Function at 0x1000aad9
Capabilities:
Accept command line arguments

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf50
push esi
push edi
mov dword [ebp - 0x248], 0x3644
mov dword [ebp - 0x994], 1
mov dword [ebp - 0x8ec], 0x915bb00
mov dword [ebp - 0x7c8], 0xee3f2f34
mov dword [ebp - 0x7c], 0
jmp 0x1000ab1c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1000ab32
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xc1c], 1
jmp 0x1000ab15
mov dword [ebp - 0x7c], 0
jmp 0x1000ab42
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1000ab58
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x9d8], 3
jmp 0x1000ab3b
cmp dword [ebp - 0x248], 0xffffffff
jbe 0x1000ab6d
mov dword [ebp - 0x494], 1
jmp 0x1000ab74
and dword [ebp - 0x494], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc1c], 0x485b
cmp dword [ebp - 0x494], 0x485b
jg 0x1000ab9d
mov dword [ebp - 0x784], 1
jmp 0x1000aba4
and dword [ebp - 0x784], 0
mov dword [ebp - 0x994], 0
cmp dword [ebp - 0x248], 0xc863cc1d
ja 0x1000abc6
mov dword [ebp - 0x78c], 1
jmp 0x1000abcd
and dword [ebp - 0x78c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d8]
cmp dword [ebp - 0x78c], eax
jg 0x1000abee
mov dword [ebp - 0x794], 1
jmp 0x1000abf5
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x794]
lea eax, [ecx + eax + 1]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x9d8]
jle 0x1000ac20
mov dword [ebp - 0x79c], 1
jmp 0x1000ac27
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x8ec]
cmp dword [ebp - 0x79c], eax
je 0x1000ac41
mov dword [ebp - 0x8f4], 1
jmp 0x1000ac48
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0xd44], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d8]
add eax, dword [ebp - 0x7c8]
jne 0x1000ac70
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1000ac79
mov eax, 0x88dc
test eax, eax
jne 0x1000ac8b
mov eax, 0x2714
test eax, eax
jne 0x1000ac8b
and dword [ebp - 0x7d0], 0
jmp 0x1000ac95
mov dword [ebp - 0x7d0], 1
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x7d0], eax
jne 0x1000acaf
mov dword [ebp - 0x2d4], 1
jmp 0x1000acb6
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x784]
cmp eax, dword [ebp - 0x2d4]
jne 0x1000acd0
mov dword [ebp - 0x2d8], 1
jmp 0x1000acd7
and dword [ebp - 0x2d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax - 0x9d8], ecx
mov dword [ebp - 0x250], 0x3644
mov dword [ebp - 0x8fc], 1
mov dword [ebp - 0x904], 0x915bb00
mov dword [ebp - 0x568], 0xee3f2f34
mov dword [ebp - 0x3c], 0
jmp 0x1000ad22
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1000ad38
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xc28], 1
jmp 0x1000ad1b
mov dword [ebp - 0x3c], 0
jmp 0x1000ad48
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1000ad5e
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xa08], 3
jmp 0x1000ad41
cmp dword [ebp - 0x250], 0xffffffff
jbe 0x1000ad73
mov dword [ebp - 0x564], 1
jmp 0x1000ad7a
and dword [ebp - 0x564], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc28], 0x485b
cmp dword [ebp - 0x564], 0x485b
jg 0x1000ada3
mov dword [ebp - 0x780], 1
jmp 0x1000adaa
and dword [ebp - 0x780], 0
mov dword [ebp - 0x8fc], 0
cmp dword [ebp - 0x250], 0xc863cc1d
ja 0x1000adcc
mov dword [ebp - 0x2e0], 1
jmp 0x1000add3
and dword [ebp - 0x2e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x2e0], eax
jg 0x1000adf4
mov dword [ebp - 0x698], 1
jmp 0x1000adfb
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x698]
lea eax, [ecx + eax + 1]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa08]
jle 0x1000ae26
mov dword [ebp - 0x2e8], 1
jmp 0x1000ae2d
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x904]
cmp dword [ebp - 0x2e8], eax
je 0x1000ae47
mov dword [ebp - 0x90c], 1
jmp 0x1000ae4e
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0xbd8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
add eax, dword [ebp - 0x568]
jne 0x1000ae76
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1000ae7f
mov eax, 0x88dc
test eax, eax
jne 0x1000ae91
mov eax, 0x2714
test eax, eax
jne 0x1000ae91
and dword [ebp - 0x2f0], 0
jmp 0x1000ae9b
mov dword [ebp - 0x2f0], 1
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x2f0], eax
jne 0x1000aeb5
mov dword [ebp - 0x2f8], 1
jmp 0x1000aebc
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x780]
cmp eax, dword [ebp - 0x2f8]
jne 0x1000aed6
mov dword [ebp - 0x570], 1
jmp 0x1000aedd
and dword [ebp - 0x570], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x570]
mov dword [ebp + eax - 0xa08], ecx
mov dword [ebp - 0x44], 0x74b666a7
mov dword [ebp - 0x14], 0
mov dword [ebp - 0xbc], 0
jmp 0x1000af17
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1000af33
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xe7c], 0x963ba20b
jmp 0x1000af0a
mov dword [ebp - 0xbc], 0
jmp 0x1000af4c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1000af68
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xc34], 0xfffffff9
jmp 0x1000af3f
cmp dword [ebp - 0x44], 9
je 0x1000af7a
mov dword [ebp - 0x300], 1
jmp 0x1000af81
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x44], 0
je 0x1000af99
cmp dword [ebp - 0x44], 0
je 0x1000af99
mov dword [ebp - 0x6a0], 1
jmp 0x1000afa0
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x300]
cmp eax, dword [ebp - 0x6a0]
je 0x1000afc0
cmp dword [ebp - 0x14], 0
je 0x1000afc0
mov dword [ebp - 0x308], 1
jmp 0x1000afc7
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x308]
sub eax, 0x2be1aa6a
je 0x1000b081
mov dword [ebp - 0x44], 0
jmp 0x1000afe8
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jg 0x1000b07c
mov dword [ebp - 0x14], 0
jmp 0x1000b002
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1000b04b
mov dword [ebp - 0xa84], 0
mov dword [ebp - 0xa80], 0
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xa78], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa84]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa84], eax
jmp 0x1000affb
mov dword [ebp - 0x14], 0
jmp 0x1000b05b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1000b077
mov dword [ebp - 0x914], 0x9cb0befc
mov dword [ebp - 0x914], 0xc41ac3dc
jmp 0x1000b054
jmp 0x1000afe1
jmp 0x1000b1b5
mov dword [ebp - 0x254], 1
mov byte [ebp - 0x127], 0
movzx eax, byte [ebp - 0x127]
test eax, eax
je 0x1000b0e0
push 0
push 0x22b4
push 0xd
push 0x2405
push 0x54f
push 0xbc8
push 0x159b
push 0x281
push 0xa8
push 0x4c
push 0xcb2
push 0x24a6
push 0xb22
push 0x1603
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xbe8], eax
cmp dword [ebp - 0x14], 0xda6c
jl 0x1000b107
mov dword [ebp - 0x578], 1
jmp 0x1000b10e
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0xfffffffa
jge 0x1000b123
mov dword [ebp - 0x940], 1
jmp 0x1000b12a
and dword [ebp - 0x940], 0
mov eax, 0xf816
test eax, eax
jne 0x1000b13f
mov dword [ebp - 0x310], 1
jmp 0x1000b146
and dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x310], eax
jge 0x1000b166
cmp dword [ebp - 0x44], 0
je 0x1000b166
mov dword [ebp - 0x738], 1
jmp 0x1000b16d
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x738], eax
jne 0x1000b181
cmp dword [ebp - 0x254], 0
jne 0x1000b18f
or eax, 0xffffffff
jne 0x1000b18f
and dword [ebp - 0x948], 0
jmp 0x1000b199
mov dword [ebp - 0x948], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbf0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0xc34], ecx
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000b1e4
push 0
push 0x79a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0x6a8], 0x3edb
mov dword [ebp - 0x21c], 0x19c2
mov dword [ebp - 0x2a4], 0x1efae07d
mov dword [ebp - 0x7e4], 0xfffffff9
mov dword [ebp - 0x7e0], 0xfffffff9
mov dword [ebp - 0x7dc], 0xfffffff9
mov dword [ebp - 0x7d8], 0xfffffff9
mov dword [ebp - 0x984], 0xffffffff
mov dword [ebp - 0x340], 1
mov dword [ebp - 0x98c], 1
mov dword [ebp - 0x84], 0
jmp 0x1000b261
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1000b27d
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x234], 0x26595ad3
jmp 0x1000b254
mov dword [ebp - 0x84], 0
jmp 0x1000b296
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1000b2b2
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xe8c], 0x2a7fad54
jmp 0x1000b289
imul eax, dword [ebp - 0x6a8], 0xfffffff8
cmp eax, 1
ja 0x1000b2ff
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xf58c
jge 0x1000b2e3
mov dword [ebp - 0x318], 1
jmp 0x1000b2ea
and dword [ebp - 0x318], 0
cmp dword [ebp - 0x318], 2
jne 0x1000b2ff
mov dword [ebp - 0x580], 1
jmp 0x1000b306
and dword [ebp - 0x580], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x234]
cmp dword [ebp - 0x580], eax
jge 0x1000b32d
mov eax, 0x8a87ea82
test eax, eax
jne 0x1000b32d
and dword [ebp - 0x320], 0
jmp 0x1000b337
mov dword [ebp - 0x320], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x234]
cmp dword [ebp - 0x320], eax
jle 0x1000b358
mov dword [ebp - 0x29c], 1
jmp 0x1000b35f
and dword [ebp - 0x29c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x29c]
mov dword [ebp + eax - 0x234], ecx
cmp dword [ebp - 0x29c], 0
je 0x1000b38e
push 3
pop eax
test eax, eax
je 0x1000b38e
mov dword [ebp - 0x328], 1
jmp 0x1000b395
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x6a8]
cmp dword [ebp - 0x328], eax
jl 0x1000b3af
mov dword [ebp - 0x588], 1
jmp 0x1000b3b6
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 1
jge 0x1000b3cb
mov dword [ebp - 0x97c], 1
jmp 0x1000b3d2
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0x2a4]
cmp eax, 0xa9864ba8
jae 0x1000b3fe
mov dword [ebp - 0x330], 1
jmp 0x1000b405
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x330]
sub ecx, dword [ebp + eax - 0x7e4]
push 4
pop eax
imul eax, eax, 0
sub ecx, dword [ebp + eax - 0x7e4]
imul eax, ecx, 0xe213
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x7e4]
je 0x1000b446
mov dword [ebp - 0x7ac], 1
jmp 0x1000b44d
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x7ac]
mov dword [ebp - 0x984], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0xc00], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0xc08], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe8c], 0
cmp dword [ebp - 0x2a4], 0
je 0x1000b4a4
mov dword [ebp - 0x338], 1
jmp 0x1000b4ab
and dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x338]
sub ecx, dword [ebp + eax - 0x7e4]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x7e4]
jle 0x1000b4d6
cmp dword [ebp - 0x340], 0
je 0x1000b4f2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0
je 0x1000b4f2
mov dword [ebp - 0x590], 1
jmp 0x1000b4f9
and dword [ebp - 0x590], 0
cmp dword [ebp - 0x590], 0xdb3fa3ce
ja 0x1000b511
mov dword [ebp - 0x6b0], 1
jmp 0x1000b518
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x6b0], eax
je 0x1000b532
mov dword [ebp - 0x348], 1
jmp 0x1000b539
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x348]
sub ecx, dword [ebp + eax - 0x7e4]
mov dword [ebp - 0x98c], ecx
mov dword [ebp - 0x190], 0x3644
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0x834], 0x4e401d93
mov dword [ebp - 0x830], 0x4e401d93
mov dword [ebp - 0x82c], 0x4e401d93
mov dword [ebp - 0x828], 0x4e401d93
mov dword [ebp - 0x16c], 0x68ab8ac2
mov dword [ebp - 0x178], 0
jmp 0x1000b5b8
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 3
jge 0x1000b5d4
mov eax, dword [ebp - 0x178]
mov dword [ebp + eax*4 - 0xe38], 9
jmp 0x1000b5ab
cmp dword [ebp - 0x4c], 1
jge 0x1000b5e6
mov dword [ebp - 0x740], 1
jmp 0x1000b5ed
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x4c], 0
je 0x1000b603
xor eax, eax
je 0x1000b603
mov dword [ebp - 0x598], 1
jmp 0x1000b60a
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 1
jne 0x1000b61f
mov dword [ebp - 0x350], 1
jmp 0x1000b626
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x350]
cmp eax, 1
jb 0x1000b640
mov dword [ebp - 0x358], 1
jmp 0x1000b647
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x740]
cmp eax, dword [ebp - 0x358]
jl 0x1000b661
mov dword [ebp - 0x5a0], 1
jmp 0x1000b668
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0x37e0
je 0x1000b689
mov eax, 0x5e2d
test eax, eax
je 0x1000b689
mov dword [ebp - 0x838], 1
jmp 0x1000b690
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xc10], eax
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x4c]
cmp eax, 0xffffffff
jg 0x1000b6b0
mov dword [ebp - 0x360], 1
jmp 0x1000b6b7
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x360]
jge 0x1000b6ce
mov dword [ebp - 0x6b8], 1
jmp 0x1000b6d5
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x6b8], eax
jl 0x1000b6ec
mov dword [ebp - 0x368], 1
jmp 0x1000b6f3
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0x15bb
jg 0x1000b70b
mov dword [ebp - 0x5a8], 1
jmp 0x1000b712
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
mov dword [ebp - 0xcf4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
cmp dword [ebp - 0x4c], eax
jg 0x1000b74f
mov dword [ebp - 0x370], 1
jmp 0x1000b756
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
add eax, dword [ebp - 0x370]
je 0x1000b8cd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x834], 0
je 0x1000b8cd
mov dword [ebp - 0x380], 0x88ad
mov dword [ebp - 0x9a8], 0x8c74c3ee
mov dword [ebp - 0xac4], 0x14be495e
mov dword [ebp - 0xac0], 0x14be495e
mov dword [ebp - 0xabc], 0x14be495e
mov dword [ebp - 0xab8], 0x14be495e
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x1000b7e8
push 0
push 0x1cae
push 0x1315
push 0x7e1
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov dword [ebp - 0x184], 9
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x380], eax
jle 0x1000b80c
mov dword [ebp - 0x788], 1
jmp 0x1000b813
and dword [ebp - 0x788], 0
cmp dword [ebp - 0x788], 0xa8d6e859
jbe 0x1000b82b
mov dword [ebp - 0x2ac], 1
jmp 0x1000b832
and dword [ebp - 0x2ac], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ac]
mov dword [ebp + eax - 0xac4], ecx
mov eax, dword [ebp - 0x9a8]
sub eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x378], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0xe38], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x834]
cmp dword [ebp - 0x378], eax
jg 0x1000b88a
mov dword [ebp - 0x5b0], 1
jmp 0x1000b891
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0x7963f6d1
je 0x1000b8a9
mov dword [ebp - 0x9b0], 1
jmp 0x1000b8b0
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0xcfc], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x16c], eax
jmp 0x1000b95a
mov dword [ebp - 0x16c], 0
jmp 0x1000b8e6
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jg 0x1000b93b
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1000b91a
push 0
push 0x2474
push 0
push 0xad1
push 0x4a0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov byte [ebp - 0x104], 0
movzx eax, byte [ebp - 0x104]
test eax, eax
je 0x1000b939
push 0x299
push 0
call dword [sym.imp.ADVAPI32.dll_InitializeSecurityDescriptor]
jmp 0x1000b8d9
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1000b95a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
mov dword [ebp - 0x188], 0xc03342eb
mov dword [ebp - 0xd04], 0xfffffffd
mov dword [ebp - 0xd0c], 0xfffffffc
mov dword [ebp - 0xd14], 0xc1e1
mov dword [ebp - 0xa4], 0
jmp 0x1000b99b
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x1000b9b7
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xa2c], 0x7ab89bdd
jmp 0x1000b98e
mov dword [ebp - 0xa4], 0
jmp 0x1000b9d0
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1000b9ec
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xebc], 0xffffffff
jmp 0x1000b9c3
mov dword [ebp - 0x188], 0
jmp 0x1000ba05
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 6
jl 0x1000bb88
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xd24], 1
mov dword [ebp - 0x54], 0
jmp 0x1000ba40
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x1000ba56
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xef0], 0xffffffff
jmp 0x1000ba39
mov dword [ebp - 0x54], 0
jmp 0x1000ba66
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000ba7c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xe74], 0x7ae2718b
jmp 0x1000ba5f
xor eax, eax
inc eax
je 0x1000bad6
mov dword [ebp - 0x1e4], 0
jmp 0x1000ba9a
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 2
jge 0x1000bab6
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xa1c], 0xae88b149
jmp 0x1000ba8d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa1c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa1c], eax
jmp 0x1000bb6e
mov dword [ebp - 0x8c], 3
jmp 0x1000baef
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1000bb6e
mov dword [ebp - 0x9b8], 0xb83dcdcb
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp + eax*4 - 0xa2c]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x6c0]
mov dword [ebp + eax*4 - 0xa2c], ecx
cmp dword [ebp - 0x6c0], 0
je 0x1000bb58
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp + eax*4 - 0xa2c], ecx
mov eax, dword [ebp - 0x8c]
cmp dword [ebp + eax*4 - 0xa2c], 0
je 0x1000bb56
jmp 0x1000bb6e
jmp 0x1000bb69
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xa2c], 0xa44e0c42
jmp 0x1000bae2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe74], 0
je 0x1000bb83
jmp 0x1000b9f8
jmp 0x1000b9f8
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x85c], 0x915bb00
mov dword [ebp - 0x398], 0xee3f2f34
mov dword [ebp - 0x5c], 0
jmp 0x1000bbb6
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1000bbcc
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xc40], 1
jmp 0x1000bbaf
mov dword [ebp - 0x5c], 0
jmp 0x1000bbdc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000bbf2
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x9e4], 3
jmp 0x1000bbd5
cmp dword [ebp - 0x190], 0xffffffff
jbe 0x1000bc07
mov dword [ebp - 0x388], 1
jmp 0x1000bc0e
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc40], 0x485b
cmp dword [ebp - 0x388], 0x485b
jg 0x1000bc37
mov dword [ebp - 0x3a0], 1
jmp 0x1000bc3e
and dword [ebp - 0x3a0], 0
mov dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x190], 0xc863cc1d
ja 0x1000bc60
mov dword [ebp - 0x5b8], 1
jmp 0x1000bc67
and dword [ebp - 0x5b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e4]
cmp dword [ebp - 0x5b8], eax
jg 0x1000bc88
mov dword [ebp - 0x390], 1
jmp 0x1000bc8f
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x390]
lea eax, [ecx + eax + 1]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x9e4]
jle 0x1000bcba
mov dword [ebp - 0x748], 1
jmp 0x1000bcc1
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x85c]
cmp dword [ebp - 0x748], eax
je 0x1000bcdb
mov dword [ebp - 0x848], 1
jmp 0x1000bce2
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xd2c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e4]
add eax, dword [ebp - 0x398]
jne 0x1000bd0a
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x1000bd13
mov eax, 0x88dc
test eax, eax
jne 0x1000bd25
mov eax, 0x2714
test eax, eax
jne 0x1000bd25
and dword [ebp - 0x5c0], 0
jmp 0x1000bd2f
mov dword [ebp - 0x5c0], 1
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x5c0], eax
jne 0x1000bd49
mov dword [ebp - 0x6c8], 1
jmp 0x1000bd50
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x3a0]
cmp eax, dword [ebp - 0x6c8]
jne 0x1000bd6a
mov dword [ebp - 0x3a8], 1
jmp 0x1000bd71
and dword [ebp - 0x3a8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x9e4], ecx
mov dword [ebp - 0xb4], 0xb9f9b319
mov dword [ebp - 0x6d0], 0xfffffff8
mov dword [ebp - 0x5c8], 0xe28d
mov dword [ebp - 0x918], 0
mov dword [ebp - 0xb4], 0x14
jmp 0x1000bdc5
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0xe
je 0x1000bf2c
mov dword [ebp - 0x15c], 0xfffffffb
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x1000bdfa
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0xd54], eax
mov eax, dword [ebp - 0xb4]
add eax, 6
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0x5c8]
cmp dword [ebp - 0xb4], eax
jl 0x1000be35
cmp dword [ebp - 0x15c], 0
jne 0x1000be35
and dword [ebp - 0x3b0], 0
jmp 0x1000be3f
mov dword [ebp - 0x3b0], 1
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x3b0], eax
jg 0x1000be59
mov dword [ebp - 0x7d4], 1
jmp 0x1000be60
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x7d4], eax
jl 0x1000be7a
mov dword [ebp - 0x3b8], 1
jmp 0x1000be81
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0xb4]
je 0x1000bea2
mov dword [ebp - 0x5d0], 1
jmp 0x1000bea9
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x5d0], eax
jl 0x1000bec3
mov dword [ebp - 0x3c0], 1
jmp 0x1000beca
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x3c0]
jne 0x1000bee9
or eax, 0xffffffff
je 0x1000bee9
mov dword [ebp - 0x3c8], 1
jmp 0x1000bef0
and dword [ebp - 0x3c8], 0
mov dword [ebp - 0x6d0], 0xffffffff
mov eax, dword [ebp - 0x6d0]
cmp eax, dword [ebp - 0x3c8]
jle 0x1000bf14
mov dword [ebp - 0x5d8], 1
jmp 0x1000bf1b
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x918], eax
jmp 0x1000bdb8
mov dword [ebp - 0x94], 0x74b666a7
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x30], 0
jmp 0x1000bf4d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1000bf63
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xeac], 0x963ba20b
jmp 0x1000bf46
mov dword [ebp - 0x30], 0
jmp 0x1000bf73
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1000bf89
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xc4c], 0xfffffff9
jmp 0x1000bf6c
cmp dword [ebp - 0x94], 9
je 0x1000bf9e
mov dword [ebp - 0x3d0], 1
jmp 0x1000bfa5
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x94], 0
je 0x1000bfc3
cmp dword [ebp - 0x94], 0
je 0x1000bfc3
mov dword [ebp - 0x750], 1
jmp 0x1000bfca
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x3d0]
cmp eax, dword [ebp - 0x750]
je 0x1000bfea
cmp dword [ebp - 0x10], 0
je 0x1000bfea
mov dword [ebp - 0x3d8], 1
jmp 0x1000bff1
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, 0x2be1aa6a
je 0x1000c0b7
mov dword [ebp - 0x94], 0
jmp 0x1000c01b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jg 0x1000c0b2
mov dword [ebp - 0x10], 0
jmp 0x1000c038
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1000c081
mov dword [ebp - 0xa3c], 0
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0xa34], 0
mov dword [ebp - 0xa30], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa3c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa3c], eax
jmp 0x1000c031
mov dword [ebp - 0x10], 0
jmp 0x1000c091
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1000c0ad
mov dword [ebp - 0x850], 0x9cb0befc
mov dword [ebp - 0x850], 0xc41ac3dc
jmp 0x1000c08a
jmp 0x1000c00e
jmp 0x1000c1f1
mov dword [ebp - 0x298], 1
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1000c116
push 0
push 0x22b4
push 0xd
push 0x2405
push 0x54f
push 0xbc8
push 0x159b
push 0x281
push 0xa8
push 0x4c
push 0xcb2
push 0x24a6
push 0xb22
push 0x1603
call dword [sym.imp.GDI32.dll_CreateFontA]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xd64], eax
cmp dword [ebp - 0x10], 0xda6c
jl 0x1000c140
mov dword [ebp - 0x5e0], 1
jmp 0x1000c147
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x5e0], 0xfffffffa
jge 0x1000c15c
mov dword [ebp - 0x930], 1
jmp 0x1000c163
and dword [ebp - 0x930], 0
mov eax, 0xf816
test eax, eax
jne 0x1000c178
mov dword [ebp - 0x3e0], 1
jmp 0x1000c17f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x3e0], eax
jge 0x1000c1a2
cmp dword [ebp - 0x94], 0
je 0x1000c1a2
mov dword [ebp - 0x6d8], 1
jmp 0x1000c1a9
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x6d8], eax
jne 0x1000c1bd
cmp dword [ebp - 0x298], 0
jne 0x1000c1cb
or eax, 0xffffffff
jne 0x1000c1cb
and dword [ebp - 0x858], 0
jmp 0x1000c1d5
mov dword [ebp - 0x858], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xd6c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x298]
mov dword [ebp + eax - 0xc4c], ecx
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x1000c220
push 0
push 0x79a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0xec], 0
mov dword [ebp - 0x260], 0x15256ee9
mov dword [ebp - 0xd74], 0x2dfce95
mov dword [ebp - 0xd7c], 0x83faa058
mov dword [ebp - 0xd84], 0xffffffff
mov dword [ebp - 0xd8c], 0x4f34d89b
mov dword [ebp - 0x1e8], 0
jmp 0x1000c275
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 3
jge 0x1000c291
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xec8], 0xffffffff
jmp 0x1000c268
mov dword [ebp - 0xec], 0xc
jmp 0x1000c2aa
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0xfffffff4
jg 0x1000c56e
mov dword [ebp - 0x6c], 0x5dae5a6
mov dword [ebp - 0xd94], 0x1456b864
mov dword [ebp - 0xd9c], 0
mov dword [ebp - 0xda4], 9
mov dword [ebp - 0xdac], 0x361cd5cc
mov dword [ebp - 0x198], 0
jmp 0x1000c2ff
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 4
jge 0x1000c31b
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xf40], 0xb531eaa4
jmp 0x1000c2f2
xor eax, eax
inc eax
je 0x1000c4ff
mov dword [ebp - 0x9cc], 0
mov dword [ebp - 0x9c8], 0
mov dword [ebp - 0x9c4], 0
mov dword [ebp - 0x9c0], 0
mov dword [ebp - 0x790], 0xcdf8abff
cmp dword [ebp - 0x6c], 0
je 0x1000c361
jmp 0x1000c56e
cmp dword [ebp - 0x6c], 0
je 0x1000c373
mov dword [ebp - 0x3e8], 1
jmp 0x1000c37a
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0xfffffffa
jb 0x1000c395
cmp dword [ebp - 0xec], 0
jne 0x1000c395
and dword [ebp - 0x5e8], 0
jmp 0x1000c39f
mov dword [ebp - 0x5e8], 1
cmp dword [ebp - 0x5e8], 0
je 0x1000c3c4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9cc], 0
je 0x1000c3c4
mov dword [ebp - 0x3f0], 1
jmp 0x1000c3cb
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x790], eax
je 0x1000c3ee
mov dword [ebp - 0x3f8], 1
jmp 0x1000c3f5
and dword [ebp - 0x3f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9cc]
sub eax, dword [ebp - 0x3f8]
imul eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
jg 0x1000c41d
mov dword [ebp - 0xdbc], 1
mov dword [ebp - 0xdc4], 0xfffffffd
mov dword [ebp - 0xdcc], 0xffffffff
mov dword [ebp - 0x410], 4
mov dword [ebp - 0x1f0], 0
jmp 0x1000c540
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x1000c55c
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xdd4], 0x8ce22955
jmp 0x1000c533
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
jmp 0x1000c29d
mov dword [ebp - 0x1c], 0x4e064826
mov dword [ebp - 0x6e8], 0x493e623b
mov dword [ebp - 0xb04], 0xfffffff7
mov dword [ebp - 0xb00], 0xfffffff7
mov dword [ebp - 0xafc], 0xfffffff7
mov dword [ebp - 0xaf8], 0xfffffff7
mov dword [ebp - 0x1c], 5
jmp 0x1000c5b7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x17
jne 0x1000c722
mov dword [ebp - 0x758], 3
mov dword [ebp - 0x1a0], 1
mov dword [ebp - 0x420], 0x12f3ccd2
mov eax, 0x4f2887cf
test eax, eax
je 0x1000c6e3
cmp dword [ebp - 0x1c], 0
je 0x1000c6e3
mov eax, dword [ebp - 0x758]
cmp dword [ebp - 0x1c], eax
jge 0x1000c60d
mov dword [ebp - 0x428], 1
jmp 0x1000c614
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x758], 0x145c
jge 0x1000c62c
mov dword [ebp - 0x418], 1
jmp 0x1000c633
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x418], eax
jne 0x1000c64d
mov dword [ebp - 0x600], 1
jmp 0x1000c654
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xde4], eax
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x6e8], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x6e8], eax
jg 0x1000c69b
mov dword [ebp - 0x608], 1
jmp 0x1000c6a2
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x428]
cmp eax, dword [ebp - 0x608]
jl 0x1000c6bc
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x7b8], eax
jle 0x1000c704
mov dword [ebp - 0x438], 1
jmp 0x1000c70b
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x438]
mov dword [ebp + eax - 0xb04], ecx
jmp 0x1000c5b0
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000c743
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov dword [ebp - 0xac], 0xb9f9b319
mov dword [ebp - 0x760], 0xfffffff8
mov dword [ebp - 0x610], 0xe28d
mov dword [ebp - 0x860], 0
mov dword [ebp - 0xac], 0x14
jmp 0x1000c784
cmp dword [ebp - 0xac], 0xe
je 0x1000c8eb
mov dword [ebp - 0x164], 0xfffffffb
mov byte [ebp - 0x118], 0
movzx eax, byte [ebp - 0x118]
test eax, eax
je 0x1000c7b9
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xdec], eax
mov eax, dword [ebp - 0xac]
add eax, 6
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
cmp dword [ebp - 0xac], eax
jl 0x1000c7f4
cmp dword [ebp - 0x164], 0
jne 0x1000c7f4
and dword [ebp - 0x440], 0
jmp 0x1000c7fe
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x440], eax
jg 0x1000c818
mov dword [ebp - 0x6f0], 1
jmp 0x1000c81f
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x6f0], eax
jl 0x1000c839
mov dword [ebp - 0x9c], 0x74b666a7
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x74], 0
jmp 0x1000c90c
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1000c922
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xea4], 0x963ba20b
jmp 0x1000c905
mov dword [ebp - 0x74], 0
jmp 0x1000c932
cmp dword [ebp - 0x74], 2
jge 0x1000c948