Function at 0x10017bb9
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1dc
push ebx
push esi
push edi
push 0
mov dword [ebp - 0x100], edx
xor esi, esi
pop edx
push 3
mov dword [ebp - 4], 0x97f6af11
inc esi
pop ebx
mov dword [ebp - 0x28], 0x629342bb
push 2
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x110], ecx
mov dword [ebp - 4], 0x12
pop edi
jmp 0x10017d96
mov dword [ebp - 8], 0xdd3f4672
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], edx
jmp 0x10017c16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x174], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10017c09
mov eax, dword [ebp - 4]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
cmp eax, 0xfffffffe
je 0x10017c45
mov ecx, edx
cmp dword [ebp - 8], edx
je 0x10017c47
mov ecx, esi
xor eax, eax
cmp ecx, 6
setne al
cmp eax, esi
jge 0x10017c5a
mov eax, esi
cmp dword [ebp - 4], edx
jne 0x10017c5c
mov eax, edx
mov ecx, dword [ebp - 0xc]
xor edx, edx
imul ecx, eax
mov eax, dword [ebp - 4]
cmp ecx, eax
setle dl
imul edx, dword [ebp - 8]
mov dword [ebp - 8], edx
xor edx, edx
mov dword [ebp - 0xc], edi
cmp dword [ebp - 0xc], edx
jl 0x10017d93
mov dword [ebp - 8], edi
cmp dword [ebp - 8], edx
jl 0x10017d8a
mov dword [ebp - 0x10], edx
jmp 0x10017c9c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x48], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10017c92
cmp dword [ebp - 4], edx
jne 0x10017d8a
mov dword [ebp - 0x48], edx
jmp 0x10017d78
mov dword [ebp - 0x10], edx
jmp 0x10017cc8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xdc], 0x4f68993d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10017cb7
mov dword [ebp - 0xd4], edi
cmp dword [ebp - 0xd4], edx
jl 0x10017d75
mov dword [ebp - 0x18], 0xf47f28a9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
add ecx, eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x174], ecx
mov eax, dword [ebp - 4]
imul eax, ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x18], 0x13
jmp 0x10017d63
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017d60
push edx
push 0x242b
push 0x1cb9
push 0x182f
push 0xaea
push 0x226d
push 0x1d8b
push 0x2707
push 0x24f7
push 0x165d
push 0x4d8
push 0x1208
push 0x30f
push 0x199e
call dword [sym.imp.GDI32.dll_CreateFontA]
xor edx, edx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff4
jg 0x10017d0d
dec dword [ebp - 0xd4]
jns 0x10017cdf
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], edi
jle 0x10017cb2
dec dword [ebp - 8]
jns 0x10017c8d
dec dword [ebp - 0xc]
jns 0x10017c81
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe5
je 0x10017bfa
mov dword [ebp - 0x1c], 0xcecb4571
mov dword [ebp - 0x10], edx
jmp 0x10017dbd
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1dc], 0xb3c6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10017dac
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017dd5
push edx
push edx
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
xor edx, edx
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x1c], edi
mov edi, dword [sym.imp.USER32.dll_GetDC]
cmp dword [ebp - 0x1c], edx
jl 0x10017e36
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017e0f
push edx
push 0x381
push 0x143e
push 0x2294
push 0x1855
call dword [sym.imp.GDI32.dll_CreateBitmap]
xor edx, edx
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017e31
push edx
push 0xb73
push 0x1a19
call ebx
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
xor edx, edx
dec dword [ebp - 0x1c]
jns 0x10017de9
mov dword [ebp - 0x10], 0xe46a6f4d
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x1c], 2
mov dword [ebp - 8], edx
jmp 0x10017e5d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x178], 4
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10017e4c
mov dword [ebp - 8], edx
jmp 0x10017e78
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1a8], 0xe52d8cb4
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x10017e67
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], edx
jl 0x10017e95
mov dword [ebp - 0x1a4], 0x9532bb11
dec dword [ebp - 0x1c]
jns 0x10017e86
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017ea6
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
xor edx, edx
mov dword [ebp - 0xc], edx
jmp 0x10017eb9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x54], 0xfffffff7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10017eab
mov dword [ebp - 0x54], 0xffffffe6
jmp 0x10017ed4
mov dword [ebp - 0x20], 0xd05ba772
inc dword [ebp - 0x20]
inc dword [ebp - 0x54]
cmp dword [ebp - 0x54], 0x18
jle 0x10017ec7
mov byte [ebp - 0x12], dl
cmp byte [ebp - 0x12], 0
je 0x10017ef1
push 0x1d41
call ebx
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
xor ebx, ebx
push 3
mov dword [ebp - 8], ebx
pop ecx
jmp 0x10017f09
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x60], 0xcbad
inc dword [ebp - 8]
cmp dword [ebp - 8], ecx
jl 0x10017efb
push 2
mov dword [ebp - 8], ebx
pop edx
jmp 0x10017f27
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x94], 0x52487223
inc dword [ebp - 8]
cmp dword [ebp - 8], edx
jl 0x10017f16
mov dword [ebp - 0x2c], 0x5c8094a1
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0xc], ebx
jmp 0x10017f4c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x14c], ecx
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10017f3f
mov dword [ebp - 0x2c], ebx
jmp 0x10017f81
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x34], 0x4d00693e
mov dword [ebp - 0xc], ebx
jmp 0x10017f76
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1c8], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x10017f69
inc dword [ebp - 0x20]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x10017f56
cmp dword [ebp - 0x60], ebx
je 0x10017f90
cmp dword [ebp - 0x5c], ebx
jne 0x10017f92
mov esi, ebx
mov ecx, dword [ebp - 0x5c]
xor edx, edx
mov eax, dword [ebp - 0x60]
neg ecx
cmp ecx, eax
mov ecx, dword [ebp - 0x5c]
sete dl
sub ecx, 0x99a5671
add ecx, edx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp esi, ecx
sete al
imul eax, eax, 0x859b
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x5c]
imul eax, eax, 0x2a0c
test eax, eax
je 0x10017fe4
cmp dword [ebp - 0x5c], ebx
je 0x10017fe4
xor esi, esi
inc esi
mov eax, esi
jmp 0x10017fe9
xor esi, esi
mov eax, ebx
inc esi
cmp dword [ebp - 0x5c], eax
je 0x10017ff5
mov ecx, esi
cmp dword [ebp - 0x5c], ebx
jne 0x10017ff7
mov ecx, ebx
mov edx, dword [ebp - 0x5c]
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp ecx, 0xcbc21b07
sete al
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x60]
setle cl
add eax, ecx
cmp eax, dword [ebp - 0x5c]
je 0x1001846f
push 0xfffffffffffffff9
pop eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 8], 0x8651162f
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], ebx
jmp 0x1001804b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], 0x2bf35dd7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001803d
push 4
mov dword [ebp - 0x80], 0x13
pop edi
cmp dword [ebp - 0x80], 0xfffffff1
je 0x10018262
mov dword [ebp - 0x24], ebx
mov dword [ebp - 4], ebx
jmp 0x10018076
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x40], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001806c
mov dword [ebp - 4], ebx
jmp 0x10018091
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xec], 0xfffffff7
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018080
mov dword [ebp - 4], ebx
jmp 0x100180ac
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x120], 0xba424acd
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x1001809b
mov eax, dword [ebp - 0x74]
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x40]
setg cl
dec eax
add eax, ecx
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], esi
mov eax, dword [ebp - 0x80]
cmp eax, 0xb8a1b380
mov eax, dword [ebp - 0x80]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setl dl
xor ecx, ecx
cmp edx, eax
setne cl
mov dword [ebp - 0xe8], ecx
cmp dword [ebp - 0xe8], ebx
je 0x100181a5
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 2
mov dword [ebp - 8], ebx
jmp 0x10018197
mov dword [ebp - 0x10], ebx
jmp 0x1001812a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x154], 0xe903adfe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10018119
mov eax, dword [ebp - 0xec]
sub eax, dword [ebp - 0xe8]
je 0x10018144
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x40]
xor edx, edx
mov eax, dword [ebp - 0xec]
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 8]
setle dl
mov dword [ebp + eax*4 - 0x38], edx
mov eax, dword [ebp - 0x11c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x38]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x7c], eax
jne 0x10018186
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x38]
inc eax
mov dword [ebp - 0x1c], eax
inc dword [ebp - 8]
cmp dword [ebp - 8], ebx
jle 0x10018114
jmp 0x1001825a
mov dword [ebp - 0x18], 0x2df500c3
mov dword [ebp - 0x1c], 0x82e9
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x114], ebx
je 0x10018205
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
cmp eax, 0xfffd
setne cl
cmp ecx, dword [ebp - 0x1c]
jg 0x100181e3
mov edx, ebx
cmp dword [ebp - 0x40], ebx
je 0x100181e5
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x11c]
setl cl
add eax, ecx
cmp dword [ebp - 0x38], eax
jge 0x100181ff
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp - 0x120]
cmp esi, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x1001825a
mov dword [ebp - 0x20], 0xc9dabc5d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x120]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x38], eax
dec dword [ebp - 0x24]
jns 0x10018238
dec dword [ebp - 0x80]
jmp 0x1001805a
mov byte [ebp - 0x11], bl
mov dword [ebp - 0x28], 0xade
mov dword [ebp - 0x3c], 0xebfb2c41
mov dword [ebp - 0x10], ebx
jmp 0x10018289
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc8], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10018278
mov dword [ebp - 0xc0], 0xfffffff3
jmp 0x1001832f
mov dword [ebp - 0x20], 0x78f4f823
cmp dword [ebp - 0x28], ebx
je 0x10018310
mov dword [ebp - 0x20], 0xf5ed9a92
mov dword [ebp - 0x10], ebx
jmp 0x100182c6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcc], 0x8dc5336d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100182b5
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0xcc]
je 0x100182e1
cmp dword [ebp - 0xc0], ebx
jne 0x100182e3
mov esi, ebx
mov ecx, dword [ebp - 0xc0]
neg esi
mov eax, dword [ebp - 0x20]
neg esi
sbb esi, esi
xor edx, edx
neg esi
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setle dl
xor ecx, ecx
cmp eax, edx
setne cl
imul ecx, esi
xor esi, esi
inc esi
mov dword [ebp - 0x20], ecx
jmp 0x1001831a
mov dword [ebp - 0x20], 0xdf9c
inc dword [ebp - 0x20]
mov byte [ebp - 0x12], bl
cmp byte [ebp - 0x12], bl
je 0x10018329
push ebx
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
inc dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 0xe
jne 0x1001829d
cmp byte [ebp - 0x11], bl
je 0x10018347
call dword [sym.imp.USER32.dll_CreateMenu]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018c41
mov dword [ebp - 0x24], 0x532fe223
mov dword [ebp - 0x10], ebx
jmp 0x10018370
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x19c], 0xb9b5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001835f
push 3
mov dword [ebp - 0x24], ebx
pop edi
cmp dword [ebp - 0x24], edi
jg 0x1001845d
jmp 0x10018389
xor esi, esi
inc esi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x100183a2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa0], 0x2d67
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10018391
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], ebx
jl 0x100183cd
cmp dword [ebp - 0x98], ebx
jne 0x100183cd
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100183c8
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
dec dword [ebp - 0x10]
jns 0x100183af
cmp dword [ebp - 0x190], ebx
jne 0x100183dc
cmp dword [ebp - 0x10], ebx
jne 0x100183dc
mov esi, ebx
cmp dword [ebp - 0x24], ebx
jne 0x100183ed
cmp dword [ebp - 0x98], ebx
jne 0x100183ed
mov edx, ebx
jmp 0x100183f0
xor edx, edx
inc edx
mov eax, dword [ebp - 0x98]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x198]
setl cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x9c]
setge bl
xor edx, edx
imul ebx, esi
cmp ebx, eax
mov eax, dword [ebp - 0x98]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
xor ebx, ebx
cmp dword [ebp - 0x98], ecx
je 0x10018449
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x10018451
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x10018451
cmp dword [ebp - 0x98], ebx
jne 0x1001845d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x10018386
push 0x3ffd
push ebx
call fcn.1001adc9
pop ecx
pop ecx
jmp 0x10018c44
mov dword [ebp - 4], 0xd1b9849b
mov dword [ebp - 0x28], 0x93e75cb5
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x34], 0x509ca4f0
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x34], 0xd132
mov dword [ebp - 0x1c], 0xb7f45b6
mov dword [ebp - 8], ebx
jmp 0x100184b3
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x30], 0x51328f6c
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x100184a5
mov dword [ebp - 8], ebx
jmp 0x100184ce
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x1b4], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jl 0x100184bd
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x28], 0xddd9cd44
mov eax, dword [ebp - 0x30]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
setg dl
xor eax, eax
test edx, edx
setle al
imul ecx, eax, 0x79a7
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0x14a02569
setne al
mov dword [ebp - 0x2c], eax
mov dword [ebp - 4], ebx
jmp 0x100185d2
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0xc], 0x42628217
mov dword [ebp - 8], ebx
jmp 0x10018549
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x15c], 0xabf8b243
inc dword [ebp - 8]
cmp dword [ebp - 8], 2
jl 0x10018538
mov dword [ebp - 8], ebx
jmp 0x10018565
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xf0], 0xffffffff
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x10018554
inc dword [ebp - 0x20]
inc dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x30], ebx
je 0x10018594
mov eax, dword [ebp - 0xc]
mov ecx, 0xed469f41
cmp ecx, eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x30]
jne 0x10018591
mov eax, dword [ebp - 0x1b0]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0xf0]
mov edx, 0x7d7c869b
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x30]
test eax, eax
mov eax, dword [ebp - 4]
sete cl
sub edx, ecx
xor ecx, ecx
add edx, dword [ebp + eax*4 - 0x30]
mov eax, dword [ebp - 0x24]
cmp edx, eax
setl cl
mov dword [ebp - 0x158], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x10018525
mov dword [ebp - 8], 3
mov dword [ebp - 4], 0xc64a6847
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
jmp 0x10018602
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xb8], 0xfff6
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 4
jl 0x100185f1
mov dword [ebp - 4], ebx
jmp 0x10018681
mov dword [ebp - 0x1c], 0x95031536
mov dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0x20], 0x284868fd
mov dword [ebp - 0x20], 0x95610a1
mov dword [ebp - 0x28], 0xfffffff6
cmp dword [ebp - 0x1c], ebx
jne 0x10018667
mov eax, dword [ebp - 0xc]
xor edx, edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 4]
cmp ecx, eax
setg dl
cmp edx, 0xdae4f9db
sbb eax, eax
neg eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
setg cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x15
jg 0x1001860d
mov dword [ebp - 4], esi
jmp 0x100187c7
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x20], 0xdfc7a8f6
mov dword [ebp - 0x28], 0x736453d1
mov dword [ebp - 8], ebx
jmp 0x100187ba
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100186cb
push 0x222c
push ebx
push 0x15f4
push 0x9e4
call dword [sym.imp.USER32.dll_SystemParametersInfoA]
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xb8]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, 0x55505f45
mov eax, dword [ebp - 0x18]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 8]
setl bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xb8]
cmp ebx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, 4
setne al
imul eax, dword [ebp - 0x18]
cmp eax, esi
mov eax, dword [ebp - 0x18]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xb4]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xb8]
test eax, eax
mov eax, dword [ebp - 0x28]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
xor ebx, ebx
cmp ecx, 0x14a1
je 0x100187af
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x100187b7
push ebx
push 0x2367
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x100187b7
cmp dword [ebp - 0xb4], ebx
jne 0x100187c4
inc dword [ebp - 8]
cmp dword [ebp - 8], 3
jle 0x100186ac
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffee
jg 0x1001868f
mov dword [ebp - 0x34], 5
mov dword [ebp - 0xc], ebx
jmp 0x100187ee
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x84], 0x54ba4fda
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x100187dd
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ebx
jl 0x10018c41
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0xc], ebx
jmp 0x10018818
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x17c], 0xffffffff
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x10018807
mov dword [ebp - 0xc], ebx
jmp 0x10018843
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10018840
mov dword [ebp - 0x28], 0xfffc
mov dword [ebp - 0x28], 0x7e55059b
dec dword [ebp - 0x1c]
jns 0x1001882d
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], ebx
jle 0x10018822
mov dword [ebp - 0x20], 0x9d38951f
mov dword [ebp - 0x24], 0x2d5e48d3
mov dword [ebp - 0x24], 0x19
jmp 0x100188b1
mov dword [ebp - 4], ebx
jmp 0x10018875
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd0], 9
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x10018864
mov dword [ebp - 4], ebx
jmp 0x1001888d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x4c], 0xfffffffc
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x1001887f
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x4c], ebx
jl 0x100188ae
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0xd0], ebx
jne 0x100188ae
mov eax, dword [ebp - 0x24]
dec dword [ebp - 0x4c]
jns 0x1001889a
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
jle 0x1001885f
mov dword [ebp - 0x28], 0x54f618e1
mov dword [ebp - 0xc], 0x9bdba76a
mov dword [ebp - 0xc], ebx
jmp 0x100188db
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x1d0], 7
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x100188ca
mov dword [ebp - 0xc], ebx
jmp 0x100188fe
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100188fb
push 0x12c7
push ebx
call dword [sym.imp.USER32.dll_CharLowerBuffW]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jle 0x100188e6
push 3
mov dword [ebp - 0xc], ebx
pop edi
cmp dword [ebp - 0xc], 2
jge 0x1001891e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x8c], edi
inc dword [ebp - 0xc]
jmp 0x10018909
mov dword [ebp - 0x88], ebx
jmp 0x10018947
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10018941
push ebx
push 0x64b
push 0xdfc
push ebx
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
inc dword [ebp - 0x88]
cmp dword [ebp - 0x88], 5
jg 0x10018926
mov dword [ebp - 0x20], esi
cmp dword [ebp - 0x20], ebx
jl 0x10018beb
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x18], 0xd5b611fb
mov dword [ebp - 0x28], 2
mov dword [ebp - 0x34], ebx
mov dword [ebp - 4], ebx
jmp 0x10018989
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x168], 0xb999fb02
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018978
mov dword [ebp - 4], ebx
jmp 0x100189a4
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x18c], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], 4
jl 0x10018993
mov dword [ebp - 0x24], ebx
jmp 0x10018b19
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 4], esi
mov dword [ebp - 4], 0x2603
mov dword [ebp - 0x1c], 9
mov dword [ebp - 4], ebx
jmp 0x100189d5
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x50], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jl 0x100189cb
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0xc], 0xfffffff7
jmp 0x10018b0d
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
jmp 0x10018a04
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xa8], edi
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x100189f7
mov dword [ebp - 4], ebx
jmp 0x10018a20
cmp dword [ebp - 0xc], ebx
jg 0x100189ef
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jge 0x100189b2
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
push 8
mov eax, dword [ebp + eax*4 - 0x94]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x5c]
cmp eax, esi
pop eax
setne dl
add edx, eax
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x60]
cmp eax, edx
sete cl
xor edx, edx
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x84]
cmp ecx, eax
mov eax, dword [ebp - 8]
setle dl
mov ecx, dword [ebp + eax*4 - 0x94]
mov eax, 0xc6200d40
imul ecx, edx
sub eax, ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0xc], 0x1928c176
mov dword [ebp - 0xc], ebx
jmp 0x10018bd7
cmp dword [ebp - 0xc], 0xa
jge 0x10018b8e
mov eax, dword [ebp - 8]
xor ecx, ecx
push 8
mov eax, dword [ebp + eax*4 - 0x94]
cmp eax, 0x35a02a90
mov eax, dword [ebp - 0x84]
setg cl
xor ebx, ebx
cmp ecx, 0xf3bc9f
pop ecx
setne bl
inc eax
cmp ecx, eax
push 0
sbb eax, eax
xor edx, edx
neg eax
sub ebx, eax
mov eax, dword [ebp - 0x3c]
cmp ebx, eax
mov eax, dword [ebp - 0x5c]
pop ebx
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x34], ecx
dec dword [ebp - 8]
jns 0x100187ff
jmp 0x10018c44
push 3
pop edi
push 8
mov dword [ebp - 0x10], 0xffffffe9
pop eax
cmp dword [ebp - 0x10], eax
jle 0x10018ec3
mov esi, 0xf118c84b
mov dword [ebp - 0x148], esi
mov dword [ebp - 0x144], esi
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x13c], esi
mov dword [ebp - 8], ebx
jmp 0x10018c8a
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x12c], 0x3342eb90
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10018c79
mov dword [ebp - 8], ebx
jmp 0x10018ca2
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x6c], 0xfffffff7
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x10018c94
push 2
pop edx
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], ebx
jl 0x10018d24
mov dword [ebp - 0x18], 0xfffffffe
mov dword [ebp - 0x18], ebx
jmp 0x10018ccd
mov dword [ebp - 0x3c], 0xa956
cmp dword [ebp - 0x3c], ebx
jne 0x10018cd2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10018cbe
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x12c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x12c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp + eax*4 - 0x12c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x68]
cmp eax, 0x37d02268
mov eax, edx
setge cl
sub eax, ecx
mov dword [ebp - 0x144], eax
dec dword [ebp - 0x68]
jns 0x10018cb2
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x10018eb4
push 0x33a8
push 0x723b
push ebx
push 0x1322
call fcn.1001b0f7
mov dword [ebp - 8], 0x632667a8
add esp, 0x10
mov dword [ebp - 0x28], 0xfffffff8
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], 0x2aa787d3
mov dword [ebp - 4], ebx
jmp 0x10018d7b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x44], 0x99ff
inc dword [ebp - 4]
cmp dword [ebp - 4], 1
jl 0x10018d6d
mov dword [ebp - 4], ebx
jmp 0x10018d97
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x138], 0x91ba8027
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018d86
mov dword [ebp - 4], ebx
jmp 0x10018db2
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xfc], 0xb88dcfd8
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x10018da1
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], ebx
jl 0x10018eb4
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x28], 0xfffffffb
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x28], eax
jl 0x10018e06
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf4], eax
add eax, 0xffff9dd5
je 0x10018e3a
cmp dword [ebp - 0x20], ebx
jne 0x10018eb4
jmp 0x10018e58
mov dword [ebp - 0x18], 0xa
jmp 0x10018e52
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xf4], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffec
jge 0x10018e43
cmp dword [ebp - 0xfc], ebx
jne 0x10018e9d
mov eax, dword [ebp - 0x18]
dec eax
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x138], eax
je 0x10018e87
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xf4]
imul ecx, eax
cmp dword [ebp - 0x20], ecx
jle 0x10018e87
xor ecx, ecx
inc ecx
jmp 0x10018e89
mov ecx, ebx
xor eax, eax
cmp ecx, 0xffff
setne al
cmp eax, dword [ebp - 0x20]
jne 0x10018e9d
mov ecx, ebx
jmp 0x10018ea0
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0xf4]
sub ecx, eax
mov dword [ebp - 0x18], ecx
dec dword [ebp - 8]
jns 0x10018dc3
inc dword [ebp - 0x10]
push 8
pop eax
cmp dword [ebp - 0x10], eax
jg 0x10018c5c
mov eax, dword [ebp - 0x100]
mov ecx, 0x3e8
cdq
idiv ecx
mov ecx, dword [ebp - 0x110]
mov esi, edx
mov edi, eax
call fcn.10017b47
add eax, esi
add eax, edi
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret