Function at 0x10008e14
Capabilities:
Create process on windows
Get file system object information
Identify system language via api
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10078919
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xee4
push esi
push edi
push 2
lea ecx, [ebp - 0xe4]
call fcn.100170ca
and dword [ebp - 4], 0
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x80], 0
jmp 0x10008e5f
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10008e72
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x18], 0x40d7
jmp 0x10008e58
mov dword [ebp - 0x80], 0
jmp 0x10008e82
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x10008e9e
push dword [ebp - 0x80]
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov dword [eax], 0xfe7d8a87
jmp 0x10008e7b
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
and dword [eax], 0
jmp 0x10008ed4
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov dword [ebp - 0x638], eax
mov eax, dword [ebp - 0x638]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x638]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp dword [eax], 0
jg 0x1000906c
mov dword [ebp - 0x50], 0x5b3b9da4
mov dword [ebp - 0x8c4], 0xf4f88039
mov dword [ebp - 0x920], 0x45cb81ec
mov dword [ebp - 0x50], 0
jmp 0x10008f15
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x10009044
push 6
pop eax
test eax, eax
je 0x10008f38
cmp dword [ebp - 0x50], 0
je 0x10008f38
mov dword [ebp - 0x8b4], 1
jmp 0x10008f3f
and dword [ebp - 0x8b4], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov ecx, dword [ebp - 0x8b4]
cmp ecx, dword [eax]
jle 0x10008f62
mov dword [ebp - 0x8bc], 1
jmp 0x10008f69
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0x1a9c
jg 0x10008f8d
mov dword [ebp - 0x8cc], 1
jmp 0x10008f94
and dword [ebp - 0x8cc], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x18]
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x18]
add eax, dword [ebp - 0x8cc]
cmp esi, eax
jne 0x10008fd0
mov dword [ebp - 0x8d4], 1
jmp 0x10008fd7
and dword [ebp - 0x8d4], 0
cmp dword [ebp - 0x8d4], 0xd621
je 0x10008fef
mov dword [ebp - 0x8dc], 1
jmp 0x10008ff6
and dword [ebp - 0x8dc], 0
cmp dword [ebp - 0x8dc], 0
jne 0x10009011
cmp dword [ebp - 0x50], 0
je 0x10009011
mov dword [ebp - 0x8e4], 1
jmp 0x10009018
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x8e4]
mov dword [ebp - 0x920], eax
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x18], 0
je 0x1000903f
jmp 0x10008f0e
jmp 0x10008f0e
mov dword [ebp - 0x50], 0
jmp 0x10009054
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x10009067
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x18], 0x14af
jmp 0x1000904d
jmp 0x10008eb0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp dword [eax], 0
je 0x1000909c
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp dword [eax], 0
je 0x1000909c
mov dword [ebp - 0x8ec], 1
jmp 0x100090a3
and dword [ebp - 0x8ec], 0
mov esi, dword [ebp - 0x8ec]
sub esi, 4
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp esi, dword [eax]
jg 0x100090d6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x100090d6
mov dword [ebp - 0x8f4], 1
jmp 0x100090dd
and dword [ebp - 0x8f4], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov eax, dword [eax]
cmp eax, dword [ebp - 0x8f4]
jne 0x10009100
mov dword [ebp - 0x8fc], 1
jmp 0x10009107
and dword [ebp - 0x8fc], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp - 0x8fc]
sub esi, dword [ebp + eax - 0x18]
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017168
add esi, dword [eax]
imul esi, esi, 0xfffffff6
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp esi, dword [eax]
jge 0x10009146
mov dword [ebp - 0x904], 1
jmp 0x1000914d
and dword [ebp - 0x904], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
imul eax, dword [ebp - 0x904]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x18]
jle 0x10009176
mov dword [ebp - 0x90c], 1
jmp 0x1000917d
and dword [ebp - 0x90c], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov ecx, dword [ebp - 0x90c]
cmp ecx, dword [eax]
je 0x100091af
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp dword [eax], 0
jne 0x100091af
and dword [ebp - 0x3b8], 0
jmp 0x100091b9
mov dword [ebp - 0x3b8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x3b8], eax
jne 0x100091d7
mov dword [ebp - 0x754], 1
jmp 0x100091de
and dword [ebp - 0x754], 0
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov ecx, dword [ebp - 0x754]
cmp ecx, dword [eax]
jge 0x10009201
mov dword [ebp - 0x3c0], 1
jmp 0x10009208
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0x5fcb4448
jl 0x1000922a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jne 0x1000922a
and dword [ebp - 0x368], 0
jmp 0x10009234
mov dword [ebp - 0x368], 1
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov ecx, dword [ebp - 0x368]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x368], eax
jle 0x10009267
mov dword [ebp - 0x75c], 1
jmp 0x1000926e
and dword [ebp - 0x75c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x75c]
sub ecx, dword [ebp + eax - 0x18]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x18]
jge 0x10009296
mov dword [ebp - 0x3c8], 1
jmp 0x1000929d
and dword [ebp - 0x3c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp eax, dword [ebp - 0x3c8]
jg 0x100092cd
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp dword [eax], 0
je 0x100092cd
mov dword [ebp - 0x764], 1
jmp 0x100092d4
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x370], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp - 0x370], eax
je 0x10009304
cmp dword [ebp - 0x370], 0
jne 0x10009304
and dword [ebp - 0x998], 0
jmp 0x1000930e
mov dword [ebp - 0x998], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0xcb8], eax
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x18]
cmp dword [eax], ecx
jg 0x10009528
mov dword [ebp - 0x160], 0x6722525a
mov dword [ebp - 0x3d8], 9
push 3
lea ecx, [ebp - 0xbc8]
call fcn.100170ca
mov byte [ebp - 4], 1
mov dword [ebp - 0xa8], 0
jmp 0x1000937b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x10009397
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x9a0], 0xe3649e8e
jmp 0x1000936e
mov dword [ebp - 0xa8], 0
jmp 0x100093b0
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x100093d2
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xbc8]
call fcn.10017168
mov dword [eax], 0xfffffffa
jmp 0x100093a3
cmp dword [ebp - 0x160], 0xf910
jg 0x100093ea
mov dword [ebp - 0x3d0], 1
jmp 0x100093f1
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x3d0], eax
jle 0x1000940b
mov dword [ebp - 0x76c], 1
jmp 0x10009412
and dword [ebp - 0x76c], 0
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov eax, dword [eax]
imul eax, dword [ebp - 0x76c]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x3d8], eax
jne 0x10009448
mov dword [ebp - 0x774], 1
jmp 0x1000944f
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x774], eax
jne 0x10009469
mov dword [ebp - 0x3e0], 1
jmp 0x10009470
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x3e0], eax
jl 0x1000948a
mov dword [ebp - 0x77c], 1
jmp 0x10009491
and dword [ebp - 0x77c], 0
mov esi, dword [ebp - 0x77c]
inc esi
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xe4]
call fcn.10017168
cmp esi, dword [eax]
jle 0x100094c4
mov dword [ebp - 0x378], 1
jmp 0x100094cb
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x378]
mov dword [ebp + eax - 0x9a0], ecx
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x378]
jl 0x100094f8
mov dword [ebp - 0x3e8], 1
jmp 0x100094ff
and dword [ebp - 0x3e8], 0
push 2
lea ecx, [ebp - 0xbc8]
call fcn.10017168
mov ecx, dword [ebp - 0x3e8]
mov dword [eax], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbc8]
call fcn.1001714c
jmp 0x100095b4
mov dword [ebp - 0xa04], 0x4efd0e68
mov dword [ebp - 0x24c], 0
jmp 0x1000954b
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x10009567
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xe78], 0x580973f9
jmp 0x1000953e
cmp dword [ebp - 0xa04], 0
jne 0x10009582
mov eax, 0x39fb
test eax, eax
jne 0x10009582
and dword [ebp - 0x33c], 0
jmp 0x1000958c
mov dword [ebp - 0x33c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax - 0xe78], ecx
push 1
lea ecx, [ebp - 0xe4]
call fcn.10017168
mov ecx, dword [ebp - 0x33c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.1001714c
push 2
lea ecx, [ebp - 0xd8]
call fcn.100170ca
mov dword [ebp - 4], 2
mov dword [ebp - 0x37c], 1
mov dword [ebp - 0x88], 0
jmp 0x100095fa
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10009613
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x10], 0x40d7
jmp 0x100095ed
mov dword [ebp - 0x88], 0
jmp 0x1000962c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000964e
push dword [ebp - 0x88]
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov dword [eax], 0xfe7d8a87
jmp 0x1000961f
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
and dword [eax], 0
jmp 0x10009684
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov dword [ebp - 0x784], eax
mov eax, dword [ebp - 0x784]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x784]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp dword [eax], 0
jg 0x1000981c
mov dword [ebp - 0x3c], 0x5b3b9da4
mov dword [ebp - 0x3f8], 0xf4f88039
mov dword [ebp - 0xa0c], 0x45cb81ec
mov dword [ebp - 0x3c], 0
jmp 0x100096c5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x100097f4
push 6
pop eax
test eax, eax
je 0x100096e8
cmp dword [ebp - 0x3c], 0
je 0x100096e8
mov dword [ebp - 0x3f0], 1
jmp 0x100096ef
and dword [ebp - 0x3f0], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov ecx, dword [ebp - 0x3f0]
cmp ecx, dword [eax]
jle 0x10009712
mov dword [ebp - 0x78c], 1
jmp 0x10009719
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0x1a9c
jg 0x1000973d
mov dword [ebp - 0x794], 1
jmp 0x10009744
and dword [ebp - 0x794], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x10]
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x10]
add eax, dword [ebp - 0x794]
cmp esi, eax
jne 0x10009780
mov dword [ebp - 0x400], 1
jmp 0x10009787
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0xd621
je 0x1000979f
mov dword [ebp - 0x79c], 1
jmp 0x100097a6
and dword [ebp - 0x79c], 0
cmp dword [ebp - 0x79c], 0
jne 0x100097c1
cmp dword [ebp - 0x3c], 0
je 0x100097c1
mov dword [ebp - 0x408], 1
jmp 0x100097c8
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
mov dword [ebp - 0xa0c], eax
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x10], 0
je 0x100097ef
jmp 0x100096be
jmp 0x100096be
mov dword [ebp - 0x3c], 0
jmp 0x10009804
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x10009817
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x10], 0x14af
jmp 0x100097fd
jmp 0x10009660
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp dword [eax], 0
je 0x1000984c
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp dword [eax], 0
je 0x1000984c
mov dword [ebp - 0x7a4], 1
jmp 0x10009853
and dword [ebp - 0x7a4], 0
mov esi, dword [ebp - 0x7a4]
sub esi, 4
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp esi, dword [eax]
jg 0x10009886
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
je 0x10009886
mov dword [ebp - 0x410], 1
jmp 0x1000988d
and dword [ebp - 0x410], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov eax, dword [eax]
cmp eax, dword [ebp - 0x410]
jne 0x100098b0
mov dword [ebp - 0x7ac], 1
jmp 0x100098b7
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp - 0x7ac]
sub esi, dword [ebp + eax - 0x10]
push 1
lea ecx, [ebp - 0xd8]
call fcn.10017168
add esi, dword [eax]
imul esi, esi, 0xfffffff6
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp esi, dword [eax]
jge 0x100098f6
mov dword [ebp - 0x418], 1
jmp 0x100098fd
and dword [ebp - 0x418], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
imul eax, dword [ebp - 0x418]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x10]
jle 0x10009926
mov dword [ebp - 0x7b4], 1
jmp 0x1000992d
and dword [ebp - 0x7b4], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov ecx, dword [ebp - 0x7b4]
cmp ecx, dword [eax]
je 0x1000995f
push 1
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp dword [eax], 0
jne 0x1000995f
and dword [ebp - 0x420], 0
jmp 0x10009969
mov dword [ebp - 0x420], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x420], eax
jne 0x10009987
mov dword [ebp - 0x7bc], 1
jmp 0x1000998e
and dword [ebp - 0x7bc], 0
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov ecx, dword [ebp - 0x7bc]
cmp ecx, dword [eax]
jge 0x100099b1
mov dword [ebp - 0x428], 1
jmp 0x100099b8
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0x5fcb4448
jl 0x100099da
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10], 0
jne 0x100099da
and dword [ebp - 0x2fc], 0
jmp 0x100099e4
mov dword [ebp - 0x2fc], 1
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov ecx, dword [ebp - 0x2fc]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x2fc], eax
jle 0x10009a17
mov dword [ebp - 0x7c4], 1
jmp 0x10009a1e
and dword [ebp - 0x7c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7c4]
sub ecx, dword [ebp + eax - 0x10]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x10]
jge 0x10009a46
mov dword [ebp - 0x430], 1
jmp 0x10009a4d
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp eax, dword [ebp - 0x430]
jg 0x10009a7d
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp dword [eax], 0
je 0x10009a7d
mov dword [ebp - 0x7cc], 1
jmp 0x10009a84
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
cmp dword [ebp - 0x37c], eax
je 0x10009ab4
cmp dword [ebp - 0x37c], 0
jne 0x10009ab4
and dword [ebp - 0xa14], 0
jmp 0x10009abe
mov dword [ebp - 0xa14], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10]
mov dword [ebp - 0xc9c], eax
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x10]
cmp dword [eax], ecx
jg 0x10009cd8
mov dword [ebp - 0x178], 0x6722525a
mov dword [ebp - 0x440], 9
push 3
lea ecx, [ebp - 0xbe0]
call fcn.100170ca
mov byte [ebp - 4], 3
mov dword [ebp - 0xb4], 0
jmp 0x10009b2b
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x10009b47
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xa1c], 0xe3649e8e
jmp 0x10009b1e
mov dword [ebp - 0xb4], 0
jmp 0x10009b60
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x10009b82
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xbe0]
call fcn.10017168
mov dword [eax], 0xfffffffa
jmp 0x10009b53
cmp dword [ebp - 0x178], 0xf910
jg 0x10009b9a
mov dword [ebp - 0x438], 1
jmp 0x10009ba1
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x438], eax
jle 0x10009bbb
mov dword [ebp - 0x7d4], 1
jmp 0x10009bc2
and dword [ebp - 0x7d4], 0
push 1
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov eax, dword [eax]
imul eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x440], eax
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x440], eax
jne 0x10009bf8
mov dword [ebp - 0x7dc], 1
jmp 0x10009bff
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x7dc], eax
jne 0x10009c19
mov dword [ebp - 0x448], 1
jmp 0x10009c20
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x448], eax
jl 0x10009c3a
mov dword [ebp - 0x7e4], 1
jmp 0x10009c41
and dword [ebp - 0x7e4], 0
mov esi, dword [ebp - 0x7e4]
inc esi
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xd8]
call fcn.10017168
cmp esi, dword [eax]
jle 0x10009c74
mov dword [ebp - 0x304], 1
jmp 0x10009c7b
and dword [ebp - 0x304], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x304]
mov dword [ebp + eax - 0xa1c], ecx
mov eax, dword [ebp - 0x178]
cmp eax, dword [ebp - 0x304]
jl 0x10009ca8
mov dword [ebp - 0x450], 1
jmp 0x10009caf
and dword [ebp - 0x450], 0
push 2
lea ecx, [ebp - 0xbe0]
call fcn.10017168
mov ecx, dword [ebp - 0x450]
mov dword [eax], ecx
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xbe0]
call fcn.1001714c
jmp 0x10009d64
mov dword [ebp - 0xa24], 0x4efd0e68
mov dword [ebp - 0x244], 0
jmp 0x10009cfb
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 3
jge 0x10009d17
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xe90], 0x580973f9
jmp 0x10009cee
cmp dword [ebp - 0xa24], 0
jne 0x10009d32
mov eax, 0x39fb
test eax, eax
jne 0x10009d32
and dword [ebp - 0x344], 0
jmp 0x10009d3c
mov dword [ebp - 0x344], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0xe90], ecx
push 1
lea ecx, [ebp - 0xd8]
call fcn.10017168
mov ecx, dword [ebp - 0x344]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd8]
call fcn.1001714c
mov dword [ebp - 0x1b8], 0xfffffffe
push 4
lea ecx, [ebp - 0xa88]
call fcn.100170ca
mov dword [ebp - 4], 4
mov dword [ebp - 0x1bc], 0
jmp 0x10009daa
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 4
jge 0x10009dcc
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xa88]
call fcn.10017168
mov dword [eax], 2
jmp 0x10009d9d
mov dword [ebp - 0x1b8], 0
jmp 0x10009de5
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 9
jl 0x10009efa
mov dword [ebp - 0x58], 9
mov dword [ebp - 0x58], 3
jmp 0x10009e09
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10009e97
mov dword [ebp - 0x238], 0xf82ff40f
mov dword [ebp - 0x238], 0
jmp 0x10009e36
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jg 0x10009e7d
mov byte [ebp - 0x14a], 0
movzx eax, byte [ebp - 0x14a]
test eax, eax
je 0x10009e59
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
push dword [ebp - 0x58]
lea ecx, [ebp - 0xa88]
call fcn.10017168
mov esi, eax
push dword [ebp - 0x58]
lea ecx, [ebp - 0xa88]
call fcn.10017168
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x10009e29
push dword [ebp - 0x58]
lea ecx, [ebp - 0xa88]
call fcn.10017168
cmp dword [eax], 0
je 0x10009e92
jmp 0x10009e97
jmp 0x10009e02
mov dword [ebp - 0x58], 0xfffffffb
jmp 0x10009ea7
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xfffffff0
jle 0x10009ef5
mov dword [ebp - 0x1c0], 0x35e1f6f0
mov dword [ebp - 0x1c0], 0
jmp 0x10009ed0
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jg 0x10009ef3
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x10009ef1
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
jmp 0x10009ec3
jmp 0x10009ea0
jmp 0x10009dd8
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa88]
call fcn.1001714c
push 3
lea ecx, [ebp - 0x8a8]
call fcn.100170ca
mov dword [ebp - 4], 5
mov dword [ebp - 0x174], 0xe1879501
mov dword [ebp - 0x1d0], 0xb7f609b2
mov dword [ebp - 0x120], 0x85ea6eda
mov dword [ebp - 0x240], 1
mov dword [ebp - 0x278], 0
jmp 0x10009f5e
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x10009f7d
push dword [ebp - 0x278]
lea ecx, [ebp - 0x8a8]
call fcn.10017168
or dword [eax], 0xffffffff
jmp 0x10009f51
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0x174]
mov ecx, 0xda22
sub ecx, dword [ebp - 0x1d0]
add eax, ecx
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x120], eax
jne 0x10009fce
cmp dword [ebp - 0x174], 0
jne 0x10009fce
and dword [ebp - 0x7ec], 0
jmp 0x10009fd8
mov dword [ebp - 0x7ec], 1
mov eax, dword [ebp - 0x7ec]
neg eax
je 0x10009ff3
or eax, 0xffffffff
je 0x10009ff3
mov dword [ebp - 0x458], 1
jmp 0x10009ffa
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x458], eax
je 0x1000a014
mov dword [ebp - 0x7f4], 1
jmp 0x1000a01b
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x842f88d9
jbe 0x1000a033
mov dword [ebp - 0x460], 1
jmp 0x1000a03a
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x240], eax
push 1
lea ecx, [ebp - 0x8a8]
call fcn.10017168
mov dword [eax], 0x2135
mov eax, 0xf51ae9a0
neg eax
cmp eax, 0x2135
je 0x1000a1de
mov dword [ebp - 0x30c], 0xcd4a
xor esi, esi
inc esi
sub esi, dword [ebp - 0x30c]
push 1
lea ecx, [ebp - 0x8a8]
call fcn.10017168
cmp esi, dword [eax]
jl 0x1000a09b
mov dword [ebp - 0x7fc], 1
jmp 0x1000a0a2
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
add eax, 0xf95e
cmp eax, 0xf4c6
jge 0x1000a0c7
push 0xfffffffffffffffe
pop eax
test eax, eax
je 0x1000a0c7
mov dword [ebp - 0x468], 1
jmp 0x1000a0ce
and dword [ebp - 0x468], 0
mov esi, dword [ebp - 0x468]
add esi, 0x5a165f5c
push 1
lea ecx, [ebp - 0x8a8]
call fcn.10017168
cmp esi, dword [eax]
jge 0x1000a0f7
mov dword [ebp - 0x804], 1
jmp 0x1000a0fe
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x120], eax
mov esi, dword [ebp - 0x120]
push 1
lea ecx, [ebp - 0x8a8]
call fcn.10017168
sub esi, dword [eax]
push 2
lea ecx, [ebp - 0x8a8]
call fcn.10017168
cmp esi, dword [eax]
jg 0x1000a13c
mov dword [ebp - 0x470], 1
jmp 0x1000a143
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x30c]
imul eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x174]
jge 0x1000a164
mov dword [ebp - 0x80c], 1
jmp 0x1000a16b
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 0
jne 0x1000a180
mov dword [ebp - 0x478], 1
jmp 0x1000a187
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0
jg 0x1000a1a2
cmp dword [ebp - 0x30c], 0
jne 0x1000a1a2
and dword [ebp - 0x814], 0
jmp 0x1000a1ac
mov dword [ebp - 0x814], 1
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x240], eax
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x1000a1d9
push 0
push 0x209d
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x1000a339
mov dword [ebp - 0x298], 0xc588cb5c
mov dword [ebp - 0x1c8], 0
jmp 0x1000a201
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 4
jge 0x1000a21d
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xef0], 0x830af36e
jmp 0x1000a1f4
push 0
lea ecx, [ebp - 0x8a8]
call fcn.10017168
cmp dword [eax], 0xc718
jle 0x1000a23e
mov dword [ebp - 0x480], 1
jmp 0x1000a245
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x240], eax
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0x240], eax
je 0x1000a26b
mov dword [ebp - 0x81c], 1
jmp 0x1000a272
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0xc518
jne 0x1000a28a
mov dword [ebp - 0x488], 1
jmp 0x1000a291
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x298]
sub eax, dword [ebp - 0x298]
cmp eax, dword [ebp - 0x488]
jg 0x1000a2b1
mov dword [ebp - 0xa2c], 1
jmp 0x1000a2b8
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0x1d0], 0
jne 0x1000a2f5
push 0xfffffffffffffffb
pop eax
test eax, eax
jne 0x1000a2f5
and dword [ebp - 0x824], 0
jmp 0x1000a2ff
mov dword [ebp - 0x824], 1
mov eax, dword [ebp - 0x298]
imul eax, dword [ebp - 0x824]
cmp eax, 0x926a
jl 0x1000a31f
mov dword [ebp - 0x490], 1
jmp 0x1000a326
and dword [ebp - 0x490], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x490]
mov dword [ebp + eax - 0xef0], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a8]
call fcn.1001714c
push 2
lea ecx, [ebp - 0xcc]
call fcn.100170ca
mov dword [ebp - 4], 6
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0x513244d5
mov dword [ebp - 0xa58], 0xa3b2b4b2
mov dword [ebp - 0x4d8], 1
mov dword [ebp - 0xa60], 1
mov dword [ebp - 0x90], 0
jmp 0x1000a3a1
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000a3bd
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x128], 0x6834
jmp 0x1000a394
mov dword [ebp - 0x90], 0
jmp 0x1000a3d6
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000a3f2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xea8], 0xc6516eae
jmp 0x1000a3c9
mov dword [ebp - 0x40], 0
jmp 0x1000a402
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jg 0x1000a715
mov dword [ebp - 0xb0], 0x9ea9831
mov dword [ebp - 0xb0], 0
jmp 0x1000a42f
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x1000a6d4
push 1
lea ecx, [ebp - 0xae0]
call fcn.100170ca
mov byte [ebp - 4], 7
mov dword [ebp - 0x83c], 0x6986
mov dword [ebp - 0x1d8], 0
jmp 0x1000a470
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1000a492
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xae0]
call fcn.10017168
mov dword [eax], 0x3eb60693
jmp 0x1000a463
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb0]
mov eax, dword [ebp + eax*4 - 0x128]
sub eax, dword [ebp + ecx*4 - 0x128]
mov dword [ebp - 0x82c], eax
push 0
lea ecx, [ebp - 0xae0]
call fcn.10017168
mov ecx, dword [ebp - 0x82c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x44], 0
jmp 0x1000a4e0
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1000a6c0
mov dword [ebp - 0x248], 0x702377d6
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x248]
add eax, dword [ebp - 0x83c]
cmp eax, 0x91a8
jg 0x1000a51c
mov dword [ebp - 0x498], 1
jmp 0x1000a523
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0
jge 0x1000a538
mov dword [ebp - 0xa40], 1
jmp 0x1000a53f
and dword [ebp - 0xa40], 0
push 0
lea ecx, [ebp - 0xae0]
call fcn.10017168
cmp dword [eax], 0xfffffffb
jbe 0x1000a55d
mov dword [ebp - 0x834], 1
jmp 0x1000a564
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0xb0]
cmp eax, dword [ebp - 0x834]
jne 0x1000a57e
mov dword [ebp - 0x4a0], 1
jmp 0x1000a585
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x4a0]
cmp eax, 0xfffffffd
je 0x1000a5a0
mov dword [ebp - 0x4a8], 1
jmp 0x1000a5a7
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x83c]
imul eax, dword [ebp - 0x4a8]
test eax, eax
jne 0x1000a5ca
mov eax, 0xcedda565
test eax, eax
jne 0x1000a5ca
and dword [ebp - 0x4b0], 0
jmp 0x1000a5d4
mov dword [ebp - 0x4b0], 1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0x128]
mov dword [ebp - 0x844], eax
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0x844]
mov dword [ebp + eax*4 - 0x128], ecx
mov eax, dword [ebp - 0x844]
cmp eax, dword [ebp - 0x4b0]
jg 0x1000a611
mov dword [ebp - 0x84c], 1
jmp 0x1000a618
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 1
jae 0x1000a636
cmp dword [ebp - 0x248], 0
je 0x1000a636
mov dword [ebp - 0x4b8], 1
jmp 0x1000a63d
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x4b8], eax
jl 0x1000a657
mov dword [ebp - 0x854], 1
jmp 0x1000a65e
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
sub eax, 0x2efe8e60
cmp eax, 0xfffffffb
je 0x1000a67a
mov dword [ebp - 0x4c0], 1
jmp 0x1000a681
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x248]
cmp dword [ebp - 0x4c0], eax
jl 0x1000a6a5
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0x128], 0
jne 0x1000a6a5
and dword [ebp - 0x85c], 0
jmp 0x1000a6af
mov dword [ebp - 0x85c], 1
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x248], eax
jmp 0x1000a4d9
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xae0]
call fcn.1001714c
jmp 0x1000a422
mov dword [ebp - 0x44], 0
jmp 0x1000a6e4
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xa
jge 0x1000a710
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000a70e
push 0x1ae2
push 0x1a9c
push 0
call dword [sym.imp.USER32.dll_CheckMenuItem]
jmp 0x1000a6dd
jmp 0x1000a3fb
mov dword [ebp - 0x40], 0
jmp 0x1000a725
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffff6
je 0x1000a849
mov dword [ebp - 0x17c], 0xfffffff9
mov dword [ebp - 0xa50], 0xd0d8167e
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xea8], 1
xor eax, eax
inc eax
je 0x1000a76b
cmp dword [ebp - 0x44], 0
je 0x1000a76b
mov dword [ebp - 0xa48], 1
jmp 0x1000a772
and dword [ebp - 0xa48], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
add eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x17c]
jg 0x1000a799
mov dword [ebp - 0x4c8], 1
jmp 0x1000a7a0
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x4c8], eax
je 0x1000a7ba
mov dword [ebp - 0x864], 1
jmp 0x1000a7c1
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x864]
sub eax, dword [ebp - 0x17c]
cmp eax, 1
jg 0x1000a7de
mov dword [ebp - 0x4d0], 1
jmp 0x1000a7e5
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x4d0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x128]
jge 0x1000a81b
mov eax, 0x8e8bf325
test eax, eax
jne 0x1000a81b
cmp dword [ebp - 0xa50], 0
jne 0x1000a81b
and dword [ebp - 0x86c], 0
jmp 0x1000a825
mov dword [ebp - 0x86c], 1
mov eax, dword [ebp - 0xa58]
imul eax, dword [ebp - 0x86c]
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
mov dword [ebp - 0xa60], eax
jmp 0x1000a71e
mov dword [ebp - 0x314], 1
push 4
lea ecx, [ebp - 0x2d8]
call fcn.100170ca
mov byte [ebp - 4], 8
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x16c], 4
mov dword [ebp - 0xa78], 0
mov dword [ebp - 0x92c], 0x497a847e
mov dword [ebp - 0x1e0], 0
jmp 0x1000a8ac
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 4
jge 0x1000a8ce
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov dword [eax], 0xf57a7c2
jmp 0x1000a89f
mov dword [ebp - 0x188], 0xfffffffc
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov ecx, dword [ebp - 0x74]
cmp dword [eax], ecx
jg 0x1000a8f8
mov dword [ebp - 0x874], 1
jmp 0x1000a8ff
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0x874]
mov dword [ebp - 0x188], eax
mov esi, dword [ebp - 0x188]
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
cmp esi, dword [eax]
jle 0x1000a937
mov eax, 0xdc53
test eax, eax
je 0x1000a937
mov dword [ebp - 0x4e0], 1
jmp 0x1000a93e
and dword [ebp - 0x4e0], 0
push 3
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov esi, dword [eax]
add esi, dword [ebp - 0x4e0]
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
cmp esi, dword [eax]
je 0x1000a970
mov dword [ebp - 0xa68], 1
jmp 0x1000a977
and dword [ebp - 0xa68], 0
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov ecx, dword [ebp - 0x74]
add ecx, dword [eax]
je 0x1000aa1e
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x1000a9c2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_DeleteDC]
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x1000aa19
push 0x21e4
push 0x190e
push 0xcb
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x563
push 0xae6
push 0x8d4
push 0x1932
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_BitBlt]
jmp 0x1000abbf
mov dword [ebp - 0x98], 0xfffffff6
mov dword [ebp - 0x990], 3
mov dword [ebp - 0x280], 0
jmp 0x1000aa4b
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1000aa67
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xcc0], 0xfffffffe
jmp 0x1000aa3e
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0x98]
add eax, 0x48bb
je 0x1000aa9e
cmp dword [ebp - 0x74], 0
je 0x1000aa9e
mov dword [ebp - 0x87c], 1
jmp 0x1000aaa5
and dword [ebp - 0x87c], 0
cmp dword [ebp - 0x87c], 0xe3a4c638
ja 0x1000aabd
mov dword [ebp - 0x4e8], 1
jmp 0x1000aac4
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x8169c147
je 0x1000aadc
mov dword [ebp - 0x884], 1
jmp 0x1000aae3
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
sub eax, 0xf3b0
imul eax, dword [ebp - 0x98]
cmp eax, 1
jle 0x1000ab06
mov dword [ebp - 0x4f0], 1
jmp 0x1000ab0d
and dword [ebp - 0x4f0], 0
mov eax, 0x6dfc9b99
sub eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x16c]
jl 0x1000ab32
cmp dword [ebp - 0x74], 0
je 0x1000ab32
mov dword [ebp - 0xa70], 1
jmp 0x1000ab39
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0x16c], 0
jmp 0x1000ab5e
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 3
jg 0x1000abbf
mov dword [ebp - 0x88c], 5
mov eax, dword [ebp - 0x88c]
inc eax
mov dword [ebp - 0x88c], eax
mov dword [ebp - 0x98], 0
jmp 0x1000ab97
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jg 0x1000abbd
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xcc0], 7
mov dword [ebp - 0x990], 7
jmp 0x1000ab8a
jmp 0x1000ab51
mov dword [ebp - 0x74], 0x1b
jmp 0x1000abcf
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1000ae67
mov dword [ebp - 0x1e8], 0x81b2706
mov dword [ebp - 0x708], 6
mov dword [ebp - 0xb68], 0xdfef28ed
mov dword [ebp - 0xb64], 0xdfef28ed
mov dword [ebp - 0xb60], 0xdfef28ed
mov dword [ebp - 0xb5c], 0xdfef28ed
lea ecx, [ebp - 0x35d]
call fcn.10008bd3
push eax
lea eax, [ebp - 0xb58]
push eax
lea eax, [ebp - 0xb68]
push eax
lea ecx, [ebp - 0xeb0]
call fcn.10017177
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xccc]
call fcn.10017126
mov byte [ebp - 4], 9
push 2
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov ecx, dword [ebp - 0x1e8]
cmp dword [eax], ecx
jl 0x1000ac71
mov dword [ebp - 0x894], 1
jmp 0x1000ac78
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x74]
cmp eax, dword [ebp - 0x894]
je 0x1000ac8f
mov dword [ebp - 0x890], 1
jmp 0x1000ac96
and dword [ebp - 0x890], 0
mov dword [ebp - 0x708], 0xfffffffb
cmp dword [ebp - 0x708], 0
je 0x1000acbe
cmp dword [ebp - 0x188], 0
je 0x1000acbe
mov dword [ebp - 0x508], 1
jmp 0x1000acc5
and dword [ebp - 0x508], 0
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov eax, dword [eax]
sub eax, dword [ebp - 0x508]
cmp eax, 0x6b495482
jl 0x1000aced
mov dword [ebp - 0x8f0], 1
jmp 0x1000acf4
and dword [ebp - 0x8f0], 0
cmp dword [ebp - 0x8f0], 0x4a3a
je 0x1000ad0c
mov dword [ebp - 0x510], 1
jmp 0x1000ad13
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
sub eax, 0x7b8a
je 0x1000ad35
cmp dword [ebp - 0x16c], 0
je 0x1000ad35
mov dword [ebp - 0x710], 1
jmp 0x1000ad3c
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x710]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x518], eax
push 0
lea ecx, [ebp - 0xccc]
call fcn.10017168
mov ecx, dword [ebp - 0x518]
mov dword [eax], ecx
cmp dword [ebp - 0x518], 0
jne 0x1000ad8d
push 0
lea ecx, [ebp - 0x2d8]
call fcn.10017168
cmp dword [eax], 0
jne 0x1000ad8d
and dword [ebp - 0x810], 0
jmp 0x1000ad97
mov dword [ebp - 0x810], 1
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x810], eax
jle 0x1000adb1
mov dword [ebp - 0x520], 1
jmp 0x1000adb8
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x520], eax
jg 0x1000add2
mov dword [ebp - 0x718], 1
jmp 0x1000add9
and dword [ebp - 0x718], 0
push 3
lea ecx, [ebp - 0x2d8]
call fcn.10017168
mov ecx, dword [ebp - 0x718]
cmp ecx, dword [eax]
je 0x1000adfc
mov dword [ebp - 0x528], 1
jmp 0x1000ae03
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
add eax, 0x579ab673
cmp eax, 0xffffffff
jne 0x1000ae1f
mov dword [ebp - 0x530], 1
jmp 0x1000ae26
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x890]
cmp eax, dword [ebp - 0x530]
jg 0x1000ae40
mov dword [ebp - 0x720], 1
jmp 0x1000ae47
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x92c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xccc]
call fcn.1001714c
jmp 0x1000abc8
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d8]
call fcn.1001714c
mov dword [ebp - 0xa0], 0
jmp 0x1000ae8f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1000aea8
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x14], 0x40d7
jmp 0x1000ae82
mov dword [ebp - 0xa0], 0
jmp 0x1000aec1
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x1000aee3
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov dword [eax], 0xfe7d8a87
jmp 0x1000aeb4
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
and dword [eax], 0
jmp 0x1000af19
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov dword [ebp - 0x538], eax
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x538]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp dword [eax], 0
jg 0x1000b0b1
mov dword [ebp - 0x4c], 0x5b3b9da4
mov dword [ebp - 0x728], 0xf4f88039
mov dword [ebp - 0xa74], 0x45cb81ec
mov dword [ebp - 0x4c], 0
jmp 0x1000af5a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x1000b089
push 6
pop eax
test eax, eax
je 0x1000af7d
cmp dword [ebp - 0x4c], 0
je 0x1000af7d
mov dword [ebp - 0x818], 1
jmp 0x1000af84
and dword [ebp - 0x818], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov ecx, dword [ebp - 0x818]
cmp ecx, dword [eax]
jle 0x1000afa7
mov dword [ebp - 0x540], 1
jmp 0x1000afae
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x728], eax
cmp dword [ebp - 0x728], 0x1a9c
jg 0x1000afd2
mov dword [ebp - 0x548], 1
jmp 0x1000afd9
and dword [ebp - 0x548], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov eax, dword [eax]
mov esi, dword [ebp + eax*4 - 0x14]
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x14]
add eax, dword [ebp - 0x548]
cmp esi, eax
jne 0x1000b015
mov dword [ebp - 0x8d8], 1
jmp 0x1000b01c
and dword [ebp - 0x8d8], 0
cmp dword [ebp - 0x8d8], 0xd621
je 0x1000b034
mov dword [ebp - 0x550], 1
jmp 0x1000b03b
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 0
jne 0x1000b056
cmp dword [ebp - 0x4c], 0
je 0x1000b056
mov dword [ebp - 0x730], 1
jmp 0x1000b05d
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0xa74], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x14], 0
je 0x1000b084
jmp 0x1000af53
jmp 0x1000af53
mov dword [ebp - 0x4c], 0
jmp 0x1000b099
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1000b0ac
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x14], 0x14af
jmp 0x1000b092
jmp 0x1000aef5
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp dword [eax], 0
je 0x1000b0e1
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp dword [eax], 0
je 0x1000b0e1
mov dword [ebp - 0x558], 1
jmp 0x1000b0e8
and dword [ebp - 0x558], 0
mov esi, dword [ebp - 0x558]
sub esi, 4
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp esi, dword [eax]
jg 0x1000b11b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x1000b11b
mov dword [ebp - 0x820], 1
jmp 0x1000b122
and dword [ebp - 0x820], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov eax, dword [eax]
cmp eax, dword [ebp - 0x820]
jne 0x1000b145
mov dword [ebp - 0x560], 1
jmp 0x1000b14c
and dword [ebp - 0x560], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp - 0x560]
sub esi, dword [ebp + eax - 0x14]
push 1
lea ecx, [ebp - 0xcc]
call fcn.10017168
add esi, dword [eax]
imul esi, esi, 0xfffffff6
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp esi, dword [eax]
jge 0x1000b18b
mov dword [ebp - 0x738], 1
jmp 0x1000b192
and dword [ebp - 0x738], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
imul eax, dword [ebp - 0x738]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jle 0x1000b1bb
mov dword [ebp - 0x568], 1
jmp 0x1000b1c2
and dword [ebp - 0x568], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov ecx, dword [ebp - 0x568]
cmp ecx, dword [eax]
je 0x1000b1f4
push 1
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp dword [eax], 0
jne 0x1000b1f4
and dword [ebp - 0x898], 0
jmp 0x1000b1fe
mov dword [ebp - 0x898], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x898], eax
jne 0x1000b21c
mov dword [ebp - 0x570], 1
jmp 0x1000b223
and dword [ebp - 0x570], 0
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov ecx, dword [ebp - 0x570]
cmp ecx, dword [eax]
jge 0x1000b246
mov dword [ebp - 0x740], 1
jmp 0x1000b24d
and dword [ebp - 0x740], 0
cmp dword [ebp - 0x740], 0x5fcb4448
jl 0x1000b26f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x1000b26f
and dword [ebp - 0x364], 0
jmp 0x1000b279
mov dword [ebp - 0x364], 1
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov ecx, dword [ebp - 0x364]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x364], eax
jle 0x1000b2ac
mov dword [ebp - 0x578], 1
jmp 0x1000b2b3
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x578]
sub ecx, dword [ebp + eax - 0x14]
push 4
pop eax
imul eax, eax, 0
cmp ecx, dword [ebp + eax - 0x14]
jge 0x1000b2db
mov dword [ebp - 0x828], 1
jmp 0x1000b2e2
and dword [ebp - 0x828], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp eax, dword [ebp - 0x828]
jg 0x1000b312
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp dword [eax], 0
je 0x1000b312
mov dword [ebp - 0x580], 1
jmp 0x1000b319
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x314], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x314], eax
je 0x1000b349
cmp dword [ebp - 0x314], 0
jne 0x1000b349
and dword [ebp - 0x934], 0
jmp 0x1000b353
mov dword [ebp - 0x934], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xe08], eax
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x14]
cmp dword [eax], ecx
jg 0x1000b54f
mov dword [ebp - 0x154], 0x6722525a
mov dword [ebp - 0x89c], 9
push 3
lea ecx, [ebp - 0xc10]
call fcn.100170ca
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x78], 0
jmp 0x1000b3b7
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1000b3cd
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xa20], 0xe3649e8e
jmp 0x1000b3b0
mov dword [ebp - 0x78], 0
jmp 0x1000b3dd
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1000b3f9
push dword [ebp - 0x78]
lea ecx, [ebp - 0xc10]
call fcn.10017168
mov dword [eax], 0xfffffffa
jmp 0x1000b3d6
cmp dword [ebp - 0x154], 0xf910
jg 0x1000b411
mov dword [ebp - 0x748], 1
jmp 0x1000b418
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x748], eax
jle 0x1000b432
mov dword [ebp - 0x588], 1
jmp 0x1000b439
and dword [ebp - 0x588], 0
push 1
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov eax, dword [eax]
imul eax, dword [ebp - 0x588]
mov dword [ebp - 0x89c], eax
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x89c], eax
jne 0x1000b46f
mov dword [ebp - 0x590], 1
jmp 0x1000b476
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x590], eax
jne 0x1000b490
mov dword [ebp - 0x750], 1
jmp 0x1000b497
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x750], eax
jl 0x1000b4b1
mov dword [ebp - 0x598], 1
jmp 0x1000b4b8
and dword [ebp - 0x598], 0
mov esi, dword [ebp - 0x598]
inc esi
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0xcc]
call fcn.10017168
cmp esi, dword [eax]
jle 0x1000b4eb
mov dword [ebp - 0x34c], 1
jmp 0x1000b4f2
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x34c]
mov dword [ebp + eax - 0xa20], ecx
mov eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x34c]
jl 0x1000b51f
mov dword [ebp - 0x830], 1
jmp 0x1000b526
and dword [ebp - 0x830], 0
push 2
lea ecx, [ebp - 0xc10]
call fcn.10017168
mov ecx, dword [ebp - 0x830]
mov dword [eax], ecx
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xc10]
call fcn.1001714c
jmp 0x1000b5db
mov dword [ebp - 0x93c], 0x4efd0e68
mov dword [ebp - 0x250], 0
jmp 0x1000b572
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1000b58e
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xe9c], 0x580973f9
jmp 0x1000b565
cmp dword [ebp - 0x93c], 0
jne 0x1000b5a9
mov eax, 0x39fb
test eax, eax
jne 0x1000b5a9
and dword [ebp - 0x31c], 0
jmp 0x1000b5b3
mov dword [ebp - 0x31c], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0xe9c], ecx
push 1
lea ecx, [ebp - 0xcc]
call fcn.10017168
mov ecx, dword [ebp - 0x31c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.1001714c
push 3
lea ecx, [ebp - 0xcd8]
call fcn.100170ca
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1f0], 0
jmp 0x1000b617
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 3
jge 0x1000b639
push dword [ebp - 0x1f0]
lea ecx, [ebp - 0xcd8]
call fcn.10017168
mov dword [eax], 0xfffffff6
jmp 0x1000b60a
mov byte [ebp - 0x14b], 0
movzx eax, byte [ebp - 0x14b]
test eax, eax
je 0x1000b661
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1000b68c
push 0x1731
push 0x2126
push 0
push 0x1d3
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd8]
call fcn.1001714c
mov dword [ebp - 0xac4], 0x69f4981
mov dword [ebp - 0x2a8], 0
jmp 0x1000b6be
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 3
jge 0x1000b6da
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0xaf8], 0x352f
jmp 0x1000b6b1
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1000b6fb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowPlacement]
push 4
pop eax
shl eax, 1
imul eax, dword [ebp + eax - 0xaf8], 0x65e08ccb
cmp eax, 1
jg 0x1000b71d
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xaf8]
mov dword [ebp - 0xcec], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xaf8], 0xafbbd0a7
jne 0x1000b74d
mov dword [ebp - 0x5a0], 1
jmp 0x1000b754
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0xac4], eax
push 3
lea ecx, [ebp - 0xce8]
call fcn.100170ca
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x1f8], 0
jmp 0x1000b78d
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 3
jge 0x1000b7af
push dword [ebp - 0x1f8]
lea ecx, [ebp - 0xce8]
call fcn.10017168
mov dword [eax], 0xfffffff6
jmp 0x1000b780
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1000b7d7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000b802
push 0x1731
push 0x2126
push 0
push 0x1d3
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xce8]
call fcn.1001714c
mov dword [ebp - 0x944], 0x69f4981
mov dword [ebp - 0x258], 0
jmp 0x1000b834
cmp dword [ebp - 0x258], 3
jge 0x1000b850
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xb10], 0x352f
jmp 0x1000b827
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000b871