Function at 0x1001908b
Capabilities:
Get graphical window text
Terminate process

Disassembly:
mov eax, 0x10079efd
call fcn.100795c0
sub esp, 0x1b8
push ebx
push esi
push edi
mov dword [ebp - 0x14], 1
xor ebx, ebx
push 3
mov dword [ebp - 0x24], 0xfadacd7d
mov byte [ebp - 0x29], cl
mov dword [ebp - 0x18], ebx
pop edi
jmp 0x100190c6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x16c], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100190b9
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xffffffec
push 9
pop esi
jle 0x1001919f
mov dword [ebp - 0x28], 1
lea ecx, [ebp - 0x13c]
push edi
call fcn.10016f3c
mov dword [ebp - 0x18], ebx
jmp 0x10019103
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x13c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100190f3
cmp dword [ebp - 0x14], ebx
jne 0x10019138
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, esi
mov eax, dword [ebp - 0x28]
setne cl
xor edx, edx
cmp ecx, eax
setg dl
mov dword [ebp - 0x168], edx
mov eax, dword [ebp - 0x28]
imul eax, edx
test eax, eax
jne 0x10019138
mov ecx, ebx
jmp 0x1001913b
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x24]
sub ecx, eax
sub ecx, dword [ebp - 0x28]
je 0x10019148
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x14]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x164]
cmp eax, 0x59229a27
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
push 8
setne dl
mov dword [ebp - 0x34], edx
xor edx, edx
pop ecx
sub ecx, eax
mov eax, dword [ebp - 0x13c]
cmp ecx, dword [ebp - 0x34]
lea ecx, [ebp - 0x13c]
setne dl
mov dword [eax + 8], edx
call fcn.1001783e
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffec
jg 0x100190db
mov cl, byte [ebp - 0x29]
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], bl
je 0x100191b2
push 0x1867
call dword [sym.imp.KERNEL32.dll_ExitProcess]
test cl, cl
je 0x1001941e
mov dword [ebp - 0x20], 0xffffffff
mov eax, 0x1f6f0842
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0xa
jmp 0x1001921b
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], bl
je 0x10019218
push ebx
push ebx
call dword [sym.imp.GDI32.dll_CopyEnhMetaFileA]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x11
jne 0x10019208
mov byte [ebp - 0x19], bl
lea ecx, [ebp - 0x80]
push 4
call fcn.10016f3c
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x24], 0x796840eb
push edi
call fcn.10016f3c
mov byte [ebp - 4], 1
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], 0x9c5c935c
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x1001927c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x80]
mov dword [eax + ecx*4], 0x4f147909
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1001926c
mov dword [ebp - 0x14], ebx
jmp 0x10019296
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019287
mov dword [ebp - 0x24], 0xba31e468
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x80]
push 0
mov edx, dword [eax]
lea eax, [edx - 0x75fe6ce0]
cmp eax, 0x66b7a7b
setle cl
xor eax, eax
cmp ecx, edx
mov edx, 0xffff
setg al
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x80]
mov ecx, dword [eax + 0xc]
imul eax, dword [eax + 4], 0xffff
sub edx, eax
sub edx, ecx
neg edx
sbb edx, edx
inc edx
sub edx, ecx
mov ecx, dword [ebp - 0x160]
mov dword [ecx + 8], edx
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
mov esi, dword [ebp - 0x80]
xor eax, eax
mov edx, dword [esi]
cmp edx, dword [ecx + 8]
setg al
xor ecx, ecx
cmp eax, 0xffffffff
setne cl
imul ecx, edx
mov edx, dword [esi]
mov dword [ebp - 0x18], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp eax, edx
mov eax, dword [ebp - 0x80]
setl cl
cmp ecx, edx
pop ecx
setne cl
sub ecx, dword [eax + 8]
inc ecx
je 0x100193c4
push 2
pop esi
mov dword [ebp - 0x28], 0x19c36c1
lea ecx, [ebp - 0x124]
push esi
call fcn.10016f3c
mov dword [ebp - 0x18], ebx
jmp 0x1001935d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x124]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001934d
mov byte [ebp - 0x29], bl
cmp byte [ebp - 0x29], 0
je 0x10019378
push 0x145b
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub ecx, 0x13297949
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setl bl
xor edx, edx
cmp eax, 0x6d23205e
mov eax, dword [ebp - 0x34]
setg dl
xor ecx, ecx
sub edx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x124]
setge cl
mov dword [eax], ecx
lea ecx, [ebp - 0x124]
call fcn.1001783e
jmp 0x100193fc
mov dword [ebp - 0x30], 0x78a4911c
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0xbf2a6bc6
mov dword [ebp - 0x24], 4
mov dword [ebp - 0x18], ebx
jmp 0x100193f3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x5c], 0x6ab81d4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100193e5
dec dword [ebp - 0x24]
lea ecx, [ebp - 0x160]
call fcn.1001783e
lea ecx, [ebp - 0x80]
call fcn.1001783e
cmp byte [ebp - 0x19], 0
je 0x1001a217
jmp 0x100191a7
push 2
mov dword [ebp - 0x34], 0x7b1891f7
mov dword [ebp - 0x18], ebx
pop esi
jmp 0x1001943b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x58], 0x24a8c6a5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001942d
mov dword [ebp - 0x58], ebx
jmp 0x10019469
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x10019461
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndPage]
cmp dword [ebp - 0x34], ebx
jne 0x1001946f
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 0x1b
jg 0x10019445
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x74]
push dword [ebp - 0x5c]
movdqa xmm0, xmmword [0x10007a10]
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x190]
mov dword [ebp - 0x74], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
call fcn.100186bb
mov dword [ebp - 4], esi
lea ecx, [ebp - 0xa8]
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x38], 0x9dcee34e
push edi
call fcn.10016f3c
mov dword [ebp - 0x18], ebx
jmp 0x100194e0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0x713e19f2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100194cd
mov edx, dword [ebp - 0x74]
mov edi, dword [ebp - 0xa8]
inc dword [edx + 0xc]
inc dword [edi + 8]
mov eax, dword [edi + 8]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 1
setge al
xor ecx, ecx
cmp eax, 0x56974edf
setle cl
imul ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
sub ecx, dword [edx + 0xc]
add eax, ecx
je 0x10019534
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x24], 1
cmp dword [eax], ebx
jne 0x10019537
mov dword [ebp - 0x24], ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp dword [ebp - 0x24], eax
setg cl
imul eax, ecx, 0xffff66ad
neg eax
sbb eax, eax
neg eax
imul eax, dword [ebp - 0x34]
test eax, eax
je 0x10019633
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], 0x8ef544bd
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x28], 0x376e30f4
cmp dword [ebp - 0x18], ebx
je 0x1001957f
cmp dword [edx + 0xc], ebx
jne 0x10019581
mov eax, ebx
xor ecx, ecx
cmp eax, dword [edi + 8]
mov eax, dword [ebp - 0x38]
sete cl
add eax, 0x4fe1
add eax, ecx
cmp eax, dword [ebp - 0x18]
jg 0x100195a3
mov eax, dword [ebp - 0x74]
cmp dword [eax], ebx
jne 0x100195a3
mov eax, ebx
jmp 0x100195a6
xor eax, eax
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x74]
mov eax, dword [eax + 8]
add eax, 0x5169ff4c
cmp eax, dword [ebp - 0x18]
jl 0x100195f1
mov dword [ebp - 0x28], ebx
jmp 0x100195e9
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100195e6
push 0x34b
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jle 0x100195ca
jmp 0x10019626
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019601
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x14], ebx
jmp 0x10019620
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001961d
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x19
jle 0x10019606
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
mov dword [ebp - 0x14], ecx
jmp 0x10019640
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x34], 0x8a3e09e1
mov dword [ebp - 0x34], eax
lea ecx, [ebp - 0xa8]
call fcn.1001783e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x74]
call fcn.1001783e
mov dword [ebp - 0x28], 7
lea ecx, [ebp - 0xcc]
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x24], 0x3dc99cdf
push esi
call fcn.10016f3c
push 3
pop edi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x154]
mov dword [ebp - 0x18], 0xe936be85
mov dword [ebp - 0x38], 0xfffffff8
push 1
call fcn.10016f3c
mov dword [ebp - 0x14], ebx
jmp 0x100196b1
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001969e
mov dword [ebp - 0x14], ebx
jmp 0x100196ce
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x154]
mov dword [eax + ecx*4], 0xfffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100196bb
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x24], ebx
je 0x100196ec
mov eax, dword [ebp - 0xcc]
cmp dword [eax + 4], ebx
je 0x100196ec
xor eax, eax
inc eax
jmp 0x100196ee
mov eax, ebx
mov ecx, 0xb4f5ac3d
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], 8
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x154]
cmp dword [edx + 4], 0xfffffff8
setne cl
mov dword [eax], ecx
cmp dword [ebp - 0x24], ebx
je 0x10019748
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x38]
xor eax, eax
lea ecx, [ebp - 0x154]
cmp dword [edx + 4], ebx
sete al
mov dword [ebp - 0x14], eax
call fcn.1001783e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.1001783e
push dword [ebp - 0x5c]
movdqa xmm0, xmmword [0x10007a80]
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0xf0], ebx
push eax
push ebx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xec], ebx
movdqu xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0xe8], ebx
call fcn.100186bb
mov dword [ebp - 4], 4
mov dword [ebp - 0x14], 0xdf75dcec
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x30], 0xfffffff8
mov dword [ebp - 0x18], ebx
jmp 0x100197de
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x174], 0xd7d7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100197cd
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], edi
jg 0x1001983c
mov ebx, 0xffff
mov dword [ebp - 0x24], 0xe1d11023
xor edx, edx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
inc edx
cmp ebx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
setl cl
mov dword [ebp - 0x170], ecx
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x100197f0
xor ebx, ebx
mov dword [ebp - 0x24], 1
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x20], 0x2b165808
mov dword [ebp - 0x14], 0xdc41fd9d
push 4
call fcn.10016f3c
mov byte [ebp - 4], 5
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x34], 0x5d1cc0c7
mov dword [ebp - 0x18], ebx
jmp 0x10019885
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xe4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10019875
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], 0xf792
cmp dword [ebp - 0x14], ebx
je 0x100198ac
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14], ebx
je 0x100198bc
xor edx, edx
inc edx
jmp 0x100198be
mov edx, ebx
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp edx, eax
setl cl
sub ecx, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], ebx
jl 0x100199bb
mov dword [ebp - 0x24], 0x105807c1
lea ecx, [ebp - 0xc0]
push edi
call fcn.10016f3c
mov dword [ebp - 0x18], ebx
jmp 0x1001990a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x100198f7
cmp dword [ebp - 0x20], ebx
jne 0x10019927
mov dword [ebp - 0x24], 0x85d06f62
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x14]
je 0x10019927
mov edx, ebx
jmp 0x1001992a
xor edx, edx
inc edx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe4]
inc ecx
mov eax, dword [eax + edx*4]
add eax, ecx
xor ecx, ecx
cmp eax, 0xfffffffa
setg cl
xor eax, eax
cmp ecx, 0xa260df39
setne al
mov dword [ebp - 0x24], eax
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x24]
cmp dword [ecx + edx*4], eax
je 0x10019979
cmp dword [ebp - 0x24], ebx
jne 0x10019979
mov edi, ebx
jmp 0x1001997c
xor edi, edi
inc edi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov edx, dword [ebp - 0xc0]
cmp edi, eax
sete cl
xor eax, eax
cmp ecx, 0x4763
setg al
xor ecx, ecx
cmp eax, dword [edx + 4]
setge cl
mov dword [edx + 4], ecx
test ecx, ecx
lea ecx, [ebp - 0xc0]
call fcn.1001783e
dec dword [ebp - 0x14]
push 3
pop edi
jns 0x100198df
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 4
call fcn.1001783e
mov dword [ebp - 0x30], 0xbf25cbd9
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0x7b09f595
mov dword [ebp - 0x14], ebx
jmp 0x100199ee
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x40], 0x4fd3df75
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100199e0
mov dword [ebp - 0x14], ebx
jmp 0x10019a0a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1c0], 0x3f36fc75
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100199f9
mov dword [ebp - 0x40], ebx
jmp 0x10019b31
push esi
lea ecx, [ebp - 0xb4]
call fcn.10016f3c
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x10c]
mov dword [ebp - 0x28], 0xffffffff
push 1
call fcn.10016f3c
mov dword [ebp - 0x20], ebx
jmp 0x10019a51
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10019a41
xor edx, edx
mov dword [ebp - 0x20], ebx
inc edx
jmp 0x10019a6c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10019a5e
mov dword [ebp - 0x20], ebx
jmp 0x10019a85
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10019a76
mov ecx, dword [ebp - 0xb4]
xor edx, edx
mov eax, dword [ebp - 0x40]
cmp eax, dword [ecx + 4]
setl dl
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x28], 1
cmp dword [ebp - 0x28], ebx
jl 0x10019b14
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x24], ebx
inc dword [eax]
jne 0x10019ae2
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
je 0x10019ac4
xor ecx, ecx
inc ecx
jmp 0x10019ac6
mov ecx, ebx
xor eax, eax
cmp ecx, 0x4020
setl al
neg eax
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xb4]
mov edx, dword [ebp - 0x24]
sub edx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x50]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, edx, 0xce3f
cmp edx, eax
setne cl
mov dword [ebp - 0x50], ecx
dec dword [ebp - 0x28]
jns 0x10019aaa
lea ecx, [ebp - 0x10c]
call fcn.1001783e
lea ecx, [ebp - 0xb4]
mov byte [ebp - 4], 4
call fcn.1001783e
dec dword [ebp - 0x40]
cmp dword [ebp - 0x40], 0xffffffe3
jle 0x10019a18
mov dword [ebp - 0x30], 0xf1813f1a
mov dword [ebp - 0x20], 0xcd453606
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x14], ebx
jmp 0x10019b6a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019b5c
mov dword [ebp - 0x14], ebx
jmp 0x10019b85
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x118], 0xae446f94
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019b74
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x10019cf9
mov dword [ebp - 0x28], 0x98311173
mov dword [ebp - 0x28], ebx
jmp 0x10019ce0
mov dword [ebp - 0x38], esi
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x3c], 0xb0121307
push 4
call fcn.10016f3c
mov dword [ebp - 0x30], 5
mov dword [ebp - 0x14], ebx
jmp 0x10019bdb
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10019bc8
dec dword [ebp - 0x38]
mov dword [ebp - 0x38], ebx
jmp 0x10019cc9
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0x14], ebx
jl 0x10019cc6
mov eax, 0xffff
mov dword [ebp - 0x24], 0x3ffaf072
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x10019cbd
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019c3e
push ebx
push 0x212e
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetTimer]
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 0x3c], 1
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x4c]
setg dl
imul ecx, edx, 0xffff
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp edx, 0xffffffff
setne cl
add eax, ecx
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x24]
jns 0x10019c21
mov eax, 0xffff
dec dword [ebp - 0x14]
jns 0x10019c0b
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], esi
jle 0x10019bec
lea ecx, [ebp - 0x180]
call fcn.1001783e
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jle 0x10019ba5
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x4c]
dec dword [ebp - 0x20]
jns 0x10019b96
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x48], ebx
jne 0x10019d46
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov eax, dword [ebp - 0x110]
cmp eax, 0xb8378c3a
mov eax, dword [ebp - 0x18]
setne cl
add eax, ecx
cmp eax, dword [ebp - 0x18]
jle 0x10019d30
cmp dword [ebp - 0x48], ebx
je 0x10019d30
cmp dword [ebp - 0x110], ebx
je 0x10019d30
xor ecx, ecx
inc ecx
jmp 0x10019d32
mov ecx, ebx
mov dword [ebp - 0x20], 0xbdd2
neg ecx
mov eax, dword [ebp - 0x20]
cmp eax, ecx
jle 0x10019d46
mov ecx, ebx
jmp 0x10019d49
xor ecx, ecx
inc ecx
mov dword [ebp - 0x118], ecx
xor edx, edx
mov eax, dword [ebp - 0x44]
cmp eax, ecx
mov eax, dword [ebp - 0x4c]
setg dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x18]
setge cl
add edx, ecx
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x48]
setne cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
sub edx, eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xb2006887
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x14], 0xffffffe3
jmp 0x10019e32
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x38], 0xfffffff0
jmp 0x10019e29
mov dword [ebp - 0x28], 0xffffffff
lea ecx, [ebp - 0x130]
push 4
call fcn.10016f3c
push 4
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10019de5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0x365653d4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10019dd2
mov dword [ebp - 0x28], ebx
jmp 0x10019e16
mov dword [ebp - 0x18], 0x55cc25b
mov dword [ebp - 0x18], ebx
jmp 0x10019e0e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x130]
mov dword [eax + ecx*4], 0x88eb9876
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10019dfb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jge 0x10019def
lea ecx, [ebp - 0x130]
call fcn.1001783e
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffff2
jge 0x10019db6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x13
jl 0x10019da6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019e5e
push ebx
push ebx
push 0x1002
push 0x1d33
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
mov dword [ebp - 0x30], 0x15aa961
mov dword [ebp - 0x20], 0x643cdf98
mov dword [ebp - 0x24], 0x59ec1348
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x1993e367
mov dword [ebp - 0x34], 0x6842a457
mov dword [ebp - 0x34], 0xfc58ac37
mov dword [ebp - 0x18], ebx
jmp 0x10019eb3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68], 0xc93b4e1a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10019ea5
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x10019ffb
mov dword [ebp - 0x18], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x14], 0xfffffff9
mov dword [ebp - 0x3c], 0x5c2da50e
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x3c], 0x9369e1d6
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, 1
sete cl
imul ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x68]
sub eax, ecx
mov ecx, 0xe00457a2
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
cmp eax, 7
setg cl
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
jne 0x10019f77
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x68]
cmp eax, 0xffffffff
setg cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp eax, 8
setg cl
cmp edx, ecx
jg 0x10019fd0
mov dword [ebp - 0x14], ebx
jmp 0x10019fc8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10019fc5
push ebx
push 0x1425
push ebx
push 0x772
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xc
jl 0x10019faa
jmp 0x10019ff2
mov dword [ebp - 0x3c], 0x75d1
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x3c], 0xffffffff
inc dword [ebp - 0x34]
dec dword [ebp - 0x20]
jns 0x10019ec4
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x28], ebx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a011
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x28], edi
jmp 0x1001a083
push dword [ebp - 0x5c]
movdqa xmm0, xmmword [0x10007a50]
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x1a0]
mov dword [ebp - 0x8c], ebx
push eax
push ebx
lea ecx, [ebp - 0x8c]
mov dword [ebp - 0x88], ebx
movdqu xmmword [ebp - 0x1a0], xmm0
mov dword [ebp - 0x84], ebx
call fcn.100186bb
mov ecx, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x8c]
setl cl
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x8c]
call fcn.1001783e
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x30], ebx
jl 0x1001a016
mov dword [ebp - 0x18], ebx
jmp 0x1001a0a2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x100], 0xc85f70ad
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001a091
mov dword [ebp - 0xf8], 0x18
jmp 0x1001a0ca
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1001a0c4
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
dec dword [ebp - 0xf8]
cmp dword [ebp - 0xf8], 9
jle 0x1001a0b4
mov dword [ebp - 0x30], 0xd82c32b9
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x30], 0xffffffff
push esi
call fcn.10016f3c
mov dword [ebp - 0x24], 0x21dfe4b2
mov dword [ebp - 0x18], 0x64d9248e
mov dword [ebp - 0x18], ebx
jmp 0x1001a113
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xfffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001a100
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x24], eax
mov eax, dword [ecx]
add eax, dword [ecx + 4]
cmp eax, 7
sbb eax, eax
neg eax
cmp dword [ebp - 0x24], eax
jg 0x1001a13f
cmp dword [ecx + 4], ebx
je 0x1001a13f
xor ecx, ecx
inc ecx
jmp 0x1001a141
mov ecx, ebx
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
add eax, 0xac2d51bb
add eax, ecx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff0
jne 0x1001a197
mov ebx, 0xffff
mov dword [ebp - 0x30], 0xa9c1c73b
mov edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
neg edx
cmp ebx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 1
setl al
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff0
je 0x1001a161
xor ebx, ebx
lea ecx, [ebp - 0xd8]
call fcn.1001783e
mov dword [ebp - 0x30], 0x378f1e0c
lea ecx, [ebp - 0x148]
push 4
call fcn.10016f3c
mov dword [ebp - 0x18], ebx
jmp 0x1001a1ca
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x148]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001a1bb
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x1001a201
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], 0x946507e6
mov dword [ebp - 0x30], 0xe66c619a
dec dword [eax]
mov dword [ebp - 0x30], 0xa4df6f97
dec dword [ebp - 0x24]
jns 0x1001a1d8
lea ecx, [ebp - 0x148]
call fcn.1001783e
lea ecx, [ebp - 0xf0]
call fcn.1001783e
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret