Function at 0x100517e5
Capabilities:
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008617f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2cc
push esi
push 3
lea ecx, [ebp - 0x264]
call fcn.100181d6
and dword [ebp - 4], 0
mov dword [ebp - 0x58], 0xb13638ec
mov dword [ebp - 0x29c], 0xa205b290
mov dword [ebp - 0x90], 0
jmp 0x1005183f
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x10051861
push dword [ebp - 0x90]
lea ecx, [ebp - 0x264]
call fcn.10018274
mov dword [eax], 0x3342eb90
jmp 0x10051832
mov dword [ebp - 0x58], 2
jmp 0x10051871
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x100519e9
push 3
lea ecx, [ebp - 0x248]
call fcn.100181d6
mov byte [ebp - 4], 1
mov dword [ebp - 0xb8], 0
jmp 0x100518a5
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x100518c7
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x248]
call fcn.10018274
mov dword [eax], 0xc4530722
jmp 0x10051898
push 2
lea ecx, [ebp - 0x248]
call fcn.10018274
mov dword [eax], 2
jmp 0x10051900
push 2
lea ecx, [ebp - 0x248]
call fcn.10018274
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x158]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x248]
call fcn.10018274
cmp dword [eax], 0
jl 0x100519b3
mov dword [ebp - 0x94], 0
mov byte [ebp - 0x43], 0
movzx eax, byte [ebp - 0x43]
test eax, eax
je 0x10051943
push 0xd90
push 0x7e1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov dword [ebp - 0x94], 0
jmp 0x1005195c
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 2
jg 0x100519ae
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x10051980
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
mov byte [ebp - 0x42], 0
movzx eax, byte [ebp - 0x42]
test eax, eax
je 0x100519ac
push 0
push 0x1195
push 0x2180
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MoveToEx]
jmp 0x1005194f
jmp 0x100518dc
push dword [ebp - 0x58]
lea ecx, [ebp - 0x264]
call fcn.10018274
mov esi, eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0x264]
call fcn.10018274
mov ecx, dword [esi]
mov dword [eax], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x248]
call fcn.10018258
jmp 0x1005186a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.10018258
mov dword [ebp - 0x30], 0xfeba
mov dword [ebp - 0x238], 0xfffffffa
mov dword [ebp - 0x74], 0
mov dword [ebp - 0xbc], 0x68029989
mov dword [ebp - 0x24], 0xee4e9120
mov dword [ebp - 0xc4], 0x1bf0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x2a8], 0x8b697689
mov dword [ebp - 0x228], 0xd4f39ab1
mov dword [ebp - 0xec], 0xfbc9ee52
mov dword [ebp - 0xd0], 0x6c5f514f
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x10051add
mov dword [ebp - 0x2c8], 0x64f14790
mov dword [ebp - 0x2b0], 0xfffffff6
mov dword [ebp - 0x294], 0xfffffff6
mov dword [ebp - 0x290], 0xc96c7979
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0x24]
sub eax, 0x351cdcb3
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x220]
jge 0x10051ac5
mov dword [ebp - 0x1dc], 1
jmp 0x10051acc
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xbc], eax
jmp 0x10051ede
mov dword [ebp - 0xb4], 2
mov dword [ebp - 0xa8], 0
jmp 0x10051b00
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x10051b1c
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x2d8], 0xfffffffa
jmp 0x10051af3
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
sub eax, 0x696af5b5
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x30], 0
jmp 0x10051b43
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1a
jle 0x10051ede
mov dword [ebp - 0x1e4], 0x4abf
mov dword [ebp - 0x38], 9
push 1
lea ecx, [ebp - 0x28c]
call fcn.100181d6
mov dword [ebp - 4], 2
mov dword [ebp - 0x70], 0xb80730a0
mov dword [ebp - 0xb0], 0
jmp 0x10051b92
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x10051bb4
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x28c]
call fcn.10018274
mov dword [eax], 0x4ea65d33
jmp 0x10051b85
mov dword [ebp - 0xbc], 0xeaa3e8f0
cmp dword [ebp - 0xbc], 0
je 0x10051d85
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
imul eax, dword [ebp - 0xd0], 0x2a6b
cmp eax, 0xfffffff9
jg 0x10051c00
mov dword [ebp - 0xe4], 1
jmp 0x10051c07
and dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xe4], eax
jg 0x10051c21
mov dword [ebp - 0x194], 1
jmp 0x10051c28
and dword [ebp - 0x194], 0
push 0
lea ecx, [ebp - 0x28c]
call fcn.10018274
mov ecx, dword [ebp - 0x194]
mov dword [eax], ecx
mov eax, dword [ebp - 0xec]
imul eax, dword [ebp - 0x38]
test eax, eax
je 0x10051c5d
cmp dword [ebp - 0x38], 0
je 0x10051c5d
mov dword [ebp - 0x19c], 1
jmp 0x10051c64
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 0
jbe 0x10051c79
mov dword [ebp - 0xd8], 1
jmp 0x10051c80
and dword [ebp - 0xd8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
mov dword [ebp + eax - 0x2d8], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0xd8], eax
jle 0x10051caa
mov dword [ebp - 0xf4], 1
jmp 0x10051cb1
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0xf4], eax
jle 0x10051cd4
mov eax, 0x8731485a
test eax, eax
je 0x10051cd4
mov dword [ebp - 0x1a4], 1
jmp 0x10051cdb
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1a4], eax
jle 0x10051cf5
mov dword [ebp - 0x230], 1
jmp 0x10051cfc
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x238]
mov dword [ebp - 0x2a4], eax
mov eax, 0x2c21
test eax, eax
je 0x10051d2d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d8], 0
je 0x10051d2d
mov dword [ebp - 0xfc], 1
jmp 0x10051d34
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0xfc]
jne 0x10051d49
cmp dword [ebp - 0xc4], 0
cmp dword [ebp - 0x74], 1
jl 0x10051d64
cmp dword [ebp - 0x218], 0
je 0x10051d64
mov dword [ebp - 0x1ac], 1
jmp 0x10051d6b
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x1ac]
test eax, eax
je 0x10051d85
mov dword [ebp - 0x104], 1
jmp 0x10051d8c
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x104], eax
jne 0x10051da6
mov dword [ebp - 0x1b4], 1
jmp 0x10051dad
and dword [ebp - 0x1b4], 0
cmp dword [ebp - 0x1b4], 0x8004
jg 0x10051dc5
mov dword [ebp - 0x10c], 1
jmp 0x10051dcc
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x10c], eax
jl 0x10051de3
mov dword [ebp - 0x1bc], 1
jmp 0x10051dea
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0xb4]
inc eax
cmp eax, dword [ebp - 0x74]
jle 0x10051e0b
mov dword [ebp - 0x114], 1
jmp 0x10051e12
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x24], 0
jmp 0x10051e31
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 8
je 0x10051eca
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x1c4], 0xe6c4949f
mov dword [ebp - 0x70], 0
jmp 0x10051e5f
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffef
jge 0x10051ec5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2d8]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x11c], eax
jne 0x10051e92
mov dword [ebp - 0x1cc], 1
jmp 0x10051e99
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0x1cc]
jge 0x10051eb3
mov dword [ebp - 0x1d4], 1
jmp 0x10051eba
and dword [ebp - 0x1d4], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x38], eax
jmp 0x10051e58
jmp 0x10051e2a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28c]
call fcn.10018258
jmp 0x10051b3c
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1005203d
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x200], 5
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x10051f1c
push 0x220b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x9c], 0
jmp 0x10051f35
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 6
jle 0x10052023
mov dword [ebp - 0x68], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x10051f59
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0xffffffe4
jl 0x1005201e
push 2
lea ecx, [ebp - 0x270]
call fcn.100181d6
mov dword [ebp - 4], 3
mov dword [ebp - 0x64], 1
mov dword [ebp - 0xac], 0
jmp 0x10051f97
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 2
jge 0x10051fb9
push dword [ebp - 0xac]
lea ecx, [ebp - 0x270]
call fcn.10018274
mov dword [eax], 0x405b4019
jmp 0x10051f8a
mov dword [ebp - 0x64], 0
jmp 0x10051fc9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1005200a
mov dword [ebp - 0x204], 0xd5fac122
push dword [ebp - 0x64]
lea ecx, [ebp - 0x270]
call fcn.10018274
mov eax, dword [eax]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x200], eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x270]
call fcn.10018274
mov eax, dword [eax]
mov dword [ebp - 0x204], eax
jmp 0x10051fc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.10018258
jmp 0x10051f52
jmp 0x10051f28
push 0
push 0x1cf6
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x10052d4a
mov dword [ebp - 0x78], 0xeede0b40
mov dword [ebp - 0x60], 2
mov dword [ebp - 0x5c], 0xffffffff
mov dword [ebp - 0xcc], 0x108531d1
mov dword [ebp - 0xd4], 1
mov dword [ebp - 0x18], 0xb653b1da
mov dword [ebp - 0xc0], 0x7120dd93
push 3
lea ecx, [ebp - 0x1f0]
call fcn.100181d6
mov dword [ebp - 4], 4
mov dword [ebp - 0x2ac], 3
mov dword [ebp - 0xa4], 0
jmp 0x100520ae
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x100520d0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x1f0]
call fcn.10018274
mov dword [eax], 0x1d25bb08
jmp 0x100520a1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x60], 1
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x10052127
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0xcc], eax
jne 0x1005210c
mov dword [ebp - 0x124], 1
jmp 0x10052113
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
sub eax, 0x52a4105f
mov dword [ebp - 0x60], eax
je 0x10052127
cmp dword [ebp - 0x5c], 0
push 0xfffffffffffffff6
pop eax
test eax, eax
jle 0x1005213a
mov dword [ebp - 0x22c], 1
jmp 0x10052141
and dword [ebp - 0x22c], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0xcc], 0xffffffff
jl 0x1005216e
mov dword [ebp - 0x1b8], 1
jmp 0x10052175
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
cmp eax, dword [ebp - 0x1b8]
jne 0x10052192
mov dword [ebp - 0x138], 1
jmp 0x10052199
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x18], 2
jmp 0x100521bb
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x1005247d
mov dword [ebp - 0x24c], 4
push 1
lea ecx, [ebp - 0x258]
call fcn.100181d6
mov byte [ebp - 4], 5
mov dword [ebp - 0x20c], 0xb319bd1
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x190], 3
mov dword [ebp - 0x88], 0
jmp 0x10052217
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10052239
push dword [ebp - 0x88]
lea ecx, [ebp - 0x258]
call fcn.10018274
mov dword [eax], 1
jmp 0x1005220a
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10018274
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x24c], 0x718ce682
jne 0x10052278
mov dword [ebp - 0x140], 1
jmp 0x1005227f
and dword [ebp - 0x140], 0
cmp dword [ebp - 0x140], 0
jne 0x10052294
mov dword [ebp - 0x1d0], 1
jmp 0x1005229b
and dword [ebp - 0x1d0], 0
mov esi, dword [ebp - 0xd4]
add esi, dword [ebp - 0x1d0]
push 0
lea ecx, [ebp - 0x258]
call fcn.10018274
cmp esi, dword [eax]
jl 0x100522c4
mov dword [ebp - 0x148], 1
jmp 0x100522cb
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 1
jg 0x100522e0
mov dword [ebp - 0x198], 1
jmp 0x100522e7
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x198], eax
jle 0x100522fe
mov dword [ebp - 0x150], 1
jmp 0x10052305
and dword [ebp - 0x150], 0
cmp dword [ebp - 0x150], 0xfffffff9
jle 0x1005231a
mov dword [ebp - 0x214], 1
jmp 0x10052321
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x18], 0
jne 0x10052342
cmp dword [ebp - 0x78], 0
jne 0x10052342
and dword [ebp - 0x1c0], 0
jmp 0x1005234c
mov dword [ebp - 0x1c0], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x1c0], eax
jge 0x10052363
mov dword [ebp - 0xdc], 1
jmp 0x1005236a
and dword [ebp - 0xdc], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10018274
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
lea eax, [ecx + eax - 7]
mov dword [ebp - 0xc0], eax
mov esi, dword [ebp - 0xc0]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10018274
cmp dword [eax], esi
jge 0x100523ae
mov dword [ebp - 0x1a0], 1
jmp 0x100523b5
and dword [ebp - 0x1a0], 0
push 0
lea ecx, [ebp - 0x1f0]
call fcn.10018274
mov ecx, dword [ebp - 0x1a0]
cmp ecx, dword [eax]
jge 0x100523d8
mov dword [ebp - 0x160], 1
jmp 0x100523df
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
add eax, 8
jne 0x100523fa
push 5
pop eax
test eax, eax
jne 0x100523fa
and dword [ebp - 0xc8], 0
jmp 0x10052404
mov dword [ebp - 0xc8], 1
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1f0]
call fcn.10018274
mov ecx, dword [ebp - 0xc8]
mov dword [eax], ecx
cmp dword [ebp - 0xc8], 0
jae 0x1005242f
mov dword [ebp - 0x1e0], 1
jmp 0x10052436
and dword [ebp - 0x1e0], 0
push 0
lea ecx, [ebp - 0x258]
call fcn.10018274
mov ecx, dword [ebp - 0x1e0]
cmp ecx, dword [eax]
je 0x10052459
mov dword [ebp - 0x168], 1
jmp 0x10052460
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x258]
call fcn.10018258
jmp 0x100521b4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f0]
call fcn.10018258
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x10], 0xe83
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x280], 0xffffffff
mov dword [ebp - 0x27c], 0xffffffff
mov dword [ebp - 0x278], 0xffffffff
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x1c], 0
jmp 0x100524e5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x100524fb
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x130], 0xf37831e4
jmp 0x100524de
mov dword [ebp - 0x1c], 0
jmp 0x1005250b
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10052521
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x234], 0x511bd77d
jmp 0x10052504
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x10], 2
jmp 0x10052538
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10052768
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x28]
cmp eax, 7
jne 0x1005255a
mov dword [ebp - 0x1a8], 1
jmp 0x10052561
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
add eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x130]
jl 0x1005258e
mov dword [ebp - 0x170], 1
jmp 0x10052595
and dword [ebp - 0x170], 0
cmp dword [ebp - 0x170], 1
je 0x100525aa
mov dword [ebp - 0x1c8], 1
jmp 0x100525b1
and dword [ebp - 0x1c8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x130]
cmp eax, dword [ebp - 0x1c8]
jge 0x100525d1
mov dword [ebp - 0x178], 1
jmp 0x100525d8
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x130]
cmp eax, dword [ebp - 0x178]
jge 0x100525f6
mov dword [ebp - 0x1b0], 1
jmp 0x100525fd
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1b0]
sub ecx, dword [ebp + eax*4 - 0x130]
jne 0x10052621
mov eax, 0xc0e07525
test eax, eax
jne 0x10052621
and dword [ebp - 0x180], 0
jmp 0x1005262b
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x130]
cmp dword [ebp - 0x180], eax
jl 0x10052649
mov dword [ebp - 0x1d8], 1
jmp 0x10052650
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x1b07fb07
jge 0x10052668
mov dword [ebp - 0x188], 1
jmp 0x1005266f
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
sub eax, 6
cmp eax, 0xc7eb
jne 0x1005268b
mov dword [ebp - 0x120], 1
jmp 0x10052692
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x130]
cmp dword [ebp - 0x120], eax
jge 0x100526b0
mov dword [ebp - 0x134], 1
jmp 0x100526b7
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
dec eax
dec eax
mov dword [ebp - 0x13c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x13c]
mov dword [ebp + eax - 0x280], ecx
cmp dword [ebp - 0x13c], 0
je 0x100526fd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x234], 0
je 0x100526fd
mov dword [ebp - 0x144], 1
jmp 0x10052704
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x130]
imul eax, dword [ebp - 0x144]
test eax, eax
je 0x1005272d
cmp dword [ebp - 0x98], 0
je 0x1005272d
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x98], eax
jmp 0x10052763
mov dword [ebp - 0x28], 0
jmp 0x1005273d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x10052763
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x27c], 0
je 0x10052752
jmp 0x10052763
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x130], 0
je 0x10052761
jmp 0x10052763
jmp 0x10052736
jmp 0x10052531
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1fc], eax
push 3
lea ecx, [ebp - 0x54]
call fcn.100181d6
mov dword [ebp - 4], 6
mov dword [ebp - 0xe0], 0xc245e320
mov dword [ebp - 0x20], 0
jmp 0x1005279c
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100527b5
push dword [ebp - 0x20]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov dword [eax], 1
jmp 0x10052795
mov dword [ebp - 0x20], 0
jmp 0x100527c5
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x100527db
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], 0xffffffff
jmp 0x100527be
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x84], 0
jmp 0x10052809
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x84], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 2
jg 0x10052c55
mov dword [ebp - 0x14], 0x74b666a7
mov dword [ebp - 0x40], 0xfffffffd
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov esi, eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [esi]
mov dword [eax], ecx
mov dword [ebp - 0x14], 2
jmp 0x1005286b
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x10052c50
mov dword [ebp - 0x118], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
cmp dword [eax], 0xfa9ef816
jbe 0x1005289e
mov dword [ebp - 0x14c], 1
jmp 0x100528a5
and dword [ebp - 0x14c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [eax]
jge 0x100528c6
mov dword [ebp - 0x21c], 1
jmp 0x100528cd
and dword [ebp - 0x21c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov eax, dword [eax]
inc eax
jne 0x100528ef
mov eax, 0xb06d
test eax, eax
jne 0x100528ef
and dword [ebp - 0x154], 0
jmp 0x100528f9
mov dword [ebp - 0x154], 1
cmp dword [ebp - 0x154], 8
jne 0x1005290e
mov dword [ebp - 0x15c], 1
jmp 0x10052915
and dword [ebp - 0x15c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x15c]
cmp ecx, dword [eax]
jl 0x10052936
mov dword [ebp - 0x164], 1
jmp 0x1005293d
and dword [ebp - 0x164], 0
cmp dword [ebp - 0x164], 0x972e
jge 0x10052955
mov dword [ebp - 0x16c], 1
jmp 0x1005295c
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x16c], eax
jle 0x10052973
mov dword [ebp - 0x174], 1
jmp 0x1005297a
and dword [ebp - 0x174], 0
push 1
lea ecx, [ebp - 0x54]
call fcn.10018274
mov esi, dword [ebp - 0x174]
add esi, dword [eax]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
cmp esi, dword [eax]
jne 0x100529b1
mov dword [ebp - 0x17c], 1
jmp 0x100529b8
and dword [ebp - 0x17c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x17c]
cmp ecx, dword [eax]
je 0x100529d9
mov dword [ebp - 0x184], 1
jmp 0x100529e0
and dword [ebp - 0x184], 0
cmp dword [ebp - 0x184], 1
jb 0x100529f5
mov dword [ebp - 0x18c], 1
jmp 0x100529fc
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xe0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xe0], eax
jl 0x10052a29
mov dword [ebp - 0x23c], 1
jmp 0x10052a30
and dword [ebp - 0x23c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov esi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x10052a64
mov dword [ebp - 0xe8], 1
jmp 0x10052a6b
and dword [ebp - 0xe8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0xe8]
cmp ecx, dword [eax]
jge 0x10052a8c
mov dword [ebp - 0xf0], 1
jmp 0x10052a93
and dword [ebp - 0xf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xf0], eax
jge 0x10052ab4
mov dword [ebp - 0xf8], 1
jmp 0x10052abb
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x118], eax
mov esi, dword [ebp - 0x40]
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
sub esi, dword [eax]
push 4
pop eax
shl eax, 0
sub esi, dword [ebp + eax - 0x84]
imul esi, esi, 0xa3bb
push 2
lea ecx, [ebp - 0x54]
call fcn.10018274
imul esi, dword [eax]
add esi, 0x5d0
cmp esi, dword [ebp - 0x40]
jg 0x10052b21
mov eax, 0x6315bfeb
test eax, eax
je 0x10052b21
mov dword [ebp - 0x100], 1
jmp 0x10052b28
and dword [ebp - 0x100], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x100]
cmp ecx, dword [eax]
jle 0x10052b65
push 2
lea ecx, [ebp - 0x54]
call fcn.10018274
cmp dword [eax], 0
jne 0x10052b65
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x84], 0
je 0x10052b80
push 1
lea ecx, [ebp - 0x54]
call fcn.10018274
cmp dword [eax], 0
je 0x10052b80
mov dword [ebp - 0x108], 1
jmp 0x10052b87
and dword [ebp - 0x108], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x108]
cmp ecx, dword [eax]
jg 0x10052ba8
mov dword [ebp - 0x110], 1
jmp 0x10052baf
and dword [ebp - 0x110], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0x54]
call fcn.10018274
mov ecx, dword [ebp - 0x110]
cmp ecx, dword [eax]
jg 0x10052c09
mov dword [ebp - 0x40], 0
jmp 0x10052bde
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x10052bf1
cmp dword [ebp - 0x118], 0
je 0x10052bef
jmp 0x10052bf1
jmp 0x10052bd7
mov byte [ebp - 0x45], 0
movzx eax, byte [ebp - 0x45]
test eax, eax
je 0x10052c07
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
jmp 0x10052c4b
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x10052c20
push 0x202
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10052c4b
push 0
push 0
push 0x66e
push 0
push 0x243d
push 0
push 0x1291
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x10052864
jmp 0x100527ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x54]
call fcn.10018258
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x208], 2
mov dword [ebp - 0xa0], 0
jmp 0x10052ca3
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffff8
jle 0x10052d14
mov dword [ebp - 0x8c], 0xe56f9b2c
mov dword [ebp - 0x1f8], 7
mov dword [ebp - 0x8c], 0x11
jmp 0x10052cd9
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jl 0x10052d12
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x208], eax
mov byte [ebp - 0x44], 0
movzx eax, byte [ebp - 0x44]
test eax, eax
je 0x10052d10
push 0
push 0
push 0x1645
push 0xd82
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
jmp 0x10052ccc
jmp 0x10052c96
mov eax, dword [ebp - 0x6c]
mov dword [eax], 0
jmp 0x10052d2a
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x6c]
cmp dword [eax], 3
jge 0x10052d4a
mov eax, dword [ebp - 0x6c]
push dword [eax]
mov ecx, dword [ebp - 0x210]
call fcn.10018274
mov dword [eax], 1
jmp 0x10052d1f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret