Function at 0x10009016
Capabilities:
Check os version
Create process on windows
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1054
call fcn.10075da0
push esi
push edi
mov dword [ebp - 0x18c], 0x3ae35568
mov dword [ebp - 0x2ec], 0xa624cdb8
mov dword [ebp - 0x47c], 0xa5273358
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0xa2c], 0xfffffff9
mov dword [ebp - 0x198], 0xc8100c43
mov dword [ebp - 0x910], 7
mov dword [ebp - 0x98c], 0x7ea4c570
mov dword [ebp - 0x278], 0xc3f3
mov dword [ebp - 0x8f0], 0xd4c3f121
mov dword [ebp - 0xc48], 0xfffffffe
mov dword [ebp - 0xc44], 0xfffffffe
mov dword [ebp - 0xc40], 0xfffffffe
mov dword [ebp - 0xc3c], 0xfffffffe
mov dword [ebp - 0x1a4], 0
jmp 0x100090ca
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 4
jge 0x100090e6
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0xf50], 0x90611bc3
jmp 0x100090bd
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x100090fe
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov dword [ebp - 0x47c], 0xd3a1
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x47c], eax
je 0x1000912f
mov dword [ebp - 0x948], 1
jmp 0x10009136
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x98c], 0
jne 0x10009187
imul eax, dword [ebp - 0x198], 0x2699
sub eax, dword [ebp - 0x198]
jne 0x10009163
cmp dword [ebp - 0x2ec], 0
jne 0x10009163
and dword [ebp - 0xa1c], 0
jmp 0x1000916d
mov dword [ebp - 0xa1c], 1
mov eax, dword [ebp - 0x8f0]
imul eax, dword [ebp - 0x2e4]
test eax, eax
jne 0x10009187
and dword [ebp - 0x8f8], 0
jmp 0x10009191
mov dword [ebp - 0x8f8], 1
mov eax, dword [ebp - 0x8f0]
cmp dword [ebp - 0x8f8], eax
jg 0x100091ab
mov dword [ebp - 0x900], 1
jmp 0x100091b2
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x910]
cmp dword [ebp - 0x900], eax
jle 0x100091cc
mov dword [ebp - 0x908], 1
jmp 0x100091d3
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
imul eax, dword [ebp - 0x910]
test eax, eax
je 0x100091f7
cmp dword [ebp - 0x2ec], 0
mov eax, 0x48c8
imul eax, eax, 0xf520
test eax, eax
je 0x10009219
push 3
pop eax
test eax, eax
je 0x10009219
mov dword [ebp - 0xa24], 1
jmp 0x10009220
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0x198]
push 4
pop ecx
shl ecx, 0
imul eax, dword [ebp + ecx - 0xf50]
test eax, eax
je 0x10009260
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xf50], 0
je 0x10009260
mov dword [ebp - 0x6b0], 1
jmp 0x10009267
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x6b0]
jne 0x10009281
mov dword [ebp - 0x7cc], 1
jmp 0x10009288
and dword [ebp - 0x7cc], 0
cmp dword [ebp - 0x7cc], 0xffff
jae 0x100092a2
xor eax, eax
inc eax
jne 0x100092a2
and dword [ebp - 0x32c], 0
jmp 0x100092ac
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0xa2c]
mov ecx, dword [ebp - 0x32c]
lea eax, [ecx + eax + 9]
mov ecx, dword [ebp - 0x2ec]
imul ecx, eax
mov dword [ebp - 0x7d4], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7d4]
mov dword [ebp + eax - 0xc48], ecx
mov eax, dword [ebp - 0x7d4]
add eax, 0xb53
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xf50], eax
mov dword [ebp - 0xae4], 0
mov dword [ebp - 0x18c], 0xfffffffe
jmp 0x10009318
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 7
jle 0x10009ab5
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0xa9c], 0x9e672ca3
mov dword [ebp - 0x88], 0
jmp 0x10009352
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000936e
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xd4c], 1
jmp 0x10009345
mov dword [ebp - 0x88], 0
jmp 0x10009387
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x100093a3
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xe8], 0x622ba394
jmp 0x1000937a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xe8], 0
jmp 0x100093d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xe8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 1
jg 0x10009422
mov dword [ebp - 0x334], 0x17f7
mov eax, dword [ebp - 0x334]
dec eax
mov dword [ebp - 0x334], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov eax, dword [ebp + eax*4 - 0xd4c]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xe8]
mov dword [ebp - 0xa9c], eax
jmp 0x100093b6
mov dword [ebp - 0xcc8], 4
mov dword [ebp - 0xcc4], 4
mov dword [ebp - 0xcc0], 4
mov dword [ebp - 0xcbc], 4
mov dword [ebp - 0x230], 9
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xcc8], 0xd7f825e
mov dword [ebp - 0x230], 0
jmp 0x1000947d
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 5
jge 0x100094fb
mov dword [ebp - 0x238], 0xf40fc027
mov dword [ebp - 0x238], 3
jmp 0x100094a9
mov eax, dword [ebp - 0x238]
dec eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0
jl 0x100094f6
mov dword [ebp - 0x1b0], 0xfffffffe
mov dword [ebp - 0x1b0], 0
jmp 0x100094d5
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 3
jg 0x100094f4
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0xaa4], 0xd4e677b5
jmp 0x100094c8
jmp 0x1000949c
jmp 0x10009470
mov byte [ebp - 0xc7], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x30], 0xe22401db
mov dword [ebp - 0xadc], 1
cmp dword [ebp - 4], 0xffffffff
jl 0x1000952c
mov dword [ebp - 0x7dc], 1
jmp 0x10009533
and dword [ebp - 0x7dc], 0
cmp dword [ebp - 0x7dc], 1
jge 0x10009548
mov dword [ebp - 0x33c], 1
jmp 0x1000954f
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x33c], eax
jge 0x10009566
mov dword [ebp - 0x7e4], 1
jmp 0x1000956d
and dword [ebp - 0x7e4], 0
cmp dword [ebp - 0x7e4], 0x3b28
jle 0x10009585
mov dword [ebp - 0x344], 1
jmp 0x1000958c
and dword [ebp - 0x344], 0
cmp dword [ebp - 0x344], 0x452a26f
jle 0x100095a7
cmp dword [ebp - 4], 0
jne 0x100095a7
and dword [ebp - 0x7ec], 0
jmp 0x100095b1
mov dword [ebp - 0x7ec], 1
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x7ec]
jge 0x100095c8
mov dword [ebp - 0x34c], 1
jmp 0x100095cf
and dword [ebp - 0x34c], 0
cmp dword [ebp - 0x34c], 0x3e58
jl 0x100095e7
mov dword [ebp - 0x7f4], 1
jmp 0x100095ee
and dword [ebp - 0x7f4], 0
cmp dword [ebp - 0x7f4], 0x512a30a
je 0x10009606
mov dword [ebp - 0x354], 1
jmp 0x1000960d
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x354]
cmp eax, dword [ebp - 4]
jl 0x10009628
mov dword [ebp - 0x7fc], 1
jmp 0x1000962f
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x7fc]
test eax, eax
jne 0x10009649
mov dword [ebp - 0x35c], 1
jmp 0x10009650
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x35c]
cmp eax, 0xf29c
jne 0x1000966d
mov dword [ebp - 0x804], 1
jmp 0x10009674
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x804]
add eax, 7
imul eax, eax, 0x860b
mov dword [ebp - 0x30], eax
mov dword [ebp - 4], 0
jmp 0x10009696
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0x1d
je 0x100099e4
mov dword [ebp - 0x14c], 4
mov dword [ebp - 0x31c], 0xffffffff
mov dword [ebp - 0x318], 0xffffffff
mov dword [ebp - 0x314], 0xffffffff
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x2f4], 0x1843ad33
cmp dword [ebp - 0x14c], 0
je 0x100096fe
cmp dword [ebp - 0x30], 0
je 0x100096fe
mov dword [ebp - 0xaac], 1
jmp 0x10009705
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd18], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x14c], eax
je 0x1000972f
mov dword [ebp - 0x364], 1
jmp 0x10009736
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x31c]
imul eax, dword [ebp - 0x364]
test eax, eax
je 0x1000975c
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x31c], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x30], eax
jle 0x10009773
mov dword [ebp - 0x80c], 1
jmp 0x1000977a
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x80c], eax
jne 0x10009791
mov dword [ebp - 0x36c], 1
jmp 0x10009798
and dword [ebp - 0x36c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x31c]
cmp dword [ebp - 0x36c], eax
jl 0x100097b9
mov dword [ebp - 0x814], 1
jmp 0x100097c0
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x814], eax
jle 0x100097d7
mov dword [ebp - 0x374], 1
jmp 0x100097de
and dword [ebp - 0x374], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x31c]
add eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 4]
je 0x10009802
mov dword [ebp - 0x81c], 1
jmp 0x10009809
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x81c], eax
jge 0x10009820
mov dword [ebp - 0xab4], 1
jmp 0x10009827
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 4], 0xfffffffc
jg 0x10009842
mov dword [ebp - 0xabc], 1
jmp 0x10009849
and dword [ebp - 0xabc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x31c]
mov dword [ebp - 0xd28], eax
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x14c]
imul eax, dword [ebp - 0x54]
cmp eax, dword [ebp - 4]
jg 0x1000988e
mov dword [ebp - 0x37c], 1
jmp 0x10009895
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
add eax, 0x8e6f
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0xd38], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x31c]
mov dword [ebp - 0xd40], eax
cmp dword [ebp - 4], 0
je 0x10009923
mov dword [ebp - 0x54], 0
jmp 0x100098db
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x100098f1
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x31c], 0xadfd
jmp 0x100098d4
mov dword [ebp - 0x30], 0
jmp 0x10009901
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff6
jne 0x1000991e
mov dword [ebp - 0xac4], 1
cmp dword [ebp - 0xac4], 0
je 0x1000991c
jmp 0x1000991e
jmp 0x100098fa
jmp 0x100099d4
mov dword [ebp - 0xacc], 0xfffffff6
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1000994c
push 0xae1
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionAndSpinCount]
cmp dword [ebp - 4], 0
je 0x1000999f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x31c]
mov dword [ebp - 0xdb0], eax
cmp dword [ebp - 0xacc], 0x40c5
jne 0x10009980
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10009980
and dword [ebp - 0xad4], 0
jmp 0x1000998a
mov dword [ebp - 0xad4], 1
cmp dword [ebp - 0x30], 0xce9e
jl 0x1000999f
mov dword [ebp - 0x824], 1
jmp 0x100099a6
and dword [ebp - 0x824], 0
cmp dword [ebp - 0x824], 0xfffffff9
jne 0x100099bb
mov dword [ebp - 0x384], 1
jmp 0x100099c2
and dword [ebp - 0x384], 0
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0xadc], 0
je 0x100099df
jmp 0x100099e4
jmp 0x1000968f
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10009a02
push 0
push 0
push 0x2051
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0xdb8], 0
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10009a24
call dword [sym.imp.USER32.dll_EndMenu]
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10009a48
push 0x1a3a
push 0x1587
push 0
call dword [sym.imp.USER32.dll_InflateRect]
cmp dword [ebp - 0x2fc], 1
jg 0x10009a5d
mov dword [ebp - 0x82c], 1
jmp 0x10009a64
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
sub eax, dword [ebp - 0xae4]
je 0x10009a87
mov eax, 0xe2fe
test eax, eax
je 0x10009a87
mov dword [ebp - 0xaec], 1
jmp 0x10009a8e
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xdc8], eax
mov dword [ebp - 0x2fc], 0xc0198ab7
jmp 0x1000930b
mov dword [ebp - 0x170], 0x3ae35568
mov dword [ebp - 0xb00], 0
mov dword [ebp - 0x170], 0xfffffffe
jmp 0x10009ae2
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 7
jle 0x10009b8b
mov dword [ebp - 0x2d8], 1
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10009b1e
push 0
push 0
push 0x2051
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0x2d8], 1
jg 0x10009b33
mov dword [ebp - 0x38c], 1
jmp 0x10009b3a
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
sub eax, dword [ebp - 0xb00]
je 0x10009b5d
mov eax, 0xe2fe
test eax, eax
je 0x10009b5d
mov dword [ebp - 0xb38], 1
jmp 0x10009b64
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0xdd8], eax
mov dword [ebp - 0x2d8], 0xc0198ab7
jmp 0x10009ad5
mov dword [ebp - 0x158], 0x3ae35568
mov dword [ebp - 0xb40], 0
mov dword [ebp - 0x158], 0xfffffffe
jmp 0x10009bb8
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 7
jle 0x10009c61
mov dword [ebp - 0x280], 1
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10009bf4
push 0
push 0
push 0x2051
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0x280], 1
jg 0x10009c09
mov dword [ebp - 0x834], 1
jmp 0x10009c10
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x834]
sub eax, dword [ebp - 0xb40]
je 0x10009c33
mov eax, 0xe2fe
test eax, eax
je 0x10009c33
mov dword [ebp - 0xa14], 1
jmp 0x10009c3a
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0x280], 0xc0198ab7
jmp 0x10009bab
mov dword [ebp - 0x94], 0x7c7ce53d
mov dword [ebp - 0x214], 0
jmp 0x10009c84
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x10009ca0
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x394], 0xa5d6
jmp 0x10009c77
mov dword [ebp - 0x94], 0
jmp 0x10009cb9
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0
jg 0x10009cf8
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp + eax*4 - 0x394]
mov dword [ebp + ecx*4 - 0x394], eax
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10009cf6
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x10009cac
cmp dword [ebp - 0x94], 0x5534
jg 0x10009d10
mov dword [ebp - 0x83c], 1
jmp 0x10009d17
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x180], 8
mov dword [ebp - 0x144], 0xb02971c
mov dword [ebp - 0x128], 0x124f84b8
mov dword [ebp - 0xdf0], 0x90350d8a
mov dword [ebp - 0xdf8], 0x5db2b058
mov dword [ebp - 0xe00], 0xffffffff
mov dword [ebp - 0xe08], 0x83eb6194
mov dword [ebp - 0xbe8], 0x8131dda8
mov dword [ebp - 0xbe4], 0x8131dda8
mov dword [ebp - 0xbe0], 0x8131dda8
mov dword [ebp - 0xbdc], 0x8131dda8
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x144], 0xffffffed
jmp 0x10009dc2
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 4
jge 0x10009f4c
mov dword [ebp - 0xe10], 0x4fda7ef5
mov dword [ebp - 0xe18], 0x8d9dcee3
mov dword [ebp - 0xe20], 3
mov dword [ebp - 0xe28], 9
mov dword [ebp - 0xe30], 8
mov dword [ebp - 0xe38], 0x80c6548a
mov dword [ebp - 0xe40], 0x1d7feae2
mov dword [ebp - 0xe48], 0xf4caa5d7
mov dword [ebp - 0xe50], 3
mov dword [ebp - 0xe94], 0xffffffff
mov dword [ebp - 0x180], 0xd
jmp 0x10009e4c
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 6
jle 0x10009f47
mov dword [ebp - 0xe9c], 1
mov dword [ebp - 0x48], 0
jmp 0x10009e73
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10009e89
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xd58], 0xffff
jmp 0x10009e6c
mov dword [ebp - 0x48], 0
jmp 0x10009e99
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10009eaf
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xea4], 0x1a969ac5
jmp 0x10009e92
mov dword [ebp - 0x128], 0
jmp 0x10009ec8
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 1
jg 0x10009f42
mov dword [ebp - 0xeac], 0xd2ae
mov dword [ebp - 0x1ac], 0
jmp 0x10009ef4
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x10009f10
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xffc], 0x64276038
jmp 0x10009ee7
mov eax, dword [ebp - 0x128]
cmp dword [ebp + eax*4 - 0xd58], 0
je 0x10009f22
jmp 0x10009f42
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbe8]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xbe8], eax
jmp 0x10009ebb
jmp 0x10009e3f
jmp 0x10009db5
mov dword [ebp - 0x9c], 0x7c7ce53d
mov dword [ebp - 0x1f4], 0
jmp 0x10009f6f
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x10009f8b
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x39c], 0xa5d6
jmp 0x10009f62
mov dword [ebp - 0x9c], 0
jmp 0x10009fa4
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jg 0x10009fe3
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x39c]
mov dword [ebp + ecx*4 - 0x39c], eax
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x10009fe1
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x10009f97
cmp dword [ebp - 0x9c], 0x5534
jg 0x10009ffb
mov dword [ebp - 0x844], 1
jmp 0x1000a002
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xf0], 0x720e83c7
mov dword [ebp - 0x998], 5
mov dword [ebp - 0x5c], 0
jmp 0x1000a032
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000a048
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xbd0], 1
jmp 0x1000a02b
mov dword [ebp - 0x5c], 0
jmp 0x1000a058
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x1000a06e
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xf70], 9
jmp 0x1000a051
mov dword [ebp - 0xf0], 0
jmp 0x1000a087
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 3
jge 0x1000a0a3
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0xbd0], 0
jmp 0x1000a07a
mov eax, 0x3d9532bb
test eax, eax
je 0x1000a13f
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbd0], 0xfff8
jbe 0x1000a0cf
mov dword [ebp - 0x3a4], 1
jmp 0x1000a0d6
and dword [ebp - 0x3a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbd0]
cmp eax, dword [ebp - 0x3a4]
jge 0x1000a0f7
mov dword [ebp - 0x84c], 1
jmp 0x1000a0fe
and dword [ebp - 0x84c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbd0]
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xeb4], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xf70]
cmp dword [ebp + eax - 0xf70], ecx
jg 0x1000a13f
mov dword [ebp - 0x3ac], 1
jmp 0x1000a146
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x85c], 0xfff8
mov dword [ebp - 0xae0], 0xffffffff
mov dword [ebp - 0x1b4], 0
jmp 0x1000a17f
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 3
jge 0x1000a19b
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x920], 4
jmp 0x1000a172
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x920], 0
jmp 0x1000a1c9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x920], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x920], 0xfffffffa
jl 0x1000a1fa
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1000a1f8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_IsIconic]
jmp 0x1000a1ae
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x920], 0xfffffff9
je 0x1000a216
mov dword [ebp - 0x3bc], 1
jmp 0x1000a21d
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x920], 0
jne 0x1000a239
mov dword [ebp - 0x854], 1
jmp 0x1000a240
and dword [ebp - 0x854], 0
cmp dword [ebp - 0x854], 0xfff8
jne 0x1000a258
mov dword [ebp - 0x3b4], 1
jmp 0x1000a25f
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 7
ja 0x1000a26f
cmp dword [ebp - 0x85c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x920]
cmp dword [ebp - 0x85c], eax
jge 0x1000a290
mov dword [ebp - 0x864], 1
jmp 0x1000a297
and dword [ebp - 0x864], 0
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x864]
jne 0x1000a2c1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x920], 0
je 0x1000a2c1
mov dword [ebp - 0x3c4], 1
jmp 0x1000a2c8
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xae0], eax
mov dword [ebp - 0x90], 0x7c7ce53d
mov dword [ebp - 0x234], 0
jmp 0x1000a2f7
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 1
jge 0x1000a313
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x86c], 0xa5d6
jmp 0x1000a2ea
mov dword [ebp - 0x90], 0
jmp 0x1000a32c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
jg 0x1000a36b
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x86c]
mov dword [ebp + ecx*4 - 0x86c], eax
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000a369
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x1000a31f
cmp dword [ebp - 0x90], 0x5534
jg 0x1000a383
mov dword [ebp - 0x3cc], 1
jmp 0x1000a38a
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0x3cc]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x1bc], 0
jmp 0x1000a3af
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x1000a3cb
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0xbac], 0xbbca6318
jmp 0x1000a3a2
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000a3fd
push 0
push 0x1b77
push 0x1034
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbac], 0
jmp 0x1000a428
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbac]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbac], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbac], 3
jle 0x1000a453
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000a451
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x1000a40f
mov dword [ebp - 0x160], 8
mov dword [ebp - 0x130], 0xb02971c
mov dword [ebp - 0xf8], 0x124f84b8
mov dword [ebp - 0xebc], 0x90350d8a
mov dword [ebp - 0xec4], 0x5db2b058
mov dword [ebp - 0xecc], 0xffffffff
mov dword [ebp - 0xed4], 0x83eb6194
mov dword [ebp - 0xc00], 0x8131dda8
mov dword [ebp - 0xbfc], 0x8131dda8
mov dword [ebp - 0xbf8], 0x8131dda8
mov dword [ebp - 0xbf4], 0x8131dda8
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0x130], 0xffffffed
jmp 0x1000a4f2
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 4
jge 0x1000a69a
mov dword [ebp - 0xedc], 0x4fda7ef5
mov dword [ebp - 0xee4], 0x8d9dcee3
mov dword [ebp - 0xeec], 3
mov dword [ebp - 0xef4], 9
mov dword [ebp - 0xefc], 8
mov dword [ebp - 0xf04], 0x80c6548a
mov dword [ebp - 0xf0c], 0x1d7feae2
mov dword [ebp - 0xf14], 0xf4caa5d7
mov dword [ebp - 0xf1c], 3
mov dword [ebp - 0xf24], 0xffffffff
mov dword [ebp - 0x160], 0xd
jmp 0x1000a57c
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 6
jle 0x1000a695
mov dword [ebp - 0xf2c], 1
mov dword [ebp - 0x84], 0
jmp 0x1000a5ac
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x1000a5c8
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xd64], 0xffff
jmp 0x1000a59f
mov dword [ebp - 0x84], 0
jmp 0x1000a5e1
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1000a5fd
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0xf34], 0x1a969ac5
jmp 0x1000a5d4
mov dword [ebp - 0xf8], 0
jmp 0x1000a616
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jg 0x1000a690
mov dword [ebp - 0xf3c], 0xd2ae
mov dword [ebp - 0x1fc], 0
jmp 0x1000a642
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1000a65e
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x1004], 0x64276038
jmp 0x1000a635
mov eax, dword [ebp - 0xf8]
cmp dword [ebp + eax*4 - 0xd64], 0
je 0x1000a670
jmp 0x1000a690
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc00]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xc00], eax
jmp 0x1000a609
jmp 0x1000a56f
jmp 0x1000a4e5
mov dword [ebp - 0xce4], 4
mov dword [ebp - 0xe44], 0xfffffff7
mov dword [ebp - 0x874], 0xf341
mov dword [ebp - 0x64], 0
jmp 0x1000a6c8
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000a6de
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1024], 0x4e2db58e
jmp 0x1000a6c1
mov dword [ebp - 0x64], 0
jmp 0x1000a6ee
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000a704
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x103c], 0xe4438bea
jmp 0x1000a6e7
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1000a759
push 0x11b7
push 0
push 0x1b3b
push 0x1623
push 0x605
push 0
push 0x12ed
push 0x1e3c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
movzx eax, byte [0x106691e0]
test eax, eax
je 0x1000a777
mov esi, 0x1007d7c0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10010043
mov dword [ebp - 0x87c], 0xc407858f
mov dword [ebp - 0x1c4], 0
jmp 0x1000a79a
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x1000a7b6
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x8d0], 0xea75c96d
jmp 0x1000a78d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8d0], 0x15
jmp 0x1000a7e4
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d0]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8d0], 0x13
je 0x1000a869
mov dword [ebp - 0xc28], 0x831d26ec
mov dword [ebp - 0xc24], 0x831d26ec
mov dword [ebp - 0xc20], 0x831d26ec
mov dword [ebp - 0xc1c], 0x831d26ec
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d0]
mov dword [ebp - 0xcec], eax
or eax, 0xffffffff
imul eax, eax, 0
mov dword [ebp - 0x3d4], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp + eax - 0xc28], ecx
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x87c], eax
mov dword [ebp - 0x87c], 0x54dbbe56
jmp 0x1000a7c9
mov dword [ebp - 0x138], 0x720e83c7
mov dword [ebp - 0x9a0], 5
mov dword [ebp - 0x7c], 0
jmp 0x1000a88d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1000a8a3
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xb94], 1
jmp 0x1000a886
mov dword [ebp - 0x7c], 0
jmp 0x1000a8b3
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1000a8c9
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0xf80], 9
jmp 0x1000a8ac
mov dword [ebp - 0x138], 0
jmp 0x1000a8e2
mov eax, dword [ebp - 0x138]
inc eax
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 3
jge 0x1000a8fe
mov eax, dword [ebp - 0x138]
mov dword [ebp + eax*4 - 0xb94], 0
jmp 0x1000a8d5
mov eax, 0x3d9532bb
test eax, eax
je 0x1000a99a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb94], 0xfff8
jbe 0x1000a92a
mov dword [ebp - 0x3dc], 1
jmp 0x1000a931
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb94]
cmp eax, dword [ebp - 0x3dc]
jge 0x1000a952
mov dword [ebp - 0x884], 1
jmp 0x1000a959
and dword [ebp - 0x884], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb94]
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xe5c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xf80]
cmp dword [ebp + eax - 0xf80], ecx
jg 0x1000a99a
mov dword [ebp - 0x3e4], 1
jmp 0x1000a9a1
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0x9a0], eax
mov dword [ebp - 0x178], 8
mov dword [ebp - 0x100], 0xb02971c
mov dword [ebp - 0x140], 0x124f84b8
mov dword [ebp - 0xcf4], 0x90350d8a
mov dword [ebp - 0xe4c], 0x5db2b058
mov dword [ebp - 0xcfc], 0xffffffff
mov dword [ebp - 0xe64], 0x83eb6194
mov dword [ebp - 0xc18], 0x8131dda8
mov dword [ebp - 0xc14], 0x8131dda8
mov dword [ebp - 0xc10], 0x8131dda8
mov dword [ebp - 0xc0c], 0x8131dda8
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x100], 0xffffffed
jmp 0x1000aa4c
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 4
jge 0x1000abd6
mov dword [ebp - 0xd04], 0x4fda7ef5
mov dword [ebp - 0xe54], 0x8d9dcee3
mov dword [ebp - 0xd0c], 3
mov dword [ebp - 0xe6c], 9
mov dword [ebp - 0xd14], 8
mov dword [ebp - 0xe74], 0x80c6548a
mov dword [ebp - 0xd1c], 0x1d7feae2
mov dword [ebp - 0xe60], 0xf4caa5d7
mov dword [ebp - 0xd24], 3
mov dword [ebp - 0xcdc], 0xffffffff
mov dword [ebp - 0x178], 0xd
jmp 0x1000aad6
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 6
jle 0x1000abd1
mov dword [ebp - 0xd2c], 1
mov dword [ebp - 0x6c], 0
jmp 0x1000aafd
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1000ab13
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xd70], 0xffff
jmp 0x1000aaf6
mov dword [ebp - 0x6c], 0
jmp 0x1000ab23
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1000ab39
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xe68], 0x1a969ac5
jmp 0x1000ab1c
mov dword [ebp - 0x140], 0
jmp 0x1000ab52
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 1
jg 0x1000abcc
mov dword [ebp - 0xd34], 0xd2ae
mov dword [ebp - 0x21c], 0
jmp 0x1000ab7e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x1000ab9a
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x100c], 0x64276038
jmp 0x1000ab71
mov eax, dword [ebp - 0x140]
cmp dword [ebp + eax*4 - 0xd70], 0
je 0x1000abac
jmp 0x1000abcc
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc18]
inc eax
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0xc18], eax
jmp 0x1000ab45
jmp 0x1000aac9
jmp 0x1000aa3f
mov dword [ebp - 0x148], 0xfffffffe
mov dword [ebp - 0xb24], 0xdfe924f6
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000ac02
call dword [sym.imp.KERNEL32.dll_GetVersion]
mov dword [ebp - 0x148], 0
jmp 0x1000ac1b
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xffffffe2
jne 0x1000adc7
mov dword [ebp - 0x168], 0xb96ca2cb
mov dword [ebp - 0x3ec], 0xd8bc0d13
mov dword [ebp - 0x3fc], 0x34a938f7
mov dword [ebp - 0x168], 0xffffffef
jmp 0x1000ac5f
mov eax, dword [ebp - 0x168]
inc eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 3
jg 0x1000adc2
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x88c], 0xffffffff
mov dword [ebp - 0x98], 0xfffffffc
jmp 0x1000ac99
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffe9
jle 0x1000adbd
mov dword [ebp - 0x2f0], 8
mov dword [ebp - 0x9a8], 0x512a30a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x88c], eax
mov eax, dword [ebp - 0x88c]
cmp dword [ebp - 0x2f0], eax
jg 0x1000acf9
mov dword [ebp - 0x894], 1
jmp 0x1000ad00
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0x3ec], 0
jne 0x1000ad1e
mov eax, 0x9c8ddac0
test eax, eax
je 0x1000ad33
mov eax, 0x2401dbda
test eax, eax
je 0x1000ad33
mov dword [ebp - 0xa98], 1
jmp 0x1000ad3a
and dword [ebp - 0xa98], 0
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0xd3c], eax
cmp dword [ebp - 0x894], 0x5bd5
jle 0x1000ad5e
mov dword [ebp - 0x3f4], 1
jmp 0x1000ad65
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x98]
sub eax, dword [ebp - 0x3f4]
cmp eax, dword [ebp - 0x148]
jg 0x1000ad85
mov dword [ebp - 0x89c], 1
jmp 0x1000ad8c
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x89c]
sub eax, dword [ebp - 0x168]
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xb24], eax
cmp dword [ebp - 0x98], 0
je 0x1000adb8
jmp 0x1000ac8c
jmp 0x1000ac8c
jmp 0x1000ac52
jmp 0x1000ac0e
mov dword [ebp - 0x1cc], 0
jmp 0x1000ade0
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jge 0x1000adfc
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xba0], 0xbbca6318
jmp 0x1000add3
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000ae2e
push 0
push 0x1b77
push 0x1034
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xba0], 0
jmp 0x1000ae59
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba0]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xba0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xba0], 3
jle 0x1000ae84
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1000ae82
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
jmp 0x1000ae40
mov dword [ebp - 0x2e8], 0
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x9b0], 0xe3d4752e
mov dword [ebp - 0x2c8], 0xc12d4938
mov dword [ebp - 0x290], 4
mov dword [ebp - 0xae8], 0x1a16
mov dword [ebp - 0xe70], 0xfffffff9
mov dword [ebp - 0x14], 0
jmp 0x1000aeda
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000aef0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x958], 0
jmp 0x1000aed3
mov dword [ebp - 0x14], 0
jmp 0x1000af00
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000af16
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb10], 3
jmp 0x1000aef9
mov dword [ebp - 0x14], 0
jmp 0x1000af26
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000af3c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb54], 0xfffffff9
jmp 0x1000af1f
mov dword [ebp - 0x14], 0
jmp 0x1000af4c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000af62
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xbd8], 4
jmp 0x1000af45
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb54]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xb54], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb10]
mov dword [ebp - 0xd44], eax
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0xe78], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x958]
mov dword [ebp - 0xaa0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xaa0]
mov dword [ebp + eax - 0xbd8], ecx
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xd50], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbd8], 0
je 0x1000aff9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x958], 0
je 0x1000aff9
mov dword [ebp - 0x8a4], 1
jmp 0x1000b000
and dword [ebp - 0x8a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb54]
cmp eax, dword [ebp - 0x8a4]
jne 0x1000b021
mov dword [ebp - 0x404], 1
jmp 0x1000b028
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x2e8]
cmp dword [ebp - 0x404], eax
jg 0x1000b042
mov dword [ebp - 0x8ac], 1
jmp 0x1000b049
and dword [ebp - 0x8ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb54]
cmp dword [ebp - 0x8ac], eax
jl 0x1000b06a
mov dword [ebp - 0x40c], 1
jmp 0x1000b071
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0x2c8]
imul eax, dword [ebp - 0x288]
mov dword [ebp - 0x9b8], eax
mov eax, dword [ebp - 0x2c8]
dec eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x9b8], 0xc114
jl 0x1000b0b5
mov dword [ebp - 0x8b4], 1
jmp 0x1000b0bc
and dword [ebp - 0x8b4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb10]
cmp dword [ebp - 0x8b4], eax
je 0x1000b0dc
mov dword [ebp - 0x414], 1
jmp 0x1000b0e3
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb54]
cmp dword [ebp - 0x414], eax
jge 0x1000b104
mov dword [ebp - 0x8bc], 1
jmp 0x1000b10b
and dword [ebp - 0x8bc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb10]
cmp dword [ebp - 0x8bc], eax
je 0x1000b12c
mov dword [ebp - 0x8c4], 1
jmp 0x1000b133
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x8c4], eax
jl 0x1000b14d
mov dword [ebp - 0x420], 1
jmp 0x1000b154
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
add eax, 0x63e3
jne 0x1000b16d
mov dword [ebp - 0x8a0], 1
jmp 0x1000b174
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 0x2f603f55
jle 0x1000b19b
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb10], 0
je 0x1000b19b
mov dword [ebp - 0x428], 1
jmp 0x1000b1a2
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0xffffffff
jle 0x1000b1b7
mov dword [ebp - 0x6b8], 1
jmp 0x1000b1be
and dword [ebp - 0x6b8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x958]
cmp dword [ebp - 0x6b8], eax
jge 0x1000b1de
mov dword [ebp - 0x430], 1
jmp 0x1000b1e5
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
sub eax, dword [ebp - 0x290]
mov dword [ebp - 0x800], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x800]
mov dword [ebp + eax - 0xb10], ecx
cmp dword [ebp - 0x800], 0
je 0x1000b22e
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x958], 0
je 0x1000b22e
mov dword [ebp - 0x438], 1
jmp 0x1000b235
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x958]
cmp dword [ebp - 0x438], eax
jne 0x1000b256
mov dword [ebp - 0x6c0], 1
jmp 0x1000b25d
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x2e8]
add eax, dword [ebp - 0x6c0]
neg eax
jne 0x1000b27a
xor eax, eax
jne 0x1000b27a
and dword [ebp - 0x440], 0
jmp 0x1000b284
mov dword [ebp - 0x440], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x958]
add eax, dword [ebp - 0x440]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xb54]
jge 0x1000b2b0
mov dword [ebp - 0x944], 1
jmp 0x1000b2b7
and dword [ebp - 0x944], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb54]
cmp dword [ebp - 0x944], eax
jge 0x1000b2dd
cmp dword [ebp - 0x290], 0
jne 0x1000b2dd
and dword [ebp - 0x448], 0
jmp 0x1000b2e7
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0xae8]
cmp dword [ebp - 0x448], eax
jge 0x1000b301
mov dword [ebp - 0x6c8], 1
jmp 0x1000b308
and dword [ebp - 0x6c8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x958]
imul eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0xd84], 0x1007d7c0
mov dword [ebp - 0x38], 0x7e2799ac
mov dword [ebp - 0x10c], 0x9a695768
mov dword [ebp - 0x8a8], 0xffffffff
mov dword [ebp - 0xcc], 0xfc5c3c3a
mov dword [ebp - 0x6f0], 0xffffffff
mov dword [ebp - 0x490], 0xffffffff
mov dword [ebp - 0x9c8], 0xd606
mov dword [ebp - 0x94c], 0xfffffff8
mov dword [ebp - 0x38], 0xfffffffe
jmp 0x1000b388
cmp dword [ebp - 0x38], 0xb
jle 0x1000ba26
mov dword [ebp - 0x188], 0xa8ce9b8a
mov dword [ebp - 0x22c], 0xfb66c146
mov dword [ebp - 0x204], 0
jmp 0x1000b3bf
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 3
jge 0x1000b3db
mov eax, dword [ebp - 0x204]
mov dword [ebp + eax*4 - 0x268], 0xffbe
jmp 0x1000b3b2
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1000b3f5
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x38], 0
jne 0x1000b416
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x268], 0
je 0x1000b416
mov dword [ebp - 0x450], 1
jmp 0x1000b41d
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0xddb7
jne 0x1000b435
mov dword [ebp - 0x808], 1
jmp 0x1000b43c
and dword [ebp - 0x808], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
cmp dword [ebp - 0x808], eax
jg 0x1000b45d
mov dword [ebp - 0x458], 1
jmp 0x1000b464
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x458]
jg 0x1000b47b
mov dword [ebp - 0x6d0], 1
jmp 0x1000b482
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
inc eax
jne 0x1000b4a4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x268], 0
jne 0x1000b4a4
and dword [ebp - 0x460], 0
jmp 0x1000b4ae
mov dword [ebp - 0x460], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x460], eax
jne 0x1000b4c5
mov dword [ebp - 0x9c0], 1
jmp 0x1000b4cc
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xd5c], eax
mov dword [ebp - 0x8a8], 0x6eab3ae5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
cmp dword [ebp - 0x8a8], eax
jge 0x1000b500
mov dword [ebp - 0x468], 1
jmp 0x1000b507
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
cmp dword [ebp - 0x468], eax
jge 0x1000b528
mov dword [ebp - 0x6d8], 1
jmp 0x1000b52f
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x6d8]
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
je 0x1000b556
cmp dword [ebp - 0x38], 0
je 0x1000b556
mov dword [ebp - 0x470], 1
jmp 0x1000b55d
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x6f0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x268]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x268]
cmp eax, 0xa9d01274
jae 0x1000b596
mov dword [ebp - 0x810], 1
jmp 0x1000b59d
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x810], eax
jge 0x1000b5b4
mov dword [ebp - 0xd74], 4
mov dword [ebp - 0xd98], 0xfffffff7
mov dword [ebp - 0x4d8], 0xf341
mov dword [ebp - 0x80], 0
jmp 0x1000ba54
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1000ba6a
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1054], 0x4e2db58e
jmp 0x1000ba4d
mov dword [ebp - 0x80], 0
jmp 0x1000ba7a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1000ba90
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1030], 0xe4438bea
jmp 0x1000ba73
mov eax, dword [ebp - 0x4d8]
inc eax
mov dword [ebp - 0x4d8], eax
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000bae5
push 0x11b7
push 0
push 0x1b3b
push 0x1623
push 0x605
push 0
push 0x12ed
push 0x1e3c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawIconEx]
mov dword [ebp - 0x114], 0x720e83c7
mov dword [ebp - 0x9d0], 5
mov dword [ebp - 0x74], 0
jmp 0x1000bb09
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1000bb1f
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xbb8], 1
jmp 0x1000bb02
mov dword [ebp - 0x74], 0
jmp 0x1000bb2f
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x1000bb45
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xfa0], 9
jmp 0x1000bb28
mov dword [ebp - 0x114], 0
jmp 0x1000bb5e
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jge 0x1000bb7a
mov eax, dword [ebp - 0x114]
mov dword [ebp + eax*4 - 0xbb8], 0
jmp 0x1000bb51
mov eax, 0x3d9532bb
test eax, eax
je 0x1000bc16
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbb8], 0xfff8
jbe 0x1000bba6
mov dword [ebp - 0x710], 1
jmp 0x1000bbad
and dword [ebp - 0x710], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbb8]
cmp eax, dword [ebp - 0x710]
jge 0x1000bbce
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x8b8]
mov dword [ebp - 0x9d0], eax
mov dword [ebp - 0x718], 0xc407858f
mov dword [ebp - 0x1dc], 0
jmp 0x1000bc4c
cmp dword [ebp - 0x1dc], 2
jge 0x1000bc68
pop edi
pop esi
mov esp, ebp
pop ebp
ret