Function at 0x1001f13e
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x25c
push ebx
xor ebx, ebx
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x48], ecx
cmp dword [ecx + 0x10], ebx
jne 0x1001f15c
xor al, al
jmp 0x10020cdc
push edi
push 2
mov dword [ebp - 0xc], 0xa439beb0
mov dword [ebp - 0x10], ebx
pop edi
jmp 0x1001f17d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x84], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001f16c
push esi
xor esi, esi
mov dword [ebp - 0x10], ebx
inc esi
jmp 0x1001f199
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x5c], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001f18b
mov dword [ebp - 0x10], ebx
jmp 0x1001f1b4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf0], 0x627
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001f1a3
mov dword [ebp - 0xc], esi
mov ecx, 0xfff8
cmp dword [ebp - 0xc], ebx
jl 0x1001f29e
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], esi
jg 0x1001f1f9
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x1001f1ec
push ebx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1001f1dc
mov ecx, 0xfff8
mov eax, dword [ebp - 0x80]
neg eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x80], eax
jg 0x1001f20c
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x5c]
push 0
setge dl
xor ecx, ecx
cmp edx, 0x4ca7
setne cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov ecx, 0xb11f3813
setle dl
cmp edx, 0xfffffffa
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
xor ebx, ebx
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setl bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x84]
cmp ebx, eax
mov eax, dword [ebp - 0x84]
setle dl
xor ecx, ecx
cmp edx, eax
pop ebx
setle cl
xor eax, eax
cmp ecx, 0xc7c4
mov ecx, 0xfff8
setg al
mov dword [ebp - 0x24], eax
dec dword [ebp - 0xc]
jns 0x1001f1ca
mov ecx, dword [ebp - 0xf0]
xor edx, edx
mov eax, dword [ebp - 0x5c]
cmp eax, ecx
setge dl
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0xc], 0x210b999f
mov dword [ebp - 8], 0xeb5ea28c
mov dword [ebp - 0x14], ebx
jmp 0x1001f2dc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xec], 0x4f32b7b8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001f2cb
push 3
mov dword [ebp - 0x14], ebx
pop esi
jmp 0x1001f2f6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x118], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001f2e9
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle bl
sub ebx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
neg ebx
sbb ebx, ebx
xor edx, edx
inc ebx
cmp eax, ebx
mov eax, dword [ebp - 0xc]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x6038
setne al
xor edx, edx
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
cmp ecx, eax
setge dl
xor eax, eax
add edx, dword [ebp - 8]
cmp edx, 6
setl al
cmp eax, 0xfffffffc
sbb eax, eax
xor ebx, ebx
inc eax
inc ebx
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x110]
inc eax
xor edx, edx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x1c], 0x647c2c9e
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x10], 0xffffffea
cmp dword [ebp - 0x10], 4
jle 0x1001f49f
mov dword [ebp - 0xc], 0x6542
mov dword [ebp - 8], edi
mov dword [ebp - 0x18], edx
jmp 0x1001f3c5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0xd9a2b82c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1001f3b7
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xc], edx
je 0x1001f40c
mov eax, dword [ebp - 0x10]
xor edx, edx
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0x2bdb979c
mov eax, dword [ebp - 0xc]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x54], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x10]
cmp eax, 6
mov eax, ebx
setg cl
xor edx, edx
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], edx
jne 0x1001f40e
mov eax, edx
add eax, 0x859b
cmp eax, dword [ebp - 0x10]
jl 0x1001f466
mov dword [ebp - 0x18], 0xd35da2a
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x18], edx
jne 0x1001f45a
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [ebp - 0x54], ecx
mov eax, dword [ebp - 0xc]
imul eax, ecx
sub eax, dword [ebp - 0x10]
je 0x1001f448
mov ecx, ebx
cmp dword [ebp - 0x18], edx
jne 0x1001f44a
mov ecx, edx
mov eax, dword [ebp - 8]
imul eax, ecx
test eax, eax
je 0x1001f457
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], 0x2cb9
jmp 0x1001f497
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x24], 0x13309e69
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x10]
jmp 0x1001f39e
push 5
mov dword [ebp - 0x1c], edx
pop eax
cmp dword [ebp - 0x1c], eax
jl 0x1001f57f
mov dword [ebp - 8], 0xebdc590c
mov dword [ebp - 0x24], 0xfffffffe
cmp dword [ebp - 0x1c], edx
je 0x1001f566
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x28], 0xfffffffb
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], esi
jge 0x1001f4f0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x20c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1001f4d7
push 5
pop eax
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], 8
jl 0x1001f570
mov dword [ebp - 0x18], 0x6574f20
xor edx, edx
mov dword [ebp - 0x28], 0xbecd
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge bl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, ebx
setge cl
xor eax, eax
add ecx, dword [ebp - 0x30]
cmp ecx, 0xffffffff
setg al
sub eax, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 8
jge 0x1001f4f9
push 5
xor edx, edx
pop eax
jmp 0x1001f570
cmp dword [ebp - 8], edx
jne 0x1001f57c
cmp dword [ebp - 0x38], edx
jne 0x1001f57c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jge 0x1001f4ae
xor ebx, ebx
inc ebx
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x14], edx
jmp 0x1001f594
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x18c], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1001f587
mov dword [ebp - 0x14], edx
jmp 0x1001f5af
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x200], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001f59e
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001f5d4
push edx
push edx
call edi
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogIndirectParamA]
xor edx, edx
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x18], 0x860b4ffb
mov dword [ebp - 0x18], edx
jmp 0x1001f5ff
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1001f5f2
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001f619
push edx
call edi
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
xor edx, edx
mov dword [ebp - 0x18], edx
jmp 0x1001f639
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001f636
push ebx
push 0x2031
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
xor edx, edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1001f61e
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], 0x99d012cd
mov dword [ebp - 0x18], edx
jmp 0x1001f662
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1001f654
mov dword [ebp - 0x14], 0x42a1
mov dword [ebp - 0x18], 0x8ef6b8f
mov dword [ebp - 0x34], 0x588c5561
mov dword [ebp - 0x10], 0x283d1f0d
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xc], 0xd9a54e58
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
mov dword [ebp - 0x18], edx
jmp 0x1001f6bb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x74], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1001f6ad
mov eax, dword [ebp - 0x14]
sub eax, 0x14f4e797
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp dword [ebp - 0x14], eax
jl 0x1001f6de
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x34], 0xecb3
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
neg eax
sub eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14], 0xfe77
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setne dl
mov dword [ebp - 0x1c], edx
xor edx, edx
cmp dword [ebp - 0x1c], edx
jne 0x1001f730
mov eax, edx
cmp dword [ebp - 0x34], edx
je 0x1001f732
mov eax, ebx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], esi
jg 0x1001f96a
mov dword [ebp - 8], 0x30b56bf5
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x68c3b083
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x38], 0xecc15c48
mov dword [ebp - 0x1c], edx
jmp 0x1001f778
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x238], 0xddb7baf6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001f767
mov dword [ebp - 0x1c], edx
jmp 0x1001f793
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1b0], 9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001f782
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x74]
mov eax, dword [ebp - 0x10]
add ecx, dword [ebp + eax*4 - 0x74]
imul ecx, dword [ebp - 0x34]
cmp ecx, dword [ebp - 0x18]
je 0x1001f8b4
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], 0x2a
jne 0x1001f8e9
mov ebx, 0xffff
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], edx
jmp 0x1001f825
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1e8], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001f814
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x10]
test eax, eax
mov eax, dword [ebp - 0x24]
setns dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x24]
jge 0x1001f84c
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x10]
push 0
mov eax, dword [ebp + eax*4 - 0x74]
test eax, eax
mov eax, dword [ebp - 0x10]
setne cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x74]
cmp ecx, eax
sete dl
xor ecx, ecx
mov dword [ebp - 0x1e8], edx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x74]
cmp eax, edx
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x30]
setge cl
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
pop edx
setl cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x2a
je 0x1001f80c
xor ebx, ebx
inc ebx
jmp 0x1001f8e9
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001f8d0
push 0x16dc
push 0x781
push edx
call dword [sym.imp.USER32.dll_RemoveMenu]
xor edx, edx
mov dword [ebp - 0xc], edx
jmp 0x1001f8e3
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x74], 0x8453370c
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x1001f8d5
cmp dword [ebp - 0x30], edx
jne 0x1001f900
mov eax, dword [ebp - 0x38]
mov ecx, edx
mov dword [ebp - 0x1ac], eax
inc dword [ebp - 0x38]
test eax, eax
je 0x1001f902
mov ecx, ebx
xor eax, eax
cmp ecx, 0xf3aa
setg al
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], edx
je 0x1001f943
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1c], 0xae0adfba
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x1c], eax
jl 0x1001f93a
mov eax, edx
cmp dword [ebp - 0x2c], edx
je 0x1001f93c
mov eax, ebx
cmp eax, dword [ebp - 0x14]
je 0x1001f943
mov edx, ebx
mov eax, dword [ebp - 0x10]
xor ecx, ecx
push 0
mov eax, dword [ebp + eax*4 - 0x74]
cmp edx, eax
mov eax, dword [ebp - 0x10]
setl cl
pop edx
sub ecx, dword [ebp + eax*4 - 0x74]
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jle 0x1001f741
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x10], edx
jl 0x1001fe56
mov dword [ebp - 0x14], 0x68206240
push 5
pop ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xc6d0f065
mov dword [ebp - 0x2c], 0xab6ce1a8
mov dword [ebp - 0x2c], 0xd9c7279c
mov dword [ebp - 8], edx
jmp 0x1001f9b2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x7c], 0xc1de6fc6
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x1001f9a4
mov dword [ebp - 0x14], 0x1b
jmp 0x1001f9eb
mov dword [ebp - 8], 0xa296
mov dword [ebp - 0x2c], 0xb6fe6d39
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
je 0x1001f9e2
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x15
je 0x1001f9c0
mov dword [ebp - 0xc], edx
jmp 0x1001fa8e
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], edx
jl 0x1001fa73
mov dword [ebp - 0x34], 0xe9ab5c29
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 8], edx
jmp 0x1001fa2c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1a8], 0xcd95
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001fa1b
mov dword [ebp - 0x34], edx
jmp 0x1001fa63
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, 0xd979
setg cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], edx
jmp 0x1001fa5b
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x7c], edx
jne 0x1001fa60
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1001fa4f
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], edx
jle 0x1001fa36
inc dword [ebp - 0x1a0]
dec dword [ebp - 0x14]
jns 0x1001fa08
mov dword [ebp - 0x18], edx
jmp 0x1001fa86
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1001fa78
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xb
jne 0x1001f9f9
mov dword [ebp - 0x24], 0x22ba7b7e
mov dword [ebp - 0x18], 0xfffb
push 5
pop eax
mov dword [ebp - 8], eax
mov dword [ebp - 0x34], 0x42374b1b
mov dword [ebp - 0x30], 0x974edf0e
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 8], edx
jmp 0x1001fad7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x178], 0xfffffff8
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001fac6
mov esi, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0x174], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
cmp eax, 0xcd50
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x18]
sub esi, edx
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x174]
je 0x1001fb63
mov eax, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 8], eax
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setl cl
add eax, ecx
mov dword [ebp - 0x174], eax
je 0x1001fb58
cmp dword [ebp - 8], 0
je 0x1001fb58
mov eax, ebx
jmp 0x1001fb5a
xor eax, eax
cmp eax, dword [ebp - 0x34]
jl 0x1001fb63
mov eax, ebx
jmp 0x1001fb65
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], 0x331c587c
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], 0x98311173
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x38], 0x2c9d
mov dword [ebp - 0xc], 0
jmp 0x1001fba4
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x104], 0xc56d20a2
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x1001fb93
push 3
mov dword [ebp - 0xc], 0
pop esi
jmp 0x1001fbc7
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x148], 0
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001fbb6
mov dword [ebp - 0x14], 9
jmp 0x1001fcb0
mov dword [ebp - 8], 0xd3f7bf4
mov dword [ebp - 0x2c], 0x18f8
mov dword [ebp - 0x44], 0xfffffff6
mov dword [ebp - 0xc], 0
jmp 0x1001fc04
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x50], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jl 0x1001fbf6
mov dword [ebp - 0xc], 0
jmp 0x1001fc23
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x130], 0x29a2
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001fc12
mov dword [ebp - 8], 0x26d2
xor ecx, ecx
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x12c]
cmp ecx, eax
setle dl
mov dword [ebp - 0x104], edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x12c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
mov dword [ebp - 0x50], ecx
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
cmp eax, 0x4ccc
setne cl
cmp ecx, 6
jbe 0x1001fca3
cmp dword [ebp - 0x14], 0
jne 0x1001fca3
xor eax, eax
jmp 0x1001fca5
mov eax, ebx
add eax, 0xffffec4e
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x13
jge 0x1001fbd8
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xfc], 0
jne 0x1001fcd0
cmp dword [ebp - 0x30], 0
jne 0x1001fcd0
xor edx, edx
jmp 0x1001fcdc
mov dword [ebp - 0x100], 0x4179b2c3
mov edx, ebx
mov eax, dword [ebp - 0x140]
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, 0xb3b3
jne 0x1001fd54
cmp dword [ebp - 0xfc], ecx
jne 0x1001fd56
mov dword [ebp - 0x14], ecx
jmp 0x1001fd2f
mov dword [ebp - 0x1c], ecx
jmp 0x1001fd26
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x1001fd23
push ecx
push ecx
push 0x2357
push 0x2613
call edi
push eax
call dword [sym.imp.USER32.dll_ScrollWindow]
xor ecx, ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1001fd03
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1001fcfe
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x1001fdd0
push 0x1aa8
push ecx
push ecx
call edi
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
jmp 0x1001fdd0
xor ecx, ecx
mov dword [ebp - 8], 0x577e
mov dword [ebp - 0x2c], 0xfffffff8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jl 0x1001fd7c
mov eax, ecx
cmp dword [ebp - 8], ecx
je 0x1001fd7e
mov eax, ebx
mov ecx, dword [ebp - 0x14]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x104]
cmp ecx, eax
setne dl
cmp edx, dword [ebp - 8]
jle 0x1001fd9b
mov eax, dword [ebp - 0x148]
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
cmp eax, 0xc3ad
mov eax, dword [ebp - 0x104]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setle dl
sub edx, eax
mov eax, dword [ebp - 0x148]
imul ecx, edx, 3
xor edx, edx
cmp ecx, eax
setg dl
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x10]
push 0
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x3c]
sub eax, 2
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0xc]
cmp ecx, eax
mov eax, dword [ebp - 0x3c]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0xef66
setne dl
or eax, 0xffffffff
sub eax, edx
xor ecx, ecx
cmp eax, 0xfffffff8
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp + eax*4 - 0x3c]
mov ecx, dword [ebp - 0x24]
inc ecx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
pop edx
setle al
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x10]
jns 0x1001f976
imul eax, dword [ebp - 0x10], 0xf27a
mov edi, dword [sym.imp.USER32.dll_GetDC]
test eax, eax
je 0x100201ec
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0xffffffff
setge cl
imul ecx, dword [ebp - 0x10]
cmp ecx, dword [ebp - 0x3c]
jle 0x100201ec
mov eax, 0xbac64a68
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xbc], edx
jmp 0x1001fec3
mov dword [ebp - 0x2c], 0x4432
cmp dword [ebp - 0x2c], edx
jne 0x1001fecc
inc dword [ebp - 0xbc]
cmp dword [ebp - 0xbc], 0x16
jge 0x1001feb1
cmp dword [ebp - 0xbc], edx
je 0x1001fef8
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001ffa4
push 0x11f1
push edx
push edx
push 0xfa2
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
jmp 0x1001ffa4
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1001ff9a
push 8
pop eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xd0], eax
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001ff39
push 0x21aa
push edx
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor edx, edx
mov dword [ebp - 0xdc], 0xfffffff1
jmp 0x1001ff8e
mov dword [ebp - 8], 0xfffffffd
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001ff68
push edx
push 0x1c5f
push 0x12b6
call dword [sym.imp.GDI32.dll_CreatePen]
xor edx, edx
mov dword [ebp - 8], edx
jmp 0x1001ff82
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x1001ff7f
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
xor edx, edx
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x1c
jle 0x1001ff6d
dec dword [ebp - 0xdc]
cmp dword [ebp - 0xdc], 0xffffffec
jle 0x1001ff45
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff9
jle 0x1001ff07
mov dword [ebp - 0xc], 0x1a
cmp dword [ebp - 0xc], 0xfffffff4
jg 0x100201d3
mov edi, 0xffff
mov dword [ebp - 0x14], 0xfe7d8a87
xor ecx, ecx
mov dword [ebp - 0x20], 7
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ecx
jmp 0x1001ffdf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001ffd2
push 2
mov dword [ebp - 0x10], ecx
pop edx
jmp 0x1001fffd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x1001ffec
mov dword [ebp - 0x10], ecx
jmp 0x10020018
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1f4], 0x37280dd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10020007
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x14], ecx
jl 0x10020099
mov dword [ebp - 0x20], 0xff82ff40
mov dword [ebp - 0x20], 0x60e704f3
mov dword [ebp - 0x20], 0xfffffff8
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], 0xfffffffc
mov dword [ebp - 0x20], 0x6160cbeb
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], 0xfffffff9
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x20], 0xcf59
mov dword [ebp - 8], ecx
jmp 0x10020080
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x244], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10020073
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x13c], ecx
jne 0x10020099
inc dword [ebp - 0x24]
dec dword [ebp - 0x14]
jns 0x10020025
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ecx
jl 0x100200de
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe4], ecx
jne 0x100200d1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x138]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x1f4]
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x138], ecx
mov eax, ecx
jle 0x100200d3
mov eax, ebx
mov dword [ebp - 0xe4], eax
dec dword [ebp - 0x14]
jns 0x100200a1
mov dword [ebp - 0x14], 0x21ebc5f9
mov dword [ebp - 0x28], 0x86e8
mov dword [ebp - 0x18], 0x69ec4279
mov dword [ebp - 0x24], ebx
mov dword [ebp - 8], 0xfffffffe
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x30], 0xffffffff
push 5
pop eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x40], 0x1de6fc60
mov dword [ebp - 0x38], 0x85734cb4
mov dword [ebp - 0x1c], 0xfffffff7
mov eax, dword [ebp - 0x28]
dec dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x34]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, eax
mov eax, dword [ebp - 0x18]
cmp eax, edx
setg cl
xor edx, edx
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setne dl
imul edx, dword [ebp - 0x18]
mov dword [ebp - 0x40], edx
xor edx, edx
mov ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
add ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x40]
cmp edi, eax
mov eax, dword [ebp - 0x1c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x14]
dec dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xfffffff4
jle 0x1001ffba
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov byte [ebp - 1], 0
cmp byte [ebp - 1], 0
je 0x100203ea
call dword [sym.imp.USER32.dll_CreatePopupMenu]
jmp 0x100203ea
mov dword [ebp - 0xc], 0x971c1ec2
mov dword [ebp - 0x1c], 0x9ab83eb6
mov dword [ebp - 8], edx
jmp 0x1002020d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jl 0x100201ff
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0xc], edx
jl 0x10020357
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x2c], 0x6862eae2
mov dword [ebp - 8], edx
jmp 0x10020242
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x124], 0x4279
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10020231
mov dword [ebp - 0x18], edx
jmp 0x10020345
push 4
pop eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xc4], edx
cmp dword [ebp - 0xc4], edx
jl 0x10020323
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x64]
mov eax, dword [ebp - 0x120]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x64]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
mov eax, dword [ebp - 0xc4]
setg dl
add eax, edx
je 0x100202c9
xor edx, edx
mov dword [ebp - 0x1c], edx
jmp 0x100202c2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x124], 0xfe10
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100202b1
jmp 0x100202f7
mov dword [ebp - 0x2c], 0xffffffff
xor edx, edx
mov dword [ebp - 0x44], 0x7cdd5376
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x215f8f50
setge al
add eax, dword [ebp - 0xc]
xor edx, edx
mov dword [ebp - 0x44], eax
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x10020317
push 0xe15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
xor edx, edx
dec dword [ebp - 0xc4]
jns 0x1002027c
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x64], edx
je 0x1002033d
cmp dword [ebp - 0x1c], edx
jne 0x10020339
cmp dword [ebp - 0xc8], edx
je 0x1002033d
mov eax, ebx
jmp 0x1002033f
mov eax, edx
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1002024f
dec dword [ebp - 0xc]
jns 0x1002021e
mov byte [ebp - 1], dl
cmp byte [ebp - 1], 0
je 0x10020369
push edx
call dword [sym.imp.USER32.dll_SetCursor]
xor edx, edx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x10], 0xffffffe8
cmp dword [ebp - 0x10], 0x1c
jg 0x1002039b
push edx
lea eax, [ebp - 0x49]
mov byte [ebp - 0x49], dl
push eax
call fcn.10023902
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1c
pop ecx
pop ecx
push 0
pop edx
jle 0x10020380
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jne 0x100203aa
mov ecx, edx
cmp dword [ebp - 0x30], edx
je 0x100203ac
mov ecx, ebx
mov eax, dword [ebp - 0x28]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, 0xffff2a15
setne cl
sub eax, ecx
mov ecx, ebx
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], 0xdcbd5f5a
mov dword [ebp - 0x2c], 0x9a97
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x20], 0xb2391cb4
mov dword [ebp - 0x24], 0x7b38eb16
mov dword [ebp - 0x30], 0x940c9ba5
mov dword [ebp - 0x20], 0x2249687f
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x28], 0x1359a703
mov dword [ebp - 0x20], 0x3633e7a3
mov dword [ebp - 8], 0
jmp 0x10020443
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1dc], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10020432
mov eax, dword [ebp - 0x30]
mov esi, 0xffff0001
mov eax, dword [ebp - 0x20]
mov ecx, esi
mov eax, dword [ebp - 0x24]
sub ecx, eax
add ecx, dword [ebp - 0x28]
inc dword [ebp - 0x28]
cmp ecx, ebx
je 0x10020468
mov edx, ebx
jmp 0x1002046a
xor edx, edx
mov eax, dword [ebp - 0x1dc]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ecx, 0xd1f6657e
setne dl
add eax, edx
cmp eax, 0x194
jne 0x10020498
cmp dword [ebp - 0x24], 0
jne 0x10020498
xor eax, eax
jmp 0x1002049a
mov eax, ebx
mov edx, dword [ebp - 0x44]
xor ecx, ecx
sub edx, eax
mov eax, dword [ebp - 0x38]
cmp edx, eax
mov eax, dword [ebp - 0x78]
setge cl
mov dword [ebp - 0x30], ecx
xor ecx, ecx
mov dword [eax], ecx
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0xe
jne 0x100205ce
push 5
pop esi
mov dword [ebp - 0x28], 0x7367
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x20], 0x93876a47
mov dword [ebp - 8], ecx
jmp 0x10020508
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x25c], 0xe8ce6fc2
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x100204f7
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
cmp eax, 3
mov eax, dword [ebp - 0x94]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x90]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov dword [ebp - 0xc], ecx
jmp 0x100205b0
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x100205ad
push 0x1761
push 0x1998
push 0x8f3
push 0x2023
push 0xe9a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
push 0x24fc
push 0xaef
push 0x801
push 0xf95
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
xor ecx, ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jle 0x1002055b
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 0xe
je 0x100204e1
mov esi, 0xffff0001
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x2c], 0xc629
mov dword [ebp - 0xc], ecx
jmp 0x100205f2
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c4], 8
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x100205e1
mov dword [ebp - 0xc], ecx
jmp 0x1002060e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1d0], 0xc509ca4f
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x100205fd
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], 0x1a
jle 0x100206b9
mov edi, 0xffff
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x18], 0xddd9cd4
mov dword [ebp - 8], ecx
jmp 0x1002064a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x194], 0xb59229a2
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10020639
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xdacd7d39
je 0x1002066c
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x14], eax
mov eax, ecx
jle 0x1002066e
mov eax, ebx
mov edx, dword [ebp - 0x14]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x14]
cmp edx, eax
setge cl
cmp ecx, edi
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x1b8], ecx
test ecx, ecx
jg 0x10020698
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x194], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1a
jg 0x10020626
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x14], ecx
jmp 0x100206ef
mov dword [ebp - 0x20], 0xfffffff9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1cc], eax
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x100206ec
push 0x475f
push ecx
call fcn.10023755
pop ecx
pop ecx
xor ecx, ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x100206be
mov dword [ebp - 0x20], 0xffffffff
mov eax, 0xffff
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0x9c36c1d6
mov dword [ebp - 0x20], 0x51814487
mov dword [ebp - 8], 0x2a60d4e0
mov dword [ebp - 0x24], 0xe412c219
mov dword [ebp - 0xc], ecx
jmp 0x1002073c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x184], 0x68593f9b
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1002072b
mov dword [ebp - 0xc], ecx
jmp 0x10020758
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x224], 4
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x10020747
mov eax, dword [ebp - 0x180]
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor eax, eax
cmp edx, 0x3245f1db
setne al
cmp eax, dword [ebp - 0x18]
jl 0x100207c7
xor eax, eax
mov dword [ebp - 8], eax
jmp 0x1002079b
cmp byte [ebp - 1], 0
je 0x10020798
push eax
push eax
call dword [sym.imp.USER32.dll_LoadCursorA]
xor eax, eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xfffffffc
mov byte [ebp - 1], al
jle 0x10020788
cmp byte [ebp - 1], 0
je 0x10020808
push eax
push 0x24bc
push 0x131f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetCharWidth32A]
jmp 0x10020808
mov dword [ebp - 8], 0
jmp 0x100207dd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x22c], ebx
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x100207d0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x2c]
push 5
pop ecx
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x21c], eax
dec dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
cmp dword [eax + 0x14], 0x10
jb 0x10020815
mov ecx, dword [eax]
jmp 0x10020817
mov ecx, eax
cmp dword [eax + 0x14], 0x10
mov dword [ebp - 0x58], ecx
jb 0x10020824
mov edx, dword [eax]
jmp 0x10020826
mov edx, eax
mov eax, dword [eax + 0x10]
add eax, edx
cmp ecx, eax
je 0x10020b46
xor ecx, ecx
mov dword [ebp - 0xc], 0xa439beb0
mov dword [ebp - 0x10], ecx
jmp 0x10020852
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xac], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10020841
mov dword [ebp - 0x10], ecx
jmp 0x1002086b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], 6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002085d
mov dword [ebp - 0x10], ecx
jmp 0x10020886
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf4], 0x627
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10020875
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], ecx
jl 0x1002097c
mov edi, 0xfff8
mov esi, 0xb11f3813
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ecx
jmp 0x100208c5
lea eax, [ebp - 0x4a]
mov byte [ebp - 0x4a], cl
push eax
push ecx
call fcn.10020d1f
inc dword [ebp - 0x1c]
pop ecx
pop ecx
push 0
pop ecx
cmp dword [ebp - 0x1c], ebx
jle 0x100208b0
mov eax, dword [ebp - 0xa8]
neg eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0xa8], eax
jg 0x100208e6
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0xc]
cmp edi, eax
mov eax, dword [ebp - 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x60]
push 1
setge dl
xor ecx, ecx
cmp edx, 0x4ca7
setne cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0xc]
cmp ecx, eax
setle dl
cmp edx, 0xfffffffa
sbb eax, eax
inc eax
cmp esi, eax
sbb eax, eax
xor ebx, ebx
neg eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0xc]
setl bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xac]
cmp ebx, eax
mov eax, dword [ebp - 0xac]
setle dl
xor ecx, ecx
cmp edx, eax
pop ebx
setle cl
xor eax, eax
cmp ecx, 0xc7c4
push 0
setg al
mov dword [ebp - 0x20], eax
dec dword [ebp - 0xc]
pop ecx
jns 0x100208a1
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov esi, 0xffff0001
mov ecx, dword [ebp - 0xf4]
xor edx, edx
mov eax, dword [ebp - 0x60]
cmp eax, ecx
mov eax, dword [ebp - 0x58]
setge dl
mov dword [ebp - 0xc], edx
mov al, byte [eax]
cmp al, 0x30
jl 0x100209bf
cmp al, 0x39
jg 0x100209bf
push 0
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x78]
push 0x5d7b
push eax
call fcn.10022faf
mov ecx, dword [ebp - 0x58]
add esp, 0x10
mov eax, dword [ebp - 0x48]
inc ecx
jmp 0x10020817
mov dword [ebp - 0x2c], 0x9a97
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x20], 0xb2391cb4
mov dword [ebp - 0x48], 0x7b38eb16
mov dword [ebp - 0x24], 0x940c9ba5
mov dword [ebp - 0x20], 0x2249687f
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x28], 0x1359a703
push 3
mov dword [ebp - 0x20], 0x3633e7a3
mov dword [ebp - 8], 0
pop edi
jmp 0x10020a1b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x218], 8
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10020a0a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
sub esi, eax
add esi, dword [ebp - 0x28]
inc dword [ebp - 0x28]
cmp esi, ebx
je 0x10020a39
mov edx, ebx
jmp 0x10020a3b
xor edx, edx
mov eax, dword [ebp - 0x218]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setne cl
xor edx, edx
cmp ecx, 0xd1f6657e
setne dl
add eax, edx
cmp eax, 0x194
jne 0x10020a67
cmp dword [ebp - 0x48], 0
jne 0x10020a67
xor ebx, ebx
mov edx, dword [ebp - 0x44]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
sub edx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x78]
setge cl
xor ebx, ebx
mov dword [ebp - 0x24], ecx
mov dword [eax], ebx
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0xa4], ebx
jmp 0x10020b32
push 5
mov dword [ebp - 0x28], 0x7367
pop eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x20], 0x93876a47
mov dword [ebp - 8], ebx
jmp 0x10020acd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x250], 0xe8ce6fc2
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10020abc
mov eax, dword [ebp - 0xc]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x28]
cmp eax, edi
mov eax, dword [ebp - 0xa4]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0xa0]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0xc], ebx
jmp 0x10020b26
push ebx
call fcn.10022a8f
inc dword [ebp - 0xc]
pop ecx
cmp dword [ebp - 0xc], 2
jle 0x10020b1c
inc dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], 0xe
je 0x10020aa3
xor al, al
jmp 0x10020cda
push 9
pop eax
mov dword [ebp - 0x158], eax
xor edx, edx
mov dword [ebp - 0x154], eax
push 0xfffffffffffffff9
mov dword [ebp - 0x150], eax
pop esi
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x14], 0x184c506d
push 2
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x10], edx
pop ecx
jmp 0x10020b89
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10c], 0x74307976
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10020b78
mov dword [ebp - 0x10], edx
jmp 0x10020ba4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe8], 0xfffffffc
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10020b93
mov dword [ebp - 0x10], edx
jmp 0x10020bbb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19c], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10020bae
mov dword [ebp - 0x14], edx
jmp 0x10020c36
mov dword [ebp - 8], 0x2426f379
mov dword [ebp - 0x20], 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x158], ebx
cmp dword [ebp - 0x14], edx
je 0x10020bfc
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp eax, ebx
setge cl
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], edx
jne 0x10020bfc
cmp dword [ebp - 8], edx
jne 0x10020bfc
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x108], edx
mov eax, dword [ebp - 0x14]
cmp eax, ebx
setl cl
mov dword [ebp - 0xe8], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x19c], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x10020bc5
mov dword [ebp - 0x14], 0xfffffffc
xor edx, edx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 8], esi
mov dword [ebp - 0x20], 4
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x14a9
setl dl
xor ecx, ecx
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
mov eax, dword [ebp - 0x14]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
mov dword [ebp - 8], eax
cmp dword [ebp - 8], ecx
je 0x10020ca0
cmp dword [ebp - 0x28], ecx
je 0x10020ca0
mov eax, ebx
cmp dword [ebp - 8], ecx
jne 0x10020ca2
mov eax, ecx
add dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0x1a
jmp 0x10020cd2
mov byte [ebp - 1], cl
cmp byte [ebp - 1], 0
je 0x10020ccf
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
xor ecx, ecx
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x18
jle 0x10020cb4
mov al, bl
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret