Function at 0x10008cd1
Capabilities:
Get common file path
Get geographical location
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf98
push esi
push edi
mov dword [ebp - 0xe88], 0xfffffffb
mov dword [ebp - 0xd64], 2
mov dword [ebp - 0xd6c], 7
mov dword [ebp - 0xd74], 0
mov dword [ebp - 0xd7c], 1
mov dword [ebp - 0xd84], 0x55b7cefa
mov dword [ebp - 0xd8c], 0xb5f0b101
mov dword [ebp - 0xa20], 6
mov dword [ebp - 0x274], 0
jmp 0x10008d45
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x10008d61
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0xf5c], 0xfffffffb
jmp 0x10008d38
mov eax, dword [ebp - 0xa20]
inc eax
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xd94], 0xfffffffb
mov dword [ebp - 0xe20], 2
mov dword [ebp - 0xe28], 7
mov dword [ebp - 0xe70], 0
mov dword [ebp - 0xe78], 1
mov dword [ebp - 0xe80], 0x55b7cefa
mov dword [ebp - 0xcf0], 0xb5f0b101
mov dword [ebp - 0xa38], 6
mov dword [ebp - 0x2f0], 0
jmp 0x10008dd7
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jge 0x10008df3
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0xf44], 0xfffffffb
jmp 0x10008dca
mov eax, dword [ebp - 0xa38]
inc eax
mov dword [ebp - 0xa38], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x950], 5
mov dword [ebp - 0x774], 0
mov dword [ebp - 0x3a4], 1
mov dword [ebp - 0xa68], 0xc77dcda7
mov dword [ebp - 0x3b4], 0x3ea3
mov dword [ebp - 0x2ac], 0
jmp 0x10008e52
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x10008e6e
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xf68], 0xffffffff
jmp 0x10008e45
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x950], eax
mov eax, dword [ebp - 0x950]
cmp dword [ebp - 0x34], eax
jl 0x10008e8e
mov dword [ebp - 0x394], 1
jmp 0x10008e95
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x34], eax
je 0x10008ea9
mov dword [ebp - 0x764], 1
jmp 0x10008eb0
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x764]
je 0x10008ec7
mov dword [ebp - 0x384], 1
jmp 0x10008ece
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x384], eax
jge 0x10008ee5
mov dword [ebp - 0x76c], 1
jmp 0x10008eec
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x76c], eax
je 0x10008f03
mov dword [ebp - 0x38c], 1
jmp 0x10008f0a
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x774], eax
mov eax, dword [ebp - 0x774]
cmp dword [ebp - 0x394], eax
jge 0x10008f30
mov dword [ebp - 0x77c], 1
jmp 0x10008f37
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x77c], eax
jge 0x10008f4e
mov dword [ebp - 0x39c], 1
jmp 0x10008f55
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0xffffffff
jbe 0x10008f79
mov eax, 0x9bdd
test eax, eax
jne 0x10008f79
mov eax, 0x68f928d9
test eax, eax
jne 0x10008f79
and dword [ebp - 0x784], 0
jmp 0x10008f83
mov dword [ebp - 0x784], 1
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3a4], eax
je 0x10008fa6
mov dword [ebp - 0x78c], 1
jmp 0x10008fad
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x78c], eax
je 0x10008fc4
mov dword [ebp - 0x3ac], 1
jmp 0x10008fcb
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3ac], eax
jl 0x10008fe2
mov dword [ebp - 0x794], 1
jmp 0x10008fe9
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xa68], eax
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0xe90], 0xfffffffb
mov dword [ebp - 0xe98], 2
mov dword [ebp - 0x3bc], 1
mov dword [ebp - 0x7bc], 0xe62b5609
mov dword [ebp - 0xc7c], 0x70004ddc
mov dword [ebp - 0xc78], 0x70004ddc
mov dword [ebp - 0xc74], 0x70004ddc
mov dword [ebp - 0xc70], 0x70004ddc
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x7c4], 0x4071e994
mov dword [ebp - 0xbf0], 0xa0b2b040
mov dword [ebp - 0x1c0], 0
jmp 0x10009089
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x100090a2
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xc], 0xadf1adb2
jmp 0x1000907c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
je 0x100090bc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x100090d2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
jne 0x100090d2
and dword [ebp - 0x79c], 0
jmp 0x100090dc
mov dword [ebp - 0x79c], 1
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x3bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp eax, dword [ebp - 0x3bc]
jl 0x10009106
mov dword [ebp - 0x7a4], 1
jmp 0x1000910d
and dword [ebp - 0x7a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x7a4], eax
jle 0x1000912b
mov dword [ebp - 0x3c4], 1
jmp 0x10009132
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xfffe
ja 0x1000914a
mov dword [ebp - 0x7ac], 1
jmp 0x10009151
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x7ac], eax
jg 0x1000916f
mov dword [ebp - 0x3cc], 1
jmp 0x10009176
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x3cc], eax
jg 0x10009194
mov dword [ebp - 0x7b4], 1
jmp 0x1000919b
and dword [ebp - 0x7b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x7b4], eax
je 0x100091b9
mov dword [ebp - 0x3d4], 1
jmp 0x100091c0
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x7bc], eax
cmp dword [ebp - 0x7bc], 1
ja 0x100091e1
mov dword [ebp - 0x2f4], 1
jmp 0x100091e8
and dword [ebp - 0x2f4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax - 0xc7c], ecx
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x2f4], eax
jne 0x10009215
mov dword [ebp - 0xbe8], 1
jmp 0x1000921c
and dword [ebp - 0xbe8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
mov dword [ebp - 0xea0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
cmp dword [ebp + eax - 0xc], ecx
jl 0x1000924e
mov dword [ebp - 0x3dc], 1
jmp 0x10009255
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x7c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c4]
sub ecx, dword [ebp - 0x1a4]
sub ecx, dword [ebp + eax - 0xc]
imul ecx, dword [ebp - 0x1a4]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], ecx
jg 0x10009296
mov dword [ebp - 0x3e4], 1
jmp 0x1000929d
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x3e4], eax
jne 0x100092bd
mov eax, 0x6c8c
test eax, eax
jne 0x100092bd
and dword [ebp - 0x7cc], 0
jmp 0x100092c7
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0x7cc]
sub eax, dword [ebp - 0x1a4]
jne 0x100092e2
xor eax, eax
jne 0x100092e2
and dword [ebp - 0x3ec], 0
jmp 0x100092ec
mov dword [ebp - 0x3ec], 1
cmp dword [ebp - 0x3ec], 1
jne 0x10009301
mov dword [ebp - 0x7d4], 1
jmp 0x10009308
and dword [ebp - 0x7d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
cmp dword [ebp - 0x7d4], eax
jl 0x10009325
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xc]
lea eax, [eax + ecx + 0xfa4a]
test eax, eax
je 0x10009359
mov eax, 0x80eb60f9
test eax, eax
je 0x10009359
mov dword [ebp - 0x3f4], 1
jmp 0x10009360
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xbf0], eax
mov dword [ebp - 0xea8], 7
mov dword [ebp - 0xc00], 0
mov dword [ebp - 0x29c], 0
jmp 0x10009399
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x100093b5
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0xbf8], 0x94801897
jmp 0x1000938c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbf8]
mov dword [ebp - 0xc00], eax
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x100093e7
push 0x23e1
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0xeb0], 0
mov dword [ebp - 0xeb8], 1
mov dword [ebp - 0xcf8], 0x55b7cefa
mov dword [ebp - 0xe74], 0xb5f0b101
mov dword [ebp - 0x2dc], 0x252cb136
mov dword [ebp - 0x1c8], 0
jmp 0x10009432
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x1000944e
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xa4c], 0x342e
jmp 0x10009425
mov dword [ebp - 0x2dc], 0
jmp 0x10009467
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 1
jg 0x10009864
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x804], 0xffffffff
mov dword [ebp - 0xbe0], 0xffffffff
mov dword [ebp - 0x1d0], 0
jmp 0x100094a8
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x100094c4
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x88], 1
jmp 0x1000949b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x100094d9
jmp 0x10009864
mov dword [ebp - 0x5c], 0
jmp 0x100094e9
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x1000985f
mov dword [ebp - 0x2a4], 0
jmp 0x1000950c
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 2
jge 0x10009528
mov eax, dword [ebp - 0x2a4]
mov dword [ebp + eax*4 - 0xda0], 0xf77d900d
jmp 0x100094ff
mov eax, dword [ebp - 0x5c]
cmp dword [ebp + eax*4 - 0x88], 0
je 0x100095bb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
je 0x100095bb
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x1d8], 0
jmp 0x1000956c
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0
jg 0x100095b6
mov dword [ebp - 0x1b4], 0x6c902daf
mov dword [ebp - 0x1b4], 0
jmp 0x10009598
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x100095b4
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0xa4c], 1
jmp 0x1000958b
jmp 0x1000955f
jmp 0x1000985a
mov dword [ebp - 0xc3c], 0x2718b962
mov dword [ebp - 0x7f4], 0xfffffffd
mov dword [ebp - 0x2cc], 0
jmp 0x100095e8
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 4
jge 0x10009604
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xcdc], 0x8e548e01
jmp 0x100095db
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
mov dword [ebp - 0xd00], eax
mov dword [ebp - 0xc3c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa4c], 0x336d065
jg 0x10009640
mov dword [ebp - 0x7dc], 1
jmp 0x10009647
and dword [ebp - 0x7dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
cmp dword [ebp - 0x7dc], eax
jle 0x1000966e
mov eax, 0x5bf7
test eax, eax
jne 0x1000966e
and dword [ebp - 0x3fc], 0
jmp 0x10009678
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x3fc], eax
jl 0x1000968f
mov dword [ebp - 0x7e4], 1
jmp 0x10009696
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x7e4], eax
jg 0x100096b4
mov dword [ebp - 0x404], 1
jmp 0x100096bb
and dword [ebp - 0x404], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x7d02
sub ecx, dword [ebp - 0x404]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0xa4c]
cmp dword [ebp + eax - 0x88], ecx
je 0x100096ee
mov dword [ebp - 0x7ec], 1
jmp 0x100096f5
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp + eax*4 - 0x88]
cmp dword [ebp - 0x7ec], eax
jl 0x10009713
mov dword [ebp - 0x40c], 1
jmp 0x1000971a
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x7f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcdc]
cmp dword [ebp - 0x7f4], eax
jle 0x10009757
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcdc], 0
je 0x10009757
mov dword [ebp - 0x414], 1
jmp 0x1000975e
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcdc]
cmp dword [ebp - 0x414], eax
jle 0x1000977f
mov dword [ebp - 0x7fc], 1
jmp 0x10009786
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
imul eax, dword [ebp - 0x804]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x88], ecx
mov eax, dword [ebp - 0x41c]
neg eax
cmp eax, dword [ebp - 0x5c]
je 0x100097c2
mov dword [ebp - 0xc30], 1
jmp 0x100097c9
and dword [ebp - 0xc30], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcdc]
cmp dword [ebp - 0x804], eax
jge 0x100097ea
mov dword [ebp - 0x424], 1
jmp 0x100097f1
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa4c]
cmp dword [ebp - 0x424], eax
je 0x10009812
mov dword [ebp - 0x80c], 1
jmp 0x10009819
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
inc eax
inc eax
cmp eax, 0xd9d6
jg 0x10009834
mov dword [ebp - 0x36c], 1
jmp 0x1000983b
and dword [ebp - 0x36c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x36c]
mov dword [ebp + eax - 0xda0], ecx
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xbe0], eax
jmp 0x100094e2
jmp 0x1000945a
mov byte [ebp - 0x116], 0
movzx eax, byte [ebp - 0x116]
test eax, eax
je 0x1000987e
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov dword [ebp - 0x844], 6
mov dword [ebp - 0xa74], 0x860b
mov dword [ebp - 0xb74], 5
mov dword [ebp - 0x1e0], 0
jmp 0x100098b5
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x100098d1
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0xe04], 1
jmp 0x100098a8
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x100098f5
push 0x10b1
push 0x1f5e
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0x264], 0
jmp 0x1000991a
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x10009936
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xf38], 0xfffffffb
jmp 0x1000990d
mov dword [ebp - 0x268], 0x252cb136
mov dword [ebp - 0x1e8], 0
jmp 0x10009959
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x10009975
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xa64], 0x342e
jmp 0x1000994c
mov dword [ebp - 0x268], 0
jmp 0x1000998e
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jg 0x10009d8b
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x454], 0xffffffff
mov dword [ebp - 0xa84], 0xffffffff
mov dword [ebp - 0x1f0], 0
jmp 0x100099cf
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x100099eb
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0x9c], 1
jmp 0x100099c2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c], 0
je 0x10009a00
jmp 0x10009d8b
mov dword [ebp - 0x50], 0
jmp 0x10009a10
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10009d86
mov dword [ebp - 0x270], 0
jmp 0x10009a33
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x10009a4f
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xdac], 0xf77d900d
jmp 0x10009a26
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x9c], 0
je 0x10009ae2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c], 0
je 0x10009ae2
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x1f8], 0
jmp 0x10009a93
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jg 0x10009add
mov dword [ebp - 0x170], 0x6c902daf
mov dword [ebp - 0x170], 0
jmp 0x10009abf
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 2
jge 0x10009adb
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0xa64], 1
jmp 0x10009ab2
jmp 0x10009a86
jmp 0x10009d81
mov dword [ebp - 0xa7c], 0x2718b962
mov dword [ebp - 0x444], 0xfffffffd
mov dword [ebp - 0x278], 0
jmp 0x10009b0f
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 4
jge 0x10009b2b
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0xcbc], 0x8e548e01
jmp 0x10009b02
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
mov dword [ebp - 0xd08], eax
mov dword [ebp - 0xa7c], 1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa64], 0x336d065
jg 0x10009b67
mov dword [ebp - 0x42c], 1
jmp 0x10009b6e
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c]
cmp dword [ebp - 0x42c], eax
jle 0x10009b95
mov eax, 0x5bf7
test eax, eax
jne 0x10009b95
and dword [ebp - 0x814], 0
jmp 0x10009b9f
mov dword [ebp - 0x814], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x814], eax
jl 0x10009bb6
mov dword [ebp - 0x434], 1
jmp 0x10009bbd
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x9c]
cmp dword [ebp - 0x434], eax
jg 0x10009bdb
mov dword [ebp - 0x81c], 1
jmp 0x10009be2
and dword [ebp - 0x81c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x7d02
sub ecx, dword [ebp - 0x81c]
push 4
pop edx
imul edx, edx, 0
add ecx, dword [ebp + edx - 0xa64]
cmp dword [ebp + eax - 0x9c], ecx
je 0x10009c15
mov dword [ebp - 0x43c], 1
jmp 0x10009c1c
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x9c]
cmp dword [ebp - 0x43c], eax
jl 0x10009c3a
mov dword [ebp - 0x824], 1
jmp 0x10009c41
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x444], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp dword [ebp - 0x444], eax
jle 0x10009c7e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcbc], 0
je 0x10009c7e
mov dword [ebp - 0x82c], 1
jmp 0x10009c85
and dword [ebp - 0x82c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp dword [ebp - 0x82c], eax
jle 0x10009ca6
mov dword [ebp - 0x44c], 1
jmp 0x10009cad
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x44c]
imul eax, dword [ebp - 0x454]
mov dword [ebp - 0x834], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x834]
mov dword [ebp + eax*4 - 0x9c], ecx
mov eax, dword [ebp - 0x834]
neg eax
cmp eax, dword [ebp - 0x50]
je 0x10009ce9
mov dword [ebp - 0xbf4], 1
jmp 0x10009cf0
and dword [ebp - 0xbf4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcbc]
cmp dword [ebp - 0x454], eax
jge 0x10009d11
mov dword [ebp - 0x83c], 1
jmp 0x10009d18
and dword [ebp - 0x83c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa64]
cmp dword [ebp - 0x83c], eax
je 0x10009d39
mov dword [ebp - 0x45c], 1
jmp 0x10009d40
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
inc eax
inc eax
cmp eax, 0xd9d6
jg 0x10009d5b
mov dword [ebp - 0x374], 1
jmp 0x10009d62
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0xdac], ecx
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xa84], eax
jmp 0x10009a09
jmp 0x10009981
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10009da5
push 0
call dword [sym.imp.USER32.dll_GetMenuItemCount]
mov eax, dword [ebp - 0x844]
inc eax
mov dword [ebp - 0x844], eax
mov dword [ebp - 0x200], 0xa48bbca6
mov dword [ebp - 0x200], 0xfffffffb
jmp 0x10009dd5
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffea
jg 0x10009e6a
mov dword [ebp - 0xb7c], 0xfffffff8
mov dword [ebp - 0x280], 0
jmp 0x10009e05
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x10009e21
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xc44], 4
jmp 0x10009df8
cmp dword [ebp - 0xb7c], 0
je 0x10009e36
mov dword [ebp - 0x464], 1
jmp 0x10009e3d
and dword [ebp - 0x464], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x464]
mov dword [ebp + eax - 0xc44], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc44], 0
je 0x10009e65
jmp 0x10009dc8
jmp 0x10009dc8
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x10009e8d
push 0x411
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x84c], 5
mov dword [ebp - 0x47c], 0
mov dword [ebp - 0x874], 1
mov dword [ebp - 0xa8c], 0xc77dcda7
mov dword [ebp - 0x884], 0x3ea3
mov dword [ebp - 0x208], 0
jmp 0x10009edf
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x10009efb
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xf14], 0xffffffff
jmp 0x10009ed2
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x84c]
cmp dword [ebp - 0x40], eax
jl 0x10009f1b
mov dword [ebp - 0x864], 1
jmp 0x10009f22
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
je 0x10009f36
mov dword [ebp - 0x46c], 1
jmp 0x10009f3d
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x46c]
je 0x10009f54
mov dword [ebp - 0x854], 1
jmp 0x10009f5b
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x854], eax
jge 0x10009f72
mov dword [ebp - 0x474], 1
jmp 0x10009f79
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x474], eax
je 0x10009f90
mov dword [ebp - 0x85c], 1
jmp 0x10009f97
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x864], eax
jge 0x10009fbd
mov dword [ebp - 0x484], 1
jmp 0x10009fc4
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x484], eax
jge 0x10009fdb
mov dword [ebp - 0x86c], 1
jmp 0x10009fe2
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 0xffffffff
jbe 0x1000a006
mov eax, 0x9bdd
test eax, eax
jne 0x1000a006
mov eax, 0x68f928d9
test eax, eax
jne 0x1000a006
and dword [ebp - 0x48c], 0
jmp 0x1000a010
mov dword [ebp - 0x48c], 1
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x874], eax
je 0x1000a033
mov dword [ebp - 0x494], 1
jmp 0x1000a03a
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x494], eax
je 0x1000a051
mov dword [ebp - 0x87c], 1
jmp 0x1000a058
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x87c], eax
jl 0x1000a06f
mov dword [ebp - 0x49c], 1
jmp 0x1000a076
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x884]
inc eax
mov dword [ebp - 0x884], eax
mov dword [ebp - 0x74], 3
mov dword [ebp - 0x1b0], 0xbc795c38
mov dword [ebp - 0xbfc], 0x8968f25c
mov dword [ebp - 0x74], 0x17
jmp 0x1000a0ba
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 9
jl 0x1000a353
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x300], 0xfffffffb
mov dword [ebp - 0xa9c], 1
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x288], eax
jge 0x1000a106
mov dword [ebp - 0x4a4], 1
jmp 0x1000a10d
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0x1ac], 0
jmp 0x1000a132
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0xfffffff0
jl 0x1000a34e
mov dword [ebp - 0x338], 0xffffffff
mov dword [ebp - 0xc1c], 0x42b6
mov eax, 0xffff
test eax, eax
je 0x1000a208
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0xeb4], eax
cmp dword [ebp - 0x338], 0
jne 0x1000a187
cmp dword [ebp - 0xc1c], 0
jne 0x1000a187
and dword [ebp - 0x88c], 0
jmp 0x1000a191
mov dword [ebp - 0x88c], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x88c]
jl 0x1000a1a8
mov dword [ebp - 0x4ac], 1
jmp 0x1000a1af
and dword [ebp - 0x4ac], 0
cmp dword [ebp - 0x4ac], 0xb607
jl 0x1000a1c7
mov dword [ebp - 0x894], 1
jmp 0x1000a1ce
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x894], eax
jg 0x1000a1e8
mov dword [ebp - 0x4b4], 1
jmp 0x1000a1ef
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
neg eax
cmp eax, dword [ebp - 0x74]
jg 0x1000a208
mov dword [ebp - 0x89c], 1
jmp 0x1000a20f
and dword [ebp - 0x89c], 0
cmp dword [ebp - 0x89c], 0xffff
jae 0x1000a22d
cmp dword [ebp - 0x1b0], 0
jne 0x1000a22d
and dword [ebp - 0x4bc], 0
jmp 0x1000a237
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x4bc]
jne 0x1000a24e
mov dword [ebp - 0x8a4], 1
jmp 0x1000a255
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x8a4]
sub eax, dword [ebp - 0x338]
cmp eax, dword [ebp - 0x300]
jl 0x1000a275
mov dword [ebp - 0xa94], 1
jmp 0x1000a27c
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xd10], eax
cmp dword [ebp - 0x288], 0
je 0x1000a2a6
cmp dword [ebp - 0x1b0], 0
je 0x1000a2a6
mov dword [ebp - 0xb84], 1
jmp 0x1000a2ad
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x74], eax
je 0x1000a2cd
cmp dword [ebp - 0xa9c], 0
je 0x1000a2cd
mov dword [ebp - 0x4c4], 1
jmp 0x1000a2d4
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x4c4], eax
jle 0x1000a2f1
cmp dword [ebp - 0x74], 0
jne 0x1000a2f1
and dword [ebp - 0x8ac], 0
jmp 0x1000a2fb
mov dword [ebp - 0x8ac], 1
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x8ac], eax
jg 0x1000a315
mov dword [ebp - 0x4cc], 1
jmp 0x1000a31c
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x4cc], eax
jg 0x1000a336
mov dword [ebp - 0x8b4], 1
jmp 0x1000a33d
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0xbfc], eax
jmp 0x1000a125
jmp 0x1000a0b3
mov dword [ebp - 0x210], 0xa48bbca6
mov dword [ebp - 0x210], 0xfffffffb
jmp 0x1000a376
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xffffffea
jg 0x1000a40b
mov dword [ebp - 0xaa4], 0xfffffff8
mov dword [ebp - 0x290], 0
jmp 0x1000a3a6
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x1000a3c2
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xc4c], 4
jmp 0x1000a399
cmp dword [ebp - 0xaa4], 0
je 0x1000a3d7
mov dword [ebp - 0x4d4], 1
jmp 0x1000a3de
and dword [ebp - 0x4d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4d4]
mov dword [ebp + eax - 0xc4c], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4c], 0
je 0x1000a406
jmp 0x1000a369
jmp 0x1000a369
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000a42e
push 0x411
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x8bc], 5
mov dword [ebp - 0x4ec], 0
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0xb8c], 0xc77dcda7
mov dword [ebp - 0x8f4], 0x3ea3
mov dword [ebp - 0x218], 0
jmp 0x1000a480
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x1000a49c
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xf50], 0xffffffff
jmp 0x1000a473
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x8bc]
cmp dword [ebp - 0x38], eax
jl 0x1000a4bc
mov dword [ebp - 0x8d4], 1
jmp 0x1000a4c3
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
je 0x1000a4d7
mov dword [ebp - 0x4dc], 1
jmp 0x1000a4de
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x4dc]
je 0x1000a4f5
mov dword [ebp - 0x8c4], 1
jmp 0x1000a4fc
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x8c4], eax
jge 0x1000a513
mov dword [ebp - 0x4e4], 1
jmp 0x1000a51a
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4e4], eax
je 0x1000a531
mov dword [ebp - 0x8cc], 1
jmp 0x1000a538
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x4ec]
cmp dword [ebp - 0x8d4], eax
jge 0x1000a55e
mov dword [ebp - 0x4f4], 1
jmp 0x1000a565
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4f4], eax
jge 0x1000a57c
mov dword [ebp - 0x8dc], 1
jmp 0x1000a583
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0xffffffff
jbe 0x1000a5a7
mov eax, 0x9bdd
test eax, eax
jne 0x1000a5a7
mov eax, 0x68f928d9
test eax, eax
jne 0x1000a5a7
and dword [ebp - 0x4fc], 0
jmp 0x1000a5b1
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x8e4], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x8e4], eax
je 0x1000a5d4
mov dword [ebp - 0x504], 1
jmp 0x1000a5db
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x504], eax
je 0x1000a5f2
mov dword [ebp - 0x8ec], 1
jmp 0x1000a5f9
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x8ec], eax
jl 0x1000a610
mov dword [ebp - 0x50c], 1
jmp 0x1000a617
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0x8f4]
inc eax
mov dword [ebp - 0x8f4], eax
mov dword [ebp - 0x90], 0xb445acee
mov dword [ebp - 0x358], 0
mov dword [ebp - 0xc24], 8
mov dword [ebp - 0x178], 1
mov dword [ebp - 0x298], 1
mov dword [ebp - 0x924], 0xfffffffd
mov dword [ebp - 0xb94], 0xef407293
mov byte [ebp - 0x110], 0
movzx eax, byte [ebp - 0x110]
test eax, eax
je 0x1000a697
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [ebp - 0x90], 0
jne 0x1000a6ce
cmp dword [ebp - 0x90], 1
jg 0x1000a6b5
mov dword [ebp - 0xaac], 1
jmp 0x1000a6bc
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0x90], 0
jne 0x1000a6ce
and dword [ebp - 0x514], 0
jmp 0x1000a6d8
mov dword [ebp - 0x514], 1
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
cmp dword [ebp - 0x90], eax
jle 0x1000a6fe
mov dword [ebp - 0x8fc], 1
jmp 0x1000a705
and dword [ebp - 0x8fc], 0
cmp dword [ebp - 0x8fc], 0x28ab
jl 0x1000a71d
mov dword [ebp - 0x51c], 1
jmp 0x1000a724
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0xe5ec
jg 0x1000a73c
mov dword [ebp - 0x904], 1
jmp 0x1000a743
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0xc24], eax
imul eax, dword [ebp - 0x178], 0
cmp eax, dword [ebp - 0x90]
jle 0x1000a76a
mov dword [ebp - 0x524], 1
jmp 0x1000a771
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x524], eax
jg 0x1000a78b
mov dword [ebp - 0x90c], 1
jmp 0x1000a792
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x90c], eax
jge 0x1000a7ac
mov dword [ebp - 0x52c], 1
jmp 0x1000a7b3
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x52c], eax
je 0x1000a7cd
mov dword [ebp - 0x914], 1
jmp 0x1000a7d4
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x914], eax
je 0x1000a7e9
cmp dword [ebp - 0x358], 0
mov eax, 0xffff
test eax, eax
ja 0x1000a7fe
mov dword [ebp - 0x534], 1
jmp 0x1000a805
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x178]
jge 0x1000a826
mov dword [ebp - 0x91c], 1
jmp 0x1000a82d
and dword [ebp - 0x91c], 0
cmp dword [ebp - 0x91c], 0xbc6e
jne 0x1000a845
mov dword [ebp - 0x53c], 1
jmp 0x1000a84c
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jne 0x1000a87c
cmp dword [ebp - 0x90], 0
jne 0x1000a87c
cmp dword [ebp - 0x90], 0
jne 0x1000a87c
and dword [ebp - 0xab4], 0
jmp 0x1000a886
mov dword [ebp - 0xab4], 1
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xe0c], eax
mov dword [ebp - 0x924], 0xffffffff
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0xb94], eax
mov dword [ebp - 0xa4], 3
mov dword [ebp - 0x180], 0xbc795c38
mov dword [ebp - 0xacc], 0x8968f25c
mov dword [ebp - 0xa4], 0x17
jmp 0x1000a8df
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 9
jl 0x1000ab8a
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x340], 0xfffffffb
mov dword [ebp - 0xb9c], 1
mov eax, dword [ebp - 0x220]
cmp dword [ebp - 0x220], eax
jge 0x1000a92e
mov dword [ebp - 0x544], 1
jmp 0x1000a935
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x198], 0
jmp 0x1000a95a
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xfffffff0
jl 0x1000ab85
mov dword [ebp - 0x308], 0xffffffff
mov dword [ebp - 0xabc], 0x42b6
mov eax, 0xffff
test eax, eax
je 0x1000aa36
mov eax, dword [ebp - 0x308]
mov dword [ebp - 0xd18], eax
cmp dword [ebp - 0x308], 0
jne 0x1000a9af
cmp dword [ebp - 0xabc], 0
jne 0x1000a9af
and dword [ebp - 0x92c], 0
jmp 0x1000a9b9
mov dword [ebp - 0x92c], 1
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x92c]
jl 0x1000a9d3
mov dword [ebp - 0x54c], 1
jmp 0x1000a9da
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0xb607
jl 0x1000a9f2
mov dword [ebp - 0x934], 1
jmp 0x1000a9f9
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x934], eax
jg 0x1000aa13
mov dword [ebp - 0x554], 1
jmp 0x1000aa1a
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
neg eax
cmp eax, dword [ebp - 0xa4]
jg 0x1000aa36
mov dword [ebp - 0x93c], 1
jmp 0x1000aa3d
and dword [ebp - 0x93c], 0
cmp dword [ebp - 0x93c], 0xffff
jae 0x1000aa5b
cmp dword [ebp - 0x180], 0
jne 0x1000aa5b
and dword [ebp - 0x55c], 0
jmp 0x1000aa65
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x55c]
jne 0x1000aa7f
mov dword [ebp - 0x944], 1
jmp 0x1000aa86
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
sub eax, dword [ebp - 0x308]
cmp eax, dword [ebp - 0x340]
jl 0x1000aaa6
mov dword [ebp - 0xc04], 1
jmp 0x1000aaad
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0xe7c], eax
cmp dword [ebp - 0x220], 0
je 0x1000aad7
cmp dword [ebp - 0x180], 0
je 0x1000aad7
mov dword [ebp - 0xac4], 1
jmp 0x1000aade
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0xa4], eax
je 0x1000ab01
cmp dword [ebp - 0xb9c], 0
je 0x1000ab01
mov dword [ebp - 0x564], 1
jmp 0x1000ab08
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x564], eax
jle 0x1000ab28
cmp dword [ebp - 0xa4], 0
jne 0x1000ab28
and dword [ebp - 0x94c], 0
jmp 0x1000ab32
mov dword [ebp - 0x94c], 1
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x94c], eax
jg 0x1000ab4c
mov dword [ebp - 0x56c], 1
jmp 0x1000ab53
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x56c], eax
jg 0x1000ab6d
mov dword [ebp - 0x954], 1
jmp 0x1000ab74
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0xacc], eax
jmp 0x1000a94d
jmp 0x1000a8d2
mov dword [ebp - 0xd20], 0xfffffff8
mov byte [ebp - 0x114], 0
movzx eax, byte [ebp - 0x114]
test eax, eax
je 0x1000abae
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000abcf
push 0
push 0
push 0x1a4a
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
mov dword [ebp - 0x2a0], 0xa48bbca6
mov dword [ebp - 0x2a0], 0xfffffffb
jmp 0x1000abf2
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xffffffea
jg 0x1000ac87
mov dword [ebp - 0xc2c], 0xfffffff8
mov dword [ebp - 0x228], 0
jmp 0x1000ac22
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1000ac3e
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xc54], 4
jmp 0x1000ac15
cmp dword [ebp - 0xc2c], 0
je 0x1000ac53
mov dword [ebp - 0x574], 1
jmp 0x1000ac5a
and dword [ebp - 0x574], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x574]
mov dword [ebp + eax - 0xc54], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc54], 0
je 0x1000ac82
jmp 0x1000abe5
jmp 0x1000abe5
mov byte [ebp - 0x112], 0
movzx eax, byte [ebp - 0x112]
test eax, eax
je 0x1000acaa
push 0x411
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
mov dword [ebp - 0x98], 0xb445acee
mov dword [ebp - 0x310], 0
mov dword [ebp - 0xba4], 8
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x2a8], 1
mov dword [ebp - 0x5a4], 0xfffffffd
mov dword [ebp - 0xc34], 0xef407293
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000ad11
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
cmp dword [ebp - 0x98], 0
jne 0x1000ad48
cmp dword [ebp - 0x98], 1
jg 0x1000ad2f
mov dword [ebp - 0xad4], 1
jmp 0x1000ad36
and dword [ebp - 0xad4], 0
cmp dword [ebp - 0x98], 0
jne 0x1000ad48
and dword [ebp - 0x95c], 0
jmp 0x1000ad52
mov dword [ebp - 0x95c], 1
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp - 0x310]
cmp dword [ebp - 0x98], eax
jle 0x1000ad78
mov dword [ebp - 0x57c], 1
jmp 0x1000ad7f
and dword [ebp - 0x57c], 0
cmp dword [ebp - 0x57c], 0x28ab
jl 0x1000ad97
mov dword [ebp - 0x964], 1
jmp 0x1000ad9e
and dword [ebp - 0x964], 0
cmp dword [ebp - 0x964], 0xe5ec
jg 0x1000adb6
mov dword [ebp - 0x584], 1
jmp 0x1000adbd
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0xba4], eax
imul eax, dword [ebp - 0x1a8], 0
cmp eax, dword [ebp - 0x98]
jle 0x1000ade4
mov dword [ebp - 0x96c], 1
jmp 0x1000adeb
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x96c], eax
jg 0x1000ae05
mov dword [ebp - 0x58c], 1
jmp 0x1000ae0c
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x58c], eax
jge 0x1000ae26
mov dword [ebp - 0x974], 1
jmp 0x1000ae2d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x974], eax
je 0x1000ae47
mov dword [ebp - 0x594], 1
jmp 0x1000ae4e
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x594], eax
je 0x1000ae63
cmp dword [ebp - 0x310], 0
mov eax, 0xffff
test eax, eax
ja 0x1000ae78
mov dword [ebp - 0x97c], 1
jmp 0x1000ae7f
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x2a8]
imul eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x1a8]
jge 0x1000aea0
mov dword [ebp - 0x59c], 1
jmp 0x1000aea7
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0xbc6e
jne 0x1000aebf
mov dword [ebp - 0x984], 1
jmp 0x1000aec6
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jne 0x1000aef6
cmp dword [ebp - 0x98], 0
jne 0x1000aef6
cmp dword [ebp - 0x98], 0
jne 0x1000aef6
and dword [ebp - 0xadc], 0
jmp 0x1000af00
mov dword [ebp - 0xadc], 1
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0xe14], eax
mov dword [ebp - 0x5a4], 0xffffffff
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0xc34], eax
mov dword [ebp - 0x188], 0x69fdf99f
mov dword [ebp - 0x188], 8
jmp 0x1000af45
cmp dword [ebp - 0x188], 0x1a
jne 0x1000affc
mov dword [ebp - 0x5ac], 9
mov dword [ebp - 0xae4], 4
cmp dword [ebp - 0x5ac], 1
jne 0x1000af7b
mov dword [ebp - 0x98c], 1
jmp 0x1000af82
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x98c], 0xa073
jg 0x1000af9a
mov dword [ebp - 0x994], 1
jmp 0x1000afa1
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x5ac], eax
jg 0x1000afbb
mov dword [ebp - 0x5b4], 1
jmp 0x1000afc2
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x994]
add eax, dword [ebp - 0x5b4]
mov dword [ebp - 0xae4], eax
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1000aff7
mov dword [ebp - 0x78], 3
mov dword [ebp - 0x190], 0xbc795c38
mov dword [ebp - 0xbb4], 0x8968f25c
mov dword [ebp - 0x78], 0x17
jmp 0x1000b027
cmp dword [ebp - 0x78], 9
jl 0x1000b2c0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x318], 0xfffffffb
mov dword [ebp - 0xaf4], 1
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x230], eax
jge 0x1000b073
mov dword [ebp - 0x99c], 1
jmp 0x1000b07a
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x1a0], 0
jmp 0x1000b09f
mov dword [ebp - 0x6c], 0x63384304
mov dword [ebp - 0x11c], 0xfffffff8
mov dword [ebp - 0x9f4], 0
mov dword [ebp - 0xb04], 0xeded
mov dword [ebp - 0x7c], 0
jmp 0x1000b2f5
cmp dword [ebp - 0x7c], 1
jge 0x1000b30b