Function at 0x10008cdd
Capabilities:
Compare security identifiers
Create process on windows
Delete directory
Delete file
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get disk information
Get disk size
Get session user name
Identify system language via api
Parse pe header
Query or enumerate registry key
Query service status
Resume thread
Set registry value
Suspend thread

Disassembly:
mov eax, 0x10088469
call fcn.10087660
mov eax, 0x1644
call fcn.10083e10
push ebx
push esi
push edi
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x4ec]
push 1
mov byte [ebp - 0x65], dl
call fcn.100280d9
xor eax, eax
lea ecx, [ebp - 0x408]
push 2
mov dword [ebp - 4], eax
call fcn.100280d9
xor eax, eax
inc eax
mov byte [ebp - 4], al
mov dword [ebp - 0x10], 0xffff
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x20], 0x7e318b47
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x1c], eax
jge 0x10008d59
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4ec]
call fcn.10028177
mov dword [eax], 0x9dfc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10008d3c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10008d83
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x408]
call fcn.10028177
mov dword [eax], 0x807cfaf4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10008d64
xor eax, eax
push eax
lea ecx, [ebp - 0x4ec]
call fcn.10028177
xor edi, edi
lea ecx, [ebp - 0x408]
inc edi
push edi
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0x408]
push edi
mov dword [eax], ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0x4ec]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x4ec]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x4ec]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x408]
setg bl
call fcn.10028177
mov ecx, dword [ebp - 0x10]
add ecx, ebx
xor ebx, ebx
imul ecx, dword [ebp - 0x10]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x4ec]
setl bl
xor esi, esi
push esi
call fcn.10028177
xor ecx, ecx
push edi
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x408]
call fcn.10028177
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
push esi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x408]
setg bl
call fcn.10028177
lea ecx, [ebp - 0x408]
mov dword [eax], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], ebx
call fcn.1002815b
or eax, 0xffffffff
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 4], eax
call fcn.1002815b
push edi
lea ecx, [ebp - 0x498]
call fcn.100280d9
push 2
pop esi
push esi
lea ecx, [ebp - 0x504]
mov dword [ebp - 4], esi
call fcn.100280d9
mov eax, 0xffff
mov byte [ebp - 4], 3
mov dword [ebp - 0x10], eax
xor eax, eax
inc eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x20], 0x7e318b47
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jge 0x10008eb9
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.10028177
mov dword [eax], 0x9dfc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10008e9c
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10008ee1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x504]
call fcn.10028177
mov dword [eax], 0x807cfaf4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10008ec3
xor eax, eax
push eax
lea ecx, [ebp - 0x498]
call fcn.10028177
xor edi, edi
lea ecx, [ebp - 0x504]
inc edi
push edi
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0x504]
push edi
mov dword [eax], ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0x498]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x498]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x498]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x504]
setg bl
call fcn.10028177
mov ecx, dword [ebp - 0x10]
add ecx, ebx
xor ebx, ebx
imul ecx, dword [ebp - 0x10]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x498]
setl bl
xor esi, esi
push esi
call fcn.10028177
xor ecx, ecx
push edi
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x504]
call fcn.10028177
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
push esi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x504]
setg bl
call fcn.10028177
lea ecx, [ebp - 0x504]
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], esi
call fcn.1002815b
or esi, 0xffffffff
lea ecx, [ebp - 0x498]
mov dword [ebp - 4], esi
call fcn.1002815b
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xa1c]
call fcn.100280d9
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10008ffa
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa1c]
call fcn.10028177
mov dword [eax], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10008fdc
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], eax
jl 0x10009058
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x10009053
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10009032
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa1c]
call fcn.10028177
cmp dword [eax], 0
jne 0x10009051
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
push 0
pop eax
jle 0x10009018
xor eax, eax
dec dword [ebp - 0x24]
jns 0x1000900c
lea ecx, [ebp - 0xa1c]
mov dword [ebp - 4], esi
call fcn.1002815b
xor ebx, ebx
lea ecx, [ebp - 0x414]
inc ebx
push ebx
call fcn.100280d9
mov dword [ebp - 4], 5
lea eax, [ebp - 0x1280]
movdqa xmm0, xmmword [0x10007b50]
lea ecx, [ebp - 0x150c]
mov dword [ebp - 0x2c], 0xfcc58a01
push eax
mov dword [ebp - 0x4c], 0xe76d238e
lea eax, [ebp - 0x1290]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
push eax
movdqu xmmword [ebp - 0x1290], xmm0
call fcn.10028186
lea ecx, [ebp - 0x22a]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xc14]
push dword [esi]
call fcn.10028135
push 2
pop ebx
mov byte [ebp - 4], 6
mov ecx, 0xf068cd54
cmp dword [ebp - 0x2c], ebx
jl 0x10009134
xor eax, eax
cmp dword [ebp - 0x2c], eax
inc eax
add eax, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe6fc2e60
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], eax
je 0x10009136
xor esi, esi
inc esi
jmp 0x10009138
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0xc14]
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
cmp edx, dword [eax]
setg cl
xor eax, eax
inc eax
or esi, 0xffffffff
cmp ecx, eax
jb 0x1000921c
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009196
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1474], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000917e
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x100091b4
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x100091b1
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff3
jle 0x1000919f
mov dword [ebp - 0x38], eax
jmp 0x10009214
mov dword [ebp - 0x48], 0xa7b48fe2
xor edx, edx
mov dword [ebp - 0x20], 7
mov eax, dword [ebp - 0x50]
cmp eax, 0x81cd
push ebx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xc14]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.10028177
mov eax, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x100091bf
jmp 0x1000928b
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 3
jge 0x1000923d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1300], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10009227
xor eax, eax
inc eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jge 0x10009271
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10009268
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10009245
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10009285
mov dword [ebp - 0x12f8], 0x609e00c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jne 0x10009278
lea ecx, [ebp - 0xc14]
mov byte [ebp - 4], 5
call fcn.1002815b
push ebx
lea ecx, [ebp - 0x4d4]
call fcn.100280d9
xor ebx, ebx
mov byte [ebp - 4], 7
inc ebx
mov dword [ebp - 0x44], 0x9696
push ebx
lea ecx, [ebp - 0xa34]
call fcn.100280d9
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100092e9
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa34]
call fcn.10028177
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100092ce
xor eax, eax
push eax
lea ecx, [ebp - 0xa34]
call fcn.10028177
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
inc ebx
cmp ebx, ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x10009325
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10009322
push 0x851
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
xor eax, eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x37
je 0x1000930a
lea ecx, [ebp - 0xa34]
mov byte [ebp - 4], 7
call fcn.1002815b
mov eax, 0xffff
lea ecx, [ebp - 0x5e0]
mov dword [ebp - 0x24], eax
xor eax, eax
inc eax
mov dword [ebp - 0x58], eax
push eax
call fcn.100280d9
xor eax, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10009382
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5e0]
call fcn.10028177
mov dword [eax], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10009363
xor eax, eax
push eax
lea ecx, [ebp - 0x5e0]
call fcn.10028177
xor ecx, ecx
push ecx
mov dword [eax], ecx
jmp 0x100093c0
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x100093af
push 0x389
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor eax, eax
push eax
lea ecx, [ebp - 0x5e0]
call fcn.10028177
dec dword [eax]
xor eax, eax
push eax
lea ecx, [ebp - 0x5e0]
call fcn.10028177
cmp dword [eax], 0xffffffe5
je 0x10009395
lea ecx, [ebp - 0x5e0]
mov byte [ebp - 4], 7
call fcn.1002815b
xor eax, eax
mov dword [ebp - 0x20], 0x7e318b47
inc eax
lea ecx, [ebp - 0xed8]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x34], 4
push eax
call fcn.100280d9
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x54], 0x61c71bc7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10009437
push dword [ebp - 0x10]
lea ecx, [ebp - 0xed8]
call fcn.10028177
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1000941c
xor eax, eax
inc dword [ebp - 0x54]
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000944d
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
lea ecx, [ebp - 0xed8]
mov byte [ebp - 4], 7
call fcn.1002815b
lea eax, [ebp - 0x10a0]
xorps xmm0, xmm0
push eax
lea eax, [ebp - 0x10b0]
push eax
lea ecx, [ebp - 0x15cc]
movdqu xmmword [ebp - 0x10b0], xmm0
call fcn.10028186
lea ecx, [ebp - 0x256]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1d4]
push dword [esi]
call fcn.10028135
xor ebx, ebx
mov byte [ebp - 4], 0xb
inc ebx
lea ecx, [ebp - 0xa0]
push ebx
call fcn.100280d9
mov byte [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x18], 0xec0351a9
mov dword [ebp - 0x38], 0xf0ed6937
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100094ec
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa0]
call fcn.10028177
mov dword [eax], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100094cd
xor eax, eax
push eax
lea ecx, [ebp - 0xa0]
call fcn.10028177
xor ecx, ecx
push ecx
mov dword [eax], ecx
lea ecx, [ebp - 0xa0]
call fcn.10028177
cmp dword [eax], 3
jg 0x1000979f
xor ebx, ebx
inc ebx
mov dword [ebp - 0x1c], 0xa8d7d2a7
lea ecx, [ebp - 0x268]
push 2
call fcn.100280d9
mov byte [ebp - 4], 0xd
or eax, 0xffffffff
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x4c], 0xf3e8e036
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10009560
push dword [ebp - 0x10]
lea ecx, [ebp - 0x268]
call fcn.10028177
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10009544
xor eax, eax
push eax
lea ecx, [ebp - 0xa0]
call fcn.10028177
xor ecx, ecx
cmp dword [eax], ecx
jne 0x1000960e
push ecx
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
xor edi, edi
lea ecx, [ebp - 0xa0]
push edi
mov esi, eax
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
mov ecx, dword [esi]
xor edx, edx
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0xa0]
setl dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
call fcn.10028177
push edi
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push edi
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.10028177
xor edx, edx
cmp dword [eax], 0x10a83afd
sete dl
xor ecx, ecx
cmp edx, 0xfc35
setg cl
cmp ecx, dword [esi]
je 0x1000960e
xor eax, eax
mov esi, eax
jmp 0x10009616
xor esi, esi
xor ebx, ebx
inc esi
inc ebx
xor eax, eax
push eax
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
xor edi, edi
lea ecx, [ebp - 0x1d4]
push edi
call fcn.10028177
push edi
lea ecx, [ebp - 0xa0]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
xor ecx, ecx
cmp esi, dword [eax]
setge cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xa0]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], 0xad5b481d
sbb edi, edi
xor eax, eax
push eax
inc edi
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x268]
mov esi, eax
call fcn.10028177
xor ecx, ecx
push 1
cmp edi, dword [eax]
setg cl
xor ebx, ebx
cmp ecx, dword [esi]
lea ecx, [ebp - 0x268]
setl bl
call fcn.10028177
lea ecx, [ebp - 0xa0]
mov dword [eax], ebx
xor ebx, ebx
push ebx
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push 3
lea ecx, [ebp - 0x1d4]
call fcn.10028177
mov ecx, 0x5c2f
sub ecx, dword [eax]
cmp ecx, 0x25a33ed8
jge 0x100097c3
push ebx
lea ecx, [ebp - 0xa0]
call fcn.10028177
cmp dword [eax], ebx
jne 0x100097c3
mov eax, 0x3984
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0xd9c], eax
mov dword [ebp - 0xd98], eax
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x4c], eax
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0xc
call fcn.1002815b
xor esi, esi
lea ecx, [ebp - 0xa0]
push esi
call fcn.10028177
push esi
lea ecx, [ebp - 0xa0]
inc dword [eax]
call fcn.10028177
cmp dword [eax], 3
jle 0x10009514
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
lea ecx, [ebp - 0xa0]
call fcn.1002815b
lea ecx, [ebp - 0x1d4]
mov byte [ebp - 4], 7
call fcn.1002815b
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x100099b2
mov dword [ebp - 0x44], 0xcc19ab5a
or ebx, 0xffffffff
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], 9
cmp dword [ebp - 0x38], 0xfffffff8
jl 0x100097fb
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x100097f2
push eax
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
xor eax, eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffff8
jge 0x100097df
mov dword [ebp - 0x18], 1
xor eax, eax
cmp dword [ebp - 0x18], eax
jl 0x10009762
jmp 0x10009814
xor eax, eax
or ebx, 0xffffffff
mov dword [ebp - 0x1c], eax
jmp 0x10009826
push dword [ebp - 0x1c]
call fcn.10028177
mov dword [eax], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
lea ecx, [ebp - 0x268]
jl 0x10009819
push dword [ebp - 0x18]
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0xa0]
push ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0xa0]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x10009863
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10009866
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x18]
jne 0x10009883
xor ebx, ebx
lea ecx, [ebp - 0x268]
push ebx
call fcn.10028177
cmp dword [eax], ebx
jne 0x10009883
xor eax, eax
mov edx, eax
jmp 0x10009886
xor edx, edx
inc edx
mov eax, dword [ebp - 0x54]
xor ecx, ecx
cmp eax, edx
setg cl
xor edx, edx
inc edx
cmp ecx, edx
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0xa4cb52c2
setne cl
sub ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x44]
sub ecx, 0x2ca82e93
jne 0x100098d3
push edx
lea ecx, [ebp - 0x268]
call fcn.10028177
cmp dword [eax], 0
jne 0x100098d3
xor eax, eax
mov edi, eax
jmp 0x100098d8
xor edi, edi
inc edi
xor eax, eax
push eax
lea ecx, [ebp - 0xa0]
call fcn.10028177
lea ecx, [ebp - 0x1d4]
push dword [eax]
call fcn.10028177
push dword [ebp - 0x18]
lea ecx, [ebp - 0x268]
mov esi, eax
call fcn.10028177
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
cmp edi, dword [eax]
mov eax, dword [ebp - 0x44]
setge bl
xor edx, edx
cmp ebx, ecx
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [esi], ecx
jne 0x10009938
xor ebx, ebx
lea ecx, [ebp - 0x268]
push ebx
call fcn.10028177
cmp dword [eax], ebx
jne 0x10009938
xor eax, eax
mov esi, eax
jmp 0x1000993b
xor esi, esi
inc esi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x268]
call fcn.10028177
xor ecx, ecx
cmp dword [eax], esi
mov eax, dword [ebp - 0x54]
sete cl
xor ebx, ebx
cmp ecx, 2
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x44]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
or edx, 0xffffffff
cmp ecx, edx
setge al
sub eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
xor ebx, ebx
add eax, 0xffffa3c1
inc ebx
cmp eax, ebx
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x18]
jns 0x1000980f
jmp 0x10009765
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x414]
call fcn.10028177
mov dword [eax], 0x9dfc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x1000999b
movdqa xmm0, xmmword [0x10007b50]
lea ecx, [ebp - 0x1484]
or eax, 0xffffffff
mov dword [ebp - 0x2c], 0xfcc58a01
mov dword [ebp - 0x4c], 0xe76d238e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x11a0]
push eax
lea eax, [ebp - 0x11b0]
push eax
movdqu xmmword [ebp - 0x11b0], xmm0
call fcn.10028186
lea ecx, [ebp - 0x229]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xd64]
push dword [esi]
call fcn.10028135
push 2
pop ebx
mov byte [ebp - 4], 0xe
xor eax, eax
cmp dword [ebp - 0x2c], ebx
jl 0x10009a73
cmp dword [ebp - 0x2c], eax
mov ecx, 0xf068cd54
inc eax
add eax, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe6fc2e60
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], eax
je 0x10009a73
xor esi, esi
inc esi
jmp 0x10009a75
mov esi, eax
push ebx
lea ecx, [ebp - 0xd64]
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
cmp edx, dword [eax]
setg cl
xor eax, eax
inc eax
cmp ecx, eax
jb 0x10009b59
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], eax
or eax, 0xffffffff
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009ad3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1524], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10009abb
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x10009af1
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10009aee
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff3
jle 0x10009adc
mov dword [ebp - 0x38], eax
jmp 0x10009b51
mov dword [ebp - 0x48], 0xa7b48fe2
xor edx, edx
mov dword [ebp - 0x20], 7
mov eax, dword [ebp - 0x50]
cmp eax, 0x81cd
push ebx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xd64]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.10028177
mov eax, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x10009afc
jmp 0x10009bce
xor ecx, ecx
or edx, 0xffffffff
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 3
jge 0x10009b7d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1360], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10009b67
xor eax, eax
inc eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jge 0x10009bb4
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10009bab
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
or edx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x10009b85
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10009bc8
mov dword [ebp - 0x1358], 0x609e00c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jne 0x10009bbb
lea ecx, [ebp - 0xd64]
mov byte [ebp - 4], 7
call fcn.1002815b
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10009c05
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4d4]
call fcn.10028177
mov dword [eax], 0x807cfaf4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10009be7
xor eax, eax
push eax
lea ecx, [ebp - 0x414]
call fcn.10028177
xor edi, edi
lea ecx, [ebp - 0x4d4]
inc edi
push edi
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0x4d4]
push edi
mov dword [eax], ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0x414]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x414]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x414]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x4d4]
setg bl
call fcn.10028177
mov ecx, dword [ebp - 0x24]
add ecx, ebx
xor ebx, ebx
imul ecx, dword [ebp - 0x24]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x414]
setl bl
xor esi, esi
push esi
call fcn.10028177
xor ecx, ecx
push edi
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x4d4]
call fcn.10028177
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
push esi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x4d4]
setg bl
call fcn.10028177
lea ecx, [ebp - 0x4d4]
mov dword [eax], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], ebx
call fcn.1002815b
or esi, 0xffffffff
lea ecx, [ebp - 0x414]
mov dword [ebp - 4], esi
call fcn.1002815b
mov dword [ebp - 0x18], 0x841b3c69
xor eax, eax
mov dword [ebp - 0x54], 0x9d585ed0
inc eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x48], 0x563ade4
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], bl
je 0x10009d18
xor eax, eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
inc eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 5
jne 0x10009f94
jmp 0x10009d30
xor eax, eax
inc eax
mov dword [ebp - 0x30], 0x579253a3
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x38], 4
push eax
call fcn.100280d9
mov dword [ebp - 4], 0xf
xor eax, eax
mov dword [ebp - 0x54], 0xbc3fa0e8
mov dword [ebp - 0x10], eax
jmp 0x10009d70
push dword [ebp - 0x10]
call fcn.10028177
mov dword [eax], 0xe434392f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
lea ecx, [ebp - 0x3d0]
jl 0x10009d5f
mov eax, dword [ebp - 0x18]
xor ebx, ebx
mov eax, dword [ebp - 0x18]
push ebx
call fcn.10028177
mov edx, dword [ebp - 0x18]
mov esi, eax
mov ecx, dword [ebp - 0x18]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
push ebx
setl al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x3d0]
setne dl
mov dword [esi], edx
call fcn.10028177
push ebx
lea ecx, [ebp - 0x3d0]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
call fcn.10028177
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x18]
sub eax, 0x534a2c93
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
je 0x10009dff
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x10009e01
inc eax
jmp 0x10009e01
xor eax, eax
xor edx, edx
cmp eax, 0x39d3cd36
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1b
jl 0x10009f76
xor ebx, ebx
or esi, 0xffffffff
mov dword [ebp - 0x54], 0xbd6cd538
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x10], 0xcffae3c
mov dword [ebp - 0x2c], 0x57f0
mov dword [ebp - 0x40], 1
push 0xfffffffffffffffb
pop eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
push ebx
call fcn.10028177
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], 0x1828f6d4
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
neg ecx
sbb ecx, ecx
inc ecx
inc dword [ebp - 0x50]
cmp eax, ecx
je 0x10009e9c
xor eax, eax
inc eax
jmp 0x10009e9e
mov eax, ebx
xor ecx, ecx
cmp eax, 8
mov eax, dword [ebp - 0x54]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x40], 0x17
cmp dword [ebp - 0x40], 0xffffffee
jle 0x10009f67
mov dword [ebp - 0x44], 0x503a
lea ecx, [ebp - 0x3d0]
dec dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
push ebx
call fcn.10028177
mov dword [ebp - 0x54], ebx
xor edx, edx
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
add eax, 0xffff8eaf
add ecx, eax
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
push ebx
setge dl
lea ecx, [ebp - 0x3d0]
cmp esi, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [eax], ecx
jne 0x10009f36
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x10009f39
xor eax, eax
inc eax
mov dword [ebp - 0x58], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10009f57
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffee
push 0
pop ebx
jg 0x10009ece
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x1b
jge 0x10009e2c
jmp 0x10009f79
or esi, 0xffffffff
lea ecx, [ebp - 0x3d0]
mov dword [ebp - 4], esi
call fcn.1002815b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
je 0x10009d2d
mov dword [ebp - 0x54], 0x10f7
lea ecx, [ebp - 0x784]
mov dword [ebp - 0x4c], 0x528ace4b
push 4
call fcn.100280d9
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0xa4c]
mov dword [ebp - 0x50], 0x53f3ac9d
mov dword [ebp - 0x20], 9
push 2
call fcn.100280d9
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1000a001
xor ebx, ebx
inc ebx
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x784]
call fcn.10028177
mov dword [eax], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10009fe6
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000a01d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xa4c]
call fcn.10028177
mov dword [eax], 0x79facd4a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1000a006
mov eax, dword [ebp - 0x54]
xor ecx, ecx
mov eax, dword [ebp - 0x54]
cmp eax, 0xad94
setl cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x784]
mov esi, dword [ebp - 0x4c]
push eax
call fcn.10028177
mov dword [eax], esi
mov eax, dword [ebp - 0x50]
imul eax, esi
test eax, eax
je 0x1000a05f
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x1000a061
xor edx, edx
inc edx
jmp 0x1000a063
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 0x6d8ff8cd
jne 0x1000a08d
xor ebx, ebx
lea ecx, [ebp - 0x784]
push ebx
call fcn.10028177
cmp dword [eax], ebx
jne 0x1000a08d
xor eax, eax
mov ecx, eax
jmp 0x1000a090
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x50]
sub ecx, eax
je 0x1000a09a
mov eax, dword [ebp - 0x50]
xor eax, eax
lea ecx, [ebp - 0x784]
push eax
call fcn.10028177
xor ecx, ecx
xor ebx, ebx
push ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0xa4c]
setne bl
call fcn.10028177
lea ecx, [ebp - 0xa4c]
mov dword [eax], ebx
xor eax, eax
cmp ebx, 0x351f2000
setge al
sub eax, 0x13532fe2
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x58], eax
call fcn.1002815b
or esi, 0xffffffff
lea ecx, [ebp - 0x784]
mov dword [ebp - 4], esi
call fcn.1002815b
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xc2c]
call fcn.100280d9
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000a134
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc2c]
call fcn.10028177
mov dword [eax], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000a116
xor eax, eax
mov dword [ebp - 0x24], 1
cmp dword [ebp - 0x24], eax
jl 0x1000a18c
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1000a187
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000a166
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
push dword [ebp - 0x24]
lea ecx, [ebp - 0xc2c]
call fcn.10028177
cmp dword [eax], 0
jne 0x1000a185
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
push 0
pop eax
jle 0x1000a14c
xor eax, eax
dec dword [ebp - 0x24]
jns 0x1000a140
lea ecx, [ebp - 0xc2c]
mov dword [ebp - 4], esi
call fcn.1002815b
push 1
lea ecx, [ebp - 0x42c]
call fcn.100280d9
mov dword [ebp - 4], 0x13
lea eax, [ebp - 0x10c0]
movdqa xmm0, xmmword [0x10007b50]
lea ecx, [ebp - 0x1494]
mov dword [ebp - 0x2c], 0xfcc58a01
push eax
mov dword [ebp - 0x4c], 0xe76d238e
lea eax, [ebp - 0x10d0]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x30], esi
push eax
movdqu xmmword [ebp - 0x10d0], xmm0
call fcn.10028186
lea ecx, [ebp - 0x22b]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xa64]
push dword [esi]
call fcn.10028135
mov byte [ebp - 4], 0x14
xor eax, eax
cmp dword [ebp - 0x2c], ebx
jl 0x1000a263
cmp dword [ebp - 0x2c], eax
mov ecx, 0xf068cd54
inc eax
add eax, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe6fc2e60
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], eax
je 0x1000a263
xor esi, esi
inc esi
jmp 0x1000a265
mov esi, eax
push ebx
lea ecx, [ebp - 0xa64]
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
cmp edx, dword [eax]
setg cl
xor eax, eax
inc eax
or esi, 0xffffffff
cmp ecx, eax
jb 0x1000a349
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], eax
xor eax, eax
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000a2c3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1584], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000a2ab
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x1000a2e1
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000a2de
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff3
jle 0x1000a2cc
mov dword [ebp - 0x38], eax
jmp 0x1000a341
mov dword [ebp - 0x48], 0xa7b48fe2
xor edx, edx
mov dword [ebp - 0x20], 7
mov eax, dword [ebp - 0x50]
cmp eax, 0x81cd
push ebx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xa64]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.10028177
mov eax, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x1000a2ec
jmp 0x1000a3b8
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 3
jge 0x1000a36a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1318], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000a354
xor eax, eax
inc eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jge 0x1000a39e
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000a395
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1000a372
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000a3b2
mov dword [ebp - 0x1310], 0x609e00c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jne 0x1000a3a5
lea ecx, [ebp - 0xa64]
mov byte [ebp - 4], 0x13
call fcn.1002815b
push ebx
lea ecx, [ebp - 0x48c]
call fcn.100280d9
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xd1c]
mov dword [ebp - 0x44], 0x9696
push 1
call fcn.100280d9
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000a415
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd1c]
call fcn.10028177
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1000a3fa
xor eax, eax
push eax
lea ecx, [ebp - 0xd1c]
call fcn.10028177
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
inc ebx
cmp ebx, ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
mov dword [ebp - 0x44], eax
jmp 0x1000a451
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000a44e
push 0x851
push eax
push eax
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
xor eax, eax
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x37
je 0x1000a436
lea ecx, [ebp - 0xd1c]
mov byte [ebp - 4], 0x15
call fcn.1002815b
mov eax, 0xffff
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 0x24], eax
push ebx
call fcn.100280d9
xor eax, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000a4a8
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5b0]
call fcn.10028177
mov dword [eax], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1000a489
xor eax, eax
push eax
lea ecx, [ebp - 0x5b0]
call fcn.10028177
xor ecx, ecx
push ecx
mov dword [eax], ecx
jmp 0x1000a4e6
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000a4d5
push 0x389
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongA]
xor eax, eax
push eax
lea ecx, [ebp - 0x5b0]
call fcn.10028177
dec dword [eax]
xor eax, eax
push eax
lea ecx, [ebp - 0x5b0]
call fcn.10028177
cmp dword [eax], 0xffffffe5
je 0x1000a4bb
lea ecx, [ebp - 0x5b0]
mov byte [ebp - 4], 0x15
call fcn.1002815b
xor eax, eax
lea ecx, [ebp - 0xe3c]
inc eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x34], 4
push eax
call fcn.100280d9
mov byte [ebp - 4], 0x18
xor eax, eax
mov dword [ebp - 0x54], 0x61c71bc7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000a559
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe3c]
call fcn.10028177
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1000a53e
xor eax, eax
inc dword [ebp - 0x54]
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000a56f
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
lea ecx, [ebp - 0xe3c]
mov byte [ebp - 4], 0x15
call fcn.1002815b
lea eax, [ebp - 0x1220]
mov dword [ebp - 0x20], 0x7e318b47
push eax
lea eax, [ebp - 0x1230]
xorps xmm0, xmm0
push eax
lea ecx, [ebp - 0x13c4]
movdqu xmmword [ebp - 0x1230], xmm0
call fcn.10028186
lea ecx, [ebp - 0x22d]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1a4]
push dword [esi]
call fcn.10028135
push 1
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 0x19
call fcn.100280d9
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x18], 0xec0351a9
xor edi, edi
mov dword [ebp - 0x38], 0xf0ed6937
inc edi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000a615
push dword [ebp - 0x10]
lea ecx, [ebp - 0xdc]
call fcn.10028177
mov dword [eax], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000a5f7
xor eax, eax
push eax
lea ecx, [ebp - 0xdc]
call fcn.10028177
xor ecx, ecx
push ecx
mov dword [eax], ecx
jmp 0x1000aa54
mov dword [ebp - 0x1c], 0xa8d7d2a7
lea ecx, [ebp - 0x278]
push 2
call fcn.100280d9
mov byte [ebp - 4], 0x1b
or eax, 0xffffffff
mov dword [ebp - 0x48], eax
xor eax, eax
mov dword [ebp - 0x4c], 0xf3e8e036
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000a677
push dword [ebp - 0x10]
lea ecx, [ebp - 0x278]
call fcn.10028177
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000a65b
xor eax, eax
push eax
lea ecx, [ebp - 0xdc]
call fcn.10028177
xor ebx, ebx
cmp dword [eax], ebx
jne 0x1000a723
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
mov esi, eax
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
mov ecx, dword [esi]
xor edx, edx
push ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xdc]
setl dl
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
mov esi, eax
call fcn.10028177
xor edx, edx
cmp dword [eax], 0x10a83afd
sete dl
xor ecx, ecx
cmp edx, 0xfc35
setg cl
cmp ecx, dword [esi]
je 0x1000a723
xor eax, eax
mov edi, eax
jmp 0x1000a725
xor eax, eax
push eax
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0x1a4]
push ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
xor ecx, ecx
push ebx
cmp edi, dword [eax]
setge cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xdc]
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c], 0xad5b481d
sbb edi, edi
inc edi
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push 1
lea ecx, [ebp - 0x278]
mov esi, eax
call fcn.10028177
xor ecx, ecx
cmp edi, dword [eax]
setg cl
cmp ecx, dword [esi]
lea ecx, [ebp - 0x278]
setl bl
xor edi, edi
inc edi
push edi
call fcn.10028177
lea ecx, [ebp - 0xdc]
mov dword [eax], ebx
xor ebx, ebx
push ebx
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push 3
lea ecx, [ebp - 0x1a4]
call fcn.10028177
mov ecx, 0x5c2f
sub ecx, dword [eax]
cmp ecx, 0x25a33ed8
jge 0x1000a86d
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
cmp dword [eax], ebx
jne 0x1000a86d
mov eax, 0x3984
mov dword [ebp - 0xe20], eax
mov dword [ebp - 0xe1c], eax
mov dword [ebp - 0xe18], eax
mov dword [ebp - 0xe14], eax
mov eax, dword [ebp - 0xe18]
mov dword [ebp - 0x4c], eax
jmp 0x1000aa36
mov dword [ebp - 0x44], 0xcc19ab5a
or ebx, 0xffffffff
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x38], 9
cmp dword [ebp - 0x38], 0xfffffff8
jl 0x1000a8a5
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000a89c
push eax
push eax
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
xor eax, eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffff8
jge 0x1000a889
mov dword [ebp - 0x18], edi
xor eax, eax
cmp dword [ebp - 0x18], eax
jl 0x1000aa34
jmp 0x1000a8b7
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000a8c9
push dword [ebp - 0x1c]
call fcn.10028177
mov dword [eax], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
lea ecx, [ebp - 0x278]
jl 0x1000a8bc
push dword [ebp - 0x18]
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0xdc]
push ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0xdc]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1000a906
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1000a908
mov eax, edi
cmp eax, dword [ebp - 0x18]
jne 0x1000a925
xor ebx, ebx
lea ecx, [ebp - 0x278]
push ebx
call fcn.10028177
cmp dword [eax], ebx
jne 0x1000a925
xor eax, eax
mov edx, eax
jmp 0x1000a927
mov edx, edi
mov eax, dword [ebp - 0x48]
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, edi
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, 0xa4cb52c2
setne cl
sub ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x44]
sub ecx, 0x2ca82e93
jne 0x1000a972
push edi
lea ecx, [ebp - 0x278]
call fcn.10028177
cmp dword [eax], 0
jne 0x1000a972
xor eax, eax
mov dword [ebp - 0x54], eax
jmp 0x1000a977
mov dword [ebp - 0x54], edi
xor eax, eax
push eax
lea ecx, [ebp - 0xdc]
call fcn.10028177
lea ecx, [ebp - 0x1a4]
push dword [eax]
call fcn.10028177
push dword [ebp - 0x18]
lea ecx, [ebp - 0x278]
mov esi, eax
call fcn.10028177
mov ecx, dword [ebp - 0x54]
xor ebx, ebx
cmp ecx, dword [eax]
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
setge bl
xor edx, edx
cmp ebx, ecx
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [esi], ecx
jne 0x1000a9da
xor ebx, ebx
lea ecx, [ebp - 0x278]
push ebx
call fcn.10028177
cmp dword [eax], ebx
jne 0x1000a9da
xor eax, eax
mov esi, eax
jmp 0x1000a9dc
mov esi, edi
push dword [ebp - 0x18]
lea ecx, [ebp - 0x278]
call fcn.10028177
xor ecx, ecx
cmp dword [eax], esi
mov eax, dword [ebp - 0x48]
sete cl
xor ebx, ebx
cmp ecx, 2
setne bl
xor edx, edx
cmp ebx, eax
mov eax, dword [ebp - 0x44]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
or ebx, 0xffffffff
cmp ecx, ebx
setge al
sub eax, dword [ebp - 0x44]
neg eax
sbb eax, eax
add eax, 0xffffa3c1
cmp eax, edi
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x18]
jns 0x1000a8b5
xor ebx, ebx
lea ecx, [ebp - 0x278]
mov byte [ebp - 4], 0x1a
call fcn.1002815b
push ebx
lea ecx, [ebp - 0xdc]
call fcn.10028177
push ebx
inc dword [eax]
lea ecx, [ebp - 0xdc]
call fcn.10028177
cmp dword [eax], 3
jle 0x1000a62b
lea ecx, [ebp - 0xdc]
call fcn.1002815b
lea ecx, [ebp - 0x1a4]
mov byte [ebp - 4], 0x15
call fcn.1002815b
movdqa xmm0, xmmword [0x10007b50]
lea ecx, [ebp - 0x13dc]
or eax, 0xffffffff
mov dword [ebp - 0x2c], 0xfcc58a01
mov dword [ebp - 0x4c], 0xe76d238e
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x10e0]
push eax
lea eax, [ebp - 0x10f0]
push eax
movdqu xmmword [ebp - 0x10f0], xmm0
call fcn.10028186
lea ecx, [ebp - 0x239]
mov esi, eax
call fcn.10008cd5
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xa7c]
push dword [esi]
call fcn.10028135
push 2
pop ebx
mov byte [ebp - 4], 0x1c
xor eax, eax
cmp dword [ebp - 0x2c], ebx
jl 0x1000ab3b
cmp dword [ebp - 0x2c], eax
mov ecx, 0xf068cd54
mov eax, edi
mov esi, edi
add eax, 8
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xe6fc2e60
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], eax
jne 0x1000ab3d
mov esi, eax
push ebx
lea ecx, [ebp - 0xa7c]
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
xor edx, edx
cmp esi, ecx
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x2c]
cmp edx, dword [eax]
setg cl
xor eax, eax
or esi, 0xffffffff
cmp ecx, edi
jb 0x1000ac1a
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], edi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000ab94
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13ec], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000ab7c
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffe
jmp 0x1000abb2
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000abaf
push eax
call dword [sym.imp.USER32.dll_RegisterClassA]
xor eax, eax
dec dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xfffffff3
jle 0x1000ab9d
mov dword [ebp - 0x38], eax
jmp 0x1000ac12
mov dword [ebp - 0x48], 0xa7b48fe2
xor edx, edx
mov dword [ebp - 0x20], 7
mov eax, dword [ebp - 0x50]
cmp eax, 0x81cd
push ebx
setl dl
xor ecx, ecx
imul edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setne cl
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0xa7c]
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
call fcn.10028177
mov eax, dword [ebp - 0x50]
xor eax, eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x20], eax
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
je 0x1000abbd
jmp 0x1000ac89
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000ac38
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1390], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000ac23
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1000ac71
mov dword [ebp - 0x20], esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000ac67
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000ac40
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000ac83
mov dword [ebp - 0x1388], 0x609e00c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xf
jne 0x1000ac76
lea ecx, [ebp - 0xa7c]
mov byte [ebp - 4], 0x15
call fcn.1002815b
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x1000acc0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x42c]
call fcn.10028177
mov dword [eax], 0x9dfc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000aca2
xor eax, eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x934]
mov dword [ebp - 0x54], 0x23a266d2
push 3
call fcn.100280d9
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x54], 0xd9964374
mov dword [ebp - 0x34], 0x35dd253d
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000ad13
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x934]
call fcn.10028177
mov dword [eax], 0x5a3d7f19
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000acf4
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000ad29
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe70], 6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000ad18
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x1000ae83
mov dword [ebp - 0x30], 0xd6b65720
lea ecx, [ebp - 0x63c]
push edi
call fcn.100280d9
mov byte [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x1000ad7e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x63c]
call fcn.10028177
mov dword [eax], 0xa4137d6c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000ad60
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000ad94
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xf8c], 0x8aac1e0f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000ad83
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x934]
push edi
call fcn.10028177
mov ecx, dword [ebp - 0x30]
xor edx, edx
push edi
mov dword [eax], edi
mov eax, dword [ebp - 0x30]
cmp ecx, eax
lea ecx, [ebp - 0x934]
setl dl
mov dword [ebp - 0x54], edx
call fcn.10028177
mov ecx, dword [ebp - 0x30]
xor edx, edx
cmp ecx, 0x491b
setg dl
xor ebx, ebx
cmp edx, dword [eax]
mov eax, dword [ebp - 0x30]
setl bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x18]
setne cl
add eax, 2
add ecx, eax
xor edx, edx
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x54]
setle cl
xor ebx, ebx
cmp eax, ecx
lea ecx, [ebp - 0x63c]
setl bl
add ebx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x18]
imul ebx, eax
xor eax, eax
push eax
call fcn.10028177
mov dword [eax], ebx
mov eax, dword [ebp - 0x18]
sub ebx, eax
cmp ebx, dword [ebp - 0xf8c]
jle 0x1000ae45
xor ebx, ebx
lea ecx, [ebp - 0x63c]
push ebx
call fcn.10028177
cmp dword [eax], ebx
mov eax, ebx
je 0x1000ae47
mov eax, edi
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x54], eax
xor eax, eax
cmp dword [ebp - 0x54], eax
jne 0x1000ae6b
push eax
lea ecx, [ebp - 0x63c]
call fcn.10028177
xor ecx, ecx
cmp dword [eax], ecx
mov eax, ecx
je 0x1000ae6d
mov eax, edi
lea ecx, [ebp - 0x63c]
mov dword [ebp - 0xe70], eax
call fcn.1002815b
push 2
pop ebx
jmp 0x1000aeaa
mov dword [ebp - 0x18], eax
jmp 0x1000aea4
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000aea1
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
xor eax, eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x2f
jne 0x1000ae88
lea ecx, [ebp - 0x934]
mov byte [ebp - 4], 0x15
call fcn.1002815b
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1000aee1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x48c]
call fcn.10028177
mov dword [eax], 0x807cfaf4
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000aec3
xor eax, eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x54], 0x2b96ce02
cmp dword [ebp - 0x2c], eax
je 0x1000af13
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000b02f
push eax
push 0x15ad
push 0x1afb
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x1000b02d
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1000af33
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xfe8], 0xcbd9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000af1b
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x1000af53
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74c], 0xee3f2f34
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000af3b
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x1000af9e
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000af70
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
xor eax, eax
mov dword [ebp - 0x2c], 0xc
jmp 0x1000af96
mov dword [ebp - 0x54], 0xec79cf18
mov dword [ebp - 0x20], 0x46507e67
dec dword [ebp - 0x54]
cmp dword [ebp - 0x20], eax
jne 0x1000b01c
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x21
jge 0x1000af79
jmp 0x1000b01c
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x54], 0x2e9378f1
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000afc7
push 0x11dd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov eax, dword [ebp - 0xfe4]
xor edx, edx
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
push 0xfffffffffffffff6
pop ecx
sub ecx, eax
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0x2c]
cmp eax, 0xc164f943
setne dl
add edx, 0x8d7fb834
neg edx
sbb edx, edx
inc edx
cmp dword [ebp - 0x54], 0xc863cc1d
sbb eax, eax
inc eax
imul edx, eax
imul edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x48]
sub edx, 4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
mov dword [ebp - 0x74c], ecx
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b02d
push eax
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
xor eax, eax
push eax
lea ecx, [ebp - 0x42c]
call fcn.10028177
push edi
lea ecx, [ebp - 0x48c]
call fcn.10028177
xor ebx, ebx
lea ecx, [ebp - 0x48c]
push edi
mov dword [eax], ebx
call fcn.10028177
push ebx
lea ecx, [ebp - 0x42c]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x42c]
call fcn.10028177
push ebx
lea ecx, [ebp - 0x42c]
mov esi, eax
call fcn.10028177
mov ecx, dword [esi]
push edi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x48c]
setg bl
call fcn.10028177
mov ecx, dword [ebp - 0x24]
add ecx, ebx
xor ebx, ebx
imul ecx, dword [ebp - 0x24]
cmp ecx, dword [eax]
lea ecx, [ebp - 0x42c]
setl bl
xor esi, esi
push esi
call fcn.10028177
xor ecx, ecx
push edi
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0x48c]
call fcn.10028177
mov ecx, dword [ebp - 0x20]
xor ebx, ebx
push esi
cmp ecx, dword [eax]
lea ecx, [ebp - 0x48c]
setg bl
call fcn.10028177
lea ecx, [ebp - 0x48c]
mov dword [eax], ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], esi
call fcn.1002815b
or esi, 0xffffffff
lea ecx, [ebp - 0x42c]
mov dword [ebp - 4], esi
call fcn.1002815b
push 8
pop ecx
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x20], 0xe58b
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], 0xa4ccfd66
mov dword [ebp - 0x38], 0x4a938f73
cmp dword [ebp - 0x24], eax
je 0x1000b197
mov dword [ebp - 0x54], 0xfff7
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
jmp 0x1000b149
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1000], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000b138
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x54]
setge dl
imul edx, eax
xor eax, eax
cmp edx, 0xa17d
mov dword [ebp - 0xffc], edx
setl al
xor ecx, ecx
cmp eax, 0x5ba1
setge cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
jmp 0x1000b22e
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0x5b01d976
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffa
jge 0x1000b230
mov dword [ebp - 0x20], 0x8be
mov dword [ebp - 0x38], 0xf8609561
cmp dword [ebp - 0x38], eax
jne 0x1000b1d2
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2c], eax
jl 0x1000b1d2
xor eax, eax
mov ecx, eax
jmp 0x1000b1d4
mov ecx, edi
mov eax, dword [ebp - 0x4c]
add eax, ecx
cmp eax, dword [ebp - 0x4c]
jg 0x1000b1e7
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x24], eax
je 0x1000b1e9
mov ecx, edi
xor eax, eax
cmp ecx, 0xd0d4
setl al
xor edx, edx
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
cmp eax, ecx
mov eax, dword [ebp - 0x50]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b222
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffa
push 0
pop eax
jl 0x1000b1b1
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetScrollInfo]
mov dword [ebp - 0x38], 0x15
jmp 0x1000b27b
mov dword [ebp - 0x54], 0xf908
cmp dword [ebp - 0x54], eax
jne 0x1000b281
mov dword [ebp - 0x20], 0xfffffff7
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x1000b276
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b278
push eax
push 0xea5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor eax, eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
jg 0x1000b23f
mov dword [ebp - 0x18], 0x841b3c69
mov dword [ebp - 0x54], 0x9d585ed0
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x48], 0x563ade4
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000b2b5
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000b515
mov dword [ebp - 0x30], 0x579253a3
lea ecx, [ebp - 0x348]
mov dword [ebp - 0x38], 4
push edi
call fcn.100280d9
mov dword [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x54], 0xbc3fa0e8
mov dword [ebp - 0x10], eax
jmp 0x1000b2fd
push dword [ebp - 0x10]
call fcn.10028177
mov dword [eax], 0xe434392f
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x348]
cmp dword [ebp - 0x10], edi
jl 0x1000b2ec
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
call fcn.10028177
mov edx, dword [ebp - 0x18]
mov esi, eax
mov ecx, dword [ebp - 0x18]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setl al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x348]
setne dl
mov dword [esi], edx
xor esi, esi
push esi
call fcn.10028177
push esi
lea ecx, [ebp - 0x348]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x30]
call fcn.10028177
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x18]
sub eax, 0x534a2c93
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
je 0x1000b38e
xor eax, eax
cmp dword [ebp - 0x30], eax
je 0x1000b390
mov eax, edi
jmp 0x1000b390
xor eax, eax
xor edx, edx
cmp eax, 0x39d3cd36
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x1b
jl 0x1000b501
xor esi, esi
mov dword [ebp - 0x54], 0xbd6cd538
lea ecx, [ebp - 0x348]
or eax, 0xffffffff
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], 0xcffae3c
mov dword [ebp - 0x2c], 0x57f0
mov dword [ebp - 0x40], edi
push 0xfffffffffffffffb
pop eax
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x10]
push esi
call fcn.10028177
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], 0x1828f6d4
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x50]
neg ecx
sbb ecx, ecx
inc ecx
inc dword [ebp - 0x50]
cmp eax, ecx
mov eax, edi
cmove eax, esi
xor ecx, ecx
cmp eax, 8
mov eax, dword [ebp - 0x54]
setle cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x40], 0x17
cmp dword [ebp - 0x40], 0xffffffee
jle 0x1000b4f4
mov dword [ebp - 0x44], 0x503a
lea ecx, [ebp - 0x348]
dec dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
push esi
call fcn.10028177
mov dword [ebp - 0x54], esi
xor edx, edx
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x48]
add eax, 0xffff8eaf
add ecx, eax
add ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
cmp ecx, eax
push esi
setge dl
lea ecx, [ebp - 0x348]
or eax, 0xffffffff
cmp eax, edx
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
call fcn.10028177
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [eax], ecx
jne 0x1000b4c0
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1000b4c2
mov eax, edi
mov dword [ebp - 0x58], eax
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b4e4
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffee
push 0
pop esi
jg 0x1000b455
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x1b
jge 0x1000b3b8
or eax, 0xffffffff
lea ecx, [ebp - 0x348]
mov dword [ebp - 4], eax
call fcn.1002815b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 5
je 0x1000b2bd
push 4
lea ecx, [ebp - 0x148]
call fcn.100280d9
mov dword [ebp - 4], 0x20
xor eax, eax
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x1000b559
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0x39b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1000b544
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1000b581
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x148]
call fcn.10028177
mov dword [eax], 0x743d837b
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1000b562
xor eax, eax
push eax
lea ecx, [ebp - 0x148]
call fcn.10028177
xor ecx, ecx
push ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x148]
call fcn.10028177
cmp dword [eax], 0
jl 0x1000b6be
push 3
lea ecx, [ebp - 0xc44]
call fcn.100280d9
xor eax, eax
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000b5e1
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc44]
call fcn.10028177
mov dword [eax], 0xb9193c1d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000b5c2
xor eax, eax
push eax
lea ecx, [ebp - 0x148]
call fcn.10028177
xor esi, esi
lea ecx, [ebp - 0x148]
push esi
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
push esi
lea ecx, [ebp - 0xc44]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x70]
call fcn.10028177
mov dword [eax], esi
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b68b
call dword [sym.imp.USER32.dll_GetCapture]
lea ecx, [ebp - 0xc44]
mov byte [ebp - 4], 0x20
call fcn.1002815b
xor esi, esi
lea ecx, [ebp - 0x148]
push esi
call fcn.10028177
push esi
lea ecx, [ebp - 0x148]
dec dword [eax]
call fcn.10028177
cmp dword [eax], esi
jge 0x1000b5a6
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000b6e8
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000b6e5
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe4
jg 0x1000b6c5
or esi, 0xffffffff
lea ecx, [ebp - 0x148]
mov dword [ebp - 4], esi
call fcn.1002815b
push 8
pop ecx
mov dword [ebp - 0x24], ecx
xor eax, eax
mov dword [ebp - 0x20], 0xe58b
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], 0xa4ccfd66
mov dword [ebp - 0x38], 0x4a938f73
cmp dword [ebp - 0x24], eax
je 0x1000b792
mov dword [ebp - 0x54], 0xfff7
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], eax
jmp 0x1000b744
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1014], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000b733
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x54]
setge dl
imul edx, eax
xor eax, eax
cmp edx, 0xa17d
mov dword [ebp - 0x1010], edx
setl al
xor ecx, ecx
cmp eax, 0x5ba1
setge cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x2c], eax
jmp 0x1000b829
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x54], 0x5b01d976
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xfffffffa
jge 0x1000b82b
mov dword [ebp - 0x20], 0x8be
mov dword [ebp - 0x38], 0xf8609561
cmp dword [ebp - 0x38], eax
jne 0x1000b7cd
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2c], eax
jl 0x1000b7cd
xor eax, eax
mov ecx, eax
jmp 0x1000b7cf
mov ecx, edi
mov eax, dword [ebp - 0x4c]
add eax, ecx
cmp eax, dword [ebp - 0x4c]
jg 0x1000b7e2
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x24], eax
je 0x1000b7e4
mov ecx, edi
xor eax, eax
cmp ecx, 0xd0d4
setl al
xor edx, edx
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
cmp eax, ecx
mov eax, dword [ebp - 0x50]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b81d
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffa
push 0
pop eax
jl 0x1000b7ac
xor eax, eax
mov dword [ebp - 0x38], 0x15
jmp 0x1000b870
mov dword [ebp - 0x54], 0xf908
cmp dword [ebp - 0x54], eax
jne 0x1000b876
mov dword [ebp - 0x20], 0xfffffff7
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
xor eax, eax
cmp dword [ebp - 0x38], eax
jne 0x1000b86b
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x1000b86d
xor eax, eax
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 9
jg 0x1000b834
mov dword [ebp - 0x18], 0x841b3c69
mov dword [ebp - 0x54], 0x9d585ed0
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x48], 0x563ade4
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1000b8aa
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000bb06