Function at 0x100090d9
Capabilities:
Get graphical window text
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100884b8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x127c
call fcn.100846c0
push esi
push edi
push 2
lea ecx, [ebp - 0x360]
call fcn.10019b25
and dword [ebp - 4], 0
mov dword [ebp - 0x1c], 0x905c8094
mov dword [ebp - 0x1f0], 0xffffffff
mov dword [ebp - 0x2c8], 0
jmp 0x10009138
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x1000915a
push dword [ebp - 0x2c8]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov dword [eax], 1
jmp 0x1000912b
mov dword [ebp - 0x1c], 1
jmp 0x1000916a
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1000941d
mov dword [ebp - 0x144], 0xffffffff
mov dword [ebp - 0xbf8], 7
mov dword [ebp - 0xcdc], 0xd10fbf2b
mov dword [ebp - 0x144], 1
jmp 0x100091ab
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x10009418
mov dword [ebp - 0x494], 0xfffffffa
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov esi, dword [ebp - 0x1c]
push 1
lea ecx, [ebp - 0x360]
call fcn.10019b92
cmp esi, dword [eax]
jle 0x100091f0
mov dword [ebp - 0x830], 1
jmp 0x100091f7
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
sub eax, dword [ebp - 0x1f0]
cmp eax, 8
je 0x10009227
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
cmp dword [eax], 0
je 0x10009227
mov dword [ebp - 0xc44], 1
jmp 0x1000922e
and dword [ebp - 0xc44], 0
cmp dword [ebp - 0x1c], 0xffffffff
jle 0x10009240
mov dword [ebp - 0xbc8], 1
jmp 0x10009247
and dword [ebp - 0xbc8], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov ecx, dword [ebp - 0xbc8]
cmp ecx, dword [eax]
jg 0x1000926b
mov dword [ebp - 0xbd0], 1
jmp 0x10009272
and dword [ebp - 0xbd0], 0
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0xbd0], eax
jge 0x1000928c
mov dword [ebp - 0xbd8], 1
jmp 0x10009293
and dword [ebp - 0xbd8], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov eax, dword [eax]
cmp eax, dword [ebp - 0xbd8]
jge 0x100092b7
mov dword [ebp - 0xbe0], 1
jmp 0x100092be
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
add eax, 0xdcef
sub eax, dword [ebp - 0x144]
je 0x100092f0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
cmp dword [eax], 0
je 0x100092f0
mov dword [ebp - 0xbe8], 1
jmp 0x100092f7
and dword [ebp - 0xbe8], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov ecx, dword [ebp - 0xbe8]
cmp ecx, dword [eax]
jne 0x1000931b
mov dword [ebp - 0xbf0], 1
jmp 0x10009322
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xbf0]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xfd0], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov eax, dword [eax]
mov dword [ebp - 0xbf8], eax
cmp dword [ebp - 0xbf8], 0
jne 0x10009379
mov eax, 0xffff
test eax, eax
jne 0x10009379
and dword [ebp - 0xc00], 0
jmp 0x10009383
mov dword [ebp - 0xc00], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov eax, dword [eax]
cmp eax, dword [ebp - 0xc00]
jge 0x100093a7
mov dword [ebp - 0xc08], 1
jmp 0x100093ae
and dword [ebp - 0xc08], 0
push dword [ebp - 0x144]
lea ecx, [ebp - 0x360]
call fcn.10019b92
mov ecx, dword [ebp - 0xc08]
cmp ecx, dword [eax]
je 0x100093d5
mov dword [ebp - 0xc10], 1
jmp 0x100093dc
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x494]
cmp dword [ebp - 0xc10], eax
jge 0x100093f6
mov dword [ebp - 0x748], 1
jmp 0x100093fd
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xcdc], eax
mov dword [ebp - 0x494], 0x85b3d925
jmp 0x1000919e
jmp 0x10009163
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.10019b8d
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x2a0], 0x9a7b445a
mov dword [ebp - 0x468], 9
mov dword [ebp - 0x98], 8
mov dword [ebp - 0x4c4], 0x2db8e964
mov dword [ebp - 0x4bc], 0x9725245f
mov dword [ebp - 0x4ac], 4
mov dword [ebp - 0x90c], 0xffffffff
mov dword [ebp - 0x190], 0x3acb
mov dword [ebp - 0x458], 0xfff8
push 2
lea ecx, [ebp - 0xe3c]
call fcn.10019b25
mov dword [ebp - 4], 1
mov dword [ebp - 0x10], 0
jmp 0x100094b1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100094c7
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x174], 0
jmp 0x100094aa
mov dword [ebp - 0x10], 0
jmp 0x100094d7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x100094ed
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xd58], 0xffffffff
jmp 0x100094d0
mov dword [ebp - 0x10], 0
jmp 0x100094fd
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10009513
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1ec], 0x142c
jmp 0x100094f6
mov dword [ebp - 0x10], 0
jmp 0x10009523
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000953f
push dword [ebp - 0x10]
lea ecx, [ebp - 0xe3c]
call fcn.10019b92
mov dword [eax], 0xfffffffe
jmp 0x1000951c
mov dword [ebp - 0x98], 0
jmp 0x10009558
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x1000990b
mov dword [ebp - 0x109c], 0xfffffff6
mov dword [ebp - 0x460], 0xc345fe46
mov dword [ebp - 0xd60], 0xffffffff
mov dword [ebp - 0x11a0], 3
push 2
lea ecx, [ebp - 0x10e0]
call fcn.10019b25
mov byte [ebp - 4], 2
push 2
lea ecx, [ebp - 0xedc]
call fcn.10019b25
mov byte [ebp - 4], 3
mov dword [ebp - 0xac], 0
jmp 0x100095c8
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x100095e7
push dword [ebp - 0xac]
lea ecx, [ebp - 0x10e0]
call fcn.10019b92
or dword [eax], 0xffffffff
jmp 0x100095bb
mov dword [ebp - 0xac], 0
jmp 0x10009600
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10009622
push dword [ebp - 0xac]
lea ecx, [ebp - 0xedc]
call fcn.10019b92
mov dword [eax], 1
jmp 0x100095f3
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x174], 0xffffffff
je 0x1000963e
mov dword [ebp - 0xce4], 1
jmp 0x10009645
and dword [ebp - 0xce4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1ec], eax
mov eax, dword [ebp - 0x460]
cmp dword [ebp - 0x190], eax
jl 0x1000967a
mov dword [ebp - 0x8ec], 1
jmp 0x10009681
and dword [ebp - 0x8ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
cmp eax, dword [ebp - 0x8ec]
jne 0x100096b2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1ec], 0
je 0x100096b2
mov dword [ebp - 0x49c], 1
jmp 0x100096b9
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x458]
dec eax
mov dword [ebp - 0x458], eax
mov eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0x49c]
jg 0x100096e0
mov dword [ebp - 0x8f4], 1
jmp 0x100096e7
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0x31a2
jle 0x10009708
cmp dword [ebp - 0x460], 0
je 0x10009708
mov dword [ebp - 0x4a4], 1
jmp 0x1000970f
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1ec]
cmp dword [ebp - 0x4a4], eax
je 0x10009730
mov dword [ebp - 0x8fc], 1
jmp 0x10009737
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
mov dword [ebp - 0x4ac], eax
cmp dword [ebp - 0x4ac], 0
jne 0x1000975e
mov eax, 0xfffe
test eax, eax
jne 0x1000975e
and dword [ebp - 0x904], 0
jmp 0x10009768
mov dword [ebp - 0x904], 1
push 1
lea ecx, [ebp - 0xedc]
call fcn.10019b92
mov eax, dword [eax]
add eax, dword [ebp - 0x904]
mov ecx, dword [ebp - 0x98]
cmp eax, dword [ebp + ecx*4 - 0x174]
jg 0x10009798
mov dword [ebp - 0xcec], 1
jmp 0x1000979f
and dword [ebp - 0xcec], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x174]
mov dword [ebp - 0x1168], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0xfa0], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd58], 0xffff
cmp dword [ebp - 0x98], 0xffff
jg 0x100097f3
mov dword [ebp - 0x4b4], 1
jmp 0x100097fa
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x90c], eax
mov esi, dword [ebp - 0x90c]
add esi, dword [ebp - 0x4bc]
push 4
pop eax
imul eax, eax, 0
sub esi, dword [ebp + eax - 0x174]
push 0
lea ecx, [ebp - 0xe3c]
call fcn.10019b92
cmp esi, dword [eax]
jge 0x1000983e
mov eax, dword [ebp - 0x98]
cmp dword [ebp + eax*4 - 0x174], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0xfa4], eax
push 1
lea ecx, [ebp - 0xe3c]
call fcn.10019b92
mov ecx, dword [ebp - 0xd60]
cmp dword [eax], ecx
jg 0x1000986d
mov dword [ebp - 0x914], 1
jmp 0x10009874
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x4c4], eax
mov dword [ebp - 0x190], 0
jmp 0x10009899
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jg 0x100098e8
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd70], 3
mov eax, dword [ebp - 0xd68]
mov dword [ebp - 0xd70], eax
mov byte [ebp - 0x138], 0
movzx eax, byte [ebp - 0x138]
test eax, eax
je 0x100098e6
push 0
push 0x22c8
push 0x20ec
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x1000988c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xedc]
call fcn.10019b8d
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x10e0]
call fcn.10019b8d
jmp 0x1000954b
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x10009933
push 0
push 0
push 0xb43
push 0x254a
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe3c]
call fcn.10019b8d
mov dword [ebp - 0xd90], 0x585fafe4
mov byte [ebp - 0x127], 0
movzx eax, byte [ebp - 0x127]
test eax, eax
je 0x10009977
push 0x2267
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x2a0], 5
cmp dword [ebp - 0x2a0], 0
je 0x1000999c
cmp dword [ebp - 0x40], 0
je 0x1000999c
mov dword [ebp - 0x91c], 1
jmp 0x100099a3
and dword [ebp - 0x91c], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x91c]
je 0x100099bd
mov dword [ebp - 0xd78], 1
jmp 0x100099c4
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xfd8], eax
mov eax, 0xcf81320f
test eax, eax
jne 0x100099e8
cmp dword [ebp - 0x2a0], 0
jne 0x100099e8
and dword [ebp - 0x4cc], 0
jmp 0x100099f2
mov dword [ebp - 0x4cc], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4cc], eax
jg 0x10009a09
mov dword [ebp - 0x924], 1
jmp 0x10009a10
and dword [ebp - 0x924], 0
cmp dword [ebp - 0x924], 0xce4a
je 0x10009a28
mov dword [ebp - 0x4d4], 1
jmp 0x10009a2f
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0
je 0x10009a4d
cmp dword [ebp - 0x2a0], 0
je 0x10009a4d
mov dword [ebp - 0x92c], 1
jmp 0x10009a54
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
sub eax, dword [ebp - 0x40]
cmp eax, 0xff44
jl 0x10009a7c
mov dword [ebp - 0x4dc], 1
jmp 0x10009a83
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x4dc]
je 0x10009aa0
mov eax, 0x7c71
test eax, eax
jne 0x10009aa0
and dword [ebp - 0x934], 0
jmp 0x10009aaa
mov dword [ebp - 0x934], 1
cmp dword [ebp - 0x934], 0xbf8b243e
je 0x10009ac2
mov dword [ebp - 0xd80], 1
jmp 0x10009ac9
and dword [ebp - 0xd80], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xfe0], eax
cmp dword [ebp - 0x40], 0
je 0x10009aed
mov eax, 0x1718
test eax, eax
je 0x10009aed
mov dword [ebp - 0x4e4], 1
jmp 0x10009af4
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4e4], eax
je 0x10009b0b
mov dword [ebp - 0xd88], 1
jmp 0x10009b12
and dword [ebp - 0xd88], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xfe8], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x468], eax
jne 0x10009b32
mov dword [ebp - 0x93c], 1
jmp 0x10009b39
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x93c]
mov dword [ebp - 0xd90], eax
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x1f4], 0x9a7b445a
mov dword [ebp - 0x470], 9
mov dword [ebp - 0xe30], 0x585fafe4
mov byte [ebp - 0xe2], 0
movzx eax, byte [ebp - 0xe2]
test eax, eax
je 0x10009b95
push 0x2267
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x1f4], 5
cmp dword [ebp - 0x1f4], 0
je 0x10009bba
cmp dword [ebp - 0x38], 0
je 0x10009bba
mov dword [ebp - 0x4ec], 1
jmp 0x10009bc1
and dword [ebp - 0x4ec], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x4ec]
je 0x10009bdb
mov dword [ebp - 0xe18], 1
jmp 0x10009be2
and dword [ebp - 0xe18], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xff0], eax
mov eax, 0xcf81320f
test eax, eax
jne 0x10009c06
cmp dword [ebp - 0x1f4], 0
jne 0x10009c06
and dword [ebp - 0x944], 0
jmp 0x10009c10
mov dword [ebp - 0x944], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x944], eax
jg 0x10009c27
mov dword [ebp - 0x4f4], 1
jmp 0x10009c2e
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0xce4a
je 0x10009c46
mov dword [ebp - 0x94c], 1
jmp 0x10009c4d
and dword [ebp - 0x94c], 0
cmp dword [ebp - 0x94c], 0
je 0x10009c6b
cmp dword [ebp - 0x1f4], 0
je 0x10009c6b
mov dword [ebp - 0x4fc], 1
jmp 0x10009c72
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
sub eax, dword [ebp - 0x38]
cmp eax, 0xff44
jl 0x10009c9a
mov dword [ebp - 0x954], 1
jmp 0x10009ca1
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x954]
je 0x10009cbe
mov eax, 0x7c71
test eax, eax
jne 0x10009cbe
and dword [ebp - 0x504], 0
jmp 0x10009cc8
mov dword [ebp - 0x504], 1
cmp dword [ebp - 0x504], 0xbf8b243e
je 0x10009ce0
mov dword [ebp - 0xe20], 1
jmp 0x10009ce7
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xff8], eax
cmp dword [ebp - 0x38], 0
je 0x10009d0b
mov eax, 0x1718
test eax, eax
je 0x10009d0b
mov dword [ebp - 0x95c], 1
jmp 0x10009d12
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x95c], eax
je 0x10009d29
mov dword [ebp - 0xe28], 1
jmp 0x10009d30
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1000], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x470], eax
jne 0x10009d50
mov dword [ebp - 0x50c], 1
jmp 0x10009d57
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0xe30], eax
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1d8], 0x9a7b445a
mov dword [ebp - 0x478], 9
mov dword [ebp - 0xc50], 0x585fafe4
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x10009db3
push 0x2267
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x1d8], 5
cmp dword [ebp - 0x1d8], 0
je 0x10009dd8
cmp dword [ebp - 0x2c], 0
je 0x10009dd8
mov dword [ebp - 0x964], 1
jmp 0x10009ddf
and dword [ebp - 0x964], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x964]
je 0x10009df9
mov dword [ebp - 0xe0c], 1
jmp 0x10009e00
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1008], eax
mov eax, 0xcf81320f
test eax, eax
jne 0x10009e24
cmp dword [ebp - 0x1d8], 0
jne 0x10009e24
and dword [ebp - 0x514], 0
jmp 0x10009e2e
mov dword [ebp - 0x514], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x514], eax
jg 0x10009e45
mov dword [ebp - 0x96c], 1
jmp 0x10009e4c
and dword [ebp - 0x96c], 0
cmp dword [ebp - 0x96c], 0xce4a
je 0x10009e64
mov dword [ebp - 0x51c], 1
jmp 0x10009e6b
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0
je 0x10009e89
cmp dword [ebp - 0x1d8], 0
je 0x10009e89
mov dword [ebp - 0x974], 1
jmp 0x10009e90
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x2c]
cmp eax, 0xff44
jl 0x10009eb8
mov dword [ebp - 0x524], 1
jmp 0x10009ebf
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x524]
je 0x10009edc
mov eax, 0x7c71
test eax, eax
jne 0x10009edc
and dword [ebp - 0x97c], 0
jmp 0x10009ee6
mov dword [ebp - 0x97c], 1
cmp dword [ebp - 0x97c], 0xbf8b243e
je 0x10009efe
mov dword [ebp - 0xd7c], 1
jmp 0x10009f05
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1010], eax
cmp dword [ebp - 0x2c], 0
je 0x10009f29
mov eax, 0x1718
test eax, eax
je 0x10009f29
mov dword [ebp - 0x52c], 1
jmp 0x10009f30
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x52c], eax
je 0x10009f47
mov dword [ebp - 0xcd4], 1
jmp 0x10009f4e
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x478], eax
jne 0x10009f6e
mov dword [ebp - 0x984], 1
jmp 0x10009f75
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0xc50], eax
mov dword [ebp - 0x1fc], 0x3ae35568
mov dword [ebp - 0xf0], 8
mov dword [ebp - 0x2a4], 0
jmp 0x10009fae
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10009fca
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x1238], 0xb905d09e
jmp 0x10009fa1
mov dword [ebp - 0x1fc], 0x12
jmp 0x10009fe3
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xffffffe3
jge 0x1000a17b
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x334], 0
jmp 0x1000a013
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 2
jge 0x1000a02f
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0xe50], 0x26d2e858
jmp 0x1000a006
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf0], 0
jmp 0x1000a055
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jg 0x1000a176
mov dword [ebp - 0x204], 1
jmp 0x1000a07b
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jl 0x1000a171
mov dword [ebp - 0x2ac], 0x746a1c17
mov dword [ebp - 0x2ac], 0
jmp 0x1000a0ab
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jg 0x1000a16c
mov dword [ebp - 0x150], 0x3e763161
mov eax, dword [ebp - 0xf0]
cmp dword [ebp + eax*4 - 0xe50], 0
je 0x1000a0d7
jmp 0x1000a16c
mov dword [ebp - 0x150], 1
jmp 0x1000a0f0
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x1000a167
mov dword [ebp - 0x20c], 0xc9fa8bc0
mov dword [ebp - 0x20c], 0
jmp 0x1000a11c
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jg 0x1000a162
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000a14d
push 0x546
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x150]
mov dword [ebp + eax*4 - 0xe50], ecx
jmp 0x1000a10f
jmp 0x1000a0e3
jmp 0x1000a09e
jmp 0x1000a06e
jmp 0x1000a048
jmp 0x10009fd6
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x68], 0x923607a9
mov dword [ebp - 0x198], 0x93dda37b
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1020], eax
mov eax, 0xfffb
test eax, eax
jne 0x1000a1bb
mov dword [ebp - 0x68], 0x3d1b
cmp dword [ebp - 0x68], 0
jne 0x1000a1bb
and dword [ebp - 0x98c], 0
jmp 0x1000a1c5
mov dword [ebp - 0x98c], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1028], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x24], eax
jge 0x1000a1e5
mov dword [ebp - 0x534], 1
jmp 0x1000a1ec
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x534]
cmp dword [ebp - 0x98c], eax
jl 0x1000a209
mov dword [ebp - 0x53c], 1
jmp 0x1000a210
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x53c], eax
jle 0x1000a227
mov dword [ebp - 0x994], 1
jmp 0x1000a22e
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x994], eax
jg 0x1000a248
mov dword [ebp - 0x544], 1
jmp 0x1000a24f
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x544], eax
je 0x1000a25e
cmp dword [ebp - 0x24], 0
cmp dword [ebp - 0x68], 0
je 0x1000a5e5
mov dword [ebp - 0xcc], 8
mov dword [ebp - 0x9cc], 0xd2c643d4
mov dword [ebp - 0x68], 0xffffffec
jmp 0x1000a28c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x1b
jle 0x1000a5e0
mov dword [ebp - 0x9a4], 0xfc02
push 1
lea ecx, [ebp - 0xee8]
call fcn.10019b25
mov dword [ebp - 4], 4
mov dword [ebp - 0x488], 0x4d4a788a
mov dword [ebp - 0x2fc], 0
jmp 0x1000a2d7
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x1000a2f9
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0xee8]
call fcn.10019b92
mov dword [eax], 0x26de0d61
jmp 0x1000a2ca
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x1000a31a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x9a4], 0
jne 0x1000a458
cmp dword [ebp - 0x68], 0xffffffff
je 0x1000a339
mov dword [ebp - 0x99c], 1
jmp 0x1000a340
and dword [ebp - 0x99c], 0
cmp dword [ebp - 0x99c], 0
je 0x1000a355
mov dword [ebp - 0x54c], 1
jmp 0x1000a35c
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0
je 0x1000a369
cmp dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x9a4], eax
jle 0x1000a383
mov dword [ebp - 0x554], 1
jmp 0x1000a38a
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x554], eax
jne 0x1000a3a7
cmp dword [ebp - 0x68], 0
jne 0x1000a3a7
and dword [ebp - 0x9ac], 0
jmp 0x1000a3b1
mov dword [ebp - 0x9ac], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x9ac], eax
jne 0x1000a3c8
mov dword [ebp - 0x480], 1
jmp 0x1000a3cf
and dword [ebp - 0x480], 0
push 0
lea ecx, [ebp - 0xee8]
call fcn.10019b92
mov ecx, dword [ebp - 0x480]
mov dword [eax], ecx
cmp dword [ebp - 0x480], 0xffffffff
jl 0x1000a3f9
mov dword [ebp - 0x55c], 1
jmp 0x1000a400
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0x2b0a
jl 0x1000a418
mov dword [ebp - 0x9b4], 1
jmp 0x1000a41f
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x9b4]
jg 0x1000a439
mov dword [ebp - 0x564], 1
jmp 0x1000a440
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x488], eax
xor eax, eax
inc eax
cmp eax, 0xfff9
jne 0x1000a46e
mov dword [ebp - 0x9bc], 1
jmp 0x1000a475
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x9bc], eax
je 0x1000a48f
mov dword [ebp - 0x56c], 1
jmp 0x1000a496
and dword [ebp - 0x56c], 0
cmp dword [ebp - 0x56c], 0x629bad2c
jge 0x1000a4ae
mov dword [ebp - 0x9c4], 1
jmp 0x1000a4b5
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
sub eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x9cc]
jle 0x1000a4d5
mov dword [ebp - 0x574], 1
jmp 0x1000a4dc
and dword [ebp - 0x574], 0
cmp dword [ebp - 0x574], 0x3632cac2
je 0x1000a543
mov dword [ebp - 0xcc], 0
jmp 0x1000a501
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jg 0x1000a53e
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000a53c
push 0
push 0x2194
push 0x12c8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x1000a4f4
jmp 0x1000a5cc
mov dword [ebp - 0x9d4], 0x5dae
mov dword [ebp - 0x214], 0
jmp 0x1000a566
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1000a582
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xdc4], 0xfffd
jmp 0x1000a559
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x488], eax
jle 0x1000a5a5
cmp dword [ebp - 0x9cc], 0
je 0x1000a5a5
mov dword [ebp - 0x57c], 1
jmp 0x1000a5ac
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x57c]
mov dword [ebp + eax - 0xdc4], ecx
mov eax, dword [ebp - 0x9d4]
dec eax
mov dword [ebp - 0x9d4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xee8]
call fcn.10019b8d
jmp 0x1000a285
jmp 0x1000a6ac
mov dword [ebp - 0xc58], 0xffffffff
mov dword [ebp - 0x24], 0xc
jmp 0x1000a5ff
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x3c
jg 0x1000a6ac
push 2
lea ecx, [ebp - 0xda0]
call fcn.10019b25
mov dword [ebp - 4], 5
mov dword [ebp - 0x2b4], 0
jmp 0x1000a636
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1000a658
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0xda0]
call fcn.10019b92
mov dword [eax], 0xdcf746b3
jmp 0x1000a629
cmp dword [ebp - 0xc58], 0
je 0x1000a672
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda0]
call fcn.10019b8d
jmp 0x1000a6ac
push 0
lea ecx, [ebp - 0xda0]
call fcn.10019b92
cmp dword [eax], 0
je 0x1000a698
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda0]
call fcn.10019b8d
jmp 0x1000a5f8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda0]
call fcn.10019b8d
jmp 0x1000a5f8
mov dword [ebp - 0x324], 0x3ae35568
mov dword [ebp - 0xf8], 8
mov dword [ebp - 0x21c], 0
jmp 0x1000a6d9
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x1000a6f5
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x1268], 0xb905d09e
jmp 0x1000a6cc
mov dword [ebp - 0x324], 0x12
jmp 0x1000a70e
mov eax, dword [ebp - 0x324]
dec eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0xffffffe3
jge 0x1000a8a6
mov dword [ebp - 0x2bc], 1
mov dword [ebp - 0x224], 0
jmp 0x1000a73e
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x1000a75a
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xe58], 0x26d2e858
jmp 0x1000a731
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf8], 0
jmp 0x1000a780
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jg 0x1000a8a1
mov dword [ebp - 0x2bc], 1
jmp 0x1000a7a6
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jl 0x1000a89c
mov dword [ebp - 0x22c], 0x746a1c17
mov dword [ebp - 0x22c], 0
jmp 0x1000a7d6
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jg 0x1000a897
mov dword [ebp - 0x17c], 0x3e763161
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0xe58], 0
je 0x1000a802
jmp 0x1000a897
mov dword [ebp - 0x17c], 1
jmp 0x1000a81b
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x1000a892
mov dword [ebp - 0x304], 0xc9fa8bc0
mov dword [ebp - 0x304], 0
jmp 0x1000a847
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
jg 0x1000a88d
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1000a878
push 0x546
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0xe58], ecx
jmp 0x1000a83a
jmp 0x1000a80e
jmp 0x1000a7c9
jmp 0x1000a799
jmp 0x1000a773
jmp 0x1000a701
mov dword [ebp - 0xd5c], 0xc05baf43
mov dword [ebp - 0xc60], 0x53d8da8e
mov dword [ebp - 0x1030], 0xffffffff
mov dword [ebp - 0x424], 0xfffffffe
mov dword [ebp - 0xc68], 4
mov dword [ebp - 0x9dc], 0xfffffff8
mov dword [ebp - 0xd64], 0xffffffff
mov dword [ebp - 0x234], 0
jmp 0x1000a905
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x1000a921
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x158], 0x8c66f5a9
jmp 0x1000a8f8
mov eax, dword [ebp - 0x424]
dec eax
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0xd5c]
mov dword [ebp - 0x1038], eax
cmp dword [ebp - 0xc60], 0
je 0x1000a95f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x1000a95f
mov dword [ebp - 0xe2c], 1
jmp 0x1000a966
and dword [ebp - 0xe2c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0x1040], eax
mov eax, dword [ebp - 0xc68]
mov dword [ebp - 0x1048], eax
push 9
pop eax
cmp eax, 0xfffffff8
jg 0x1000a9a9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x1000a9a9
mov dword [ebp - 0x584], 1
jmp 0x1000a9b0
and dword [ebp - 0x584], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x584]
mov dword [ebp - 0x9dc], eax
mov eax, dword [ebp - 0x9dc]
sub eax, dword [ebp - 0xd64]
cmp eax, dword [ebp - 0x424]
jge 0x1000a9df
mov dword [ebp - 0x58c], 1
jmp 0x1000a9e6
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0xffffffff
je 0x1000a9fb
mov dword [ebp - 0x9e4], 1
jmp 0x1000aa02
and dword [ebp - 0x9e4], 0
cmp dword [ebp - 0x9e4], 0x91c84132
jbe 0x1000aa1a
mov dword [ebp - 0x594], 1
jmp 0x1000aa21
and dword [ebp - 0x594], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x594], eax
jg 0x1000aa42
mov dword [ebp - 0x9ec], 1
jmp 0x1000aa49
and dword [ebp - 0x9ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x9ec], eax
je 0x1000aa6a
mov dword [ebp - 0x59c], 1
jmp 0x1000aa71
and dword [ebp - 0x59c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x59c]
mov dword [ebp + eax - 0x158], ecx
mov dword [ebp - 0x23c], 0x3ae35568
mov dword [ebp - 0x100], 8
mov dword [ebp - 0x2c4], 0
jmp 0x1000aab1
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x1000aacd
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x1250], 0xb905d09e
jmp 0x1000aaa4
mov dword [ebp - 0x23c], 0x12
jmp 0x1000aae6
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xffffffe3
jge 0x1000ac7e
mov dword [ebp - 0x244], 1
mov dword [ebp - 0x344], 0
jmp 0x1000ab16
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 2
jge 0x1000ab32
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0xe60], 0x26d2e858
jmp 0x1000ab09
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
mov dword [ebp - 0x100], 0
jmp 0x1000ab58
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
jg 0x1000ac79
mov dword [ebp - 0x244], 1
jmp 0x1000ab7e
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jl 0x1000ac74
mov dword [ebp - 0x2cc], 0x746a1c17
mov dword [ebp - 0x2cc], 0
jmp 0x1000abae
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jg 0x1000ac6f
mov dword [ebp - 0x184], 0x3e763161
mov eax, dword [ebp - 0x100]
cmp dword [ebp + eax*4 - 0xe60], 0
je 0x1000abda
jmp 0x1000ac6f
mov dword [ebp - 0x184], 1
jmp 0x1000abf3
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x1000ac6a
mov dword [ebp - 0x24c], 0xc9fa8bc0
mov dword [ebp - 0x24c], 0
jmp 0x1000ac1f
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jg 0x1000ac65
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1000ac50
push 0x546
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RedrawWindow]
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0xe60], ecx
jmp 0x1000ac12
jmp 0x1000abe6
jmp 0x1000aba1
jmp 0x1000ab71
jmp 0x1000ab4b
jmp 0x1000aad9
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x60], 0x923607a9
mov dword [ebp - 0x1c8], 0x93dda37b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1050], eax
mov eax, 0xfffb
test eax, eax
jne 0x1000acbe
mov dword [ebp - 0x60], 0x3d1b
cmp dword [ebp - 0x60], 0
jne 0x1000acbe
and dword [ebp - 0x5a4], 0
jmp 0x1000acc8
mov dword [ebp - 0x5a4], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x1058], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x28], eax
jge 0x1000ace8
mov dword [ebp - 0x9f4], 1
jmp 0x1000acef
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x9f4]
cmp dword [ebp - 0x5a4], eax
jl 0x1000ad0c
mov dword [ebp - 0x9fc], 1
jmp 0x1000ad13
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x9fc], eax
jle 0x1000ad2a
mov dword [ebp - 0x5ac], 1
jmp 0x1000ad31
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x5ac], eax
jg 0x1000ad4b
mov dword [ebp - 0xa04], 1
jmp 0x1000ad52
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa04], eax
je 0x1000ad61
cmp dword [ebp - 0x28], 0
cmp dword [ebp - 0x60], 0
je 0x1000b0e8
mov dword [ebp - 0xbc], 8
mov dword [ebp - 0x5e4], 0xd2c643d4
mov dword [ebp - 0x60], 0xffffffec
jmp 0x1000ad8f
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0x1b
jle 0x1000b0e3
mov dword [ebp - 0x5bc], 0xfc02
push 1
lea ecx, [ebp - 0xf00]
call fcn.10019b25
mov dword [ebp - 4], 6
mov dword [ebp - 0x47c], 0x4d4a788a
mov dword [ebp - 0x30c], 0
jmp 0x1000adda
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 1
jge 0x1000adfc
push dword [ebp - 0x30c]
lea ecx, [ebp - 0xf00]
call fcn.10019b92
mov dword [eax], 0x26de0d61
jmp 0x1000adcd
mov byte [ebp - 0x12b], 0
movzx eax, byte [ebp - 0x12b]
test eax, eax
je 0x1000ae1d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x5bc], 0
jne 0x1000af5b
cmp dword [ebp - 0x60], 0xffffffff
je 0x1000ae3c
mov dword [ebp - 0x5b4], 1
jmp 0x1000ae43
and dword [ebp - 0x5b4], 0
cmp dword [ebp - 0x5b4], 0
je 0x1000ae58
mov dword [ebp - 0xa0c], 1
jmp 0x1000ae5f
and dword [ebp - 0xa0c], 0
cmp dword [ebp - 0xa0c], 0
je 0x1000ae6c
cmp dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x5bc], eax
jle 0x1000ae86
mov dword [ebp - 0xa14], 1
jmp 0x1000ae8d
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0xa14], eax
jne 0x1000aeaa
cmp dword [ebp - 0x60], 0
jne 0x1000aeaa
and dword [ebp - 0x5c4], 0
jmp 0x1000aeb4
mov dword [ebp - 0x5c4], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x5c4], eax
jne 0x1000aecb
mov dword [ebp - 0x3c4], 1
jmp 0x1000aed2
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0xf00]
call fcn.10019b92
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
cmp dword [ebp - 0x3c4], 0xffffffff
jl 0x1000aefc
mov dword [ebp - 0xa1c], 1
jmp 0x1000af03
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xa1c], 0x2b0a
jl 0x1000af1b
mov dword [ebp - 0x5cc], 1
jmp 0x1000af22
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x5cc]
jg 0x1000af3c
mov dword [ebp - 0xa24], 1
jmp 0x1000af43
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x47c], eax
xor eax, eax
inc eax
cmp eax, 0xfff9
jne 0x1000af71
mov dword [ebp - 0x5d4], 1
jmp 0x1000af78
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x5d4], eax
je 0x1000af92
mov dword [ebp - 0xa2c], 1
jmp 0x1000af99
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0x629bad2c
jge 0x1000afb1
mov dword [ebp - 0x5dc], 1
jmp 0x1000afb8
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
sub eax, dword [ebp - 0xbc]
cmp eax, dword [ebp - 0x5e4]
jle 0x1000afd8
mov dword [ebp - 0xa34], 1
jmp 0x1000afdf
and dword [ebp - 0xa34], 0
cmp dword [ebp - 0xa34], 0x3632cac2
je 0x1000b046
mov dword [ebp - 0xbc], 0
jmp 0x1000b004
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jg 0x1000b041
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x1000b03f
push 0
push 0x2194
push 0x12c8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsFloatA]
jmp 0x1000aff7
jmp 0x1000b0cf
mov dword [ebp - 0x5ec], 0x5dae
mov dword [ebp - 0x254], 0
jmp 0x1000b069
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x1000b085
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xc70], 0xfffd
jmp 0x1000b05c
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x47c], eax
jle 0x1000b0a8
cmp dword [ebp - 0x5e4], 0
je 0x1000b0a8
mov dword [ebp - 0xa3c], 1
jmp 0x1000b0af
and dword [ebp - 0xa3c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa3c]
mov dword [ebp + eax - 0xc70], ecx
mov eax, dword [ebp - 0x5ec]
dec eax
mov dword [ebp - 0x5ec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf00]
call fcn.10019b8d
jmp 0x1000ad88
jmp 0x1000b1af
mov dword [ebp - 0xdd4], 0xffffffff
mov dword [ebp - 0x28], 0xc
jmp 0x1000b102
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x3c
jg 0x1000b1af
push 2
lea ecx, [ebp - 0xdb0]
call fcn.10019b25
mov dword [ebp - 4], 7
mov dword [ebp - 0x2d4], 0
jmp 0x1000b139
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 2
jge 0x1000b15b
push dword [ebp - 0x2d4]
lea ecx, [ebp - 0xdb0]
call fcn.10019b92
mov dword [eax], 0xdcf746b3
jmp 0x1000b12c
cmp dword [ebp - 0xdd4], 0
je 0x1000b175
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb0]
call fcn.10019b8d
jmp 0x1000b1af
push 0
lea ecx, [ebp - 0xdb0]
call fcn.10019b92
cmp dword [eax], 0
je 0x1000b19b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb0]
call fcn.10019b8d
jmp 0x1000b0fb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb0]
call fcn.10019b8d
jmp 0x1000b0fb
push 3
lea ecx, [ebp - 0x1c4]
call fcn.10019b25
mov dword [ebp - 4], 8
mov dword [ebp - 0x32c], 0xa012e1df
mov dword [ebp - 0x25c], 0
jmp 0x1000b1e6
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000b208
push dword [ebp - 0x25c]
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov dword [eax], 4
jmp 0x1000b1d9
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp dword [eax], 1
jl 0x1000b6d7
mov eax, 0xffffa59b
test eax, eax
je 0x1000b6d7
mov dword [ebp - 0x160], 2
mov dword [ebp - 0x42c], 1
mov dword [ebp - 0x3cc], 0xe607d19f
mov dword [ebp - 0x5fc], 0xc2f92e6c
mov dword [ebp - 0xa5c], 0xc013cef3
mov dword [ebp - 0x634], 0xc0a9
mov dword [ebp - 0x264], 0x9c328129
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0x160]
cmp dword [eax], ecx
jle 0x1000b294
mov dword [ebp - 0xa44], 1
jmp 0x1000b29b
and dword [ebp - 0xa44], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0xa44]
cmp ecx, dword [eax]
jl 0x1000b2be
mov dword [ebp - 0x5f4], 1
jmp 0x1000b2c5
and dword [ebp - 0x5f4], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5f4]
jne 0x1000b2e8
mov dword [ebp - 0xa4c], 1
jmp 0x1000b2ef
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x5fc], eax
mov esi, dword [ebp - 0x5fc]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp esi, dword [eax]
jge 0x1000b32a
mov dword [ebp - 0xa54], 1
jmp 0x1000b331
and dword [ebp - 0xa54], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0xa54]
cmp ecx, dword [eax]
jg 0x1000b354
mov dword [ebp - 0x604], 1
jmp 0x1000b35b
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0xa5c], eax
cmp dword [ebp - 0xa5c], 0
jne 0x1000b382
mov eax, 0x200279e5
test eax, eax
jne 0x1000b382
and dword [ebp - 0x60c], 0
jmp 0x1000b38c
mov dword [ebp - 0x60c], 1
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [eax]
jl 0x1000b3af
mov dword [ebp - 0xc78], 1
jmp 0x1000b3b6
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1060], eax
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x1068], eax
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x1070], eax
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp dword [eax], 0
je 0x1000b40a
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp dword [eax], 0
je 0x1000b40a
mov dword [ebp - 0xa64], 1
jmp 0x1000b411
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x264], eax
mov esi, dword [ebp - 0x264]
neg esi
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
sub esi, dword [eax]
mov edi, dword [ebp - 0x160]
sub edi, esi
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
add edi, dword [eax]
mov eax, dword [ebp - 0x32c]
imul eax, dword [ebp - 0x160]
cmp eax, edi
je 0x1000b480
mov dword [ebp - 0x614], 1
jmp 0x1000b487
and dword [ebp - 0x614], 0
cmp dword [ebp - 0x614], 0
je 0x1000b67d
mov dword [ebp - 0x18c], 0xf9f41adf
mov esi, dword [ebp - 0x18c]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp esi, dword [eax]
jg 0x1000b4c1
mov dword [ebp - 0xa8c], 1
jmp 0x1000b4c8
and dword [ebp - 0xa8c], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
cmp dword [ebp - 0x32c], 1
je 0x1000b4ea
mov dword [ebp - 0xa6c], 1
jmp 0x1000b4f1
and dword [ebp - 0xa6c], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0xa6c]
cmp ecx, dword [eax]
jle 0x1000b514
mov dword [ebp - 0x61c], 1
jmp 0x1000b51b
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x61c]
jne 0x1000b535
mov dword [ebp - 0xa74], 1
jmp 0x1000b53c
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0xa74]
sub eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x264]
jg 0x1000b55c
mov dword [ebp - 0x624], 1
jmp 0x1000b563
and dword [ebp - 0x624], 0
cmp dword [ebp - 0x624], 0x25dbf607
jge 0x1000b57b
mov dword [ebp - 0xa7c], 1
jmp 0x1000b582
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xa7c], eax
jne 0x1000b5a2
cmp dword [ebp - 0x32c], 0
jne 0x1000b5a2
and dword [ebp - 0x62c], 0
jmp 0x1000b5ac
mov dword [ebp - 0x62c], 1
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x62c], eax
je 0x1000b5c6
mov dword [ebp - 0xa84], 1
jmp 0x1000b5cd
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0xa84], eax
jge 0x1000b5ed
cmp dword [ebp - 0x634], 0
jne 0x1000b5ed
and dword [ebp - 0x63c], 0
jmp 0x1000b5f7
mov dword [ebp - 0x63c], 1
mov eax, dword [ebp - 0xa8c]
cmp eax, dword [ebp - 0x63c]
jge 0x1000b611
mov dword [ebp - 0xa94], 1
jmp 0x1000b618
and dword [ebp - 0xa94], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10019b92
mov ecx, dword [ebp - 0xa94]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000b647
mov eax, 0x8db0
test eax, eax
je 0x1000b647
mov dword [ebp - 0x644], 1
jmp 0x1000b64e
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x644], eax
je 0x1000b668
mov dword [ebp - 0xa9c], 1
jmp 0x1000b66f
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x42c], eax
jmp 0x1000b6d5
mov dword [ebp - 0xaa4], 0x11ebc848
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0xaa4], eax
jg 0x1000b6a1
mov dword [ebp - 0x64c], 1
jmp 0x1000b6a8
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0xaa4], eax
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000b6d5
push 0
push 0x1ce1
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
jmp 0x1000b725
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000b6fd
push 0x119a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov byte [ebp - 0x12f], 0
movzx eax, byte [ebp - 0x12f]
test eax, eax
je 0x1000b725
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.10019b8d
mov dword [ebp - 0xd6c], 0xc05baf43
mov dword [ebp - 0xc80], 0x53d8da8e
mov dword [ebp - 0x1078], 0xffffffff
mov dword [ebp - 0x3d4], 0xfffffffe
mov dword [ebp - 0xc88], 4
mov dword [ebp - 0xaac], 0xfffffff8
mov dword [ebp - 0xd74], 0xffffffff
mov dword [ebp - 0x2dc], 0
jmp 0x1000b793
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jge 0x1000b7af
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x168], 0x8c66f5a9
jmp 0x1000b786
mov eax, dword [ebp - 0x3d4]
dec eax
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0xd6c]
mov dword [ebp - 0x1080], eax
cmp dword [ebp - 0xc80], 0
je 0x1000b7ed
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x168], 0
je 0x1000b7ed
mov dword [ebp - 0xe14], 1
jmp 0x1000b7f4
and dword [ebp - 0xe14], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x1088], eax
mov eax, dword [ebp - 0xc88]
mov dword [ebp - 0x1090], eax
push 9
pop eax
cmp eax, 0xfffffff8
jg 0x1000b837
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x168], 0
je 0x1000b837
mov dword [ebp - 0x654], 1
jmp 0x1000b83e
and dword [ebp - 0x654], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x654]
mov dword [ebp - 0xaac], eax
mov eax, dword [ebp - 0xaac]
sub eax, dword [ebp - 0xd74]
cmp eax, dword [ebp - 0x3d4]
jge 0x1000b86d
mov dword [ebp - 0x65c], 1
jmp 0x1000b874
and dword [ebp - 0x65c], 0
cmp dword [ebp - 0x65c], 0xffffffff
je 0x1000b889
mov dword [ebp - 0xab4], 1
jmp 0x1000b890
and dword [ebp - 0xab4], 0
cmp dword [ebp - 0xab4], 0x91c84132
jbe 0x1000b8a8
mov dword [ebp - 0x664], 1
jmp 0x1000b8af
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0x664], eax
jg 0x1000b8d0
mov dword [ebp - 0xabc], 1
jmp 0x1000b8d7
and dword [ebp - 0xabc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
cmp dword [ebp - 0xabc], eax
je 0x1000b8f8
mov dword [ebp - 0x66c], 1
jmp 0x1000b8ff
and dword [ebp - 0x66c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x66c]
mov dword [ebp + eax - 0x168], ecx
mov dword [ebp - 0x314], 0xe2fde2bb
mov dword [ebp - 0xdc], 0x4888999d
push 2
lea ecx, [ebp - 0xf0c]
call fcn.10019b25
mov dword [ebp - 4], 9
mov dword [ebp - 0xac4], 1
mov dword [ebp - 0xacc], 0x2f37fc03
mov dword [ebp - 0xde4], 0x49cff29c
mov dword [ebp - 0x26c], 0
jmp 0x1000b971
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 2
jge 0x1000b990
push dword [ebp - 0x26c]
lea ecx, [ebp - 0xf0c]
call fcn.10019b92
or dword [eax], 0xffffffff
jmp 0x1000b964
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0xdc], eax
jle 0x1000b9b6
mov dword [ebp - 0x45c], 1
jmp 0x1000b9bd
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0xac4]
add eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x314]
jle 0x1000b9ef
cmp dword [ebp - 0xdc], 0
jne 0x1000b9ef
and dword [ebp - 0xc90], 0
jmp 0x1000b9f9
mov dword [ebp - 0xc90], 1
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0xdc]
test eax, eax
je 0x1000ba11
cmp dword [ebp - 0xdc], 0
mov eax, 0xcee2
imul eax, eax, 9
imul eax, eax, 0
neg eax
add eax, 0x4af7
cmp eax, 0x8846
jge 0x1000ba36
mov dword [ebp - 0x674], 1
jmp 0x1000ba3d
and dword [ebp - 0x674], 0
push 0
lea ecx, [ebp - 0xf0c]
call fcn.10019b92
mov ecx, dword [ebp - 0x45c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0xacc]
cmp dword [ebp - 0x45c], eax
jge 0x1000ba78
mov dword [ebp - 0x67c], 1
jmp 0x1000ba7f
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x67c], eax
jle 0x1000ba99
mov dword [ebp - 0xad4], 1
jmp 0x1000baa0
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xad4], eax
jg 0x1000babb
xor eax, eax
jne 0x1000babb
and dword [ebp - 0x684], 0
jmp 0x1000bac5
mov dword [ebp - 0x684], 1
mov eax, dword [ebp - 0x684]
mov dword [ebp - 0xde4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0c]
call fcn.10019b8d
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x54], 0x923607a9
mov dword [ebp - 0x1a0], 0x93dda37b
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10a0], eax
mov eax, 0xfffb
test eax, eax
jne 0x1000bb20
mov dword [ebp - 0x54], 0x3d1b
cmp dword [ebp - 0x54], 0
jne 0x1000bb20
and dword [ebp - 0x68c], 0
jmp 0x1000bb2a
mov dword [ebp - 0x68c], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x10a8], eax
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x20], eax
jge 0x1000bb4a
mov dword [ebp - 0xadc], 1
jmp 0x1000bb51
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x68c], eax
jl 0x1000bb6e
mov dword [ebp - 0xae4], 1
jmp 0x1000bb75
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xae4], eax
jle 0x1000bb8c
mov dword [ebp - 0x694], 1
jmp 0x1000bb93
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x694], eax
jg 0x1000bbad
mov dword [ebp - 0xaec], 1
jmp 0x1000bbb4
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xaec], eax
je 0x1000bbc3
cmp dword [ebp - 0x20], 0
cmp dword [ebp - 0x54], 0
je 0x1000bf4a
mov dword [ebp - 0xc4], 8
mov dword [ebp - 0x6cc], 0xd2c643d4
mov dword [ebp - 0x54], 0xffffffec
jmp 0x1000bbf1
cmp dword [ebp - 0x54], 0x1b
jle 0x1000bf45
mov dword [ebp - 0x6a4], 0xfc02
push 1
lea ecx, [ebp - 0xf18]
call fcn.10019b25
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x434], 0x4d4a788a
mov dword [ebp - 0x274], 0
jmp 0x1000bc3c
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x1000bc5e
push dword [ebp - 0x274]
lea ecx, [ebp - 0xf18]
call fcn.10019b92
mov dword [eax], 0x26de0d61
jmp 0x1000bc2f
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1000bc7f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
cmp dword [ebp - 0x6a4], 0
jne 0x1000bdbd
jmp 0x1000c011
mov dword [ebp - 0xcf4], 0xffffffff
mov dword [ebp - 0x20], 0xc
jmp 0x1000bf64
cmp dword [ebp - 0x20], 0x3c
jg 0x1000c011
push 2
lea ecx, [ebp - 0xdc0]
call fcn.10019b25
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x27c], 0
jmp 0x1000bf9b
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x1000bfbd
push dword [ebp - 0x27c]
lea ecx, [ebp - 0xdc0]
call fcn.10019b92
mov dword [eax], 0xdcf746b3
jmp 0x1000bf8e
cmp dword [ebp - 0xcf4], 0
je 0x1000bfd7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc0]
call fcn.10019b8d
jmp 0x1000c011
push 0
lea ecx, [ebp - 0xdc0]
call fcn.10019b92
cmp dword [eax], 0
je 0x1000bffd
mov dword [ebp - 0x284], 0x98a8f939
mov dword [ebp - 0x6dc], 0x921b0ae2
mov dword [ebp - 0xcf8], 0x99ea
cmp dword [ebp - 0x284], 0
je 0x1000c057
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x1000c052
push 0
call dword [sym.imp.GDI32.dll_CreatePenIndirect]
jmp 0x1000c1ec
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xca8], 0xa42bbd4a
mov dword [ebp - 0x33c], 0
jmp 0x1000c084
cmp dword [ebp - 0x33c], 2
jge 0x1000c0a0
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xfb0], 0xfffffff6
jmp 0x1000c077
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0xd4], eax
jne 0x1000c0ba
mov dword [ebp - 0x28c], 3
mov dword [ebp - 0xd00], 0xfffffff6
mov dword [ebp - 0xcb0], 0x136dc992
mov dword [ebp - 0x3e4], 0x2bbd4aa4
mov dword [ebp - 0xcb8], 0x5e09b704
mov dword [ebp - 0x2ec], 0
jmp 0x1000c237