecx, dword [ebp - 0x38], 0x2a6b
mov esi, eax
xor eax, eax
cmp ecx, 0xfffffff9
mov ecx, dword [ebp - 0x40]
setle al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setle dl
imul eax, dword [ebp - 0x40]
mov dword [esi], edx
test eax, eax
je 0x10033326
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10033328
mov eax, edi
jmp 0x10033328
xor eax, eax
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x117c]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
jne 0x10033358
mov eax, dword [ebp - 0x2c]
xor eax, eax
cmp dword [ebp - 0x20], edi
jl 0x10033366
mov ecx, edi
cmp dword [ebp - 0x44], eax
jne 0x10033368
mov ecx, eax
mov eax, dword [ebp - 0x24]
imul eax, ecx
test eax, eax
je 0x10033376
mov edx, edi
jmp 0x1003337a
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
sete cl
xor edx, edx
cmp ecx, 0x8004
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100333fe
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x48], 0xe6c4949f
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffef
jge 0x100333fb
mov eax, dword [ebp - 0x1180]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x5c]
sub edx, eax
mov eax, dword [ebp - 0x5c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffef
jl 0x100333cd
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jne 0x100333ba
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc3c]
call fcn.10018258
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jg 0x10033281
xor eax, eax
mov dword [ebp - 0x3c], 0x11f07b4b
mov dword [ebp - 0x28], 0x3e9323d1
mov dword [ebp - 0x48], 0x233fd52a
mov dword [ebp - 0x58], 0x413e458c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003345f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x484], 0x6f1bf506
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10033446
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10033475
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x72c], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10033464
mov eax, dword [ebp - 0x480]
neg eax
jne 0x10033496
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x28]
je 0x100334a4
xor eax, eax
cmp dword [ebp - 0x47c], eax
je 0x100334a6
mov edx, edi
jmp 0x100334a8
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x47c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x480]
push 3
setge cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x480]
setle dl
xor ebx, ebx
test edx, edx
setg bl
xor ecx, ecx
cmp ebx, eax
setl cl
xor edx, edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov esi, dword [ebp - 0x28]
setg dl
xor ecx, ecx
sub esi, edx
mov dword [ebp - 0x72c], esi
mov eax, dword [ebp - 0x480]
cmp esi, eax
mov eax, dword [ebp - 0x480]
setg cl
sub eax, ecx
xor ecx, ecx
cmp eax, 9
setge cl
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0xf18]
call fcn.100181d6
mov dword [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x1c], 0x72226312
mov dword [ebp - 0x58], 0x9ba5f27a
push 2
mov dword [ebp - 0x18], eax
pop esi
cmp dword [ebp - 0x18], esi
jge 0x10033559
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x109c], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033545
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003356a
push eax
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg eax
push 3
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x1098], eax
mov ecx, dword [ebp - 0x1c]
imul ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setl bl
xor ecx, ecx
cmp ebx, eax
setge cl
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x44], edi
call fcn.100181d6
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x4c], 0xb56411d7
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x58], 0x490ce61f
mov dword [ebp - 0x50], 0xffff
mov dword [ebp - 0x40], 0x9e13a3a
mov dword [ebp - 0x48], 0x17bb5c02
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x58], 0x2cf1a504
mov dword [ebp - 0x18], eax
jmp 0x1003362b
push dword [ebp - 0x18]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
lea ecx, [ebp - 0x1a4]
jl 0x1003361e
push esi
call fcn.10018274
mov esi, eax
lea ecx, [ebp - 0x1a4]
xor eax, eax
push eax
call fcn.10018274
xor ebx, ebx
mov ecx, dword [eax]
imul ecx, dword [esi]
cmp ecx, 0xffffffff
lea ecx, [ebp - 0x1a4]
setle bl
xor eax, eax
push eax
call fcn.10018274
cmp ebx, dword [eax]
jge 0x1003366f
mov eax, dword [ebp - 0x14]
xor eax, eax
lea ecx, [ebp - 0x1a4]
push eax
call fcn.10018274
push 2
pop ecx
push ecx
lea ecx, [ebp - 0x1a4]
call fcn.10018274
push edi
lea ecx, [ebp - 0x1a4]
call fcn.10018274
xor eax, eax
lea ecx, [ebp - 0x1a4]
push eax
call fcn.10018274
push edi
lea ecx, [ebp - 0x1a4]
call fcn.10018274
mov eax, dword [ebp - 0x14]
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x14], eax
je 0x100336c6
mov esi, edi
cmp dword [ebp - 0x4c], eax
jne 0x100336c8
mov esi, eax
push edi
lea ecx, [ebp - 0x1a4]
call fcn.10018274
cmp dword [eax], edi
jg 0x100336e1
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x14], eax
je 0x100336e3
mov ecx, edi
xor eax, eax
cmp ecx, edi
setne al
xor edx, edx
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x4c]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x1a4]
push eax
call fcn.10018274
mov ecx, dword [ebp - 0x48]
mov eax, dword [eax]
sub eax, ecx
je 0x10033737
xor eax, eax
lea ecx, [ebp - 0x1a4]
push eax
call fcn.10018274
cmp dword [eax], 0
je 0x10033737
mov eax, edi
jmp 0x10033739
xor eax, eax
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x40]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x48], ecx
mov ecx, 0xfff9
mov eax, dword [ebp - 0x48]
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
cmp esi, eax
mov eax, dword [ebp - 0x5c]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0x1a4]
mov dword [ebp - 0x4c], edi
mov byte [ebp - 4], 0xf
call fcn.10018258
xor eax, eax
mov dword [ebp - 0x58], 0x82a1
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x100337aa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6dc], 0x69f4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10033792
xor eax, eax
push 2
pop esi
push 8
mov dword [ebp - 0x20], eax
pop ebx
cmp dword [ebp - 0x20], esi
jge 0x100337c7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x10b0], ebx
inc dword [ebp - 0x20]
jmp 0x100337b3
mov eax, dword [ebp - 0x6dc]
xor ecx, ecx
imul eax, dword [ebp - 0x58]
cmp eax, 7
setge cl
xor eax, eax
mov dword [ebp - 0x10b0], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100337f7
push eax
push 0x4b9
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003381b
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf18]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033800
xor eax, eax
mov dword [ebp - 0x1c], 0xfeba
push 0xfffffffffffffffa
pop ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x4c], 0x68029989
mov dword [ebp - 0x24], 0xee4e9120
mov dword [ebp - 0x2c], 0x1bf0
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], 0x8b697689
mov dword [ebp - 0x58], 0xd4f39ab1
mov dword [ebp - 0x40], 0xfbc9ee52
mov dword [ebp - 0x38], 0x6c5f514f
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x1003389f
mov dword [ebp - 0x3c], 0x64f14790
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xc96c7979
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
sub ecx, 0x351cdcb3
inc dword [ebp - 0x24]
cmp eax, ecx
jge 0x10033895
mov eax, edi
jmp 0x10033897
xor eax, eax
mov dword [ebp - 0x4c], eax
jmp 0x10033a7a
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], eax
jmp 0x100338b6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x119c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100338a9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub eax, 0x696af5b5
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jle 0x10033a7a
mov dword [ebp - 0x48], 0x4abf
lea ecx, [ebp - 0xc54]
mov dword [ebp - 0x34], 9
push edi
call fcn.100181d6
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x28], 0xb80730a0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10033929
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc54]
call fcn.10018274
mov dword [eax], 0x4ea65d33
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1003390b
xor eax, eax
mov dword [ebp - 0x4c], 0xeaa3e8f0
cmp dword [ebp - 0x4c], eax
je 0x100339d0
inc dword [ebp - 0x48]
lea ecx, [ebp - 0xc54]
inc dword [ebp - 0x38]
push eax
call fcn.10018274
imul ecx, dword [ebp - 0x38], 0x2a6b
mov esi, eax
xor eax, eax
cmp ecx, 0xfffffff9
mov ecx, dword [ebp - 0x40]
setle al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setle dl
imul eax, dword [ebp - 0x40]
mov dword [esi], edx
test eax, eax
je 0x1003397e
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10033980
mov eax, edi
jmp 0x10033980
xor eax, eax
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1198]
mov eax, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
jne 0x100339b0
mov eax, dword [ebp - 0x2c]
xor eax, eax
cmp dword [ebp - 0x20], edi
jl 0x100339be
mov ecx, edi
cmp dword [ebp - 0x54], eax
jne 0x100339c0
mov ecx, eax
mov eax, dword [ebp - 0x24]
imul eax, ecx
test eax, eax
je 0x100339ce
mov edx, edi
jmp 0x100339d2
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
sete cl
xor edx, edx
cmp ecx, 0x8004
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
inc edx
cmp edx, eax
setg cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033a56
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x48], 0xe6c4949f
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffef
jge 0x10033a53
mov eax, dword [ebp - 0x119c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x5c]
sub edx, eax
mov eax, dword [ebp - 0x5c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setl cl
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffef
jl 0x10033a25
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jne 0x10033a12
lea ecx, [ebp - 0xc54]
mov byte [ebp - 4], 0xf
call fcn.10018258
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x1a
jg 0x100338dc
push 2
pop esi
dec dword [ebp - 0x44]
lea ecx, [ebp - 0xf18]
or dword [ebp - 4], 0xffffffff
call fcn.10018258
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x54], 5
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10033aba
push 0x220b
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindow]
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033b6e
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe4
jl 0x10033b6b
push esi
lea ecx, [ebp - 0x7c8]
call fcn.100181d6
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033b14
push dword [ebp - 0x18]
lea ecx, [ebp - 0x7c8]
call fcn.10018274
mov dword [eax], 0x405b4019
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033af6
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10033b48
mov dword [ebp - 0x54], 0xd5fac122
push dword [ebp - 0x34]
call fcn.10018274
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax]
sub eax, ecx
lea ecx, [ebp - 0x7c8]
mov dword [ebp - 0x54], eax
push dword [ebp - 0x34]
call fcn.10018274
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x7c8]
cmp dword [ebp - 0x34], edi
jle 0x10033b19
or dword [ebp - 4], 0xffffffff
call fcn.10018258
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe4
jge 0x10033ad6
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 6
jg 0x10033ac2
push 3
lea ecx, [ebp - 0x8d0]
call fcn.100181d6
mov dword [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x28], 0xb13638ec
mov dword [ebp - 0x3c], 0xa205b290
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033bc4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8d0]
call fcn.10018274
mov dword [eax], 0x3342eb90
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033ba5
xor eax, eax
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x10033cd9
push 3
lea ecx, [ebp - 0x60c]
call fcn.100181d6
xor eax, eax
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x18], eax
jmp 0x10033bf9
push dword [ebp - 0x18]
call fcn.10018274
mov dword [eax], 0xc4530722
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
lea ecx, [ebp - 0x60c]
jl 0x10033be8
push esi
call fcn.10018274
mov dword [eax], esi
jmp 0x10033c87
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10033c31
push 0xd90
push 0x7e1
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033c74
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10033c4b
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10033c71
push eax
push 0x1195
push 0x2180
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10033c36
push esi
lea ecx, [ebp - 0x60c]
call fcn.10018274
dec dword [eax]
push esi
lea ecx, [ebp - 0x60c]
call fcn.10018274
cmp dword [eax], 0
jge 0x10033c0f
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8d0]
call fcn.10018274
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8d0]
mov esi, eax
call fcn.10018274
mov ecx, dword [esi]
mov byte [ebp - 4], 0x13
mov dword [eax], ecx
lea ecx, [ebp - 0x60c]
call fcn.10018258
dec dword [ebp - 0x28]
push 2
pop esi
jns 0x10033bd0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d0]
call fcn.10018258
mov dword [ebp - 0x34], 0xeede0b40
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0xffffffff
push 3
mov dword [ebp - 0x4c], 0x108531d1
pop ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0xb653b1da
mov dword [ebp - 0x38], 0x7120dd93
push ebx
call fcn.100181d6
mov dword [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], eax
jmp 0x10033d48
push dword [ebp - 0x18]
lea ecx, [ebp - 0x424]
call fcn.10018274
mov dword [eax], 0x1d25bb08
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033d31
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10033d7b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
sub eax, 0x52a4105f
mov dword [ebp - 0x24], eax
je 0x10033d7b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x4c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x34]
setge cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x10033eb8
mov dword [ebp - 0x58], 4
lea ecx, [ebp - 0x81c]
push edi
call fcn.100181d6
mov byte [ebp - 4], 0x16
xor eax, eax
mov dword [ebp - 0x54], 0xb319bd1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], eax
jmp 0x10033df1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x81c]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10033dde
inc dword [ebp - 0x48]
lea ecx, [ebp - 0x424]
push dword [ebp - 0x20]
call fcn.10018274
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x81c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
xor eax, eax
push eax
call fcn.10018274
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10033e32
mov esi, eax
cmp dword [ebp - 0x34], eax
je 0x10033e34
mov esi, edi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x424]
call fcn.10018274
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x424]
mov eax, dword [eax]
setl dl
add eax, 0xfffffff9
add eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x20]
call fcn.10018274
xor eax, eax
lea ecx, [ebp - 0x424]
push eax
call fcn.10018274
push dword [ebp - 0x20]
lea ecx, [ebp - 0x424]
call fcn.10018274
lea ecx, [ebp - 0x81c]
mov dword [eax], edi
xor eax, eax
push eax
call fcn.10018274
xor ecx, ecx
cmp dword [eax], ecx
setne cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x81c]
mov byte [ebp - 4], 0x15
call fcn.10018258
dec dword [ebp - 0x20]
jns 0x10033db3
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.10018258
mov dword [ebp - 0x48], 0x15a1
lea ecx, [ebp - 0x10a8]
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x54], 0xc299e885
push edi
call fcn.100181d6
xor eax, eax
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x18], eax
jmp 0x10033f10
push dword [ebp - 0x18]
lea ecx, [ebp - 0x10a8]
call fcn.10018274
mov dword [eax], 0xab3c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10033ef9
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
cmp eax, 0x53bc
setne cl
xor eax, eax
sub ecx, 0xee61
imul ecx, dword [ebp - 0x48]
mov dword [ebp - 0x54], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10033f89
push eax
push 0x1cf6
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10a8]
call fcn.10018258
mov dword [ebp - 0x2c], 0xe83
xor eax, eax
mov dword [ebp - 0x24], eax
or ecx, 0xffffffff
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x99c], ecx
mov dword [ebp - 0x998], ecx
mov dword [ebp - 0x994], ecx
mov dword [ebp - 0x990], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10033fe2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x370], 0xf37831e4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033fca
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10034002
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6e4], 0x511bd77d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10033fea
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], eax
jl 0x100340f0
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x370]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x370]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x368]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x370]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x370]
cmp eax, edi
mov eax, dword [ebp - 0x2c]
setle cl
xor edx, edx
cmp ecx, 0x1b07fb07
mov eax, dword [ebp + eax*4 - 0x370]
setl dl
add edx, 0xffff380f
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
lea eax, [ecx - 2]
mov dword [ebp - 0x99c], eax
test eax, eax
je 0x10034097
xor eax, eax
cmp dword [ebp - 0x6e4], eax
je 0x10034099
mov ecx, edi
jmp 0x1003409b
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x370]
imul eax, ecx
test eax, eax
je 0x100340bb
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100340bd
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
jmp 0x100340e7
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jg 0x100340e7
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x998], ecx
jne 0x100340e7
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x370], ecx
jne 0x100340e7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x100340c7
dec dword [ebp - 0x2c]
jns 0x10034011
push ebx
lea ecx, [ebp - 0x9c]
call fcn.100181d6
mov dword [ebp - 4], 0x18
xor eax, eax
mov dword [ebp - 0x48], 0xc245e320
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003412e
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9c]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10034114
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003414e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10034136
xor eax, eax
mov dword [ebp - 0x11c], eax
jmp 0x100343c3
mov dword [ebp - 0x2c], 0x74b666a7
mov dword [ebp - 0x24], 0xfffffffd
push dword [ebp - 0x11c]
call fcn.10018274
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.10018274
mov ecx, dword [esi]
push 2
pop esi
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], eax
jl 0x100343bd
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x2c]
call fcn.10018274
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
call fcn.10018274
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
call fcn.10018274
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
call fcn.10018274
xor ecx, ecx
push edi
cmp dword [eax], ecx
setle cl
xor ebx, ebx
cmp ecx, 0x972e
lea ecx, [ebp - 0x9c]
setl bl
call fcn.10018274
mov ecx, dword [ebp - 0x24]
xor edx, edx
push dword [ebp - 0x11c]
cmp ebx, ecx
lea ecx, [ebp - 0x9c]
setg dl
add edx, dword [eax]
mov dword [ebp - 0x54], edx
call fcn.10018274
mov ecx, dword [ebp - 0x54]
xor ebx, ebx
push dword [ebp - 0x2c]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x9c]
sete bl
call fcn.10018274
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
cmp ecx, edi
lea ecx, [ebp - 0x9c]
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x11c]
push dword [ebp - 0x11c]
call fcn.10018274
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
mov esi, eax
call fcn.10018274
mov esi, dword [esi]
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x2c]
sub esi, dword [eax]
neg esi
sbb esi, esi
inc esi
call fcn.10018274
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x11c]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x9c]
push dword [ebp - 0x11c]
call fcn.10018274
mov esi, dword [ebp - 0x24]
push 2
pop ecx
sub esi, dword [eax]
push ecx
lea ecx, [ebp - 0x9c]
call fcn.10018274
mov ecx, dword [ebp - 0x118]
sub esi, ecx
xor ebx, ebx
imul esi, dword [eax]
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x11c]
imul ecx, esi, 0xa3bb
add ecx, 0x5d0
cmp ecx, eax
lea ecx, [ebp - 0x9c]
setle bl
call fcn.10018274
cmp ebx, dword [eax]
jle 0x1003430b
push 2
pop eax
push eax
lea ecx, [ebp - 0x9c]
call fcn.10018274
cmp dword [eax], 0
jne 0x1003430b
xor eax, eax
cmp dword [ebp - 0x114], eax
je 0x10034322
push edi
lea ecx, [ebp - 0x9c]
call fcn.10018274
cmp dword [eax], 0
je 0x10034320
mov esi, edi
jmp 0x10034324
xor eax, eax
mov esi, eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
call fcn.10018274
push dword [ebp - 0x11c]
xor ebx, ebx
lea ecx, [ebp - 0x9c]
cmp esi, dword [eax]
setle bl
call fcn.10018274
cmp ebx, dword [eax]
jg 0x10034377
xor eax, eax
push 2
mov dword [ebp - 0x24], eax
pop esi
jmp 0x10034360
cmp dword [ebp - 0x48], eax
jne 0x10034365
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x10034358
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100343b4
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x100343b4
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1003438e
push 0x202
call dword [sym.imp.USER32.dll_GetQueueStatus]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100343b1
push eax
push eax
push 0x66e
push eax
push 0x243d
push eax
push 0x1291
push eax
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push 2
pop esi
dec dword [ebp - 0x2c]
jns 0x1003419a
inc dword [ebp - 0x11c]
lea ecx, [ebp - 0x9c]
cmp dword [ebp - 0x11c], esi
jle 0x10034159
or dword [ebp - 4], 0xffffffff
call fcn.10018258
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x54], 5
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1003440c
push 0x220b
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindow]
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100344c0
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe4
jl 0x100344bd
push esi
lea ecx, [ebp - 0x8dc]
call fcn.100181d6
mov dword [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10034466
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8dc]
call fcn.10018274
mov dword [eax], 0x405b4019
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10034448
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1003449a
mov dword [ebp - 0x54], 0xd5fac122
push dword [ebp - 0x34]
call fcn.10018274
mov ecx, dword [ebp - 0x28]
mov eax, dword [eax]
sub eax, ecx
lea ecx, [ebp - 0x8dc]
mov dword [ebp - 0x54], eax
push dword [ebp - 0x34]
call fcn.10018274
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x8dc]
cmp dword [ebp - 0x34], edi
jle 0x1003446b
or dword [ebp - 4], 0xffffffff
call fcn.10018258
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe4
jge 0x10034428
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 6
jg 0x10034414
push 3
lea ecx, [ebp - 0x834]
call fcn.100181d6
mov dword [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x28], 0xb13638ec
mov dword [ebp - 0x3c], 0xa205b290
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034516
push dword [ebp - 0x18]
lea ecx, [ebp - 0x834]
call fcn.10018274
mov dword [eax], 0x3342eb90
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100344f7
xor eax, eax
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x1003462b
push 3
lea ecx, [ebp - 0x558]
call fcn.100181d6
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x18], eax
jmp 0x1003454b
push dword [ebp - 0x18]
call fcn.10018274
mov dword [eax], 0xc4530722
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
lea ecx, [ebp - 0x558]
jl 0x1003453a
push esi
call fcn.10018274
mov dword [eax], esi
jmp 0x100345d9
xor eax, eax
mov dword [ebp - 0x18], eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10034583
push 0xd90
push 0x7e1
call ebx
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100345c6
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003459d
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100345c3
push eax
push 0x1195
push 0x2180
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10034588
push esi
lea ecx, [ebp - 0x558]
call fcn.10018274
dec dword [eax]
push esi
lea ecx, [ebp - 0x558]
call fcn.10018274
cmp dword [eax], 0
jge 0x10034561
push dword [ebp - 0x28]
lea ecx, [ebp - 0x834]
call fcn.10018274
push dword [ebp - 0x28]
lea ecx, [ebp - 0x834]
mov esi, eax
call fcn.10018274
mov ecx, dword [esi]
mov byte [ebp - 4], 0x1a
mov dword [eax], ecx
lea ecx, [ebp - 0x558]
call fcn.10018258
dec dword [ebp - 0x28]
push 2
pop esi
jns 0x10034522
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x834]
call fcn.10018258
mov dword [ebp - 0x34], 0xeede0b40
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0xffffffff
push 3
mov dword [ebp - 0x4c], 0x108531d1
pop ebx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0xb653b1da
mov dword [ebp - 0x38], 0x7120dd93
push ebx
call fcn.100181d6
mov dword [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x18], eax
jmp 0x1003469a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4e4]
call fcn.10018274
mov dword [eax], 0x1d25bb08
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10034683
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x100346cd
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
sub eax, 0x52a4105f
mov dword [ebp - 0x24], eax
je 0x100346cd
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x4c]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x34]
setge cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x1003480a
mov dword [ebp - 0x58], 4
lea ecx, [ebp - 0x8f4]
push edi
call fcn.100181d6
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x54], 0xb319bd1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], eax
jmp 0x10034743
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8f4]
call fcn.10018274
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10034730
inc dword [ebp - 0x48]
lea ecx, [ebp - 0x4e4]
push dword [ebp - 0x20]
call fcn.10018274
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x8f4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
xor eax, eax
push eax
call fcn.10018274
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10034784
mov esi, eax
cmp dword [ebp - 0x34], eax
je 0x10034786
mov esi, edi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4e4]
call fcn.10018274
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x4e4]
mov eax, dword [eax]
setl dl
add eax, 0xfffffff9
add eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x20]
call fcn.10018274
xor eax, eax
lea ecx, [ebp - 0x4e4]
push eax
call fcn.10018274
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4e4]
call fcn.10018274
lea ecx, [ebp - 0x8f4]
mov dword [eax], edi
xor eax, eax
push eax
call fcn.10018274
xor ecx, ecx
cmp dword [eax], ecx
setne cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x8f4]
mov byte [ebp - 4], 0x1c
call fcn.10018258
dec dword [ebp - 0x20]
jns 0x10034705
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4e4]
call fcn.10018258
mov dword [ebp - 0x28], edi
xor eax, eax
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff8
jle 0x1003487e
push 7
pop eax
mov dword [ebp - 0x18], 0xe56f9b2c
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x18], 0x11
cmp dword [ebp - 0x18], 4
jl 0x10034873
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10034867
push eax
push eax
push 0x1645
push 0xd82
push eax
call dword [sym.imp.USER32.dll_ModifyMenuW]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jge 0x10034844
push 7
pop eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff8
jg 0x1003482d
xor eax, eax
mov dword [ebp - 0x28], 0xfd3df75d
mov dword [ebp - 0x54], 0x44ad72d7
mov dword [ebp - 0x28], 0x18
jmp 0x10034947
mov dword [ebp - 0x1c], 0x35f394a2
mov dword [ebp - 0x48], 0xed1ad67a
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x16
je 0x100348d8
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x48], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100348cd
push edi
push 0x2235
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x16
jne 0x100348af
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xfffffffa
jge 0x10034944
push ebx
lea ecx, [ebp - 0xc6c]
call fcn.100181d6
xor eax, eax
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034919
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc6c]
call fcn.10018274
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100348fe
xor eax, eax
push eax
lea ecx, [ebp - 0xc6c]
call fcn.10018274
lea ecx, [ebp - 0xc6c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
or dword [ebp - 4], 0xffffffff
call fcn.10018258
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jl 0x100348e1
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xe
jne 0x10034898
mov dword [ebp - 0x1c], 0xe60f
lea ecx, [ebp - 0xf30]
mov dword [ebp - 0x14], 0xe57f
mov eax, 0x878ed7c3
mov dword [ebp - 0x48], 0x1e043eef
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x58], 0x196e
mov dword [ebp - 0xe20], eax
mov dword [ebp - 0xe1c], eax
mov dword [ebp - 0xe18], eax
mov dword [ebp - 0xe14], eax
push edi
call fcn.100181d6
mov dword [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x3c], 0x4a219909
mov dword [ebp - 0x3c], 0x2401
mov dword [ebp - 0x40], 0x84c923f2
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x18], eax
jmp 0x100349da
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf30]
call fcn.10018274
mov dword [eax], 0x9a488d5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100349c3
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], 0xfffffffc
jg 0x10034a18
cmp dword [ebp - 0x14], eax
je 0x10034a18
mov eax, edi
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0xf30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xe1c], 0x1e13ca4d
inc dword [ebp - 0x40]
or dword [ebp - 4], 0xffffffff
call fcn.10018258
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x40], 0x15a1
lea ecx, [ebp - 0x10bc]
mov dword [ebp - 0x1c], eax
push ebx
call fcn.100181d6
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0xf48]
xor eax, eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x9310c13f
mov dword [ebp - 0x3c], eax
push esi
call fcn.100181d6
xor eax, eax
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x10034aad
push dword [ebp - 0x44]
lea ecx, [ebp - 0x10bc]
call fcn.10018274
mov dword [eax], 0xbe1d
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x10034a8f
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jge 0x10034acd
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1558], 0xffffffff
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jl 0x10034ab5
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], esi
jge 0x10034af3
push dword [ebp - 0x44]
lea ecx, [ebp - 0xf48]
call fcn.10018274
mov dword [eax], 6
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jl 0x10034ad5
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffffe
jmp 0x10034b16
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10034b13
push 0xdb8
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
je 0x10034afc
mov dword [ebp - 0x1c], eax
jmp 0x10034bf0
push edi
lea ecx, [ebp - 0xc84]
call fcn.100181d6
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x1148]
mov dword [ebp - 0x54], 0xa07e4fc2
xor eax, eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 0xfffffffa
push 4
call fcn.100181d6
mov byte [ebp - 4], 0x23
xor eax, eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10034b97
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc84]
call fcn.10018274
mov dword [eax], 0x2e56
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10034b79
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10034bbf
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1148]
call fcn.10018274
mov dword [eax], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10034ba0
xor eax, eax
push eax
lea ecx, [ebp - 0xc84]
call fcn.10018274
lea ecx, [ebp - 0x1148]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
inc dword [ebp - 0x48]
call fcn.10018258
lea ecx, [ebp - 0xc84]
mov byte [ebp - 4], 0x21
call fcn.10018258
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10034b24
lea ecx, [ebp - 0xf48]
call fcn.10018258
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10bc]
call fcn.10018258
mov dword [ebp - 0x44], 0xffffffff
xor eax, eax
mov dword [ebp - 0x18], 0x3ae35568
mov dword [ebp - 0x3c], 0xb905d09e
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x18], eax
jmp 0x10034c51
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10034c4b
push eax
push edi
push 0x1462
push eax
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
xor eax, eax
dec dword [ebp - 0x48]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jle 0x10034c32
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x3c], 0x28c4
mov dword [ebp - 0x58], 0xbf520f09
mov dword [ebp - 0x3c], 0x43da7d8e
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10034c92
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1ec], 0x97ee
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10034c7a
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10034ca8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x9ac], 0x1943c6fe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10034c97
mov eax, dword [ebp - 0x1e4]
mov ecx, edi
mov eax, dword [ebp - 0x1e4]
xor edx, edx
mov eax, dword [ebp - 0x1e4]
sub ecx, eax
mov eax, dword [ebp - 0x1ec]
cmp ecx, eax
mov eax, dword [ebp - 0x1ec]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x9a4], ecx
test ecx, ecx
je 0x10034cf4
mov ecx, edi
cmp dword [ebp - 0x1e4], eax
jne 0x10034cf6
mov ecx, eax
mov eax, dword [ebp - 0x1e4]
sub eax, ecx
cmp eax, dword [ebp - 0x1ec]
jg 0x10034dc1