Function at 0x10009545
Capabilities:
Delete file
Enumerate gui resources
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008847d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1088
call fcn.10085fe0
push esi
push edi
mov dword [ebp - 0x15c], 0x83c7730f
mov dword [ebp - 0x294], 0
jmp 0x1000958c
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jge 0x100095a8
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x9d4], 0
jmp 0x1000957f
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x100095c2
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x15c], 0
jmp 0x100095db
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0
jl 0x100095f8
mov eax, dword [ebp - 0x15c]
cmp dword [ebp + eax*4 - 0x9d4], 0
je 0x100095f6
jmp 0x100095f8
jmp 0x100095ce
mov dword [ebp - 0x17c], 0x83c7730f
mov dword [ebp - 0x1a0], 0
jmp 0x1000961b
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x10009637
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xa6c], 0
jmp 0x1000960e
mov byte [ebp - 0xb4], 0
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x10009651
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x17c], 0
jmp 0x1000966a
mov eax, dword [ebp - 0x17c]
dec eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
jl 0x10009687
mov eax, dword [ebp - 0x17c]
cmp dword [ebp + eax*4 - 0xa6c], 0
je 0x10009685
jmp 0x10009687
jmp 0x1000965d
mov dword [ebp - 0xd3c], 0xfffffffe
mov dword [ebp - 0xce4], 0x5f394a2a
mov dword [ebp - 0xcec], 0x2937a3a1
mov dword [ebp - 0xf58], 0x8144ad72
mov dword [ebp - 0xf54], 0x8144ad72
mov dword [ebp - 0xf50], 0x8144ad72
mov dword [ebp - 0xf4c], 0x8144ad72
mov dword [ebp - 0xcf4], 0xfffffffa
push 3
lea ecx, [ebp - 0xe68]
call fcn.10016409
and dword [ebp - 4], 0
mov dword [ebp - 0x47c], 0xf8ee
mov dword [ebp - 0x4c], 0
jmp 0x10009702
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10009718
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x107c], 1
jmp 0x100096fb
mov dword [ebp - 0x4c], 0
jmp 0x10009728
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x10009744
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xe68]
call fcn.100164aa
mov dword [eax], 0xe6dc660f
jmp 0x10009721
mov eax, dword [ebp - 0x47c]
inc eax
mov dword [ebp - 0x47c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe68]
call fcn.1001648e
push 1
lea ecx, [ebp - 0xe78]
call fcn.10016409
mov dword [ebp - 4], 1
mov dword [ebp - 0x1a8], 0x8094a188
mov dword [ebp - 0x2a0], 0
jmp 0x10009797
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 1
jge 0x100097b9
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0xe78]
call fcn.100164aa
mov dword [eax], 6
jmp 0x1000978a
mov dword [ebp - 0x1a8], 0
jmp 0x100097d2
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0
jg 0x1000983d
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000983b
push 0x264f
push 0x323
push 0x121e
push 0
push 0xb0d
push 0x19
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x1f25
push 0x12f
push 0x1bdc
push 0x14a5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_MaskBlt]
jmp 0x100097c5
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe78]
call fcn.1001648e
push 3
lea ecx, [ebp - 0x970]
call fcn.10016409
mov dword [ebp - 4], 2
mov dword [ebp - 0x8e0], 0xf0720718
mov dword [ebp - 0xbf4], 0xa1c17c77
mov dword [ebp - 0xbf0], 0xa1c17c77
mov dword [ebp - 0xbec], 0xa1c17c77
mov dword [ebp - 0xbe8], 0xa1c17c77
lea ecx, [ebp - 0x3ad]
call fcn.10009393
push eax
lea eax, [ebp - 0xbe4]
push eax
lea eax, [ebp - 0xbf4]
push eax
lea ecx, [ebp - 0x1040]
call fcn.100164b9
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xca8]
call fcn.10016468
mov byte [ebp - 4], 3
mov dword [ebp - 0x2e0], 0xf2ba167c
mov dword [ebp - 0xa7c], 0
mov dword [ebp - 0xa84], 0xffffffff
mov dword [ebp - 0x238], 0
jmp 0x10009902
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x10009924
push dword [ebp - 0x238]
lea ecx, [ebp - 0x970]
call fcn.100164aa
mov dword [eax], 0xde713a47
jmp 0x100098f5
push 1
lea ecx, [ebp - 0x970]
call fcn.100164aa
cmp dword [eax], 0x7631615e
je 0x10009945
mov dword [ebp - 0x8f0], 1
jmp 0x1000994c
and dword [ebp - 0x8f0], 0
push 1
lea ecx, [ebp - 0x970]
call fcn.100164aa
mov eax, dword [eax]
mov dword [ebp - 0x8e0], eax
imul eax, dword [ebp - 0x8e0], 0
mov dword [ebp - 0x8e8], eax
push 2
lea ecx, [ebp - 0xca8]
call fcn.100164aa
mov ecx, dword [ebp - 0x8e8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x8e8]
sub eax, dword [ebp - 0x8f0]
jne 0x100099ac
push 0
lea ecx, [ebp - 0x970]
call fcn.100164aa
cmp dword [eax], 0
jne 0x100099ac
and dword [ebp - 0x8f8], 0
jmp 0x100099b6
mov dword [ebp - 0x8f8], 1
push 1
lea ecx, [ebp - 0x970]
call fcn.100164aa
mov ecx, dword [ebp - 0x8f8]
sub ecx, dword [ebp - 0x2e0]
cmp dword [eax], ecx
je 0x100099df
mov dword [ebp - 0xa74], 1
jmp 0x100099e6
and dword [ebp - 0xa74], 0
push 2
lea ecx, [ebp - 0xca8]
call fcn.100164aa
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xd50], eax
push 1
lea ecx, [ebp - 0x970]
call fcn.100164aa
mov eax, dword [eax]
add eax, 0x4f78
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0xa84], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xca8]
call fcn.1001648e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x970]
call fcn.1001648e
push 2
lea ecx, [ebp - 0xb78]
call fcn.10016409
mov dword [ebp - 4], 4
mov dword [ebp - 0x280], 0xfffffff7
mov dword [ebp - 0x2d8], 7
mov dword [ebp - 0x93c], 0x338886a6
mov dword [ebp - 0x1b0], 0
jmp 0x10009a8e
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 2
jge 0x10009aad
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xb78]
call fcn.100164aa
and dword [eax], 0
jmp 0x10009a81
mov eax, dword [ebp - 0x2d8]
dec eax
mov dword [ebp - 0x2d8], eax
mov eax, 0x22a5
test eax, eax
je 0x10009b82
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0xd58], eax
cmp dword [ebp - 0x93c], 0x5b0b
je 0x10009aeb
mov dword [ebp - 0x900], 1
jmp 0x10009af2
and dword [ebp - 0x900], 0
mov esi, dword [ebp - 0x280]
add esi, dword [ebp - 0x900]
push 1
lea ecx, [ebp - 0xb78]
call fcn.100164aa
cmp esi, dword [eax]
jle 0x10009b1b
mov dword [ebp - 0x934], 1
jmp 0x10009b22
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x280]
cmp eax, dword [ebp - 0x934]
jl 0x10009b3c
mov dword [ebp - 0x2dc], 1
jmp 0x10009b43
and dword [ebp - 0x2dc], 0
push 1
lea ecx, [ebp - 0xb78]
call fcn.100164aa
mov ecx, dword [ebp - 0x2dc]
mov dword [eax], ecx
cmp dword [ebp - 0x2dc], 0
jae 0x10009b6d
mov dword [ebp - 0x944], 1
jmp 0x10009b74
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x93c]
cmp dword [ebp - 0x944], eax
jne 0x10009b94
mov eax, 0x5b5c
test eax, eax
jne 0x10009b94
and dword [ebp - 0x40c], 0
jmp 0x10009b9e
mov dword [ebp - 0x40c], 1
mov eax, dword [ebp - 0x280]
add eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x280]
jge 0x10009bbe
mov dword [ebp - 0x8b8], 1
jmp 0x10009bc5
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 5
je 0x10009bf3
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x10009bf1
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetPropA]
jmp 0x10009c1b
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x10009c1b
push 0
push 0
push 0xd15
push 0x641
push 0
call dword [sym.imp.USER32.dll_ModifyMenuW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb78]
call fcn.1001648e
mov dword [ebp - 0x178], 0x83c7730f
mov dword [ebp - 0x1b8], 0x3df75dce
mov dword [ebp - 0xac], 0xfffffff7
mov dword [ebp - 0x18c], 0xbe02189f
mov dword [ebp - 0x1b8], 0
jmp 0x10009c6b
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xfffffff5
jg 0x1000a053
mov dword [ebp - 0x414], 0xfffffffe
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x6dc], 1
mov dword [ebp - 0xd60], 0xfffffff7
mov dword [ebp - 0x824], 0xfffffffe
mov dword [ebp - 0x2e4], 3
mov dword [ebp - 0xa8c], 0x6f4ed832
mov dword [ebp - 0x190], 0
jmp 0x10009cd7
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jge 0x10009cf3
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0x9d0], 0xa35f394a
jmp 0x10009cca
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x10009d0d
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x9d0], 4
jmp 0x10009d3b
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9d0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x9d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9d0], 0xffffffec
jl 0x1000a04e
mov dword [ebp - 0xf6c], 1
mov dword [ebp - 0xf68], 1
mov dword [ebp - 0xf64], 1
mov dword [ebp - 0xf60], 1
mov dword [ebp - 0xd68], 0xffffffff
mov dword [ebp - 0xd70], 0xffffffff
mov dword [ebp - 0x5c], 0xc7a8
mov dword [ebp - 0x240], 0
jmp 0x10009dab
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x10009dc7
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x108], 0xff44cacf
jmp 0x10009d9e
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0xac], 0
jmp 0x10009de7
mov eax, dword [ebp - 0xac]
dec eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jl 0x1000a049
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x8c8], 0
mov dword [ebp - 0x5c], 0
jmp 0x10009e18
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jg 0x10009e8c
mov dword [ebp - 0x184], 0
jmp 0x10009e37
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x10009e8a
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x184]
mov eax, dword [ebp + eax*4 - 0x108]
mov dword [ebp + ecx*4 - 0x108], eax
mov dword [ebp - 0x18c], 3
jmp 0x10009e70
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x10009e88
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
jmp 0x10009e63
jmp 0x10009e2a
jmp 0x10009e11
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0xd78], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0xd80], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x34c]
sub eax, dword [ebp - 0x414]
jne 0x10009edd
cmp dword [ebp - 0xa8c], 0
jne 0x10009edd
cmp dword [ebp - 0x5c], 0
jne 0x10009edd
and dword [ebp - 0x8c0], 0
jmp 0x10009ee7
mov dword [ebp - 0x8c0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9d0]
cmp dword [ebp - 0x8c0], eax
jge 0x10009f07
mov dword [ebp - 0x41c], 1
jmp 0x10009f0e
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x5c]
imul eax, dword [ebp - 0x41c]
mov dword [ebp - 0x8c8], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0x108]
cmp eax, dword [ebp - 0x8c8]
jle 0x10009f3f
mov dword [ebp - 0x424], 1
jmp 0x10009f46
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0xdfe1602a
jb 0x10009f67
cmp dword [ebp - 0xac], 0
je 0x10009f67
mov dword [ebp - 0xa94], 1
jmp 0x10009f6e
and dword [ebp - 0xa94], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9d0]
mov dword [ebp - 0xd88], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0xac], 0
jne 0x10009faf
cmp dword [ebp - 0x18c], 0
jne 0x10009faf
and dword [ebp - 0x8d0], 0
jmp 0x10009fb9
mov dword [ebp - 0x8d0], 1
mov eax, dword [ebp - 0x8d0]
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 0xfffb
jae 0x10009fdd
mov dword [ebp - 0x8d8], 1
jmp 0x10009fe4
and dword [ebp - 0x8d8], 0
cmp dword [ebp - 0x8d8], 0xffffffff
je 0x10009ff9
mov dword [ebp - 0x430], 1
jmp 0x1000a000
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 0
jne 0x1000a02e
mov eax, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0x108], 0
jne 0x1000a02e
and dword [ebp - 0x438], 0
jmp 0x1000a038
mov dword [ebp - 0x438], 1
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x6dc], eax
jmp 0x10009dda
jmp 0x10009d20
jmp 0x10009c5e
mov dword [ebp - 0x1c0], 0
jmp 0x1000a06c
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x1000a088
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xaa4], 0
jmp 0x1000a05f
push 1
lea ecx, [ebp - 0xae4]
call fcn.10016409
mov dword [ebp - 4], 5
push 3
lea ecx, [ebp - 0xe88]
call fcn.10016409
mov byte [ebp - 4], 6
mov dword [ebp - 0x60], 0
jmp 0x1000a0bd
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1000a0d9
push dword [ebp - 0x60]
lea ecx, [ebp - 0xae4]
call fcn.100164aa
mov dword [eax], 0x3ae35568
jmp 0x1000a0b6
mov dword [ebp - 0x60], 0
jmp 0x1000a0e9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x1000a102
push dword [ebp - 0x60]
lea ecx, [ebp - 0xe88]
call fcn.100164aa
and dword [eax], 0
jmp 0x1000a0e2
push 0
lea ecx, [ebp - 0xae4]
call fcn.100164aa
and dword [eax], 0
jmp 0x1000a138
push 0
lea ecx, [ebp - 0xae4]
call fcn.100164aa
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x440]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x440]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xae4]
call fcn.100164aa
cmp dword [eax], 2
je 0x1000a1c5
mov dword [ebp - 0x2c0], 0x8ab659d5
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000a171
push 0x1714
call dword [sym.imp.USER32.dll_GetSysColorBrush]
mov dword [ebp - 0x2c0], 0
jmp 0x1000a18a
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 2
jg 0x1000a1c0
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000a1be
push 0x79b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x1000a17d
jmp 0x1000a114
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe88]
call fcn.1001648e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xae4]
call fcn.1001648e
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x1000a3ba
mov dword [ebp - 0x384], 4
push 4
lea ecx, [ebp - 0xc54]
call fcn.10016409
mov dword [ebp - 4], 7
mov dword [ebp - 0xa9c], 0x64bae0f
mov dword [ebp - 0xa0], 0
jmp 0x1000a23a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1000a256
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x82c], 0xfffffffa
jmp 0x1000a22d
mov dword [ebp - 0xa0], 0
jmp 0x1000a26f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1000a291
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xc54]
call fcn.100164aa
mov dword [eax], 0x272b
jmp 0x1000a262
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000a2ab
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x82c], 0
cmp dword [ebp - 0x384], 0
jne 0x1000a2d1
mov dword [ebp - 0x8cc], 1
jmp 0x1000a2d8
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 8
je 0x1000a2ed
mov dword [ebp - 0x448], 1
jmp 0x1000a2f4
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x448]
jg 0x1000a30e
mov dword [ebp - 0x6e4], 1
jmp 0x1000a315
and dword [ebp - 0x6e4], 0
mov esi, dword [ebp - 0x384]
push 1
lea ecx, [ebp - 0xc54]
call fcn.100164aa
mov ecx, dword [ebp - 0x6e4]
add ecx, dword [eax]
cmp esi, ecx
jne 0x1000a340
mov dword [ebp - 0x450], 1
jmp 0x1000a347
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0x555b
jge 0x1000a36f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x82c], 0
je 0x1000a36f
mov dword [ebp - 0x458], 1
jmp 0x1000a376
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
dec eax
cmp eax, 0x89480189
jae 0x1000a390
mov dword [ebp - 0x6ec], 1
jmp 0x1000a397
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0xa9c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc54]
call fcn.1001648e
push 0
call dword [sym.imp.USER32.dll_SetCursor]
mov dword [ebp - 0x114], 0xffffffff
mov dword [ebp - 0x118], 0xb392
mov dword [ebp - 0x468], 0xe418a527
mov dword [ebp - 0x354], 0xc3414b5
mov dword [ebp - 0x1c8], 0
jmp 0x1000a3fb
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x1000a417
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x1048], 1
jmp 0x1000a3ee
mov dword [ebp - 0x114], 0
jmp 0x1000a430
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xfffffff9
je 0x1000a516
mov dword [ebp - 0x2ec], 0x977a124
mov dword [ebp - 0x118], 0xfaaa
cmp dword [ebp - 0x118], 8
jge 0x1000a466
mov dword [ebp - 0x460], 1
jmp 0x1000a46d
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x460], eax
jge 0x1000a487
mov dword [ebp - 0x6f4], 1
jmp 0x1000a48e
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x114], 0
jne 0x1000a4a5
xor eax, eax
inc eax
jne 0x1000a4a5
and dword [ebp - 0x920], 0
jmp 0x1000a4af
mov dword [ebp - 0x920], 1
mov eax, dword [ebp - 0x920]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x6f4], eax
jg 0x1000a4d5
mov dword [ebp - 0x470], 1
jmp 0x1000a4dc
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x354]
mov dword [ebp - 0x2ec], eax
mov eax, dword [ebp - 0x2ec]
mov dword [ebp - 0xd98], eax
mov eax, dword [ebp - 0x2ec]
add eax, 0x383c67ee
mov dword [ebp - 0x354], eax
jmp 0x1000a423
mov dword [ebp - 0x118], 0
jmp 0x1000a52f
mov eax, dword [ebp - 0x118]
inc eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 1
jg 0x1000a5b7
mov dword [ebp - 0x248], 0x39e0
mov dword [ebp - 0xda0], 0xaf2c9a13
mov dword [ebp - 0xda8], 0xe974ca77
mov dword [ebp - 0x834], 0xfffb
mov eax, dword [ebp - 0x834]
dec eax
mov dword [ebp - 0x834], eax
mov dword [ebp - 0x248], 1
jmp 0x1000a586
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0
jl 0x1000a5b2
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1000a5b0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
jmp 0x1000a579
jmp 0x1000a522
mov dword [ebp - 0x178], 0
jmp 0x1000a5d0
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1000a5ed
mov eax, dword [ebp - 0x178]
cmp dword [ebp + eax*4 - 0xaa4], 0
je 0x1000a5eb
jmp 0x1000a5ed
jmp 0x1000a5c3
mov dword [ebp - 0xdb0], 0xfffffffe
mov dword [ebp - 0xdb8], 0x5f394a2a
mov dword [ebp - 0xdc0], 0x2937a3a1
mov dword [ebp - 0xf80], 0x8144ad72
mov dword [ebp - 0xf7c], 0x8144ad72
mov dword [ebp - 0xf78], 0x8144ad72
mov dword [ebp - 0xf74], 0x8144ad72
mov dword [ebp - 0xdc8], 0xfffffffa
push 3
lea ecx, [ebp - 0xe98]
call fcn.10016409
mov dword [ebp - 4], 8
mov dword [ebp - 0x478], 0xf8ee
mov dword [ebp - 0x68], 0
jmp 0x1000a66b
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000a681
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1094], 1
jmp 0x1000a664
mov dword [ebp - 0x68], 0
jmp 0x1000a691
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000a6ad
push dword [ebp - 0x68]
lea ecx, [ebp - 0xe98]
call fcn.100164aa
mov dword [eax], 0xe6dc660f
jmp 0x1000a68a
mov eax, dword [ebp - 0x478]
inc eax
mov dword [ebp - 0x478], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe98]
call fcn.1001648e
mov dword [ebp - 0xdd0], 0xfffffffe
mov dword [ebp - 0xdd8], 0x5f394a2a
mov dword [ebp - 0xde0], 0x2937a3a1
mov dword [ebp - 0xf94], 0x8144ad72
mov dword [ebp - 0xf90], 0x8144ad72
mov dword [ebp - 0xf8c], 0x8144ad72
mov dword [ebp - 0xf88], 0x8144ad72
mov dword [ebp - 0xde8], 0xfffffffa
push 3
lea ecx, [ebp - 0xea8]
call fcn.10016409
mov dword [ebp - 4], 9
mov dword [ebp - 0x6fc], 0xf8ee
mov dword [ebp - 0x88], 0
jmp 0x1000a750
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000a76c
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x1088], 1
jmp 0x1000a743
mov dword [ebp - 0x88], 0
jmp 0x1000a785
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000a7a7
push dword [ebp - 0x88]
lea ecx, [ebp - 0xea8]
call fcn.100164aa
mov dword [eax], 0xe6dc660f
jmp 0x1000a778
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.1001648e
mov dword [ebp - 0x28], 0x4e2d
push 2
lea ecx, [ebp - 0xaf4]
call fcn.10016409
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xbc], 0xa6c6
mov dword [ebp - 0x3ac], 0xfc37
mov dword [ebp - 0xacc], 0xad8edce5
mov dword [ebp - 0x1d0], 0
jmp 0x1000a815
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x1000a837
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xaf4]
call fcn.100164aa
mov dword [eax], 0xad59e57a
jmp 0x1000a808
cmp dword [ebp - 0x28], 0
je 0x1000a8e4
mov dword [ebp - 0x288], 0
jmp 0x1000a85a
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 4
jge 0x1000a876
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0xfdc], 0
jmp 0x1000a84d
mov dword [ebp - 0x28], 0
jmp 0x1000a886
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jg 0x1000a8a9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfdc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xfdc], eax
jmp 0x1000a87f
mov dword [ebp - 0x28], 0
jmp 0x1000a8b9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x27
jg 0x1000a8df
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000a8dd
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1000a8b2
jmp 0x1000a9dc
mov dword [ebp - 0x1d8], 0x815898f0
mov dword [ebp - 0xaac], 0xffffffff
mov dword [ebp - 0xabc], 0xfffffffb
push 0
lea ecx, [ebp - 0xaf4]
call fcn.100164aa
mov eax, dword [eax]
sub eax, 0xde9bf9f
mov dword [ebp - 0x1d8], eax
mov eax, 0x1e01
test eax, eax
je 0x1000a98c
mov eax, dword [ebp - 0xaac]
add eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jg 0x1000a93f
mov dword [ebp - 0x480], 1
jmp 0x1000a946
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x480]
cmp eax, 0x1b0c
jl 0x1000a962
mov dword [ebp - 0x8d4], 1
jmp 0x1000a969
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x8d4]
jle 0x1000a98c
cmp dword [ebp - 0x1d8], 0
je 0x1000a98c
mov dword [ebp - 0xab4], 1
jmp 0x1000a993
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xdf0], eax
cmp dword [ebp - 0xbc], 0
je 0x1000a9c3
push 0
lea ecx, [ebp - 0xaf4]
call fcn.100164aa
cmp dword [eax], 0
je 0x1000a9c3
mov dword [ebp - 0x488], 1
jmp 0x1000a9ca
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x1d8]
sub eax, dword [ebp - 0x488]
mov dword [ebp - 0xabc], eax
mov dword [ebp - 0xbc], 0
jmp 0x1000a9f5
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xfffffff0
je 0x1000ac32
mov dword [ebp - 0x2f4], 0
mov dword [ebp - 0x3f0], 0xbecc33ba
mov dword [ebp - 0x3ec], 0xbecc33ba
mov dword [ebp - 0x3e8], 0xbecc33ba
mov dword [ebp - 0x3e4], 0xbecc33ba
mov dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xdf8], eax
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x3f0]
push 1
lea ecx, [ebp - 0xaf4]
call fcn.100164aa
cmp esi, dword [eax]
jg 0x1000aa73
mov dword [ebp - 0x704], 1
jmp 0x1000aa7a
and dword [ebp - 0x704], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f0]
cmp eax, dword [ebp - 0x704]
jg 0x1000aaab
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xe00], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x3f0], 0x570d9780
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xe08], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xe10], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f0]
mov dword [ebp - 0xe18], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x3f0]
mov dword [ebp - 0xe20], eax
mov eax, 0xf839
cmp eax, 0x6a36
jg 0x1000ab00
mov dword [ebp - 0x490], 1
jmp 0x1000ab07
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x490], eax
jg 0x1000ab21
mov dword [ebp - 0x83c], 1
jmp 0x1000ab28
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x250], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f0]
mov dword [ebp - 0xe28], eax
cmp dword [ebp - 0x250], 8
jne 0x1000ab5c
mov dword [ebp - 0x498], 1
jmp 0x1000ab63
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x2f4]
cmp dword [ebp - 0x498], eax
jl 0x1000ab7d
mov dword [ebp - 0xac4], 1
jmp 0x1000ab84
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xe30], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3f0], 0xb5bcdce
jl 0x1000abae
mov dword [ebp - 0x70c], 1
jmp 0x1000abb5
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0x70c], 1
jne 0x1000abca
mov dword [ebp - 0x4a0], 1
jmp 0x1000abd1
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x250]
imul eax, dword [ebp - 0x4a0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x3f0]
cmp eax, dword [ebp - 0x250]
jne 0x1000abff
mov dword [ebp - 0x938], 1
jmp 0x1000ac06
and dword [ebp - 0x938], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f0]
mov ecx, dword [ebp - 0x3ac]
add ecx, dword [ebp - 0x938]
add eax, ecx
mov ecx, 0x70c0f3ad
sub ecx, eax
mov dword [ebp - 0xacc], ecx
jmp 0x1000a9e8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.1001648e
mov dword [ebp - 0x30], 0x4e2d
push 2
lea ecx, [ebp - 0xb04]
call fcn.10016409
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xc4], 0xa6c6
mov dword [ebp - 0x35c], 0xfc37
mov dword [ebp - 0xb6c], 0xad8edce5
mov dword [ebp - 0x1e0], 0
jmp 0x1000ac93
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1000acb5
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xb04]
call fcn.100164aa
mov dword [eax], 0xad59e57a
jmp 0x1000ac86
cmp dword [ebp - 0x30], 0
je 0x1000ad62
mov dword [ebp - 0x2a8], 0
jmp 0x1000acd8
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 4
jge 0x1000acf4
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0xffc], 0
jmp 0x1000accb
mov dword [ebp - 0x30], 0
jmp 0x1000ad04
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x1000ad27
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xffc]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xffc], eax
jmp 0x1000acfd
mov dword [ebp - 0x30], 0
jmp 0x1000ad37
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x27
jg 0x1000ad5d
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1000ad5b
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1000ad30
jmp 0x1000ae5a
mov dword [ebp - 0x1e8], 0x815898f0
mov dword [ebp - 0xad4], 0xffffffff
mov dword [ebp - 0xb5c], 0xfffffffb
push 0
lea ecx, [ebp - 0xb04]
call fcn.100164aa
mov eax, dword [eax]
sub eax, 0xde9bf9f
mov dword [ebp - 0x1e8], eax
mov eax, 0x1e01
test eax, eax
je 0x1000ae0a
mov eax, dword [ebp - 0xad4]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jg 0x1000adbd
mov dword [ebp - 0x4a8], 1
jmp 0x1000adc4
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x4a8]
cmp eax, 0x1b0c
jl 0x1000ade0
mov dword [ebp - 0x714], 1
jmp 0x1000ade7
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x1e8]
cmp eax, dword [ebp - 0x714]
jle 0x1000ae0a
cmp dword [ebp - 0x1e8], 0
je 0x1000ae0a
mov dword [ebp - 0xb54], 1
jmp 0x1000ae11
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xe38], eax
cmp dword [ebp - 0xc4], 0
je 0x1000ae41
push 0
lea ecx, [ebp - 0xb04]
call fcn.100164aa
cmp dword [eax], 0
je 0x1000ae41
mov dword [ebp - 0x4b0], 1
jmp 0x1000ae48
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xb5c], eax
mov dword [ebp - 0xc4], 0
jmp 0x1000ae73
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0xfffffff0
je 0x1000b0b0
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x400], 0xbecc33ba
mov dword [ebp - 0x3fc], 0xbecc33ba
mov dword [ebp - 0x3f8], 0xbecc33ba
mov dword [ebp - 0x3f4], 0xbecc33ba
mov dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xe40], eax
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x400]
push 1
lea ecx, [ebp - 0xb04]
call fcn.100164aa
cmp esi, dword [eax]
jg 0x1000aef1
mov dword [ebp - 0x844], 1
jmp 0x1000aef8
and dword [ebp - 0x844], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x400]
cmp eax, dword [ebp - 0x844]
jg 0x1000af29
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xe48], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x400], 0x570d9780
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xe58], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0xf1c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0xf24], eax
mov eax, 0xf839
cmp eax, 0x6a36
jg 0x1000af7e
mov dword [ebp - 0x4b8], 1
jmp 0x1000af85
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x4b8], eax
jg 0x1000af9f
mov dword [ebp - 0x71c], 1
jmp 0x1000afa6
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0x258], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x400]
mov dword [ebp - 0xf2c], eax
cmp dword [ebp - 0x258], 8
jne 0x1000afda
mov dword [ebp - 0x4c0], 1
jmp 0x1000afe1
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x2fc]
cmp dword [ebp - 0x4c0], eax
jl 0x1000affb
mov dword [ebp - 0xb64], 1
jmp 0x1000b002
and dword [ebp - 0xb64], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xf34], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x400], 0xb5bcdce
jl 0x1000b02c
mov dword [ebp - 0x8dc], 1
jmp 0x1000b033
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 1
jne 0x1000b048
mov dword [ebp - 0x4c8], 1
jmp 0x1000b04f
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x258]
imul eax, dword [ebp - 0x4c8]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x400]
cmp eax, dword [ebp - 0x258]
jne 0x1000b07d
mov dword [ebp - 0x724], 1
jmp 0x1000b084
and dword [ebp - 0x724], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x400]
mov ecx, dword [ebp - 0x35c]
add ecx, dword [ebp - 0x724]
add eax, ecx
mov ecx, 0x70c0f3ad
sub ecx, eax
mov dword [ebp - 0xb6c], ecx
jmp 0x1000ae66
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb04]
call fcn.1001648e
mov dword [ebp - 0x11c], 0x2ae7b79f
mov dword [ebp - 0x168], 0xf746e33a
mov dword [ebp - 0x1f0], 0xfffffff6
mov dword [ebp - 0x12c], 0x752570e
push 3
lea ecx, [ebp - 0xc3c]
call fcn.10016409
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x38c], 0xc507b392
mov dword [ebp - 0xa64], 0x592e0c80
mov dword [ebp - 0x500], 1
mov dword [ebp - 0xa14], 1
mov dword [ebp - 0x70], 0
jmp 0x1000b133
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000b149
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x158], 0xfffffff7
jmp 0x1000b12c
mov dword [ebp - 0x70], 0
jmp 0x1000b159
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1000b175
push dword [ebp - 0x70]
lea ecx, [ebp - 0xc3c]
call fcn.100164aa
mov dword [eax], 1
jmp 0x1000b152
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xf3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x158], 0
ja 0x1000b19d
mov dword [ebp - 0x4d0], 1
jmp 0x1000b1a4
and dword [ebp - 0x4d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x4d0], eax
je 0x1000b1c5
mov dword [ebp - 0x84c], 1
jmp 0x1000b1cc
and dword [ebp - 0x84c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x84c], eax
jge 0x1000b1f3
cmp dword [ebp - 0x12c], 0
jne 0x1000b1f3
and dword [ebp - 0x4d8], 0
jmp 0x1000b1fd
mov dword [ebp - 0x4d8], 1
mov eax, dword [ebp - 0x1f0]
cmp dword [ebp - 0x4d8], eax
jl 0x1000b217
mov dword [ebp - 0x72c], 1
jmp 0x1000b21e
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x72c], eax
jl 0x1000b238
mov dword [ebp - 0xb30], 1
jmp 0x1000b23f
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xfc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0xfcc], eax
push 2
lea ecx, [ebp - 0xc3c]
call fcn.100164aa
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x304]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x304]
mov ecx, dword [ecx]
sub ecx, dword [ebp + eax - 0x158]
imul ecx, dword [ebp - 0x168]
cmp ecx, 1
jb 0x1000b2bb
mov dword [ebp - 0x9e0], 1
jmp 0x1000b2c2
and dword [ebp - 0x9e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
mov dword [ebp - 0xfc0], eax
or eax, 0xffffffff
je 0x1000b2ef
cmp dword [ebp - 0x12c], 0
je 0x1000b2ef
mov dword [ebp - 0x4e0], 1
jmp 0x1000b2f6
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 7
ja 0x1000b30b
mov dword [ebp - 0x928], 1
jmp 0x1000b312
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x38c]
imul eax, dword [ebp - 0x928]
cmp eax, dword [ebp - 0x12c]
jne 0x1000b333
mov dword [ebp - 0x4e8], 1
jmp 0x1000b33a
and dword [ebp - 0x4e8], 0
mov eax, 0x223fa3a9
sub eax, dword [ebp - 0x11c]
add eax, dword [ebp - 0x4e8]
cmp eax, dword [ebp - 0x1f0]
jge 0x1000b35f
mov dword [ebp - 0x734], 1
jmp 0x1000b366
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x734], eax
jge 0x1000b380
mov dword [ebp - 0x4f0], 1
jmp 0x1000b387
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x38c]
add eax, dword [ebp - 0x4f0]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x158]
je 0x1000b3ae
mov dword [ebp - 0x854], 1
jmp 0x1000b3b5
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jne 0x1000b3ee
cmp dword [ebp - 0x1f0], 0
jne 0x1000b3ee
cmp dword [ebp - 0x1f0], 0
jne 0x1000b3ee
cmp dword [ebp - 0x38c], 0
jne 0x1000b3ee
and dword [ebp - 0x4f8], 0
jmp 0x1000b3f8
mov dword [ebp - 0x4f8], 1
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x168], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x168], eax
jne 0x1000b425
mov dword [ebp - 0x73c], 1
jmp 0x1000b42c
and dword [ebp - 0x73c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x73c], eax
jne 0x1000b44d
mov dword [ebp - 0x30c], 1
jmp 0x1000b454
and dword [ebp - 0x30c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x158], ecx
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xa64], eax
mov eax, dword [ebp - 0x500]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x158]
cmp eax, 1
jle 0x1000b497
mov dword [ebp - 0x518], 1
jmp 0x1000b49e
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0xa14]
cmp dword [ebp - 0x500], eax
jle 0x1000b4b8
mov dword [ebp - 0x8e4], 1
jmp 0x1000b4bf
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x8e4], eax
jg 0x1000b4d9
mov dword [ebp - 0x508], 1
jmp 0x1000b4e0
and dword [ebp - 0x508], 0
cmp dword [ebp - 0x508], 0
ja 0x1000b4f5
mov dword [ebp - 0x744], 1
jmp 0x1000b4fc
and dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp - 0x744], eax
je 0x1000b51d
mov dword [ebp - 0x510], 1
jmp 0x1000b524
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 4
jb 0x1000b539
mov dword [ebp - 0x85c], 1
jmp 0x1000b540
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x85c], eax
jge 0x1000b55a
mov dword [ebp - 0x74c], 1
jmp 0x1000b561
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x518]
cmp eax, dword [ebp - 0x74c]
jle 0x1000b57b
mov dword [ebp - 0x520], 1
jmp 0x1000b582
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x11c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc3c]
call fcn.1001648e
mov dword [ebp - 0x124], 0x2ae7b79f
mov dword [ebp - 0x188], 0xf746e33a
mov dword [ebp - 0x290], 0xfffffff6
mov dword [ebp - 0x13c], 0x752570e
push 3
lea ecx, [ebp - 0xc6c]
call fcn.10016409
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x314], 0xc507b392
mov dword [ebp - 0xaa8], 0x592e0c80
mov dword [ebp - 0x86c], 1
mov dword [ebp - 0x9f0], 1
mov dword [ebp - 0x98], 0
jmp 0x1000b61a
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1000b636
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x148], 0xfffffff7
jmp 0x1000b60d
mov dword [ebp - 0x98], 0
jmp 0x1000b64f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1000b671
push dword [ebp - 0x98]
lea ecx, [ebp - 0xc6c]
call fcn.100164aa
mov dword [eax], 1
jmp 0x1000b642
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xf5c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x148], 0
ja 0x1000b699
mov dword [ebp - 0x908], 1
jmp 0x1000b6a0
and dword [ebp - 0x908], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
cmp dword [ebp - 0x908], eax
je 0x1000b6c1
mov dword [ebp - 0x528], 1
jmp 0x1000b6c8
and dword [ebp - 0x528], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
cmp dword [ebp - 0x528], eax
jge 0x1000b6ef
cmp dword [ebp - 0x13c], 0
jne 0x1000b6ef
and dword [ebp - 0x754], 0
jmp 0x1000b6f9
mov dword [ebp - 0x754], 1
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x754], eax
jl 0x1000b713
mov dword [ebp - 0x530], 1
jmp 0x1000b71a
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x530], eax
jl 0x1000b734
mov dword [ebp - 0xb44], 1
jmp 0x1000b73b
and dword [ebp - 0xb44], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xe24], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
mov dword [ebp - 0xcb8], eax
push 2
lea ecx, [ebp - 0xc6c]
call fcn.100164aa
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x364]
mov dword [ecx], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x364]
mov ecx, dword [ecx]
sub ecx, dword [ebp + eax - 0x148]
imul ecx, dword [ebp - 0x188]
cmp ecx, 1
jb 0x1000b7b7
mov dword [ebp - 0x9e8], 1
jmp 0x1000b7be
and dword [ebp - 0x9e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
mov dword [ebp - 0xf70], eax
or eax, 0xffffffff
je 0x1000b7eb
cmp dword [ebp - 0x13c], 0
je 0x1000b7eb
mov dword [ebp - 0x864], 1
jmp 0x1000b7f2
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 7
ja 0x1000b807
mov dword [ebp - 0x538], 1
jmp 0x1000b80e
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x314]
imul eax, dword [ebp - 0x538]
cmp eax, dword [ebp - 0x13c]
jne 0x1000b82f
mov dword [ebp - 0x75c], 1
jmp 0x1000b836
and dword [ebp - 0x75c], 0
mov eax, 0x223fa3a9
sub eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x75c]
cmp eax, dword [ebp - 0x290]
jge 0x1000b85b
mov dword [ebp - 0x540], 1
jmp 0x1000b862
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x540], eax
jge 0x1000b87c
mov dword [ebp - 0x8ec], 1
jmp 0x1000b883
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x314]
add eax, dword [ebp - 0x8ec]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x148]
je 0x1000b8aa
mov dword [ebp - 0x548], 1
jmp 0x1000b8b1
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jne 0x1000b8ea
cmp dword [ebp - 0x290], 0
jne 0x1000b8ea
cmp dword [ebp - 0x290], 0
jne 0x1000b8ea
cmp dword [ebp - 0x314], 0
jne 0x1000b8ea
and dword [ebp - 0x764], 0
jmp 0x1000b8f4
mov dword [ebp - 0x764], 1
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x188], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x148]
cmp dword [ebp - 0x188], eax
jne 0x1000b921
mov dword [ebp - 0x550], 1
jmp 0x1000b928
and dword [ebp - 0x550], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
cmp dword [ebp - 0x550], eax
jne 0x1000b949
mov dword [ebp - 0x3a4], 1
jmp 0x1000b950
and dword [ebp - 0x3a4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0x148], ecx
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0xaa8], eax
mov eax, dword [ebp - 0x86c]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x148]
cmp eax, 1
jle 0x1000b993
mov dword [ebp - 0x774], 1
jmp 0x1000b99a
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x9f0]
cmp dword [ebp - 0x86c], eax
jle 0x1000b9b4
mov dword [ebp - 0x558], 1
jmp 0x1000b9bb
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x558], eax
jg 0x1000b9d5
mov dword [ebp - 0x76c], 1
jmp 0x1000b9dc
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x76c], 0
ja 0x1000b9f1
mov dword [ebp - 0x560], 1
jmp 0x1000b9f8
and dword [ebp - 0x560], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x148]
cmp dword [ebp - 0x560], eax
je 0x1000ba19
mov dword [ebp - 0x90c], 1
jmp 0x1000ba20
and dword [ebp - 0x90c], 0
cmp dword [ebp - 0x90c], 4
jb 0x1000ba35
mov dword [ebp - 0x568], 1
jmp 0x1000ba3c
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x568], eax
jge 0x1000ba56
mov dword [ebp - 0x570], 1
jmp 0x1000ba5d
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x774]
cmp eax, dword [ebp - 0x570]
jle 0x1000ba77
mov dword [ebp - 0x874], 1
jmp 0x1000ba7e
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x124], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc6c]
call fcn.1001648e
mov dword [ebp - 0xb4c], 0xfb0b
mov dword [ebp - 0x1f8], 0
jmp 0x1000babc
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1000bad8
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xd00], 0xc1ec2db2
jmp 0x1000baaf
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000bafc
push 0x14d4
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xb4c]
mov dword [ebp + eax - 0xd00], ecx
mov dword [ebp - 0x2c], 0x4e2d
push 2
lea ecx, [ebp - 0xb14]
call fcn.10016409
mov dword [ebp - 4], 0xe
mov dword [ebp - 0xcc], 0xa6c6
mov dword [ebp - 0x36c], 0xfc37
mov dword [ebp - 0xa08], 0xad8edce5
mov dword [ebp - 0x260], 0
jmp 0x1000bb61