Function at 0x106505a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push 0x84
mov eax, 0x11ad538
call fcn.010b1402
mov esi, ecx
mov dword [ebp - 0x20], esi
push 1
push ecx
push ecx
xor ebx, ebx
mov dword [ebp - 0x14], ebx
fld dword [0x1004594]
fstp dword [esp + 4]
fld dword [0x1004590]
fstp dword [esp]
push dword [ebp + 0x18]
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.0106c9ef
mov edi, 0x1002a64
push edi
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
mov dword [esi], 0x1004e68
mov byte [esi + 0x560], bl
call fcn.01038fe3
push 0x11
lea eax, [ebp - 0x48]
push eax
lea ecx, [esi + 0x564]
mov byte [ebp - 4], 1
call fcn.010f17ce
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 3
call fcn.010362ea
lea eax, [esi + 0x5a4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5ac]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5b4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5bc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5c4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5cc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5d4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5dc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5e4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5ec]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5f4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x5fc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x604]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x60c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x614]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x61c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x624]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x634]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x644]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x654]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x664]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x66c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x674]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x67c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x684]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x68c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x694]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x69c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6a4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6ac]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6b4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6bc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6c4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6cc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6d4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6dc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6e4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6ec]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6f4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x6fc]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x704]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x70c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x71c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x72c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x73c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x74c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x754]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x764]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x774]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x784]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x794]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x79c]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x7a4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x7ac]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x7b4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
mov dword [esi + 0x7bc], ebx
mov dword [esi + 0x7c0], ebx
lea eax, [esi + 0x7c4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
lea eax, [esi + 0x7cc]
lea ecx, [esi + 0x7d4]
mov dword [eax], ebx
mov dword [eax + 4], ebx
call fcn.0106ffa1
mov dword [esi + 0x7e4], ebx
mov byte [esi + 0x7e8], bl
mov byte [esi + 0x7e9], bl
mov byte [esi + 0x7ea], bl
mov byte [esi + 0x7eb], bl
mov dword [esi + 0x7ec], ebx
mov byte [esi + 0x7f0], bl
mov dword [esi + 0x7f4], ebx
push 0x8c
mov byte [ebp - 4], 5
mov byte [esi + 0x7f8], bl
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 6
cmp eax, ebx
je 0x10653c2
mov ecx, eax
call fcn.0105bd37
jmp 0x10653c4
xor eax, eax
lea ecx, [esi + 0x7fc]
push eax
mov byte [ebp - 4], 5
call fcn.01181412
push 0xd0
mov byte [ebp - 4], 7
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 8
cmp eax, ebx
je 0x10653f7
mov ecx, eax
call fcn.010ab188
jmp 0x10653f9
xor eax, eax
lea ecx, [esi + 0x804]
push eax
mov byte [ebp - 4], 7
call fcn.01181412
push 0x9c
mov byte [ebp - 4], 9
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0xa
cmp eax, ebx
je 0x106542c
mov ecx, eax
call fcn.010aa7ea
jmp 0x106542e
xor eax, eax
lea ecx, [esi + 0x80c]
push eax
mov byte [ebp - 4], 9
call fcn.01181412
push 0x58
mov byte [ebp - 4], 0xb
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0xc
cmp eax, ebx
je 0x1065461
push dword [ebp + 0x14]
mov ecx, eax
call fcn.0105b63f
jmp 0x1065463
xor eax, eax
lea ecx, [esi + 0x814]
push eax
mov byte [ebp - 4], 0xb
call fcn.01181412
push 0x88
mov byte [ebp - 4], 0xd
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0xe
cmp eax, ebx
je 0x1065496
mov ecx, eax
call fcn.0105b6a2
jmp 0x1065498
xor eax, eax
lea ecx, [esi + 0x81c]
push eax
mov byte [ebp - 4], 0xd
call fcn.01181412
push 0xdc
mov byte [ebp - 4], 0xf
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0x10
cmp eax, ebx
je 0x10654cb
mov ecx, eax
call fcn.0105b7a6
jmp 0x10654cd
xor eax, eax
lea ecx, [esi + 0x824]
push eax
mov byte [ebp - 4], 0xf
call fcn.01181412
push 0x58
mov byte [ebp - 4], 0x11
call fcn.010b0174
pop ecx
mov dword [ebp + 0x18], eax
mov byte [ebp - 4], 0x12
cmp eax, ebx
je 0x1065500
push dword [ebp + 0x14]
mov ecx, eax
call fcn.0105ba93
jmp 0x1065502
xor eax, eax
lea ecx, [esi + 0x82c]
push eax
mov byte [ebp - 4], 0x11
call fcn.01181412
push 0xbc
mov byte [ebp - 4], 0x13
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x14
cmp eax, ebx
je 0x1065544
fld dword [esi + 0x18]
push ecx
push ecx
fstp dword [esp + 4]
mov ecx, eax
fld dword [esi + 0x14]
fstp dword [esp]
call fcn.0105b952
jmp 0x1065546
xor eax, eax
lea ecx, [esi + 0x834]
push eax
mov byte [ebp - 4], 0x13
call fcn.01181412
push 0x60
mov byte [ebp - 4], 0x15
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x16
cmp eax, ebx
je 0x1065576
mov ecx, eax
call fcn.01060446
jmp 0x1065578
xor eax, eax
lea ecx, [esi + 0x83c]
push eax
mov byte [ebp - 4], 0x15
call fcn.01181412
push 0x8c
mov byte [ebp - 4], 0x17
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x18
cmp eax, ebx
je 0x10655ab
mov ecx, eax
call fcn.0105bba2
jmp 0x10655ad
xor eax, eax
push eax
lea ecx, [esi + 0x844]
mov byte [ebp - 4], 0x17
call fcn.01181412
lea eax, [esi + 0x84c]
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ebx
lea eax, [esi + 0x854]
mov dword [eax], ecx
mov dword [eax + 4], ebx
lea eax, [esi + 0x85c]
mov dword [eax], ecx
mov dword [eax + 4], ebx
lea eax, [esi + 0x864]
mov dword [eax], ecx
mov dword [eax + 4], ebx
lea eax, [esi + 0x86c]
mov dword [eax], ecx
mov dword [eax + 4], ebx
push 0x88
mov byte [ebp - 4], 0x1e
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x1f
cmp eax, ebx
je 0x1065636
push 0x1005174
lea ecx, [ebp - 0x48]
call fcn.01038fe3
mov ecx, dword [ebp + 0x14]
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x20
mov dword [ebp - 0x14], 1
call fcn.010a8ea5
jmp 0x1065638
xor eax, eax
push eax
lea ecx, [esi + 0x874]
mov dword [ebp - 4], 0x21
call fcn.01181412
test byte [ebp - 0x14], 1
mov dword [ebp - 4], 0x23
je 0x1065667
and dword [ebp - 0x14], 0xfffffffe
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.010362ea
push 0x88
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x24
cmp eax, ebx
je 0x10656a0
push 0x100514c
lea ecx, [ebp - 0x64]
call fcn.01038fe3
mov ecx, dword [ebp + 0x14]
or dword [ebp - 0x14], 2
lea eax, [ebp - 0x64]
push eax
mov byte [ebp - 4], 0x25
call fcn.010a8ea5
jmp 0x10656a2
xor eax, eax
push eax
lea ecx, [esi + 0x87c]
mov dword [ebp - 4], 0x26
call fcn.01181412
test byte [ebp - 0x14], 2
mov dword [ebp - 4], 0x28
je 0x10656d1
and dword [ebp - 0x14], 0xfffffffd
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push 0x88
call fcn.010b0174
pop ecx
mov dword [ebp + 0x14], eax
mov byte [ebp - 4], 0x29
cmp eax, ebx
je 0x106570a
push 0x1005120
lea ecx, [ebp - 0x48]
call fcn.01038fe3
mov ecx, dword [ebp + 0x14]
or dword [ebp - 0x14], 4
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x2a
call fcn.010a8ea5
jmp 0x106570c
xor eax, eax
push eax
lea ecx, [esi + 0x884]
mov dword [ebp - 4], 0x2b
call fcn.01181412
mov dword [ebp - 4], 0x2c
test byte [ebp - 0x14], 4
je 0x1065737
push ebx
push 1
lea ecx, [ebp - 0x48]
call fcn.010362ea
push ebx
push ebx
push ebx
push ebx
lea ecx, [esi + 0x88c]
call fcn.010594a4
fld dword [esi + 0x18]
push ecx
push ecx
fstp dword [esp + 4]
lea ecx, [esi + 0x8a0]
fld dword [esi + 0x14]
fstp dword [esp]
call fcn.010595d3
lea ecx, [esi + 0x8c8]
call fcn.01058afe
mov dword [esi + 0x914], ebx
lea ecx, [esi + 0x91c]
mov byte [esi + 0x918], bl
call fcn.010368a4
lea ecx, [esi + 0x938]
push ebx
mov byte [ebp - 4], 0x2f
call fcn.0105dc66
lea ecx, [esi + 0x948]
push ebx
mov byte [ebp - 4], 0x30
call fcn.010f8354
lea ecx, [esi + 0x958]
call fcn.010368a4
mov dword [esi + 0x974], ebx
push 0x10050f4
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x33
call fcn.01038fe3
push ebx
lea eax, [ebp - 0x64]
lea ecx, [esi + 0x978]
push eax
mov byte [ebp - 4], 0x34
call fcn.0114794f
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
lea eax, [esi + 0x9c4]
mov dword [esi + 0x9bc], ebx
mov byte [esi + 0x9c0], bl
mov byte [esi + 0x9c1], bl
xor ecx, ecx
mov dword [eax], ecx
mov dword [eax + 4], ebx
push edi
lea ecx, [esi + 0x9cc]
mov byte [ebp - 4], 0x37
call fcn.01038fe3
lea ecx, [esi + 0x9e8]
push ebx
mov byte [ebp - 4], 0x38
call fcn.010f8354
mov dword [esi + 0x9f8], ebx
lea eax, [esi + 0x54]
push eax
push 0x66
push dword [ebp + 8]
mov byte [ebp - 4], 0x3a
call fcn.0103afc1
push 0x27f8
push dword [ebp + 8]
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov dword [esi + 0x9b8], eax
push 0xffffffffffffffec
mov dword [0x11fcbf8], esi
mov dword [0x11fcbfc], 0x1059470
mov dword [0x11fcd48], esi
mov dword [0x11fcd4c], 0x105943f
mov dword [0x11fcd30], esi
mov dword [0x11fcd34], 0x1034aa5
mov dword [0x11fce08], esi
mov dword [0x11fce0c], 0x1034abc
mov dword [0x11fce10], esi
mov dword [0x11fce14], 0x1034aea
mov dword [0x11fcea0], esi
mov dword [0x11fcea4], 0x1059432
mov dword [0x11fceb8], esi
mov dword [0x11fcebc], 0x1059456
mov dword [0x11fced0], esi
mov dword [0x11fced4], 0x1059449
mov dword [0x11fcef0], esi
mov dword [0x11fcef4], 0x1064dfb
mov dword [0x11fcf00], esi
mov dword [0x11fcf04], 0x1060e26
mov dword [0x11fcef8], esi
mov dword [0x11fcefc], 0x105c5e2
mov dword [0x11fcf08], esi
mov dword [0x11fcf0c], 0x1034add
mov dword [0x11fcf18], esi
mov dword [0x11fcf1c], 0x105947d
mov dword [0x11fcf28], esi
mov dword [0x11fcf2c], 0x1058db8
mov dword [ebp + 0x14], ebx
call dword [sym.imp.USER32.dll_GetShellWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov ecx, 0x400000
test ecx, eax
je 0x106594c
mov dword [ebp + 0x14], ecx
cmp dword [esi + 0x6c], 8
jb 0x1065957
mov ecx, dword [esi + 0x58]
jmp 0x106595a
lea ecx, [esi + 0x58]
cmp dword [0x11fc4fc], 8
mov edx, dword [0x11fc4e8]
jae 0x106596e
mov edx, 0x11fc4e8
push dword [ebp + 8]
mov eax, 0x80000000
push ebx
push ebx
push ebx
push eax
push ebx
push eax
push 0x2cf0000
push ecx
push edx
push dword [ebp + 0x14]
push esi
call fcn.0105e997
push dword [esi + 0xc]
call fcn.010a6d9d
lea eax, [esi + 0x560]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], esi
mov byte [eax], 1
push 1
push dword [esi + 0xc]
mov byte [ebp - 4], 0x3c
call dword [sym.imp.SHELL32.dll_DragAcceptFiles]
mov eax, dword [esi + 8]
push 0x10050d8
lea ecx, [ebp - 0x48]
mov dword [eax + 0x38], esi
call fcn.01038fe3
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3d
call fcn.01038fe3
mov ecx, dword [esi + 0x878]
push 1
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x10000000
push 0x2739
push dword [esi + 0xc]
mov byte [ebp - 4], 0x3e
push dword [esi + 0x70]
call fcn.010a8d5c
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x7fc]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x3f
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x804]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x40
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x48]
call fcn.01038fe3
lea eax, [ebp - 0x48]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x80c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x41
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a90b6
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x814]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x42
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x81c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x43
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a90b6
mov byte [ebp - 4], 0x3c
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push ebx
push ecx
push ecx
lea eax, [esi + 0x80c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a8bd0
push 0x10050c8
lea ecx, [ebp - 0x48]
call fcn.01038fe3
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x44
call fcn.01038fe3
mov ecx, dword [esi + 0x880]
push ebx
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
push 0x10000000
push 0x273a
push dword [esi + 0xc]
mov byte [ebp - 4], 0x45
push dword [esi + 0x70]
call fcn.010a8d5c
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x824]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x46
call fcn.0116000e
mov ecx, dword [esi + 0x880]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x82c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x47
call fcn.0116000e
mov ecx, dword [esi + 0x880]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x834]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x48
call fcn.0116000e
mov ecx, dword [esi + 0x880]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push edi
lea ecx, [ebp - 0x64]
call fcn.01038fe3
lea eax, [ebp - 0x64]
push eax
push ebx
push ecx
push ecx
lea eax, [esi + 0x83c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
mov byte [ebp - 4], 0x49
call fcn.0116000e
mov ecx, dword [esi + 0x880]
call fcn.010a90b6
push ebx
push 1
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push 0x10050d8
lea ecx, [ebp - 0x48]
call fcn.01038fe3
push edi
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x4a
call fcn.01038fe3
mov ecx, dword [esi + 0x888]
push 1
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x64]
push eax
push ebx
push 0x2936
push dword [esi + 0xc]
mov byte [ebp - 4], 0x4b
push dword [esi + 0x70]
call fcn.010a8d5c
push ebx
push 1
lea ecx, [ebp - 0x64]
call fcn.010362ea
push ebx
push 1
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3c
call fcn.010362ea
push dword [esi + 0xc]
lea ecx, [esi + 0x1f4]
push dword [esi + 0x70]
call fcn.01058498
mov ecx, dword [esi + 0x838]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 0x105d8f8
push esi
lea edi, [esi + 0x7d4]
push eax
mov ecx, edi
call fcn.0105e894
mov ecx, dword [esi + 0x838]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 0x2743
push eax
call fcn.0104b556
push 0x10599c2
push esi
push eax
mov ecx, edi
call fcn.0105e894
mov ecx, dword [esi + 0x828]
mov eax, dword [ecx]
call dword [eax + 0x2c]
push 0x2740
push eax
call fcn.0104b556
push 0x106224a
push esi
push eax
mov ecx, edi
call fcn.0105e894
push dword [esi + 0xc]
lea ecx, [esi + 0x278]
push dword [esi + 0x70]
call fcn.0107014c
mov edi, dword [sym.imp.USER32.dll_LoadMenuW]
push 0x6e
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x7f4]
push eax
call fcn.010373d4
push 0x2720
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x90]
push eax
call fcn.010373d4
push 0x2778
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x84c]
push eax
call fcn.0105b39a
push 0x2779
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x854]
push eax
call fcn.0105b39a
push 0x3e91
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x85c]
push eax
call fcn.0105b39a
push 0x293c
push dword [esi + 0x70]
call edi
push eax
lea eax, [esi + 0x864]
push eax
call fcn.0105b39a
push 0x293b
push dword [esi + 0x70]
call edi
push eax
lea edi, [esi + 0x86c]
push edi
call fcn.0105b39a
push 0x83
push dword [esi + 0x70]
lea eax, [esi + 0x864]
push 0x274f
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
call fcn.0105d606
push 0x84
push dword [esi + 0x70]
lea eax, [esi + 0x864]
push 0x2750
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
call fcn.0105d606
push 0x85
push dword [esi + 0x70]
lea eax, [esi + 0x864]
push 0x274e
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
call fcn.0105d606
push 0x86
push dword [esi + 0x70]
lea eax, [esi + 0x864]
push 0x2760
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
call fcn.0105d606
push 0x87
push dword [esi + 0x70]
lea eax, [esi + 0x864]
push 0x2748
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
call fcn.0105d606
push 0x83
push dword [esi + 0x70]
push 0x274f
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0116000e
call fcn.0105d606
push 0x84
push dword [esi + 0x70]
push 0x2750
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0116000e
call fcn.0105d606
push 0x85
push dword [esi + 0x70]
push 0x274e
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0116000e
call fcn.0105d606
push 0x86
push dword [esi + 0x70]
push 0x2760
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0116000e
call fcn.0105d606
push 0x87
push dword [esi + 0x70]
push 0x2748
push ecx
push ecx
mov ecx, esp
mov dword [ebp + 8], esp
push edi
call fcn.0116000e
call fcn.0105d606
push ecx
push ecx
lea eax, [esi + 0x84c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x808]
call fcn.010aaa89
push ecx
push ecx
lea eax, [esi + 0x854]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x808]
call fcn.010aaaf5
push ecx
push ecx
lea eax, [esi + 0x85c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x808]
call fcn.010aaabf
push ecx
push ecx
lea eax, [esi + 0x864]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x810]
call fcn.010aabdf
mov ecx, esi
call fcn.01063401
lea eax, [ebp + 0xa]
push eax
mov ecx, 0x11fc9c8
mov byte [ebp + 0xa], 1
mov byte [ebp + 0xb], bl
call fcn.0105e870
lea eax, [ebp + 0xa]
mov byte [ebp + 0xa], 1
mov byte [ebp + 0xb], bl
push eax
mov ecx, 0x11fcc68
call fcn.0105e870
lea eax, [ebp + 0xa]
push eax
mov ecx, 0x11fcba0
mov byte [ebp + 0xa], 1
mov byte [ebp + 0xb], bl
call fcn.0105e870
push 2
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_MonitorFromWindow]
mov dword [esi + 0x7ec], eax
mov eax, dword [esi + 0x888]
push 0xffffffffffffffff
lea edi, [esi + 0xd0]
push eax
mov ecx, edi
call fcn.01147bb0
mov eax, dword [esi + 0x878]
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.01147bb0
push 0xffffffffffffffff
lea eax, [esi + 0x278]
push eax
mov ecx, edi
call fcn.01147bb0
push 0xffffffffffffffff
lea eax, [esi + 0x1f4]
push eax
mov ecx, edi
call fcn.01147bb0
push 0xffffffffffffffff
lea eax, [esi + 0x978]
push eax
mov ecx, edi
call fcn.01147bb0
mov eax, dword [esi + 0x880]
push 0xffffffffffffffff
push eax
mov ecx, edi
call fcn.01147bb0
push 1
mov ecx, esi
mov byte [ebp - 4], 0x3b
mov byte [esi + 0x560], bl
call fcn.0105bed8
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x8c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x90]
push eax
mov dword [ebp - 0x90], 0x2c
call fcn.0105da27
cmp al, bl
je 0x106613f
cmp dword [ebp - 0x88], 2
jne 0x106611f
mov dword [ebp - 0x88], 0xa
lea eax, [ebp - 0x90]
push eax
call fcn.01058b36
lea eax, [ebp - 0x90]
push eax
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_SetWindowPlacement]
test eax, eax
jne 0x106614b
push dword [ebp + 0xc]
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [esi + 0xc]
call dword [sym.imp.USER32.dll_UpdateWindow]
push ebx
push ecx
push ecx
lea eax, [esi + 0x804]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x878]
call fcn.010a8b22
push ebx
push ecx
push ecx
lea eax, [esi + 0x82c]
mov ecx, esp
mov dword [ebp + 8], esp
push eax
call fcn.0116000e
mov ecx, dword [esi + 0x880]
call fcn.010a8b22
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x1003be8
mov edi, 0x80000001
push edi
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x4c
call fcn.0105926b
test eax, eax
jne 0x10661e1
lea eax, [ebp + 8]
push eax
push 0x10050a4
lea ecx, [ebp - 0x2c]
call fcn.010592c0
test eax, eax
jne 0x10661e1
cmp dword [ebp + 8], 1
sete al
mov byte [esi + 0x918], al
mov ecx, esi
call fcn.0106055a
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
push ebx
push ebx
push 0x2001f
push ebx
push ebx
push 0x1004188
push edi
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x4d
call fcn.0105926b
test eax, eax
jne 0x1066267
lea eax, [ebp + 0x14]
push eax
push 0x1005084
lea ecx, [ebp - 0x1c]
call fcn.010592c0
test eax, eax
jne 0x1066232
cmp dword [ebp + 0x14], 1
sete al
mov byte [esi + 0x7f8], al
cmp dword [0x11fc518], 8
mov eax, dword [0x11fc504]
mov dword [ebp + 8], ebx
jae 0x1066248
mov eax, 0x11fc504
lea ecx, [ebp + 8]
push ecx
push eax
lea ecx, [ebp - 0x1c]
call fcn.010592c0
test eax, eax
jne 0x1066267
mov eax, dword [ebp + 8]
shr eax, 4
and al, 1
mov byte [esi + 0x5a0], al
mov ecx, esi
call fcn.0105a6b4
movzx eax, byte [esi + 0x7f8]
push eax
mov ecx, esi
call fcn.0105c85e
lea ecx, [ebp - 0x1c]
call fcn.0105924d
lea ecx, [ebp - 0x2c]
call fcn.0105924d
mov eax, esi
call fcn.010b14b6
ret 0x14