Function at 0x100bba80
Capabilities:
Contain obfuscated stackstrings
Link many functions at runtime
Log keystrokes
Log keystrokes via polling

Disassembly:
sub esp, 0x630
mov eax, dword [0x101b629c]
xor eax, esp
mov dword [esp + 0x62c], eax
mov eax, dword [esp + 0x634]
push ebx
mov ebx, dword [esp + 0x644]
push ebp
push esi
xor esi, esi
push edi
mov edi, dword [esp + 0x648]
xor ebp, ebp
mov dword [esp + 0x20], eax
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
mov dword [esp + 0x34], ebp
mov dword [esp + 0x3c], esi
call dword [sym.imp.KERNEL32.DLL_GetCurrentProcessId]
cmp edi, 0x7e9
mov dword [esp + 0x18], eax
jne 0x100bbb82
cmp dword [esp + 0x64c], 0x1234
jne 0x100bbb82
push 0xff
lea ecx, [esp + 0x441]
push ebp
push ecx
mov byte [esp + 0x448], 0
call fcn.10100160
mov edx, dword [esp + 0x24]
add esp, 0xc
push edx
push 2
call fcn.100dacb0
add esp, 4
push eax
lea eax, [esp + 0x444]
push eax
call fcn.10100f40
add esp, 0xc
lea ecx, [esp + 0x43c]
push ecx
push ebp
push 0xf001f
call fcn.100b1030
mov esi, eax
test esi, esi
mov dword [esp + 0x3c], esi
je 0x100bbb63
push ebp
push ebp
push ebp
push 6
push esi
call fcn.100b0fe0
mov ebp, eax
test ebp, ebp
mov dword [esp + 0x34], ebp
jne 0x100bbb80
push esi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
xor eax, eax
mov ecx, dword [esp + 0x63c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100ff704
add esp, 0x630
ret 0x14
xor esi, esi
call fcn.100c2db0
cmp eax, esi
jbe 0x100bbc6a
nop
cmp eax, 1
jne 0x100bbb9f
call fcn.100c6a30
jmp 0x100bbc5d
cmp eax, 2
jne 0x100bbbae
call fcn.100c6910
jmp 0x100bbc5d
cmp eax, 3
jne 0x100bbbbd
call fcn.100c69a0
jmp 0x100bbc5d
cmp eax, 4
jne 0x100bbbcc
call fcn.100cc200
jmp 0x100bbc5d
cmp eax, 5
jne 0x100bbbdb
call fcn.100cc250
jmp 0x100bbc5d
cmp eax, 6
jne 0x100bbbe7
call fcn.100caea0
jmp 0x100bbc5d
cmp eax, 7
jne 0x100bbbf3
call fcn.100caef0
jmp 0x100bbc5d
cmp eax, 8
jne 0x100bbbff
call fcn.100c8920
jmp 0x100bbc5d
cmp eax, 9
jne 0x100bbc0b
call fcn.100cc2a0
jmp 0x100bbc5d
cmp eax, 0xa
jne 0x100bbc17
call fcn.100cc2f0
jmp 0x100bbc5d
cmp eax, 0xb
jne 0x100bbc23
call fcn.100caf40
jmp 0x100bbc5d
cmp eax, 0xc
jne 0x100bbc2f
call fcn.100caf90
jmp 0x100bbc5d
cmp eax, 0xd
jne 0x100bbc3b
call fcn.100c8f10
jmp 0x100bbc5d
cmp eax, 0xe
jne 0x100bbc47
call fcn.100c8fa0
jmp 0x100bbc5d
cmp eax, 0xf
jne 0x100bbc53
call fcn.100c6ad0
jmp 0x100bbc5d
cmp eax, 0x10
jne 0x100bbc5d
call fcn.100c6b80
call fcn.100c2db0
cmp eax, esi
ja 0x100bbb90
mov eax, dword [0x101a2668]
mov esi, eax
test esi, esi
jne 0x100bbca8
cmp dword [0x101a266c], eax
je 0x100bbca8
cmp edi, 6
je 0x100bbca3
cmp edi, 0x1c
je 0x100bbca3
cmp edi, 0x86
je 0x100bbca3
cmp edi, 8
je 0x100bbca3
cmp edi, 0x46
je 0x100bbca3
cmp edi, 0x47
je 0x100bbca3
cmp edi, 0x18
jne 0x100bbca8
mov esi, 1
test eax, eax
jne 0x100bbce5
call dword [sym.imp.KERNEL32.DLL_GetTickCount]
mov edx, eax
sub edx, dword [0x102cc294]
cmp edx, 0xbb8
jb 0x100bbce5
push 1
mov dword [0x102cc294], eax
mov dword [0x101a2670], 0
call fcn.100c2e60
add esp, 4
mov dword [0x101a2670], 1
call fcn.10128a40
cmp edi, 0x8b0
jb 0x100bbd28
cmp edi, 0x8ba
jae 0x100bbd30
mov eax, dword [esp + 0x64c]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push ecx
push edi
call fcn.100d77c0
test eax, eax
je 0x100beb20
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x8ba
jb 0x100bbd4e
cmp edi, 0x8bf
jae 0x100bbd4e
mov edx, dword [esp + 0x64c]
mov eax, dword [esp + 0x20]
push ebx
push edx
push eax
push edi
call fcn.1000bcb0
jmp 0x100bbd0e
xor ecx, ecx
cmp esi, ecx
jne 0x100bbd99
cmp edi, 0x84e
jne 0x100beb20
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov ecx, ebx
and ecx, eax
and ebx, 0x8000
mov dword [0x101a2668], ecx
mov dword [0x101a266c], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x84e
jne 0x100bbdda
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov edx, ebx
and edx, eax
and ebx, 0x8000
mov dword [0x101a2668], edx
mov dword [0x101a266c], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 6
jne 0x100bbe1b
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov eax, dword [esp + 0x64c]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x1c
jne 0x100bbe5c
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov edx, dword [esp + 0x64c]
mov eax, dword [esp + 0x20]
push ebx
push edx
push edi
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x86
jne 0x100bbe8b
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
jmp 0x100bbb63
cmp edi, 8
jne 0x100bbecc
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov ecx, dword [esp + 0x64c]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x46
jne 0x100bbf0d
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov eax, dword [esp + 0x64c]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push edi
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x47
jne 0x100bbf4e
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov edx, dword [esp + 0x64c]
mov eax, dword [esp + 0x20]
push ebx
push edx
push edi
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x18
jne 0x100bbf8f
push 0x596235d2
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov ecx, dword [esp + 0x64c]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0x215
jne 0x100bbfa1
push 0x7fae1452
jmp 0x100bbe69
cmp edi, 0x84
jne 0x100bc0cd
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x404]
mov eax, ebx
push ecx
shr eax, 0x10
push edi
movsx esi, bx
movsx ebp, ax
call dword [sym.imp.USER32.dll_GetClientRect]
mov edx, dword [esp + 0x40c]
xor eax, eax
lea ecx, [esp + 0x18]
push ecx
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x414]
push edi
mov edi, dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0x30], edx
mov dword [esp + 0x34], eax
call edi
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x28]
push edx
push eax
call edi
cmp esi, dword [esp + 0x18]
jl 0x100bc0af
cmp esi, dword [esp + 0x28]
jge 0x100bc0af
cmp ebp, dword [esp + 0x1c]
jl 0x100bc0af
cmp ebp, dword [esp + 0x2c]
jge 0x100bc0af
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc046
cmp dword [0x102cba64], eax
je 0x100bc05e
cmp dword [0x102cba7c], 0
jne 0x100bc05e
mov ebx, dword [0x102cba34]
mov dword [esp + 0x650], ebx
jmp 0x100bc06f
movzx ecx, bp
movzx edx, si
shl ecx, 0x10
or ecx, edx
mov dword [0x102cba34], ecx
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov eax, dword [esp + 0x64c]
mov ecx, dword [esp + 0x20]
push ebx
push eax
push 0x84
push ecx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
mov edx, dword [esp + 0x64c]
mov eax, dword [esp + 0x20]
push ebx
push edx
push 0x84
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
cmp edi, 0xa0
je 0x100beab9
cmp edi, 0xa1
je 0x100beab9
cmp edi, 0xa2
je 0x100beab9
cmp edi, 0xa3
je 0x100beab9
cmp edi, 0xa4
je 0x100beab9
cmp edi, 0xa5
je 0x100beab9
cmp edi, 0xa6
je 0x100beab9
cmp edi, 0xa7
je 0x100beab9
cmp edi, 0xa8
je 0x100beab9
cmp edi, 0xa9
je 0x100beab9
cmp edi, 0x200
jne 0x100bc20e
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc1ce
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc177
cmp dword [0x102cba64], eax
je 0x100bc18d
cmp dword [0x102cba7c], 0
jne 0x100bc18d
test dword [esp + 0x64c], edi
je 0x100bbb63
movsx ecx, bx
shr ebx, 0x10
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
movsx edx, bx
push eax
push ecx
mov dword [esp + 0x24], edx
call dword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [0x102cba74], 0
jne 0x100bc1ce
movzx edx, word [esp + 0x1c]
movzx eax, word [esp + 0x18]
shl edx, 0x10
or edx, eax
mov dword [0x102cba34], edx
test dword [esp + 0x64c], edi
jne 0x100bc1f1
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc1f1
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x200
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x201
jne 0x100bc30e
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc2ce
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc244
cmp dword [0x102cba64], eax
je 0x100bc25a
cmp dword [0x102cba7c], 0
jne 0x100bc25a
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc273
cmp dword [0x102cba64], eax
je 0x100bc2b9
cmp dword [0x102cba7c], 0
jne 0x100bc2b9
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc2f1
push 0
push 0
call fcn.100cc850
add esp, 8
test dword [esp + 0x64c], edi
jne 0x100bc2f1
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc2f1
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x201
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x202
jne 0x100bc40e
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc3ce
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc344
cmp dword [0x102cba64], eax
je 0x100bc35a
cmp dword [0x102cba7c], 0
jne 0x100bc35a
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc373
cmp dword [0x102cba64], eax
je 0x100bc3b9
cmp dword [0x102cba7c], 0
jne 0x100bc3b9
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc3f1
push 0
push 0
call fcn.100cc880
add esp, 8
test dword [esp + 0x64c], edi
jne 0x100bc3f1
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc3f1
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x202
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x203
jne 0x100bc4ec
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc4b9
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc444
cmp dword [0x102cba64], eax
je 0x100bc45a
cmp dword [0x102cba7c], 0
jne 0x100bc45a
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc473
cmp dword [0x102cba64], eax
je 0x100bc4b9
cmp dword [0x102cba7c], 0
jne 0x100bc4b9
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc4dc
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc4dc
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
jmp 0x100beb20
cmp edi, 0x204
jne 0x100bc5ec
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc5ac
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc522
cmp dword [0x102cba64], eax
je 0x100bc538
cmp dword [0x102cba7c], 0
jne 0x100bc538
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc551
cmp dword [0x102cba64], eax
je 0x100bc597
cmp dword [0x102cba7c], 0
jne 0x100bc597
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc5cf
push 0
push 1
call fcn.100cc850
add esp, 8
test dword [esp + 0x64c], edi
jne 0x100bc5cf
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc5cf
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x204
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x205
jne 0x100bc6ec
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc6ac
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc622
cmp dword [0x102cba64], eax
je 0x100bc638
cmp dword [0x102cba7c], 0
jne 0x100bc638
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc651
cmp dword [0x102cba64], eax
je 0x100bc697
cmp dword [0x102cba7c], 0
jne 0x100bc697
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc6cf
push 0
push 1
call fcn.100cc880
add esp, 8
test dword [esp + 0x64c], edi
jne 0x100bc6cf
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc6cf
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x205
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x207
jne 0x100bc7b5
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc4b9
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc722
cmp dword [0x102cba64], eax
je 0x100bc738
cmp dword [0x102cba7c], 0
jne 0x100bc738
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc751
cmp dword [0x102cba64], eax
je 0x100bc797
cmp dword [0x102cba7c], 0
jne 0x100bc797
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc4dc
push 0
push 2
call fcn.100cc850
add esp, 8
jmp 0x100bc4b9
cmp edi, 0x208
jne 0x100bc87e
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc4b9
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc7eb
cmp dword [0x102cba64], eax
je 0x100bc801
cmp dword [0x102cba7c], 0
jne 0x100bc801
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc81a
cmp dword [0x102cba64], eax
je 0x100bc860
cmp dword [0x102cba7c], 0
jne 0x100bc860
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx edx, ax
lea eax, [esp + 0x18]
mov dword [esp + 0x18], ecx
mov ecx, dword [0x102cba40]
push eax
push ecx
mov dword [esp + 0x24], edx
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx edx, word [esp + 0x18]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc4dc
push 0
push 2
call fcn.100cc880
add esp, 8
jmp 0x100bc4b9
cmp edi, 0x20a
jne 0x100bc948
cmp dword [0x102cba40], ecx
mov edi, 0x8000
je 0x100bc908
push 0x5e1c1dfb
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc8b0
cmp dword [0x102cba64], eax
je 0x100bc8c6
cmp dword [0x102cba7c], 0
jne 0x100bc8c6
test dword [esp + 0x64c], edi
je 0x100bbb63
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc8df
cmp dword [0x102cba64], eax
je 0x100bc908
cmp dword [0x102cba7c], 0
jne 0x100bc908
mov eax, dword [0x102cba34]
movsx ecx, ax
shr eax, 0x10
movsx eax, ax
movzx eax, ax
movzx ecx, cx
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x650], eax
test dword [esp + 0x64c], edi
jne 0x100bc92b
push 0
call fcn.100c9730
add esp, 4
test eax, eax
jne 0x100bc92b
cmp dword [0x102cba74], eax
je 0x100bbb63
and dword [esp + 0x64c], 0xffff7fff
push 0x20a
call fcn.100bb6a0
add esp, 4
jmp 0x100beb20
cmp edi, 0x2a3
jne 0x100bc9e2
cmp dword [0x102cba40], ecx
je 0x100beb20
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bc97d
cmp dword [0x102cba64], eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov eax, dword [0x102cba34]
movsx edx, ax
shr eax, 0x10
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov edx, dword [0x102cba40]
movsx eax, ax
push ecx
push edx
mov dword [esp + 0x650], 0x2a1
mov dword [esp + 0x654], 0
mov dword [esp + 0x24], eax
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx ecx, word [esp + 0x18]
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x650], eax
jmp 0x100beb20
cmp edi, 0x2a2
jne 0x100bca7c
cmp dword [0x102cba40], ecx
je 0x100beb20
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bca17
cmp dword [0x102cba64], eax
je 0x100beb20
cmp dword [0x102cba7c], 0
jne 0x100beb20
mov eax, dword [0x102cba34]
movsx edx, ax
shr eax, 0x10
lea ecx, [esp + 0x18]
mov dword [esp + 0x18], edx
mov edx, dword [0x102cba40]
movsx eax, ax
push ecx
push edx
mov dword [esp + 0x650], 0x2a1
mov dword [esp + 0x654], 0
mov dword [esp + 0x24], eax
call fcn.100c0da0
movzx eax, word [esp + 0x1c]
movzx ecx, word [esp + 0x18]
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x650], eax
jmp 0x100beb20
cmp edi, 0x100
jne 0x100bcabd
test ebx, 0x4000000
jne 0x100bca9e
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
and ebx, 0xfbffffff
push 0x100
mov dword [esp + 0x654], ebx
call fcn.100bb630
add esp, 4
jmp 0x100beb20
cmp edi, 0x101
jne 0x100bcafe
test ebx, 0x4000000
jne 0x100bcadf
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
and ebx, 0xfbffffff
push 0x101
mov dword [esp + 0x654], ebx
call fcn.100bb630
add esp, 4
jmp 0x100beb20
cmp edi, 0x104
jne 0x100bcb3f
test ebx, 0x4000000
jne 0x100bcb20
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
and ebx, 0xfbffffff
push 0x104
mov dword [esp + 0x654], ebx
call fcn.100bb630
add esp, 4
jmp 0x100beb20
cmp edi, 0x105
jne 0x100bcb80
test ebx, 0x4000000
jne 0x100bcb61
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
and ebx, 0xfbffffff
push 0x105
mov dword [esp + 0x654], ebx
call fcn.100bb630
add esp, 4
jmp 0x100beb20
cmp edi, 0x106
jne 0x100bcbb4
test ebx, 0x4000000
jne 0x100bcba2
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
and ebx, 0xfbffffff
mov dword [esp + 0x650], ebx
jmp 0x100beb20
cmp edi, 0x102
jne 0x100bcc3b
mov al, byte [esp + 0x64c]
cmp al, 0x76
mov esi, dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov edi, 0x8000
je 0x100bcbd6
cmp al, 0x56
jne 0x100bcbe3
push 0x11
call esi
test di, ax
jne 0x100bbb63
cmp dword [0x102cc2a8], 0
je 0x100bcc06
test ebx, 0x4000000
jne 0x100bcc06
push 1
call fcn.100c9730
add esp, 4
test eax, eax
je 0x100bbb63
push 0x10
call esi
test di, ax
je 0x100bcc29
mov edx, dword [esp + 0x64c]
push edx
call fcn.100c9210
movsx eax, al
add esp, 4
mov dword [esp + 0x64c], eax
and ebx, 0xfbffffff
mov dword [esp + 0x650], ebx
jmp 0x100beb20
cmp edi, 0x7e9
jne 0x100bcde1
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
call fcn.100bb7a0
xor esi, esi
cmp dword [ebp + 0x1000424], esi
jbe 0x100bcc89
lea edi, [ebp + 0x1000024]
lea ecx, [ecx]
push edi
mov ecx, 0x102cc314
call fcn.1006fbc0
add esi, 1
add edi, 4
cmp esi, dword [ebp + 0x1000424]
jb 0x100bcc70
push 0x400
lea ecx, [ebp + 0x1000024]
push 0
push ecx
call fcn.10100160
push ebp
call fcn.100c6180
add esp, 0x10
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c8710
add esp, 4
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c5cf0
add esp, 4
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c1ec0
add esp, 4
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c97e0
add esp, 4
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c5ff0
add esp, 4
test eax, eax
je 0x100bcd00
push ebp
call fcn.100c8d30
add esp, 4
test eax, eax
je 0x100bcd00
mov ebx, 1
mov ebp, ebx
jmp 0x100bcd05
xor ebp, ebp
lea ebx, [ebp + 1]
push 0x3f1c98f9
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bcd1c
call dword [sym.imp.USER32.dll_ReleaseCapture]
push 0x6f4b12d3
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bcd32
call fcn.100afd00
push 0x6a5a450a
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bcd49
mov dword [0x102cba8c], ebx
push 0x7d877e7a
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bcd60
mov dword [0x102cc290], ebx
mov eax, dword [esp + 0x34]
lea esi, [eax + 0x1000480]
mov ecx, 0x18
mov edi, 0x102cb7b8
rep movsd dword es:[edi], dword [esi]
lea esi, [eax + 0x10004e0]
mov ecx, 0x18
mov edi, 0x102cb9d0
rep movsd dword es:[edi], dword [esi]
call fcn.100bb5f0
call dword [sym.imp.KERNEL32.DLL_GetCurrentThreadId]
xor esi, esi
cmp ebp, esi
mov dword [0x102cc2f4], eax
mov dword [0x101a2670], esi
je 0x100bcdb5
push esi
call fcn.100c2e60
add esp, 4
test eax, eax
mov dword [esp + 0x10], ebx
jne 0x100bcdb9
mov dword [esp + 0x10], esi
push 0x4000
push esi
push 0x102c77b8
mov dword [0x101a2670], ebx
mov dword [esp + 0x20], ebx
call fcn.10100160
add esp, 0xc
mov dword [0x102cba5c], esi
jmp 0x100beb20
cmp edi, 0x7ea
jne 0x100bce18
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov edx, dword [esp + 0x20]
push edx
call fcn.100bb9e0
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x837
jne 0x100bd4af
mov ebx, dword [esp + 0x64c]
mov esi, ebx
mov eax, ebx
and eax, 0x80
shr esi, 0x10
xor ebp, ebp
and ebx, 0x40
test byte [esp + 0x64c], 1
mov dword [esp + 0x28], eax
je 0x100bce4f
mov ebp, 1
cmp esi, 2
ja 0x100beb20
cmp dword [esp + 0x650], 0
jl 0x100beb20
cmp dword [esp + 0x650], 0xff
jg 0x100beb20
mov eax, dword [esp + 0x650]
push 0
push eax
call dword [sym.imp.USER32.dll_MapVirtualKeyA]
mov ecx, dword [esp + 0x650]
mov edi, eax
shl edi, 0x10
or edi, 1
push ecx
mov dword [esp + 0x34], eax
mov dword [esp + 0x18], edi
call fcn.1004e670
add esp, 4
test eax, eax
je 0x100bceb5
or edi, 0x1000000
mov dword [esp + 0x14], edi
cmp esi, 1
jne 0x100bcf00
test ebp, ebp
jne 0x100bcedf
cmp dword [esp + 0x650], 0x79
je 0x100bcedf
mov edx, dword [esp + 0x650]
push edx
mov dword [esp + 0x14], 0x100
call fcn.100cc900
jmp 0x100bcf4c
mov edx, dword [esp + 0x650]
or edi, 0x20000000
push edx
mov dword [esp + 0x18], edi
mov dword [esp + 0x14], 0x104
call fcn.100cc900
jmp 0x100bcf4c
test ebp, ebp
jne 0x100bcf22
cmp dword [esp + 0x650], 0x79
je 0x100bcf22
or edi, 0xc0000000
mov dword [esp + 0x10], 0x101
mov dword [esp + 0x14], edi
jmp 0x100bcf3a
or edi, 0x20000000
or edi, 0xc0000000
mov dword [esp + 0x10], 0x105
mov dword [esp + 0x14], edi
cmp esi, 2
jne 0x100bcf4f
mov eax, dword [esp + 0x650]
push eax
call fcn.100cc940
add esp, 4
test ebx, ebx
je 0x100bcf59
xor edi, edi
mov dword [esp + 0x14], edi
call fcn.100bfe50
mov ebx, dword [esp + 0x20]
mov esi, eax
test esi, esi
mov dword [esp + 0x24], esi
jne 0x100bcf79
push ebx
call dword [sym.imp.USER32.dll_SetFocus]
mov esi, ebx
mov dword [esp + 0x24], esi
push 0x797a779e
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bcf90
mov esi, ebx
mov dword [esp + 0x24], esi
cmp dword [0x102cba7c], 0
jne 0x100bcfb0
cmp esi, ebx
jne 0x100bcfb0
cmp dword [0x102cba70], 0
jne 0x100bcfb0
or edi, 0x4000000
mov dword [esp + 0x14], edi
push 0x18d3d20
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bd370
cmp dword [0x102cc298], 0
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebp, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov bl, 0x65
jne 0x100bd197
lea ecx, [esp + 0x3e4]
push ecx
lea edx, [esp + 0x3dc]
push edx
mov byte [esp + 0x3e0], 0x75
mov byte [esp + 0x3e1], 0x73
mov byte [esp + 0x3e2], bl
mov byte [esp + 0x3e3], 0x72
mov byte [esp + 0x3e4], 0x33
mov byte [esp + 0x3e5], 0x32
mov byte [esp + 0x3e6], 0x2e
mov byte [esp + 0x3e7], 0x64
mov byte [esp + 0x3e8], 0x6c
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], bl
mov byte [esp + 0x3f1], 0x67
mov byte [esp + 0x3f2], 0x69
mov byte [esp + 0x3f3], 0x73
mov byte [esp + 0x3f4], 0x74
mov byte [esp + 0x3f5], bl
mov byte [esp + 0x3f6], 0x72
mov byte [esp + 0x3f7], bl
mov byte [esp + 0x3f8], 0x64
mov byte [esp + 0x3f9], 0x52
mov byte [esp + 0x3fa], 0x61
mov byte [esp + 0x3fb], 0x77
mov byte [esp + 0x3fc], 0x49
mov byte [esp + 0x3fd], 0x6e
mov byte [esp + 0x3fe], 0x70
mov byte [esp + 0x3ff], 0x75
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0x44
mov byte [esp + 0x402], bl
mov byte [esp + 0x403], 0x76
mov byte [esp + 0x404], 0x69
mov byte [esp + 0x405], 0x63
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], 0x73
mov byte [esp + 0x408], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100bd184
push 0x78
lea eax, [esp + 0x44]
push 0
push eax
mov dword [esp + 0x24], 0xa
call fcn.10100160
add esp, 0xc
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x48]
push edx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100bd184
lea edx, [esp + 0x42]
cmp word [edx], 6
je 0x100bd177
add ecx, 1
add edx, 0xc
cmp ecx, eax
jb 0x100bd165
jmp 0x100bd184
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + eax*4 + 0x48]
mov dword [0x102cc298], ecx
cmp dword [0x102cc298], 0
jne 0x100bd197
mov edx, dword [esp + 0x24]
mov dword [0x102cc298], edx
cmp dword [0x102cc2a4], 0
jne 0x100bd32a
lea eax, [esp + 0x3e4]
push eax
lea ecx, [esp + 0x3dc]
push ecx
mov byte [esp + 0x3e0], 0x75
mov byte [esp + 0x3e1], 0x73
mov byte [esp + 0x3e2], bl
mov byte [esp + 0x3e3], 0x72
mov byte [esp + 0x3e4], 0x33
mov byte [esp + 0x3e5], 0x32
mov byte [esp + 0x3e6], 0x2e
mov byte [esp + 0x3e7], 0x64
mov byte [esp + 0x3e8], 0x6c
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], 0x61
mov byte [esp + 0x3f1], 0x77
mov byte [esp + 0x3f2], 0x49
mov byte [esp + 0x3f3], 0x6e
mov byte [esp + 0x3f4], 0x70
mov byte [esp + 0x3f5], 0x75
mov byte [esp + 0x3f6], 0x74
mov byte [esp + 0x3f7], 0x44
mov byte [esp + 0x3f8], bl
mov byte [esp + 0x3f9], 0x76
mov byte [esp + 0x3fa], 0x69
mov byte [esp + 0x3fb], 0x63
mov byte [esp + 0x3fc], bl
mov byte [esp + 0x3fd], 0x4c
mov byte [esp + 0x3fe], 0x69
mov byte [esp + 0x3ff], 0x73
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100bd32a
push 0x320
lea edx, [esp + 0xbc]
push 0
push edx
mov dword [esp + 0x24], 0x64
call fcn.10100160
add esp, 0xc
push 8
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xc0]
push ecx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100bd32a
lea esp, [esp]
cmp dword [esp + ecx*8 + 0xbc], 1
jne 0x100bd314
cmp dword [esp + ecx*8 + 0xb8], 0
jne 0x100bd31d
add ecx, 1
cmp ecx, eax
jb 0x100bd300
jmp 0x100bd32a
mov edx, dword [esp + ecx*8 + 0xb8]
mov dword [0x102cc2a4], edx
cmp dword [esp + 0x28], 0
je 0x100bd358
mov eax, dword [0x102cba84]
mov ecx, dword [0x102cc298]
push 0
push eax
push 1
push 0x12345678
push 0
push 0xff
push ecx
call fcn.100542c0
add esp, 0x1c
jmp 0x100bd370
mov edx, dword [0x102cc298]
push 0x12345678
push 0
push 0xff
push edx
call fcn.10054340
cmp dword [0x102cc2ac], 0
mov esi, dword [esp + 0x650]
je 0x100bd3bc
mov edx, dword [0x102cc2b4]
xor ecx, ecx
lea eax, [edx + edx*4]
lea eax, [eax*4 + 0x102cb818]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov ecx, dword [esp + 0x30]
add edx, 1
cmp edx, 0xa
mov dword [eax], esi
mov dword [eax + 4], ecx
mov dword [0x102cc2b4], edx
jb 0x100bd3bc
mov dword [0x102cc2b4], 0
cmp dword [0x101a2674], 0
je 0x100bd420
cmp dword [esp + 0x28], 0
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
je 0x100bd401
mov edx, dword [0x102cba84]
push 0
push edx
mov edx, dword [esp + 0x2c]
push 1
push eax
push esi
push ecx
push edx
call fcn.100542c0
mov eax, 1
add esp, 0x1c
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
mov edx, dword [esp + 0x24]
push eax
push esi
push ecx
push edx
call fcn.10054340
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
mov edi, dword [esp + 0x14]
mov ebp, dword [esp + 0x10]
mov eax, dword [esp + 0x20]
and edi, 0xfbffffff
push edi
push esi
push ebp
push eax
call dword [fcn.102cc2f8]
mov ecx, dword [esp + 0x24]
xor eax, eax
lea edx, [esp + 0x3e4]
mov dword [esp + 0x3e4], eax
mov dword [esp + 0x3e8], eax
mov dword [esp + 0x3ec], eax
mov dword [esp + 0x3f0], eax
push edx
mov dword [esp + 0x3f8], eax
mov dword [esp + 0x3fc], eax
mov dword [esp + 0x400], eax
mov dword [esp + 0x3e8], ecx
mov dword [esp + 0x3ec], ebp
mov dword [esp + 0x3f0], esi
mov dword [esp + 0x3f4], edi
call dword [sym.imp.USER32.dll_TranslateMessage]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x838
jne 0x100bdde0
mov eax, dword [esp + 0x64c]
mov ecx, eax
and ecx, 0x80
mov ebp, eax
shr ebp, 0x10
mov dword [esp + 0x28], ecx
xor edi, edi
xor ecx, ecx
test al, 1
mov dword [esp + 0x38], ebp
mov dword [esp + 0x3d8], edi
je 0x100bd4e9
lea ecx, [edi + 1]
test al, 2
je 0x100bd4f2
mov edi, 1
test al, 4
je 0x100bd501
mov dword [esp + 0x3d8], 1
mov edx, ebx
shr edx, 0x10
cmp ebp, 0xa
movsx eax, bx
movsx edx, dx
mov dword [esp + 0x18], eax
mov dword [esp + 0x30], edx
ja 0x100beb20
xor esi, esi
cmp ebp, 1
mov dword [esp + 0x24], ebx
mov ebx, dword [sym.imp.USER32.dll_ClientToScreen]
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], esi
jne 0x100bd570
test ecx, ecx
je 0x100bd547
mov esi, 1
mov dword [esp + 0x14], esi
test edi, edi
je 0x100bd552
or esi, 2
mov dword [esp + 0x14], esi
cmp dword [esp + 0x3d8], 0
je 0x100bd563
or esi, 0x10
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x200
jmp 0x100bd6a8
cmp ebp, 2
jne 0x100bd58b
mov esi, 1
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x201
jmp 0x100bd6a8
cmp ebp, 8
jne 0x100bd5a6
mov esi, 1
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x203
jmp 0x100bd6a8
cmp ebp, 3
jne 0x100bd5b8
mov dword [esp + 0x10], 0x202
jmp 0x100bd6a8
cmp ebp, 4
jne 0x100bd5d3
mov esi, 2
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x204
jmp 0x100bd6a8
cmp ebp, 5
jne 0x100bd5e5
mov dword [esp + 0x10], 0x205
jmp 0x100bd6a8
cmp ebp, 6
jne 0x100bd600
mov esi, 0x10
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], 0x207
jmp 0x100bd6a8
cmp ebp, 7
jne 0x100bd612
mov dword [esp + 0x10], 0x208
jmp 0x100bd6a8
cmp ebp, 9
jne 0x100bd63d
test ecx, ecx
je 0x100bd61e
lea esi, [ebp - 8]
test edi, edi
je 0x100bd625
or esi, 2
cmp dword [esp + 0x3d8], 0
je 0x100bd632
or esi, 0x10
movzx esi, si
or esi, 0x780000
jmp 0x100bd666
cmp ebp, 0xa
jne 0x100bd6a8
test ecx, ecx
je 0x100bd649
lea esi, [ebp - 9]
test edi, edi
je 0x100bd650
or esi, 2
cmp dword [esp + 0x3d8], 0
je 0x100bd65d
or esi, 0x10
movzx esi, si
or esi, 0xff880000
mov ecx, dword [esp + 0x20]
mov dword [esp + 0x3d8], eax
lea eax, [esp + 0x3d8]
push eax
push ecx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x3e4], edx
call ebx
movzx eax, word [esp + 0x3dc]
movzx edx, word [esp + 0x3d8]
shl eax, 0x10
or eax, edx
mov dword [esp + 0x10], 0x20a
mov dword [esp + 0x24], eax
cmp dword [0x102cba7c], 0
jne 0x100bd6c4
cmp dword [0x102cba70], 0
jne 0x100bd6c4
or esi, 0x8000
mov dword [esp + 0x14], esi
cmp ebp, 1
jne 0x100bd75d
mov ecx, dword [esp + 0x20]
movsx esi, word [0x102cba34]
movsx edi, word [0x102cba36]
xor eax, eax
mov dword [esp + 0x3d8], eax
mov dword [esp + 0x3dc], eax
lea eax, [esp + 0x3d8]
push eax
push ecx
call ebx
mov eax, dword [esp + 0x3dc]
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x3d8]
mov ebx, dword [esp + 0x18]
add edx, eax
add ebx, ecx
movzx edx, dx
sub ecx, esi
add ecx, dword [esp + 0x18]
movzx ebx, bx
sub eax, edi
add eax, dword [esp + 0x30]
shl edx, 0x10
or edx, ebx
test ecx, ecx
mov dword [0x102cba34], edx
mov esi, eax
je 0x100bd743
push ebp
push ecx
push 0x37
call fcn.100cc8c0
add esp, 0xc
test esi, esi
je 0x100bd7ed
push 1
push esi
push 0x38
call fcn.100cc8c0
add esp, 0xc
jmp 0x100bd7ed
cmp ebp, 2
je 0x100bd7e1
cmp ebp, 8
je 0x100bd7e1
cmp ebp, 3
jne 0x100bd777
push 1
push 0
call fcn.100cc880
jmp 0x100bd7ea
cmp ebp, 4
jne 0x100bd782
push 1
push 1
jmp 0x100bd7e5
cmp ebp, 5
jne 0x100bd792
push 1
push 1
call fcn.100cc880
jmp 0x100bd7ea
cmp ebp, 6
jne 0x100bd79d
push 1
push 2
jmp 0x100bd7e5
cmp ebp, 7
jne 0x100bd7ad
push 1
push 2
call fcn.100cc880
jmp 0x100bd7ea
cmp ebp, 0xa
jne 0x100bd7c7
push 1
push 4
call fcn.100cc850
push 0xffffffffffffff88
call fcn.100c9330
add esp, 0xc
jmp 0x100bd7ed
cmp ebp, 9
jne 0x100bd7ed
push 1
push 5
call fcn.100cc850
push 0x78
call fcn.100c9330
add esp, 0xc
jmp 0x100bd7ed
push 1
push 0
call fcn.100cc850
add esp, 8
call fcn.100bfe50
test eax, eax
mov esi, dword [esp + 0x20]
mov dword [esp + 0x3d8], eax
jne 0x100bd80f
push esi
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [esp + 0x3d8], esi
push 0x797a779e
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100bd827
mov dword [esp + 0x3d8], esi
mov edi, dword [esp + 0x28]
test edi, edi
je 0x100bd852
mov eax, dword [0x102cba80]
mov ecx, dword [0x102cba34]
push 0
push eax
push 1
push ecx
push 0
push 0x84
push esi
call fcn.100542c0
add esp, 0x1c
jmp 0x100bd869
mov edx, dword [0x102cba34]
push edx
push 0
push 0x84
push esi
call fcn.100542a0
add esp, 0x10
cmp ebp, 1
jne 0x100bd89f
test edi, edi
je 0x100bd88e
mov eax, dword [0x102cba80]
push 0
push eax
push ebp
push 0x2000001
push esi
push 0x20
push esi
call fcn.100542c0
add esp, 0x1c
jmp 0x100bd89f
push 0x2000001
push esi
push 0x20
push esi
call fcn.100542a0
add esp, 0x10
push 0x326cd5b9
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bdcaa
cmp dword [0x102cc29c], 0
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
mov ebp, dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
mov bl, 0x65
jne 0x100bda89
lea ecx, [esp + 0x3e4]
push ecx
lea edx, [esp + 0x408]
push edx
mov byte [esp + 0x40c], 0x75
mov byte [esp + 0x40d], 0x73
mov byte [esp + 0x40e], bl
mov byte [esp + 0x40f], 0x72
mov byte [esp + 0x410], 0x33
mov byte [esp + 0x411], 0x32
mov byte [esp + 0x412], 0x2e
mov byte [esp + 0x413], 0x64
mov byte [esp + 0x414], 0x6c
mov byte [esp + 0x415], 0x6c
mov byte [esp + 0x416], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], bl
mov byte [esp + 0x3f1], 0x67
mov byte [esp + 0x3f2], 0x69
mov byte [esp + 0x3f3], 0x73
mov byte [esp + 0x3f4], 0x74
mov byte [esp + 0x3f5], bl
mov byte [esp + 0x3f6], 0x72
mov byte [esp + 0x3f7], bl
mov byte [esp + 0x3f8], 0x64
mov byte [esp + 0x3f9], 0x52
mov byte [esp + 0x3fa], 0x61
mov byte [esp + 0x3fb], 0x77
mov byte [esp + 0x3fc], 0x49
mov byte [esp + 0x3fd], 0x6e
mov byte [esp + 0x3fe], 0x70
mov byte [esp + 0x3ff], 0x75
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0x44
mov byte [esp + 0x402], bl
mov byte [esp + 0x403], 0x76
mov byte [esp + 0x404], 0x69
mov byte [esp + 0x405], 0x63
mov byte [esp + 0x406], bl
mov byte [esp + 0x407], 0x73
mov byte [esp + 0x408], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100bda73
push 0x78
lea eax, [esp + 0x44]
push 0
push eax
mov dword [esp + 0x24], 0xa
call fcn.10100160
add esp, 0xc
push 0xc
lea ecx, [esp + 0x1c]
push ecx
lea edx, [esp + 0x48]
push edx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100bda73
lea edx, [esp + 0x42]
cmp word [edx], 2
je 0x100bda66
add ecx, 1
add edx, 0xc
cmp ecx, eax
jb 0x100bda54
jmp 0x100bda73
lea eax, [ecx + ecx*2]
mov ecx, dword [esp + eax*4 + 0x48]
mov dword [0x102cc29c], ecx
cmp dword [0x102cc29c], 0
jne 0x100bda89
mov edx, dword [esp + 0x3d8]
mov dword [0x102cc29c], edx
cmp dword [0x102cc2a0], 0
jne 0x100bdc1a
lea eax, [esp + 0x3e4]
push eax
lea ecx, [esp + 0x408]
push ecx
mov byte [esp + 0x40c], 0x75
mov byte [esp + 0x40d], 0x73
mov byte [esp + 0x40e], bl
mov byte [esp + 0x40f], 0x72
mov byte [esp + 0x410], 0x33
mov byte [esp + 0x411], 0x32
mov byte [esp + 0x412], 0x2e
mov byte [esp + 0x413], 0x64
mov byte [esp + 0x414], 0x6c
mov byte [esp + 0x415], 0x6c
mov byte [esp + 0x416], 0
mov byte [esp + 0x3ec], 0x47
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x74
mov byte [esp + 0x3ef], 0x52
mov byte [esp + 0x3f0], 0x61
mov byte [esp + 0x3f1], 0x77
mov byte [esp + 0x3f2], 0x49
mov byte [esp + 0x3f3], 0x6e
mov byte [esp + 0x3f4], 0x70
mov byte [esp + 0x3f5], 0x75
mov byte [esp + 0x3f6], 0x74
mov byte [esp + 0x3f7], 0x44
mov byte [esp + 0x3f8], bl
mov byte [esp + 0x3f9], 0x76
mov byte [esp + 0x3fa], 0x69
mov byte [esp + 0x3fb], 0x63
mov byte [esp + 0x3fc], bl
mov byte [esp + 0x3fd], 0x4c
mov byte [esp + 0x3fe], 0x69
mov byte [esp + 0x3ff], 0x73
mov byte [esp + 0x400], 0x74
mov byte [esp + 0x401], 0
call ebp
push eax
call edi
mov esi, eax
test esi, esi
je 0x100bdc1a
push 0x320
lea edx, [esp + 0xbc]
push 0
push edx
mov dword [esp + 0x24], 0x64
call fcn.10100160
add esp, 0xc
push 8
lea eax, [esp + 0x1c]
push eax
lea ecx, [esp + 0xc0]
push ecx
call esi
xor ecx, ecx
test eax, eax
jbe 0x100bdc1a
jmp 0x100bdbf0
cmp dword [esp + ecx*8 + 0xbc], 0
jne 0x100bdc04
cmp dword [esp + ecx*8 + 0xb8], 0
jne 0x100bdc0d
add ecx, 1
cmp ecx, eax
jb 0x100bdbf0
jmp 0x100bdc1a
mov edx, dword [esp + ecx*8 + 0xb8]
mov dword [0x102cc2a0], edx
cmp dword [esp + 0x28], 0
mov ecx, dword [0x102cc29c]
je 0x100bdc75
mov eax, dword [0x102cba80]
push 0
push eax
push 1
push 0x12345679
push 0
push 0xff
push ecx
call fcn.100542c0
mov esi, dword [esp + 0x54]
add esp, 0x1c
cmp esi, 1
jne 0x100bdcac
mov edx, dword [0x102cba80]
mov eax, dword [0x102cc29c]
push 0
push edx
push esi
push 0x12345679
push 0
push 0xff
push eax
call fcn.100542c0
add esp, 0x1c
jmp 0x100bdcac
push 0x12345679
push 0
push 0xff
push ecx
call fcn.10054340
mov esi, dword [esp + 0x38]
cmp esi, 1
jne 0x100bdcac
mov edx, dword [0x102cc29c]
push 0x12345679
push 0
push 0xff
push edx
call fcn.10054340
jmp 0x100bdcac
mov esi, ebp
cmp dword [0x102cc2b0], 0
mov edi, dword [esp + 0x10]
je 0x100bdd4f
cmp edi, 0x203
je 0x100bdd4f
cmp edi, 0x207
je 0x100bdd4f
cmp edi, 0x208
je 0x100bdd4f
mov eax, dword [0x102cc2bc]
xor ecx, ecx
cmp edi, 0x20a
lea eax, [eax + eax*2]
lea eax, [eax*8 + 0x102cb8e0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], ecx
movsx ecx, word [esp + 0x650]
mov dword [eax], ecx
mov ecx, dword [esp + 0x30]
mov dword [eax + 4], ecx
jne 0x100bdd25
sub esi, 9
neg esi
sbb esi, esi
and esi, 0xff100000
add esi, 0x780000
mov dword [eax + 8], esi
mov esi, dword [esp + 0x20]
push eax
push esi
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x102cc2bc]
add eax, 1
cmp eax, 0xa
mov dword [0x102cc2bc], eax
jb 0x100bdd53
mov dword [0x102cc2bc], 0
jmp 0x100bdd53
mov esi, dword [esp + 0x20]
cmp dword [0x101a2678], 0
je 0x100bddb7
cmp dword [esp + 0x28], 0
je 0x100bdd94
mov edx, dword [0x102cba80]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push 0
push edx
push 1
push eax
push ecx
push edi
push esi
call fcn.100542c0
mov eax, 1
add esp, 0x1c
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
push edx
push eax
push edi
push esi
call fcn.10054340
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
and eax, 0xfbffffff
push eax
push ecx
push edi
push esi
call dword [fcn.102cc2f8]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x83a
jne 0x100bde10
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x101a2664], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x83d
jne 0x100bde50
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov edx, ebx
shr edx, 0x10
movsx eax, dx
movsx ecx, bx
push eax
push ecx
call fcn.100c9310
mov eax, 1
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x83f
jne 0x100bde92
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov edx, ebx
and edx, 0x7fffffff
mov eax, 1
shr ebx, 0x1f
mov dword [0x102cba4c], edx
mov dword [0x102cba48], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x863
jne 0x100bded0
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
fild dword [esp + 0x650]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
fdiv qword [0x1016aa70]
fstp qword [0x101a2680]
jmp 0x100beb20
cmp edi, 0x842
jne 0x100bdf4f
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
push 0x16cc25d5
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bdf3a
call fcn.100c94d0
mov esi, eax
push esi
call fcn.10043800
mov edi, eax
push ebx
push edi
call fcn.10043530
add esp, 0xc
test esi, esi
mov dword [esp + 0x10], eax
je 0x100bdf22
push esi
call dword [sym.imp.USER32.dll_DestroyCursor]
test edi, edi
je 0x100bdf42
push edi
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x14], 1
jmp 0x100beb20
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x843
jne 0x100be006
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
push 0x16cc25d5
call fcn.100c1b10
add esp, 4
test eax, eax
je 0x100bdff1
call fcn.100c94d0
mov esi, eax
test esi, esi
mov edi, 0xffff
mov ebp, edi
je 0x100bdfd5
lea eax, [esp + 0x3e4]
push eax
push esi
call dword [sym.imp.USER32.dll_GetIconInfo]
mov eax, dword [esp + 0x3f4]
test eax, eax
mov edi, dword [sym.imp.GDI32.dll_DeleteObject]
je 0x100bdfb2
push eax
call edi
mov eax, dword [esp + 0x3f0]
test eax, eax
je 0x100bdfc0
push eax
call edi
mov edi, dword [esp + 0x3e8]
mov ebp, dword [esp + 0x3ec]
push esi
call dword [sym.imp.USER32.dll_DestroyCursor]
movzx eax, bp
movzx ecx, di
shl eax, 0x10
or eax, ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100beb20
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x844
jne 0x100be061
cmp dword [esp + 0x64c], 0x1234
jne 0x100be04c
mov eax, dword [0x102cba5c]
cmp eax, 0x1000
jge 0x100be04c
lea ecx, [eax + 1]
mov dword [esp + 0x10], ecx
mov dword [eax*4 + 0x102c77b8], 1
mov dword [0x102cba5c], ecx
mov dword [esp + 0x14], 1
jmp 0x100beb20
mov dword [esp + 0x10], 0x1388
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x845
jne 0x100be0a2
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
lea edx, [ebx - 1]
cmp edx, 0xfff
ja 0x100bbd16
mov eax, 1
mov dword [ebx*4 + fcn.102c77b4], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x846
jne 0x100be195
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
cmp ebx, ecx
mov eax, 1
jne 0x100be0e7
mov dword [0x102cba68], ecx
mov dword [0x102cc2a8], ecx
mov dword [0x102cba64], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp ebx, eax
jne 0x100be108
mov dword [0x102cba64], eax
mov dword [0x102cba68], eax
mov dword [0x102cc2a8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp ebx, 2
jne 0x100be12b
mov dword [0x102cba64], eax
mov dword [0x102cba68], ecx
mov dword [0x102cc2a8], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp ebx, 3
jne 0x100be14e
mov dword [0x102cc2a8], ecx
mov dword [0x102cba68], eax
mov dword [0x102cba64], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp ebx, 4
jne 0x100be16f
mov dword [0x102cba64], eax
mov dword [0x102cba68], eax
mov dword [0x102cc2a8], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp ebx, 5
jne 0x100bbd1b
mov dword [0x102cc2a8], eax
mov dword [0x102cba68], eax
mov dword [0x102cba64], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x850
jne 0x100be1c6
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x102cba6c], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x851
jne 0x100be1f5
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, dword [0x102cba34]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x852
jne 0x100be226
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x101a2674], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x853
jne 0x100be257
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x101a2678], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x84d
jne 0x100be288
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x102cba70], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x84f
jne 0x100be834
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
cmp ebx, ecx
mov byte [esp + 0x3d8], 0x69
mov byte [esp + 0x3d9], 0x6d
mov byte [esp + 0x3da], 0x6d
mov byte [esp + 0x3db], 0x33
mov byte [esp + 0x3dc], 0x32
mov byte [esp + 0x3dd], 0x2e
mov byte [esp + 0x3de], 0x64
mov byte [esp + 0x3df], 0x6c
mov byte [esp + 0x3e0], 0x6c
mov byte [esp + 0x3e1], 0
je 0x100be598
lea ecx, [esp + 0x3d8]
push ecx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x100bbd16
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea edx, [esp + 0x404]
push edx
mov bl, 0x65
push esi
mov byte [esp + 0x40c], 0x49
mov byte [esp + 0x40d], 0x6d
mov byte [esp + 0x40e], 0x6d
mov byte [esp + 0x40f], 0x47
mov byte [esp + 0x410], bl
mov byte [esp + 0x411], 0x74
mov byte [esp + 0x412], 0x43
mov byte [esp + 0x413], 0x6f
mov byte [esp + 0x414], 0x6e
mov byte [esp + 0x415], 0x74
mov byte [esp + 0x416], bl
mov byte [esp + 0x417], 0x78
mov byte [esp + 0x418], 0x74
mov byte [esp + 0x419], 0
call edi
mov ebp, eax
lea eax, [esp + 0x414]
push eax
push esi
mov byte [esp + 0x41c], 0x49
mov byte [esp + 0x41d], 0x6d
mov byte [esp + 0x41e], 0x6d
mov byte [esp + 0x41f], 0x47
mov byte [esp + 0x420], bl
mov byte [esp + 0x421], 0x74
mov byte [esp + 0x422], 0x4f
mov byte [esp + 0x423], 0x70
mov byte [esp + 0x424], bl
mov byte [esp + 0x425], 0x6e
mov byte [esp + 0x426], 0x53
mov byte [esp + 0x427], 0x74
mov byte [esp + 0x428], 0x61
mov byte [esp + 0x429], 0x74
mov byte [esp + 0x42a], 0x75
mov byte [esp + 0x42b], 0x73
mov byte [esp + 0x42c], 0
call edi
lea ecx, [esp + 0x428]
push ecx
push esi
mov dword [esp + 0x20], eax
mov byte [esp + 0x430], 0x49
mov byte [esp + 0x431], 0x6d
mov byte [esp + 0x432], 0x6d
mov byte [esp + 0x433], 0x53
mov byte [esp + 0x434], bl
mov byte [esp + 0x435], 0x74
mov byte [esp + 0x436], 0x4f
mov byte [esp + 0x437], 0x70
mov byte [esp + 0x438], bl
mov byte [esp + 0x439], 0x6e
mov byte [esp + 0x43a], 0x53
mov byte [esp + 0x43b], 0x74
mov byte [esp + 0x43c], 0x61
mov byte [esp + 0x43d], 0x74
mov byte [esp + 0x43e], 0x75
mov byte [esp + 0x43f], 0x73
mov byte [esp + 0x440], 0
call edi
mov dword [esp + 0x28], eax
mov byte [esp + 0x3e4], 0x49
mov byte [esp + 0x3e5], 0x6d
mov byte [esp + 0x3e6], 0x6d
mov byte [esp + 0x3e7], 0x52
mov byte [esp + 0x3e8], bl
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], bl
mov byte [esp + 0x3eb], 0x61
mov byte [esp + 0x3ec], 0x73
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x43
mov byte [esp + 0x3ef], 0x6f
mov byte [esp + 0x3f0], 0x6e
mov byte [esp + 0x3f1], 0x74
mov byte [esp + 0x3f2], bl
mov byte [esp + 0x3f3], 0x78
lea edx, [esp + 0x3e4]
push edx
push esi
mov byte [esp + 0x3fc], 0x74
mov byte [esp + 0x3fd], 0
call edi
mov ebx, eax
mov eax, dword [0x102cba40]
push eax
call ebp
mov edi, eax
push edi
call dword [esp + 0x1c]
test eax, eax
jne 0x100be575
push 1
push edi
call dword [esp + 0x30]
mov ecx, dword [0x102cba40]
push edi
push ecx
call ebx
push esi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
lea edx, [esp + 0x3d8]
push edx
call dword [sym.imp.KERNEL32.DLL_LoadLibraryA]
mov esi, eax
test esi, esi
je 0x100bbd16
mov edi, dword [sym.imp.KERNEL32.DLL_GetProcAddress]
lea eax, [esp + 0x404]
push eax
mov bl, 0x65
push esi
mov byte [esp + 0x40c], 0x49
mov byte [esp + 0x40d], 0x6d
mov byte [esp + 0x40e], 0x6d
mov byte [esp + 0x40f], 0x47
mov byte [esp + 0x410], bl
mov byte [esp + 0x411], 0x74
mov byte [esp + 0x412], 0x43
mov byte [esp + 0x413], 0x6f
mov byte [esp + 0x414], 0x6e
mov byte [esp + 0x415], 0x74
mov byte [esp + 0x416], bl
mov byte [esp + 0x417], 0x78
mov byte [esp + 0x418], 0x74
mov byte [esp + 0x419], 0
call edi
lea ecx, [esp + 0x428]
push ecx
push esi
mov ebp, eax
mov byte [esp + 0x430], 0x49
mov byte [esp + 0x431], 0x6d
mov byte [esp + 0x432], 0x6d
mov byte [esp + 0x433], 0x47
mov byte [esp + 0x434], bl
mov byte [esp + 0x435], 0x74
mov byte [esp + 0x436], 0x4f
mov byte [esp + 0x437], 0x70
mov byte [esp + 0x438], bl
mov byte [esp + 0x439], 0x6e
mov byte [esp + 0x43a], 0x53
mov byte [esp + 0x43b], 0x74
mov byte [esp + 0x43c], 0x61
mov byte [esp + 0x43d], 0x74
mov byte [esp + 0x43e], 0x75
mov byte [esp + 0x43f], 0x73
mov byte [esp + 0x440], 0
call edi
lea edx, [esp + 0x414]
push edx
push esi
mov dword [esp + 0x20], eax
mov byte [esp + 0x41c], 0x49
mov byte [esp + 0x41d], 0x6d
mov byte [esp + 0x41e], 0x6d
mov byte [esp + 0x41f], 0x53
mov byte [esp + 0x420], bl
mov byte [esp + 0x421], 0x74
mov byte [esp + 0x422], 0x4f
mov byte [esp + 0x423], 0x70
mov byte [esp + 0x424], bl
mov byte [esp + 0x425], 0x6e
mov byte [esp + 0x426], 0x53
mov byte [esp + 0x427], 0x74
mov byte [esp + 0x428], 0x61
mov byte [esp + 0x429], 0x74
mov byte [esp + 0x42a], 0x75
mov byte [esp + 0x42b], 0x73
mov byte [esp + 0x42c], 0
call edi
mov dword [esp + 0x28], eax
mov byte [esp + 0x3e4], 0x49
mov byte [esp + 0x3e5], 0x6d
mov byte [esp + 0x3e6], 0x6d
mov byte [esp + 0x3e7], 0x52
mov byte [esp + 0x3e8], bl
mov byte [esp + 0x3e9], 0x6c
mov byte [esp + 0x3ea], bl
mov byte [esp + 0x3eb], 0x61
mov byte [esp + 0x3ec], 0x73
mov byte [esp + 0x3ed], bl
mov byte [esp + 0x3ee], 0x43
mov byte [esp + 0x3ef], 0x6f
mov byte [esp + 0x3f0], 0x6e
mov byte [esp + 0x3f1], 0x74
mov byte [esp + 0x3f2], bl
mov byte [esp + 0x3f3], 0x78
lea eax, [esp + 0x3e4]
push eax
push esi
mov byte [esp + 0x3fc], 0x74
mov byte [esp + 0x3fd], 0
call edi
mov ecx, dword [0x102cba40]
push ecx
mov ebx, eax
call ebp
mov edi, eax
push edi
call dword [esp + 0x1c]
test eax, eax
je 0x100be811
push 0
push edi
call dword [esp + 0x30]
mov edx, dword [0x102cba40]
push edi
push edx
call ebx
push esi
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x847
jne 0x100be865
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x102cba74], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x848
jne 0x100be896
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [0x102cba78], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x840
jne 0x100be8c1
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x841
jne 0x100be8ec
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x849
jne 0x100be924
mov eax, dword [esp + 0x64c]
cmp eax, ecx
je 0x100be904
mov dword [0x102cba84], eax
cmp ebx, ecx
je 0x100bbd16
mov eax, 1
mov dword [0x102cba80], ebx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x84a
jne 0x100bea0d
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
cmp ebx, ecx
je 0x100be9f5
push 0xff
lea eax, [esp + 0x541]
push 0
push eax
mov byte [0x102cba90], 0
mov byte [esp + 0x548], 0
call fcn.10100160
mov ecx, dword [esp + 0x24]
add esp, 0xc
push ecx
push 3
call fcn.100dacb0
add esp, 4
push eax
lea edx, [esp + 0x544]
push edx
call fcn.10100f40
add esp, 0xc
lea eax, [esp + 0x53c]
push eax
push 0
push 0xf001f
call fcn.100b1030
mov edi, eax
test edi, edi
je 0x100be9d9
push 0
push 0
push 0
push 6
push edi
call fcn.100b0fe0
mov esi, 0x102cba90
mov ecx, eax
sub esi, eax
mov dl, byte [ecx]
mov byte [ecx + esi], dl
add ecx, 1
test dl, dl
jne 0x100be9c0
push eax
call fcn.100b1010
push edi
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
mov eax, 1
mov dword [0x102cba88], 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
mov eax, 1
mov dword [0x102cba88], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
jmp 0x100beb20
cmp edi, 0x84b
jne 0x100bea45
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
xor edx, edx
cmp ebx, ecx
setne dl
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], eax
mov dword [0x101a2670], edx
jmp 0x100beb20
cmp edi, 0x854
jne 0x100bea74
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov eax, dword [0x102cba50]
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 1
jmp 0x100beb20
cmp edi, 0x84c
jne 0x100beb20
cmp dword [esp + 0x64c], 0x1234
jne 0x100beb20
mov esi, 1
push esi
mov dword [0x101a2670], 0
call fcn.100c2e60
add esp, 4
mov dword [0x101a2670], esi
mov dword [esp + 0x10], esi
mov dword [esp + 0x14], esi
jmp 0x100beb20
cmp dword [0x102cba40], ecx
je 0x100beb20
push 0x592629e2
call fcn.100c1b10
add esp, 4
test eax, eax
jne 0x100beada
cmp dword [0x102cba64], eax
je 0x100beafd
cmp dword [0x102cba7c], 0
jne 0x100beafd
mov ecx, dword [esp + 0x64c]
mov edx, dword [esp + 0x20]
push ebx
push ecx
push edi
push edx
call dword [sym.imp.USER32.dll_DefWindowProcA]
jmp 0x100bbb65
movsx eax, bx
shr ebx, 0x10
cmp dword [0x102cba74], 0
movsx ecx, bx
jne 0x100beb20
movzx ecx, cx
movzx edx, ax
shl ecx, 0x10
or ecx, edx
mov dword [0x102cba34], ecx
mov eax, dword [esp + 0x34]
test eax, eax
je 0x100beb39
push eax
call fcn.100b1010
mov eax, dword [esp + 0x3c]
push eax
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
cmp dword [esp + 0x14], 1
jne 0x100beb49
mov eax, dword [esp + 0x10]
jmp 0x100bbb65
mov eax, dword [fcn.102cc2f8]
test eax, eax
mov ecx, dword [esp + 0x654]
je 0x100beb81
test ecx, ecx
jne 0x100beb81
mov ecx, dword [esp + 0x650]
mov edx, dword [esp + 0x64c]
push ecx
mov ecx, dword [esp + 0x64c]
push edx
mov edx, dword [esp + 0x28]
push ecx
push edx
call eax
jmp 0x100bbb65
mov eax, dword [0x102cc304]
test eax, eax
je 0x100bbb63
test ecx, ecx
je 0x100bbb63
mov edx, dword [esp + 0x650]
push edx
mov edx, dword [esp + 0x650]
push edx
mov edx, dword [esp + 0x650]
push edx
mov edx, dword [esp + 0x2c]
push edx
push ecx
call eax
jmp 0x100bbb65