Function at 0x100d6b3b
Capabilities:
Compare security identifiers

Disassembly:
mov eax, 0x10149d3c
call fcn.1013e250
sub esp, 0xe8
push ebx
push esi
mov dword [ebp - 0x30], 0x5e3edfa8
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x2c], 0x391cb4e7
push edi
mov dword [ebp - 0x20], 0x5a9864ba
mov dword [ebp - 0x10], 0xade0980d
mov dword [ebp - 0x1c], 0x5c1d1022
push 2
call fcn.10013ee8
xor ebx, ebx
lea ecx, [ebp - 0x7c]
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], 0xca3691f6
mov dword [ebp - 0x28], 0x32e26595
push 1
call fcn.10013ee8
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], 0xcd85
mov dword [ebp - 0x18], ebx
jmp 0x100d6bb8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0xaf72b572
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100d6ba8
mov dword [ebp - 0x18], ebx
jmp 0x100d6bd0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100d6bc3
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d6c2b
push 0x7d0
push 0x1a45
push 0x1f12
push ebx
push 0x144f
push 0xe65
call edi
push eax
call esi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
mov edx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x10]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
lea eax, [ecx + 1]
cmp eax, 1
ja 0x100d6c4f
test ecx, ecx
jne 0x100d6c4f
mov eax, ebx
jmp 0x100d6c52
xor eax, eax
inc eax
mov ecx, dword [ebp - 0x28]
imul ecx, eax
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x28]
cmp ecx, eax
jge 0x100d6c67
xor ecx, ecx
inc ecx
jmp 0x100d6c69
mov ecx, ebx
xor eax, eax
cmp ecx, 0x3b91
setg al
xor ecx, ecx
inc ecx
cmp eax, ecx
jbe 0x100d6c83
cmp dword [ebp - 0x10], ebx
je 0x100d6c83
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x7c]
push 4
cmp dword [eax], ebx
je 0x100d6dde
mov dword [ebp - 0x18], 0xce724d25
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x15
pop ebx
je 0x100d6dd3
mov dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x90]
push ebx
call fcn.10013ee8
mov byte [ebp - 4], 2
mov dword [ebp - 0x20], 0
jmp 0x100d6cdb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x90]
mov dword [eax + ecx*4], 0x7874d2d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100d6cc8
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x20], 0x1c
jne 0x100d6dab
mov esi, dword [ebp - 0x90]
mov dword [ebp - 0x30], esi
push 3
lea ecx, [ebp - 0xa8]
call fcn.10013ee8
xor edx, edx
mov dword [ebp - 0x24], edx
jmp 0x100d6d21
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa8]
mov dword [eax + ecx*4], 0xeb613644
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x100d6d0e
cmp dword [ebp - 0x18], edx
jne 0x100d6d35
cmp dword [esi + 8], edx
jne 0x100d6d35
mov ebx, edx
jmp 0x100d6d38
xor ebx, ebx
inc ebx
mov esi, dword [esi + 8]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edi, dword [ebp - 0xa8]
sub esi, dword [edi + 8]
cmp ecx, eax
setl dl
sub esi, edx
sub esi, ebx
sub esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
sub esi, 9
neg esi
sbb esi, esi
xor ecx, ecx
neg esi
cmp eax, esi
mov esi, dword [ebp - 0x30]
setg cl
sub ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
sub edx, ecx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, dword [esi + 8]
lea ecx, [ebp - 0xa8]
setle al
mov dword [edi + 8], eax
call fcn.100144eb
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1c
je 0x100d6cfa
push 4
pop ebx
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 1
call fcn.100144eb
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x15
jne 0x100d6ca8
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
jmp 0x100d6e7d
mov dword [ebp - 0x20], 0xfd11e6ac
mov eax, 0x9fb0e7fb
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
pop ebx
jl 0x100d6e48
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x10]
push 2
pop ecx
sub ecx, eax
jne 0x100d6e2e
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], ebx
xor ecx, ecx
mov eax, dword [ebp - 0x24]
inc ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x24]
jns 0x100d6e0b
imul eax, dword [ebp - 0x20], 0xc6b9
test eax, eax
je 0x100d6e6b
cmp dword [edx + 4], 0
jne 0x100d6e67
cmp dword [ebp - 0x24], 0
jne 0x100d6e67
mov eax, dword [ebp - 0x70]
cmp dword [eax], 0
je 0x100d6e6b
mov edx, ecx
jmp 0x100d6e6d
xor edx, edx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x7c]
call fcn.100144eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x70]
call fcn.100144eb
xor ecx, ecx
call fcn.100d68d4
test al, al
je 0x100d75fa
mov dword [ebp - 0x18], 0xfffffff6
xor ecx, ecx
mov dword [ebp - 0x1c], 0xfffffffa
inc ecx
mov dword [ebp - 0x28], 0x5cc7
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x2c], 0xdc4b
mov dword [ebp - 0x10], edx
jmp 0x100d6ed7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x40], 0x8bbca631
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d6ec9
mov dword [ebp - 0x18], edx
jmp 0x100d7015
mov dword [ebp - 0x20], 0x94ff5452
mov dword [ebp - 0x24], 0x3799040c
mov dword [ebp - 0x1c], 0xde90
mov dword [ebp - 0x10], edx
jmp 0x100d6f10
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf4], 0xfffffff8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x100d6eff
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jge 0x100d6f3e
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, 1
setge cl
neg ecx
je 0x100d6f69
cmp dword [ebp - 0x1c], edx
je 0x100d6f69
xor ecx, ecx
inc ecx
jmp 0x100d6f6b
mov ecx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp + eax*4 - 0x40]
je 0x100d6f81
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x40], edx
jne 0x100d6f81
mov ecx, edx
jmp 0x100d6f84
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 0xd3ed
setge al
cmp eax, 0x5ad058bb
jle 0x100d6f9d
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x24], 0xfe64
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov dword [ebp - 0x1c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
inc ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x28]
jne 0x100d6fe4
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d700f
push edx
push 0x1a9b
push edx
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
xor ecx, ecx
inc ecx
jmp 0x100d700f
mov dword [ebp - 0x24], edx
jmp 0x100d700a
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d6ffe
push edx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
xor ecx, ecx
xor edx, edx
inc ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xec], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x100d6fe9
inc dword [ebp - 0x18]
push 0
pop edx
cmp dword [ebp - 0x18], ecx
jle 0x100d6ee5
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x209f
setl cl
mov dword [ebp - 0x18], ecx
xor cl, cl
call fcn.100bd738
test al, al
je 0x100d712d
mov dword [ebp - 0x10], 3
mov dword [ebp - 0x1c], 0x19ac196a
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x30], 0xfffffff9
mov byte [ebp - 0x11], 0
cmp byte [ebp - 0x11], 0
je 0x100d70ab
push 0x7d0
push 0x1a45
push 0x1f12
push 0
push 0x144f
push 0xe65
call edi
push eax
call esi
push eax
push 0x370
push 0xdd2
push 0x26f7
push 0x1da5
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
xor edx, edx
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
xor eax, eax
add edx, dword [ebp - 0x10]
cmp edx, 0x4ad744d0
setl al
xor ecx, ecx
cmp eax, 0xb9a7
mov eax, dword [ebp - 0x1c]
setne cl
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x30], ecx
call fcn.1003d97f
push 0
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], 3
push eax
push ebx
lea eax, [ebp - 0x58]
push eax
push 0
call fcn.100d5716
mov eax, dword [ebp - 0x54]
add esp, 0x14
test eax, eax
je 0x100d712d
push fcn.100d5716
call eax
push 2
lea ecx, [ebp - 0x9c]
call fcn.10013ee8
mov dword [ebp - 0x10], 7
xor edx, edx
mov dword [ebp - 0x2c], 0x2c40a98c
mov dword [ebp - 0x10], edx
jmp 0x100d715e
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x9c]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d714f
mov eax, dword [ebp - 0x9c]
mov dword [eax], edx
mov dword [ebp - 0x10], 0x18
jmp 0x100d719d
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d7187
push edx
call dword [sym.imp.USER32.dll_SetCursor]
xor edx, edx
mov byte [ebp - 0x11], dl
cmp byte [ebp - 0x11], 0
je 0x100d719a
push edx
push edx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
xor edx, edx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0x1d
jg 0x100d7175
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c]
call fcn.100144eb
xor ecx, ecx
xor dl, dl
inc ecx
call fcn.100995a6
test al, al
je 0x100d7291
xor ecx, ecx
inc ecx
call fcn.100b1cce
push 3
pop ecx
push 0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x5c], ecx
push eax
push ecx
lea eax, [ebp - 0x5c]
push eax
push 0
call fcn.100d5716
mov eax, dword [ebp - 0x64]
add esp, 0x14
test eax, eax
je 0x100d71f5
push fcn.100d5716
call eax
mov dword [ebp - 0x18], 0xd4e793
mov dword [ebp - 0x10], 0
jmp 0x100d7216
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x84], 0x102071b1
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100d7205
mov dword [ebp - 0x18], 0
jmp 0x100d7289
mov dword [ebp - 0x1c], 0x9be5411a
mov dword [ebp - 0x10], 0
jmp 0x100d7242
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe8], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x100d7235
mov eax, dword [ebp - 0x18]
sub eax, ebx
imul eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18]
jne 0x100d7258
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, 0x859495e0
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
mov dword [ebp + eax*4 - 0x84], edx
inc dword [ebp - 0x18]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x18], ecx
jle 0x100d7225
xor dl, dl
mov ecx, ebx
call fcn.100995a6
test al, al
je 0x100d72d2
mov ecx, ebx
call fcn.100b1cce
xor ebx, ebx
mov dword [ebp - 0x50], 3
push ebx
lea eax, [ebp - 0x60]
push eax
push 5
lea eax, [ebp - 0x50]
push eax
push ebx
call fcn.100d5716
mov eax, dword [ebp - 0x60]
add esp, 0x14
test eax, eax
je 0x100d72d4
push fcn.100d5716
call eax
jmp 0x100d72d4
xor ebx, ebx
mov dword [ebp - 0x10], 0xb743d837
mov eax, 0x643b8a2
mov dword [ebp - 0x1c], 0xfa147b80
xor ecx, ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x1c], 0xfbe58499
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xb8], 0x6088
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
sub eax, 0x279c
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
sets cl
mov dword [ebp - 0x1c], ecx
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setg dl
sub dword [ebp - 0x10], edx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d7357
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_SaveDC]
push 7
xor dl, dl
pop ecx
call fcn.100995a6
test al, al
je 0x100d75fa
mov dword [ebp - 0x1c], 0x192fe2cc
mov dword [ebp - 0x18], ebx
jmp 0x100d7383
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x38], 0xfffffff7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100d7375
xor ecx, ecx
mov dword [ebp - 0x18], ebx
inc ecx
jmp 0x100d739f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0x3a50eb6b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x100d7391
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], ebx
je 0x100d7451
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 2
mov dword [ebp - 0x2c], 0xfffffffd
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x10]
jl 0x100d73ec
cmp dword [ebp - 0x10], ebx
je 0x100d73ec
xor ecx, ecx
inc ecx
jmp 0x100d73ee
mov ecx, ebx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x10]
push 0xfffffffffffffffe
pop esi
cmp esi, ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setl dl
imul edx, dword [ebp - 0x1c]
cmp edx, 1
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x10]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, esi
mov ecx, dword [ebp - 0x10]
setge al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
add edx, eax
mov eax, dword [ebp - 0x38]
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
jmp 0x100d7536
mov dword [ebp - 0x28], 5
mov eax, 0x505d01cd
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xbe2ff5ff
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x7a2e255b
mov dword [ebp - 0x2c], 0xa5c1b09c
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 0xfbdedbec
mov dword [ebp - 0x2c], 9
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x28], ebx
jmp 0x100d752d
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xd4]
push 2
call fcn.10013ee8
push 2
mov dword [ebp - 0x10], ebx
pop edx
jmp 0x100d74d5
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xd4]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100d74c5
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x24], ebx
jl 0x100d7519
mov dword [ebp - 0x20], 0x638299fa
mov dword [ebp - 0x20], ebx
jmp 0x100d750f
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x10], ebx
jmp 0x100d7507
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x100d74f9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x100d74f1
dec dword [ebp - 0x24]
jns 0x100d74e5
dec dword [ebp - 0x1c]
lea ecx, [ebp - 0xd4]
call fcn.100144eb
inc dword [ebp - 0x28]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x28], ecx
jle 0x100d74ad
mov eax, dword [ebp - 0x38]
push 7
mov dword [ebp - 0x38], eax
pop ecx
mov dword [ebp - 0x44], eax
call fcn.100b1cce
push ebx
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x48], 3
push eax
push 6
lea eax, [ebp - 0x48]
push eax
push ebx
call fcn.100d5716
mov eax, dword [ebp - 0x4c]
add esp, 0x14
test eax, eax
je 0x100d7570
push fcn.100d5716
call eax
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x10], 0x644accb2
mov dword [ebp - 0x28], 0x459eeda5
mov dword [ebp - 0x1c], 0xca70051e
mov dword [ebp - 0x2c], 0x926128f3
mov dword [ebp - 0x30], 0xa928f0bd
mov dword [ebp - 0x30], 0x29efec1a
cmp dword [ebp - 0x20], ebx
je 0x100d75d4
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x10]
sub eax, 0x3a3dbc56
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x10]
je 0x100d75cb
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c], ebx
jne 0x100d75dc
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x100d75fa
push 1
push 0x85d
push 0x23a3
call edi
push eax
call dword [sym.imp.USER32.dll_SetDlgItemInt]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret