Function at 0x100511d8
Capabilities:
Accept command line arguments
Get file system object information
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1180
call fcn.1008e2a0
push esi
push edi
mov dword [ebp - 0x47c], 3
mov dword [ebp - 0x478], 3
mov dword [ebp - 0x474], 3
mov dword [ebp - 0x470], 3
mov dword [ebp - 0x350], 0x5540d7f8
mov dword [ebp - 0xb68], 0x257ea0d0
mov dword [ebp - 0x360], 0
jmp 0x1005123c
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jge 0x10051258
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0xf90], 0xffffffff
jmp 0x1005122f
mov dword [ebp - 0x350], 0
jmp 0x10051271
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0xffffffef
jne 0x1005138f
mov dword [ebp - 0x300], 0xce9d05ba
mov dword [ebp - 0x200], 0
jmp 0x100512a1
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 3
jge 0x100512bd
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x10e8], 0x82ff40fc
jmp 0x10051294
mov dword [ebp - 0x300], 0
jmp 0x100512d6
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xd
jle 0x1005138a
mov dword [ebp - 0x338], 0x951ea66e
mov dword [ebp - 0xd38], 0xffffffff
mov dword [ebp - 0x590], 0x1e5c8a52
mov dword [ebp - 0x208], 0
jmp 0x1005131a
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x10051336
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x1124], 3
jmp 0x1005130d
mov dword [ebp - 0x338], 2
jmp 0x1005134f
mov eax, dword [ebp - 0x338]
dec eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 0
jl 0x10051385
mov dword [ebp - 0xd40], 0x69161d59
mov dword [ebp - 0xd48], 1
mov dword [ebp - 0xd50], 0xfffffff6
mov eax, dword [ebp - 0x590]
inc eax
mov dword [ebp - 0x590], eax
jmp 0x10051342
jmp 0x100512c9
jmp 0x10051264
mov dword [ebp - 0xb68], 0x45a8cced
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x5c], 0x7b79f6a7
mov dword [ebp - 0x40], 0xe4c20f74
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x9b8], 0x2a909f0
mov dword [ebp - 0x39c], 0x1c4e
mov dword [ebp - 0x210], 0
jmp 0x100513ec
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 2
jge 0x10051408
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0xaa0], 0xffffffff
jmp 0x100513df
cmp dword [ebp - 0x5c], 0xa3a92bd4
je 0x1005141d
mov dword [ebp - 0x960], 1
jmp 0x10051424
and dword [ebp - 0x960], 0
mov eax, dword [ebp - 0x960]
neg eax
jne 0x10051483
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd58], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd60], eax
mov dword [ebp - 0x40], 0xb82c
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x5c], eax
jle 0x10051462
push 0xfffffffffffffff9
pop eax
test eax, eax
je 0x10051462
mov dword [ebp - 0x968], 1
jmp 0x10051469
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x968]
lea eax, [ecx + eax - 7]
test eax, eax
jne 0x10051483
and dword [ebp - 0x970], 0
jmp 0x1005148d
mov dword [ebp - 0x970], 1
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x970], eax
jl 0x100514ad
mov eax, 0xb7a14055
test eax, eax
je 0x100514ad
mov dword [ebp - 0x990], 1
jmp 0x100514b4
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x990], eax
je 0x100514cb
mov dword [ebp - 0x998], 1
jmp 0x100514d2
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x998], eax
je 0x100514e9
mov dword [ebp - 0xa64], 1
jmp 0x100514f0
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x74], eax
jne 0x10051513
cmp dword [ebp - 0x74], 0
jne 0x10051513
and dword [ebp - 0x9a0], 0
jmp 0x1005151d
mov dword [ebp - 0x9a0], 1
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x64], eax
jg 0x1005153a
mov dword [ebp - 0x9a8], 1
jmp 0x10051541
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0x9a8]
add eax, 0x7c1ca7a4
je 0x1005156f
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x1005156a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
jmp 0x1005160a
mov dword [ebp - 0x308], 0
jmp 0x10051588
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x100515a4
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0x1094], 0xfffffffd
jmp 0x1005157b
mov dword [ebp - 0x40], 0
jmp 0x100515b4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jg 0x100515ee
mov dword [ebp - 0x64], 0
jmp 0x100515ca
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x100515ec
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x100515ea
push 0
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
jmp 0x100515c3
jmp 0x100515ad
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1005160a
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xd68], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xd70], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x40], eax
jge 0x10051636
cmp dword [ebp - 0x74], 0
je 0x10051636
mov dword [ebp - 0x9b0], 1
jmp 0x1005163d
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0x9b8], eax
cmp dword [ebp - 0x9b8], 0xc9fc22f7
jne 0x10051661
mov dword [ebp - 0x9c0], 1
jmp 0x10051668
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x9c0], eax
jl 0x1005167f
mov dword [ebp - 0x9c8], 1
jmp 0x10051686
and dword [ebp - 0x9c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa0]
cmp dword [ebp - 0x9c8], eax
jge 0x100516aa
cmp dword [ebp - 0x74], 0
jne 0x100516aa
and dword [ebp - 0x9d0], 0
jmp 0x100516b4
mov dword [ebp - 0x9d0], 1
cmp dword [ebp - 0x9d0], 0
jne 0x100516c9
mov dword [ebp - 0x9d8], 1
jmp 0x100516d0
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0x2401
jle 0x100516e8
mov dword [ebp - 0x92c], 1
jmp 0x100516ef
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0x92c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xaa0]
imul eax, dword [ebp - 0x39c]
test eax, eax
je 0x10051717
push 3
pop eax
test eax, eax
jne 0x10051729
mov eax, 0xad1d
test eax, eax
jne 0x10051729
and dword [ebp - 0x958], 0
jmp 0x10051733
mov dword [ebp - 0x958], 1
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x958], eax
jge 0x1005174a
mov dword [ebp - 0x49c], 1
jmp 0x10051751
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 1
jg 0x1005176f
cmp dword [ebp - 0x39c], 0
je 0x1005176f
mov dword [ebp - 0x748], 1
jmp 0x10051776
and dword [ebp - 0x748], 0
cmp dword [ebp - 0x748], 0xfffffff7
jg 0x1005178b
mov dword [ebp - 0x4a4], 1
jmp 0x10051792
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x4a4]
jge 0x100517ac
cmp dword [ebp - 0x64], 0
jne 0x100517ac
and dword [ebp - 0x744], 0
jmp 0x100517b6
mov dword [ebp - 0x744], 1
cmp dword [ebp - 0x744], 4
jbe 0x100517cb
mov dword [ebp - 0x4ac], 1
jmp 0x100517d2
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x39c]
add eax, dword [ebp - 0x4ac]
cmp eax, dword [ebp - 0x40]
jle 0x100517ef
mov dword [ebp - 0x88c], 1
jmp 0x100517f6
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0x88c], 0x1945
jl 0x1005180e
mov dword [ebp - 0x4b4], 1
jmp 0x10051815
and dword [ebp - 0x4b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xaa0]
add eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0xd78], 0
mov dword [ebp - 0xd80], 0xca4f833f
mov dword [ebp - 0xbfc], 0x34fda0e6
mov dword [ebp - 0xbf8], 0x34fda0e6
mov dword [ebp - 0xbf4], 0x34fda0e6
mov dword [ebp - 0xbf0], 0x34fda0e6
mov dword [ebp - 0xd88], 0x2038e85a
mov dword [ebp - 0x74c], 0x956e74e8
mov dword [ebp - 0xd90], 1
mov dword [ebp - 0x218], 0
jmp 0x100518a5
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x100518c1
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x109c], 0x16b471df
jmp 0x10051898
mov eax, dword [ebp - 0x74c]
dec eax
mov dword [ebp - 0x74c], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
imul ecx, ecx, 3
mov eax, dword [ebp + eax - 0xbfc]
mov dword [ebp + ecx - 0xbfc], eax
mov dword [ebp - 0x18c], 0x76820624
mov dword [ebp - 0x3d4], 0x1860ec01
mov dword [ebp - 0xa6c], 1
mov dword [ebp - 0x18c], 0xfffffff1
jmp 0x1005191f
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x1b
jg 0x10051946
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x10051944
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
jmp 0x10051912
xor eax, eax
jne 0x1005195d
mov eax, dword [ebp - 0x3d4]
neg eax
jne 0x1005195d
and dword [ebp - 0x4bc], 0
jmp 0x10051967
mov dword [ebp - 0x4bc], 1
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x18c], eax
jle 0x10051993
mov eax, 0xeb59
test eax, eax
jne 0x10051993
and dword [ebp - 0x9c4], 0
jmp 0x1005199d
mov dword [ebp - 0x9c4], 1
cmp dword [ebp - 0x9c4], 0x307b5ca9
jg 0x100519bb
cmp dword [ebp - 0x3d4], 0
jne 0x100519bb
and dword [ebp - 0x4c4], 0
jmp 0x100519c5
mov dword [ebp - 0x4c4], 1
mov eax, dword [ebp - 0x4c4]
sub eax, 0xd2f3
mov dword [ebp - 0xa6c], eax
mov dword [ebp - 0x130], 0
jmp 0x100519ef
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jg 0x10052dcb
mov dword [ebp - 0xa7c], 0x1c7b
mov dword [ebp - 0xb08], 0x51dba339
mov dword [ebp - 0x3e4], 6
mov dword [ebp - 0xa8c], 0xfffffffa
mov dword [ebp - 0xa74], 7
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0xb10], 0x950c
mov dword [ebp - 0xa0], 0
jmp 0x10051a5b
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x10051a77
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x1170], 0xffffffff
jmp 0x10051a4e
mov dword [ebp - 0xa0], 0
jmp 0x10051a90
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x10051aac
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xa94], 1
jmp 0x10051a83
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
je 0x10051ad5
mov eax, dword [ebp - 0x3e4]
inc eax
je 0x10051ad5
xor eax, eax
inc eax
je 0x10051ad5
mov dword [ebp - 0x754], 1
jmp 0x10051adc
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0xffffffff
jl 0x10051af1
mov dword [ebp - 0x4cc], 1
jmp 0x10051af8
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x3e4]
cmp dword [ebp - 0x4cc], eax
jle 0x10051b12
mov dword [ebp - 0x894], 1
jmp 0x10051b19
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0xa74]
sub eax, dword [ebp - 0x894]
cmp eax, 7
jne 0x10051b36
mov dword [ebp - 0x4d4], 1
jmp 0x10051b3d
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0xa7c]
cmp dword [ebp - 0x4d4], eax
jle 0x10051b57
mov dword [ebp - 0xa84], 1
jmp 0x10051b5e
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xd98], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa94], 0
je 0x10051b83
cmp dword [ebp - 0xb08], 0
jne 0x10051b95
cmp dword [ebp - 0xb10], 0
jne 0x10051b95
and dword [ebp - 0x75c], 0
jmp 0x10051b9f
mov dword [ebp - 0x75c], 1
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x3e4], eax
mov dword [ebp - 0x364], 0x8c6a53d0
mov dword [ebp - 0x364], 0xfffffffe
jmp 0x10051bce
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 0
je 0x10051dc4
mov dword [ebp - 0x110], 0x1836ccb0
mov dword [ebp - 0x220], 0
jmp 0x10051bfe
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x10051c1a
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x9f0], 0x88a137b1
jmp 0x10051bf1
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x10051c39
push 0x2555
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov dword [ebp - 0x110], 1
jmp 0x10051c52
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10051dbf
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x934], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
mov eax, dword [ebp + eax - 0x9f0]
mov dword [ebp + ecx*4 - 0x9f0], eax
mov dword [ebp - 0x310], 0xffffffed
jmp 0x10051ca6
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x12
jl 0x10051dba
mov dword [ebp - 0x228], 0x3717be9f
mov dword [ebp - 0x228], 0xffffffe3
jmp 0x10051cd6
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xa
jle 0x10051db5
mov dword [ebp - 0x340], 0xcd9d75
mov dword [ebp - 0x340], 1
jmp 0x10051d06
mov eax, dword [ebp - 0x340]
dec eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0
jl 0x10051da6
mov dword [ebp - 0x230], 0xc1da7bc9
mov dword [ebp - 0x230], 0
jmp 0x10051d36
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 1
jg 0x10051d80
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0x9f0], 0
jne 0x10051d68
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0x9f0], 0
jne 0x10051d68
and dword [ebp - 0x4dc], 0
jmp 0x10051d72
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x934], eax
jmp 0x10051d29
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10051da1
push 0x10d3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jmp 0x10051cf9
mov dword [ebp - 0x934], 0xa2d34caa
jmp 0x10051cc9
jmp 0x10051c99
jmp 0x10051c45
jmp 0x10051bc1
mov dword [ebp - 0xe8], 0
jmp 0x10051ddd
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10051df9
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x36c], 0x6e838462
jmp 0x10051dd0
mov dword [ebp - 0xe8], 0
jmp 0x10051e12
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10051e2e
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1038], 0xfffffffb
jmp 0x10051e05
mov dword [ebp - 0x14], 0x469ad59e
mov dword [ebp - 0x404], 0x9a46bb21
mov dword [ebp - 0x784], 0xc59458d8
mov dword [ebp - 0x534], 1
mov dword [ebp - 0x1c], 0
jmp 0x10051e63
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10051e76
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x44], 1
jmp 0x10051e5c
mov dword [ebp - 0x1c], 0
jmp 0x10051e86
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10051e9c
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xbd4], 0xafd208dd
jmp 0x10051e7f
mov dword [ebp - 0x1c], 0
jmp 0x10051eac
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10051ec2
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1154], 0x5bcd
jmp 0x10051ea5
mov dword [ebp - 0x14], 0
jmp 0x10051ed2
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x10052254
mov dword [ebp - 0x318], 0xffffffff
mov dword [ebp - 0xa8], 0
jmp 0x10051eff
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10051f1b
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xea4], 0x59653e3f
jmp 0x10051ef2
mov dword [ebp - 0xa8], 0
jmp 0x10051f34
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x10051f50
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xdc4], 0xb5a26cde
jmp 0x10051f27
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x44], 0
je 0x1005202c
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x44], 0
jne 0x10052004
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x44], 0xffffffff
jb 0x10051f89
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x44], 0
jne 0x10051f89
and dword [ebp - 0x4e4], 0
jmp 0x10051f93
mov dword [ebp - 0x4e4], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x44]
cmp dword [ebp - 0x4e4], eax
jle 0x10051fbd
mov eax, 0xb719
test eax, eax
jne 0x10051fbd
mov eax, 0x7263
test eax, eax
jne 0x10051fbd
and dword [ebp - 0x764], 0
jmp 0x10051fc7
mov dword [ebp - 0x764], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x44]
cmp eax, dword [ebp - 0x764]
jle 0x10051fe2
mov dword [ebp - 0x4ec], 1
jmp 0x10051fe9
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x44]
imul eax, dword [ebp - 0x4ec]
test eax, eax
jne 0x10052004
and dword [ebp - 0x89c], 0
jmp 0x1005200e
mov dword [ebp - 0x89c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x89c], eax
je 0x1005202c
mov dword [ebp - 0x4f4], 1
jmp 0x10052033
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0xcadfb1af
jb 0x1005204b
mov dword [ebp - 0x76c], 1
jmp 0x10052052
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x44]
mov ecx, dword [ebp - 0x76c]
lea eax, [ecx + eax - 0xffff]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x44]
jg 0x1005207e
mov dword [ebp - 0x4fc], 1
jmp 0x10052085
and dword [ebp - 0x4fc], 0
cmp dword [ebp - 0x4fc], 0
ja 0x1005209a
mov dword [ebp - 0x98c], 1
jmp 0x100520a1
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x98c], 0x220985a9
je 0x100520b9
mov dword [ebp - 0x504], 1
jmp 0x100520c0
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x504]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xea4], eax
mov dword [ebp - 0x318], 0
jmp 0x100520ee
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jl 0x1005224f
mov dword [ebp - 0x118], 0xfb389fa1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x774], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x774]
mov dword [ebp + eax - 0xdc4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
cmp dword [ebp - 0x774], eax
je 0x1005213f
mov dword [ebp - 0xb2c], 1
jmp 0x10052146
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x14], eax
jle 0x1005215d
mov dword [ebp - 0x50c], 1
jmp 0x10052164
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 1
jne 0x10052179
mov dword [ebp - 0x8a4], 1
jmp 0x10052180
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 1
je 0x10052195
mov dword [ebp - 0x514], 1
jmp 0x1005219c
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
neg eax
cmp dword [ebp - 0x118], eax
jl 0x100521b8
mov dword [ebp - 0x77c], 1
jmp 0x100521bf
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
sub eax, dword [ebp - 0x118]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xea4]
jl 0x100521e5
mov dword [ebp - 0x51c], 1
jmp 0x100521ec
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
sub eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x118]
jge 0x10052212
mov dword [ebp - 0x93c], 1
jmp 0x10052219
and dword [ebp - 0x93c], 0
cmp dword [ebp - 0x93c], 1
jne 0x1005222e
mov dword [ebp - 0xb38], 1
jmp 0x10052235
and dword [ebp - 0xb38], 0
mov dword [ebp - 0x118], 0x6042c8cd
cmp dword [ebp - 0x404], 0
je 0x1005224a
jmp 0x1005224f
jmp 0x100520e1
jmp 0x10051ecb
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x14], eax
jne 0x100522f5
mov dword [ebp - 0xda0], 0x5c00d4b
mov dword [ebp - 0xe4], 0
jmp 0x10052286
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x100522a2
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x10f4], 0xfa755584
jmp 0x10052279
mov dword [ebp - 0xe4], 0
jmp 0x100522bb
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 3
jge 0x100522d7
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0xeb4], 0x3fa8726a
jmp 0x100522ae
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xeb4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xeb4], eax
jmp 0x10052424
mov dword [ebp - 0x1cc], 0x1e1d
mov dword [ebp - 0xb48], 7
mov byte [ebp - 0x184], 0
movzx eax, byte [ebp - 0x184]
test eax, eax
je 0x10052334
push 0x1abe
push 0x1e4c
push 0
push 0x264b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x1cc]
add eax, dword [ebp - 0x1cc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xbd4]
jg 0x10052364
cmp dword [ebp - 0x404], 0
je 0x10052364
mov dword [ebp - 0xb40], 1
jmp 0x1005236b
and dword [ebp - 0xb40], 0
cmp dword [ebp - 0x1cc], 0xfffffffc
je 0x10052389
cmp dword [ebp - 0x1cc], 0
je 0x10052389
mov dword [ebp - 0x524], 1
jmp 0x10052390
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
add eax, 0xaa7a
cmp eax, dword [ebp - 0x14]
je 0x100523b5
cmp dword [ebp - 0x1cc], 0
je 0x100523b5
mov dword [ebp - 0x52c], 1
jmp 0x100523bc
and dword [ebp - 0x52c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbd4]
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
cmp eax, dword [ebp - 0x52c]
jle 0x100523e9
mov dword [ebp - 0x8ac], 1
jmp 0x100523f0
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x534], eax
cmp dword [ebp - 0x534], 0
jae 0x10052411
mov dword [ebp - 0x78c], 1
jmp 0x10052418
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0xb48], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x36c], 3
jmp 0x10052452
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x36c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x36c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0
jl 0x10052dc0
mov dword [ebp - 0x238], 6
mov dword [ebp - 0x238], 2
jmp 0x10052489
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xe
jge 0x1005253a
mov dword [ebp - 0x240], 0
mov dword [ebp - 0x2c8], 0
jmp 0x100524b9
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x100524d5
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x10b4], 7
jmp 0x100524ac
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x100524f9
push 0xafb
push 0x189e
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
mov dword [ebp - 0x240], 1
jmp 0x10052512
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jl 0x10052535
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x10052533
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
jmp 0x10052505
jmp 0x1005247c
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1005256a
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov dword [ebp - 0xc14], 0x4d39d982
mov dword [ebp - 0xc10], 0x4d39d982
mov dword [ebp - 0xc0c], 0x4d39d982
mov dword [ebp - 0xc08], 0x4d39d982
mov dword [ebp - 0x248], 0xfffffff7
mov dword [ebp - 0xb60], 0
mov dword [ebp - 0x2c4], 0
jmp 0x100525bf
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 4
jge 0x100525db
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xa08], 0xffffffff
jmp 0x100525b2
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 3
mov ecx, dword [ebp + ecx - 0xa08]
cmp dword [ebp + eax - 0xa08], ecx
jg 0x100526ea
mov dword [ebp - 0x794], 0xaeb9ae77
mov dword [ebp - 0xb50], 0xfffffff8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x794], eax
je 0x10052630
mov dword [ebp - 0x53c], 1
jmp 0x10052637
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x53c], eax
jle 0x10052661
mov eax, 0x3358
test eax, eax
je 0x10052661
mov dword [ebp - 0x9b4], 1
jmp 0x10052668
and dword [ebp - 0x9b4], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x9b4], eax
jg 0x10052689
mov dword [ebp - 0x544], 1
jmp 0x10052690
and dword [ebp - 0x544], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x544], eax
jl 0x100526b1
mov dword [ebp - 0x54c], 1
jmp 0x100526b8
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x794]
cmp eax, dword [ebp - 0x54c]
jne 0x100526d2
mov dword [ebp - 0x8b4], 1
jmp 0x100526d9
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0xb50], eax
jmp 0x100527ad
mov dword [ebp - 0x120], 9
mov dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
je 0x10052772
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x120], eax
jne 0x10052724
cmp dword [ebp - 0x120], 0
jne 0x10052732
xor eax, eax
inc eax
jne 0x10052732
and dword [ebp - 0x554], 0
jmp 0x1005273c
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x554], eax
jl 0x10052756
mov dword [ebp - 0x79c], 1
jmp 0x1005275d
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 1
jne 0x10052772
mov dword [ebp - 0x55c], 1
jmp 0x10052779
and dword [ebp - 0x55c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x55c], eax
jne 0x1005279a
mov dword [ebp - 0x944], 1
jmp 0x100527a1
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0xb58], eax
mov dword [ebp - 0x248], 0
jmp 0x100527c6
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xffffffe6
jl 0x100528da
mov dword [ebp - 0x400], 0x627e80a
mov dword [ebp - 0x2d4], 0
jmp 0x100527f6
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 2
jge 0x10052812
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xdd0], 0xfffffff7
jmp 0x100527e9
cmp dword [ebp - 0x400], 0
je 0x10052824
mov eax, 0x6dd3ed23
test eax, eax
jne 0x1005289e
cmp dword [ebp - 0xb60], 0
jne 0x10052866
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa08], 1
jne 0x10052851
cmp dword [ebp - 0x400], 0
je 0x10052851
mov dword [ebp - 0x564], 1
jmp 0x10052858
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x400]
cmp dword [ebp - 0x564], eax
je 0x10052882
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa08], 0
je 0x10052882
mov dword [ebp - 0x7a4], 1
jmp 0x10052889
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 0xed0bd2f2
jbe 0x1005289e
and dword [ebp - 0x56c], 0
jmp 0x100528a8
mov dword [ebp - 0x56c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x56c]
mov dword [ebp + eax - 0xdd0], ecx
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x100528d5
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x100527b9
mov dword [ebp - 0x250], 0
jmp 0x100528f3
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x1005290f
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x128], 0xb61bab59
jmp 0x100528e6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x128], 0
jmp 0x1005293d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x128], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x128], 3
jg 0x10052caa
mov dword [ebp - 0x194], 0x78dc2a82
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x94c], 0x6e90
mov dword [ebp - 0x194], 0
jmp 0x10052988
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jg 0x10052c9a
mov dword [ebp - 0x100], 0x1b552bf3
mov dword [ebp - 0x584], 0x30fc3532
mov dword [ebp - 0x100], 0
jmp 0x100529c2
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x10052b45
mov dword [ebp - 0xa0c], 0xd021
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov eax, dword [ebp + eax*4 - 0x47c]
mov dword [ebp - 0xda8], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xdb0], eax
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xdb8], eax
cmp dword [ebp - 0x84], 0
jne 0x10052a37
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp + eax*4 - 0x47c], 0
je 0x10052a4c
cmp dword [ebp - 0x84], 0
je 0x10052a4c
mov dword [ebp - 0x8bc], 1
jmp 0x10052a53
and dword [ebp - 0x8bc], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xc14], 0xa93826a0
cmp dword [ebp - 0x8bc], 0xa93826a0
je 0x10052a7c
mov dword [ebp - 0x574], 1
jmp 0x10052a83
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x574], eax
jge 0x10052a9d
mov dword [ebp - 0x7ac], 1
jmp 0x10052aa4
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0xa0c]
cmp dword [ebp - 0x7ac], eax
jge 0x10052abe
mov dword [ebp - 0x57c], 1
jmp 0x10052ac5
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
mov eax, dword [ebp + eax*4 - 0x47c]
cmp dword [ebp - 0x57c], eax
jl 0x10052aed
mov dword [ebp - 0x994], 1
jmp 0x10052af4
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x84], 0
jmp 0x10052b19
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jg 0x10052b40
mov dword [ebp - 0x584], 0x2a2c7a2e
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x47c], 0
je 0x10052b3e
jmp 0x10052b0c
jmp 0x10052b0c
jmp 0x100529b5
cmp dword [ebp - 0x130], 0
jne 0x10052c76
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
sub eax, dword [ebp - 0x84]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x36c]
jg 0x10052b80
mov dword [ebp - 0x7b4], 1
jmp 0x10052b87
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x7b4]
lea eax, [ecx + eax + 6]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x94c]
cmp dword [ebp - 0x6c], eax
je 0x10052bb1
mov dword [ebp - 0x58c], 1
jmp 0x10052bb8
and dword [ebp - 0x58c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x36c]
add eax, dword [ebp - 0x58c]
cmp eax, 0x9020c5ab
jbe 0x10052be7
mov eax, 0xffd52699
test eax, eax
je 0x10052be7
mov dword [ebp - 0x8c4], 1
jmp 0x10052bee
and dword [ebp - 0x8c4], 0
cmp dword [ebp - 0x8c4], 0x915e3087
jbe 0x10052c06
mov dword [ebp - 0x594], 1
jmp 0x10052c0d
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x594]
cmp eax, 7
jg 0x10052c2b
mov dword [ebp - 0x7bc], 1
jmp 0x10052c32
and dword [ebp - 0x7bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x47c]
cmp dword [ebp - 0x7bc], eax
jg 0x10052c53
mov dword [ebp - 0xb70], 1
jmp 0x10052c5a
and dword [ebp - 0xb70], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xe64], eax
push 2
pop eax
test eax, eax
jne 0x10052c76
and dword [ebp - 0x59c], 0
jmp 0x10052c80
mov dword [ebp - 0x59c], 1
mov eax, dword [ebp - 0x59c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc14], eax
jmp 0x1005297b
cmp dword [ebp - 0x94c], 0
je 0x10052ca5
jmp 0x10052caa
jmp 0x10052922
mov dword [ebp - 0x6c], 0
jmp 0x10052cba
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jg 0x10052dbb
mov dword [ebp - 0xb78], 0xffffffff
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x36c], 0
je 0x10052d1c
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xe6c], eax
mov eax, dword [ebp - 0x6c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x47c]
push 4
pop edx
shl edx, 0
sub ecx, dword [ebp + edx - 0x47c]
cmp dword [ebp + eax*4 - 0x47c], ecx
je 0x10052d1c
mov dword [ebp - 0x5a4], 1
jmp 0x10052d23
and dword [ebp - 0x5a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x36c]
cmp dword [ebp - 0x5a4], eax
jne 0x10052d44
mov dword [ebp - 0x7c4], 1
jmp 0x10052d4b
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 0xffffffff
jl 0x10052d60
mov dword [ebp - 0x5ac], 1
jmp 0x10052d67
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x47c]
cmp eax, dword [ebp - 0x5ac]
je 0x10052d85
mov dword [ebp - 0x3a4], 1
jmp 0x10052d8c
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0x1038], ecx
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0xb78], eax
cmp dword [ebp - 0x130], 0
je 0x10052db6
jmp 0x10052dbb
jmp 0x10052cb3
jmp 0x10052437
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], eax
jmp 0x100519e2
mov dword [ebp - 0x38], 0x477862f
mov dword [ebp - 0x1f0], 1
mov dword [ebp - 0x260], 0xa1e2510a
mov dword [ebp - 0xe74], 0xfffc
mov dword [ebp - 0x38], 6
jmp 0x10052e00
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffff3
jge 0x100532ef
mov dword [ebp - 0x7dc], 0xeb1ec6c0
mov dword [ebp - 0xa18], 7
mov dword [ebp - 0x2dc], 0
jmp 0x10052e37
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jge 0x10052e53
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x424], 6
jmp 0x10052e2a
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x424], 0x18
jmp 0x10052e81
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x424], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x424], 0x13
jle 0x100530be
mov dword [ebp - 0x7d4], 0x9f3b06d9
mov dword [ebp - 0x8d4], 0
mov dword [ebp - 0x258], 0
jmp 0x10052ec2
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x10052ede
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x3e8], 0xffffffff
jmp 0x10052eb5
cmp dword [ebp - 0x38], 0
jne 0x10053053
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x424]
sub eax, dword [ebp - 0x38]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x424]
jg 0x10052f14
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
imul eax, dword [ebp - 0x38]
test eax, eax
je 0x10052f3b
cmp dword [ebp - 0x38], 0
je 0x10052f3b
mov dword [ebp - 0x8cc], 1
jmp 0x10052f42
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 0xfff7
ja 0x10052f5a
mov dword [ebp - 0x5b4], 1
jmp 0x10052f61
and dword [ebp - 0x5b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp dword [ebp - 0x5b4], eax
jne 0x10052f82
mov dword [ebp - 0x7cc], 1
jmp 0x10052f89
and dword [ebp - 0x7cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp dword [ebp - 0x7cc], eax
jl 0x10052faa
mov dword [ebp - 0x5bc], 1
jmp 0x10052fb1
and dword [ebp - 0x5bc], 0
cmp dword [ebp - 0x5bc], 0xa7bf
jne 0x10052fc9
mov dword [ebp - 0xb34], 1
jmp 0x10052fd0
and dword [ebp - 0xb34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e8]
mov dword [ebp - 0xe7c], eax
imul eax, dword [ebp - 0x38], 0xda6c
cmp eax, dword [ebp - 0x38]
jle 0x10052ffb
mov dword [ebp - 0x9d4], 1
jmp 0x10053002
and dword [ebp - 0x9d4], 0
mov eax, 0xf7203fa0
sub eax, dword [ebp - 0x9d4]
cmp eax, 0xffffffff
jae 0x1005301e
mov dword [ebp - 0x5c4], 1
jmp 0x10053025
and dword [ebp - 0x5c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
add eax, dword [ebp - 0x5c4]
imul eax, eax, 0xfffffff9
mov dword [ebp - 0x7d4], eax
cmp dword [ebp - 0x7d4], 0
jne 0x10053053
and dword [ebp - 0x5cc], 0
jmp 0x1005305d
mov dword [ebp - 0x5cc], 1
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0x8d4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp dword [ebp - 0x8d4], eax
jl 0x1005308a
mov dword [ebp - 0xa5c], 1
jmp 0x10053091
and dword [ebp - 0xa5c], 0
cmp dword [ebp - 0x38], 0x5f40
jle 0x100530a6
mov dword [ebp - 0x5d4], 1
jmp 0x100530ad
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x1f0], eax
jmp 0x10052e66
mov dword [ebp - 0x1f0], 0x13
jmp 0x100530d7
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 9
jl 0x100532ea
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x5e4], 0xffffffff
mov dword [ebp - 0x138], 0
jmp 0x10053111
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jg 0x100532e5
mov dword [ebp - 0x2e4], 0xfb49a5c1
mov dword [ebp - 0x2e4], 3
jmp 0x10053141
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jl 0x10053228
mov dword [ebp - 0xf8], 0xfffffffd
mov dword [ebp - 0xf8], 0
jmp 0x10053171
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 3
jg 0x10053193
mov dword [ebp - 0xe84], 0xb1d4416d
mov eax, dword [ebp - 0x7dc]
dec eax
mov dword [ebp - 0x7dc], eax
jmp 0x10053164
mov dword [ebp - 0xf8], 3
jmp 0x100531ac
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x10053223
mov byte [ebp - 0x17b], 0
movzx eax, byte [ebp - 0x17b]
test eax, eax
je 0x100531cf
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x260], 0
jmp 0x100531e8
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jg 0x1005321e
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x1005321c
push 0x1c58
push 0x14fd
push 0
push 0x366
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x100531db
jmp 0x1005319f
jmp 0x10053134
cmp dword [ebp - 0xa18], 0
je 0x10053252
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x424]
cmp dword [ebp - 0x5e4], eax
jne 0x10053252
mov dword [ebp - 0x5dc], 1
jmp 0x10053259
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x5dc]
je 0x10053273
mov dword [ebp - 0x954], 1
jmp 0x1005327a
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x5e4], eax
jg 0x10053291
mov dword [ebp - 0x7e4], 1
jmp 0x10053298
and dword [ebp - 0x7e4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x424]
cmp eax, dword [ebp - 0x7e4]
je 0x100532b8
mov dword [ebp - 0x5ec], 1
jmp 0x100532bf
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x138]
mov eax, dword [ebp + eax*4 - 0x424]
imul eax, dword [ebp - 0x5ec]
mov ecx, dword [ebp - 0x138]
mov dword [ebp + ecx*4 - 0x424], eax
jmp 0x10053104
jmp 0x100530ca
jmp 0x10052df9
mov dword [ebp - 0x28], 0x9b55bb2c
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x19c], 0x3fa9a180
mov dword [ebp - 0xafc], 0
mov dword [ebp - 0xe8c], 0xf484
mov dword [ebp - 0x2ec], 0
jmp 0x10053337
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 2
jge 0x10053353
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x97c], 0xb7f609b2
jmp 0x1005332a
mov dword [ebp - 0x28], 0
jmp 0x10053363
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffef
jl 0x100533fe
mov dword [ebp - 0x5fc], 0xbdf7cd95
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xe94], eax
imul eax, dword [ebp - 0x5fc], 0xd166
cmp eax, 1
jb 0x1005339b
mov dword [ebp - 0x8dc], 1
jmp 0x100533a2
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x5f4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x5f4]
mov dword [ebp + eax - 0x97c], ecx
mov eax, dword [ebp - 0x8dc]
cmp eax, dword [ebp - 0x5f4]
jle 0x100533d8
mov dword [ebp - 0x7ec], 1
jmp 0x100533df
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x7ec]
sub eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x8c], 1
jmp 0x1005335c
cmp dword [ebp - 0x8c], 0
je 0x1005372e
mov dword [ebp - 0x1ac], 0xb94b
mov dword [ebp - 0xa20], 1
mov dword [ebp - 0xb0], 0
jmp 0x10053438
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 4
jge 0x10053454
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0xc84], 1
jmp 0x1005342b
mov dword [ebp - 0xb0], 0
jmp 0x1005346d
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x10053489
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1068], 8
jmp 0x10053460
mov dword [ebp - 0x28], 7
jmp 0x10053499
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x1c
jge 0x10053643
mov dword [ebp - 0x3ac], 0xffffffff
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xf3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x97c], 0xbfd0
jne 0x100534e1
cmp dword [ebp - 0x8c], 0
je 0x100534e1
mov dword [ebp - 0x99c], 1
jmp 0x100534e8
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x99c], eax
jg 0x10053502
mov dword [ebp - 0xb44], 1
jmp 0x10053509
and dword [ebp - 0xb44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x97c]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x19c]
add eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x3ac], eax
cmp dword [ebp - 0x3ac], 0
je 0x1005355f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc84], 0
je 0x1005355f
mov dword [ebp - 0x604], 1
jmp 0x10053566
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x604]
je 0x10053580
mov dword [ebp - 0x7f4], 1
jmp 0x10053587
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x7f4]
jg 0x100535a1
mov dword [ebp - 0x60c], 1
jmp 0x100535a8
and dword [ebp - 0x60c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
add eax, dword [ebp - 0x60c]
cmp dword [ebp - 0x1ac], eax
jl 0x100535cf
mov dword [ebp - 0x8e4], 1
jmp 0x100535d6
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
sub eax, dword [ebp - 0x28]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x97c]
jl 0x100535fa
mov dword [ebp - 0x614], 1
jmp 0x10053601
and dword [ebp - 0x614], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
cmp dword [ebp - 0x614], eax
jne 0x10053628
mov eax, 0x9fcb
test eax, eax
jne 0x10053628
and dword [ebp - 0x7fc], 0
jmp 0x10053632
mov dword [ebp - 0x7fc], 1
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0xa20], eax
jmp 0x10053492
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
mov dword [ebp - 0xf4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x97c]
mov dword [ebp - 0xf54], eax
cmp dword [ebp - 0x1ac], 0
je 0x1005368e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1068], 0
je 0x1005368e
mov dword [ebp - 0x95c], 1
jmp 0x10053695
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0xafc]
cmp dword [ebp - 0x19c], eax
jge 0x100536af
mov dword [ebp - 0x61c], 1
jmp 0x100536b6
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
sub eax, 4
neg eax
mov dword [ebp - 0x624], 1
jmp 0x100536d4
mov eax, dword [ebp - 0x95c]
cmp eax, dword [ebp - 0x624]
jl 0x100536f5
push 9
pop eax
test eax, eax
je 0x100536f5
mov dword [ebp - 0x804], 1
jmp 0x100536fc
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0x2647
jle 0x10053714
mov dword [ebp - 0x62c], 1
jmp 0x1005371b
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
sub eax, 0x51ad
mov dword [ebp - 0x28], eax
jmp 0x1005382b
mov dword [ebp - 0x268], 0
jmp 0x10053747
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x10053763
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0xc04], 0x58c9e433
jmp 0x1005373a
mov byte [ebp - 0x181], 0
movzx eax, byte [ebp - 0x181]
test eax, eax
je 0x1005377b
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [ebp - 0x19c], 0
jmp 0x10053794
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 1
jg 0x1005382b
mov dword [ebp - 0x2f4], 0
jmp 0x100537ba
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 4
jge 0x100537d6
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x10dc], 0xffffffff
jmp 0x100537ad
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc04]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xc04], eax
mov dword [ebp - 0x8c], 0
jmp 0x1005380a
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jg 0x10053826
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10dc], 0xc2329b61
jmp 0x100537fd
jmp 0x10053787
mov dword [ebp - 0xc], 0x15de
mov dword [ebp - 0x3c], 0x477862f
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0x304], 0xa1e2510a
mov dword [ebp - 0xf5c], 0xfffc
mov dword [ebp - 0x3c], 6
jmp 0x10053867
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff3
jge 0x10053d56
mov dword [ebp - 0x81c], 0xeb1ec6c0
mov dword [ebp - 0xa30], 7
mov dword [ebp - 0x270], 0
jmp 0x1005389e
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 4
jge 0x100538ba
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x444], 6
jmp 0x10053891
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x444], 0x18
jmp 0x100538e8
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x444]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x444], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x444], 0x13
jle 0x10053b25
mov dword [ebp - 0x814], 0x9f3b06d9
mov dword [ebp - 0x8f4], 0
mov dword [ebp - 0x2fc], 0
jmp 0x10053929
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 1
jge 0x10053945
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x3ec], 0xffffffff
jmp 0x1005391c
cmp dword [ebp - 0x3c], 0
jne 0x10053aba
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x444]
sub eax, dword [ebp - 0x3c]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x444]
jg 0x1005397b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
imul eax, dword [ebp - 0x3c]
test eax, eax
je 0x100539a2
cmp dword [ebp - 0x3c], 0
je 0x100539a2
mov dword [ebp - 0x8ec], 1
jmp 0x100539a9
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 0xfff7
ja 0x100539c1
mov dword [ebp - 0x634], 1
jmp 0x100539c8
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x634], eax
jne 0x100539e9
mov dword [ebp - 0x80c], 1
jmp 0x100539f0
and dword [ebp - 0x80c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x80c], eax
jl 0x10053a11
mov dword [ebp - 0x63c], 1
jmp 0x10053a18
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0xa7bf
jne 0x10053a30
mov dword [ebp - 0xa28], 1
jmp 0x10053a37
and dword [ebp - 0xa28], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ec]
mov dword [ebp - 0xf64], eax
imul eax, dword [ebp - 0x3c], 0xda6c
cmp eax, dword [ebp - 0x3c]
jle 0x10053a62
mov dword [ebp - 0x9bc], 1
jmp 0x10053a69
and dword [ebp - 0x9bc], 0
mov eax, 0xf7203fa0
sub eax, dword [ebp - 0x9bc]
cmp eax, 0xffffffff
jae 0x10053a85
mov dword [ebp - 0x644], 1
jmp 0x10053a8c
and dword [ebp - 0x644], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x444]
add eax, dword [ebp - 0x644]
imul eax, eax, 0xfffffff9
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x10053aba
and dword [ebp - 0x64c], 0
jmp 0x10053ac4
mov dword [ebp - 0x64c], 1
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x8f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x8f4], eax
jl 0x10053af1
mov dword [ebp - 0xb6c], 1
jmp 0x10053af8
and dword [ebp - 0xb6c], 0
cmp dword [ebp - 0x3c], 0x5f40
jle 0x10053b0d
mov dword [ebp - 0x654], 1
jmp 0x10053b14
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x654]
mov dword [ebp - 0x1ec], eax
jmp 0x100538cd
mov dword [ebp - 0x1ec], 0x13
jmp 0x10053b3e
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 9
jl 0x10053d51
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x664], 0xffffffff
mov dword [ebp - 0x140], 0
jmp 0x10053b78
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jg 0x10053d4c
mov dword [ebp - 0x278], 0xfb49a5c1
mov dword [ebp - 0x278], 3
jmp 0x10053ba8
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0
jl 0x10053c8f
mov dword [ebp - 0xf0], 0xfffffffd
mov dword [ebp - 0xf0], 0
jmp 0x10053bd8
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jg 0x10053bfa
mov dword [ebp - 0xf6c], 0xb1d4416d
mov eax, dword [ebp - 0x81c]
dec eax
mov dword [ebp - 0x81c], eax
jmp 0x10053bcb
mov dword [ebp - 0xf0], 3
jmp 0x10053c13
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x10053c8a
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x10053c36
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov dword [ebp - 0x304], 0
jmp 0x10053c4f
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jg 0x10053c85
mov byte [ebp - 0x17d], 0
movzx eax, byte [ebp - 0x17d]
test eax, eax
je 0x10053c83
push 0x1c58
push 0x14fd
push 0
push 0x366
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x10053c42
jmp 0x10053c06
jmp 0x10053b9b
cmp dword [ebp - 0xa30], 0
je 0x10053cb9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x664], eax
jne 0x10053cb9
mov dword [ebp - 0x65c], 1
jmp 0x10053cc0
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x65c]
je 0x10053cda
mov dword [ebp - 0x964], 1
jmp 0x10053ce1
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x664], eax
jg 0x10053cf8
mov dword [ebp - 0x824], 1
jmp 0x10053cff
and dword [ebp - 0x824], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x444]
cmp eax, dword [ebp - 0x824]
je 0x10053d1f
mov dword [ebp - 0x66c], 1
jmp 0x10053d26
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x140]
mov eax, dword [ebp + eax*4 - 0x444]
imul eax, dword [ebp - 0x66c]
mov ecx, dword [ebp - 0x140]
mov dword [ebp + ecx*4 - 0x444], eax
jmp 0x10053b6b
jmp 0x10053b31
jmp 0x10053860
mov dword [ebp - 0x1dc], 0x13532fe2
mov dword [ebp - 0x280], 0
jmp 0x10053d79
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x10053d95
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xaac], 0xfffb
jmp 0x10053d6c
mov dword [ebp - 0x1dc], 0
jmp 0x10053dae
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jg 0x10053e48
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x1d4], 0
jmp 0x10053dde
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jg 0x10053e43
mov dword [ebp - 0x1e4], 0xf7a73d2d
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp + eax*4 - 0xaac], 0
je 0x10053e03
jmp 0x10053e43
mov dword [ebp - 0x1e4], 0
jmp 0x10053e1c
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jg 0x10053e41
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ebp + eax*4 - 0xaac]
mov dword [ebp + ecx*4 - 0xaac], eax
jmp 0x10053e0f
jmp 0x10053dd1
jmp 0x10053da1
mov dword [ebp - 0x68], 1
mov dword [ebp - 0x30c], 0x571177e8
mov dword [ebp - 0xf74], 0xf9e923e6
mov dword [ebp - 0xf7c], 0x1e9c96c7
mov dword [ebp - 0xf84], 0x373b2c57
mov dword [ebp - 0xf8c], 0xa62a9695
mov dword [ebp - 0xf94], 0x95231fbf
mov dword [ebp - 0xb4c], 0x6c37fc05
mov dword [ebp - 0xf9c], 0x1485
mov dword [ebp - 0xfa4], 0xfffffff6
mov dword [ebp - 0xfac], 0x12cf
mov dword [ebp - 0x68c], 0x65c9e2f0
mov dword [ebp - 0xfb4], 0
mov dword [ebp - 0xdc], 0
jmp 0x10053ee0
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x10053efc
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0xc3c], 0x4bb489f7
jmp 0x10053ed3
mov dword [ebp - 0xdc], 0
jmp 0x10053f15
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 1
jge 0x10053f31
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0xfbc], 0x19e4
jmp 0x10053f08
mov dword [ebp - 0x30c], 0xffffffeb
jmp 0x10053f4a
mov eax, dword [ebp - 0x30c]
dec eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0xffffffe5
jg 0x100542f5
mov dword [ebp - 0x3b4], 0xffffffff
mov dword [ebp - 0xa40], 0
mov dword [ebp - 0xb8], 0
jmp 0x10053f84
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10053fa0
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xc64], 2
jmp 0x10053f77
mov dword [ebp - 0xb8], 0
jmp 0x10053fb9
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10053fd5
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xbb4], 0x9320
jmp 0x10053fac
cmp dword [ebp - 0x3b4], 0
je 0x10054073
mov dword [ebp - 0xfc4], 0x351c
mov dword [ebp - 0xfcc], 0xb7928fbc
mov dword [ebp - 0xfd4], 1
mov dword [ebp - 0xfdc], 0xfffffff6
mov dword [ebp - 0xe68], 4
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0x288], 0
jmp 0x10054037
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x10054053
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0xf68], 0xc694a61b
jmp 0x1005402a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbb4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbb4], eax
jmp 0x100542f0
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0x314], 0
jmp 0x10054096
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 3
jge 0x100540b2
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x450], 0x8f08877e
jmp 0x10054089
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x450], 0
jne 0x10054282
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0xc9c], eax
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xe70], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xbb4]
cmp dword [ebp + eax - 0xc64], ecx
jl 0x1005410c
mov dword [ebp - 0x8fc], 1
jmp 0x10054113
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc64]
add eax, dword [ebp - 0x8fc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xbb4]
jne 0x10054141
mov dword [ebp - 0xb04], 1
jmp 0x10054148
and dword [ebp - 0xb04], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc3c]
mov dword [ebp - 0xca4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0xfd8], eax
mov dword [ebp - 0xa38], 0xdbc8b697
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0xcac], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x450]
cmp dword [ebp + eax - 0xc64], ecx
jl 0x100541b1
mov dword [ebp - 0x674], 1
jmp 0x100541b8
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0xb4c]
cmp dword [ebp - 0x674], eax
jne 0x100541d2
mov dword [ebp - 0x82c], 1
jmp 0x100541d9
and dword [ebp - 0x82c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x450]
add eax, dword [ebp - 0x82c]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x450]
jge 0x10054211
cmp dword [ebp - 0xa40], 0
je 0x10054211
mov dword [ebp - 0x67c], 1
jmp 0x10054218
and dword [ebp - 0x67c], 0
cmp dword [ebp - 0x67c], 0xe5e26c5f
jbe 0x10054230
mov dword [ebp - 0x9a4], 1
jmp 0x10054237
and dword [ebp - 0x9a4], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x450]
imul edx, dword [ebp - 0x9a4], 6
sub ecx, edx
cmp dword [ebp + eax - 0x450], ecx
jl 0x10054267
mov dword [ebp - 0x684], 1
jmp 0x1005426e
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
inc eax
neg eax
jne 0x10054282
and dword [ebp - 0xb0c], 0
jmp 0x1005428c
mov dword [ebp - 0xb0c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc3c]
mov dword [ebp - 0xe78], eax
xor eax, eax
je 0x100542b8
cmp dword [ebp - 0x3b4], 0
je 0x100542b8
mov dword [ebp - 0x834], 1
jmp 0x100542bf
and dword [ebp - 0x834], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x834]
mov dword [ebp + eax - 0x450], ecx
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x100542f0
push 0x25c4
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
jmp 0x10053f3d
mov eax, dword [ebp - 0x68c]
dec eax
mov dword [ebp - 0x68c], eax
mov dword [ebp - 0x20], 0x9b55bb2c
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0x1a4], 0x3fa9a180
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0xcb4], 0xf484
mov dword [ebp - 0x290], 0
jmp 0x1005434a
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x10054366
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x988], 0xb7f609b2
jmp 0x1005433d
mov dword [ebp - 0x20], 0
jmp 0x10054376
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffef
jl 0x10054411
mov dword [ebp - 0x69c], 0xbdf7cd95
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf70], eax
imul eax, dword [ebp - 0x69c], 0xd166
cmp eax, 1
jb 0x100543ae
mov dword [ebp - 0x904], 1
jmp 0x100543b5
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x694], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x694]
mov dword [ebp + eax - 0x988], ecx
mov eax, dword [ebp - 0x904]
cmp eax, dword [ebp - 0x694]
jle 0x100543eb
mov dword [ebp - 0x83c], 1
jmp 0x100543f2
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x83c]
sub eax, dword [ebp - 0x69c]
mov dword [ebp - 0xc0], 1
jmp 0x1005436f
cmp dword [ebp - 0xc0], 0
je 0x10054741
mov dword [ebp - 0x1bc], 0xb94b
mov dword [ebp - 0xb18], 1
mov dword [ebp - 0xd0], 0
jmp 0x1005444b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 4
jge 0x10054467
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0xc74], 1
jmp 0x1005443e
mov dword [ebp - 0xd0], 0
jmp 0x10054480
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x1005449c
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x1044], 8
jmp 0x10054473
mov dword [ebp - 0x20], 7
jmp 0x100544ac
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1c
jge 0x10054656
mov dword [ebp - 0x3c0], 0xffffffff
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xcbc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x988], 0xbfd0
jne 0x100544f4
cmp dword [ebp - 0xc0], 0
je 0x100544f4
mov dword [ebp - 0x96c], 1
jmp 0x100544fb
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x96c], eax
jg 0x10054515
mov dword [ebp - 0xa48], 1
jmp 0x1005451c
and dword [ebp - 0xa48], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x988]
mov dword [ebp - 0xe80], eax
mov eax, dword [ebp - 0x1a4]
add eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x3c0], eax
cmp dword [ebp - 0x3c0], 0
je 0x10054572
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc74], 0
je 0x10054572
mov dword [ebp - 0x6a4], 1
jmp 0x10054579
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x6a4]
je 0x10054593
mov dword [ebp - 0x844], 1
jmp 0x1005459a
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x1bc]
cmp eax, dword [ebp - 0x844]
jg 0x100545b4
mov dword [ebp - 0x6ac], 1
jmp 0x100545bb
and dword [ebp - 0x6ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc74]
add eax, dword [ebp - 0x6ac]
cmp dword [ebp - 0x1bc], eax
jl 0x100545e2
mov dword [ebp - 0x90c], 1
jmp 0x100545e9
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x90c]
sub eax, dword [ebp - 0x20]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x988]
jl 0x1005460d
mov dword [ebp - 0x6b4], 1
jmp 0x10054614
and dword [ebp - 0x6b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc74]
cmp dword [ebp - 0x6b4], eax
jne 0x1005463b
mov eax, 0x9fcb
test eax, eax
jne 0x1005463b
and dword [ebp - 0x84c], 0
jmp 0x10054645
mov dword [ebp - 0x84c], 1
mov eax, dword [ebp - 0x84c]
mov dword [ebp - 0xb18], eax
jmp 0x100544a5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc74]
mov dword [ebp - 0xcc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x988]
mov dword [ebp - 0xfb8], eax
cmp dword [ebp - 0x1bc], 0
je 0x100546a1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1044], 0
je 0x100546a1
mov dword [ebp - 0x9cc], 1
jmp 0x100546a8
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0xa50]
cmp dword [ebp - 0x1a4], eax
jge 0x100546c2
mov dword [ebp - 0x6bc], 1
jmp 0x100546c9
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
sub eax, 4
neg eax
mov dword [ebp - 0x6c4], 1
jmp 0x100546e7
mov eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x6c4]
jl 0x10054708
push 9
pop eax
test eax, eax
je 0x10054708
mov dword [ebp - 0x854], 1
jmp 0x1005470f
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 0x2647
jle 0x10054727
mov dword [ebp - 0x6cc], 1
jmp 0x1005472e
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x6cc]
sub eax, 0x51ad
mov dword [ebp - 0x20], eax
jmp 0x1005483e
mov dword [ebp - 0x31c], 0
jmp 0x1005475a
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 2
jge 0x10054776
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0xbdc], 0x58c9e433
jmp 0x1005474d
mov byte [ebp - 0x17f], 0
movzx eax, byte [ebp - 0x17f]
test eax, eax
je 0x1005478e
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov dword [ebp - 0x1a4], 0
jmp 0x100547a7
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 1
jg 0x1005483e
mov dword [ebp - 0x298], 0
jmp 0x100547cd
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x100547e9
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x10cc], 0xffffffff
jmp 0x100547c0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbdc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xbdc], eax
mov dword [ebp - 0xc0], 0
jmp 0x1005481d
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jg 0x10054839
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x10cc], 0xc2329b61
jmp 0x10054810
jmp 0x1005479a
mov dword [ebp - 0x1b4], 0xffff
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b4], 0
jmp 0x1005486e
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x23
jg 0x10054978
mov dword [ebp - 0x1c8], 0
mov dword [ebp - 0x324], 0
jmp 0x1005489e
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x100548ba
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0xccc], 0
jmp 0x10054891
mov dword [ebp - 0x1c8], 0xfffffffa
mov dword [ebp - 0x1c8], 0xfffffff1
jmp 0x100548dd
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0x21
jge 0x10054973
mov dword [ebp - 0x2a0], 0xee41b66b
mov dword [ebp - 0x2a0], 0
jmp 0x1005490d
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0
jg 0x1005496e
mov dword [ebp - 0x32c], 1
mov dword [ebp - 0x32c], 0
jmp 0x10054939
mov eax, dword [ebp - 0x32c]
dec eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jl 0x1005496c
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1005496a
push 0x1de8
push 0
push 0
push 0x6ad
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
jmp 0x1005492c
jmp 0x10054900
jmp 0x100548d0
jmp 0x10054861
mov dword [ebp - 0x1d8], 0x13532fe2
mov dword [ebp - 0x2a8], 0
jmp 0x1005499b
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x100549b7
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0xab8], 0xfffb
jmp 0x1005498e
mov dword [ebp - 0x1d8], 0
jmp 0x100549d0
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jg 0x10054a6a
mov dword [ebp - 0x1d0], 1
mov dword [ebp - 0x1d0], 0
jmp 0x10054a00
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jg 0x10054a65
mov dword [ebp - 0x1c4], 0xf7a73d2d
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp + eax*4 - 0xab8], 0
je 0x10054a25
jmp 0x10054a65
mov dword [ebp - 0x1c4], 0
jmp 0x10054a3e
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 1
jg 0x10054a63
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1d8]
mov eax, dword [ebp + eax*4 - 0xab8]
mov dword [ebp + ecx*4 - 0xab8], eax
jmp 0x10054a31
jmp 0x100549f3
jmp 0x100549c3
mov dword [ebp - 0xe88], 1
mov dword [ebp - 0xcd4], 8
mov dword [ebp - 0xf78], 9
mov dword [ebp - 0xcdc], 0xfffffff7
mov dword [ebp - 0xa58], 0xffffffff
mov dword [ebp - 0xe90], 0xfffffffd
mov dword [ebp - 0xce4], 0x3126ff23
mov dword [ebp - 0x334], 0x66b1
mov dword [ebp - 0x101c], 0xffffffff
mov dword [ebp - 0xcec], 0
mov dword [ebp - 0xe98], 0xcc8af953
mov dword [ebp - 0xcf4], 0xb9628eaf
mov dword [ebp - 0xf80], 0x35a7ab5b
mov dword [ebp - 0xcfc], 1
mov dword [ebp - 0xff0], 0xfffffffa
mov dword [ebp - 0xfec], 0xfffffffa
mov dword [ebp - 0xfe8], 0xfffffffa
mov dword [ebp - 0xfe4], 0xfffffffa
mov dword [ebp - 0x914], 0
mov dword [ebp - 0xd8], 0
jmp 0x10054b41
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10054b5d
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xea8], 1
jmp 0x10054b34
mov dword [ebp - 0xd8], 0
jmp 0x10054b76
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x10054b92
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1100], 0x77d900d2
jmp 0x10054b69
mov eax, dword [ebp - 0x914]
inc eax
mov dword [ebp - 0x914], eax
mov dword [ebp - 0x334], 0
jmp 0x10054bb8
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
jg 0x10054bd9
mov dword [ebp - 0xb14], 4
mov eax, dword [ebp - 0xb14]
mov dword [ebp - 0xa58], eax
jmp 0x10054bab
mov dword [ebp - 0xd04], 0x4f01
mov dword [ebp - 0xb1c], 2
mov dword [ebp - 0xfc0], 0xfa75
mov dword [ebp - 0xd0c], 0x654fddd3
mov dword [ebp - 0xeb8], 0x12491e29
mov dword [ebp - 0xd14], 1
mov dword [ebp - 0xf88], 0x4800fa72
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xc8], 0
jmp 0x10054c42
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10054c5e
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x105c], 0xfe0091df
jmp 0x10054c35
mov dword [ebp - 0xc8], 0
jmp 0x10054c77
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x10054c93
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x3bc], 0x6d8d
jmp 0x10054c6a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3bc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3bc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3bc]
cmp dword [ebp - 0xb1c], eax
jl 0x10054ccf
mov dword [ebp - 0x6d4], 1
jmp 0x10054cd6
and dword [ebp - 0x6d4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x6d4]
mov dword [ebp + eax - 0x105c], ecx
mov dword [ebp - 0x2b0], 0x571177e8
mov dword [ebp - 0xec8], 0xf9e923e6
mov dword [ebp - 0xd24], 0x1e9c96c7
mov dword [ebp - 0xefc], 0x373b2c57
mov dword [ebp - 0xd2c], 0xa62a9695
mov dword [ebp - 0xed8], 0x95231fbf
mov dword [ebp - 0xa68], 0x6c37fc05
mov dword [ebp - 0xd34], 0x1485
mov dword [ebp - 0xf10], 0xfffffff6
mov dword [ebp - 0xd3c], 0x12cf
mov dword [ebp - 0x6f4], 0x65c9e2f0
mov dword [ebp - 0xee8], 0
mov dword [ebp - 0x90], 0
jmp 0x10054d79
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10054d95
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xbe4], 0x4bb489f7
jmp 0x10054d6c
mov dword [ebp - 0x90], 0
jmp 0x10054dae
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10054dca
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xd44], 0x19e4
jmp 0x10054da1
mov dword [ebp - 0x2b0], 0xffffffeb
jmp 0x10054de3
mov eax, dword [ebp - 0x2b0]
dec eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0xffffffe5
jg 0x1005518e
mov dword [ebp - 0x3c4], 0xffffffff
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0x94], 0
jmp 0x10054e1d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10054e39
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xc58], 2
jmp 0x10054e10
mov dword [ebp - 0x94], 0
jmp 0x10054e52
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10054e6e
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xbcc], 0x9320
jmp 0x10054e45
cmp dword [ebp - 0x3c4], 0
je 0x10054f0c
mov dword [ebp - 0xf18], 0x351c
mov dword [ebp - 0xd4c], 0xb7928fbc
mov dword [ebp - 0xef8], 1
mov dword [ebp - 0xd54], 0xfffffff6
mov dword [ebp - 0xf20], 4
mov dword [ebp - 0xd5c], 1
mov dword [ebp - 0x33c], 0
jmp 0x10054ed0
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x10054eec
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xf28], 0xc694a61b
jmp 0x10054ec3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbcc]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbcc], eax
jmp 0x10055189
mov dword [ebp - 0xb24], 0
mov dword [ebp - 0x2b8], 0
jmp 0x10054f2f
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x10054f4b
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0x45c], 0x8f08877e
jmp 0x10054f22
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x45c], 0
jne 0x1005511b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xfe0], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xbcc]
cmp dword [ebp + eax - 0xc58], ecx
jl 0x10054fa5
mov dword [ebp - 0x85c], 1
jmp 0x10054fac
and dword [ebp - 0x85c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc58]
add eax, dword [ebp - 0x85c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xbcc]
jne 0x10054fda
mov dword [ebp - 0xa60], 1
jmp 0x10054fe1
and dword [ebp - 0xa60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbe4]
mov dword [ebp - 0xd6c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0xf14], eax
mov dword [ebp - 0xb24], 0xdbc8b697
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x45c]
mov dword [ebp - 0xd74], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x45c]
cmp dword [ebp + eax - 0xc58], ecx
jl 0x1005504a
mov dword [ebp - 0x6dc], 1
jmp 0x10055051
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0xa68]
cmp dword [ebp - 0x6dc], eax
jne 0x1005506b
mov dword [ebp - 0x974], 1
jmp 0x10055072
and dword [ebp - 0x974], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x45c]
add eax, dword [ebp - 0x974]
neg eax
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x45c]
jge 0x100550aa
cmp dword [ebp - 0xb20], 0
je 0x100550aa
mov dword [ebp - 0x6e4], 1
jmp 0x100550b1
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 0xe5e26c5f
jbe 0x100550c9
mov dword [ebp - 0x864], 1
jmp 0x100550d0
and dword [ebp - 0x864], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x45c]
imul edx, dword [ebp - 0x864], 6
sub ecx, edx
cmp dword [ebp + eax - 0x45c], ecx
jl 0x10055100
mov dword [ebp - 0x6ec], 1
jmp 0x10055107
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
inc eax
neg eax
jne 0x1005511b
and dword [ebp - 0xa70], 0
jmp 0x10055125
mov dword [ebp - 0xa70], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbe4]
mov dword [ebp - 0xc88], eax
xor eax, eax
je 0x10055151
cmp dword [ebp - 0x3c4], 0
je 0x10055151
mov dword [ebp - 0x91c], 1
jmp 0x10055158
and dword [ebp - 0x91c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x91c]
mov dword [ebp + eax - 0x45c], ecx
mov byte [ebp - 0x183], 0
movzx eax, byte [ebp - 0x183]
test eax, eax
je 0x10055189
push 0x25c4
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
jmp 0x10054dd6
mov eax, dword [ebp - 0x6f4]
dec eax
mov dword [ebp - 0x6f4], eax
mov dword [ebp - 0x398], 5
mov dword [ebp - 0x394], 5
mov dword [ebp - 0x390], 5
mov dword [ebp - 0x38c], 5
mov dword [ebp - 0x2c], 0x6d444182
mov dword [ebp - 0xd7c], 0x8805e531
mov dword [ebp - 0x2c], 0
jmp 0x100551e4
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x10055632
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x30], 3
jmp 0x10055205
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1005531b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x398]
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x398]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x398]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x398]
mov dword [ebp - 0xf24], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x398]
cmp dword [ebp - 0x30], eax
jl 0x10055278
mov dword [ebp - 0x86c], 1
jmp 0x1005527f
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x398]
cmp dword [ebp - 0x86c], eax
je 0x1005529d
mov dword [ebp - 0x6fc], 1
jmp 0x100552a4
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x398]
cmp eax, dword [ebp - 0x6fc]
jge 0x100552c2
mov dword [ebp - 0xb64], 1
jmp 0x100552c9
and dword [ebp - 0xb64], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x398]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x398], ecx
je 0x100552ff
mov dword [ebp - 0x9ac], 1
jmp 0x10055306
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp + eax*4 - 0x398], ecx
jmp 0x100551fe
mov dword [ebp - 0x30], 0
jmp 0x1005532b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jg 0x1005562d
mov dword [ebp - 0xf4], 1
mov dword [ebp - 0x87c], 0xba430906
mov dword [ebp - 0xa78], 0xfffffffb
mov dword [ebp - 0xf4], 0
jmp 0x1005536c
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jg 0x10055619
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x410], 1
mov dword [ebp - 0x40c], 1
mov dword [ebp - 0x408], 1
mov dword [ebp - 0x344], 0
jmp 0x100553ba
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 2
jge 0x100553d6
mov eax, dword [ebp - 0x344]
mov dword [ebp + eax*4 - 0xddc], 0xffffffff
jmp 0x100553ad
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x414], 0
jmp 0x10055401
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x414]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x414], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x414], 3
jg 0x10055614
mov dword [ebp - 0x980], 0xba5c1243
mov eax, dword [ebp - 0xf4]
cmp dword [ebp + eax*4 - 0x398], 0
jne 0x100555dd
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x398]
mov dword [ebp - 0xd9c], eax
cmp dword [ebp - 0xf4], 0
jne 0x10055508
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x414]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x414]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x414]
jge 0x10055484
mov dword [ebp - 0x704], 1
jmp 0x1005548b
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x398]
cmp eax, dword [ebp - 0x704]
je 0x100554ac
mov dword [ebp - 0x3cc], 1
jmp 0x100554b3
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x414]
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0x398], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x3cc], eax
je 0x100554ed
mov dword [ebp - 0x874], 1
jmp 0x100554f4
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x874], eax
je 0x10055508
and dword [ebp - 0x70c], 0
jmp 0x10055512
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0x980]
cmp dword [ebp - 0x70c], eax
jge 0x1005552c
mov dword [ebp - 0x924], 1
jmp 0x10055533
and dword [ebp - 0x924], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x924], eax
jge 0x10055553
mov dword [ebp - 0x3c8], 1
jmp 0x1005555a
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0xddc], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x3c8], eax
jne 0x1005558d
mov dword [ebp - 0x714], 1
jmp 0x10055594
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x87c], eax
cmp dword [ebp - 0x87c], 0x46b7d869
jne 0x100555b8
mov dword [ebp - 0x71c], 1
jmp 0x100555bf
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x71c]
imul eax, dword [ebp - 0x980]
test eax, eax
jne 0x100555dd
and dword [ebp - 0x724], 0
jmp 0x100555e7
mov dword [ebp - 0x724], 1
cmp dword [ebp - 0x724], 0xfffffffd
jge 0x100555fc
mov dword [ebp - 0x884], 1
jmp 0x10055603
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0xa78], eax
jmp 0x100553e8
jmp 0x1005535f
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x398], 0
je 0x10055628
jmp 0x1005562d
jmp 0x10055324
jmp 0x100551dd
mov dword [ebp - 0xe0], 0
jmp 0x1005564b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x10055667
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x540], 0xb8eb5ea2
jmp 0x1005563e
mov dword [ebp - 0xe0], 0
jmp 0x10055680
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x1005569c
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0xba8], 0
jmp 0x10055673
mov dword [ebp - 0x2c0], 1
mov dword [ebp - 0x1004], 0xbea5223f
mov dword [ebp - 0x1000], 0xbea5223f
mov dword [ebp - 0xffc], 0xbea5223f
mov dword [ebp - 0xff8], 0xbea5223f
mov dword [ebp - 0x2c0], 8
jmp 0x100556e7
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0xe
jne 0x10055840
mov dword [ebp - 0x34c], 0xffffffff
mov dword [ebp - 0x34c], 5
jmp 0x10055717
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0xffffffe8
je 0x1005583b
mov dword [ebp - 0x1018], 0xffffffff
mov dword [ebp - 0x1014], 0xffffffff
mov dword [ebp - 0x1010], 0xffffffff
mov dword [ebp - 0x100c], 0xffffffff
mov dword [ebp - 0xe08], 0xffffffff
mov dword [ebp - 0x354], 0
jmp 0x1005576f
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 1
jge 0x1005578b
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0x2cc], 0x425a80e3
jmp 0x10055762
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2cc], 3
jmp 0x100557b9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2cc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2cc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2cc], 0
jl 0x10055836
mov dword [ebp - 0x2d0], 0
jmp 0x100557e2
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 3
jge 0x100557fe
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0xec4], 0x715cc48b
jmp 0x100557d5
mov byte [ebp - 0x186], 0
movzx eax, byte [ebp - 0x186]
test eax, eax
je 0x10055816
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xec4], eax
jmp 0x1005579e
jmp 0x1005570a
jmp 0x100556da
mov dword [ebp - 0x190], 0xffff
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x190], 0
jmp 0x10055870
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x23
jg 0x1005597a
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x320], 0
jmp 0x100558a0
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 1
jge 0x100558bc
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0xda4], 0
jmp 0x10055893
mov dword [ebp - 0x1e0], 0xfffffffa
mov dword [ebp - 0x1e0], 0xfffffff1
jmp 0x100558df
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0x21
jge 0x10055975
mov dword [ebp - 0x2d8], 0xee41b66b
mov dword [ebp - 0x2d8], 0
jmp 0x1005590f
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 0
jg 0x10055970
mov dword [ebp - 0x348], 1
mov dword [ebp - 0x348], 0
jmp 0x1005593b
mov eax, dword [ebp - 0x348]
dec eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 0
jl 0x1005596e
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1005596c
push 0x1de8
push 0
push 0
push 0x6ad
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
jmp 0x1005592e
jmp 0x10055902
jmp 0x100558d2
jmp 0x10055863
mov eax, dword [ebp - 0xc]
inc eax
je 0x10055992
cmp dword [ebp - 0xc], 0
je 0x10055992
mov dword [ebp - 0x72c], 1
jmp 0x10055999
and dword [ebp - 0x72c], 0
cmp dword [ebp - 0x72c], 0x4a8f
jle 0x100559b1
mov dword [ebp - 0xb28], 1
jmp 0x100559b8
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xe0c], eax
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xc], eax
je 0x100559de
mov dword [ebp - 0x73c], 1
jmp 0x100559e5
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x73c]
jg 0x100559fc
mov dword [ebp - 0xa80], 1
jmp 0x10055a03
and dword [ebp - 0xa80], 0
cmp dword [ebp - 0xc], 0
ja 0x10055a15
mov dword [ebp - 0x734], 1
jmp 0x10055a1c
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x734], eax
jg 0x10055a33
mov dword [ebp - 0x740], 1
jmp 0x10055a3a
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x740]
jg 0x10055a51
mov dword [ebp - 0x494], 1
jmp 0x10055a58
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0xc]
imul eax, dword [ebp - 0x494]
imul eax, dword [ebp - 0xc]
test eax, eax
je 0x10055a7d
push 2
pop eax
test eax, eax
je 0x10055a7d
mov dword [ebp - 0x498], 1
jmp 0x10055a84
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jne 0x10055aa2
cmp dword [ebp - 0x68], 0
jne 0x10055aa2
and dword [ebp - 0x4a0], 0
jmp 0x10055aac
mov dword [ebp - 0x4a0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x540]
imul eax, dword [ebp - 0x4a0]
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xba8], eax
mov dword [ebp - 0xc], 0
jmp 0x10055adc
cmp dword [ebp - 0xc], 3
jg 0x10056be9
mov dword [ebp - 0xe14], 1
mov dword [ebp - 0xdb4], 8
mov dword [ebp - 0xe1c], 9
mov dword [ebp - 0xdbc], 0xfffffff7
mov dword [ebp - 0xa88], 0xffffffff
mov dword [ebp - 0xe24], 0xfffffffd
mov dword [ebp - 0xdc8], 0x3126ff23
mov dword [ebp - 0x2e0], 0x66b1
mov dword [ebp - 0xe2c], 0xffffffff
mov dword [ebp - 0xdd4], 0
mov dword [ebp - 0xe34], 0xcc8af953
mov dword [ebp - 0xde0], 0xb9628eaf
mov dword [ebp - 0xe3c], 0x35a7ab5b
mov dword [ebp - 0xdec], 1
mov dword [ebp - 0x102c], 0xfffffffa
mov dword [ebp - 0x1028], 0xfffffffa
mov dword [ebp - 0x1024], 0xfffffffa
mov dword [ebp - 0x1020], 0xfffffffa
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x98], 0
jmp 0x10055bbd
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10055bd9
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xe44], 1
jmp 0x10055bb0
mov dword [ebp - 0x98], 0
jmp 0x10055bf2
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x10055c0e
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1118], 0x77d900d2
jmp 0x10055be5
mov eax, dword [ebp - 0x4a8]
inc eax
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x2e0], 0
jmp 0x10055c34
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0
jg 0x10055c55
mov dword [ebp - 0xb54], 4
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0xa88], eax
jmp 0x10055c27
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0xdf8], 0x4f01
mov dword [ebp - 0xacc], 2
mov dword [ebp - 0xe4c], 0xfa75
mov dword [ebp - 0xe04], 0x654fddd3
mov dword [ebp - 0xe54], 0x12491e29
mov dword [ebp - 0xe5c], 1
mov dword [ebp - 0xe10], 0x4800fa72
mov dword [ebp - 0x1008], 1
mov dword [ebp - 0x9c], 0
jmp 0x10055cc8
cmp dword [ebp - 0x9c], 3
jge 0x10055ce4
push 1
lea eax, [ebp - 0x113c]
push eax
xor edx, edx
inc edx
xor ecx, ecx
call fcn.10050a3d
pop ecx
pop ecx
mov esi, eax
lea edi, [ebp - 0x108c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x108c]
lea edi, [ebp - 0xbc0]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 8], 0x15de
mov dword [ebp - 0x70], 1
mov dword [ebp - 0xa4], 0
jmp 0x10056c3f
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jge 0x10056c5b
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x668], 0xb8eb5ea2
jmp 0x10056c32
mov dword [ebp - 0xa4], 0
jmp 0x10056c74
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x10056c90
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xb98], 0
jmp 0x10056c67
mov eax, dword [ebp - 8]
inc eax
je 0x10056ca8
cmp dword [ebp - 8], 0
je 0x10056ca8
mov dword [ebp - 0x610], 1
jmp 0x10056caf
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0x4a8f
jle 0x10056cc7
mov dword [ebp - 0xae0], 1
jmp 0x10056cce
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 8], eax
je 0x10056cf4
mov dword [ebp - 0x618], 1
jmp 0x10056cfb
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x618]
jg 0x10056d12