Function at 0x10032148
Capabilities:
Check os version
Compare security identifiers
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file attributes
Get file size
Get file system object information
Get graphical window text
Identify system language via api
Modify service
Parse pe header
Query or enumerate registry key
Resume thread
Suspend thread

Disassembly:
mov eax, 0x10086c35
call fcn.10085390
mov eax, 0x1884
call fcn.10082fb0
push ebx
push esi
push edi
push 0xfffffffffffffff9
mov byte [ebp - 0x65], dl
xor eax, eax
pop edx
mov dword [ebp - 0x44], edx
push 4
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x1003218c
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8f8], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10032178
xor eax, eax
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 3
pop ebx
push 1
mov dword [ebp - 0x44], eax
pop edi
jmp 0x100323a5
mov dword [ebp - 0x20], 0x5d09ea9
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x100323a2
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x8f8]
cmp eax, dword [ebp - 0x20]
je 0x100321d0
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x100321d2
mov ecx, edi
jmp 0x100321d4
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x8f8]
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x8f8]
cmp eax, 0xffffffff
setl cl
xor eax, eax
neg ecx
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, 0x693009c
mov eax, dword [ebp - 0x20]
setl cl
mov eax, dword [ebp + eax*4 - 0x8f8]
add ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8f8], ecx
xor eax, eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], eax
jmp 0x1003238e
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xc60]
push 2
call fcn.1001740b
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003226d
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc60]
call fcn.100174a9
mov dword [eax], 0x93046aa1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1003224e
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x1003236e
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x10032295
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x678], 0x973063d6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x1003227d
xor eax, eax
mov dword [ebp - 0x670], eax
jmp 0x10032305
mov dword [ebp - 0x1c], 0xc7ba3f30
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100322b8
call esi
push eax
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x100322ff
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100322d2
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100322fa
push eax
push 0x233
push eax
push 0xba1
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x100322c0
inc dword [ebp - 0x670]
cmp dword [ebp - 0x670], ebx
jle 0x1003229d
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp + eax*4 - 0x8f8], 0xfffffff8
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov eax, dword [ebp - 0x10]
setge cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xc60]
setl bl
xor eax, eax
push eax
call fcn.100174a9
mov dword [eax], ebx
xor eax, eax
cmp ebx, 0xcaa7
sete al
add eax, 0x71dc
je 0x1003235c
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1003235e
mov eax, edi
jmp 0x1003235e
xor eax, eax
push 3
dec eax
pop ebx
mov dword [ebp - 0x678], eax
inc dword [ebp - 0x3c]
push 0
pop eax
cmp dword [ebp - 0x3c], ebx
jle 0x10032275
or eax, 0xffffffff
lea ecx, [ebp - 0xc60]
mov dword [ebp - 4], eax
call fcn.1001748d
inc dword [ebp - 0x10]
push 0
pop eax
cmp dword [ebp - 0x10], ebx
jle 0x10032230
dec dword [ebp - 0x20]
jns 0x100321b6
xor eax, eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffffc
jle 0x100321a0
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100323cb
push 0xcd8
push 0xc9d
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
push 0xfffffffffffffff9
pop edx
mov dword [ebp - 0x44], edx
push 4
mov dword [ebp - 0x24], eax
pop ecx
cmp dword [ebp - 0x24], ecx
jge 0x100323f0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x918], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100323dc
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x100325fd
mov dword [ebp - 0x20], 0x5d09ea9
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x100325fa
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x918]
cmp eax, dword [ebp - 0x20]
je 0x10032428
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1003242a
mov ecx, edi
jmp 0x1003242c
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x918]
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x918]
cmp eax, 0xffffffff
setl cl
xor eax, eax
neg ecx
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, 0x693009c
mov eax, dword [ebp - 0x20]
setl cl
mov eax, dword [ebp + eax*4 - 0x918]
add ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x918], ecx
xor eax, eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x10], eax
jmp 0x100325e6
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xbac]
push 2
call fcn.1001740b
xor eax, eax
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x100324c5
push dword [ebp - 0x24]
lea ecx, [ebp - 0xbac]
call fcn.100174a9
mov dword [eax], 0x93046aa1
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100324a6
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x100325c6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x100324ed
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x648], 0x973063d6
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100324d5
xor eax, eax
mov dword [ebp - 0x640], eax
jmp 0x1003255d
mov dword [ebp - 0x1c], 0xc7ba3f30
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032510
call esi
push eax
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10032557
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1003252a
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032552
push eax
push 0x233
push eax
push 0xba1
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10032518
inc dword [ebp - 0x640]
cmp dword [ebp - 0x640], ebx
jle 0x100324f5
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp + eax*4 - 0x918], 0xfffffff8
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov eax, dword [ebp - 0x10]
setge cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xbac]
setl bl
xor eax, eax
push eax
call fcn.100174a9
mov dword [eax], ebx
xor eax, eax
cmp ebx, 0xcaa7
sete al
add eax, 0x71dc
je 0x100325b4
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x100325b6
mov eax, edi
jmp 0x100325b6
xor eax, eax
push 3
dec eax
pop ebx
mov dword [ebp - 0x648], eax
inc dword [ebp - 0x3c]
push 0
pop eax
cmp dword [ebp - 0x3c], ebx
jle 0x100324cd
or eax, 0xffffffff
lea ecx, [ebp - 0xbac]
mov dword [ebp - 4], eax
call fcn.1001748d
inc dword [ebp - 0x10]
push 0
pop eax
cmp dword [ebp - 0x10], ebx
jle 0x10032488
dec dword [ebp - 0x20]
jns 0x1003240e
xor eax, eax
dec dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0xfffffffc
jle 0x100323f8
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032623
push 0xcd8
push 0xc9d
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
xor eax, eax
mov dword [ebp - 0x3c], 0xfffffff9
mov dword [ebp - 0x30], 0x48aab564
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x28], 0xb61943ec
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1003265d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x17c], 0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10032644
xor eax, eax
mov dword [ebp - 0x17c], 0xd
cmp dword [ebp - 0x17c], 0xffffffe4
jl 0x1003284c
push 4
or ecx, 0xffffffff
pop edx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edx
jge 0x10032699
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf00], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10032685
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jg 0x10032839
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x4c], 0x7f4a7d2a
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x10032814
mov dword [ebp - 0x44], 0x365653d4
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x1003280b
mov dword [ebp - 0x24], eax
jmp 0x100326e4
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x11fc], 0xb9567464
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jl 0x100326d3
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xf00], 0
jne 0x10032737
mov eax, dword [ebp - 0xef8]
xor ebx, ebx
mov ecx, 0x6974
sub ecx, eax
mov eax, dword [ebp - 0x178]
cmp eax, ecx
mov ecx, dword [ebp - 0x178]
mov eax, dword [ebp - 0x10]
setl bl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x44]
push 3
setg dl
xor ecx, ecx
cmp edx, eax
sete cl
sub ebx, ecx
pop ebx
jne 0x10032737
xor eax, eax
mov ecx, eax
jmp 0x10032739
mov ecx, edi
xor eax, eax
cmp ecx, 0x9953
setge al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, 0x5169
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0xf00]
mov eax, dword [ebp - 0x4c]
sub eax, 0x1162d50c
cmp eax, ecx
mov eax, dword [ebp - 0x178]
setl dl
imul edx, eax
mov eax, dword [ebp - 0x10]
imul eax, edx
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], ebx
jg 0x100327ff
push 4
pop ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ecx
jge 0x100327c2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xf00], 0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x100327aa
xor eax, eax
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], eax
jl 0x100327f7
dec dword [ebp - 0x11f8]
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100327ef
push 0x1552
push eax
push 0xe08
call esi
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextA]
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x100327ca
push 4
pop ecx
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], ebx
jle 0x1003279f
dec dword [ebp - 0x44]
push 0
pop eax
jns 0x100326ce
dec dword [ebp - 0x20]
jns 0x100326bb
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032827
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x100326a5
push 4
or ecx, 0xffffffff
pop edx
dec dword [ebp - 0x17c]
cmp dword [ebp - 0x17c], 0xffffffe4
jge 0x1003267a
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x828]
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x30], 0x7bb34e4a
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x178], eax
push edi
call fcn.1001740b
push 2
pop ecx
xor eax, eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1003289c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2a4], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10032884
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100328c1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x828]
call fcn.100174a9
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100328a4
xor eax, eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0x1d
jle 0x10032a1e
jmp 0x100328d8
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xd44]
push ebx
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10032912
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd44]
call fcn.100174a9
mov dword [eax], 0x270e7ad5
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x100328f4
xor eax, eax
mov dword [ebp - 0x3c], 0x14
cmp dword [ebp - 0x3c], 0xa
jg 0x100329f6
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jg 0x100329e6
mov dword [ebp - 0x40], 0x82baef6e
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032949
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x828]
call fcn.100174a9
cmp dword [eax], 0
je 0x10032988
push dword [ebp - 0x10]
lea ecx, [ebp - 0x828]
call fcn.100174a9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x828]
mov esi, eax
call fcn.100174a9
mov ecx, dword [eax]
mov dword [esi], ecx
test ecx, ecx
je 0x10032988
mov edx, edi
xor eax, eax
jmp 0x1003298c
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x40], eax
jne 0x100329a9
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
neg eax
cmp eax, edi
setl cl
add ecx, 0xd5de
jne 0x100329a9
xor eax, eax
jmp 0x100329ab
mov eax, edi
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2a4]
setne cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xd44]
push edi
setne bl
call fcn.100174a9
xor ecx, ecx
cmp ebx, 0x3d3b0cf5
setge cl
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10032932
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xa
jle 0x10032923
push 3
pop ebx
lea ecx, [ebp - 0xd44]
mov byte [ebp - 4], 2
call fcn.1001748d
inc dword [ebp - 0x2a4]
cmp dword [ebp - 0x2a4], 0x1d
jg 0x100328d6
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
or eax, 0xffffffff
lea ecx, [ebp - 0x828]
mov dword [ebp - 4], eax
call fcn.1001748d
xor eax, eax
push 4
mov dword [ebp - 0x30], eax
pop ecx
cmp dword [ebp - 0x30], ecx
jge 0x10032a54
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x8e8], 0xfffffff9
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x10032a3c
xor eax, eax
mov dword [ebp - 0x34], 0xe3556834
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032a81
push eax
push 0x20b5
push 0x170
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032a9d
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffffc
jg 0x10032fc3
mov dword [ebp - 0x20], 0x5d09ea9
lea ecx, [ebp - 0xbc4]
push 4
mov dword [ebp - 0x28], 0x32b1cecb
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x1c], 0xb72b
push eax
call fcn.1001740b
push 4
pop ecx
mov dword [ebp - 4], ecx
xor eax, eax
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10032b00
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x334], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10032ae8
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x10032b29
push dword [ebp - 0x10]
lea ecx, [ebp - 0xbc4]
call fcn.100174a9
push 4
mov dword [eax], 9
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10032b08
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jg 0x10032c66
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10032b55
or ecx, 0xffffffff
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x74c], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10032b43
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x334]
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x330]
mov eax, dword [ebp - 0x748]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x334]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x334]
cmp ecx, eax
mov eax, dword [ebp - 0x32c]
setge dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x334]
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x28]
jge 0x10032bbb
xor eax, eax
cmp dword [ebp - 0x748], eax
je 0x10032bbb
mov eax, dword [ebp - 0x334]
mov eax, dword [ebp - 0x334]
mov eax, dword [ebp - 0x748]
xor eax, eax
cmp dword [ebp - 0x748], 0x7f03
jg 0x10032bdc
cmp dword [ebp - 0x28], eax
je 0x10032bdc
mov eax, edi
lea eax, [eax*4 + 1]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x748]
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
jne 0x10032c12
xor eax, eax
lea ecx, [ebp - 0xbc4]
push eax
call fcn.100174a9
cmp dword [eax], 0
jne 0x10032c12
xor eax, eax
mov edx, eax
jmp 0x10032c14
mov edx, edi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x334]
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x18]
je 0x10032c34
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x334]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x334]
xor eax, eax
mov dword [ebp - 0x40], 0xad479ea4
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10032c57
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
inc dword [ebp - 0x28]
push 0
pop eax
cmp dword [ebp - 0x28], ebx
jle 0x10032b35
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032c7f
push eax
push 0x97a
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_SetTimer]
or eax, 0xffffffff
lea ecx, [ebp - 0xbc4]
mov dword [ebp - 4], eax
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], eax
jl 0x10032fb3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x8e8]
cmp eax, dword [ebp - 0x20]
je 0x10032cbb
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10032cbd
mov ecx, edi
jmp 0x10032cbf
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x8e8]
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x8e8]
cmp eax, 0xffffffff
setl cl
xor eax, eax
neg ecx
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, 0x693009c
mov eax, dword [ebp - 0x20]
setl cl
mov eax, dword [ebp + eax*4 - 0x8e8]
add ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8e8], ecx
xor eax, eax
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10032d35
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb18], 8
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10032d1c
xor eax, eax
dec dword [ebp - 0xb18]
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032d50
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10032fa1
mov dword [ebp - 0x30], 0x3fa75c1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10032d81
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xb4], 0xc58a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10032d68
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10032d97
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x850], 0x3cef3392
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10032d86
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x10032db1
cmp eax, dword [ebp - 0xb0]
je 0x10032dc1
mov eax, edi
cmp eax, dword [ebp - 0xb0]
je 0x10032dc1
mov eax, dword [ebp - 0xb4]
xor eax, eax
cmp dword [ebp - 0xb0], eax
je 0x10032e06
cmp dword [ebp - 0xb4], eax
je 0x10032e06
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0xb0]
je 0x10032df7
xor eax, eax
cmp dword [ebp - 0xb0], eax
je 0x10032df9
mov eax, edi
add eax, 0x3fc2
je 0x10032e06
mov eax, dword [ebp - 0xb0]
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x850], 0x6a08376f
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10032e3f
push 0x23b7
push 0x1054
push eax
push 0x2f2
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xec4]
push 2
call fcn.1001740b
xor eax, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10032e80
push dword [ebp - 0x30]
lea ecx, [ebp - 0xec4]
call fcn.100174a9
mov dword [eax], 0x93046aa1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10032e61
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10032f81
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10032ea8
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x660], 0x973063d6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10032e90
xor eax, eax
mov dword [ebp - 0x658], eax
jmp 0x10032f18
mov dword [ebp - 0x1c], 0xc7ba3f30
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032ecb
call esi
push eax
call dword [sym.imp.USER32.dll_SetCapture]
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10032f12
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032ee5
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032f0d
push eax
push 0x233
push eax
push 0xba1
push eax
call esi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10032ed3
inc dword [ebp - 0x658]
cmp dword [ebp - 0x658], ebx
jle 0x10032eb0
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp + eax*4 - 0x8e8], 0xfffffff8
mov eax, dword [ebp - 0x20]
cmp eax, edi
mov eax, dword [ebp - 0x28]
setge cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xec4]
setl bl
xor eax, eax
push eax
call fcn.100174a9
mov dword [eax], ebx
xor eax, eax
cmp ebx, 0xcaa7
sete al
add eax, 0x71dc
je 0x10032f6f
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10032f71
mov eax, edi
jmp 0x10032f71
xor eax, eax
push 3
dec eax
pop ebx
mov dword [ebp - 0x660], eax
inc dword [ebp - 0x24]
push 0
pop eax
cmp dword [ebp - 0x24], ebx
jle 0x10032e88
or eax, 0xffffffff
lea ecx, [ebp - 0xec4]
mov dword [ebp - 4], eax
call fcn.1001748d
inc dword [ebp - 0x28]
push 0
pop eax
cmp dword [ebp - 0x28], ebx
jle 0x10032d58
dec dword [ebp - 0x20]
jns 0x10032ca1
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xfffffffc
push 0
pop eax
jle 0x10032aaa
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10032fdd
push 0xcd8
push 0xc9d
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov dword [ebp - 0x10], 0x13dd33a4
lea ecx, [ebp - 0xa48]
push edi
call fcn.1001740b
mov dword [ebp - 4], 6
lea ecx, [ebp - 0xbdc]
mov dword [ebp - 0x1c], 0xe507
push edi
call fcn.1001740b
mov byte [ebp - 4], 7
or eax, 0xffffffff
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10033039
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa30], 0xd97a888a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033021
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003305f
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa48]
call fcn.100174a9
mov dword [eax], 0x26128f3b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10033041
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10033082
push dword [ebp - 0x20]
lea ecx, [ebp - 0xbdc]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10033067
xor eax, eax
mov dword [ebp - 0x10], 0xfffffff7
jmp 0x100330bd
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], eax
jmp 0x100330b4
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100330b1
push 0xc7b
push 0x815
call esi
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
xor eax, eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jle 0x10033093
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x15
jge 0x1003308b
cmp dword [ebp - 0x10], eax
jne 0x10033140
inc dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xa2c]
cmp eax, ecx
mov eax, dword [ebp - 0xa28]
setne dl
xor ebx, ebx
cmp edx, 2
setl bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor eax, eax
cmp ecx, dword [ebp - 0xa2c]
jge 0x10033101
mov esi, edi
cmp dword [ebp - 0x1c], eax
jne 0x10033103
mov esi, eax
push eax
lea ecx, [ebp - 0xa48]
call fcn.100174a9
xor ecx, ecx
cmp esi, dword [eax]
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xbdc]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0xfffffff8
setle cl
cmp ecx, dword [ebp - 0x40]
je 0x10033140
xor eax, eax
mov esi, eax
jmp 0x10033144
mov esi, edi
xor eax, eax
push eax
lea ecx, [ebp - 0xa48]
call fcn.100174a9
mov edx, dword [ebp - 0x18]
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0xa2c]
setne cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xbdc]
call fcn.1001748d
or esi, 0xffffffff
lea ecx, [ebp - 0xa48]
mov dword [ebp - 4], esi
call fcn.1001748d
push edi
lea ecx, [ebp - 0x87c]
call fcn.1001740b
push 8
xor eax, eax
pop ecx
mov dword [ebp - 4], ecx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100331be
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2ac], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100331a9
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100331e0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x87c]
call fcn.100174a9
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100331c6
xor eax, eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x1d
jle 0x10033336
jmp 0x100331f7
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xd5c]
push 3
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10033235
push dword [ebp - 0x30]
lea ecx, [ebp - 0xd5c]
call fcn.100174a9
mov dword [eax], 0x270e7ad5
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x10033216
xor eax, eax
mov dword [ebp - 0x3c], 0x14
jmp 0x10033307
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jg 0x10033304
mov dword [ebp - 0x40], 0x82baef6e
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10033267
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x87c]
call fcn.100174a9
cmp dword [eax], 0
je 0x100332a6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x87c]
call fcn.100174a9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x87c]
mov esi, eax
call fcn.100174a9
mov ecx, dword [eax]
mov dword [esi], ecx
test ecx, ecx
je 0x100332a6
mov edx, edi
xor eax, eax
jmp 0x100332aa
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x40], eax
jne 0x100332c7
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
neg eax
cmp eax, edi
setl cl
add ecx, 0xd5de
jne 0x100332c7
xor eax, eax
jmp 0x100332c9
mov eax, edi
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2ac]
setne cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0xd5c]
push edi
setne bl
call fcn.100174a9
xor ecx, ecx
cmp ebx, 0x3d3b0cf5
setge cl
mov dword [eax], ecx
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10033250
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xa
jle 0x10033241
lea ecx, [ebp - 0xd5c]
mov byte [ebp - 4], 8
call fcn.1001748d
inc dword [ebp - 0x2ac]
cmp dword [ebp - 0x2ac], 0x1d
jg 0x100331f5
or esi, 0xffffffff
lea ecx, [ebp - 0x87c]
mov dword [ebp - 4], esi
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x34], 0xe3556834
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10033376
push eax
push 0x20b5
push 0x170
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10033396
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
xor eax, eax
push 4
mov dword [ebp - 0x18], 0xfffffff9
lea ecx, [ebp - 0xbf4]
pop ebx
mov dword [ebp - 0x28], 0x32b1cecb
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], 0xb72b
push ebx
call fcn.1001740b
mov dword [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100333ed
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x324], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100333d5
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10033413
push dword [ebp - 0x10]
lea ecx, [ebp - 0xbf4]
call fcn.100174a9
mov dword [eax], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100333f5
xor eax, eax
push 3
mov dword [ebp - 0x28], eax
pop ebx
cmp dword [ebp - 0x28], ebx
jg 0x1003354d
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], eax
jmp 0x10033437
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x764], esi
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x1003342a
mov eax, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x31c]
mov eax, dword [ebp - 0x320]
mov eax, dword [ebp - 0x760]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x324]
cmp ecx, eax
mov eax, dword [ebp - 0x31c]
setge dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x324]
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x28]
jge 0x100334a2
xor eax, eax
cmp dword [ebp - 0x760], eax
je 0x100334a2
mov eax, dword [ebp - 0x324]
mov eax, dword [ebp - 0x324]
mov eax, dword [ebp - 0x760]
xor eax, eax
cmp dword [ebp - 0x760], 0x7f03
jg 0x100334c3
cmp dword [ebp - 0x28], eax
je 0x100334c3
mov eax, edi
lea eax, [eax*4 + 1]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x760]
mov eax, dword [ebp - 0x1c]
push 0xfffffffffffffffd
pop ecx
sub ecx, eax
jne 0x100334f9
xor eax, eax
lea ecx, [ebp - 0xbf4]
push eax
call fcn.100174a9
cmp dword [eax], 0
jne 0x100334f9
xor eax, eax
mov edx, eax
jmp 0x100334fb
mov edx, edi
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x324]
cmp eax, edx
setge cl
sub ecx, dword [ebp - 0x18]
je 0x1003351b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x324]
xor eax, eax
mov dword [ebp - 0x40], 0xad479ea4
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1003353e
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
inc dword [ebp - 0x28]
push 0
pop eax
cmp dword [ebp - 0x28], ebx
jle 0x10033422
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1003356a
push eax
push 0x97a
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
lea ecx, [ebp - 0xbf4]
mov dword [ebp - 4], esi
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1003359c
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xb48], 8
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10033583
xor eax, eax
dec dword [ebp - 0xb48]
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100335bb
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_BeginPaint]
xor eax, eax
mov dword [ebp - 0x30], 0x3fa75c1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100335e4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa4], 0xc58a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100335cb
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x100335fa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x738], 0x3cef3392
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100335e9
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x10033614
cmp eax, dword [ebp - 0xa0]
je 0x10033624
mov eax, edi
cmp eax, dword [ebp - 0xa0]
je 0x10033624
mov eax, dword [ebp - 0xa4]
xor eax, eax
cmp dword [ebp - 0xa0], eax
je 0x10033669
cmp dword [ebp - 0xa4], eax
je 0x10033669
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
je 0x1003365a
xor eax, eax
cmp dword [ebp - 0xa0], eax
je 0x1003365c
mov eax, edi
add eax, 0x3fc2
je 0x10033669
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x738], 0x6a08376f
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x100336a2
push 0x23b7
push 0x1054
push eax
push 0x2f2
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
push 4
mov dword [ebp - 0x30], eax
pop ecx
cmp dword [ebp - 0x30], ecx
jge 0x100336c5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x908], 0xfffffff9
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ecx
jl 0x100336ad
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffc
jg 0x10035860
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x38], 0x83d87e3b
mov dword [ebp - 0x40], 0xfcc1031c
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x30], eax
jmp 0x1003370b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x83c], 5
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x100336fa
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
je 0x1003371b
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0x76f
mov eax, dword [ebp - 0x10]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x1c], ecx
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x1003374d
mov ecx, edi
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp ecx, 0xe5077045
sbb eax, eax
add eax, 0x15b2a60a
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x83c]
neg eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x10]
cmp eax, edi
setge cl
xor eax, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x28], 0x5d09ea9
mov dword [ebp - 0x10], 0xb457102d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100337c9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa60], 0x1b3c692b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100337b1
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x100337eb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1300], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100337d2
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10033802
push eax
push 0x218c
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
xor eax, eax
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], eax
jl 0x10033872
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10033836
push eax
push 0x13d0
push 0x25c2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0xa60], 0
je 0x1003385a
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa60]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa60]
mov eax, dword [ebp - 0x10]
push 0
mov eax, dword [ebp + eax*4 - 0xa60]
mov dword [ebp - 0x12fc], edi
dec dword [ebp - 0x10]
pop eax
jns 0x1003380e
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x30], 0x3fa75c1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1003389e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xac], 0xc58a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10033885
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x100338b4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x840], 0x3cef3392
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100338a3
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
xor eax, eax
cmp dword [ebp - 0x30], eax
jne 0x100338ce
cmp eax, dword [ebp - 0xa8]
je 0x100338de
mov eax, edi
cmp eax, dword [ebp - 0xa8]
je 0x100338de
mov eax, dword [ebp - 0xac]
xor eax, eax
cmp dword [ebp - 0xa8], eax
je 0x10033923
cmp dword [ebp - 0xac], eax
je 0x10033923
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xa8]
je 0x10033914
xor eax, eax
cmp dword [ebp - 0xa8], eax
je 0x10033916
mov eax, edi
add eax, 0x3fc2
je 0x10033923
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x840], 0x6a08376f
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x1003395c
push 0x23b7
push 0x1054
push eax
push 0x2f2
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10035845
jmp 0x1003396c
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x30], eax
jmp 0x10033985
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x74], 2
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x10033977
mov dword [ebp - 0x74], 0xfffffff0
jmp 0x10033a87
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x40], 0x4bab
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x74]
sub edx, 0x51ebf0dd
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x74]
setle cl
xor edx, edx
cmp ecx, 0x93e7
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setne cl
xor edx, edx
cmp ecx, 5
setne dl
neg eax
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 0x45ac
setg al
sub eax, 7
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x10]
jl 0x10033a07
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x10033a09
mov eax, edi
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x1c]
imul ecx, eax
mov eax, dword [ebp - 0x10]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10033a38
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x3c]
xor eax, eax
imul ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
cmp ecx, 0x217c7128
setge al
mov dword [ebp - 0x3c], eax
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x10033a61
mov edx, eax
cmp dword [ebp - 0x1c], eax
je 0x10033a63
mov edx, edi
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp edx, eax
sete cl
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
cmp eax, 0x27815014
setne cl
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x74]
cmp dword [ebp - 0x74], 0xffffffe4
jne 0x10033996
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10033aa7
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
xor eax, eax
mov dword [ebp - 0x10], 0xad313dd3
mov dword [ebp - 0x40], 0xc56e700d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xc
jle 0x10033b7d
jmp 0x10033ac6
xor eax, eax
mov dword [ebp - 0x1c], 0xa5ef
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jge 0x10033af7
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x162c], 0x57f451d5
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10033adf
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x10033b16
push 0x1141
push eax
push 0x27c
push 0x19f9
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x1628], ecx
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
sete dl
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setne al
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x1c], ecx
je 0x10033b5b
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x10], eax
je 0x10033b5d
mov ecx, edi
mov eax, dword [ebp - 0x10]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xc
jg 0x10033ac4
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x908]
cmp eax, dword [ebp - 0x28]
je 0x10033b97
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10033b99
mov ecx, edi
jmp 0x10033b9b
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x28]
xor edx, edx
push ebx
mov eax, dword [ebp + eax*4 - 0x908]
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x908]
cmp eax, esi
setl cl
xor eax, eax
neg ecx
cmp ecx, edx
setl al
xor ecx, ecx
cmp eax, 0x693009c
mov eax, dword [ebp - 0x28]
setl cl
mov eax, dword [ebp + eax*4 - 0x908]
add ecx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x908], ecx
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x528]
call fcn.1001740b
xor eax, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x30], eax
jmp 0x10033c17
push dword [ebp - 0x30]
call fcn.100174a9
mov dword [eax], 0x540d7f82
inc dword [ebp - 0x30]
lea ecx, [ebp - 0x528]
cmp dword [ebp - 0x30], ebx
jl 0x10033c06
push edi
call fcn.100174a9
mov dword [eax], 0x1d
jmp 0x10033c5c
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10033c4e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
push edi
lea ecx, [ebp - 0x528]
call fcn.100174a9
dec dword [eax]
push edi
lea ecx, [ebp - 0x528]
call fcn.100174a9
cmp dword [eax], 0x1c
jge 0x10033c30
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10033c7d
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
lea ecx, [ebp - 0x528]
mov dword [ebp - 4], esi
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x3c], eax
jmp 0x10035833
push 2
lea ecx, [ebp - 0x1d4]
call fcn.1001740b
mov dword [ebp - 4], 0xc
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x230], eax
xor eax, eax
mov dword [ebp - 0x40], 0xdb255963
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10033cf5
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1d4]
call fcn.100174a9
mov dword [eax], 7
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10033cd6
xor eax, eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], edi
jg 0x10034020
jmp 0x10033d0b
xor eax, eax
mov dword [ebp - 0x20], eax
lea ecx, [ebp - 0x690]
mov dword [ebp - 0x4c], 0xf748dc16
push edi
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], edi
jge 0x10033d4d
push dword [ebp - 0x30]
lea ecx, [ebp - 0x690]
call fcn.100174a9
mov dword [eax], 9
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], edi
jl 0x10033d2f
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10033f3b
mov dword [ebp - 0x10], 0xe0c863cc
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x40], 0x4c77a5c6
mov dword [ebp - 0x40], 0xda53d1e
push dword [ebp - 0x20]
call fcn.100174a9
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x230]
cmp eax, esi
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x4c], 0x16
cmp dword [ebp - 0x4c], 0xfffffff5
jne 0x10033f38
mov dword [ebp - 0x1c], 0x314d41bd
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 0x38], 0x3ede5c48
push dword [ebp - 0x20]
call fcn.100174a9
xor ecx, ecx
cmp dword [eax], 0x63f6d1d8
setl cl
xor eax, eax
cmp dword [ebp - 0x230], ecx
jl 0x10033de8
mov esi, edi
cmp dword [ebp - 0x1c], eax
jne 0x10033dea
mov esi, eax
push eax
lea ecx, [ebp - 0x690]
call fcn.100174a9
mov ecx, 0xe9e5a939
mov dword [eax], esi
mov eax, dword [ebp - 0x230]
cmp ecx, eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, esi
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
imul ecx, ecx, 0xfffffffb
cmp ecx, eax
setg dl
mov dword [ebp - 0x38], edx
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setg dl
xor eax, eax
sub edx, dword [ebp - 0x4c]
imul edx, dword [ebp - 0x234]
test edx, edx
je 0x10033e75
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
je 0x10033e5c
push edi
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
push edi
lea ecx, [ebp - 0x1d4]
call fcn.100174a9
cmp dword [eax], 0
jne 0x10033f35
xor eax, eax
jmp 0x10033e7e
cmp dword [ebp - 0x38], eax
jne 0x10033f35
mov dword [ebp - 0x10], eax
jmp 0x10033f1f
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1d4]
call fcn.100174a9
mov eax, dword [ebp - 0x234]
lea ecx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x10]
call fcn.100174a9
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1d4]
mov esi, eax
call fcn.100174a9
mov ecx, dword [eax]
add ecx, dword [esi]
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x1d4]
push dword [ebp - 0x10]
call fcn.100174a9
mov edx, dword [ebp - 0x40]
mov esi, eax
mov ecx, dword [ebp - 0x10]
xor eax, eax
push dword [ebp - 0x20]
cmp edx, ecx
setg al
xor ecx, ecx
cmp eax, dword [esi]
setge cl
cmp ecx, 0xdfeb077c
lea ecx, [ebp - 0x1d4]
sbb esi, esi
inc esi
call fcn.100174a9
mov ecx, dword [ebp - 0x20]
xor edx, edx
cmp esi, ecx
setge dl
xor ecx, ecx
cmp dword [eax], edx
setne cl
xor eax, eax
cmp ecx, 0xffffffff
setl al
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x10033e86
dec dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0xfffffff5
je 0x10033db0
or esi, 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jle 0x10033d55
mov dword [ebp - 0x4c], 0xffffffe6
jmp 0x10033ff5
mov dword [ebp - 0x1c], 0xf46a
mov dword [ebp - 0x40], 0xb70f7348
mov dword [ebp - 0x40], 0xfffffffb
mov eax, dword [ebp - 0x23c]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10033f9c
push eax
lea ecx, [ebp - 0x690]
call fcn.100174a9
cmp dword [eax], 0
jne 0x10033f97
xor eax, eax
lea ecx, [ebp - 0x690]
push eax
call fcn.100174a9
mov dword [eax], 0xfa6f
xor eax, eax
cmp dword [ebp - 0x20], eax
jl 0x10033fa6
cmp dword [ebp - 0x230], eax
je 0x10033fa9
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1d4]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
xor eax, eax
mov dword [ebp - 0x40], edi
push eax
call fcn.100174a9
mov ecx, dword [ebp - 0x40]
mov edx, 0xfffa
cmp edx, ecx
sbb ecx, ecx
neg ecx
sub ecx, dword [eax]
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x690]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0xffffffed
jge 0x10033f50
lea ecx, [ebp - 0x690]
mov byte [ebp - 4], 0xc
call fcn.1001748d
inc dword [ebp - 0x230]
cmp dword [ebp - 0x230], edi
jle 0x10033d09
lea ecx, [ebp - 0x1d4]
mov dword [ebp - 4], esi
call fcn.1001748d
xor eax, eax
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 0x38], eax
push 2
call fcn.1001740b
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0xe1c]
mov dword [ebp - 0x24], esi
push 2
call fcn.1001740b
mov byte [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1003408c
push dword [ebp - 0x30]
lea ecx, [ebp - 0xe1c]
call fcn.100174a9
mov dword [eax], 7
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x1003406d
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1003409e
push eax
call dword [sym.imp.GDI32.dll_CreatePalette]
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x100340e4
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], eax
jl 0x100340f5
mov dword [ebp - 0x1c], 0x891f782a
mov dword [ebp - 0x1c], edi
cmp dword [ebp - 0x1c], eax
jl 0x100340dd
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x100340d8
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_DialogBoxParamA]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x100340ba
dec dword [ebp - 0x24]
jns 0x100340ab
jmp 0x100340f5
push eax
lea ecx, [ebp - 0xe1c]
call fcn.100174a9
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xe1c]
mov byte [ebp - 4], 0xe
call fcn.1001748d
mov dword [ebp - 0x10], 0xfffffff6
lea ecx, [ebp - 0xc0c]
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0xf80], esi
push 4
mov dword [ebp - 0xf7c], esi
pop eax
mov dword [ebp - 0xf78], esi
mov dword [ebp - 0xf74], esi
mov dword [ebp - 0x40], esi
push eax
call fcn.1001740b
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x40], 0xb06f8616
mov dword [ebp - 0x30], eax
jmp 0x10034165
push dword [ebp - 0x30]
lea ecx, [ebp - 0xc0c]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x30]
push 4
pop eax
cmp dword [ebp - 0x30], eax
jl 0x10034151
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
cmp edx, 0xa907865e
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, 0x1255325e
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setg cl
xor edx, edx
add ecx, 0xfffffffb
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, 0x95b
setne cl
xor edx, edx
cmp ecx, eax
setne dl
sub edx, dword [ebp - 0x10]
dec edx
cmp edx, 8
jbe 0x100341d2
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x10], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x10034200
cmp dword [ebp - 0x44], eax
je 0x10034200
mov ecx, edi
cmp dword [ebp - 0x4c], eax
jne 0x10034202
mov ecx, eax
mov eax, 0x7dd4094c
sub eax, ecx
neg eax
push 2
sbb eax, eax
inc eax
add eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, esi
setge dl
xor ecx, ecx
mov dword [ebp - 0xf80], edx
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, 0x19d6b80f
lea ecx, [ebp - 0xc0c]
setle al
mov dword [ebp - 0x40], eax
call fcn.100174a9
mov edx, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x40]
sub edx, dword [eax]
mov eax, dword [ebp - 0x4c]
add eax, edx
add ecx, eax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0xc0c]
mov byte [ebp - 4], 0xe
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10034293
push dword [ebp - 0x30]
lea ecx, [ebp - 0xe7c]
call fcn.100174a9
mov dword [eax], 0x93046aa1
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 2
jl 0x10034274
xor eax, eax
mov dword [ebp - 0x24], 0x4fd3df75
mov dword [ebp - 0x34], 0x57478144
mov dword [ebp - 0x24], eax
jmp 0x100342c2
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x30], eax
jmp 0x100342b9
mov dword [ebp - 0x40], esi
cmp dword [ebp - 0x40], eax
jne 0x100342bf
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xffffffec
jne 0x100342ae
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
je 0x100342a6
mov dword [ebp - 0x38], eax
jmp 0x10035819
mov dword [ebp - 0x1c], 0xfffffff9
lea ecx, [ebp - 0xa78]
push 4
mov dword [ebp - 0x44], 0xae5a60d0
pop eax
mov dword [ebp - 0x34], 0x7f37c04c
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x30], esi
push eax
call fcn.1001740b
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x4c], 0x5fb26c4f
mov dword [ebp - 0x24], 0xbff5ecce
push 4
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10034347
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa78]
call fcn.100174a9
push 4
mov dword [eax], 0xb4e94f93
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10034326
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1003435d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x51c], 0x992db756
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003434c
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
test eax, eax
je 0x100343dc
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x51c], eax
xor eax, eax
cmp dword [ebp - 0x518], eax
je 0x100343b2
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x51c]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x30], eax
jle 0x100343a5
push edi
lea ecx, [ebp - 0xa78]
call fcn.100174a9
cmp dword [eax], 0
je 0x100343b0
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x100343b0
mov ecx, edi
jmp 0x100343b4
xor eax, eax
mov ecx, eax
dec dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x51c]
cmp eax, ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x4c]
setge dl
add eax, edx
add ecx, eax
xor eax, eax
cmp ecx, 0x22f8
setl al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0xa78]
mov eax, dword [ebp - 0x40]
xor eax, eax
push eax
call fcn.100174a9
mov ecx, dword [ebp - 0x44]
mov byte [ebp - 4], 0xe
mov dword [eax], ecx
lea ecx, [ebp - 0xa78]
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x34], 0x97a888ad
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], 0xf
jmp 0x10034452
mov dword [ebp - 0x40], 0xb5a5efa2
dec dword [ebp - 0x40]
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], 0
je 0x1003444f
push 0x22bc
push 0x15f6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 5
jle 0x10034423
movdqa xmm0, xmmword [0x10007b30]
lea eax, [ebp - 0x1488]
push eax
lea eax, [ebp - 0x1498]
push eax
lea ecx, [ebp - 0x1650]
movdqu xmmword [ebp - 0x1498], xmm0
call fcn.100174b8
lea ecx, [ebp - 0x215]
mov esi, eax
call fcn.10008b33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x350]
push dword [esi]
call fcn.10017467
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x350]
xor eax, eax
mov dword [ebp - 0x24], 0xfffffffb
push eax
mov dword [ebp - 0x44], 0x7f95e19f
call fcn.100174a9
lea ecx, [ebp - 0x350]
and dword [eax], 0
xor eax, eax
push eax
call fcn.100174a9
cmp dword [eax], 0xffffffeb
jg 0x1003461b
mov dword [ebp - 0x4c], 0xbd7b1c2a
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0xf20], eax
mov dword [ebp - 0xf1c], eax
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0x4c], 0xfffffff6
jmp 0x100345db
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x4c], eax
jne 0x100345e5
push eax
lea ecx, [ebp - 0x350]
call fcn.100174a9
xor ebx, ebx
cmp dword [eax], ebx
jne 0x10034552
push 3
lea ecx, [ebp - 0x350]
call fcn.100174a9
cmp dword [eax], ebx
jne 0x10034552
mov esi, edi
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setne dl
add edx, 0xd8d9
jne 0x10034570
cmp dword [ebp - 0x4c], 0x19
jg 0x10034511
xor eax, eax
mov byte [ebp - 0x29], al
cmp byte [ebp - 0x29], al
jne 0x10035855
push eax
lea ecx, [ebp - 0x350]
call fcn.100174a9
lea ecx, [ebp - 0x350]
dec dword [eax]
xor eax, eax
push eax
call fcn.100174a9
cmp dword [eax], 0xffffffeb
jle 0x100344d9
lea ecx, [ebp - 0x350]
mov byte [ebp - 4], 0xe
call fcn.1001748d
xor eax, eax
mov dword [ebp - 0x30], eax
jmp 0x10034642
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6a8], 0x973063d6
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], ebx
jl 0x10034631
push 2
pop ebx
mov dword [ebp - 0x10], 0xa439beb0
lea ecx, [ebp - 0xa90]
mov dword [ebp - 0x1c], 0xa124
push ebx
call fcn.1001740b
mov byte [ebp - 4], 0x13
xor eax, eax
mov dword [ebp - 0x34], 5
mov dword [ebp - 0x40], 0x634d71b3
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10034698
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xaf8], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10034680
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100346be
cmp dword [ebp - 0x38], ebx
jle 0x100342d0
lea ecx, [ebp - 0xe7c]
mov dword [ebp - 4], esi
call fcn.1001748d
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ebx
jle 0x10033c95
dec dword [ebp - 0x28]
jns 0x1003396a
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffc
jg 0x10035860
xor eax, eax
jmp 0x100336d2
push 0x19f3
call dword [sym.imp.KERNEL32.dll_ExitThread]
movdqa xmm0, xmmword [0x10007b20]
lea eax, [ebp - 0x1588]
push eax
lea eax, [ebp - 0x1598]
push eax
lea ecx, [ebp - 0x1670]
movdqu xmmword [ebp - 0x1598], xmm0
call fcn.100174b8
lea ecx, [ebp - 0x217]
mov esi, eax
call fcn.10008b33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x794]
push dword [esi]
call fcn.10017467
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0x10], 0x15cbcef0
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], 0x3fc4b03e
mov dword [ebp - 0x44], ebx
push ebx
call fcn.1001740b
mov byte [ebp - 4], 0x22
xor eax, eax
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100358fb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c0], 0xc6f1bf50
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100358e3
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035920
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8b8]
call fcn.100174a9
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035903
xor eax, eax
mov dword [ebp - 0x6b8], ebx
cmp dword [ebp - 0x6b8], eax
jl 0x10035c26
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 0xd8c5
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0xf746b325
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1003596c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc3c], 2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035954
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10035988
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x49c], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10035974
xor eax, eax
dec dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jg 0x10035c1a
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x40c]
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100359d2
push dword [ebp - 0x18]
lea ecx, [ebp - 0x40c]
call fcn.100174a9
mov dword [eax], 0xd2c643d4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100359b4
xor eax, eax
cmp dword [ebp - 0x6b8], eax
jne 0x10035a1c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x794]
call fcn.100174a9
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
add eax, 0xfffffffd
jne 0x100359fc
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x794]
call fcn.100174a9
push ebx
lea ecx, [ebp - 0x8b8]
call fcn.100174a9
mov eax, dword [ebp - 0x6b8]
mov eax, dword [ebp - 0xc34]
lea ecx, [ebp - 0x8b8]
xor ebx, ebx
cmp eax, 0xe6c1cc49
push 2
setne bl
call fcn.100174a9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x794]
mov dword [eax], ebx
call fcn.100174a9
push edi
lea ecx, [ebp - 0x40c]
mov eax, dword [eax]
add eax, ebx
xor ebx, ebx
cmp eax, 0xd1c
setne bl
call fcn.100174a9
push 3
mov dword [eax], ebx
xor eax, eax
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10035bfd
mov dword [ebp - 0x1c], 0x420a61b3
mov dword [ebp - 0x3c], 0x56b7
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10035a9b
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x10035a9d
mov ecx, edi
xor eax, eax
cmp ecx, 0x33df
setge al
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0xc34]
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x10035ac2
mov ecx, eax
cmp dword [ebp - 0x24], eax
je 0x10035ac4
mov ecx, edi
mov eax, dword [ebp - 0x30]
sub ecx, eax
imul ecx, dword [ebp - 0x49c]
xor eax, eax
push edi
cmp ecx, 0x1489
lea ecx, [ebp - 0x40c]
setl al
mov dword [ebp - 0x40], eax
call fcn.100174a9
mov ecx, dword [ebp - 0x40]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x40c]
setl bl
xor eax, eax
push eax
call fcn.100174a9
push dword [ebp - 0x10]
xor ecx, ecx
cmp ebx, dword [eax]
setle cl
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0x794]
call fcn.100174a9
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp dword [ebp - 0x58], ecx
push 2
setg dl
xor ecx, ecx
cmp edx, 0xd055
setl cl
xor edx, edx
cmp ecx, 4
lea ecx, [ebp - 0x8b8]
setle dl
xor ebx, ebx
cmp dword [eax], edx
sete bl
call fcn.100174a9
push edi
lea ecx, [ebp - 0x40c]
mov dword [eax], ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
call fcn.100174a9
mov ecx, dword [ebp - 0x28]
xor edx, edx
test ecx, ecx
push edi
setle dl
cmp edx, 5
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
setg dl
xor ecx, ecx
cmp edx, 0x19de87a9
setge cl
xor eax, eax
cmp ecx, 0xea62
lea ecx, [ebp - 0x40c]
setg al
cmp eax, 0xfffffff9
sbb esi, esi
neg esi
call fcn.100174a9
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x49c]
setl dl
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
add ecx, 0x1a4633be
cmp ecx, 0x548e
setle al
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10035be0
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
jne 0x10035855
jmp 0x10035bf1
push edi
lea ecx, [ebp - 0x40c]
call fcn.100174a9
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x18]
jns 0x10035a76
push 3
pop ebx
lea ecx, [ebp - 0x40c]
mov byte [ebp - 4], 0x22
call fcn.1001748d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x10035997
xor eax, eax
dec dword [ebp - 0x6b8]
jns 0x10035932
lea ecx, [ebp - 0x8b8]
call fcn.1001748d
or eax, 0xffffffff
lea ecx, [ebp - 0x794]
mov dword [ebp - 4], eax
call fcn.1001748d
movdqa xmm0, xmmword [0x10007b20]
lea ecx, [ebp - 0x1680]
xor eax, eax
mov byte [ebp - 0x29], al
lea eax, [ebp - 0x13a8]
push eax
lea eax, [ebp - 0x13b8]
push eax
movdqu xmmword [ebp - 0x13b8], xmm0
call fcn.100174b8
lea ecx, [ebp - 0x218]
mov esi, eax
call fcn.10008b33
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x7ac]
push dword [esi]
call fcn.10017467
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0x84c]
mov dword [ebp - 0x10], 0x15cbcef0
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x38], 0x3fc4b03e
mov dword [ebp - 0x44], ebx
push ebx
call fcn.1001740b
mov byte [ebp - 4], 0x25
xor eax, eax
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035ce2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6d8], 0xc6f1bf50
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035cca
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035d07
push dword [ebp - 0x10]
lea ecx, [ebp - 0x84c]
call fcn.100174a9
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035cea
xor eax, eax
mov dword [ebp - 0x6d0], ebx
cmp dword [ebp - 0x6d0], eax
jl 0x1003600d
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 0xd8c5
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x28], 0xf746b325
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10035d53
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd8c], 2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10035d3b
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10035d6f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x450], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10035d5b
xor eax, eax
dec dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jg 0x10036001
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x3cc]
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10035db9
push dword [ebp - 0x18]
lea ecx, [ebp - 0x3cc]
call fcn.100174a9
mov dword [eax], 0xd2c643d4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10035d9b
xor eax, eax
cmp dword [ebp - 0x6d0], eax
jne 0x10035e03
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7ac]
call fcn.100174a9
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
add eax, 0xfffffffd
jne 0x10035de3
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7ac]
call fcn.100174a9
push ebx
lea ecx, [ebp - 0x84c]
call fcn.100174a9
mov eax, dword [ebp - 0x6d0]
mov eax, dword [ebp - 0xd84]
lea ecx, [ebp - 0x84c]
xor ebx, ebx
cmp eax, 0xe6c1cc49
push 2
setne bl
call fcn.100174a9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7ac]
mov dword [eax], ebx
call fcn.100174a9
push edi
lea ecx, [ebp - 0x3cc]
mov eax, dword [eax]
add eax, ebx
xor ebx, ebx
cmp eax, 0xd1c
setne bl
call fcn.100174a9
push 3
mov dword [eax], ebx
xor eax, eax
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10035fe4
mov dword [ebp - 0x1c], 0x420a61b3
mov dword [ebp - 0x3c], 0x56b7
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x38], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x10035e82
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x10035e84
mov ecx, edi
xor eax, eax
cmp ecx, 0x33df
setge al
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0xd84]
xor eax, eax
cmp dword [ebp - 0x3c], eax
jne 0x10035ea9
mov ecx, eax
cmp dword [ebp - 0x24], eax
je 0x10035eab
mov ecx, edi
mov eax, dword [ebp - 0x30]
sub ecx, eax
imul ecx, dword [ebp - 0x450]
xor eax, eax
push edi
cmp ecx, 0x1489
lea ecx, [ebp - 0x3cc]
setl al
mov dword [ebp - 0x40], eax
call fcn.100174a9
mov ecx, dword [ebp - 0x40]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x3cc]
setl bl
xor eax, eax
push eax
call fcn.100174a9
push dword [ebp - 0x10]
xor ecx, ecx
cmp ebx, dword [eax]
setle cl
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0x7ac]
call fcn.100174a9
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp dword [ebp - 0x58], ecx
push 2
setg dl
xor ecx, ecx
cmp edx, 0xd055
setl cl
xor edx, edx
cmp ecx, 4
lea ecx, [ebp - 0x84c]
setle dl
xor ebx, ebx
cmp dword [eax], edx
sete bl
call fcn.100174a9
push edi
lea ecx, [ebp - 0x3cc]
mov dword [eax], ebx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
call fcn.100174a9
mov ecx, dword [ebp - 0x28]
xor edx, edx
test ecx, ecx
push edi
setle dl
cmp edx, 5
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [eax]
setg dl
xor ecx, ecx
cmp edx, 0x19de87a9
setge cl
xor eax, eax
cmp ecx, 0xea62
lea ecx, [ebp - 0x3cc]
setg al
cmp eax, 0xfffffff9
sbb esi, esi
neg esi
call fcn.100174a9
xor edx, edx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x450]
setl dl
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
add ecx, 0x1a4633be
cmp ecx, 0x548e
setle al
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10035fc7
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
jne 0x10035855
jmp 0x10035fd8
push edi
lea ecx, [ebp - 0x3cc]
call fcn.100174a9
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x18]
jns 0x10035e5d
push 3
pop ebx
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 0x25
call fcn.1001748d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x10035d7e
xor eax, eax
dec dword [ebp - 0x6d0]
jns 0x10035d19
lea ecx, [ebp - 0x84c]
call fcn.1001748d
or esi, 0xffffffff
lea ecx, [ebp - 0x7ac]
mov dword [ebp - 4], esi
call fcn.1001748d
cmp byte [ebp - 0x29], 0
je 0x100363dd
push ebx
lea ecx, [ebp - 0x270]
call fcn.1001740b
mov dword [ebp - 4], 0x27
xor eax, eax
mov dword [ebp - 0x28], 0xfffffffd
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x48], 7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10036086
push dword [ebp - 0x18]
lea ecx, [ebp - 0x270]
call fcn.100174a9
mov dword [eax], 0xff606579
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10036068
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x100363bc
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xf0]
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0x28
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100360ce
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf0]
call fcn.100174a9
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100360b0
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100360f6
push eax
push 0x1dfb
push eax
push 0x23d0
push 0x12ee
push eax
push 0x230c
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
xor eax, eax
push eax
lea ecx, [ebp - 0xf0]
call fcn.100174a9
and dword [eax], 0
jmp 0x10036385
mov dword [ebp - 0x3c], edi
lea ecx, [ebp - 0x270]
push dword [ebp - 0x28]
call fcn.100174a9
mov eax, dword [eax]
neg eax
je 0x1003618c
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
lea ecx, [ebp - 0x270]
push dword [eax]
call fcn.100174a9
xor ebx, ebx
cmp dword [eax], ebx
jne 0x10036145
mov eax, dword [ebp - 0x28]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x270]
call fcn.100174a9
xor ecx, ecx
cmp dword [eax], ebx
setne cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0xf0]
mov eax, dword [ebp - 0x3c]
xor eax, eax
push eax
call fcn.100174a9
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
lea ecx, [ebp - 0x270]
push dword [eax]
call fcn.100174a9
push 2
pop ebx
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
lea ecx, [ebp - 0x270]
push dword [eax]
call fcn.100174a9
push ebx
lea ecx, [ebp - 0x270]
mov esi, eax
call fcn.100174a9
mov ecx, dword [eax]
neg ecx
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, dword [esi]
jne 0x10036309
mov dword [ebp - 0x10], 0xffff
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x24], 0xf314d41b
push eax
call fcn.100174a9
lea ecx, [ebp - 0x270]
push dword [eax]
call fcn.100174a9
push edi
lea ecx, [ebp - 0xf0]
call fcn.100174a9
mov eax, dword [ebp - 0x44]
xor eax, eax
cmp dword [ebp - 0x44], eax
jne 0x1003621d
push eax
lea ecx, [ebp - 0xf0]
call fcn.100174a9
cmp dword [eax], 0
jne 0x1003621d
xor eax, eax
mov esi, eax
jmp 0x10036221
mov esi, edi
xor eax, eax
push eax
lea ecx, [ebp - 0xf0]
call fcn.100174a9
cmp dword [eax], esi
je 0x1003623c
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1003623e
mov ecx, edi
jmp 0x10036240
xor eax, eax
mov ecx, eax
neg ecx
xor eax, eax
cmp ecx, 0xfffffff6
setg al
xor ecx, ecx
cmp eax, 0xfffffff9
setge cl
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x10]
cmp ecx, eax
jge 0x10036263
mov eax, edi
jmp 0x10036265
xor eax, eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x3c], eax
or ecx, 0xffffffff
jmp 0x100362fe
mov dword [ebp - 0x40], 0x403e1fe0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jg 0x100362fb
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x270]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
push dword [ebp - 0x10]
call fcn.100174a9
mov ecx, dword [ebp - 0x48]
xor ebx, ebx
add ecx, dword [eax]
cmp ecx, 0x6fcd
lea ecx, [ebp - 0xf0]
setge bl
xor eax, eax
push eax
call fcn.100174a9
mov ecx, dword [ebp - 0x24]
mov esi, eax
xor eax, eax
cmp ebx, ecx
push 2
sete al
xor edx, edx
add eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x40]
cmp eax, ecx
pop ebx
setne dl
xor ecx, ecx
test edx, edx
push 0xffffffffffffffff
setle cl
xor eax, eax
cmp ecx, dword [esi]
pop ecx
setl al
mov dword [ebp - 0x48], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x1003628a
xor eax, eax
or ecx, ecx
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ecx
je 0x1003627b
jmp 0x1003633d
mov dword [ebp - 0x44], eax
jmp 0x10036338
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036324
push 0x895
call dword [sym.imp.GDI32.dll_GetStockObject]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036335
call dword [sym.imp.USER32.dll_GetCapture]
xor eax, eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jle 0x1003630e
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
lea ecx, [ebp - 0x270]
push dword [eax]
call fcn.100174a9
mov esi, eax
lea ecx, [ebp - 0xf0]
xor eax, eax
push eax
call fcn.100174a9
xor ecx, ecx
cmp dword [eax], 0xfffffff9
setg cl
xor eax, eax
add ecx, dword [esi]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0xf0]
push eax
call fcn.100174a9
cmp dword [eax], ebx
jle 0x1003610a
lea ecx, [ebp - 0xf0]
mov byte [ebp - 4], 0x27
call fcn.1001748d
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jle 0x10036096
push 3
pop ebx
or esi, 0xffffffff
lea ecx, [ebp - 0x270]
mov dword [ebp - 4], esi
call fcn.1001748d
push 0xcd8
push 0xc9d
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov dword [ebp - 0x10], 0x13dd33a4
lea ecx, [ebp - 0x934]
push edi
call fcn.1001740b
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0xc54]
mov dword [ebp - 0x1c], 0xe507
push edi
call fcn.1001740b
mov byte [ebp - 4], 0x2a
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10036436
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xad8], 0xd97a888a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003641e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003645c
push dword [ebp - 0x20]
lea ecx, [ebp - 0x934]
call fcn.100174a9
mov dword [eax], 0x26128f3b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1003643e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003647f
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc54]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10036464
xor eax, eax
mov dword [ebp - 0x10], 0xfffffff7
jmp 0x100364be
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], eax
jmp 0x100364b5
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100364b2
push 0xc7b
push 0x815
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10036490
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x15
jge 0x10036488
cmp dword [ebp - 0x10], eax
jne 0x10036541
inc dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xad4]
cmp eax, ecx
mov eax, dword [ebp - 0xad0]
setne dl
xor ebx, ebx
cmp edx, 2
setl bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor eax, eax
cmp ecx, dword [ebp - 0xad4]
jge 0x10036502
mov esi, edi
cmp dword [ebp - 0x1c], eax
jne 0x10036504
mov esi, eax
push eax
lea ecx, [ebp - 0x934]
call fcn.100174a9
xor ecx, ecx
cmp esi, dword [eax]
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xc54]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0xfffffff8
setle cl
cmp ecx, dword [ebp - 0x48]
je 0x10036541
xor eax, eax
mov esi, eax
jmp 0x10036545
mov esi, edi
xor eax, eax
push eax
lea ecx, [ebp - 0x934]
call fcn.100174a9
mov edx, dword [ebp - 0x38]
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0xad4]
setne cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xc54]
call fcn.1001748d
or ebx, 0xffffffff
lea ecx, [ebp - 0x934]
mov dword [ebp - 4], ebx
call fcn.1001748d
mov dword [ebp - 0x10], 0x13dd33a4
lea ecx, [ebp - 0xa9c]
push edi
call fcn.1001740b
mov dword [ebp - 4], 0x2b
lea ecx, [ebp - 0xe34]
mov dword [ebp - 0x1c], 0xe507
push edi
call fcn.1001740b
mov byte [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100365e5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xaf0], 0xd97a888a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100365cc
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003660b
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa9c]
call fcn.100174a9
mov dword [eax], 0x26128f3b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x100365ed
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003662e
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe34]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10036613
xor eax, eax
mov dword [ebp - 0x10], 0xfffffff7
jmp 0x1003666d
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x18], eax
jmp 0x10036664
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036661
push 0xc7b
push 0x815
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x1003663f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x15
jge 0x10036637
cmp dword [ebp - 0x10], eax
jne 0x100366f0
inc dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xaec]
cmp eax, ecx
mov eax, dword [ebp - 0xae8]
setne dl
xor ebx, ebx
cmp edx, 2
setl bl
xor ecx, ecx
cmp ebx, eax
setle cl
xor eax, eax
cmp ecx, dword [ebp - 0xaec]
jge 0x100366b1
mov esi, edi
cmp dword [ebp - 0x1c], eax
jne 0x100366b3
mov esi, eax
push eax
lea ecx, [ebp - 0xa9c]
call fcn.100174a9
xor ecx, ecx
cmp esi, dword [eax]
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xe34]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp eax, 0xfffffff8
setle cl
cmp ecx, dword [ebp - 0x48]
je 0x100366f0
xor eax, eax
mov esi, eax
jmp 0x100366f4
mov esi, edi
xor eax, eax
push eax
lea ecx, [ebp - 0xa9c]
call fcn.100174a9
mov edx, dword [ebp - 0x38]
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0xaec]
setne cl
imul edx, ecx
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xe34]
call fcn.1001748d
or eax, 0xffffffff
lea ecx, [ebp - 0xa9c]
mov dword [ebp - 4], eax
call fcn.1001748d
mov dword [ebp - 0x40], 0xffff
lea ecx, [ebp - 0x4a8]
mov esi, 0x874b28e
xor eax, eax
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x34], 0xf07c70ab
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x24], edi
push 2
mov dword [ebp - 0x34], 0x714ffd81
pop ebx
mov dword [ebp - 0x34], 0x74579933
mov dword [ebp - 0x30], 0x5e495761
mov dword [ebp - 0x58], 0xfffffffb
push ebx
call fcn.1001740b
mov dword [ebp - 4], 0x2d
xor eax, eax
mov dword [ebp - 0x1c], 0x537c
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x3c], 0x6717
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x18], eax
jmp 0x100367b6
push dword [ebp - 0x18]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x18]
lea ecx, [ebp - 0x4a8]
cmp dword [ebp - 0x18], ebx
jl 0x100367a8
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
dec dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
push edi
call fcn.100174a9
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x4a8]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x4a8]
mov eax, dword [ebp - 0x3c]
push edi
call fcn.100174a9
cmp dword [eax], 0
je 0x10036804
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x4a8]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4a8]
xor eax, eax
push eax
call fcn.100174a9
mov ebx, dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [eax], edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x1003684a
push 0x118b
push eax
push eax
call ebx
or eax, 0xffffffff
lea ecx, [ebp - 0x4a8]
mov dword [ebp - 4], eax
call fcn.1001748d
mov dword [ebp - 0x40], 0xffff
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 0x54], esi
xor eax, eax
mov dword [ebp - 0x34], 0xf07c70ab
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], 0x714ffd81
mov dword [ebp - 0x34], 0x74579933
mov dword [ebp - 0x30], 0x5e495761
mov dword [ebp - 0x58], 0xfffffffb
push 2
call fcn.1001740b
mov dword [ebp - 4], 0x2e
xor eax, eax
mov dword [ebp - 0x1c], 0x537c
mov dword [ebp - 0x38], 0xfffffffc
push 2
mov dword [ebp - 0x3c], 0x6717
pop ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x100368e3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4e4]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100368c9
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x4e4]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
dec dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
push edi
call fcn.100174a9
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x4e4]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x4e4]
mov eax, dword [ebp - 0x3c]
push edi
call fcn.100174a9
cmp dword [eax], 0
je 0x1003692c
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x4e4]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4e4]
xor eax, eax
push eax
call fcn.100174a9
mov dword [eax], edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x1003696c
push 0x118b
push eax
push eax
call ebx
or eax, 0xffffffff
lea ecx, [ebp - 0x4e4]
mov dword [ebp - 4], eax
call fcn.1001748d
mov dword [ebp - 0x40], 0xffff
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 0x54], esi
xor eax, eax
mov dword [ebp - 0x34], 0xf07c70ab
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], 0x714ffd81
mov dword [ebp - 0x34], 0x74579933
mov dword [ebp - 0x30], 0x5e495761
mov dword [ebp - 0x58], 0xfffffffb
push 2
call fcn.1001740b
mov dword [ebp - 4], 0x2f
xor eax, eax
mov dword [ebp - 0x1c], 0x537c
mov dword [ebp - 0x38], 0xfffffffc
push 2
mov dword [ebp - 0x3c], 0x6717
pop ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x10036a05
push dword [ebp - 0x18]
lea ecx, [ebp - 0x4b4]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100369eb
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x4b4]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
dec dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
push edi
call fcn.100174a9
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x4b4]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x58]
lea ecx, [ebp - 0x4b4]
mov eax, dword [ebp - 0x3c]
push edi
call fcn.100174a9
cmp dword [eax], 0
je 0x10036a4e
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x4b4]
xor eax, eax
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4b4]
xor eax, eax
push eax
call fcn.100174a9
mov dword [eax], edi
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036a8e
push 0x118b
push eax
push eax
call ebx
or esi, 0xffffffff
lea ecx, [ebp - 0x4b4]
mov dword [ebp - 4], esi
call fcn.1001748d
mov dword [ebp - 0x28], 0xe8cff0ea
xor eax, eax
mov dword [ebp - 0x1c], 0x4acd6ba8
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x13
push 3
pop ebx
jne 0x10036ba2
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x24], 0x80ebbd48
mov dword [ebp - 0x18], eax
jmp 0x10036ae6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1614], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10036ad9
mov eax, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
setl dl
xor eax, eax
cmp edx, 0x98963ec5
setne al
cmp eax, dword [ebp - 0x10]
jne 0x10036b6c
mov dword [ebp - 0x10], 2
xor eax, eax
cmp dword [ebp - 0x10], eax
jl 0x10036b62
mov dword [ebp - 0x24], eax
jmp 0x10036b57
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036b54
push 0x2266
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x10036b36
dec dword [ebp - 0x10]
jns 0x10036b31
cmp dword [ebp - 0x160c], eax
jne 0x10036ba0
jmp 0x10036b90
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036b7f
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036b90
push eax
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x13
push 0
pop eax
je 0x10036ac6
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x10036bcb
mov eax, dword [ebp - 0x28]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setge dl
sub edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, edi
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x18], 0x5c8094a1
mov dword [ebp - 0x34], 7
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10036c0f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1054], 0x9b31
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10036bf7
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10036c56
mov dword [ebp - 0x1c], 0xafd94fe5
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10036c53
mov dword [ebp - 0x34], 0x923607a9
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x40], 0x37bb0086
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10036c4b
push eax
push eax
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
xor eax, eax
dec dword [ebp - 0x40]
dec dword [ebp - 0x1c]
jns 0x10036c23
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jle 0x10036c14
mov dword [ebp - 0x28], 0x13dd33a4
mov dword [ebp - 0x28], 0xa1bf2b29
cmp dword [ebp - 0x28], eax
jne 0x10036c77
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jl 0x10036ce8
push edi
lea ecx, [ebp - 0xc6c]
call fcn.1001740b
xor eax, eax
mov dword [ebp - 4], 0x30
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10036cc0
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc6c]
call fcn.100174a9
mov dword [eax], 0x12af04
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10036ca2
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10036cd3
push dword [ebp - 0x28]
call fcn.100174a9
and dword [eax], 0
inc dword [ebp - 0x28]
lea ecx, [ebp - 0xc6c]
cmp dword [ebp - 0x28], edi
jl 0x10036cc5
mov dword [ebp - 4], esi
call fcn.1001748d
jmp 0x10036cfe
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10036cfe
push 0x11f
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push edi
lea ecx, [ebp - 0x988]
call fcn.1001740b
push 2
lea ecx, [ebp - 0x122c]
mov dword [ebp - 4], 0x31
call fcn.1001740b
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xda4]
xor eax, eax
mov dword [ebp - 0x34], 5
push 4
mov dword [ebp - 0x34], eax
pop eax
mov dword [ebp - 0x34], esi
push eax
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0x33
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10036d68
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x130c], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10036d4f
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10036d90
push dword [ebp - 0x20]
lea ecx, [ebp - 0x122c]
call fcn.100174a9
mov dword [eax], 0x737e0d1b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10036d71
xor eax, eax
push 4
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10036dbc
push dword [ebp - 0x20]
lea ecx, [ebp - 0xda4]
call fcn.100174a9
push 4
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x20]
pop eax
cmp dword [ebp - 0x20], eax
jl 0x10036d9b
xor eax, eax
push eax
lea ecx, [ebp - 0xda4]
call fcn.100174a9
mov ecx, dword [ebp - 0x130c]
add ecx, dword [eax]
xor eax, eax
neg ecx
mov byte [ebp - 0x11], al
je 0x10036de8
cmp byte [ebp - 0x11], al
je 0x10036e08
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x10036e08
cmp byte [ebp - 0x11], al
je 0x10036e08
push eax
push 0x12d7
push 0x1202
push 0x2669
push 0xc0c
call dword [sym.imp.GDI32.dll_CreateBitmap]
lea ecx, [ebp - 0xda4]
call fcn.1001748d
lea ecx, [ebp - 0x122c]
mov byte [ebp - 4], 0x31
call fcn.1001748d
mov dword [ebp - 0x44], 0xe507
lea ecx, [ebp - 0x424]
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x38], 0x37d8e6e8
mov dword [ebp - 0x24], 0x88e1b61b
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x38], 0x51a9
push edi
call fcn.1001740b
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0xc84]
mov dword [ebp - 0x10], 2
mov dword [ebp - 0x54], edi
push ebx
call fcn.1001740b
xor eax, eax
mov byte [ebp - 4], 0x35
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10036e96
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x250], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10036e7d
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10036eb6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x15fc], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10036e9e
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10036ed2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x488], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10036ebe
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10036ef8
push dword [ebp - 0x20]
lea ecx, [ebp - 0x424]
call fcn.100174a9
mov dword [eax], 0xfffffff8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10036eda
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10036f14
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc84]
call fcn.100174a9
mov dword [eax], 0x4ab2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10036efd
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10036f3d
push eax
lea ecx, [ebp - 0x424]
call fcn.100174a9
cmp dword [eax], 0
jne 0x10036f3d
xor eax, eax
mov esi, eax
jmp 0x10036f41
mov esi, edi
xor eax, eax
push eax
lea ecx, [ebp - 0x424]
call fcn.100174a9
xor ecx, ecx
cmp esi, 0xb18
setne cl
cmp ecx, 0xffff
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x18]
jg 0x10036f83
mov ecx, edi
cmp dword [ebp - 0x250], eax
jne 0x10036f85
mov ecx, eax
mov dword [ebp - 0x24c], ecx
mov eax, dword [ebp - 0x18]
sub ecx, eax
jne 0x10036fa0
xor eax, eax
lea ecx, [ebp - 0x424]
push eax
call fcn.100174a9
mov eax, dword [ebp - 0x488]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x38]
setg cl
dec dword [ebp - 0x38]
cmp eax, ecx
jne 0x10036fbb
mov edx, edi
jmp 0x10036fbf
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp eax, ecx
setne dl
sub edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x10], edx
je 0x100370cf
mov dword [ebp - 0x1c], edi
lea ecx, [ebp - 0x424]
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], 8
mov dword [ebp - 0x58], 0xec8a
push eax
call fcn.100174a9
lea ecx, [ebp - 0x424]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
xor eax, eax
mov esi, dword [ebp - 0x250]
neg esi
mov dword [ebp - 0x250], esi
push eax
call fcn.100174a9
mov ecx, dword [ebp - 0x40]
xor edx, edx
cmp ecx, esi
setle dl
xor ebx, ebx
imul ecx, edx, 0xa4cb
cmp dword [eax], ecx
lea ecx, [ebp - 0x424]
setle bl
xor eax, eax
push eax
call fcn.100174a9
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0x1c]
sete cl
dec ecx
add eax, ecx
mov dword [ebp - 0x18], eax
imul ecx, dword [ebp - 0x1c], 0x827c
sub ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 8
setne al
cmp eax, 0xdb237e2c
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x48]
mov edx, dword [ebp - 0x250]
mov eax, dword [ebp - 0x1c]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, dword [ebp - 0x1c]
jg 0x100370b2
mov edx, edi
cmp dword [ebp - 0x54], eax
jne 0x100370b4
mov edx, eax
mov eax, dword [ebp - 0x58]
xor ecx, ecx
cmp edx, eax
push 3
setne cl
sub ecx, dword [ebp - 0x15fc]
mov dword [ebp - 0x18], ecx
pop ebx
jmp 0x100371eb
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x100370f0
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x288], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100370dc
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10037110
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ac], 0x8f1cef17
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100370f8
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x100371d0
mov dword [ebp - 0x48], edi
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x250], 0
jne 0x10037154
mov eax, dword [ebp - 0x10]
xor ecx, ecx
imul edx, dword [ebp + eax*4 - 0x250], 0xfffa
mov eax, dword [ebp - 0x488]
sub edx, eax
mov eax, dword [ebp - 0x288]
cmp edx, eax
setg cl
cmp ecx, dword [ebp - 0x1c]
jge 0x10037154
xor eax, eax
jmp 0x10037156
mov eax, edi
mov dword [ebp - 0x288], eax
cmp eax, dword [ebp - 0x1ac]
je 0x10037172
xor eax, eax
cmp dword [ebp - 0x288], eax
je 0x10037174
mov ecx, edi
jmp 0x10037176
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x1ac]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1ac]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x24], eax
jmp 0x100371c8
cmp dword [ebp - 0x24], eax
jle 0x1003719a
cmp dword [ebp - 0x10], edi
jle 0x10037118
push edi
lea ecx, [ebp - 0xc84]
call fcn.100174a9
mov dword [eax], 0x2ca4fac9
lea ecx, [ebp - 0xc84]
call fcn.1001748d
lea ecx, [ebp - 0x424]
mov byte [ebp - 4], 0x31
call fcn.1001748d
push edi
lea ecx, [ebp - 0xcb4]
call fcn.1001740b
mov byte [ebp - 4], 0x36
lea ecx, [ebp - 0x88c]
mov dword [ebp - 0x10], 0xfffffffe
push ebx
call fcn.1001740b
mov byte [ebp - 4], 0x37
xor eax, eax
push 0xfffffffffffffffa
pop esi
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x1c], 0x77ebd004
mov dword [ebp - 0x48], 0x7f5aee0c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1003726b
push dword [ebp - 0x18]
lea ecx, [ebp - 0x88c]
call fcn.100174a9
mov dword [eax], 0x6ff55e00
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1003724d
xor eax, eax
mov dword [ebp - 0x10], 0xfffffff0
jmp 0x100372a0
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jge 0x1003729d
cmp dword [ebp - 0x10], esi
jl 0x10037274
push 2
lea ecx, [ebp - 0x88c]
call fcn.100174a9
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
sub ecx, 7
neg ecx
sbb ecx, ecx
add ecx, 0xfffffffb
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0x6089
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
setne dl
sub ecx, 0xfff8
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
setne al
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10037319