Function at 0x100324b0
Capabilities:
Check os version
Create process on windows
Delete file
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get file attributes
Get file size
Get graphical window text
Get session user name
Get system information on windows
Identify system language via api
Parse pe header
Query service status

Disassembly:
mov eax, 0x10089eb9
call fcn.100889c8
mov eax, 0x146c
call fcn.10071520
push ebx
push esi
mov esi, 0x43cdf98a
mov byte [ebp - 0x65], dl
mov dword [ebp - 0x18], esi
mov ebx, 0x4225189d
mov dword [ebp - 0x30], ebx
xor eax, eax
mov dword [ebp - 0x38], 0x31e34f9a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
push edi
mov dword [ebp - 0x60], ecx
jge 0x10032508
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x790], 0x93b4e1a3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100324ef
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x18], eax
inc ecx
cmp dword [ebp - 0x18], ecx
jge 0x1003252b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x780], 0x9fcf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032513
xor eax, eax
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100325e8
mov dword [ebp - 0x34], 0xfffffffb
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032551
push eax
call edi
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x790], 0
jne 0x100325be
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x790]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x790], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x790]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
sub ecx, 0x712bf5ea
cmp ecx, 0x5bea
setg al
cmp dword [ebp - 0x780], eax
jle 0x100325bb
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push 0
mov eax, dword [ebp + eax*4 - 0x790]
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
pop eax
jle 0x1003253e
xor ecx, ecx
inc ecx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], 0x31e34f9a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10032617
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x718], 0x93b4e1a3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100325fe
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10032637
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6c0], 0x9fcf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1003261f
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100326eb
mov dword [ebp - 0x34], 0xfffffffb
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032657
push eax
call edi
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x718], 0
jne 0x100326c4
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x718]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x718], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x718]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
sub ecx, 0x712bf5ea
cmp ecx, 0x5bea
setg al
cmp dword [ebp - 0x6c0], eax
jle 0x100326c1
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push 0
mov eax, dword [ebp + eax*4 - 0x718]
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
pop eax
jle 0x10032644
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032714
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1174], 0xfc88eb98
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100326fb
xor eax, eax
push 8
mov dword [ebp - 0x28], 0xffffffe6
pop ecx
jmp 0x1003274a
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x38], 0x34eea2a3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x14
jle 0x10032747
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1170], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x14
jg 0x10032733
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x10032720
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x50], 0xc0ae9714
mov dword [ebp - 0x34], 0x276b87d0
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x5c], 6
mov dword [ebp - 0x50], 0x16
cmp dword [ebp - 0x50], 0x18
je 0x100328bb
xor esi, esi
inc esi
or edi, 0xffffffff
mov dword [ebp - 0x28], 0x5c7a
lea ecx, [ebp - 0xa90]
mov dword [ebp - 0x3c], 0x1328f6c7
mov dword [ebp - 0x38], 0xd6b59229
push 3
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100327db
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa90]
call fcn.100195c0
mov dword [eax], 0x9716e289
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100327bc
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1003285c
inc dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl dl
add edx, dword [ebp - 0x28]
jne 0x10032811
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10032813
mov eax, esi
cmp dword [ebp - 0x3c], eax
jge 0x10032821
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x3c], eax
je 0x10032823
mov ecx, esi
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
add edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x34]
cmp eax, edx
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
imul ecx, ecx, 0xa4f0
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x34]
jg 0x10032856
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x1003285a
mov eax, esi
jmp 0x1003285c
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xa90]
xor eax, eax
push eax
call fcn.100195c0
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10032895
push esi
push 0x1dd5
push 0x1e7b
push 0xe40
call ebx
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
lea ecx, [ebp - 0xa90]
mov dword [ebp - 4], edi
call fcn.100195bb
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x18
jne 0x1003278c
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov esi, 0x43cdf98a
mov dword [ebp - 0x30], 0x4225189d
xor eax, eax
mov dword [ebp - 0x38], 0x31e34f9a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100328ed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x778], 0x93b4e1a3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100328d4
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x18], eax
inc ecx
cmp dword [ebp - 0x18], ecx
jge 0x10032910
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x6f0], 0x9fcf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100328f8
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100329c4
mov dword [ebp - 0x34], 0xfffffffb
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032930
push eax
call edi
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x778], 0
jne 0x1003299d
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x778]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x778], ecx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x778]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
sub ecx, 0x712bf5ea
cmp ecx, 0x5bea
setg al
cmp dword [ebp - 0x6f0], eax
jle 0x1003299a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push 0
mov eax, dword [ebp + eax*4 - 0x778]
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
pop eax
jle 0x1003291d
mov dword [ebp - 0x18], 0xb26bdde0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
je 0x10032b9b
xor ebx, ebx
push 2
inc ebx
or edi, 0xffffffff
pop esi
push 3
lea ecx, [ebp - 0x4c4]
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10032a1b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4c4]
call fcn.100195c0
mov dword [eax], 0x6318d581
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100329fc
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10032a3b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x250], 0xfb023ed1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10032a23
xor eax, eax
mov dword [ebp - 0x24c], esi
cmp dword [ebp - 0x24c], eax
jl 0x10032ade
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032a6f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c8], 0x46cdead9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032a56
xor eax, eax
mov dword [ebp - 0x7c4], esi
cmp dword [ebp - 0x7c4], eax
jl 0x10032abe
mov dword [ebp - 0x10], 0x8fdeb772
mov dword [ebp - 0x10], eax
jmp 0x10032ab1
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032aae
push 0x197c
push 0x168d
push 0x252
push 0x8fa
call dword [sym.imp.GDI32.dll_CreateRectRgn]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x10032a89
dec dword [ebp - 0x7c4]
jns 0x10032a7d
push dword [ebp - 0x24c]
lea ecx, [ebp - 0x4c4]
call fcn.100195c0
dec dword [ebp - 0x24c]
push 0
pop eax
jns 0x10032a4d
cmp dword [ebp - 0x18], eax
je 0x10032b51
push esi
lea ecx, [ebp - 0x4c4]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ecx, 0x23f1
mov esi, eax
mov ecx, dword [ebp - 0x18]
setne dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setl bl
xor eax, eax
cmp ebx, ecx
setle al
xor ecx, ecx
cmp dword [esi], eax
mov eax, dword [ebp - 0x18]
setne cl
xor ebx, ebx
imul eax, ecx
lea ecx, [ebp - 0x4c4]
cmp eax, 0x8a2b8ea2
setne bl
xor eax, eax
mov dword [ebp - 0x24c], ebx
push eax
call fcn.100195c0
sub ebx, dword [eax]
cmp ebx, dword [ebp - 0x18]
jle 0x10032b4c
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10032b53
xor ebx, ebx
xor eax, eax
inc ebx
mov esi, eax
push ebx
lea ecx, [ebp - 0x4c4]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp esi, ecx
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x4c4]
setge dl
mov dword [eax], edx
call fcn.100195bb
inc dword [ebp - 0x18]
push 2
pop esi
cmp dword [ebp - 0x18], esi
jne 0x100329e1
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov esi, 0x43cdf98a
push 0xfffffffffffffffc
pop edx
mov dword [ebp - 0x28], edx
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10032bc4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x11d4], 0xfc88eb98
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10032bac
xor eax, eax
mov dword [ebp - 0x28], 0xffffffe6
jmp 0x10032bfb
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x38], 0x34eea2a3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x14
jle 0x10032bf8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x11d0], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x14
jg 0x10032be4
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x10032bcd
mov dword [ebp - 0x30], edx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032c18
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_KillTimer]
xor eax, eax
mov dword [ebp - 0x30], 0x13
cmp dword [ebp - 0x30], eax
jge 0x10032c72
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x10], eax
jmp 0x10032c67
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10032c64
push 0xba3
push 0x6bc
push 0x715
push 0x1545
push 0x916
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff4
jne 0x10032c30
dec dword [ebp - 0x30]
js 0x10032c24
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032c9e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10e4], 0xfc88eb98
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032c85
xor eax, eax
mov dword [ebp - 0x28], 0xffffffe6
cmp dword [ebp - 0x28], 3
jg 0x10032cde
push 8
pop ecx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x38], 0x34eea2a3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x14
jle 0x10032cd5
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10e0], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x14
jg 0x10032cc1
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x10032cae
push 2
pop esi
mov dword [ebp - 0x50], 0xc0ae9714
mov dword [ebp - 0x34], 0x276b87d0
push 6
mov dword [ebp - 0x20], esi
pop eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x50], 0x16
cmp dword [ebp - 0x50], 0x18
je 0x10032e39
xor edi, edi
inc edi
mov dword [ebp - 0x28], 0x5c7a
lea ecx, [ebp - 0xa84]
mov dword [ebp - 0x3c], 0x1328f6c7
mov dword [ebp - 0x38], 0xd6b59229
push 3
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032d5b
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa84]
call fcn.100195c0
mov dword [eax], 0x9716e289
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032d3c
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10032ddc
inc dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl dl
add edx, dword [ebp - 0x28]
jne 0x10032d91
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10032d93
mov eax, edi
cmp dword [ebp - 0x3c], eax
jge 0x10032da1
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x3c], eax
je 0x10032da3
mov ecx, edi
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
add edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x34]
cmp eax, edx
mov eax, dword [ebp - 0x20]
setne cl
xor edx, edx
imul ecx, ecx, 0xa4f0
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x34]
jg 0x10032dd6
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10032dda
mov eax, edi
jmp 0x10032ddc
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xa84]
xor eax, eax
push eax
call fcn.100195c0
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10032e15
push edi
push 0x1dd5
push 0x1e7b
push 0xe40
call ebx
push eax
call dword [sym.imp.USER32.dll_SetScrollRange]
or eax, 0xffffffff
lea ecx, [ebp - 0xa84]
mov dword [ebp - 4], eax
call fcn.100195bb
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], 0x18
jne 0x10032d0c
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x48], 0x4225189d
lea ecx, [ebp - 0x960]
push 3
call fcn.10019553
push 3
pop ebx
xor eax, eax
mov dword [ebp - 4], ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032e7b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x960]
call fcn.100195c0
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032e60
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032ec2
mov dword [ebp - 0x34], 0xf8256a9e
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jg 0x10032ebf
push dword [ebp - 0x28]
lea ecx, [ebp - 0x960]
call fcn.100195c0
cmp dword [eax], 0
jne 0x10032ebd
push dword [ebp - 0x34]
lea ecx, [ebp - 0x960]
call fcn.100195c0
mov ecx, dword [ebp - 0x34]
mov dword [eax], ecx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jle 0x10032e8f
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x10032e80
or eax, 0xffffffff
lea ecx, [ebp - 0x960]
mov dword [ebp - 4], eax
call fcn.100195bb
lea eax, [ebp - 0xf6c]
mov dword [ebp - 0x38], 0x31e34f9a
push eax
lea eax, [ebp - 0xf7c]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x1240]
movdqu xmmword [ebp - 0xf7c], xmm0
call fcn.100195cf
lea ecx, [ebp - 0x1bc]
mov esi, eax
call fcn.1000ab33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x198]
push dword [esi]
call fcn.10019595
push 4
pop eax
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x198]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x4c], eax
xor eax, eax
push eax
mov dword [ebp - 0x20], 0xd3e99730
call fcn.100195c0
lea ecx, [ebp - 0x198]
mov dword [eax], 0xe
xor eax, eax
push eax
call fcn.100195c0
cmp dword [eax], 0xfffffff6
jne 0x100330c0
mov dword [ebp - 0x10], 0xea98
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x34], 0x38ab659d
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x30], 0xe2fe8172
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
xor eax, eax
push eax
call fcn.100195c0
xor ebx, ebx
cmp dword [eax], ebx
je 0x10032fae
push 3
lea ecx, [ebp - 0x198]
call fcn.100195c0
cmp dword [eax], ebx
je 0x10032fae
inc ebx
mov eax, ebx
jmp 0x10032fb3
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x198]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor eax, eax
push eax
call fcn.100195c0
mov edx, dword [ebp - 0x10]
mov esi, eax
mov ecx, dword [ebp - 0x20]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x38]
setl al
sub ecx, eax
mov eax, dword [esi]
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
lea ecx, [ebp - 0x198]
mov dword [ebp - 0x20], eax
xor eax, eax
push eax
call fcn.100195c0
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp ecx, 0x4f77
setg dl
imul edx, dword [eax]
cmp dword [ebp - 0x28], edx
jne 0x1003308e
mov dword [ebp - 0x5c], 0x3046
lea ecx, [ebp - 0x198]
mov edi, dword [ebp - 0x28]
neg edi
push 2
sbb edi, edi
neg edi
call fcn.100195c0
mov edx, dword [ebp - 0x34]
mov esi, eax
sub edx, 0xde30eca6
mov eax, 0x86ff5291
neg edx
push 8
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, ebx
setle cl
cmp eax, ecx
pop ecx
sbb eax, eax
neg eax
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0x818f
setg cl
xor eax, eax
imul ecx, dword [esi]
cmp edi, ecx
setle al
inc eax
jne 0x10033085
push eax
lea ecx, [ebp - 0x198]
call fcn.100195c0
cmp dword [eax], 0
jne 0x10033085
xor eax, eax
jmp 0x10033087
mov eax, ebx
mov dword [ebp - 0x5c], eax
xor eax, eax
jmp 0x10033095
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x100330ba
push eax
lea ecx, [ebp - 0x198]
call fcn.100195c0
lea ecx, [ebp - 0x198]
dec dword [eax]
xor eax, eax
push eax
call fcn.100195c0
cmp dword [eax], 0xfffffff6
je 0x10032f62
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
or eax, 0xffffffff
lea ecx, [ebp - 0x198]
mov dword [ebp - 4], eax
call fcn.100195bb
push 2
pop esi
push esi
lea ecx, [ebp - 0x120]
call fcn.10019553
push 5
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x20], eax
or ecx, 0xffffffff
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], eax
jmp 0x10033107
push dword [ebp - 0x10]
call fcn.100195c0
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x120]
cmp dword [ebp - 0x10], esi
jl 0x100330f6
push ebx
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x120]
mov dword [eax], 0x19
call fcn.100195c0
cmp dword [eax], 0xfffffffc
jle 0x1003343a
push esi
lea ecx, [ebp - 0x2f0]
call fcn.10019553
push 6
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0x12f0]
movdqa xmm0, xmmword [0x100098b0]
mov eax, 0xffff
mov dword [ebp - 0x1c], 0x7b2415fb
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x106c]
push eax
lea eax, [ebp - 0x107c]
mov dword [ebp - 0x34], 0x7a540f82
push eax
movdqu xmmword [ebp - 0x107c], xmm0
call fcn.100195cf
lea ecx, [ebp - 0x1a9]
mov esi, eax
call fcn.1000ab33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xcdc]
push dword [esi]
call fcn.10019595
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100331d0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2f0]
call fcn.100195c0
mov dword [eax], 3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100331b1
xor eax, eax
push eax
lea ecx, [ebp - 0x2f0]
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x120]
mov esi, eax
call fcn.100195c0
mov ecx, dword [esi]
xor edx, edx
cmp ecx, dword [eax]
setne dl
cmp edx, 0x3825062d
jl 0x1003320e
xor eax, eax
lea ecx, [ebp - 0x2f0]
push eax
call fcn.100195c0
cmp dword [eax], 0
jne 0x10033223
push ebx
lea ecx, [ebp - 0x120]
call fcn.100195c0
cmp dword [eax], 0
jne 0x10033223
xor eax, eax
jmp 0x10033225
mov eax, ebx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x120]
mov eax, dword [ebp - 0x1c]
push ebx
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x20], 0xfffffffd
call fcn.100195c0
mov esi, eax
lea ecx, [ebp - 0x120]
xor eax, eax
push eax
call fcn.100195c0
mov ecx, dword [esi]
xor ebx, ebx
add ecx, dword [eax]
cmp ecx, 0xd59f
lea ecx, [ebp - 0x2f0]
setge bl
xor eax, eax
push eax
call fcn.100195c0
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
xor edi, edi
mov dword [ebp - 0x38], ecx
inc edi
push edi
lea ecx, [ebp - 0x120]
call fcn.100195c0
mov ecx, dword [ebp - 0x38]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x2f0]
setge bl
sub ebx, 0xe8c9f369
neg ebx
sbb ebx, ebx
xor eax, eax
push eax
inc ebx
call fcn.100195c0
cmp ebx, dword [eax]
jle 0x100332c8
or eax, 0xffffffff
xor ebx, ebx
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x20]
inc ebx
jmp 0x100333da
xor ebx, ebx
lea ecx, [ebp - 0xe94]
inc ebx
push ebx
call fcn.10019553
push 8
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033305
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe94]
call fcn.100195c0
mov dword [eax], 0xbda73a15
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100332e7
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10033313
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x16
jne 0x1003330a
mov dword [ebp - 0x1c], 0xffffffec
jmp 0x100333c5
mov dword [ebp - 0x20], 0x7557bc77
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x38], 0xce4ec6f9
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
push ebx
call fcn.100195c0
mov ecx, dword [ebp - 0x5c]
xor edx, edx
cmp dword [eax], ecx
setge dl
xor eax, eax
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], eax
jl 0x100333c2
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2f0]
call fcn.100195c0
mov esi, dword [ebp - 0x34]
lea ecx, [ebp - 0xcdc]
push 2
call fcn.100195c0
xor ecx, ecx
cmp esi, ebx
sete cl
mov dword [eax], esi
mov eax, 0xf28d
sub eax, ecx
je 0x1003339d
or eax, 0xffffffff
mov dword [ebp - 0x38], eax
jmp 0x100333bd
push 2
lea ecx, [ebp - 0xcdc]
call fcn.100195c0
cmp dword [eax], 0
jne 0x100333c2
xor eax, eax
lea ecx, [ebp - 0x2f0]
push eax
call fcn.100195c0
dec dword [ebp - 0x34]
jns 0x10033365
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x13
jl 0x10033325
lea ecx, [ebp - 0xe94]
call fcn.100195bb
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x100333f2
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
lea ecx, [ebp - 0xcdc]
call fcn.100195bb
push 5
pop eax
lea ecx, [ebp - 0x2f0]
mov byte [ebp - 4], al
call fcn.100195bb
push ebx
lea ecx, [ebp - 0x120]
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x120]
dec dword [eax]
call fcn.100195c0
push 2
pop esi
cmp dword [eax], 0xfffffffc
jg 0x10033133
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
or eax, 0xffffffff
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], eax
call fcn.100195bb
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10033470
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7a8], 0x93b4e1a3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10033458
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 0x20], 0x4b28ed4a
mov dword [ebp - 0x4c], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x38], ecx
push 5
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jg 0x100335d5
mov dword [ebp - 0x28], 0x714ffd81
lea ecx, [ebp - 0x954]
push 4
call fcn.10019553
mov dword [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], 0xa1172167
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100334e2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x954]
call fcn.100195c0
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100334c6
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x100335c2
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov dword [ebp - 0x20], 3
mov eax, dword [ebp - 0x1c]
cmp eax, 0x4957
mov esi, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
setge cl
sub esi, ecx
neg esi
sbb esi, esi
xor edx, edx
inc esi
cmp esi, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x20], ecx
jge 0x10033528
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffa
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
cmp eax, 0xc58f5537
jb 0x10033546
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10033546
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x954]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x28]
push 2
pop esi
setge bl
push esi
imul ebx, eax
call fcn.100195c0
mov dword [eax], ebx
xor eax, eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jne 0x10033588
cmp dword [ebp - 0x38], eax
jne 0x10033588
xor ebx, ebx
inc ebx
jmp 0x1003358d
xor ebx, ebx
inc ebx
mov eax, ebx
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
or eax, 0xffffffff
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x954]
mov dword [ebp - 4], eax
call fcn.100195bb
inc dword [ebp - 0x1c]
push 5
pop eax
cmp dword [ebp - 0x1c], eax
jle 0x10033496
jmp 0x100335d3
or eax, 0xffffffff
lea ecx, [ebp - 0x954]
mov dword [ebp - 4], eax
call fcn.100195bb
xor eax, eax
mov dword [ebp - 0x1c], 0x1e33ecdc
mov dword [ebp - 0x18], eax
jmp 0x100335f2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x694], 0x9fcf
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100335e1
mov dword [ebp - 0x34], 0xe1d925b0
lea ecx, [ebp - 0x56c]
mov dword [ebp - 0x30], 0x59310c13
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x10], 0xff12f3cc
push esi
call fcn.10019553
mov dword [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x10], 0xad0d
mov dword [ebp - 0x10], eax
jmp 0x1003364b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x56c]
call fcn.100195c0
mov dword [eax], 0xa87a5eaf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033634
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x34]
jl 0x10033667
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], 0xfffffff9
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x34]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, 0x66e9f086
je 0x1003369a
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
jmp 0x1003375a
mov dword [ebp - 0x20], 0x4f20077f
xor eax, eax
mov dword [ebp - 0x38], 0xfef5379a
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10033757
mov dword [ebp - 0x4c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x20]
cmp eax, ebx
setg cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x56c]
push dword [ebp - 0x18]
call fcn.100195c0
push dword [ebp - 0x18]
mov esi, 0x169b41db
lea ecx, [ebp - 0x56c]
sub esi, dword [eax]
call fcn.100195c0
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x10]
add ecx, esi
add edx, ecx
lea ecx, [ebp - 0x56c]
neg edx
sbb edx, edx
inc edx
sub edx, dword [eax]
mov dword [ebp - 0x10], edx
push dword [ebp - 0x18]
call fcn.100195c0
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x38]
push dword [ebp - 0x18]
setge cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0x56c]
setle bl
call fcn.100195c0
push 0
mov dword [eax], ebx
dec dword [ebp - 0x18]
pop eax
push 1
pop ebx
jns 0x100336b9
push 2
pop esi
dec dword [ebp - 0x30]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10033785
push 0x1ea3
push eax
push eax
push 0x21ee
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
or eax, 0xffffffff
lea ecx, [ebp - 0x56c]
mov dword [ebp - 4], eax
call fcn.100195bb
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jg 0x10033f83
push 5
pop ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x4c], 0x1c77dcd
mov dword [ebp - 0x20], 0xf118c84b
mov dword [ebp - 0x28], 0x9628eaf6
mov dword [ebp - 0x30], 3
mov dword [ebp - 0x44], 0xffff
mov dword [ebp - 0x10], eax
jmp 0x100337e3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3dc], 0x4ef66b17
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100337d2
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
xor ebx, ebx
inc eax
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x3d8]
mov eax, dword [ebp - 0x3d0]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setle bl
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp - 0x3d0]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3d0]
cmp eax, ecx
mov eax, dword [ebp - 0x3d0]
setl dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x3dc]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3d8]
sete dl
imul eax, edx
cmp eax, dword [ebp - 0x3d0]
jg 0x10033868
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x3d0]
mov eax, dword [ebp - 0x3dc]
mov eax, dword [ebp - 0x28]
cmp eax, 0x835a
push 5
setl dl
xor ecx, ecx
add edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg cl
xor edx, edx
imul ecx, ecx, 0x221e
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setl dl
xor ecx, ecx
neg edx
cmp edx, eax
pop eax
setg cl
sub ecx, eax
xor eax, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x54], 0xfffffffb
mov dword [ebp - 0x2c], 0xce125d16
mov dword [ebp - 0x1c], 0xa062b000
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100338f4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2cc], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100338df
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x2c], esi
inc ebx
cmp dword [ebp - 0x2c], eax
jl 0x100339e2
or ecx, 0xffffffff
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x3809d01
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x50], 0x3187110e
mov dword [ebp - 0x10], eax
jmp 0x1003394d
mov dword [ebp - 0x44], 0x2830
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x85613717
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x44], ebx
dec dword [ebp - 0x50]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x1003392c
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], esi
jg 0x100339d3
or edi, 0xffffffff
mov dword [ebp - 0x20], 0xd3d47825
mov dword [ebp - 0x38], 0xf37d437f
cmp dword [ebp - 0x20], eax
jl 0x10033974
mov ecx, ebx
jne 0x10033976
mov ecx, eax
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, 0x3cea2ff3
push 2
setl dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x2cc]
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2cc], esi
mov eax, dword [ebp - 0x4c]
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0xfffffffc
setne al
xor edx, edx
cmp eax, edi
mov eax, dword [ebp - 0x4c]
setl dl
xor ecx, ecx
cmp esi, eax
pop esi
setl cl
xor eax, eax
cmp ecx, edx
push 0
setne al
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x50]
pop eax
cmp dword [ebp - 0x50], esi
jle 0x1003395d
or ecx, 0xffffffff
dec dword [ebp - 0x2c]
jns 0x10033906
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x61c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c4]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
push 4
call fcn.10019553
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x24], 0x7278fa8f
mov dword [ebp - 0x28], 0xf992db75
mov dword [ebp - 0x10], eax
jmp 0x10033a88
push dword [ebp - 0x10]
lea ecx, [ebp - 0x61c]
call fcn.100195c0
mov dword [eax], 0x4f93
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033a71
mov ecx, dword [ebp - 0x24]
xor edx, edx
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, 0x9ef4a042
mov eax, dword [ebp - 0x24]
setne cl
add edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
or eax, 0xffffffff
cmp ecx, eax
je 0x10033ac6
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10033ac9
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x61c]
mov eax, dword [ebp - 0x24]
push ebx
call fcn.100195c0
mov edx, ebx
push 8
inc dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub edx, eax
sub edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0x77320756
cmp edx, eax
pop edx
setne cl
xor eax, eax
cmp ecx, edx
setle al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
je 0x10033b6f
xor eax, eax
lea ecx, [ebp - 0x61c]
mov dword [ebp - 0x4c], eax
or eax, 0xffffffff
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
push ebx
call fcn.100195c0
mov dword [ebp - 0x4c], 0xfffffffd
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
cmp eax, 0x8642
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
jmp 0x10033bef
xor eax, eax
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033b98
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x304], 0x4d083830
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10033b80
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10033baa
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x61c]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.100195c0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34], 5
sub eax, dword [ebp - 0x304]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xdd18
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x304]
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x24], eax
or eax, 0xffffffff
lea ecx, [ebp - 0x61c]
mov dword [ebp - 4], eax
call fcn.100195bb
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10033d04
push esi
lea ecx, [ebp - 0x730]
call fcn.10019553
mov dword [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x20], 0xd95da228
mov dword [ebp - 0x38], 0x4de6f885
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10033c5a
push dword [ebp - 0x10]
lea ecx, [ebp - 0x730]
call fcn.100195c0
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10033c40
xor eax, eax
push eax
lea ecx, [ebp - 0x730]
call fcn.100195c0
mov ecx, dword [ebp - 0x28]
xor edx, edx
cmp ecx, 0xfffffff6
push ebx
setne dl
xor ecx, ecx
cmp edx, dword [eax]
setl cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x730]
mov esi, dword [ebp - 0x20]
neg esi
sbb esi, esi
neg esi
call fcn.100195c0
xor ebx, ebx
lea ecx, [ebp - 0x730]
cmp dword [eax], esi
setge bl
xor esi, esi
inc esi
push esi
call fcn.100195c0
xor ecx, ecx
cmp dword [eax], ebx
setge cl
xor eax, eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x10033cec
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10033ce7
push eax
push eax
push eax
push 0x1740
push 0x909
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
xor eax, eax
dec dword [ebp - 0x28]
jns 0x10033cba
or eax, 0xffffffff
lea ecx, [ebp - 0x730]
mov dword [ebp - 4], eax
call fcn.100195bb
xor eax, eax
push eax
call edi
xor eax, eax
mov dword [ebp - 0x1c], 0xf0a290be
xor edx, edx
push 8
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x3c], 0x29207965
push 0xfffffffffffffffd
pop esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], 0xbb218ad3
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp ebx, eax
setge cl
xor edx, edx
imul ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
imul ecx, dword [ebp - 0x10], 0x9bbc0765
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor edx, edx
add ecx, dword [ebp - 0x1c]
cmp ecx, 0xfffffff8
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp eax, edx
setne cl
xor edx, edx
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, 0xab462a77
setne dl
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x10033dd9
cmp dword [ebp - 0x28], eax
je 0x10033dc1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3c], esi
jne 0x10033dd9
xor ebx, ebx
xor eax, eax
inc ebx
jmp 0x10033dde
xor ebx, ebx
inc ebx
mov eax, ebx
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov eax, dword [ebp - 0x10]
sub eax, 0xabe
cmp eax, 0xfffffff8
setl cl
cmp ecx, dword [ebp - 0x34]
jle 0x10033ed5
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], 0x511afd20
mov dword [ebp - 0x3c], 0xfffffff7
cmp dword [ebp - 0x3c], 0xffffffe8
jl 0x10033eed
or edi, 0xffffffff
mov dword [ebp - 0x20], 0xfffffff8
lea ecx, [ebp - 0xa9c]
push 2
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10033e5d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa9c]
call fcn.100195c0
mov dword [eax], 0x23fe2983
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033e3e
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x10033e76
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1c]
je 0x10033e74
mov edx, ebx
jmp 0x10033e78
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0xa9c]
push eax
call fcn.100195c0
mov edx, dword [ebp - 0x20]
mov esi, eax
mov ecx, dword [ebp - 0x38]
xor eax, eax
cmp ecx, edx
mov dword [ebp - 4], edi
mov ecx, 0xd2dc0978
setg al
cmp ecx, eax
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x34]
mov dword [esi], ecx
lea ecx, [ebp - 0xa9c]
call fcn.100195bb
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffe8
jge 0x10033e18
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectA]
jmp 0x10033eed
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10033eed
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x7a8], 0
jne 0x10033f5a
mov eax, dword [ebp - 0x18]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x7a8]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7a8], ecx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x7a8]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
sub ecx, 0x712bf5ea
cmp ecx, 0x5bea
setg al
cmp dword [ebp - 0x694], eax
jle 0x10033f57
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push 2
pop esi
push 0
mov eax, dword [ebp + eax*4 - 0x7a8]
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x18]
pop eax
cmp dword [ebp - 0x18], esi
jle 0x100337a4
mov dword [ebp - 0x1c], 0x9d29be1d
mov dword [ebp - 0x34], 0xef8a6ebb
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10033fb4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033f9f
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10033fd6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf9c], 0x6ffea1e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10033fbd
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x100340f8
push 6
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0xdf3d
mov dword [ebp - 0x38], 0x21dd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x74]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74], ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], eax
jmp 0x100340e1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10034060
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10f0], 0x7fefb659
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034047
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x100340de
or eax, 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0xfffffff9
setge cl
xor edx, edx
add ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
mov dword [ebp + eax*4 - 0x74], edx
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10ec], 0x4f0e
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
setg cl
xor eax, eax
cmp ecx, 0xfffe
setne al
imul eax, eax, 0x4f0e
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x74]
mov dword [ebp - 0xf94], eax
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10034068
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x1003403e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10033fe2
xor eax, eax
mov edi, dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1003410c
push eax
call edi
xor eax, eax
mov dword [ebp - 0x18], 0xb26bdde0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
je 0x100342cf
push 3
lea ecx, [ebp - 0x4dc]
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1003415d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4dc]
call fcn.100195c0
mov dword [eax], 0x6318d581
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1003413e
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x1003417d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x258], 0xfb023ed1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10034165
xor eax, eax
mov dword [ebp - 0x254], esi
cmp dword [ebp - 0x254], eax
jl 0x10034220
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100341b1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7ec], 0x46cdead9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034198
xor eax, eax
mov dword [ebp - 0x7e8], esi
cmp dword [ebp - 0x7e8], eax
jl 0x10034200
mov dword [ebp - 0x10], 0x8fdeb772
mov dword [ebp - 0x10], eax
jmp 0x100341f3
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100341f0
push 0x197c
push 0x168d
push 0x252
push 0x8fa
call dword [sym.imp.GDI32.dll_CreateRectRgn]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x100341cb
dec dword [ebp - 0x7e8]
jns 0x100341bf
push dword [ebp - 0x254]
lea ecx, [ebp - 0x4dc]
call fcn.100195c0
dec dword [ebp - 0x254]
push 0
pop eax
jns 0x1003418f
cmp dword [ebp - 0x18], eax
je 0x10034293
push esi
lea ecx, [ebp - 0x4dc]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ecx, 0x23f1
mov esi, eax
mov ecx, dword [ebp - 0x18]
setne dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setl bl
xor eax, eax
cmp ebx, ecx
setle al
xor ecx, ecx
cmp dword [esi], eax
mov eax, dword [ebp - 0x18]
setne cl
xor ebx, ebx
imul eax, ecx
lea ecx, [ebp - 0x4dc]
cmp eax, 0x8a2b8ea2
setne bl
xor eax, eax
mov dword [ebp - 0x254], ebx
push eax
call fcn.100195c0
sub ebx, dword [eax]
cmp ebx, dword [ebp - 0x18]
jle 0x1003428e
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10034295
xor ebx, ebx
xor eax, eax
inc ebx
mov esi, eax
push ebx
lea ecx, [ebp - 0x4dc]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x4dc]
setge dl
mov dword [eax], edx
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.100195bb
inc dword [ebp - 0x18]
push 2
pop esi
cmp dword [ebp - 0x18], esi
jne 0x1003411f
xor eax, eax
mov dword [ebp - 0x18], 0xb26bdde0
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
je 0x10034490
push 3
pop ebx
push ebx
lea ecx, [ebp - 0x5c0]
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10034320
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c0]
call fcn.100195c0
mov dword [eax], 0x6318d581
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10034302
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10034340
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x260], 0xfb023ed1
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10034328
xor eax, eax
mov dword [ebp - 0x25c], esi
cmp dword [ebp - 0x25c], eax
jl 0x100343e1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034372
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x8ac], 0x46cdead9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003435a
xor eax, eax
mov dword [ebp - 0x8a8], esi
cmp dword [ebp - 0x8a8], eax
jl 0x100343c1
mov dword [ebp - 0x10], 0x8fdeb772
mov dword [ebp - 0x10], eax
jmp 0x100343b4
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100343b1
push 0x197c
push 0x168d
push 0x252
push 0x8fa
call dword [sym.imp.GDI32.dll_CreateRectRgn]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x1003438c
dec dword [ebp - 0x8a8]
jns 0x10034380
push dword [ebp - 0x25c]
lea ecx, [ebp - 0x5c0]
call fcn.100195c0
dec dword [ebp - 0x25c]
push 0
pop eax
jns 0x10034352
cmp dword [ebp - 0x18], eax
je 0x10034451
push esi
lea ecx, [ebp - 0x5c0]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ecx, 0x23f1
mov esi, eax
mov ecx, dword [ebp - 0x18]
setne dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setl bl
xor eax, eax
cmp ebx, ecx
setle al
xor ecx, ecx
cmp dword [esi], eax
mov eax, dword [ebp - 0x18]
setne cl
xor ebx, ebx
imul eax, ecx
lea ecx, [ebp - 0x5c0]
cmp eax, 0x8a2b8ea2
setne bl
xor eax, eax
mov dword [ebp - 0x25c], ebx
push eax
call fcn.100195c0
sub ebx, dword [eax]
cmp ebx, dword [ebp - 0x18]
jle 0x1003444f
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10034456
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push ebx
lea ecx, [ebp - 0x5c0]
call fcn.100195c0
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x5c0]
setge dl
mov dword [eax], edx
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.100195bb
inc dword [ebp - 0x18]
push 2
pop esi
cmp dword [ebp - 0x18], esi
jne 0x100342e2
xor eax, eax
mov dword [ebp - 0x1c], 0x9d29be1d
mov dword [ebp - 0x34], 0xef8a6ebb
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100344c1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x78], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100344ac
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x100344e3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x103c], 0x6ffea1e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100344ca
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x10034605
push 6
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0xdf3d
mov dword [ebp - 0x38], 0x21dd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x78]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], eax
jmp 0x100345ee
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1003456d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1108], 0x7fefb659
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034554
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x100345eb
or eax, 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0xfffffff9
setge cl
xor edx, edx
add ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
mov dword [ebp + eax*4 - 0x78], edx
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1104], 0x4f0e
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
setg cl
xor eax, eax
cmp ecx, 0xfffe
setne al
imul eax, eax, 0x4f0e
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x1034], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x1034], eax
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10034575
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
jle 0x1003454b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x100344ef
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10034613
push eax
call edi
xor eax, eax
mov dword [ebp - 0x24], 0x5596960f
or edx, 0xffffffff
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x5c], 0x8fbfc75d
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0x67d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034655
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034640
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034675
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x168], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1003465d
xor eax, eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x100346d0
mov dword [ebp - 0x10], 0xe08974b6
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1d4], 0
jne 0x100346ce
mov dword [ebp - 0x10], esi
xor eax, eax
cmp dword [ebp - 0x10], eax
jl 0x100346c6
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1d4], 7
jae 0x100346bc
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1d4], 0
jne 0x100346bc
xor eax, eax
jmp 0x100346be
mov eax, ebx
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x10]
jns 0x1003469e
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x1003467d
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jg 0x100347f4
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x44], 0xda6c2e3a
mov dword [ebp - 0x48], 0xfffffffb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1d4]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xfffffffd
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x1d4]
mov eax, dword [ebp - 0x168]
sub ecx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1d4]
cmp eax, edx
mov edx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x24]
setl cl
add edx, ecx
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x1d4]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, esi
setg al
xor ebx, ebx
inc ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov ecx, ebx
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x1cc]
je 0x100347c3
mov dword [ebp - 0x10], eax
jmp 0x100347b6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3c4], 0xeb1ec6c0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100347a5
inc dword [ebp - 0x3c4]
jmp 0x100347de
mov dword [ebp - 0x28], eax
jmp 0x100347d9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x168], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x100347c8
inc dword [ebp - 0x24]
push 2
pop esi
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x24], esi
jle 0x100346dc
xor eax, eax
or edx, edx
mov dword [ebp - 0x1c], 0x9d29be1d
mov dword [ebp - 0x34], 0xef8a6ebb
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10034825
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x70], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10034810
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10034847
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xfbc], 0x6ffea1e1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1003482e
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x1003496f
push 6
pop eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0xdf3d
mov dword [ebp - 0x38], 0x21dd
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], ecx
xor eax, eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], eax
jmp 0x10034955
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100348d1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1120], 0x7fefb659
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100348b8
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], eax
jg 0x1003494f
mov dword [ebp - 0x4c], edx
xor ecx, ecx
mov eax, dword [ebp - 0x38]
cmp eax, 0xfffffff9
push 0xffffffffffffffff
setge cl
xor edx, edx
add ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
mov dword [ebp + eax*4 - 0x70], edx
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x111c], 0x4f0e
mov eax, dword [ebp - 0x1c]
cmp eax, ebx
pop edx
setg cl
xor eax, eax
cmp ecx, 0xfffe
setne al
imul eax, eax, 0x4f0e
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0xfb4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov dword [ebp - 0xfb4], eax
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x100348d9
inc dword [ebp - 0x34]
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x34], eax
jle 0x100348af
inc dword [ebp - 0x1c]
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x1c], eax
jle 0x10034853
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1003497d
push eax
call edi
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], ebx
push 8
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x1c], 0xfffffff5
cmp dword [ebp - 0x1c], 0xfffffffa
jle 0x10034ba3
or edi, 0xffffffff
jmp 0x100349a8
xor eax, eax
mov dword [ebp - 0x24], 0xac488899
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100349c8
push 0x1a61
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0xd373
setl al
xor edx, edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0x14ff
mov ecx, dword [ebp - 0x24]
setl al
xor edx, edx
sub ecx, eax
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c]
jne 0x10034a42
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x2c], eax
je 0x10034a44
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
je 0x10034ad5
mov dword [ebp - 0x20], edi
xor eax, eax
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x18], eax
jmp 0x10034aca
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x2c], 0xfffffff2
jmp 0x10034ac1
mov dword [ebp - 0x5c], 0xd3cc
mov eax, dword [ebp - 0x1c]
sub eax, 0x422b7bf9
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setl dl
cmp dword [ebp - 0x1c], edx
je 0x10034aa5
mov eax, dword [ebp - 0x20]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1b
je 0x10034a6c
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe6
je 0x10034a60
jmp 0x10034b96
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
je 0x10034b96
jmp 0x10034aee
xor eax, eax
mov dword [ebp - 0x4c], 0x7f1a9f13
mov dword [ebp - 0x38], 0x1f15f1d3
mov dword [ebp - 0x10], eax
jmp 0x10034b0e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xbec], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034b01
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbe4], eax
test eax, eax
jne 0x10034b3e
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xbec]
imul eax, eax, 0x67b3
cmp eax, dword [ebp - 0xbe4]
jle 0x10034b3e
xor eax, eax
mov ecx, eax
jmp 0x10034b40
mov ecx, ebx
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x24]
imul ecx, ecx, 6
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp ebx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x10034b80
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe9
push 1
pop ebx
jne 0x10034aec
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jg 0x100349a6
mov edi, dword [sym.imp.USER32.dll_SystemParametersInfoA]
xor eax, eax
mov dword [ebp - 0x28], 0x831713b9
mov dword [ebp - 0x28], eax
jmp 0x10034cd4
push 3
lea ecx, [ebp - 0x4f4]
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x10], eax
jmp 0x10034be3
push dword [ebp - 0x10]
call fcn.100195c0
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
lea ecx, [ebp - 0x4f4]
jl 0x10034bd5
push ebx
call fcn.100195c0
mov dword [eax], 0xffffffe7
jmp 0x10034cab
push ebx
lea ecx, [ebp - 0xdd0]
call fcn.10019553
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x10], 0xb61bab59
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034c3c
push dword [ebp - 0x10]
lea ecx, [ebp - 0xdd0]
call fcn.100195c0
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10034c21
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10034c59
push 0x36f
push eax
push 0x167
push 0x22d2
call edi
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10034c89
mov dword [ebp - 0x48], 0x9d43467
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], eax
jl 0x10034c86
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10034c81
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
xor eax, eax
dec dword [ebp - 0x48]
jns 0x10034c6d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10034c5e
lea ecx, [ebp - 0xdd0]
mov byte [ebp - 4], 0x10
call fcn.100195bb
push ebx
lea ecx, [ebp - 0x4f4]
call fcn.100195c0
inc dword [eax]
push ebx
lea ecx, [ebp - 0x4f4]
call fcn.100195c0
cmp dword [eax], 0xa
je 0x10034c00
or eax, 0xffffffff
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 4], eax
call fcn.100195bb
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff6
jg 0x10034bba
push ebx
lea ecx, [ebp - 0x3fc]
call fcn.10019553
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x38], 0x8b1647c2
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034d20
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3fc]
call fcn.100195c0
mov dword [eax], 0x83c7730f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10034d02
xor eax, eax
push eax
lea ecx, [ebp - 0x3fc]
call fcn.100195c0
xor eax, eax
lea ecx, [ebp - 0x3fc]
push eax
call fcn.100195c0
xor eax, eax
lea ecx, [ebp - 0x3fc]
push eax
call fcn.100195c0
xor eax, eax
lea ecx, [ebp - 0x3fc]
push eax
call fcn.100195c0
cmp dword [eax], ebx
jae 0x10034d8e
mov dword [ebp - 0x10], 0x65425a80
xor eax, eax
mov dword [ebp - 0x38], 0xd8b9dbea
mov dword [ebp - 0x20], 0xa3a92bd4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x1d
jl 0x10034dba
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1d
jge 0x10034d7a
jmp 0x10034db8
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10034da1
push eax
call dword [sym.imp.USER32.dll_ShowCursor]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10034db8
push eax
push ebx
push 0x1047
push eax
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
xor eax, eax
push eax
lea ecx, [ebp - 0x3fc]
call fcn.100195c0
lea ecx, [ebp - 0x3fc]
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.100195bb
mov dword [ebp - 0x1c], 0xb26bdde0
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], ebx
push 8
pop eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x1c], 0xfffffff5
cmp dword [ebp - 0x1c], 0xfffffffa
jle 0x10034f53
or edi, 0xffffffff
mov dword [ebp - 0x24], 0xac488899
xor eax, eax
mov dword [ebp - 0x18], edi
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x10034e2b
push 0x1a61
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0xd373
setl al
xor edx, edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0x14ff
mov ecx, dword [ebp - 0x24]
setl al
xor edx, edx
sub ecx, eax
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c]
jne 0x10034ea5
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x2c], eax
je 0x10034ea7
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
je 0x10034f66
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x18], eax
jmp 0x10034f37
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x2c], 0xfffffff2
cmp dword [ebp - 0x2c], 0x1b
jne 0x10034f34
mov dword [ebp - 0x5c], 0xd3cc
mov eax, dword [ebp - 0x1c]
sub eax, 0x422b7bf9
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setl dl
cmp dword [ebp - 0x1c], edx
je 0x10034f0f
mov eax, dword [ebp - 0x20]
xor eax, eax
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setl dl
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1b
je 0x10034ed6
or ecx, 0xffffffff
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe6
je 0x10034ec6
or edi, 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jg 0x10034e0a
mov edi, dword [sym.imp.USER32.dll_SystemParametersInfoA]
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
je 0x10036351
jmp 0x1003502a
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
je 0x10034f40
jmp 0x10034f7b
xor eax, eax
mov dword [ebp - 0x4c], 0x7f1a9f13
mov dword [ebp - 0x38], 0x1f15f1d3
mov dword [ebp - 0x10], eax
jmp 0x10034f9b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xab4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034f8e
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xaac], eax
test eax, eax
jne 0x10034fcb
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xab4]
imul eax, eax, 0x67b3
cmp eax, dword [ebp - 0xaac]
jle 0x10034fcb
xor eax, eax
mov ecx, eax
jmp 0x10034fcd
mov ecx, ebx
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x24]
imul ecx, ecx, 6
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp ebx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1003500d
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe9
push 1
pop ebx
jne 0x10034f79
jmp 0x10034f40
xor eax, eax
mov dword [ebp - 0x44], ebx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10035045
push eax
push eax
push 0x9bd
call dword [sym.imp.ADVAPI32.dll_CopySid]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10035066
push ebx
push 0x13c3
push 0x1af4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
push 3
lea ecx, [ebp - 0x584]
call fcn.10019553
mov dword [ebp - 4], 0x13
or eax, 0xffffffff
mov dword [ebp - 0x34], 0x31713b91
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x30], 0x9be5411a
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x48], eax
push 6
pop eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff4
jge 0x10035157
mov dword [ebp - 0x3c], 0x7be7e550
mov dword [ebp - 0x10], 0x7582ba8d
push 8
pop eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x30]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
cmp eax, 0xcd02
setg cl
imul eax, ecx, 0x3afd
test eax, eax
je 0x10035100
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x3c]
imul edx, dword [ebp - 0x48]
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xfffffff7
setle al
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
test eax, eax
setle cl
xor eax, eax
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x20], eax
jne 0x10035155
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffff4
jl 0x100350ad
xor eax, eax
mov dword [ebp - 0x2c], 0x99841b3c
push 0xfffffffffffffff8
pop ecx
mov dword [ebp - 0x3b8], ecx
mov dword [ebp - 0x3b4], ecx
mov dword [ebp - 0x3b0], ecx
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x2c], 0xb
jmp 0x10035199
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10035196
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x14
jne 0x10035182
push 3
mov dword [ebp - 0x2c], eax
pop ecx
jmp 0x100351d2
mov dword [ebp - 0x48], 0x43046b6e
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], eax
jl 0x100351cf
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100351c7
call dword [sym.imp.USER32.dll_CreateMenu]
xor eax, eax
dec dword [ebp - 0x48]
jns 0x100351b6
push 3
pop ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jle 0x100351a7
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x20], 0xfffa
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10035219
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1354], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10035201
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1003522d
call dword [sym.imp.KERNEL32.dll_GetVersion]
push 3
xor eax, eax
pop ecx
dec dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
jmp 0x1003524f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x584]
call fcn.100195c0
push 3
pop ecx
mov dword [eax], 0x6318d581
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035235
push ecx
lea ecx, [ebp - 0x26c]
call fcn.10019553
mov byte [ebp - 4], 0x14
or eax, 0xffffffff
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], eax
jmp 0x10035285
push dword [ebp - 0x10]
call fcn.100195c0
mov dword [eax], 0xf5540d7f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
lea ecx, [ebp - 0x26c]
jl 0x10035274
push ebx
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x26c]
mov dword [eax], 0xfffffffc
call fcn.100195c0
push 8
pop ecx
cmp dword [eax], ecx
jg 0x1003537f
or edi, 0xffffffff
push 6
pop eax
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x26c]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x48], 0x84365721
mov eax, dword [ebp - 0x4c]
push ebx
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x26c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x26c]
call fcn.100195c0
mov edx, dword [ebp - 0x20]
mov esi, eax
mov ecx, dword [ebp - 0x48]
xor eax, eax
cmp edx, ecx
setl al
cmp eax, ebx
sbb ecx, ecx
neg ecx
sub ecx, dword [ebp - 0x48]
mov eax, dword [esi]
add eax, 0xfffffff9
add ecx, eax
mov eax, dword [ebp - 0x20]
add eax, ecx
cmp eax, edi
jbe 0x10035323
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x4c]
inc ecx
neg ecx
push ebx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x54e7f13b
setge al
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x4c]
setns dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x26c]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
call fcn.100195c0
push ebx
lea ecx, [ebp - 0x26c]
inc dword [eax]
call fcn.100195c0
push 8
pop ecx
cmp dword [eax], ecx
jle 0x100352b7
mov edi, dword [sym.imp.USER32.dll_SystemParametersInfoA]
push 2
pop esi
lea ecx, [ebp - 0x26c]
mov byte [ebp - 4], 0x13
call fcn.100195bb
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100353b0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x248], 0xfb023ed1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10035398
xor eax, eax
mov dword [ebp - 0x2c], 0xce125d16
mov dword [ebp - 0x18], 0xa062b000
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100353e3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2b4], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100353ce
xor eax, eax
mov dword [ebp - 0x2c], esi
cmp dword [ebp - 0x2c], eax
jl 0x100354ce
or ecx, 0xffffffff
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x3809d01
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x50], 0x3187110e
mov dword [ebp - 0x10], eax
jmp 0x10035439
mov dword [ebp - 0x44], 0x2830
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x85613717
mov dword [ebp - 0x44], 6
mov dword [ebp - 0x44], ebx
dec dword [ebp - 0x50]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x10035418
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], esi
jg 0x100354bf
or edi, 0xffffffff
mov dword [ebp - 0x20], 0xd3d47825
mov dword [ebp - 0x38], 0xf37d437f
cmp dword [ebp - 0x20], eax
jl 0x10035460
mov ecx, ebx
jne 0x10035462
mov ecx, eax
mov eax, dword [ebp - 0x50]
xor edx, edx
cmp ecx, 0x3cea2ff3
push 2
setl dl
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x2b4]
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x2b4], esi
mov eax, dword [ebp - 0x4c]
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0xfffffffc
setne al
xor edx, edx
cmp eax, edi
mov eax, dword [ebp - 0x4c]
setl dl
xor ecx, ecx
cmp esi, eax
pop esi
setl cl
xor eax, eax
cmp ecx, edx
push 0
setne al
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x50]
pop eax
cmp dword [ebp - 0x50], esi
jle 0x10035449
or ecx, 0xffffffff
dec dword [ebp - 0x2c]
jns 0x100353f2
mov edi, dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2b0]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x244], esi
cmp dword [ebp - 0x244], eax
jl 0x100360b1
push 4
lea ecx, [ebp - 0x6a0]
call fcn.10019553
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x24], 0x7278fa8f
mov dword [ebp - 0x28], 0xf992db75
mov dword [ebp - 0x10], eax
jmp 0x10035585
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6a0]
call fcn.100195c0
mov dword [eax], 0x4f93
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1003556e
mov ecx, dword [ebp - 0x24]
xor edx, edx
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, 0x9ef4a042
mov eax, dword [ebp - 0x24]
setne cl
add edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
or eax, 0xffffffff
cmp ecx, eax
je 0x100355c3
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x100355c6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x6a0]
mov eax, dword [ebp - 0x24]
push ebx
call fcn.100195c0
mov edx, ebx
push 8
inc dword [eax]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub edx, eax
sub edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0x77320756
cmp edx, eax
pop edx
setne cl
xor eax, eax
cmp ecx, edx
setle al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
sub ecx, eax
je 0x1003566c
xor eax, eax
lea ecx, [ebp - 0x6a0]
mov dword [ebp - 0x4c], eax
or eax, 0xffffffff
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
push ebx
call fcn.100195c0
mov dword [ebp - 0x4c], 0xfffffffd
xor ecx, ecx
mov eax, dword [ebp - 0x4c]
cmp eax, 0x8642
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
jmp 0x100356ec
xor eax, eax
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035695
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x334], 0x4d083830
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1003567d
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100356a7
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x6a0]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.100195c0
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34], 5
sub eax, dword [ebp - 0x334]
neg eax
sbb eax, eax
inc eax
imul eax, eax, 0xdd18
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x334]
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0x6a0]
mov byte [ebp - 4], 0x13
call fcn.100195bb
push 3
lea ecx, [ebp - 0xf3c]
call fcn.10019553
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10035739
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf3c]
call fcn.100195c0
mov dword [eax], 0x8bbc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1003571a
xor eax, eax
mov dword [ebp - 0x50], esi
cmp dword [ebp - 0x50], eax
jl 0x1003578a
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], esi
cmp dword [ebp - 0x48], eax
jl 0x10035785
or ecx, 0xffffffff
mov dword [ebp - 0x38], 0x921d
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x10035780
push 0xed5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
xor eax, eax
or ecx, 0xffffffff
dec dword [ebp - 0x48]
jns 0x1003574f
dec dword [ebp - 0x50]
jns 0x10035741
push 6
pop ecx
mov dword [ebp - 0x50], ecx
jmp 0x100357ae
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x100357ab
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
xor eax, eax
dec dword [ebp - 0x50]
cmp dword [ebp - 0x50], esi
jle 0x10035792
lea ecx, [ebp - 0xf3c]
mov byte [ebp - 4], 0x13
call fcn.100195bb
mov dword [ebp - 0x28], 0x5cbd9454
lea ecx, [ebp - 0xc94]
push 5
mov dword [ebp - 0x20], 0xe0c863cc
pop eax
mov dword [ebp - 0x20], 0xf748dc16
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xf215
push 4
call fcn.10019553
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x38], 0xd32de9e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10035820
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1138], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035807
mov dword [ebp - 0x18], eax
jmp 0x10035839
movdqa xmm0, xmmword [0x100098f0]
lea ecx, [ebp - 0x1308]
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x10ac]
push eax
mov dword [ebp - 0x38], esi
lea eax, [ebp - 0x10bc]
mov dword [ebp - 0x44], 0x6a162c9c
mov dword [ebp - 0x48], 0xfa4ad744
mov dword [ebp - 0x30], 0x76881957
push eax
movdqu xmmword [ebp - 0x10bc], xmm0
call fcn.100195cf
lea ecx, [ebp - 0x15f]
mov esi, eax
call fcn.1000ab33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xd0c]
push dword [esi]
call fcn.10019595
mov byte [ebp - 4], 0x20
xor eax, eax
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x34], 0x2e206c16
mov dword [ebp - 0x20], 0xedb9
mov dword [ebp - 0x5c], 0xfffffff8
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1003615b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1150], 0xe279
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10036143
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1003617d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1424], 0x5d5e
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10036164
xor eax, eax
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x10036229
push 6
pop edx
mov dword [ebp - 0x44], 0xfa9d
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0xbb8bffb
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x44], 0xf04b064b
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x44], 0x678e045
mov dword [ebp - 0x44], 0x83bc1b0f
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0xffff
mov dword [ebp - 0x44], 0x188b9abc
mov dword [ebp - 0x44], 0xdbc1
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x44], 0xfc7b
mov dword [ebp - 0x44], 0xfb55e8a0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1003621a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1384], 0x4b6046e7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10036202
xor eax, eax
dec dword [ebp - 0x4c]
dec dword [ebp - 0x20]
dec dword [ebp - 0x28]
jns 0x10036190
mov esi, dword [ebp - 0x48]
push ecx
lea ecx, [ebp - 0xd0c]
call fcn.100195c0
mov dword [eax], esi
or eax, 0xffffffff
cmp esi, eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x38]
je 0x10036268
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xd0c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x5c]
xor eax, eax
push eax
call fcn.100195c0
mov ecx, ebx
jmp 0x1003626c
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x114c]
add eax, ecx
mov ecx, dword [ebp - 0x34]
imul ecx, eax
mov eax, dword [ebp - 0x3c]
sub eax, ecx
lea ecx, [ebp - 0xd0c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
dec eax
neg eax
sbb eax, eax
add eax, 0xffff0007
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 0x13
call fcn.100195bb
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10036317
push 2
lea ecx, [ebp - 0x584]
call fcn.100195c0
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, 0x23f1
mov esi, eax
mov ecx, dword [ebp - 0x1c]
setne dl
xor ebx, ebx
cmp edx, ecx
mov ecx, dword [ebp - 0x1c]
setl bl
xor eax, eax
cmp ebx, ecx
setle al
xor ecx, ecx
cmp dword [esi], eax
mov eax, dword [ebp - 0x1c]
setne cl
xor ebx, ebx
imul eax, ecx
lea ecx, [ebp - 0x584]
cmp eax, 0x8a2b8ea2
setne bl
xor eax, eax
mov dword [ebp - 0x244], ebx
push eax
call fcn.100195c0
sub ebx, dword [eax]
cmp ebx, dword [ebp - 0x1c]
jle 0x10036312
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10036319
xor ebx, ebx
xor eax, eax
inc ebx
mov esi, eax
push ebx
lea ecx, [ebp - 0x584]
call fcn.100195c0
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp esi, ecx
lea ecx, [ebp - 0x584]
setge dl
mov dword [eax], edx
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.100195bb
inc dword [ebp - 0x1c]
push 2
pop esi
cmp dword [ebp - 0x1c], esi
jne 0x10035028
mov dword [ebp - 0x30], 0xc4b4
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x24], 0xdb8faaae
or eax, 0xffffffff
mov dword [ebp - 0x34], 0xbb94d0f
mov dword [ebp - 0x28], eax
push 3
call fcn.10019553
push 5
mov dword [ebp - 4], 0x21
pop eax
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100363b0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x300]
call fcn.100195c0
mov dword [eax], 0x4c57
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10036391
xor eax, eax
mov edi, dword [sym.imp.GDI32.dll_GetObjectType]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100363c4
push eax
call edi
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x1003640e
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xffffcd0e
cmp eax, edx
setge cl
cmp ecx, dword [ebp - 0x34]
jl 0x100363f4
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x24], eax
je 0x100363f6
mov edx, ebx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
xor eax, eax
cmp dword [ebp - 0x24], 0x11f3813b
je 0x100365b7
mov dword [ebp - 0x48], 0xfffffffc
push 8
pop ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x10], 0x545435d7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003645a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x39c], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036442
xor eax, eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x10036587
mov dword [ebp - 0x20], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x10], eax
jmp 0x10036485
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7ac], 0xd55e0ecf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036474
mov eax, dword [ebp - 0x48]
xor ecx, ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x39c], edx
mov eax, dword [ebp - 0x34]
cmp edx, eax
setg cl
cmp dword [ebp - 0x48], ecx
jg 0x100364ba
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x39c], eax
je 0x100364bc
mov edx, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x7ac], ecx
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x300]
push dword [ebp - 0x24]
call fcn.100195c0
mov edx, dword [ebp - 0x4c]
mov esi, eax
mov ecx, dword [ebp - 0x24]
xor eax, eax
cmp edx, ecx
setl al
sub eax, dword [esi]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
neg edx
cmp edx, dword [ebp - 0x28]
jg 0x10036528
mov eax, dword [ebp - 0x28]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x300]
call fcn.100195c0
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x300]
push dword [ebp - 0x24]
call fcn.100195c0
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10036554
mov eax, dword [ebp - 0x4c]
push 2
lea ecx, [ebp - 0x300]
call fcn.100195c0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x300]
mov esi, eax
call fcn.100195c0
mov ecx, dword [esi]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x24]
pop eax
push 8
pop ecx
jns 0x10036466
push 2
pop esi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036646
push 0x1bfa
push 0x13af
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
jmp 0x10036646
mov dword [ebp - 0x2c], 0xefab
lea ecx, [ebp - 0x300]
mov dword [ebp - 0x20], 0x80bfd780
push eax
mov dword [ebp - 0x38], 0x949e3b93
call fcn.100195c0
cmp dword [eax], 0
je 0x10036630
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x1003662a
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0x35d
setne cl
sub ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x34]
imul eax, edx, 0xffff
cmp eax, 0xccc4
mov eax, dword [ebp - 0x2c]
setge cl
sub eax, ecx
je 0x1003662d
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setl dl
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
or eax, 0xffffffff
lea ecx, [ebp - 0x300]
mov dword [ebp - 4], eax
call fcn.100195bb
mov dword [ebp - 0x24], 0x5596960f
or ecx, 0xffffffff
mov dword [ebp - 0x4c], ecx
xor eax, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x5c], 0x8fbfc75d
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0x67d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003669b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ec], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10036686
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100366bb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x170], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100366a3
xor eax, eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x10036716
mov dword [ebp - 0x10], 0xe08974b6
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1ec], 0
jne 0x10036714
mov dword [ebp - 0x10], esi
xor eax, eax
cmp dword [ebp - 0x10], eax
jl 0x1003670c
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1ec], 7
jae 0x10036702
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x1ec], 0
jne 0x10036702
xor eax, eax
jmp 0x10036704
mov eax, ebx
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x10]
jns 0x100366e4
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x100366c3
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], esi
jg 0x1003683c
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x44], 0xda6c2e3a
mov dword [ebp - 0x48], 0xfffffffb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xfffffffd
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x170]
sub ecx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1ec]
cmp eax, edx
mov edx, dword [ebp - 0x170]
mov eax, dword [ebp - 0x24]
setl cl
add edx, ecx
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x1ec]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, esi
setg al
xor ebx, ebx
inc ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov ecx, ebx
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x1e4]
je 0x1003680b
mov dword [ebp - 0x10], eax
jmp 0x100367fe
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x344], 0xeb1ec6c0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100367ed
inc dword [ebp - 0x344]
jmp 0x10036826
mov dword [ebp - 0x28], eax
jmp 0x10036821
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x170], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x10036810
inc dword [ebp - 0x24]
push 2
pop esi
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0x24], esi
jle 0x10036722
xor eax, eax
or ecx, ecx
mov dword [ebp - 0x24], 0x5596960f
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x5c], 0x8fbfc75d
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0x67d
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003687b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x21c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10036866
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1003689b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x178], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10036883
xor eax, eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x100368f6
mov dword [ebp - 0x10], 0xe08974b6
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x21c], 0
jne 0x100368f4
mov dword [ebp - 0x10], esi
xor eax, eax
cmp dword [ebp - 0x10], eax
jl 0x100368ec
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x21c], 7
jae 0x100368e2
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x21c], 0
jne 0x100368e2
xor eax, eax
jmp 0x100368e4
mov eax, ebx
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x10]
jns 0x100368c4
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x100368a3
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10036a0b
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x44], 0xda6c2e3a
mov dword [ebp - 0x48], 0xfffffffb
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x21c]
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x21c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xfffffffd
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x21c]
mov eax, dword [ebp - 0x178]
sub ecx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x21c]
cmp eax, edx
mov edx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x24]
setl cl
add edx, ecx
xor ecx, ecx
mov esi, dword [ebp + eax*4 - 0x21c]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, esi
setg al
xor ebx, ebx
inc ebx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
mov ecx, ebx
sub ecx, eax
xor eax, eax
add ecx, dword [ebp - 0x214]
je 0x100369e7
mov dword [ebp - 0x10], eax
jmp 0x100369da
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3a0], 0xeb1ec6c0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100369c9
inc dword [ebp - 0x3a0]
jmp 0x10036a02
mov dword [ebp - 0x28], eax
jmp 0x100369fd
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x178], 0xfffffffd
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x100369ec
inc dword [ebp - 0x24]
push 2
pop esi
push 0xffffffffffffffff
pop ecx
cmp dword [ebp - 0x24], esi
jle 0x100368fe
mov dword [ebp - 0x34], 0xfffffff9
lea ecx, [ebp - 0xafc]
push ebx
call fcn.10019553
xor eax, eax
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x10], eax
jmp 0x10036a4b
push dword [ebp - 0x10]
lea ecx, [ebp - 0xafc]
call fcn.100195c0
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036a35
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xf
jmp 0x10036b5c
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10036a84
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x94], 0xbf390197
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036a6c
xor eax, eax
mov dword [ebp - 0x94], eax
push 6
pop eax
cmp dword [ebp - 0x94], eax
jl 0x10036b53
push 3
lea ecx, [ebp - 0x450]
call fcn.10019553
xor eax, eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x10], eax
jmp 0x10036abe
push dword [ebp - 0x10]
call fcn.100195c0
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
lea ecx, [ebp - 0x450]
jl 0x10036ab1
push esi
call fcn.100195c0
xor ebx, ebx
mov dword [eax], ebx
jmp 0x10036b1c
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036aef
inc eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
push esi
lea ecx, [ebp - 0x450]
call fcn.100195c0
lea ecx, [ebp - 0xafc]
push dword [eax]
call fcn.100195c0
xor ebx, ebx
cmp dword [eax], ebx
jne 0x10036b2c
push esi
lea ecx, [ebp - 0x450]
call fcn.100195c0
dec dword [eax]
push esi
lea ecx, [ebp - 0x450]
call fcn.100195c0
cmp dword [eax], ebx
jge 0x10036ad6
lea ecx, [ebp - 0x450]
mov byte [ebp - 4], 0x22
call fcn.100195bb
inc dword [ebp - 0x94]
push 6
pop eax
push 1
pop ebx
cmp dword [ebp - 0x94], eax
jge 0x10036a99
mov eax, dword [ebp - 0x94]
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xffffffef
jge 0x10036a62
or eax, 0xffffffff
lea ecx, [ebp - 0xafc]
mov dword [ebp - 4], eax
call fcn.100195bb
movdqa xmm0, xmmword [0x100098c0]
lea eax, [ebp - 0xfcc]
push eax
lea eax, [ebp - 0xfdc]
mov dword [ebp - 0x1c], 0x38e8
mov dword [ebp - 0x54], 0xfffffffe
lea ecx, [ebp - 0x1258]
mov dword [ebp - 0x34], ebx
push eax
movdqu xmmword [ebp - 0xfdc], xmm0
call fcn.100195cf
lea ecx, [ebp - 0x169]
mov esi, eax
call fcn.1000ab33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xc1c]
push dword [esi]
call fcn.10019595
mov dword [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff6
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036bee
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x10036c07
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
test eax, eax
mov eax, dword [ebp - 0x1c]
sets dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
add eax, 0x3c17
add eax, ecx
mov dword [ebp - 0x34], eax
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10036cbd
mov dword [ebp - 0x34], eax
jmp 0x10036c97
mov dword [ebp - 0x54], 9
jmp 0x10036c8e
mov dword [ebp - 0x1c], eax
jmp 0x10036c85
mov dword [ebp - 0x28], 0x17530975
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10036c82
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc1c]
call fcn.100195c0
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x10036c64
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 7
jl 0x10036c54
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0x10
jge 0x10036c4f
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x16
jle 0x10036c46
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036d59
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x10036d59
push ebx
lea ecx, [ebp - 0x6ac]
call fcn.10019553
push 8
mov byte [ebp - 4], 0x25
pop eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10036cfb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6ac]
call fcn.100195c0
mov dword [eax], 0xc97de2e5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10036cdd
xor eax, eax
push eax
lea ecx, [ebp - 0x6ac]
call fcn.100195c0
xor eax, eax
lea ecx, [ebp - 0x6ac]
push eax
call fcn.100195c0
lea ecx, [ebp - 0x6ac]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
xor eax, eax
push eax
call fcn.100195c0
push 2
lea ecx, [ebp - 0xc1c]
call fcn.100195c0
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x54]
cmp eax, 0xa026
setne cl
add ecx, 3
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x6ac]
call fcn.100195bb
or esi, 0xffffffff
lea ecx, [ebp - 0xc1c]
mov dword [ebp - 4], esi
call fcn.100195bb
mov dword [ebp - 0x1c], ebx
push 8
mov dword [ebp - 0x2c], ebx
pop eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], 7
mov dword [ebp - 0x1c], 0xfffffff5
jmp 0x10036f7b
mov dword [ebp - 0x24], 0xac488899
xor eax, eax
mov dword [ebp - 0x18], esi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036daa
push 0x1a61
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0xd373
setl al
xor edx, edx
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setl cl
xor eax, eax
cmp ecx, 0x14ff
mov ecx, dword [ebp - 0x24]
setl al
xor edx, edx
sub ecx, eax
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x1c]
jne 0x10036e24
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x2c], eax
je 0x10036e26
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
sub ecx, eax
je 0x10036eb7
mov dword [ebp - 0x20], esi
xor eax, eax
mov dword [ebp - 0x4c], 3
mov dword [ebp - 0x18], eax
jmp 0x10036eac
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x2c], 0xfffffff2
jmp 0x10036ea3
cmp dword [ebp - 0x2c], 0x1b
je 0x10036e4e
cmp dword [ebp - 0x18], 0xffffffe6
je 0x10036e42
jmp 0x10036f78
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
je 0x10036f78
jmp 0x10036ed0
mov dword [ebp - 0x4c], 0x7f1a9f13
mov dword [ebp - 0x38], 0x1f15f1d3
mov dword [ebp - 0x10], eax
jmp 0x10036ef0
cmp dword [ebp - 0x10], 3
jl 0x10036ee3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffa
jg 0x10036d89
push 4
lea ecx, [ebp - 0x50c]
call fcn.10019553
mov dword [ebp - 4], 0x26
mov dword [ebp - 0x44], 0xc4888999
push 6
pop eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x20], 0x9c25b054
mov dword [ebp - 0x5c], 0xfffb
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10036fde
push dword [ebp - 0x18]
lea ecx, [ebp - 0x50c]
call fcn.100195c0
mov dword [eax], 0x3eee2fde
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10036fbf
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10037000