Function at 0x100ebb0a
Capabilities:
Compare security identifiers
Get keyboard layout

Disassembly:
mov eax, 0x1014ba16
call fcn.1013e250
sub esp, 0x250
push ebx
push esi
xor ebx, ebx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 4], ebx
lea eax, [ebp - 0x1a8]
mov dword [ebp - 0x90], ebx
lea ecx, [ebp - 0xb8]
movdqa xmm0, xmmword [0x1000eac0]
mov esi, edx
push edi
push dword [ebp - 0x70]
mov dword [ebp - 0x38], esi
push eax
lea eax, [ebp - 0x1b8]
mov dword [ebp - 0xb8], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1b8], xmm0
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb0], ebx
call fcn.10014f3b
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x30], 0xd4e7937d
mov dword [ebp - 0x30], 0x8462751c
mov dword [ebp - 0x30], 2
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0x9d4346
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xb2b74c38
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x67101392
push 3
mov dword [ebp - 0x30], 0xfffffff9
pop edi
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x421e0bec
mov dword [ebp - 0x30], 0x826a056e
push edi
call fcn.10013ee8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x1aa84cbe
mov dword [ebp - 0x30], 0xc22c9208
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x14], ebx
jmp 0x100ebc16
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x100ebc06
dec dword [ebp - 0x28]
lea ecx, [ebp - 0x18c]
call fcn.100144eb
lea ecx, [ebp - 0xb8]
mov byte [ebp - 4], bl
call fcn.100144eb
push dword [ebp - 0x70]
movdqa xmm0, xmmword [0x1000ea70]
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1c8]
mov dword [ebp - 0x1c], 0xdb5cabfc
push eax
test esi, esi
mov dword [ebp - 0x24], 0x6f93bd5d
mov dword [ebp - 0x14], 5
lea ecx, [ebp - 0x7c]
push ebx
sete byte [ebp - 0x32]
mov dword [ebp - 0x7c], ebx
movdqu xmmword [ebp - 0x1c8], xmm0
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.10014f3b
push 2
pop esi
push esi
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], esi
call fcn.10013ee8
mov dword [ebp - 0x2c], 0xf39281c1
mov dword [ebp - 0x28], 0x1f199e1f
mov dword [ebp - 0x14], ebx
jmp 0x100ebcbd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], 0xdc0223de
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100ebcaa
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
imul ecx, dword [ebp - 0x14], 0x4006
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x7c]
mov edi, dword [ebp - 0x108]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0x53a3
setle al
xor ecx, ecx
mov dword [esi + 4], eax
mov dword [edi + 4], eax
mov eax, dword [ebp - 0x24]
cmp dword [esi + 4], eax
mov eax, dword [ebp - 0x1c]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, 0xb0f7
setle al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, dword [esi + 4]
jle 0x100ebd58
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x28], 0x5d1cc0c7
jg 0x100ebd58
mov eax, ebx
jmp 0x100ebd5b
xor eax, eax
inc eax
mov dword [edi + 4], eax
mov ecx, 0x4043ca31
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x14]
sub ecx, dword [edx + 8]
add eax, ecx
je 0x100ebd7f
cmp dword [esi + 4], ebx
je 0x100ebd7f
xor esi, esi
inc esi
mov ecx, esi
jmp 0x100ebd84
xor esi, esi
mov ecx, ebx
inc esi
xor eax, eax
cmp ecx, dword [edx + 8]
lea ecx, [ebp - 0x108]
setne al
mov dword [ebp - 0x2c], eax
call fcn.100144eb
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], bl
call fcn.100144eb
mov dword [ebp - 0x1c], 7
lea ecx, [ebp - 0x8c]
push esi
call fcn.10013ee8
mov dword [ebp - 0x2c], 0xc7f05f43
mov dword [ebp - 0x24], 0xa2b8ea2c
mov dword [ebp - 0x14], 0xfaa23240
mov dword [ebp - 0x28], 0xef7e2919
mov dword [ebp - 0x20], ebx
jmp 0x100ebdec
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x8c]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100ebdd9
push 3
mov dword [ebp - 0x20], ebx
pop edi
jmp 0x100ebe0a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1e0], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x100ebdf9
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
mov dword [eax], esi
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setge dl
add edx, dword [ebp - 0x24]
je 0x100ebe3e
mov eax, dword [ebp - 0x8c]
cmp dword [eax], ebx
mov eax, esi
jne 0x100ebe40
mov eax, ebx
mov ecx, dword [ebp - 0x1c]
xor edx, edx
imul ecx, eax
mov eax, 0xffff0008
sub eax, ecx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x8c]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne cl
sub eax, ecx
mov dword [ebp - 0x1dc], eax
mov dword [ebp - 0x14], ebx
jmp 0x100ebece
mov dword [ebp - 0x28], 0x82a7
mov dword [ebp - 0x24], 0xb5b0d69b
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov byte [ebp - 0x31], bl
cmp byte [ebp - 0x31], 0
je 0x100ebecb
push ebx
push esi
push 0x717
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff7
jl 0x100ebe9c
lea ecx, [ebp - 0x8c]
call fcn.100144eb
cmp dword [ebp - 0x38], esi
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x38], 0x5e3edfa8
mov dword [ebp - 0x30], 0x391cb4e7
sete byte [ebp - 0x31]
mov dword [ebp - 0x24], 0x5a9864ba
mov dword [ebp - 0x14], 0xade0980d
mov dword [ebp - 0x28], 0x5c1d1022
push 2
call fcn.10013ee8
mov dword [ebp - 4], edi
lea ecx, [ebp - 0xac]
mov dword [ebp - 0x1c], 0xca3691f6
mov dword [ebp - 0x2c], 0x32e26595
push esi
call fcn.10013ee8
mov byte [ebp - 4], 4
mov dword [ebp - 0x28], 0xcd85
mov dword [ebp - 0x20], ebx
jmp 0x100ebf56
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0xaf72b572
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100ebf43
mov dword [ebp - 0x20], ebx
jmp 0x100ebf71
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xac]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100ebf61
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov esi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ebfcb
push 0x7d0
push 0x1a45
push 0x1f12
push ebx
push 0x144f
push 0xe65
call esi
push eax
call edi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call esi
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov edx, dword [ebp - 0xa0]
xor esi, esi
mov eax, dword [ebp - 0x14]
inc esi
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax]
lea eax, [ecx + 1]
cmp eax, esi
ja 0x100ebff5
mov eax, ebx
test ecx, ecx
je 0x100ebff7
mov eax, esi
mov ecx, dword [ebp - 0x2c]
imul ecx, eax
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x2c]
cmp ecx, eax
mov ecx, esi
cmovge ecx, ebx
xor eax, eax
cmp ecx, 0x3b91
setg al
cmp eax, esi
jbe 0x100ec021
cmp dword [ebp - 0x14], ebx
je 0x100ec021
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
cmp dword [eax], ebx
je 0x100ec172
mov dword [ebp - 0x20], 0xce724d25
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0x15
je 0x100ec167
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x12c]
push 4
call fcn.10013ee8
mov byte [ebp - 4], 5
mov dword [ebp - 0x24], ebx
jmp 0x100ec076
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0x7874d2d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x100ec063
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], 0x1c
jne 0x100ec142
mov esi, dword [ebp - 0x12c]
mov dword [ebp - 0x38], esi
push 3
lea ecx, [ebp - 0x120]
call fcn.10013ee8
mov dword [ebp - 0x1c], ebx
jmp 0x100ec0b7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xeb613644
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100ec0a4
cmp dword [ebp - 0x20], ebx
jne 0x100ec0ca
mov dword [ebp - 0x1c], ebx
cmp dword [esi + 8], ebx
je 0x100ec0d1
mov dword [ebp - 0x1c], 1
mov esi, dword [esi + 8]
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x120]
sub esi, dword [edi + 8]
cmp ecx, eax
setl dl
sub esi, edx
sub esi, dword [ebp - 0x1c]
sub esi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
sub esi, 9
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp eax, esi
mov esi, dword [ebp - 0x38]
setg cl
sub ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, dword [esi + 8]
lea ecx, [ebp - 0x120]
setle al
mov dword [edi + 8], eax
call fcn.100144eb
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1c
je 0x100ec092
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 4
call fcn.100144eb
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x15
jne 0x100ec046
mov edi, dword [sym.imp.USER32.dll_GetDC]
xor esi, esi
inc esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
jmp 0x100ec20d
mov dword [ebp - 0x24], 0xfd11e6ac
mov eax, 0x9fb0e7fb
mov dword [ebp - 0x158], eax
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x100ec1d8
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
push 2
pop ecx
sub ecx, eax
jne 0x100ec1bd
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], 4
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], esi
dec dword [ebp - 0x1c]
jns 0x100ec19e
imul eax, dword [ebp - 0x24], 0xc6b9
test eax, eax
je 0x100ec1fb
cmp dword [edx + 4], ebx
jne 0x100ec1f7
cmp dword [ebp - 0x1c], ebx
jne 0x100ec1f7
mov eax, dword [ebp - 0xa0]
cmp dword [eax], ebx
je 0x100ec1fb
mov edx, esi
jmp 0x100ec1fd
mov edx, ebx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x154], ecx
lea ecx, [ebp - 0xac]
call fcn.100144eb
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], bl
call fcn.100144eb
cmp byte [ebp - 0x32], 0
jne 0x100ec232
cmp byte [ebp - 0x31], 0
je 0x100ec258
push 0x10
lea eax, [ebp - 0x4c]
push ebx
push eax
call fcn.10029225
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
push 0xf90b
push 0x80c7
call fcn.100290d8
pop ecx
pop ecx
call eax
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x2c], 0x5cc7
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x30], 0xdc4b
mov dword [ebp - 0x14], ebx
jmp 0x100ec28a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6c], 0x8bbca631
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100ec27c
mov dword [ebp - 0x20], ebx
jmp 0x100ec3b3
mov dword [ebp - 0x24], 0x94ff5452
mov dword [ebp - 0x1c], 0x3799040c
mov dword [ebp - 0x28], 0xde90
mov dword [ebp - 0x14], ebx
jmp 0x100ec2c3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100ec2b2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], eax
jge 0x100ec2f1
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp eax, esi
setge cl
neg ecx
je 0x100ec318
mov ecx, esi
cmp dword [ebp - 0x28], ebx
jne 0x100ec31a
mov ecx, ebx
mov eax, dword [ebp - 0x20]
cmp ecx, dword [ebp + eax*4 - 0x6c]
je 0x100ec32e
mov eax, dword [ebp - 0x20]
mov ecx, ebx
cmp dword [ebp + eax*4 - 0x6c], ebx
je 0x100ec330
mov ecx, esi
xor eax, eax
cmp ecx, 0xd3ed
setge al
cmp eax, 0x5ad058bb
jle 0x100ec349
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x1c], 0xfe64
mov ecx, dword [ebp - 0x20]
sub ecx, eax
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x2c]
jne 0x100ec38a
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec3b0
push ebx
push 0x1a9b
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
jmp 0x100ec3b0
mov dword [ebp - 0x1c], ebx
jmp 0x100ec3ab
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec39f
push ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1cc], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x100ec38f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x100ec298
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x209f
mov eax, dword [ebp - 0x58]
setl cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov dword [eax + 0x14], 7
mov dword [eax + 0x10], ebx
mov word [eax], cx
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xfc]
push 2
mov dword [ebp - 0x90], esi
call fcn.10013ee8
mov dword [ebp - 4], 6
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x30], 0x2c40a98c
mov dword [ebp - 0x14], ebx
jmp 0x100ec41d
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100ec40e
mov eax, dword [ebp - 0xfc]
push 0x18
mov dword [eax], ebx
pop eax
mov dword [ebp - 0x14], eax
jmp 0x100ec457
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec443
push ebx
call dword [sym.imp.USER32.dll_SetCursor]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec454
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1d
jg 0x100ec433
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], bl
call fcn.100144eb
cmp byte [ebp - 0x32], 0
mov ax, word [ebp - 0x44]
push 0x3b
movzx esi, ax
pop ecx
je 0x100ec49b
test ax, ax
je 0x100ec494
call fcn.10015ef6
movzx ecx, word [ebp - 0x44]
xor edx, edx
div ecx
mov esi, edx
jmp 0x100ec62f
mov esi, ebx
jmp 0x100ec62f
cmp byte [ebp - 0x31], 0
je 0x100ec579
movzx eax, word [ebp - 0x40]
add eax, 0xa
cmp eax, ecx
setg al
cmp word [ebp - 0x42], cx
je 0x100ec4ca
cmp word [ebp - 0x42], 0x3a
jne 0x100ec62f
test al, al
je 0x100ec62f
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x100ec4fc
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec4f3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 9
jne 0x100ec4dd
lea eax, [esi + 1]
push 0x18
cdq
pop ecx
idiv ecx
cmp word [ebp - 0x44], 0x17
mov esi, edx
jne 0x100ec62f
push 0x3c
pop eax
push 0x3b
pop edx
mov ecx, eax
xor eax, eax
cmp word [ebp - 0x42], dx
push 0x3c
cmove ecx, eax
movzx eax, word [ebp - 0x40]
sub ecx, eax
pop eax
add ecx, eax
imul eax, ecx, 0x3e8
push eax
push 0xf90b
push 0x1a0db
call fcn.100290d8
pop ecx
pop ecx
call eax
push 0x10
lea eax, [ebp - 0x4c]
push ebx
push eax
call fcn.10029225
add esp, 0xc
lea eax, [ebp - 0x4c]
push eax
push 0xf90b
push 0x80c7
call fcn.100290d8
pop ecx
pop ecx
call eax
jmp 0x100ec62f
mov dword [ebp - 0x2c], 0xe456
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x28], 0xbc7dcd66
mov dword [ebp - 0x24], ebx
push 3
call fcn.10013ee8
mov dword [ebp - 0x28], 0x198ab79a
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x100ec5bd
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0x167c28ca
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100ec5aa
cmp dword [ebp - 0x24], ebx
jne 0x100ec5d1
cmp dword [ebp - 0x2c], ebx
jne 0x100ec5d1
mov ecx, ebx
jmp 0x100ec5d4
xor ecx, ecx
inc ecx
xor eax, eax
mov dword [ebp - 0x28], 1
cmp ecx, 0xa9dade66
mov ecx, dword [ebp - 0x28]
push 0
setne al
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0xe4]
mov dword [eax + 4], ecx
pop eax
setne al
xor edx, edx
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
lea ecx, [ebp - 0xe4]
setle dl
mov dword [ebp - 0x30], edx
call fcn.100144eb
call fcn.10015ef6
mov esi, eax
and esi, 0xf
add esi, 7
mov dword [ebp - 0x14], 0xb743d837
mov eax, 0x643b8a2
mov dword [ebp - 0x28], 0xfa147b80
xor ecx, ecx
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x28], 0xfbe58499
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x148], 0x6088
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
sub eax, 0x279c
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
sets cl
mov dword [ebp - 0x28], ecx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
sub dword [ebp - 0x14], edx
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec6b6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
cmp esi, 0xa
jge 0x100ec8b9
mov dword [ebp - 0x28], 0x192fe2cc
mov dword [ebp - 0x20], ebx
jmp 0x100ec6d9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x54], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x100ec6cb
xor ecx, ecx
mov dword [ebp - 0x20], ebx
inc ecx
jmp 0x100ec6f8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x94], 0x3a50eb6b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100ec6e7
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x54], ebx
je 0x100ec7af
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x30], 0xfffffffd
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x54]
sub edx, eax
mov eax, dword [ebp - 0x54]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x14]
jl 0x100ec747
cmp dword [ebp - 0x14], ebx
je 0x100ec747
xor ecx, ecx
inc ecx
jmp 0x100ec749
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
push 0xfffffffffffffffe
pop eax
cmp eax, ecx
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x28]
cmp edx, 1
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x14]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xfffffffe
mov ecx, dword [ebp - 0x14]
setge al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x54]
neg ecx
sbb ecx, ecx
inc ecx
add edx, ecx
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
jmp 0x100ec894
mov dword [ebp - 0x2c], 5
mov eax, 0x505d01cd
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0xbe2ff5ff
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x7a2e255b
mov dword [ebp - 0x30], 0xa5c1b09c
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0xfbdedbec
mov dword [ebp - 0x30], 9
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x2c], ebx
jmp 0x100ec88b
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x198]
push 2
call fcn.10013ee8
push 2
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100ec833
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x198]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100ec823
xor ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
cmp dword [ebp - 0x1c], ebx
jl 0x100ec877
mov dword [ebp - 0x24], 0x638299fa
mov dword [ebp - 0x24], ebx
jmp 0x100ec86d
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100ec865
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x54], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100ec857
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x100ec84f
dec dword [ebp - 0x1c]
jns 0x100ec843
dec dword [ebp - 0x28]
lea ecx, [ebp - 0x198]
call fcn.100144eb
inc dword [ebp - 0x2c]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x2c], ecx
jle 0x100ec80b
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x54], eax
push 0x1ac0b
mov dword [ebp - 0x94], eax
call fcn.10019cfd
pop ecx
mov ecx, dword [ebp - 0x58]
movzx eax, ax
push eax
push 1
call fcn.10015e93
mov dword [ebp - 0x14], 3
mov dword [ebp - 0x28], 0x19ac196a
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x38], 0xfffffff9
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ec92d
push 0x7d0
push 0x1a45
push 0x1f12
push ebx
push 0x144f
push 0xe65
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
xor edx, edx
mov dword [ebp - 0x28], ebx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setg dl
xor eax, eax
add edx, dword [ebp - 0x14]
cmp edx, 0x4ad744d0
setl al
xor ecx, ecx
cmp eax, 0xb9a7
mov eax, dword [ebp - 0x28]
setne cl
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp eax, edx
mov edx, esi
setge cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x240]
call fcn.100706fe
mov esi, eax
push 0xb751
mov dword [ebp - 4], 7
call fcn.10019cfd
pop ecx
movzx ecx, ax
mov edx, esi
push ecx
lea ecx, [ebp - 0x1f8]
call fcn.10015e6d
pop ecx
push 0xffffffffffffffff
mov byte [ebp - 4], 8
mov edi, dword [ebp - 0x58]
mov ecx, edi
push ebx
push eax
call fcn.1002a04a
xor esi, esi
lea ecx, [ebp - 0x1f8]
push ebx
inc esi
push esi
call fcn.10014448
push ebx
push esi
lea ecx, [ebp - 0x240]
mov byte [ebp - 4], bl
call fcn.10014448
mov dword [ebp - 0x20], 0x5a136951
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100ec9fe
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0x8ec0ae97
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100ec9f0
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x100eca7c
mov dword [ebp - 0x28], 0xbf0ddd9c
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x100eca32
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x100eca32
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x100eca32
mov esi, ebx
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
push 1
setne cl
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
add eax, 9
add ecx, eax
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
mov dword [ebp + eax*4 - 0x3c], esi
neg ecx
mov eax, dword [ebp - 0x14]
imul eax, ecx
xor ecx, ecx
cmp esi, eax
pop esi
sete cl
mov dword [ebp - 0x14], ecx
dec dword [ebp - 0x20]
jns 0x100eca0b
cmp byte [ebp - 0x32], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
je 0x100ecaaf
cmp word [ebp - 0x44], 0
jne 0x100ecc18
cmp word [ebp - 0x42], 0
je 0x100ecaa8
call fcn.10015ef6
movzx ecx, word [ebp - 0x42]
jmp 0x100ecc20
mov esi, ebx
jmp 0x100ecc26
cmp byte [ebp - 0x31], 0
je 0x100ecb69
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x14], 0x644accb2
mov dword [ebp - 0x2c], 0x459eeda5
mov dword [ebp - 0x28], 0xca70051e
mov dword [ebp - 0x30], 0x926128f3
mov dword [ebp - 0x38], 0xa928f0bd
mov dword [ebp - 0x38], 0x29efec1a
cmp dword [ebp - 0x24], ebx
je 0x100ecb1d
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x14]
sub eax, 0x3a3dbc56
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x14]
je 0x100ecb14
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x28], ebx
jne 0x100ecb25
mov eax, dword [ebp - 0x28]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ecb46
push esi
push 0x85d
push 0x23a3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
movzx ecx, word [ebp - 0x40]
xor eax, eax
add ecx, 0xa
push 0x3b
pop edx
cmp ecx, edx
movzx ecx, word [ebp - 0x42]
push 0x3c
setg al
inc eax
add eax, ecx
cdq
pop ecx
idiv ecx
jmp 0x100ecc24
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x24], 9
jmp 0x100ecbfe
mov dword [ebp - 0x2c], 3
mov dword [ebp - 0x30], 0x409884cb
mov dword [ebp - 0x2c], 0xffffffe4
jmp 0x100ecbef
mov dword [ebp - 0x1c], 0x6182eac4
mov dword [ebp - 0x14], 0xfffffffc
mov dword [ebp - 0x28], 0x7516a205
mov dword [ebp - 0x1c], ebx
jmp 0x100ecbe6
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], 0x1a
jmp 0x100ecbdd
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ecbd4
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xfffffff4
je 0x100ecbc1
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffed
je 0x100ecba9
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x11
je 0x100ecb8f
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xd
je 0x100ecb78
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ecc18
push ebx
call dword [sym.imp.GDI32.dll_GetObjectType]
call fcn.10015ef6
push 0x3c
pop ecx
xor edx, edx
div ecx
mov esi, edx
cmp esi, 0xa
jge 0x100ecc43
push 0x1ac0b
call fcn.10019cfd
pop ecx
movzx eax, ax
mov ecx, edi
push eax
push 1
call fcn.10015e93
mov edx, esi
lea ecx, [ebp - 0x228]
call fcn.100706fe
mov esi, eax
push 0xb751
mov dword [ebp - 4], 9
call fcn.10019cfd
pop ecx
movzx ecx, ax
mov edx, esi
push ecx
lea ecx, [ebp - 0x210]
call fcn.10015e6d
pop ecx
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.1002a04a
xor esi, esi
lea ecx, [ebp - 0x210]
push ebx
inc esi
push esi
call fcn.10014448
push ebx
push esi
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], bl
call fcn.10014448
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x2c], 3
push 4
call fcn.10013ee8
push esi
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], 0xb
call fcn.10013ee8
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1c], ebx
jmp 0x100ecce7
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x164]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100eccd8
mov dword [ebp - 0x1c], ebx
jmp 0x100ecd01
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100eccf2
mov eax, dword [ebp - 0x20]
mov ecx, 0xe3cf9575
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, 0x39f7747
cmp ecx, eax
sbb eax, eax
neg eax
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
jne 0x100ecd34
mov ecx, ebx
cmp dword [ebp - 0x20], ebx
je 0x100ecd36
mov ecx, esi
mov eax, dword [ebp - 0x2c]
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfffffff0
cmp dword [ebp - 0x2c], 0xffffffef
jge 0x100ecf0c
mov edi, 0xffff
mov dword [ebp - 0x24], 0xfff6
lea ecx, [ebp - 0x1a8]
push esi
call fcn.10013ee8
mov byte [ebp - 4], 0xd
push 0xfffffffffffffffd
pop eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x14], ebx
jmp 0x100ecd9f
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], 0xe1c2a91
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100ecd8c
mov dword [ebp - 0x20], 0xffffffe2
jmp 0x100ecedd
mov dword [ebp - 0x14], 5
lea ecx, [ebp - 0x114]
push 4
call fcn.10013ee8
mov dword [ebp - 0x1c], ebx
jmp 0x100ecddc
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x100ecdc9
mov eax, dword [ebp - 0x20]
cmp edi, eax
sbb eax, eax
neg eax
cmp eax, edi
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setne dl
add edx, dword [ebp - 0x14]
neg edx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
sub eax, 8
inc edx
cmp eax, edx
je 0x100ece5d
mov dword [ebp - 0x24], ebx
jmp 0x100ece51
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ece3a
push 0x1e31
push 0x5c1
push 0xbfd
push 0xfa1
call dword [sym.imp.GDI32.dll_CreateRectRgn]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ece4e
push 0x206
call dword [sym.imp.USER32.dll_GetKeyboardLayout]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x100ece17
cmp dword [ebp - 0x14], ebx
je 0x100ecec7
jmp 0x100ececf
mov dword [ebp - 0x1c], 0x20be
xor edx, edx
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x28], 0xc894628a
mov dword [ebp - 0x1c], 0xbf7d
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setge dl
add edx, 0x7ba6da08
je 0x100ecea7
cmp dword [ebp - 0x14], 0xd983a5c2
sbb eax, eax
neg eax
cmp eax, dword [ebp - 0x14]
jl 0x100ecea7
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0xc0], ecx
mov eax, dword [ebp - 0x138]
dec dword [eax]
lea ecx, [ebp - 0x114]
call fcn.100144eb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x11
je 0x100ecdb0
mov dword [ebp - 0xc8], ebx
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0xc
call fcn.100144eb
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xffffffef
jl 0x100ecd55
mov edi, dword [ebp - 0x58]
lea ecx, [ebp - 0x138]
call fcn.100144eb
lea ecx, [ebp - 0x164]
mov byte [ebp - 4], bl
call fcn.100144eb
cmp byte [ebp - 0x32], 0
je 0x100ed04f
mov dword [ebp - 0x1c], ebx
jmp 0x100ecf42
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100ecf34
mov dword [ebp - 0x1c], ebx
jmp 0x100ecf5e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd8], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100ecf4d
mov dword [ebp - 0x60], 0xffffffe8
jmp 0x100ed021
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x28], 0x63090707
mov dword [ebp - 0x14], ebx
jmp 0x100ecf90
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x180], 0xfffffffd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x100ecf7f
mov eax, dword [ebp - 0x64]
xor edx, edx
mov ecx, dword [ebp - 0x60]
add eax, 0x53494abc
imul ecx, eax
mov eax, dword [ebp - 0x60]
mov esi, dword [ebp - 0x60]
cmp ecx, eax
mov eax, dword [ebp - 0x60]
setg dl
add esi, edx
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp esi, eax
mov eax, dword [ebp - 0x24]
sete cl
sub ecx, eax
cmp ecx, dword [ebp - 0x60]
jle 0x100ecfd0
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x17c]
neg edx
push 1
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
pop esi
setle cl
xor eax, eax
mov dword [ebp - 0x17c], ecx
cmp ecx, 0xd00
setle al
xor edx, edx
add eax, dword [ebp - 0x24]
neg eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x60]
cmp ecx, eax
setle dl
mov dword [ebp - 0xd4], edx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xd4], eax
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0xffffffee
jne 0x100ecf70
cmp word [ebp - 0x44], 0
jne 0x100ed0a9
cmp word [ebp - 0x42], 0
jne 0x100ed0a9
cmp word [ebp - 0x40], 0
je 0x100ed04b
call fcn.10015ef6
movzx ecx, word [ebp - 0x40]
jmp 0x100ed0b1
mov esi, ebx
jmp 0x100ed0b7
cmp byte [ebp - 0x31], 0
je 0x100ed059
mov esi, ebx
jmp 0x100ed0c0
push 0xfffffffffffffffe
mov dword [ebp - 0x24], 8
pop eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0xd04c
mov dword [ebp - 0x14], ebx
jmp 0x100ed080
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x80], 4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100ed072
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], 0x215e1abe
inc dword [ebp - 0x28]
mov dword [ebp - 0x80], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
call fcn.10015ef6
push 0x3c
pop ecx
xor edx, edx
div ecx
mov esi, edx
cmp esi, 0xa
jge 0x100ed218
mov dword [ebp - 0x28], 0xffff
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x14], 0xc67ee39f
mov dword [ebp - 0x2c], 0xdfddae97
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xff15cc7c
mov dword [ebp - 0x2c], ebx
push 3
call fcn.10013ee8
mov dword [ebp - 0x30], 0x2daffa89
mov dword [ebp - 0x38], 0x34d7
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x1c], ebx
jmp 0x100ed125
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], 0xe07ea4c5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x100ed117
mov dword [ebp - 0x1c], ebx
jmp 0x100ed143
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xf0]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x100ed130
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 2
sbb eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
imul ecx, eax
mov dword [ebp - 0x70], ecx
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x24]
cmp eax, 5
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, 0xa7fe
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xf0]
cmp dword [eax + 4], 1
mov eax, dword [ebp - 0x24]
setne cl
xor edx, edx
cmp ecx, 0xed0b
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x38]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100ed1f5
push ebx
push 0x1a9b
push ebx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
lea ecx, [ebp - 0xf0]
call fcn.100144eb
push 0x1ac0b
call fcn.10019cfd
pop ecx
movzx eax, ax
mov ecx, edi
push eax
push 1
call fcn.10015e93
mov edx, esi
lea ecx, [ebp - 0x258]
call fcn.100706fe
push 0xffffffffffffffff
push ebx
push eax
mov ecx, edi
mov dword [ebp - 4], 0xe
call fcn.1002a04a
xor esi, esi
lea ecx, [ebp - 0x258]
push ebx
inc esi
push esi
call fcn.10014448
mov dword [ebp - 0x20], 0xd4e793
mov dword [ebp - 0x14], ebx
jmp 0x100ed264
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd0], 0x102071b1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x100ed253
mov dword [ebp - 0x20], ebx
jmp 0x100ed2d0
mov dword [ebp - 0x28], 0x9be5411a
mov dword [ebp - 0x14], ebx
jmp 0x100ed288
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x19c], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100ed27b
mov eax, dword [ebp - 0x20]
sub eax, 4
imul eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x20]
jne 0x100ed29f
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, 0x859495e0
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
mov dword [ebp + eax*4 - 0xd0], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x100ed26f
mov ecx, dword [ebp - 0xc]
mov eax, edi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret