Function at 0x10023896
Capabilities:
Check os version
Create directory
Get disk information
Get file system object information
Get graphical window text
Identify system language via api
Parse pe header
Query service status
Suspend thread

Disassembly:
mov eax, 0x1007ebdb
call fcn.1007d850
mov eax, 0x162c
call fcn.1007a110
push ebx
push esi
push edi
push 0xffffffffffffffff
mov dword [ebp - 0x18], 0xf5540d7f
mov eax, 0xce9d05ba
mov dword [ebp - 0x8b8], eax
mov dword [ebp - 0x54], ecx
pop ecx
mov dword [ebp - 0x8b4], eax
push 3
mov dword [ebp - 0x8b0], eax
pop esi
mov dword [ebp - 0x8ac], eax
push 0
mov dword [ebp - 0x30], 0x58b39d20
mov byte [ebp - 0x7d], dl
mov dword [ebp - 0x18], 0x18
pop eax
jmp 0x1002397e
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], 0xfffa
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], eax
jl 0x1002397b
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10023919
push 0x1067
call dword [sym.imp.GDI32.dll_GetStockObject]
mov eax, dword [ebp - 0x1c]
push 0
mov eax, dword [ebp + eax*4 - 0x8b8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x8b8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x8b8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, 0x4d3a6c38
cmp eax, 0xf1e5c8a5
mov eax, dword [ebp - 0x44]
sbb edx, edx
add edx, 0xf18fb0c4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
pop eax
setne cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x1c]
jns 0x10023905
or ecx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1b
jg 0x100238f3
mov edi, dword [sym.imp.GDI32.dll_CreateFontIndirectW]
mov dword [ebp - 0x18], 0x25b9b55b
push 1
mov dword [ebp - 0x3c], 0x89351f20
mov dword [ebp - 0x18], 0xffffffe8
pop ebx
jmp 0x10023a1e
lea ecx, [ebp - 0xb30]
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100239df
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb30]
call fcn.10008db5
mov ecx, 0xffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100239c0
xor eax, eax
push eax
lea ecx, [ebp - 0xb30]
call fcn.10008db5
dec dword [eax]
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x10023a0a
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10023a05
push eax
call edi
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x100239f7
or eax, 0xffffffff
lea ecx, [ebp - 0xb30]
mov dword [ebp - 4], eax
call fcn.10008db0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
push ebx
jl 0x100239a8
xor eax, eax
mov dword [ebp - 0x18], 0x5020f89b
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x4f4]
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x40], 0xd03b15a8
call fcn.10008d6e
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0xac4]
xor eax, eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], 0xfba349a2
mov dword [ebp - 0x2c], 0x20cd
mov dword [ebp - 0x30], 0xff731867
push esi
call fcn.10008d6e
push 2
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x44], 0x4927b923
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10023aa1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x64c], 0xc58bdfad
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10023a89
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10023ac7
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x4f4]
call fcn.10008db5
mov dword [eax], 0xfff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10023aa9
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10023ae3
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xac4]
call fcn.10008db5
mov dword [eax], 0x38e6
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10023acc
mov dword [ebp - 0x18], 0xc85f70ad
lea ecx, [ebp - 0x4f4]
mov eax, dword [ebp - 0x3c]
inc dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x644]
mov eax, dword [ebp - 0x644]
xor eax, eax
push eax
call fcn.10008db5
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x4f4]
xor eax, eax
push eax
call fcn.10008db5
mov edx, dword [ebp - 0x24]
mov esi, eax
mov ecx, dword [ebp - 0x24]
neg edx
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setne al
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x644]
mov eax, dword [ebp - 0x18]
setl dl
add ecx, edx
xor edx, edx
cmp ecx, eax
push 6
sete dl
xor eax, eax
cmp edx, dword [esi]
pop edx
setge al
or ecx, 0xffffffff
cmp eax, ecx
jl 0x10023c26
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x30], 0xfffffff6
push 7
pop eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x44], ecx
mov ecx, 0x615a038
mov eax, dword [ebp - 0x44]
cmp eax, 0x4674e6a8
setne dl
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
sub ecx, edx
xor edx, edx
cmp ecx, eax
lea ecx, [ebp - 0x4f4]
setl dl
xor eax, eax
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x18], eax
push eax
call fcn.10008db5
cmp dword [ebp - 0x18], 8
mov esi, eax
mov ecx, dword [ebp - 0x644]
sbb edx, edx
xor eax, eax
inc edx
cmp ecx, edx
mov ecx, dword [ebp - 0x30]
setle al
sub eax, ecx
imul eax, dword [esi]
test eax, eax
jne 0x10023bf0
cmp dword [ebp - 0x3c], eax
je 0x10023bf2
mov eax, ebx
mov edx, dword [ebp - 0x4c]
imul edx, eax
mov eax, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x4c]
setge cl
xor edx, edx
imul ecx, ecx, 0xfffb
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
imul eax, edx
mov dword [ebp - 0x24], eax
jmp 0x10023ced
mov dword [ebp - 0x2c], 0x5df1
xor eax, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 0x3464eb7f
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x2c], 0xee42ac9
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x2c], 0xd68cabd0
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10023c73
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1394], 0x68021436
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10023c5a
xor eax, eax
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x4f4]
push eax
call fcn.10008db5
xor eax, eax
cmp dword [ebp - 0x40], eax
jne 0x10023c98
cmp dword [ebp - 0x1390], eax
jne 0x10023c98
mov esi, eax
cmp dword [ebp - 0x40], eax
je 0x10023c9a
mov esi, ebx
push ebx
lea ecx, [ebp - 0xac4]
call fcn.10008db5
mov ecx, dword [ebp - 0x30]
xor edx, edx
cmp ecx, esi
setle dl
cmp edx, dword [eax]
jle 0x10023cc2
xor eax, eax
cmp dword [ebp - 0x644], eax
je 0x10023cc4
mov ecx, ebx
jmp 0x10023cc6
xor eax, eax
mov ecx, eax
mov eax, dword [ebp - 0x24]
xor edx, edx
cmp ecx, eax
sete dl
xor ecx, ecx
sub edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
mov eax, dword [ebp - 0x30]
setge cl
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0xac4]
call fcn.10008db0
or ebx, 0xffffffff
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 4], ebx
call fcn.10008db0
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x40], 0xa831eb23
mov dword [ebp - 0x44], 0xa8b35eda
mov dword [ebp - 0x44], ebx
mov eax, dword [ebp - 0x24]
push 6
pop ecx
cmp ecx, eax
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, dword [ebp - 0x24]
jge 0x10023d4c
cmp dword [ebp - 0x24], eax
je 0x10023d4c
xor esi, esi
inc esi
mov eax, esi
jmp 0x10023d4f
xor esi, esi
inc esi
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10023d5c
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
neg edx
mov ebx, dword [sym.imp.USER32.dll_GetDoubleClickTime]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setge dl
xor eax, eax
mov dword [ebp - 0x44], edx
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10023d96
call ebx
xor eax, eax
mov dword [ebp - 0x38], 0x25b9b55b
mov dword [ebp - 0x1c], 0xfffffff6
push 6
pop ecx
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x44], 0xee34edf6
mov dword [ebp - 0x44], 0xdb2b058e
mov dword [ebp - 0x44], 0x5d732ada
mov dword [ebp - 0x10], eax
jmp 0x10023dd5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x160c], 9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10023dc4
imul eax, dword [ebp - 0x1c], 7
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x44], eax
je 0x10023df2
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp eax, edx
push 2
setl cl
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x1c], eax
pop ecx
jmp 0x10023e4b
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10023e48
call ebx
push 2
xor eax, eax
pop ecx
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jle 0x10023e38
mov dword [ebp - 0x3c], 0x89351f20
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
push 3
mov dword [ebp - 0x14], eax
pop ebx
cmp dword [ebp - 0x14], ebx
jge 0x10023e92
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x76c], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10023e7a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x10023eb1
or edx, 0xffffffff
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1418], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10023e9d
xor eax, eax
mov dword [ebp - 0x768], eax
jmp 0x10023edd
mov dword [ebp - 0x10], 0xc4c8d3c8
mov dword [ebp - 0x10], eax
jmp 0x10023ed2
mov dword [ebp - 0x44], 0xef307d7c
inc dword [ebp - 0x44]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x10023ec5
inc dword [ebp - 0x768]
cmp dword [ebp - 0x768], ebx
jle 0x10023eb9
mov dword [ebp - 0x38], 0xffffffe8
cmp dword [ebp - 0x38], 0xfffffffa
jge 0x10024878
jmp 0x10023efb
push 2
pop ecx
push ecx
lea ecx, [ebp - 0x664]
call fcn.10008d6e
mov dword [ebp - 4], ebx
xor eax, eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10023f35
push dword [ebp - 0x10]
lea ecx, [ebp - 0x664]
call fcn.10008db5
push 2
mov dword [eax], esi
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10023f18
xor eax, eax
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x10023ffd
mov dword [ebp - 0x44], 0x52d0da0b
lea ecx, [ebp - 0xc74]
mov dword [ebp - 0x30], 0x4c7b
push ebx
call fcn.10008d6e
xor eax, eax
mov byte [ebp - 4], 4
mov dword [ebp - 0x10], eax
jmp 0x10023f7d
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc74]
call fcn.10008db5
mov dword [eax], 0x528ace4b
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10023f66
push dword [ebp - 0x24]
lea ecx, [ebp - 0x664]
call fcn.10008db5
mov eax, dword [ebp - 0x24]
lea ecx, [ebp - 0x664]
push dword [ebp - 0x24]
call fcn.10008db5
xor ebx, ebx
lea ecx, [ebp - 0x664]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, esi
setle bl
sub ebx, dword [ebp - 0x30]
push dword [ebp - 0x24]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.10008db5
lea ecx, [ebp - 0xc74]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10008db5
xor ecx, ecx
cmp ebx, 0xa6edad94
push 3
sete cl
mov dword [eax], ecx
lea ecx, [ebp - 0xc74]
pop ebx
mov byte [ebp - 4], bl
call fcn.10008db0
dec dword [ebp - 0x24]
jns 0x10023f41
or eax, 0xffffffff
lea ecx, [ebp - 0x664]
mov dword [ebp - 4], eax
call fcn.10008db0
push esi
lea ecx, [ebp - 0xaf4]
call fcn.10008d6e
mov dword [ebp - 4], 5
mov eax, 0xce9d05ba
mov dword [ebp - 0x18], 0xf5540d7f
mov dword [ebp - 0x878], eax
mov dword [ebp - 0x874], eax
mov dword [ebp - 0x870], eax
mov dword [ebp - 0x86c], eax
mov dword [ebp - 0x30], 0x58b39d20
mov dword [ebp - 0x18], 0x18
cmp dword [ebp - 0x18], 0x1b
jle 0x100240f7
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x44], 0xfffa
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x100240ea
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10024088
push 0x1067
call dword [sym.imp.GDI32.dll_GetStockObject]
mov eax, dword [ebp - 0x1c]
push 0
mov eax, dword [ebp + eax*4 - 0x878]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x878]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x878]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
sub eax, 0x4d3a6c38
cmp eax, 0xf1e5c8a5
mov eax, dword [ebp - 0x44]
sbb edx, edx
add edx, 0xf18fb0c4
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
pop eax
setne cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x1c]
jns 0x10024074
or ecx, 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x1b
jg 0x10024062
mov dword [ebp - 0x24], 0xfffffff7
xor eax, eax
mov dword [ebp - 0x44], 0xfffffffe
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10024127
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xac], 0x8f1e0c86
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002410f
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002413d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xf24], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002412c
mov dword [ebp - 0xac], 0x28f4e1c
mov ecx, 0x43af7806
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
sub ecx, eax
push 2
pop eax
cmp ecx, eax
je 0x10024178
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
dec eax
jne 0x1002418c
cmp dword [ebp - 0xac], eax
je 0x1002418e
mov eax, esi
cmp eax, 0x8ebdb88d
mov eax, dword [ebp - 0xf1c]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, 0x4446
jle 0x100241b1
mov eax, dword [ebp - 0xf1c]
mov eax, dword [ebp - 0xac]
xor edx, edx
mov ecx, dword [ebp - 0xac]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x24]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x10], eax
jmp 0x100241f3
push dword [ebp - 0x10]
lea ecx, [ebp - 0xaf4]
call fcn.10008db5
mov ecx, 0xffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100241db
mov dword [ebp - 0x18], 0x82062403
lea ecx, [ebp - 0x118c]
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x2c], esi
push ebx
call fcn.10008d6e
push 6
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10024246
push dword [ebp - 0x10]
lea ecx, [ebp - 0x118c]
call fcn.10008db5
mov dword [eax], 0xcfd1f2e9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10024228
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10024286
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1002426e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1170], 0xfff7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10024256
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x10024283
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x3c]
jns 0x10024276
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe9
je 0x1002424b
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x118c]
mov byte [ebp - 4], 5
call fcn.10008db0
xor eax, eax
lea ecx, [ebp - 0xaf4]
push eax
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x2d8]
dec dword [eax]
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x48], 0x29be1d92
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0x64dc9ed9
mov dword [ebp - 0x2c], 0xfffffffe
call fcn.10008d6e
push 7
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x40], 0x59cdc345
mov dword [ebp - 0x3c], 0xfffc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10024322
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2d8]
call fcn.10008db5
mov dword [eax], 0xafe30f58
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10024304
xor eax, eax
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x2d8]
push eax
call fcn.10008db5
cmp dword [eax], 0
jne 0x10024383
mov dword [ebp - 0x2c], 0xd1aa
xor eax, eax
mov dword [ebp - 0x10], 0x23703acb
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], 0xd7276cc
dec dword [ebp - 0x44]
mov dword [ebp - 0x10], 0xfffffff4
jmp 0x10024378
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10024375
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe9
jge 0x10024363
jmp 0x100244d2
xor eax, eax
mov dword [ebp - 0x44], 0x3231a295
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100243ac
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ac], 0x6fae7a48
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10024394
xor eax, eax
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jg 0x100244d2
mov dword [ebp - 0x30], 0x826ffea1
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x100244c0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x1ac], eax
test eax, eax
je 0x10024405
xor eax, eax
cmp dword [ebp - 0x1ac], eax
jne 0x100243eb
mov eax, dword [ebp - 0x30]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2d8]
call fcn.10008db5
mov eax, dword [ebp - 0x1ac]
inc eax
cmp dword [ebp - 0x3c], eax
jne 0x10024409
xor eax, eax
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2d8]
call fcn.10008db5
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp esi, ecx
sete dl
xor ecx, ecx
cmp dword [eax], edx
mov eax, dword [ebp - 0x40]
push dword [ebp - 0x24]
setne cl
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0x2d8]
setg bl
call fcn.10008db5
mov eax, dword [eax]
imul eax, ebx
test eax, eax
jne 0x10024463
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2d8]
call fcn.10008db5
cmp dword [eax], 0
jne 0x10024463
xor ebx, ebx
xor eax, eax
inc ebx
jmp 0x10024468
xor ebx, ebx
inc ebx
mov eax, ebx
mov ecx, dword [ebp - 0x44]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, dword [ebp - 0x3c]
jl 0x1002448f
mov esi, ebx
cmp dword [ebp - 0x40], eax
jne 0x10024491
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2d8]
call fcn.10008db5
xor ecx, ecx
cmp esi, 0x9ce376a9
push 2
setne cl
mov dword [eax], ecx
inc dword [ebp - 0x24]
pop ecx
push 1
pop esi
cmp dword [ebp - 0x24], ecx
jle 0x100243d1
xor eax, eax
inc dword [ebp - 0x4c]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x100243bb
push 3
pop ebx
lea ecx, [ebp - 0x2d8]
mov byte [ebp - 4], 5
call fcn.10008db0
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x1002485a
jmp 0x100244f3
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x44], 0x842f88d9
push 2
mov dword [ebp - 0x14], eax
pop ecx
cmp dword [ebp - 0x14], ecx
jge 0x10024523
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4a8], 0xa73d
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1002450b
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x10024539
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x468], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x10024528
mov eax, dword [ebp - 0x4a8]
imul eax, eax, 0xc244
mov dword [ebp - 0x464], eax
test eax, eax
je 0x10024560
mov eax, dword [ebp - 0x464]
mov eax, dword [ebp - 0x464]
mov eax, dword [ebp - 0x4a8]
xor edx, edx
mov eax, dword [ebp - 0x4a8]
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x4a8]
mov eax, dword [ebp - 0x44]
cmp eax, ecx
push ebx
setge dl
lea ecx, [ebp - 0x914]
mov dword [ebp - 0x44], edx
xor eax, eax
mov byte [ebp - 0x25], al
mov dword [ebp - 0x24], 0x4f37
mov dword [ebp - 0x40], eax
call fcn.10008d6e
or eax, 0xffffffff
mov byte [ebp - 4], 8
push 2
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0xadc]
pop eax
push eax
call fcn.10008d6e
mov byte [ebp - 4], 9
or eax, 0xffffffff
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x44], 0xfbcae26e
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100245f5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x914]
call fcn.10008db5
mov dword [eax], 0xcc09
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100245d7
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop edx
cmp dword [ebp - 0x1c], edx
jge 0x10024626
push edx
pop esi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xadc]
call fcn.10008db5
mov dword [eax], 0x953526c7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10024602
xor esi, esi
xor eax, eax
push 2
inc esi
pop edx
mov dword [ebp - 0x1c], eax
jmp 0x1002463c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9d0], 0x2570e81d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x1002462b
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp eax, esi
push edx
setle cl
add ecx, 0x79cd329b
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x914]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
call fcn.10008db5
xor eax, eax
lea ecx, [ebp - 0xadc]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
push esi
call fcn.10008db5
lea ecx, [ebp - 0x914]
and dword [eax], 0
xor eax, eax
push eax
call fcn.10008db5
xor ecx, ecx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x24]
setge cl
imul eax, ecx
mov dword [ebp - 0x9cc], eax
xor eax, eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], eax
jg 0x10024744
jmp 0x100246b6
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100246d6
or edx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x470], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100246c4
mov eax, dword [ebp - 0x24]
mov ecx, esi
mov eax, dword [ebp - 0x48]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x9cc]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, edx
setne cl
xor eax, eax
imul ecx, dword [ebp - 0x46c]
test ecx, ecx
je 0x1002470e
mov ecx, esi
cmp dword [ebp - 0x470], eax
jne 0x10024710
mov ecx, eax
mov eax, dword [ebp - 0x470]
xor edx, edx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x40]
cmp ecx, eax
setne dl
xor eax, eax
mov dword [ebp - 0x470], edx
mov dword [ebp - 0x44], 0xfffffffb
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jle 0x100246b4
lea ecx, [ebp - 0xadc]
call fcn.10008db0
lea ecx, [ebp - 0x914]
mov byte [ebp - 4], 5
call fcn.10008db0
cmp byte [ebp - 0x25], 0
je 0x10024851
push 2
pop eax
mov dword [ebp - 0x24], 0x25b9b55b
lea ecx, [ebp - 0xd4c]
mov dword [ebp - 0x30], eax
push 4
call fcn.10008d6e
xor eax, eax
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100247b0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd4c]
call fcn.10008db5
mov dword [eax], 2
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10024791
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100247c6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5d8], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100247b5
mov dword [ebp - 0x24], 8
cmp dword [ebp - 0x24], 0xffffffe2
jge 0x1002483d
mov dword [ebp - 0x44], esi
xor edx, edx
mov dword [ebp - 0x10], 0xfffffff6
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
lea ecx, [ebp - 0xd4c]
setge dl
xor eax, eax
imul edx, dword [ebp - 0x44]
mov esi, dword [ebp - 0x10]
push eax
add esi, edx
call fcn.10008db5
xor edx, edx
push 1
mov dword [eax], esi
mov eax, dword [ebp - 0x44]
cmp eax, esi
mov eax, dword [ebp - 0x24]
setle dl
xor ecx, ecx
cmp edx, eax
pop esi
setne cl
mov dword [ebp - 0x5d8], ecx
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe2
jl 0x100247d8
lea ecx, [ebp - 0xd4c]
mov byte [ebp - 4], 5
call fcn.10008db0
xor eax, eax
push eax
call edi
dec dword [ebp - 0x3c]
jns 0x100244f1
or eax, 0xffffffff
lea ecx, [ebp - 0xaf4]
mov dword [ebp - 4], eax
call fcn.10008db0
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffffa
jl 0x10023ef8
push 0xffffffffffffffe8
mov dword [ebp - 0x18], 0x25b9b55b
pop ebx
mov dword [ebp - 0x3c], 0x89351f20
mov dword [ebp - 0x18], ebx
jmp 0x10024909
push esi
lea ecx, [ebp - 0xc8c]
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100248ca
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc8c]
call fcn.10008db5
mov ecx, 0xffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100248ab
xor eax, eax
push eax
lea ecx, [ebp - 0xc8c]
call fcn.10008db5
dec dword [eax]
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x100248f5
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x100248f0
push eax
call edi
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x100248e2
or eax, 0xffffffff
lea ecx, [ebp - 0xc8c]
mov dword [ebp - 4], eax
call fcn.10008db0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
jl 0x1002488e
mov dword [ebp - 0x18], 0x25b9b55b
mov dword [ebp - 0x3c], 0x89351f20
mov dword [ebp - 0x18], ebx
or ebx, 0xffffffff
cmp dword [ebp - 0x18], 0xfffffffa
jge 0x100249a7
push esi
lea ecx, [ebp - 0xb0c]
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10024969
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb0c]
call fcn.10008db5
mov ecx, 0xffff
mov dword [eax], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002494a
xor eax, eax
push eax
lea ecx, [ebp - 0xb0c]
call fcn.10008db5
dec dword [eax]
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x10024994
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1002498f
push eax
call edi
xor eax, eax
dec dword [ebp - 0x3c]
jns 0x10024981
lea ecx, [ebp - 0xb0c]
mov dword [ebp - 4], ebx
call fcn.10008db0
inc dword [ebp - 0x18]
jmp 0x10024927
mov esi, dword [sym.imp.GDI32.dll_SelectClipRgn]
xor eax, eax
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x3c], 0x4b3f
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x100249da
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x12
jle 0x10024a97
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x40], 0x88b92280
mov dword [ebp - 0x44], 0xa277ebd0
mov dword [ebp - 0x4c], 0xfffffffd
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jne 0x10024a18
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10024a18
mov ecx, eax
jmp 0x10024a1d
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x10]
je 0x10024a39
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ebx, ebx
cmp edx, eax
push 0xffffffffffffffff
setg bl
sub ebx, dword [ebp - 0x4c]
neg ebx
sbb ebx, ebx
inc ebx
add ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
neg ebx
sbb ebx, ebx
xor ecx, ecx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 0x10]
pop ebx
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jg 0x100249e7
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x3c], 0x4b3f
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10024abd
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x12
jle 0x10024b7a
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], 0x88b92280
mov dword [ebp - 0x44], 0xa277ebd0
mov dword [ebp - 0x4c], 0xfffffffd
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jne 0x10024afe
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10024afe
mov ecx, eax
jmp 0x10024b03
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x10]
je 0x10024b1f
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x4c]
neg ebx
sbb ebx, ebx
inc ebx
add ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
neg ebx
sbb ebx, ebx
xor ecx, ecx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 0x10]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jg 0x10024aca
xor eax, eax
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x3c], 0x4b3f
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10024ba0
push eax
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call esi
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x12
jle 0x10024c5d
or eax, 0xffffffff
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], 0x88b92280
mov dword [ebp - 0x44], 0xa277ebd0
mov dword [ebp - 0x4c], 0xfffffffd
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x40]
jne 0x10024be1
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10024be1
mov ecx, eax
jmp 0x10024be6
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x10]
je 0x10024c02
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x40]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x4c]
neg ebx
sbb ebx, ebx
inc ebx
add ebx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
neg ebx
sbb ebx, ebx
xor ecx, ecx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 0x10]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x12
jg 0x10024bad
xor eax, eax
push 3
pop edi
mov dword [ebp - 0x18], eax
lea ecx, [ebp - 0x67c]
push edi
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x10], eax
jmp 0x10024c8e
push dword [ebp - 0x10]
call fcn.10008db5
mov dword [eax], 0x8a1f9496
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x67c]
cmp dword [ebp - 0x10], edi
jl 0x10024c7d
push 2
pop esi
push esi
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
inc ebx
mov dword [eax], ecx
mov dword [ebp - 0x18], 0xfffffff6
cmp dword [ebp - 0x18], 0x2c
jge 0x10024dbf
mov dword [ebp - 0x24], 0xfffffff8
lea ecx, [ebp - 0x788]
push edi
call fcn.10008d6e
mov byte [ebp - 4], 0xe
xor eax, eax
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10024d01
push dword [ebp - 0x10]
lea ecx, [ebp - 0x788]
call fcn.10008db5
mov dword [eax], 0xe0566a92
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10024ce3
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10024d98
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x788]
push 2
pop eax
push eax
call fcn.10008db5
mov dword [eax], esi
test esi, esi
jne 0x10024d7d
push ebx
lea ecx, [ebp - 0x788]
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x67c]
call fcn.10008db5
mov edi, eax
lea ecx, [ebp - 0x67c]
xor eax, eax
push eax
call fcn.10008db5
push 2
mov ecx, dword [eax]
pop eax
mov dword [edi], ecx
lea ecx, [ebp - 0x788]
push eax
call fcn.10008db5
mov edx, dword [ebp - 0x24]
mov esi, eax
mov ecx, dword [ebp - 0x24]
xor eax, eax
cmp edx, ecx
setl al
xor ecx, ecx
cmp eax, dword [esi]
setl cl
cmp dword [edi], ecx
jle 0x10024d7d
xor eax, eax
mov ecx, eax
jmp 0x10024d7f
mov ecx, ebx
mov eax, dword [ebp - 0x24]
add ecx, 0xffff42a3
xor edx, edx
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x18]
jne 0x10024d98
xor eax, eax
jmp 0x10024d9a
mov eax, ebx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x788]
mov byte [ebp - 4], 0xd
call fcn.10008db0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x2c
push 3
pop edi
jl 0x10024cbb
push 2
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x67c]
mov dword [ebp - 4], eax
call fcn.10008db0
xor eax, eax
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x18], eax
push edi
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x10], eax
jmp 0x10024e00
push dword [ebp - 0x10]
call fcn.10008db5
mov dword [eax], 0x8a1f9496
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x694]
cmp dword [ebp - 0x10], edi
jl 0x10024def
push esi
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov dword [ebp - 0x18], 0xfffffff6
cmp dword [ebp - 0x18], 0x2c
jge 0x10024f2b
mov dword [ebp - 0x24], 0xfffffff8
lea ecx, [ebp - 0x7a0]
push edi
call fcn.10008d6e
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], edi
jge 0x10024e6d
push dword [ebp - 0x10]
lea ecx, [ebp - 0x7a0]
call fcn.10008db5
mov dword [eax], 0xe0566a92
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10024e4f
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10024f04
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x7a0]
push 2
pop eax
push eax
call fcn.10008db5
mov dword [eax], esi
test esi, esi
jne 0x10024ee9
push ebx
lea ecx, [ebp - 0x7a0]
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x694]
call fcn.10008db5
mov edi, eax
lea ecx, [ebp - 0x694]
xor eax, eax
push eax
call fcn.10008db5
push 2
mov ecx, dword [eax]
pop eax
mov dword [edi], ecx
lea ecx, [ebp - 0x7a0]
push eax
call fcn.10008db5
mov edx, dword [ebp - 0x24]
mov esi, eax
mov ecx, dword [ebp - 0x24]
xor eax, eax
cmp edx, ecx
setl al
xor ecx, ecx
cmp eax, dword [esi]
setl cl
cmp dword [edi], ecx
jle 0x10024ee9
xor eax, eax
mov ecx, eax
jmp 0x10024eeb
mov ecx, ebx
mov eax, dword [ebp - 0x24]
add ecx, 0xffff42a3
xor edx, edx
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x18]
jne 0x10024f04
xor eax, eax
jmp 0x10024f06
mov eax, ebx
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x7a0]
mov byte [ebp - 4], 0xf
call fcn.10008db0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x2c
push 3
pop edi
jl 0x10024e27
push 2
pop esi
or eax, 0xffffffff
lea ecx, [ebp - 0x694]
mov dword [ebp - 4], eax
call fcn.10008db0
push esi
lea ecx, [ebp - 0x9c8]
call fcn.10008d6e
push edi
lea ecx, [ebp - 0x250]
mov dword [ebp - 4], 0x11
call fcn.10008d6e
mov byte [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10024f8e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x9c8]
call fcn.10008db5
mov dword [eax], 0x9b3198a8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10024f70
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], edi
jge 0x10024fb4
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x250]
call fcn.10008db5
mov dword [eax], 0x94a18885
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x10024f96
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10024fca
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x12b4], 0xa3fc4b03
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10024fb9
push ebx
lea ecx, [ebp - 0x250]
call fcn.10008db5
and dword [eax], 0
jmp 0x100250e2
mov dword [ebp - 0x2c], 0xd9ddcef9
lea ecx, [ebp - 0xe0c]
mov dword [ebp - 0x2c], 0xfffffffe
push ebx
call fcn.10008d6e
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10025024
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x760], 0xed45b0e8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002500c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10025049
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe0c]
call fcn.10008db5
or ecx, 0xffffffff
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002502c
xor eax, eax
push eax
lea ecx, [ebp - 0xe0c]
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x250]
inc dword [eax]
mov dword [ebp - 0x760], 0x61581472
call fcn.10008db5
lea ecx, [ebp - 0x9c8]
push dword [eax]
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x250]
call fcn.10008db5
lea ecx, [ebp - 0x9c8]
push dword [eax]
call fcn.10008db5
cmp dword [ebp - 0x12b0], 0x3fd5
jl 0x100250b6
push esi
lea ecx, [ebp - 0x250]
call fcn.10008db5
cmp dword [eax], 0
jne 0x100250b6
xor eax, eax
mov ecx, eax
jmp 0x100250b8
mov ecx, ebx
mov dword [ebp - 0x12b0], ecx
mov eax, ebx
sub eax, ecx
lea ecx, [ebp - 0xe0c]
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x12
call fcn.10008db0
push ebx
lea ecx, [ebp - 0x250]
call fcn.10008db5
inc dword [eax]
push ebx
lea ecx, [ebp - 0x250]
call fcn.10008db5
cmp dword [eax], ebx
jle 0x10024fe4
lea ecx, [ebp - 0x250]
call fcn.10008db0
or eax, 0xffffffff
lea ecx, [ebp - 0x9c8]
mov dword [ebp - 4], eax
call fcn.10008db0
push 0xfffffffffffffff6
pop esi
mov dword [ebp - 0x48], esi
lea ecx, [ebp - 0xcc]
push ebx
call fcn.10008d6e
mov dword [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x24], 0xfffffffb
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x18], 0xdc87a9b6
mov dword [ebp - 0x48], 0x7b6c
mov dword [ebp - 0x30], 0x3a1b
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10025179
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcc]
call fcn.10008db5
and dword [eax], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002515e
xor eax, eax
push eax
lea ecx, [ebp - 0xcc]
call fcn.10008db5
lea ecx, [ebp - 0xcc]
and dword [eax], 0
xor eax, eax
push eax
call fcn.10008db5
cmp dword [eax], 0xe
jle 0x100252f2
mov esi, 0xffff
xor eax, eax
mov dword [ebp - 0x3c], 0x652065c8
mov dword [ebp - 0x44], 0xd10c
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0xcc]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor eax, eax
push eax
call fcn.10008db5
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, 4
lea ecx, [ebp - 0xcc]
setl dl
xor ebx, ebx
cmp edx, dword [eax]
setge bl
xor eax, eax
push eax
call fcn.10008db5
xor ecx, ecx
mov eax, dword [eax]
imul eax, ebx
imul eax, eax, 0xfffffffb
cmp eax, 0xfffffffd
setne cl
xor ebx, ebx
cmp ecx, 0x1649
lea ecx, [ebp - 0xcc]
setge bl
xor eax, eax
push eax
call fcn.10008db5
xor ecx, ecx
cmp ebx, dword [eax]
setl cl
xor eax, eax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp dword [ebp - 0x40], ecx
sete dl
xor ecx, ecx
cmp edx, dword [eax]
setl cl
xor eax, eax
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
mov ecx, dword [ebp - 0x24]
cmp esi, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, dword [eax]
setl dl
xor ebx, ebx
cmp edx, 0xfff0698
setg bl
xor eax, eax
push eax
lea ecx, [ebp - 0xcc]
call fcn.10008db5
xor ecx, ecx
mov edx, dword [eax]
add edx, ebx
sub edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setg cl
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0xcc]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x18], eax
xor eax, eax
push eax
call fcn.10008db5
lea ecx, [ebp - 0xcc]
inc dword [eax]
xor eax, eax
push eax
call fcn.10008db5
cmp dword [eax], 0xe
jg 0x100251a4
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0xcc]
xor eax, eax
push eax
call fcn.10008db5
cmp dword [ebp - 0x48], 0x8a9a2627
mov esi, eax
mov ecx, dword [ebp - 0x24]
sbb edx, edx
xor eax, eax
inc edx
cmp ecx, edx
setg al
xor ecx, ecx
cmp eax, dword [esi]
setge cl
cmp ecx, dword [ebp - 0x48]
jge 0x10025328
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x48]
lea ecx, [ebp - 0xcc]
xor eax, eax
push eax
call fcn.10008db5
mov eax, dword [ebp - 0x18]
xor esi, esi
mov eax, dword [ebp - 0x30]
inc esi
mov eax, dword [ebp - 0x18]
mov ecx, esi
mov eax, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x14]
sub ecx, eax
mov eax, dword [ebp - 0x48]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
imul eax, edx
cmp eax, dword [ebp - 0x24]
je 0x10025367
mov eax, dword [ebp - 0x14]
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
xor eax, eax
lea ecx, [ebp - 0xcc]
push eax
call fcn.10008db5
or ebx, 0xffffffff
lea ecx, [ebp - 0xcc]
mov dword [eax], esi
mov dword [ebp - 0x44], esi
mov dword [ebp - 4], ebx
call fcn.10008db0
mov dword [ebp - 0x38], 0x4b3f
lea ecx, [ebp - 0xb24]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x18], 0x394643cd
mov dword [ebp - 0x3c], 0x5f84255e
push edi
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x10], eax
jmp 0x100253e2
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb24]
call fcn.10008db5
mov dword [eax], 0x67656540
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x100253cb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x1b
push 2
pop ebx
jle 0x100254b9
jmp 0x10025403
xor eax, eax
mov dword [ebp - 0x44], 0xfff7
mov dword [ebp - 0x40], 0x7a81a82e
mov dword [ebp - 0x10], eax
jmp 0x10025427
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1234], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10025416
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x14]
jle 0x1002544a
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x3c], eax
je 0x1002544c
mov ecx, esi
mov eax, dword [ebp - 0x18]
xor edx, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x14]
setg dl
xor ecx, ecx
cmp edx, eax
setge cl
imul ecx, dword [ebp - 0x1230]
cmp ecx, esi
jl 0x10025474
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
lea ecx, [ebp - 0xb24]
mov dword [ebp - 0x44], 0xfffffffb
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x1230]
push ebx
call fcn.10008db5
mov ecx, dword [ebp - 0x40]
xor edx, edx
sub ecx, 8
cmp ecx, edi
setge dl
imul edx, dword [eax]
mov dword [ebp - 0x1228], edx
mov eax, dword [ebp - 0x3c]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x1b
jg 0x10025401
or eax, 0xffffffff
lea ecx, [ebp - 0xb24]
mov dword [ebp - 4], eax
call fcn.10008db0
xor eax, eax
mov dword [ebp - 0x2c], 0xc0ae9714
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x100254e7
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10025513
push eax
push 0x445
push eax
push 0x2646
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
xor eax, eax
mov byte [ebp - 0x25], al
lea ecx, [ebp - 0x518]
push ebx
call fcn.10008d6e
mov dword [ebp - 4], 0x16
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x44], 0x74f0e4f
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x40], 0x7575
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x10025562
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14c], 0xd4f2887c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002554a
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002557e
push dword [ebp - 0x14]
lea ecx, [ebp - 0x518]
call fcn.10008db5
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10025567
mov eax, dword [ebp - 0x14c]
mov ecx, esi
mov eax, dword [ebp - 0x148]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x14c]
cmp ecx, eax
sete dl
xor eax, eax
add edx, 0xcaea
cmp edx, 0xfffffff6
jle 0x100255b7
mov ecx, esi
cmp dword [ebp - 0x144], eax
jne 0x100255b9
mov ecx, eax
xor eax, eax
or edi, 0xffffffff
cmp ecx, edi
setne al
imul eax, dword [ebp - 0x14c]
imul eax, eax, 0x9f90
test eax, eax
jne 0x100255de
mov ecx, eax
cmp dword [ebp - 0x148], eax
je 0x100255e0
mov ecx, esi
mov eax, dword [ebp - 0x144]
xor ebx, ebx
cmp ecx, eax
lea ecx, [ebp - 0x518]
push esi
sete bl
call fcn.10008db5
mov edx, dword [ebp - 0x14c]
xor ecx, ecx
imul edx, ebx
mov dword [eax], ebx
mov eax, dword [ebp - 0x14c]
cmp edx, eax
mov eax, dword [ebp - 0x24]
setg cl
xor edx, edx
imul ecx, ecx, 0x1f9e
cmp ecx, eax
setg dl
sub edx, dword [ebp - 0x44]
neg edx
sbb edx, edx
add edx, 0x780
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x14c]
jle 0x1002564b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14c]
lea ecx, [ebp - 0x518]
mov eax, dword [ebp - 0x14c]
mov eax, dword [ebp - 0x14c]
push esi
call fcn.10008db5
cmp dword [eax], 0
jne 0x1002567a
push esi
lea ecx, [ebp - 0x518]
call fcn.10008db5
push esi
lea ecx, [ebp - 0x518]
call fcn.10008db5
mov ecx, dword [ebp - 0x44]
xor edx, edx
cmp dword [eax], ecx
mov eax, dword [ebp - 0x14c]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14c]
setge bl
xor ecx, ecx
cmp ebx, eax
setne cl
imul eax, ecx, 0xc46d
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x33
jne 0x10025728
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x92c]
call fcn.10008d6e
xor eax, eax
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100256f9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x92c]
call fcn.10008db5
mov dword [eax], 4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100256db
xor eax, eax
push eax
lea ecx, [ebp - 0x92c]
call fcn.10008db5
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x92c]
mov dword [eax], 0x27a4ef21
xor eax, eax
cmp dword [ebp - 0x40], eax
call fcn.10008db0
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x33
je 0x100256c1
lea ecx, [ebp - 0x518]
mov dword [ebp - 4], edi
call fcn.10008db0
cmp byte [ebp - 0x25], 0
je 0x10025976
movdqa xmm0, xmmword [0x10007bb0]
lea ecx, [ebp - 0x14d0]
push 6
pop eax
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1264]
push eax
lea eax, [ebp - 0x1274]
push eax
movdqu xmmword [ebp - 0x1274], xmm0
call fcn.10017899
lea ecx, [ebp - 0x1dd]
mov esi, eax
call fcn.10008ea0
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x2f0]
push dword [esi]
call fcn.10017873
push 4
lea ecx, [ebp - 0x330]
mov dword [ebp - 4], 0x18
call fcn.10008d6e
mov byte [ebp - 4], 0x19
xor edi, edi
mov dword [ebp - 0x10], 0xfffffff6
inc edi
mov dword [ebp - 0x40], 0xc3f30b91
xor eax, eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x100257e3
push dword [ebp - 0x10]
lea ecx, [ebp - 0x330]
call fcn.10008db5
mov dword [eax], 0xb11f3813
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x100257c4
xor eax, eax
mov esi, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f0]
push eax
call fcn.10008db5
lea ecx, [ebp - 0x2f0]
mov dword [eax], esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor eax, eax
push eax
call fcn.10008db5
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f0]
mov eax, dword [ebp - 0x1c]
push 3
call fcn.10008db5
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2f0]
mov eax, dword [ebp - 0x1c]
push 3
call fcn.10008db5
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [eax]
test ecx, ecx
je 0x10025863
xor eax, eax
lea ecx, [ebp - 0x2f0]
push eax
call fcn.10008db5
xor ebx, ebx
cmp dword [eax], ebx
je 0x10025863
push 2
pop eax
push eax
lea ecx, [ebp - 0x330]
call fcn.10008db5
cmp dword [eax], ebx
je 0x10025863
mov eax, edi
jmp 0x10025865
xor eax, eax
mov dword [ebp - 0x10], eax
xor ecx, ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
cmp edx, eax
setne cl
mov dword [ebp - 0x44], ecx
lea ecx, [ebp - 0x2f0]
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10008db5
mov ecx, 0x699ff93f
push 2
pop ebx
sub ecx, dword [eax]
je 0x100258ad
push ebx
lea ecx, [ebp - 0x330]
call fcn.10008db5
cmp dword [eax], 0
je 0x100258ad
mov esi, edi
jmp 0x100258b1
xor eax, eax
mov esi, eax
push ebx
lea ecx, [ebp - 0x330]
call fcn.10008db5
mov ecx, dword [ebp - 0x40]
imul ecx, esi
cmp ecx, dword [eax]
jle 0x100258d4
push 3
lea ecx, [ebp - 0x330]
call fcn.10008db5
mov eax, dword [ebp - 0x1c]
xor ebx, ebx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
lea ecx, [ebp - 0x2f0]
setle bl
xor eax, eax
push eax
mov dword [ebp - 0x44], ebx
call fcn.10008db5
lea ecx, [ebp - 0x330]
mov dword [eax], ebx
xor eax, eax
push eax
call fcn.10008db5
mov ecx, dword [ebp - 0x44]
xor ebx, ebx
cmp ecx, dword [eax]
lea ecx, [ebp - 0x330]
setg bl
xor esi, esi
inc esi
push esi
call fcn.10008db5
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
add ecx, ebx
add eax, ecx
mov ecx, 0xb856a759
cmp ecx, eax
lea ecx, [ebp - 0x330]
sbb eax, eax
neg eax
cmp eax, 0xf520a048
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x44], eax
call fcn.10008db0
or edi, 0xffffffff
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 4], edi
call fcn.10008db0
xor eax, eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push 2
xor eax, eax
lea ecx, [ebp - 0x10e0]
pop ebx
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x30], 5
push ebx
call fcn.10008d6e
push 4
lea ecx, [ebp - 0xf3c]
mov dword [ebp - 4], 0x1a
call fcn.10008d6e
push 6
mov byte [ebp - 4], 0x1b
pop eax
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x100259d7
push dword [ebp - 0x14]
lea ecx, [ebp - 0x10e0]
call fcn.10008db5
mov dword [eax], 0x9831
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x100259b9
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x100259ef
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf3c]
call fcn.10008db5
mov dword [eax], edi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100259dc
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
xor eax, eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x10025a99
mov dword [ebp - 0x2c], 0x244d513c
mov dword [ebp - 0x2c], 0x7563ffa
mov dword [ebp - 0x2c], 0x47bb7ab6
mov dword [ebp - 0x2c], 0xc0e3e763
mov dword [ebp - 0x2c], 0x2aa9dade
mov dword [ebp - 0x2c], 0x9fa8bc07
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 0x6dbc1c23
mov dword [ebp - 0x2c], 0xe8b01213
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0x6bd29a2a
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10025a8d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1180], 0xa53fde75
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10025a75
xor eax, eax
dec dword [ebp - 0x44]
dec dword [ebp - 0x18]
jns 0x10025a0c
lea ecx, [ebp - 0xf3c]
call fcn.10008db0
lea ecx, [ebp - 0x10e0]
mov dword [ebp - 4], edi
call fcn.10008db0
xor eax, eax
mov edi, 0x387f
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x12
jle 0x100260e3
jmp 0x10025acb
push 2
pop ebx
push 0xfffffffffffffffc
mov dword [ebp - 0x44], 0x7cc4
mov ecx, 0xffff
pop eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x3c], 0x16eb
push 4
mov dword [ebp - 0x40], esi
pop eax
mov dword [ebp - 0x30], 0xd14b4322
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x18], ecx
lea ecx, [ebp - 0x7b8]
push eax
call fcn.10008d6e
mov dword [ebp - 4], 0x1c
xor eax, eax
mov dword [ebp - 0x40], 5
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10025b36
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9f8], 0x6695998a
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10025b1e
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10025b56
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x174], 0xbfaead22
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10025b3e
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x10025b72
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x7b8]
call fcn.10008db5
mov dword [eax], 0x65da1f79
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10025b5b
mov eax, dword [ebp - 0x3c]
dec dword [ebp - 0x3c]
test eax, eax
jne 0x10025b99
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x4c], eax
jle 0x10025b99
xor eax, eax
mov ecx, eax
jmp 0x10025b9b
mov ecx, esi
mov eax, dword [ebp - 0x174]
inc dword [ebp - 0x174]
cmp ecx, 0xfffffffe
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x40]
cmp eax, ecx
setle dl
xor eax, eax
cmp edx, 0x6544d187
jge 0x10025bdd
cmp dword [ebp - 0x174], eax
je 0x10025bdd
mov eax, esi
mov dword [ebp - 0x40], eax
lea ecx, [ebp - 0x7b8]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
push esi
call fcn.10008db5
mov edx, dword [ebp - 0x4c]
mov esi, eax
mov ecx, dword [ebp - 0x10]
xor eax, eax
cmp ecx, edx
lea ecx, [ebp - 0x7b8]
push 2
setl al
xor ebx, ebx
add eax, dword [esi]
cmp eax, 0x1966
pop eax
push eax
setge bl
call fcn.10008db5
xor ecx, ecx
cmp ebx, dword [eax]
mov eax, 0xfff9
setg cl
cmp eax, ecx
lea ecx, [ebp - 0x7b8]
sbb esi, esi
xor ebx, ebx
inc ebx
neg esi
push ebx
call fcn.10008db5
lea ecx, [ebp - 0x7b8]
sub esi, dword [eax]
mov dword [ebp - 0x40], esi
or esi, 0xffffffff
mov dword [ebp - 4], esi
call fcn.10008db0
mov dword [ebp - 0x1c], esi
lea ecx, [ebp - 0xf54]
push 3
pop esi
mov dword [ebp - 0x18], 0x82062403
mov dword [ebp - 0x30], 0xfffffff6
mov dword [ebp - 0x2c], ebx
push esi
call fcn.10008d6e
mov dword [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10025ca8
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf54]
call fcn.10008db5
mov dword [eax], 0xcfd1f2e9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10025c8a
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10025ce8
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10025cd0
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1190], 0xfff7
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10025cb8
xor eax, eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], eax
jl 0x10025ce5
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x3c]
jns 0x10025cd8
xor eax, eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe9
je 0x10025cad
dec dword [ebp - 0x44]
lea ecx, [ebp - 0xf54]
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008db0
mov dword [ebp - 0x34], 0x88b92280
xor eax, eax
mov dword [ebp - 0x24], 0xfd3df75d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10025d32
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1334], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10025d1a
xor eax, eax
push 0xfffffffffffffffc
mov dword [ebp - 0x24], eax
pop edx
cmp dword [ebp - 0x24], edx
jge 0x10025e7d
push 2
pop edi
mov dword [ebp - 0x44], 0x85bb31c
mov dword [ebp - 0x18], 0x59c3cbaa
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10025d75
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x208], 0xa35f394
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10025d5d
xor eax, eax
mov dword [ebp - 0x204], 0xfffffffe
cmp dword [ebp - 0x204], 0xffffffe4
jge 0x10025e29
mov dword [ebp - 0x10], 0x7a10dd66
cmp dword [ebp - 0x24], eax
je 0x10025daf
cmp dword [ebp - 0x208], eax
je 0x10025daf
cmp dword [ebp - 0x24], eax
je 0x10025daf
mov ecx, ebx
cmp dword [ebp - 0x204], eax
jne 0x10025db1
mov ecx, eax
mov eax, dword [ebp - 0x10]
neg eax
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, ebx
mov eax, dword [ebp - 0x200]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, edi
mov ecx, 0xced66e5d
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
inc ecx
sub ecx, eax
je 0x10025ded
mov eax, dword [ebp - 0x204]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x715f
mov dword [ebp - 0x1334], eax
sete cl
imul ecx, dword [ebp - 0x10]
push 0
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x204]
cmp dword [ebp - 0x204], 0xffffffe4
pop eax
jl 0x10025d8c
push 0xfffffffffffffffc
pop edx
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10025e63
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10025e4f
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x137c], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10025e3b
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x10025e69
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x137c], eax
inc dword [ebp - 0x18]
push 0
pop eax
cmp dword [ebp - 0x18], 0x27
jne 0x10025e30
dec dword [ebp - 0x24]
push 0
pop eax
cmp dword [ebp - 0x24], edx
jl 0x10025d44
mov edi, 0x387f
mov dword [ebp - 0x44], 0xa277ebd0
or ecx, 0xffffffff
mov dword [ebp - 0x18], 0x8eb98764
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x10], 0xe857b1a0
mov dword [ebp - 0x4c], 0x5243b9c
mov dword [ebp - 0x44], 0x943ec3e1
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x10], eax
jmp 0x10025ec2
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1438], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10025eb5
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x18]
mov dword [ebp - 0x1434], esi
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
shl ecx, 2
cmp ecx, eax
push 7
setle dl
xor eax, eax
cmp edx, 3
pop edx
setge al
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
cmp ecx, eax
setl dl
xor ebx, ebx
sub edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
cmp esi, edx
sete bl
sub ebx, 0x5169ff4c
neg ebx
sbb ebx, ebx
xor ecx, ecx
neg ebx
cmp ebx, eax
setg cl
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
add eax, eax
je 0x10025f47
xor eax, eax
cmp dword [ebp - 0x40], eax
je 0x10025f49
xor esi, esi
inc esi
mov eax, esi
jmp 0x10025f4c
xor eax, eax
xor esi, esi
inc esi
mov dword [ebp - 0x4c], eax
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x4c], eax
je 0x10025f5a
mov ecx, esi
mov eax, edi
sub eax, ecx
lea ecx, [ebp - 0xca4]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x10]
push 3
mov dword [ebp - 0x44], eax
pop ebx
mov dword [ebp - 0x40], 0xfffffffd
mov dword [ebp - 0x14], esi
push ebx
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10025fa9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x157c], 0xd41e5596
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10025f91
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x10025fcf
push dword [ebp - 0x14]
lea ecx, [ebp - 0xca4]
call fcn.10008db5
mov dword [eax], 0xba095a97
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10025fb1
xor eax, eax
push 2
mov dword [ebp - 0x14], eax
pop ebx
jmp 0x10026008
mov dword [ebp - 0x3c], 5
cmp dword [ebp - 0x14], eax
jne 0x1002600d
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], eax
jl 0x10026005
push eax
lea ecx, [ebp - 0xca4]
call fcn.10008db5
push 0
mov dword [eax], 0xc0001115
dec dword [ebp - 0x3c]
pop eax
jns 0x10025feb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10025fd7
mov dword [ebp - 0x14], eax
or ebx, 0xffffffff
jmp 0x10026042
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x1002603f
push eax
push 0xd58
push 0x79b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
xor eax, eax
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jge 0x10026015
lea ecx, [ebp - 0xca4]
mov dword [ebp - 4], ebx
call fcn.10008db0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x34]
jne 0x1002606c
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x48], eax
je 0x1002606e
mov ecx, esi
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp eax, edx
setle cl
sub ecx, dword [ebp - 0x1c]
je 0x1002608a
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x48]
xor edx, edx
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setge dl
xor ebx, ebx
cmp edx, eax
setg bl
sub ebx, dword [ebp - 0x40]
neg ebx
sbb ebx, ebx
inc ebx
add ebx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
neg ebx
sbb ebx, ebx
xor ecx, ecx
neg ebx
cmp ebx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0x12
jg 0x10025ac8
mov ebx, 0x24a8c6a5
lea ecx, [ebp - 0x9a4]
mov dword [ebp - 0x18], ebx
push 3
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10026129
push dword [ebp - 0x10]
lea ecx, [ebp - 0x9a4]
call fcn.10008db5
mov dword [eax], 0x85613717
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1002610a
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe3
jle 0x100261f6
push 2
pop ecx
or edx, 0xffffffff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xc2da8afc
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1002616f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x13d0], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1002615b
xor eax, eax
mov dword [ebp - 0x24], 0xb
cmp dword [ebp - 0x24], 9
jge 0x100261e9
mov dword [ebp - 0x30], 0xb61d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100261a5
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6ac], 0x1836ccb0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1002618c
xor eax, eax
mov dword [ebp - 0x6ac], eax
cmp dword [ebp - 0x6ac], 0xfffffff2
jl 0x100261d7
push eax
lea ecx, [ebp - 0x9a4]
call fcn.10008db5
mov ecx, dword [ebp - 0x30]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x6ac]
cmp dword [ebp - 0x6ac], 0xfffffff2
pop eax
jge 0x100261b4
dec dword [ebp - 0x44]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
jl 0x1002617c
push 2
pop ecx
or edx, 0xffffffff
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe3
jg 0x1002613c
push eax
lea ecx, [ebp - 0x9a4]
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x9a4]
mov dword [ebp - 4], eax
call fcn.10008db0
push 3
mov dword [ebp - 0x18], ebx
lea ecx, [ebp - 0x944]
pop ebx
push ebx
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026259
push dword [ebp - 0x10]
lea ecx, [ebp - 0x944]
call fcn.10008db5
mov dword [eax], 0x85613717
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002623b
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe3
jle 0x10026324
push 2
pop ecx
or edx, 0xffffffff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xc2da8afc
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1002629f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1500], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1002628b
xor eax, eax
mov dword [ebp - 0x24], 0xb
cmp dword [ebp - 0x24], 9
jge 0x10026317
mov dword [ebp - 0x30], 0xb61d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100262d3
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c8], 0x1836ccb0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100262bb
xor eax, eax
mov dword [ebp - 0x7c8], eax
cmp dword [ebp - 0x7c8], 0xfffffff2
jl 0x10026305
push eax
lea ecx, [ebp - 0x944]
call fcn.10008db5
mov ecx, dword [ebp - 0x30]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x7c8]
cmp dword [ebp - 0x7c8], 0xfffffff2
pop eax
jge 0x100262e2
dec dword [ebp - 0x44]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
jl 0x100262ac
push 2
pop ecx
or edx, 0xffffffff
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe3
jg 0x1002626c
push eax
lea ecx, [ebp - 0x944]
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x944]
mov dword [ebp - 4], eax
call fcn.10008db0
xor eax, eax
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x18], eax
push ebx
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x10], eax
jmp 0x10026376
push dword [ebp - 0x10]
call fcn.10008db5
mov dword [eax], 0x8a1f9496
inc dword [ebp - 0x10]
lea ecx, [ebp - 0x7e0]
cmp dword [ebp - 0x10], ebx
jl 0x10026365
push 2
pop eax
push eax
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
mov dword [ebp - 0x18], 0xfffffff6
cmp dword [ebp - 0x18], 0x2c
jge 0x100264af
mov dword [ebp - 0x24], 0xfffffff8
lea ecx, [ebp - 0x6c4]
push ebx
call fcn.10008d6e
mov byte [ebp - 4], 0x22
xor eax, eax
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100263e6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6c4]
call fcn.10008db5
mov dword [eax], 0xe0566a92
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100263c8
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10026486
mov esi, dword [ebp - 0x24]
lea ecx, [ebp - 0x6c4]
push 2
pop eax
push eax
call fcn.10008db5
mov dword [eax], esi
test esi, esi
jne 0x10026468
xor ebx, ebx
lea ecx, [ebp - 0x6c4]
inc ebx
push ebx
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x7e0]
call fcn.10008db5
mov edi, eax
lea ecx, [ebp - 0x7e0]
xor eax, eax
push eax
call fcn.10008db5
push 2
mov ecx, dword [eax]
pop eax
mov dword [edi], ecx
lea ecx, [ebp - 0x6c4]
push eax
call fcn.10008db5
mov edx, dword [ebp - 0x24]
mov esi, eax
mov ecx, dword [ebp - 0x24]
xor eax, eax
cmp edx, ecx
setl al
xor ecx, ecx
cmp eax, dword [esi]
setl cl
cmp dword [edi], ecx
jle 0x10026468
xor eax, eax
xor esi, esi
mov ecx, eax
inc esi
jmp 0x1002646d
xor esi, esi
inc esi
mov ecx, esi
mov eax, dword [ebp - 0x24]
add ecx, 0xffff42a3
xor edx, edx
cmp ecx, eax
setge dl
add edx, dword [ebp - 0x18]
jne 0x10026486
xor eax, eax
jmp 0x10026488
mov eax, esi
mov dword [ebp - 0x44], eax
lea ecx, [ebp - 0x6c4]
mov byte [ebp - 4], 0x21
call fcn.10008db0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x2c
push 3
pop ebx
jl 0x100263a0
mov edi, 0x387f
or eax, 0xffffffff
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 4], eax
call fcn.10008db0
mov dword [ebp - 0x14], 0x7e2799ac
mov eax, 0x4a6e8f59
mov dword [ebp - 0xe48], eax
mov dword [ebp - 0xe44], eax
mov dword [ebp - 0xe40], eax
mov dword [ebp - 0xe3c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026506
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x35c], 0xb101
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100264ee
xor eax, eax
mov ebx, dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x14], 0xffffffea
cmp dword [ebp - 0x14], 0xffffffef
jge 0x10026553
or esi, 0xffffffff
mov dword [ebp - 0x44], 0xfd4914d2
cmp dword [ebp - 0x44], eax
je 0x10026537
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10026542
push eax
push eax
call ebx
jmp 0x10026540
mov dword [ebp - 0x44], esi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x10026550
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffef
jl 0x1002651c
xor esi, esi
inc esi
mov eax, dword [ebp - 0x358]
xor edx, edx
mov eax, dword [ebp - 0x35c]
mov eax, dword [ebp - 0x358]
mov eax, dword [ebp - 0x354]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x358]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x358]
mov eax, dword [ebp - 0x358]
cmp ecx, eax
mov eax, dword [ebp - 0xe40]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x358]
setge cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov ecx, 0x4a6e8f59
setle dl
xor eax, eax
add edx, 0x44499102
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x14], 0x7e2799ac
mov dword [ebp - 0xec8], ecx
mov dword [ebp - 0xec4], ecx
mov dword [ebp - 0xec0], ecx
mov dword [ebp - 0xebc], ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x100265fa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x27c], 0xb101
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100265e1
xor eax, eax
mov dword [ebp - 0x14], 0xffffffea
cmp dword [ebp - 0x14], 0xffffffef
jge 0x10026641
or esi, 0xffffffff
mov dword [ebp - 0x44], 0xfd4914d2
cmp dword [ebp - 0x44], eax
je 0x10026625
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10026630
push eax
push eax
call ebx
jmp 0x1002662e
mov dword [ebp - 0x44], esi
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
xor eax, eax
cmp dword [ebp - 0x14], eax
jne 0x1002663e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffef
jl 0x1002660a
xor esi, esi
inc esi
mov eax, dword [ebp - 0x278]
xor edx, edx
mov eax, dword [ebp - 0x27c]
mov eax, dword [ebp - 0x278]
mov eax, dword [ebp - 0x274]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x278]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x278]
mov eax, dword [ebp - 0x278]
cmp ecx, eax
mov eax, dword [ebp - 0xec0]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x278]
push 2
setge cl
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x14]
cmp eax, ecx
pop ecx
setle dl
xor eax, eax
add edx, 0x44499102
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x2c], 0x8cccddd
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xf76ec751
mov dword [ebp - 0x44], 8
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100266e7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1204], 0xb90da115
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100266cf
xor eax, eax
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], eax
jl 0x10026728
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1204], 0
je 0x10026710
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10026720
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x10026720
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10026720
call dword [sym.imp.GDI32.dll_GdiFlush]
mov eax, dword [ebp - 0x18]
dec dword [ebp - 0x18]
jns 0x100266ef
dec dword [ebp - 0x44]
lea ecx, [ebp - 0x98c]
push 3
pop ebx
mov dword [ebp - 0x18], 0x24a8c6a5
push ebx
call fcn.10008d6e
xor eax, eax
mov dword [ebp - 4], 0x23
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026770
push dword [ebp - 0x10]
lea ecx, [ebp - 0x98c]
call fcn.10008db5
mov dword [eax], 0x85613717
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10026752
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xffffffe3
jle 0x1002683b
push 2
pop ecx
or edx, 0xffffffff
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xc2da8afc
mov dword [ebp - 0x2c], 0xfffffff6
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x100267b6
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14a0], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100267a2
xor eax, eax
mov dword [ebp - 0x24], 0xb
cmp dword [ebp - 0x24], 9
jge 0x1002682e
mov dword [ebp - 0x30], 0xb61d
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100267ea
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7f8], 0x1836ccb0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100267d2
xor eax, eax
mov dword [ebp - 0x7f8], eax
cmp dword [ebp - 0x7f8], 0xfffffff2
jl 0x1002681c
push eax
lea ecx, [ebp - 0x98c]
call fcn.10008db5
mov ecx, dword [ebp - 0x30]
push 0
mov dword [eax], ecx
dec dword [ebp - 0x7f8]
cmp dword [ebp - 0x7f8], 0xfffffff2
pop eax
jge 0x100267f9
dec dword [ebp - 0x44]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 9
jl 0x100267c3
push 2
pop ecx
or edx, 0xffffffff
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffe3
jg 0x10026783
push eax
lea ecx, [ebp - 0x98c]
call fcn.10008db5
mov ecx, dword [ebp - 0x18]
mov dword [eax], ecx
or eax, 0xffffffff
lea ecx, [ebp - 0x98c]
mov dword [ebp - 4], eax
call fcn.10008db0
mov dword [ebp - 0x10], 0xbac64a68
xor eax, eax
mov dword [ebp - 0x44], 0x33992443
mov dword [ebp - 0x10], eax
jmp 0x1002687a
cmp dword [ebp - 0x44], eax
jne 0x10026880
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 9
jne 0x10026872
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], al
je 0x10026895
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 0x40], 0xc80ae7b1
push ebx
call fcn.10008d6e
mov dword [ebp - 4], 0x24
xor eax, eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x44], 5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100268ec
mov esi, 0xffff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x3b4]
call fcn.10008db5
mov dword [eax], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100268cf
xor esi, esi
xor eax, eax
inc esi
cmp dword [ebp - 0x1c], eax
je 0x10026984
mov ecx, dword [ebp - 0x1c]
xor edx, edx
sub ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
or eax, 0xffffffff
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor eax, eax
cmp ecx, 0x263b0a6d
setge al
xor edx, edx
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
imul eax, ecx, 0xc65b
test eax, eax
jne 0x1002694b
mov eax, dword [ebp - 0x1c]
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.10008db5
mov dword [ebp - 0x24], 0xa5b5cf0a
lea ecx, [ebp - 0x3b4]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
push ebx
call fcn.10008db5
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.10008db5
jmp 0x10026987
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x3b4]
call fcn.10008db5
mov ecx, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, esi
push esi
setle dl
xor ebx, ebx
imul edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
cmp ecx, edx
lea ecx, [ebp - 0x3b4]
setle bl
sub ebx, dword [eax]
neg ebx
sbb ebx, ebx
inc ebx
call fcn.10008db5
cmp ebx, dword [eax]
jg 0x100269c5
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xa
je 0x100269f6
push 7
pop eax
mov dword [ebp - 0x1c], eax
jmp 0x100269e7
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x44]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff6
jge 0x100269de
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xa
jne 0x100269d9
or eax, 0xffffffff
lea ecx, [ebp - 0x3b4]
mov dword [ebp - 4], eax
call fcn.10008db0
push 3
pop ebx
mov dword [ebp - 0x24], ebx
xor eax, eax
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026a36
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x18c], 0xfffffffd
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10026a1e
xor eax, eax
push 2
pop ecx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], eax
jl 0x10026d1b
or edi, 0xffffffff
mov dword [ebp - 0x34], 0x69aed23b
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10026a74
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe68], 0x3be41b0c
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10026a5b
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0x10026c02
mov dword [ebp - 0x1c], 0x263126ff
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jg 0x10026bdf
mov dword [ebp - 0x10], 0xfffffff7
lea ecx, [ebp - 0xd64]
push esi
call fcn.10008d6e
push esi
lea ecx, [ebp - 0xb3c]
mov dword [ebp - 4], 0x25
call fcn.10008d6e
xor eax, eax
mov byte [ebp - 4], 0x26
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10026ae1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd64]
call fcn.10008db5
mov dword [eax], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10026ac3
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x10026b07
push dword [ebp - 0x14]
lea ecx, [ebp - 0xb3c]
call fcn.10008db5
mov dword [eax], 0x81f6ed73
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10026ae9
xor eax, eax
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], eax
jl 0x10026bb5
mov dword [ebp - 0x40], 0x6082f4e5
cmp dword [ebp - 0x10], eax
je 0x10026b2d
lea ecx, [ebp - 0xb3c]
call fcn.10008db0
lea ecx, [ebp - 0xd64]
mov dword [ebp - 4], edi
call fcn.10008db0
inc dword [ebp - 0x1c]
push 2
pop ecx
cmp dword [ebp - 0x1c], ecx
jle 0x10026a8f
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10026bff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x18c], 0xfffffffb
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10026be7
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], ecx
jle 0x10026a7c
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], eax
jl 0x10026d0d
mov dword [ebp - 0x44], 0x674b172a
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x18c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x188]
mov eax, dword [ebp - 0xe5c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x18c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x18c]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp + eax*4 - 0x18c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x18c]
cmp eax, ecx
mov eax, dword [ebp - 0xe5c]
setle dl
dec eax
neg eax
sbb eax, eax
neg eax
sub edx, eax
mov eax, dword [ebp - 0xe60]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x34]
setle cl
xor ebx, ebx
cmp ecx, 0x6d6
mov edx, dword [ebp + eax*4 - 0x18c]
mov eax, dword [ebp - 0x30]
setle bl
add eax, ebx
xor ecx, ecx
cmp eax, edx
setg cl
cmp ecx, dword [ebp - 0x44]
jle 0x10026cb6
dec dword [ebp - 0x24]
jns 0x10026a48
mov dword [ebp - 0x48], eax
lea ecx, [ebp - 0xb54]
push esi
call fcn.10008d6e
mov dword [ebp - 4], 0x27
xor eax, eax
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10026d5c
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb54]
call fcn.10008db5
mov dword [eax], 0xa860b4ff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10026d3e
xor eax, eax
mov byte [ebp - 0x25], al
cmp byte [ebp - 0x25], 0
je 0x10026d7a
push eax
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
xor eax, eax
push eax
push eax
call dword [sym.imp.USER32.dll_CreateDialogParamA]
xor eax, eax
push eax
lea ecx, [ebp - 0xb54]
call fcn.10008db5
lea ecx, [ebp - 0xb54]
mov eax, dword [eax]
mov dword [ebp - 0x44], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10008db0
push ebx
lea ecx, [ebp - 0x6e4]
call fcn.10008d6e
mov dword [ebp - 4], 0x28
xor eax, eax
mov dword [ebp - 0x18], 0x7cb3f4f4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026dd7
or ecx, 0xffffffff
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x11dc], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10026dc3
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x10026de9
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x11dc], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10026ddc
mov eax, dword [ebp - 0x11d4]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10026e24
push dword [ebp - 0x10]
lea ecx, [ebp - 0x6e4]
call fcn.10008db5
mov dword [eax], 0x8a1f9496
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10026e06
mov dword [ebp - 0x18], 0x8eb98764
or ecx, 0xffffffff
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x10], 0xe857b1a0
mov dword [ebp - 0x4c], 0x5243b9c
mov dword [ebp - 0x44], 0x943ec3e1
mov dword [ebp - 0x2c], 0xfffffffd
mov dword [ebp - 0x10], eax
jmp 0x10026e62