Function at 0x10008889
Capabilities:
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x17e4
call fcn.10076fb0
push esi
push edi
mov dword [ebp - 0x3e4], 0xfffffffe
mov dword [ebp - 0xcc], 0
jmp 0x100088bb
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x100088d7
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x17a8], 0xfffffffe
jmp 0x100088ae
mov dword [ebp - 0xcc], 0
jmp 0x100088f0
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000890c
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1748], 0xff55e00f
jmp 0x100088e3
mov dword [ebp - 0x3e4], 0
jmp 0x10008925
mov eax, dword [ebp - 0x3e4]
inc eax
mov dword [ebp - 0x3e4], eax
cmp dword [ebp - 0x3e4], 2
jg 0x10008956
mov byte [ebp - 0x186], 0
movzx eax, byte [ebp - 0x186]
test eax, eax
je 0x10008954
push 0
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x10008918
mov byte [ebp - 0x184], 0
movzx eax, byte [ebp - 0x184]
test eax, eax
je 0x1000896e
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [ebp - 0x37c], 0xfffffffe
mov dword [ebp - 0xc0], 0
jmp 0x10008991
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x100089ad
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x17cc], 0xfffffffe
jmp 0x10008984
mov dword [ebp - 0xc0], 0
jmp 0x100089c6
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x100089e2
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1758], 0xff55e00f
jmp 0x100089b9
mov dword [ebp - 0x37c], 0
jmp 0x100089fb
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 2
jg 0x10008a2c
mov byte [ebp - 0x188], 0
movzx eax, byte [ebp - 0x188]
test eax, eax
je 0x10008a2a
push 0
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x100089ee
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x10008a44
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [ebp - 0x1a0], 0xe1757117
mov dword [ebp - 0x1a0], 0
jmp 0x10008a67
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0x10
jle 0x10008c24
mov dword [ebp - 0x80], 0x45f1dbec
mov dword [ebp - 0x2c4], 0
jmp 0x10008a94
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x10008ab0
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xf7c], 0x68906353
jmp 0x10008a87
cmp dword [ebp - 0x80], 0
je 0x10008abb
jmp 0x10008c24
mov dword [ebp - 0x80], 0
jmp 0x10008acb
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xc
je 0x10008c1f
mov dword [ebp - 0x218], 0
cmp dword [ebp - 0x80], 0
je 0x10008aea
jmp 0x10008c1f
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x136c], eax
cmp dword [ebp - 0x1a0], 0x1bf07968
jne 0x10008b0b
mov dword [ebp - 0xe20], 1
jmp 0x10008b12
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x14f4], eax
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x141c], eax
cmp dword [ebp - 0x80], 0xfffffffc
je 0x10008b3c
mov dword [ebp - 0xa10], 1
jmp 0x10008b43
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x218]
cmp eax, dword [ebp - 0xa10]
jl 0x10008b5d
mov dword [ebp - 0xd6c], 1
jmp 0x10008b64
and dword [ebp - 0xd6c], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xd6c], eax
jl 0x10008b7b
mov dword [ebp - 0xd74], 1
jmp 0x10008b82
and dword [ebp - 0xd74], 0
cmp dword [ebp - 0xd74], 0xf6802998
jb 0x10008b9a
mov dword [ebp - 0xd7c], 1
jmp 0x10008ba1
and dword [ebp - 0xd7c], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xd7c], eax
jl 0x10008bbb
mov dword [ebp - 0xd84], 1
jmp 0x10008bc2
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xd84], eax
jle 0x10008bdc
mov dword [ebp - 0xd8c], 1
jmp 0x10008be3
and dword [ebp - 0xd8c], 0
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xd8c], eax
jl 0x10008bfd
mov dword [ebp - 0xd94], 1
jmp 0x10008c04
and dword [ebp - 0xd94], 0
mov eax, dword [ebp - 0xd94]
sub eax, dword [ebp - 0x80]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf7c], eax
jmp 0x10008ac4
jmp 0x10008a5a
mov dword [ebp - 0x3a4], 0xfffffffe
mov dword [ebp - 0x2b4], 0xfffffffa
mov dword [ebp - 0xbcc], 0x7dfe4d9e
mov dword [ebp - 0x1544], 0xfffffffd
mov dword [ebp - 0xf94], 6
mov dword [ebp - 0x1424], 0x132d7af2
mov dword [ebp - 0xf8c], 0xdfddae9
mov dword [ebp - 0xbf4], 0xfffffffe
mov dword [ebp - 0x384], 3
mov dword [ebp - 0xbe4], 0xb11f3813
mov dword [ebp - 0x45c], 0
mov dword [ebp - 0x14fc], 0x5706b379
mov dword [ebp - 0x142c], 0xffffffff
mov dword [ebp - 0x584], 0x4cff15cc
mov dword [ebp - 0x1018], 0xffffffff
mov dword [ebp - 0x156c], 0x40271dbc
mov dword [ebp - 0x1434], 5
mov dword [ebp - 0x2cc], 4
mov dword [ebp - 0x1504], 0xea0627e8
mov dword [ebp - 0xf9c], 9
mov dword [ebp - 0x1008], 0x5ad058bb
mov dword [ebp - 0x143c], 0xbd2f23d3
mov dword [ebp - 0x154c], 0
mov dword [ebp - 0xf84], 0x898cbdb6
mov dword [ebp - 0x159c], 0x9634
mov dword [ebp - 0x1598], 0x9634
mov dword [ebp - 0x1594], 0x9634
mov dword [ebp - 0x1590], 0x9634
mov dword [ebp - 0x1444], 0
mov dword [ebp - 0x150c], 0x839bf5bf
mov dword [ebp - 0x1010], 0x89276496
mov dword [ebp - 0x1220], 0xffbe6269
mov dword [ebp - 0x121c], 0xffbe6269
mov dword [ebp - 0x1218], 0xffbe6269
mov dword [ebp - 0x1214], 0xffbe6269
mov dword [ebp - 0xd9c], 0
cmp dword [ebp - 0x2b4], 0
jne 0x10008da1
mov dword [ebp - 0x55c], 1
jmp 0x10008da8
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0xd9c]
dec eax
mov dword [ebp - 0xd9c], eax
mov eax, 0x61e7ff51
sub eax, dword [ebp - 0xf84]
cmp eax, dword [ebp - 0x384]
mov eax, dword [ebp - 0xf8c]
cmp dword [ebp - 0xf94], eax
jl 0x10008de0
mov dword [ebp - 0xda4], 1
jmp 0x10008de7
and dword [ebp - 0xda4], 0
mov eax, dword [ebp - 0xda4]
sub eax, 0x2f520a05
cmp dword [ebp - 0x2b4], eax
je 0x10008e06
mov dword [ebp - 0xcd8], 1
jmp 0x10008e0d
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0xcd8]
jne 0x10008e27
mov dword [ebp - 0xbc4], 1
jmp 0x10008e2e
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x144c], eax
cmp dword [ebp - 0x45c], 0
jne 0x10008e5b
mov dword [ebp - 0x54c], 1
jmp 0x10008e62
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0xf9c]
add eax, dword [ebp - 0x54c]
je 0x10008e85
cmp dword [ebp - 0x2b4], 0
je 0x10008e85
mov dword [ebp - 0x554], 1
jmp 0x10008e8c
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x2b4]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xbcc]
cmp eax, dword [ebp - 0x554]
jge 0x10008eb2
mov dword [ebp - 0xbd4], 1
jmp 0x10008eb9
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x1008]
cmp dword [ebp - 0xbd4], eax
jne 0x10008ed3
mov dword [ebp - 0xbdc], 1
jmp 0x10008eda
and dword [ebp - 0xbdc], 0
mov eax, dword [ebp - 0x55c]
sub eax, dword [ebp - 0xbdc]
cmp eax, dword [ebp - 0x384]
jl 0x10008efa
mov dword [ebp - 0x564], 1
jmp 0x10008f01
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 0xbe4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x1220]
je 0x10008f31
mov dword [ebp - 0x384], 0xffffffff
jmp 0x10009117
mov dword [ebp - 0x268], 0x8b24
mov dword [ebp - 0x1020], 0xfffffff9
mov dword [ebp - 0x2cc], 6
jmp 0x10008f5e
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 0xfffffff3
jle 0x100090f9
mov dword [ebp - 0x2d4], 6
mov dword [ebp - 0x56c], 0x38e5
mov dword [ebp - 0xbec], 0x46ca37ea
mov dword [ebp - 0x574], 0x26b13122
mov dword [ebp - 0x38c], 0
jmp 0x10008fac
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 3
jge 0x10008fc8
mov eax, dword [ebp - 0x38c]
mov dword [ebp + eax*4 - 0x16bc], 0xfffffffa
jmp 0x10008f9f
mov byte [ebp - 0x18a], 0
movzx eax, byte [ebp - 0x18a]
test eax, eax
je 0x10008fe9
push 0
push 0xf7c
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
mov dword [ebp - 0x56c], 1
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x158c], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x1454], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0xbec], eax
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x1278], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x127c], eax
mov dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
sub eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x2d4]
add eax, dword [ebp - 0x584]
cmp eax, dword [ebp - 0x1010]
je 0x10009071
mov dword [ebp - 0x57c], 1
jmp 0x10009078
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x268]
add eax, dword [ebp - 0x57c]
sub eax, dword [ebp - 0x268]
xor ecx, ecx
inc ecx
sub ecx, eax
cmp ecx, dword [ebp - 0x2d4]
jge 0x100090ac
cmp dword [ebp - 0x268], 0
je 0x100090ac
mov dword [ebp - 0xbfc], 1
jmp 0x100090b3
and dword [ebp - 0xbfc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbfc]
mov dword [ebp + eax - 0x16bc], ecx
cmp dword [ebp - 0x584], 0
je 0x100090db
mov dword [ebp - 0xc04], 1
jmp 0x100090e2
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x1018]
add eax, dword [ebp - 0xc04]
mov dword [ebp - 0x1020], eax
jmp 0x10008f51
mov byte [ebp - 0x19c], 0
movzx eax, byte [ebp - 0x19c]
test eax, eax
je 0x10009117
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x100], 4
mov dword [ebp - 0x1028], 1
mov dword [ebp - 0x394], 0
jmp 0x10009144
mov eax, dword [ebp - 0x394]
inc eax
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 4
jge 0x10009160
mov eax, dword [ebp - 0x394]
mov dword [ebp + eax*4 - 0x1778], 0xf75dcec3
jmp 0x10009137
mov dword [ebp - 0x100], 0
jmp 0x10009179
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 3
jg 0x1000928e
mov dword [ebp - 0x504], 0x715f0ed1
mov dword [ebp - 0xc2c], 0xffffffff
mov dword [ebp - 0x1030], 0xee85ec41
cmp dword [ebp - 0x504], 0
je 0x10009265
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x1284], eax
xor eax, eax
jne 0x100091ca
cmp dword [ebp - 0x1028], 0
je 0x100091df
cmp dword [ebp - 0x504], 0
je 0x100091df
mov dword [ebp - 0x58c], 1
jmp 0x100091e6
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x58c]
jl 0x100091fb
cmp dword [ebp - 0x100], 0
mov dword [ebp - 0xc2c], 1
mov eax, dword [ebp - 0xc2c]
cmp dword [ebp - 0x100], eax
jg 0x1000921f
mov dword [ebp - 0x594], 1
jmp 0x10009226
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0xfffffff6
je 0x1000923b
mov dword [ebp - 0xc34], 1
jmp 0x10009242
and dword [ebp - 0xc34], 0
mov eax, dword [ebp - 0x504]
cmp dword [ebp - 0xc34], eax
jg 0x10009259
cmp dword [ebp - 0x100], 0
je 0x10009265
mov dword [ebp - 0x59c], 1
jmp 0x1000926c
and dword [ebp - 0x59c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1778], 0
mov eax, dword [ebp - 0x59c]
mov dword [ebp - 0x1030], eax
jmp 0x1000916c
mov dword [ebp - 0x6c], 0x69b2e414
mov dword [ebp - 0xa0], 0xdd5d0881
mov dword [ebp - 0x220], 0xaad90151
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x50c], 0xffffffff
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x128c], eax
cmp dword [ebp - 0x6c], 0x1a65
je 0x100092db
mov dword [ebp - 0xc3c], 1
jmp 0x100092e2
and dword [ebp - 0xc3c], 0
cmp dword [ebp - 0xc3c], 2
jg 0x100092f7
mov dword [ebp - 0x5a4], 1
jmp 0x100092fe
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x5a4], eax
jl 0x10009319
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x10009319
and dword [ebp - 0xc44], 0
jmp 0x10009323
mov dword [ebp - 0xc44], 1
push 4
pop eax
sub eax, dword [ebp - 0xc44]
sub eax, 0x72b98a72
jne 0x10009342
cmp dword [ebp - 0x6c], 0
jne 0x10009342
and dword [ebp - 0x1038], 0
jmp 0x1000934c
mov dword [ebp - 0x1038], 1
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1294], eax
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x6c]
add eax, 6
je 0x10009374
xor eax, eax
je 0x10009374
mov dword [ebp - 0x1040], 1
jmp 0x1000937b
and dword [ebp - 0x1040], 0
mov eax, dword [ebp - 0x6c]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
je 0x10009392
mov dword [ebp - 0x5ac], 1
jmp 0x10009399
and dword [ebp - 0x5ac], 0
cmp dword [ebp - 0x5ac], 0
jle 0x100093ae
mov dword [ebp - 0xc4c], 1
jmp 0x100093b5
and dword [ebp - 0xc4c], 0
mov eax, dword [ebp - 0xc4c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xa0], eax
jge 0x100093d8
mov dword [ebp - 0x5b4], 1
jmp 0x100093df
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x134], eax
mov dword [ebp - 0x134], 0x10
jmp 0x10009410
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0x14
jge 0x10009806
mov dword [ebp - 0x2e4], 4
mov dword [ebp - 0xc8], 0xffffffff
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x2dc], 0
jmp 0x10009454
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x10009470
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x1704], 0xa0d1f89
jmp 0x10009447
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xc8], eax
jg 0x1000948a
mov dword [ebp - 0xc54], 1
jmp 0x10009491
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc54], eax
jne 0x100094ab
mov dword [ebp - 0x5bc], 1
jmp 0x100094b2
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
imul ecx, dword [ebp - 0x5bc], 0xf4b9060f
imul eax, ecx
cmp eax, dword [ebp - 0x50c]
jge 0x100094e5
mov dword [ebp - 0x1048], 1
jmp 0x100094ec
and dword [ebp - 0x1048], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x129c], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x12a4], eax
or eax, 0xffffffff
jne 0x1000951b
cmp dword [ebp - 0xc8], 0
jne 0x1000951b
and dword [ebp - 0xc5c], 0
jmp 0x10009525
mov dword [ebp - 0xc5c], 1
mov eax, dword [ebp - 0x50c]
cmp dword [ebp - 0xc5c], eax
jg 0x1000953f
mov dword [ebp - 0x5c4], 1
jmp 0x10009546
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 9
ja 0x10009567
mov dword [ebp - 0x10bc], 1
jmp 0x1000956e
and dword [ebp - 0x10bc], 0
cmp dword [ebp - 0xa0], 0
je 0x1000958c
cmp dword [ebp - 0xa0], 0
je 0x1000958c
mov dword [ebp - 0xc64], 1
jmp 0x10009593
and dword [ebp - 0xc64], 0
cmp dword [ebp - 0xc64], 0x4f7d
je 0x100095ab
mov dword [ebp - 0x10c4], 1
jmp 0x100095b2
and dword [ebp - 0x10c4], 0
mov eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x10cc], eax
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x10cc], 0xfffffff7
jne 0x100095e0
mov dword [ebp - 0x5cc], 1
jmp 0x100095e7
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x50c]
cmp dword [ebp - 0x5cc], eax
jle 0x10009601
mov dword [ebp - 0xc6c], 1
jmp 0x10009608
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc6c], eax
jg 0x10009622
mov dword [ebp - 0x5d4], 1
jmp 0x10009629
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0xc8], 0
jmp 0x1000964e
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffe3
jle 0x10009801
mov dword [ebp - 0xc7c], 0xfffffffa
mov dword [ebp - 0x10d4], 0xdda102f3
mov dword [ebp - 0x5f4], 0x24ced0f2
mov dword [ebp - 0x1a8], 0
jmp 0x10009692
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0x10
jle 0x100097fc
mov dword [ebp - 0x39c], 0
jmp 0x100096b8
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 2
jge 0x100096d4
mov eax, dword [ebp - 0x39c]
mov dword [ebp + eax*4 - 0x1194], 0xea989989
jmp 0x100096ab
mov eax, dword [ebp - 0xc7c]
mov dword [ebp - 0x12ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1194], 0
jne 0x10009702
cmp dword [ebp - 0xa0], 0
jne 0x10009702
and dword [ebp - 0xc74], 0
jmp 0x1000970c
mov dword [ebp - 0xc74], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc74], eax
jne 0x10009726
mov dword [ebp - 0x5dc], 1
jmp 0x1000972d
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x5dc]
test eax, eax
je 0x10009753
cmp dword [ebp - 0xc7c], 0
je 0x10009753
mov dword [ebp - 0x5e4], 1
jmp 0x1000975a
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x5e4]
jge 0x10009774
mov dword [ebp - 0xc84], 1
jmp 0x1000977b
and dword [ebp - 0xc84], 0
cmp dword [ebp - 0xc84], 0xfff9
jb 0x10009793
mov dword [ebp - 0x5ec], 1
jmp 0x1000979a
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x10d4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1194], 0xe27a
jge 0x100097c5
mov dword [ebp - 0xc8c], 1
jmp 0x100097cc
and dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0x5f4], eax
mov eax, dword [ebp - 0x5f4]
mov dword [ebp - 0x220], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x1704], ecx
jmp 0x10009685
jmp 0x10009641
jmp 0x10009403
mov dword [ebp - 0xf0], 0
jmp 0x1000981f
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1000983b
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x17e4], 0xfffffffe
jmp 0x10009812
mov dword [ebp - 0xf0], 0
jmp 0x10009854
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jge 0x10009870
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x1750], 0xff55e00f
jmp 0x10009847
mov dword [ebp - 0x3a4], 0
jmp 0x10009889
mov eax, dword [ebp - 0x3a4]
inc eax
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 2
jg 0x10009bd9
mov dword [ebp - 0x1b0], 0x831713b9
mov dword [ebp - 0x4e8], 0x61bab593
mov dword [ebp - 0xfa4], 8
mov dword [ebp - 0xcb4], 0xfffffffb
mov dword [ebp - 0x1b0], 0
jmp 0x100098d7
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 6
jle 0x10009bae
mov dword [ebp - 0x200], 0xd4e7937
mov dword [ebp - 0xe44], 0xfffffffc
mov dword [ebp - 0x2ec], 0
jmp 0x10009911
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jge 0x1000992d
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x3ac], 0x2bf35dd7
jmp 0x10009904
mov dword [ebp - 0x200], 6
jmp 0x10009946
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0x14
jle 0x10009ba9
mov dword [ebp - 0x500], 0x8dc2
mov dword [ebp - 0x290], 0x9b504dbf
mov dword [ebp - 0x4e8], 0x5059b8bc
cmp dword [ebp - 0x200], 0x910a83af
jbe 0x10009989
mov dword [ebp - 0xc94], 1
jmp 0x10009990
and dword [ebp - 0xc94], 0
cmp dword [ebp - 0xc94], 7
jne 0x100099a5
mov dword [ebp - 0x5fc], 1
jmp 0x100099ac
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x5fc], eax
jle 0x100099c6
mov dword [ebp - 0xc9c], 1
jmp 0x100099cd
and dword [ebp - 0xc9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
cmp eax, dword [ebp - 0xc9c]
je 0x100099ee
mov dword [ebp - 0x604], 1
jmp 0x100099f5
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x290], eax
jge 0x10009a1b
mov dword [ebp - 0xca4], 1
jmp 0x10009a22
and dword [ebp - 0xca4], 0
imul eax, dword [ebp - 0xca4], 3
cmp eax, dword [ebp - 0x290]
jne 0x10009a3d
mov dword [ebp - 0x60c], 1
jmp 0x10009a44
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x60c], eax
jle 0x10009a5e
mov dword [ebp - 0xcac], 1
jmp 0x10009a65
and dword [ebp - 0xcac], 0
mov eax, dword [ebp - 0x290]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x3ac]
imul ecx, dword [ebp - 0xcac]
imul eax, ecx
neg eax
cmp eax, 4
ja 0x10009a95
mov dword [ebp - 0x614], 1
jmp 0x10009a9c
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0xcb4], eax
jle 0x10009ac2
mov dword [ebp - 0x61c], 1
jmp 0x10009ac9
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x61c], eax
jge 0x10009ae3
mov dword [ebp - 0xcbc], 1
jmp 0x10009aea
and dword [ebp - 0xcbc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
cmp dword [ebp - 0xcbc], eax
je 0x10009b0b
mov dword [ebp - 0x624], 1
jmp 0x10009b12
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x624]
cmp eax, 0x3ae5685e
je 0x10009b31
mov dword [ebp - 0xcc4], 1
jmp 0x10009b38
and dword [ebp - 0xcc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3ac]
cmp dword [ebp - 0xcc4], eax
jl 0x10009b59
mov dword [ebp - 0x62c], 1
jmp 0x10009b60
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x4e8]
cmp dword [ebp - 0x62c], eax
jl 0x10009b7a
mov dword [ebp - 0xf74], 1
jmp 0x10009b81
and dword [ebp - 0xf74], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x12b4], eax
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
mov dword [ebp - 0xe44], 0xd863780d
jmp 0x10009939
jmp 0x100098ca
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x10009bd4
push 0
push 0x14b3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetScrollInfo]
jmp 0x1000987c
mov dword [ebp - 0x228], 7
mov dword [ebp - 0x2f4], 0
jmp 0x10009bfc
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 1
jge 0x10009c18
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x468], 7
jmp 0x10009bef
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0x468], ecx
mov dword [ebp - 0x228], 0
jmp 0x10009c44
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xfffffff6
jge 0x10009e65
mov dword [ebp - 0x230], 6
mov dword [ebp - 0x270], 0xb17b722b
mov dword [ebp - 0x230], 0
jmp 0x10009c7e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jg 0x10009e60
mov dword [ebp - 0x3b4], 0xf23b1a95
mov dword [ebp - 0x3b4], 0
jmp 0x10009cae
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 0
jg 0x10009e25
mov dword [ebp - 0x2fc], 0
jmp 0x10009cd4
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 2
jge 0x10009cf0
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0xdf4], 1
jmp 0x10009cc7
mov byte [ebp - 0x183], 0
movzx eax, byte [ebp - 0x183]
test eax, eax
je 0x10009d27
push 0x886
push 0
push 0xab4
push 0x205b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_TextOutA]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xdf4], 0
jmp 0x10009d55
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdf4]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xdf4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xdf4], 0
jg 0x10009e20
mov dword [ebp - 0xe1c], 0x6c902da
mov dword [ebp - 0xe18], 0x6c902da
mov dword [ebp - 0xe14], 0x6c902da
mov dword [ebp - 0xe10], 0x6c902da
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe1c], 0
jmp 0x10009dbf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe1c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe1c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe1c], 0
jg 0x10009e1b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x468], 0x8f6c
push 4
pop eax
imul eax, eax, 0
mov ecx, 0x8f6c
sub ecx, dword [ebp + eax - 0xe1c]
mov dword [ebp - 0x270], ecx
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10009e19
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndDialog]
jmp 0x10009da4
jmp 0x10009d3a
jmp 0x10009ca1
mov dword [ebp - 0x270], 0
jmp 0x10009e3e
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jl 0x10009e5b
mov eax, dword [ebp - 0x230]
cmp dword [ebp + eax*4 - 0x468], 0
je 0x10009e59
jmp 0x10009e5b
jmp 0x10009e31
jmp 0x10009c71
jmp 0x10009c37
mov byte [ebp - 0x18c], 0
movzx eax, byte [ebp - 0x18c]
test eax, eax
je 0x10009e7d
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov dword [ebp - 0x88], 0x3e64f147
mov dword [ebp - 0x1e0], 0xc34f1d4b
mov dword [ebp - 0x3bc], 0
jmp 0x10009eaa
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 1
jge 0x10009ec3
mov eax, dword [ebp - 0x3bc]
mov dword [ebp + eax*4 - 0x58], 0x17571177
jmp 0x10009e9d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x58], 0
jmp 0x10009ee8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x58], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0xffffffef
je 0x1000a549
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0xe40], 0xb53b3045
mov dword [ebp - 0x674], 0xfffffff8
mov dword [ebp - 0x304], 0
jmp 0x10009f2d
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 1
jge 0x10009f49
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x102c], 0x7709b807
jmp 0x10009f20
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x1000a08a
mov dword [ebp - 0x88], 0xbf079684
cmp dword [ebp - 0x88], 0
jne 0x10009f89
push 5
pop eax
test eax, eax
jne 0x10009f89
and dword [ebp - 0xccc], 0
jmp 0x10009f93
mov dword [ebp - 0xccc], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x12bc], eax
mov eax, dword [ebp - 0xccc]
sub eax, dword [ebp - 0x10]
cmp eax, dword [ebp - 0x10]
jne 0x10009fb6
mov dword [ebp - 0x634], 1
jmp 0x10009fbd
and dword [ebp - 0x634], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x634], eax
jge 0x10009fdb
mov dword [ebp - 0xcd4], 1
jmp 0x10009fe2
and dword [ebp - 0xcd4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0xcd4], eax
jge 0x1000a000
mov dword [ebp - 0x63c], 1
jmp 0x1000a007
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x63c], eax
jg 0x1000a01e
mov dword [ebp - 0xcdc], 1
jmp 0x1000a025
and dword [ebp - 0xcdc], 0
cmp dword [ebp - 0xcdc], 0xffffffff
jg 0x1000a03a
mov dword [ebp - 0x644], 1
jmp 0x1000a041
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x644], eax
jge 0x1000a05b
cmp dword [ebp - 0x10], 0
jne 0x1000a05b
and dword [ebp - 0xce4], 0
jmp 0x1000a065
mov dword [ebp - 0xce4], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp eax, dword [ebp - 0xce4]
jge 0x1000a083
mov dword [ebp - 0x64c], 1
jmp 0x1000a08a
and dword [ebp - 0x64c], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0x7af9ca3e
jl 0x1000a0a6
mov dword [ebp - 0xcec], 1
jmp 0x1000a0ad
and dword [ebp - 0xcec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0xcec], eax
jne 0x1000a375
mov dword [ebp - 0x654], 0x6cfc4ff2
mov dword [ebp - 0xd0], 0
jmp 0x1000a0e6
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jge 0x1000a102
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x450], 0xc6715623
jmp 0x1000a0d9
mov dword [ebp - 0xd0], 0
jmp 0x1000a11b
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 3
jge 0x1000a137
mov eax, dword [ebp - 0xd0]
mov dword [ebp + eax*4 - 0x16ec], 1
jmp 0x1000a10e
mov dword [ebp - 0x88], 0x1857497f
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x58], 0
jne 0x1000a1b3
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x12c4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x12cc], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x654], eax
mov eax, dword [ebp - 0x654]
cmp dword [ebp - 0x10], eax
je 0x1000a199
mov dword [ebp - 0xcf4], 1
jmp 0x1000a1a0
and dword [ebp - 0xcf4], 0
xor eax, eax
sub eax, dword [ebp - 0xcf4]
jne 0x1000a1b3
and dword [ebp - 0x65c], 0
jmp 0x1000a1bd
mov dword [ebp - 0x65c], 1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x65c]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 0x10]
jg 0x1000a1de
mov dword [ebp - 0xe30], 1
jmp 0x1000a1e5
and dword [ebp - 0xe30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x12d4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x58]
cmp dword [ebp - 0x10], eax
jl 0x1000a213
mov dword [ebp - 0xcfc], 1
jmp 0x1000a21a
and dword [ebp - 0xcfc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xcfc]
sub ecx, dword [ebp + eax - 0x450]
cmp ecx, 0xff81490
jne 0x1000a241
mov dword [ebp - 0x664], 1
jmp 0x1000a248
and dword [ebp - 0x664], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
cmp dword [ebp - 0x664], eax
jg 0x1000a269
mov dword [ebp - 0xd04], 1
jmp 0x1000a270
and dword [ebp - 0xd04], 0
mov eax, dword [ebp - 0xd04]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x58]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x450]
jne 0x1000a2ac
push 4
pop eax
test eax, eax
jne 0x1000a2ac
and dword [ebp - 0x66c], 0
jmp 0x1000a2b6
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x66c], eax
jg 0x1000a2cd
mov dword [ebp - 0x1000], 1
jmp 0x1000a2d4
and dword [ebp - 0x1000], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x12dc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x12e4], eax
cmp dword [ebp - 0x10], 0x8aa138a8
jne 0x1000a30f
mov dword [ebp - 0xe38], 1
jmp 0x1000a316
and dword [ebp - 0xe38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x102c]
mov dword [ebp - 0x12ec], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x12f4], eax
mov eax, dword [ebp - 0xe40]
mov dword [ebp - 0x1430], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x450]
mov dword [ebp - 0x1438], eax
mov eax, 0x9bf0bb9a
dec eax
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x16ec]
imul eax, eax, 0x4c7c
mov dword [ebp - 0x674], eax
jmp 0x1000a544
mov dword [ebp - 0x684], 0xdd1e
mov dword [ebp - 0xe48], 3
mov dword [ebp - 0x10], 0
jmp 0x1000a399
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff7
jge 0x1000a544
mov dword [ebp - 0xfac], 0
mov dword [ebp - 0xd14], 0xffffffff
mov dword [ebp - 0x1e0], 0xffffffef
jmp 0x1000a3d0
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xfffffffc
je 0x1000a53f
mov dword [ebp - 0x1260], 0xe5337c48
mov dword [ebp - 0x125c], 0xe5337c48
mov dword [ebp - 0x1258], 0xe5337c48
mov dword [ebp - 0x1254], 0xe5337c48
mov dword [ebp - 0x3c4], 0
jmp 0x1000a41e
mov eax, dword [ebp - 0x3c4]
inc eax
mov dword [ebp - 0x3c4], eax
cmp dword [ebp - 0x3c4], 2
jge 0x1000a43a
mov eax, dword [ebp - 0x3c4]
mov dword [ebp + eax*4 - 0x1054], 1
jmp 0x1000a411
imul eax, dword [ebp - 0x684], 0
cmp dword [ebp - 0x1e0], eax
jne 0x1000a4fd
cmp dword [ebp - 0xfac], 1
jne 0x1000a46b
mov eax, 0x6d21
test eax, eax
je 0x1000a46b
mov dword [ebp - 0xd0c], 1
jmp 0x1000a472
and dword [ebp - 0xd0c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd0c]
sub ecx, dword [ebp + eax - 0x1054]
add ecx, dword [ebp - 0x674]
neg ecx
mov dword [ebp - 0xd14], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1054]
cmp dword [ebp - 0xd14], eax
jl 0x1000a4b4
mov dword [ebp - 0x67c], 1
jmp 0x1000a4bb
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1054]
cmp dword [ebp - 0x67c], eax
jge 0x1000a4dc
mov dword [ebp - 0xd1c], 1
jmp 0x1000a4e3
and dword [ebp - 0xd1c], 0
mov eax, dword [ebp - 0xe48]
imul eax, dword [ebp - 0xd1c]
test eax, eax
jne 0x1000a4fd
and dword [ebp - 0xd24], 0
jmp 0x1000a507
mov dword [ebp - 0xd24], 1
mov eax, dword [ebp - 0x684]
cmp dword [ebp - 0xd24], eax
je 0x1000a521
mov dword [ebp - 0x68c], 1
jmp 0x1000a528
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68c]
mov dword [ebp + eax - 0x1260], ecx
jmp 0x1000a3c3
jmp 0x1000a392
jmp 0x10009ed3
mov dword [ebp - 0x98], 0x3e64f147
mov dword [ebp - 0x1b8], 0xc34f1d4b
mov dword [ebp - 0x30c], 0
jmp 0x1000a576
mov eax, dword [ebp - 0x30c]
inc eax
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 1
jge 0x1000a58f
mov eax, dword [ebp - 0x30c]
mov dword [ebp + eax*4 - 0x5c], 0x17571177
jmp 0x1000a569
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x5c], 0
jmp 0x1000a5b4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x5c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0xffffffef
je 0x1000ac15
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x1034], 0xb53b3045
mov dword [ebp - 0xa50], 0xfffffff8
mov dword [ebp - 0x3cc], 0
jmp 0x1000a5f9
mov eax, dword [ebp - 0x3cc]
inc eax
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 1
jge 0x1000a615
mov eax, dword [ebp - 0x3cc]
mov dword [ebp + eax*4 - 0xe58], 0x7709b807
jmp 0x1000a5ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x1000a756
mov dword [ebp - 0x98], 0xbf079684
cmp dword [ebp - 0x98], 0
jne 0x1000a655
push 5
pop eax
test eax, eax
jne 0x1000a655
and dword [ebp - 0xd2c], 0
jmp 0x1000a65f
mov dword [ebp - 0xd2c], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1440], eax
mov eax, dword [ebp - 0xd2c]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jne 0x1000a682
mov dword [ebp - 0x694], 1
jmp 0x1000a689
and dword [ebp - 0x694], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0x694], eax
jge 0x1000a6a7
mov dword [ebp - 0xd34], 1
jmp 0x1000a6ae
and dword [ebp - 0xd34], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0xd34], eax
jge 0x1000a6cc
mov dword [ebp - 0x69c], 1
jmp 0x1000a6d3
and dword [ebp - 0x69c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x69c], eax
jg 0x1000a6ea
mov dword [ebp - 0xd3c], 1
jmp 0x1000a6f1
and dword [ebp - 0xd3c], 0
cmp dword [ebp - 0xd3c], 0xffffffff
jg 0x1000a706
mov dword [ebp - 0x6a4], 1
jmp 0x1000a70d
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x6a4], eax
jge 0x1000a727
cmp dword [ebp - 0x18], 0
jne 0x1000a727
and dword [ebp - 0xd44], 0
jmp 0x1000a731
mov dword [ebp - 0xd44], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp eax, dword [ebp - 0xd44]
jge 0x1000a74f
mov dword [ebp - 0x6ac], 1
jmp 0x1000a756
and dword [ebp - 0x6ac], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0x7af9ca3e
jl 0x1000a772
mov dword [ebp - 0xd4c], 1
jmp 0x1000a779
and dword [ebp - 0xd4c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0xd4c], eax
jne 0x1000aa41
mov dword [ebp - 0x6b4], 0x6cfc4ff2
mov dword [ebp - 0x110], 0
jmp 0x1000a7b2
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 2
jge 0x1000a7ce
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x458], 0xc6715623
jmp 0x1000a7a5
mov dword [ebp - 0x110], 0
jmp 0x1000a7e7
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x1000a803
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x16d4], 1
jmp 0x1000a7da
mov dword [ebp - 0x98], 0x1857497f
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1b8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x5c], 0
jne 0x1000a87f
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x1448], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x1450], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x6b4]
cmp dword [ebp - 0x18], eax
je 0x1000a865
mov dword [ebp - 0xd54], 1
jmp 0x1000a86c
and dword [ebp - 0xd54], 0
xor eax, eax
sub eax, dword [ebp - 0xd54]
jne 0x1000a87f
and dword [ebp - 0x6bc], 0
jmp 0x1000a889
mov dword [ebp - 0x6bc], 1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x6bc]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 0x18]
jg 0x1000a8aa
mov dword [ebp - 0x10d0], 1
jmp 0x1000a8b1
and dword [ebp - 0x10d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x1458], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5c]
cmp dword [ebp - 0x18], eax
jl 0x1000a8df
mov dword [ebp - 0xd5c], 1
jmp 0x1000a8e6
and dword [ebp - 0xd5c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd5c]
sub ecx, dword [ebp + eax - 0x458]
cmp ecx, 0xff81490
jne 0x1000a90d
mov dword [ebp - 0xd64], 1
jmp 0x1000a914
and dword [ebp - 0xd64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
cmp dword [ebp - 0xd64], eax
jg 0x1000a935
mov dword [ebp - 0x6c8], 1
jmp 0x1000a93c
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x98], eax
mov eax, dword [ebp - 0x98]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x5c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x458]
jne 0x1000a978
push 4
pop eax
test eax, eax
jne 0x1000a978
and dword [ebp - 0xa4c], 0
jmp 0x1000a982
mov dword [ebp - 0xa4c], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xa4c], eax
jg 0x1000a999
mov dword [ebp - 0xe50], 1
jmp 0x1000a9a0
and dword [ebp - 0xe50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x1460], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x1468], eax
cmp dword [ebp - 0x18], 0x8aa138a8
jne 0x1000a9db
mov dword [ebp - 0xfb4], 1
jmp 0x1000a9e2
and dword [ebp - 0xfb4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe58]
mov dword [ebp - 0x1470], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14f8], eax
mov eax, dword [ebp - 0x1034]
mov dword [ebp - 0x1500], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x1508], eax
mov eax, 0x9bf0bb9a
dec eax
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x16d4]
imul eax, eax, 0x4c7c
mov dword [ebp - 0xa50], eax
jmp 0x1000ac10
mov dword [ebp - 0xa58], 0xdd1e
mov dword [ebp - 0xfbc], 3
mov dword [ebp - 0x18], 0
jmp 0x1000aa65
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff7
jge 0x1000ac10
mov dword [ebp - 0xe60], 0
mov dword [ebp - 0x6d8], 0xffffffff
mov dword [ebp - 0x1b8], 0xffffffef
jmp 0x1000aa9c
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xfffffffc
je 0x1000ac0b
mov dword [ebp - 0x1240], 0xe5337c48
mov dword [ebp - 0x123c], 0xe5337c48
mov dword [ebp - 0x1238], 0xe5337c48
mov dword [ebp - 0x1234], 0xe5337c48
mov dword [ebp - 0x314], 0
jmp 0x1000aaea
mov eax, dword [ebp - 0x314]
inc eax
mov dword [ebp - 0x314], eax
cmp dword [ebp - 0x314], 2
jge 0x1000ab06
mov eax, dword [ebp - 0x314]
mov dword [ebp + eax*4 - 0x1060], 1
jmp 0x1000aadd
imul eax, dword [ebp - 0xa58], 0
cmp dword [ebp - 0x1b8], eax
jne 0x1000abc9
cmp dword [ebp - 0xe60], 1
jne 0x1000ab37
mov eax, 0x6d21
test eax, eax
je 0x1000ab37
mov dword [ebp - 0x6d0], 1
jmp 0x1000ab3e
and dword [ebp - 0x6d0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6d0]
sub ecx, dword [ebp + eax - 0x1060]
add ecx, dword [ebp - 0xa50]
neg ecx
mov dword [ebp - 0x6d8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1060]
cmp dword [ebp - 0x6d8], eax
jl 0x1000ab80
mov dword [ebp - 0xc24], 1
jmp 0x1000ab87
and dword [ebp - 0xc24], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1060]
cmp dword [ebp - 0xc24], eax
jge 0x1000aba8
mov dword [ebp - 0x6e0], 1
jmp 0x1000abaf
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0xfbc]
imul eax, dword [ebp - 0x6e0]
test eax, eax
jne 0x1000abc9
and dword [ebp - 0x6e8], 0
jmp 0x1000abd3
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0xa58]
cmp dword [ebp - 0x6e8], eax
je 0x1000abed
mov dword [ebp - 0xc10], 1
jmp 0x1000abf4
and dword [ebp - 0xc10], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc10]
mov dword [ebp + eax - 0x1240], ecx
jmp 0x1000aa8f
jmp 0x1000aa5e
jmp 0x1000a59f
mov dword [ebp - 0x3d4], 0x53b26bdd
mov dword [ebp - 0x3d4], 0x16
jmp 0x1000ac38
mov eax, dword [ebp - 0x3d4]
dec eax
mov dword [ebp - 0x3d4], eax
cmp dword [ebp - 0x3d4], 0xffffffe5
jne 0x1000ad15
mov dword [ebp - 0x1f8], 1
mov dword [ebp - 0x31c], 0
jmp 0x1000ac68
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 3
jge 0x1000ac84
mov eax, dword [ebp - 0x31c]
mov dword [ebp + eax*4 - 0x17c0], 0xb023ed15
jmp 0x1000ac5b
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x1f8], eax
mov dword [ebp - 0x1f8], 2
jmp 0x1000aca9
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x1000ad10
mov dword [ebp - 0x3dc], 1
mov dword [ebp - 0x3dc], 0
jmp 0x1000acd5
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 2
jg 0x1000ad0e
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1000ad0c
push 0
push 0x26a2
push 0x112c
push 0xb68
push 0x19f6
call dword [sym.imp.GDI32.dll_CreateBitmap]
jmp 0x1000acc8
jmp 0x1000ac9c
jmp 0x1000ac2b
mov dword [ebp - 0x78], 0x3e64f147
mov dword [ebp - 0x1c0], 0xc34f1d4b
mov dword [ebp - 0x324], 0
jmp 0x1000ad3f
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x1000ad58
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0x54], 0x17571177
jmp 0x1000ad32
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x54], 0
jmp 0x1000ad7d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0xffffffef
je 0x1000b3c0
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0xe78], 0xb53b3045
mov dword [ebp - 0xa80], 0xfffffff8
mov dword [ebp - 0x3f0], 0
jmp 0x1000adc2
mov eax, dword [ebp - 0x3f0]
inc eax
mov dword [ebp - 0x3f0], eax
cmp dword [ebp - 0x3f0], 1
jge 0x1000adde
mov eax, dword [ebp - 0x3f0]
mov dword [ebp + eax*4 - 0xfc4], 0x7709b807
jmp 0x1000adb5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x1000af13
mov dword [ebp - 0x78], 0xbf079684
cmp dword [ebp - 0x78], 0
jne 0x1000ae12
push 5
pop eax
test eax, eax
jne 0x1000ae12
and dword [ebp - 0x6f0], 0
jmp 0x1000ae1c
mov dword [ebp - 0x6f0], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1510], eax
mov eax, dword [ebp - 0x6f0]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x1000ae3f
mov dword [ebp - 0xa60], 1
jmp 0x1000ae46
and dword [ebp - 0xa60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0xa60], eax
jge 0x1000ae64
mov dword [ebp - 0x6f8], 1
jmp 0x1000ae6b
and dword [ebp - 0x6f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x6f8], eax
jge 0x1000ae89
mov dword [ebp - 0xd40], 1
jmp 0x1000ae90
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xd40], eax
jg 0x1000aea7
mov dword [ebp - 0x700], 1
jmp 0x1000aeae
and dword [ebp - 0x700], 0
cmp dword [ebp - 0x700], 0xffffffff
jg 0x1000aec3
mov dword [ebp - 0xa68], 1
jmp 0x1000aeca
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xa68], eax
jge 0x1000aee4
cmp dword [ebp - 0x14], 0
jne 0x1000aee4
and dword [ebp - 0x708], 0
jmp 0x1000aeee
mov dword [ebp - 0x708], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp eax, dword [ebp - 0x708]
jge 0x1000af0c
mov dword [ebp - 0xc18], 1
jmp 0x1000af13
and dword [ebp - 0xc18], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0x7af9ca3e
jl 0x1000af2f
mov dword [ebp - 0x710], 1
jmp 0x1000af36
and dword [ebp - 0x710], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x710], eax
jne 0x1000b1ec
mov dword [ebp - 0xa70], 0x6cfc4ff2
mov dword [ebp - 0xd8], 0
jmp 0x1000af6f
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jge 0x1000af8b
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x448], 0xc6715623
jmp 0x1000af62
mov dword [ebp - 0xd8], 0
jmp 0x1000afa4
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x1000afc0
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1674], 1
jmp 0x1000af97
mov dword [ebp - 0x78], 0x1857497f
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1c0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x54], 0
jne 0x1000b033
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x1518], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x1520], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xa70], eax
mov eax, dword [ebp - 0xa70]
cmp dword [ebp - 0x14], eax
je 0x1000b019
mov dword [ebp - 0x718], 1
jmp 0x1000b020
and dword [ebp - 0x718], 0
xor eax, eax
sub eax, dword [ebp - 0x718]
jne 0x1000b033
and dword [ebp - 0xce0], 0
jmp 0x1000b03d
mov dword [ebp - 0xce0], 1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xce0]
lea eax, [ecx + eax + 1]
cmp eax, dword [ebp - 0x14]
jg 0x1000b05b
mov dword [ebp - 0xe68], 1
jmp 0x1000b062
and dword [ebp - 0xe68], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x1528], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x54]
cmp dword [ebp - 0x14], eax
jl 0x1000b090
mov dword [ebp - 0x720], 1
jmp 0x1000b097
and dword [ebp - 0x720], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x720]
sub ecx, dword [ebp + eax - 0x448]
cmp ecx, 0xff81490
jne 0x1000b0be
mov dword [ebp - 0xa78], 1
jmp 0x1000b0c5
and dword [ebp - 0xa78], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
cmp dword [ebp - 0xa78], eax
jg 0x1000b0e6
mov dword [ebp - 0x728], 1
jmp 0x1000b0ed
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x54]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x448]
jne 0x1000b123
push 4
pop eax
test eax, eax
jne 0x1000b123
and dword [ebp - 0xc20], 0
jmp 0x1000b12d
mov dword [ebp - 0xc20], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc20], eax
jg 0x1000b144
mov dword [ebp - 0x1088], 1
jmp 0x1000b14b
and dword [ebp - 0x1088], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x1530], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x1538], eax
cmp dword [ebp - 0x14], 0x8aa138a8
jne 0x1000b186
mov dword [ebp - 0xe70], 1
jmp 0x1000b18d
and dword [ebp - 0xe70], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc4]
mov dword [ebp - 0x1540], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1548], eax
mov eax, dword [ebp - 0xe78]
mov dword [ebp - 0x1550], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x448]
mov dword [ebp - 0x1558], eax
mov eax, 0x9bf0bb9a
dec eax
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1674]
imul eax, eax, 0x4c7c
mov dword [ebp - 0xa80], eax
jmp 0x1000b3bb
mov dword [ebp - 0xa88], 0xdd1e
mov dword [ebp - 0xe80], 3
mov dword [ebp - 0x14], 0
jmp 0x1000b210
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff7
jge 0x1000b3bb
mov dword [ebp - 0x103c], 0
mov dword [ebp - 0x738], 0xffffffff
mov dword [ebp - 0x1c0], 0xffffffef
jmp 0x1000b247
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0xfffffffc
je 0x1000b3b6
mov dword [ebp - 0x1210], 0xe5337c48
mov dword [ebp - 0x120c], 0xe5337c48
mov dword [ebp - 0x1208], 0xe5337c48
mov dword [ebp - 0x1204], 0xe5337c48
mov dword [ebp - 0x32c], 0
jmp 0x1000b295
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 2
jge 0x1000b2b1
mov eax, dword [ebp - 0x32c]
mov dword [ebp + eax*4 - 0x106c], 1
jmp 0x1000b288
imul eax, dword [ebp - 0xa88], 0
cmp dword [ebp - 0x1c0], eax
jne 0x1000b374
cmp dword [ebp - 0x103c], 1
jne 0x1000b2e2
mov eax, 0x6d21
test eax, eax
je 0x1000b2e2
mov dword [ebp - 0x730], 1
jmp 0x1000b2e9
and dword [ebp - 0x730], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x730]
sub ecx, dword [ebp + eax - 0x106c]
add ecx, dword [ebp - 0xa80]
neg ecx
mov dword [ebp - 0x738], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x106c]
cmp dword [ebp - 0x738], eax
jl 0x1000b32b
mov dword [ebp - 0xd98], 1
jmp 0x1000b332
and dword [ebp - 0xd98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x106c]
cmp dword [ebp - 0xd98], eax
jge 0x1000b353
mov dword [ebp - 0x740], 1
jmp 0x1000b35a
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0xe80]
imul eax, dword [ebp - 0x740]
test eax, eax
jne 0x1000b374
and dword [ebp - 0x748], 0
jmp 0x1000b37e
mov dword [ebp - 0x748], 1
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0x748], eax
je 0x1000b398
mov dword [ebp - 0xc28], 1
jmp 0x1000b39f
and dword [ebp - 0xc28], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc28]
mov dword [ebp + eax - 0x1210], ecx
jmp 0x1000b23a
jmp 0x1000b209
jmp 0x1000ad68
mov dword [ebp - 0x64], 0x8be1
mov dword [ebp - 0x750], 0x18d303f0
mov dword [ebp - 0xe0], 0xf4f88039
mov dword [ebp - 0x3f8], 9
mov dword [ebp - 0x778], 0xbc254e7f
mov dword [ebp - 0xf8], 0
jmp 0x1000b408
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 4
jge 0x1000b424
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x1230], 0xfffffffa
jmp 0x1000b3fb
mov dword [ebp - 0xf8], 0
jmp 0x1000b43d
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x1000b459
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0x1078], 0
jmp 0x1000b430
cmp dword [ebp - 0x64], 0xeb96
jl 0x1000b46e
mov dword [ebp - 0xa90], 1
jmp 0x1000b475
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x750], eax
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xa90], eax
jle 0x1000b4a4
mov dword [ebp - 0x758], 1
jmp 0x1000b4ab
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x758], eax
jl 0x1000b4c2
mov dword [ebp - 0xce8], 1
jmp 0x1000b4c9
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0xce8]
jge 0x1000b4e0
mov dword [ebp - 0x4c8], 1
jmp 0x1000b4e7
and dword [ebp - 0x4c8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4c8]
mov dword [ebp + eax - 0x1230], ecx
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x3f8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x64]
cmp dword [ebp + eax - 0x1230], ecx
jg 0x1000b522
mov dword [ebp - 0x760], 1
jmp 0x1000b529
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x760], eax
jne 0x1000b540
mov dword [ebp - 0xfcc], 1
jmp 0x1000b547
and dword [ebp - 0xfcc], 0
mov eax, dword [ebp - 0x3f8]
sub eax, dword [ebp - 0x64]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1078]
cmp eax, dword [ebp - 0x64]
jge 0x1000b56e
mov dword [ebp - 0xa98], 1
jmp 0x1000b575
and dword [ebp - 0xa98], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1078]
cmp dword [ebp - 0xa98], eax
jge 0x1000b596
mov dword [ebp - 0x768], 1
jmp 0x1000b59d
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xa4d9
jne 0x1000b5b5
mov dword [ebp - 0xc30], 1
jmp 0x1000b5bc
and dword [ebp - 0xc30], 0
mov eax, dword [ebp - 0xc30]
add eax, 0x6e8
imul eax, eax, 0x4481
mov dword [ebp - 0x778], eax
mov dword [ebp - 0xe0], 0
jmp 0x1000b5ec
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jg 0x1000b6e5
mov byte [ebp - 0x18e], 0
movzx eax, byte [ebp - 0x18e]
test eax, eax
je 0x1000b633
push 0x85c
push 0x23eb
push 0x311
push 0x53b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ebp + ecx*4 - 0x1078]
cmp dword [ebp + eax*4 - 0x122c], ecx
jne 0x1000b65b
mov dword [ebp - 0x770], 1
jmp 0x1000b662
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*4 - 0x1228]
mov dword [ebp - 0x3f8], eax
mov eax, dword [ebp - 0x770]
neg eax
cmp dword [ebp - 0x3f8], eax
jl 0x1000b691
mov dword [ebp - 0xaa0], 1
jmp 0x1000b698
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0xaa0]
mov dword [ebp - 0x778], eax
mov dword [ebp - 0x64], 0
jmp 0x1000b6b4
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jg 0x1000b6e0
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1000b6de
push 0x2cb
push 0x25f6
push 0
call dword [sym.imp.USER32.dll_EnableMenuItem]
jmp 0x1000b6ad
jmp 0x1000b5df
mov dword [ebp - 0x120], 0xf89b546
mov dword [ebp - 0x10b8], 0x4d64
mov dword [ebp - 0x1e8], 0x3b15a8df
mov dword [ebp - 0x2b0], 0xfffffffa
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0x24], 0
jmp 0x1000b727
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1000b73d
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x524], 1
jmp 0x1000b720
mov dword [ebp - 0x24], 0
jmp 0x1000b74d
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x1000b763
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xdec], 0xfffffff8
jmp 0x1000b746
mov dword [ebp - 0x24], 0
jmp 0x1000b773
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1000b789
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1680], 0x1914cc5c
jmp 0x1000b76c
cmp dword [ebp - 0x120], 0
je 0x1000b8a8
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0x524], ecx
cmp dword [ebp - 0x120], 0xc700
jg 0x1000b7da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x524], 0
je 0x1000b7da
cmp dword [ebp - 0x120], 0
je 0x1000b7da
mov dword [ebp - 0xd48], 1
jmp 0x1000b7e1
and dword [ebp - 0xd48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp dword [ebp - 0xd48], eax
jne 0x1000b802
mov dword [ebp - 0x780], 1
jmp 0x1000b809
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdec]
cmp dword [ebp - 0x780], eax
jge 0x1000b82a
mov dword [ebp - 0xe88], 1
jmp 0x1000b831
and dword [ebp - 0xe88], 0
mov eax, dword [ebp - 0x10b8]
mov dword [ebp - 0x1560], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
mov dword [ebp - 0xaa8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xaa8]
mov dword [ebp + eax - 0x524], ecx
cmp dword [ebp - 0xaa8], 1
jle 0x1000b878
mov dword [ebp - 0x788], 1
jmp 0x1000b87f
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x1e8]
test eax, eax
je 0x1000b8a8
mov dword [ebp - 0x470], 1
jmp 0x1000b8af
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x470]
mov dword [ebp + eax - 0x1680], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdec]
cmp dword [ebp - 0x470], eax
jle 0x1000b8ec
mov eax, 0x1978e60d
test eax, eax
je 0x1000b8ec
mov dword [ebp - 0xc38], 1
jmp 0x1000b8f3
and dword [ebp - 0xc38], 0
mov eax, dword [ebp - 0x120]
cmp eax, dword [ebp - 0xc38]
je 0x1000b90d
mov dword [ebp - 0x790], 1
jmp 0x1000b914
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2b0], 0
jmp 0x1000b945
mov eax, dword [ebp - 0x2b0]
dec eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 0xffffffe5
jge 0x1000bbff
mov dword [ebp - 0x33c], 1
mov dword [ebp - 0x334], 0
jmp 0x1000b975
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 2
jge 0x1000b991
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x1300], 0xfffffffc
jmp 0x1000b968
mov dword [ebp - 0x1e8], 0xd
jmp 0x1000b9aa
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xc
jle 0x1000bbed
mov dword [ebp - 0xe90], 0x8224
mov dword [ebp - 0x408], 3
mov dword [ebp - 0xfd4], 0
mov dword [ebp - 0xac0], 0x8e961cae
mov dword [ebp - 0x400], 0
jmp 0x1000b9f8
mov eax, dword [ebp - 0x400]
inc eax
mov dword [ebp - 0x400], eax
cmp dword [ebp - 0x400], 3
jge 0x1000ba14
mov eax, dword [ebp - 0x400]
mov dword [ebp + eax*4 - 0x1698], 0xffffffff
jmp 0x1000b9eb
mov eax, dword [ebp - 0x33c]
cmp dword [ebp - 0xe90], eax
jle 0x1000ba4a
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0x1568], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xdec], 0
je 0x1000ba4a
mov dword [ebp - 0xab0], 1
jmp 0x1000ba51
and dword [ebp - 0xab0], 0
cmp dword [ebp - 0xab0], 0xe051
jl 0x1000ba6f
cmp dword [ebp - 0xfd4], 0
jne 0x1000ba6f
and dword [ebp - 0x798], 0
jmp 0x1000ba79
mov dword [ebp - 0x798], 1
mov eax, dword [ebp - 0x408]
add eax, dword [ebp - 0x798]
je 0x1000ba97
xor eax, eax
je 0x1000ba97
mov dword [ebp - 0xcf0], 1
jmp 0x1000ba9e
and dword [ebp - 0xcf0], 0
imul eax, dword [ebp - 0xcf0], 0xffffffff
cmp eax, 1
jle 0x1000bab6
mov dword [ebp - 0x7a0], 1
jmp 0x1000babd
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 8
jle 0x1000bad2
mov dword [ebp - 0xab8], 1
jmp 0x1000bad9
and dword [ebp - 0xab8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x524]
cmp eax, dword [ebp - 0xab8]
jge 0x1000bafa
mov dword [ebp - 0x7a8], 1
jmp 0x1000bb01
and dword [ebp - 0x7a8], 0
cmp dword [ebp - 0x7a8], 0x7e5f8f0b
jg 0x1000bb19
mov dword [ebp - 0xc40], 1
jmp 0x1000bb20
and dword [ebp - 0xc40], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdec]
cmp dword [ebp - 0xc40], eax
jne 0x1000bb4a
cmp dword [ebp - 0x33c], 0
je 0x1000bb4a
mov dword [ebp - 0x7b0], 1
jmp 0x1000bb51
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
sub eax, dword [ebp - 0x33c]
mov dword [ebp - 0xac0], eax
cmp dword [ebp - 0xac0], 8
je 0x1000bb78
mov dword [ebp - 0x7b8], 1
jmp 0x1000bb7f
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x33c]
imul eax, dword [ebp - 0x7b8]
cmp eax, dword [ebp - 0x408]
jle 0x1000bba0
mov dword [ebp - 0xd78], 1
jmp 0x1000bba7
and dword [ebp - 0xd78], 0
imul eax, dword [ebp - 0xd78], 0xd7fc
mov dword [ebp - 0x7c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp + eax - 0x1698], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x7c0]
mov dword [ebp + eax - 0x1300], ecx
cmp dword [ebp - 0x408], 0
je 0x1000bbe8
jmp 0x1000bbed
jmp 0x1000b99d
mov eax, dword [ebp - 0xac8]
dec eax
mov dword [ebp - 0xac8], eax
jmp 0x1000b938
mov dword [ebp - 0x344], 0x53b26bdd
mov dword [ebp - 0x344], 0x16
jmp 0x1000bc22
mov eax, dword [ebp - 0x344]
dec eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0xffffffe5
jne 0x1000bcff
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x410], 0
jmp 0x1000bc52
mov eax, dword [ebp - 0x410]
inc eax
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 3
jge 0x1000bc6e
mov eax, dword [ebp - 0x410]
mov dword [ebp + eax*4 - 0x1784], 0xb023ed15
jmp 0x1000bc45
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c8], 2
jmp 0x1000bc93
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jl 0x1000bcfa
mov dword [ebp - 0x34c], 1
mov dword [ebp - 0x34c], 0
jmp 0x1000bcbf
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 2
jg 0x1000bcf8
mov byte [ebp - 0x190], 0
movzx eax, byte [ebp - 0x190]
test eax, eax
je 0x1000bcf6
push 0
push 0x26a2
push 0x112c
push 0xb68
push 0x19f6
call dword [sym.imp.GDI32.dll_CreateBitmap]
jmp 0x1000bcb2
jmp 0x1000bc86
jmp 0x1000bc15
mov dword [ebp - 0x354], 3
mov dword [ebp - 0x418], 0
jmp 0x1000bd22
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 3
jge 0x1000bd3e
mov eax, dword [ebp - 0x418]
mov dword [ebp + eax*4 - 0x16b0], 1
jmp 0x1000bd15
mov dword [ebp - 0x354], 0
jmp 0x1000bd57
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 2
jg 0x1000beac
mov dword [ebp - 0x420], 3
mov dword [ebp - 0x420], 0
jmp 0x1000bd87
mov eax, dword [ebp - 0x420]
inc eax
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 2
jg 0x1000bea7
mov dword [ebp - 0x35c], 0xfaaaeb9a
mov dword [ebp - 0x35c], 0
jmp 0x1000bdb7
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 2
jg 0x1000bea2
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x428], 2
jmp 0x1000bde7
mov eax, dword [ebp - 0x428]
dec eax
mov dword [ebp - 0x428], eax
cmp dword [ebp - 0x428], 0
jl 0x1000be9d
mov dword [ebp - 0x364], 0xffffffff
mov dword [ebp - 0x364], 0
jmp 0x1000be17
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 2
jg 0x1000be61
mov dword [ebp - 0x238], 0x2733582f
mov dword [ebp - 0x238], 0
jmp 0x1000be43
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x1000be5f
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x16b0], 0xc3414b58
jmp 0x1000be36
jmp 0x1000be0a
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000be98
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0xa59
push 0x136b
push 0x1acd
push 0x18af
push 0
call dword [sym.imp.USER32.dll_TrackPopupMenu]
jmp 0x1000bdda
jmp 0x1000bdaa
jmp 0x1000bd7a
jmp 0x1000bd4a
mov dword [ebp - 0x430], 0x53b26bdd
mov dword [ebp - 0x430], 0x16
jmp 0x1000becf
mov eax, dword [ebp - 0x430]
dec eax
mov dword [ebp - 0x430], eax
cmp dword [ebp - 0x430], 0xffffffe5
jne 0x1000bfac
mov dword [ebp - 0x208], 1
mov dword [ebp - 0x36c], 0
jmp 0x1000beff
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0x36c], 3
jge 0x1000bf1b
mov eax, dword [ebp - 0x36c]
mov dword [ebp + eax*4 - 0x17d8], 0xb023ed15
jmp 0x1000bef2
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x208], 2
jmp 0x1000bf40
mov eax, dword [ebp - 0x208]
dec eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jl 0x1000bfa7
mov dword [ebp - 0x438], 1
mov dword [ebp - 0x438], 0
jmp 0x1000bf6c
mov eax, dword [ebp - 0x438]
inc eax
mov dword [ebp - 0x438], eax
cmp dword [ebp - 0x438], 2
jg 0x1000bfa5
mov byte [ebp - 0x192], 0
movzx eax, byte [ebp - 0x192]
test eax, eax
je 0x1000bfa3
push 0
push 0x26a2
push 0x112c
push 0xb68
push 0x19f6
call dword [sym.imp.GDI32.dll_CreateBitmap]
jmp 0x1000bf5f
jmp 0x1000bf33
jmp 0x1000bec2
mov dword [ebp - 0x138], 0x5b9b55bb
mov dword [ebp - 0xfdc], 0
mov dword [ebp - 0x108], 0
jmp 0x1000bfd9
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 2
jge 0x1000bff5
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1084], 0
jmp 0x1000bfcc
mov dword [ebp - 0x108], 0
jmp 0x1000c00e
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 3
jge 0x1000c02a
mov eax, dword [ebp - 0x108]
mov dword [ebp + eax*4 - 0x1480], 0xa9177c83
jmp 0x1000c001
mov dword [ebp - 0x138], 0xffffffe6
jmp 0x1000c043
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0xc
je 0x1000c467
mov dword [ebp - 0x1d0], 0x7689351f
mov dword [ebp - 0x1094], 0x80b09de2
mov dword [ebp - 0x440], 0
jmp 0x1000c07d
mov eax, dword [ebp - 0x440]
inc eax
mov dword [ebp - 0x440], eax
cmp dword [ebp - 0x440], 3
jge 0x1000c099
mov eax, dword [ebp - 0x440]
mov dword [ebp + eax*4 - 0x1158], 1
jmp 0x1000c070
mov dword [ebp - 0x1d0], 0
jmp 0x1000c0b2
cmp dword [ebp - 0x1d0], 0x12
jle 0x1000c462
mov dword [ebp - 0xea8], 1
mov dword [ebp - 0xe98], 0xf2ef51ae
mov dword [ebp - 0x1570], 0xffffffff
mov dword [ebp - 0xc48], 0xffffffff
mov dword [ebp - 0xcf8], 0x6cae8ef3
mov dword [ebp - 0x1578], 7
mov dword [ebp - 0xa8], 0
jmp 0x1000c114
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1000c130
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x130c], 0xffdeabfd
jmp 0x1000c107
mov dword [ebp - 0xa8], 0
jmp 0x1000c149
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x1000c165
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x11d8], 0xaf36eaf
jmp 0x1000c13c
mov eax, 0x672a
test eax, eax
je 0x1000c183
cmp dword [ebp - 0x138], 0
je 0x1000c183
mov dword [ebp - 0x7c8], 1
jmp 0x1000c18a
and dword [ebp - 0x7c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp + eax - 0x1158], ecx
mov eax, dword [ebp - 0xe98]
mov dword [ebp - 0x1580], eax
mov dword [ebp - 0xc48], 1
cmp dword [ebp - 0xc48], 0x65d28285
jge 0x1000c1cb
mov dword [ebp - 0x7d0], 1
jmp 0x1000c1d2
and dword [ebp - 0x7d0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1084]
cmp dword [ebp - 0x7d0], eax
jne 0x1000c1f3
mov dword [ebp - 0x1044], 1
jmp 0x1000c1fa
and dword [ebp - 0x1044], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11d8]
mov dword [ebp - 0xea0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xea0]
mov dword [ebp + eax - 0x1158], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x11d8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x11d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x130c], 5
jb 0x1000c257
mov dword [ebp - 0xad0], 1
jmp 0x1000c25e
and dword [ebp - 0xad0], 0
cmp dword [ebp - 0xad0], 0xffffffff
je 0x1000c273
mov dword [ebp - 0x7d8], 1
jmp 0x1000c27a
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0xcf8], eax
cmp dword [ebp - 0xcf8], 0
jne 0x1000c29f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1158], 0
je 0x1000c2b4
mov eax, 0xd7f48438
test eax, eax
je 0x1000c2b4
mov dword [ebp - 0x7e0], 1
jmp 0x1000c2bb
and dword [ebp - 0x7e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1084]
cmp dword [ebp - 0x7e0], eax
jl 0x1000c2dc
mov dword [ebp - 0xad8], 1
jmp 0x1000c2e3
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xfdc]
cmp dword [ebp - 0xad8], eax
jg 0x1000c2fd
mov dword [ebp - 0x7e8], 1
jmp 0x1000c304
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x7e8], 0
jne 0x1000c31a
xor eax, eax
jne 0x1000c31a
and dword [ebp - 0xc50], 0
jmp 0x1000c324
mov dword [ebp - 0xc50], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc50]
mov dword [ebp + eax - 0x1084], ecx
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1588], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1480], 0
je 0x1000c368
mov eax, 0x4e48
test eax, eax
je 0x1000c368
mov dword [ebp - 0x7f0], 1
jmp 0x1000c36f
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
sub eax, dword [ebp - 0x1d0]
jne 0x1000c396
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1158], 0
jne 0x1000c396
mov dword [ebp - 0xae0], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0xae0], eax
je 0x1000c3ba
jmp 0x1000c036
mov dword [ebp - 0x68], 0x8be1
mov dword [ebp - 0xc58], 0x18d303f0
mov dword [ebp - 0xbc], 0xf4f88039
mov dword [ebp - 0x378], 9
mov dword [ebp - 0xb00], 0xbc254e7f
mov dword [ebp - 0xb8], 0
jmp 0x1000c4af
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 4
jge 0x1000c4cb
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1250], 0xfffffffa
jmp 0x1000c4a2
mov dword [ebp - 0xb8], 0
jmp 0x1000c4e4
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x1000c500
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x1090], 0
jmp 0x1000c4d7
cmp dword [ebp - 0x68], 0xeb96
jl 0x1000c515
mov dword [ebp - 0x810], 1
jmp 0x1000c51c
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0xc58]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x810], eax
jle 0x1000c54b
mov dword [ebp - 0xaf0], 1
jmp 0x1000c552
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xaf0], eax
jl 0x1000c569
mov dword [ebp - 0x818], 1
jmp 0x1000c570
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x818]
jge 0x1000c587
mov dword [ebp - 0x4f8], 1
jmp 0x1000c58e
and dword [ebp - 0x4f8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4f8]
mov dword [ebp + eax - 0x1250], ecx
mov eax, dword [ebp - 0x4f8]
mov dword [ebp - 0x378], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x68]
cmp dword [ebp + eax - 0x1250], ecx
jg 0x1000c5c9
mov dword [ebp - 0xd00], 1
jmp 0x1000c5d0
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xd00], eax
jne 0x1000c5e7
mov dword [ebp - 0xeb0], 1
jmp 0x1000c5ee
and dword [ebp - 0xeb0], 0
mov eax, dword [ebp - 0x378]
sub eax, dword [ebp - 0x68]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x1090]
cmp eax, dword [ebp - 0x68]
jge 0x1000c615
mov dword [ebp - 0x820], 1
jmp 0x1000c61c
and dword [ebp - 0x820], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1090]
cmp dword [ebp - 0x820], eax
jge 0x1000c63d
mov dword [ebp - 0xaf8], 1
jmp 0x1000c644
and dword [ebp - 0xaf8], 0
cmp dword [ebp - 0xaf8], 0xa4d9
jne 0x1000c65c
mov dword [ebp - 0x828], 1
jmp 0x1000c663
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x828]
add eax, 0x6e8
imul eax, eax, 0x4481
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0xbc], 0
jmp 0x1000c693
cmp dword [ebp - 0xbc], 1
jg 0x1000c78c
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1000c6da
push 0x85c
push 0x23eb
push 0x311
push 0x53b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ebp + ecx*4 - 0x1090]
cmp dword [ebp + eax*4 - 0x124c], ecx
jne 0x1000c702
mov dword [ebp - 0xc60], 1
jmp 0x1000c709
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xbc]
mov eax, dword [ebp + eax*4 - 0x1248]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0xc60]
neg eax
cmp dword [ebp - 0x378], eax
jl 0x1000c738
mov dword [ebp - 0x830], 1
jmp 0x1000c73f
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0x68], 0
jmp 0x1000c75b
cmp dword [ebp - 0x68], 1
jg 0x1000c787
mov byte [ebp - 0x194], 0
movzx eax, byte [ebp - 0x194]
test eax, eax
je 0x1000c785
jmp 0x1000c686
mov dword [ebp - 0x128], 0xf89b546
mov dword [ebp - 0xeb8], 0x4d64
mov dword [ebp - 0x1f0], 0x3b15a8df
mov dword [ebp - 0x278], 0xfffffffa
mov dword [ebp - 0x880], 0
mov dword [ebp - 0x40], 0
jmp 0x1000c7ce
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000c7e4
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x534], 1
jmp 0x1000c7c7
mov dword [ebp - 0x40], 0
jmp 0x1000c7f4
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000c80a
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xdfc], 0xfffffff8
jmp 0x1000c7ed
mov dword [ebp - 0x40], 0
jmp 0x1000c81a
cmp dword [ebp - 0x40], 3
jge 0x1000c830