Function at 0x10009059
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008a70f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1010
call fcn.100861f0
push esi
push edi
mov dword [ebp - 0x78], 0x9ad59e57
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0xf08], 0xfffffffe
mov dword [ebp - 0x1d0], 0
jmp 0x100090b1
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 3
jge 0x100090cd
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xd98], 1
jmp 0x100090a4
mov dword [ebp - 0x78], 0
jmp 0x100090dd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x10009210
mov dword [ebp - 0x2ec], 6
mov dword [ebp - 0xb78], 1
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xd98]
cmp dword [ebp - 0x78], eax
jg 0x10009123
mov dword [ebp - 0x8bc], 1
jmp 0x1000912a
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x8bc], eax
jl 0x10009141
mov dword [ebp - 0xaf4], 1
jmp 0x10009148
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x2ec]
dec ecx
cmp dword [ebp + eax*4 - 0xd98], ecx
jl 0x10009167
mov dword [ebp - 0xa18], 1
jmp 0x1000916e
and dword [ebp - 0xa18], 0
cmp dword [ebp - 0xa18], 0xffff
jb 0x10009186
mov dword [ebp - 0xa20], 1
jmp 0x1000918d
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0xa20]
add eax, 0x44421408
cmp eax, 4
jl 0x100091a9
mov dword [ebp - 0xa28], 1
jmp 0x100091b0
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0xa28]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
je 0x100091da
mov eax, 0x5fa2ef70
test eax, eax
je 0x100091da
mov dword [ebp - 0xa30], 1
jmp 0x100091e1
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0xa30], eax
jne 0x100091f8
mov dword [ebp - 0xa38], 1
jmp 0x100091ff
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xb78], eax
jmp 0x100090d6
mov dword [ebp - 0xe0], 0
jmp 0x10009229
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 3
jge 0x10009245
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0xd98], 0x6d0811fc
jmp 0x1000921c
push 3
lea ecx, [ebp - 0xc64]
call fcn.10018b61
and dword [ebp - 4], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0xa40], 0xfffffff6
mov dword [ebp - 0xb80], 0xfffffffa
mov dword [ebp - 0x270], 0
jmp 0x1000928a
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x100092ac
push dword [ebp - 0x270]
lea ecx, [ebp - 0xc64]
call fcn.10018bff
mov dword [eax], 0x10c93b4e
jmp 0x1000927d
mov dword [ebp - 0x2c], 2
jmp 0x100092bc
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1000957e
mov dword [ebp - 0x380], 0x3a6c9cd4
push 1
lea ecx, [ebp - 0xd8c]
call fcn.10018b61
mov byte [ebp - 4], 1
mov dword [ebp - 0x64], 0
jmp 0x100092f1
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1000930a
push dword [ebp - 0x64]
lea ecx, [ebp - 0xd8c]
call fcn.10018bff
and dword [eax], 0
jmp 0x100092ea
mov dword [ebp - 0x64], 0
jmp 0x1000931a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10009330
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xfc4], 0xfffffff9
jmp 0x10009313
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x10009353
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xa40], eax
mov eax, dword [ebp - 0xa40]
mov dword [ebp - 0xa48], eax
push 0
lea ecx, [ebp - 0xd8c]
call fcn.10018bff
mov ecx, dword [ebp - 0xa48]
mov dword [eax], ecx
cmp dword [ebp - 0xa48], 0
jne 0x10009394
xor eax, eax
inc eax
jne 0x10009394
and dword [ebp - 0xa50], 0
jmp 0x1000939e
mov dword [ebp - 0xa50], 1
mov eax, dword [ebp - 0xa50]
add eax, 0xfff8
cmp eax, dword [ebp - 0x2c]
jle 0x100093ba
mov dword [ebp - 0xa58], 1
jmp 0x100093c1
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xa58], eax
jg 0x100093d8
mov dword [ebp - 0xa60], 1
jmp 0x100093df
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0xa60]
jg 0x10009405
mov dword [ebp - 0x3d0], 1
jmp 0x1000940c
and dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x3d0], 0x4255ebda
je 0x10009424
mov dword [ebp - 0x6f0], 1
jmp 0x1000942b
and dword [ebp - 0x6f0], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc64]
call fcn.10018bff
mov dword [ebp - 0x3d8], eax
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc64]
call fcn.10018bff
mov ecx, dword [ebp - 0x3d8]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x3d8]
cmp dword [ecx], eax
jne 0x10009476
mov dword [ebp - 0x6f8], 1
jmp 0x1000947d
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x6f8], eax
jle 0x10009494
mov dword [ebp - 0x3e0], 1
jmp 0x1000949b
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3e0], eax
jne 0x100094b2
mov dword [ebp - 0x700], 1
jmp 0x100094b9
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x700]
cmp eax, dword [ebp - 0x2c]
jle 0x100094d3
mov dword [ebp - 0x3e8], 1
jmp 0x100094da
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x3e8], 0x4886
jg 0x100094f2
mov dword [ebp - 0x708], 1
jmp 0x100094f9
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x708], eax
jne 0x10009510
mov dword [ebp - 0x3f0], 1
jmp 0x10009517
and dword [ebp - 0x3f0], 0
cmp dword [ebp - 0x3f0], 1
jle 0x1000952c
mov dword [ebp - 0x710], 1
jmp 0x10009533
and dword [ebp - 0x710], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfc4]
cmp dword [ebp - 0x710], eax
jg 0x10009553
mov dword [ebp - 0x3f8], 1
jmp 0x1000955a
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xb80], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd8c]
call fcn.10018be3
jmp 0x100092b5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc64]
call fcn.10018be3
mov dword [ebp - 0xa8], 0x9ad59e57
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0xeb4], 0xfffffffe
mov dword [ebp - 0x1d8], 0
jmp 0x100095c4
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jge 0x100095e0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0xda4], 1
jmp 0x100095b7
mov dword [ebp - 0xa8], 0
jmp 0x100095f9
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jg 0x1000973e
mov dword [ebp - 0x388], 6
mov dword [ebp - 0xb90], 1
mov eax, dword [ebp - 0x388]
inc eax
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xda4]
cmp dword [ebp - 0xa8], eax
jg 0x10009648
mov dword [ebp - 0x718], 1
jmp 0x1000964f
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x718], eax
jl 0x10009669
mov dword [ebp - 0xb88], 1
jmp 0x10009670
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0x388]
dec ecx
cmp dword [ebp + eax*4 - 0xda4], ecx
jl 0x10009692
mov dword [ebp - 0x400], 1
jmp 0x10009699
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xffff
jb 0x100096b1
mov dword [ebp - 0x720], 1
jmp 0x100096b8
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
add eax, 0x44421408
cmp eax, 4
jl 0x100096d4
mov dword [ebp - 0x408], 1
jmp 0x100096db
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
je 0x10009705
mov eax, 0x5fa2ef70
test eax, eax
je 0x10009705
mov dword [ebp - 0x728], 1
jmp 0x1000970c
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x728], eax
jne 0x10009726
mov dword [ebp - 0x410], 1
jmp 0x1000972d
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xb90], eax
jmp 0x100095ec
mov dword [ebp - 0xe8], 0
jmp 0x10009757
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10009773
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0xda4], 0x6d0811fc
jmp 0x1000974a
mov dword [ebp - 0x148], 0x951ad386
mov dword [ebp - 0x140], 0xf5cd53bc
mov dword [ebp - 0x168], 0x6ce4a6f4
mov dword [ebp - 0xb98], 0x61ece30
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffff6
je 0x100097bc
mov dword [ebp - 0x738], 1
jmp 0x100097c3
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x148]
sub eax, 0x47c4d145
mov dword [ebp - 0x168], eax
je 0x100097eb
mov eax, 0x1d1b
test eax, eax
je 0x100097eb
mov dword [ebp - 0x730], 1
jmp 0x100097f2
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x730]
test eax, eax
je 0x10009818
cmp dword [ebp - 0x148], 0
je 0x10009818
mov dword [ebp - 0x418], 1
jmp 0x1000981f
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
neg eax
cmp dword [ebp - 0x148], eax
jge 0x1000983b
mov dword [ebp - 0x420], 1
jmp 0x10009842
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x738]
add eax, dword [ebp - 0x420]
mov dword [ebp - 0xb98], eax
mov dword [ebp - 0x140], 0
jmp 0x1000986d
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xfffffff1
jl 0x100098d4
cmp dword [ebp - 0x148], 0
je 0x10009881
jmp 0x100098d4
mov dword [ebp - 0x168], 0
jmp 0x1000989a
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xfffffff9
jl 0x100098d2
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x100098d0
push 0x462
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
jmp 0x1000988d
jmp 0x10009860
mov dword [ebp - 0x44], 0xfffffff9
mov dword [ebp - 0x740], 0xfffffffa
mov dword [ebp - 0x374], 0x87d6364d
mov dword [ebp - 0x278], 0
jmp 0x10009908
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10009924
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xa70], 0x85f70ad6
jmp 0x100098fb
mov dword [ebp - 0x44], 2
jmp 0x10009934
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x10009953
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0xa70], 0
je 0x10009949
jmp 0x10009953
cmp dword [ebp - 0x44], 0
je 0x10009951
jmp 0x1000992d
jmp 0x1000992d
imul eax, dword [ebp - 0x44], 0x7e78
test eax, eax
je 0x10009a23
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa70]
mov dword [ebp - 0x740], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa70]
cmp dword [ebp - 0x740], eax
jg 0x1000999f
cmp dword [ebp - 0x374], 0
je 0x1000999f
mov dword [ebp - 0x428], 1
jmp 0x100099a6
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xa70]
cmp dword [ebp - 0x44], eax
jl 0x100099cd
mov dword [ebp - 0x748], 1
jmp 0x100099d4
and dword [ebp - 0x748], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa70]
cmp eax, dword [ebp - 0x748]
jle 0x100099f5
mov dword [ebp - 0x430], 1
jmp 0x100099fc
and dword [ebp - 0x430], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x430]
sub ecx, dword [ebp + eax - 0xa70]
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x44], 1
ja 0x10009a23
mov dword [ebp - 0x750], 1
jmp 0x10009a2a
and dword [ebp - 0x750], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa70]
cmp dword [ebp - 0x750], eax
jge 0x10009a4b
mov dword [ebp - 0x438], 1
jmp 0x10009a52
and dword [ebp - 0x438], 0
cmp dword [ebp - 0x438], 0
jb 0x10009a67
mov dword [ebp - 0x758], 1
jmp 0x10009a6e
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x374]
cmp dword [ebp - 0x758], eax
jg 0x10009a94
cmp dword [ebp - 0x374], 0
jne 0x10009a94
cmp dword [ebp - 0x44], 0
jne 0x10009a94
and dword [ebp - 0x440], 0
jmp 0x10009a9e
mov dword [ebp - 0x440], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0xa70], ecx
mov dword [ebp - 0x90], 0x9ad59e57
mov dword [ebp - 0xc0], 2
mov dword [ebp - 0x150], 0x465ee6d5
mov dword [ebp - 0x1e0], 9
mov dword [ebp - 0x778], 0x1d5f49dc
mov dword [ebp - 0x780], 0
push 1
lea ecx, [ebp - 0xaa8]
call fcn.10018b61
mov dword [ebp - 4], 2
mov dword [ebp - 0x2f8], 0x1f7977f4
mov dword [ebp - 0x80], 0
jmp 0x10009b1a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10009b30
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xcb8], 8
jmp 0x10009b13
mov dword [ebp - 0x80], 0
jmp 0x10009b40
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10009b5c
push dword [ebp - 0x80]
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
mov dword [eax], 0xe7c6
jmp 0x10009b39
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xf88], eax
cmp dword [ebp - 0xc0], 0
jne 0x10009b83
cmp dword [ebp - 0xc0], 0
jne 0x10009b83
and dword [ebp - 0x760], 0
jmp 0x10009b8d
mov dword [ebp - 0x760], 1
cmp dword [ebp - 0x760], 0xffffffff
jl 0x10009ba2
mov dword [ebp - 0x448], 1
jmp 0x10009ba9
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x448], eax
jle 0x10009bc3
mov dword [ebp - 0x768], 1
jmp 0x10009bca
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
sub eax, dword [ebp - 0x150]
sub eax, 0xb8b9
jne 0x10009bef
cmp dword [ebp - 0x150], 0
jne 0x10009bef
and dword [ebp - 0x450], 0
jmp 0x10009bf9
mov dword [ebp - 0x450], 1
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x1e0], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x1e0], eax
jle 0x10009c1f
mov dword [ebp - 0x770], 1
jmp 0x10009c26
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ebp - 0x770]
jl 0x10009c46
cmp dword [ebp - 0x150], 0
jne 0x10009c46
and dword [ebp - 0x458], 0
jmp 0x10009c50
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x778], eax
mov eax, dword [ebp - 0x778]
imul eax, dword [ebp - 0x150]
cmp eax, 9
ja 0x10009c7a
mov dword [ebp - 0x460], 1
jmp 0x10009c81
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x460]
mov dword [ebp - 0x780], eax
cmp dword [ebp - 0x780], 1
jg 0x10009ca8
mov dword [ebp - 0x348], 1
jmp 0x10009caf
and dword [ebp - 0x348], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0xcb8], ecx
mov eax, dword [ebp - 0x348]
add eax, 0x9dba
cmp eax, 0x124380d3
jge 0x10009cdf
mov dword [ebp - 0x468], 1
jmp 0x10009ce6
and dword [ebp - 0x468], 0
mov esi, dword [ebp - 0xc0]
imul esi, dword [ebp - 0x468]
push 0
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
cmp esi, dword [eax]
je 0x10009d10
mov dword [ebp - 0xba0], 1
jmp 0x10009d17
and dword [ebp - 0xba0], 0
xor eax, eax
inc eax
cmp eax, 8
jl 0x10009d31
mov eax, 0x41bbbbfe
test eax, eax
je 0x10009d31
and dword [ebp - 0xba8], 0
jmp 0x10009d3b
mov dword [ebp - 0xba8], 1
push 0
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
push 0
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
mov ecx, dword [ebp - 0x150]
cmp dword [eax], ecx
jl 0x10009d6b
mov dword [ebp - 0x788], 1
jmp 0x10009d72
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0x788]
je 0x10009d95
cmp dword [ebp - 0x1e0], 0
je 0x10009d95
mov dword [ebp - 0x470], 1
jmp 0x10009d9c
and dword [ebp - 0x470], 0
push 0
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
mov ecx, dword [ebp - 0x470]
cmp ecx, dword [eax]
jne 0x10009dbf
mov dword [ebp - 0x790], 1
jmp 0x10009dc6
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x790], eax
jl 0x10009de0
mov dword [ebp - 0x478], 1
jmp 0x10009de7
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xcb8]
cmp dword [ebp + eax - 0xcb8], ecx
jne 0x10009e19
mov dword [ebp - 0x798], 1
jmp 0x10009e20
and dword [ebp - 0x798], 0
push 0
lea ecx, [ebp - 0xaa8]
call fcn.10018bff
mov ecx, dword [ebp - 0x798]
cmp ecx, dword [eax]
jg 0x10009e43
mov dword [ebp - 0x480], 1
jmp 0x10009e4a
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0xfffffffd
jge 0x10009e5f
mov dword [ebp - 0x7a0], 1
jmp 0x10009e66
and dword [ebp - 0x7a0], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xcb8], 0
je 0x10009e8a
mov eax, 0xc842
test eax, eax
je 0x10009e8a
mov dword [ebp - 0x488], 1
jmp 0x10009e91
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
imul ecx, dword [ebp - 0x488], 0x3725
imul eax, ecx
mov dword [ebp - 0x1e0], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa8]
call fcn.10018be3
mov dword [ebp - 0xf8], 0xffffffff
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 0
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0xa84], 0
push 4
lea ecx, [ebp - 0x3b8]
call fcn.10018b61
mov dword [ebp - 4], 3
mov dword [ebp - 0x7a8], 0x19d81479
mov dword [ebp - 0xbb0], 0xffffffff
mov dword [ebp - 0x4c0], 0xffffffff
mov dword [ebp - 0x280], 0
jmp 0x10009f42
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 4
jge 0x10009f64
push dword [ebp - 0x280]
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
mov dword [eax], 1
jmp 0x10009f35
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 0x7fd1
jge 0x10009f82
mov dword [ebp - 0x7c0], 1
jmp 0x10009f89
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7a8]
inc eax
mov dword [ebp - 0x7a8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 0x6ec7
jg 0x10009fb4
mov dword [ebp - 0x490], 1
jmp 0x10009fbb
and dword [ebp - 0x490], 0
mov esi, dword [ebp - 0x490]
sub esi, 0x2f20
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
imul esi, dword [eax]
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
cmp esi, dword [eax]
je 0x10009ff4
mov dword [ebp - 0x7b0], 1
jmp 0x10009ffb
and dword [ebp - 0x7b0], 0
cmp dword [ebp - 0x7b0], 0xfffb
ja 0x1000a013
mov dword [ebp - 0x498], 1
jmp 0x1000a01a
and dword [ebp - 0x498], 0
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
mov ecx, dword [ebp - 0x498]
cmp ecx, dword [eax]
jle 0x1000a03d
mov dword [ebp - 0x7b8], 1
jmp 0x1000a044
and dword [ebp - 0x7b8], 0
imul eax, dword [ebp - 0x7b8], 0x2e41
cmp eax, 0xfffffffa
je 0x1000a06e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 0
je 0x1000a06e
mov dword [ebp - 0x4a0], 1
jmp 0x1000a075
and dword [ebp - 0x4a0], 0
push 4
pop eax
imul eax, eax, 3
mov esi, dword [ebp + eax - 0xa90]
add esi, dword [ebp - 0x4a0]
add esi, dword [ebp - 0x7c0]
push 0
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
cmp esi, dword [eax]
jge 0x1000a0ab
mov dword [ebp - 0x4a8], 1
jmp 0x1000a0b2
and dword [ebp - 0x4a8], 0
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
mov ecx, dword [ebp - 0x4a8]
mov dword [eax], ecx
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x1000a0f6
push 2
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 0
je 0x1000a0f6
mov dword [ebp - 0x7c8], 1
jmp 0x1000a0fd
and dword [ebp - 0x7c8], 0
cmp dword [ebp - 0x7c8], 0x6982
jge 0x1000a115
mov dword [ebp - 0x7d0], 1
jmp 0x1000a11c
and dword [ebp - 0x7d0], 0
mov esi, dword [ebp - 0xbb0]
push 0
lea ecx, [ebp - 0x3b8]
call fcn.10018bff
cmp esi, dword [eax]
jle 0x1000a13f
mov dword [ebp - 0x4b0], 1
jmp 0x1000a146
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
sub eax, 8
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xa90]
jl 0x1000a169
mov dword [ebp - 0x4b8], 1
jmp 0x1000a170
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x7d0]
cmp eax, dword [ebp - 0x4b8]
jl 0x1000a18a
mov dword [ebp - 0x7d8], 1
jmp 0x1000a191
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x4c0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4c0]
mov dword [ebp + eax - 0xa90], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b8]
call fcn.10018be3
mov dword [ebp - 0xf90], 0xfffffffe
mov dword [ebp - 0x17c], 0x7013
mov dword [ebp - 0x160], 0x94d03572
mov dword [ebp - 0x4f8], 1
mov dword [ebp - 0xbd0], 0x244c3f4
mov dword [ebp - 0x818], 0xffffffff
push 1
lea ecx, [ebp - 0xacc]
call fcn.10018b61
mov dword [ebp - 4], 4
mov dword [ebp - 0x1e8], 0x6ee3e4f6
mov dword [ebp - 0x808], 0x3db47dc4
mov dword [ebp - 0x88], 0
jmp 0x1000a23b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000a25d
push dword [ebp - 0x88]
lea ecx, [ebp - 0xacc]
call fcn.10018bff
mov dword [eax], 0x184e5a94
jmp 0x1000a22e
mov dword [ebp - 0x88], 0
jmp 0x1000a276
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000a292
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xcc0], 1
jmp 0x1000a269
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0xbb8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xbc0], eax
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0xbb8]
cmp eax, dword [ebp - 0xbc0]
jge 0x1000a2dd
mov dword [ebp - 0x4d8], 1
jmp 0x1000a2e4
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x818], 0
jne 0x1000a2ff
mov eax, 0x8339
test eax, eax
jne 0x1000a2ff
and dword [ebp - 0xbc8], 0
jmp 0x1000a309
mov dword [ebp - 0xbc8], 1
push 9
pop eax
test eax, eax
je 0x1000a325
mov eax, 0x465392fb
test eax, eax
je 0x1000a325
mov dword [ebp - 0x7e0], 1
jmp 0x1000a32c
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
dec eax
jne 0x1000a347
cmp dword [ebp - 0x808], 0
jne 0x1000a347
and dword [ebp - 0x4c8], 0
jmp 0x1000a351
mov dword [ebp - 0x4c8], 1
cmp dword [ebp - 0x4c8], 3
jbe 0x1000a366
mov dword [ebp - 0x7e8], 1
jmp 0x1000a36d
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x7e8], eax
jne 0x1000a387
mov dword [ebp - 0x4d0], 1
jmp 0x1000a38e
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0xbd0]
cmp eax, dword [ebp - 0x4d0]
jne 0x1000a3a8
mov dword [ebp - 0x7f0], 1
jmp 0x1000a3af
and dword [ebp - 0x7f0], 0
cmp dword [ebp - 0x7f0], 1
jae 0x1000a3c4
mov dword [ebp - 0x7f8], 1
jmp 0x1000a3cb
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x4d8]
cmp eax, dword [ebp - 0x7f8]
jle 0x1000a3eb
cmp dword [ebp - 0x160], 0
jne 0x1000a3eb
and dword [ebp - 0xbd8], 0
jmp 0x1000a3f5
mov dword [ebp - 0xbd8], 1
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x4f8]
cmp eax, 0x33df
jg 0x1000a414
mov dword [ebp - 0x4e0], 1
jmp 0x1000a41b
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x881f6c98
jne 0x1000a433
mov dword [ebp - 0x800], 1
jmp 0x1000a43a
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x800], eax
je 0x1000a454
mov dword [ebp - 0x4e8], 1
jmp 0x1000a45b
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0xffff
jb 0x1000a473
mov dword [ebp - 0x4f0], 1
jmp 0x1000a47a
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x4f0], eax
jge 0x1000a49d
mov eax, 0x308ddd7a
test eax, eax
je 0x1000a49d
mov dword [ebp - 0x810], 1
jmp 0x1000a4a4
and dword [ebp - 0x810], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcc0]
cmp dword [ebp - 0x810], eax
jg 0x1000a4c0
cmp dword [ebp - 0x4f8], 0
mov esi, dword [ebp - 0x17c]
push 0
lea ecx, [ebp - 0xacc]
call fcn.10018bff
sub esi, dword [eax]
je 0x1000a53a
mov dword [ebp - 0x160], 0
jmp 0x1000a4f0
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jge 0x1000a50f
push dword [ebp - 0x160]
lea ecx, [ebp - 0xacc]
call fcn.10018bff
or dword [eax], 0xffffffff
jmp 0x1000a4e3
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000a535
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
jmp 0x1000a724
push 2
lea ecx, [ebp - 0xc7c]
call fcn.10018b61
mov byte [ebp - 4], 5
mov dword [ebp - 0x500], 0xffffffff
mov dword [ebp - 0x508], 0xfffffff9
mov dword [ebp - 0x520], 1
mov dword [ebp - 0x528], 0x1b0f05ba
mov dword [ebp - 0xbe0], 0x2d8b6467
mov dword [ebp - 0x288], 0
jmp 0x1000a596
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x1000a5b8
push dword [ebp - 0x288]
lea ecx, [ebp - 0xc7c]
call fcn.10018bff
mov dword [eax], 9
jmp 0x1000a589
push 0
lea ecx, [ebp - 0xacc]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1000a650
cmp dword [ebp - 0x818], 1
jae 0x1000a5e3
mov dword [ebp - 0x820], 1
jmp 0x1000a5ea
and dword [ebp - 0x820], 0
push 1
lea ecx, [ebp - 0xc7c]
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
imul eax, dword [ebp - 0x820]
mov dword [ebp - 0x508], eax
cmp dword [ebp - 0x508], 0
jne 0x1000a627
mov dword [ebp - 0x828], 1
jmp 0x1000a62e
and dword [ebp - 0x828], 0
imul eax, dword [ebp - 0x828], 0xfffa
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xcc0]
jge 0x1000a650
and dword [ebp - 0x510], 0
jmp 0x1000a65a
mov dword [ebp - 0x510], 1
cmp dword [ebp - 0x510], 0xabb25a59
jne 0x1000a672
mov dword [ebp - 0x830], 1
jmp 0x1000a679
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0xca8a51d4
jne 0x1000a691
mov dword [ebp - 0x518], 1
jmp 0x1000a698
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0xef04e4ca
jne 0x1000a6b0
mov dword [ebp - 0x838], 1
jmp 0x1000a6b7
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x520], eax
mov esi, dword [ebp - 0x520]
push 1
lea ecx, [ebp - 0xc7c]
call fcn.10018bff
cmp dword [eax], esi
jne 0x1000a6e6
mov dword [ebp - 0x840], 1
jmp 0x1000a6ed
and dword [ebp - 0x840], 0
push 0
lea ecx, [ebp - 0xacc]
call fcn.10018bff
mov ecx, dword [ebp - 0x840]
imul ecx, dword [eax]
mov dword [ebp - 0x528], ecx
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0xbe0], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc7c]
call fcn.10018be3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xacc]
call fcn.10018be3
mov dword [ebp - 0x1f0], 0
jmp 0x1000a74c
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1000a768
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xdb0], 1
jmp 0x1000a73f
push 3
lea ecx, [ebp - 0x2e8]
call fcn.10018b61
mov dword [ebp - 4], 6
mov dword [ebp - 0x3c], 0xa394643c
mov dword [ebp - 0xbe8], 1
mov dword [ebp - 0x290], 0
jmp 0x1000a7a6
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1000a7c8
push dword [ebp - 0x290]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
mov dword [eax], 0xc93b
jmp 0x1000a799
mov dword [ebp - 0x3c], 2
jmp 0x1000a7d8
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1000a91e
mov dword [ebp - 0x850], 0
mov dword [ebp - 0xbf0], 0xa8628405
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
mov ecx, dword [ebp - 0x3c]
cmp dword [eax], ecx
jl 0x1000a817
mov dword [ebp - 0x848], 1
jmp 0x1000a81e
and dword [ebp - 0x848], 0
push 1
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push 1
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x2e8]
call fcn.10018bff
mov ecx, dword [ebp - 0xbe8]
cmp dword [eax], ecx
jge 0x1000a8b0
mov dword [ebp - 0x530], 1
jmp 0x1000a8b7
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x850], eax
mov eax, dword [ebp - 0x530]
add eax, 0x1650
cmp dword [ebp - 0x850], eax
jle 0x1000a8e2
mov dword [ebp - 0x538], 1
jmp 0x1000a8e9
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0xbf0], eax
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1000a919
push 0xe94
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItem]
jmp 0x1000a7d1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.10018be3
mov dword [ebp - 0x90], 0
jmp 0x1000a946
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x1000ae37
mov dword [ebp - 0x300], 6
mov dword [ebp - 0xfa0], 0xfffffffd
mov byte [ebp - 0x13c], 0
movzx eax, byte [ebp - 0x13c]
test eax, eax
je 0x1000a981
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1000a9a0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov dword [ebp - 0xc08], 1
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
push 3
lea ecx, [ebp - 0xcac]
call fcn.10018b61
mov dword [ebp - 4], 7
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x858], 0xfffffff6
mov dword [ebp - 0xbf8], 0xfffffffa
mov dword [ebp - 0x1f8], 0
jmp 0x1000a9ff
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x1000aa21
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0xcac]
call fcn.10018bff
mov dword [eax], 0x10c93b4e
jmp 0x1000a9f2
mov dword [ebp - 0x28], 2
jmp 0x1000aa31
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1000ad11
mov dword [ebp - 0x35c], 0x3a6c9cd4
push 1
lea ecx, [ebp - 0xdc8]
call fcn.10018b61
mov byte [ebp - 4], 8
mov dword [ebp - 0xb0], 0
jmp 0x1000aa6f
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1000aa8e
push dword [ebp - 0xb0]
lea ecx, [ebp - 0xdc8]
call fcn.10018bff
and dword [eax], 0
jmp 0x1000aa62
mov dword [ebp - 0xb0], 0
jmp 0x1000aaa7
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1000aac3
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1000], 0xfffffff9
jmp 0x1000aa9a
mov byte [ebp - 0x133], 0
movzx eax, byte [ebp - 0x133]
test eax, eax
je 0x1000aae6
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov dword [ebp - 0x540], eax
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10018bff
mov ecx, dword [ebp - 0x540]
mov dword [eax], ecx
cmp dword [ebp - 0x540], 0
jne 0x1000ab27
xor eax, eax
inc eax
jne 0x1000ab27
and dword [ebp - 0x860], 0
jmp 0x1000ab31
mov dword [ebp - 0x860], 1
mov eax, dword [ebp - 0x860]
add eax, 0xfff8
cmp eax, dword [ebp - 0x28]
jle 0x1000ab4d
mov dword [ebp - 0x548], 1
jmp 0x1000ab54
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x548], eax
jg 0x1000ab6b
mov dword [ebp - 0x868], 1
jmp 0x1000ab72
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x868]
jg 0x1000ab98
mov dword [ebp - 0x550], 1
jmp 0x1000ab9f
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0x4255ebda
je 0x1000abb7
mov dword [ebp - 0x870], 1
jmp 0x1000abbe
and dword [ebp - 0x870], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xcac]
call fcn.10018bff
mov dword [ebp - 0x558], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0xcac]
call fcn.10018bff
mov ecx, dword [ebp - 0x558]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x870]
mov ecx, dword [ebp - 0x558]
cmp dword [ecx], eax
jne 0x1000ac09
mov dword [ebp - 0x878], 1
jmp 0x1000ac10
and dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x878], eax
jle 0x1000ac27
mov dword [ebp - 0x560], 1
jmp 0x1000ac2e
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x560], eax
jne 0x1000ac45
mov dword [ebp - 0x880], 1
jmp 0x1000ac4c
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x880]
cmp eax, dword [ebp - 0x28]
jle 0x1000ac66
mov dword [ebp - 0x568], 1
jmp 0x1000ac6d
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0x4886
jg 0x1000ac85
mov dword [ebp - 0x888], 1
jmp 0x1000ac8c
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x888], eax
jne 0x1000aca3
mov dword [ebp - 0x570], 1
jmp 0x1000acaa
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 1
jle 0x1000acbf
mov dword [ebp - 0x890], 1
jmp 0x1000acc6
and dword [ebp - 0x890], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1000]
cmp dword [ebp - 0x890], eax
jg 0x1000ace6
mov dword [ebp - 0x578], 1
jmp 0x1000aced
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x578]
mov dword [ebp - 0xbf8], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xdc8]
call fcn.10018be3
jmp 0x1000aa2a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcac]
call fcn.10018be3
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0xdb0]
cmp dword [ebp - 0x90], eax
jg 0x1000ad41
mov dword [ebp - 0x898], 1
jmp 0x1000ad48
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x898], eax
jl 0x1000ad62
mov dword [ebp - 0xc00], 1
jmp 0x1000ad69
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x300]
dec ecx
cmp dword [ebp + eax*4 - 0xdb0], ecx
jl 0x1000ad8b
mov dword [ebp - 0x580], 1
jmp 0x1000ad92
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0xffff
jb 0x1000adaa
mov dword [ebp - 0x8a0], 1
jmp 0x1000adb1
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
add eax, 0x44421408
cmp eax, 4
jl 0x1000adcd
mov dword [ebp - 0x588], 1
jmp 0x1000add4
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
je 0x1000adfe
mov eax, 0x5fa2ef70
test eax, eax
je 0x1000adfe
mov dword [ebp - 0x8d0], 1
jmp 0x1000ae05
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x8d0], eax
jne 0x1000ae1f
mov dword [ebp - 0x590], 1
jmp 0x1000ae26
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0xc08], eax
jmp 0x1000a939
push 4
lea ecx, [ebp - 0xab4]
call fcn.10018b61
mov dword [ebp - 4], 9
mov dword [ebp - 0xf0], 0xa32b1cec
mov dword [ebp - 0x298], 0
jmp 0x1000ae6e
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x1000ae8d
push dword [ebp - 0x298]
lea ecx, [ebp - 0xab4]
call fcn.10018bff
and dword [eax], 0
jmp 0x1000ae61
mov dword [ebp - 0xf0], 0
jmp 0x1000aea6
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jg 0x1000b10e
or dword [ebp - 0xcf0], 0xffffffff
or dword [ebp - 0xcec], 0xffffffff
or dword [ebp - 0xce8], 0xffffffff
or dword [ebp - 0xce4], 0xffffffff
lea ecx, [ebp - 0x375]
call fcn.10008ea3
push eax
lea eax, [ebp - 0xce0]
push eax
lea eax, [ebp - 0xcf0]
push eax
lea ecx, [ebp - 0x101c]
call fcn.10018c0e
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xaf0]
call fcn.10018bbd
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x598], 0xfdad5a51
mov dword [ebp - 0x2a0], 0
jmp 0x1000af2b
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 3
jge 0x1000af47
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xfe8], 3
jmp 0x1000af1e
push 0
lea ecx, [ebp - 0xaf0]
call fcn.10018bff
mov dword [eax], 3
jmp 0x1000af80
push 0
lea ecx, [ebp - 0xaf0]
call fcn.10018bff
mov dword [ebp - 0x8d8], eax
mov eax, dword [ebp - 0x8d8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x8d8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xaf0]
call fcn.10018bff
cmp dword [eax], 0
jl 0x1000b0d2
mov dword [ebp - 0x1bc], 0x2eaa29c1
mov dword [ebp - 0x1bc], 0
jmp 0x1000afb9
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jg 0x1000b05e
mov dword [ebp - 0x204], 0
jmp 0x1000afdf
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x1000affb
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0xc20], 0
jmp 0x1000afd2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc20], 0
jmp 0x1000b029
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc20]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc20], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc20], 4
jge 0x1000b059
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0xc20]
lea ecx, [ebp - 0xab4]
call fcn.10018bff
mov dword [eax], 0xacf25792
jmp 0x1000b00e
jmp 0x1000afac
push 0
lea ecx, [ebp - 0xaf0]
call fcn.10018bff
push dword [eax]
lea ecx, [ebp - 0xab4]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1000b0a4
push 1
lea ecx, [ebp - 0xaf0]
call fcn.10018bff
mov eax, dword [eax]
mov dword [ebp - 0x598], eax
cmp dword [ebp - 0x598], 0
jne 0x1000b0a4
and dword [ebp - 0x350], 0
jmp 0x1000b0ae
mov dword [ebp - 0x350], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x350]
mov dword [ebp + eax - 0xfe8], ecx
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x1bc], eax
jmp 0x1000af5c
push dword [ebp - 0xf0]
lea ecx, [ebp - 0xab4]
call fcn.10018bff
mov esi, eax
push dword [ebp - 0xf0]
lea ecx, [ebp - 0xab4]
call fcn.10018bff
mov ecx, dword [esi]
mov dword [eax], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xaf0]
call fcn.10018be3
jmp 0x1000ae99
mov dword [ebp - 0xf0], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xab4]
call fcn.10018be3
mov dword [ebp - 0xf8], 0
jmp 0x1000b140
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jge 0x1000b15c
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0xdb0], 0x6d0811fc
jmp 0x1000b133
mov dword [ebp - 0x184], 0x251d69f4
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x184], 0xffffffe6
jmp 0x1000b189
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x18
jl 0x1000b1d8
mov dword [ebp - 0x1a4], 0xccb03629
mov dword [ebp - 0x1a4], 8
jmp 0x1000b1b5
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xfffffff2
je 0x1000b1d6
mov dword [ebp - 0xc10], 0xcb61
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xc10], eax
jmp 0x1000b1a8
jmp 0x1000b17c
mov dword [ebp - 0x18c], 0x251d69f4
mov dword [ebp - 0x18c], 0
mov dword [ebp - 0x18c], 0xffffffe6
jmp 0x1000b205
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x18
jl 0x1000b254
mov dword [ebp - 0x1b4], 0xccb03629
mov dword [ebp - 0x1b4], 8
jmp 0x1000b231
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xfffffff2
je 0x1000b252
mov dword [ebp - 0xc3c], 0xcb61
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xc3c], eax
jmp 0x1000b224
jmp 0x1000b1f8
mov dword [ebp - 0x14], 0x17ca0029
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x5b8], 0xfffffffd
push 3
lea ecx, [ebp - 0x3a0]
call fcn.10018b61
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfa8], 6
mov dword [ebp - 0xfb0], 1
mov dword [ebp - 0x264], 0
jmp 0x1000b2ba
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1000b2dc
push dword [ebp - 0x264]
lea ecx, [ebp - 0x3a0]
call fcn.10018bff
mov dword [eax], 0x4361
jmp 0x1000b2ad
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x98], eax
jge 0x1000b302
mov eax, 0xa520
test eax, eax
jne 0x1000b311
cmp dword [ebp - 0x14], 0
jne 0x1000b311
and dword [ebp - 0x8e0], 0
jmp 0x1000b31b
mov dword [ebp - 0x8e0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x8e0], eax
jne 0x1000b332
mov dword [ebp - 0x5a0], 1
jmp 0x1000b339
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x5a0], eax
jge 0x1000b350
mov dword [ebp - 0x8e8], 1
jmp 0x1000b357
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x8e8]
neg eax
cmp dword [ebp - 0x14], eax
jge 0x1000b373
mov dword [ebp - 0x5a8], 1
jmp 0x1000b37a
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x5a8]
jne 0x1000b391
mov dword [ebp - 0xafc], 1
jmp 0x1000b398
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf8c], eax
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 2
jmp 0x1000b3c0
cmp dword [ebp - 0x14], 0
jl 0x1000b734
mov dword [ebp - 0x8f8], 0xf0adc109
mov dword [ebp - 0x5c8], 0xd978029
mov dword [ebp - 0xb70], 0xe360abed
mov dword [ebp - 0xe70], 0xce5f1497
push 3
lea ecx, [ebp - 0xdec]
call fcn.10018b61
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xf48], 1
mov dword [ebp - 0xc8], 0
jmp 0x1000b426
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1000b448
push dword [ebp - 0xc8]
lea ecx, [ebp - 0xdec]
call fcn.10018bff
mov dword [eax], 0x3fa8726a
jmp 0x1000b419
mov dword [ebp - 0xc8], 0
jmp 0x1000b461
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x1000b47d
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xb04], 0x9f7e48ff
jmp 0x1000b454
mov dword [ebp - 0x98], 0
jmp 0x1000b496
cmp dword [ebp - 0x98], 2
jg 0x1000b555
mov dword [ebp - 0x5b0], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x3a0]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1000b53a
push 1
lea ecx, [ebp - 0x3a0]
call fcn.10018bff
cmp dword [eax], 0
jne 0x1000b583
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3a0]
call fcn.10018be3
mov dword [ebp - 0x194], 0x251d69f4
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x194], 0xffffffe6
jmp 0x1000b770
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0x18
jl 0x1000b7bf
mov dword [ebp - 0x1ac], 0xccb03629
mov dword [ebp - 0x1ac], 8
jmp 0x1000b79c
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xfffffff2
je 0x1000b7bd
mov dword [ebp - 0xb0c], 0xcb61
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xb0c], eax
jmp 0x1000b78f
jmp 0x1000b763
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x360], 0
push 3
lea ecx, [ebp - 0xd38]
call fcn.10018b61
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x294], 0
jmp 0x1000b7fd
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 3
jge 0x1000b81f
push dword [ebp - 0x294]
lea ecx, [ebp - 0xd38]
call fcn.10018bff
mov dword [eax], 0x1f6f49c2
jmp 0x1000b7f0
mov byte [ebp - 0x13b], 0
movzx eax, byte [ebp - 0x13b]
test eax, eax
je 0x1000b85f
push 0
push 0xbd1
push 0
push 0
push 0x2481
push 0x8db
push 0x1993
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [ebp - 0x54], 0xffffffe2
jmp 0x1000b86f
cmp dword [ebp - 0x54], 0xffffffea
je 0x1000bbf3