Function at 0x10009289
Capabilities:
Get graphical window text
Get memory capacity
Get session user name

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x121c
call fcn.10075fe0
push esi
push edi
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x214], 0xfffffffb
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x398], 7
mov dword [ebp - 0x43c], 0xe101
mov dword [ebp - 0xefc], 0x5aba8b03
mov dword [ebp - 0x80], 0
jmp 0x100092e4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x100092fa
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xe4], 0x4800fa7
jmp 0x100092dd
mov dword [ebp - 0x80], 0
jmp 0x1000930a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10009320
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xe2c], 0
jmp 0x10009303
cmp dword [ebp - 0x3dc], 0
je 0x10009345
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
je 0x10009345
mov dword [ebp - 0x81c], 1
jmp 0x1000934c
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x81c], eax
jg 0x1000937c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe4], 0
jne 0x1000937c
mov eax, 0xba4a
test eax, eax
jne 0x1000937c
and dword [ebp - 0xb68], 0
jmp 0x10009386
mov dword [ebp - 0xb68], 1
cmp dword [ebp - 0xb68], 0x81f947f9
jbe 0x1000939e
mov dword [ebp - 0xbd4], 1
jmp 0x100093a5
and dword [ebp - 0xbd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0xef8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0xf00], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x1f8], 0
jne 0x100093f9
mov eax, 0x10b4
test eax, eax
jne 0x100093f9
and dword [ebp - 0xb70], 0
jmp 0x10009403
mov dword [ebp - 0xb70], 1
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0xb70], eax
je 0x1000941d
mov dword [ebp - 0xb78], 1
jmp 0x10009424
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 0x398]
imul eax, dword [ebp - 0xb78]
add eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x43c]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x1000945f
cmp dword [ebp - 0x214], 0
je 0x1000945f
mov dword [ebp - 0xb80], 1
jmp 0x10009466
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0x1f8]
cmp dword [ebp - 0xb80], eax
jl 0x10009480
mov dword [ebp - 0xb88], 1
jmp 0x10009487
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xb88]
add eax, 0x190
je 0x100094a9
cmp dword [ebp - 0x214], 0
je 0x100094a9
mov dword [ebp - 0xb90], 1
jmp 0x100094b0
and dword [ebp - 0xb90], 0
cmp dword [ebp - 0xb90], 0
jne 0x100094c5
mov dword [ebp - 0xb98], 1
jmp 0x100094cc
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0x1f8]
imul eax, dword [ebp - 0xb98]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x1f8], eax
jg 0x100094f9
mov dword [ebp - 0xbd0], 1
jmp 0x10009500
and dword [ebp - 0xbd0], 0
cmp dword [ebp - 0xbd0], 0
jl 0x10009515
mov dword [ebp - 0x944], 1
jmp 0x1000951c
and dword [ebp - 0x944], 0
cmp dword [ebp - 0x944], 0x5a40
je 0x10009534
mov dword [ebp - 0xcc4], 1
jmp 0x1000953b
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xf10], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe2c]
dec eax
mov dword [ebp - 0x490], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x490]
mov dword [ebp + eax - 0xe2c], ecx
mov eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0x490]
test eax, eax
jne 0x10009591
cmp dword [ebp - 0x43c], 0
jne 0x10009591
and dword [ebp - 0xccc], 0
jmp 0x1000959b
mov dword [ebp - 0xccc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
mov dword [ebp - 0xf18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe4]
imul eax, dword [ebp - 0x3dc]
sub eax, 0xf861
cmp eax, dword [ebp - 0x43c]
je 0x100095db
mov dword [ebp - 0x920], 1
jmp 0x100095e2
and dword [ebp - 0x920], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x920]
mov dword [ebp + eax - 0xe4], ecx
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x3ac], 0xfffffffb
mov dword [ebp - 0x444], 0
mov dword [ebp - 0x3a4], 7
mov dword [ebp - 0x44c], 0xe101
mov dword [ebp - 0xf20], 0x5aba8b03
mov dword [ebp - 0xd4], 0
jmp 0x1000964a
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x10009666
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0xf0], 0x4800fa7
jmp 0x1000963d
mov dword [ebp - 0xd4], 0
jmp 0x1000967f
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x1000969b
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0xe8c], 0
jmp 0x10009672
cmp dword [ebp - 0x444], 0
je 0x100096c0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
je 0x100096c0
mov dword [ebp - 0x498], 1
jmp 0x100096c7
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x498], eax
jg 0x100096f7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0
jne 0x100096f7
mov eax, 0xba4a
test eax, eax
jne 0x100096f7
and dword [ebp - 0x928], 0
jmp 0x10009701
mov dword [ebp - 0x928], 1
cmp dword [ebp - 0x928], 0x81f947f9
jbe 0x10009719
mov dword [ebp - 0xcd4], 1
jmp 0x10009720
and dword [ebp - 0xcd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0xf28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0xf30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0xf38], eax
cmp dword [ebp - 0x1e4], 0
jne 0x10009774
mov eax, 0x10b4
test eax, eax
jne 0x10009774
and dword [ebp - 0x4a0], 0
jmp 0x1000977e
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x4a0], eax
je 0x10009798
mov dword [ebp - 0x930], 1
jmp 0x1000979f
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x3a4]
imul eax, dword [ebp - 0x930]
add eax, dword [ebp - 0x3ac]
imul eax, dword [ebp - 0x44c]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x100097da
cmp dword [ebp - 0x3ac], 0
je 0x100097da
mov dword [ebp - 0x4a8], 1
jmp 0x100097e1
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x4a8], eax
jl 0x100097fb
mov dword [ebp - 0x938], 1
jmp 0x10009802
and dword [ebp - 0x938], 0
mov eax, dword [ebp - 0x938]
add eax, 0x190
je 0x10009824
cmp dword [ebp - 0x3ac], 0
je 0x10009824
mov dword [ebp - 0x4b0], 1
jmp 0x1000982b
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0
jne 0x10009840
mov dword [ebp - 0x940], 1
jmp 0x10009847
and dword [ebp - 0x940], 0
mov eax, dword [ebp - 0x1e4]
imul eax, dword [ebp - 0x940]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x3a4]
cmp dword [ebp - 0x1e4], eax
jg 0x10009874
mov dword [ebp - 0x4b8], 1
jmp 0x1000987b
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x4b8], 0
jl 0x10009890
mov dword [ebp - 0x948], 1
jmp 0x10009897
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x948], 0x5a40
je 0x100098af
mov dword [ebp - 0xcdc], 1
jmp 0x100098b6
and dword [ebp - 0xcdc], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0xf40], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8c]
dec eax
mov dword [ebp - 0x4c0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp + eax - 0xe8c], ecx
mov eax, dword [ebp - 0x3ac]
imul eax, dword [ebp - 0x4c0]
test eax, eax
jne 0x1000990c
cmp dword [ebp - 0x44c], 0
jne 0x1000990c
and dword [ebp - 0xce4], 0
jmp 0x10009916
mov dword [ebp - 0xce4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0xf48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
imul eax, dword [ebp - 0x444]
sub eax, 0xf861
cmp eax, dword [ebp - 0x44c]
je 0x10009956
mov dword [ebp - 0x950], 1
jmp 0x1000995d
and dword [ebp - 0x950], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x950]
mov dword [ebp + eax - 0xf0], ecx
mov dword [ebp - 0x18], 0x31551da6
mov dword [ebp - 0x30], 0xfff6
mov dword [ebp - 0x28], 0xfffffff6
mov dword [ebp - 0x3c8], 0x71e9942c
mov dword [ebp - 0x3c4], 0x71e9942c
mov dword [ebp - 0x3c0], 0x71e9942c
mov dword [ebp - 0x3bc], 0x71e9942c
mov dword [ebp - 0x1c4], 0x131e
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf50], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xf58], eax
mov eax, 0x61e7
sub eax, dword [ebp - 0x18]
je 0x100099f1
cmp dword [ebp - 0x28], 0
je 0x100099f1
mov dword [ebp - 0x4c8], 1
jmp 0x100099f8
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x4c8], eax
jg 0x10009a0f
mov dword [ebp - 0x958], 1
jmp 0x10009a16
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0x958]
sub eax, 5
cmp eax, dword [ebp - 0x30]
jl 0x10009a30
mov dword [ebp - 0x4d0], 1
jmp 0x10009a37
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x4d0]
jne 0x10009a4e
mov dword [ebp - 0x960], 1
jmp 0x10009a55
and dword [ebp - 0x960], 0
cmp dword [ebp - 0x960], 0x5d580090
jge 0x10009a6d
mov dword [ebp - 0x4d8], 1
jmp 0x10009a74
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4d8], eax
jg 0x10009a8b
mov dword [ebp - 0x968], 1
jmp 0x10009a92
and dword [ebp - 0x968], 0
cmp dword [ebp - 0x968], 0x9e62
jge 0x10009aaa
mov dword [ebp - 0x4e0], 1
jmp 0x10009ab1
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x28], eax
jg 0x10009ad2
mov dword [ebp - 0xcec], 1
jmp 0x10009ad9
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x18]
sub eax, 0x1ef5c421
je 0x10009b08
mov eax, 0xfc16
test eax, eax
je 0x10009b08
push 6
pop eax
test eax, eax
je 0x10009b08
mov dword [ebp - 0x970], 1
jmp 0x10009b0f
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x970]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x3c8]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x3c8]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x3c8]
jge 0x10009b50
mov dword [ebp - 0x4e8], 1
jmp 0x10009b57
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x8c5cecce
je 0x10009b6f
mov dword [ebp - 0x978], 1
jmp 0x10009b76
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x28], 3
jmp 0x10009b92
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10009f64
mov dword [ebp - 0x988], 0xa7da9fc5
mov dword [ebp - 0x33c], 0
jmp 0x10009bbf
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 2
jge 0x10009bdb
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xe64], 0xd14a
jmp 0x10009bb2
mov dword [ebp - 0x30], 0
jmp 0x10009beb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x10009f5f
mov dword [ebp - 0x228], 0x1021f5eb
mov dword [ebp - 0x220], 0
jmp 0x10009c18
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 1
jge 0x10009c34
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x998], 0
jmp 0x10009c0b
mov dword [ebp - 0x1c4], 3
jmp 0x10009c4d
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x10009f5a
cmp dword [ebp - 0x228], 0
je 0x10009c6c
mov eax, 0x464f6128
test eax, eax
jne 0x10009c8b
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x3c8], 0
jne 0x10009c8b
cmp dword [ebp - 0x988], 0
jne 0x10009c8b
and dword [ebp - 0x4f0], 0
jmp 0x10009c95
mov dword [ebp - 0x4f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe64]
cmp eax, dword [ebp - 0x4f0]
jle 0x10009cb6
mov dword [ebp - 0x980], 1
jmp 0x10009cbd
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x3c8]
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x980]
add eax, ecx
cmp eax, 0xffffffff
jl 0x10009cea
push 9
pop eax
test eax, eax
jne 0x10009cea
and dword [ebp - 0x4f8], 0
jmp 0x10009cf4
mov dword [ebp - 0x4f8], 1
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x4f8]
mov dword [ebp + eax*4 - 0x3c8], ecx
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3c8]
mov dword [ebp - 0xf70], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c8]
mov dword [ebp - 0xf78], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xf80], eax
cmp dword [ebp - 0x228], 0x4171b3fe
jge 0x10009d54
mov dword [ebp - 0x500], 1
jmp 0x10009d5b
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xd3b05e26
ja 0x10009d81
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe64], 0
je 0x10009d7c
jmp 0x10009f5a
jmp 0x10009f55
mov dword [ebp - 0x110], 0x106df3f1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x998]
cmp dword [ebp - 0x110], eax
jle 0x10009dac
mov dword [ebp - 0x990], 1
jmp 0x10009db3
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x990]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x110], 0
jmp 0x10009dd8
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jge 0x10009f55
mov dword [ebp - 0x37c], 0
jmp 0x10009dfe
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 3
jge 0x10009e1a
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x1198], 0x1b866267
jmp 0x10009df1
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x28], eax
jge 0x10009e31
mov dword [ebp - 0x508], 1
jmp 0x10009e38
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 1
jb 0x10009e4d
mov dword [ebp - 0xcf4], 1
jmp 0x10009e54
and dword [ebp - 0xcf4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c8]
add eax, dword [ebp - 0x110]
jne 0x10009e82
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x998], 0
jne 0x10009e82
and dword [ebp - 0x510], 0
jmp 0x10009e8c
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3c8]
cmp dword [ebp - 0x510], eax
jne 0x10009eae
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10009eae
and dword [ebp - 0x9a0], 0
jmp 0x10009eb8
mov dword [ebp - 0x9a0], 1
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x9a0]
je 0x10009ed2
mov dword [ebp - 0xd70], 1
jmp 0x10009ed9
and dword [ebp - 0xd70], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x3c8]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x3c8]
mov dword [ebp - 0xf90], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1198]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x3c8]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x18], 0
jmp 0x10009f2c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x10
je 0x10009f50
mov dword [ebp - 0xd84], 0x237a
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x3c8]
neg eax
mov dword [ebp - 0xd84], eax
jmp 0x10009f25
jmp 0x10009dcb
jmp 0x10009c40
jmp 0x10009be4
jmp 0x10009b8b
mov dword [ebp - 0xc], 0x44555950
mov dword [ebp - 0x188], 0x88dd0bb2
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xfa0], eax
cmp dword [ebp - 0xc], 0
jne 0x10009f93
cmp dword [ebp - 0xc], 0
jne 0x10009f93
and dword [ebp - 0x518], 0
jmp 0x10009f9d
mov dword [ebp - 0x518], 1
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1020], eax
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
cmp dword [ebp - 0x518], eax
jne 0x10009fc0
mov dword [ebp - 0x9a8], 1
jmp 0x10009fc7
and dword [ebp - 0x9a8], 0
cmp dword [ebp - 0x9a8], 0xe0710dd0
jne 0x10009fdf
mov dword [ebp - 0x520], 1
jmp 0x10009fe6
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0xffff
jne 0x10009ffe
mov dword [ebp - 0xd8c], 1
jmp 0x1000a005
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1028], eax
cmp dword [ebp - 0xc], 0x94d0
je 0x1000a023
mov dword [ebp - 0x9b0], 1
jmp 0x1000a02a
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x9b0], eax
je 0x1000a041
mov dword [ebp - 0x528], 1
jmp 0x1000a048
and dword [ebp - 0x528], 0
imul eax, dword [ebp - 0x528], 0
test eax, eax
jne 0x1000a062
cmp dword [ebp - 0xc], 0
jne 0x1000a062
and dword [ebp - 0x9b8], 0
jmp 0x1000a06c
mov dword [ebp - 0x9b8], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0
je 0x1000a0c7
mov dword [ebp - 0xdd8], 0x814b
mov dword [ebp - 0x344], 0
mov eax, dword [ebp - 0xdd8]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
cmp dword [ebp - 0x344], eax
jg 0x1000a0af
mov dword [ebp - 0x530], 1
jmp 0x1000a0b6
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0x344], eax
jmp 0x1000a2f9
mov dword [ebp - 0x384], 0xf4a1d2da
mov dword [ebp - 0x548], 4
mov dword [ebp - 0x230], 0
jmp 0x1000a0f4
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1000a110
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x11f8], 0xffffffff
jmp 0x1000a0e7
mov dword [ebp - 0xc], 6
jmp 0x1000a120
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x20
jl 0x1000a2f9
mov dword [ebp - 0x88], 0x8c84060a
mov eax, dword [ebp - 0x384]
imul eax, dword [ebp - 0x384]
test eax, eax
je 0x1000a157
cmp dword [ebp - 0xc], 0
je 0x1000a157
mov dword [ebp - 0x540], 1
jmp 0x1000a15e
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1038], eax
mov eax, 0xd0c653dd
cmp eax, 0x97e65fbc
jbe 0x1000a18e
mov dword [ebp - 0x9c0], 1
jmp 0x1000a195
and dword [ebp - 0x9c0], 0
cmp dword [ebp - 0x9c0], 0
jl 0x1000a1aa
mov dword [ebp - 0x538], 1
jmp 0x1000a1b1
and dword [ebp - 0x538], 0
imul eax, dword [ebp - 0x538], 0x5951
cmp eax, 0xe7ff5188
jb 0x1000a1ce
mov dword [ebp - 0x9c8], 1
jmp 0x1000a1d5
and dword [ebp - 0x9c8], 0
imul eax, dword [ebp - 0x9c8], 0x7e52
imul eax, dword [ebp - 0x540]
test eax, eax
jle 0x1000a1f6
mov dword [ebp - 0x9d0], 1
jmp 0x1000a1fd
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
inc eax
cmp eax, dword [ebp - 0x88]
je 0x1000a245
cmp dword [ebp - 0xc], 0
je 0x1000a245
mov byte [ebp - 0x12e], 0
movzx eax, byte [ebp - 0x12e]
test eax, eax
je 0x1000a233
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
jmp 0x1000a2e7
mov dword [ebp - 0x88], 0
jmp 0x1000a25e
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1c
jle 0x1000a283
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000a281
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
jmp 0x1000a251
mov dword [ebp - 0x88], 0
jmp 0x1000a29c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jg 0x1000a2e7
mov dword [ebp - 0x188], 0
jmp 0x1000a2be
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 2
jg 0x1000a2e5
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x1000a2e3
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x1000a2b1
jmp 0x1000a28f
mov eax, dword [ebp - 0x548]
inc eax
mov dword [ebp - 0x548], eax
jmp 0x1000a119
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x9d8], 0xffffffff
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x9d8], eax
mov dword [ebp - 0x208], 1
jmp 0x1000a33c
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x25
jl 0x1000a36b
mov dword [ebp - 0x9d8], 0xffffffff
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1000a369
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x1000a32f
mov dword [ebp - 0x2f0], 0xfffffffb
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x238], 0
jmp 0x1000a398
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x1000a3b4
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x1040], 0x329e
jmp 0x1000a38b
cmp dword [ebp - 0x1ac], 0
je 0x1000a408
mov dword [ebp - 0x34c], 0
jmp 0x1000a3d6
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 1
jge 0x1000a3f2
mov eax, dword [ebp - 0x34c]
mov dword [ebp + eax*4 - 0xde0], 0xfb63
jmp 0x1000a3c9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xde0], 0xffffffff
jmp 0x1000a530
mov dword [ebp - 0xcbc], 0xfffffff7
mov dword [ebp - 0x9e8], 0x4f934f54
mov dword [ebp - 0x9e0], 0x23e93d0b
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0x1ac], 0
jmp 0x1000a449
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x17
jg 0x1000a530
mov dword [ebp - 0x454], 2
mov byte [ebp - 0x150], 0
movzx eax, byte [ebp - 0x150]
test eax, eax
je 0x1000a47d
push 0x720
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
cmp dword [ebp - 0xcbc], 0
jne 0x1000a492
mov dword [ebp - 0x558], 1
jmp 0x1000a499
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x454], eax
jl 0x1000a4b3
mov dword [ebp - 0x550], 1
jmp 0x1000a4ba
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x9e0], 0
jne 0x1000a4e1
cmp dword [ebp - 0x454], 0
jne 0x1000a4e1
and dword [ebp - 0xd58], 0
jmp 0x1000a4eb
mov dword [ebp - 0xd58], 1
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0x1048], eax
cmp dword [ebp - 0x454], 1
je 0x1000a518
mov dword [ebp - 0x560], 1
jmp 0x1000a51f
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0xbf0], eax
jmp 0x1000a43c
mov dword [ebp - 0x240], 0x76820624
mov dword [ebp - 0xcc], 0
jmp 0x1000a553
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x1000a56f
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1204], 1
jmp 0x1000a546
mov dword [ebp - 0xcc], 0
jmp 0x1000a588
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1000a5a4
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x9f0], 0xffffffff
jmp 0x1000a57b
mov dword [ebp - 0x240], 0
jmp 0x1000a5bd
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0xffffffe9
je 0x1000a5dc
mov dword [ebp - 0xd10], 0xffffffff
mov dword [ebp - 0xd10], 3
jmp 0x1000a5b0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9f0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9f0], eax
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x250], 7
mov dword [ebp - 0x45c], 0xfff6
mov dword [ebp - 0xe00], 1
mov dword [ebp - 0xdfc], 1
mov dword [ebp - 0xdf8], 1
mov dword [ebp - 0xdf4], 1
mov dword [ebp - 0x4c], 0x3aaf5bfb
mov dword [ebp - 0x2e8], 0xefcdf11b
mov dword [ebp - 0xf8], 0xc27f355c
mov dword [ebp - 0xc00], 0xfffc
mov dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x568], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x568]
mov dword [ebp + eax - 0xe00], ecx
cmp dword [ebp - 0x568], 1
je 0x1000a6a0
mov dword [ebp - 0x588], 1
jmp 0x1000a6a7
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2e8], eax
imul eax, dword [ebp - 0x2e8], 0xffff
test eax, eax
je 0x1000a6d0
cmp dword [ebp - 0x4c], 0
je 0x1000a6d0
mov dword [ebp - 0x9f8], 1
jmp 0x1000a6d7
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x9f8]
je 0x1000a6ee
mov dword [ebp - 0x570], 1
jmp 0x1000a6f5
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x570], eax
je 0x1000a70c
mov dword [ebp - 0xa00], 1
jmp 0x1000a713
and dword [ebp - 0xa00], 0
cmp dword [ebp - 0xa00], 0x6335c0de
je 0x1000a731
cmp dword [ebp - 0x2e8], 0
jne 0x1000a731
and dword [ebp - 0x578], 0
jmp 0x1000a73b
mov dword [ebp - 0x578], 1
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x578], eax
jg 0x1000a752
mov dword [ebp - 0xa08], 1
jmp 0x1000a759
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xa08], eax
jne 0x1000a770
mov dword [ebp - 0x580], 1
jmp 0x1000a777
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x4c], eax
jle 0x1000a797
mov dword [ebp - 0xa10], 1
jmp 0x1000a79e
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0xa10]
add eax, dword [ebp - 0x588]
imul eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0xf8]
jne 0x1000a7d2
cmp dword [ebp - 0xf8], 0
jne 0x1000a7d2
and dword [ebp - 0xa18], 0
jmp 0x1000a7dc
mov dword [ebp - 0xa18], 1
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xa18], eax
jle 0x1000a8cd
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0xbf8], 8
mov dword [ebp - 0xd60], 0xc298c245
mov dword [ebp - 0xd68], 0
mov byte [ebp - 0x152], 0
movzx eax, byte [ebp - 0x152]
test eax, eax
je 0x1000a837
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x2e4], eax
jne 0x1000a851
mov dword [ebp - 0x598], 1
jmp 0x1000a858
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x1050], eax
mov eax, dword [ebp - 0xd60]
cmp dword [ebp - 0x2e4], eax
jge 0x1000a87e
mov dword [ebp - 0x590], 1
jmp 0x1000a885
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x590]
jl 0x1000a8a8
cmp dword [ebp - 0xc00], 0
je 0x1000a8a8
mov dword [ebp - 0xa20], 1
jmp 0x1000a8af
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0xa20]
imul eax, dword [ebp - 0x598]
mov dword [ebp - 0xd68], eax
jmp 0x1000ab24
mov dword [ebp - 0x5c0], 0
mov dword [ebp - 0x248], 0
jmp 0x1000a8f0
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x1000a90c
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x3b8], 0xcd908fbd
jmp 0x1000a8e3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0x7412
jl 0x1000a92b
mov dword [ebp - 0x5b0], 1
jmp 0x1000a932
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x4c]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xe00]
add eax, 4
cmp eax, dword [ebp - 0x4c]
jge 0x1000a957
mov dword [ebp - 0xa28], 1
jmp 0x1000a95e
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
cmp dword [ebp - 0xa28], eax
jne 0x1000a97f
mov dword [ebp - 0x5a0], 1
jmp 0x1000a986
and dword [ebp - 0x5a0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
cmp dword [ebp - 0x5a0], eax
jge 0x1000a9a7
mov dword [ebp - 0xa30], 1
jmp 0x1000a9ae
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xa30]
jne 0x1000a9c5
mov dword [ebp - 0x5a8], 1
jmp 0x1000a9cc
and dword [ebp - 0x5a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b8]
imul eax, dword [ebp - 0x5a8]
cmp eax, 0x934e
jg 0x1000aa03
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0
je 0x1000aa03
mov dword [ebp - 0xc08], 1
jmp 0x1000aa0a
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xe00]
cmp dword [ebp + eax - 0x3b8], ecx
je 0x1000aa44
mov dword [ebp - 0xa38], 1
jmp 0x1000aa4b
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0xa38], eax
jl 0x1000aa65
mov dword [ebp - 0xa40], 1
jmp 0x1000aa6c
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0x5b0]
cmp eax, dword [ebp - 0xa40]
jg 0x1000aa86
mov dword [ebp - 0x5b8], 1
jmp 0x1000aa8d
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
add eax, dword [ebp - 0x5b8]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xe00]
jne 0x1000aabb
mov dword [ebp - 0xa48], 1
jmp 0x1000aac2
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0xa48]
mov dword [ebp - 0x5c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3b8]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0x1068], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x45c]
mov dword [ebp + eax - 0x3b8], ecx
mov byte [ebp - 0x169], 0
movzx eax, byte [ebp - 0x169]
test eax, eax
je 0x1000ab24
push 0x19e5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0x470], 0xe101
mov dword [ebp - 0x1070], 0x5aba8b03
mov dword [ebp - 0x90], 0
jmp 0x1000ab51
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000ab6d
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x108], 0x4800fa7
jmp 0x1000ab44
mov dword [ebp - 0x90], 0
jmp 0x1000ab86
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000aba2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xe4c], 0
jmp 0x1000ab79
cmp dword [ebp - 0x464], 0
je 0x1000abc7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x1000abc7
mov dword [ebp - 0xa50], 1
jmp 0x1000abce
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0xa50], eax
jg 0x1000abfe
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x108], 0
jne 0x1000abfe
mov eax, 0xba4a
test eax, eax
jne 0x1000abfe
and dword [ebp - 0x5c8], 0
jmp 0x1000ac08
mov dword [ebp - 0x5c8], 1
cmp dword [ebp - 0x5c8], 0x81f947f9
jbe 0x1000ac20
mov dword [ebp - 0xd1c], 1
jmp 0x1000ac27
and dword [ebp - 0xd1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x1078], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x1080], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x1088], eax
cmp dword [ebp - 0x1cc], 0
jne 0x1000ac7b
mov eax, 0x10b4
test eax, eax
jne 0x1000ac7b
and dword [ebp - 0xa58], 0
jmp 0x1000ac85
mov dword [ebp - 0xa58], 1
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0xa58], eax
je 0x1000ac9f
mov dword [ebp - 0x5d0], 1
jmp 0x1000aca6
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x250]
imul eax, dword [ebp - 0x5d0]
add eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0x470]
add eax, 0xe883
cmp eax, 0x3e8c
jle 0x1000ace1
cmp dword [ebp - 0x2f0], 0
je 0x1000ace1
mov dword [ebp - 0xa60], 1
jmp 0x1000ace8
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0xa60], eax
jl 0x1000ad02
mov dword [ebp - 0x5d8], 1
jmp 0x1000ad09
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
add eax, 0x190
je 0x1000ad2b
cmp dword [ebp - 0x2f0], 0
je 0x1000ad2b
mov dword [ebp - 0xa68], 1
jmp 0x1000ad32
and dword [ebp - 0xa68], 0
cmp dword [ebp - 0xa68], 0
jne 0x1000ad47
mov dword [ebp - 0x5e0], 1
jmp 0x1000ad4e
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x1cc], eax
jg 0x1000ad7b
mov dword [ebp - 0xa70], 1
jmp 0x1000ad82
and dword [ebp - 0xa70], 0
cmp dword [ebp - 0xa70], 0
jl 0x1000ad97
mov dword [ebp - 0x5e8], 1
jmp 0x1000ad9e
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0x5a40
je 0x1000adb6
mov dword [ebp - 0xc10], 1
jmp 0x1000adbd
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x1090], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe4c]
dec eax
mov dword [ebp - 0xa78], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa78]
mov dword [ebp + eax - 0xe4c], ecx
mov eax, dword [ebp - 0x2f0]
imul eax, dword [ebp - 0xa78]
test eax, eax
jne 0x1000ae13
cmp dword [ebp - 0x470], 0
jne 0x1000ae13
and dword [ebp - 0xdd0], 0
jmp 0x1000ae1d
mov dword [ebp - 0xdd0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x1098], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
imul eax, dword [ebp - 0x464]
sub eax, 0xf861
cmp eax, dword [ebp - 0x470]
je 0x1000ae5d
mov dword [ebp - 0x5f0], 1
jmp 0x1000ae64
and dword [ebp - 0x5f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp + eax - 0x108], ecx
mov dword [ebp - 0x300], 9
mov dword [ebp - 0x258], 0
jmp 0x1000ae9a
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1000aeb6
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x430], 0x24f01c08
jmp 0x1000ae8d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x430], 0
je 0x1000aeec
mov byte [ebp - 0x130], 0
movzx eax, byte [ebp - 0x130]
test eax, eax
je 0x1000aee7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetMenu]
jmp 0x1000b1b2
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0xd24], 0
mov dword [ebp - 0x2f8], 0
jmp 0x1000af19
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 3
jge 0x1000af35
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x11ec], 0xffffffff
jmp 0x1000af0c
mov dword [ebp - 0x13c], 0
jmp 0x1000af4e
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jg 0x1000b1b2
mov dword [ebp - 0xbc], 0x3f467215
mov dword [ebp - 0x268], 0x3cc25429
mov dword [ebp - 0xbc], 0
jmp 0x1000af88
cmp dword [ebp - 0xbc], 0
jl 0x1000b1ad
mov dword [ebp - 0xa98], 0xfffffffc
mov dword [ebp - 0x260], 0
jmp 0x1000afb8
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1000afd4
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xea4], 0x6d238e48
jmp 0x1000afab
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0x430], 0xd4e70302
ja 0x1000aff3
mov dword [ebp - 0x3e8], 1
jmp 0x1000affa
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x3e8]
mov dword [ebp + eax*4 - 0x430], ecx
cmp dword [ebp - 0x3e8], 0
jne 0x1000b022
mov dword [ebp - 0xa90], 1
jmp 0x1000b029
and dword [ebp - 0xa90], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xea4]
cmp dword [ebp - 0xbc], eax
jl 0x1000b049
jmp 0x1000af41
mov dword [ebp - 0xc20], 3
mov dword [ebp - 0x44], 0
jmp 0x1000b1cc
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1000b1e2
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xe8], 0x1a9565e0
jmp 0x1000b1c5
mov dword [ebp - 0x44], 0
jmp 0x1000b1f2
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1000b208
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xfac], 0xfffffffc
jmp 0x1000b1eb
mov dword [ebp - 0x44], 0
jmp 0x1000b218
cmp dword [ebp - 0x44], 1
jge 0x1000b22e
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1ec], 0x7e80d68f
jmp 0x1000b211
mov byte [ebp - 0x17f], 0
movzx eax, byte [ebp - 0x17f]
test eax, eax
je 0x1000b254