Function at 0x10008845
Capabilities:
Check for time delay via queryperformancecounter
Clear file content
Contain obfuscated stackstrings
Delete registry key
Extract resource via kernel32 functions
Get common file path
Get file system object information
Get geographical location
Get memory capacity
Parse pe header
Query environment variable
Query or enumerate registry value
Resume thread
Start service
Suspend thread

Disassembly:
mov eax, 0x10079bd3
call fcn.10078dd8
mov eax, 0x1694
call fcn.10075590
mov dword [ebp - 0x34], 0xfffffffe
xor eax, eax
push ebx
mov ebx, 0x51328f6c
mov byte [ebp - 0x71], dl
mov dword [ebp - 0x54], ebx
inc eax
mov dword [ebp - 0x50], 0x5dc1b6ea
mov dword [ebp - 0x48], 0xfffffff6
mov dword [ebp - 0x48], 0x8abf8b24
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x48], 0x8bc698dc
mov dword [ebp - 0x48], 0x6702e63
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x4c], eax
xor eax, eax
push esi
push edi
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x10], eax
jmp 0x100088c0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10b4], 0x5c6a81d6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x100088af
mov dword [ebp - 0x34], 0x18
jmp 0x100089ed
mov dword [ebp - 0x8e4], ecx
mov dword [ebp - 0x8e0], ecx
mov dword [ebp - 0x8dc], ecx
mov dword [ebp - 0x8d8], ecx
lea ecx, [ebp - 0xcc0]
push 3
call fcn.10028c09
xor eax, eax
lea ecx, [ebp - 0x100c]
push 4
mov dword [ebp - 4], eax
call fcn.10028c09
xor eax, eax
inc eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10008938
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcc0]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000891c
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10008960
push dword [ebp - 0x18]
lea ecx, [ebp - 0x100c]
call fcn.10028ca7
mov dword [eax], 0x187b35f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10008941
xor eax, eax
cmp dword [ebp - 0x54], eax
jl 0x100089a5
mov eax, dword [ebp - 0x8dc]
mov ecx, 0x5acee617
mov eax, dword [ebp - 0x34]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x8e0]
mov eax, dword [ebp - 0x50]
cmp eax, ecx
mov eax, dword [ebp - 0x8dc]
setne dl
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x54]
jge 0x1000899f
mov eax, dword [ebp - 0x54]
xor eax, eax
mov edi, eax
jmp 0x100089aa
xor eax, eax
lea edi, [eax + 1]
push 2
lea ecx, [ebp - 0xcc0]
call fcn.10028ca7
mov ecx, dword [ebp - 0x34]
mov esi, eax
xor eax, eax
cmp edi, 0xfffffffa
setg al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x100c]
setne dl
mov dword [esi], edx
dec dword [ebp - 0x4c]
call fcn.10028c8b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc0]
call fcn.10028c8b
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffffb
mov ecx, 0xadacd7d3
jle 0x100088d4
mov dword [ebp - 0x34], 0xfffffffe
xor eax, eax
mov dword [ebp - 0x54], ebx
inc eax
mov dword [ebp - 0x50], 0x5dc1b6ea
mov dword [ebp - 0x48], 0xfffffff6
mov dword [ebp - 0x48], 0x8abf8b24
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x48], 0x8bc698dc
mov dword [ebp - 0x48], 0x6702e63
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10008a55
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x113c], 0x5c6a81d6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10008a44
push 2
mov dword [ebp - 0x34], 0x18
pop ebx
cmp dword [ebp - 0x34], 0xfffffffb
jg 0x10008b8f
mov dword [ebp - 0x8c4], ecx
mov dword [ebp - 0x8c0], ecx
mov dword [ebp - 0x8bc], ecx
mov dword [ebp - 0x8b8], ecx
lea ecx, [ebp - 0xe58]
push 3
call fcn.10028c09
push 4
lea ecx, [ebp - 0x123c]
mov dword [ebp - 4], ebx
call fcn.10028c09
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10008ad1
push dword [ebp - 0x18]
lea ecx, [ebp - 0xe58]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10008ab5
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10008af9
push dword [ebp - 0x18]
lea ecx, [ebp - 0x123c]
call fcn.10028ca7
mov dword [eax], 0x187b35f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10008ada
xor eax, eax
cmp dword [ebp - 0x54], eax
jl 0x10008b3e
mov eax, dword [ebp - 0x8bc]
mov ecx, 0x5acee617
mov eax, dword [ebp - 0x34]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x8c0]
mov eax, dword [ebp - 0x50]
cmp eax, ecx
mov eax, dword [ebp - 0x8bc]
setne dl
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x54]
jge 0x10008b38
mov eax, dword [ebp - 0x54]
xor eax, eax
mov edi, eax
jmp 0x10008b43
xor eax, eax
lea edi, [eax + 1]
push ebx
lea ecx, [ebp - 0xe58]
call fcn.10028ca7
mov ecx, dword [ebp - 0x34]
mov esi, eax
xor eax, eax
cmp edi, 0xfffffffa
setg al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x123c]
setne dl
mov dword [esi], edx
dec dword [ebp - 0x4c]
call fcn.10028c8b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe58]
call fcn.10028c8b
dec dword [ebp - 0x34]
mov ecx, 0xadacd7d3
jmp 0x10008a67
mov dword [ebp - 0x18], 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x1c], 0xe2e4ed38
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10008bc1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa20], 0xa810d21d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10008ba8
xor eax, eax
push 7
mov dword [ebp - 0x18], eax
pop edi
cmp dword [ebp - 0x18], edi
jle 0x10008c23
xor esi, esi
inc esi
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10008bf8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x117c], edi
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10008bde
xor esi, esi
xor eax, eax
inc esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10008c1b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10008c16
push 0x296
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10008c00
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jg 0x10008bcf
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10008ca7
jmp 0x10008c2f
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xa20], eax
je 0x10008c4c
mov eax, dword [ebp - 0xa18]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa1c]
mov ecx, dword [ebp - 0xa1c]
xor edx, edx
mov eax, dword [ebp - 0x10]
add eax, ecx
mov ecx, dword [ebp - 0x18]
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x715e
setle al
inc eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10008ca2
push 0x26dd
push eax
push 0x2652
push 0x175b
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
dec dword [ebp - 0x18]
jns 0x10008c2d
push ebx
lea ecx, [ebp - 0xa38]
call fcn.10028c09
mov dword [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x24], 0xa66fe7d8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10008ce5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa38]
call fcn.10028ca7
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10008ccb
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
xor ebx, ebx
inc ebx
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x10008d3c
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10008d12
push 0xcd
push 0xfff
call edi
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa38]
call fcn.10028ca7
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa38]
mov esi, eax
call fcn.10028ca7
mov ecx, dword [esi]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x24]
pop eax
jns 0x10008cf6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10028c8b
push 7
mov dword [ebp - 0x34], 0xa6de
lea ecx, [ebp - 0xcd8]
pop eax
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x44], eax
xor eax, eax
push 2
mov dword [ebp - 0x20], 0x9e885dc1
pop esi
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], ebx
push 4
call fcn.10028c09
push 5
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10008da5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcd8]
call fcn.10028ca7
mov dword [eax], 0x15db4c2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10008d8e
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x44]
cmp eax, 0xa37b187b
jae 0x10008df7
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10008df9
lea ecx, [eax + 1]
jmp 0x10008dfb
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jne 0x10008e33
cmp dword [ebp - 0x10], eax
jne 0x10008e33
mov ecx, eax
jmp 0x10008e38
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x2c]
mov edx, 0xbc1f9c85
push 0xfffffffffffffff9
sub ecx, eax
mov ebx, 0xffff
pop eax
je 0x10008e5d
xor eax, eax
mov dword [ebp - 0x1c], 0x7e12fd89
mov dword [ebp - 0x1c], eax
jmp 0x10008f3f
mov dword [ebp - 0x24], esi
xor ecx, ecx
mov dword [ebp - 0x44], 8
xor esi, esi
mov dword [ebp - 0x1c], eax
inc esi
mov dword [ebp - 0x50], 0x4cde8b73
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
cmp eax, esi
push 5
setg cl
sub ecx, 0xec499e98
neg ecx
pop eax
sbb ecx, ecx
inc ecx
cmp eax, ecx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
jns 0x10008e9c
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp eax, 0xfe21
setne cl
sub ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x34]
imul eax, ecx, 0xfffffff9
xor ecx, ecx
cmp ecx, eax
sbb eax, eax
inc eax
cmp edx, eax
mov eax, dword [ebp - 0x44]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
sub edx, eax
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x20], ebx
jae 0x10008edf
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10008f0a
cmp dword [ebp - 0x10], eax
jne 0x10008f0a
mov ecx, eax
jmp 0x10008f0f
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x18], 0xb150
cmp eax, ecx
jl 0x10008f2b
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10008f2b
mov edx, eax
jmp 0x10008f30
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x50], ecx
push 3
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10008f75
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jg 0x10008f70
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcd8]
call fcn.10028ca7
mov dword [eax], 0xf7f2bfcf
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jle 0x10008f52
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10008f4a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd8]
call fcn.10028c8b
mov dword [ebp - 0x34], 0xfffffffe
lea ecx, [ebp - 0xa50]
mov eax, 0xa5d6c05b
mov dword [ebp - 0x54], 0x51328f6c
mov dword [ebp - 0x728], eax
xor ebx, ebx
mov dword [ebp - 0x724], eax
inc ebx
mov dword [ebp - 0x720], eax
mov dword [ebp - 0x71c], eax
mov dword [ebp - 0x10], 0x7eede0b4
push ebx
call fcn.10028c09
push 6
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10008ff9
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa50]
call fcn.10028ca7
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10008fd8
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], eax
jl 0x100090fc
mov dword [ebp - 0x20], 0xc891c553
mov dword [ebp - 0x50], 0xe491ba6b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x100090f0
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x728], 0xa1e1c5a3
ja 0x10009045
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x1000905e
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x728], 0
je 0x1000905c
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
jmp 0x10009060
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xa50]
call fcn.10028ca7
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x20]
setne cl
cmp ebx, ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], eax
jne 0x10009091
cmp dword [ebp - 0x1c], eax
je 0x10009093
mov eax, ebx
mov dword [ebp - 0x50], eax
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x728]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x728]
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
setle bl
xor edx, edx
cmp eax, ecx
setle dl
xor eax, eax
cmp ebx, edx
setle al
imul eax, dword [ebp - 0x10]
test eax, eax
je 0x100090db
xor eax, eax
lea ecx, [ebp - 0xa50]
push eax
call fcn.10028ca7
xor eax, eax
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
push 1
pop ebx
jle 0x10009024
dec dword [ebp - 0x10]
push 1
pop ebx
jns 0x10009009
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009113
push 0x2470
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa50]
call fcn.10028c8b
mov dword [ebp - 0x50], 0x5dc1b6ea
xor eax, eax
mov dword [ebp - 0x48], 0xfffffff6
inc eax
mov dword [ebp - 0x48], 0x8abf8b24
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x48], 0x8bc698dc
mov dword [ebp - 0x48], 0x6702e63
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10009171
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xffc], 0x5c6a81d6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10009160
mov dword [ebp - 0x34], 0x18
cmp dword [ebp - 0x34], 0xfffffffb
jg 0x100092b7
mov ebx, 0xadacd7d3
mov dword [ebp - 0x8a4], ebx
lea ecx, [ebp - 0xf24]
mov dword [ebp - 0x8a0], ebx
mov dword [ebp - 0x89c], ebx
mov dword [ebp - 0x898], ebx
push 3
call fcn.10028c09
push 7
pop eax
push 4
lea ecx, [ebp - 0x101c]
mov dword [ebp - 4], eax
call fcn.10028c09
xor eax, eax
mov byte [ebp - 4], 8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100091f2
push dword [ebp - 0x18]
lea ecx, [ebp - 0xf24]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100091d6
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000921a
push dword [ebp - 0x18]
lea ecx, [ebp - 0x101c]
call fcn.10028ca7
mov dword [eax], 0x187b35f1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100091fb
xor eax, eax
cmp dword [ebp - 0x54], eax
jl 0x1000925f
mov eax, dword [ebp - 0x89c]
mov ecx, 0x5acee617
mov eax, dword [ebp - 0x34]
xor edx, edx
sub ecx, eax
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x8a0]
mov eax, dword [ebp - 0x50]
cmp eax, ecx
mov eax, dword [ebp - 0x89c]
setne dl
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x54]
jge 0x10009259
mov eax, dword [ebp - 0x54]
xor eax, eax
mov edi, eax
jmp 0x10009264
xor eax, eax
lea edi, [eax + 1]
push 2
lea ecx, [ebp - 0xf24]
call fcn.10028ca7
mov ecx, dword [ebp - 0x34]
mov esi, eax
xor eax, eax
cmp edi, 0xfffffffa
setg al
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x101c]
setne dl
mov dword [esi], edx
dec dword [ebp - 0x4c]
call fcn.10028c8b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf24]
call fcn.10028c8b
dec dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0xfffffffb
jle 0x1000918f
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
push 2
pop esi
push esi
lea ecx, [ebp - 0x4cc]
call fcn.10028c09
push 9
pop eax
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0xfffffff7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100092fb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x4cc]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100092e0
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009322
push 0x1aec
push eax
push 0x1d1b
push eax
push 0x1fe1
push 0x16c
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor eax, eax
xor ebx, ebx
inc ebx
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], eax
jl 0x100094ef
mov dword [ebp - 0x44], 0x532bb11a
lea ecx, [ebp - 0xa68]
push ebx
call fcn.10028c09
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009376
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa68]
call fcn.10028ca7
mov dword [eax], 0x71808adc
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10009352
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x100094d2
mov dword [ebp - 0x20], 0xf0dc4b63
lea ecx, [ebp - 0x4cc]
mov dword [ebp - 0x1c], 0x6f4dad24
push dword [ebp - 0x44]
call fcn.10028ca7
push dword [ebp - 0x34]
xor ebx, ebx
lea ecx, [ebp - 0x4cc]
cmp dword [eax], ebx
setne bl
call fcn.10028ca7
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4cc]
mov eax, dword [ebp - 0x44]
xor eax, eax
inc eax
push eax
call fcn.10028ca7
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4cc]
xor eax, eax
mov dword [ebp - 0x38], ebx
push eax
call fcn.10028ca7
mov ecx, dword [ebp - 0x34]
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xa68]
setne dl
xor ebx, ebx
inc ebx
cmp ebx, edx
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10028ca7
mov dword [eax], esi
mov eax, dword [ebp - 0x38]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], eax
jl 0x100094c9
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], eax
jmp 0x10009441
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000943e
push 0x1425
push eax
push eax
push eax
push 0x11bf
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1000941f
mov dword [ebp - 0x20], eax
jmp 0x100094bb
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jg 0x100094b8
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4cc]
call fcn.10028ca7
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x34]
cmp eax, ecx
lea ecx, [ebp - 0x4cc]
setge dl
mov dword [ebp - 0x1c], edx
push dword [ebp - 0x20]
call fcn.10028ca7
mov esi, eax
lea ecx, [ebp - 0xa68]
xor eax, eax
push eax
call fcn.10028ca7
xor edx, edx
mov ecx, dword [eax]
add ecx, 0x4ed9d6ac
cmp dword [esi], ecx
sete dl
xor eax, eax
mov dword [ebp - 0x1c], edx
inc eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1000945a
xor ebx, ebx
xor eax, eax
inc ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1000944b
dec dword [ebp - 0x38]
jns 0x10009413
dec dword [ebp - 0x44]
jns 0x10009382
push 9
pop eax
lea ecx, [ebp - 0xa68]
mov byte [ebp - 4], al
call fcn.10028c8b
dec dword [ebp - 0x34]
jns 0x10009331
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4cc]
call fcn.10028c8b
mov dword [ebp - 0x18], 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x1c], 0xe2e4ed38
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10009530
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xa80], 0xa810d21d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10009517
xor eax, eax
push 7
mov dword [ebp - 0x18], eax
pop ecx
jmp 0x1000958a
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009561
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1000], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10009547
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10009587
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000957f
push 0x296
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10009569
push 7
pop ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jg 0x10009538
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x10009612
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xa80], eax
je 0x100095b4
mov eax, dword [ebp - 0xa78]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa7c]
mov ecx, dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0xa7c]
add eax, ecx
mov ecx, dword [ebp - 0x18]
add ecx, eax
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x715e
setle al
inc eax
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x1c], eax
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000960a
push 0x26dd
push eax
push 0x2652
push 0x175b
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
dec dword [ebp - 0x18]
push 0
pop eax
jns 0x10009597
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10009639
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1054], 0x26bdde0b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10009621
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x1000964f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1054], 0
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jl 0x1000963e
mov dword [ebp - 0x34], 0xffffffff
lea ecx, [ebp - 0xcf0]
push 0xfffffffffffffff9
mov dword [ebp - 0x20], 0x8adae8c9
pop eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x50], 0x87e3bc4a
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x50], 0xc1031c36
push esi
call fcn.10028c09
xor eax, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x100096b4
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1194], 0xfffffff8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000969b
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x100096d0
push dword [ebp - 0x18]
lea ecx, [ebp - 0xcf0]
call fcn.10028ca7
mov dword [eax], 0x9ed7d413
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100096b9
mov eax, dword [ebp - 0x20]
xor edx, edx
xor eax, eax
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
cmp eax, 0x3524
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x118c]
push ebx
setne cl
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0xcf0]
setle dl
mov dword [ebp - 0x118c], edx
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
sub eax, 0x5b36
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x50], eax
call fcn.10028ca7
mov edx, dword [ebp - 0x50]
mov esi, eax
mov ecx, dword [ebp - 0x20]
xor eax, eax
cmp ecx, edx
mov ecx, dword [ebp - 0x20]
setle al
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
or dword [ebp - 4], 0xffffffff
sub ecx, dword [ebp - 0x20]
mov dword [esi], ecx
lea ecx, [ebp - 0xcf0]
call fcn.10028c8b
push 0xfffffffffffffffe
pop eax
push 0xfffffffffffffffa
mov dword [ebp - 0x38], eax
lea ecx, [ebp - 0xe70]
pop esi
mov dword [ebp - 0x20], eax
push 7
mov dword [ebp - 0x54], 0xfff6
pop eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x4c], 0x8ef34ea8
mov dword [ebp - 0x40], eax
push ebx
call fcn.10028c09
xor eax, eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x100097e0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0x4a6847df
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100097c2
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1000980c
push dword [ebp - 0x18]
lea ecx, [ebp - 0xe70]
call fcn.10028ca7
mov dword [eax], 0x4ad4db1d
xor eax, eax
inc dword [ebp - 0x18]
inc eax
cmp dword [ebp - 0x18], eax
jl 0x100097e8
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x1000987b
push 9
pop ecx
push 5
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x1c], 0xb9503153
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x10009873
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0xac]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x50]
cmp ecx, eax
setl dl
mov dword [ebp - 0x50], edx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xac], ecx
mov dword [ebp - 0x1c], ecx
dec dword [ebp - 0x10]
jns 0x10009832
push 9
pop ecx
push 5
xor eax, eax
pop edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1000981a
cmp dword [ebp - 0xac], eax
je 0x100098c4
inc dword [ebp - 0x54]
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x20], eax
jg 0x100098b2
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x4c]
cmp eax, esi
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
je 0x100098b4
mov eax, ebx
add eax, 0xef90
cmp eax, dword [ebp - 0x24]
jge 0x100098c2
mov eax, ebx
jmp 0x100098c4
xor eax, eax
add eax, 9
neg eax
sbb eax, eax
neg eax
neg eax
mov dword [ebp - 0xac], eax
cmp eax, ebx
ja 0x100098dc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0xe70]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10028ca7
mov ecx, dword [ebp - 0x54]
or dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
lea ecx, [ebp - 0xe70]
call fcn.10028c8b
push 2
pop esi
mov dword [ebp - 0x40], 0x51328f6c
lea ecx, [ebp - 0xa98]
push esi
call fcn.10028c09
mov dword [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x24], 0xa66fe7d8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000994c
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa98]
call fcn.10028ca7
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10009932
xor eax, eax
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x1000999d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009970
push 0xcd
push 0xfff
call edi
push eax
call dword [sym.imp.USER32.dll_EnableScrollBar]
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa98]
call fcn.10028ca7
push dword [ebp - 0x24]
lea ecx, [ebp - 0xa98]
mov esi, eax
call fcn.10028ca7
mov ecx, dword [esi]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x24]
pop eax
jns 0x10009954
push 2
pop esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa98]
call fcn.10028c8b
mov dword [ebp - 0x50], 0x5dc1b6ea
lea ecx, [ebp - 0xd08]
mov dword [ebp - 0x34], 0xa6de
push 7
mov dword [ebp - 0x38], 0xfffffff7
pop eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x20], 0x9e885dc1
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x18], ebx
push 4
call fcn.10028c09
xor eax, eax
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x10], eax
jmp 0x10009a0b
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd08]
call fcn.10028ca7
mov dword [eax], 0x15db4c2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100099f4
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x44]
cmp eax, 0xa37b187b
jae 0x10009a5d
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10009a5f
lea ecx, [eax + 1]
jmp 0x10009a61
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setge dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jne 0x10009a99
cmp dword [ebp - 0x10], eax
jne 0x10009a99
mov ecx, eax
jmp 0x10009a9e
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x2c]
sub ecx, eax
je 0x10009ab6
xor eax, eax
mov dword [ebp - 0x1c], 0x7e12fd89
mov dword [ebp - 0x1c], eax
jmp 0x10009ba5
mov dword [ebp - 0x24], esi
xor ecx, ecx
push 0xfffffffffffffff9
mov dword [ebp - 0x44], 8
xor esi, esi
pop eax
mov dword [ebp - 0x1c], eax
inc esi
mov dword [ebp - 0x50], 0x4cde8b73
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
cmp eax, esi
push 5
setg cl
sub ecx, 0xec499e98
neg ecx
pop eax
sbb ecx, ecx
inc ecx
cmp eax, ecx
sbb eax, eax
inc eax
add eax, dword [ebp - 0x18]
jns 0x10009af8
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp eax, 0xfe21
setne cl
sub ecx, dword [ebp - 0x24]
imul ecx, dword [ebp - 0x34]
imul eax, ecx, 0xfffffff9
xor ecx, ecx
cmp ecx, eax
mov ecx, 0xbc1f9c85
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x44]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setge dl
sub edx, eax
mov eax, 0xffff
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x20], eax
jae 0x10009b45
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10009b70
cmp dword [ebp - 0x10], eax
jne 0x10009b70
mov ecx, eax
jmp 0x10009b75
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
imul eax, dword [ebp - 0x18], 0xb150
cmp eax, ecx
jl 0x10009b91
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x10009b91
mov edx, eax
jmp 0x10009b96
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x50], ecx
push 3
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x10009bdb
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], ebx
jg 0x10009bd6
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd08]
call fcn.10028ca7
mov dword [eax], 0xf7f2bfcf
inc dword [ebp - 0x44]
cmp dword [ebp - 0x44], ebx
jle 0x10009bb8
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10009bb0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd08]
call fcn.10028c8b
mov eax, 0xa5d6c05b
mov dword [ebp - 0x48], 0xfffffff6
mov dword [ebp - 0x73c], eax
lea ecx, [ebp - 0xab0]
mov dword [ebp - 0x738], eax
xor ebx, ebx
mov dword [ebp - 0x734], eax
inc ebx
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x10], 0x7eede0b4
push ebx
call fcn.10028c09
xor eax, eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009c59
push dword [ebp - 0x10]
lea ecx, [ebp - 0xab0]
call fcn.10028ca7
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10009c38
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], eax
jl 0x10009d5c
mov dword [ebp - 0x20], 0xc891c553
mov dword [ebp - 0x50], 0xe491ba6b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x10009d50
mov dword [ebp - 0x1c], 0xfffffffd
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x73c], 0xa1e1c5a3
ja 0x10009ca5
xor eax, eax
cmp dword [ebp - 0x20], eax
je 0x10009cbe
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x73c], 0
je 0x10009cbc
xor eax, eax
xor ebx, ebx
inc ebx
lea esi, [eax + 1]
jmp 0x10009cc0
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xab0]
call fcn.10028ca7
xor ecx, ecx
cmp esi, dword [eax]
mov eax, dword [ebp - 0x20]
setne cl
cmp ebx, ecx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], eax
jne 0x10009cf1
cmp dword [ebp - 0x1c], eax
je 0x10009cf3
mov eax, ebx
mov dword [ebp - 0x50], eax
xor ebx, ebx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x73c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x73c]
cmp ecx, eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x50]
setle bl
xor edx, edx
cmp eax, ecx
setle dl
xor eax, eax
cmp ebx, edx
setle al
imul eax, dword [ebp - 0x10]
test eax, eax
je 0x10009d3b
xor eax, eax
lea ecx, [ebp - 0xab0]
push eax
call fcn.10028ca7
xor eax, eax
mov dword [ebp - 0x50], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
push 1
pop ebx
jle 0x10009c84
dec dword [ebp - 0x10]
push 1
pop ebx
jns 0x10009c69
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009d73
push 0x2470
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindow]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab0]
call fcn.10028c8b
mov dword [ebp - 0x48], 0x8abf8b24
xor eax, eax
mov dword [ebp - 0x50], 0xa136951a
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x48], 0x9c4ddb84
push 2
mov dword [ebp - 0x28], eax
pop ecx
cmp dword [ebp - 0x28], ecx
jge 0x10009dc3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbf8], 0xfffffffb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10009dab
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ecx
jge 0x10009de3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x159c], 0xfffffffa
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10009dcb
xor eax, eax
xor ebx, ebx
mov dword [ebp - 0x28], eax
inc ebx
cmp dword [ebp - 0x28], 3
jge 0x10009dfe
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x14d0], ebx
inc dword [ebp - 0x28]
jmp 0x10009de9
mov eax, dword [ebp - 0xbf8]
lea ecx, [ebp - 0x1624]
movdqa xmm0, xmmword [0x10007930]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0xbf8]
neg eax
movdqu xmmword [ebp - 0x1258], xmm0
sbb eax, eax
inc eax
mov dword [ebp - 0x14cc], eax
lea eax, [ebp - 0x1248]
push eax
lea eax, [ebp - 0x1258]
mov dword [ebp - 0x48], 0xfffffff7
push eax
call fcn.10028cb6
lea ecx, [ebp - 0x1f6]
mov esi, eax
call fcn.10008842
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x102c]
push dword [esi]
call fcn.10028c65
mov dword [ebp - 4], 0x10
or esi, 0xffffffff
mov dword [ebp - 0x38], esi
mov eax, 0xffff
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x50], 4
mov dword [ebp - 0x48], 0x36fbc6a6
mov dword [ebp - 0x38], eax
jmp 0x10009f4c
mov dword [ebp - 0x24], 0xdba33992
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x48], 0xfffffffb
mov dword [ebp - 0x48], 0xe708bee
mov dword [ebp - 0x48], 0xf744ed25
mov dword [ebp - 0x48], 0x7854c3eb
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10009f49
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x48], 0xed55c59c
mov dword [ebp - 0x50], ebx
cmp dword [ebp - 0x50], eax
jne 0x10009efd
push ebx
lea ecx, [ebp - 0x102c]
call fcn.10028ca7
cmp dword [eax], 0
jne 0x10009efb
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x50], 0x1aa435c5
dec dword [ebp - 0x50]
jmp 0x10009f1c
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10009f16
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x10009f13
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jle 0x10009f02
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x10009f3d
push 0x20c8
push eax
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolygon]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
push 0
pop eax
jle 0x10009ec9
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
jle 0x10009e96
lea ecx, [ebp - 0x102c]
mov dword [ebp - 4], esi
call fcn.10028c8b
mov dword [ebp - 0x48], 0x8bc698dc
xor eax, eax
mov dword [ebp - 0x48], 0x6702e63
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x48], 0xfcb50bf3
mov dword [ebp - 0x48], 0x60f951fe
push 2
pop esi
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x48], 0xfe57
mov dword [ebp - 0x50], 0x31a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10009fb9
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1524], 0x876942a1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10009fa1
xor eax, eax
inc dword [ebp - 0x50]
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x20], 0xd29be1d9
mov dword [ebp - 0x34], 0x390f3bd7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10009ff4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x60], 0x648261f
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x10009fd9
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x20], eax
jmp 0x1000a008
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x60], 0
jne 0x1000a00d
inc dword [ebp - 0x20]
xor eax, eax
cmp dword [ebp - 0x20], eax
jle 0x10009ff9
mov eax, dword [ebp - 0x60]
xor eax, eax
cmp dword [ebp - 0x60], eax
jne 0x1000a02c
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
xor eax, eax
cmp dword [ebp - 0x60], eax
jne 0x1000a050
cmp dword [ebp - 0x34], eax
je 0x1000a053
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000a09b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x3e0], 6
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000a07d
xor ebx, ebx
xor eax, eax
inc ebx
inc dword [ebp - 0x3e0]
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a0b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
xor eax, eax
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x4c], 0xffffffff
mov dword [ebp - 0x50], 0x5f7626a9
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x17
jg 0x1000a193
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], 0xfffffffa
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000a110
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x147c], 0x3d3b0cf5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000a0f7
xor eax, eax
cmp dword [ebp - 0x54], eax
je 0x1000a144
cmp dword [ebp - 0x20], eax
jne 0x1000a11e
mov edx, eax
jmp 0x1000a123
xor eax, eax
lea edx, [eax + 1]
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xdc41
setge al
mov dword [ebp - 0x1474], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24], 0xfff7
test eax, eax
je 0x1000a15b
xor eax, eax
cmp dword [ebp - 0x4c], eax
je 0x1000a15d
lea ecx, [eax + 1]
jmp 0x1000a15f
xor eax, eax
mov ecx, eax
xor eax, eax
cmp ecx, 0x2b3b7bed
mov ecx, 0x1c1d99eb
setl al
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
sub ecx, eax
push 0
mov dword [ebp - 0x50], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x17
pop eax
push 1
pop ebx
jle 0x1000a0da
mov dword [ebp - 0x20], 8
jmp 0x1000a1fb
mov dword [ebp - 0x50], 0xf30385d0
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a1f5
push 0x1c64
push 0x260c
push 0x1fc0
push 0x7d3
push 0x854
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x2473
push 0x1204
push 0x1d9a
push 0x16ae
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
xor eax, eax
inc dword [ebp - 0x50]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe8
jl 0x1000a19c
mov ecx, 0x3b26bdde
mov ebx, 0xfaa23240
mov dword [ebp - 0x21c], ecx
mov edi, 0x8cdf8abf
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x214], ecx
mov dword [ebp - 0x210], ecx
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], 0x82a74db5
mov dword [ebp - 0x218], 0xffffffe3
cmp dword [ebp - 0x218], 0x15
jne 0x1000a3b2
push esi
lea ecx, [ebp - 0x5a0]
call fcn.10028c09
mov dword [ebp - 4], 0x11
push 9
pop eax
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1000a291
push dword [ebp - 0x10]
lea ecx, [ebp - 0x5a0]
call fcn.10028ca7
mov dword [eax], 0xfffffffb
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1000a273
xor eax, eax
push eax
lea ecx, [ebp - 0x5a0]
call fcn.10028ca7
cmp dword [eax], 0
je 0x1000a2ec
xor eax, eax
lea ecx, [ebp - 0x5a0]
push eax
call fcn.10028ca7
xor ecx, ecx
cmp dword [eax], 0x8ea2
mov eax, dword [ebp - 0x210]
setge cl
add eax, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x218]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x210]
setle dl
imul eax, edx
cmp edi, eax
sbb eax, eax
neg eax
sub eax, 8
je 0x1000a2ec
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x218]
xor eax, eax
cmp dword [ebp - 0x218], eax
je 0x1000a306
cmp dword [ebp - 0x50], eax
je 0x1000a306
inc eax
mov edi, eax
jmp 0x1000a30b
mov edi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x5a0]
call fcn.10028ca7
mov ecx, dword [ebp - 0x218]
mov esi, eax
mov edx, dword [ebp - 0x218]
xor eax, eax
cmp edi, 0xe465
setle al
imul eax, ecx
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
setne cl
xor ebx, ebx
cmp dword [esi], ecx
lea ecx, [ebp - 0x5a0]
setge bl
xor eax, eax
inc eax
push eax
call fcn.10028ca7
xor ecx, ecx
cmp ebx, dword [eax]
setl cl
xor eax, eax
inc eax
mov dword [ebp - 0x4c], ecx
push eax
lea ecx, [ebp - 0x5a0]
call fcn.10028ca7
mov edx, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [eax], edx
mov eax, dword [ebp - 0x50]
cmp edx, eax
setge cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x5a0]
or dword [ebp - 4], 0xffffffff
call fcn.10028c8b
inc dword [ebp - 0x218]
mov ebx, 0xfaa23240
cmp dword [ebp - 0x218], 0x15
mov edi, 0x8cdf8abf
push 2
pop esi
je 0x1000a249
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000a3c8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1010], 0x5c6a81d6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000a3b7
push esi
lea ecx, [ebp - 0x160]
call fcn.10028c09
xor ebx, ebx
mov dword [ebp - 4], 0x12
inc ebx
mov dword [ebp - 0x50], ebx
push 7
pop eax
mov dword [ebp - 0x10], 0xca6c8490
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x1000a40e
push dword [ebp - 0x10]
call fcn.10028ca7
mov dword [eax], 0x304b
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x160]
cmp dword [ebp - 0x10], esi
jl 0x1000a3fd
push ebx
call fcn.10028ca7
xor ebx, ebx
cmp dword [eax], ebx
jne 0x1000a468
xor eax, eax
lea ecx, [ebp - 0x160]
inc eax
push eax
call fcn.10028ca7
mov esi, eax
lea ecx, [ebp - 0x160]
xor eax, eax
inc eax
push eax
call fcn.10028ca7
mov ecx, dword [eax]
imul ecx, dword [esi]
test ecx, ecx
jne 0x1000a468
xor eax, eax
lea ecx, [ebp - 0x160]
inc eax
push eax
call fcn.10028ca7
cmp dword [eax], ebx
jne 0x1000a468
xor eax, eax
mov edi, eax
inc eax
jmp 0x1000a46d
xor eax, eax
inc eax
mov edi, eax
push eax
lea ecx, [ebp - 0x160]
call fcn.10028ca7
xor ebx, ebx
lea ecx, [ebp - 0x160]
inc ebx
push ebx
call fcn.10028ca7
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x160]
push ebx
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x160]
call fcn.10028ca7
xor eax, eax
cmp dword [ebp - 0x50], eax
je 0x1000a4c4
push eax
lea ecx, [ebp - 0x160]
call fcn.10028ca7
cmp dword [eax], 0
je 0x1000a4c2
xor eax, eax
inc eax
mov esi, eax
jmp 0x1000a4c9
xor eax, eax
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x160]
call fcn.10028ca7
xor ecx, ecx
cmp esi, dword [eax]
setg cl
mov dword [ebp - 0x10], ecx
cmp edi, dword [ebp - 0x10]
jl 0x1000a519
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000a4fb
push 0x6b6
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
xor ebx, ebx
inc ebx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x160]
call fcn.10028c8b
mov dword [ebp - 0x38], 0x18
jmp 0x1000b1e0
xor ebx, ebx
mov dword [ebp - 0x44], 0x20578cca
inc ebx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x44]
push ebx
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x160]
mov eax, dword [eax]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
call fcn.10028ca7
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
jmp 0x1000a4fe
mov dword [ebp - 0x8b4], eax
mov dword [ebp - 0x8b0], eax
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0x8a8], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x50], 0x6d6dbc1c
push 3
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x1000a5b0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1494], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1000a598
xor eax, eax
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], eax
jl 0x1000a61b
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a5da
push 0x400
push 0x1b7f
push eax
push 0x2219
push eax
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a616
push 0x18c2
push 0xa85
push 0x173d
push 0x1025
push 0x89f
push eax
push eax
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawStateW]
xor eax, eax
dec dword [ebp - 0x2c]
jns 0x1000a5b8
push 2
mov dword [ebp - 0x2c], 0x19
pop edi
cmp dword [ebp - 0x2c], 0x1b
jg 0x1000a71e
movdqa xmm0, xmmword [0x100079c0]
lea eax, [ebp - 0x1338]
push eax
lea eax, [ebp - 0x1348]
push eax
lea ecx, [ebp - 0x15ec]
movdqu xmmword [ebp - 0x1348], xmm0
call fcn.10028cb6
lea ecx, [ebp - 0x1e8]
mov esi, eax
call fcn.10008842
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x64c]
push dword [esi]
call fcn.10028c65
xor eax, eax
mov dword [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x64c]
call fcn.10028ca7
and dword [eax], 0
jmp 0x1000a6be
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], al
je 0x1000a6b0
push eax
push eax
push 0x2010
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
push eax
lea ecx, [ebp - 0x64c]
call fcn.10028ca7
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x64c]
push eax
call fcn.10028ca7
cmp dword [eax], 3
jle 0x1000a690
push 3
lea ecx, [ebp - 0x64c]
call fcn.10028ca7
mov ecx, dword [ebp - 0x8b4]
cmp ecx, dword [eax]
jg 0x1000a6ee
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x50], edi
xor edx, edx
mov ecx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x8b4]
cmp ecx, eax
lea ecx, [ebp - 0x64c]
setle dl
mov dword [ebp - 0x1490], edx
or dword [ebp - 4], 0xffffffff
call fcn.10028c8b
inc dword [ebp - 0x2c]
jmp 0x1000a625
mov eax, 0xadacd7d3
lea ecx, [ebp - 0xd20]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0x8d0], eax
mov dword [ebp - 0x8cc], eax
mov dword [ebp - 0x8c8], eax
push 3
call fcn.10028c09
mov dword [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x10], 0x9be1d925
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0x50], 0x3ac
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000a788
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x164c], 0x648261f9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000a76f
xor eax, eax
mov dword [ebp - 0x10], edi
cmp dword [ebp - 0x10], eax
jl 0x1000a7e6
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a7b9
push eax
push eax
push 0x24ce
push eax
push 0x1289
push eax
push 0x54f
push 0x1632
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a7e1
push eax
push 0x24b
push 0x2698
push eax
push 0xa29
push 0x37d
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x1000a790
inc dword [ebp - 0x50]
lea ecx, [ebp - 0x11f4]
push 4
call fcn.10028c09
push edi
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x15
call fcn.10028c09
mov byte [ebp - 4], 0x16
xor eax, eax
mov dword [ebp - 0x20], 0x4cff15cc
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x10], 0x60039c1d
mov dword [ebp - 0x48], 0xcec8
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1000a844
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x17c], 0x8bbca631
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1000a82c
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1000a85a
push dword [ebp - 0x18]
call fcn.10028ca7
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x18]
lea ecx, [ebp - 0x100]
cmp dword [ebp - 0x18], edi
jl 0x1000a849
push ebx
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
mov dword [eax], ebx
call fcn.10028ca7
cmp dword [eax], 0
jl 0x1000a9c3
xor eax, eax
lea ecx, [ebp - 0x100]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0xb11f3813
push ebx
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
mov esi, eax
call fcn.10028ca7
xor edx, edx
push ebx
mov ecx, dword [eax]
mov ecx, dword [ebp + ecx*4 - 0x17c]
mov eax, dword [esi]
mov eax, dword [ebp + eax*4 - 0x17c]
cmp eax, ecx
lea ecx, [ebp - 0x100]
sete dl
mov dword [ebp - 0x50], edx
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x17c]
mov eax, dword [ebp - 0x50]
imul esi, eax
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x17c]
sub esi, eax
mov eax, 0xffff
cmp esi, eax
sbb edi, edi
neg edi
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x17c]
imul esi, edi
call fcn.10028ca7
mov eax, dword [eax]
mov dword [ebp + eax*4 - 0x17c], esi
test esi, esi
je 0x1000a938
mov eax, dword [ebp - 0x17c]
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x100]
xor eax, eax
push eax
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
call fcn.10028ca7
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x100]
push ebx
call fcn.10028ca7
mov ecx, dword [ebp - 0x20]
xor edx, edx
sub ecx, 0x884f
cmp ecx, dword [eax]
setne dl
xor eax, eax
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x20], eax
jmp 0x1000a997
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000a994
push 0x991
call dword [sym.imp.KERNEL32.dll_TlsFree]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1b
jle 0x1000a97e
push ebx
lea ecx, [ebp - 0x100]
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x100]
dec dword [eax]
call fcn.10028ca7
cmp dword [eax], 0
jge 0x1000a882
push 2
pop edi
mov dword [ebp - 0x20], 0xffffffed
jmp 0x1000ab58
movdqa xmm0, xmmword [0x10007920]
lea eax, [ebp - 0x1298]
push eax
lea eax, [ebp - 0x12a8]
push eax
lea ecx, [ebp - 0x156c]
movdqu xmmword [ebp - 0x12a8], xmm0
call fcn.10028cb6
lea ecx, [ebp - 0x1d2]
mov esi, eax
call fcn.10008842
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x42c]
push dword [esi]
call fcn.10028c65
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x42c]
xor eax, eax
mov dword [ebp - 0x54], eax
push ebx
mov dword [ebp - 0x50], 0xd6ca138d
call fcn.10028ca7
cmp dword [eax], 0xfffffff7
jae 0x1000ab07
push ebx
lea ecx, [ebp - 0x42c]
call fcn.10028ca7
push edi
lea ecx, [ebp - 0x42c]
call fcn.10028ca7
push ebx
lea ecx, [ebp - 0x42c]
call fcn.10028ca7
mov ecx, dword [ebp - 0x178]
xor ebx, ebx
cmp dword [eax], ecx
lea ecx, [ebp - 0x100]
sete bl
xor eax, eax
inc eax
push eax
call fcn.10028ca7
xor ecx, ecx
mov edx, dword [eax]
mov eax, dword [ebp - 0x10]
add edx, ebx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1000aaa9
xor ebx, ebx
lea ecx, [ebp - 0x42c]
inc ebx
push ebx
call fcn.10028ca7
cmp dword [eax], 0
je 0x1000aaa9
mov eax, ebx
jmp 0x1000aaab
xor eax, eax
xor ebx, ebx
lea ecx, [ebp - 0x100]
cmp eax, 0xcfb1
setg bl
xor eax, eax
inc eax
push eax
call fcn.10028ca7
mov dword [eax], ebx
xor eax, eax
test ebx, ebx
je 0x1000aad6
cmp dword [ebp - 0x54], eax
je 0x1000aad6
inc eax
mov esi, eax
jmp 0x1000aadb
mov esi, eax
xor eax, eax
inc eax
push eax
lea ecx, [ebp - 0x42c]
call fcn.10028ca7
mov ecx, dword [ebp - 0x54]
sub esi, ecx
xor ecx, ecx
cmp esi, dword [eax]
setge cl
cmp ecx, 0x833686a8
sbb eax, eax
xor ebx, ebx
neg eax
inc ebx
cmp eax, 0x7a64a0f0
jle 0x1000ab13
push ebx
lea ecx, [ebp - 0x42c]
call fcn.10028ca7
mov eax, dword [ebp - 0x54]
lea ecx, [ebp - 0x100]
imul eax, dword [ebp - 0x10]
push ebx
sub eax, 0x8e5e
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x54], eax
mov esi, dword [ebp - 0x54]
call fcn.10028ca7
lea ecx, [ebp - 0x42c]
mov dword [eax], esi
xor eax, eax
cmp esi, 0x7ff9bde6
setle al
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 0x16
call fcn.10028c8b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x17
je 0x1000a9cf
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x15
call fcn.10028c8b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000ab98
push dword [ebp - 0x18]
lea ecx, [ebp - 0xd20]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1000ab7c
xor eax, eax
mov dword [ebp - 0x24], 0xc2e0cf57
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000abb6
push 0x810
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor eax, eax
mov dword [ebp - 0x24], 0xe
jmp 0x1000abe8
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], eax
jmp 0x1000abdf
cmp dword [ebp - 0x10], 0xfffffffd
jle 0x1000abc7
cmp dword [ebp - 0x24], 0x14
jg 0x1000abbf
push 4
mov dword [ebp - 0x18], eax
pop esi
jmp 0x1000ac0d
cmp dword [ebp - 0x18], esi
jl 0x1000abf6
cmp dword [ebp - 0x38], 0xfffffffb
mov eax, 0x3556
jle 0x1000a569
xor eax, eax
lea ecx, [ebp - 0x103c]
mov dword [ebp - 0x10], eax
push ebx
call fcn.10028c09
xor eax, eax
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b232
push dword [ebp - 0x10]
lea ecx, [ebp - 0x103c]
call fcn.10028ca7
and dword [eax], 0
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000b211
xor ebx, ebx
xor eax, eax
inc ebx
push 0xfffffffffffffff9
mov dword [ebp - 0x10], 3
pop esi
jmp 0x1000b257
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b254
push 0x200
call dword [sym.imp.USER32.dll_GetSysColorBrush]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jne 0x1000b23e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x103c]
call fcn.10028c8b
push 2
pop edi
push edi
lea ecx, [ebp - 0x4a0]
call fcn.10028c09
mov dword [ebp - 4], 0x1b
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x1000b2b0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x4a0]
call fcn.10028ca7
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1000b295
xor eax, eax
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b2d7
push 0x1aec
push eax
push 0x1d1b
push eax
push 0x1fe1
push 0x16c
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
xor eax, eax
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], eax
jl 0x1000b49c
mov dword [ebp - 0x44], 0x532bb11a
lea ecx, [ebp - 0xac8]
push ebx
call fcn.10028c09
xor eax, eax
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b328
push dword [ebp - 0x10]
lea ecx, [ebp - 0xac8]
call fcn.10028ca7
mov dword [eax], 0x71808adc
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000b304
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], eax
jl 0x1000b484
mov dword [ebp - 0x20], 0xf0dc4b63
lea ecx, [ebp - 0x4a0]
mov dword [ebp - 0x1c], 0x6f4dad24
push dword [ebp - 0x44]
call fcn.10028ca7
push dword [ebp - 0x38]
xor ebx, ebx
lea ecx, [ebp - 0x4a0]
cmp dword [eax], ebx
setne bl
call fcn.10028ca7
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4a0]
mov eax, dword [ebp - 0x44]
xor eax, eax
inc eax
push eax
call fcn.10028ca7
mov eax, dword [ebp - 0x44]
lea ecx, [ebp - 0x4a0]
xor eax, eax
mov dword [ebp - 0x34], ebx
push eax
call fcn.10028ca7
mov ecx, dword [ebp - 0x38]
xor edx, edx
cmp ecx, dword [eax]
lea ecx, [ebp - 0xac8]
setne dl
xor ebx, ebx
inc ebx
cmp ebx, edx
sbb esi, esi
xor eax, eax
push eax
neg esi
call fcn.10028ca7
mov dword [eax], esi
mov eax, dword [ebp - 0x34]
xor eax, eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], eax
jl 0x1000b47b
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x20], eax
jmp 0x1000b3f3
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b3f0
push 0x1425
push eax
push eax
push eax
push 0x11bf
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatW]
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1000b3d1
mov dword [ebp - 0x20], eax
jmp 0x1000b46d
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jg 0x1000b46a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x4a0]
call fcn.10028ca7
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp eax, ecx
lea ecx, [ebp - 0x4a0]
setge dl
mov dword [ebp - 0x1c], edx
push dword [ebp - 0x20]
call fcn.10028ca7
mov esi, eax
lea ecx, [ebp - 0xac8]
xor eax, eax
push eax
call fcn.10028ca7
xor edx, edx
mov ecx, dword [eax]
add ecx, 0x4ed9d6ac
cmp dword [esi], ecx
sete dl
xor eax, eax
mov dword [ebp - 0x1c], edx
inc eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1000b40c
xor ebx, ebx
xor eax, eax
inc ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1000b3fd
dec dword [ebp - 0x34]
jns 0x1000b3c5
dec dword [ebp - 0x44]
jns 0x1000b334
lea ecx, [ebp - 0xac8]
mov byte [ebp - 4], 0x1b
call fcn.10028c8b
dec dword [ebp - 0x38]
jns 0x1000b2e3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a0]
call fcn.10028c8b
push edi
lea ecx, [ebp - 0x664]
call fcn.10028c09
mov dword [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x50], 0xffffffff
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edi
jge 0x1000b4ea
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x490], 0xffffffff
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1000b4d2
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1000b508
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x758], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x1000b4f3
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1000b524
push dword [ebp - 0x28]
lea ecx, [ebp - 0x664]
call fcn.10028ca7
mov dword [eax], 0x27f7b6fe
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x1000b50d
mov eax, dword [ebp - 0x490]
xor ecx, ecx
mov eax, dword [ebp - 0x490]
cmp eax, ebx
mov eax, dword [ebp - 0x758]
setl cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0x664]
setl bl
xor eax, eax
push eax
call fcn.10028ca7
mov ecx, dword [ebp - 0x490]
xor edx, edx
cmp ecx, ebx
mov ecx, 0xc70bb743
setne dl
cmp ecx, edx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
push eax
lea ecx, [ebp - 0x664]
call fcn.10028ca7
mov eax, dword [eax]
add eax, 0x5d9c7279
cmp eax, dword [ebp - 0x758]
jg 0x1000b59d
xor eax, eax
cmp dword [ebp - 0x758], eax
je 0x1000b59f
xor esi, esi
inc esi
jmp 0x1000b5a1
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x664]
call fcn.10028ca7
cmp esi, 0xf065f4b3
sbb ecx, ecx
xor ebx, ebx
inc ecx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x664]
setle bl
xor eax, eax
push eax
call fcn.10028ca7
xor edx, edx
mov dword [eax], ebx
xor ebx, ebx
mov eax, dword [ebp - 0x490]
inc ebx
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x758]
mov eax, dword [ebp - 0x74c]
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x490]
cmp ecx, eax
lea ecx, [ebp - 0x664]
setg dl
mov dword [ebp - 0x50], edx
or dword [ebp - 4], 0xffffffff
call fcn.10028c8b
mov edi, 0x24a8c6a5
xor eax, eax
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], 0xe2e4ed38
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000b649
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xae0], 0xa810d21d
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000b630
xor eax, eax
push 7
mov dword [ebp - 0x18], eax
pop esi
jmp 0x1000b6a0
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b67a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1020], esi
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000b660
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], eax
jl 0x1000b69d
mov byte [ebp - 0x2d], al
cmp byte [ebp - 0x2d], 0
je 0x1000b698
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jg 0x1000b651
push 2
pop ebx
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], eax
jl 0x1000b72c
jmp 0x1000b6b4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0xae0], eax
je 0x1000b6d1
push ebx
lea ecx, [ebp - 0x2f8]
call fcn.10028c09
mov dword [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b771
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2f8]
call fcn.10028ca7
mov dword [eax], 0xa39ed080
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b753
push eax
lea ecx, [ebp - 0x2f8]
call fcn.10028ca7
xor eax, eax
lea ecx, [ebp - 0x2f8]
push eax
call fcn.10028ca7
xor eax, eax
lea ecx, [ebp - 0x2f8]
push eax
call fcn.10028ca7
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jne 0x1000b7bb