Function at 0x10032aad
Capabilities:
Check os version
Get disk information
Get disk size
Get file size
Get graphical window text
Get system information on windows
Identify system language via api
Parse pe header
Read .ini file
Resume thread
Set registry value
Start service

Disassembly:
mov eax, 0x10088d5b
call fcn.10087a98
mov eax, 0x1444
call fcn.100824d0
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x5c], ecx
push edi
inc ebx
mov dword [ebp - 0x18], 0xc70c
mov dword [ebp - 0x28], 0xd44ad374
lea ecx, [ebp - 0x338]
push ebx
mov byte [ebp - 0x65], dl
call fcn.10019b12
xor eax, eax
lea ecx, [ebp - 0x9e4]
push ebx
mov dword [ebp - 4], eax
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032b23
push dword [ebp - 0x14]
lea ecx, [ebp - 0x338]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032b05
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032b45
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9e4]
call fcn.10019b7f
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032b2b
xor eax, eax
push eax
lea ecx, [ebp - 0x338]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10032b5f
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x18], eax
je 0x10032b61
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x9f48
lea ecx, [ebp - 0x9e4]
setge al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor eax, eax
push eax
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x338]
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x338]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
xor eax, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x338]
push eax
call fcn.10019b7f
mov ecx, dword [esi]
mov edx, ecx
sub edx, dword [eax]
lea eax, [ecx - 1]
mov dword [esi], eax
xor esi, esi
cmp edx, dword [ebp - 0x34]
jl 0x10032be1
inc esi
mov edx, esi
jmp 0x10032be6
xor eax, eax
inc esi
mov edx, eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setge cl
xor ebx, ebx
add ecx, 0x520f
cmp eax, ecx
lea ecx, [ebp - 0x338]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x338]
setg dl
xor ebx, ebx
cmp edx, dword [eax]
setge bl
xor eax, eax
push eax
call fcn.10019b7f
mov edi, dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [eax], ebx
mov dword [ebp - 0x28], 0xfffffff3
cmp dword [ebp - 0x28], 0xffffffea
jle 0x10032c7d
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032c67
push 0x995
push eax
push 0x1e1c
push 0x708
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032c74
call edi
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffea
jg 0x10032c44
lea ecx, [ebp - 0x9e4]
call fcn.10019b7a
or ebx, 0xffffffff
lea ecx, [ebp - 0x338]
mov dword [ebp - 4], ebx
call fcn.10019b7a
mov dword [ebp - 0x1c], 0xc70c
xor eax, eax
mov dword [ebp - 0x24], 0xfa860b4f
mov dword [ebp - 0x24], 0x7bf0b96c
mov dword [ebp - 0x24], 0xba33
mov dword [ebp - 0x24], 0x250e6da5
push 2
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0x2086bd08
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0x7d2703d9
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10032d04
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1380], 0x2daab72b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10032cec
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032d1f
push esi
call ebx
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor eax, eax
dec dword [ebp - 0x48]
lea ecx, [ebp - 0x32c]
mov dword [ebp - 0x28], 0xd44ad374
mov dword [ebp - 0x2c], eax
push 4
call fcn.10019b12
mov dword [ebp - 4], 2
xor eax, eax
mov dword [ebp - 0x28], 0xaf72
mov dword [ebp - 0x18], 0xf791
mov dword [ebp - 0x20], 0x32e26595
mov dword [ebp - 0x3c], 0xfff7
mov dword [ebp - 0x34], 0xffff
mov dword [ebp - 0x48], 0xfffa
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10032d94
push dword [ebp - 0x14]
lea ecx, [ebp - 0x32c]
call fcn.10019b7f
mov dword [eax], 0x7a9a9718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10032d75
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10032db3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x788], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10032d9f
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10032dc9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x860], 0x8a87
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10032db8
push ecx
lea ecx, [ebp - 0x32c]
call fcn.10019b7f
mov eax, dword [eax]
neg eax
jne 0x10032e2c
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x21342f3d
setne cl
cmp ecx, dword [ebp - 0x18]
jne 0x10032dfc
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10032dff
mov eax, dword [ebp - 0x28]
push 3
lea ecx, [ebp - 0x32c]
call fcn.10019b7f
push 2
lea ecx, [ebp - 0x32c]
call fcn.10019b7f
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x32c]
push esi
call fcn.10019b7f
xor eax, eax
jmp 0x10032e2e
mov eax, esi
dec dword [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
imul edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setne cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
je 0x10032e52
cmp dword [ebp - 0x20], eax
je 0x10032e52
mov eax, esi
mov dword [ebp - 0x788], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x85c]
xor eax, eax
cmp dword [ebp - 0x85c], eax
je 0x10032e6e
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x32c]
push 3
call fcn.10019b7f
xor ecx, ecx
mov dword [eax], esi
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x28]
setge cl
xor edx, edx
cmp ecx, 0x988f
setge dl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, 0x3c39
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x784], ecx
jle 0x10033010
mov dword [ebp - 0x48], esi
lea ecx, [ebp - 0x52c]
mov dword [ebp - 0x18], esi
push 2
call fcn.10019b12
mov byte [ebp - 4], 3
xor eax, eax
mov dword [ebp - 0x48], 0x62be9700
mov dword [ebp - 0x48], 0xa4961f08
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10032f15
push dword [ebp - 0x28]
lea ecx, [ebp - 0x52c]
call fcn.10019b7f
mov dword [eax], 0x5314
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10032ef6
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10032f30
push eax
push eax
push 0x25b8
call ebx
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10032f62
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x52c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x780]
mov eax, dword [ebp - 0x18]
push esi
call fcn.10019b7f
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x85c], eax
je 0x10032f64
mov ecx, esi
mov eax, dword [ebp - 0x788]
xor ebx, ebx
cmp ecx, 0x52f506a5
mov dword [ebp - 0x48], eax
push 2
lea ecx, [ebp - 0x32c]
setle bl
call fcn.10019b7f
xor edx, edx
mov dword [eax], ebx
mov eax, dword [ebp - 0x2c]
cmp ebx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
or eax, 0xffffffff
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], eax
jbe 0x10032fb2
xor eax, eax
cmp dword [ebp - 0x85c], eax
je 0x10032fb4
jmp 0x10032fb6
xor eax, eax
mov esi, eax
xor ebx, ebx
lea ecx, [ebp - 0x52c]
inc ebx
push ebx
call fcn.10019b7f
xor ecx, ecx
push ebx
cmp esi, dword [eax]
setle cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x52c]
mov eax, dword [ebp - 0x48]
call fcn.10019b7f
lea ecx, [ebp - 0x52c]
mov esi, dword [eax]
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x34]
xor edx, edx
add ecx, esi
imul ecx, ecx, 9
cmp ecx, dword [eax]
lea ecx, [ebp - 0x52c]
setg dl
mov dword [ebp - 0x48], edx
call fcn.10019b7a
xor esi, esi
inc esi
jmp 0x10033028
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10033028
push 0x12e1
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
or eax, 0xffffffff
lea ecx, [ebp - 0x32c]
mov dword [ebp - 4], eax
call fcn.10019b7a
push esi
lea ecx, [ebp - 0x2f4]
call fcn.10019b12
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x24], 0xfffa
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x1003306f
push eax
push 0x1bc0
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033086
push eax
push eax
push 0x34f
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
push esi
lea ecx, [ebp - 0x990]
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x100330be
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2f4]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100330a0
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x100330e0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x990]
call fcn.10019b7f
mov dword [eax], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100330c6
xor eax, eax
push eax
lea ecx, [ebp - 0x2f4]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x100330fa
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x1c], eax
je 0x100330fc
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x9f48
lea ecx, [ebp - 0x990]
setge al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor eax, eax
push eax
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x2f4]
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x2f4]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
xor eax, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x2f4]
push eax
call fcn.10019b7f
mov ecx, dword [esi]
mov edx, ecx
sub edx, dword [eax]
lea eax, [ecx - 1]
mov dword [esi], eax
xor eax, eax
cmp edx, dword [ebp - 0x34]
lea edx, [eax + 1]
jge 0x1003317c
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor ebx, ebx
add ecx, 0x520f
cmp eax, ecx
lea ecx, [ebp - 0x2f4]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x2f4]
setg dl
xor ebx, ebx
cmp edx, dword [eax]
setge bl
xor eax, eax
push eax
call fcn.10019b7f
mov dword [eax], ebx
mov dword [ebp - 0x28], 0xfffffff3
cmp dword [ebp - 0x28], 0xffffffea
jle 0x1003320d
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x100331f7
push 0x995
push eax
push 0x1e1c
push 0x708
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033204
call edi
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffea
jg 0x100331d4
lea ecx, [ebp - 0x990]
call fcn.10019b7a
or esi, 0xffffffff
lea ecx, [ebp - 0x2f4]
mov dword [ebp - 4], esi
call fcn.10019b7a
xor ebx, ebx
lea ecx, [ebp - 0x35c]
inc ebx
push ebx
call fcn.10019b12
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x24], 0xcc86f803
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033267
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x110], 0xc2e0cf57
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1003324f
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003328d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x35c]
call fcn.10019b7f
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1003326f
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x100332a5
push 0xcd0
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
xor eax, eax
push eax
lea ecx, [ebp - 0x35c]
call fcn.10019b7f
and dword [eax], 0
jmp 0x10033419
mov dword [ebp - 0x2c], 0xb11accba
xor eax, eax
mov dword [ebp - 0x24], 0x979cd329
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x100333fd
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], eax
jmp 0x10033372
mov dword [ebp - 0x20], 0x6d0374c7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x1003336f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033317
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7d0], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100332fe
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033333
push 0x13c4
push 0x1c95
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
mov dword [ebp - 0x7d0], eax
cmp dword [ebp - 0x7d0], eax
jl 0x1003336a
mov dword [ebp - 0x18], 0x79f6a715
mov dword [ebp - 0x48], 0xe75d
mov dword [ebp - 0x18], eax
jmp 0x1003335d
mov dword [ebp - 0x24], ebx
inc dword [ebp - 0x48]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10033354
dec dword [ebp - 0x7d0]
jns 0x10033341
dec dword [ebp - 0x20]
jns 0x100332f5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x100332e6
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x100333f1
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x35c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x110]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10019b7f
xor ebx, ebx
cmp dword [eax], 0x526c
mov eax, dword [ebp - 0x30]
setge bl
xor ecx, ecx
cmp eax, 2
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ebx, ecx
mov eax, dword [ebp + eax*4 - 0x110]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setne cl
imul ecx, dword [ebp + eax*4 - 0x110]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x110], ecx
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10033383
xor ebx, ebx
inc ebx
dec dword [ebp - 0x2c]
push 8
pop ecx
jns 0x100332d8
push eax
lea ecx, [ebp - 0x35c]
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0x35c]
push eax
call fcn.10019b7f
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x35c]
push eax
call fcn.10019b7f
push 8
pop ecx
cmp dword [eax], 0
jle 0x100332b9
lea ecx, [ebp - 0x35c]
mov dword [ebp - 4], esi
call fcn.10019b7a
mov dword [ebp - 0x38], 0xc70c
xor eax, eax
push 6
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], 0xb2c41ac3
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033479
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xae0], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033460
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe5
push 2
pop esi
jg 0x100334ef
jmp 0x10033489
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], eax
jmp 0x100334d5
mov eax, dword [ebp + eax*4 - 0xae0]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x100334a6
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
jmp 0x100334a8
mov ecx, eax
mov eax, dword [ebp - 0xae0]
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, ecx
je 0x100334bc
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, 0xf823
setge cl
add ecx, dword [ebp - 0xae0]
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x1c]
jle 0x10033491
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe5
jle 0x10033487
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xfffffff7
push ebx
setge cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x344]
mov dword [ebp - 0x28], 0xd44ad374
call fcn.10019b12
push ebx
lea ecx, [ebp - 0x9a8]
mov dword [ebp - 4], 7
call fcn.10019b12
push 8
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xeec]
mov dword [ebp - 0x24], 0xd6f2
mov dword [ebp - 0x24], 0x20f89b5
mov dword [ebp - 0x24], 0x32ffab8c
mov dword [ebp - 0x24], 0x152c58fb
mov dword [ebp - 0x24], 0xc8748afa
push ebx
call fcn.10019b12
mov byte [ebp - 4], 9
mov eax, 0xffff
mov dword [ebp - 0x24], 0x369
mov dword [ebp - 0x24], 0x43631e19
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1003358a
push dword [ebp - 0x18]
call fcn.10019b7f
mov dword [eax], 0x1d962ee6
inc dword [ebp - 0x18]
lea ecx, [ebp - 0xeec]
cmp dword [ebp - 0x18], ebx
jl 0x10033579
dec dword [ebp - 0x48]
push 8
pop eax
mov byte [ebp - 4], al
call fcn.10019b7a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100335cb
push dword [ebp - 0x14]
lea ecx, [ebp - 0x344]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100335ad
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100335e3
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9a8]
call fcn.10019b7f
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100335d0
mov dword [ebp - 0x1c], 0x860b4ffb
lea ecx, [ebp - 0xdcc]
or eax, 0xffffffff
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0x6a8
push ebx
call fcn.10019b12
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x40], 0x91cd3c6e
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1003363a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6e4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10033625
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033661
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdcc]
call fcn.10019b7f
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10033642
xor eax, eax
jmp 0x10033664
or ecx, 0xffffffff
mov dword [ebp - 0x1c], eax
jmp 0x100336c3
mov dword [ebp - 0x18], 0x33992443
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
jmp 0x100336bb
mov dword [ebp - 0x24], 0xd2086bd0
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x48], 0xca420452
inc dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], esi
jg 0x100336b8
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x6e4]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x6e4], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jle 0x10033697
xor eax, eax
or ecx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1003367b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x10033669
mov eax, dword [ebp - 0x6dc]
xor ebx, ebx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x6e4]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
setg bl
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x6dc]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0x2f144811
setne al
xor ecx, ecx
cmp eax, 0xef90
setne cl
imul ecx, ebx
test ecx, ecx
je 0x10033728
mov dword [ebp - 0x34], 0x95610a1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
jmp 0x10033766
mov dword [ebp - 0x48], 0xf57440e7
push 6
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xaa7f
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
neg eax
mov dword [ebp - 0x2c], eax
push 8
pop eax
lea ecx, [ebp - 0xdcc]
mov byte [ebp - 4], al
call fcn.10019b7a
xor eax, eax
lea ecx, [ebp - 0x344]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10033795
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10033795
mov edx, eax
jmp 0x1003379a
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x9f48
lea ecx, [ebp - 0x9a8]
setge al
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
xor eax, eax
push eax
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x344]
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x344]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
xor eax, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x344]
push eax
call fcn.10019b7f
mov ecx, dword [esi]
mov edx, ecx
sub edx, dword [eax]
lea eax, [ecx - 1]
mov dword [esi], eax
xor eax, eax
cmp edx, dword [ebp - 0x34]
lea edx, [eax + 1]
jge 0x1003381a
mov edx, eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x38]
setge cl
xor ebx, ebx
add ecx, 0x520f
cmp eax, ecx
lea ecx, [ebp - 0x344]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x38]
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x344]
setg dl
xor ebx, ebx
cmp edx, dword [eax]
setge bl
xor eax, eax
push eax
call fcn.10019b7f
mov dword [eax], ebx
mov dword [ebp - 0x28], 0xfffffff3
cmp dword [ebp - 0x28], 0xffffffea
jle 0x10033d36
push 2
pop esi
xor eax, eax
lea ecx, [ebp - 0x654]
mov dword [ebp - 0x20], eax
push esi
call fcn.10019b12
mov byte [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x48], 0x35b263d1
xor ebx, ebx
mov dword [ebp - 0x3c], 0x53589fe5
inc ebx
mov dword [ebp - 0x34], 0x196e6c8c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100338c3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x654]
call fcn.10019b7f
mov dword [eax], ebx
inc dword [ebp - 0x18]
jmp 0x100338a9
mov eax, dword [ebp - 0x20]
xor edx, edx
dec dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x3c]
jne 0x100338de
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x654]
xor eax, eax
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0x654]
push eax
call fcn.10019b7f
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x654]
xor eax, eax
push eax
call fcn.10019b7f
push 8
lea ecx, [ebp - 0x654]
mov dword [eax], ebx
pop eax
mov dword [ebp - 0x34], 0xe283d1f0
mov byte [ebp - 4], al
call fcn.10019b7a
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x100339ce
mov dword [ebp - 0x24], 0xfa860b4f
or ecx, 0xffffffff
mov dword [ebp - 0x24], 0x7bf0b96c
mov dword [ebp - 0x24], 0xba33
mov dword [ebp - 0x24], 0x250e6da5
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0x2086bd08
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0x7d2703d9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033998
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1368], 0x2daab72b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033980
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x100339b1
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor eax, eax
dec dword [ebp - 0x48]
push 0x995
push eax
push 0x1e1c
push 0x708
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
xor eax, eax
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x304]
push 4
call fcn.10019b12
mov byte [ebp - 4], 0xc
mov eax, 0xffff
mov dword [ebp - 0x2c], 0xaf72
mov dword [ebp - 0x18], 0xf791
mov dword [ebp - 0x20], 0x32e26595
mov dword [ebp - 0x3c], 0xfff7
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], 0xfffa
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10033a37
push dword [ebp - 0x14]
lea ecx, [ebp - 0x304]
call fcn.10019b7f
mov dword [eax], 0x7a9a9718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10033a18
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10033a56
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8d8], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10033a42
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10033a6c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7e8], 0x8a87
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10033a5b
push ecx
lea ecx, [ebp - 0x304]
call fcn.10019b7f
mov eax, dword [eax]
neg eax
jne 0x10033ace
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x21342f3d
setne cl
cmp ecx, dword [ebp - 0x18]
jne 0x10033a9f
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10033aa2
mov eax, dword [ebp - 0x2c]
push 3
lea ecx, [ebp - 0x304]
call fcn.10019b7f
push esi
lea ecx, [ebp - 0x304]
call fcn.10019b7f
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x304]
push ebx
call fcn.10019b7f
xor eax, eax
jmp 0x10033ad0
mov eax, ebx
dec dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
imul edx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setne cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
je 0x10033af4
cmp dword [ebp - 0x20], eax
je 0x10033af4
mov eax, ebx
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x7e4]
xor eax, eax
cmp dword [ebp - 0x7e4], eax
je 0x10033b10
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x304]
push 3
call fcn.10019b7f
xor ecx, ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x2c]
setge cl
xor edx, edx
cmp ecx, 0x988f
setge dl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, 0x3c39
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x8d4], ecx
jle 0x10033cb7
mov dword [ebp - 0x48], ebx
lea ecx, [ebp - 0x484]
mov dword [ebp - 0x18], ebx
push esi
call fcn.10019b12
mov byte [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x48], 0x62be9700
mov dword [ebp - 0x48], 0xa4961f08
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], esi
jge 0x10033bb4
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x484]
call fcn.10019b7f
mov dword [eax], 0x5314
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jl 0x10033b96
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033bd3
push eax
push eax
push 0x25b8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10033c05
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x484]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8d0]
mov eax, dword [ebp - 0x18]
push ebx
call fcn.10019b7f
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x7e4], eax
je 0x10033c07
mov ecx, ebx
mov eax, dword [ebp - 0x8d8]
xor ebx, ebx
cmp ecx, 0x52f506a5
mov dword [ebp - 0x48], eax
push esi
lea ecx, [ebp - 0x304]
setle bl
call fcn.10019b7f
xor edx, edx
mov dword [eax], ebx
mov eax, dword [ebp - 0x1c]
cmp ebx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
or eax, 0xffffffff
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], eax
jbe 0x10033c59
xor eax, eax
cmp dword [ebp - 0x7e4], eax
je 0x10033c5b
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x10033c60
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push ebx
lea ecx, [ebp - 0x484]
call fcn.10019b7f
xor ecx, ecx
push ebx
cmp esi, dword [eax]
setle cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x484]
mov eax, dword [ebp - 0x48]
call fcn.10019b7f
lea ecx, [ebp - 0x484]
mov esi, dword [eax]
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x34]
xor edx, edx
add ecx, esi
imul ecx, ecx, 9
cmp ecx, dword [eax]
lea ecx, [ebp - 0x484]
setg dl
mov dword [ebp - 0x48], edx
call fcn.10019b7a
push 2
pop esi
jmp 0x10033cd3
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10033cd3
push 0x12e1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
push 8
pop eax
lea ecx, [ebp - 0x304]
mov byte [ebp - 4], al
call fcn.10019b7a
xor eax, eax
mov byte [ebp - 0xd], al
mov dword [ebp - 0x24], 0xfffa
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], al
je 0x10033d0a
push eax
push 0x1bc0
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
mov byte [ebp - 0x41], al
cmp byte [ebp - 0x41], 0
je 0x10033d21
push eax
push eax
push 0x34f
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
cmp byte [ebp - 0xd], 0
je 0x10033d29
call edi
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffea
jg 0x10033877
lea ecx, [ebp - 0x9a8]
call fcn.10019b7a
or eax, 0xffffffff
lea ecx, [ebp - 0x344]
mov dword [ebp - 4], eax
call fcn.10019b7a
mov dword [ebp - 0x24], 5
xor ebx, ebx
inc ebx
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], 0xfffffffc
mov dword [ebp - 0x24], 0xbc07c207
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10033da3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf64], 0xd526d2e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033d8b
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10033dc1
push eax
push 0x2556
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
dec dword [ebp - 0x48]
lea ecx, [ebp - 0x878]
push 3
call fcn.10019b12
mov dword [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033e05
push dword [ebp - 0x18]
lea ecx, [ebp - 0x878]
call fcn.10019b7f
mov dword [eax], 0x825e7a66
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033de6
xor eax, eax
push 2
pop esi
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x10033edb
push 4
lea ecx, [ebp - 0x58c]
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], eax
jmp 0x10033e46
push dword [ebp - 0x28]
lea ecx, [ebp - 0x58c]
call fcn.10019b7f
mov dword [eax], 0x4d073ff8
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x10033e2f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x878]
call fcn.10019b7f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x878]
mov esi, eax
call fcn.10019b7f
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
push eax
lea ecx, [ebp - 0x58c]
call fcn.10019b7f
push 2
pop esi
mov dword [eax], esi
jmp 0x10033eb0
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10033e9b
call edi
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_SetParent]
xor eax, eax
push eax
lea ecx, [ebp - 0x58c]
mov dword [ebp - 0x34], 0xe58d020b
call fcn.10019b7f
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x58c]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jge 0x10033e83
lea ecx, [ebp - 0x58c]
mov byte [ebp - 4], 0xe
call fcn.10019b7a
dec dword [ebp - 0x18]
jns 0x10033e14
or eax, 0xffffffff
lea ecx, [ebp - 0x878]
mov dword [ebp - 4], eax
call fcn.10019b7a
mov dword [ebp - 0x38], 0xc70c
lea ecx, [ebp - 0x314]
push ebx
call fcn.10019b12
mov dword [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x24], 0xcc86f803
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033f2f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf8], 0xc2e0cf57
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10033f17
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033f55
push dword [ebp - 0x14]
lea ecx, [ebp - 0x314]
call fcn.10019b7f
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10033f37
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10033f6d
push 0xcd0
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
xor eax, eax
push eax
lea ecx, [ebp - 0x314]
call fcn.10019b7f
and dword [eax], 0
jmp 0x100340e0
mov dword [ebp - 0x2c], 0xb11accba
xor eax, eax
mov dword [ebp - 0x24], 0x979cd329
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x100340c4
push 8
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x1c], eax
jmp 0x1003403d
mov dword [ebp - 0x20], 0x6d0374c7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x1003403a
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033fe2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x800], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033fc9
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10033ffe
push 0x13c4
push 0x1c95
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
mov dword [ebp - 0x800], eax
cmp dword [ebp - 0x800], eax
jl 0x10034035
mov dword [ebp - 0x18], 0x79f6a715
mov dword [ebp - 0x48], 0xe75d
mov dword [ebp - 0x18], eax
jmp 0x10034028
mov dword [ebp - 0x24], ebx
inc dword [ebp - 0x48]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x1003401f
dec dword [ebp - 0x800]
jns 0x1003400c
dec dword [ebp - 0x20]
jns 0x10033fc0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x10033fb1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x100340bb
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x314]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10019b7f
xor ebx, ebx
cmp dword [eax], 0x526c
mov eax, dword [ebp - 0x30]
setge bl
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ebx, ecx
mov eax, dword [ebp + eax*4 - 0xf8]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setne cl
imul ecx, dword [ebp + eax*4 - 0xf8]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xf8], ecx
xor eax, eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x1003404e
xor ebx, ebx
inc ebx
dec dword [ebp - 0x2c]
jns 0x10033fa0
push eax
lea ecx, [ebp - 0x314]
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0x314]
push eax
call fcn.10019b7f
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x314]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jle 0x10033f81
or eax, 0xffffffff
lea ecx, [ebp - 0x314]
mov dword [ebp - 4], eax
call fcn.10019b7a
mov dword [ebp - 0x1c], 0xd44ad374
xor eax, eax
push 6
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x2c], 0xb2c41ac3
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034140
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb88], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034127
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffe5
jg 0x100341b3
jmp 0x1003414d
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], eax
jmp 0x10034199
mov eax, dword [ebp + eax*4 - 0xb88]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1003416a
mov eax, dword [ebp - 0x1c]
mov ecx, ebx
jmp 0x1003416c
mov ecx, eax
mov eax, dword [ebp - 0xb88]
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, ecx
je 0x10034180
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp eax, 0xf823
setge cl
add ecx, dword [ebp - 0xb88]
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x1c]
jle 0x10034155
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe5
jle 0x1003414b
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, 0xfffffff7
push ebx
setge cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x2d4]
call fcn.10019b12
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0xf60]
mov dword [ebp - 0x24], 0xd6f2
mov dword [ebp - 0x24], 0x20f89b5
mov dword [ebp - 0x24], 0x32ffab8c
mov dword [ebp - 0x24], 0x152c58fb
mov dword [ebp - 0x24], 0xc8748afa
push ebx
call fcn.10019b12
mov byte [ebp - 4], 0x12
mov eax, 0xffff
mov dword [ebp - 0x24], 0x369
mov dword [ebp - 0x24], 0x43631e19
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034235
push dword [ebp - 0x18]
call fcn.10019b7f
mov dword [eax], 0x1d962ee6
inc dword [ebp - 0x18]
lea ecx, [ebp - 0xf60]
cmp dword [ebp - 0x18], ebx
jl 0x10034224
dec dword [ebp - 0x48]
mov byte [ebp - 4], 0x11
call fcn.10019b7a
push ebx
lea ecx, [ebp - 0xaf8]
call fcn.10019b12
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xde4]
mov dword [ebp - 0x1c], 0x860b4ffb
or eax, 0xffffffff
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0x6a8
push ebx
call fcn.10019b12
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x40], 0x91cd3c6e
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100342ae
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x734], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10034299
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100342d5
push dword [ebp - 0x14]
lea ecx, [ebp - 0xde4]
call fcn.10019b7f
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100342b6
xor eax, eax
jmp 0x100342d8
or ecx, 0xffffffff
mov dword [ebp - 0x1c], eax
jmp 0x10034337
mov dword [ebp - 0x18], 0x33992443
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], eax
jmp 0x1003432f
mov dword [ebp - 0x24], 0xd2086bd0
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x48], 0xca420452
inc dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], esi
jg 0x1003432c
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x734]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x734], ecx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jle 0x1003430b
xor eax, eax
or ecx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x100342ef
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x100342dd
mov eax, dword [ebp - 0x72c]
xor ebx, ebx
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x734]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
setg bl
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x72c]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0x2f144811
setne al
xor ecx, ecx
cmp eax, 0xef90
setne cl
imul ecx, ebx
test ecx, ecx
je 0x1003439c
mov dword [ebp - 0x34], 0x95610a1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
jmp 0x100343da
mov dword [ebp - 0x48], 0xf57440e7
push 6
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xaa7f
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x40]
neg eax
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xde4]
mov byte [ebp - 4], 0x13
call fcn.10019b7a
xor eax, eax
lea ecx, [ebp - 0x66c]
mov dword [ebp - 0x20], eax
push esi
call fcn.10019b12
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x48], 0x35b263d1
xor ebx, ebx
mov dword [ebp - 0x3c], 0x53589fe5
inc ebx
mov dword [ebp - 0x34], 0x196e6c8c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10034435
push dword [ebp - 0x18]
lea ecx, [ebp - 0x66c]
call fcn.10019b7f
mov dword [eax], ebx
inc dword [ebp - 0x18]
jmp 0x1003441b
mov eax, dword [ebp - 0x20]
xor edx, edx
dec dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x3c]
jne 0x10034450
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x66c]
xor eax, eax
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0x66c]
push eax
call fcn.10019b7f
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x66c]
xor eax, eax
push eax
call fcn.10019b7f
lea ecx, [ebp - 0x66c]
mov dword [eax], ebx
mov dword [ebp - 0x34], 0xe283d1f0
mov byte [ebp - 4], 0x13
call fcn.10019b7a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100344c0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x2d4]
call fcn.10019b7f
mov dword [eax], 0xfecafe8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100344a2
xor eax, eax
mov dword [ebp - 0x24], 0xfa860b4f
or ecx, 0xffffffff
mov dword [ebp - 0x24], 0x7bf0b96c
mov dword [ebp - 0x24], 0xba33
mov dword [ebp - 0x24], 0x250e6da5
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0x2086bd08
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], 0x7d2703d9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10034522
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1320], 0x2daab72b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003450a
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034537
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
xor eax, eax
dec dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003455c
push dword [ebp - 0x14]
lea ecx, [ebp - 0xaf8]
call fcn.10019b7f
mov dword [eax], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10034542
xor eax, eax
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x36c]
push 4
call fcn.10019b12
mov byte [ebp - 4], 0x16
mov eax, 0xffff
mov dword [ebp - 0x28], 0xaf72
mov dword [ebp - 0x18], 0xf791
mov dword [ebp - 0x20], 0x32e26595
mov dword [ebp - 0x3c], 0xfff7
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x48], 0xfffa
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100345c5
push dword [ebp - 0x14]
lea ecx, [ebp - 0x36c]
call fcn.10019b7f
mov dword [eax], 0x7a9a9718
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100345a6
xor eax, eax
push 3
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x100345e4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8c0], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100345d0
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100345fa
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x818], 0x8a87
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100345e9
push ecx
lea ecx, [ebp - 0x36c]
call fcn.10019b7f
mov eax, dword [eax]
neg eax
jne 0x1003465c
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, 0x21342f3d
setne cl
cmp ecx, dword [ebp - 0x18]
jne 0x1003462d
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x10034630
mov eax, dword [ebp - 0x28]
push 3
lea ecx, [ebp - 0x36c]
call fcn.10019b7f
push esi
lea ecx, [ebp - 0x36c]
call fcn.10019b7f
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x36c]
push ebx
call fcn.10019b7f
xor eax, eax
jmp 0x1003465e
mov eax, ebx
dec dword [ebp - 0x2c]
xor ecx, ecx
mov edx, dword [ebp - 0x20]
imul edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
setne cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], eax
je 0x10034682
cmp dword [ebp - 0x20], eax
je 0x10034682
mov eax, ebx
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x814]
xor eax, eax
cmp dword [ebp - 0x814], eax
je 0x1003469e
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x36c]
push 3
call fcn.10019b7f
xor ecx, ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x28]
setge cl
xor edx, edx
cmp ecx, 0x988f
setge dl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, 0x3c39
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp dword [ebp - 0x8bc], ecx
jle 0x1003483e
mov dword [ebp - 0x48], ebx
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x18], ebx
push esi
call fcn.10019b12
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x48], 0x62be9700
mov dword [ebp - 0x48], 0xa4961f08
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], esi
jge 0x10034742
push dword [ebp - 0x28]
lea ecx, [ebp - 0x49c]
call fcn.10019b7f
mov dword [eax], 0x5314
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x10034724
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003475d
push eax
push eax
push 0x25b8
call edi
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1003478f
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x49c]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8b8]
mov eax, dword [ebp - 0x18]
push ebx
call fcn.10019b7f
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x814], eax
je 0x10034791
mov ecx, ebx
mov eax, dword [ebp - 0x8c0]
xor ebx, ebx
cmp ecx, 0x52f506a5
mov dword [ebp - 0x48], eax
push esi
lea ecx, [ebp - 0x36c]
setle bl
call fcn.10019b7f
xor edx, edx
mov dword [eax], ebx
mov eax, dword [ebp - 0x2c]
cmp ebx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
or eax, 0xffffffff
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], eax
jbe 0x100347e3
xor eax, eax
cmp dword [ebp - 0x814], eax
je 0x100347e5
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x100347ea
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
push ebx
lea ecx, [ebp - 0x49c]
call fcn.10019b7f
xor ecx, ecx
push ebx
cmp esi, dword [eax]
setle cl
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x49c]
mov eax, dword [ebp - 0x48]
call fcn.10019b7f
lea ecx, [ebp - 0x49c]
mov esi, dword [eax]
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x34]
xor edx, edx
add ecx, esi
imul ecx, ecx, 9
cmp ecx, dword [eax]
lea ecx, [ebp - 0x49c]
setg dl
mov dword [ebp - 0x48], edx
call fcn.10019b7a
jmp 0x10034856
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034856
push 0x12e1
call edi
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
lea ecx, [ebp - 0x36c]
mov byte [ebp - 4], 0x13
call fcn.10019b7a
xor eax, eax
lea ecx, [ebp - 0x2d4]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10034881
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x38], eax
je 0x10034883
mov edx, ebx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x9f48
lea ecx, [ebp - 0xaf8]
setge al
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x2d4]
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x2d4]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
xor ecx, ecx
cmp ebx, dword [eax]
setg cl
xor eax, eax
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x2d4]
push eax
call fcn.10019b7f
mov ecx, dword [esi]
mov edx, ecx
sub edx, dword [eax]
lea eax, [ecx - 1]
mov dword [esi], eax
xor eax, eax
cmp edx, dword [ebp - 0x34]
lea edx, [eax + 1]
jge 0x10034903
mov edx, eax
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x38]
setge cl
xor ebx, ebx
add ecx, 0x520f
cmp eax, ecx
lea ecx, [ebp - 0x2d4]
setl bl
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x38]
xor edx, edx
cmp ecx, ebx
lea ecx, [ebp - 0x2d4]
setg dl
xor ebx, ebx
cmp edx, dword [eax]
setge bl
xor eax, eax
push eax
call fcn.10019b7f
mov dword [eax], ebx
mov dword [ebp - 0x1c], 0xfffffff3
cmp dword [ebp - 0x1c], 0xffffffea
jle 0x100352c3
xor ebx, ebx
inc ebx
xor eax, eax
mov dword [ebp - 0x24], 0xfffa
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034983
push eax
push 0x1bc0
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003499c
push eax
push eax
push 0x34f
push eax
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
xor eax, eax
mov byte [ebp - 0x41], al
or esi, 0xffffffff
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0x283066c9
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], 0xbc23cea
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x18], eax
jmp 0x100349d3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x924], 0xa8e55a44
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100349c2
mov dword [ebp - 0x14], 0xfffffffe
cmp dword [ebp - 0x14], 0x12
jge 0x10034c44
mov eax, 0x82a1836c
lea ecx, [ebp - 0x544]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], eax
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], eax
push 3
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034a42
push dword [ebp - 0x18]
lea ecx, [ebp - 0x544]
call fcn.10019b7f
mov dword [eax], 0x92715ee5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034a23
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10034a75
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x384]
imul ecx, eax, 0x7bc9
mov eax, dword [ebp - 0x390]
cmp ecx, eax
sete dl
imul eax, edx, 0x5637
test eax, eax
jne 0x10034a75
mov ecx, eax
jmp 0x10034a77
mov ecx, ebx
xor eax, eax
cmp ecx, 0x8aa2
push 2
sete al
mov dword [ebp - 0x920], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x388]
neg edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x390]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor ebx, ebx
add ecx, 0xffff0007
cmp eax, ecx
lea ecx, [ebp - 0x544]
setge bl
call fcn.10019b7f
push 2
lea ecx, [ebp - 0x544]
mov dword [eax], ebx
mov dword [ebp - 0x20], ebx
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10034b7a
mov eax, dword [ebp - 0x388]
lea ecx, [ebp - 0x544]
inc dword [ebp - 0x3c]
push 2
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x544]
xor eax, eax
push eax
call fcn.10019b7f
xor edx, edx
mov ecx, dword [eax]
mov dword [esi], ecx
mov ecx, dword [ebp - 0x14]
cmp dword [esi], ecx
mov eax, dword [ebp - 0x3c]
setge dl
imul eax, dword [ebp - 0x28]
imul eax, edx
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x920], eax
mov ecx, dword [ebp - 0x388]
mov eax, dword [ebp - 0x388]
add ecx, 0xfffffff9
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
cmp edx, 3
sbb ecx, ecx
inc ecx
sub eax, ecx
xor ecx, ecx
cmp eax, 0x4069a3e2
setge cl
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
jne 0x10034b77
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034c20
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
jmp 0x10034c20
or esi, 0xffffffff
push 3
lea ecx, [ebp - 0x9c0]
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034bb1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
mov dword [eax], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034b96
xor eax, eax
push eax
lea ecx, [ebp - 0x9c0]
call fcn.10019b7f
mov dword [eax], 0xfffffffd
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10034c15
push 0x207f
push 0x2409
push 0x13ff
push eax
push 0x429
push 0x1fd9
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x38c
push 0x11b1
push 0x2248
push 0x507
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
lea ecx, [ebp - 0x9c0]
call fcn.10019b7a
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x13
call fcn.10019b7a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x12
push 1
pop ebx
push 0xffffffffffffffff
pop esi
jl 0x100349ea
or esi, esi
mov dword [ebp - 0x28], 0xffffffed
cmp dword [ebp - 0x28], 0xc
jle 0x10034c7e
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034c75
push eax
push 0xb6d
push eax
push 0x1d65
push 0xee8
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xc
jg 0x10034c53
cmp byte [ebp - 0x41], 0
je 0x10034f81
push 7
pop eax
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x444], eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x43c], eax
push 8
pop eax
mov dword [ebp - 0x18], 0x763c
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x48], 0x9534
push 3
mov dword [ebp - 0x28], eax
pop ebx
cmp dword [ebp - 0x28], ebx
jge 0x10034cdc
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x20c], 0xe1757117
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x10034cc4
xor eax, eax
mov dword [ebp - 0x208], esi
cmp dword [ebp - 0x208], 0xffffffe5
jle 0x10034f67
jmp 0x10034cf3
xor eax, eax
mov dword [ebp - 0x20], eax
xor edx, edx
mov dword [ebp - 0x14], 0x8f08877e
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x2c], 0x5749
mov ecx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, 0xfffe
setl dl
sub eax, edx
je 0x10034df9
mov dword [ebp - 0x28], 0xf6
mov eax, 0xffff
mov dword [ebp - 0x3c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3c]
dec dword [ebp - 0x3c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x18]
cmp eax, 0x656d4c01
setl cl
xor edx, edx
mov dword [ebp - 0x444], ecx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setge dl
add edx, dword [ebp - 0x208]
mov eax, dword [ebp - 0x14]
cmp edx, ebx
sbb edx, edx
neg edx
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
sub ecx, dword [ebp - 0x28]
je 0x10034d99
cmp dword [ebp - 0x20], eax
je 0x10034d99
lea edx, [eax + 1]
jmp 0x10034d9b
mov edx, eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
imul edx, eax, 6
mov eax, dword [ebp - 0x20]
sub edx, 9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x38]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp eax, edx
setne cl
xor edx, edx
test ecx, ecx
setle dl
xor eax, eax
cmp edx, 4
setle al
mov dword [ebp - 0x38], eax
jmp 0x10034f51
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10034e1d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xeac], 0x38a8004c
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
jl 0x10034e04
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe4
jl 0x10034f3c
push 6
pop ecx
mov dword [ebp - 0x30], 0xc9e2f093
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], 0xf
jl 0x10034f2f
mov dword [ebp - 0x40], 0xa04a
mov dword [ebp - 0x14], eax
jmp 0x10034f15
mov dword [ebp - 0x34], 0x2b873148
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
jg 0x10034f12
xor esi, esi
inc esi
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x448], 0
jne 0x10034f10
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10034ea3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x448]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0x2cf7
jl 0x10034ea1
mov edx, esi
jmp 0x10034ea5
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x30]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xea8]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
mov eax, dword [ebp - 0x208]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge bl
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x448]
mov eax, dword [ebp - 0x40]
cmp ebx, eax
sete cl
cmp edx, ecx
jle 0x10034ef7
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x448]
mov eax, dword [ebp - 0x38]
push 3
pop ebx
mov dword [ebp + eax*4 - 0x448], esi
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
jle 0x10034e66
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x13
jle 0x10034e50
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jge 0x10034e41
push 6
pop ecx
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffe4
jge 0x10034e2d
mov dword [ebp - 0x14], eax
jmp 0x10034f4c
cmp dword [ebp - 0x208], eax
jne 0x10034f51
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10034f41
dec dword [ebp - 0x208]
cmp dword [ebp - 0x208], 0xffffffe5
jg 0x10034cf1
or esi, 0xffffffff
push 0x995
xor eax, eax
push eax
push 0x1e1c
push 0x708
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov dword [ebp - 0x18], esi
xor eax, eax
push 6
mov dword [ebp - 0x34], 0xbf39
mov dword [ebp - 0x18], eax
pop ebx
jmp 0x10034fbf
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034faa
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_KillTimer]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10034fbc
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jg 0x10034f95
mov dword [ebp - 0x34], esi
lea ecx, [ebp - 0xf04]
mov dword [ebp - 0x24], 0x3a4a
xor ebx, ebx
mov dword [ebp - 0x24], eax
inc ebx
mov dword [ebp - 0x24], 0xfe01bd97
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], eax
push ebx
call fcn.10019b12
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x18], eax
jmp 0x10035010
push dword [ebp - 0x18]
call fcn.10019b7f
mov dword [eax], 0xa5efa20b
inc dword [ebp - 0x18]
lea ecx, [ebp - 0xf04]
cmp dword [ebp - 0x18], ebx
jl 0x10034fff
dec dword [ebp - 0x48]
mov byte [ebp - 4], 0x13
call fcn.10019b7a
xor eax, eax
lea ecx, [ebp - 0x4b4]
mov byte [ebp - 0x41], al
push 3
call fcn.10019b12
mov byte [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x14], 0xe19d29be
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003506e
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4b4]
call fcn.10019b7f
mov dword [eax], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003504f
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100350aa
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10035096
push 0xc8e
push 0x20ce
push 0x17ba
push 0x202b
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4b4]
call fcn.10019b7f
inc dword [ebp - 0x14]
push 0
pop eax
cmp dword [ebp - 0x14], 2
jle 0x10035073
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x4b4]
push ebx
call fcn.10019b7f
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x4b4]
xor eax, eax
push eax
call fcn.10019b7f
cmp dword [eax], 0
je 0x100350e0
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x100350e2
mov edi, ebx
jmp 0x100350e4
xor eax, eax
mov edi, eax
push eax
lea ecx, [ebp - 0x4b4]
call fcn.10019b7f
mov ecx, dword [ebp - 0x14]
xor edx, edx
cmp edi, 0x289f
mov esi, eax
setle dl
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x14]
setge al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x4b4]
setne dl
sub edx, dword [esi]
mov dword [ebp - 0x14], edx
mov byte [ebp - 4], 0x13
call fcn.10019b7a
cmp byte [ebp - 0x41], 0
je 0x100352b0
mov esi, 0xa5d6c05b
xor eax, eax
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x1c0], esi
mov dword [ebp - 0x1bc], esi
mov dword [ebp - 0x1b8], esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x48], 0xfd99
mov dword [ebp - 0x3c], 0x6d7d0454
mov dword [ebp - 0x34], 0xfffffff7
push 3
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jg 0x100351ae
or edx, 0xffffffff
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x28], eax
jmp 0x100351a1
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jg 0x1003519e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1c4], 0
jne 0x1003519c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x10035187
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x1003517c
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jle 0x10035174
cmp dword [ebp - 0x1c0], eax
je 0x100352a2
mov eax, dword [ebp - 0x1c0]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c0]
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setne dl
xor ecx, ecx
cmp edx, 0xfffffffb
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setg cl
xor edx, edx
cmp ecx, 0x120dd93b
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c0]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1b8]
cmp ecx, eax
mov eax, dword [ebp - 0x1b8]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1b8]
setg cl
xor edx, edx
add ecx, ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1bc]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1b8]
setg cl
add eax, ecx
cmp eax, 0x4cd4
je 0x10035271
xor eax, eax
cmp dword [ebp - 0x1c4], eax
je 0x10035273
mov eax, ebx
jmp 0x10035273
xor eax, eax
cmp eax, dword [ebp - 0x1b8]
jne 0x10035282
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x10035284
mov eax, ebx
cmp eax, 0xba10f40b
sbb eax, eax
neg eax
sub eax, 0xd270c173
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x3c]
jge 0x100352a0
mov eax, ebx
jmp 0x100352a2
xor eax, eax
add eax, 0xd15951e0
mov dword [ebp - 0x34], eax
call dword [sym.imp.USER32.dll_GetMessageTime]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffea
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
jg 0x10034960
lea ecx, [ebp - 0xaf8]
call fcn.10019b7a
or eax, 0xffffffff
lea ecx, [ebp - 0x2d4]
mov dword [ebp - 4], eax
call fcn.10019b7a
mov dword [ebp - 0x3c], 0x38ec
xor esi, esi
inc esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], 0x4981ff29
push 0xfffffffffffffffc
pop edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x48], 0x7c7ab89b
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x24], 0x29b85755
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], esi
jl 0x1003531e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov ebx, dword [sym.imp.USER32.dll_UnionRect]
setg dl
xor eax, eax
mov dword [ebp - 0x30], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035351
push eax
push eax
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], edi
mov edi, 0xbc07c207
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003539a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf74], 0xd526d2e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10035382
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100353b8
push eax
push 0x2556
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
xor eax, eax
dec dword [ebp - 0x48]
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 0xfffffff9
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], 0xfffffffc
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10035403
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf80], 0xd526d2e8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100353eb
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1003541f
push eax
push 0x2556
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
dec dword [ebp - 0x48]
lea ecx, [ebp - 0xcc]
push esi
call fcn.10019b12
mov dword [ebp - 4], 0x1c
or eax, 0xffffffff
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x2c], 0x1f7d9671
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10035478
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcc]
call fcn.10019b7f
mov dword [eax], 0x6580
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1003545a
xor eax, eax
push eax
lea ecx, [ebp - 0xcc]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x100354a2
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jne 0x100354a2
xor eax, eax
mov edi, eax
jmp 0x100354a6
mov edi, esi
xor eax, eax
push eax
lea ecx, [ebp - 0xcc]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x100354f7
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
cmp dword [eax], 0xad816f93
jbe 0x100354db
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
xor ecx, ecx
cmp dword [eax], 0x5d76
mov eax, dword [ebp - 0x1c]
setg cl
inc dword [ebp - 0x1c]
cmp eax, ecx
jg 0x1003551e
mov eax, esi
jmp 0x10035520
xor eax, eax
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xcc]
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, dword [eax]
setge dl
cmp edx, 0x223
jne 0x1003555a
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10019b7f
cmp dword [eax], 0
je 0x1003555a
xor eax, eax
jmp 0x1003555e
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xcc]
call fcn.10019b7f
xor edx, edx
cmp esi, dword [eax]
setne dl
or eax, 0xffffffff
xor ecx, ecx
cmp edi, eax
setle cl
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x100355d8
jmp 0x10035593
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x100355b6
call fcn.10019b7f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xcc]
mov esi, eax
call fcn.10019b7f
mov ecx, dword [esi]
mov dword [eax], ecx
inc dword [ebp - 0x2c]
xor eax, eax
cmp dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xcc]
push dword [ebp - 0x1c]
jle 0x10035598
call fcn.10019b7f
cmp dword [eax], 0
jne 0x100355d8
inc dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jle 0x10035591
or eax, 0xffffffff
lea ecx, [ebp - 0xcc]
mov dword [ebp - 4], eax
call fcn.10019b7a
xor esi, esi
mov edi, 0x38ec
mov dword [ebp - 0x3c], edi
inc esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], 0x4981ff29
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], 0x7c7ab89b
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0x29b85755
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], esi
jl 0x10035629
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setg dl
xor eax, eax
mov dword [ebp - 0x30], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035654
push eax
push eax
push eax
call ebx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], 0x4981ff29
push 0xfffffffffffffffc
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], 0x7c7ab89b
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], 0x29b85755
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], esi
jl 0x1003568c
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setg dl
xor eax, eax
mov dword [ebp - 0x30], edx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x100356b7
push eax
push eax
push eax
call ebx
xor ebx, ebx
lea ecx, [ebp - 0xd8]
inc ebx
push ebx
call fcn.10019b12
mov dword [ebp - 4], 0x1d
or eax, 0xffffffff
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x2c], 0x1f7d9671
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10035710
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd8]
call fcn.10019b7f
mov dword [eax], 0x6580
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100356f2
xor eax, eax
push eax
lea ecx, [ebp - 0xd8]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x1003573a
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
cmp dword [eax], 0
jne 0x1003573a
xor eax, eax
mov edi, eax
jmp 0x1003573e
mov edi, ebx
xor eax, eax
push eax
lea ecx, [ebp - 0xd8]
call fcn.10019b7f
cmp dword [eax], 0
jne 0x1003578f
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
cmp dword [eax], 0xad816f93
jbe 0x10035773
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
xor ecx, ecx
cmp dword [eax], 0x5d76
mov eax, dword [ebp - 0x1c]
setg cl
inc dword [ebp - 0x1c]
cmp eax, ecx
jg 0x100357b6
mov eax, ebx
jmp 0x100357b8
xor eax, eax
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xd8]
xor eax, eax
push eax
call fcn.10019b7f
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp ecx, dword [eax]
setge dl
cmp edx, 0x223
jne 0x100357f4
xor eax, eax
lea ecx, [ebp - 0xd8]
push eax
call fcn.10019b7f
cmp dword [eax], 0
je 0x100357f4
mov esi, ebx
xor eax, eax
jmp 0x100357f8
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xd8]
call fcn.10019b7f
xor edx, edx
cmp esi, dword [eax]
setne dl
or eax, 0xffffffff
xor ecx, ecx
cmp edi, eax
setle cl
xor eax, eax
cmp ecx, edx
setl al
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x10035872
jmp 0x1003582d
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10035850
call fcn.10019b7f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xd8]
mov esi, eax
call fcn.10019b7f
mov ecx, dword [esi]
mov dword [eax], ecx
inc dword [ebp - 0x2c]
xor eax, eax
cmp dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xd8]
push dword [ebp - 0x1c]
jle 0x10035832
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10035872
inc dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jle 0x1003582b
or edi, 0xffffffff
lea ecx, [ebp - 0xd8]
mov dword [ebp - 4], edi
call fcn.10019b7a
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0x283066c9
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x28], 0xbc23cea
push 2
mov dword [ebp - 0x3c], 9
mov dword [ebp - 0x18], eax
pop esi
jmp 0x100358b9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x934], 0xa8e55a44
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100358a8
mov dword [ebp - 0x14], 0xfffffffe
cmp dword [ebp - 0x14], 0x12
jge 0x10035b27
mov eax, 0x82a1836c
lea ecx, [ebp - 0x5bc]
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x39c], eax
mov dword [ebp - 0x398], eax
mov dword [ebp - 0x394], eax
push 3
call fcn.10019b12
xor eax, eax
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1003592a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5bc]
call fcn.10019b7f
mov dword [eax], 0x92715ee5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003590b
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x1003595d
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x394]
imul eax, dword [ebp - 0x14]
imul ecx, eax, 0x7bc9
mov eax, dword [ebp - 0x3a0]
cmp ecx, eax
sete dl
imul eax, edx, 0x5637
test eax, eax
jne 0x1003595d
mov ecx, eax
jmp 0x1003595f
mov ecx, ebx
xor eax, eax
cmp ecx, 0x8aa2
push esi
sete al
mov dword [ebp - 0x930], eax
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x398]
neg edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3a0]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor ebx, ebx
add ecx, 0xffff0007
cmp eax, ecx
lea ecx, [ebp - 0x5bc]
setge bl
call fcn.10019b7f
push esi
lea ecx, [ebp - 0x5bc]
mov dword [eax], ebx
mov dword [ebp - 0x20], ebx
call fcn.10019b7f
cmp dword [eax], 0
jne 0x10035a5c
mov eax, dword [ebp - 0x398]
lea ecx, [ebp - 0x5bc]
inc dword [ebp - 0x3c]
push esi
call fcn.10019b7f
mov esi, eax
lea ecx, [ebp - 0x5bc]
xor eax, eax
push eax
call fcn.10019b7f
xor edx, edx
mov ecx, dword [eax]
mov dword [esi], ecx
mov ecx, dword [ebp - 0x14]
cmp dword [esi], ecx
mov eax, dword [ebp - 0x3c]
setge dl
imul eax, dword [ebp - 0x28]
imul eax, edx
xor edx, edx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x930], eax
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x398]
add ecx, 0xfffffff9
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
cmp edx, 3
sbb ecx, ecx
inc ecx
sub eax, ecx
xor ecx, ecx
cmp eax, 0x4069a3e2
setge cl
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
jne 0x10035a5c
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035b06
push 3
lea ecx, [ebp - 0x9d8]
call fcn.10019b12
xor eax, eax
mov byte [ebp - 4], 0x1f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10035a93
push dword [ebp - 0x18]
lea ecx, [ebp - 0x9d8]
call fcn.10019b7f
mov dword [eax], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10035a78
push eax
lea ecx, [ebp - 0x9d8]
call fcn.10019b7f
mov dword [eax], 0xfffffffd
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035afb
mov dword [ebp - 0x28], 0xffffffed
cmp dword [ebp - 0x28], 0xc
jle 0x10035b61
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10035b58
push eax
push 0xb6d
push eax
push 0x1d65
push 0xee8
call dword [sym.imp.GDI32.dll_ExtCreatePen]
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xc
jg 0x10035b36
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x34], 0xab76d609
mov dword [ebp - 0x18], 0xffffffe7
jmp 0x10035bba
mov dword [ebp - 0x3c], 5
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
test eax, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x10035bb7
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1d
jne 0x10035b74
push 5
pop ecx
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x2c], 0x5653
mov dword [ebp - 0x48], 0x7f1a969a
mov dword [ebp - 0x20], 0x3e19f23e
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x3c], 0xc16b405b
mov dword [ebp - 0x18], eax
jmp 0x10035c0b
cmp dword [ebp - 0x18], esi
jl 0x10035bfa