Function at 0x1000fe72
Capabilities:
Check os version
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006ff5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xc18
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 1
lea ecx, [ebp - 0xa20]
call fcn.100221ae
and dword [ebp - 4], 0
mov dword [ebp - 0x208], 0
jmp 0x1000fec1
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x1000fee3
push dword [ebp - 0x208]
lea ecx, [ebp - 0xa20]
call fcn.10022272
mov dword [eax], 0x2937a3a1
jmp 0x1000feb4
xor eax, eax
inc eax
je 0x1000ff55
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x180], 0xfffffffa
jmp 0x1000ff0b
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0xfffffff3
jge 0x1000ff32
mov byte [ebp - 0xd8], 0
movzx eax, byte [ebp - 0xd8]
test eax, eax
je 0x1000ff30
push 0
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x1000fefe
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1000ff50
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
jmp 0x1000fff4
mov dword [ebp - 0x118], 0xfffffffe
mov dword [ebp - 0x118], 0
jmp 0x1000ff78
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1000ffc8
mov dword [ebp - 0xec], 0xad67a4be
mov dword [ebp - 0xec], 0
jmp 0x1000ffa4
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x1000ffba
cmp dword [ebp - 0xec], 0
je 0x1000ffb8
jmp 0x1000ffba
jmp 0x1000ff97
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xec], eax
jmp 0x1000ff6b
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x1000fff4
push 0x1012
push 0xfeb
push 0x1b61
push 0x496
call dword [sym.imp.USER32.dll_CheckRadioButton]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa20]
call fcn.10022230
cmp dword [0x10619718], 0
jne 0x10014a1a
mov dword [ebp - 0x30], 0x2c03342e
mov dword [ebp - 0x174], 1
mov dword [ebp - 0x134], 1
mov dword [ebp - 0x4fc], 0x17ba7da8
mov dword [ebp - 0x2d4], 0xe82b3f54
mov dword [ebp - 0x638], 0xa473
mov dword [ebp - 0x30], 0xffffffff
jmp 0x10010059
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffea
jl 0x100102ee
mov dword [ebp - 0xc8], 0xfffffff6
mov dword [ebp - 0x2cc], 0xd8f8f576
mov dword [ebp - 0x758], 5
mov dword [ebp - 0xc8], 0x1d
jmp 0x1001009a
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xfffffffa
jle 0x100100fe
mov dword [ebp - 0x210], 0x72226312
mov dword [ebp - 0x988], 0x2f76ec75
mov dword [ebp - 0x928], 0xffffffff
mov dword [ebp - 0x210], 0
jmp 0x100100da
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0xfffffff9
je 0x100100fc
mov dword [ebp - 0x3e8], 0xfffe
mov eax, dword [ebp - 0x3e8]
inc eax
mov dword [ebp - 0x3e8], eax
jmp 0x100100cd
jmp 0x1001008d
cmp dword [ebp - 0x174], 0
jne 0x10010172
mov eax, 0xe55b65ab
test eax, eax
je 0x10010125
cmp dword [ebp - 0x134], 0
je 0x10010125
mov dword [ebp - 0x660], 1
jmp 0x1001012c
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0xa7ab5bf7
jbe 0x10010144
mov dword [ebp - 0x668], 1
jmp 0x1001014b
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x668], eax
jl 0x10010160
cmp dword [ebp - 0x134], 0
cmp dword [ebp - 0x134], 0
jne 0x10010172
and dword [ebp - 0x670], 0
jmp 0x1001017c
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x670]
jge 0x10010193
mov dword [ebp - 0x678], 1
jmp 0x1001019a
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0
jb 0x100101af
mov dword [ebp - 0x680], 1
jmp 0x100101b6
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
sub eax, 0x6c41be5
sub eax, dword [ebp - 0x2cc]
je 0x100101de
cmp dword [ebp - 0x2cc], 0
je 0x100101de
mov dword [ebp - 0x688], 1
jmp 0x100101e5
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x688], eax
jg 0x100101fc
mov dword [ebp - 0x6dc], 1
jmp 0x10010203
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x758], 0xfff9
jbe 0x10010227
mov dword [ebp - 0x690], 1
jmp 0x1001022e
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0xffffffff
jae 0x10010243
mov dword [ebp - 0x698], 1
jmp 0x1001024a
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
sub eax, 0x5fe9
je 0x10010267
xor eax, eax
je 0x10010267
mov dword [ebp - 0x6a0], 1
jmp 0x1001026e
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
add eax, 0x6407
cmp eax, dword [ebp - 0x2cc]
je 0x1001028d
mov dword [ebp - 0x6a8], 1
jmp 0x10010294
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0
je 0x100102b2
mov eax, 0xf6da
test eax, eax
je 0x100102b2
mov dword [ebp - 0x67c], 1
jmp 0x100102b9
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x67c]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x4fc], eax
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x2d4], eax
jmp 0x10010052
mov dword [ebp - 0x30], 0
jmp 0x100102fe
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1a
jge 0x10010428
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x50c], 0x9babe4a9
mov dword [ebp - 0x36c], 0
cmp dword [ebp - 0x638], 0x105f
jl 0x1001033e
mov dword [ebp - 0x648], 1
jmp 0x10010345
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x638], 0
jne 0x10010395
mov eax, dword [ebp - 0x2d4]
cmp dword [ebp - 0x174], eax
jl 0x10010368
mov dword [ebp - 0x34c], 1
jmp 0x1001036f
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x34c]
sub eax, dword [ebp - 0x35c]
imul eax, dword [ebp - 0x134]
cmp dword [ebp - 0x30], eax
jge 0x10010395
xor eax, eax
inc eax
jne 0x10010395
and dword [ebp - 0x354], 0
jmp 0x1001039f
mov dword [ebp - 0x354], 1
mov eax, dword [ebp - 0x648]
cmp eax, dword [ebp - 0x354]
jg 0x100103b9
mov dword [ebp - 0x504], 1
jmp 0x100103c0
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x504], eax
jne 0x100103d7
mov dword [ebp - 0x5dc], 1
jmp 0x100103de
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x35c]
cmp dword [ebp - 0x5dc], eax
jne 0x100103f8
mov dword [ebp - 0x364], 1
jmp 0x100103ff
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x50c], eax
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x36c], eax
jmp 0x100102f7
mov dword [ebp - 0x938], 1
mov dword [ebp - 0x940], 0xba39
mov dword [ebp - 0x948], 0x98a59c17
mov dword [ebp - 0x950], 9
mov dword [ebp - 0x998], 0xfffffffc
mov dword [ebp - 0x9a0], 0xb4ebb0cb
mov dword [ebp - 0x9a8], 0x3e31551d
push 4
lea ecx, [ebp - 0xa30]
call fcn.100221ae
mov dword [ebp - 4], 1
mov dword [ebp - 0x9b0], 0xfffffffb
mov dword [ebp - 0x650], 0x71658a60
mov dword [ebp - 0x218], 0
jmp 0x100104af
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x100104d1
push dword [ebp - 0x218]
lea ecx, [ebp - 0xa30]
call fcn.10022272
mov dword [eax], 0xfffffff8
jmp 0x100104a2
mov eax, dword [ebp - 0x650]
inc eax
mov dword [ebp - 0x650], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa30]
call fcn.10022230
mov byte [ebp - 0x150], 4
mov byte [ebp - 0x14f], 0x5b
mov byte [ebp - 0x14e], 0xa
mov byte [ebp - 0x14d], 9
mov byte [ebp - 0x14c], 9
mov byte [ebp - 0x14b], 8
mov byte [ebp - 0x14a], 1
mov byte [ebp - 0x149], 1
mov byte [ebp - 0x148], 3
mov byte [ebp - 0x147], 0xb
mov byte [ebp - 0x146], 1
mov byte [ebp - 0x145], 0xfb
mov byte [ebp - 0x144], 5
mov byte [ebp - 0x143], 2
mov byte [ebp - 0x142], 0
mov byte [ebp - 0x141], 0x27
mov byte [ebp - 0x140], 2
mov byte [ebp - 0x13f], 0x39
mov byte [ebp - 0x13e], 0xb
mov byte [ebp - 0x13d], 0x1e
mov byte [ebp - 0x13c], 8
mov byte [ebp - 0x13b], 0x42
mov byte [ebp - 0x13a], 7
mov byte [ebp - 0x139], 0x1c
mov byte [ebp - 0x138], 6
mov byte [ebp - 0x137], 1
push 1
lea ecx, [ebp - 0x288]
call fcn.100221ae
mov dword [ebp - 4], 2
mov dword [ebp - 0x760], 0x29b3
mov dword [ebp - 0x100], 0x475ee4c2
mov dword [ebp - 0x110], 3
mov dword [ebp - 0x51c], 0x700d35da
mov dword [ebp - 0x38c], 0xbc21b07f
mov dword [ebp - 0x794], 0xfffffff6
mov dword [ebp - 0x190], 0
jmp 0x1001060c
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1001062e
push dword [ebp - 0x190]
lea ecx, [ebp - 0x288]
call fcn.10022272
mov dword [eax], 0x730f94f3
jmp 0x100105ff
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov esi, dword [ebp - 0x760]
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
cmp esi, dword [eax]
jle 0x1001065e
mov dword [ebp - 0x374], 1
jmp 0x10010665
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 0xffffffff
jbe 0x1001067a
mov dword [ebp - 0x514], 1
jmp 0x10010681
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x100], eax
jl 0x100106a7
mov dword [ebp - 0x768], 1
jmp 0x100106ae
and dword [ebp - 0x768], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov eax, dword [eax]
add eax, 4
cmp eax, dword [ebp - 0x110]
jl 0x100106e1
mov dword [ebp - 0x37c], 1
jmp 0x100106e8
and dword [ebp - 0x37c], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov ecx, dword [ebp - 0x37c]
cmp ecx, dword [eax]
jl 0x1001070b
mov dword [ebp - 0x5e4], 1
jmp 0x10010712
and dword [ebp - 0x5e4], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov eax, dword [eax]
sub eax, dword [ebp - 0x5e4]
neg eax
cmp eax, dword [ebp - 0x110]
jg 0x1001073d
mov dword [ebp - 0x384], 1
jmp 0x10010744
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x51c]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x9c0], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0x38c], eax
mov esi, dword [ebp - 0x38c]
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
cmp esi, dword [eax]
jl 0x10010797
mov dword [ebp - 0x658], 1
jmp 0x1001079e
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x794]
cmp dword [ebp - 0x658], eax
jge 0x100107b8
mov dword [ebp - 0x79c], 1
jmp 0x100107bf
and dword [ebp - 0x79c], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov dword [eax], 0x85ca2589
mov dword [ebp - 0x100], 0
jmp 0x100107f8
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0xfffffffb
je 0x100108b2
mov dword [ebp - 0x9c8], 0x4b71808a
mov dword [ebp - 0x9d0], 8
mov dword [ebp - 0x9d8], 0x3674f9af
mov dword [ebp - 0x194], 0
jmp 0x1001083c
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 2
jge 0x10010858
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x774], 2
jmp 0x1001082f
push 4
pop eax
shl eax, 0
imul esi, dword [ebp + eax - 0x774], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.10022272
mov dword [eax], esi
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x774]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x774], eax
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x100108ad
push 0x6dd
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
jmp 0x100107eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x288]
call fcn.10022230
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x150]
or eax, 0x3e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x150]
and ecx, 0x3e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x150]
mov word [ebp + ecx*2 - 0x91c], ax
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x9e0], 0xfffffffb
mov dword [ebp - 0x9e8], 0xfffffffc
mov dword [ebp - 0x9f0], 9
mov dword [ebp - 0x9f8], 1
mov dword [ebp - 0xa00], 0xffffffff
push 3
lea ecx, [ebp - 0x8a4]
call fcn.100221ae
mov dword [ebp - 4], 3
mov dword [ebp - 0x884], 0x752bf390
mov dword [ebp - 0x880], 0x752bf390
mov dword [ebp - 0x87c], 0x752bf390
mov dword [ebp - 0x878], 0x752bf390
lea ecx, [ebp - 0x2b9]
call fcn.100222d4
push eax
lea eax, [ebp - 0x874]
push eax
lea eax, [ebp - 0x884]
push eax
lea ecx, [ebp - 0xb68]
call fcn.100222d7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb48]
call fcn.1002220a
mov byte [ebp - 4], 4
mov dword [ebp - 0x58], 0
jmp 0x100109bc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x100109d2
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xbb0], 2
jmp 0x100109b5
mov dword [ebp - 0x58], 0
jmp 0x100109e2
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x100109fe
push dword [ebp - 0x58]
lea ecx, [ebp - 0x8a4]
call fcn.10022272
mov dword [eax], 1
jmp 0x100109db
mov dword [ebp - 0x84], 0xfffffffe
jmp 0x10010a17
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xfffffff8
jne 0x10010bc2
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x3ac], 0x78555145
push 1
lea ecx, [ebp - 0xa40]
call fcn.100221ae
mov byte [ebp - 4], 5
mov dword [ebp - 0x19c], 0xdca2
mov dword [ebp - 0x1fc], 0
jmp 0x10010a6c
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x10010a8b
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xa40]
call fcn.10022272
or dword [eax], 0xffffffff
jmp 0x10010a5f
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0xe1c9
jle 0x10010abc
mov dword [ebp - 0x39c], 1
jmp 0x10010ac3
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
jne 0x10010ae4
cmp dword [ebp - 0x19c], 0
jne 0x10010ae4
and dword [ebp - 0x394], 0
jmp 0x10010aee
mov dword [ebp - 0x394], 1
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x394], eax
jge 0x10010b08
mov dword [ebp - 0x524], 1
jmp 0x10010b0f
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x524]
cmp eax, 1
jle 0x10010b2d
mov dword [ebp - 0x5ec], 1
jmp 0x10010b34
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x5ec]
jne 0x10010b4e
mov dword [ebp - 0x7a4], 1
jmp 0x10010b55
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xa10], eax
cmp dword [ebp - 0x84], 0
jne 0x10010b76
mov dword [ebp - 0x3a4], 1
jmp 0x10010b7d
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0
jne 0x10010b98
cmp dword [ebp - 0x22c], 0
jne 0x10010b98
and dword [ebp - 0x52c], 0
jmp 0x10010ba2
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x52c]
mov dword [ebp - 0x3ac], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa40]
call fcn.10022230
jmp 0x10010a0a
push 1
lea ecx, [ebp - 0x8a4]
call fcn.10022272
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x654]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x654]
mov dword [ecx], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb48]
call fcn.10022230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a4]
call fcn.10022230
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x108], 0
jmp 0x10010c1c
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jae 0x100114c6
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x150]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x10010cfd
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x150]
inc eax
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x7ac], 0xf89b5461
mov dword [ebp - 0x1a4], 0
jmp 0x10010c76
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10010c92
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xb60], 0
jmp 0x10010c69
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb60]
mov dword [ebp - 0x7ac], eax
mov byte [ebp - 0xda], 0
movzx eax, byte [ebp - 0xda]
test eax, eax
je 0x10010ce3
push 0x16ce
push 0x10a7
push 0x2d2
push 0x379
push 0x1f29
push 0
push 0
push 0
push 0
push 0x175
call dword [sym.imp.USER32.dll_DrawStateW]
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x150]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
jmp 0x10010c14
push 4
lea ecx, [ebp - 0xa70]
call fcn.100221ae
mov dword [ebp - 4], 6
mov dword [ebp - 0x204], 0xada439be
push 3
lea ecx, [ebp - 0xa60]
call fcn.100221ae
mov byte [ebp - 4], 7
mov dword [ebp - 0xacc], 0xee39
mov dword [ebp - 0x78], 0
jmp 0x10010d46
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x10010d62
push dword [ebp - 0x78]
lea ecx, [ebp - 0xa70]
call fcn.10022272
mov dword [eax], 0xbbca
jmp 0x10010d3f
mov dword [ebp - 0x78], 0
jmp 0x10010d72
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10010d8b
push dword [ebp - 0x78]
lea ecx, [ebp - 0xa60]
call fcn.10022272
and dword [eax], 0
jmp 0x10010d6b
mov dword [ebp - 0x204], 0
jmp 0x10010da4
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jg 0x10010e6d
mov dword [ebp - 0xad4], 4
mov dword [ebp - 0xadc], 0xaaaeb9ae
mov dword [ebp - 0xae4], 0x707dfe4d
mov dword [ebp - 0xaec], 0xfffffff8
mov dword [ebp - 0xb14], 5
mov dword [ebp - 0x60], 0
jmp 0x10010df3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10010e09
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xb1c], 0xffffffff
jmp 0x10010dec
mov dword [ebp - 0x60], 0
jmp 0x10010e19
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10010e2f
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xa50], 0xff839e07
jmp 0x10010e12
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa50]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa50], eax
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x10010e68
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
jmp 0x10010d97
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xa60]
call fcn.10022230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa70]
call fcn.10022230
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x14f]
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x108]
movzx ecx, byte [ebp + ecx - 0x152]
movzx ecx, word [ebp + ecx*2 - 0x91c]
add eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14f]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x108]
movzx edx, byte [ebp + edx - 0x152]
movzx edx, word [ebp + edx*2 - 0x91c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x14f]
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x108]
movzx edx, byte [ebp + edx - 0x152]
movzx edx, word [ebp + edx*2 - 0x91c]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x150]
mov word [ebp + ecx*2 - 0x91c], ax
mov dword [ebp - 0x85c], 0xfffffff9
mov dword [ebp - 0x858], 0xfffffff9
mov dword [ebp - 0x854], 0xfffffff9
mov dword [ebp - 0x850], 0xfffffff9
lea ecx, [ebp - 0x2c1]
call fcn.100222d4
push eax
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x85c]
push eax
lea ecx, [ebp - 0xb98]
call fcn.100222d7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x30c]
call fcn.1002220a
mov dword [ebp - 4], 8
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x7c4], 0xcb085bb3
mov dword [ebp - 0x3dc], 0x160a8718
mov dword [ebp - 0x810], 0
mov dword [ebp - 0x65c], 0xd5d1afc4
mov dword [ebp - 0x3f4], 0xfffffffe
mov dword [ebp - 0x750], 0x4dfb4810
mov dword [ebp - 0x34], 3
jmp 0x10010fcb
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x100114ab
push 2
lea ecx, [ebp - 0x270]
call fcn.100221ae
mov byte [ebp - 4], 9
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x7dc], 0x5297f1ff
mov dword [ebp - 0x6d4], 3
mov dword [ebp - 0x80], 0
jmp 0x10011014
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10011030
push dword [ebp - 0x80]
lea ecx, [ebp - 0x270]
call fcn.10022272
mov dword [eax], 0x2a4f402e
jmp 0x1001100d
mov dword [ebp - 0x80], 0
jmp 0x10011040
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10011056
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x814], 0xd970979b
jmp 0x10011039
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
mov dword [eax], 3
jmp 0x1001108f
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x3b4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3b4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
cmp dword [eax], 0
jl 0x100112ca
mov dword [ebp - 0x128], 0xed1ad67a
mov dword [ebp - 0x7bc], 0xbf199314
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
push dword [eax]
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov dword [ebp - 0x534], eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov ecx, dword [ebp - 0x534]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x534]
mov eax, dword [eax]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x128], 0xfffffff0
jmp 0x10011118
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0x17
jle 0x100112c5
mov dword [ebp - 0x3cc], 4
mov dword [ebp - 0x1ac], 0
jmp 0x10011148
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x10011164
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x7b4], 0xffffffff
jmp 0x1001113b
push dword [ebp - 0x34]
lea ecx, [ebp - 0x30c]
call fcn.10022272
cmp dword [eax], 0
jne 0x10011193
push dword [ebp - 0x34]
lea ecx, [ebp - 0x30c]
call fcn.10022272
cmp dword [eax], 0
jne 0x10011193
and dword [ebp - 0x3bc], 0
jmp 0x1001119d
mov dword [ebp - 0x3bc], 1
push 0
lea ecx, [ebp - 0x270]
call fcn.10022272
mov eax, dword [eax]
cmp eax, dword [ebp - 0x3bc]
jl 0x100111c0
mov dword [ebp - 0x5f4], 1
jmp 0x100111c7
and dword [ebp - 0x5f4], 0
push 0
lea ecx, [ebp - 0x270]
call fcn.10022272
mov ecx, dword [ebp - 0x5f4]
cmp ecx, dword [eax]
jl 0x100111ea
mov dword [ebp - 0x3c4], 1
jmp 0x100111f1
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov ecx, dword [esi]
imul ecx, dword [eax]
imul eax, dword [ebp - 0x3c4], 0x5f4e
cmp ecx, eax
jl 0x1001122d
mov dword [ebp - 0x53c], 1
jmp 0x10011234
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
mov dword [ebp - 0x3cc], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x3cc], eax
jg 0x10011269
push 3
lea ecx, [ebp - 0x30c]
call fcn.10022272
cmp dword [eax], 0
je 0x10011269
mov dword [ebp - 0x694], 1
jmp 0x10011270
and dword [ebp - 0x694], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7b4]
cmp dword [ebp - 0x694], eax
jg 0x10011291
mov dword [ebp - 0x3d4], 1
jmp 0x10011298
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0xfffffffb
jg 0x100112ad
mov dword [ebp - 0x544], 1
jmp 0x100112b4
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x7bc], eax
jmp 0x1001110b
jmp 0x1001106b
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
cmp dword [eax], 0
jne 0x10011481
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
mov eax, dword [eax]
mov dword [ebp - 0x7c4], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xb24], eax
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
cmp dword [eax], 0
jne 0x1001132e
push 1
lea ecx, [ebp - 0x270]
call fcn.10022272
cmp dword [eax], 0
jne 0x1001132e
and dword [ebp - 0x7cc], 0
jmp 0x10011338
mov dword [ebp - 0x7cc], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x3dc]
je 0x10011361
mov dword [ebp - 0x5fc], 1
jmp 0x10011368
and dword [ebp - 0x5fc], 0
push 0
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov ecx, dword [ebp - 0x5fc]
cmp ecx, dword [eax]
jl 0x1001138b
mov dword [ebp - 0x3e4], 1
jmp 0x10011392
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x34]
neg eax
cmp eax, dword [ebp - 0x3e4]
jne 0x100113ab
mov dword [ebp - 0x7d4], 1
jmp 0x100113b2
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0xaf0], eax
push 0
lea ecx, [ebp - 0x270]
call fcn.10022272
and dword [eax], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x814], 0
je 0x100113ff
cmp dword [ebp - 0x6d4], 0
je 0x100113ff
mov dword [ebp - 0x54c], 1
jmp 0x10011406
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x2550
jl 0x1001141e
mov dword [ebp - 0x3ec], 1
jmp 0x10011425
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x3f4], eax
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x3f4], eax
jg 0x10011457
mov dword [ebp - 0x554], 1
jmp 0x1001145e
and dword [ebp - 0x554], 0
push 1
lea ecx, [ebp - 0x30c]
call fcn.10022272
mov ecx, dword [ebp - 0x554]
imul ecx, dword [eax]
test ecx, ecx
jne 0x10011481
and dword [ebp - 0x3fc], 0
jmp 0x1001148b
mov dword [ebp - 0x3fc], 1
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0x750], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x270]
call fcn.10022230
jmp 0x10010fc4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.10022230
and dword [ebp - 0x108], 0
jmp 0x10010c14
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x91c], cx
lea eax, [ebp - 0x91c]
push eax
lea ecx, [ebp - 0xbd0]
call fcn.10022096
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x6cc], eax
mov dword [ebp - 4], 0xa
push dword [ebp - 0x6cc]
call fcn.1000abec
pop ecx
mov dword [ebp - 0x590], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbd0]
call fcn.100220bb
mov dword [ebp - 0x298], 0xffffffff
mov dword [ebp - 0x2e4], 0xa9831117
mov dword [ebp - 0x2f4], 0xc7dcd66a
push 1
lea ecx, [ebp - 0x8e0]
call fcn.100221ae
mov dword [ebp - 4], 0xb
push 3
lea ecx, [ebp - 0x8bc]
call fcn.100221ae
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x68], 0
jmp 0x10011575
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10011591
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8e0]
call fcn.10022272
mov dword [eax], 1
jmp 0x1001156e
mov dword [ebp - 0x68], 0
jmp 0x100115a1
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100115bd
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8bc]
call fcn.10022272
mov dword [eax], 0xfffffffa
jmp 0x1001159a
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0
jne 0x1001165a
cmp dword [ebp - 0x2f4], 0x182b4746
jle 0x100115ee
mov dword [ebp - 0x7a8], 1
jmp 0x100115f5
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x95c], eax
cmp dword [ebp - 0x2e4], 3
ja 0x10011616
mov dword [ebp - 0x604], 1
jmp 0x1001161d
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x604], eax
jl 0x10011637
mov dword [ebp - 0x404], 1
jmp 0x1001163e
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x2f4]
add eax, dword [ebp - 0x404]
cmp eax, 0xdade
jne 0x1001165a
and dword [ebp - 0x55c], 0
jmp 0x10011664
mov dword [ebp - 0x55c], 1
mov eax, dword [ebp - 0x55c]
neg eax
mov dword [ebp - 0x40c], eax
push 0
lea ecx, [ebp - 0x8e0]
call fcn.10022272
mov ecx, dword [ebp - 0x40c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x298]
cmp dword [ebp - 0x40c], eax
je 0x100116a1
mov dword [ebp - 0x684], 1
jmp 0x100116a8
and dword [ebp - 0x684], 0
push 0
lea ecx, [ebp - 0x8bc]
call fcn.10022272
mov ecx, dword [ebp - 0x684]
mov dword [eax], ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x8bc]
call fcn.10022230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e0]
call fcn.10022230
and dword [ebp - 0x1b4], 0
jmp 0x100116f1
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xd
jae 0x1001186c
mov dword [ebp - 0x104], 0x7d214c40
mov dword [ebp - 0x44], 0xfffffffe
mov dword [ebp - 0x2d8], 0xf737a9a9
mov dword [ebp - 0x44], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x104], eax
jg 0x10011737
mov dword [ebp - 0x414], 1
jmp 0x1001173e
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
add eax, 0x5052061f
mov dword [ebp - 0x2d8], eax
jne 0x1001175e
mov eax, dword [ebp - 0x2d8]
dec eax
je 0x100117e3
mov dword [ebp - 0x250], 0
jmp 0x10011777
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x10011793
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xb90], 0
jmp 0x1001176a
mov dword [ebp - 0x44], 0
jmp 0x100117a3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jg 0x100117e1
mov dword [ebp - 0x104], 3
jmp 0x100117c2
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x100117df
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xb90], 0
je 0x100117dd
jmp 0x100117df
jmp 0x100117b5
jmp 0x1001179c
jmp 0x10011801
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x10011801
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov dword [ebp - 0x44], 0
jmp 0x10011811
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x10
jge 0x10011857
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x10011855
push 0x16ce
push 0x10a7
push 0x2d2
push 0x379
push 0x1f29
push 0
push 0
push 0
push 0
push 0x175
call dword [sym.imp.USER32.dll_DrawStateW]
jmp 0x1001180a
xor eax, eax
mov ecx, dword [ebp - 0x1b4]
mov word [ebp + ecx*2 - 0x91c], ax
jmp 0x100116e4
mov dword [ebp - 0x14], 0xfb0b0297
mov dword [ebp - 0x48], 1
mov dword [ebp - 0x88], 1
mov dword [ebp - 0x2a8], 0x66f2fc99
mov dword [ebp - 0x7c0], 0xfffffff7
mov dword [ebp - 0x594], 0xfffffff9
mov dword [ebp - 0x47c], 0x50fdf9f9
mov dword [ebp - 0x958], 1
mov dword [ebp - 0x20c], 0
jmp 0x100118cf
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x100118eb
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xe8], 1
jmp 0x100118c2
mov dword [ebp - 0x14], 2
jmp 0x100118fb
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10012074
mov dword [ebp - 0x214], 0
mov dword [ebp - 0xd0], 0x5169ff4c
mov dword [ebp - 0x2ec], 0xffffffff
mov dword [ebp - 0x7b0], 0xffffffff
mov dword [ebp - 0x704], 2
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 1
jl 0x10011950
mov dword [ebp - 0x564], 1
jmp 0x10011957
and dword [ebp - 0x564], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x564]
jl 0x1001197c
mov dword [ebp - 0x41c], 1
jmp 0x10011983
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x41c], eax
jle 0x100119a1
mov dword [ebp - 0x60c], 1
jmp 0x100119a8
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x60c], eax
jle 0x100119bf
mov dword [ebp - 0x424], 1
jmp 0x100119c6
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp eax, dword [ebp - 0x424]
jg 0x100119e4
mov dword [ebp - 0x56c], 1
jmp 0x100119eb
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x56c], eax
jl 0x10011a09
mov dword [ebp - 0x6e4], 1
jmp 0x10011a10
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 0
je 0x10011b39
mov dword [ebp - 0x2a0], 9
cmp dword [ebp - 0xd0], 0
ja 0x10011a40
mov dword [ebp - 0x42c], 1
jmp 0x10011a47
and dword [ebp - 0x42c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x42c]
sub ecx, dword [ebp + eax - 0xe8]
mov dword [ebp - 0xd0], ecx
mov eax, dword [ebp - 0x214]
add eax, dword [ebp - 0xd0]
cmp eax, 0x8d5f
je 0x10011a7e
mov dword [ebp - 0x664], 1
jmp 0x10011a85
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x664], eax
jge 0x10011a9c
mov dword [ebp - 0x434], 1
jmp 0x10011aa3
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x434]
sub ecx, dword [ebp + eax*4 - 0xe8]
cmp ecx, dword [ebp - 0x2a0]
jne 0x10011ac7
mov dword [ebp - 0x818], 1
jmp 0x10011ace
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x2ec], eax
imul eax, dword [ebp - 0x2a0], 0x713e
mov ecx, dword [ebp - 0x14]
cmp eax, dword [ebp + ecx*4 - 0xe8]
jg 0x10011afc
mov dword [ebp - 0x574], 1
jmp 0x10011b03
and dword [ebp - 0x574], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x574], eax
jl 0x10011b24
mov dword [ebp - 0x43c], 1
jmp 0x10011b2b
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x48], eax
jmp 0x1001206f
mov dword [ebp - 0x12c], 0xffffffff
mov dword [ebp - 0x848], 0x33b8fba3
mov dword [ebp - 0x844], 0x33b8fba3
mov dword [ebp - 0x840], 0x33b8fba3
mov dword [ebp - 0x83c], 0x33b8fba3
mov dword [ebp - 0x1bc], 0
jmp 0x10011b84
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jge 0x10011ba0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x1cc], 0xfffffffa
jmp 0x10011b77
cmp dword [ebp - 0x214], 0
jne 0x10011d32
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x92c], eax
xor eax, eax
inc eax
jne 0x10011bd4
mov eax, 0x34e4
test eax, eax
jne 0x10011bd4
and dword [ebp - 0x6ec], 0
jmp 0x10011bde
mov dword [ebp - 0x6ec], 1
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x614], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x614]
mov dword [ebp + eax - 0x1cc], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x614], eax
jl 0x10011c21
cmp dword [ebp - 0xd0], 0
jne 0x10011c21
and dword [ebp - 0x444], 0
jmp 0x10011c2b
mov dword [ebp - 0x444], 1
mov eax, dword [ebp - 0x444]
sub eax, 0x7bb5
cmp eax, dword [ebp - 0x88]
jle 0x10011c4a
mov dword [ebp - 0x57c], 1
jmp 0x10011c51
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x44c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x44c]
mov dword [ebp + eax - 0x848], ecx
cmp dword [ebp - 0x44c], 0
jne 0x10011c82
cmp dword [ebp - 0x7b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xe8]
mov ecx, dword [ebp - 0x12c]
add ecx, 0xecdc
sub eax, ecx
cmp eax, dword [ebp - 0x214]
jg 0x10011cbf
mov dword [ebp - 0x6a4], 1
jmp 0x10011cc6
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x6a4], eax
jl 0x10011ce0
mov dword [ebp - 0x454], 1
jmp 0x10011ce7
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x454]
je 0x10011cfe
mov dword [ebp - 0x584], 1
jmp 0x10011d05
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
neg eax
jne 0x10011d16
cmp dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x960], eax
mov eax, dword [ebp - 0x48]
add eax, 0x10194c2
mov dword [ebp - 0x88], eax
je 0x10011d4d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe8], 0
je 0x10011d4d
mov dword [ebp - 0x6f4], 1
jmp 0x10011d54
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x934], eax
mov eax, 0x815da772
test eax, eax
jne 0x10011d72
mov dword [ebp - 0x45c], 1
jmp 0x10011d79
and dword [ebp - 0x45c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x45c], eax
jge 0x10011dc2
mov dword [ebp - 0x88], 0
jmp 0x10011da7
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x1c
je 0x10011dbd
cmp dword [ebp - 0x2ec], 0
je 0x10011dbb
jmp 0x10011dbd
jmp 0x10011d9a
jmp 0x10012060
mov dword [ebp - 0x2e0], 1
mov dword [ebp - 0x61c], 0x3377
mov dword [ebp - 0x6fc], 0x10007878
cmp dword [ebp - 0x61c], 0x372f
jle 0x10011e90
and dword [ebp - 0x240], 0
jmp 0x10011e06
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0x4193
jge 0x10011e90
and dword [ebp - 0x1c4], 0
jmp 0x10011e28
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x79f
jge 0x10011e8b
mov eax, dword [ebp - 0x240]
add eax, dword [ebp - 0x1c4]
cdq
mov dword [ebp - 0x780], eax
mov dword [ebp - 0x77c], edx
push dword [ebp - 0x77c]
push dword [ebp - 0x780]
lea ecx, [ebp - 0xc00]
call fcn.1000a263
pop ecx
pop ecx
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x80c]
call fcn.10021b1d
push eax
call fcn.10058fef
pop ecx
lea ecx, [ebp - 0xc00]
call fcn.10021b13
jmp 0x10011e1b
jmp 0x10011df9
mov dword [ebp - 0x70c], 0xf80b5c32
mov dword [ebp - 4], 0xd
cmp dword [ebp - 0x61c], 0x3127
jge 0x10011eb9
push dword [ebp - 0x6fc]
call fcn.10058fef
pop ecx
jmp 0x10011ed5
or dword [ebp - 4], 0xffffffff
jmp 0x10011edf
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x2a8], eax
je 0x10011f1d
mov dword [ebp - 0x7b8], 1
jmp 0x10011f24
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x93c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xd0]
add eax, 0xfffe
cmp eax, dword [ebp - 0x704]
jge 0x10011f68
cmp dword [ebp - 0x2e0], 0
jne 0x10011f68
and dword [ebp - 0x464], 0
jmp 0x10011f72
mov dword [ebp - 0x464], 1
cmp dword [ebp - 0x464], 1
jl 0x10011f87
mov dword [ebp - 0x58c], 1
jmp 0x10011f8e
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x944], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x978], eax
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0x12c], eax
jge 0x10011fd2
mov dword [ebp - 0x820], 1
jmp 0x10011fd9
and dword [ebp - 0x820], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1cc]
mov dword [ebp - 0x94c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0xe8]
cmp dword [ebp + eax - 0x1cc], ecx
je 0x10012011
mov dword [ebp - 0x46c], 1
jmp 0x10012018
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x848], 0xb79375e7
mov eax, 0xb79375e7
neg eax
imul eax, dword [ebp - 0x46c]
cmp eax, dword [ebp - 0x12c]
jge 0x1001204b
mov dword [ebp - 0x66c], 1
jmp 0x10012052
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
inc eax
inc eax
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 0
je 0x1001206f
jmp 0x10012074
jmp 0x100118f4
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x980], eax
cmp dword [ebp - 0x48], 1
jg 0x10012092
mov dword [ebp - 0x474], 1
jmp 0x10012099
and dword [ebp - 0x474], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
imul eax, dword [ebp - 0x474]
imul eax, eax, 0x4d29
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
imul eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x47c], eax
mov eax, dword [ebp - 0x47c]
cmp dword [ebp - 0x14], eax
jg 0x100120e9
mov dword [ebp - 0x624], 1
jmp 0x100120f0
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x590], 0
je 0x10014a1a
mov dword [ebp - 0x1d4], 0x399841b3
mov dword [ebp - 0x954], 0xf7fd1e81
push 3
lea ecx, [ebp - 0xa90]
call fcn.100221ae
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x260], 0
jmp 0x10012147
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x10012169
push dword [ebp - 0x260]
lea ecx, [ebp - 0xa90]
call fcn.10022272
mov dword [eax], 0x9dd952ea
jmp 0x1001213a
mov dword [ebp - 0x1d4], 0
jmp 0x10012182
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x1001228a
push 3
lea ecx, [ebp - 0xa80]
call fcn.100221ae
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x920], 0x33843046
mov dword [ebp - 0x990], 0
push 2
lea ecx, [ebp - 0x8d4]
call fcn.100221ae
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x28], 0
jmp 0x100121d5
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x100121f1
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa80]
call fcn.10022272
mov dword [eax], 0xd149
jmp 0x100121ce
mov dword [ebp - 0x28], 0
jmp 0x10012201
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10012217
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc28], 0xf2579253
jmp 0x100121fa
mov dword [ebp - 0x28], 0
jmp 0x10012227
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10012243
push dword [ebp - 0x28]
lea ecx, [ebp - 0x8d4]
call fcn.10022272
mov dword [eax], 0x9d81479b
jmp 0x10012220
push 0
lea ecx, [ebp - 0x8d4]
call fcn.10022272
mov dword [ebp - 0x484], eax
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x484]
mov dword [ecx], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x8d4]
call fcn.10022230
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa80]
call fcn.10022230
jmp 0x10012175
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa90]
call fcn.10022230
push 3
lea ecx, [ebp - 0x318]
call fcn.100221ae
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x120], 0x6aabecba
mov dword [ebp - 0x2b0], 0x9ff446cd
mov dword [ebp - 0x21c], 0
jmp 0x100122da
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x100122fc
push dword [ebp - 0x21c]
lea ecx, [ebp - 0x318]
call fcn.10022272
mov dword [eax], 0x313dd33a
jmp 0x100122cd
mov dword [ebp - 0x120], 2
jmp 0x10012315
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x100125ff
mov dword [ebp - 0x130], 0xffffffff
mov dword [ebp - 0x5ac], 7
mov dword [ebp - 0x71c], 0x2f4bb0f5
mov dword [ebp - 0x130], 0
jmp 0x10012359
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 2
jg 0x100125fa
mov dword [ebp - 0x18], 0xfffffff9
mov dword [ebp - 0x2f0], 0x9ed7d413
mov dword [ebp - 0x18], 0
jmp 0x10012387
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100123a4
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0
je 0x100123a2
jmp 0x100123a4
jmp 0x10012380
mov dword [ebp - 0x18], 0
jmp 0x100123b4
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jg 0x100125f5
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0x7045b365
jg 0x100123e0
mov dword [ebp - 0x48c], 1
jmp 0x100123e7
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x120], 0x433ac254
jge 0x100123ff
mov dword [ebp - 0x59c], 1
jmp 0x10012406
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x2f0], eax
push 2
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0
je 0x10012442
push 0
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0
je 0x10012442
mov dword [ebp - 0x714], 1
jmp 0x10012449
and dword [ebp - 0x714], 0
xor eax, eax
jne 0x10012469
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0
jne 0x10012469
and dword [ebp - 0x7e4], 0
jmp 0x10012473
mov dword [ebp - 0x7e4], 1
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0xad0], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [eax], 0x871d0c0b
ja 0x100124ad
mov dword [ebp - 0x68c], 1
jmp 0x100124b4
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0x68c], eax
jne 0x100124ce
mov dword [ebp - 0x494], 1
jmp 0x100124d5
and dword [ebp - 0x494], 0
cmp dword [ebp - 0x494], 0
jne 0x100124f0
cmp dword [ebp - 0x2b0], 0
jne 0x100124f0
and dword [ebp - 0x5a4], 0
jmp 0x100124fa
mov dword [ebp - 0x5a4], 1
cmp dword [ebp - 0x5a4], 0
jl 0x1001250f
mov dword [ebp - 0x49c], 1
jmp 0x10012516
and dword [ebp - 0x49c], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
cmp dword [ebp - 0x18], 0
je 0x1001253f
cmp dword [ebp - 0x2f0], 0
je 0x1001253f
mov dword [ebp - 0x62c], 1
jmp 0x10012546
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x62c], eax
je 0x1001255d
mov dword [ebp - 0x4a4], 1
jmp 0x10012564
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0x4fce
jle 0x10012588
mov dword [ebp - 0x4ac], 1
jmp 0x1001258f
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
sub eax, dword [ebp - 0x18]
je 0x100125af
cmp dword [ebp - 0x2f0], 0
je 0x100125af
mov dword [ebp - 0x674], 1
jmp 0x100125b6
and dword [ebp - 0x674], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x318]
call fcn.10022272
mov ecx, dword [ebp - 0x674]
add ecx, dword [eax]
cmp ecx, dword [ebp - 0x18]
jne 0x100125dd
mov dword [ebp - 0x4b4], 1
jmp 0x100125e4
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x71c], eax
jmp 0x100123ad
jmp 0x1001234c
jmp 0x10012308
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x318]
call fcn.10022230
mov byte [ebp - 0x170], 1
mov byte [ebp - 0x16f], 0x3b
mov byte [ebp - 0x16e], 6
mov byte [ebp - 0x16d], 6
mov byte [ebp - 0x16c], 1
mov byte [ebp - 0x16b], 0xf7
mov byte [ebp - 0x16a], 0xa
mov byte [ebp - 0x169], 0x11
mov byte [ebp - 0x168], 0
mov byte [ebp - 0x167], 0x35
mov byte [ebp - 0x166], 0xb
mov byte [ebp - 0x165], 0x22
mov byte [ebp - 0x164], 5
mov byte [ebp - 0x163], 0xa
mov byte [ebp - 0x162], 7
mov byte [ebp - 0x161], 0x2e
mov byte [ebp - 0x160], 9
mov byte [ebp - 0x15f], 0x25
mov byte [ebp - 0x15e], 8
mov byte [ebp - 0x15d], 0
mov byte [ebp - 0x15c], 2
mov byte [ebp - 0x15b], 0x10
mov byte [ebp - 0x15a], 4
mov byte [ebp - 0x159], 6
mov byte [ebp - 0x158], 3
mov byte [ebp - 0x157], 0x22
mov byte [ebp - 0x156], 0xd
mov byte [ebp - 0x155], 0x23
mov byte [ebp - 0x154], 0xc
mov byte [ebp - 0x153], 0
mov dword [ebp - 0x1dc], 0xfffffff6
mov dword [ebp - 0x964], 0xfffffffa
mov dword [ebp - 0xa34], 0xfffffff9
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x10012718
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov dword [ebp - 0x1dc], 0
jmp 0x10012731
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 4
jne 0x10012886
mov dword [ebp - 0x248], 0xb96ca2cb
mov dword [ebp - 0x900], 1
mov dword [ebp - 0x8fc], 1
mov dword [ebp - 0x8f8], 1
mov dword [ebp - 0x8f4], 1
mov dword [ebp - 0x96c], 0xffffffff
mov dword [ebp - 0x248], 0x13
jmp 0x10012793
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 7
jg 0x10012881
mov dword [ebp - 0x10c], 0xfffffffc
mov dword [ebp - 0x1e4], 0
jmp 0x100127c3
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x100127df
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xc18], 0xb21a35ca
jmp 0x100127b6
mov dword [ebp - 0x10c], 3
jmp 0x100127f8
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
jl 0x1001287c
mov dword [ebp - 0x224], 0xc4f27d27
mov eax, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x900], 0
je 0x1001281d
jmp 0x1001287c
mov dword [ebp - 0x224], 0
jmp 0x10012836
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jg 0x10012877
mov dword [ebp - 0x5b4], 0
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10012868
push 0
push 0x154d
call dword [sym.imp.USER32.dll_FlashWindow]
mov eax, dword [ebp - 0x5b4]
dec eax
mov dword [ebp - 0x5b4], eax
jmp 0x10012829
jmp 0x100127eb
jmp 0x10012786
jmp 0x10012724
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x170]
or eax, 0x5e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
and ecx, 0x5e
sub eax, ecx
xor ecx, ecx
inc ecx
imul ecx, ecx, 0
movzx ecx, byte [ebp + ecx - 0x170]
mov byte [ebp + ecx - 0x6c8], al
mov dword [ebp - 0x24], 2
and dword [ebp - 0x11c], 0
jmp 0x100128d7
mov eax, dword [ebp - 0x24]
inc eax
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1e
jae 0x100138fe
push 4
lea ecx, [ebp - 0x238]
call fcn.100221ae
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x9c], 0xfffffff8
mov dword [ebp - 0x114], 0xb38e
mov dword [ebp - 0xa4], 0x33ecdc0f
mov dword [ebp - 0xb08], 0
mov dword [ebp - 0x7e8], 0x2a8f302d
mov dword [ebp - 0x1ec], 0
jmp 0x10012940
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x10012962
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0x238]
call fcn.10022272
mov dword [eax], 6
jmp 0x10012933
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov dword [eax], 0xd
jmp 0x1001299b
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4bc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
cmp dword [eax], 0xfffffff3
jne 0x10012c15
mov dword [ebp - 0x2b8], 0xffff
mov dword [ebp - 0x258], 0x45799333
mov eax, 0x2a831d26
test eax, eax
je 0x100129f1
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b8]
inc ecx
mov dword [ebp - 0x2b8], ecx
test eax, eax
je 0x100129f1
mov dword [ebp - 0x5c4], 1
jmp 0x100129f8
and dword [ebp - 0x5c4], 0
push 1
lea ecx, [ebp - 0x238]
call fcn.10022272
cmp dword [eax], 0
jne 0x10012a1c
cmp dword [ebp - 0x258], 0
jne 0x10012a1c
and dword [ebp - 0x634], 0
jmp 0x10012a26
mov dword [ebp - 0x634], 1
mov eax, dword [ebp - 0x258]
cmp dword [ebp - 0x634], eax
jle 0x10012a40
mov dword [ebp - 0x7c8], 1
jmp 0x10012a47
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x974], eax
cmp dword [ebp - 0x258], 0xfffffffa
jne 0x10012a68
mov dword [ebp - 0x4c4], 1
jmp 0x10012a6f
and dword [ebp - 0x4c4], 0
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov ecx, dword [ebp - 0x4c4]
cmp ecx, dword [eax]
jge 0x10012a98
mov eax, 0x5900
test eax, eax
jne 0x10012a98
and dword [ebp - 0x5bc], 0
jmp 0x10012aa2
mov dword [ebp - 0x5bc], 1
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov esi, dword [ebp - 0x5bc]
sub esi, dword [eax]
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
cmp esi, dword [eax]
jg 0x10012ad4
mov dword [ebp - 0x4cc], 1
jmp 0x10012adb
and dword [ebp - 0x4cc], 0
cmp dword [ebp - 0x4cc], 0xc544087
jg 0x10012af3
mov dword [ebp - 0x69c], 1
jmp 0x10012afa
and dword [ebp - 0x69c], 0
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov ecx, dword [ebp - 0x69c]
cmp ecx, dword [eax]
jne 0x10012b23
cmp dword [ebp - 0x258], 0
jne 0x10012b23
and dword [ebp - 0x4d4], 0
jmp 0x10012b2d
mov dword [ebp - 0x4d4], 1
push 0
lea ecx, [ebp - 0x238]
call fcn.10022272
mov ecx, dword [ebp - 0x4d4]
cmp ecx, dword [eax]
jne 0x10012b50
mov dword [ebp - 0x4dc], 1
jmp 0x10012b57
and dword [ebp - 0x4dc], 0
mov esi, dword [ebp - 0x5c4]
sub esi, dword [ebp - 0x4dc]
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
cmp esi, dword [eax]
je 0x10012b80
mov dword [ebp - 0x63c], 1
jmp 0x10012b87
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x2167
jl 0x10012b9f
mov dword [ebp - 0x4e4], 1
jmp 0x10012ba6
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x9c]
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
imul esi, dword [eax]
cmp esi, 0xea6801fc
je 0x10012bdc
mov dword [ebp - 0x5cc], 1
jmp 0x10012be3
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x5cc], eax
jg 0x10012bfd
mov dword [ebp - 0x4ec], 1
jmp 0x10012c04
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0xa4], eax
jmp 0x10012977
mov dword [ebp - 0x9c], 0
jmp 0x10012c2e
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffff9
jne 0x10012dfa
mov dword [ebp - 0x350], 0xfffffffa
mov dword [ebp - 0x2e8], 0xcc9e520c
mov dword [ebp - 0xa4], 0
jmp 0x10012c68
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xffffffe6
jne 0x10012d7e
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x724], 0xb296ad98
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0xa44], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x97c], eax
mov eax, 0x4f6c
cmp eax, 0x11f6
jle 0x10012cb9
mov dword [ebp - 0x4f4], 1
jmp 0x10012cc0
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x1f4], 0xba52
jl 0x10012cd8
mov dword [ebp - 0x64c], 1
jmp 0x10012cdf
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x4f4], eax
je 0x10012d05
mov dword [ebp - 0x5d4], 1
jmp 0x10012d0c
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x724], eax
cmp dword [ebp - 0xa4], 0x1e3c1dc0
jl 0x10012d30
mov dword [ebp - 0x344], 1
jmp 0x10012d37
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x1f4]
sub eax, dword [ebp - 0x344]
add eax, dword [ebp - 0x7e8]
jne 0x10012d5d
cmp dword [ebp - 0x1f4], 0
jne 0x10012d5d
and dword [ebp - 0x348], 0
jmp 0x10012d67
mov dword [ebp - 0x348], 1
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x2e8], eax
jmp 0x10012c5b
mov dword [ebp - 0x114], 0
jmp 0x10012d97
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0x1a
jg 0x10012df5
cmp dword [ebp - 0x350], 0xffff
jne 0x10012db8
mov dword [ebp - 0x358], 1
jmp 0x10012dbf
and dword [ebp - 0x358], 0
push 2
lea ecx, [ebp - 0x238]
call fcn.10022272
mov ecx, dword [ebp - 0x358]
mov dword [eax], ecx
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10012df3
push 0
push 0xac3
call dword [sym.imp.USER32.dll_ShowOwnedPopups]
jmp 0x10012d8a
jmp 0x10012c21
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x238]
call fcn.10022230
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x170]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x24], eax
jne 0x10012fc7
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x170]
inc eax
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0xac], 0x571177e8
mov dword [ebp - 0x734], 1
mov dword [ebp - 0x73c], 0x6859
mov dword [ebp - 0xad8], 0xab1d6a56
mov dword [ebp - 0xac], 0
jmp 0x10012e77
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0xffffffe3
je 0x10012f19
mov dword [ebp - 0x2c0], 0xba1a4d63
mov dword [ebp - 0x7d0], 0xfffffff9
cmp dword [ebp - 0x2c0], 0
je 0x10012ebb
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xac], eax
jl 0x10012ebb
mov dword [ebp - 0x72c], 1
jmp 0x10012ec2
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x984], eax
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x98c], eax
cmp dword [ebp - 0x734], 0xa62a9695
ja 0x10012efe
mov dword [ebp - 0x7f0], 1
jmp 0x10012f05
and dword [ebp - 0x7f0], 0
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x73c], eax
jmp 0x10012e6a
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x170]
mov ecx, dword [ebp - 0x24]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18c], 0
jmp 0x10012f47
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x10012f63
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x6b0], 0
jmp 0x10012f3a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x6b0], 9
jmp 0x10012f91
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6b0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6b0], 0xfffffff4
jl 0x10012fc2
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x10012fc0
push 0
push 0x16f2
call dword [sym.imp.USER32.dll_EndPaint]
jmp 0x10012f76
jmp 0x100128cf
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x1a0], 0xa0d72276
mov dword [ebp - 0x7d8], 0x15af
cmp dword [ebp - 0x7d8], 0xdfd
jge 0x1001316d
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x744]
push eax
mov ecx, 0x10618690
call fcn.10021b3d
mov ecx, eax
call fcn.10021b3d
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x106198e4
call fcn.10022281
mov eax, dword [ebp - 0x744]
cmp eax, dword [ebp - 0x38]
je 0x100130a6
mov eax, dword [ebp - 0x38]
and eax, 0x80000001
jns 0x10013036
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jne 0x10013055
mov eax, dword [ebp - 0x38]
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x106198e4
call fcn.10022281
jmp 0x100130a1
mov eax, dword [ebp - 0x38]
dec eax
cdq
push 0xa
pop ecx
idiv ecx
test edx, edx
jne 0x10013086
mov eax, dword [ebp - 0x38]
dec eax
je 0x10013086
mov eax, dword [ebp - 0x38]
dec eax
cdq
push 0xa
pop ecx
idiv ecx
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov ecx, 0x106198e4
call fcn.10022281
jmp 0x100130a1
push 0x100268db
mov edx, 0x10007874
mov ecx, 0x106185d8
call fcn.1002654e
mov ecx, eax
call fcn.10021d29
jmp 0x1001301c
push 0x100268db
mov edx, 0x10007870
mov ecx, 0x106185d8
call fcn.1002654e
mov ecx, eax
call fcn.10021d29
push 0x100268db
mov ecx, 0x106198e4
call fcn.10022269
push eax
mov ecx, 0x106185d8
call fcn.10021e47
mov ecx, eax
call fcn.10021d29
lea eax, [ebp - 0xb0c]
push eax
mov ecx, 0x106198e4
call fcn.1002225a
push dword [eax]
lea eax, [ebp - 0x994]
push eax
mov ecx, 0x106198e4
call fcn.1002224c
push dword [eax]
call fcn.100269d2
pop ecx
pop ecx
and dword [ebp - 0x188], 0
jmp 0x10013125
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
mov ecx, 0x106198e4
call fcn.10022269
cmp dword [ebp - 0x188], eax
jae 0x1001315e
push dword [ebp - 0x188]
mov ecx, 0x106198e4
call fcn.10022272
push dword [eax]
mov ecx, 0x106185d8
call fcn.10021d35
mov dl, 0x20
mov ecx, eax
call fcn.10026725
jmp 0x10013118
push 0x100268db
mov ecx, 0x106185d8
call fcn.10021d29
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1a8], 6
mov dword [ebp - 0x7e0], 0x407293cc
mov dword [ebp - 0x754], 0xffff
mov dword [ebp - 0x800], 0x39ef5b50
mov dword [ebp - 0x198], 0
jmp 0x100131b8
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jge 0x100131d4
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xaa0], 9
jmp 0x100131ab
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xa64], eax
cmp dword [ebp - 0x40], 0xffffffff
jge 0x100131f2
cmp dword [ebp - 0x40], 0
jne 0x100131f2
and dword [ebp - 0x360], 0
jmp 0x100131fc
mov dword [ebp - 0x360], 1
cmp dword [ebp - 0x360], 0xfff6
jbe 0x10013214
mov dword [ebp - 0x368], 1
jmp 0x1001321b
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x368]
jle 0x10013232
mov dword [ebp - 0x370], 1
jmp 0x10013239
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x370]
dec eax
cmp eax, dword [ebp - 0x40]
jge 0x10013257
cmp dword [ebp - 0x40], 0
je 0x10013257
mov dword [ebp - 0x378], 1
jmp 0x1001325e
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0x378]
jg 0x10013281
mov dword [ebp - 0x380], 1
jmp 0x10013288
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x1b0]
neg eax
cmp eax, 1
ja 0x100132b6
cmp dword [ebp - 0x1a0], 0
je 0x100132b6
mov dword [ebp - 0x7f8], 1
jmp 0x100132bd
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x99c], eax
mov dword [ebp - 0x40], 6
mov eax, 0x8217c712
test eax, eax
je 0x10013365
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x388], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x388]
mov dword [ebp + eax - 0xaa0], ecx
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x1a8], eax
jl 0x10013313
mov dword [ebp - 0x74c], 1
jmp 0x1001331a
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x9a4], eax
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x7e0]
test eax, eax
je 0x10013365
cmp dword [ebp - 0x754], 0
je 0x10013365
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaa0], 0
je 0x10013365
mov dword [ebp - 0x390], 1
jmp 0x1001336c
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 3
jne 0x10013381
mov dword [ebp - 0x398], 1
jmp 0x10013388
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x398], eax
jne 0x100133a2
mov dword [ebp - 0x3a0], 1
jmp 0x100133a9
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0x84c6
jg 0x100133c7
cmp dword [ebp - 0x800], 0
jne 0x100133c7
and dword [ebp - 0x3a8], 0
jmp 0x100133d1
mov dword [ebp - 0x3a8], 1
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x1b0], eax
mov eax, dword [ebp - 0x24]
movzx eax, byte [ebp + eax - 0x16f]
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x11c]
movzx ecx, byte [ebp + ecx - 0x172]
movsx ecx, byte [ebp + ecx - 0x6c8]
add eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x16f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x172]
movsx edx, byte [ebp + edx - 0x6c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x16f]
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x11c]
movzx edx, byte [ebp + edx - 0x172]
movsx edx, byte [ebp + edx - 0x6c8]
and ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x170]
mov byte [ebp + ecx - 0x6c8], al
mov dword [ebp - 0x2c], 0x45cdbe8e
mov dword [ebp - 0x1b8], 0
jmp 0x10013485
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 4
jge 0x100134a1
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x8f0], 0
jmp 0x10013478
cmp dword [ebp - 0x2c], 0xb88146cd
jb 0x100134b6
mov dword [ebp - 0x3b0], 1
jmp 0x100134bd
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3b0], eax
je 0x100134d4
mov dword [ebp - 0x3b8], 1
jmp 0x100134db
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3b8], eax
je 0x100134f2
mov dword [ebp - 0x3c0], 1
jmp 0x100134f9
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
sub eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x2c]
jle 0x10013513
mov dword [ebp - 0x3c8], 1
jmp 0x1001351a
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x2c]
jl 0x10013535
mov dword [ebp - 0x3d0], 1
jmp 0x1001353c
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x3d0]
jne 0x100138af
mov dword [ebp - 0x2c8], 0xfffffff7
mov dword [ebp - 0x410], 7
mov dword [ebp - 0x2c], 0xffffffef
jmp 0x1001356f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x17
je 0x100138ad
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0x418], 0x3167647c
mov dword [ebp - 0xf8], 0xffffffe3
jmp 0x100135a6
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xe
je 0x100138a8
mov dword [ebp - 0x7c], 0xfffffffd
push 3
lea ecx, [ebp - 0x8c8]
call fcn.100221ae
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x764], 0xfff7
mov dword [ebp - 0x1c0], 0
jmp 0x100135f1
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x10013613
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0x8c8]
call fcn.10022272
mov dword [eax], 9
jmp 0x100135e4
mov dword [ebp - 0x7c], 1
jmp 0x10013623
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x1b
jge 0x10013894
mov dword [ebp - 0x70], 0xa8fe2430
mov dword [ebp - 0x300], 9
mov dword [ebp - 0x70], 3
jmp 0x1001364e
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x100137d9
mov eax, 0xce35
test eax, eax
je 0x100136d8
mov eax, dword [ebp - 0x70]
cmp dword [ebp + eax*4 - 0x8f0], 0
jne 0x100136a6
mov eax, dword [ebp - 0x7c]
sub eax, 4
cmp eax, dword [ebp - 0x2c8]
jl 0x10013688
mov dword [ebp - 0x3d8], 1
jmp 0x1001368f
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x3d8]
sub eax, dword [ebp - 0x2c8]
jne 0x100136a6
and dword [ebp - 0x3e0], 0
jmp 0x100136b0
mov dword [ebp - 0x3e0], 1
cmp dword [ebp - 0x3e0], 0x7da1
jl 0x100136c3
cmp dword [ebp - 0xf8], 0
cmp dword [ebp - 0x300], 0
je 0x100136d8
mov dword [ebp - 0x75c], 1
jmp 0x100136df
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7c], eax
jl 0x100136fc
mov dword [ebp - 0x340], 1
jmp 0x10013703
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0
jne 0x10013718
mov dword [ebp - 0x3f0], 1
jmp 0x1001371f
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x8f0]
cmp eax, dword [ebp - 0x3f0]
jge 0x1001373d
mov dword [ebp - 0x3f8], 1
jmp 0x10013744
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
add eax, 0x70e7
jne 0x10013761
push 2
pop eax
test eax, eax
jne 0x10013761
and dword [ebp - 0x400], 0
jmp 0x1001376b
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x400], eax
je 0x10013782
mov dword [ebp - 0x408], 1
jmp 0x10013789
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x408], eax
jge 0x100137a0
mov dword [ebp - 0x2f8], 1
jmp 0x100137a7
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x8f0], ecx
imul eax, dword [ebp - 0x2f8], 0x883f
imul eax, eax, 0xcda6
imul eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x410], eax
jmp 0x10013647
cmp dword [ebp - 0x70], 0
jne 0x1001380a
push 1
lea ecx, [ebp - 0x8c8]
call fcn.10022272
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 0
jne 0x1001380a
and dword [ebp - 0x808], 0
jmp 0x10013814
mov dword [ebp - 0x808], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x300]
add ecx, 0xffff
cmp dword [ebp + eax - 0x8f0], ecx
jne 0x1001383a
mov dword [ebp - 0x420], 1
jmp 0x10013841
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x420]
jg 0x1001385b
mov dword [ebp - 0x428], 1
jmp 0x10013862
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x300]
cmp dword [ebp - 0x428], eax
je 0x1001387c
mov dword [ebp - 0x430], 1
jmp 0x10013883
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x764], eax
jmp 0x1001361c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8c8]
call fcn.10022230
jmp 0x10013599
jmp 0x10013568
jmp 0x100138c9
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x100138c9
push 0
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x100138f2
push 0x1137
push 0
push 0x7d0
push 0x2227
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
and dword [ebp - 0x11c], 0
jmp 0x100128cf
mov dword [ebp - 0x870], 0x928c176b
mov dword [ebp - 0x86c], 0x928c176b
mov dword [ebp - 0x868], 0x928c176b
mov dword [ebp - 0x864], 0x928c176b
lea ecx, [ebp - 0x2f9]
call fcn.100222d4
push eax
lea eax, [ebp - 0x860]
push eax
lea eax, [ebp - 0x870]
push eax
lea ecx, [ebp - 0xba8]
call fcn.100222d7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x330]
call fcn.1002220a
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x478], 0x10fecafe
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x76c], 1
push 2
lea ecx, [ebp - 0xab0]
call fcn.100221ae
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x1c8], 0
jmp 0x100139aa
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x100139cc
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0xab0]
call fcn.10022272
mov dword [eax], 0xfff9
jmp 0x1001399d
push 2
lea ecx, [ebp - 0x330]
call fcn.10022272
and dword [eax], 0
jmp 0x10013a02
push 2
lea ecx, [ebp - 0x330]
call fcn.10022272
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x438]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x330]
call fcn.10022272
cmp dword [eax], 1
jg 0x10013c5d
mov dword [ebp - 0x1d8], 5
mov dword [ebp - 0x1e0], 0xfffffffd
mov dword [ebp - 0x1d0], 0
jmp 0x10013a45
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x10013a61
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x2d0], 5
jmp 0x10013a38
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d0]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x2d0], ecx
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x440], eax
jg 0x10013aa1
mov dword [ebp - 0x470], 1
jmp 0x10013aa8
and dword [ebp - 0x470], 0
mov eax, 0xd850
test eax, eax
je 0x10013b2f
push 2
lea ecx, [ebp - 0x330]
call fcn.10022272
mov eax, dword [eax]
mov dword [ebp - 0x1e0], eax
mov esi, dword [ebp - 0x1e0]
push 0
lea ecx, [ebp - 0x330]
call fcn.10022272
cmp esi, dword [eax]
je 0x10013ae9
mov dword [ebp - 0x448], 1
jmp 0x10013af0
and dword [ebp - 0x448], 0
push 3
lea ecx, [ebp - 0x330]
call fcn.10022272
mov ecx, dword [ebp - 0x448]
cmp ecx, dword [eax]
je 0x10013b13
mov dword [ebp - 0x450], 1
jmp 0x10013b1a
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x1e0], 0
je 0x10013b2f
mov dword [ebp - 0x458], 1
jmp 0x10013b36
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x458]
jge 0x10013b5d
mov dword [ebp - 0x460], 1
jmp 0x10013b64
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
neg eax
mov dword [ebp - 0x468], 1
jmp 0x10013b7f
imul eax, dword [ebp - 0x468], 0
imul eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1d8]
jne 0x10013ba1
mov dword [ebp - 0x7ec], 1
jmp 0x10013ba8
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x1e0], 8
jne 0x10013bc9
mov dword [ebp - 0x480], 1
jmp 0x10013bd0
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x478]
cmp eax, dword [ebp - 0x480]
jle 0x10013bf6
mov dword [ebp - 0x488], 1
jmp 0x10013bfd
and dword [ebp - 0x488], 0
push 0
lea ecx, [ebp - 0x330]
call fcn.10022272
mov ecx, dword [ebp - 0x488]
cmp ecx, dword [eax]
je 0x10013c20
mov dword [ebp - 0x490], 1
jmp 0x10013c27
and dword [ebp - 0x490], 0
push 3
lea ecx, [ebp - 0x330]
call fcn.10022272
mov ecx, dword [ebp - 0x490]
cmp ecx, dword [eax]
je 0x10013c4c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d0], 0
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x76c], eax
jmp 0x100139de
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xab0]
call fcn.10022230
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.10022230
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x6c8], 0
push 4
lea ecx, [ebp - 0x27c]
call fcn.100221ae
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x50], 0
jmp 0x10013cad
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x10013cc3
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x644], 0xfd41e559
jmp 0x10013ca6
mov dword [ebp - 0x50], 0
jmp 0x10013cd3
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10013cef
push dword [ebp - 0x50]
lea ecx, [ebp - 0x27c]
call fcn.10022272
mov dword [eax], 8
jmp 0x10013ccc
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
and dword [eax], 0
jmp 0x10013d25
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x498]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
cmp dword [eax], 1
jg 0x10013f85
mov dword [ebp - 0x54], 0x4b666a75
mov dword [ebp - 0x54], 0
jmp 0x10013d52
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jg 0x10013f54
mov dword [ebp - 0xb4], 0x11151c3
mov dword [ebp - 0x4a8], 0x7bf748bb
mov dword [ebp - 0x778], 0xcfda6c2e
mov dword [ebp - 0xb4], 1
jmp 0x10013d93
mov eax, dword [ebp - 0xb4]
dec eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 0
jl 0x10013f4f
mov dword [ebp - 0xf0], 0x8f0d0714
mov dword [ebp - 0x784], 0x7972e7eb
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x644]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x644]
mov dword [ebp - 0xb10], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x644], 0
je 0x10013ea5
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xa84], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x9bc], eax
mov esi, dword [ebp - 0xf0]
push 1
lea ecx, [ebp - 0x27c]
call fcn.10022272
cmp esi, dword [eax]
jle 0x10013e29
mov dword [ebp - 0x828], 1
jmp 0x10013e30
and dword [ebp - 0x828], 0
push 2
lea ecx, [ebp - 0x27c]
call fcn.10022272
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
cmp dword [eax], 0
jle 0x10013e5b
mov dword [ebp - 0x4a0], 1
jmp 0x10013e62
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xb4]
imul eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x778], eax
cmp dword [ebp - 0x54], 0
je 0x10013ea5
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
cmp dword [eax], 0
je 0x10013ea5
mov dword [ebp - 0x4b0], 1
jmp 0x10013eac
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x4b0], eax
je 0x10013ec6
mov dword [ebp - 0x7f4], 1
jmp 0x10013ecd
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x10013efe
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10013efc
push 0
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x10013f35
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10013f16
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10013f35
push 0
push 0xf97
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 3
lea ecx, [ebp - 0x27c]
call fcn.10022272
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
jmp 0x10013d86
jmp 0x10013d4b
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
mov esi, dword [eax]
push 0
lea ecx, [ebp - 0x27c]
call fcn.10022272
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0x644]
mov dword [ebp + eax*4 - 0x644], ecx
jmp 0x10013d01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
call fcn.10022230
lea eax, [ebp - 0x6c8]
push eax
lea ecx, [ebp - 0xb80]
call fcn.10022102
mov dword [ebp - 4], 0x18
mov dword [ebp - 0x1f8], 0x3606de71
mov dword [ebp - 0x1f0], 0
jmp 0x10013fd0
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x10013fec
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xae8], 0xe3556834
jmp 0x10013fc3
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x1001401a
push 0x5fe
push 0x1e86
push 0x26be
push 0x1a91
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov dword [ebp - 0x1f8], 0
jmp 0x10014033
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jg 0x100141ea
mov dword [ebp - 0x4c0], 0
mov byte [ebp - 0xb5], 0
mov dword [ebp - 0x4b8], 0xd4e
mov dword [ebp - 0x790], 0x100078d0
cmp dword [ebp - 0x4b8], 0xd5f
jle 0x1001417d
and dword [ebp - 0x17c], 0
jmp 0x1001408b
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x2216
jge 0x1001417d
and dword [ebp - 0x200], 0
jmp 0x100140b1
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x11ae
jge 0x10014178
and dword [ebp - 0x178], 0
jmp 0x100140d7
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0x39c9
jge 0x10014173
and dword [ebp - 0x184], 0
jmp 0x100140fd
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0x184
jge 0x1001416e
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x178]
sar eax, cl
and eax, dword [ebp - 0x17c]
or eax, dword [ebp - 0x184]
cdq
mov dword [ebp - 0x78c], eax
mov dword [ebp - 0x788], edx
push dword [ebp - 0x788]
push dword [ebp - 0x78c]
lea ecx, [ebp - 0xbe8]
call fcn.1000a263
pop ecx
pop ecx
mov dword [ebp - 0x81c], eax
mov ecx, dword [ebp - 0x81c]
call fcn.10021b1d
push eax
call fcn.10058fef
pop ecx
lea ecx, [ebp - 0xbe8]
call fcn.10021b13
jmp 0x100140f0
jmp 0x100140ca
jmp 0x100140a4
jmp 0x1001407e
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10014190
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov byte [ebp - 4], 0x19
cmp dword [ebp - 0x4b8], 0xa72
jge 0x100141ac
push dword [ebp - 0x790]
call fcn.10058fef
pop ecx
jmp 0x100141c8
mov dword [ebp - 4], 0x18
jmp 0x100141d8
mov eax, dword [ebp - 0x4c0]
inc eax
mov dword [ebp - 0x4c0], eax
jmp 0x10014026
and dword [ebp - 0x220], 0
jmp 0x10014200
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0xf
jae 0x100144c3
push 1
lea ecx, [ebp - 0x33c]
call fcn.100221ae
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x5c], 0
jmp 0x1001423c
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x10014258
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x33c]
call fcn.10022272
mov dword [eax], 0xdde0
jmp 0x10014235
mov dword [ebp - 0x5c], 0
jmp 0x10014268
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1001427e
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xb00], 0x34172034
jmp 0x10014261
mov dword [ebp - 0x20], 0
jmp 0x1001428e
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x100143cc
mov dword [ebp - 0xf4], 0xffffffff
cmp dword [ebp - 0xf4], 0
je 0x100142c0
cmp dword [ebp - 0xf4], 0
je 0x100142c0
mov dword [ebp - 0x4c8], 1
jmp 0x100142c7
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
neg eax
cmp eax, 5
jne 0x100142e0
mov dword [ebp - 0x4d0], 1
jmp 0x100142e7
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x64], eax
mov esi, dword [ebp - 0x20]
mov edi, dword [ebp - 0x64]
mov ebx, dword [ebp - 0x20]
push dword [ebp - 0x20]
lea ecx, [ebp - 0x33c]
call fcn.10022272
add ebx, dword [eax]
sub ebx, edi
add ebx, esi
jne 0x1001431b
mov dword [ebp - 0x4d8], 1
jmp 0x10014322
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 0x9e9d
jle 0x1001433a
mov dword [ebp - 0x7fc], 1
jmp 0x10014341
and dword [ebp - 0x7fc], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x33c]
call fcn.10022272
push dword [ebp - 0x20]
lea ecx, [ebp - 0x33c]
call fcn.10022272
mov dword [ebp - 0x4e0], eax
push dword [ebp - 0x20]
lea ecx, [ebp - 0x33c]
call fcn.10022272
mov ecx, dword [ebp - 0x4e0]
mov eax, dword [eax]
mov dword [ecx], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4e0]
mov ecx, dword [ecx]
mov dword [ebp + eax - 0xb00], ecx
mov dword [ebp - 0xf4], 0
jmp 0x100143a9
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0
jl 0x100143c7
push dword [ebp - 0x20]
lea ecx, [ebp - 0x33c]
call fcn.10022272
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
jmp 0x1001439c
jmp 0x10014287
mov dword [ebp - 0x64], 0
jmp 0x100143dc
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x100144a1
mov dword [ebp - 0x20], 0
jmp 0x100143f6
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1001449c
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0xbc], 0
jmp 0x10014423
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jg 0x10014482
push dword [ebp - 0x64]
lea ecx, [ebp - 0x33c]
call fcn.10022272
cmp dword [eax], 0
jne 0x10014458
mov eax, dword [ebp - 0xbc]
cmp dword [ebp + eax*4 - 0xb00], 0
jne 0x10014458
and dword [ebp - 0x4e8], 0
jmp 0x10014462
mov dword [ebp - 0x4e8], 1
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax*4 - 0xb00], ecx
cmp dword [ebp - 0xbc], 0
je 0x10014480
jmp 0x10014482
jmp 0x10014416
push dword [ebp - 0x64]
lea ecx, [ebp - 0x33c]
call fcn.10022272
cmp dword [eax], 0
je 0x10014497
jmp 0x1001449c
jmp 0x100143ef
jmp 0x100143d5
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x33c]
call fcn.10022230
mov eax, dword [ebp - 0x220]
mov byte [ebp + eax - 0x6c8], 0
jmp 0x100141f3
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x6c], 5
mov dword [ebp - 0x228], 0
jmp 0x100144f4
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x10014510
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x324], 0xc9cadcda
jmp 0x100144e7
mov dword [ebp - 0x8c], 0xfffffff7
jmp 0x10014529
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xffffffeb
jge 0x10014645
mov dword [ebp - 0x798], 0
mov dword [ebp - 0x510], 0xae86
mov dword [ebp - 0x824], 0xffffffff
cmp dword [ebp - 0x8c], 0
jne 0x1001456f
mov eax, 0x960698b4
test eax, eax
jne 0x1001456f
and dword [ebp - 0x4f0], 0
jmp 0x10014579
mov dword [ebp - 0x4f0], 1
cmp dword [ebp - 0x4f0], 1
jg 0x1001458e
mov dword [ebp - 0x4f8], 1
jmp 0x10014595
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x798]
cmp dword [ebp - 0x4f8], eax
jne 0x100145af
mov dword [ebp - 0x500], 1
jmp 0x100145b6
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x500], eax
jl 0x100145cd
mov dword [ebp - 0x508], 1
jmp 0x100145d4
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x6c], eax
mov eax, 0xc8e1
imul eax, eax, 0xffffffff
test eax, eax
je 0x100145fe
cmp dword [ebp - 0x510], 0
je 0x100145fe
mov dword [ebp - 0x518], 1
jmp 0x10014605
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x510]
add eax, dword [ebp - 0x518]
mov dword [ebp - 0x824], eax
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10014640
push 0
push 0x13fa
push 0x1734
push 0x7d8
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x1001451c
mov dword [ebp - 0x4c], 0
jmp 0x10014655
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jg 0x100149ed
mov dword [ebp - 0x290], 8
mov dword [ebp - 0x568], 9
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x324], 0
je 0x10014900
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x324]
mov dword [ebp - 0x9c4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x324]
cmp dword [ebp - 0x8c], eax
jg 0x100146b4
mov dword [ebp - 0x520], 1
jmp 0x100146bb
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 0xbad6e3f9
jb 0x100146d3
mov dword [ebp - 0x528], 1
jmp 0x100146da
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0xf61739bb
jae 0x100146f2
mov dword [ebp - 0x530], 1
jmp 0x100146f9
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x530], eax
jge 0x10014713
mov dword [ebp - 0x538], 1
jmp 0x1001471a
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
imul eax, dword [ebp - 0x4c]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x540]
mov dword [ebp + eax*4 - 0x324], ecx
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x8c], eax
push 4
pop eax
shl eax, 1
mov ecx, 0xa3c3a871
sub ecx, dword [ebp + eax - 0x324]
cmp ecx, dword [ebp - 0x290]
jne 0x1001476b
mov dword [ebp - 0x548], 1
jmp 0x10014772
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
add eax, 0x399f8d6c
jne 0x1001478b
mov dword [ebp - 0x550], 1
jmp 0x10014792
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x550], eax
jl 0x100147ac
mov dword [ebp - 0x558], 1
jmp 0x100147b3
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x558]
imul eax, dword [ebp - 0x568]
test eax, eax
je 0x10014900
mov dword [ebp - 0x6c], 2
jmp 0x100147df
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x100148fb
mov dword [ebp - 0x294], 0xffffffff
mov dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x324]
cmp dword [ebp - 0x294], eax
jg 0x1001481b
mov dword [ebp - 0x560], 1
jmp 0x10014822
and dword [ebp - 0x560], 0
mov eax, 0xfff9
sub eax, dword [ebp - 0x560]
mov ecx, dword [ebp - 0x6c]
mov dword [ebp + ecx*4 - 0x324], eax
cmp dword [ebp - 0x568], 0
jae 0x1001484c
mov dword [ebp - 0x7a0], 1
jmp 0x10014853
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0x324], 0
je 0x1001487c
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x324], 0x18e2bb11
jmp 0x100148f6
mov dword [ebp - 0x6d0], 0xffffffff
push 2
lea ecx, [ebp - 0x8b0]
call fcn.100221ae
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x23c], 0
jmp 0x100148b0
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x100148d2
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x8b0]
call fcn.10022272
mov dword [eax], 1
jmp 0x100148a3
mov esi, dword [ebp - 0x6d0]
push 0
lea ecx, [ebp - 0x8b0]
call fcn.10022272
mov dword [eax], esi
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x8b0]
call fcn.10022230
jmp 0x100147d8
jmp 0x100149e8
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x588], 2
mov dword [ebp - 0x6e0], 0xdf11712d
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x324]
mov dword [ebp - 0x9cc], eax
cmp dword [ebp - 0x29c], 0
jne 0x10014966
mov eax, 0x84e0
test eax, eax
je 0x1001495d
imul eax, dword [ebp - 0x588], 0xe23d
mov ecx, dword [ebp - 0x29c]
lea eax, [eax + ecx - 0xfff7]
test eax, eax
jne 0x10014966
and dword [ebp - 0x570], 0
jmp 0x10014970
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x570]
sub eax, 0x9ecf187
cmp eax, 0x4782
jg 0x1001498e
mov dword [ebp - 0x578], 1
jmp 0x10014995
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0xc1ca3632
je 0x100149ad
mov dword [ebp - 0x580], 1
jmp 0x100149b4
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0
ja 0x100149c9
mov dword [ebp - 0x6d8], 1
jmp 0x100149d0
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x6e0], eax
jmp 0x1001464e
push 1
push 0
lea eax, [ebp - 0xb80]
push eax
push dword [ebp - 0x590]
call fcn.10015299
add esp, 0x10
mov dword [0x10619718], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb80]
call fcn.10022131
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x2a4], 6
mov dword [ebp - 0x700], 1
mov dword [ebp - 0x708], 0x811fc80
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10014a5d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenProcess]
cmp dword [ebp - 0x3c], 0xfffffff6
je 0x10014a6f
mov dword [ebp - 0x598], 1
jmp 0x10014a76
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], eax
jge 0x10014a8a
mov dword [ebp - 0x6e8], 1
jmp 0x10014a91
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x2a4], eax
mov eax, dword [ebp - 0x2a4]
add eax, dword [ebp - 0x3c]
cmp eax, 7
jg 0x10014ac9
cmp dword [ebp - 0x2a4], 0
je 0x10014ac9
mov dword [ebp - 0x5a0], 1
jmp 0x10014ad0
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x5a0]
cmp dword [ebp - 0x3c], eax
jge 0x10014aeb
mov dword [ebp - 0x6f0], 1
jmp 0x10014af2
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xaa4], eax
cmp dword [ebp - 0x3c], 0xe022a5bc
jne 0x10014b10
mov dword [ebp - 0x5a8], 1
jmp 0x10014b17
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x5a8], eax
je 0x10014b2e
mov dword [ebp - 0x5b0], 1
jmp 0x10014b35
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x5b0]
jg 0x10014b4c
mov dword [ebp - 0x6f8], 1
jmp 0x10014b53
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x708], eax
cmp dword [0x10619718], 0
je 0x10015286
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x9dc], 0xfffffffd
mov dword [ebp - 0x898], 0x3cf95751
mov dword [ebp - 0x894], 0x3cf95751
mov dword [ebp - 0x890], 0x3cf95751
mov dword [ebp - 0x88c], 0x3cf95751
lea ecx, [ebp - 0x289]
call fcn.100222d4
push eax
lea eax, [ebp - 0x888]
push eax
lea eax, [ebp - 0x898]
push eax
lea ecx, [ebp - 0xba0]
call fcn.100222d7
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb54]
call fcn.1002220a
mov dword [ebp - 0x5b8], 1
mov dword [ebp - 0xab8], 0xffffffff
mov dword [ebp - 0x244], 0
jmp 0x10014c0a
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0xfffffff8
jne 0x10014ccc
mov dword [ebp - 0x9e4], 0xfffffffb
mov dword [ebp - 0xab4], 0xfe1ca296
mov dword [ebp - 0x9ec], 0xa9869ec4
mov dword [ebp - 0xabc], 0x85a1fa14
mov dword [ebp - 0x9f4], 0xfffffffa
mov dword [ebp - 0xac4], 0x3aeb5900
mov dword [ebp - 0x9fc], 0xf7b6fe6d
mov dword [ebp - 0xac0], 1
mov dword [ebp - 0xa04], 0x1de6fc60
mov dword [ebp - 0xb18], 0x643b8a2
mov dword [ebp - 0xa0c], 0xdde9ab5c
mov dword [ebp - 0x24c], 0
jmp 0x10014c9e
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 2
jge 0x10014cba
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xbb8], 0xdffbe584
jmp 0x10014c91
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
jmp 0x10014bfd
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10014cf5
push 0
push 0x19c5
push 0x2b9
push 0x2387
call dword [sym.imp.GDI32.dll_SetPixel]
lea ecx, [ebp - 0xb54]
call fcn.10022230
mov eax, dword [ebp + 8]
mov dword [ebp - 0x728], eax
mov dword [ebp - 0xfc], 0x90ac204e
mov dword [ebp - 0x124], 0xa028ea38
mov dword [ebp - 0x838], 0xbecc33ba
mov dword [ebp - 0x834], 0xbecc33ba
mov dword [ebp - 0x830], 0xbecc33ba
mov dword [ebp - 0x82c], 0xbecc33ba
mov dword [ebp - 0x600], 0
mov dword [ebp - 0x2b4], 0xfffc
mov dword [ebp - 0x74], 0
jmp 0x10014d69
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10014d7f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xb3c], 0
jmp 0x10014d62
mov dword [ebp - 0x74], 0
jmp 0x10014d8f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x10014da5
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x6b8], 0x66bc
jmp 0x10014d88
mov dword [ebp - 0xfc], 0
jmp 0x10014dbe
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x1b
je 0x10014ff6
mov dword [ebp - 0x90], 0x90197f0a
mov dword [ebp - 0x254], 0
jmp 0x10014dee
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x10014e0a
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x2ac], 0xffffffff
jmp 0x10014de1
mov dword [ebp - 0x90], 0
jmp 0x10014e23
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x10014fd3
mov dword [ebp - 0x94], 7
mov dword [ebp - 0x94], 0
jmp 0x10014e53
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x10014fce
mov dword [ebp - 0x5e8], 0x8b081589
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0x90], 0
je 0x10014e94
cmp dword [ebp - 0xfc], 0
je 0x10014e94
mov dword [ebp - 0x5c0], 1
jmp 0x10014e9b
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0x7b1b
je 0x10014ec3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ac], 0
je 0x10014ec3
mov dword [ebp - 0x5c8], 1
jmp 0x10014eca
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0xfc]
sub eax, dword [ebp - 0x5c8]
cmp dword [ebp - 0x94], eax
jle 0x10014eea
mov dword [ebp - 0x5d0], 1
jmp 0x10014ef1
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x5d0]
test eax, eax
je 0x10014f1e
push 7
pop eax
test eax, eax
je 0x10014f1e
cmp dword [ebp - 0x94], 0
je 0x10014f1e
mov dword [ebp - 0x5d8], 1
jmp 0x10014f25
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x2ac]
cmp eax, dword [ebp - 0x5d8]
jge 0x10014f4c
cmp dword [ebp - 0x94], 0
jne 0x10014f4c
and dword [ebp - 0x5e0], 0
jmp 0x10014f56
mov dword [ebp - 0x5e0], 1
cmp dword [ebp - 0x5e0], 0x5596
jl 0x10014f6e
mov dword [ebp - 0x710], 1
jmp 0x10014f75
and dword [ebp - 0x710], 0
mov dword [ebp - 0x5e8], 1
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xa14], eax
mov eax, 0xcf0a
cmp eax, 0xffff
jb 0x10014faf
mov dword [ebp - 0x5f0], 1
jmp 0x10014fb6
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp + eax*4 - 0x2ac], ecx
jmp 0x10014e46
jmp 0x10014e16
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x10014ff1
push 1
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_SetSecurityDescriptorOwner]
jmp 0x10014db1
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x838], 0x268dd2ac
mov dword [ebp - 0x124], 0x268dd2ac
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xb04], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b8]
mov dword [ebp - 0xa24], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b8], 0
je 0x1001504f
xor eax, eax
je 0x1001504f
mov dword [ebp - 0x5f8], 1
jmp 0x10015056
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x6b8]
test eax, eax
jne 0x10015092
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x838], 0
jne 0x10015092
and dword [ebp - 0x608], 0
jmp 0x1001509c
mov dword [ebp - 0x608], 1
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x718], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x838]
add eax, dword [ebp - 0x608]
imul eax, eax, 0xffffffff
mov dword [ebp - 0x720], eax
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
mov eax, dword [ebp - 0x718]
cmp eax, dword [ebp - 0x720]
jle 0x100150ea
mov dword [ebp - 0x610], 1
jmp 0x100150f1
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0xfffffff6
jne 0x10015106
mov dword [ebp - 0x618], 1
jmp 0x1001510d
and dword [ebp - 0x618], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b8]
cmp dword [ebp - 0x618], eax
jne 0x1001512e
mov dword [ebp - 0x620], 1
jmp 0x10015135
and dword [ebp - 0x620], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x620]
sub ecx, dword [ebp + eax - 0xb3c]
je 0x1001515f
cmp dword [ebp - 0x124], 0
je 0x1001515f
mov dword [ebp - 0x628], 1
jmp 0x10015166
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
add eax, 0xfffc
cmp eax, 1
jbe 0x10015182
mov dword [ebp - 0x630], 1
jmp 0x10015189
and dword [ebp - 0x630], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x630]
mov dword [ebp + eax - 0xb3c], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x730], eax
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x738], eax
mov dword [ebp - 0x264], 8
mov dword [ebp - 0x924], 1
mov dword [ebp - 0x25c], 0
jmp 0x100151ea
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x10015206
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xc0c], 0
jmp 0x100151dd
mov dword [ebp - 0x264], 2
jmp 0x1001521f
mov eax, dword [ebp - 0x264]
dec eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jl 0x1001524e
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1001524c
push 0x14af
push 0xd06
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x10015212
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10015266
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push dword [ebp - 0x738]
push dword [ebp - 0x740]
call dword [0x10619718]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x748]
jmp 0x10015288
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret