Function at 0x10019c87
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x340
mov dword [ebp - 0x10], 0xf415
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], 0x5befa1e1
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x1c], 0xb1dab551
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xd14cd495
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x120], ecx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x10c], edx
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
setg dl
sub ecx, edx
neg ecx
push ebx
sbb ecx, ecx
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
inc ecx
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
push esi
setg dl
mov esi, dword [sym.imp.GDI32.dll_GetPixel]
sub edx, 0x1912530a
neg edx
push edi
sbb edx, edx
mov edi, dword [sym.imp.USER32.dll_GetDC]
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
sub ecx, 0x2d8e80c0
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
add eax, 0x5a9c4c8d
cmp eax, 0xfff8
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, 0xffffffff
setge dl
xor eax, eax
cmp edx, 0x7120dd93
setle al
mov dword [ebp - 0x1c], eax
mov byte [ebp - 5], 0
cmp byte [ebp - 5], 0
je 0x10019d89
push 0x10e4
push 0x7ec
call ebx
push eax
call edi
push eax
call esi
mov dword [ebp - 0x10], 0xf415
xor edx, edx
mov dword [ebp - 0x14], 0xfffffff8
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x20], 0x5befa1e1
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x1c], 0xb1dab551
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xd14cd495
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
setg dl
sub ecx, edx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
sub edx, 0x1912530a
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
sub ecx, 0x2d8e80c0
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
add eax, 0x5a9c4c8d
cmp eax, 0xfff8
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor edx, edx
cmp ecx, 0xffffffff
setge dl
xor eax, eax
cmp edx, 0x7120dd93
setle al
mov dword [ebp - 0x1c], eax
mov byte [ebp - 5], 0
cmp byte [ebp - 5], 0
je 0x10019e61
push 0x10e4
push 0x7ec
call ebx
push eax
call edi
push eax
call esi
push 3
mov dword [ebp - 4], 0xfffffff7
pop ecx
mov dword [ebp - 0x30], 0xe809b4af
push 1
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x10], 0
pop esi
jmp 0x10019e92
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x118], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x10019e85
mov dword [ebp - 4], 0
jmp 0x10019eae
mov dword [ebp + eax*4 - 0x118], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
jl 0x10019ea0
mov edi, 0xffffb6bd
mov ecx, edi
sub ecx, eax
sub ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x114]
mov eax, dword [ebp - 0x110]
neg ecx
sbb ecx, ecx
inc ecx
add eax, ecx
neg eax
cmp eax, esi
jb 0x10019ee8
cmp dword [ebp - 0x110], 0
je 0x10019ee8
mov edx, esi
jmp 0x10019eea
xor edx, edx
mov ecx, dword [ebp - 0x118]
mov eax, dword [ebp - 4]
add eax, edx
add ecx, eax
je 0x10019efc
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 4]
mov ebx, dword [sym.imp.USER32.dll_BeginPaint]
push 7
pop ecx
cmp dword [ebp - 4], edx
je 0x10019f51
mov dword [ebp - 4], 0xc
jmp 0x10019f33
cmp byte [ebp - 5], 0
je 0x10019f30
push edx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
push 7
xor edx, edx
pop ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], ecx
mov byte [ebp - 5], dl
jle 0x10019f1b
cmp byte [ebp - 5], 0
je 0x10019fa4
push edx
push edx
push edx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
push 7
xor edx, edx
pop ecx
jmp 0x10019fa4
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], esi
mov dword [ebp - 4], 0xffffffef
jmp 0x10019f9e
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x1c], 0xff29c214
mov dword [ebp - 0x10], edx
jmp 0x10019f8f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2f4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10019f7e
dec dword [ebp - 0x20]
dec dword [ebp - 0x1c]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe2
jge 0x10019f6b
mov dword [ebp - 0x6c], 0x5f34bdac
mov dword [ebp - 0x18], 0x6d44418
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x14], 0x25ef2c36
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0x21ad7ba9
mov dword [ebp - 0x30], 0xe60be628
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x30], 0xf8c51723
mov dword [ebp - 0x188], esi
mov dword [ebp - 0x184], esi
mov dword [ebp - 0x180], esi
mov dword [ebp - 0x17c], esi
mov dword [ebp - 0x30], 0x3251
mov dword [ebp - 0x2c], 0xec6b039b
mov dword [ebp - 0x1c], 0xfee61394
mov dword [ebp - 0x1b8], ecx
mov dword [ebp - 0x1b4], ecx
mov dword [ebp - 0x1b0], ecx
mov dword [ebp - 0x1ac], ecx
mov dword [ebp - 0x10], edx
jmp 0x1001a044
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x210], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a033
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x1001a05f
mov eax, edx
cmp dword [ebp - 0x18], edx
je 0x1001a061
mov eax, esi
cmp dword [ebp - 0x14], eax
je 0x1001a06d
mov ecx, edx
cmp dword [ebp - 0x14], edx
je 0x1001a06f
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
cmp eax, ecx
je 0x1001a0b1
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x1001a091
push edx
push edx
call dword [sym.imp.USER32.dll_LoadIconA]
xor edx, edx
mov dword [ebp - 4], 0xfffffff7
mov dword [ebp - 0x30], 0xe809b4af
push 3
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x10], edx
pop ecx
jmp 0x1001a1a0
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x30], 8
mov dword [ebp - 0x30], 0xb2d3650d
push 3
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], 0x6d54ec7e
mov dword [ebp - 0x30], 0x5a7dd9ae
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0xd574417f
mov dword [ebp - 0x2c], 0x9bfaead2
mov dword [ebp - 0x30], 0x947e29ac
mov dword [ebp - 0x14], 0xfff7
mov dword [ebp - 0x10], edx
jmp 0x1001a10f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1e8], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001a0fe
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x1c]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1b4]
add eax, 0x247afae8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1e4]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
add eax, edx
imul eax, dword [ebp - 0x20c]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x18]
mov dword [ebp - 0x10], 0xffffffee
cmp dword [ebp - 0x10], 4
je 0x1001a08f
xor edx, edx
mov dword [ebp - 0x2c], 0xffff
cmp dword [ebp - 0x1e0], edx
jne 0x1001a180
mov eax, edx
cmp dword [ebp - 0x188], edx
je 0x1001a182
mov eax, esi
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jne 0x1001a167
jmp 0x1001a091
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xfc], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001a193
mov dword [ebp - 4], edx
jmp 0x1001a1b8
mov dword [ebp + eax*4 - 0xfc], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
jl 0x1001a1aa
sub edi, eax
sub edi, dword [ebp - 4]
sub edi, dword [ebp - 0xf8]
mov eax, dword [ebp - 0xf4]
neg edi
sbb edi, edi
inc edi
add eax, edi
neg eax
cmp eax, esi
jb 0x1001a1e8
cmp dword [ebp - 0xf4], edx
je 0x1001a1e8
mov edx, esi
mov ecx, dword [ebp - 0xfc]
mov eax, dword [ebp - 4]
add eax, edx
add ecx, eax
je 0x1001a1fa
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], ecx
je 0x1001a241
mov dword [ebp - 4], 0xc
jmp 0x1001a225
cmp byte [ebp - 5], 0
je 0x1001a222
push ecx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call ebx
xor ecx, ecx
dec dword [ebp - 4]
cmp dword [ebp - 4], 7
mov byte [ebp - 5], cl
jle 0x1001a210
cmp byte [ebp - 5], 0
je 0x1001a294
push ecx
push ecx
push ecx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
xor ecx, ecx
jmp 0x1001a294
mov dword [ebp - 0x20], 9
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x30], esi
mov dword [ebp - 4], 0xffffffef
jmp 0x1001a28e
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x1c], 0xff29c214
mov dword [ebp - 0x10], ecx
jmp 0x1001a27f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x300], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001a26e
dec dword [ebp - 0x20]
dec dword [ebp - 0x1c]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe2
jge 0x1001a25b
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x20], 0xf196e6c8
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 0xe469209a
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], ecx
jmp 0x1001a2d1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 0x597a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a2c3
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x14]
jne 0x1001a2ea
cmp dword [ebp - 0x78], ecx
jne 0x1001a2ed
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x20], 0x735b
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x14]
mov eax, ecx
cmp dword [ebp - 0x78], ecx
je 0x1001a30c
mov eax, esi
mov dword [ebp - 0x20], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x78]
mov edi, dword [sym.imp.USER32.dll_GetKeyboardType]
cmp ecx, eax
mov eax, dword [ebp - 0x78]
setle dl
xor ebx, ebx
cmp edx, 0xc39c
setg bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setl cl
imul eax, ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 5], 0
cmp byte [ebp - 5], 0
je 0x1001a355
push 0x2015
call edi
mov dword [ebp - 0x30], 0xc266
mov dword [ebp - 0x18], 0x83111738
mov dword [ebp - 0x14], 0x6986d6d
mov dword [ebp - 0x10], 4
push 0xfffffffffffffff7
pop ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x20], 0x2560131b
mov dword [ebp - 0xc], 0
jmp 0x1001a39f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x200], 0xfffffffe
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001a38e
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x14]
jle 0x1001a3c9
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
neg eax
push 3
sbb eax, eax
neg eax
cmp eax, 0xd4fe9304
sbb eax, eax
xor edx, edx
neg eax
imul eax, dword [ebp - 4]
imul eax, eax, 0xfc33
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x200]
mov eax, dword [ebp - 0x200]
sub ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
add edx, 0xb0be
cmp eax, edx
pop edx
setg cl
sub ecx, 0x5d44
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
mov dword [ebp - 0x20], ecx
xor ecx, ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0xc5d177cc
mov dword [ebp - 0x1c], 0xf4727cad
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], 0xf1fe
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0xf874340c
mov dword [ebp - 0xc], ecx
jmp 0x1001a486
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xd8], 0xccc9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edx
jl 0x1001a475
mov dword [ebp - 0xc], ecx
jmp 0x1001a49e
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x80], 9
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001a490
mov eax, dword [ebp - 0xd0]
xor edx, edx
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x1c]
imul ecx, eax, 0x6dcf0
mov eax, dword [ebp - 0xd8]
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xa87187d
setne al
sub eax, 0x5c1e
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffffff6
jge 0x1001a4ec
mov eax, dword [ebp - 0x80]
inc dword [ebp - 0x10]
xor edx, edx
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setge dl
mov dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
add ecx, dword [ebp - 0xd8]
je 0x1001a542
cmp dword [ebp - 0x14], 0
je 0x1001a542
mov eax, esi
jmp 0x1001a544
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0x6d44418
mov dword [ebp - 0x1c], ebx
xor ebx, ebx
mov dword [ebp - 0x14], 0x25ef2c36
mov dword [ebp - 0x38], 0xfffffffb
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x38], 0x21ad7ba9
mov dword [ebp - 0x38], 0xe60be628
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x38], 0xf8c51723
mov dword [ebp - 0x1c8], esi
mov dword [ebp - 0x1c4], esi
mov dword [ebp - 0x1c0], esi
mov dword [ebp - 0x1bc], esi
mov dword [ebp - 0x38], 0x3251
mov dword [ebp - 0x2c], 0xec6b039b
mov dword [ebp - 0x40], 0xfee61394
push 7
pop eax
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], eax
mov dword [ebp - 0x10], ebx
jmp 0x1001a5e1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1dc], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a5d0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
test eax, eax
jne 0x1001a5fc
mov eax, ebx
cmp dword [ebp - 0x18], ebx
je 0x1001a5fe
mov eax, esi
cmp dword [ebp - 0x14], eax
je 0x1001a60a
mov ecx, ebx
cmp dword [ebp - 0x14], ebx
je 0x1001a60c
mov ecx, esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
neg eax
cmp eax, ecx
je 0x1001a634
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001a707
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
jmp 0x1001a707
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0x38], 8
mov dword [ebp - 0x38], 0xb2d3650d
push 3
pop ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], 0x6d54ec7e
mov dword [ebp - 0x38], 0x5a7dd9ae
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x38], 0xd574417f
mov dword [ebp - 0x2c], 0x9bfaead2
mov dword [ebp - 0x38], 0x947e29ac
mov dword [ebp - 0x14], 0xfff7
mov dword [ebp - 0x10], ebx
jmp 0x1001a692
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001a681
mov eax, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x40]
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x1a4]
add eax, 0x247afae8
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setne dl
add eax, edx
imul eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x18]
mov dword [ebp - 0x10], 0xffffffee
jmp 0x1001a701
mov dword [ebp - 0x2c], 0xffff
cmp dword [ebp - 0x1cc], ebx
jne 0x1001a6f9
mov eax, ebx
cmp dword [ebp - 0x1c8], ebx
je 0x1001a6fb
mov eax, esi
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jne 0x1001a6e0
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], 0x5fcb
mov dword [ebp - 0xc], ebx
jmp 0x1001a727
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x140], 0xfffffff6
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 2
jl 0x1001a716
mov dword [ebp - 0xc], ebx
jmp 0x1001a73f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x108], esi
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001a732
mov dword [ebp - 0x18], ebx
jmp 0x1001a89d
mov dword [ebp - 4], 0xfff6
mov dword [ebp - 0x10], 0x83a0f0f5
mov dword [ebp - 0xc], esi
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x10]
sub ecx, eax
imul eax, ecx, 0xb2c5
xor ecx, ecx
cmp eax, 0x1e5c8a52
setle cl
mov dword [ebp - 0xc], ecx
xor ecx, ecx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x1c]
imul eax, eax, 0x161d
cmp eax, 0xffff
setne cl
lea eax, [ecx - 0xe1f6]
mov ecx, dword [ebp - 0x18]
add ecx, eax
je 0x1001a7bc
mov eax, esi
cmp dword [ebp - 0x1c], ebx
jne 0x1001a7be
mov eax, ebx
cmp eax, dword [ebp - 4]
jg 0x1001a7c6
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x18], 0x5aba9a98
jl 0x1001a7d6
mov edx, esi
cmp dword [ebp - 0x18], ebx
jne 0x1001a7d8
mov edx, ebx
mov eax, dword [ebp - 4]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x100], ecx
test ecx, ecx
je 0x1001a85a
cmp dword [ebp - 0xc], ebx
je 0x1001a85a
mov dword [ebp - 0x2c], 0x37280dda
mov dword [ebp - 4], ebx
jmp 0x1001a853
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], ebx
jl 0x1001a850
mov dword [ebp - 0xc], esi
cmp dword [ebp - 0xc], ebx
jl 0x1001a84b
mov dword [ebp - 0x40], 0xdee6ee3e
xor edx, edx
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
cmp eax, ecx
mov eax, dword [ebp - 0x40]
setg dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x140]
setge bl
xor ecx, ecx
cmp ebx, eax
setl cl
mov dword [ebp - 0x100], ecx
dec dword [ebp - 0xc]
jns 0x1001a80d
xor ebx, ebx
dec dword [ebp - 0x10]
jns 0x1001a805
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x1001a7fd
jmp 0x1001a878
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x38], 0x3df4
mov dword [ebp - 0x38], 0x87f9bd85
dec dword [ebp - 0x40]
mov dword [ebp - 0x108], esi
mov dword [ebp - 4], ebx
jmp 0x1001a895
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001a892
push 0xeea
push ebx
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x1001a87d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1001a74d
mov dword [ebp - 0x40], 0x5ff79fac
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 0x14
jmp 0x1001a8e5
mov dword [ebp - 0x38], 9
mov dword [ebp - 0x10], ebx
jmp 0x1001a8d6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x228], 0x55e00fe1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1001a8c5
dec dword [ebp - 0x228]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x12
jg 0x1001a8b9
mov byte [ebp - 5], bl
cmp byte [ebp - 5], 0
je 0x1001a90f
push ebx
push 0x3da
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c], 0xf196e6c8
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x28], 0xe469209a
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x10], ebx
jmp 0x1001a94c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], 0x597a
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001a93e
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x14]
jne 0x1001a965
cmp dword [ebp - 0x64], ebx
jne 0x1001a968
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x1c], 0x735b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x14]
mov eax, ebx
cmp dword [ebp - 0x64], ebx
je 0x1001a987
mov eax, esi
mov dword [ebp - 0x1c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setle dl
xor ebx, ebx
cmp edx, 0xc39c
setg bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setl cl
xor ebx, ebx
imul eax, ecx
mov dword [ebp - 0x24], eax
mov byte [ebp - 5], bl
cmp byte [ebp - 5], bl
je 0x1001a9ca
push 0x2015
call edi
mov dword [ebp - 0x18], esi
mov eax, 0xb91ee4c
mov dword [ebp - 4], 0xfffffffb
mov dword [ebp - 0x10], 0xcdb8faaa
mov dword [ebp - 0x14], 0xffff
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0xc], ebx
jmp 0x1001aa2a
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x94], 0xfffffffd
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], esi
jl 0x1001aa19
mov dword [ebp - 0xc], ebx
jmp 0x1001aa45
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x23c], 0xfffffff6
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 3
jl 0x1001aa34
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x1001aa6b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x94]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
dec dword [ebp - 0x18]
jns 0x1001aa53
mov eax, dword [ebp - 0x10]
mov edi, 0xc5ad
mov eax, dword [ebp - 0x14]
mov ecx, edi
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 4]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x14]
sub ecx, eax
sub ecx, 0xd37f4a1d
neg ecx
sbb ecx, ecx
xor edx, edx
add ecx, 0xffff0578
cmp ecx, 0x62b2
setge dl
add edx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x10]
sub edx, 0xc938
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
sub ecx, 6
cmp dword [ebp - 0x10], ecx
jg 0x1001aae1
mov edx, esi
cmp dword [ebp - 0x238], ebx
jne 0x1001aae3
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
add ecx, edx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x94]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setge cl
sub ecx, eax
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x10]
add eax, 0xdb20
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], 0xd2afddf3
mov dword [ebp - 0x10], 8
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffc
mov dword [ebp - 0x2c], 0x56123d4a
mov dword [ebp - 0x1c], 0xfffe
mov dword [ebp - 0x14], ebx
jmp 0x1001ab62
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], 0x29729cf3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001ab51
cmp dword [ebp - 0x10], ebx
jne 0x1001ab7b
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x1c]
mov dword [ebp - 0x18], 0x83111738
mov dword [ebp - 0x14], 0x6986d6d
mov dword [ebp - 0x10], 4
push 0xfffffffffffffff7
pop ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x24], 0x2560131b
mov dword [ebp - 0x14], 0
jmp 0x1001abd6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x254], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001abc5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffc
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x14]
jle 0x1001ac00
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov ecx, ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
neg eax
sbb eax, eax
neg eax
cmp eax, 0xd4fe9304
sbb eax, eax
xor edx, edx
neg eax
imul eax, dword [ebp - 0xc]
imul eax, eax, 0xfc33
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x254]
mov eax, dword [ebp - 0x254]
sub ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
add edx, 0xb0be
cmp eax, edx
setg cl
sub ecx, 0x5d44
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
inc ecx
neg ecx
xor edx, edx
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x150], edx
mov dword [ebp - 0x14c], edx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0x144], edx
mov dword [ebp - 4], 0x2b74c38b
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x14], edx
jmp 0x1001acb8
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x74], 0xfffffffe
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1001acaa
push 3
pop ecx
mov dword [ebp - 0x74], ecx
cmp dword [ebp - 0x74], edx
jl 0x1001ada4
mov dword [ebp - 0x18], 0x62751c76
mov dword [ebp - 0x14], edx
jmp 0x1001ace9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x26c], 0x452a2c7a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001acd8
mov dword [ebp - 0x18], edx
jmp 0x1001ad69
mov dword [ebp - 0xc], 0xe1b61bab
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x1001ad0f
cmp dword [ebp - 0x18], ecx
jle 0x1001acf3
mov dword [ebp - 4], ecx
cmp dword [ebp - 4], edx
jl 0x1001ad9b
mov dword [ebp - 0x1c], 0x199f2dc8
mov dword [ebp - 0x18], 0xde19d29b
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], 0x5b1b6fd4
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], edx
jmp 0x1001add5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1001adc4
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x18], 2
jg 0x1001aeff
mov dword [ebp - 0xc], 0xd4f2887c
mov dword [ebp - 0x2c], 0xffffffff
mov byte [ebp - 5], dl
cmp byte [ebp - 5], 0
je 0x1001ae08
push edx
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xb4], ecx
mov dword [ebp - 0xc], edx
jmp 0x1001aee5
cmp dword [ebp - 4], edx
je 0x1001af0a
mov eax, dword [ebp - 0xac]
mov ecx, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp - 0xb4]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
sub eax, edx
sub eax, dword [ebp - 0x24]
xor ecx, ecx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0xf4727cad
push 3
pop edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], 0xf1fe
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2c], 0xf874340c
mov dword [ebp - 0xc], ecx
jmp 0x1001af5e