Function at 0x10032b32
Capabilities:
Create process on windows
Create thread
Delete file
Get common file path
Get keyboard layout
Get session user name
Query environment variable
Set environment variable
Terminate process

Disassembly:
mov eax, 0x1007f21d
call fcn.1007ebb0
mov eax, 0x12d0
call fcn.1007b470
push ebx
push esi
push edi
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff9
push 2
mov dword [ebp - 0x20], eax
pop ebx
mov byte [ebp - 0x8d], dl
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x20], ebx
jge 0x10032b7e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2d4], 0x56834504
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032b66
xor eax, eax
xor esi, esi
inc esi
mov dword [ebp - 0x44], esi
cmp dword [ebp - 0x44], eax
jl 0x10032bec
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x2d4]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [ebp - 0x2d0]
imul edx, eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x2d4]
cmp edx, eax
mov eax, dword [ebp - 0x44]
mov edx, 0x526d2e85
setg cl
sub edx, ecx
sub edx, dword [ebp + eax*4 - 0x2d4]
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2d4], edx
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10032be5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
dec dword [ebp - 0x44]
jns 0x10032b89
xor eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10032c00
push eax
call edi
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10032c25
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x126c], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10032c0c
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x10032c50
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10032c3b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10032c4d
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10032c2a
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032c78
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x85c], 0xc213532f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032c5f
xor eax, eax
mov dword [ebp - 0x854], 0xfffffffb
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x20], eax
jmp 0x10032c9f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd3c], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032c8e
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x854]
mov eax, dword [ebp - 0x854]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x854]
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setle dl
xor eax, eax
mov dword [ebp - 0xd3c], edx
or edx, 0xffffffff
mov dword [ebp - 0x18], 0xbac64a68
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], 0xc82f744e
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032d0d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11b4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032cf8
xor eax, eax
push 8
mov dword [ebp - 0x18], eax
pop ecx
jmp 0x10032d49
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10032d46
mov dword [ebp - 0x20], 0x86bd085
mov dword [ebp - 0x20], eax
jmp 0x10032d3c
mov dword [ebp - 0x48], 0x1a35ca42
mov dword [ebp - 0x5c], esi
dec dword [ebp - 0x48]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10032d2c
dec dword [ebp - 0x1c]
jns 0x10032d20
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
jle 0x10032d15
mov dword [ebp - 0x18], 0xffffffe8
cmp dword [ebp - 0x18], 0xfffffff5
je 0x10032dab
mov dword [ebp - 0x20], eax
jmp 0x10032d72
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c4], 0xb0a3531
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032d61
mov eax, dword [ebp - 0x6c0]
mov ecx, 0x30a3
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c0]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x6c0]
mov eax, dword [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x5c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
push 0
pop eax
jne 0x10032d5c
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x2c], 0x7d8a8701
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032de1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x324], 0x7f82
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032dc8
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jg 0x10032fa5
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x40], 0x8110
mov dword [ebp - 0x48], 0xde769035
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10032e1e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x8ac], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032e0a
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10032f2f
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], eax
jl 0x10032f2c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10032e53
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6a0], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10032e3e
xor eax, eax
mov dword [ebp - 0x69c], eax
jmp 0x10032e6e
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x324], 0
jne 0x10032e76
inc dword [ebp - 0x69c]
cmp dword [ebp - 0x69c], ebx
jle 0x10032e5b
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setle dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg bl
xor edx, edx
add ebx, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x40]
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x324]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x324]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x324]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x324]
cmp eax, 0xfffffff8
setne cl
xor eax, eax
sub ecx, dword [ebp - 0x2c]
cmp ecx, 0x6ee3e4f6
jg 0x10032f17
cmp dword [ebp - 0x324], eax
je 0x10032f17
mov eax, esi
push 0
mov dword [ebp - 0x8a8], eax
dec dword [ebp - 0x38]
pop eax
push 2
pop ebx
jns 0x10032e35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10032e26
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x44], eax
jne 0x10032f4e
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10032f50
mov edx, esi
jmp 0x10032f52
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
mov eax, 0x656e
push 0
setge cl
sub eax, ecx
add eax, dword [ebp - 0x2c]
cmp eax, 0xfff9
sbb eax, eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2c]
imul ecx, eax, 0x25a5
mov dword [ebp - 0x8a8], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x324]
add eax, ecx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x2c]
pop eax
cmp dword [ebp - 0x2c], ebx
jle 0x10032ded
or edx, 0xffffffff
mov dword [ebp - 0x30], 0xfffe
mov dword [ebp - 0x58], 0x743d837b
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 0xf8067e30
mov dword [ebp - 0x34], 0xec4279c4
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0x4996
mov dword [ebp - 0x48], 0x791e6e40
mov dword [ebp - 0x20], eax
jmp 0x10032ff1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x10b4], 0x39e3cf95
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10032fe0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
xor eax, eax
inc dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10033021
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2dc], 0x56834504
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033009
xor eax, eax
mov dword [ebp - 0x44], esi
cmp dword [ebp - 0x44], eax
jl 0x1003308c
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x2dc]
mov edx, dword [ebp - 0x2dc]
mov eax, dword [ebp - 0x2d8]
imul edx, eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x2dc]
cmp edx, eax
mov eax, dword [ebp - 0x44]
mov edx, 0x526d2e85
setg cl
sub edx, ecx
sub edx, dword [ebp + eax*4 - 0x2dc]
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2dc], edx
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x10033085
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
dec dword [ebp - 0x44]
jns 0x10033029
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003309a
push eax
call edi
xor eax, eax
mov dword [ebp - 0x1c], 0xb7c7ce53
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x100330c0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11cc], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100330ac
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov ebx, dword [sym.imp.USER32.dll_CheckMenuRadioItem]
cmp dword [ebp - 0x1c], eax
jl 0x10033122
mov dword [ebp - 0x20], 0x4dd03248
mov dword [ebp - 0x20], eax
jmp 0x10033117
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100330fc
push 0x1846
push 0xe5b
push 0x1efa
push 0x2404
push eax
call ebx
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033114
push 0xd14
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x100330da
dec dword [ebp - 0x1c]
jns 0x100330ce
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033134
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
mov dword [ebp - 0x34], 0xbca63185
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003314d
push eax
call dword [sym.imp.USER32.dll_RegisterClassW]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003315f
push eax
call dword [sym.imp.USER32.dll_SetCursor]
xor eax, eax
mov dword [ebp - 0x1c], 0xb7c7ce53
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10033185
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11fc], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10033171
xor eax, eax
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], eax
jl 0x100331e5
mov dword [ebp - 0x20], 0x4dd03248
mov dword [ebp - 0x20], eax
jmp 0x100331da
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100331bf
push 0x1846
push 0xe5b
push 0x1efa
push 0x2404
push eax
call ebx
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100331d7
push 0xd14
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jle 0x1003319d
dec dword [ebp - 0x1c]
jns 0x10033191
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100331f7
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
push 0xfffffffffffffffc
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x1003321d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x268], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10033205
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x100332c5
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jg 0x1003327f
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x268], 0
je 0x1003324d
cmp dword [ebp - 0x24], 0xed3
jne 0x1003324d
mov edx, esi
jmp 0x10033251
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x2c]
sets cl
sub edx, ecx
sub edx, 2
neg edx
sbb edx, edx
inc edx
imul ecx, edx, 0x1da6
mov dword [ebp + eax*4 - 0x268], ecx
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x10033233
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x100332c2
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x100332bd
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100332b8
push 0x8ec
push 0x2535
push 0x187f
push 0x453
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10033292
dec dword [ebp - 0x2c]
jns 0x10033287
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10033225
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x268], eax
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff9
push 2
mov dword [ebp - 0x20], eax
pop ebx
cmp dword [ebp - 0x20], ebx
jge 0x10033303
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2cc], 0x56834504
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100332eb
xor eax, eax
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x1c], 0xebd004dd
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10033341
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x330], 0x624039b6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10033328
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033353
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jg 0x10033447
mov dword [ebp - 0x20], 0xd0f065f4
mov dword [ebp - 0x40], 0xcd17cd95
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x14]
add ecx, 2
mov dword [ebp + eax*4 - 0x330], ecx
or eax, 0xffffffff
sub eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x100333ec
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x330]
test eax, eax
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x330]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x330]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
mov eax, dword [ebp + eax*4 - 0x330]
sub ecx, eax
je 0x100333ea
mov ecx, esi
jmp 0x100333ee
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x20]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x20]
sub ecx, ebx
cmp ecx, 0x4151
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
je 0x1003341a
mov eax, dword [ebp - 0x32c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x330]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x1003335f
xor eax, eax
mov dword [ebp - 0x44], esi
cmp dword [ebp - 0x44], eax
jl 0x10033667
mov eax, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x2cc]
mov edx, dword [ebp - 0x2cc]
mov eax, dword [ebp - 0x2c8]
imul edx, eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x2cc]
cmp edx, eax
mov eax, dword [ebp - 0x44]
mov edx, 0x526d2e85
setg cl
sub edx, ecx
sub edx, dword [ebp + eax*4 - 0x2cc]
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x2cc], edx
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x100334bf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x128c], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100334a6
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x100334e7
cmp byte [ebp - 0x39], 0
je 0x100334d2
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100334e4
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
mov byte [ebp - 0x39], al
jle 0x100334c4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10033512
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x898], 0xc213532f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100334f9
xor eax, eax
mov dword [ebp - 0x890], 0xfffffffb
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x20], eax
jmp 0x10033539
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcb4], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033528
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x890]
mov eax, dword [ebp - 0x890]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x890]
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setle dl
mov dword [ebp - 0xcb4], edx
cmp byte [ebp - 0x39], 0
je 0x1003365c
mov dword [ebp - 0x18], 0xbac64a68
or eax, 0xffffffff
mov dword [ebp - 0x5c], eax
xor eax, eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], 0xc82f744e
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100335b1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1130], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003359c
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff1
jg 0x100335f7
push 8
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x100335ee
mov dword [ebp - 0x20], 0x86bd085
mov dword [ebp - 0x20], eax
jmp 0x100335e4
mov dword [ebp - 0x48], 0x1a35ca42
mov dword [ebp - 0x5c], esi
dec dword [ebp - 0x48]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100335d4
dec dword [ebp - 0x1c]
jns 0x100335c8
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
jle 0x100335bd
mov dword [ebp - 0x18], 0xffffffe8
jmp 0x10033649
mov dword [ebp - 0x20], eax
jmp 0x10033616
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x540], 0xb0a3531
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033605
mov eax, dword [ebp - 0x53c]
mov ecx, 0x30a3
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x53c]
mov eax, dword [ebp - 0x30]
sub ecx, eax
push 0
mov dword [ebp - 0x5c], ecx
inc dword [ebp - 0x18]
pop eax
cmp dword [ebp - 0x18], 0xfffffff5
jne 0x10033600
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
dec dword [ebp - 0x44]
jns 0x10033453
xor eax, eax
push 0xfffffffffffffff7
pop ecx
mov dword [ebp - 0x24], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x58], 0x35ca4204
mov dword [ebp - 0x30], 0x3f17e2f9
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], 0x31f145ba
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0x66c4a87f
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100336ba
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe94], 0xa6847dfa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100336a1
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100336da
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x95c], 0x448112de
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x100336c2
xor eax, eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x100337b9
mov dword [ebp - 0x34], 0x41637c1d
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0x512a30a
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x40], 0x780f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033721
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x754], 0xd9b9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033709
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033737
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11a8], 0xe22401db
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033726
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
push 0xfffffffffffffffc
pop ecx
push 8
mov eax, dword [ebp + eax*4 - 0xe94]
add eax, 5
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setl bl
xor ecx, ecx
cmp ebx, eax
pop eax
setle cl
xor ebx, ebx
cmp ecx, eax
push 0
setne bl
xor ecx, ecx
add ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
cmp eax, 0x58bf
mov eax, dword [ebp - 0x754]
setg cl
xor edx, edx
cmp ecx, ebx
setle dl
xor ecx, ecx
add edx, 0x74bf90ed
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x24]
jns 0x100336e6
push 2
pop ebx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x95c], eax
test eax, eax
je 0x10033844
xor eax, eax
mov dword [ebp - 0x48], esi
xor edx, edx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x40]
test eax, eax
sets dl
xor ecx, ecx
mov dword [ebp - 0x958], edx
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 4
setg al
xor ecx, ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x48]
cmp eax, 0xa839
mov eax, dword [ebp - 0x4c]
setg cl
xor edx, edx
cmp ecx, 0x1552b9cb
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfd1a6840
setge cl
cmp eax, ecx
mov eax, dword [ebp - 0x50]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
neg edx
mov dword [ebp - 0x30], edx
jmp 0x10033880
mov dword [ebp - 0x20], 0xea27
mov dword [ebp - 0x30], 0xbb69233
mov eax, dword [ebp - 0x20]
push 8
pop eax
cmp dword [ebp - 0x20], eax
je 0x10033860
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x58]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
xor eax, eax
mov dword [ebp - 0x2c], 0x7d8a8701
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100338b1
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x36c], 0x7f82
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10033898
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jg 0x10033a72
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x40], 0x8110
mov dword [ebp - 0x48], 0xde769035
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100338ee
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x974], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100338da
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100339ff
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], eax
jl 0x100339fc
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10033923
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6dc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003390e
xor eax, eax
mov dword [ebp - 0x6d8], eax
jmp 0x1003393e
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x36c], 0
jne 0x10033946
inc dword [ebp - 0x6d8]
cmp dword [ebp - 0x6d8], ebx
jle 0x1003392b
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setle dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg bl
xor edx, edx
add ebx, dword [ebp + eax*4 - 0x36c]
mov eax, dword [ebp - 0x40]
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x36c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x36c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x36c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x36c]
cmp eax, 0xfffffff8
setne cl
xor eax, eax
sub ecx, dword [ebp - 0x2c]
cmp ecx, 0x6ee3e4f6
jg 0x100339e7
cmp dword [ebp - 0x36c], eax
je 0x100339e7
mov eax, esi
push 0
mov dword [ebp - 0x970], eax
dec dword [ebp - 0x38]
pop eax
push 2
pop ebx
jns 0x10033905
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x100338f6
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x44], eax
jne 0x10033a1e
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10033a20
mov edx, esi
jmp 0x10033a22
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
mov eax, 0x656e
push 0
setge cl
sub eax, ecx
add eax, dword [ebp - 0x2c]
cmp eax, 0xfff9
sbb eax, eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2c]
imul ecx, eax, 0x25a5
mov dword [ebp - 0x970], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x36c]
add eax, ecx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x2c]
pop eax
cmp dword [ebp - 0x2c], ebx
jle 0x100338bd
mov byte [ebp - 0x39], al
or ecx, 0xffffffff
mov dword [ebp - 0x30], 0xfffe
mov dword [ebp - 0x58], 0x743d837b
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0xf8067e30
mov dword [ebp - 0x34], 0xec4279c4
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0x4996
mov dword [ebp - 0x48], 0x791e6e40
mov dword [ebp - 0x20], eax
jmp 0x10033ac4
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xfc4], 0x39e3cf95
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10033ab3
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x58], eax
inc dword [ebp - 0x48]
cmp byte [ebp - 0x39], 0
je 0x10033add
xor eax, eax
push eax
call edi
xor eax, eax
mov dword [ebp - 0x1c], 0xb7c7ce53
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10033b05
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1238], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10033af1
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10033b64
mov dword [ebp - 0x20], 0x4dd03248
mov dword [ebp - 0x20], eax
jmp 0x10033b5a
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033b3f
push 0x1846
push 0xe5b
push 0x1efa
push 0x2404
push eax
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033b57
push 0xd14
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10033b19
dec dword [ebp - 0x1c]
jns 0x10033b0d
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033b76
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
push 0xfffffffffffffffc
pop ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10033b9c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x254], 5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10033b84
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x10033c43
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jg 0x10033bfd
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x254], 0
je 0x10033bcc
cmp dword [ebp - 0x24], 0xed3
jne 0x10033bcc
mov edx, esi
jmp 0x10033bd0
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x2c]
sets cl
sub edx, ecx
sub edx, ebx
neg edx
sbb edx, edx
inc edx
imul ecx, edx, 0x1da6
mov dword [ebp + eax*4 - 0x254], ecx
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jle 0x10033bb2
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x10033c40
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jl 0x10033c3b
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033c36
push 0x8ec
push 0x2535
push 0x187f
push 0x453
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
xor eax, eax
dec dword [ebp - 0x1c]
jns 0x10033c10
dec dword [ebp - 0x2c]
jns 0x10033c05
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10033ba4
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x254], eax
xor eax, eax
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x1c], 0xebd004dd
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10033c95
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x360], 0x624039b6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10033c7c
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033ca7
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jg 0x10033d9b
mov dword [ebp - 0x20], 0xd0f065f4
mov dword [ebp - 0x40], 0xcd17cd95
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x360]
mov eax, dword [ebp - 0x14]
add ecx, 2
mov dword [ebp + eax*4 - 0x360], ecx
or eax, 0xffffffff
sub eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10033d40
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x360]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x360]
test eax, eax
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x360]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x360]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
mov eax, dword [ebp + eax*4 - 0x360]
sub ecx, eax
je 0x10033d3e
mov ecx, esi
jmp 0x10033d42
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x20]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x20]
sub ecx, ebx
cmp ecx, 0x4151
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
je 0x10033d6e
mov eax, dword [ebp - 0x35c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x360]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10033cb3
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff9
push 0xfffffffffffffff7
pop ecx
mov dword [ebp - 0x24], ecx
or ecx, 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x58], 0x35ca4204
mov dword [ebp - 0x30], 0x3f17e2f9
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x40], 0x31f145ba
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0x66c4a87f
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10033df5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf18], 0xa6847dfa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033ddc
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x10033e15
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa3c], 0x448112de
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10033dfd
xor eax, eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x10033ef4
mov dword [ebp - 0x34], 0x41637c1d
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0x512a30a
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x40], 0x780f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033e5c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x668], 0xd9b9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033e44
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10033e72
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11c0], 0xe22401db
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033e61
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
push 0xfffffffffffffffc
pop ecx
push 8
mov eax, dword [ebp + eax*4 - 0xf18]
add eax, 5
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setl bl
xor ecx, ecx
cmp ebx, eax
pop eax
setle cl
xor ebx, ebx
cmp ecx, eax
push 0
setne bl
xor ecx, ecx
add ebx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x40]
cmp eax, 0x58bf
mov eax, dword [ebp - 0x668]
setg cl
xor edx, edx
cmp ecx, ebx
setle dl
xor ecx, ecx
add edx, 0x74bf90ed
cmp edx, eax
pop eax
setl cl
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x24]
jns 0x10033e21
push 2
pop ebx
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa3c], eax
test eax, eax
je 0x10033f7f
xor eax, eax
mov dword [ebp - 0x48], esi
xor edx, edx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x40]
test eax, eax
sets dl
xor ecx, ecx
mov dword [ebp - 0xa38], edx
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 4
setg al
xor ecx, ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x48]
cmp eax, 0xa839
mov eax, dword [ebp - 0x4c]
setg cl
xor edx, edx
cmp ecx, 0x1552b9cb
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xfd1a6840
setge cl
cmp eax, ecx
mov eax, dword [ebp - 0x50]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
neg edx
mov dword [ebp - 0x30], edx
jmp 0x10033fbb
mov dword [ebp - 0x20], 0xea27
mov dword [ebp - 0x30], 0xbb69233
mov eax, dword [ebp - 0x20]
push 8
pop eax
cmp dword [ebp - 0x20], eax
je 0x10033f9b
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x58]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10033fe2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x12cc], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10033fc9
xor eax, eax
mov dword [ebp - 0x20], eax
jmp 0x1003400d
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10033ff8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x1003400a
push eax
call dword [sym.imp.GDI32.dll_GetObjectType]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10033fe7
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10034033
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2e4], 0x56834504
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003401b
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10034055
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x880], 0xc213532f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1003403c
xor eax, eax
mov dword [ebp - 0x878], 0xfffffffb
mov dword [ebp - 0x40], 0xfffffffa
mov dword [ebp - 0x20], eax
jmp 0x1003407c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xda0], 0
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003406b
mov eax, dword [ebp - 0x40]
mov ebx, 0x1c58
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x878]
mov eax, dword [ebp - 0x878]
dec ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x878]
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setle dl
xor eax, eax
mov dword [ebp - 0xda0], edx
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x100346d5
mov dword [ebp - 0x2c], 0x7d8a8701
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100340f5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x348], 0x7f82
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100340dc
xor eax, eax
push 2
mov dword [ebp - 0x2c], eax
pop ecx
cmp dword [ebp - 0x2c], ecx
jg 0x100342c1
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x40], 0x8110
mov dword [ebp - 0x48], 0xde769035
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x10034135
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x98c], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10034121
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034246
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], eax
jl 0x10034243
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003416a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6b8], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10034155
xor eax, eax
mov dword [ebp - 0x6b4], eax
jmp 0x10034185
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x348], 0
jne 0x1003418d
inc dword [ebp - 0x6b4]
cmp dword [ebp - 0x6b4], ecx
jle 0x10034172
mov eax, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setle dl
xor eax, eax
cmp eax, edx
mov eax, dword [ebp - 0x40]
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg bl
xor edx, edx
add ebx, dword [ebp + eax*4 - 0x348]
mov eax, dword [ebp - 0x40]
cmp ebx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x44], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x348]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x348]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x348]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x348]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x348]
cmp eax, 0xfffffff8
setne cl
xor eax, eax
sub ecx, dword [ebp - 0x2c]
cmp ecx, 0x6ee3e4f6
jg 0x1003422e
cmp dword [ebp - 0x348], eax
je 0x1003422e
mov eax, esi
push 0
mov dword [ebp - 0x988], eax
dec dword [ebp - 0x38]
pop eax
push 2
pop ecx
jns 0x1003414c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1003413d
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x44], eax
jne 0x10034265
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10034267
mov edx, esi
jmp 0x10034269
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp edx, eax
mov eax, 0x656e
push 2
setge cl
sub eax, ecx
add eax, dword [ebp - 0x2c]
cmp eax, 0xfff9
sbb eax, eax
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2c]
imul ecx, eax, 0x25a5
mov dword [ebp - 0x988], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x348]
add eax, ecx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x2c]
pop ecx
push 0
pop eax
cmp dword [ebp - 0x2c], ecx
jle 0x10034104
mov ebx, 0x1c58
mov dword [ebp - 0x30], 0xfffe
or edx, 0xffffffff
mov dword [ebp - 0x58], 0x743d837b
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x34], 0xf8067e30
mov dword [ebp - 0x34], 0xec4279c4
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 0x4996
mov dword [ebp - 0x48], 0x791e6e40
mov dword [ebp - 0x20], eax
jmp 0x10034310
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x106c], 0x39e3cf95
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100342ff
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov dword [ebp - 0x58], eax
inc dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2e4]
mov edx, dword [ebp - 0x2e4]
mov eax, dword [ebp - 0x2e0]
imul edx, eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x2e4]
cmp edx, eax
mov eax, dword [ebp - 0x24]
mov edx, 0x526d2e85
setg cl
sub edx, ecx
sub edx, dword [ebp + eax*4 - 0x2e4]
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x2e4], edx
xor eax, eax
mov dword [ebp - 0x14], 0x32bb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003438a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf78], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10034375
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100343ac
push eax
push eax
push 0xdbd
push 0x347
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov eax, dword [ebp - 0x14]
mov ecx, 0x3783
sub ecx, eax
je 0x100343c3
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100343c5
mov eax, esi
jmp 0x100343c5
xor eax, eax
inc eax
je 0x1003446e
xor eax, eax
mov dword [ebp - 0x40], 0x647c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100343f7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd48], 7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100343de
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x1003443e
cmp dword [ebp - 0x40], esi
ja 0x10034426
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0xc4475ee4
setne cl
cmp dword [ebp - 0x40], ecx
jle 0x10034426
xor eax, eax
cmp dword [ebp - 0xd40], eax
je 0x10034426
mov eax, dword [ebp - 0xd40]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
test eax, eax
setns cl
cmp ecx, dword [ebp - 0x14]
jne 0x1003443e
xor eax, eax
mov edx, eax
jmp 0x10034440
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0xf78], ecx
mov dword [ebp - 0x14], eax
jmp 0x10034466
mov dword [ebp - 0x30], 0x236728ad
cmp dword [ebp - 0x30], eax
jne 0x1003447a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x10034457
jmp 0x1003447a
mov dword [ebp - 0x48], 0xfffffffb
inc dword [ebp - 0x48]
xor eax, eax
mov byte [ebp - 0x39], al
mov dword [ebp - 0x48], 5
mov dword [ebp - 0x48], 0xe9d0615a
mov dword [ebp - 0x4c], 0xed4033e2
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100344b7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf8], 0xfafd11d9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1003449e
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100344d7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100344bf
xor eax, eax
cmp dword [ebp - 0xf0], eax
je 0x10034503
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
sub ecx, 0x8787d636
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
test eax, eax
je 0x10034501
mov edx, esi
jmp 0x10034505
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0xf0]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xd402
mov ecx, ebx
setge al
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0xf0]
cmp ecx, eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
setne dl
imul ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0xf0]
sub ecx, eax
lea eax, [ecx - 0x5a8d]
cmp eax, dword [ebp - 0x8c]
jg 0x1003455f
xor eax, eax
cmp dword [ebp - 0xf0], eax
je 0x10034561
mov eax, esi
mov ecx, dword [ebp - 0x8c]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0xf0]
cmp eax, ecx
mov eax, dword [ebp - 0xf4]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf0]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x8c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf0]
setle cl
xor edx, edx
cmp ecx, 0x7d17
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x8c], ecx
cmp dword [ebp - 0xf0], eax
je 0x100345d0
mov ecx, esi
cmp dword [ebp - 0x8c], eax
jne 0x100345d2
mov ecx, eax
mov eax, dword [ebp - 0x8c]
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
setne dl
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xf0]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x48], ecx
mov ecx, 0x82244f8a
mov eax, dword [ebp - 0x48]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0xf8]
cmp eax, esi
setl cl
mov dword [ebp - 0x4c], ecx
cmp byte [ebp - 0x39], 0
je 0x100346c9
xor eax, eax
mov dword [ebp - 0x44], 0xc64a6847
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x1003466b
push 0xf6d
call dword [sym.imp.GDI32.dll_GetStockObject]
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x100346b6
mov dword [ebp - 0x48], 0xf27d
xor edx, edx
push 0xfffffffffffffff8
pop eax
mov dword [ebp - 0xb9c], eax
mov dword [ebp - 0xb98], eax
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x48]
dec ecx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setne dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0xb9c], ecx
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x11
jl 0x10034670
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
dec dword [ebp - 0x24]
push 0
pop eax
jns 0x100340c6
mov dword [ebp - 0x18], 0xbac64a68
or edx, 0xffffffff
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x34], 0xc82f744e
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003470a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x11e4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x100346f5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff1
push 2
pop ebx
jg 0x10034753
push 8
pop ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x1003474a
mov dword [ebp - 0x20], 0x86bd085
mov dword [ebp - 0x20], eax
jmp 0x10034740
mov dword [ebp - 0x48], 0x1a35ca42
mov dword [ebp - 0x5c], esi
dec dword [ebp - 0x48]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10034730
dec dword [ebp - 0x1c]
jns 0x10034724
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff1
jle 0x10034719
mov dword [ebp - 0x18], 0xffffffe8
cmp dword [ebp - 0x18], 0xfffffff5
je 0x100347af
mov dword [ebp - 0x20], eax
jmp 0x10034776
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x72c], 0xb0a3531
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10034765
mov eax, dword [ebp - 0x728]
mov ecx, 0x30a3
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x728]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x728]
mov eax, dword [ebp - 0x30]
sub ecx, eax
mov dword [ebp - 0x5c], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
push 0
pop eax
jne 0x10034760
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], 0xffffffea
cmp dword [ebp - 0x20], 0xffffffe6
jl 0x10034808
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0x3cdf98a5
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x100347fc
push 0xf12
push 0x18c4
push 0x9e0
push 0x2500
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
xor eax, eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe6
jge 0x100347bf
or edx, 0xffffffff
mov byte [ebp - 0x39], al
mov ecx, 0xf0b96ca2
mov dword [ebp - 0xb7c], ecx
mov dword [ebp - 0xb78], ecx
mov dword [ebp - 0xb74], ecx
mov dword [ebp - 0xb70], ecx
mov dword [ebp - 0x30], 0x43250e6d
mov dword [ebp - 0x34], eax
push 0xfffffffffffffff8
pop ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0x9e53e58b
mov dword [ebp - 0x34], 0x2703d9b9
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x34], 0xb21a35ca
mov dword [ebp - 0x34], 0xa26f3f17
mov dword [ebp - 0x34], 0x39ecf4a
mov dword [ebp - 0x48], edx
mov dword [ebp - 0xb70], 0xfa860b4f
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x48]
cmp byte [ebp - 0x39], 0
je 0x100349d3
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x14], 0xb590
mov dword [ebp - 0x24], 0x88b9228
mov dword [ebp - 0x4c], 0xa64
mov dword [ebp - 0x48], 0x697ab83d
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x20], eax
jmp 0x100348b7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x850], 3
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100348a6
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x100348ca
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
push 0
setl dl
xor ecx, ecx
mov dword [ebp - 0x850], edx
mov eax, dword [ebp - 0x14]
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
mov ecx, 0x6e87
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x850]
mov eax, dword [ebp - 0x1c]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
pop ecx
setns cl
sub eax, ecx
je 0x1003491e
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x24], eax
jmp 0x1003495f
xor eax, eax
mov dword [ebp - 0xadc], eax
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0xad4], eax
mov dword [ebp - 0xad0], eax
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x24], eax
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1003495c
mov eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x14], eax
jle 0x1003495a
mov eax, esi
jmp 0x1003495c
xor eax, eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
or eax, 0xffffffff
cmp dword [ebp - 0x14], eax
je 0x1003497f
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x14], eax
je 0x10034981
mov edx, esi
xor ecx, ecx
mov dword [ebp - 0x24], 0x1815
mov eax, dword [ebp - 0x24]
cmp eax, edx
mov eax, dword [ebp - 0x14]
setle cl
xor edx, edx
cmp ecx, eax
setne dl
xor ecx, ecx
imul edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x84c]
sub edx, 0x94bf7d6
cmp eax, edx
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x850]
setg cl
imul edx, ecx
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
push eax
mov dword [ebp - 0x850], ecx
call edi
xor eax, eax
mov dword [ebp - 0x1c], 0xb7c7ce53
push 3
mov dword [ebp - 0x20], eax
pop edi
cmp dword [ebp - 0x20], edi
jge 0x100349f9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1118], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x100349e5
xor eax, eax
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x10034a58
mov dword [ebp - 0x20], 0x4dd03248
mov dword [ebp - 0x20], eax
jmp 0x10034a4e
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10034a33
push 0x1846
push 0xe5b
push 0x1efa
push 0x2404
push eax
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
xor eax, eax
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10034a4b
push 0xd14
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10034a0d
dec dword [ebp - 0x1c]
jns 0x10034a01
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10034a6a
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], ebx
mov ebx, 0xc7756237
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x10034a97
or ecx, 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x520], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10034a83
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034aa9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7a8], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10034a9c
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x51c]
mov edi, 0x17a540f8
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x51c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x518]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x51c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x51c]
mov eax, dword [ebp - 0x48]
sub edx, eax
mov eax, dword [ebp - 0x38]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setl dl
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x51c]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, edi
setge al
mov dword [ebp - 0x7a8], eax
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x40], 2
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10034b5d
or ecx, 0xffffffff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4d8], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034b48
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10034b6f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x644], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10034b62
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4d0]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], esi
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x4d4]
mov eax, dword [ebp - 0x48]
sub edx, eax
mov eax, dword [ebp - 0x38]
cmp edx, eax
mov eax, dword [ebp - 0x48]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
push 8
setl dl
sub eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
imul edx, eax
mov eax, dword [ebp - 0x4d4]
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, edi
setge al
mov dword [ebp - 0x644], eax
pop eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x40], 0x3a79cc09
push 3
mov dword [ebp - 0x20], eax
pop edi
cmp dword [ebp - 0x20], edi
jge 0x10034c20
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x868], 0x37186542
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10034c08
xor eax, eax
push 2
mov dword [ebp - 0x2c], eax
pop ebx
cmp dword [ebp - 0x2c], 0x10
jne 0x10034c82
mov dword [ebp - 0x30], ebx
xor edx, edx
mov dword [ebp - 0x48], 0x79cd329b
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setle dl
add edx, dword [ebp - 0x2c]
imul eax, edx, 0x5d5f
add eax, dword [ebp - 0x2c]
jne 0x10034c61
mov edx, eax
cmp dword [ebp - 0x2c], eax
je 0x10034c63
mov edx, esi
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
test eax, eax
mov dword [ebp - 0x868], eax
sete cl
xor eax, eax
cmp ecx, edx
setne al
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x2c]
jmp 0x10034c26
mov eax, dword [ebp - 0x40]
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10034cbf
mov edx, dword [ebp - 0x868]
mov eax, dword [ebp - 0x868]
sub edx, 0x5761
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
imul eax, ecx, 0x8ad6
test eax, eax
jne 0x10034cbd
cmp dword [ebp - 0x2c], eax
jne 0x10034cbd
mov eax, esi
jmp 0x10034cbf
xor eax, eax
inc eax
mov dword [ebp - 0x868], eax
mov eax, 0xf99ff606
mov dword [ebp - 0x9dc], eax
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x9d4], eax
mov dword [ebp - 0x9d0], eax
xor eax, eax
mov dword [ebp - 0x24], 0xcd795364
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jg 0x10034d18
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x9dc], ecx
jne 0x10034d16
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x9dc], ecx
jne 0x10034d16
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10034cf6
xor eax, eax
mov dword [ebp - 0x28], 0xc9eb
push 4
mov dword [ebp - 0x1c], 0x3b372ba2
mov dword [ebp - 0x20], eax
pop edx
jmp 0x10034d3f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x458], 0xf94
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10034d2e
mov eax, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x44c]
mov eax, dword [ebp - 0x450]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x44c], eax
je 0x10034d9a
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edx
jge 0x10034d8f
or ecx, 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xe78], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10034d7d
dec dword [ebp - 0xe78]
jmp 0x10034e32
mov dword [ebp - 0x2c], 0x18e50348
mov eax, dword [ebp - 0x44c]
xor eax, eax
cmp dword [ebp - 0x2c], eax
jne 0x10034db3
cmp dword [ebp - 0x1c], eax
je 0x10034db5
mov eax, esi
mov ecx, dword [ebp - 0x2c]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0x6728ad64
jne 0x10034de3
mov ecx, esi
cmp dword [ebp - 0x458], eax
jne 0x10034de5
mov ecx, eax
mov eax, dword [ebp - 0x2c]
imul eax, ecx
imul eax, eax, 0xffff
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x10034e2d
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], 0
je 0x10034e13
push esi
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
mov eax, dword [ebp - 0x2c]
push 0
mov ecx, dword [ebp + eax*4 - 0x458]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x458], ecx
inc dword [ebp - 0x2c]
pop eax
cmp dword [ebp - 0x2c], edi
jle 0x10034dfb
push 6
mov dword [ebp - 0x28], 0x15
or eax, 0xffffffff
pop ecx
cmp dword [ebp - 0x28], ecx
jle 0x10034e4c
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x28]
jmp 0x10034e3f
mov dword [ebp - 0x50], 0xb7c7ce53
xor ecx, ecx
mov dword [ebp - 0x5c], 0xe2c0d37a
mov dword [ebp - 0x28], 0xf9e9
mov dword [ebp - 0x24], 0xf147909b
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x40], 0x19c36c1
mov dword [ebp - 0x38], 0x4e023024
mov dword [ebp - 0x48], 0xafd3
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x58], 0x4dd9cec6
mov dword [ebp - 0x34], 0x954028e0
mov edx, dword [ebp - 0x5c]
imul edx, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x28]
push 8
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cmp eax, esi
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
pop eax
sbb ecx, ecx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, dword [ebp - 0x28]
jg 0x10034f11
mov byte [ebp - 0x39], al
cmp byte [ebp - 0x39], al
je 0x100350b5
push eax
push eax
push 0x14cd
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
jmp 0x100350b3
mov dword [ebp - 0x44], 0x1404fc4b
mov dword [ebp - 0x50], 5
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x10034f3e
or ecx, 0xffffffff
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x214], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x10034f2a
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10035027
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
neg eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
test eax, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
sub edx, eax
add edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
imul edx, dword [ebp + eax*4 - 0x214]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x214]
cmp edx, eax
setne cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x40]
sub eax, 0x5d51
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x20c]
test eax, eax
je 0x10034fc1
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10034fd4
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x214], 0
jne 0x10034fd4
xor eax, eax
mov edx, eax
jmp 0x10034fd6
mov edx, esi
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x214]
cmp eax, edx
setg cl
imul eax, ecx, 0xf0f5
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x40]
jle 0x10035001
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
cmp eax, 0x78a4
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
push 0
setle cl
mov dword [ebp - 0x1c], ecx
inc dword [ebp - 0x14]
pop eax
xor edx, edx
cmp dword [ebp - 0x14], ebx
jle 0x10034f46
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x40], 6
mov ecx, dword [ebp - 0x214]
sub ecx, eax
mov eax, dword [ebp - 0x50]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setg dl
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x58]
neg ecx
mov esi, dword [ebp - 0x28]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
neg esi
sbb esi, esi
inc esi
sub esi, dword [ebp - 0x44]
mov eax, dword [ebp - 0x214]
neg esi
mov ecx, dword [ebp - 0x5c]
sbb esi, esi
inc esi
sub esi, edx
xor edx, edx
imul esi, eax
mov eax, dword [ebp - 0x28]
add ecx, esi
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x44]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
xor esi, esi
mov dword [ebp - 0x24], ecx
inc esi
xor eax, eax
mov dword [ebp - 0x50], 0x401dbdae
mov dword [ebp - 0x1c], 0x42ad015b
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x30], 0xed25e425
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x100350ed
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x120], 0x64a6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100350d5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1003510d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], 0xb4ffb87
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100350f5
xor eax, eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], eax
jg 0x10035268
or ecx, 0xffffffff
jmp 0x10035126
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003529e