Function at 0x1000ae3d
Capabilities:
Extract resource via kernel32 functions
Identify system language via api
Suspend thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007ce3f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x11b0
call fcn.10079580
push esi
push edi
mov dword [ebp - 0xae4], 5
mov dword [ebp - 0xae0], 5
mov dword [ebp - 0xadc], 5
mov dword [ebp - 0xad8], 5
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x29c], 0
jmp 0x1000aeac
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 4
jge 0x1000aec8
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x1194], 0x67120dd9
jmp 0x1000ae9f
mov dword [ebp - 0x98], 0
jmp 0x1000aee1
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jg 0x1000b1b6
mov dword [ebp - 0x1f4], 0
jmp 0x1000af07
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1000af20
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x34], 0x8c66f5a9
jmp 0x1000aefa
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34], 3
jmp 0x1000af45
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
jl 0x1000b19f
mov dword [ebp - 0x78], 0xfffffffd
mov dword [ebp - 0xb98], 0
mov dword [ebp - 0xc4c], 1
mov dword [ebp - 0x78], 0
jmp 0x1000af81
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x1000b19a
mov dword [ebp - 0x1b0], 0x7b844a75
mov dword [ebp - 0x1b0], 0
jmp 0x1000afae
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jg 0x1000b0fe
mov dword [ebp - 0xc3c], 1
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ebp + ecx*4 - 0xae4]
cmp dword [ebp + eax*4 - 0xae4], ecx
jg 0x1000afe7
mov dword [ebp - 0xa44], 1
jmp 0x1000afee
and dword [ebp - 0xa44], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
sub eax, 0x653a47ed
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1194]
jle 0x1000b017
mov dword [ebp - 0x7b0], 1
jmp 0x1000b01e
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0xae4]
cmp dword [ebp - 0x7b0], eax
jg 0x1000b03c
mov dword [ebp - 0xa4c], 1
jmp 0x1000b043
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa44]
cmp eax, dword [ebp - 0xa4c]
jl 0x1000b05d
mov dword [ebp - 0xa80], 1
jmp 0x1000b064
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0xa80]
add eax, 0x193f
mov dword [ebp - 0xb98], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xae4]
cmp dword [ebp + eax - 0x34], ecx
jle 0x1000b09a
mov dword [ebp - 0xa88], 1
jmp 0x1000b0a1
and dword [ebp - 0xa88], 0
cmp dword [ebp - 0x1b0], 0
je 0x1000b0c3
mov eax, dword [ebp - 0x78]
cmp dword [ebp + eax*4 - 0xae4], 0
je 0x1000b0c3
mov dword [ebp - 0xa90], 1
jmp 0x1000b0ca
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0xa88]
cmp eax, dword [ebp - 0xa90]
jl 0x1000b0e4
mov dword [ebp - 0xa98], 1
jmp 0x1000b0eb
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0xa98]
neg eax
mov dword [ebp - 0xc3c], eax
jmp 0x1000afa1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 8
je 0x1000b117
mov dword [ebp - 0xaa0], 1
jmp 0x1000b11e
and dword [ebp - 0xaa0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
cmp eax, dword [ebp - 0xaa0]
jle 0x1000b13f
mov dword [ebp - 0xaa8], 1
jmp 0x1000b146
and dword [ebp - 0xaa8], 0
cmp dword [ebp - 0xaa8], 1
jl 0x1000b15b
mov dword [ebp - 0xc44], 1
jmp 0x1000b162
and dword [ebp - 0xc44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xae4]
mov dword [ebp - 0x1068], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0x106c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
mov dword [ebp - 0xc4c], eax
jmp 0x1000af7a
jmp 0x1000af30
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
je 0x1000b1b1
jmp 0x1000aed4
jmp 0x1000aed4
mov dword [ebp - 0x98], 0xffffffe5
jmp 0x1000b1cf
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xb
jne 0x1000b23a
mov dword [ebp - 0x188], 0xf0790389
mov dword [ebp - 0x188], 0
jmp 0x1000b1fb
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jg 0x1000b238
mov eax, dword [ebp - 0x188]
cmp dword [ebp + eax*4 - 0xae4], 0
je 0x1000b216
jmp 0x1000b238
mov byte [ebp - 0x142], 0
movzx eax, byte [ebp - 0x142]
test eax, eax
je 0x1000b236
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x1000b1ee
jmp 0x1000b1c2
mov dword [ebp - 0x68], 7
mov dword [ebp - 0x28c], 0xffffffff
mov dword [ebp - 0x1f8], 0xdae5a60d
mov dword [ebp - 0x340], 0x2949f4ff
mov dword [ebp - 0x3c0], 0xfb26c4f3
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jne 0x1000b28a
cmp dword [ebp - 0x68], 0
jne 0x1000b28a
and dword [ebp - 0x864], 0
jmp 0x1000b294
mov dword [ebp - 0x864], 1
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x68], eax
je 0x1000b2a8
mov dword [ebp - 0xab0], 1
jmp 0x1000b2af
and dword [ebp - 0xab0], 0
cmp dword [ebp - 0xab0], 0xffffffff
jne 0x1000b2c4
mov dword [ebp - 0xab8], 1
jmp 0x1000b2cb
and dword [ebp - 0xab8], 0
cmp dword [ebp - 0xab8], 0xfffffff7
jne 0x1000b2e0
mov dword [ebp - 0xac0], 1
jmp 0x1000b2e7
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xac0]
jg 0x1000b2fe
mov dword [ebp - 0x428], 1
jmp 0x1000b305
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0x864]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x1f8]
add eax, dword [ebp - 0x428]
mov dword [ebp - 0x340], eax
je 0x1000b488
mov dword [ebp - 0xc54], 0xb8fa48a2
mov dword [ebp - 0x58], 0
jmp 0x1000b347
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000b35d
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc80], 0x329e
jmp 0x1000b340
mov dword [ebp - 0x58], 0
jmp 0x1000b36d
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000b383
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc88], 0
jmp 0x1000b366
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0xc54], eax
jne 0x1000b3a6
mov dword [ebp - 0x86c], 1
jmp 0x1000b3ad
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x1f8]
cmp eax, dword [ebp - 0x86c]
jne 0x1000b3cd
mov eax, 0x9d5b611f
test eax, eax
jne 0x1000b3cd
and dword [ebp - 0x430], 0
jmp 0x1000b3d7
mov dword [ebp - 0x430], 1
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x1f8], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x874], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x874]
mov dword [ebp + eax - 0xc80], ecx
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x28c], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0x438], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x438]
mov dword [ebp + eax - 0xc88], ecx
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x438], eax
jle 0x1000b451
push 9
pop eax
test eax, eax
jne 0x1000b451
and dword [ebp - 0x87c], 0
jmp 0x1000b45b
mov dword [ebp - 0x87c], 1
cmp dword [ebp - 0x87c], 0xf8ab
jle 0x1000b473
mov dword [ebp - 0x440], 1
jmp 0x1000b47a
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x3c0], eax
jmp 0x1000b49e
mov dword [ebp - 0xc90], 0xffffffff
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0xa64], 5
mov dword [ebp - 0xa60], 5
mov dword [ebp - 0xa5c], 5
mov dword [ebp - 0xa58], 5
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0x294], 0
jmp 0x1000b4e9
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000b505
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x1164], 0x67120dd9
jmp 0x1000b4dc
mov dword [ebp - 0xa8], 0
jmp 0x1000b51e
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jg 0x1000b80e
mov dword [ebp - 0x310], 0
jmp 0x1000b544
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 1
jge 0x1000b55d
mov eax, dword [ebp - 0x310]
mov dword [ebp + eax*4 - 0x38], 0x8c66f5a9
jmp 0x1000b537
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x38], 3
jmp 0x1000b582
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
jl 0x1000b7f7
mov dword [ebp - 0x88], 0xfffffffd
mov dword [ebp - 0xc98], 0
mov dword [ebp - 0xcb0], 1
mov dword [ebp - 0x88], 0
jmp 0x1000b5ca
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x1000b7f2
mov dword [ebp - 0x1c8], 0x7b844a75
mov dword [ebp - 0x1c8], 0
jmp 0x1000b5fa
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jg 0x1000b756
mov dword [ebp - 0xca0], 1
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x88]
mov ecx, dword [ebp + ecx*4 - 0xa64]
cmp dword [ebp + eax*4 - 0xa64], ecx
jg 0x1000b639
mov dword [ebp - 0x448], 1
jmp 0x1000b640
and dword [ebp - 0x448], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
sub eax, 0x653a47ed
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1164]
jle 0x1000b669
mov dword [ebp - 0x884], 1
jmp 0x1000b670
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x88]
mov eax, dword [ebp + eax*4 - 0xa64]
cmp dword [ebp - 0x884], eax
jg 0x1000b691
mov dword [ebp - 0x88c], 1
jmp 0x1000b698
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x88c]
jl 0x1000b6b2
mov dword [ebp - 0x450], 1
jmp 0x1000b6b9
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
add eax, 0x193f
mov dword [ebp - 0xc98], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xa64]
cmp dword [ebp + eax - 0x38], ecx
jle 0x1000b6ef
mov dword [ebp - 0x894], 1
jmp 0x1000b6f6
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x1c8], 0
je 0x1000b71b
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0xa64], 0
je 0x1000b71b
mov dword [ebp - 0x458], 1
jmp 0x1000b722
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x894]
cmp eax, dword [ebp - 0x458]
jl 0x1000b73c
mov dword [ebp - 0x89c], 1
jmp 0x1000b743
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
neg eax
mov dword [ebp - 0xca0], eax
jmp 0x1000b5ed
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 8
je 0x1000b76f
mov dword [ebp - 0x460], 1
jmp 0x1000b776
and dword [ebp - 0x460], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa64]
cmp eax, dword [ebp - 0x460]
jle 0x1000b797
mov dword [ebp - 0x8a4], 1
jmp 0x1000b79e
and dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8a4], 1
jl 0x1000b7b3
mov dword [ebp - 0xca8], 1
jmp 0x1000b7ba
and dword [ebp - 0xca8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa64]
mov dword [ebp - 0xfc0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0x1074], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0xcb0], eax
jmp 0x1000b5bd
jmp 0x1000b56d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1000b809
jmp 0x1000b511
jmp 0x1000b511
mov dword [ebp - 0xa8], 0xffffffe5
jmp 0x1000b827
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xb
jne 0x1000b892
mov dword [ebp - 0x190], 0xf0790389
mov dword [ebp - 0x190], 0
jmp 0x1000b853
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 3
jg 0x1000b890
mov eax, dword [ebp - 0x190]
cmp dword [ebp + eax*4 - 0xa64], 0
je 0x1000b86e
jmp 0x1000b890
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1000b88e
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x1000b846
jmp 0x1000b81a
mov dword [ebp - 0x2c], 0x3b26bdde
mov dword [ebp - 0x14c], 0xea2c39d5
mov dword [ebp - 0x210], 0xda19
mov dword [ebp - 0x2c], 0xfffffffd
jmp 0x1000b8bd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 6
je 0x1000b9c0
mov dword [ebp - 0x348], 0xdead
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x348], eax
jl 0x1000b8e8
mov dword [ebp - 0x470], 1
jmp 0x1000b8ef
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x348]
sub eax, dword [ebp - 0x2c]
cmp eax, 0xfffffffd
jne 0x1000b909
mov dword [ebp - 0x468], 1
jmp 0x1000b910
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x1720
jle 0x1000b928
mov dword [ebp - 0xcb8], 1
jmp 0x1000b92f
and dword [ebp - 0xcb8], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xfc8], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xfdc], eax
cmp dword [ebp - 0x2c], 0x26a7609f
jle 0x1000b956
mov dword [ebp - 0x8ac], 1
jmp 0x1000b95d
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
sub eax, 3
imul eax, eax, 0x4abc
cmp dword [ebp - 0x470], eax
jle 0x1000b980
mov dword [ebp - 0xce8], 1
jmp 0x1000b987
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x2c], eax
jg 0x1000b99e
mov dword [ebp - 0x8b4], 1
jmp 0x1000b9a5
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x14c], 0
jmp 0x1000b8b6
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xfe8], eax
cmp dword [ebp - 0x210], 0xffff
je 0x1000b9e4
mov dword [ebp - 0x478], 1
jmp 0x1000b9eb
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x478]
sub eax, dword [ebp - 0x210]
je 0x1000ba0a
or eax, 0xffffffff
je 0x1000ba0a
mov dword [ebp - 0x8bc], 1
jmp 0x1000ba11
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x8bc], eax
jge 0x1000ba2b
mov dword [ebp - 0x480], 1
jmp 0x1000ba32
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x480], eax
jge 0x1000ba4c
mov dword [ebp - 0x8c4], 1
jmp 0x1000ba53
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
sub eax, dword [ebp - 0x210]
sub eax, 8
cmp eax, dword [ebp - 0x2c]
jle 0x1000ba73
mov dword [ebp - 0x488], 1
jmp 0x1000ba7a
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
add eax, 0x2dfce95
cmp dword [ebp - 0x14c], eax
jge 0x1000ba99
mov dword [ebp - 0x8cc], 1
jmp 0x1000baa0
and dword [ebp - 0x8cc], 0
cmp dword [ebp - 0x8cc], 0xfffffffe
ja 0x1000bab5
mov dword [ebp - 0x490], 1
jmp 0x1000babc
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0x58a13c4
jne 0x1000bad4
mov dword [ebp - 0x8d4], 1
jmp 0x1000badb
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x218], 1
mov dword [ebp - 0x2a8], 0
jmp 0x1000bb0a
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 4
jge 0x1000bb26
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x11ac], 0xc31e
jmp 0x1000bafd
mov dword [ebp - 0x218], 0
jmp 0x1000bb3f
mov eax, dword [ebp - 0x218]
dec eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 0xffffffe6
jne 0x1000bdcb
mov dword [ebp - 0x2b0], 0xaf7f3e76
mov dword [ebp - 0xd00], 0xffffffff
mov eax, 0xe60f
test eax, eax
je 0x1000bcf6
mov dword [ebp - 0xeac], 0x8708ef6b
mov dword [ebp - 0xea8], 0x8708ef6b
mov dword [ebp - 0xea4], 0x8708ef6b
mov dword [ebp - 0xea0], 0x8708ef6b
lea ecx, [ebp - 0x3b9]
call fcn.1000a5b5
push eax
lea eax, [ebp - 0xe9c]
push eax
lea eax, [ebp - 0xeac]
push eax
lea ecx, [ebp - 0x114c]
call fcn.1000a91c
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xd40]
call fcn.1000a8e2
and dword [ebp - 4], 0
mov dword [ebp - 0x2f0], 0
jmp 0x1000bbe7
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jge 0x1000bc03
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0xcf0], 0x8876
jmp 0x1000bbda
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcf0], 0
je 0x1000bc27
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd40]
call fcn.1000a908
jmp 0x1000bdcb
push 2
lea ecx, [ebp - 0xd40]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000bc5d
push 2
lea ecx, [ebp - 0xd40]
call fcn.1000a90d
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x498]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x498]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd40]
call fcn.1000a90d
cmp dword [eax], 0xfffffffb
jge 0x1000bce2
mov dword [ebp - 0x220], 0x7597a61e
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1000bca1
push 0
push 0
push 0x2cb
push 0xdfc
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
mov dword [ebp - 0x220], 0
jmp 0x1000bcba
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jg 0x1000bcdd
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000bcdb
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x1000bcad
jmp 0x1000bc39
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd40]
call fcn.1000a908
jmp 0x1000bdc6
mov dword [ebp - 0x388], 0xcf04
mov dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x2b0]
je 0x1000bdb3
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0xcf8], eax
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x107c], eax
cmp dword [ebp - 0x2b0], 0
jne 0x1000bd4f
mov eax, 0x668451f1
test eax, eax
jne 0x1000bd4f
and dword [ebp - 0x8dc], 0
jmp 0x1000bd59
mov dword [ebp - 0x8dc], 1
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x8dc], eax
jg 0x1000bd73
mov dword [ebp - 0x4a0], 1
jmp 0x1000bd7a
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0x4a0]
jg 0x1000bd94
mov dword [ebp - 0x8e4], 1
jmp 0x1000bd9b
and dword [ebp - 0x8e4], 0
cmp dword [ebp - 0x8e4], 0x89fe
jl 0x1000bdb3
mov dword [ebp - 0x4a8], 1
jmp 0x1000bdba
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xd00], eax
jmp 0x1000bb32
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x1000bdec
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ValidateRect]
mov dword [ebp - 0x608], 5
mov dword [ebp - 0x604], 5
mov dword [ebp - 0x600], 5
mov dword [ebp - 0x5fc], 5
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x4b8], 0xae7b1b0c
mov dword [ebp - 0x228], 0
jmp 0x1000be3e
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x1000be5a
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x3dc], 0x204e2db5
jmp 0x1000be31
mov dword [ebp - 0x18], 0
jmp 0x1000be6a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000be80
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3dc], 0xfffffffc
jmp 0x1000be63
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0xff0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0x10ac], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0xff8], eax
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x3dc]
cmp dword [ebp + eax - 0x3dc], ecx
jl 0x1000bede
mov dword [ebp - 0x8ec], 1
jmp 0x1000bee5
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 1
jne 0x1000befa
mov dword [ebp - 0x4b0], 1
jmp 0x1000bf01
and dword [ebp - 0x4b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp eax, dword [ebp - 0x4b0]
jle 0x1000bf22
mov dword [ebp - 0x8f4], 1
jmp 0x1000bf29
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x8f4]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0x3dc]
je 0x1000bfa8
mov dword [ebp - 0x330], 0
jmp 0x1000bf5d
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x1000bf79
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0x10fc], 0xebf889e0
jmp 0x1000bf50
mov dword [ebp - 0x18], 0xfffffffd
jmp 0x1000bf89
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x13
jg 0x1000bfa3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10fc], 0
je 0x1000bfa1
jmp 0x1000bfa3
jmp 0x1000bf82
jmp 0x1000c111
mov dword [ebp - 0x230], 0xd081
mov dword [ebp - 0x91c], 0xac8c
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
cmp dword [ebp - 0x230], eax
je 0x1000bfe2
mov dword [ebp - 0x8fc], 1
jmp 0x1000bfe9
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x8fc]
inc eax
cmp eax, 0x90aec51a
je 0x1000c003
mov dword [ebp - 0x4c0], 1
jmp 0x1000c00a
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x4c0], eax
jg 0x1000c021
mov dword [ebp - 0x904], 1
jmp 0x1000c028
and dword [ebp - 0x904], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3dc]
cmp eax, dword [ebp - 0x904]
jle 0x1000c048
mov dword [ebp - 0x4c8], 1
jmp 0x1000c04f
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0x68dd2ac3
jne 0x1000c067
mov dword [ebp - 0x90c], 1
jmp 0x1000c06e
and dword [ebp - 0x90c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp - 0x90c], eax
jg 0x1000c08f
mov dword [ebp - 0x4d0], 1
jmp 0x1000c096
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x230]
sub eax, dword [ebp - 0x4d0]
cmp eax, 0xab721576
jbe 0x1000c0b5
mov dword [ebp - 0x914], 1
jmp 0x1000c0bc
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x914], eax
jne 0x1000c0d6
mov dword [ebp - 0x4d8], 1
jmp 0x1000c0dd
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0x91c], eax
mov eax, dword [ebp - 0x91c]
cmp dword [ebp - 0x18], eax
je 0x1000c100
mov dword [ebp - 0x4e0], 1
jmp 0x1000c107
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
dec eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x240], 7
mov dword [ebp - 0x924], 0xb999fb02
mov dword [ebp - 0x92c], 1
mov dword [ebp - 0x2b8], 0
jmp 0x1000c152
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x1000c16e
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xb64], 1
jmp 0x1000c145
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xb64], 0xfffffff0
jmp 0x1000c19c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb64], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb64], 0x16
jl 0x1000c37c
mov dword [ebp - 0x2f8], 0
mov dword [ebp - 0xe34], 0xfffffff6
mov dword [ebp - 0xe30], 0xfffffff6
mov dword [ebp - 0xe2c], 0xfffffff6
mov dword [ebp - 0xe28], 0xfffffff6
mov dword [ebp - 0xd10], 0xb2455f99
mov dword [ebp - 0x238], 0
jmp 0x1000c205
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 4
jge 0x1000c221
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x10e0], 0xa2324015
jmp 0x1000c1f8
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
mov dword [ebp - 0x924], eax
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x4e8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax - 0xe34], ecx
cmp dword [ebp - 0x4e8], 0
jne 0x1000c310
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x92c]
cmp dword [ebp + eax - 0xe34], ecx
jg 0x1000c2d1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb64]
imul eax, dword [ebp - 0x92c]
sub eax, dword [ebp - 0x240]
mov dword [ebp - 0x4f0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp + eax - 0xe34], ecx
mov eax, dword [ebp - 0x4f0]
sub eax, 0x564705b8
cmp dword [ebp - 0x240], eax
je 0x1000c2d1
mov dword [ebp - 0x934], 1
jmp 0x1000c2d8
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x2f8]
cmp dword [ebp - 0x934], eax
jle 0x1000c2f2
mov dword [ebp - 0x4f8], 1
jmp 0x1000c2f9
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x2f8]
jne 0x1000c310
and dword [ebp - 0x93c], 0
jmp 0x1000c31a
mov dword [ebp - 0x93c], 1
mov eax, dword [ebp - 0x93c]
add eax, 5
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x240]
mov dword [ebp - 0xd08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd08]
mov dword [ebp + eax - 0x10e0], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10e0], 0xfffffff9
jne 0x1000c364
mov dword [ebp - 0x500], 1
jmp 0x1000c36b
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xd10], eax
jmp 0x1000c181
mov dword [ebp - 0x2c0], 0
jmp 0x1000c395
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 4
jge 0x1000c3b1
mov eax, dword [ebp - 0x2c0]
mov dword [ebp + eax*4 - 0x117c], 0x67120dd9
jmp 0x1000c388
mov dword [ebp - 0xa0], 0
jmp 0x1000c3ca
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x1000d393
mov dword [ebp - 0xc4], 0x2e8
mov dword [ebp - 0x248], 0
jmp 0x1000c3fa
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x1000c416
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x174], 0x99841b3c
jmp 0x1000c3ed
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x174], 8
jmp 0x1000c444
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x174], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x174], 0xffffffe5
jle 0x1000c5bc
mov dword [ebp - 0xd20], 0x7d1649bc
mov dword [ebp - 0x318], 0
jmp 0x1000c47b
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x1000c497
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xb2c], 0xd0657689
jmp 0x1000c46e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb2c]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0xb2c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x174]
jl 0x1000c4cc
mov dword [ebp - 0x944], 1
jmp 0x1000c4d3
and dword [ebp - 0x944], 0
push 5
pop eax
sub eax, dword [ebp - 0x944]
jne 0x1000c4f7
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb2c], 0
jne 0x1000c4f7
and dword [ebp - 0xd18], 0
jmp 0x1000c501
mov dword [ebp - 0xd18], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb2c]
mov dword [ebp - 0x102c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
mov dword [ebp - 0x1008], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x174]
mov dword [ebp - 0x1030], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x174]
mov dword [ebp - 0x1018], eax
mov eax, 0xc1464f16
cmp eax, 1
ja 0x1000c563
mov dword [ebp - 0x508], 1
jmp 0x1000c56a
and dword [ebp - 0x508], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x174]
imul eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc4]
jle 0x1000c58f
cmp dword [ebp - 0xc4], 0
jne 0x1000c5a1
cmp dword [ebp - 0xc4], 0
jne 0x1000c5a1
and dword [ebp - 0x94c], 0
jmp 0x1000c5ab
mov dword [ebp - 0x94c], 1
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0xd20], eax
jmp 0x1000c429
mov dword [ebp - 0xc4], 0
jmp 0x1000c5d5
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0x1b
jle 0x1000c864
mov dword [ebp - 0xcc], 0xad901516
mov dword [ebp - 0xcc], 1
jmp 0x1000c605
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x1000c85f
push 1
lea ecx, [ebp - 0xb58]
call fcn.1000a8a0
mov dword [ebp - 4], 1
mov dword [ebp - 0x250], 0
jmp 0x1000c63f
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x1000c65e
push dword [ebp - 0x250]
lea ecx, [ebp - 0xb58]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000c632
push 0
lea ecx, [ebp - 0xb58]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000c694
push 0
lea ecx, [ebp - 0xb58]
call fcn.1000a90d
mov dword [ebp - 0x510], eax
mov eax, dword [ebp - 0x510]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x510]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xb58]
call fcn.1000a90d
cmp dword [eax], 1
jg 0x1000c84b
mov dword [ebp - 0x2c8], 0
jmp 0x1000c6c3
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 4
jge 0x1000c6df
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xe14], 2
jmp 0x1000c6b6
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe14], 0
jmp 0x1000c70d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe14]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe14], 2
jge 0x1000c737
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe14]
mov dword [ebp + eax*4 - 0x174], 1
jmp 0x1000c6f2
mov eax, dword [ebp - 0xcc]
cmp dword [ebp + eax*4 - 0x174], 0x16c28cbd
je 0x1000c756
mov dword [ebp - 0x520], 1
jmp 0x1000c75d
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe14], 1
je 0x1000c779
mov dword [ebp - 0x954], 1
jmp 0x1000c780
and dword [ebp - 0x954], 0
push 0
lea ecx, [ebp - 0xb58]
call fcn.1000a90d
mov ecx, dword [ebp - 0x954]
imul ecx, dword [eax]
add ecx, 0x719c
je 0x1000c7b3
mov eax, 0xda1e
test eax, eax
je 0x1000c7b3
mov dword [ebp - 0xd28], 1
jmp 0x1000c7ba
and dword [ebp - 0xd28], 0
cmp dword [ebp - 0xcc], 0xee00b46f
jbe 0x1000c7d2
mov dword [ebp - 0x518], 1
jmp 0x1000c7d9
and dword [ebp - 0x518], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe14]
cmp eax, dword [ebp - 0x518]
jne 0x1000c7f9
mov dword [ebp - 0x95c], 1
jmp 0x1000c800
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
add eax, 3
sub eax, dword [ebp - 0xcc]
imul eax, dword [ebp - 0x520]
cmp eax, 7
jae 0x1000c827
mov dword [ebp - 0x964], 1
jmp 0x1000c82e
and dword [ebp - 0x964], 0
mov eax, dword [ebp - 0x964]
add eax, 0x65cab430
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x174], eax
jmp 0x1000c670
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb58]
call fcn.1000a908
jmp 0x1000c5f8
jmp 0x1000c5c8
mov dword [ebp - 0x258], 0
jmp 0x1000c87d
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1000c896
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x40], 0x8c66f5a9
jmp 0x1000c870
push 1
lea ecx, [ebp - 0x40c]
call fcn.1000a8a0
mov dword [ebp - 4], 2
mov dword [ebp - 0xd4], 0x18885c6f
mov dword [ebp - 0x9b4], 1
mov dword [ebp - 0x350], 0x5718a84d
mov dword [ebp - 0x99c], 0xb62e56c
mov dword [ebp - 0xd30], 0xefb40acb
mov dword [ebp - 0x300], 0
jmp 0x1000c8f5
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
jge 0x1000c917
push dword [ebp - 0x300]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
mov dword [eax], 1
jmp 0x1000c8e8
mov dword [ebp - 0xd4], 0
jmp 0x1000c930
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0
jl 0x1000ce6f
mov dword [ebp - 0x1b8], 5
mov dword [ebp - 0xde8], 5
push 1
lea ecx, [ebp - 0xee0]
call fcn.1000a8a0
mov byte [ebp - 4], 3
mov dword [ebp - 0x60], 0
jmp 0x1000c972
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1000c98b
push dword [ebp - 0x60]
lea ecx, [ebp - 0xee0]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000c96b
mov dword [ebp - 0x60], 0
jmp 0x1000c99b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1000c9b1
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xfd4], 2
jmp 0x1000c994
mov dword [ebp - 0x1b8], 0
jmp 0x1000c9ca
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0
jl 0x1000ce5b
push 3
lea ecx, [ebp - 0x208]
call fcn.1000a8a0
mov byte [ebp - 4], 4
mov dword [ebp - 0x9ac], 6
mov dword [ebp - 0x3a8], 0
mov dword [ebp - 0xde0], 0xecd44262
mov dword [ebp - 0x260], 0
jmp 0x1000ca1f
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1000ca41
push dword [ebp - 0x260]
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov dword [eax], 0x23d1bca9
jmp 0x1000ca12
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000ca77
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov dword [ebp - 0x528], eax
mov eax, dword [ebp - 0x528]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x528]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
cmp dword [eax], 0
jl 0x1000ce47
mov dword [ebp - 0x578], 0xebf085f
mov dword [ebp - 0x96c], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000cc4b
mov dword [ebp - 0x96c], 1
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x1038], eax
mov eax, 0xe497d6a5
cmp eax, 0xa341a46
jne 0x1000caf2
mov dword [ebp - 0x530], 1
jmp 0x1000caf9
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xffff
jae 0x1000cb11
mov dword [ebp - 0x974], 1
jmp 0x1000cb18
and dword [ebp - 0x974], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov ecx, dword [ebp - 0x974]
cmp ecx, dword [eax]
jle 0x1000cb3b
mov dword [ebp - 0x538], 1
jmp 0x1000cb42
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x350], eax
mov esi, dword [ebp - 0x350]
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
imul esi, dword [eax]
cmp esi, dword [ebp - 0xd4]
je 0x1000cb8b
cmp dword [ebp - 0x1b8], 0
jne 0x1000cb8b
and dword [ebp - 0x97c], 0
jmp 0x1000cb95
mov dword [ebp - 0x97c], 1
cmp dword [ebp - 0x97c], 1
jg 0x1000cbaa
mov dword [ebp - 0x540], 1
jmp 0x1000cbb1
and dword [ebp - 0x540], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
mov ecx, dword [ebp - 0x540]
cmp ecx, dword [eax]
jge 0x1000cbe1
mov dword [ebp - 0x984], 1
jmp 0x1000cbe8
and dword [ebp - 0x984], 0
cmp dword [ebp - 0x984], 0x8679
jg 0x1000cc00
mov dword [ebp - 0x548], 1
jmp 0x1000cc07
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x548]
jge 0x1000cc21
mov dword [ebp - 0x98c], 1
jmp 0x1000cc28
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x98c]
sub eax, dword [ebp - 0xd4]
je 0x1000cc4b
cmp dword [ebp - 0x350], 0
je 0x1000cc4b
mov dword [ebp - 0x550], 1
jmp 0x1000cc52
and dword [ebp - 0x550], 0
push 0
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
mov ecx, dword [ebp - 0x550]
sub ecx, dword [eax]
jne 0x1000cc76
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov dword [ebp - 0x99c], 0xe0c2df10
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x3a8], eax
mov eax, dword [ebp - 0x578]
cmp dword [ebp - 0x3a8], eax
jne 0x1000ccc5
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000ccc5
mov dword [ebp - 0x994], 1
jmp 0x1000cccc
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
add eax, 0xdaea
cmp eax, 0x15ac
jg 0x1000ccea
mov dword [ebp - 0x558], 1
jmp 0x1000ccf1
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0xd30]
cmp dword [ebp - 0x558], eax
jle 0x1000cd0b
mov dword [ebp - 0xdd8], 1
jmp 0x1000cd12
and dword [ebp - 0xdd8], 0
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0x9b4]
sub eax, dword [ebp - 0xde0]
cmp eax, dword [ebp - 0xde8]
jge 0x1000cd4b
mov dword [ebp - 0x560], 1
jmp 0x1000cd52
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0xd05572bf
ja 0x1000cd6a
mov dword [ebp - 0x9a4], 1
jmp 0x1000cd71
and dword [ebp - 0x9a4], 0
push 0
lea ecx, [ebp - 0x208]
call fcn.1000a90d
mov ecx, dword [ebp - 0x9a4]
add ecx, dword [eax]
cmp ecx, 0x7783
je 0x1000cd9a
mov dword [ebp - 0x568], 1
jmp 0x1000cda1
and dword [ebp - 0x568], 0
push 0
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
mov eax, dword [eax]
cmp eax, dword [ebp - 0x568]
jle 0x1000cdc4
mov dword [ebp - 0xdf0], 1
jmp 0x1000cdcb
and dword [ebp - 0xdf0], 0
push 5
pop eax
sub eax, dword [ebp - 0x9ac]
je 0x1000ce01
push 1
lea ecx, [ebp - 0x208]
call fcn.1000a90d
push dword [eax]
lea ecx, [ebp - 0x40c]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000ce01
mov dword [ebp - 0x570], 1
jmp 0x1000ce08
and dword [ebp - 0x570], 0
push 0
lea ecx, [ebp - 0xee0]
call fcn.1000a90d
mov ecx, dword [ebp - 0x570]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9b4]
mov dword [ebp - 0xf2c], eax
mov eax, dword [ebp - 0x3a8]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xfd4]
mov dword [ebp - 0x578], eax
jmp 0x1000ca53
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x208]
call fcn.1000a908
jmp 0x1000c9bd
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xee0]
call fcn.1000a908
jmp 0x1000c923
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40c]
call fcn.1000a908
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x40], 3
jmp 0x1000cea3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
jl 0x1000d118
mov dword [ebp - 0x90], 0xfffffffd
mov dword [ebp - 0xdf8], 0
mov dword [ebp - 0xbc4], 1
mov dword [ebp - 0x90], 0
jmp 0x1000ceeb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jg 0x1000d113
mov dword [ebp - 0x198], 0x7b844a75
mov dword [ebp - 0x198], 0
jmp 0x1000cf1b
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 3
jg 0x1000d077
mov dword [ebp - 0xe00], 1
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
mov ecx, dword [ebp + ecx*4 - 0x608]
cmp dword [ebp + eax*4 - 0x608], ecx
jg 0x1000cf5a
mov dword [ebp - 0x580], 1
jmp 0x1000cf61
and dword [ebp - 0x580], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
sub eax, 0x653a47ed
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x117c]
jle 0x1000cf8a
mov dword [ebp - 0x9bc], 1
jmp 0x1000cf91
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x608]
cmp dword [ebp - 0x9bc], eax
jg 0x1000cfb2
mov dword [ebp - 0x9c4], 1
jmp 0x1000cfb9
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x580]
cmp eax, dword [ebp - 0x9c4]
jl 0x1000cfd3
mov dword [ebp - 0x588], 1
jmp 0x1000cfda
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
add eax, 0x193f
mov dword [ebp - 0xdf8], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x608]
cmp dword [ebp + eax - 0x40], ecx
jle 0x1000d010
mov dword [ebp - 0x9cc], 1
jmp 0x1000d017
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x198], 0
je 0x1000d03c
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x608], 0
je 0x1000d03c
mov dword [ebp - 0x590], 1
jmp 0x1000d043
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x590]
jl 0x1000d05d
mov dword [ebp - 0x9d4], 1
jmp 0x1000d064
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x9d4]
neg eax
mov dword [ebp - 0xe00], eax
jmp 0x1000cf0e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 8
je 0x1000d090
mov dword [ebp - 0x598], 1
jmp 0x1000d097
and dword [ebp - 0x598], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x608]
cmp eax, dword [ebp - 0x598]
jle 0x1000d0b8
mov dword [ebp - 0x9dc], 1
jmp 0x1000d0bf
and dword [ebp - 0x9dc], 0
cmp dword [ebp - 0x9dc], 1
jl 0x1000d0d4
mov dword [ebp - 0xc34], 1
jmp 0x1000d0db
and dword [ebp - 0xc34], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x608]
mov dword [ebp - 0xf34], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xf3c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xbc4], eax
jmp 0x1000cede
jmp 0x1000ce8e
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x268], 0xffffffff
mov dword [ebp - 0x2d0], 0xdae5a60d
mov dword [ebp - 0x358], 0x2949f4ff
mov dword [ebp - 0x390], 0xfb26c4f3
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jne 0x1000d168
cmp dword [ebp - 0x50], 0
jne 0x1000d168
and dword [ebp - 0x9ec], 0
jmp 0x1000d172
mov dword [ebp - 0x9ec], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
je 0x1000d186
mov dword [ebp - 0x5a0], 1
jmp 0x1000d18d
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 0xffffffff
jne 0x1000d1a2
mov dword [ebp - 0x9e4], 1
jmp 0x1000d1a9
and dword [ebp - 0x9e4], 0
cmp dword [ebp - 0x9e4], 0xfffffff7
jne 0x1000d1be
mov dword [ebp - 0x5a8], 1
jmp 0x1000d1c5
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x5a8]
jg 0x1000d1dc
mov dword [ebp - 0x5b0], 1
jmp 0x1000d1e3
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x9ec]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x2d0]
add eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x358], eax
je 0x1000d366
mov dword [ebp - 0xba8], 0xb8fa48a2
mov dword [ebp - 0x44], 0
jmp 0x1000d225
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1000d23b
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xce0], 0x329e
jmp 0x1000d21e
mov dword [ebp - 0x44], 0
jmp 0x1000d24b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1000d261
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xbb0], 0
jmp 0x1000d244
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xba8], eax
jne 0x1000d284
mov dword [ebp - 0x9f4], 1
jmp 0x1000d28b
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0x9f4]
jne 0x1000d2ab
mov eax, 0x9d5b611f
test eax, eax
jne 0x1000d2ab
and dword [ebp - 0x5b8], 0
jmp 0x1000d2b5
mov dword [ebp - 0x5b8], 1
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xf4c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x9fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9fc]
mov dword [ebp + eax - 0xce0], ecx
mov eax, dword [ebp - 0x9fc]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x5c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0xbb0], ecx
mov eax, dword [ebp - 0x390]
cmp dword [ebp - 0x5c0], eax
jle 0x1000d32f
push 9
pop eax
test eax, eax
jne 0x1000d32f
and dword [ebp - 0xa04], 0
jmp 0x1000d339
mov dword [ebp - 0xa04], 1
cmp dword [ebp - 0xa04], 0xf8ab
jle 0x1000d351
mov dword [ebp - 0x5c8], 1
jmp 0x1000d358
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x390], eax
jmp 0x1000d37c
mov dword [ebp - 0xd54], 0xffffffff
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0xd54], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x1000d38e
jmp 0x1000c3bd
jmp 0x1000c3bd
mov dword [ebp - 0x160], 1
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x160], 0
jmp 0x1000d3c3
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x15
je 0x1000d49a
push 1
lea ecx, [ebp - 0xd50]
call fcn.1000a8a0
mov dword [ebp - 4], 5
mov dword [ebp - 0x328], 0
jmp 0x1000d3fd
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 1
jge 0x1000d41f
push dword [ebp - 0x328]
lea ecx, [ebp - 0xd50]
call fcn.1000a90d
mov dword [eax], 0x905d09ea
jmp 0x1000d3f0
push 0
lea ecx, [ebp - 0xd50]
call fcn.1000a90d
mov dword [eax], 0x17
jmp 0x1000d458
push 0
lea ecx, [ebp - 0xd50]
call fcn.1000a90d
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0xa0c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa0c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd50]
call fcn.1000a90d
cmp dword [eax], 0xfffffff1
je 0x1000d486
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1000d484
push 0x21
call dword [sym.imp.USER32.dll_GetQueueStatus]
jmp 0x1000d434
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd50]
call fcn.1000a908
jmp 0x1000d3b6
mov dword [ebp - 0xa0], 0xffffffe5
jmp 0x1000d4b3
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xb
jne 0x1000d51e
mov dword [ebp - 0x1d8], 0xf0790389
mov dword [ebp - 0x1d8], 0
jmp 0x1000d4df
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 3
jg 0x1000d51c
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp + eax*4 - 0x608], 0
je 0x1000d4fa
jmp 0x1000d51c
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000d51a
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x1000d4d2
jmp 0x1000d4a6
push 4
lea ecx, [ebp - 0xe40]
call fcn.1000a8a0
mov dword [ebp - 4], 6
mov dword [ebp - 0x7c], 1
mov dword [ebp - 0x270], 0
jmp 0x1000d552
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 4
jge 0x1000d574
push dword [ebp - 0x270]
lea ecx, [ebp - 0xe40]
call fcn.1000a90d
mov dword [eax], 7
jmp 0x1000d545
mov dword [ebp - 0x7c], 3
jmp 0x1000d584
mov eax, dword [ebp - 0x7c]
dec eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jl 0x1000d6e0
mov dword [ebp - 0x2d8], 0
jmp 0x1000d5a7
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jge 0x1000d5c3
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0xc60], 0x7928fbc7
jmp 0x1000d59a
push 1
lea ecx, [ebp - 0xe40]
call fcn.1000a90d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc60], 0x6efba1a4
jg 0x1000d5ef
mov dword [ebp - 0x5d8], 1
jmp 0x1000d5f6
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc60]
mov dword [ebp - 0xf54], eax
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xf5c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc60]
cmp dword [ebp - 0x7c], eax
je 0x1000d630
mov dword [ebp - 0x5d0], 1
jmp 0x1000d637
and dword [ebp - 0x5d0], 0
push 0
lea ecx, [ebp - 0xe40]
call fcn.1000a90d
mov ecx, dword [ebp - 0x5d0]
cmp ecx, dword [eax]
jl 0x1000d65a
mov dword [ebp - 0xa14], 1
jmp 0x1000d661
and dword [ebp - 0xa14], 0
imul eax, dword [ebp - 0xa14], 0xffffffff
sub eax, 0x61bf
cmp eax, dword [ebp - 0x7c]
je 0x1000d67e
mov dword [ebp - 0xa1c], 1
jmp 0x1000d685
and dword [ebp - 0xa1c], 0
mov eax, dword [ebp - 0x5d8]
cmp eax, dword [ebp - 0xa1c]
jne 0x1000d6b6
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000d6b4
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x1000d6db
mov byte [ebp - 0x140], 0
movzx eax, byte [ebp - 0x140]
test eax, eax
je 0x1000d6d0
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x7c], 0
je 0x1000d6db
jmp 0x1000d57d
jmp 0x1000d57d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe40]
call fcn.1000a908
mov dword [ebp - 0xdc], 0x3629aa8
mov dword [ebp - 0x360], 0x8900fdb6
mov dword [ebp - 0x1a0], 0x33563700
mov dword [ebp - 0xbb8], 0x5ee56e31
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000d731
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xf64], eax
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0xdc], eax
jle 0x1000d757
mov dword [ebp - 0x5e0], 1
jmp 0x1000d75e
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x360]
cmp dword [ebp - 0x5e0], eax
jge 0x1000d778
mov dword [ebp - 0xa24], 1
jmp 0x1000d77f
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x360]
add eax, dword [ebp - 0xa24]
imul eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xdc], eax
jl 0x1000d7a6
mov dword [ebp - 0x5e8], 1
jmp 0x1000d7ad
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xa2d3
jge 0x1000d7c5
mov dword [ebp - 0xa2c], 1
jmp 0x1000d7cc
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xa2c], eax
je 0x1000d7e6
mov dword [ebp - 0x5f0], 1
jmp 0x1000d7ed
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x5f0]
jg 0x1000d807
mov dword [ebp - 0xa34], 1
jmp 0x1000d80e
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xa34], eax
jge 0x1000d828
mov dword [ebp - 0xa3c], 1
jmp 0x1000d82f
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0xa3c], eax
jg 0x1000d849
mov dword [ebp - 0x60c], 1
jmp 0x1000d850
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x60c], eax
jle 0x1000d87c
cmp dword [ebp - 0x1a0], 0
je 0x1000d87c
mov eax, 0xfae
test eax, eax
je 0x1000d87c
mov dword [ebp - 0x9c0], 1
jmp 0x1000d883
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x9c0], eax
je 0x1000d89d
mov dword [ebp - 0x610], 1
jmp 0x1000d8a4
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0x610], eax
jge 0x1000d8be
mov dword [ebp - 0x888], 1
jmp 0x1000d8c5
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x888]
mov dword [ebp - 0xbb8], eax
push 4
lea ecx, [ebp - 0xe4c]
call fcn.1000a8a0
mov dword [ebp - 4], 7
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x278], 0
jmp 0x1000d908
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 4
jge 0x1000d92a
push dword [ebp - 0x278]
lea ecx, [ebp - 0xe4c]
call fcn.1000a90d
mov dword [eax], 7
jmp 0x1000d8fb
mov dword [ebp - 0x84], 3
jmp 0x1000d943
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1000daae
mov dword [ebp - 0x308], 0
jmp 0x1000d969
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 2
jge 0x1000d985
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xc6c], 0x7928fbc7
jmp 0x1000d95c
push 1
lea ecx, [ebp - 0xe4c]
call fcn.1000a90d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc6c], 0x6efba1a4
jg 0x1000d9b1
mov dword [ebp - 0x620], 1
jmp 0x1000d9b8
and dword [ebp - 0x620], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc6c]
mov dword [ebp - 0xf6c], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0xf74], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc6c]
cmp dword [ebp - 0x84], eax
je 0x1000d9f8
mov dword [ebp - 0x618], 1
jmp 0x1000d9ff
and dword [ebp - 0x618], 0
push 0
lea ecx, [ebp - 0xe4c]
call fcn.1000a90d
mov ecx, dword [ebp - 0x618]
cmp ecx, dword [eax]
jl 0x1000da22
mov dword [ebp - 0xa6c], 1
jmp 0x1000da29
and dword [ebp - 0xa6c], 0
imul eax, dword [ebp - 0xa6c], 0xffffffff
sub eax, 0x61bf
cmp eax, dword [ebp - 0x84]
je 0x1000da49
mov dword [ebp - 0x890], 1
jmp 0x1000da50
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x620]
cmp eax, dword [ebp - 0x890]
jne 0x1000da81
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1000da7f
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x1000daa9
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1000da9b
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x84], 0
je 0x1000daa9
jmp 0x1000d936
jmp 0x1000d936
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4c]
call fcn.1000a908
mov dword [ebp - 0x1c0], 0x5683c8fc
mov dword [ebp - 0x158], 0x4ee7d21
mov dword [ebp - 0xe4], 0xfffffffc
mov dword [ebp - 0x1d0], 0xfffd
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0xfffffff6
je 0x1000db06
mov dword [ebp - 0x630], 1
jmp 0x1000db0d
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0xf7c], eax
cmp dword [ebp - 0x1c0], 0
jne 0x1000db32
push 9
pop eax
test eax, eax
jne 0x1000db32
and dword [ebp - 0x628], 0
jmp 0x1000db3c
mov dword [ebp - 0x628], 1
mov eax, dword [ebp - 0x1c0]
sub eax, 0x68e79848
cmp eax, dword [ebp - 0x628]
jl 0x1000db5b
mov dword [ebp - 0x9c8], 1
jmp 0x1000db62
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x1c0]
add eax, dword [ebp - 0x9c8]
cmp dword [ebp - 0x630], eax
jle 0x1000de56
push 3
lea ecx, [ebp - 0xaf4]
call fcn.1000a8a0
mov dword [ebp - 4], 8
mov dword [ebp - 0x1a8], 0xd86bdae8
mov dword [ebp - 0x48], 0
jmp 0x1000dba8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1000dbbe
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xb84], 0xc8b166c1
jmp 0x1000dba1
mov dword [ebp - 0x48], 0
jmp 0x1000dbce
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000dbe7
push dword [ebp - 0x48]
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000dbc7
cmp dword [ebp - 0xe4], 0
jne 0x1000dcb5
mov dword [ebp - 0x158], 0xffffffff
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb84]
cmp dword [ebp - 0x158], eax
jne 0x1000dc31
push 1
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000dc31
mov dword [ebp - 0xcd4], 1
jmp 0x1000dc38
and dword [ebp - 0xcd4], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0xf84], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb84], 0
jg 0x1000dc60
mov dword [ebp - 0xbc0], 1
jmp 0x1000dc67
and dword [ebp - 0xbc0], 0
push 1
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
push 1
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000dc93
push 2
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
mov eax, 0xc1c5
test eax, eax
jne 0x1000dcb5
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb84], 0
jne 0x1000dcb5
and dword [ebp - 0x898], 0
jmp 0x1000dcbf
mov dword [ebp - 0x898], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x898]
sub ecx, dword [ebp + eax - 0xb84]
push 4
pop eax
shl eax, 0
add ecx, dword [ebp + eax - 0xb84]
mov dword [ebp - 0x638], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x638]
mov dword [ebp + eax - 0xb84], ecx
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0xe4], 0
je 0x1000de04
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0x1d0], 0xfad54077
ja 0x1000dd35
mov dword [ebp - 0xad0], 1
jmp 0x1000dd3c
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0xad0]
neg eax
jne 0x1000dd52
mov dword [ebp - 0x640], 1
jmp 0x1000dd59
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x1a8]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb84]
add ecx, dword [ebp - 0x640]
imul eax, ecx
cmp eax, dword [ebp - 0x158]
je 0x1000dd8e
cmp dword [ebp - 0x1d0], 0
jne 0x1000dd8e
and dword [ebp - 0x8a0], 0
jmp 0x1000dd98
mov dword [ebp - 0x8a0], 1
mov eax, dword [ebp - 0x8a0]
sub eax, dword [ebp - 0x1a8]
je 0x1000ddc1
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb84], 0
je 0x1000ddc1
mov dword [ebp - 0x648], 1
jmp 0x1000ddc8
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xffffffff
jbe 0x1000dddd
mov dword [ebp - 0xdec], 1
jmp 0x1000dde4
and dword [ebp - 0xdec], 0
push 1
lea ecx, [ebp - 0xaf4]
call fcn.1000a90d
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1000de04
mov dword [ebp - 0x9d0], 1
jmp 0x1000de0b
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x1a8]
sub eax, dword [ebp - 0x9d0]
cmp eax, 0x1fc5
jge 0x1000de2a
mov dword [ebp - 0x650], 1
jmp 0x1000de31
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
sub eax, 0xac01
mov dword [ebp - 0x1a8], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.1000a908
jmp 0x1000e067
push 1
lea ecx, [ebp - 0xd60]
call fcn.1000a8a0
mov dword [ebp - 4], 9
mov dword [ebp - 0x288], 0
jmp 0x1000de83
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x1000dea5
push dword [ebp - 0x288]
lea ecx, [ebp - 0xd60]
call fcn.1000a90d
mov dword [eax], 0x8e20e6e8
jmp 0x1000de76
mov dword [ebp - 0xe4], 0
jmp 0x1000debe
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0xfffffffc
jg 0x1000e01e
mov dword [ebp - 0x17c], 7
mov dword [ebp - 0xcdc], 9
mov dword [ebp - 0x2e0], 0
jmp 0x1000def8
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x1000df14
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x1144], 0x1f6e690d
jmp 0x1000deeb
cmp dword [ebp - 0x17c], 0
jne 0x1000dfb2
cmp dword [ebp - 0x1d0], 0
jne 0x1000df3c
cmp dword [ebp - 0x17c], 0
jne 0x1000df3c
and dword [ebp - 0xbc8], 0
jmp 0x1000df46
mov dword [ebp - 0xbc8], 1
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xf94], eax
push 0
lea ecx, [ebp - 0xd60]
call fcn.1000a90d
push 0
lea ecx, [ebp - 0xd60]
call fcn.1000a90d
mov eax, dword [eax]
mov dword [ebp - 0xcdc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1144]
cmp dword [ebp - 0x1d0], eax
jg 0x1000df94
mov dword [ebp - 0x8a8], 1
jmp 0x1000df9b
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x8a8]
jg 0x1000dfb2
and dword [ebp - 0x658], 0
jmp 0x1000dfbc
mov dword [ebp - 0x658], 1
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x658], eax
je 0x1000dfd6
mov dword [ebp - 0xa74], 1
jmp 0x1000dfdd
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x17c]
imul eax, dword [ebp - 0xa74]
cmp eax, 0x9700a5ff
ja 0x1000dffd
mov dword [ebp - 0x660], 1
jmp 0x1000e004
and dword [ebp - 0x660], 0
push 0
lea ecx, [ebp - 0xd60]
call fcn.1000a90d
mov ecx, dword [ebp - 0x660]
mov dword [eax], ecx
jmp 0x1000deb1
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000e058
push 0x17b0
push 0x168c
push 0x1400
push 0x19f5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd60]
call fcn.1000a908
mov dword [ebp - 0xec], 0x3629aa8
mov dword [ebp - 0x3b8], 0x8900fdb6
mov dword [ebp - 0x184], 0x33563700
mov dword [ebp - 0xbd0], 0x5ee56e31
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1000e0a9
push 0
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xf9c], eax
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0xec], eax
jle 0x1000e0cf
mov dword [ebp - 0x8b0], 1
jmp 0x1000e0d6
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x8b0], eax
jge 0x1000e0f0
mov dword [ebp - 0x668], 1
jmp 0x1000e0f7
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x3b8]
add eax, dword [ebp - 0x668]
imul eax, dword [ebp - 0x184]
cmp dword [ebp - 0xec], eax
jl 0x1000e11e
mov dword [ebp - 0x9d8], 1
jmp 0x1000e125
and dword [ebp - 0x9d8], 0
cmp dword [ebp - 0x9d8], 0xa2d3
jge 0x1000e13d
mov dword [ebp - 0x670], 1
jmp 0x1000e144
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x670], eax
je 0x1000e15e
mov dword [ebp - 0x8b8], 1
jmp 0x1000e165
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0x8b8]
jg 0x1000e17f
mov dword [ebp - 0x678], 1
jmp 0x1000e186
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x678], eax
jge 0x1000e1a0
mov dword [ebp - 0xab4], 1
jmp 0x1000e1a7
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0xab4], eax
jg 0x1000e1c1
mov dword [ebp - 0x680], 1
jmp 0x1000e1c8
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x680], eax
jle 0x1000e1f4
cmp dword [ebp - 0x184], 0
je 0x1000e1f4
mov eax, 0xfae
test eax, eax
je 0x1000e1f4
mov dword [ebp - 0x8c0], 1
jmp 0x1000e1fb
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x8c0], eax
je 0x1000e215
mov dword [ebp - 0x688], 1
jmp 0x1000e21c
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x184]
cmp dword [ebp - 0x688], eax
jge 0x1000e236
mov dword [ebp - 0x9e0], 1
jmp 0x1000e23d
and dword [ebp - 0x9e0], 0
mov eax, dword [ebp - 0x9e0]
mov dword [ebp - 0xbd0], eax
push 4
lea ecx, [ebp - 0xe58]
call fcn.1000a8a0
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x8c], 1
mov dword [ebp - 0x290], 0
jmp 0x1000e280
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 4
jge 0x1000e2a2
push dword [ebp - 0x290]
lea ecx, [ebp - 0xe58]
call fcn.1000a90d
mov dword [eax], 7
jmp 0x1000e273
mov dword [ebp - 0x8c], 3
jmp 0x1000e2bb
mov eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jl 0x1000e426
mov dword [ebp - 0x320], 0
jmp 0x1000e2e1
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 2
jge 0x1000e2fd
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0xc78], 0x7928fbc7
jmp 0x1000e2d4
push 1
lea ecx, [ebp - 0xe58]
call fcn.1000a90d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc78], 0x6efba1a4
jg 0x1000e329
mov dword [ebp - 0x698], 1
jmp 0x1000e330
and dword [ebp - 0x698], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc78]
mov dword [ebp - 0xfa4], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xfac], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc78]
cmp dword [ebp - 0x8c], eax
je 0x1000e370
mov dword [ebp - 0x690], 1
jmp 0x1000e377
and dword [ebp - 0x690], 0
push 0
lea ecx, [ebp - 0xe58]
call fcn.1000a90d
mov ecx, dword [ebp - 0x690]
cmp ecx, dword [eax]
jl 0x1000e39a
mov dword [ebp - 0x8c8], 1
jmp 0x1000e3a1
and dword [ebp - 0x8c8], 0
imul eax, dword [ebp - 0x8c8], 0xffffffff
sub eax, 0x61bf
cmp eax, dword [ebp - 0x8c]
je 0x1000e3c1
mov dword [ebp - 0xa7c], 1
jmp 0x1000e3c8
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x698]
cmp eax, dword [ebp - 0xa7c]
jne 0x1000e3f9
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000e3f7
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x1000e421
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000e413
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp dword [ebp - 0x8c], 0
je 0x1000e421
jmp 0x1000e2ae
jmp 0x1000e2ae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe58]
call fcn.1000a908
mov dword [ebp - 0x18c], 0x7dfa860b
mov dword [ebp - 0x298], 0
jmp 0x1000e458
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x1000e474
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xd64], 0
jmp 0x1000e44b
mov dword [ebp - 0x18c], 0
jmp 0x1000e48d
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 1
jge 0x1000e4a9
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0xd64], 0xfffffff9
jmp 0x1000e480
mov byte [ebp - 0x13e], 0
movzx eax, byte [ebp - 0x13e]
test eax, eax
je 0x1000e4d9
push 0x141
push 0xac6
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
movzx eax, byte [0x1066eac4]
test eax, eax
je 0x1000e4f7
mov esi, 0x100835b0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x100130cb
mov dword [ebp - 0x194], 0x5683c8fc
mov dword [ebp - 0x164], 0x4ee7d21
mov dword [ebp - 0xf4], 0xfffffffc
mov dword [ebp - 0x1a4], 0xfffd
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0xfffffff6
je 0x1000e540
mov dword [ebp - 0x6a8], 1
jmp 0x1000e547
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xfb4], eax
cmp dword [ebp - 0x194], 0
jne 0x1000e56c
push 9
pop eax
test eax, eax
jne 0x1000e56c
and dword [ebp - 0x6a0], 0
jmp 0x1000e576
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x194]
sub eax, 0x68e79848
cmp eax, dword [ebp - 0x6a0]
jl 0x1000e595
mov dword [ebp - 0x8d0], 1
jmp 0x1000e59c
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x194]
add eax, dword [ebp - 0x8d0]
cmp dword [ebp - 0x6a8], eax
jle 0x1000e890
push 3
lea ecx, [ebp - 0xb24]
call fcn.1000a8a0
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x19c], 0xd86bdae8
mov dword [ebp - 0x4c], 0
jmp 0x1000e5e2
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1000e5f8
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xb94], 0xc8b166c1
jmp 0x1000e5db
mov dword [ebp - 0x4c], 0
jmp 0x1000e608
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1000e621
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
and dword [eax], 0
jmp 0x1000e601
cmp dword [ebp - 0xf4], 0
jne 0x1000e6ef
mov dword [ebp - 0x164], 0xffffffff
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb94]
cmp dword [ebp - 0x164], eax
jne 0x1000e66b
push 1
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000e66b
mov dword [ebp - 0xbd8], 1
jmp 0x1000e672
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0xfbc], eax
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb94], 0
jg 0x1000e69a
mov dword [ebp - 0xce4], 1
jmp 0x1000e6a1
and dword [ebp - 0xce4], 0
push 1
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
push 1
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
cmp dword [eax], 0
je 0x1000e6cd
push 2
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
mov eax, 0xc1c5
test eax, eax
jne 0x1000e6ef
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xb94], 0
jne 0x1000e6ef
and dword [ebp - 0x9e8], 0
jmp 0x1000e6f9
mov dword [ebp - 0x9e8], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x9e8]
sub ecx, dword [ebp + eax - 0xb94]
push 4
pop eax
shl eax, 0
add ecx, dword [ebp + eax - 0xb94]
mov dword [ebp - 0x6b0], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6b0]
mov dword [ebp + eax - 0xb94], ecx
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0xf4], 0
je 0x1000e83e
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xfc4], eax
cmp dword [ebp - 0x1a4], 0xfad54077
ja 0x1000e76f
mov dword [ebp - 0x8d8], 1
jmp 0x1000e776
and dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x8d8]
neg eax
jne 0x1000e78c
mov dword [ebp - 0x6b8], 1
jmp 0x1000e793
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x19c]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb94]
add ecx, dword [ebp - 0x6b8]
imul eax, ecx
cmp eax, dword [ebp - 0x164]
je 0x1000e7c8
cmp dword [ebp - 0x1a4], 0
jne 0x1000e7c8
and dword [ebp - 0xac8], 0
jmp 0x1000e7d2
mov dword [ebp - 0xac8], 1
mov eax, dword [ebp - 0xac8]
sub eax, dword [ebp - 0x19c]
je 0x1000e7fb
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb94], 0
je 0x1000e7fb
mov dword [ebp - 0x6c0], 1
jmp 0x1000e802
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 0xffffffff
jbe 0x1000e817
mov dword [ebp - 0xbe0], 1
jmp 0x1000e81e
and dword [ebp - 0xbe0], 0
push 1
lea ecx, [ebp - 0xb24]
call fcn.1000a90d
push 0xfffffffffffffffb
pop eax
test eax, eax
je 0x1000e83e
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x8e0]
cmp eax, 0x1fc5
jge 0x1000e864
mov dword [ebp - 0x6c8], 1
jmp 0x1000e86b
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
sub eax, 0xac01
mov dword [ebp - 0x19c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb24]
call fcn.1000a908
jmp 0x1000eaa1
push 1
lea ecx, [ebp - 0xd70]
call fcn.1000a8a0
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2e8], 0
jmp 0x1000e8bd
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 1
jge 0x1000e8df
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0xd70]
call fcn.1000a90d
mov dword [eax], 0x8e20e6e8
jmp 0x1000e8b0
mov dword [ebp - 0xf4], 0
jmp 0x1000e8f8
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xfffffffc
jg 0x1000ea58
mov dword [ebp - 0x1ac], 7
mov dword [ebp - 0xbe8], 9
mov dword [ebp - 0x2a0], 0
jmp 0x1000e932
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 3
jge 0x1000e94e
mov eax, dword [ebp - 0x2a0]
mov dword [ebp + eax*4 - 0x1138], 0x1f6e690d
jmp 0x1000e925
cmp dword [ebp - 0x1ac], 0
jne 0x1000e9ec
cmp dword [ebp - 0x1a4], 0
jne 0x1000e976
cmp dword [ebp - 0x1ac], 0
jne 0x1000e976
and dword [ebp - 0xdd4], 0
jmp 0x1000e980
mov dword [ebp - 0xdd4], 1
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xfcc], eax
push 0
lea ecx, [ebp - 0xd70]
call fcn.1000a90d
push 0
lea ecx, [ebp - 0xd70]
call fcn.1000a90d
mov eax, dword [eax]
mov dword [ebp - 0xbe8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1138]
cmp dword [ebp - 0x1a4], eax
jg 0x1000e9ce
mov dword [ebp - 0x9f0], 1
jmp 0x1000e9d5
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x1ac]
cmp eax, dword [ebp - 0x9f0]
jg 0x1000e9ec
and dword [ebp - 0x6d0], 0
jmp 0x1000e9f6
mov dword [ebp - 0x6d0], 1
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x6d0], eax
je 0x1000ea10
mov dword [ebp - 0x8e8], 1
jmp 0x1000ea17
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x1ac]
imul eax, dword [ebp - 0x8e8]
cmp eax, 0x9700a5ff
ja 0x1000ea37
mov dword [ebp - 0x6d8], 1
jmp 0x1000ea3e
and dword [ebp - 0x6d8], 0
push 0
lea ecx, [ebp - 0xd70]
call fcn.1000a90d
mov ecx, dword [ebp - 0x6d8]
mov dword [eax], ecx
jmp 0x1000e8eb
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000ea92
push 0x17b0
push 0x168c
push 0x1400
push 0x19f5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Rectangle]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd70]
call fcn.1000a908
mov dword [ebp - 0x94], 3
mov dword [ebp - 0x6e8], 0xfd9d
mov dword [ebp - 0xcec], 0xbd5de1fc
mov dword [ebp - 0xabc], 0x7ad53a38
mov dword [ebp - 0x700], 0xf7d96711
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0xd74], 0xffffffff
mov dword [ebp - 0xf1c], 0xfffffffc
mov dword [ebp - 0xf18], 0xfffffffc
mov dword [ebp - 0xf14], 0xfffffffc
mov dword [ebp - 0xf10], 0xfffffffc
mov dword [ebp - 0xbf8], 0
mov dword [ebp - 0xfd8], 3
mov dword [ebp - 0xa00], 0x63523e24
mov dword [ebp - 0x1fc], 0
jmp 0x1000eb46
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x1000eb62
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x1004], 7
jmp 0x1000eb39
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0xff4], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
je 0x1000eb94
mov dword [ebp - 0xa84], 1
jmp 0x1000eb9b
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
sub eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x6e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x6e0]
mov dword [ebp + eax - 0x1004], ecx
mov eax, dword [ebp - 0x6e0]
inc eax
jne 0x1000ebe1
cmp dword [ebp - 0xcec], 0
jne 0x1000ebe1
and dword [ebp - 0x8f0], 0
jmp 0x1000ebeb
mov dword [ebp - 0x8f0], 1
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x8f0]
jle 0x1000ec05
mov dword [ebp - 0x9f8], 1
jmp 0x1000ec0c
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x6e8]
cmp dword [ebp - 0x9f8], eax
jle 0x1000ec26
mov dword [ebp - 0x6f0], 1
jmp 0x1000ec2d
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0
jae 0x1000ec42
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret