Function at 0x10031b5e
Capabilities:
Accept command line arguments
Compare security identifiers
Connect pipe
Create pipe
Create thread
Enumerate gui resources
Get keyboard layout
Get memory capacity
Get session user name
Get thread local storage value
Parse pe header
Query environment variable
Query or enumerate registry value
Terminate process

Disassembly:
mov eax, 0x100859fc
call fcn.100840a8
mov eax, 0x1564
call fcn.1006fb40
push ebx
xor eax, eax
mov dword [ebp - 0x30], 0xecb45710
push esi
push edi
mov dword [ebp - 0x50], 0x69b2e414
xorps xmm0, xmm0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x1008]
push eax
lea eax, [ebp - 0x1018]
mov dword [ebp - 0x58], ecx
push eax
lea ecx, [ebp - 0x1450]
mov byte [ebp - 0x5d], dl
movdqu xmmword [ebp - 0x1018], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x185]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xea8]
push dword [esi]
call fcn.10018280
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], 0x540fff06
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10031bfe
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x660], 0x41b3c692
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10031be5
xor eax, eax
push 2
pop edi
mov dword [ebp - 0x30], edi
push 1
pop ebx
cmp dword [ebp - 0x30], eax
jl 0x10031d0d
jmp 0x10031c14
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10031c29
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x660]
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x10031c99
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x660]
mov eax, dword [ebp - 0x658]
cmp eax, 0x7e434392
setge cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x658]
mov eax, dword [ebp - 0x3c]
add ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x660], ecx
xor eax, eax
cmp ecx, 0x5206
setle al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
sbb edx, edx
neg edx
cmp edx, eax
setl cl
cmp dword [ebp - 0x50], ecx
jge 0x10031c97
mov eax, ebx
jmp 0x10031c99
xor eax, eax
mov esi, dword [ebp - 0x38]
lea ecx, [ebp - 0xea8]
add esi, eax
neg esi
neg esi
push ebx
sbb esi, esi
inc esi
call fcn.100182ab
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0x1d534a2c
setg al
cmp eax, 9
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x50]
jl 0x10031cf3
mov dword [ebp - 0x48], 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
jmp 0x10031d04
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10031d04
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
dec dword [ebp - 0x30]
jns 0x10031c12
or eax, 0xffffffff
lea ecx, [ebp - 0xea8]
mov dword [ebp - 4], eax
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x30], 0xecb45710
mov dword [ebp - 0x50], 0x69b2e414
lea ecx, [ebp - 0x1348]
mov dword [ebp - 0x3c], eax
xorps xmm0, xmm0
lea eax, [ebp - 0x1038]
push eax
lea eax, [ebp - 0x1048]
push eax
movdqu xmmword [ebp - 0x1048], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x172]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1008]
push dword [esi]
call fcn.10018280
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x38], 0x540fff06
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10031da1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x66c], 0x41b3c692
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10031d88
xor eax, eax
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], eax
jl 0x10031eaa
jmp 0x10031db1
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10031dc6
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x66c]
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x10031e36
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x66c]
mov eax, dword [ebp - 0x664]
cmp eax, 0x7e434392
setge cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x664]
mov eax, dword [ebp - 0x3c]
add ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x66c], ecx
xor eax, eax
cmp ecx, 0x5206
setle al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
sbb edx, edx
neg edx
cmp edx, eax
setl cl
cmp dword [ebp - 0x50], ecx
jge 0x10031e34
mov eax, ebx
jmp 0x10031e36
xor eax, eax
mov esi, dword [ebp - 0x38]
lea ecx, [ebp - 0x1008]
add esi, eax
neg esi
neg esi
push ebx
sbb esi, esi
inc esi
call fcn.100182ab
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0x1d534a2c
setg al
cmp eax, 9
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x50]
jl 0x10031e90
mov dword [ebp - 0x48], 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
jmp 0x10031ea1
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10031ea1
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
dec dword [ebp - 0x30]
jns 0x10031daf
or esi, 0xffffffff
lea ecx, [ebp - 0x1008]
mov dword [ebp - 4], esi
call fcn.100182a6
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 8
setns cl
mov dword [ebp - 0x20], 0x213072c0
xor edx, edx
mov dword [ebp - 0x38], 0x9eb818f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
push 0xfffffffffffffffd
setl dl
xor eax, eax
cmp edx, 0x2377d64
pop ecx
setne al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], eax
jge 0x1003204d
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1003204f
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1c], 0xc
cmp dword [ebp - 0x1c], 0xffffffe2
jg 0x10031fa0
mov dword [ebp - 0x4c], 0xecaa7054
xor ebx, ebx
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setle bl
add eax, 7
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
push 0
setne cl
mov dword [ebp - 0x54], ecx
mov ecx, esi
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov edx, dword [ebp - 0x14]
sub edx, ecx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x25452e2c
setg al
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe2
pop eax
jle 0x10031f3e
xor ebx, ebx
inc ebx
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x10032041
push edi
lea ecx, [ebp - 0x654]
call fcn.10018221
xor eax, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], eax
jmp 0x10031fd3
push dword [ebp - 0x24]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
inc dword [ebp - 0x24]
lea ecx, [ebp - 0x654]
cmp dword [ebp - 0x24], edi
jl 0x10031fc2
push ebx
call fcn.100182ab
cmp dword [eax], 0
jge 0x1003200f
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x654]
push ebx
call fcn.100182ab
xor eax, eax
cmp dword [ebp - 0x14], esi
je 0x10032006
cmp dword [ebp - 0x54], eax
je 0x10032006
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jg 0x1003200f
mov esi, ebx
jmp 0x10032013
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0x654]
call fcn.100182ab
lea ecx, [ebp - 0x654]
sub esi, dword [eax]
mov dword [ebp - 0x54], esi
or esi, 0xffffffff
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], esi
call fcn.100182a6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x1d
jl 0x10031fac
jmp 0x1003207d
xor eax, eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x24], eax
jmp 0x10032068
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf74], 0x33d7bf5f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10032057
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xf70], eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
mov dword [ebp - 0x28], 0x64a6
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x100320ac
push 0x1881
push 0xa5e
call edi
push eax
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x100320bd
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor eax, eax
mov dword [ebp - 0x30], 0xecb45710
lea ecx, [ebp - 0x13c8]
mov dword [ebp - 0x50], 0x69b2e414
xorps xmm0, xmm0
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x1138]
push eax
lea eax, [ebp - 0x1148]
push eax
movdqu xmmword [ebp - 0x1148], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x182]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xecc]
push dword [esi]
call fcn.10018280
push 3
pop esi
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x38], 0x540fff06
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x1003213f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x684], 0x41b3c692
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10032127
xor eax, eax
mov dword [ebp - 0x30], 2
cmp dword [ebp - 0x30], eax
jl 0x1003224f
jmp 0x10032153
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x48], eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032168
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x684]
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x100321d8
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x684]
mov eax, dword [ebp - 0x67c]
cmp eax, 0x7e434392
setge cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x67c]
mov eax, dword [ebp - 0x3c]
add ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x684], ecx
xor eax, eax
cmp ecx, 0x5206
setle al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
sbb edx, edx
neg edx
cmp edx, eax
setl cl
cmp dword [ebp - 0x50], ecx
jge 0x100321d6
mov eax, ebx
jmp 0x100321d8
xor eax, eax
mov esi, dword [ebp - 0x38]
lea ecx, [ebp - 0xecc]
add esi, eax
neg esi
neg esi
push ebx
sbb esi, esi
inc esi
call fcn.100182ab
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0x1d534a2c
setg al
cmp eax, 9
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x50]
jl 0x10032232
mov dword [ebp - 0x48], 8
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
jmp 0x10032243
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10032243
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
dec dword [ebp - 0x30]
jns 0x10032151
push 3
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0xecc]
mov dword [ebp - 4], eax
call fcn.100182a6
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 8
setns cl
mov dword [ebp - 0x20], 0x213072c0
xor edx, edx
mov dword [ebp - 0x38], 0x9eb818f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x2377d64
setne al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], eax
jge 0x100323f4
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x100323f6
push 0xfffffffffffffffd
mov dword [ebp - 0x14], 9
or esi, 0xffffffff
pop ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1c], 0xc
xor ebx, ebx
cmp dword [ebp - 0x1c], 0xffffffe2
jg 0x10032341
mov dword [ebp - 0x4c], 0xecaa7054
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setle bl
add eax, 7
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
push 0
setne cl
mov dword [ebp - 0x54], ecx
mov ecx, esi
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov edx, dword [ebp - 0x14]
sub edx, ecx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x25452e2c
setg al
mov dword [ebp - 0x48], eax
dec dword [ebp - 0x1c]
pop eax
jmp 0x100322e0
mov dword [ebp - 0x30], 0xfffffffe
inc ebx
jmp 0x100323e8
push 2
lea ecx, [ebp - 0x694]
call fcn.10018221
push 4
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032379
push dword [ebp - 0x24]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
lea ecx, [ebp - 0x694]
jl 0x10032368
push ebx
call fcn.100182ab
cmp dword [eax], 0
jge 0x100323b6
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x694]
push ebx
call fcn.100182ab
xor eax, eax
cmp dword [ebp - 0x14], esi
je 0x100323ad
cmp dword [ebp - 0x54], eax
je 0x100323ad
mov eax, ebx
cmp eax, dword [ebp - 0x14]
jg 0x100323b6
mov esi, ebx
jmp 0x100323ba
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0x694]
call fcn.100182ab
lea ecx, [ebp - 0x694]
sub esi, dword [eax]
mov dword [ebp - 0x54], esi
or esi, 0xffffffff
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], esi
call fcn.100182a6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x1d
jl 0x1003234e
jmp 0x10032423
xor eax, eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x24], eax
jmp 0x1003240f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfc0], 0x33d7bf5f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100323fe
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xfbc], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x4c], 0x91b0
push 4
mov dword [ebp - 0x40], 0x2cebb36e
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x10032455
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd94], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10032448
mov dword [ebp - 0x18], 0xffffffe9
jmp 0x10032543
mov dword [ebp - 0x20], 0xbf2465c
lea ecx, [ebp - 0xa84]
mov dword [ebp - 0x38], 0x1ad5b481
mov dword [ebp - 0x2c], 0x90f9cf50
mov dword [ebp - 0x14], 0x4923552e
mov dword [ebp - 0x50], 0xddd2e786
push ebx
call fcn.10018221
xor eax, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100324c3
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa84]
call fcn.100182ab
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100324a6
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x100324d3
cmp dword [ebp - 0x18], 0x215e
mov esi, eax
je 0x100324d5
mov esi, ebx
cmp dword [ebp - 0xd94], eax
je 0x100324e0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
xor edx, edx
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setl dl
xor ebx, ebx
cmp esi, edx
setl bl
xor ecx, ecx
cmp ebx, eax
setg cl
xor eax, eax
cmp ecx, 0xffffffff
setg al
cmp eax, 0x351
jge 0x100325a0
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x1003252c
push 0x138b
push eax
push eax
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
xor ebx, ebx
inc ebx
or eax, 0xffffffff
lea ecx, [ebp - 0xa84]
mov dword [ebp - 4], eax
call fcn.100182a6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff7
jge 0x10032466
push 2
pop esi
push esi
lea ecx, [ebp - 0x53c]
call fcn.10018221
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10032589
push dword [ebp - 0x24]
lea ecx, [ebp - 0x53c]
call fcn.100182ab
push 0xfffffffffffffffd
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1003256c
xor eax, eax
push eax
lea ecx, [ebp - 0x53c]
call fcn.100182ab
mov dword [eax], 0x1c
jmp 0x10032708
mov dword [ebp - 0x50], 0xfffffffc
xor eax, eax
mov dword [ebp - 0x54], 0xf7503ae5
xor ebx, ebx
mov dword [ebp - 0x38], eax
inc ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x100325db
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf8c], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100325c2
xor eax, eax
cmp dword [ebp - 0xd88], eax
je 0x1003262c
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, 0x3765
setne cl
xor eax, eax
cmp ecx, 0x737a30b9
setl al
xor edx, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setl dl
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
sub eax, 0x682c
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0xd90]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
mov edx, 0xa5798870
setne cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, eax
setl dl
sub edx, 0x1cc0d681
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x54], edx
xor edx, edx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x6994
setl al
inc eax
jne 0x100326af
mov eax, dword [ebp - 0xd90]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xa84]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor eax, eax
mov dword [ebp - 0x50], 0x2ca82e93
mov esi, dword [ebp - 0x50]
push eax
call fcn.100182ab
cmp esi, 2
mov dword [eax], esi
sbb eax, eax
inc eax
mov dword [ebp - 0xf8c], eax
jmp 0x1003252f
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x100326fa
push 0x19ff
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
xor eax, eax
push eax
lea ecx, [ebp - 0x53c]
call fcn.100182ab
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x53c]
push eax
call fcn.100182ab
cmp dword [eax], 0xffffffe7
jle 0x100326e3
or eax, 0xffffffff
lea ecx, [ebp - 0x53c]
mov dword [ebp - 4], eax
call fcn.100182a6
mov dword [ebp - 0x24], 0x7928fbc7
or ecx, 0xffffffff
push 9
pop eax
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x14], 0x4bb489f7
mov dword [ebp - 0x28], 7
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10032771
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x194], 0xe1757117
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10032758
xor eax, eax
mov dword [ebp - 0x18c], 0xffffffe7
cmp dword [ebp - 0x18c], 0x19
jle 0x1003293a
jmp 0x1003278c
xor eax, eax
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x4c], 0xc37fc054
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], 0xfffffffb
mov dword [ebp - 0x24], eax
jmp 0x100327bd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4c4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100327b0
mov eax, dword [ebp - 0x190]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x194]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, 0x91208373
setge dl
cmp eax, edx
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
cmp eax, 0x9a2b
setge cl
sub ecx, dword [ebp - 0x30]
je 0x100328a2
mov dword [ebp - 0x28], eax
xor ebx, ebx
push 9
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x28], 0xa7bc6c89
mov dword [ebp - 0x2c], 0x8927
inc dword [ebp - 0x4c0]
mov eax, dword [ebp - 0x4c0]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
setl bl
xor edx, edx
cmp eax, ecx
push 0xfffffffffffffffd
setg dl
add ebx, edx
neg ebx
pop eax
sbb ebx, ebx
neg ebx
cmp eax, ebx
mov eax, dword [ebp - 0x50]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], eax
jne 0x10032880
mov eax, dword [ebp - 0x190]
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x48], ebx
cmp dword [ebp - 0x3c], eax
jne 0x10032891
mov eax, dword [ebp - 0x4c4]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
jmp 0x10032924
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x2c], 0x7ce2
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x4c]
imul eax, dword [ebp - 0x24]
test eax, eax
je 0x100328c5
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100328c7
mov ecx, ebx
jmp 0x100328c9
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
test eax, eax
mov eax, dword [ebp - 0x30]
setle bl
add edx, ecx
xor ecx, ecx
cmp edx, eax
setne cl
sub ebx, 0xfff6
add ebx, ecx
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x190]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
cmp eax, 0xffff
setne cl
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
inc ebx
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x18c]
cmp dword [ebp - 0x18c], 0x19
push 0xffffffffffffffff
pop ecx
jg 0x1003278a
mov dword [ebp - 0x54], 0xecb45710
xor eax, eax
mov dword [ebp - 0x28], 0x64a6
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x1003296a
push 0x1881
push 0xa5e
call edi
push eax
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetMessageA]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x1003297b
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor eax, eax
mov dword [ebp - 0x2c], 0x69b2e414
lea ecx, [ebp - 0xc34]
mov dword [ebp - 0x18], eax
or esi, 0xffffffff
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x3c], 0x30498d20
push 3
call fcn.10018221
xor eax, eax
mov dword [ebp - 4], 7
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100329d0
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc34]
call fcn.100182ab
mov dword [eax], 0xfffffffb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100329b1
xor eax, eax
mov dword [ebp - 0x18], 0xffffffef
cmp dword [ebp - 0x18], 0xfffffff1
jl 0x10032a84
jmp 0x100329e5
xor eax, eax
mov dword [ebp - 0x4c], eax
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x3c], esi
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x10032a12
cmp dword [ebp - 0x50], eax
je 0x10032a14
mov eax, ebx
mov ecx, dword [ebp - 0x18]
add ecx, 0xb7f6
sub ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
add ecx, eax
mov eax, 0xed162c5d
imul ecx, dword [ebp - 0x18]
sub eax, ecx
jne 0x10032a3b
mov edx, eax
cmp dword [ebp - 0x18], eax
je 0x10032a3d
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
push ebx
setge cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0xc34]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x18]
call fcn.100182ab
mov dword [eax], esi
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10032a72
push eax
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
push 0xffffffffffffffff
pop esi
jge 0x100329e3
or esi, esi
lea ecx, [ebp - 0xc34]
mov dword [ebp - 4], esi
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x20], 0xdf99ff60
mov dword [ebp - 0x48], 0x1e4f1f13
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032ac5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6a8], 0x9536
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032aad
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffb
cmp dword [ebp - 0x20], 0xfffffff9
jl 0x10032b43
push 7
pop ecx
push 6
pop edx
mov dword [ebp - 0x62c], ecx
mov dword [ebp - 0x628], ecx
mov dword [ebp - 0x624], ecx
mov dword [ebp - 0x620], ecx
mov dword [ebp - 0x628], eax
cmp dword [ebp - 0x628], eax
jl 0x10032b3a
push 9
pop eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x628]
cmp dword [ebp + eax*4 - 0x6a8], 0
jne 0x10032b38
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032b2b
mov eax, dword [ebp - 0x20]
cmp edx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x24], eax
jle 0x10032b1b
dec dword [ebp - 0x628]
jns 0x10032afe
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff9
jge 0x10032ad8
lea eax, [ebp - 0x1058]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x1068]
push eax
lea ecx, [ebp - 0x1358]
movdqu xmmword [ebp - 0x1068], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x166]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xefc]
push dword [esi]
call fcn.10018280
mov dword [ebp - 4], 8
xor eax, eax
mov dword [ebp - 0x20], 0x3c692bea
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x11
jle 0x10032c76
movdqa xmm0, xmmword [0x10007dd0]
lea eax, [ebp - 0x11b8]
push eax
lea eax, [ebp - 0x11c8]
push eax
lea ecx, [ebp - 0x1408]
movdqu xmmword [ebp - 0x11c8], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x167]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x530]
push dword [esi]
call fcn.10018280
push 9
pop eax
mov byte [ebp - 4], al
xor eax, eax
push 4
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x10032c0a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1418], 0xfebb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10032bf9
push 3
pop esi
push esi
lea ecx, [ebp - 0x530]
call fcn.100182ab
and dword [eax], 0
jmp 0x10032c43
push esi
call fcn.100182ab
push 0xfffffffffffffffd
pop ecx
push esi
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x1418], ecx
lea ecx, [ebp - 0x530]
call fcn.100182ab
inc dword [eax]
push esi
lea ecx, [ebp - 0x530]
call fcn.100182ab
push 4
pop ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x530]
jl 0x10032c23
mov byte [ebp - 4], 8
call fcn.100182a6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x11
jg 0x10032ba2
xor eax, eax
jmp 0x10032c79
push 3
pop esi
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032c89
push eax
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x38], 0x540fff06
lea ecx, [ebp - 0x80]
push esi
call fcn.10018221
mov byte [ebp - 4], 0xa
or eax, 0xffffffff
mov dword [ebp - 0x1c], 0xb2f67ab6
mov dword [ebp - 0x3c], 0x8fa7ad11
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x48], 0x7c264f89
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10032cdd
push dword [ebp - 0x18]
lea ecx, [ebp - 0x80]
call fcn.100182ab
mov dword [eax], 0xc418
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10032cc2
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10032cfc
push 6
pop ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x334], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10032ce8
xor eax, eax
push eax
lea ecx, [ebp - 0x80]
call fcn.100182ab
push 2
lea ecx, [ebp - 0x80]
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x80]
push ebx
call fcn.100182ab
imul eax, dword [eax], 0xe6e4
test eax, eax
jne 0x10032d36
push ebx
lea ecx, [ebp - 0x80]
call fcn.100182ab
cmp dword [eax], ebx
jne 0x10032d36
mov eax, ebx
inc ebx
jmp 0x10032d3b
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x334], eax
lea ecx, [ebp - 0x80]
push ebx
call fcn.100182ab
push ebx
lea ecx, [ebp - 0x80]
cmp dword [eax], 0xb3f4b141
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
call fcn.100182ab
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x1c], eax
je 0x10032d6e
mov esi, ebx
push eax
lea ecx, [ebp - 0x80]
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x80]
push ebx
sub esi, dword [eax]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x10032d95
push ebx
lea ecx, [ebp - 0x80]
call fcn.100182ab
cmp dword [eax], ebx
je 0x10032da3
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10032da5
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10032daa
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push eax
lea ecx, [ebp - 0x80]
call fcn.100182ab
sub esi, dword [eax]
xor eax, eax
cmp esi, 0x38d9
je 0x10032dc9
mov esi, ebx
cmp dword [ebp - 0x334], eax
jne 0x10032dcb
mov esi, eax
push ebx
lea ecx, [ebp - 0x80]
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x80]
cmp esi, dword [eax]
setg bl
xor eax, eax
inc eax
push eax
call fcn.100182ab
xor ecx, ecx
push 2
cmp ebx, dword [eax]
sete cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x80]
call fcn.100182ab
lea ecx, [ebp - 0x80]
mov esi, dword [eax]
xor eax, eax
sub esi, dword [ebp - 0x48]
push eax
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x80]
cmp esi, dword [eax]
setl bl
xor eax, eax
push eax
call fcn.100182ab
xor ecx, ecx
cmp dword [eax], ebx
setge cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
je 0x10032e34
cmp dword [ebp - 0x1c], eax
je 0x10032e34
inc eax
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0x80]
mov eax, dword [ebp - 0x1c]
push 2
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x80]
push ebx
call fcn.100182ab
push ebx
lea ecx, [ebp - 0x80]
mov esi, dword [eax]
call fcn.100182ab
lea ecx, [ebp - 0x80]
cmp esi, dword [eax]
sete bl
xor esi, esi
push esi
call fcn.100182ab
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
xor ebx, ebx
mov dword [ebp - 0x48], ecx
inc ebx
push ebx
lea ecx, [ebp - 0x80]
call fcn.100182ab
mov edx, dword [ebp - 0x48]
xor ecx, ecx
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x1c], 0xfffffffa
jmp 0x10032ef5
mov dword [ebp - 0x48], esi
lea ecx, [ebp - 0xa9c]
push 3
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], eax
jmp 0x10032ec1
push dword [ebp - 0x24]
call fcn.100182ab
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
lea ecx, [ebp - 0xa9c]
jl 0x10032eb1
push ebx
call fcn.100182ab
mov ecx, dword [ebp - 0x48]
xor edx, edx
cmp ecx, 0xfffffff8
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xa9c]
setne dl
mov dword [eax], edx
call fcn.100182a6
inc dword [ebp - 0x1c]
push 0
pop esi
cmp dword [ebp - 0x1c], 0x14
jl 0x10032e96
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 8
call fcn.100182a6
movdqa xmm0, xmmword [0x10007e00]
lea eax, [ebp - 0x1078]
push eax
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x13d8]
movdqu xmmword [ebp - 0x1088], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x169]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x808]
push dword [esi]
call fcn.10018280
mov byte [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x48], 0xc8953526
mov dword [ebp - 0x3c], ebx
push 3
mov dword [ebp - 0x24], eax
pop esi
cmp dword [ebp - 0x24], esi
jge 0x10032f81
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1f4], 0xf94f3783
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10032f69
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032f93
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
xor eax, eax
mov dword [ebp - 0x1f0], eax
jmp 0x10033094
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x4c], 0xfffffff9
push dword [ebp - 0x1f0]
call fcn.100182ab
mov eax, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1f0]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x48], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
imul eax, edx, 0xffff3f20
add dword [ebp - 0x18], eax
je 0x10032ff0
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x808]
push dword [ebp - 0x1f0]
call fcn.100182ab
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0x808]
mov esi, eax
call fcn.100182ab
push 3
mov ecx, dword [eax]
mov dword [esi], ecx
pop esi
lea edx, [ecx + 1]
sub edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x1003308e
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033071
push eax
push 0x24e7
push 0x2256
push 0x1f01
push 0x1be3
push 0x1ecd
push 0x215f
push eax
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033089
push eax
push 0x30d
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10033040
inc dword [ebp - 0x1f0]
lea ecx, [ebp - 0x808]
cmp dword [ebp - 0x1f0], esi
jle 0x10032f9e
mov byte [ebp - 4], 8
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100330c7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c4], 0x41b3c692
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100330b6
push 4
pop eax
mov dword [ebp - 0x20], 0xe1757117
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x14], 0x37ad4351
push eax
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0xd
push 4
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x10033122
push dword [ebp - 0x24]
lea ecx, [ebp - 0x238]
call fcn.100182ab
push 4
pop ecx
mov dword [eax], 0xfffffffb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10033101
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
jge 0x1003334e
jmp 0x10033134
push 4
pop ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x18], 0xfba1a4d6
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
add eax, dword [ebp - 0x18]
je 0x100331bc
mov dword [ebp - 0x4c], 8
lea ecx, [ebp - 0x238]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
push ebx
call fcn.100182ab
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x1003319a
mov ecx, 0xffff
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x238]
mov esi, dword [ebp - 0x1c]
push eax
call fcn.100182ab
push 3
mov dword [eax], esi
mov dword [ebp - 0x48], esi
pop esi
jmp 0x100332f4
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x100332f6
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetBkColor]
jmp 0x100332f4
xor eax, eax
push ecx
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0x428]
call fcn.10018221
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x48], ebx
push 4
mov dword [ebp - 0x24], eax
pop ebx
cmp dword [ebp - 0x24], ebx
jge 0x100331ff
push dword [ebp - 0x24]
lea ecx, [ebp - 0x428]
call fcn.100182ab
mov dword [eax], 0x5d518144
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100331e1
xor eax, eax
lea ecx, [ebp - 0x428]
cmp dword [ebp - 0x18], eax
jne 0x10033349
mov eax, dword [ebp - 0x4c]
push esi
call fcn.100182ab
imul ecx, dword [ebp - 0x14], 0xfffffffc
xor ebx, ebx
push 2
cmp dword [eax], ecx
lea ecx, [ebp - 0x428]
setle bl
call fcn.100182ab
push 2
lea ecx, [ebp - 0x428]
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, 7
imul eax, eax, 0xfffd
mov dword [ebp - 0x14], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10033277
push 2
lea ecx, [ebp - 0x428]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10033277
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
jmp 0x1003327c
xor ebx, ebx
inc ebx
mov esi, ebx
push ebx
lea ecx, [ebp - 0x238]
call fcn.100182ab
xor ecx, ecx
cmp dword [eax], esi
sete cl
cmp ecx, dword [ebp - 0x20]
jne 0x10033297
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x238]
mov eax, dword [ebp - 0x48]
push ebx
call fcn.100182ab
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x38]
cmp eax, ebx
jl 0x100332ba
mov edx, ebx
jmp 0x100332be
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
push 3
setl cl
sub ecx, 0x3a0aeb04
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x238]
pop esi
push esi
call fcn.100182ab
mov ecx, dword [ebp - 0x18]
mov byte [ebp - 4], 0xd
mov dword [eax], ecx
lea ecx, [ebp - 0x428]
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033335
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jg 0x10033332
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x238]
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x238]
mov esi, eax
call fcn.100182ab
mov ecx, dword [esi]
push 3
pop esi
mov dword [eax], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10033303
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x100332fb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1a
jl 0x10033131
jmp 0x1003334e
call fcn.100182a6
lea ecx, [ebp - 0x238]
mov byte [ebp - 4], 8
call fcn.100182a6
mov dword [ebp - 0x54], 2
xor eax, eax
mov ebx, 0xd62e65
cmp dword [ebp - 0x54], eax
jl 0x1003472e
movdqa xmm0, xmmword [0x10007d90]
lea eax, [ebp - 0x1158]
push eax
lea eax, [ebp - 0x1168]
mov dword [ebp - 0x18], 0x4e064826
push eax
lea ecx, [ebp - 0x1340]
movdqu xmmword [ebp - 0x1168], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x16b]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xee4]
push dword [esi]
call fcn.10018280
xor eax, eax
mov byte [ebp - 4], 0xf
xor esi, esi
mov dword [ebp - 0x18], eax
inc esi
cmp dword [ebp - 0x18], esi
je 0x100333f7
xor ebx, ebx
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x100333e8
push ebx
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jne 0x100333d5
mov ebx, 0xd62e65
xor eax, eax
mov dword [ebp - 0x18], eax
push 4
pop eax
cmp dword [ebp - 0x18], eax
jge 0x10033425
push eax
pop ebx
push dword [ebp - 0x18]
lea ecx, [ebp - 0xee4]
call fcn.100182ab
mov dword [eax], 0x2887cf2e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033404
mov ebx, 0xd62e65
lea ecx, [ebp - 0xee4]
mov byte [ebp - 4], 8
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], 0x9f23e525
mov dword [ebp - 0x48], 0xfffffffa
push 4
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x1003346d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe84], 0x8eb98764
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10033455
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x1003348b
push 0x2486
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe78]
cmp eax, 9
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x20]
jle 0x100334c7
xor eax, eax
cmp dword [ebp - 0xe78], eax
je 0x100334c9
mov eax, esi
add eax, 0x5157
lea ecx, [ebp - 0xd0c]
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x48], 0x56974edf
mov dword [ebp - 0x28], eax
push 2
call fcn.10018221
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x4c], 0x57976326
mov dword [ebp - 0x20], 0xf1a0
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10033526
push dword [ebp - 0x24]
lea ecx, [ebp - 0xd0c]
call fcn.100182ab
mov dword [eax], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10033507
xor eax, eax
mov dword [ebp - 0x4c], esi
cmp dword [ebp - 0x4c], eax
jl 0x100335e3
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x1003354f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1003353a
xor eax, eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], esi
jg 0x100335d5
xor ebx, ebx
push dword [ebp - 0x70]
lea ecx, [ebp - 0xd0c]
call fcn.100182ab
mov ecx, dword [ebp - 0x70]
xor edx, edx
cmp dword [eax], ecx
setge dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], 0xffffffee
jmp 0x100335c5
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x1003359b
push 0x181c
push ebx
push 0xf16
push 0x1be0
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x100335c2
push ebx
call edi
push eax
push 0x25fe
push 0x22d4
push 0x1e45
push 0x204f
push ebx
call dword [sym.imp.USER32.dll_TrackPopupMenu]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x24
je 0x1003357d
inc dword [ebp - 0x70]
cmp dword [ebp - 0x70], esi
jle 0x10033559
xor eax, eax
dec dword [ebp - 0x4c]
jns 0x10033532
mov ebx, 0xd62e65
lea ecx, [ebp - 0xd0c]
mov byte [ebp - 4], 8
call fcn.100182a6
or eax, 0xffffffff
lea ecx, [ebp - 0x5f0]
mov dword [ebp - 0x34], eax
push 2
call fcn.10018221
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x3c], 0x579d
mov dword [ebp - 0x48], 0xdcc3592e
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10033643
push 4
pop ebx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x5f0]
call fcn.100182ab
mov dword [eax], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10033625
mov ebx, 0xd62e65
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x5f0]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
push esi
call fcn.100182ab
or ecx, 0xffffffff
xor edx, edx
mov dword [eax], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, 0x270e
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x34]
test ecx, ecx
je 0x10033773
mov dword [ebp - 0x3c], 0x385d
or eax, 0xffffffff
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jg 0x100336d0
xor ebx, ebx
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x100336c1
push 0x1f2d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jle 0x100336ac
mov ebx, 0xd62e65
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 8
jg 0x10033784
xor ebx, ebx
mov dword [ebp - 0x38], 0xdfe9f48
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x38]
neg edx
mov dword [ebp - 0x3c], 0x509
mov eax, dword [ebp - 0x3c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor edx, edx
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setle dl
sub edx, 0x1abdf11c
neg edx
sbb edx, edx
inc edx
cmp edx, 0xfffffffe
jne 0x10033737
mov byte [ebp - 0x41], bl
cmp byte [ebp - 0x41], bl
je 0x1003375f
push 0x89e
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1003375f
push esi
lea ecx, [ebp - 0x5f0]
call fcn.100182ab
mov ecx, dword [ebp - 0x48]
push esi
mov dword [eax], ecx
lea ecx, [ebp - 0x5f0]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 8
jle 0x100336df
mov ebx, 0xd62e65
jmp 0x10033784
push esi
lea ecx, [ebp - 0x5f0]
call fcn.100182ab
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
lea ecx, [ebp - 0x5f0]
mov byte [ebp - 4], 8
call fcn.100182a6
push 3
lea ecx, [ebp - 0x6a4]
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x12
push 4
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x8a4]
pop eax
push eax
call fcn.10018221
push 2
lea ecx, [ebp - 0xab4]
mov byte [ebp - 4], 0x13
call fcn.10018221
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x48], 0xc105
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10033804
push dword [ebp - 0x34]
lea ecx, [ebp - 0x6a4]
call fcn.100182ab
mov dword [eax], esi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x100337e9
xor eax, eax
push 4
mov dword [ebp - 0x34], eax
pop ecx
cmp dword [ebp - 0x34], ecx
jge 0x10033831
push ecx
pop ebx
push dword [ebp - 0x34]
lea ecx, [ebp - 0x8a4]
call fcn.100182ab
and dword [eax], 0
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x10033811
mov ebx, 0xd62e65
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1003384d
push dword [ebp - 0x34]
lea ecx, [ebp - 0xab4]
call fcn.100182ab
mov dword [eax], 0x1efdb7b2
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x10033836
push esi
lea ecx, [ebp - 0x6a4]
call fcn.100182ab
cmp dword [eax], 0
jne 0x100338c4
push 3
lea ecx, [ebp - 0x8a4]
call fcn.100182ab
mov ecx, ebx
sub ecx, dword [eax]
mov eax, dword [ebp - 0x4c]
sub ecx, eax
jne 0x10033885
xor eax, eax
mov edi, eax
cmp dword [ebp - 0x4c], eax
je 0x10033887
mov edi, esi
push esi
lea ecx, [ebp - 0x6a4]
call fcn.100182ab
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0xab4]
imul esi, dword [eax]
xor eax, eax
inc eax
push eax
call fcn.100182ab
mov ecx, dword [ebp - 0x4c]
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
cmp edx, edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
setne cl
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
xor ebx, ebx
lea ecx, [ebp - 0x6a4]
push ebx
call fcn.100182ab
push 3
lea ecx, [ebp - 0x8a4]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
imul esi, dword [ebp - 0x3c], 0xcd5f
neg esi
sbb esi, esi
neg esi
call fcn.100182ab
xor ecx, ecx
cmp esi, dword [eax]
sete cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0xab4]
call fcn.100182a6
lea ecx, [ebp - 0x8a4]
call fcn.100182a6
lea ecx, [ebp - 0x6a4]
mov byte [ebp - 4], 8
call fcn.100182a6
push 4
mov byte [ebp - 0x41], bl
lea ecx, [ebp - 0x348]
pop ebx
mov dword [ebp - 0x18], 8
push ebx
call fcn.10018221
mov byte [ebp - 4], 0x15
xor esi, esi
mov dword [ebp - 0x14], 0x6c7a88ff
inc esi
mov dword [ebp - 0x3c], esi
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0xb3dfa8e8
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jge 0x10033976
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x68], 0x8ec0ae97
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x10033961
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x1003399c
push dword [ebp - 0x34]
lea ecx, [ebp - 0x348]
call fcn.100182ab
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x1003397e
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100339be
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x360], 0x6f2c0e84
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x100339a5
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100339e0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xf84], 0xe98c5348
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x100339c7
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jge 0x10033a00
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x734], 0xfffffffa
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x100339e8
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x10033bb8
mov dword [ebp - 0x38], 0xea53061e
lea ecx, [ebp - 0xc4c]
mov dword [ebp - 0x3c], 0x1ebf0ddd
or eax, 0xffffffff
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], 0x3e75cb55
mov dword [ebp - 0x4c], 0x79a7b445
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x50], esi
push esi
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x24], eax
jmp 0x10033a62
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc4c]
call fcn.100182ab
mov dword [eax], 0xd85d5fca
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033a4b
inc dword [ebp - 0x3c]
je 0x10033b29
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x348]
mov eax, dword [ebp - 0x4c]
xor ebx, ebx
push ebx
call fcn.100182ab
xor ecx, ecx
push 2
cmp dword [eax], esi
setg cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x348]
call fcn.100182ab
mov edx, dword [ebp - 0x50]
mov esi, eax
mov ecx, dword [ebp - 0x3c]
xor eax, eax
cmp ecx, edx
mov ecx, dword [ebp - 0x48]
push ebx
setg al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x38]
setg dl
sub edx, eax
sub ecx, edx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, dword [esi]
lea ecx, [ebp - 0x348]
setl al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
call fcn.100182ab
mov eax, dword [ebp - 0x50]
xor esi, esi
mov eax, dword [ebp - 0x4c]
inc esi
mov dword [ebp - 0x38], esi
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x38]
add eax, 7
imul eax, eax, 0x946c
cmp eax, ecx
lea ecx, [ebp - 0x348]
setg bl
xor eax, eax
push eax
call fcn.100182ab
mov dword [eax], ebx
mov dword [ebp - 0x360], ebx
neg ebx
mov eax, dword [ebp - 0x68]
cmp ebx, eax
jl 0x10033b29
mov eax, esi
jmp 0x10033b2b
xor eax, eax
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0xc4c]
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x68]
sub esi, dword [ebp - 0x14]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.100182ab
xor ebx, ebx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x18]
setle bl
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x68]
cmp edx, eax
sete cl
xor esi, esi
inc esi
cmp ecx, ebx
jge 0x10033b98
push esi
lea ecx, [ebp - 0x348]
call fcn.100182ab
xor ecx, ecx
cmp dword [eax], ecx
mov eax, ecx
je 0x10033b9a
mov eax, esi
mov dword [ebp - 0xf84], eax
lea ecx, [ebp - 0xc4c]
mov byte [ebp - 4], 0x15
call fcn.100182a6
dec dword [ebp - 0x18]
jns 0x10033a0c
mov eax, dword [ebp - 0x360]
mov eax, dword [ebp - 0x40]
xor eax, eax
cmp dword [ebp - 0x68], eax
je 0x10033bd0
cmp dword [ebp - 0x360], eax
jne 0x10033be7
push eax
lea ecx, [ebp - 0x348]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10033be7
xor eax, eax
mov edx, eax
jmp 0x10033be9
mov edx, esi
mov eax, dword [ebp - 0x68]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x360]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x2973452c
jg 0x10033c0f
cmp dword [ebp - 0xf80], eax
je 0x10033c0f
mov eax, esi
xor ecx, ecx
mov dword [ebp - 0x18], 0x1c18
test eax, eax
setns cl
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x599618de
setge al
xor ecx, ecx
cmp eax, 0xbf6b
mov eax, dword [ebp - 0x734]
setge cl
xor edx, edx
cmp ecx, 0xd933
setge dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle bl
xor ecx, ecx
cmp eax, ebx
setle cl
mov dword [ebp - 0x360], ecx
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], 8
call fcn.100182a6
cmp byte [ebp - 0x41], 0
je 0x10033e45
or ebx, 0xffffffff
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x18], ebx
push esi
call fcn.10018221
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x48], 0x58163090
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033cc3
push dword [ebp - 0x24]
lea ecx, [ebp - 0x6b4]
call fcn.100182ab
mov dword [eax], 0x9b2cfb63
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033ca5
xor eax, eax
push 4
mov dword [ebp - 0x18], eax
pop ecx
jmp 0x10033e10
mov dword [ebp - 0x40], 0x10b999fb
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jl 0x10033e0d
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x838]
mov dword [ebp - 0x3c], 0xead9bacc
push esi
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033d29
push dword [ebp - 0x24]
lea ecx, [ebp - 0x838]
call fcn.100182ab
mov dword [eax], 0xfffaa232
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033d0b
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x10033ddf
mov dword [ebp - 0x50], 0xfffffff8
lea ecx, [ebp - 0x6b4]
push dword [ebp - 0x40]
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
inc eax
je 0x10033d5b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x6b4]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x40]
call fcn.100182ab
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x838]
mov eax, dword [ebp - 0x40]
xor ebx, ebx
mov esi, dword [ebp - 0x18]
push ebx
call fcn.100182ab
push dword [ebp - 0x40]
lea ecx, [ebp - 0x6b4]
mov dword [eax], esi
call fcn.100182ab
mov eax, dword [eax]
imul eax, esi
test eax, eax
je 0x10033da5
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x838]
push ebx
call fcn.100182ab
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x48], eax
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10033d35
xor esi, esi
inc esi
or ebx, 0xffffffff
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033df0
push 0x49
call dword [sym.imp.USER32.dll_MessageBeep]
lea ecx, [ebp - 0x838]
mov byte [ebp - 4], 0x17
call fcn.100182a6
dec dword [ebp - 0x40]
jns 0x10033ce7
push 4
xor eax, eax
pop ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x10033cce
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033e30
push 0x939
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x6b4]
mov byte [ebp - 4], 8
call fcn.100182a6
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x6c4]
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x10033eb5
mov eax, dword [ebp - 0x54]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x6c4]
mov eax, dword [ebp - 0x6bc]
cmp eax, 0x7e434392
setge cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x6bc]
mov eax, dword [ebp - 0x3c]
add ecx, eax
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x6c4], ecx
xor eax, eax
cmp ecx, 0x5206
setle al
xor ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
sbb edx, edx
neg edx
cmp edx, eax
setl cl
cmp dword [ebp - 0x2c], ecx
jge 0x10033eb3
mov eax, esi
jmp 0x10033eb5
xor eax, eax
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0xefc]
add esi, eax
neg esi
neg esi
sbb esi, esi
xor ebx, ebx
inc ebx
inc esi
push ebx
call fcn.100182ab
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x30]
cmp esi, eax
sete cl
xor eax, eax
cmp ecx, 0x1d534a2c
setg al
cmp eax, 9
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
setg dl
cmp edx, dword [ebp - 0x2c]
jl 0x1003406a
mov dword [ebp - 0x30], 0xf0ea75c9
or ecx, 0xffffffff
mov dword [ebp - 0x3c], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], eax
jmp 0x10033fb8
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0xc
cmp dword [ebp - 0x24], 0xfffffff3
jge 0x10033f97
mov dword [ebp - 0x3c], 0x21f1eb32
mov dword [ebp - 0x4c], 0xfffffffa
imul eax, dword [ebp - 0x4c], 0x70ab
cmp eax, dword [ebp - 0x30]
jg 0x10033f58
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x30], eax
je 0x10033f5a
mov esi, ebx
mov eax, dword [ebp - 0x30]
xor edx, edx
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setne dl
add eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
test esi, esi
setg al
sub ecx, eax
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff3
jl 0x10033f35
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033fb2
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
xor eax, eax
dec dword [ebp - 0x30]
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0x30], 0xffffffef
jle 0x10033f25
mov dword [ebp - 0x28], 8
lea ecx, [ebp - 0xacc]
push 2
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10034004
push dword [ebp - 0x18]
lea ecx, [ebp - 0xacc]
call fcn.100182ab
mov dword [eax], 0x13b91020
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10033fe5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034024
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1003400c
xor eax, eax
mov dword [ebp - 0x84], eax
jmp 0x10034048
push dword [ebp - 0x84]
lea ecx, [ebp - 0xacc]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10034050
inc dword [ebp - 0x84]
cmp dword [ebp - 0x84], ebx
jle 0x1003402c
lea ecx, [ebp - 0xacc]
mov byte [ebp - 4], 8
call fcn.100182a6
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
jmp 0x1003471d
push 3
lea ecx, [ebp - 0xc8]
call fcn.10018221
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xd60]
mov dword [ebp - 0x1c], 0x7df2f4a8
push 3
call fcn.10018221
mov byte [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x28], 0x9e149cff
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100340c4
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
mov dword [eax], 0xff0ea75c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100340a5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100340ec
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd60]
call fcn.100182ab
mov dword [eax], 0x4b2e809b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100340cd
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1003423a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
mov esi, eax
call fcn.100182ab
mov ecx, dword [esi]
push 2
mov dword [eax], ecx
lea ecx, [ebp - 0xc8]
call fcn.100182ab
xor ebx, ebx
cmp dword [eax], ebx
je 0x100341d8
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
cmp dword [eax], ebx
je 0x10034152
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0xd60]
setg bl
call fcn.100182ab
mov dword [eax], ebx
test ebx, ebx
jne 0x10034194
push 2
lea ecx, [ebp - 0xc8]
call fcn.100182ab
cmp dword [eax], ebx
jne 0x10034194
xor eax, eax
mov esi, eax
jmp 0x10034199
xor eax, eax
lea esi, [eax + 1]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
xor ecx, ecx
cmp esi, dword [eax]
setg cl
imul eax, ecx, 0x3359
test eax, eax
je 0x100341d8
push 2
lea ecx, [ebp - 0xc8]
call fcn.100182ab
cmp dword [eax], 0
je 0x100341d8
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc8]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0xc8]
inc eax
push eax
call fcn.100182ab
push 2
lea ecx, [ebp - 0xc8]
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0xc8]
mov eax, dword [eax]
inc eax
cmp eax, 0x4eb0
setg bl
xor eax, eax
push eax
call fcn.100182ab
push 0
lea ecx, [ebp - 0xc8]
cmp dword [eax], ebx
pop ebx
push dword [ebp - 0x1c]
setl bl
call fcn.100182ab
sub ebx, dword [eax]
mov dword [ebp - 0x28], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100340f9
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0xd60]
call fcn.100182a6
lea ecx, [ebp - 0xc8]
mov byte [ebp - 4], 8
call fcn.100182a6
mov dword [ebp - 0x18], 0xb029
or esi, 0xffffffff
mov dword [ebp - 0x4c], 0xa969ac54
xor eax, eax
mov dword [ebp - 0x28], 0x58018d9d
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x3c], 0x9ab8
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10034297
push 6
pop ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa44], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10034284
mov eax, dword [ebp - 0x18]
mov ecx, 0xfff8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
dec eax
neg eax
sbb eax, eax
neg eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x4c]
jg 0x100342cd
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x100342cd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
mov dword [ebp - 0x3c], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xa40]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setle dl
xor eax, eax
mov dword [ebp - 0xa44], edx
mov byte [ebp - 0xd], al
mov dword [ebp - 0x40], 0xc64a6847
mov dword [ebp - 0x24], 0xbe1552b9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1003433b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7b4], 0x738f5859
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10034323
xor eax, eax
mov dword [ebp - 0x40], 5
cmp dword [ebp - 0x40], eax
jne 0x10034478
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x50], 0xbc9b780f
mov dword [ebp - 0x28], 0xd976d993
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 9
cmp dword [ebp - 0x30], 0xffffffe5
jg 0x1003446f
mov dword [ebp - 0x3c], 5
lea ecx, [ebp - 0x910]
push 3
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x24], eax
jmp 0x100343b1
push dword [ebp - 0x24]
call fcn.100182ab
mov dword [eax], 0xb2f14481
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
lea ecx, [ebp - 0x910]
jl 0x100343a0
mov eax, dword [ebp - 0x40]
push 2
call fcn.100182ab
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x910]
mov dword [ebp - 0x3c], eax
push ebx
call fcn.100182ab
mov ecx, dword [ebp - 0x40]
mov edi, eax
xor eax, eax
cmp ecx, 0x39e2
setl al
xor edx, edx
imul eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setl dl
sub esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
cmp esi, eax
setne cl
xor eax, eax
sub ecx, dword [ebp - 0x40]
cmp ecx, dword [edi]
jg 0x1003441b
mov ecx, ebx
cmp dword [ebp - 0x30], eax
jne 0x1003441d
mov ecx, eax
mov dword [ebp - 0x7b4], ecx
mov eax, dword [ebp - 0x30]
sub eax, ecx
jne 0x1003442d
mov eax, dword [ebp - 0x40]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x1003444e
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
lea ecx, [ebp - 0x910]
mov byte [ebp - 4], 8
call fcn.100182a6
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffe5
jle 0x10034381
xor eax, eax
or esi, 0xffffffff
dec dword [ebp - 0x40]
je 0x1003434b
mov dword [ebp - 0x24], eax
jmp 0x100344a6
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x100344a3
push 0xa17
push 0x1000
push 0x2a7
push 0xc3d
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
jne 0x1003447d
cmp byte [ebp - 0xd], 0
je 0x1003471d
push ebx
lea ecx, [ebp - 0x28c]
call fcn.10018221
xor eax, eax
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x100344ed
push dword [ebp - 0x34]
lea ecx, [ebp - 0x28c]
call fcn.100182ab
mov dword [eax], esi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x100344d3
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1003450f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x330], 0x39d6b9c2
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x100344f6
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x1003452f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x6b8], 0x268d9a6
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x10034517
xor eax, eax
push eax
lea ecx, [ebp - 0x28c]
call fcn.100182ab
xor ebx, ebx
mov dword [eax], 0xffffffe6
jmp 0x100345ae
mov dword [ebp - 0x3c], ebx
xor ecx, ecx
mov dword [ebp - 0x28], 0x7257ea0d
mov dword [ebp - 0x48], 0xca6c8490
mov dword [ebp - 0x3c], 0xfffffffe
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
cmp eax, esi
push ebx
setne cl
xor eax, eax
cmp ecx, 0xc213
lea ecx, [ebp - 0x28c]
setg al
cmp eax, 0xfffa
sbb eax, eax
neg eax
mov dword [ebp - 0x330], eax
call fcn.100182ab
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x28c]
push ebx
mov dword [ebp - 0x3c], 0x12a83a0f
call fcn.100182ab
dec dword [eax]
push ebx
lea ecx, [ebp - 0x28c]
call fcn.100182ab
cmp dword [eax], 0xffffffe4
jne 0x10034545
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100346fb
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x3c], 0xf81a770a
mov dword [ebp - 0x3c], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100345f5
push eax
push 0x878
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100346f8
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], 0x3d58e56a
mov dword [ebp - 0x20], eax
jmp 0x10034631
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003462e
push 0x11cd
push eax
push 0x12da
push eax
call dword [sym.imp.USER32.dll_LoadStringA]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x10034611
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x28c]
xor esi, esi
push esi
call fcn.100182ab
mov eax, dword [ebp - 0x1c]
xor edx, edx
push esi
mov eax, dword [ebp + eax*4 - 0x330]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x18]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x28c]
setne dl
xor ebx, ebx
cmp edx, eax
setge bl
call fcn.100182ab
xor edx, edx
push esi
mov dword [eax], ebx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
imul eax, ebx
sub ecx, eax
mov eax, dword [ebp - 0x18]
sub ecx, dword [ebp + eax*4 - 0x330]
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x330]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
add eax, edx
xor edx, edx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setl dl
inc edx
mov dword [ebp - 0x6b8], edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x18]
add ecx, edx
mov dword [ebp + eax*4 - 0x330], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
pop eax
jle 0x10034602
xor eax, eax
or esi, 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x100345c9
lea ecx, [ebp - 0x28c]
mov byte [ebp - 4], 8
call fcn.100182a6
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
dec dword [ebp - 0x54]
mov ebx, 0xd62e65
jns 0x10033374
push 3
pop esi
or ebx, 0xffffffff
lea ecx, [ebp - 0xefc]
mov dword [ebp - 4], ebx
call fcn.100182a6
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], 0x8b0d193e
mov dword [ebp - 0x28], 0x67d50f82
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1003476a
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x20], 0xfffffffb
mov ecx, 0xef6e229e
cmp dword [ebp - 0x20], 0xfffffff8
jge 0x100347cc
mov dword [ebp - 0x3c], 0x1e124dc4
mov dword [ebp - 0x2c], 0x6310
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setl dl
xor ebx, ebx
cmp edx, eax
setg bl
xor ecx, ecx
imul ebx, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x20], 0x49f8
cmp eax, ebx
setle cl
mov dword [ebp - 0x48], ecx
mov ecx, 0xef6e229e
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jl 0x1003477c
or ebx, 0xffffffff
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], 8
setns cl
mov dword [ebp - 0x20], 0x213072c0
xor edx, edx
mov dword [ebp - 0x38], 0x9eb818f8
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x2377d64
setne al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], eax
jge 0x1003495d
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1003495f
push 0xfffffffffffffffd
mov dword [ebp - 0x14], 9
pop ecx
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x1c], 0xc
jmp 0x100348a7
mov dword [ebp - 0x4c], 0xecaa7054
xor ebx, ebx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setle bl
add eax, 7
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
push 0
setne cl
or ebx, 0xffffffff
mov dword [ebp - 0x54], ecx
mov ecx, ebx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov edx, dword [ebp - 0x14]
sub edx, ecx
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x25452e2c
setg al
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x1c]
pop eax
cmp dword [ebp - 0x1c], 0xffffffe2
jle 0x1003484b
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x10034951
push 2
lea ecx, [ebp - 0x6d4]
call fcn.10018221
xor eax, eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x24], eax
jmp 0x100348e5
push dword [ebp - 0x24]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
lea ecx, [ebp - 0x6d4]
jl 0x100348d4
push edi
call fcn.100182ab
cmp dword [eax], 0
jge 0x10034922
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x6d4]
push edi
call fcn.100182ab
xor eax, eax
cmp dword [ebp - 0x14], ebx
je 0x10034919
cmp dword [ebp - 0x54], eax
je 0x10034919
mov eax, edi
cmp eax, dword [ebp - 0x14]
jg 0x10034922
mov esi, edi
jmp 0x10034926
xor eax, eax
mov esi, eax
push edi
lea ecx, [ebp - 0x6d4]
call fcn.100182ab
lea ecx, [ebp - 0x6d4]
sub esi, dword [eax]
mov dword [ebp - 0x54], esi
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], ebx
call fcn.100182a6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x1d
jl 0x100348b9
jmp 0x1003498c
xor eax, eax
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x24], eax
jmp 0x10034978
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xfe8], 0x33d7bf5f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10034967
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xfe4], eax
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x128]
call fcn.10018221
lea eax, [ebp - 0x1098]
mov dword [ebp - 4], 0x20
movdqa xmm0, xmmword [0x10007d80]
lea ecx, [ebp - 0x1350]
push eax
lea eax, [ebp - 0x10a8]
mov dword [ebp - 0x34], edi
push eax
movdqu xmmword [ebp - 0x10a8], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x16d]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf14]
push dword [esi]
call fcn.10018280
mov byte [ebp - 4], 0x21
xor eax, eax
mov dword [ebp - 0x2c], 0xa772
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10034a25
push dword [ebp - 0x24]
lea ecx, [ebp - 0x128]
call fcn.100182ab
mov dword [eax], 0x1928
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10034a07
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], edi
jg 0x10034c9d
push edi
lea ecx, [ebp - 0x434]
call fcn.10018221
push ebx
lea ecx, [ebp - 0x850]
mov byte [ebp - 4], 0x22
call fcn.10018221
mov byte [ebp - 4], 0x23
xor eax, eax
mov dword [ebp - 0x28], 0xc1d9
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10034a7f
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x434]
call fcn.100182ab
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10034a62
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034aa5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x850]
call fcn.100182ab
mov dword [eax], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10034a87
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10034abb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa04], 0x4b13b106
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10034aaa
push dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x128]
push eax
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x434]
push eax
call fcn.100182ab
push edi
lea ecx, [ebp - 0x128]
mov esi, eax
call fcn.100182ab
push dword [ebp - 0x34]
mov ecx, dword [eax]
mov dword [esi], ecx
lea ecx, [ebp - 0x128]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x434]
push eax
call fcn.100182ab
push dword [ebp - 0x34]
or ecx, 0xffffffff
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x128]
setl bl
call fcn.100182ab
lea ecx, [ebp - 0x850]
mov esi, dword [eax]
xor eax, eax
push eax
imul esi, ebx
call fcn.100182ab
mov edx, dword [ebp - 0x34]
mov edi, eax
mov ecx, dword [ebp - 0x34]
xor eax, eax
imul edx, esi
cmp edx, ecx
setle al
xor ecx, ecx
cmp eax, 0x718b
mov eax, dword [ebp - 0x28]
setl cl
xor eax, eax
mov dword [edi], ecx
lea ecx, [ebp - 0x850]
push eax
call fcn.100182ab
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0xf14]
mov esi, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.100182ab
lea ecx, [ebp - 0x434]
mov dword [eax], esi
xor eax, eax
push eax
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x434]
cmp esi, dword [eax]
setle bl
xor eax, eax
push eax
call fcn.100182ab
xor ecx, ecx
cmp ebx, dword [eax]
setge cl
xor ebx, ebx
cmp ecx, 0xcecb
lea ecx, [ebp - 0x434]
setge bl
xor eax, eax
push eax
call fcn.100182ab
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp ebx, ecx
setg dl
xor ebx, ebx
sub edx, dword [ebp - 0x34]
cmp edx, dword [eax]
mov eax, dword [ebp - 0xa00]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
cmp ecx, 0xd707
jle 0x10034c1e
push dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x128]
call fcn.100182ab
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x128]
mov eax, dword [ebp - 0xa00]
push dword [ebp - 0x34]
setl dl
xor ebx, ebx
cmp edx, eax
setle bl
call fcn.100182ab
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x48]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x850]
call fcn.100182a6
lea ecx, [ebp - 0x434]
mov byte [ebp - 4], 0x21
call fcn.100182a6
inc dword [ebp - 0x34]
xor edi, edi
inc edi
push 2
pop ebx
cmp dword [ebp - 0x34], edi
jle 0x10034a31
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034cb7
push 0x2632
push 0x373
push eax
call dword [sym.imp.USER32.dll_DeleteMenu]
lea ecx, [ebp - 0xf14]
call fcn.100182a6
or ebx, 0xffffffff
lea ecx, [ebp - 0x128]
mov dword [ebp - 4], ebx
call fcn.100182a6
push edi
lea ecx, [ebp - 0x1c4]
call fcn.10018221
mov dword [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x30], 0x52509e71
mov dword [ebp - 0x20], 0xa97f51ef
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10034d22
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1c4]
call fcn.100182ab
mov dword [eax], 0x91a049fe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10034d04
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x10034f10
mov dword [ebp - 0x38], 0x18d9dce
mov dword [ebp - 0x4c], 0xb3e713e1
mov dword [ebp - 0x18], 0xedf0ebf9
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x28], 0xf83943c
cmp dword [ebp - 0x20], eax
je 0x10034d5d
mov esi, edi
cmp dword [ebp - 0x38], eax
jne 0x10034d5f
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c4]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x1c4]
push eax
call fcn.100182ab
mov dword [ebp - 0x38], 0xd870a326
xor ecx, ecx
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp esi, eax
setne cl
mov dword [ebp - 0x14], ecx
lea ecx, [ebp - 0x1c4]
mov eax, dword [ebp - 0x14]
push dword [ebp - 0x1c]
call fcn.100182ab
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x1c4]
push dword [ebp - 0x1c]
call fcn.100182ab
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0x3b9c309a
setne al
imul eax, eax, 0xb619
test eax, eax
je 0x10034e35
mov dword [ebp - 0x2c], 0x64e785c2
xor eax, eax
mov dword [ebp - 0x28], 0xbd1a6f32
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x10034f01
mov dword [ebp - 0x48], 0xfebdab6a
mov eax, dword [ebp - 0x18]
push 4
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x38]
inc dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x18], eax
jle 0x10034df4
jmp 0x10034eff
mov dword [ebp - 0x38], 0x97fb
mov dword [ebp - 0x2c], 0x1ca8fd5f
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
cmp ebx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xc34309e9
setne cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
cmp eax, edi
setle cl
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x1c4]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor eax, eax
push eax
call fcn.100182ab
mov ecx, dword [ebp - 0x38]
xor edx, edx
cmp ecx, 0xc971
setl dl
cmp edx, 0xc9934b93
sbb ecx, ecx
neg ecx
sub ecx, dword [eax]
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x1c4]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
push dword [ebp - 0x1c]
call fcn.100182ab
mov ecx, dword [ebp - 0x30]
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x1c4]
setg dl
xor eax, eax
inc edx
cmp edx, 0x567d
setle al
mov dword [ebp - 0x28], eax
xor eax, eax
push eax
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c4]
mov esi, eax
call fcn.100182ab
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
push 0
pop eax
jle 0x10034d2e
mov dword [ebp - 0x1c], eax
jmp 0x10034f61
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x10034f4c
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034f2f
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034f47
push 0xc
push 0x1a94
call dword [sym.imp.KERNEL32.dll_Beep]
xor eax, eax
dec dword [ebp - 0x20]
jns 0x10034f1d
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034f5e
push eax
call dword [sym.imp.USER32.dll_DestroyMenu]
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10034f15
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 4], ebx
call fcn.100182a6
mov dword [ebp - 0x20], edi
xor eax, eax
mov dword [ebp - 0x2c], 0x8b0d193e
mov dword [ebp - 0x28], 0x67d50f82
push 3
mov dword [ebp - 0x48], ebx
pop esi
mov dword [ebp - 0x48], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034f9f
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x20], 0xfffffffb
jmp 0x10034fef
mov dword [ebp - 0x3c], 0x1e124dc4
mov ecx, 0xef6e229e
mov dword [ebp - 0x2c], 0x6310
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setl dl
xor ebx, ebx
cmp edx, eax
setg bl
xor ecx, ecx
imul ebx, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x20], 0x49f8
cmp eax, ebx
setle cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jl 0x10034fa8
push esi
lea ecx, [ebp - 0xb0]
call fcn.10018221
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0xae4]
mov dword [ebp - 0x1c], 0x7df2f4a8
push esi
call fcn.10018221
mov byte [ebp - 4], 0x26
xor eax, eax
mov dword [ebp - 0x28], 0x9e149cff
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003504e
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
mov dword [eax], 0xff0ea75c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10035030
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10035074
push dword [ebp - 0x18]
lea ecx, [ebp - 0xae4]
call fcn.100182ab
mov dword [eax], 0x4b2e809b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10035056
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x100351bc
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
mov esi, eax
call fcn.100182ab
mov ecx, dword [esi]
push 2
mov dword [eax], ecx
lea ecx, [ebp - 0xb0]
call fcn.100182ab
xor ebx, ebx
cmp dword [eax], ebx
je 0x1003515d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
cmp dword [eax], ebx
je 0x100350da
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
mov ecx, dword [ebp - 0x1c]
xor ebx, ebx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0xae4]
setg bl
call fcn.100182ab
mov dword [eax], ebx
test ebx, ebx
jne 0x1003511c
push 2
lea ecx, [ebp - 0xb0]
call fcn.100182ab
cmp dword [eax], ebx
jne 0x1003511c
xor eax, eax
mov esi, eax
jmp 0x1003511e
mov esi, edi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
xor ecx, ecx
cmp esi, dword [eax]
setg cl
imul eax, ecx, 0x3359
test eax, eax
je 0x1003515d
push 2
lea ecx, [ebp - 0xb0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1003515d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb0]
call fcn.100182ab
push edi
lea ecx, [ebp - 0xb0]
call fcn.100182ab
push 2
lea ecx, [ebp - 0xb0]
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0xb0]
mov eax, dword [eax]
inc eax
cmp eax, 0x4eb0
setg bl
xor eax, eax
push eax
call fcn.100182ab
push 0
lea ecx, [ebp - 0xb0]
cmp dword [eax], ebx
pop ebx
push dword [ebp - 0x1c]
setl bl
call fcn.100182ab
sub ebx, dword [eax]
mov dword [ebp - 0x28], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x10035081
push 3
pop esi
lea ecx, [ebp - 0xae4]
call fcn.100182a6
or ebx, 0xffffffff
lea ecx, [ebp - 0xb0]
mov dword [ebp - 4], ebx
call fcn.100182a6
mov dword [ebp - 0x20], edi
xor eax, eax
mov dword [ebp - 0x2c], 0x8b0d193e
mov dword [ebp - 0x28], 0x67d50f82
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035200
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x20], 0xfffffffb
jmp 0x10035250
mov dword [ebp - 0x3c], 0x1e124dc4
mov ecx, 0xef6e229e
mov dword [ebp - 0x2c], 0x6310
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setl dl
xor ebx, ebx
cmp edx, eax
setg bl
xor ecx, ecx
imul ebx, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x20], 0x49f8
cmp eax, ebx
setle cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jl 0x10035209
push 4
pop eax
mov dword [ebp - 0x28], eax
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1003527f
push eax
push 0x1bed
push eax
push 0x11b0
push 0x26d0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100352a0
push eax
push 0x2577
push eax
push eax
push 0x14f6
push 0x2595
call dword [sym.imp.USER32.dll_ToAsciiEx]
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x134]
call fcn.10018221
lea eax, [ebp - 0x11f8]
mov dword [ebp - 4], 0x27
movdqa xmm0, xmmword [0x10007d80]
lea ecx, [ebp - 0x1360]
push eax
lea eax, [ebp - 0x1208]
mov dword [ebp - 0x34], edi
push eax
movdqu xmmword [ebp - 0x1208], xmm0
call fcn.100182ba
lea ecx, [ebp - 0x16f]
mov esi, eax
call fcn.10008e33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf98]
push dword [esi]
call fcn.10018280
mov byte [ebp - 4], 0x28
xor eax, eax
mov dword [ebp - 0x2c], 0xa772
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10035339
push dword [ebp - 0x24]
lea ecx, [ebp - 0x134]
call fcn.100182ab
mov dword [eax], 0x1928
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1003531b
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], edi
jg 0x100355b1
push edi
lea ecx, [ebp - 0x44c]
call fcn.10018221
push ebx
lea ecx, [ebp - 0x9d0]
mov byte [ebp - 4], 0x29
call fcn.10018221
mov byte [ebp - 4], 0x2a
xor eax, eax
mov dword [ebp - 0x28], 0xc1d9
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10035393
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x44c]
call fcn.100182ab
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10035376
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100353b9
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9d0]
call fcn.100182ab
mov dword [eax], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003539b
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100353cf
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa2c], 0x4b13b106
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100353be
push dword [ebp - 0x34]
lea ecx, [ebp - 0x134]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x134]
push eax
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x134]
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x134]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x44c]
push eax
call fcn.100182ab
push edi
lea ecx, [ebp - 0x134]
mov esi, eax
call fcn.100182ab
push dword [ebp - 0x34]
mov ecx, dword [eax]
mov dword [esi], ecx
lea ecx, [ebp - 0x134]
call fcn.100182ab
xor eax, eax
lea ecx, [ebp - 0x44c]
push eax
call fcn.100182ab
push dword [ebp - 0x34]
or ecx, 0xffffffff
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x134]
setl bl
call fcn.100182ab
lea ecx, [ebp - 0x9d0]
mov esi, dword [eax]
xor eax, eax
push eax
imul esi, ebx
call fcn.100182ab
mov edx, dword [ebp - 0x34]
mov edi, eax
mov ecx, dword [ebp - 0x34]
xor eax, eax
imul edx, esi
cmp edx, ecx
setle al
xor ecx, ecx
cmp eax, 0x718b
mov eax, dword [ebp - 0x28]
setl cl
xor eax, eax
mov dword [edi], ecx
lea ecx, [ebp - 0x9d0]
push eax
call fcn.100182ab
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0xf98]
mov esi, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.100182ab
lea ecx, [ebp - 0x44c]
mov dword [eax], esi
xor eax, eax
push eax
call fcn.100182ab
xor ebx, ebx
lea ecx, [ebp - 0x44c]
cmp esi, dword [eax]
setle bl
xor eax, eax
push eax
call fcn.100182ab
xor ecx, ecx
cmp ebx, dword [eax]
setge cl
xor ebx, ebx
cmp ecx, 0xcecb
lea ecx, [ebp - 0x44c]
setge bl
xor eax, eax
push eax
call fcn.100182ab
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp ebx, ecx
setg dl
xor ebx, ebx
sub edx, dword [ebp - 0x34]
cmp edx, dword [eax]
mov eax, dword [ebp - 0xa28]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
cmp ecx, 0xd707
jle 0x10035532
push dword [ebp - 0x34]
lea ecx, [ebp - 0x134]
call fcn.100182ab
push dword [ebp - 0x34]
lea ecx, [ebp - 0x134]
call fcn.100182ab
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x134]
mov eax, dword [ebp - 0xa28]
push dword [ebp - 0x34]
setl dl
xor ebx, ebx
cmp edx, eax
setle bl
call fcn.100182ab
xor ecx, ecx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x48]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x9d0]
call fcn.100182a6
lea ecx, [ebp - 0x44c]
mov byte [ebp - 4], 0x28
call fcn.100182a6
inc dword [ebp - 0x34]
xor edi, edi
inc edi
push 2
pop ebx
cmp dword [ebp - 0x34], edi
jle 0x10035345
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100355cb
push 0x2632
push 0x373
push eax
call dword [sym.imp.USER32.dll_DeleteMenu]
lea ecx, [ebp - 0xf98]
call fcn.100182a6
or esi, 0xffffffff
lea ecx, [ebp - 0x134]
mov dword [ebp - 4], esi
call fcn.100182a6
push ebx
lea ecx, [ebp - 0xf2c]
call fcn.10018221
mov dword [ebp - 4], 0x2b
xor eax, eax
mov dword [ebp - 0x24], 0x490c4d8e
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10035629
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf2c]
call fcn.100182ab
mov dword [eax], 0xd3df
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1003560b
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10035666
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10035663
push 0xf99
push 0x1d9b
push 0x567
push 3
push 0x19dc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1003562e
lea ecx, [ebp - 0xf2c]
mov dword [ebp - 4], esi
call fcn.100182a6
push ebx
lea ecx, [ebp - 0x464]
call fcn.10018221
mov dword [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], eax
push 0xfffffffffffffffd
mov dword [ebp - 0x28], 0xa44198d7
pop ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100356c7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x464]
call fcn.100182ab
mov dword [eax], 0xa8c6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100356a9
xor eax, eax
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], eax
jl 0x1003570c
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100356f6
push 0x2359
push 0x38c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x464]
call fcn.100182ab
dec dword [ebp - 0x30]
push 0
pop eax
jns 0x100356cf
push edi
lea ecx, [ebp - 0x464]
call fcn.100182ab
mov esi, dword [ebp - 0x30]
lea ecx, [ebp - 0x464]
push edi
sub esi, dword [eax]
mov eax, dword [ebp - 0x38]
neg esi
mov dword [ebp - 0x38], eax
sbb esi, esi
neg esi
call fcn.100182ab
xor ebx, ebx
mov ecx, dword [eax]
mov eax, dword [ebp - 0x38]
add ecx, esi
cmp eax, ecx
lea ecx, [ebp - 0x464]
setle bl
add ebx, dword [ebp - 0x30]
neg ebx
sbb ebx, ebx
xor eax, eax
push eax
neg ebx
call fcn.100182ab
xor ecx, ecx
cmp ebx, 0x6370
setge cl
cmp ecx, dword [eax]
jl 0x10035772
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x28], eax
je 0x10035774
mov esi, edi
push edi
lea ecx, [ebp - 0x464]
call fcn.100182ab
xor ecx, ecx
push 3
pop ebx
cmp dword [eax], esi
sete cl
or esi, 0xffffffff
sub ecx, ebx
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x464]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], esi
call fcn.100182a6
push edi
lea ecx, [ebp - 0x548]
call fcn.10018221
mov dword [ebp - 4], 0x2d
xor eax, eax
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x2c], 0xd26ec17e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x100357ee
push dword [ebp - 0x18]
lea ecx, [ebp - 0x548]
call fcn.100182ab
push 0xfffffffffffffffd
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100357d1
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1003580e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12bc], 0xb054dbbe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100357f6
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jg 0x1003589e
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x548]
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x40]
call fcn.100182ab
mov ecx, dword [ebp - 0x2c]
xor edx, edx
push dword [ebp - 0x40]
cmp ecx, esi
mov ecx, 0xffff
setg dl
xor ebx, ebx
add edx, ecx
lea ecx, [ebp - 0x548]
cmp dword [eax], edx
setg bl
call fcn.100182ab
lea ecx, [ebp - 0x548]
mov esi, dword [eax]
xor eax, eax
push eax
imul esi, ebx
call fcn.100182ab
mov dword [eax], esi
test esi, esi
je 0x10035884
push dword [ebp - 0x40]
lea ecx, [ebp - 0x548]
call fcn.100182ab
cmp dword [eax], 0
je 0x10035884
mov eax, edi
jmp 0x10035886
xor eax, eax
mov dword [ebp - 0x12b8], eax
xor eax, eax
inc dword [ebp - 0x40]
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x40], eax
jle 0x1003581a
push 3
pop ebx
or esi, esi
lea ecx, [ebp - 0x548]
mov dword [ebp - 4], esi
call fcn.100182a6
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x20], 0x99841b3c
mov dword [ebp - 0x3c], 0x9d58
mov dword [ebp - 0x20], 0x13
jmp 0x1003594f
mov dword [ebp - 0x30], 0x102d149f
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], edi
jl 0x1003594c
mov dword [ebp - 0x2c], 0x829ed890
cmp dword [ebp - 0x30], eax
je 0x100358f2
cmp dword [ebp - 0x2c], eax
jne 0x100358fc
cmp dword [ebp - 0x2c], eax
jne 0x100358fc
cmp dword [ebp - 0x20], eax
je 0x100358fe
mov eax, edi
imul ecx, eax, 0x5a51
xor edx, edx
mov eax, dword [ebp - 0x30]
push 0
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setl dl
xor ecx, ecx
sub eax, edx
cmp eax, 0x6758e356
setge cl
cmp ecx, edi
sbb ecx, ecx
xor eax, eax
neg ecx
add ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x3c]
cmp ecx, 0x9d70
mov ecx, 0xd635290c
setle al
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x30]
pop eax
cmp dword [ebp - 0x30], edi
jge 0x100358e1
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x10
jge 0x100358cb
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003596b
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
xor eax, eax
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x28], 0x6318
mov dword [ebp - 0x28], 0xda439beb
mov dword [ebp - 0x28], 5
mov dword [ebp - 0x28], 9
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0x921ded68
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x28], 0xe4d9edbd
mov dword [ebp - 0x28], 0x7e4a9061
mov dword [ebp - 0x2c], 0xc7c44d99
mov dword [ebp - 0x24], eax
jmp 0x100359cd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x14d8], 0xfffffffb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100359bc
dec dword [ebp - 0x2c]
lea ecx, [ebp - 0x6e4]
mov dword [ebp - 0x14], 0x213072c0
push ebx
call fcn.10018221
push 4
pop esi
xor eax, eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x868]
push esi
call fcn.10018221
push 2
lea ecx, [ebp - 0xc64]
mov byte [ebp - 4], 0x2f
call fcn.10018221
mov byte [ebp - 4], 0x30
xor eax, eax
mov dword [ebp - 0x28], 0xc105
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10035a4d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x6e4]
call fcn.100182ab
mov dword [eax], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10035a33
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10035a70
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x868]
call fcn.100182ab
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10035a55
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10035a8c
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc64]
call fcn.100182ab
mov dword [eax], 0x1efdb7b2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10035a75
push edi
lea ecx, [ebp - 0x6e4]
call fcn.100182ab
cmp dword [eax], 0
jne 0x10035b03