Function at 0x1003201d
Capabilities:
Accept command line arguments
Capture screenshot
Check os version
Create process on windows
Enumerate gui resources
Get disk information
Get file size
Get system information on windows
Identify system language via api
Log keystrokes
Parse pe header
Query service status

Disassembly:
mov eax, 0x10086627
call fcn.10084f30
mov eax, 0x1594
call fcn.100816e0
push ebx
push esi
push edi
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x39c]
mov dword [ebp - 0x1c], 0x4e1a
push 2
mov byte [ebp - 0x69], dl
call fcn.10017f3e
xor eax, eax
lea ecx, [ebp - 0x1490]
mov dword [ebp - 4], eax
or ebx, 0xffffffff
mov dword [ebp - 0x4c], 0x7525d2d9
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x28], 0xcfbce008
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1298]
push eax
lea eax, [ebp - 0x12a8]
mov dword [ebp - 0x54], 0x6bde64f
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0x71658a60
push eax
movdqu xmmword [ebp - 0x12a8], xmm0
call fcn.10017feb
lea ecx, [ebp - 0x226]
mov esi, eax
call fcn.10008d23
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1344]
push dword [esi]
call fcn.10017f9a
xor eax, eax
mov edi, 0xcdf98a59
inc eax
mov byte [ebp - 4], al
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10032105
push dword [ebp - 0x10]
lea ecx, [ebp - 0x39c]
call fcn.10017fdc
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100320ea
xor eax, eax
dec dword [ebp - 0x1c]
xor ebx, ebx
mov dword [ebp - 0x1c], eax
inc ebx
jmp 0x100321ea
mov dword [ebp - 0x38], 0x51dbd7cc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003213c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd30], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032123
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003214f
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x1003218e
mov eax, dword [ebp - 0xd24]
lea ecx, [ebp - 0x39c]
push dword [ebp - 0x1c]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x39c]
call fcn.10017fdc
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x39c]
push dword [ebp - 0x1c]
call fcn.10017fdc
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x38]
lea ecx, [ebp - 0x39c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd2c]
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x1c]
call fcn.10017fdc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x39c]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x39c]
call fcn.10017fdc
xor edx, edx
push 0
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd30]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp edx, eax
pop eax
setle cl
mov dword [ebp - 0xd2c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10032113
lea ecx, [ebp - 0x1344]
call fcn.10017fc0
or eax, 0xffffffff
lea ecx, [ebp - 0x39c]
mov dword [ebp - 4], eax
call fcn.10017fc0
push 2
pop esi
mov dword [ebp - 0x1c], 0x4e1a
lea ecx, [ebp - 0x40c]
push esi
call fcn.10017f3e
mov dword [ebp - 4], esi
lea ecx, [ebp - 0x1450]
mov dword [ebp - 0x4c], 0x7525d2d9
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0xfffffffc
push 0xfffffffffffffff7
mov dword [ebp - 0x28], 0xcfbce008
pop eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
or eax, 0xffffffff
mov dword [ebp - 0x54], 0x6bde64f
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1158]
push eax
lea eax, [ebp - 0x1168]
mov dword [ebp - 0x2c], 0x71658a60
push eax
movdqu xmmword [ebp - 0x1168], xmm0
call fcn.10017feb
lea ecx, [ebp - 0x228]
mov esi, eax
call fcn.10008d23
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x132c]
push dword [esi]
call fcn.10017f9a
mov byte [ebp - 4], 3
or eax, 0xffffffff
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x48], eax
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop esi
cmp dword [ebp - 0x10], esi
jge 0x100322d8
push dword [ebp - 0x10]
lea ecx, [ebp - 0x40c]
call fcn.10017fdc
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100322be
xor eax, eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x100323ba
mov dword [ebp - 0x38], 0x51dbd7cc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003230c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcd0], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100322f3
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003231f
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x1003235e
mov eax, dword [ebp - 0xcc4]
lea ecx, [ebp - 0x40c]
push dword [ebp - 0x1c]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x40c]
call fcn.10017fdc
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x40c]
push dword [ebp - 0x1c]
call fcn.10017fdc
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x38]
lea ecx, [ebp - 0x40c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xccc]
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x1c]
call fcn.10017fdc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x40c]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x40c]
call fcn.10017fdc
xor edx, edx
push 0
mov ecx, dword [eax]
mov eax, dword [ebp - 0xcd0]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp edx, eax
pop eax
setle cl
mov dword [ebp - 0xccc], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x100322e3
lea ecx, [ebp - 0x132c]
call fcn.10017fc0
or eax, 0xffffffff
lea ecx, [ebp - 0x40c]
mov dword [ebp - 4], eax
call fcn.10017fc0
push ebx
lea ecx, [ebp - 0x5d8]
call fcn.10017f3e
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x18], 0x3838a1f9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032422
push dword [ebp - 0x24]
lea ecx, [ebp - 0x5d8]
call fcn.10017fdc
mov dword [eax], ebx
xor eax, eax
inc dword [ebp - 0x24]
inc eax
push eax
pop ebx
cmp dword [ebp - 0x24], eax
jl 0x10032403
xor eax, eax
push 3
mov dword [ebp - 0x24], eax
pop ebx
cmp dword [ebp - 0x24], ebx
jge 0x10032441
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x135c], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1003242d
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032461
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1530], 0x5d06
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032449
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x10032492
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003248d
push 0x19e0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10032469
mov edi, dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff3
jg 0x10032630
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x10], 0xcafe8b0d
mov dword [ebp - 0x48], 0x5466
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe2
jle 0x10032620
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x900]
push ebx
call fcn.10017f3e
mov byte [ebp - 4], 5
xor eax, eax
mov dword [ebp - 0x54], 0xa9d9e177
mov dword [ebp - 0x20], 0xf7c2f5a2
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003250c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x900]
call fcn.10017fdc
mov dword [eax], 0x16f93bd5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100324ee
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], eax
jg 0x10032601
mov dword [ebp - 0x4c], 0x9b6917ab
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 0x10], 6
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x30]
call fcn.10017fdc
xor eax, eax
cmp dword [ebp - 0x40], 0x223d
jle 0x1003254c
cmp dword [ebp - 0x40], eax
je 0x1003254c
lea esi, [eax + 1]
jmp 0x1003254e
mov esi, eax
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x30]
call fcn.10017fdc
mov ecx, dword [ebp - 0x4c]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x900]
setne bl
xor eax, eax
push eax
call fcn.10017fdc
push dword [ebp - 0x30]
lea ecx, [ebp - 0x5d8]
mov dword [eax], ebx
call fcn.10017fdc
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp ecx, esi
setl dl
xor ecx, ecx
cmp ebx, edx
setg cl
add ecx, dword [eax]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, 0xfffffffa
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1358]
jg 0x100325e3
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x100325f2
mov dword [ebp - 0x54], 0x6930
mov dword [ebp - 0x2c], 7
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2c], eax
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x100325c3
jmp 0x100325f0
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100325f0
push eax
call edi
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x10032518
push 3
pop ebx
lea ecx, [ebp - 0x900]
mov byte [ebp - 4], 4
call fcn.10017fc0
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe2
push 0
pop eax
jg 0x100324c3
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff3
jle 0x100324a5
push 2
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x5d8]
mov dword [ebp - 4], eax
call fcn.10017fc0
xor eax, eax
mov dword [ebp - 0x20], 0xcea5d6c0
mov dword [ebp - 0x20], eax
jmp 0x10032678
mov dword [ebp - 0x10], 0xeede0b40
mov dword [ebp - 0x10], eax
jmp 0x1003266f
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003266c
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1a
jge 0x1003265b
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
je 0x1003264f
mov dword [ebp - 0x20], 0x891c5534
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x1c], 0x4e1a
push esi
call fcn.10017f3e
mov dword [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x4c], 0x7525d2d9
mov dword [ebp - 0x24], 0x43cdf98a
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x48], 0x99991913
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100326dd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x188], 0xc93b4e1a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100326c5
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jg 0x100327e5
xor esi, esi
push 2
inc esi
pop ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x188]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x188]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x188]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x188]
imul ecx, dword [ebp - 0x180]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + eax*4 - 0x188]
add ecx, 0xfffffff8
mov eax, dword [ebp - 0x24]
add edx, ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x188]
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x100327d7
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x188]
cmp eax, esi
sete cl
cmp ecx, dword [ebp - 0x24]
jne 0x1003277c
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x188], 0
je 0x1003277c
xor eax, eax
xor esi, esi
inc esi
lea ecx, [eax + 1]
jmp 0x10032780
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x188]
add eax, ecx
xor ecx, ecx
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
imul ecx, dword [ebp + eax*4 - 0x188]
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp + eax*4 - 0x188]
imul eax, ecx, 0x265eed3
cmp eax, 0x5b4d
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x188]
cmp edx, eax
setne cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x20]
jns 0x1003274f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x100326ef
xor eax, eax
mov dword [ebp - 0x28], 0xfffffffc
lea ecx, [ebp - 0x1400]
mov dword [ebp - 0x28], 0xcfbce008
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], eax
or eax, 0xffffffff
mov dword [ebp - 0x54], 0x6bde64f
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x1218]
push eax
lea eax, [ebp - 0x1228]
mov dword [ebp - 0x2c], 0x71658a60
push eax
movdqu xmmword [ebp - 0x1228], xmm0
call fcn.10017feb
lea ecx, [ebp - 0x24a]
mov esi, eax
call fcn.10008d23
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1308]
push dword [esi]
call fcn.10017f9a
mov byte [ebp - 4], 7
xor ebx, ebx
or eax, 0xffffffff
inc ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x48], eax
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop esi
cmp dword [ebp - 0x10], esi
jge 0x10032894
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3b4]
call fcn.10017fdc
mov dword [eax], 0xcdf98a59
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10032876
xor eax, eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
jmp 0x10032976
mov dword [ebp - 0x38], 0x51dbd7cc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100328c8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd70], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100328af
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x100328db
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor eax, eax
cmp dword [ebp - 0x48], eax
jne 0x1003291a
mov eax, dword [ebp - 0xd64]
lea ecx, [ebp - 0x3b4]
push dword [ebp - 0x1c]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.10017fdc
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x3b4]
push dword [ebp - 0x1c]
call fcn.10017fdc
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x38]
lea ecx, [ebp - 0x3b4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd6c]
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x1c]
call fcn.10017fdc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x3b4]
call fcn.10017fdc
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.10017fdc
xor edx, edx
push 0
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd70]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp edx, eax
pop eax
setle cl
mov dword [ebp - 0xd6c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x1003289f
lea ecx, [ebp - 0x1308]
call fcn.10017fc0
or eax, 0xffffffff
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 4], eax
call fcn.10017fc0
mov dword [ebp - 0x20], 0x24ec2e0c
xor eax, eax
mov dword [ebp - 0x48], 0xfffffff9
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100329cb
push 0x17ce
push 0xcc
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x20], eax
jmp 0x100329e6
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
mov dword [ebp - 0x48], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x19
jl 0x100329d3
push ebx
lea ecx, [ebp - 0x5e8]
call fcn.10017f3e
push 8
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x18], 0x3838a1f9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032a2e
push dword [ebp - 0x24]
lea ecx, [ebp - 0x5e8]
call fcn.10017fdc
mov dword [eax], ebx
xor eax, eax
inc dword [ebp - 0x24]
inc eax
push eax
pop ebx
cmp dword [ebp - 0x24], eax
jl 0x10032a0f
xor eax, eax
push 3
mov dword [ebp - 0x24], eax
pop ebx
cmp dword [ebp - 0x24], ebx
jge 0x10032a4d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1320], esi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032a39
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032a6d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1500], 0x5d06
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032a55
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x10032a9e
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10032a99
push 0x19e0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10032a75
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff3
jg 0x10032c38
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x10], 0xcafe8b0d
mov dword [ebp - 0x48], 0x5466
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe2
jle 0x10032c28
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xbe8]
push ebx
call fcn.10017f3e
mov byte [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x54], 0xa9d9e177
mov dword [ebp - 0x20], 0xf7c2f5a2
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032b12
push dword [ebp - 0x10]
lea ecx, [ebp - 0xbe8]
call fcn.10017fdc
mov dword [eax], 0x16f93bd5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032af4
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], eax
jg 0x10032c07
mov dword [ebp - 0x4c], 0x9b6917ab
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x10], 6
mov eax, dword [ebp - 0x10]
push dword [ebp - 0x30]
call fcn.10017fdc
xor eax, eax
cmp dword [ebp - 0x40], 0x223d
jle 0x10032b52
cmp dword [ebp - 0x40], eax
je 0x10032b52
lea esi, [eax + 1]
jmp 0x10032b54
mov esi, eax
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x30]
call fcn.10017fdc
mov ecx, dword [ebp - 0x4c]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0xbe8]
setne bl
xor eax, eax
push eax
call fcn.10017fdc
push dword [ebp - 0x30]
lea ecx, [ebp - 0x5e8]
mov dword [eax], ebx
call fcn.10017fdc
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp ecx, esi
setl dl
xor ecx, ecx
cmp ebx, edx
setg cl
add ecx, dword [eax]
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, 0xfffffffa
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x131c]
jg 0x10032be9
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x10032bf8
mov dword [ebp - 0x54], 0x6930
mov dword [ebp - 0x2c], 7
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2c], eax
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10032bc9
jmp 0x10032bf6
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10032bf6
push eax
call edi
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x10032b1e
push 3
pop ebx
push 8
pop eax
lea ecx, [ebp - 0xbe8]
mov byte [ebp - 4], al
call fcn.10017fc0
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe2
push 0
pop eax
jg 0x10032ac9
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff3
jle 0x10032aab
push 2
pop esi
or edi, 0xffffffff
lea ecx, [ebp - 0x5e8]
mov dword [ebp - 4], edi
call fcn.10017fc0
push ebx
lea ecx, [ebp - 0x100]
call fcn.10017f3e
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0x918]
xor eax, eax
mov dword [ebp - 0x10], 0x8a9017ca
inc eax
mov dword [ebp - 0x38], 0x18b47430
mov dword [ebp - 0x20], 4
push eax
call fcn.10017f3e
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x48], 0x94407742
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032cb3
push dword [ebp - 0x24]
lea ecx, [ebp - 0x100]
call fcn.10017fdc
mov dword [eax], 0xa5fef9d7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032c95
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10032cd3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4fc], 0x5a7dd9ae
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10032cbb
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10032cef
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x514], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10032cdb
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032d0b
push dword [ebp - 0x24]
lea ecx, [ebp - 0x918]
call fcn.10017fdc
mov dword [eax], 0x2b42d225
inc dword [ebp - 0x24]
xor eax, eax
inc eax
cmp dword [ebp - 0x24], eax
jl 0x10032cf4
push esi
lea ecx, [ebp - 0x100]
call fcn.10017fdc
xor ebx, ebx
lea ecx, [ebp - 0x100]
cmp dword [eax], ebx
sete bl
xor eax, eax
push eax
call fcn.10017fdc
mov eax, dword [eax]
sub eax, ebx
mov dword [ebp - 0x10], eax
jne 0x10032ddd
mov eax, dword [ebp - 0x514]
inc dword [ebp - 0x514]
test eax, eax
jne 0x10032d57
mov eax, dword [ebp - 0x4fc]
mov eax, dword [ebp - 0x4fc]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10032d76
push esi
lea ecx, [ebp - 0x100]
call fcn.10017fdc
xor ebx, ebx
lea ecx, [ebp - 0x100]
inc ebx
push ebx
call fcn.10017fdc
mov eax, dword [ebp - 0x4f8]
lea ecx, [ebp - 0x100]
push ebx
call fcn.10017fdc
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x100]
xor eax, eax
push eax
call fcn.10017fdc
xor eax, eax
lea ecx, [ebp - 0x100]
push eax
call fcn.10017fdc
xor eax, eax
lea ecx, [ebp - 0x100]
push eax
call fcn.10017fdc
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x196a
setg cl
xor eax, eax
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
je 0x10032dec
jmp 0x10032de2
xor ebx, ebx
xor eax, eax
inc ebx
mov esi, ebx
cmp dword [ebp - 0x514], eax
jne 0x10032dee
mov esi, eax
push eax
lea ecx, [ebp - 0x100]
call fcn.10017fdc
xor ecx, ecx
cmp esi, dword [eax]
setne cl
xor eax, eax
mov dword [ebp - 0x4fc], ecx
test ecx, ecx
jne 0x10032e14
mov esi, eax
cmp dword [ebp - 0x10], eax
je 0x10032e16
mov esi, ebx
push eax
lea ecx, [ebp - 0x918]
call fcn.10017fdc
push 2
lea ecx, [ebp - 0x100]
mov dword [eax], esi
call fcn.10017fdc
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x100]
setge dl
xor ebx, ebx
cmp edx, dword [eax]
setl bl
xor eax, eax
push eax
call fcn.10017fdc
lea ecx, [ebp - 0x100]
mov esi, dword [eax]
xor eax, eax
push eax
sub esi, ebx
call fcn.10017fdc
xor ecx, ecx
cmp esi, dword [eax]
setl cl
sub ecx, 5
jne 0x10032e7a
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10032e7a
mov esi, eax
inc eax
jmp 0x10032e7f
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0x100]
call fcn.10017fdc
xor ebx, ebx
lea ecx, [ebp - 0x100]
cmp esi, dword [eax]
setg bl
xor eax, eax
push eax
call fcn.10017fdc
xor ecx, ecx
cmp ebx, dword [eax]
setle cl
xor eax, eax
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x100]
push eax
call fcn.10017fdc
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x48]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x918]
call fcn.10017fc0
lea ecx, [ebp - 0x100]
mov dword [ebp - 4], edi
call fcn.10017fc0
mov dword [ebp - 0x1c], 0xca4f833f
xor eax, eax
mov dword [ebp - 0x4c], 0xf3e76e5b
push 3
mov dword [ebp - 0x10], eax
pop ebx
cmp dword [ebp - 0x10], ebx
jge 0x10032f14
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfcc], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032efc
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10032f29
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xfcc], 0
jne 0x10032f2f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x10032f19
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x18], 0x4e1a
mov dword [ebp - 0x38], 0xe58b
mov dword [ebp - 0x10], 7
push 8
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0x29c8ddac
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
imul ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
dec eax
cmp ecx, eax
jg 0x10032f91
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setl dl
xor eax, eax
xor edi, edi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], eax
inc edi
jmp 0x10032fdf
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10032fdc
push 0x90f
push 0x1da
push 0x50e
push 0x220b
call dword [sym.imp.GDI32.dll_CreateRectRgn]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jge 0x10032fb7
push 2
lea ecx, [ebp - 0x42c]
call fcn.10017f3e
push 4
lea ecx, [ebp - 0x41c]
mov dword [ebp - 4], 0xc
call fcn.10017f3e
push 4
lea ecx, [ebp - 0xb4c]
mov byte [ebp - 4], 0xd
call fcn.10017f3e
xor eax, eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003303e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x370], 0xde0bcd8c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10033025
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10033066
push dword [ebp - 0x24]
lea ecx, [ebp - 0x41c]
call fcn.10017fdc
mov dword [eax], 0x6f9b2cfb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10033047
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1003307e
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb4c]
call fcn.10017fdc
mov dword [eax], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1003306b
push edi
lea ecx, [ebp - 0x41c]
call fcn.10017fdc
mov dword [eax], edi
jmp 0x100332fc
mov dword [ebp - 0x30], 0xa60d0058
lea ecx, [ebp - 0xe70]
push ebx
call fcn.10017f3e
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x10], eax
jmp 0x100330cc
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe70]
call fcn.10017fdc
mov dword [eax], 0x4ccb63e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100330b5
push 2
lea ecx, [ebp - 0xb4c]
call fcn.10017fdc
inc dword [eax]
xor eax, eax
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], eax
jl 0x100332df
mov dword [ebp - 0x3c], 0xb26c4f32
mov dword [ebp - 0x3c], edi
cmp dword [ebp - 0x3c], eax
jl 0x100332d6
push edi
lea ecx, [ebp - 0x5a4]
call fcn.10017f3e
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x20], 0x2db756fd
mov dword [ebp - 0x4c], 0xf8dc70e7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1003314d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5a4]
call fcn.10017fdc
mov dword [eax], 0xfffffff7
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10033129
xor edi, edi
xor eax, eax
inc edi
push eax
lea ecx, [ebp - 0x5a4]
call fcn.10017fdc
dec dword [eax]
xor eax, eax
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], eax
jl 0x100332bc
push 4
lea ecx, [ebp - 0x930]
call fcn.10017f3e
push 2
lea ecx, [ebp - 0xc3c]
mov byte [ebp - 4], 0x11
call fcn.10017f3e
xor eax, eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100331b5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x930]
call fcn.10017fdc
mov dword [eax], 0x8361cd5c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10033196
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100331d1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc3c]
call fcn.10017fdc
mov dword [eax], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100331ba
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5a4]
mov eax, dword [ebp + eax*4 - 0x370]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x370]
mov dword [ebp - 0x4c], eax
xor eax, eax
push eax
call fcn.10017fdc
mov ecx, dword [ebp - 0x4c]
xor ebx, ebx
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x41c]
setge bl
call fcn.10017fdc
mov ecx, dword [ebp - 0x370]
xor edx, edx
cmp ebx, ecx
lea ecx, [ebp - 0x5a4]
setg dl
sub edx, dword [eax]
xor eax, eax
push eax
mov dword [ebp - 0x48], edx
call fcn.10017fdc
mov eax, dword [eax]
add eax, dword [ebp - 0x48]
jne 0x10033254
push eax
lea ecx, [ebp - 0x5a4]
call fcn.10017fdc
cmp dword [eax], 0
jne 0x10033254
xor eax, eax
mov esi, eax
inc eax
jmp 0x10033259
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0x41c]
call fcn.10017fdc
push 3
pop ebx
push ebx
mov eax, dword [eax]
lea ecx, [ebp - 0x930]
mov dword [ebp + eax*4 - 0x370], esi
mov eax, dword [ebp - 0x36c]
call fcn.10017fdc
xor eax, eax
lea ecx, [ebp - 0xc3c]
push eax
call fcn.10017fdc
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
lea ecx, [ebp - 0xc3c]
call fcn.10017fc0
lea ecx, [ebp - 0x930]
mov byte [ebp - 4], 0x10
call fcn.10017fc0
dec dword [ebp - 0x20]
push 1
pop edi
jns 0x10033169
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0xf
call fcn.10017fc0
dec dword [ebp - 0x3c]
jns 0x10033101
xor eax, eax
dec dword [ebp - 0x30]
jns 0x100330ee
lea ecx, [ebp - 0xe70]
mov byte [ebp - 4], 0xe
call fcn.10017fc0
push edi
lea ecx, [ebp - 0x41c]
call fcn.10017fdc
dec dword [eax]
push edi
lea ecx, [ebp - 0x41c]
call fcn.10017fdc
cmp dword [eax], 0
jge 0x10033097
lea ecx, [ebp - 0xb4c]
call fcn.10017fc0
lea ecx, [ebp - 0x41c]
mov byte [ebp - 4], 0xc
call fcn.10017fc0
mov dword [ebp - 0x2c], 0x7525d2d9
xor eax, eax
mov dword [ebp - 0x28], 0xfffffffc
or ecx, 0xffffffff
mov dword [ebp - 0x28], 0xcfbce008
mov dword [ebp - 0x24], 0x6fe6d39c
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x30], 0x684abf0a
mov dword [ebp - 0x4c], 5
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x54], 0xfffb
push ebx
call fcn.10017f3e
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100333a6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x47c], 0xbd0176df
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003338e
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100333c2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbf4]
call fcn.10017fdc
mov dword [eax], 0x9d6f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100333ab
mov ecx, dword [ebp - 0x24]
push 8
mov dword [ebp - 0x478], ecx
mov eax, dword [ebp - 0x24]
pop edx
cmp edx, eax
sbb eax, eax
neg eax
cmp ecx, eax
jl 0x10033408
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x478]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
lea eax, [ecx + 0x1415]
cmp eax, dword [ebp - 0x20]
jge 0x10033408
mov eax, edi
jmp 0x1003340a
xor eax, eax
mov dword [ebp - 0x24], eax
xor edx, edx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setle dl
xor ebx, ebx
cmp edx, eax
push 8
setl bl
pop eax
sub ebx, eax
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, 0xfffffffd
setge cl
xor eax, eax
cmp ecx, 0xca3c47a
setl al
mov dword [ebp - 0x30], eax
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x10033451
mov eax, dword [ebp - 0x478]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
cmp eax, edi
setg cl
sub ecx, dword [ebp - 0x40]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x40]
cmp ecx, 0x1e214356
jg 0x1003347e
xor eax, eax
cmp dword [ebp - 0x478], eax
je 0x10033480
mov eax, edi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x474]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
xor ecx, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 7
jb 0x100334b4
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x100334b7
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0x40], edi
je 0x100334d8
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x100334da
mov eax, edi
mov dword [ebp - 0x24], eax
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x100335bd
mov dword [ebp - 0x4c], 0x55714a8a
mov dword [ebp - 0x38], 0x753ca6af
cmp dword [ebp - 0x4c], eax
je 0x10033577
push 4
lea ecx, [ebp - 0x948]
call fcn.10017f3e
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x48], 0xffd363bf
mov dword [ebp - 0x10], eax
jmp 0x10033531
push dword [ebp - 0x10]
lea ecx, [ebp - 0x948]
call fcn.10017fdc
mov dword [eax], 0xb35667b2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1003351a
mov dword [ebp - 0x40], 0xffffffe3
jmp 0x10033551
push edi
lea ecx, [ebp - 0x948]
call fcn.10017fdc
dec dword [eax]
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0x30
jne 0x10033540
xor eax, eax
lea ecx, [ebp - 0xbf4]
push eax
call fcn.10017fdc
lea ecx, [ebp - 0x948]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
call fcn.10017fc0
jmp 0x100335d9
mov dword [ebp - 0x24], 0xb380b773
mov dword [ebp - 0x30], eax
jmp 0x100335b5
mov eax, dword [ebp - 0x478]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100335b2
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xf
jne 0x10033583
jmp 0x100335d9
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x100335d9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetParent]
lea ecx, [ebp - 0xbf4]
mov byte [ebp - 4], 0xc
call fcn.10017fc0
mov ebx, dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x3c], 0x5d6c05ba
mov dword [ebp - 0x3c], 0xffffffe6
cmp dword [ebp - 0x3c], 5
jg 0x10033741
push 3
xor eax, eax
pop esi
mov dword [ebp - 0x10], 4
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003363c
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10a0], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033627
xor eax, eax
mov dword [ebp - 0x10], 0xffffffe8
jmp 0x1003372a
mov dword [ebp - 0x20], 0x34bf8f0a
mov dword [ebp - 0x40], 0x3b1d
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x10033727
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x10a0]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
sbb eax, eax
inc eax
cmp eax, 0xa9bc
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x3c]
jne 0x1003368f
mov edx, edi
cmp dword [ebp - 0x40], eax
jne 0x10033691
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
push 3
mov esi, dword [ebp + eax*4 - 0x10a0]
mov eax, dword [ebp - 0x1094]
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setge cl
xor edx, edx
imul esi, ecx
cmp esi, 0x6aed
pop esi
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x40]
setl cl
cmp ecx, 0x943c6fe2
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setne dl
xor ecx, ecx
add edx, dword [ebp - 0x40]
imul eax, edx, 0xe6a4
cmp eax, 0xfffffffc
setne cl
xor eax, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x40], eax
jmp 0x10033717
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10033714
push eax
push 0x1933
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call ebx
xor eax, eax
inc dword [ebp - 0x40]
cmp dword [ebp - 0x40], esi
jle 0x100336f2
dec dword [ebp - 0x20]
jns 0x10033662
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffee
jne 0x10033648
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 5
jle 0x10033611
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], 0xcea5d6c0
mov dword [ebp - 0x20], eax
jmp 0x1003377b
mov dword [ebp - 0x10], 0xeede0b40
mov dword [ebp - 0x10], eax
jmp 0x10033772
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x1003376f
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1a
jge 0x1003375e
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffd
je 0x10033752
mov dword [ebp - 0x20], 0x891c5534
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], 0x43cdf98a
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x48], 0x99991913
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100337c2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b8], 0xc93b4e1a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100337a9
xor eax, eax
push 2
mov dword [ebp - 0x24], eax
pop esi
jmp 0x100338aa
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1b8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1b8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1b8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x1b8]
imul ecx, dword [ebp - 0x1b0]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp + eax*4 - 0x1b8]
add ecx, 0xfffffff8
mov eax, dword [ebp - 0x24]
add edx, ecx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1b8]
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x100338a7
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1b8]
cmp eax, edi
sete cl
cmp ecx, dword [ebp - 0x24]
jne 0x10033850
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1b8], 0
je 0x10033850
mov ecx, edi
jmp 0x10033854
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1b8]
add eax, ecx
xor ecx, ecx
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
imul ecx, dword [ebp + eax*4 - 0x1b8]
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp + eax*4 - 0x1b8]
imul eax, ecx, 0x265eed3
cmp eax, 0x5b4d
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1b8]
cmp edx, eax
setne cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x20]
jns 0x10033829
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x100337cd
mov dword [ebp - 0x58], 0x6bde64f
lea ecx, [ebp - 0x288]
push esi
call fcn.10017f3e
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x4c], 0x98bbeb92
mov dword [ebp - 0x48], 0x13c9534c
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033900
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.10017fdc
mov dword [eax], 0x5c68ec0a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100338e2
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10033921
or ecx, 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe88], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003390c
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10033941
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5cc], 0x3560277e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10033929
xor eax, eax
push eax
lea ecx, [ebp - 0x288]
call fcn.10017fdc
and dword [eax], 0
jmp 0x10033b3d
mov dword [ebp - 0x24], 0xfffffffe
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x24], eax
jmp 0x10033afa
mov dword [ebp - 0x1c], 0x651328f6
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003399b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3cc], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10033986
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jg 0x10033af7
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x10], eax
jmp 0x100339c4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10ac], 0x673ed132
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100339b3
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
test eax, eax
sete cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x288]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
xor eax, eax
push eax
call fcn.10017fdc
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10033a2e
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
xor eax, eax
push eax
call fcn.10017fdc
xor eax, eax
lea ecx, [ebp - 0x288]
push eax
call fcn.10017fdc
xor edx, edx
push edi
mov ecx, dword [eax]
neg ecx
mov dword [ebp - 0xe80], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x3cc]
cmp ecx, eax
setl dl
xor eax, eax
mov dword [ebp - 0x10ac], edx
cmp edx, 0xd89d
setne al
xor edx, edx
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
lea ecx, [ebp - 0x288]
setg dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x44]
call fcn.10017fdc
cmp dword [eax], 0
je 0x10033ad1
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x5cc]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c8]
setl cl
sub ecx, eax
cmp ecx, dword [ebp - 0x10]
jl 0x10033ad1
mov eax, edi
jmp 0x10033ad3
xor eax, eax
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0xe88]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x1c]
push 0
pop eax
cmp dword [ebp - 0x1c], esi
jle 0x100339a7
or ecx, 0xffffffff
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff6
je 0x1003396f
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1a
je 0x10033b2f
mov dword [ebp - 0x48], eax
xor ecx, ecx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x48]
cmp eax, 0xfffff2a0
push 0
setne cl
mov dword [ebp - 0x54], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
pop eax
jne 0x10033b0d
push eax
lea ecx, [ebp - 0x288]
call fcn.10017fdc
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x288]
push eax
call fcn.10017fdc
cmp dword [eax], 0xffffffea
jg 0x10033955
xor eax, eax
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], al
je 0x10033b66
push eax
push eax
call dword [sym.imp.USER32.dll_UnregisterClassA]
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xc
call fcn.10017fc0
or eax, 0xffffffff
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x28], eax
push esi
call fcn.10017f3e
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x694]
or eax, 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x24], 0x8b78acc4
push edi
call fcn.10017f3e
xor eax, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10033bcc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.10017fdc
mov dword [eax], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10033bb2
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10033bf2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x694]
call fcn.10017fdc
mov dword [eax], 0x90c6d21c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10033bd4
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jg 0x10033d72
jmp 0x10033c05
push 2
xor eax, eax
pop esi
mov dword [ebp - 0x10], eax
jmp 0x10033c1b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xed4], 0x2ddfdaf0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033c0a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.10017fdc
xor esi, esi
cmp dword [eax], esi
jne 0x10033c5c
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.10017fdc
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
mov eax, dword [ebp - 0x1c]
push edi
call fcn.10017fdc
cmp dword [eax], esi
jne 0x10033c5c
xor eax, eax
jmp 0x10033c5e
mov esi, edi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d0]
call fcn.10017fdc
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x1d0]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10017fdc
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x694]
xor eax, eax
push eax
call fcn.10017fdc
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033d5d
or eax, 0xffffffff
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x38], 2
push dword [ebp - 0x1c]
call fcn.10017fdc
xor eax, eax
lea ecx, [ebp - 0x1d0]
push eax
call fcn.10017fdc
lea ecx, [ebp - 0x694]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
xor eax, eax
mov esi, dword [ebp - 0x24]
push eax
call fcn.10017fdc
lea ecx, [ebp - 0x1d0]
mov dword [eax], esi
xor eax, eax
push eax
call fcn.10017fdc
mov ecx, dword [ebp - 0x24]
xor edx, edx
neg ecx
cmp ecx, dword [eax]
mov eax, 0xfff6
setl dl
cmp eax, edx
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
lea ecx, [ebp - 0x1d0]
setle dl
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
inc edx
imul edx, esi
mov dword [ebp - 0xed4], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x1c]
call fcn.10017fdc
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x1d0]
push dword [ebp - 0x1c]
call fcn.10017fdc
mov ecx, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, 0x552ad14c
setl dl
imul edx, dword [eax]
mov dword [ebp - 0x38], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10033ca0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x10033c00
lea ecx, [ebp - 0x694]
call fcn.10017fc0
lea ecx, [ebp - 0x1d0]
mov byte [ebp - 4], 0xc
call fcn.10017fc0
mov dword [ebp - 0x50], 0x71658a60
lea ecx, [ebp - 0xfdc]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x7102d149
mov dword [ebp - 0x28], 0x9dd952ea
mov dword [ebp - 0x10], 0x16efa42b
push edi
call fcn.10017f3e
mov byte [ebp - 4], 0x18
xor eax, eax
mov dword [ebp - 0x4c], 0xc174
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10033dec
push dword [ebp - 0x10]
lea ecx, [ebp - 0xfdc]
call fcn.10017fdc
mov dword [eax], 0x85ed0657
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10033dce
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe9
jl 0x10033e4b
push 0xfffffffffffffff7
pop ecx
mov dword [ebp - 0x28], 0x8f69
mov dword [ebp - 0x28], 0x814b733c
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x28], 0x2abbf9ac
mov dword [ebp - 0x28], 0x53a34c86
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], ecx
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10033e3f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
push 0xfffffffffffffff7
xor eax, eax
pop ecx
inc dword [ebp - 0x4c]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe9
jge 0x10033df8
mov dword [ebp - 0x20], eax
jmp 0x10033eac
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x28], 0xf609d70c
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x10
jne 0x10033e83
push 0xfffffffffffffff6
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x4c], 0x89ec
dec dword [ebp - 0x4c]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x10
je 0x10033e6d
mov dword [ebp - 0x1c], edi
jmp 0x10033ea3
mov byte [ebp - 0x31], al
cmp byte [ebp - 0x31], 0
je 0x10033ea0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffb
jg 0x10033e88
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x12
jne 0x10033e50
lea ecx, [ebp - 0xfdc]
mov byte [ebp - 4], 0xc
call fcn.10017fc0
lea eax, [ebp - 0x1178]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1188]
push eax
lea ecx, [ebp - 0x1460]
movdqu xmmword [ebp - 0x1188], xmm0
call fcn.10017feb
lea ecx, [ebp - 0x273]
mov esi, eax
call fcn.10008d23
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x12e4]
push dword [esi]
call fcn.10017f9a
mov byte [ebp - 4], 0x19
mov eax, 0xa5d6c05b
mov dword [ebp - 0x8a8], eax
mov dword [ebp - 0x8a4], eax
mov dword [ebp - 0x8a0], eax
mov dword [ebp - 0x89c], eax
xor eax, eax
mov dword [ebp - 0x3c], 0xc5534bf8
mov dword [ebp - 0x28], 0xd6b65720
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10033f50
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb8], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10033f3c
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], eax
jl 0x10033f7e
push 0xfffffffffffffffa
pop edx
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x8a8], edx
mov dword [ebp - 0x3c], edx
dec dword [ebp - 0xb8]
jns 0x10033f64
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
jl 0x10033fbe
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x20], eax
jmp 0x10033fa3
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x3c], 0x5d6c05ba
mov dword [ebp - 0x3c], 0xffffffe6
jmp 0x100340fd