Function at 0x10006f40
Capabilities:
Extract resource via kernel32 functions
Get common file path
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x14ec
call fcn.10069770
push esi
push edi
mov dword [ebp - 0x1d8], 1
mov dword [ebp - 0x74], 0x974a5202
mov dword [ebp - 0x1128], 0xffffffff
mov dword [ebp - 0x12d4], 0xffffffff
mov dword [ebp - 0x12dc], 0xc8cdab0b
mov dword [ebp - 0x12e4], 0xfffffff8
mov dword [ebp - 0x12ec], 0xffffffff
mov dword [ebp - 0x12f4], 0x9458d81c
mov dword [ebp - 0x1d8], 0xffffffec
jmp 0x10006fb5
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 0xfffffff6
jne 0x10007151
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0x490], 0x86e3e45b
mov dword [ebp - 0xd88], 0x889e022a
mov eax, dword [ebp - 0x148]
add eax, 0x28ea
cmp dword [ebp - 0x148], eax
jle 0x10006fff
mov dword [ebp - 0x98c], 1
jmp 0x10007006
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x148]
cmp dword [ebp - 0x98c], eax
je 0x10007027
mov dword [ebp - 0xd38], 1
jmp 0x1000702e
and dword [ebp - 0xd38], 0
mov eax, dword [ebp - 0xd38]
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jne 0x1000704f
mov eax, 0xf34111d0
test eax, eax
jne 0x1000704f
and dword [ebp - 0xd40], 0
jmp 0x10007059
mov dword [ebp - 0xd40], 1
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0xd40], eax
jge 0x10007073
mov dword [ebp - 0xd48], 1
jmp 0x1000707a
and dword [ebp - 0xd48], 0
cmp dword [ebp - 0xd48], 0x220985a9
jne 0x10007092
mov dword [ebp - 0xa60], 1
jmp 0x10007099
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0xa60], eax
jne 0x100070b3
mov dword [ebp - 0x488], 1
jmp 0x100070ba
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x488], eax
jge 0x100070da
cmp dword [ebp - 0x148], 0
jne 0x100070da
and dword [ebp - 0xa68], 0
jmp 0x100070e4
mov dword [ebp - 0xa68], 1
mov eax, dword [ebp - 0xa68]
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0xd88], eax
mov dword [ebp - 0x74], 0
jmp 0x1000710c
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff6
jne 0x1000714c
mov byte [ebp - 0x138], 0
movzx eax, byte [ebp - 0x138]
test eax, eax
je 0x1000712e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000714a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x10007105
jmp 0x10006fa8
cmp dword [ebp - 0x74], 0
je 0x100072a2
mov dword [ebp - 0x31c], 0x3e3f36a5
mov dword [ebp - 0xf1c], 0xffffffff
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x12fc], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1304], eax
cmp dword [ebp - 0x74], 0xfffffffa
jne 0x10007196
mov dword [ebp - 0xa70], 1
jmp 0x1000719d
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xa70], eax
jle 0x100071b4
mov dword [ebp - 0x498], 1
jmp 0x100071bb
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x498], eax
jle 0x100071d5
mov dword [ebp - 0xa78], 1
jmp 0x100071dc
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x31c]
cmp eax, dword [ebp - 0xa78]
jge 0x100071f6
mov dword [ebp - 0x4a0], 1
jmp 0x100071fd
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0
jne 0x10007216
push 7
pop eax
test eax, eax
jne 0x10007216
and dword [ebp - 0xa80], 0
jmp 0x10007220
mov dword [ebp - 0xa80], 1
cmp dword [ebp - 0xa80], 0
jle 0x10007235
mov dword [ebp - 0x4a8], 1
jmp 0x1000723c
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x4a8], eax
jg 0x10007253
mov dword [ebp - 0xf14], 1
jmp 0x1000725a
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x130c], eax
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x1314], eax
mov dword [ebp - 0xf1c], 0xd9780293
mov byte [ebp - 0x1cd], 0
movzx eax, byte [ebp - 0x1cd]
test eax, eax
je 0x1000729d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x10007334
mov dword [ebp - 0x131c], 0xbab1
mov dword [ebp - 0x1324], 0
mov dword [ebp - 0x132c], 0x17d239f9
mov dword [ebp - 0x1334], 0xffffffff
mov dword [ebp - 0x133c], 0x8ad385e3
mov dword [ebp - 0x1344], 4
mov dword [ebp - 0x13ac], 1
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0x328], 0
jmp 0x1000730b
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 4
jge 0x10007327
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0x14cc], 0x2bba6dad
jmp 0x100072fe
mov eax, dword [ebp - 0xa88]
inc eax
mov dword [ebp - 0xa88], eax
mov dword [ebp - 0xfb4], 0xfffffff9
mov dword [ebp - 0xfb0], 0xfffffff9
mov dword [ebp - 0xfac], 0xfffffff9
mov dword [ebp - 0xfa8], 0xfffffff9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xfb4], 0
jmp 0x10007387
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xfb4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xfb4], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xfb4], 0xfffffff0
jge 0x100073e0
mov byte [ebp - 0x1a1], 0
movzx eax, byte [ebp - 0x1a1]
test eax, eax
je 0x100073b3
push 0x371
call dword [sym.imp.USER32.dll_MessageBeep]
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x100073de
push 0
push 0xef5
push 0x1b3d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
jmp 0x1000736e
mov dword [ebp - 0x384], 0xfffffff8
mov dword [ebp - 0xf24], 0x4c38b6b0
mov dword [ebp - 0x13b4], 0xffffffff
mov dword [ebp - 0x13bc], 0x880e033c
mov dword [ebp - 0x4b8], 0x54671013
mov dword [ebp - 0x4b0], 0xde6bc044
mov dword [ebp - 0x244], 0xfffffffc
mov dword [ebp - 0xf80], 0x9cc02768
mov dword [ebp - 0x4d8], 0xf9052196
mov dword [ebp - 0x28], 0
jmp 0x1000744a
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x10007460
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x268], 0x8d4081c2
jmp 0x10007443
mov dword [ebp - 0x28], 0
jmp 0x10007470
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x10007486
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfe0], 0x465cd386
jmp 0x10007469
mov dword [ebp - 0x28], 0
jmp 0x10007496
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x100074ac
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x142c], 0
jmp 0x1000748f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x244]
dec eax
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x4b0], eax
cmp dword [ebp - 0x4b0], 0
jne 0x10007627
cmp dword [ebp - 0x4b8], 0x2e42
jl 0x100074fd
mov dword [ebp - 0xa90], 1
jmp 0x10007504
and dword [ebp - 0xa90], 0
imul eax, dword [ebp - 0xa90], 0xb059
test eax, eax
jne 0x10007519
cmp dword [ebp - 0xf24], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x268], 0
je 0x10007539
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x268], 0
jne 0x1000754b
mov eax, 0x57b6
test eax, eax
jne 0x1000754b
and dword [ebp - 0xf2c], 0
jmp 0x10007555
mov dword [ebp - 0xf2c], 1
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x13d4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x384]
cmp dword [ebp + eax - 0xfe0], ecx
jge 0x1000758e
mov dword [ebp - 0xa98], 1
jmp 0x10007595
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0xa98], eax
jne 0x100075af
mov dword [ebp - 0x4c0], 1
jmp 0x100075b6
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x4c0]
jg 0x100075d0
mov dword [ebp - 0xaa0], 1
jmp 0x100075d7
and dword [ebp - 0xaa0], 0
cmp dword [ebp - 0xaa0], 0
jne 0x100075ec
mov dword [ebp - 0x4c8], 1
jmp 0x100075f3
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0xfc5
jge 0x1000760b
mov dword [ebp - 0xaa8], 1
jmp 0x10007612
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0xaa8], 0x739425a3
jl 0x10007627
and dword [ebp - 0x4d0], 0
jmp 0x10007631
mov dword [ebp - 0x4d0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfe0]
cmp dword [ebp - 0x4d0], eax
jl 0x1000765b
mov eax, 0xb6ea1325
test eax, eax
je 0x1000765b
mov dword [ebp - 0xf34], 1
jmp 0x10007662
and dword [ebp - 0xf34], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x13dc], eax
cmp dword [ebp - 0xf80], 0
jne 0x10007690
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfe0], 0
jne 0x10007690
and dword [ebp - 0xab0], 0
jmp 0x1000769a
mov dword [ebp - 0xab0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d8]
imul ecx, dword [ebp - 0xab0]
sub ecx, dword [ebp - 0x4d8]
cmp dword [ebp + eax - 0x268], ecx
jne 0x100076c8
mov dword [ebp - 0xab8], 1
jmp 0x100076cf
and dword [ebp - 0xab8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xab8]
mov dword [ebp + eax - 0xfe0], ecx
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x8c], 0x974a5202
mov dword [ebp - 0x13e4], 0xffffffff
mov dword [ebp - 0x4e0], 0x85a9576c
mov dword [ebp - 0x108c], 0xad8530de
mov dword [ebp - 0x1088], 0xad8530de
mov dword [ebp - 0x1084], 0xad8530de
mov dword [ebp - 0x1080], 0xad8530de
mov dword [ebp - 0x3f0], 0xb0815898
mov dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x13ec], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x13f4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x108c]
mov dword [ebp - 0x3f0], eax
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x13fc], eax
cmp dword [ebp - 0x3f0], 0x28ea3888
jne 0x10007790
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x100077a6
mov eax, 0xfff7
test eax, eax
jne 0x100077a6
xor eax, eax
jne 0x100077a6
and dword [ebp - 0xac0], 0
jmp 0x100077b0
mov dword [ebp - 0xac0], 1
mov eax, dword [ebp - 0xac0]
mov dword [ebp - 0x200], eax
mov dword [ebp - 0x200], 0
jmp 0x100077d5
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffe7
je 0x1000780f
mov dword [ebp - 0x4e8], 0x3e45bbbd
mov byte [ebp - 0x1d1], 0
movzx eax, byte [ebp - 0x1d1]
test eax, eax
je 0x10007800
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov eax, dword [ebp - 0x4e8]
inc eax
mov dword [ebp - 0x4e8], eax
jmp 0x100077c8
mov dword [ebp - 0x1404], 0xffffffff
mov dword [ebp - 0x13b0], 0xc8cdab0b
mov dword [ebp - 0x88], 0xfc558bac
mov dword [ebp - 0xae8], 0x7822e6e
mov dword [ebp - 0x330], 0
jmp 0x10007850
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 1
jge 0x1000786c
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xb4], 0xca3691f6
jmp 0x10007843
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x88], eax
jg 0x10007886
mov dword [ebp - 0x500], 1
jmp 0x1000788d
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x88], 0x7296
jl 0x100078a5
mov dword [ebp - 0xf88], 1
jmp 0x100078ac
and dword [ebp - 0xf88], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1098], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x12b4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb4], 0x4794
jne 0x100078e3
mov dword [ebp - 0xac8], 1
jmp 0x100078ea
and dword [ebp - 0xac8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
cmp dword [ebp - 0xac8], eax
jne 0x1000790b
mov dword [ebp - 0x4f0], 1
jmp 0x10007912
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0x98ce
jle 0x1000792a
mov dword [ebp - 0xad0], 1
jmp 0x10007931
and dword [ebp - 0xad0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
imul eax, dword [ebp - 0xad0]
cmp eax, 0xfffffff8
je 0x10007956
mov dword [ebp - 0x4f8], 1
jmp 0x1000795d
and dword [ebp - 0x4f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
imul eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x88]
jne 0x1000798b
cmp dword [ebp - 0x88], 0
jne 0x1000798b
and dword [ebp - 0xad8], 0
jmp 0x10007995
mov dword [ebp - 0xad8], 1
cmp dword [ebp - 0xad8], 0x9bf5
je 0x100079ad
mov dword [ebp - 0xae0], 1
jmp 0x100079b4
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0xae0]
jle 0x100079ce
mov dword [ebp - 0x508], 1
jmp 0x100079d5
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x508], eax
jg 0x100079ef
mov dword [ebp - 0x510], 1
jmp 0x100079f6
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x88]
neg eax
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0xae8]
cmp eax, dword [ebp - 0x510]
je 0x10007a1e
mov dword [ebp - 0xaf0], 1
jmp 0x10007a25
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x88]
add eax, dword [ebp - 0xaf0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xb4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb4]
jle 0x10007b59
mov dword [ebp - 0x390], 4
mov dword [ebp - 0xf90], 1
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x390], eax
jg 0x10007a7f
mov dword [ebp - 0x518], 1
jmp 0x10007a86
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x518], eax
jl 0x10007aa0
mov dword [ebp - 0xaf8], 1
jmp 0x10007aa7
and dword [ebp - 0xaf8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x390]
cmp dword [ebp + eax - 0xb4], ecx
je 0x10007ac8
mov dword [ebp - 0x520], 1
jmp 0x10007acf
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xaf8]
cmp eax, dword [ebp - 0x520]
jg 0x10007aed
xor eax, eax
je 0x10007aed
mov dword [ebp - 0xb00], 1
jmp 0x10007af4
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0x423b19d8
jl 0x10007b1c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb4], 0
je 0x10007b1c
mov dword [ebp - 0x528], 1
jmp 0x10007b23
and dword [ebp - 0x528], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb4]
cmp dword [ebp - 0x528], eax
je 0x10007b44
mov dword [ebp - 0xb08], 1
jmp 0x10007b4b
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0xf90], eax
jmp 0x10007ba7
mov dword [ebp - 0x270], 0
jmp 0x10007b72
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 3
jge 0x10007b8e
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x1354], 0x88f1
jmp 0x10007b65
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1354]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1354], eax
mov dword [ebp - 0x10a0], 0xfffffff8
mov dword [ebp - 0x1e0], 0x5052061f
mov dword [ebp - 0x538], 0x4e76
mov dword [ebp - 0xf98], 0x1d102278
mov dword [ebp - 0x540], 0x9694d2b5
mov dword [ebp - 0xfa0], 1
mov dword [ebp - 0x126c], 0xffffffff
mov dword [ebp - 0x10a8], 1
mov dword [ebp - 0x12bc], 4
mov dword [ebp - 0x10b0], 0xffffffff
mov dword [ebp - 0x548], 0x8e8d
mov dword [ebp - 0xe8], 0
jmp 0x10007c2e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10007c4a
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x143c], 0xf7c8b166
jmp 0x10007c21
mov dword [ebp - 0xe8], 0
jmp 0x10007c63
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jge 0x10007c7f
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x1444], 0xfffffffb
jmp 0x10007c56
cmp dword [ebp - 0x1e0], 0
jne 0x10007d3d
cmp dword [ebp - 0x1e0], 0
jne 0x10007c9c
cmp dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x10b8], eax
xor eax, eax
cmp eax, 0xffffffff
ja 0x10007cc7
mov dword [ebp - 0x530], 1
jmp 0x10007cce
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
sub eax, dword [ebp - 0xf98]
cmp eax, dword [ebp - 0x1e0]
jl 0x10007cf7
cmp dword [ebp - 0x540], 0
je 0x10007cf7
mov dword [ebp - 0xb10], 1
jmp 0x10007cfe
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0x1e0]
cmp eax, dword [ebp - 0xb10]
jg 0x10007d18
mov dword [ebp - 0xb18], 1
jmp 0x10007d1f
and dword [ebp - 0xb18], 0
mov eax, dword [ebp - 0x538]
imul eax, dword [ebp - 0xb18]
cmp eax, dword [ebp - 0x540]
jne 0x10007d3d
and dword [ebp - 0xb20], 0
jmp 0x10007d47
mov dword [ebp - 0xb20], 1
mov eax, dword [ebp - 0xb20]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0x548]
dec eax
mov dword [ebp - 0x548], eax
mov dword [ebp - 0x12c4], 0xffffffff
mov dword [ebp - 0x7c], 0xd4f2
mov dword [ebp - 0x1038], 0xffffffff
mov dword [ebp - 0x1034], 0xffffffff
mov dword [ebp - 0x1030], 0xffffffff
mov dword [ebp - 0x102c], 0xffffffff
mov dword [ebp - 0xd98], 9
mov dword [ebp - 0x338], 0
jmp 0x10007dbc
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 3
jge 0x10007dd8
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0x1364], 0xc2285faa
jmp 0x10007daf
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x10c0], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x12cc], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x10c8], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1364], 0xfffffff8
cmp dword [ebp - 0x7c], 0xfffffff8
jge 0x10007e15
mov dword [ebp - 0xb28], 1
jmp 0x10007e1c
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
sub eax, dword [ebp - 0x7c]
mov dword [ebp - 0x550], 1
jmp 0x10007e38
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x550]
mov dword [ebp + eax - 0x1038], ecx
mov dword [ebp - 0x7c], 0
jmp 0x10007e5a
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0xfffffff4
je 0x1000806c
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x90], 0
jmp 0x10007e9e
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x32
jge 0x10008067
mov dword [ebp - 0x150], 0xf08664a1
cmp dword [ebp - 0x150], 0
je 0x10008056
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x90], eax
jle 0x10007edc
mov dword [ebp - 0x444], 1
jmp 0x10007ee3
and dword [ebp - 0x444], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x444]
mov dword [ebp + eax - 0x1038], ecx
cmp dword [ebp - 0x444], 0
je 0x10007f14
mov eax, 0x76ac
test eax, eax
je 0x10007f14
mov dword [ebp - 0xf0c], 1
jmp 0x10007f1b
and dword [ebp - 0xf0c], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1284], eax
xor eax, eax
sub eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x90]
jne 0x10007f43
mov dword [ebp - 0xb30], 1
jmp 0x10007f4a
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xb30], eax
jg 0x10007f61
mov dword [ebp - 0xd94], 1
jmp 0x10007f68
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x10d0], eax
mov eax, 0xffff
test eax, eax
je 0x10007f92
mov eax, 0xfffd
test eax, eax
je 0x10007f92
mov dword [ebp - 0x558], 1
jmp 0x10007f99
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x558], eax
jle 0x10007fb3
mov dword [ebp - 0xb38], 1
jmp 0x10007fba
and dword [ebp - 0xb38], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb38]
mov dword [ebp + eax - 0x1364], ecx
cmp dword [ebp - 0x7c], 0
jne 0x10007fe3
push 7
pop eax
test eax, eax
jne 0x10007fe3
and dword [ebp - 0x560], 0
jmp 0x10007fed
mov dword [ebp - 0x560], 1
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0x560], eax
jg 0x10008007
mov dword [ebp - 0xb40], 1
jmp 0x1000800e
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0xb40], eax
jne 0x10008028
mov dword [ebp - 0xb48], 1
jmp 0x1000802f
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0xb48], eax
jle 0x10008049
mov dword [ebp - 0x570], 1
jmp 0x10008050
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xd98], eax
jmp 0x10007e91
jmp 0x10007e53
mov dword [ebp - 0x1288], 0x9458d81c
mov dword [ebp - 0x1e8], 0xffffffec
jmp 0x1000808f
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xfffffff6
jne 0x10008f47
mov dword [ebp - 0x160], 0xffffffff
mov dword [ebp - 0x630], 0x86e3e45b
mov dword [ebp - 0xda0], 0x889e022a
mov dword [ebp - 8], 0xcd45
mov dword [ebp - 0x588], 0
mov dword [ebp - 0xb70], 4
mov dword [ebp - 0xf4], 0xa2e71cc
mov dword [ebp - 0x398], 0xfffffffa
mov dword [ebp - 0x214], 0xe60a2fc5
mov dword [ebp - 0x158], 0xfc331464
mov dword [ebp - 0xeb8], 0xfffffffe
mov dword [ebp - 0x610], 2
mov dword [ebp - 0x278], 0
jmp 0x1000812a
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10008146
mov eax, dword [ebp - 0x278]
mov dword [ebp + eax*4 - 0x14bc], 0x6611625f
jmp 0x1000811d
mov eax, 0x4562
test eax, eax
je 0x10008384
cmp dword [ebp - 8], 0
je 0x100082ab
mov eax, dword [ebp - 8]
imul eax, dword [ebp - 8]
cmp eax, dword [ebp - 8]
jne 0x10008175
mov dword [ebp - 0xb50], 1
jmp 0x1000817c
and dword [ebp - 0xb50], 0
cmp dword [ebp - 0xb50], 0xffff
jb 0x10008194
mov dword [ebp - 0x578], 1
jmp 0x1000819b
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0
jge 0x100081b0
mov dword [ebp - 0xb58], 1
jmp 0x100081b7
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xb58], eax
jne 0x100081ce
mov dword [ebp - 0x580], 1
jmp 0x100081d5
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0
je 0x100081f0
cmp dword [ebp - 8], 0
je 0x100081f0
mov dword [ebp - 0xb60], 1
jmp 0x100081f7
and dword [ebp - 0xb60], 0
mov eax, dword [ebp - 0xb60]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x588], eax
jl 0x1000821a
mov dword [ebp - 0xb68], 1
jmp 0x10008221
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xb68], eax
jg 0x10008238
mov dword [ebp - 0x590], 1
jmp 0x1000823f
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x590]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0xb70]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xf4], eax
jg 0x10008271
mov dword [ebp - 0x598], 1
jmp 0x10008278
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 9
jge 0x1000828d
mov dword [ebp - 0xb78], 1
jmp 0x10008294
and dword [ebp - 0xb78], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xb78], eax
jge 0x100082ab
mov dword [ebp - 0x5a0], 1
jmp 0x100082b2
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x5a0], eax
jle 0x100082cc
mov dword [ebp - 0xb80], 1
jmp 0x100082d3
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xb80], eax
jg 0x100082ea
mov dword [ebp - 0x5a8], 1
jmp 0x100082f1
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x214], eax
mov eax, 0x46a
imul eax, eax, 0xcd4f
neg eax
cmp eax, dword [ebp - 8]
jl 0x1000831b
mov dword [ebp - 0xb88], 1
jmp 0x10008322
and dword [ebp - 0xb88], 0
mov eax, dword [ebp - 0xb88]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x158], eax
jg 0x10008345
mov dword [ebp - 0x5b0], 1
jmp 0x1000834c
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0x5b0], eax
jge 0x10008366
mov dword [ebp - 0xb90], 1
jmp 0x1000836d
and dword [ebp - 0xb90], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0xb90], eax
je 0x10008384
mov dword [ebp - 0x5b8], 1
jmp 0x1000838b
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
sub eax, 0x41425452
imul eax, eax, 0xd0d3
test eax, eax
je 0x100083b5
mov eax, 0x50133ecb
test eax, eax
je 0x100083b5
mov dword [ebp - 0xb98], 1
jmp 0x100083bc
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
sub eax, 0x7cb0be94
imul eax, eax, 0
sub eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x398]
jge 0x100083e1
mov dword [ebp - 0x5c0], 1
jmp 0x100083e8
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x5c0]
jl 0x1000879d
mov dword [ebp - 0x1f0], 0xfffffffe
mov dword [ebp - 0xbd0], 0xb6ef5427
mov dword [ebp - 0x3f8], 0
mov dword [ebp - 0x20c], 9
mov dword [ebp - 0x340], 0
jmp 0x10008438
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 4
jge 0x10008454
mov eax, dword [ebp - 0x340]
mov dword [ebp + eax*4 - 0x1424], 0
jmp 0x1000842b
cmp dword [ebp - 0x158], 0
je 0x10008524
cmp dword [ebp - 0xbd0], 0
je 0x1000847f
cmp dword [ebp - 0x1f0], 0
je 0x1000847f
mov dword [ebp - 0xba0], 1
jmp 0x10008486
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0xba0]
jl 0x100084a0
mov dword [ebp - 0x5c8], 1
jmp 0x100084a7
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0x5c8], eax
jg 0x100084c1
mov dword [ebp - 0xba8], 1
jmp 0x100084c8
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x214]
cmp dword [ebp - 0xba8], eax
jge 0x100084eb
cmp dword [ebp - 0x3f8], 0
je 0x100084eb
mov dword [ebp - 0x5d0], 1
jmp 0x100084f2
and dword [ebp - 0x5d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5d0]
mov dword [ebp + eax - 0x1424], ecx
mov dword [ebp - 0x20c], 0xffffffff
cmp dword [ebp - 0x20c], 0
je 0x10008524
mov dword [ebp - 0xbb0], 1
jmp 0x1000852b
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb0]
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffff
je 0x10008552
mov eax, 0x6a3c8fcb
test eax, eax
jne 0x10008552
and dword [ebp - 0x5d8], 0
jmp 0x1000855c
mov dword [ebp - 0x5d8], 1
cmp dword [ebp - 0x5d8], 0xfffffffc
jl 0x10008571
mov dword [ebp - 0xbb8], 1
jmp 0x10008578
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0x1f0]
sub eax, dword [ebp - 0xbb8]
je 0x1000859b
cmp dword [ebp - 0x20c], 0
je 0x1000859b
mov dword [ebp - 0x5e0], 1
jmp 0x100085a2
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x1f0]
add eax, dword [ebp - 0x5e0]
sub eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 8], 0xffff
jb 0x10008752
mov dword [ebp - 0x234], 0x4c396c7b
mov dword [ebp - 0x5f8], 0x652606bd
mov dword [ebp - 0xbe8], 0xd9bf4d75
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf4]
cmp dword [ebp + eax - 0x1424], ecx
jge 0x10008606
mov dword [ebp - 0xbc0], 1
jmp 0x1000860d
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0xbc0]
neg eax
imul eax, dword [ebp - 0x1f0]
cmp eax, 0x9976
jg 0x1000862f
mov dword [ebp - 0x5e8], 1
jmp 0x10008636
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x5e8], eax
jl 0x10008650
mov dword [ebp - 0xbc8], 1
jmp 0x10008657
and dword [ebp - 0xbc8], 0
cmp dword [ebp - 0xbc8], 0xd940
je 0x1000866f
mov dword [ebp - 0x5f0], 1
jmp 0x10008676
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x234]
add ecx, dword [ebp - 0x5f0]
imul ecx, dword [ebp - 0xbd0]
add eax, ecx
add eax, dword [ebp - 0x214]
jne 0x100086a0
cmp dword [ebp - 0x234], 0
imul eax, dword [ebp - 0x20c], 0xffffffff
mov dword [ebp - 0x5f8], eax
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x5f8], eax
jle 0x100086c7
mov dword [ebp - 0xbd8], 1
jmp 0x100086ce
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xeb8]
add eax, dword [ebp - 0xbd8]
cmp dword [ebp - 0xf4], eax
jg 0x100086ee
mov dword [ebp - 0x600], 1
jmp 0x100086f5
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x600], eax
je 0x1000870f
mov dword [ebp - 0xbe0], 1
jmp 0x10008716
and dword [ebp - 0xbe0], 0
cmp dword [ebp - 0xbe0], 1
jbe 0x1000872b
mov dword [ebp - 0x608], 1
jmp 0x10008732
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x234]
add eax, dword [ebp - 0x608]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0xbe8]
mov dword [ebp - 0x214], eax
jmp 0x1000879b
mov dword [ebp - 0x158], 0
jmp 0x1000876b
mov eax, dword [ebp - 0x158]
dec eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xffffffea
jl 0x1000879b
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x1000878e
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0xf4], 0
je 0x10008799
jmp 0x1000879b
jmp 0x1000875e
jmp 0x100087dc
mov dword [ebp - 0x280], 0
jmp 0x100087b6
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x100087d2
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0x14b0], 0x2ac45f48
jmp 0x100087a9
mov dword [ebp - 0x214], 1
mov eax, dword [ebp - 0x610]
dec eax
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x160]
add eax, 0x28ea
cmp dword [ebp - 0x160], eax
jle 0x10008808
mov dword [ebp - 0xbf0], 1
jmp 0x1000880f
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x160]
imul eax, dword [ebp - 0x160]
cmp dword [ebp - 0xbf0], eax
je 0x10008830
mov dword [ebp - 0x618], 1
jmp 0x10008837
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jne 0x1000885e
mov eax, 0xf34111d0
test eax, eax
jne 0x1000885e
and dword [ebp - 0xbf8], 0
jmp 0x10008868
mov dword [ebp - 0xbf8], 1
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0xbf8], eax
jge 0x10008882
mov dword [ebp - 0x620], 1
jmp 0x10008889
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0x220985a9
jne 0x100088a1
mov dword [ebp - 0xc00], 1
jmp 0x100088a8
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0xc00], eax
jne 0x100088c2
mov dword [ebp - 0x628], 1
jmp 0x100088c9
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x628], eax
jge 0x100088e9
cmp dword [ebp - 0x160], 0
jne 0x100088e9
and dword [ebp - 0xc08], 0
jmp 0x100088f3
mov dword [ebp - 0xc08], 1
mov eax, dword [ebp - 0xc08]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0xda0], eax
mov dword [ebp - 0x8c], 0
jmp 0x10008924
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xfffffff6
jne 0x10008f42
mov dword [ebp - 0x168], 1
mov dword [ebp - 0xfd4], 0xfffffff9
mov dword [ebp - 0xfd0], 0xfffffff9
mov dword [ebp - 0xfcc], 0xfffffff9
mov dword [ebp - 0xfc8], 0xfffffff9
mov dword [ebp - 0xda8], 6
mov dword [ebp - 0x168], 0
jmp 0x10008986
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0x11
jle 0x10008a84
mov dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x168], 0xfff6
je 0x100089b5
mov dword [ebp - 0xc10], 1
jmp 0x100089bc
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0xc10], eax
jne 0x100089d6
mov dword [ebp - 0x638], 1
jmp 0x100089dd
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x3a0]
imul eax, dword [ebp - 0x3a0]
sub eax, 0xec17
mov ecx, dword [ebp - 0x638]
sub ecx, 0x12b5aa10
cmp eax, ecx
jle 0x10008a1b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfd4], 0
je 0x10008a1b
mov dword [ebp - 0xf44], 1
jmp 0x10008a22
and dword [ebp - 0xf44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfd4]
mov dword [ebp - 0x10d8], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1330], eax
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x10e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfd4]
mov dword [ebp - 0xda8], eax
mov byte [ebp - 0x1a9], 0
movzx eax, byte [ebp - 0x1a9]
test eax, eax
je 0x10008a7f
push 0x1bb6
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
jmp 0x10008979
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10008aa0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1c], 0x42c70bb7
mov dword [ebp - 0x170], 1
mov dword [ebp - 0xdb8], 0x15869b9
mov dword [ebp - 0x688], 0xb60d90c3
mov dword [ebp - 0x348], 0
jmp 0x10008ade
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jge 0x10008af7
mov eax, dword [ebp - 0x348]
mov dword [ebp + eax*4 - 0x60], 0
jmp 0x10008ad1
mov dword [ebp - 0x1c], 0
jmp 0x10008b07
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jl 0x10008d91
mov dword [ebp - 0xc38], 0x8fe831e3
mov dword [ebp - 0xc30], 0x6d983a5c
mov dword [ebp - 0xc40], 0
mov dword [ebp - 0xf48], 1
cmp dword [ebp - 0x1c], 0xfffffff8
jl 0x10008b4b
mov dword [ebp - 0xc18], 1
jmp 0x10008b52
and dword [ebp - 0xc18], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
cmp eax, dword [ebp - 0xc18]
je 0x10008b70
mov dword [ebp - 0x640], 1
jmp 0x10008b77
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x60]
imul eax, dword [ebp - 0x640]
cmp eax, 0xa25a
jne 0x10008b98
mov dword [ebp - 0xc20], 1
jmp 0x10008b9f
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x60]
cmp dword [ebp - 0xc20], eax
jg 0x10008bba
mov dword [ebp - 0xec0], 1
jmp 0x10008bc1
and dword [ebp - 0xec0], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0x1290], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
mov dword [ebp - 0x10e8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x60]
mov dword [ebp - 0x13f0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0xfffa
jne 0x10008c07
mov dword [ebp - 0x648], 1
jmp 0x10008c0e
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x648], eax
jl 0x10008c25
mov dword [ebp - 0xc28], 1
jmp 0x10008c2c
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0xc38]
cmp dword [ebp - 0xc28], eax
jne 0x10008c46
mov dword [ebp - 0x650], 1
jmp 0x10008c4d
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xc30], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x60]
imul eax, dword [ebp - 0xc30]
cmp eax, 0xb8a064f5
je 0x10008c7a
mov dword [ebp - 0x658], 1
jmp 0x10008c81
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x658], eax
jg 0x10008c98
mov dword [ebp - 0x660], 1
jmp 0x10008c9f
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xc38]
imul eax, dword [ebp - 0x660]
cmp eax, 0xe2bf
jne 0x10008cbf
mov dword [ebp - 0xdb0], 1
jmp 0x10008cc6
and dword [ebp - 0xdb0], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x10f0], eax
cmp dword [ebp - 0x170], 0
jne 0x10008ced
mov eax, 0xbef2
test eax, eax
jne 0x10008ced
and dword [ebp - 0x668], 0
jmp 0x10008cf7
mov dword [ebp - 0x668], 1
mov eax, dword [ebp - 0xc40]
add eax, dword [ebp - 0x668]
add eax, dword [ebp - 0x170]
mov ecx, dword [ebp - 0x1c]
sub eax, dword [ebp + ecx*4 - 0x60]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0x60]
jl 0x10008d25
mov dword [ebp - 0xc48], 1
jmp 0x10008d2c
and dword [ebp - 0xc48], 0
cmp dword [ebp - 0xc48], 0x5ead4a2b
jg 0x10008d44
mov dword [ebp - 0x670], 1
jmp 0x10008d4b
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x60]
imul eax, dword [ebp - 0x670]
cmp eax, dword [ebp - 0xf48]
jge 0x10008d79
cmp dword [ebp - 0xdb8], 0
je 0x10008d79
mov dword [ebp - 0xc50], 1
jmp 0x10008d80
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0xc50]
mov dword [ebp - 0x688], eax
jmp 0x10008b00
mov dword [ebp - 0x170], 0
jmp 0x10008daa
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 9
jge 0x10008f21
mov dword [ebp - 0x254], 0x72f548f9
mov dword [ebp - 0x288], 0
jmp 0x10008dda
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 4
jge 0x10008df6
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x148c], 1
jmp 0x10008dcd
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x170], eax
jne 0x10008e10
mov dword [ebp - 0x690], 1
jmp 0x10008e17
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x1c], eax
je 0x10008e2e
mov dword [ebp - 0x678], 1
jmp 0x10008e35
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x678], eax
je 0x10008e4f
mov dword [ebp - 0xc58], 1
jmp 0x10008e56
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0xc58]
neg eax
imul eax, eax, 0xfffffffb
test eax, eax
jne 0x10008e7b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x60], 0
jne 0x10008e7b
and dword [ebp - 0x680], 0
jmp 0x10008e85
mov dword [ebp - 0x680], 1
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0x680]
jge 0x10008e9f
mov dword [ebp - 0xc60], 1
jmp 0x10008ea6
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0x254]
cmp eax, dword [ebp - 0xc60]
jne 0x10008ec0
mov dword [ebp - 0xc68], 1
jmp 0x10008ec7
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x688]
cmp dword [ebp - 0xc68], eax
jge 0x10008ee1
mov dword [ebp - 0xc70], 1
jmp 0x10008ee8
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x690]
cmp eax, dword [ebp - 0xc70]
jl 0x10008f02
mov dword [ebp - 0x698], 1
jmp 0x10008f09
and dword [ebp - 0x698], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x698]
mov dword [ebp + eax - 0x148c], ecx
jmp 0x10008d9d
mov byte [ebp - 0x1ca], 0
movzx eax, byte [ebp - 0x1ca]
test eax, eax
je 0x10008f3d
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x10008917
jmp 0x10008082
cmp dword [ebp - 0x8c], 0
je 0x100090a7
mov dword [ebp - 0x350], 0x3e3f36a5
mov dword [ebp - 0xdc0], 0xffffffff
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x1298], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x10f8], eax
cmp dword [ebp - 0x8c], 0xfffffffa
jne 0x10008f95
mov dword [ebp - 0xc78], 1
jmp 0x10008f9c
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0xc78], eax
jle 0x10008fb6
mov dword [ebp - 0x6a0], 1
jmp 0x10008fbd
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x6a0], eax
jle 0x10008fd7
mov dword [ebp - 0xc80], 1
jmp 0x10008fde
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0x350]
cmp eax, dword [ebp - 0xc80]
jge 0x10008ff8
mov dword [ebp - 0x6a8], 1
jmp 0x10008fff
and dword [ebp - 0x6a8], 0
cmp dword [ebp - 0x6a8], 0
jne 0x10009018
push 7
pop eax
test eax, eax
jne 0x10009018
and dword [ebp - 0xc88], 0
jmp 0x10009022
mov dword [ebp - 0xc88], 1
cmp dword [ebp - 0xc88], 0
jle 0x10009037
mov dword [ebp - 0x6b0], 1
jmp 0x1000903e
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x6b0], eax
jg 0x10009058
mov dword [ebp - 0xec8], 1
jmp 0x1000905f
and dword [ebp - 0xec8], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x1338], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x1100], eax
mov dword [ebp - 0xdc0], 0xd9780293
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x100090a2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x10009139
mov dword [ebp - 0x12a0], 0xbab1
mov dword [ebp - 0x1108], 0
mov dword [ebp - 0x13b8], 0x17d239f9
mov dword [ebp - 0x1110], 0xffffffff
mov dword [ebp - 0x12a8], 0x8ad385e3
mov dword [ebp - 0x1118], 4
mov dword [ebp - 0x1340], 1
mov dword [ebp - 0xc90], 0
mov dword [ebp - 0x290], 0
jmp 0x10009110
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x1000912c
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x14dc], 0x2bba6dad
jmp 0x10009103
mov eax, dword [ebp - 0xc90]
inc eax
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0x428], 0xfffffff8
mov dword [ebp - 0xf94], 0x4c38b6b0
mov dword [ebp - 0x1120], 0xffffffff
mov dword [ebp - 0x12b0], 0x880e033c
mov dword [ebp - 0x6c0], 0x54671013
mov dword [ebp - 0x6b8], 0xde6bc044
mov dword [ebp - 0x21c], 0xfffffffc
mov dword [ebp - 0xdd0], 0x9cc02768
mov dword [ebp - 0x6e0], 0xf9052196
mov dword [ebp - 0x38], 0
jmp 0x100091a3
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100091b9
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x358], 0x8d4081c2
jmp 0x1000919c
mov dword [ebp - 0x38], 0
jmp 0x100091c9
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x100091df
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1010], 0x465cd386
jmp 0x100091c2
mov dword [ebp - 0x38], 0
jmp 0x100091ef
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x10009205
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x1464], 0
jmp 0x100091e8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
mov dword [ebp - 0x1090], eax
mov eax, dword [ebp - 0x21c]
dec eax
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x6b8], eax
cmp dword [ebp - 0x6b8], 0
jne 0x10009380
cmp dword [ebp - 0x6c0], 0x2e42
jl 0x10009256
mov dword [ebp - 0xc98], 1
jmp 0x1000925d
and dword [ebp - 0xc98], 0
imul eax, dword [ebp - 0xc98], 0xb059
test eax, eax
jne 0x10009272
cmp dword [ebp - 0xf94], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 0
je 0x10009292
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x358], 0
jne 0x100092a4
mov eax, 0x57b6
test eax, eax
jne 0x100092a4
and dword [ebp - 0xdc8], 0
jmp 0x100092ae
mov dword [ebp - 0xdc8], 1
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x1130], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x428]
cmp dword [ebp + eax - 0x1010], ecx
jge 0x100092e7
mov dword [ebp - 0xca0], 1
jmp 0x100092ee
and dword [ebp - 0xca0], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0xca0], eax
jne 0x10009308
mov dword [ebp - 0x6c8], 1
jmp 0x1000930f
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x428]
cmp eax, dword [ebp - 0x6c8]
jg 0x10009329
mov dword [ebp - 0xca8], 1
jmp 0x10009330
and dword [ebp - 0xca8], 0
cmp dword [ebp - 0xca8], 0
jne 0x10009345
mov dword [ebp - 0x6d0], 1
jmp 0x1000934c
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0xfc5
jge 0x10009364
mov dword [ebp - 0xcb0], 1
jmp 0x1000936b
and dword [ebp - 0xcb0], 0
cmp dword [ebp - 0xcb0], 0x739425a3
jl 0x10009380
and dword [ebp - 0x6d8], 0
jmp 0x1000938a
mov dword [ebp - 0x6d8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1010]
cmp dword [ebp - 0x6d8], eax
jl 0x100093b4
mov eax, 0xb6ea1325
test eax, eax
je 0x100093b4
mov dword [ebp - 0xed0], 1
jmp 0x100093bb
and dword [ebp - 0xed0], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x12b8], eax
cmp dword [ebp - 0xdd0], 0
jne 0x100093e9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1010], 0
jne 0x100093e9
and dword [ebp - 0xcb8], 0
jmp 0x100093f3
mov dword [ebp - 0xcb8], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6e0]
imul ecx, dword [ebp - 0xcb8]
sub ecx, dword [ebp - 0x6e0]
cmp dword [ebp + eax - 0x358], ecx
jne 0x10009421
mov dword [ebp - 0xcc0], 1
jmp 0x10009428
and dword [ebp - 0xcc0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcc0]
mov dword [ebp + eax - 0x1010], ecx
mov dword [ebp - 0xbc], 1
mov dword [ebp - 0x298], 0
jmp 0x1000945e
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 3
jge 0x1000947a
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xd78], 0xfffffffa
jmp 0x10009451
mov dword [ebp - 0xbc], 2
jmp 0x10009493
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x1000994a
mov dword [ebp - 0x30], 0x32bb11ac
mov dword [ebp - 0x30], 0
jmp 0x100094b7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10009945
mov dword [ebp - 0x104], 0xafc37186
mov dword [ebp - 0xcc8], 0xb7a1
mov dword [ebp - 0x104], 2
jmp 0x100094ee
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0
jl 0x10009940
mov dword [ebp - 0xa4], 0x6d0374c7
mov dword [ebp - 0xa4], 2
jmp 0x1000951e
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1000993b
mov dword [ebp - 0x124], 1
mov dword [ebp - 0x360], 0
jmp 0x1000954e
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 3
jge 0x1000956a
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x1374], 0xfffffffc
jmp 0x10009541
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd78]
mov dword [ebp - 0x1138], eax
cmp dword [ebp - 0xcc8], 0
je 0x1000960e
imul eax, dword [ebp - 0x30], 0
cmp eax, dword [ebp - 0x30]
jle 0x1000959e
mov dword [ebp - 0x6e8], 1
jmp 0x100095a5
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xd78]
cmp dword [ebp - 0x6e8], eax
jl 0x100095cc
cmp dword [ebp - 0xcc8], 0
jne 0x100095cc
and dword [ebp - 0x6f0], 0
jmp 0x100095d6
mov dword [ebp - 0x6f0], 1
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x6f0], eax
jl 0x100095f0
mov dword [ebp - 0xf50], 1
jmp 0x100095f7
and dword [ebp - 0xf50], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x30], eax
je 0x1000960e
mov dword [ebp - 0xcd0], 1
jmp 0x10009615
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0xd78]
imul eax, dword [ebp - 0x124]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0x6f8]
mov dword [ebp + eax*4 - 0xd78], ecx
cmp dword [ebp - 0x6f8], 0
jne 0x10009663
mov dword [ebp - 0xcd8], 1
jmp 0x1000966a
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0xcd8], eax
jne 0x10009684
mov dword [ebp - 0x700], 1
jmp 0x1000968b
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0xa4]
add eax, dword [ebp - 0x700]
cmp eax, dword [ebp - 0x104]
jle 0x100096a3
cmp dword [ebp - 0x30], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1374], 0xb71808ad
ja 0x100096c1
mov dword [ebp - 0x3a8], 1
jmp 0x100096c8
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a8]
mov dword [ebp + eax - 0x1374], ecx
cmp dword [ebp - 0x3a8], 0
je 0x100096f6
cmp dword [ebp - 0x30], 0
je 0x100096f6
mov dword [ebp - 0xce0], 1
jmp 0x100096fd
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0xce0]
dec eax
jne 0x10009715
cmp dword [ebp - 0x30], 0
jne 0x10009715
and dword [ebp - 0xdd8], 0
jmp 0x1000971f
mov dword [ebp - 0xdd8], 1
cmp dword [ebp - 0x30], 0
je 0x1000978c
mov dword [ebp - 0x124], 2
jmp 0x1000973e
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x10009787
mov dword [ebp - 0xed8], 0x925b974d
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x10009770
push 0x108
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp + eax*4 - 0xd78]
neg eax
mov dword [ebp - 0xed8], eax
jmp 0x10009731
jmp 0x1000991a
mov dword [ebp - 0x11c], 0xb1262954
mov dword [ebp - 0xde0], 0x1f101fbe
cmp dword [ebp - 0x30], 0
je 0x1000981c
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x1348], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x30], eax
jle 0x100097c9
mov dword [ebp - 0x708], 1
jmp 0x100097d0
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x708], eax
je 0x100097f0
mov eax, 0x6906
test eax, eax
jne 0x100097f0
and dword [ebp - 0xce8], 0
jmp 0x100097fa
mov dword [ebp - 0xce8], 1
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xce8]
add ecx, 0x1ebdc590
cmp eax, ecx
jge 0x1000981c
and dword [ebp - 0x710], 0
jmp 0x10009826
mov dword [ebp - 0x710], 1
cmp dword [ebp - 0x710], 7
jne 0x1000983b
mov dword [ebp - 0xcf0], 1
jmp 0x10009842
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xcf0], eax
jg 0x1000985c
mov dword [ebp - 0x718], 1
jmp 0x10009863
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x1140], eax
cmp dword [ebp - 0x11c], 0
jne 0x10009896
cmp dword [ebp - 0x11c], 0
jne 0x10009896
and dword [ebp - 0xcf8], 0
jmp 0x100098a0
mov dword [ebp - 0xcf8], 1
mov eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0x11c]
imul eax, dword [ebp - 0xa4]
test eax, eax
je 0x100098dd
cmp dword [ebp - 0xbc], 0
je 0x100098dd
mov eax, dword [ebp - 0x104]
cmp dword [ebp + eax*4 - 0xd78], 0
je 0x100098dd
mov dword [ebp - 0x720], 1
jmp 0x100098e4
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0xcf8]
cmp eax, dword [ebp - 0x720]
jg 0x10009907
cmp dword [ebp - 0x11c], 0
je 0x10009907
mov dword [ebp - 0xd00], 1
jmp 0x1000990e
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0xd00]
mov dword [ebp - 0xde0], eax
mov byte [ebp - 0x1cc], 0
movzx eax, byte [ebp - 0x1cc]
test eax, eax
je 0x10009936
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x10009511
jmp 0x100094e1
jmp 0x100094b0
jmp 0x10009486
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000997b
push 0
push 0
push 0x9c9
push 0
push 0x1540
push 0
push 0x2310
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
mov dword [ebp - 0xf0], 0x328f6c74
mov dword [ebp - 0xc4], 0xbcd76ce4
mov dword [ebp - 0x440], 0x1ebf0ddd
mov dword [ebp - 0xa4c], 1
mov dword [ebp - 0x400], 5
mov dword [ebp - 0x75c], 1
mov dword [ebp - 0x3b0], 1
mov dword [ebp - 0x12c0], 0x277ed469
mov dword [ebp - 0x2a0], 0
jmp 0x100099e4
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x10009a00
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0xee0], 0xc0e84896
jmp 0x100099d7
cmp dword [ebp - 0xf0], 0
jne 0x10009a1b
cmp dword [ebp - 0xf0], 0
jne 0x10009a1b
and dword [ebp - 0xd08], 0
jmp 0x10009a25
mov dword [ebp - 0xd08], 1
cmp dword [ebp - 0xd08], 0x276b87d0
jl 0x10009a3d
mov dword [ebp - 0xa44], 1
jmp 0x10009a44
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0xf0]
cmp dword [ebp - 0xa44], eax
jge 0x10009a5e
mov dword [ebp - 0x73c], 1
jmp 0x10009a65
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xf0], eax
jl 0x10009a7f
mov dword [ebp - 0xbcc], 1
jmp 0x10009a86
and dword [ebp - 0xbcc], 0
mov eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0xbcc]
jl 0x10009aa0
mov dword [ebp - 0xf84], 1
jmp 0x10009aa7
and dword [ebp - 0xf84], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x1148], eax
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0xc4], 0
jne 0x10009ae0
mov eax, 0xdc1b6eab
test eax, eax
jne 0x10009ae0
and dword [ebp - 0xa5c], 0
jmp 0x10009aea
mov dword [ebp - 0xa5c], 1
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xf0], eax
jl 0x10009b04
mov dword [ebp - 0x744], 1
jmp 0x10009b0b
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0xa4c], eax
cmp dword [ebp - 0xa4c], 0
jne 0x10009b2e
or eax, 0xffffffff
jne 0x10009b2e
and dword [ebp - 0x74c], 0
jmp 0x10009b38
mov dword [ebp - 0x74c], 1
mov eax, dword [ebp - 0x74c]
sub eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xc4]
cmp eax, 1
jbe 0x10009b5b
mov dword [ebp - 0xd20], 1
jmp 0x10009b62
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd20]
mov dword [ebp - 0x400], eax
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x13c0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x1150], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x12c8], eax
cmp dword [ebp - 0x400], 0
je 0x10009bb0
cmp dword [ebp - 0xc4], 0
je 0x10009bb0
mov dword [ebp - 0x754], 1
jmp 0x10009bb7
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 5
jbe 0x10009bcc
mov dword [ebp - 0xa54], 1
jmp 0x10009bd3
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xa54]
mov dword [ebp - 0x75c], eax
cmp dword [ebp - 0x75c], 0x93cc
jge 0x10009bf7
mov dword [ebp - 0xde8], 1
jmp 0x10009bfe
and dword [ebp - 0xde8], 0
mov eax, dword [ebp - 0x3b0]
mov dword [ebp - 0x1158], eax
cmp dword [ebp - 0xf0], 0
je 0x10009c31
mov eax, 0xf2c6
test eax, eax
je 0x10009c31
cmp dword [ebp - 0xc4], 0
je 0x10009c31
mov dword [ebp - 0xbd4], 1
jmp 0x10009c38
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0xbd4]
add eax, 0x39ef5b50
je 0x10009c5a
cmp dword [ebp - 0x3b0], 0
je 0x10009c5a
mov dword [ebp - 0x764], 1
jmp 0x10009c61
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x764], eax
je 0x10009c7b
mov dword [ebp - 0x76c], 1
jmp 0x10009c82
and dword [ebp - 0x76c], 0
imul eax, dword [ebp - 0xa5c], 0xf813
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
cmp eax, dword [ebp - 0x76c]
jle 0x10009cb1
or eax, 0xffffffff
je 0x10009cb1
mov dword [ebp - 0xc94], 1
jmp 0x10009cb8
and dword [ebp - 0xc94], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc94]
mov dword [ebp + eax - 0xee0], ecx
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x6c], 0x974a5202
mov dword [ebp - 0x1358], 0xffffffff
mov dword [ebp - 0x1160], 0xffffffff
mov dword [ebp - 0x12d0], 0xc8cdab0b
mov dword [ebp - 0x1168], 0xfffffff8
mov dword [ebp - 0x1400], 0xffffffff
mov dword [ebp - 0x1170], 0x9458d81c
mov dword [ebp - 0xf7c], 0xfffffff9
mov dword [ebp - 0xf78], 0xfffffff9
mov dword [ebp - 0xf74], 0xfffffff9
mov dword [ebp - 0xf70], 0xfffffff9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xf7c], 0
jmp 0x10009d6b
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xf7c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xf7c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xf7c], 0xfffffff0
jge 0x10009dc4
mov byte [ebp - 0x1b9], 0
movzx eax, byte [ebp - 0x1b9]
test eax, eax
je 0x10009d97
push 0x371
call dword [sym.imp.USER32.dll_MessageBeep]
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x10009dc2
push 0
push 0xef5
push 0x1b3d
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetScrollPos]
jmp 0x10009d52
mov dword [ebp - 0x1e4], 0xffffffec
jmp 0x10009ddd
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0xfffffff6
jne 0x1000aff7
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x79c], 0x86e3e45b
mov dword [ebp - 0x774], 0x85a9576c
mov dword [ebp - 0x107c], 0xad8530de
mov dword [ebp - 0x1078], 0xad8530de
mov dword [ebp - 0x1074], 0xad8530de
mov dword [ebp - 0x1070], 0xad8530de
mov dword [ebp - 0x3b8], 0xb0815898
mov dword [ebp - 0x23c], 0
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x12d8], eax
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x1178], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x107c]
mov dword [ebp - 0x3b8], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x1368], eax
cmp dword [ebp - 0x3b8], 0x28ea3888
jne 0x10009e8e
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10009ea4
mov eax, 0xfff7
test eax, eax
jne 0x10009ea4
xor eax, eax
jne 0x10009ea4
and dword [ebp - 0xa64], 0
jmp 0x10009eae
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x23c], 0
jmp 0x10009ed3
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xffffffe7
je 0x10009f0d
mov dword [ebp - 0x77c], 0x3e45bbbd
mov byte [ebp - 0x1ce], 0
movzx eax, byte [ebp - 0x1ce]
test eax, eax
je 0x10009efe
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
mov eax, dword [ebp - 0x77c]
inc eax
mov dword [ebp - 0x77c], eax
jmp 0x10009ec6
mov dword [ebp - 0xdf0], 0x889e022a
mov eax, dword [ebp - 0x178]
add eax, 0x28ea
cmp dword [ebp - 0x178], eax
jle 0x10009f36
mov dword [ebp - 0xbdc], 1
jmp 0x10009f3d
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x178]
imul eax, dword [ebp - 0x178]
cmp dword [ebp - 0xbdc], eax
je 0x10009f5e
mov dword [ebp - 0x784], 1
jmp 0x10009f65
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jne 0x10009f86
mov eax, 0xf34111d0
test eax, eax
jne 0x10009f86
and dword [ebp - 0xa6c], 0
jmp 0x10009f90
mov dword [ebp - 0xa6c], 1
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0xa6c], eax
jge 0x10009faa
mov dword [ebp - 0x78c], 1
jmp 0x10009fb1
and dword [ebp - 0x78c], 0
cmp dword [ebp - 0x78c], 0x220985a9
jne 0x10009fc9
mov dword [ebp - 0xcf4], 1
jmp 0x10009fd0
and dword [ebp - 0xcf4], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0xcf4], eax
jne 0x10009fea
mov dword [ebp - 0x794], 1
jmp 0x10009ff1
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x794], eax
jge 0x1000a011
cmp dword [ebp - 0x178], 0
jne 0x1000a011
and dword [ebp - 0xa74], 0
jmp 0x1000a01b
mov dword [ebp - 0xa74], 1
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0xdf0], eax
mov dword [ebp - 0x68], 0xfc558bac
mov dword [ebp - 0xbec], 0x7822e6e
mov dword [ebp - 0x368], 0
jmp 0x1000a05d
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x1000a079
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0xdc], 0xca3691f6
jmp 0x1000a050
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
jg 0x1000a08d
mov dword [ebp - 0x7b4], 1
jmp 0x1000a094
and dword [ebp - 0x7b4], 0
cmp dword [ebp - 0x68], 0x7296
jl 0x1000a0a9
mov dword [ebp - 0xf58], 1
jmp 0x1000a0b0
and dword [ebp - 0xf58], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x12e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0x4794
jne 0x1000a0e1
mov dword [ebp - 0xbe4], 1
jmp 0x1000a0e8
and dword [ebp - 0xbe4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0xbe4], eax
jne 0x1000a109
mov dword [ebp - 0x7a4], 1
jmp 0x1000a110
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 0x98ce
jle 0x1000a128
mov dword [ebp - 0xa7c], 1
jmp 0x1000a12f
and dword [ebp - 0xa7c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
imul eax, dword [ebp - 0xa7c]
cmp eax, 0xfffffff8
je 0x1000a154
mov dword [ebp - 0x7ac], 1
jmp 0x1000a15b
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
imul eax, dword [ebp - 0x7ac]
sub eax, dword [ebp - 0x68]
jne 0x1000a183
cmp dword [ebp - 0x68], 0
jne 0x1000a183
and dword [ebp - 0xc9c], 0
jmp 0x1000a18d
mov dword [ebp - 0xc9c], 1
cmp dword [ebp - 0xc9c], 0x9bf5
je 0x1000a1a5
mov dword [ebp - 0xa84], 1
jmp 0x1000a1ac
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x7b4]
cmp eax, dword [ebp - 0xa84]
jle 0x1000a1c6
mov dword [ebp - 0x7bc], 1
jmp 0x1000a1cd
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x7bc], eax
jg 0x1000a1e4
mov dword [ebp - 0x7c4], 1
jmp 0x1000a1eb
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x68]
neg eax
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0xbec]
cmp eax, dword [ebp - 0x7c4]
je 0x1000a210
mov dword [ebp - 0xa8c], 1
jmp 0x1000a217
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0xa8c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xdc]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xdc]
jle 0x1000a345
mov dword [ebp - 0x408], 4
mov dword [ebp - 0xdf8], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x408], eax
jg 0x1000a26b
mov dword [ebp - 0x7cc], 1
jmp 0x1000a272
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x408]
cmp dword [ebp - 0x7cc], eax
jl 0x1000a28c
mov dword [ebp - 0xd3c], 1
jmp 0x1000a293
and dword [ebp - 0xd3c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x408]
cmp dword [ebp + eax - 0xdc], ecx
je 0x1000a2b4
mov dword [ebp - 0x7d4], 1
jmp 0x1000a2bb
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0xd3c]
cmp eax, dword [ebp - 0x7d4]
jg 0x1000a2d9
xor eax, eax
je 0x1000a2d9
mov dword [ebp - 0xa94], 1
jmp 0x1000a2e0
and dword [ebp - 0xa94], 0
cmp dword [ebp - 0xa94], 0x423b19d8
jl 0x1000a308
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdc], 0
je 0x1000a308
mov dword [ebp - 0x7dc], 1
jmp 0x1000a30f
and dword [ebp - 0x7dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp dword [ebp - 0x7dc], eax
je 0x1000a330
mov dword [ebp - 0xbf4], 1
jmp 0x1000a337
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
mov dword [ebp - 0xdf8], eax
jmp 0x1000a393
mov dword [ebp - 0x2a8], 0
jmp 0x1000a35e
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jge 0x1000a37a
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x1384], 0x88f1
jmp 0x1000a351
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1384]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x1384], eax
mov dword [ebp - 0x6c], 0
jmp 0x1000a3a3
cmp dword [ebp - 0x6c], 0xfffffff6
jne 0x1000aff2
mov dword [ebp - 0x1f8], 0x5052061f
mov dword [ebp - 0x7ec], 0x4e76
mov dword [ebp - 0xee8], 0x1d102278
mov dword [ebp - 0x7f4], 0x9694d2b5
mov dword [ebp - 0xe00], 1
mov dword [ebp - 0x1188], 0xffffffff
mov dword [ebp - 0x13c8], 1
mov dword [ebp - 0x1190], 4
mov dword [ebp - 0x12e8], 0xffffffff
mov dword [ebp - 0x7fc], 0x8e8d
mov dword [ebp - 0xcc], 0
jmp 0x1000a42a
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000a446
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1454], 0xf7c8b166
jmp 0x1000a41d
mov dword [ebp - 0xcc], 0
jmp 0x1000a45f
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000a47b
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1434], 0xfffffffb
jmp 0x1000a452
cmp dword [ebp - 0x1f8], 0
jne 0x1000a539
cmp dword [ebp - 0x1f8], 0
jne 0x1000a498
cmp dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1378], eax
xor eax, eax
cmp eax, 0xffffffff
ja 0x1000a4c3
mov dword [ebp - 0x7e4], 1
jmp 0x1000a4ca
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
sub eax, dword [ebp - 0xee8]
cmp eax, dword [ebp - 0x1f8]
jl 0x1000a4f3
cmp dword [ebp - 0x7f4], 0
je 0x1000a4f3
mov dword [ebp - 0xa9c], 1
jmp 0x1000a4fa
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0xa9c]
jg 0x1000a514
mov dword [ebp - 0xca4], 1
jmp 0x1000a51b
and dword [ebp - 0xca4], 0
mov eax, dword [ebp - 0x7ec]
imul eax, dword [ebp - 0xca4]
cmp eax, dword [ebp - 0x7f4]
jne 0x1000a539
mov dword [ebp - 0xaa4], 1
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0xe00], eax
mov eax, dword [ebp - 0x7fc]
dec eax
mov dword [ebp - 0x7fc], eax
mov byte [ebp - 0x169], 0
movzx eax, byte [ebp - 0x169]
test eax, eax
je 0x1000a578
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x84], 0xd4f2
mov dword [ebp - 0x1048], 0xffffffff
mov dword [ebp - 0x1044], 0xffffffff
mov dword [ebp - 0x1040], 0xffffffff
mov dword [ebp - 0x103c], 0xffffffff
mov dword [ebp - 0xef0], 9
mov dword [ebp - 0x370], 0
jmp 0x1000a5cd
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 3
jge 0x1000a5e9
mov eax, dword [ebp - 0x370]
mov dword [ebp + eax*4 - 0x1394], 0xc2285faa
jmp 0x1000a5c0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x12f0], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x11a8], eax
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x1394], 0xfffffff8
cmp dword [ebp - 0x84], 0xfffffff8
jge 0x1000a632
mov dword [ebp - 0xbfc], 1
jmp 0x1000a639
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0xbfc]
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x804], 1
jmp 0x1000a658
jmp 0x10009dd0
mov dword [ebp - 0x410], 0xfffffff8
mov dword [ebp - 0xf60], 0x4c38b6b0
mov dword [ebp - 0x12f8], 0xffffffff
mov dword [ebp - 0x11b8], 0x880e033c
mov dword [ebp - 0xd14], 0x54671013
mov dword [ebp - 0xb0c], 0xde6bc044
mov dword [ebp - 0x204], 0xfffffffc
mov dword [ebp - 0xe20], 0x9cc02768
mov dword [ebp - 0xcc4], 0xf9052196
mov dword [ebp - 0x40], 0
jmp 0x1000b061
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x1000b077
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x2bc], 0x8d4081c2
jmp 0x1000b05a
mov dword [ebp - 0x40], 0
jmp 0x1000b087
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000b09d
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x1004], 0x465cd386
jmp 0x1000b080
mov dword [ebp - 0x40], 0
jmp 0x1000b0ad
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000b0c3
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x144c], 0
jmp 0x1000b0a6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bc]
mov dword [ebp - 0x1388], eax
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0xb0c], eax
cmp dword [ebp - 0xb0c], 0
jne 0x1000b23e
cmp dword [ebp - 0xd14], 0x2e42
jl 0x1000b114
mov dword [ebp - 0x8cc], 1
jmp 0x1000b11b
and dword [ebp - 0x8cc], 0
imul eax, dword [ebp - 0x8cc], 0xb059
test eax, eax
jne 0x1000b130
cmp dword [ebp - 0xf60], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0
je 0x1000b150
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2bc], 0
jne 0x1000b162
mov eax, 0x57b6
test eax, eax
jne 0x1000b162
and dword [ebp - 0xe18], 0
jmp 0x1000b16c
mov dword [ebp - 0xe18], 1
mov eax, dword [ebp - 0xd14]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x1300], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x410]
cmp dword [ebp + eax - 0x1004], ecx
jge 0x1000b1a5
mov dword [ebp - 0x8d4], 1
jmp 0x1000b1ac
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x8d4], eax
jne 0x1000b1c6
mov dword [ebp - 0xb14], 1
jmp 0x1000b1cd
and dword [ebp - 0xb14], 0
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0xb14]
jg 0x1000b1e7
mov dword [ebp - 0x8dc], 1
jmp 0x1000b1ee
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0
jne 0x1000b203
mov dword [ebp - 0xc34], 1
jmp 0x1000b20a
and dword [ebp - 0xc34], 0
cmp dword [ebp - 0xc34], 0xfc5
jge 0x1000b222
mov dword [ebp - 0x8e4], 1
jmp 0x1000b229
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0x739425a3
jl 0x1000b23e
and dword [ebp - 0xb1c], 0
jmp 0x1000b248
mov dword [ebp - 0xb1c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1004]
cmp dword [ebp - 0xb1c], eax
jl 0x1000b272
mov eax, 0xb6ea1325
test eax, eax
je 0x1000b272
mov dword [ebp - 0xef8], 1
jmp 0x1000b279
and dword [ebp - 0xef8], 0
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x11c8], eax
cmp dword [ebp - 0xe20], 0
jne 0x1000b2a7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1004], 0
jne 0x1000b2a7
and dword [ebp - 0x8ec], 0
jmp 0x1000b2b1
mov dword [ebp - 0x8ec], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcc4]
imul ecx, dword [ebp - 0x8ec]
sub ecx, dword [ebp - 0xcc4]
cmp dword [ebp + eax - 0x2bc], ecx
jne 0x1000b2df
mov dword [ebp - 0x8f4], 1
jmp 0x1000b2e6
and dword [ebp - 0x8f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8f4]
mov dword [ebp + eax - 0x1004], ecx
cmp dword [ebp - 0x6c], 0
je 0x1000ba1e
mov dword [ebp - 0x324], 0x3e3f36a5
mov dword [ebp - 0x190], 1
mov dword [ebp - 0xfc4], 0xfffffff9
mov dword [ebp - 0xfc0], 0xfffffff9
mov dword [ebp - 0xfbc], 0xfffffff9
mov dword [ebp - 0xfb8], 0xfffffff9
mov dword [ebp - 0xe28], 6
mov dword [ebp - 0x190], 0
jmp 0x1000b362
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0x11
jle 0x1000b460
mov dword [ebp - 0x3d0], 0
cmp dword [ebp - 0x190], 0xfff6
je 0x1000b391
mov dword [ebp - 0xb24], 1
jmp 0x1000b398
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0xb24], eax
jne 0x1000b3b2
mov dword [ebp - 0x8fc], 1
jmp 0x1000b3b9
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x3d0]
imul eax, dword [ebp - 0x3d0]
sub eax, 0xec17
mov ecx, dword [ebp - 0x8fc]
sub ecx, 0x12b5aa10
cmp eax, ecx
jle 0x1000b3f7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xfc4], 0
je 0x1000b3f7
mov dword [ebp - 0xf8c], 1
jmp 0x1000b3fe
and dword [ebp - 0xf8c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc4]
mov dword [ebp - 0x13d0], eax
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x11d0], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x1308], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc4]
mov dword [ebp - 0xe28], eax
mov byte [ebp - 0x1d0], 0
movzx eax, byte [ebp - 0x1d0]
test eax, eax
je 0x1000b45b
push 0x1bb6
push 0
call dword [sym.imp.USER32.dll_CharLowerBuffW]
jmp 0x1000b355
mov dword [ebp - 0xe40], 0xffffffff
mov dword [ebp - 0x18], 0x42c70bb7
mov dword [ebp - 0x198], 1
mov dword [ebp - 0xe38], 0x15869b9
mov dword [ebp - 0x94c], 0xb60d90c3
mov dword [ebp - 0x374], 0
jmp 0x1000b4a8
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 1
jge 0x1000b4c1
mov eax, dword [ebp - 0x374]
mov dword [ebp + eax*4 - 0x58], 0
jmp 0x1000b49b
mov dword [ebp - 0x18], 0
jmp 0x1000b4d1
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1000b75b
mov dword [ebp - 0xc44], 0x8fe831e3
mov dword [ebp - 0xb34], 0x6d983a5c
mov dword [ebp - 0xb3c], 0
mov dword [ebp - 0xf68], 1
cmp dword [ebp - 0x18], 0xfffffff8
jl 0x1000b515
mov dword [ebp - 0xc3c], 1
jmp 0x1000b51c
and dword [ebp - 0xc3c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp eax, dword [ebp - 0xc3c]
je 0x1000b53a
mov dword [ebp - 0x904], 1
jmp 0x1000b541
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x58]
imul eax, dword [ebp - 0x904]
cmp eax, 0xa25a
jne 0x1000b562
mov dword [ebp - 0xb2c], 1
jmp 0x1000b569
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x58]
cmp dword [ebp - 0xb2c], eax
jg 0x1000b584
mov dword [ebp - 0xf00], 1
jmp 0x1000b58b
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0x11d8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x1398], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x58]
mov dword [ebp - 0x11e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0xfffa
jne 0x1000b5d1
mov dword [ebp - 0x90c], 1
jmp 0x1000b5d8
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x90c], eax
jl 0x1000b5ef
mov dword [ebp - 0xd0c], 1
jmp 0x1000b5f6
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0xc44]
cmp dword [ebp - 0xd0c], eax
jne 0x1000b610
mov dword [ebp - 0x914], 1
jmp 0x1000b617
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x58]
imul eax, dword [ebp - 0xb34]
cmp eax, 0xb8a064f5
je 0x1000b644
mov dword [ebp - 0x91c], 1
jmp 0x1000b64b
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x91c], eax
jg 0x1000b662
mov dword [ebp - 0x924], 1
jmp 0x1000b669
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0xc44]
imul eax, dword [ebp - 0x924]
cmp eax, 0xe2bf
jne 0x1000b689
mov dword [ebp - 0xe30], 1
jmp 0x1000b690
and dword [ebp - 0xe30], 0
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x1310], eax
cmp dword [ebp - 0x198], 0
jne 0x1000b6b7
mov eax, 0xbef2
test eax, eax
jne 0x1000b6b7
and dword [ebp - 0x92c], 0
jmp 0x1000b6c1
mov dword [ebp - 0x92c], 1
mov eax, dword [ebp - 0xb3c]
add eax, dword [ebp - 0x92c]
add eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x18]
sub eax, dword [ebp + ecx*4 - 0x58]
mov ecx, dword [ebp - 0x18]
cmp eax, dword [ebp + ecx*4 - 0x58]
jl 0x1000b6ef
mov dword [ebp - 0xccc], 1
jmp 0x1000b6f6
and dword [ebp - 0xccc], 0
cmp dword [ebp - 0xccc], 0x5ead4a2b
jg 0x1000b70e
mov dword [ebp - 0x934], 1
jmp 0x1000b715
and dword [ebp - 0x934], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
imul eax, dword [ebp - 0x934]
cmp eax, dword [ebp - 0xf68]
jge 0x1000b743
cmp dword [ebp - 0xe38], 0
je 0x1000b743
mov dword [ebp - 0xb44], 1
jmp 0x1000b74a
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0x94c], eax
jmp 0x1000b4ca
mov dword [ebp - 0x198], 0
jmp 0x1000b774
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 9
jge 0x1000b8eb
mov dword [ebp - 0x208], 0x72f548f9
mov dword [ebp - 0x2c4], 0
jmp 0x1000b7a4
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 4
jge 0x1000b7c0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x147c], 1
jmp 0x1000b797
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x198], eax
jne 0x1000b7da
mov dword [ebp - 0x954], 1
jmp 0x1000b7e1
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x18], eax
je 0x1000b7f8
mov dword [ebp - 0x93c], 1
jmp 0x1000b7ff
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x93c], eax
je 0x1000b819
mov dword [ebp - 0xc4c], 1
jmp 0x1000b820
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0xc4c]
neg eax
imul eax, eax, 0xfffffffb
test eax, eax
jne 0x1000b845
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jne 0x1000b845
and dword [ebp - 0x944], 0
jmp 0x1000b84f
mov dword [ebp - 0x944], 1
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0x944]
jge 0x1000b869
mov dword [ebp - 0xb4c], 1
jmp 0x1000b870
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0xb4c]
jne 0x1000b88a
mov dword [ebp - 0xd1c], 1
jmp 0x1000b891
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0x94c]
cmp dword [ebp - 0xd1c], eax
jge 0x1000b8ab
mov dword [ebp - 0xb54], 1
jmp 0x1000b8b2
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x954]
cmp eax, dword [ebp - 0xb54]
jl 0x1000b8cc
mov dword [ebp - 0x95c], 1
jmp 0x1000b8d3
and dword [ebp - 0x95c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x95c]
mov dword [ebp + eax - 0x147c], ecx
jmp 0x1000b767
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x13f8], eax
cmp dword [ebp - 0x6c], 0xfffffffa
jne 0x1000b912
mov dword [ebp - 0xc54], 1
jmp 0x1000b919
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xc54], eax
jle 0x1000b930
mov dword [ebp - 0x964], 1
jmp 0x1000b937
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x964], eax
jle 0x1000b951
mov dword [ebp - 0xb5c], 1
jmp 0x1000b958
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x324]
cmp eax, dword [ebp - 0xb5c]
jge 0x1000b972
mov dword [ebp - 0x96c], 1
jmp 0x1000b979
and dword [ebp - 0x96c], 0
cmp dword [ebp - 0x96c], 0
jne 0x1000b992
push 7
pop eax
test eax, eax
jne 0x1000b992
and dword [ebp - 0xcd4], 0
jmp 0x1000b99c
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jle 0x1000b9b1
mov dword [ebp - 0x974], 1
jmp 0x1000b9b8
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x974], eax
jg 0x1000b9cf
mov dword [ebp - 0xf08], 1
jmp 0x1000b9d6
and dword [ebp - 0xf08], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x11f0], eax
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1318], eax
mov dword [ebp - 0xe40], 0xd9780293
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x1000ba19
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
jmp 0x1000bab0
mov dword [ebp - 0x11f8], 0xbab1
mov dword [ebp - 0x13a8], 0
mov dword [ebp - 0x1200], 0x17d239f9
mov dword [ebp - 0x1320], 0xffffffff
mov dword [ebp - 0x1208], 0x8ad385e3
mov dword [ebp - 0x13d8], 4
mov dword [ebp - 0x1210], 1
mov dword [ebp - 0xb64], 0
mov dword [ebp - 0x2cc], 0
jmp 0x1000ba87
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 4
jge 0x1000baa3
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x14ec], 0x2bba6dad
jmp 0x1000ba7a
mov eax, dword [ebp - 0xb64]
inc eax
mov dword [ebp - 0xb64], eax
mov dword [ebp - 0x448], 0xfffffff8
mov dword [ebp - 0xf9c], 0x4c38b6b0
mov dword [ebp - 0x1328], 0xffffffff
mov dword [ebp - 0x1218], 0x880e033c
mov dword [ebp - 0x984], 0x54671013
mov dword [ebp - 0x97c], 0xde6bc044
mov dword [ebp - 0x210], 0xfffffffc
mov dword [ebp - 0xe50], 0x9cc02768
mov dword [ebp - 0x9a4], 0xf9052196
mov dword [ebp - 0x20], 0
jmp 0x1000bb1a
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1000bb30
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x354], 0x8d4081c2
jmp 0x1000bb13
mov dword [ebp - 0x20], 0
jmp 0x1000bb40
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1000bb56
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xff8], 0x465cd386
jmp 0x1000bb39
mov dword [ebp - 0x20], 0
jmp 0x1000bb66
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1000bb7c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x145c], 0
jmp 0x1000bb5f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x1280], eax
mov eax, dword [ebp - 0x210]
dec eax
mov dword [ebp - 0x210], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x97c], eax
cmp dword [ebp - 0x97c], 0
jne 0x1000bcf7
cmp dword [ebp - 0x984], 0x2e42
jl 0x1000bbcd
mov dword [ebp - 0xc5c], 1
jmp 0x1000bbd4
and dword [ebp - 0xc5c], 0
imul eax, dword [ebp - 0xc5c], 0xb059
test eax, eax
jne 0x1000bbe9
cmp dword [ebp - 0xf9c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 0
je 0x1000bc09
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x354], 0
jne 0x1000bc1b
mov eax, 0x57b6
test eax, eax
jne 0x1000bc1b
and dword [ebp - 0xe48], 0
jmp 0x1000bc25
mov dword [ebp - 0xe48], 1
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x1220], eax
mov eax, dword [ebp - 0x210]
mov dword [ebp - 0x127c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x448]
cmp dword [ebp + eax - 0xff8], ecx
jge 0x1000bc5e
mov dword [ebp - 0xb6c], 1
jmp 0x1000bc65
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0xb6c], eax
jne 0x1000bc7f
mov dword [ebp - 0x47c], 1
jmp 0x1000bc86
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x47c]
jg 0x1000bca0
mov dword [ebp - 0xd24], 1
jmp 0x1000bca7
and dword [ebp - 0xd24], 0
cmp dword [ebp - 0xd24], 0
jne 0x1000bcbc
mov dword [ebp - 0x994], 1
jmp 0x1000bcc3
and dword [ebp - 0x994], 0
cmp dword [ebp - 0x994], 0xfc5
jge 0x1000bcdb
mov dword [ebp - 0xb74], 1
jmp 0x1000bce2
and dword [ebp - 0xb74], 0
cmp dword [ebp - 0xb74], 0x739425a3
jl 0x1000bcf7
and dword [ebp - 0x99c], 0
jmp 0x1000bd01
mov dword [ebp - 0x99c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xff8]
cmp dword [ebp - 0x99c], eax
jl 0x1000bd2b
mov eax, 0xb6ea1325
test eax, eax
je 0x1000bd2b
mov dword [ebp - 0xf10], 1
jmp 0x1000bd32
and dword [ebp - 0xf10], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x1228], eax
cmp dword [ebp - 0xe50], 0
jne 0x1000bd60
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xff8], 0
jne 0x1000bd60
and dword [ebp - 0xc64], 0
jmp 0x1000bd6a
mov dword [ebp - 0xc64], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9a4]
imul ecx, dword [ebp - 0xc64]
sub ecx, dword [ebp - 0x9a4]
cmp dword [ebp + eax - 0x354], ecx
jne 0x1000bd98
mov dword [ebp - 0xb7c], 1
jmp 0x1000bd9f
and dword [ebp - 0xb7c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb7c]
mov dword [ebp + eax - 0xff8], ecx
mov dword [ebp - 0x3d8], 0xfffffff8
mov dword [ebp - 0xf40], 0x4c38b6b0
mov dword [ebp - 0x128c], 0xffffffff
mov dword [ebp - 0x1230], 0x880e033c
mov dword [ebp - 0x9b4], 0x54671013
mov dword [ebp - 0x9ac], 0xde6bc044
mov dword [ebp - 0x218], 0xfffffffc
mov dword [ebp - 0xe60], 0x9cc02768
mov dword [ebp - 0x9d4], 0xf9052196
mov dword [ebp - 0x48], 0
jmp 0x1000be1c
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1000be32
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2d4], 0x8d4081c2
jmp 0x1000be15
mov dword [ebp - 0x48], 0
jmp 0x1000be42
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000be58
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xfec], 0x465cd386
jmp 0x1000be3b
mov dword [ebp - 0x48], 0
jmp 0x1000be68
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x1000be7e
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x146c], 0
jmp 0x1000be61
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d4]
mov dword [ebp - 0x1294], eax
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x9ac], eax
cmp dword [ebp - 0x9ac], 0
jne 0x1000bff9
cmp dword [ebp - 0x9b4], 0x2e42
jl 0x1000becf
mov dword [ebp - 0xcdc], 1
jmp 0x1000bed6
and dword [ebp - 0xcdc], 0
imul eax, dword [ebp - 0xcdc], 0xb059
test eax, eax
jne 0x1000beeb
cmp dword [ebp - 0xf40], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d4], 0
je 0x1000bf0b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2d4], 0
jne 0x1000bf1d
mov eax, 0x57b6
test eax, eax
jne 0x1000bf1d
and dword [ebp - 0xe58], 0
jmp 0x1000bf27
mov dword [ebp - 0xe58], 1
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x123c], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x129c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d8]
cmp dword [ebp + eax - 0xfec], ecx
jge 0x1000bf60
mov dword [ebp - 0xb84], 1
jmp 0x1000bf67
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xb84], eax
jne 0x1000bf81
mov dword [ebp - 0x9bc], 1
jmp 0x1000bf88
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x9bc]
jg 0x1000bfa2
mov dword [ebp - 0xc6c], 1
jmp 0x1000bfa9
and dword [ebp - 0xc6c], 0
cmp dword [ebp - 0xc6c], 0
jne 0x1000bfbe
mov dword [ebp - 0x9c4], 1
jmp 0x1000bfc5
and dword [ebp - 0x9c4], 0
cmp dword [ebp - 0x9c4], 0xfc5
jge 0x1000bfdd
mov dword [ebp - 0x9cc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfec]
cmp dword [ebp - 0x9cc], eax
jl 0x1000c02d
mov eax, 0xb6ea1325
test eax, eax
je 0x1000c02d
mov dword [ebp - 0xf18], 1
jmp 0x1000c034
and dword [ebp - 0xf18], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x1248], eax
cmp dword [ebp - 0xe60], 0
jne 0x1000c062
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfec], 0
jne 0x1000c062
and dword [ebp - 0xd18], 0
jmp 0x1000c06c
mov dword [ebp - 0xd18], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9d4]
imul ecx, dword [ebp - 0xd18]
sub ecx, dword [ebp - 0x9d4]
cmp dword [ebp + eax - 0x2d4], ecx
jne 0x1000c09a
mov dword [ebp - 0xb94], 1
jmp 0x1000c0a1
and dword [ebp - 0xb94], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb94]
mov dword [ebp + eax - 0xfec], ecx
mov dword [ebp - 0x220], 0xffab8c3a
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x464], 1
mov dword [ebp - 0x460], 1
mov dword [ebp - 0x45c], 1
mov dword [ebp - 0x3e0], 0xfffffffb
mov dword [ebp - 0x418], 0xacc4b7c7
mov dword [ebp - 0xe68], 0x512e
mov dword [ebp - 0x12a4], 0xde47
mov dword [ebp - 0xec], 0
jmp 0x1000c127
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x1000c143
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0x32c], 1
jmp 0x1000c11a
mov dword [ebp - 0xec], 0
jmp 0x1000c15c
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 1
jge 0x1000c178
mov eax, dword [ebp - 0xec]
mov dword [ebp + eax*4 - 0xbac], 0xfffffff9
jmp 0x1000c14f
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
jne 0x1000c2fc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x468]
mov dword [ebp - 0x1254], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x468]
mov dword [ebp - 0x12ac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x468]
mov dword [ebp - 0x1260], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x468], 0xe60d743c
jae 0x1000c1e3
mov dword [ebp - 0xba4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x468]
cmp dword [ebp - 0xba4], eax
jge 0x1000c326