Function at 0x1002f6b6
Capabilities:
Compare security identifiers
Create process on windows
Delete file
Enumerate gui resources
Get common file path
Get file size
Get file system object information
Get keyboard layout
Get system information on windows
Identify system language via api
Log keystrokes
Parse pe header
Read .ini file
Resume thread
Start service

Disassembly:
mov eax, 0x10086482
call fcn.100851f0
mov eax, 0x16d4
call fcn.100819a0
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x68], ecx
mov edi, 0x19d81479
mov byte [ebp - 0x69], dl
inc eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x30], eax
xor eax, eax
push 2
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x1002f6fc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002f6eb
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xd8]
neg eax
push 6
sbb eax, eax
neg eax
sub ecx, eax
mov eax, dword [ebp - 0xd8]
add eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xdc]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xd8]
setge bl
xor edx, edx
sub ebx, eax
mov eax, dword [ebp - 0xdc]
cmp ebx, 0x7383cc4
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
pop ecx
xor eax, eax
push 0xfffffffffffffffa
pop ebx
cmp dword [ebp - 0xd8], eax
je 0x1002f7e6
mov dword [ebp - 0x44], 0x2f20
mov dword [ebp - 0x4c], 0xcaad901
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x1002f7a4
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xdc]
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
setg cl
xor esi, esi
inc esi
cmp ecx, esi
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x2c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xdc]
setle cl
xor edx, edx
cmp ecx, 0xfffffffd
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
jmp 0x1002f878
mov dword [ebp - 0x34], 0x615b38d6
mov dword [ebp - 0x44], ecx
push 2
pop ecx
mov dword [ebp - 0x50], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xdc]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
sbb edx, edx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
setl cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x50]
cmp eax, ebx
jge 0x1002f831
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1002f831
mov ecx, eax
jmp 0x1002f836
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0xdc]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 9
setne dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor eax, eax
inc edx
add edx, dword [ebp - 0x30]
cmp edx, 9
setne al
xor esi, esi
sub eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0xdc]
inc esi
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edi
xor eax, eax
push 2
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x1002f899
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf4], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002f888
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp - 0xf0]
neg eax
sbb eax, eax
neg eax
sub ecx, eax
mov eax, dword [ebp - 0xf0]
add eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf4]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xf0]
setge bl
xor edx, edx
sub ebx, eax
mov eax, dword [ebp - 0xf4]
cmp ebx, 0x7383cc4
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0xf0], eax
je 0x1002f97a
mov dword [ebp - 0x44], 0x2f20
mov dword [ebp - 0x4c], 0xcaad901
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x1002f93b
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
setg cl
cmp ecx, esi
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x2c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf4]
setle cl
xor edx, edx
cmp ecx, 0xfffffffd
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
jmp 0x1002fa12
push 6
pop eax
mov dword [ebp - 0x34], 0x615b38d6
mov dword [ebp - 0x44], eax
push 2
pop ecx
mov dword [ebp - 0x50], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf4]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
sbb edx, edx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
push 0xfffffffffffffffa
setl cl
sub eax, ecx
neg eax
pop ecx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x50]
cmp eax, ecx
jge 0x1002f9cb
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1002f9cb
mov ecx, eax
jmp 0x1002f9d3
xor eax, eax
xor esi, esi
inc esi
lea ecx, [eax + 1]
mov eax, dword [ebp - 0xf4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 9
setne dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor eax, eax
inc edx
add edx, dword [ebp - 0x30]
cmp edx, 9
setne al
sub eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0xf4]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edi
xor eax, eax
push 2
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x1002fa33
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe4], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1002fa22
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
neg eax
sbb eax, eax
neg eax
sub ecx, eax
mov eax, dword [ebp - 0xe0]
add eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xe4]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xe0]
setge bl
xor edx, edx
sub ebx, eax
mov eax, dword [ebp - 0xe4]
cmp ebx, 0x7383cc4
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0xe0], eax
je 0x1002fb1a
mov dword [ebp - 0x44], 0x2f20
mov dword [ebp - 0x4c], 0xcaad901
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x1002fad5
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
push 2
setg cl
cmp ecx, esi
pop ebx
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x2c]
push 0xfffffffffffffffa
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe4]
pop esi
setle cl
xor edx, edx
cmp ecx, 0xfffffffd
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
jmp 0x1002fbaf
push 6
pop eax
mov dword [ebp - 0x34], 0x615b38d6
xor ecx, ecx
mov dword [ebp - 0x44], eax
push 2
pop ebx
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xe4]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
sbb edx, edx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x2c]
push 0xfffffffffffffffa
setl cl
sub eax, ecx
neg eax
pop esi
sbb eax, eax
inc eax
add eax, dword [ebp - 0x50]
cmp eax, esi
jge 0x1002fb6b
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x1002fb6b
mov ecx, eax
jmp 0x1002fb70
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0xe4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 9
setne dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor eax, eax
inc edx
add edx, dword [ebp - 0x30]
cmp edx, 9
setne al
sub eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0xe4]
mov dword [ebp - 0x30], eax
xor eax, eax
lea ecx, [ebp - 0x10e8]
push 3
mov dword [ebp - 0x38], eax
pop eax
mov dword [ebp - 0x48], 0xd085c9e5
push eax
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002fbeb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb54], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002fbd7
xor eax, eax
push 3
mov dword [ebp - 0x1c], eax
pop esi
cmp dword [ebp - 0x1c], esi
jge 0x1002fc18
or edi, 0xffffffff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x10e8]
call fcn.1001a319
mov dword [eax], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002fbf9
xor eax, eax
mov edi, 0x19d81479
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1002fc38
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x85c], 0xbefc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1002fc20
xor eax, eax
mov dword [ebp - 0x38], 0x64a6847d
mov dword [ebp - 0x38], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jg 0x1002fe05
or edi, 0xffffffff
jmp 0x1002fc56
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0x443250e6
lea ecx, [ebp - 0xf90]
mov dword [ebp - 0x48], 0x362daab7
push eax
call fcn.1001a27b
xor ebx, ebx
xor eax, eax
inc ebx
mov byte [ebp - 4], bl
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1002fca4
push dword [ebp - 0x20]
lea ecx, [ebp - 0xf90]
call fcn.1001a319
mov dword [eax], 0x7e2f9d44
xor eax, eax
inc dword [ebp - 0x20]
inc eax
cmp dword [ebp - 0x20], eax
jl 0x1002fc80
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x1002fd61
push ebx
lea ecx, [ebp - 0x10d4]
call fcn.1001a27b
push 2
pop eax
mov byte [ebp - 4], al
lea ecx, [ebp - 0xf78]
mov dword [ebp - 0x48], 0x1637c1d6
mov dword [ebp - 0x48], 0x7d0b
mov dword [ebp - 0x48], edi
push eax
call fcn.1001a27b
push 3
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x48], 0x80f885bd
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002fd1a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x10d4]
call fcn.1001a319
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1002fcf9
xor ebx, ebx
xor eax, eax
inc ebx
push 2
mov dword [ebp - 0x14], eax
pop esi
jmp 0x1002fd30
push dword [ebp - 0x14]
call fcn.1001a319
and dword [eax], 0
inc dword [ebp - 0x14]
lea ecx, [ebp - 0xf78]
cmp dword [ebp - 0x14], esi
jl 0x1002fd22
inc dword [ebp - 0x858]
call fcn.1001a2fd
lea ecx, [ebp - 0x10d4]
mov byte [ebp - 4], bl
call fcn.1001a2fd
dec dword [ebp - 0x28]
jns 0x1002fcb0
xor eax, eax
jmp 0x1002fd64
push 2
pop esi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x1002fde0
push esi
lea ecx, [ebp - 0xc7c]
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x20], eax
jmp 0x1002fd94
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], 7
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xc7c]
cmp dword [ebp - 0x20], esi
jl 0x1002fd83
mov eax, dword [ebp - 0x28]
push ebx
mov esi, dword [ebp + eax*4 - 0xb54]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xb54], esi
call fcn.1001a319
mov ecx, dword [ebp - 0x858]
sub esi, ecx
neg esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0xc7c]
sbb esi, esi
inc esi
mov dword [eax], esi
call fcn.1001a2fd
dec dword [ebp - 0x28]
push 2
pop esi
jns 0x1002fd6c
xor eax, eax
lea ecx, [ebp - 0xf90]
mov byte [ebp - 4], al
call fcn.1001a2fd
inc dword [ebp - 0x38]
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jle 0x1002fc53
push 2
mov edi, 0x19d81479
pop ebx
or esi, 0xffffffff
lea ecx, [ebp - 0x10e8]
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov dword [ebp - 0x38], 4
xor eax, eax
mov dword [ebp - 0x1c], 0xb5ca9869
mov dword [ebp - 0x48], 0xf1fdbd01
mov dword [ebp - 0x48], 0x92280643
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002fe54
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5b8], 0xc4185a1f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002fe3c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002fe74
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x194], 0x42c512dc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002fe5c
xor eax, eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 8
jle 0x1002ff07
push 6
pop edi
mov dword [ebp - 0x48], 7
lea ecx, [ebp - 0x1100]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x961c0f80
mov dword [ebp - 0x48], 0xfffffff9
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x48], eax
xor eax, eax
inc eax
mov dword [ebp - 0x48], 0xd6f1860e
mov dword [ebp - 0x48], 0x5900
push eax
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x20], eax
jmp 0x1002feda
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x20]
xor eax, eax
lea ecx, [ebp - 0x1100]
inc eax
cmp dword [ebp - 0x20], eax
jl 0x1002fecd
inc dword [ebp - 0x194]
mov dword [ebp - 4], esi
call fcn.1001a2fd
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 8
push 0
pop eax
jg 0x1002fe84
mov edi, 0x19d81479
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x1002fff4
mov edi, 0x9097d93c
mov dword [ebp - 0x34], 0xce094bf7
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x194]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x194], ecx
test ecx, ecx
je 0x1002ff51
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x194], 0
je 0x1002ff51
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
jmp 0x1002ff55
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5b8], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x194]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x194]
mov eax, dword [ebp - 0x1c]
add ecx, dword [ebp + eax*4 - 0x5b8]
mov eax, dword [ebp - 0x1c]
cmp ecx, ebx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x194]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x5b8]
cmp ecx, eax
setl dl
sub edx, 0xe3f0e26a
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x194]
cmp edi, edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x5b8], 0x81fdf20b
dec dword [ebp - 0x1c]
jns 0x1002ff1b
xor eax, eax
mov edi, 0x19d81479
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x1c], ebx
push 3
mov dword [ebp - 0x14], eax
pop edx
cmp dword [ebp - 0x14], edx
jge 0x10030020
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x450], 0xbc07c207
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10030008
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10030036
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x608], 0x4f77722a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10030025
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jl 0x10030078
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setge dl
push 3
add eax, edx
pop edx
je 0x10030078
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, 0xfffffff7
setle cl
mov dword [ebp - 0x608], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x1c]
jge 0x100300a0
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x28], esi
xor eax, eax
mov dword [ebp - 0x50], 0xd4add7d5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edx
jge 0x100300cc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1450], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x100300b4
xor eax, eax
mov dword [ebp - 0x3c], 9
cmp dword [ebp - 0x3c], 0x29
jge 0x100301dc
push 0xfffffffffffffffa
pop edi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], 0x4d82229b
mov dword [ebp - 0x1c], 0xffffffea
cmp dword [ebp - 0x1c], 0xfffffffb
jge 0x100301c2
mov dword [ebp - 0x14], 0x2b2c9d53
mov dword [ebp - 0x44], 0xb569f134
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x1003012c
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x448]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
cmp eax, edi
setg cl
add ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, esi
setle al
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x10]
jle 0x1003015d
mov eax, dword [ebp - 0x604]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x10030170
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x450]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x450], eax
test eax, eax
je 0x10030195
mov eax, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x2c]
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x10]
sets dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x44], eax
jne 0x100301c0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffb
jl 0x100300fb
xor eax, eax
cmp dword [ebp - 0x448], eax
jne 0x100301d7
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x29
jl 0x100300e0
mov edi, 0x19d81479
mov dword [ebp - 0x3c], 0x1d
cmp dword [ebp - 0x3c], 0x15
je 0x10030233
push 2
pop edx
mov dword [ebp - 0x28], eax
jmp 0x10030225
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edx
jg 0x1003021d
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x608]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x608], ecx
mov dword [ebp - 0x144c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jle 0x100301f9
xor eax, eax
cmp dword [ebp - 0x50], eax
jne 0x1003022a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jle 0x100301f1
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0x15
jne 0x100301ec
mov dword [ebp - 0x28], edi
xor ecx, ecx
mov dword [ebp - 0x44], 0xf94f
mov dword [ebp - 0x28], esi
push 0xfffffffffffffffa
pop eax
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 0x6c8], eax
mov dword [ebp - 0x6c4], eax
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x44]
cmp eax, 0x831e
push 3
setne cl
pop eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], eax
xor eax, eax
cmp dword [ebp - 0x28], eax
jl 0x1003032e
jmp 0x10030280
xor eax, eax
mov dword [ebp - 0x10], esi
xor edx, edx
mov dword [ebp - 0x4c], 0xf803
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x6cc]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6cc]
cmp eax, edx
mov eax, dword [ebp - 0x28]
setle cl
mov dword [ebp + eax*4 - 0x6cc], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x6c0], eax
cmp eax, ebx
je 0x100302db
xor eax, eax
cmp dword [ebp - 0x6c8], eax
je 0x100302dd
xor ebx, ebx
lea ecx, [eax + 1]
inc ebx
jmp 0x100302df
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x28]
sub eax, ecx
xor ecx, ecx
add eax, dword [ebp - 0x28]
cmp eax, 0x3672
mov eax, dword [ebp - 0x44]
setge cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x10]
neg edx
sbb edx, edx
neg edx
cmp edx, dword [ebp - 0x4c]
jle 0x1003030f
mov eax, dword [ebp - 0x4c]
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x28]
jns 0x1003027e
push 9
pop eax
push 2
mov dword [ebp - 0x3c], ebx
lea ecx, [ebp - 0x9cc]
mov dword [ebp - 0x14], eax
pop esi
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x28], 0xfffffff8
push esi
call fcn.1001a27b
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x1003037e
push dword [ebp - 0x20]
lea ecx, [ebp - 0x9cc]
call fcn.1001a319
mov dword [eax], 0xf02c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10030360
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1d
jg 0x10030567
jmp 0x1003038f
xor eax, eax
mov dword [ebp - 0x38], eax
push 0xfffffffffffffff7
pop ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x34], 0x314d41bd
mov dword [ebp - 0x4c], 0x10cb4e34
mov dword [ebp - 0x4c], 0x6a916c6c
mov dword [ebp - 0x50], 0xaed4
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x20], eax
jmp 0x100303c9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2dc], ecx
inc dword [ebp - 0x20]
xor eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jl 0x100303bc
imul eax, dword [ebp - 0x38], 0xa939
mov dword [ebp - 0x2dc], 0xfffffff9
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x4c], eax
imul ecx, dword [ebp - 0x4c], 0xfffffff9
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setle dl
xor ebx, ebx
cmp edx, 0x888a
setne bl
xor ecx, ecx
cmp ebx, eax
setne cl
xor eax, eax
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], eax
jne 0x10030424
cmp dword [ebp - 0x2dc], eax
jne 0x10030424
mov ecx, eax
jmp 0x10030429
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x44]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
imul eax, ecx, 0x4e52
add eax, 0x7ccefbd2
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x38]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setle dl
sub edx, 0x3cc9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
imul ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x14]
jg 0x10030479
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x9cc]
mov eax, dword [ebp - 0x14]
xor ebx, ebx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
push ebx
call fcn.1001a319
mov ecx, dword [ebp - 0x28]
sub ecx, dword [eax]
je 0x10030516
mov dword [ebp - 0x20], 0xf2bac411
xor eax, eax
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x4c], 0xfffffff6
cmp dword [ebp - 0x44], eax
je 0x100304c9
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setge dl
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x50]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x100304da
mov ecx, eax
jmp 0x100304df
xor eax, eax
lea ecx, [eax + 1]
xor eax, eax
cmp ecx, 0x464e9414
setge al
imul eax, eax, 0x8b02
cmp eax, 0x88c4b507
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, 0xfe8e
setl dl
sub eax, edx
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10030557
jmp 0x10030540
mov dword [ebp - 0x4c], 0xb3b8cd6c
mov dword [ebp - 0x28], ebx
jmp 0x10030533
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2dc], 0x28c20713
inc dword [ebp - 0x28]
xor eax, eax
inc eax
cmp dword [ebp - 0x28], eax
jl 0x10030522
inc dword [ebp - 0x4c]
xor eax, eax
push eax
lea ecx, [ebp - 0x9cc]
call fcn.1001a319
xor eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1d
push 1
pop ebx
jle 0x1003038d
or esi, 0xffffffff
lea ecx, [ebp - 0x9cc]
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov dword [ebp - 0x20], 0xfffffffd
xor eax, eax
mov dword [ebp - 0x34], 0x7937
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x20], eax
jmp 0x100305a2
mov dword [ebp - 0x50], 5
cmp dword [ebp - 0x34], eax
jne 0x100305a8
mov dword [ebp - 0x50], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x19
jge 0x10030590
push 2
mov dword [ebp - 0x20], eax
pop ebx
cmp dword [ebp - 0x20], ebx
jge 0x100305cb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xec], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100305b3
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x1b0]
xor eax, eax
inc eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x40], eax
push ebx
call fcn.1001a27b
mov dword [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x4c], 0x1e69d086
mov dword [ebp - 0x20], eax
jmp 0x1003060c
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b0]
call fcn.1001a319
and dword [eax], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100305f8
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x30], eax
inc eax
cmp dword [ebp - 0x30], eax
jl 0x100308cc
jmp 0x1003062b
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0xe68]
mov dword [ebp - 0x44], 0x563ade4
push ebx
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003066d
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe68]
call fcn.1001a319
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003064f
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x11
jle 0x10030756
xor ebx, ebx
inc ebx
mov dword [ebp - 0x4c], 0xb2e4145c
lea ecx, [ebp - 0xc40]
mov dword [ebp - 0x4c], 0x65c829e
mov dword [ebp - 0x4c], 0xc520ea0c
push ebx
call fcn.1001a27b
mov byte [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x20], eax
jmp 0x100306c3
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc40]
call fcn.1001a319
mov dword [eax], 0xfffffffc
inc dword [ebp - 0x20]
xor eax, eax
inc eax
cmp dword [ebp - 0x20], eax
jl 0x100306ac
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
cmp eax, 0x7383cbb
setg cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0xc40]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
xor eax, eax
push eax
call fcn.1001a319
mov esi, dword [ebp - 0x4c]
mov edi, eax
sub esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x38]
neg esi
mov eax, dword [ebp - 0x40]
sbb esi, esi
xor edx, edx
inc esi
cmp ecx, esi
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
xor ebx, ebx
mov dword [edi], ecx
inc ebx
push ebx
lea ecx, [ebp - 0x1b0]
call fcn.1001a319
mov edx, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x38]
xor eax, eax
cmp ecx, edx
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc40]
setl al
mov dword [esi], eax
call fcn.1001a2fd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jg 0x1003067d
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1003089c
mov dword [ebp - 0x4c], 0xb108a665
lea ecx, [ebp - 0x1b0]
push dword [ebp - 0x1c]
call fcn.1001a319
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x38]
jg 0x10030794
xor ebx, ebx
lea ecx, [ebp - 0x1b0]
push ebx
call fcn.1001a319
cmp dword [eax], ebx
jne 0x10030794
xor eax, eax
mov esi, eax
inc eax
jmp 0x10030799
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0x1b0]
call fcn.1001a319
xor ecx, ecx
cmp dword [eax], esi
setle cl
xor edi, edi
mov dword [ebp - 0x4c], ecx
inc edi
push edi
lea ecx, [ebp - 0x1b0]
call fcn.1001a319
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x1b0]
push dword [ebp - 0x1c]
sub esi, dword [eax]
neg esi
sbb esi, esi
inc esi
call fcn.1001a319
mov eax, dword [eax]
imul eax, esi
test eax, eax
jne 0x100307eb
push eax
lea ecx, [ebp - 0x1b0]
call fcn.1001a319
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x1b0]
add eax, 0x2d3c5ebb
mov dword [ebp - 0x44], eax
push edi
call fcn.1001a319
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
push dword [ebp - 0x1c]
add ecx, 0x11919b17
cmp ecx, dword [eax]
lea ecx, [ebp - 0x1b0]
setl bl
add ebx, 0xffff051e
neg ebx
sbb ebx, ebx
inc ebx
call fcn.1001a319
mov esi, dword [ebp - 0x38]
xor ecx, ecx
cmp ebx, dword [eax]
sete cl
xor eax, eax
add esi, ecx
lea ecx, [ebp - 0xe68]
push eax
call fcn.1001a319
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b0]
mov dword [eax], esi
call fcn.1001a319
mov ecx, dword [ebp - 0x38]
sub esi, dword [eax]
mov eax, dword [ebp - 0x30]
add eax, esi
add ecx, eax
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x1b0]
push dword [ebp - 0x1c]
call fcn.1001a319
mov ecx, dword [ebp - 0x40]
neg ecx
push edi
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1b0]
sete bl
call fcn.1001a319
mov ecx, dword [ebp - 0x4c]
xor edx, edx
cmp ebx, ecx
sete dl
mov dword [eax], edx
inc dword [ebp - 0x1c]
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jle 0x1003075e
lea ecx, [ebp - 0xe68]
mov byte [ebp - 4], 7
call fcn.1001a2fd
inc dword [ebp - 0x30]
xor eax, eax
inc eax
push 2
pop ebx
cmp dword [ebp - 0x30], eax
jge 0x10030628
or esi, 0xffffffff
lea ecx, [ebp - 0x1b0]
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov eax, dword [ebp - 0xec]
mov ecx, dword [ebp - 0xe8]
neg eax
mov edi, dword [sym.imp.USER32.dll_SetPropA]
sbb eax, eax
neg eax
sub ecx, eax
mov eax, dword [ebp - 0xe8]
add eax, ecx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xec]
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0xe8]
setge bl
xor edx, edx
sub ebx, eax
mov eax, dword [ebp - 0xec]
cmp ebx, 0x7383cc4
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
xor eax, eax
cmp dword [ebp - 0xe8], eax
je 0x100311bf
mov dword [ebp - 0x1c], 0xae5a
xor ecx, ecx
inc ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x34], 0xfffffff9
push 2
mov dword [ebp - 0x20], eax
pop ebx
cmp dword [ebp - 0x20], ebx
jge 0x10030986
push 0xfffffffffffffffa
pop ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030974
mov dword [ebp - 0x1c], 0xffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x98]
sub ecx, eax
xor eax, eax
cmp ecx, dword [ebp - 0x98]
jl 0x100309de
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x10030c03
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
jmp 0x10030c01
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x20], 0x28c7fffa
mov dword [ebp - 0x10], 0x58fe4de5
mov dword [ebp - 0x4c], 0x642e5f0e
mov dword [ebp - 0x48], 5
push 6
mov dword [ebp - 0x2c], 0x5de082ad
pop ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jg 0x10030bfb
jmp 0x10030a1e
xor eax, eax
inc eax
push 3
mov dword [ebp - 0x14], 0xfffffffc
lea ecx, [ebp - 0xc58]
mov dword [ebp - 0x34], eax
pop eax
push eax
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10030a6d
push 3
pop ebx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc58]
call fcn.1001a319
mov dword [eax], 0x55d48264
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030a4c
push 2
xor eax, eax
pop ebx
xor edi, edi
mov dword [ebp - 0x14], eax
inc edi
cmp dword [ebp - 0x14], edi
jg 0x10030afc
mov dword [ebp - 0x20], eax
jmp 0x10030a92
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1614], 0xec02dfce
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030a81
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x98], 0
je 0x10030ac1
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
test eax, eax
mov eax, dword [ebp - 0x14]
sets cl
mov dword [ebp + eax*4 - 0x98], ecx
mov eax, dword [ebp - 0x44]
mov edx, esi
sub edx, eax
xor ecx, ecx
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp edx, eax
push 0
setl cl
imul eax, ecx, 0x707
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], 0x46552ded
inc dword [ebp - 0x2c]
inc dword [ebp - 0x14]
pop eax
cmp dword [ebp - 0x14], edi
jle 0x10030a7c
mov dword [ebp - 0x2c], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x2c], eax
jg 0x10030bd8
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x98]
test eax, eax
setne cl
xor edi, edi
mov dword [ebp - 0x40], ecx
inc edi
push edi
lea ecx, [ebp - 0xc58]
call fcn.1001a319
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x98]
setle dl
imul eax, edx
imul eax, eax, 0x585f
sub eax, 0x4a0c8287
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x20], eax
jge 0x10030b5a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x94]
jge 0x10030b78
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x14], 0xc08f497c
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x98]
mov eax, dword [ebp - 0x10]
cmp eax, edi
mov eax, dword [ebp - 0x38]
setg cl
xor ebx, ebx
imul edx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle bl
sub eax, 0x4212964f
xor ecx, ecx
cmp dword [ebp - 0x40], eax
setl cl
xor eax, eax
cmp ecx, ebx
setg al
mov dword [ebp - 0x94], eax
xor eax, eax
inc dword [ebp - 0x2c]
inc eax
cmp dword [ebp - 0x2c], eax
jle 0x10030b0b
push 2
pop ebx
lea ecx, [ebp - 0xc58]
mov dword [ebp - 4], esi
call fcn.1001a2fd
inc dword [ebp - 0x1c]
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jle 0x10030a1b
mov edi, dword [sym.imp.USER32.dll_SetPropA]
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10030c1c
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x10030c1a
lea esi, [eax + 1]
jmp 0x10030c1e
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x98], eax
je 0x10030c29
xor eax, eax
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x98]
sub ecx, 0x2579
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setle dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x30]
cmp edx, eax
setg cl
sub esi, ecx
cmp esi, dword [ebp - 0x30]
jle 0x10030c75
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10030c75
xor esi, esi
inc esi
jmp 0x10030c7a
xor esi, esi
inc esi
mov eax, esi
mov dword [ebp - 0x94], eax
lea ecx, [ebp - 0xfb4]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x44], 0x2f20
push 4
call fcn.1001a27b
mov dword [ebp - 4], 0xb
xor eax, eax
mov dword [ebp - 0x20], 0x5052061f
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10030ccf
push dword [ebp - 0x20]
lea ecx, [ebp - 0xfb4]
call fcn.1001a319
mov dword [eax], 0xe48d327c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10030cb0
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10030cee
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10030ceb
call ebx
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_SetParent]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10030cd4
or eax, 0xffffffff
lea ecx, [ebp - 0xfb4]
mov dword [ebp - 4], eax
call fcn.1001a2fd
push 3
pop ebx
mov dword [ebp - 0x4c], 0xcaad901
lea ecx, [ebp - 0x1160]
push ebx
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10030d4a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1160]
call fcn.1001a319
mov dword [eax], 0xb3c692be
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030d2c
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10030d60
push 0x1eba
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10030db1
push eax
push 0x1672
push 0x49e
push 0x90e
push 0x2605
push 0x2078
push 0x14a6
push 0x89a
push 0x2647
push 0x259f
push 0x1cb6
push 0xb7d
push 0x12e8
push 0x136a
call dword [sym.imp.GDI32.dll_CreateFontA]
or eax, 0xffffffff
lea ecx, [ebp - 0x1160]
mov dword [ebp - 4], eax
call fcn.1001a2fd
push 2
pop ecx
push ecx
xor ebx, ebx
lea ecx, [ebp - 0x468]
mov dword [ebp - 0x34], ebx
call fcn.1001a27b
push 3
pop eax
mov dword [ebp - 4], 0xd
lea ecx, [ebp - 0xd78]
mov dword [ebp - 0x30], ebx
push eax
call fcn.1001a27b
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x2c], 0x667120dd
push 2
mov dword [ebp - 0x14], eax
pop ebx
cmp dword [ebp - 0x14], ebx
jge 0x10030e25
push dword [ebp - 0x14]
lea ecx, [ebp - 0x468]
call fcn.1001a319
mov dword [eax], 0x5d6c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10030e07
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10030e54
push 3
pop ebx
or esi, 0xffffffff
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd78]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10030e34
xor esi, esi
xor eax, eax
push 2
inc esi
pop ebx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], esi
jg 0x1003101f
jmp 0x10030e64
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x20], eax
jmp 0x10030e80
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x162c], 0x3b1dab55
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10030e6f
push dword [ebp - 0x30]
lea ecx, [ebp - 0x468]
call fcn.1001a319
push dword [ebp - 0x30]
lea ecx, [ebp - 0x468]
mov esi, eax
call fcn.1001a319
mov ecx, dword [esi]
xor edi, edi
inc edi
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x38], edi
cmp dword [ebp - 0x38], eax
jl 0x10031007
push ebx
lea ecx, [ebp - 0x294]
call fcn.1001a27b
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10030eff
push 0xfffffffffffffffa
pop edi
push dword [ebp - 0x20]
lea ecx, [ebp - 0x294]
call fcn.1001a319
mov dword [eax], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030ee4
xor edi, edi
inc edi
push edi
lea ecx, [ebp - 0x294]
call fcn.1001a319
xor ebx, ebx
cmp dword [eax], ebx
jne 0x10030fc9
push ebx
lea ecx, [ebp - 0x294]
call fcn.1001a319
push edi
lea ecx, [ebp - 0x294]
call fcn.1001a319
push edi
lea ecx, [ebp - 0x294]
call fcn.1001a319
mov ecx, dword [ebp - 0x38]
cmp ecx, dword [eax]
jg 0x10030f52
push dword [ebp - 0x30]
lea ecx, [ebp - 0x468]
call fcn.1001a319
cmp dword [eax], ebx
je 0x10030f5e
push edi
lea ecx, [ebp - 0x294]
call fcn.1001a319
push ebx
lea ecx, [ebp - 0xd78]
call fcn.1001a319
push edi
lea ecx, [ebp - 0x294]
call fcn.1001a319
push dword [ebp - 0x30]
lea ecx, [ebp - 0x468]
call fcn.1001a319
push edi
lea ecx, [ebp - 0x294]
mov esi, eax
call fcn.1001a319
xor ebx, ebx
push edi
mov ecx, dword [eax]
cmp ecx, dword [esi]
lea ecx, [ebp - 0x294]
setge bl
call fcn.1001a319
xor ecx, ecx
cmp ebx, dword [eax]
setl cl
mov dword [ebp - 0x162c], ecx
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x10030fc9
mov esi, eax
inc eax
jmp 0x10030fce
xor eax, eax
inc eax
mov esi, eax
push eax
lea ecx, [ebp - 0x294]
call fcn.1001a319
xor edi, edi
inc edi
cmp esi, edi
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x294]
setle dl
mov dword [ebp - 0x34], edx
mov byte [ebp - 4], 0xe
call fcn.1001a2fd
dec dword [ebp - 0x38]
push 2
pop ebx
jns 0x10030eb9
inc dword [ebp - 0x30]
xor eax, eax
inc eax
cmp dword [ebp - 0x30], eax
jle 0x10030e62
mov edi, dword [sym.imp.USER32.dll_SetPropA]
xor esi, esi
inc esi
mov dword [ebp - 0x2c], 0xfffffff3
cmp dword [ebp - 0x2c], 0xffffffef
jge 0x10031139
jmp 0x10031035
xor esi, esi
inc esi
push 6
pop eax
push 3
pop ebx
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0xabc]
push ebx
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10031076
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x838], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10031058
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003109e
or esi, 0xffffffff
push dword [ebp - 0x14]
lea ecx, [ebp - 0xabc]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10031081
xor esi, esi
xor eax, eax
inc esi
cmp dword [ebp - 0x20], eax
jne 0x1003112e
push eax
lea ecx, [ebp - 0x468]
call fcn.1001a319
cmp dword [eax], 0
jne 0x100310c1
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x100310c8
jmp 0x100310c3
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x100310ca
mov esi, eax
push eax
lea ecx, [ebp - 0x468]
call fcn.1001a319
xor ebx, ebx
lea ecx, [ebp - 0xabc]
cmp dword [eax], ebx
sete bl
xor eax, eax
inc eax
mov dword [ebp - 0x838], ebx
push eax
call fcn.1001a319
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp ecx, esi
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0x20]
setl dl
sub ebx, ecx
xor ecx, ecx
add ebx, 0x9672
cmp edx, ebx
setl cl
mov dword [eax], ecx
lea ecx, [ebp - 0xabc]
call fcn.1001a2fd
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffef
jl 0x10031032
jmp 0x10031139
lea ecx, [ebp - 0xabc]
call fcn.1001a2fd
lea ecx, [ebp - 0xd78]
call fcn.1001a2fd
or esi, 0xffffffff
lea ecx, [ebp - 0x468]
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov eax, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], eax
jne 0x1003117d
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
xor ecx, ecx
test eax, eax
setg cl
xor eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
cmp eax, 0xfffffffc
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xec]
setle cl
xor edx, edx
cmp ecx, 0xfffffffd
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x34], ecx
jmp 0x10031a25
mov dword [ebp - 0x4c], 0xf89b
xor esi, esi
inc esi
or ecx, 0xffffffff
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x48], 0xa23e86f8
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x48], 0xea964a90
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10031214
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf8], 0x9bd697e7
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x100311f6
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1003123a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2d0], 9
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1003121c
xor esi, esi
xor eax, eax
inc esi
cmp dword [ebp - 0x4c], eax
je 0x100313a7
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x38]
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x40]
add ecx, eax
mov eax, dword [ebp - 0xf8]
cmp ecx, eax
mov ecx, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x38]
sete bl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xf8]
setl dl
sub edx, ebx
neg edx
sbb edx, edx
inc edx
cmp edx, 0xcc099843
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
sete cl
cmp ecx, 0x68fa
jle 0x100313a7
mov dword [ebp - 0x30], 0x136ef6f
or eax, 0xffffffff
mov dword [ebp - 0x44], eax
xor edx, edx
mov dword [ebp - 0x10], 0xf5b04ce9
mov dword [ebp - 0x4c], 0xed4033e2
mov dword [ebp - 0x2c], 0x63965b81
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xf8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setne dl
xor eax, eax
neg edx
je 0x10031307
cmp dword [ebp - 0x38], eax
je 0x10031307
mov eax, esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x319d
mov eax, dword [ebp - 0x38]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, dword [ebp - 0x30]
jne 0x1003133d
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xffffffe9
cmp dword [ebp - 0x2c], 0xffffffeb
jge 0x10031376
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x1003136d
push eax
push eax
call esi
push eax
call edi
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffeb
jl 0x1003135b
push 2
pop ebx
xor eax, eax
mov dword [ebp - 0x4c], 0x615b38d6
inc eax
mov dword [ebp - 0x14], 0x5c68ec0a
mov dword [ebp - 0x48], eax
or eax, 0xffffffff
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffe5
jl 0x1003163b
xor edi, edi
xor eax, eax
inc edi
jmp 0x1003147f
push 3
pop ebx
push ebx
lea ecx, [ebp - 0xc70]
call fcn.1001a27b
mov dword [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x38], 0x9bfbd42f
mov dword [ebp - 0x20], eax
jmp 0x100313dc
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], 0x55f2
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xc70]
cmp dword [ebp - 0x20], ebx
jl 0x100313cb
dec dword [ebp - 0x2d0]
mov esi, dword [ebp - 0x2d0]
push 2
pop ebx
push ebx
call fcn.1001a319
mov dword [eax], esi
mov eax, dword [ebp - 0x1c]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 8
cmp dword [ebp - 0x38], 9
jne 0x10031466
mov edi, dword [sym.imp.USER32.dll_GetDC]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10031443
push eax
push 0x1ac1
push eax
push 0x16f7
push eax
call esi
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10031457
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x1003141f
mov edi, dword [sym.imp.USER32.dll_SetPropA]
or eax, 0xffffffff
lea ecx, [ebp - 0xc70]
mov dword [ebp - 4], eax
call fcn.1001a2fd
jmp 0x10031379
push 2
pop ebx
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x1e4], edi
mov dword [ebp - 0x1e0], edi
mov dword [ebp - 0x1dc], edi
mov dword [ebp - 0x1d8], edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x100314c4
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1124], 0xad38
xor eax, eax
inc dword [ebp - 0x20]
inc eax
cmp dword [ebp - 0x20], eax
jl 0x100314a6
xor edi, edi
xor eax, eax
inc edi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jl 0x10031628
jmp 0x100314d5
push 2
pop ebx
push 3
pop eax
push eax
lea ecx, [ebp - 0x668]
call fcn.1001a27b
push ebx
lea ecx, [ebp - 0xfcc]
mov dword [ebp - 4], 0x12
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1003152a
push 3
pop ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x668]
call fcn.1001a319
mov dword [eax], 0xa6deec54
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031509
push 2
xor eax, eax
pop ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031550
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfcc]
call fcn.1001a319
mov dword [eax], 0x401d1b98
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031532
xor eax, eax
mov dword [ebp - 0x1c], eax
push 2
pop edi
cmp dword [ebp - 0x1c], ebx
jge 0x10031571
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb94], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1003155d
jmp 0x10031573
xor ebx, ebx
push edi
lea ecx, [ebp - 0x668]
call fcn.1001a319
push edi
lea ecx, [ebp - 0x668]
mov dword [eax], ebx
call fcn.1001a319
cmp dword [eax], ebx
jl 0x100315fe
mov ebx, 0x47c4d145
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x1e4], ebx
mov dword [ebp - 0x1e0], ebx
mov dword [ebp - 0x1dc], ebx
mov dword [ebp - 0x1d8], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x100315d9
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x100315d4
push eax
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_EnumChildWindows]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x100315be
dec dword [ebp - 0xb90]
lea ecx, [ebp - 0x668]
push edi
call fcn.1001a319
push edi
lea ecx, [ebp - 0x668]
dec dword [eax]
call fcn.1001a319
cmp dword [eax], 0
jge 0x10031596
lea ecx, [ebp - 0xfcc]
call fcn.1001a2fd
or eax, 0xffffffff
lea ecx, [ebp - 0x668]
mov dword [ebp - 4], eax
call fcn.1001a2fd
dec dword [ebp - 0x20]
jns 0x100314d2
xor edi, edi
xor eax, eax
inc edi
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe5
jge 0x1003147c
mov edi, dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x14], 0xfffffffc
cmp dword [ebp - 0x14], 0x10
je 0x1003165f
xor eax, eax
mov dword [ebp - 0x34], 0xab3cf813
cmp dword [ebp - 0x34], eax
jne 0x1003165f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x10
jne 0x1003164a
push 6
pop eax
push 2
pop ebx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x888]
push ebx
call fcn.1001a27b
push 3
pop eax
push eax
lea ecx, [ebp - 0x620]
mov dword [ebp - 4], 0x14
call fcn.1001a27b
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100316bd
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x888]
call fcn.1001a319
mov dword [eax], 7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1003169f
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100316df
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3f0], 0xdf1febae
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100316c6
xor eax, eax
push 3
mov dword [ebp - 0x1c], eax
pop ebx
cmp dword [ebp - 0x1c], ebx
jge 0x10031708
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x620]
call fcn.1001a319
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100316ea
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x3e4], eax
inc ebx
cmp dword [ebp - 0x3e4], ebx
jg 0x100318ed
jmp 0x10031721
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], 0xfffffffd
mov dword [ebp - 0x10], 0x57497f3c
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jg 0x10031823
mov dword [ebp - 0x20], eax
jmp 0x1003175a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1644], 0xd63a88e0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10031749
push dword [ebp - 0x14]
lea ecx, [ebp - 0x888]
call fcn.1001a319
xor edi, edi
cmp dword [eax], edi
je 0x1003178f
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x100317db
push eax
push eax
call esi
push eax
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
jmp 0x100317d9
xor eax, eax
xor ebx, ebx
inc eax
inc ebx
mov dword [ebp - 0x30], eax
xor eax, eax
inc dword [ebp - 0x30]
mov dword [ebp - 0x30], 0x12
cmp dword [ebp - 0x30], 0x11
jl 0x100317db
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], eax
jl 0x100317d0
xor edi, edi
push dword [ebp - 0x3e4]
lea ecx, [ebp - 0x888]
call fcn.1001a319
cmp dword [eax], edi
jne 0x100317ce
dec dword [ebp - 0x2c]
jns 0x100317b4
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0x11
jge 0x100317aa
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x100317f5
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x620]
push ebx
call fcn.1001a319
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x3e4]
dec edx
neg edx
push 0
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
pop eax
setge cl
mov dword [ebp - 0x1644], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10031744
push eax
lea ecx, [ebp - 0x888]
call fcn.1001a319
xor ebx, ebx
lea ecx, [ebp - 0x620]
push ebx
mov dword [eax], 8
mov eax, dword [ebp - 0x3e4]
call fcn.1001a319
mov ecx, dword [ebp - 0x3f0]
mov eax, dword [ebp - 0x3e4]
dec ecx
mov edx, dword [ebp - 0x14]
neg ecx
push ebx
sbb ecx, ecx
neg ecx
sub ecx, eax
xor eax, eax
cmp ecx, 0x78a4911c
setne al
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
setne cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x620]
call fcn.1001a319
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp ecx, dword [eax]
setge dl
or eax, 0xffffffff
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setge bl
xor ecx, ecx
sub ebx, 0x5d3384f7
cmp ebx, eax
setl cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0x620]
mov eax, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.1001a319
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x34], eax
xor eax, eax
inc dword [ebp - 0x3e4]
inc eax
push eax
pop ebx
cmp dword [ebp - 0x3e4], eax
jle 0x1003171f
mov edi, dword [sym.imp.USER32.dll_SetPropA]
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x620]
call fcn.1001a2fd
or eax, 0xffffffff
lea ecx, [ebp - 0x888]
mov dword [ebp - 4], eax
call fcn.1001a2fd
push 2
pop eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xe08]
push eax
call fcn.1001a27b
mov dword [ebp - 4], 0x16
xor eax, eax
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x50], 0x31551da6
push 2
mov dword [ebp - 0x14], eax
pop esi
cmp dword [ebp - 0x14], esi
jge 0x10031957
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe08]
call fcn.1001a319
mov dword [eax], 0xdf98
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10031939
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003196d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x165c], 0x9c3fbb4e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1003195c
push ebx
lea ecx, [ebp - 0xe08]
call fcn.1001a319
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0xe08]
sete dl
or esi, 0xffffffff
mov dword [ebp - 0x1650], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xec]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
sbb edx, edx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x28]
push 0xfffffffffffffffa
setl cl
sub eax, ecx
neg eax
pop ecx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x40]
cmp eax, ecx
jge 0x100319e1
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x100319e1
mov ecx, eax
jmp 0x100319e6
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0xec]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 9
setne dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor eax, eax
inc edx
add edx, dword [ebp - 0x3c]
cmp edx, 9
setne al
sub eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0xec]
mov dword [ebp - 0x3c], eax
xor eax, eax
lea ecx, [ebp - 0xffc]
push 3
mov dword [ebp - 0x38], eax
pop eax
mov dword [ebp - 0x48], 0xd085c9e5
push eax
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0x17
push 2
mov dword [ebp - 0x1c], eax
pop ebx
cmp dword [ebp - 0x1c], ebx
jge 0x10031a6b
push 0xfffffffffffffffa
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbf4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031a57
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10031a94
push 3
pop ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xffc]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031a77
push 2
xor eax, eax
pop ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031ab4
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x984], 0xbefc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031a9c
xor eax, eax
mov dword [ebp - 0x38], 0x64a6847d
mov dword [ebp - 0x38], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jg 0x10031c7b
or edi, 0xffffffff
jmp 0x10031ad2
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0x443250e6
lea ecx, [ebp - 0x11b8]
mov dword [ebp - 0x48], 0x362daab7
push eax
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x18
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
cmp dword [ebp - 0x20], ebx
jge 0x10031b21
push dword [ebp - 0x20]
lea ecx, [ebp - 0x11b8]
call fcn.1001a319
mov dword [eax], 0x7e2f9d44
xor eax, eax
inc dword [ebp - 0x20]
inc eax
cmp dword [ebp - 0x20], eax
jl 0x10031afd
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x28], ebx
push 2
pop esi
cmp dword [ebp - 0x28], eax
jl 0x10031bd9
push ebx
lea ecx, [ebp - 0xfe4]
call fcn.1001a27b
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x10f4]
mov dword [ebp - 0x48], 0x1637c1d6
mov dword [ebp - 0x48], 0x7d0b
mov dword [ebp - 0x48], edi
push esi
call fcn.1001a27b
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x48], 0x80f885bd
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10031b96
push dword [ebp - 0x14]
lea ecx, [ebp - 0xfe4]
call fcn.1001a319
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10031b75
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], eax
jmp 0x10031ba9
push dword [ebp - 0x14]
call fcn.1001a319
and dword [eax], 0
inc dword [ebp - 0x14]
lea ecx, [ebp - 0x10f4]
cmp dword [ebp - 0x14], esi
jl 0x10031b9b
inc dword [ebp - 0x980]
call fcn.1001a2fd
lea ecx, [ebp - 0xfe4]
mov byte [ebp - 4], 0x18
call fcn.1001a2fd
dec dword [ebp - 0x28]
jns 0x10031b30
xor eax, eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10031c54
push esi
lea ecx, [ebp - 0xc88]
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x20], eax
jmp 0x10031c09
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], 7
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xc88]
cmp dword [ebp - 0x20], esi
jl 0x10031bf8
mov eax, dword [ebp - 0x28]
push ebx
mov esi, dword [ebp + eax*4 - 0xbf4]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbf4], esi
call fcn.1001a319
mov ecx, dword [ebp - 0x980]
sub esi, ecx
neg esi
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xc88]
sbb esi, esi
inc esi
mov dword [eax], esi
call fcn.1001a2fd
dec dword [ebp - 0x28]
push 2
pop esi
jns 0x10031be1
lea ecx, [ebp - 0x11b8]
mov byte [ebp - 4], 0x17
call fcn.1001a2fd
inc dword [ebp - 0x38]
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jle 0x10031acf
mov edi, dword [sym.imp.USER32.dll_SetPropA]
push 2
pop ebx
or esi, 0xffffffff
lea ecx, [ebp - 0xffc]
mov dword [ebp - 4], esi
call fcn.1001a2fd
xor eax, eax
lea ecx, [ebp - 0x102c]
push 3
mov dword [ebp - 0x38], eax
pop eax
mov dword [ebp - 0x48], 0xd085c9e5
push eax
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031ccf
push 0xfffffffffffffffa
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb5c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031cbb
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10031cf8
push 3
pop ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x102c]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031cdb
push 2
xor eax, eax
pop ebx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031d18
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x870], 0xbefc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031d00
xor eax, eax
mov dword [ebp - 0x38], 0x64a6847d
mov dword [ebp - 0x38], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jg 0x10031ee2
or edi, 0xffffffff
jmp 0x10031d36
xor eax, eax
inc eax
mov dword [ebp - 0x28], 0x443250e6
lea ecx, [ebp - 0x1170]
mov dword [ebp - 0x48], 0x362daab7
push eax
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x1d
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
cmp dword [ebp - 0x20], ebx
jge 0x10031d85
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1170]
call fcn.1001a319
mov dword [eax], 0x7e2f9d44
xor eax, eax
inc dword [ebp - 0x20]
inc eax
cmp dword [ebp - 0x20], eax
jl 0x10031d61
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x28], ebx
push 2
pop esi
cmp dword [ebp - 0x28], eax
jl 0x10031e3d
push ebx
lea ecx, [ebp - 0x1014]
call fcn.1001a27b
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x110c]
mov dword [ebp - 0x48], 0x1637c1d6
mov dword [ebp - 0x48], 0x7d0b
mov dword [ebp - 0x48], edi
push esi
call fcn.1001a27b
mov byte [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x48], 0x80f885bd
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10031dfa
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1014]
call fcn.1001a319
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10031dd9
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], eax
jmp 0x10031e0d
push dword [ebp - 0x14]
call fcn.1001a319
and dword [eax], 0
inc dword [ebp - 0x14]
lea ecx, [ebp - 0x110c]
cmp dword [ebp - 0x14], esi
jl 0x10031dff
inc dword [ebp - 0x86c]
call fcn.1001a2fd
lea ecx, [ebp - 0x1014]
mov byte [ebp - 4], 0x1d
call fcn.1001a2fd
dec dword [ebp - 0x28]
jns 0x10031d94
xor eax, eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10031eb8
push esi
lea ecx, [ebp - 0xd90]
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x20], eax
jmp 0x10031e6d
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], 7
inc dword [ebp - 0x20]
lea ecx, [ebp - 0xd90]
cmp dword [ebp - 0x20], esi
jl 0x10031e5c
mov eax, dword [ebp - 0x28]
push ebx
mov esi, dword [ebp + eax*4 - 0xb5c]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xb5c], esi
call fcn.1001a319
mov ecx, dword [ebp - 0x86c]
sub esi, ecx
neg esi
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xd90]
sbb esi, esi
inc esi
mov dword [eax], esi
call fcn.1001a2fd
dec dword [ebp - 0x28]
push 2
pop esi
jns 0x10031e45
lea ecx, [ebp - 0x1170]
mov byte [ebp - 4], 0x1c
call fcn.1001a2fd
inc dword [ebp - 0x38]
xor eax, eax
inc eax
cmp dword [ebp - 0x38], eax
jle 0x10031d33
mov edi, dword [sym.imp.USER32.dll_SetPropA]
or esi, 0xffffffff
push 2
pop ebx
lea ecx, [ebp - 0x102c]
mov dword [ebp - 4], esi
call fcn.1001a2fd
mov dword [ebp - 0x14], 0x90ac204e
lea ecx, [ebp - 0xca0]
mov dword [ebp - 0x38], 0x884515fd
mov dword [ebp - 0x44], 0x52f34111
push ebx
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x20], eax
jmp 0x10031f36
push dword [ebp - 0x20]
lea ecx, [ebp - 0xca0]
call fcn.1001a319
mov dword [eax], 0x38886a6c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10031f1f
xor esi, esi
mov dword [ebp - 0x14], 0xffffffe3
inc esi
cmp dword [ebp - 0x14], 0xfffffffd
jl 0x10032005
or edi, 0xffffffff
mov dword [ebp - 0x34], 0x22e9
mov dword [ebp - 0x10], 0x64361a6b
mov dword [ebp - 0x50], 0x79655965
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x10031f7b
cmp dword [ebp - 0x10], eax
je 0x10031f7b
mov eax, esi
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
inc dword [ebp - 0x44]
cmp eax, ecx
jg 0x10031f9f
xor eax, eax
xor esi, esi
inc esi
lea ecx, [eax + 1]
jmp 0x10031fa3
xor eax, eax
mov ecx, eax
xor eax, eax
test ecx, ecx
push esi
sete al
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xae7
mov eax, edi
setg cl
xor ebx, ebx
sub eax, ecx
imul ecx, eax, 0xadfb
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0xca0]
setg bl
call fcn.1001a319
xor ecx, ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
cmp ebx, eax
setge cl
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffd
jge 0x10031f52
mov edi, dword [sym.imp.USER32.dll_SetPropA]
push 2
pop ebx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xca0]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1001a2fd
mov dword [ebp - 0x14], 0x90ac204e
lea ecx, [ebp - 0xe50]
mov dword [ebp - 0x38], 0x884515fd
mov dword [ebp - 0x44], 0x52f34111
push ebx
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0x22
mov dword [ebp - 0x20], eax
jmp 0x10032068
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe50]
call fcn.1001a319
mov dword [eax], 0x38886a6c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032051
mov dword [ebp - 0x14], 0xffffffe3
cmp dword [ebp - 0x14], 0xfffffffd
jl 0x10032134
or edi, 0xffffffff
mov dword [ebp - 0x34], 0x22e9
mov dword [ebp - 0x10], 0x64361a6b
mov dword [ebp - 0x50], 0x79655965
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x100320aa
cmp dword [ebp - 0x10], eax
je 0x100320aa
mov eax, esi
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
inc dword [ebp - 0x44]
cmp eax, ecx
jg 0x100320ce
xor eax, eax
xor esi, esi
inc esi
lea ecx, [eax + 1]
jmp 0x100320d2
xor eax, eax
mov ecx, eax
xor eax, eax
test ecx, ecx
push esi
sete al
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xae7
mov eax, edi
setg cl
xor ebx, ebx
sub eax, ecx
imul ecx, eax, 0xadfb
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0xe50]
setg bl
call fcn.1001a319
xor ecx, ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
cmp ebx, eax
setge cl
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffd
jge 0x10032081
mov edi, dword [sym.imp.USER32.dll_SetPropA]
push 2
pop ebx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xe50]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1001a2fd
xor eax, eax
mov dword [ebp - 0x20], 4
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], al
je 0x1003216a
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
xor eax, eax
mov dword [ebp - 0x20], 0xfffffff2
jmp 0x10032187
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032184
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jge 0x10032173
mov dword [ebp - 0x14], 0x90ac204e
lea ecx, [ebp - 0xcb8]
mov dword [ebp - 0x38], 0x884515fd
mov dword [ebp - 0x44], 0x52f34111
push ebx
call fcn.1001a27b
xor eax, eax
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x20], eax
jmp 0x100321d3
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcb8]
call fcn.1001a319
mov dword [eax], 0x38886a6c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100321bc
mov dword [ebp - 0x14], 0xffffffe3
cmp dword [ebp - 0x14], 0xfffffffd
jl 0x1003229f
or edi, 0xffffffff
mov dword [ebp - 0x34], 0x22e9
mov dword [ebp - 0x10], 0x64361a6b
mov dword [ebp - 0x50], 0x79655965
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x10032215
cmp dword [ebp - 0x10], eax
je 0x10032215
mov eax, esi
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
inc dword [ebp - 0x44]
cmp eax, ecx
jg 0x10032239
xor eax, eax
xor esi, esi
inc esi
lea ecx, [eax + 1]
jmp 0x1003223d
xor eax, eax
mov ecx, eax
xor eax, eax
test ecx, ecx
push esi
sete al
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xae7
mov eax, edi
setg cl
xor ebx, ebx
sub eax, ecx
imul ecx, eax, 0xadfb
mov eax, dword [ebp - 0x14]
cmp ecx, eax
lea ecx, [ebp - 0xcb8]
setg bl
call fcn.1001a319
xor ecx, ecx
mov dword [eax], ebx
mov eax, dword [ebp - 0x14]
cmp ebx, eax
setge cl
imul ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffd
jge 0x100321ec
mov edi, dword [sym.imp.USER32.dll_SetPropA]
push 2
pop ebx
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xcb8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x14], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.1001a2fd
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 0xd2038e85
mov dword [ebp - 0x4c], 0x191b
mov dword [ebp - 0x34], 0x4157736d
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x100322f9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x14c8], 0xc8b1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100322e1
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10032314
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032311
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x100322fe
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x960]
mov dword [ebp - 0x34], 0x735b263d
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14c0]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], eax
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x34], 0xfffffff6
push 4
call fcn.1001a27b
push ebx
lea ecx, [ebp - 0x480]
mov dword [ebp - 4], 0x24
call fcn.1001a27b
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0xad4]
mov dword [ebp - 0x44], 0xfffffffd
push esi
call fcn.1001a27b
mov byte [ebp - 4], 0x26
xor eax, eax
mov dword [ebp - 0x50], 0x5e04a276
mov dword [ebp - 0x4c], 0xa4f69a75
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x100323c4
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x960]
call fcn.1001a319
mov dword [eax], 0xe7ccc895
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100323a5
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100323ea
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x480]
call fcn.1001a319
mov dword [eax], 0x8d963785
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100323cc
xor eax, eax
mov dword [ebp - 0x1c], eax
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jge 0x10032414
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xad4]
call fcn.1001a319
mov dword [eax], 0x2737ae9f
xor eax, eax
inc dword [ebp - 0x1c]
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x100323f5
mov dword [ebp - 0x10], 0x648261f9
lea ecx, [ebp - 0x480]
push eax
mov dword [ebp - 0x34], 0xf3d3
call fcn.1001a319
xor esi, esi
xor ebx, ebx
inc esi
cmp dword [eax], ebx
je 0x10032443
push esi
lea ecx, [ebp - 0x480]
call fcn.1001a319
push esi
lea ecx, [ebp - 0x480]
call fcn.1001a319
push ebx
lea ecx, [ebp - 0x960]
call fcn.1001a319
push ebx
lea ecx, [ebp - 0xad4]
call fcn.1001a319
push esi
lea ecx, [ebp - 0x480]
call fcn.1001a319
push ebx
lea ecx, [ebp - 0x960]
call fcn.1001a319
push esi
lea ecx, [ebp - 0x480]
call fcn.1001a319
cmp dword [eax], ebx
je 0x1003249b
push esi
lea ecx, [ebp - 0x480]
call fcn.1001a319
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xad4]
dec dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x10]
push ebx
call fcn.1001a319
mov ecx, dword [ebp - 0x4c]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x960]
setl bl
xor esi, esi
push esi
call fcn.1001a319
lea ecx, [ebp - 0xad4]
mov dword [eax], ebx
call fcn.1001a2fd
lea ecx, [ebp - 0x480]
call fcn.1001a2fd
or eax, 0xffffffff
lea ecx, [ebp - 0x960]
mov dword [ebp - 4], eax
call fcn.1001a2fd
mov dword [ebp - 0x20], esi
mov eax, 0xa5d6c05b
mov dword [ebp - 0x48], 0xd085c9e5
mov dword [ebp - 0xebc], eax
mov dword [ebp - 0xeb8], eax
mov dword [ebp - 0xeb4], eax
mov dword [ebp - 0xeb0], eax
xor eax, eax
push 3
mov dword [ebp - 0x30], 0x8da8e97e
pop ebx
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], eax
jl 0x10032558
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x1003254d
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
xor eax, eax
dec dword [ebp - 0x30]
jns 0x10032538
mov edi, dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x30], eax
jmp 0x10032599
mov dword [ebp - 0x38], 0xf0aa6e6f
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x10032582
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xebc], esi
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x1003256d
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032596
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 7
jg 0x1003255d
push ebx
lea ecx, [ebp - 0x1140]
call fcn.1001a27b
xor ebx, ebx
mov dword [ebp - 4], 0x27
inc ebx
lea ecx, [ebp - 0x51c]
push ebx
call fcn.1001a27b
push 2
pop esi
push esi
lea ecx, [ebp - 0x570]
mov byte [ebp - 4], 0x28
call fcn.1001a27b
mov byte [ebp - 4], 0x29
xor eax, eax
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003260c
push 6
pop esi
push dword [ebp - 0x14]
lea ecx, [ebp - 0x51c]
call fcn.1001a319
mov dword [eax], esi
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x100325ec
push 2
xor eax, eax
pop esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10032632
push dword [ebp - 0x14]
lea ecx, [ebp - 0x570]
call fcn.1001a319
mov dword [eax], 0x1f2c29a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10032614
xor eax, eax
push eax
lea ecx, [ebp - 0x570]
call fcn.1001a319
xor ebx, ebx
lea ecx, [ebp - 0x570]
push ebx
mov dword [eax], ebx
call fcn.1001a319
cmp dword [eax], ebx
jl 0x100327e3
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 4
lea ecx, [ebp - 0x498]
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x2a
mov dword [ebp - 0x20], eax
xor ebx, ebx
cmp dword [ebp - 0x20], 4
lea ecx, [ebp - 0x498]
jge 0x1003268f
push dword [ebp - 0x20]
call fcn.1001a319
mov dword [eax], ebx
inc dword [ebp - 0x20]
jmp 0x10032674
push esi
call fcn.1001a319
mov dword [eax], ebx
jmp 0x10032798
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x50], 0x76fbfcc0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], eax
jg 0x1003272d
xor ebx, ebx
inc ebx
mov dword [ebp - 0x10], 0x91df82d8
lea ecx, [ebp - 0x51c]
push dword [ebp - 0x14]
call fcn.1001a319
push 2
mov esi, eax
lea ecx, [ebp - 0x498]
pop eax
push eax
call fcn.1001a319
lea ecx, [ebp - 0x51c]
push dword [eax]
call fcn.1001a319
mov ecx, dword [esi]
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10032722
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], eax
jmp 0x10032718
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032715
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x100326ff
dec dword [ebp - 0x10]
jns 0x100326f7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x100326b6
push 2
pop esi
push esi
lea ecx, [ebp - 0x498]
call fcn.1001a319
lea ecx, [ebp - 0x51c]
push dword [eax]
call fcn.1001a319
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0x51c]
mov eax, dword [ebp - 0x14]
xor ebx, ebx
push ebx
call fcn.1001a319
push ebx
lea ecx, [ebp - 0x51c]
call fcn.1001a319
xor eax, eax
lea ecx, [ebp - 0x570]
inc eax
push eax
call fcn.1001a319
xor edx, edx
push esi
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
lea ecx, [ebp - 0x498]
setg dl
mov dword [ebp - 0x50], edx
call fcn.1001a319
inc dword [eax]
push esi
lea ecx, [ebp - 0x498]
call fcn.1001a319
cmp dword [eax], ebx
jle 0x1003269c
lea ecx, [ebp - 0x498]
mov byte [ebp - 4], 0x29
call fcn.1001a2fd
push ebx
lea ecx, [ebp - 0x570]
call fcn.1001a319
push ebx
lea ecx, [ebp - 0x570]
dec dword [eax]
call fcn.1001a319
cmp dword [eax], ebx
jge 0x1003265c
mov edi, dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x20], 0x17
cmp dword [ebp - 0x20], 0xc
jne 0x1003283e
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], eax
jmp 0x1003282f
mov dword [ebp - 0x10], 0x5a74d4b4
cmp dword [ebp - 0x38], eax
jne 0x10032835
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x1003282c
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032827
push eax
push 0x1f7a
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x1003280e
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x14
jl 0x100327fa
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xc
je 0x100327f2
lea ecx, [ebp - 0x570]
call fcn.1001a2fd
lea ecx, [ebp - 0x51c]
mov byte [ebp - 4], 0x27
call fcn.1001a2fd
push 2
or esi, 0xffffffff
lea ecx, [ebp - 0xda8]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x10], 0x2e3ca369
pop ebx
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x4c], 0x725fc1c
mov dword [ebp - 0x38], 0xfffd
push ebx
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x2b
mov dword [ebp - 0x20], eax
jmp 0x100328a7
push dword [ebp - 0x20]
lea ecx, [ebp - 0xda8]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032894
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
je 0x100328c3
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x100328c5
lea ecx, [eax + 1]
jmp 0x100328c7
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1c]
imul eax, ecx
xor ecx, ecx
cmp eax, 0x725d3672
setl cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x1c]
sub eax, 0x72c40a99
jne 0x100328ed
cmp dword [ebp - 0x1c], eax
jne 0x100328ed
mov edx, eax
jmp 0x100328f2
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
sub ecx, dword [ebp - 0x1c]
jne 0x10032908
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1003290b
xor eax, eax
inc eax
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0xda8]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, 0xfffffff9
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x4c], eax
xor eax, eax
inc eax
push eax
call fcn.1001a319
mov edx, dword [ebp - 0x4c]
xor ebx, ebx
mov ecx, dword [ebp - 0x1c]
mov esi, eax
cmp edx, ecx
setle bl
sub ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp ebx, eax
mov eax, dword [ebp - 0x38]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [esi], ecx
cmp dword [ebp - 0x38], eax
jne 0x10032982
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10032982
mov edx, eax
jmp 0x10032987
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xda8]
mov byte [ebp - 4], 0x27
call fcn.1001a2fd
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ebx
cmp dword [ebp - 0x1c], ebx
jge 0x100329c7
push 0xfffffffffffffffa
pop ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb7c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100329b3
xor eax, eax
mov dword [ebp - 0x4c], 0xf89b
xor esi, esi
inc esi
or ecx, 0xffffffff
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x48], 0xa23e86f8
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x48], 0xea964a90
mov dword [ebp - 0x38], 0xffff
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10032a1c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xfc], 0x9bd697e7
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x100329fe
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10032a42
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2e4], 9
xor eax, eax
inc dword [ebp - 0x14]
inc eax
cmp dword [ebp - 0x14], eax
jl 0x10032a24
xor esi, esi
xor eax, eax
inc esi
cmp dword [ebp - 0x4c], eax
je 0x10032bda
mov eax, dword [ebp - 0x4c]
dec dword [ebp - 0x38]
mov eax, dword [ebp - 0xfc]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x40]
add ecx, eax
mov eax, dword [ebp - 0xfc]
cmp ecx, eax
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x38]
sete bl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xfc]
setl dl
sub edx, ebx
neg edx
sbb edx, edx
inc edx
cmp edx, 0xcc099843
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
sete cl
cmp ecx, 0x68fa
jle 0x10032bd7
mov dword [ebp - 0x30], 0x136ef6f
or eax, 0xffffffff
mov dword [ebp - 0x44], eax
xor edx, edx
mov dword [ebp - 0x10], 0xf5b04ce9
mov dword [ebp - 0x4c], 0xed4033e2
mov dword [ebp - 0x2c], 0x63965b81
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setne dl
xor eax, eax
neg edx
je 0x10032b0f
cmp dword [ebp - 0x38], eax
je 0x10032b0f
mov eax, esi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x2c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x319d
mov eax, dword [ebp - 0x38]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
add ecx, dword [ebp - 0x30]
jne 0x10032b45
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0xffffffe9
cmp dword [ebp - 0x2c], 0xffffffeb
jge 0x10032b7c
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032b73
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffeb
jl 0x10032b5d
push 2
pop ebx
xor eax, eax
push 3
mov dword [ebp - 0x1c], eax
pop edx
cmp dword [ebp - 0x1c], edx
jge 0x10032bb4
push edx
pop ebx
or esi, 0xffffffff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1140]
call fcn.1001a319
mov dword [eax], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10032b91
push 2
pop ebx
xor esi, esi
xor eax, eax
push 3
inc esi
pop edx
mov dword [ebp - 0x14], 0x149f
push 6
mov dword [ebp - 0x2c], 0xaad90151
pop edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x34], 0x1265a1b6
mov dword [ebp - 0x20], eax
jmp 0x10032cc2
push 2
pop ebx
push 3
pop eax
push eax
lea ecx, [ebp - 0xcd0]
call fcn.1001a27b
mov byte [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x38], 0x9bfbd42f
mov dword [ebp - 0x20], eax
push 3
pop eax
cmp dword [ebp - 0x20], eax
jge 0x10032c22
push eax
pop ebx
push dword [ebp - 0x20]
lea ecx, [ebp - 0xcd0]
call fcn.1001a319
mov dword [eax], 0x55f2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032c03
push 2
pop ebx
dec dword [ebp - 0x2e4]
lea ecx, [ebp - 0xcd0]
mov esi, dword [ebp - 0x2e4]
push ebx
call fcn.1001a319
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], 8
cmp dword [ebp - 0x38], 9
jne 0x10032c9a
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032c7d
push eax
push 0x1ac1
push eax
push 0x16f7
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
mov byte [ebp - 0x21], al
cmp byte [ebp - 0x21], 0
je 0x10032c91
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor eax, eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x10032c51
lea ecx, [ebp - 0xcd0]
mov byte [ebp - 4], 0x27
call fcn.1001a2fd
xor esi, esi
inc esi
jmp 0x10032b7f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa4], 0x48f69f7f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032cb1
cmp dword [ebp - 0x14], 0xbeaa32b1
sbb eax, eax
neg eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], eax
jl 0x10032eb8
mov edi, 0x2e0c2805
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x50], 0xfffffff9
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], esi
jg 0x10032d92
mov dword [ebp - 0xefc], edi
mov dword [ebp - 0xef8], edi
mov dword [ebp - 0xef4], edi
mov dword [ebp - 0xef0], edi
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x2c]
add eax, 0xfffffff7
imul ecx, eax
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0xa0], eax
jne 0x10032d48
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], esi
jg 0x10032eac
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10032ed8
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x94c], 0xbefc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10032ec0
mov dword [ebp - 0x28], 0xfffffff8
lea ecx, [ebp - 0x8a0]
mov dword [ebp - 0x14], 0xa6e483bb
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x44], edx
push 4
call fcn.1001a27b
xor eax, eax
mov byte [ebp - 4], 0x2d
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10032f27