Function at 0x100414d8
Capabilities:
Get graphical window text
Query service status
Read .ini file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xbf8
push esi
push edi
mov dword [ebp - 0x26c], 1
mov dword [ebp - 0x264], 0
jmp 0x10041506
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x10041522
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xbf8], 0x5f70ad6f
jmp 0x100414f9
mov dword [ebp - 0x26c], 0
jmp 0x1004153b
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jg 0x10041576
mov dword [ebp - 0x830], 0xfa2f
mov dword [ebp - 0x830], 1
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x10041574
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
jmp 0x1004152e
mov dword [ebp - 0x6e4], 2
mov dword [ebp - 0x36c], 0
mov dword [ebp - 0x828], 0xc58f
mov dword [ebp - 0xad8], 0x8748afa2
mov dword [ebp - 0x284], 0xfffffffd
mov dword [ebp - 0x274], 0
jmp 0x100415c1
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 4
jge 0x100415dd
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x924], 0xfffffffa
jmp 0x100415b4
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x36c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x924]
cmp dword [ebp - 0x36c], eax
jne 0x10041614
mov dword [ebp - 0x6d4], 1
jmp 0x1004161b
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x6d4]
jl 0x10041635
mov dword [ebp - 0x6dc], 1
jmp 0x1004163c
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x828]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x924]
add ecx, dword [ebp - 0x284]
sub eax, ecx
imul eax, dword [ebp - 0x6dc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x924]
jne 0x10041677
mov dword [ebp - 0x770], 1
jmp 0x1004167e
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x9b8], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x924]
mov dword [ebp + ecx - 0x924], eax
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x25c], 0
jmp 0x100416c5
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x100416e1
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xbec], 0x5f70ad6f
jmp 0x100416b8
mov dword [ebp - 0x60], 9
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0x250], 0
jmp 0x1004170b
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x10041727
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x9f4], 0
jmp 0x100416fe
mov dword [ebp - 0x60], 0x1c
jmp 0x10041737
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x14
jl 0x10041936
mov dword [ebp - 0xc4], 0xfffffffb
mov dword [ebp - 0x6ec], 2
mov dword [ebp - 0xbc], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
cmp dword [ebp - 0xc4], eax
jle 0x10041791
mov dword [ebp - 0x724], 1
jmp 0x10041798
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xc4]
jge 0x100417bb
mov dword [ebp - 0x6f4], 1
jmp 0x100417c2
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x6f4]
imul eax, eax, 0xffff
imul eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0xbc]
jge 0x100417ec
mov dword [ebp - 0x6fc], 1
jmp 0x100417f3
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x6fc]
cmp dword [ebp - 0x724], eax
jg 0x10041814
mov dword [ebp - 0x708], 1
jmp 0x1004181b
and dword [ebp - 0x708], 0
cmp dword [ebp - 0x708], 1
jne 0x10041836
cmp dword [ebp - 0x60], 0
je 0x10041836
mov dword [ebp - 0x550], 1
jmp 0x1004183d
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x550], eax
jl 0x10041857
mov dword [ebp - 0x6cc], 1
jmp 0x1004185e
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x6cc], eax
jne 0x10041878
mov dword [ebp - 0x368], 1
jmp 0x1004187f
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x368], eax
jl 0x10041896
mov dword [ebp - 0x648], 1
jmp 0x1004189d
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x648], eax
je 0x100418bc
or eax, 0xffffffff
je 0x100418bc
mov dword [ebp - 0x838], 1
jmp 0x100418c3
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x9c8], eax
imul eax, dword [ebp - 0xbc], 0
cmp eax, dword [ebp - 0xc4]
je 0x100418f0
cmp dword [ebp - 0xc4], 0
jne 0x100418f0
and dword [ebp - 0x370], 0
jmp 0x100418fa
mov dword [ebp - 0x370], 1
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x370], eax
jle 0x10041914
mov dword [ebp - 0x558], 1
jmp 0x1004191b
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x558]
sub eax, dword [ebp - 0x60]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9f4], eax
jmp 0x10041730
mov dword [ebp - 0x1d0], 0
jmp 0x1004194f
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jg 0x10041d2b
mov dword [ebp - 0x44], 0x47a6deec
mov dword [ebp - 0x840], 0x28abf8b2
mov dword [ebp - 0x5c], 0
jmp 0x1004197d
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10041993
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x144], 0x68ec0ae9
jmp 0x10041976
mov dword [ebp - 0x5c], 0
jmp 0x100419a3
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100419b9
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xb6c], 0xffffffff
jmp 0x1004199c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x144], 0xffffffe3
jmp 0x100419e7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x144]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x144], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0xfffffff0
jg 0x10041a17
mov dword [ebp - 0x378], 0x6c74aa0d
mov dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x378], eax
jmp 0x100419cc
mov dword [ebp - 0x44], 1
jmp 0x10041a27
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10041ba7
mov dword [ebp - 0x300], 0x5943e2f7
cmp dword [ebp - 0x300], 0
jne 0x10041a52
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x144], 0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xb6c]
cmp dword [ebp + eax - 0xb6c], ecx
je 0x10041a7a
mov dword [ebp - 0x700], 1
jmp 0x10041a81
and dword [ebp - 0x700], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
cmp eax, dword [ebp - 0x700]
jl 0x10041aa2
mov dword [ebp - 0x380], 1
jmp 0x10041aa9
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x300], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x144]
mov ecx, dword [ebp - 0x300]
sub ecx, 6
sub ecx, dword [ebp - 0x840]
lea eax, [ecx + eax - 8]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0x144], eax
jge 0x10041af0
mov dword [ebp - 0x560], 1
jmp 0x10041af7
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x560]
jl 0x10041b0e
mov dword [ebp - 0x388], 1
jmp 0x10041b15
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x144]
cmp dword [ebp - 0x388], eax
jne 0x10041b33
mov dword [ebp - 0x650], 1
jmp 0x10041b3a
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x144]
cmp dword [ebp - 0x650], eax
jle 0x10041b65
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x144], 0
jne 0x10041b65
and dword [ebp - 0x390], 0
jmp 0x10041b6f
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x390]
jne 0x10041b86
mov dword [ebp - 0x568], 1
jmp 0x10041b8d
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x144], eax
jmp 0x10041a20
mov dword [ebp - 0x86c], 0xfa2f
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x118], 8
mov dword [ebp - 0x864], 0x2f3f6085
mov dword [ebp - 0x228], 0
jmp 0x10041be5
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 1
jge 0x10041c01
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x1d8], 0xca63
jmp 0x10041bd8
mov dword [ebp - 0x28], 0
jmp 0x10041c11
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jg 0x10041cc2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x1d8], ecx
jg 0x10041c36
mov dword [ebp - 0x85c], 1
jmp 0x10041c3d
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x1d8]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x118], 0xfff6
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x9d8], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], eax
jl 0x10041c77
mov dword [ebp - 0x398], 1
jmp 0x10041c7e
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x1d8]
imul eax, dword [ebp - 0x398]
imul eax, eax, 0
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ebp + ecx*4 - 0x1d8]
jl 0x10041caa
mov dword [ebp - 0x6c8], 1
jmp 0x10041cb1
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x864], eax
jmp 0x10041c0a
mov dword [ebp - 0x118], 0
jmp 0x10041cdb
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0xffffffe6
jl 0x10041d00
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10041cfe
push 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x10041cce
mov dword [ebp - 0x86c], 1
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x10041d26
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
jmp 0x10041942
mov dword [ebp - 0x1b8], 0x53b26bdd
mov dword [ebp - 0x874], 0xfffffff8
mov dword [ebp - 0x1b8], 0
jmp 0x10041d58
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xa
jl 0x10041e56
mov dword [ebp - 0x1e0], 7
mov dword [ebp - 0x268], 0
jmp 0x10041d88
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x10041da4
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xa00], 0xfb6318d5
jmp 0x10041d7b
mov dword [ebp - 0x1e0], 0
jmp 0x10041dbd
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jg 0x10041e45
mov dword [ebp - 0x1b0], 0xfffffff7
mov dword [ebp - 0x1b0], 0
jmp 0x10041de9
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10041e05
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xa00], 0xd00585b
jmp 0x10041ddc
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x10041e40
push 0x1bf4
push 0
push 0
push 0x43c
push 0xb15
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
jmp 0x10041db0
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x874], eax
jmp 0x10041d4b
mov dword [ebp - 0x9e0], 1
mov dword [ebp - 0x9e8], 5
mov dword [ebp - 0xa68], 0x2afe01bd
mov dword [ebp - 0xa70], 0xfffffffb
mov dword [ebp - 0xa78], 0x690f1d89
mov dword [ebp - 0xa80], 0xa5efa20b
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa90], 0x4b2ab76d
mov dword [ebp - 0xa98], 0xffffffff
mov dword [ebp - 0xaa0], 0
mov dword [ebp - 0xaa8], 0xf451d52a
mov dword [ebp - 0xab0], 0xffffffff
mov dword [ebp - 0x3a0], 0xdbc56e70
mov eax, dword [ebp - 0x3a0]
inc eax
mov dword [ebp - 0x3a0], eax
mov dword [ebp - 0x184], 0xfffffffe
mov dword [ebp - 0x1a8], 0x8b78acc4
mov dword [ebp - 0x87c], 0x653ffd03
mov dword [ebp - 0x230], 0
jmp 0x10041f1c
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x10041f38
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x8e0], 0
jmp 0x10041f0f
mov dword [ebp - 0x184], 0xffffffe7
jmp 0x10041f51
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xffffffed
jg 0x100421b8
mov dword [ebp - 0x6c], 0xffffffff
mov dword [ebp - 0x6c], 3
jmp 0x10041f75
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10042136
mov dword [ebp - 0xcc], 1
mov dword [ebp - 0xd4], 0xb28787d6
mov dword [ebp - 0xcc], 3
jmp 0x10041fac
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x100420bc
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x10041fdc
push 0
push 0x1275
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileIntW]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8e0], 0
jne 0x10041ff8
mov dword [ebp - 0x570], 1
jmp 0x10041fff
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp + eax*4 - 0x8e0]
cmp eax, dword [ebp - 0x570]
jl 0x10042024
push 4
pop eax
test eax, eax
jne 0x10042024
and dword [ebp - 0x3a8], 0
jmp 0x1004202e
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0x8e0], 4
jae 0x1004204a
mov dword [ebp - 0x658], 1
jmp 0x10042051
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x3a8]
sub eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x658]
jle 0x10042071
mov dword [ebp - 0x3b0], 1
jmp 0x10042078
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b0]
add eax, 0xa90c
je 0x1004209a
cmp dword [ebp - 0xcc], 0
je 0x1004209a
mov dword [ebp - 0x578], 1
jmp 0x100420a1
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x578]
sub eax, 4
mov dword [ebp - 0xd4], eax
jmp 0x10041f9f
mov dword [ebp - 0xd4], 3
jmp 0x100420d5
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x10042131
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x100420fd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextLengthA]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp + eax*4 - 0x8e0]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0x3b8]
mov dword [ebp + eax*4 - 0x8e0], ecx
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x87c], eax
jmp 0x100420c8
jmp 0x10041f6e
mov dword [ebp - 0x1a8], 0
jmp 0x1004214f
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jg 0x100421b3
mov dword [ebp - 0x6c], 0
jmp 0x10042168
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x1004217f
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x8e0], 0
je 0x1004217d
jmp 0x1004217f
jmp 0x10042161
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x100421b1
push 0
push 0xab2
push 0x1aeb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x10042142
jmp 0x10041f44
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x100421d0
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [ebp - 0xa0], 0x860b4ffb
mov dword [ebp - 0x1ac], 0xfffffff9
mov dword [ebp - 0x120], 0xaab39e22
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x1e8], 0
jmp 0x10042211
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x1004222d
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0x730], 8
jmp 0x10042204
mov dword [ebp - 0xa0], 2
jmp 0x10042246
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1004245c
mov dword [ebp - 0x308], 0xc9b780f8
mov dword [ebp - 0x31c], 0x1d97
mov dword [ebp - 0x898], 0xfffffff7
mov dword [ebp - 0x258], 0
jmp 0x1004228a
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 4
jge 0x100422a6
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xb24], 0x1448112d
jmp 0x1004227d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x730], 0
jne 0x100423b3
mov eax, dword [ebp - 0x308]
dec eax
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x714], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x714]
mov dword [ebp + eax - 0xb24], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x730]
add eax, dword [ebp - 0x714]
je 0x10042314
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb24], 0
je 0x10042314
mov dword [ebp - 0x3c0], 1
jmp 0x1004231b
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x730]
cmp eax, dword [ebp - 0x3c0]
jle 0x1004233c
mov dword [ebp - 0x580], 1
jmp 0x10042343
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x580], eax
jle 0x1004235d
mov dword [ebp - 0x3c8], 1
jmp 0x10042364
and dword [ebp - 0x3c8], 0
cmp dword [ebp - 0x3c8], 2
jne 0x10042376
cmp dword [ebp - 0x154], 0
jne 0x1004238e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb24], 0
jne 0x1004238e
and dword [ebp - 0x660], 0
jmp 0x10042398
mov dword [ebp - 0x660], 1
cmp dword [ebp - 0x660], 0
jne 0x100423b3
mov eax, 0xfa02
test eax, eax
jne 0x100423b3
and dword [ebp - 0x3d0], 0
jmp 0x100423bd
mov dword [ebp - 0x3d0], 1
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x3d0]
sub ecx, dword [ebp + eax*4 - 0x730]
cmp ecx, dword [ebp - 0x31c]
jl 0x100423e4
mov dword [ebp - 0x588], 1
jmp 0x100423eb
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0xa0]
mov eax, dword [ebp + eax*4 - 0x730]
sub eax, dword [ebp - 0x588]
cmp eax, dword [ebp - 0x31c]
jg 0x10042412
mov dword [ebp - 0x3d8], 1
jmp 0x10042419
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x3d8], eax
jge 0x10042433
mov dword [ebp - 0x884], 1
jmp 0x1004243a
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0x120]
add eax, 0x37d08bb2
mov dword [ebp - 0x898], eax
jmp 0x10042239
mov dword [ebp - 0x1ac], 0
jmp 0x10042475
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jg 0x10042543
mov dword [ebp - 0x120], 2
jmp 0x1004249b
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x10042522
mov dword [ebp - 0x154], 0
jmp 0x100424bd
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 2
jg 0x10042508
mov byte [ebp - 0xac], 0
movzx eax, byte [ebp - 0xac]
test eax, eax
je 0x10042506
push 0
push 0x16c5
push 0
push 0
push 0x28e
push 0x1423
push 0x33a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x100424b0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp + eax*4 - 0x730], 0
je 0x1004251d
jmp 0x1004248e
jmp 0x1004248e
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1004253e
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x10042468
mov dword [ebp - 0x88], 5
mov dword [ebp - 0x30], 0x6d4a
mov dword [ebp - 0x2d8], 0xffffffff
mov dword [ebp - 0x77c], 0xc77e
mov dword [ebp - 0x784], 0x493a
mov dword [ebp - 0x880], 7
cmp dword [ebp - 0x88], 0
je 0x1004262b
mov dword [ebp - 0x8a0], 0xffffffff
cmp dword [ebp - 0x88], 0
jne 0x100425f0
mov eax, dword [ebp - 0x8a0]
cmp dword [ebp - 0x88], eax
jg 0x100425b6
mov dword [ebp - 0x6d0], 1
jmp 0x100425bd
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0
jb 0x100425d2
mov dword [ebp - 0x3e0], 1
jmp 0x100425d9
and dword [ebp - 0x3e0], 0
imul eax, dword [ebp - 0x3e0], 0xfffffff9
cmp eax, 0x2167fa5c
jg 0x100425f0
and dword [ebp - 0x590], 0
jmp 0x100425fa
mov dword [ebp - 0x590], 1
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0
jmp 0x10042613
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 6
jle 0x10042626
cmp dword [ebp - 0x88], 0
je 0x10042624
jmp 0x10042626
jmp 0x1004260c
jmp 0x1004280b
mov dword [ebp - 0x8b8], 0xfffffffd
mov dword [ebp - 0x668], 5
mov dword [ebp - 0x3f8], 0xbbe26b5c
mov dword [ebp - 0x4c], 0
jmp 0x10042659
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1004266f
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x130], 0xdf9c7750
jmp 0x10042652
mov dword [ebp - 0x4c], 0
jmp 0x1004267f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10042695
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xb78], 0xfffffffc
jmp 0x10042678
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x100426af
push 0
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
cmp dword [ebp - 0x8b8], 0
je 0x100426c9
xor eax, eax
inc eax
je 0x100426c9
mov dword [ebp - 0x3e8], 1
jmp 0x100426d0
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x668], eax
mov eax, dword [ebp - 0x668]
cmp dword [ebp - 0x88], eax
je 0x100426f6
mov dword [ebp - 0x8c0], 1
jmp 0x100426fd
and dword [ebp - 0x8c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
mov dword [ebp - 0xadc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x3f8], 0xc2e3a4c6
jbe 0x1004273b
mov dword [ebp - 0x3f0], 1
jmp 0x10042742
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x130]
cmp eax, dword [ebp - 0x3f0]
jle 0x10042770
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x130], 0
jne 0x10042770
and dword [ebp - 0x598], 0
jmp 0x1004277a
mov dword [ebp - 0x598], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x598]
sub ecx, 0xfff7
cmp dword [ebp + eax - 0x130], ecx
jl 0x100427a1
mov dword [ebp - 0x88c], 1
jmp 0x100427a8
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xaec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f8]
cmp dword [ebp + eax - 0x130], ecx
je 0x100427d2
mov dword [ebp - 0x71c], 1
jmp 0x100427d9
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0xbb64
jl 0x100427f1
mov dword [ebp - 0x400], 1
jmp 0x100427f8
and dword [ebp - 0x400], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x400]
mov dword [ebp + eax - 0xb78], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jne 0x1004281f
mov dword [ebp - 0x5a0], 1
jmp 0x10042826
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0
jl 0x1004283b
mov dword [ebp - 0x408], 1
jmp 0x10042842
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x408], eax
jg 0x1004285c
mov dword [ebp - 0x820], 1
jmp 0x10042863
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0x2d8]
sub eax, dword [ebp - 0x77c]
sub eax, 0xe2cc
jne 0x100428a9
cmp dword [ebp - 0x30], 0
jne 0x100428a9
and dword [ebp - 0x82c], 0
jmp 0x100428b3
mov dword [ebp - 0x82c], 1
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0x2d8], 8
je 0x100428d4
mov dword [ebp - 0x670], 1
jmp 0x100428db
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x880], eax
mov dword [ebp - 0x90], 0x860b4ffb
mov dword [ebp - 0x1a4], 0xfffffff9
mov dword [ebp - 0x15c], 0xfffffffc
mov dword [ebp - 0x78c], 0
mov dword [ebp - 0x934], 0xfffffffa
mov dword [ebp - 0x1f0], 0
jmp 0x10042932
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1004294e
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xbd4], 0xfffffffc
jmp 0x10042925
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x15c], 0
jmp 0x10042973
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 2
jg 0x1004299f
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1004299d
push 0
push 0x21d3
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
jmp 0x10042966
mov dword [ebp - 0x128], 0xaab39e22
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x2e4], 0xffffffff
mov dword [ebp - 0x410], 0xfdb696
mov dword [ebp - 0x418], 0xfffffffc
mov dword [ebp - 0x420], 0xbe92e3f9
mov dword [ebp - 0x5b0], 0x7392715e
mov dword [ebp - 0x428], 0x1bb000e2
mov dword [ebp - 0x794], 0xde467b47
mov dword [ebp - 0x238], 0
jmp 0x10042a0f
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x10042a2b
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xa0c], 0xfffffffa
jmp 0x10042a02
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x410], eax
je 0x10042a5a
mov dword [ebp - 0x290], 1
jmp 0x10042a61
and dword [ebp - 0x290], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x290]
mov dword [ebp + eax - 0xa0c], ecx
imul eax, dword [ebp - 0x290], 0xcd33
test eax, eax
je 0x10042a93
xor eax, eax
inc eax
je 0x10042a93
mov dword [ebp - 0x5a8], 1
jmp 0x10042a9a
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x418], eax
je 0x10042abd
mov dword [ebp - 0x834], 1
jmp 0x10042ac4
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x10042af0
mov dword [ebp - 0x6d8], 1
jmp 0x10042af7
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x5b0], eax
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x794], eax
mov dword [ebp - 0x148], 4
mov dword [ebp - 0x2a0], 0xda439beb
mov dword [ebp - 0x18c], 1
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x2e0], 0x1a05132d
mov dword [ebp - 0x430], 0xb11f
mov dword [ebp - 0x888], 0xfffffffd
mov dword [ebp - 0x64], 0
jmp 0x10042b95
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10042bab
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x8f4], 0x17c10977
jmp 0x10042b8e
mov dword [ebp - 0x64], 0
jmp 0x10042bbb
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10042bd1
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x79c], 0x627e80a
jmp 0x10042bb4
mov dword [ebp - 0x2a0], 0x8bbca631
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x678], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x678]
mov dword [ebp + eax - 0x8f4], ecx
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x2e0], eax
je 0x10042c45
mov dword [ebp - 0x5b8], 1
jmp 0x10042c4c
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x430]
imul eax, dword [ebp - 0x430]
cmp eax, dword [ebp - 0x888]
je 0x10042c6d
mov dword [ebp - 0x438], 1
jmp 0x10042c74
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x5b8]
sub eax, 0x261d573
sub eax, dword [ebp - 0x438]
cmp eax, 0xf30b
jle 0x10042c9e
cmp dword [ebp - 0x2e0], 0
jne 0x10042c9e
and dword [ebp - 0x718], 0
jmp 0x10042ca8
mov dword [ebp - 0x718], 1
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x718], eax
je 0x10042cc2
mov dword [ebp - 0x440], 1
jmp 0x10042cc9
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x2a0]
cmp dword [ebp - 0x440], eax
jl 0x10042ce3
mov dword [ebp - 0x5c0], 1
jmp 0x10042cea
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x94c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x8f4]
mov dword [ebp + ecx - 0x79c], eax
mov dword [ebp - 0x278], 2
mov dword [ebp - 0x1f8], 0
jmp 0x10042d3f
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x10042d5b
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xbb0], 0x57fd5464
jmp 0x10042d32
mov dword [ebp - 0x278], 1
jmp 0x10042d74
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
jl 0x10042d99
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x10042d97
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
jmp 0x10042d67
mov dword [ebp - 0x200], 0
jmp 0x10042db2
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x10042dce
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x754], 8
jmp 0x10042da5
mov dword [ebp - 4], 0xa4f833fc
mov dword [ebp - 0x54], 0
jmp 0x10042de5
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10042dfb
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x164], 0xa8e
jmp 0x10042dde
mov dword [ebp - 0x54], 0
jmp 0x10042e0b
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10042e21
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x848], 0xfffffff7
jmp 0x10042e04
mov dword [ebp - 4], 0
jmp 0x10042e31
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jg 0x10043038
mov dword [ebp - 0xdc], 0xc9d94031
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x164]
mov dword [ebp - 0xb14], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x164]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x448]
mov dword [ebp + eax*4 - 0x164], ecx
cmp dword [ebp - 0x448], 0
je 0x10042eaa
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x164]
mov ecx, dword [ebp - 4]
add eax, dword [ebp + ecx*4 - 0x164]
cmp eax, 0x3d1f0dfb
jge 0x10042e9e
or eax, 0xffffffff
je 0x10042eaa
mov dword [ebp - 0x680], 1
jmp 0x10042eb1
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x680], eax
je 0x10042ecc
push 2
pop eax
test eax, eax
jne 0x10042ecc
and dword [ebp - 0x450], 0
jmp 0x10042ed6
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x450], eax
jne 0x10042eed
mov dword [ebp - 0x5c8], 1
jmp 0x10042ef4
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0xd9a54e58
je 0x10042f0c
mov dword [ebp - 0x458], 1
jmp 0x10042f13
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x458], eax
jge 0x10042f2d
mov dword [ebp - 0x6e0], 1
jmp 0x10042f34
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x6e0], eax
jge 0x10042f4e
mov dword [ebp - 0x83c], 1
jmp 0x10042f55
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x954], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 4], eax
je 0x10042f78
mov dword [ebp - 0x460], 1
jmp 0x10042f7f
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x460], eax
jge 0x10042f9f
mov eax, 0x1dd79339
test eax, eax
je 0x10042f9f
mov dword [ebp - 0x5d0], 1
jmp 0x10042fa6
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
neg eax
cmp eax, 0xfffffffd
ja 0x10042fbf
mov dword [ebp - 0x468], 1
jmp 0x10042fc6
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x468], eax
jl 0x10042fe3
cmp dword [ebp - 4], 0
je 0x10042fe3
mov dword [ebp - 0x688], 1
jmp 0x10042fea
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x688], eax
jle 0x10043004
mov dword [ebp - 0x7a4], 1
jmp 0x1004300b
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
sub eax, dword [ebp - 4]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x848], eax
jmp 0x10042e2a
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x10043052
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
mov dword [ebp - 0x90], 2
jmp 0x1004306b
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x100436e6
mov dword [ebp - 0x340], 5
mov dword [ebp - 0x33c], 5
mov dword [ebp - 0x338], 5
mov dword [ebp - 0x334], 5
mov dword [ebp - 0xc], 0xfffffff7
mov dword [ebp - 0x5f0], 0xaafe497d
mov dword [ebp - 0xc], 0
jmp 0x100430c1
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x100434dd
mov dword [ebp - 0x2c], 0xafd94fe5
mov dword [ebp - 0x2c], 3
jmp 0x100430e2
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x100434d8
mov dword [ebp - 0x98], 4
mov dword [ebp - 0x240], 0
jmp 0x1004310f
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x1004312b
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x8b0], 0
jmp 0x10043102
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8b0], 3
jmp 0x10043159
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8b0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b0], 0
jl 0x100434d3
mov dword [ebp - 0x7ac], 0x1bfedaac
mov dword [ebp - 0x4a8], 2
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x340], 0
je 0x10043472
mov dword [ebp - 0x208], 0
jmp 0x100431ab
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x100431c7
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x8fc], 0xb650ebf0
jmp 0x1004319e
cmp dword [ebp - 0xc], 0
jne 0x10043209
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x340], 0xffffffff
jl 0x100431e6
mov dword [ebp - 0x470], 1
jmp 0x100431ed
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x470]
imul eax, ecx
test eax, eax
jne 0x10043209
and dword [ebp - 0x5d8], 0
jmp 0x10043213
mov dword [ebp - 0x5d8], 1
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x340]
imul eax, dword [ebp - 0x5d8]
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0x340]
jle 0x1004323c
mov dword [ebp - 0x478], 1
jmp 0x10043243
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0
je 0x10043268
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b0], 0
je 0x10043268
mov dword [ebp - 0x710], 1
jmp 0x1004326f
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x340]
cmp dword [ebp - 0x710], eax
je 0x1004328d
mov dword [ebp - 0x480], 1
jmp 0x10043294
and dword [ebp - 0x480], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x340]
neg eax
add eax, dword [ebp - 0x480]
mov dword [ebp - 0x98], eax
jmp 0x100432bd
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x340]
cmp eax, dword [ebp - 0x5e0]
jl 0x100432e8
mov eax, 0x5cf8
test eax, eax
jne 0x100432e8
and dword [ebp - 0x488], 0
jmp 0x100432f2
mov dword [ebp - 0x488], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x340]
cmp dword [ebp - 0x488], eax
jl 0x10043313
mov dword [ebp - 0x690], 1
jmp 0x1004331a
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x7ac]
imul eax, dword [ebp - 0x690]
cmp eax, dword [ebp - 0xc]
jl 0x1004333d
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x4a8], eax
jmp 0x10043470
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x340]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x490]
mov dword [ebp + eax*4 - 0x340], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8fc]
cmp dword [ebp - 0x490], eax
jg 0x1004337e
mov dword [ebp - 0x844], 1
jmp 0x10043385
and dword [ebp - 0x844], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x340]
mov dword [ebp - 0x95c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8fc]
cmp dword [ebp - 0xc], eax
je 0x100433b5
mov dword [ebp - 0x5e8], 1
jmp 0x100433bc
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x5e8], eax
jne 0x100433d3
mov dword [ebp - 0x498], 1
jmp 0x100433da
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x498], eax
jne 0x100433f1
mov dword [ebp - 0x6e8], 1
jmp 0x100433f8
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x6e8]
jl 0x1004340f
mov dword [ebp - 0x4a0], 1
jmp 0x10043416
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
neg eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0
jmp 0x1004343d
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jg 0x10043470
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1004346e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x10043430
jmp 0x1004349c
mov dword [ebp - 0x7b4], 0xffffffff
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x5f0], eax
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x4a8], eax
cmp dword [ebp - 0x2c], 0
je 0x1004349c
jmp 0x100434d3
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x100434ce
push 0
push 0xab2
push 0x1aeb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x1004313e
jmp 0x100430db
jmp 0x100430ba
mov dword [ebp - 0x2e8], 0xc9b780f8
mov dword [ebp - 0x2a8], 0x1d97
mov dword [ebp - 0x7bc], 0xfffffff7
mov dword [ebp - 0x260], 0
jmp 0x10043514
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x10043530
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xb38], 0x1448112d
jmp 0x10043507
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x754], 0
jne 0x1004363d
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x698], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x698]
mov dword [ebp + eax - 0xb38], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x754]
add eax, dword [ebp - 0x698]
je 0x1004359e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb38], 0
je 0x1004359e
mov dword [ebp - 0x4b0], 1
jmp 0x100435a5
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x754]
cmp eax, dword [ebp - 0x4b0]
jle 0x100435c6
mov dword [ebp - 0x5f8], 1
jmp 0x100435cd
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x5f8], eax
jle 0x100435e7
mov dword [ebp - 0x4b8], 1
jmp 0x100435ee
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 2
jne 0x10043600
cmp dword [ebp - 0x148], 0
jne 0x10043618
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb38], 0
jne 0x10043618
and dword [ebp - 0x720], 0
jmp 0x10043622
mov dword [ebp - 0x720], 1
cmp dword [ebp - 0x720], 0
jne 0x1004363d
mov eax, 0xfa02
test eax, eax
jne 0x1004363d
and dword [ebp - 0x4c0], 0
jmp 0x10043647
mov dword [ebp - 0x4c0], 1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x4c0]
sub ecx, dword [ebp + eax*4 - 0x754]
cmp ecx, dword [ebp - 0x2a8]
jl 0x1004366e
mov dword [ebp - 0x600], 1
jmp 0x10043675
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x754]
sub eax, dword [ebp - 0x600]
cmp eax, dword [ebp - 0x2a8]
jg 0x1004369c
mov dword [ebp - 0x4c8], 1
jmp 0x100436a3
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x4c8], eax
jge 0x100436bd
mov dword [ebp - 0x84c], 1
jmp 0x100436c4
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x128]
add eax, 0x37d08bb2
mov dword [ebp - 0x7bc], eax
jmp 0x1004305e
mov dword [ebp - 0x1a4], 0
jmp 0x100436ff
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 2
jg 0x100437cd
mov dword [ebp - 0x128], 2
jmp 0x10043725
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x100437ac
mov dword [ebp - 0x148], 0
jmp 0x10043747
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 2
jg 0x10043792
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10043790
push 0
push 0x16c5
push 0
push 0
push 0x28e
push 0x1423
push 0x33a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
jmp 0x1004373a
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp + eax*4 - 0x754], 0
je 0x100437a7
jmp 0x10043718
jmp 0x10043718
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x100437c8
push 0
push 0
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
jmp 0x100436f2
mov dword [ebp - 0x38], 0xe77d
mov dword [ebp - 0x210], 0x5b263d18
mov dword [ebp - 0x16c], 0xaff6
mov dword [ebp - 0x80], 0xd0c11e04
mov dword [ebp - 0xe4], 0x9403
mov dword [ebp - 0x7c4], 0x694a2199
mov dword [ebp - 0x74], 0
jmp 0x10043813
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10043829
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x76c], 0xffffffff
jmp 0x1004380c
mov dword [ebp - 0x74], 0
jmp 0x10043839
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1004384f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xb9c], 0x6cf
jmp 0x10043832
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x964], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x76c]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x96c], eax
mov eax, 0xdfb
cmp eax, 0xfffffffa
jle 0x1004388a
mov dword [ebp - 0x2f0], 1
jmp 0x10043891
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x76c], ecx
mov eax, dword [ebp - 0x2f0]
neg eax
cmp dword [ebp - 0x80], eax
jge 0x100438c4
mov dword [ebp - 0x854], 1
jmp 0x100438cb
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xb04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x76c]
add eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x38]
jle 0x100438fb
mov dword [ebp - 0x6a0], 1
jmp 0x10043902
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x210]
add eax, dword [ebp - 0x6a0]
jne 0x10043928
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x76c], 0
jne 0x10043928
and dword [ebp - 0x4d0], 0
jmp 0x10043932
mov dword [ebp - 0x4d0], 1
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
add eax, 0xe0c2
cmp dword [ebp - 0x38], eax
jne 0x1004395a
mov dword [ebp - 0x608], 1
jmp 0x10043961
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x608], eax
jle 0x10043978
mov dword [ebp - 0x4d8], 1
jmp 0x1004397f
and dword [ebp - 0x4d8], 0
imul eax, dword [ebp - 0x4d8], 0xfff8
mov dword [ebp - 0x7c4], eax
mov dword [ebp - 0x80], 0x19
jmp 0x1004399f
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xc
jg 0x10043b1d
mov dword [ebp - 0x194], 3
mov dword [ebp - 0x2b0], 1
mov dword [ebp - 0x16c], 2
jmp 0x100439d6
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x10043a5b
mov dword [ebp - 0xe4], 2
jmp 0x100439f8
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x10043a41
mov dword [ebp - 0x38], 2
jmp 0x10043a11
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10043a3f
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10043a3d
push 0xf70
push 0
push 0x13e6
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x10043a0a
jmp 0x100439eb
mov eax, dword [ebp - 0x16c]
cmp dword [ebp + eax*4 - 0x76c], 0
je 0x10043a56
jmp 0x100439c9
jmp 0x100439c9
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x194], eax
jle 0x10043a7e
mov dword [ebp - 0x850], 1
jmp 0x10043a85
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x7cc], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7cc]
mov dword [ebp + eax - 0x76c], ecx
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x2b0]
add eax, dword [ebp - 0xe4]
cmp eax, 0xffffffff
jne 0x10043acc
mov dword [ebp - 0x890], 1
jmp 0x10043ad3
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x97c], eax
mov eax, dword [ebp - 0x194]
sub eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x2b0]
je 0x10043aff
mov dword [ebp - 0x6f0], 1
jmp 0x10043b06
and dword [ebp - 0x6f0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6f0]
mov dword [ebp + eax - 0xb9c], ecx
jmp 0x10043998
mov dword [ebp - 0x1c0], 1
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x218], 0x51e
mov dword [ebp - 0x248], 0
jmp 0x10043b54
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x10043b70
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x34c], 1
jmp 0x10043b47
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
jne 0x10043b94
cmp dword [ebp - 0x218], 0xfff9
je 0x10043b94
and dword [ebp - 0x4e0], 0
jmp 0x10043b9e
mov dword [ebp - 0x4e0], 1
mov eax, dword [ebp - 0x4e0]
neg eax
jne 0x10043bba
mov eax, 0x5943e2f7
test eax, eax
jne 0x10043bba
and dword [ebp - 0x610], 0
jmp 0x10043bc4
mov dword [ebp - 0x610], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
sub eax, dword [ebp - 0x610]
cmp eax, 0x3e75
jle 0x10043be9
mov dword [ebp - 0x4e8], 1
jmp 0x10043bf0
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x174]
neg eax
imul ecx, dword [ebp - 0x4e8], 0
cmp eax, ecx
jle 0x10043c0f
mov dword [ebp - 0x6a8], 1
jmp 0x10043c16
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x34c]
jge 0x10043c39
mov dword [ebp - 0x4f0], 1
jmp 0x10043c40
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0xfffffffd
jle 0x10043c55
mov dword [ebp - 0x618], 1
jmp 0x10043c5c
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 2
jb 0x10043c71
mov dword [ebp - 0x4f8], 1
jmp 0x10043c78
and dword [ebp - 0x4f8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x4f8], eax
je 0x10043c98
mov dword [ebp - 0x7d4], 1
jmp 0x10043c9f
and dword [ebp - 0x7d4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0x928], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0x984], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x34c], 0
je 0x10043ce3
xor eax, eax
inc eax
je 0x10043ce3
mov dword [ebp - 0x704], 1
jmp 0x10043cea
and dword [ebp - 0x704], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
imul eax, dword [ebp - 0x704]
test eax, eax
jne 0x10043d12
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x10043d12
and dword [ebp - 0x500], 0
jmp 0x10043d1c
mov dword [ebp - 0x500], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x500], eax
jge 0x10043d3d
mov dword [ebp - 0x620], 1
jmp 0x10043d44
and dword [ebp - 0x620], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x620]
mov dword [ebp + eax - 0x34c], ecx
mov dword [ebp - 0x174], 0
jmp 0x10043d6f
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xfffffff6
jg 0x10043d97
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x10043d95
push 0x851
call dword [sym.imp.USER32.dll_MessageBeep]
jmp 0x10043d62
mov dword [ebp - 0x270], 0
jmp 0x10043db0
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x10043dcc
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xbbc], 0x5f70ad6f
jmp 0x10043da3
mov dword [ebp - 0x628], 2
mov dword [ebp - 0x508], 0
mov dword [ebp - 0x858], 0xc58f
mov dword [ebp - 0xa7c], 0x8748afa2
mov dword [ebp - 0x2ec], 0xfffffffd
mov dword [ebp - 0x220], 0
jmp 0x10043e17
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 4
jge 0x10043e33
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x914], 0xfffffffa
jmp 0x10043e0a
mov eax, dword [ebp - 0x2ec]
dec eax
mov dword [ebp - 0x2ec], eax
mov dword [ebp - 0x508], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x914]
cmp dword [ebp - 0x508], eax
jne 0x10043e6a
mov dword [ebp - 0x6b0], 1
jmp 0x10043e71
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x628]
cmp eax, dword [ebp - 0x6b0]
jl 0x10043e8b
mov dword [ebp - 0x510], 1
jmp 0x10043e92
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x858]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x914]
add ecx, dword [ebp - 0x2ec]
sub eax, ecx
imul eax, dword [ebp - 0x510]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x914]
jne 0x10043ecd
mov dword [ebp - 0x7dc], 1
jmp 0x10043ed4
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0x98c], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov eax, dword [ebp + eax - 0x914]
mov dword [ebp + ecx - 0x914], eax
mov dword [ebp - 0x1c0], 0
jmp 0x10043f11
cmp dword [ebp - 0x1c0], 2
jg 0x10044542
mov dword [ebp - 0x8a4], 0xfa2f
mov dword [ebp - 0x8a4], 1
mov dword [ebp - 0x40], 9
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x1cc], 0
jmp 0x10043f5c
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x10043f78
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xa18], 0
jmp 0x10043f4f
mov dword [ebp - 0x40], 0x1c
jmp 0x10043f88
cmp dword [ebp - 0x40], 0x14
jl 0x10044187
mov dword [ebp - 0xf4], 0xfffffffb
mov dword [ebp - 0x518], 2
mov dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x518], eax
mov eax, dword [ebp - 0x518]
cmp dword [ebp - 0xf4], eax
jle 0x10043fe2
mov dword [ebp - 0x630], 1
jmp 0x10043fe9
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0xec]
add eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xf4]
jge 0x1004400c
mov dword [ebp - 0x6f8], 1
jmp 0x10044013
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x6f8]
imul eax, eax, 0xffff
imul eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xec]
jge 0x1004403d
mov dword [ebp - 0x520], 1
jmp 0x10044044
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x520]
cmp dword [ebp - 0x630], eax
jg 0x10044065
mov dword [ebp - 0x528], 1
jmp 0x1004406c
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 1
jne 0x10044087
mov dword [ebp - 0x50], 0x47a6deec
mov dword [ebp - 0x860], 0x28abf8b2
mov dword [ebp - 0x48], 0
jmp 0x100441a8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x100441be
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x13c], 0x68ec0ae9
jmp 0x100441a1
mov dword [ebp - 0x48], 0
jmp 0x100441ce
cmp dword [ebp - 0x48], 4
jge 0x100441e4
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xb5c], 0xffffffff
jmp 0x100441c7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x13c], 0xffffffe3
jmp 0x10044212
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x330], 0xfffffffb
mov dword [ebp - 0x32c], 0xfffffffb
mov dword [ebp - 0x328], 0xfffffffb
mov dword [ebp - 0x324], 0xfffffffb
mov dword [ebp - 0x84], 1
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100445a1
push 0xf12
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov dword [ebp - 0x10], 0
jmp 0x100445b1
cmp dword [ebp - 0x10], 0x1d
jle 0x10044ac0
mov dword [ebp - 0x2f4], 0x36be856d
mov dword [ebp - 0x20], 0x60813c27
mov dword [ebp - 0x2c8], 0xffffffff
mov dword [ebp - 0x1e4], 0
jmp 0x100445ef
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1004460b
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x280], 0x4ad3
jmp 0x100445e2
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10044645
push 0x74e
push 0x22d1
push 0x1593
push 0x131f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x280]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x280], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2f4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x280]
cmp dword [ebp - 0x2f4], eax
jl 0x10044693
mov dword [ebp - 0x39c], 1
jmp 0x1004469a
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x10], eax
jg 0x100446ae
mov dword [ebp - 0x394], 1
jmp 0x100446b5
and dword [ebp - 0x394], 0
cmp dword [ebp - 0x394], 0
jge 0x100446cc
mov dword [ebp - 0x17c], 0x53b26bdd
mov dword [ebp - 0x804], 0xfffffff8
mov dword [ebp - 0x17c], 0
jmp 0x10044aed
cmp dword [ebp - 0x17c], 0xa
jl 0x10044beb
mov dword [ebp - 0x1bc], 7
mov dword [ebp - 0x1ec], 0
jmp 0x10044b1d
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10044b39
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xa24], 0xfb6318d5
jmp 0x10044b10
mov dword [ebp - 0x1bc], 0
jmp 0x10044b52
cmp dword [ebp - 0x1bc], 1
jg 0x10044bda
push 1
lea eax, [ebp - 0xbc8]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.10040d2d
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0xb84]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0xb84]
lea edi, [ebp - 0x8ec]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x8c], 0x860b4ffb
mov dword [ebp - 0x14c], 0xfffffff9
mov dword [ebp - 0x124], 0xaab39e22
mov dword [ebp - 0x19c], 4
mov dword [ebp - 0x1f4], 0
jmp 0x10044c5b
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jge 0x10044c77
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x748], 8
jmp 0x10044c4e
mov dword [ebp - 0x8c], 2
jmp 0x10044c90
cmp dword [ebp - 0x8c], 0
jl 0x10044ea6