Function at 0x10008fe5
Capabilities:
Accept command line arguments
Get thread local storage value
Query environment variable

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100846f2
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1498
call fcn.1006fb40
push esi
push edi
mov dword [ebp - 0x84], 0xecb45710
mov dword [ebp - 0xc5c], 0x69b2e414
mov dword [ebp - 0xc08], 0
and dword [ebp - 0x1010], 0
and dword [ebp - 0x100c], 0
and dword [ebp - 0x1008], 0
and dword [ebp - 0x1004], 0
lea ecx, [ebp - 0x451]
call fcn.10008e33
push eax
lea eax, [ebp - 0x1000]
push eax
lea eax, [ebp - 0x1010]
push eax
lea ecx, [ebp - 0x142c]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1268]
call fcn.10018280
and dword [ebp - 4], 0
mov dword [ebp - 0x428], 0x540fff06
mov dword [ebp - 0x1fc], 0
jmp 0x1000909f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 3
jge 0x100090bb
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xe5c], 0x41b3c692
jmp 0x10009092
mov dword [ebp - 0x84], 2
jmp 0x100090d4
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x10009333
mov dword [ebp - 0x478], 0
mov dword [ebp - 0xce8], 0
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000910d
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0xe5c]
mov dword [ebp - 0x124c], eax
cmp dword [ebp - 0x84], 0
je 0x10009227
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe5c], 0x7e434392
jl 0x1000914b
mov dword [ebp - 0x8cc], 1
jmp 0x10009152
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x84]
mov eax, dword [ebp + eax*4 - 0xe5c]
cmp dword [ebp - 0x8cc], eax
je 0x10009173
mov dword [ebp - 0xc00], 1
jmp 0x1000917a
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0xc00]
mov dword [ebp - 0xc08], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xc08]
add ecx, dword [ebp + eax - 0xe5c]
mov dword [ebp - 0xc10], ecx
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0xc10]
mov dword [ebp + eax*4 - 0xe5c], ecx
cmp dword [ebp - 0xc10], 0x5206
jg 0x100091c9
mov dword [ebp - 0xc18], 1
jmp 0x100091d0
and dword [ebp - 0xc18], 0
cmp dword [ebp - 0xc18], 0
jbe 0x100091e5
mov dword [ebp - 0xc20], 1
jmp 0x100091ec
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0xc20], eax
jge 0x10009206
mov dword [ebp - 0xc28], 1
jmp 0x1000920d
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0xc5c]
cmp eax, dword [ebp - 0xc28]
jge 0x10009227
mov dword [ebp - 0xc30], 1
jmp 0x1000922e
and dword [ebp - 0xc30], 0
imul eax, dword [ebp - 0xc30], 0xffffffff
sub eax, dword [ebp - 0x478]
jne 0x10009249
mov dword [ebp - 0x3b0], 1
jmp 0x10009250
and dword [ebp - 0x3b0], 0
push 1
lea ecx, [ebp - 0x1268]
call fcn.100182ab
mov ecx, dword [ebp - 0x3b0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x478]
cmp dword [ebp - 0x3b0], eax
jne 0x1000927f
mov dword [ebp - 0xc44], 1
jmp 0x10009286
and dword [ebp - 0xc44], 0
cmp dword [ebp - 0xc44], 0x1d534a2c
jle 0x1000929e
mov dword [ebp - 0xc4c], 1
jmp 0x100092a5
and dword [ebp - 0xc4c], 0
cmp dword [ebp - 0xc4c], 9
jae 0x100092ba
mov dword [ebp - 0xc54], 1
jmp 0x100092c1
and dword [ebp - 0xc54], 0
mov eax, dword [ebp - 0xc54]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0xce8]
cmp dword [ebp - 0x428], eax
jle 0x100092e7
mov dword [ebp - 0xc64], 1
jmp 0x100092ee
and dword [ebp - 0xc64], 0
mov eax, dword [ebp - 0xc5c]
cmp dword [ebp - 0xc64], eax
jl 0x10009314
mov dword [ebp - 0xd48], 8
mov eax, dword [ebp - 0xd48]
mov dword [ebp - 0x428], eax
jmp 0x1000932e
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x1000932e
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x100090c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1268]
call fcn.100182a6
mov dword [ebp - 0x90], 0xecb45710
mov dword [ebp - 0x508], 0x69b2e414
mov dword [ebp - 0x9e8], 0
and dword [ebp - 0xfd4], 0
and dword [ebp - 0xfd0], 0
and dword [ebp - 0xfcc], 0
and dword [ebp - 0xfc8], 0
lea ecx, [ebp - 0x461]
call fcn.10008e33
push eax
lea eax, [ebp - 0xfc4]
push eax
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0x13f4]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1278]
call fcn.10018280
mov dword [ebp - 4], 1
mov dword [ebp - 0x3c0], 0x540fff06
mov dword [ebp - 0x2b8], 0
jmp 0x100093db
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 3
jge 0x100093f7
mov eax, dword [ebp - 0x2b8]
mov dword [ebp + eax*4 - 0xe6c], 0x41b3c692
jmp 0x100093ce
mov dword [ebp - 0x90], 2
jmp 0x10009410
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jl 0x1000966f
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0xd50], 0
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x10009449
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0xe6c]
mov dword [ebp - 0x1204], eax
cmp dword [ebp - 0x90], 0
je 0x10009563
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe6c], 0x7e434392
jl 0x10009487
mov dword [ebp - 0xc6c], 1
jmp 0x1000948e
and dword [ebp - 0xc6c], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0xe6c]
cmp dword [ebp - 0xc6c], eax
je 0x100094af
mov dword [ebp - 0x4e0], 1
jmp 0x100094b6
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x9e8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9e8]
add ecx, dword [ebp + eax - 0xe6c]
mov dword [ebp - 0x4e8], ecx
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax*4 - 0xe6c], ecx
cmp dword [ebp - 0x4e8], 0x5206
jg 0x10009505
mov dword [ebp - 0x9f0], 1
jmp 0x1000950c
and dword [ebp - 0x9f0], 0
cmp dword [ebp - 0x9f0], 0
jbe 0x10009521
mov dword [ebp - 0x4f0], 1
jmp 0x10009528
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x4f0], eax
jge 0x10009542
mov dword [ebp - 0x9f8], 1
jmp 0x10009549
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0x9f8]
jge 0x10009563
mov dword [ebp - 0x4f8], 1
jmp 0x1000956a
and dword [ebp - 0x4f8], 0
imul eax, dword [ebp - 0x4f8], 0xffffffff
sub eax, dword [ebp - 0x3b8]
jne 0x10009585
mov dword [ebp - 0x468], 1
jmp 0x1000958c
and dword [ebp - 0x468], 0
push 1
lea ecx, [ebp - 0x1278]
call fcn.100182ab
mov ecx, dword [ebp - 0x468]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3b8]
cmp dword [ebp - 0x468], eax
jne 0x100095bb
mov dword [ebp - 0xa00], 1
jmp 0x100095c2
and dword [ebp - 0xa00], 0
cmp dword [ebp - 0xa00], 0x1d534a2c
jle 0x100095da
mov dword [ebp - 0x500], 1
jmp 0x100095e1
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 9
jae 0x100095f6
mov dword [ebp - 0xa08], 1
jmp 0x100095fd
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0xa08]
mov dword [ebp - 0x3c0], eax
mov eax, dword [ebp - 0xd50]
cmp dword [ebp - 0x3c0], eax
jle 0x10009623
mov dword [ebp - 0xa10], 1
jmp 0x1000962a
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0xa10], eax
jl 0x10009650
mov dword [ebp - 0xdbc], 8
mov eax, dword [ebp - 0xdbc]
mov dword [ebp - 0x3c0], eax
jmp 0x1000966a
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x1000966a
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x10009403
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1278]
call fcn.100182a6
mov dword [ebp - 0x40], 0
mov dword [ebp - 0xc0], 8
mov dword [ebp - 0x134], 0x213072c0
mov dword [ebp - 0x430], 0x9eb818f8
cmp dword [ebp - 0x40], 0
jl 0x100096b5
mov dword [ebp - 0x510], 1
jmp 0x100096bc
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 7
ja 0x100096dd
mov dword [ebp - 0xdc4], 1
jmp 0x100096e4
and dword [ebp - 0xdc4], 0
mov eax, 0xc0198ab7
test eax, eax
jne 0x100096ff
cmp dword [ebp - 0x134], 0
jne 0x100096ff
and dword [ebp - 0xa18], 0
jmp 0x10009709
mov dword [ebp - 0xa18], 1
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0xa18], eax
jge 0x10009720
mov dword [ebp - 0x518], 1
jmp 0x10009727
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x518]
cmp eax, 9
je 0x10009741
mov dword [ebp - 0xdcc], 1
jmp 0x10009748
and dword [ebp - 0xdcc], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x131c], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xc0], eax
jge 0x1000976e
mov dword [ebp - 0xa20], 1
jmp 0x10009775
and dword [ebp - 0xa20], 0
cmp dword [ebp - 0xa20], 0x2377d64
je 0x1000978d
mov dword [ebp - 0x520], 1
jmp 0x10009794
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x134], eax
imul eax, dword [ebp - 0x134], 0
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x40], eax
jge 0x10009a1f
cmp dword [ebp - 0x40], 0
je 0x10009a1f
mov dword [ebp - 0x208], 9
mov dword [ebp - 0x2c0], 0xfffffffd
mov dword [ebp - 0x40], 0xc
jmp 0x100097e7
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffe2
jg 0x100098d7
mov dword [ebp - 0x200], 0xecaa7054
mov dword [ebp - 0xdd4], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x430], eax
jg 0x1000981f
mov dword [ebp - 0xa28], 1
jmp 0x10009826
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x200]
add eax, 7
cmp dword [ebp - 0xa28], eax
jle 0x10009843
mov dword [ebp - 0x528], 1
jmp 0x1000984a
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x200]
cmp dword [ebp - 0x528], eax
je 0x10009864
mov dword [ebp - 0xa30], 1
jmp 0x1000986b
and dword [ebp - 0xa30], 0
mov eax, dword [ebp - 0xa30]
mov dword [ebp - 0x2c0], eax
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x120c], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x208]
cmp dword [ebp - 0x208], eax
jne 0x100098a0
mov dword [ebp - 0x530], 1
jmp 0x100098a7
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0x25452e2c
jle 0x100098bf
mov dword [ebp - 0xa38], 1
jmp 0x100098c6
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xa38]
mov dword [ebp - 0xdd4], eax
jmp 0x100097e0
mov dword [ebp - 0xc0], 0xfffffffe
jmp 0x100098f0
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x1d
jge 0x10009a1d
push 2
lea ecx, [ebp - 0xe7c]
call fcn.10018221
mov dword [ebp - 4], 2
mov dword [ebp - 0x318], 0
jmp 0x1000992a
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jge 0x1000994c
push dword [ebp - 0x318]
lea ecx, [ebp - 0xe7c]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
jmp 0x1000991d
push 1
lea ecx, [ebp - 0xe7c]
call fcn.100182ab
cmp dword [eax], 0
jge 0x100099d2
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x13b0], eax
push 1
lea ecx, [ebp - 0xe7c]
call fcn.100182ab
cmp dword [ebp - 0x208], 0xffffffff
je 0x1000998c
mov dword [ebp - 0x538], 1
jmp 0x10009993
and dword [ebp - 0x538], 0
cmp dword [ebp - 0x538], 0
je 0x100099b1
cmp dword [ebp - 0x2c0], 0
je 0x100099b1
mov dword [ebp - 0xa40], 1
jmp 0x100099b8
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0xa40], eax
jg 0x100099d2
mov dword [ebp - 0x540], 1
jmp 0x100099d9
and dword [ebp - 0x540], 0
push 1
lea ecx, [ebp - 0xe7c]
call fcn.100182ab
mov ecx, dword [ebp - 0x540]
sub ecx, dword [eax]
mov dword [ebp - 0x2c0], ecx
mov eax, dword [ebp - 0x2c0]
mov dword [ebp - 0x1214], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x40], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe7c]
call fcn.100182a6
jmp 0x100098e3
jmp 0x10009a94
mov dword [ebp - 0x1e4], 1
mov dword [ebp - 0x210], 0
jmp 0x10009a42
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x10009a5e
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x1288], 0x33d7bf5f
jmp 0x10009a35
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0x1e4], eax
jle 0x10009a81
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp + eax - 0x1288], ecx
jmp 0x10009a94
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp + eax - 0x1288], ecx
push 2
lea ecx, [ebp - 0xe8c]
call fcn.10018221
mov dword [ebp - 4], 3
mov dword [ebp - 0x348], 0
jmp 0x10009ac1
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 2
jge 0x10009ae3
push dword [ebp - 0x348]
lea ecx, [ebp - 0xe8c]
call fcn.100182ab
mov dword [eax], 0xfffffffd
jmp 0x10009ab4
push 0
lea ecx, [ebp - 0xe8c]
call fcn.100182ab
mov dword [eax], 0x1c
jmp 0x10009b1c
push 0
lea ecx, [ebp - 0xe8c]
call fcn.100182ab
mov dword [ebp - 0xa48], eax
mov eax, dword [ebp - 0xa48]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa48]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe8c]
call fcn.100182ab
cmp dword [eax], 0xffffffe7
jg 0x10009b4d
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x10009b4b
push 0x19ff
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
jmp 0x10009af8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8c]
call fcn.100182a6
mov dword [ebp - 0x184], 0x7928fbc7
mov dword [ebp - 0xaa0], 9
mov dword [ebp - 0x3d0], 0x4bb489f7
mov dword [ebp - 0x1390], 7
mov dword [ebp - 0xa78], 0xffffffff
mov dword [ebp - 0x218], 0
jmp 0x10009ba7
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x10009bc3
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x4c8], 0xe1757117
jmp 0x10009b9a
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x4c8], 0xffffffe7
jmp 0x10009bee
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x4c8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x4c8], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x4c8], 0x19
jle 0x1000a0db
mov dword [ebp - 0xb0], 0xfffffff7
mov dword [ebp - 0x438], 3
mov dword [ebp - 0x474], 0xc37fc054
mov dword [ebp - 0xdec], 1
mov dword [ebp - 0xa88], 0xfffffffb
mov dword [ebp - 0x2c8], 0
jmp 0x10009c4c
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 2
jge 0x10009c68
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0xcb8], 0xffffffff
jmp 0x10009c3f
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x184], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c8]
cmp dword [ebp - 0x184], eax
jg 0x10009c95
mov dword [ebp - 0xddc], 1
jmp 0x10009c9c
and dword [ebp - 0xddc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x4c8]
mov dword [ebp - 0x1234], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4c8]
cmp dword [ebp - 0xb0], eax
jl 0x10009cd0
mov dword [ebp - 0x548], 1
jmp 0x10009cd7
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 0x91208373
ja 0x10009cef
mov dword [ebp - 0xa50], 1
jmp 0x10009cf6
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0xa50]
mov dword [ebp - 0x438], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x1340], eax
cmp dword [ebp - 0xb0], 0x9a2b
jl 0x10009d26
mov dword [ebp - 0x550], 1
jmp 0x10009d2d
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
sub eax, dword [ebp - 0xb0]
je 0x10009f6f
mov dword [ebp - 0x123c], 0xfffffff7
mov dword [ebp - 0x3c8], 9
mov dword [ebp - 0x13d0], 0xa7bc6c89
mov dword [ebp - 0xdf4], 0x8927
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xcb8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xcb8], eax
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xa78], eax
jle 0x10009d9c
mov dword [ebp - 0xa58], 1
jmp 0x10009da3
and dword [ebp - 0xa58], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcb8], 0xffffffff
jg 0x10009dbf
mov dword [ebp - 0xde4], 1
jmp 0x10009dc6
and dword [ebp - 0xde4], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x474], eax
jge 0x10009de0
mov dword [ebp - 0x558], 1
jmp 0x10009de7
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0xa58]
add eax, dword [ebp - 0x558]
je 0x10009e06
xor eax, eax
inc eax
je 0x10009e06
mov dword [ebp - 0xa60], 1
jmp 0x10009e0d
and dword [ebp - 0xa60], 0
cmp dword [ebp - 0xa60], 0xfffffffd
ja 0x10009e22
mov dword [ebp - 0x560], 1
jmp 0x10009e29
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0x560], eax
jl 0x10009e43
mov dword [ebp - 0xa68], 1
jmp 0x10009e4a
and dword [ebp - 0xa68], 0
mov eax, dword [ebp - 0x474]
cmp dword [ebp - 0xa68], eax
jl 0x10009e64
mov dword [ebp - 0x568], 1
jmp 0x10009e6b
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x3d0], eax
cmp dword [ebp - 0x3d0], 0
jne 0x10009e99
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x4c8], 0
jne 0x10009e99
and dword [ebp - 0xa70], 0
jmp 0x10009ea3
mov dword [ebp - 0xa70], 1
cmp dword [ebp - 0xa70], 0
jne 0x10009ebe
mov eax, 0xa3d
test eax, eax
jne 0x10009ebe
and dword [ebp - 0x570], 0
jmp 0x10009ec8
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xdec], eax
cmp dword [ebp - 0xa78], 0
jne 0x10009ef6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcb8], 0
jne 0x10009ef6
and dword [ebp - 0x578], 0
jmp 0x10009f00
mov dword [ebp - 0x578], 1
mov eax, dword [ebp - 0xdf4]
cmp dword [ebp - 0x578], eax
jge 0x10009f1a
mov dword [ebp - 0xa80], 1
jmp 0x10009f21
and dword [ebp - 0xa80], 0
cmp dword [ebp - 0xa80], 0xffffffff
je 0x10009f36
mov dword [ebp - 0x580], 1
jmp 0x10009f3d
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x3c8]
cmp dword [ebp - 0x580], eax
jle 0x10009f57
mov dword [ebp - 0xdfc], 1
jmp 0x10009f5e
and dword [ebp - 0xdfc], 0
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0x3c8], eax
jmp 0x1000a0d6
mov dword [ebp - 0xe04], 1
mov dword [ebp - 0xe0c], 0x7ce2
mov dword [ebp - 0xe1c], 1
mov eax, dword [ebp - 0xa88]
cmp dword [ebp - 0xe04], eax
jne 0x10009fa7
mov dword [ebp - 0x588], 1
jmp 0x10009fae
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0
jg 0x10009fc3
mov dword [ebp - 0x590], 1
jmp 0x10009fca
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x184]
imul eax, dword [ebp - 0x474]
test eax, eax
je 0x10009ff0
cmp dword [ebp - 0x3d0], 0
je 0x10009ff0
mov dword [ebp - 0xa90], 1
jmp 0x10009ff7
and dword [ebp - 0xa90], 0
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0xa90]
cmp eax, dword [ebp - 0xb0]
je 0x1000a017
mov dword [ebp - 0xa98], 1
jmp 0x1000a01e
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x590]
add eax, dword [ebp - 0xa98]
cmp eax, 0xfff6
jne 0x1000a03d
mov dword [ebp - 0x598], 1
jmp 0x1000a044
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0xaa0], eax
mov eax, dword [ebp - 0xaa0]
add eax, dword [ebp - 0xe0c]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x4c8]
jge 0x1000a077
mov dword [ebp - 0xe14], 1
jmp 0x1000a07e
and dword [ebp - 0xe14], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x1244], eax
cmp dword [ebp - 0x184], 0xffff
je 0x1000a0a2
mov dword [ebp - 0x5a0], 1
jmp 0x1000a0a9
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0xe1c]
cmp dword [ebp - 0x5a0], eax
jne 0x1000a0c3
mov dword [ebp - 0xaa8], 1
jmp 0x1000a0ca
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0xaa8]
mov dword [ebp - 0xb0], eax
jmp 0x10009bd5
mov dword [ebp - 0x98], 0xecb45710
mov dword [ebp - 0x1350], 0x64a6
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x1000a11a
push 0x1881
push 0xa5e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
call dword [sym.imp.USER32.dll_GetMessageA]
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000a132
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov dword [ebp - 0xad8], 0x69b2e414
mov dword [ebp - 0x5b0], 0
and dword [ebp - 0xfe8], 0
and dword [ebp - 0xfe4], 0
and dword [ebp - 0xfe0], 0
and dword [ebp - 0xfdc], 0
lea ecx, [ebp - 0x399]
call fcn.10008e33
push eax
lea eax, [ebp - 0xfd8]
push eax
lea eax, [ebp - 0xfe8]
push eax
lea ecx, [ebp - 0x143c]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1298]
call fcn.10018280
mov dword [ebp - 4], 4
mov dword [ebp - 0x3e0], 0x540fff06
mov dword [ebp - 0x220], 0
jmp 0x1000a1c1
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x1000a1dd
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0xe9c], 0x41b3c692
jmp 0x1000a1b4
mov dword [ebp - 0x98], 2
jmp 0x1000a1f6
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1000a455
mov dword [ebp - 0x3d8], 0
mov dword [ebp - 0xe24], 0
mov byte [ebp - 0x124], 0
movzx eax, byte [ebp - 0x124]
test eax, eax
je 0x1000a22f
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0xe9c]
mov dword [ebp - 0x1120], eax
cmp dword [ebp - 0x98], 0
je 0x1000a349
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xe9c], 0x7e434392
jl 0x1000a26d
mov dword [ebp - 0x5a8], 1
jmp 0x1000a274
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0xe9c]
cmp dword [ebp - 0x5a8], eax
je 0x1000a295
mov dword [ebp - 0xab0], 1
jmp 0x1000a29c
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xab0]
mov dword [ebp - 0x5b0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x5b0]
add ecx, dword [ebp + eax - 0xe9c]
mov dword [ebp - 0xab8], ecx
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0xab8]
mov dword [ebp + eax*4 - 0xe9c], ecx
cmp dword [ebp - 0xab8], 0x5206
jg 0x1000a2eb
mov dword [ebp - 0x5b8], 1
jmp 0x1000a2f2
and dword [ebp - 0x5b8], 0
cmp dword [ebp - 0x5b8], 0
jbe 0x1000a307
mov dword [ebp - 0xac0], 1
jmp 0x1000a30e
and dword [ebp - 0xac0], 0
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0xac0], eax
jge 0x1000a328
mov dword [ebp - 0x5c0], 1
jmp 0x1000a32f
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0xad8]
cmp eax, dword [ebp - 0x5c0]
jge 0x1000a349
mov dword [ebp - 0xac8], 1
jmp 0x1000a350
and dword [ebp - 0xac8], 0
imul eax, dword [ebp - 0xac8], 0xffffffff
sub eax, dword [ebp - 0x3d8]
jne 0x1000a36b
mov dword [ebp - 0x46c], 1
jmp 0x1000a372
and dword [ebp - 0x46c], 0
push 1
lea ecx, [ebp - 0x1298]
call fcn.100182ab
mov ecx, dword [ebp - 0x46c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3d8]
cmp dword [ebp - 0x46c], eax
jne 0x1000a3a1
mov dword [ebp - 0x5c8], 1
jmp 0x1000a3a8
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x5c8], 0x1d534a2c
jle 0x1000a3c0
mov dword [ebp - 0xad0], 1
jmp 0x1000a3c7
and dword [ebp - 0xad0], 0
cmp dword [ebp - 0xad0], 9
jae 0x1000a3dc
mov dword [ebp - 0x5d0], 1
jmp 0x1000a3e3
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x3e0], eax
mov eax, dword [ebp - 0xe24]
cmp dword [ebp - 0x3e0], eax
jle 0x1000a409
mov dword [ebp - 0x5d8], 1
jmp 0x1000a410
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0xad8]
cmp dword [ebp - 0x5d8], eax
jl 0x1000a436
mov dword [ebp - 0xe2c], 8
mov eax, dword [ebp - 0xe2c]
mov dword [ebp - 0x3e0], eax
jmp 0x1000a450
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1000a450
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x1000a1e9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1298]
call fcn.100182a6
mov dword [ebp - 0x44], 0
mov dword [ebp - 0xc8], 8
mov dword [ebp - 0x158], 0x213072c0
mov dword [ebp - 0x440], 0x9eb818f8
cmp dword [ebp - 0x44], 0
jl 0x1000a49b
mov dword [ebp - 0xae0], 1
jmp 0x1000a4a2
and dword [ebp - 0xae0], 0
mov eax, dword [ebp - 0xae0]
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 7
ja 0x1000a4c3
mov dword [ebp - 0xe34], 1
jmp 0x1000a4ca
and dword [ebp - 0xe34], 0
mov eax, 0xc0198ab7
test eax, eax
jne 0x1000a4e5
cmp dword [ebp - 0x158], 0
jne 0x1000a4e5
and dword [ebp - 0x5e0], 0
jmp 0x1000a4ef
mov dword [ebp - 0x5e0], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5e0], eax
jge 0x1000a506
mov dword [ebp - 0xae8], 1
jmp 0x1000a50d
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0xae8]
cmp eax, 9
je 0x1000a527
mov dword [ebp - 0xe3c], 1
jmp 0x1000a52e
and dword [ebp - 0xe3c], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1128], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xc8], eax
jge 0x1000a554
mov dword [ebp - 0x5e8], 1
jmp 0x1000a55b
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0x2377d64
je 0x1000a573
mov dword [ebp - 0xaf0], 1
jmp 0x1000a57a
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
mov dword [ebp - 0x158], eax
imul eax, dword [ebp - 0x158], 0
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x440]
cmp dword [ebp - 0x44], eax
jge 0x1000a805
cmp dword [ebp - 0x44], 0
je 0x1000a805
mov dword [ebp - 0x2d0], 9
mov dword [ebp - 0x230], 0xfffffffd
mov dword [ebp - 0x44], 0xc
jmp 0x1000a5cd
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xffffffe2
jg 0x1000a6bd
mov dword [ebp - 0x320], 0xecaa7054
mov dword [ebp - 0xe44], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x440], eax
jg 0x1000a605
mov dword [ebp - 0x5f0], 1
jmp 0x1000a60c
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x320]
add eax, 7
cmp dword [ebp - 0x5f0], eax
jle 0x1000a629
mov dword [ebp - 0xaf8], 1
jmp 0x1000a630
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0xaf8], eax
je 0x1000a64a
mov dword [ebp - 0x5f8], 1
jmp 0x1000a651
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0x1130], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x2d0], eax
jne 0x1000a686
mov dword [ebp - 0xb00], 1
jmp 0x1000a68d
and dword [ebp - 0xb00], 0
cmp dword [ebp - 0xb00], 0x25452e2c
jle 0x1000a6a5
mov dword [ebp - 0x600], 1
jmp 0x1000a6ac
and dword [ebp - 0x600], 0
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xe44], eax
jmp 0x1000a5c6
mov dword [ebp - 0xc8], 0xfffffffe
jmp 0x1000a6d6
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0x1d
jge 0x1000a803
push 2
lea ecx, [ebp - 0xeac]
call fcn.10018221
mov dword [ebp - 4], 5
mov dword [ebp - 0x228], 0
jmp 0x1000a710
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1000a732
push dword [ebp - 0x228]
lea ecx, [ebp - 0xeac]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
jmp 0x1000a703
push 1
lea ecx, [ebp - 0xeac]
call fcn.100182ab
cmp dword [eax], 0
jge 0x1000a7b8
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x1138], eax
push 1
lea ecx, [ebp - 0xeac]
call fcn.100182ab
cmp dword [ebp - 0x2d0], 0xffffffff
je 0x1000a772
mov dword [ebp - 0xb08], 1
jmp 0x1000a779
and dword [ebp - 0xb08], 0
cmp dword [ebp - 0xb08], 0
je 0x1000a797
cmp dword [ebp - 0x230], 0
je 0x1000a797
mov dword [ebp - 0x608], 1
jmp 0x1000a79e
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x608], eax
jg 0x1000a7b8
mov dword [ebp - 0xb10], 1
jmp 0x1000a7bf
and dword [ebp - 0xb10], 0
push 1
lea ecx, [ebp - 0xeac]
call fcn.100182ab
mov ecx, dword [ebp - 0xb10]
sub ecx, dword [eax]
mov dword [ebp - 0x230], ecx
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x1140], eax
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeac]
call fcn.100182a6
jmp 0x1000a6c9
jmp 0x1000a87a
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x360], 0
jmp 0x1000a828
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 3
jge 0x1000a844
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0x12a8], 0x33d7bf5f
jmp 0x1000a81b
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x238], eax
jle 0x1000a867
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x12a8], ecx
jmp 0x1000a87a
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x238]
mov dword [ebp + eax - 0x12a8], ecx
mov dword [ebp - 0x1b8], 1
mov dword [ebp - 0x610], 0x8b0d193e
mov dword [ebp - 0xe4c], 0x67d50f82
mov dword [ebp - 0xf04], 0xffffffff
mov dword [ebp - 0x1148], 3
mov byte [ebp - 0x126], 0
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x1000a8c6
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x1b8], 0xfffffffb
jmp 0x1000a8df
mov eax, dword [ebp - 0x1b8]
dec eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0xfffffff8
jge 0x1000a9a0
mov dword [ebp - 0xb20], 0x1e124dc4
cmp dword [ebp - 0xe4c], 0xef6e229e
ja 0x1000a90e
mov dword [ebp - 0xb18], 1
jmp 0x1000a915
and dword [ebp - 0xb18], 0
mov dword [ebp - 0x610], 0x6310
mov eax, dword [ebp - 0x610]
cmp eax, dword [ebp - 0xb18]
jge 0x1000a939
mov dword [ebp - 0x618], 1
jmp 0x1000a940
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0xb20]
cmp dword [ebp - 0x618], eax
jle 0x1000a95a
mov dword [ebp - 0x620], 1
jmp 0x1000a961
and dword [ebp - 0x620], 0
imul eax, dword [ebp - 0x1b8], 0x49f8
mov ecx, dword [ebp - 0xb20]
imul ecx, dword [ebp - 0x620]
cmp eax, ecx
jg 0x1000a988
mov dword [ebp - 0xb28], 1
jmp 0x1000a98f
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0xf04], eax
jmp 0x1000a8d2
mov dword [ebp - 0x48], 0
mov dword [ebp - 0xd0], 8
mov dword [ebp - 0x140], 0x213072c0
mov dword [ebp - 0x3e8], 0x9eb818f8
cmp dword [ebp - 0x48], 0
jl 0x1000a9d7
mov dword [ebp - 0x628], 1
jmp 0x1000a9de
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 7
ja 0x1000a9ff
mov dword [ebp - 0xf0c], 1
jmp 0x1000aa06
and dword [ebp - 0xf0c], 0
mov eax, 0xc0198ab7
test eax, eax
jne 0x1000aa21
cmp dword [ebp - 0x140], 0
jne 0x1000aa21
and dword [ebp - 0xb30], 0
jmp 0x1000aa2b
mov dword [ebp - 0xb30], 1
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xb30], eax
jge 0x1000aa42
mov dword [ebp - 0x630], 1
jmp 0x1000aa49
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x630]
cmp eax, 9
je 0x1000aa63
mov dword [ebp - 0xf00], 1
jmp 0x1000aa6a
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1150], eax
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0xd0], eax
jge 0x1000aa90
mov dword [ebp - 0xb38], 1
jmp 0x1000aa97
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0xb38], 0x2377d64
je 0x1000aaaf
mov dword [ebp - 0x638], 1
jmp 0x1000aab6
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x140], eax
imul eax, dword [ebp - 0x140], 0
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3e8]
cmp dword [ebp - 0x48], eax
jge 0x1000ad41
cmp dword [ebp - 0x48], 0
je 0x1000ad41
mov dword [ebp - 0x328], 9
mov dword [ebp - 0x248], 0xfffffffd
mov dword [ebp - 0x48], 0xc
jmp 0x1000ab09
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe2
jg 0x1000abf9
mov dword [ebp - 0x2d8], 0xecaa7054
mov dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x3e8], eax
jg 0x1000ab41
mov dword [ebp - 0xb40], 1
jmp 0x1000ab48
and dword [ebp - 0xb40], 0
mov eax, dword [ebp - 0x2d8]
add eax, 7
cmp dword [ebp - 0xb40], eax
jle 0x1000ab65
mov dword [ebp - 0x640], 1
jmp 0x1000ab6c
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x2d8]
cmp dword [ebp - 0x640], eax
je 0x1000ab86
mov dword [ebp - 0xb48], 1
jmp 0x1000ab8d
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb48]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x1158], eax
or eax, 0xffffffff
sub eax, dword [ebp - 0x328]
cmp dword [ebp - 0x328], eax
jne 0x1000abc2
mov dword [ebp - 0x648], 1
jmp 0x1000abc9
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0x25452e2c
jle 0x1000abe1
mov dword [ebp - 0xb50], 1
jmp 0x1000abe8
and dword [ebp - 0xb50], 0
mov eax, dword [ebp - 0xb50]
mov dword [ebp - 0xd40], eax
jmp 0x1000ab02
mov dword [ebp - 0xd0], 0xfffffffe
jmp 0x1000ac12
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1d
jge 0x1000ad3f
push 2
lea ecx, [ebp - 0xebc]
call fcn.10018221
mov dword [ebp - 4], 6
mov dword [ebp - 0x240], 0
jmp 0x1000ac4c
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1000ac6e
push dword [ebp - 0x240]
lea ecx, [ebp - 0xebc]
call fcn.100182ab
mov dword [eax], 0xf3a4b440
jmp 0x1000ac3f
push 1
lea ecx, [ebp - 0xebc]
call fcn.100182ab
cmp dword [eax], 0
jge 0x1000acf4
mov eax, dword [ebp - 0x140]
mov dword [ebp - 0x1160], eax
push 1
lea ecx, [ebp - 0xebc]
call fcn.100182ab
cmp dword [ebp - 0x328], 0xffffffff
je 0x1000acae
mov dword [ebp - 0x650], 1
jmp 0x1000acb5
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0
je 0x1000acd3
cmp dword [ebp - 0x248], 0
je 0x1000acd3
mov dword [ebp - 0xb58], 1
jmp 0x1000acda
and dword [ebp - 0xb58], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0xb58], eax
jg 0x1000acf4
mov dword [ebp - 0x658], 1
jmp 0x1000acfb
and dword [ebp - 0x658], 0
push 1
lea ecx, [ebp - 0xebc]
call fcn.100182ab
mov ecx, dword [ebp - 0x658]
sub ecx, dword [eax]
mov dword [ebp - 0x248], ecx
mov eax, dword [ebp - 0x248]
mov dword [ebp - 0x1168], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x48], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xebc]
call fcn.100182a6
jmp 0x1000ac05
jmp 0x1000adb6
mov dword [ebp - 0x250], 1
mov dword [ebp - 0x2e0], 0
jmp 0x1000ad64
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x1000ad80
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x12b8], 0x33d7bf5f
jmp 0x1000ad57
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x250], eax
jle 0x1000ada3
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x12b8], ecx
jmp 0x1000adb6
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x250]
mov dword [ebp + eax - 0x12b8], ecx
push 2
lea ecx, [ebp - 0x38c]
call fcn.10018221
mov dword [ebp - 4], 7
mov dword [ebp - 0x18], 1
mov dword [ebp - 0xffc], 0x5807c1ab
mov dword [ebp - 0xff8], 0x5807c1ab
mov dword [ebp - 0xff4], 0x5807c1ab
mov dword [ebp - 0xff0], 0x5807c1ab
lea ecx, [ebp - 0x41d]
call fcn.10008e33
push eax
lea eax, [ebp - 0xfec]
push eax
lea eax, [ebp - 0xffc]
push eax
lea ecx, [ebp - 0x1404]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12c8]
call fcn.10018280
mov byte [ebp - 4], 8
mov dword [ebp - 0xb98], 0xa772
mov dword [ebp - 0xcfc], 0
mov dword [ebp - 0xd58], 0
mov dword [ebp - 0x350], 0
jmp 0x1000ae69
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 2
jge 0x1000ae8b
push dword [ebp - 0x350]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
mov dword [eax], 0x1928
jmp 0x1000ae5c
mov dword [ebp - 0x18], 0
jmp 0x1000ae9b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jg 0x1000b296
push 1
lea ecx, [ebp - 0xc98]
call fcn.10018221
mov byte [ebp - 4], 9
push 2
lea ecx, [ebp - 0xf48]
call fcn.10018221
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xe28], 0xc1d9
mov dword [ebp - 0x2c], 0
jmp 0x1000aee1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1000aefa
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc98]
call fcn.100182ab
or dword [eax], 0xffffffff
jmp 0x1000aeda
mov dword [ebp - 0x2c], 0
jmp 0x1000af0a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000af26
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf48]
call fcn.100182ab
mov dword [eax], 0xfffffffc
jmp 0x1000af03
mov dword [ebp - 0x2c], 0
jmp 0x1000af36
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000af4c
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xfb0], 0x4b13b106
jmp 0x1000af2f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
push 0
lea ecx, [ebp - 0x38c]
call fcn.100182ab
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xc98]
call fcn.100182ab
mov dword [ebp - 0xb60], eax
push 1
lea ecx, [ebp - 0x38c]
call fcn.100182ab
mov ecx, dword [ebp - 0xb60]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb60]
imul esi, dword [eax], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
cmp esi, dword [eax]
je 0x1000afc6
mov dword [ebp - 0xcf4], 1
jmp 0x1000afcd
and dword [ebp - 0xcf4], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xc98]
call fcn.100182ab
cmp dword [eax], 0xffffffff
jge 0x1000aff9
mov dword [ebp - 0x660], 1
jmp 0x1000b000
and dword [ebp - 0x660], 0
mov esi, dword [ebp - 0x18]
imul esi, dword [ebp - 0x660]
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
imul esi, dword [eax]
cmp esi, dword [ebp - 0x18]
jg 0x1000b02c
mov dword [ebp - 0xb68], 1
jmp 0x1000b033
and dword [ebp - 0xb68], 0
cmp dword [ebp - 0xb68], 0x718b
jge 0x1000b04b
mov dword [ebp - 0x668], 1
jmp 0x1000b052
and dword [ebp - 0x668], 0
push 0
lea ecx, [ebp - 0xf48]
call fcn.100182ab
mov ecx, dword [ebp - 0x668]
mov dword [eax], ecx
mov eax, dword [ebp - 0xe28]
mov dword [ebp - 0x1170], eax
push 0
lea ecx, [ebp - 0xf48]
call fcn.100182ab
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1178], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb70], eax
push 0
lea ecx, [ebp - 0x12c8]
call fcn.100182ab
mov ecx, dword [ebp - 0xb70]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xc98]
call fcn.100182ab
mov ecx, dword [ebp - 0xb70]
cmp ecx, dword [eax]
jg 0x1000b0ca
mov dword [ebp - 0x670], 1
jmp 0x1000b0d1
and dword [ebp - 0x670], 0
push 0
lea ecx, [ebp - 0xc98]
call fcn.100182ab
mov ecx, dword [ebp - 0x670]
cmp ecx, dword [eax]
jl 0x1000b0f4
mov dword [ebp - 0xb78], 1
jmp 0x1000b0fb
and dword [ebp - 0xb78], 0
cmp dword [ebp - 0xb78], 0xcecb
jl 0x1000b113
mov dword [ebp - 0x678], 1
jmp 0x1000b11a
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x678], eax
jle 0x1000b131
mov dword [ebp - 0xb80], 1
jmp 0x1000b138
and dword [ebp - 0xb80], 0
mov esi, dword [ebp - 0xb80]
sub esi, dword [ebp - 0x18]
push 0
lea ecx, [ebp - 0xc98]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x1000b15e
mov dword [ebp - 0x680], 1
jmp 0x1000b165
and dword [ebp - 0x680], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfb0]
cmp dword [ebp - 0x680], eax
je 0x1000b186
mov dword [ebp - 0xb88], 1
jmp 0x1000b18d
and dword [ebp - 0xb88], 0
cmp dword [ebp - 0xb88], 0xd707
jle 0x1000b1a7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
mov ecx, dword [ebp - 0xb98]
cmp dword [eax], ecx
jge 0x1000b1cb
mov dword [ebp - 0x688], 1
jmp 0x1000b1d2
and dword [ebp - 0x688], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfb0]
cmp dword [ebp - 0x688], eax
jg 0x1000b1f3
mov dword [ebp - 0xb90], 1
jmp 0x1000b1fa
and dword [ebp - 0xb90], 0
push dword [ebp - 0x18]
lea ecx, [ebp - 0x38c]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0xb90]
jl 0x1000b21e
mov dword [ebp - 0x690], 1
jmp 0x1000b225
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0xcfc]
cmp dword [ebp - 0x690], eax
jl 0x1000b23f
mov dword [ebp - 0x698], 1
jmp 0x1000b246
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0xb98]
cmp dword [ebp - 0x698], eax
jle 0x1000b260
mov dword [ebp - 0xba0], 1
jmp 0x1000b267
and dword [ebp - 0xba0], 0
mov eax, dword [ebp - 0xba0]
mov dword [ebp - 0xd58], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xf48]
call fcn.100182a6
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xc98]
call fcn.100182a6
jmp 0x1000ae94
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000b2ba
push 0x2632
push 0x373
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x12c8]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x38c]
call fcn.100182a6
push 1
lea ecx, [ebp - 0x498]
call fcn.10018221
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x47c], 1
mov dword [ebp - 0xa8], 0x52509e71
mov dword [ebp - 0x150], 0xa97f51ef
mov dword [ebp - 0x258], 0
jmp 0x1000b32a
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 1
jge 0x1000b34c
push dword [ebp - 0x258]
lea ecx, [ebp - 0x498]
call fcn.100182ab
mov dword [eax], 0x91a049fe
jmp 0x1000b31d
mov dword [ebp - 0x1c], 0
jmp 0x1000b35c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1000b821
mov dword [ebp - 0x3f8], 0x18d9dce
mov dword [ebp - 0x2e8], 0xb3e713e1
mov dword [ebp - 0x74], 0xedf0ebf9
mov dword [ebp - 0x3f0], 5
mov dword [ebp - 0xd64], 0xf83943c
mov dword [ebp - 0x47c], 0xd870a326
mov esi, dword [ebp - 0x47c]
push 0
lea ecx, [ebp - 0x498]
call fcn.100182ab
cmp dword [eax], esi
jle 0x1000b3c2
mov dword [ebp - 0x6a0], 1
jmp 0x1000b3c9
and dword [ebp - 0x6a0], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6a0]
jle 0x1000b3ed
mov dword [ebp - 0xbb0], 1
jmp 0x1000b3f4
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x69ac
jne 0x1000b410
mov dword [ebp - 0x6b0], 1
jmp 0x1000b417
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x150], 0
je 0x1000b435
cmp dword [ebp - 0x3f8], 0
je 0x1000b435
mov dword [ebp - 0xba8], 1
jmp 0x1000b43c
and dword [ebp - 0xba8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xba8], eax
je 0x1000b453
mov dword [ebp - 0x6a8], 1
jmp 0x1000b45a
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x6a8]
mov dword [ebp - 0x3f0], eax
mov esi, dword [ebp - 0x3f0]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x1000b48a
mov dword [ebp - 0xbb8], 1
jmp 0x1000b491
and dword [ebp - 0xbb8], 0
mov eax, dword [ebp - 0xbb0]
add eax, dword [ebp - 0x6b0]
cmp eax, dword [ebp - 0xbb8]
je 0x1000b4b1
mov dword [ebp - 0x6b8], 1
jmp 0x1000b4b8
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x6b8], eax
jne 0x1000b4d2
mov dword [ebp - 0xd04], 1
jmp 0x1000b4d9
and dword [ebp - 0xd04], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.100182ab
cmp dword [ebp - 0x74], 0
je 0x1000b4f9
mov dword [ebp - 0xbc0], 1
jmp 0x1000b500
and dword [ebp - 0xbc0], 0
cmp dword [ebp - 0xbc0], 0x3b9c309a
je 0x1000b518
mov dword [ebp - 0x6c0], 1
jmp 0x1000b51f
and dword [ebp - 0x6c0], 0
imul eax, dword [ebp - 0x6c0], 0xb619
test eax, eax
je 0x1000b5fd
mov dword [ebp - 0xbd0], 0x64e785c2
mov dword [ebp - 0xd5c], 0xbd1a6f32
mov dword [ebp - 0x74], 0
jmp 0x1000b555
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0
jg 0x1000b5f8
mov dword [ebp - 0x1180], 0xfebdab6a
push 8
pop eax
test eax, eax
je 0x1000b59c
cmp dword [ebp - 0x74], 4
jbe 0x1000b582
mov dword [ebp - 0xbc8], 1
jmp 0x1000b589
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0xbd0], 0
cmp dword [ebp - 0xa8], 1
jne 0x1000b5b1
mov dword [ebp - 0x6cc], 1
jmp 0x1000b5b8
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0xd5c]
cmp dword [ebp - 0x6cc], eax
jg 0x1000b5d2
mov dword [ebp - 0x9ac], 1
jmp 0x1000b5d9
and dword [ebp - 0x9ac], 0
mov eax, dword [ebp - 0x9ac]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x47c], 0
je 0x1000b5f3
jmp 0x1000b54e
jmp 0x1000b54e
jmp 0x1000b81c
mov dword [ebp - 0x448], 0x97fb
mov dword [ebp - 0x6dc], 0x1ca8fd5f
cmp dword [ebp - 0x448], 1
jg 0x1000b626
mov dword [ebp - 0x9b4], 1
jmp 0x1000b62d
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1190], eax
cmp dword [ebp - 0x448], 0xffffffff
jbe 0x1000b65a
mov dword [ebp - 0x6d4], 1
jmp 0x1000b661
and dword [ebp - 0x6d4], 0
cmp dword [ebp - 0x6d4], 0xc34309e9
je 0x1000b679
mov dword [ebp - 0xb1c], 1
jmp 0x1000b680
and dword [ebp - 0xb1c], 0
mov eax, dword [ebp - 0xb1c]
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
mov dword [ebp - 0x1198], eax
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x150]
cmp eax, 0x2df2
je 0x1000b6b7
mov dword [ebp - 0xd0c], 1
jmp 0x1000b6be
and dword [ebp - 0xd0c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x11a0], eax
mov eax, dword [ebp - 0x3f0]
imul eax, dword [ebp - 0x9b4]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x11a8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x11b0], eax
cmp dword [ebp - 0xa8], 0x71eb1c26
jle 0x1000b70a
mov dword [ebp - 0x6e4], 1
jmp 0x1000b711
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 4
je 0x1000b72c
mov eax, 0x4289
test eax, eax
jne 0x1000b72c
and dword [ebp - 0xbd4], 0
jmp 0x1000b736
mov dword [ebp - 0xbd4], 1
mov eax, dword [ebp - 0x448]
imul eax, dword [ebp - 0xbd4]
cmp eax, 0xc971
jge 0x1000b756
mov dword [ebp - 0x6ec], 1
jmp 0x1000b75d
and dword [ebp - 0x6ec], 0
cmp dword [ebp - 0x6ec], 0xc9934b93
jae 0x1000b775
mov dword [ebp - 0x9bc], 1
jmp 0x1000b77c
and dword [ebp - 0x9bc], 0
push 0
lea ecx, [ebp - 0x498]
call fcn.100182ab
mov ecx, dword [ebp - 0x9bc]
sub ecx, dword [eax]
mov dword [ebp - 0x3f8], ecx
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xa8], eax
mov esi, dword [ebp - 0xa8]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.100182ab
cmp esi, dword [eax]
jle 0x1000b7c7
mov dword [ebp - 0x6f4], 1
jmp 0x1000b7ce
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
inc eax
cmp eax, 0x567d
jg 0x1000b7e8
mov dword [ebp - 0xb24], 1
jmp 0x1000b7ef
and dword [ebp - 0xb24], 0
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0xd64], eax
push 0
lea ecx, [ebp - 0x498]
call fcn.100182ab
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x498]
call fcn.100182ab
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000b355
mov dword [ebp - 0x1c], 0
jmp 0x1000b831
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x1000b8b3
mov dword [ebp - 0x150], 0
jmp 0x1000b850
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x1000b894
mov byte [ebp - 0x128], 0
movzx eax, byte [ebp - 0x128]
test eax, eax
je 0x1000b873
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000b892
push 0xc
push 0x1a94
call dword [sym.imp.KERNEL32.dll_Beep]
jmp 0x1000b843
mov byte [ebp - 0x12a], 0
movzx eax, byte [ebp - 0x12a]
test eax, eax
je 0x1000b8ae
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x1000b82a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x498]
call fcn.100182a6
mov dword [ebp - 0x16c], 1
mov dword [ebp - 0x6fc], 0x8b0d193e
mov dword [ebp - 0xd14], 0x67d50f82
mov dword [ebp - 0xd6c], 0xffffffff
mov dword [ebp - 0x11b8], 3
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1000b90e
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x16c], 0xfffffffb
jmp 0x1000b927
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xfffffff8
jge 0x1000b9e8
mov dword [ebp - 0xbf0], 0x1e124dc4
cmp dword [ebp - 0xd14], 0xef6e229e
ja 0x1000b956
mov dword [ebp - 0x9c4], 1
jmp 0x1000b95d
and dword [ebp - 0x9c4], 0
mov dword [ebp - 0x6fc], 0x6310
mov eax, dword [ebp - 0x6fc]
cmp eax, dword [ebp - 0x9c4]
jge 0x1000b981
mov dword [ebp - 0x704], 1
jmp 0x1000b988
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0xbf0]
cmp dword [ebp - 0x704], eax
jle 0x1000b9a2
mov dword [ebp - 0x70c], 1
jmp 0x1000b9a9
and dword [ebp - 0x70c], 0
imul eax, dword [ebp - 0x16c], 0x49f8
mov ecx, dword [ebp - 0xbf0]
imul ecx, dword [ebp - 0x70c]
cmp eax, ecx
jg 0x1000b9d0
mov dword [ebp - 0x9cc], 1
jmp 0x1000b9d7
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0xd6c], eax
jmp 0x1000b91a
push 3
lea ecx, [ebp - 0x1d4]
call fcn.10018221
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x38], 0x7df2f4a8
push 3
lea ecx, [ebp - 0x1080]
call fcn.10018221
mov byte [ebp - 4], 0xd
mov dword [ebp - 0xd74], 0x9e149cff
mov dword [ebp - 0x54], 0
jmp 0x1000ba2e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000ba4a
push dword [ebp - 0x54]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov dword [eax], 0xff0ea75c
jmp 0x1000ba27
mov dword [ebp - 0x54], 0
jmp 0x1000ba5a
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000ba76
push dword [ebp - 0x54]
lea ecx, [ebp - 0x1080]
call fcn.100182ab
mov dword [eax], 0x4b2e809b
jmp 0x1000ba53
mov dword [ebp - 0x38], 0
jmp 0x1000ba86
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x1000bcca
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov esi, eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov ecx, dword [esi]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000bbda
xor eax, eax
jne 0x1000bb23
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000bafe
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000bafe
mov dword [ebp - 0xd1c], 1
jmp 0x1000bb05
and dword [ebp - 0xd1c], 0
mov esi, dword [ebp - 0x38]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp esi, dword [eax]
jg 0x1000bb23
and dword [ebp - 0x460], 0
jmp 0x1000bb2d
mov dword [ebp - 0x460], 1
push 2
lea ecx, [ebp - 0x1080]
call fcn.100182ab
mov ecx, dword [ebp - 0x460]
mov dword [eax], ecx
cmp dword [ebp - 0x460], 0
jne 0x1000bb66
push 2
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
jne 0x1000bb66
and dword [ebp - 0x714], 0
jmp 0x1000bb70
mov dword [ebp - 0x714], 1
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov ecx, dword [ebp - 0x714]
cmp ecx, dword [eax]
jle 0x1000bb94
mov dword [ebp - 0xb2c], 1
jmp 0x1000bb9b
and dword [ebp - 0xb2c], 0
imul eax, dword [ebp - 0xb2c], 0x3359
test eax, eax
je 0x1000bbda
push 2
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000bbda
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000bbda
mov dword [ebp - 0x71c], 1
jmp 0x1000bbe1
and dword [ebp - 0x71c], 0
cmp dword [ebp - 0x71c], 0x9c25
jle 0x1000bbf9
mov dword [ebp - 0x9d4], 1
jmp 0x1000bc00
and dword [ebp - 0x9d4], 0
cmp dword [ebp - 0x9d4], 1
ja 0x1000bc15
mov dword [ebp - 0x724], 1
jmp 0x1000bc1c
and dword [ebp - 0x724], 0
push 1
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov ecx, dword [ebp - 0x724]
cmp ecx, dword [eax]
jle 0x1000bc45
mov eax, 0xe3d4
test eax, eax
jne 0x1000bc45
and dword [ebp - 0xbf8], 0
jmp 0x1000bc4f
mov dword [ebp - 0xbf8], 1
push 2
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov ecx, dword [ebp - 0xbf8]
add ecx, dword [eax]
cmp ecx, 0x4eb0
jle 0x1000bc78
mov dword [ebp - 0x72c], 1
jmp 0x1000bc7f
and dword [ebp - 0x72c], 0
push 0
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x72c]
jge 0x1000bca2
mov dword [ebp - 0x9dc], 1
jmp 0x1000bca9
and dword [ebp - 0x9dc], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x1d4]
call fcn.100182ab
mov ecx, dword [ebp - 0x9dc]
sub ecx, dword [eax]
mov dword [ebp - 0xd74], ecx
jmp 0x1000ba7f
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1080]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1d4]
call fcn.100182a6
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x734], 0x8b0d193e
mov dword [ebp - 0xd24], 0x67d50f82
mov dword [ebp - 0xd7c], 0xffffffff
mov dword [ebp - 0x11c0], 3
mov byte [ebp - 0x12c], 0
movzx eax, byte [ebp - 0x12c]
test eax, eax
je 0x1000bd34
push 0
call dword [sym.imp.USER32.dll_DestroyIcon]
mov dword [ebp - 0x19c], 0xfffffffb
jmp 0x1000bd4d
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xfffffff8
jge 0x1000be0e
mov dword [ebp - 0x9e4], 0x1e124dc4
cmp dword [ebp - 0xd24], 0xef6e229e
ja 0x1000bd7c
mov dword [ebp - 0xb34], 1
jmp 0x1000bd83
and dword [ebp - 0xb34], 0
mov dword [ebp - 0x734], 0x6310
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xb34]
jge 0x1000bda7
mov dword [ebp - 0x73c], 1
jmp 0x1000bdae
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x9e4]
cmp dword [ebp - 0x73c], eax
jle 0x1000bdc8
mov dword [ebp - 0x744], 1
jmp 0x1000bdcf
and dword [ebp - 0x744], 0
imul eax, dword [ebp - 0x19c], 0x49f8
mov ecx, dword [ebp - 0x9e4]
imul ecx, dword [ebp - 0x744]
cmp eax, ecx
jg 0x1000bdf6
mov dword [ebp - 0xbec], 1
jmp 0x1000bdfd
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0xbec]
mov dword [ebp - 0xd7c], eax
jmp 0x1000bd40
mov dword [ebp - 0x11c8], 4
mov byte [ebp - 0x12e], 0
movzx eax, byte [ebp - 0x12e]
test eax, eax
je 0x1000be43
push 0
push 0x1bed
push 0
push 0x11b0
push 0x26d0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000be70
push 0
push 0x2577
push 0
push 0
push 0x14f6
push 0x2595
call dword [sym.imp.USER32.dll_ToAsciiEx]
push 2
lea ecx, [ebp - 0x398]
call fcn.10018221
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x1024], 0x5807c1ab
mov dword [ebp - 0x1020], 0x5807c1ab
mov dword [ebp - 0x101c], 0x5807c1ab
mov dword [ebp - 0x1018], 0x5807c1ab
lea ecx, [ebp - 0x3a5]
call fcn.10008e33
push eax
lea eax, [ebp - 0x1014]
push eax
lea eax, [ebp - 0x1024]
push eax
lea ecx, [ebp - 0x1414]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12d8]
call fcn.10018280
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x784], 0xa772
mov dword [ebp - 0xd34], 0
mov dword [ebp - 0xd8c], 0
mov dword [ebp - 0x260], 0
jmp 0x1000bf23
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x1000bf45
push dword [ebp - 0x260]
lea ecx, [ebp - 0x398]
call fcn.100182ab
mov dword [eax], 0x1928
jmp 0x1000bf16
mov dword [ebp - 0x10], 0
jmp 0x1000bf55
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1000c350
push 1
lea ecx, [ebp - 0xcb0]
call fcn.10018221
mov byte [ebp - 4], 0x10
push 2
lea ecx, [ebp - 0xf54]
call fcn.10018221
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xd84], 0xc1d9
mov dword [ebp - 0x28], 0
jmp 0x1000bf9b
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1000bfb4
push dword [ebp - 0x28]
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
or dword [eax], 0xffffffff
jmp 0x1000bf94
mov dword [ebp - 0x28], 0
jmp 0x1000bfc4
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000bfe0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xf54]
call fcn.100182ab
mov dword [eax], 0xfffffffc
jmp 0x1000bfbd
mov dword [ebp - 0x28], 0
jmp 0x1000bff0
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000c006
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfc0], 0x4b13b106
jmp 0x1000bfe9
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
push 0
lea ecx, [ebp - 0x398]
call fcn.100182ab
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
mov dword [ebp - 0x74c], eax
push 1
lea ecx, [ebp - 0x398]
call fcn.100182ab
mov ecx, dword [ebp - 0x74c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x74c]
imul esi, dword [eax], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
cmp esi, dword [eax]
je 0x1000c080
mov dword [ebp - 0xd2c], 1
jmp 0x1000c087
and dword [ebp - 0xd2c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
cmp dword [eax], 0xffffffff
jge 0x1000c0b3
mov dword [ebp - 0x9ec], 1
jmp 0x1000c0ba
and dword [ebp - 0x9ec], 0
mov esi, dword [ebp - 0x10]
imul esi, dword [ebp - 0x9ec]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
imul esi, dword [eax]
cmp esi, dword [ebp - 0x10]
jg 0x1000c0e6
mov dword [ebp - 0x754], 1
jmp 0x1000c0ed
and dword [ebp - 0x754], 0
cmp dword [ebp - 0x754], 0x718b
jge 0x1000c105
mov dword [ebp - 0xb3c], 1
jmp 0x1000c10c
and dword [ebp - 0xb3c], 0
push 0
lea ecx, [ebp - 0xf54]
call fcn.100182ab
mov ecx, dword [ebp - 0xb3c]
mov dword [eax], ecx
mov eax, dword [ebp - 0xd84]
mov dword [ebp - 0x11d0], eax
push 0
lea ecx, [ebp - 0xf54]
call fcn.100182ab
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x11d8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x75c], eax
push 0
lea ecx, [ebp - 0x12d8]
call fcn.100182ab
mov ecx, dword [ebp - 0x75c]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
mov ecx, dword [ebp - 0x75c]
cmp ecx, dword [eax]
jg 0x1000c184
mov dword [ebp - 0x9f4], 1
jmp 0x1000c18b
and dword [ebp - 0x9f4], 0
push 0
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
mov ecx, dword [ebp - 0x9f4]
cmp ecx, dword [eax]
jl 0x1000c1ae
mov dword [ebp - 0x764], 1
jmp 0x1000c1b5
and dword [ebp - 0x764], 0
cmp dword [ebp - 0x764], 0xcecb
jl 0x1000c1cd
mov dword [ebp - 0xc68], 1
jmp 0x1000c1d4
and dword [ebp - 0xc68], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xc68], eax
jle 0x1000c1eb
mov dword [ebp - 0x76c], 1
jmp 0x1000c1f2
and dword [ebp - 0x76c], 0
mov esi, dword [ebp - 0x76c]
sub esi, dword [ebp - 0x10]
push 0
lea ecx, [ebp - 0xcb0]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x1000c218
mov dword [ebp - 0x9fc], 1
jmp 0x1000c21f
and dword [ebp - 0x9fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc0]
cmp dword [ebp - 0x9fc], eax
je 0x1000c240
mov dword [ebp - 0x774], 1
jmp 0x1000c247
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0xd707
jle 0x1000c261
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
mov ecx, dword [ebp - 0x784]
cmp dword [eax], ecx
jge 0x1000c285
mov dword [ebp - 0xb44], 1
jmp 0x1000c28c
and dword [ebp - 0xb44], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfc0]
cmp dword [ebp - 0xb44], eax
jg 0x1000c2ad
mov dword [ebp - 0x77c], 1
jmp 0x1000c2b4
and dword [ebp - 0x77c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x398]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x77c]
jl 0x1000c2d8
mov dword [ebp - 0xa04], 1
jmp 0x1000c2df
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xd34]
cmp dword [ebp - 0xa04], eax
jl 0x1000c2f9
mov dword [ebp - 0xbf4], 1
jmp 0x1000c300
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0x784]
cmp dword [ebp - 0xbf4], eax
jle 0x1000c31a
mov dword [ebp - 0x78c], 1
jmp 0x1000c321
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0xd8c], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xf54]
call fcn.100182a6
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xcb0]
call fcn.100182a6
jmp 0x1000bf4e
mov byte [ebp - 0x12b], 0
movzx eax, byte [ebp - 0x12b]
test eax, eax
je 0x1000c374
push 0x2632
push 0x373
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x12d8]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x398]
call fcn.100182a6
push 2
lea ecx, [ebp - 0x12e8]
call fcn.10018221
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x268], 0x490c4d8e
mov dword [ebp - 0x330], 0
jmp 0x1000c3c9
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 2
jge 0x1000c3eb
push dword [ebp - 0x330]
lea ecx, [ebp - 0x12e8]
call fcn.100182ab
mov dword [eax], 0xd3df
jmp 0x1000c3bc
mov dword [ebp - 0x268], 0
jmp 0x1000c404
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jg 0x1000c44b
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000c449
push 0xf99
push 0x1d9b
push 0x567
push 3
push 0x19dc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
jmp 0x1000c3f7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x12e8]
call fcn.100182a6
push 1
lea ecx, [ebp - 0x4a4]
call fcn.10018221
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x88], 0x52509e71
mov dword [ebp - 0x148], 0xa97f51ef
mov dword [ebp - 0x2f0], 0
jmp 0x1000c4ac
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 1
jge 0x1000c4ce
push dword [ebp - 0x2f0]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
mov dword [eax], 0x91a049fe
jmp 0x1000c49f
mov dword [ebp - 0x24], 0
jmp 0x1000c4de
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1000c9a3
mov dword [ebp - 0x45c], 0x18d9dce
mov dword [ebp - 0x270], 0xb3e713e1
mov dword [ebp - 0x6c], 0xedf0ebf9
mov dword [ebp - 0x450], 5
mov dword [ebp - 0xd9c], 0xf83943c
mov dword [ebp - 0x400], 0xd870a326
mov esi, dword [ebp - 0x400]
push 0
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
cmp dword [eax], esi
jle 0x1000c544
mov dword [ebp - 0xa0c], 1
jmp 0x1000c54b
and dword [ebp - 0xa0c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0xa0c]
jle 0x1000c56f
mov dword [ebp - 0x79c], 1
jmp 0x1000c576
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x69ac
jne 0x1000c592
mov dword [ebp - 0xa14], 1
jmp 0x1000c599
and dword [ebp - 0xa14], 0
cmp dword [ebp - 0x148], 0
je 0x1000c5b7
cmp dword [ebp - 0x45c], 0
je 0x1000c5b7
mov dword [ebp - 0x794], 1
jmp 0x1000c5be
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x794], eax
je 0x1000c5d5
mov dword [ebp - 0xb4c], 1
jmp 0x1000c5dc
and dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0x450], eax
mov esi, dword [ebp - 0x450]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x1000c60c
mov dword [ebp - 0x7a4], 1
jmp 0x1000c613
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x79c]
add eax, dword [ebp - 0xa14]
cmp eax, dword [ebp - 0x7a4]
je 0x1000c633
mov dword [ebp - 0xc48], 1
jmp 0x1000c63a
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xc48], eax
jne 0x1000c654
mov dword [ebp - 0xd3c], 1
jmp 0x1000c65b
and dword [ebp - 0xd3c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
cmp dword [ebp - 0x6c], 0
je 0x1000c67b
mov dword [ebp - 0x7ac], 1
jmp 0x1000c682
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 0x3b9c309a
je 0x1000c69a
mov dword [ebp - 0xa1c], 1
jmp 0x1000c6a1
and dword [ebp - 0xa1c], 0
imul eax, dword [ebp - 0xa1c], 0xb619
test eax, eax
je 0x1000c77f
mov dword [ebp - 0xb54], 0x64e785c2
mov dword [ebp - 0xd94], 0xbd1a6f32
mov dword [ebp - 0x6c], 0
jmp 0x1000c6d7
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jg 0x1000c77a
mov dword [ebp - 0x11e0], 0xfebdab6a
push 8
pop eax
test eax, eax
je 0x1000c71e
cmp dword [ebp - 0x6c], 4
jbe 0x1000c704
mov dword [ebp - 0x7b4], 1
jmp 0x1000c70b
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0xb54], 0
cmp dword [ebp - 0x88], 1
jne 0x1000c733
mov dword [ebp - 0x7bc], 1
jmp 0x1000c73a
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0xd94]
cmp dword [ebp - 0x7bc], eax
jg 0x1000c754
mov dword [ebp - 0xa24], 1
jmp 0x1000c75b
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0xa24]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x400], 0
je 0x1000c775
jmp 0x1000c6d0
jmp 0x1000c6d0
jmp 0x1000c99e
mov dword [ebp - 0x408], 0x97fb
mov dword [ebp - 0x7cc], 0x1ca8fd5f
cmp dword [ebp - 0x408], 1
jg 0x1000c7a8
mov dword [ebp - 0xa2c], 1
jmp 0x1000c7af
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x11e8], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x11f0], eax
cmp dword [ebp - 0x408], 0xffffffff
jbe 0x1000c7dc
mov dword [ebp - 0x7c4], 1
jmp 0x1000c7e3
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 0xc34309e9
je 0x1000c7fb
mov dword [ebp - 0xbfc], 1
jmp 0x1000c802
and dword [ebp - 0xbfc], 0
mov eax, dword [ebp - 0xbfc]
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x11f8], eax
mov eax, dword [ebp - 0x270]
add eax, dword [ebp - 0x148]
cmp eax, 0x2df2
je 0x1000c839
mov dword [ebp - 0xd44], 1
jmp 0x1000c840
and dword [ebp - 0xd44], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1200], eax
mov eax, dword [ebp - 0x450]
imul eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0x1208], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x1210], eax
cmp dword [ebp - 0x88], 0x71eb1c26
jle 0x1000c88c
mov dword [ebp - 0x7d4], 1
jmp 0x1000c893
and dword [ebp - 0x7d4], 0
cmp dword [ebp - 0x7d4], 4
je 0x1000c8ae
mov eax, 0x4289
test eax, eax
jne 0x1000c8ae
and dword [ebp - 0xb5c], 0
jmp 0x1000c8b8
mov dword [ebp - 0xb5c], 1
mov eax, dword [ebp - 0x408]
imul eax, dword [ebp - 0xb5c]
cmp eax, 0xc971
jge 0x1000c8d8
mov dword [ebp - 0x7dc], 1
jmp 0x1000c8df
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 0xc9934b93
jae 0x1000c8f7
mov dword [ebp - 0xa34], 1
jmp 0x1000c8fe
and dword [ebp - 0xa34], 0
push 0
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
mov ecx, dword [ebp - 0xa34]
sub ecx, dword [eax]
mov dword [ebp - 0x45c], ecx
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x88], eax
mov esi, dword [ebp - 0x88]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
cmp esi, dword [eax]
jle 0x1000c949
mov dword [ebp - 0x7e4], 1
jmp 0x1000c950
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
inc eax
cmp eax, 0x567d
jg 0x1000c96a
mov dword [ebp - 0xc74], 1
jmp 0x1000c971
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0xc74]
mov dword [ebp - 0xd9c], eax
push 0
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x4a4]
call fcn.100182ab
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000c4d7
mov dword [ebp - 0x24], 0
jmp 0x1000c9b3
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1000ca35
mov dword [ebp - 0x148], 0
jmp 0x1000c9d2
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jl 0x1000ca16
mov byte [ebp - 0x117], 0
movzx eax, byte [ebp - 0x117]
test eax, eax
je 0x1000c9f5
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000ca14
push 0xc
push 0x1a94
call dword [sym.imp.KERNEL32.dll_Beep]
jmp 0x1000c9c5
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000ca30
push 0
call dword [sym.imp.USER32.dll_DestroyMenu]
jmp 0x1000c9ac
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4a4]
call fcn.100182a6
push 2
lea ecx, [ebp - 0x380]
call fcn.10018221
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x104c], 0x5807c1ab
mov dword [ebp - 0x1048], 0x5807c1ab
mov dword [ebp - 0x1044], 0x5807c1ab
mov dword [ebp - 0x1040], 0x5807c1ab
lea ecx, [ebp - 0x47d]
call fcn.10008e33
push eax
lea eax, [ebp - 0x103c]
push eax
lea eax, [ebp - 0x104c]
push eax
lea ecx, [ebp - 0x140c]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x12f8]
call fcn.10018280
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x824], 0xa772
mov dword [ebp - 0xd54], 0
mov dword [ebp - 0xdac], 0
mov dword [ebp - 0x370], 0
jmp 0x1000caf7
mov eax, dword [ebp - 0x370]
inc eax
mov dword [ebp - 0x370], eax
cmp dword [ebp - 0x370], 2
jge 0x1000cb19
push dword [ebp - 0x370]
lea ecx, [ebp - 0x380]
call fcn.100182ab
mov dword [eax], 0x1928
jmp 0x1000caea
mov dword [ebp - 0x14], 0
jmp 0x1000cb29
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1000cf24
push 1
lea ecx, [ebp - 0xca4]
call fcn.10018221
mov byte [ebp - 4], 0x16
push 2
lea ecx, [ebp - 0xf60]
call fcn.10018221
mov byte [ebp - 4], 0x17
mov dword [ebp - 0xda4], 0xc1d9
mov dword [ebp - 0x30], 0
jmp 0x1000cb6f
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1000cb88
push dword [ebp - 0x30]
lea ecx, [ebp - 0xca4]
call fcn.100182ab
or dword [eax], 0xffffffff
jmp 0x1000cb68
mov dword [ebp - 0x30], 0
jmp 0x1000cb98
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1000cbb4
push dword [ebp - 0x30]
lea ecx, [ebp - 0xf60]
call fcn.100182ab
mov dword [eax], 0xfffffffc
jmp 0x1000cb91
mov dword [ebp - 0x30], 0
jmp 0x1000cbc4
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x1000cbda
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xfb8], 0x4b13b106
jmp 0x1000cbbd
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
push 0
lea ecx, [ebp - 0x380]
call fcn.100182ab
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xca4]
call fcn.100182ab
mov dword [ebp - 0x7ec], eax
push 1
lea ecx, [ebp - 0x380]
call fcn.100182ab
mov ecx, dword [ebp - 0x7ec]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x7ec]
imul esi, dword [eax], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
cmp esi, dword [eax]
je 0x1000cc54
mov dword [ebp - 0xd4c], 1
jmp 0x1000cc5b
and dword [ebp - 0xd4c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
push 0
lea ecx, [ebp - 0xca4]
call fcn.100182ab
cmp dword [eax], 0xffffffff
jge 0x1000cc87
mov dword [ebp - 0xa3c], 1
jmp 0x1000cc8e
and dword [ebp - 0xa3c], 0
mov esi, dword [ebp - 0x14]
imul esi, dword [ebp - 0xa3c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
imul esi, dword [eax]
cmp esi, dword [ebp - 0x14]
jg 0x1000ccba
mov dword [ebp - 0x7f4], 1
jmp 0x1000ccc1
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x718b
jge 0x1000ccd9
mov dword [ebp - 0xb64], 1
jmp 0x1000cce0
and dword [ebp - 0xb64], 0
push 0
lea ecx, [ebp - 0xf60]
call fcn.100182ab
mov ecx, dword [ebp - 0xb64]
mov dword [eax], ecx
mov eax, dword [ebp - 0xda4]
mov dword [ebp - 0x1218], eax
push 0
lea ecx, [ebp - 0xf60]
call fcn.100182ab
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1224], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x7fc], eax
push 0
lea ecx, [ebp - 0x12f8]
call fcn.100182ab
mov ecx, dword [ebp - 0x7fc]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xca4]
call fcn.100182ab
mov ecx, dword [ebp - 0x7fc]
cmp ecx, dword [eax]
jg 0x1000cd58
mov dword [ebp - 0xa44], 1
jmp 0x1000cd5f
and dword [ebp - 0xa44], 0
push 0
lea ecx, [ebp - 0xca4]
call fcn.100182ab
mov ecx, dword [ebp - 0xa44]
cmp ecx, dword [eax]
jl 0x1000cd82
mov dword [ebp - 0x804], 1
jmp 0x1000cd89
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0xcecb
jl 0x1000cda1
mov dword [ebp - 0xc04], 1
jmp 0x1000cda8
and dword [ebp - 0xc04], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xc04], eax
jle 0x1000cdbf
mov dword [ebp - 0x80c], 1
jmp 0x1000cdc6
and dword [ebp - 0x80c], 0
mov esi, dword [ebp - 0x80c]
sub esi, dword [ebp - 0x14]
push 0
lea ecx, [ebp - 0xca4]
call fcn.100182ab
cmp esi, dword [eax]
jge 0x1000cdec
mov dword [ebp - 0xa4c], 1
jmp 0x1000cdf3
and dword [ebp - 0xa4c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfb8]
cmp dword [ebp - 0xa4c], eax
je 0x1000ce14
mov dword [ebp - 0x814], 1
jmp 0x1000ce1b
and dword [ebp - 0x814], 0
cmp dword [ebp - 0x814], 0xd707
jle 0x1000ce35
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
mov ecx, dword [ebp - 0x824]
cmp dword [eax], ecx
jge 0x1000ce59
mov dword [ebp - 0xb6c], 1
jmp 0x1000ce60
and dword [ebp - 0xb6c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xfb8]
cmp dword [ebp - 0xb6c], eax
jg 0x1000ce81
mov dword [ebp - 0x81c], 1
jmp 0x1000ce88
and dword [ebp - 0x81c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0x380]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x81c]
jl 0x1000ceac
mov dword [ebp - 0xa54], 1
jmp 0x1000ceb3
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xd54]
cmp dword [ebp - 0xa54], eax
jl 0x1000cecd
mov dword [ebp - 0xc50], 1
jmp 0x1000ced4
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0x824]
cmp dword [ebp - 0xc50], eax
jle 0x1000ceee
mov dword [ebp - 0x82c], 1
jmp 0x1000cef5
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0xdac], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0xf60]
call fcn.100182a6
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xca4]
call fcn.100182a6
jmp 0x1000cb22
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1000cf48
push 0x2632
push 0x373
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x12f8]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x380]
call fcn.100182a6
mov dword [ebp - 0x1074], 0xf99ff606
mov dword [ebp - 0x1070], 0xf99ff606
mov dword [ebp - 0x106c], 0xf99ff606
mov dword [ebp - 0x1068], 0xf99ff606
lea ecx, [ebp - 0x439]
call fcn.10008e33
push eax
lea eax, [ebp - 0x1064]
push eax
lea eax, [ebp - 0x1074]
push eax
lea ecx, [ebp - 0x1434]
call fcn.100182ba
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x10d4]
call fcn.10018280
mov dword [ebp - 4], 0x18
push 2
lea ecx, [ebp - 0xce4]
call fcn.10018221
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x278], 0
jmp 0x1000cff4
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x1000d016
push dword [ebp - 0x278]
lea ecx, [ebp - 0xce4]
call fcn.100182ab
mov dword [eax], 0x76e6bacd
jmp 0x1000cfe7
push 0
lea ecx, [ebp - 0xce4]
call fcn.100182ab
and dword [eax], 0
jmp 0x1000d04c
push 0
lea ecx, [ebp - 0xce4]
call fcn.100182ab
mov dword [ebp - 0xa5c], eax
mov eax, dword [ebp - 0xa5c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa5c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xce4]
call fcn.100182ab
cmp dword [eax], 3
jg 0x1000d0ca
mov dword [ebp - 0x174], 8
push 0
lea ecx, [ebp - 0xce4]
call fcn.100182ab
push dword [eax]
lea ecx, [ebp - 0x10d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d089
jmp 0x1000d0ca
mov dword [ebp - 0x174], 0
jmp 0x1000d0a2
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jg 0x1000d0c5
push dword [ebp - 0x174]
lea ecx, [ebp - 0x10d4]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d0c3
jmp 0x1000d0c5
jmp 0x1000d095
jmp 0x1000d028
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xce4]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10d4]
call fcn.100182a6
push 3
lea ecx, [ebp - 0x1e0]
call fcn.10018221
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x34], 0x7df2f4a8
push 3
lea ecx, [ebp - 0x10a4]
call fcn.10018221
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0xd60], 0x9e149cff
mov dword [ebp - 0x7c], 0
jmp 0x1000d12e
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1000d14a
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov dword [eax], 0xff0ea75c
jmp 0x1000d127
mov dword [ebp - 0x7c], 0
jmp 0x1000d15a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1000d176
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x10a4]
call fcn.100182ab
mov dword [eax], 0x4b2e809b
jmp 0x1000d153
mov dword [ebp - 0x34], 0
jmp 0x1000d186
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jg 0x1000d3ca
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov esi, eax
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov ecx, dword [esi]
mov dword [eax], ecx
push 2
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d2da
xor eax, eax
jne 0x1000d223
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d1fe
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d1fe
mov dword [ebp - 0xdb4], 1
jmp 0x1000d205
and dword [ebp - 0xdb4], 0
mov esi, dword [ebp - 0x34]
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp esi, dword [eax]
jg 0x1000d223
and dword [ebp - 0x410], 0
jmp 0x1000d22d
mov dword [ebp - 0x410], 1
push 2
lea ecx, [ebp - 0x10a4]
call fcn.100182ab
mov ecx, dword [ebp - 0x410]
mov dword [eax], ecx
cmp dword [ebp - 0x410], 0
jne 0x1000d266
push 2
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
jne 0x1000d266
and dword [ebp - 0x834], 0
jmp 0x1000d270
mov dword [ebp - 0x834], 1
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov ecx, dword [ebp - 0x834]
cmp ecx, dword [eax]
jle 0x1000d294
mov dword [ebp - 0xb74], 1
jmp 0x1000d29b
and dword [ebp - 0xb74], 0
imul eax, dword [ebp - 0xb74], 0x3359
test eax, eax
je 0x1000d2da
push 2
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d2da
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
cmp dword [eax], 0
je 0x1000d2da
mov dword [ebp - 0x83c], 1
jmp 0x1000d2e1
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0x9c25
jle 0x1000d2f9
mov dword [ebp - 0xa64], 1
jmp 0x1000d300
and dword [ebp - 0xa64], 0
cmp dword [ebp - 0xa64], 1
ja 0x1000d315
mov dword [ebp - 0x844], 1
jmp 0x1000d31c
and dword [ebp - 0x844], 0
push 1
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov ecx, dword [ebp - 0x844]
cmp ecx, dword [eax]
jle 0x1000d345
mov eax, 0xe3d4
test eax, eax
jne 0x1000d345
and dword [ebp - 0xc0c], 0
jmp 0x1000d34f
mov dword [ebp - 0xc0c], 1
push 2
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov ecx, dword [ebp - 0xc0c]
add ecx, dword [eax]
cmp ecx, 0x4eb0
jle 0x1000d378
mov dword [ebp - 0x84c], 1
jmp 0x1000d37f
and dword [ebp - 0x84c], 0
push 0
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov eax, dword [eax]
cmp eax, dword [ebp - 0x84c]
jge 0x1000d3a2
mov dword [ebp - 0xa6c], 1
jmp 0x1000d3a9
and dword [ebp - 0xa6c], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x1e0]
call fcn.100182ab
mov ecx, dword [ebp - 0xa6c]
sub ecx, dword [eax]
mov dword [ebp - 0xd60], ecx
jmp 0x1000d17f
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x10a4]
call fcn.100182a6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1e0]
call fcn.100182a6
mov dword [ebp - 0x60], 0xc64a6847
mov dword [ebp - 0x288], 0xbe1552b9
mov dword [ebp - 0x2f8], 0
jmp 0x1000d412
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 1
jge 0x1000d42e
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xd68], 0x738f5859
jmp 0x1000d405
mov dword [ebp - 0x60], 5
jmp 0x1000d43e
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jne 0x1000d74a
mov dword [ebp - 0xd8], 0xffffffff
mov dword [ebp - 0x864], 0xbc9b780f
mov dword [ebp - 0x1228], 0xd976d993
mov dword [ebp - 0x1230], 0xfffffffe
mov dword [ebp - 0x1238], 0xfffffff9
mov dword [ebp - 0x1240], 0xffffffff
mov dword [ebp - 0x1248], 0
mov dword [ebp - 0xd8], 9
jmp 0x1000d4a7
cmp dword [ebp - 0xd8], 0xffffffe5
jg 0x1000d745
mov dword [ebp - 0x85c], 5
push 3
lea ecx, [ebp - 0xf78]
call fcn.10018221
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x280], 0
jmp 0x1000d4eb
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x1000d50d
push dword [ebp - 0x280]
lea ecx, [ebp - 0xf78]
call fcn.100182ab
mov dword [eax], 0xb2f14481
jmp 0x1000d4de
push 2
lea ecx, [ebp - 0xf78]
call fcn.100182ab
cmp dword [eax], 1
je 0x1000d52b
mov dword [ebp - 0x854], 1
jmp 0x1000d532
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x854]
jne 0x1000d549
mov dword [ebp - 0xe30], 1
jmp 0x1000d550
and dword [ebp - 0xe30], 0
cmp dword [ebp - 0x60], 0x39e2
jge 0x1000d565
mov dword [ebp - 0xb7c], 1
jmp 0x1000d56c
and dword [ebp - 0xb7c], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x85c], eax
mov eax, dword [ebp - 0x864]
imul eax, dword [ebp - 0xb7c]
cmp dword [ebp - 0x85c], eax
jge 0x1000d599
mov dword [ebp - 0xa74], 1
jmp 0x1000d5a0
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xa74]
jne 0x1000d5b7
mov dword [ebp - 0xc70], 1
jmp 0x1000d5be
and dword [ebp - 0xc70], 0
mov eax, dword [ebp - 0x864]
cmp dword [ebp - 0xc70], eax
je 0x1000d5d8
mov dword [ebp - 0x86c], 1
jmp 0x1000d5df
and dword [ebp - 0x86c], 0
mov esi, dword [ebp - 0x86c]
sub esi, dword [ebp - 0x60]
push 1
lea ecx, [ebp - 0xf78]
call fcn.100182ab
cmp esi, dword [eax]
jg 0x1000d60e
cmp dword [ebp - 0xd8], 0
je 0x1000d60e
and dword [ebp - 0x458], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x458]
mov dword [ebp + eax - 0xd68], ecx
mov eax, dword [ebp - 0xd8]
sub eax, dword [ebp - 0x458]
jne 0x1000d645
jmp 0x1000d437
mov dword [ebp - 0x288], 0
jmp 0x1000d763
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0x19
je 0x1000d79c
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000d79a
push 0xa17
push 0x1000
push 0x2a7
push 0xc3d
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
jmp 0x1000d756
mov dword [ebp - 0x136c], 4
mov byte [ebp - 0x127], 0
movzx eax, byte [ebp - 0x127]
test eax, eax
je 0x1000d7d1
push 0
push 0x1bed
push 0
push 0x11b0
push 0x26d0
call dword [sym.imp.GDI32.dll_ExtCreatePen]
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x1000d7fe
push 0
push 0x2577
push 0
push 0
push 0x14f6
push 0x2595
call dword [sym.imp.USER32.dll_ToAsciiEx]
mov dword [ebp - 0x17c], 0x8c45cdbe
mov dword [ebp - 0x1b4], 1
push 2
lea ecx, [ebp - 0xf90]
call fcn.10018221
mov dword [ebp - 4], 0x1e
mov dword [ebp - 0xefc], 7
mov dword [ebp - 0x300], 0
jmp 0x1000d849
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x1000d86b
push dword [ebp - 0x300]
lea ecx, [ebp - 0xf90]
call fcn.100182ab
mov dword [eax], 0xffff
jmp 0x1000d83c
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x1b4], eax
mov dword [ebp - 0x1b4], 0xffffffed
jmp 0x1000d890
cmp dword [ebp - 0x1b4], 0x36
jge 0x1000da6f
mov dword [ebp - 0xd70], 0xe9734172
mov dword [ebp - 0x17c], 1
jmp 0x1000d8c0
cmp dword [ebp - 0x17c], 0
jl 0x1000da5f
mov dword [ebp - 0x290], 0
jmp 0x1000d8e6
cmp dword [ebp - 0x290], 4
jge 0x1000d902
cmp dword [ebp - 0xd70], 0
je 0x1000da6a
jmp 0x1000da6f
jmp 0x1000d883
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf90]
call fcn.100182a6
push 1
lea ecx, [ebp - 0x48c]
call fcn.10018221
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x418], 1
mov dword [ebp - 0x8c], 0x52509e71
mov dword [ebp - 0x138], 0xa97f51ef
mov dword [ebp - 0x308], 0
jmp 0x1000dad0
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jge 0x1000daf2
push dword [ebp - 0x308]
lea ecx, [ebp - 0x48c]
call fcn.100182ab
mov dword [eax], 0x91a049fe
jmp 0x1000dac3
mov dword [ebp - 0x20], 0
jmp 0x1000db02
cmp dword [ebp - 0x20], 0
jg 0x1000dfc7