Function at 0x1000ab39
Capabilities:
Get file attributes
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100898d1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1148
call fcn.10085a50
push esi
push edi
push 3
lea ecx, [ebp - 0x2f8]
call fcn.10019e28
and dword [ebp - 4], 0
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x148], 0
mov dword [ebp - 0xa84], 0xab2bc8f9
mov dword [ebp - 0x394], 1
mov dword [ebp - 0x88], 0
jmp 0x1000abaf
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000abd1
push dword [ebp - 0x88]
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
mov dword [eax], 0xb3c692be
jmp 0x1000aba2
mov dword [ebp - 0x88], 0
jmp 0x1000abea
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000ac06
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xf5c], 0
jmp 0x1000abdd
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x78c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp dword [eax], 0xffff
jb 0x1000ad27
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp dword [eax], 1
jg 0x1000ac68
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000ac68
mov dword [ebp - 0xa5c], 1
jmp 0x1000ac6f
and dword [ebp - 0xa5c], 0
imul eax, dword [ebp - 0xa5c], 6
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jne 0x1000aca3
push 1
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000aca3
mov dword [ebp - 0xb30], 1
jmp 0x1000acaa
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x1030], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0xff0], eax
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp dword [eax], 0
jae 0x1000aced
mov dword [ebp - 0xa64], 1
jmp 0x1000acf4
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0xa64], eax
jg 0x1000ad0e
mov dword [ebp - 0xa6c], 1
jmp 0x1000ad15
and dword [ebp - 0xa6c], 0
cmp dword [ebp - 0xa6c], 0xffffffff
je 0x1000ad27
and dword [ebp - 0xa74], 0
jmp 0x1000ad31
mov dword [ebp - 0xa74], 1
push 1
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
mov ecx, dword [ebp - 0xa74]
cmp ecx, dword [eax]
jne 0x1000ad54
mov dword [ebp - 0xa7c], 1
jmp 0x1000ad5b
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0xa84], eax
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1000ad8f
cmp dword [ebp - 0x394], 0
je 0x1000ad8f
mov dword [ebp - 0xa8c], 1
jmp 0x1000ad96
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0xa8c], eax
jl 0x1000adb0
mov dword [ebp - 0xa94], 1
jmp 0x1000adb7
and dword [ebp - 0xa94], 0
mov esi, dword [ebp - 0xa94]
inc esi
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp esi, dword [eax]
jge 0x1000addb
mov dword [ebp - 0xa9c], 1
jmp 0x1000ade2
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0xa9c], eax
jl 0x1000adfc
mov dword [ebp - 0xb68], 1
jmp 0x1000ae03
and dword [ebp - 0xb68], 0
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x200], eax
jge 0x1000ae37
mov dword [ebp - 0xaa4], 1
jmp 0x1000ae3e
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0xaa4], eax
je 0x1000ae58
mov dword [ebp - 0xaac], 1
jmp 0x1000ae5f
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 0x1abe719c
jg 0x1000ae77
mov dword [ebp - 0xab4], 1
jmp 0x1000ae7e
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0xab4]
test eax, eax
jne 0x1000aeaa
push 0
lea ecx, [ebp - 0x2f8]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000aeaa
and dword [ebp - 0xadc], 0
jmp 0x1000aeb4
mov dword [ebp - 0xadc], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xadc]
mov dword [ebp + eax - 0xf5c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2f8]
call fcn.10019e90
push 3
lea ecx, [ebp - 0x304]
call fcn.10019e28
mov dword [ebp - 4], 1
mov dword [ebp - 0x2c4], 0xffffffff
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x410], 0xab2bc8f9
mov dword [ebp - 0x31c], 1
mov dword [ebp - 0x78], 0
jmp 0x1000af22
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1000af3e
push dword [ebp - 0x78]
lea ecx, [ebp - 0x304]
call fcn.10019e95
mov dword [eax], 0xb3c692be
jmp 0x1000af1b
mov dword [ebp - 0x78], 0
jmp 0x1000af4e
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1000af64
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1058], 0
jmp 0x1000af47
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
mov dword [ebp - 0xae4], eax
mov eax, dword [ebp - 0xae4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xae4]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp dword [eax], 0xffff
jb 0x1000b085
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp dword [eax], 1
jg 0x1000afc6
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000afc6
mov dword [ebp - 0xaec], 1
jmp 0x1000afcd
and dword [ebp - 0xaec], 0
imul eax, dword [ebp - 0xaec], 6
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0
jne 0x1000b001
push 1
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000b001
mov dword [ebp - 0xb70], 1
jmp 0x1000b008
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xf48], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x1034], eax
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp dword [eax], 0
jae 0x1000b04b
mov dword [ebp - 0xaf4], 1
jmp 0x1000b052
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xaf4], eax
jg 0x1000b06c
mov dword [ebp - 0xad8], 1
jmp 0x1000b073
and dword [ebp - 0xad8], 0
cmp dword [ebp - 0xad8], 0xffffffff
je 0x1000b085
and dword [ebp - 0x408], 0
jmp 0x1000b08f
mov dword [ebp - 0x408], 1
push 1
lea ecx, [ebp - 0x304]
call fcn.10019e95
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [eax]
jne 0x1000b0b2
mov dword [ebp - 0x7f0], 1
jmp 0x1000b0b9
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x410], eax
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1000b0ed
cmp dword [ebp - 0x31c], 0
je 0x1000b0ed
mov dword [ebp - 0x7f8], 1
jmp 0x1000b0f4
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x7f8], eax
jl 0x1000b10e
mov dword [ebp - 0x418], 1
jmp 0x1000b115
and dword [ebp - 0x418], 0
mov esi, dword [ebp - 0x418]
inc esi
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp esi, dword [eax]
jge 0x1000b139
mov dword [ebp - 0x800], 1
jmp 0x1000b140
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x800], eax
jl 0x1000b15a
mov dword [ebp - 0xb78], 1
jmp 0x1000b161
and dword [ebp - 0xb78], 0
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x2c4], eax
jge 0x1000b195
mov dword [ebp - 0x420], 1
jmp 0x1000b19c
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x420], eax
je 0x1000b1b6
mov dword [ebp - 0x808], 1
jmp 0x1000b1bd
and dword [ebp - 0x808], 0
cmp dword [ebp - 0x808], 0x1abe719c
jg 0x1000b1d5
mov dword [ebp - 0x428], 1
jmp 0x1000b1dc
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x158]
imul eax, dword [ebp - 0x428]
test eax, eax
jne 0x1000b208
push 0
lea ecx, [ebp - 0x304]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000b208
and dword [ebp - 0x810], 0
jmp 0x1000b212
mov dword [ebp - 0x810], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x810]
mov dword [ebp + eax - 0x1058], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x304]
call fcn.10019e90
mov dword [ebp - 0xa0], 0x84225189
mov dword [ebp - 0x818], 0xffffffff
mov dword [ebp - 0x150], 0
push 3
lea ecx, [ebp - 0xc5c]
call fcn.10019e28
mov dword [ebp - 4], 2
mov dword [ebp - 0x3c], 0
jmp 0x1000b276
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1000b28c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1e4], 0xebb0cb8c
jmp 0x1000b26f
mov dword [ebp - 0x3c], 0
jmp 0x1000b29c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1000b2b8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xc5c]
call fcn.10019e95
mov dword [eax], 0x10110121
jmp 0x1000b295
mov dword [ebp - 0x3c], 0
jmp 0x1000b2c8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1000b2de
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x324], 1
jmp 0x1000b2c1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 3
add eax, dword [ebp + ecx - 0x1e4]
je 0x1000b542
xor eax, eax
jne 0x1000b4a8
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1e4]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0x1e4]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xf50], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1e4], 0x4dd
jl 0x1000b35f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1e4], 0
je 0x1000b35f
mov dword [ebp - 0x430], 1
jmp 0x1000b366
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x1e4]
add eax, 0xfc16
cmp eax, 0x5654
je 0x1000b39e
mov dword [ebp - 0x438], 1
jmp 0x1000b3a5
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0xffffffff
jne 0x1000b3ba
mov dword [ebp - 0x820], 1
jmp 0x1000b3c1
and dword [ebp - 0x820], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x820], eax
jg 0x1000b3e2
mov dword [ebp - 0x440], 1
jmp 0x1000b3e9
and dword [ebp - 0x440], 0
cmp dword [ebp - 0x440], 0x3cb8
jne 0x1000b401
mov dword [ebp - 0x828], 1
jmp 0x1000b408
and dword [ebp - 0x828], 0
cmp dword [ebp - 0x828], 0x34071e99
jge 0x1000b420
mov dword [ebp - 0x448], 1
jmp 0x1000b427
and dword [ebp - 0x448], 0
imul eax, dword [ebp - 0x448], 0xfffffff9
cmp eax, 6
jb 0x1000b43f
mov dword [ebp - 0x830], 1
jmp 0x1000b446
and dword [ebp - 0x830], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x830], eax
je 0x1000b477
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1e4], 0
je 0x1000b477
mov dword [ebp - 0x450], 1
jmp 0x1000b47e
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1e4]
jne 0x1000b4a8
and dword [ebp - 0x838], 0
jmp 0x1000b4b2
mov dword [ebp - 0x838], 1
mov eax, dword [ebp - 0x838]
sub eax, 0xa
je 0x1000b4d8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1e4], 0
je 0x1000b4d8
mov dword [ebp - 0x458], 1
jmp 0x1000b4df
and dword [ebp - 0x458], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x458], eax
jle 0x1000b506
mov eax, 0xcf162c80
test eax, eax
jne 0x1000b506
and dword [ebp - 0x840], 0
jmp 0x1000b510
mov dword [ebp - 0x840], 1
cmp dword [ebp - 0x840], 0xfffffff8
je 0x1000b525
mov dword [ebp - 0x460], 1
jmp 0x1000b52c
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
neg eax
je 0x1000b542
mov dword [ebp - 0x848], 1
jmp 0x1000b549
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x848]
add eax, 0xa08d
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0x1e4]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0x1e4]
jl 0x1000b641
mov dword [ebp - 0xa0], 3
jmp 0x1000b58e
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1000b622
push 4
lea ecx, [ebp - 0xe68]
call fcn.10019e28
mov byte [ebp - 4], 3
mov dword [ebp - 0xbe4], 0xe7179999
mov dword [ebp - 0x204], 0
jmp 0x1000b5cf
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 4
jge 0x1000b5f1
push dword [ebp - 0x204]
lea ecx, [ebp - 0xe68]
call fcn.10019e95
mov dword [eax], 0x5b4d
jmp 0x1000b5c2
push 2
lea ecx, [ebp - 0xe68]
call fcn.10019e95
mov dword [eax], 1
mov dword [ebp - 0xbe4], 1
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xe68]
call fcn.10019e90
jmp 0x1000b581
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1000b63c
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x1000ba05
mov dword [ebp - 0x54], 0x686461d9
mov dword [ebp - 0x364], 0xfffffffa
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1e4], 0
je 0x1000b8b5
cmp dword [ebp - 0x54], 0
jb 0x1000b678
mov dword [ebp - 0x468], 1
jmp 0x1000b67f
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x468], eax
jg 0x1000b6a8
cmp dword [ebp - 0x150], 0
jne 0x1000b6a8
cmp dword [ebp - 0x150], 0
jne 0x1000b6a8
and dword [ebp - 0x850], 0
jmp 0x1000b6b2
mov dword [ebp - 0x850], 1
cmp dword [ebp - 0x850], 0xd293
jne 0x1000b6ca
mov dword [ebp - 0x470], 1
jmp 0x1000b6d1
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0x98a7b986
ja 0x1000b6e9
mov dword [ebp - 0xbec], 1
jmp 0x1000b6f0
and dword [ebp - 0xbec], 0
push 2
lea ecx, [ebp - 0xc5c]
call fcn.10019e95
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xff8], eax
push 2
lea ecx, [ebp - 0xc5c]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000b71f
cmp dword [ebp - 0x54], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1e4]
sub eax, 0x210ab9cb
jne 0x1000b742
cmp dword [ebp - 0x54], 0
jne 0x1000b742
and dword [ebp - 0xbf4], 0
jmp 0x1000b74c
mov dword [ebp - 0xbf4], 1
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1068], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x1e4], 0xd8b2d29c
ja 0x1000b774
mov dword [ebp - 0x858], 1
jmp 0x1000b77b
and dword [ebp - 0x858], 0
cmp dword [ebp - 0x858], 0x31b86626
jge 0x1000b793
mov dword [ebp - 0x478], 1
jmp 0x1000b79a
and dword [ebp - 0x478], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x478], eax
jge 0x1000b7ba
mov dword [ebp - 0x860], 1
jmp 0x1000b7c1
and dword [ebp - 0x860], 0
cmp dword [ebp - 0x860], 1
jb 0x1000b7d6
mov dword [ebp - 0x480], 1
jmp 0x1000b7dd
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x480], eax
jl 0x1000b7f7
mov dword [ebp - 0x868], 1
jmp 0x1000b7fe
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x868], eax
jl 0x1000b815
mov dword [ebp - 0x488], 1
jmp 0x1000b81c
and dword [ebp - 0x488], 0
imul eax, dword [ebp - 0x488], 0
test eax, eax
jne 0x1000b840
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x324], 0
jne 0x1000b840
and dword [ebp - 0x870], 0
jmp 0x1000b84a
mov dword [ebp - 0x870], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0x870], eax
jge 0x1000b86b
mov dword [ebp - 0x490], 1
jmp 0x1000b872
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x490], eax
jg 0x1000b889
mov dword [ebp - 0x878], 1
jmp 0x1000b890
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x878]
dec eax
je 0x1000b8b5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1e4], 0
je 0x1000b8b5
mov dword [ebp - 0x498], 1
jmp 0x1000b8bc
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0x33b75cab
je 0x1000b8d4
mov dword [ebp - 0x880], 1
jmp 0x1000b8db
and dword [ebp - 0x880], 0
cmp dword [ebp - 0x880], 0x6eff5237
jge 0x1000b8f3
mov dword [ebp - 0x4a0], 1
jmp 0x1000b8fa
and dword [ebp - 0x4a0], 0
push 2
lea ecx, [ebp - 0xc5c]
call fcn.10019e95
mov ecx, dword [ebp - 0x4a0]
imul ecx, dword [eax]
cmp ecx, 0x34b72860
jne 0x1000b924
mov dword [ebp - 0x888], 1
jmp 0x1000b92b
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x888]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
add eax, dword [ebp - 0x364]
je 0x1000b957
cmp dword [ebp - 0x54], 0
je 0x1000b957
mov dword [ebp - 0x890], 1
jmp 0x1000b95e
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x54], eax
jge 0x1000b975
mov dword [ebp - 0x4a8], 1
jmp 0x1000b97c
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4a8], eax
jle 0x1000b993
mov dword [ebp - 0xbfc], 1
jmp 0x1000b99a
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x890], eax
jg 0x1000b9ba
mov dword [ebp - 0x4b0], 1
jmp 0x1000b9c1
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x1e4]
cmp dword [ebp - 0x4b0], eax
jl 0x1000b9eb
mov eax, 0xa5e0
test eax, eax
je 0x1000b9eb
mov dword [ebp - 0x898], 1
jmp 0x1000b9f2
and dword [ebp - 0x898], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x898]
mov dword [ebp + eax - 0x324], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc5c]
call fcn.10019e90
push 3
lea ecx, [ebp - 0x2ec]
call fcn.10019e28
mov dword [ebp - 4], 4
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x274], 0
jmp 0x1000ba4b
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x1000ba67
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x1014], 2
jmp 0x1000ba3e
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x1000ba88
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1000baa8
push 1
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorDacl]
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x2ac], 0x2cb13638
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x4b8], 0xfffffffb
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x384], 0x70b168f9
mov dword [ebp - 0x8a8], 3
mov dword [ebp - 0xc04], 1
mov dword [ebp - 0xdfc], 0x831966c4
mov dword [ebp - 0xdf8], 0x831966c4
mov dword [ebp - 0xdf4], 0x831966c4
mov dword [ebp - 0xdf0], 0x831966c4
lea ecx, [ebp - 0x335]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xdec]
push eax
lea eax, [ebp - 0xdfc]
push eax
lea ecx, [ebp - 0x10d4]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe98]
call fcn.10019e6a
mov byte [ebp - 4], 5
mov dword [ebp - 0xc0c], 0xf4e5
cmp dword [ebp - 0x2ac], 0
jne 0x1000bc58
cmp dword [ebp - 0x2ac], 0
je 0x1000bb80
cmp dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x384]
cmp dword [ebp - 0x4b8], eax
jg 0x1000bba6
mov dword [ebp - 0x8a0], 1
jmp 0x1000bbad
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x2ac]
add eax, dword [ebp - 0x8a0]
cmp eax, dword [ebp - 0xac]
je 0x1000bbcd
mov dword [ebp - 0x4c0], 1
jmp 0x1000bbd4
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
neg eax
imul eax, dword [ebp - 0x384]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
add eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x20c]
jge 0x1000bc0f
cmp dword [ebp - 0xac], 0
jne 0x1000bc0f
and dword [ebp - 0x4c8], 0
jmp 0x1000bc19
mov dword [ebp - 0x4c8], 1
mov eax, dword [ebp - 0xc04]
cmp dword [ebp - 0x4c8], eax
jl 0x1000bc39
cmp dword [ebp - 0x384], 0
jne 0x1000bc39
and dword [ebp - 0x8b0], 0
jmp 0x1000bc43
mov dword [ebp - 0x8b0], 1
cmp dword [ebp - 0x8b0], 0x37d02268
jne 0x1000bc58
and dword [ebp - 0x4d0], 0
jmp 0x1000bc62
mov dword [ebp - 0x4d0], 1
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x4d0], eax
jne 0x1000bc7c
mov dword [ebp - 0x8b8], 1
jmp 0x1000bc83
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x8b8], eax
jle 0x1000bc9d
mov dword [ebp - 0x32c], 1
jmp 0x1000bca4
and dword [ebp - 0x32c], 0
push 2
lea ecx, [ebp - 0xe98]
call fcn.10019e95
mov ecx, dword [ebp - 0x32c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x32c]
je 0x1000bceb
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1000bce6
push 0x1392
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
jmp 0x1000bdb6
mov dword [ebp - 0xc14], 1
mov dword [ebp - 0xac], 0
jmp 0x1000bd0e
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 3
jl 0x1000bd9c
mov dword [ebp - 0x214], 0
jmp 0x1000bd34
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x1000bd50
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xd54], 0xd258d033
jmp 0x1000bd27
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp + eax - 0xd54], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd54]
mov dword [ebp - 0x4d8], eax
push 2
lea ecx, [ebp - 0xe98]
call fcn.10019e95
mov ecx, dword [ebp - 0x4d8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xc14], eax
jmp 0x1000bd01
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1000bdb6
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe98]
call fcn.10019e90
mov dword [ebp - 0x8d8], 0xab2bc8f9
mov dword [ebp - 0x36c], 1
mov dword [ebp - 0xc1c], 0x6579763
cmp dword [ebp - 0xc1c], 0
je 0x1000be15
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1000be13
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x1000be38
mov byte [ebp - 0xde], 0
movzx eax, byte [ebp - 0xde]
test eax, eax
je 0x1000be38
push 0xaf7
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0xf90], 0xf845
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000be77
push 0x690
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetMapMode]
mov dword [ebp - 0x27c], 0x1b
jmp 0x1000be90
mov eax, dword [ebp - 0x27c]
dec eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x14
jle 0x1000bef8
mov dword [ebp - 0x21c], 9
mov dword [ebp - 0x21c], 0
jmp 0x1000bebc
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xfffffff8
jg 0x1000bef6
mov byte [ebp - 0xdc], 0
movzx eax, byte [ebp - 0xdc]
test eax, eax
je 0x1000bef4
push 0
push 0x2157
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32A]
jmp 0x1000beaf
jmp 0x1000be83
mov dword [ebp - 0x98], 0
jmp 0x1000bf11
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1000bf33
push dword [ebp - 0x98]
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
mov dword [eax], 0xb3c692be
jmp 0x1000bf04
mov dword [ebp - 0x98], 0
jmp 0x1000bf4c
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1000bf68
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xf68], 0
jmp 0x1000bf3f
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
mov dword [ebp - 0x8c0], eax
mov eax, dword [ebp - 0x8c0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x8c0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp dword [eax], 0xffff
jb 0x1000c089
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp dword [eax], 1
jg 0x1000bfca
push 0xfffffffffffffffd
pop eax
test eax, eax
je 0x1000bfca
mov dword [ebp - 0x4e0], 1
jmp 0x1000bfd1
and dword [ebp - 0x4e0], 0
imul eax, dword [ebp - 0x4e0], 6
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
jne 0x1000c005
push 1
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000c005
mov dword [ebp - 0xc24], 1
jmp 0x1000c00c
and dword [ebp - 0xc24], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xf98], eax
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp dword [eax], 0
jae 0x1000c04f
mov dword [ebp - 0x8c8], 1
jmp 0x1000c056
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x8c8], eax
jg 0x1000c070
mov dword [ebp - 0x4e8], 1
jmp 0x1000c077
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0xffffffff
je 0x1000c089
and dword [ebp - 0x8d0], 0
jmp 0x1000c093
mov dword [ebp - 0x8d0], 1
push 1
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
mov ecx, dword [ebp - 0x8d0]
cmp ecx, dword [eax]
jne 0x1000c0b6
mov dword [ebp - 0x4f0], 1
jmp 0x1000c0bd
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x4f0]
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x8d8], eax
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1000c0f1
cmp dword [ebp - 0x36c], 0
je 0x1000c0f1
mov dword [ebp - 0x4f8], 1
jmp 0x1000c0f8
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x4f8], eax
jl 0x1000c112
mov dword [ebp - 0x8e0], 1
jmp 0x1000c119
and dword [ebp - 0x8e0], 0
mov esi, dword [ebp - 0x8e0]
inc esi
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp esi, dword [eax]
jge 0x1000c13d
mov dword [ebp - 0x500], 1
jmp 0x1000c144
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x500], eax
jl 0x1000c15e
mov dword [ebp - 0xc2c], 1
jmp 0x1000c165
and dword [ebp - 0xc2c], 0
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x2d4], eax
jge 0x1000c199
mov dword [ebp - 0x8e8], 1
jmp 0x1000c1a0
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x36c]
cmp dword [ebp - 0x8e8], eax
je 0x1000c1ba
mov dword [ebp - 0x508], 1
jmp 0x1000c1c1
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 0x1abe719c
jg 0x1000c1d9
mov dword [ebp - 0x8f0], 1
jmp 0x1000c1e0
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x140]
imul eax, dword [ebp - 0x8f0]
test eax, eax
jne 0x1000c20c
push 0
lea ecx, [ebp - 0x2ec]
call fcn.10019e95
cmp dword [eax], 0
jne 0x1000c20c
and dword [ebp - 0x510], 0
jmp 0x1000c216
mov dword [ebp - 0x510], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x510]
mov dword [ebp + eax - 0xf68], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ec]
call fcn.10019e90
mov dword [ebp - 0xd70], 0xb57fd546
mov dword [ebp - 0xd6c], 0xb57fd546
mov dword [ebp - 0xd68], 0xb57fd546
mov dword [ebp - 0xd64], 0xb57fd546
lea ecx, [ebp - 0x33d]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xd60]
push eax
lea eax, [ebp - 0xd70]
push eax
lea ecx, [ebp - 0x10c4]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x380]
call fcn.10019e6a
mov dword [ebp - 4], 6
mov dword [ebp - 0x50], 0x6d444182
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0xc34], 0xad7ba966
mov dword [ebp - 0x50], 3
jmp 0x1000c2c7
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x1000c4fe
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov eax, dword [eax]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jne 0x1000c48a
push 0
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1000c322
mov dword [ebp - 0x8f8], 1
jmp 0x1000c329
and dword [ebp - 0x8f8], 0
cmp dword [ebp - 0x8f8], 5
jae 0x1000c33e
mov dword [ebp - 0x518], 1
jmp 0x1000c345
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x518], eax
jg 0x1000c35f
mov dword [ebp - 0x900], 1
jmp 0x1000c366
and dword [ebp - 0x900], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov ecx, dword [ebp - 0x900]
cmp ecx, dword [eax]
jge 0x1000c38a
mov dword [ebp - 0x520], 1
jmp 0x1000c391
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
sub eax, 0x64c9
cmp dword [ebp - 0x224], eax
jne 0x1000c3b0
mov dword [ebp - 0x908], 1
jmp 0x1000c3b7
and dword [ebp - 0x908], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov ecx, dword [ebp - 0x908]
cmp ecx, dword [eax]
jle 0x1000c3db
mov dword [ebp - 0x528], 1
jmp 0x1000c3e2
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x528], eax
je 0x1000c3f9
mov dword [ebp - 0x910], 1
jmp 0x1000c400
and dword [ebp - 0x910], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x910]
jl 0x1000c424
mov dword [ebp - 0x530], 1
jmp 0x1000c42b
and dword [ebp - 0x530], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov ecx, dword [ebp - 0x530]
sub ecx, dword [eax]
je 0x1000c458
mov eax, 0xdfa01480
test eax, eax
je 0x1000c458
mov dword [ebp - 0x918], 1
jmp 0x1000c45f
and dword [ebp - 0x918], 0
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov ecx, dword [ebp - 0x918]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000c48a
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1000c48a
and dword [ebp - 0x538], 0
jmp 0x1000c494
mov dword [ebp - 0x538], 1
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
mov esi, dword [eax]
sub esi, dword [ebp - 0x538]
push dword [ebp - 0x50]
lea ecx, [ebp - 0x380]
call fcn.10019e95
cmp esi, dword [eax]
jle 0x1000c4c8
mov dword [ebp - 0x920], 1
jmp 0x1000c4cf
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x920], eax
jle 0x1000c4e6
mov dword [ebp - 0x540], 1
jmp 0x1000c4ed
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0xc34], eax
jmp 0x1000c2c0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.10019e90
mov dword [ebp - 0xd84], 0x51fe
mov dword [ebp - 0xd80], 0x51fe
mov dword [ebp - 0xd7c], 0x51fe
mov dword [ebp - 0xd78], 0x51fe
lea ecx, [ebp - 0x3a5]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xd74]
push eax
lea eax, [ebp - 0xd84]
push eax
lea ecx, [ebp - 0x10e4]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1ac]
call fcn.10019e6a
mov dword [ebp - 4], 7
mov dword [ebp - 0x568], 0x948708ef
mov dword [ebp - 0x550], 0xc8cac31e
mov dword [ebp - 0x558], 0x9f451dba
mov dword [ebp - 0xc44], 0x82169286
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1000c5ba
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000c6d5
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1000c60b
mov dword [ebp - 0x928], 1
jmp 0x1000c612
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
sub eax, 0xffff
je 0x1000c62f
xor eax, eax
je 0x1000c62f
mov dword [ebp - 0x548], 1
jmp 0x1000c636
and dword [ebp - 0x548], 0
push 2
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov ecx, dword [ebp - 0x548]
cmp ecx, dword [eax]
jne 0x1000c65d
xor eax, eax
je 0x1000c65d
mov dword [ebp - 0x930], 1
jmp 0x1000c664
and dword [ebp - 0x930], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0x550], eax
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000c692
xor eax, eax
je 0x1000c692
mov dword [ebp - 0xc3c], 1
jmp 0x1000c699
and dword [ebp - 0xc3c], 0
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
cmp dword [ebp - 0x550], 0
je 0x1000c6d5
mov dword [ebp - 0x938], 1
jmp 0x1000c6dc
and dword [ebp - 0x938], 0
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov ecx, dword [ebp - 0x938]
sub ecx, dword [eax]
mov dword [ebp - 0x558], ecx
mov esi, dword [ebp - 0x558]
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
cmp esi, dword [eax]
jl 0x1000c71a
mov dword [ebp - 0x940], 1
jmp 0x1000c721
and dword [ebp - 0x940], 0
push 3
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov ecx, dword [ebp - 0x940]
cmp ecx, dword [eax]
je 0x1000c744
mov dword [ebp - 0x560], 1
jmp 0x1000c74b
and dword [ebp - 0x560], 0
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov ecx, dword [ebp - 0x560]
cmp ecx, dword [eax]
jg 0x1000c76e
mov dword [ebp - 0x948], 1
jmp 0x1000c775
and dword [ebp - 0x948], 0
push 0
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x948]
jl 0x1000c798
mov dword [ebp - 0x950], 1
jmp 0x1000c79f
and dword [ebp - 0x950], 0
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10019e95
mov eax, dword [eax]
mov dword [ebp - 0x568], eax
imul eax, dword [ebp - 0x568], 0
cmp eax, dword [ebp - 0x950]
jge 0x1000c7cf
mov dword [ebp - 0x570], 1
jmp 0x1000c7d6
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xc44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ac]
call fcn.10019e90
mov dword [ebp - 0xd98], 0xb57fd546
mov dword [ebp - 0xd94], 0xb57fd546
mov dword [ebp - 0xd90], 0xb57fd546
mov dword [ebp - 0xd8c], 0xb57fd546
lea ecx, [ebp - 0x325]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xd88]
push eax
lea eax, [ebp - 0xd98]
push eax
lea ecx, [ebp - 0x10ec]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x390]
call fcn.10019e6a
mov dword [ebp - 4], 8
mov dword [ebp - 0x44], 0x6d444182
mov dword [ebp - 0x284], 0xffffffff
mov dword [ebp - 0xc4c], 0xad7ba966
mov dword [ebp - 0x44], 3
jmp 0x1000c880
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1000cab7
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov eax, dword [eax]
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jne 0x1000ca43
push 0
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1000c8db
mov dword [ebp - 0x958], 1
jmp 0x1000c8e2
and dword [ebp - 0x958], 0
cmp dword [ebp - 0x958], 5
jae 0x1000c8f7
mov dword [ebp - 0x578], 1
jmp 0x1000c8fe
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x578], eax
jg 0x1000c918
mov dword [ebp - 0x960], 1
jmp 0x1000c91f
and dword [ebp - 0x960], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov ecx, dword [ebp - 0x960]
cmp ecx, dword [eax]
jge 0x1000c943
mov dword [ebp - 0x580], 1
jmp 0x1000c94a
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
sub eax, 0x64c9
cmp dword [ebp - 0x284], eax
jne 0x1000c969
mov dword [ebp - 0x968], 1
jmp 0x1000c970
and dword [ebp - 0x968], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov ecx, dword [ebp - 0x968]
cmp ecx, dword [eax]
jle 0x1000c994
mov dword [ebp - 0x588], 1
jmp 0x1000c99b
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x588], eax
je 0x1000c9b2
mov dword [ebp - 0x970], 1
jmp 0x1000c9b9
and dword [ebp - 0x970], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x970]
jl 0x1000c9dd
mov dword [ebp - 0x590], 1
jmp 0x1000c9e4
and dword [ebp - 0x590], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov ecx, dword [ebp - 0x590]
sub ecx, dword [eax]
je 0x1000ca11
mov eax, 0xdfa01480
test eax, eax
je 0x1000ca11
mov dword [ebp - 0x978], 1
jmp 0x1000ca18
and dword [ebp - 0x978], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov ecx, dword [ebp - 0x978]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000ca43
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1000ca43
and dword [ebp - 0x598], 0
jmp 0x1000ca4d
mov dword [ebp - 0x598], 1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
mov esi, dword [eax]
sub esi, dword [ebp - 0x598]
push dword [ebp - 0x44]
lea ecx, [ebp - 0x390]
call fcn.10019e95
cmp esi, dword [eax]
jle 0x1000ca81
mov dword [ebp - 0x980], 1
jmp 0x1000ca88
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x980], eax
jle 0x1000ca9f
mov dword [ebp - 0x5a0], 1
jmp 0x1000caa6
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0xc4c], eax
jmp 0x1000c879
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.10019e90
mov dword [ebp - 0xc4], 0xf2c29a3d
mov dword [ebp - 0x334], 0xa41449c9
mov dword [ebp - 0xd08], 0xfff8
mov dword [ebp - 0x22c], 0
jmp 0x1000cafd
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1000cb19
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xb1c], 0x6af1124f
jmp 0x1000caf0
mov dword [ebp - 0xc4], 1
jmp 0x1000cb32
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jl 0x1000cb58
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb1c], 0x3f467215
mov dword [ebp - 0x334], 0x3f467215
jmp 0x1000cb25
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb1c]
mov dword [ebp - 0xfbc], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xfa8], eax
cmp dword [ebp - 0xc4], 0x22db785b
jg 0x1000cb8f
mov dword [ebp - 0x988], 1
jmp 0x1000cb96
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x334], eax
je 0x1000cbb0
mov dword [ebp - 0x5a8], 1
jmp 0x1000cbb7
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x988]
cmp eax, dword [ebp - 0x5a8]
je 0x1000cbd1
mov dword [ebp - 0x990], 1
jmp 0x1000cbd8
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x990]
sub eax, 0xe486
cmp eax, dword [ebp - 0xc4]
jl 0x1000cbf7
mov dword [ebp - 0x5b0], 1
jmp 0x1000cbfe
and dword [ebp - 0x5b0], 0
imul eax, dword [ebp - 0x5b0], 0xfffc
test eax, eax
jne 0x1000cc21
cmp dword [ebp - 0xd08], 0
je 0x1000cc21
mov dword [ebp - 0x998], 1
jmp 0x1000cc28
and dword [ebp - 0x998], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb1c]
cmp dword [ebp - 0x998], eax
jne 0x1000cc49
mov dword [ebp - 0x5b8], 1
jmp 0x1000cc50
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x334]
add eax, dword [ebp - 0x5b8]
je 0x1000cc6a
mov dword [ebp - 0x9a0], 1
jmp 0x1000cc71
and dword [ebp - 0x9a0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9a0]
mov dword [ebp + eax - 0xb1c], ecx
mov dword [ebp - 0xdc0], 0x51fe
mov dword [ebp - 0xdbc], 0x51fe
mov dword [ebp - 0xdb8], 0x51fe
mov dword [ebp - 0xdb4], 0x51fe
lea ecx, [ebp - 0x34d]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xdb0]
push eax
lea eax, [ebp - 0xdc0]
push eax
lea ecx, [ebp - 0x110c]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1c4]
call fcn.10019e6a
mov dword [ebp - 4], 9
mov dword [ebp - 0x9c8], 0x948708ef
mov dword [ebp - 0x9b0], 0xc8cac31e
mov dword [ebp - 0x9b8], 0x9f451dba
mov dword [ebp - 0xd18], 0x82169286
mov byte [ebp - 0xe0], 0
movzx eax, byte [ebp - 0xe0]
test eax, eax
je 0x1000cd31
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000ce4c
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1000cd82
mov dword [ebp - 0x5c0], 1
jmp 0x1000cd89
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
sub eax, 0xffff
je 0x1000cda6
xor eax, eax
je 0x1000cda6
mov dword [ebp - 0x9a8], 1
jmp 0x1000cdad
and dword [ebp - 0x9a8], 0
push 2
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov ecx, dword [ebp - 0x9a8]
cmp ecx, dword [eax]
jne 0x1000cdd4
xor eax, eax
je 0x1000cdd4
mov dword [ebp - 0x5c8], 1
jmp 0x1000cddb
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x9b0], eax
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000ce09
xor eax, eax
je 0x1000ce09
mov dword [ebp - 0xd10], 1
jmp 0x1000ce10
and dword [ebp - 0xd10], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
cmp dword [ebp - 0x9b0], 0
je 0x1000ce4c
mov dword [ebp - 0x5d0], 1
jmp 0x1000ce53
and dword [ebp - 0x5d0], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov ecx, dword [ebp - 0x5d0]
sub ecx, dword [eax]
mov dword [ebp - 0x9b8], ecx
mov esi, dword [ebp - 0x9b8]
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
cmp esi, dword [eax]
jl 0x1000ce91
mov dword [ebp - 0x5d8], 1
jmp 0x1000ce98
and dword [ebp - 0x5d8], 0
push 3
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov ecx, dword [ebp - 0x5d8]
cmp ecx, dword [eax]
je 0x1000cebb
mov dword [ebp - 0x9c0], 1
jmp 0x1000cec2
and dword [ebp - 0x9c0], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov ecx, dword [ebp - 0x9c0]
cmp ecx, dword [eax]
jg 0x1000cee5
mov dword [ebp - 0x5e0], 1
jmp 0x1000ceec
and dword [ebp - 0x5e0], 0
push 0
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5e0]
jl 0x1000cf0f
mov dword [ebp - 0x5e8], 1
jmp 0x1000cf16
and dword [ebp - 0x5e8], 0
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10019e95
mov eax, dword [eax]
mov dword [ebp - 0x9c8], eax
imul eax, dword [ebp - 0x9c8], 0
cmp eax, dword [ebp - 0x5e8]
jge 0x1000cf46
mov dword [ebp - 0x9d0], 1
jmp 0x1000cf4d
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
mov dword [ebp - 0xd18], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c4]
call fcn.10019e90
mov dword [ebp - 0xde8], 0xb57fd546
mov dword [ebp - 0xde4], 0xb57fd546
mov dword [ebp - 0xde0], 0xb57fd546
mov dword [ebp - 0xddc], 0xb57fd546
lea ecx, [ebp - 0x359]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xdd8]
push eax
lea eax, [ebp - 0xde8]
push eax
lea ecx, [ebp - 0x10dc]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3a0]
call fcn.10019e6a
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x4c], 0x6d444182
mov dword [ebp - 0x2b4], 0xffffffff
mov dword [ebp - 0xd20], 0xad7ba966
mov dword [ebp - 0x4c], 3
jmp 0x1000cff7
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1000d22e
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov eax, dword [eax]
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 0
jne 0x1000d1ba
push 0
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1000d052
mov dword [ebp - 0x5f0], 1
jmp 0x1000d059
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 5
jae 0x1000d06e
mov dword [ebp - 0x9d8], 1
jmp 0x1000d075
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x2b4]
cmp dword [ebp - 0x9d8], eax
jg 0x1000d08f
mov dword [ebp - 0x5f8], 1
jmp 0x1000d096
and dword [ebp - 0x5f8], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov ecx, dword [ebp - 0x5f8]
cmp ecx, dword [eax]
jge 0x1000d0ba
mov dword [ebp - 0x9e0], 1
jmp 0x1000d0c1
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
sub eax, 0x64c9
cmp dword [ebp - 0x2b4], eax
jne 0x1000d0e0
mov dword [ebp - 0x600], 1
jmp 0x1000d0e7
and dword [ebp - 0x600], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov ecx, dword [ebp - 0x600]
cmp ecx, dword [eax]
jle 0x1000d10b
mov dword [ebp - 0x9e8], 1
jmp 0x1000d112
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x9e8], eax
je 0x1000d129
mov dword [ebp - 0x608], 1
jmp 0x1000d130
and dword [ebp - 0x608], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x608]
jl 0x1000d154
mov dword [ebp - 0x9f0], 1
jmp 0x1000d15b
and dword [ebp - 0x9f0], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov ecx, dword [ebp - 0x9f0]
sub ecx, dword [eax]
je 0x1000d188
mov eax, 0xdfa01480
test eax, eax
je 0x1000d188
mov dword [ebp - 0x610], 1
jmp 0x1000d18f
and dword [ebp - 0x610], 0
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov ecx, dword [ebp - 0x610]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000d1ba
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1000d1ba
and dword [ebp - 0x9f8], 0
jmp 0x1000d1c4
mov dword [ebp - 0x9f8], 1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
mov esi, dword [eax]
sub esi, dword [ebp - 0x9f8]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x3a0]
call fcn.10019e95
cmp esi, dword [eax]
jle 0x1000d1f8
mov dword [ebp - 0x618], 1
jmp 0x1000d1ff
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x618], eax
jle 0x1000d216
mov dword [ebp - 0xa00], 1
jmp 0x1000d21d
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0xd20], eax
jmp 0x1000cff0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.10019e90
mov dword [ebp - 0x80], 0
jmp 0x1000d24d
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1000d263
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xd34], 0xe1757117
jmp 0x1000d246
mov dword [ebp - 0x80], 0
jmp 0x1000d273
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1000d289
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1080], 0
jmp 0x1000d26c
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd34], 0x1b
jmp 0x1000d2b4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd34]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd34], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd34], 1
jge 0x1000d305
mov dword [ebp - 0x170], 0xfffffffa
mov dword [ebp - 0x170], 0
jmp 0x1000d2e6
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jg 0x1000d303
mov eax, dword [ebp - 0x170]
cmp dword [ebp + eax*4 - 0x1080], 0
je 0x1000d301
jmp 0x1000d303
jmp 0x1000d2d9
jmp 0x1000d29b
mov dword [ebp - 0xb4], 0xf2c29a3d
mov dword [ebp - 0x3a4], 0xa41449c9
mov dword [ebp - 0xd28], 0xfff8
mov dword [ebp - 0x234], 0
jmp 0x1000d33c
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jge 0x1000d358
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xb24], 0x6af1124f
jmp 0x1000d32f
mov dword [ebp - 0xb4], 1
jmp 0x1000d371
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x1000d397
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xb24], 0x3f467215
mov dword [ebp - 0x3a4], 0x3f467215
jmp 0x1000d364
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0xfc4], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xfb8], eax
cmp dword [ebp - 0xb4], 0x22db785b
jg 0x1000d3ce
mov dword [ebp - 0x620], 1
jmp 0x1000d3d5
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x3a4], eax
je 0x1000d3ef
mov dword [ebp - 0xa08], 1
jmp 0x1000d3f6
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x620]
cmp eax, dword [ebp - 0xa08]
je 0x1000d410
mov dword [ebp - 0x628], 1
jmp 0x1000d417
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
sub eax, 0xe486
cmp eax, dword [ebp - 0xb4]
jl 0x1000d436
mov dword [ebp - 0xa10], 1
jmp 0x1000d43d
and dword [ebp - 0xa10], 0
imul eax, dword [ebp - 0xa10], 0xfffc
test eax, eax
jne 0x1000d460
cmp dword [ebp - 0xd28], 0
je 0x1000d460
mov dword [ebp - 0x630], 1
jmp 0x1000d467
and dword [ebp - 0x630], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
cmp dword [ebp - 0x630], eax
jne 0x1000d488
mov dword [ebp - 0xa18], 1
jmp 0x1000d48f
and dword [ebp - 0xa18], 0
mov eax, dword [ebp - 0x3a4]
add eax, dword [ebp - 0xa18]
je 0x1000d4a9
mov dword [ebp - 0x638], 1
jmp 0x1000d4b0
and dword [ebp - 0x638], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x638]
mov dword [ebp + eax - 0xb24], ecx
mov dword [ebp - 0xe10], 0x51fe
mov dword [ebp - 0xe0c], 0x51fe
mov dword [ebp - 0xe08], 0x51fe
mov dword [ebp - 0xe04], 0x51fe
lea ecx, [ebp - 0x311]
call fcn.1000a8f3
push eax
lea eax, [ebp - 0xe00]
push eax
lea eax, [ebp - 0xe10]
push eax
lea ecx, [ebp - 0x10cc]
call fcn.10019ea4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1b8]
call fcn.10019e6a
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x8ac], 0x948708ef
mov dword [ebp - 0x648], 0xc8cac31e
mov dword [ebp - 0x650], 0x9f451dba
mov dword [ebp - 0xd24], 0x82169286
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x1000d570
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000d68b
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov esi, eax
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1000d5c1
mov dword [ebp - 0xa20], 1
jmp 0x1000d5c8
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
sub eax, 0xffff
je 0x1000d5e5
xor eax, eax
je 0x1000d5e5
mov dword [ebp - 0x640], 1
jmp 0x1000d5ec
and dword [ebp - 0x640], 0
push 2
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov ecx, dword [ebp - 0x640]
cmp ecx, dword [eax]
jne 0x1000d613
xor eax, eax
je 0x1000d613
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0x648], eax
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
cmp dword [eax], 0
je 0x1000d648
and dword [ebp - 0xa30], 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov ecx, dword [ebp - 0xa30]
sub ecx, dword [eax]
mov dword [ebp - 0x650], ecx
mov esi, dword [ebp - 0x650]
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
cmp esi, dword [eax]
jl 0x1000d6d0
mov dword [ebp - 0xa38], 1
jmp 0x1000d6d7
and dword [ebp - 0xa38], 0
push 3
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov ecx, dword [ebp - 0xa38]
cmp ecx, dword [eax]
je 0x1000d6fa
mov dword [ebp - 0xa40], 1
jmp 0x1000d701
and dword [ebp - 0xa40], 0
push 1
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov ecx, dword [ebp - 0xa40]
cmp ecx, dword [eax]
jg 0x1000d724
mov dword [ebp - 0x65c], 1
jmp 0x1000d72b
and dword [ebp - 0x65c], 0
push 0
lea ecx, [ebp - 0x1b8]
call fcn.10019e95
mov eax, dword [eax]
cmp eax, dword [ebp - 0x65c]
jl 0x1000d74e