Function at 0x10008d66
Capabilities:
Clear file content
Delete registry value
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc74
push esi
push edi
mov dword [ebp - 0x118], 0xfb871c7b
mov dword [ebp - 0xb20], 0x50e6da50
mov dword [ebp - 0x70], 0
jmp 0x10008d95
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x10008dab
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xbd4], 0xc64a6847
jmp 0x10008d8e
mov dword [ebp - 0x70], 0
jmp 0x10008dbb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10008dd1
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x990], 0x274bf90e
jmp 0x10008db4
mov dword [ebp - 0x118], 3
jmp 0x10008dea
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x10008e1e
mov dword [ebp - 0x51c], 0x362d
mov eax, dword [ebp - 0x51c]
inc eax
mov dword [ebp - 0x51c], eax
mov eax, dword [ebp - 0x118]
cmp dword [ebp + eax*4 - 0xbd4], 0
je 0x10008e1c
jmp 0x10008e1e
jmp 0x10008ddd
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10008e45
push 0x1eda
push 0x24cf
push 0xa5e
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x164], 0xfb871c7b
mov dword [ebp - 0x998], 0x50e6da50
mov dword [ebp - 0x48], 0
jmp 0x10008e69
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x10008e7f
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xbe4], 0xc64a6847
jmp 0x10008e62
mov dword [ebp - 0x48], 0
jmp 0x10008e8f
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10008ea5
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xa24], 0x274bf90e
jmp 0x10008e88
mov dword [ebp - 0x164], 3
jmp 0x10008ebe
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jl 0x10008ef2
mov dword [ebp - 0x770], 0x362d
mov eax, dword [ebp - 0x770]
inc eax
mov dword [ebp - 0x770], eax
mov eax, dword [ebp - 0x164]
cmp dword [ebp + eax*4 - 0xbe4], 0
je 0x10008ef0
jmp 0x10008ef2
jmp 0x10008eb1
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10008f19
push 0x1eda
push 0x24cf
push 0xa5e
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x110], 0xfb871c7b
mov dword [ebp - 0xa2c], 0x50e6da50
mov dword [ebp - 0x88], 0
jmp 0x10008f46
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x10008f62
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xbc4], 0xc64a6847
jmp 0x10008f39
mov dword [ebp - 0x88], 0
jmp 0x10008f7b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10008f97
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xa34], 0x274bf90e
jmp 0x10008f6e
mov dword [ebp - 0x110], 3
jmp 0x10008fb0
mov eax, dword [ebp - 0x110]
dec eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0
jl 0x10008fe4
mov dword [ebp - 0x5cc], 0x362d
mov eax, dword [ebp - 0x5cc]
inc eax
mov dword [ebp - 0x5cc], eax
mov eax, dword [ebp - 0x110]
cmp dword [ebp + eax*4 - 0xbc4], 0
je 0x10008fe2
jmp 0x10008fe4
jmp 0x10008fa3
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x1000900b
push 0x1eda
push 0x24cf
push 0xa5e
call dword [sym.imp.KERNEL32.dll_MulDiv]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0xa3c], 0xc290
mov dword [ebp - 0x278], 0
jmp 0x10009038
mov eax, dword [ebp - 0x278]
dec eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0xfffffffd
je 0x10009075
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10009059
call dword [sym.imp.GDI32.dll_GdiFlush]
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10009073
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x1000902b
mov dword [ebp - 0x170], 0
mov dword [ebp - 0xa44], 0xc290
mov dword [ebp - 0x170], 0
jmp 0x100090a2
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xfffffffd
je 0x100090df
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x100090c3
call dword [sym.imp.GDI32.dll_GdiFlush]
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x100090dd
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x10009095
mov dword [ebp - 0x218], 0xfffffff8
mov dword [ebp - 0xa4c], 0x67f5ed9a
mov dword [ebp - 0xa54], 7
mov dword [ebp - 0xa5c], 0xa97963ba
mov dword [ebp - 0xa64], 0
mov dword [ebp - 0xb00], 0xfffffffd
mov dword [ebp - 0xb08], 0xffffffff
mov dword [ebp - 0xb1c], 0x65c2dd78
mov dword [ebp - 0xb24], 7
mov dword [ebp - 0x50], 0
jmp 0x10009149
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1000915f
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xc08], 1
jmp 0x10009142
mov dword [ebp - 0x50], 0
jmp 0x1000916f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x10009185
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xc54], 0xc99cdf9c
jmp 0x10009168
mov dword [ebp - 0x218], 0
jmp 0x1000919e
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jg 0x1000922b
mov dword [ebp - 0xb2c], 3
mov dword [ebp - 0xb34], 0xffffffff
mov dword [ebp - 0x3c], 0
jmp 0x100091cf
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x100091e5
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xbf0], 0x62e08974
jmp 0x100091c8
mov dword [ebp - 0x3c], 0
jmp 0x100091f5
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 1
jge 0x1000920b
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x610], 0
jmp 0x100091ee
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x610], eax
jmp 0x10009191
mov dword [ebp - 0x178], 0
mov dword [ebp - 0xad0], 0xc290
mov dword [ebp - 0x178], 0
jmp 0x10009258
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xfffffffd
je 0x10009295
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x10009279
call dword [sym.imp.GDI32.dll_GdiFlush]
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10009293
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
jmp 0x1000924b
mov dword [ebp - 0x18], 0xe83c773
mov dword [ebp - 0x92c], 0x7d0d1d8
mov dword [ebp - 0xa68], 0xcc65ad6c
mov dword [ebp - 0x2e4], 0xffff
mov dword [ebp - 0x934], 0x1949
mov dword [ebp - 0x58], 0
jmp 0x100092d4
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x100092ea
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x864], 0xffff
jmp 0x100092cd
mov dword [ebp - 0x58], 0
jmp 0x100092fa
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10009310
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x9a4], 0xa79cc099
jmp 0x100092f3
mov dword [ebp - 0x18], 2
jmp 0x10009320
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10009474
mov dword [ebp - 0x90c], 0xfffffffc
mov dword [ebp - 0x908], 0xfffffffc
mov dword [ebp - 0x904], 0xfffffffc
mov dword [ebp - 0x900], 0xfffffffc
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x864], 0
je 0x100093f8
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x864], 0
jne 0x10009380
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x10009380
and dword [ebp - 0x2d4], 0
jmp 0x1000938a
mov dword [ebp - 0x2d4], 1
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x864], ecx
jne 0x100093ae
mov dword [ebp - 0x618], 1
jmp 0x100093b5
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x618]
jge 0x100093cf
mov dword [ebp - 0x78c], 1
jmp 0x100093d6
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x93c], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x864], 0
je 0x100093f8
mov dword [ebp - 0x27c], 1
jmp 0x100093ff
and dword [ebp - 0x27c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x27c]
mov dword [ebp + eax - 0x9a4], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x27c], eax
jne 0x10009429
mov dword [ebp - 0x2dc], 1
jmp 0x10009430
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x2dc], eax
jl 0x10009451
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x864], 0
jne 0x10009451
and dword [ebp - 0x620], 0
jmp 0x1000945b
mov dword [ebp - 0x620], 1
mov eax, dword [ebp - 0x620]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x90c], eax
jmp 0x10009319
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
mov dword [ebp - 0x268], 1
mov dword [ebp - 0x83c], 1
mov dword [ebp - 0xa78], 0xfffffffb
mov dword [ebp - 0x268], 0
jmp 0x100094b8
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0xffffffe8
jle 0x100094cd
mov dword [ebp - 0x83c], 0
jmp 0x100094ab
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x100094ec
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x180], 0xfffffff8
mov dword [ebp - 0x944], 0x67f5ed9a
mov dword [ebp - 0xae0], 7
mov dword [ebp - 0x94c], 0xa97963ba
mov dword [ebp - 0xa88], 0
mov dword [ebp - 0x954], 0xfffffffd
mov dword [ebp - 0xae8], 0xffffffff
mov dword [ebp - 0x95c], 0x65c2dd78
mov dword [ebp - 0xa98], 7
mov dword [ebp - 0x98], 0
jmp 0x1000955f
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jge 0x1000957b
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xc20], 1
jmp 0x10009552
mov dword [ebp - 0x98], 0
jmp 0x10009594
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x100095b0
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xc64], 0xc99cdf9c
jmp 0x10009587
mov dword [ebp - 0x180], 0
jmp 0x100095c9
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 2
jg 0x10009656
mov dword [ebp - 0x964], 3
mov dword [ebp - 0xaf0], 0xffffffff
mov dword [ebp - 0x60], 0
jmp 0x100095fa
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10009610
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc2c], 0x62e08974
jmp 0x100095f3
mov dword [ebp - 0x60], 0
jmp 0x10009620
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x10009636
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x628], 0
jmp 0x10009619
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x628]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x628], eax
jmp 0x100095bc
mov dword [ebp - 0x270], 0xfffffff8
mov dword [ebp - 0x96c], 0x67f5ed9a
mov dword [ebp - 0xaf8], 7
mov dword [ebp - 0x974], 0xa97963ba
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0x97c], 0xfffffffd
mov dword [ebp - 0xaec], 0xffffffff
mov dword [ebp - 0x984], 0x65c2dd78
mov dword [ebp - 0xaac], 7
mov dword [ebp - 0x80], 0
jmp 0x100096c0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x100096d6
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xbfc], 1
jmp 0x100096b9
mov dword [ebp - 0x80], 0
jmp 0x100096e6
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x100096fc
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xc74], 0xc99cdf9c
jmp 0x100096df
mov dword [ebp - 0x270], 0
jmp 0x10009715
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jg 0x100097a2
mov dword [ebp - 0x98c], 3
mov dword [ebp - 0xb38], 0xffffffff
mov dword [ebp - 0x68], 0
jmp 0x10009746
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1000975c
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xc44], 0x62e08974
jmp 0x1000973f
mov dword [ebp - 0x68], 0
jmp 0x1000976c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10009782
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x2ec], 0
jmp 0x10009765
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ec]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2ec], eax
jmp 0x10009708
mov dword [ebp - 0x40], 0x71d976ff
mov dword [ebp - 0x658], 4
mov dword [ebp - 0x188], 5
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x90], 0
jmp 0x100097e0
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x100097f9
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x20], 0xe307b5ca
jmp 0x100097d3
mov dword [ebp - 0x90], 0
jmp 0x10009812
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000982e
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xa74], 0x41ab7a3e
jmp 0x10009805
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x100098a2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x10009896
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x40], eax
jg 0x10009862
mov dword [ebp - 0x630], 1
jmp 0x10009869
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 0xec01
jg 0x10009881
mov dword [ebp - 0x2f4], 1
jmp 0x10009888
and dword [ebp - 0x2f4], 0
mov eax, dword [ebp - 0x2f4]
sub eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], eax
jg 0x100098a2
mov dword [ebp - 0x638], 1
jmp 0x100098a9
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0x39b642c
jle 0x10009a10
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x140], 0xffffffff
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x100098f6
push 0xf01
push 0
push 0x24f2
push 0x1bff
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x100099f4
mov eax, dword [ebp - 0x2bc]
neg eax
jne 0x10009934
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x994], eax
mov eax, dword [ebp - 0x2bc]
cmp dword [ebp - 0x140], eax
jl 0x10009934
and dword [ebp - 0x2fc], 0
jmp 0x1000993e
mov dword [ebp - 0x2fc], 1
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x2fc], eax
jg 0x10009958
mov dword [ebp - 0x640], 1
jmp 0x1000995f
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x658]
cmp dword [ebp - 0x640], eax
jle 0x10009979
mov dword [ebp - 0x304], 1
jmp 0x10009980
and dword [ebp - 0x304], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x304], eax
jl 0x1000999a
mov dword [ebp - 0x648], 1
jmp 0x100099a1
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x140]
add eax, dword [ebp - 0x648]
jne 0x100099b6
cmp dword [ebp - 0x140], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0x2967684a
jge 0x100099d2
mov dword [ebp - 0x30c], 1
jmp 0x100099d9
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x30c], eax
je 0x100099f4
and dword [ebp - 0x650], 0
jmp 0x100099fe
mov dword [ebp - 0x650], 1
imul eax, dword [ebp - 0x650], 0xfffc
mov dword [ebp - 0x40], eax
jmp 0x10009b41
mov dword [ebp - 0xf0], 0x7826243a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x20], 0
jne 0x10009a39
cmp dword [ebp - 0xf0], 0
jne 0x10009a39
and dword [ebp - 0x324], 0
jmp 0x10009a43
mov dword [ebp - 0x324], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf0]
cmp dword [ebp + eax - 0x20], ecx
jg 0x10009a61
mov dword [ebp - 0x314], 1
jmp 0x10009a68
and dword [ebp - 0x314], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x314], eax
jg 0x10009a8c
cmp dword [ebp - 0x658], 0
jne 0x10009a8c
and dword [ebp - 0x31c], 0
jmp 0x10009a96
mov dword [ebp - 0x31c], 1
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x40], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp eax, dword [ebp - 0x40]
jg 0x10009aba
mov dword [ebp - 0x660], 1
jmp 0x10009ac1
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xf0]
imul eax, dword [ebp - 0x660]
cmp dword [ebp - 0x324], eax
jge 0x10009ae2
mov dword [ebp - 0x668], 1
jmp 0x10009ae9
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xf0]
imul ecx, dword [ebp - 0x668]
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0x20]
sub ecx, dword [ebp - 0x188]
sub ecx, dword [ebp - 0xf0]
sub eax, ecx
cmp eax, dword [ebp - 0x120]
jne 0x10009b28
mov dword [ebp - 0x32c], 1
jmp 0x10009b2f
and dword [ebp - 0x32c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x32c]
mov dword [ebp + eax - 0xa74], ecx
mov dword [ebp - 0x120], 0
jmp 0x10009b5a
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 3
jne 0x10009d0c
mov dword [ebp - 0x160], 0xfffffff6
mov dword [ebp - 0x344], 0
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x844], 0xffffffff
mov eax, 0x211a
test eax, eax
je 0x10009bc2
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0x160]
neg eax
imul eax, eax, 0x64b2
test eax, eax
je 0x10009bc2
mov dword [ebp - 0x678], 1
jmp 0x10009bc9
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x670], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x670]
mov dword [ebp + eax - 0xa74], ecx
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x670], eax
jl 0x10009c02
mov dword [ebp - 0x334], 1
jmp 0x10009c09
and dword [ebp - 0x334], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x334], eax
jne 0x10009c23
mov dword [ebp - 0x33c], 1
jmp 0x10009c2a
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x678]
cmp eax, dword [ebp - 0x33c]
je 0x10009c44
mov dword [ebp - 0x680], 1
jmp 0x10009c4b
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x99c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x160]
cmp dword [ebp + eax - 0x20], ecx
jle 0x10009c81
mov dword [ebp - 0x688], 1
jmp 0x10009c88
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x688], eax
jne 0x10009ca2
mov dword [ebp - 0x34c], 1
jmp 0x10009ca9
and dword [ebp - 0x34c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x20]
cmp dword [ebp - 0x34c], eax
jne 0x10009cc7
mov dword [ebp - 0x690], 1
jmp 0x10009cce
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x690]
mov dword [ebp - 0x354], eax
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x354], eax
jne 0x10009cf4
mov dword [ebp - 0x698], 1
jmp 0x10009cfb
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x844], eax
jmp 0x10009b4d
mov dword [ebp - 0x10], 0xe83c773
mov dword [ebp - 0xaf4], 0x7d0d1d8
mov dword [ebp - 0x9a8], 0xcc65ad6c
mov dword [ebp - 0x36c], 0xffff
mov dword [ebp - 0xabc], 0x1949
mov dword [ebp - 0x44], 0
jmp 0x10009d4b
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10009d61
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x874], 0xffff
jmp 0x10009d44
mov dword [ebp - 0x44], 0
jmp 0x10009d71
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10009d87
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x9b0], 0xa79cc099
jmp 0x10009d6a
mov dword [ebp - 0x10], 2
jmp 0x10009d97
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x10009eeb
mov dword [ebp - 0x91c], 0xfffffffc
mov dword [ebp - 0x918], 0xfffffffc
mov dword [ebp - 0x914], 0xfffffffc
mov dword [ebp - 0x910], 0xfffffffc
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x874], 0
je 0x10009e6f
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x874], 0
jne 0x10009df7
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x10009df7
and dword [ebp - 0x35c], 0
jmp 0x10009e01
mov dword [ebp - 0x35c], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x874], ecx
jne 0x10009e25
mov dword [ebp - 0x6a0], 1
jmp 0x10009e2c
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x35c]
cmp eax, dword [ebp - 0x6a0]
jge 0x10009e46
mov dword [ebp - 0x84c], 1
jmp 0x10009e4d
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x920], eax
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x874], 0
je 0x10009e6f
mov dword [ebp - 0x2c4], 1
jmp 0x10009e76
and dword [ebp - 0x2c4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c4]
mov dword [ebp + eax - 0x9b0], ecx
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x2c4], eax
jne 0x10009ea0
mov dword [ebp - 0x364], 1
jmp 0x10009ea7
and dword [ebp - 0x364], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x364], eax
jl 0x10009ec8
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x874], 0
jne 0x10009ec8
and dword [ebp - 0x6a8], 0
jmp 0x10009ed2
mov dword [ebp - 0x6a8], 1
mov eax, dword [ebp - 0x6a8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x91c], eax
jmp 0x10009d90
mov eax, dword [ebp - 0x36c]
dec eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x190], 0xf89b546
mov dword [ebp - 0x224], 0
jmp 0x10009f1b
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x10009f37
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xb54], 0x85f70ad6
jmp 0x10009f0e
mov dword [ebp - 0x190], 2
jmp 0x10009f50
mov eax, dword [ebp - 0x190]
dec eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 0
jl 0x1000a035
mov dword [ebp - 0x250], 0
jmp 0x10009f76
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x10009f92
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x128], 0
jmp 0x10009f69
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x10009fbd
push 0
push 0x1cc0
push 0
push 0x8f2
push 0x211c
call dword [sym.imp.GDI32.dll_ExtCreatePen]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x128], 2
jmp 0x10009feb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x128], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x128], 0
jl 0x1000a030
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000a015
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x128]
cmp dword [ebp + eax*4 - 0xb54], 0
je 0x1000a02e
jmp 0x10009fd0
jmp 0x10009fd0
jmp 0x10009f43
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1000a05b
push 0
push 0x140d
push 0x1381
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x6b8], 0
mov dword [ebp - 0x854], 0x3afc3718
mov dword [ebp - 0x4c], 0
jmp 0x1000a07f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1000a095
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x6b0], 0x83c7730f
jmp 0x1000a078
mov dword [ebp - 0x4c], 0
jmp 0x1000a0a5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1000a0bb
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x9bc], 0xaccbad86
jmp 0x1000a09e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b0]
mov dword [ebp - 0x374], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x374]
mov dword [ebp + eax - 0x6b0], ecx
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0x37c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp + eax - 0x9bc], ecx
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x854], eax
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000a134
push 0
push 0
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov dword [ebp - 0x198], 1
mov dword [ebp - 0x834], 1
mov dword [ebp - 0x9c0], 0xfffffffb
mov dword [ebp - 0x198], 0
jmp 0x1000a16b
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xffffffe8
jle 0x1000a180
mov dword [ebp - 0x834], 0
jmp 0x1000a15e
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000a19f
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x8bc], 0xa5d6c05b
mov dword [ebp - 0x8b8], 0xa5d6c05b
mov dword [ebp - 0x8b4], 0xa5d6c05b
mov dword [ebp - 0x8b0], 0xa5d6c05b
mov dword [ebp - 0x798], 0x7d7c118
mov dword [ebp - 0x22c], 0
jmp 0x1000a1ea
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1000a206
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xac4], 0x5a9c4c8d
jmp 0x1000a1dd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8bc], 0
jmp 0x1000a234
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8bc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8bc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8bc], 0xffffffe4
jle 0x1000a2a2
mov dword [ebp - 0x1a0], 2
mov dword [ebp - 0x1a0], 0
jmp 0x1000a267
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0
jg 0x1000a293
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000a291
push 0x17a8
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x1000a25a
mov dword [ebp - 0x798], 7
jmp 0x1000a219
mov dword [ebp - 0x274], 0xffffffff
mov dword [ebp - 0x6d0], 0x7e7308f4
mov dword [ebp - 0x6d8], 6
mov dword [ebp - 0x274], 3
jmp 0x1000a2d9
mov eax, dword [ebp - 0x274]
dec eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 0xffffffe5
je 0x1000a3f0
mov dword [ebp - 0x1a8], 1
mov dword [ebp - 0x384], 0xfffffffc
mov dword [ebp - 0x394], 0xfffffff6
mov dword [ebp - 0x8a4], 0xffffffff
cmp dword [ebp - 0x1a8], 0x7a3a11c1
jne 0x1000a326
mov dword [ebp - 0x6c0], 1
jmp 0x1000a32d
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x1a8], eax
jne 0x1000a347
mov dword [ebp - 0x6c8], 1
jmp 0x1000a34e
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x384]
cmp eax, dword [ebp - 0x6c8]
jle 0x1000a374
mov dword [ebp - 0x82c], 1
jmp 0x1000a37b
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x1a8], eax
jle 0x1000a395
mov dword [ebp - 0x38c], 1
jmp 0x1000a39c
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x6d0]
cmp dword [ebp - 0x394], eax
jne 0x1000a3c2
mov dword [ebp - 0x7a0], 1
jmp 0x1000a3c9
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0x9cc], eax
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0xafc], eax
mov dword [ebp - 0x8a4], 0x9f5954e3
jmp 0x1000a2cc
mov dword [ebp - 0x14], 0xe83c773
mov dword [ebp - 0x9d8], 0x7d0d1d8
mov dword [ebp - 0xacc], 0xcc65ad6c
mov dword [ebp - 0x3ac], 0xffff
mov dword [ebp - 0x9e4], 0x1949
mov dword [ebp - 0x54], 0
jmp 0x1000a42f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000a445
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x884], 0xffff
jmp 0x1000a428
mov dword [ebp - 0x54], 0
jmp 0x1000a455
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000a46b
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x9c8], 0xa79cc099
jmp 0x1000a44e
mov dword [ebp - 0x14], 2
jmp 0x1000a47b
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1000a5cf
mov dword [ebp - 0x8fc], 0xfffffffc
mov dword [ebp - 0x8f8], 0xfffffffc
mov dword [ebp - 0x8f4], 0xfffffffc
mov dword [ebp - 0x8f0], 0xfffffffc
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x884], 0
je 0x1000a553
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x884], 0
jne 0x1000a4db
push 0xfffffffffffffff9
pop eax
test eax, eax
jne 0x1000a4db
and dword [ebp - 0x39c], 0
jmp 0x1000a4e5
mov dword [ebp - 0x39c], 1
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x884], ecx
jne 0x1000a509
mov dword [ebp - 0x6e0], 1
jmp 0x1000a510
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x39c]
cmp eax, dword [ebp - 0x6e0]
jge 0x1000a52a
mov dword [ebp - 0x7a8], 1
jmp 0x1000a531
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x9f0], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x884], 0
je 0x1000a553
mov dword [ebp - 0x2c0], 1
jmp 0x1000a55a
and dword [ebp - 0x2c0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp + eax - 0x9c8], ecx
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x2c0], eax
jne 0x1000a584
mov dword [ebp - 0x3a4], 1
jmp 0x1000a58b
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x3a4], eax
jl 0x1000a5ac
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x884], 0
jne 0x1000a5ac
and dword [ebp - 0x6e8], 0
jmp 0x1000a5b6
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x6e8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8fc], eax
jmp 0x1000a474
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
mov dword [ebp - 0x64], 0x71d976ff
mov dword [ebp - 0x718], 4
mov dword [ebp - 0x238], 5
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x5c], 0
jmp 0x1000a611
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000a624
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x28], 0xe307b5ca
jmp 0x1000a60a
mov dword [ebp - 0x5c], 0
jmp 0x1000a634
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000a64a
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa84], 0x41ab7a3e
jmp 0x1000a62d
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
je 0x1000a6be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x1000a6b2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x64], eax
jg 0x1000a67e
mov dword [ebp - 0x6f0], 1
jmp 0x1000a685
and dword [ebp - 0x6f0], 0
cmp dword [ebp - 0x6f0], 0xec01
jg 0x1000a69d
mov dword [ebp - 0x3b4], 1
jmp 0x1000a6a4
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
sub eax, dword [ebp - 0x64]
cmp dword [ebp - 0x64], eax
jg 0x1000a6be
mov dword [ebp - 0x6f8], 1
jmp 0x1000a6c5
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0x39b642c
jle 0x1000a82c
mov dword [ebp - 0x288], 0
mov dword [ebp - 0x148], 0xffffffff
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1000a712
push 0xf01
push 0
push 0x24f2
push 0x1bff
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x1000a810
mov eax, dword [ebp - 0x288]
neg eax
jne 0x1000a750
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xad4], eax
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x148], eax
jl 0x1000a750
and dword [ebp - 0x3bc], 0
jmp 0x1000a75a
mov dword [ebp - 0x3bc], 1
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x3bc], eax
jg 0x1000a774
mov dword [ebp - 0x700], 1
jmp 0x1000a77b
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x718]
cmp dword [ebp - 0x700], eax
jle 0x1000a795
mov dword [ebp - 0x3c4], 1
jmp 0x1000a79c
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x3c4], eax
jl 0x1000a7b6
mov dword [ebp - 0x708], 1
jmp 0x1000a7bd
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x148]
add eax, dword [ebp - 0x708]
jne 0x1000a7d2
cmp dword [ebp - 0x148], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0x2967684a
jge 0x1000a7ee
mov dword [ebp - 0x3cc], 1
jmp 0x1000a7f5
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x3cc], eax
je 0x1000a810
and dword [ebp - 0x710], 0
jmp 0x1000a81a
mov dword [ebp - 0x710], 1
imul eax, dword [ebp - 0x710], 0xfffc
mov dword [ebp - 0x64], eax
jmp 0x1000a95d
mov dword [ebp - 0xf8], 0x7826243a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x28], 0
jne 0x1000a855
cmp dword [ebp - 0xf8], 0
jne 0x1000a855
and dword [ebp - 0x3e4], 0
jmp 0x1000a85f
mov dword [ebp - 0x3e4], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xf8]
cmp dword [ebp + eax - 0x28], ecx
jg 0x1000a87d
mov dword [ebp - 0x3d4], 1
jmp 0x1000a884
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x3d4], eax
jg 0x1000a8a8
cmp dword [ebp - 0x718], 0
jne 0x1000a8a8
and dword [ebp - 0x3dc], 0
jmp 0x1000a8b2
mov dword [ebp - 0x3dc], 1
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x64]
jg 0x1000a8d6
mov dword [ebp - 0x720], 1
jmp 0x1000a8dd
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0x720]
cmp dword [ebp - 0x3e4], eax
jge 0x1000a8fe
mov dword [ebp - 0x728], 1
jmp 0x1000a905
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf8]
imul ecx, dword [ebp - 0x728]
push 4
pop edx
imul edx, edx, 0
sub ecx, dword [ebp + edx - 0x28]
sub ecx, dword [ebp - 0x238]
sub ecx, dword [ebp - 0xf8]
sub eax, ecx
cmp eax, dword [ebp - 0x130]
jne 0x1000a944
mov dword [ebp - 0x3ec], 1
jmp 0x1000a94b
and dword [ebp - 0x3ec], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp + eax - 0xa84], ecx
mov dword [ebp - 0x130], 0
jmp 0x1000a976
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jne 0x1000ab28
mov dword [ebp - 0x158], 0xfffffff6
mov dword [ebp - 0x404], 0
mov dword [ebp - 0x414], 1
mov dword [ebp - 0x830], 0xffffffff
mov eax, 0x211a
test eax, eax
je 0x1000a9de
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0x158]
neg eax
imul eax, eax, 0x64b2
test eax, eax
je 0x1000a9de
mov dword [ebp - 0x738], 1
jmp 0x1000a9e5
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x730], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x730]
mov dword [ebp + eax - 0xa84], ecx
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x730], eax
jl 0x1000aa1e
mov dword [ebp - 0x3f4], 1
jmp 0x1000aa25
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x3f4], eax
jne 0x1000aa3f
mov dword [ebp - 0x3fc], 1
jmp 0x1000aa46
and dword [ebp - 0x3fc], 0
mov eax, dword [ebp - 0x738]
cmp eax, dword [ebp - 0x3fc]
je 0x1000aa60
mov dword [ebp - 0x740], 1
jmp 0x1000aa67
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0xb04], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x158]
cmp dword [ebp + eax - 0x28], ecx
jle 0x1000aa9d
mov dword [ebp - 0x748], 1
jmp 0x1000aaa4
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x748], eax
jne 0x1000aabe
mov dword [ebp - 0x40c], 1
jmp 0x1000aac5
and dword [ebp - 0x40c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp dword [ebp - 0x40c], eax
jne 0x1000aae3
mov dword [ebp - 0x750], 1
jmp 0x1000aaea
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0x414], eax
jne 0x1000ab10
mov dword [ebp - 0x758], 1
jmp 0x1000ab17
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x830], eax
jmp 0x1000a969
mov dword [ebp - 0x138], 0x5c68ec0a
mov dword [ebp - 0x138], 0x13
jmp 0x1000ab4b
mov eax, dword [ebp - 0x138]
dec eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 1
jg 0x1000ab82
mov dword [ebp - 0x7b0], 0xffffffff
mov dword [ebp - 0x878], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xa08], eax
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x878], eax
jmp 0x1000ab3e
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1000ab9c
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
movzx eax, byte [0x10662458]
test eax, eax
je 0x1000abba
mov esi, 0x10076838
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000e45c
mov dword [ebp - 0x258], 0xf89b546
mov dword [ebp - 0x1b0], 0
jmp 0x1000abdd
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jge 0x1000abf9
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0xb9c], 0x85f70ad6
jmp 0x1000abd0
mov dword [ebp - 0x258], 2
jmp 0x1000ac12
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jl 0x1000acf7
mov dword [ebp - 0x1b8], 0
jmp 0x1000ac38
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 1
jge 0x1000ac54
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x150], 0
jmp 0x1000ac2b
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000ac7f
push 0
push 0x1cc0
push 0
push 0x8f2
push 0x211c
call dword [sym.imp.GDI32.dll_ExtCreatePen]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x150], 2
jmp 0x1000acad
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x150], 0
jl 0x1000acf2
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1000acd7
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x150]
cmp dword [ebp + eax*4 - 0xb9c], 0
je 0x1000acf0
jmp 0x1000ac92
jmp 0x1000ac92
jmp 0x1000ac05
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1000ad1d
push 0
push 0x140d
push 0x1381
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x760], 0xf11b
mov dword [ebp - 0x428], 0
mov dword [ebp - 0x1c8], 2
mov dword [ebp - 0x240], 0
jmp 0x1000ad5e
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1000ad7a
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x9d4], 0xfffffff6
jmp 0x1000ad51
cmp dword [ebp - 0x108], 0
je 0x1000ada1
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x1000ad9f
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
jmp 0x1000ade1
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x1000adbb
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1000ade1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_EndDoc]
mov dword [ebp - 0x108], 1
jmp 0x1000adfa
cmp dword [ebp - 0x108], 0
jl 0x1000b010
pop edi
pop esi
mov esp, ebp
pop ebp
ret