Function at 0x10009364
Capabilities:
Get thread local storage value
Query environment variable
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfa4
push esi
push edi
mov dword [ebp - 0x340], 0x6432a276
mov dword [ebp - 0xe0], 0x795010f7
mov dword [ebp - 0x97c], 0
mov dword [ebp - 0xcb0], 0xffffffff
mov dword [ebp - 0xe04], 0xfffffff9
mov dword [ebp - 0xd48], 0x333f0d22
mov dword [ebp - 0x7b0], 0x830af36e
mov eax, dword [ebp - 0x340]
add eax, 0x2526041
mov dword [ebp - 0xe0], eax
je 0x1000940d
mov dword [ebp - 0xe0], 0
jmp 0x100093e1
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x14
jg 0x10009408
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x10009406
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x100093d4
jmp 0x100096de
mov dword [ebp - 0x98c], 0xffffffff
mov dword [ebp - 0x334], 0xda2282d5
mov dword [ebp - 0x324], 0
jmp 0x1000943a
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 3
jge 0x10009456
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0xfa4], 0x2dc71837
jmp 0x1000942d
mov dword [ebp - 0x334], 1
cmp dword [ebp - 0x334], 0xc7b7f609
jbe 0x10009511
cmp dword [ebp - 0x334], 0x7b30498d
jl 0x10009488
mov dword [ebp - 0x664], 1
jmp 0x1000948f
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x98c]
cmp dword [ebp - 0x664], eax
jne 0x100094a9
mov dword [ebp - 0x9dc], 1
jmp 0x100094b0
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xe50], eax
mov eax, 0x8cd3bed1
cmp eax, 0x4ce34aaf
jne 0x100094d4
mov dword [ebp - 0x974], 1
jmp 0x100094db
and dword [ebp - 0x974], 0
cmp dword [ebp - 0x974], 0xf0a0cd95
je 0x100094f3
mov dword [ebp - 0x984], 1
jmp 0x100094fa
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x97c]
cmp dword [ebp - 0x984], eax
jne 0x10009511
and dword [ebp - 0x994], 0
jmp 0x1000951b
mov dword [ebp - 0x994], 1
mov eax, dword [ebp - 0x98c]
imul eax, dword [ebp - 0x994]
cmp eax, dword [ebp - 0xe0]
jl 0x100096b0
mov dword [ebp - 0x3c8], 0xffffffff
mov dword [ebp - 0x7a0], 0xffffffff
mov dword [ebp - 0xa64], 0xfffffffd
mov dword [ebp - 0x32c], 0
jmp 0x1000956b
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 3
jge 0x10009587
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0xe70], 0
jmp 0x1000955e
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x7b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp + eax - 0xe70], ecx
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x7b8], eax
jne 0x100095c0
mov dword [ebp - 0x3fc], 1
jmp 0x100095c7
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x3fc], eax
jne 0x100095e1
mov dword [ebp - 0x798], 1
jmp 0x100095e8
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
dec eax
dec eax
imul eax, eax, 0xfcb6
test eax, eax
jae 0x1000960f
cmp dword [ebp - 0xa64], 0
je 0x1000960f
mov dword [ebp - 0x404], 1
jmp 0x10009616
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x334]
cmp eax, dword [ebp - 0x404]
jne 0x10009630
mov dword [ebp - 0x40c], 1
jmp 0x10009637
and dword [ebp - 0x40c], 0
mov dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
add eax, dword [ebp - 0x40c]
cmp eax, 1
jb 0x1000965e
mov dword [ebp - 0x7a8], 1
jmp 0x10009665
and dword [ebp - 0x7a8], 0
cmp dword [ebp - 0x7a8], 1
jne 0x1000967a
mov dword [ebp - 0x414], 1
jmp 0x10009681
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x414]
jg 0x1000969b
mov dword [ebp - 0xa6c], 1
jmp 0x100096a2
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xe0], eax
jmp 0x100096d1
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x100096d1
push 0
push 0x8ca
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov eax, dword [ebp - 0x7b0]
dec eax
mov dword [ebp - 0x7b0], eax
mov dword [ebp - 0x3d0], 0x6432a276
mov dword [ebp - 0xc8], 0x795010f7
mov dword [ebp - 0x424], 0
mov dword [ebp - 0xd50], 0xffffffff
mov dword [ebp - 0xdac], 0xfffffff9
mov dword [ebp - 0xd60], 0x333f0d22
mov dword [ebp - 0x454], 0x830af36e
mov eax, dword [ebp - 0x3d0]
add eax, 0x2526041
mov dword [ebp - 0xc8], eax
je 0x1000977c
mov dword [ebp - 0xc8], 0
jmp 0x10009750
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x14
jg 0x10009777
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x10009775
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x10009743
jmp 0x10009a4d
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x1fc], 0xda2282d5
mov dword [ebp - 0x33c], 0
jmp 0x100097a9
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 3
jge 0x100097c5
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xf8c], 0x2dc71837
jmp 0x1000979c
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0xc7b7f609
jbe 0x10009880
cmp dword [ebp - 0x1fc], 0x7b30498d
jl 0x100097f7
mov dword [ebp - 0x41c], 1
jmp 0x100097fe
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x41c], eax
jne 0x10009818
mov dword [ebp - 0xab8], 1
jmp 0x1000981f
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xdb0], eax
mov eax, 0x8cd3bed1
cmp eax, 0x4ce34aaf
jne 0x10009843
mov dword [ebp - 0x7c4], 1
jmp 0x1000984a
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 0xf0a0cd95
je 0x10009862
mov dword [ebp - 0x7cc], 1
jmp 0x10009869
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x7cc], eax
jne 0x10009880
and dword [ebp - 0x7d4], 0
jmp 0x1000988a
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x42c]
imul eax, dword [ebp - 0x7d4]
cmp eax, dword [ebp - 0xc8]
jl 0x10009a1f
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0x444], 0xffffffff
mov dword [ebp - 0xac0], 0xfffffffd
mov dword [ebp - 0x2e0], 0
jmp 0x100098da
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x100098f6
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0xe88], 0
jmp 0x100098cd
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x434], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0xe88], ecx
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x434], eax
jne 0x1000992f
mov dword [ebp - 0x7dc], 1
jmp 0x10009936
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x7dc], eax
jne 0x10009950
mov dword [ebp - 0x43c], 1
jmp 0x10009957
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
dec eax
dec eax
imul eax, eax, 0xfcb6
test eax, eax
jae 0x1000997e
cmp dword [ebp - 0xac0], 0
je 0x1000997e
mov dword [ebp - 0x7e4], 1
jmp 0x10009985
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x7e4]
jne 0x1000999f
mov dword [ebp - 0x7ec], 1
jmp 0x100099a6
and dword [ebp - 0x7ec], 0
mov dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
add eax, dword [ebp - 0x7ec]
cmp eax, 1
jb 0x100099cd
mov dword [ebp - 0x44c], 1
jmp 0x100099d4
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 1
jne 0x100099e9
mov dword [ebp - 0x7f4], 1
jmp 0x100099f0
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x7f4]
jg 0x10009a0a
mov dword [ebp - 0xac8], 1
jmp 0x10009a11
and dword [ebp - 0xac8], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0xc8], eax
jmp 0x10009a40
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10009a40
push 0
push 0x8ca
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov eax, dword [ebp - 0x454]
dec eax
mov dword [ebp - 0x454], eax
mov dword [ebp - 0xb4], 0xa2fa
mov dword [ebp - 0x3bc], 0x20b28787
mov dword [ebp - 0x48], 0
jmp 0x10009a71
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10009a87
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x81c], 5
jmp 0x10009a6a
mov dword [ebp - 0x48], 0
jmp 0x10009a97
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10009aad
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xd84], 0
jmp 0x10009a90
cmp dword [ebp - 0xb4], 0xb8b78acc
jne 0x10009ac5
mov dword [ebp - 0x7fc], 1
jmp 0x10009acc
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
sub eax, dword [ebp - 0xb4]
cmp dword [ebp - 0xb4], eax
jg 0x10009aec
mov dword [ebp - 0x45c], 1
jmp 0x10009af3
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0xb4]
je 0x10009b1a
cmp dword [ebp - 0xb4], 0
jne 0x10009b1a
and dword [ebp - 0x804], 0
jmp 0x10009b24
mov dword [ebp - 0x804], 1
cmp dword [ebp - 0x804], 0xd430
jl 0x10009b3c
mov dword [ebp - 0x464], 1
jmp 0x10009b43
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x464]
je 0x10009b5d
mov dword [ebp - 0x46c], 1
jmp 0x10009b64
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x80c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x80c]
mov dword [ebp + eax - 0xd84], ecx
mov eax, dword [ebp - 0x80c]
cmp eax, dword [ebp - 0x46c]
jle 0x10009b9d
mov dword [ebp - 0x814], 1
jmp 0x10009ba4
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x814], eax
jl 0x10009bbe
mov dword [ebp - 0x474], 1
jmp 0x10009bc5
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x81c], 0xf89b5461
mov eax, dword [ebp - 0x474]
sub eax, 0x764ab9f
mov dword [ebp - 0x3bc], eax
je 0x10009c11
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x81c], 0
je 0x10009c11
mov dword [ebp - 0xad0], 0x2da3c3d
mov eax, dword [ebp - 0xad0]
mov dword [ebp - 0x3bc], eax
jmp 0x10009c39
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x10009c39
push 0
push 0
push 0xa15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0xad8], 0x46158d32
mov dword [ebp - 0x294], 0
jmp 0x10009c5c
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x10009c78
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xea0], 0xf2ee
jmp 0x10009c4f
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x10009c90
call dword [sym.imp.USER32.dll_GetMessageTime]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xea0]
mov dword [ebp - 0xad8], eax
mov dword [ebp - 0x354], 0x6432a276
mov dword [ebp - 0xae0], 0x6da5043c
mov dword [ebp - 0x204], 0
jmp 0x10009cd0
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x10009cec
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xbf8], 0x64a6847d
jmp 0x10009cc3
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x10009d10
push 0xb40
push 0x1e0a
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xbf8], 0
jmp 0x10009d3e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbf8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbf8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbf8], 0x16
je 0x10009d5a
mov dword [ebp - 0xae0], 0
jmp 0x10009d23
mov dword [ebp - 0xd8], 0x795010f7
mov dword [ebp - 0x1d0], 0x52cb1363
mov dword [ebp - 0x82c], 0xfffffffe
mov dword [ebp - 0xb68], 0xd44f4cc5
mov dword [ebp - 0x29c], 0
jmp 0x10009d9b
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x10009db7
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0xc00], 0x342e
jmp 0x10009d8e
mov dword [ebp - 0x1d0], 0
jmp 0x10009dd0
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jg 0x10009f9d
mov dword [ebp - 0x150], 0
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x10009e08
push 0x1f41
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp + eax*4 - 0xc00], 0
je 0x10009e1d
jmp 0x10009f9d
mov dword [ebp - 0x150], 0
jmp 0x10009e36
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jg 0x10009f98
mov dword [ebp - 0x1b4], 0xfffffff8
mov dword [ebp - 0x1b4], 1
jmp 0x10009e66
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x10009f03
mov dword [ebp - 0x1f0], 0x6a205b29
mov dword [ebp - 0x20c], 0
jmp 0x10009e96
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 4
jge 0x10009eb2
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xf58], 0xffffffff
jmp 0x10009e89
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf58]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1f0], 1
jmp 0x10009ede
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
jl 0x10009efe
mov dword [ebp - 0xae8], 0xfff7
cmp dword [ebp - 0xae8], 0
je 0x10009efc
jmp 0x10009efe
jmp 0x10009ed1
jmp 0x10009e59
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x1b4], eax
jle 0x10009f1d
mov dword [ebp - 0x47c], 1
jmp 0x10009f24
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x47c]
lea eax, [ecx + eax + 1]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xc00]
cmp eax, dword [ebp - 0x82c]
je 0x10009f55
mov dword [ebp - 0x824], 1
jmp 0x10009f5c
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
dec eax
dec eax
jne 0x10009f73
xor eax, eax
jne 0x10009f73
and dword [ebp - 0x484], 0
jmp 0x10009f7d
mov dword [ebp - 0x484], 1
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x82c], eax
mov dword [ebp - 0xb68], 4
jmp 0x10009e29
jmp 0x10009dc3
mov dword [ebp - 0x544], 0
mov dword [ebp - 0xd70], 0xffffffff
mov dword [ebp - 0x20], 0xd035
mov dword [ebp - 0x394], 0xfffffff9
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x21c], 0xfffffff9
mov dword [ebp - 0x85c], 0xa540
mov dword [ebp - 0xc18], 1
mov dword [ebp - 0xc14], 1
mov dword [ebp - 0xc10], 1
mov dword [ebp - 0xc0c], 1
mov dword [ebp - 0x2a4], 0
jmp 0x1000a01e
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jge 0x1000a03a
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x2ac], 0x4aee
jmp 0x1000a011
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xdb8], eax
cmp dword [ebp - 0x20], 0xec4f
jne 0x1000a058
mov dword [ebp - 0x48c], 1
jmp 0x1000a05f
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x394]
imul eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], eax
jg 0x1000a08c
mov dword [ebp - 0x834], 1
jmp 0x1000a093
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x834], eax
jge 0x1000a0aa
mov dword [ebp - 0x494], 1
jmp 0x1000a0b1
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x494]
jne 0x1000a0c8
mov dword [ebp - 0x83c], 1
jmp 0x1000a0cf
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
sub eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
imul eax, eax, 0x62d
cmp eax, dword [ebp - 0x20]
jle 0x1000a0f3
mov dword [ebp - 0x49c], 1
jmp 0x1000a0fa
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x21c], eax
je 0x1000a3b4
mov dword [ebp - 0xb24], 1
mov dword [ebp - 0x214], 0
jmp 0x1000a130
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x1000a14c
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x1dc], 1
jmp 0x1000a123
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
mov dword [ebp - 0xcd4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
mov dword [ebp - 0xcdc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1dc]
cmp eax, 0x3758185f
jle 0x1000a19f
mov dword [ebp - 0x844], 1
jmp 0x1000a1a6
and dword [ebp - 0x844], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x844], eax
je 0x1000a1c7
mov dword [ebp - 0x4a4], 1
jmp 0x1000a1ce
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x4a4], eax
jge 0x1000a1ef
mov dword [ebp - 0x84c], 1
jmp 0x1000a1f6
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x84c], eax
jl 0x1000a210
mov dword [ebp - 0xb64], 1
jmp 0x1000a217
and dword [ebp - 0xb64], 0
mov dword [ebp - 0x24], 0x29efec1a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp dword [ebp - 0x24], eax
jg 0x1000a23c
mov dword [ebp - 0x4ac], 1
jmp 0x1000a243
and dword [ebp - 0x4ac], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4ac]
sub ecx, dword [ebp + eax - 0x1dc]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x1dc]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x2ac]
jne 0x1000a27e
mov dword [ebp - 0x854], 1
jmp 0x1000a285
and dword [ebp - 0x854], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1dc]
cmp eax, dword [ebp - 0x854]
jge 0x1000a2a6
mov dword [ebp - 0xa5c], 1
jmp 0x1000a2ad
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x24], eax
je 0x1000a2cc
mov eax, 0x5ce
test eax, eax
jne 0x1000a2cc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xc18], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xce4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1dc], 1
jne 0x1000a302
mov dword [ebp - 0x4b4], 1
jmp 0x1000a309
and dword [ebp - 0x4b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x4b4], eax
jl 0x1000a325
cmp dword [ebp - 0x394], 0
mov dword [ebp - 0x21c], 0xffffffff
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x21c], eax
je 0x1000a349
mov dword [ebp - 0x9e8], 1
jmp 0x1000a350
and dword [ebp - 0x9e8], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xc18]
cmp dword [ebp + eax - 0x1dc], ecx
jle 0x1000a378
mov dword [ebp - 0x4bc], 1
jmp 0x1000a37f
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0
jb 0x1000a394
mov dword [ebp - 0x864], 1
jmp 0x1000a39b
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x864]
mov dword [ebp - 0xb24], eax
jmp 0x1000a43a
mov dword [ebp - 0x9f0], 0xfffffffa
mov dword [ebp - 0x24], 0
jmp 0x1000a3ce
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1000a430
mov byte [ebp - 0x110], 0
movzx eax, byte [ebp - 0x110]
test eax, eax
je 0x1000a3fc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov byte [ebp - 0xf4], 0
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x1000a42e
push 0
push 0x243d
push 0x1fad
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x1000a3c7
mov dword [ebp - 0x9f0], 0xcb0a751
mov dword [ebp - 0xcec], 0xfffffff9
mov dword [ebp - 0xcf4], 0x333f0d22
mov dword [ebp - 0x1c8], 5
mov dword [ebp - 0x9c], 0x814b11f3
mov dword [ebp - 0x50], 0xd71b36c9
mov dword [ebp - 0x9d8], 0x2633933b
mov dword [ebp - 0x9d4], 0x2633933b
mov dword [ebp - 0x9d0], 0x2633933b
mov dword [ebp - 0x9cc], 0x2633933b
mov dword [ebp - 8], 0
jmp 0x1000a4a1
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x1000a4b7
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x174], 0xa18e418a
jmp 0x1000a49a
mov dword [ebp - 8], 0
jmp 0x1000a4c7
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x1000a4dd
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xb88], 0xae07ea4c
jmp 0x1000a4c0
mov dword [ebp - 8], 0
jmp 0x1000a4ed
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x1000a503
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0xa78], 0x699ff93f
jmp 0x1000a4e6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0
jne 0x1000a52c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0
jne 0x1000a52c
and dword [ebp - 0x4c4], 0
jmp 0x1000a536
mov dword [ebp - 0x4c4], 1
cmp dword [ebp - 0x4c4], 9
jge 0x1000a561
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
sub eax, 0xfff8
mov dword [ebp - 0x1c8], eax
xor eax, eax
inc eax
cmp eax, 0x79041289
ja 0x1000a57a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0
jne 0x1000a57a
and dword [ebp - 0x86c], 0
jmp 0x1000a584
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0x86c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x4cc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp + eax - 0xb88], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x4cc], eax
je 0x1000a5d0
mov dword [ebp - 0x874], 1
jmp 0x1000a5d7
and dword [ebp - 0x874], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x874], eax
jg 0x1000a5f8
mov dword [ebp - 0xac4], 1
jmp 0x1000a5ff
and dword [ebp - 0xac4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
mov dword [ebp - 0xcfc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb88]
cmp dword [ebp + eax - 0x174], ecx
jne 0x1000a63a
mov dword [ebp - 0x4d4], 1
jmp 0x1000a641
and dword [ebp - 0x4d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x4d4], eax
jle 0x1000a662
mov dword [ebp - 0x87c], 1
jmp 0x1000a669
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 0xffff
jne 0x1000a681
mov dword [ebp - 0x4dc], 1
jmp 0x1000a688
and dword [ebp - 0x4dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x4dc], eax
je 0x1000a6a9
mov dword [ebp - 0x884], 1
jmp 0x1000a6b0
and dword [ebp - 0x884], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
add eax, dword [ebp - 0x884]
cmp eax, 0xfffffffa
je 0x1000a6d4
mov dword [ebp - 0x4e4], 1
jmp 0x1000a6db
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x23c5ad05
je 0x1000a6f3
mov dword [ebp - 0x88c], 1
jmp 0x1000a6fa
and dword [ebp - 0x88c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
add eax, dword [ebp - 0x88c]
cmp eax, 0x23d37f4a
jl 0x1000a720
mov dword [ebp - 0x4ec], 1
jmp 0x1000a727
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp dword [ebp - 0x4ec], eax
jne 0x1000a748
mov dword [ebp - 0x34c], 1
jmp 0x1000a74f
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x174], ecx
cmp dword [ebp - 0x34c], 0
jne 0x1000a784
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0
jne 0x1000a784
and dword [ebp - 0x894], 0
jmp 0x1000a78e
mov dword [ebp - 0x894], 1
mov eax, dword [ebp - 0x894]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4f4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4f4]
mov dword [ebp + eax - 0x9d8], ecx
cmp dword [ebp - 0x4f4], 0x9690b281
jb 0x1000a7cb
mov dword [ebp - 0x89c], 1
jmp 0x1000a7d2
and dword [ebp - 0x89c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x89c]
mov dword [ebp + eax - 0xa78], ecx
mov dword [ebp - 0x1c8], 0
jmp 0x1000a7fe
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xffffffee
jne 0x1000ab95
mov dword [ebp - 0x224], 0x7e1efc39
mov dword [ebp - 0xb44], 0x693cdb7c
mov dword [ebp - 0x2b4], 0
jmp 0x1000a838
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 3
jge 0x1000a854
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0xaf8], 0x9cc1
jmp 0x1000a82b
mov dword [ebp - 0x9c], 1
jmp 0x1000a86d
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1000a99c
mov dword [ebp - 0x4fc], 0xd215cd4d
mov dword [ebp - 0x50], 0
jmp 0x1000a894
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jg 0x1000a965
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x170]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x4fc]
add eax, 3
cmp eax, dword [ebp - 0x9c]
jne 0x1000a8cb
mov dword [ebp - 0x8a4], 1
jmp 0x1000a8d2
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x8a4], eax
je 0x1000a907
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf8], 0
jne 0x1000a907
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf8], 0
jne 0x1000a907
and dword [ebp - 0x3c0], 0
jmp 0x1000a911
mov dword [ebp - 0x3c0], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp + eax - 0x9d8], ecx
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x9c]
cmp dword [ebp + ecx*4 - 0xb88], eax
je 0x1000a948
mov dword [ebp - 0x504], 1
jmp 0x1000a94f
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
sub eax, 0x3eb8e3d6
mov dword [ebp - 0x224], eax
jmp 0x1000a88d
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1000a997
push 0
push 0x486
push 0xe9e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x1000a860
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf8], 0
je 0x1000aa37
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d8]
mov dword [ebp - 0xd0c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xaf8]
mov dword [ebp - 0x9f8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9f8]
mov dword [ebp + eax - 0x174], ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xd14], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb88]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xd24], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xa78]
cmp dword [ebp + eax - 0x174], ecx
je 0x1000aa37
mov dword [ebp - 0x8ac], 1
jmp 0x1000aa3e
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
sub eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xb44]
jl 0x1000aa5e
mov dword [ebp - 0x50c], 1
jmp 0x1000aa65
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp dword [ebp - 0x50c], eax
jl 0x1000aa86
mov dword [ebp - 0x8b4], 1
jmp 0x1000aa8d
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x8b4], eax
jg 0x1000aaa7
mov dword [ebp - 0x514], 1
jmp 0x1000aaae
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb88]
cmp dword [ebp - 0x514], eax
jle 0x1000aace
mov dword [ebp - 0x8bc], 1
jmp 0x1000aad5
and dword [ebp - 0x8bc], 0
cmp dword [ebp - 0x8bc], 0x22e3
je 0x1000aaed
mov dword [ebp - 0xa00], 1
jmp 0x1000aaf4
and dword [ebp - 0xa00], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d8]
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0xd34], eax
mov eax, 0x9e6d
cmp eax, 7
jge 0x1000ab28
mov dword [ebp - 0x51c], 1
jmp 0x1000ab2f
and dword [ebp - 0x51c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d8]
cmp dword [ebp - 0x51c], eax
jge 0x1000ab50
mov dword [ebp - 0x8c4], 1
jmp 0x1000ab57
and dword [ebp - 0x8c4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xaf8]
cmp dword [ebp - 0x8c4], eax
jle 0x1000ab77
mov dword [ebp - 0x524], 1
jmp 0x1000ab7e
and dword [ebp - 0x524], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x524]
mov dword [ebp + eax - 0xb88], ecx
jmp 0x1000a7f1
mov dword [ebp - 0x574], 0x830af36e
mov eax, dword [ebp - 0x354]
add eax, 0x2526041
mov dword [ebp - 0xd8], eax
je 0x1000aeb7
mov dword [ebp - 0xd8], 0
jmp 0x1000abcf
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x14
jg 0x1000aeb2
mov dword [ebp - 0x2bc], 0xfdc8dfba
mov dword [ebp - 0x58], 0
jmp 0x1000abf6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1000ac0c
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xb98], 0xffffffff
jmp 0x1000abef
mov dword [ebp - 0x58], 0
jmp 0x1000ac1c
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1000ac32
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc70], 0xffffffff
jmp 0x1000ac15
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb98]
cmp dword [ebp + eax - 0xb98], ecx
jge 0x1000ac59
mov dword [ebp - 0x8cc], 1
jmp 0x1000ac60
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 1
jne 0x1000ac75
mov dword [ebp - 0x52c], 1
jmp 0x1000ac7c
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 1
jne 0x1000ac91
mov dword [ebp - 0x8d4], 1
jmp 0x1000ac98
and dword [ebp - 0x8d4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb98]
cmp dword [ebp - 0x8d4], eax
jge 0x1000acb9
mov dword [ebp - 0x534], 1
jmp 0x1000acc0
and dword [ebp - 0x534], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x534]
mov dword [ebp + eax - 0xc70], ecx
mov dword [ebp - 0x2bc], 0x10
jmp 0x1000acec
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 4
je 0x1000ae91
mov dword [ebp - 0xc], 0x753e1e01
mov dword [ebp - 0xc], 3
jmp 0x1000ad10
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x1000ad87
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ebp + ecx*4 - 0xc70]
cmp dword [ebp + eax*4 - 0xb98], ecx
jl 0x1000ad38
mov dword [ebp - 0xacc], 1
jmp 0x1000ad3f
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xc]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb98]
cmp dword [ebp + eax*4 - 0xc70], ecx
je 0x1000ad63
mov dword [ebp - 0x8dc], 1
jmp 0x1000ad6a
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xb98]
imul eax, dword [ebp - 0x8dc]
mov ecx, dword [ebp - 0xc]
mov dword [ebp + ecx*4 - 0xc70], eax
jmp 0x1000ad09
mov dword [ebp - 0xc], 0xffffffea
jmp 0x1000ad97
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x1a
je 0x1000ae8c
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x22c], 0
jmp 0x1000adc4
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jg 0x1000ae4c
mov dword [ebp - 0x2c4], 4
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1000adf1
push 0
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [ebp - 0x2c4], 3
jmp 0x1000ae0a
mov eax, dword [ebp - 0x2c4]
dec eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jl 0x1000ae47
mov byte [ebp - 0x112], 0
movzx eax, byte [ebp - 0x112]
test eax, eax
je 0x1000ae45
push 0
push 0x243d
push 0x1fad
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x1000adfd
jmp 0x1000adb7
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x1000ae87
push 0x27c
push 0
push 0
push 0x703
push 0x1454
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
jmp 0x1000ad90
jmp 0x1000acdf
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000aead
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
jmp 0x1000abc2
jmp 0x1000b188
mov dword [ebp - 0x54c], 0xffffffff
mov dword [ebp - 0x23c], 0xda2282d5
mov dword [ebp - 0x234], 0
jmp 0x1000aee4
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x1000af00
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xf98], 0x2dc71837
jmp 0x1000aed7
mov dword [ebp - 0x23c], 1
cmp dword [ebp - 0x23c], 0xc7b7f609
jbe 0x1000afbb
cmp dword [ebp - 0x23c], 0x7b30498d
jl 0x1000af32
mov dword [ebp - 0x53c], 1
jmp 0x1000af39
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x54c]
cmp dword [ebp - 0x53c], eax
jne 0x1000af53
mov dword [ebp - 0xa08], 1
jmp 0x1000af5a
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0xd3c], eax
mov eax, 0x8cd3bed1
cmp eax, 0x4ce34aaf
jne 0x1000af7e
mov dword [ebp - 0x8e4], 1
jmp 0x1000af85
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0xf0a0cd95
je 0x1000af9d
mov dword [ebp - 0x8ec], 1
jmp 0x1000afa4
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x544]
cmp dword [ebp - 0x8ec], eax
jne 0x1000afbb
and dword [ebp - 0x8f4], 0
jmp 0x1000afc5
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x54c]
imul eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0xd8]
jl 0x1000b15a
mov dword [ebp - 0x39c], 0xffffffff
mov dword [ebp - 0x564], 0xffffffff
mov dword [ebp - 0xb2c], 0xfffffffd
mov dword [ebp - 0x2cc], 0
jmp 0x1000b015
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 3
jge 0x1000b031
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xeb8], 0
jmp 0x1000b008
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x554], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x554]
mov dword [ebp + eax - 0xeb8], ecx
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x554], eax
jne 0x1000b06a
mov dword [ebp - 0x8fc], 1
jmp 0x1000b071
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x354]
cmp dword [ebp - 0x8fc], eax
jne 0x1000b08b
mov dword [ebp - 0x55c], 1
jmp 0x1000b092
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
dec eax
dec eax
imul eax, eax, 0xfcb6
test eax, eax
jae 0x1000b0b9
cmp dword [ebp - 0xb2c], 0
je 0x1000b0b9
mov dword [ebp - 0x904], 1
jmp 0x1000b0c0
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x904]
jne 0x1000b0da
mov dword [ebp - 0x90c], 1
jmp 0x1000b0e1
and dword [ebp - 0x90c], 0
mov dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
add eax, dword [ebp - 0x90c]
cmp eax, 1
jb 0x1000b108
mov dword [ebp - 0x56c], 1
jmp 0x1000b10f
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 1
jne 0x1000b124
mov dword [ebp - 0x914], 1
jmp 0x1000b12b
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x914]
jg 0x1000b145
mov dword [ebp - 0xa10], 1
jmp 0x1000b14c
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x39c]
mov dword [ebp - 0xd8], eax
jmp 0x1000b17b
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1000b17b
push 0
push 0x8ca
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
mov eax, dword [ebp - 0x574]
dec eax
mov dword [ebp - 0x574], eax
mov dword [ebp - 0x60], 0xa2fa
mov dword [ebp - 0x35c], 0x20b28787
mov dword [ebp - 0x80], 0
jmp 0x1000b1a9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1000b1bf
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x93c], 5
jmp 0x1000b1a2
mov dword [ebp - 0x80], 0
jmp 0x1000b1cf
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1000b1e5
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xdc4], 0
jmp 0x1000b1c8
cmp dword [ebp - 0x60], 0xb8b78acc
jne 0x1000b1fa
mov dword [ebp - 0x91c], 1
jmp 0x1000b201
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
sub eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jg 0x1000b21b
mov dword [ebp - 0x57c], 1
jmp 0x1000b222
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x57c]
cmp eax, dword [ebp - 0x60]
je 0x1000b240
cmp dword [ebp - 0x60], 0
jne 0x1000b240
and dword [ebp - 0x924], 0
jmp 0x1000b24a
mov dword [ebp - 0x924], 1
cmp dword [ebp - 0x924], 0xd430
jl 0x1000b262
mov dword [ebp - 0x584], 1
jmp 0x1000b269
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x584]
je 0x1000b280
mov dword [ebp - 0x58c], 1
jmp 0x1000b287
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x92c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x92c]
mov dword [ebp + eax - 0xdc4], ecx
mov eax, dword [ebp - 0x92c]
cmp eax, dword [ebp - 0x58c]
jle 0x1000b2bd
mov dword [ebp - 0x934], 1
jmp 0x1000b2c4
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x934], eax
jl 0x1000b2db
mov dword [ebp - 0x594], 1
jmp 0x1000b2e2
and dword [ebp - 0x594], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x93c], 0xf89b5461
mov eax, dword [ebp - 0x594]
sub eax, 0x764ab9f
mov dword [ebp - 0x35c], eax
je 0x1000b32e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x93c], 0
je 0x1000b32e
mov dword [ebp - 0xad4], 0x2da3c3d
mov eax, dword [ebp - 0xad4]
mov dword [ebp - 0x35c], eax
jmp 0x1000b356
mov byte [ebp - 0x114], 0
movzx eax, byte [ebp - 0x114]
test eax, eax
je 0x1000b356
push 0
push 0
push 0xa15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0xd0], 0xb546158d
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0xa18], 0x9c9214a9
mov dword [ebp - 0xa20], 0x66e6
mov dword [ebp - 0x2d4], 0
jmp 0x1000b397
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 3
jge 0x1000b3b3
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xb08], 0x2fafd11d
jmp 0x1000b38a
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], eax
jne 0x1000b3cd
mov dword [ebp - 0x59c], 1
jmp 0x1000b3d4
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
sub eax, dword [ebp - 0x36c]
je 0x1000b6c5
mov dword [ebp - 0x3cc], 0x35a2
mov dword [ebp - 0x88], 1
mov eax, dword [ebp - 0xa18]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x21cd
jle 0x1000b442
mov dword [ebp - 0x944], 1
jmp 0x1000b449
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x944]
sub ecx, dword [ebp - 0x88]
add eax, ecx
jne 0x1000b46a
xor eax, eax
jne 0x1000b46a
cmp dword [ebp - 0x88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x88], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb08]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb08]
cmp dword [ebp - 0x3cc], eax
jl 0x1000b4c5
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x1000b4c0
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x1000b6a8
mov dword [ebp - 0x364], 0xc0136ef6
cmp dword [ebp - 0x3cc], 0xffffffff
jne 0x1000b4e4
mov dword [ebp - 0x5a4], 1
jmp 0x1000b4eb
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x364]
cmp eax, dword [ebp - 0x5a4]
jle 0x1000b505
mov dword [ebp - 0x94c], 1
jmp 0x1000b50c
and dword [ebp - 0x94c], 0
cmp dword [ebp - 0x94c], 0xf85a
je 0x1000b524
mov dword [ebp - 0x5ac], 1
jmp 0x1000b52b
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x5ac], eax
jg 0x1000b545
mov dword [ebp - 0x954], 1
jmp 0x1000b54c
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x954]
jl 0x1000b566
mov dword [ebp - 0x5b4], 1
jmp 0x1000b56d
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb08]
add eax, dword [ebp - 0x5b4]
jne 0x1000b594
mov eax, 0xa019
test eax, eax
jne 0x1000b594
and dword [ebp - 0x95c], 0
jmp 0x1000b59e
mov dword [ebp - 0x95c], 1
imul eax, dword [ebp - 0x95c], 0xe712
cmp eax, dword [ebp - 0xd0]
jl 0x1000b5bc
mov dword [ebp - 0x5bc], 1
jmp 0x1000b5c3
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x5bc], eax
jg 0x1000b5dd
mov dword [ebp - 0x964], 1
jmp 0x1000b5e4
and dword [ebp - 0x964], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb08]
cmp dword [ebp - 0x964], eax
jge 0x1000b604
mov dword [ebp - 0x3a4], 1
jmp 0x1000b60b
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0xb08], ecx
cmp dword [ebp - 0x3a4], 0
je 0x1000b63c
cmp dword [ebp - 0x88], 0
je 0x1000b63c
mov dword [ebp - 0x96c], 1
jmp 0x1000b643
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x96c], eax
jg 0x1000b666
mov eax, 0x18bd
test eax, eax
je 0x1000b666
mov dword [ebp - 0x5c8], 1
jmp 0x1000b66d
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x88], eax
mov byte [ebp - 0x14c], 0
movzx eax, byte [ebp - 0x14c]
test eax, eax
je 0x1000b6a8
push 0x71e
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PolyPolyline]
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x1000b6c0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
jmp 0x1000b774
mov dword [ebp - 0xb0c], 0xa08552ad
mov dword [ebp - 0x244], 0
jmp 0x1000b6e8
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x1000b704
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xed0], 0
jmp 0x1000b6db
cmp dword [ebp - 0xb0c], 0
jne 0x1000b71f
cmp dword [ebp - 0xa20], 0
jne 0x1000b71f
and dword [ebp - 0x5cc], 0
jmp 0x1000b729
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0x36c]
cmp eax, dword [ebp - 0x5cc]
jge 0x1000b743
mov dword [ebp - 0x7bc], 1
jmp 0x1000b74a
and dword [ebp - 0x7bc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7bc]
mov dword [ebp + eax - 0xed0], ecx
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x1000b774
call dword [sym.imp.USER32.dll_DestroyCaret]
mov dword [ebp - 0xdf0], 0x5bb2
mov dword [ebp - 0xdf8], 0xffffffff
mov dword [ebp - 0xe00], 0x2a276893
mov dword [ebp - 0xe08], 1
mov dword [ebp - 0xe1c], 0xe1879501
mov dword [ebp - 0x68], 0
jmp 0x1000b7b6
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1000b7cc
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xf70], 0xd2d672a8
jmp 0x1000b7af
mov dword [ebp - 0x68], 0
jmp 0x1000b7dc
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000b7f2
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xd5c], 1
jmp 0x1000b7d5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd5c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd5c], eax
mov dword [ebp - 0x70], 0xa2fa
mov dword [ebp - 0x3c4], 0x20b28787
mov dword [ebp - 0x90], 0
jmp 0x1000b837
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000b853
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x5f4], 5
jmp 0x1000b82a
mov dword [ebp - 0x90], 0
jmp 0x1000b86c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000b888
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xd98], 0
jmp 0x1000b85f
cmp dword [ebp - 0x70], 0xb8b78acc
jne 0x1000b89d
mov dword [ebp - 0x5d4], 1
jmp 0x1000b8a4
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
sub eax, dword [ebp - 0x70]
cmp dword [ebp - 0x70], eax
jg 0x1000b8be
mov dword [ebp - 0x8a8], 1
jmp 0x1000b8c5
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x8a8]
cmp eax, dword [ebp - 0x70]
je 0x1000b8e3
cmp dword [ebp - 0x70], 0
jne 0x1000b8e3
and dword [ebp - 0x5dc], 0
jmp 0x1000b8ed
mov dword [ebp - 0x5dc], 1
cmp dword [ebp - 0x5dc], 0xd430
jl 0x1000b905
mov dword [ebp - 0x7c0], 1
jmp 0x1000b90c
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x7c0]
je 0x1000b923
mov dword [ebp - 0x920], 1
jmp 0x1000b92a
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x5e4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5e4]
mov dword [ebp + eax - 0xd98], ecx
mov eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x920]
jle 0x1000b960
mov dword [ebp - 0x5ec], 1
jmp 0x1000b967
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x5ec], eax
jl 0x1000b97e
mov dword [ebp - 0x7c8], 1
jmp 0x1000b985
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5f4], 0xf89b5461
mov eax, dword [ebp - 0x7c8]
sub eax, 0x764ab9f
mov dword [ebp - 0x3c4], eax
je 0x1000b9d1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5f4], 0
je 0x1000b9d1
mov dword [ebp - 0xadc], 0x2da3c3d
mov eax, dword [ebp - 0xadc]
mov dword [ebp - 0x3c4], eax
jmp 0x1000b9f9
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x1000b9f9
push 0
push 0
push 0xa15
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_DefWindowProcA]
mov dword [ebp - 0x120], 1
mov dword [ebp - 0x2dc], 0
jmp 0x1000ba1c
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x1000ba38
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x978], 0x8c6a53d0
jmp 0x1000ba0f
mov dword [ebp - 0x120], 0
jmp 0x1000ba51
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1000bc28
mov dword [ebp - 0x128], 9
mov dword [ebp - 0x7d0], 0x7bc99958
mov dword [ebp - 0x24c], 0
jmp 0x1000ba8b
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 4
jge 0x1000baa7
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xf00], 0x3f9150fa
jmp 0x1000ba7e
mov eax, dword [ebp - 0x120]
cmp dword [ebp + eax*4 - 0x978], 0
je 0x1000babc
jmp 0x1000bc28
mov dword [ebp - 0x128], 0
jmp 0x1000bad5
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1000bc23
mov dword [ebp - 0x184], 6
mov dword [ebp - 0x184], 0
jmp 0x1000bb05
cmp dword [ebp - 0x184], 0
jg 0x1000bc1e
mov dword [ebp - 0x374], 1
mov dword [ebp - 0xa28], 0xe2e4ed3
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xe24], eax
cmp dword [ebp - 0x374], 0xffffffff
jne 0x1000bb4d
cmp dword [ebp - 0x128], 0
jne 0x1000bb4d
and dword [ebp - 0x8b0], 0
jmp 0x1000bb57
mov dword [ebp - 0x8b0], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8b0]
mov dword [ebp + eax - 0xf00], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xe2c], eax
cmp dword [ebp - 0x120], 1
jle 0x1000bb8a
mov dword [ebp - 0x5fc], 1
jmp 0x1000bb91
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x5fc], eax
je 0x1000bbab
jmp 0x1000bac8
jmp 0x1000ba44
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000bc45
push 0x115
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov dword [ebp - 0xc0], 0xb546158d
mov dword [ebp - 0x384], 0
mov dword [ebp - 0xb10], 0x9c9214a9
mov dword [ebp - 0xae4], 0x66e6
mov dword [ebp - 0x2e4], 0
jmp 0x1000bc86
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 3
jge 0x1000bca2
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0xb40], 0x2fafd11d
jmp 0x1000bc79
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], eax
jne 0x1000bcbc
mov dword [ebp - 0x614], 1
jmp 0x1000bcc3
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0x384]
je 0x1000bfb4
mov dword [ebp - 0x3ac], 0x35a2
mov dword [ebp - 0x98], 1
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xe3c], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x21cd
jle 0x1000bd31
mov dword [ebp - 0x8b8], 1
jmp 0x1000bd38
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x8b8]
sub ecx, dword [ebp - 0x98]
add eax, ecx
jne 0x1000bd59
xor eax, eax
jne 0x1000bd59
cmp dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x98], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb40]
mov dword [ebp - 0x3ac], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb40]
cmp dword [ebp - 0x3ac], eax
jl 0x1000bdb4
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1000bdaf
push 1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowRgn]
jmp 0x1000bf97
mov dword [ebp - 0x37c], 0xc0136ef6
cmp dword [ebp - 0x3ac], 0xffffffff
jne 0x1000bdd3
mov dword [ebp - 0x61c], 1
jmp 0x1000bdda
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x37c]
cmp eax, dword [ebp - 0x61c]
jle 0x1000bdf4
mov dword [ebp - 0xa30], 0xa08552ad
mov dword [ebp - 0x254], 0
jmp 0x1000bfd7
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x1000bff3
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xee8], 0
jmp 0x1000bfca
cmp dword [ebp - 0xa30], 0
jne 0x1000c00e
cmp dword [ebp - 0xae4], 0
jne 0x1000c00e
and dword [ebp - 0x644], 0
jmp 0x1000c018
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x644]
jge 0x1000c032
mov dword [ebp - 0x960], 1
jmp 0x1000c039
and dword [ebp - 0x960], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x960]
mov dword [ebp + eax - 0xee8], ecx
mov byte [ebp - 0x14b], 0
movzx eax, byte [ebp - 0x14b]
test eax, eax
je 0x1000c063