Function at 0x1000b979
Capabilities:
Create pipe
Delete file
Delete registry value
Get disk size
Get geographical location
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xcc8
push esi
push edi
mov dword [ebp - 0x8a8], 0xf9b3198a
mov dword [ebp - 0x8a4], 0xf9b3198a
mov dword [ebp - 0x8a0], 0xf9b3198a
mov dword [ebp - 0x89c], 0xf9b3198a
mov dword [ebp - 0x128], 0xc6f1bf50
mov dword [ebp - 0x128], 3
jmp 0x1000b9cf
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jl 0x1000ba99
mov dword [ebp - 0x1cc], 0x6dd8d130
mov dword [ebp - 0x1cc], 0
jmp 0x1000b9ff
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 3
jg 0x1000ba7f
mov dword [ebp - 0x16c], 0xd6923607
mov byte [ebp - 0x92], 0
movzx eax, byte [ebp - 0x92]
test eax, eax
je 0x1000ba44
push 0
push 0x626
push 0x315
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x16c], 3
jmp 0x1000ba5d
mov eax, dword [ebp - 0x16c]
dec eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0
jl 0x1000ba7a
mov eax, dword [ebp - 0x128]
cmp dword [ebp + eax*4 - 0x8a8], 0
je 0x1000ba78
jmp 0x1000ba7a
jmp 0x1000ba50
jmp 0x1000b9f2
mov eax, dword [ebp - 0x128]
cmp dword [ebp + eax*4 - 0x8a8], 0
je 0x1000ba94
jmp 0x1000b9c2
jmp 0x1000b9c2
mov dword [ebp - 0x8c0], 0xf9b3198a
mov dword [ebp - 0x8bc], 0xf9b3198a
mov dword [ebp - 0x8b8], 0xf9b3198a
mov dword [ebp - 0x8b4], 0xf9b3198a
mov dword [ebp - 0xa30], 0x8b13eca4
mov dword [ebp - 0x94c], 0xfffffffb
mov dword [ebp - 0x954], 8
mov dword [ebp - 0x95c], 0xfd947597
mov dword [ebp - 0x964], 0x588c
mov dword [ebp - 0x37c], 0x6928
mov dword [ebp - 0x3c], 0
jmp 0x1000bb0d
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1000bb23
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xc68], 0xfffffffb
jmp 0x1000bb06
mov dword [ebp - 0x3c], 0
jmp 0x1000bb33
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1000bb49
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0xc80], 3
jmp 0x1000bb2c
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x1000bb65
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [ebp - 0x37c]
dec eax
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x114], 0xc6f1bf50
mov dword [ebp - 0x1f0], 0xb26bdde0
mov dword [ebp - 0x7dc], 0xffffffff
mov dword [ebp - 0x1f0], 6
jmp 0x1000bba9
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0x17
jle 0x1000bc55
mov dword [ebp - 0x6c4], 0xfffffff9
mov dword [ebp - 0x160], 0xd00585b
mov eax, dword [ebp - 0x6c4]
cmp dword [ebp - 0x6c4], eax
jne 0x1000bbe4
mov dword [ebp - 0x6cc], 1
jmp 0x1000bbeb
and dword [ebp - 0x6cc], 0
cmp dword [ebp - 0x6cc], 0xe05d
jl 0x1000bc03
mov dword [ebp - 0x6d4], 1
jmp 0x1000bc0a
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x160], 0x1d
jmp 0x1000bc2f
mov eax, dword [ebp - 0x160]
dec eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0x16
jle 0x1000bc50
mov dword [ebp - 0x804], 3
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x7dc], eax
jmp 0x1000bc22
jmp 0x1000bb9c
mov dword [ebp - 0x114], 3
jmp 0x1000bc6e
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
jl 0x1000bd38
mov dword [ebp - 0x174], 0x6dd8d130
mov dword [ebp - 0x174], 0
jmp 0x1000bc9e
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 3
jg 0x1000bd1e
mov dword [ebp - 0x1f8], 0xd6923607
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1000bce3
push 0
push 0x626
push 0x315
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x1f8], 3
jmp 0x1000bcfc
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x1000bd19
mov eax, dword [ebp - 0x114]
cmp dword [ebp + eax*4 - 0x8c0], 0
je 0x1000bd17
jmp 0x1000bd19
jmp 0x1000bcef
jmp 0x1000bc91
mov eax, dword [ebp - 0x114]
cmp dword [ebp + eax*4 - 0x8c0], 0
je 0x1000bd33
jmp 0x1000bc61
jmp 0x1000bc61
mov dword [ebp - 0xb4], 0xfffffff8
mov dword [ebp - 0x7c], 0xfffffff6
mov dword [ebp - 0x318], 0x74952f34
mov dword [ebp - 0x6e0], 0x2a77b69c
mov dword [ebp - 0x17c], 0
jmp 0x1000bd76
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 3
jge 0x1000bd92
mov eax, dword [ebp - 0x17c]
mov dword [ebp + eax*4 - 0xb00], 1
jmp 0x1000bd69
cmp dword [ebp - 0xb4], 0
je 0x1000bf03
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xb4], eax
jne 0x1000bdb6
mov dword [ebp - 0x254], 1
jmp 0x1000bdbd
and dword [ebp - 0x254], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x254]
mov dword [ebp + eax - 0xb00], ecx
cmp dword [ebp - 0xb4], 0
jne 0x1000bdf2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb00], 0
jne 0x1000bdf2
and dword [ebp - 0x6f4], 0
jmp 0x1000bdfc
mov dword [ebp - 0x6f4], 1
mov eax, 0x5fa2
sub eax, dword [ebp - 0x6f4]
imul eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x7c], 0xffff
jbe 0x1000be23
mov dword [ebp - 0x6fc], 1
jmp 0x1000be2a
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x6e0], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x6e0], eax
jl 0x1000be50
mov dword [ebp - 0x6bc], 1
jmp 0x1000be57
and dword [ebp - 0x6bc], 0
mov dword [ebp - 0x318], 0xe974
mov eax, dword [ebp - 0x318]
sub eax, dword [ebp - 0x6bc]
cmp dword [ebp - 0x7c], eax
jle 0x1000be7e
mov dword [ebp - 0x610], 1
jmp 0x1000be85
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0xfffffffd
jne 0x1000be9a
mov dword [ebp - 0x320], 1
jmp 0x1000bea1
and dword [ebp - 0x320], 0
cmp dword [ebp - 0x320], 0
jne 0x1000beb6
mov dword [ebp - 0x518], 1
jmp 0x1000bebd
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
sub eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0xb4]
jne 0x1000beda
mov dword [ebp - 0x328], 1
jmp 0x1000bee1
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
neg eax
mov ecx, dword [ebp - 0x7c]
lea eax, [eax + ecx - 0x51ac]
test eax, eax
je 0x1000bf03
mov dword [ebp - 0x690], 1
jmp 0x1000bf0a
and dword [ebp - 0x690], 0
cmp dword [ebp - 0x690], 0x68dd2ac3
jl 0x1000bf22
mov dword [ebp - 0x330], 1
jmp 0x1000bf29
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x330]
sub eax, dword [ebp - 0x7c]
add eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x7c]
jge 0x1000bf49
mov dword [ebp - 0x520], 1
jmp 0x1000bf50
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x7c], eax
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x1000bf73
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
mov dword [ebp - 0x618], 1
mov dword [ebp - 0x25c], 1
mov dword [ebp - 0x14], 0
jmp 0x1000bf97
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000bfad
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x30c], 1
jmp 0x1000bf90
mov dword [ebp - 0x14], 0
jmp 0x1000bfbd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000bfd3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb9c], 2
jmp 0x1000bfb6
mov dword [ebp - 0x14], 0
jmp 0x1000bfe3
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1000bff9
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7ec], 0xbc227363
jmp 0x1000bfdc
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x96c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x25c]
cmp dword [ebp + eax - 0x30c], ecx
jne 0x1000c02d
mov dword [ebp - 0x7e4], 1
jmp 0x1000c034
and dword [ebp - 0x7e4], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x30c], 0xa67d
jle 0x1000c052
mov dword [ebp - 0x338], 1
jmp 0x1000c059
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 1
jae 0x1000c074
cmp dword [ebp - 0x25c], 0
jne 0x1000c074
and dword [ebp - 0x528], 0
jmp 0x1000c07e
mov dword [ebp - 0x528], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x618], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x618]
sub ecx, dword [ebp + eax - 0x30c]
mov dword [ebp - 0x340], ecx
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x340]
mov dword [ebp + eax - 0xb9c], ecx
mov eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0x528]
jl 0x1000c0d5
mov dword [ebp - 0x348], 1
jmp 0x1000c0dc
and dword [ebp - 0x348], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
imul eax, dword [ebp - 0x348]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x30c]
jg 0x1000c114
cmp dword [ebp - 0x25c], 0
je 0x1000c114
mov dword [ebp - 0x6d0], 1
jmp 0x1000c11b
and dword [ebp - 0x6d0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6d0]
sub ecx, dword [ebp + eax - 0x30c]
push 4
pop eax
shl eax, 0
sub ecx, dword [ebp + eax - 0x30c]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7ec], ecx
mov dword [ebp - 0x898], 0xf9b3198a
mov dword [ebp - 0x894], 0xf9b3198a
mov dword [ebp - 0x890], 0xf9b3198a
mov dword [ebp - 0x88c], 0xf9b3198a
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x200], 5
jmp 0x1000c193
mov eax, dword [ebp - 0x200]
dec eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 0xffffffe3
je 0x1000c1eb
mov dword [ebp - 0x184], 0xfffffffb
mov dword [ebp - 0x184], 0
jmp 0x1000c1bf
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0xffffffe6
jle 0x1000c1e9
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000c1e7
push 0x1962
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x1000c1b2
jmp 0x1000c186
mov dword [ebp - 0x124], 0xc6f1bf50
mov dword [ebp - 0x264], 0xbe1d925b
mov dword [ebp - 0x7fc], 0x89fff12f
mov dword [ebp - 0x54], 0
jmp 0x1000c219
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000c22f
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x704], 0xfffb
jmp 0x1000c212
mov dword [ebp - 0x54], 0
jmp 0x1000c23f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000c255
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x9c8], 0
jmp 0x1000c238
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x1000c287
push 0
push 0xba7
push 0xba3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportOrgEx]
cmp dword [ebp - 0x264], 8
jae 0x1000c29c
mov dword [ebp - 0x7f4], 1
jmp 0x1000c2a3
and dword [ebp - 0x7f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x704]
mov dword [ebp - 0x974], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x704], 0xfff6
je 0x1000c2d5
mov dword [ebp - 0x350], 1
jmp 0x1000c2dc
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x350], eax
je 0x1000c2f6
mov dword [ebp - 0x530], 1
jmp 0x1000c2fd
and dword [ebp - 0x530], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x704]
cmp dword [ebp - 0x530], eax
jle 0x1000c31e
mov dword [ebp - 0x2cc], 1
jmp 0x1000c325
and dword [ebp - 0x2cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax - 0x9c8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x704]
cmp dword [ebp - 0x2cc], eax
je 0x1000c359
mov dword [ebp - 0x358], 1
jmp 0x1000c360
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x264]
imul eax, dword [ebp - 0x358]
mov dword [ebp - 0x7fc], eax
mov dword [ebp - 0x124], 3
jmp 0x1000c38c
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jl 0x1000cab8
mov dword [ebp - 0x194], 0x6dd8d130
mov dword [ebp - 0x97c], 0x5bb2
mov dword [ebp - 0x984], 0x4de6f885
mov dword [ebp - 0x98c], 0x2f88d967
mov dword [ebp - 0x994], 0x30498d20
mov dword [ebp - 0x99c], 0xff8cd3be
mov dword [ebp - 0x9a4], 0xb6ea
mov dword [ebp - 0x620], 0xaefc518f
mov dword [ebp - 0x208], 0
jmp 0x1000c402
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 3
jge 0x1000c41e
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0xc44], 0x2fe22364
jmp 0x1000c3f5
mov eax, dword [ebp - 0x620]
inc eax
mov dword [ebp - 0x620], eax
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x18c], 0
jmp 0x1000c44e
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x1000c46a
mov eax, dword [ebp - 0x18c]
mov dword [ebp + eax*4 - 0x870], 0x75c9
jmp 0x1000c441
mov dword [ebp - 0x104], 0
jmp 0x1000c483
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 1
jg 0x1000c513
mov dword [ebp - 0x210], 0xfffffff9
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x104]
mov eax, dword [ebp + eax*4 - 0x870]
mov dword [ebp + ecx*4 - 0x870], eax
mov dword [ebp - 0x210], 0
jmp 0x1000c4cd
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jg 0x1000c50e
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1000c4f2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x1000c50c
push 0
call dword [sym.imp.USER32.dll_CharNextW]
jmp 0x1000c4c0
jmp 0x1000c476
mov dword [ebp - 0x194], 0
jmp 0x1000c52c
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jg 0x1000ca9e
mov dword [ebp - 0x74], 0xc64a6847
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0xc4], 9
mov dword [ebp - 0x628], 0x80254f8
mov dword [ebp - 0x9ac], 0x7c525ac8
mov dword [ebp - 0x218], 0
jmp 0x1000c581
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x1000c59d
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xb90], 0x637c1d6b
jmp 0x1000c574
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000c5be
push 0
push 0x17bb
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
mov dword [ebp - 0x74], 0xffffffe5
jmp 0x1000c5ce
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff0
jge 0x1000c899
mov dword [ebp - 0x720], 0xfffffffe
mov dword [ebp - 0x370], 1
mov dword [ebp - 0x2a4], 0x8586fd5d
mov dword [ebp - 0x540], 0x30a4ccfd
mov dword [ebp - 0xbc], 0x8112def9
mov dword [ebp - 0x8d8], 0xfffffffb
mov dword [ebp - 0x8d4], 0xfffffffb
mov dword [ebp - 0x8d0], 0xfffffffb
mov dword [ebp - 0x8cc], 0xfffffffb
mov dword [ebp - 0x80c], 1
mov eax, dword [ebp - 0x720]
sub eax, dword [ebp - 0x74]
jne 0x1000c741
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xb90]
cmp dword [ebp - 0x2a4], eax
jge 0x1000c66c
mov dword [ebp - 0x360], 1
jmp 0x1000c673
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
add eax, 0xfffc
imul eax, eax, 0x1d0b
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x8d8]
jle 0x1000c6a2
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1000c6a2
and dword [ebp - 0x538], 0
jmp 0x1000c6ac
mov dword [ebp - 0x538], 1
cmp dword [ebp - 0x538], 0x4ea8
jl 0x1000c6c4
mov dword [ebp - 0x368], 1
jmp 0x1000c6cb
and dword [ebp - 0x368], 0
imul eax, dword [ebp - 0x368], 0
mov dword [ebp - 0x2a4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8d8]
cmp dword [ebp - 0x2a4], eax
jle 0x1000c6f9
mov dword [ebp - 0x698], 1
jmp 0x1000c700
and dword [ebp - 0x698], 0
cmp dword [ebp - 0x698], 0xffffffff
jl 0x1000c710
cmp dword [ebp - 0x628], 0
mov eax, dword [ebp - 0xc4]
dec eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x370]
cmp dword [ebp - 0xbc], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xbc]
mov dword [ebp + eax - 0xb90], ecx
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x9b4], eax
mov eax, dword [ebp - 0x74]
sub eax, 0x5879
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x540], eax
jl 0x1000c788
mov dword [ebp - 0x378], 1
jmp 0x1000c78f
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0x378], eax
je 0x1000c7a6
mov dword [ebp - 0x380], 1
jmp 0x1000c7ad
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x628]
add eax, dword [ebp - 0x380]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
imul eax, dword [ebp - 0x74]
test eax, eax
je 0x1000c83a
mov byte [ebp - 0x82], 0
movzx eax, byte [ebp - 0x82]
test eax, eax
je 0x1000c7f0
push 0x1ff9
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov dword [ebp - 0xbc], 0
jmp 0x1000c809
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jg 0x1000c838
mov byte [ebp - 0x83], 0
movzx eax, byte [ebp - 0x83]
test eax, eax
je 0x1000c836
push 0x211e
push 0x24c7
push 0
call dword [sym.imp.USER32.dll_InflateRect]
jmp 0x1000c7fc
jmp 0x1000c894
mov byte [ebp - 0x85], 0
movzx eax, byte [ebp - 0x85]
test eax, eax
je 0x1000c856
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteValueA]
mov dword [ebp - 0xc4], 0
jmp 0x1000c86f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x1000c894
mov byte [ebp - 0x87], 0
movzx eax, byte [ebp - 0x87]
test eax, eax
je 0x1000c892
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
jmp 0x1000c862
jmp 0x1000c5c7
mov dword [ebp - 0x1a4], 0xd6923607
mov byte [ebp - 0x8b], 0
mov dword [ebp - 0x9bc], 0x8b13eca4
mov dword [ebp - 0xa90], 0xfffffffb
mov dword [ebp - 0xa98], 8
mov dword [ebp - 0xaa0], 0xfd947597
mov dword [ebp - 0xaa8], 0x588c
mov dword [ebp - 0x548], 0x6928
mov dword [ebp - 0x34], 0
jmp 0x1000c8f6
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1000c90c
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xcbc], 0xfffffffb
jmp 0x1000c8ef
mov dword [ebp - 0x34], 0
jmp 0x1000c91c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1000c932
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xc74], 3
jmp 0x1000c915
mov byte [ebp - 0x89], 0
movzx eax, byte [ebp - 0x89]
test eax, eax
je 0x1000c94e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov eax, dword [ebp - 0x548]
dec eax
mov dword [ebp - 0x548], eax
movzx eax, byte [ebp - 0x8b]
test eax, eax
je 0x1000ca63
mov dword [ebp - 0x220], 0xb26bdde0
mov dword [ebp - 0x81c], 0xffffffff
mov dword [ebp - 0x220], 6
jmp 0x1000c997
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0x17
jle 0x1000ca43
mov dword [ebp - 0x388], 0xfffffff9
mov dword [ebp - 0x12c], 0xd00585b
mov eax, dword [ebp - 0x388]
cmp dword [ebp - 0x388], eax
jne 0x1000c9d2
mov dword [ebp - 0x6dc], 1
jmp 0x1000c9d9
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xe05d
jl 0x1000c9f1
mov dword [ebp - 0x390], 1
jmp 0x1000c9f8
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x390]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x12c], 0x1d
jmp 0x1000ca1d
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0x16
jle 0x1000ca3e
mov dword [ebp - 0x814], 3
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x81c], eax
jmp 0x1000ca10
jmp 0x1000c98a
push 0
push 0x626
push 0x315
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
mov dword [ebp - 0x1a4], 3
jmp 0x1000ca7c
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x1000ca99
mov eax, dword [ebp - 0x124]
cmp dword [ebp + eax*4 - 0x898], 0
je 0x1000ca97
jmp 0x1000ca99
jmp 0x1000ca6f
jmp 0x1000c51f
mov eax, dword [ebp - 0x124]
cmp dword [ebp + eax*4 - 0x898], 0
je 0x1000cab3
jmp 0x1000c37f
jmp 0x1000c37f
mov dword [ebp - 0x1ac], 0xfffffffe
mov dword [ebp - 0x228], 0
jmp 0x1000cadb
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1000caf7
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xbb0], 0xfd5464b5
jmp 0x1000cace
mov dword [ebp - 0x1ac], 0
jmp 0x1000cb10
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jg 0x1000cb3a
mov byte [ebp - 0x8d], 0
movzx eax, byte [ebp - 0x8d]
test eax, eax
je 0x1000cb38
push 0x5da
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x1000cb03
movzx eax, byte [0x12664db4]
test eax, eax
je 0x1000cb58
mov esi, 0x10078878
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10011069
mov dword [ebp - 0x1b4], 0xfffffffe
mov dword [ebp - 0x230], 0
jmp 0x1000cb7b
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 2
jge 0x1000cb97
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xbc8], 0xfd5464b5
jmp 0x1000cb6e
mov dword [ebp - 0x1b4], 0
jmp 0x1000cbb0
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jg 0x1000cbda
mov byte [ebp - 0x8f], 0
movzx eax, byte [ebp - 0x8f]
test eax, eax
je 0x1000cbd8
push 0x5da
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x1000cba3
mov dword [ebp - 0x1bc], 0xfffffffe
mov dword [ebp - 0x238], 0
jmp 0x1000cbfd
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x1000cc19
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xbf8], 0xfd5464b5
jmp 0x1000cbf0
mov dword [ebp - 0x1bc], 0
jmp 0x1000cc32
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jg 0x1000cc5c
mov byte [ebp - 0x91], 0
movzx eax, byte [ebp - 0x91]
test eax, eax
je 0x1000cc5a
push 0x5da
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
jmp 0x1000cc25
mov dword [ebp - 0xab0], 0x10078878
mov dword [ebp - 0x134], 0xfffffffc
mov dword [ebp - 0x26c], 0
mov dword [ebp - 0x3a8], 0xfffffffd
mov dword [ebp - 0x824], 0xc2c9ebf4
mov dword [ebp - 0x730], 7
mov dword [ebp - 0xab8], 0
mov byte [ebp - 0x93], 0
movzx eax, byte [ebp - 0x93]
test eax, eax
je 0x1000ccc6
push 0
push 0xc47
push 0x15cd
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xac0], eax
mov eax, dword [ebp - 0x824]
cmp dword [ebp - 0x26c], eax
je 0x1000ccec
mov dword [ebp - 0x550], 1
jmp 0x1000ccf3
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x550], eax
jge 0x1000cd0d
mov dword [ebp - 0x398], 1
jmp 0x1000cd14
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 1
je 0x1000cd29
mov dword [ebp - 0x630], 1
jmp 0x1000cd30
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x630], eax
jg 0x1000cd4a
mov dword [ebp - 0x3a0], 1
jmp 0x1000cd51
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x3a0], eax
jne 0x1000cd6b
mov dword [ebp - 0x558], 1
jmp 0x1000cd72
and dword [ebp - 0x558], 0
mov dword [ebp - 0x3a8], 4
imul eax, dword [ebp - 0x558], 7
cmp dword [ebp - 0x3a8], eax
jl 0x1000cd97
mov dword [ebp - 0x6a0], 1
jmp 0x1000cd9e
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x6a0]
jge 0x1000cdb8
mov dword [ebp - 0x3b0], 1
jmp 0x1000cdbf
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x3b0]
jle 0x1000cddf
cmp dword [ebp - 0x134], 0
jne 0x1000cddf
and dword [ebp - 0x560], 0
jmp 0x1000cde9
mov dword [ebp - 0x560], 1
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x730], eax
mov dword [ebp - 0x14c], 0xfffffffc
mov dword [ebp - 0x2dc], 0
mov dword [ebp - 0x6d8], 0xfffffffd
mov dword [ebp - 0x7d4], 0xc2c9ebf4
mov dword [ebp - 0x77c], 7
mov dword [ebp - 0xac8], 0
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x1000ce55
push 0
push 0xc47
push 0x15cd
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xad0], eax
mov eax, dword [ebp - 0x7d4]
cmp dword [ebp - 0x2dc], eax
je 0x1000ce7b
mov dword [ebp - 0x3b8], 1
jmp 0x1000ce82
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x2dc]
cmp dword [ebp - 0x3b8], eax
jge 0x1000ce9c
mov dword [ebp - 0x638], 1
jmp 0x1000cea3
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 1
je 0x1000ceb8
mov dword [ebp - 0x3c0], 1
jmp 0x1000cebf
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x3c0], eax
jg 0x1000ced9
mov dword [ebp - 0x568], 1
jmp 0x1000cee0
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x568], eax
jne 0x1000cefa
mov dword [ebp - 0x3c8], 1
jmp 0x1000cf01
and dword [ebp - 0x3c8], 0
mov dword [ebp - 0x6d8], 4
imul eax, dword [ebp - 0x3c8], 7
cmp dword [ebp - 0x6d8], eax
jl 0x1000cf26
mov dword [ebp - 0x3d0], 1
jmp 0x1000cf2d
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x3d0]
jge 0x1000cf47
mov dword [ebp - 0x570], 1
jmp 0x1000cf4e
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x14c]
cmp eax, dword [ebp - 0x570]
jle 0x1000cf6e
cmp dword [ebp - 0x14c], 0
jne 0x1000cf6e
and dword [ebp - 0x3d8], 0
jmp 0x1000cf78
mov dword [ebp - 0x3d8], 1
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x1c], 0
jmp 0x1000cf94
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000cfaa
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x10c], 1
jmp 0x1000cf8d
mov dword [ebp - 0x1c], 0
jmp 0x1000cfba
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000cfd0
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9d4], 5
jmp 0x1000cfb3
mov dword [ebp - 0x1c], 0
jmp 0x1000cfe0
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000cff6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x83c], 0xa3191b49
jmp 0x1000cfd9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
mov dword [ebp - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0xb263
je 0x1000d028
mov dword [ebp - 0x640], 1
jmp 0x1000d02f
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 1
jl 0x1000d044
mov dword [ebp - 0x3e0], 1
jmp 0x1000d04b
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp dword [ebp - 0x3e0], eax
jge 0x1000d06c
mov dword [ebp - 0x578], 1
jmp 0x1000d073
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
cmp eax, dword [ebp - 0x578]
jl 0x1000d094
mov dword [ebp - 0x3e8], 1
jmp 0x1000d09b
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x3e8]
add eax, 5
cmp eax, 0x51af
jne 0x1000d0b7
mov dword [ebp - 0x6a8], 1
jmp 0x1000d0be
and dword [ebp - 0x6a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10c]
add eax, dword [ebp - 0x6a8]
jne 0x1000d0ec
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x10c], 0
jne 0x1000d0ec
and dword [ebp - 0x3f0], 0
jmp 0x1000d0f6
mov dword [ebp - 0x3f0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp + eax - 0x9d4], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x83c], 0
jmp 0x1000d137
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x83c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x83c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x83c], 0xffffffe6
jge 0x1000d21a
mov dword [ebp - 0x240], 0x6123d4a1
mov dword [ebp - 0xae0], 0xd2668451
mov dword [ebp - 0xae8], 0xfffffff7
mov dword [ebp - 0xaf0], 1
mov dword [ebp - 0xb58], 0x5878ed7c
mov dword [ebp - 0x240], 0
jmp 0x1000d196
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jl 0x1000d215
mov dword [ebp - 0x1c4], 0
jmp 0x1000d1b8
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 2
jge 0x1000d1d4
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x8c8], 0xfffa
jmp 0x1000d1ab
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x8c8]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x8c8], eax
mov byte [ebp - 0x97], 0
movzx eax, byte [ebp - 0x97]
test eax, eax
je 0x1000d210
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x1000d189
jmp 0x1000d11c
mov dword [ebp - 0xb60], 0x1007887c
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x248], 0
jmp 0x1000d244
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x1000d260
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xc20], 0
jmp 0x1000d237
mov dword [ebp - 0x6c], 0
jmp 0x1000d270
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000d295
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1000d293
push 0x2487
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x1000d269
mov dword [ebp - 0x6c], 0xffffffe5
jmp 0x1000d2a5
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xfffffff3
jg 0x1000d2e7
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x1000d2e5
push 0
push 0x6c1
push 0xf07
push 0x170d
push 0x1eb3
push 0x2102
push 0x1dfa
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
jmp 0x1000d29e
mov dword [ebp - 0x13c], 0xfffffffc
mov dword [ebp - 0x274], 0
mov dword [ebp - 0x408], 0xfffffffd
mov dword [ebp - 0x734], 0xc2c9ebf4
mov dword [ebp - 0x7e8], 7
mov dword [ebp - 0xb68], 0
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x1000d347
push 0
push 0xc47
push 0x15cd
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0x734]
cmp dword [ebp - 0x274], eax
je 0x1000d36d
mov dword [ebp - 0x580], 1
jmp 0x1000d374
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x580], eax
jge 0x1000d38e
mov dword [ebp - 0x3f8], 1
jmp 0x1000d395
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 1
je 0x1000d3aa
mov dword [ebp - 0x648], 1
jmp 0x1000d3b1
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x648], eax
jg 0x1000d3cb
mov dword [ebp - 0x400], 1
jmp 0x1000d3d2
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x400], eax
jne 0x1000d3ec
mov dword [ebp - 0x588], 1
jmp 0x1000d3f3
and dword [ebp - 0x588], 0
mov dword [ebp - 0x408], 4
imul eax, dword [ebp - 0x588], 7
cmp dword [ebp - 0x408], eax
jl 0x1000d418
mov dword [ebp - 0x6e4], 1
jmp 0x1000d41f
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x6e4]
jge 0x1000d439
mov dword [ebp - 0x410], 1
jmp 0x1000d440
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x13c]
cmp eax, dword [ebp - 0x410]
jle 0x1000d460
cmp dword [ebp - 0x13c], 0
jne 0x1000d460
and dword [ebp - 0x590], 0
jmp 0x1000d46a
mov dword [ebp - 0x590], 1
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x7e8], eax
mov dword [ebp - 0xcc], 0xa75c96dd
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xcc], 0xfffffff3
jmp 0x1000d4a6
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0x3c
jle 0x1000d5ac
mov dword [ebp - 0x738], 0x373a4c92
mov dword [ebp - 0x650], 0
mov dword [ebp - 0x250], 0
jmp 0x1000d4e0
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1000d4fc
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x8e4], 9
jmp 0x1000d4d3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x8e4], 0
je 0x1000d56a
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8e4]
mov dword [ebp - 0x418], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x418]
mov dword [ebp + eax - 0x8e4], ecx
mov eax, dword [ebp - 0x650]
cmp dword [ebp - 0x418], eax
jle 0x1000d549
mov dword [ebp - 0x420], 1
jmp 0x1000d550
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x650]
cmp dword [ebp - 0x420], eax
je 0x1000d56a
mov dword [ebp - 0x598], 1
jmp 0x1000d571
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xfffffffa
jne 0x1000d586
mov dword [ebp - 0x428], 1
jmp 0x1000d58d
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x738], eax
cmp dword [ebp - 0xcc], 0
je 0x1000d5a7
jmp 0x1000d499
jmp 0x1000d499
mov byte [0x12664db4], 1
mov dword [ebp - 0x15c], 6
mov dword [ebp - 0x740], 0x3809
mov dword [ebp - 0x7b0], 0xcd9d7
mov dword [ebp - 0x808], 0x34f1
mov dword [ebp - 0x5c], 0
jmp 0x1000d5eb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000d601
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x914], 0xfffffffc
jmp 0x1000d5e4
mov dword [ebp - 0x5c], 0
jmp 0x1000d611
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x1000d627
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2e4], 0xf5fa
jmp 0x1000d60a
cmp dword [ebp - 0x15c], 0xffff
jb 0x1000d63f
mov dword [ebp - 0x6b0], 1
jmp 0x1000d646
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
add eax, 3
je 0x1000d6df
mov dword [ebp - 0xb54], 7
mov dword [ebp - 0xa84], 0x1dfe4b28
mov dword [ebp - 0x930], 0xfffffff8
mov dword [ebp - 0x58], 0
jmp 0x1000d683
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1000d699
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc38], 1
jmp 0x1000d67c
mov dword [ebp - 0x58], 0
jmp 0x1000d6a9
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x1000d6bf
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xbb8], 0x1d2250db
jmp 0x1000d6a2
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e4]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2e4], eax
jmp 0x1000d9a9
mov dword [ebp - 0x24c], 0xffffffff
mov dword [ebp - 0x2ac], 0
mov dword [ebp - 0x11c], 0xf5ab171c
mov eax, 0x168aa2
test eax, eax
je 0x1000d935
mov eax, dword [ebp - 0x15c]
imul eax, dword [ebp - 0x15c]
test eax, eax
je 0x1000d730
cmp dword [ebp - 0x15c], 0
je 0x1000d730
mov dword [ebp - 0x430], 1
jmp 0x1000d737
and dword [ebp - 0x430], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x430], eax
jg 0x1000d758
mov dword [ebp - 0x5a0], 1
jmp 0x1000d75f
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x24c]
cmp dword [ebp - 0x5a0], eax
jne 0x1000d779
mov dword [ebp - 0x438], 1
jmp 0x1000d780
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
sub eax, 0xdeb9
je 0x1000d7a9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e4], 0
je 0x1000d7a9
mov dword [ebp - 0x658], 1
jmp 0x1000d7b0
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x658]
sub eax, dword [ebp - 0x24c]
mov dword [ebp - 0x2ac], eax
xor eax, eax
sub eax, dword [ebp - 0x2ac]
cmp eax, dword [ebp - 0x24c]
jne 0x1000d7de
mov dword [ebp - 0x440], 1
jmp 0x1000d7e5
and dword [ebp - 0x440], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e4]
cmp dword [ebp - 0x440], eax
je 0x1000d815
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x914], 0
je 0x1000d815
mov dword [ebp - 0x5a8], 1
jmp 0x1000d81c
and dword [ebp - 0x5a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x914]
cmp dword [ebp - 0x5a8], eax
je 0x1000d83d
mov dword [ebp - 0x448], 1
jmp 0x1000d844
and dword [ebp - 0x448], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x448]
mov dword [ebp + eax - 0x914], ecx
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x938], eax
mov eax, 0x826
cmp eax, 0x2365
jge 0x1000d887
mov dword [ebp - 0x6ec], 1
jmp 0x1000d88e
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x7b0], eax
jl 0x1000d8b4
mov dword [ebp - 0x450], 1
jmp 0x1000d8bb
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x15c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2e4], 0xfffffffd
je 0x1000d8e3
mov dword [ebp - 0x5b0], 1
jmp 0x1000d8ea
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x740]
cmp dword [ebp - 0x5b0], eax
je 0x1000d904
mov dword [ebp - 0x458], 1
jmp 0x1000d90b
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x808]
cmp dword [ebp - 0x458], eax
jg 0x1000d935
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1000d933
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x1000d9a9
mov dword [ebp - 0x1d4], 0
jmp 0x1000d94e
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x1000d96a
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0x660], 0x19ef
jmp 0x1000d941
mov dword [ebp - 0x11c], 0
jmp 0x1000d983
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1000d9a9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x660]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x660], eax
jmp 0x1000d976
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x1000d9c3
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov dword [ebp - 0xc], 0
jmp 0x1000d9d3
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x1000d9e9
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0xfc], 1
jmp 0x1000d9cc
mov dword [ebp - 0xc], 0
jmp 0x1000d9f9
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 2
jge 0x1000da0f
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x9e0], 5
jmp 0x1000d9f2
mov dword [ebp - 0xc], 0
jmp 0x1000da1f
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x1000da35
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x848], 0xa3191b49
jmp 0x1000da18
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
mov dword [ebp - 0xa8c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc], 0xb263
je 0x1000da67
mov dword [ebp - 0x460], 1
jmp 0x1000da6e
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 1
jl 0x1000da83
mov dword [ebp - 0x5b8], 1
jmp 0x1000da8a
and dword [ebp - 0x5b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp dword [ebp - 0x5b8], eax
jge 0x1000daab
mov dword [ebp - 0x468], 1
jmp 0x1000dab2
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
cmp eax, dword [ebp - 0x468]
jl 0x1000dad3
mov dword [ebp - 0x6b8], 1
jmp 0x1000dada
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
add eax, 5
cmp eax, 0x51af
jne 0x1000daf6
mov dword [ebp - 0x470], 1
jmp 0x1000dafd
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc]
add eax, dword [ebp - 0x470]
jne 0x1000db2b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfc], 0
jne 0x1000db2b
mov dword [ebp - 0x5c0], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp + eax - 0x9e0], ecx
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x848], 0
jmp 0x1000db76
pop edi
pop esi
mov esp, ebp
pop ebp
ret