Function at 0x10009114
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfcc
push esi
push edi
mov dword [ebp - 0xc], 0x1824a8c6
mov dword [ebp - 0x324], 0
jmp 0x1000913f
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x1000915b
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x32c], 0x69f4
jmp 0x10009132
mov dword [ebp - 0xc], 0
jmp 0x1000916b
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0xfffffff7
jg 0x100091c2
mov byte [ebp - 0x163], 0
movzx eax, byte [ebp - 0x163]
test eax, eax
je 0x100091a3
push 0x135b
push 0x1bb1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x100091c0
push 0x24c6
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x10009164
mov dword [ebp - 0xc], 0
jmp 0x100091d2
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x100093d3
mov dword [ebp - 0x208], 0xfffa
mov dword [ebp - 0x88], 0
jmp 0x100091ff
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000921b
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xbac], 0xb382e580
jmp 0x100091f2
mov dword [ebp - 0x88], 0
jmp 0x10009234
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x10009250
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xedc], 1
jmp 0x10009227
cmp dword [ebp - 0xc], 0
je 0x100092c6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbac], 1
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x32c]
inc eax
cmp eax, dword [ebp - 0xc]
jg 0x10009283
mov dword [ebp - 0x460], 1
jmp 0x1000928a
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x32c]
add eax, 0x58900fdb
cmp eax, dword [ebp - 0x460]
je 0x100092ad
mov dword [ebp - 0x984], 1
jmp 0x100092b4
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xc78], eax
cmp dword [ebp - 0x208], 0
jne 0x100092d6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x32c], 0
je 0x100092f2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbac], 0
je 0x100092f2
mov dword [ebp - 0x8d0], 1
jmp 0x100092f9
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x8d0], eax
jne 0x10009313
mov dword [ebp - 0x8d8], 1
jmp 0x1000931a
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x8d8], eax
jge 0x10009334
mov dword [ebp - 0x8e0], 1
jmp 0x1000933b
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x32c]
cmp eax, dword [ebp - 0x8e0]
jl 0x10009359
mov dword [ebp - 0x8e8], 1
jmp 0x10009360
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 1
jg 0x10009375
mov dword [ebp - 0x8f0], 1
jmp 0x1000937c
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x8f0], eax
jle 0x10009393
mov dword [ebp - 0x8f8], 1
jmp 0x1000939a
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x8f8], eax
jge 0x100093b4
mov dword [ebp - 0x900], 1
jmp 0x100093bb
and dword [ebp - 0x900], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x900]
mov dword [ebp + eax - 0xedc], ecx
jmp 0x100091cb
mov dword [ebp - 0x14], 0x1824a8c6
mov dword [ebp - 0x334], 0
jmp 0x100093f3
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 1
jge 0x1000940f
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x33c], 0x69f4
jmp 0x100093e6
mov dword [ebp - 0x14], 0
jmp 0x1000941f
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff7
jg 0x10009476
mov byte [ebp - 0x103], 0
movzx eax, byte [ebp - 0x103]
test eax, eax
je 0x10009457
push 0x135b
push 0x1bb1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov byte [ebp - 0x162], 0
movzx eax, byte [ebp - 0x162]
test eax, eax
je 0x10009474
push 0x24c6
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x10009418
mov dword [ebp - 0x14], 0
jmp 0x10009486
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10009687
mov dword [ebp - 0x2c8], 0xfffa
mov dword [ebp - 0xd0], 0
jmp 0x100094b3
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x100094cf
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xbbc], 0xb382e580
jmp 0x100094a6
mov dword [ebp - 0xd0], 0
jmp 0x100094e8
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x10009504
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xee8], 1
jmp 0x100094db
cmp dword [ebp - 0x14], 0
je 0x1000957a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbbc], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x33c]
inc eax
cmp eax, dword [ebp - 0x14]
jg 0x10009537
mov dword [ebp - 0x908], 1
jmp 0x1000953e
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x33c]
add eax, 0x58900fdb
cmp eax, dword [ebp - 0x908]
je 0x10009561
mov dword [ebp - 0xa90], 1
jmp 0x10009568
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xccc], eax
cmp dword [ebp - 0x2c8], 0
jne 0x1000958a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x33c], 0
je 0x100095a6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbbc], 0
je 0x100095a6
mov dword [ebp - 0x910], 1
jmp 0x100095ad
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x910], eax
jne 0x100095c7
mov dword [ebp - 0x918], 1
jmp 0x100095ce
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x918], eax
jge 0x100095e8
mov dword [ebp - 0x3bc], 1
jmp 0x100095ef
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x33c]
cmp eax, dword [ebp - 0x3bc]
jl 0x1000960d
mov dword [ebp - 0x8a0], 1
jmp 0x10009614
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 1
jg 0x10009629
mov dword [ebp - 0x3c4], 1
jmp 0x10009630
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3c4], eax
jle 0x10009647
mov dword [ebp - 0x8a8], 1
jmp 0x1000964e
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0x8a8], eax
jge 0x10009668
mov dword [ebp - 0x3cc], 1
jmp 0x1000966f
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xee8], ecx
jmp 0x1000947f
mov dword [ebp - 0x184], 0xd5e48d32
mov dword [ebp - 0x3f8], 0xffffffff
mov dword [ebp - 0x184], 0x16
jmp 0x100096b4
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xffffffe5
jl 0x10009854
mov dword [ebp - 0x1b4], 0xf5f4
mov dword [ebp - 0x8b8], 0xffffffff
mov dword [ebp - 0xa98], 0xffffffff
mov dword [ebp - 0x3ec], 0xc1932e3c
mov dword [ebp - 0xaa0], 0xc23e
mov dword [ebp - 0xaa8], 0x3dd972c4
mov dword [ebp - 0x210], 0
jmp 0x10009716
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x10009732
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0xd68], 1
jmp 0x10009709
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x1b4], eax
jge 0x1000974c
mov dword [ebp - 0x8b0], 1
jmp 0x10009753
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x8b0]
jne 0x10009773
mov eax, 0xdb9
test eax, eax
jne 0x10009773
and dword [ebp - 0x3d4], 0
jmp 0x1000977d
mov dword [ebp - 0x3d4], 1
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x8b8], eax
je 0x100097a6
cmp dword [ebp - 0x184], 0
je 0x100097a6
mov dword [ebp - 0x3dc], 1
jmp 0x100097ad
and dword [ebp - 0x3dc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3dc]
mov dword [ebp + eax - 0xd68], ecx
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0xa98], eax
je 0x100097da
mov dword [ebp - 0x8c0], 1
jmp 0x100097e1
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x8c0]
cmp eax, dword [ebp - 0x1b4]
jne 0x10009802
mov dword [ebp - 0x8c8], 1
jmp 0x10009809
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x3ec], eax
imul eax, dword [ebp - 0x3ec], 0
cmp eax, dword [ebp - 0xaa0]
jge 0x1000983c
mov dword [ebp - 0x7dc], 1
jmp 0x10009843
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xaa8], eax
jmp 0x100096a7
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10009878
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
mov dword [ebp - 4], 0x1824a8c6
mov dword [ebp - 0xab8], 0x891ba802
mov dword [ebp - 0x90], 0
jmp 0x100098a2
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x100098be
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1bc], 0
jmp 0x10009895
mov dword [ebp - 0x90], 0
jmp 0x100098d7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x100098f3
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x394], 0x632667a8
jmp 0x100098ca
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x394], 0
jmp 0x10009921
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x394], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x394], 0
jg 0x10009ace
mov dword [ebp - 0xab0], 0xfffffffb
mov dword [ebp - 0x69c], 0x3af7806a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x394]
cmp dword [ebp + eax*4 - 0x1bc], ecx
jg 0x10009978
mov dword [ebp - 0x3f4], 1
jmp 0x1000997f
and dword [ebp - 0x3f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp dword [ebp - 0x3f4], eax
jge 0x100099a7
mov dword [ebp - 0x40c], 1
jmp 0x100099ae
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
cmp dword [ebp + eax*4 - 0x1bc], 0
jne 0x100099d7
mov eax, 0x82c32b96
test eax, eax
jne 0x100099d7
and dword [ebp - 0x694], 0
jmp 0x100099e1
mov dword [ebp - 0x694], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp dword [ebp - 0x694], eax
jle 0x10009a0b
or eax, 0xffffffff
jne 0x10009a0b
and dword [ebp - 0x3fc], 0
jmp 0x10009a15
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0xab0]
cmp dword [ebp - 0x3fc], eax
je 0x10009a2f
mov dword [ebp - 0x884], 1
jmp 0x10009a36
and dword [ebp - 0x884], 0
cmp dword [ebp - 0x884], 0xffffffff
jl 0x10009a4b
mov dword [ebp - 0x404], 1
jmp 0x10009a52
and dword [ebp - 0x404], 0
imul eax, dword [ebp - 0x404], 0x1362
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x1bc]
add eax, 0x8dc1
mov dword [ebp - 0x69c], eax
cmp dword [ebp - 0x69c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x394]
mov eax, dword [ebp + eax*4 - 0x1bc]
cmp dword [ebp - 0x40c], eax
jg 0x10009aa4
mov dword [ebp - 0x7e4], 1
jmp 0x10009aab
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0xab8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x394], 0
je 0x10009ac9
jmp 0x10009ace
jmp 0x10009906
mov dword [ebp - 0x308], 0
jmp 0x10009ae7
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jge 0x10009b03
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x218], 0x69f4
jmp 0x10009ada
mov dword [ebp - 0x11c], 3
mov dword [ebp - 0x1c4], 0x2250db85
mov dword [ebp - 0x1ec], 0xb000cd9d
mov dword [ebp - 0xcd4], 0x8939f5fa
mov eax, dword [ebp - 0x11c]
neg eax
cmp eax, 0xfffffff7
ja 0x10009b44
mov dword [ebp - 0x414], 1
jmp 0x10009b4b
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x414]
jg 0x10009b6c
mov dword [ebp - 0x6a4], 1
jmp 0x10009b73
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x6a4]
jne 0x10009b8d
mov dword [ebp - 0x41c], 1
jmp 0x10009b94
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x41c]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x1c4], eax
jl 0x10009bba
mov dword [ebp - 0x914], 1
jmp 0x10009bc1
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x914], eax
jl 0x10009bdb
mov dword [ebp - 0x424], 1
jmp 0x10009be2
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x424], eax
je 0x10009bfc
mov dword [ebp - 0x6ac], 1
jmp 0x10009c03
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1ec], 0
jmp 0x10009c28
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0x19
jg 0x10009c71
mov dword [ebp - 0x1c4], 0
jmp 0x10009c4a
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xf
je 0x10009c6f
mov byte [ebp - 0x158], 0
movzx eax, byte [ebp - 0x158]
test eax, eax
je 0x10009c6d
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
jmp 0x10009c3d
jmp 0x10009c1b
mov dword [ebp - 4], 0
jmp 0x10009c81
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xfffffff7
jg 0x10009cd8
mov byte [ebp - 0x107], 0
movzx eax, byte [ebp - 0x107]
test eax, eax
je 0x10009cb9
push 0x135b
push 0x1bb1
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawEdge]
mov byte [ebp - 0x146], 0
movzx eax, byte [ebp - 0x146]
test eax, eax
je 0x10009cd6
push 0x24c6
call dword [sym.imp.USER32.dll_GetSysColor]
jmp 0x10009c7a
mov dword [ebp - 4], 0
jmp 0x10009ce8
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x10009ee9
mov dword [ebp - 0x2d8], 0xfffa
mov dword [ebp - 0xb0], 0
jmp 0x10009d15
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x10009d31
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xbb4], 0xb382e580
jmp 0x10009d08
mov dword [ebp - 0xb0], 0
jmp 0x10009d4a
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x10009d66
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xef4], 1
jmp 0x10009d3d
cmp dword [ebp - 4], 0
je 0x10009ddc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xbb4], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x218]
inc eax
cmp eax, dword [ebp - 4]
jg 0x10009d99
mov dword [ebp - 0x42c], 1
jmp 0x10009da0
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x218]
add eax, 0x58900fdb
cmp eax, dword [ebp - 0x42c]
je 0x10009dc3
mov dword [ebp - 0xac0], 1
jmp 0x10009dca
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xcdc], eax
cmp dword [ebp - 0x2d8], 0
jne 0x10009dec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x218], 0
je 0x10009e08
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbb4], 0
je 0x10009e08
mov dword [ebp - 0x7ec], 1
jmp 0x10009e0f
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x7ec], eax
jne 0x10009e29
mov dword [ebp - 0x434], 1
jmp 0x10009e30
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x434], eax
jge 0x10009e4a
mov dword [ebp - 0x6b4], 1
jmp 0x10009e51
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x218]
cmp eax, dword [ebp - 0x6b4]
jl 0x10009e6f
mov dword [ebp - 0x43c], 1
jmp 0x10009e76
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 1
jg 0x10009e8b
mov dword [ebp - 0x88c], 1
jmp 0x10009e92
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x88c], eax
jle 0x10009ea9
mov dword [ebp - 0x444], 1
jmp 0x10009eb0
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x444], eax
jge 0x10009eca
mov dword [ebp - 0x6bc], 1
jmp 0x10009ed1
and dword [ebp - 0x6bc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp + eax - 0xef4], ecx
jmp 0x10009ce1
mov dword [ebp - 0x220], 0xc93b4e1
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0x220], 0
jmp 0x10009f16
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xfffffff9
jne 0x1000a015
mov dword [ebp - 0xbe4], 4
mov dword [ebp - 0xbe0], 4
mov dword [ebp - 0xbdc], 4
mov dword [ebp - 0xbd8], 4
mov dword [ebp - 0x60], 0x3fbb4ebb
mov dword [ebp - 0x1e4], 0xf90a2337
mov dword [ebp - 0x60], 3
jmp 0x10009f6c
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x10009fa3
mov dword [ebp - 0x44c], 0xfffffff6
mov dword [ebp - 0x44c], 0xfffffff6
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0xbe4], 0
je 0x10009fa1
jmp 0x10009fa3
jmp 0x10009f65
mov dword [ebp - 0x1e4], 0
jmp 0x10009fbc
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xffffffef
jg 0x1000a010
mov dword [ebp - 0x60], 3
jmp 0x10009fd5
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x1000a004
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10009ffa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
cmp dword [ebp - 0x60], 0
je 0x1000a002
jmp 0x10009fce
jmp 0x10009fce
mov dword [ebp - 0xac8], 1
jmp 0x10009faf
jmp 0x10009f09
mov dword [ebp - 0xce4], 0x4bb3
mov dword [ebp - 0x464], 0x3bc5f263
mov dword [ebp - 0x1c], 0
jmp 0x1000a039
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000a04f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x928], 0xfffffffc
jmp 0x1000a032
mov dword [ebp - 0x1c], 0
jmp 0x1000a05f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000a075
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb0c], 0
jmp 0x1000a058
mov dword [ebp - 0x1c], 0
jmp 0x1000a085
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000a09b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x970], 0xb1b9
jmp 0x1000a07e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x928], 0
jmp 0x1000a0c6
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x928]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x928], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x928], 0x17
jl 0x1000a370
mov dword [ebp - 0xad0], 0xfffffffa
mov dword [ebp - 0x330], 1
mov dword [ebp - 0x340], 0xfffffffb
mov dword [ebp - 0x8dc], 0xffffffff
mov dword [ebp - 0xad8], 5
mov dword [ebp - 0xae0], 0xe2d3d478
mov dword [ebp - 0xcec], 0xa2ff3e14
mov dword [ebp - 0x228], 0x3adeb945
mov dword [ebp - 0xcf4], 0xa832
mov dword [ebp - 0x98], 0
jmp 0x1000a14c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1000a168
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xd74], 0
jmp 0x1000a13f
mov dword [ebp - 0x98], 0
jmp 0x1000a181
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1000a19d
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xf1c], 0xb6fb96f
jmp 0x1000a174
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x928]
imul eax, dword [ebp - 0xad0]
test eax, eax
je 0x1000a260
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0xcfc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x330]
cmp dword [ebp + eax - 0x928], ecx
je 0x1000a1e5
mov dword [ebp - 0x7f4], 1
jmp 0x1000a1ec
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0xa61f
jge 0x1000a204
mov dword [ebp - 0x454], 1
jmp 0x1000a20b
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0x454]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x928]
jg 0x1000a232
mov dword [ebp - 0x6c4], 1
jmp 0x1000a239
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6c4]
mov dword [ebp - 0x330], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x928], 0
je 0x1000a260
mov dword [ebp - 0x45c], 1
jmp 0x1000a267
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jne 0x1000a283
cmp dword [ebp - 0x340], 0
mov dword [ebp - 0x8dc], 0xfffffff9
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp - 0xd04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x970]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x970], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf1c]
mov dword [ebp - 0xd0c], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xd74], 0x8d48
imul eax, eax, 6
imul eax, eax, 0xfff9
add eax, dword [ebp - 0xae0]
mov dword [ebp - 0x464], eax
je 0x1000a323
mov byte [ebp - 0x147], 0
movzx eax, byte [ebp - 0x147]
test eax, eax
je 0x1000a321
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x1000a36b
mov dword [ebp - 0x228], 0
jmp 0x1000a33c
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0
jg 0x1000a36b
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000a369
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x1000a32f
jmp 0x1000a0ad
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp + ecx - 0xb0c], eax
mov dword [ebp - 0x2e0], 0xc93b4e1
mov dword [ebp - 0xb14], 0
mov dword [ebp - 0x2e0], 0
jmp 0x1000a3b7
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0xfffffff9
jne 0x1000a4b6
mov dword [ebp - 0xbf4], 4
mov dword [ebp - 0xbf0], 4
mov dword [ebp - 0xbec], 4
mov dword [ebp - 0xbe8], 4
mov dword [ebp - 0x70], 0x3fbb4ebb
mov dword [ebp - 0x1c8], 0xf90a2337
mov dword [ebp - 0x70], 3
jmp 0x1000a40d
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1000a444
mov dword [ebp - 0x6cc], 0xfffffff6
mov dword [ebp - 0x6cc], 0xfffffff6
mov eax, dword [ebp - 0x6cc]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0xbf4], 0
je 0x1000a442
jmp 0x1000a444
jmp 0x1000a406
mov dword [ebp - 0x1c8], 0
jmp 0x1000a45d
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xffffffef
jg 0x1000a4b1
mov dword [ebp - 0x70], 3
jmp 0x1000a476
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1000a4a5
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1000a49b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
cmp dword [ebp - 0x70], 0
je 0x1000a4a3
jmp 0x1000a46f
jmp 0x1000a46f
mov dword [ebp - 0xb14], 1
jmp 0x1000a450
jmp 0x1000a3aa
mov dword [ebp - 0x38], 0x1824a8c6
mov dword [ebp - 0x40], 0
mov dword [ebp - 0xe8], 0xfb96f37d
mov dword [ebp - 0x34c], 0x23fa
mov dword [ebp - 0xb3c], 0x30ae
mov dword [ebp - 0x38], 0xfffffff7
jmp 0x1000a4f2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
je 0x1000a584
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x230], 0
jmp 0x1000a51f
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x1000a53b
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xd14], 0
jmp 0x1000a512
mov dword [ebp - 0x310], 0
jmp 0x1000a554
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0
jg 0x1000a57f
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000a57d
push 1
push 0x74
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1000a547
jmp 0x1000a4eb
mov dword [ebp - 0x38], 0xfffffffd
jmp 0x1000a594
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xc
jne 0x1000a943
mov dword [ebp - 0xb4], 0
jmp 0x1000a5b7
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1000a5d3
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x178], 0x9fb1c038
jmp 0x1000a5aa
mov dword [ebp - 0xb4], 0
jmp 0x1000a5ec
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1000a608
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x3a0], 0xafc1da7b
jmp 0x1000a5df
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 0x8932
jl 0x1000a627
mov dword [ebp - 0x6d4], 1
jmp 0x1000a62e
and dword [ebp - 0x6d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0xd1c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 0
je 0x1000a66d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 0
je 0x1000a66d
mov dword [ebp - 0xb1c], 1
jmp 0x1000a674
and dword [ebp - 0xb1c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0xd24], eax
cmp dword [ebp - 0x38], 0xd72a
jne 0x1000a69c
mov dword [ebp - 0x46c], 1
jmp 0x1000a6a3
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x46c], eax
jne 0x1000a6ba
mov dword [ebp - 0x7fc], 1
jmp 0x1000a6c1
and dword [ebp - 0x7fc], 0
cmp dword [ebp - 0x7fc], 0x47e0fa1a
jge 0x1000a6d9
mov dword [ebp - 0x474], 1
jmp 0x1000a6e0
and dword [ebp - 0x474], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x474]
sub ecx, dword [ebp + eax - 0x178]
cmp ecx, dword [ebp - 0x38]
jne 0x1000a704
mov dword [ebp - 0xb24], 1
jmp 0x1000a70b
and dword [ebp - 0xb24], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0xb2c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb2c]
mov dword [ebp + eax - 0x3a0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x40], eax
je 0x1000a761
mov dword [ebp - 0x47c], 1
jmp 0x1000a768
and dword [ebp - 0x47c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x178]
imul eax, dword [ebp - 0x47c]
mov dword [ebp - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a0], 0
jne 0x1000a856
mov dword [ebp - 0xe8], 0x2840cc74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a0]
cmp dword [ebp - 0xe8], eax
je 0x1000a7d1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x178], 0
je 0x1000a7d1
mov dword [ebp - 0x894], 1
jmp 0x1000a7d8
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x894]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x178]
jge 0x1000a7fc
mov dword [ebp - 0x484], 1
jmp 0x1000a803
and dword [ebp - 0x484], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x484]
sub ecx, dword [ebp + eax - 0x178]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x178]
jle 0x1000a831
mov dword [ebp - 0x6dc], 1
jmp 0x1000a838
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x34c]
imul eax, dword [ebp - 0x6dc]
cmp dword [ebp - 0x34c], eax
jle 0x1000a856
and dword [ebp - 0xb34], 0
jmp 0x1000a860
mov dword [ebp - 0xb34], 1
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0xd34], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3a0]
cmp dword [ebp + eax - 0x3a0], ecx
jl 0x1000a8c0
mov dword [ebp - 0x40], 1
jmp 0x1000a898
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1000a8be
mov byte [ebp - 0x14b], 0
movzx eax, byte [ebp - 0x14b]
test eax, eax
je 0x1000a8bc
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x1000a891
jmp 0x1000a93e
mov dword [ebp - 0x40], 0
jmp 0x1000a8d0
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffffe
jle 0x1000a92b
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1000a8f4
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0xe8], 0
jmp 0x1000a90d
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x1000a929
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x178], 4
jmp 0x1000a900
jmp 0x1000a8c9
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x3a0], ecx
jmp 0x1000a58d
mov dword [ebp - 0x238], 0xc93b4e1
mov dword [ebp - 0xb44], 0
mov dword [ebp - 0x238], 0
jmp 0x1000a970
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xfffffff9
jne 0x1000aa6f
mov dword [ebp - 0xbd4], 4
mov dword [ebp - 0xbd0], 4
mov dword [ebp - 0xbcc], 4
mov dword [ebp - 0xbc8], 4
mov dword [ebp - 0x68], 0x3fbb4ebb
mov dword [ebp - 0x1f4], 0xf90a2337
mov dword [ebp - 0x68], 3
jmp 0x1000a9c6
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1000a9fd
mov dword [ebp - 0x48c], 0xfffffff6
mov dword [ebp - 0x48c], 0xfffffff6
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0xbd4], 0
je 0x1000a9fb
jmp 0x1000a9fd
jmp 0x1000a9bf
mov dword [ebp - 0x1f4], 0
jmp 0x1000aa16
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xffffffef
jg 0x1000aa6a
mov dword [ebp - 0x68], 3
jmp 0x1000aa2f
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x1000aa5e
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1000aa54
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetParent]
cmp dword [ebp - 0x68], 0
je 0x1000aa5c
jmp 0x1000aa28
jmp 0x1000aa28
mov dword [ebp - 0xb44], 1
jmp 0x1000aa09
jmp 0x1000a963
mov dword [ebp - 0xd3c], 0x4bb3
mov dword [ebp - 0x4a4], 0x3bc5f263
mov dword [ebp - 0x20], 0
jmp 0x1000aa93
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1000aaa9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x938], 0xfffffffc
jmp 0x1000aa8c
mov dword [ebp - 0x20], 0
jmp 0x1000aab9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1000aacf
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x998], 0
jmp 0x1000aab2
mov dword [ebp - 0x20], 0
jmp 0x1000aadf
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1000aaf5
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x950], 0xb1b9
jmp 0x1000aad8
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x938], 0
jmp 0x1000ab20
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x938]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x938], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x938], 0x17
jl 0x1000adca
mov dword [ebp - 0xa88], 0xfffffffa
mov dword [ebp - 0x2e8], 1
mov dword [ebp - 0x354], 0xfffffffb
mov dword [ebp - 0x904], 0xffffffff
mov dword [ebp - 0x9b4], 5
mov dword [ebp - 0x9ac], 0xe2d3d478
mov dword [ebp - 0xd44], 0xa2ff3e14
mov dword [ebp - 0x240], 0x3adeb945
mov dword [ebp - 0xd4c], 0xa832
mov dword [ebp - 0xa0], 0
jmp 0x1000aba6
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1000abc2
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xd80], 0
jmp 0x1000ab99
mov dword [ebp - 0xa0], 0
jmp 0x1000abdb
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1000abf7
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xf4c], 0xb6fb96f
jmp 0x1000abce
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x938]
imul eax, dword [ebp - 0xa88]
test eax, eax
je 0x1000acba
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0xd54], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
cmp dword [ebp + eax - 0x938], ecx
je 0x1000ac3f
mov dword [ebp - 0x804], 1
jmp 0x1000ac46
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0xa61f
jge 0x1000ac5e
mov dword [ebp - 0x494], 1
jmp 0x1000ac65
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x2e8]
sub eax, dword [ebp - 0x494]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x938]
jg 0x1000ac8c
mov dword [ebp - 0x6e4], 1
jmp 0x1000ac93
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x938], 0
je 0x1000acba
mov dword [ebp - 0x49c], 1
jmp 0x1000acc1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 0
jne 0x1000acdd
cmp dword [ebp - 0x354], 0
mov dword [ebp - 0x904], 0xfffffff9
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x9b4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x950]
mov dword [ebp - 0xd5c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x950]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x950], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf4c]
mov dword [ebp - 0xdb8], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xd80], 0x8d48
imul eax, eax, 6
imul eax, eax, 0xfff9
add eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x4a4], eax
je 0x1000ad7d
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000ad7b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x1000adc5
mov dword [ebp - 0x240], 0
jmp 0x1000ad96
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jg 0x1000adc5
mov byte [ebp - 0x14f], 0
movzx eax, byte [ebp - 0x14f]
test eax, eax
je 0x1000adc3
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x1000ad89
jmp 0x1000ab07
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x950]
mov dword [ebp + ecx - 0x998], eax
mov dword [ebp - 0x50], 0x313dd33a
mov dword [ebp - 0x50], 0
jmp 0x1000adfb
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xffffffe4
je 0x1000b014
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x4ac], 0xfffffffe
mov dword [ebp - 0x9a0], 0xd413053b
mov dword [ebp - 0x78], 0xb
jmp 0x1000ae30
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x19
je 0x1000b00f
mov dword [ebp - 0x6fc], 0xbd907c4
mov dword [ebp - 0x328], 0
jmp 0x1000ae5d
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jge 0x1000ae79
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0xde8], 0xfffffff6
jmp 0x1000ae50
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xdc0], eax
cmp dword [ebp - 0x50], 0
je 0x1000af99
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x50]
jg 0x1000aea3
mov dword [ebp - 0x6ec], 1
jmp 0x1000aeaa
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x50], eax
je 0x1000aedf
mov dword [ebp - 0x80c], 1
jmp 0x1000aee6
and dword [ebp - 0x80c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xde8]
cmp eax, dword [ebp - 0x80c]
jg 0x1000af07
mov dword [ebp - 0xb20], 1
jmp 0x1000af0e
and dword [ebp - 0xb20], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xde8], 0x37828451
jg 0x1000af2d
mov dword [ebp - 0x4b4], 1
jmp 0x1000af34
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x4b4], eax
je 0x1000af4b
mov dword [ebp - 0x6f4], 1
jmp 0x1000af52
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x6f4]
jne 0x1000af75
mov eax, 0x45c2f1fc
test eax, eax
jne 0x1000af75
cmp dword [ebp - 0x50], 0
jne 0x1000af75
and dword [ebp - 0x4bc], 0
jmp 0x1000af7f
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x4bc]
test eax, eax
je 0x1000af99
mov dword [ebp - 0x89c], 1
jmp 0x1000afa0
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x9a0]
cmp dword [ebp - 0x89c], eax
jge 0x1000afbe
push 5
pop eax
test eax, eax
jne 0x1000afbe
and dword [ebp - 0x4c4], 0
jmp 0x1000afc8
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x4c4]
neg eax
mov dword [ebp - 0x6fc], eax
je 0x1000afe2
cmp dword [ebp - 0x50], 0
je 0x1000afe0
jmp 0x1000b00f
jmp 0x1000b00a
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x1000b00a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x1000ae29
jmp 0x1000adf4
mov dword [ebp - 0x2f0], 0x399841b3
mov dword [ebp - 0xdd8], 8
mov dword [ebp - 0xe80], 0xc554
mov dword [ebp - 0xe88], 0x863e8712
mov dword [ebp - 0x4cc], 0x52f5
mov dword [ebp - 0xe90], 0x52d86a02
mov dword [ebp - 0x248], 0
jmp 0x1000b069
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1000b085
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xe98], 0xf69f7fd1
jmp 0x1000b05c
mov dword [ebp - 0x2f0], 0x10
jmp 0x1000b09e
mov eax, dword [ebp - 0x2f0]
dec eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 0xffffffff
jne 0x1000b156
mov dword [ebp - 0xea0], 0xd149
mov dword [ebp - 0xea8], 0xffffffff
mov dword [ebp - 0xeb0], 0x2eaa29c1
mov dword [ebp - 0xeb8], 0xfa42b483
mov dword [ebp - 0xec0], 1
mov dword [ebp - 0xec8], 0x3a34c865
mov dword [ebp - 0xed0], 0x5ed06576
mov dword [ebp - 0xe34], 0xf2fdad5a
mov dword [ebp - 0xc00], 1
mov dword [ebp - 0xe64], 0xffffffff
mov dword [ebp - 0x250], 0
jmp 0x1000b128
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x1000b144
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xfac], 0x4145c174
jmp 0x1000b11b
mov eax, dword [ebp - 0x4cc]
dec eax
mov dword [ebp - 0x4cc], eax
jmp 0x1000b091
mov dword [ebp - 0x34], 0x1824a8c6
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xf8], 0xfb96f37d
mov dword [ebp - 0x36c], 0x23fa
mov dword [ebp - 0xa84], 0x30ae
mov dword [ebp - 0x34], 0xfffffff7
jmp 0x1000b192
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
je 0x1000b224
mov dword [ebp - 0x258], 1
mov dword [ebp - 0x318], 0
jmp 0x1000b1bf
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x1000b1db
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xc08], 0
jmp 0x1000b1b2
mov dword [ebp - 0x258], 0
jmp 0x1000b1f4
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jg 0x1000b21f
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1000b21d
push 1
push 0x74
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1000b1e7
jmp 0x1000b18b
mov dword [ebp - 0x34], 0xfffffffd
jmp 0x1000b234
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xc
jne 0x1000b5e3
mov dword [ebp - 0xbc], 0
jmp 0x1000b257
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1000b273
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x180], 0x9fb1c038
jmp 0x1000b24a
mov dword [ebp - 0xbc], 0
jmp 0x1000b28c
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x1000b2a8
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x3b0], 0xafc1da7b
jmp 0x1000b27f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x180], 0x8932
jl 0x1000b2c7
mov dword [ebp - 0x4dc], 1
jmp 0x1000b2ce
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0xd78], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x180], 0
je 0x1000b30d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x180], 0
je 0x1000b30d
mov dword [ebp - 0xa7c], 1
jmp 0x1000b314
and dword [ebp - 0xa7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0xc10], eax
cmp dword [ebp - 0x34], 0xd72a
jne 0x1000b33c
mov dword [ebp - 0x814], 1
jmp 0x1000b343
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x814], eax
jne 0x1000b35a
mov dword [ebp - 0x4d4], 1
jmp 0x1000b361
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4d4], 0x47e0fa1a
jge 0x1000b379
mov dword [ebp - 0x704], 1
jmp 0x1000b380
and dword [ebp - 0x704], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x704]
sub ecx, dword [ebp + eax - 0x180]
cmp ecx, dword [ebp - 0x34]
jne 0x1000b3a4
mov dword [ebp - 0x9a8], 1
jmp 0x1000b3ab
and dword [ebp - 0x9a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0xae4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xae4]
mov dword [ebp + eax - 0x3b0], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x180]
mov dword [ebp - 0xe9c], eax
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x44], eax
je 0x1000b401
mov dword [ebp - 0x8e4], 1
jmp 0x1000b408
and dword [ebp - 0x8e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x180]
imul eax, dword [ebp - 0x8e4]
mov dword [ebp - 0xf8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b0], 0
jne 0x1000b4f6
mov dword [ebp - 0xf8], 0x2840cc74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3b0]
cmp dword [ebp - 0xf8], eax
je 0x1000b471
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x180], 0
je 0x1000b471
mov dword [ebp - 0x4e4], 1
jmp 0x1000b478
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x4e4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x180]
jge 0x1000b49c
mov dword [ebp - 0x70c], 1
jmp 0x1000b4a3
and dword [ebp - 0x70c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x70c]
sub ecx, dword [ebp + eax - 0x180]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x180]
jle 0x1000b4d1
mov dword [ebp - 0x4ec], 1
jmp 0x1000b4d8
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x36c]
imul eax, dword [ebp - 0x4ec]
cmp dword [ebp - 0x36c], eax
jle 0x1000b4f6
and dword [ebp - 0x9b0], 0
jmp 0x1000b500
mov dword [ebp - 0x9b0], 1
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0xc18], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3b0]
cmp dword [ebp + eax - 0x3b0], ecx
jl 0x1000b560
mov dword [ebp - 0x44], 1
jmp 0x1000b538
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1000b55e
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1000b55c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x1000b531
jmp 0x1000b5de
mov dword [ebp - 0x44], 0
jmp 0x1000b570
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffffe
jle 0x1000b5cb
mov byte [ebp - 0x153], 0
movzx eax, byte [ebp - 0x153]
test eax, eax
je 0x1000b594
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0xf8], 0
jmp 0x1000b5ad
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x1000b5c9
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x180], 4
jmp 0x1000b5a0
jmp 0x1000b569
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0x3b0], ecx
jmp 0x1000b22d
mov dword [ebp - 0xd84], 5
mov byte [ebp - 0x117], 0
movzx eax, byte [ebp - 0x117]
test eax, eax
je 0x1000b610
push 0
push 0
push 0x670
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1000b628
call dword [sym.imp.USER32.dll_DestroyCaret]
mov dword [ebp - 0xc20], 0x4bb3
mov dword [ebp - 0x504], 0x3bc5f263
mov dword [ebp - 0x18], 0
jmp 0x1000b64c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000b662
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x68c], 0xfffffffc
jmp 0x1000b645
mov dword [ebp - 0x18], 0
jmp 0x1000b672
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000b688
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8c], 0
jmp 0x1000b66b
mov dword [ebp - 0x18], 0
jmp 0x1000b698
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000b6ae
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x958], 0xb1b9
jmp 0x1000b691
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x68c], 0
jmp 0x1000b6d9
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x68c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x68c], 0x17
jl 0x1000b983
mov dword [ebp - 0x9b8], 0xfffffffa
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x374], 0xfffffffb
mov dword [ebp - 0x8a4], 0xffffffff
mov dword [ebp - 0xb48], 5
mov dword [ebp - 0x9c0], 0xe2d3d478
mov dword [ebp - 0xe6c], 0xa2ff3e14
mov dword [ebp - 0x260], 0x3adeb945
mov dword [ebp - 0xc28], 0xa832
mov dword [ebp - 0xa8], 0
jmp 0x1000b75f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1000b77b
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xd8c], 0
jmp 0x1000b752
mov dword [ebp - 0xa8], 0
jmp 0x1000b794
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x1000b7b0
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xf2c], 0xb6fb96f
jmp 0x1000b787
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x68c]
imul eax, dword [ebp - 0x9b8]
test eax, eax
je 0x1000b873
mov eax, dword [ebp - 0x2f8]
mov dword [ebp - 0xd90], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f8]
cmp dword [ebp + eax - 0x68c], ecx
je 0x1000b7f8
mov dword [ebp - 0x81c], 1
jmp 0x1000b7ff
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0xa61f
jge 0x1000b817
mov dword [ebp - 0x4f4], 1
jmp 0x1000b81e
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0x4f4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x68c]
jg 0x1000b845
mov dword [ebp - 0x714], 1
jmp 0x1000b84c
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x68c], 0
je 0x1000b873
mov dword [ebp - 0x4fc], 1
jmp 0x1000b87a
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x1000b896
cmp dword [ebp - 0x374], 0
mov dword [ebp - 0x8a4], 0xfffffff9
mov eax, dword [ebp - 0x8a4]
mov dword [ebp - 0xb48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x958]
mov dword [ebp - 0xc30], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x958]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x958], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xf2c]
mov dword [ebp - 0xec4], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xd8c], 0x8d48
imul eax, eax, 6
imul eax, eax, 0xfff9
add eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x504], eax
je 0x1000b936
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000b934
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
jmp 0x1000b97e
mov dword [ebp - 0x260], 0
jmp 0x1000b94f
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jg 0x1000b97e
mov byte [ebp - 0x157], 0
movzx eax, byte [ebp - 0x157]
test eax, eax
je 0x1000b97c
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x1000b942
jmp 0x1000b6c0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x958]
mov dword [ebp + ecx - 0xa8c], eax
mov dword [ebp - 0x1a8], 8
mov dword [ebp - 0x9d0], 0x7383cc4
mov dword [ebp - 0x338], 0
jmp 0x1000b9ca
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x1000b9e6
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0xaec], 0xfffffffe
jmp 0x1000b9bd
mov dword [ebp - 0x1a8], 0
jmp 0x1000b9ff
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jg 0x1000bb85
mov dword [ebp - 0xc4], 0x149febb6
mov dword [ebp - 0xc4], 0
jmp 0x1000ba2f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 1
jg 0x1000bae9
mov dword [ebp - 0x9c8], 0
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1000ba6e
push 0
push 0
push 0x15f0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp + eax*4 - 0xaec], 0xfffffff6
jg 0x1000ba95
mov eax, dword [ebp - 0xc4]
add eax, 9
je 0x1000ba95
mov dword [ebp - 0x71c], 1
jmp 0x1000ba9c
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp + eax*4 - 0xaec], 0x5b49
jle 0x1000bac8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xaec], 0
jne 0x1000bac8
and dword [ebp - 0x50c], 0
jmp 0x1000bad2
mov dword [ebp - 0x50c], 1
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x50c]
mov dword [ebp - 0x9c8], eax
jmp 0x1000ba22
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000bb20
push 0x1a37
push 0x1c7c
push 0x40
push 0x13dd
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov dword [ebp - 0xc4], 1
jmp 0x1000bb39
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1000bb80
mov dword [ebp - 0xaf0], 0x4145c174
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x9d0], eax
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000bb7e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x1000bb2c
jmp 0x1000b9f2
mov dword [ebp - 0x4c], 0x313dd33a
mov dword [ebp - 0x4c], 0
jmp 0x1000bb9c
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffe4
je 0x1000bdb5
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x514], 0xfffffffe
mov dword [ebp - 0x9d8], 0xd413053b
mov dword [ebp - 0x5c], 0xb
jmp 0x1000bbd1
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x19
je 0x1000bdb0
mov dword [ebp - 0x82c], 0xbd907c4
mov dword [ebp - 0x268], 0
jmp 0x1000bbfe
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 3
jge 0x1000bc1a
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xdf8], 0xfffffff6
jmp 0x1000bbf1
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc38], eax
cmp dword [ebp - 0x4c], 0
je 0x1000bd3a
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x4c]
jg 0x1000bc44
mov dword [ebp - 0x824], 1
jmp 0x1000bc4b
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x514], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0xc40], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x4c], eax
je 0x1000bc80
mov dword [ebp - 0x724], 1
jmp 0x1000bc87
and dword [ebp - 0x724], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdf8]
cmp eax, dword [ebp - 0x724]
jg 0x1000bca8
mov dword [ebp - 0xa94], 1
jmp 0x1000bcaf
and dword [ebp - 0xa94], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdf8], 0x37828451
jg 0x1000bcce
mov dword [ebp - 0x51c], 1
jmp 0x1000bcd5
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x51c], eax
je 0x1000bcec
mov dword [ebp - 0x92c], 1
jmp 0x1000bcf3
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x92c]
jne 0x1000bd16
mov eax, 0x45c2f1fc
test eax, eax
jne 0x1000bd16
cmp dword [ebp - 0x4c], 0
jne 0x1000bd16
and dword [ebp - 0x524], 0
jmp 0x1000bd20
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x524]
test eax, eax
je 0x1000bd3a
mov dword [ebp - 0x72c], 1
jmp 0x1000bd41
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x9d8]
cmp dword [ebp - 0x72c], eax
jge 0x1000bd5f
push 5
pop eax
test eax, eax
jne 0x1000bd5f
and dword [ebp - 0x52c], 0
jmp 0x1000bd69
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x52c]
neg eax
mov dword [ebp - 0x82c], eax
je 0x1000bd83
cmp dword [ebp - 0x4c], 0
je 0x1000bd81
jmp 0x1000bdb0
jmp 0x1000bdab
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x1000bdab
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
jmp 0x1000bbca
jmp 0x1000bb95
mov dword [ebp - 0x3c], 0x1824a8c6
mov dword [ebp - 0x54], 0
mov dword [ebp - 0xf0], 0xfb96f37d
mov dword [ebp - 0x37c], 0x23fa
mov dword [ebp - 0xafc], 0x30ae
mov dword [ebp - 0x3c], 0xfffffff7
jmp 0x1000bdf1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
je 0x1000be83
mov dword [ebp - 0x270], 1
mov dword [ebp - 0x300], 0
jmp 0x1000be1e
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
jge 0x1000be3a
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0xe74], 0
jmp 0x1000be11
mov dword [ebp - 0x270], 0
jmp 0x1000be53
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jg 0x1000be7e
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1000be7c
push 1
push 0x74
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1000be46
jmp 0x1000bdea
mov dword [ebp - 0x3c], 0xfffffffd
jmp 0x1000be93
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xc
jne 0x1000c224
mov dword [ebp - 0x80], 0
jmp 0x1000bead
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1000bec3
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x170], 0x9fb1c038
jmp 0x1000bea6
mov dword [ebp - 0x80], 0
jmp 0x1000bed3
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1000bee9
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x3a8], 0xafc1da7b
jmp 0x1000becc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x170], 0x8932
jl 0x1000bf08
mov dword [ebp - 0x8ac], 1
jmp 0x1000bf0f
and dword [ebp - 0x8ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
mov dword [ebp - 0xc48], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x170], 0
je 0x1000bf4e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x170], 0
je 0x1000bf4e
mov dword [ebp - 0xb28], 1
jmp 0x1000bf55
and dword [ebp - 0xb28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x170]
mov dword [ebp - 0xda8], eax
cmp dword [ebp - 0x3c], 0xd72a
jne 0x1000bf7d
mov dword [ebp - 0x534], 1
jmp 0x1000bf84
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x534], eax
jne 0x1000bf9b
mov dword [ebp - 0x734], 1
jmp 0x1000bfa2
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 0x47e0fa1a
jge 0x1000bfba
mov dword [ebp - 0x53c], 1
jmp 0x1000bfc1
and dword [ebp - 0x53c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x53c]
sub ecx, dword [ebp + eax - 0x170]
cmp ecx, dword [ebp - 0x3c]
jne 0x1000bfe5
mov dword [ebp - 0x9e0], 1
jmp 0x1000bfec
and dword [ebp - 0x9e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x170]
mov dword [ebp - 0xa9c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp + eax - 0x3a8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x170]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x54], eax
je 0x1000c042
mov dword [ebp - 0x544], 1
jmp 0x1000c049
and dword [ebp - 0x544], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x170]
imul eax, dword [ebp - 0x544]
mov dword [ebp - 0xf0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a8], 0
jne 0x1000c137
mov dword [ebp - 0xf0], 0x2840cc74
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3a8]
cmp dword [ebp - 0xf0], eax
je 0x1000c0b2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x170], 0
je 0x1000c0b2
mov dword [ebp - 0x73c], 1
jmp 0x1000c0b9
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x73c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x170]
jge 0x1000c0dd
mov dword [ebp - 0x54c], 1
jmp 0x1000c0e4
and dword [ebp - 0x54c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54c]
sub ecx, dword [ebp + eax - 0x170]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x170]
jle 0x1000c112
mov dword [ebp - 0x834], 1
jmp 0x1000c119
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x37c]
imul eax, dword [ebp - 0x834]
cmp dword [ebp - 0x37c], eax
jle 0x1000c137
and dword [ebp - 0x9e8], 0
jmp 0x1000c141
mov dword [ebp - 0x9e8], 1
mov eax, dword [ebp - 0xafc]
mov dword [ebp - 0xea4], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3a8]
cmp dword [ebp + eax - 0x3a8], ecx
jl 0x1000c1a1
mov dword [ebp - 0x54], 1
jmp 0x1000c179
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1000c19f
mov byte [ebp - 0x15d], 0
movzx eax, byte [ebp - 0x15d]
test eax, eax
je 0x1000c19d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x1000c172
jmp 0x1000c21f
mov dword [ebp - 0x54], 0
jmp 0x1000c1b1
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xfffffffe
jle 0x1000c20c
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1000c1d5
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0xf0], 0
jmp 0x1000c1ee
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x1000c20a
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x170], 4
jmp 0x1000c1e1
jmp 0x1000c1aa
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0x3a8], ecx
jmp 0x1000be8c
mov dword [ebp - 0x278], 0x399841b3
mov dword [ebp - 0xc58], 8
mov dword [ebp - 0xdb4], 0xc554
mov dword [ebp - 0xc60], 0x863e8712
mov dword [ebp - 0x554], 0x52f5
mov dword [ebp - 0xe7c], 0x52d86a02
mov dword [ebp - 0x2c4], 0
jmp 0x1000c279
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000c295
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xc68], 0xf69f7fd1
jmp 0x1000c26c
mov dword [ebp - 0x278], 0x10
jmp 0x1000c2ae
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xffffffff
jne 0x1000c366
mov dword [ebp - 0xdbc], 0xd149
mov dword [ebp - 0xc70], 0xffffffff
mov dword [ebp - 0xebc], 0x2eaa29c1
mov dword [ebp - 0xbf8], 0xfa42b483
mov dword [ebp - 0xdc4], 1
mov dword [ebp - 0xc80], 0x3a34c865
mov dword [ebp - 0xe30], 0x5ed06576
mov dword [ebp - 0xc88], 0xf2fdad5a
mov dword [ebp - 0xdcc], 1
mov dword [ebp - 0xc90], 0xffffffff
mov dword [ebp - 0x2cc], 0
jmp 0x1000c338
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 4
jge 0x1000c354
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xfbc], 0x4145c174
jmp 0x1000c32b
mov eax, dword [ebp - 0x554]
dec eax
mov dword [ebp - 0x554], eax
jmp 0x1000c2a1
mov dword [ebp - 0x124], 0x659d568d
mov dword [ebp - 0x280], 0xc2076acb
mov dword [ebp - 0x1d8], 0x3b00b722
mov dword [ebp - 0x574], 0x4475678d
mov dword [ebp - 0x9f8], 0
mov dword [ebp - 0xcc], 0
jmp 0x1000c3b1
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1000c3cd
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x56c], 0xffffffff
jmp 0x1000c3a4
mov dword [ebp - 0xcc], 0
jmp 0x1000c3e6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 4
jge 0x1000c402
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xb58], 0x8cae2fe8
jmp 0x1000c3d9
cmp dword [ebp - 0x124], 0
jne 0x1000c41d
cmp dword [ebp - 0x124], 0
jne 0x1000c41d
and dword [ebp - 0x9f0], 0
jmp 0x1000c427
mov dword [ebp - 0x9f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb58]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb58], eax
mov eax, dword [ebp - 0x124]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xb58]
je 0x1000c472
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb58], 0
je 0x1000c472
mov dword [ebp - 0x744], 1
jmp 0x1000c479
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
sub eax, dword [ebp - 0x280]
cmp eax, 0xffffffff
jg 0x1000c496
mov dword [ebp - 0x55c], 1
jmp 0x1000c49d
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0xeca6d78
jle 0x1000c4b5
mov dword [ebp - 0x8ec], 1
jmp 0x1000c4bc
and dword [ebp - 0x8ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb58]
sub eax, dword [ebp - 0x8ec]
cmp eax, 0xf529
jne 0x1000c4e2
mov dword [ebp - 0x564], 1
jmp 0x1000c4e9
and dword [ebp - 0x564], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb58]
add eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0x124]
jne 0x1000c50f
mov dword [ebp - 0x74c], 1
jmp 0x1000c516
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x74c], eax
jle 0x1000c530
mov dword [ebp - 0x348], 1
jmp 0x1000c537
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x56c], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x56c]
add eax, dword [ebp - 0x1d8]
sub eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1d8]
jg 0x1000c584
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb58], 0
jne 0x1000c584
and dword [ebp - 0x83c], 0
jmp 0x1000c58e
mov dword [ebp - 0x83c], 1
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x83c]
lea eax, [ecx + eax + 0xecb4]
mov dword [ebp - 0x574], eax
cmp dword [ebp - 0x574], 0
je 0x1000c5c0
xor eax, eax
je 0x1000c5c0
mov dword [ebp - 0x754], 1
jmp 0x1000c5c7
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0x1b3b3333
jge 0x1000c5df
mov dword [ebp - 0x57c], 1
jmp 0x1000c5e6
and dword [ebp - 0x57c], 0
imul eax, dword [ebp - 0x57c], 0x622c
test eax, eax
je 0x1000c609
cmp dword [ebp - 0x1d8], 0
je 0x1000c609
mov dword [ebp - 0x8b4], 1
jmp 0x1000c610
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x280]
cmp dword [ebp - 0x8b4], eax
jg 0x1000c62a
mov dword [ebp - 0x584], 1
jmp 0x1000c631
and dword [ebp - 0x584], 0
cmp dword [ebp - 0x584], 1
jne 0x1000c646
mov dword [ebp - 0x75c], 1
jmp 0x1000c64d
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x75c], eax
jl 0x1000c667
mov dword [ebp - 0x58c], 1
jmp 0x1000c66e
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0xfffffffc
jl 0x1000c683
mov dword [ebp - 0x844], 1
jmp 0x1000c68a
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x844], 0xfffffffe
jl 0x1000c69f
mov dword [ebp - 0xaa4], 1
jmp 0x1000c6a6
and dword [ebp - 0xaa4], 0
imul eax, dword [ebp - 0x1d8], 0xc397
cmp eax, dword [ebp - 0x124]
jne 0x1000c6c4
mov dword [ebp - 0x594], 1
jmp 0x1000c6cb
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x594]
mov dword [ebp - 0x9f8], eax
movzx eax, byte [0x14b10758]
test eax, eax
je 0x1000c6fc
mov esi, 0x1007a848
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x100107b8
mov dword [ebp - 0xe4], 0xfffffffe
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0xaac], 0xfffffffa
mov dword [ebp - 0xb8], 0
jmp 0x1000c73d
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x1000c759
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xf3c], 0xfffffffa
jmp 0x1000c730
mov dword [ebp - 0xb8], 0
jmp 0x1000c772
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x1000c78e
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x5ac], 0x90ae735
jmp 0x1000c765
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0xe4], eax
jle 0x1000c7a8
mov dword [ebp - 0x764], 1
jmp 0x1000c7af
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0x764]
jne 0x1000c7c9
mov dword [ebp - 0x378], 1
jmp 0x1000c7d0
and dword [ebp - 0x378], 0
cmp dword [ebp - 0xe4], 0
jne 0x1000c834
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xe38], eax
mov eax, 0x2eda8ed4
dec eax
dec eax
jne 0x1000c800
mov eax, 0x6501
test eax, eax
jne 0x1000c800
and dword [ebp - 0xb40], 0
jmp 0x1000c80a
mov dword [ebp - 0xb40], 1
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xc98], eax
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xdd4], eax
cmp dword [ebp - 0x2d4], 1
jl 0x1000c834
and dword [ebp - 0x59c], 0
jmp 0x1000c83e
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0xa00]
cmp dword [ebp - 0x59c], eax
jge 0x1000c861
cmp dword [ebp - 0x2d4], 0
je 0x1000c861
mov dword [ebp - 0x90c], 1
jmp 0x1000c868
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x90c], 0xc134
jl 0x1000c880
mov dword [ebp - 0x5a4], 1
jmp 0x1000c887
and dword [ebp - 0x5a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5ac]
cmp dword [ebp - 0x5a4], eax
jl 0x1000c8a8
mov dword [ebp - 0x76c], 1
jmp 0x1000c8af
and dword [ebp - 0x76c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0xf3c], ecx
mov eax, dword [ebp - 0x76c]
sub eax, 6
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x5ac]
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x378], eax
jg 0x1000c8f7
mov dword [ebp - 0x84c], 1
jmp 0x1000c8fe
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x84c], eax
jge 0x1000c918
pop edi
pop esi
mov esp, ebp
pop ebp
ret