Function at 0x100323a9
Capabilities:
Accept command line arguments
Enumerate files on windows
Get disk information
Get file attributes
Identify system language via api
Parse pe header
Read .ini file
Set environment variable
Set registry value
Start service
Terminate process

Disassembly:
mov eax, 0x10089391
call fcn.10087c08
mov eax, 0x16a4
call fcn.10081df0
push ebx
push esi
push edi
mov dword [ebp - 0x58], ecx
mov edi, 0xd6b6
or ebx, 0xffffffff
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x734]
push 3
mov byte [ebp - 0x6d], dl
call fcn.10017a59
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0xd4c], ebx
mov dword [ebp - 0xd48], ebx
mov dword [ebp - 0xd44], ebx
mov dword [ebp - 0xd40], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003242d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x734]
call fcn.10017af7
mov dword [eax], 0xfff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003240e
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003244f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1144], 0x551fa4c8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10032436
xor eax, eax
push eax
lea ecx, [ebp - 0x734]
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
inc ecx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x734]
setl bl
call fcn.10017af7
xor esi, esi
inc esi
cmp ebx, dword [eax]
jl 0x1003248b
push esi
lea ecx, [ebp - 0x734]
call fcn.10017af7
cmp dword [eax], 0
je 0x10032498
xor eax, eax
cmp dword [ebp - 0x1140], eax
je 0x1003249a
inc eax
jmp 0x1003249a
xor eax, eax
neg eax
lea ecx, [ebp - 0x734]
mov dword [ebp - 0xd44], eax
or ebx, 0xffffffff
mov dword [ebp - 4], ebx
call fcn.10017adb
mov dword [ebp - 0x2c], edi
lea ecx, [ebp - 0x69c]
mov dword [ebp - 0x30], ebx
push 3
call fcn.10017a59
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0xd6c], ebx
mov dword [ebp - 0xd68], ebx
mov dword [ebp - 0xd64], ebx
mov dword [ebp - 0xd60], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10032516
push dword [ebp - 0x24]
lea ecx, [ebp - 0x69c]
call fcn.10017af7
mov dword [eax], 0xfff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100324f7
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10032538
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1158], 0x551fa4c8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1003251f
xor eax, eax
push eax
lea ecx, [ebp - 0x69c]
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
inc ecx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x69c]
setl bl
call fcn.10017af7
xor esi, esi
inc esi
cmp ebx, dword [eax]
jl 0x10032574
push esi
lea ecx, [ebp - 0x69c]
call fcn.10017af7
cmp dword [eax], 0
je 0x10032584
xor eax, eax
cmp dword [ebp - 0x1154], eax
je 0x10032586
xor esi, esi
inc eax
inc esi
jmp 0x10032586
xor eax, eax
neg eax
lea ecx, [ebp - 0x69c]
mov dword [ebp - 0xd64], eax
or dword [ebp - 4], 0xffffffff
call fcn.10017adb
mov dword [ebp - 0x18], 0x52061f6
push 2
pop ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], 0xe48d327c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x22
jge 0x100325f6
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100325e4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3c8], 0xc370
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100325cb
xor eax, eax
dec dword [ebp - 0x3c8]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x22
jl 0x100325c2
xor esi, esi
inc esi
mov dword [ebp - 0x34], esi
lea ecx, [ebp - 0x410]
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x40], 0xffff
push 3
call fcn.10017a59
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xa40]
mov dword [ebp - 0x48], 0xee4cff15
mov dword [ebp - 0x50], 0x627e80a
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003265f
push dword [ebp - 0x24]
lea ecx, [ebp - 0x410]
call fcn.10017af7
mov dword [eax], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10032640
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032678
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa40]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10032664
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
lea ecx, [ebp - 0x410]
setl dl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10017af7
xor ecx, ecx
cmp dword [eax], 0x130d
mov eax, 0xffff
sete cl
cmp ecx, eax
lea ecx, [ebp - 0x410]
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
xor eax, eax
push eax
call fcn.10017af7
imul ecx, dword [ebp - 0x10], 0xbb9
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x410]
setg dl
sub edx, 0x52fa814b
neg edx
sbb edx, edx
xor eax, eax
inc edx
push eax
mov dword [ebp - 0x2c], edx
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x410]
setg bl
call fcn.10017af7
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
xor esi, esi
mov dword [ebp - 0x2c], ecx
inc esi
push esi
lea ecx, [ebp - 0x410]
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x48]
setne bl
sub ebx, 0x6b379904
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp edx, eax
mov eax, dword [ebp - 0x40]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setge cl
xor edx, edx
cmp ecx, 0x8cff
setne dl
xor ebx, ebx
lea ecx, [ebp - 0x410]
cmp edx, eax
setne bl
xor eax, eax
push eax
call fcn.10017af7
lea ecx, [ebp - 0xa40]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x40]
mov esi, eax
xor eax, eax
cmp ebx, 0xfffffff9
sete al
xor edx, edx
cmp eax, ecx
mov ecx, dword [ebp - 0x40]
setge dl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0xa40]
setge al
mov dword [esi], eax
call fcn.10017adb
or ebx, 0xffffffff
lea ecx, [ebp - 0x410]
mov dword [ebp - 4], ebx
call fcn.10017adb
mov dword [ebp - 0x4c], edi
xor eax, eax
mov dword [ebp - 0x30], 1
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], al
je 0x100327ec
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10032806
push 0x21d3
push 0x13ce
push eax
call dword [sym.imp.GDI32.dll_OffsetRgn]
push 4
xor edi, edi
mov dword [ebp - 0x30], ebx
pop esi
inc edi
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 0x38], edi
push esi
call fcn.10017a59
lea eax, [ebp - 0x1224]
mov dword [ebp - 4], esi
movdqa xmm0, xmmword [0x10008200]
lea ecx, [ebp - 0x14bc]
push eax
lea eax, [ebp - 0x1234]
push eax
movdqu xmmword [ebp - 0x1234], xmm0
call fcn.10017b06
lea ecx, [ebp - 0x29d]
mov esi, eax
call fcn.100095d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x7e8]
push dword [esi]
call fcn.10017ab5
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10032896
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
mov dword [eax], 0xeb06
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032877
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
jne 0x10032bb9
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x190]
call fcn.10017a59
mov byte [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x34], 0xed680444
mov dword [ebp - 0x10], eax
jmp 0x100328d2
push dword [ebp - 0x10]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x190]
cmp dword [ebp - 0x10], ebx
jl 0x100328c4
push edi
call fcn.10017af7
and dword [eax], 0
jmp 0x100328fd
push edi
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x34], 0xfffffff9
call fcn.10017af7
inc dword [eax]
push edi
lea ecx, [ebp - 0x190]
call fcn.10017af7
cmp dword [eax], ebx
jle 0x100328e8
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10032a96
push 2
pop esi
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0xbd8]
mov dword [ebp - 0x18], 0x4d71b36c
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1003295a
push dword [ebp - 0x10]
lea ecx, [ebp - 0xbd8]
call fcn.10017af7
or dword [eax], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1003293f
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10032979
push 0x2287
push 0x1450
push 0x9e
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push ebx
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
push edi
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
xor ebx, ebx
cmp dword [eax], ebx
je 0x100329bd
push edi
lea ecx, [ebp - 0x190]
call fcn.10017af7
xor edx, edx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x190]
push edi
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
push 3
cmp dword [eax], ecx
lea ecx, [ebp - 0x7e8]
setle bl
call fcn.10017af7
lea ecx, [ebp - 0x190]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x34]
sub ecx, dword [eax]
jne 0x100329fd
mov eax, dword [ebp - 0x34]
xor eax, eax
lea ecx, [ebp - 0x1cc]
push eax
call fcn.10017af7
push edi
lea ecx, [ebp - 0x190]
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
push esi
cmp dword [eax], ecx
lea ecx, [ebp - 0x1cc]
setge bl
call fcn.10017af7
xor ecx, ecx
push esi
cmp ebx, dword [eax]
setg cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor edx, edx
add ecx, dword [ebp - 0x2c]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x18]
setle dl
xor ebx, ebx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x38]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.10017af7
push edi
lea ecx, [ebp - 0xbd8]
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 0x18], eax
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
lea ecx, [ebp - 0xbd8]
call fcn.10017adb
jmp 0x10032b9a
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
jne 0x10032b38
push eax
lea ecx, [ebp - 0x190]
call fcn.10017af7
push 2
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
xor edi, edi
lea ecx, [ebp - 0x190]
inc edi
push edi
cmp edi, dword [eax]
sbb esi, esi
inc esi
call fcn.10017af7
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp esi, ecx
mov ecx, dword [ebp - 0x14]
setle dl
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x38]
setg bl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
sub edx, ebx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x14]
jg 0x10032b0c
xor eax, eax
lea ecx, [ebp - 0x1cc]
push eax
call fcn.10017af7
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x190]
push edi
call fcn.10017af7
push ebx
lea ecx, [ebp - 0x1cc]
call fcn.10017af7
jmp 0x10032b3b
xor edi, edi
inc edi
xor eax, eax
lea ecx, [ebp - 0x190]
push eax
call fcn.10017af7
cmp dword [eax], 0
je 0x10032b51
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x1cc]
push ebx
call fcn.10017af7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x190]
push edi
call fcn.10017af7
push ebx
lea ecx, [ebp - 0x7e8]
call fcn.10017af7
xor ebx, ebx
lea ecx, [ebp - 0x7e8]
push 2
cmp dword [eax], 5
setl bl
call fcn.10017af7
xor ecx, ecx
cmp ebx, dword [eax]
sete cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x190]
mov byte [ebp - 4], 5
call fcn.10017adb
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
je 0x100328a3
or ebx, 0xffffffff
lea ecx, [ebp - 0x7e8]
call fcn.10017adb
lea ecx, [ebp - 0x1cc]
mov dword [ebp - 4], ebx
call fcn.10017adb
push 3
lea ecx, [ebp - 0x76c]
call fcn.10017a59
mov dword [ebp - 4], 8
xor eax, eax
push 0xfffffffffffffffe
pop ecx
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x40], 0x93e9323d
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 0x37bd55fd
mov dword [ebp - 0x30], 0x5a2f617a
cmp dword [ebp - 0x10], eax
je 0x10032c9c
mov dword [ebp - 0x18], 0xdd8d1303
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10032c89
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x40]
sub ecx, 0x348cc383
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, edx
setg al
cmp eax, dword [ebp - 0x10]
jne 0x10032c5b
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x10032c5d
inc eax
jmp 0x10032c5d
xor eax, eax
cmp eax, dword [ebp - 0x18]
jl 0x10032c6d
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10032c6d
mov edx, eax
jmp 0x10032c70
xor edx, edx
inc edx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x10032c87
xor edx, edx
inc edx
jmp 0x10032c8b
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
mov dword [ebp - 0x50], ecx
jmp 0x10032ca6
mov dword [ebp - 0x48], 0x8a92
inc dword [ebp - 0x48]
mov dword [ebp - 0xd3c], ebx
mov dword [ebp - 0xd38], ebx
mov dword [ebp - 0xd34], ebx
mov dword [ebp - 0xd30], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10032ce6
push dword [ebp - 0x24]
lea ecx, [ebp - 0x76c]
call fcn.10017af7
mov dword [eax], 0xfff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10032cc7
xor eax, eax
push 2
mov dword [ebp - 0x24], eax
pop edi
cmp dword [ebp - 0x24], edi
jge 0x10032d09
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x116c], 0x551fa4c8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10032cf1
xor eax, eax
push eax
lea ecx, [ebp - 0x76c]
call fcn.10017af7
mov ecx, dword [ebp - 0x4c]
xor ebx, ebx
inc ecx
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x76c]
setl bl
call fcn.10017af7
xor esi, esi
inc esi
cmp ebx, dword [eax]
jl 0x10032d44
push esi
lea ecx, [ebp - 0x76c]
call fcn.10017af7
cmp dword [eax], 0
je 0x10032d54
xor eax, eax
cmp dword [ebp - 0x1168], eax
je 0x10032d56
xor esi, esi
inc eax
inc esi
jmp 0x10032d56
xor eax, eax
neg eax
lea ecx, [ebp - 0x76c]
mov dword [ebp - 0xd34], eax
or dword [ebp - 4], 0xffffffff
call fcn.10017adb
mov dword [ebp - 0x18], 0x52061f6
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], 0xe48d327c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x22
jge 0x10032dc3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10032db1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48c], 0xc370
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10032d98
xor eax, eax
dec dword [ebp - 0x48c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x22
jl 0x10032d8f
xor esi, esi
inc esi
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x38], 0xfffd
push esi
call fcn.10017a59
push 9
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10032e0d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6b4]
call fcn.10017af7
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10032dee
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032e1c
mov dword [ebp - 0x38], 0x29be1d92
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
je 0x10032e12
mov dword [ebp - 0x38], 0xffffffeb
jmp 0x10032e87
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x10032e84
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x6b4]
push dword [ebp - 0x24]
call fcn.10017af7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x6b4]
mov esi, eax
call fcn.10017af7
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10032e77
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6b4]
call fcn.10017af7
cmp dword [eax], 0
jne 0x10032e7c
inc dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x18], eax
jle 0x10032e5f
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x10032e33
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], edi
jge 0x10032e2b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6b4]
call fcn.10017adb
xor esi, esi
lea ecx, [ebp - 0x488]
inc esi
mov ebx, 0xffff
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x40], ebx
push 3
call fcn.10017a59
mov dword [ebp - 4], 0xa
lea ecx, [ebp - 0xa58]
mov dword [ebp - 0x48], 0xee4cff15
mov dword [ebp - 0x50], 0x627e80a
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10032f0c
push dword [ebp - 0x24]
lea ecx, [ebp - 0x488]
call fcn.10017af7
mov dword [eax], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10032eed
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032f25
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa58]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10032f11
mov ecx, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp ecx, eax
lea ecx, [ebp - 0x488]
setl dl
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10017af7
xor ecx, ecx
cmp dword [eax], 0x130d
sete cl
cmp ecx, ebx
lea ecx, [ebp - 0x488]
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
xor eax, eax
push eax
call fcn.10017af7
imul ecx, dword [ebp - 0x10], 0xbb9
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x488]
setg dl
sub edx, 0x52fa814b
neg edx
sbb edx, edx
xor eax, eax
inc edx
push eax
mov dword [ebp - 0x2c], edx
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x488]
setg bl
call fcn.10017af7
xor ecx, ecx
cmp ebx, dword [eax]
setne cl
xor esi, esi
mov dword [ebp - 0x2c], ecx
inc esi
push esi
lea ecx, [ebp - 0x488]
call fcn.10017af7
mov ecx, dword [ebp - 0x2c]
xor ebx, ebx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x48]
setne bl
sub ebx, 0x6b379904
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp edx, eax
mov eax, dword [ebp - 0x40]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
setge cl
xor edx, edx
cmp ecx, 0x8cff
setne dl
xor ebx, ebx
cmp edx, eax
lea ecx, [ebp - 0x488]
setne bl
xor eax, eax
push eax
call fcn.10017af7
lea ecx, [ebp - 0xa58]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp ebx, 0xfffffff9
mov esi, eax
sete dl
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x40]
setge al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0xa58]
setge dl
mov dword [esi], edx
call fcn.10017adb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x488]
call fcn.10017adb
xor eax, eax
mov dword [ebp - 0x30], 1
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], al
je 0x1003308e
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x100330a8
push 0x21d3
push 0x13ce
push eax
call dword [sym.imp.GDI32.dll_OffsetRgn]
xor edi, edi
mov dword [ebp - 0x44], 0xd6b6
inc edi
lea ecx, [ebp - 0x1e4]
mov dword [ebp - 0x38], edi
push 4
call fcn.10017a59
lea eax, [ebp - 0x12e4]
mov dword [ebp - 4], 0xc
movdqa xmm0, xmmword [0x10008200]
lea ecx, [ebp - 0x1434]
push eax
lea eax, [ebp - 0x12f4]
push eax
movdqu xmmword [ebp - 0x12f4], xmm0
call fcn.10017b06
lea ecx, [ebp - 0x247]
mov esi, eax
call fcn.100095d3
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x980]
push dword [esi]
call fcn.10017ab5
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1003313e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
mov dword [eax], 0xeb06
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1003311f
xor eax, eax
mov dword [ebp - 0x38], eax
jmp 0x1003344f
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x184]
call fcn.10017a59
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x34], 0xed680444
mov dword [ebp - 0x10], eax
jmp 0x10033175
push dword [ebp - 0x10]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
cmp dword [ebp - 0x10], ebx
jl 0x10033167
push edi
call fcn.10017af7
and dword [eax], 0
jmp 0x100331a0
push edi
lea ecx, [ebp - 0x184]
mov dword [ebp - 0x34], 0xfffffff9
call fcn.10017af7
inc dword [eax]
push edi
lea ecx, [ebp - 0x184]
call fcn.10017af7
cmp dword [eax], ebx
jle 0x1003318b
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10033339
push 2
pop esi
mov dword [ebp - 0x48], edi
lea ecx, [ebp - 0xcd4]
mov dword [ebp - 0x18], 0x4d71b36c
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100331fd
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcd4]
call fcn.10017af7
or dword [eax], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100331e2
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x1003321c
push 0x2287
push 0x1450
push 0x9e
push eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push ebx
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
push edi
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
xor ebx, ebx
cmp dword [eax], ebx
je 0x10033260
push edi
lea ecx, [ebp - 0x184]
call fcn.10017af7
xor edx, edx
cmp dword [eax], ebx
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x184]
push edi
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
push 3
cmp dword [eax], ecx
lea ecx, [ebp - 0x980]
setle bl
call fcn.10017af7
lea ecx, [ebp - 0x184]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x34]
sub ecx, dword [eax]
jne 0x100332a0
mov eax, dword [ebp - 0x34]
xor eax, eax
lea ecx, [ebp - 0x1e4]
push eax
call fcn.10017af7
push edi
lea ecx, [ebp - 0x184]
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
push esi
cmp dword [eax], ecx
lea ecx, [ebp - 0x1e4]
setge bl
call fcn.10017af7
xor ecx, ecx
push esi
cmp ebx, dword [eax]
setg cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
xor edx, edx
add ecx, dword [ebp - 0x2c]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x18]
setle dl
xor ebx, ebx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x38]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.10017af7
push edi
lea ecx, [ebp - 0xcd4]
mov eax, dword [eax]
add eax, ebx
mov dword [ebp - 0x18], eax
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
lea ecx, [ebp - 0xcd4]
call fcn.10017adb
jmp 0x1003343d
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
jne 0x100333db
push eax
lea ecx, [ebp - 0x184]
call fcn.10017af7
push 2
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
xor edi, edi
lea ecx, [ebp - 0x184]
inc edi
push edi
cmp edi, dword [eax]
sbb esi, esi
inc esi
call fcn.10017af7
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp esi, ecx
mov ecx, dword [ebp - 0x14]
setle dl
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x38]
setg bl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setge dl
xor ecx, ecx
sub edx, ebx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x14]
jg 0x100333af
xor eax, eax
lea ecx, [ebp - 0x1e4]
push eax
call fcn.10017af7
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x184]
push edi
call fcn.10017af7
push ebx
lea ecx, [ebp - 0x1e4]
call fcn.10017af7
jmp 0x100333de
xor edi, edi
inc edi
xor eax, eax
lea ecx, [ebp - 0x184]
push eax
call fcn.10017af7
cmp dword [eax], 0
je 0x100333f4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x1e4]
push ebx
call fcn.10017af7
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x184]
push edi
call fcn.10017af7
push ebx
lea ecx, [ebp - 0x980]
call fcn.10017af7
xor ebx, ebx
lea ecx, [ebp - 0x980]
push 2
cmp dword [eax], 5
setl bl
call fcn.10017af7
xor ecx, ecx
cmp ebx, dword [eax]
sete cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 0xd
call fcn.10017adb
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
je 0x10033146
lea ecx, [ebp - 0x980]
call fcn.10017adb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e4]
call fcn.10017adb
mov dword [ebp - 0x30], 0xffffffff
xor eax, eax
push 0xfffffffffffffffe
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x40], 0x93e9323d
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x30], 0x37bd55fd
mov dword [ebp - 0x30], 0x5a2f617a
cmp dword [ebp - 0x10], eax
je 0x1003352b
mov dword [ebp - 0x18], 0xdd8d1303
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x1003351a
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x40]
sub ecx, 0x348cc383
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, edx
setg al
cmp eax, dword [ebp - 0x10]
jne 0x100334ec
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x100334ee
inc eax
jmp 0x100334ee
xor eax, eax
cmp eax, dword [ebp - 0x18]
jl 0x100334fe
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x100334fe
mov edx, eax
jmp 0x10033501
xor edx, edx
inc edx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x18]
test ecx, ecx
jne 0x10033518
xor esi, esi
inc esi
jmp 0x1003351c
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp eax, esi
setge cl
mov dword [ebp - 0x50], ecx
jmp 0x10033535
mov dword [ebp - 0x48], 0x8a92
inc dword [ebp - 0x48]
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x6cc]
call fcn.10017a59
xor edi, edi
mov dword [ebp - 4], 0x10
inc edi
lea ecx, [ebp - 0x4d0]
push edi
call fcn.10017a59
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x30], eax
push 5
pop ecx
mov dword [ebp - 0x2c], 0x1dfd9475
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], ecx
push 4
mov dword [ebp - 0x1c], eax
pop esi
cmp dword [ebp - 0x1c], esi
jge 0x100335a3
push 9
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x14b4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003358f
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x100335c9
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4d0]
call fcn.10017af7
mov dword [eax], 0x3fcb50bf
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100335ab
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x100335e5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x748], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100335d1
xor eax, eax
push eax
lea ecx, [ebp - 0x4d0]
call fcn.10017af7
and dword [eax], 0
jmp 0x10033679
mov dword [ebp - 0x30], esi
lea ecx, [ebp - 0xe94]
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], 0xfffffffc
push edi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1003363e
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe94]
call fcn.10017af7
mov dword [eax], 0x47d2038
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10033620
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10033657
push 0x14bb
push 0x18e0
call dword [sym.imp.KERNEL32.dll_Beep]
inc dword [ebp - 0x48]
lea ecx, [ebp - 0xe94]
mov byte [ebp - 4], 0x11
call fcn.10017adb
xor eax, eax
lea ecx, [ebp - 0x4d0]
push eax
call fcn.10017af7
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4d0]
push eax
call fcn.10017af7
cmp dword [eax], ebx
jle 0x100335f9
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x100336ca
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x4d0]
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x40]
mov esi, eax
xor eax, eax
cmp ecx, 0x7c39c9d9
setl al
xor edx, edx
add eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
cmp ecx, eax
setge dl
cmp edx, dword [esi]
jg 0x100336ca
xor eax, eax
jmp 0x100336cc
mov eax, edi
xor ecx, ecx
cmp eax, edi
mov eax, dword [ebp - 0x748]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14a8]
lea ecx, [ebp - 0x4d0]
setg dl
inc edx
neg edx
sbb edx, edx
inc edx
sub eax, edx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 0x10
call fcn.10017adb
mov dword [ebp - 0x30], 0xfffffffe
lea ecx, [ebp - 0xa70]
mov dword [ebp - 0x18], 0x34d8a94b
mov dword [ebp - 0x24], 0x35357f45
mov dword [ebp - 0x2c], 0xa0a5dec4
mov dword [ebp - 0x40], 0x13a3dbc5
mov dword [ebp - 0x34], 0xfb57
push ebx
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x10], eax
jmp 0x1003375a
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa70]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033746
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
neg edx
push edi
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xa70]
call fcn.10017af7
mov ecx, dword [ebp - 0x18]
mov edx, 0xfff9
sub edx, ecx
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x34]
setl bl
xor ecx, ecx
cmp ebx, eax
setne cl
sub ecx, 0x46cd
je 0x1003381a
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100337db
cmp dword [ebp - 0x34], eax
jne 0x100337e1
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffee
jl 0x100337d3
mov dword [ebp - 0x24], eax
jmp 0x10033812
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x1003380f
push eax
push eax
push 0x54f
push eax
push 0x497
push eax
push 0x52f
push 0x1804
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor eax, eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
jne 0x100337e6
jmp 0x10033827
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], 0xc2541761
lea ecx, [ebp - 0xa70]
mov byte [ebp - 4], 0x10
call fcn.10017adb
or esi, 0xffffffff
xor eax, eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], al
je 0x10033852
push eax
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10033862
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 0xd5c], esi
lea ecx, [ebp - 0x428]
push 2
mov dword [ebp - 0xd58], esi
pop ebx
mov dword [ebp - 0xd54], esi
mov dword [ebp - 0xd50], esi
mov dword [ebp - 0x24], esi
push ebx
call fcn.10017a59
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100338b7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x2ac], 0x3c8fc558
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003389e
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100338da
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x428]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100338bf
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10033a44
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x2c], 0x1b32e265
mov dword [ebp - 0x30], 0xc9bf5e4d
mov dword [ebp - 0x30], 0xa61940c9
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
xor eax, eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x10033a5b
mov dword [ebp - 0x30], 0x729694d2
lea ecx, [ebp - 0xbf0]
mov dword [ebp - 0x30], 0xd47941ce
mov dword [ebp - 0x30], 0x8b166c19
push 3
call fcn.10017a59
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10033965
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x117c], 0xa3691f6f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1003394d
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1003398d
push dword [ebp - 0x24]
lea ecx, [ebp - 0xbf0]
call fcn.10017af7
mov dword [eax], 0x91b76e1e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1003396e
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1003399f
mov dword [ebp - 0x48], 0x1867b8f5
inc dword [ebp - 0x48]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10033992
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp dword [ebp + eax*4 - 0x2ac], ecx
jne 0x10033a12
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x2ac], ecx
jne 0x100339e6
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x100339d2
cmp dword [ebp - 0x1178], eax
je 0x100339d2
mov ecx, edi
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x2ac]
inc dword [ebp - 0x40]
cmp eax, ecx
je 0x100339e6
xor eax, eax
jmp 0x100339e8
mov eax, edi
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0xbf0]
push ebx
call fcn.10017af7
mov esi, dword [ebp - 0x50]
xor edx, edx
imul esi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2a4]
cmp esi, ecx
setle dl
cmp edx, dword [eax]
jne 0x10033a12
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
imul ecx, dword [ebp + eax*4 - 0x2ac], 0x3832
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2ac], ecx
lea ecx, [ebp - 0xbf0]
mov byte [ebp - 4], 0x14
call fcn.10017adb
dec dword [ebp - 0x14]
jns 0x10033916
jmp 0x10033a5b
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10033a5b
push 0x256a
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_VirtualQueryEx]
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x428]
push edi
call fcn.10017af7
push edi
lea ecx, [ebp - 0x428]
mov dword [eax], esi
mov eax, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x2a8]
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0x428]
push eax
call fcn.10017af7
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2a8]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x2ac]
setle cl
add ecx, eax
mov eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
inc eax
cmp eax, ecx
jne 0x10033ad2
xor eax, eax
lea ecx, [ebp - 0x428]
push eax
call fcn.10017af7
cmp dword [eax], 0
je 0x10033ad2
mov eax, edi
jmp 0x10033ad4
xor eax, eax
add eax, 0xffff584e
je 0x10033ae9
xor eax, eax
lea ecx, [ebp - 0x428]
push eax
call fcn.10017af7
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x428]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10017af7
lea ecx, [ebp - 0x428]
mov eax, dword [eax]
add dword [ebp - 0x10], eax
mov byte [ebp - 4], 0x10
call fcn.10017adb
push 3
pop esi
mov dword [ebp - 0x18], 0xa48bbca6
lea ecx, [ebp - 0x800]
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10033b4d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8c], 0xfffffff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10033b35
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033b66
push dword [ebp - 0x24]
lea ecx, [ebp - 0x800]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033b52
mov dword [ebp - 0x18], 0x17
cmp dword [ebp - 0x18], 0x16
jl 0x10033da4
mov dword [ebp - 0x48], 0xffffffff
lea ecx, [ebp - 0x744]
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10033bb5
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9c], 0xdc4b4e12
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10033b9d
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033bd1
push dword [ebp - 0x24]
lea ecx, [ebp - 0x744]
call fcn.10017af7
mov dword [eax], 0x87e52695
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033bba
mov dword [ebp - 0x98], 0x17
jmp 0x10033c8c
push esi
lea ecx, [ebp - 0x5e4]
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x10], eax
jmp 0x10033c0d
push dword [ebp - 0x10]
call fcn.10017af7
mov dword [eax], 0x77ab3921
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x5e4]
cmp dword [ebp - 0x10], esi
jl 0x10033bfc
push ebx
call fcn.10017af7
mov dword [eax], ebx
jmp 0x10033c67
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10033c47
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x15bc], 0xfe64fd9e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033c2f
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10033c54
cmp dword [ebp - 0x18], eax
jne 0x10033c59
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x10033c4c
push ebx
lea ecx, [ebp - 0x5e4]
call fcn.10017af7
inc dword [eax]
push ebx
lea ecx, [ebp - 0x5e4]
call fcn.10017af7
cmp dword [eax], ebx
jg 0x10033c22
lea ecx, [ebp - 0x5e4]
mov byte [ebp - 4], 0x17
call fcn.10017adb
dec dword [ebp - 0x98]
cmp dword [ebp - 0x98], 0xffffffe2
jl 0x10033be5
xor eax, eax
cmp dword [ebp - 0x9c], eax
je 0x10033d22
mov ecx, dword [ebp - 0x9c]
xor edx, edx
mov eax, dword [ebp - 0x98]
cmp ecx, eax
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x8c]
setg dl
mov eax, dword [ebp - 0x18]
imul ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, 0xf9031ea0
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x98]
cmp edx, 0xde905f4d
setne cl
sub eax, ecx
lea ecx, [ebp - 0x744]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x8c]
xor eax, eax
push eax
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0x744]
push eax
call fcn.10017af7
mov eax, dword [ebp - 0x8c]
neg eax
sbb eax, eax
neg eax
add eax, 0x3b7d
je 0x10033d3b
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x8c]
lea ecx, [ebp - 0x744]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x8c]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x800]
mov eax, dword [ebp - 0x9c]
setne dl
xor ebx, ebx
cmp eax, edx
setl bl
xor eax, eax
push eax
call fcn.10017af7
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], 0x16
mov dword [eax], ebx
call fcn.10017adb
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
push 2
pop ebx
jge 0x10033b7c
xor eax, eax
lea ecx, [ebp - 0x800]
push eax
call fcn.10017af7
lea ecx, [ebp - 0x800]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov byte [ebp - 4], 0x10
call fcn.10017adb
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033de4
push dword [ebp - 0x24]
lea ecx, [ebp - 0x6cc]
call fcn.10017af7
mov dword [eax], 0xfff9
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033dcd
push esi
lea ecx, [ebp - 0xcb0]
call fcn.10017a59
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x18], 0x565e08cc
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x30], 0x8f928d9b
mov dword [ebp - 0x30], 0x4129b857
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xf7c295a5
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033e4e
push dword [ebp - 0x24]
lea ecx, [ebp - 0xcb0]
call fcn.10017af7
mov dword [eax], 0x334
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033e30
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033e6e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x161c], 0x9b37d02
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033e56
xor eax, eax
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x10033ed1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033e92
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2f4], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033e7e
xor eax, eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], ebx
jg 0x10033ecc
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0xcb0]
call fcn.10017af7
cmp dword [eax], 0
jne 0x10033eca
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x2f0]
cmp dword [ebp - 0x2f0], ebx
jle 0x10033ea0
xor eax, eax
dec dword [ebp - 0x14]
jns 0x10033e76
mov dword [ebp - 0x18], eax
jmp 0x10033fd9
mov dword [ebp - 0x30], 0x2906c902
lea ecx, [ebp - 0x1058]
mov dword [ebp - 0x48], 0x84bc
mov dword [ebp - 0x30], 0xffffffff
push ebx
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x1a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033f23
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1058]
call fcn.10017af7
or dword [eax], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033f08
xor eax, eax
inc dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xd
jne 0x10033fc7
jmp 0x10033f37
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xa88]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xd68f985
mov dword [ebp - 0x30], edi
push esi
call fcn.10017a59
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10033f7b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x162c], 0x1c77dcd
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10033f62
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jge 0x10033f9d
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa88]
call fcn.10017af7
mov dword [eax], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10033f83
xor eax, eax
push eax
lea ecx, [ebp - 0xa88]
call fcn.10017af7
lea ecx, [ebp - 0xa88]
dec dword [eax]
mov byte [ebp - 4], 0x1a
call fcn.10017adb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xd
je 0x10033f35
lea ecx, [ebp - 0x1058]
mov byte [ebp - 4], 0x19
call fcn.10017adb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1b
jne 0x10033ed9
lea ecx, [ebp - 0xcb0]
mov byte [ebp - 4], 0x10
call fcn.10017adb
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10034014
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1190], 0x551fa4c8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10033ffc
xor eax, eax
mov dword [ebp - 0x30], 0x9cec79e6
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x1003405d
push 0x10cc
push eax
push 0x17ef
push 0x1d6
push 0x1b95
push eax
push 0x8de
push 0x1c48
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
xor eax, eax
push eax
lea ecx, [ebp - 0x6cc]
call fcn.10017af7
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
inc ecx
push 2
cmp ecx, dword [eax]
lea ecx, [ebp - 0x6cc]
setl bl
call fcn.10017af7
cmp ebx, dword [eax]
jl 0x10034096
push edi
lea ecx, [ebp - 0x6cc]
call fcn.10017af7
cmp dword [eax], 0
je 0x100340a4
xor eax, eax
cmp dword [ebp - 0x118c], eax
je 0x100340a6
mov eax, edi
jmp 0x100340a6
xor eax, eax
neg eax
lea ecx, [ebp - 0x6cc]
mov dword [ebp - 0xd54], eax
or esi, 0xffffffff
mov dword [ebp - 4], esi
call fcn.10017adb
mov dword [ebp - 0x18], 0x52061f6
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x18], 0xe48d327c
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003410a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10034101
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3d8], 0xc370
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100340e9
xor eax, eax
dec dword [ebp - 0x3d8]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x22
jl 0x100340e1
mov ebx, 0xfffd
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x38], ebx
lea ecx, [ebp - 0x78c]
push edi
call fcn.10017a59
xor eax, eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10034156
push dword [ebp - 0x10]
lea ecx, [ebp - 0x78c]
call fcn.10017af7
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034138
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10034165
mov dword [ebp - 0x38], 0x29be1d92
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
je 0x1003415b
mov dword [ebp - 0x38], 0xffffffeb
cmp dword [ebp - 0x38], 2
jl 0x100341dd
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x100341d1
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x78c]
push dword [ebp - 0x24]
call fcn.10017af7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x78c]
mov esi, eax
call fcn.10017af7
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100341c4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x78c]
call fcn.10017af7
cmp dword [eax], 0
jne 0x100341c9
inc dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x18], eax
jle 0x100341ac
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x10034180
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jge 0x10034178
or esi, 0xffffffff
lea ecx, [ebp - 0x78c]
mov dword [ebp - 4], esi
call fcn.10017adb
mov dword [ebp - 0x48], esi
lea ecx, [ebp - 0xeac]
mov dword [ebp - 0x40], 0x940c9ba5
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], 0xa82bc906
push 4
call fcn.10017a59
mov dword [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x44], 0x4d25
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10034242
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003422d
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10034260
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x167c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1003424b
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x10034285
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xeac]
call fcn.10017af7
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10034269
xor eax, eax
mov dword [ebp - 0x64], 0x14
cmp dword [ebp - 0x64], 0xfffffff9
jne 0x1003437f
jmp 0x1003429a
xor eax, eax
mov dword [ebp - 0x40], 0xb821342f
mov dword [ebp - 0x34], 0x3ca3691f
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x4c], 0xe7a32987
mov dword [ebp - 0x10], eax
jmp 0x100342cc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10f4], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100342bb
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
sub ecx, 0xfff9
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xffff1c36
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x34]
jge 0x1003430c
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x64]
cmp eax, edi
mov eax, dword [ebp - 0x34]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
cmp eax, 0x2496
jne 0x1003434a
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x1003437f
jmp 0x10034372
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x30], 0x8d679bdd
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0xc83b9135
mov dword [ebp - 0x30], 0xf18b0119
dec dword [ebp - 0x4c]
dec dword [ebp - 0x64]
cmp dword [ebp - 0x64], 0xfffffff9
je 0x10034298
dec dword [ebp - 0x44]
lea ecx, [ebp - 0xeac]
mov dword [ebp - 4], esi
call fcn.10017adb
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x38], ebx
push edi
call fcn.10017a59
xor eax, eax
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100343d1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x61c]
call fcn.10017af7
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100343b3
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100343e0
mov dword [ebp - 0x38], 0x29be1d92
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
je 0x100343d6
mov dword [ebp - 0x38], 0xffffffeb
cmp dword [ebp - 0x38], 2
jl 0x10034458
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x1003444c
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x61c]
push dword [ebp - 0x24]
call fcn.10017af7
push dword [ebp - 0x24]
lea ecx, [ebp - 0x61c]
mov esi, eax
call fcn.10017af7
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003443f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x61c]
call fcn.10017af7
cmp dword [eax], 0
jne 0x10034444
inc dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x18], eax
jle 0x10034427
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x100343fb
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jge 0x100343f3
or esi, 0xffffffff
lea ecx, [ebp - 0x61c]
mov dword [ebp - 4], esi
call fcn.10017adb
push edi
lea ecx, [ebp - 0xd4]
call fcn.10017a59
mov dword [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x24], 0x74952f34
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], 0x6de6b933
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100344b5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd4]
call fcn.10017af7
mov dword [eax], 0x3948b081
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034497
xor eax, eax
push eax
lea ecx, [ebp - 0xd4]
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
lea ecx, [ebp - 0xd4]
mov esi, dword [eax]
xor eax, eax
push eax
sub esi, 8
call fcn.10017af7
xor ebx, ebx
lea ecx, [ebp - 0xd4]
cmp dword [eax], esi
setl bl
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp ebx, ecx
setge dl
xor ecx, ecx
cmp edx, dword [eax]
setl cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x34]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xd4]
setne bl
xor eax, eax
push eax
call fcn.10017af7
mov eax, dword [eax]
add eax, ebx
je 0x10034556
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
cmp dword [eax], 0
je 0x10034556
mov esi, edi
xor eax, eax
jmp 0x1003455a
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xd4]
call fcn.10017af7
xor ecx, ecx
cmp esi, dword [eax]
setg cl
xor eax, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffeb
jl 0x100346e1
jmp 0x100345b3
xor eax, eax
mov dword [ebp - 0x4c], 0x55584e2b
mov dword [ebp - 0x48], 0x4e266bc5
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x10], eax
jmp 0x100345e1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbc], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100345d4
mov eax, dword [ebp - 0xbc]
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x100346ae
mov eax, dword [ebp - 0xbc]
lea ecx, [ebp - 0xd4]
xor eax, eax
push eax
call fcn.10017af7
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 0x38]
xor eax, eax
push eax
call fcn.10017af7
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp ecx, 0x42c8cda
setne dl
xor ecx, ecx
cmp edx, dword [eax]
mov eax, dword [ebp - 0xbc]
setl cl
sub ecx, eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x4c], eax
xor eax, eax
push eax
call fcn.10017af7
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
jne 0x10034685
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
xor eax, eax
lea ecx, [ebp - 0xd4]
push eax
call fcn.10017af7
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
cmp eax, 0xe9505c0
setge cl
cmp ecx, dword [ebp - 0xbc]
jl 0x100346ac
mov edx, edi
jmp 0x100346b0
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0xbc]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffeb
jge 0x100345b1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4]
call fcn.10017adb
xor eax, eax
mov dword [ebp - 0x30], edi
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], al
je 0x10034706
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
mov byte [ebp - 0x1d], al
cmp byte [ebp - 0x1d], 0
je 0x10034720
push 0x21d3
push 0x13ce
push eax
call dword [sym.imp.GDI32.dll_OffsetRgn]
push 2
mov dword [ebp - 0x1c], 0x52061f6
lea ecx, [ebp - 0xaa0]
pop ebx
mov dword [ebp - 0x24], 0xfffb
mov dword [ebp - 0x34], 0x17be9fb1
mov dword [ebp - 0x10], 0xe5809974
push ebx
call fcn.10017a59
mov dword [ebp - 4], 0x20
xor eax, eax
mov dword [ebp - 0x48], 0x90b1c5ad
mov dword [ebp - 0x2c], 0x40452383
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034788
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xaa0]
call fcn.10017af7
mov dword [eax], 0xe83adeb9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003476a
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100347a8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x11a4], 0xa75e3aa9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10034790
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100347be
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x49c], 0xbde5156b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100347ad
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
test eax, eax
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
push 0xfffffffffffffff9
setl cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
pop ecx
setge dl
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub ecx, eax
jne 0x10034807
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10034809
mov eax, edi
mov dword [ebp - 0x10], eax
lea ecx, [ebp - 0xaa0]
cmp dword [ebp - 0x10], edi
sbb eax, eax
xor ebx, ebx
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
cmp eax, 0xb834
setl bl
dec ebx
sub ebx, dword [ebp - 0x24]
neg ebx
sbb ebx, ebx
xor eax, eax
push eax
inc ebx
call fcn.10017af7
xor ecx, ecx
mov dword [eax], ebx
mov dword [ebp - 0x11a0], ebx
mov eax, dword [ebp - 0x24]
cmp eax, ebx
setg cl
xor eax, eax
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], eax
je 0x1003485d
mov ecx, edi
cmp dword [ebp - 0x24], eax
jne 0x1003485f
mov ecx, eax
mov eax, dword [ebp - 0x24]
add ecx, 0xa
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x49c], ecx
mov eax, dword [ebp - 0x24]
sub ecx, eax
cmp ecx, dword [ebp - 0x24]
jge 0x10034892
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x49c], eax
je 0x10034894
mov ecx, edi
mov eax, dword [ebp - 0x24]
imul eax, ecx
lea ecx, [ebp - 0xaa0]
add eax, 0x4069a3e2
mov dword [ebp - 0x2c], eax
or dword [ebp - 4], 0xffffffff
call fcn.10017adb
mov dword [ebp - 0x2c], 2
lea ecx, [ebp - 0x7d0]
mov dword [ebp - 0x1c], 0x236432a2
push 2
call fcn.10017a59
xor eax, eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x100348f7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2dc], 0x51f20002
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100348de
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10034913
push dword [ebp - 0x24]
lea ecx, [ebp - 0x7d0]
call fcn.10017af7
mov dword [eax], 0x52f54c42
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100348fc
mov dword [ebp - 0x1c], 0x55bb2c21
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2d8], eax
test eax, eax
je 0x1003495f
mov dword [ebp - 0x1c], 0xfffffffb
xor eax, eax
cmp dword [ebp - 0x1c], 0x11
jg 0x10034946
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0xb8db370c
mov dword [ebp - 0x38], 7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1003498f