Function at 0x1004cab5
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008376a
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3a4
push esi
push edi
movzx eax, byte [ebp + 8]
test eax, eax
je 0x1004e03e
mov dword [ebp - 0x1c], 0xc0001115
push 2
lea ecx, [ebp - 0x240]
call fcn.10017b3d
and dword [ebp - 4], 0
mov dword [ebp - 0x9c], 0
jmp 0x1004cb12
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1004cb34
push dword [ebp - 0x9c]
lea ecx, [ebp - 0x240]
call fcn.10017bc7
mov dword [eax], 7
jmp 0x1004cb05
mov eax, dword [ebp - 0x1c]
neg eax
cmp eax, 1
jl 0x1004cb4a
mov dword [ebp - 0x120], 1
jmp 0x1004cb51
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x220], eax
push 0
lea ecx, [ebp - 0x240]
call fcn.10017bc7
mov ecx, dword [ebp - 0x220]
mov dword [eax], ecx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x220], eax
jne 0x1004cb8c
mov dword [ebp - 0x228], 1
jmp 0x1004cb93
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x228], eax
jg 0x1004cbbf
cmp dword [ebp - 0x1c], 0
jne 0x1004cbbf
push 0
lea ecx, [ebp - 0x240]
call fcn.10017bc7
cmp dword [eax], 0
jne 0x1004cbbf
and dword [ebp - 0x1f4], 0
jmp 0x1004cbc9
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1f4], eax
jge 0x1004cbe0
mov dword [ebp - 0x1d0], 1
jmp 0x1004cbe7
and dword [ebp - 0x1d0], 0
cmp dword [ebp - 0x1d0], 0xffffffff
jbe 0x1004cbfc
mov dword [ebp - 0xd8], 1
jmp 0x1004cc03
and dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0xd8]
jg 0x1004cc1a
mov dword [ebp - 0x1d8], 1
jmp 0x1004cc21
and dword [ebp - 0x1d8], 0
cmp dword [ebp - 0x1d8], 0x2e08
jg 0x1004cc39
mov dword [ebp - 0xe0], 1
jmp 0x1004cc40
and dword [ebp - 0xe0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xe0], eax
jg 0x1004cc57
mov dword [ebp - 0x258], 1
jmp 0x1004cc5e
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x1c], 0
je 0x1004cc8b
push 0
lea ecx, [ebp - 0x240]
call fcn.10017bc7
cmp dword [eax], 0
je 0x1004cc8b
mov dword [ebp - 0x1e0], 1
jmp 0x1004cc92
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1e0]
je 0x1004ccf4
mov dword [ebp - 0x398], 0xc8f
mov dword [ebp - 0x34c], 0x8bbd188
mov dword [ebp - 0x314], 0xfffffff9
mov dword [ebp - 0xe8], 0xbe26b5cf
push 0
lea ecx, [ebp - 0x240]
call fcn.10017bc7
mov esi, eax
push 0
lea ecx, [ebp - 0x240]
call fcn.10017bc7
mov ecx, dword [esi]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
jmp 0x1004cd08
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1004cd08
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x240]
call fcn.10017bc2
mov dword [ebp - 0x20], 0x81c
mov dword [ebp - 0x80], 0x1e0bec03
push 1
lea ecx, [ebp - 0x2a4]
call fcn.10017b3d
mov dword [ebp - 4], 1
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x2a8], 0x38e70e9e
mov dword [ebp - 0x318], 0x84a57988
mov dword [ebp - 0x320], 0xde45221b
mov dword [ebp - 0x2b8], 1
mov dword [ebp - 0x28c], 1
mov dword [ebp - 0x2b0], 0x3cec3345
mov dword [ebp - 0x328], 0xffffffff
mov dword [ebp - 0xb0], 0x23552e29
mov dword [ebp - 0x21c], 0xfffffffb
mov dword [ebp - 0xa0], 1
mov dword [ebp - 0x24], 0
jmp 0x1004cdb4
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1004cdd0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x2a4]
call fcn.10017bc7
mov dword [eax], 1
jmp 0x1004cdad
mov dword [ebp - 0x24], 0
jmp 0x1004cde0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1004cdf6
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3a4], 0
jmp 0x1004cdd9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x20], 0
jl 0x1004ce11
mov dword [ebp - 0x1e8], 1
jmp 0x1004ce18
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x1e8]
jg 0x1004ce2f
mov dword [ebp - 0xf0], 1
jmp 0x1004ce36
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xf0]
cmp eax, 0x2a10aa43
jle 0x1004ce52
mov dword [ebp - 0x200], 1
jmp 0x1004ce59
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x200], eax
jg 0x1004ce70
mov dword [ebp - 0xf8], 1
jmp 0x1004ce77
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xf8]
jl 0x1004d0c8
mov dword [ebp - 0x294], 0x65cd
push 1
lea ecx, [ebp - 0x254]
call fcn.10017b3d
mov byte [ebp - 4], 2
mov dword [ebp - 0x90], 0
jmp 0x1004ceba
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1004cedc
push dword [ebp - 0x90]
lea ecx, [ebp - 0x254]
call fcn.10017bc7
mov dword [eax], 0x26a056eb
jmp 0x1004cead
push 0
lea ecx, [ebp - 0x254]
call fcn.10017bc7
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
jge 0x1004cefc
mov dword [ebp - 0x208], 1
jmp 0x1004cf03
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x208], eax
jg 0x1004cf1a
mov dword [ebp - 0x100], 1
jmp 0x1004cf21
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x80]
neg eax
cmp eax, dword [ebp - 0x100]
je 0x1004cf3a
mov dword [ebp - 0x210], 1
jmp 0x1004cf41
and dword [ebp - 0x210], 0
push 0
lea ecx, [ebp - 0x254]
call fcn.10017bc7
mov ecx, dword [ebp - 0x210]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1004cf6a
cmp dword [ebp - 0x80], 0
jne 0x1004cf6a
and dword [ebp - 0x218], 0
jmp 0x1004cf74
mov dword [ebp - 0x218], 1
cmp dword [ebp - 0x218], 0x93765224
jb 0x1004cf8c
mov dword [ebp - 0x10c], 1
jmp 0x1004cf93
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 0xffff
jbe 0x1004cfab
mov dword [ebp - 0x1a4], 1
jmp 0x1004cfb2
and dword [ebp - 0x1a4], 0
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10017bc7
mov esi, dword [ebp - 0x1a4]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0x254]
call fcn.10017bc7
cmp esi, dword [eax]
jl 0x1004cfe4
mov dword [ebp - 0x114], 1
jmp 0x1004cfeb
and dword [ebp - 0x114], 0
push 0
lea ecx, [ebp - 0x254]
call fcn.10017bc7
mov ecx, dword [ebp - 0x114]
cmp ecx, dword [eax]
jge 0x1004d00e
mov dword [ebp - 0x1ec], 1
jmp 0x1004d015
and dword [ebp - 0x1ec], 0
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10017bc7
mov ecx, dword [ebp - 0x1ec]
cmp ecx, dword [eax]
jle 0x1004d038
mov dword [ebp - 0x11c], 1
jmp 0x1004d03f
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
mov eax, 0x8d7d2a7e
sub eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x58], eax
jg 0x1004d062
mov dword [ebp - 0x1ac], 1
jmp 0x1004d069
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0xfffffffb
jne 0x1004d083
xor eax, eax
inc eax
je 0x1004d083
mov dword [ebp - 0x124], 1
jmp 0x1004d08a
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x124], eax
jle 0x1004d0a4
mov dword [ebp - 0x1f8], 1
jmp 0x1004d0ab
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x254]
call fcn.10017bc2
jmp 0x1004d380
push 1
lea ecx, [ebp - 0x300]
call fcn.10017b3d
mov byte [ebp - 4], 3
mov dword [ebp - 0x2c8], 0x51cc0d68
mov dword [ebp - 0x338], 0xfffffffe
mov dword [ebp - 0x340], 6
mov dword [ebp - 0x348], 0x7429
mov dword [ebp - 0x310], 0xfffffff9
mov dword [ebp - 0x2c0], 0x4b46114a
mov dword [ebp - 0x2d0], 1
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x360], 0xffffffff
mov dword [ebp - 0x74], 0
jmp 0x1004d143
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1004d15f
push dword [ebp - 0x74]
lea ecx, [ebp - 0x300]
call fcn.10017bc7
mov dword [eax], 0x424acdff
jmp 0x1004d13c
mov dword [ebp - 0x20], 0
jmp 0x1004d16f
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff7
jg 0x1004d19b
push 0
lea ecx, [ebp - 0x300]
call fcn.10017bc7
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x12c]
mov dword [ecx], eax
jmp 0x1004d168
push 0
lea ecx, [ebp - 0x2a4]
call fcn.10017bc7
or dword [eax], 0xffffffff
cmp dword [ebp - 0x58], 0xffffffff
jle 0x1004d1bd
mov dword [ebp - 0x214], 1
jmp 0x1004d1c4
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0xa0]
inc ecx
mov dword [ebp - 0xa0], ecx
test eax, eax
jne 0x1004d2b8
mov dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2b0], 0xffffffff
jg 0x1004d1fe
mov dword [ebp - 0x1b4], 1
jmp 0x1004d205
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x1b4]
jne 0x1004d21f
mov dword [ebp - 0x134], 1
jmp 0x1004d226
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xffff
jbe 0x1004d24a
mov dword [ebp - 0x13c], 1
jmp 0x1004d251
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x13c]
sub eax, 0x15c408cd
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0xb0], eax
jl 0x1004d27c
mov dword [ebp - 0x1bc], 1
jmp 0x1004d283
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1bc], eax
je 0x1004d29a
mov dword [ebp - 0x144], 1
jmp 0x1004d2a1
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x2c0]
cmp dword [ebp - 0x144], eax
jg 0x1004d2b8
and dword [ebp - 0x1fc], 0
jmp 0x1004d2c2
mov dword [ebp - 0x1fc], 1
mov eax, dword [ebp - 0x1fc]
neg eax
je 0x1004d2dd
xor eax, eax
inc eax
je 0x1004d2dd
mov dword [ebp - 0x14c], 1
jmp 0x1004d2e4
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x2c8]
imul eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x2d0]
jge 0x1004d305
mov dword [ebp - 0x1c4], 1
jmp 0x1004d30c
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 0xfffffffe
jle 0x1004d321
mov dword [ebp - 0x154], 1
jmp 0x1004d328
and dword [ebp - 0x154], 0
cmp dword [ebp - 0x154], 0xfffffff7
jae 0x1004d33d
mov dword [ebp - 0x15c], 1
jmp 0x1004d344
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x15c]
je 0x1004d35e
mov dword [ebp - 0x1cc], 1
jmp 0x1004d365
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x28c], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x300]
call fcn.10017bc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a4]
call fcn.10017bc2
push 2
lea ecx, [ebp - 0x370]
call fcn.10017b3d
mov dword [ebp - 4], 4
mov dword [ebp - 0x7c], 0x5c184c50
mov dword [ebp - 0x84], 0
jmp 0x1004d3c3
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1004d3e5
push dword [ebp - 0x84]
lea ecx, [ebp - 0x370]
call fcn.10017bc7
mov dword [eax], 1
jmp 0x1004d3b6
mov dword [ebp - 0x7c], 1
jmp 0x1004d3f5
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1004d40f
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x1004d40d
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
jmp 0x1004d3ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x370]
call fcn.10017bc2
push 4
lea ecx, [ebp - 0x234]
call fcn.10017b3d
mov dword [ebp - 4], 5
mov dword [ebp - 0x2c], 0xfebaeef2
mov dword [ebp - 0x20c], 1
mov dword [ebp - 0x54], 0xffffffff
mov dword [ebp - 0x8c], 0
jmp 0x1004d463
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1004d482
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x234]
call fcn.10017bc7
or dword [eax], 0xffffffff
jmp 0x1004d456
mov dword [ebp - 0x2c], 0
jmp 0x1004d492
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jg 0x1004d935
mov dword [ebp - 0x18c], 0xfffffffd
mov dword [ebp - 0x34], 0x81448718
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x234]
call fcn.10017bc7
cmp dword [eax], 0
je 0x1004d769
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x2bc], 0x50169ff9
mov dword [ebp - 0x28], 3
jmp 0x1004d4e5
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1004d764
push 1
lea ecx, [ebp - 0xc8]
call fcn.10017b3d
mov byte [ebp - 4], 6
mov dword [ebp - 0x94], 0
jmp 0x1004d519
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1004d538
push dword [ebp - 0x94]
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
or dword [eax], 0xffffffff
jmp 0x1004d50c
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x1004d550
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
mov dword [eax], 3
jmp 0x1004d589
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
mov dword [ebp - 0x164], eax
mov eax, dword [ebp - 0x164]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x164]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
cmp dword [eax], 0
jl 0x1004d750
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x278], 0xb51404fc
mov dword [ebp - 0x88], 0
jmp 0x1004d5cc
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1004d5e8
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x2f4], 0
jmp 0x1004d5bf
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x374], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
mov dword [ebp - 0x204], eax
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
mov eax, dword [eax]
mov dword [ebp - 0x26c], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x268], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2f4]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x2f4], eax
mov eax, dword [ebp - 0x26c]
cmp eax, dword [ebp - 0x268]
jg 0x1004d664
mov dword [ebp - 0x298], 1
jmp 0x1004d66b
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x31c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x324], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x32c], eax
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
cmp dword [ebp - 0x28], 0
jl 0x1004d6ba
mov dword [ebp - 0x16c], 1
jmp 0x1004d6c1
and dword [ebp - 0x16c], 0
push 3
lea ecx, [ebp - 0x234]
call fcn.10017bc7
mov ecx, dword [ebp - 0x16c]
imul ecx, dword [eax]
test ecx, ecx
je 0x1004d6ed
cmp dword [ebp - 0x28], 0
je 0x1004d6ed
mov dword [ebp - 0x270], 1
jmp 0x1004d6f4
and dword [ebp - 0x270], 0
cmp dword [ebp - 0x2bc], 1
ja 0x1004d709
mov dword [ebp - 0x1d4], 1
jmp 0x1004d710
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 3
jg 0x1004d725
mov dword [ebp - 0x174], 1
jmp 0x1004d72c
and dword [ebp - 0x174], 0
imul esi, dword [ebp - 0x174], 0xf0bb
push 0
lea ecx, [ebp - 0xc8]
call fcn.10017bc7
add esi, dword [eax]
mov dword [ebp - 0x278], esi
jmp 0x1004d565
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc8]
call fcn.10017bc2
jmp 0x1004d4de
jmp 0x1004d8d5
mov dword [ebp - 0xac], 6
mov dword [ebp - 0xa8], 1
cmp dword [ebp - 0xac], 0
jne 0x1004d7f5
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0xa8]
push 3
lea ecx, [ebp - 0x234]
call fcn.10017bc7
add esi, dword [eax]
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x234]
call fcn.10017bc7
cmp esi, dword [eax]
jge 0x1004d7c5
mov dword [ebp - 0x224], 1
jmp 0x1004d7cc
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 3
jb 0x1004d7e1
mov dword [ebp - 0x17c], 1
jmp 0x1004d7e8
and dword [ebp - 0x17c], 0
push 2
lea ecx, [ebp - 0x234]
call fcn.10017bc7
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x34], eax
jge 0x1004d815
cmp dword [ebp - 0xac], 0
je 0x1004d815
mov dword [ebp - 0x1dc], 1
jmp 0x1004d81c
and dword [ebp - 0x1dc], 0
push 8
pop eax
sub eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
imul ecx, dword [ebp - 0x1dc]
cmp eax, ecx
je 0x1004d83c
mov dword [ebp - 0x184], 1
jmp 0x1004d843
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x184]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
sub eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x34]
jl 0x1004d86c
mov dword [ebp - 0x1e4], 1
jmp 0x1004d873
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x1e4], eax
jge 0x1004d88a
mov dword [ebp - 0x194], 1
jmp 0x1004d891
and dword [ebp - 0x194], 0
cmp dword [ebp - 0x194], 0x69c0
jne 0x1004d8a9
mov dword [ebp - 0x1f0], 1
jmp 0x1004d8b0
and dword [ebp - 0x1f0], 0
cmp dword [ebp - 0x1f0], 0xfffffffa
jbe 0x1004d8c5
mov dword [ebp - 0x19c], 1
jmp 0x1004d8cc
and dword [ebp - 0x19c], 0
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x34], 0
jmp 0x1004d8e5
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jg 0x1004d930
mov dword [ebp - 0x2ac], 2
mov dword [ebp - 0x54], 0
jmp 0x1004d905
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1004d92e
cmp dword [ebp - 0x2ac], 0
je 0x1004d916
jmp 0x1004d92e
mov byte [ebp - 0x41], 0
movzx eax, byte [ebp - 0x41]
test eax, eax
je 0x1004d92c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
jmp 0x1004d8fe
jmp 0x1004d8de
jmp 0x1004d48b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x234]
call fcn.10017bc2
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x280], 0x25e7a66f
push 2
lea ecx, [ebp - 0xbc]
call fcn.10017b3d
mov dword [ebp - 4], 7
push 3
lea ecx, [ebp - 0x2dc]
call fcn.10017b3d
mov byte [ebp - 4], 8
mov dword [ebp - 0x2cc], 0x18d
mov dword [ebp - 0x18], 0
jmp 0x1004d996
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1004d9b2
push dword [ebp - 0x18]
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
mov dword [eax], 0xfffffffd
jmp 0x1004d98f
mov dword [ebp - 0x18], 0
jmp 0x1004d9c2
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1004d9de
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2dc]
call fcn.10017bc7
mov dword [eax], 0x41a9
jmp 0x1004d9bb
mov dword [ebp - 0x18], 0
jmp 0x1004d9ee
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1004da04
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x380], 0xcf59f89f
jmp 0x1004d9e7
mov esi, dword [ebp - 0x280]
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
mov dword [eax], esi
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
cmp dword [eax], 0
je 0x1004db2f
push 1
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
cmp dword [eax], 0
jne 0x1004db0b
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
cmp dword [eax], 0
je 0x1004dae4
push 0
lea ecx, [ebp - 0x2dc]
call fcn.10017bc7
cmp dword [eax], 0
jne 0x1004da79
mov dword [ebp - 0x104], 1
jmp 0x1004da80
and dword [ebp - 0x104], 0
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
mov eax, dword [eax]
cmp eax, dword [ebp - 0x104]
jl 0x1004dac3
cmp dword [ebp - 0x2cc], 0x4d03
jne 0x1004daaf
mov dword [ebp - 0x108], 1
jmp 0x1004dab6
and dword [ebp - 0x108], 0
push 0
lea ecx, [ebp - 0x2dc]
call fcn.10017bc7
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
cmp dword [eax], 0x4f88039d
je 0x1004dae4
mov dword [ebp - 0x110], 1
jmp 0x1004daeb
and dword [ebp - 0x110], 0
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
mov ecx, dword [ebp - 0x110]
cmp ecx, dword [eax]
jne 0x1004db0b
and dword [ebp - 0x118], 0
jmp 0x1004db15
mov dword [ebp - 0x118], 1
push 0
lea ecx, [ebp - 0xbc]
call fcn.10017bc7
mov ecx, dword [ebp - 0x118]
mov dword [eax], ecx
jmp 0x1004dbb2
mov dword [ebp - 0x35c], 1
mov dword [ebp - 0x334], 0xc8a52b4b
mov dword [ebp - 0x384], 1
mov dword [ebp - 0x30], 0
jmp 0x1004db5d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1004db73
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x3b0], 0xf5e
jmp 0x1004db56
mov dword [ebp - 0x30], 0
jmp 0x1004db83
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1004db99
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x33c], 0x8b39d205
jmp 0x1004db7c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x380]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x380], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x2dc]
call fcn.10017bc2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
call fcn.10017bc2
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x14], 0
push 2
lea ecx, [ebp - 0x64]
call fcn.10017b3d
mov dword [ebp - 4], 9
mov dword [ebp - 0x1a8], 0xf6657eef
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x68], 0
jmp 0x1004dc18
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1004dc31
push dword [ebp - 0x68]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov dword [eax], 0x65683c8f
jmp 0x1004dc11
mov dword [ebp - 0x14], 0xfffffff7
jmp 0x1004dc41
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xffffffef
jge 0x1004dc5d
mov byte [ebp - 0x38], 0
movzx eax, byte [ebp - 0x38]
test eax, eax
je 0x1004dc5b
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
jmp 0x1004dc3a
mov dword [ebp - 0x14], 0
jmp 0x1004dc6d
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1004e00a
mov dword [ebp - 0x10], 0xddbc3707
mov dword [ebp - 0x290], 9
mov dword [ebp - 0x10], 0
jmp 0x1004dc98
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1004dcb1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov dword [eax], 8
jmp 0x1004dc91
mov dword [ebp - 0x10], 0
jmp 0x1004dcc1
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1004e005
mov dword [ebp - 0x260], 0xffffffff
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
jge 0x1004dcf3
mov dword [ebp - 0x170], 1
jmp 0x1004dcfa
and dword [ebp - 0x170], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
cmp dword [eax], 0x8ceef9a8
jne 0x1004dd19
mov dword [ebp - 0xcc], 1
jmp 0x1004dd20
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xcc], eax
jle 0x1004dd37
mov dword [ebp - 0x128], 1
jmp 0x1004dd3e
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x128], eax
jl 0x1004dd5e
mov eax, 0x6e2c9bf5
test eax, eax
je 0x1004dd5e
mov dword [ebp - 0x130], 1
jmp 0x1004dd65
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x130], eax
jle 0x1004dd7c
mov dword [ebp - 0x138], 1
jmp 0x1004dd83
and dword [ebp - 0x138], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov ecx, dword [ebp - 0x138]
cmp ecx, dword [eax]
jg 0x1004dda4
mov dword [ebp - 0x140], 1
jmp 0x1004ddab
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x140], eax
jge 0x1004ddc2
mov dword [ebp - 0x148], 1
jmp 0x1004ddc9
and dword [ebp - 0x148], 0
cmp dword [ebp - 0x148], 1
jne 0x1004ddde
mov dword [ebp - 0x150], 1
jmp 0x1004dde5
and dword [ebp - 0x150], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov esi, dword [ebp - 0x150]
imul esi, dword [eax]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
cmp esi, dword [eax]
jg 0x1004de14
mov dword [ebp - 0x2b4], 1
jmp 0x1004de1b
and dword [ebp - 0x2b4], 0
mov eax, 0x11ec
test eax, eax
jne 0x1004de33
cmp dword [ebp - 0x10], 0
jne 0x1004de33
and dword [ebp - 0x158], 0
jmp 0x1004de3d
mov dword [ebp - 0x158], 1
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x158]
cmp eax, 0x58cdc14c
jne 0x1004de59
mov dword [ebp - 0x160], 1
jmp 0x1004de60
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x160], eax
jg 0x1004de77
mov dword [ebp - 0x168], 1
jmp 0x1004de7e
and dword [ebp - 0x168], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov ecx, dword [ebp - 0x168]
cmp ecx, dword [eax]
jle 0x1004dea5
cmp dword [ebp - 0x10], 0
je 0x1004dea5
mov dword [ebp - 0x178], 1
jmp 0x1004deac
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x178]
jge 0x1004dec6
mov dword [ebp - 0x180], 1
jmp 0x1004decd
and dword [ebp - 0x180], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov ecx, dword [ebp - 0x180]
cmp ecx, dword [eax]
je 0x1004deee
mov dword [ebp - 0x188], 1
jmp 0x1004def5
and dword [ebp - 0x188], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov eax, dword [eax]
cmp eax, dword [ebp - 0x188]
jle 0x1004df16
mov dword [ebp - 0x190], 1
jmp 0x1004df1d
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x190], eax
jle 0x1004df34
mov dword [ebp - 0x198], 1
jmp 0x1004df3b
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jg 0x1004df5b
mov dword [ebp - 0x1a0], 1
jmp 0x1004df62
and dword [ebp - 0x1a0], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov eax, dword [eax]
cmp eax, dword [ebp - 0x1a0]
je 0x1004df83
mov dword [ebp - 0x2c4], 1
jmp 0x1004df8a
and dword [ebp - 0x2c4], 0
push 1
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
mov dword [ebp - 0x1a8], eax
mov esi, dword [ebp - 0x1a8]
neg esi
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
cmp dword [eax], esi
jg 0x1004dfc4
mov dword [ebp - 0x1b0], 1
jmp 0x1004dfcb
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b8], eax
mov esi, dword [ebp - 0x1b8]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov edi, eax
push 0
lea ecx, [ebp - 0x64]
call fcn.10017bc7
mov eax, dword [eax]
add eax, dword [edi]
add eax, esi
mov dword [ebp - 0x260], eax
jmp 0x1004dcba
jmp 0x1004dc66
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.10017bc2
mov eax, dword [ebp - 0x264]
movzx eax, byte [eax]
test eax, eax
je 0x1004e039
push 0
push 0
push 0x21fb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x1004e3f1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x274], eax
push 3
lea ecx, [ebp - 0x30c]
call fcn.10017b3d
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x364], 0xb546158d
mov dword [ebp - 0x98], 0
jmp 0x1004e085
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1004e0a7
push dword [ebp - 0x98]
lea ecx, [ebp - 0x30c]
call fcn.10017bc7
mov dword [eax], 0x85f7
jmp 0x1004e078
mov dword [ebp - 0x50], 0
jmp 0x1004e0b7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1004e0d3
push dword [ebp - 0x50]
lea ecx, [ebp - 0x30c]
call fcn.10017bc7
mov dword [eax], 0xfff6
jmp 0x1004e0b0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.10017bc2
mov dword [ebp - 0x48], 0x5540d7f8
mov dword [ebp - 0x40], 1
mov dword [ebp - 0xa4], 7
push 3
lea ecx, [ebp - 0x390]
call fcn.10017b3d
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x6c], 0
jmp 0x1004e11e
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x1004e13a
push dword [ebp - 0x6c]
lea ecx, [ebp - 0x390]
call fcn.10017bc7
mov dword [eax], 0x24489be6
jmp 0x1004e117
mov dword [ebp - 0x48], 0
jmp 0x1004e14a
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x17
jle 0x1004e159
mov dword [ebp - 0x40], 0xdce9d05b
jmp 0x1004e143
mov dword [ebp - 0x40], 0
jmp 0x1004e169
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xa
jle 0x1004e2f4
mov dword [ebp - 0xdc], 0xbbc2
mov dword [ebp - 0x25c], 0xa9a98436
mov dword [ebp - 0x70], 0
jmp 0x1004e197
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1004e1ad
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x248], 0x2132
jmp 0x1004e190
mov eax, 0x58d020bd
test eax, eax
je 0x1004e2dc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x248], 0
je 0x1004e2a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x248]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x40], eax
jne 0x1004e1f5
mov dword [ebp - 0x1c0], 1
jmp 0x1004e1fc
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
sub eax, 0x74c62dfb
cmp eax, 0xc44d4e2b
jne 0x1004e217
cmp dword [ebp - 0xa4], 0
je 0x1004e22a
push 5
pop eax
test eax, eax
je 0x1004e22a
mov dword [ebp - 0x1c8], 1
jmp 0x1004e231
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1c8]
neg eax
cmp eax, 1
jge 0x1004e24a
mov dword [ebp - 0xd0], 1
jmp 0x1004e251
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xa4], eax
jle 0x1004e274
mov dword [ebp - 0xd4], 1
jmp 0x1004e27b
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xdc], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x248]
sub ecx, dword [ebp - 0xdc]
sub ecx, dword [ebp + eax - 0x248]
jne 0x1004e2b8
cmp dword [ebp - 0x40], 0
jne 0x1004e2b8
and dword [ebp - 0xe4], 0
jmp 0x1004e2c2
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0xe4]
test eax, eax
je 0x1004e2dc
mov dword [ebp - 0xec], 1
jmp 0x1004e2e3
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x25c], eax
jmp 0x1004e162
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.10017bc2
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0x284], eax
push 2
lea ecx, [ebp - 0x2e8]
call fcn.10017b3d
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x4c], 0xf1febaee
mov dword [ebp - 0x27c], 0xb363f9e9
mov dword [ebp - 0x78], 0
jmp 0x1004e344
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1004e360
push dword [ebp - 0x78]
lea ecx, [ebp - 0x2e8]
call fcn.10017bc7
mov dword [eax], 1
jmp 0x1004e33d
mov dword [ebp - 0x4c], 1
jmp 0x1004e370
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x1004e3be
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1004e38a
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x2e8]
call fcn.10017bc7
cmp dword [eax], 0
jne 0x1004e3a9
mov dword [ebp - 0xf4], 1
jmp 0x1004e3b0
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x27c], eax
jmp 0x1004e369
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2e8]
call fcn.10017bc2
push 0
mov ecx, dword [ebp - 0x284]
call fcn.10017bc7
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xfc]
mov dword [ecx], eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret