Function at 0x10019fd6
Capabilities:
Get file attributes
Start service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
mov dword [ebp - 4], 0x2121f90e
push ebx
mov dword [ebp - 0x18], 0xfffffff9
xor ebx, ebx
mov dword [ebp - 0x10], 0x197e
push esi
mov dword [ebp - 0x14], 5
push edi
mov dword [ebp - 0xb0], edx
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 8], ebx
jmp 0x1001a022
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xf4], 0x720b963a
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001a011
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov dword [ebp - 0x18], 0xffff
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x10], ebx
jne 0x1001a052
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x18]
mov esi, dword [sym.imp.USER32.dll_FlashWindow]
sub ecx, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
neg ecx
sbb ecx, ecx
add ecx, 0xfffffff9
mov dword [ebp - 0x14], ecx
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x1001a084
push ebx
call edi
push eax
call esi
mov dword [ebp - 4], 0xba31e468
mov dword [ebp - 0x14], 0x796840e
mov dword [ebp - 0x10], ebx
jmp 0x1001a0a5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0x1177e8ed
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a097
mov dword [ebp - 0x10], ebx
jmp 0x1001a0be
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], 2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001a0b0
mov dword [ebp - 0x30], ebx
jmp 0x1001a1a9
mov eax, dword [ebp - 0x30]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
setg dl
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x40]
sub edx, eax
mov ecx, dword [ebp - 4]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp edx, ecx
setg al
cmp eax, 0xfff6
mov eax, dword [ebp - 0x30]
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, edx
setg cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0xffffffff
jl 0x1001a1a6
mov dword [ebp - 0x20], 0x507af9ca
xor ebx, ebx
mov dword [ebp - 0x14], 0xfc4b664f
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, 0xfffffffa
mov eax, dword [ebp - 0x30]
setl bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
sub ebx, eax
mov eax, dword [ebp - 0x30]
dec ebx
cmp ecx, ebx
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 4]
sete cl
xor edx, edx
add ecx, 0xfff9
cmp ecx, eax
mov eax, dword [ebp - 0x30]
sete dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x40]
cmp edx, eax
sete cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x40]
mov dword [ebp - 0x14], eax
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffff
jge 0x1001a12b
xor ebx, ebx
inc dword [ebp - 0x30]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x30], ecx
jle 0x1001a0cc
mov dword [ebp - 8], 0x2121f90e
mov dword [ebp - 4], ebx
push 0xd
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
pop edx
jmp 0x1001a206
mov dword [ebp - 0x14], 0x3837aced
mov dword [ebp - 0x10], ebx
jmp 0x1001a1e7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x108], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a1d6
mov dword [ebp - 0x108], 0xd006
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jne 0x1001a1ca
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 4], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
jmp 0x1001a259
mov dword [ebp - 0x14], 0x3837aced
mov dword [ebp - 0x10], ebx
jmp 0x1001a23a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x110], 7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a229
mov dword [ebp - 0x110], 0xd006
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], edx
jne 0x1001a21d
mov dword [ebp - 4], ecx
mov dword [ebp - 4], ebx
jmp 0x1001a273
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x140], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001a266
mov dword [ebp - 4], ebx
jmp 0x1001a28d
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x140], ebx
jne 0x1001a293
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x1001a27e
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a2af
push 0x89b
push 0x1f88
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [ebp - 0x24], 0x197e
mov dword [ebp - 0x14], 5
mov dword [ebp - 4], ebx
jmp 0x1001a2d3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x118], 0x720b963a
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001a2c2
mov dword [ebp - 4], 0xfffffffb
mov dword [ebp - 0x14], 0x18461e70
mov dword [ebp - 4], ebx
jmp 0x1001a2fa
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x7c], 0xc93b
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001a2ec
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a313
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 4], ebx
jmp 0x1001a3c0
mov dword [ebp - 0x10], ebx
jmp 0x1001a32e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6c], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001a320
mov dword [ebp - 0x60], 2
cmp dword [ebp - 0x60], ebx
jl 0x1001a3a9
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0x7c], 1
jge 0x1001a35d
mov eax, dword [ebp - 0x60]
xor edx, edx
inc edx
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x7c]
jmp 0x1001a35f
mov edx, ebx
mov eax, dword [ebp - 0x60]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x74]
sete cl
imul eax, ecx
test eax, eax
je 0x1001a37a
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x6c], 1
jl 0x1001a390
cmp dword [ebp - 4], ebx
jne 0x1001a390
mov eax, ebx
jmp 0x1001a393
xor eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x7c], ecx
dec dword [ebp - 0x60]
jns 0x1001a340
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a3bd
push 0x464
call dword [sym.imp.USER32.dll_MessageBeep]
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jle 0x1001a31b
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], 0xffff
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x24], ebx
jne 0x1001a3f4
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 0xfffffff9
mov dword [ebp - 0x14], ecx
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a41b
push ebx
call edi
push eax
call esi
mov dword [ebp - 8], 0xf2c29a3d
xor esi, esi
mov dword [ebp - 0x24], 0xd3f46721
inc esi
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 4], ebx
jmp 0x1001a44d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x2c], 0xaf1124f0
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001a43f
mov dword [ebp - 8], ebx
jmp 0x1001a490
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x14], 0xfffffffa
cmp dword [ebp - 0x24], ebx
jne 0x1001a495
cmp dword [ebp - 0x18], ebx
jne 0x1001a475
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], esi
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x1001a457
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x2c6eb81f
mov edi, dword [sym.imp.ADVAPI32.dll_StartServiceW]
setg cl
dec ecx
cmp ecx, dword [ebp - 8]
jg 0x1001a4cc
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a54d
push ebx
push 0x1dd0
push ebx
call edi
jmp 0x1001a54d
mov dword [ebp - 0x20], 0x50190031
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x1001a4f0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x130], 0xfffffff9
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001a4df
cmp dword [ebp - 0x24], ebx
je 0x1001a542
mov eax, dword [ebp - 0x2c]
xor edx, edx
mov dword [ebp - 0x20], 0x870c
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x130]
setne dl
sub edx, 0x101e
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0x128], ecx
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], esi
sbb eax, eax
inc eax
add eax, 0x4adcf861
mov eax, esi
jne 0x1001a544
mov eax, ebx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 8], 0x55a44198
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x20], 0xe4ed
mov dword [ebp - 0xc4], esi
mov dword [ebp - 0xc0], esi
mov dword [ebp - 0xbc], esi
mov dword [ebp - 0xb8], esi
push 7
pop eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
inc edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
xor edx, edx
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x10]
imul eax, ecx, 0x3f91
neg eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setge dl
cmp edx, dword [ebp - 0x10]
je 0x1001a5fb
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a5fe
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x1001a5fe
dec dword [ebp - 0x20]
mov dword [ebp - 8], 3
cmp dword [ebp - 8], ebx
jl 0x1001a64e
mov dword [ebp - 0x1c], 0x2ae45661
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 8]
setne dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xc4]
cmp eax, edx
setle cl
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 8]
jns 0x1001a60a
mov dword [ebp - 4], 0xf2c29a3d
mov dword [ebp - 8], 0x5c8094a
mov dword [ebp - 4], ebx
jmp 0x1001a66f
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 0x9b31
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001a661
mov dword [ebp - 8], ebx
jmp 0x1001a73d
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 4], 0x7a98815c
mov dword [ebp - 0x10], 9
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x18]
je 0x1001a709
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x24], ebx
jne 0x1001a6c9
mov ecx, ebx
cmp dword [ebp - 4], ebx
je 0x1001a6cb
mov ecx, esi
mov eax, dword [ebp - 0x24]
sub eax, 0x8c53
neg eax
sbb eax, eax
inc eax
add eax, ecx
xor ecx, ecx
imul eax, dword [ebp - 0x10]
cmp eax, 0xa7eb8e13
mov eax, dword [ebp - 8]
setne cl
mov eax, dword [ebp + eax*4 - 0x4c]
add eax, ecx
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, 0xfc0233fd
setne cl
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x24]
jmp 0x1001a73a
mov dword [ebp - 0x10], ebx
jmp 0x1001a735
cmp dword [ebp - 0x18], ebx
jne 0x1001a73a
mov dword [ebp - 4], ebx
jmp 0x1001a72d
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a72a
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x1001a718
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x1001a70e
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x1001a67c
mov dword [ebp - 0x20], 0xd3f46721
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 4], 0xe53d
mov dword [ebp - 4], ebx
jmp 0x1001a771
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x11c], 7
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001a760
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 4], 0xa5d6c05b
mov dword [ebp - 4], 0xffffffe2
jmp 0x1001a7bc
mov dword [ebp - 0x18], 0xfffffffb
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001a7b9
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a7b4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
dec dword [ebp - 0x18]
jns 0x1001a79b
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x18
jge 0x1001a78c
mov dword [ebp - 0x1c], 0xfffffffe
mov dword [ebp - 4], 0x91a049fe
mov dword [ebp - 8], 5
mov dword [ebp - 0x10], ebx
jmp 0x1001a7ea
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 1
jl 0x1001a7dc
mov dword [ebp - 0x10], ebx
jmp 0x1001a806
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd0], 0x6b5b3847
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001a7f5
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001a83c
push ebx
push 0x1bdb
push ebx
push ebx
push 0x1f10
push 0x1c24
push 0x2609
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0xffffffee
je 0x1001a990
push 2
pop esi
mov dword [ebp - 0x10], ebx
jmp 0x1001a862
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x94], 0xfffffff7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001a851
cmp dword [ebp - 0x94], ebx
jne 0x1001a8fe
xor edx, edx
mov dword [ebp - 0x70], 0x42374b1b
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp - 0x94]
cmp ecx, eax
mov eax, dword [ebp - 0x90]
setg dl
xor ecx, ecx
cmp edx, 0xe525
mov edx, dword [ebp - 4]
setge cl
xor ebx, ebx
cmp ecx, eax
setge bl
imul edx, dword [ebp - 4]
mov eax, dword [ebp - 0xd0]
xor ecx, ecx
imul edx, ebx
cmp edx, eax
mov eax, 0xfa9b64fd
setg cl
cmp eax, ecx
mov eax, dword [ebp - 8]
sbb ecx, ecx
xor ebx, ebx
inc ecx
imul eax, ecx
add eax, 0x42374b1b
cmp eax, dword [ebp - 0xd0]
jle 0x1001a8fe
mov dword [ebp - 8], ebx
jmp 0x1001a8f3
mov dword [ebp - 0x1c], 0xffffffff
cmp dword [ebp - 0x1c], ebx
jne 0x1001a983
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x25
jg 0x1001a8e0
jmp 0x1001a983
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 8], ebx
jmp 0x1001a91b
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa8], 0x116971db
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001a90a
mov dword [ebp - 8], ebx
jmp 0x1001a979
mov dword [ebp - 0x1c], 0xfffffffb
mov dword [ebp - 0x24], 0xe54384f3
mov eax, dword [ebp - 0xd0]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0xa4]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x7cdd5376
setge al
imul eax, eax, 6
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jle 0x1001a925
cmp dword [ebp - 0x24], ebx
jne 0x1001a990
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffee
jne 0x1001a84c
mov dword [ebp - 4], 0x7f0a
xor eax, eax
mov dword [ebp - 8], 8
inc eax
mov dword [ebp - 0x18], 0x952f3411
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x1c], 0xa0becc33
mov dword [ebp - 8], 5
mov dword [ebp - 8], ebx
jmp 0x1001a9d5
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xec], 0xfffffffa
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001a9c4
mov esi, dword [ebp - 4]
mov eax, dword [ebp - 4]
neg esi
mov eax, dword [ebp - 4]
mov dword [ebp - 8], eax
sbb esi, esi
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 4]
neg esi
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x9f36
setg al
xor ecx, ecx
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0xec]
cmp esi, eax
mov eax, dword [ebp - 0x18]
setl cl
imul eax, ecx
test eax, eax
jne 0x1001aa38
cmp dword [ebp - 0xe4], ebx
jne 0x1001aa38
xor esi, esi
mov eax, ebx
inc esi
jmp 0x1001aa3d
xor esi, esi
inc esi
mov eax, esi
mov dword [ebp - 0x18], eax
xor edx, edx
mov eax, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x10], 0x83e7
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setl dl
mov dword [ebp - 0xe4], edx
xor edx, edx
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cmp eax, ecx
mov eax, dword [ebp - 8]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [ebp - 0x50]
sub ecx, 0x494f
imul ecx, dword [ebp - 0x18]
test ecx, ecx
je 0x1001aa91
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov dword [ebp - 4], ebx
jmp 0x1001aaaa
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x28], 0xaf1124f0
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001aa9c
mov dword [ebp - 4], ebx
jmp 0x1001ad04
push 0xfffffffffffffffa
mov dword [ebp - 8], ebx
mov dword [ebp - 8], ebx
pop edx
cmp dword [ebp - 8], 3
jge 0x1001aad5
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xdc], edx
inc dword [ebp - 8]
jmp 0x1001aac0
mov dword [ebp - 8], 2
cmp dword [ebp - 8], ebx
jl 0x1001aafa
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0xdc]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xdc], ecx
dec dword [ebp - 8]
jns 0x1001aae1
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 8], eax
mov dword [ebp - 0x18], 0xfffffff7
mov dword [ebp - 0x1c], 0x6b0f7383
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], 0x9ac70c30
mov dword [ebp - 0x1c], 0x4822b165
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x1c], 0xf82baef6
mov dword [ebp - 8], ebx
jmp 0x1001ab45
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x134], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001ab34
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x20], ebx
jne 0x1001ad0d
mov dword [ebp - 0x10], 0xb457102d
mov dword [ebp - 0x14], 0xc1dea90c
mov dword [ebp - 8], ebx
jmp 0x1001ab7a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x54], 0xd1af
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001ab6c
mov dword [ebp - 8], ebx
jmp 0x1001ab95
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x8c], 7
inc dword [ebp - 8]
cmp dword [ebp - 8], 4
jl 0x1001ab84
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x10]
neg edx
cmp eax, edx
setg cl
cmp ecx, dword [ebp - 0x88]
jl 0x1001abe9
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001acde
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
jmp 0x1001acde
mov dword [ebp - 8], 0xcab43068
mov dword [ebp - 0x10], ebx
jmp 0x1001acd4
mov dword [ebp - 0x14], 0x98a9a262
mov ecx, 0x9172c2e8
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x8c]
sub ecx, eax
mov eax, dword [ebp - 0x10]
add ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x80]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x8c]
cmp edx, eax
mov eax, dword [ebp - 0x10]
setg cl
mov esi, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x80]
add esi, 0xc5c7375e
add esi, ecx
neg esi
sbb esi, esi
xor edx, edx
inc esi
sub esi, eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 0x10]
sub ecx, dword [ebp + eax*4 - 0x8c]
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x8c]
cmp esi, eax
setg cl
xor eax, eax
cmp edx, ecx
setg al
xor edx, edx
test eax, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 8]
cmp ecx, 8
jne 0x1001acb1
cmp dword [ebp - 8], ebx
je 0x1001acb1
xor esi, esi
inc esi
mov edx, esi
jmp 0x1001acb6
xor esi, esi
mov edx, ebx
inc esi
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 0xffffffff
setl al
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x1001abf8
cmp dword [ebp - 0x18], ebx
jne 0x1001ace9
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x1001aab7
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 8], ebx
jmp 0x1001ad2a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x9c], 3
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x1001ad19
mov dword [ebp - 8], ebx
jmp 0x1001ade7
mov dword [ebp - 0x10], ebx
jmp 0x1001ad4b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], 0xcdf98a59
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001ad3d
mov dword [ebp - 0x44], 0xfffffff8
jmp 0x1001ad67
mov dword [ebp - 0x9c], 0x4ebb0cb8
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], esi
jg 0x1001ad5a
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
setle dl
add eax, edx
imul ecx, eax
test ecx, ecx
je 0x1001ad8b
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x44]
xor ecx, ecx
cmp eax, 0xf84255eb
setne cl
cmp ecx, 0xffffffff
jle 0x1001ada7
mov eax, esi
cmp dword [ebp - 0x9c], ebx
jne 0x1001ada9
mov eax, ebx
xor ecx, ecx
test eax, eax
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0x98]
sete cl
sub ecx, eax
mov eax, dword [ebp - 0x44]
imul edx, ecx
sub edx, 0x5d58
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
xor eax, eax
cmp ecx, 0x4225
setle al
mov dword [ebp - 0x44], eax
dec dword [ebp - 8]
cmp dword [ebp - 8], 0xffffffea
jg 0x1001ad38
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0x2c6eb81f
setg cl
dec ecx
cmp ecx, dword [ebp - 4]
jg 0x1001ae22
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001aea3
push ebx
push 0x1dd0
push ebx
call edi
jmp 0x1001aea3
mov dword [ebp - 0x14], 0x50190031
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 4], ebx
jmp 0x1001ae46
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x100], 0xfffffff9
inc dword [ebp - 4]
cmp dword [ebp - 4], 3
jl 0x1001ae35
cmp dword [ebp - 0x20], ebx
je 0x1001ae98
mov eax, dword [ebp - 0x28]
xor edx, edx
mov dword [ebp - 0x14], 0x870c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x100]
setne dl
sub edx, 0x101e
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], esi
sbb eax, eax
inc eax
add eax, 0x4adcf861
mov eax, esi
jne 0x1001ae9a
mov eax, ebx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 8], 0xfffffff6
mov dword [ebp - 4], 0xfffffff8
mov dword [ebp - 0x14], 0x718bd850
mov dword [ebp - 0x14], 0x3d3b0cf5
cmp dword [ebp - 8], ebx
jne 0x1001af00
mov ecx, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 8]
cmp eax, ecx
mov ecx, ebx
setle dl
imul edx, dword [ebp - 8]
cmp edx, 0xa8fe
jg 0x1001aee1
mov ecx, esi
xor eax, eax
cmp ecx, 0x921e
setle al
sub eax, dword [ebp - 4]
mov ecx, dword [ebp - 8]
sub ecx, eax
mov eax, ebx
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 8]
jne 0x1001af02
mov eax, esi
mov edi, dword [sym.imp.GDI32.dll_RoundRect]
xor ecx, ecx
mov esi, dword [sym.imp.USER32.dll_SetWindowLongA]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cmp eax, 0xb691
setg cl
imul ecx, dword [ebp - 8]
imul eax, ecx, 0xe1fc
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0x19
jmp 0x1001af8d
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001af6e
push 0x2c
push 0x21c9
push 0x97e
push 0x2598
push 0x177d
push 0x951
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001af8a
cmp dword [ebp - 4], 0xffffffe4
jg 0x1001af3a
mov dword [ebp - 4], 0xe53d8da8
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x14], 5
mov dword [ebp - 0x14], 0xab1943c6
cmp dword [ebp - 4], ebx
jne 0x1001b004
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 4]
sub ecx, eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0x14], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0x1188
setle cl
imul eax, ecx, 0x23a2
add eax, dword [ebp - 4]
jne 0x1001b004
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001b018