Function at 0x10008f79
Capabilities:
Check for time delay via queryperformancecounter
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007dd60
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x10e8
call fcn.10078e80
push esi
push edi
push 1
lea ecx, [ebp - 0xcec]
call fcn.10017d9e
and dword [ebp - 4], 0
mov dword [ebp - 0x158], 0x3606de71
mov dword [ebp - 0x1a0], 0
jmp 0x10008fd1
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10008ff0
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xcec]
call fcn.10017e3c
and dword [eax], 0
jmp 0x10008fc4
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000900f
push 0
push 0x762
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x158], 0
jmp 0x10009028
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x10009079
mov dword [ebp - 0x22c], 0x1738ab65
mov dword [ebp - 0x22c], 0
jmp 0x10009054
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jl 0x10009077
push dword [ebp - 0x158]
lea ecx, [ebp - 0xcec]
call fcn.10017e3c
cmp dword [eax], 0
je 0x10009075
jmp 0x10009077
jmp 0x10009047
jmp 0x1000901b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcec]
call fcn.10017e20
mov dword [ebp - 0xdc], 0xfffffff8
mov dword [ebp - 0x128], 3
mov dword [ebp - 0x8ac], 0x4ddbc370
mov dword [ebp - 0x3f8], 0xfffffffc
mov dword [ebp - 0xa24], 5
mov dword [ebp - 0x8b4], 2
push 1
lea ecx, [ebp - 0xaf4]
call fcn.10017d9e
mov dword [ebp - 4], 1
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0xa64], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x10009105
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x10009121
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x958], 0
jmp 0x100090f8
mov dword [ebp - 0x88], 0
jmp 0x1000913a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000915c
push dword [ebp - 0x88]
lea ecx, [ebp - 0xaf4]
call fcn.10017e3c
mov dword [eax], 5
jmp 0x1000912d
mov dword [ebp - 0xdc], 0xfffffffb
jmp 0x10009175
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x14
jne 0x10009941
mov dword [ebp - 0xa6c], 0x9a97
mov dword [ebp - 0xfb0], 0xffffffff
mov dword [ebp - 0xa34], 0xffffffff
mov dword [ebp - 0xa2c], 0
mov dword [ebp - 0x8c4], 0
mov dword [ebp - 0xa3c], 3
mov dword [ebp - 0xea8], 0x9c45c1d1
mov dword [ebp - 0xc58], 0xfffffffd
mov dword [ebp - 0xc54], 0xfffffffd
mov dword [ebp - 0xc50], 0xfffffffd
mov dword [ebp - 0xc4c], 0xfffffffd
lea ecx, [ebp - 0x2d5]
call fcn.10008dc3
push eax
lea eax, [ebp - 0xc48]
push eax
lea eax, [ebp - 0xc58]
push eax
lea ecx, [ebp - 0x106c]
call fcn.10017e4b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd40]
call fcn.10017dfa
mov byte [ebp - 4], 2
mov dword [ebp - 0xa4c], 0xdce9db3f
mov dword [ebp - 0x1a8], 0
jmp 0x1000924c
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 3
jge 0x10009268
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xbd0], 0xa5d8
jmp 0x1000923f
push 0
lea ecx, [ebp - 0xaf4]
call fcn.10017e3c
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax]
mov dword [ebp - 0x998], eax
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2f0]
mov dword [ecx], eax
cmp dword [ebp - 0x998], 0x3cb5af9f
je 0x100092b2
mov dword [ebp - 0x8d4], 1
jmp 0x100092b9
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x100c], eax
cmp dword [ebp - 0xa2c], 0xfffffff8
jge 0x100092da
mov dword [ebp - 0x47c], 1
jmp 0x100092e1
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0xa34]
cmp eax, 0xd338
jl 0x10009300
mov dword [ebp - 0x8bc], 1
jmp 0x10009307
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c4], eax
mov eax, dword [ebp - 0x8c4]
cmp dword [ebp - 0xdc], eax
jge 0x1000932d
mov dword [ebp - 0x8cc], 1
jmp 0x10009334
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x8cc]
add eax, 0x224
je 0x1000934f
cmp dword [ebp - 0xa3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd0]
sub eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x8d4], eax
jle 0x100095b8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbd0], 0
je 0x100095b8
mov dword [ebp - 0x8dc], 0x15ea3766
mov dword [ebp - 0xa54], 0xfffffffc
mov dword [ebp - 0x128], 1
jmp 0x100093af
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xfffffffe
je 0x100095b3
mov dword [ebp - 0xf4], 0xfffffffd
mov eax, dword [ebp - 0x8dc]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0xa44]
sub eax, dword [ebp - 0xf4]
jne 0x10009480
cmp dword [ebp - 0x8dc], 8
je 0x100093f9
mov dword [ebp - 0x8e4], 1
jmp 0x10009400
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0x7828e972
jle 0x10009425
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbd0], 0
jne 0x10009425
and dword [ebp - 0x8ec], 0
jmp 0x1000942f
mov dword [ebp - 0x8ec], 1
mov esi, dword [ebp - 0x8ec]
neg esi
push 3
lea ecx, [ebp - 0xd40]
call fcn.10017e3c
add esi, dword [eax]
cmp esi, dword [ebp - 0xa4c]
jg 0x1000945a
mov dword [ebp - 0x8f4], 1
jmp 0x10009461
and dword [ebp - 0x8f4], 0
cmp dword [ebp - 0x8f4], 0xe724
jge 0x10009479
mov dword [ebp - 0x85c], 1
jmp 0x10009480
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0xf4], eax
jle 0x1000949a
mov dword [ebp - 0x3ac], 1
jmp 0x100094a1
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
sub eax, 4
cmp eax, dword [ebp - 0xf4]
jne 0x100094be
mov dword [ebp - 0x864], 1
jmp 0x100094c5
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x864], eax
jge 0x100094df
mov dword [ebp - 0x3b4], 1
jmp 0x100094e6
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xf4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd0]
cmp dword [ebp - 0xf4], eax
jge 0x10009518
xor eax, eax
inc eax
je 0x10009518
mov dword [ebp - 0x86c], 1
jmp 0x1000951f
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0
jl 0x10009534
mov dword [ebp - 0x3bc], 1
jmp 0x1000953b
and dword [ebp - 0x3bc], 0
push 0
lea ecx, [ebp - 0xaf4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x3bc]
cmp ecx, dword [eax]
jle 0x1000955e
mov dword [ebp - 0x2ec], 1
jmp 0x10009565
and dword [ebp - 0x2ec], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp + eax - 0x958], ecx
push 1
lea ecx, [ebp - 0xd40]
call fcn.10017e3c
mov ecx, dword [ebp - 0x2ec]
cmp ecx, dword [eax]
jge 0x1000959b
mov dword [ebp - 0x874], 1
jmp 0x100095a2
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0xa54], eax
jmp 0x100093a2
jmp 0x1000992d
mov dword [ebp - 0x3c4], 0xfffffffb
push 1
lea ecx, [ebp - 0x390]
call fcn.10017d9e
mov byte [ebp - 4], 3
mov dword [ebp - 0x328], 0xaa3630dd
mov dword [ebp - 0x400], 6
mov dword [ebp - 0x230], 0
jmp 0x10009600
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jge 0x10009622
push dword [ebp - 0x230]
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov dword [eax], 0x43c7d870
jmp 0x100095f3
mov eax, 0x6136
test eax, eax
je 0x10009867
push 0
lea ecx, [ebp - 0xaf4]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x100097d6
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x3c4], eax
mov esi, dword [ebp - 0x3c4]
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
cmp esi, dword [eax]
jne 0x10009674
mov dword [ebp - 0x688], 1
jmp 0x1000967b
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0xdbc], eax
mov esi, dword [ebp - 0x328]
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x100096aa
mov dword [ebp - 0x87c], 1
jmp 0x100096b1
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x87c], eax
jg 0x100096cb
mov dword [ebp - 0x3d0], 1
jmp 0x100096d2
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x8b4]
cmp dword [ebp - 0x3d0], eax
jge 0x100096ec
mov dword [ebp - 0x680], 1
jmp 0x100096f3
and dword [ebp - 0x680], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov ecx, dword [ebp - 0x680]
cmp ecx, dword [eax]
je 0x10009716
mov dword [ebp - 0x3d8], 1
jmp 0x1000971d
and dword [ebp - 0x3d8], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [eax]
jge 0x10009740
mov dword [ebp - 0x7d8], 1
jmp 0x10009747
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x400]
add eax, dword [ebp - 0x7d8]
je 0x1000976a
cmp dword [ebp - 0x128], 0
je 0x1000976a
mov dword [ebp - 0x3e0], 1
jmp 0x10009771
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0xfc8a
jge 0x10009789
mov dword [ebp - 0xa5c], 1
jmp 0x10009790
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0xdc4], eax
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x688], eax
jge 0x100097b6
mov dword [ebp - 0x3e8], 1
jmp 0x100097bd
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
sub eax, dword [ebp - 0x8ac]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x958]
imul eax, dword [ebp - 0xa6c], 0
cmp eax, 0xfffffffa
jg 0x100097ee
mov dword [ebp - 0x3f0], 1
jmp 0x100097f5
and dword [ebp - 0x3f0], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov ecx, dword [ebp - 0x3f0]
cmp ecx, dword [eax]
je 0x10009818
mov dword [ebp - 0x690], 1
jmp 0x1000981f
and dword [ebp - 0x690], 0
imul eax, dword [ebp - 0x690], 0xfd3c
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x958]
jne 0x10009846
mov dword [ebp - 0x7e0], 1
jmp 0x1000984d
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0x7e0], eax
jge 0x10009867
mov dword [ebp - 0x698], 1
jmp 0x1000986e
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x698], eax
jg 0x10009888
mov dword [ebp - 0x408], 1
jmp 0x1000988f
and dword [ebp - 0x408], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov ecx, dword [ebp - 0x408]
cmp ecx, dword [eax]
je 0x100098bb
mov eax, 0xfffe
test eax, eax
je 0x100098bb
mov dword [ebp - 0x89c], 1
jmp 0x100098c2
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0x2d9fb0e7
je 0x100098da
mov dword [ebp - 0x410], 1
jmp 0x100098e1
and dword [ebp - 0x410], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x958]
cmp dword [ebp - 0x410], eax
jle 0x10009902
mov dword [ebp - 0x6a0], 1
jmp 0x10009909
and dword [ebp - 0x6a0], 0
push 0
lea ecx, [ebp - 0x390]
call fcn.10017e3c
mov ecx, dword [ebp - 0x6a0]
mov dword [eax], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x390]
call fcn.10017e20
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xd40]
call fcn.10017e20
jmp 0x10009168
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.10017e20
push 2
lea ecx, [ebp - 0xb04]
call fcn.10017d9e
mov dword [ebp - 4], 4
mov dword [ebp - 0x48], 0
jmp 0x10009974
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1000998a
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xdcc], 1
jmp 0x1000996d
mov dword [ebp - 0x48], 0
jmp 0x1000999a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x100099b3
push dword [ebp - 0x48]
lea ecx, [ebp - 0xb04]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x10009993
push 1
lea ecx, [ebp - 0xb04]
call fcn.10017e3c
and dword [eax], 0
jmp 0x100099e9
push 1
lea ecx, [ebp - 0xb04]
call fcn.10017e3c
mov dword [ebp - 0x418], eax
mov eax, dword [ebp - 0x418]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x418]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb04]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x10009a1e
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10009a1c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x100099c5
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x10009a3a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb04]
call fcn.10017e20
mov dword [ebp - 0x7e8], 0xcaa8e55a
mov dword [ebp - 0x68], 0
jmp 0x10009a63
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10009a79
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x904], 8
jmp 0x10009a5c
mov dword [ebp - 0x68], 0
jmp 0x10009a89
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10009a9f
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xeb4], 0xffffffff
jmp 0x10009a82
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x904], 0xffffffef
jmp 0x10009aca
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x904]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x904], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x904], 0xfffffff1
je 0x10009dae
mov dword [ebp - 0x108], 0xffffffff
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x1b0], 0
jmp 0x10009b0a
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x10009b26
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x10c4], 0x740826f3
jmp 0x10009afd
mov dword [ebp - 0x108], 0
jmp 0x10009b3f
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xf
jg 0x10009da9
mov dword [ebp - 0x32c], 0
mov dword [ebp - 0xa9c], 0
mov dword [ebp - 0x2f4], 0xe31bb000
mov dword [ebp - 0xa7c], 0x1edd1edb
mov dword [ebp - 0xdd4], 6
mov dword [ebp - 0x270], 0
jmp 0x10009b97
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x10009bb3
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x10e8], 0xffffffff
jmp 0x10009b8a
cmp dword [ebp - 0x32c], 0
je 0x10009caa
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x904], 0
jne 0x10009bed
mov eax, dword [ebp - 0x32c]
mov dword [ebp - 0x7e8], eax
cmp dword [ebp - 0x7e8], 0
jne 0x10009bed
and dword [ebp - 0x428], 0
jmp 0x10009bf7
mov dword [ebp - 0x428], 1
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
mov eax, 0xdfee
test eax, eax
je 0x10009c20
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x10009c20
mov dword [ebp - 0x420], 1
jmp 0x10009c27
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xb9459240
jbe 0x10009c3f
mov dword [ebp - 0x6a8], 1
jmp 0x10009c46
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
sub eax, 0xa
imul eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
imul eax, dword [ebp - 0x428]
imul eax, dword [ebp - 0x32c]
cmp eax, 0xfffb
jae 0x10009c83
mov dword [ebp - 0x8d0], 1
jmp 0x10009c8a
and dword [ebp - 0x8d0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x904]
cmp eax, dword [ebp - 0x8d0]
jl 0x10009caa
mov dword [ebp - 0xa74], 1
jmp 0x10009cb1
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xde4], eax
cmp dword [ebp - 0xa7c], 0
je 0x10009ce4
mov eax, 0x6511
test eax, eax
jne 0x10009ce4
and dword [ebp - 0x430], 0
jmp 0x10009cee
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0xa9c]
cmp dword [ebp - 0x430], eax
jl 0x10009d08
mov dword [ebp - 0x6b0], 1
jmp 0x10009d0f
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 0x71c2
jge 0x10009d27
mov dword [ebp - 0x438], 1
jmp 0x10009d2e
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x438]
add ecx, dword [ebp + eax - 0x904]
mov dword [ebp - 0x7f0], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp + eax - 0x10c4], ecx
mov eax, dword [ebp - 0x7f0]
shl eax, 2
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x904]
je 0x10009d7c
mov dword [ebp - 0x440], 1
jmp 0x10009d83
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0xeb4], ecx
cmp dword [ebp - 0x2fc], 0
je 0x10009da4
jmp 0x10009b32
jmp 0x10009b32
jmp 0x10009ab1
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x10009dde
push 0x4c6
push 0x2468
push 0
push 0
push 0x22b7
push 0x23df
call dword [sym.imp.USER32.dll_ToUnicode]
mov dword [ebp - 0x38], 0x13dd33a4
push 1
lea ecx, [ebp - 0x914]
call fcn.10017d9e
mov dword [ebp - 4], 5
mov dword [ebp - 0x470], 0x2674
mov dword [ebp - 0x490], 0x9ff40b36
push 2
lea ecx, [ebp - 0xd1c]
call fcn.10017d9e
mov byte [ebp - 4], 6
mov dword [ebp - 0x50], 0
jmp 0x10009e2e
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10009e4a
push dword [ebp - 0x50]
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov dword [eax], 0xfffffffe
jmp 0x10009e27
mov dword [ebp - 0x50], 0
jmp 0x10009e5a
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10009e76
push dword [ebp - 0x50]
lea ecx, [ebp - 0xd1c]
call fcn.10017e3c
mov dword [eax], 0xfffffff8
jmp 0x10009e53
mov dword [ebp - 0x38], 0
jmp 0x10009e86
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffef
jl 0x10009ed8
mov dword [ebp - 0x6b8], 0x1d89
mov dword [ebp - 0xaa4], 0x5efa20bd
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x6b8]
test eax, eax
je 0x10009ec3
cmp dword [ebp - 0x6b8], 0
je 0x10009ec3
mov dword [ebp - 0x448], 1
jmp 0x10009eca
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0xaa4], eax
jmp 0x10009e7f
mov dword [ebp - 0x38], 0xd
jmp 0x10009ee8
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff9
je 0x1000a2f8
mov dword [ebp - 0x1c], 0x51d52aa0
mov dword [ebp - 0x238], 0xffffffff
mov eax, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x1c], 0xca7
add eax, ecx
cmp eax, 8
jbe 0x10009f20
mov dword [ebp - 0x898], 1
jmp 0x10009f27
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x898]
test eax, eax
jne 0x10009f44
cmp dword [ebp - 0x1c], 0
jne 0x10009f44
and dword [ebp - 0x450], 0
jmp 0x10009f4e
mov dword [ebp - 0x450], 1
mov eax, 0xfff7
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x450]
test eax, eax
je 0x1000a097
mov dword [ebp - 0x6c0], 0xd29ed7d4
mov dword [ebp - 0x1b8], 0
jmp 0x10009f88
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x10009fa4
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xf3c], 0x451d77f1
jmp 0x10009f7b
mov dword [ebp - 0x1c], 0
jmp 0x10009fb4
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10009fe5
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x10009fe3
push 0x1bb6
push 0
push 0x149a
push 0x26e9
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10009fad
mov dword [ebp - 0x1c], 0
jmp 0x10009ff5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1000a092
mov dword [ebp - 0xaac], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x914]
call fcn.10017e3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf3c]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x1c], eax
jne 0x1000a041
mov dword [ebp - 0x458], 1
jmp 0x1000a048
and dword [ebp - 0x458], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf3c]
cmp eax, dword [ebp - 0x458]
jl 0x1000a069
mov dword [ebp - 0x7f8], 1
jmp 0x1000a070
and dword [ebp - 0x7f8], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov eax, dword [eax]
imul eax, dword [ebp - 0x7f8]
mov dword [ebp - 0xaac], eax
jmp 0x10009fee
jmp 0x1000a2f3
mov dword [ebp - 0x344], 0xffffffff
mov dword [ebp - 0x6d8], 0x8636eebc
mov dword [ebp - 0x468], 0xefce06df
mov dword [ebp - 0x6e0], 0xbbb785aa
mov dword [ebp - 0xabc], 0xfffffffe
mov esi, dword [ebp - 0x344]
push 0
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov ecx, dword [ebp - 0x344]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x1000a0f5
mov dword [ebp - 0x460], 1
jmp 0x1000a0fc
and dword [ebp - 0x460], 0
push 0
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov ecx, dword [ebp - 0x460]
cmp ecx, dword [eax]
je 0x1000a11f
mov dword [ebp - 0xab4], 1
jmp 0x1000a126
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xdec], eax
mov eax, 0xffff
test eax, eax
je 0x1000a14d
cmp dword [ebp - 0x344], 0
je 0x1000a14d
mov dword [ebp - 0x6c8], 1
jmp 0x1000a154
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
sub eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
sub eax, 0xa
je 0x1000a182
xor eax, eax
inc eax
je 0x1000a182
mov dword [ebp - 0x8f0], 1
jmp 0x1000a189
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x470], 0
jge 0x1000a1aa
mov dword [ebp - 0x8a0], 1
jmp 0x1000a1b1
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0xdf4], eax
mov eax, dword [ebp - 0x238]
dec eax
cmp eax, dword [ebp - 0x470]
jge 0x1000a1d8
mov dword [ebp - 0x6d0], 1
jmp 0x1000a1df
and dword [ebp - 0x6d0], 0
push 0
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov ecx, dword [ebp - 0x6d0]
cmp ecx, dword [eax]
jg 0x1000a202
mov dword [ebp - 0x478], 1
jmp 0x1000a209
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0xfff6
je 0x1000a221
mov dword [ebp - 0x800], 1
jmp 0x1000a228
and dword [ebp - 0x800], 0
push 0
lea ecx, [ebp - 0x914]
call fcn.10017e3c
mov ecx, dword [ebp - 0x800]
cmp ecx, dword [eax]
jge 0x1000a24b
mov dword [ebp - 0x480], 1
jmp 0x1000a252
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0
jne 0x1000a26d
cmp dword [ebp - 0x238], 0
jne 0x1000a26d
and dword [ebp - 0x488], 0
jmp 0x1000a277
mov dword [ebp - 0x488], 1
mov eax, dword [ebp - 0x6d8]
cmp dword [ebp - 0x488], eax
jge 0x1000a291
mov dword [ebp - 0x498], 1
jmp 0x1000a298
and dword [ebp - 0x498], 0
imul eax, dword [ebp - 0x8a0], 0xfffffffd
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0x6e0]
cmp eax, dword [ebp - 0x498]
jne 0x1000a2cb
mov dword [ebp - 0x304], 1
jmp 0x1000a2d2
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0xd1c]
call fcn.10017e3c
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xabc], eax
jmp 0x10009ee1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xd1c]
call fcn.10017e20
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x914]
call fcn.10017e20
mov dword [ebp - 0x130], 0xfffffff6
mov dword [ebp - 0x808], 0x23b6182e
mov dword [ebp - 0x180], 0x516a205b
mov dword [ebp - 0x8d8], 5
mov dword [ebp - 0xacc], 0xfffffffc
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x808], eax
cmp dword [ebp - 0x808], 0
jne 0x1000a369
mov dword [ebp - 0x4b0], 1
jmp 0x1000a370
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x130], 1
jne 0x1000a385
mov dword [ebp - 0x4a0], 1
jmp 0x1000a38c
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xdfc], eax
cmp dword [ebp - 0x180], 0x9884
jg 0x1000a3bc
mov dword [ebp - 0x6e8], 1
jmp 0x1000a3c3
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 0xfffffff9
jge 0x1000a3d8
mov dword [ebp - 0x4a8], 1
jmp 0x1000a3df
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
sub eax, 0x6b17
jne 0x1000a40a
cmp dword [ebp - 0x130], 0
jne 0x1000a40a
and dword [ebp - 0xac4], 0
jmp 0x1000a414
mov dword [ebp - 0xac4], 1
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xe04], eax
mov dword [ebp - 0x8d8], 0x8f98
mov eax, dword [ebp - 0x8d8]
cmp dword [ebp - 0x4b0], eax
jge 0x1000a444
mov dword [ebp - 0x6f0], 1
jmp 0x1000a44b
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x6f0], eax
jl 0x1000a465
mov dword [ebp - 0x4b8], 1
jmp 0x1000a46c
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0xacc], eax
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1000a4a6
push 0x231c
push 0xb53
push 0x18f1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [ebp - 0x2c], 6
push 3
lea ecx, [ebp - 0x2c4]
call fcn.10017d9e
mov dword [ebp - 4], 7
mov dword [ebp - 0xa0], 0xecf04b06
mov dword [ebp - 0x4e0], 5
mov dword [ebp - 0x4e8], 0
mov dword [ebp - 0x1c0], 0
jmp 0x1000a4f8
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x1000a51a
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x1000a4eb
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1000a53c
push 0x16cf
push 0x11b0
call dword [sym.imp.USER32.dll_SetCaretPos]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x810], eax
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x810]
mov dword [eax], ecx
cmp dword [ebp - 0x810], 0
je 0x1000a6cc
mov dword [ebp - 0x160], 6
mov dword [ebp - 0x4c8], 6
mov dword [ebp - 0xae4], 0xb0fe2cf4
mov dword [ebp - 0x2c], 9
jmp 0x1000a595
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1c
jne 0x1000a5d4
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1000a5b5
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [ebp - 0xe7], 0
movzx eax, byte [ebp - 0xe7]
test eax, eax
je 0x1000a5d2
push 0x1e70
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x1000a58e
cmp dword [ebp - 0x160], 9
jb 0x1000a5e9
mov dword [ebp - 0xad4], 1
jmp 0x1000a5f0
and dword [ebp - 0xad4], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xe0c], eax
mov esi, dword [ebp - 0x160]
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
add esi, dword [eax]
cmp esi, dword [ebp - 0x160]
jle 0x1000a625
mov dword [ebp - 0x4c0], 1
jmp 0x1000a62c
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x4c0], eax
jle 0x1000a646
mov dword [ebp - 0x6f8], 1
jmp 0x1000a64d
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xa0], eax
mov esi, dword [ebp - 0xa0]
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp dword [eax], esi
jle 0x1000a677
cmp dword [ebp - 0x4c8], 0
push 0
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
imul esi, dword [eax], 0xffff
push 0
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x1000a6a7
mov dword [ebp - 0xadc], 1
jmp 0x1000a6ae
and dword [ebp - 0xadc], 0
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0xae4], eax
jmp 0x1000a9dc
mov dword [ebp - 0x290], 0xc3ae5071
mov dword [ebp - 0x138], 0xfffffff7
mov dword [ebp - 0x350], 0xfffffffe
mov dword [ebp - 0x9b0], 0
mov dword [ebp - 0xa0], 0xfffffffa
jmp 0x1000a70d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jle 0x1000a895
mov dword [ebp - 0x334], 2
mov dword [ebp - 0x2c], 0x17
jmp 0x1000a734
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x2a
jl 0x1000a890
mov dword [ebp - 0x30c], 0xffffffff
mov dword [ebp - 0x8a8], 0xffffffff
cmp dword [ebp - 0x334], 0x16de
jg 0x1000a842
mov eax, dword [ebp - 0x8a8]
cmp dword [ebp - 0x334], eax
jl 0x1000a77c
mov dword [ebp - 0xa1c], 1
jmp 0x1000a783
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0xe14], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0xe1c], eax
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0x9a8]
jg 0x1000a7da
mov dword [ebp - 0x4d0], 1
jmp 0x1000a7e1
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x290]
cmp eax, dword [ebp - 0x4d0]
jl 0x1000a7fb
mov dword [ebp - 0x700], 1
jmp 0x1000a802
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xe24], eax
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x1000a842
and dword [ebp - 0x4d8], 0
jmp 0x1000a84c
mov dword [ebp - 0x4d8], 1
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [eax]
jle 0x1000a86f
mov dword [ebp - 0x818], 1
jmp 0x1000a876
and dword [ebp - 0x818], 0
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x818]
mov dword [eax], ecx
jmp 0x1000a72d
jmp 0x1000a700
mov dword [ebp - 0x4e0], 0x7ee8c4b0
cmp dword [ebp - 0x4e0], 0
je 0x1000a8bd
cmp dword [ebp - 0x350], 0
je 0x1000a8bd
mov dword [ebp - 0x708], 1
jmp 0x1000a8c4
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x708]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4e8], eax
je 0x1000a8f1
mov eax, 0xb447
test eax, eax
jne 0x1000a8f1
and dword [ebp - 0x908], 0
jmp 0x1000a8fb
mov dword [ebp - 0x908], 1
mov eax, dword [ebp - 0x350]
imul eax, dword [ebp - 0x908]
cmp dword [ebp - 0x290], eax
jge 0x1000a91c
mov dword [ebp - 0x4f0], 1
jmp 0x1000a923
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4f0], eax
jne 0x1000a940
mov eax, 0xfff6
test eax, eax
jne 0x1000a940
and dword [ebp - 0x4f8], 0
jmp 0x1000a94a
mov dword [ebp - 0x4f8], 1
mov dword [ebp - 0x138], 0xfffffff9
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x710], eax
push 2
lea ecx, [ebp - 0x2c4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x710]
mov dword [eax], ecx
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x4f8]
jne 0x1000a99b
mov dword [ebp - 0x820], 1
jmp 0x1000a9a2
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x820], eax
jge 0x1000a9c5
cmp dword [ebp - 0x138], 0
je 0x1000a9c5
mov dword [ebp - 0xa94], 1
jmp 0x1000a9cc
and dword [ebp - 0xa94], 0
imul eax, dword [ebp - 0x290], 0x85aa
mov dword [ebp - 0x9b0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c4]
call fcn.10017e20
push 2
lea ecx, [ebp - 0xb24]
call fcn.10017d9e
mov dword [ebp - 4], 8
mov dword [ebp - 0x178], 0x951ad386
mov dword [ebp - 0xd90], 0xffffffff
mov dword [ebp - 0xd8c], 0xffffffff
mov dword [ebp - 0xd88], 0xffffffff
mov dword [ebp - 0xd84], 0xffffffff
mov dword [ebp - 0x314], 0x8217
mov dword [ebp - 0xe2c], 0
mov dword [ebp - 0x1c8], 0
jmp 0x1000aa5e
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jge 0x1000aa7a
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x988], 0xffff
jmp 0x1000aa51
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x988]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x178], 0
jmp 0x1000aaa5
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
jg 0x1000add4
mov dword [ebp - 0x24], 0xfffffffc
mov dword [ebp - 0x530], 0xfffffffe
mov dword [ebp - 0x24], 2
jmp 0x1000aad3
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x1000adcf
push 2
lea ecx, [ebp - 0x36c]
call fcn.10017d9e
mov byte [ebp - 4], 9
mov dword [ebp - 0x240], 0
jmp 0x1000ab07
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1000ab29
push dword [ebp - 0x240]
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x1000aafa
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd90], 1
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000ab6f
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x500]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
cmp dword [eax], 2
jg 0x1000adbb
mov dword [ebp - 0x828], 1
mov dword [ebp - 0x528], 0xffffffff
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x988]
mov dword [ebp - 0xe34], eax
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
mov esi, eax
mov edi, dword [ebp - 0x24]
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
imul edi, dword [eax]
imul edi, dword [esi]
cmp edi, dword [ebp - 0x314]
je 0x1000abe2
mov dword [ebp - 0x718], 1
jmp 0x1000abe9
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x988]
cmp dword [ebp - 0x718], eax
jg 0x1000ac07
mov dword [ebp - 0x508], 1
jmp 0x1000ac0e
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
add eax, 0x1780eec2
je 0x1000ac30
mov eax, 0x3e5ec352
test eax, eax
je 0x1000ac30
mov dword [ebp - 0x8b0], 1
jmp 0x1000ac37
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x8b0], eax
jg 0x1000ac4e
mov dword [ebp - 0x510], 1
jmp 0x1000ac55
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xfafb
jle 0x1000ac6d
mov dword [ebp - 0x720], 1
jmp 0x1000ac74
and dword [ebp - 0x720], 0
cmp dword [ebp - 0x720], 0xfffffffb
je 0x1000ac89
mov dword [ebp - 0xa88], 1
jmp 0x1000ac90
and dword [ebp - 0xa88], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xe3c], eax
imul eax, dword [ebp - 0x24], 0xbc69
imul eax, dword [ebp - 0x314]
cmp eax, dword [ebp - 0x828]
jle 0x1000acbb
mov dword [ebp - 0x518], 1
jmp 0x1000acc2
and dword [ebp - 0x518], 0
mov esi, dword [ebp - 0x24]
add esi, dword [ebp - 0x518]
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x1000ad4e
mov eax, dword [ebp - 0x828]
cmp dword [ebp - 0x314], eax
jne 0x1000acf6
mov dword [ebp - 0x520], 1
jmp 0x1000acfd
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x988]
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x728]
mov dword [ebp + eax*4 - 0x988], ecx
mov eax, dword [ebp - 0x520]
sub eax, dword [ebp - 0x728]
mov dword [ebp - 0x530], eax
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1000ad4c
push 0xd28
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x1000adb6
mov dword [ebp - 0x9b8], 0xfffffff7
mov esi, dword [ebp - 0x9b8]
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x988]
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
imul esi, dword [eax]
mov dword [ebp - 0x528], esi
mov esi, dword [ebp - 0x528]
push 1
lea ecx, [ebp - 0x36c]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x1000ada3
mov dword [ebp - 0x8e0], 1
jmp 0x1000adaa
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x8e0]
mov dword [ebp - 0x530], eax
jmp 0x1000ab4b
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x36c]
call fcn.10017e20
jmp 0x1000aacc
jmp 0x1000aa98
mov dword [ebp - 0x6c], 0
jmp 0x1000ade4
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1000adfa
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xbe8], 0xe1757117
jmp 0x1000addd
mov dword [ebp - 0x6c], 0
jmp 0x1000ae0a
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1000ae20
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xae8], 1
jmp 0x1000ae03
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbe8], 0xfffffffb
jmp 0x1000ae4b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbe8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbe8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbe8], 0xffffffed
jge 0x1000ae9c
mov dword [ebp - 0x140], 0xd37ad43
mov dword [ebp - 0x140], 0
jmp 0x1000ae7d
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0
jg 0x1000ae9a
mov eax, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0xae8], 0
je 0x1000ae98
jmp 0x1000ae9a
jmp 0x1000ae70
jmp 0x1000ae32
mov dword [ebp - 0x278], 0x2cb51dba
mov dword [ebp - 0xe44], 0xffffffff
mov dword [ebp - 0x1d0], 0
jmp 0x1000aec9
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 4
jge 0x1000aee5
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xd70], 0xfff9
jmp 0x1000aebc
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd70]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd70], eax
mov dword [ebp - 0x278], 0
jmp 0x1000af17
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jg 0x1000b044
mov dword [ebp - 0x1d8], 0
jmp 0x1000af3d
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1000af59
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0x148], 0xfffffff9
jmp 0x1000af30
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x148], 3
jmp 0x1000af87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x148], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x148], 0
jl 0x1000b03f
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x168], 3
jmp 0x1000afbe
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x1000b03a
mov dword [ebp - 0x248], 0x50315362
mov dword [ebp - 0x248], 3
jmp 0x1000afea
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jl 0x1000b014
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x1000b012
push 0x1724
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x1000afdd
mov eax, dword [ebp - 0x168]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x148]
mov eax, dword [ebp + eax*4 - 0xd70]
mov dword [ebp + ecx*4 - 0xd70], eax
jmp 0x1000afb1
jmp 0x1000af6c
jmp 0x1000af0a
mov dword [ebp - 0x58], 0
jmp 0x1000b054
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000b06a
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xe4c], 1
jmp 0x1000b04d
mov dword [ebp - 0x150], 0xfffffff6
mov dword [ebp - 0x730], 0x23b6182e
mov dword [ebp - 0x188], 0x516a205b
mov dword [ebp - 0x738], 5
mov dword [ebp - 0xa90], 0xfffffffc
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x730], eax
cmp dword [ebp - 0x730], 0
jne 0x1000b0bd
mov dword [ebp - 0x548], 1
jmp 0x1000b0c4
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x150], 1
jne 0x1000b0d9
mov dword [ebp - 0x538], 1
jmp 0x1000b0e0
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0x188], 0x9884
jg 0x1000b110
mov dword [ebp - 0x830], 1
jmp 0x1000b117
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0xfffffff9
jge 0x1000b12c
mov dword [ebp - 0x540], 1
jmp 0x1000b133
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
sub eax, 0x6b17
jne 0x1000b15e
cmp dword [ebp - 0x150], 0
jne 0x1000b15e
and dword [ebp - 0x9c0], 0
jmp 0x1000b168
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xe5c], eax
mov dword [ebp - 0x738], 0x8f98
mov eax, dword [ebp - 0x738]
cmp dword [ebp - 0x548], eax
jge 0x1000b198
mov dword [ebp - 0x8b8], 1
jmp 0x1000b19f
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x8b8], eax
jl 0x1000b1b9
mov dword [ebp - 0x550], 1
jmp 0x1000b1c0
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0xa90], eax
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x1000b1fa
push 0x231c
push 0xb53
push 0x18f1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckRadioButton]
mov dword [ebp - 0x58], 0
jmp 0x1000b20a
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1000b223
push dword [ebp - 0x58]
lea ecx, [ebp - 0xb24]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x1000b203
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x100], 0xe9934b0b
mov dword [ebp - 0xca8], 0xb17b722b
mov dword [ebp - 0xca4], 0xb17b722b
mov dword [ebp - 0xca0], 0xb17b722b
mov dword [ebp - 0xc9c], 0xb17b722b
lea ecx, [ebp - 0x351]
call fcn.10008dc3
push eax
lea eax, [ebp - 0xc98]
push eax
lea eax, [ebp - 0xca8]
push eax
lea ecx, [ebp - 0x105c]
call fcn.10017e4b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf4c]
call fcn.10017dfa
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x9c8], 0xff18c9a0
cmp dword [ebp - 0x74], 0
je 0x1000b452
push 4
lea ecx, [ebp - 0x384]
call fcn.10017d9e
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1e0], 0
jmp 0x1000b2d3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x1000b2f5
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x384]
call fcn.10017e3c
mov dword [eax], 0xfffffffc
jmp 0x1000b2c6
push 0
lea ecx, [ebp - 0x384]
call fcn.10017e3c
and dword [eax], 0
mov dword [ebp - 0x74], 0
jmp 0x1000b315
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jg 0x1000b43e
mov dword [ebp - 0x748], 0xfffffffb
push dword [ebp - 0x74]
lea ecx, [ebp - 0x384]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x1000b382
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xe64], eax
mov dword [ebp - 0x100], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x740], eax
push 1
lea ecx, [ebp - 0xf4c]
call fcn.10017e3c
mov ecx, dword [ebp - 0x740]
mov dword [eax], ecx
cmp dword [ebp - 0x740], 0
jne 0x1000b382
and dword [ebp - 0x558], 0
jmp 0x1000b38c
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x558], eax
jle 0x1000b3b5
push 0
lea ecx, [ebp - 0x384]
call fcn.10017e3c
cmp dword [eax], 0
je 0x1000b3b5
mov dword [ebp - 0x838], 1
jmp 0x1000b3bc
and dword [ebp - 0x838], 0
cmp dword [ebp - 0x838], 0xbdd7
je 0x1000b3e3
push 0
lea ecx, [ebp - 0x384]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x1000b3e3
and dword [ebp - 0x560], 0
jmp 0x1000b3ed
mov dword [ebp - 0x560], 1
push dword [ebp - 0x74]
lea ecx, [ebp - 0x384]
call fcn.10017e3c
push 0
lea ecx, [ebp - 0x384]
call fcn.10017e3c
mov ecx, dword [ebp - 0x560]
add ecx, dword [eax]
mov dword [ebp - 0x748], ecx
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0xe6c], eax
push 0
lea ecx, [ebp - 0x384]
call fcn.10017e3c
mov dword [ebp - 0x9c8], 0xffffffff
jmp 0x1000b30e
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x384]
call fcn.10017e20
jmp 0x1000b4d2
mov dword [ebp - 0xb48], 0xe3bf118c
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000b47e
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0x100], 0
jmp 0x1000b497
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x17
jne 0x1000b4d2
mov dword [ebp - 0x9d0], 0x1966
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x1000b4c4
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x9d0], eax
jmp 0x1000b48a
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xf4c]
call fcn.10017e20
push 1
lea ecx, [ebp - 0xb24]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000b517
push 1
lea ecx, [ebp - 0xb24]
call fcn.10017e3c
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x568]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb24]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x1000b734
push 1
lea ecx, [ebp - 0xd04]
call fcn.10017d9e
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x170], 0x3606de71
mov dword [ebp - 0x2a0], 0
jmp 0x1000b561
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x1000b580
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0xd04]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000b554
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000b59f
push 0
push 0x762
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x170], 0
jmp 0x1000b5b8
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0
jl 0x1000b609
mov dword [ebp - 0x1e8], 0x1738ab65
mov dword [ebp - 0x1e8], 0
jmp 0x1000b5e4
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jl 0x1000b607
push dword [ebp - 0x170]
lea ecx, [ebp - 0xd04]
call fcn.10017e3c
cmp dword [eax], 0
je 0x1000b605
jmp 0x1000b607
jmp 0x1000b5d7
jmp 0x1000b5ab
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd04]
call fcn.10017e20
mov byte [ebp - 0xca], 0
push 2
lea ecx, [ebp - 0xb14]
call fcn.10017d9e
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x60], 0
jmp 0x1000b640
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1000b656
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xe74], 1
jmp 0x1000b639
mov dword [ebp - 0x60], 0
jmp 0x1000b666
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1000b67f
push dword [ebp - 0x60]
lea ecx, [ebp - 0xb14]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x1000b65f
push 1
lea ecx, [ebp - 0xb14]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000b6b5
push 1
lea ecx, [ebp - 0xb14]
call fcn.10017e3c
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0x8f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8f8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb14]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x1000b6ea
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1000b6e8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000b691
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x1000b706
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xb14]
call fcn.10017e20
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x1000b72f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000b4f3
mov dword [ebp - 0x34], 0x13dd33a4
push 1
lea ecx, [ebp - 0x924]
call fcn.10017d9e
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x848], 0x2674
mov dword [ebp - 0x850], 0x9ff40b36
push 2
lea ecx, [ebp - 0xcd4]
call fcn.10017d9e
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x7c], 0
jmp 0x1000b781
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1000b79d
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov dword [eax], 0xfffffffe
jmp 0x1000b77a
mov dword [ebp - 0x7c], 0
jmp 0x1000b7ad
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1000b7c9
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xcd4]
call fcn.10017e3c
mov dword [eax], 0xfffffff8
jmp 0x1000b7a6
mov dword [ebp - 0x34], 0
jmp 0x1000b7d9
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xffffffef
jl 0x1000b82b
mov dword [ebp - 0x570], 0x1d89
mov dword [ebp - 0xa98], 0x5efa20bd
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x570]
test eax, eax
je 0x1000b816
cmp dword [ebp - 0x570], 0
je 0x1000b816
mov dword [ebp - 0x750], 1
jmp 0x1000b81d
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0xa98], eax
jmp 0x1000b7d2
mov dword [ebp - 0x34], 0xd
jmp 0x1000b83b
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0xfffffff9
je 0x1000bc4b
mov dword [ebp - 0x18], 0x51d52aa0
mov dword [ebp - 0x1f0], 0xffffffff
mov eax, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x18], 0xca7
add eax, ecx
cmp eax, 8
jbe 0x1000b873
mov dword [ebp - 0x578], 1
jmp 0x1000b87a
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x578]
test eax, eax
jne 0x1000b897
cmp dword [ebp - 0x18], 0
jne 0x1000b897
and dword [ebp - 0x840], 0
jmp 0x1000b8a1
mov dword [ebp - 0x840], 1
mov eax, 0xfff7
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x840]
test eax, eax
je 0x1000b9ea
mov dword [ebp - 0x580], 0xd29ed7d4
mov dword [ebp - 0x250], 0
jmp 0x1000b8db
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1000b8f7
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xf5c], 0x451d77f1
jmp 0x1000b8ce
mov dword [ebp - 0x18], 0
jmp 0x1000b907
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1000b938
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000b936
push 0x1bb6
push 0
push 0x149a
push 0x26e9
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x1000b900
mov dword [ebp - 0x18], 0
jmp 0x1000b948
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jg 0x1000b9e5
mov dword [ebp - 0x9d8], 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x924]
call fcn.10017e3c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf5c]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
cmp dword [ebp - 0x18], eax
jne 0x1000b994
mov dword [ebp - 0x758], 1
jmp 0x1000b99b
and dword [ebp - 0x758], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf5c]
cmp eax, dword [ebp - 0x758]
jl 0x1000b9bc
mov dword [ebp - 0x588], 1
jmp 0x1000b9c3
and dword [ebp - 0x588], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov eax, dword [eax]
imul eax, dword [ebp - 0x588]
mov dword [ebp - 0x9d8], eax
jmp 0x1000b941
jmp 0x1000bc46
mov dword [ebp - 0x33c], 0xffffffff
mov dword [ebp - 0x5b0], 0x8636eebc
mov dword [ebp - 0x760], 0xefce06df
mov dword [ebp - 0x5c0], 0xbbb785aa
mov dword [ebp - 0x9e0], 0xfffffffe
mov esi, dword [ebp - 0x33c]
push 0
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov ecx, dword [ebp - 0x33c]
imul ecx, dword [eax]
cmp esi, ecx
jne 0x1000ba48
mov dword [ebp - 0x8c0], 1
jmp 0x1000ba4f
and dword [ebp - 0x8c0], 0
push 0
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov ecx, dword [ebp - 0x8c0]
cmp ecx, dword [eax]
je 0x1000ba72
mov dword [ebp - 0xaf8], 1
jmp 0x1000ba79
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xe7c], eax
mov eax, 0xffff
test eax, eax
je 0x1000baa0
cmp dword [ebp - 0x33c], 0
je 0x1000baa0
mov dword [ebp - 0x590], 1
jmp 0x1000baa7
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x760]
sub eax, 0xa
je 0x1000bad5
xor eax, eax
inc eax
je 0x1000bad5
mov dword [ebp - 0x598], 1
jmp 0x1000badc
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x848], 0
jge 0x1000bafd
mov dword [ebp - 0x5b8], 1
jmp 0x1000bb04
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x1f0]
mov dword [ebp - 0xe84], eax
mov eax, dword [ebp - 0x1f0]
dec eax
cmp eax, dword [ebp - 0x848]
jge 0x1000bb2b
mov dword [ebp - 0x5a0], 1
jmp 0x1000bb32
and dword [ebp - 0x5a0], 0
push 0
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov ecx, dword [ebp - 0x5a0]
cmp ecx, dword [eax]
jg 0x1000bb55
mov dword [ebp - 0x768], 1
jmp 0x1000bb5c
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xfff6
je 0x1000bb74
mov dword [ebp - 0x5a8], 1
jmp 0x1000bb7b
and dword [ebp - 0x5a8], 0
push 0
lea ecx, [ebp - 0x924]
call fcn.10017e3c
mov ecx, dword [ebp - 0x5a8]
cmp ecx, dword [eax]
jge 0x1000bb9e
mov dword [ebp - 0x8e8], 1
jmp 0x1000bba5
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0
jne 0x1000bbc0
cmp dword [ebp - 0x1f0], 0
jne 0x1000bbc0
and dword [ebp - 0x770], 0
jmp 0x1000bbca
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x5b0]
cmp dword [ebp - 0x770], eax
jge 0x1000bbe4
mov dword [ebp - 0x778], 1
jmp 0x1000bbeb
and dword [ebp - 0x778], 0
imul eax, dword [ebp - 0x5b8], 0xfffffffd
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0x5c0], eax
mov eax, dword [ebp - 0x5c0]
cmp eax, dword [ebp - 0x778]
jne 0x1000bc1e
mov dword [ebp - 0x31c], 1
jmp 0x1000bc25
and dword [ebp - 0x31c], 0
push 0
lea ecx, [ebp - 0xcd4]
call fcn.10017e3c
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x9e0], eax
jmp 0x1000b834
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xcd4]
call fcn.10017e20
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x924]
call fcn.10017e20
mov byte [ebp - 0xea], 0
mov dword [ebp - 0x30], 6
push 3
lea ecx, [ebp - 0x2b8]
call fcn.10017d9e
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xb0], 0xecf04b06
mov dword [ebp - 0x918], 5
mov dword [ebp - 0x790], 0
mov dword [ebp - 0x280], 0
jmp 0x1000bcbf
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x1000bce1
push dword [ebp - 0x280]
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x1000bcb2
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1000bd03
push 0x16cf
push 0x11b0
call dword [sym.imp.USER32.dll_SetCaretPos]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x5c8], eax
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov ecx, dword [ebp - 0x5c8]
mov dword [eax], ecx
cmp dword [ebp - 0x5c8], 0
je 0x1000be93
mov dword [ebp - 0x11c], 6
mov dword [ebp - 0x780], 6
mov dword [ebp - 0xb78], 0xb0fe2cf4
mov dword [ebp - 0x30], 9
jmp 0x1000bd5c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1c
jne 0x1000bd9b
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000bd7c
push 0
call dword [sym.imp.ole32.dll_CoTaskMemFree]
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x1000bd99
push 0x1e70
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x1000bd55
cmp dword [ebp - 0x11c], 9
jb 0x1000bdb0
mov dword [ebp - 0xaa0], 1
jmp 0x1000bdb7
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xe8c], eax
mov esi, dword [ebp - 0x11c]
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
add esi, dword [eax]
cmp esi, dword [ebp - 0x11c]
jle 0x1000bdec
mov dword [ebp - 0x8c8], 1
jmp 0x1000bdf3
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x8c8], eax
jle 0x1000be0d
mov dword [ebp - 0x5d0], 1
jmp 0x1000be14
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0xb0], eax
mov esi, dword [ebp - 0xb0]
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
cmp dword [eax], esi
jle 0x1000be3e
cmp dword [ebp - 0x780], 0
push 0
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
imul esi, dword [eax], 0xffff
push 0
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x1000be6e
mov dword [ebp - 0x9e8], 1
jmp 0x1000be75
and dword [ebp - 0x9e8], 0
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov eax, dword [ebp - 0x780]
mov dword [ebp - 0xb78], eax
jmp 0x1000c1a3
mov dword [ebp - 0x1f8], 0xc3ae5071
mov dword [ebp - 0x118], 0xfffffff7
mov dword [ebp - 0x2dc], 0xfffffffe
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0xb0], 0xfffffffa
jmp 0x1000bed4
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jle 0x1000c05c
mov dword [ebp - 0x2cc], 2
mov dword [ebp - 0x30], 0x17
jmp 0x1000befb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x2a
jl 0x1000c057
mov dword [ebp - 0x2d4], 0xffffffff
mov dword [ebp - 0x5d8], 0xffffffff
cmp dword [ebp - 0x2cc], 0x16de
jg 0x1000c009
mov eax, dword [ebp - 0x5d8]
cmp dword [ebp - 0x2cc], eax
jl 0x1000bf43
mov dword [ebp - 0x9f0], 1
jmp 0x1000bf4a
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x2cc]
mov dword [ebp - 0xe94], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0xe9c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x9f8], eax
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
mov eax, dword [ebp - 0xaa8]
cmp eax, dword [ebp - 0x9f8]
jg 0x1000bfa1
mov dword [ebp - 0x858], 1
jmp 0x1000bfa8
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x858]
jl 0x1000bfc2
mov dword [ebp - 0x5e0], 1
jmp 0x1000bfc9
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xea4], eax
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
cmp dword [eax], 0
jne 0x1000c009
and dword [ebp - 0x788], 0
jmp 0x1000c013
mov dword [ebp - 0x788], 1
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov ecx, dword [ebp - 0x788]
cmp ecx, dword [eax]
jle 0x1000c036
mov dword [ebp - 0x5e8], 1
jmp 0x1000c03d
and dword [ebp - 0x5e8], 0
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov ecx, dword [ebp - 0x5e8]
mov dword [eax], ecx
jmp 0x1000bef4
jmp 0x1000bec7
mov dword [ebp - 0x918], 0x7ee8c4b0
cmp dword [ebp - 0x918], 0
je 0x1000c084
cmp dword [ebp - 0x2dc], 0
je 0x1000c084
mov dword [ebp - 0x5f0], 1
jmp 0x1000c08b
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x30]
cmp dword [ebp - 0x790], eax
je 0x1000c0b8
mov eax, 0xb447
test eax, eax
jne 0x1000c0b8
and dword [ebp - 0x5f8], 0
jmp 0x1000c0c2
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x2dc]
imul eax, dword [ebp - 0x5f8]
cmp dword [ebp - 0x1f8], eax
jge 0x1000c0e3
mov dword [ebp - 0x860], 1
jmp 0x1000c0ea
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x860], eax
jne 0x1000c107
mov eax, 0xfff6
test eax, eax
jne 0x1000c107
and dword [ebp - 0x798], 0
jmp 0x1000c111
mov dword [ebp - 0x798], 1
mov dword [ebp - 0x118], 0xfffffff9
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x600], eax
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10017e3c
mov ecx, dword [ebp - 0x600]
mov dword [eax], ecx
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x798]
jne 0x1000c162
mov dword [ebp - 0x608], 1
jmp 0x1000c169
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x608], eax
jge 0x1000c18c
cmp dword [ebp - 0x118], 0
je 0x1000c18c
mov dword [ebp - 0xb08], 1
jmp 0x1000c193
and dword [ebp - 0xb08], 0
imul eax, dword [ebp - 0x1f8], 0x85aa
mov dword [ebp - 0xa00], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2b8]
call fcn.10017e20
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1000c5a0
mov dword [ebp - 0x124], 0x951ad386
mov dword [ebp - 0xd50], 0xffffffff
mov dword [ebp - 0xd4c], 0xffffffff
mov dword [ebp - 0xd48], 0xffffffff
mov dword [ebp - 0xd44], 0xffffffff
mov dword [ebp - 0x2e4], 0x8217
mov dword [ebp - 0xeac], 0
mov dword [ebp - 0x258], 0
jmp 0x1000c220
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 3
jge 0x1000c23c
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x970], 0xffff
jmp 0x1000c213
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x970]
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x124], 0
jmp 0x1000c267
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 2
jg 0x1000c596
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x870], 0xfffffffe
mov dword [ebp - 0x28], 2
jmp 0x1000c295
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1000c591
push 2
lea ecx, [ebp - 0x360]
call fcn.10017d9e
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x200], 0
jmp 0x1000c2c9
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x1000c2eb
push dword [ebp - 0x200]
lea ecx, [ebp - 0x360]
call fcn.10017e3c
mov dword [eax], 1
jmp 0x1000c2bc
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd50], 1
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000c331
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x884]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
cmp dword [eax], 2
jg 0x1000c57d
mov dword [ebp - 0x628], 1
mov dword [ebp - 0x7b0], 0xffffffff
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x970]
mov dword [ebp - 0xeb8], eax
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
mov esi, eax
mov edi, dword [ebp - 0x28]
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
imul edi, dword [eax]
imul edi, dword [esi]
cmp edi, dword [ebp - 0x2e4]
je 0x1000c3a4
mov dword [ebp - 0x610], 1
jmp 0x1000c3ab
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x970]
cmp dword [ebp - 0x610], eax
jg 0x1000c3c9
mov dword [ebp - 0x7a0], 1
jmp 0x1000c3d0
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
add eax, 0x1780eec2
je 0x1000c3f2
mov eax, 0x3e5ec352
test eax, eax
je 0x1000c3f2
mov dword [ebp - 0x618], 1
jmp 0x1000c3f9
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x618], eax
jg 0x1000c410
mov dword [ebp - 0x868], 1
jmp 0x1000c417
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 0xfafb
jle 0x1000c42f
mov dword [ebp - 0x620], 1
jmp 0x1000c436
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0xfffffffb
je 0x1000c44b
mov dword [ebp - 0xab0], 1
jmp 0x1000c452
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xec4], eax
imul eax, dword [ebp - 0x28], 0xbc69
imul eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x628]
jle 0x1000c47d
mov dword [ebp - 0x7a8], 1
jmp 0x1000c484
and dword [ebp - 0x7a8], 0
mov esi, dword [ebp - 0x28]
add esi, dword [ebp - 0x7a8]
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
cmp esi, dword [eax]
je 0x1000c510
mov eax, dword [ebp - 0x628]
cmp dword [ebp - 0x2e4], eax
jne 0x1000c4b8
mov dword [ebp - 0x894], 1
jmp 0x1000c4bf
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp + eax*4 - 0x970]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x630]
mov dword [ebp + eax*4 - 0x970], ecx
mov eax, dword [ebp - 0x894]
sub eax, dword [ebp - 0x630]
mov dword [ebp - 0x870], eax
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x1000c50e
push 0xd28
call dword [sym.imp.GDI32.dll_GetStockObject]
jmp 0x1000c578
mov dword [ebp - 0xa08], 0xfffffff7
mov esi, dword [ebp - 0xa08]
push 4
pop eax
shl eax, 1
sub esi, dword [ebp + eax - 0x970]
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
imul esi, dword [eax]
mov dword [ebp - 0x7b0], esi
mov esi, dword [ebp - 0x7b0]
push 1
lea ecx, [ebp - 0x360]
call fcn.10017e3c
cmp esi, dword [eax]
jg 0x1000c565
mov dword [ebp - 0x638], 1
jmp 0x1000c56c
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x870], eax
jmp 0x1000c30d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x360]
call fcn.10017e20
jmp 0x1000c28e
jmp 0x1000c25a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb24]
call fcn.10017e20
movzx eax, byte [0x10670a08]
test eax, eax
je 0x1000c5cd
mov esi, 0x10084838
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10010720
push 2
lea ecx, [ebp - 0xb34]
call fcn.10017d9e
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x3c], 0
jmp 0x1000c5f1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1000c607
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xed0], 1
jmp 0x1000c5ea
mov dword [ebp - 0x3c], 0
jmp 0x1000c617
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1000c630
push dword [ebp - 0x3c]
lea ecx, [ebp - 0xb34]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x1000c610
push 1
lea ecx, [ebp - 0xb34]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000c666
push 1
lea ecx, [ebp - 0xb34]
call fcn.10017e3c
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x640]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x640]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb34]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x1000c69b
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000c699
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000c642
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1000c6b7
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb34]
call fcn.10017e20
push 2
lea ecx, [ebp - 0xb44]
call fcn.10017d9e
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x84], 0
jmp 0x1000c6f3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1000c70f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xf94], 1
jmp 0x1000c6e6
mov dword [ebp - 0x84], 0
jmp 0x1000c728
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1000c747
push dword [ebp - 0x84]
lea ecx, [ebp - 0xb44]
call fcn.10017e3c
or dword [eax], 0xffffffff
jmp 0x1000c71b
push 1
lea ecx, [ebp - 0xb44]
call fcn.10017e3c
and dword [eax], 0
jmp 0x1000c77d
push 1
lea ecx, [ebp - 0xb44]
call fcn.10017e3c
mov dword [ebp - 0x7b8], eax
mov eax, dword [ebp - 0x7b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7b8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb44]
call fcn.10017e3c
cmp dword [eax], 0
jg 0x1000c7b2
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1000c7b0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
jmp 0x1000c759
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000c7ce
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb44]
call fcn.10017e20
mov dword [ebp - 0xfa8], 0x5dce
mov dword [ebp - 0xfa4], 0x90c4d8e5
mov dword [ebp - 0xed4], 0x35f394a2
mov dword [ebp - 0xedc], 0xe31d8329
mov dword [ebp - 0xee4], 0xffffffff
mov dword [ebp - 0xeec], 0x144ad72d
mov dword [ebp - 0xef4], 0xffffffff
mov dword [ebp - 0xefc], 0xcc590f02
push 3
lea ecx, [ebp - 0xf6c]
call fcn.10017d9e
mov dword [ebp - 4], 0x14
mov dword [ebp - 0xf04], 0xf8ee1d11
mov dword [ebp - 0xf0c], 9
mov dword [ebp - 0xf14], 0xffffffff
mov dword [ebp - 0x648], 0xffffffff
mov dword [ebp - 0x298], 0
jmp 0x1000c882
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x1000c8a4
push dword [ebp - 0x298]
lea ecx, [ebp - 0xf6c]
call fcn.10017e3c
mov dword [eax], 0xe6dc660f
jmp 0x1000c875
mov eax, dword [ebp - 0x648]
dec eax
mov dword [ebp - 0x648], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf6c]
call fcn.10017e20
mov dword [ebp - 0xf1c], 0x10084838
mov dword [ebp - 0xf24], 0x5dce
mov dword [ebp - 0xf2c], 0x90c4d8e5
mov dword [ebp - 0xfbc], 0x35f394a2
mov dword [ebp - 0xfc4], 0xe31d8329
mov dword [ebp - 0xfcc], 0xffffffff
mov dword [ebp - 0xfd4], 0x144ad72d
mov dword [ebp - 0xfdc], 0xffffffff
mov dword [ebp - 0xfe4], 0xcc590f02
push 3
lea ecx, [ebp - 0xf7c]
call fcn.10017d9e
mov dword [ebp - 4], 0x15
mov dword [ebp - 0xff0], 0xf8ee1d11
mov dword [ebp - 0xff8], 9
mov dword [ebp - 0x1000], 0xffffffff
mov dword [ebp - 0x880], 0xffffffff
mov dword [ebp - 0x208], 0
jmp 0x1000c96f
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x1000c991
push dword [ebp - 0x208]
lea ecx, [ebp - 0xf7c]
call fcn.10017e3c
mov dword [eax], 0xe6dc660f
jmp 0x1000c962
mov eax, dword [ebp - 0x880]
dec eax
mov dword [ebp - 0x880], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf7c]
call fcn.10017e20
mov dword [ebp - 0x1008], 0x5dce
mov dword [ebp - 0x1010], 0x90c4d8e5
mov dword [ebp - 0x1018], 0x35f394a2
mov dword [ebp - 0x1020], 0xe31d8329
mov dword [ebp - 0x1028], 0xffffffff
mov dword [ebp - 0x1030], 0x144ad72d
mov dword [ebp - 0x102c], 0xffffffff
mov dword [ebp - 0xed8], 0xcc590f02
push 3
lea ecx, [ebp - 0xf90]
call fcn.10017d9e
mov dword [ebp - 4], 0x16
mov dword [ebp - 0xfac], 0xf8ee1d11
mov dword [ebp - 0xdc0], 9
mov dword [ebp - 0xee0], 0xffffffff
mov dword [ebp - 0x650], 0xffffffff
mov dword [ebp - 0x260], 0
jmp 0x1000ca52
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1000ca74
push dword [ebp - 0x260]
lea ecx, [ebp - 0xf90]
call fcn.10017e3c
mov dword [eax], 0xe6dc660f
jmp 0x1000ca45
mov eax, dword [ebp - 0x650]
dec eax
mov dword [ebp - 0x650], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf90]
call fcn.10017e20
mov dword [ebp - 0xdc8], 0x1008483c
mov dword [ebp - 0x20], 0
mov dword [ebp - 0xa8], 0x141b6ba0
mov dword [ebp - 0xc1c], 0xf37d437f
mov dword [ebp - 0xc18], 0xf37d437f
mov dword [ebp - 0xc14], 0xf37d437f
mov dword [ebp - 0xc10], 0xf37d437f
lea ecx, [ebp - 0x349]
call fcn.10008dc3
push eax
lea eax, [ebp - 0xc0c]
push eax
lea eax, [ebp - 0xc1c]
push eax
lea ecx, [ebp - 0x107c]
call fcn.10017e4b
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb54]
call fcn.10017dfa
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x20], 0
jmp 0x1000cb1f
cmp dword [ebp - 0x20], 0xffffffe6
jge 0x1000cd97
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret