Function at 0x1000aa50
Capabilities:
Check os version
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x178
push ebx
mov dword [ebp - 4], 0
push dword [ebp + 8]
call fcn.1000a380
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x1000aa7e
mov dword [ebp - 4], 0
jmp 0x1000bb8c
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x40]
mov dword [ebp - 0xc], ebx
cmp dword [ebp - 0xc], 0
jne 0x1000aa9e
call sub.USER32.dll_CreatePopupMenu
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0xc]
mov dword [eax + 0x40], ebx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov ebx, dword [ebp - 8]
mov eax, dword [ebx + 0x44]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0
cmp dword [ebp + 0x14], 0
jne 0x1000aad5
mov dword [ebp - 4], 0
jmp 0x1000bb8c
cmp dword [ebp - 0x1c], 0
jne 0x1000aadd
jmp 0x1000ab0a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov ebx, dword [ebp + 0x14]
cmp dword [eax + 8], ebx
jne 0x1000aafc
mov dword [ebp - 4], 0
jmp 0x1000bb8c
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0xac]
mov dword [ebp - 0x1c], eax
jmp 0x1000aad5
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x44]
mov dword [ebp - 0x1c], ebx
cmp dword [ebp + 0xc], 0
jne 0x1000ab24
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ebx
jmp 0x1000abfc
cmp dword [ebp - 0x1c], 0
jne 0x1000ab2f
jmp 0x1000abfc
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp + 0xc]
cmp dword [ebx + 8], eax
jne 0x1000abeb
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
mov eax, dword [ebp - 0x20]
push dword [eax]
call sub.USER32.dll_GetSubMenu
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x1000abe9
call sub.USER32.dll_CreatePopupMenu
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0x410
mov eax, dword [ebp - 0x20]
movsx ebx, byte [eax + 0xd]
test ebx, ebx
je 0x1000ab7f
or dword [ebp - 0x28], 8
mov ebx, dword [ebp - 0x20]
movsx eax, byte [ebx + 0xc]
test eax, eax
je 0x1000ab92
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
jmp 0x1000ab96
or dword [ebp - 0x28], 2
mov eax, dword [ebp - 0x20]
movsx ebx, byte [eax + 0xe]
test ebx, ebx
je 0x1000aba8
or dword [ebp - 0x28], 0x100
mov ebx, dword [ebp - 0x20]
lea eax, [ebx + 0x34]
push eax
push dword [ebp - 0x10]
push dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
mov eax, dword [ebp - 0x20]
push dword [eax]
call sub.USER32.dll_ModifyMenuW
mov eax, dword [ebp - 0x20]
cmp dword [eax + 0x10], 0
je 0x1000abe9
push 0
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
push 0x400
mov eax, dword [ebp - 0x20]
push dword [eax + 4]
push dword [ebp - 0x10]
call sub.USER32.dll_SetMenuItemBitmaps
jmp 0x1000abfc
mov eax, dword [ebp - 0x20]
mov ebx, dword [eax + 0xac]
mov dword [ebp - 0x1c], ebx
jmp 0x1000ab24
mov ebx, dword [ebp - 8]
mov eax, dword [ebx + 0x44]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0
cmp dword [ebp - 0x1c], 0
jne 0x1000ac47
push 0xb0
call sub.msvcrt.dll_malloc
add esp, 4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x1000ac36
push edi
mov edi, dword [ebp - 0x28]
xor eax, eax
mov ecx, 0x2c
rep stosd dword es:[edi], eax
pop edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x20]
mov dword [eax + 0x44], ebx
jmp 0x1000aca6
mov ebx, dword [ebp - 0x1c]
cmp dword [ebx + 0xac], 0
jne 0x1000ac8b
push 0xb0
call sub.msvcrt.dll_malloc
add esp, 4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
je 0x1000ac77
push edi
mov edi, dword [ebp - 0x28]
xor eax, eax
mov ecx, 0x2c
rep stosd dword es:[edi], eax
pop edi
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
mov dword [eax + 0xac], ebx
jmp 0x1000aca6
mov ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx + 0xac]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0
jmp 0x1000ac47
cmp dword [ebp - 0x20], 0
jne 0x1000acb8
mov dword [ebp - 4], 0
jmp 0x1000bb8c
mov eax, dword [ebp - 8]
mov ebx, dword [eax + 0x44]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], 0
cmp dword [ebp - 0x1c], 0
jne 0x1000acd0
jmp 0x1000acf1
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp dword [ebx], eax
jne 0x1000acdd
inc dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov ebx, dword [eax + 0xac]
mov dword [ebp - 0x1c], ebx
jmp 0x1000acc8
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebx], eax
mov eax, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x18]
mov dword [eax + 4], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp + 0x14]
mov dword [ebx + 8], eax
mov al, byte [ebp + 0x1c]
neg al
mov ebx, dword [ebp - 0x20]
mov byte [ebx + 0xc], al
mov al, byte [ebp + 0x20]
neg al
mov ebx, dword [ebp - 0x20]
mov byte [ebx + 0xd], al
mov al, byte [ebp + 0x24]
neg al
mov ebx, dword [ebp - 0x20]
mov byte [ebx + 0xe], al
push dword [ebp + 0x10]
push 0x33
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x34]
push ebx
call fcn.10059450
push 0
push 0xffffffffffffffff
push dword [ebp + 0x28]
push 0x10
mov ebx, dword [ebp - 0x20]
lea eax, [ebx + 0x9a]
push eax
call fcn.100545d0
push 0
push 0xffffffffffffffff
push dword [ebp + 0x18]
push 0x1f
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x14]
push ebx
call fcn.100545d0
mov dword [ebp - 0x24], 0x400
push 0x10069b4c
push dword [ebp + 0x10]
call fcn.10059510
test eax, eax
jne 0x1000ad8b
or dword [ebp - 0x24], 0x800
jmp 0x1000ad91
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x20]
movsx ebx, byte [eax + 0xd]
test ebx, ebx
je 0x1000ada0
or dword [ebp - 0x24], 8
mov ebx, dword [ebp - 0x20]
movsx eax, byte [ebx + 0xc]
test eax, eax
je 0x1000adb3
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
jmp 0x1000adb7
or dword [ebp - 0x24], 2
mov eax, dword [ebp - 0x20]
movsx ebx, byte [eax + 0xe]
test ebx, ebx
je 0x1000adc9
or dword [ebp - 0x24], 0x100
push 0xffffffffffffffff
push dword [ebp + 0x28]
call fcn.10058f30
test eax, eax
je 0x1000ae21
push 0xffffffffffffffff
push dword [ebp + 0x28]
push 0x10069b50
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x34]
push ebx
call fcn.100595c0
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
call fcn.10059940
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push dword [ebp + 0x14]
push dword [ebp - 0x24]
push dword [ebp - 0x10]
call sub.USER32.dll_AppendMenuW
mov dword [ebp - 4], eax
push dword [ebp - 0x2c]
call fcn.1005a790
push dword [ebp - 0x28]
call fcn.1005a790
jmp 0x1000ae39
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x34]
push ebx
push dword [ebp + 0x14]
push dword [ebp - 0x24]
push dword [ebp - 0x10]
call sub.USER32.dll_AppendMenuW
mov dword [ebp - 4], eax
push 0xffffffffffffffff
push dword [ebp + 0x18]
call fcn.10058f30
test eax, eax
je 0x1000b307
mov dword [ebp - 0x28], 0
push 1
push 0x10067e58
call fcn.100590d0
push eax
push dword [ebp + 0x18]
push 1
call fcn.10058ae0
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
cmp dword [ebp - 0x2c], 0
jle 0x1000aea8
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2c]
inc eax
push eax
push dword [ebp + 0x18]
call fcn.10058f90
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x38]
push eax
call fcn.100545d0
jmp 0x1000aeba
push 0
push 0xffffffffffffffff
push dword [ebp + 0x18]
push 0xffffffffffffffff
lea eax, [ebp - 0x38]
push eax
call fcn.100545d0
push 8
push str.RCDATA_
push 0xffffffffffffffff
push 7
lea eax, [ebp - 0x38]
push eax
call fcn.10058e10
push eax
call fcn.100546b0
test eax, eax
jne 0x1000af05
push 0
push 0
push dword [ebp - 0x38]
call fcn.1005a130
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push dword [0x10077588]
call fcn.10035da0
mov dword [ebp - 0x28], eax
push dword [ebp - 0x3c]
call fcn.1005a790
jmp 0x1000b2dc
push 8
push str.BITMAP_
push 0xffffffffffffffff
push 7
lea eax, [ebp - 0x38]
push eax
call fcn.10058e10
push eax
call fcn.100546b0
test eax, eax
jne 0x1000af68
push 0
push 0x32
call sub.USER32.dll_GetSystemMetrics
push eax
push 0x31
call sub.USER32.dll_GetSystemMetrics
push eax
push 0
push dword [ebp - 0x38]
push dword [0x10077588]
call sub.USER32.dll_LoadImageA
mov ebx, dword [ebp - 0x20]
mov dword [ebx + 0x10], eax
push 0
mov eax, dword [ebp - 0x20]
push dword [eax + 0x10]
push 0x400
push dword [ebp - 0x18]
push dword [ebp - 0x10]
call sub.USER32.dll_SetMenuItemBitmaps
jmp 0x1000b2dc
push 6
push str.ICON_
push 0xffffffffffffffff
push 5
lea eax, [ebp - 0x38]
push eax
call fcn.10058e10
push eax
call fcn.100546b0
test eax, eax
sete al
shr eax, 1
sbb eax, eax
push 0xe
push 0x100699e8
push 0xffffffffffffffff
lea ebx, [ebp - 0x38]
push ebx
mov ebx, eax
call fcn.100546b0
test eax, eax
sete al
shr eax, 1
sbb eax, eax
or ebx, eax
je 0x1000afd9
push pe_nt_image_headers32
push 0x32
call sub.USER32.dll_GetSystemMetrics
push eax
push 0x31
call sub.USER32.dll_GetSystemMetrics
push eax
push 1
push dword [ebp - 0x38]
push dword [0x10077588]
call sub.USER32.dll_LoadImageA
mov dword [ebp - 0x28], eax
jmp 0x1000b2dc
push 9
push str.ICONFONT
push 0xffffffffffffffff
push 0
mov eax, dword [ebp - 0x2c]
dec eax
push eax
push dword [ebp + 0x18]
call fcn.10058e10
push eax
call fcn.100592a0
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b2dc
lea eax, [ebp - 0x44]
push eax
call fcn.100015d0
add esp, 4
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x4c], 0
push 1
push 0x10067e58
call fcn.100590d0
push eax
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.10058ae0
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x1000b06d
push dword [ebp - 0x38]
call fcn.1005a130
mov dword [ebp - 0x16c], eax
push dword [ebp - 0x16c]
lea eax, [ebp - 0x44]
push eax
call fcn.10001700
push dword [ebp - 0x16c]
call fcn.1005a790
jmp 0x1000b162
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2c]
dec eax
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10058e10
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x174]
push eax
call fcn.100545d0
push dword [ebp - 0x174]
call fcn.1005a130
mov dword [ebp - 0x178], eax
push dword [ebp - 0x178]
lea eax, [ebp - 0x44]
push eax
call fcn.10001700
push dword [ebp - 0x178]
call fcn.1005a790
lea eax, [ebp - 0x174]
push eax
call fcn.10055990
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2c]
inc eax
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10058f90
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x38]
push eax
call fcn.100545d0
push 1
push 0x10067e58
call fcn.100590d0
push eax
lea eax, [ebp - 0x38]
push eax
push 1
call fcn.10058ae0
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jne 0x1000b132
lea eax, [ebp - 0x38]
push eax
call fcn.10054df0
mov dword [ebp - 0x48], eax
jmp 0x1000b162
mov eax, dword [ebp - 0x2c]
dec eax
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10058e10
push eax
call fcn.10054df0
mov dword [ebp - 0x48], eax
push 0xffffffffffffffff
mov eax, dword [ebp - 0x2c]
inc eax
push eax
lea eax, [ebp - 0x38]
push eax
call fcn.10058f90
push eax
call fcn.10054df0
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 0
lea eax, [ebp - 0x168]
push eax
push edi
mov edi, eax
xor eax, eax
mov ecx, 0x45
rep stosd dword es:[edi], eax
pop edi
pop eax
mov dword [ebp - 0x168], 0x114
lea eax, [ebp - 0x168]
push eax
call sub.KERNEL32.dll_GetVersionExW
cmp dword [ebp - 0x158], 2
jne 0x1000b1b4
cmp dword [ebp - 0x164], 5
jbe 0x1000b1b4
mov dword [ebp - 0x54], 0xffffffff
cmp dword [ebp - 0x54], 0
je 0x1000b263
push dword [0x10069b10]
call fcn.10034b20
fld dword [0x10069b10]
fcompi st(1)
fstp st(0)
jne 0x1000b21c
push 1
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xc
lea eax, [ebp - 0x44]
push eax
call fcn.10001780
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.100316c0
add esp, 8
lea eax, [ebp - 0x178]
push eax
call fcn.10034e90
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x178]
push eax
call fcn.100318d0
add esp, 4
jmp 0x1000b261
push 1
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xb
lea eax, [ebp - 0x44]
push eax
call fcn.10001780
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.100316c0
add esp, 8
lea eax, [ebp - 0x178]
push eax
call fcn.10034e90
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x178]
push eax
call fcn.100318d0
add esp, 4
jmp 0x1000b2a8
push 1
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push 0xa
lea eax, [ebp - 0x44]
push eax
call fcn.10001780
push eax
lea eax, [ebp - 0x178]
push eax
call fcn.100316c0
add esp, 8
lea eax, [ebp - 0x178]
push eax
call fcn.10034e90
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x178]
push eax
call fcn.100318d0
add esp, 4
mov eax, dword [ebp - 0x20]
lea ebx, [eax + 0x10]
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x48]
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push dword [ebp - 0x18]
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.1000bd70
push dword [ebp - 0x50]
call sub.GDI32.dll_DeleteObject
lea ebx, [ebp - 0x44]
push ebx
call fcn.10001610
add esp, 4
cmp dword [ebp - 0x28], 0
je 0x1000b2fe
mov ebx, dword [ebp - 0x20]
lea eax, [ebx + 0x10]
push eax
push 1
push dword [ebp - 0x28]
push 1
push dword [ebp - 0x18]
push dword [ebp - 0x10]
push dword [ebp + 8]
call fcn.1000bba0
lea eax, [ebp - 0x38]
push eax
call fcn.10055990
push 0xffffffffffffffff
push dword [ebp + 0x28]
call fcn.10058f30
test eax, eax
je 0x1000bb8c
mov eax, dword [ebp + 8]
push dword [eax]
call fcn.1003a480
mov dword [ebp - 0x28], eax
push dword [ebp - 0x28]
call fcn.1003a2b0
test eax, eax
je 0x1000b349
push 0
push 0
push dword [ebp - 0x28]
call fcn.1003a2b0
push eax
call sub.USER32.dll_CopyAcceleratorTableW
mov dword [ebp - 0x18], eax
jmp 0x1000b350
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x3c], 1
mov dword [ebp - 0x38], 0x11
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
push dword [ebp - 0x18]
push 0
push 1
push 0
push 0xffffffffffffffff
push 6
lea eax, [ebp - 0x4c]
push eax
call fcn.10053100
add esp, 0x1c
cmp dword [ebp - 0x18], 0
jle 0x1000b3c5
push dword [ebp - 0x18]
mov eax, dword [ebp - 0x4c]
lea ebx, [eax]
push ebx
push dword [ebp - 0x28]
call fcn.1003a2b0
push eax
call sub.USER32.dll_CopyAcceleratorTableW
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x54], 3
push 0
push 0xffffffffffffffff
push 0
push dword [ebp + 0x28]
call fcn.100592a0
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.10054610
push 5
push str.CTRL
call fcn.100590d0
push eax
lea eax, [ebp - 0x60]
push eax
push 1
call fcn.10058ae0
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jle 0x1000b434
or dword [ebp - 0x54], 8
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
add eax, 5
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.10058f90
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100545d0
push 6
push str.SHIFT
call fcn.100590d0
push eax
lea eax, [ebp - 0x60]
push eax
push 1
call fcn.10058ae0
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jle 0x1000b47b
or dword [ebp - 0x54], 4
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
add eax, 6
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.10058f90
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100545d0
push 4
push str.ALT
call fcn.100590d0
push eax
lea eax, [ebp - 0x60]
push eax
push 1
call fcn.10058ae0
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jle 0x1000b4c2
or dword [ebp - 0x54], 0x10
push 0
push 0xffffffffffffffff
push 0xffffffffffffffff
mov eax, dword [ebp - 0x64]
add eax, 4
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.10058f90
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100545d0
push 3
push 0x10069b80
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b4e4
mov dword [ebp - 0x50], 0x70
jmp 0x1000bb11
push 3
push 0x10069b84
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b506
mov dword [ebp - 0x50], 0x71
jmp 0x1000bb11
push 3
push 0x10069b88
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b528
mov dword [ebp - 0x50], 0x72
jmp 0x1000bb11
push 3
push 0x10069b8c
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b54a
mov dword [ebp - 0x50], 0x73
jmp 0x1000bb11
push 3
push 0x10069b90
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b56c
mov dword [ebp - 0x50], 0x74
jmp 0x1000bb11
push 3
push 0x10069b94
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b58e
mov dword [ebp - 0x50], 0x75
jmp 0x1000bb11
push 3
push 0x10069b98
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b5b0
mov dword [ebp - 0x50], 0x76
jmp 0x1000bb11
push 3
push 0x10069b9c
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b5d2
mov dword [ebp - 0x50], 0x77
jmp 0x1000bb11
push 3
push 0x10069ba0
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b5f4
mov dword [ebp - 0x50], 0x78
jmp 0x1000bb11
push 4
push 0x10069ba4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b616
mov dword [ebp - 0x50], 0x79
jmp 0x1000bb11
push 4
push 0x10069ba8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b638
mov dword [ebp - 0x50], 0x7a
jmp 0x1000bb11
push 4
push 0x10069bac
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b65a
mov dword [ebp - 0x50], 0x7b
jmp 0x1000bb11
push 2
push 0x100690ac
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b67c
mov dword [ebp - 0x50], 0x30
jmp 0x1000bb11
push 2
push 0x100681d8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b69e
mov dword [ebp - 0x50], 0x31
jmp 0x1000bb11
push 2
push str.2345678ABCDEFGHIJKLMNOPQRSTUVWXYZ
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b6c0
mov dword [ebp - 0x50], 0x32
jmp 0x1000bb11
push 2
push 0x10069bb4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b6e2
mov dword [ebp - 0x50], 0x33
jmp 0x1000bb11
push 2
push 0x10069bb8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b704
mov dword [ebp - 0x50], 0x34
jmp 0x1000bb11
push 2
push 0x10069bbc
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b726
mov dword [ebp - 0x50], 0x35
jmp 0x1000bb11
push 2
push 0x10069bc0
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b748
mov dword [ebp - 0x50], 0x36
jmp 0x1000bb11
push 2
push 0x10069bc4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b76a
mov dword [ebp - 0x50], 0x37
jmp 0x1000bb11
push 2
push 0x10069bc8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b78c
mov dword [ebp - 0x50], 0x38
jmp 0x1000bb11
push 2
push 0x10069af8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b7ae
mov dword [ebp - 0x50], 0x39
jmp 0x1000bb11
push 2
push 0x10069bcc
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b7d0
mov dword [ebp - 0x50], 0x41
jmp 0x1000bb11
push 2
push 0x10069bd0
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b7f2
mov dword [ebp - 0x50], 0x42
jmp 0x1000bb11
push 2
push 0x10069bd4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b814
mov dword [ebp - 0x50], 0x43
jmp 0x1000bb11
push 2
push 0x10069bd8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b836
mov dword [ebp - 0x50], 0x44
jmp 0x1000bb11
push 2
push 0x10069bdc
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b858
mov dword [ebp - 0x50], 0x45
jmp 0x1000bb11
push 2
push 0x10069be0
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b87a
mov dword [ebp - 0x50], 0x46
jmp 0x1000bb11
push 2
push 0x10069be4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b89c
mov dword [ebp - 0x50], 0x47
jmp 0x1000bb11
push 2
push 0x10069be8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b8be
mov dword [ebp - 0x50], 0x48
jmp 0x1000bb11
push 2
push 0x10069bec
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b8e0
mov dword [ebp - 0x50], 0x49
jmp 0x1000bb11
push 2
push 0x10069bf0
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b902
mov dword [ebp - 0x50], 0x4a
jmp 0x1000bb11
push 2
push 0x10069bf4
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b924
mov dword [ebp - 0x50], 0x4b
jmp 0x1000bb11
push 2
push 0x10069bf8
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b946
mov dword [ebp - 0x50], 0x4c
jmp 0x1000bb11
push 2
push 0x10069bfc
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b968
mov dword [ebp - 0x50], 0x4d
jmp 0x1000bb11
push 2
push 0x10069c00
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b98a
mov dword [ebp - 0x50], 0x4e
jmp 0x1000bb11
push 2
push 0x10069c04
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b9ac
mov dword [ebp - 0x50], 0x4f
jmp 0x1000bb11
push 2
push 0x10069c08
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b9ce
mov dword [ebp - 0x50], 0x50
jmp 0x1000bb11
push 2
push 0x10069c0c
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000b9f0
mov dword [ebp - 0x50], 0x51
jmp 0x1000bb11
push 2
push 0x10069c10
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000ba12
mov dword [ebp - 0x50], 0x52
jmp 0x1000bb11
push 2
push 0x10069c14
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000ba34
mov dword [ebp - 0x50], 0x53
jmp 0x1000bb11
push 2
push 0x10069c18
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000ba56
mov dword [ebp - 0x50], 0x54
jmp 0x1000bb11
push 2
push 0x10069c1c
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000ba78
mov dword [ebp - 0x50], 0x55
jmp 0x1000bb11
push 2
push 0x10069c20
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000ba97
mov dword [ebp - 0x50], 0x56
jmp 0x1000bb11
push 2
push 0x10069c24
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000bab6
mov dword [ebp - 0x50], 0x57
jmp 0x1000bb11
push 2
push 0x10069c28
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000bad5
mov dword [ebp - 0x50], 0x58
jmp 0x1000bb11
push 2
push 0x10069c2c
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000baf4
mov dword [ebp - 0x50], 0x59
jmp 0x1000bb11
push 2
push 0x10069c30
push 0xffffffffffffffff
lea eax, [ebp - 0x60]
push eax
call fcn.100546b0
test eax, eax
jne 0x1000bb11
mov dword [ebp - 0x50], 0x5a
cmp dword [ebp - 0x50], 0
jle 0x1000bb7a
mov al, byte [ebp - 0x54]
mov ebx, dword [ebp - 0x18]
imul ebx, ebx, 6
add ebx, dword [ebp - 0x4c]
mov byte [ebx], al
mov ax, word [ebp - 0x50]
mov ebx, dword [ebp - 0x18]
imul ebx, ebx, 6
add ebx, dword [ebp - 0x4c]
mov word [ebx + 2], ax
mov ax, word [ebp + 0x14]
mov ebx, dword [ebp - 0x18]
imul ebx, ebx, 6
add ebx, dword [ebp - 0x4c]
mov word [ebx + 4], ax
push dword [ebp - 0x28]
call fcn.1003a2b0
test eax, eax
je 0x1000bb61
push dword [ebp - 0x28]
call fcn.1003a2b0
push eax
call sub.USER32.dll_DestroyAcceleratorTable
mov eax, dword [ebp - 0x18]
inc eax
push eax
mov eax, dword [ebp - 0x4c]
lea ebx, [eax]
push ebx
call sub.USER32.dll_CreateAcceleratorTableW
push eax
push dword [ebp - 0x28]
call fcn.1003a2e0
lea eax, [ebp - 0x60]
push eax
call fcn.10055990
lea eax, [ebp - 0x4c]
push eax
call fcn.10052dd0
mov eax, dword [ebp - 4]
pop ebx
mov esp, ebp
pop ebp
ret 0x24