Function at 0x1003248c
Capabilities:
Connect pipe
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10073685
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xe18
push esi
push edi
mov dword [ebp - 0x118], 1
mov dword [ebp - 0xc44], 0xffffffff
mov dword [ebp - 0x44], 0
jmp 0x100324d0
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x100324e6
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xbd0], 0xa8eac8b1
jmp 0x100324c9
mov dword [ebp - 0x44], 0
jmp 0x100324f6
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1003250c
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x39c], 1
jmp 0x100324ef
mov dword [ebp - 0x118], 0
jmp 0x10032525
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jg 0x1003254a
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0xbd0]
mov dword [ebp + ecx*4 - 0xbd0], eax
jmp 0x10032518
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x39c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x39c], eax
mov dword [ebp - 0x148], 1
mov dword [ebp - 0xb00], 0xffffffff
mov dword [ebp - 0x6c], 0
jmp 0x10032589
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1003259f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xbe0], 0xa8eac8b1
jmp 0x10032582
mov dword [ebp - 0x6c], 0
jmp 0x100325af
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x100325c5
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x6e4], 1
jmp 0x100325a8
mov dword [ebp - 0x148], 0
jmp 0x100325de
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jg 0x10032603
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0x148]
mov eax, dword [ebp + eax*4 - 0xbe0]
mov dword [ebp + ecx*4 - 0xbe0], eax
jmp 0x100325d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6e4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6e4], eax
mov dword [ebp - 0x2cc], 0xb0647dc4
mov dword [ebp - 0x1ac], 0x44555950
mov dword [ebp - 0xb08], 0x6085
push 2
lea ecx, [ebp - 0xa5c]
call fcn.10024d89
and dword [ebp - 4], 0
mov dword [ebp - 0x28c], 0xf58aae07
mov dword [ebp - 0x7d8], 0x9634d71b
mov dword [ebp - 0x4c], 0
jmp 0x10032671
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10032687
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xe24], 0x4d9edbda
jmp 0x1003266a
mov dword [ebp - 0x4c], 0
jmp 0x10032697
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x100326b3
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xa5c]
call fcn.10024e10
mov dword [eax], 0x71a
jmp 0x10032690
cmp dword [ebp - 0x2cc], 3
ja 0x100326c8
mov dword [ebp - 0x300], 1
jmp 0x100326cf
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x2cc], 0
jne 0x10032777
mov eax, dword [ebp - 0x1ac]
inc eax
inc eax
cmp eax, 0xd23c
jge 0x100326f7
mov dword [ebp - 0x2f0], 1
jmp 0x100326fe
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
add eax, 0x6497
mov dword [ebp - 0x6ec], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6ec]
mov dword [ebp + eax - 0xe24], ecx
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 6
je 0x1003274c
mov eax, 0xdaff
test eax, eax
je 0x1003274c
mov dword [ebp - 0x2f8], 1
jmp 0x10032753
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
cmp eax, dword [ebp - 0x2f8]
jg 0x10032777
and dword [ebp - 0x6f4], 0
jmp 0x10032781
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0x2cc]
cmp dword [ebp - 0x6f4], eax
jge 0x1003279b
mov dword [ebp - 0x6fc], 1
jmp 0x100327a2
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x300]
sub eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x7d8], eax
push 1
lea ecx, [ebp - 0xa5c]
call fcn.10024e10
mov eax, dword [eax]
mov dword [ebp - 0x1ac], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa5c]
call fcn.10024e0b
mov dword [ebp - 0x1b4], 0xf6af1124
mov dword [ebp - 0xb10], 0xffffffff
push 2
lea ecx, [ebp - 0xbf0]
call fcn.10024d89
mov dword [ebp - 4], 1
mov dword [ebp - 0x20c], 0
jmp 0x10032819
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1003283b
push dword [ebp - 0x20c]
lea ecx, [ebp - 0xbf0]
call fcn.10024e10
mov dword [eax], 0xfffffff8
jmp 0x1003280c
mov dword [ebp - 0x1b4], 6
jmp 0x10032854
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xffffffef
jge 0x10032c14
mov dword [ebp - 0x88], 0xffffffff
mov dword [ebp - 0x330], 1
mov dword [ebp - 0x74], 0
jmp 0x10032885
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1003289b
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x890], 0x91e29ea4
jmp 0x1003287e
mov dword [ebp - 0x74], 0
jmp 0x100328ab
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100328c1
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x8a0], 0xfffffff8
jmp 0x100328a4
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 0
jmp 0x100328e7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jg 0x10032c0f
mov dword [ebp - 0x15c], 0xfca86293
mov dword [ebp - 0xb18], 0xfffffffa
mov dword [ebp - 0x23c], 0
jmp 0x10032921
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 4
jge 0x1003293d
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0xd08], 0x9a22db78
jmp 0x10032914
cmp dword [ebp - 0x88], 0
je 0x10032be0
mov dword [ebp - 0xe0], 0xfffffffb
mov dword [ebp - 0x714], 0xffff
mov dword [ebp - 0x120], 6
push 2
lea ecx, [ebp - 0x9cc]
call fcn.10024d89
mov byte [ebp - 4], 2
mov dword [ebp - 0x1bc], 0
jmp 0x10032992
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x100329b4
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0x9cc]
call fcn.10024e10
mov dword [eax], 1
jmp 0x10032985
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xd08]
cmp dword [ebp - 0xe0], eax
jne 0x100329d5
mov dword [ebp - 0x318], 1
jmp 0x100329dc
and dword [ebp - 0x318], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd08], 0
jne 0x10032a04
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x890], 0
jne 0x10032a04
and dword [ebp - 0x308], 0
jmp 0x10032a0e
mov dword [ebp - 0x308], 1
cmp dword [ebp - 0x308], 0x53fc
jg 0x10032a26
mov dword [ebp - 0x704], 1
jmp 0x10032a2d
and dword [ebp - 0x704], 0
cmp dword [ebp - 0x704], 0x4593f6a0
je 0x10032a4b
cmp dword [ebp - 0xe0], 0
jne 0x10032a4b
and dword [ebp - 0x310], 0
jmp 0x10032a55
mov dword [ebp - 0x310], 1
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xe0], eax
je 0x10032a93
mov dword [ebp - 0x71c], 1
jmp 0x10032a9a
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xd08], 0x26d8f9c3
mov eax, 0xc312fbb6
cmp eax, 0x26d8f9c3
jbe 0x10032ac3
mov dword [ebp - 0x320], 1
jmp 0x10032aca
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xa3d8
jle 0x10032ae2
mov dword [ebp - 0x724], 1
jmp 0x10032ae9
and dword [ebp - 0x724], 0
cmp dword [ebp - 0x724], 0xfff7
je 0x10032b01
mov dword [ebp - 0x328], 1
jmp 0x10032b08
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x15c], 0
jmp 0x10032b2d
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 3
jg 0x10032bcf
mov dword [ebp - 0xe0], 0
jmp 0x10032b53
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jg 0x10032bca
mov dword [ebp - 0x120], 0
jmp 0x10032b75
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jg 0x10032bc5
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x10032b9f
push 0
push 0x23f9
push 0
call dword [sym.imp.GDI32.dll_GetRegionData]
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10024e10
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x72c]
mov dword [ecx], eax
jmp 0x10032b68
jmp 0x10032b46
jmp 0x10032b20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9cc]
call fcn.10024e0b
jmp 0x10032bfd
mov dword [ebp - 0x898], 0x5708880d
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x898]
mov dword [ebp + eax - 0x8a0], ecx
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
jmp 0x100328da
jmp 0x10032847
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf0]
call fcn.10024e0b
mov dword [ebp - 0x150], 0x4ccb63e8
mov dword [ebp - 0x734], 0xe28fdeb7
push 1
lea ecx, [ebp - 0x928]
call fcn.10024d89
mov dword [ebp - 4], 3
mov dword [ebp - 0x744], 0xa329ef4a
mov dword [ebp - 0x8a8], 0xfffffff8
mov dword [ebp - 0x214], 0
jmp 0x10032c78
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x10032c97
push dword [ebp - 0x214]
lea ecx, [ebp - 0x928]
call fcn.10024e10
or dword [eax], 0xffffffff
jmp 0x10032c6b
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x10032cbd
push 0
push 0x1a88
push 0xaa3
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0x734], 0x94f9
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x734], eax
jge 0x10032ced
mov dword [ebp - 0x338], 1
jmp 0x10032cf4
and dword [ebp - 0x338], 0
mov esi, dword [ebp - 0x150]
add esi, dword [ebp - 0x338]
push 0
lea ecx, [ebp - 0x928]
call fcn.10024e10
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x928]
call fcn.10024e10
mov ecx, dword [ebp - 0x150]
cmp dword [eax], ecx
jle 0x10032d32
mov dword [ebp - 0x73c], 1
jmp 0x10032d39
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0x10b9
jle 0x10032d57
mov eax, 0x5256ee97
test eax, eax
jne 0x10032d57
and dword [ebp - 0x340], 0
jmp 0x10032d61
mov dword [ebp - 0x340], 1
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x340]
sub eax, dword [ebp - 0x150]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x8a8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x928]
call fcn.10024e0b
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x1c4], 0
jmp 0x10032db7
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jge 0x10032dd3
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0xb30], 0xfffffff9
jmp 0x10032daa
mov dword [ebp - 0x94], 0
jmp 0x10032dec
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jl 0x10032e1f
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10032e1d
push 0x12c0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x10032ddf
mov dword [ebp - 0x94], 0
jmp 0x10032e38
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x10032e5b
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10032e59
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x10032e2b
mov dword [ebp - 0x128], 1
mov dword [ebp - 0xb38], 0xffffffff
mov dword [ebp - 0x54], 0
jmp 0x10032e7f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x10032e95
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xc00], 0xa8eac8b1
jmp 0x10032e78
mov dword [ebp - 0x54], 0
jmp 0x10032ea5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10032ebb
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x348], 1
jmp 0x10032e9e
mov dword [ebp - 0x128], 0
jmp 0x10032ed4
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x10032ef9
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x128]
mov eax, dword [ebp + eax*4 - 0xc00]
mov dword [ebp + ecx*4 - 0xc00], eax
jmp 0x10032ec7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x348]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x348], eax
mov dword [ebp - 0x294], 0x365653d4
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10032f3f
push 0x1bf9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [ebp - 0x294], 1
je 0x10032f54
mov dword [ebp - 0x74c], 1
jmp 0x10032f5b
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0x76427603
jge 0x10032f73
mov dword [ebp - 0x8b0], 1
jmp 0x10032f7a
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xb40], eax
cmp dword [ebp - 0x294], 0
je 0x10032fa9
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10032fa7
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x10032fee
mov dword [ebp - 0x350], 0x1654
mov dword [ebp - 0x914], 0x969ac54c
cmp dword [ebp - 0x350], 0
jne 0x10032fd8
cmp dword [ebp - 0x350], 0
jne 0x10032fd8
and dword [ebp - 0x754], 0
jmp 0x10032fe2
mov dword [ebp - 0x754], 1
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x914], eax
mov dword [ebp - 0x29c], 0xb0647dc4
mov dword [ebp - 0x254], 0x44555950
mov dword [ebp - 0xb48], 0x6085
push 2
lea ecx, [ebp - 0xa44]
call fcn.10024d89
mov dword [ebp - 4], 4
mov dword [ebp - 0x2bc], 0xf58aae07
mov dword [ebp - 0x91c], 0x9634d71b
mov dword [ebp - 0x7c], 0
jmp 0x10033044
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1003305a
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xddc], 0x4d9edbda
jmp 0x1003303d
mov dword [ebp - 0x7c], 0
jmp 0x1003306a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10033086
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xa44]
call fcn.10024e10
mov dword [eax], 0x71a
jmp 0x10033063
cmp dword [ebp - 0x29c], 3
ja 0x1003309b
mov dword [ebp - 0x368], 1
jmp 0x100330a2
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x29c], 0
jne 0x1003314a
mov eax, dword [ebp - 0x254]
inc eax
inc eax
cmp eax, 0xd23c
jge 0x100330ca
mov dword [ebp - 0x358], 1
jmp 0x100330d1
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x358]
add eax, 0x6497
mov dword [ebp - 0x75c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x75c]
mov dword [ebp + eax - 0xddc], ecx
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 6
je 0x1003311f
mov eax, 0xdaff
test eax, eax
je 0x1003311f
mov dword [ebp - 0x360], 1
jmp 0x10033126
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x2bc]
cmp eax, dword [ebp - 0x360]
jg 0x1003314a
and dword [ebp - 0x764], 0
jmp 0x10033154
mov dword [ebp - 0x764], 1
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x764], eax
jge 0x1003316e
mov dword [ebp - 0x76c], 1
jmp 0x10033175
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x368]
sub eax, dword [ebp - 0x76c]
mov dword [ebp - 0x91c], eax
push 1
lea ecx, [ebp - 0xa44]
call fcn.10024e10
mov eax, dword [eax]
mov dword [ebp - 0x254], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa44]
call fcn.10024e0b
mov dword [ebp - 0x2dc], 0x365653d4
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x100331d6
push 0x1bf9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [ebp - 0x2dc], 1
je 0x100331eb
mov dword [ebp - 0x370], 1
jmp 0x100331f2
and dword [ebp - 0x370], 0
cmp dword [ebp - 0x370], 0x76427603
jge 0x1003320a
mov dword [ebp - 0x888], 1
jmp 0x10033211
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xb50], eax
cmp dword [ebp - 0x2dc], 0
je 0x10033240
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1003323e
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x10033285
mov dword [ebp - 0x774], 0x1654
mov dword [ebp - 0x83c], 0x969ac54c
cmp dword [ebp - 0x774], 0
jne 0x1003326f
cmp dword [ebp - 0x774], 0
jne 0x1003326f
and dword [ebp - 0x77c], 0
jmp 0x10033279
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x83c], eax
mov dword [ebp - 0x2c4], 0xb0647dc4
mov dword [ebp - 0x1cc], 0x44555950
mov dword [ebp - 0xb58], 0x6085
push 2
lea ecx, [ebp - 0x9d8]
call fcn.10024d89
mov dword [ebp - 4], 5
mov dword [ebp - 0x2a4], 0xf58aae07
mov dword [ebp - 0x7e8], 0x9634d71b
mov dword [ebp - 0x5c], 0
jmp 0x100332db
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100332f1
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xe04], 0x4d9edbda
jmp 0x100332d4
mov dword [ebp - 0x5c], 0
jmp 0x10033301
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1003331d
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x9d8]
call fcn.10024e10
mov dword [eax], 0x71a
jmp 0x100332fa
cmp dword [ebp - 0x2c4], 3
ja 0x10033332
mov dword [ebp - 0x68c], 1
jmp 0x10033339
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x2c4], 0
jne 0x100333e1
mov eax, dword [ebp - 0x1cc]
inc eax
inc eax
cmp eax, 0xd23c
jge 0x10033361
mov dword [ebp - 0x37c], 1
jmp 0x10033368
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
add eax, 0x6497
mov dword [ebp - 0x380], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax - 0xe04], ecx
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 6
je 0x100333b6
mov eax, 0xdaff
test eax, eax
je 0x100333b6
mov dword [ebp - 0x588], 1
jmp 0x100333bd
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x2a4]
dec eax
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
cmp eax, dword [ebp - 0x588]
jg 0x100333e1
and dword [ebp - 0x388], 0
jmp 0x100333eb
mov dword [ebp - 0x388], 1
mov eax, dword [ebp - 0x2c4]
cmp dword [ebp - 0x388], eax
jge 0x10033405
mov dword [ebp - 0x390], 1
jmp 0x1003340c
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x68c]
sub eax, dword [ebp - 0x390]
mov dword [ebp - 0x7e8], eax
push 1
lea ecx, [ebp - 0x9d8]
call fcn.10024e10
mov eax, dword [eax]
mov dword [ebp - 0x1cc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d8]
call fcn.10024e0b
mov dword [ebp - 0xb60], 0xfffffff6
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1003346b
push 0x6d0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1003348a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push 2
lea ecx, [ebp - 0x78c]
call fcn.10024d89
mov dword [ebp - 4], 6
mov dword [ebp - 0x8c4], 1
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0x1d4], 0xfffffffe
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x750], 0x10a83afd
mov dword [ebp - 0x984], 0xfc353271
mov dword [ebp - 0x980], 0xfc353271
mov dword [ebp - 0x97c], 0xfc353271
mov dword [ebp - 0x978], 0xfc353271
lea ecx, [ebp - 0x269]
call fcn.10009032
push eax
lea eax, [ebp - 0x974]
push eax
lea eax, [ebp - 0x984]
push eax
lea ecx, [ebp - 0xdc4]
call fcn.10024e1f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc10]
call fcn.10024de5
mov byte [ebp - 4], 7
mov dword [ebp - 0x5b0], 0x1c76
mov dword [ebp - 0x398], 0xbeba
mov dword [ebp - 0x84], 0
jmp 0x1003355e
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1003357d
push dword [ebp - 0x84]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
and dword [eax], 0
jmp 0x10033551
mov dword [ebp - 0x84], 0
jmp 0x10033596
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x100335af
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x28], 0
jmp 0x10033589
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x28], 1
jmp 0x100335d4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x28], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jl 0x10033a0e
mov dword [ebp - 0x270], 0xcf865116
mov dword [ebp - 0xb68], 8
mov dword [ebp - 0x5b8], 0xd7d2a7e9
mov dword [ebp - 0x7f8], 3
mov dword [ebp - 0x718], 0xfffffff7
mov dword [ebp - 0x770], 0xffffffff
mov dword [ebp - 0x87c], 8
mov dword [ebp - 0x21c], 0
jmp 0x10033644
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 4
jge 0x10033660
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xa78], 0xd3b51ad
jmp 0x10033637
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
cmp dword [eax], 0
je 0x1003367f
jmp 0x10033a0e
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
mov dword [ebp - 0x590], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
mov ecx, dword [ebp - 0x590]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x590]
cmp dword [eax], 0
jne 0x100336f3
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
mov eax, dword [eax]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jne 0x100336f3
and dword [ebp - 0x8f8], 0
jmp 0x100336fd
mov dword [ebp - 0x8f8], 1
mov eax, dword [ebp - 0x398]
dec eax
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x7f0], 0xabfe
je 0x10033722
mov dword [ebp - 0x690], 1
jmp 0x10033729
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x690], eax
jge 0x10033743
mov dword [ebp - 0x3a0], 1
jmp 0x1003374a
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0x3a0]
jge 0x10033764
mov dword [ebp - 0x598], 1
jmp 0x1003376b
and dword [ebp - 0x598], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
mov ecx, dword [ebp - 0x598]
cmp ecx, dword [eax]
jle 0x10033796
mov dword [ebp - 0x3a8], 1
jmp 0x1003379d
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x750], eax
jg 0x100337c3
mov dword [ebp - 0x3b0], 1
jmp 0x100337ca
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x3b0], eax
jg 0x100337ea
cmp dword [ebp - 0x5b8], 0
jne 0x100337ea
and dword [ebp - 0x5a0], 0
jmp 0x100337f4
mov dword [ebp - 0x5a0], 1
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x5a0], eax
jl 0x1003380e
mov dword [ebp - 0x3b8], 1
jmp 0x10033815
and dword [ebp - 0x3b8], 0
cmp dword [ebp - 0x3b8], 9
jb 0x1003382a
mov dword [ebp - 0x698], 1
jmp 0x10033831
and dword [ebp - 0x698], 0
push 2
lea ecx, [ebp - 0xc10]
call fcn.10024e10
mov ecx, dword [ebp - 0x698]
cmp ecx, dword [eax]
je 0x10033854
mov dword [ebp - 0x3c0], 1
jmp 0x1003385b
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x87c]
add eax, dword [ebp - 0x3c0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa78]
jl 0x10033882
mov dword [ebp - 0x5a8], 1
jmp 0x10033889
and dword [ebp - 0x5a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
imul eax, dword [ebp - 0x5a8]
cmp eax, dword [ebp - 0x770]
jne 0x100338b1
mov dword [ebp - 0x3c8], 1
jmp 0x100338b8
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x718], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp dword [ebp - 0x718], eax
jge 0x100338ff
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x28]
lea ecx, [ebp - 0x78c]
call fcn.10024e10
cmp dword [eax], 0
je 0x100338ff
mov dword [ebp - 0x3d0], 1
jmp 0x10033906
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x3d0], eax
jne 0x10033920
mov dword [ebp - 0x3d8], 1
jmp 0x10033927
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x5b0]
cmp dword [ebp - 0x3d8], eax
jne 0x10033941
mov dword [ebp - 0x6a0], 1
jmp 0x10033948
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 0xf500
jne 0x10033966
cmp dword [ebp - 0x270], 0
jne 0x10033966
and dword [ebp - 0x3e0], 0
jmp 0x10033970
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x3e0]
sub eax, dword [ebp - 0x1d4]
sub eax, 0x3ccba8e0
cmp eax, dword [ebp - 0x5b8]
jne 0x10033995
mov dword [ebp - 0x3e8], 1
jmp 0x1003399c
and dword [ebp - 0x3e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp dword [ebp - 0x3e8], eax
jle 0x100339bd
mov dword [ebp - 0x3f0], 1
jmp 0x100339c4
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x770]
cmp dword [ebp - 0x3f0], eax
jl 0x100339de
mov dword [ebp - 0x5c0], 1
jmp 0x100339e5
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x8c4], eax
jmp 0x100335bf
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc10]
call fcn.10024e0b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78c]
call fcn.10024e0b
mov dword [ebp - 0x278], 0x365653d4
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10033a57
push 0x1bf9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
cmp dword [ebp - 0x278], 1
je 0x10033a6c
mov dword [ebp - 0x3f8], 1
jmp 0x10033a73
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0x76427603
jge 0x10033a8b
mov dword [ebp - 0x800], 1
jmp 0x10033a92
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0xb78], eax
cmp dword [ebp - 0x278], 0
je 0x10033ac1
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10033abf
call dword [sym.imp.USER32.dll_GetCapture]
jmp 0x10033b06
mov dword [ebp - 0x6a8], 0x1654
mov dword [ebp - 0x884], 0x969ac54c
cmp dword [ebp - 0x6a8], 0
jne 0x10033af0
cmp dword [ebp - 0x6a8], 0
jne 0x10033af0
and dword [ebp - 0x400], 0
jmp 0x10033afa
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x158], 0xfffffff8
mov dword [ebp - 0x1dc], 0
jmp 0x10033b29
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x10033b45
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xb80], 5
jmp 0x10033b1c
mov dword [ebp - 0x158], 0
jmp 0x10033b5e
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x10033b8a
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10033b88
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
jmp 0x10033b51
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x158], eax
movzx eax, byte [0x10cb10f0]
test eax, eax
je 0x10033bb4
mov esi, 0x10664360
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10038315
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x224], 0
jmp 0x10033bd7
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x10033bf3
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xd8c], 0x20624039
jmp 0x10033bca
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x10033c12
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov dword [ebp - 0x168], 2
jmp 0x10033c2b
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x10033c53
mov dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x168]
mov eax, dword [ebp + eax*4 - 0xd8c]
mov dword [ebp - 0x808], eax
jmp 0x10033c1e
mov dword [ebp - 0xb88], 0xfffffff6
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x10033c7c
push 0x6d0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10033c9b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0xb4], 0x263126ff
push 1
lea ecx, [ebp - 0xa14]
call fcn.10024d89
mov dword [ebp - 4], 8
mov dword [ebp - 0x1e4], 0
jmp 0x10033cd2
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10033cf4
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0xa14]
call fcn.10024e10
mov dword [eax], 0xa7b7e80d
jmp 0x10033cc5
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb98], eax
cmp dword [ebp - 0xb4], 0x69f4
jge 0x10033d24
mov dword [ebp - 0x5c8], 1
jmp 0x10033d2b
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0x5352
jg 0x10033d43
mov dword [ebp - 0x408], 1
jmp 0x10033d4a
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x408]
cmp eax, 0xffffffff
jne 0x10033d70
mov eax, 0xd409884c
test eax, eax
je 0x10033d70
mov dword [ebp - 0x720], 1
jmp 0x10033d77
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x720], eax
jle 0x10033d91
mov dword [ebp - 0x410], 1
jmp 0x10033d98
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x410], eax
jg 0x10033db2
mov dword [ebp - 0x5d0], 1
jmp 0x10033db9
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x5d0], eax
je 0x10033dd3
mov dword [ebp - 0x418], 1
jmp 0x10033dda
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x418], eax
jle 0x10033df4
mov dword [ebp - 0x6b0], 1
jmp 0x10033dfb
and dword [ebp - 0x6b0], 0
push 0
lea ecx, [ebp - 0xa14]
call fcn.10024e10
mov ecx, dword [ebp - 0x6b0]
mov dword [eax], ecx
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10033e3e
push 0x26bb
push 0xab9
push 0x5c6
push 0x1323
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa14]
call fcn.10024e0b
mov dword [ebp - 0xba0], 0x10664360
push 2
lea ecx, [ebp - 0x79c]
call fcn.10024d89
mov dword [ebp - 4], 9
mov dword [ebp - 0x8d4], 1
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x1ec], 0xfffffffe
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x438], 0x10a83afd
mov dword [ebp - 0x95c], 0xfc353271
mov dword [ebp - 0x958], 0xfc353271
mov dword [ebp - 0x954], 0xfc353271
mov dword [ebp - 0x950], 0xfc353271
lea ecx, [ebp - 0x281]
call fcn.10009032
push eax
lea eax, [ebp - 0x94c]
push eax
lea eax, [ebp - 0x95c]
push eax
lea ecx, [ebp - 0xdf4]
call fcn.10024e1f
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc20]
call fcn.10024de5
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x460], 0x1c76
mov dword [ebp - 0x5d8], 0xbeba
mov dword [ebp - 0x80], 0
jmp 0x10033f22
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10033f3b
push dword [ebp - 0x80]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
and dword [eax], 0
jmp 0x10033f1b
mov dword [ebp - 0x80], 0
jmp 0x10033f4b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10033f5e
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x2c], 0
jmp 0x10033f44
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2c], 1
jmp 0x10033f83
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
jl 0x100343bd
mov dword [ebp - 0x280], 0xcf865116
mov dword [ebp - 0xba8], 8
mov dword [ebp - 0x470], 0xd7d2a7e9
mov dword [ebp - 0x818], 3
mov dword [ebp - 0x458], 0xfffffff7
mov dword [ebp - 0x478], 0xffffffff
mov dword [ebp - 0x88c], 8
mov dword [ebp - 0x264], 0
jmp 0x10033ff3
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x1003400f
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xa88], 0xd3b51ad
jmp 0x10033fe6
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
cmp dword [eax], 0
je 0x1003402e
jmp 0x100343bd
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
mov dword [ebp - 0x420], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
mov ecx, dword [ebp - 0x420]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x420]
cmp dword [eax], 0
jne 0x100340a2
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
mov eax, dword [eax]
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jne 0x100340a2
and dword [ebp - 0x90c], 0
jmp 0x100340ac
mov dword [ebp - 0x90c], 1
mov eax, dword [ebp - 0x5d8]
dec eax
mov dword [ebp - 0x5d8], eax
cmp dword [ebp - 0x810], 0xabfe
je 0x100340d1
mov dword [ebp - 0x428], 1
jmp 0x100340d8
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x428], eax
jge 0x100340f2
mov dword [ebp - 0x758], 1
jmp 0x100340f9
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x460]
cmp eax, dword [ebp - 0x758]
jge 0x10034113
mov dword [ebp - 0x430], 1
jmp 0x1003411a
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
mov ecx, dword [ebp - 0x430]
cmp ecx, dword [eax]
jle 0x10034145
mov dword [ebp - 0x5e0], 1
jmp 0x1003414c
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x438], eax
jg 0x10034172
mov dword [ebp - 0x6b8], 1
jmp 0x10034179
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x6b8], eax
jg 0x10034199
cmp dword [ebp - 0x470], 0
jne 0x10034199
and dword [ebp - 0x440], 0
jmp 0x100341a3
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x440], eax
jl 0x100341bd
mov dword [ebp - 0x5e8], 1
jmp 0x100341c4
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 9
jb 0x100341d9
mov dword [ebp - 0x448], 1
jmp 0x100341e0
and dword [ebp - 0x448], 0
push 2
lea ecx, [ebp - 0xc20]
call fcn.10024e10
mov ecx, dword [ebp - 0x448]
cmp ecx, dword [eax]
je 0x10034203
mov dword [ebp - 0x728], 1
jmp 0x1003420a
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x88c]
add eax, dword [ebp - 0x728]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xa88]
jl 0x10034231
mov dword [ebp - 0x450], 1
jmp 0x10034238
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa88]
imul eax, dword [ebp - 0x450]
cmp eax, dword [ebp - 0x478]
jne 0x10034260
mov dword [ebp - 0x5f0], 1
jmp 0x10034267
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x458], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa88]
cmp dword [ebp - 0x458], eax
jge 0x100342ae
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x2c]
lea ecx, [ebp - 0x79c]
call fcn.10024e10
cmp dword [eax], 0
je 0x100342ae
mov dword [ebp - 0x6c0], 1
jmp 0x100342b5
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x6c0], eax
jne 0x100342cf
mov dword [ebp - 0x5f8], 1
jmp 0x100342d6
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x5f8], eax
jne 0x100342f0
mov dword [ebp - 0x468], 1
jmp 0x100342f7
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xf500
jne 0x10034315
cmp dword [ebp - 0x280], 0
jne 0x10034315
and dword [ebp - 0x780], 0
jmp 0x1003431f
mov dword [ebp - 0x780], 1
mov eax, dword [ebp - 0x780]
sub eax, dword [ebp - 0x1ec]
sub eax, 0x3ccba8e0
cmp eax, dword [ebp - 0x470]
jne 0x10034344
mov dword [ebp - 0x600], 1
jmp 0x1003434b
and dword [ebp - 0x600], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa88]
cmp dword [ebp - 0x600], eax
jle 0x1003436c
mov dword [ebp - 0x6c8], 1
jmp 0x10034373
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x6c8], eax
jl 0x1003438d
mov dword [ebp - 0x480], 1
jmp 0x10034394
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xbb0], eax
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x8d4], eax
jmp 0x10033f6e
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc20]
call fcn.10024e0b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x79c]
call fcn.10024e0b
mov dword [ebp - 0xbb8], 0xb4e1a362
mov dword [ebp - 0xbc0], 2
mov dword [ebp - 0xcc4], 0x9c17633e
mov dword [ebp - 0xccc], 0xfffffff9
mov dword [ebp - 0xcd4], 0
mov dword [ebp - 0xcdc], 0xcb8ce3e6
mov dword [ebp - 0xce4], 0xda622a14
mov dword [ebp - 0xcec], 0xfffffffc
mov dword [ebp - 0xd1c], 0xa233712
mov dword [ebp - 0xd18], 0xa233712
mov dword [ebp - 0xd14], 0xa233712
mov dword [ebp - 0xd10], 0xa233712
mov dword [ebp - 0xcf4], 0xbde6
mov dword [ebp - 0xd60], 0xa82e
mov dword [ebp - 0xd68], 0xfffffff8
mov dword [ebp - 0x608], 0xae7
mov eax, dword [ebp - 0x608]
dec eax
mov dword [ebp - 0x608], eax
mov dword [ebp - 0xd70], 0x10664364
mov dword [ebp - 0x10c], 0xfffffff8
mov dword [ebp - 0x22c], 0
jmp 0x100344b5
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x100344d1
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xd78], 5
jmp 0x100344a8
mov dword [ebp - 0x10c], 0
jmp 0x100344ea
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x10034516
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x10034514
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
jmp 0x100344dd
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xe8], 0xb58e469a
mov dword [ebp - 0x1f4], 0
jmp 0x10034545
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x10034561
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xda4], 1
jmp 0x10034538
mov dword [ebp - 0xe8], 0
jmp 0x1003457a
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10034596
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0xda4], 0xffffffff
jmp 0x1003456d
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0xe8], eax
mov byte [0x10cb10f0], 1
push 3
lea ecx, [ebp - 0xa08]
call fcn.10024d89
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x180], 0xb13638ec
mov dword [ebp - 0xd80], 0x7222631
mov dword [ebp - 0x24c], 0
jmp 0x100345ea
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x1003460c
push dword [ebp - 0x24c]
lea ecx, [ebp - 0xa08]
call fcn.10024e10
mov dword [eax], 0x3342eb90
jmp 0x100345dd
mov dword [ebp - 0x180], 2
jmp 0x10034625
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jl 0x10034648
push dword [ebp - 0x180]
lea ecx, [ebp - 0xa08]
call fcn.10024e10
cmp dword [eax], 0
je 0x10034646
jmp 0x10034648
jmp 0x10034618
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa08]
call fcn.10024e0b
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x1fc], 0
jmp 0x1003467a
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x10034696
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xdbc], 0x20624039
jmp 0x1003466d
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x100346b5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov dword [ebp - 0x170], 2
jmp 0x100346ce
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jl 0x100346f6
mov dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x170]
mov eax, dword [ebp + eax*4 - 0xdbc]
mov dword [ebp - 0x820], eax
jmp 0x100346c1
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x144], 0x1c5a3d7f
mov dword [ebp - 0x30], 0
mov dword [ebp - 0xf0], 0x6ef3b063
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x68], 0
jmp 0x10034732
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x10034748
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7d4], 0x2ba10f40
jmp 0x1003472b
mov dword [ebp - 0x68], 0
jmp 0x10034758
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1003476e
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x7b4], 4
jmp 0x10034751
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x144], eax
jg 0x100347a6
mov dword [ebp - 0x894], 1
jmp 0x100347ad
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xaa4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xaac], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x100347e8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret