Function at 0x10053076
Capabilities:
Extract resource via kernel32 functions
Get graphical window text
Query or enumerate registry value
Resume thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100812f5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x414
push esi
mov dword [ebp - 0x24c], 4
mov dword [ebp - 0x104], 0x7cd95da2
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x310], 0xfffffffb
mov dword [ebp - 0xf4], 0xfffffff7
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x3bc], 0xfffffffc
mov dword [ebp - 0x2c8], 1
mov dword [ebp - 0x30], 0
jmp 0x100530f5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1005310b
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x420], 0x4e8fe752
jmp 0x100530ee
mov dword [ebp - 0x30], 0
jmp 0x1005311b
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x10053131
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x2c4], 0x8d20
jmp 0x10053114
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x3a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
dec eax
mov dword [ebp - 0x17c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x17c]
mov dword [ebp + eax - 0x2c4], ecx
mov eax, dword [ebp - 0x24c]
cmp eax, dword [ebp - 0x17c]
je 0x100531d3
cmp dword [ebp - 0x2c8], 0x498b94be
je 0x10053193
cmp dword [ebp - 0x310], 0
je 0x10053193
mov dword [ebp - 0x208], 1
jmp 0x1005319a
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x208]
sub eax, dword [ebp - 0xf4]
cmp eax, dword [ebp - 0x210]
jge 0x100531be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c4], 0
je 0x100531d3
mov eax, 0x370cc321
test eax, eax
je 0x100531d3
mov dword [ebp - 0x318], 1
jmp 0x100531da
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0xf4]
cmp dword [ebp - 0x210], eax
je 0x100531f4
mov dword [ebp - 0xfc], 1
jmp 0x100531fb
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xfc], eax
jg 0x10053215
mov dword [ebp - 0x320], 1
jmp 0x1005321c
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x3b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c4]
sub eax, dword [ebp - 0x104]
mov dword [ebp - 0x104], eax
movzx eax, byte [ebp + 0x10]
test eax, eax
je 0x10053843
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2dc], eax
mov dword [ebp - 0xb0], 0x251d69f4
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xe4], 7
mov dword [ebp - 0x304], 0xffffffff
mov dword [ebp - 0x248], 0xfffffffc
mov dword [ebp - 0xc4], 0x2a67f8b4
mov dword [ebp - 0x124], 1
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x304]
imul ecx, dword [ebp - 0xb0]
add eax, ecx
cmp eax, dword [ebp - 0x50]
jl 0x10053304
mov dword [ebp - 0x220], 1
jmp 0x1005330b
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x220]
cmp eax, 0xcaa8e55a
jae 0x1005332a
mov dword [ebp - 0x10c], 1
jmp 0x10053331
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc4], eax
jl 0x10053357
mov dword [ebp - 0x228], 1
jmp 0x1005335e
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x228], eax
je 0x10053378
mov dword [ebp - 0x114], 1
jmp 0x1005337f
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
neg eax
je 0x100533ac
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x100533a7
push 0x25aa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
jmp 0x1005347e
mov dword [ebp - 0x230], 0x2e4ed383
mov dword [ebp - 0x308], 0x75e3aa9c
mov dword [ebp - 0x2d4], 0x5ab171c2
mov eax, dword [ebp - 0x230]
neg eax
je 0x10053453
cmp dword [ebp - 0x230], 1
jl 0x100533e9
mov dword [ebp - 0x11c], 1
jmp 0x100533f0
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0x2840
jg 0x10053408
mov dword [ebp - 0x238], 1
jmp 0x1005340f
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x238], eax
jne 0x10053432
cmp dword [ebp - 0x308], 0
je 0x10053432
mov dword [ebp - 0x240], 1
jmp 0x10053439
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x240], eax
jg 0x10053453
mov dword [ebp - 0x12c], 1
jmp 0x1005345a
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x2d4], eax
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x1005347e
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xbc], 0xfe7d
push 3
lea ecx, [ebp - 0x338]
call fcn.10016f46
and dword [ebp - 4], 0
mov dword [ebp - 0x44], 0
jmp 0x100534b5
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x100534d1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x338]
call fcn.10016fb3
mov dword [eax], 0xfffffff7
jmp 0x100534ae
mov dword [ebp - 0x44], 0
jmp 0x100534e1
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x100534f7
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x134], 0xfff9
jmp 0x100534da
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x134]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x134], eax
mov dword [ebp - 0xbc], 0
jmp 0x1005352b
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0
jl 0x10053556
push 0
lea ecx, [ebp - 0x338]
call fcn.10016fb3
mov esi, eax
push 0
lea ecx, [ebp - 0x338]
call fcn.10016fb3
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1005351e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x338]
call fcn.10016fae
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x1c], 5
mov dword [ebp - 0x404], 7
mov dword [ebp - 0x90], 0
jmp 0x100535a7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x100535c3
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x88], 1
jmp 0x1005359a
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jg 0x100535da
mov dword [ebp - 0x250], 1
jmp 0x100535e1
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x250], eax
jle 0x100535f8
mov dword [ebp - 0x13c], 1
jmp 0x100535ff
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x13c]
je 0x10053616
mov dword [ebp - 0x258], 1
jmp 0x1005361d
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x258]
sub eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x1c]
cmp eax, 0x46c2
jge 0x1005363d
mov dword [ebp - 0x144], 1
jmp 0x10053644
and dword [ebp - 0x144], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x88], 1
cmp dword [ebp - 0x144], 1
jl 0x1005366a
mov dword [ebp - 0x260], 1
jmp 0x10053671
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xd5493e
je 0x10053696
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x10053696
and dword [ebp - 0x30c], 0
jmp 0x100536a0
mov dword [ebp - 0x30c], 1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x3fc], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x88]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jne 0x100536cd
mov dword [ebp - 0x14c], 1
jmp 0x100536d4
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x14c]
je 0x100536f8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x88], 0
jne 0x100536f8
and dword [ebp - 0x268], 0
jmp 0x10053702
mov dword [ebp - 0x268], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x268], eax
jge 0x1005373a
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10053721
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x10053735
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
jmp 0x10053825
mov dword [ebp - 0x98], 0x72737ae9
mov dword [ebp - 0x2e4], 0xffffffff
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1005376e
push 0x2302
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowTextW]
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x1c], eax
jle 0x10053785
mov dword [ebp - 0x270], 1
jmp 0x1005378c
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x98], 0
jne 0x100537a3
xor eax, eax
inc eax
jne 0x100537a3
and dword [ebp - 0x154], 0
jmp 0x100537ad
mov dword [ebp - 0x154], 1
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x98]
jne 0x100537cd
mov eax, 0x752b
test eax, eax
jne 0x100537cd
and dword [ebp - 0x15c], 0
jmp 0x100537d7
mov dword [ebp - 0x15c], 1
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0x15c]
jge 0x100537f1
mov dword [ebp - 0x278], 1
jmp 0x100537f8
and dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x278], eax
jl 0x10053812
mov dword [ebp - 0x164], 1
jmp 0x10053819
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x324]
push dword [eax]
mov ecx, dword [ebp - 0x2ec]
call fcn.10016fb3
mov dword [eax], 0xf903a798
jmp 0x10054c96
mov dword [ebp - 0x18], 5
mov dword [ebp - 0x280], 0xffffffff
cmp dword [ebp - 0x18], 0
je 0x10053860
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x1005388e
mov dword [ebp - 0x18], 0xfffffffe
jmp 0x1005387c
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffb
jg 0x1005388c
cmp dword [ebp - 0x18], 0
je 0x1005388a
jmp 0x1005388c
jmp 0x10053875
jmp 0x1005390d
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x16c], 0x3a3dbc56
mov dword [ebp - 0x18], 0
jmp 0x100538b2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 7
jle 0x100538d3
mov byte [ebp - 0x62], 0
movzx eax, byte [ebp - 0x62]
test eax, eax
je 0x100538d1
push 0x173b
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
jmp 0x100538ab
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
add eax, 0xffff
mov ecx, dword [ebp - 0x288]
sub ecx, eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x314], eax
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x2c], 0xfffd
mov dword [ebp - 0x24], 0x136ef6f
mov dword [ebp - 0x31c], 0x422e233a
mov dword [ebp - 0x274], 0x833
mov dword [ebp - 0x1ec], 1
push 1
lea ecx, [ebp - 0x350]
call fcn.10016f46
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c], 0
jmp 0x10053979
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 4
jge 0x1005398c
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x7c], 0xffffffff
jmp 0x10053972
mov dword [ebp - 0x3c], 0
jmp 0x1005399c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x100539b8
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x350]
call fcn.10016fb3
mov dword [eax], 0x641cecc2
jmp 0x10053995
mov dword [ebp - 0x10], 3
jmp 0x100539c8
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x100540f4
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x2d0], 8
mov dword [ebp - 0x204], 0x5d8e54fb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x7c], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x7c], 0
je 0x10053adb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x7c], 0
jne 0x10053a55
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
sub eax, dword [ebp - 0x38]
cmp eax, 0xffffffff
jb 0x10053a30
cmp dword [ebp - 0x2c], 0
jne 0x10053a30
and dword [ebp - 0x174], 0
jmp 0x10053a3a
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, dword [ebp - 0x174]
jl 0x10053a55
mov dword [ebp - 0x290], 1
jmp 0x10053a5c
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
inc eax
cmp eax, dword [ebp - 0x2c]
je 0x10053a74
mov dword [ebp - 0x298], 1
jmp 0x10053a7b
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x298]
cmp dword [ebp - 0x10], eax
jge 0x10053a98
xor eax, eax
inc eax
jne 0x10053a98
and dword [ebp - 0x264], 0
jmp 0x10053aa2
mov dword [ebp - 0x264], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x264], eax
jg 0x10053abd
mov dword [ebp - 0x184], 1
jmp 0x10053ac4
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x184]
je 0x10053adb
mov dword [ebp - 0x21c], 1
jmp 0x10053ae2
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0
je 0x10053afd
cmp dword [ebp - 0x24], 0
je 0x10053afd
mov dword [ebp - 0x18c], 1
jmp 0x10053b04
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
add eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x10]
imul eax, dword [ebp + ecx*4 - 0x7c]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x7c]
jne 0x10053b31
mov dword [ebp - 0x28c], 1
jmp 0x10053b38
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x28c], eax
jle 0x10053b53
mov dword [ebp - 0x194], 1
jmp 0x10053b5a
and dword [ebp - 0x194], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
add eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x10]
je 0x10053b7b
mov dword [ebp - 0x2f4], 1
jmp 0x10053b82
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x368], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x38], eax
je 0x10053bb5
mov eax, 0xcf9e8bfa
test eax, eax
je 0x10053bb5
mov dword [ebp - 0x224], 1
jmp 0x10053bbc
and dword [ebp - 0x224], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x224]
test eax, eax
je 0x10053dcd
mov dword [ebp - 0xd8], 0xb1d319d7
mov dword [ebp - 0x24], 0
jmp 0x10053be8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jg 0x10053dc2
mov dword [ebp - 0x234], 4
mov dword [ebp - 0xb8], 0
jmp 0x10053c15
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10053c31
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x414], 0xffffffff
jmp 0x10053c08
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x32c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x32c]
mov dword [ebp + eax - 0x414], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0xd8], eax
jg 0x10053c78
mov dword [ebp - 0x19c], 1
jmp 0x10053c7f
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x19c], eax
jle 0x10053c9a
mov dword [ebp - 0x26c], 1
jmp 0x10053ca1
and dword [ebp - 0x26c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x26c], eax
jl 0x10053cb8
mov dword [ebp - 0x1a4], 1
jmp 0x10053cbf
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x1a4], eax
je 0x10053cda
mov dword [ebp - 0x2fc], 1
jmp 0x10053ce1
and dword [ebp - 0x2fc], 0
cmp dword [ebp - 0x10], 0x3572
jl 0x10053cf6
mov dword [ebp - 0x22c], 1
jmp 0x10053cfd
and dword [ebp - 0x22c], 0
cmp dword [ebp - 0x22c], 0x6b80
jl 0x10053d15
mov dword [ebp - 0x1ac], 1
jmp 0x10053d1c
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp eax, dword [ebp - 0x1ac]
jge 0x10053d3e
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x7c], 0
jne 0x10053d3e
and dword [ebp - 0x2a0], 0
jmp 0x10053d48
mov dword [ebp - 0x2a0], 1
cmp dword [ebp - 0x2a0], 0xcddc
jl 0x10053d60
mov dword [ebp - 0x1b4], 1
jmp 0x10053d67
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x7c], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x234], 0xd979388b
jae 0x10053daa
mov dword [ebp - 0x1bc], 1
jmp 0x10053db1
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0xd8], eax
jmp 0x10053be1
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x38], eax
jmp 0x100540ef
mov dword [ebp - 0x28], 0x519f
mov dword [ebp - 0xd0], 0xfffffff6
mov dword [ebp - 0xc0], 0xf177dae0
cmp dword [ebp - 0x2c], 0
jne 0x10053fd5
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x380], eax
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x38]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x7c]
cmp dword [ebp - 0x274], eax
jge 0x10053e26
mov dword [ebp - 0x1c4], 1
jmp 0x10053e2d
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
imul eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xd0]
imul ecx, eax
test ecx, ecx
je 0x10053e6e
mov eax, 0xdfca599f
test eax, eax
je 0x10053e6e
mov dword [ebp - 0x23c], 1
jmp 0x10053e75
and dword [ebp - 0x23c], 0
cmp dword [ebp - 0x23c], 1
jbe 0x10053e8a
mov dword [ebp - 0x1cc], 1
jmp 0x10053e91
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x1cc], eax
jg 0x10053ea8
mov dword [ebp - 0x294], 1
jmp 0x10053eaf
and dword [ebp - 0x294], 0
imul eax, dword [ebp - 0x294], 0xaeff
cmp eax, dword [ebp - 0x28]
jle 0x10053eca
mov dword [ebp - 0x1d4], 1
jmp 0x10053ed1
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0x5e352544
jle 0x10053ee9
mov dword [ebp - 0x244], 1
jmp 0x10053ef0
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x244], eax
jl 0x10053f07
mov dword [ebp - 0x1dc], 1
jmp 0x10053f0e
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x7c]
jl 0x10053f2c
mov dword [ebp - 0x2cc], 1
jmp 0x10053f33
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x3c4], eax
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x388], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3ec], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2d0]
imul ecx, dword [ebp + eax*4 - 0x7c]
mov dword [ebp - 0x2d8], ecx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x7c], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x390], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x28], 0
je 0x10053f9c
cmp dword [ebp - 0x2c], 0
je 0x10053f9c
mov dword [ebp - 0x27c], 1
jmp 0x10053fa3
and dword [ebp - 0x27c], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x27c], eax
jl 0x10053fba
mov dword [ebp - 0x1e4], 1
jmp 0x10053fc1
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1e4]
jne 0x10053fd5
and dword [ebp - 0x2e0], 0
jmp 0x10053fdf
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x398], eax
cmp dword [ebp - 0x28], 0x4420ca57
jge 0x10053ffd
mov dword [ebp - 0xe8], 1
jmp 0x10054004
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x7c], ecx
cmp dword [ebp - 0xc0], 1
jg 0x1005403b
mov dword [ebp - 0x2a4], 1
jmp 0x10054042
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x2a4]
jne 0x10054068
push 0
lea ecx, [ebp - 0x350]
call fcn.10016fb3
cmp dword [eax], 0
jne 0x10054068
and dword [ebp - 0x1f4], 0
jmp 0x10054072
mov dword [ebp - 0x1f4], 1
cmp dword [ebp - 0x1f4], 0x566ec8b7
jg 0x1005408a
mov dword [ebp - 0x254], 1
jmp 0x10054091
and dword [ebp - 0x254], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x254], eax
jg 0x100540a8
cmp dword [ebp - 0x204], 0
jne 0x100540ba
mov eax, 0xa6a8
test eax, eax
jne 0x100540ba
and dword [ebp - 0x1fc], 0
jmp 0x100540c4
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0xc0cd63d7
jbe 0x100540dc
mov dword [ebp - 0x284], 1
jmp 0x100540e3
and dword [ebp - 0x284], 0
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x204], eax
jmp 0x100539c1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x350]
call fcn.10016fae
mov eax, dword [ebp - 0xa4]
mov dword [eax], 0
jmp 0x10054122
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa4]
cmp dword [eax], 3
jg 0x10054aa8
mov dword [ebp - 0x14], 0x9c3fbb4
mov dword [ebp - 0xb4], 0
jmp 0x10054151
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1005416d
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x198], 0xffffffff
jmp 0x10054144
mov eax, dword [ebp - 0x14]
add eax, 5
cmp eax, 0xb0cb
jne 0x10054186
mov dword [ebp - 0x29c], 1
jmp 0x1005418d
and dword [ebp - 0x29c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x100541a4
mov dword [ebp - 0x25c], 1
jmp 0x100541ab
and dword [ebp - 0x25c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x25c]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x100541c8
mov dword [ebp - 0x20c], 1
jmp 0x100541cf
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x20c], eax
jl 0x100541e6
mov dword [ebp - 0x214], 1
jmp 0x100541ed
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x29c]
cmp eax, dword [ebp - 0x214]
jge 0x10054310
cmp dword [ebp - 0x14], 0
je 0x10054310
mov dword [ebp - 0xe0], 0xfffffff6
mov dword [ebp - 0x178], 0x3ed423cb
mov dword [ebp - 0x2f8], 0xfffffff8
cmp dword [ebp - 0xe0], 0
jge 0x1005423c
mov dword [ebp - 0x2e8], 1
jmp 0x10054243
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x198], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x178], eax
jge 0x10054294
mov dword [ebp - 0x180], 1
jmp 0x1005429b
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x180], eax
jl 0x100542b2
mov dword [ebp - 0x188], 1
jmp 0x100542b9
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x188], eax
jg 0x100542d3
mov dword [ebp - 0x190], 1
jmp 0x100542da
and dword [ebp - 0x190], 0
imul eax, dword [ebp - 0x190], 0
imul eax, dword [ebp - 0x14]
sub eax, 0xc460
mov dword [ebp - 0x2f8], eax
mov byte [ebp - 0x5b], 0
movzx eax, byte [ebp - 0x5b]
test eax, eax
je 0x1005430e
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
jmp 0x10054372
mov dword [ebp - 0x3a8], 0xfffffff7
mov dword [ebp - 0x14], 0
jmp 0x1005432a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jg 0x10054372
mov dword [ebp - 0x1a8], 0xf4802d14
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x198], 0xfffffffc
cmp dword [ebp - 0x1a8], 1
jge 0x1005435d
mov dword [ebp - 0x1a0], 1
jmp 0x10054364
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
jmp 0x10054323
mov byte [ebp - 0x56], 0
mov dword [ebp - 0x20], 0xade1
mov dword [ebp - 0xa0], 0xe1d925b0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xa8], 0xa9f4f9a0
mov dword [ebp - 0x84], 0
mov dword [ebp - 0xac], 0
jmp 0x100543be
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x100543da
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x3b0], 0x276cc72b
jmp 0x100543b1
cmp dword [ebp - 0x20], 1
jbe 0x100543ec
mov dword [ebp - 0x1b0], 1
jmp 0x100543f3
and dword [ebp - 0x1b0], 0
cmp dword [ebp - 0x1b0], 0x2728
jg 0x1005440b
mov dword [ebp - 0x1b8], 1
jmp 0x10054412
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x1b8]
jge 0x1005442c
mov dword [ebp - 0x1c0], 1
jmp 0x10054433
and dword [ebp - 0x1c0], 0
cmp dword [ebp - 0x1c0], 0xffffffff
jg 0x10054440
cmp dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0xc8], 6
jbe 0x10054467
mov dword [ebp - 0x1c8], 1
jmp 0x1005446e
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1c8], eax
jne 0x10054485
mov dword [ebp - 0x1d0], 1
jmp 0x1005448c
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xc8]
add eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xa8], eax
je 0x100544b5
mov eax, 0x703acb6d
test eax, eax
je 0x100544b5
mov dword [ebp - 0x1d8], 1
jmp 0x100544bc
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0xa99d
jg 0x100544d1
cmp dword [ebp - 0x84], 0
je 0x100544e0
cmp dword [ebp - 0x20], 0
jne 0x100544e0
and dword [ebp - 0x1e0], 0
jmp 0x100544ea
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x1e0], eax
je 0x10054501
mov dword [ebp - 0x1e8], 1
jmp 0x10054508
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 5
jae 0x1005451d
mov dword [ebp - 0xcc], 1
jmp 0x10054524
and dword [ebp - 0xcc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcc]
mov dword [ebp + eax - 0x3b0], ecx
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0xcc], eax
jg 0x1005454e
mov dword [ebp - 0x1f0], 1
jmp 0x10054555
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0x1f0]
jle 0x10054655
push 1
lea ecx, [ebp - 0x344]
call fcn.10016f46
mov dword [ebp - 4], 2
mov dword [ebp - 0x9c], 0
jmp 0x1005459d
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 1
jge 0x100545bf
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x344]
call fcn.10016fb3
mov dword [eax], 0xe4f2
jmp 0x10054590
mov dword [ebp - 0x20], 0xffffffe5
jmp 0x100545cf
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1e
jne 0x100545f8
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x364], eax
push 0
lea ecx, [ebp - 0x344]
call fcn.10016fb3
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
jmp 0x100545c8
mov dword [ebp - 0x84], 4
jmp 0x10054611
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1b
jle 0x10054644
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x1005462e
push 0
call dword [sym.imp.KERNEL32.dll_ResumeThread]
push 0
lea ecx, [ebp - 0x344]
call fcn.10016fb3
cmp dword [eax], 0
je 0x10054642
jmp 0x10054644
jmp 0x10054604
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x344]
call fcn.10016fae
jmp 0x1005467d
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x1005467d
push 0xf3f
push 0x11c9
push 0x46a
push 0x1689
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10054aa3
mov dword [ebp - 0x100], 1
push 3
lea ecx, [ebp - 0x2b0]
call fcn.10016f46
mov dword [ebp - 4], 3
mov dword [ebp - 0x60], 0
mov dword [ebp - 0xec], 0x19b885b3
mov dword [ebp - 0xd4], 0x58069d1f
mov dword [ebp - 0x68], 5
mov dword [ebp - 0x40], 0
jmp 0x100546e5
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10054701
push dword [ebp - 0x40]
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
mov dword [eax], 4
jmp 0x100546de
mov dword [ebp - 0x40], 0
jmp 0x10054711
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10054727
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x36c], 0xfffffff6
jmp 0x1005470a
cmp dword [ebp - 0x100], 0
je 0x10054919
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
jne 0x100548fa
push 2
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
cmp dword [eax], 0xfffffffe
jae 0x1005475f
mov dword [ebp - 0x130], 1
jmp 0x10054766
and dword [ebp - 0x130], 0
cmp dword [ebp - 0x60], 0
jne 0x10054778
mov dword [ebp - 0x1f8], 1
jmp 0x1005477f
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1f8], eax
jl 0x10054796
mov dword [ebp - 0x200], 1
jmp 0x1005479d
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0x95b676b
jne 0x100547c1
mov dword [ebp - 0xf0], 1
jmp 0x100547c8
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 1
jge 0x100547dd
mov dword [ebp - 0xf8], 1
jmp 0x100547e4
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0xd4], eax
jl 0x1005480a
mov dword [ebp - 0x108], 1
jmp 0x10054811
and dword [ebp - 0x108], 0
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [eax]
je 0x10054843
push 2
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
cmp dword [eax], 0
jne 0x10054843
and dword [ebp - 0x110], 0
jmp 0x1005484d
mov dword [ebp - 0x110], 1
push 2
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
mov ecx, dword [ebp - 0x110]
cmp ecx, dword [eax]
jg 0x10054879
mov eax, 0xa94f
test eax, eax
je 0x10054879
mov dword [ebp - 0x118], 1
jmp 0x10054880
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x68], eax
jl 0x1005489d
mov dword [ebp - 0x120], 1
jmp 0x100548a4
and dword [ebp - 0x120], 0
cmp dword [ebp - 0x120], 0xfffffff7
jl 0x100548b9
mov dword [ebp - 0x128], 1
jmp 0x100548c0
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x128]
sub eax, dword [ebp - 0x60]
cmp eax, 0x2975a144
je 0x100548dc
mov dword [ebp - 0x138], 1
jmp 0x100548e3
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x130]
cmp eax, dword [ebp - 0x138]
jl 0x100548fa
and dword [ebp - 0x140], 0
jmp 0x10054904
mov dword [ebp - 0x140], 1
cmp dword [ebp - 0x140], 4
jbe 0x10054919
mov dword [ebp - 0x148], 1
jmp 0x10054920
and dword [ebp - 0x148], 0
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
mov ecx, dword [ebp - 0x148]
sub ecx, dword [eax]
je 0x10054977
mov dword [ebp - 0x300], 0xd6a5
imul eax, dword [ebp - 0x300], 0x389e
mov dword [ebp - 0x150], eax
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10016fb3
mov ecx, dword [ebp - 0x150]
mov dword [eax], ecx
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xd4], eax
jmp 0x10054a8a
mov dword [ebp - 0x374], 0xd94485e0
push 3
lea ecx, [ebp - 0x3f8]
call fcn.10016f46
mov byte [ebp - 4], 4
mov dword [ebp - 0x8c], 0
jmp 0x100549ab
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x100549cd
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x3f8]
call fcn.10016fb3
mov dword [eax], 0xfffffffd
jmp 0x1005499e
mov dword [ebp - 0x68], 0
jmp 0x100549dd
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x10054a7b
push 3
lea ecx, [ebp - 0x3e8]
call fcn.10016f46
mov byte [ebp - 4], 5
mov dword [ebp - 0x158], 0xffffffff
mov dword [ebp - 0x94], 0
jmp 0x10054a1b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x10054a3d
push dword [ebp - 0x94]
lea ecx, [ebp - 0x3e8]
call fcn.10016fb3
mov dword [eax], 1
jmp 0x10054a0e
mov byte [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x10054a5a
push 1
push 0x7c1
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x3e8]
call fcn.10016fae
jmp 0x100549d6
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3f8]
call fcn.10016fae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b0]
call fcn.10016fae
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
jmp 0x10054111
mov dword [ebp - 0x34], 0xb743d837
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0x48], 0
jmp 0x10054ac6
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10054adc
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2bc], 0x20624039
jmp 0x10054abf
mov dword [ebp - 0x48], 0
jmp 0x10054aec
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10054b02
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xdc], 0xb8a277eb
jmp 0x10054ae5
mov byte [ebp - 0x5a], 0
movzx eax, byte [ebp - 0x5a]
test eax, eax
je 0x10054b1f
push 0
push 0
push 0x20a9
push 0
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
mov dword [ebp - 0x34], 0
jmp 0x10054b2f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x10054c96
mov dword [ebp - 0x4c], 0xf1fdbd01
mov dword [ebp - 0x80], 0xffff
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x384], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bc]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp + eax*4 - 0x2bc]
mov dword [ebp - 0x394], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2bc]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ebp + ecx*4 - 0x2bc]
cmp dword [ebp + eax*4 - 0x2bc], ecx
jle 0x10054bbf
mov dword [ebp - 0x160], 1
jmp 0x10054bc6
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x160]
jne 0x10054bdd
mov dword [ebp - 0x168], 1
jmp 0x10054be4
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x4c], eax
je 0x10054c07
cmp dword [ebp - 0x6c], 0
je 0x10054c07
mov dword [ebp - 0x170], 1
jmp 0x10054c0e
and dword [ebp - 0x170], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax - 0xdc], ecx
mov dword [ebp - 0x6c], 0xfffffff3
jmp 0x10054c31
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe8
jl 0x10054c91
mov dword [ebp - 0x4c], 0
jmp 0x10054c47
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10054c63
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0xdc]
mov dword [ebp + ecx*4 - 0xdc], eax
jmp 0x10054c40
mov dword [ebp - 0x80], 0
jmp 0x10054c73
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x11
je 0x10054c8f
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x10054c8d
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
jmp 0x10054c6c
jmp 0x10054c2a
jmp 0x10054b28
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret