Function at 0x1001c099
Capabilities:
Check os version

Disassembly:
mov eax, 0x100644c5
call fcn.10063468
sub esp, 0x290
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0xa0], ecx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x40], 0xfffffffe
mov dword [ebp - 0x34], 0x2751c76d
push 2
mov dword [ebp - 0xe8], edx
mov dword [ebp - 0x1e4], ebx
call fcn.10001ed2
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1001c107
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 3
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001c0f4
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x160]
mov dword [eax], ecx
lea ecx, [ebp - 0x160]
dec dword [ebp - 0x30]
call fcn.10001f55
mov dword [ebp - 0x30], 0x52061f6
lea ecx, [ebp - 0x178]
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0x8f5f4990
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], 0xf72b5725
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x58], 0x5f7919ad
push 4
call fcn.10001ed2
push 3
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 4], ebx
call fcn.10001ed2
xor edx, edx
inc edx
mov byte [ebp - 4], dl
push 4
pop ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x18], ebx
jmp 0x1001c19d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x12c], 0xe6e7f737
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c18c
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ecx
jge 0x1001c1c0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001c1ab
mov dword [ebp - 0x44], 0x1428
cmp dword [ebp - 0x44], 0x1496
jle 0x1001c22a
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x48], 0x5c7
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x24], 0x2ad4
mov edi, ebx
mov ebx, dword [ebp - 0x3c]
mov ecx, edi
mov eax, ebx
sar eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0x720c
jl 0x1001c1ed
dec ebx
dec dword [ebp - 0x24]
push 0
mov dword [ebp - 0x3c], ebx
pop ebx
jne 0x1001c1e8
mov eax, dword [ebp - 0x18]
dec eax
dec dword [ebp - 0x48]
mov dword [ebp - 0x18], eax
jne 0x1001c1de
inc esi
cmp esi, 0x683
jl 0x1001c1d2
mov dword [ebp - 0x18], ebx
jmp 0x1001c242
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1b4]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1001c22f
mov byte [ebp - 4], 2
cmp dword [ebp - 0x44], 0x1297
jge 0x1001c264
mov edx, str.fawxw_ywgvah_lvwk_wmkv_acydfaxe_ylkmau_jrg_utcpu_yrta_lmhjrr_tegemzvdh_arzyqpx_twk
mov ecx, 0x10080838
call fcn.10013913
xor edx, edx
inc edx
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
add eax, 0xbc37
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x128]
dec dword [ebp - 0x38]
jne 0x1001c296
mov ecx, ebx
cmp dword [ebp - 0x58], ebx
je 0x1001c298
mov ecx, edx
xor eax, eax
cmp ecx, 5
sete al
xor ecx, ecx
cmp eax, 0x2aee5a98
setl cl
xor eax, eax
imul ecx, dword [ebp - 0x2c]
cmp ecx, edx
setg al
cmp eax, dword [ebp - 0x58]
jl 0x1001c4fa
mov dword [ebp - 0x30], 0x15ea3766
mov dword [ebp - 0x18], 0x62e26a8a
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x38], 0x4961f084
mov dword [ebp - 0x24], 0x15
cmp dword [ebp - 0x24], 0x10
jle 0x1001c504
mov dword [ebp - 0x40], 0x86bdae89
mov dword [ebp - 0x3c], 0x718b
mov dword [ebp - 0x38], 7
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
sub eax, 0xaf849fb9
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x18], 0xc5bf
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0x6e
cmp dword [ebp - 0x28], 0x1b7
jle 0x1001c3a3
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x48], 0x3c72
mov esi, ebx
mov dword [ebp - 0x38], 0x3e7
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0x1869
jl 0x1001c353
mov eax, dword [ebp - 0x44]
add esi, eax
dec dword [ebp - 0x38]
jne 0x1001c351
mov esi, dword [ebp - 0x2c]
add eax, esi
dec dword [ebp - 0x48]
mov dword [ebp - 0x44], eax
jne 0x1001c348
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x4610
jl 0x1001c33e
push 0x10bf
push 0x3d1
push ebx
call dword [sym.imp.GDI32.dll_OffsetRgn]
mov dword [ebp - 0x18], 4
jmp 0x1001c4a7
mov dword [ebp - 0x38], 0x1937da87
mov dword [ebp - 0x44], 6
cmp dword [ebp - 0x40], ebx
jne 0x1001c3e9
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x18], ebx
je 0x1001c41f
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0xffffffff
mov eax, dword [ebp - 0x58]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x178]
setl dl
xor ecx, ecx
cmp edx, dword [eax]
setle cl
cmp ecx, dword [ebp - 0x38]
jl 0x1001c41f
cmp dword [ebp - 0x18], ebx
je 0x1001c41f
xor ecx, ecx
inc ecx
jmp 0x1001c421
mov ecx, ebx
mov eax, dword [ebp - 0x18]
imul eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jne 0x1001c446
cmp dword [ebp - 0x34], ebx
jne 0x1001c446
mov ecx, ebx
jmp 0x1001c449
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 3
sete al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
sub eax, 4
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], 6
jmp 0x1001c49e
mov dword [ebp - 0x2c], 0x1c
jmp 0x1001c495
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001c492
push 0x161b
push 0x1ea1
push 0x2037
call dword [sym.imp.USER32.dll_SetWindowLongA]
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1a
jge 0x1001c474
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff0
jle 0x1001c46b
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe8
je 0x1001c3d3
mov byte [ebp - 4], 4
cmp dword [ebp - 0x28], 0xfffffeda
jge 0x1001c4eb
mov edx, str.eijuqhos_xsaet_zbi_aryavlde_guoj_zweslga_utpyih_qmtuj_frzdaau
mov ecx, 0x10080838
call fcn.10013913
jmp 0x1001c4eb
mov dword [ebp - 4], 1
dec dword [ebp - 0x24]
jmp 0x1001c2dd
mov dword [ebp - 0x28], 2
inc dword [ebp - 0x28]
lea ecx, [ebp - 0x1b4]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x178]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x80], 0xd020d03
inc eax
mov word [ebp - 0x7c], 0x3306
mov byte [ebp - 0x7a], al
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x79], 0x2e800230
mov byte [ebp - 0x75], bl
mov dword [ebp - 0x74], 0x42b052b
mov byte [ebp - 0x70], 0xd
mov dword [ebp - 0x28], eax
push eax
call fcn.10001ed2
xor esi, esi
mov dword [ebp - 4], 6
inc esi
lea ecx, [ebp - 0xf4]
mov dword [ebp - 0x3c], esi
push 3
call fcn.10001ed2
mov dword [ebp - 0x18], ebx
jmp 0x1001c587
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0x25a80e35
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001c574
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1001c5a5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0x95e3b372
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001c594
mov dword [ebp - 0x18], ebx
jmp 0x1001c5c0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001c5af
mov dword [ebp - 0x18], ebx
jmp 0x1001c5de
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf4]
mov dword [eax + ecx*4], 0x99a5671
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001c5cb
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [ebp - 0x190]
cmp eax, dword [edx]
setl cl
mov dword [ebp - 0x114], ecx
mov ecx, dword [edx]
xor edx, edx
lea eax, [ecx + 1]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x1d4], ecx
cmp ecx, dword [ebp - 0x28]
jge 0x1001c621
mov eax, ebx
cmp dword [ebp - 0x3c], ebx
je 0x1001c623
mov eax, esi
cmp dword [ebp - 0x114], 0xfffffffd
mov ecx, dword [ebp - 0xf4]
mov dword [ecx + 4], eax
jne 0x1001c63f
mov eax, ebx
cmp dword [ebp - 0x110], ebx
je 0x1001c641
mov eax, esi
mov dword [ecx + 4], eax
xor edx, edx
mov ecx, dword [ebp - 0xf4]
mov eax, dword [ebp - 0x3c]
cmp dword [ecx + 8], eax
lea ecx, [ebp - 0xf4]
setg dl
xor eax, eax
cmp edx, 0xda2a
setne al
imul eax, eax, 0x378cabcc
mov dword [ebp - 0x114], eax
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x190]
call fcn.10001f55
push 0x62
pop eax
push 2
mov word [ebp - 0x14e], ax
mov edi, ebx
pop ecx
mov dword [ebp - 0x24], ecx
mov eax, 0x256915a
cmp ecx, 0x11
jae 0x1001caf8
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x30], ebx
jmp 0x1001c6d4
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x28c], 2
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jl 0x1001c6c3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001c6ea
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0xdc], 2
cmp dword [ebp - 0xdc], ebx
jl 0x1001c714
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001c70c
push ebx
call dword [sym.imp.GDI32.dll_DeleteObject]
dec dword [ebp - 0xdc]
jns 0x1001c6fc
movzx eax, byte [ebp - 0x80]
mov ecx, dword [ebp - 0x24]
lea eax, [eax*2 + 2]
cmp ecx, eax
jne 0x1001c958
mov dword [ebp - 0x2c], 0x8bbca631
mov dword [ebp - 0x34], 0xae77ab39
mov dword [ebp - 0x2c], 0xffffffe7
cmp dword [ebp - 0x2c], 0xfffffffc
jl 0x1001c769
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], esi
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001c75d
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffc
jge 0x1001c745
mov ecx, dword [ebp - 0x24]
movzx edi, byte [ebp + ecx - 0x80]
lea ecx, [ebp - 0x124]
inc edi
push esi
mov dword [ebp - 0x58], edi
call fcn.10001ed2
mov dword [ebp - 4], 7
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x48], 0xe469
mov dword [ebp - 0x30], ebx
jmp 0x1001c7ab
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0xac8b13ec
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x1001c798
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001c7cf
push 0x23a0
push ebx
push 0x2272
push 0x23c8
call dword [sym.imp.USER32.dll_MapWindowPoints]
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jg 0x1001c936
mov dword [ebp - 0x18], 0x1fe77dd6
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001c92e
mov dword [ebp - 0x44], 0x2b32
cmp dword [ebp - 0x44], 0x2b7e
jle 0x1001c88d
mov dword [ebp - 0x38], ebx
mov edx, ebx
mov dword [ebp - 0x40], 0x570a
mov dword [ebp - 0x3c], edx
mov edi, ebx
mov eax, edx
mov ecx, ebx
cdq
idiv edi
mov dword [ebp - 0x28], ecx
mov eax, edx
mov dword [ebp - 0x34], eax
sar eax, cl
lea ecx, [ebp - 0x280]
cdq
push edx
push eax
call fcn.10002a87
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1001c83f
mov eax, dword [eax]
push eax
call fcn.1004e245
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x280]
call fcn.10011503
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x34]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x32fb
jl 0x1001c825
mov edx, dword [ebp - 0x3c]
inc edi
cmp edi, 0x6b49
jl 0x1001c816
mov eax, dword [ebp - 0x38]
add edx, eax
dec dword [ebp - 0x40]
mov dword [ebp - 0x3c], edx
jne 0x1001c814
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x6df4
jl 0x1001c808
mov dword [ebp - 0x2c], 0x8f3d4210
cmp dword [ebp - 0x44], 0x2753
jge 0x1001c8a8
push str.nhd_kfdwymuyr_keepsses
call fcn.1004e245
pop ecx
mov dword [ebp - 4], 7
mov dword [ebp - 0x2c], ebx
jmp 0x1001c8db
mov dword [ebp - 0x30], 0x9cf30836
mov dword [ebp - 0x30], ebx
jmp 0x1001c8d3
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x124]
mov dword [eax + ecx*4], 0x6b471dfd
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jl 0x1001c8c0
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1001c8b4
cmp dword [ebp - 0x18], ebx
je 0x1001c919
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x2c]
cmp dword [edx + esi*4], eax
setne cl
cmp ecx, 0x36d0
jl 0x1001c90a
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
xor esi, esi
mov eax, dword [ebp - 0x20]
inc esi
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x18], 0xa1dd
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x18]
jmp 0x1001c7e8
inc dword [ebp - 0x20]
jmp 0x1001c7d2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x124]
call fcn.10001f55
mov ecx, dword [ebp - 0x24]
mov edi, dword [ebp - 0x58]
movzx eax, byte [ebp + ecx - 0x80]
dec ecx
add ecx, eax
jmp 0x1001caf0
movzx edx, byte [ebp + ecx - 0x7f]
mov eax, ecx
sub eax, edi
push 4
movzx eax, byte [ebp + eax - 0x82]
movzx eax, word [ebp + eax*2 - 0x154]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x80]
mov word [ebp + eax*2 - 0x154], cx
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x18], 0xe1757117
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0x951bb35b
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], esi
call fcn.10001ed2
mov dword [ebp - 0x30], ebx
jmp 0x1001c9c9
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 4
jl 0x1001c9ba
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 4
jne 0x1001cae0
mov esi, dword [ebp - 0x1a8]
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x28], 0x1eb7e595
mov dword [ebp - 0x34], 0xfffffff8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001ca12
push ebx
push ebx
push 0x940
push 0x3df
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
je 0x1001ca62
cmp dword [ebp - 0x18], ebx
jne 0x1001ca22
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, 0x7af9ca3e
setg dl
xor ecx, ecx
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x18]
je 0x1001ca62
xor eax, eax
inc eax
jmp 0x1001ca64
mov eax, ebx
add eax, 0x5ba5616d
je 0x1001ca75
cmp dword [ebp - 0x20], ebx
je 0x1001ca75
xor edx, edx
inc edx
jmp 0x1001ca77
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setle cl
neg ecx
jne 0x1001ca8e
cmp dword [ebp - 0x20], ebx
jne 0x1001ca8e
mov eax, ebx
jmp 0x1001ca91
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 1
mov eax, dword [ebp - 0x20]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov dword [esi + 4], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
je 0x1001c9e2
xor esi, esi
inc esi
lea ecx, [ebp - 0x1a8]
call fcn.10001f55
mov ecx, dword [ebp - 0x24]
mov edi, ebx
add ecx, 2
jmp 0x1001c695
mov dword [ebp - 0x2c], 0xfffffff8
lea ecx, [ebp - 0x184]
push 2
call fcn.10001ed2
mov dword [ebp - 4], 0xa
lea eax, [ebp - 0x24c]
push dword [ebp - 0x34]
movdqa xmm0, xmmword [0x10072f60]
lea ecx, [ebp - 0xc8]
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0x28], 0x26c312fb
push eax
mov dword [ebp - 0x40], 0x32fd2d1a
mov dword [ebp - 0x40], 8
push ebx
movdqu xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
call fcn.10001fbb
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x24], ebx
jmp 0x1001cb80
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x184]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1001cb70
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0x1d
jl 0x1001cd04
mov edi, dword [ebp - 0x184]
mov dword [ebp - 0x20], 0x1df82d83
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], ebx
jmp 0x1001cbbd
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x29c], 0xadf890ba
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1001cbac
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [edi + 4], 0x91e2
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, 0xffffffff
setne cl
imul ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x1001cca3
push 3
lea ecx, [ebp - 0x19c]
call fcn.10001ed2
push 3
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x1001cc24
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x19c]
mov dword [eax + ecx*4], 0xfffffffc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001cc11
mov dword [ebp - 0x18], ebx
jmp 0x1001cc3b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001cc2e
mov eax, dword [ebp - 0x20]
xor eax, eax
cmp dword [edi + 4], 0xd4b4b26d
setne al
imul eax, eax, 0xdd61
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x19c]
cmp eax, dword [ecx]
mov esi, dword [ecx + 8]
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xc8]
setne cl
xor edx, edx
sub ecx, esi
cmp esi, ecx
lea ecx, [ebp - 0x19c]
setg dl
imul edx, dword [eax + 8]
mov dword [ebp - 0x268], edx
call fcn.10001f55
xor esi, esi
inc esi
jmp 0x1001ccb4
mov dword [ebp - 0x34], 0x8663c10b
mov dword [ebp - 0x40], 0x204
inc dword [ebp - 0x40]
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1001ccf7
mov dword [ebp - 0x20], ebx
jmp 0x1001ccec
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001cce9
push esi
push 0xe68
push 0x1416
push 0x6b6
push 0xcb3
call dword [sym.imp.USER32.dll_SetScrollRange]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1001ccc5
dec dword [ebp - 0x24]
jns 0x1001ccc0
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1d
jge 0x1001cb99
lea ecx, [ebp - 0xc8]
call fcn.10001f55
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x184]
call fcn.10001f55
xor eax, eax
mov dword [ebp - 0x1e8], 7
mov word [ebp - 0x146], ax
lea ecx, [ebp - 0x1fc]
mov word [ebp - 0x1fc], ax
lea eax, [ebp - 0x154]
push eax
mov dword [ebp - 0x1ec], ebx
call fcn.100194c0
push dword [ebp - 0xe8]
mov dword [ebp - 4], 0xc
lea edi, [ebp - 0x154]
xor eax, eax
lea ecx, [ebp - 0x22c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10010c55
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x28], 0x5f40e13f
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001cd9f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xb0], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001cd8e
push 2
pop eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jl 0x1001ce7c
mov dword [ebp - 0x24], 0x46df37d4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001cdd5
push ebx
push ebx
push 0x82e
push ebx
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
push 2
pop eax
mov dword [ebp - 0x24], ebx
jmp 0x1001ce6a
mov dword [ebp - 0x2c], 0x5664dc9e
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
jl 0x1001ce67
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], ebx
jmp 0x1001ce0e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001ce0b
push ebx
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push 2
pop eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1001cdf8
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jl 0x1001ce62
mov dword [ebp - 0x30], 0x45fe46c2
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], ebx
jl 0x1001ce4b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001ce46
push ebx
push ebx
push 0xe2f
push 0x20d1
push ebx
call dword [sym.imp.USER32.dll_InsertMenuW]
dec dword [ebp - 0x30]
jns 0x1001ce2a
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xb0], ebx
jne 0x1001ce5f
dec dword [ebp - 0x20]
push 2
pop eax
jns 0x1001ce1b
push 2
pop eax
dec dword [ebp - 0x2c]
jns 0x1001cdec
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1001cddd
dec dword [ebp - 0x18]
jns 0x1001cdb4
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 0xa8]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0xa8]
setg cl
add eax, ecx
je 0x1001cec7
mov eax, esi
cmp dword [ebp - 0x18], ebx
jne 0x1001cec9
mov eax, ebx
xor ecx, ecx
test eax, eax
setle cl
xor eax, eax
cmp ecx, 0x7ae9f903
setl al
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], ebx
jmp 0x1001cef1
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x60], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x1001cee3
mov dword [ebp - 0x60], ebx
jmp 0x1001cf0d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001cf0a
call dword [sym.imp.GDI32.dll_GdiFlush]
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 4
jge 0x1001cefb
push 4
lea ecx, [ebp - 0x1cc]
call fcn.10001ed2
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x24], ebx
jmp 0x1001cf3b
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1cc]
mov dword [eax + ecx*4], 0xb9b5
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1001cf28
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1001cf6c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001cf67
push 0x1389
push 0x152e
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
dec dword [ebp - 0x24]
jns 0x1001cf4d
lea ecx, [ebp - 0x1cc]
call fcn.10001f55
push 0x5c
pop eax
push 2
mov byte [ebp - 0x6c], bl
mov ecx, ebx
mov dword [ebp - 0x6b], 0xc7160423
mov word [ebp - 0x67], 0x17b1
mov word [ebp - 0x64], ax
pop edi
cmp edi, 2
jne 0x1001cf9f
push 5
pop ecx
push ecx
pop edi
jmp 0x1001cfc6
movzx edx, byte [ebp + edi - 0x6b]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x6e]
movzx eax, word [ebp + eax*2 - 0x64]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + edi - 0x6c]
mov word [ebp + eax*2 - 0x64], cx
mov ecx, ebx
add edi, 2
cmp edi, 7
jb 0x1001cf93
xor eax, eax
mov dword [ebp - 0x130], 7
mov word [ebp - 0x62], ax
lea ecx, [ebp - 0x144]
mov word [ebp - 0x144], ax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x134], ebx
call fcn.100194c0
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x20], 0xfffffffa
push esi
call fcn.10001ed2
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24], ebx
jmp 0x1001d030
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xbc]
mov dword [eax + ecx*4], 2
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x1001d01d
mov dword [ebp - 0x20], 0xffffffee
jmp 0x1001d168
mov dword [ebp - 0x24], ebx
jmp 0x1001d058
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x8c], 0xf251d69f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1001d047
mov dword [ebp - 0x8c], 0x15
jmp 0x1001d137
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10001ed2
push 2
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x10
call fcn.10001ed2
xor edx, edx
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x18], ebx
inc edx
jmp 0x1001d0ad
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c0]
mov dword [eax + ecx*4], 0x82e5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1001d09a
mov dword [ebp - 0x18], ebx
jmp 0x1001d0ca
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e0]
mov dword [eax + ecx*4], 0x7392
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001d0b7
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x84], ebx
je 0x1001d0e8
mov esi, edx
cmp dword [ebp - 0x8c], ebx
jne 0x1001d0ea
mov esi, ebx
mov eax, dword [ebp - 0x84]
xor ecx, ecx
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x8c]
cmp esi, eax
mov eax, dword [ebp - 0xbc]
sete cl
cmp ecx, 0xe55a4419
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
lea ecx, [ebp - 0x1e0]
mov dword [ebp - 0x34], edx
call fcn.10001f55
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0xf
call fcn.10001f55
dec dword [ebp - 0x8c]
cmp dword [ebp - 0x8c], 0xfffffffd
jge 0x1001d06d
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001d165
push ebx
push 0x12f5
push ebx
push 0x915
push ebx
push 0x13f
call dword [sym.imp.USER32.dll_DrawTextExW]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1a
je 0x1001d042
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xbc]
cmp dword [eax], 0xf851
mov eax, dword [ebp - 0x20]
mov esi, dword [ebp - 0xbc]
setg cl
add eax, ecx
xor ecx, ecx
cmp dword [esi], eax
setge cl
xor eax, eax
cmp ecx, 0x5f885928
setne al
xor ecx, ecx
cmp eax, 1
mov eax, dword [ebp - 0x20]
setle cl
xor edx, edx
cmp ecx, 0xc74b
setne dl
add eax, 3
mov dword [esi], edx
add eax, edx
je 0x1001d1c5
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x6406
setl cl
mov dword [ebp - 0x20], ecx
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xe
call fcn.10001f55
mov dword [ebp - 0x18], 0x98cafa32
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x28], ebx
push 1
call fcn.10001ed2
push 2
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x11
call fcn.10001ed2
mov dword [ebp - 0x3c], 5
mov dword [ebp - 0x34], 0x3c10b42b
mov dword [ebp - 0x20], ebx
jmp 0x1001d22f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x1001d21f
mov dword [ebp - 0x20], ebx
jmp 0x1001d249
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1001d23a
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
neg eax
cmp eax, 1
sbb eax, eax
xor edx, edx
neg eax
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
cmp edx, dword [ebp - 0x18]
jl 0x1001d28e
mov eax, dword [ebp - 0x10c]
cmp dword [eax], ebx
jne 0x1001d28e
cmp dword [ebp - 0x18], ebx
jne 0x1001d28e
mov ecx, ebx
jmp 0x1001d291
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x16c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x10c]
xor eax, eax
cmp dword [ecx], 1
mov edx, dword [ecx]
sete al
xor ecx, ecx
imul eax, eax, 0xc6eb
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, 4
setne cl
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0x16c]
setl al
sub eax, edx
neg eax
sbb eax, eax
add eax, 3
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
imul eax, eax, 0xf01c
mov dword [ebp - 0x34], eax
call fcn.10001f55
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 0xe
call fcn.10001f55
push 0x5f
pop eax
push 2
mov byte [ebp - 0x50], bl
mov ecx, ebx
mov dword [ebp - 0x4f], 0xe5be0245
mov word [ebp - 0x5c], ax
pop esi
cmp esi, 2
jne 0x1001d323
push 3
pop ecx
push ecx
pop esi
jmp 0x1001d34c
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x5c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x5c], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x1001d317
xor eax, eax
mov dword [ebp - 0x200], 7
mov word [ebp - 0x5a], ax
lea ecx, [ebp - 0x214]
mov word [ebp - 0x214], ax
lea eax, [ebp - 0x5c]
push eax
mov dword [ebp - 0x204], ebx
call fcn.100194c0
mov byte [ebp - 4], 0x12
lea eax, [ebp - 0x23c]
push dword [ebp - 0x34]
movdqa xmm0, xmmword [0x10072fc0]
lea ecx, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x24], 9
push eax
mov dword [ebp - 0x20], 0x20bd2ab
mov dword [ebp - 0x18], 0x677b568b
push ebx
movdqu xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
call fcn.10001fbb
mov byte [ebp - 4], 0x13
xor edx, edx
mov dword [ebp - 0x40], 0x12f6
mov dword [ebp - 0x24], 0xda4d073f
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setge dl
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov ecx, dword [eax + 8]
xor eax, eax
cmp ecx, 0x2456160c
setne al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x9c]
setl cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x34]
cmp edx, dword [eax]
setg cl
mov dword [eax], ecx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x1001d644
mov dword [ebp - 0x2c], 0x6e85fcb
mov dword [ebp - 0x28], 0x8c46158e
mov dword [ebp - 0x3c], 0x81f6
mov dword [ebp - 0x20], ebx
jmp 0x1001d47c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001d479
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x1001d467
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x18]
cmp eax, 1
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x9c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax + edx*4], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x24]
je 0x1001d4d8
cmp dword [ebp - 0x18], ebx
je 0x1001d4d8
mov eax, dword [ebp - 0x9c]
cmp dword [eax + 8], ebx
je 0x1001d4d8
xor ecx, ecx
inc ecx
jmp 0x1001d4da
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfffffff7
setne al
cmp eax, 0xbe776e9f
sbb eax, eax
inc eax
cmp eax, 0xffffffff
jg 0x1001d501
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
cmp dword [eax + ecx*4], ebx
jne 0x1001d501
mov eax, ebx
jmp 0x1001d504
xor eax, eax
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
je 0x1001d62b
mov dword [ebp - 0x28], 0x722c
cmp dword [ebp - 0x28], 0x75b3
jle 0x1001d55e
push ebx
push 0x2475
call dword [sym.imp.USER32.dll_ClientToScreen]
mov esi, ebx
mov edi, ebx
lea eax, [edi + esi]
mov ecx, 0x10080838
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0x376c
jl 0x1001d530
inc esi
cmp esi, 0x496a
jl 0x1001d52e
push ebx
push 0x1a7f
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [ebp - 0x30], 0x8d9a65c8
mov byte [ebp - 4], 0x14
cmp dword [ebp - 0x28], 0x71dc
jge 0x1001d59f
mov edx, str.pnpupf_jrlnv_wgf_omy_rouolsqwb
mov ecx, 0x10080838
call fcn.10013913
jmp 0x1001d59f
mov dword [ebp - 4], 0x13
xor edx, edx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x34], 6
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x3c]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x9c]
setle dl
xor ecx, ecx
inc edx
cmp edx, dword [eax + esi*4]
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
setg cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x9c]
setne cl
xor edx, edx
cmp ecx, dword [eax + 8]
setg dl
cmp dword [ebp - 0x24], edx
jge 0x1001d61d
cmp dword [ebp - 0x3c], ebx
jne 0x1001d61d
mov ecx, ebx
jmp 0x1001d620
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x28]
imul eax, ecx
mov dword [ebp - 0x34], eax
jmp 0x1001d63c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001d63c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
inc dword [ebp - 0x18]
jmp 0x1001d443
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x12
call fcn.10001f55
mov dword [ebp - 0x5c], ebx
push dword [ebp - 0x134]
cmp dword [ebp - 0x130], 8
lea eax, [ebp - 0x144]
push ebx
cmovae eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x22c]
push eax
call fcn.1001db08
cmp eax, 0xffffffff
je 0x1001d69c
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x214]
push ecx
push 1
push eax
lea ecx, [ebp - 0x22c]
call fcn.10014078
jmp 0x1001d656
push dword [ebp - 0x34]
movdqa xmm0, xmmword [0x10072f60]
lea eax, [ebp - 0x22c]
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x24], ebx
push eax
mov dword [ebp - 0x2c], 0x29a2a67f
lea ecx, [ebp - 0xd4]
push ebx
movdqu xmmword [ebp - 0x23c], xmm0
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
call fcn.10001fbb
push 1
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x16
call fcn.10001ed2
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x1001d711
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x100]
mov dword [eax + ecx*4], 0xfe8e60a2
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1001d6fe
mov dword [ebp - 0x20], ebx
jmp 0x1001d729
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x54], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1001d71b
mov ecx, dword [ebp - 0x2c]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xd4]
setge cl
mov dword [eax + 8], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x100]
mov edx, dword [eax]
mov eax, dword [ebp - 0x24]
cmp eax, 0xcde3
setl cl
imul ecx, dword [ebp - 0x2c]
imul eax, ecx, 6
xor ecx, ecx
cmp eax, 0x6acb8f2b
setle cl
xor eax, eax
imul ecx, edx
cmp ecx, edx
setle al
cmp eax, 1
jl 0x1001d78f
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x2c]
cmp eax, 1
mov eax, dword [ebp - 0x54]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x100]
setne cl
mov dword [eax], ecx
lea ecx, [ebp - 0x100]
call fcn.10001f55
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x12
call fcn.10001f55
mov dword [ebp - 0x34], 0x11e1
cmp dword [ebp - 0x34], 0x12ed
jle 0x1001d858
push ebx
push ebx
push 0x11be
call dword [sym.imp.USER32.dll_EnumChildWindows]
mov edi, ebx
mov dword [ebp - 0x38], ebx
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x40], 0x63dc
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], ebx
mov ecx, eax
mov ebx, edi
mov edi, dword [ebp - 0x34]
sar ebx, cl
mov eax, edi
mov ecx, 0x10080838
or eax, ebx
cdq
push edx
push eax
call fcn.10010b40
inc edi
cmp edi, 0xd31
jl 0x1001d817
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x38]
dec eax
dec dword [ebp - 0x40]
push 0
mov dword [ebp - 0x28], eax
pop ebx
jne 0x1001d80b
inc esi
cmp esi, 0x5939
jl 0x1001d7ff
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x5f0d
jl 0x1001d7fd
mov dword [ebp - 0x34], 0x1452
cmp dword [ebp - 0x34], 0x52c
jge 0x1001d8f6
lea eax, [ebp - 0xa4]
mov dword [ebp - 0x90], ebx
push eax
lea eax, [ebp - 0x90]
mov dword [ebp - 0xa4], ebx
push eax
push str._d:_d
call fcn.1004df5b
mov esi, dword [ebp - 0x90]
add esp, 0xc
mov eax, esi
cdq
push 0xa
pop edi
idiv edi
imul ecx, edx, 0xa
add ecx, eax
cmp ecx, dword [ebp - 0xa4]
jle 0x1001d8b3
cmp ecx, 0x3b
jle 0x1001d8d4
inc esi
mov eax, esi
cdq
idiv edi
cmp edx, 5
jle 0x1001d8c4
mov ecx, edi
sub ecx, edx
add esi, ecx
mov eax, esi
push 0x18
cdq
pop ecx
idiv ecx
mov esi, edx
mov dword [ebp - 0x90], esi
mov eax, esi
cdq
idiv edi
mov ecx, edx
mov esi, eax
imul eax, ecx, 0xa
add eax, esi
cdq
idiv edi
push edx
push eax
push ecx
push esi
push str._d_d:_d_d_n
call fcn.1004e245
add esp, 0x14
mov ecx, dword [ebp - 0xa0]
lea eax, [ebp - 0x22c]
push eax
lea edx, [ebp - 0x1fc]
call fcn.1001dbab
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x214]
call fcn.10011831
push ebx
push 1
lea ecx, [ebp - 0x144]
call fcn.10011831
push ebx
push 1
lea ecx, [ebp - 0x22c]
call fcn.10011831
push ebx
push 1
lea ecx, [ebp - 0x1fc]
call fcn.10011831
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xa0]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret