Function at 0x100309f9
Capabilities:
Accept command line arguments
Allocate thread local storage
Check for time delay via gettickcount
Delete registry key
Enumerate gui resources
Get common file path
Get geographical location
Get memory capacity
Get session user name
Query environment variable
Terminate process

Disassembly:
mov eax, 0x1008b586
call fcn.1008af40
sub esp, 0xeec
push ebx
push esi
push edi
xor edi, edi
mov dword [ebp - 0x24], 0x76f5020f
inc edi
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x38], edi
xor eax, eax
mov dword [ebp - 0x10], 0x99843334
mov dword [ebp - 0x24], eax
push 5
mov byte [ebp - 0x75], dl
pop ecx
cmp dword [ebp - 0x24], edi
jge 0x10030a47
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa4], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10030a33
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10030a67
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e0], 0x9642e40c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10030a4f
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x10030bae
mov dword [ebp - 0x1c], 0x3e86f8c7
mov dword [ebp - 0x2c], 0x347d1701
mov dword [ebp - 0x10], eax
jmp 0x10030a9d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcd4], 0x540ee1d4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10030a8c
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xa4]
test eax, eax
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xa4]
sub eax, 0x502ee26a
cmp eax, edx
setge cl
xor eax, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
je 0x10030b04
cmp dword [ebp - 0xa4], eax
jne 0x10030ae6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa4]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xa4]
imul eax, dword [ebp - 0x1c], 0x4a5e
cmp eax, dword [ebp - 0xa4]
jl 0x10030b02
mov eax, dword [ebp - 0x24]
xor eax, eax
mov dword [ebp - 0x1e0], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10030ba2
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], 6
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x2c]
cmp eax, ecx
jl 0x10030b31
mov esi, edi
jmp 0x10030b35
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x1e0]
mov dword [ebp - 0x1e0], ecx
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
sete dl
xor ecx, ecx
cmp edx, esi
setge cl
cmp edi, eax
sbb eax, eax
neg eax
cmp ecx, eax
je 0x10030b78
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10030b96
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x10030b96
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10030b91
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xa4], 0
jne 0x10030b96
inc dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x10030b7f
dec dword [ebp - 0x1c]
push 0
pop eax
jns 0x10030b16
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x10030a79
or esi, 0xffffffff
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x13c], esi
mov dword [ebp - 0x138], esi
mov dword [ebp - 0x48], 0x6e85fcb
mov dword [ebp - 0x40], 0x723
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10030bf3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x438], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10030bdf
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030c44
push eax
push 0x14d8
push 0xa8a
push 0x2665
push 0x1806
push 0x20a2
push 0x1c7e
push 0xa94
push 0xf24
push 0x5b8
push 0x1eda
push 0x1385
push 0x1b4a
push 0x250b
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [ebp - 0x140]
xor eax, eax
cmp dword [ebp - 0x140], eax
jne 0x10030c5a
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x13c]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x13c]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0x438], edx
mov eax, dword [ebp - 0x48]
cmp edx, eax
setne cl
cmp dword [ebp - 0x13c], ecx
je 0x10030cbb
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x140], eax
je 0x10030cbd
mov edx, edi
mov eax, dword [ebp - 0x140]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x140]
cmp eax, edx
mov eax, dword [ebp - 0x140]
push 7
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
sub edx, eax
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x20], esi
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x40], 0x3d12
pop eax
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
xor eax, eax
push 3
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10030d41
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030d3e
push eax
push 0x1bc7
push 0x1ceb
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x10030d19
mov dword [ebp - 0x24], 0x3d06ce12
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10030d6d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xad4], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10030d55
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x10030d8d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xad4], 0x16df251d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10030d75
xor eax, eax
push 9
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x10030dde
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x10], 0xffffffe9
cmp dword [ebp - 0x10], 0xfffffffc
jle 0x10030dc7
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030dbb
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffc
jg 0x10030da9
push 9
pop ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10030ddb
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 9
xor eax, eax
pop ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jg 0x10030d95
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10030e05
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x744], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10030dec
xor eax, eax
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x10], eax
jmp 0x10030e23
cmp byte [ebp - 0x2d], 0
je 0x10030e20
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff8
mov byte [ebp - 0x2d], al
jg 0x10030e11
cmp byte [ebp - 0x2d], 0
je 0x10030e3e
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x24], eax
push 8
pop edx
cmp dword [ebp - 0x24], ecx
jge 0x10030e60
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7c0], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10030e4c
xor eax, eax
mov dword [ebp - 0x1c], 0x91a049fe
mov dword [ebp - 0x1c], 0xfffffff2
jmp 0x10030ec2
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffc
jle 0x10030ebf
mov dword [ebp - 0x10], eax
jmp 0x10030e95
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb1c], 0x34ee
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10030e84
mov ecx, dword [ebp - 0xb1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
push 0
setl dl
mov dword [ebp - 0x48], edx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffc
pop eax
push 3
pop ecx
jg 0x10030e7f
push 8
pop edx
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffed
jge 0x10030e70
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
jl 0x10031028
jmp 0x10030ed9
push 3
pop ecx
mov dword [ebp - 0x2c], 9
push 4
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10030f0b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x854], 0x5062d7bc
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x10030ef2
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], edx
jge 0x10030f2b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x934], 0x8472
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edx
jl 0x10030f13
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10030f41
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xb34], 0x67d7132c
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jl 0x10030f30
mov eax, dword [ebp - 0x20]
push 3
mov eax, dword [ebp + eax*4 - 0x744]
dec dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x854], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x744], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x743e62c9
pop eax
setne cl
sub ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x20]
inc ecx
neg edx
sbb edx, edx
inc edx
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x10], ecx
je 0x10030fb3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x744]
mov ecx, dword [ebp - 0x930]
mov eax, dword [ebp - 0x20]
neg ecx
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0xb34], ecx
mov ecx, dword [ebp - 0x738]
sub ecx, dword [ebp - 0x930]
mov eax, dword [ebp - 0x7b8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x928]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7c0], eax
dec dword [ebp - 0x20]
pop eax
jns 0x10030ed6
mov dword [ebp - 0x24], 0x76f5020f
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x10], 0x99843334
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10031058
push 5
pop ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb8], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10031044
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x10031078
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1f4], 0x9642e40c
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x10031060
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x100311bf
mov dword [ebp - 0x1c], 0x3e86f8c7
mov dword [ebp - 0x2c], 0x347d1701
mov dword [ebp - 0x10], eax
jmp 0x100310a8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd7c], 0x540ee1d4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10031097
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xb8]
test eax, eax
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xb8]
sub eax, 0x502ee26a
cmp eax, edx
setge cl
xor eax, eax
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
je 0x1003110f
cmp dword [ebp - 0xb8], eax
jne 0x100310f1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb8]
imul eax, dword [ebp - 0x1c], 0x4a5e
cmp eax, dword [ebp - 0xb8]
jl 0x1003110d
mov eax, dword [ebp - 0x24]
xor eax, eax
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x100311ad
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x48], 6
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x2c]
cmp eax, ecx
jl 0x1003113c
mov esi, edi
jmp 0x10031140
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x1f4]
mov dword [ebp - 0x1f4], ecx
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
sete dl
xor ecx, ecx
cmp edx, esi
setge cl
cmp edi, eax
sbb eax, eax
neg eax
cmp ecx, eax
je 0x10031183
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100311a1
call ebx
push eax
call dword [sym.imp.USER32.dll_ShowCaret]
jmp 0x100311a1
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1003119c
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xb8], 0
jne 0x100311a1
inc dword [ebp - 0x10]
xor eax, eax
cmp dword [ebp - 0x10], eax
jle 0x1003118a
dec dword [ebp - 0x1c]
push 0
pop eax
jns 0x10031121
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x10031084
mov esi, dword [sym.imp.USER32.dll_GetDC]
or ecx, 0xffffffff
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x128], ecx
mov dword [ebp - 0x48], 0x6e85fcb
mov dword [ebp - 0x40], 0x723
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10031204
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x44c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100311f0
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031255
push eax
push 0x14d8
push 0xa8a
push 0x2665
push 0x1806
push 0x20a2
push 0x1c7e
push 0xa94
push 0xf24
push 0x5b8
push 0x1eda
push 0x1385
push 0x1b4a
push 0x250b
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [ebp - 0x130]
xor eax, eax
cmp dword [ebp - 0x130], eax
jne 0x1003126b
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x12c]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x130]
mov eax, dword [ebp - 0x12c]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setl dl
xor ecx, ecx
mov dword [ebp - 0x44c], edx
mov eax, dword [ebp - 0x48]
cmp edx, eax
setne cl
cmp dword [ebp - 0x12c], ecx
je 0x100312cc
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x130], eax
je 0x100312ce
mov edx, edi
mov eax, dword [ebp - 0x130]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x130]
cmp eax, edx
mov eax, dword [ebp - 0x130]
push 7
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setle dl
sub edx, eax
or eax, 0xffffffff
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x20], eax
pop eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
xor eax, eax
push 3
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10031345
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031342
push eax
push 0x1bc7
push 0x1ceb
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SetPixel]
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jle 0x1003131d
mov dword [ebp - 0x24], 0x3d06ce12
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10031371
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb4c], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10031359
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x10031391
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb4c], 0x16df251d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10031379
xor eax, eax
push 9
mov dword [ebp - 0x24], eax
pop ecx
jmp 0x100313e2
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x10], 0xffffffe9
cmp dword [ebp - 0x10], 0xfffffffc
jle 0x100313cb
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100313bf
push eax
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffc
jg 0x100313ad
push 9
pop ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100313df
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 9
xor eax, eax
pop ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jg 0x10031399
mov dword [ebp - 0x40], 0x3d12
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x10], eax
jmp 0x1003140c
cmp byte [ebp - 0x2d], 0
je 0x10031409
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff8
mov byte [ebp - 0x2d], al
jg 0x100313fa
cmp byte [ebp - 0x2d], 0
je 0x10031427
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x1c], 0x91a049fe
mov dword [ebp - 0x1c], 0xfffffff2
jmp 0x1003148d
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffc
jle 0x1003148a
push 3
mov dword [ebp - 0x10], eax
pop ecx
jmp 0x10031466
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb64], 0x34ee
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10031455
mov ecx, dword [ebp - 0xb64]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
push 0
setl dl
mov dword [ebp - 0x48], edx
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffc
pop eax
jg 0x1003144d
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffed
jge 0x1003143a
mov dword [ebp - 0x1c], 0x720e83c7
mov dword [ebp - 0x10], eax
jmp 0x100314b0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcdc], 0x31e42a43
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003149f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], eax
jl 0x100314e5
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100314e0
push eax
push eax
push eax
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x100314c6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10031507
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x704], 7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100314ee
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ecx
push 3
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x10031530
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x4f0], 0xec2e0cf5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10031518
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10031552
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x860], 0xb07fb07d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10031539
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003156a
push eax
call ebx
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
xor eax, eax
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], eax
jl 0x100316d1
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0xe8cc1958
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x4f0], 0
je 0x100316b4
mov dword [ebp - 0x31c], 0xcb4c23af
xor edx, edx
mov dword [ebp - 0x318], 0xcb4c23af
mov dword [ebp - 0x314], 0xcb4c23af
mov dword [ebp - 0x310], 0xcb4c23af
mov dword [ebp - 0x28], 0xf5af8b51
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x4f0]
mov eax, dword [ebp - 0x314]
cmp eax, ecx
setne dl
xor eax, eax
mov dword [ebp - 0x4f0], edx
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], eax
jl 0x100316c5
mov dword [ebp - 0x40], 0xac7eb236
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov esi, dword [ebp + eax*4 - 0x318]
cmp edx, 4
mov eax, dword [ebp - 0x1c]
setg cl
mov dword [ebp + eax*4 - 0x4f0], esi
add ecx, dword [ebp - 0x3c]
neg ecx
mov dword [ebp - 0x860], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x318]
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, 0x3a79cc09
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
sub esi, eax
sub esi, 0x5ca2
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
mov eax, dword [ebp + eax*4 - 0x318]
cmp esi, eax
mov eax, dword [ebp - 0x31c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl dl
xor ebx, ebx
mov ecx, dword [ebp + eax*4 - 0x318]
mov eax, dword [ebp - 0x28]
cmp edx, eax
setle bl
sub ebx, 0x39dff2bc
sub ebx, ecx
neg ebx
sbb ebx, ebx
inc ebx
mov dword [ebp - 0x314], ebx
dec dword [ebp - 0x28]
jns 0x100315f3
jmp 0x100316c5
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100316c5
push eax
call dword [sym.imp.KERNEL32.dll_GetFileType]
dec dword [ebp - 0x1c]
push 0
pop eax
jns 0x1003157a
push 3
mov dword [ebp - 0x24], eax
pop esi
cmp dword [ebp - 0x24], esi
jge 0x100316f4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7a4], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100316dc
xor eax, eax
mov ecx, 0xffff
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x48], 0x12535b5b
push 0xf
pop ebx
cmp dword [ebp - 0x20], eax
je 0x100317a4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10031734
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x86c], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003171b
xor eax, eax
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x10031799
mov dword [ebp - 0x2c], 0x50e6da50
mov dword [ebp - 0x2c], edi
cmp dword [ebp - 0x2c], eax
jl 0x10031796
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], eax
jl 0x10031791
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x86c]
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10031785
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031782
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jge 0x1003176f
dec dword [ebp - 0x10]
jns 0x1003175b
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x1003174c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x38
jle 0x1003173d
jmp 0x10031861
mov dword [ebp - 0x40], 0xfffffff9
mov dword [ebp - 0x3c], 0x5879a273
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jg 0x1003184a
mov dword [ebp - 0x2c], 0xefa025ec
mov dword [ebp - 0x4c], 0x2506ed55
mov eax, dword [ebp - 0x34]
dec eax
je 0x10031803
mov eax, dword [ebp - 0x2c]
add eax, 0x15b
push 0
pop eax
setns al
xor edx, edx
cmp eax, 0x10a1
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x2c]
je 0x10031800
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10031805
mov eax, dword [ebp - 0x2c]
xor eax, eax
mov dword [ebp - 0x4c], eax
imul eax, dword [ebp - 0x4c], 6
test eax, eax
je 0x10031820
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10031822
cmp dword [ebp - 0x4c], eax
je 0x10031822
mov ecx, edi
jmp 0x10031824
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x40]
add eax, ecx
jne 0x1003182e
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
xor eax, eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100317be
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031861
push 0x203f
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x20]
push 0xfffffffffffffffe
pop edx
imul eax, eax, 0xd70f
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x10032167
mov esi, dword [sym.imp.USER32.dll_GetWindowLongA]
xor ebx, ebx
mov edi, dword [sym.imp.GDI32.dll_BitBlt]
inc ebx
mov dword [ebp - 0x38], 0x8261f9c2
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100318db
push 0x2177
push 0x26f0
push 0x14a8
push 0x70a
push 0x1a18
push 0x1a13
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100318f7
push 0xcc0
push 0x1c3a
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
push 9
pop ecx
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x48], 0x860ec01e
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1003192e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd98], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10031916
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031944
push 0x1923
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0x1c]
jne 0x10031959
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
sub eax, dword [ebp - 0x1c]
cmp eax, ebx
setg cl
or eax, 0xffffffff
add ecx, 0x42c7
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x44], 0x41a59c3c
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x10], eax
jmp 0x100319a2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c], 0x8c007c7b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10031994
mov eax, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
test eax, eax
mov eax, dword [ebp - 0x6c]
setns cl
add eax, 0x49ac
add eax, ecx
xor ecx, ecx
cmp eax, ebx
push 9
setge cl
xor edx, edx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x44]
pop eax
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x6c]
je 0x10031a0a
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x28], 0x1ed5297f
mov dword [ebp - 0x18], eax
jmp 0x10031b41
mov dword [ebp - 0x24], 0xe38b13f4
cmp dword [ebp - 0x28], eax
jne 0x10031b4b
push 5
pop ecx
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x1a
jg 0x10031b3e
xor edx, edx
mov dword [ebp - 0x1c], 0xc924dfb4
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
dec edx
neg edx
sbb edx, edx
or eax, 0xffffffff
neg edx
cmp edx, eax
mov edx, dword [ebp - 0x1c]
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
imul ecx, dword [ebp - 0x28]
shl ecx, 3
cmp ecx, dword [ebp - 0x1c]
jge 0x10031a8d
mov ecx, ebx
cmp dword [ebp - 0x1c], eax
jne 0x10031a8f
mov ecx, eax
xor eax, eax
cmp ecx, 0xffffffff
setl al
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10031b26
mov dword [ebp - 0x24], eax
jmp 0x10031b1e
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10031b1b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031aca
push 0x1781
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031b16
push 0x7a2
push 0x1488
push 0x2473
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1376
push 0x1958
push 0x634
push 0x1c3e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10031ab1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10031aa9
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10031aa4
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x1a
jle 0x10031a41
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jl 0x10031a21
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10031b6d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe98], 0xf75dcec3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x10031b54
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10031b8c
or ecx, 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf8], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x10031b78
xor eax, eax
push 3
mov dword [ebp - 0xf8], eax
pop ecx
jmp 0x10031bb9
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031bb3
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRgn]
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], ecx
jle 0x10031b97
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x18], 0xa
jmp 0x10031be8
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44], 0x4b811476
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffeb
jne 0x10031bdb
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x44]
xor eax, eax
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x28]
je 0x10031c34
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10031cdc
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
jmp 0x10031cda
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x44], 6
cmp dword [ebp - 0x44], 7
je 0x10031cda
push 3
pop ecx
push 2
xor eax, eax
pop edx
mov dword [ebp - 0x38], 0xdf0ebf90
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x10031c81
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x890], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10031c69
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edx
jge 0x10031ca1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xd34], 8
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10031c89
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edx
jg 0x10031cca
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x890]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x890], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jle 0x10031ca9
push 3
xor eax, eax
pop ecx
inc dword [ebp - 0x40]
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 7
jne 0x10031c54
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x44], 0x41a59c3c
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x10], eax
jmp 0x10031d03
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], 0x8c007c7b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10031cf5
mov eax, dword [ebp - 0x70]
xor ecx, ecx
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
test eax, eax
mov eax, dword [ebp - 0x70]
setns cl
add eax, 0x49ac
add eax, ecx
xor ecx, ecx
cmp eax, ebx
push 9
setge cl
xor edx, edx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x44]
pop eax
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x70]
je 0x10031d6b
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x70]
xor eax, eax
mov dword [ebp - 0x28], 0x1ed5297f
mov dword [ebp - 0x18], eax
jmp 0x10031ea2
mov dword [ebp - 0x24], 0xe38b13f4
cmp dword [ebp - 0x28], eax
jne 0x10031eac
push 5
pop ecx
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 0x1a
jg 0x10031e9f
xor edx, edx
mov dword [ebp - 0x1c], 0xc924dfb4
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
dec edx
neg edx
sbb edx, edx
or eax, 0xffffffff
neg edx
cmp edx, eax
mov edx, dword [ebp - 0x1c]
sbb eax, eax
inc eax
sub edx, eax
mov eax, dword [ebp - 0x28]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
imul ecx, dword [ebp - 0x28]
shl ecx, 3
cmp ecx, dword [ebp - 0x1c]
jge 0x10031dee
mov ecx, ebx
cmp dword [ebp - 0x1c], eax
jne 0x10031df0
mov ecx, eax
xor eax, eax
cmp ecx, 0xffffffff
setl al
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10031e87
mov dword [ebp - 0x24], eax
jmp 0x10031e7f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10031e7c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031e2b
push 0x1781
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10031e77
push 0x7a2
push 0x1488
push 0x2473
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1376
push 0x1958
push 0x634
push 0x1c3e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10031e12
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10031e0a
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jle 0x10031e05
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x1a
jle 0x10031da2
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jl 0x10031d82
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10031ece
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x878], 0x5062d7bc
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x10031eb5
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10031ef0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x950], 0x8472
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x10031ed7
xor eax, eax
mov dword [ebp - 0x10], 0x184c506d
or edx, 0xffffffff
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x1c], edx
push 5
pop ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 0x98ab5457
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x18], 0x4f368a90
mov dword [ebp - 0x38], 0x86524f20
mov dword [ebp - 0x38], 0xc6ae49a2
mov dword [ebp - 0x38], 0xdc6b79df
mov dword [ebp - 0x38], 0x403ca955
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x680], eax
mov dword [ebp - 0x67c], eax
mov dword [ebp - 0x678], eax
mov dword [ebp - 0x44], 0x4c9d8d92
mov dword [ebp - 0x4c], 0x911b9c6f
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x67c]
add ecx, eax
mov eax, dword [ebp - 0x28]
inc dword [ebp - 0x4c]
cmp ecx, eax
jge 0x10031f99
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp - 0x40]
cmp eax, 0xa7dd
setl cl
cmp ecx, edx
jne 0x10031f99
xor eax, eax
jmp 0x10031f9b
mov eax, ebx
mov edx, dword [ebp - 0x1c]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
push 3
setge cl
xor edx, edx
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
pop ecx
setg dl
xor eax, eax
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ecx
jge 0x10031fe8
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xb7c], 0x67d7132c
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jl 0x10031fd0
xor eax, eax
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x38], 0x7c7ce53d
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0xaa6e6f7
mov dword [ebp - 0x38], 0x90ef307d
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x38], 0xcf415d72
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jge 0x10032045
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xdb0], 0x4dd0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x1003202d
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10032067
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xee8], 0x1943c6fe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1003204e
xor eax, eax
dec dword [ebp - 0x40]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003207c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push 3
pop ecx
mov eax, dword [ebp - 0x20]
push 3
mov eax, dword [ebp + eax*4 - 0x704]
dec dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x878], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x704], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0x743e62c9
pop eax
setne cl
sub ecx, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x20]
inc ecx
neg edx
sbb edx, edx
inc edx
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x3c], ecx
je 0x100320e9
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x704]
mov ecx, dword [ebp - 0x94c]
mov eax, dword [ebp - 0x20]
neg ecx
push 0
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0xb7c], ecx
mov ecx, dword [ebp - 0x6f8]
sub ecx, dword [ebp - 0x94c]
mov eax, dword [ebp - 0x79c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x944]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
setle dl
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x7a4], eax
dec dword [ebp - 0x20]
pop eax
jns 0x10031897
push 3
pop esi
xor edi, edi
push 0xfffffffffffffffe
inc edi
pop edx
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x24], 0x7c7747bb
mov dword [ebp - 0x44], 0xa9dade66
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x38], 0xecf4
mov dword [ebp - 0x24], 0x7182b474
cmp dword [ebp - 0x24], eax
je 0x1003219c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], 0xfff7
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x28]
jle 0x1003223c
xor eax, eax
mov ecx, 0xe213
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x40], edi
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
cmp dword [ebp - 0x20], ecx
jg 0x100321e5
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x100321e7
mov eax, edi
cmp eax, dword [ebp - 0x3c]
jg 0x100321f3
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x100321f5
mov eax, edi
mov ecx, dword [ebp - 0x20]
cmp eax, 0xd385e13c
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], edi
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
mov dword [ebp - 0x50], edx
jmp 0x100323c2
or ebx, 0xffffffff
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x44], 0xffffffee
cmp dword [ebp - 0x44], ebx
jne 0x100323b7
push 5
xor eax, eax
pop ecx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x38], 0x8b7552f0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10032280
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x46c], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1003226c
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jl 0x100323a8
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100322b1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x5d8], edi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x1003229c
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jge 0x100322d1
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x624], 0xe3135590
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x100322b9
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100322f3
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x5a8], 0xb6ef5427
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x100322da
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10032315
mov dword [ebp - 0x38], 0xbf8c3261
mov dword [ebp - 0x38], 0xf3a4b440
inc dword [ebp - 0x5d8]
dec dword [ebp - 0x5a4]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x100322f8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x1003239c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032353
push 0x1d37
push 0x1ee8
push 0x2f1
push 0x1b86
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x624]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x624]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x46c]
cmp eax, 0x2b4b20f9
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
mov dword [ebp + eax*4 - 0x620], ecx
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x10032322
dec dword [ebp - 0x24]
jns 0x1003228c
push 5
pop ecx
inc dword [ebp - 0x44]
push 0xfffffffffffffffe
pop edx
cmp dword [ebp - 0x44], ebx
je 0x1003225a
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], 0x3de76903
mov dword [ebp - 0x3c], 0xc12f69a0
mov dword [ebp - 0x50], 0xaf83
mov dword [ebp - 0x38], 0xfffffffe
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1003240e
push 0xcc6
push 0x15b3
push 0x2446
call esi
push eax
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_PeekMessageA]
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x34], eax
je 0x10032417
mov ecx, edi
mov eax, dword [ebp - 0x34]
sub ecx, eax
je 0x10032429
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1003242b
mov ecx, edi
jmp 0x1003242d
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x34]
add ecx, 0x621e
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0x6c849023
setge al
sub eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x1003245e
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10032460
mov edx, edi
jmp 0x10032462
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setl cl
xor ebx, ebx
imul ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
cmp eax, ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
setge bl
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, ebx
jl 0x10032494
mov ecx, edi
cmp dword [ebp - 0x34], eax
jne 0x10032496
mov ecx, eax
mov eax, dword [ebp - 0x34]
imul eax, ecx
test eax, eax
je 0x1003251e
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x100324b8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6a4], 0x95cd1d2a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100324a7
mov eax, dword [ebp - 0x6a4]
cmp eax, dword [ebp - 0x6a4]
je 0x100324d7
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x100324d9
mov ecx, edi
jmp 0x100324db
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x34]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x34]
cmp eax, ecx
setle dl
neg edx
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x6a4]
neg edx
mov eax, dword [ebp - 0x6a4]
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x28], 0x8ea47160
jmp 0x100325a2
xor eax, eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0xffffffe4
cmp dword [ebp - 0x28], 0x17
jl 0x100325a0
mov dword [ebp - 0x48], 0x61e9426c
xor edx, edx
mov dword [ebp - 0x40], 0xfffffffd
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3c], edi
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp ecx, 0x15f74462
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
add ecx, 0x7f49
je 0x10032584
cmp dword [ebp - 0x10], eax
je 0x10032584
mov eax, edi
xor edx, edx
cmp eax, 0x285b5f73
mov eax, dword [ebp - 0x10]
sete dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x28]
jmp 0x1003252a
xor eax, eax
mov dword [ebp - 0x1c], 0xc204e2db
push 3
mov dword [ebp - 0x10], eax
pop ebx
cmp dword [ebp - 0x10], ebx
jge 0x100325cc
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb94], 0xfba22e97
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100325b4
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jle 0x100326a1
mov dword [ebp - 0x44], 0x390197f0
mov dword [ebp - 0x50], 0xfffffff8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032607
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x424], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100325ef
xor eax, eax
mov dword [ebp - 0x44], 2
cmp dword [ebp - 0x44], eax
jl 0x1003268e
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp dword [ebp + eax*4 - 0x424], ecx
je 0x10032677
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x424]
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x424], ecx
je 0x10032647
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x424], ecx
je 0x10032647
mov edx, edi
jmp 0x1003264b
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov dword [ebp - 0xb94], eax
imul eax, eax, 0x28ea
cmp eax, edx
mov eax, dword [ebp - 0x44]
setge cl
imul ecx, ecx, 0x7d72
cmp ecx, dword [ebp + eax*4 - 0x424]
jl 0x10032677
mov ecx, edi
jmp 0x1003267b
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0x45bbbdeb
setl al
mov dword [ebp - 0x50], eax
dec dword [ebp - 0x44]
jns 0x10032613
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
push 0
pop eax
jg 0x100325d9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x100326c3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xa20], 0x3c69
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100326aa
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jge 0x100326e3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x9c], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x100326cb
xor eax, eax
mov dword [ebp - 0x9c], eax
jmp 0x10032747
mov dword [ebp - 0x1c], 0x9f7fd1e8
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jg 0x1003272f
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0xa20]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xa20]
cmp eax, edx
setge cl
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x40], 0x4837182a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x100326fd
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032741
push eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
xor eax, eax
inc dword [ebp - 0x9c]
cmp dword [ebp - 0x9c], ebx
jle 0x100326eb
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x9c], eax
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x38], 0x8261f9c2
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x100327a3
push 0x2177
push 0x26f0
push 0x14a8
push 0x70a
push 0x1a18
push 0x1a13
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100327bf
push 0xcc0
push 0x1c3a
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
mov dword [ebp - 0x18], 0x7c7747bb
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], edi
jge 0x100327e6
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x108], 0x3ae35568
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edi
jl 0x100327ce
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10032808
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xcec], 0x9ea9831
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jl 0x100327ef
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1003282a
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x664], 0xbf48c443
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x10032811
xor eax, eax
mov dword [ebp - 0x108], 0xffffffe6
jmp 0x10032885
or ecx, 0xffffffff
mov dword [ebp - 0x10], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1003285e
push 0x22ec
push eax
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1003287a
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032877
call esi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x10032863
inc dword [ebp - 0x108]
cmp dword [ebp - 0x108], 0xf
jl 0x10032836
mov dword [ebp - 0x65c], eax
cmp dword [ebp - 0x65c], eax
jl 0x100328f5
mov dword [ebp - 0x2c], 0x4d513c61
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100328cf
push 0x225d
push 0x77d
push 0x11aa
push 0x1f
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x100328ed
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x100328e8
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x100328d7
dec dword [ebp - 0x65c]
jns 0x1003289c
mov dword [ebp - 0x28], 0xa9dade66
mov ecx, 0xfff8
mov dword [ebp - 0x28], 0x10c93b4e
mov dword [ebp - 0x50], 0xe012d2c8
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003293c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x9d0], 0x1adb2bc4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032924
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032978
mov dword [ebp - 0x10], eax
jmp 0x10032957
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd14], 0xebb0cb8c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032946
mov ecx, dword [ebp - 0x28]
mov eax, 0x33ef
neg ecx
push 0
sbb ecx, ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0xd08], eax
dec dword [ebp - 0x28]
pop eax
cmp dword [ebp - 0x28], 0xfffffff0
jle 0x10032941
mov eax, dword [ebp - 0x50]
xor edx, edx
mov eax, dword [ebp - 0x3c]
inc dword [ebp - 0x3c]
mov eax, dword [ebp - 0x9c8]
cmp eax, 0x5db0
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp edx, eax
setge cl
cmp ecx, 0xfffffff6
jne 0x100329b0
xor eax, eax
cmp dword [ebp - 0x9c8], eax
je 0x100329b2
mov eax, edi
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x40], 0x704f3d4e
mov dword [ebp - 0x40], 0x110cbbbc
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x100329ea
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x3fc], 0x540d
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x100329d1
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x10032a08
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x164], edi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 4
jl 0x100329f3
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x10032a27
or ecx, 0xffffffff
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xbac], ecx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x10032a13
xor eax, eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], ebx
jg 0x10032b83
mov dword [ebp - 0x10], 0x7f47073
xor ecx, ecx
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x15c]
cmp dword [ebp + eax*4 - 0x3fc], ecx
je 0x10032a6a
mov eax, dword [ebp - 0x15c]
cmp dword [ebp + eax*4 - 0x3fc], ecx
je 0x10032a6a
mov esi, edi
jmp 0x10032a6e
xor eax, eax
mov esi, eax
mov eax, dword [ebp - 0x15c]
mov ecx, 0xffff
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp + eax*4 - 0x3fc]
cmp ecx, eax
mov eax, dword [ebp - 0x15c]
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x3fc]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
or eax, 0xffffffff
add edx, 0x30a60761
cmp edx, eax
jl 0x10032ad2
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp + eax*4 - 0x3fc]
mov eax, dword [ebp - 0xba8]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
imul eax, edx, 0x5a60
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp + eax*4 - 0x3fc]
cmp dword [ebp - 0x10], eax
jne 0x10032b1a
xor eax, eax
cmp dword [ebp - 0x15c], eax
je 0x10032b1c
mov ecx, edi
jmp 0x10032b1e
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x15c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x3fc]
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], esi
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setge dl
add edx, dword [ebp - 0x54]
jne 0x10032b49
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x15c]
mov eax, dword [ebp + eax*4 - 0x3fc]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x54], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10032b6e
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindNextFileA]
inc dword [ebp - 0x15c]
push 0
pop eax
cmp dword [ebp - 0x15c], ebx
jle 0x10032a39
mov dword [ebp - 0x50], 8
mov ecx, 0x3c34eea2
mov dword [ebp - 0x28], 0x2e91a049
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x10], 0x6038591b
mov dword [ebp - 0x48], 0xfffffffd
mov dword [ebp - 0x54], 0x47f1
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffffc
jl 0x10032c9e
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x2c], 0x80c170c
mov dword [ebp - 0x5e8], ecx
mov dword [ebp - 0x5e4], ecx
mov dword [ebp - 0x5e0], ecx
mov dword [ebp - 0x5dc], ecx
mov dword [ebp - 0x38], 0xda7ef5d8
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x4c], edi
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x5dc]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jl 0x10032c16
mov edx, eax
cmp dword [ebp - 0x5e4], eax
je 0x10032c18
mov edx, edi
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
cmp ecx, dword [ebp - 0x2c]
jl 0x10032c3e
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
xor edx, edx
inc dword [ebp - 0x54]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setl cl
add eax, 0x5799
add eax, ecx
cmp dword [ebp - 0x54], eax
jge 0x10032c81
mov eax, 0xffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x2c], 0xb9567464
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
jmp 0x10032c8a
mov dword [ebp - 0x40], edi
inc dword [ebp - 0x40]
dec dword [ebp - 0x4c]
dec dword [ebp - 0x28]
mov ecx, 0x3c34eea2
cmp dword [ebp - 0x28], 0xfffffffc
jge 0x10032bc2
xor eax, eax
mov dword [ebp - 0x38], 0xecf4
or ecx, 0xffffffff
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0x8993dd61
mov dword [ebp - 0x50], 0xe3a113d
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x10032cd5
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1c0], edi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x10032cc1
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], edi
jge 0x10032cf5
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x440], 0x11ebc848
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edi
jl 0x10032cdd
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10032dce
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x1c0], 0
je 0x10032d3f
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + eax*4 - 0x1c0]
mov eax, dword [ebp - 0x34]
cmp ecx, dword [ebp + eax*4 - 0x1c0]
jne 0x10032d32
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x1c0]
mov eax, dword [ebp - 0x34]
mov ecx, edi
sub ecx, eax
je 0x10032d3f
mov ecx, edi
jmp 0x10032d43
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x34]
cmp ecx, ebx
mov edx, dword [ebp + eax*4 - 0x1c0]
sbb eax, eax
add eax, 5
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp edx, eax
mov eax, dword [ebp - 0x34]
sete cl
add ecx, dword [ebp + eax*4 - 0x1c0]
jne 0x10032d76
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x1c0]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x1c0]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [ebp - 0x34]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x1c0]
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], eax
jmp 0x10032db9
mov dword [ebp - 0x50], 0xd8f9c328
cmp dword [ebp - 0x50], eax
jne 0x10032dbf
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10032daa
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 2
jle 0x10032d02
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff0
jne 0x10032e27
mov dword [ebp - 0x10], 0x5a40a7b4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x10]
jle 0x10032df2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1bc]
mov eax, dword [ebp - 0x24]
push 7
pop eax
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x50], eax
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffff0
je 0x10032dd7
xor eax, eax
mov dword [ebp - 0x18], 0x7182b474
cmp dword [ebp - 0x18], eax
je 0x10032e36
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov esi, 0xfffb
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], 0xfff7
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
jle 0x100332be
xor eax, eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x38], 0x9949dfcf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10032e91
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x304], 0x6d444182
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032e78
xor eax, eax
mov dword [ebp - 0x300], eax
jmp 0x10032ec9
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032eab
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032ec3
push eax
push edi
push 0x12db
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
xor eax, eax
inc dword [ebp - 0x300]
cmp dword [ebp - 0x300], ebx
jle 0x10032e99
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x44], 0x9a5a40f2
mov dword [ebp - 0x40], 0x61a6520
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x54], 0x4b72b416
mov dword [ebp - 0x2c], 0xfffffff9
push 5
pop ecx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x50], 0x69d0863e
mov dword [ebp - 0x28], 0x283a38c8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10032f2a
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1f0], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10032f16
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10032f3c
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
xor eax, eax
mov esi, eax
cmp dword [ebp - 0x44], eax
je 0x10032f45
mov dword [ebp - 0x10], 0x98f01ba0
xor eax, eax
push 0xfffffffffffffff8
pop ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x200], ecx
mov dword [ebp - 0x1fc], ecx
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x4c], 0xc80ae7b1
mov dword [ebp - 0x50], 0x5b5cf0ad
mov dword [ebp - 0x40], 0x80915d2b
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10033322
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x380], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10033309
xor eax, eax
cmp dword [ebp - 0x44], eax
jne 0x1003332c
cmp dword [ebp - 0x24], eax
je 0x10033332
mov eax, dword [ebp - 0x380]
mov eax, dword [ebp - 0x1fc]
xor ecx, ecx
mov eax, dword [ebp - 0x374]
cmp eax, 0x3b0a
setg cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], eax
je 0x1003335c
mov ecx, edi
cmp dword [ebp - 0x378], eax
jne 0x1003335e
mov ecx, eax
mov eax, dword [ebp - 0x204]
xor edx, edx
cmp ecx, eax
setne dl
cmp dword [ebp - 0x380], edi
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, edx
mov eax, dword [ebp - 0x380]
setle cl
dec eax
add eax, ecx
xor edx, edx
cmp eax, 0xbe4438b
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x50]
sete cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0x77b69c93
setle al
cmp eax, dword [ebp - 0x374]
jg 0x100334c5
mov dword [ebp - 0x28], 0x978c7644
xor eax, eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x10033479
mov dword [ebp - 0x2c], 0x70c0
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x50], 0x5c00d4b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jg 0x10033470
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp - 0x204]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1fc]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x380]
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
add eax, 0x6f30
mov dword [ebp - 0x4c], eax
jmp 0x10033587
push 9
pop eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x3c], 0x805026e7
mov dword [ebp - 0x50], 0xfffffff8
mov dword [ebp - 0x2c], 0x7e7b3b6d
mov dword [ebp - 0x3c], 0xdb4d
mov dword [ebp - 0x10], eax
jmp 0x100334fb
cmp dword [ebp - 0x10], ebx
jl 0x100334ee