Function at 0x100097bb
Capabilities:
Check os version
Compare security identifiers
Create process on windows
Delete directory
Get common file path
Get session user name
Get system information on windows
Identify system language via api
Parse pe header
Read .ini file
Resume thread
Start service
Suspend thread

Disassembly:
mov eax, 0x1007519c
call fcn.10074678
mov eax, 0x139c
call fcn.1006fe40
push ebx
push esi
push edi
push 3
pop ebx
mov dword [ebp - 0x70], ecx
lea ecx, [ebp - 0x150]
push ebx
mov byte [ebp - 0x8d], dl
call fcn.10008eaf
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x4c], 4
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10009823
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x150]
call fcn.10008f1c
mov dword [eax], 0x8261f9c2
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10009805
xor eax, eax
push 2
pop ecx
mov dword [ebp - 0x1c], eax
push 0xffffffffffffffff
pop edi
cmp dword [ebp - 0x1c], ecx
jge 0x10009845
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10009831
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jge 0x10009861
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc38], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000984d
xor eax, eax
mov dword [ebp - 0xac], ecx
push 1
pop ebx
cmp dword [ebp - 0xac], eax
jl 0x100099db
mov dword [ebp - 0x28], 0xcf2e5664
lea ecx, [ebp - 0x150]
push dword [ebp - 0xac]
call fcn.10008f1c
push dword [ebp - 0xac]
lea ecx, [ebp - 0x150]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push 0xfffffffffffffffe
mov dword [eax], ecx
pop eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jge 0x100099cf
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x10], 6
push dword [ebp - 0xac]
call fcn.10008f1c
push dword [ebp - 0xac]
lea ecx, [ebp - 0x150]
call fcn.10008f1c
push dword [ebp - 0xac]
xor ecx, ecx
cmp dword [eax], 0x2afd77cc
setl cl
xor ebx, ebx
cmp ecx, 0xf5f40e13
lea ecx, [ebp - 0x150]
setne bl
call fcn.10008f1c
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0xac]
setle cl
add eax, ecx
xor ecx, ecx
cmp eax, edi
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
lea ecx, [ebp - 0x150]
setne dl
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0xac]
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x150]
push dword [ebp - 0xac]
call fcn.10008f1c
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x150]
mov eax, dword [ebp - 0xac]
sete dl
xor ebx, ebx
cmp edx, eax
setge bl
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [ebp - 0xac]
push dword [ebp - 0xac]
add ecx, ebx
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x150]
setl bl
call fcn.10008f1c
xor edx, edx
push 1
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop ebx
setl dl
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xb
jl 0x100098b5
dec dword [ebp - 0xac]
jns 0x10009876
mov eax, dword [ebp - 0xc38]
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], edi
call fcn.10008f17
xor eax, eax
mov dword [ebp - 0x10], 0x68206240
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10009a0c
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10009a27
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009a24
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffeb
jne 0x10009a11
push 4
lea ecx, [ebp - 0x160]
call fcn.10008eaf
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x1c], 0x2ba39464
mov dword [ebp - 0x20], 0x3371247a
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10009a74
push dword [ebp - 0x10]
lea ecx, [ebp - 0x160]
call fcn.10008f1c
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10009a59
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
jl 0x10009ad9
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jl 0x10009acd
push dword [ebp - 0x10]
lea ecx, [ebp - 0x160]
call fcn.10008f1c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x160]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push dword [ebp - 0x1c]
mov dword [eax], ecx
lea ecx, [ebp - 0x160]
call fcn.10008f1c
cmp dword [eax], 0
jne 0x10009ac8
dec dword [ebp - 0x10]
jns 0x10009a8e
push 3
xor eax, eax
pop ecx
mov dword [ebp - 0x20], 0x3c0b
dec dword [ebp - 0x1c]
jns 0x10009a7f
push eax
lea ecx, [ebp - 0x160]
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
je 0x10009c7d
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10009c7f
push 2
pop eax
mov dword [ebp - 0x24], edi
lea ecx, [ebp - 0x668]
push eax
call fcn.10008eaf
push 2
pop eax
push eax
lea ecx, [ebp - 0x6ec]
mov byte [ebp - 4], al
call fcn.10008eaf
push 3
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x4c], 0xe056
push 2
mov dword [ebp - 0x34], eax
pop esi
cmp dword [ebp - 0x34], esi
jge 0x10009b63
push dword [ebp - 0x34]
lea ecx, [ebp - 0x668]
call fcn.10008f1c
mov dword [eax], 0xcfd1f913
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x10009b45
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10009b7f
push dword [ebp - 0x34]
lea ecx, [ebp - 0x6ec]
call fcn.10008f1c
mov dword [eax], 0x2f470b9c
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x10009b68
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x24]
push esi
call fcn.10008f1c
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp dword [eax], ecx
mov ecx, dword [ebp - 0x24]
setge dl
xor eax, eax
cmp edx, ebx
setg al
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x24]
inc eax
add eax, ecx
jne 0x10009bc3
mov esi, eax
cmp dword [ebp - 0x28], eax
je 0x10009bc5
mov esi, ebx
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp esi, eax
push ebx
setge cl
xor eax, eax
cmp edx, ecx
lea ecx, [ebp - 0x668]
setne al
mov dword [ebp - 0x28], eax
call fcn.10008f1c
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10009c37
push eax
lea ecx, [ebp - 0x6ec]
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x160]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x668]
mov eax, dword [ebp - 0x24]
push ebx
call fcn.10008f1c
xor eax, eax
lea ecx, [ebp - 0x6ec]
push eax
call fcn.10008f1c
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x668]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x6ec]
mov esi, dword [ebp - 0x4c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10008f1c
lea ecx, [ebp - 0x6ec]
mov dword [eax], esi
call fcn.10008f17
lea ecx, [ebp - 0x668]
call fcn.10008f17
jmp 0x10009d37
xor eax, eax
mov dword [ebp - 0x48], 0x90ae73
mov dword [ebp - 0x10], 0xf213ed42
mov dword [ebp - 0x2c], 0x3ce7
mov dword [ebp - 0x44], 0xfffffff9
cmp dword [ebp - 0x1c], eax
jne 0x10009ca7
cmp dword [ebp - 0x48], eax
je 0x10009ca7
mov eax, ebx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
push 2
pop eax
push eax
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x160]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
push ebx
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], eax
jge 0x10009d2f
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x160]
push 3
pop eax
push eax
call fcn.10008f1c
mov esi, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
sub esi, 5
cmp esi, ecx
mov edi, eax
setle dl
cmp edx, ebx
sbb ecx, ecx
xor eax, eax
inc ecx
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [edi]
setl al
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x10], 3
test eax, eax
je 0x10009d92
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x10009d31
mov eax, ebx
mov dword [ebp - 0x44], eax
or edi, 0xffffffff
lea ecx, [ebp - 0x160]
mov dword [ebp - 4], edi
call fcn.10008f17
push 3
pop eax
push eax
lea ecx, [ebp - 0x170]
call fcn.10008eaf
push 4
pop esi
mov dword [ebp - 4], esi
xor eax, eax
mov dword [ebp - 0x44], 0x2eb9
mov dword [ebp - 0x4c], 0xc69aed23
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10009d7e
push eax
push 0xa
push eax
call dword [sym.imp.ADVAPI32.dll_ControlService]
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [ebp - 0x44], eax
je 0x10009d96
mov dword [ebp - 0x4c], 0xffffc714
jmp 0x10009db7
xor eax, eax
jmp 0x10009d31
mov dword [ebp - 0x44], 0x126ff23b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009daf
call edi
push eax
call dword [sym.imp.USER32.dll_HideCaret]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffffc
mov dword [ebp - 0x4c], esi
push 3
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x10009ded
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x170]
call fcn.10008f1c
push 3
mov dword [eax], 0x8261f9c2
inc dword [ebp - 0x1c]
pop eax
cmp dword [ebp - 0x1c], eax
jl 0x10009dcc
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x10009e0f
or edx, 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb8], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10009dfb
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jge 0x10009e2b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc4c], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10009e17
xor eax, eax
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0xb4], eax
jl 0x10009fa5
mov dword [ebp - 0x28], 0xcf2e5664
lea ecx, [ebp - 0x170]
push dword [ebp - 0xb4]
call fcn.10008f1c
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x170]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push 0xfffffffffffffffe
mov dword [eax], ecx
pop eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jge 0x10009f99
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x10], 6
push dword [ebp - 0xb4]
call fcn.10008f1c
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x170]
call fcn.10008f1c
push dword [ebp - 0xb4]
xor ecx, ecx
cmp dword [eax], 0x2afd77cc
setl cl
xor ebx, ebx
cmp ecx, 0xf5f40e13
lea ecx, [ebp - 0x170]
setne bl
call fcn.10008f1c
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0xb4]
setle cl
or edx, 0xffffffff
add eax, ecx
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
lea ecx, [ebp - 0x170]
setne dl
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0xb4]
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x170]
push dword [ebp - 0xb4]
call fcn.10008f1c
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x170]
mov eax, dword [ebp - 0xb4]
sete dl
xor ebx, ebx
cmp edx, eax
setge bl
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [ebp - 0xb4]
push dword [ebp - 0xb4]
add ecx, ebx
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x170]
setl bl
call fcn.10008f1c
xor edx, edx
push 1
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop ebx
setl dl
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xb
jl 0x10009e7c
dec dword [ebp - 0xb4]
jns 0x10009e3d
mov eax, dword [ebp - 0xc4c]
lea ecx, [ebp - 0x170]
mov dword [ebp - 0x4c], eax
or esi, 0xffffffff
mov dword [ebp - 4], esi
call fcn.10008f17
xor ebx, ebx
lea ecx, [ebp - 0xd28]
mov dword [ebp - 0x40], ebx
xor eax, eax
mov dword [ebp - 0x40], 0xb3f4f46d
inc eax
mov dword [ebp - 0x40], 0x61f66568
mov dword [ebp - 0x40], 0x737a9a97
mov dword [ebp - 0x40], 0xf5f49900
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], eax
push 2
mov dword [ebp - 0x40], 0x65e3edfa
mov dword [ebp - 0x40], eax
pop eax
mov dword [ebp - 0x40], 0xb2aee5a9
push eax
call fcn.10008eaf
mov dword [ebp - 4], 5
lea eax, [ebp - 0xe2c]
movdqa xmm0, xmmword [0x10007ec0]
lea ecx, [ebp - 0x1174]
mov dword [ebp - 0x40], 0xd1022782
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], 0x29694d2b
mov dword [ebp - 0x40], 0xadb82134
push 2
mov dword [ebp - 0x40], ebx
pop ebx
push eax
lea eax, [ebp - 0xe3c]
mov dword [ebp - 0x40], 0xaf9f7c8b
mov dword [ebp - 0x40], 0x32e3ca36
mov dword [ebp - 0x40], ebx
push eax
movdqu xmmword [ebp - 0xe3c], xmm0
call fcn.10008f2e
lea ecx, [ebp - 0x161]
mov esi, eax
call fcn.10008f2b
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1028]
push dword [esi]
call fcn.10008ef1
mov byte [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1000a0b3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x900], 0x8bac04ee
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000a09b
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000a0cf
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xd28]
call fcn.10008f1c
mov dword [eax], 0xedade098
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x1000a0b8
inc dword [ebp - 0x900]
lea ecx, [ebp - 0x1028]
inc dword [ebp - 0x4c]
call fcn.10008f17
or eax, 0xffffffff
lea ecx, [ebp - 0xd28]
mov dword [ebp - 4], eax
call fcn.10008f17
push 3
pop eax
push eax
lea ecx, [ebp - 0x1a0]
call fcn.10008eaf
push 7
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffffc
push 0xfffffffffffffffe
mov dword [ebp - 0x18], eax
pop ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x5c], ecx
push 4
pop esi
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x28], 0xd371
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x18], 0xffffffea
cmp dword [ebp - 0x18], 0xffffffe7
jg 0x1000a519
xor esi, esi
inc esi
mov dword [ebp - 0x20], 0x5ce
lea ecx, [ebp - 0x2b4]
push esi
call fcn.10008eaf
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x828]
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x4c], 0x9d2d10a6
push ebx
call fcn.10008eaf
mov byte [ebp - 4], 9
xor eax, eax
mov dword [ebp - 0x4c], 0xc2479274
mov dword [ebp - 0x4c], 0xd11537c3
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jge 0x1000a1a5
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x80], esi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x1000a194
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], esi
jge 0x1000a1cb
push dword [ebp - 0x34]
lea ecx, [ebp - 0x2b4]
call fcn.10008f1c
mov dword [eax], 0x5621
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x1000a1ad
xor eax, eax
push 3
mov dword [ebp - 0x34], eax
pop ecx
cmp dword [ebp - 0x34], ecx
jge 0x1000a1ee
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x450], 0xe9d3b05e
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jl 0x1000a1d6
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1000a206
push dword [ebp - 0x34]
lea ecx, [ebp - 0x828]
call fcn.10008f1c
mov dword [eax], esi
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x1000a1f3
mov eax, dword [ebp - 0x80]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x80]
cmp ecx, eax
mov eax, dword [ebp - 0x80]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x80]
sete bl
xor ecx, ecx
cmp ebx, eax
setg cl
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x80]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x20]
imul eax, ecx
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
add eax, 8
je 0x1000a259
mov eax, dword [ebp - 0x80]
xor eax, eax
cmp dword [ebp - 0x80], eax
mov dword [ebp - 0x10], eax
je 0x1000a2f8
cmp dword [ebp - 0x10], 4
jge 0x1000a286
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfbc], 0x62b56095
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000a26d
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x1000a367
mov dword [ebp - 0x4c], 0x162c80f3
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xfb4]
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, ecx
neg eax
sbb eax, eax
xor ecx, ecx
add eax, 0x3c3fa3ca
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xfb4]
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1000a292
jmp 0x1000a365
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x270], 0xafa0b2b0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000a2e7
mov eax, dword [ebp - 0x270]
lea ecx, [ebp - 0x2b4]
mov esi, dword [ebp - 0x5c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10008f1c
mov ecx, dword [ebp - 0x270]
mov eax, dword [eax]
sub eax, ecx
xor ecx, ecx
cmp eax, 0xb4ff
setge cl
neg esi
dec esi
neg esi
sbb esi, esi
xor eax, eax
inc esi
cmp ecx, esi
setne al
cmp eax, 0xfffffffd
jne 0x1000a350
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1000a350
xor esi, esi
mov edx, eax
inc esi
jmp 0x1000a355
xor esi, esi
inc esi
mov edx, esi
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x450], ecx
xor eax, eax
push eax
lea ecx, [ebp - 0x2b4]
call fcn.10008f1c
mov ecx, dword [ebp - 0x450]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x80]
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x450]
je 0x1000a395
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x450]
xor eax, eax
cmp dword [ebp - 0x80], eax
jne 0x1000a3a9
cmp dword [ebp - 0x2c], eax
jne 0x1000a3a9
mov esi, eax
push eax
lea ecx, [ebp - 0x2b4]
call fcn.10008f1c
mov ecx, dword [ebp - 0x28]
xor edx, edx
sub esi, ecx
add esi, dword [ebp - 0x2c]
imul esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x28]
cmp esi, ecx
setl dl
xor ecx, ecx
add edx, dword [eax]
mov eax, dword [ebp - 0x450]
neg eax
cmp eax, edx
mov eax, dword [ebp - 0x38]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x80]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
lea eax, [ecx + 0xbda6]
mov ecx, dword [ebp - 0x1c]
imul ecx, eax
mov eax, dword [ebp - 0x28]
imul ecx, ecx, 0xe547
cmp ecx, eax
setne dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x38], eax
jle 0x1000a41a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
je 0x1000a433
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x1000a435
lea edx, [eax + 1]
jmp 0x1000a437
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x450], edx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x4c], ecx
inc eax
mov esi, dword [ebp - 0x4c]
lea ecx, [ebp - 0x828]
push eax
call fcn.10008f1c
xor ebx, ebx
lea ecx, [ebp - 0x2b4]
push ebx
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
or edx, 0xffffffff
cmp eax, edx
setg cl
xor esi, esi
imul eax, ecx, 0xf08
inc esi
cmp eax, dword [ebp - 0x1c]
jle 0x1000a499
push esi
lea ecx, [ebp - 0x828]
call fcn.10008f1c
push ebx
lea ecx, [ebp - 0x2b4]
call fcn.10008f1c
xor edx, edx
push ebx
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
lea ecx, [ebp - 0x2b4]
setge dl
sub edx, 0xb408
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x4c], edx
call fcn.10008f1c
mov edx, dword [ebp - 0x4c]
sub edx, dword [eax]
mov eax, dword [ebp - 0x80]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x828]
call fcn.10008f17
push 7
pop eax
lea ecx, [ebp - 0x2b4]
mov byte [ebp - 4], al
call fcn.10008f17
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe7
push 2
pop ebx
jle 0x1000a147
push 4
xor eax, eax
pop esi
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a533
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x28], 0x97eede0b
mov dword [ebp - 0x10], 0x48c66f5a
mov eax, dword [ebp - 0x28]
add eax, ebx
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0xb
cmp dword [ebp - 0x28], 5
jge 0x1000a57a
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000a56b
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], eax
jne 0x1000a571
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe4
jne 0x1000a560
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 5
jl 0x1000a55b
push 0xfffffffffffffff8
pop eax
push 3
pop ebx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x744]
push ebx
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1000a5bb
push dword [ebp - 0x18]
lea ecx, [ebp - 0x744]
call fcn.10008f1c
mov dword [eax], 0xf767
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1000a59d
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x18], eax
inc ebx
cmp dword [ebp - 0x18], ebx
jge 0x1000a5de
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x60c], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1000a5c6
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffec
cmp dword [ebp - 0x1c], 0xffffffee
jge 0x1000a6f9
jmp 0x1000a5f3
xor eax, eax
mov dword [ebp - 0x20], 0x29c4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0xc869b7d6
mov dword [ebp - 0x4c], 0x7b35f197
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x2c], 0x45b6d4f5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
jle 0x1000a630
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], 5
jbe 0x1000a660
cmp dword [ebp - 0x20], eax
je 0x1000a660
mov eax, ebx
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x744]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x744]
mov eax, dword [ebp - 0x20]
push ebx
call fcn.10008f1c
mov esi, eax
lea ecx, [ebp - 0x744]
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [esi]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x20]
jg 0x1000a6c2
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x1000a6c4
mov eax, ebx
jmp 0x1000a6c4
xor eax, eax
mov edx, dword [ebp - 0x20]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x60c], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000a6e9
call dword [sym.imp.USER32.dll_ReleaseCapture]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jl 0x1000a5f1
push 4
pop esi
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000a70c
call edi
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
push 7
pop eax
lea ecx, [ebp - 0x744]
mov byte [ebp - 4], al
call fcn.10008f17
xor eax, eax
push 3
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x1000a74b
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1a0]
call fcn.10008f1c
push 3
mov dword [eax], 0x8261f9c2
inc dword [ebp - 0x1c]
pop eax
cmp dword [ebp - 0x1c], eax
jl 0x1000a72a
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x1000a76d
or edx, 0xffffffff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000a759
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000a77f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xcd8], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000a772
push esi
lea ecx, [ebp - 0x390]
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1000a7b6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1214], 0xdc85
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000a79e
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000a7c9
push dword [ebp - 0x18]
call fcn.10008f1c
and dword [eax], 0
inc dword [ebp - 0x18]
lea ecx, [ebp - 0x390]
cmp dword [ebp - 0x18], esi
jl 0x1000a7bb
push 2
pop esi
push esi
call fcn.10008f1c
and dword [eax], 0
jmp 0x1000a821
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000a7fb
push eax
push 0x110a
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push esi
lea ecx, [ebp - 0x390]
call fcn.10008f1c
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x1214], 0
jne 0x1000a834
push esi
lea ecx, [ebp - 0x390]
call fcn.10008f1c
inc dword [eax]
push esi
lea ecx, [ebp - 0x390]
call fcn.10008f1c
push 3
pop ecx
cmp dword [eax], ecx
jle 0x1000a7e2
push 7
pop eax
lea ecx, [ebp - 0x390]
mov byte [ebp - 4], al
call fcn.10008f17
xor eax, eax
mov dword [ebp - 0xc4], esi
cmp dword [ebp - 0xc4], eax
jl 0x1000ad75
jmp 0x1000a85d
xor eax, eax
mov dword [ebp - 0x10], 0x68206240
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a876
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000a891
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a88e
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffeb
jne 0x1000a87b
mov dword [ebp - 0x28], 0xcf2e5664
lea ecx, [ebp - 0x180]
push 4
call fcn.10008eaf
mov byte [ebp - 4], 0xc
xor eax, eax
mov dword [ebp - 0x1c], 0x2ba39464
mov dword [ebp - 0x20], 0x3371247a
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1000a8ec
or esi, 0xffffffff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x180]
call fcn.10008f1c
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000a8ce
push 2
xor eax, eax
pop esi
push 3
pop ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
jl 0x1000a954
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jl 0x1000a945
push dword [ebp - 0x10]
lea ecx, [ebp - 0x180]
call fcn.10008f1c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x180]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push dword [ebp - 0x1c]
mov dword [eax], ecx
lea ecx, [ebp - 0x180]
call fcn.10008f1c
cmp dword [eax], 0
jne 0x1000a940
dec dword [ebp - 0x10]
jns 0x1000a906
push 3
xor eax, eax
pop ecx
mov dword [ebp - 0x20], 0x3c0b
dec dword [ebp - 0x1c]
jns 0x1000a8f7
push 2
pop esi
push eax
lea ecx, [ebp - 0x180]
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
je 0x1000aaf1
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1000aaf3
or eax, 0xffffffff
lea ecx, [ebp - 0x59c]
mov dword [ebp - 0x24], eax
push esi
call fcn.10008eaf
push esi
lea ecx, [ebp - 0x680]
mov byte [ebp - 4], 0xd
call fcn.10008eaf
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x4c], 0xe056
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1000a9d7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x59c]
call fcn.10008f1c
mov dword [eax], 0xcfd1f913
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000a9b9
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000a9f3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x680]
call fcn.10008f1c
mov dword [eax], 0x2f470b9c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000a9dc
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x180]
mov eax, dword [ebp - 0x24]
push esi
call fcn.10008f1c
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp dword [eax], ecx
mov ecx, dword [ebp - 0x24]
setge dl
xor eax, eax
cmp edx, ebx
setg al
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x24]
inc eax
add eax, ecx
jne 0x1000aa37
mov esi, eax
cmp dword [ebp - 0x28], eax
je 0x1000aa39
mov esi, ebx
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp esi, eax
push ebx
setge cl
xor eax, eax
cmp edx, ecx
lea ecx, [ebp - 0x59c]
setne al
mov dword [ebp - 0x28], eax
call fcn.10008f1c
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000aaab
push eax
lea ecx, [ebp - 0x680]
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x180]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x59c]
mov eax, dword [ebp - 0x24]
push ebx
call fcn.10008f1c
xor eax, eax
lea ecx, [ebp - 0x680]
push eax
call fcn.10008f1c
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x59c]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x680]
mov esi, dword [ebp - 0x4c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10008f1c
lea ecx, [ebp - 0x680]
mov dword [eax], esi
call fcn.10008f17
lea ecx, [ebp - 0x59c]
call fcn.10008f17
jmp 0x1000abab
xor eax, eax
mov dword [ebp - 0x48], 0x90ae73
mov dword [ebp - 0x10], 0xf213ed42
mov dword [ebp - 0x2c], 0x3ce7
mov dword [ebp - 0x44], 0xfffffff9
cmp dword [ebp - 0x1c], eax
jne 0x1000ab1b
cmp dword [ebp - 0x48], eax
je 0x1000ab1b
mov eax, ebx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x180]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
push esi
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x180]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
push ebx
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], eax
jge 0x1000aba0
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x180]
push 3
pop eax
push eax
call fcn.10008f1c
mov esi, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
sub esi, 5
cmp esi, ecx
mov edi, eax
setle dl
cmp edx, ebx
sbb ecx, ecx
xor eax, eax
inc ecx
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [edi]
setl al
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x10], 3
test eax, eax
je 0x1000abee
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1000aba2
mov eax, ebx
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x44], eax
push 7
pop eax
lea ecx, [ebp - 0x180]
mov byte [ebp - 4], al
call fcn.10008f17
mov dword [ebp - 0x44], 0x2eb9
xor eax, eax
mov dword [ebp - 0x4c], 0xc69aed23
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000abe0
push eax
push 0xa
push eax
call dword [sym.imp.ADVAPI32.dll_ControlService]
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1000abf2
mov dword [ebp - 0x4c], 0xffffc714
jmp 0x1000ac11
xor eax, eax
jmp 0x1000aba2
mov dword [ebp - 0x44], 0x126ff23b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000ac0b
call edi
push eax
call dword [sym.imp.USER32.dll_HideCaret]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1a0]
call fcn.10008f1c
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1a0]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push 0xfffffffffffffffe
mov dword [eax], ecx
pop eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xb
jge 0x1000ad66
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x10], 6
push dword [ebp - 0xc4]
call fcn.10008f1c
push dword [ebp - 0xc4]
lea ecx, [ebp - 0x1a0]
call fcn.10008f1c
push dword [ebp - 0xc4]
xor ecx, ecx
cmp dword [eax], 0x2afd77cc
setl cl
xor ebx, ebx
cmp ecx, 0xf5f40e13
lea ecx, [ebp - 0x1a0]
setne bl
call fcn.10008f1c
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0xc4]
setle cl
or edx, 0xffffffff
add eax, ecx
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
lea ecx, [ebp - 0x1a0]
setne dl
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0xc4]
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x1a0]
push dword [ebp - 0xc4]
call fcn.10008f1c
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1a0]
mov eax, dword [ebp - 0xc4]
sete dl
xor ebx, ebx
cmp edx, eax
setge bl
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [ebp - 0xc4]
push dword [ebp - 0xc4]
add ecx, ebx
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1a0]
setl bl
call fcn.10008f1c
xor edx, edx
push 1
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
pop ebx
setl dl
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xb
jl 0x1000ac49
dec dword [ebp - 0xc4]
push 2
pop esi
jns 0x1000a85b
mov eax, dword [ebp - 0xcd8]
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x4c], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008f17
mov dword [ebp - 0x20], 0x5d6c05ba
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x16
jl 0x1000aea9
mov dword [ebp - 0x38], 0xf0aa6e6f
lea ecx, [ebp - 0x5a8]
push esi
call fcn.10008eaf
xor eax, eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000adf0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5a8]
call fcn.10008f1c
mov dword [eax], 0xb0639e6a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000add2
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1000ae74
cmp dword [ebp - 0x20], eax
je 0x1000ae4a
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x5a8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
push ebx
call fcn.10008f1c
xor ecx, ecx
or edx, 0xffffffff
cmp dword [eax], edx
setne cl
xor ebx, ebx
cmp ecx, 0x27fa3dfa
lea ecx, [ebp - 0x5a8]
setg bl
xor eax, eax
inc eax
push eax
call fcn.10008f1c
cmp ebx, dword [eax]
jle 0x1000ae45
xor eax, eax
xor ebx, ebx
cmp dword [ebp - 0x2c], eax
je 0x1000ae47
inc ebx
mov edx, ebx
jmp 0x1000ae4c
xor ebx, ebx
xor eax, eax
inc ebx
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
cmp ecx, 0xa8fad749
jae 0x1000ae6e
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000ae6e
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5a8]
push ebx
call fcn.10008f1c
lea ecx, [ebp - 0x5a8]
mov dword [eax], 0x19bd12f8
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008f17
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x16
jge 0x1000adae
xor eax, eax
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0xc20]
mov dword [ebp - 0x40], 0xb3f4f46d
or eax, 0xffffffff
mov dword [ebp - 0x40], 0x61f66568
mov dword [ebp - 0x40], 0x737a9a97
mov dword [ebp - 0x40], 0xf5f49900
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0x65e3edfa
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x40], 0xb2aee5a9
push esi
call fcn.10008eaf
mov dword [ebp - 4], 0x10
lea ecx, [ebp - 0x1184]
movdqa xmm0, xmmword [0x10007ec0]
or eax, 0xffffffff
mov dword [ebp - 0x40], 0xd1022782
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x40], 0x29694d2b
mov dword [ebp - 0x40], 0xadb82134
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0xe6c]
push eax
lea eax, [ebp - 0xe7c]
mov dword [ebp - 0x40], 0xaf9f7c8b
mov dword [ebp - 0x40], 0x32e3ca36
mov dword [ebp - 0x40], esi
push eax
movdqu xmmword [ebp - 0xe7c], xmm0
call fcn.10008f2e
lea ecx, [ebp - 0x1b1]
mov esi, eax
call fcn.10008f2b
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x10b8]
push dword [esi]
call fcn.10008ef1
mov byte [ebp - 4], 0x11
xor eax, eax
mov dword [ebp - 0x4c], 0xfffffff9
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1000af9d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x980], 0x8bac04ee
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000af85
xor eax, eax
mov dword [ebp - 0x18], eax
push 2
pop esi
cmp dword [ebp - 0x18], ecx
jge 0x1000afc4
push dword [ebp - 0x18]
lea ecx, [ebp - 0xc20]
call fcn.10008f1c
mov dword [eax], 0xedade098
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000afa8
inc dword [ebp - 0x980]
lea ecx, [ebp - 0x10b8]
inc dword [ebp - 0x4c]
call fcn.10008f17
or eax, 0xffffffff
lea ecx, [ebp - 0xc20]
mov dword [ebp - 4], eax
call fcn.10008f17
push 3
pop eax
push eax
lea ecx, [ebp - 0x1c0]
call fcn.10008eaf
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
push 0xfffffffffffffffe
pop ecx
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x28], 0xd371
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x1c], 0xffffffea
cmp dword [ebp - 0x1c], 0xffffffe7
jg 0x1000b427
mov dword [ebp - 0x20], 0x5ce
lea ecx, [ebp - 0x24c]
push ebx
call fcn.10008eaf
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x840]
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x4c], 0x9d2d10a6
push esi
call fcn.10008eaf
mov byte [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x4c], 0xc2479274
mov dword [ebp - 0x4c], 0xd11537c3
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x1000b090
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x84], ebx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x1000b07c
xor eax, eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jge 0x1000b0b6
push dword [ebp - 0x34]
lea ecx, [ebp - 0x24c]
call fcn.10008f1c
mov dword [eax], 0x5621
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ebx
jl 0x1000b098
xor eax, eax
push 3
mov dword [ebp - 0x34], eax
pop ecx
cmp dword [ebp - 0x34], ecx
jge 0x1000b0d9
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x4a4], 0xe9d3b05e
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jl 0x1000b0c1
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1000b0f1
push dword [ebp - 0x34]
lea ecx, [ebp - 0x840]
call fcn.10008f1c
mov dword [eax], ebx
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x1000b0de
mov eax, dword [ebp - 0x84]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x84]
cmp ecx, eax
mov eax, dword [ebp - 0x84]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x84]
sete bl
xor ecx, ecx
cmp ebx, eax
setg cl
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x84]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x20]
imul eax, ecx
sub eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
inc eax
add eax, 8
je 0x1000b159
mov eax, dword [ebp - 0x84]
xor eax, eax
cmp dword [ebp - 0x84], eax
mov dword [ebp - 0x10], eax
je 0x1000b1ed
cmp dword [ebp - 0x10], 4
jge 0x1000b189
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf3c], 0x62b56095
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000b170
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x20], eax
inc ebx
cmp dword [ebp - 0x20], eax
jg 0x1000b26a
mov dword [ebp - 0x4c], 0x162c80f3
mov ecx, ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf34]
mov eax, dword [ebp - 0x20]
sub ecx, eax
mov eax, dword [ebp - 0x18]
sub eax, ecx
neg eax
sbb eax, eax
xor ecx, ecx
add eax, 0x3c3fa3ca
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf34]
sub edx, eax
mov eax, dword [ebp - 0x4c]
cmp edx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x38], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1000b198
jmp 0x1000b268
xor ebx, ebx
inc ebx
jmp 0x1000b203
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2bc], 0xafa0b2b0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b1f2
mov eax, dword [ebp - 0x2bc]
lea ecx, [ebp - 0x24c]
mov esi, dword [ebp - 0x5c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10008f1c
mov ecx, dword [ebp - 0x2bc]
mov eax, dword [eax]
sub eax, ecx
xor ecx, ecx
cmp eax, 0xb4ff
setge cl
neg esi
dec esi
neg esi
sbb esi, esi
xor eax, eax
inc esi
cmp ecx, esi
setne al
cmp eax, 0xfffffffd
jne 0x1000b256
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x18], eax
je 0x1000b258
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x4a4], ecx
xor eax, eax
push eax
lea ecx, [ebp - 0x24c]
call fcn.10008f1c
mov ecx, dword [ebp - 0x4a4]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x84]
setg dl
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x4a4]
je 0x1000b29b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x4a4]
xor eax, eax
cmp dword [ebp - 0x84], eax
jne 0x1000b2b2
mov esi, eax
cmp dword [ebp - 0x2c], eax
je 0x1000b2b4
mov esi, ebx
push eax
lea ecx, [ebp - 0x24c]
call fcn.10008f1c
mov ecx, dword [ebp - 0x28]
xor edx, edx
sub esi, ecx
add esi, dword [ebp - 0x2c]
imul esi, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x28]
cmp esi, ecx
setl dl
xor ecx, ecx
add edx, dword [eax]
mov eax, dword [ebp - 0x4a4]
neg eax
cmp eax, edx
mov eax, dword [ebp - 0x38]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x84]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
lea eax, [ecx + 0xbda6]
mov ecx, dword [ebp - 0x18]
imul ecx, eax
mov eax, dword [ebp - 0x28]
imul ecx, ecx, 0xe547
cmp ecx, eax
setne dl
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x38], eax
jle 0x1000b32b
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
sub ecx, eax
je 0x1000b343
xor eax, eax
cmp dword [ebp - 0x3c], eax
je 0x1000b345
mov edx, ebx
jmp 0x1000b347
xor eax, eax
mov edx, eax
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x4a4], edx
mov eax, dword [ebp - 0x3c]
cmp edx, eax
push ebx
setl cl
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0x840]
mov esi, dword [ebp - 0x4c]
call fcn.10008f1c
xor ebx, ebx
lea ecx, [ebp - 0x24c]
push ebx
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
call fcn.10008f1c
mov eax, dword [ebp - 0x18]
xor ecx, ecx
or edx, 0xffffffff
cmp eax, edx
setg cl
imul eax, ecx, 0xf08
cmp eax, dword [ebp - 0x18]
jle 0x1000b3a6
xor eax, eax
lea ecx, [ebp - 0x840]
inc eax
push eax
call fcn.10008f1c
push ebx
lea ecx, [ebp - 0x24c]
call fcn.10008f1c
xor edx, edx
push ebx
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
lea ecx, [ebp - 0x24c]
setge dl
sub edx, 0xb408
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x4c], edx
call fcn.10008f1c
mov edx, dword [ebp - 0x4c]
sub edx, dword [eax]
mov eax, dword [ebp - 0x84]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 0x5c], ecx
lea ecx, [ebp - 0x840]
call fcn.10008f17
lea ecx, [ebp - 0x24c]
mov byte [ebp - 4], 0x12
call fcn.10008f17
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe7
push 1
pop ebx
push 2
pop esi
jle 0x1000b02f
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b441
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x28], 0x97eede0b
mov dword [ebp - 0x10], 0x48c66f5a
mov eax, dword [ebp - 0x28]
push 2
pop esi
add eax, esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0xb
cmp dword [ebp - 0x28], 5
jge 0x1000b488
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000b479
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], eax
jne 0x1000b47f
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe4
jne 0x1000b46e
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 5
jl 0x1000b469
push 0xfffffffffffffff8
pop eax
push 3
mov dword [ebp - 0x4c], 0xfffffffc
lea ecx, [ebp - 0x5b8]
mov dword [ebp - 0x1c], eax
pop eax
push eax
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0x15
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1000b4d6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5b8]
call fcn.10008f1c
push 3
mov dword [eax], 0xf767
inc dword [ebp - 0x18]
pop eax
cmp dword [ebp - 0x18], eax
jl 0x1000b4b5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1000b4f6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x65c], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1000b4de
xor eax, eax
mov dword [ebp - 0x1c], 0xffffffec
cmp dword [ebp - 0x1c], 0xffffffee
jge 0x1000b611
jmp 0x1000b50b
xor eax, eax
mov dword [ebp - 0x20], 0x29c4
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0xc869b7d6
mov dword [ebp - 0x4c], 0x7b35f197
mov dword [ebp - 0x4c], 6
mov dword [ebp - 0x2c], 0x45b6d4f5
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], ebx
jle 0x1000b548
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], 5
jbe 0x1000b578
cmp dword [ebp - 0x20], eax
je 0x1000b578
mov eax, ebx
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x5b8]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5b8]
mov eax, dword [ebp - 0x20]
push ebx
call fcn.10008f1c
mov esi, eax
lea ecx, [ebp - 0x5b8]
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [esi]
sub ecx, dword [eax]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c], eax
jg 0x1000b5da
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x1000b5dc
mov eax, ebx
jmp 0x1000b5dc
xor eax, eax
mov edx, dword [ebp - 0x20]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setl cl
xor eax, eax
mov dword [ebp - 0x65c], ecx
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000b601
call dword [sym.imp.USER32.dll_ReleaseCapture]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffee
jl 0x1000b509
push 2
pop esi
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000b624
call edi
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
lea ecx, [ebp - 0x5b8]
mov byte [ebp - 4], 0x12
call fcn.10008f17
push 4
pop eax
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0x3cc]
push eax
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000b66d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x122c], 0xdc85
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1000b654
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000b680
push dword [ebp - 0x18]
call fcn.10008f1c
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
lea ecx, [ebp - 0x3cc]
jl 0x1000b672
push esi
call fcn.10008f1c
and dword [eax], 0
jmp 0x1000b6d6
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000b6b0
push eax
push 0x110a
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.10008f1c
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x122c], 0
jne 0x1000b6e9
push esi
lea ecx, [ebp - 0x3cc]
call fcn.10008f1c
inc dword [eax]
push esi
lea ecx, [ebp - 0x3cc]
call fcn.10008f1c
push 3
pop ecx
cmp dword [eax], ecx
jle 0x1000b697
lea ecx, [ebp - 0x3cc]
mov byte [ebp - 4], 0x12
call fcn.10008f17
xor eax, eax
mov dword [ebp - 0x10], 0x68206240
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000b712
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000b72d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b72a
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffeb
jne 0x1000b717
mov dword [ebp - 0x1c], eax
jmp 0x1000b74f
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x1c0]
call fcn.10008f1c
mov dword [eax], 0x8261f9c2
inc dword [ebp - 0x1c]
push 3
pop eax
cmp dword [ebp - 0x1c], eax
jl 0x1000b738
push 4
lea ecx, [ebp - 0x1b0]
call fcn.10008eaf
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x1c], 0x2ba39464
or edi, 0xffffffff
mov dword [ebp - 0x20], 0x3371247a
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1000b7a2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b0]
call fcn.10008f1c
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000b787
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], eax
jl 0x1000b80a
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jl 0x1000b7fb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b0]
call fcn.10008f1c
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1b0]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push dword [ebp - 0x1c]
mov dword [eax], ecx
lea ecx, [ebp - 0x1b0]
call fcn.10008f1c
cmp dword [eax], 0
jne 0x1000b7f6
dec dword [ebp - 0x10]
jns 0x1000b7bc
push 3
xor eax, eax
pop ecx
mov dword [ebp - 0x20], 0x3c0b
dec dword [ebp - 0x1c]
jns 0x1000b7ad
push 2
pop esi
push eax
lea ecx, [ebp - 0x1b0]
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], eax
je 0x1000b9a4
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x1000b9a6
mov dword [ebp - 0x24], edi
lea ecx, [ebp - 0x5d8]
push esi
call fcn.10008eaf
push esi
lea ecx, [ebp - 0x5c8]
mov byte [ebp - 4], 0x18
call fcn.10008eaf
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x4c], 0xe056
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1000b88a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5d8]
call fcn.10008f1c
mov dword [eax], 0xcfd1f913
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000b86c
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000b8a6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x5c8]
call fcn.10008f1c
mov dword [eax], 0x2f470b9c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000b88f
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x1b0]
mov eax, dword [ebp - 0x24]
push esi
call fcn.10008f1c
mov ecx, dword [ebp - 0x24]
xor edx, edx
cmp dword [eax], ecx
mov ecx, dword [ebp - 0x24]
setge dl
xor eax, eax
cmp edx, ebx
setg al
sub ecx, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x24]
inc eax
add eax, ecx
jne 0x1000b8ea
mov esi, eax
cmp dword [ebp - 0x28], eax
je 0x1000b8ec
mov esi, ebx
mov ecx, dword [ebp - 0x28]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp esi, eax
push ebx
setge cl
xor eax, eax
cmp edx, ecx
lea ecx, [ebp - 0x5d8]
setne al
mov dword [ebp - 0x28], eax
call fcn.10008f1c
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000b95e
push eax
lea ecx, [ebp - 0x5c8]
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x1b0]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x5d8]
mov eax, dword [ebp - 0x24]
push ebx
call fcn.10008f1c
xor eax, eax
lea ecx, [ebp - 0x5c8]
push eax
call fcn.10008f1c
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5d8]
push ebx
call fcn.10008f1c
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x5c8]
mov esi, dword [ebp - 0x4c]
neg esi
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10008f1c
lea ecx, [ebp - 0x5c8]
mov dword [eax], esi
call fcn.10008f17
lea ecx, [ebp - 0x5d8]
call fcn.10008f17
jmp 0x1000ba5b
xor eax, eax
mov dword [ebp - 0x48], 0x90ae73
mov dword [ebp - 0x10], 0xf213ed42
mov dword [ebp - 0x2c], 0x3ce7
mov dword [ebp - 0x44], 0xfffffff9
cmp dword [ebp - 0x1c], eax
jne 0x1000b9ce
cmp dword [ebp - 0x48], eax
je 0x1000b9ce
mov eax, ebx
mov dword [ebp - 0x1c], eax
lea ecx, [ebp - 0x1b0]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
push esi
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x1b0]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x28], eax
push ebx
call fcn.10008f1c
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x1c], eax
jge 0x1000ba53
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0x1b0]
push 3
pop eax
push eax
call fcn.10008f1c
mov esi, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x2c]
sub esi, 5
cmp esi, ecx
mov edi, eax
setle dl
cmp edx, ebx
sbb ecx, ecx
xor eax, eax
inc ecx
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x1c]
cmp ecx, dword [edi]
setl al
mov dword [ebp - 0x10], eax
imul eax, dword [ebp - 0x10], 3
test eax, eax
je 0x1000babc
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1000ba55
mov eax, ebx
mov dword [ebp - 0x44], eax
or edi, 0xffffffff
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x12
call fcn.10008f17
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x1000ba8b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa8], edi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000ba77
xor eax, eax
mov dword [ebp - 0x44], 0x2eb9
mov dword [ebp - 0x4c], 0xc69aed23
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000baae
push eax
push 0xa
push eax
call dword [sym.imp.ADVAPI32.dll_ControlService]
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1000bac0
mov dword [ebp - 0x4c], 0xffffc714
jmp 0x1000bae5
xor eax, eax
jmp 0x1000ba55
mov dword [ebp - 0x44], 0x126ff23b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000badd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x44], eax
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x1000bb04
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbe4], ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1000baf0
xor eax, eax
mov dword [ebp - 0xa4], ecx
cmp dword [ebp - 0xa4], eax
jl 0x1000becd
mov dword [ebp - 0x24], 0xcf2e5664
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 0xa
jmp 0x1000bb72
mov dword [ebp - 0x28], 0x665683c8
mov dword [ebp - 0x28], 0xffffffee
jmp 0x1000bb69
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], eax
jmp 0x1000bb60
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000bb5d
push 0x20f3
push 0x2448
push eax
call dword [sym.imp.USER32.dll_CheckMenuItem]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x16
jl 0x1000bb41
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xb
jge 0x1000bb39
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jne 0x1000bb29
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000bb98
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xec], 0x5b9b55bb
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000bb80
xor eax, eax
mov dword [ebp - 0xec], eax
jmp 0x1000bbb9
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000bbb3
push eax
push eax
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
inc dword [ebp - 0xec]
cmp dword [ebp - 0xec], 0xb
jge 0x1000bba0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1c0]
call fcn.10008f1c
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1c0]
mov esi, eax
call fcn.10008f1c
mov ecx, dword [esi]
push 0xfffffffffffffffe
mov dword [eax], ecx
pop eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xb
jge 0x1000bebe
push 2
pop esi
push 3
pop eax
push eax
lea ecx, [ebp - 0xd40]
call fcn.10008eaf
mov byte [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x28], ebx
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000bc41
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd40]
call fcn.10008f1c
push 3
mov dword [eax], 0x7571177e
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x1000bc20
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], esi
jg 0x1000bcb8
jmp 0x1000bc4d
xor eax, eax
mov dword [ebp - 0x10], 0xba1a4d63
mov dword [ebp - 0x20], 0xfffffff6
cmp dword [ebp - 0x28], eax
jne 0x1000bc65
cmp dword [ebp - 0x10], edi
je 0x1000bc67
mov eax, ebx
mov ecx, dword [ebp - 0x10]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
xor ebx, ebx
cmp edx, eax
setge bl
xor ecx, ecx
sub ebx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ebx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], eax
jl 0x1000bcad
mov dword [ebp - 0x44], 0x9beab1d6
mov dword [ebp - 0x44], 0x1fbf
dec dword [ebp - 0x20]
jns 0x1000bc9a
inc dword [ebp - 0x28]
push 1
pop ebx
cmp dword [ebp - 0x28], esi
jle 0x1000bc4b
lea ecx, [ebp - 0xd40]
mov byte [ebp - 4], 0x12
call fcn.10008f17
push 3
pop eax
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xc30]
mov dword [ebp - 0x10], 0xb26bdde0
mov dword [ebp - 0x2c], 0x999fb023
push eax
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0x1b
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000bd15
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc30]
call fcn.10008f1c
push 3
mov dword [eax], ebx
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x1000bcf8
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000bd57
mov dword [ebp - 0x44], eax
xor edx, edx
mov dword [ebp - 0x4c], 0xa8f90a3c
mov dword [ebp - 0x2c], 0xfb6318d5
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
cmp eax, 0xe294
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, eax
push 0
setne cl
add ecx, dword [ebp - 0x4c]
imul eax, ecx, 0xfffb
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], 0xfffffffa
jle 0x1000bd1a
lea ecx, [ebp - 0xc30]
mov byte [ebp - 4], 0x12
call fcn.10008f17
mov dword [ebp - 0x10], 6
xor eax, eax
mov dword [ebp - 0x28], 0x68206240
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000bd8d
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1000bda8
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000bda5
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffeb
jne 0x1000bd92
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1c0]
call fcn.10008f1c
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1c0]
call fcn.10008f1c
push dword [ebp - 0xa4]
xor ecx, ecx
cmp dword [eax], 0x2afd77cc
setl cl
xor ebx, ebx
cmp ecx, 0xf5f40e13
lea ecx, [ebp - 0x1c0]
setne bl
call fcn.10008f1c
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, dword [ebp - 0xa4]
setle cl
add eax, ecx
xor ecx, ecx
cmp eax, edi
setle cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
lea ecx, [ebp - 0x1c0]
setne dl
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x10]
push dword [ebp - 0xa4]
call fcn.10008f1c
mov eax, dword [ebp - 0x10]
lea ecx, [ebp - 0x1c0]
push dword [ebp - 0xa4]
call fcn.10008f1c
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1c0]
mov eax, dword [ebp - 0xa4]
sete dl
xor ebx, ebx
cmp edx, eax
setge bl
xor eax, eax
push eax
call fcn.10008f1c
mov ecx, dword [ebp - 0xa4]
push dword [ebp - 0xa4]
add ecx, ebx
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x1c0]
setl bl
call fcn.10008f1c
xor edx, edx
push 1
mov dword [eax], ebx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
pop ebx
setl dl
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xb
jl 0x1000bbfd
dec dword [ebp - 0xa4]
push 0
pop eax
jns 0x1000bb16
mov dword [ebp - 0x20], 0x399841b3
push 0xfffffffffffffffb
mov dword [ebp - 0x10], edi
mov dword [ebp - 0x20], eax
pop esi
jmp 0x1000bfb5
push 3
pop eax
push eax
lea ecx, [ebp - 0x9e0]
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x10], eax
jmp 0x1000bf0d
push dword [ebp - 0x10]
call fcn.10008f1c
mov dword [eax], 0x52ea
inc dword [ebp - 0x10]
push 3
pop eax
lea ecx, [ebp - 0x9e0]
cmp dword [ebp - 0x10], eax
jl 0x1000befc
push 2
pop eax
push eax
call fcn.10008f1c
cmp dword [eax], 0
jne 0x1000bf7e
mov dword [ebp - 0x24], 6
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
test ecx, ecx
sets dl
imul eax, edx
test eax, eax
je 0x1000bf62
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1000bf64
mov eax, ebx
jmp 0x1000bf64
xor eax, eax
neg eax
jne 0x1000bf6b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x20]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
jmp 0x1000bfa3
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], 0xfffffffd
jle 0x1000bfa3
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000bf9a
call dword [sym.imp.KERNEL32.dll_GetVersion]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffd
jg 0x1000bf89
lea ecx, [ebp - 0x9e0]
mov byte [ebp - 4], 0x12
call fcn.10008f17
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jne 0x1000bee2
mov eax, dword [ebp - 0xbe4]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], edi
call fcn.10008f17
mov dword [ebp - 0x10], esi
mov esi, dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x44], edi
mov edi, 0x2089
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1000c020
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2b
jg 0x1000c01d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c00e
push eax
push edi
push eax
call esi
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x2b
push 0
pop eax
jle 0x1000c000
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
jl 0x1000bff7
mov dword [ebp - 0x20], 0x5d6c05ba
or ecx, 0xffffffff
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x16
jl 0x1000c14a
push 2
pop eax
mov dword [ebp - 0x38], 0xf0aa6e6f
lea ecx, [ebp - 0x5e8]
push eax
call fcn.10008eaf
xor eax, eax
mov dword [ebp - 4], 0x1d
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000c08e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5e8]
call fcn.10008f1c
push 2
mov dword [eax], 0xb0639e6a
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x1000c06d
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1000c112
cmp dword [ebp - 0x20], eax
je 0x1000c0e8
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x5e8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
push ebx
call fcn.10008f1c
xor ecx, ecx
or edx, 0xffffffff
cmp dword [eax], edx
setne cl
xor ebx, ebx
cmp ecx, 0x27fa3dfa
lea ecx, [ebp - 0x5e8]
setg bl
xor eax, eax
inc eax
push eax
call fcn.10008f1c
cmp ebx, dword [eax]
jle 0x1000c0e3
xor eax, eax
xor ebx, ebx
cmp dword [ebp - 0x2c], eax
je 0x1000c0e5
inc ebx
mov edx, ebx
jmp 0x1000c0ea
xor ebx, ebx
xor eax, eax
inc ebx
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
cmp ecx, 0xa8fad749
jae 0x1000c10c
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000c10c
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x5e8]
push ebx
call fcn.10008f1c
lea ecx, [ebp - 0x5e8]
mov dword [eax], 0x19bd12f8
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008f17
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x16
jge 0x1000c043
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x20], 0x5d6c05ba
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x16
jl 0x1000c269
push 2
pop eax
mov dword [ebp - 0x38], 0xf0aa6e6f
lea ecx, [ebp - 0x56c]
push eax
call fcn.10008eaf
xor eax, eax
mov dword [ebp - 4], 0x1e
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000c1af
push dword [ebp - 0x10]
lea ecx, [ebp - 0x56c]
call fcn.10008f1c
push 2
mov dword [eax], 0xb0639e6a
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x1000c18e
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1000c233
cmp dword [ebp - 0x20], eax
je 0x1000c209
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x56c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
push ebx
call fcn.10008f1c
xor ecx, ecx
or edx, 0xffffffff
cmp dword [eax], edx
setne cl
xor ebx, ebx
cmp ecx, 0x27fa3dfa
lea ecx, [ebp - 0x56c]
setg bl
xor eax, eax
inc eax
push eax
call fcn.10008f1c
cmp ebx, dword [eax]
jle 0x1000c204
xor eax, eax
xor ebx, ebx
cmp dword [ebp - 0x2c], eax
je 0x1000c206
inc ebx
mov edx, ebx
jmp 0x1000c20b
xor ebx, ebx
xor eax, eax
inc ebx
mov edx, eax
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
cmp ecx, 0xa8fad749
jae 0x1000c22d
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000c22d
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x56c]
push ebx
call fcn.10008f1c
lea ecx, [ebp - 0x56c]
mov dword [eax], 0x19bd12f8
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008f17
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x16
jge 0x1000c164
or ecx, 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff0
jge 0x1000c2b9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2b
jg 0x1000c2ad
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c29e
push eax
push edi
push eax
call esi
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x2b
push 0
pop eax
jle 0x1000c290
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
jl 0x1000c287
or ecx, 0xffffffff
mov dword [ebp - 0x10], 0xfffffffb
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1000c2fc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x2b
jg 0x1000c2f9
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c2ea
push eax
push edi
push eax
call esi
mov eax, dword [ebp - 0x44]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x2b
push 0
pop eax
jle 0x1000c2dc
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff0
jl 0x1000c2d3
mov dword [ebp - 0x28], 8
mov dword [ebp - 0x28], eax
jmp 0x1000c341
mov dword [ebp - 0x10], 0x2f4a8b10
mov dword [ebp - 0x10], 0xffffffed
jmp 0x1000c338
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c335
push 0x263a
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x12
jg 0x1000c31e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jne 0x1000c30e
mov ebx, dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c35b
push eax
push eax
call ebx
xor eax, eax
push 7
pop ecx
push 2
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0xad0]
pop esi
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x40], eax
push esi
call fcn.10008eaf
mov dword [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x40], 0xce4b0ad8
push 4
mov dword [ebp - 0x18], eax
pop edi
cmp dword [ebp - 0x18], edi
jge 0x1000c3ad
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1334], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000c395
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000c3c9
push dword [ebp - 0x18]
lea ecx, [ebp - 0xad0]
call fcn.10008f1c
mov dword [eax], 0x885ea6ed
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000c3b2
xor esi, esi
mov dword [ebp - 0x28], 0xffffffef
inc esi
cmp dword [ebp - 0x28], 0xfffffffd
jl 0x1000c4c5
mov dword [ebp - 0x38], 0xfffffffa
lea ecx, [ebp - 0xd58]
push esi
call fcn.10008eaf
xor eax, eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000c421
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd58]
call fcn.10008f1c
mov dword [eax], 0xdcd16652
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000c403
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c447
push eax
push 0x1659
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], eax
jl 0x1000c4ae
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000c46e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1354], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000c45a
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c498
push eax
push 0xa7d
push 0xb0a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
xor eax, eax
push eax
lea ecx, [ebp - 0xad0]
call fcn.10008f1c
push 0
dec dword [eax]
dec dword [ebp - 0x38]
pop eax
jns 0x1000c452
lea ecx, [ebp - 0xd58]
mov byte [ebp - 4], 0x1f
call fcn.10008f17
inc dword [ebp - 0x28]
jmp 0x1000c3d8
or edi, 0xffffffff
lea ecx, [ebp - 0xad0]
mov dword [ebp - 4], edi
call fcn.10008f17
push 3
pop eax
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x20], 0x46ddcd16
mov dword [ebp - 0x10], 0xfffffffa
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1000c50b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x298], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000c4f7
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ecx
jge 0x1000c52b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xbec], 0xafddf34f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1000c513
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x1000c539
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, 0x20b5
sub edx, eax
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x298]
inc dword [ebp - 0x298]
cmp eax, ecx
jle 0x1000c579
mov ecx, esi
jmp 0x1000c57d
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0x4498b94b
setle al
imul eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x298]
mov eax, dword [ebp - 0x38]
dec ecx
neg ecx
sbb ecx, ecx
inc ecx
imul eax, ecx
test eax, eax
je 0x1000c5b3
mov eax, dword [ebp - 0x294]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
sub eax, 0xb29d945a
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0xbe8], eax
xor eax, eax
mov dword [ebp - 0x18], 0x5d6c05ba
mov dword [ebp - 0x10], 0x7cb3f4f4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000c5f9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5ac], 0x62d5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000c5e1
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000c619
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5ac], 0xb505
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000c601
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetParent]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c631
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
or eax, 0xffffffff
lea ecx, [ebp - 0x9f8]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x20], 0xf94f378
push 2
mov dword [ebp - 0x24], 0xf6a715cc
pop eax
mov dword [ebp - 0x4c], 9
mov dword [ebp - 0x44], 0xa00d0e75
mov dword [ebp - 0x2c], 0x6e33a79c
push eax
call fcn.10008eaf
mov dword [ebp - 4], 0x21
xor eax, eax
mov dword [ebp - 0x50], 0x26c71534
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000c6aa
push ecx
pop edi
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9f8]
call fcn.10008f1c
mov dword [eax], 0x59bb7a14
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000c686
mov edi, dword [sym.imp.USER32.dll_GetParent]
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1000c71d
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1000c6c6
mov ecx, esi
cmp dword [ebp - 0x4c], eax
jne 0x1000c6c8
mov ecx, eax
mov eax, dword [ebp - 0x4c]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x44]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
test ecx, ecx
jne 0x1000c6e3
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0x9f8]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x2c], eax
xor eax, eax
push eax
call fcn.10008f1c
mov edx, dword [ebp - 0x2c]
mov esi, eax
sub edx, dword [ebp - 0x20]
xor eax, eax
mov ecx, dword [ebp - 0x20]
cmp ecx, edx
setl al
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
mov dword [esi], eax
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x50], 0x223b16aa
mov dword [ebp - 0x24], 0xe
jmp 0x1000c755
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000c752
push 0x1e79
push 0xa4f
push 0x224e
push 0x1c4
call dword [sym.imp.GDI32.dll_CreateRectRgn]
xor eax, eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xe
jge 0x1000c72d
or eax, 0xffffffff
lea ecx, [ebp - 0x9f8]
mov dword [ebp - 4], eax
call fcn.10008f17
mov dword [ebp - 0x5c], esi
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x40], 0x73838a1f
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0xfffffff6
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1000c7ae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc04], 0x811f07b4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1000c796
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x1000c7d1