Function at 0x100094ea
Capabilities:
Enumerate gui resources
Set registry value
Terminate process

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x112c
call fcn.1007b5b0
push esi
push edi
mov dword [ebp - 0x2c], 0x632667a8
mov dword [ebp - 0xb40], 0x31137833
mov dword [ebp - 0xb48], 0x73f5cfeb
mov dword [ebp - 0x64], 0
jmp 0x10009524
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000953a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc94], 0xf99f
jmp 0x1000951d
mov dword [ebp - 0x64], 0
jmp 0x1000954a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x10009560
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x10a0], 1
jmp 0x10009543
mov dword [ebp - 0x2c], 2
jmp 0x10009570
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1000977a
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0x1fc], 0xffffffff
mov dword [ebp - 0x6c0], 0x4d41bd43
cmp dword [ebp - 0x2c], 0
je 0x100095a5
cmp dword [ebp - 0xd8], 0
cmp dword [ebp - 0x2c], 0xfffffffd
jg 0x100095b7
mov dword [ebp - 0x9ac], 1
jmp 0x100095be
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xfd8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd8]
cmp dword [ebp + eax - 0xc94], ecx
jl 0x100095e8
mov dword [ebp - 0x53c], 1
jmp 0x100095ef
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
neg eax
cmp eax, dword [ebp - 0x1fc]
jge 0x1000960b
mov dword [ebp - 0x95c], 1
jmp 0x10009612
and dword [ebp - 0x95c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc94]
cmp eax, dword [ebp - 0x95c]
jle 0x10009633
mov dword [ebp - 0x964], 1
jmp 0x1000963a
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x964], eax
jl 0x10009654
mov dword [ebp - 0x96c], 1
jmp 0x1000965b
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x96c], eax
jne 0x10009675
mov dword [ebp - 0xb38], 1
jmp 0x1000967c
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb40]
cmp dword [ebp - 0x1fc], eax
jl 0x10009696
mov dword [ebp - 0x974], 1
jmp 0x1000969d
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x974]
mov dword [ebp - 0x6c0], eax
mov eax, dword [ebp - 0x6c0]
cmp dword [ebp - 0x2c], eax
je 0x100096bb
cmp dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0xd8], eax
jg 0x100096d2
mov dword [ebp - 0x91c], 1
jmp 0x100096d9
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x91c], eax
jge 0x100096f0
mov dword [ebp - 0x3d4], 1
jmp 0x100096f7
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x3d4]
jl 0x10009721
cmp dword [ebp - 0x1fc], 0
je 0x10009721
mov dword [ebp - 0x924], 1
jmp 0x10009728
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x924], eax
jne 0x1000974e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc94], 0
jne 0x1000974e
and dword [ebp - 0x3dc], 0
jmp 0x10009758
mov dword [ebp - 0x3dc], 1
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xd8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10a0], 0
jmp 0x10009569
mov dword [ebp - 0x214], 0xfffffffd
mov dword [ebp - 0x2b0], 0
jmp 0x1000979d
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x100097b9
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0xd94], 0xfffffffc
jmp 0x10009790
mov dword [ebp - 0x214], 0
jmp 0x100097d2
mov eax, dword [ebp - 0x214]
dec eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 0
jl 0x100097f7
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x100097f5
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jmp 0x100097c5
mov dword [ebp - 0x30], 0x632667a8
mov dword [ebp - 0xafc], 0x31137833
mov dword [ebp - 0x208], 0x90ac204e
mov dword [ebp - 0x944], 0x95aad853
mov dword [ebp - 0xb30], 0xfffffffb
mov dword [ebp - 0x394], 0
mov dword [ebp - 0xbc8], 0xfffffffd
mov dword [ebp - 0xbd8], 0xc33bab72
mov dword [ebp - 0x320], 0
jmp 0x1000985d
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 3
jge 0x10009879
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0xed8], 7
jmp 0x10009850
mov dword [ebp - 0x208], 0xfffffff3
jmp 0x10009892
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0x19
jl 0x10009a5d
mov dword [ebp - 0x398], 0xa29
mov dword [ebp - 0x934], 0
mov dword [ebp - 0xbd0], 0x9f361739
mov dword [ebp - 0x21c], 0
jmp 0x100098d6
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x100098f2
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x10d0], 0x15898f01
jmp 0x100098c9
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x92c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x92c]
mov dword [ebp + eax - 0x10d0], ecx
cmp dword [ebp - 0x92c], 0xfffffffd
jb 0x10009933
mov dword [ebp - 0xb50], 1
jmp 0x1000993a
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0x934]
cmp dword [ebp - 0x208], eax
jl 0x10009954
mov dword [ebp - 0x3e4], 1
jmp 0x1000995b
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0
jge 0x10009970
mov dword [ebp - 0x3ec], 1
jmp 0x10009977
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x934]
cmp dword [ebp - 0x3ec], eax
jge 0x10009991
mov dword [ebp - 0x93c], 1
jmp 0x10009998
and dword [ebp - 0x93c], 0
cmp dword [ebp - 0x93c], 0x6de6
jne 0x100099b0
mov dword [ebp - 0x3f4], 1
jmp 0x100099b7
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x3f4]
sub eax, dword [ebp - 0x944]
cmp eax, 0x2a77b69c
jle 0x100099d6
mov dword [ebp - 0xb58], 1
jmp 0x100099dd
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0xb60], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xb60]
mov dword [ebp + eax - 0xed8], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xed8], 0
je 0x10009a21
mov eax, 0xbf5c
test eax, eax
je 0x10009a21
mov dword [ebp - 0xb68], 1
jmp 0x10009a28
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xda4], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xdac], eax
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0xbd0], eax
jmp 0x10009885
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0xb30], eax
mov dword [ebp - 0x9d4], 0x73f5cfeb
mov dword [ebp - 0xdb4], 0x648261f9
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10009a9c
push 0x26c7
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov byte [ebp - 0x16e], 0
movzx eax, byte [ebp - 0x16e]
test eax, eax
je 0x10009ac8
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
mov dword [ebp - 0x9e8], 1
mov dword [ebp - 0x2e8], 0
jmp 0x10009aeb
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 2
jge 0x10009b07
mov eax, dword [ebp - 0x2e8]
mov dword [ebp + eax*4 - 0xe28], 0
jmp 0x10009ade
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9e8]
mov dword [ebp + eax - 0xe28], ecx
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10009b42
push 0
push 0
push 0x1d24
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
mov dword [ebp - 0x58], 0
jmp 0x10009b52
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10009b68
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xca0], 0xf99f
jmp 0x10009b4b
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x178], 0x46a1c17c
mov dword [ebp - 0xdbc], 0x3d8b3d38
mov dword [ebp - 0x418], 0xffffffff
mov dword [ebp - 0x224], 0
jmp 0x10009ba9
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x10009bc5
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x1100], 0x631615e8
jmp 0x10009b9c
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0xe0], 0
jne 0x10009c7b
cmp dword [ebp - 0xe0], 0x7dcd
jne 0x10009bf6
mov dword [ebp - 0x3fc], 1
jmp 0x10009bfd
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x3fc], eax
je 0x10009c17
mov dword [ebp - 0x94c], 1
jmp 0x10009c1e
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x94c], eax
jge 0x10009c38
mov dword [ebp - 0x954], 1
jmp 0x10009c3f
and dword [ebp - 0x954], 0
cmp dword [ebp - 0x954], 0x693009c
jge 0x10009c57
mov dword [ebp - 0x414], 1
jmp 0x10009c5e
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0x414]
mov dword [ebp - 0x178], eax
jne 0x10009c7b
and dword [ebp - 0x40c], 0
jmp 0x10009c85
mov dword [ebp - 0x40c], 1
cmp dword [ebp - 0x40c], 0xfff9
ja 0x10009c9d
mov dword [ebp - 0x410], 1
jmp 0x10009ca4
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x410], eax
jg 0x10009cbe
mov dword [ebp - 0x8c8], 1
jmp 0x10009cc5
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x1100], eax
mov dword [ebp - 0x178], 0xffffffe8
jmp 0x10009cf2
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x10009d7f
mov dword [ebp - 0xdcc], 0x1c234ac0
mov dword [ebp - 0xdd4], 0xa4b15d3e
mov dword [ebp - 0xddc], 0xffffffff
mov dword [ebp - 0xde4], 4
mov dword [ebp - 0xdec], 0xae4c7ba3
mov dword [ebp - 0xdf4], 0x77d6446b
mov dword [ebp - 0xfec], 0x91a83acd
mov dword [ebp - 0xfe8], 0x91a83acd
mov dword [ebp - 0xfe4], 0x91a83acd
mov dword [ebp - 0xfe0], 0x91a83acd
mov dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x418]
dec eax
mov dword [ebp - 0x418], eax
jmp 0x10009ce5
mov dword [ebp - 0x58], 0
jmp 0x10009d8f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10009da5
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x10e8], 1
jmp 0x10009d88
mov dword [ebp - 0x30], 2
jmp 0x10009db5
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x10009fbf
mov dword [ebp - 0xe8], 1
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0x430], 0x4d41bd43
cmp dword [ebp - 0x30], 0
je 0x10009dea
cmp dword [ebp - 0xe8], 0
cmp dword [ebp - 0x30], 0xfffffffd
jg 0x10009dfc
mov dword [ebp - 0xb9c], 1
jmp 0x10009e03
and dword [ebp - 0xb9c], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xe04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe8]
cmp dword [ebp + eax - 0xca0], ecx
jl 0x10009e2d
mov dword [ebp - 0x6c8], 1
jmp 0x10009e34
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
neg eax
cmp eax, dword [ebp - 0x1ac]
jge 0x10009e50
mov dword [ebp - 0x420], 1
jmp 0x10009e57
and dword [ebp - 0x420], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca0]
cmp eax, dword [ebp - 0x420]
jle 0x10009e78
mov dword [ebp - 0x820], 1
jmp 0x10009e7f
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x820], eax
jl 0x10009e99
mov dword [ebp - 0x428], 1
jmp 0x10009ea0
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x428], eax
jne 0x10009eba
mov dword [ebp - 0x9cc], 1
jmp 0x10009ec1
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0xafc]
cmp dword [ebp - 0x1ac], eax
jl 0x10009edb
mov dword [ebp - 0x6d0], 1
jmp 0x10009ee2
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x30], eax
je 0x10009f00
cmp dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0xe8], eax
jg 0x10009f17
mov dword [ebp - 0x920], 1
jmp 0x10009f1e
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x920], eax
jge 0x10009f35
mov dword [ebp - 0x438], 1
jmp 0x10009f3c
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0xe8]
imul eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x438]
jl 0x10009f66
cmp dword [ebp - 0x1ac], 0
je 0x10009f66
mov dword [ebp - 0x6d8], 1
jmp 0x10009f6d
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x6d8], eax
jne 0x10009f93
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xca0], 0
jne 0x10009f93
and dword [ebp - 0x440], 0
jmp 0x10009f9d
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x10e8], 0
jmp 0x10009dae
mov dword [ebp - 0x1dc], 2
mov dword [ebp - 0x828], 1
mov dword [ebp - 0xe0c], 0
mov dword [ebp - 0x310], 0
jmp 0x10009ff6
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 4
jge 0x1000a012
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x111c], 1
jmp 0x10009fe9
mov dword [ebp - 0x1dc], 3
jmp 0x1000a02b
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jl 0x1000a058
mov dword [ebp - 0xe14], 1
mov eax, dword [ebp - 0x828]
inc eax
mov dword [ebp - 0x828], eax
cmp dword [ebp - 0x1dc], 0
je 0x1000a056
jmp 0x1000a058
jmp 0x1000a01e
mov dword [ebp - 0x348], 3
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x9e4], 0x273942
mov dword [ebp - 0x14], 0x1c29
mov eax, dword [ebp - 0x348]
add eax, dword [ebp - 0x14]
je 0x1000a20c
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x22c], 0
jmp 0x1000a0ac
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1000a0c8
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x9dc], 1
jmp 0x1000a09f
mov dword [ebp - 0x14], 0xffffffe6
jmp 0x1000a0d8
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff0
jle 0x1000a12b
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1000a10b
push 0x1d6
push 0
push 0x4f8
push 0xf02
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000a129
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1000a0d1
cmp dword [ebp - 0x1b4], 0
je 0x1000a1cc
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x1b4], eax
jg 0x1000a152
mov dword [ebp - 0x448], 1
jmp 0x1000a159
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 1
jae 0x1000a16e
mov dword [ebp - 0xbd4], 1
jmp 0x1000a175
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xe1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xe78], eax
mov eax, 0xa056
imul eax, eax, 0xb552
cmp eax, 0xdc2a82a1
jae 0x1000a1a8
mov dword [ebp - 0x6e0], 1
jmp 0x1000a1af
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x6e0]
test eax, eax
je 0x1000a1cc
mov dword [ebp - 0x450], 1
jmp 0x1000a1d3
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x450], eax
jne 0x1000a1ed
mov dword [ebp - 0x8d0], 1
jmp 0x1000a1f4
and dword [ebp - 0x8d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8d0]
mov dword [ebp + eax - 0x9dc], ecx
jmp 0x1000a349
mov dword [ebp - 0x180], 0xffffffff
mov dword [ebp - 0x458], 0x1639956a
cmp dword [ebp - 0x14], 0
jne 0x1000a241
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x458], eax
cmp dword [ebp - 0x458], 0
jne 0x1000a241
and dword [ebp - 0x6e8], 0
jmp 0x1000a24b
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x180]
sub eax, 7
cmp eax, dword [ebp - 0x180]
jl 0x1000a263
cmp dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0xe80], eax
cmp dword [ebp - 0x6e8], 6
jae 0x1000a284
mov dword [ebp - 0x460], 1
jmp 0x1000a28b
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x460], eax
jg 0x1000a2ab
mov eax, 0x618de0f4
test eax, eax
jne 0x1000a2ab
and dword [ebp - 0x830], 0
jmp 0x1000a2b5
mov dword [ebp - 0x830], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x830], eax
je 0x1000a2cc
mov dword [ebp - 0x468], 1
jmp 0x1000a2d3
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xffffffff
je 0x1000a2e8
mov dword [ebp - 0x6f0], 1
jmp 0x1000a2ef
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6f0], eax
jl 0x1000a306
mov dword [ebp - 0xb04], 1
jmp 0x1000a30d