Function at 0x100131f0
Capabilities:
Get graphical window text
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10079c7e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x248
push ebx
push esi
push edi
mov dword [esp + 0x80], edx
mov dword [esp + 0x44], ecx
mov dword [esp + 0x24], 0xfffffffa
mov eax, 0x61fc2da8
mov dword [esp + 0x34], 0xfffffff7
xor ebx, ebx
mov dword [esp + 0x38], 0x3717be9f
mov dword [esp + 0x10], ebx
push 2
pop edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x1c], 0xcd9d754
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0x18], 0x82e58099
mov dword [esp + 0x28], 0xffffffff
mov dword [esp + 0x1c], 6
mov dword [esp + 0xc], ebx
dec dword [esp + 0x28]
push 1
pop esi
jne 0x1001332e
mov dword [esp + 0x2c], ebx
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0xac]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
mov eax, dword [esp + 0xac]
sbb edx, edx
inc edx
cmp edx, eax
setge cl
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
mov edx, dword [esp + 0x2c]
sub edx, eax
mov eax, dword [esp + 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [esp + 0x18]
setl cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp edx, eax
mov eax, dword [esp + 0x24]
setl cl
xor edx, edx
cmp ecx, eax
setne dl
xor eax, eax
neg edx
cmp edx, 0xfffffffd
mov edx, ebx
setne al
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x34]
cmp dword [esp + 0x24], eax
setle cl
imul ecx, dword [esp + 0xa4]
cmp ecx, 0xa4045238
jbe 0x10013330
mov edx, esi
mov eax, dword [esp + 0xac]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x10]
setge cl
xor edx, edx
cmp ecx, edi
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x24], ecx
xor ecx, ecx
cmp dword [esp + 0x24], eax
setne cl
mov dword [esp + 0x10], ecx
cmp dword [esp + 0x10], ebx
je 0x1001337c
mov edx, esi
cmp dword [esp + 0x34], ebx
jne 0x1001337e
mov edx, ebx
mov eax, dword [esp + 0x38]
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffffa
setge cl
pop eax
cmp eax, ecx
lea ecx, [esp + 0x14c]
push 3
sbb eax, eax
inc eax
pop edi
mov dword [esp + 0x1c], eax
inc dword [esp + 0xc]
push edi
call fcn.10008f68
mov dword [esp + 0x10], ebx
jmp 0x100133c5
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14c]
mov dword [eax + ecx*4], 0x399841b3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x100133af
mov eax, dword [esp + 0x14c]
lea ecx, [esp + 0x14c]
or dword [esp + 0x25c], 0xffffffff
mov dword [eax + 4], ebx
call fcn.10008fed
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x10007da0]
lea eax, [esp + 0x214]
push eax
lea eax, [esp + 0x208]
mov dword [esp + 0x20], esi
push eax
mov dword [esp + 0x30], ebx
lea ecx, [esp + 0xd4]
push ebx
movdqu xmmword [esp + 0x210], xmm0
mov dword [esp + 0xd8], ebx
mov dword [esp + 0xdc], ebx
mov dword [esp + 0xe0], ebx
call fcn.100094be
mov dword [esp + 0xc], ebx
jmp 0x1001344e
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x40], 0xacd79536
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1001343e
mov dword [esp + 0xc], ebx
jmp 0x10013469
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x240], ebx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1001345a
mov dword [esp + 0x40], edi
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
cmp dword [esp + 0x40], ebx
jl 0x100134ac
mov dword [esp + 0x1c], 0x734f0946
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100134a2
push ebx
push 0xf47
call edi
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
dec dword [esp + 0x1c]
dec dword [esp + 0x40]
jns 0x10013480
lea ecx, [esp + 0xc8]
call fcn.10008fed
mov dword [esp + 0x20], ebx
mov dword [esp + 0x18], 0xb9f9b31
mov dword [esp + 0x10], ebx
jmp 0x100134dd
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1dc], 0xdd8d1303
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jl 0x100134ca
mov dword [esp + 0x18], 0xe
cmp dword [esp + 0x18], ebx
jne 0x10013539
mov dword [esp + 0x10], ebx
mov dword [esp + 0x10], 7
jmp 0x10013526
cmp dword [esp + 0x1dc], ebx
jne 0x1001352d
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10013522
push 0x4db
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindow]
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xffffffed
jle 0x10013500
cmp dword [esp + 0x10], ebx
jne 0x10013539
dec dword [esp + 0x18]
je 0x100134f2
mov dword [esp + 0x20], 0xfffffffc
lea ecx, [esp + 0x17c]
mov dword [esp + 0x20], esi
mov dword [esp + 0x38], 0x9aed23b6
mov dword [esp + 0x10], 0x45307222
mov dword [esp + 0xc], 0xe08cccdd
mov dword [esp + 0x28], 0xf576c516
mov dword [esp + 0x2c], 0x516a205b
mov dword [esp + 0x30], ebx
push 2
call fcn.10008f68
push 2
mov dword [esp + 0x260], esi
mov dword [esp + 0x14], ebx
pop edx
jmp 0x100135a1
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x17c]
mov dword [eax + ecx*4], esi
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edx
jl 0x1001358f
mov eax, dword [esp + 0x38]
neg eax
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0xffffffff
mov eax, dword [esp + 0xc]
mov dword [esp + 0x28], eax
mov eax, dword [esp + 0x28]
mov ecx, dword [esp + 0x10]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
mov dword [esp + 0x2c], ecx
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
add ecx, 0x64228890
add eax, ecx
mov ecx, 0xa7b7e80d
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, eax, 0xb0b4
cmp eax, 0x27a4129b
jne 0x10013605
mov eax, ebx
cmp dword [esp + 0x28], ebx
je 0x10013607
mov eax, esi
mov ecx, 0xfff6
cmp ecx, eax
sbb eax, eax
neg eax
neg eax
cmp eax, 0xbd0a7084
jbe 0x10013708
mov dword [esp + 0x34], 0xeaf6
lea ecx, [esp + 0x140]
mov dword [esp + 0x1c], 0xe11771b7
mov dword [esp + 0x18], 0x895c4b79
push edx
call fcn.10008f68
mov dword [esp + 0x38], 0x55833a
mov dword [esp + 0x18], ebx
jmp 0x10013668
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x140]
mov dword [eax + ecx*4], 6
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 2
jl 0x10013652
mov ecx, dword [esp + 0x34]
xor edx, edx
mov eax, dword [esp + 0x10]
cmp eax, ecx
mov eax, dword [esp + 0x34]
setge dl
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [esp + 0x2c]
setne cl
xor edx, edx
cmp ecx, eax
setg dl
sub edx, 0xec1e183a
neg edx
sbb edx, edx
inc edx
add edx, dword [esp + 0x1c]
sub edx, dword [esp + 0x30]
mov eax, dword [esp + 0x34]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xa
cmp eax, edx
setg cl
mov dword [esp + 0x18], ecx
cmp dword [esp + 0x18], ebx
jne 0x100136cc
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x10]
cmp dword [esp + 0xc], esi
jle 0x100136de
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x140]
mov eax, dword [esp + 0x1c]
mov ecx, dword [ecx + 4]
sub ecx, eax
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0x140]
call fcn.10008fed
jmp 0x10013726
mov dword [esp + 0xc], ebx
jmp 0x10013720
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x17c]
mov dword [eax + ecx*4], esi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x1001370e
or dword [esp + 0x25c], 0xffffffff
lea ecx, [esp + 0x17c]
call fcn.10008fed
mov dword [esp + 0x20], 0xfffffffb
mov dword [esp + 0xc], 0xfffffff7
mov dword [esp + 0x18], 0xffffffff
mov dword [esp + 0xc], 0xffffffed
jmp 0x100137d1
push 3
lea ecx, [esp + 0x168]
call fcn.10008f68
mov dword [esp + 0x10], ebx
jmp 0x10013782
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x164]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x10013770
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
neg ecx
mov edx, dword [esp + 0x164]
sbb ecx, ecx
neg ecx
sub ecx, eax
xor eax, eax
cmp ecx, esi
setle al
sub eax, 2
cmp eax, dword [edx + 4]
jne 0x100137b7
mov eax, dword [esp + 0xc]
imul eax, dword [edx + 4], 0xde90829f
lea ecx, [esp + 0x164]
mov dword [edx + 4], eax
call fcn.10008fed
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 0xfffffff6
jl 0x1001375c
cmp dword [esp + 0xc], ebx
jne 0x100137ea
cmp dword [esp + 0xc], 0x7f59ec13
mov eax, ebx
jge 0x100137ec
mov eax, esi
mov dword [esp + 0xc], eax
xor edx, edx
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp ecx, eax
mov eax, dword [esp + 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0xc]
push esi
setge cl
xor edx, edx
cmp eax, ecx
setle dl
xor ecx, ecx
imul edx, dword [esp + 0x1c]
mov eax, dword [esp + 0x1c]
cmp edx, eax
setle cl
xor eax, eax
imul ecx, dword [esp + 0x1c]
cmp ecx, 0xffffffff
lea ecx, [esp + 0x198]
setge al
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], 3
mov dword [esp + 0x24], 0xbdbaf9eb
mov dword [esp + 0x1c], ebx
call fcn.10008f68
push 2
pop eax
mov dword [esp + 0x25c], eax
lea ecx, [esp + 0xf8]
mov dword [esp + 0x1c], 0xfffffff8
push eax
call fcn.10008f68
mov dword [esp + 0x30], 0x4ed09eb8
mov dword [esp + 0x38], 0x1cc545e2
mov dword [esp + 0xc], ebx
jmp 0x100138a2
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x194]
mov dword [eax + ecx*4], 2
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1001388c
mov dword [esp + 0xc], ebx
jmp 0x100138c4
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xf8]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x100138ae
mov eax, dword [esp + 0x18]
xor edx, edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
add ecx, dword [esp + 0x18]
mov eax, dword [esp + 0xf8]
push 0xfffffffffffffffa
mov dword [eax + 4], ecx
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov esi, dword [esp + 0x1c]
mov eax, dword [esp + 0x198]
mov ecx, dword [esp + 0x34]
mov dword [eax], esi
mov eax, dword [esp + 0xfc]
cmp dword [eax], ecx
mov eax, dword [esp + 0x1c]
setg dl
add eax, esi
imul ecx, edx, 0x9ce
xor edx, edx
cmp eax, ecx
pop eax
setne dl
sub edx, eax
mov eax, dword [esp + 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
mov dword [esp + 0x38], ecx
lea ecx, [esp + 0xf8]
call fcn.10008fed
or dword [esp + 0x25c], 0xffffffff
lea ecx, [esp + 0x194]
call fcn.10008fed
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0xc], 0xfffffffe
mov dword [esp + 0x28], 0xd2f2
mov dword [esp + 0x30], 0xe62699ff
mov dword [esp + 0x30], 0x1f205951
mov dword [esp + 0xc], ebx
jmp 0x100139a2
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x48], 0x8bbca631
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x10013992
mov dword [esp + 0xc], ebx
jmp 0x100139bf
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x50], 0xf58aae07
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x100139af
xor esi, esi
mov dword [esp + 0xc], ebx
inc esi
jmp 0x10013a15
mov dword [esp + 0x10], 0x65ab3e90
mov dword [esp + 0x10], esi
cmp dword [esp + 0x10], ebx
jl 0x10013a11
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + eax*4 + 0x48]
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x48], ecx
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10013a0b
push 0x11a5
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
dec dword [esp + 0x10]
jns 0x100139e1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jle 0x100139cf
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x48]
mov dword [esp + 0x4c], ecx
mov eax, dword [esp + 0x58]
sub eax, 0xa814
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
jle 0x10013a3d
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x58]
xor edx, edx
mov eax, dword [esp + 0x58]
mov eax, dword [esp + 0x58]
mov eax, dword [esp + 0x58]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
sub edx, dword [esp + 0x28]
je 0x10013a6e
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x28]
xor edx, edx
mov eax, dword [esp + 0xc]
cmp ecx, eax
setge dl
imul edx, dword [esp + 0x58]
mov dword [esp + 0xc], edx
cmp dword [esp + 0xc], ebx
je 0x10013a94
mov eax, esi
cmp dword [esp + 0x50], ebx
jne 0x10013a96
mov eax, ebx
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x4c]
sub ecx, dword [esp + 0x28]
neg ecx
push esi
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, 0xfbc0
lea ecx, [esp + 0x15c]
setl al
mov dword [esp + 0x34], eax
mov dword [esp + 0x24], 0xf2b8319b
mov dword [esp + 0x24], 0x3e2e1665
call fcn.10008f68
push 2
lea ecx, [esp + 0x12c]
mov dword [esp + 0x260], 3
call fcn.10008f68
mov byte [esp + 0x25c], 4
lea ecx, [esp + 0x134]
mov dword [esp + 0x1c], esi
push 2
call fcn.10008f68
push 2
mov dword [esp + 0x10], ebx
pop edx
jmp 0x10013b1f
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x68], 0x8256
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x10013b0f
mov dword [esp + 0xc], ebx
jmp 0x10013b41
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x158]
mov dword [eax + ecx*4], 0x4888999d
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10013b2b
mov dword [esp + 0xc], ebx
jmp 0x10013b63
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x128]
mov dword [eax + ecx*4], 0xa831d26e
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x10013b4d
mov dword [esp + 0xc], ebx
jmp 0x10013b85
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x134]
mov dword [eax + ecx*4], 0x36717b38
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x10013b6f
cmp dword [esp + 0x6c], ebx
jne 0x10013bab
mov eax, dword [esp + 0x158]
xor ecx, ecx
cmp dword [eax], 0x3281d21f
setge cl
cmp dword [esp + 0x68], ecx
mov ecx, ebx
je 0x10013bad
mov ecx, esi
mov eax, dword [esp + 0x128]
neg ecx
mov dword [eax + 4], ecx
jne 0x10013bbf
mov eax, dword [esp + 0x68]
dec dword [esp + 0x1c]
lea ecx, [esp + 0x134]
mov eax, dword [esp + 0x1c]
mov eax, dword [esp + 0x6c]
mov eax, dword [esp + 0x6c]
mov eax, dword [esp + 0x134]
mov dword [eax + 4], esi
call fcn.10008fed
lea ecx, [esp + 0x128]
call fcn.10008fed
or dword [esp + 0x25c], 0xffffffff
lea ecx, [esp + 0x158]
call fcn.10008fed
mov dword [esp + 0x20], 0xffffffff
lea ecx, [esp + 0x1bc]
mov dword [esp + 0x20], 0xd8b26de0
push 3
call fcn.10008f68
mov dword [esp + 0x25c], 5
mov dword [esp + 0x10], ebx
jmp 0x10013c4a
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1bc]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x10013c34
mov dword [esp + 0x18], 0xffffffed
jmp 0x10013d81
mov dword [esp + 0x1c], 0x60b0
mov dword [esp + 0x2c], 0x3e38693
mov dword [esp + 0x10], ebx
jmp 0x10013c84
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x7c], 2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10013c74
inc dword [esp + 0x1c]
jne 0x10013d1a
mov ecx, dword [esp + 0x1c]
xor edx, edx
mov eax, dword [esp + 0x18]
cmp eax, ecx
mov eax, dword [esp + 0x24]
setl dl
xor ecx, ecx
cmp eax, edx
mov edx, dword [esp + 0x2c]
setl cl
sub edx, ecx
mov dword [esp + 0x7c], edx
mov eax, dword [esp + 0x18]
add eax, edx
je 0x10013cc8
mov edx, esi
cmp dword [esp + 0x24], ebx
jne 0x10013cca
mov edx, ebx
mov eax, dword [esp + 0x18]
xor ecx, ecx
cmp eax, edx
setge cl
sub ecx, dword [esp + 0x2c]
neg ecx
sbb ecx, ecx
add ecx, 8
cmp ecx, dword [esp + 0x2c]
jle 0x10013d1a
mov dword [esp + 0x30], 0x41a4
mov dword [esp + 0x10], ebx
jmp 0x10013d0d
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10013d09
push ebx
call edi
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xffffffe3
jl 0x10013cf4
mov eax, dword [esp + 0x30]
jmp 0x10013d7d
push dword [esp + 0x44]
movdqa xmm0, xmmword [0x10007d50]
lea eax, [esp + 0x204]
push eax
lea eax, [esp + 0x1f8]
mov dword [esp + 0xb8], ebx
push eax
push ebx
lea ecx, [esp + 0xc0]
mov dword [esp + 0xc4], ebx
movdqu xmmword [esp + 0x200], xmm0
mov dword [esp + 0xc8], ebx
call fcn.100094be
mov dword [esp + 0x20], esi
lea ecx, [esp + 0xb0]
mov dword [esp + 0x1c], 0x8da91e53
dec dword [esp + 0x1c]
call fcn.10008fed
dec dword [esp + 0x18]
cmp dword [esp + 0x18], 0xffffffe5
jle 0x10013c5e
or dword [esp + 0x25c], 0xffffffff
lea ecx, [esp + 0x1bc]
call fcn.10008fed
push 2
pop edi
push edi
lea ecx, [esp + 0xe4]
call fcn.10008f68
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x10013dd0
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xe0]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10013dbe
mov dword [esp + 0x10], esi
cmp dword [esp + 0x10], ebx
jl 0x10013e2a
mov edi, dword [esp + 0xe0]
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x10]
mov edx, dword [esp + 0x28]
mov eax, dword [esp + 0x28]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
add edx, dword [edi + 4]
cmp eax, edx
mov eax, dword [esp + 0xe0]
setl cl
mov dword [eax + esi*4], ecx
dec dword [esp + 0x10]
jns 0x10013de7
xor esi, esi
push 2
inc esi
pop edi
lea ecx, [esp + 0xe0]
call fcn.10008fed
mov dword [esp + 0xc], ebx
mov dword [esp + 0x30], esi
mov dword [esp + 0x10], ebx
jmp 0x10013e54
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x3c], 0x8c6a53d0
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10013e44
mov dword [esp + 0xc], ebx
jmp 0x10013e6e
mov eax, dword [esp + 0xc]
cmp dword [esp + eax*4 + 0x3c], ebx
jne 0x10013e74
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ebx
jle 0x10013e60
mov dword [esp + 0xc], ebx
cmp dword [esp + 0xc], ebx
jl 0x10013ede
mov dword [esp + 0x18], ebx
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jl 0x10013ed8
mov eax, dword [esp + 0x18]
cmp dword [esp + eax*4 + 0x3c], ebx
jne 0x10013ec6
mov eax, dword [esp + 0x18]
cmp dword [esp + eax*4 + 0x3c], ebx
jne 0x10013ebe
cmp dword [esp + 0xc], 0x9689
je 0x10013eae
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x3c]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x18]
mov eax, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x30], eax
dec dword [esp + 0x18]
jns 0x10013e8c
dec dword [esp + 0xc]
jns 0x10013e7e
mov dword [esp + 0x9c], esi
lea ecx, [esp + 0x188]
push edi
call fcn.10008f68
push 6
pop ecx
mov dword [esp + 0x25c], ecx
mov dword [esp + 0x20], 0x6f25db2b
mov dword [esp + 0x20], 0xe56f
mov dword [esp + 0x38], 0xfffffff7
mov dword [esp + 0x10], 0xb999fb02
mov dword [esp + 0x20], 0xde05dae5
push 5
pop eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x20], ecx
mov dword [esp + 0x18], 0xe8e1b881
mov dword [esp + 0x2c], 0xd9bacc5d
mov dword [esp + 0x20], 0xfffffff9
mov dword [esp + 0x20], 0x5ee28fde
mov dword [esp + 0x30], 0x8fa8f90a
mov dword [esp + 0x20], 0x949f4ffc
mov dword [esp + 0x24], 0x3e93d0b5
mov dword [esp + 0x20], 0xfffffff8
mov dword [esp + 0x28], 8
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x20], 0x1720348f
mov dword [esp + 0x34], 0x307a329e
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x1c], 0xfffffffc
mov dword [esp + 0x1c], eax
mov dword [esp + 0xc], ebx
jmp 0x10013fb8
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x228], 0x85f88e10
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jl 0x10013fa5
mov dword [esp + 0xc], ebx
jmp 0x10013fd7
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x230], 0x9192
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x10013fc4
mov dword [esp + 0xc], ebx
jmp 0x10013ff7
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x84], 0x9b45c761
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10013fe4
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x24]
cmp eax, dword [esp + 0x38]
jne 0x10014013
mov edx, ebx
cmp dword [esp + 0x24], ebx
jne 0x10014015
mov edx, esi
dec dword [esp + 0x1c]
xor ecx, ecx
mov eax, dword [esp + 0x2c]
cmp edx, eax
setge cl
imul ecx, dword [esp + 0x1c]
mov dword [esp + 0x234], ecx
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x84]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x10]
neg eax
sbb eax, eax
xor edx, edx
neg eax
sub eax, dword [esp + 0x18]
imul ecx, eax, 6
mov eax, dword [esp + 0x2c]
cmp ecx, eax
setge dl
sub edx, dword [esp + 0x20]
mov dword [esp + 0x34], edx
mov dword [esp + 0x20], 0xb8d8131d
mov dword [esp + 0x20], 0xffffffff
mov dword [esp + 0x1c], 0xfffffff8
mov dword [esp + 0x10], esi
mov dword [esp + 0x24], 0xbe1d925b
mov dword [esp + 0x18], 0xf37d45db
mov dword [esp + 0xc], 0xfffffffc
mov dword [esp + 0x24], ebx
mov dword [esp + 0x10], ebx
jmp 0x100140b4
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1e4], 0xfffffffb
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x100140a1
dec dword [esp + 0x24]
mov dword [esp + 0xc], edi
cmp dword [esp + 0xc], ebx
jl 0x10014201
mov dword [esp + 0x28], esi
mov dword [esp + 0x18], edi
cmp dword [esp + 0x18], ebx
jl 0x100141f7
push edi
lea ecx, [esp + 0x174]
call fcn.10008f68
mov dword [esp + 0x10], ebx
jmp 0x10014108
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x170]
mov dword [eax + ecx*4], 0x8e1ce43c
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x100140f2
mov dword [esp + 0x10], edi
cmp dword [esp + 0x10], ebx
jl 0x10014134
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001412e
push 0x1196
call dword [sym.imp.USER32.dll_PostQuitMessage]
dec dword [esp + 0x10]
jns 0x10014118
cmp dword [esp + 0x28], ebx
mov edi, dword [esp + 0x170]
jne 0x10014148
mov edx, esi
cmp dword [edi + 4], ebx
jne 0x1001414a
mov edx, ebx
mov eax, dword [esp + 0x28]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
cmp ecx, esi
setle al
xor edx, edx
add eax, dword [esp + 0x1c]
cmp eax, dword [edi + 4]
mov eax, dword [esp + 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x18]
mov esi, dword [esp + eax*4 + 0x1e4]
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1e4], esi
cmp dword [esp + 0x18], 0xd5ab883e
mov eax, dword [esp + 0x1c]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [esp + 0x10]
setg dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x28]
setg cl
xor edx, edx
cmp eax, ecx
setne dl
xor ecx, ecx
sub edx, dword [edi + 4]
cmp esi, 0x390f3bd7
setle cl
xor eax, eax
cmp ecx, edx
lea ecx, [esp + 0x170]
setg al
mov dword [esp + 0x10], eax
call fcn.10008fed
dec dword [esp + 0x18]
push 1
pop esi
push 2
pop edi
jns 0x100140df
dec dword [esp + 0xc]
jns 0x100140cd
mov dword [esp + 0x20], 0xf7d59448
mov dword [esp + 0xc], 0xaeef
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x28], 0xa3ea
mov dword [esp + 0x34], 0x50169ff9
mov dword [esp + 0x2c], 0xcb51404f
mov dword [esp + 0x24], 0xd4763c6d
mov dword [esp + 0x10], ebx
jmp 0x10014252
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x21c], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001423f
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x28]
cmp eax, dword [esp + 0x28]
jg 0x10014287
mov edx, ebx
cmp dword [esp + 0xc], ebx
je 0x10014289
mov edx, esi
mov eax, dword [esp + 0x1c]
xor ecx, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x28]
cmp edx, eax
push esi
setne cl
xor edx, edx
imul ecx, dword [esp + 0x38]
mov eax, dword [esp + 0x10]
cmp ecx, eax
setge dl
sub edx, dword [esp + 0x10]
sub edx, dword [esp + 0x30]
mov eax, dword [esp + 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
xor edx, edx
mov dword [esp + 0x28], ecx
mov ecx, dword [esp + 0x28]
imul ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x30]
cmp ecx, eax
setg dl
add edx, dword [esp + 0x10]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x24], edx
xor edx, edx
cmp dword [esp + 0x24], eax
mov eax, dword [esp + 0x10]
setg dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [esp + 0x228], ecx
lea ecx, [esp + 0x114]
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x28], 0xef2c3654
mov dword [esp + 0x28], 0x6ec6e54
mov dword [esp + 0x28], 0xf0488f4f
call fcn.10008f68
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x2c], 0xffff
mov dword [esp + 0x20], 0x4307976b
mov dword [esp + 0x1c], esi
mov dword [esp + 0xc], ebx
jmp 0x10014364
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x110]
mov dword [eax + ecx*4], esi
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10014352
mov dword [esp + 0xc], ebx
jmp 0x1001437f
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x210], ebx
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10014370
mov eax, dword [esp + 0x24]
xor ecx, ecx
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x110]
cmp dword [eax], ebx
setne cl
neg ecx
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x24], 0xfef9
mov eax, dword [esp + 0x24]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
sub eax, 0xc1b1
jne 0x100143ce
mov eax, dword [esp + 0x110]
mov ecx, ebx
cmp dword [eax], ebx
je 0x100143d0
mov ecx, esi
mov eax, dword [esp + 0x2c]
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x20]
sete dl
xor ecx, ecx
cmp edx, eax
setge cl
imul eax, ecx, 0xffff19a4
lea ecx, [esp + 0x110]
cmp edi, eax
sbb eax, eax
inc eax
sub eax, dword [esp + 0x2c]
neg eax
sbb eax, eax
inc eax
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x210], eax
call fcn.10008fed
mov dword [esp + 0x88], 0x376e
mov dword [esp + 0x10], ebx
jmp 0x1001443c
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x188]
mov dword [eax + ecx*4], 3
inc dword [esp + 0x10]
cmp dword [esp + 0x10], edi
jl 0x10014426
mov dword [esp + 0x18], 0xffffffff
lea ecx, [esp + 0x1c8]
push 3
call fcn.10008f68
mov dword [esp + 0x10], ebx
jmp 0x10014474
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x1c8]
mov dword [eax + ecx*4], 0xcdf9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x1001445e
mov dword [esp + 0x18], ebx
jmp 0x10014558
mov dword [esp + 0x10], ebx
jmp 0x1001449d
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x1ac], 0xfffffff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 4
jl 0x1001448a
mov dword [esp + 0x1b8], edi
cmp dword [esp + 0x1b8], ebx
jl 0x10014542
mov dword [esp + 0xc], esi
mov dword [esp + 0xc], ebx
jmp 0x10014507
mov dword [esp + 0x10], 0x149cec79
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100144e2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov dword [esp + 0x10], ebx
jmp 0x100144fd
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x100144f9
cmp dword [esp + 0x10], edi
jle 0x100144e8
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jle 0x100144c2
mov dword [esp + 0xc], ebx
jmp 0x1001452f
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x1001452b
push 0x14cc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jle 0x10014513
dec dword [esp + 0x1b8]
jns 0x100144b8
mov byte [esp + 0x17], bl
cmp byte [esp + 0x17], 0
je 0x10014554
push ebx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 0x1a
jg 0x10014484
lea ecx, [esp + 0x1c8]
call fcn.10008fed
lea eax, [esp + 0x188]
push eax
lea eax, [esp + 0xa0]
push ebx
push eax
call fcn.10017894
add esp, 0xc
push 0xfffffffffffffffa
pop eax
mov dword [esp + 0x20], eax
mov eax, 0x61fc2da8
mov dword [esp + 0x28], 0xfffffff7
mov dword [esp + 0x30], 0x3717be9f
mov dword [esp + 0x10], ebx
mov dword [esp + 0x34], edi
mov dword [esp + 0x24], 0xcd9d754
mov dword [esp + 0x8c], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0x94], eax
mov dword [esp + 0x98], eax
mov dword [esp + 0x2c], 0x82e58099
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x38], 6
mov dword [esp + 0x18], ebx
dec dword [esp + 0x1c]
jne 0x1001468e
mov dword [esp + 0x34], ebx
mov eax, dword [esp + 0x1c]
sub eax, dword [esp + 0x98]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp ecx, eax
mov eax, dword [esp + 0x98]
sbb edx, edx
inc edx
cmp edx, eax
setge cl
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
sub edx, eax
mov eax, dword [esp + 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [esp + 0x2c]
setl cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
cmp edx, eax
mov eax, dword [esp + 0x20]
setl cl
xor edx, edx
cmp ecx, eax
setne dl
xor eax, eax
neg edx
cmp edx, 0xfffffffd
mov edx, ebx
setne al
xor ecx, ecx
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x28]
cmp dword [esp + 0x20], eax
setle cl
imul ecx, dword [esp + 0x90]
cmp ecx, 0xa4045238
jbe 0x10014690
mov edx, esi
mov eax, dword [esp + 0x98]
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x10]
setge cl
xor edx, edx
cmp ecx, edi
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
sub ecx, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x20], ecx
xor ecx, ecx
cmp dword [esp + 0x20], eax
setne cl
mov dword [esp + 0x10], ecx
cmp dword [esp + 0x10], ebx
je 0x100146dc
mov edx, esi
cmp dword [esp + 0x28], ebx
jne 0x100146de
mov edx, ebx
mov eax, dword [esp + 0x30]
xor ecx, ecx
cmp edx, eax
push 0xfffffffffffffffa
setge cl
pop eax
cmp eax, ecx
lea ecx, [esp + 0xbc]
push edi
sbb eax, eax
inc eax
mov dword [esp + 0x3c], eax
inc dword [esp + 0x1c]
call fcn.10008f68
mov dword [esp + 0x10], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x10014726
cmp dword [esp + 0x10], edi
jl 0x10014714