Function at 0x10008c34
Capabilities:
Clear file content
Get geographical location
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc20
push esi
push edi
mov dword [ebp - 0x96c], 0x796a0b59
mov dword [ebp - 0x6c], 0
jmp 0x10008c59
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10008c6f
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x800], 1
jmp 0x10008c52
mov dword [ebp - 0x6c], 0
jmp 0x10008c7f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10008c95
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xae4], 1
jmp 0x10008c78
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x800], 0xffffffe6
jmp 0x10008cc3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x800]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x800], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x800], 0xffffffe9
je 0x10008e10
mov dword [ebp - 0x24c], 8
mov dword [ebp - 0x7b8], 3
mov dword [ebp - 0x964], 2
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0xa70], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x24c]
cmp dword [ebp + eax - 0x800], ecx
jge 0x10008d22
mov dword [ebp - 0x840], 1
jmp 0x10008d29
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x68c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0xae4], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x800]
cmp dword [ebp - 0x68c], eax
je 0x10008d69
mov dword [ebp - 0x7dc], 1
jmp 0x10008d70
and dword [ebp - 0x7dc], 0
imul eax, dword [ebp - 0x7dc], 0x8064
mov dword [ebp - 0x7b8], eax
cmp dword [ebp - 0x7b8], 0xfff7
jb 0x10008d98
mov dword [ebp - 0x5d8], 1
jmp 0x10008d9f
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x24c]
imul eax, dword [ebp - 0x5d8]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x800]
jle 0x10008dc6
mov dword [ebp - 0x340], 1
jmp 0x10008dcd
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0
jne 0x10008de8
mov eax, 0xc9dffbe5
test eax, eax
jne 0x10008de8
and dword [ebp - 0x5e0], 0
jmp 0x10008df2
mov dword [ebp - 0x5e0], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x964], eax
mov dword [ebp - 0x96c], 0
jmp 0x10008ca8
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10008e2a
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x2e4], 0x7e2799ac
mov dword [ebp - 0x2e4], 0
jmp 0x10008e4d
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xe
jg 0x10008ea3
mov dword [ebp - 0x974], 0xfd4914d2
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x10008e96
push 0x10c9
push 0
push 0
push 0x1423
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
cmp dword [ebp - 0x974], 0
je 0x10008ea1
jmp 0x10008e40
jmp 0x10008e40
mov dword [ebp - 0x9a4], 0x796a0b59
mov dword [ebp - 0x7c], 0
jmp 0x10008ebd
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10008ed3
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x7f4], 1
jmp 0x10008eb6
mov dword [ebp - 0x7c], 0
jmp 0x10008ee3
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x10008ef9
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xaac], 1
jmp 0x10008edc
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7f4], 0xffffffe6
jmp 0x10008f27
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7f4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7f4], 0xffffffe9
je 0x10009074
mov dword [ebp - 0x2d0], 8
mov dword [ebp - 0x350], 3
mov dword [ebp - 0x984], 2
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xa34], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2d0]
cmp dword [ebp + eax - 0x7f4], ecx
jge 0x10008f86
mov dword [ebp - 0x97c], 1
jmp 0x10008f8d
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0xaac], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7f4]
cmp dword [ebp - 0x348], eax
je 0x10008fcd
mov dword [ebp - 0x5e8], 1
jmp 0x10008fd4
and dword [ebp - 0x5e8], 0
imul eax, dword [ebp - 0x5e8], 0x8064
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0xfff7
jb 0x10008ffc
mov dword [ebp - 0x5f0], 1
jmp 0x10009003
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x2d0]
imul eax, dword [ebp - 0x5f0]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x7f4]
jle 0x1000902a
mov dword [ebp - 0x358], 1
jmp 0x10009031
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0
jne 0x1000904c
mov eax, 0xc9dffbe5
test eax, eax
jne 0x1000904c
and dword [ebp - 0x5f8], 0
jmp 0x10009056
mov dword [ebp - 0x5f8], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x9a4], 0
jmp 0x10008f0c
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000908e
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x1c4], 0xffffffff
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1c4], eax
mov dword [ebp - 0x1c4], 0xffffffea
jmp 0x100090c7
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x17
jne 0x10009171
mov dword [ebp - 0x1ec], 0
jmp 0x100090ed
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x10009109
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xaf0], 0x405b4019
jmp 0x100090e0
mov dword [ebp - 0x17c], 0
jmp 0x10009122
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 1
je 0x1000916c
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1ac], 0
jmp 0x1000914e
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x1000916a
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xaf0], 0x2e6e7f73
jmp 0x10009141
jmp 0x10009115
jmp 0x100090ba
mov dword [ebp - 0x864], 0x796a0b59
mov dword [ebp - 0x4c], 1
mov dword [ebp - 0x2e8], 6
mov dword [ebp - 0x2d4], 0
jmp 0x100091a5
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 2
jge 0x100091c1
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0x1d8], 0x9e57ad95
jmp 0x10009198
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 0
jmp 0x100091d8
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jg 0x1000952f
mov dword [ebp - 0xe0], 0x4438bea1
mov dword [ebp - 0x2dc], 7
mov dword [ebp - 0x1f4], 0
jmp 0x1000920f
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1000922b
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x184], 5
jmp 0x10009202
mov dword [ebp - 0xe0], 0
jmp 0x10009244
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jg 0x10009352
mov dword [ebp - 0x64], 0x41b66baf
mov dword [ebp - 0x64], 1
jmp 0x10009268
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x100092a2
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10009291
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0x1d8], 0
je 0x100092a0
jmp 0x100092a2
jmp 0x10009261
mov dword [ebp - 0x64], 0
jmp 0x100092b2
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1000934d
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ebp + ecx*4 - 0x1d8]
cmp dword [ebp + eax*4 - 0x1d8], ecx
jne 0x10009332
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ebp + ecx*4 - 0x1d8]
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0x1d8]
imul ecx, ecx, 0xfffd
cmp dword [ebp + eax - 0x1d8], ecx
jg 0x1000930d
mov dword [ebp - 0x360], 1
jmp 0x10009314
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 0
jne 0x10009332
and dword [ebp - 0x600], 0
jmp 0x1000933c
mov dword [ebp - 0x600], 1
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x2e8], eax
jmp 0x100092ab
jmp 0x10009237
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x184], 0
jne 0x100094ec
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x100094e3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0x2e8], 0
jne 0x1000939c
cmp dword [ebp - 0x4c], 0
jne 0x1000939c
and dword [ebp - 0x9ac], 0
jmp 0x100093a6
mov dword [ebp - 0x9ac], 1
mov eax, 0xcc33bab7
test eax, eax
jb 0x100093bb
mov dword [ebp - 0x368], 1
jmp 0x100093c2
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x2e8]
imul eax, dword [ebp - 0x368]
test eax, eax
je 0x100093e8
cmp dword [ebp - 0xe0], 0
je 0x100093e8
mov dword [ebp - 0x608], 1
jmp 0x100093ef
and dword [ebp - 0x608], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
cmp dword [ebp - 0x608], eax
je 0x10009410
mov dword [ebp - 0x370], 1
jmp 0x10009417
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d8]
cmp dword [ebp - 0x370], eax
jl 0x10009445
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d8], 0
jne 0x10009445
and dword [ebp - 0x610], 0
jmp 0x1000944f
mov dword [ebp - 0x610], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x610]
sub ecx, dword [ebp + eax - 0x1d8]
mov dword [ebp - 0x2dc], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x2dc], eax
jge 0x1000947f
mov dword [ebp - 0x378], 1
jmp 0x10009486
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x378]
sub ecx, dword [ebp + eax - 0x184]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x184]
jle 0x100094b4
mov dword [ebp - 0x618], 1
jmp 0x100094bb
and dword [ebp - 0x618], 0
cmp dword [ebp - 0x618], 0xfffffffb
jg 0x100094d0
mov dword [ebp - 0x380], 1
jmp 0x100094d7
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0xd9de360a
je 0x100094ec
and dword [ebp - 0x620], 0
jmp 0x100094f6
mov dword [ebp - 0x620], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
cmp dword [ebp - 0x620], eax
jge 0x10009517
mov dword [ebp - 0x388], 1
jmp 0x1000951e
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xe0], eax
jmp 0x100091d1
mov dword [ebp - 0x84], 0
jmp 0x10009548
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x10009564
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x7e8], 1
jmp 0x1000953b
mov dword [ebp - 0xe8], 7
mov dword [ebp - 0x638], 0xcbbbc25
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0x9bc], 0x8607
mov dword [ebp - 0x9c4], 0xf4846e1d
mov dword [ebp - 0xe8], 0
jmp 0x100095af
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffea
jne 0x100098d8
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x9b4], 0x6e85fcb
mov dword [ebp - 0x3c], 0
jmp 0x100095dd
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 6
jl 0x10009627
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10009602
push 0
push 0x250d
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x10009625
push 0x251
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
jmp 0x100095d6
mov dword [ebp - 0x3c], 9
jmp 0x10009637
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jg 0x100098d3
mov dword [ebp - 0x1fc], 0x272a727
mov dword [ebp - 0x390], 4
mov dword [ebp - 0x628], 0
mov dword [ebp - 0x298], 0x70fc
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x10009683
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x1fc], 0xffffffeb
jmp 0x1000969c
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xfffffffb
jl 0x100098ce
mov dword [ebp - 0x3a0], 0
mov dword [ebp - 0x648], 0x2305aba9
cmp dword [ebp - 0x390], 0x1ec2
jne 0x100097d8
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x628], eax
mov eax, dword [ebp - 0x628]
neg eax
cmp dword [ebp - 0x390], eax
jne 0x100096f5
mov dword [ebp - 0x630], 1
jmp 0x100096fc
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x9b4]
cmp dword [ebp - 0x630], eax
jle 0x10009716
mov dword [ebp - 0x398], 1
jmp 0x1000971d
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0x398]
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x3a0], eax
jge 0x1000975c
cmp dword [ebp - 0x298], 0
jne 0x1000975c
and dword [ebp - 0x640], 0
jmp 0x10009766
mov dword [ebp - 0x640], 1
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x3a8], eax
cmp dword [ebp - 0x3a8], 0
je 0x10009790
cmp dword [ebp - 0x9bc], 0
je 0x10009790
mov dword [ebp - 0x3b0], 1
jmp 0x10009797
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x648]
cmp dword [ebp - 0x3b0], eax
jge 0x100097b1
mov dword [ebp - 0x650], 1
jmp 0x100097b8
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x650], eax
jl 0x100097d8
cmp dword [ebp - 0xe8], 0
je 0x100097d8
mov dword [ebp - 0x3b8], 1
jmp 0x100097df
and dword [ebp - 0x3b8], 0
mov eax, 0xf57a5575
test eax, eax
jne 0x100097fa
mov eax, 0xc437ffe
test eax, eax
jne 0x100097fa
and dword [ebp - 0x658], 0
jmp 0x10009804
mov dword [ebp - 0x658], 1
cmp dword [ebp - 0x658], 0xffffffff
jge 0x10009819
mov dword [ebp - 0x3c0], 1
jmp 0x10009820
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c0], eax
jle 0x10009837
mov dword [ebp - 0x660], 1
jmp 0x1000983e
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0xfffffff6
jg 0x10009853
mov dword [ebp - 0x3c8], 1
jmp 0x1000985a
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x3c8], eax
jne 0x10009874
mov dword [ebp - 0x668], 1
jmp 0x1000987b
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x668], eax
jne 0x10009895
mov dword [ebp - 0x3d0], 1
jmp 0x1000989c
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x3d0], eax
jg 0x100098b6
mov dword [ebp - 0x670], 1
jmp 0x100098bd
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x9c4], eax
jmp 0x1000968f
jmp 0x10009630
jmp 0x100095a2
mov dword [ebp - 0x84], 0
jmp 0x100098f1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1000990d
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xafc], 1
jmp 0x100098e4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7e8], 0xffffffe6
jmp 0x1000993b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7e8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7e8], 0xffffffe9
je 0x10009b83
mov dword [ebp - 0x204], 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x98], 0
jmp 0x1000997c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10009998
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xb84], 0x2eac4530
jmp 0x1000996f
mov dword [ebp - 0x98], 0
jmp 0x100099b1
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x100099cd
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xba8], 0
jmp 0x100099a4
cmp dword [ebp - 0x1cc], 0
je 0x100099f1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb84], 0
je 0x100099f1
mov dword [ebp - 0x3d8], 1
jmp 0x100099f8
and dword [ebp - 0x3d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp + eax - 0xba8], ecx
mov dword [ebp - 0x1cc], 0
jmp 0x10009a24
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jg 0x10009a54
mov dword [ebp - 0xa78], 1
mov dword [ebp - 0x328], 0xfffffff6
mov eax, dword [ebp - 0x328]
dec eax
mov dword [ebp - 0x328], eax
je 0x10009a52
jmp 0x10009a54
jmp 0x10009a17
mov dword [ebp - 0x680], 3
mov dword [ebp - 0x95c], 2
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xacc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x204]
cmp dword [ebp + eax - 0x7e8], ecx
jge 0x10009a95
mov dword [ebp - 0x850], 1
jmp 0x10009a9c
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x678], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x678]
mov dword [ebp + eax - 0xafc], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7e8]
cmp dword [ebp - 0x678], eax
je 0x10009adc
mov dword [ebp - 0x3e0], 1
jmp 0x10009ae3
and dword [ebp - 0x3e0], 0
imul eax, dword [ebp - 0x3e0], 0x8064
mov dword [ebp - 0x680], eax
cmp dword [ebp - 0x680], 0xfff7
jb 0x10009b0b
mov dword [ebp - 0x3e8], 1
jmp 0x10009b12
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x3e8]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x7e8]
jle 0x10009b39
mov dword [ebp - 0x688], 1
jmp 0x10009b40
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0
jne 0x10009b5b
mov eax, 0xc9dffbe5
test eax, eax
jne 0x10009b5b
and dword [ebp - 0x3f0], 0
jmp 0x10009b65
mov dword [ebp - 0x3f0], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x95c], eax
mov dword [ebp - 0x864], 0
jmp 0x10009920
mov dword [ebp - 0xa88], 0x37bc7528
mov dword [ebp - 0x690], 0x5f4b
mov dword [ebp - 0xad8], 1
mov dword [ebp - 0x2c0], 0
jmp 0x10009bba
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 3
jge 0x10009bd6
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0xbe4], 3
jmp 0x10009bad
mov eax, dword [ebp - 0x690]
dec eax
mov dword [ebp - 0x690], eax
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10009bfd
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0xa98], 0x862f
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x10009c26
push 0
push 0x10e6
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x10009c4e
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectClipRgn]
mov byte [ebp - 0xca], 0
mov dword [ebp - 0x20c], 0x7e2799ac
mov dword [ebp - 0x20c], 0
jmp 0x10009c78
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0xe
jg 0x10009cce
mov dword [ebp - 0x854], 0xfd4914d2
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10009cc1
push 0x10c9
push 0
push 0
push 0x1423
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
cmp dword [ebp - 0x854], 0
je 0x10009ccc
jmp 0x10009c6b
jmp 0x10009c6b
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x10009ce1
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x18c], 0xffffffff
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x18c], eax
mov dword [ebp - 0x18c], 0xffffffea
jmp 0x10009d1a
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x17
jne 0x10009dc4
mov dword [ebp - 0x2a0], 0
jmp 0x10009d40
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jge 0x10009d5c
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xabc], 0x405b4019
jmp 0x10009d33
mov dword [ebp - 0x1b4], 0
jmp 0x10009d75
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
je 0x10009dbf
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x194], 0
jmp 0x10009da1
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x10009dbd
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0xabc], 0x2e6e7f73
jmp 0x10009d94
jmp 0x10009d68
jmp 0x10009d0d
mov dword [ebp - 0x214], 0x48261f9c
mov dword [ebp - 0x214], 0xfffffffa
jmp 0x10009de7
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0xffffffec
je 0x10009ff3
mov dword [ebp - 0x2e0], 0xe1c97412
mov dword [ebp - 0x80], 0
jmp 0x10009e0e
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10009e24
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x818], 0x446df37d
jmp 0x10009e07
mov dword [ebp - 0x80], 0
jmp 0x10009e34
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10009e4a
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x9dc], 0xd4f2887c
jmp 0x10009e2d
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9dc], 0
jmp 0x10009e78
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9dc], 1
jg 0x10009e9f
mov dword [ebp - 0x908], 8
cmp dword [ebp - 0x908], 0
je 0x10009e9d
jmp 0x10009e9f
jmp 0x10009e5d
mov dword [ebp - 0x2e0], 2
jmp 0x10009eb8
mov eax, dword [ebp - 0x2e0]
dec eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jl 0x10009fee
mov dword [ebp - 0x21c], 0
jmp 0x10009ede
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x10009efa
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x830], 3
jmp 0x10009ed1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x830], 0
jmp 0x10009f28
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x830]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x830], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x830], 1
jg 0x10009fcf
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x19c], 0
jmp 0x10009f5f
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jg 0x10009fca
mov dword [ebp - 0x174], 0x5b1b6fd4
mov eax, dword [ebp - 0x19c]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x830]
mov eax, dword [ebp + eax*4 - 0x818]
mov dword [ebp + ecx*4 - 0x818], eax
mov dword [ebp - 0x174], 0
jmp 0x10009fac
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 2
jge 0x10009fc8
mov eax, dword [ebp - 0x174]
mov dword [ebp + eax*4 - 0x818], 0xdca27289
jmp 0x10009f9f
jmp 0x10009f52
jmp 0x10009f0d
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x818]
mov dword [ebp + ecx - 0x830], eax
jmp 0x10009eab
jmp 0x10009dda
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0xffffffff
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a0], 0xffffffea
jmp 0x1000a02c
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x17
jne 0x1000a0d6
mov dword [ebp - 0x2a8], 0
jmp 0x1000a052
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x1000a06e
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0xb14], 0x405b4019
jmp 0x1000a045
mov dword [ebp - 0x1a4], 0
jmp 0x1000a087
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
je 0x1000a0d1
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1bc], 0
jmp 0x1000a0b3
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x1000a0cf
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xb14], 0x2e6e7f73
jmp 0x1000a0a6
jmp 0x1000a07a
jmp 0x1000a01f
mov dword [ebp - 0xf0], 0xffffffff
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x224], 0
jmp 0x1000a103
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x1000a11f
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xf8], 7
jmp 0x1000a0f6
mov dword [ebp - 0xf0], 0
jmp 0x1000a138
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jg 0x1000a16d
mov dword [ebp - 0x3f8], 0xffffffff
mov eax, dword [ebp - 0x3f8]
dec eax
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0xf0]
mov eax, dword [ebp + eax*4 - 0xf8]
mov dword [ebp - 0x90], eax
jmp 0x1000a12b
mov eax, 0xaae4
test eax, eax
je 0x1000a1a2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xf8]
cmp dword [ebp + eax - 0xf8], ecx
jl 0x1000a1a2
xor eax, eax
je 0x1000a1a2
mov dword [ebp - 0x698], 1
jmp 0x1000a1a9
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x698], eax
jg 0x1000a1ca
mov dword [ebp - 0x400], 1
jmp 0x1000a1d1
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x400], eax
je 0x1000a1f2
mov dword [ebp - 0x6a0], 1
jmp 0x1000a1f9
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x6a0]
jl 0x1000a22b
mov dword [ebp - 0x408], 1
jmp 0x1000a232
and dword [ebp - 0x408], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x408], eax
je 0x1000a274
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1000a272
push 0x1fe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x1000a2f3
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1000a295
push 0
push 1
push 0x674
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x90], 0
jmp 0x1000a2ae
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x1000a2f3
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x1000a2df
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0xf8], 0
je 0x1000a2f1
jmp 0x1000a2a1
jmp 0x1000a2a1
mov dword [ebp - 0x2c8], 0x48261f9c
mov dword [ebp - 0x2c8], 0xfffffffa
jmp 0x1000a316
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0xffffffec
je 0x1000a540
mov dword [ebp - 0x22c], 0xe1c97412
mov dword [ebp - 0x88], 0
jmp 0x1000a346
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000a362
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x810], 0x446df37d
jmp 0x1000a339
mov dword [ebp - 0x88], 0
jmp 0x1000a37b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000a397
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x9e8], 0xd4f2887c
jmp 0x1000a36e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9e8], 0
jmp 0x1000a3c5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9e8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9e8], 1
jg 0x1000a3ec
mov dword [ebp - 0x858], 8
cmp dword [ebp - 0x858], 0
je 0x1000a3ea
jmp 0x1000a3ec
jmp 0x1000a3aa
mov dword [ebp - 0x22c], 2
jmp 0x1000a405
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x1000a53b
mov dword [ebp - 0x2b0], 0
jmp 0x1000a42b
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x1000a447
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x83c], 3
jmp 0x1000a41e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x83c], 0
jmp 0x1000a475
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x83c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x83c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x83c], 1
jg 0x1000a51c
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x178], 0
jmp 0x1000a4ac
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jg 0x1000a517
mov dword [ebp - 0x180], 0x5b1b6fd4
mov eax, dword [ebp - 0x178]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x83c]
mov eax, dword [ebp + eax*4 - 0x810]
mov dword [ebp + ecx*4 - 0x810], eax
mov dword [ebp - 0x180], 0
jmp 0x1000a4f9
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jge 0x1000a515
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x810], 0xdca27289
jmp 0x1000a4ec
jmp 0x1000a49f
jmp 0x1000a45a
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x810]
mov dword [ebp + ecx - 0x83c], eax
jmp 0x1000a3f8
jmp 0x1000a309
mov dword [ebp - 0x2d8], 0x22ba3946
mov dword [ebp - 0x234], 0
jmp 0x1000a563
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x1000a57f
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xc00], 0xffffffff
jmp 0x1000a556
mov dword [ebp - 0x2d8], 3
jmp 0x1000a598
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jl 0x1000a5e2
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x1000a5c0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000a5e0
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1000a58b
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0x74], 1
mov dword [ebp - 0x23c], 0
jmp 0x1000a60c
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x1000a628
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x108], 7
jmp 0x1000a5ff
mov dword [ebp - 0x100], 0
jmp 0x1000a641
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jg 0x1000a673
mov dword [ebp - 0x6a8], 0xffffffff
mov eax, dword [ebp - 0x6a8]
dec eax
mov dword [ebp - 0x6a8], eax
mov eax, dword [ebp - 0x100]
mov eax, dword [ebp + eax*4 - 0x108]
mov dword [ebp - 0x74], eax
jmp 0x1000a634
mov eax, 0xaae4
test eax, eax
je 0x1000a6a8
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x108]
cmp dword [ebp + eax - 0x108], ecx
jl 0x1000a6a8
xor eax, eax
je 0x1000a6a8
mov dword [ebp - 0x410], 1
jmp 0x1000a6af
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x410], eax
jg 0x1000a6d0
mov dword [ebp - 0x6b0], 1
jmp 0x1000a6d7
and dword [ebp - 0x6b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x6b0], eax
je 0x1000a6f8
mov dword [ebp - 0x418], 1
jmp 0x1000a6ff
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x418]
jl 0x1000a728
mov dword [ebp - 0x6b8], 1
jmp 0x1000a72f
and dword [ebp - 0x6b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp dword [ebp - 0x6b8], eax
je 0x1000a771
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x1000a76f
push 0x1fe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x1000a7e1
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000a792
push 0
push 1
push 0x674
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x74], 0
jmp 0x1000a7a2
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1000a7e1
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1000a7d0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x108], 0
je 0x1000a7df
jmp 0x1000a79b
jmp 0x1000a79b
mov dword [ebp - 0x2b8], 0x48261f9c
mov dword [ebp - 0x2b8], 0xfffffffa
jmp 0x1000a804
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0xffffffec
je 0x1000aa10
mov dword [ebp - 0x244], 0xe1c97412
mov dword [ebp - 0x68], 0
jmp 0x1000a82b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1000a841
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x808], 0x446df37d
jmp 0x1000a824
mov dword [ebp - 0x68], 0
jmp 0x1000a851
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000a867
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x9d0], 0xd4f2887c
jmp 0x1000a84a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9d0], 0
jmp 0x1000a895
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9d0], 1
jg 0x1000a8bc
mov dword [ebp - 0x994], 8
cmp dword [ebp - 0x994], 0
je 0x1000a8ba
jmp 0x1000a8bc
jmp 0x1000a87a
mov dword [ebp - 0x244], 2
jmp 0x1000a8d5
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0
jl 0x1000aa0b
mov dword [ebp - 0x290], 0
jmp 0x1000a8fb
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1000a917
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x824], 3
jmp 0x1000a8ee
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x824], 0
jmp 0x1000a945
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x824]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x824], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x824], 1
jg 0x1000a9ec
mov dword [ebp - 0x188], 1
mov dword [ebp - 0x188], 0
jmp 0x1000a97c
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jg 0x1000a9e7
mov dword [ebp - 0x190], 0x5b1b6fd4
mov eax, dword [ebp - 0x188]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x824]
mov eax, dword [ebp + eax*4 - 0x808]
mov dword [ebp + ecx*4 - 0x808], eax
mov dword [ebp - 0x190], 0
jmp 0x1000a9c9
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x1000a9e5
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x808], 0xdca27289
jmp 0x1000a9bc
jmp 0x1000a96f
jmp 0x1000a92a
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x808]
mov dword [ebp + ecx - 0x824], eax
jmp 0x1000a8c8
jmp 0x1000a7f7
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x5c], 0xa906
mov dword [ebp - 0x880], 0xfffffffd
mov dword [ebp - 0xb0c], 0
mov dword [ebp - 0x1e4], 0
jmp 0x1000aa4b
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x1000aa67
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x294], 0xdfddae9
jmp 0x1000aa3e
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000aa81
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
cmp dword [ebp - 0x24], 0
jne 0x1000aa93
mov dword [ebp - 0x860], 1
jmp 0x1000aa9a
and dword [ebp - 0x860], 0
cmp dword [ebp - 0x24], 0
je 0x1000aaf3
cmp dword [ebp - 0x24], 0
je 0x1000aab8
cmp dword [ebp - 0x5c], 0
je 0x1000aab8
mov dword [ebp - 0x420], 1
jmp 0x1000aabf
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0x383c
jge 0x1000aad7
mov dword [ebp - 0x6c0], 1
jmp 0x1000aade
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 0
je 0x1000aaf3
mov dword [ebp - 0x428], 1
jmp 0x1000aafa
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x428], eax
jle 0x1000ab11
mov dword [ebp - 0x6c8], 1
jmp 0x1000ab18
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x6c8], eax
je 0x1000ab2f
mov dword [ebp - 0x430], 1
jmp 0x1000ab36
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0xffffffff
jl 0x1000ab4b
mov dword [ebp - 0x6d0], 1
jmp 0x1000ab52
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x6d0], eax
jg 0x1000ab62
or eax, 0xffffffff
je 0x1000ab77
mov eax, 0xfff8
test eax, eax
je 0x1000ab77
mov dword [ebp - 0x910], 1
jmp 0x1000ab7e
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x5c]
je 0x1000ae6e
mov dword [ebp - 0xa18], 0xffbe6269
mov dword [ebp - 0xa14], 0xffbe6269
mov dword [ebp - 0xa10], 0xffbe6269
mov dword [ebp - 0xa0c], 0xffbe6269
mov dword [ebp - 0x5c], 0
jmp 0x1000abc2
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1000ae6c
mov dword [ebp - 0x868], 0x20a048c8
mov dword [ebp - 0x870], 0xb265d632
mov dword [ebp - 0x918], 4
mov dword [ebp - 0x878], 9
mov dword [ebp - 0x9b0], 0xaadaf8d9
mov dword [ebp - 0x24], 0
jmp 0x1000ac0e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1000ae67
mov dword [ebp - 0x110], 0x7ea4c570
mov dword [ebp - 0x110], 0
jmp 0x1000ac3b
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x1000ae62
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x294], 0
je 0x1000adf1
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x294], 0
je 0x1000ac82
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa18], 0
je 0x1000ac82
mov dword [ebp - 0x6d8], 1
jmp 0x1000ac89
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x868], 1
jl 0x1000ac9e
mov dword [ebp - 0x438], 1
jmp 0x1000aca5
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0xa3b
je 0x1000acbd
mov dword [ebp - 0x968], 1
jmp 0x1000acc4
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xadc], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x294]
mov ecx, dword [ebp - 0x24]
imul eax, dword [ebp + ecx*4 - 0x294]
cmp dword [ebp - 0x6d8], eax
jl 0x1000acf9
mov dword [ebp - 0x440], 1
jmp 0x1000ad00
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
sub eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x870]
jle 0x1000ad26
cmp dword [ebp - 0x24], 0
je 0x1000ad26
mov dword [ebp - 0x6e0], 1
jmp 0x1000ad2d
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x6e0], eax
jne 0x1000ad47
mov dword [ebp - 0x448], 1
jmp 0x1000ad4e
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x918]
cmp dword [ebp - 0x448], eax
jl 0x1000ad68
mov dword [ebp - 0x6e8], 1
jmp 0x1000ad6f
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 0x942f
jl 0x1000ad87
mov dword [ebp - 0x450], 1
jmp 0x1000ad8e
and dword [ebp - 0x450], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa18]
cmp dword [ebp - 0x450], eax
jg 0x1000adaf
mov dword [ebp - 0x6f0], 1
jmp 0x1000adb6
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x878]
cmp dword [ebp - 0x6f0], eax
jg 0x1000add6
mov eax, 0x435d
test eax, eax
jne 0x1000add6
and dword [ebp - 0x458], 0
jmp 0x1000ade0
mov dword [ebp - 0x458], 1
xor eax, eax
inc eax
je 0x1000adf1
mov dword [ebp - 0x6f8], 1
jmp 0x1000adf8
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0xffffffff
jl 0x1000ae0d
mov dword [ebp - 0x460], 1
jmp 0x1000ae14
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x9b0]
cmp dword [ebp - 0x460], eax
jle 0x1000ae2e
mov dword [ebp - 0x700], 1
jmp 0x1000ae35
and dword [ebp - 0x700], 0
cmp dword [ebp - 0x700], 9
je 0x1000ae4a
mov dword [ebp - 0x468], 1
jmp 0x1000ae51
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x880], eax
jmp 0x1000ac2e
jmp 0x1000ac07
jmp 0x1000abbb
jmp 0x1000ae94
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1000ae94
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
mov dword [ebp - 0x29c], 0x22ba3946
mov dword [ebp - 0x254], 0
jmp 0x1000aeb7
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 4
jge 0x1000aed3
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0xc10], 0xffffffff
jmp 0x1000aeaa
mov dword [ebp - 0x29c], 3
jmp 0x1000aeec
mov eax, dword [ebp - 0x29c]
dec eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 0
jl 0x1000af36
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1000af14
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1000af34
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1000aedf
mov dword [ebp - 0x154], 0xfffffff8
mov dword [ebp - 0x154], 8
jmp 0x1000af59
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 6
jne 0x1000b048
mov dword [ebp - 0x15c], 0xfffffffd
mov dword [ebp - 0x25c], 0
jmp 0x1000af89
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 2
jge 0x1000afa5
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xac8], 0x1220985a
jmp 0x1000af7c
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x15c], eax
jne 0x1000afbf
mov dword [ebp - 0x708], 1
jmp 0x1000afc6
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x708]
jle 0x1000afe0
mov dword [ebp - 0x470], 1
jmp 0x1000afe7
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x470]
mov dword [ebp + eax - 0xac8], ecx
mov dword [ebp - 0x15c], 2
jmp 0x1000b013
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0x2c
jge 0x1000b043
cmp dword [ebp - 0x15c], 0
je 0x1000b027
jmp 0x1000b043
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1000b041
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
jmp 0x1000b006
jmp 0x1000af4c
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000b07c
push 0x1669
push 0
push 0x1f53
push 0x7d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
movzx eax, byte [0x106603e8]
test eax, eax
je 0x1000b09a
mov esi, 0x10074630
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000eb0d
mov dword [ebp - 0x44], 0xfffffff8
mov dword [ebp - 0x54], 0x63785551
mov dword [ebp - 0x330], 0x5d1cb6a7
mov eax, dword [ebp - 0x44]
sub eax, 6
je 0x1000b0cf
mov eax, 0xe964
test eax, eax
je 0x1000b0cf
mov dword [ebp - 0x710], 1
jmp 0x1000b0d6
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jae 0x1000b0f1
mov dword [ebp - 0x478], 1
jmp 0x1000b0f8
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x478]
jg 0x1000b10f
mov dword [ebp - 0x718], 1
jmp 0x1000b116
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x718]
jl 0x1000b12e
xor eax, eax
jne 0x1000b12e
and dword [ebp - 0x480], 0
jmp 0x1000b138
mov dword [ebp - 0x480], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x480], eax
je 0x1000b14f
mov dword [ebp - 0x920], 1
jmp 0x1000b156
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xa38], eax
imul eax, dword [ebp - 0x44], 0x2f3c
cmp dword [ebp - 0x44], eax
jne 0x1000b177
mov dword [ebp - 0x720], 1
jmp 0x1000b17e
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x720]
cmp eax, 0xd5493e6
je 0x1000b1b0
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1000b1ae
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x1000b1bf
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x330], 0
je 0x1000b219
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x54], eax
jge 0x1000b1dc
mov dword [ebp - 0x488], 1
jmp 0x1000b1e3
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x488], eax
jge 0x1000b1fa
mov dword [ebp - 0x728], 1
jmp 0x1000b201
and dword [ebp - 0x728], 0
cmp dword [ebp - 0x728], 0xfff9
jbe 0x1000b219
mov dword [ebp - 0x490], 1
jmp 0x1000b220
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0x490]
jl 0x1000b237
mov dword [ebp - 0x888], 1
jmp 0x1000b23e
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x330], eax
jg 0x1000b255
mov dword [ebp - 0x730], 1
jmp 0x1000b25c
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x730], eax
jne 0x1000b273
mov dword [ebp - 0x498], 1
jmp 0x1000b27a
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x118], 0xffffffff
mov dword [ebp - 0x70], 1
mov dword [ebp - 0x2a4], 0
jmp 0x1000b2ad
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 1
jge 0x1000b2c9
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0x120], 7
jmp 0x1000b2a0
mov dword [ebp - 0x118], 0
jmp 0x1000b2e2
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jg 0x1000b314
mov dword [ebp - 0x738], 0xffffffff
mov eax, dword [ebp - 0x738]
dec eax
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x118]
mov eax, dword [ebp + eax*4 - 0x120]
mov dword [ebp - 0x70], eax
jmp 0x1000b2d5
mov eax, 0xaae4
test eax, eax
je 0x1000b349
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x120]
cmp dword [ebp + eax - 0x120], ecx
jl 0x1000b349
xor eax, eax
je 0x1000b349
mov dword [ebp - 0x4a0], 1
jmp 0x1000b350
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x4a0], eax
jg 0x1000b371
mov dword [ebp - 0x740], 1
jmp 0x1000b378
and dword [ebp - 0x740], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x740], eax
je 0x1000b399
mov dword [ebp - 0x4a8], 1
jmp 0x1000b3a0
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x4a8]
jl 0x1000b3c9
mov dword [ebp - 0x76c], 1
jmp 0x1000b3d0
and dword [ebp - 0x76c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x76c], eax
je 0x1000b412
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000b410
push 0x1fe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x1000b482
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1000b433
push 0
push 1
push 0x674
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x70], 0
jmp 0x1000b443
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x1000b482
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000b471
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x120], 0
je 0x1000b480
jmp 0x1000b43c
jmp 0x1000b43c
mov dword [ebp - 0xa3c], 0x10074630
mov dword [ebp - 0x2ac], 0x22ba3946
mov dword [ebp - 0x264], 0
jmp 0x1000b4af
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x1000b4cb
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xc20], 0xffffffff
jmp 0x1000b4a2
mov dword [ebp - 0x2ac], 3
jmp 0x1000b4e4
mov eax, dword [ebp - 0x2ac]
dec eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0
jl 0x1000b52e
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1000b50c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000b52c
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1000b4d7
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x26c], 0
jmp 0x1000b551
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1000b56d
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xa84], 0
jmp 0x1000b544
mov dword [ebp - 0xac], 0
jmp 0x1000b586
cmp dword [ebp - 0xac], 2
jg 0x1000b7b3
mov dword [ebp - 0x198], 7
mov dword [ebp - 0x4b0], 0x7f19
mov dword [ebp - 0x4c8], 0x1fa4c821
mov dword [ebp - 0x890], 0xfffffffa
mov dword [ebp - 0x2b4], 0
jmp 0x1000b5d4
cmp dword [ebp - 0x2b4], 4
jge 0x1000b5f0
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1000b7cd
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x34], 0xa906
mov dword [ebp - 0x938], 0xfffffffd
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0x274], 0
jmp 0x1000b808
pop edi
pop esi
mov esp, ebp
pop ebp
ret