Function at 0x1000a829
Capabilities:
Get system information on windows
Identify system language via api
Modify service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xf9c
push esi
push edi
mov dword [ebp - 0x90], 0x91a049fe
mov dword [ebp - 0x308], 0
jmp 0x1000a857
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 3
jge 0x1000a873
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xe48], 0xe785c2f4
jmp 0x1000a84a
mov dword [ebp - 0x90], 0
jmp 0x1000a88c
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0xfffffff6
jg 0x1000abce
mov dword [ebp - 0x70], 8
mov dword [ebp - 0x204], 0xf86f25db
mov dword [ebp - 0x2cc], 0
jmp 0x1000a8c3
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 2
jge 0x1000a8df
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x358], 0x124f84b8
jmp 0x1000a8b6
mov dword [ebp - 0x70], 1
jmp 0x1000a8ef
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jl 0x1000abc9
mov dword [ebp - 0xe0], 0x8f3c34ee
mov dword [ebp - 0x1b4], 0x169ff4ca
mov dword [ebp - 0xe0], 1
jmp 0x1000a926
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1000abb8
mov dword [ebp - 0x118], 0xb055cc25
mov dword [ebp - 0x118], 1
jmp 0x1000a956
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1000aadd
mov dword [ebp - 0x7f4], 0x1ef9953e
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x358]
add eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x118]
jle 0x1000a991
mov dword [ebp - 0x80c], 1
jmp 0x1000a998
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x118], 0
je 0x1000aa2a
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x90], eax
je 0x1000a9bf
mov dword [ebp - 0x4cc], 1
jmp 0x1000a9c6
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x4cc], eax
jl 0x1000a9e0
mov dword [ebp - 0x7e4], 1
jmp 0x1000a9e7
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
je 0x1000aa0e
cmp dword [ebp - 0x70], 0
je 0x1000aa0e
mov dword [ebp - 0x7ec], 1
jmp 0x1000aa15
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7f4], eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0x358], ecx
jle 0x1000aa48
mov dword [ebp - 0x7fc], 1
jmp 0x1000aa4f
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x1b4], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x1b4], eax
je 0x1000aa75
mov dword [ebp - 0x804], 1
jmp 0x1000aa7c
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x804], eax
jge 0x1000aa96
mov dword [ebp - 0x814], 1
jmp 0x1000aa9d
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x80c]
cmp eax, dword [ebp - 0x814]
jge 0x1000aab7
mov dword [ebp - 0x81c], 1
jmp 0x1000aabe
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x81c]
sub ecx, dword [ebp + eax*4 - 0x358]
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x358], ecx
jmp 0x1000a949
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x204]
cmp dword [ebp + eax - 0x358], ecx
je 0x1000aafe
mov dword [ebp - 0x83c], 1
jmp 0x1000ab05
and dword [ebp - 0x83c], 0
mov dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x83c], eax
jge 0x1000ab29
mov dword [ebp - 0x844], 1
jmp 0x1000ab30
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x90], 0x8f4
jge 0x1000ab48
mov dword [ebp - 0x84c], 1
jmp 0x1000ab4f
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x844]
cmp eax, dword [ebp - 0x84c]
jg 0x1000ab69
mov dword [ebp - 0x8e0], 1
jmp 0x1000ab70
and dword [ebp - 0x8e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x358]
mov dword [ebp - 0xba8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x358]
mov ecx, dword [ebp - 0xe0]
mov ecx, dword [ebp + ecx*4 - 0x358]
imul ecx, dword [ebp - 0x204]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe48], eax
jmp 0x1000a919
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x1b4], eax
jmp 0x1000a8e8
jmp 0x1000a87f
mov dword [ebp - 0xd4], 0x91a049fe
mov dword [ebp - 0x318], 0
jmp 0x1000abf1
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 3
jge 0x1000ac0d
mov eax, dword [ebp - 0x318]
mov dword [ebp + eax*4 - 0xe90], 0xe785c2f4
jmp 0x1000abe4
mov dword [ebp - 0xd4], 0
jmp 0x1000ac26
mov eax, dword [ebp - 0xd4]
dec eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 0xfffffff6
jg 0x1000af68
mov dword [ebp - 0x80], 8
mov dword [ebp - 0x2d4], 0xf86f25db
mov dword [ebp - 0x20c], 0
jmp 0x1000ac5d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1000ac79
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x380], 0x124f84b8
jmp 0x1000ac50
mov dword [ebp - 0x80], 1
jmp 0x1000ac89
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1000af63
mov dword [ebp - 0xe4], 0x8f3c34ee
mov dword [ebp - 0x1f4], 0x169ff4ca
mov dword [ebp - 0xe4], 1
jmp 0x1000acc0
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x1000af52
mov dword [ebp - 0x120], 0xb055cc25
mov dword [ebp - 0x120], 1
jmp 0x1000acf0
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x1000ae77
mov dword [ebp - 0x7dc], 0x1ef9953e
mov eax, dword [ebp - 0x80]
mov eax, dword [ebp + eax*4 - 0x380]
add eax, dword [ebp - 0xd4]
cmp eax, dword [ebp - 0x120]
jle 0x1000ad2b
mov dword [ebp - 0x400], 1
jmp 0x1000ad32
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x120], 0
je 0x1000adc4
mov eax, dword [ebp - 0x120]
cmp dword [ebp - 0xd4], eax
je 0x1000ad59
mov dword [ebp - 0x854], 1
jmp 0x1000ad60
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x854], eax
jl 0x1000ad7a
mov dword [ebp - 0x85c], 1
jmp 0x1000ad81
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0
je 0x1000ada8
cmp dword [ebp - 0x80], 0
je 0x1000ada8
mov dword [ebp - 0x3f8], 1
jmp 0x1000adaf
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x7dc], eax
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0xe4]
cmp dword [ebp + eax*4 - 0x380], ecx
jle 0x1000ade2
mov dword [ebp - 0x414], 1
jmp 0x1000ade9
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x1f4], eax
je 0x1000ae0f
mov dword [ebp - 0x628], 1
jmp 0x1000ae16
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0xe4]
cmp dword [ebp - 0x628], eax
jge 0x1000ae30
mov dword [ebp - 0x740], 1
jmp 0x1000ae37
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x400]
cmp eax, dword [ebp - 0x740]
jge 0x1000ae51
mov dword [ebp - 0x408], 1
jmp 0x1000ae58
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x80]
mov ecx, dword [ebp - 0x408]
sub ecx, dword [ebp + eax*4 - 0x380]
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x380], ecx
jmp 0x1000ace3
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2d4]
cmp dword [ebp + eax - 0x380], ecx
je 0x1000ae98
mov dword [ebp - 0x630], 1
jmp 0x1000ae9f
and dword [ebp - 0x630], 0
mov dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0x630], eax
jge 0x1000aec3
mov dword [ebp - 0x410], 1
jmp 0x1000aeca
and dword [ebp - 0x410], 0
cmp dword [ebp - 0xd4], 0x8f4
jge 0x1000aee2
mov dword [ebp - 0x810], 1
jmp 0x1000aee9
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x810]
jg 0x1000af03
mov dword [ebp - 0x8fc], 1
jmp 0x1000af0a
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x380]
mov dword [ebp - 0xb74], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
mov ecx, dword [ebp - 0xe4]
mov ecx, dword [ebp + ecx*4 - 0x380]
imul ecx, dword [ebp - 0x2d4]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe90], eax
jmp 0x1000acb3
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x1f4], eax
jmp 0x1000ac82
jmp 0x1000ac19
mov dword [ebp - 0x128], 0x56834504
mov dword [ebp - 0x90c], 1
mov dword [ebp - 0xb7c], 0xd3e9
mov dword [ebp - 0x214], 0
jmp 0x1000af9f
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1000afbb
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x904], 0x82b4746a
jmp 0x1000af92
cmp dword [ebp - 0x128], 0
je 0x1000b000
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x1000affb
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x55e
push 0x2474
push 0x18d5
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x1000b18a
mov dword [ebp - 0x7d0], 9
mov dword [ebp - 0x314], 1
cmp dword [ebp - 0x128], 0
je 0x1000b043
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x904], 0xfaf0
mov eax, 0xfaf0
test eax, eax
je 0x1000b043
mov dword [ebp - 0x418], 1
jmp 0x1000b04a
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x7d0]
cmp eax, dword [ebp - 0x418]
jg 0x1000b064
mov dword [ebp - 0x420], 1
jmp 0x1000b06b
and dword [ebp - 0x420], 0
imul eax, dword [ebp - 0x314], 0xcb8f
cmp eax, 0xfffffffb
je 0x1000b086
mov dword [ebp - 0x638], 1
jmp 0x1000b08d
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x638], eax
je 0x1000b0a4
cmp dword [ebp - 0x128], 0
jne 0x1000b0b6
cmp dword [ebp - 0x314], 0
jne 0x1000b0b6
and dword [ebp - 0x748], 0
jmp 0x1000b0c0
mov dword [ebp - 0x748], 1
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0x748]
jge 0x1000b0da
mov dword [ebp - 0x428], 1
jmp 0x1000b0e1
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x428]
jg 0x1000b0fb
mov dword [ebp - 0x640], 1
jmp 0x1000b102
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x640]
lea eax, [ecx + eax + 0x86d6]
imul eax, dword [ebp - 0x314]
test eax, eax
je 0x1000b135
cmp dword [ebp - 0x314], 0
je 0x1000b135
mov dword [ebp - 0x430], 1
jmp 0x1000b13c
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x430], eax
jle 0x1000b156
mov dword [ebp - 0x438], 1
jmp 0x1000b15d
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x7d0]
cmp dword [ebp - 0x438], eax
jne 0x1000b177
mov dword [ebp - 0x648], 1
jmp 0x1000b17e
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x648]
mov dword [ebp - 0x90c], eax
mov dword [ebp - 0x4c], 0x825e7a66
mov dword [ebp - 0x448], 0xfffffffe
mov dword [ebp - 0x21c], 0
jmp 0x1000b1b4
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x1000b1d0
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x750], 9
jmp 0x1000b1a7
mov dword [ebp - 0x4c], 0
jmp 0x1000b1e0
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xffffffec
jg 0x1000b360
mov dword [ebp - 0x1d8], 0xffffffff
mov dword [ebp - 0x924], 0x54e7f13b
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x440]
mov dword [ebp + eax - 0x750], ecx
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0x440], eax
jle 0x1000b234
mov dword [ebp - 0x914], 1
jmp 0x1000b23b
and dword [ebp - 0x914], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x750]
cmp dword [ebp - 0x1d8], eax
jg 0x1000b25c
mov dword [ebp - 0x650], 1
jmp 0x1000b263
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x448]
imul eax, dword [ebp - 0x650]
sub eax, dword [ebp - 0x4c]
add eax, 0x45a8
cmp eax, dword [ebp - 0x1d8]
jg 0x1000b295
mov dword [ebp - 0x450], 1
jmp 0x1000b29c
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x450]
jge 0x1000b2b3
mov dword [ebp - 0x858], 1
jmp 0x1000b2ba
and dword [ebp - 0x858], 0
cmp dword [ebp - 0x858], 0x2057
jne 0x1000b2d2
mov dword [ebp - 0x458], 1
jmp 0x1000b2d9
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 8
je 0x1000b2ee
mov dword [ebp - 0x658], 1
jmp 0x1000b2f5
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x658]
cmp dword [ebp - 0x1d8], eax
jne 0x1000b30f
mov eax, 0x79dc8669
test eax, eax
je 0x1000b324
cmp dword [ebp - 0x1d8], 0
je 0x1000b324
mov dword [ebp - 0x91c], 1
jmp 0x1000b32b
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xb84], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jne 0x1000b348
mov dword [ebp - 0x460], 1
jmp 0x1000b34f
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x924], eax
jmp 0x1000b1d9
mov byte [ebp - 0x113], 0
movzx eax, byte [ebp - 0x113]
test eax, eax
je 0x1000b37c
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 0x78], 1
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x2dc], 0
jmp 0x1000b3b7
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 2
jge 0x1000b3d3
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0x390], 0xffffffff
jmp 0x1000b3aa
cmp dword [ebp - 0x78], 0xb274bf90
jb 0x1000b3e8
mov dword [ebp - 0x758], 1
jmp 0x1000b3ef
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0xbf0b
jle 0x1000b40d
mov dword [ebp - 0x468], 1
jmp 0x1000b414
and dword [ebp - 0x468], 0
imul eax, dword [ebp - 0x468], 0x85c
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x1a8], eax
jge 0x1000b447
mov dword [ebp - 0x470], 1
jmp 0x1000b44e
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xb8c], eax
cmp dword [ebp - 0x58], 0
jne 0x1000b46c
cmp dword [ebp - 0x58], 0
jne 0x1000b46c
and dword [ebp - 0x660], 0
jmp 0x1000b476
mov dword [ebp - 0x660], 1
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0x58]
jl 0x1000b491
mov dword [ebp - 0x92c], 1
jmp 0x1000b498
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xb94], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x470]
mov dword [ebp + eax - 0x390], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x390]
mov dword [ebp - 0x58], eax
mov eax, 0xfaab39e2
test eax, eax
je 0x1000b6f7
mov dword [ebp - 0x934], 1
mov dword [ebp - 0x98], 0
jmp 0x1000b4f4
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x1000b510
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x980], 3
jmp 0x1000b4e7
mov dword [ebp - 0x98], 0
jmp 0x1000b529
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 4
jge 0x1000b545
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xeac], 0xea885c82
jmp 0x1000b51c
mov dword [ebp - 0x78], 0
jmp 0x1000b555
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jg 0x1000b6f5
mov dword [ebp - 0xb9c], 0xfffffff6
mov dword [ebp - 0xba4], 0xbc6a687e
mov dword [ebp - 0xbac], 0x2b9cbadb
mov dword [ebp - 0x224], 0
jmp 0x1000b596
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 4
jge 0x1000b5b2
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xdc4], 0x435c5265
jmp 0x1000b589
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x390]
mov dword [ebp + ecx*4 - 0x390], eax
mov eax, 0xbefa025e
test eax, eax
je 0x1000b6b1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdc4]
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xdc4]
dec ecx
push 4
pop edx
shl edx, 1
mov dword [ebp + edx - 0xdc4], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x980], 0
jne 0x1000b652
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x390], 0
je 0x1000b626
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x980], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x390]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x390], 8
mov dword [ebp - 0x58], 8
cmp dword [ebp - 0x58], 0
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp + eax*4 - 0x390]
mov dword [ebp - 0xbb4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xeac]
add eax, dword [ebp - 0x78]
je 0x1000b689
cmp dword [ebp - 0x1a8], 0
je 0x1000b689
mov dword [ebp - 0x7d8], 1
jmp 0x1000b690
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
je 0x1000b6b1
mov dword [ebp - 0x478], 1
jmp 0x1000b6b8
and dword [ebp - 0x478], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x980]
imul eax, dword [ebp - 0x478]
test eax, eax
je 0x1000b6dc
mov dword [ebp - 0x668], 1
jmp 0x1000b6e3
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
inc eax
mov dword [ebp - 0x934], eax
jmp 0x1000b54e
jmp 0x1000b758
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000b713
push 0
push 0
call dword [sym.imp.USER32.dll_UnregisterClassA]
mov dword [ebp - 0x1ac], 0
jmp 0x1000b72c
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0x15
jne 0x1000b758
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x1000b756
push 0
push 0x23b9
push 0
call dword [sym.imp.ADVAPI32.dll_ControlService]
jmp 0x1000b71f
mov dword [ebp - 0xa8], 0x91a049fe
mov dword [ebp - 0xa0], 0xcea5d6c0
mov dword [ebp - 0x944], 0xa4c8
mov dword [ebp - 0x488], 0xfffffff8
mov dword [ebp - 0x3cc], 0x66ef3b06
mov dword [ebp - 0x818], 0
mov dword [ebp - 0xa50], 2
mov dword [ebp - 0xa4c], 2
mov dword [ebp - 0xa48], 2
mov dword [ebp - 0xa44], 2
mov dword [ebp - 0x95c], 0xfffffffe
mov dword [ebp - 0xc0], 0
jmp 0x1000b7df
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x1000b7fb
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1c0], 0xdd03
jmp 0x1000b7d2
mov dword [ebp - 0xc0], 0
jmp 0x1000b814
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x1000b830
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0xa20], 0xffffffff
jmp 0x1000b807
mov dword [ebp - 0xa0], 0
jmp 0x1000b849
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jle 0x1000b871
mov dword [ebp - 0x93c], 0x4c8d3c89
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c0]
mov dword [ebp - 0x93c], eax
jmp 0x1000b83c
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa0]
cmp dword [ebp + eax - 0x1c0], ecx
jne 0x1000b941
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa20], eax
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0xbbc], eax
cmp dword [ebp - 0xa0], 0x3ba6
jle 0x1000b8c9
mov dword [ebp - 0x480], 1
jmp 0x1000b8d0
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 7
jb 0x1000b8e5
mov dword [ebp - 0x760], 1
jmp 0x1000b8ec
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 1
jne 0x1000b919
mov dword [ebp - 0x670], 1
jmp 0x1000b920
and dword [ebp - 0x670], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c0]
cmp dword [ebp - 0x670], eax
jge 0x1000b941
mov dword [ebp - 0x490], 1
jmp 0x1000b948
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x490]
mov dword [ebp - 0xa0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c0]
cmp dword [ebp - 0xa0], eax
jne 0x1000b97c
mov dword [ebp - 0x94c], 1
jmp 0x1000b983
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0x818]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xa50]
test eax, eax
je 0x1000b9c3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa50], 0
je 0x1000b9c3
mov dword [ebp - 0x498], 1
jmp 0x1000b9ca
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
sub eax, 9
je 0x1000b9f1
push 0xfffffffffffffff6
pop eax
test eax, eax
je 0x1000b9f1
mov eax, 0x3550e352
test eax, eax
je 0x1000b9f1
mov dword [ebp - 0x678], 1
jmp 0x1000b9f8
and dword [ebp - 0x678], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1c0]
cmp dword [ebp - 0x678], eax
jle 0x1000ba19
mov dword [ebp - 0x954], 1
jmp 0x1000ba20
and dword [ebp - 0x954], 0
mov dword [ebp - 0x95c], 0xf620a341
mov dword [ebp - 0x328], 0
jmp 0x1000ba43
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 3
jge 0x1000ba5f
mov eax, dword [ebp - 0x328]
mov dword [ebp + eax*4 - 0xa08], 0xad313dd3
jmp 0x1000ba36
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa08], 0xb
jmp 0x1000ba8d
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa08]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa08], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa08], 0x1d
jge 0x1000bb63
mov dword [ebp - 0x22c], 0
jmp 0x1000baba
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1000bad6
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x898], 0
jmp 0x1000baad
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x898], 0
jmp 0x1000bb04
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x898]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x898], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x898], 6
jle 0x1000bb5e
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x1000bb42
push 0
push 0x19aa
push 0x1ddb
push 0xed9
push 0xd39
call dword [sym.imp.GDI32.dll_CreateBitmap]
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000bb5c
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
jmp 0x1000bae9
jmp 0x1000ba72
mov dword [ebp - 0x2e4], 0
jmp 0x1000bb7c
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 3
jge 0x1000bb98
mov eax, dword [ebp - 0x2e4]
mov dword [ebp + eax*4 - 0xe54], 0xe785c2f4
jmp 0x1000bb6f
mov dword [ebp - 0xa8], 0
jmp 0x1000bbb1
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0xfffffff6
jg 0x1000bffb
mov dword [ebp - 0xc8], 0
jmp 0x1000bbd7
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1000bbf3
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0xe78], 1
jmp 0x1000bbca
mov dword [ebp - 0xc8], 0
jmp 0x1000bc0c
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 2
jge 0x1000bc28
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x828], 0x2c70bb74
jmp 0x1000bbff
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x828], 0
jmp 0x1000bc56
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x828]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x828], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x828], 2
jg 0x1000bca5
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x1000bc8a
push 0x15e3
push 0x1445
push 0
call dword [sym.imp.USER32.dll_OffsetRect]
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x828]
cmp dword [ebp + eax*4 - 0xe78], 0
je 0x1000bca3
jmp 0x1000bc3b
jmp 0x1000bc3b
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x1000bcc6
push 0
push 0x221d
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov dword [ebp - 0x6c], 8
mov dword [ebp - 0x320], 0xf86f25db
mov dword [ebp - 0x234], 0
jmp 0x1000bcf0
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 2
jge 0x1000bd0c
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x368], 0x124f84b8
jmp 0x1000bce3
mov dword [ebp - 0x6c], 1
jmp 0x1000bd1c
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0
jl 0x1000bff6
mov dword [ebp - 0xdc], 0x8f3c34ee
mov dword [ebp - 0x1e8], 0x169ff4ca
mov dword [ebp - 0xdc], 1
jmp 0x1000bd53
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0
jl 0x1000bfe5
mov dword [ebp - 0x130], 0xb055cc25
mov dword [ebp - 0x130], 1
jmp 0x1000bd83
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jl 0x1000bf0a
mov dword [ebp - 0x680], 0x1ef9953e
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0x368]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x130]
jle 0x1000bdbe
mov dword [ebp - 0x4b8], 1
jmp 0x1000bdc5
and dword [ebp - 0x4b8], 0
cmp dword [ebp - 0x130], 0
je 0x1000be57
mov eax, dword [ebp - 0x130]
cmp dword [ebp - 0xa8], eax
je 0x1000bdec
mov dword [ebp - 0x4a0], 1
jmp 0x1000bdf3
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x4a0], eax
jl 0x1000be0d
mov dword [ebp - 0x768], 1
jmp 0x1000be14
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 0
je 0x1000be3b
cmp dword [ebp - 0x6c], 0
je 0x1000be3b
mov dword [ebp - 0x4a8], 1
jmp 0x1000be42
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xdc]
cmp dword [ebp + eax*4 - 0x368], ecx
jle 0x1000be75
mov dword [ebp - 0x4b0], 1
jmp 0x1000be7c
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x1e8], eax
je 0x1000bea2
mov dword [ebp - 0x7e0], 1
jmp 0x1000bea9
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x7e0], eax
jge 0x1000bec3
mov dword [ebp - 0x688], 1
jmp 0x1000beca
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x4b8]
cmp eax, dword [ebp - 0x688]
jge 0x1000bee4
mov dword [ebp - 0x4c0], 1
jmp 0x1000beeb
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x4c0]
sub ecx, dword [ebp + eax*4 - 0x368]
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x368], ecx
jmp 0x1000bd76
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x320]
cmp dword [ebp + eax - 0x368], ecx
je 0x1000bf2b
mov dword [ebp - 0x770], 1
jmp 0x1000bf32
and dword [ebp - 0x770], 0
mov dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 0x1e8]
cmp dword [ebp - 0x770], eax
jge 0x1000bf56
mov dword [ebp - 0x4c8], 1
jmp 0x1000bf5d
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0xa8], 0x8f4
jge 0x1000bf75
mov dword [ebp - 0x690], 1
jmp 0x1000bf7c
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x4c8]
cmp eax, dword [ebp - 0x690]
jg 0x1000bf96
mov dword [ebp - 0x964], 1
jmp 0x1000bf9d
and dword [ebp - 0x964], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x368]
mov dword [ebp - 0xbc4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x368]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ebp + ecx*4 - 0x368]
imul ecx, dword [ebp - 0x320]
sub eax, ecx
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe54], eax
jmp 0x1000bd46
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1e8], eax
jmp 0x1000bd15
jmp 0x1000bba4
mov dword [ebp - 0x24], 1
mov dword [ebp - 0x3ac], 0x35290ce9
mov dword [ebp - 0xbcc], 0x32e0c280
mov dword [ebp - 0xbd4], 1
mov dword [ebp - 4], 0
jmp 0x1000c030
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1000c046
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x350], 0x41b3c692
jmp 0x1000c029
mov dword [ebp - 4], 0
jmp 0x1000c056
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x1000c06c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xf0c], 0xea0c8d4
jmp 0x1000c04f
mov dword [ebp - 4], 0
jmp 0x1000c07c
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1000c092
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xe6c], 0xfffffffd
jmp 0x1000c075
mov dword [ebp - 4], 0
jmp 0x1000c0a2
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 3
jge 0x1000c0b8
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xcbc], 0x13e0
jmp 0x1000c09b
mov dword [ebp - 0x24], 0
jmp 0x1000c0c8
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1000c354
mov dword [ebp - 0x3c4], 0
mov dword [ebp - 0xbdc], 0xd538770c
mov dword [ebp - 0xbe4], 0xfffffffa
mov dword [ebp - 0xbec], 5
mov dword [ebp - 0xbf4], 0x227283a3
mov dword [ebp - 0xbfc], 0xc29aeda1
mov dword [ebp - 0xc04], 0xbb4ee00b
mov dword [ebp - 0xc0c], 1
mov dword [ebp - 0xc14], 0x8a59c2d
mov dword [ebp - 0xc1c], 0x46ac1dea
mov dword [ebp - 0xc24], 0xa0dcb3df
mov dword [ebp - 0x23c], 0
jmp 0x1000c159
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 3
jge 0x1000c175
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0xf84], 0x3c77d98a
jmp 0x1000c14c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0x96c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x96c]
mov dword [ebp + eax - 0xf0c], ecx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xc3c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0xc44], eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x3ac]
dec eax
mov dword [ebp - 0x3ac], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe6c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x350], 0
jne 0x1000c22a
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x350], 0
je 0x1000c243
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x350], 0
je 0x1000c243
mov dword [ebp - 0x4d0], 1
jmp 0x1000c24a
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
cmp dword [ebp - 0x4d0], eax
jg 0x1000c268
mov dword [ebp - 0x840], 1
jmp 0x1000c26f
and dword [ebp - 0x840], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x350]
cmp dword [ebp - 0x840], eax
jg 0x1000c298
mov eax, 0xf888c554
test eax, eax
je 0x1000c298
mov dword [ebp - 0x4d8], 1
jmp 0x1000c29f
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x3c4]
cmp dword [ebp - 0x4d8], eax
jle 0x1000c2c2
mov eax, 0xd3cd3624
test eax, eax
je 0x1000c2c2
mov dword [ebp - 0x698], 1
jmp 0x1000c2c9
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x698], eax
je 0x1000c2ef
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x350], 0
je 0x1000c2ef
mov dword [ebp - 0x4e0], 1
jmp 0x1000c2f6
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x4e0]
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ebp + ecx*4 - 0x350]
jne 0x1000c318
mov dword [ebp - 0x778], 1
jmp 0x1000c31f
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x350]
imul eax, dword [ebp - 0x778]
mov dword [ebp - 0x3c4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcbc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xcbc], eax
jmp 0x1000c0c1
mov dword [ebp - 0x138], 0x56834504
mov dword [ebp - 0x9b8], 1
mov dword [ebp - 0xc5c], 0xd3e9
mov dword [ebp - 0x2ec], 0
jmp 0x1000c38b
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jge 0x1000c3a7
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x974], 0x82b4746a
jmp 0x1000c37e
cmp dword [ebp - 0x138], 0
je 0x1000c3ec
mov byte [ebp - 0x121], 0
movzx eax, byte [ebp - 0x121]
test eax, eax
je 0x1000c3e7
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x55e
push 0x2474
push 0x18d5
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x1000c576
mov dword [ebp - 0x780], 9
mov dword [ebp - 0x244], 1
cmp dword [ebp - 0x138], 0
je 0x1000c42f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x974], 0xfaf0
mov eax, 0xfaf0
test eax, eax
je 0x1000c42f
mov dword [ebp - 0x4e8], 1
jmp 0x1000c436
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x780]
cmp eax, dword [ebp - 0x4e8]
jg 0x1000c450
mov dword [ebp - 0x4f0], 1
jmp 0x1000c457
and dword [ebp - 0x4f0], 0
imul eax, dword [ebp - 0x244], 0xcb8f
cmp eax, 0xfffffffb
je 0x1000c472
mov dword [ebp - 0x6a0], 1
jmp 0x1000c479
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x6a0], eax
je 0x1000c490
cmp dword [ebp - 0x138], 0
jne 0x1000c4a2
cmp dword [ebp - 0x244], 0
jne 0x1000c4a2
and dword [ebp - 0x7e8], 0
jmp 0x1000c4ac
mov dword [ebp - 0x7e8], 1
mov eax, dword [ebp - 0x4f0]
cmp eax, dword [ebp - 0x7e8]
jge 0x1000c4c6
mov dword [ebp - 0x4f8], 1
jmp 0x1000c4cd
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x4f8]
jg 0x1000c4e7
mov dword [ebp - 0x6a8], 1
jmp 0x1000c4ee
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x138]
mov ecx, dword [ebp - 0x6a8]
lea eax, [ecx + eax + 0x86d6]
imul eax, dword [ebp - 0x244]
test eax, eax
je 0x1000c521
cmp dword [ebp - 0x244], 0
je 0x1000c521
mov dword [ebp - 0x500], 1
jmp 0x1000c528
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x500], eax
jle 0x1000c542
mov dword [ebp - 0x508], 1
jmp 0x1000c549
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x780]
cmp dword [ebp - 0x508], eax
jne 0x1000c563
mov dword [ebp - 0x6b0], 1
jmp 0x1000c56a
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x10], 0xffffffff
mov dword [ebp - 0x520], 0
mov dword [ebp - 0xc64], 0xb5f732bc
mov dword [ebp - 0x284], 0
jmp 0x1000c5b1
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1000c5cd
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xa28], 9
jmp 0x1000c5a4
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jl 0x1000c5e3
xor eax, eax
inc eax
jne 0x1000c5e3
and dword [ebp - 0x9c0], 0
jmp 0x1000c5ed
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc6c], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc74], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xc7c], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x48], eax
jg 0x1000c61c
mov dword [ebp - 0x510], 1
jmp 0x1000c623
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x10], eax
je 0x1000c6e8
mov dword [ebp - 0x10], 0
jmp 0x1000c645
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xfffffff7
jl 0x1000c674
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x1000c672
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x1000c63e
mov dword [ebp - 0x10], 0
jmp 0x1000c684
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jg 0x1000c6e3
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0xa28]
mov dword [ebp + ecx*4 - 0xa28], eax
mov dword [ebp - 0x48], 1
jmp 0x1000c6ae
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1000c6e1
mov dword [ebp - 0xc84], 0x2c593c86
mov dword [ebp - 0xc8c], 0xc8a52b4b
mov dword [ebp - 0x820], 0xffffffff
mov eax, dword [ebp - 0x820]
inc eax
mov dword [ebp - 0x820], eax
jmp 0x1000c6a7
jmp 0x1000c67d
jmp 0x1000c7cc
mov dword [ebp - 0x9c8], 0xffffffff
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000c718
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x10], 6
jmp 0x1000c728
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x16
je 0x1000c7cc
mov dword [ebp - 0xc94], 1
mov dword [ebp - 0xc9c], 0x6e89be30
mov dword [ebp - 0x9d0], 0x38b4fd08
mov eax, dword [ebp - 0x9c8]
inc eax
cmp eax, 0xfffffffc
jge 0x1000c768
mov dword [ebp - 0x518], 1
jmp 0x1000c76f
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
add eax, 0x7b05
cmp eax, dword [ebp - 0x48]
jne 0x1000c78b
mov dword [ebp - 0x6b8], 1
jmp 0x1000c792
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
dec eax
cmp eax, dword [ebp - 0x520]
jne 0x1000c7ad
mov dword [ebp - 0x788], 1
jmp 0x1000c7b4
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x520]
imul eax, dword [ebp - 0x788]
mov dword [ebp - 0x9d0], eax
jmp 0x1000c721
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x3b4], 0x35290ce9
mov dword [ebp - 0xca4], 0x32e0c280
mov dword [ebp - 0xcac], 1
mov dword [ebp - 0xc], 0
jmp 0x1000c801
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1000c817
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x338], 0x41b3c692
jmp 0x1000c7fa
mov dword [ebp - 0xc], 0
jmp 0x1000c827
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
jge 0x1000c83d
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xeec], 0xea0c8d4
jmp 0x1000c820
mov dword [ebp - 0xc], 0
jmp 0x1000c84d
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1000c863
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xe84], 0xfffffffd
jmp 0x1000c846
mov dword [ebp - 0xc], 0
jmp 0x1000c873
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1000c889
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xccc], 0x13e0
jmp 0x1000c86c
mov dword [ebp - 0x1c], 0
jmp 0x1000c899
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1000cb25
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0xd90], 0xd538770c
mov dword [ebp - 0xd98], 0xfffffffa
mov dword [ebp - 0xda0], 5
mov dword [ebp - 0xda8], 0x227283a3
mov dword [ebp - 0xdb0], 0xc29aeda1
mov dword [ebp - 0xd74], 0xbb4ee00b
mov dword [ebp - 0xaa8], 1
mov dword [ebp - 0xc60], 0x8a59c2d
mov dword [ebp - 0xab0], 0x46ac1dea
mov dword [ebp - 0xdf0], 0xa0dcb3df
mov dword [ebp - 0x24c], 0
jmp 0x1000c92a
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 3
jge 0x1000c946
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xf9c], 0x3c77d98a
jmp 0x1000c91d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0xc68], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0x9d8], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x9d8]
mov dword [ebp + eax - 0xeec], ecx
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xac0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x338]
mov dword [ebp - 0xd7c], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xac8], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
mov dword [ebp - 0xc70], eax
mov eax, dword [ebp - 0x3b4]
dec eax
mov dword [ebp - 0x3b4], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe84], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x338], 0
jne 0x1000c9fb
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x338], 0
je 0x1000ca14
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x338], 0
je 0x1000ca14
mov dword [ebp - 0x528], 1
jmp 0x1000ca1b
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
cmp dword [ebp - 0x528], eax
jg 0x1000ca39
mov dword [ebp - 0x6c0], 1
jmp 0x1000ca40
and dword [ebp - 0x6c0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x338]
cmp dword [ebp - 0x6c0], eax
jg 0x1000ca69
mov eax, 0xf888c554
test eax, eax
je 0x1000ca69
mov dword [ebp - 0x530], 1
jmp 0x1000ca70
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x3dc]
cmp dword [ebp - 0x530], eax
jle 0x1000ca93
mov eax, 0xd3cd3624
test eax, eax
je 0x1000ca93
mov dword [ebp - 0x7f0], 1
jmp 0x1000ca9a
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7f0], eax
je 0x1000cac0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x338], 0
je 0x1000cac0
mov dword [ebp - 0x538], 1
jmp 0x1000cac7
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x538]
mov ecx, dword [ebp - 0x1c]
cmp eax, dword [ebp + ecx*4 - 0x338]
jne 0x1000cae9
mov dword [ebp - 0x6c8], 1
jmp 0x1000caf0
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x338]
imul eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x3dc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xccc]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xccc], eax
jmp 0x1000c892
mov dword [ebp - 0x140], 0x56834504
mov dword [ebp - 0x9e8], 1
mov dword [ebp - 0xad0], 0xd3e9
mov dword [ebp - 0x288], 0
jmp 0x1000cb5c
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x1000cb78
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x9e0], 0x82b4746a
jmp 0x1000cb4f
cmp dword [ebp - 0x140], 0
je 0x1000cbbd
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x1000cbb8
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x55e
push 0x2474
push 0x18d5
push 0
call dword [sym.imp.ADVAPI32.dll_ChangeServiceConfigW]
jmp 0x1000cd47
mov dword [ebp - 0x6d8], 9
mov dword [ebp - 0x254], 1
cmp dword [ebp - 0x140], 0
je 0x1000cc00
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9e0], 0xfaf0
mov eax, 0xfaf0
test eax, eax
je 0x1000cc00
mov dword [ebp - 0x540], 1
jmp 0x1000cc07
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x6d8]
cmp eax, dword [ebp - 0x540]
jg 0x1000cc21
mov dword [ebp - 0x548], 1
jmp 0x1000cc28
and dword [ebp - 0x548], 0
imul eax, dword [ebp - 0x254], 0xcb8f
cmp eax, 0xfffffffb
je 0x1000cc43
mov dword [ebp - 0x790], 1
jmp 0x1000cc4a
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x790], eax
je 0x1000cc61
cmp dword [ebp - 0x140], 0
jne 0x1000cc73
cmp dword [ebp - 0x254], 0
jne 0x1000cc73
and dword [ebp - 0x6d0], 0
jmp 0x1000cc7d
mov dword [ebp - 0x6d0], 1
mov eax, dword [ebp - 0x548]
cmp eax, dword [ebp - 0x6d0]
jge 0x1000cc97
mov dword [ebp - 0x550], 1
jmp 0x1000cc9e
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x140]
cmp eax, dword [ebp - 0x550]
jg 0x1000ccb8
mov dword [ebp - 0x850], 1
jmp 0x1000ccbf
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x850]
lea eax, [ecx + eax + 0x86d6]
imul eax, dword [ebp - 0x254]
test eax, eax
je 0x1000ccf2
cmp dword [ebp - 0x254], 0
je 0x1000ccf2
mov dword [ebp - 0x558], 1
jmp 0x1000ccf9
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x140]
cmp dword [ebp - 0x558], eax
jle 0x1000cd13
mov dword [ebp - 0x560], 1
jmp 0x1000cd1a
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x6d8]
cmp dword [ebp - 0x560], eax
jne 0x1000cd34
mov dword [ebp - 0x798], 1
jmp 0x1000cd3b
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x9e8], eax
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x578], 0
mov dword [ebp - 0xdb4], 0xb5f732bc
mov dword [ebp - 0x290], 0
jmp 0x1000cd82
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x1000cd9e
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0xa38], 9
jmp 0x1000cd75
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jl 0x1000cdb4
xor eax, eax
inc eax
jne 0x1000cdb4
and dword [ebp - 0x9f0], 0
jmp 0x1000cdbe
mov dword [ebp - 0x9f0], 1
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xad8], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xc78], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x44], eax
jg 0x1000cded
mov dword [ebp - 0x568], 1
jmp 0x1000cdf4
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x568]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
je 0x1000ceb9
mov dword [ebp - 0x14], 0
jmp 0x1000ce16
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xfffffff7
jl 0x1000ce45
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x1000ce43
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x1000ce0f
mov dword [ebp - 0x14], 0
jmp 0x1000ce55
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jg 0x1000ceb4
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xa38]
mov dword [ebp + ecx*4 - 0xa38], eax
mov dword [ebp - 0x44], 1
jmp 0x1000ce7f
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1000ceb2
mov dword [ebp - 0xd84], 0x2c593c86
mov dword [ebp - 0xae8], 0xc8a52b4b
mov dword [ebp - 0x6e0], 0xffffffff
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
jmp 0x1000ce78
jmp 0x1000ce4e
jmp 0x1000cf9d
mov dword [ebp - 0x950], 0xffffffff
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1000cee9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov dword [ebp - 0x14], 6
jmp 0x1000cef9
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0x16
je 0x1000cf9d
mov dword [ebp - 0xc80], 1
mov dword [ebp - 0xaf0], 0x6e89be30
mov dword [ebp - 0x8b8], 0x38b4fd08
mov eax, dword [ebp - 0x950]
inc eax
cmp eax, 0xfffffffc
jge 0x1000cf39
mov dword [ebp - 0x570], 1
jmp 0x1000cf40
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
add eax, 0x7b05
cmp eax, dword [ebp - 0x44]
jne 0x1000cf5c
mov dword [ebp - 0x7f8], 1
jmp 0x1000cf63
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x7f8]
dec eax
cmp eax, dword [ebp - 0x578]
jne 0x1000cf7e
mov dword [ebp - 0x6e8], 1
jmp 0x1000cf85
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0x578]
imul eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x8b8], eax
jmp 0x1000cef2
mov dword [ebp - 0x5c8], 0x583e3585
mov dword [ebp - 0x88], 0
jmp 0x1000cfc0
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000cfdc
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x3d8], 0
jmp 0x1000cfb3
mov dword [ebp - 0x88], 0
jmp 0x1000cff5
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000d011
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x880], 0xfffffffa
jmp 0x1000cfe8
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3d8], 0
jmp 0x1000d03c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d8], 0x13
jl 0x1000d251
mov dword [ebp - 0x82c], 0x8d9a2b82
mov dword [ebp - 0x7a0], 0xffffffff
mov dword [ebp - 0x25c], 0
jmp 0x1000d07c
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000d098
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xcdc], 0x8b9dbea5
jmp 0x1000d06f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d8], 0
jne 0x1000d0ba
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3d8], 0
je 0x1000d239
xor eax, eax
inc eax
je 0x1000d0da
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3d8]
inc eax
je 0x1000d0da
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x7a0], 0xffffffff
jae 0x1000d102
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x5c8], eax
jmp 0x1000d023
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x3d8], 0xd4d1
mov eax, 0xd4d1
test eax, eax
jne 0x1000d2fc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x880]
mov dword [ebp - 0xd14], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x880], 0xffffffff
jge 0x1000d29d
mov dword [ebp - 0x5b0], 1
jmp 0x1000d2a4
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0xffffffff
jb 0x1000d2b9
mov dword [ebp - 0x800], 1
jmp 0x1000d2c0
and dword [ebp - 0x800], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x880]
cmp eax, dword [ebp - 0x800]
jg 0x1000d2e1
mov dword [ebp - 0x5b8], 1
jmp 0x1000d2e8
and dword [ebp - 0x5b8], 0
push 0xfffffffffffffffd
pop eax
sub eax, dword [ebp - 0x5b8]
jne 0x1000d2fc
mov dword [ebp - 0x708], 1
cmp dword [ebp - 0x708], 0x26e16511
jge 0x1000d31e
mov dword [ebp - 0x8f4], 1
jmp 0x1000d325
and dword [ebp - 0x8f4], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x880], 4
jge 0x1000d351
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x880], 0
je 0x1000d351
mov dword [ebp - 0x5c0], 1
jmp 0x1000d358
and dword [ebp - 0x5c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x880]
cmp dword [ebp - 0x5c0], eax
je 0x1000d379
mov dword [ebp - 0x7b0], 1
jmp 0x1000d380
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x7b0]
mov dword [ebp - 0x5c8], eax
mov dword [ebp - 0x34], 9
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x718], 0
mov dword [ebp - 0xaf8], 0xb5f732bc
mov dword [ebp - 0x298], 0
jmp 0x1000d3c7