Function at 0x10019a65
Capabilities:
Get graphical window text

Disassembly:
mov eax, 0x10088381
call fcn.10087e94
sub esp, 0x1dc
push ebx
push esi
push edi
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0x144]
mov dword [ebp - 0x1c], 0x81c
mov dword [ebp - 0x18], 0x6cd04cd0
mov dword [ebp - 0x10], 0x910a83af
push 2
mov dword [ebp - 0x24], edx
call fcn.10017bbe
xor ebx, ebx
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], ebx
push 3
call fcn.10017bbe
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp - 0x14], ebx
jmp 0x10019ad4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x144]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10019ac1
mov dword [ebp - 0x14], ebx
jmp 0x10019af2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xfc]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10019adf
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
xor edi, edi
inc edi
cmp ecx, edi
setg al
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x144]
add ecx, 0x4cbed562
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
cmp ecx, dword [ebp - 0x1c]
jle 0x10019b41
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov esi, 0x69ee
mov eax, dword [ebp - 0x1c]
mov ecx, esi
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xfc]
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x20]
sub ecx, eax
cmp ecx, dword [ebp - 0x1c]
jle 0x10019b76
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xfc]
cmp dword [eax + 8], ebx
mov eax, dword [ebp - 0x1c]
setne cl
xor edx, edx
cmp ecx, 0xa1fd29cc
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xfc]
call fcn.100183db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x144]
call fcn.100183db
cmp byte [ebp + 8], bl
je 0x1001a982
mov dword [ebp + 8], 0x1a049fe3
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x10019be1
push ebx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x10019bfb
push ebx
push 0x187e
push ebx
push 0x777
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov dword [ebp + 8], 0x2799
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x10019c11
push ebx
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x10019c21
push ebx
push ebx
call dword [sym.imp.USER32.dll_CopyRect]
mov dword [ebp - 0x10], edi
mov dword [ebp + 8], 8
push 3
mov dword [ebp + 8], ebx
mov dword [ebp + 8], ebx
pop esi
jmp 0x10019c47
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x178], 0xffffffff
inc dword [ebp + 8]
cmp dword [ebp + 8], esi
jl 0x10019c36
mov dword [ebp - 0x10], 2
cmp dword [ebp - 0x10], ebx
jl 0x10019c7e
mov dword [ebp + 8], 0xffffffff
xor ecx, ecx
mov dword [ebp + 8], edi
mov dword [ebp + 8], ebx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x178]
cmp eax, edi
setge cl
mov dword [ebp + 8], ecx
dec dword [ebp - 0x10]
jns 0x10019c58
mov dword [ebp + 8], ebx
jmp 0x10019c94
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x178], 0x9d94
inc dword [ebp + 8]
cmp dword [ebp + 8], esi
jl 0x10019c83
mov dword [ebp + 8], 0xca7b5cf1
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x18], 0x7d8e
mov dword [ebp - 0x20], 0xe8f21009
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x2c], 0x13db
cmp dword [ebp - 0x18], ebx
jne 0x10019cd4
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], 0xffffffff
push 0xfffffffffffffffa
pop ecx
cmp dword [ebp - 0x1c], ebx
je 0x10019d2f
mov dword [ebp - 0x10], 0x5c22c920
mov dword [ebp - 0x1c], ebx
jmp 0x10019d24
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], bl
je 0x10019d18
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
cmp dword [ebp - 0x10], ebx
jne 0x10019e60
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffffe
jne 0x10019cfb
jmp 0x10019e60
mov dword [ebp - 0x14], edi
mov dword [ebp + 8], 0xbdf9020c
mov dword [ebp - 0x10], 0x34572090
mov dword [ebp - 0x14], 0xba006696
mov dword [ebp - 0x14], ebx
jmp 0x10019d5a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0xeba4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10019d4c
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
cmp ecx, eax
mov ecx, 0x6e90
sbb eax, eax
inc eax
mov dword [ebp - 0x14], eax
mov eax, dword [ebp + 8]
sub ecx, eax
add ecx, dword [ebp - 0x14]
jne 0x10019d88
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
xor edx, edx
mov eax, dword [ebp + 8]
mov ecx, 0x4768
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
cmp ecx, eax
setl dl
add edx, dword [ebp + 8]
mov eax, dword [ebp + 8]
shl edx, 3
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp + 8], ecx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
cmp edx, 0x9123ebaa
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x1c]
jne 0x10019e5a
mov dword [ebp + 8], ebx
jmp 0x10019e0b
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x94], 0x865d4863
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jl 0x10019dfa
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x10019e45
mov dword [ebp + 8], ebx
cmp dword [ebp + 8], ebx
jl 0x10019e40
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], ebx
jl 0x10019e3b
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x3c], ecx
dec dword [ebp - 0x10]
jns 0x10019e28
dec dword [ebp + 8]
jns 0x10019e20
dec dword [ebp - 0x14]
jns 0x10019e18
mov eax, dword [ebp - 0x94]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
test eax, eax
sets cl
mov dword [ebp - 0x1c], ecx
jmp 0x10019e60
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0xffffffff
lea ecx, [ebp - 0xcc]
push esi
call fcn.10017bbe
mov dword [ebp - 0x18], 0x99333c7d
mov dword [ebp - 0x10], 6
push 3
mov dword [ebp - 0x38], 0xf0ef
mov dword [ebp + 8], ebx
pop edx
jmp 0x10019e9f
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], ebx
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x10019e90
mov dword [ebp + 8], ebx
jmp 0x10019eb3
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x48], ebx
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x10019ea9
push 2
pop esi
mov dword [ebp - 0x40], esi
cmp dword [ebp - 0x40], ebx
jl 0x10019f5a
mov dword [ebp - 0x20], 6
mov dword [ebp + 8], 0xffffffff
mov dword [ebp + 8], 0xffffffff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x495761be
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x2c], edi
mov eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xcc]
mov dword [eax + ecx*4], 0xfffffffc
mov eax, dword [ebp - 0x40]
dec dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x10], ebx
jne 0x10019f38
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
test eax, eax
setle cl
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x40]
jns 0x10019ec7
lea ecx, [ebp - 0xcc]
call fcn.100183db
mov dword [ebp - 0x2c], 0x120d
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x18], 0x5bb08661
push esi
call fcn.10017bbe
mov dword [ebp + 8], 0xa66fe7d8
mov dword [ebp - 0x10], 0xf5ebec5
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp + 8], 0xffff
mov dword [ebp + 8], 0x216d7279
mov dword [ebp + 8], ebx
jmp 0x10019fb4
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x68]
mov dword [eax + ecx*4], 6
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x10019fa4
mov dword [ebp + 8], ebx
jmp 0x1001a05d
mov dword [ebp - 0x38], 0xfffc
mov dword [ebp - 0x10], 0xfffffff6
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 8]
mov edx, dword [ebp - 0x68]
cmp dword [edx + eax*4], 0xfffffffc
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, dword [edx + esi*4]
setne cl
xor eax, eax
cmp ecx, 0xfffc
setne al
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x68]
imul ecx, dword [eax]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x68]
cmp dword [eax + ecx*4], edi
jne 0x1001a01b
mov ecx, edi
cmp dword [ebp - 0x38], ebx
jne 0x1001a01d
mov ecx, ebx
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
imul eax, dword [ebp + 8]
sub eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x68]
mov dword [eax], ebx
mov dword [ebp - 0x10], ebx
jmp 0x1001a04a
mov dword [ebp - 0x20], ebx
inc dword [ebp - 0x20]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x1001a041
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x68]
cmp dword [eax + ecx*4], ebx
jne 0x1001a066
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jle 0x10019fc2
lea ecx, [ebp - 0x68]
call fcn.100183db
mov dword [ebp - 0x38], 0xfffffffa
lea ecx, [ebp - 0x138]
push 2
call fcn.10017bbe
mov eax, 0xcccddd1d
mov dword [ebp - 4], edi
mov dword [ebp - 0xc0], eax
lea ecx, [ebp - 0x15c]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
push edi
call fcn.10017bbe
mov dword [ebp + 8], ebx
mov dword [ebp - 0x10], 0xfffffff7
mov dword [ebp + 8], 0xb9628eaf
mov dword [ebp + 8], ebx
jmp 0x1001a0d7
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x138]
mov dword [eax + ecx*4], 0x2eac
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x1001a0c4
mov dword [ebp + 8], ebx
jmp 0x1001a0f5
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x15c]
mov dword [eax + ecx*4], 0x22ba7b7e
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jl 0x1001a0e2
mov eax, dword [ebp - 0x138]
or esi, 0xffffffff
mov dword [ebp - 0xbc], esi
cmp dword [eax + 4], esi
jge 0x1001a13a
mov dword [ebp + 8], 0x5590
xor edx, edx
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xc0]
imul ecx, eax
mov eax, dword [ebp - 0xbc]
cmp eax, ecx
mov eax, dword [ebp - 0xbc]
setle dl
sub edx, eax
mov edx, edi
jne 0x1001a13c
mov edx, ebx
mov eax, dword [ebp - 0x15c]
xor ecx, ecx
cmp edx, dword [eax]
sete cl
xor eax, eax
cmp ecx, 0xfffffffd
setle al
mov dword [ebp - 0x10], eax
mov dword [ebp + 8], ebx
jmp 0x1001a184
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], ebx
jl 0x1001a181
mov dword [ebp - 0x1c], 0xf118c84b
mov dword [ebp - 0x1c], 0x6c4779d4
mov dword [ebp - 0x1c], edi
dec dword [ebp - 0x20]
dec dword [ebp - 0x10]
jns 0x1001a168
inc dword [ebp + 8]
cmp dword [ebp + 8], 0x10
jne 0x1001a159
lea ecx, [ebp - 0x15c]
call fcn.100183db
lea ecx, [ebp - 0x138]
mov dword [ebp - 4], esi
call fcn.100183db
mov dword [ebp + 8], ebx
jmp 0x1001a1b6
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x34], 0xcf415d72
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x1001a1a8
mov eax, dword [ebp - 0x34]
xor edx, edx
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x34]
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x34]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp + 8]
setne cl
xor edx, edx
cmp ecx, 3
setge dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x30], ecx
test ecx, ecx
je 0x1001a202
mov edx, edi
cmp dword [ebp - 0x34], ebx
jne 0x1001a204
mov edx, ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
neg ecx
cmp ecx, esi
setl al
xor ecx, ecx
test eax, eax
setle cl
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x2c]
jge 0x1001a2cc
cmp dword [ebp - 0x18], ebx
jne 0x1001a2cc
mov dword [ebp - 0x10], 0xfffffff9
push 0xfffffffffffffffe
pop eax
mov dword [ebp - 0x24], eax
mov dword [ebp + 8], 0xef6f1ac2
mov dword [ebp + 8], eax
mov dword [ebp + 8], ebx
jmp 0x1001a259
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x78], edi
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x1001a24f
mov dword [ebp + 8], ebx
jmp 0x1001a275
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x1dc], 0xfffffffb
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1001a264
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setle dl
xor ecx, ecx
mov dword [ebp - 0x1d4], edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
cmp eax, 0x91bf520f
setne cl
jmp 0x1001a338
mov dword [ebp - 0x10], 0x50fa
mov dword [ebp + 8], 0xfffffff7
mov dword [ebp + 8], 0x3d975123
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001a300
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
mov eax, dword [ebp - 0x38]
xor edx, edx
mov esi, dword [ebp - 0x14]
mov dword [ebp - 0x34], esi
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
xor ecx, ecx
cmp esi, 0x2e91
mov dword [ebp + 8], edx
mov eax, dword [ebp + 8]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp + 8], ecx
lea ecx, [ebp - 0x108]
push 3
call fcn.10017bbe
mov dword [ebp - 4], 2
push 0xfffffffffffffffd
mov dword [ebp - 0x24], edi
pop edx
mov dword [ebp - 0x10], edx
mov dword [ebp + 8], ebx
jmp 0x1001a36c
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], edx
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1001a35d
mov esi, dword [ebp - 0x108]
mov dword [esi + 8], 0xffffffe6
push 4
lea ecx, [ebp - 0x84]
call fcn.10017bbe
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x150]
mov dword [ebp - 0x14], 0xfffffffd
push 4
call fcn.10017bbe
push 4
mov dword [ebp + 8], 0x49dda4ad
mov dword [ebp + 8], ebx
pop edx
jmp 0x1001a3c3
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x84]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x1001a3b3
mov dword [ebp + 8], ebx
jmp 0x1001a3e0
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x150]
mov dword [eax + ecx*4], 0x52ee8b72
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x1001a3cd
cmp dword [esi + 8], 0
je 0x1001a425
mov edx, dword [ebp - 0x84]
push 8
pop eax
cmp eax, dword [edx + 8]
sbb ecx, ecx
neg ecx
sub ecx, dword [esi + 8]
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, dword [edx + 4]
setle al
xor edx, edx
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, edi
setl dl
cmp edx, 0x24c6
jg 0x1001a427
mov eax, ebx
mov edx, dword [ebp - 0x84]
xor ecx, ecx
cmp eax, dword [edx + 4]
mov eax, dword [ebp - 0x150]
sete cl
mov dword [eax + 8], ecx
test ecx, ecx
je 0x1001a449
mov eax, edi
cmp dword [ebp - 0x14], ebx
jne 0x1001a44b
mov eax, ebx
cmp eax, dword [ebp - 0x24]
jne 0x1001a457
mov ecx, edi
cmp dword [esi + 8], ebx
jne 0x1001a459
mov ecx, ebx
mov eax, dword [ebp - 0x84]
sub ecx, dword [edx + 4]
add ecx, dword [eax]
mov dword [ebp + 8], ecx
mov dword [ebp - 0x10], ebx
jmp 0x1001a4a4
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x1001a4a1
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001a49c
push ebx
push 0x17d0
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
dec dword [ebp - 0x14]
jns 0x1001a478
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff4
jne 0x1001a46c
lea ecx, [ebp - 0x150]
call fcn.100183db
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 2
call fcn.100183db
inc dword [esi + 8]
cmp dword [esi + 8], 0xfffffff5
jl 0x1001a37f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x108]
call fcn.100183db
mov dword [ebp - 0x10], ebx
mov eax, 0xa0e60f95
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x18], 0xe76e5b14
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001a517
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x10], ebx
jmp 0x1001a5ca
push 2
lea ecx, [ebp - 0x1a0]
call fcn.10017bbe
push 2
mov dword [ebp + 8], ebx
pop edx
jmp 0x1001a542
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x50], 0xfffffffc
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x1001a534
mov dword [ebp + 8], ebx
jmp 0x1001a55f
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x1a0]
mov dword [eax + ecx*4], 0xa3735b26
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x1001a54c
push 3
mov dword [ebp - 0x50], ebx
pop ecx
jmp 0x1001a5b7
mov dword [ebp + 8], ebx
jmp 0x1001a57f
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x70], 0x4caf14c9
inc dword [ebp + 8]
cmp dword [ebp + 8], edx
jl 0x1001a571
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x6c], ebx
jl 0x1001a5b4
mov dword [ebp + 8], 0xfd947597
mov dword [ebp + 8], ebx
jmp 0x1001a5a7
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x16c], ebx
jne 0x1001a5ac
inc dword [ebp + 8]
cmp dword [ebp + 8], ecx
jle 0x1001a598
inc dword [ebp - 0x18]
dec dword [ebp - 0x6c]
jns 0x1001a58c
inc dword [ebp - 0x50]
cmp dword [ebp - 0x50], ecx
jle 0x1001a56c
lea ecx, [ebp - 0x1a0]
call fcn.100183db
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jg 0x1001a51f
mov dword [ebp - 0x14], edi
mov dword [ebp + 8], ebx
mov dword [ebp - 0x14], edi
jmp 0x1001a6b5
mov dword [ebp - 0x1c], 0x6ec7
lea ecx, [ebp - 0xb0]
push edi
call fcn.10017bbe
mov dword [ebp + 8], 0xffffffff
mov dword [ebp + 8], ebx
jmp 0x1001a613
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0xb0]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jl 0x1001a600
mov dword [ebp + 8], ebx
jmp 0x1001a62a
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x1e8], ebx
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1001a61d
cmp dword [ebp - 0x14], ebx
jne 0x1001a6c1
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
inc eax
cmp eax, 0x928d9ba5
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 4
setl cl
cmp ecx, dword [ebp - 0x1c]
jge 0x1001a664
mov ecx, edi
cmp dword [ebp - 0x1c], ebx
jne 0x1001a666
mov ecx, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x14]
add ecx, eax
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp + 8], ecx
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xb0]
cmp dword [eax], ecx
lea ecx, [ebp - 0xb0]
setg dl
mov dword [ebp + 8], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e0], 0xc8af9534
call fcn.100183db
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x16
jg 0x1001a5e1
jmp 0x1001a6cc
lea ecx, [ebp - 0xb0]
call fcn.100183db
push dword [ebp + 8]
movdqa xmm0, xmmword [0x100082c0]
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0xf0], ebx
push eax
push ebx
lea ecx, [ebp - 0xf0]
mov dword [ebp - 0xec], ebx
movdqu xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0xe8], ebx
call fcn.100190fa
mov esi, dword [sym.imp.USER32.dll_GetWindowTextA]
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001a729
push 0x12a
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
mov byte [ebp + 0xb], bl
cmp byte [ebp + 0xb], 0
je 0x1001a73d
push 0x38f
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea ecx, [ebp - 0xf0]
call fcn.100183db
mov dword [ebp - 0x10], edi
mov dword [ebp + 8], 0xffffffff
mov dword [ebp + 8], 0xfffffffd
mov dword [ebp + 8], ebx
jmp 0x1001a76f
mov eax, dword [ebp + 8]
mov dword [ebp + eax*4 - 0x194], 0x3c69
inc dword [ebp + 8]
cmp dword [ebp + 8], 4
jl 0x1001a75e
dec dword [ebp - 0x18c]
mov dword [ebp - 0x10], 7
jmp 0x1001a7e4
mov dword [ebp + 8], 0xd0657689
lea ecx, [ebp - 0x12c]
mov dword [ebp + 8], 0xce96f8f9
push 2
call fcn.10017bbe
mov dword [ebp + 8], ebx
jmp 0x1001a7b7
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x12c]
mov dword [eax + ecx*4], 0xfff8
inc dword [ebp + 8]
cmp dword [ebp + 8], 2
jl 0x1001a7a4
mov eax, dword [ebp - 0x190]
xor ecx, ecx
cmp eax, 2
mov eax, dword [ebp - 0x12c]
setle cl
mov dword [ebp + 8], ecx
lea ecx, [ebp - 0x12c]
dec dword [eax]
call fcn.100183db
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 5
jge 0x1001a784
mov eax, dword [ebp - 0x28]
cmp byte [eax], 0
je 0x1001a8cf
mov dword [ebp + 8], 9
lea ecx, [ebp - 0x184]
mov dword [ebp + 8], 0xdba76aab
mov dword [ebp + 8], 0xfe01bd97
push 0xfffffffffffffffc
pop eax
mov dword [ebp + 8], eax
mov dword [ebp + 8], 0xffffffff
mov dword [ebp + 8], eax
mov dword [ebp + 8], 0xa20bd035
mov dword [ebp + 8], 0x4b7834d8
mov dword [ebp + 8], 0x6d6092f6
push 3
call fcn.10017bbe
mov dword [ebp - 4], 4
lea eax, [ebp - 0x1c0]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x10008340]
lea ecx, [ebp - 0x90]
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x90], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], ebx
call fcn.100190fa
mov dword [ebp + 8], ebx
jmp 0x1001a89b
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0x4ce55459
inc dword [ebp + 8]
cmp dword [ebp + 8], 3
jl 0x1001a888
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0x90]
inc dword [eax + 4]
call fcn.100183db
lea ecx, [ebp - 0x184]
call fcn.100183db
push 0x12a
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call esi
mov dword [ebp - 0x24], 0x184c
mov dword [ebp + 8], 2
mov dword [ebp - 0x20], 0x7b1c2a2c
mov dword [ebp - 0x18], 0x950ba1bf
mov dword [ebp - 0x28], 0x49dfcf09
mov dword [ebp - 0x28], 0xfef9d786
push 4
pop eax
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x10], 0x8ab5457d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, 0x60be6286
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp + 8]
neg eax
sbb eax, eax
inc eax
sub eax, dword [ebp + 8]
add eax, 0xc6b7
jne 0x1001a95d
cmp dword [ebp - 0x18], ebx
je 0x1001a95f
mov ebx, edi
inc dword [ebp - 0x10]
xor ecx, ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa4]
add edx, ebx
imul edx, eax
mov eax, dword [ebp - 0x10]
cmp eax, edx
setg cl
mov dword [ebp - 0x18], ecx
jmp 0x1001ad92
push edi
lea ecx, [ebp - 0x114]
call fcn.10017bbe
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x18], 0x8af95342
mov dword [ebp + 8], 0x5ab4d258
mov dword [ebp + 8], ebx
jmp 0x1001a9be
mov ecx, dword [ebp + 8]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0x42eb
inc dword [ebp + 8]
cmp dword [ebp + 8], edi
jl 0x1001a9ab
mov eax, dword [ebp - 0x114]
xor edx, edx
inc dword [eax]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, edi
setge dl
xor ecx, ecx
imul edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov dword [ebp + 8], ebx
call fcn.100183db
mov dword [ebp + 8], 0x81c
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x20], 0x6cd04cd0
mov dword [ebp - 0x18], 0x910a83af
push 2
call fcn.10017bbe
mov dword [ebp - 4], 5
lea ecx, [ebp - 0xe4]
mov dword [ebp - 0x10], ebx
push 3
call fcn.10017bbe
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x14], ebx
jmp 0x1001aa58
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1001aa45
mov dword [ebp - 0x14], ebx
jmp 0x1001aa76
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xe4]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1001aa63
mov ecx, dword [ebp + 8]
xor edx, edx
mov eax, dword [ebp + 8]
cmp ecx, eax
mov eax, dword [ebp + 8]
setl dl
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, edi
setg al
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
add ecx, 0x4cbed562
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
cmp ecx, dword [ebp + 8]
jle 0x1001aac2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xe4]
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x10]
sub esi, eax
cmp esi, dword [ebp + 8]
jle 0x1001aaf0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + 8]
xor ecx, ecx
mov eax, dword [ebp + 8]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xe4]
cmp dword [eax + 8], ebx
mov eax, dword [ebp + 8]
setne cl
xor edx, edx
cmp ecx, 0xa1fd29cc
setne dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x28], ecx
lea ecx, [ebp - 0xe4]
call fcn.100183db
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x120]
call fcn.100183db
mov dword [ebp + 8], 0x7f2fb5a5
lea ecx, [ebp - 0xd8]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], ebx
push 2
call fcn.10017bbe
mov dword [ebp - 4], 6
mov dword [ebp - 0x20], 0x4bbb
mov dword [ebp - 0x18], ebx
jmp 0x1001ab7c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd8]
mov dword [eax + ecx*4], 0xcb0a751f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1001ab69
mov eax, dword [ebp + 8]
cmp eax, dword [ebp + 8]
jge 0x1001ab90
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
cmp dword [ebp + 8], ebx
je 0x1001ace5
push dword [ebp + 8]
movdqa xmm0, xmmword [0x100082a0]
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x1c0]
mov dword [ebp - 0x14], 0xfffd
push eax
mov dword [ebp - 0x18], 0xcd25bb5a
lea ecx, [ebp - 0x5c]
push ebx
movdqu xmmword [ebp - 0x1c0], xmm0
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
call fcn.100190fa
mov dword [ebp - 0x18], edi
xor edx, edx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setl dl
xor eax, eax
add edx, dword [ebp + 8]
mov ecx, dword [ebp + 8]
cmp edx, 0x5818
setl al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp + 8], ecx
jne 0x1001ac1d
mov ecx, edi
cmp dword [ebp + 8], ebx
jne 0x1001ac1f
mov ecx, ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x5c]
mov dword [eax + 0xc], ecx
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5c]
cmp dword [eax], ecx
mov ecx, 0xfffa
setl dl
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setg dl
xor eax, eax
cmp edx, 0x855bbb7
setge al
mov dword [ebp - 0x20], eax
cmp dword [ebp + 8], 0xfff8
mov eax, dword [ebp - 0x20]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setl dl
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp + 8]
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 5
cmp edx, 0xbbe
setge cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x5c]
mov dword [eax + 8], ecx
mov eax, dword [ebp + 8]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setge dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, edi
sbb ecx, ecx
xor eax, eax
inc ecx
add ecx, dword [ebp + 8]
cmp ecx, 0x6e743fd0
setne al
cmp dword [ebp - 0x14], eax
jle 0x1001acd5
cmp dword [ebp - 0x10], ebx
jne 0x1001acd5
mov edi, ebx
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x18], edi
call fcn.100183db
jmp 0x1001ad80
cmp dword [ebp - 0x10], ebx
jne 0x1001acf6
mov eax, dword [ebp - 0xd8]
mov esi, ebx
cmp dword [eax], ebx
je 0x1001acf8
mov esi, edi
mov ecx, dword [ebp + 8]
xor edx, edx
mov eax, dword [ebp - 0xd8]
cmp dword [eax], ecx
mov eax, dword [ebp - 0x20]
setl dl
inc dword [ebp - 0x20]
cmp eax, edx
mov eax, dword [ebp + 8]
cmove edi, ebx
xor ecx, ecx
cmp esi, eax
setl cl
xor edx, edx
cmp ecx, edi
setge dl
xor eax, eax
cmp edx, 0x7dc510ce
setne al
cmp dword [ebp - 0x10], eax
mov byte [ebp + 0xb], bl
jg 0x1001ad46
cmp byte [ebp + 0xb], 0
je 0x1001ad80
push ebx
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
jmp 0x1001ad80
cmp byte [ebp + 0xb], 0
je 0x1001ad80
push 0x16cd
push ebx
push 0x26be
push 0x108
push 0x12ed
push ebx
push 0x79f
push 0x172b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
lea ecx, [ebp - 0xd8]
call fcn.100183db
mov ecx, dword [ebp - 0x24]
mov eax, dword [ecx]
mov dword [eax], ebx
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret