Function at 0x100476a7
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x1008aed4
call fcn.100897d8
sub esp, 0x170
push ebx
push esi
push edi
mov dword [ebp - 0x4c], ecx
lea ecx, [ebp - 0xe0]
push 1
mov dword [ebp - 0x54], edx
call fcn.100144f8
xor ebx, ebx
mov edx, 0xffff
mov dword [ebp - 0x1c], ebx
jmp 0x100476e8
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100476d9
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100476ff
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10047715
push ebx
push ebx
push 0x197a
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
lea ecx, [ebp - 0xe0]
call fcn.1001475b
push 3
pop edi
push edi
lea ecx, [ebp - 0x98]
call fcn.100144f8
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x10047751
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x98]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1004773e
mov dword [ebp - 0x18], ebx
jmp 0x10047768
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1004775b
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], ebx
jl 0x1004784e
push 2
lea ecx, [ebp - 0x8c]
call fcn.100144f8
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], ebx
jmp 0x100477ad
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 0x633efc07
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1004779a
mov esi, dword [ebp - 0x8c]
mov dword [esi + 4], ebx
push edi
lea ecx, [ebp - 0xb0]
call fcn.100144f8
mov dword [ebp - 0x1c], ebx
jmp 0x100477e0
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0x1551da62
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x100477cd
mov ecx, dword [ebp - 0xb0]
mov edx, dword [ebp - 0x98]
mov dword [ecx + 4], ebx
mov eax, dword [ecx + 4]
mov dword [edx + eax*4], 1
inc dword [ecx + 4]
cmp dword [ecx + 4], edi
jl 0x100477f4
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004781d
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
lea ecx, [ebp - 0xb0]
call fcn.1001475b
inc dword [esi + 4]
cmp dword [esi + 4], 2
jle 0x100477bc
lea ecx, [ebp - 0x8c]
mov byte [ebp - 4], bl
call fcn.1001475b
dec dword [ebp - 0x10]
jns 0x10047784
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x98]
call fcn.1001475b
push dword [ebp - 0x4c]
movdqa xmm0, xmmword [0x10008100]
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x150]
mov dword [ebp - 0x18], 9
push eax
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0x80]
push ebx
movdqu xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
call fcn.10014afb
mov dword [ebp - 0x1c], 0xe5ccc90a
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x1c], ebx
jmp 0x100478c3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100478c0
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jle 0x100478ad
lea ecx, [ebp - 0x80]
call fcn.1001475b
xor ecx, ecx
inc ecx
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x38], 0x426ae69e
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ebx
jmp 0x100478f3
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x74], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x100478e5
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004790b
push ecx
call esi
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x1c], ebx
push 7
pop eax
cmp dword [ebp - 0x1c], ebx
jl 0x10047959
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], ebx
jl 0x10047954
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x1004793a
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x74], ebx
jne 0x1004793a
dec dword [ebp - 0x10]
jns 0x1004792c
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004794c
call esi
push eax
call dword [sym.imp.USER32.dll_HideCaret]
dec dword [ebp - 0x28]
push 7
pop eax
jns 0x10047921
dec dword [ebp - 0x1c]
jns 0x10047916
mov dword [ebp - 0x18], 0xa2cb51db
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x24], 0x2443250e
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x10], 0xe924f63a
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x20], 0xffffffff
push 1
call fcn.100144f8
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x28], 0xbb69
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x1c], ebx
jmp 0x100479b9
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100479a6
cmp dword [ebp - 0x18], ebx
jne 0x100479c7
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
neg edx
push 7
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
mov ecx, 0xe22401db
setne dl
xor eax, eax
cmp edx, 0xfaab
setne al
cmp ecx, eax
pop ecx
sbb eax, eax
neg eax
cmp eax, ecx
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
add edx, 0xffff2522
neg edx
sbb edx, edx
imul eax, dword [ebp - 0x18]
inc edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setne cl
xor edx, edx
cmp ecx, 0xfa02
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], 0xfffe
jb 0x10047a83
cmp dword [ebp - 0x28], ebx
jne 0x10047a83
mov edx, ebx
jmp 0x10047a86
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, edx
xor edx, edx
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
cmp dword [ebp - 0x1c], eax
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
test eax, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
lea ecx, [ebp - 0x11c]
setge dl
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
call fcn.1001475b
xor ecx, ecx
mov dword [ebp - 0x10], ebx
inc ecx
jmp 0x10047b1e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10047b14
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x30], 0xd453606d
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0x244d513c
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x15e82aa9
mov dword [ebp - 0x34], 0xfffe
mov dword [ebp - 0x10], ebx
jmp 0x10047b6d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x160], 0x738ab659
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10047b5c
dec dword [ebp - 0x34]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10047cdc
jmp 0x10047b87
xor ecx, ecx
inc ecx
mov dword [ebp - 0x20], 0xf94f378
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x10], ebx
jmp 0x10047ba8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0xc2e0cf57
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10047b9a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10047bc7
push 0x1229
push 0x3c7
push ebx
call dword [sym.imp.USER32.dll_DeleteMenu]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10047cbe
mov dword [ebp - 0x24], 0xccbad86e
mov dword [ebp - 0x34], 0x6aac8953
mov dword [ebp - 0x1c], 0x5257
mov dword [ebp - 0x38], 0xeb236728
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10047ca1
mov dword [ebp - 0x34], 0xd0d1d847
cmp dword [ebp - 0x20], ebx
jne 0x10047c4c
mov eax, dword [ebp - 0x40]
xor edx, edx
mov dword [ebp - 0x34], 0xf74
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
cmp eax, 0x552
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp eax, edx
setle cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x40]
add eax, dword [ebp - 0x34]
jne 0x10047c4c
mov ecx, ebx
jmp 0x10047c4f
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
imul eax, ecx
cmp eax, dword [ebp - 0x1c]
jle 0x10047c6c
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x40], ebx
je 0x10047c6c
xor edx, edx
inc edx
jmp 0x10047c6e
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, edx
setg cl
mov dword [ebp - 0x40], ecx
test ecx, ecx
je 0x10047c8d
cmp dword [ebp - 0x40], ebx
je 0x10047c8d
xor eax, eax
inc eax
jmp 0x10047c8f
mov eax, ebx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x24]
jns 0x10047bfb
mov dword [ebp - 0x1c], ebx
jmp 0x10047caf
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x11
jne 0x10047ca6
dec dword [ebp - 0x20]
jns 0x10047bd3
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10047cd3
push 0x1c43
push ebx
call dword [sym.imp.USER32.dll_CharUpperBuffW]
dec dword [ebp - 0x18]
jns 0x10047b84
push edi
lea ecx, [ebp - 0xa4]
call fcn.100144f8
mov dword [ebp - 0x28], 0x6aabecba
mov dword [ebp - 0x10], ebx
jmp 0x10047d07
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa4]
mov dword [eax + ecx*4], 0x313dd33a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10047cf4
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x10047d3f
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], ebx
jl 0x10047d3a
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa4]
cmp dword [eax + ecx*4], ebx
jne 0x10047d3a
dec dword [ebp - 0x10]
jns 0x10047d27
dec dword [ebp - 0x28]
jns 0x10047d18
lea ecx, [ebp - 0xa4]
call fcn.1001475b
mov dword [ebp - 0x18], 9
jmp 0x10047e98
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xf90a3cfc
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0xffffffff
push 2
mov dword [ebp - 0x34], 0xb7b8
mov dword [ebp - 0x10], ebx
pop ecx
jmp 0x10047d92
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x158], 0xde0bcd8c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10047d81
dec dword [ebp - 0x34]
mov dword [ebp - 0x20], 0x315362d
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10047dc8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x100], 0x5024d8f3
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10047db7
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setl dl
xor ecx, ecx
test edx, edx
sets cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x34], eax
jge 0x10047e05
cmp dword [ebp - 0x20], ebx
je 0x10047e08
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp eax, 0xfffffffe
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
imul ecx, ecx, 0xfff7
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
inc edx
sub edx, dword [ebp - 0x20]
cmp edx, 0xbe1552b9
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
setne cl
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x10], ebx
jne 0x10047e72
mov edx, ebx
jmp 0x10047e75
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
add eax, 0x35ca4204
cmp eax, 0xdcad
setg cl
add ecx, edx
mov dword [ebp - 0xfc], ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffb
jge 0x10047d56
mov dword [ebp - 0x18], 0xa2cb51db
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x24], 0x2443250e
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xe924f63a
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x20], 0xffffffff
push 1
call fcn.100144f8
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x34], 0xbb69
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x10], ebx
jmp 0x10047f02
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0xffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10047eef
cmp dword [ebp - 0x18], ebx
jne 0x10047f10
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
neg ecx
push 7
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xfaab
mov ecx, 0xe22401db
setne al
cmp ecx, eax
pop ecx
sbb eax, eax
neg eax
cmp eax, ecx
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
add edx, 0xffff2522
neg edx
sbb edx, edx
imul eax, dword [ebp - 0x18]
inc edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, 0xfa02
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], 0xfffe
jb 0x10047fcc
cmp dword [ebp - 0x28], ebx
jne 0x10047fcc
mov edx, ebx
jmp 0x10047fcf
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, edx
xor edx, edx
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
mov dword [ebp - 0x38], ecx
xor ecx, ecx
cmp dword [ebp - 0x38], eax
setle cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
test eax, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
lea ecx, [ebp - 0x128]
setge dl
imul edx, dword [ebp - 0x30]
mov dword [ebp - 0x24], edx
call fcn.1001475b
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0xed680444
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0xea0627e8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x90b2811f
mov dword [ebp - 0x38], 0xddb2097e
mov dword [ebp - 0x10], ebx
jmp 0x10048096
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xec], 0x2daf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10048085
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xdae9
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x28]
sub edx, 0xfa81
neg edx
sbb edx, edx
add edx, 0x1f39
cmp edx, dword [ebp - 0x28]
jle 0x100480d4
cmp dword [ebp - 0x24], ebx
je 0x100480d4
xor eax, eax
inc eax
jmp 0x100480d6
mov eax, ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xe4]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe4]
setg cl
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, edi
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setl dl
sub edx, eax
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], 0x9e4a0435
mov dword [ebp - 0x10], ebx
jmp 0x1004818d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1004817f
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x24], ebx
jmp 0x100482c9
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x100482b0
mov edi, 0xffff
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x2c], 0xcb8e0045
mov dword [ebp - 0x38], 0x34071e99
cmp dword [ebp - 0x1c], ebx
jne 0x100482aa
mov dword [ebp - 0x1c], ebx
jmp 0x10048295
mov dword [ebp - 0x10], 0x658a6001
mov dword [ebp - 0x10], ebx
jmp 0x10048202
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], 1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100481f4
mov dword [ebp - 0x68], ebx
cmp dword [ebp - 0x68], ebx
jl 0x1004828d
mov dword [ebp - 0x2c], 6
xor edx, edx
mov dword [ebp - 0x2c], 0xfffffff7
mov eax, dword [ebp - 0x68]
cmp eax, 0xa81a
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jne 0x1004825b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], edi
sbb eax, eax
neg eax
cmp eax, edi
setne cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
neg eax
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x68]
jns 0x10048210
cmp dword [ebp - 0x58], ebx
jne 0x1004829e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x100481e8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x100481c2
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100482c6
push ebx
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffea
jl 0x100481a1
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x64], 0xe56e31bb
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], ebx
jmp 0x10048334
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10048318
mov dword [ebp - 0x30], 0x609c
cmp dword [ebp - 0x30], ebx
jne 0x1004831e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048315
push ebx
push 0xb2a
call esi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextW]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xd
jle 0x100482f1
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048331
push ebx
call esi
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 2
je 0x100482e9
mov dword [ebp - 0x18], 0xac204e2
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x10], 0xee94ccb0
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x20], 0xffffffff
push 4
mov dword [ebp - 0x30], 0x2384b6d7
pop eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x18], 0xffffffe5
jmp 0x1004838a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048387
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xb
jl 0x10048376
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
imul edx, dword [ebp - 0x18]
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x1c]
cmp ecx, 0xfffffff9
jne 0x100483c0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, 0xffff
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setge cl
xor edx, edx
imul ecx, ecx, 0x5cbf
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
neg edx
mov dword [ebp - 0x30], edx
xor edx, edx
cmp dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x18]
setg cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp eax, edx
setne cl
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
je 0x100484a2
mov dword [ebp - 0x2c], 0x4fc3
inc dword [ebp - 0x2c]
mov dword [ebp - 0x20], ebx
jmp 0x1004849a
mov dword [ebp - 0x30], 0xfffffffd
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048490
push 0x250d
push 0xd83
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetPixel]
mov dword [ebp - 0x30], 0xffffdc61
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe9
jge 0x1004846a
jmp 0x100484f0
mov dword [ebp - 0x24], 0xadcf
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jl 0x100484d2
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
jne 0x100484d2
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], 0xa3fa0b5b
cmp dword [ebp - 0x10], ebx
jne 0x100484ea
cmp dword [ebp - 0x24], ebx
jne 0x100484ea
mov eax, ebx
jmp 0x100484ed
xor eax, eax
inc eax
mov dword [ebp - 0x30], eax
push 3
pop esi
push esi
lea ecx, [ebp - 0xbc]
call fcn.100144f8
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], 0xb969161d
mov dword [ebp - 0x10], ebx
jmp 0x10048521
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1004850e
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x100485ea
mov esi, dword [ebp - 0xbc]
mov dword [ebp - 0x30], 0x68be135e
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x28], 0x57ea0d01
mov dword [ebp - 0x34], 0xf0244c3f
mov dword [ebp - 0x10], 7
mov dword [ebp - 0x2c], 0x4e7f
mov dword [ebp - 0x18], 0x52dd8607
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x1004858d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], ebx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [esi + 4]
cmp eax, dword [ebp - 0x28]
jge 0x100485b3
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x24], 0xfffe
jne 0x100485cf
cmp dword [ebp - 0x24], ebx
je 0x100485cf
xor edx, edx
inc edx
jmp 0x100485d1
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x18], ecx
dec dword [ebp - 0x24]
jns 0x1004853c
push 3
pop esi
lea ecx, [ebp - 0xbc]
call fcn.1001475b
mov dword [ebp - 0x10], ebx
jmp 0x1004860b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x16c], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100485fa
push 2
mov dword [ebp - 0x30], 0xa2fc53d
mov dword [ebp - 0x10], ebx
pop edi
jmp 0x1004862d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], 0x713a473e
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1004861f
add dword [ebp - 0x44], 0x3450
je 0x1004865a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048741
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgCtrlID]
jmp 0x10048741
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x2c], 0xcedda565
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x44]
sub esi, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
neg esi
mov eax, dword [ebp - 0x18]
sbb esi, esi
xor edx, edx
inc esi
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setle dl
xor ecx, ecx
cmp esi, eax
setge cl
imul edx, ecx
test edx, edx
je 0x100486bb
mov dword [ebp - 0x30], 0x2fe8
mov dword [ebp - 0x18], ebx
jmp 0x100486b3
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffed
jge 0x100486ad
jmp 0x10048707
push 1
lea ecx, [ebp - 0xd4]
call fcn.100144f8
mov dword [ebp - 0x10], ebx
jmp 0x100486e0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0x7cba
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x100486cd
mov dword [ebp - 0x44], ebx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xd4]
cmp ecx, dword [eax]
lea ecx, [ebp - 0xd4]
setl dl
mov dword [ebp - 0x44], edx
call fcn.1001475b
mov eax, dword [ebp - 0x44]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp eax, 0x6d20
mov eax, dword [ebp - 0x44]
setge dl
xor ecx, ecx
cmp edx, eax
push 7
setge cl
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
pop ecx
sub ecx, eax
push 3
mov dword [ebp - 0x48], ecx
pop esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], 0xed680444
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0xea0627e8
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x90b2811f
mov dword [ebp - 0x38], 0xddb2097e
mov dword [ebp - 0x10], ebx
jmp 0x10048782
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf8], 0x2daf
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10048771
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xdae9
mov eax, dword [ebp - 0x24]
setl cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x28]
sub edx, 0xfa81
neg edx
sbb edx, edx
add edx, 0x1f39
cmp edx, dword [ebp - 0x28]
jle 0x100487c0
cmp dword [ebp - 0x24], ebx
je 0x100487c0
xor eax, eax
inc eax
jmp 0x100487c2
mov eax, ebx
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
push 1
setg dl
xor ecx, ecx
add edx, dword [ebp - 0x1c]
imul edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
cmp edx, eax
setle cl
sub ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xf0]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf0]
setg cl
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
sub edx, esi
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x10c]
setl dl
sub edx, eax
sub edx, dword [ebp - 0x1c]
neg edx
sbb edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov byte [ebp - 0x39], bl
call fcn.100144f8
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 1
jge 0x10048884
mov edx, 0xffff
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1004886f
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10048896
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100488ad
push ebx
push ebx
push 0x197a
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
lea ecx, [ebp - 0x10c]
call fcn.1001475b
cmp byte [ebp - 0x39], 0
je 0x10048a86
mov dword [ebp - 0x18], 0xa2cb51db
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x24], 0x2443250e
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xe924f63a
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x20], 0xffffffff
push 1
call fcn.100144f8
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x34], 0xbb69
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], 1
jge 0x1004892d
mov edx, 0xffff
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10048918
cmp dword [ebp - 0x18], ebx
jne 0x10048935
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
neg ecx
push 7
sbb ecx, ecx
xor edx, edx
inc ecx
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xfaab
mov ecx, 0xe22401db
setne al
cmp ecx, eax
pop ecx
sbb eax, eax
neg eax
cmp eax, ecx
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sbb edx, edx
add edx, 0xffff2522
neg edx
sbb edx, edx
imul eax, dword [ebp - 0x18]
inc edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
imul ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, 0xfa02
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], 0xfffe
jb 0x100489f1
cmp dword [ebp - 0x28], ebx
jne 0x100489f1
mov edx, ebx
jmp 0x100489f4
xor edx, edx
inc edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
imul ecx, edx
xor edx, edx
sub ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
cmp dword [ebp - 0x30], eax
setle cl
xor edx, edx
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
test eax, eax
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
lea ecx, [ebp - 0x134]
setge dl
imul edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
call fcn.1001475b
push 0xcb0
push ebx
call dword [sym.imp.USER32.dll_CharLowerBuffW]
push 0x7525
lea eax, [ebp - 0x64]
push eax
push ebx
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x50]
push eax
call fcn.1004b4ac
add esp, 0x14
mov dword [ebp - 0x28], 0xdb3ae355
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x30], 0xf0720718
mov dword [ebp - 0x30], 0xfa8bc07c
push esi
call fcn.100144f8
mov dword [ebp - 4], edi
mov dword [ebp - 0x10], ebx
jmp 0x10048ae6
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc8]
mov dword [eax + ecx*4], 0xd7006986
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10048ad3
push 0xfffffffffffffff9
mov dword [ebp - 0x28], edi
pop edi
jmp 0x10048baa
push 4
lea ecx, [ebp - 0x140]
call fcn.100144f8
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x2c], 0xc02a3062
mov dword [ebp - 0x10], ebx
jmp 0x10048b28
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10048b19
mov dword [ebp - 0x18], ebx
jmp 0x10048b74
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x10], ebx
jmp 0x10048b57
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x110], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x10048b46
dec dword [ebp - 0x2c]
mov byte [ebp - 0x39], bl
cmp byte [ebp - 0x39], 0
je 0x10048b71
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x10048b33
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x10048b9c
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x18]
jns 0x10048b85
lea ecx, [ebp - 0x140]
call fcn.1001475b
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x10048af6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc8]
call fcn.1001475b
mov eax, dword [ebp - 0x54]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0x4c]
mov edi, edx
mov esi, eax
call fcn.10047635
mov ecx, dword [ebp - 0xc]
add eax, esi
add eax, edi
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret