Function at 0x10025a8f
Capabilities:
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4a4
movzx eax, byte [ebp + 0xc]
test eax, eax
je 0x10027507
mov dword [ebp - 8], 0xfffffff7
mov dword [ebp - 0xc], 4
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x348], 0xfffffff6
mov dword [ebp - 0xd8], 0
jmp 0x10025adf
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10025afb
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x24c], 0x845925f8
jmp 0x10025ad2
xor eax, eax
inc eax
je 0x10025cc5
mov dword [ebp - 0xb0], 1
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0xb0], eax
je 0x10025b25
mov dword [ebp - 0x220], 1
jmp 0x10025b2c
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x220]
jl 0x10025b43
mov dword [ebp - 0x2ec], 1
jmp 0x10025b4a
and dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0x2ec]
sub eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 8]
jl 0x10025b64
mov dword [ebp - 0x2f4], 1
jmp 0x10025b6b
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0x5e0b
je 0x10025b86
cmp dword [ebp - 0xc], 0
jne 0x10025b86
and dword [ebp - 0x2fc], 0
jmp 0x10025b90
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x2fc], eax
jge 0x10025ba7
mov dword [ebp - 0x304], 1
jmp 0x10025bae
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x304], eax
je 0x10025bc8
mov dword [ebp - 0x30c], 1
jmp 0x10025bcf
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x30c], eax
jg 0x10025be9
mov dword [ebp - 0x2f8], 1
jmp 0x10025bf0
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2f8]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], 0xffff
cmp dword [ebp - 0xc], 0
je 0x10025c18
cmp dword [ebp - 0xc], 0
je 0x10025c18
mov dword [ebp - 0x124], 1
jmp 0x10025c1f
and dword [ebp - 0x124], 0
cmp dword [ebp - 0x124], 0x7ab8
jge 0x10025c37
mov dword [ebp - 0x23c], 1
jmp 0x10025c3e
and dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x310]
cmp eax, dword [ebp - 0x23c]
jg 0x10025c58
mov dword [ebp - 0x12c], 1
jmp 0x10025c5f
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0x37d660f1
jne 0x10025c77
mov dword [ebp - 0x244], 1
jmp 0x10025c7e
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
sub eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 8]
jle 0x10025c9b
mov dword [ebp - 0x134], 1
jmp 0x10025ca2
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x348], eax
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x10025cc0
call dword [sym.imp.USER32.dll_ReleaseCapture]
jmp 0x10025d49
mov dword [ebp - 0xa8], 0
jmp 0x10025cde
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x10025cfa
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x488], 0xfffffffd
jmp 0x10025cd1
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0x488], 0xcbfb41ce
mov dword [ebp - 0xc], 0
jmp 0x10025d1b
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jg 0x10025d49
mov dword [ebp - 8], 0
jmp 0x10025d31
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x10025d47
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x488], 1
jmp 0x10025d2a
jmp 0x10025d14
mov dword [ebp - 8], 0
jmp 0x10025d59
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x10025dc5
mov dword [ebp - 0x9c], 0
jmp 0x10025d78
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x10025d94
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x350], 8
jmp 0x10025d6b
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x24c]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x24c], 0xfffffffa
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x350], 0xfffffffa
jmp 0x10025d52
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x100], 0
mov dword [ebp - 0x3d8], 0xe7aebb1b
mov dword [ebp - 0x3d4], 0xe7aebb1b
mov dword [ebp - 0x3d0], 0xe7aebb1b
mov dword [ebp - 0x3cc], 0xe7aebb1b
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x3c8], 9
mov dword [ebp - 0x3c4], 9
mov dword [ebp - 0x3c0], 9
mov dword [ebp - 0x3bc], 9
mov dword [ebp - 0x20], 0
jmp 0x10025e4b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x10025e61
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x108], 0xffffffff
jmp 0x10025e44
mov dword [ebp - 0x20], 0
jmp 0x10025e71
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x10025e87
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x428], 0x637b3047
jmp 0x10025e6a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x108], 0
je 0x10025f6a
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0xb4], 0
jmp 0x10025ebe
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 4
jge 0x10025eda
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x3a8], 0
jmp 0x10025eb1
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x3a8], 0
jmp 0x10025f08
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3a8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3a8], 2
jge 0x10025f32
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3a8]
mov dword [ebp + eax*4 - 0x108], 0xfffffffe
jmp 0x10025eed
mov dword [ebp - 0x84], 0
jmp 0x10025f4b
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jg 0x10025f68
mov eax, dword [ebp - 0x84]
cmp dword [ebp + eax*4 - 0x108], 0
je 0x10025f66
jmp 0x10025f68
jmp 0x10025f3e
jmp 0x10025f86
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x10025f7c
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov dword [ebp - 0x100], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x438], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x428], 0x9bdd7770
jb 0x10025fb8
mov dword [ebp - 0x13c], 1
jmp 0x10025fbf
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0x7201
jle 0x10025fd7
mov dword [ebp - 0x254], 1
jmp 0x10025fde
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0x144], 1
jmp 0x10025ffd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3d8]
cmp dword [ebp - 0x144], eax
jne 0x1002601e
mov dword [ebp - 0x25c], 1
jmp 0x10026025
and dword [ebp - 0x25c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x428]
cmp dword [ebp - 0x25c], eax
jge 0x10026046
mov dword [ebp - 0x14c], 1
jmp 0x1002604d
and dword [ebp - 0x14c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x14c]
sub ecx, dword [ebp + eax - 0x108]
cmp ecx, dword [ebp - 0x100]
jl 0x10026074
mov dword [ebp - 0x358], 1
jmp 0x1002607b
and dword [ebp - 0x358], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0x3f0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x37c]
cmp dword [ebp + eax - 0x108], ecx
jle 0x100260af
mov dword [ebp - 0x264], 1
jmp 0x100260b6
and dword [ebp - 0x264], 0
cmp dword [ebp - 0x264], 0x895c
jle 0x100260d7
mov eax, 0x79a9
test eax, eax
je 0x100260d7
mov dword [ebp - 0x154], 1
jmp 0x100260de
and dword [ebp - 0x154], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x154]
mov dword [ebp + eax - 0x3c8], ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x344], eax
mov dword [ebp - 0xa4], 0x3b26bdde
mov dword [ebp - 0xa4], 0
jmp 0x1002611c
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0xfffffff5
jge 0x1002618e
mov dword [ebp - 0xbc], 0
jmp 0x1002613e
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 1
jge 0x1002615a
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x384], 0x18d58162
jmp 0x10026131
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1002617a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RealizePalette]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x384], 0
je 0x1002618c
jmp 0x1002618e
jmp 0x1002610f
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x24], 0xf93bd5de
mov dword [ebp - 0x64], 0x50270f9e
mov dword [ebp - 0x48], 0x70e7ad53
mov dword [ebp - 0x29c], 0x4edc0223
mov dword [ebp - 0x10], 0x2d5fba25
mov dword [ebp - 0x90], 0xfffc
mov dword [ebp - 0xac], 0x35309f33
mov dword [ebp - 0x30], 0
jmp 0x100261e1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x100261f7
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xfc], 0x6310feca
jmp 0x100261da
mov dword [ebp - 0x30], 0
jmp 0x10026207
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1002621d
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xf0], 0
jmp 0x10026200
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc], 0
jle 0x10026279
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3f8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x64], 0
je 0x10026279
mov dword [ebp - 0x26c], 1
jmp 0x10026280
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x26c], eax
jne 0x100262a1
mov dword [ebp - 0x15c], 1
jmp 0x100262a8
and dword [ebp - 0x15c], 0
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0xfc], 0xffffffff
mov ecx, dword [ebp - 0x64]
imul ecx, dword [ebp - 0x15c]
cmp eax, ecx
jne 0x100262d0
mov dword [ebp - 0x274], 1
jmp 0x100262d7
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
je 0x10026302
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc], 0
je 0x10026302
mov dword [ebp - 0x164], 1
jmp 0x10026309
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x164], eax
jne 0x10026323
mov dword [ebp - 0x27c], 1
jmp 0x1002632a
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
imul eax, dword [ebp - 0x27c]
test eax, eax
jne 0x1002635b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc], 0
jne 0x1002635b
and dword [ebp - 0x16c], 0
jmp 0x10026365
mov dword [ebp - 0x16c], 1
mov eax, dword [ebp - 0x16c]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x10], eax
je 0x10026386
push 9
pop eax
test eax, eax
je 0x10026386
mov dword [ebp - 0x284], 1
jmp 0x1002638d
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
shl eax, 2
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf0], eax
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x2ec6f0d4
jge 0x100263c8
mov dword [ebp - 0x174], 1
jmp 0x100263cf
and dword [ebp - 0x174], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf0]
cmp dword [ebp - 0x174], eax
jle 0x100263f0
mov dword [ebp - 0x38c], 1
jmp 0x100263f7
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x10], 0xa9b22354
je 0x10026412
mov dword [ebp - 0x28c], 1
jmp 0x10026419
and dword [ebp - 0x28c], 0
imul eax, dword [ebp - 0x28c], 0xfffb
cmp eax, 0xfffffffa
jne 0x10026434
mov dword [ebp - 0x17c], 1
jmp 0x1002643b
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x17c]
jle 0x10026452
mov dword [ebp - 0x340], 1
jmp 0x10026459
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x64], 0
je 0x10026474
mov eax, 0x8cdb5cf6
test eax, eax
je 0x10026474
mov dword [ebp - 0x294], 1
jmp 0x1002647b
and dword [ebp - 0x294], 0
cmp dword [ebp - 0x294], 0x2d1f
jle 0x10026493
mov dword [ebp - 0x184], 1
jmp 0x1002649a
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x24], eax
jl 0x100264ba
mov dword [ebp - 0x31c], 1
jmp 0x100264c1
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x24], 0x456b
jge 0x100264df
mov dword [ebp - 0x18c], 1
jmp 0x100264e6
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x29c]
cmp dword [ebp - 0x18c], eax
jge 0x10026500
mov dword [ebp - 0x368], 1
jmp 0x10026507
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x410], eax
mov eax, 0xe480b0de
test eax, eax
je 0x10026642
mov dword [ebp - 0x418], 0xffffffff
mov dword [ebp - 0x448], 0x76e3b61e
mov dword [ebp - 0x2ac], 0x1b4adc7c
mov dword [ebp - 0x324], 0x6ffb
mov dword [ebp - 0xc4], 0
jmp 0x1002655e
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 4
jge 0x1002657a
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x3e8], 0xe4bca0f9
jmp 0x10026551
mov dword [ebp - 0x10], 2
jmp 0x1002658a
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x100265c9
mov dword [ebp - 0x450], 0xffffffff
mov dword [ebp - 0x458], 0xfffffff6
mov dword [ebp - 0x3ec], 0x1dd571b4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e8]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x3e8], eax
jmp 0x10026583
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0x2ac], eax
jle 0x100265e9
mov dword [ebp - 0x194], 1
jmp 0x100265f0
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x2a4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp + eax - 0xf0], ecx
mov eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0xac]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3e8]
sub ecx, eax
add ecx, dword [ebp - 0x194]
mov dword [ebp - 0x2ac], ecx
jmp 0x10026969
mov dword [ebp - 0x1ac], 0x90c9
mov dword [ebp - 0x28], 0
jmp 0x1002665c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x10026672
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3b8], 0x65f4e4d7
jmp 0x10026655
mov dword [ebp - 0x28], 0
jmp 0x10026682
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x10026698
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x374], 0x3529c6f6
jmp 0x1002667b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf0], 0xc9ac
jle 0x100266b7
mov dword [ebp - 0x19c], 1
jmp 0x100266be
and dword [ebp - 0x19c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf0]
cmp dword [ebp - 0x19c], eax
jl 0x100266df
mov dword [ebp - 0x2b4], 1
jmp 0x100266e6
and dword [ebp - 0x2b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x45c], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3b8]
mov edx, dword [ebp - 0x2b4]
lea ecx, [edx + ecx - 1]
cmp dword [ebp + eax - 0x3b8], ecx
jle 0x10026733
mov dword [ebp - 0x364], 1
jmp 0x1002673a
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xf0]
mov dword [ebp - 0x43c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3b8], 0
jne 0x10026775
cmp dword [ebp - 0x10], 0
jne 0x10026775
and dword [ebp - 0x1a4], 0
jmp 0x1002677f
mov dword [ebp - 0x1a4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0x10]
cmp eax, 0xa1fe0afd
jb 0x100267a7
mov dword [ebp - 0x2bc], 1
jmp 0x100267ae
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x2bc]
sub eax, dword [ebp - 0x1ac]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf0], eax
cmp dword [ebp - 0x90], 0
je 0x1002690e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc], 0
jne 0x10026881
cmp dword [ebp - 0x1ac], 0xbd055d51
jne 0x10026800
mov dword [ebp - 0x118], 1
jmp 0x10026807
and dword [ebp - 0x118], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x118]
mov dword [ebp + eax - 0xf0], ecx
cmp dword [ebp - 0x118], 0x6978b3c
jge 0x10026832
mov dword [ebp - 0x2c4], 1
jmp 0x10026839
and dword [ebp - 0x2c4], 0
cmp dword [ebp - 0x2c4], 0x409415f9
jne 0x10026851
mov dword [ebp - 0x32c], 1
jmp 0x10026858
and dword [ebp - 0x32c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x374], 0x986bc5a1
je 0x10026877
mov dword [ebp - 0x1b4], 1
jmp 0x1002687e
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x24]
mov eax, 0xb79d8757
cmp eax, 0xffffffff
jne 0x10026897
mov dword [ebp - 0x2cc], 1
jmp 0x1002689e
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3b8]
cmp dword [ebp - 0x2cc], eax
jge 0x100268be
mov dword [ebp - 0x1bc], 1
jmp 0x100268c5
and dword [ebp - 0x1bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x374]
cmp eax, dword [ebp - 0x1bc]
jg 0x100268e6
mov dword [ebp - 0x2d4], 1
jmp 0x100268ed
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d4]
sub ecx, dword [ebp + eax - 0x374]
je 0x1002690e
mov dword [ebp - 0x1c4], 1
jmp 0x10026915
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x24], 1
jb 0x10026930
mov dword [ebp - 0x2dc], 1
jmp 0x10026937
and dword [ebp - 0x2dc], 0
cmp dword [ebp - 0x2dc], 1
jge 0x1002694c
mov dword [ebp - 0x2e4], 1
jmp 0x10026953
and dword [ebp - 0x2e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc]
add eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0x14], 0x25062d7b
mov dword [ebp - 0xb8], 0
jmp 0x10026992
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x100269ae
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xd4], 0x13dd33a4
jmp 0x10026985
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd4], 0xfffffffd
jmp 0x100269dc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xd4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xd4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd4], 0xc
jge 0x10026dde
mov dword [ebp - 0xe8], 0xe65251c6
mov dword [ebp - 0xe4], 0xe65251c6
mov dword [ebp - 0xe0], 0xe65251c6
mov dword [ebp - 0xdc], 0xe65251c6
mov dword [ebp - 0x7c], 0xfffffffa
mov dword [ebp - 0xcc], 0
jmp 0x10026a38
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 4
jge 0x10026a54
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x478], 0xfffffffa
jmp 0x10026a2b
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0xd4], 0x92f6
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xd4]
push 4
pop edx
imul edx, edx, 0
imul ecx, dword [ebp + edx - 0xd4]
imul ecx, ecx, 0xffff
add ecx, 0x3a3d
cmp eax, ecx
jge 0x10026a9c
mov dword [ebp - 0x1d0], 1
jmp 0x10026aa3
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d0]
sub eax, 0x42fca3a9
je 0x10026acb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe8], 0
je 0x10026acb
mov dword [ebp - 0x270], 1
jmp 0x10026ad2
and dword [ebp - 0x270], 0
imul eax, dword [ebp - 0x270], 0x8c9f
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 0
jmp 0x10026aef
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x10026dd9
mov dword [ebp - 4], 0x57a67d92
mov dword [ebp - 4], 0
jmp 0x10026b10
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jg 0x10026b3c
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp + ecx*4 - 0xe8], eax
jmp 0x10026b09
mov dword [ebp - 4], 3
jmp 0x10026b4c
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x10026dd4
mov eax, dword [ebp - 4]
imul eax, dword [ebp + eax*4 - 0xe8], 0x51cd
test eax, eax
jne 0x10026cac
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x454], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0x404], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0xe8]
cmp dword [ebp + eax - 0xe8], ecx
jl 0x10026bc1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd4], 0
jne 0x10026bc1
and dword [ebp - 0x1d8], 0
jmp 0x10026bcb
mov dword [ebp - 0x1d8], 1
cmp dword [ebp - 0x1d8], 0x6eeb
jle 0x10026be3
mov dword [ebp - 0x2c0], 1
jmp 0x10026bea
and dword [ebp - 0x2c0], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x2c0]
jle 0x10026c01
mov dword [ebp - 0x1e0], 1
jmp 0x10026c08
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp eax, dword [ebp - 0x1e0]
jl 0x10026c26
mov dword [ebp - 0x278], 1
jmp 0x10026c2d
and dword [ebp - 0x278], 0
cmp dword [ebp - 0x278], 4
jg 0x10026c42
mov dword [ebp - 0x380], 1
jmp 0x10026c49
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x40c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x14]
mov ecx, dword [ebp + ecx*4 - 0xe8]
cmp dword [ebp + eax - 0xd4], ecx
jle 0x10026c87
mov dword [ebp - 0x1e8], 1
jmp 0x10026c8e
and dword [ebp - 0x1e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x478]
cmp dword [ebp - 0x1e8], eax
jg 0x10026cac
and dword [ebp - 0x2e8], 0
jmp 0x10026cb6
mov dword [ebp - 0x2e8], 1
imul eax, dword [ebp - 0x2e8], 0x7253
cmp eax, 0x5e34605d
jle 0x10026cd3
mov dword [ebp - 0x1f0], 1
jmp 0x10026cda
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xffff
ja 0x10026cf2
mov dword [ebp - 0x280], 1
jmp 0x10026cf9
and dword [ebp - 0x280], 0
cmp dword [ebp - 0x280], 0xbf567d7
jne 0x10026d14
cmp dword [ebp - 4], 0
jne 0x10026d14
and dword [ebp - 0x1f8], 0
jmp 0x10026d1e
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xe8]
add eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0xe8]
jge 0x10026d46
mov dword [ebp - 0x2c8], 1
jmp 0x10026d4d
and dword [ebp - 0x2c8], 0
cmp dword [ebp - 0x2c8], 0xffffffff
jle 0x10026d62
mov dword [ebp - 0x200], 1
jmp 0x10026d69
and dword [ebp - 0x200], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x478]
cmp dword [ebp - 0x200], eax
jne 0x10026d8a
mov dword [ebp - 0x288], 1
jmp 0x10026d91
and dword [ebp - 0x288], 0
imul eax, dword [ebp - 0x288], 0x1ede
sub eax, dword [ebp - 4]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x7c], 0
jmp 0x10026db1
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jg 0x10026dcf
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x10026dcd
push 0x22
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
jmp 0x10026daa
jmp 0x10026b45
jmp 0x10026ae8
jmp 0x100269c1
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0xc0], 0x48bbca63
mov dword [ebp - 0x464], 3
mov dword [ebp - 0x208], 0x4a90611b
mov dword [ebp - 0x36c], 0x67ee39f3
mov dword [ebp - 0xc0], 0x1a
jmp 0x10026e2b
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0xfffffff7
jne 0x10026e6b
mov dword [ebp - 0x414], 0xffffffff
mov dword [ebp - 0x33c], 0x5e07
mov dword [ebp - 0x208], 1
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x33c], 0
je 0x10026e69
jmp 0x10026e1e
jmp 0x10026e1e
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x8c], 0xa115252c
mov dword [ebp - 0xc8], 0
jmp 0x10026eaf
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x10026ecb
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x494], 0xfffffffd
jmp 0x10026ea2
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x10026ee8
push 0
push 1
push 0x22a2
push 0
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
mov dword [ebp - 0x8c], 0
jmp 0x10026f01
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10026f1d
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x494], 0
jmp 0x10026ef4
mov eax, dword [ebp - 0x34c]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x18], 0xb21a35ca
mov dword [ebp - 0x38], 0x2a26f3f1
mov dword [ebp - 0x1c], 0x37c1
mov dword [ebp - 0x88], 4
mov dword [ebp - 0x80], 2
mov dword [ebp - 0x314], 0x174a
mov dword [ebp - 0x320], 0x2679f1a7
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
je 0x10026f8a
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x1c], 0
je 0x10026f8a
mov dword [ebp - 0x210], 1
jmp 0x10026f91
and dword [ebp - 0x210], 0
push 3
pop eax
test eax, eax
je 0x10026faa
cmp dword [ebp - 0x18], 0
je 0x10026faa
mov dword [ebp - 0x308], 1
jmp 0x10026fb1
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xd5d7
je 0x10026fc9
mov dword [ebp - 0x290], 1
jmp 0x10026fd0
and dword [ebp - 0x290], 0
imul eax, dword [ebp - 0x210], 9
cmp eax, dword [ebp - 0x290]
jle 0x10026feb
mov dword [ebp - 0x218], 1
jmp 0x10026ff2
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x88], eax
jge 0x10027015
mov dword [ebp - 0x2d0], 1
jmp 0x1002701c
and dword [ebp - 0x2d0], 0
cmp dword [ebp - 0x2d0], 0x2f14
jle 0x10027034
mov dword [ebp - 0x11c], 1
jmp 0x1002703b
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x11c], eax
jge 0x10027052
mov dword [ebp - 0x298], 1
jmp 0x10027059
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0
jl 0x1002706e
mov dword [ebp - 0x228], 1
jmp 0x10027075
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0x18]
cmp eax, 0xffff
ja 0x10027094
mov dword [ebp - 0x2f0], 1
jmp 0x1002709b
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x88], 0
je 0x1002717c
mov dword [ebp - 0x68], 0xf585950c
mov dword [ebp - 0x94], 0
jmp 0x100270d1
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x100270ed
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x35c], 0
jmp 0x100270c4
mov dword [ebp - 0x1c], 0
jmp 0x100270fd
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x33
jne 0x10027136
mov dword [ebp - 0x41c], 0xfffffff6
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10027134
push 0
push 0x2020
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x100270f6
mov dword [ebp - 0x68], 0x15
jmp 0x10027146
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xb
jg 0x10027177
mov dword [ebp - 0x38], 0
jmp 0x1002715c
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xb
je 0x10027175
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x35c], 0x1d976d99
jmp 0x10027155
jmp 0x1002713f
jmp 0x10027336
mov dword [ebp - 0x354], 0x7b1aa435
mov dword [ebp - 0x10c], 8
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0
je 0x1002726d
mov dword [ebp - 0x38], 0xfffffff7
cmp dword [ebp - 0x38], 0
jne 0x100271c8
cmp dword [ebp - 0x18], 0
je 0x100271c8
mov dword [ebp - 0x230], 1
jmp 0x100271cf
and dword [ebp - 0x230], 0
cmp dword [ebp - 0x230], 0
jae 0x100271e4
mov dword [ebp - 0x360], 1
jmp 0x100271eb
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x434], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x80], 0xfffffff8
jne 0x10027212
mov dword [ebp - 0x2a0], 1
jmp 0x10027219
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x314]
add eax, dword [ebp - 0x80]
mov dword [ebp - 0x80], eax
je 0x1002724b
mov eax, 0xd1843ad3
test eax, eax
je 0x1002724b
mov dword [ebp - 0x318], 1
jmp 0x10027252
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x1c], 0
je 0x1002726d
mov dword [ebp - 0x238], 1
jmp 0x10027274
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x238], eax
jne 0x1002728b
mov dword [ebp - 0x2d8], 1
jmp 0x10027292
and dword [ebp - 0x2d8], 0
imul eax, dword [ebp - 0x2d8], 0xffff
cmp eax, 0xf606
je 0x100272af
mov dword [ebp - 0x240], 1
jmp 0x100272b6
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x240], eax
jge 0x100272cd
mov dword [ebp - 0x2a8], 1
jmp 0x100272d4
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 0
jbe 0x100272e9
mov dword [ebp - 0x248], 1
jmp 0x100272f0
and dword [ebp - 0x248], 0
cmp dword [ebp - 0x248], 0xfffffffb
jbe 0x10027305
mov dword [ebp - 0x300], 1
jmp 0x1002730c
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x300], eax
je 0x10027323
mov dword [ebp - 0x250], 1
jmp 0x1002732a
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x50]
mov ecx, dword [ecx]
cmp dword [eax], ecx
je 0x10027351
mov dword [ebp - 0x2b0], 1
jmp 0x10027358
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2b0]
jl 0x10027371
mov dword [ebp - 0x258], 1
jmp 0x10027378
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x258]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x114]
cmp ecx, dword [eax]
jl 0x10027399
mov dword [ebp - 0x2e0], 1
jmp 0x100273a0
and dword [ebp - 0x2e0], 0
cmp dword [ebp - 0x2e0], 0x5e0b
je 0x100273bd
mov eax, dword [ebp - 0x50]
cmp dword [eax], 0
jne 0x100273bd
and dword [ebp - 0x260], 0
jmp 0x100273c7
mov dword [ebp - 0x260], 1
mov eax, dword [ebp - 0x114]
mov eax, dword [eax]
cmp dword [ebp - 0x260], eax
jge 0x100273e3
mov dword [ebp - 0x2b8], 1
jmp 0x100273ea
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
cmp dword [ebp - 0x2b8], eax
je 0x10027406
mov dword [ebp - 0x268], 1
jmp 0x1002740d
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0x98]
mov eax, dword [eax]
cmp dword [ebp - 0x268], eax
jg 0x10027429
mov dword [ebp - 0x1c8], 1
jmp 0x10027430
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1c8]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x50]
mov dword [eax], 0xffff
mov eax, 0xffff
test eax, eax
je 0x10027461
mov eax, dword [ebp - 0x50]
cmp dword [eax], 0
je 0x10027461
mov dword [ebp - 0x1cc], 1
jmp 0x10027468
and dword [ebp - 0x1cc], 0
cmp dword [ebp - 0x1cc], 0x7ab8
jge 0x10027480
mov dword [ebp - 0x1d4], 1
jmp 0x10027487
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x328]
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1d4]
jg 0x100274a3
mov dword [ebp - 0x1dc], 1
jmp 0x100274aa
and dword [ebp - 0x1dc], 0
cmp dword [ebp - 0x1dc], 0x37d660f1
jne 0x100274c2
mov dword [ebp - 0x1e4], 1
jmp 0x100274c9
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x1e4]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x114]
cmp ecx, dword [eax]
jle 0x100274ed
mov dword [ebp - 0x1ec], 1
jmp 0x100274f4
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x330]
mov ecx, dword [ebp - 0x1ec]
mov dword [eax], ecx
jmp 0x10027b82
mov dword [ebp - 0x3c], 0xfffffffe
mov dword [ebp - 0x60], 0x1647c2c9
mov dword [ebp - 0x58], 5
mov dword [ebp - 0x5c], 0x82c4475e
mov dword [ebp - 0x6c], 0x2487223b
mov dword [ebp - 0xa0], 0
jmp 0x10027543
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1002755f
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x4a4], 0
jmp 0x10027536
mov eax, dword [ebp - 0x3c]
sub eax, 0x5184860a
cmp eax, 1
jge 0x10027578
mov dword [ebp - 0x1f4], 1
jmp 0x1002757f
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jne 0x100275a3
cmp dword [ebp - 0x58], 0
jne 0x100275a3
and dword [ebp - 0x1fc], 0
jmp 0x100275ad
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0xb979cd32
jne 0x100275c5
mov dword [ebp - 0x204], 1
jmp 0x100275cc
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x204], eax
je 0x100275e3
mov dword [ebp - 0x20c], 1
jmp 0x100275ea
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x214], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x4a4], ecx
cmp dword [ebp - 0x214], 0
je 0x10027631
mov eax, 0x34859bb
test eax, eax
je 0x10027631
mov dword [ebp - 0x21c], 1
jmp 0x10027638
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x6c], eax
imul eax, dword [ebp - 0x6c], 0xffff
sub eax, 0xc715
mov ecx, dword [ebp - 0x3c]
add ecx, eax
je 0x10027711
mov dword [ebp - 0x6c], 0
jmp 0x10027668
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x11
jne 0x100276f6
mov dword [ebp - 0x58], 0xfffffff1
jmp 0x10027682
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x12
jge 0x100276f1
mov dword [ebp - 0x440], 0x5ca2589d
mov dword [ebp - 0x224], 0x511bd77d
mov dword [ebp - 0x60], 0x14
jmp 0x100276ac
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xfffffffb
jg 0x100276ef
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x100276c8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 0x5c], 0x19
jmp 0x100276d8
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff8
jl 0x100276ed
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
jmp 0x100276d1
jmp 0x100276a5
jmp 0x1002767b
jmp 0x10027661
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1002770f
push 0
push 0x2339
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
jmp 0x10027747
mov dword [ebp - 0x3c], 8
jmp 0x10027721
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xf
je 0x10027747
mov byte [ebp - 0x40], 0
movzx eax, byte [ebp - 0x40]
test eax, eax
je 0x10027745
push 0x1d49
push 0x2034
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x1002771a
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1002775b
push 0
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x338], 0x40c8e82b
mov dword [ebp - 0x2c], 0
jmp 0x1002777c
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1002778f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x78], 0
jmp 0x10027775
mov dword [ebp - 0x2c], 0
jmp 0x1002779f
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x100277b5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x398], 0x9884cb8
jmp 0x10027798
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x78]
cmp dword [ebp + eax - 0x78], ecx
je 0x100277d6
mov dword [ebp - 0x22c], 1
jmp 0x100277dd
and dword [ebp - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp eax, dword [ebp - 0x22c]
jne 0x100277fb
mov dword [ebp - 0x234], 1
jmp 0x10027802
and dword [ebp - 0x234], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp eax, dword [ebp - 0x234]
je 0x10027820
mov dword [ebp - 0x120], 1
jmp 0x10027827
and dword [ebp - 0x120], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x120], eax
jg 0x10027852
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x78], 0
je 0x10027852
mov dword [ebp - 0x128], 1
jmp 0x10027859
and dword [ebp - 0x128], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x128]
imul ecx, dword [ebp + eax - 0x78]
mov dword [ebp - 0x130], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x130]
mov dword [ebp + eax - 0x398], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x130], eax
jge 0x100278a1
mov dword [ebp - 0x138], 1
jmp 0x100278a8
and dword [ebp - 0x138], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x138], eax
jne 0x100278c6
mov dword [ebp - 0x140], 1
jmp 0x100278cd
and dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x140], eax
jle 0x100278eb
mov dword [ebp - 0x148], 1
jmp 0x100278f2
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x34], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78]
mov dword [ebp - 0x150], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x150]
mov dword [ebp + eax - 0x398], ecx
cmp dword [ebp - 0x150], 0
je 0x10027af8
push 9
pop eax
test eax, eax
je 0x10027944
cmp dword [ebp - 0x34], 0
je 0x10027944
mov dword [ebp - 0x158], 1
jmp 0x1002794b
and dword [ebp - 0x158], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x398]
cmp dword [ebp - 0x158], eax
jge 0x1002796c
mov dword [ebp - 0x160], 1
jmp 0x10027973
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
sub eax, 0x1b0ce7ae
cmp eax, 0x5835
jge 0x10027991
mov dword [ebp - 0x168], 1
jmp 0x10027998
and dword [ebp - 0x168], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x168], eax
jg 0x100279b6
mov dword [ebp - 0x110], 1
jmp 0x100279bd
and dword [ebp - 0x110], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x110]
mov dword [ebp + eax - 0x398], ecx
cmp dword [ebp - 0x110], 0xfffffff6
ja 0x100279e4
mov dword [ebp - 0x170], 1
jmp 0x100279eb
and dword [ebp - 0x170], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x170]
add ecx, edx
imul ecx, ecx, 0x9773
cmp dword [ebp + eax - 0x78], ecx
je 0x10027a17
mov dword [ebp - 0x178], 1
jmp 0x10027a1e
and dword [ebp - 0x178], 0
cmp dword [ebp - 0x178], 0xb705
jle 0x10027a36
mov dword [ebp - 0x180], 1
jmp 0x10027a3d
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x180], 0x8d7c584e
jb 0x10027a55
mov dword [ebp - 0x188], 1
jmp 0x10027a5c
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x188], eax
je 0x10027a73
mov dword [ebp - 0x190], 1
jmp 0x10027a7a
and dword [ebp - 0x190], 0
cmp dword [ebp - 0x190], 2
je 0x10027a8f
mov dword [ebp - 0x198], 1
jmp 0x10027a96
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x198], eax
je 0x10027aad
mov dword [ebp - 0x1a0], 1
jmp 0x10027ab4
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
add eax, 0xa
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x78]
jne 0x10027ad5
mov dword [ebp - 0x1a8], 1
jmp 0x10027adc
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
neg eax
je 0x10027af8
mov dword [ebp - 0x1b0], 1
jmp 0x10027aff
and dword [ebp - 0x1b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x1b0], eax
jne 0x10027b1c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x78], 0
push 4
pop eax
shl eax, 1
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x78]
cmp dword [ebp + eax - 0x78], ecx
jl 0x10027b3d
mov dword [ebp - 0x1b8], 1
jmp 0x10027b44
and dword [ebp - 0x1b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x78]
cmp dword [ebp - 0x1b8], eax
jle 0x10027b62
mov dword [ebp - 0x1c0], 1
jmp 0x10027b69
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x338], eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov esp, ebp
pop ebp
ret