Function at 0x10042528
Capabilities:
Clear file content
Get geographical location
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x508
mov dword [ebp - 0x3fc], 0x796a0b59
mov dword [ebp - 0x2c], 0
jmp 0x1004254b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10042561
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x364], 1
jmp 0x10042544
mov dword [ebp - 0x2c], 0
jmp 0x10042571
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10042587
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x49c], 1
jmp 0x1004256a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x364], 0xffffffe6
jmp 0x100425b5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x364]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x364], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x364], 0xffffffe9
je 0x10042702
mov dword [ebp - 0xf0], 8
mov dword [ebp - 0x158], 3
mov dword [ebp - 0x3f4], 2
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x450], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
cmp dword [ebp + eax - 0x364], ecx
jge 0x10042614
mov dword [ebp - 0x37c], 1
jmp 0x1004261b
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x34c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0x49c], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x364]
cmp dword [ebp - 0x34c], eax
je 0x1004265b
mov dword [ebp - 0x230], 1
jmp 0x10042662
and dword [ebp - 0x230], 0
imul eax, dword [ebp - 0x230], 0x8064
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xfff7
jb 0x1004268a
mov dword [ebp - 0x27c], 1
jmp 0x10042691
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x27c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x364]
jle 0x100426b8
mov dword [ebp - 0x160], 1
jmp 0x100426bf
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0
jne 0x100426da
mov eax, 0xc9dffbe5
test eax, eax
jne 0x100426da
and dword [ebp - 0x284], 0
jmp 0x100426e4
mov dword [ebp - 0x284], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x284]
mov dword [ebp - 0x3f4], eax
mov dword [ebp - 0x3fc], 0
jmp 0x1004259a
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10042716
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x124], 0
jmp 0x1004273d
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jge 0x10042756
mov eax, dword [ebp - 0x124]
mov dword [ebp + eax*4 - 0x64], 7
jmp 0x10042730
mov dword [ebp - 0x5c], 0
jmp 0x10042766
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1004278f
mov dword [ebp - 0x168], 0xffffffff
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x64]
mov dword [ebp - 0x38], eax
jmp 0x1004275f
mov eax, 0xaae4
test eax, eax
je 0x100427be
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x64]
cmp dword [ebp + eax - 0x64], ecx
jl 0x100427be
xor eax, eax
je 0x100427be
mov dword [ebp - 0x28c], 1
jmp 0x100427c5
and dword [ebp - 0x28c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x28c], eax
jg 0x100427e3
mov dword [ebp - 0x170], 1
jmp 0x100427ea
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x170], eax
je 0x10042808
mov dword [ebp - 0x294], 1
jmp 0x1004280f
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x294]
jl 0x10042832
mov dword [ebp - 0x178], 1
jmp 0x10042839
and dword [ebp - 0x178], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x178], eax
je 0x10042872
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x10042870
push 0x1fe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x100428d3
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1004288d
push 0
push 1
push 0x674
call dword [sym.imp.KERNEL32.dll_OpenFileMappingA]
mov dword [ebp - 0x38], 0
jmp 0x1004289d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x100428d3
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x100428c5
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x64], 0
je 0x100428d1
jmp 0x10042896
jmp 0x10042896
mov dword [ebp - 0x110], 0x22ba3946
mov dword [ebp - 0xd0], 0
jmp 0x100428f6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x10042912
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x508], 0xffffffff
jmp 0x100428e9
mov dword [ebp - 0x110], 3
jmp 0x1004292b
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10042969
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x1004294d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsZoomed]
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x10042967
push 0
push 1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1004291e
mov dword [ebp - 0x3f0], 0x796a0b59
mov dword [ebp - 0x34], 0
jmp 0x10042983
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x10042999
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x358], 1
jmp 0x1004297c
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x24], 0xa906
mov dword [ebp - 0x398], 0xfffffffd
mov dword [ebp - 0x464], 0
mov dword [ebp - 0xd8], 0
jmp 0x100429d4
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x100429f0
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x128], 0xdfddae9
jmp 0x100429c7
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x10042a04
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
cmp dword [ebp - 0x14], 0
jne 0x10042a16
mov dword [ebp - 0x410], 1
jmp 0x10042a1d
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x14], 0
je 0x10042a76
cmp dword [ebp - 0x14], 0
je 0x10042a3b
cmp dword [ebp - 0x24], 0
je 0x10042a3b
mov dword [ebp - 0x29c], 1
jmp 0x10042a42
and dword [ebp - 0x29c], 0
cmp dword [ebp - 0x29c], 0x383c
jge 0x10042a5a
mov dword [ebp - 0x180], 1
jmp 0x10042a61
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0
je 0x10042a76
mov dword [ebp - 0x2a4], 1
jmp 0x10042a7d
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2a4], eax
jle 0x10042a94
mov dword [ebp - 0x188], 1
jmp 0x10042a9b
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x188], eax
je 0x10042ab2
mov dword [ebp - 0x2ac], 1
jmp 0x10042ab9
and dword [ebp - 0x2ac], 0
cmp dword [ebp - 0x2ac], 0xffffffff
jl 0x10042ace
mov dword [ebp - 0x190], 1
jmp 0x10042ad5
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x190], eax
jg 0x10042ae5
or eax, 0xffffffff
je 0x10042afa
mov eax, 0xfff8
test eax, eax
je 0x10042afa
mov dword [ebp - 0x418], 1
jmp 0x10042b01
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
je 0x10042dd9
mov dword [ebp - 0x440], 0xffbe6269
mov dword [ebp - 0x43c], 0xffbe6269
mov dword [ebp - 0x438], 0xffbe6269
mov dword [ebp - 0x434], 0xffbe6269
mov dword [ebp - 0x24], 0
jmp 0x10042b45
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10042dd7
mov dword [ebp - 0x424], 0x20a048c8
mov dword [ebp - 0x3e4], 0xb265d632
mov dword [ebp - 0x3ec], 4
mov dword [ebp - 0x390], 9
mov dword [ebp - 0x3e0], 0xaadaf8d9
mov dword [ebp - 0x14], 0
jmp 0x10042b91
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x10042dd2
mov dword [ebp - 0x6c], 0x7ea4c570
mov dword [ebp - 0x6c], 0
jmp 0x10042bb2
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x10042dcd
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x128], 0
je 0x10042d5c
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x128], 0
je 0x10042bf6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x440], 0
je 0x10042bf6
mov dword [ebp - 0x198], 1
jmp 0x10042bfd
and dword [ebp - 0x198], 0
cmp dword [ebp - 0x424], 1
jl 0x10042c12
mov dword [ebp - 0x2b4], 1
jmp 0x10042c19
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0xa3b
je 0x10042c31
mov dword [ebp - 0x384], 1
jmp 0x10042c38
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x128]
mov ecx, dword [ebp - 0x14]
imul eax, dword [ebp + ecx*4 - 0x128]
cmp dword [ebp - 0x198], eax
jl 0x10042c6a
mov dword [ebp - 0x2bc], 1
jmp 0x10042c71
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x3e4]
jle 0x10042c94
cmp dword [ebp - 0x14], 0
je 0x10042c94
mov dword [ebp - 0x1a0], 1
jmp 0x10042c9b
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1a0], eax
jne 0x10042cb2
mov dword [ebp - 0x2c4], 1
jmp 0x10042cb9
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x2c4], eax
jl 0x10042cd3
mov dword [ebp - 0x1a8], 1
jmp 0x10042cda
and dword [ebp - 0x1a8], 0
cmp dword [ebp - 0x1a8], 0x942f
jl 0x10042cf2
mov dword [ebp - 0x2cc], 1
jmp 0x10042cf9
and dword [ebp - 0x2cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x440]
cmp dword [ebp - 0x2cc], eax
jg 0x10042d1a
mov dword [ebp - 0x1b0], 1
jmp 0x10042d21
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x1b0], eax
jg 0x10042d41
mov eax, 0x435d
test eax, eax
jne 0x10042d41
and dword [ebp - 0x2d4], 0
jmp 0x10042d4b
mov dword [ebp - 0x2d4], 1
xor eax, eax
inc eax
je 0x10042d5c
mov dword [ebp - 0x1b8], 1
jmp 0x10042d63
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 0xffffffff
jl 0x10042d78
mov dword [ebp - 0x2dc], 1
jmp 0x10042d7f
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x3e0]
cmp dword [ebp - 0x2dc], eax
jle 0x10042d99
mov dword [ebp - 0x1c0], 1
jmp 0x10042da0
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 9
je 0x10042db5
mov dword [ebp - 0x2e4], 1
jmp 0x10042dbc
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x398], eax
jmp 0x10042bab
jmp 0x10042b8a
jmp 0x10042b3e
jmp 0x10042df9
mov byte [ebp - 0x7d], 0
movzx eax, byte [ebp - 0x7d]
test eax, eax
je 0x10042df9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_UpdateColors]
mov dword [ebp - 0x34], 0
jmp 0x10042e09
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10042e1f
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x494], 1
jmp 0x10042e02
mov dword [ebp - 0x8c], 0xfffffff8
mov dword [ebp - 0x8c], 8
jmp 0x10042e42
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 6
jne 0x10042f2b
mov dword [ebp - 0x88], 0xfffffffd
mov dword [ebp - 0xe0], 0
jmp 0x10042e72
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x10042e8e
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x478], 0x1220985a
jmp 0x10042e65
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x88], eax
jne 0x10042ea8
mov dword [ebp - 0x1c8], 1
jmp 0x10042eaf
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x1c8]
jle 0x10042ec9
mov dword [ebp - 0x2ec], 1
jmp 0x10042ed0
and dword [ebp - 0x2ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp + eax - 0x478], ecx
mov dword [ebp - 0x88], 2
jmp 0x10042efc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x2c
jge 0x10042f26
cmp dword [ebp - 0x88], 0
je 0x10042f10
jmp 0x10042f26
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x10042f24
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
jmp 0x10042eef
jmp 0x10042e35
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10042f59
push 0x1669
push 0
push 0x1f53
push 0x7d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x358], 0xffffffe6
jmp 0x10042f87
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x358], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 0xffffffe9
je 0x100434e0
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x334], 3
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x130], 0
jmp 0x10042fcf
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jge 0x10042feb
mov eax, dword [ebp - 0x130]
mov dword [ebp + eax*4 - 0x484], 0
jmp 0x10042fc2
mov dword [ebp - 0x48], 0
jmp 0x10042ffb
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x10043219
mov dword [ebp - 0xb4], 7
mov dword [ebp - 0x1d0], 0x7f19
mov dword [ebp - 0x1e8], 0x1fa4c821
mov dword [ebp - 0x3a0], 0xfffffffa
mov dword [ebp - 0xe8], 0
jmp 0x10043046
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 4
jge 0x10043062
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x4d4], 0
jmp 0x10043039
mov dword [ebp - 0xb4], 0
jmp 0x1004307b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jg 0x10043214
mov eax, dword [ebp - 0x1d0]
sub eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xb4], eax
jge 0x100430a8
mov dword [ebp - 0x2f4], 1
jmp 0x100430af
and dword [ebp - 0x2f4], 0
imul eax, dword [ebp - 0x2f4], 0xfffd
cmp eax, dword [ebp - 0x48]
jge 0x100430d3
mov eax, 0xfffe
test eax, eax
je 0x100430d3
mov dword [ebp - 0x1d8], 1
jmp 0x100430da
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xec3
jl 0x100430f2
mov dword [ebp - 0x2fc], 1
jmp 0x100430f9
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x2fc], 0x97e7c14a
jae 0x10043111
mov dword [ebp - 0x1e0], 1
jmp 0x10043118
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 1
jne 0x1004312d
mov dword [ebp - 0x304], 1
jmp 0x10043134
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x484]
mov dword [ebp - 0x40c], eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0x484], ecx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x46c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4d4], 0xe6966ef3
jb 0x1004318a
mov dword [ebp - 0x30c], 1
jmp 0x10043191
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x30c], eax
jne 0x100431a8
mov dword [ebp - 0x1f0], 1
jmp 0x100431af
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0x1188
jne 0x100431c7
mov dword [ebp - 0x134], 1
jmp 0x100431ce
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x4d4], ecx
imul eax, dword [ebp - 0x134], 0xffff
cmp eax, 2
je 0x100431fc
mov dword [ebp - 0x314], 1
jmp 0x10043203
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x3a0], eax
jmp 0x1004306e
jmp 0x10042ff4
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x1004322d
push 1
call dword [sym.imp.USER32.dll_ShowCursor]
mov dword [ebp - 0x3b0], 2
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x11c], 0
jmp 0x10043261
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jge 0x1004327d
mov eax, dword [ebp - 0x11c]
mov dword [ebp + eax*4 - 0x44c], 9
jmp 0x10043254
mov dword [ebp - 0x74], 0
jmp 0x1004328d
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jg 0x100433c5
mov dword [ebp - 0x30], 0
jmp 0x100432a7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 4
jge 0x100432bd
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4c4], 1
jmp 0x100432a0
mov dword [ebp - 0x30], 0
jmp 0x100432cd
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100432e3
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3a8], 0x6c218e99
jmp 0x100432c6
mov eax, dword [ebp - 0x74]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x4c4]
cmp dword [ebp + eax*4 - 0x44c], ecx
jge 0x10043308
mov dword [ebp - 0x1f8], 1
jmp 0x1004330f
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp + eax*4 - 0x44c], 1
ja 0x10043329
xor eax, eax
jne 0x10043329
and dword [ebp - 0x31c], 0
jmp 0x10043333
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x31c]
jg 0x1004334d
mov dword [ebp - 0x3e8], 1
jmp 0x10043354
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x74]
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0x4c4]
cmp dword [ebp + eax*4 - 0x44c], ecx
je 0x10043385
mov dword [ebp - 0x324], 1
jmp 0x1004338c
and dword [ebp - 0x324], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x324], eax
je 0x100433a6
mov dword [ebp - 0x208], 1
jmp 0x100433ad
and dword [ebp - 0x208], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x3a8], ecx
jmp 0x10043286
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc8]
cmp dword [ebp + eax - 0x358], ecx
jge 0x100433f2
mov dword [ebp - 0x420], 1
jmp 0x100433f9
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x32c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x32c]
mov dword [ebp + eax - 0x494], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x358]
cmp dword [ebp - 0x32c], eax
je 0x10043439
mov dword [ebp - 0x210], 1
jmp 0x10043440
and dword [ebp - 0x210], 0
imul eax, dword [ebp - 0x210], 0x8064
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0xfff7
jb 0x10043468
mov dword [ebp - 0x218], 1
jmp 0x1004346f
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0x218]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x358]
jle 0x10043496
mov dword [ebp - 0x33c], 1
jmp 0x1004349d
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0
jne 0x100434b8
mov eax, 0xc9dffbe5
test eax, eax
jne 0x100434b8
and dword [ebp - 0x220], 0
jmp 0x100434c2
mov dword [ebp - 0x220], 1
push 0xfffffffffffffff8
pop eax
sub eax, dword [ebp - 0x220]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3f0], 0
jmp 0x10042f6c
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x20], 0x63785551
mov dword [ebp - 0x14c], 0x5d1cb6a7
mov eax, dword [ebp - 0x1c]
sub eax, 6
je 0x10043515
mov eax, 0xe964
test eax, eax
je 0x10043515
mov dword [ebp - 0x344], 1
jmp 0x1004351c
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jae 0x10043537
mov dword [ebp - 0x150], 1
jmp 0x1004353e
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x150]
jg 0x10043555
mov dword [ebp - 0x228], 1
jmp 0x1004355c
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x228]
jl 0x10043574
xor eax, eax
jne 0x10043574
and dword [ebp - 0x234], 0
jmp 0x1004357e
mov dword [ebp - 0x234], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x234], eax
je 0x10043595
mov dword [ebp - 0x3b8], 1
jmp 0x1004359c
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x460], eax
imul eax, dword [ebp - 0x1c], 0x2f3c
cmp dword [ebp - 0x1c], eax
jne 0x100435bd
mov dword [ebp - 0x2c0], 1
jmp 0x100435c4
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x2c0]
cmp eax, 0xd5493e6
je 0x100435f0
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x100435ee
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
jmp 0x100435ff
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x14c], 0
je 0x10043659
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jge 0x1004361c
mov dword [ebp - 0x238], 1
jmp 0x10043623
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x238], eax
jge 0x1004363a
mov dword [ebp - 0x308], 1
jmp 0x10043641
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xfff9
jbe 0x10043659
mov dword [ebp - 0x240], 1
jmp 0x10043660
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x240]
jl 0x10043677
mov dword [ebp - 0x414], 1
jmp 0x1004367e
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x14c], eax
jg 0x10043695
mov dword [ebp - 0x2c8], 1
jmp 0x1004369c
and dword [ebp - 0x2c8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c8], eax
jne 0x100436b3
mov dword [ebp - 0x248], 1
jmp 0x100436ba
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x468], 0x21ded680
mov dword [ebp - 0x260], 0xfffffff9
mov dword [ebp - 0x41c], 9
mov dword [ebp - 0x3c0], 0xe0710dd0
mov dword [ebp - 0x9c], 0x7904
mov dword [ebp - 0xc], 0x5cc7c44d
mov dword [ebp - 0x148], 4
mov dword [ebp - 0x310], 1
mov dword [ebp - 8], 0
jmp 0x1004372a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x1004373d
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x44], 0xffffffff
jmp 0x10043723
mov dword [ebp - 8], 0
jmp 0x1004374d
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x10043763
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4e0], 0x32d7af2c
jmp 0x10043746
mov dword [ebp - 8], 0
jmp 0x10043773
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x10043789
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x408], 1
jmp 0x1004376c
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x3f8]
cmp eax, dword [ebp - 0x3c8]
jge 0x100437c8
mov dword [ebp - 0x250], 1
jmp 0x100437cf
and dword [ebp - 0x250], 0
mov dword [ebp - 0x138], 0
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x260]
jg 0x100437f6
mov dword [ebp - 0x348], 1
jmp 0x100437fd
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x148]
add eax, dword [ebp - 0x250]
cmp eax, dword [ebp - 0xc]
jne 0x10043829
cmp dword [ebp - 0x41c], 0
je 0x10043829
mov dword [ebp - 0x2d0], 1
jmp 0x10043830
and dword [ebp - 0x2d0], 0
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x2d0], eax
jl 0x1004384a
mov dword [ebp - 0x258], 1
jmp 0x10043851
and dword [ebp - 0x258], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x258]
sub ecx, dword [ebp + eax - 0x44]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x408], ecx
mov dword [ebp - 0xc], 0
jmp 0x1004387e
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x10043b29
mov dword [ebp - 0x12c], 0xfffffff7
mov dword [ebp - 0xf8], 5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x408], 0
je 0x1004390e
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0xc]
add eax, dword [ebp + ecx*4 - 0x44]
add eax, dword [ebp - 0x148]
cmp dword [ebp - 0x12c], eax
cmp dword [ebp - 0x9c], 9
je 0x100438e6
mov dword [ebp - 0x2d8], 1
jmp 0x100438ed
and dword [ebp - 0x2d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x408]
sub eax, dword [ebp - 0x2d8]
je 0x1004390e
mov dword [ebp - 0x268], 1
jmp 0x10043915
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xfffffffe
ja 0x1004392a
mov dword [ebp - 0x330], 1
jmp 0x10043931
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x330], eax
jg 0x1004394c
mov dword [ebp - 0x270], 1
jmp 0x10043953
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x270]
sub ecx, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x44], ecx
jge 0x10043974
mov dword [ebp - 0x2e0], 1
jmp 0x1004397b
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x44], ecx
mov eax, 0x5823
test eax, eax
je 0x10043a95
cmp dword [ebp - 0x9c], 0
jne 0x100439b5
imul eax, dword [ebp - 0xf8], 0xffffffff
cmp eax, 0x538e5efb
jle 0x100439b5
and dword [ebp - 0x278], 0
jmp 0x100439bf
mov dword [ebp - 0x278], 1
cmp dword [ebp - 0x278], 1
jne 0x100439db
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0x44], 0
jne 0x100439db
and dword [ebp - 0x318], 0
jmp 0x100439e5
mov dword [ebp - 0x318], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4e0]
cmp dword [ebp - 0x318], eax
jge 0x10043a06
mov dword [ebp - 0x3d0], 1
jmp 0x10043a0d
and dword [ebp - 0x3d0], 0
mov eax, 0xfc39
test eax, eax
je 0x10043a2b
mov eax, 0x237f
test eax, eax
je 0x10043a2b
mov dword [ebp - 0x280], 1
jmp 0x10043a32
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x280], eax
jl 0x10043a4c
mov dword [ebp - 0x2e8], 1
jmp 0x10043a53
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x2e8], eax
je 0x10043a6d
mov dword [ebp - 0x400], 1
jmp 0x10043a74
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp + eax*4 - 0x44], 0xffffffff
test eax, eax
je 0x10043a95
mov dword [ebp - 0x140], 1
jmp 0x10043a9c
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x140]
mov dword [ebp + eax - 0x44], ecx
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x140], eax
jg 0x10043acc
mov eax, 0xb13122e3
test eax, eax
jne 0x10043acc
and dword [ebp - 0x288], 0
jmp 0x10043ad6
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x288]
je 0x10043af0
mov dword [ebp - 0x340], 1
jmp 0x10043af7
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x340], eax
jl 0x10043b11
mov dword [ebp - 0x290], 1
jmp 0x10043b18
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x138], eax
jmp 0x10043877
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x10043be0
mov dword [ebp - 0x114], 4
mov dword [ebp - 0x114], 0x11
jmp 0x10043b5c
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffffb
jg 0x10043bd8
mov dword [ebp - 0x13c], 5
mov dword [ebp - 0x388], 0x568d526d
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x3d8], 0xffffffff
jle 0x10043ba7
mov dword [ebp - 0x2f0], 1
jmp 0x10043bae
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x388], eax
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10043bd3
push 0x25b9
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
jmp 0x10043b4f
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xbc], 0xffffffff
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xbc], 0xffffffea
jmp 0x10043c19
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x17
jne 0x10043cc3
mov dword [ebp - 0x100], 0
jmp 0x10043c3f
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 2
jge 0x10043c5b
mov eax, dword [ebp - 0x100]
mov dword [ebp + eax*4 - 0x48c], 0x405b4019
jmp 0x10043c32
mov dword [ebp - 0xa4], 0
jmp 0x10043c74
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
je 0x10043cbe
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x94], 0
jmp 0x10043ca0
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jge 0x10043cbc
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x48c], 0x2e6e7f73
jmp 0x10043c93
jmp 0x10043c67
jmp 0x10043c0c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3dc], eax
mov dword [ebp - 4], 1
mov dword [ebp - 0x90], 0x83648bd9
mov dword [ebp - 0x3ac], 0xfffffffe
mov eax, dword [ebp - 4]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jle 0x10043d04
mov dword [ebp - 0x38c], 1
jmp 0x10043d0b
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
jg 0x10043d1f
mov dword [ebp - 0x298], 1
jmp 0x10043d26
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x298], eax
jl 0x10043d40
mov dword [ebp - 0x394], 1
jmp 0x10043d47
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 4], eax
je 0x10043d5b
mov dword [ebp - 0x320], 1
jmp 0x10043d62
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0xffffffff
jl 0x10043d77
mov dword [ebp - 0x2a0], 1
jmp 0x10043d7e
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x10043da8
mov eax, 0x5378
test eax, eax
je 0x10043da8
mov dword [ebp - 0x2f8], 1
jmp 0x10043daf
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
imul eax, dword [ebp - 4]
cmp eax, dword [ebp - 4]
je 0x10043dd1
mov dword [ebp - 0x2a8], 1
jmp 0x10043dd8
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0x5dea
jl 0x10043df0
mov dword [ebp - 0x338], 1
jmp 0x10043df7
and dword [ebp - 0x338], 0
xor eax, eax
sub eax, dword [ebp - 0x338]
sub eax, dword [ebp - 4]
je 0x10043f67
mov dword [ebp - 0x3a4], 0xe0d6
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x118], 0
jmp 0x10043e35
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 3
jge 0x10043e51
mov eax, dword [ebp - 0x118]
mov dword [ebp + eax*4 - 0x4ec], 0x662b0a94
jmp 0x10043e28
cmp dword [ebp - 0x90], 0xd925
jge 0x10043e69
mov dword [ebp - 0x39c], 1
jmp 0x10043e70
and dword [ebp - 0x39c], 0
mov eax, 0xffff
cmp eax, 0x5806
jne 0x10043e88
mov dword [ebp - 0x2b0], 1
jmp 0x10043e8f
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jne 0x10043eb3
cmp dword [ebp - 4], 0
jne 0x10043eb3
and dword [ebp - 0x300], 0
jmp 0x10043ebd
mov dword [ebp - 0x300], 1
mov eax, dword [ebp - 0x300]
neg eax
sub eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2b8]
mov dword [ebp + eax - 0x4ec], ecx
cmp dword [ebp - 0x2b8], 0xffffffff
je 0x10043ef9
mov dword [ebp - 0x328], 1
jmp 0x10043f00
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x328]
add eax, 4
cmp eax, 0xbf085fff
jbe 0x10043f1f
mov dword [ebp - 0x22c], 1
jmp 0x10043f26
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0xfd0a
je 0x10043f3e
mov dword [ebp - 0x224], 1
jmp 0x10043f45
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x224]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x23c]
add eax, 0xc1cc
mov dword [ebp - 0x3ac], eax
jmp 0x10043f93
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x10043f93
push 0
push 0x1d69
push 0x200f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x10], 0
jmp 0x10043fb4
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe8
jl 0x10043ffc
mov dword [ebp - 0x108], 7
mov dword [ebp - 0x108], 0
jmp 0x10043fdd
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
je 0x10043ffa
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10043ff8
call dword [sym.imp.USER32.dll_CreateMenu]
jmp 0x10043fd0
jmp 0x10043fad
cmp dword [ebp - 0x10], 0
jne 0x10044056
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jg 0x10044019
mov dword [ebp - 0x244], 1
jmp 0x10044020
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x244]
cmp eax, dword [ebp - 0x10]
jle 0x1004403a
mov dword [ebp - 0x3b4], 1
jmp 0x10044041
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x10], 0
jne 0x10044056
cmp dword [ebp - 0x10], 0
jne 0x10044056
and dword [ebp - 0x24c], 0
jmp 0x10044060
mov dword [ebp - 0x24c], 1
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xac], 0xffffffff
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xac], 0xffffffea
jmp 0x10044098
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x17
jne 0x100448bc
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x144], 6
mov dword [ebp - 0x120], 0
jmp 0x100440cf
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jge 0x100440eb
mov eax, dword [ebp - 0x120]
mov dword [ebp + eax*4 - 0xc4], 0x9e57ad95
jmp 0x100440c2
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0
jmp 0x10044102
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x1004443b
mov dword [ebp - 0x7c], 0x4438bea1
mov dword [ebp - 0xd4], 7
mov dword [ebp - 0xcc], 0
jmp 0x10044136
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x10044152
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x98], 5
jmp 0x10044129
mov dword [ebp - 0x7c], 0
jmp 0x10044162
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jg 0x10044264
mov dword [ebp - 0x40], 0x41b66baf
mov dword [ebp - 0x40], 1
jmp 0x10044183
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x100441b7
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x100441a6
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xc4], 0
je 0x100441b5
jmp 0x100441b7
jmp 0x1004417c
mov dword [ebp - 0x40], 0
jmp 0x100441c7
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x1004425f
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ebp + ecx*4 - 0xc4]
cmp dword [ebp + eax*4 - 0xc4], ecx
jne 0x10044244
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x28]
mov ecx, dword [ebp + ecx*4 - 0xc4]
push 4
pop edx
shl edx, 0
add ecx, dword [ebp + edx - 0xc4]
imul ecx, ecx, 0xfffd
cmp dword [ebp + eax - 0xc4], ecx
jg 0x1004421f
mov dword [ebp - 0x254], 1
jmp 0x10044226
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jne 0x10044244
and dword [ebp - 0x25c], 0
jmp 0x1004424e
mov dword [ebp - 0x25c], 1
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0x144], eax
jmp 0x100441c0
jmp 0x1004415b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x98], 0
jne 0x100443fb
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x100443f2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
mov dword [ebp - 0x4b4], eax
cmp dword [ebp - 0x144], 0
jne 0x100442ae
cmp dword [ebp - 0x28], 0
jne 0x100442ae
and dword [ebp - 0x3bc], 0
jmp 0x100442b8
mov dword [ebp - 0x3bc], 1
mov eax, 0xcc33bab7
test eax, eax
jb 0x100442cd
mov dword [ebp - 0x264], 1
jmp 0x100442d4
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0x144]
imul eax, dword [ebp - 0x264]
test eax, eax
je 0x100442f7
cmp dword [ebp - 0x7c], 0
je 0x100442f7
mov dword [ebp - 0x26c], 1
jmp 0x100442fe
and dword [ebp - 0x26c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp dword [ebp - 0x26c], eax
je 0x1004431f
mov dword [ebp - 0x274], 1
jmp 0x10044326
and dword [ebp - 0x274], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc4]
cmp dword [ebp - 0x274], eax
jl 0x10044354
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc4], 0
jne 0x10044354
and dword [ebp - 0x154], 0
jmp 0x1004435e
mov dword [ebp - 0x154], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x154]
sub ecx, dword [ebp + eax - 0xc4]
mov dword [ebp - 0xd4], ecx
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xd4], eax
jge 0x1004438e
mov dword [ebp - 0x15c], 1
jmp 0x10044395
and dword [ebp - 0x15c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x15c]
sub ecx, dword [ebp + eax - 0x98]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x98]
jle 0x100443c3
mov dword [ebp - 0x164], 1
jmp 0x100443ca
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0xfffffffb
jg 0x100443df
mov dword [ebp - 0x16c], 1
jmp 0x100443e6
and dword [ebp - 0x16c], 0
cmp dword [ebp - 0x16c], 0xd9de360a
je 0x100443fb
and dword [ebp - 0x174], 0
jmp 0x10044405
mov dword [ebp - 0x174], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x98]
cmp dword [ebp - 0x174], eax
jge 0x10044426
mov dword [ebp - 0x17c], 1
jmp 0x1004442d
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x7c], eax
jmp 0x100440fb
mov dword [ebp - 0xdc], 0
jmp 0x10044454
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x10044470
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x4ac], 0x405b4019
jmp 0x10044447
mov dword [ebp - 0xa0], 0
jmp 0x10044489
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
je 0x100448b7
mov dword [ebp - 0x84], 7
mov dword [ebp - 0x1a4], 0xcbbbc25
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x3cc], 0x8607
mov dword [ebp - 0x3d4], 0xf4846e1d
mov dword [ebp - 0x84], 0
jmp 0x100444e1
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffea
jne 0x100447f8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x3c4], 0x6e85fcb
mov dword [ebp - 0x18], 0
jmp 0x1004450f
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 6
jl 0x1004454d
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1004452e
push 0
push 0x250d
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x1004454b
push 0x251
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
jmp 0x10044508
mov dword [ebp - 0x18], 9
jmp 0x1004455d
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jg 0x100447f3
mov dword [ebp - 0xe4], 0x272a727
mov dword [ebp - 0x18c], 4
mov dword [ebp - 0x184], 0
mov dword [ebp - 0xec], 0x70fc
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x100445a3
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0xe4], 0xffffffeb
jmp 0x100445bc
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffffb
jl 0x100447ee
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1c4], 0x2305aba9
cmp dword [ebp - 0x18c], 0x1ec2
jne 0x100446f8
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
neg eax
cmp dword [ebp - 0x18c], eax
jne 0x10044615
mov dword [ebp - 0x194], 1
jmp 0x1004461c
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x194], eax
jle 0x10044636
mov dword [ebp - 0x19c], 1
jmp 0x1004463d
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x19c]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x1ac], eax
jge 0x1004467c
cmp dword [ebp - 0xec], 0
jne 0x1004467c
and dword [ebp - 0x1b4], 0
jmp 0x10044686
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
je 0x100446b0
cmp dword [ebp - 0x3cc], 0
je 0x100446b0
mov dword [ebp - 0x1cc], 1
jmp 0x100446b7
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x1cc], eax
jge 0x100446d1
mov dword [ebp - 0x1d4], 1
jmp 0x100446d8
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1d4], eax
jl 0x100446f8
cmp dword [ebp - 0x84], 0
je 0x100446f8
mov dword [ebp - 0x1dc], 1
jmp 0x100446ff
and dword [ebp - 0x1dc], 0
mov eax, 0xf57a5575
test eax, eax
jne 0x1004471a
mov eax, 0xc437ffe
test eax, eax
jne 0x1004471a
and dword [ebp - 0x1e4], 0
jmp 0x10044724
mov dword [ebp - 0x1e4], 1
cmp dword [ebp - 0x1e4], 0xffffffff
jge 0x10044739
mov dword [ebp - 0x1ec], 1
jmp 0x10044740
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1ec], eax
jle 0x10044757
mov dword [ebp - 0x1f4], 1
jmp 0x1004475e
and dword [ebp - 0x1f4], 0
cmp dword [ebp - 0x1f4], 0xfffffff6
jg 0x10044773
mov dword [ebp - 0x1fc], 1
jmp 0x1004477a
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x1fc], eax
jne 0x10044794
mov dword [ebp - 0x204], 1
jmp 0x1004479b
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x204], eax
jne 0x100447b5
mov dword [ebp - 0x20c], 1
jmp 0x100447bc
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x20c], eax
jg 0x100447d6
mov dword [ebp - 0x214], 1
jmp 0x100447dd
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x3d4], eax
jmp 0x100445af
jmp 0x10044556
jmp 0x100444d4
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa8], 0
jmp 0x1004481b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x100448b2
mov dword [ebp - 0x45c], 0x37bc7528
mov dword [ebp - 0x21c], 0x5f4b
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0xf4], 0
jmp 0x1004485f
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x1004487b
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x4f8], 3
jmp 0x10044852
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x1004489c
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x4ac], 0x2e6e7f73
jmp 0x1004480e
jmp 0x1004447c
jmp 0x1004408b
mov eax, dword [ebp - 0x3dc]
movzx eax, byte [eax]
test eax, eax
je 0x100448d1
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov dword [ebp - 0xfc], 0x48261f9c
mov dword [ebp - 0xfc], 0xfffffffa
jmp 0x100448f4
mov eax, dword [ebp - 0xfc]
dec eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0xffffffec
je 0x10044b00
mov dword [ebp - 0x104], 0xe1c97412
mov dword [ebp - 0x3c], 0
jmp 0x1004491b
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x10044931
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x36c], 0x446df37d
jmp 0x10044914
mov dword [ebp - 0x3c], 0
jmp 0x10044941
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10044957
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x430], 0xd4f2887c
jmp 0x1004493a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x430], 0
jmp 0x10044985
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x430]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x430], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x430], 1
jg 0x100449ac
mov dword [ebp - 0x380], 8
cmp dword [ebp - 0x380], 0
je 0x100449aa
jmp 0x100449ac
jmp 0x1004496a
mov dword [ebp - 0x104], 2
jmp 0x100449c5
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x10044afb
mov dword [ebp - 0x10c], 0
jmp 0x100449eb
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x10044a07
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x378], 3
jmp 0x100449de
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x378], 0
jmp 0x10044a35
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x378], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x378], 1
jg 0x10044adc
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0xb0], 0
jmp 0x10044a6c
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x10044ad7
mov dword [ebp - 0xb8], 0x5b1b6fd4
mov eax, dword [ebp - 0xb0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x378]
mov eax, dword [ebp + eax*4 - 0x36c]
mov dword [ebp + ecx*4 - 0x36c], eax
mov dword [ebp - 0xb8], 0
jmp 0x10044ab9
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x10044ad5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x36c], 0xdca27289
jmp 0x10044aac
jmp 0x10044a5f
jmp 0x10044a1a
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x36c]
mov dword [ebp + ecx - 0x378], eax
jmp 0x100449b8
jmp 0x100448e7
mov esp, ebp
pop ebp
ret