Function at 0x1000a77d
Capabilities:
Check os version
Create thread
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get disk information
Get file size
Get file system object information
Get geographical location
Modify service
Parse pe header
Query environment variable
Query or enumerate registry value
Read .ini file
Resume thread

Disassembly:
mov eax, 0x10076f52
call fcn.100762e0
mov eax, 0x15bc
call fcn.100729d0
movdqa xmm0, xmmword [0x100095e0]
lea eax, [ebp - 0x1040]
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x1050]
mov dword [ebp - 0x68], ecx
push eax
lea ecx, [ebp - 0x13f8]
mov byte [ebp - 0x61], dl
movdqu xmmword [ebp - 0x1050], xmm0
call fcn.10024049
lea ecx, [ebp - 0x199]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x680]
push dword [esi]
call fcn.10023ff8
xor eax, eax
lea ecx, [ebp - 0x97c]
mov dword [ebp - 4], eax
inc eax
push eax
call fcn.10023f9c
xor ecx, ecx
xor eax, eax
inc ecx
mov edi, 0x568d
mov byte [ebp - 4], cl
mov dword [ebp - 0x3c], 6
push 3
mov dword [ebp - 0x28], eax
pop ebx
cmp dword [ebp - 0x28], ebx
jge 0x1000a826
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x101c], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x1000a812
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ecx
jge 0x1000a852
push dword [ebp - 0x28]
lea ecx, [ebp - 0x97c]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
xor eax, eax
inc dword [ebp - 0x28]
inc eax
cmp dword [ebp - 0x28], eax
jl 0x1000a82e
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x1000a86e
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x133c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x1000a85a
xor eax, eax
push eax
lea ecx, [ebp - 0x680]
call fcn.1002403a
lea ecx, [ebp - 0x680]
and dword [eax], 0
xor eax, eax
push eax
call fcn.1002403a
mov ebx, dword [sym.imp.KERNEL32.dll_SetCommBreak]
or esi, 0xffffffff
cmp dword [eax], 0xffffffe6
jge 0x1000aad4
push 4
lea ecx, [ebp - 0x4c4]
call fcn.10023f9c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd18]
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x2c], esi
push 3
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 3
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000a8ef
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4c4]
call fcn.1002403a
mov dword [eax], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000a8d0
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000a90b
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd18]
call fcn.1002403a
mov dword [eax], 0x83acdd71
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000a8f4
xor esi, esi
lea ecx, [ebp - 0x4c4]
inc esi
push esi
call fcn.1002403a
and dword [eax], 0
jmp 0x1000aa71
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0xf30]
mov dword [ebp - 0x2c], 0x78d7cbae
push 2
call fcn.10023f9c
mov byte [ebp - 4], 4
xor eax, eax
mov dword [ebp - 0x2c], 0x786ff529
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000a974
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf30]
call fcn.1002403a
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000a955
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000a982
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000aa4a
xor eax, eax
lea ecx, [ebp - 0xd00]
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x2c], 0x73063d62
push eax
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 5
mov dword [ebp - 0x10], eax
jmp 0x1000a9c5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd00]
call fcn.1002403a
mov dword [eax], 6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000a9ae
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x101c], 0
je 0x1000a9f1
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x101c], 0xfa8bc07c
jb 0x1000a9f1
xor eax, eax
lea esi, [eax + 1]
jmp 0x1000a9f5
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x97c]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, esi
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0x563f
test eax, eax
je 0x1000aa2a
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1000aa2c
xor esi, esi
inc esi
mov eax, esi
jmp 0x1000aa2f
xor eax, eax
xor esi, esi
inc esi
mov dword [ebp - 0x1334], eax
lea ecx, [ebp - 0xd00]
inc dword [ebp - 0x3c]
mov byte [ebp - 4], 4
call fcn.1002401e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1000a98a
lea ecx, [ebp - 0xf30]
mov byte [ebp - 4], 3
call fcn.1002401e
push esi
lea ecx, [ebp - 0x4c4]
call fcn.1002403a
dec dword [eax]
push esi
lea ecx, [ebp - 0x4c4]
call fcn.1002403a
cmp dword [eax], 0xffffffe2
jne 0x1000a928
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0xd18]
mov dword [ebp - 0x4c], eax
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x4c4]
inc eax
mov byte [ebp - 4], al
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x680]
push eax
call fcn.1002403a
lea ecx, [ebp - 0x680]
dec dword [eax]
xor eax, eax
push eax
call fcn.1002403a
push 0xffffffffffffffff
pop esi
cmp dword [eax], 0xffffffe6
jl 0x1000a89d
or esi, esi
lea ecx, [ebp - 0x97c]
call fcn.1002401e
lea ecx, [ebp - 0x680]
mov dword [ebp - 4], esi
call fcn.1002401e
movdqa xmm0, xmmword [0x100095e0]
lea eax, [ebp - 0x11c0]
push eax
lea eax, [ebp - 0x11d0]
push eax
lea ecx, [ebp - 0x1438]
movdqu xmmword [ebp - 0x11d0], xmm0
call fcn.10024049
lea ecx, [ebp - 0x19a]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x690]
push dword [esi]
call fcn.10023ff8
xor eax, eax
mov dword [ebp - 4], 6
inc eax
lea ecx, [ebp - 0xb8c]
push eax
call fcn.10023f9c
mov byte [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000ab75
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfbc], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000ab60
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x28], eax
inc ecx
cmp dword [ebp - 0x28], ecx
jge 0x1000aba4
push dword [ebp - 0x28]
lea ecx, [ebp - 0xb8c]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
xor eax, eax
inc dword [ebp - 0x28]
inc eax
cmp dword [ebp - 0x28], eax
jl 0x1000ab80
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000abc2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1294], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000abad
xor eax, eax
push eax
lea ecx, [ebp - 0x690]
call fcn.1002403a
and dword [eax], 0
jmp 0x1000adf4
push 4
lea ecx, [ebp - 0x53c]
call fcn.10023f9c
or eax, 0xffffffff
mov byte [ebp - 4], 8
mov dword [ebp - 0x4c], eax
lea ecx, [ebp - 0xd48]
mov dword [ebp - 0x2c], eax
push 3
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 9
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000ac2b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x53c]
call fcn.1002403a
mov dword [eax], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000ac0c
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000ac47
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd48]
call fcn.1002403a
mov dword [eax], 0x83acdd71
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000ac30
xor eax, eax
lea ecx, [ebp - 0x53c]
inc eax
push eax
call fcn.1002403a
and dword [eax], 0
jmp 0x1000adac
xor eax, eax
lea ecx, [ebp - 0xf48]
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0x78d7cbae
push 2
call fcn.10023f9c
mov byte [ebp - 4], 0xa
xor eax, eax
mov dword [ebp - 0x2c], 0x786ff529
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000acb3
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf48]
call fcn.1002403a
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000ac94
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000acc1
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000ad82
xor eax, eax
lea ecx, [ebp - 0xd30]
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x2c], 0x73063d62
push eax
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x10], eax
jmp 0x1000ad04
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd30]
call fcn.1002403a
mov dword [eax], 6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000aced
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xfbc], 0
je 0x1000ad30
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0xfbc], 0xfa8bc07c
jb 0x1000ad30
xor eax, eax
lea esi, [eax + 1]
jmp 0x1000ad34
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0xb8c]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, esi
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0x563f
test eax, eax
je 0x1000ad65
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1000ad67
inc eax
jmp 0x1000ad67
xor eax, eax
mov dword [ebp - 0x128c], eax
lea ecx, [ebp - 0xd30]
inc dword [ebp - 0x3c]
mov byte [ebp - 4], 0xa
call fcn.1002401e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1000acc9
lea ecx, [ebp - 0xf48]
mov byte [ebp - 4], 9
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x53c]
inc eax
push eax
call fcn.1002403a
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x53c]
inc eax
push eax
call fcn.1002403a
cmp dword [eax], 0xffffffe2
jne 0x1000ac64
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0xd48]
mov dword [ebp - 0x4c], eax
call fcn.1002401e
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 7
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x690]
push eax
call fcn.1002403a
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x690]
push eax
call fcn.1002403a
cmp dword [eax], 0xffffffe6
jl 0x1000abd6
lea ecx, [ebp - 0xb8c]
call fcn.1002401e
or eax, 0xffffffff
lea ecx, [ebp - 0x690]
mov dword [ebp - 4], eax
call fcn.1002401e
mov dword [ebp - 0x1c], 0xb58e469a
xor eax, eax
mov dword [ebp - 0x2c], 0xfffffff7
xor ecx, ecx
mov dword [ebp - 0x2c], 0x30de9bf9
inc ecx
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x48], 0x886a6c65
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1000ae7e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6a8], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ecx
cmp dword [ebp - 0x10], eax
jl 0x1000ae65
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000ae94
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6a8], 0
inc dword [ebp - 0x1c]
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x1000ae83
dec dword [ebp - 0x48]
lea eax, [ebp - 0x1080]
movdqa xmm0, xmmword [0x100095e0]
lea ecx, [ebp - 0x1430]
push eax
lea eax, [ebp - 0x1090]
push eax
movdqu xmmword [ebp - 0x1090], xmm0
call fcn.10024049
lea ecx, [ebp - 0x19c]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x5b8]
push dword [esi]
call fcn.10023ff8
xor eax, eax
mov dword [ebp - 4], 0xc
inc eax
lea ecx, [ebp - 0x994]
push eax
call fcn.10023f9c
mov byte [ebp - 4], 0xd
xor eax, eax
mov dword [ebp - 0x3c], 6
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000af27
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1004], edi
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000af12
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x28], eax
inc ecx
cmp dword [ebp - 0x28], ecx
jge 0x1000af56
push dword [ebp - 0x28]
lea ecx, [ebp - 0x994]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
xor eax, eax
inc dword [ebp - 0x28]
inc eax
cmp dword [ebp - 0x28], eax
jl 0x1000af32
xor ecx, ecx
xor eax, eax
inc ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000af74
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x139c], ecx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000af5f
xor eax, eax
push eax
lea ecx, [ebp - 0x5b8]
call fcn.1002403a
lea ecx, [ebp - 0x5b8]
and dword [eax], 0
xor eax, eax
push eax
call fcn.1002403a
or edi, 0xffffffff
cmp dword [eax], 0xffffffe6
jge 0x1000b1cb
push 4
lea ecx, [ebp - 0x4dc]
call fcn.10023f9c
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xd78]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x2c], edi
push 3
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000afef
push dword [ebp - 0x14]
lea ecx, [ebp - 0x4dc]
call fcn.1002403a
mov dword [eax], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000afd0
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000b00b
push dword [ebp - 0x14]
lea ecx, [ebp - 0xd78]
call fcn.1002403a
mov dword [eax], 0x83acdd71
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000aff4
xor eax, eax
lea ecx, [ebp - 0x4dc]
inc eax
push eax
call fcn.1002403a
and dword [eax], 0
jmp 0x1000b170
xor eax, eax
lea ecx, [ebp - 0xf60]
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x2c], 0x78d7cbae
push 2
call fcn.10023f9c
mov byte [ebp - 4], 0x10
xor eax, eax
mov dword [ebp - 0x2c], 0x786ff529
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000b077
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf60]
call fcn.1002403a
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000b058
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000b085
push eax
call ebx
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000b146
xor eax, eax
lea ecx, [ebp - 0xd60]
inc eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x2c], 0x73063d62
push eax
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x10], eax
jmp 0x1000b0c8
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd60]
call fcn.1002403a
mov dword [eax], 6
inc dword [ebp - 0x10]
xor eax, eax
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000b0b1
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1004], 0
je 0x1000b0f4
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x1004], 0xfa8bc07c
jb 0x1000b0f4
xor eax, eax
lea esi, [eax + 1]
jmp 0x1000b0f8
xor eax, eax
mov esi, eax
push eax
lea ecx, [ebp - 0x994]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, esi
mov dword [ebp - 0x48], eax
imul eax, dword [ebp - 0x48], 0x563f
test eax, eax
je 0x1000b129
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x1000b12b
inc eax
jmp 0x1000b12b
xor eax, eax
mov dword [ebp - 0x1394], eax
lea ecx, [ebp - 0xd60]
inc dword [ebp - 0x3c]
mov byte [ebp - 4], 0x10
call fcn.1002401e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jle 0x1000b08d
lea ecx, [ebp - 0xf60]
mov byte [ebp - 4], 0xf
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x4dc]
inc eax
push eax
call fcn.1002403a
dec dword [eax]
xor eax, eax
lea ecx, [ebp - 0x4dc]
inc eax
push eax
call fcn.1002403a
cmp dword [eax], 0xffffffe2
jne 0x1000b028
mov eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0xd78]
mov dword [ebp - 0x4c], eax
call fcn.1002401e
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0xd
call fcn.1002401e
xor eax, eax
lea ecx, [ebp - 0x5b8]
push eax
call fcn.1002403a
lea ecx, [ebp - 0x5b8]
dec dword [eax]
xor eax, eax
push eax
call fcn.1002403a
jmp 0x1000af94
lea ecx, [ebp - 0x994]
call fcn.1002401e
lea ecx, [ebp - 0x5b8]
mov dword [ebp - 4], edi
call fcn.1002401e
mov dword [ebp - 0x1c], 0xe76f5020
lea ecx, [ebp - 0x9ac]
push 2
call fcn.10023f9c
xor eax, eax
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000b223
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x924], 0xdc85
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000b20a
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000b24b
push dword [ebp - 0x14]
lea ecx, [ebp - 0x9ac]
call fcn.1002403a
mov dword [eax], 0xd743ccc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000b22c
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000b375
xor ebx, ebx
mov dword [ebp - 0x14], edi
inc ebx
lea ecx, [ebp - 0xb50]
push ebx
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b297
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb50]
call fcn.1002403a
mov dword [eax], 0x595a2e71
xor eax, eax
inc dword [ebp - 0x10]
inc eax
cmp dword [ebp - 0x10], eax
jl 0x1000b273
xor ebx, ebx
xor eax, eax
inc ebx
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], eax
jl 0x1000b352
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], 0xfffffffc
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x924], 0
jne 0x1000b2ee
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000b2d1
cmp dword [ebp - 0x30], eax
jne 0x1000b2d1
mov ecx, eax
jmp 0x1000b2d9
xor eax, eax
xor ebx, ebx
inc ebx
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x14]
cmp ecx, dword [ebp + eax*4 - 0x924]
jge 0x1000b2e8
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor eax, eax
lea ecx, [ebp - 0xb50]
push eax
call fcn.1002403a
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov edi, eax
mov esi, dword [ebp + ecx*4 - 0x924]
mov ecx, dword [ebp - 0x920]
cmp ecx, ebx
mov ecx, dword [ebp - 0x14]
setge dl
imul edx, esi
mov eax, dword [ebp + ecx*4 - 0x924]
xor ecx, ecx
dec edx
cmp eax, edx
sete cl
xor ebx, ebx
cmp ecx, dword [edi]
lea ecx, [ebp - 0x9ac]
setne bl
xor eax, eax
push eax
call fcn.1002403a
push 1
mov dword [eax], ebx
dec dword [ebp - 0x14]
pop ebx
jns 0x1000b2a7
xor eax, eax
or edi, 0xffffffff
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000b363
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
lea ecx, [ebp - 0xb50]
mov byte [ebp - 4], 0x12
call fcn.1002401e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jle 0x1000b253
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 4], edi
call fcn.1002401e
mov dword [ebp - 0x1c], 0xb58e469a
xor eax, eax
mov dword [ebp - 0x2c], 0xfffffff7
xor ecx, ecx
mov dword [ebp - 0x2c], 0x30de9bf9
inc ecx
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x2c], 5
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x48], 0x886a6c65
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ecx
jge 0x1000b3e4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x738], ecx
xor eax, eax
inc dword [ebp - 0x10]
inc eax
push eax
pop ecx
cmp dword [ebp - 0x10], eax
jl 0x1000b3cb
xor eax, eax
mov dword [ebp - 0x1c], eax
jmp 0x1000b3fa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x738], 0
inc dword [ebp - 0x1c]
xor eax, eax
inc eax
cmp dword [ebp - 0x1c], eax
jl 0x1000b3e9
dec dword [ebp - 0x48]
lea eax, [ebp - 0x1160]
movdqa xmm0, xmmword [0x10009560]
lea ecx, [ebp - 0x1448]
push eax
lea eax, [ebp - 0x1170]
push eax
movdqu xmmword [ebp - 0x1170], xmm0
call fcn.10024049
lea ecx, [ebp - 0x14f]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x2c8]
push dword [esi]
call fcn.10023ff8
xor ebx, ebx
mov dword [ebp - 4], 0x14
inc ebx
lea ecx, [ebp - 0xb08]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x1c], ebx
push 2
call fcn.10023f9c
mov byte [ebp - 4], 0x15
xor eax, eax
mov dword [ebp - 0x30], 0xb0a94fe8
mov dword [ebp - 0x38], 0xfffffffd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000b4a5
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb08]
call fcn.1002403a
mov dword [eax], 8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000b486
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1000b5a0
jmp 0x1000b4b6
xor eax, eax
mov dword [ebp - 0x48], 0x85b3d925
cmp dword [ebp - 0x1c], 2
jge 0x1000b4ca
mov esi, eax
cmp dword [ebp - 0x1c], eax
je 0x1000b4cc
mov esi, ebx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2c8]
call fcn.1002403a
xor ecx, ecx
cmp esi, dword [eax]
setl cl
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x2c8]
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x28]
call fcn.1002403a
mov eax, dword [ebp - 0x1c]
lea ecx, [ebp - 0x2c8]
mov eax, dword [ebp - 0x28]
push ebx
call fcn.1002403a
push 2
lea ecx, [ebp - 0x2c8]
call fcn.1002403a
xor ecx, ecx
xor ebx, ebx
inc ecx
push ecx
cmp dword [eax], ecx
lea ecx, [ebp - 0xb08]
setg bl
add ebx, 0x69393dda
call fcn.1002403a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2c8]
mov dword [eax], ebx
call fcn.1002403a
mov dword [ebp - 0x48], 0xfffffffe
lea ecx, [ebp - 0x2c8]
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x28]
call fcn.1002403a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x2c8]
call fcn.1002403a
mov eax, dword [ebp - 0x28]
lea ecx, [ebp - 0x2c8]
push dword [ebp - 0x28]
call fcn.1002403a
mov ecx, dword [ebp - 0x28]
mov edx, dword [eax]
mov eax, dword [ebp - 0x28]
sub edx, ecx
sub edx, eax
xor eax, eax
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x38], eax
jne 0x1000b59d
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
push 1
pop ebx
jle 0x1000b4b4
xor ebx, ebx
inc ebx
lea ecx, [ebp - 0xb08]
call fcn.1002401e
lea ecx, [ebp - 0x2c8]
mov dword [ebp - 4], edi
call fcn.1002401e
xor eax, eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], 0xfffa
mov dword [ebp - 0x3c], 0xfc4b
mov dword [ebp - 0x38], eax
push 0xfffffffffffffff8
pop edi
mov dword [ebp - 0xc64], edi
mov dword [ebp - 0xc60], edi
mov dword [ebp - 0xc5c], edi
mov dword [ebp - 0xc58], edi
mov dword [ebp - 0x50], 0x22a19820
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1000b61d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x69c], 0x3e9323d1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000b605
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000b633
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12ac], 0x2a42bbd4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000b622
mov dword [ebp - 0x69c], ebx
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x12a4]
jne 0x1000b654
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x10]
xor edx, edx
dec dword [ebp - 0x20]
mov ecx, dword [ebp - 0xc58]
mov eax, dword [ebp - 0x38]
imul ecx, eax
mov eax, dword [ebp - 0x4c]
cmp eax, ecx
setge dl
xor ecx, ecx
add edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
cmp eax, edx
mov eax, dword [ebp - 0x50]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x30], 0xfffffff9
mov dword [ebp - 0x2c], 0x5ec41505
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b6d8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x6f8], 0xe02189f4
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b6c0
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000b735
mov dword [ebp - 0x10], ebx
xor edx, edx
mov dword [ebp - 0x48], 0xdd2e
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setne dl
imul edx, dword [ebp - 0x10]
cmp edx, dword [ebp - 0x10]
jl 0x1000b716
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1000b716
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x48]
xor edx, edx
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x3c]
cmp ecx, eax
setl dl
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe7
jne 0x1000b6dd
movdqa xmm0, xmmword [0x100095e0]
lea eax, [ebp - 0x10a0]
push eax
lea eax, [ebp - 0x10b0]
push eax
lea ecx, [ebp - 0x1458]
movdqu xmmword [ebp - 0x10b0], xmm0
call fcn.10024049
lea ecx, [ebp - 0x1a7]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x5f8]
push dword [esi]
call fcn.10023ff8
xor eax, eax
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b7ab
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xc0], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b793
xor eax, eax
mov dword [ebp - 0xc0], 9
jmp 0x1000b7c9
mov dword [ebp - 0x30], 0xfffffff9
cmp dword [ebp - 0x30], eax
jne 0x1000b7d2
dec dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], 0xffffffe2
jl 0x1000b7b7
push ebx
lea ecx, [ebp - 0xfd4]
call fcn.10023f9c
mov byte [ebp - 4], 0x17
xor eax, eax
mov dword [ebp - 0x14], 0x70bb743d
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xca9869ec
mov dword [ebp - 0x2c], 8
mov dword [ebp - 0x2c], 0xe6e2bfbd
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000b825
push dword [ebp - 0x10]
lea ecx, [ebp - 0xfd4]
call fcn.1002403a
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b80b
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x14], eax
jmp 0x1000b883
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000b880
push 0x17e
push 0x1239
push 0x3c4
push 0x1efd
push 0x936
call edi
push eax
call ebx
push eax
push 0x4c0
push 0x21f5
push 0xdd0
push 0x90e
call edi
push eax
call ebx
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
xor eax, eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], eax
jle 0x1000b836
mov dword [ebp - 0x14], eax
jmp 0x1000b8f5
movdqa xmm0, xmmword [0x100095a0]
lea eax, [ebp - 0x1200]
push eax
lea eax, [ebp - 0x1210]
mov dword [ebp - 0x2c], 0xfffffffb
push eax
lea ecx, [ebp - 0x1478]
movdqu xmmword [ebp - 0x1210], xmm0
call fcn.10024049
lea ecx, [ebp - 0x19f]
mov esi, eax
call fcn.1000a775
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x1354]
push dword [esi]
call fcn.10023ff8
mov dword [ebp - 0x48], 0xcf5a8b06
lea ecx, [ebp - 0x1354]
inc dword [ebp - 0x48]
call fcn.1002401e
inc dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
jle 0x1000b88d
lea ecx, [ebp - 0xfd4]
mov byte [ebp - 4], 0x16
call fcn.1002401e
xor ebx, ebx
lea ecx, [ebp - 0xa24]
inc ebx
push ebx
call fcn.10023f9c
mov byte [ebp - 4], 0x18
or esi, 0xffffffff
mov dword [ebp - 0x20], 0xba394643
push 2
pop eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x2c], 0xe63e3155
mov dword [ebp - 0x38], 0xfffffffe
mov dword [ebp - 0x2c], 0xe672ca3c
mov dword [ebp - 0x2c], 0x1247adf1
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x92758e92
mov dword [ebp - 0x2c], 0x40a16501
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x48], 0xe64f6cbc
mov dword [ebp - 0x48], 0x7e815f84
mov dword [ebp - 0x3c], eax
xor eax, eax
push 3
pop ecx
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000b99b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14b0], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000b982
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1000b9bb
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x12c4], 0x1658a600
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1000b9a3
xor eax, eax
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
jl 0x1000ba21
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x12d2c87a
mov dword [ebp - 0x2c], 0xfffffffc
mov dword [ebp - 0x48], 0x34886255
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000ba05
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xea8], 5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000b9ed
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000ba19
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor eax, eax
dec dword [ebp - 0x48]
dec dword [ebp - 0x20]
jns 0x1000b9c3
mov eax, dword [ebp - 0x14ac]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x3c]
test eax, eax
setle cl
add ecx, 0x3c3fa3c
jne 0x1000ba4b
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x12c0], eax
je 0x1000ba4d
mov edx, ebx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
cmp eax, edx
mov eax, dword [ebp - 0x50]
setl cl
sub eax, ecx
lea ecx, [ebp - 0x1c0]
neg eax
push 2
sbb eax, eax
add eax, 3
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x48], eax
call fcn.10023f9c
mov byte [ebp - 4], 0x19
xor eax, eax
mov dword [ebp - 0x48], 0xfd8f2714
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000bab6
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1c0]
call fcn.1002403a
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000ba97
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000bacc
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x10d0], 0x2b96ce02
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000babb
push ebx
lea ecx, [ebp - 0x1c0]
call fcn.1002403a
and dword [eax], 0
jmp 0x1000bbd8
mov dword [ebp - 0x3c], 0x215a6091
xor eax, eax
mov dword [ebp - 0x38], 0xfffffff6
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000bb18
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd90], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000baff
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000bb2e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6a4], 0x8f1e0c86
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000bb1d
mov eax, dword [ebp - 0xd8c]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x10cc], eax
mov dword [ebp - 0x6a4], eax
push ebx
call fcn.1002403a
mov eax, dword [ebp - 0xd88]
lea ecx, [ebp - 0x1c0]
mov eax, dword [ebp - 0x3c]
push ebx
call fcn.1002403a
xor eax, eax
lea ecx, [ebp - 0x1c0]
push eax
call fcn.1002403a
mov ecx, dword [ebp - 0x10cc]
xor edx, edx
cmp ecx, dword [eax]
setg dl
xor eax, eax
cmp edx, 0x33bd3e01
setne al
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x48]
sub ecx, eax
xor eax, eax
cmp ecx, esi
setne al
cmp eax, dword [ebp - 0x3c]
jne 0x1000bbbc
xor eax, eax
lea ecx, [ebp - 0x1c0]
push eax
call fcn.1002403a
cmp dword [eax], 0
jne 0x1000bbbc
xor eax, eax
mov ecx, eax
jmp 0x1000bbbe
mov ecx, ebx
xor eax, eax
cmp ecx, 0xfffffffd
push ebx
sete al
lea ecx, [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x38], eax
call fcn.1002403a
inc dword [eax]
push ebx
lea ecx, [ebp - 0x1c0]
call fcn.1002403a
cmp dword [eax], 0x19
jl 0x1000bae6
lea ecx, [ebp - 0x1c0]
mov byte [ebp - 4], 0x18
call fcn.1002401e
mov dword [ebp - 0x50], 6
lea ecx, [ebp - 0x9c4]
push ebx
call fcn.10023f9c
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xda8]
mov dword [ebp - 0x1c], esi
xor eax, eax
mov dword [ebp - 0x48], 0x90f02349
mov dword [ebp - 0x30], 0x6dc660f7
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x2c], 0x7b09f595
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x2c], 0x18ee85ec
push 3
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x1000bc7e
push dword [ebp - 0x28]
lea ecx, [ebp - 0x9c4]
call fcn.1002403a
mov dword [eax], 0xd3df75dc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x1000bc60
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000bca6
push dword [ebp - 0x28]
lea ecx, [ebp - 0xda8]
call fcn.1002403a
mov dword [eax], 0x7bf19931
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000bc87
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], ebx
jge 0x1000bcc2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x30c], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x1000bcae
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], eax
jg 0x1000bd75
jmp 0x1000bcd2
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xf78]
mov dword [ebp - 0x2c], 0x7cad7d71
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 7
mov dword [ebp - 0x2c], 0x9a278c00
push 2
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000bd24
push dword [ebp - 0x10]
lea ecx, [ebp - 0xf78]
call fcn.1002403a
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1000bd09
xor eax, eax
push eax
lea ecx, [ebp - 0x9c4]
call fcn.1002403a
xor edx, edx
mov eax, dword [eax]
add eax, 0x5f0ed1ad
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x30]
cmp eax, 0xfffffff9
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0xf78]
inc dword [ebp - 0x30c]
mov byte [ebp - 4], 0x1b
call fcn.1002401e
inc dword [ebp - 0x1c]
xor eax, eax
cmp dword [ebp - 0x1c], eax
jle 0x1000bcd0
lea ecx, [ebp - 0xda8]
call fcn.1002401e
lea ecx, [ebp - 0x9c4]
mov byte [ebp - 4], 0x18
call fcn.1002401e
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x1000bdaf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xf0], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1000bd9a
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000bdc5
push eax
push 0x220c
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
mov eax, 0xfffc
cmp dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0xe8]
jle 0x1000bdf4
xor eax, eax
mov esi, eax
cmp dword [ebp - 0xe8], eax
je 0x1000bdf6
mov esi, ebx
mov ecx, dword [ebp - 0xe8]
xor ebx, ebx
mov eax, dword [ebp - 0xe8]
cmp ecx, eax
mov ecx, dword [ebp - 0xe8]
mov eax, dword [ebp - 0xe8]
setge bl
xor edx, edx
cmp ecx, eax
setl dl
xor eax, eax
cmp ebx, edx
setl al
xor ecx, ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xf0]
cmp esi, eax
mov eax, dword [ebp - 0xf0]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xe8]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xe8]
setl cl
xor edx, edx
cmp dword [ebp - 0x30], ecx
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0xf0]
setg cl
imul eax, ecx
mov dword [ebp - 0xe8], eax
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000be95
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xfec], 0x568d
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000be7c
xor eax, eax
mov dword [ebp - 0x1c], 0xe91a049f
mov dword [ebp - 0x30], 9
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000beb5
push eax
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
xor eax, eax
mov dword [ebp - 0x1c], 0xfffffff1
jmp 0x1000bedc
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jne 0x1000bed9
or ecx, 0xffffffff
mov dword [ebp - 0x30], ecx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
je 0x1000becd
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x1000bebe
xor ebx, ebx
mov dword [ebp - 0x28], eax
inc ebx
jmp 0x1000bf01
push dword [ebp - 0x28]
lea ecx, [ebp - 0xa24]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
jl 0x1000beea
mov dword [ebp - 0x1c], 0xd05b
xor ecx, ecx
mov dword [ebp - 0x3c], 0xfff8
mov dword [ebp - 0x24], 3
mov dword [ebp - 0x48], 0x60cbeb96
mov dword [ebp - 0x1c], 0x6fe7d8a8
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp eax, 0xf084
setle cl
mov dword [ebp - 0x48], ecx
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x3c]
dec eax
neg eax
sbb eax, eax
neg eax
sub eax, 0x4c3f
je 0x1000bfad
mov dword [ebp - 0x2c], 4
xor eax, eax
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
jmp 0x1000bfa5
mov dword [ebp - 0x2c], 0xfffffff8
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000bf86
push eax
push 0x110f
push eax
call dword [sym.imp.GDI32.dll_GetMetaFileBitsEx]
xor eax, eax
mov dword [ebp - 0x24], 0x12
jmp 0x1000bf9c
mov dword [ebp - 0x48], 0x52b4b5a9
inc dword [ebp - 0x48]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1a
jg 0x1000bf8f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x12
jle 0x1000bf67
jmp 0x1000bfbe
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1000bfc0
push eax
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1000bfd2
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x12dc], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x1000bfc5
mov dword [ebp - 0x24], 0x890c5440
mov eax, 0x4ffd8143
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x194], eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000c01e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xe4], 0
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000c006
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000c035
push 0x150a
call edi
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x1c], 0x6512
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0xe4], eax
jne 0x1000c060
xor eax, eax
cmp dword [ebp - 0xe4], eax
je 0x1000c062
mov eax, ebx
inc eax
mov dword [ebp - 0x24], eax
xor eax, eax
mov dword [ebp - 0x24], eax
jmp 0x1000c087
mov dword [ebp - 0x48], 0xde57413
mov dword [ebp - 0x1c], eax
jmp 0x1000c07f
dec dword [ebp - 0x48]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jle 0x1000c079
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xfffffff2
jl 0x1000c06d
push eax
lea ecx, [ebp - 0x5f8]
call fcn.1002403a
and dword [eax], 0
jmp 0x1000e084
mov dword [ebp - 0x1c], 0xfff9
xor eax, eax
mov dword [ebp - 0x20], 8
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000c0d4
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x300], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000c0c0
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000c0ee
push 0xe91
push 0x212b
push eax
call dword [sym.imp.GDI32.dll_PtInRegion]
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x20], eax
xor eax, eax
cmp dword [ebp - 0x20], eax
jne 0x1000c101
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x300]
setge dl
cmp ebx, edx
push 4
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp eax, edx
setne cl
sub ecx, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x30], ecx
lea ecx, [ebp - 0x554]
call fcn.10023f9c
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x3c], 0xdd688769
mov dword [ebp - 0x48], 0x4caf14c9
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x30], ebx
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1000c176
push eax
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x48], ebx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x10]
mov edx, dword [ebp - 0x20]
neg eax
sub edx, eax
mov eax, dword [ebp - 0x48]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
mov eax, dword [ebp - 0x3c]
setg cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x10]
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x10]
setl bl
xor ecx, ecx
cmp ebx, eax
setl cl
or esi, 0xffffffff
mov dword [ebp - 0x30], ecx
xor eax, eax
mov dword [ebp - 0x38], esi
xor ebx, ebx
mov dword [ebp - 0x14], 0x57fd5464
inc ebx
mov dword [ebp - 0x2c], 0x425f5f99
mov dword [ebp - 0x2c], 0x47706695
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000c1f8
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xeb8], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000c1e4
xor eax, eax
mov dword [ebp - 0x14], 0xfffffff3
jmp 0x1000c37c
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x2c], 0x63a74adf
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xdd8fb8ce
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1000c241
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x14d0], 0xc2a2
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1000c228
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1000c379
mov dword [ebp - 0x24], eax
lea ecx, [ebp - 0xb80]
mov dword [ebp - 0x2c], ebx
push ebx
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x10], eax
jmp 0x1000c282
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0x11
jge 0x1000c204
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], 0x38a1f949
mov dword [ebp - 0x10], 0xfffffff9
mov dword [ebp - 0x48], 0xfffffff7
mov dword [ebp - 0x30], 0xc6578637
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1000c3c1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x5dc], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000c3ad
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000c3e3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xddc], 5
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000c3ca
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1000c403
xor eax, eax
lea ecx, [ebp - 0x5f8]
push eax
call fcn.1002403a
cmp dword [eax], 0xffffffe6
jl 0x1000c0a1
lea ecx, [ebp - 0xa24]
call fcn.1002401e
or edi, 0xffffffff
lea ecx, [ebp - 0x5f8]
mov dword [ebp - 4], edi
call fcn.1002401e
xor eax, eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x20], 0xfffa
mov dword [ebp - 0x48], 0xfc4b
mov dword [ebp - 0x30], eax
push 0xfffffffffffffff8
pop esi
mov dword [ebp - 0xbe4], esi
mov dword [ebp - 0xbe0], esi
mov dword [ebp - 0xbdc], esi
mov dword [ebp - 0xbd8], esi
mov dword [ebp - 0x4c], 0x22a19820
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1000e11b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x6b0], 0x3e9323d1
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1000e103
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1000e131
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x136c], 0x2a42bbd4
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1000e120
mov dword [ebp - 0x6b0], ebx
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x1364]
jne 0x1000e152
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x10]
xor edx, edx
dec dword [ebp - 0x20]
mov ecx, dword [ebp - 0xbd8]
mov eax, dword [ebp - 0x30]
imul ecx, eax
mov eax, dword [ebp - 0x3c]
push 2
cmp eax, ecx
setge dl
xor ecx, ecx
add edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
cmp eax, edx
mov eax, dword [ebp - 0x4c]
setg cl
xor edx, edx
cmp ecx, eax
setge dl
xor ecx, ecx
sub edx, dword [ebp - 0x50]
mov eax, dword [ebp - 0x48]
cmp edx, eax
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xa3c]
mov dword [ebp - 0x1c], 0xe76f5020
call fcn.10023f9c
xor eax, eax
mov dword [ebp - 4], 0x38
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000e1d4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8b4], 0xdc85
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x1000e1bb
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000e1fc
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa3c]
call fcn.1002403a
mov dword [eax], 0xd743ccc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1000e1dd
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1000e327
mov dword [ebp - 0x14], edi
lea ecx, [ebp - 0xb98]
push ebx
call fcn.10023f9c
xor eax, eax
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x1000e244
push dword [ebp - 0x10]
lea ecx, [ebp - 0xb98]
call fcn.1002403a
mov dword [eax], 0x595a2e71
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1000e226
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], eax
jl 0x1000e2f7
lea ecx, [ebp - 0xa3c]
mov dword [ebp - 4], edi
call fcn.1002401e
push 3
lea ecx, [ebp - 0x50c]
call fcn.10023f9c
mov dword [ebp - 4], 0x3a
xor eax, eax
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x10], eax
jmp 0x1000e36f
cmp dword [ebp - 0x10], 3
lea ecx, [ebp - 0x50c]
jl 0x1000e35e