Function at 0x1000e014
Capabilities:
Accept command line arguments
Allocate thread local storage
Get session user name
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13ec
call fcn.1008cb20
push esi
push edi
mov dword [ebp - 0xb5c], 0xffffffff
mov dword [ebp - 0x2fc], 0xf18ee85e
mov dword [ebp - 0xf0], 0x51acae7b
mov dword [ebp - 0x3e4], 0xb903
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x2c], 0
jmp 0x1000e065
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000e07b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x320], 0xf0ed
jmp 0x1000e05e
mov dword [ebp - 0x2c], 0
jmp 0x1000e08b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000e0a1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xdf0], 0xffffffff
jmp 0x1000e084
mov dword [ebp - 0x2c], 0
jmp 0x1000e0b1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000e0c7
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x138c], 0xffffffff
jmp 0x1000e0aa
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x320]
cmp dword [ebp + eax - 0x320], ecx
jge 0x1000e31d
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
sub eax, dword [ebp - 0x2fc]
jne 0x1000e119
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0
jne 0x1000e119
and dword [ebp - 0x5c4], 0
jmp 0x1000e123
mov dword [ebp - 0x5c4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x5c4], eax
jge 0x1000e144
mov dword [ebp - 0xb34], 1
jmp 0x1000e14b
and dword [ebp - 0xb34], 0
imul eax, dword [ebp - 0xb34], 0x5bed
test eax, eax
jne 0x1000e169
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0
je 0x1000e185
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0
je 0x1000e185
mov dword [ebp - 0xc08], 1
jmp 0x1000e18c
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x1200], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e4]
sub ecx, dword [ebp + eax - 0x320]
mov dword [ebp - 0xb3c], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb3c]
mov dword [ebp + eax - 0xdf0], ecx
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0xb3c], eax
jg 0x1000e1de
mov dword [ebp - 0xb44], 1
jmp 0x1000e1e5
and dword [ebp - 0xb44], 0
cmp dword [ebp - 0xb44], 0xe402095d
jb 0x1000e1fd
mov dword [ebp - 0xb4c], 1
jmp 0x1000e204
and dword [ebp - 0xb4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0xb4c], eax
jle 0x1000e225
mov dword [ebp - 0xb54], 1
jmp 0x1000e22c
and dword [ebp - 0xb54], 0
cmp dword [ebp - 0xb54], 0x78c0
jne 0x1000e244
mov dword [ebp - 0xb64], 1
jmp 0x1000e24b
and dword [ebp - 0xb64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xb5c]
cmp eax, dword [ebp - 0xb64]
jl 0x1000e278
mov dword [ebp - 0xb6c], 1
jmp 0x1000e27f
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0xb6c], eax
jne 0x1000e299
mov dword [ebp - 0x9d8], 1
jmp 0x1000e2a0
and dword [ebp - 0x9d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x9d8], eax
jg 0x1000e2c1
mov dword [ebp - 0x444], 1
jmp 0x1000e2c8
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x320]
cmp dword [ebp - 0x444], eax
jge 0x1000e2e9
mov dword [ebp - 0x324], 1
jmp 0x1000e2f0
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x138c], ecx
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x324], eax
jl 0x1000e31d
mov dword [ebp - 0xa6c], 1
jmp 0x1000e324
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x1090], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0x6f4e
jle 0x1000e35b
mov dword [ebp - 0x44c], 1
jmp 0x1000e362
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
add eax, 0x50e1
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x320]
jle 0x1000e406
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1000e3a2
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
mov dword [ebp - 0xf0], 1
jmp 0x1000e3bb
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1000e404
mov dword [ebp - 0x1c4], 2
jmp 0x1000e3dd
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x1000e402
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xf0]
mov eax, dword [ebp + eax*4 - 0xdf0]
mov dword [ebp + ecx*4 - 0xdf0], eax
jmp 0x1000e3d0
jmp 0x1000e3ae
jmp 0x1000e420
mov byte [ebp - 0x11c], 0
movzx eax, byte [ebp - 0x11c]
test eax, eax
je 0x1000e420
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x438], 0xfffffffd
mov dword [ebp - 0xa8c], 0xffffffff
mov dword [ebp - 0x1098], 8
mov dword [ebp - 0xdbc], 0x801fc3ee
mov dword [ebp - 0x10a0], 0xbef7d651
mov dword [ebp - 0x10a8], 0xffffffff
mov dword [ebp - 0xa74], 0xffffffff
mov dword [ebp - 0x1314], 1
mov dword [ebp - 0x1310], 1
mov dword [ebp - 0x130c], 1
mov dword [ebp - 0x1308], 1
mov dword [ebp - 0x3ec], 0xf39c
mov dword [ebp - 0x3f4], 0xda8d
mov dword [ebp - 0x10b0], 0xffffffff
mov dword [ebp - 0xdc4], 5
mov dword [ebp - 0xdac], 0xfffffffd
mov dword [ebp - 0x10b8], 1
mov dword [ebp - 0xa7c], 0xa93f0451
mov dword [ebp - 0xdb4], 0xb9d37639
mov dword [ebp - 0x18], 0
jmp 0x1000e4f8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000e50e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xf0c], 0xffffffff
jmp 0x1000e4f1
mov dword [ebp - 0x18], 0
jmp 0x1000e51e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000e534
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x13d4], 5
jmp 0x1000e517
mov dword [ebp - 0x18], 0
jmp 0x1000e544
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000e55a
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1250], 0xfffffffe
jmp 0x1000e53d
mov eax, dword [ebp - 0xa74]
dec eax
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x454], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x454]
mov dword [ebp + eax - 0x13d4], ecx
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 0x3f4]
dec eax
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0xd9c]
cmp eax, dword [ebp - 0xda4]
jle 0x1000e5d2
mov dword [ebp - 0xa94], 1
jmp 0x1000e5d9
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa7c]
inc eax
mov dword [ebp - 0xa7c], eax
mov eax, dword [ebp - 0xdac]
mov dword [ebp - 0x10c0], eax
cmp dword [ebp - 0xdb4], 0
je 0x1000e610
cmp dword [ebp - 0xdbc], 0
je 0x1000e610
mov dword [ebp - 0x45c], 1
jmp 0x1000e617
and dword [ebp - 0x45c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x45c]
sub ecx, dword [ebp + eax - 0xf0c]
cmp dword [ebp - 0x438], 0xc114
jge 0x1000e642
mov dword [ebp - 0xa84], 1
jmp 0x1000e649
and dword [ebp - 0xa84], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1250]
cmp dword [ebp - 0xa84], eax
je 0x1000e669
mov dword [ebp - 0x464], 1
jmp 0x1000e670
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0xa8c], eax
cmp dword [ebp - 0xa8c], 0x61e33ecd
jg 0x1000e694
mov dword [ebp - 0x46c], 1
jmp 0x1000e69b
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x438]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xf0c]
mov ecx, dword [ebp - 0x438]
add ecx, dword [ebp - 0x46c]
sub eax, ecx
cmp dword [ebp - 0xa94], eax
jg 0x1000e6d1
mov dword [ebp - 0x474], 1
jmp 0x1000e6d8
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xdc4]
cmp dword [ebp - 0x474], eax
jg 0x1000e6f2
mov dword [ebp - 0xa9c], 1
jmp 0x1000e6f9
and dword [ebp - 0xa9c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xa9c]
mov dword [ebp + eax - 0x1250], ecx
mov dword [ebp - 0x2f4], 0
jmp 0x1000e724
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x1000e740
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0xef4], 0x8bbca631
jmp 0x1000e717
mov dword [ebp - 0x1fc], 0
jmp 0x1000e759
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jg 0x1000e7a3
mov dword [ebp - 0x1c8], 0x265ab3e9
mov dword [ebp - 0x1c8], 0
jmp 0x1000e785
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x1000e7a1
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xef4], 0x624cdb8f
jmp 0x1000e778
jmp 0x1000e74c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xef4], 0x77ab3921
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x284], 0
jmp 0x1000e7d7
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1000e7f3
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xf14], 0x8bbca631
jmp 0x1000e7ca
mov dword [ebp - 0x204], 0
jmp 0x1000e80c
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jg 0x1000e856
mov dword [ebp - 0x1ec], 0x265ab3e9
mov dword [ebp - 0x1ec], 0
jmp 0x1000e838
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jge 0x1000e854
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xf14], 0x624cdb8f
jmp 0x1000e82b
jmp 0x1000e7ff
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf14], 0x77ab3921
mov dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x2c8], 0
jmp 0x1000e88a
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x1000e8a6
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xf04], 0x8bbca631
jmp 0x1000e87d
mov dword [ebp - 0x20c], 0
jmp 0x1000e8bf
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jg 0x1000e909
mov dword [ebp - 0x1d0], 0x265ab3e9
mov dword [ebp - 0x1d0], 0
jmp 0x1000e8eb
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x1000e907
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xf04], 0x624cdb8f
jmp 0x1000e8de
jmp 0x1000e8b2
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf04], 0x77ab3921
mov dword [ebp - 0x10c8], 5
mov dword [ebp - 0xfd8], 0x4c46983c
mov dword [ebp - 0xfd4], 0x4c46983c
mov dword [ebp - 0xfd0], 0x4c46983c
mov dword [ebp - 0xfcc], 0x4c46983c
mov dword [ebp - 0x3c], 0
jmp 0x1000e95c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1000e972
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xe88], 0xa8eac8b
jmp 0x1000e955
mov dword [ebp - 0x3c], 0
jmp 0x1000e982
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1000e998
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xbbc], 0
jmp 0x1000e97b
mov dword [ebp - 0x3c], 0
jmp 0x1000e9a8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1000e9be
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x1140], 0x8e85a7b0
jmp 0x1000e9a1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xbbc], 3
jmp 0x1000e9ec
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbbc]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xbbc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xbbc], 0
jl 0x1000ecec
mov dword [ebp - 0x128], 0xfffffff6
mov dword [ebp - 0x47c], 0x9fe57f6c
mov dword [ebp - 0x3e8], 6
mov dword [ebp - 0x28c], 0
jmp 0x1000ea37
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x1000ea53
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0x1134], 0xfffffff8
jmp 0x1000ea2a
mov dword [ebp - 0x128], 3
jmp 0x1000ea6c
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1000eccb
mov dword [ebp - 0x10d0], 0xffffffff
mov dword [ebp - 0x10d8], 0xffffffff
mov dword [ebp - 0x10e0], 0x56e74e80
mov dword [ebp - 0x10e8], 0xfffffffc
mov dword [ebp - 0x3a8], 0x7ef2
mov dword [ebp - 0x214], 0
jmp 0x1000eac4
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1000eae0
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x10f0], 0
jmp 0x1000eab7
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x1000eb1b
push 0x2421
push 0
push 0
push 0x18e1
push 0x20a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbbc]
mov eax, dword [ebp + eax*4 - 0xe88]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0xaa4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xaa4]
mov dword [ebp + eax - 0x1134], ecx
mov eax, dword [ebp - 0x3a8]
mov ecx, dword [ebp - 0xaa4]
mov edx, dword [ebp - 0x3a8]
inc edx
mov dword [ebp - 0x3a8], edx
cmp eax, ecx
jge 0x1000ec08
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x3e8]
push 4
pop edx
imul edx, edx, 3
mov edx, dword [ebp + edx - 0xbbc]
add ecx, dword [ebp + edx*4 - 0xe88]
cmp dword [ebp + eax*4 - 0xe88], ecx
je 0x1000ebaa
mov dword [ebp - 0x484], 1
jmp 0x1000ebb1
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xfffa
jae 0x1000ebc9
mov dword [ebp - 0xaac], 1
jmp 0x1000ebd0
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0xaac]
sub eax, 0x694a2199
neg eax
mov dword [ebp - 0x48c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x48c]
mov dword [ebp + eax - 0xfd8], ecx
cmp dword [ebp - 0x48c], 0
je 0x1000ec08
and dword [ebp - 0xab4], 0
jmp 0x1000ec12
mov dword [ebp - 0xab4], 1
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0xab4], eax
jne 0x1000ec2c
mov dword [ebp - 0x494], 1
jmp 0x1000ec33
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x494], eax
jle 0x1000ec4d
mov dword [ebp - 0xabc], 1
jmp 0x1000ec54
and dword [ebp - 0xabc], 0
cmp dword [ebp - 0xabc], 0x56bf5ee8
jle 0x1000ec6c
mov dword [ebp - 0x49c], 1
jmp 0x1000ec73
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x128]
mov eax, dword [ebp + eax*4 - 0xe88]
cmp eax, dword [ebp - 0x49c]
jge 0x1000ec94
mov dword [ebp - 0x330], 1
jmp 0x1000ec9b
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbbc]
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xe88], ecx
mov eax, dword [ebp - 0x330]
sub eax, 0x34219488
mov dword [ebp - 0x3e8], eax
jmp 0x1000ea5f
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbbc]
cmp dword [ebp + eax*4 - 0xe88], 0
je 0x1000ece7
jmp 0x1000e9d1
jmp 0x1000e9d1
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xbbc]
mov dword [ebp + ecx - 0x1140], eax
mov dword [ebp - 0x10f8], 5
mov dword [ebp - 0xf78], 0x4c46983c
mov dword [ebp - 0xf74], 0x4c46983c
mov dword [ebp - 0xf70], 0x4c46983c
mov dword [ebp - 0xf6c], 0x4c46983c
mov dword [ebp - 0x34], 0
jmp 0x1000ed48
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1000ed5e
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xea8], 0xa8eac8b
jmp 0x1000ed41
mov dword [ebp - 0x34], 0
jmp 0x1000ed6e
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1000ed84
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xbd4], 0
jmp 0x1000ed67
mov dword [ebp - 0x34], 0
jmp 0x1000ed94
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1000edaa
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x1158], 0x8e85a7b0
jmp 0x1000ed8d
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xbd4], 3
jmp 0x1000edd8
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xbd4], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xbd4], 0
jl 0x1000f0d8
mov dword [ebp - 0x130], 0xfffffff6
mov dword [ebp - 0xac4], 0x9fe57f6c
mov dword [ebp - 0x340], 6
mov dword [ebp - 0x2e8], 0
jmp 0x1000ee23
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 2
jge 0x1000ee3f
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0x114c], 0xfffffff8
jmp 0x1000ee16
mov dword [ebp - 0x130], 3
jmp 0x1000ee58
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x1000f0b7
mov dword [ebp - 0x1100], 0xffffffff
mov dword [ebp - 0x1108], 0xffffffff
mov dword [ebp - 0x1110], 0x56e74e80
mov dword [ebp - 0x1118], 0xfffffffc
mov dword [ebp - 0x338], 0x7ef2
mov dword [ebp - 0x21c], 0
jmp 0x1000eeb0
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x1000eecc
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x1120], 0
jmp 0x1000eea3
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x1000ef07
push 0x2421
push 0
push 0
push 0x18e1
push 0x20a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
mov eax, dword [ebp + eax*4 - 0xea8]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0xac4]
mov dword [ebp - 0x4a4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0x114c], ecx
mov eax, dword [ebp - 0x338]
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [ebp - 0x338]
inc edx
mov dword [ebp - 0x338], edx
cmp eax, ecx
jge 0x1000eff4
mov eax, dword [ebp - 0x130]
mov ecx, dword [ebp - 0x340]
push 4
pop edx
imul edx, edx, 3
mov edx, dword [ebp + edx - 0xbd4]
add ecx, dword [ebp + edx*4 - 0xea8]
cmp dword [ebp + eax*4 - 0xea8], ecx
je 0x1000ef96
mov dword [ebp - 0xacc], 1
jmp 0x1000ef9d
and dword [ebp - 0xacc], 0
cmp dword [ebp - 0xacc], 0xfffa
jae 0x1000efb5
mov dword [ebp - 0x4ac], 1
jmp 0x1000efbc
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
sub eax, 0x694a2199
neg eax
mov dword [ebp - 0xad4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xad4]
mov dword [ebp + eax - 0xf78], ecx
cmp dword [ebp - 0xad4], 0
je 0x1000eff4
and dword [ebp - 0x4b4], 0
jmp 0x1000effe
mov dword [ebp - 0x4b4], 1
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x4b4], eax
jne 0x1000f018
mov dword [ebp - 0xadc], 1
jmp 0x1000f01f
and dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0xadc], eax
jle 0x1000f039
mov dword [ebp - 0x4bc], 1
jmp 0x1000f040
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0x56bf5ee8
jle 0x1000f058
mov dword [ebp - 0xae4], 1
jmp 0x1000f05f
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x130]
mov eax, dword [ebp + eax*4 - 0xea8]
cmp eax, dword [ebp - 0xae4]
jge 0x1000f080
mov dword [ebp - 0x3b0], 1
jmp 0x1000f087
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp + eax*4 - 0xea8], ecx
mov eax, dword [ebp - 0x3b0]
sub eax, 0x34219488
mov dword [ebp - 0x340], eax
jmp 0x1000ee4b
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp + eax*4 - 0xea8], 0
je 0x1000f0d3
jmp 0x1000edbd
jmp 0x1000edbd
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xbd4]
mov dword [ebp + ecx - 0x1158], eax
mov dword [ebp - 0x4c], 0x2b1c
mov dword [ebp - 0xe8], 0x9d81479b
mov dword [ebp - 0x138], 0xfffffff7
mov dword [ebp - 0x294], 0
jmp 0x1000f126
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jge 0x1000f142
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x140], 0x145c1747
jmp 0x1000f119
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1000f15f
push 0xf67
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x4c], 0x8f69f7fd
jne 0x1000f174
mov dword [ebp - 0x4d4], 1
jmp 0x1000f17b
and dword [ebp - 0x4d4], 0
cmp dword [ebp - 0x4c], 0x89a5
jne 0x1000f190
mov dword [ebp - 0x4c4], 1
jmp 0x1000f197
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
imul eax, dword [ebp - 0xe8]
mov dword [ebp - 0xaec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaec]
mov dword [ebp + eax - 0x140], ecx
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0xaec], eax
jg 0x1000f1d4
mov dword [ebp - 0x4cc], 1
jmp 0x1000f1db
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4cc], eax
jne 0x1000f1f2
mov dword [ebp - 0xdcc], 1
jmp 0x1000f1f9
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1128], eax
cmp dword [ebp - 0x4c], 0x829ed890
jbe 0x1000f21a
mov dword [ebp - 0xdd4], 1
jmp 0x1000f221
and dword [ebp - 0xdd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1210], eax
cmp dword [ebp - 0xe8], 0
je 0x1000f252
mov dword [ebp - 0xaf4], 1
jmp 0x1000f259
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0xaf4]
sub eax, dword [ebp - 0xe8]
mov dword [ebp - 0x138], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x4d4], eax
je 0x1000f285
mov dword [ebp - 0xafc], 1
jmp 0x1000f28c
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0xafc]
jne 0x1000f2b6
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp + ecx - 0x140], eax
jmp 0x1000f395
mov dword [ebp - 0x4c], 0
jmp 0x1000f2c6
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1000f395
mov dword [ebp - 0x224], 0
jmp 0x1000f2e9
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x1000f305
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xde4], 8
jmp 0x1000f2dc
mov dword [ebp - 0xe8], 0
jmp 0x1000f31e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0
jg 0x1000f390
mov dword [ebp - 0x138], 0
jmp 0x1000f340
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jg 0x1000f37f
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x140]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0xddc]
mov dword [ebp + eax*4 - 0x140], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xde4], 1
jmp 0x1000f333
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x140], 0
je 0x1000f38e
jmp 0x1000f311
jmp 0x1000f311
jmp 0x1000f2bf
mov dword [ebp - 0x54], 0x2b1c
mov dword [ebp - 0xec], 0x9d81479b
mov dword [ebp - 0x148], 0xfffffff7
mov dword [ebp - 0x2d0], 0
jmp 0x1000f3c9
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jge 0x1000f3e5
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0x150], 0x145c1747
jmp 0x1000f3bc
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x1000f402
push 0xf67
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x54], 0x8f69f7fd
jne 0x1000f417
mov dword [ebp - 0x4ec], 1
jmp 0x1000f41e
and dword [ebp - 0x4ec], 0
cmp dword [ebp - 0x54], 0x89a5
jne 0x1000f433
mov dword [ebp - 0x4dc], 1
jmp 0x1000f43a
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
imul eax, dword [ebp - 0xec]
mov dword [ebp - 0xb04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb04]
mov dword [ebp + eax - 0x150], ecx
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xb04], eax
jg 0x1000f477
mov dword [ebp - 0x4e4], 1
jmp 0x1000f47e
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4e4], eax
jne 0x1000f495
mov dword [ebp - 0xe28], 1
jmp 0x1000f49c
and dword [ebp - 0xe28], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1218], eax
cmp dword [ebp - 0x54], 0x829ed890
jbe 0x1000f4bd
mov dword [ebp - 0xe30], 1
jmp 0x1000f4c4
and dword [ebp - 0xe30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x150]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1228], eax
cmp dword [ebp - 0xec], 0
je 0x1000f4f5
mov dword [ebp - 0xb0c], 1
jmp 0x1000f4fc
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0xb0c]
sub eax, dword [ebp - 0xec]
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x4ec], eax
je 0x1000f528
mov dword [ebp - 0xb14], 1
jmp 0x1000f52f
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 0xb14]
jne 0x1000f559
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x150]
mov dword [ebp + ecx - 0x150], eax
jmp 0x1000f638
mov dword [ebp - 0x54], 0
jmp 0x1000f569
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jg 0x1000f638
mov dword [ebp - 0x22c], 0
jmp 0x1000f58c
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1000f5a8
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xe40], 8
jmp 0x1000f57f
mov dword [ebp - 0xec], 0
jmp 0x1000f5c1
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jg 0x1000f633
mov dword [ebp - 0x148], 0
jmp 0x1000f5e3
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jg 0x1000f622
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x150]
mov dword [ebp - 0xe38], eax
mov eax, dword [ebp - 0x148]
mov ecx, dword [ebp - 0xe38]
mov dword [ebp + eax*4 - 0x150], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe40], 1
jmp 0x1000f5d6
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x150], 0
je 0x1000f631
jmp 0x1000f5b4
jmp 0x1000f5b4
jmp 0x1000f562
mov dword [ebp - 0x1230], 5
mov dword [ebp - 0xfb8], 0x4c46983c
mov dword [ebp - 0xfb4], 0x4c46983c
mov dword [ebp - 0xfb0], 0x4c46983c
mov dword [ebp - 0xfac], 0x4c46983c
mov dword [ebp - 0x1c], 0
jmp 0x1000f67a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1000f690
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xec8], 0xa8eac8b
jmp 0x1000f673
mov dword [ebp - 0x1c], 0
jmp 0x1000f6a0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 4
jge 0x1000f6b6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb9c], 0
jmp 0x1000f699
mov dword [ebp - 0x1c], 0
jmp 0x1000f6c6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000f6dc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1170], 0x8e85a7b0
jmp 0x1000f6bf
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb9c], 3
jmp 0x1000f70a
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb9c]
dec eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xb9c], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb9c], 0
jl 0x1000fa0a
mov dword [ebp - 0x158], 0xfffffff6
mov dword [ebp - 0x4f4], 0x9fe57f6c
mov dword [ebp - 0x3b8], 6
mov dword [ebp - 0x29c], 0
jmp 0x1000f755
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 2
jge 0x1000f771
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1164], 0xfffffff8
jmp 0x1000f748
mov dword [ebp - 0x158], 3
jmp 0x1000f78a
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jl 0x1000f9e9
mov dword [ebp - 0x1238], 0xffffffff
mov dword [ebp - 0x1240], 0xffffffff
mov dword [ebp - 0x12b4], 0x56e74e80
mov dword [ebp - 0x12bc], 0xfffffffc
mov dword [ebp - 0x410], 0x7ef2
mov dword [ebp - 0x234], 0
jmp 0x1000f7e2
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x1000f7fe
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x12c4], 0
jmp 0x1000f7d5
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x1000f839
push 0x2421
push 0
push 0
push 0x18e1
push 0x20a3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetDIBits]
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb9c]
mov eax, dword [ebp + eax*4 - 0xec8]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xb1c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb1c]
mov dword [ebp + eax - 0x1164], ecx
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0xb1c]
mov edx, dword [ebp - 0x410]
inc edx
mov dword [ebp - 0x410], edx
cmp eax, ecx
jge 0x1000f926
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x3b8]
push 4
pop edx
imul edx, edx, 3
mov edx, dword [ebp + edx - 0xb9c]
add ecx, dword [ebp + edx*4 - 0xec8]
cmp dword [ebp + eax*4 - 0xec8], ecx
je 0x1000f8c8
mov dword [ebp - 0x4fc], 1
jmp 0x1000f8cf
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0xfffa
jae 0x1000f8e7
mov dword [ebp - 0xb24], 1
jmp 0x1000f8ee
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0xb24]
sub eax, 0x694a2199
neg eax
mov dword [ebp - 0xb2c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb2c]
mov dword [ebp + eax - 0xfb8], ecx
cmp dword [ebp - 0xb2c], 0
je 0x1000f926
and dword [ebp - 0x524], 0
jmp 0x1000f930
mov dword [ebp - 0x524], 1
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x524], eax
jne 0x1000f94a
mov dword [ebp - 0x51c], 1
jmp 0x1000f951
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x51c], eax
jle 0x1000f96b
mov dword [ebp - 0x510], 1
jmp 0x1000f972
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0x56bf5ee8
jle 0x1000f98a
mov dword [ebp - 0x844], 1
jmp 0x1000f991
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp + eax*4 - 0xec8]
cmp eax, dword [ebp - 0x844]
jge 0x1000f9b2
mov dword [ebp - 0x348], 1
jmp 0x1000f9b9
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb9c]
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0xec8], ecx
mov eax, dword [ebp - 0x348]
sub eax, 0x34219488
mov dword [ebp - 0x3b8], eax
jmp 0x1000f77d
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb9c]
cmp dword [ebp + eax*4 - 0xec8], 0
je 0x1000fa05
jmp 0x1000f6ef
jmp 0x1000f6ef
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0xb9c]
mov dword [ebp + ecx - 0x1170], eax
mov dword [ebp - 0xe48], 0x13638ecf
mov dword [ebp - 0x2f8], 0
jmp 0x1000fa47
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 3
jge 0x1000fa63
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x13a4], 0xfffffffa
jmp 0x1000fa3a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13a4]
mov dword [ebp - 0xe48], eax
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000faa4
push 0x20e2
push 0x504
push 0x5a1
push 0x23c5
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x350], 0xffff
mov dword [ebp - 0x3c0], 0x29c1464f
mov dword [ebp - 0xaa8], 0x2b483718
mov dword [ebp - 0x12cc], 0xacf25792
mov dword [ebp - 0x858], 0xffffffff
mov dword [ebp - 0x850], 0xffffffff
mov dword [ebp - 0x528], 0
mov dword [ebp - 0xbf4], 1
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0xbec], 1
mov dword [ebp - 0xbe8], 1
mov dword [ebp - 0x23c], 1
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x360], 0x88c5540f
mov dword [ebp - 0x12d4], 0
mov dword [ebp - 0x860], 0xd4644688
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x538], 0
mov dword [ebp - 0xe58], 0x9bd9
mov dword [ebp - 0xe68], 1
mov dword [ebp - 0x350], 0xfffd
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x12dc], eax
mov eax, dword [ebp - 0x23c]
mov dword [ebp - 0x12e4], eax
push 0xfffffffffffffff8
pop eax
cmp eax, 0x446ed9a8
jne 0x1000fba4
mov dword [ebp - 0x518], 1
jmp 0x1000fbab
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0x66969e96
jg 0x1000fbc3
mov dword [ebp - 0x848], 1
jmp 0x1000fbca
and dword [ebp - 0x848], 0
cmp dword [ebp - 0x848], 0xffff
jae 0x1000fbe2
mov dword [ebp - 0x520], 1
jmp 0x1000fbe9
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0x3c0]
push 4
pop ecx
imul ecx, ecx, 3
sub eax, dword [ebp + ecx - 0xbf4]
cmp eax, dword [ebp - 0x23c]
je 0x1000fc1c
mov dword [ebp - 0xb08], 1
jmp 0x1000fc23
and dword [ebp - 0xb08], 0
imul eax, dword [ebp - 0xb08], 0x8998
imul eax, dword [ebp - 0x850]
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
sub eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x850]
jle 0x1000fc5a
mov dword [ebp - 0xe50], 1
jmp 0x1000fc61
and dword [ebp - 0xe50], 0
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x12ec], eax
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x12f4], eax
mov eax, dword [ebp - 0xe58]
mov dword [ebp - 0x12fc], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x1304], eax
cmp dword [ebp - 0x350], 0
je 0x1000fcab
or eax, 0xffffffff
je 0x1000fcab
mov dword [ebp - 0x530], 1
jmp 0x1000fcb2
and dword [ebp - 0x530], 0
mov eax, 0xb46f9f11
sub eax, dword [ebp - 0x530]
inc eax
cmp dword [ebp - 0x23c], eax
jg 0x1000fcd2
mov dword [ebp - 0x9e0], 1
jmp 0x1000fcd9
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
sub eax, dword [ebp - 0x538]
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x860]
cmp dword [ebp - 0x858], eax
jg 0x1000fd05
mov dword [ebp - 0xe60], 1
jmp 0x1000fd0c
and dword [ebp - 0xe60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbf4]
mov dword [ebp - 0x1318], eax
cmp dword [ebp - 0x358], 0
je 0x1000fd34
mov dword [ebp - 0x540], 1
jmp 0x1000fd3b
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x3f0]
dec eax
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x360]
add eax, dword [ebp - 0x540]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0xaa8]
inc eax
cmp dword [ebp - 0x3f0], eax
jle 0x1000fd75
mov dword [ebp - 0x548], 1
jmp 0x1000fd7c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x3c0]
add eax, dword [ebp - 0x860]
cmp eax, dword [ebp - 0x360]
jge 0x1000fda8
mov dword [ebp - 0x550], 1
jmp 0x1000fdaf
and dword [ebp - 0x550], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbf4]
cmp dword [ebp - 0x550], eax
jge 0x1000fdd0
mov dword [ebp - 0x9e8], 1
jmp 0x1000fdd7
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0xe68]
cmp dword [ebp - 0x9e8], eax
jg 0x1000fdf1
mov dword [ebp - 0x558], 1
jmp 0x1000fdf8
and dword [ebp - 0x558], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbf4]
add eax, dword [ebp - 0x558]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbf4], eax
mov dword [ebp - 0x50], 0x2b1c
mov dword [ebp - 0xf4], 0x9d81479b
mov dword [ebp - 0x160], 0xfffffff7
mov dword [ebp - 0x2a0], 0
jmp 0x1000fe4c
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x1000fe68
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x168], 0x145c1747
jmp 0x1000fe3f
mov byte [ebp - 0x191], 0
movzx eax, byte [ebp - 0x191]
test eax, eax
je 0x1000fe85
push 0xf67
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
cmp dword [ebp - 0x50], 0x8f69f7fd
jne 0x1000fe9a
mov dword [ebp - 0x870], 1
jmp 0x1000fea1
and dword [ebp - 0x870], 0
cmp dword [ebp - 0x50], 0x89a5
jne 0x1000feb6
mov dword [ebp - 0x868], 1
jmp 0x1000febd
and dword [ebp - 0x868], 0
mov eax, dword [ebp - 0x868]
imul eax, dword [ebp - 0xf4]
mov dword [ebp - 0x560], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x560]
mov dword [ebp + eax - 0x168], ecx
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x560], eax
jg 0x1000fefa
mov dword [ebp - 0xb60], 1
jmp 0x1000ff01
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xb60], eax
jne 0x1000ff18
mov dword [ebp - 0xc18], 1
jmp 0x1000ff1f
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x1320], eax
cmp dword [ebp - 0x50], 0x829ed890
jbe 0x1000ff40
mov dword [ebp - 0xd94], 1
jmp 0x1000ff47
and dword [ebp - 0xd94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp - 0x1328], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x1330], eax
cmp dword [ebp - 0xf4], 0
je 0x1000ff78
mov dword [ebp - 0x568], 1
jmp 0x1000ff7f
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0xf4]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x870], eax
je 0x1000ffab
mov dword [ebp - 0x570], 1
jmp 0x1000ffb2
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x570]
jne 0x1000ffdc
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax - 0x168]
mov dword [ebp + ecx - 0x168], eax
jmp 0x100100bb
mov dword [ebp - 0x50], 0
jmp 0x1000ffec
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x100100bb
mov dword [ebp - 0x244], 0
jmp 0x1001000f
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x1001002b
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xc54], 8
jmp 0x10010002
mov dword [ebp - 0xf4], 0
jmp 0x10010044
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jg 0x100100b6
mov dword [ebp - 0x160], 0
jmp 0x10010066
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jg 0x100100a5
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x168]
mov dword [ebp - 0xc7c], eax
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0xc7c]
mov dword [ebp + eax*4 - 0x168], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc54], 1
jmp 0x10010059
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x168], 0
je 0x100100b4
jmp 0x10010037
jmp 0x10010037
jmp 0x1000ffe5
mov dword [ebp - 0x98], 5
mov dword [ebp - 0x20], 0
jmp 0x100100d5
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x100100e8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x24], 8
jmp 0x100100ce
mov dword [ebp - 0x20], 0
jmp 0x100100f8
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1001010e
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x24c], 0x82169286
jmp 0x100100f1
mov dword [ebp - 0x20], 0
jmp 0x1001011e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10010134
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x117c], 0xfffffffe
jmp 0x10010117
mov dword [ebp - 0x98], 0
jmp 0x1001014d
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jg 0x10010212
mov dword [ebp - 0x2d8], 0
jmp 0x10010173
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x1001018f
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0xeec], 0x951fe77d
jmp 0x10010166
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xeec], 0
jmp 0x100101bd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xeec], 0
jg 0x1001020d
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x100101ee
push 0x2ba
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x1001020b
push 0x2115
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x100101a2
jmp 0x10010140
mov dword [ebp - 0x98], 0xffffffef
jmp 0x1001022b
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x12
jne 0x10010507
mov dword [ebp - 0xc], 0xfffffff6
mov dword [ebp - 0x580], 9
mov dword [ebp - 0xc], 0
jmp 0x10010259
cmp dword [ebp - 0xc], 0
jl 0x10010502
mov dword [ebp - 0xc30], 9
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x24], 0
je 0x1001027c
jmp 0x10010502
cmp dword [ebp - 0xc], 0
jne 0x10010487
cmp dword [ebp - 0x98], 1
je 0x1001029b
mov dword [ebp - 0x888], 1
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x24]
cmp dword [ebp - 0x888], eax
jge 0x100104ac
jmp 0x1001021e
mov dword [ebp - 0xe24], 0x13638ecf
mov dword [ebp - 0x2b0], 0
jmp 0x1001052a
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x10010546
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x13bc], 0xfffffffa
jmp 0x1001051d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x13bc]
mov dword [ebp - 0xe24], eax
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x10010587
push 0x20e2
push 0x504
push 0x5a1
push 0x23c5
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov dword [ebp - 0x1360], 0xfff8
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x100105b2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x100105d6