Function at 0x100389de
Capabilities:
Compare security identifiers

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100656d6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x680
push esi
push edi
mov dword [ebp - 0xbc], 0x1f9c
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x508], 0xa27289ff
mov dword [ebp - 0x30c], 0xccd2466e
mov dword [ebp - 0x518], 1
mov dword [ebp - 0x350], 0xf3b
mov dword [ebp - 0x544], 1
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x54c], 1
mov dword [ebp - 0x12c], 0
jmp 0x10038a71
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 2
jge 0x10038a8d
mov eax, dword [ebp - 0x12c]
mov dword [ebp + eax*4 - 0x634], 0x64a11600
jmp 0x10038a64
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0xbc]
test eax, eax
je 0x10038c12
mov dword [ebp - 0x30c], 1
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x494]
cmp eax, dword [ebp - 0x510]
je 0x10038af8
mov dword [ebp - 0x480], 1
jmp 0x10038aff
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x488], eax
cmp dword [ebp - 0x488], 0
je 0x10038b27
push 6
pop eax
test eax, eax
je 0x10038b27
mov dword [ebp - 0x490], 1
jmp 0x10038b2e
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x490]
cmp eax, dword [ebp - 0x350]
jl 0x10038b4e
mov dword [ebp - 0x314], 1
jmp 0x10038b55
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x314]
jge 0x10038b6f
mov dword [ebp - 0x340], 1
jmp 0x10038b76
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 1
jle 0x10038b8b
mov dword [ebp - 0x1e4], 1
jmp 0x10038b92
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x518]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x634], ecx
imul eax, dword [ebp - 0x348], 0xfffffff6
cmp eax, dword [ebp - 0x544]
jl 0x10038bd2
mov dword [ebp - 0x1ec], 1
jmp 0x10038bd9
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0x1032
jg 0x10038bf1
mov dword [ebp - 0x1f4], 1
jmp 0x10038bf8
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x1f4], eax
jg 0x10038c12
mov dword [ebp - 0x358], 1
jmp 0x10038c19
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0
jne 0x10038c34
cmp dword [ebp - 0x54c], 0
jne 0x10038c34
and dword [ebp - 0x1fc], 0
jmp 0x10038c3e
mov dword [ebp - 0x1fc], 1
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x508], eax
mov dword [ebp - 0xc8], 0x1f9c
mov dword [ebp - 0x368], 1
mov dword [ebp - 0x4b4], 0xa27289ff
mov dword [ebp - 0x360], 0xccd2466e
mov dword [ebp - 0x504], 1
mov dword [ebp - 0x224], 0xf3b
mov dword [ebp - 0x4ac], 1
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x540], 1
mov dword [ebp - 0xf8], 0
jmp 0x10038cbd
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x10038cd9
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x60c], 0x64a11600
jmp 0x10038cb0
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0xc8]
test eax, eax
je 0x10038e5e
mov dword [ebp - 0x360], 1
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x4a8]
cmp eax, dword [ebp - 0x4a4]
je 0x10038d44
mov dword [ebp - 0x204], 1
jmp 0x10038d4b
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 0
je 0x10038d73
push 6
pop eax
test eax, eax
je 0x10038d73
mov dword [ebp - 0x20c], 1
jmp 0x10038d7a
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x224]
jl 0x10038d9a
mov dword [ebp - 0x370], 1
jmp 0x10038da1
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x370]
jge 0x10038dbb
mov dword [ebp - 0x214], 1
jmp 0x10038dc2
and dword [ebp - 0x214], 0
cmp dword [ebp - 0x214], 1
jle 0x10038dd7
mov dword [ebp - 0x378], 1
jmp 0x10038dde
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x504]
mov dword [ebp - 0x21c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x21c]
mov dword [ebp + eax - 0x60c], ecx
imul eax, dword [ebp - 0x21c], 0xfffffff6
cmp eax, dword [ebp - 0x4ac]
jl 0x10038e1e
mov dword [ebp - 0x380], 1
jmp 0x10038e25
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0x1032
jg 0x10038e3d
mov dword [ebp - 0x388], 1
jmp 0x10038e44
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x388], eax
jg 0x10038e5e
mov dword [ebp - 0x22c], 1
jmp 0x10038e65
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0
jne 0x10038e80
cmp dword [ebp - 0x540], 0
jne 0x10038e80
and dword [ebp - 0x390], 0
jmp 0x10038e8a
mov dword [ebp - 0x390], 1
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x4b4], eax
mov dword [ebp - 0xc4], 0x25b9b55b
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x150], 0
jmp 0x10038ec3
mov eax, dword [ebp - 0x150]
inc eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 1
jge 0x10038edf
mov eax, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0x1b0], 0x7689351f
jmp 0x10038eb6
mov dword [ebp - 0xc4], 0x18
jmp 0x10038ef8
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xffffffe6
jge 0x100392ba
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10], 0
jmp 0x10038f1c
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10038f3c
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x10038f3a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x10038f15
mov dword [ebp - 0x10], 0x11
jmp 0x10038f4c
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x11
jl 0x100392b5
mov dword [ebp - 0x168], 4
mov dword [ebp - 0x50c], 0x2478
cmp dword [ebp - 0x50c], 0x1204
jge 0x10039072
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0xc0]
push eax
push 0x10008380
call fcn.1004cd7b
add esp, 0x14
mov eax, dword [ebp - 0x234]
shl eax, 2
cvtsi2sd xmm0, eax
cvtsi2sd xmm1, dword [ebp - 0xc0]
mulsd xmm1, qword [0x10008478]
cvtsi2sd xmm2, dword [ebp - 0xc0]
mulsd xmm1, xmm2
cvtsi2sd xmm2, dword [ebp - 0x398]
mulsd xmm1, xmm2
comisd xmm1, xmm0
jb 0x10038fee
push 0x10008170
call fcn.1004d431
pop ecx
jmp 0x10039072
push 0x1000816c
call fcn.1004d431
pop ecx
cvtsi2sd xmm0, dword [ebp - 0xc0]
mulsd xmm0, qword [0x10008478]
cvtsi2sd xmm1, dword [ebp - 0xc0]
mulsd xmm0, xmm1
cvtsi2sd xmm1, dword [ebp - 0x4bc]
mulsd xmm0, xmm1
mov eax, dword [ebp - 0x234]
shl eax, 2
cvtsi2sd xmm1, eax
cvtsi2sd xmm2, dword [ebp - 0xc0]
mulsd xmm2, qword [0x10008478]
cvtsi2sd xmm3, dword [ebp - 0xc0]
mulsd xmm2, xmm3
cvtsi2sd xmm3, dword [ebp - 0x398]
mulsd xmm2, xmm3
subsd xmm1, xmm2
divsd xmm0, xmm1
push ecx
push ecx
movsd qword [esp], xmm0
push 0x10008414
call fcn.1004d1c8
add esp, 0xc
mov dword [ebp - 0x254], 0xffffffff
mov dword [ebp - 0x244], 0x9a5a165f
push 1
lea ecx, [ebp - 0x5b8]
call fcn.100248e9
and dword [ebp - 4], 0
mov dword [ebp - 0x158], 0
jmp 0x100390b0
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jge 0x100390d2
push dword [ebp - 0x158]
lea ecx, [ebp - 0x5b8]
call fcn.10024a46
mov dword [eax], 0x3d2afddf
jmp 0x100390a3
cmp dword [ebp - 0x10], 0
jne 0x100390e4
mov dword [ebp - 0x3c0], 1
jmp 0x100390eb
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x168], 0
je 0x10039208
mov eax, 0x7974
test eax, eax
je 0x1003911d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b0], 0
je 0x1003911d
mov dword [ebp - 0x23c], 1
jmp 0x10039124
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x168]
imul eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x10]
je 0x10039142
mov dword [ebp - 0x3a0], 1
jmp 0x10039149
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x244], eax
jle 0x1003916c
mov eax, 0x1a07
test eax, eax
jne 0x10039185
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b0], 0
jne 0x10039185
and dword [ebp - 0x3a8], 0
jmp 0x1003918f
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x3a8]
sub eax, 5
cmp eax, 0x86ca
jne 0x100391b4
cmp dword [ebp - 0x254], 0
je 0x100391b4
mov dword [ebp - 0x24c], 1
jmp 0x100391bb
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24c], eax
jne 0x100391d2
mov dword [ebp - 0x3b0], 1
jmp 0x100391d9
and dword [ebp - 0x3b0], 0
push 0
lea ecx, [ebp - 0x5b8]
call fcn.10024a46
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
cmp dword [ebp - 0x254], 0xfd09
jle 0x10039208
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1b0], 0
push 2
pop eax
test eax, eax
je 0x10039221
cmp dword [ebp - 0x10], 0
je 0x10039221
mov dword [ebp - 0x3b8], 1
jmp 0x10039228
and dword [ebp - 0x3b8], 0
imul eax, dword [ebp - 0x3b8], 0xffffffff
cmp eax, dword [ebp - 0x10]
jg 0x10039240
mov dword [ebp - 0x25c], 1
jmp 0x10039247
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x3c0], eax
jg 0x1003926d
cmp dword [ebp - 0x10], 0
je 0x1003926d
mov dword [ebp - 0x264], 1
jmp 0x10039274
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x264]
jge 0x1003928e
mov dword [ebp - 0x3c8], 1
jmp 0x10039295
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x578], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5b8]
call fcn.100249c2
jmp 0x10038f45
jmp 0x10038eeb
mov dword [ebp - 0xcc], 0x25b9b55b
mov dword [ebp - 0x4c4], 0
mov dword [ebp - 0x104], 0
jmp 0x100392e7
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jge 0x10039303
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0x198], 0x7689351f
jmp 0x100392da
mov dword [ebp - 0xcc], 0x18
jmp 0x1003931c
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0xffffffe6
jge 0x100395d5
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x14], 0
jmp 0x10039340
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10039366
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10039364
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x10039339
mov dword [ebp - 0x14], 0x11
jmp 0x10039376
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x11
jl 0x100395d0
mov dword [ebp - 0x170], 4
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0x274], 0x9a5a165f
push 1
lea ecx, [ebp - 0x5ac]
call fcn.100248e9
mov dword [ebp - 4], 1
mov dword [ebp - 0x144], 0
jmp 0x100393cb
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jge 0x100393ed
push dword [ebp - 0x144]
lea ecx, [ebp - 0x5ac]
call fcn.10024a46
mov dword [eax], 0x3d2afddf
jmp 0x100393be
cmp dword [ebp - 0x14], 0
jne 0x100393ff
mov dword [ebp - 0x3f0], 1
jmp 0x10039406
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x170], 0
je 0x10039523
mov eax, 0x7974
test eax, eax
je 0x10039438
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
je 0x10039438
mov dword [ebp - 0x26c], 1
jmp 0x1003943f
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x170]
imul eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x14]
je 0x1003945d
mov dword [ebp - 0x3d0], 1
jmp 0x10039464
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x274], eax
jle 0x10039487
mov eax, 0x1a07
test eax, eax
jne 0x100394a0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
jne 0x100394a0
and dword [ebp - 0x3d8], 0
jmp 0x100394aa
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x3d8]
sub eax, 5
cmp eax, 0x86ca
jne 0x100394cf
cmp dword [ebp - 0x284], 0
je 0x100394cf
mov dword [ebp - 0x27c], 1
jmp 0x100394d6
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x27c], eax
jne 0x100394ed
mov dword [ebp - 0x3e0], 1
jmp 0x100394f4
and dword [ebp - 0x3e0], 0
push 0
lea ecx, [ebp - 0x5ac]
call fcn.10024a46
mov ecx, dword [ebp - 0x3e0]
mov dword [eax], ecx
cmp dword [ebp - 0x284], 0xfd09
jle 0x10039523
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
push 2
pop eax
test eax, eax
je 0x1003953c
cmp dword [ebp - 0x14], 0
je 0x1003953c
mov dword [ebp - 0x3e8], 1
jmp 0x10039543
and dword [ebp - 0x3e8], 0
imul eax, dword [ebp - 0x3e8], 0xffffffff
cmp eax, dword [ebp - 0x14]
jg 0x1003955b
mov dword [ebp - 0x28c], 1
jmp 0x10039562
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x28c]
sub eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x3f0], eax
jg 0x10039588
cmp dword [ebp - 0x14], 0
je 0x10039588
mov dword [ebp - 0x294], 1
jmp 0x1003958f
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x294]
jge 0x100395a9
mov dword [ebp - 0x3f8], 1
jmp 0x100395b0
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x4c4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5ac]
call fcn.100249c2
jmp 0x1003936f
jmp 0x1003930f
mov dword [ebp - 0xd8], 0xec2e0cf5
mov dword [ebp - 0x2ac], 5
mov dword [ebp - 0x4cc], 0
mov dword [ebp - 0xd8], 0xfffffffc
jmp 0x1003960c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xa
jge 0x1003980e
mov dword [ebp - 0x38], 0x8cb4c23a
mov dword [ebp - 0x10c], 0
jmp 0x10039639
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 2
jge 0x10039655
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x1cc], 0xbb11accb
jmp 0x1003962c
mov dword [ebp - 0x38], 0
jmp 0x10039665
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x10039809
mov dword [ebp - 0x1c], 0x80d416db
mov dword [ebp - 0x1c], 1
jmp 0x10039686
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x100397dd
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x100396b5
push 0xa24
push 0x2359
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x1cc], 0x2b82
jge 0x100396d1
mov dword [ebp - 0x29c], 1
jmp 0x100396d8
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1cc]
add eax, dword [ebp - 0x29c]
cmp eax, 0xfffffff8
jbe 0x100396f9
mov dword [ebp - 0x400], 1
jmp 0x10039700
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x400], eax
jl 0x10039717
mov dword [ebp - 0x2a4], 1
jmp 0x1003971e
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x1cc]
cmp dword [ebp - 0x2a4], eax
je 0x10039742
mov eax, 0x6718
test eax, eax
jne 0x10039742
and dword [ebp - 0x408], 0
jmp 0x1003974c
mov dword [ebp - 0x408], 1
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x2ac], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x2ac], eax
jle 0x10039772
mov dword [ebp - 0x410], 1
jmp 0x10039779
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
add eax, 4
cmp eax, dword [ebp - 0x1c]
jle 0x10039793
mov dword [ebp - 0x514], 1
jmp 0x1003979a
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ebp + ecx*4 - 0x1cc]
cmp dword [ebp + eax*4 - 0x1cc], ecx
jl 0x100397c5
mov dword [ebp - 0x2b4], 1
jmp 0x100397cc
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x4cc], eax
jmp 0x1003967f
mov dword [ebp - 0x1c], 0
jmp 0x100397ed
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jg 0x10039804
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x1cc], 0
je 0x10039802
jmp 0x10039804
jmp 0x100397e6
jmp 0x1003965e
jmp 0x100395ff
movzx eax, byte [0x10f860c8]
test eax, eax
je 0x1003982c
mov esi, 0x10654e14
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1003bb2c
mov dword [ebp - 0x5f0], 0x10654e14
mov dword [ebp - 0x48], 8
mov dword [ebp - 0x548], 0xffffffff
mov dword [ebp - 0x4d4], 0
mov dword [ebp - 0x48], 0xd
jmp 0x10039861
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffff
je 0x100399ac
mov dword [ebp - 0xec], 0
mov dword [ebp - 0x684], 0
mov dword [ebp - 0x680], 0
mov dword [ebp - 0x67c], 0
mov dword [ebp - 0x678], 0
cmp dword [ebp - 0x48], 1
jb 0x100398af
mov dword [ebp - 0x418], 1
jmp 0x100398b6
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x548]
imul eax, dword [ebp - 0x48]
cmp eax, 0x8e1b8814
ja 0x100398d3
mov dword [ebp - 0x2bc], 1
jmp 0x100398da
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x418]
cmp eax, dword [ebp - 0x2bc]
jg 0x100398f4
mov dword [ebp - 0x420], 1
jmp 0x100398fb
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x420], eax
jl 0x10039915
mov dword [ebp - 0x2c4], 1
jmp 0x1003991c
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x2c4]
je 0x10039933
mov dword [ebp - 0x428], 1
jmp 0x1003993a
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x4d4], eax
mov dword [ebp - 0xec], 0
jmp 0x1003995f
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 3
jg 0x100399a7
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10039989
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x100399a5
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x10039952
jmp 0x1003985a
mov dword [ebp - 0x51c], 0x1cff
cmp dword [ebp - 0x51c], 0x45f
jge 0x10039ad2
lea eax, [ebp - 0x674]
push eax
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x178]
push eax
push 0x1000841c
call fcn.1004cd7b
add esp, 0x10
lea ecx, [ebp - 0x524]
call fcn.1003cfc9
mov dword [ebp - 4], 2
mov byte [ebp - 0x25], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x4dc], eax
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x4dc], 0
je 0x10039aa5
lea eax, [ebp - 0x568]
push eax
lea eax, [ebp - 0x2cc]
push eax
push 0x100080f8
call fcn.1004cd7b
add esp, 0xc
cvtsi2sd xmm0, dword [ebp - 0x2cc]
ucomisd xmm0, qword [ebp - 0x58c]
lahf
test ah, 0x44
jp 0x10039a5b
mov byte [ebp - 0x25], 1
jmp 0x10039aa0
cvtsi2sd xmm0, dword [ebp - 0x568]
subsd xmm0, qword [ebp - 0x674]
cvtsi2sd xmm1, dword [ebp - 0x2cc]
subsd xmm1, qword [ebp - 0x58c]
divsd xmm0, xmm1
movsd qword [ebp - 0x618], xmm0
lea eax, [ebp - 0x618]
push eax
lea eax, [ebp - 0x68c]
push eax
lea ecx, [ebp - 0x524]
call fcn.1003cfde
jmp 0x100399fe
lea ecx, [ebp - 0x524]
call fcn.1003cffc
movzx ecx, byte [ebp - 0x25]
add eax, ecx
push eax
push 0x100080d8
call fcn.1004d1c8
pop ecx
pop ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x524]
call fcn.10036d3c
mov dword [ebp - 0xe8], 0xec2e0cf5
mov dword [ebp - 0x440], 5
mov dword [ebp - 0x528], 0
mov dword [ebp - 0xe8], 0xfffffffc
jmp 0x10039b09
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xa
jge 0x10039d0b
mov dword [ebp - 0x3c], 0x8cb4c23a
mov dword [ebp - 0x134], 0
jmp 0x10039b36
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 2
jge 0x10039b52
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x1d4], 0xbb11accb
jmp 0x10039b29
mov dword [ebp - 0x3c], 0
jmp 0x10039b62
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jg 0x10039d06
mov dword [ebp - 0x18], 0x80d416db
mov dword [ebp - 0x18], 1
jmp 0x10039b83
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10039cda
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x10039bb2
push 0xa24
push 0x2359
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CreateCaret]
mov eax, dword [ebp - 0x3c]
cmp dword [ebp + eax*4 - 0x1d4], 0x2b82
jge 0x10039bce
mov dword [ebp - 0x430], 1
jmp 0x10039bd5
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1d4]
add eax, dword [ebp - 0x430]
cmp eax, 0xfffffff8
jbe 0x10039bf6
mov dword [ebp - 0x2d4], 1
jmp 0x10039bfd
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2d4], eax
jl 0x10039c14
mov dword [ebp - 0x438], 1
jmp 0x10039c1b
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x1d4]
cmp dword [ebp - 0x438], eax
je 0x10039c3f
mov eax, 0x6718
test eax, eax
jne 0x10039c3f
and dword [ebp - 0x2dc], 0
jmp 0x10039c49
mov dword [ebp - 0x2dc], 1
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x440], eax
jle 0x10039c6f
mov dword [ebp - 0x2e4], 1
jmp 0x10039c76
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
add eax, 4
cmp eax, dword [ebp - 0x18]
jle 0x10039c90
mov dword [ebp - 0x4e4], 1
jmp 0x10039c97
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x3c]
mov ecx, dword [ebp + ecx*4 - 0x1d4]
cmp dword [ebp + eax*4 - 0x1d4], ecx
jl 0x10039cc2
mov dword [ebp - 0x448], 1
jmp 0x10039cc9
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x528], eax
jmp 0x10039b7c
mov dword [ebp - 0x18], 0
jmp 0x10039cea
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x10039d01
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x1d4], 0
je 0x10039cff
jmp 0x10039d01
jmp 0x10039ce3
jmp 0x10039b5b
jmp 0x10039afc
mov dword [ebp - 0x5f8], 0x10654e18
mov dword [ebp - 0x50], 8
mov dword [ebp - 0x4ec], 0xffffffff
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x50], 0xd
jmp 0x10039d40
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffff
je 0x10039e8b
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0x648], 0
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x640], 0
mov dword [ebp - 0x63c], 0
cmp dword [ebp - 0x50], 1
jb 0x10039d8e
mov dword [ebp - 0x2ec], 1
jmp 0x10039d95
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x4ec]
imul eax, dword [ebp - 0x50]
cmp eax, 0x8e1b8814
ja 0x10039db2
mov dword [ebp - 0x450], 1
jmp 0x10039db9
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x2ec]
cmp eax, dword [ebp - 0x450]
jg 0x10039dd3
mov dword [ebp - 0x2f4], 1
jmp 0x10039dda
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x2f4], eax
jl 0x10039df4
mov dword [ebp - 0x458], 1
jmp 0x10039dfb
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x458]
je 0x10039e12
mov dword [ebp - 0x2fc], 1
jmp 0x10039e19
and dword [ebp - 0x2fc], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x52c], eax
mov dword [ebp - 0xd0], 0
jmp 0x10039e3e
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jg 0x10039e86
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x10039e68
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov byte [ebp - 0x81], 0
movzx eax, byte [ebp - 0x81]
test eax, eax
je 0x10039e84
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_EqualSid]
jmp 0x10039e31
jmp 0x10039d39
mov dword [ebp - 0x1b4], 0xfffffffe
mov dword [ebp - 0x60], 0x7555b7ce
cmp dword [ebp - 0x1b4], 0
je 0x10039fdb
mov dword [ebp - 0x478], 0xfffffff9
mov dword [ebp - 0x58], 0xfffffffa
mov dword [ebp - 0x3d4], 0xfffffff8
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x650], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5c8], eax
push 6
pop eax
test eax, eax
je 0x10039f07
cmp dword [ebp - 0x58], 0
je 0x10039f07
mov dword [ebp - 0x460], 1
jmp 0x10039f0e
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x460]
je 0x10039f25
mov dword [ebp - 0x304], 1
jmp 0x10039f2c
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x304], eax
jne 0x10039f46
mov dword [ebp - 0x468], 1
jmp 0x10039f4d
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x33e3
je 0x10039f65
mov dword [ebp - 0x1d8], 1
jmp 0x10039f6c
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x2632
jle 0x10039f84
mov dword [ebp - 0x470], 1
jmp 0x10039f8b
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x5e4], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x3d4]
jne 0x10039fc6
cmp dword [ebp - 0x58], 0
jne 0x10039fc6
and dword [ebp - 0x31c], 0
jmp 0x10039fd0
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x60], eax
jmp 0x1003a04e
push 2
lea ecx, [ebp - 0x5c4]
call fcn.100248e9
mov dword [ebp - 4], 3
mov dword [ebp - 0x114], 0
jmp 0x1003a008
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 2
jge 0x1003a02a
push dword [ebp - 0x114]
lea ecx, [ebp - 0x5c4]
call fcn.10024a46
mov dword [eax], 0xe8f59172
jmp 0x10039ffb
mov esi, dword [ebp - 0x1b4]
push 0
lea ecx, [ebp - 0x5c4]
call fcn.10024a46
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c4]
call fcn.100249c2
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1003a068
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov byte [0x10f860c8], 1
mov dword [ebp - 0x4f4], 0x1962
cmp dword [ebp - 0x4f4], 0x6c3
jge 0x1003a20b
lea eax, [ebp - 0x53c]
push eax
lea eax, [ebp - 0xe0]
push eax
push 0x100080f8
call fcn.1004cd7b
add esp, 0xc
push dword [ebp - 0xe0]
lea ecx, [ebp - 0x564]
call fcn.100248e9
mov dword [ebp - 4], 4
and dword [ebp - 0x154], 0
jmp 0x1003a0d2
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0xe0]
jge 0x1003a100
push dword [ebp - 0x154]
lea ecx, [ebp - 0x564]
call fcn.10024a46
push eax
push 0x100080bc
call fcn.1004cd7b
pop ecx
pop ecx
jmp 0x1003a0c5
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x68], eax
and dword [ebp - 0x11c], 0
jmp 0x1003a11f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xe0]
jge 0x1003a15d
cmp dword [ebp - 0x68], 0
jg 0x1003a135
jmp 0x1003a15d
push dword [ebp - 0x11c]
lea ecx, [ebp - 0x564]
call fcn.10024a46
push dword [eax]
push 0x1000842c
call fcn.1004d1c8
pop ecx
pop ecx
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
jmp 0x1003a112
and dword [ebp - 0xd4], 0
jmp 0x1003a173
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0xe0]
jge 0x1003a1fc
cmp dword [ebp - 0x68], 0
jg 0x1003a189
jmp 0x1003a1fc
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0x13c], eax
jmp 0x1003a1a5
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0xe0]
jge 0x1003a1f7
cmp dword [ebp - 0x68], 0
jg 0x1003a1bb
jmp 0x1003a1f7
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x564]
call fcn.10024a46
push dword [eax]
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x564]
call fcn.10024a46
push dword [eax]
push 0x10008434
call fcn.1004d1c8
add esp, 0xc
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
jmp 0x1003a198
jmp 0x1003a166
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x564]
call fcn.10024a9b
push 2
lea ecx, [ebp - 0x65c]
call fcn.100248e9
mov dword [ebp - 4], 5
mov dword [ebp - 0x14c], 0x490c4d8e
mov dword [ebp - 0x5f4], 0x5f0ed1ad
mov dword [ebp - 0x5fc], 0xdc660f7e
mov dword [ebp - 0x124], 0
jmp 0x1003a256
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jge 0x1003a275
push dword [ebp - 0x124]
lea ecx, [ebp - 0x65c]
call fcn.10024a46
and dword [eax], 0
jmp 0x1003a249
mov dword [ebp - 0x14c], 0
jmp 0x1003a28e
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jg 0x1003a2fc
mov dword [ebp - 0xfc], 0xe31d8329
mov dword [ebp - 0x604], 5
mov dword [ebp - 0x434], 0xcc59
mov dword [ebp - 0xfc], 0
jmp 0x1003a2ce
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x1003a2fa
mov eax, dword [ebp - 0x434]
dec eax
mov dword [ebp - 0x434], eax
mov byte [ebp - 0x79], 0
movzx eax, byte [ebp - 0x79]
test eax, eax
je 0x1003a2f8
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1003a2c1
jmp 0x1003a281
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x65c]
call fcn.100249c2
mov dword [ebp - 0x180], 0xfffffffe
mov dword [ebp - 0x78], 0x7555b7ce
cmp dword [ebp - 0x180], 0
je 0x1003a45b
mov dword [ebp - 0x3e4], 0xfffffff9
mov dword [ebp - 0x70], 0xfffffffa
mov dword [ebp - 0x33c], 0xfffffff8
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x33c], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x61c], eax
push 6
pop eax
test eax, eax
je 0x1003a387
cmp dword [ebp - 0x70], 0
je 0x1003a387
mov dword [ebp - 0x324], 1
jmp 0x1003a38e
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x324]
je 0x1003a3a5
mov dword [ebp - 0x3dc], 1
jmp 0x1003a3ac
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x3dc], eax
jne 0x1003a3c6
mov dword [ebp - 0x32c], 1
jmp 0x1003a3cd
and dword [ebp - 0x32c], 0
cmp dword [ebp - 0x32c], 0x33e3
je 0x1003a3e5
mov dword [ebp - 0x464], 1
jmp 0x1003a3ec
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0x2632
jle 0x1003a404
mov dword [ebp - 0x334], 1
jmp 0x1003a40b
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x624], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x62c], eax
mov eax, dword [ebp - 0x78]
add eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x33c]
jne 0x1003a446
cmp dword [ebp - 0x70], 0
jne 0x1003a446
and dword [ebp - 0x43c], 0
jmp 0x1003a450
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x78], eax
jmp 0x1003a4ce
push 2
lea ecx, [ebp - 0x5a0]
call fcn.100248e9
mov dword [ebp - 4], 6
mov dword [ebp - 0x100], 0
jmp 0x1003a488
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x1003a4aa
push dword [ebp - 0x100]
lea ecx, [ebp - 0x5a0]
call fcn.10024a46
mov dword [eax], 0xe8f59172
jmp 0x1003a47b
mov esi, dword [ebp - 0x180]
push 0
lea ecx, [ebp - 0x5a0]
call fcn.10024a46
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5a0]
call fcn.100249c2
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1003a4e2
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
mov dword [ebp - 0x80], 4
mov dword [ebp - 0x80], 0x1b
jmp 0x1003a4f9
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x1b
jne 0x1003a5d2
push 1
lea ecx, [ebp - 0x574]
call fcn.100248e9
mov dword [ebp - 4], 7
mov dword [ebp - 0x108], 0
jmp 0x1003a530
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
jge 0x1003a552
push dword [ebp - 0x108]
lea ecx, [ebp - 0x574]
call fcn.10024a46
mov dword [eax], 0x665683c8
jmp 0x1003a523
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a46
and dword [eax], 0
jmp 0x1003a588
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a46
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x344]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x574]
call fcn.10024a46
cmp dword [eax], 5
jle 0x1003a5be
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1003a5bc
push 0x6b1
push 0x1f57
call dword [sym.imp.USER32.dll_SetCaretPos]
jmp 0x1003a564
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x574]
call fcn.100249c2
jmp 0x1003a4f2
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x80], eax
jle 0x1003a5e6
mov dword [ebp - 0x3ec], 1
jmp 0x1003a5ed
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x80], eax
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10654bd0
mov dword [ebp - 0x220], eax
mov dword [ebp - 0x20], 0xffffffff
push 1
lea ecx, [ebp - 0x584]
call fcn.100248e9
mov dword [ebp - 4], 8
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x110], 0
jmp 0x1003a645
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x1003a667
push dword [ebp - 0x110]
lea ecx, [ebp - 0x584]
call fcn.10024a46
mov dword [eax], 0xfffffffd
jmp 0x1003a638
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x1003a680
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x20], 0x71c7bf0b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x638], eax
cmp dword [ebp - 0x20], 0
jne 0x1003a6d3
cmp dword [ebp - 0x20], 0
je 0x1003a6af
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1003a6af
mov dword [ebp - 0x34c], 1
jmp 0x1003a6b6
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
sub eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x1003a6d3
cmp dword [ebp - 0x20], 0
jne 0x1003a6d3
and dword [ebp - 0x1a0], 0
jmp 0x1003a6dd
mov dword [ebp - 0x1a0], 1
push 0
lea ecx, [ebp - 0x584]
call fcn.10024a46
mov ecx, dword [ebp - 0x1a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1a0], eax
jl 0x1003a709
mov dword [ebp - 0x47c], 1
jmp 0x1003a710
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x20]
lea eax, [eax + ecx + 0x3b288586]
cmp eax, 2
jle 0x1003a734
mov dword [ebp - 0x354], 1
jmp 0x1003a73b
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0x354]
sub eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x34]
je 0x1003ac00
push 2
lea ecx, [ebp - 0x1c0]
call fcn.100248e9
mov byte [ebp - 4], 9
mov dword [ebp - 0x374], 0xb1aa435c
mov dword [ebp - 0x4b0], 0
mov dword [ebp - 0x118], 0
jmp 0x1003a78b
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 2
jge 0x1003a7ad
push dword [ebp - 0x118]
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov dword [eax], 0x1dbdae4
jmp 0x1003a77e
mov dword [ebp - 0x34], 5
jmp 0x1003a7bd
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffffb
jne 0x1003aaa5
mov dword [ebp - 0x4fc], 0x1b06
cmp dword [ebp - 0x4fc], 0x1069
jge 0x1003aa71
lea eax, [ebp - 0x4a0]
push eax
lea eax, [ebp - 0x49c]
push eax
lea eax, [ebp - 0x164]
push eax
push 0x10008340
call fcn.1004cd7b
add esp, 0x10
and dword [ebp - 0x188], 0
jmp 0x1003a819
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
cmp eax, dword [ebp - 0x49c]
jge 0x1003a876
lea eax, [ebp - 0x35c]
push eax
lea eax, [ebp - 0x3f4]
push eax
push 0x100081b0
call fcn.1004cd7b
add esp, 0xc
lea eax, [ebp - 0x35c]
push eax
imul ecx, dword [ebp - 0x3f4], 0xc
add ecx, 0x10f858e0
call fcn.10024947
lea eax, [ebp - 0x3f4]
push eax
imul ecx, dword [ebp - 0x35c], 0xc
add ecx, 0x10f858e0
call fcn.10024947
jmp 0x1003a80c
push 0xa6
push 1
push 0x10dfe3d8
call fcn.10044b17
add esp, 0xc
and dword [ebp - 0x1c4], 0
jmp 0x1003a8a0
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
cmp eax, dword [ebp - 0x4a0]
jge 0x1003a927
lea eax, [ebp - 0x160]
push eax
push 0x100080b8
call fcn.1004cd7b
pop ecx
pop ecx
mov eax, dword [ebp - 0x160]
mov byte [eax + 0x10dfe3d8], 0
imul ecx, dword [ebp - 0x160], 0xc
add ecx, 0x10f858e0
call fcn.10024a3d
dec eax
mov dword [ebp - 0x120], eax
jmp 0x1003a8f6
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1003a922
push dword [ebp - 0x120]
imul ecx, dword [ebp - 0x160], 0xc
add ecx, 0x10f858e0
call fcn.10024a46
mov eax, dword [eax]
mov byte [eax + 0x10dfe3d8], 0
jmp 0x1003a8e9
jmp 0x1003a893
mov dword [ebp - 0xdc], 1
jmp 0x1003a940
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x164]
jg 0x1003a963
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xdc]
mov dword [eax*4 + 0x10dfe480], ecx
jmp 0x1003a933
mov dword [ebp - 0x40], 1
jmp 0x1003a973
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x164]
jg 0x1003aa08
mov eax, dword [ebp - 0x40]
movzx eax, byte [eax + 0x10dfe3d8]
test eax, eax
je 0x1003aa03
imul ecx, dword [ebp - 0x40], 0xc
add ecx, 0x10f858e0
call fcn.10024a3d
dec eax
mov dword [ebp - 0xe4], eax
jmp 0x1003a9b5
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x1003aa03
push dword [ebp - 0xe4]
imul ecx, dword [ebp - 0x40], 0xc
add ecx, 0x10f858e0
call fcn.10024a46
mov eax, dword [eax]
movzx eax, byte [eax + 0x10dfe3d8]
test eax, eax
je 0x1003aa01
push dword [ebp - 0xe4]
imul ecx, dword [ebp - 0x40], 0xc
add ecx, 0x10f858e0
call fcn.10024a46
push dword [eax]
push dword [ebp - 0x40]
call fcn.100389b4
pop ecx
pop ecx
jmp 0x1003a9a8
jmp 0x1003a96c
and dword [ebp - 0x16c], 0
mov dword [ebp - 0x128], 1
jmp 0x1003aa28
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x164]
jg 0x1003aa5f
push dword [ebp - 0x128]
call fcn.1003897c
pop ecx
mov esi, eax
push 1
call fcn.1003897c
pop ecx
cmp esi, eax
je 0x1003aa5d
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
jmp 0x1003aa1b
push dword [ebp - 0x16c]
push 0x100080c8
call fcn.1004d1c8
pop ecx
pop ecx
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1003aa89
call dword [sym.imp.USER32.dll_WaitMessage]
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
cmp dword [eax], 0
je 0x1003aaa0
jmp 0x1003a7b6
jmp 0x1003a7b6
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
cmp dword [eax], 0xef34ea88
jbe 0x1003aad3
mov dword [ebp - 0x444], 1
jmp 0x1003aada
and dword [ebp - 0x444], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov eax, dword [eax]
cmp eax, dword [ebp - 0x444]
jle 0x1003aafd
mov dword [ebp - 0x498], 1
jmp 0x1003ab04
and dword [ebp - 0x498], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov esi, dword [ebp - 0x20]
push 0
lea ecx, [ebp - 0x584]
call fcn.10024a46
sub esi, dword [eax]
cmp esi, 0x9c3f9080
ja 0x1003ab37
mov dword [ebp - 0x364], 1
jmp 0x1003ab3e
and dword [ebp - 0x364], 0
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov ecx, dword [ebp - 0x364]
cmp ecx, dword [eax]
jle 0x1003ab61
mov dword [ebp - 0x3fc], 1
jmp 0x1003ab68
and dword [ebp - 0x3fc], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3fc]
jg 0x1003ab8b
mov dword [ebp - 0x36c], 1
jmp 0x1003ab92
and dword [ebp - 0x36c], 0
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov esi, eax
push 0
lea ecx, [ebp - 0x1c0]
call fcn.10024a46
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax]
imul ecx, dword [esi]
cmp ecx, 0x9cbadbef
jbe 0x1003abcd
mov dword [ebp - 0x46c], 1
jmp 0x1003abd4
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x4b0], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1c0]
call fcn.100249c2
jmp 0x1003ad5f
mov dword [ebp - 0x48c], 0xca12535b
mov dword [ebp - 0x384], 0xfffffffa
mov dword [ebp - 0x4b8], 0x9cad
mov dword [ebp - 0x174], 0xffffffff
mov eax, dword [ebp - 0x48c]
add eax, 0x3dc28bf3
cmp eax, dword [ebp - 0x34]
jl 0x1003ac44
mov dword [ebp - 0x404], 1
jmp 0x1003ac4b
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x404], eax
jg 0x1003ac65
mov dword [ebp - 0x37c], 1
jmp 0x1003ac6c
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jne 0x1003ac8e
xor eax, eax
jne 0x1003ac8e
and dword [ebp - 0x44c], 0
jmp 0x1003ac98
mov dword [ebp - 0x44c], 1
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x44c], eax
jle 0x1003acaf
mov dword [ebp - 0x40c], 1
jmp 0x1003acb6
and dword [ebp - 0x40c], 0
mov dword [ebp - 0x384], 0x64c7272f
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x40c]
jge 0x1003acda
mov dword [ebp - 0x38c], 1
jmp 0x1003ace1
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
add eax, 0x954a
cmp eax, 5
jge 0x1003acfd
mov dword [ebp - 0x414], 1
jmp 0x1003ad04
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x394], eax
push 0
lea ecx, [ebp - 0x584]
call fcn.10024a46
mov ecx, dword [ebp - 0x394]
mov dword [eax], ecx
mov eax, dword [ebp - 0x394]
cmp eax, dword [ebp - 0x414]
jne 0x1003ad3f
mov dword [ebp - 0x39c], 1
jmp 0x1003ad46
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x1a7d
jl 0x1003ad59
cmp dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x584]
call fcn.100249c2
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10654bd0
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x90], 8
mov dword [ebp - 0x88], 0xffff
mov dword [ebp - 0x17c], 0x7dcda720
mov dword [ebp - 0x3bc], 5
mov dword [ebp - 0x4c8], 8
cmp dword [ebp - 0x90], 0
je 0x1003aee5
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x64c], eax
cmp dword [ebp - 0x88], 8
jne 0x1003addf
mov dword [ebp - 0x454], 1
jmp 0x1003ade6
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x454]
cmp dword [ebp - 0x90], eax
jle 0x1003ae06
mov dword [ebp - 0x3a4], 1
jmp 0x1003ae0d
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
sub eax, dword [ebp - 0x88]
cmp dword [ebp - 0x90], eax
jle 0x1003ae2d
mov dword [ebp - 0x4c0], 1
jmp 0x1003ae34
and dword [ebp - 0x4c0], 0
cmp dword [ebp - 0x88], 0
jne 0x1003ae4b
or eax, 0xffffffff
jne 0x1003ae4b
and dword [ebp - 0x41c], 0
jmp 0x1003ae55
mov dword [ebp - 0x41c], 1
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x41c]
mov dword [ebp - 0x17c], eax
mov eax, dword [ebp - 0x17c]
inc eax
cmp eax, dword [ebp - 0x90]
je 0x1003ae82
mov dword [ebp - 0x3ac], 1
jmp 0x1003ae89
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x3ac]
cmp eax, 0xbf11
jl 0x1003aea8
mov dword [ebp - 0x474], 1
jmp 0x1003aeaf
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x474], eax
jne 0x1003aec9
mov dword [ebp - 0x3b4], 1
jmp 0x1003aed0
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0
jle 0x1003aee5
mov dword [ebp - 0x424], 1
jmp 0x1003aeec
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
jne 0x1003af13
cmp dword [ebp - 0x17c], 0
jne 0x1003af13
and dword [ebp - 0x45c], 0
jmp 0x1003af1d
mov dword [ebp - 0x45c], 1
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x90]
jne 0x1003af3d
mov dword [ebp - 0x3c4], 1
jmp 0x1003af44
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x4c8], eax
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1003af7c
push 0
push 0x84f
push 0x5d6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov eax, dword [ebp - 0x220]
mov dword [0x10654e14], eax
mov dword [ebp - 0x98], 9
mov dword [ebp - 0x330], 7
mov dword [ebp - 0x4d0], 0xfffffffc
mov dword [ebp - 0x5d4], 0xee676845
mov dword [ebp - 0x98], 0xc
jmp 0x1003afc8
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1003b1f1
mov dword [ebp - 0x42c], 0xffffffff
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0x2c], 0
jmp 0x1003aff9
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003b00f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x594], 0x3989226c
jmp 0x1003aff2
mov dword [ebp - 0x2c], 0
jmp 0x1003b01f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1003b035
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x5d0], 0xffffffff
jmp 0x1003b018
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0x594], ecx
cmp dword [ebp - 0x3cc], 0
jne 0x1003b10b
mov eax, dword [ebp - 0x98]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x594]
cmp eax, 4
jbe 0x1003b091
mov dword [ebp - 0x484], 1
jmp 0x1003b098
and dword [ebp - 0x484], 0
imul eax, dword [ebp - 0x484], 0x1a4e
test eax, eax
jl 0x1003b0b2
mov dword [ebp - 0x310], 1
jmp 0x1003b0b9
and dword [ebp - 0x310], 0
cmp dword [ebp - 0x310], 0x6aeba4d3
jl 0x1003b0d1
mov dword [ebp - 0x318], 1
jmp 0x1003b0d8
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 0xfffffff6
jl 0x1003b0ed
mov dword [ebp - 0x320], 1
jmp 0x1003b0f4
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x320], eax
jle 0x1003b10b
and dword [ebp - 0x328], 0
jmp 0x1003b115
mov dword [ebp - 0x328], 1
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x338], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x338]
mov dword [ebp + eax - 0x5d0], ecx
cmp dword [ebp - 0x338], 0xfffffff8
jne 0x1003b155
mov dword [ebp - 0x1dc], 1
jmp 0x1003b15c
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1dc], eax
je 0x1003b176
mov dword [ebp - 0x1e0], 1
jmp 0x1003b17d
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1e0], eax
jle 0x1003b197
mov dword [ebp - 0x1e8], 1
jmp 0x1003b19e
and dword [ebp - 0x1e8], 0
imul eax, dword [ebp - 0x1e8], 0x7d19
test eax, eax
jne 0x1003b1b8
mov dword [ebp - 0x1f8], 1
jmp 0x1003b1bf
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x1f8], eax
jl 0x1003b1d9
mov dword [ebp - 0x200], 1
jmp 0x1003b1e0
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x4d0], eax
jmp 0x1003afbb
push 2
lea ecx, [ebp - 0x66c]
call fcn.100248e9
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xf0], 0x490c4d8e
mov dword [ebp - 0x5dc], 0x5f0ed1ad
mov dword [ebp - 0x5e0], 0xdc660f7e
mov dword [ebp - 0x130], 0
jmp 0x1003b23c
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jge 0x1003b25b
push dword [ebp - 0x130]
lea ecx, [ebp - 0x66c]
call fcn.10024a46
and dword [eax], 0
jmp 0x1003b22f
mov dword [ebp - 0xf0], 0
jmp 0x1003b274
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x1003b2eb
mov dword [ebp - 0x138], 0xe31d8329
mov dword [ebp - 0x620], 5
mov dword [ebp - 0x208], 0xcc59
mov dword [ebp - 0x138], 0
jmp 0x1003b2b4
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jg 0x1003b2e6
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1003b2e4
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1003b2a7
jmp 0x1003b267
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x66c]
call fcn.100249c2
mov eax, dword [ebp - 0x194]
mov dword [0x10654e18], eax
mov dword [ebp - 0xa0], 4
mov dword [ebp - 0xa0], 0x1b
jmp 0x1003b328
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x1b
jne 0x1003b3fe
push 1
lea ecx, [ebp - 0x538]
call fcn.100248e9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x140], 0
jmp 0x1003b362
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jge 0x1003b384
push dword [ebp - 0x140]
lea ecx, [ebp - 0x538]
call fcn.10024a46
mov dword [eax], 0x665683c8
jmp 0x1003b355
push 0
lea ecx, [ebp - 0x538]
call fcn.10024a46
and dword [eax], 0
jmp 0x1003b3ba
push 0
lea ecx, [ebp - 0x538]
call fcn.10024a46
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x210]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x538]
call fcn.10024a46
cmp dword [eax], 5
jle 0x1003b3ea
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1003b3e8
push 0x6b1
push 0x1f57
call dword [sym.imp.USER32.dll_SetCaretPos]
jmp 0x1003b396
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x538]
call fcn.100249c2
jmp 0x1003b31b
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
jle 0x1003b418
mov dword [ebp - 0x218], 1
jmp 0x1003b41f
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0xa0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x194]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x220]
mov ecx, dword [eax + ecx]
call fcn.1003893b
mov dword [ebp - 0x4f0], eax
mov dword [ebp - 0x24], 0xffffffff
push 1
lea ecx, [ebp - 0x558]
call fcn.100248e9
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x148], 0
jmp 0x1003b48f
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 1
jge 0x1003b4b1
push dword [ebp - 0x148]
lea ecx, [ebp - 0x558]
call fcn.10024a46
mov dword [eax], 0xfffffffd
jmp 0x1003b482
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1003b4d0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x24], 0x71c7bf0b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x5e8], eax
cmp dword [ebp - 0x24], 0
jne 0x1003b523
cmp dword [ebp - 0x24], 0
je 0x1003b4ff
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1003b4ff
mov dword [ebp - 0x228], 1
jmp 0x1003b506
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x228]
sub eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jg 0x1003b523
cmp dword [ebp - 0x24], 0
jne 0x1003b523
and dword [ebp - 0x184], 0
jmp 0x1003b52d
mov dword [ebp - 0x184], 1
push 0
lea ecx, [ebp - 0x558]
call fcn.10024a46
mov ecx, dword [ebp - 0x184]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x184], eax
jl 0x1003b559
mov dword [ebp - 0x230], 1
jmp 0x1003b560
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x24]
lea eax, [eax + ecx + 0x3b288586]
cmp eax, 2
jle 0x1003b584
mov dword [ebp - 0x238], 1
jmp 0x1003b58b
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x30]
je 0x1003b796
push 2
lea ecx, [ebp - 0x1ac]
call fcn.100248e9
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x268], 0xb1aa435c
mov dword [ebp - 0x4e0], 0
mov dword [ebp - 0xf4], 0
jmp 0x1003b5db
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 2
jge 0x1003b5fd
push dword [ebp - 0xf4]
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov dword [eax], 0x1dbdae4
jmp 0x1003b5ce
mov dword [ebp - 0x30], 5
jmp 0x1003b60d
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffffb
jne 0x1003b63b
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x1003b625
call dword [sym.imp.USER32.dll_WaitMessage]
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
cmp dword [eax], 0
je 0x1003b639
jmp 0x1003b606
jmp 0x1003b606
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
cmp dword [eax], 0xef34ea88
jbe 0x1003b669
mov dword [ebp - 0x240], 1
jmp 0x1003b670
and dword [ebp - 0x240], 0
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov eax, dword [eax]
cmp eax, dword [ebp - 0x240]
jle 0x1003b693
mov dword [ebp - 0x4d8], 1
jmp 0x1003b69a
and dword [ebp - 0x4d8], 0
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov esi, dword [ebp - 0x24]
push 0
lea ecx, [ebp - 0x558]
call fcn.10024a46
sub esi, dword [eax]
cmp esi, 0x9c3f9080
ja 0x1003b6cd
mov dword [ebp - 0x248], 1
jmp 0x1003b6d4
and dword [ebp - 0x248], 0
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov ecx, dword [ebp - 0x248]
cmp ecx, dword [eax]
jle 0x1003b6f7
mov dword [ebp - 0x250], 1
jmp 0x1003b6fe
and dword [ebp - 0x250], 0
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov eax, dword [eax]
cmp eax, dword [ebp - 0x250]
jg 0x1003b721
mov dword [ebp - 0x258], 1
jmp 0x1003b728
and dword [ebp - 0x258], 0
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov esi, eax
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10024a46
mov ecx, dword [ebp - 0x258]
add ecx, dword [eax]
imul ecx, dword [esi]
cmp ecx, 0x9cbadbef
jbe 0x1003b763
mov dword [ebp - 0x260], 1
jmp 0x1003b76a
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x4e0], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1ac]
call fcn.100249c2
jmp 0x1003b8f5
mov dword [ebp - 0x2a0], 0xca12535b
mov dword [ebp - 0x288], 0xfffffffa
mov dword [ebp - 0x4e8], 0x9cad
mov dword [ebp - 0x18c], 0xffffffff
mov eax, dword [ebp - 0x2a0]
add eax, 0x3dc28bf3
cmp eax, dword [ebp - 0x30]
jl 0x1003b7da
mov dword [ebp - 0x270], 1
jmp 0x1003b7e1
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp - 0x270], eax
jg 0x1003b7fb
mov dword [ebp - 0x278], 1
jmp 0x1003b802
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jne 0x1003b824
xor eax, eax
jne 0x1003b824
and dword [ebp - 0x280], 0
jmp 0x1003b82e
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x280], eax
jle 0x1003b845
mov dword [ebp - 0x290], 1
jmp 0x1003b84c
and dword [ebp - 0x290], 0
mov dword [ebp - 0x288], 0x64c7272f
mov eax, dword [ebp - 0x288]
cmp eax, dword [ebp - 0x290]
jge 0x1003b870
mov dword [ebp - 0x298], 1
jmp 0x1003b877
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
add eax, 0x954a
cmp eax, 5
jge 0x1003b893
mov dword [ebp - 0x2b0], 1
jmp 0x1003b89a
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2a8], eax
push 0
lea ecx, [ebp - 0x558]
call fcn.10024a46
mov ecx, dword [ebp - 0x2a8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2a8]
cmp eax, dword [ebp - 0x2b0]
jne 0x1003b8d5
mov dword [ebp - 0x2b8], 1
jmp 0x1003b8dc
and dword [ebp - 0x2b8], 0
cmp dword [ebp - 0x2b8], 0x1a7d
jl 0x1003b8ef
cmp dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x558]
call fcn.100249c2
push dword [ebp - 0x194]
mov edx, 0x10654e3c
mov ecx, dword [ebp - 0x4f0]
call fcn.10038947
pop ecx
mov dword [ebp - 0xb0], 8
mov dword [ebp - 0xa8], 0xffff
mov dword [ebp - 0x19c], 0x7dcda720
mov dword [ebp - 0x2f8], 5
mov dword [ebp - 0x500], 8
cmp dword [ebp - 0xb0], 0
je 0x1003ba81
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x660], eax
cmp dword [ebp - 0xa8], 8
jne 0x1003b97b
mov dword [ebp - 0x2c0], 1
jmp 0x1003b982
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0xb0], eax
jle 0x1003b9a2
mov dword [ebp - 0x2c8], 1
jmp 0x1003b9a9
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xb0], eax
jle 0x1003b9c9
mov dword [ebp - 0x4f8], 1
jmp 0x1003b9d0
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0xa8], 0
jne 0x1003b9e7
or eax, 0xffffffff
jne 0x1003b9e7
and dword [ebp - 0x2d0], 0
jmp 0x1003b9f1
mov dword [ebp - 0x2d0], 1
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
inc eax
cmp eax, dword [ebp - 0xb0]
je 0x1003ba1e
mov dword [ebp - 0x2d8], 1
jmp 0x1003ba25
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x2d8]
cmp eax, 0xbf11
jl 0x1003ba44
mov dword [ebp - 0x2e0], 1
jmp 0x1003ba4b
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x2e0], eax
jne 0x1003ba65
mov dword [ebp - 0x2e8], 1
jmp 0x1003ba6c
and dword [ebp - 0x2e8], 0
cmp dword [ebp - 0x2e8], 0
jle 0x1003ba81
mov dword [ebp - 0x2f0], 1
jmp 0x1003ba88
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 0
jne 0x1003baaf
cmp dword [ebp - 0x19c], 0
jne 0x1003baaf
and dword [ebp - 0x300], 0
jmp 0x1003bab9
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0xb0]
jne 0x1003bad9
mov dword [ebp - 0x308], 1
jmp 0x1003bae0
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0x500], eax
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1003bb1e
push 0
push 0x84f
push 0x5d6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
mov esi, 0x10654e14
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret