Function at 0x100308b2
Capabilities:
Allocate thread local storage
Check os version
Create directory
Delete file
Enumerate gui resources
Get common file path
Get disk information
Get file attributes
Get file size
Get geographical location
Get thread local storage value
Parse pe header
Query environment variable
Query service status
Read .ini file
Set registry value
Start service
Terminate process

Disassembly:
mov eax, 0x1008386d
call fcn.100820a0
mov eax, 0x1734
call fcn.1007e850
push ebx
push esi
push edi
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0x1024]
push 2
mov byte [ebp - 0x69], dl
call fcn.100169ca
xor eax, eax
mov dword [ebp - 4], eax
push 3
mov dword [ebp - 0x10], 0x399841b3
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 0x14
cmp dword [ebp - 0x10], 0xffffffef
jle 0x10030988
mov dword [ebp - 0x24], 0xf69f7fd1
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
je 0x10030920
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10030979
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x10030979
mov dword [ebp - 0x40], 0x3718
xor ecx, ecx
mov dword [ebp - 0x34], 0x79253a34
mov dword [ebp - 0x40], 0x5a40f2fd
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
test eax, eax
setle cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x10]
setg bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x24], eax
jne 0x10030986
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffef
jg 0x100308ff
xor eax, eax
movdqa xmm0, xmmword [0x10007c70]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x654], ecx
mov dword [ebp - 0x650], ecx
mov dword [ebp - 0x64c], ecx
mov dword [ebp - 0x648], ecx
push 5
mov dword [ebp - 0x18], 0xe19d
pop ecx
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x15ac]
mov dword [ebp - 0x24], eax
push 4
pop eax
mov dword [ebp - 0x28], 0xa14c5530
mov dword [ebp - 0x20], 0xd7276cc
mov dword [ebp - 0xe0c], eax
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0xe04], eax
mov dword [ebp - 0xe00], eax
lea eax, [ebp - 0x12fc]
push eax
lea eax, [ebp - 0x130c]
push eax
movdqu xmmword [ebp - 0x130c], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x24c]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x145c]
push dword [esi]
call fcn.10016a2b
xor eax, eax
xor edx, edx
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
test eax, eax
setns dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setne cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0xfffffff8
mov eax, dword [ebp - 0x28]
setle dl
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setge cl
imul ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x10030a74
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
setle dl
xor ecx, ecx
cmp eax, edx
push 0xffffffffffffffff
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
xor eax, eax
pop edi
cmp dword [ebp - 0x24], eax
je 0x10030ae4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10030ac3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe0c], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x10030aaa
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10030b91
push 0x6d7
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x10030b91
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], 0x67d3d8e1
mov dword [ebp - 0x1c], 0xd757520c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xbde8aff6
mov dword [ebp - 0x54], 0xb883eb99
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x20], 0xd742
cmp dword [ebp - 0x1c], eax
jne 0x10030b28
cmp dword [ebp - 0x18], eax
jne 0x10030b28
mov esi, eax
jmp 0x10030b2d
xor eax, eax
lea esi, [eax + 1]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
neg ecx
push 0xfffffffffffffffc
sbb ecx, ecx
xor eax, eax
inc eax
inc ecx
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
imul eax, dword [ebp - 0x50]
cmp esi, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, 0xfff6
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
pop eax
cmp dword [ebp - 0x20], eax
jle 0x10030b7b
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10030b7b
mov edx, eax
jmp 0x10030b80
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
sete cl
imul ecx, dword [ebp - 0x40]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x145c]
call fcn.10016a51
mov dword [ebp - 0x24], edi
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop edi
cmp dword [ebp - 0x10], edi
jge 0x10030bc7
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1024]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10030bac
xor eax, eax
mov dword [ebp - 0x2c], eax
xor esi, esi
inc esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x1c], 0xffbe6269
mov dword [ebp - 0x34], 0x2097e65f
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x10], eax
jmp 0x10030bf7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7e8], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10030be6
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x10], 0xffff
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
add ecx, eax
mov dword [ebp - 0x7e8], ecx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xfffffffb
jae 0x10030c43
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10030dc8
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
xor eax, eax
jmp 0x10030dc8
mov dword [ebp - 0x40], 9
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xfffffff0
cmp dword [ebp - 0x10], 0x11
jge 0x10030dba
jmp 0x10030c67
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0xe071
lea ecx, [ebp - 0xacc]
mov dword [ebp - 0x44], 0x7dfe98d7
push eax
call fcn.100169ca
xor eax, eax
inc eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x48], eax
jmp 0x10030ca5
push dword [ebp - 0x48]
lea ecx, [ebp - 0xacc]
call fcn.10016a56
mov dword [eax], 7
inc dword [ebp - 0x48]
xor eax, eax
inc eax
cmp dword [ebp - 0x48], eax
jl 0x10030c8e
inc dword [ebp - 0x28]
jne 0x10030d13
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10030d05
mov ecx, dword [ebp - 0x28]
xor edx, edx
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
add eax, 0xd2500577
add eax, ecx
mov dword [ebp - 0x7e8], eax
je 0x10030d05
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
dec eax
jne 0x10030d13
xor ecx, ecx
inc ecx
jmp 0x10030d18
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, 0x905f4d0c
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x26
jg 0x10030d9f
mov dword [ebp - 0x20], 0x215c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7e8], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10030d7b
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10030d5e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x7e4], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], eax
jle 0x10030d7b
xor eax, eax
mov esi, eax
jmp 0x10030d80
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xacc]
call fcn.10016a56
lea ecx, [esi - 1]
push 1
mov dword [eax], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x26
pop ecx
jle 0x10030d2e
xor eax, eax
lea ecx, [ebp - 0xacc]
mov byte [ebp - 4], al
call fcn.10016a51
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x11
jl 0x10030c64
mov eax, dword [ebp - 0x50]
xor esi, esi
mov dword [ebp - 0x7e8], eax
xor eax, eax
inc esi
mov byte [ebp - 0x39], al
lea ecx, [ebp - 0xcac]
mov dword [ebp - 0x1c], 0x6c05baf4
or eax, 0xffffffff
mov dword [ebp - 0x1c], eax
mov eax, 0x7eede0b4
mov dword [ebp - 0xe3c], eax
mov dword [ebp - 0xe38], eax
mov dword [ebp - 0xe34], eax
mov dword [ebp - 0xe30], eax
mov dword [ebp - 0x40], 0xf0a9b27f
push edi
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 2
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10030e32
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcac]
call fcn.10016a56
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10030e17
xor eax, eax
inc dword [ebp - 0x40]
lea ecx, [ebp - 0xcac]
push eax
call fcn.10016a56
lea ecx, [ebp - 0xcac]
mov eax, dword [eax]
mov dword [ebp - 0xe30], eax
xor eax, eax
mov byte [ebp - 4], al
call fcn.10016a51
cmp byte [ebp - 0x39], 0
mov edi, dword [sym.imp.GDI32.dll_StretchBlt]
mov esi, dword [sym.imp.USER32.dll_GetDC]
je 0x10030ea6
push 0xea1
push 0x7dc
push 0x852
push 0x7e8
push 0xa5f
call ebx
push eax
call esi
push eax
push 0x215b
push 0x221c
push 0x1474
push 0x2346
call ebx
push eax
call esi
push eax
call edi
xor eax, eax
mov dword [ebp - 0x10], 0x3f4f46db
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10030ed1
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x169c], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10030ebd
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10030eec
cmp byte [ebp - 0x39], 0
je 0x10030ee9
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
mov byte [ebp - 0x39], al
jle 0x10030ed6
cmp byte [ebp - 0x39], 0
je 0x10030f04
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x648], eax
inc ecx
cmp dword [ebp - 0x648], ecx
jg 0x100312e9
push 3
pop edi
jmp 0x10030f20
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10030f49
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xff0], 0x8eac8b13
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10030f2e
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x10030f72
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10030f6d
push 0x1ad4
push 0x260
push eax
call dword [sym.imp.USER32.dll_InflateRect]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x10030f51
mov dword [ebp - 0x2c], eax
jmp 0x10030f81
mov dword [ebp - 0x1c], 0xfffffff6
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffed
je 0x10030f77
mov dword [ebp - 0x2c], 0xddc85f70
lea ecx, [ebp - 0xae4]
mov dword [ebp - 0x1c], eax
push edi
call fcn.100169ca
push 3
pop ecx
xor eax, eax
mov byte [ebp - 4], cl
xor esi, esi
mov dword [ebp - 0x18], eax
inc esi
cmp dword [ebp - 0x18], esi
jge 0x10030fce
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1000], 9
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10030fb0
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x18], eax
push 3
pop edi
cmp dword [ebp - 0x18], ecx
jge 0x10030ff3
push dword [ebp - 0x18]
lea ecx, [ebp - 0xae4]
call fcn.10016a56
mov dword [eax], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10030fd9
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10031011
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003100e
push 0x1f9e
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor eax, eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe7
je 0x10030ff8
mov dword [ebp - 0x2c], 0x15
cmp dword [ebp - 0x2c], 0xffffffef
jge 0x10031094
jmp 0x10031028
xor eax, eax
mov dword [ebp - 0x1c], 0xc58f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xeff3de03
mov dword [ebp - 0x1c], 0x9214a9ba
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10031062
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15cc], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10031049
xor eax, eax
push eax
lea ecx, [ebp - 0xae4]
call fcn.10016a56
dec dword [eax]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x1003108b
push eax
push 0x171a
push 0x1109
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffef
jl 0x10031026
xor eax, eax
lea ecx, [ebp - 0xae4]
mov byte [ebp - 4], al
call fcn.10016a51
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100310cf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x74], 0xf55e00fe
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100310b4
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x74], eax
jmp 0x1003126e
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], eax
jl 0x1003126b
push 2
lea ecx, [ebp - 0x348]
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10031121
push dword [ebp - 0x18]
lea ecx, [ebp - 0x348]
call fcn.10016a56
mov dword [eax], 0xbe39e3cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031102
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10031143
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x10ac], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003112a
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031155
call ebx
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor eax, eax
lea ecx, [ebp - 0x348]
inc eax
push eax
call fcn.10016a56
xor ecx, ecx
inc ecx
push ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x348]
call fcn.10016a56
cmp dword [eax], 0
jl 0x1003124d
xor ebx, ebx
inc ebx
mov dword [ebp - 0x20], ebx
lea ecx, [ebp - 0x348]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x74]
push ebx
call fcn.10016a56
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x24]
jl 0x1003127c
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1003127e
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x348]
call fcn.10016a56
mov ecx, dword [ebp - 0x10a4]
sub esi, ecx
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x10a8]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x74]
lea ecx, [ebp - 0x348]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
xor eax, eax
inc eax
push eax
call fcn.10016a56
mov edx, dword [ebp - 0x74]
add edx, ebx
sub edx, dword [eax]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x10], ecx
inc ebx
mov eax, dword [ebp - 0x10a8]
lea ecx, [ebp - 0x348]
push ebx
call fcn.10016a56
push ebx
lea ecx, [ebp - 0x348]
dec dword [eax]
call fcn.10016a56
cmp dword [eax], 0
jge 0x10031181
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
lea ecx, [ebp - 0x348]
mov byte [ebp - 4], al
call fcn.10016a51
dec dword [ebp - 0x44]
jns 0x100310e6
xor ecx, ecx
xor eax, eax
inc ecx
inc dword [ebp - 0x74]
cmp dword [ebp - 0x74], ecx
jle 0x100310d7
mov dword [ebp - 0x10], eax
jmp 0x100312c1
xor eax, eax
cmp dword [ebp - 0x74], eax
je 0x100311ba
cmp dword [ebp - 0x20], eax
je 0x100311ba
xor eax, eax
inc eax
mov esi, eax
jmp 0x100311bf
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x100312be
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100312b6
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
xor eax, eax
dec dword [ebp - 0x24]
jns 0x100312a2
xor ecx, ecx
inc ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x1003129a
inc dword [ebp - 0x648]
xor eax, eax
inc eax
push eax
pop ecx
cmp dword [ebp - 0x648], eax
jle 0x10030f1e
mov edi, dword [sym.imp.GDI32.dll_StretchBlt]
mov esi, dword [sym.imp.USER32.dll_GetDC]
or eax, 0xffffffff
lea ecx, [ebp - 0x1024]
mov dword [ebp - 4], eax
call fcn.10016a51
push 2
lea ecx, [ebp - 0xf44]
call fcn.100169ca
push 5
pop eax
mov dword [ebp - 4], eax
xor eax, eax
inc eax
mov dword [ebp - 0x634], eax
mov dword [ebp - 0x630], eax
mov dword [ebp - 0x62c], eax
mov dword [ebp - 0x628], eax
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10031355
push dword [ebp - 0x24]
lea ecx, [ebp - 0xf44]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10031339
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003139b
push 0xea1
push 0x7dc
push 0x852
push 0x7e8
push 0xa5f
call ebx
push eax
call esi
push eax
push 0x215b
push 0x221c
push 0x1474
push 0x2346
call ebx
push eax
call esi
push eax
call edi
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x628], eax
inc ecx
cmp dword [ebp - 0x628], ecx
jg 0x100315d8
jmp 0x100313b8
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x100313de
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x70], 0xf55e00fe
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jl 0x100313c3
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x70], eax
jmp 0x1003156a
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], eax
jl 0x10031561
push 2
lea ecx, [ebp - 0x390]
call fcn.100169ca
push 6
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10031432
push dword [ebp - 0x18]
lea ecx, [ebp - 0x390]
call fcn.10016a56
mov dword [eax], 0xbe39e3cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031413
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10031454
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x10cc], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003143b
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031466
call ebx
push eax
call dword [sym.imp.USER32.dll_IsIconic]
xor ebx, ebx
lea ecx, [ebp - 0x390]
inc ebx
push ebx
call fcn.10016a56
mov dword [eax], ebx
jmp 0x10031527
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x70]
push ebx
call fcn.10016a56
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x10]
jl 0x10031578
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1003157a
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x390]
call fcn.10016a56
mov ecx, dword [ebp - 0x10c4]
sub esi, ecx
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x10c8]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x390]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
xor eax, eax
inc eax
push eax
call fcn.10016a56
mov edx, dword [ebp - 0x70]
add edx, ebx
sub edx, dword [eax]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x24], ecx
inc ebx
mov eax, dword [ebp - 0x10c8]
lea ecx, [ebp - 0x390]
push ebx
call fcn.10016a56
dec dword [eax]
push ebx
lea ecx, [ebp - 0x390]
call fcn.10016a56
lea ecx, [ebp - 0x390]
cmp dword [eax], 0
jge 0x1003147c
push 5
pop eax
mov byte [ebp - 4], al
call fcn.10016a51
dec dword [ebp - 0x44]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
jns 0x100313f5
xor ecx, ecx
xor eax, eax
inc ecx
inc dword [ebp - 0x70]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x70], ecx
jle 0x100313e6
mov dword [ebp - 0x24], eax
jmp 0x100315c1
xor eax, eax
cmp dword [ebp - 0x70], eax
je 0x100314af
cmp dword [ebp - 0x20], eax
je 0x100314af
xor eax, eax
inc eax
mov esi, eax
jmp 0x100314b4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x100315be
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100315b6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x1003159e
xor ecx, ecx
inc ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10031596
inc dword [ebp - 0x628]
cmp dword [ebp - 0x628], ecx
jle 0x100313b2
or ebx, 0xffffffff
lea ecx, [ebp - 0xf44]
mov dword [ebp - 4], ebx
call fcn.10016a51
push 2
lea ecx, [ebp - 0x1088]
call fcn.100169ca
mov dword [ebp - 4], 7
xor eax, eax
inc eax
mov dword [ebp - 0x644], eax
mov dword [ebp - 0x640], eax
mov dword [ebp - 0x63c], eax
mov dword [ebp - 0x638], eax
xor eax, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10031642
push dword [ebp - 0x24]
lea ecx, [ebp - 0x1088]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10031626
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031696
push 0xea1
push 0x7dc
push 0x852
push 0x7e8
push 0xa5f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ebx, dword [sym.imp.USER32.dll_GetDC]
push eax
call ebx
push eax
push 0x215b
push 0x221c
push 0x1474
push 0x2346
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
push eax
call edi
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x638], eax
inc ebx
jmp 0x100318a5
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100316ca
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x78], 0xf55e00fe
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jl 0x100316af
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x78], eax
jmp 0x10031846
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x10031843
push 2
lea ecx, [ebp - 0x360]
call fcn.100169ca
push 8
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003171e
push dword [ebp - 0x18]
lea ecx, [ebp - 0x360]
call fcn.10016a56
mov dword [eax], 0xbe39e3cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100316ff
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10031740
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x10e8], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10031727
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031756
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
push ebx
lea ecx, [ebp - 0x360]
call fcn.10016a56
mov dword [eax], ebx
jmp 0x10031814
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x78]
push ebx
call fcn.10016a56
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
dec eax
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x10]
jl 0x10031854
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10031856
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x360]
call fcn.10016a56
mov ecx, dword [ebp - 0x10e0]
sub esi, ecx
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x10e4]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x78]
lea ecx, [ebp - 0x360]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
xor eax, eax
inc eax
push eax
call fcn.10016a56
mov edx, dword [ebp - 0x78]
add edx, ebx
sub edx, dword [eax]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setge cl
xor ebx, ebx
mov dword [ebp - 0x24], ecx
inc ebx
mov eax, dword [ebp - 0x10e4]
lea ecx, [ebp - 0x360]
push ebx
call fcn.10016a56
dec dword [eax]
push ebx
lea ecx, [ebp - 0x360]
call fcn.10016a56
lea ecx, [ebp - 0x360]
cmp dword [eax], 0
jge 0x10031769
mov byte [ebp - 4], 7
call fcn.10016a51
dec dword [ebp - 0x44]
jns 0x100316e1
xor eax, eax
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], ebx
jle 0x100316d2
mov dword [ebp - 0x24], eax
jmp 0x1003189a
xor eax, eax
cmp dword [ebp - 0x78], eax
je 0x1003179c
cmp dword [ebp - 0x20], eax
je 0x1003179c
xor eax, eax
inc eax
mov esi, eax
jmp 0x100317a1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10031897
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031892
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x1003187a
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10031872
inc dword [ebp - 0x638]
cmp dword [ebp - 0x638], ebx
jle 0x100316a4
or eax, 0xffffffff
lea ecx, [ebp - 0x1088]
mov dword [ebp - 4], eax
call fcn.10016a51
xor eax, eax
lea ecx, [ebp - 0x76c]
mov dword [ebp - 0x38], eax
push ebx
call fcn.100169ca
xor eax, eax
mov dword [ebp - 4], 9
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10031908
push dword [ebp - 0x18]
lea ecx, [ebp - 0x76c]
call fcn.10016a56
mov dword [eax], 0xfffffff8
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100318e4
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003192a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4bc], 0xdd61fb9a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031911
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10031986
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
neg eax
sbb eax, eax
neg eax
dec eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, ebx
setl al
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
test eax, eax
jg 0x10031986
xor eax, eax
mov esi, eax
jmp 0x1003198b
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0x76c]
call fcn.10016a56
lea ecx, [ebp - 0x76c]
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor eax, eax
push eax
mov dword [ebp - 0x4bc], eax
call fcn.10016a56
cmp dword [eax], 0
je 0x100319ca
xor eax, eax
cmp dword [ebp - 0x4b8], eax
je 0x100319cc
lea esi, [eax + 1]
jmp 0x100319ce
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x76c]
xor eax, eax
push eax
call fcn.10016a56
mov eax, dword [ebp - 0x4b8]
xor eax, eax
cmp esi, dword [ebp - 0x38]
jge 0x10031a1e
mov dword [ebp - 0x38], eax
jmp 0x10031a0a
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031a07
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x13
jle 0x100319f1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x4b8], eax
jmp 0x10031a2d
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10031a2d
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
or eax, 0xffffffff
lea ecx, [ebp - 0x76c]
mov dword [ebp - 4], eax
call fcn.10016a51
xor eax, eax
mov dword [ebp - 0x28], 0xe8cff0ea
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10031a69
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], 0xa8b108f8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10031a50
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1b
jge 0x10031aba
xor esi, esi
inc esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jg 0x10031ab1
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], ecx
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x100], 0
jne 0x10031aac
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jle 0x10031a80
xor esi, esi
xor eax, eax
inc esi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1b
jl 0x10031a75
xor ebx, ebx
inc ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10031bac
or ebx, 0xffffffff
movdqa xmm0, xmmword [0x10007d40]
lea eax, [ebp - 0x115c]
push eax
lea eax, [ebp - 0x116c]
push eax
lea ecx, [ebp - 0x15dc]
movdqu xmmword [ebp - 0x116c], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x285]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf5c]
push dword [esi]
call fcn.10016a2b
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0xf5c]
mov dword [ebp - 0x1c], 0x48407374
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x100]
xor eax, eax
push eax
call fcn.10016a56
mov ecx, dword [ebp - 0xfc]
xor edx, edx
cmp ecx, 2
lea ecx, [ebp - 0xf5c]
setl dl
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 4], ebx
call fcn.10016a51
dec dword [ebp - 0x28]
jns 0x10031acc
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], 0x8cff0ea7
mov dword [ebp - 0x20], 0x63eeda78
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe2
push 3
pop esi
je 0x10031d7e
or edi, 0xffffffff
push esi
lea ecx, [ebp - 0x3d8]
call fcn.100169ca
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], 0x5714ffd8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10031c16
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3d8]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10031bfb
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031c38
push 0x1865
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
push ebx
lea ecx, [ebp - 0x3d8]
call fcn.10016a56
xor ebx, ebx
lea ecx, [ebp - 0x3d8]
mov dword [eax], ebx
xor eax, eax
inc eax
push eax
call fcn.10016a56
jmp 0x10031d51
xor eax, eax
mov dword [ebp - 0x10], 0xfffa
inc eax
mov dword [ebp - 0x20], 0xfffffffe
push eax
mov dword [ebp - 0x44], eax
call fcn.10016a56
cmp dword [eax], ebx
jne 0x10031cc0
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10031cb4
mov eax, dword [ebp - 0x20]
xor ebx, ebx
sub eax, dword [ebp - 0x20]
inc ebx
sub eax, dword [ebp - 0x18]
cmp eax, ebx
jle 0x10031ca2
push ebx
lea ecx, [ebp - 0x3d8]
call fcn.10016a56
cmp dword [eax], 0
jne 0x10031ca9
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10031cab
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
add eax, 0xfffc
jne 0x10031cd9
cmp dword [ebp - 0x10], eax
jne 0x10031cd9
mov ecx, eax
jmp 0x10031cde
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x44]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x10], 0x82fc
mov eax, dword [ebp - 0x44]
cmp eax, ecx
setge dl
xor eax, eax
cmp edx, dword [ebp - 0x1c]
jle 0x10031d0b
cmp dword [ebp - 0x10], eax
je 0x10031d0b
lea edx, [eax + 1]
jmp 0x10031d0d
mov edx, eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0xcd6b
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp edx, 0x533f2a6a
setge al
xor ebx, ebx
sub ecx, eax
inc ebx
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x3d8]
push ebx
call fcn.10016a56
push ebx
lea ecx, [ebp - 0x3d8]
dec dword [eax]
call fcn.10016a56
push 0
pop ebx
cmp dword [eax], 0xfffffff4
lea ecx, [ebp - 0x3d8]
jge 0x10031c5c
mov dword [ebp - 4], edi
call fcn.10016a51
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe2
push 1
pop ebx
jne 0x10031bcd
mov edi, dword [sym.imp.GDI32.dll_StretchBlt]
push 2
lea ecx, [ebp - 0xfa4]
call fcn.100169ca
mov dword [ebp - 4], 0xc
mov eax, 0x2d5e48d3
mov dword [ebp - 0x9b4], eax
or ebx, 0xffffffff
mov dword [ebp - 0x9b0], eax
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x9a8], eax
xor eax, eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10031dd9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0x52061f6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10031dc0
xor eax, eax
mov dword [ebp - 0xe0], esi
cmp dword [ebp - 0xe0], eax
jl 0x10031e00
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10031df8
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor eax, eax
dec dword [ebp - 0xe0]
jns 0x10031de7
mov dword [ebp - 0x10], eax
jmp 0x10031eb1
mov dword [ebp - 0x40], 0x30cc2fdc
xor edx, edx
mov dword [ebp - 0x20], 0xf9f7c8b1
mov dword [ebp - 0x34], 0xe1ee67b3
mov dword [ebp - 0x1c], 0xe2c9bf5e
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x9b4]
je 0x10031e6b
xor eax, eax
cmp dword [ebp - 0xe0], eax
jne 0x10031e6b
mov edx, eax
jmp 0x10031e70
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x9b0]
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0xe0]
jle 0x10031e90
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10031e90
mov ecx, eax
jmp 0x10031e95
xor eax, eax
lea ecx, [eax + 1]
mov dword [ebp - 0xe4], ecx
mov eax, dword [ebp - 0x40]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xb
jne 0x10031e08
xor eax, eax
inc eax
mov dword [ebp - 0x624], eax
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x61c], eax
mov dword [ebp - 0x618], eax
mov dword [ebp - 0x10], 0x399841b3
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x10], 0x14
cmp dword [ebp - 0x10], 0xffffffef
jle 0x10031f7b
mov dword [ebp - 0x24], 0xf69f7fd1
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
je 0x10031f12
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10031f6b
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x10031f6b
mov dword [ebp - 0x40], 0x3718
xor ecx, ecx
mov dword [ebp - 0x34], 0x79253a34
mov dword [ebp - 0x40], 0x5a40f2fd
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
test eax, eax
setle cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x10]
setg bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x24], eax
jne 0x10031f78
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffef
jg 0x10031ef1
or ebx, 0xffffffff
movdqa xmm0, xmmword [0x10007c70]
lea ecx, [ebp - 0x15ec]
mov dword [ebp - 0x48], ebx
push 5
mov dword [ebp - 0x18], 0xe19d
pop eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x24], eax
push 4
pop eax
mov dword [ebp - 0x28], 0xa14c5530
mov dword [ebp - 0x20], 0xd7276cc
mov dword [ebp - 0xe7c], eax
mov dword [ebp - 0xe78], eax
mov dword [ebp - 0xe74], eax
mov dword [ebp - 0xe70], eax
lea eax, [ebp - 0x127c]
push eax
lea eax, [ebp - 0x128c]
push eax
movdqu xmmword [ebp - 0x128c], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x287]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1480]
push dword [esi]
call fcn.10016a2b
xor eax, eax
xor edx, edx
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
test eax, eax
setns dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, edx
setne cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0xfffffff8
mov eax, dword [ebp - 0x28]
setle dl
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setge cl
imul ecx, dword [ebp - 0x28]
test ecx, ecx
jne 0x10032051
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x100320bc
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10032097
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xe7c], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1003207e
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10032169
push 0x6d7
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
jmp 0x10032169
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x34], 0x67d3d8e1
mov dword [ebp - 0x1c], 0xd757520c
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xbde8aff6
mov dword [ebp - 0x54], 0xb883eb99
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x20], 0xd742
cmp dword [ebp - 0x1c], eax
jne 0x10032100
cmp dword [ebp - 0x18], eax
jne 0x10032100
mov esi, eax
jmp 0x10032105
xor eax, eax
lea esi, [eax + 1]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
neg ecx
push 0xfffffffffffffffc
sbb ecx, ecx
xor eax, eax
inc eax
inc ecx
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
imul eax, dword [ebp - 0x50]
cmp esi, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, 0xfff6
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
pop eax
cmp dword [ebp - 0x20], eax
jle 0x10032153
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10032153
mov edx, eax
jmp 0x10032158
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp edx, eax
sete cl
imul ecx, dword [ebp - 0x40]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x1480]
call fcn.10016a51
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x2c], eax
inc ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xffbe6269
mov dword [ebp - 0x34], 0x2097e65f
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x10], eax
jmp 0x100321aa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c8], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032199
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x10], 0xffff
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
add ecx, eax
mov dword [ebp - 0x7c8], ecx
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0xfffffffb
jae 0x100321fa
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10032378
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
xor eax, eax
jmp 0x10032378
mov dword [ebp - 0x40], 9
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xfffffff0
cmp dword [ebp - 0x10], 0x11
jge 0x1003236a
jmp 0x1003221e
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0xe071
lea ecx, [ebp - 0xd9c]
mov dword [ebp - 0x44], 0x7dfe98d7
push eax
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x24], eax
jmp 0x1003225a
push dword [ebp - 0x24]
lea ecx, [ebp - 0xd9c]
call fcn.10016a56
mov dword [eax], 7
inc dword [ebp - 0x24]
xor eax, eax
inc eax
cmp dword [ebp - 0x24], eax
jl 0x10032243
inc dword [ebp - 0x28]
jne 0x100322c8
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x100322ba
mov ecx, dword [ebp - 0x28]
xor edx, edx
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
add eax, 0xd2500577
add eax, ecx
mov dword [ebp - 0x7c8], eax
je 0x100322ba
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
dec eax
jne 0x100322c8
xor ecx, ecx
inc ecx
jmp 0x100322cd
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, 0x905f4d0c
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032348
mov dword [ebp - 0x20], 0x215c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7c8], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x1003232c
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x1003230f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], eax
jle 0x1003232c
xor eax, eax
mov esi, eax
jmp 0x10032331
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xd9c]
call fcn.10016a56
lea ecx, [esi - 1]
push 1
mov dword [eax], ecx
inc dword [ebp - 0x28]
pop ecx
cmp dword [ebp - 0x28], 0x26
jle 0x100322df
lea ecx, [ebp - 0xd9c]
mov byte [ebp - 4], 0xc
call fcn.10016a51
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x11
jl 0x1003221b
mov eax, dword [ebp - 0x50]
xor ebx, ebx
mov dword [ebp - 0x7c8], eax
xor eax, eax
inc ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003239d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xfa4]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032381
xor eax, eax
mov dword [ebp - 0x10], 0x3f4f46db
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100323c6
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1690], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100323b2
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x100323e1
cmp byte [ebp - 0x39], 0
je 0x100323de
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
mov byte [ebp - 0x39], al
jle 0x100323cb
cmp byte [ebp - 0x39], 0
je 0x100323f9
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032425
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100c], 0x8eac8b13
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032407
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x1003244e
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10032449
push 0x1ad4
push 0x260
push eax
call dword [sym.imp.USER32.dll_InflateRect]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x1003242d
mov dword [ebp - 0x2c], eax
jmp 0x1003245d
mov dword [ebp - 0x1c], 0xfffffff6
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffed
je 0x10032453
push 3
mov byte [ebp - 0x11], al
lea ecx, [ebp - 0xafc]
pop esi
mov dword [ebp - 0x2c], 0xddc85f70
mov dword [ebp - 0x1c], eax
push esi
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100324ab
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1018], 9
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x1003248d
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100324cd
push dword [ebp - 0x18]
lea ecx, [ebp - 0xafc]
call fcn.10016a56
mov dword [eax], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100324b3
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x100324eb
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100324e8
push 0x1f9e
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
xor eax, eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe7
je 0x100324d2
mov dword [ebp - 0x2c], 0x15
cmp dword [ebp - 0x2c], 0xffffffef
jge 0x1003256e
jmp 0x10032502
xor eax, eax
mov dword [ebp - 0x1c], 0xc58f
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x1c], 0xeff3de03
mov dword [ebp - 0x1c], 0x9214a9ba
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003253c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15fc], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032523
xor eax, eax
push eax
lea ecx, [ebp - 0xafc]
call fcn.10016a56
dec dword [eax]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10032565
push eax
push 0x171a
push 0x1109
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffef
jl 0x10032500
lea ecx, [ebp - 0xafc]
mov byte [ebp - 4], 0xc
call fcn.10016a51
cmp byte [ebp - 0x11], 0
je 0x100327d2
movdqa xmm0, xmmword [0x10007d30]
lea ecx, [ebp - 0x160c]
xor eax, eax
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x117c]
push eax
lea eax, [ebp - 0x118c]
push eax
movdqu xmmword [ebp - 0x118c], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x249]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xcc4]
push dword [esi]
call fcn.10016a2b
mov byte [ebp - 4], 0xf
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032770
push ebx
lea ecx, [ebp - 0x2a4]
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jge 0x10032629
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2a4]
call fcn.10016a56
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x2c]
inc eax
cmp dword [ebp - 0x2c], eax
jl 0x10032608
xor ebx, ebx
xor eax, eax
inc ebx
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x1003263a
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov eax, dword [ebp - 0x10]
add eax, 0x220985a9
cmp eax, 0xb8ee41b
jle 0x10032662
xor eax, eax
lea ecx, [ebp - 0xcc4]
push eax
call fcn.10016a56
mov dword [eax], 0x143e95aa
jmp 0x1003275e
xor eax, eax
mov dword [ebp - 0x40], 0xfa2e
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x2a4]
push eax
call fcn.10016a56
xor eax, eax
lea ecx, [ebp - 0x2a4]
push eax
call fcn.10016a56
xor eax, eax
lea ecx, [ebp - 0x2a4]
push eax
call fcn.10016a56
mov esi, dword [ebp - 0x40]
lea ecx, [ebp - 0x2a4]
add esi, 0x4159
neg esi
sbb esi, esi
inc esi
sub esi, dword [eax]
neg esi
sbb esi, esi
xor eax, eax
push eax
inc esi
call fcn.10016a56
mov ecx, dword [ebp - 0x40]
sub esi, ecx
xor ecx, ecx
cmp dword [eax], 0xdc8d
setge cl
xor eax, eax
cmp ecx, esi
jge 0x10032704
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x100326f1
push 0xd1a
push eax
push 0x1f0f
push 0xf38
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
push eax
lea ecx, [ebp - 0x2a4]
call fcn.10016a56
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
jmp 0x10032750
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jg 0x10032752
mov dword [ebp - 0x1c], 0xfffffff7
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032723
push eax
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push ebx
lea ecx, [ebp - 0xcc4]
call fcn.10016a56
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2a4]
mov esi, eax
call fcn.10016a56
mov ecx, dword [eax]
xor eax, eax
mov dword [esi], ecx
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x1003270c
xor eax, eax
push eax
lea ecx, [ebp - 0x2a4]
call fcn.10016a56
lea ecx, [ebp - 0x2a4]
mov byte [ebp - 4], 0xf
call fcn.10016a51
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffffb
jge 0x100325ee
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0xc
call fcn.10016a51
push 0xea1
push 0x7dc
push 0x852
push 0x7e8
push 0xa5f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov ebx, dword [sym.imp.USER32.dll_GetDC]
push eax
call ebx
push eax
push 0x215b
push 0x221c
push 0x1474
push 0x2346
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
push eax
call edi
mov dword [ebp - 0x1c], 0x6c05baf4
lea ecx, [ebp - 0xb14]
mov eax, 0x7eede0b4
or esi, 0xffffffff
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0xe5c], eax
mov dword [ebp - 0xe58], eax
mov dword [ebp - 0xe54], eax
mov dword [ebp - 0xe50], eax
mov dword [ebp - 0x40], 0xf0a9b27f
push 2
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x11
xor ebx, ebx
mov dword [ebp - 0x10], eax
inc ebx
cmp dword [ebp - 0x10], 2
jge 0x1003283d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb14]
call fcn.10016a56
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032822
xor eax, eax
inc dword [ebp - 0x40]
lea ecx, [ebp - 0xb14]
push eax
call fcn.10016a56
lea ecx, [ebp - 0xb14]
mov eax, dword [eax]
mov dword [ebp - 0xe50], eax
mov byte [ebp - 4], 0xc
call fcn.10016a51
xor eax, eax
mov dword [ebp - 0x618], eax
cmp dword [ebp - 0x618], ebx
jg 0x1003489d
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10032881
xor eax, eax
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100328b3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b8], 0xfffffff9
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032895
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jg 0x10032b14
push 3
pop edi
movdqa xmm0, xmmword [0x10007ce0]
lea ecx, [ebp - 0x151c]
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x20], 0xfffffffe
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x137c]
push eax
lea eax, [ebp - 0x138c]
mov dword [ebp - 0x1c], 0x70ab
mov dword [ebp - 0x40], edi
push eax
movdqu xmmword [ebp - 0x138c], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x258]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x10d8]
push dword [esi]
call fcn.10016a2b
xor eax, eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1c], 0xfc9aeb9d
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
test eax, eax
push 6
setle cl
pop eax
add ecx, eax
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x18]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
add edx, dword [ebp + eax*4 - 0x1b8]
mov eax, dword [ebp - 0x28]
cmp edx, eax
mov eax, dword [ebp - 0x28]
setge cl
sub ecx, dword [ebp + eax*4 - 0x1b8]
je 0x10032a3e
movdqa xmm0, xmmword [0x10007d20]
lea eax, [ebp - 0x119c]
push eax
lea eax, [ebp - 0x11ac]
push eax
lea ecx, [ebp - 0x152c]
movdqu xmmword [ebp - 0x11ac], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x25e]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1034]
push dword [esi]
call fcn.10016a2b
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100329f4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b8], 0xdb80
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100329d9
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x10032a33
or edi, 0xffffffff
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x1034]
push eax
call fcn.10016a56
mov ecx, dword [ebp - 0x28]
xor edx, edx
push 0
mov ecx, dword [ebp + ecx*4 - 0x1b8]
cmp ecx, dword [eax]
setg dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x18]
pop eax
jns 0x100329ff
push 3
pop edi
lea ecx, [ebp - 0x1034]
jmp 0x10032ae6
xor eax, eax
lea ecx, [ebp - 0xf74]
inc eax
mov dword [ebp - 0x44], eax
push eax
call fcn.100169ca
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x40], 0xcc114ff6
mov dword [ebp - 0x10], eax
jmp 0x10032a79
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf74]
call fcn.10016a56
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032a62
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
sub ecx, 0xcd6b
neg ecx
push edi
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
lea ecx, [ebp - 0x10d8]
setl bl
call fcn.10016a56
imul ecx, ebx, 0x6f63
xor edx, edx
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setg dl
mov dword [ebp - 0x20], edx
xor edx, edx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
lea ecx, [ebp - 0xf74]
setl dl
imul edx, dword [ebp - 0x44]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x40]
call fcn.10016a51
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x10d8]
mov byte [ebp - 4], 0xc
call fcn.10016a51
inc dword [ebp - 0x28]
xor eax, eax
push 1
pop ebx
cmp dword [ebp - 0x28], eax
jle 0x100328c2
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
jne 0x1003496f
push 3
xor ebx, ebx
lea ecx, [ebp - 0x3c0]
pop esi
inc ebx
mov dword [ebp - 0x4c], ebx
push esi
call fcn.100169ca
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x8ac]
mov dword [ebp - 0x40], 2
push 4
call fcn.100169ca
mov byte [ebp - 4], 0x16
or eax, 0xffffffff
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10032b89
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3c0]
call fcn.10016a56
mov dword [eax], 0xfff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10032b6b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10032bae
push dword [ebp - 0x18]
lea ecx, [ebp - 0x8ac]
call fcn.10016a56
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10032b92
xor eax, eax
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10016a56
cmp dword [eax], 0
jne 0x10032cd6
push ebx
lea ecx, [ebp - 0x3c0]
call fcn.10016a56
xor ebx, ebx
lea ecx, [ebp - 0x3c0]
cmp dword [eax], 0x721f
setl bl
xor eax, eax
push eax
call fcn.10016a56
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
xor eax, eax
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], eax
jne 0x10032c10
push eax
lea ecx, [ebp - 0x8ac]
call fcn.10016a56
cmp dword [eax], 0
jne 0x10032c10
xor eax, eax
mov esi, eax
jmp 0x10032c15
xor eax, eax
lea esi, [eax + 1]
push 2
lea ecx, [ebp - 0x8ac]
call fcn.10016a56
mov dword [eax], esi
test esi, esi
jne 0x10032c2b
mov eax, dword [ebp - 0x20]
push 2
lea ecx, [ebp - 0x3c0]
call fcn.10016a56
xor esi, esi
lea ecx, [ebp - 0x3c0]
xor ebx, ebx
inc esi
cmp dword [eax], esi
setle bl
xor eax, eax
push eax
call fcn.10016a56
xor ecx, ecx
cmp ebx, dword [eax]
setle cl
xor eax, eax
add ecx, 0x5a27bf21
cmp ecx, 0x657e3b6f
lea ecx, [ebp - 0x3c0]
setle al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
xor eax, eax
push eax
call fcn.10016a56
xor ecx, ecx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x44]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
or eax, 0xffffffff
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], eax
ja 0x10032cb0
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10032cb2
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10032cb7
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push eax
lea ecx, [ebp - 0x3c0]
call fcn.10016a56
mov eax, dword [eax]
imul eax, esi
add eax, 0xa7c7
cmp eax, 8
jne 0x10032cd6
xor eax, eax
jmp 0x10032cd8
mov eax, ebx
push 6
pop ecx
cmp eax, ecx
push 3
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
pop eax
mov dword [ebp - 0x10], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jl 0x10032d08
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032d03
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10032cf0
lea ecx, [ebp - 0x8ac]
call fcn.10016a51
lea ecx, [ebp - 0x3c0]
mov byte [ebp - 4], 0xc
call fcn.10016a51
xor eax, eax
mov dword [ebp - 0x10], 0x1824a8c6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032d51
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x8c], 0xcd333563
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032d33
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], 0xffffffef
cmp dword [ebp - 0x10], ebx
jge 0x10032db3
xor eax, eax
inc eax
mov dword [ebp - 0x8c], eax
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032d8e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x80], 0xf55e00fe
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10032d73
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xffbe6269
mov dword [ebp - 0x34], 0x2097e65f
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x10], eax
jmp 0x10032f86
xor eax, eax
mov dword [ebp - 0x18], 0x8306
cmp dword [ebp - 0x10], eax
jne 0x10032dc8
cmp dword [ebp - 0x18], eax
jne 0x10032dc8
mov ecx, eax
jmp 0x10032dcd
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x18]
mov edx, 0xf5fa3187
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
cmp edx, eax
sbb eax, eax
xor edx, edx
inc eax
cmp ecx, eax
sete dl
xor ecx, ecx
mov dword [ebp - 0x8c], edx
mov eax, dword [ebp - 0x18]
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x18]
jle 0x10032f40
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jl 0x10032f61
mov dword [ebp - 0x28], 0xfffffff9
mov dword [ebp - 0x40], 0xeee83ade
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x8c], 0
jne 0x10032f61
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], eax
jg 0x10032f35
or edi, 0xffffffff
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x10032f23
push 3
pop ebx
push ebx
lea ecx, [ebp - 0xdfc]
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x24], eax
jmp 0x10032e87
push dword [ebp - 0x24]
lea ecx, [ebp - 0xdfc]
call fcn.10016a56
mov dword [eax], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10032e74
mov eax, dword [ebp - 0x28]
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0x8c]
test eax, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
setne bl
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x18]
add edx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x8c]
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x3e5f8859
lea ecx, [ebp - 0xdfc]
setle al
lea esi, [eax - 1]
xor eax, eax
push eax
call fcn.10016a56
xor ecx, ecx
mov dword [eax], esi
neg esi
mov eax, dword [ebp - 0x28]
cmp ebx, esi
setne cl
mov dword [ebp + eax*4 - 0x8c], ecx
lea ecx, [ebp - 0xdfc]
mov byte [ebp - 4], 0xc
call fcn.10016a51
dec dword [ebp - 0x20]
jns 0x10032e5a
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10032e47
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
dec dword [ebp - 0x18]
jns 0x10032e17
jmp 0x10032f61
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10032f5e
push 0x508
push 0x8c7
push 0x1f70
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jge 0x10032db1
jmp 0x10032d60
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7d8], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032f75
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov dword [ebp - 0x10], 0xffff
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
add edx, eax
mov dword [ebp - 0x7d8], edx
mov eax, dword [ebp - 0x2c]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0xfffffffb
jae 0x10032fd6
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10033154
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
xor eax, eax
jmp 0x10033154
mov dword [ebp - 0x40], 9
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xfffffff0
cmp dword [ebp - 0x10], 0x11
jge 0x10033146
jmp 0x10032ffa
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0xe071
lea ecx, [ebp - 0xb2c]
mov dword [ebp - 0x44], 0x7dfe98d7
push eax
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], eax
jmp 0x10033036
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb2c]
call fcn.10016a56
mov dword [eax], 7
inc dword [ebp - 0x24]
xor eax, eax
inc eax
cmp dword [ebp - 0x24], eax
jl 0x1003301f
inc dword [ebp - 0x28]
jne 0x100330a4
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10033096
mov ecx, dword [ebp - 0x28]
xor edx, edx
sub ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
add eax, 0xd2500577
add eax, ecx
mov dword [ebp - 0x7d8], eax
je 0x10033096
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
dec eax
jne 0x100330a4
xor ecx, ecx
inc ecx
jmp 0x100330a9
xor ecx, ecx
inc ecx
mov eax, ecx
cmp eax, 0x905f4d0c
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10033124
mov dword [ebp - 0x20], 0x215c
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x7d8], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jne 0x10033108
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x100330eb
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x7d4], eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], eax
jle 0x10033108
xor eax, eax
mov esi, eax
jmp 0x1003310d
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0xb2c]
call fcn.10016a56
lea ecx, [esi - 1]
push 1
mov dword [eax], ecx
inc dword [ebp - 0x28]
pop ecx
cmp dword [ebp - 0x28], 0x26
jle 0x100330bb
lea ecx, [ebp - 0xb2c]
mov byte [ebp - 4], 0xc
call fcn.10016a51
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x11
jl 0x10032ff7
mov eax, dword [ebp - 0x50]
xor ebx, ebx
mov dword [ebp - 0x7d8], eax
xor eax, eax
inc ebx
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], ebx
jg 0x100342e5
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0x46e74a6
mov dword [ebp - 0x20], 0x74a71a6e
mov dword [ebp - 0x34], eax
push 3
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x1003319a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x810], 0xf04b064b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10033182
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x100331f4
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x272b
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10]
jne 0x100331bd
cmp dword [ebp - 0x10], eax
jne 0x100331bd
mov edx, eax
jmp 0x100331c5
xor eax, eax
xor ebx, ebx
inc ebx
lea edx, [eax + 1]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
add eax, 0x34b6
cmp eax, edx
setne cl
mov dword [ebp - 0x810], ecx
test ecx, ecx
je 0x100331e4
mov eax, dword [ebp - 0x810]
xor eax, eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], eax
jne 0x100331f4
mov eax, dword [ebp - 0x80c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], 0xffff
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
imul eax, dword [ebp - 0x20], 0x3bbb
cmp eax, 0xfe0cd1b7
jbe 0x1003327a
movdqa xmm0, xmmword [0x10007c70]
lea eax, [ebp - 0x129c]
push eax
lea eax, [ebp - 0x12ac]
mov dword [ebp - 0x1c], 0x6de6eab3
push eax
lea ecx, [ebp - 0x1614]
movdqu xmmword [ebp - 0x12ac], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x260]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x13d8]
push dword [esi]
call fcn.10016a2b
mov dword [ebp - 0x40], 0x9a164e6
lea ecx, [ebp - 0x13d8]
inc dword [ebp - 0x40]
call fcn.10016a51
jmp 0x100332d4
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0x1c], 0xf116e8cf
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x100332a4
cmp dword [ebp - 0x20], eax
jne 0x100332a4
mov ecx, eax
jmp 0x100332ac
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, ebx
setle al
add eax, dword [ebp - 0x810]
neg eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x10]
jne 0x100332cf
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x100332d1
mov eax, ebx
jmp 0x100332d1
xor eax, eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x34]
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jl 0x100342d6
mov dword [ebp - 0x40], 0x58bac04e
mov dword [ebp - 0x1c], 0x4c405b40
mov dword [ebp - 0x34], 0x8f5f4990
push 2
mov dword [ebp - 0x18], eax
pop ebx
cmp dword [ebp - 0x18], ebx
jge 0x10033320
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x107c], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033308
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033336
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x738], 0
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10033325
mov eax, dword [ebp - 0x107c]
xor ecx, ecx
cmp eax, 0x1f665683
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x738]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10033371
push 0xe29
call edi
push ebx
lea ecx, [ebp - 0x378]
call fcn.100169ca
push ebx
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x1b
call fcn.100169ca
push 0xfffffffffffffffc
pop esi
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x81c]
or eax, 0xffffffff
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x4c], eax
push ebx
call fcn.100169ca
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x34], 0xfffffff9
push 8
pop eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x54], 0xb26f1a7e
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x100333e9
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.10016a56
mov dword [eax], 0x13dd33a4
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x100333cb
xor eax, eax
push 3
mov dword [ebp - 0x28], eax
pop ecx
cmp dword [ebp - 0x28], ecx
jge 0x1003340c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xcdc], 7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x100333f4
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x10033432
push dword [ebp - 0x28]
lea ecx, [ebp - 0x81c]
call fcn.10016a56
mov dword [eax], 0x5a0a0de8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x10033414
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x100336ae
or edi, 0xffffffff
push 5
pop eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0xb44]
mov dword [ebp - 0x10], 0x132f4bb0
mov dword [ebp - 0x50], 0x43fd0416
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 0xb3ec6b9f
mov dword [ebp - 0x2c], 0x7c0cb0a7
push ebx
call fcn.100169ca
mov byte [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100334a7
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb44]
call fcn.10016a56
mov dword [eax], 0xa82d8584
xor eax, eax
inc dword [ebp - 0x24]
inc eax
cmp dword [ebp - 0x24], eax
jl 0x10033486
xor eax, eax
push eax
lea ecx, [ebp - 0x2d4]
call fcn.10016a56
xor ebx, ebx
cmp dword [eax], ebx
je 0x100334d4
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.10016a56
mov dword [eax], ebx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
jmp 0x100335c2
xor eax, eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x100335bc
xor ebx, ebx
push 6
inc ebx
pop edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x10033594
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2d4]
call fcn.10016a56
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x2d4]
push dword [ebp - 0x28]
call fcn.10016a56
xor eax, eax
lea ecx, [ebp - 0x2d4]
push eax
call fcn.10016a56
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10033548
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x2d4]
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x28]
call fcn.10016a56
mov dword [eax], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x44]
sub ecx, eax
jne 0x10033582
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100335ac
push 0xff
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100334ec
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x2d4]
mov eax, dword [ebp - 0xcd8]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x10], eax
push ebx
call fcn.10016a56
mov ecx, dword [ebp - 0x10]
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x20], eax
jne 0x100335f8
cmp dword [ebp - 0xcdc], eax
jne 0x100335f8
mov esi, eax
jmp 0x10033600
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x81c]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x50], eax
push ebx
call fcn.10016a56
xor ecx, ecx
cmp esi, dword [eax]
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x50], ecx
jle 0x10033641
mov eax, dword [ebp - 0x20]
xor eax, eax
lea ecx, [ebp - 0x81c]
push eax
call fcn.10016a56
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0xb44]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
xor eax, eax
push eax
call fcn.10016a56
mov ecx, dword [ebp - 0x4c]
mov esi, eax
xor eax, eax
cmp ecx, ebx
mov ecx, dword [ebp - 0x18]
setl al
xor edx, edx
cmp eax, ecx
lea ecx, [ebp - 0xb44]
setne dl
add edx, dword [esi]
mov dword [ebp - 0xcd8], edx
mov byte [ebp - 4], 0x1d
call fcn.10016a51
dec dword [ebp - 0x28]
push 0xfffffffffffffffc
pop esi
jns 0x10033444
lea ecx, [ebp - 0x81c]
call fcn.10016a51
lea ecx, [ebp - 0x2d4]
mov byte [ebp - 4], 0x1b
call fcn.10016a51
movdqa xmm0, xmmword [0x10007d10]
lea ecx, [ebp - 0x153c]
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x10], eax
lea eax, [ebp - 0x11bc]
push eax
lea eax, [ebp - 0x11cc]
push eax
movdqu xmmword [ebp - 0x11cc], xmm0
call fcn.10016a65
lea ecx, [ebp - 0x262]
mov esi, eax
call fcn.10008d43
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xf8c]
push dword [esi]
call fcn.10016a2b
push 6
mov byte [ebp - 4], 0x1f
pop eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe6
jle 0x1003374f
xor eax, eax
mov dword [ebp - 0x40], 0x220985a9
dec dword [ebp - 0x40]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033746
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventA]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe6
jg 0x10033727
push ebx
lea ecx, [ebp - 0xf8c]
call fcn.10016a56
mov ecx, dword [ebp - 0x10]
mov byte [ebp - 4], 0x1b
mov dword [eax], ecx
lea ecx, [ebp - 0xf8c]
call fcn.10016a51
mov dword [ebp - 0x10], 0xf01c
push 6
mov dword [ebp - 0x1c], 0x33037736
pop eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x10], eax
je 0x1003387f
mov dword [ebp - 0x1c], 0xfffffff7
push 0xfffffffffffffffc
mov dword [ebp - 0x1c], 0xb37b0480
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], 0xf98cafa3
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100337cf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x16cc], 0xa4e66596
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100337b7
xor eax, eax
mov dword [ebp - 0x10], 0xe
cmp dword [ebp - 0x10], 0x1b
jl 0x100338d4
or edx, 0xffffffff
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10033808
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4cc], 6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100337ef
mov dword [ebp - 0x4cc], ecx
cmp dword [ebp - 0x4cc], 0xfffffff2
jg 0x10033870
or ecx, 0xffffffff
mov dword [ebp - 0x20], 0xc3e8ce6f
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x20], eax
je 0x100338ab
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x100338a9
xor ebx, ebx
lea edx, [eax + 1]
inc ebx
jmp 0x100338ad
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
cmp eax, ecx
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 5
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x40], ecx
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop esi
cmp dword [ebp - 0x18], esi
jge 0x100338ff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x378]
call fcn.10016a56
mov dword [eax], 0xbe39e3cf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100338e1
xor eax, eax
mov ecx, 0x462d5e48
mov dword [ebp - 0x664], ecx
mov dword [ebp - 0x660], ecx
mov dword [ebp - 0x65c], ecx
mov dword [ebp - 0x658], ecx
mov dword [ebp - 0x1c], 0xd214c405
mov dword [ebp - 0x658], eax
cmp dword [ebp - 0x658], 0x1d
jle 0x1003395e
mov dword [ebp - 0x40], 0x2e6e
mov dword [ebp - 0x1c], 0xa971867b
mov dword [ebp - 0x1c], 0x3c8fc558
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x658]
cmp dword [ebp - 0x658], 0x1d
jg 0x10033932
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033974
inc dword [ebp - 0x80]
push 0
pop eax
cmp dword [ebp - 0x80], ebx
jle 0x10033160
mov dword [ebp - 0x40], 0x58bac04e
mov dword [ebp - 0x1c], 0x4c405b40
mov dword [ebp - 0x34], 0x8f5f4990
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1003431c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x103c], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10034303
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034332
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6a0], 0
inc dword [ebp - 0x18]
xor eax, eax
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10034321
mov eax, dword [ebp - 0x103c]
xor ecx, ecx
cmp eax, 0x1f665683
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x6a0]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x1003436f
push 0xe29
call edi
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x4c], eax
inc ebx
cmp dword [ebp - 0x4c], ebx
jg 0x10034880
push 3
pop edi
or esi, 0xffffffff
jmp 0x1003438b
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x10], 0xec299e88
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x44], 0x6a37d7c8
mov dword [ebp - 0x24], 0x5ff44426
mov dword [ebp - 0x34], 0xc795
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x16
jge 0x1003458d
jmp 0x100343be
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0x28], 0xeab3cf81
push 6
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x48], 0xa3fd
mov dword [ebp - 0x30], 0xc8400b8f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034403
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], 0x3e2f7c62
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100343e8
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10034425
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xedc], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003440c
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x1003449f
inc dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x24]
push 8
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x48]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
setg dl
inc dword [ebp - 0x20]
cmp eax, edx
jl 0x10034456
xor eax, eax
lea edx, [eax + 1]
jmp 0x1003445a
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xb4]
mov edx, 0xffff7939
setl cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setle cl
sub ecx, eax
je 0x10034486
xor eax, eax
lea edx, [eax + 1]
jmp 0x1003448a
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0xb4]
xor ecx, ecx
cmp edx, eax
sete cl
cmp ecx, 0x27ee
jl 0x100344a5
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb4], 0xf509e13c
xor ecx, ecx
mov eax, dword [ebp - 0x10]
test eax, eax
push 4
sets cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x10]
pop edx
imul eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
sub edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0xed8], ecx
mov dword [ebp - 0x10], eax
jmp 0x10034570
mov dword [ebp - 0x40], 0xfffc
xor edx, edx
mov dword [ebp - 0x18], edi
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
mov eax, dword [ebp - 0xb4]
setg dl
imul edx, eax
cmp edx, dword [ebp - 0x20]
jle 0x10034517
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp eax, 0x2a49e864
mov eax, dword [ebp - 0x40]
setg dl
xor esi, esi
lea ecx, [esi + 1]
sub ecx, eax
xor eax, eax
cmp edx, ecx
setle al
add eax, 0x78356027
mov dword [ebp - 0x44], eax
xor eax, eax
cmp dword [ebp - 0xb4], eax
jne 0x10034550
cmp dword [ebp - 0x40], eax
jne 0x10034550
mov ecx, eax
jmp 0x10034555
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100344ec
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x16
push 1
pop ebx
jl 0x100343bc
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
neg ecx
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
xor eax, eax
mov dword [ebp - 0x44], 0xd4f6636
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], eax
jl 0x10034869
mov edi, 0x62751c76
jmp 0x100345d7
xor eax, eax
mov dword [ebp - 0x10], 0xebaeef20
push 3
mov dword [ebp - 0x10], eax
pop edx
cmp dword [ebp - 0x10], edx
jge 0x100345fd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1438], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100345e9
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jg 0x10034642
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10034625
push eax
push 0x171a
push 0x1109
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
push 2
pop ecx
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1438], 0
jne 0x1003463d
inc dword [ebp - 0x10]
push 0
pop eax
cmp dword [ebp - 0x10], ecx
jle 0x10034608
push 3
xor eax, eax
pop edx
mov esi, 0x1b18d408
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10034688
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x155c], 0xbab59342
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10034670
xor eax, eax
inc dword [ebp - 0x40]
mov byte [ebp - 0x11], al
mov dword [ebp - 0x1c], esi
or esi, 0xffffffff
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x10], eax
jmp 0x100346c4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15e4], 0xbab59342
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100346b3
inc dword [ebp - 0x40]
cmp byte [ebp - 0x11], 0
je 0x1003485d
push edx
lea ecx, [ebp - 0x834]
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x27
mov dword [ebp - 0x24], eax
push 3
mov dword [ebp - 0x10], eax
pop esi
cmp dword [ebp - 0x10], esi
jge 0x10034714
push dword [ebp - 0x10]
lea ecx, [ebp - 0x834]
call fcn.10016a56
mov dword [eax], 0x9841b3c6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100346f6
xor eax, eax
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], eax
jl 0x1003483e
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x40], 0x81479b69
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10034751
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x10034835
lea ecx, [ebp - 0x834]
mov byte [ebp - 4], 0xc
call fcn.10016a51
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
or esi, 0xffffffff
dec dword [ebp - 0x48]
jns 0x100345d5
push 3
pop edi
inc dword [ebp - 0x4c]
xor eax, eax
inc eax
cmp dword [ebp - 0x4c], eax
jle 0x10034386
mov edi, dword [sym.imp.KERNEL32.dll_SetLastError]
jmp 0x10034883
xor eax, eax
inc eax
inc dword [ebp - 0x618]
push 1
pop ebx
push 0xffffffffffffffff
pop esi
cmp dword [ebp - 0x618], eax
jle 0x1003287f
or esi, esi
lea ecx, [ebp - 0xfa4]
mov dword [ebp - 4], esi
call fcn.10016a51
xor eax, eax
lea ecx, [ebp - 0x6d8]
mov dword [ebp - 0x38], eax
push ebx
call fcn.100169ca
xor eax, eax
mov dword [ebp - 4], 0x29
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100348f1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6d8]
call fcn.10016a56
mov dword [eax], 0xfffffff8
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100348cd
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10034913
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x478], 0xdd61fb9a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100348fa
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x1003497a
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
neg eax
sbb eax, eax
neg eax
dec eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, ebx
setl al
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
test eax, eax
jg 0x1003497a
xor eax, eax
mov esi, eax
jmp 0x1003497f
push 0xcf7
call dword [sym.imp.KERNEL32.dll_ExitProcess]
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0x6d8]
call fcn.10016a56
lea ecx, [ebp - 0x6d8]
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor eax, eax
push eax
mov dword [ebp - 0x478], eax
call fcn.10016a56
cmp dword [eax], 0
je 0x100349be
xor eax, eax
cmp dword [ebp - 0x474], eax
je 0x100349c0
lea esi, [eax + 1]
jmp 0x100349c2
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x6d8]
xor eax, eax
push eax
call fcn.10016a56
mov eax, dword [ebp - 0x474]
xor eax, eax
cmp esi, dword [ebp - 0x38]
jge 0x10034a12
mov dword [ebp - 0x38], eax
jmp 0x100349fe
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100349fb
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x13
jle 0x100349e5
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x474], eax
jmp 0x10034a21
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10034a21
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
or edi, 0xffffffff
lea ecx, [ebp - 0x6d8]
mov dword [ebp - 4], edi
call fcn.10016a51
xor ebx, ebx
lea ecx, [ebp - 0x670]
xor eax, eax
inc ebx
mov dword [ebp - 0x38], eax
push ebx
call fcn.100169ca
xor eax, eax
mov dword [ebp - 4], 0x2a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034a7b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x670]
call fcn.10016a56
mov dword [eax], 0xfffffff8
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x10034a57
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10034a9d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c4], 0xdd61fb9a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10034a84
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10034af9
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
inc ecx
neg eax
sbb eax, eax
neg eax
dec eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, ebx
setl al
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
test eax, eax
jg 0x10034af9
xor eax, eax
mov esi, eax
jmp 0x10034afe
xor eax, eax
lea esi, [eax + 1]
push eax
lea ecx, [ebp - 0x670]
call fcn.10016a56
lea ecx, [ebp - 0x670]
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor eax, eax
push eax
mov dword [ebp - 0x4c4], eax
call fcn.10016a56
cmp dword [eax], 0
je 0x10034b3d
xor eax, eax
cmp dword [ebp - 0x4c0], eax
je 0x10034b3f
lea esi, [eax + 1]
jmp 0x10034b41
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x670]
xor eax, eax
push eax
call fcn.10016a56
mov eax, dword [ebp - 0x4c0]
xor eax, eax
cmp esi, dword [ebp - 0x38]
jge 0x10034b91
mov dword [ebp - 0x38], eax
jmp 0x10034b7d
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10034b7a
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x13
jle 0x10034b64
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x4c0], eax
jmp 0x10034ba0
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10034ba0
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
lea ecx, [ebp - 0x670]
mov dword [ebp - 4], edi
call fcn.10016a51
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x208]
call fcn.100169ca
mov dword [ebp - 4], 0x2b
lea ecx, [ebp - 0xcf4]
mov edi, 0x2ee76f50
mov dword [ebp - 0x18], edi
push 4
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x2c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034c01
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10016a56
mov dword [eax], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10034be7
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10034c29
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcf4]
call fcn.10016a56
mov dword [eax], 0xd1b40e11
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034c0a
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
inc ebx
mov esi, 0x858905b8
jmp 0x10034d7e
mov dword [ebp - 0x2c], 0xa77c8748
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10034c62
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa34], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034c49
xor eax, eax
mov dword [ebp - 0xa28], eax
jmp 0x10034c82
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10034c7c
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
xor eax, eax
inc dword [ebp - 0xa28]
cmp dword [ebp - 0xa28], ebx
jle 0x10034c6a
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jg 0x10034d7b
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x208]
push dword [ebp - 0x18]
call fcn.10016a56
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x208]
call fcn.10016a56
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x208]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10016a56
push dword [ebp - 0x2c]
xor ecx, ecx
or edx, 0xffffffff
cmp dword [eax], edx
setl cl
cmp esi, ecx
lea ecx, [ebp - 0x208]
sbb esi, esi
neg esi
call fcn.10016a56
xor ebx, ebx
lea ecx, [ebp - 0x208]
inc ebx
push ebx
mov dword [eax], esi
call fcn.10016a56
xor esi, esi
cmp dword [eax], esi
je 0x10034d15
push ebx
lea ecx, [ebp - 0xcf4]
call fcn.10016a56
mov dword [ebp - 0x1c], 0x2146
lea ecx, [ebp - 0x208]
push dword [ebp - 0x18]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x208]
call fcn.10016a56
push dword [ebp - 0x18]
xor ebx, ebx
lea ecx, [ebp - 0x208]
cmp dword [eax], esi
setne bl
call fcn.10016a56
mov ecx, dword [ebp - 0x2c]
mov esi, 0x858905b8
sub ecx, ebx
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x2c]
inc eax
cmp dword [ebp - 0x2c], eax
jle 0x10034c99
xor ebx, ebx
xor eax, eax
inc ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10034c39
lea ecx, [ebp - 0xcf4]
call fcn.10016a51
or eax, 0xffffffff
lea ecx, [ebp - 0x208]
mov dword [ebp - 4], eax
call fcn.10016a51
push 2
lea ecx, [ebp - 0x1f0]
call fcn.100169ca
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0xb74]
mov dword [ebp - 0x18], edi
push 4
call fcn.100169ca
xor eax, eax
mov byte [ebp - 4], 0x2e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10034df3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push 2
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10034dd6
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10034e1b
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb74]
call fcn.10016a56
mov dword [eax], 0xd1b40e11
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034dfc
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034f64
mov dword [ebp - 0x2c], 0xa77c8748
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10034e4c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9d4], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10034e33
xor eax, eax
mov dword [ebp - 0x9c8], eax
jmp 0x10034e6c
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10034e66
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
xor eax, eax
inc dword [ebp - 0x9c8]
cmp dword [ebp - 0x9c8], ebx
jle 0x10034e54
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jg 0x10034f5c
mov dword [ebp - 0x1c], ebx
lea ecx, [ebp - 0x1f0]
push dword [ebp - 0x18]
call fcn.10016a56
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push dword [ebp - 0x2c]
xor ecx, ecx
or edx, 0xffffffff
cmp dword [eax], edx
setl cl
cmp esi, ecx
lea ecx, [ebp - 0x1f0]
sbb esi, esi
neg esi
call fcn.10016a56
push ebx
lea ecx, [ebp - 0x1f0]
mov dword [eax], esi
call fcn.10016a56
xor esi, esi
cmp dword [eax], esi
je 0x10034ef9
push ebx
lea ecx, [ebp - 0xb74]
call fcn.10016a56
mov dword [ebp - 0x1c], 0x2146
lea ecx, [ebp - 0x1f0]
push dword [ebp - 0x18]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10016a56
push dword [ebp - 0x18]
xor ebx, ebx
lea ecx, [ebp - 0x1f0]
cmp dword [eax], esi
setne bl
call fcn.10016a56
mov ecx, dword [ebp - 0x2c]
mov esi, 0x858905b8
sub ecx, ebx
xor ebx, ebx
inc ebx
mov dword [eax], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x10034e80
xor eax, eax
inc dword [ebp - 0x18]
mov esi, 0x858905b8
cmp dword [ebp - 0x18], ebx
jle 0x10034e23
lea ecx, [ebp - 0xb74]
call fcn.10016a51
or eax, 0xffffffff
lea ecx, [ebp - 0x1f0]
mov dword [ebp - 4], eax
call fcn.10016a51
xor eax, eax
mov dword [ebp - 0x10], 0x2c03342e
mov dword [ebp - 0x10], eax
jmp 0x10034f9f
cmp dword [ebp - 0x10], eax
jne 0x10034fa5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x13
jl 0x10034f97
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10034fbc
push eax
push 0x2663
push eax
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x1c], 0x45625132
mov dword [ebp - 0x1c], 0x7747bb7a
mov dword [ebp - 0x1c], 0xe3e7631
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10034ff7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x444], 0xae355683
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10034fdf
xor eax, eax
mov dword [ebp - 0x444], eax
cmp dword [ebp - 0x444], ecx
jg 0x100350fc
push 3
pop edx
mov dword [ebp - 0x10], 0x738ab659
mov dword [ebp - 0x1c], 0x61c71bc7
mov dword [ebp - 0x1c], 0xfffffff9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edx
jge 0x10035041
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13f0], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10035029
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jg 0x100350ea
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xfbc9fa8b
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x13f0], 0
je 0x100350b2
inc dword [ebp - 0x444]
cmp dword [ebp - 0x444], ecx
jle 0x1003500c
push ebx
lea ecx, [ebp - 0x6f0]
call fcn.100169ca
mov dword [ebp - 4], 0x2f
xor eax, eax
mov dword [ebp - 0x2c], 0xea75
mov dword [ebp - 0x44], 0x7858f9c
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x24], 0xbdd48407
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x40], 0xfffffffb
mov dword [ebp - 0x48], 0xda8db884
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x38], 0xb1f1
mov dword [ebp - 0x10], eax
jmp 0x10035165
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x590], 0xd86e6af5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10035154
inc dword [ebp - 0x2c]
mov ecx, ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
sub ecx, eax
je 0x1003526f