Function at 0x10098234
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10201891
mov eax, dword fs:[0]
push eax
sub esp, 0x3d0
mov eax, dword [0x10293044]
xor eax, esp
mov dword [esp + 0x3c8], eax
push ebx
push esi
push edi
mov eax, dword [0x10293044]
xor eax, esp
push eax
lea eax, [esp + 0x3e0]
mov dword fs:[0], eax
mov ebx, ecx
mov esi, dword [ebp + 0xc]
mov edi, edx
cmp dword [edi + 0x30], 0
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], esi
jne 0x10096995
mov dword [esi], 0
mov eax, 1
jmp 0x1009866a
xor eax, eax
cmp dword [edi + 0x28], eax
mov dword [esp + 0x14], eax
je 0x100969ae
mov ecx, dword [edi + 0x28]
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
call edx
mov dword [esp + 0x14], eax
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1009698b
mov eax, ebx
shr eax, 0x10
je 0x100969c5
cmp eax, 1
jne 0x10096985
lea eax, [esp + 0x10]
movzx ebx, bx
push eax
push edi
mov dword [esp + 0x38], ebx
call fcn.1008c300
mov dword [esp + 0x3e8], 0
cmp dword [esp + 0x10], 0
jne 0x10096a13
mov dword [esi], 0
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10096a09
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov eax, 1
jmp 0x1009866a
call fcn.101a7380
mov esi, dword [eax + 0x24]
test esi, esi
mov dword [esp + 0x2c], esi
mov dword [esp + 0x38], esi
je 0x10096a2f
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
mov byte [esp + 0x3e8], 1
cmp ebx, 0x9d58
ja 0x10097cd4
je 0x10097c02
lea eax, [ebx - 0x9c40]
cmp eax, 0xc9
ja case.0x10097cfe.40282
movzx ecx, byte [eax + 0x10098748]
jmp dword [ecx*4 + 0x10098690]
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10096b14
cmp eax, 1
je 0x10096b14
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10096a95
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 2
test ebx, ebx
je 0x10096aff
mov edx, 0x10237cc0
lea eax, [esp + 0x220]
call fcn.10007690
mov byte [esp + 0x3e8], 3
lea ecx, [esp + 0x220]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 4
mov byte [esp + 0x3f0], 3
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 2
lea ecx, [esp + 0x220]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096b14
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov edx, dword [edi + 8]
mov eax, dword [edx + 0xe8]
lea ecx, [edi + 8]
push 0
push 1
call eax
jmp 0x10098637
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10096bd7
cmp eax, 1
je 0x10096bd7
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10096b58
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 5
test ebx, ebx
je 0x10096bc2
mov edx, 0x10237cc8
lea eax, [esp + 0x2e4]
call fcn.10007690
mov byte [esp + 0x3e8], 6
lea ecx, [esp + 0x2e4]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 7
mov byte [esp + 0x3f0], 6
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 5
lea ecx, [esp + 0x2e4]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096bd7
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov eax, dword [esp + 0x14]
mov ecx, dword [edi + 0x30]
mov edx, dword [ecx]
mov edx, dword [edx + 0x28]
push eax
push 0x1a
add edi, 8
push edi
call edx
mov edi, eax
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x10096c03
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10098668
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
jmp 0x10098668
mov ecx, dword [edi + 0x30]
mov eax, dword [ecx]
mov edx, dword [eax + 0x28]
push 0
push 0
add edi, 8
push edi
call edx
mov edi, eax
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x10096c4f
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10098668
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
jmp 0x10098668
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10096d1e
cmp eax, 1
je 0x10096d1e
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10096c9f
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 8
test ebx, ebx
je 0x10096d09
mov edx, 0x10237cd0
lea eax, [esp + 0x98]
call fcn.10007690
mov byte [esp + 0x3e8], 9
lea eax, [esp + 0x98]
push eax
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0xa
mov byte [esp + 0x3f0], 9
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 8
lea ecx, [esp + 0x98]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096d1e
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 1
jmp 0x10098629
push 0
push 3
jmp 0x10098629
push 0
push 4
jmp 0x10098629
push 0
push 5
jmp 0x10098629
test esi, esi
je 0x10096de2
mov ebx, dword [edi + 0x50]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10096d5d
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0xe
test ebx, ebx
je 0x10096dcd
lea esi, [ebx - 4]
test esi, esi
je 0x10096dcd
lea ecx, [edi + 8]
push ecx
push edi
call fcn.1008c580
mov edx, dword [esp + 0x18]
push esi
mov ecx, eax
call fcn.1006bd70
mov esi, eax
mov byte [esp + 0x3e8], 1
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10096dc6
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov eax, esi
jmp 0x1009866a
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096de2
mov edx, dword [ebx]
mov ecx, ebx
mov eax, dword [edx + 4]
call eax
mov eax, dword [edi + 0x160]
test eax, eax
je 0x10096f07
lea esi, [eax + 8]
test esi, esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], esi
je 0x10096e07
mov edx, dword [esi]
mov eax, dword [edx]
mov ecx, esi
call eax
mov byte [esp + 0x3e8], 0x5b
test esi, esi
je 0x10098569
cmp dword [esp + 0x30], 0x9d94
jne 0x1009853f
xor ebx, ebx
mov dword [esp + 0x28], ebx
mov byte [esp + 0x3e8], 0x5c
cmp dword [esp + 0x2c], ebx
mov byte [esp + 0x24], 1
je 0x10096e9d
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
test eax, eax
je 0x10096e9d
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x34]
call eax
mov edi, eax
lea esi, [esp + 0x28]
call fcn.100b68e0
mov ebx, dword [esp + 0x28]
test ebx, ebx
je 0x10096e99
mov edx, dword [ebx]
mov eax, dword [edx + 0x18]
mov ecx, ebx
call eax
mov edx, dword [ebx]
mov byte [esp + 0x23], al
mov eax, dword [edx + 0x24]
mov ecx, ebx
call eax
cmp byte [esp + 0x23], 0
mov byte [esp + 0x24], al
je 0x10098526
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x24]
push ecx
lea edx, [esp + 0x40]
push edx
call fcn.1018ec30
mov byte [esp + 0x3e8], 0x5d
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea eax, [esp + 0x40]
call fcn.1009c220
cmp eax, 2
jne 0x100984ee
mov byte [esp + 0x3e8], 0x5c
lea eax, [esp + 0x3c]
push eax
call fcn.1006f1d0
mov byte [esp + 0x3e8], 0x5b
test ebx, ebx
je 0x10096ef4
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 1
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x3e8], 0
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x10098490
mov edx, dword [ecx]
jmp 0x1009848b
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10096fce
cmp eax, 1
je 0x10096fce
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10096f4f
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0xf
test ebx, ebx
je 0x10096fb9
mov edx, 0x10237ce0
lea eax, [esp + 0x1e8]
call fcn.10007690
mov byte [esp + 0x3e8], 0x10
lea ecx, [esp + 0x1e8]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x11
mov byte [esp + 0x3f0], 0x10
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0xf
lea ecx, [esp + 0x1e8]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096fce
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 7
jmp 0x10098629
push 0
push 8
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x1009708c
cmp eax, 1
je 0x1009708c
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x1009700d
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x12
test ebx, ebx
je 0x10097077
mov edx, 0x10237ce8
lea eax, [esp + 0xd0]
call fcn.10007690
mov byte [esp + 0x3e8], 0x13
lea ecx, [esp + 0xd0]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x14
mov byte [esp + 0x3f0], 0x13
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x12
lea ecx, [esp + 0xd0]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x1009708c
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 9
jmp 0x10098629
push 0
push 0xa
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x1009714a
cmp eax, 1
je 0x1009714a
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x100970cb
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x15
test ebx, ebx
je 0x10097135
mov edx, 0x10237cf0
lea eax, [esp + 0x290]
call fcn.10007690
mov byte [esp + 0x3e8], 0x16
lea ecx, [esp + 0x290]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x17
mov byte [esp + 0x3f0], 0x16
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x15
lea ecx, [esp + 0x290]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x1009714a
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0xb
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x100971ff
cmp eax, 1
je 0x100971ff
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10097180
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x18
test ebx, ebx
je 0x100971ea
mov edx, 0x10237cf8
lea eax, [esp + 0x108]
call fcn.10007690
mov byte [esp + 0x3e8], 0x19
lea ecx, [esp + 0x108]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x1a
mov byte [esp + 0x3f0], 0x19
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x18
lea ecx, [esp + 0x108]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x100971ff
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0xc
jmp 0x10098629
push 0
push 0xd
jmp 0x10098629
push 0
push 0xe
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x100972bd
cmp eax, 1
je 0x100972bd
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10097247
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x1b
test ebx, ebx
je 0x100972a8
mov edx, 0x10237d00
lea eax, [esp + 0x60]
call fcn.10007690
mov byte [esp + 0x3e8], 0x1c
lea ecx, [esp + 0x60]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x1d
mov byte [esp + 0x3f0], 0x1c
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x1b
lea ecx, [esp + 0x60]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x100972bd
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0xf
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097372
cmp eax, 1
je 0x10097372
call fcn.101a7380
mov edi, dword [eax + 0x20]
test edi, edi
mov dword [esp + 0x18], edi
je 0x100972f3
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
call eax
mov byte [esp + 0x3e8], 0x1e
test edi, edi
je 0x1009735d
mov edx, 0x10237d08
lea eax, [esp + 0x140]
call fcn.10007690
mov bl, 0x1f
mov byte [esp + 0x3e8], bl
lea ecx, [esp + 0x140]
push ecx
push ecx
mov eax, esp
mov dword [eax], edi
mov edx, dword [edi]
mov eax, dword [edx]
mov ecx, edi
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x20
mov byte [esp + 0x3f0], bl
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x1e
lea ecx, [esp + 0x140]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test edi, edi
je 0x10097372
mov edx, dword [edi]
mov eax, dword [edx + 4]
mov ecx, edi
call eax
mov ecx, dword [esp + 0x14]
push 0
push 0
push 0x10
push ecx
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x10098637
push 0x32
push edi
call fcn.100954c0
jmp 0x10098637
push 0x4b
push edi
call fcn.100954c0
jmp 0x10098637
push 0x64
push edi
call fcn.100954c0
jmp 0x10098637
push 0x7d
push edi
call fcn.100954c0
jmp 0x10098637
push 0x96
push edi
call fcn.100954c0
jmp 0x10098637
push 0xc8
push edi
call fcn.100954c0
jmp 0x10098637
test esi, esi
je 0x10096de2
cmp dword [edi + 0x60], 0
je 0x10096de2
push edi
call fcn.10095c00
mov edi, eax
mov byte [esp + 0x3e8], 0
jmp 0x10098645
push 0
push 0x14
jmp 0x10098629
push 0
push 0x15
jmp 0x10098629
push 0
push 0x16
jmp 0x10098629
push 0
push 0x17
jmp 0x10098629
push 0
push 0x18
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x100974dc
cmp eax, 1
je 0x100974dc
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x1009745d
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x27
test ebx, ebx
je 0x100974c7
mov edx, 0x10237d20
lea eax, [esp + 0x300]
call fcn.10007690
mov byte [esp + 0x3e8], 0x28
lea ecx, [esp + 0x300]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x29
mov byte [esp + 0x3f0], 0x28
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x27
lea ecx, [esp + 0x300]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x100974dc
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
cmp dword [edi + 0x28], 0
je 0x10096de2
mov ecx, dword [edi + 0x28]
mov edx, dword [ecx]
mov eax, dword [esp + 0x30]
mov edx, dword [edx + 0x88]
push eax
call edx
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x100975a9
cmp eax, 1
je 0x100975a9
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x1009752a
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0x2a
test ebx, ebx
je 0x10097594
mov edx, 0x10237d28
lea eax, [esp + 0x178]
call fcn.10007690
mov byte [esp + 0x3e8], 0x2b
lea eax, [esp + 0x178]
push eax
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x2c
mov byte [esp + 0x3f0], 0x2b
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x2a
lea ecx, [esp + 0x178]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x100975a9
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0x19
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x1009765e
cmp eax, 1
je 0x1009765e
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x100975df
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x2d
test ebx, ebx
je 0x10097649
mov edx, 0x10237d30
lea eax, [esp + 0x258]
call fcn.10007690
mov byte [esp + 0x3e8], 0x2e
lea ecx, [esp + 0x258]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x2f
mov byte [esp + 0x3f0], 0x2e
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x2d
lea ecx, [esp + 0x258]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x1009765e
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov edx, dword [edi + 8]
mov eax, dword [edx + 0xd0]
lea ecx, [edi + 8]
push 1
push 1
call eax
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097721
cmp eax, 1
je 0x10097721
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x100976a2
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x30
test ebx, ebx
je 0x1009770c
mov edx, 0x10237d38
lea eax, [esp + 0x1b0]
call fcn.10007690
mov byte [esp + 0x3e8], 0x31
lea ecx, [esp + 0x1b0]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x32
mov byte [esp + 0x3f0], 0x31
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x30
lea ecx, [esp + 0x1b0]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097721
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
test esi, esi
je 0x10096de2
push edi
call fcn.10095e10
mov edi, eax
mov byte [esp + 0x3e8], 0
jmp 0x10098645
test esi, esi
je 0x10096de2
push edi
call fcn.10095f70
mov edi, eax
mov byte [esp + 0x3e8], 0
jmp 0x10098645
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x100974dc
cmp eax, 1
je 0x100974dc
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097788
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x39
test ebx, ebx
je 0x100974c7
mov edx, 0x10237d48
lea eax, [esp + 0x2c8]
call fcn.10007690
mov byte [esp + 0x3e8], 0x3a
lea ecx, [esp + 0x2c8]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x3b
mov byte [esp + 0x3f0], 0x3a
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x39
lea ecx, [esp + 0x2c8]
jmp 0x100974c2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097899
cmp eax, 1
je 0x10097899
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097823
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0x3c
test ebx, ebx
je 0x10097884
mov edx, 0x10237d50
lea eax, [esp + 0x7c]
call fcn.10007690
mov byte [esp + 0x3e8], 0x3d
lea eax, [esp + 0x7c]
push eax
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x3e
mov byte [esp + 0x3f0], 0x3d
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x3c
lea ecx, [esp + 0x7c]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097899
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
cmp dword [edi + 0x154], 0
jne 0x10096de2
lea ebx, [esp + 0x14]
mov dword [esp + 0x14], 0
call fcn.100967b0
test al, al
je 0x10096de2
mov edx, dword [edi + 8]
mov edx, dword [edx + 0x104]
push 1
mov eax, ebx
lea esi, [edi + 8]
push eax
lea ecx, [esp + 0x2b]
push ecx
mov ecx, esi
mov byte [esp + 0x2f], 1
call edx
test al, al
je 0x10096de2
mov ecx, dword [esp + 0x14]
mov eax, dword [esi]
mov edx, dword [eax + 0x108]
push 0
push ecx
mov ecx, esi
call edx
jmp 0x10096de2
cmp dword [edi + 0x28], 0
je 0x10096de2
mov ecx, dword [edi + 0x28]
mov eax, dword [ecx]
mov edx, dword [eax + 0x88]
push ebx
call edx
jmp 0x10096de2
mov eax, dword [edi + 8]
mov edx, dword [eax + 0xa0]
lea ecx, [edi + 8]
call edx
jmp 0x10096de2
lea eax, [esp + 0x14]
push eax
push edi
call fcn.1008be00
mov byte [esp + 0x3e8], 0x45
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097955
push 1
mov edx, dword [ecx]
mov eax, dword [edx + 0x94]
call eax
mov ecx, dword [edi + 0x2c]
test ecx, ecx
je 0x10097961
call fcn.10075000
mov byte [esp + 0x3e8], 1
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10096de2
mov edx, dword [ecx]
jmp 0x10096ddd
lea ecx, [esp + 0x14]
push ecx
push edi
call fcn.1008bea0
mov byte [esp + 0x3e8], 0x46
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097955
mov edx, dword [ecx]
mov eax, dword [edx + 0x48]
call eax
jmp 0x10097955
cmp dword [edi + 0x28], 0
je 0x100979b0
mov ecx, dword [edi + 0x28]
mov edx, dword [ecx]
mov eax, dword [edx + 0x10]
call eax
lea ecx, [esp + 0x14]
push ecx
push edi
call fcn.1008be00
mov byte [esp + 0x3e8], 0x47
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097955
mov edx, dword [ecx]
mov eax, dword [edx + 0xf0]
call eax
mov ecx, dword [esp + 0x14]
push 0
jmp 0x1009794b
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097a8c
cmp eax, 1
je 0x10097a8c
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10097a0d
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x4e
test ebx, ebx
je 0x10097a77
mov edx, 0x10237d78
lea eax, [esp + 0xb4]
call fcn.10007690
mov byte [esp + 0x3e8], 0x4f
lea ecx, [esp + 0xb4]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x50
mov byte [esp + 0x3f0], 0x4f
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x4e
lea ecx, [esp + 0xb4]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097a8c
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0x1c
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097b41
cmp eax, 1
je 0x10097b41
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10097ac2
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x51
test ebx, ebx
je 0x10097b2c
mov edx, 0x10237d80
lea eax, [esp + 0xec]
call fcn.10007690
mov byte [esp + 0x3e8], 0x52
lea ecx, [esp + 0xec]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x53
mov byte [esp + 0x3f0], 0x52
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x51
lea ecx, [esp + 0xec]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097b41
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0x1f
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097bf6
cmp eax, 1
je 0x10097bf6
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097b77
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x54
test ebx, ebx
je 0x10097be1
mov edx, 0x10237d88
lea eax, [esp + 0x124]
call fcn.10007690
mov byte [esp + 0x3e8], 0x55
lea ecx, [esp + 0x124]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x56
mov byte [esp + 0x3f0], 0x55
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x54
lea ecx, [esp + 0x124]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097bf6
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov ecx, edi
call fcn.10094fa0
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097cae
cmp eax, 1
je 0x10097cae
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097c2f
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x21
test ebx, ebx
je 0x10097c99
mov edx, 0x10237d10
lea eax, [esp + 0x15c]
call fcn.10007690
mov byte [esp + 0x3e8], 0x22
lea ecx, [esp + 0x15c]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x23
mov byte [esp + 0x3f0], 0x22
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x21
lea ecx, [esp + 0x15c]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097cae
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x10097cbf
mov edx, dword [ecx]
mov eax, dword [edx + 0xd8]
call eax
cmp dword [edi + 0x60], 0
je 0x10096de2
push edi
call fcn.10095cb0
jmp 0x10098637
cmp ebx, 0xa033
ja 0x100984b1
je 0x100983c8
lea eax, [ebx - 0x9d59]
cmp eax, 0xdc
ja case.0x10097cfe.40282
movzx ecx, byte [eax + 0x10098848]
jmp dword [ecx*4 + 0x10098814]
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097db1
cmp eax, 1
je 0x10097db1
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x10097d32
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0xb
test ebx, ebx
je 0x10097d9c
mov edx, 0x10237cd8
lea eax, [esp + 0x194]
call fcn.10007690
mov byte [esp + 0x3e8], 0xc
lea ecx, [esp + 0x194]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0xd
mov byte [esp + 0x3f0], 0xc
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0xb
lea ecx, [esp + 0x194]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097db1
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 2
jmp 0x10098629
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10097e66
cmp eax, 1
je 0x10097e66
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097de7
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x24
test ebx, ebx
je 0x10097e51
mov edx, 0x10237d18
lea eax, [esp + 0x1cc]
call fcn.10007690
mov byte [esp + 0x3e8], 0x25
lea ecx, [esp + 0x1cc]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x26
mov byte [esp + 0x3f0], 0x25
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x24
lea ecx, [esp + 0x1cc]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10097e66
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov ecx, dword [edi + 0x30]
test ecx, ecx
je 0x10097e77
mov edx, dword [ecx]
mov eax, dword [edx + 0xd8]
call eax
cmp dword [edi + 0x60], 0
je 0x10096de2
push edi
call fcn.10095d60
jmp 0x10096de2
push 0x1e
push edi
call fcn.100954c0
jmp 0x10098637
push 0x190
push edi
call fcn.100954c0
jmp 0x10098637
test esi, esi
je 0x10096de2
cmp dword [edi + 0x60], 0
je 0x10096de2
push edi
call fcn.10095b50
mov edi, eax
mov byte [esp + 0x3e8], 0
jmp 0x10098645
mov ebx, dword [edi + 0x60]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10097ee3
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x36
test ebx, ebx
je 0x10097fba
mov edx, dword [ebx]
mov edx, dword [edx + 0x38]
lea eax, [esp + 0x14]
push eax
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0x37
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097fa3
push ecx
mov eax, esp
mov dword [eax], ecx
mov ecx, dword [esp + 0x18]
test ecx, ecx
mov dword [esp + 0x1c], esp
je 0x10097f2c
mov eax, dword [ecx]
mov edx, dword [eax]
call edx
mov byte [esp + 0x3ec], 0x38
mov byte [esp + 0x3ec], 0x37
call fcn.1009ba40
mov edi, eax
mov byte [esp + 0x3e8], 0x36
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097f5a
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov byte [esp + 0x3e8], 1
mov eax, dword [ebx]
mov edx, dword [eax + 4]
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x10097f80
mov eax, dword [esi]
mov edx, dword [eax + 4]
mov ecx, esi
call edx
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10098668
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
jmp 0x10098668
mov byte [esp + 0x3e8], 0x36
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10097fba
mov eax, dword [ecx]
mov edx, dword [eax + 4]
call edx
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10096de2
mov eax, dword [ebx]
mov edx, dword [eax + 4]
mov ecx, ebx
call edx
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10098084
cmp eax, 1
je 0x10098084
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x10098005
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0x3f
test ebx, ebx
je 0x1009806f
mov edx, 0x10237d58
lea eax, [esp + 0x204]
call fcn.10007690
mov byte [esp + 0x3e8], 0x40
lea eax, [esp + 0x204]
push eax
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x41
mov byte [esp + 0x3f0], 0x40
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x3f
lea ecx, [esp + 0x204]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10098084
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
call fcn.1009bd40
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x1009813a
cmp eax, 1
je 0x1009813a
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x24], ebx
je 0x100980bb
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x42
test ebx, ebx
je 0x10098125
mov edx, 0x10237d60
lea eax, [esp + 0x23c]
call fcn.10007690
mov byte [esp + 0x3e8], 0x43
lea ecx, [esp + 0x23c]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x30], esp
call eax
mov byte [esp + 0x3f0], 0x44
mov byte [esp + 0x3f0], 0x43
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x42
lea ecx, [esp + 0x23c]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x1009813a
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push edi
call fcn.100953f0
jmp 0x10096de2
cmp dword [edi + 0x30], 0
je 0x10096de2
xor eax, eax
cmp dword [edi + 0x28], eax
je 0x10098160
mov ecx, dword [edi + 0x28]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
call eax
mov ecx, dword [edi + 0x30]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 0x28]
push 0x33
push 0
call eax
jmp 0x10096de2
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10098220
cmp eax, 1
je 0x10098220
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x100981a1
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x4b
test ebx, ebx
je 0x1009820b
mov edx, 0x10237d70
lea eax, [esp + 0x274]
call fcn.10007690
mov byte [esp + 0x3e8], 0x4c
lea ecx, [esp + 0x274]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x4d
mov byte [esp + 0x3f0], 0x4c
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x4b
lea ecx, [esp + 0x274]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10098220
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0x1e
jmp 0x10098629
push edi
call fcn.1009b490
jmp 0x10096de2
push 0x10233a7c
push 0
call dword [sym.imp.USER32.dll_FindWindowW]
mov ebx, eax
test ebx, ebx
je 0x1009829c
push ebx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1009829c
push 1
push ebx
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x10098277
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100984aa
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x1009866a
lea ecx, [esp + 0x31c]
push ecx
call fcn.1003c480
mov byte [esp + 0x3e8], 0x57
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea eax, [esp + 0x320]
call fcn.1009c320
cmp eax, 0x1f4
jne 0x10098379
push 0x108
call sub.MSVCR80.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
mov dword [esp + 0x18], eax
mov byte [esp + 0x3e8], 0x58
test eax, eax
je 0x100982f6
push eax
call fcn.10003ae0
mov ebx, eax
jmp 0x100982f8
xor ebx, ebx
mov byte [esp + 0x3e8], 0x57
lea edx, [ebx + 0xc]
push edx
mov edx, str.http:__ie.2345.com_ext_index.htm
call fcn.1000bb00
xor eax, eax
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x48], eax
mov byte [ebx + 0x4d], al
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
mov byte [ebx + 0x4c], 1
mov byte [ebx + 0x4e], 1
mov dword [esp + 0x18], ebx
call edx
mov byte [esp + 0x3e8], 0x59
mov edi, dword [edi + 0x38]
push ecx
mov eax, esp
mov dword [eax], ebx
mov eax, dword [ebx]
mov edx, dword [eax]
mov ecx, ebx
mov dword [esp + 0x20], esp
call edx
mov byte [esp + 0x3ec], 0x5a
mov eax, dword [edi]
push 0
add eax, 0x14
push 1
mov byte [esp + 0x3f4], 0x59
mov eax, dword [eax]
mov ecx, edi
call eax
mov byte [esp + 0x3e8], 0x57
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 1
lea ecx, [esp + 0x31c]
push ecx
call fcn.1003c6c0
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x100983a3
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100984aa
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x1009866a
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10098474
cmp eax, 1
je 0x10098474
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x18], ebx
je 0x100983f5
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x33
test ebx, ebx
je 0x1009845f
mov edx, 0x10237d40
lea eax, [esp + 0x2ac]
call fcn.10007690
mov byte [esp + 0x3e8], 0x34
lea ecx, [esp + 0x2ac]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x24], esp
call eax
mov byte [esp + 0x3f0], 0x35
mov byte [esp + 0x3f0], 0x34
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x33
lea ecx, [esp + 0x2ac]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10098474
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
mov ecx, edi
call fcn.10092c60
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x10098490
mov edx, dword [esi]
mov ecx, esi
mov eax, dword [edx + 4]
call eax
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x100984aa
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x1009866a
sub ebx, 0xe146
je 0x10098582
sub ebx, 0x2f
je 0x100984d1
mov ecx, dword [esp + 0x18]
mov dword [ecx], 0
jmp 0x10096de2
test esi, esi
je 0x10096de2
push edi
call fcn.10095ec0
mov edi, eax
mov byte [esp + 0x3e8], 0
jmp 0x10098645
test ebx, ebx
je 0x10098512
cmp byte [esp + 0x5c], 0
mov edx, dword [ebx]
mov edx, dword [edx + 0x1c]
sete al
mov ecx, ebx
push eax
call edx
mov ecx, dword [esp + 0x5c]
mov eax, dword [ebx]
mov edx, dword [eax + 0x20]
push ecx
mov ecx, ebx
call edx
mov byte [esp + 0x3e8], 0x5c
lea eax, [esp + 0x3c]
push eax
call fcn.1006f1d0
jmp 0x1009852a
mov edi, dword [esp + 0x1c]
mov byte [esp + 0x3e8], 0x5b
test ebx, ebx
je 0x1009853f
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
cmp dword [ebp + 8], 1
mov ecx, dword [esp + 0x14]
mov edx, dword [ecx]
mov edx, dword [edx + 0x10]
sete al
add edi, 8
push eax
mov eax, dword [esp + 0x34]
push eax
push edi
call edx
test eax, eax
jne 0x10098569
mov eax, dword [esp + 0x18]
mov dword [eax], 1
mov byte [esp + 0x3e8], 1
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x10096f07
jmp 0x10096f00
mov eax, dword [ebp + 8]
cmp eax, 0xffffffff
je 0x10098625
cmp eax, 1
je 0x10098625
call fcn.101a7380
mov ebx, dword [eax + 0x20]
test ebx, ebx
mov dword [esp + 0x34], ebx
je 0x100985af
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
call eax
mov byte [esp + 0x3e8], 0x48
test ebx, ebx
je 0x10098610
mov edx, 0x10237d68
lea eax, [esp + 0x3c]
call fcn.10007690
mov byte [esp + 0x3e8], 0x49
lea ecx, [esp + 0x3c]
push ecx
push ecx
mov eax, esp
mov dword [eax], ebx
mov edx, dword [ebx]
mov eax, dword [edx]
mov ecx, ebx
mov dword [esp + 0x20], esp
call eax
mov byte [esp + 0x3f0], 0x4a
mov byte [esp + 0x3f0], 0x49
call fcn.1001aeb0
add esp, 8
mov byte [esp + 0x3e8], 0x48
lea ecx, [esp + 0x3c]
call fcn.10001dd0
mov byte [esp + 0x3e8], 1
test ebx, ebx
je 0x10098625
mov edx, dword [ebx]
mov eax, dword [edx + 4]
mov ecx, ebx
call eax
push 0
push 0x1d
mov ecx, dword [edi + 0x30]
mov edx, dword [ecx]
mov eax, dword [edx + 0x28]
add edi, 8
push edi
call eax
mov edi, eax
mov byte [esp + 0x3e8], 0
test esi, esi
je 0x1009864e
mov edx, dword [esi]
mov eax, dword [edx + 4]
mov ecx, esi
call eax
mov dword [esp + 0x3e8], 0xffffffff
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x10098668
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
mov eax, edi
mov ecx, dword [esp + 0x3e0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x3c8]
xor ecx, esp
call fcn.101d19cc
mov esp, ebp
pop ebp
ret 8