Function at 0x1000939c
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10b8
call fcn.10065f60
push esi
push edi
mov dword [ebp - 0xb4], 0x8ade19d2
mov dword [ebp - 0x8ac], 0x8cf4c59c
mov dword [ebp - 0x184], 0xfffffffa
mov dword [ebp - 0xad0], 0xa023703a
mov dword [ebp - 0xacc], 0xa023703a
mov dword [ebp - 0xac8], 0xa023703a
mov dword [ebp - 0xac4], 0xa023703a
mov dword [ebp - 0x868], 0x91f9e6a0
mov dword [ebp - 0xb84], 0xfffffff9
mov dword [ebp - 0xb80], 0xfffffff9
mov dword [ebp - 0xb7c], 0xfffffff9
mov dword [ebp - 0xb78], 0xfffffff9
mov dword [ebp - 0x9b0], 0xfffffffe
mov dword [ebp - 0x44], 0
jmp 0x1000943d
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10009453
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa68], 0x648
jmp 0x10009436
mov dword [ebp - 0x44], 0
jmp 0x10009463
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10009479
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1020], 8
jmp 0x1000945c
mov dword [ebp - 0xb4], 0
jmp 0x10009492
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x100094ae
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xa68], 0xe1d9
jmp 0x10009485
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xd14], eax
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0xe80], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xa68]
cmp dword [ebp + eax - 0xa68], ecx
jge 0x100094ed
mov dword [ebp - 0x610], 1
jmp 0x100094f4
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x610]
je 0x10009513
xor eax, eax
inc eax
je 0x10009513
mov dword [ebp - 0x870], 1
jmp 0x1000951a
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x870], eax
jl 0x10009534
mov dword [ebp - 0x878], 1
jmp 0x1000953b
and dword [ebp - 0x878], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa68]
cmp eax, dword [ebp - 0x878]
jne 0x1000955c
mov dword [ebp - 0x9e8], 1
jmp 0x10009563
and dword [ebp - 0x9e8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xad0]
mov dword [ebp - 0xe88], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xad0]
imul eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x184]
jne 0x100095a4
mov eax, 0x276c
test eax, eax
jne 0x100095a4
and dword [ebp - 0x8a4], 0
jmp 0x100095ae
mov dword [ebp - 0x8a4], 1
cmp dword [ebp - 0x8a4], 0x752bf390
jl 0x100095c6
mov dword [ebp - 0x8b4], 1
jmp 0x100095cd
and dword [ebp - 0x8b4], 0
mov dword [ebp - 0x8ac], 5
mov eax, dword [ebp - 0x8ac]
sub eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x868], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa68]
cmp dword [ebp - 0x868], eax
jne 0x10009612
cmp dword [ebp - 0xb4], 0
je 0x10009612
mov dword [ebp - 0x2cc], 1
jmp 0x10009619
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x1020], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2cc]
sub ecx, dword [ebp + eax - 0xad0]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb84], ecx
cmp dword [ebp - 0x9b0], 0
jne 0x10009662
xor eax, eax
jne 0x10009662
and dword [ebp - 0x36c], 0
jmp 0x1000966c
mov dword [ebp - 0x36c], 1
mov eax, dword [ebp - 0xb4]
add eax, dword [ebp - 0x36c]
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x18], 0x831713b9
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x100], 0x30fc3532
mov dword [ebp - 0x18], 0
jmp 0x100096a6
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffffa
jge 0x10009a33
mov dword [ebp - 0xf8], 0x7e9f21c9
mov dword [ebp - 0x2a8], 0
jmp 0x100096d3
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x100096ef
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x178], 0x9d4346
jmp 0x100096c6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x178], 0
jne 0x1000970e
cmp dword [ebp - 0x18], 0
jne 0x1000970e
and dword [ebp - 0x38c], 0
jmp 0x10009718
mov dword [ebp - 0x38c], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe90], eax
cmp dword [ebp - 0x18], 0x69be5411
je 0x10009736
mov dword [ebp - 0x61c], 1
jmp 0x1000973d
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0xed562b99
jae 0x10009755
mov dword [ebp - 0x374], 1
jmp 0x1000975c
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
cmp dword [ebp - 0x374], eax
jne 0x1000977d
mov dword [ebp - 0x774], 1
jmp 0x10009784
and dword [ebp - 0x774], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x178]
cmp dword [ebp - 0x774], eax
jl 0x100097a5
mov dword [ebp - 0x37c], 1
jmp 0x100097ac
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
inc eax
cmp eax, 0xfffffffb
jae 0x100097c4
mov dword [ebp - 0x624], 1
jmp 0x100097cb
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x624], eax
jg 0x100097e2
mov dword [ebp - 0x384], 1
jmp 0x100097e9
and dword [ebp - 0x384], 0
cmp dword [ebp - 0x384], 1
jne 0x100097fe
mov dword [ebp - 0x840], 1
jmp 0x10009805
and dword [ebp - 0x840], 0
mov eax, dword [ebp - 0x840]
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xe98], eax
cmp dword [ebp - 0x18], 0
je 0x10009835
cmp dword [ebp - 0x18], 0
je 0x10009835
mov dword [ebp - 0x9b8], 1
jmp 0x1000983c
and dword [ebp - 0x9b8], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x6399
jle 0x10009866
mov dword [ebp - 0x62c], 1
jmp 0x1000986d
and dword [ebp - 0x62c], 0
cmp dword [ebp - 0x62c], 0x18f0
jl 0x10009885
mov dword [ebp - 0x394], 1
jmp 0x1000988c
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x394], eax
jge 0x100098a3
mov dword [ebp - 0x77c], 1
jmp 0x100098aa
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x178]
jg 0x100098cd
mov dword [ebp - 0x9c0], 1
jmp 0x100098d4
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xea8], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x39c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x39c]
mov dword [ebp + eax - 0x178], ecx
cmp dword [ebp - 0x39c], 0
je 0x1000999f
mov dword [ebp - 0x24], 0x19
jmp 0x10009919
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xd
jl 0x1000998c
mov dword [ebp - 0xf8], 0
jmp 0x10009938
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jg 0x10009972
mov byte [ebp - 0xd3], 0
movzx eax, byte [ebp - 0xd3]
test eax, eax
je 0x1000995e
push 0x1a6c
call dword [sym.imp.USER32.dll_GetSysColor]
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0x178], 0
je 0x10009970
jmp 0x1000992b
jmp 0x1000992b
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x1000998a
call dword [sym.imp.GDI32.dll_GdiFlush]
jmp 0x10009912
cmp dword [ebp - 0x100], 0
je 0x1000999a
jmp 0x10009a33
jmp 0x10009a2e
mov dword [ebp - 0x24], 0
jmp 0x100099af
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xffffffe9
jl 0x10009a2e
mov dword [ebp - 0x1e0], 0
jmp 0x100099ce
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x100099ea
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x634], 0
jmp 0x100099c1
mov dword [ebp - 0x100], 0xd
jmp 0x10009a03
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x15
je 0x10009a29
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x634]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x634], eax
jmp 0x100099f6
jmp 0x100099a8
jmp 0x1000969f
mov dword [ebp - 0xcc], 0x8ade19d2
mov dword [ebp - 0x3b4], 0x8cf4c59c
mov dword [ebp - 0x158], 0xfffffffa
mov dword [ebp - 0xae0], 0xa023703a
mov dword [ebp - 0xadc], 0xa023703a
mov dword [ebp - 0xad8], 0xa023703a
mov dword [ebp - 0xad4], 0xa023703a
mov dword [ebp - 0x3bc], 0x91f9e6a0
mov dword [ebp - 0xb94], 0xfffffff9
mov dword [ebp - 0xb90], 0xfffffff9
mov dword [ebp - 0xb8c], 0xfffffff9
mov dword [ebp - 0xb88], 0xfffffff9
mov dword [ebp - 0x9d0], 0xfffffffe
mov dword [ebp - 0x30], 0
jmp 0x10009ac5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10009adb
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xa78], 0x648
jmp 0x10009abe
mov dword [ebp - 0x30], 0
jmp 0x10009aeb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x10009b01
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x102c], 8
jmp 0x10009ae4
mov dword [ebp - 0xcc], 0
jmp 0x10009b1a
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x10009b36
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xa78], 0xe1d9
jmp 0x10009b0d
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xeb0], eax
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xeb8], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xa78]
cmp dword [ebp + eax - 0xa78], ecx
jge 0x10009b75
mov dword [ebp - 0x3a4], 1
jmp 0x10009b7c
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x158]
add eax, dword [ebp - 0x3a4]
je 0x10009b9b
xor eax, eax
inc eax
je 0x10009b9b
mov dword [ebp - 0x838], 1
jmp 0x10009ba2
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x838], eax
jl 0x10009bbc
mov dword [ebp - 0x3ac], 1
jmp 0x10009bc3
and dword [ebp - 0x3ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp eax, dword [ebp - 0x3ac]
jne 0x10009be4
mov dword [ebp - 0x9c8], 1
jmp 0x10009beb
and dword [ebp - 0x9c8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae0]
mov dword [ebp - 0xec0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae0]
imul eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x158]
jne 0x10009c2c
mov eax, 0x276c
test eax, eax
jne 0x10009c2c
and dword [ebp - 0x63c], 0
jmp 0x10009c36
mov dword [ebp - 0x63c], 1
cmp dword [ebp - 0x63c], 0x752bf390
jl 0x10009c4e
mov dword [ebp - 0x784], 1
jmp 0x10009c55
and dword [ebp - 0x784], 0
mov dword [ebp - 0x3b4], 5
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x784]
mov dword [ebp - 0x3bc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa78]
cmp dword [ebp - 0x3bc], eax
jne 0x10009c9a
cmp dword [ebp - 0xcc], 0
je 0x10009c9a
mov dword [ebp - 0x2d4], 1
jmp 0x10009ca1
and dword [ebp - 0x2d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp + eax - 0x102c], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d4]
sub ecx, dword [ebp + eax - 0xae0]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb94], ecx
cmp dword [ebp - 0x9d0], 0
jne 0x10009cea
xor eax, eax
jne 0x10009cea
and dword [ebp - 0x644], 0
jmp 0x10009cf4
mov dword [ebp - 0x644], 1
mov eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x644]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xec8], 1
mov dword [ebp - 0xed0], 0xfffffffb
mov dword [ebp - 0xed8], 0xfffffff6
mov dword [ebp - 0xee0], 0
mov dword [ebp - 0xee8], 1
mov dword [ebp - 0xef0], 4
mov dword [ebp - 0xef8], 0xed680444
mov dword [ebp - 0xf28], 0xfffffffa
mov dword [ebp - 0xf30], 0x7c10
mov dword [ebp - 0x8c], 0
jmp 0x10009d79
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x10009d95
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x10a8], 1
jmp 0x10009d6c
mov dword [ebp - 0x8c], 0
jmp 0x10009dae
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x10009dca
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x3c4], 0x18a52733
jmp 0x10009da1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c4], eax
mov dword [ebp - 0x34], 0x2c70bb74
mov dword [ebp - 0x2ac], 0
jmp 0x10009e05
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jge 0x10009e21
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x9d8], 0x8206
jmp 0x10009df8
mov dword [ebp - 0x34], 0
jmp 0x10009e31
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10009e48
mov eax, dword [ebp - 0x34]
cmp dword [ebp + eax*4 - 0x9d8], 0
je 0x10009e46
jmp 0x10009e48
jmp 0x10009e2a
mov dword [ebp - 0x34], 0
jmp 0x10009e58
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x15
jle 0x10009e7a
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10009e78
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
jmp 0x10009e51
mov dword [ebp - 0xb8], 0x8ade19d2
mov dword [ebp - 0x108], 0x648261f
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x3dc], 5
mov dword [ebp - 0x9e0], 0x142c78ef
mov dword [ebp - 0x38], 0
jmp 0x10009ebc
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10009ed2
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xb40], 0xffffffff
jmp 0x10009eb5
mov dword [ebp - 0x38], 0
jmp 0x10009ee2
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10009ef8
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x65c], 7
jmp 0x10009edb
mov dword [ebp - 0x108], 0
jmp 0x10009f11
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 6
jne 0x1000a1c4
mov dword [ebp - 0xc4], 0xd8cf4c59
mov dword [ebp - 0x1e8], 0xccaea0a9
mov dword [ebp - 0x4c], 0
jmp 0x10009f42
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10009f58
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x1038], 0xffffffff
jmp 0x10009f3b
mov dword [ebp - 0x4c], 0
jmp 0x10009f68
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x10009f7e
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xae8], 0
jmp 0x10009f61
cmp dword [ebp - 0x314], 0
jne 0x1000a0f5
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0xc4], eax
je 0x10009fb1
mov dword [ebp - 0x8b8], 1
jmp 0x10009fb8
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 0xd5493e6
jle 0x10009fd0
mov dword [ebp - 0x3cc], 1
jmp 0x10009fd7
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x108]
add eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0xc4]
jg 0x10009ff7
mov dword [ebp - 0x64c], 1
jmp 0x10009ffe
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x64c], eax
jl 0x1000a018
mov dword [ebp - 0x3d4], 1
jmp 0x1000a01f
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb40], 0xfffffff8
mov eax, dword [ebp - 0x3d4]
sub eax, 8
imul eax, eax, 0xcb6a
cmp eax, dword [ebp - 0xc4]
jne 0x1000a053
mov dword [ebp - 0x78c], 1
jmp 0x1000a05a
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
jne 0x1000a088
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb40], 0
jne 0x1000a088
and dword [ebp - 0x654], 0
jmp 0x1000a092
mov dword [ebp - 0x654], 1
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x654], eax
jge 0x1000a0ac
mov dword [ebp - 0x3e4], 1
jmp 0x1000a0b3
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
imul eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0xc4]
jle 0x1000a0e0
mov dword [ebp - 0x834], 1
jmp 0x1000a0e7
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x314]
cmp dword [ebp - 0x834], eax
jg 0x1000a0fe
cmp dword [ebp - 0xc4], 0
jne 0x1000a110
cmp dword [ebp - 0x108], 0
jne 0x1000a110
and dword [ebp - 0x3ec], 0
jmp 0x1000a11a
mov dword [ebp - 0x3ec], 1
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x9e0], eax
cmp dword [ebp - 0x1e8], 0
jne 0x1000a141
cmp dword [ebp - 0x1e8], 0
jne 0x1000a141
and dword [ebp - 0xa2c], 0
jmp 0x1000a14b
mov dword [ebp - 0xa2c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x65c]
mov dword [ebp - 0xf40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xae8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xae8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x65c], 0xfffffff9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb40], 0xfffffff9
jl 0x1000a1a6
mov dword [ebp - 0x3f4], 1
jmp 0x1000a1ad
and dword [ebp - 0x3f4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp + eax - 0x1038], ecx
jmp 0x10009f04
mov dword [ebp - 0x8b0], 0x8cf4c59c
mov dword [ebp - 0x170], 0x9ba07e4f
mov dword [ebp - 0x2dc], 0xfffffff8
mov dword [ebp - 0x110], 3
mov dword [ebp - 0xa3c], 0xa9f4f9a
mov dword [ebp - 0x40c], 0x76cc72b7
mov dword [ebp - 0xa44], 0x791f
mov dword [ebp - 0xa58], 0
mov dword [ebp - 0xa0], 0
jmp 0x1000a22d
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1000a249
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xaf0], 1
jmp 0x1000a220
mov dword [ebp - 0xa0], 0
jmp 0x1000a262
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1000a27e
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xaf8], 0xf4d4e20
jmp 0x1000a255
cmp dword [ebp - 0x110], 5
jle 0x1000a293
mov dword [ebp - 0x794], 1
jmp 0x1000a29a
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x2dc]
add eax, dword [ebp - 0x794]
je 0x1000a2af
cmp dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x170]
inc eax
cmp eax, 6
jl 0x1000a2cd
mov dword [ebp - 0x3fc], 1
jmp 0x1000a2d4
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x3fc], eax
jg 0x1000a2ee
mov dword [ebp - 0x664], 1
jmp 0x1000a2f5
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x664], eax
je 0x1000a30f
mov dword [ebp - 0x404], 1
jmp 0x1000a316
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x404]
jg 0x1000a330
mov dword [ebp - 0xa34], 1
jmp 0x1000a337
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xf48], eax
mov eax, dword [ebp - 0xa3c]
mov dword [ebp - 0xf50], eax
cmp dword [ebp - 0x170], 0
jne 0x1000a366
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xaf0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x110]
cmp dword [ebp + eax - 0xaf0], ecx
jle 0x1000a387
mov dword [ebp - 0x874], 1
jmp 0x1000a38e
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x874]
imul eax, dword [ebp - 0x110]
test eax, eax
je 0x1000a3ac
cmp dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 0
je 0x1000a3d6
cmp dword [ebp - 0xa44], 0
je 0x1000a3d6
mov dword [ebp - 0x66c], 1
jmp 0x1000a3dd
and dword [ebp - 0x66c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xaf8]
cmp dword [ebp - 0x66c], eax
jne 0x1000a407
cmp dword [ebp - 0x170], 0
je 0x1000a407
mov dword [ebp - 0x304], 1
jmp 0x1000a40e
and dword [ebp - 0x304], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x304]
mov dword [ebp + eax - 0xaf8], ecx
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xa58], eax
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000a44d
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
mov dword [ebp - 0x168], 0xfffffffa
mov dword [ebp - 0xac0], 0xa023703a
mov dword [ebp - 0xabc], 0xa023703a
mov dword [ebp - 0xab8], 0xa023703a
mov dword [ebp - 0xab4], 0xa023703a
mov dword [ebp - 0x20], 0x8a1f9496
mov dword [ebp - 0x42c], 0xa9ac70c3
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0xa90], 0x721f7d96
mov dword [ebp - 0xa98], 8
mov dword [ebp - 0xf58], 1
mov dword [ebp - 0x294], 0
jmp 0x1000a4d1
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000a4ed
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x1068], 0xffffffff
jmp 0x1000a4c4
cmp dword [ebp - 0x20], 0
jne 0x1000a504
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
je 0x1000a504
and dword [ebp - 0x79c], 0
jmp 0x1000a50e
mov dword [ebp - 0x79c], 1
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf60], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xf68], eax
mov eax, dword [ebp - 0x20]
sub eax, 0x6f93
je 0x1000a53d
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1000a53d
mov dword [ebp - 0x414], 1
jmp 0x1000a544
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x414]
imul eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x79c], eax
jle 0x1000a568
mov dword [ebp - 0x41c], 1
jmp 0x1000a56f
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0
je 0x1000a584
mov dword [ebp - 0x674], 1
jmp 0x1000a58b
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
sub eax, dword [ebp - 0x2e4]
cmp eax, 0x5aa05d76
jle 0x1000a5b3
cmp dword [ebp - 0xa90], 0
je 0x1000a5b3
mov dword [ebp - 0x424], 1
jmp 0x1000a5ba
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
sub eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x83c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x83c]
mov dword [ebp + eax - 0x1068], ecx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x83c]
cmp eax, dword [ebp - 0x20]
je 0x1000a5f9
mov dword [ebp - 0x67c], 1
jmp 0x1000a600
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
sub eax, dword [ebp - 0x67c]
mov dword [ebp - 0xa98], eax
mov dword [ebp - 0x6cc], 0x91f9e6a0
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x454], 0xfffffff8
mov dword [ebp - 0xf70], 0xfffffff7
mov dword [ebp - 0x54], 0
jmp 0x1000a653
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000a669
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x8c4], 0xfffffffd
jmp 0x1000a64c
mov dword [ebp - 0x54], 0
jmp 0x1000a679
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1000a68f
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xaa8], 0x40a9711f
jmp 0x1000a672
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c4]
mov dword [ebp - 0xf78], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c4]
mov dword [ebp - 0xf80], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c4]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xfcc], eax
mov eax, dword [ebp - 0x94]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x8c4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x8c4]
jne 0x1000a702
mov dword [ebp - 0x434], 1
jmp 0x1000a709
and dword [ebp - 0x434], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x434]
mov dword [ebp + eax - 0x8c4], ecx
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xfd4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c4]
mov dword [ebp - 0xfdc], eax
xor eax, eax
cmp eax, 1
jae 0x1000a75b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c4], 0
jne 0x1000a75b
and dword [ebp - 0x7a4], 0
jmp 0x1000a765
mov dword [ebp - 0x7a4], 1
cmp dword [ebp - 0x7a4], 0xd4a55f07
je 0x1000a77d
mov dword [ebp - 0x43c], 1
jmp 0x1000a784
and dword [ebp - 0x43c], 0
cmp dword [ebp - 0x43c], 0x9cff
jle 0x1000a79c
mov dword [ebp - 0x684], 1
jmp 0x1000a7a3
and dword [ebp - 0x684], 0
cmp dword [ebp - 0x684], 3
jge 0x1000a7b8
mov dword [ebp - 0x444], 1
jmp 0x1000a7bf
and dword [ebp - 0x444], 0
cmp dword [ebp - 0x444], 7
jge 0x1000a7d4
mov dword [ebp - 0x8a0], 1
jmp 0x1000a7db
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x8a0], eax
jne 0x1000a7f5
mov dword [ebp - 0x44c], 1
jmp 0x1000a7fc
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xffffffff
je 0x1000a811
mov dword [ebp - 0x68c], 1
jmp 0x1000a818
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0xa781
jle 0x1000a845
cmp dword [ebp - 0x94], 0
je 0x1000a845
mov dword [ebp - 0x7ac], 1
jmp 0x1000a84c
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0xa77d
jl 0x1000a864
mov dword [ebp - 0x45c], 1
jmp 0x1000a86b
and dword [ebp - 0x45c], 0
imul eax, dword [ebp - 0x45c], 0xdf39
cmp eax, 0x5a4a104a
jg 0x1000a888
mov dword [ebp - 0x694], 1
jmp 0x1000a88f
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x694], eax
jg 0x1000a8a9
mov dword [ebp - 0x464], 1
jmp 0x1000a8b0
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x464], eax
jg 0x1000a8ca
mov dword [ebp - 0xaa0], 1
jmp 0x1000a8d1
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xfe4], eax
mov eax, dword [ebp - 0x94]
add eax, 0xdd33
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xaa8], eax
mov dword [ebp - 0x5c], 0
jmp 0x1000a905
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1000a91b
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1058], 0x8bbca631
jmp 0x1000a8fe
mov dword [ebp - 0x5c], 0
jmp 0x1000a92b
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1000a941
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x8dc], 0xffffffff
jmp 0x1000a924
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x8dc], 0
jmp 0x1000a96f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8dc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8dc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8dc], 1
jg 0x1000a9f4
mov dword [ebp - 0x1f0], 0x4cdb8faa
mov dword [ebp - 0x1f0], 1
jmp 0x1000a9a2
mov eax, dword [ebp - 0x1f0]
dec eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0
jl 0x1000a9d5
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1000a9d3
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SelectObject]
jmp 0x1000a995
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x1000a9ef
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
jmp 0x1000a954
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x1000aa23
push 0
push 0x16a8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointA]
mov dword [ebp - 0xb74], 0xfffffff9
mov dword [ebp - 0xb70], 0xfffffff9
mov dword [ebp - 0xb6c], 0xfffffff9
mov dword [ebp - 0xb68], 0xfffffff9
mov dword [ebp - 0xa5c], 0xfffffffe
mov dword [ebp - 0x160], 0xdf1febae
mov dword [ebp - 0x2bc], 0
jmp 0x1000aa78
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x1000aa94
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0x338], 0xffffffff
jmp 0x1000aa6b
mov dword [ebp - 0x160], 0
jmp 0x1000aaad
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 1
jg 0x1000ac67
mov dword [ebp - 0x10], 0xcce1e2c0
mov dword [ebp - 0x6a4], 0x388a0193
mov dword [ebp - 0x10], 1
jmp 0x1000aadb
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x1000ac62
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x338]
cmp dword [ebp - 0x160], eax
jle 0x1000ab13
mov dword [ebp - 0x69c], 1
jmp 0x1000ab1a
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x10], 0x4495
jne 0x1000ab2f
mov dword [ebp - 0x844], 1
jmp 0x1000ab36
and dword [ebp - 0x844], 0
imul eax, dword [ebp - 0x844], 0xfffd
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x338]
je 0x1000ab5b
mov dword [ebp - 0x46c], 1
jmp 0x1000ab62
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x46c]
lea eax, [ecx + eax + 0x7e71f09a]
test eax, eax
jne 0x1000ab82
mov dword [ebp - 0x474], 1
jmp 0x1000ab89
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x69c]
cmp eax, dword [ebp - 0x474]
je 0x1000aba7
push 2
pop eax
test eax, eax
jne 0x1000aba7
and dword [ebp - 0x7b4], 0
jmp 0x1000abb1
mov dword [ebp - 0x7b4], 1
cmp dword [ebp - 0x7b4], 0xfffffffc
je 0x1000abc6
mov dword [ebp - 0x47c], 1
jmp 0x1000abcd
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x47c], eax
jl 0x1000abe4
mov dword [ebp - 0xab0], 1
jmp 0x1000abeb
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0xff4], eax
mov dword [ebp - 0x6a4], 0x9d2e
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x6a4], eax
jne 0x1000ac46
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x1000ac28
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1000ac44
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
jmp 0x1000ac5d
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x160]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp + ecx*4 - 0x338], eax
jmp 0x1000aad4
jmp 0x1000aaa0
mov dword [ebp - 4], 0x831713b9
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x120], 0x30fc3532
mov dword [ebp - 4], 0
jmp 0x1000ac8f
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xfffffffa
jge 0x1000b01c
mov dword [ebp - 0x118], 0x7e9f21c9
mov dword [ebp - 0x1f8], 0
jmp 0x1000acbc
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 1
jge 0x1000acd8
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0x180], 0x9d4346
jmp 0x1000acaf
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x180], 0
jne 0x1000acf7
cmp dword [ebp - 4], 0
jne 0x1000acf7
and dword [ebp - 0x6b4], 0
jmp 0x1000ad01
mov dword [ebp - 0x6b4], 1
mov eax, dword [ebp - 4]
mov dword [ebp - 0xffc], eax
cmp dword [ebp - 4], 0x69be5411
je 0x1000ad1f
mov dword [ebp - 0x484], 1
jmp 0x1000ad26
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xed562b99
jae 0x1000ad3e
mov dword [ebp - 0x87c], 1
jmp 0x1000ad45
and dword [ebp - 0x87c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
cmp dword [ebp - 0x87c], eax
jne 0x1000ad66
mov dword [ebp - 0x48c], 1
jmp 0x1000ad6d
and dword [ebp - 0x48c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x180]
cmp dword [ebp - 0x48c], eax
jl 0x1000ad8e
mov dword [ebp - 0x6ac], 1
jmp 0x1000ad95
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x6ac]
inc eax
cmp eax, 0xfffffffb
jae 0x1000adad
mov dword [ebp - 0x494], 1
jmp 0x1000adb4
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x494], eax
jg 0x1000adcb
mov dword [ebp - 0x7bc], 1
jmp 0x1000add2
and dword [ebp - 0x7bc], 0
cmp dword [ebp - 0x7bc], 1
jne 0x1000ade7
mov dword [ebp - 0x49c], 1
jmp 0x1000adee
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x1004], eax
cmp dword [ebp - 4], 0
je 0x1000ae1e
cmp dword [ebp - 4], 0
je 0x1000ae1e
mov dword [ebp - 0xa4c], 1
jmp 0x1000ae25
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0x6b4]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x6399
jle 0x1000ae4f
mov dword [ebp - 0x4a4], 1
jmp 0x1000ae56
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0x18f0
jl 0x1000ae6e
mov dword [ebp - 0x84c], 1
jmp 0x1000ae75
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x84c], eax
jge 0x1000ae8c
mov dword [ebp - 0x4ac], 1
jmp 0x1000ae93
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x180]
jg 0x1000aeb6
mov dword [ebp - 0x9a8], 1
jmp 0x1000aebd
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x6bc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6bc]
mov dword [ebp + eax - 0x180], ecx
cmp dword [ebp - 0x6bc], 0
je 0x1000af88
mov dword [ebp - 0x2c], 0x19
jmp 0x1000af02
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xd
jl 0x1000af75
mov dword [ebp - 0x118], 0
jmp 0x1000af21
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jg 0x1000af5b
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1000af47
push 0x1a6c
call dword [sym.imp.USER32.dll_GetSysColor]
mov eax, dword [ebp - 0x118]
cmp dword [ebp + eax*4 - 0x180], 0
je 0x1000af59
jmp 0x1000af14
jmp 0x1000af14
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000af73
call dword [sym.imp.GDI32.dll_GdiFlush]
jmp 0x1000aefb
cmp dword [ebp - 0x120], 0
je 0x1000af83
jmp 0x1000b01c
jmp 0x1000b017
mov dword [ebp - 0x2c], 0
jmp 0x1000af98
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0xffffffe9
jl 0x1000b017
mov dword [ebp - 0x29c], 0
jmp 0x1000afb7
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1000afd3
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x4b4], 0
jmp 0x1000afaa
mov dword [ebp - 0x120], 0xd
jmp 0x1000afec
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0x15
je 0x1000b012
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4b4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4b4], eax
jmp 0x1000afdf
jmp 0x1000af91
jmp 0x1000ac88
mov dword [ebp - 0xa8], 0
jmp 0x1000b035
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1000b051
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0xa88], 0x648
jmp 0x1000b028
mov dword [ebp - 0xa8], 0
jmp 0x1000b06a
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1000b086
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x1050], 8
jmp 0x1000b05d
mov dword [ebp - 0xb8], 0
jmp 0x1000b09f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1000b0bb
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0xa88], 0xe1d9
jmp 0x1000b092
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x1008], eax
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xf04], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xa88]
cmp dword [ebp + eax - 0xa88], ecx
jge 0x1000b0fa
mov dword [ebp - 0x7c4], 1
jmp 0x1000b101
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x7c4]
je 0x1000b120
xor eax, eax
inc eax
je 0x1000b120
mov dword [ebp - 0x4bc], 1
jmp 0x1000b127
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x4bc], eax
jl 0x1000b141
mov dword [ebp - 0x6c4], 1
jmp 0x1000b148
and dword [ebp - 0x6c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa88]
cmp eax, dword [ebp - 0x6c4]
jne 0x1000b169
mov dword [ebp - 0x944], 1
jmp 0x1000b170
and dword [ebp - 0x944], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac0]
mov dword [ebp - 0xdec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xac0]
imul eax, dword [ebp - 0x168]
sub eax, dword [ebp - 0x168]
jne 0x1000b1b1
mov eax, 0x276c
test eax, eax
jne 0x1000b1b1
and dword [ebp - 0x4c4], 0
jmp 0x1000b1bb
mov dword [ebp - 0x4c4], 1
cmp dword [ebp - 0x4c4], 0x752bf390
jl 0x1000b1d3
mov dword [ebp - 0x4cc], 1
jmp 0x1000b1da
and dword [ebp - 0x4cc], 0
mov dword [ebp - 0x8b0], 5
mov eax, dword [ebp - 0x8b0]
sub eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x6cc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa88]
cmp dword [ebp - 0x6cc], eax
jne 0x1000b21f
cmp dword [ebp - 0xb8], 0
je 0x1000b21f
mov dword [ebp - 0x324], 1
jmp 0x1000b226
and dword [ebp - 0x324], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x324]
mov dword [ebp + eax - 0x1050], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x324]
sub ecx, dword [ebp + eax - 0xac0]
push 4
pop eax
imul eax, eax, 3
mov dword [ebp + eax - 0xb74], ecx
cmp dword [ebp - 0xa5c], 0
jne 0x1000b26f
xor eax, eax
jne 0x1000b26f
and dword [ebp - 0x4d4], 0
jmp 0x1000b279
mov dword [ebp - 0x4d4], 1
mov eax, dword [ebp - 0xb8]
add eax, dword [ebp - 0x4d4]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x1d0], 0x7222
mov dword [ebp - 0x2ec], 0xd9ba5f27
mov dword [ebp - 0x6d4], 0
mov dword [ebp - 0x190], 0x7d02
mov dword [ebp - 0xa18], 5
mov dword [ebp - 0xba4], 0xf4e55b65
mov dword [ebp - 0x200], 0
jmp 0x1000b2e0
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x1000b2fc
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x1d4], 0
jmp 0x1000b2d3
cmp dword [ebp - 0x1d0], 0
je 0x1000b31a
cmp dword [ebp - 0x1d0], 0
je 0x1000b31a
mov dword [ebp - 0x854], 1
jmp 0x1000b321
and dword [ebp - 0x854], 0
imul eax, dword [ebp - 0x1d0], 0xffffffff
test eax, eax
jne 0x1000b348
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d4], 0
je 0x1000b348
mov dword [ebp - 0x94c], 1
jmp 0x1000b34f
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0xf14], eax
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x6d4], eax
jl 0x1000b375
mov dword [ebp - 0x7cc], 1
jmp 0x1000b37c
and dword [ebp - 0x7cc], 0
imul eax, dword [ebp - 0x7cc], 0x9a01
cmp eax, dword [ebp - 0x2ec]
jle 0x1000b39a
mov dword [ebp - 0x4dc], 1
jmp 0x1000b3a1
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x190]
add eax, dword [ebp - 0x4dc]
cmp eax, dword [ebp - 0x6d4]
jge 0x1000b3c1
mov dword [ebp - 0x4e4], 1
jmp 0x1000b3c8
and dword [ebp - 0x4e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d4]
cmp dword [ebp - 0x4e4], eax
jne 0x1000b3e9
mov dword [ebp - 0x4ec], 1
jmp 0x1000b3f0
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x854]
cmp eax, dword [ebp - 0x4ec]
je 0x1000b40a
mov dword [ebp - 0x6dc], 1
jmp 0x1000b411
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1d0]
imul ecx, dword [ebp - 0x6dc]
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x1d4]
cmp eax, 0xffffffff
je 0x1000b456
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1d4], 0
je 0x1000b456
mov dword [ebp - 0x4f4], 1
jmp 0x1000b45d
and dword [ebp - 0x4f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1d4]
add eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xa18], eax
mov dword [ebp - 0x190], 0
jmp 0x1000b48f
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0xfffffff0
jle 0x1000b4be
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000b4bc
push 0x1799
push 0x1868
push 0
call dword [sym.imp.USER32.dll_RemoveMenu]
jmp 0x1000b482
mov dword [ebp - 0x188], 0x7222
mov dword [ebp - 0x30c], 0xd9ba5f27
mov dword [ebp - 0x6e4], 0
mov dword [ebp - 0x1b8], 0x7d02
mov dword [ebp - 0xa94], 5
mov dword [ebp - 0xbac], 0xf4e55b65
mov dword [ebp - 0x270], 0
jmp 0x1000b513
cmp dword [ebp - 0x270], 1
jge 0x1000b52f
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0x198], 0
jmp 0x1000b506
cmp dword [ebp - 0x188], 0
je 0x1000b54d