Function at 0x10031ded
Capabilities:
Allocate thread local storage
Create process on windows
Get common file path
Get graphical window text
Get memory capacity
Get session user name
Query environment variable
Query or enumerate registry value
Set thread local storage value
Terminate process

Disassembly:
mov eax, 0x1006eecd
call fcn.1006e85c
mov eax, 0x1354
call fcn.1006bb20
push ebx
push esi
xor esi, esi
mov byte [ebp - 0x7d], dl
inc esi
mov dword [ebp - 0x84], ecx
xor eax, eax
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
push edi
jge 0x10031e37
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x714], 0x8bbca631
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10031e1e
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], eax
jl 0x10031e62
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10031e5d
push 0xf7b
push 0x1399
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10031e45
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], eax
jl 0x10031ea9
mov dword [ebp - 0x24], 0xeb9ae77a
mov dword [ebp - 0x24], eax
jmp 0x10031e87
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x714], 0x921ded68
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10031e76
mov eax, dword [ebp - 0x10]
push 0
mov ecx, dword [ebp + eax*4 - 0x714]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x714], ecx
dec dword [ebp - 0x10]
pop eax
jns 0x10031e6a
mov dword [ebp - 0x30], 0xbe39e3cf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
jmp 0x10031ec9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8a4], 0xb6fe6d39
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10031eb8
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
imul eax, dword [ebp - 0x30], 0xf166
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor edx, edx
mov dword [ebp - 0x898], ecx
mov ecx, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
add eax, edx
jne 0x10031f17
mov eax, dword [ebp - 0x898]
mov eax, dword [ebp - 0x898]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffed
jl 0x10031f4e
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffed
jge 0x10031f3a
xor eax, eax
mov dword [ebp - 0x30], 0xbe39e3cf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
jmp 0x10031f6e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8c4], 0xb6fe6d39
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10031f5d
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
imul eax, dword [ebp - 0x30], 0xf166
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor edx, edx
mov dword [ebp - 0x8b8], ecx
mov ecx, dword [ebp - 0x8c0]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
add eax, edx
jne 0x10031fbc
mov eax, dword [ebp - 0x8b8]
mov eax, dword [ebp - 0x8b8]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x8c0]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffed
jl 0x10031ff3
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffed
jge 0x10031fdf
xor eax, eax
mov dword [ebp - 0x30], 0xbe39e3cf
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], eax
jmp 0x10032013
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8dc], 0xb6fe6d39
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032002
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
imul eax, dword [ebp - 0x30], 0xf166
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor edx, edx
mov dword [ebp - 0x8d0], ecx
mov ecx, dword [ebp - 0x8d8]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
add eax, edx
jne 0x10032061
mov eax, dword [ebp - 0x8d0]
mov eax, dword [ebp - 0x8d0]
xor ebx, ebx
mov eax, dword [ebp - 0x30]
inc ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x8d8]
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffed
jl 0x1003209b
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffed
jge 0x10032087
xor eax, eax
mov dword [ebp - 0x4c], 0x394643cd
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100320c5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1284], 0x3b4e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100320ad
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100320e5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2b0], 0x8628
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100320cd
xor eax, eax
push 2
pop esi
mov dword [ebp - 0x4c], eax
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x4c], esi
jg 0x10032181
mov dword [ebp - 0x38], 0xda8e
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x60], 0x815f8425
mov dword [ebp - 0x20], eax
jmp 0x1003211e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd50], 0xebb0cb8c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003210d
mov dword [ebp - 0xd44], 0xe17f7596
xor edx, edx
mov eax, dword [ebp - 0xd4c]
mov eax, dword [ebp - 0xd4c]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, dword [ebp - 0x2b0]
jg 0x1003215e
mov ecx, ebx
cmp dword [ebp - 0x2b0], eax
jne 0x10032160
mov ecx, eax
mov eax, dword [ebp - 0x58]
imul eax, ecx
push 0
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x60], eax
inc dword [ebp - 0x4c]
pop eax
push 0xffffffffffffffff
pop edx
cmp dword [ebp - 0x4c], esi
jle 0x100320f7
push 3
pop ecx
mov dword [ebp - 0x28], 0x5020f89b
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100321aa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1300], 0x70ad
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032191
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100321ca
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdd4], 0xca9f8d1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100321b2
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032242
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100321f6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x104], 0xd3b3152c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100321de
xor eax, eax
mov dword [ebp - 0x104], ecx
cmp dword [ebp - 0x104], eax
jl 0x10032224
mov dword [ebp - 0x38], 0xfffffffc
cmp dword [ebp - 0x38], eax
jne 0x10032224
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x104]
push 0
pop eax
jns 0x10032204
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x1003223f
mov dword [ebp - 0x40], esi
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x1003222c
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x100321cf
push 9
mov dword [ebp - 0x44], 0x4ec2e0cf
mov dword [ebp - 0x44], eax
pop ecx
jmp 0x100322a1
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], 0x11
cmp dword [ebp - 0x28], 0x1d
jl 0x1003229e
mov dword [ebp - 0x20], 0x23afc371
mov dword [ebp - 0x20], eax
jmp 0x1003228c
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10032289
push eax
push 0x13e6
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xc
jle 0x10032272
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x1d
jge 0x10032266
push 9
pop ecx
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffff5
je 0x10032256
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x100322d4
push 0x2661
push eax
push eax
push eax
push eax
push 0xff1
push 0x123c
call esi
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
xor eax, eax
mov dword [ebp - 0x30], 0xbe39e3cf
mov dword [ebp - 0x10], eax
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10032301
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc18], 0x29ed
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100322e9
xor eax, eax
push 0x13
mov dword [ebp - 0x10], 0xffffffef
pop edx
jmp 0x10032382
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x44], 0x18
jmp 0x10032379
mov dword [ebp - 0x28], 0x80849f84
mov dword [ebp - 0x28], eax
jmp 0x10032371
mov dword [ebp - 0x24], 0xc3938dd4
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10032355
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1128], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1003233c
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10032376
mov dword [ebp - 0x24], eax
jmp 0x10032369
mov dword [ebp - 0x38], 0x7213ec75
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1003235f
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jg 0x10032325
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xe
jne 0x10032319
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jg 0x1003230d
push 2
mov dword [ebp - 0x10], eax
pop edx
cmp dword [ebp - 0x10], edx
jg 0x100323cd
mov dword [ebp - 0x24], 0x515466bc
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xc18], 0
jne 0x100323cb
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100323be
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc18], 0x7e3b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100323ad
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x10032392
xor eax, eax
mov dword [ebp - 0x20], 0xf29acd40
mov dword [ebp - 0x50], 0x9b85
mov dword [ebp - 0x2c], 0x5277
mov dword [ebp - 0x40], 0x771b7056
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1003240a
or ecx, 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3e8], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100323f5
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1003242a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x36c], 0x42ff18c9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032412
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003243c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x884], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x1003242f
mov eax, dword [ebp - 0x3e0]
xor ecx, ecx
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3e8]
mov eax, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x3dc]
mov eax, dword [ebp - 0x3e4]
cmp eax, 0x9b56
mov eax, dword [ebp - 0x3dc]
setge cl
imul eax, ecx
xor ecx, ecx
cmp eax, 0x7222
mov eax, dword [ebp - 0x50]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3e4]
sete dl
xor ecx, ecx
cmp eax, 0x252c
setne cl
xor eax, eax
cmp ecx, edx
setge al
xor ecx, ecx
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3e4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x880]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x884]
cmp eax, ebx
mov eax, dword [ebp - 0x2c]
setl cl
add eax, ecx
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10032518
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x644], 0x8bbca631
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100324ff
xor eax, eax
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x1003253d
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10032538
push 0xf7b
push 0x1399
push eax
call edi
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10032520
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x10032584
mov dword [ebp - 0x24], 0xeb9ae77a
mov dword [ebp - 0x24], eax
jmp 0x10032562
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x644], 0x921ded68
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10032551
mov eax, dword [ebp - 0x10]
push 0
mov ecx, dword [ebp + eax*4 - 0x644]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x644], ecx
dec dword [ebp - 0x10]
pop eax
jns 0x10032545
push 3
mov dword [ebp - 0x28], eax
pop edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], 0x8aaf0a9b
mov dword [ebp - 0x20], eax
jmp 0x100325aa
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xfc8], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10032599
mov eax, dword [ebp - 0x28]
mov ecx, ebx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x100325c3
mov ecx, eax
mov dword [ebp - 0xfc4], ecx
mov eax, dword [ebp - 0x28]
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
imul eax, eax, 0xfffffff9
cmp eax, 0xc4c8
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
neg edx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x38], ecx
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x10032615
push 0x14d4
push eax
push 0xb5f
push 0x886
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10032637
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8f4], 0xb6fe6d39
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1003261e
xor eax, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x10032659
or ecx, 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x123c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10032645
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032679
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb90], 0x94a1888
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032661
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003268f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12cc], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1003267e
dec dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setge dl
imul eax, dword [ebp - 0x30], 0xf166
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x30]
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor edx, edx
mov dword [ebp - 0x8e8], ecx
mov ecx, dword [ebp - 0x8f0]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setle dl
add eax, edx
jne 0x100326df
mov eax, dword [ebp - 0x8e8]
mov eax, dword [ebp - 0x8e8]
xor ebx, ebx
mov eax, dword [ebp - 0x30]
inc ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x14], 0x7ddc85f7
mov dword [ebp - 0x2c], 0x1cd43096
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x14], 0xffffffe8
cmp dword [ebp - 0x14], 0xfffffffb
jge 0x100327ab
mov dword [ebp - 0x1c], 0x77c8
mov dword [ebp - 0x20], eax
jmp 0x1003273b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6d4], 0x3b15a8d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003272a
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0x40c1
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp eax, ecx
setne dl
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
test ecx, ecx
jne 0x1003277b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
neg eax
push 0
sbb eax, eax
add eax, 0xfffffffd
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x6d4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffffb
pop eax
jl 0x1003271e
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffed
jl 0x100329d8
mov dword [ebp - 0x14], 0xae77ab39
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x100327e1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xb9c], 0xaffa898c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100327c8
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10032800
push eax
push 0x4b3
push 0x16c
push 0x1e9a
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
sub eax, 0xc10977a1
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x14]
test eax, eax
je 0x10032955
mov dword [ebp - 0x24], ebx
xor eax, eax
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x14], eax
jmp 0x100328db
mov dword [ebp - 0x50], 0xffff
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], 0xfffffff7
cmp dword [ebp - 0x24], 6
jl 0x100328d8
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x50], eax
jne 0x10032878
cmp dword [ebp - 0x14], eax
je 0x1003287a
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
push 0
setge cl
xor edx, edx
imul ecx, ecx, 0xaf90
cmp ecx, eax
mov eax, dword [ebp - 0x50]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, 0xffff0001
setle cl
sub eax, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
sub eax, 0xbbe5
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0xb9c]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 6
pop eax
jge 0x1003286b
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff0
jne 0x10032851
xor eax, eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10032910
or ecx, 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x110], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100328fc
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10032925
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10032962
mov edx, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x110], edx
mov eax, dword [ebp - 0x24]
cmp eax, 0xffff0948
setle cl
add ecx, edx
cmp ecx, 0xcf30
jle 0x10032962
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x110], eax
jmp 0x100329c2
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], ebx
dec dword [ebp - 0x2c]
jmp 0x100328e7
mov dword [ebp - 0x20], 0xfffb
or eax, 0xffffffff
mov dword [ebp - 0x2c], 0x3191b495
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov edx, 0xe5b14f4e
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x110], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x110]
mov eax, dword [ebp - 0x110]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffed
push 0
pop eax
jge 0x100327b8
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x10], 0x9634
mov dword [ebp - 0x2c], 0xe035d6df
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], 0x68e5b495
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10032a16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x130], 0x8bbca631
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x100329fe
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032a33
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], 0xa439beb0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032a1e
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032a53
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x288], 0x9e2a8d3a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032a3b
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10032a73
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x98c], 0xfe8f1e0e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10032a5b
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x10032a93
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xfe0], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10032a7b
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_IsIconic]
mov ecx, 0x33582f80
mov dword [ebp - 0x68], ebx
cmp dword [ebp - 0x68], eax
jl 0x10032b81
jmp 0x10032aae
xor eax, eax
mov dword [ebp - 0x6a4], ecx
mov dword [ebp - 0x6a0], ecx
mov dword [ebp - 0x69c], ecx
mov dword [ebp - 0x698], ecx
mov dword [ebp - 0x38], 0x6497
mov dword [ebp - 0x20], eax
jmp 0x10032ae3
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2ec], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032ad2
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0x130], 0
jne 0x10032b1e
mov eax, dword [ebp - 0x6a4]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x69c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
dec dword [ebp - 0x2ec]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x288]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x130]
mov eax, dword [ebp - 0x6a4]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6a4], eax
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x10032b78
call esi
push eax
call edi
mov ecx, 0x33582f80
dec dword [ebp - 0x68]
jns 0x10032aac
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x288], ebx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0xfffa
setne al
xor edx, edx
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0x68], edx
test edx, edx
je 0x10032bda
cmp dword [ebp - 0x10], eax
je 0x10032bda
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp edx, eax
setge cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x8fb8aaa8
neg eax
sbb eax, eax
inc eax
cmp ebx, eax
sbb eax, eax
xor ecx, ecx
neg eax
sub eax, dword [ebp - 0x1c]
cmp eax, 0xff44
setl cl
xor eax, eax
cmp ecx, 0x8fdc
setl al
mov dword [ebp - 0x988], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xfd8]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x4c], 0x394643cd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032c6b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1260], 0x3b4e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032c52
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032c8b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x294], 0x8628
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032c73
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x10032d20
mov dword [ebp - 0x38], 0xda8e
or ecx, 0xffffffff
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x60], 0x815f8425
mov dword [ebp - 0x20], eax
jmp 0x10032cc2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd6c], 0xebb0cb8c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032cb1
mov dword [ebp - 0xd60], 0xe17f7596
xor edx, edx
mov eax, dword [ebp - 0xd68]
mov eax, dword [ebp - 0xd68]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, dword [ebp - 0x294]
jg 0x10032d02
mov ecx, ebx
cmp dword [ebp - 0x294], eax
jne 0x10032d04
mov ecx, eax
mov eax, dword [ebp - 0x58]
imul eax, ecx
push 0
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x60], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 2
pop eax
jle 0x10032c98
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x55e00fe1
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x48], 0xca9869ec
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032d64
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcb0], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032d4c
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10032d86
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf14], 0xa277
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032d6d
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x10032da1
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor eax, eax
inc dword [ebp - 0xf14]
mov dword [ebp - 0x4c], 0x394643cd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032dd0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x12b4], 0x3b4e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032db7
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032df0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x30c], 0x8628
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032dd8
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x10032e85
mov dword [ebp - 0x38], 0xda8e
or ecx, 0xffffffff
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x60], 0x815f8425
mov dword [ebp - 0x20], eax
jmp 0x10032e27
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd84], 0xebb0cb8c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032e16
mov dword [ebp - 0xd78], 0xe17f7596
xor edx, edx
mov eax, dword [ebp - 0xd80]
mov eax, dword [ebp - 0xd80]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, dword [ebp - 0x30c]
jg 0x10032e67
mov ecx, ebx
cmp dword [ebp - 0x30c], eax
jne 0x10032e69
mov ecx, eax
mov eax, dword [ebp - 0x58]
imul eax, ecx
push 0
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x60], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 2
pop eax
jle 0x10032dfd
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x24], 0xfffb
mov dword [ebp - 0x2c], 0x748bbe26
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032eb8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x4e8], 0x2fd41e55
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032e9f
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10032eda
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x4e8], 0x20398070
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10032ec1
xor eax, eax
cmp dword [ebp - 0x4e8], eax
jne 0x10032f14
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x4e0]
mov eax, dword [ebp - 0x4e8]
imul ecx, eax
mov eax, dword [ebp - 0x24]
add eax, ecx
jne 0x10032f14
mov ecx, eax
cmp dword [ebp - 0x10], eax
je 0x10032f16
mov ecx, ebx
neg ecx
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setle al
add eax, dword [ebp - 0x24]
je 0x10032f2a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
xor edx, edx
xor eax, eax
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 8
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp eax, edx
push 3
setle cl
xor eax, eax
mov dword [ebp - 0x10], ecx
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 0x9634
mov dword [ebp - 0x2c], 0xe035d6df
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], 0x68e5b495
push 2
mov dword [ebp - 0x14], eax
pop edx
cmp dword [ebp - 0x14], edx
jge 0x10032f90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x158], 0x8bbca631
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10032f78
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032fad
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0xa439beb0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032f98
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10032fcd
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x354], 0x9e2a8d3a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10032fb5
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edx
jge 0x10032fed
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x894], 0xfe8f1e0e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10032fd5
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1003300d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xff8], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10032ff5
xor eax, eax
mov dword [ebp - 0x6c], ebx
cmp dword [ebp - 0x6c], eax
jl 0x100330f5
mov ecx, 0x33582f80
jmp 0x10033022
xor eax, eax
mov dword [ebp - 0x6b8], ecx
mov dword [ebp - 0x6b4], ecx
mov dword [ebp - 0x6b0], ecx
mov dword [ebp - 0x6ac], ecx
mov dword [ebp - 0x38], 0x6497
mov dword [ebp - 0x20], eax
jmp 0x10033057
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x29c], 0xffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033046
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x158], 0
jne 0x10033092
mov eax, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x6b0]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
dec dword [ebp - 0x29c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x354]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x158]
mov eax, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x6b8], eax
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x100330ec
call esi
push eax
call edi
mov ecx, 0x33582f80
dec dword [ebp - 0x6c]
jns 0x10033020
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x354], ebx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x154]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0xfffa
setne al
xor edx, edx
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0x6c], edx
test edx, edx
je 0x1003314e
cmp dword [ebp - 0x10], eax
je 0x1003314e
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor ecx, ecx
mov edx, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
push 5
cmp edx, eax
setge cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x8fb8aaa8
neg eax
sbb eax, eax
inc eax
cmp ebx, eax
sbb eax, eax
xor ecx, ecx
neg eax
sub eax, dword [ebp - 0x1c]
cmp eax, 0xff44
setl cl
xor eax, eax
cmp ecx, 0x8fdc
setl al
mov dword [ebp - 0x890], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xff0]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 0x143e
mov dword [ebp - 0x28], 0xebf889e0
mov dword [ebp - 0x30], ebx
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], 0xd66de6b9
mov dword [ebp - 0x40], 0xe834ab46
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x2c], 0x76e8d2ca
mov dword [ebp - 0x3c], 0x47f2
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003320c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2a4], 0x8604
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100331f4
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x1003327d
mov esi, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
neg esi
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sbb esi, esi
mov eax, dword [ebp - 0x10]
xor ebx, ebx
neg esi
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setne bl
add ebx, 0xffff
neg ebx
sbb ebx, ebx
xor edx, edx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp eax, esi
setg cl
xor eax, eax
cmp ecx, edx
setg al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, 7
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
xor ebx, ebx
inc ebx
cmp ecx, dword [ebp - 0x10]
jl 0x1003327d
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x1003327f
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
push 3
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x10]
pop esi
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
xor eax, eax
mov dword [ebp - 0x4c], 0xe32883e7
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffff3
jl 0x1003356e
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x58], 0x8b88ead4
mov dword [ebp - 0x20], eax
jmp 0x100332d5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x458], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100332c4
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, 0x6bc59458
mov eax, dword [ebp - 0x4c]
setl cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
neg edx
neg edx
sub eax, edx
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x24]
jne 0x10033333
cmp dword [ebp - 0x20], eax
je 0x10033335
mov eax, ebx
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4c], eax
jne 0x100333ca
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0xaf4], eax
mov dword [ebp - 0xaf0], eax
mov dword [ebp - 0xaec], eax
mov dword [ebp - 0xae8], eax
xor eax, eax
mov dword [ebp - 0x1c], 0x93a78091
mov dword [ebp - 0xaf4], eax
cmp dword [ebp - 0x1c], eax
je 0x1003337d
cmp dword [ebp - 0x24], eax
je 0x1003337d
mov eax, ebx
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x458]
push 0xfffffffffffffffa
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
pop eax
setg cl
xor edx, edx
cmp ecx, 0x7f595c98
setl dl
sub eax, edx
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
jmp 0x100334be
mov dword [ebp - 0x48], 0xfffffff9
xor eax, eax
mov dword [ebp - 0x38], 0xf9805026
cmp dword [ebp - 0x3c], ebx
jne 0x100333e9
mov edx, ebx
cmp dword [ebp - 0x454], eax
jne 0x100333eb
mov edx, eax
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x454], ecx
mov eax, dword [ebp - 0x24]
imul eax, ecx
xor ecx, ecx
cmp eax, 0x97e7
setg cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x30], esi
cmp dword [ebp - 0x30], eax
jl 0x100334c0
mov dword [ebp - 0x1c], 0x36b0
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x454]
neg ecx
sbb ecx, ecx
neg ecx
sub eax, ecx
xor ecx, ecx
cmp eax, 0x5540566f
mov eax, dword [ebp - 0x28]
setne cl
add eax, ecx
jne 0x10033448
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2a4]
xor ecx, ecx
cmp eax, 0xbd8e
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
add ecx, 0xc112
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
setl dl
sub ecx, edx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setge dl
mov dword [ebp + eax*4 - 0x458], edx
cmp edx, 0xfffd
je 0x1003349a
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x458], 0
je 0x1003349a
mov eax, ebx
jmp 0x1003349c
xor eax, eax
mov dword [ebp - 0x58], eax
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x100334b5
push 0xedc
push eax
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
dec dword [ebp - 0x30]
jns 0x1003341c
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jg 0x1003355e
mov dword [ebp - 0x50], eax
push 9
pop ecx
mov dword [ebp - 0xa74], ecx
mov dword [ebp - 0xa70], ecx
mov dword [ebp - 0xa6c], ecx
mov dword [ebp - 0xa68], ecx
cmp dword [ebp - 0x458], eax
je 0x10033509
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x2a4], ecx
test ecx, ecx
je 0x10033507
mov edx, ebx
jmp 0x1003350b
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44c]
cmp eax, 0x7910a939
setge cl
imul ecx, edx
cmp dword [ebp - 0x50], ebx
sbb eax, eax
inc eax
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xa68], eax
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x1003354f
push 0x247f
push eax
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
xor eax, eax
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
push 0
pop eax
jle 0x100334cc
dec dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0xfffffff3
push 0
pop eax
jge 0x100332b1
mov dword [ebp - 0x30], ebx
or ecx, 0xffffffff
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x3c], 0xededc87a
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x58], 0x344157f0
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x100335b6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x2c8], 0xa6f
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1003359e
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100335d2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x31c], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100335be
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100335f2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1e0], 0xfff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100335da
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1003369c
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x30]
cmp dword [ebp - 0x10], eax
jl 0x10033612
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x1003361e
jmp 0x10033614
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x2c8], eax
je 0x10033620
mov ecx, ebx
mov eax, dword [ebp - 0x10]
xor edx, edx
imul eax, ecx
imul eax, eax, 0xa40f
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c8]
imul ecx, eax
mov eax, dword [ebp - 0x2c8]
cmp ecx, eax
mov eax, dword [ebp - 0x2c8]
setl dl
sub edx, 5
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov dword [ebp - 0x31c], edx
mov eax, dword [ebp - 0x10]
cmp edx, eax
mov eax, dword [ebp - 0x2c8]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
imul eax, edx
cmp dword [ebp - 0x30], eax
jl 0x1003368a
xor eax, eax
cmp dword [ebp - 0x2c8], eax
je 0x1003368c
mov eax, ebx
mov dword [ebp - 0x30], eax
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1003369a
mov eax, ebx
jmp 0x1003369c
xor eax, eax
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x3c]
je 0x100337c7
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
test eax, eax
jne 0x100336c3
mov eax, dword [ebp - 0x1e0]
dec dword [ebp - 0x1e0]
test eax, eax
je 0x100336c5
mov eax, ebx
cmp dword [ebp - 0x10], eax
jne 0x100337c7
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x2c], 0x57b790eb
mov dword [ebp - 0x2c], 0x4d024bfc
mov dword [ebp - 0x58], 0x759719bd
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10033707
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100336f3
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1003371d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1010], 8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1003370c
mov eax, dword [ebp - 0x2c8]
xor edx, edx
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1010]
cmp eax, ecx
setle dl
xor eax, eax
test edx, edx
sets al
xor edx, edx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setge dl
mov dword [ebp - 0x2c], edx
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setl dl
cmp edx, dword [ebp - 0x2c]
jle 0x10033791
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x30], eax
je 0x10033793
mov ecx, ebx
mov eax, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0xa0]
add eax, ecx
imul edx, eax
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xfffffff9
jb 0x100337bf
cmp dword [ebp - 0xa0], eax
je 0x100337bf
mov eax, ebx
mov dword [ebp - 0x58], eax
jmp 0x10033883
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x100337db
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x67c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100337ce
mov ecx, dword [ebp - 0x67c]
xor edx, edx
mov eax, dword [ebp - 0x58]
cmp ecx, eax
setge dl
xor eax, eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x10], eax
jmp 0x10033879
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1003381c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x944], 0x149c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10033803
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xa
jge 0x10033876
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x31c], eax
je 0x10033846
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xfffffff7
je 0x10033844
mov ecx, ebx
jmp 0x10033848
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x940]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x940]
push 0
setne dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x2c]
cmp eax, edx
pop eax
setl cl
mov dword [ebp - 0x20], ecx
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xa
jl 0x10033825
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe6
jle 0x100337fa
mov dword [ebp - 0x48], ebx
xor eax, eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0x55e00fe1
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x48], 0xca9869ec
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100338c9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb84], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100338b1
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100338eb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe94], 0xa277
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100338d2
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x1003390c
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
xor eax, eax
inc dword [ebp - 0xe94]
mov dword [ebp - 0x14], 0x90f9
mov dword [ebp - 0x10], 0xe022a5bc
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10033942
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x16c], 0xbea12209
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033929
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10033958
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1028], 0xef3c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10033947
mov eax, dword [ebp - 0x168]
xor ecx, ecx
mov eax, dword [ebp - 0x168]
xor esi, esi
mov eax, dword [ebp - 0x168]
inc esi
mov eax, dword [ebp - 0x168]
cmp eax, esi
push 9
setg cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x168]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov ecx, dword [ebp - 0x168]
setg dl
pop eax
cmp eax, edx
sbb eax, eax
xor edx, edx
inc eax
sub ecx, eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setl dl
xor eax, eax
test edx, edx
mov dword [ebp - 0x16c], edx
sete al
sub eax, dword [ebp - 0x10]
add eax, 2
cmp eax, 0xfffffffc
je 0x10033a05
mov dword [ebp - 0x10], 0xffffffe7
cmp dword [ebp - 0x10], 0x32
jne 0x10033aaa
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], 0
je 0x100339f7
push 0x64f
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x32
je 0x100339d7
jmp 0x10033aaa
or eax, 0xffffffff
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10033a23
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x16c], 0xe7b1b0ca
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10033a12
push 7
pop eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10033aaa
mov dword [ebp - 0x38], 0xfffffff9
mov eax, dword [ebp - 0x1028]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x14], 0xfffffffc
jmp 0x10033a9b
mov dword [ebp - 0x40], esi
xor edx, edx
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setle dl
cmp edx, 0xd2570d97
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setne cl
cmp ecx, dword [ebp - 0x38]
jg 0x10033a79
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
cmp eax, esi
setl cl
mov dword [ebp - 0x168], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jle 0x10033a4d
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 7
jge 0x10033a34
xor eax, eax
mov byte [ebp - 0x15], al
cmp byte [ebp - 0x15], al
je 0x10033abd
push eax
call dword [sym.imp.USER32.dll_DestroyIcon]
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x10], 0x9634
mov dword [ebp - 0x2c], 0xe035d6df
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x38], 0x68e5b495
push 2
mov dword [ebp - 0x14], eax
pop edx
cmp dword [ebp - 0x14], edx
jge 0x10033afe
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x148], 0x8bbca631
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10033ae6
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10033b1b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x74], 0xa439beb0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10033b06
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10033b3b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x374], 0x9e2a8d3a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10033b23
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edx
jge 0x10033b5b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9bc], 0xfe8f1e0e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10033b43
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10033b7b