Function at 0x10008aa9
Capabilities:
Get system information on windows
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x114c
call fcn.1006c9a0
push esi
push edi
mov dword [ebp - 0x54], 0x532fe223
mov dword [ebp - 0xa8], 0x18f4c6f4
mov dword [ebp - 0x1b8], 0xfffc
mov dword [ebp - 0x410], 0x90eb1f0c
mov dword [ebp - 0x74], 0
jmp 0x10008aed
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10008b03
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x9b0], 0xb9b5
jmp 0x10008ae6
mov dword [ebp - 0x74], 0
jmp 0x10008b13
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10008b29
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xe64], 0xf6b34c2
jmp 0x10008b0c
mov dword [ebp - 0x54], 0
jmp 0x10008b39
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x10008e8c
mov dword [ebp - 0xac], 0xfffffffe
mov dword [ebp - 0x408], 0xfffffffc
mov dword [ebp - 0xf34], 5
mov dword [ebp - 0xf30], 5
mov dword [ebp - 0xf2c], 5
mov dword [ebp - 0xf28], 5
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x9b0], 0
je 0x10008cd3
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x9b0]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xd1c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9b0]
mov dword [ebp - 0xa50], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xa50]
mov dword [ebp + eax - 0xe64], ecx
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xd24], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9b0]
mov dword [ebp - 0xd2c], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xd34], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xac], eax
jl 0x10008c14
mov dword [ebp - 0x4f0], 1
jmp 0x10008c1b
and dword [ebp - 0x4f0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4f0]
sub ecx, dword [ebp + eax - 0x9b0]
cmp ecx, 0xffffffff
je 0x10008c3f
mov dword [ebp - 0x978], 1
jmp 0x10008c46
and dword [ebp - 0x978], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9b0]
cmp dword [ebp - 0x978], eax
jge 0x10008c74
mov eax, dword [ebp - 0x54]
cmp dword [ebp + eax*4 - 0x9b0], 0
je 0x10008c74
mov dword [ebp - 0x980], 1
jmp 0x10008c7b
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0x9b0]
add eax, dword [ebp - 0x980]
jne 0x10008c9d
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x10008c9d
and dword [ebp - 0x988], 0
jmp 0x10008ca7
mov dword [ebp - 0x988], 1
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x988]
mov ecx, dword [ebp - 0x54]
cmp eax, dword [ebp + ecx*4 - 0x9b0]
jne 0x10008cd3
mov dword [ebp - 0x990], 1
jmp 0x10008cda
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x990], eax
jle 0x10008cf4
mov dword [ebp - 0x8ec], 1
jmp 0x10008cfb
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x8ec], eax
jl 0x10008d1b
mov eax, 0xc321
test eax, eax
jne 0x10008d1b
and dword [ebp - 0x400], 0
jmp 0x10008d25
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0x1b8], 0
je 0x10008e7a
mov dword [ebp - 0xd3c], 0
mov dword [ebp - 0xa8], 3
jmp 0x10008d61
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0
jl 0x10008e42
mov dword [ebp - 0x338], 0
jmp 0x10008d87
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 3
jge 0x10008da3
mov eax, dword [ebp - 0x338]
mov dword [ebp + eax*4 - 0xfc4], 0xfffffff7
jmp 0x10008d7a
mov dword [ebp - 0x1b8], 0
jmp 0x10008dbc
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jg 0x10008df8
mov dword [ebp - 0x930], 0xdc870af0
mov byte [ebp - 0x15b], 0
movzx eax, byte [ebp - 0x15b]
test eax, eax
je 0x10008de9
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x930]
dec eax
mov dword [ebp - 0x930], eax
jmp 0x10008daf
mov dword [ebp - 0x408], 0x51aaf19
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfc4]
cmp eax, dword [ebp - 0x408]
jne 0x10008e23
mov dword [ebp - 0x938], 1
jmp 0x10008e2a
and dword [ebp - 0x938], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x938]
mov dword [ebp + eax - 0xe64], ecx
jmp 0x10008d54
mov dword [ebp - 0xa8], 0x12
jmp 0x10008e5b
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x1c
jge 0x10008e78
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9b0], 0
je 0x10008e76
jmp 0x10008e78
jmp 0x10008e4e
jmp 0x10008e87
mov eax, dword [ebp - 0x410]
dec eax
mov dword [ebp - 0x410], eax
jmp 0x10008b32
mov dword [ebp - 0x2f0], 0xfb871c7b
mov dword [ebp - 0xf48], 0xffffffff
mov dword [ebp - 0xf44], 0xffffffff
mov dword [ebp - 0xf40], 0xffffffff
mov dword [ebp - 0xf3c], 0xffffffff
mov dword [ebp - 0x20c], 0
jmp 0x10008ed7
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 3
jge 0x10008ef3
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0x114c], 0x64a6847d
jmp 0x10008eca
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x10008f27
push 0
push 0
push 0x1726
push 0
push 0xe7c
push 0
push 0x758
push 0x1695
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x2f0], 0
jmp 0x10008f40
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 2
jg 0x10008fd0
mov dword [ebp - 0xd44], 0x50e6da50
mov dword [ebp - 0xd4c], 0
mov dword [ebp - 0xd54], 0xbfc4f27d
mov dword [ebp - 0xf5c], 0
mov dword [ebp - 0xf58], 0
mov dword [ebp - 0xf54], 0
mov dword [ebp - 0xf50], 0
mov dword [ebp - 0x940], 0x9d44c039
mov eax, dword [ebp - 0x940]
dec eax
mov dword [ebp - 0x940], eax
mov byte [ebp - 0x164], 0
movzx eax, byte [ebp - 0x164]
test eax, eax
je 0x10008fcb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x10008f33
mov dword [ebp - 0xd5c], 8
mov dword [ebp - 0xd64], 1
mov dword [ebp - 0xd6c], 4
mov dword [ebp - 0x214], 0
jmp 0x10009007
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x10009023
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0xc14], 0x77862fd4
jmp 0x10008ffa
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc14], 0xfffffffb
jmp 0x10009051
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc14]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc14], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc14], 0xffffffe8
jle 0x1000907a
mov dword [ebp - 0x418], 0x11151
mov eax, dword [ebp - 0x418]
inc eax
mov dword [ebp - 0x418], eax
jmp 0x10009036
mov dword [ebp - 0x3f4], 0
mov dword [ebp - 0x3f0], 0
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x10], 0xa8ed40a1
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0x1c4], 0xa82e77e8
mov dword [ebp - 0xb40], 2
mov dword [ebp - 0x330], 0
jmp 0x100090e0
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x100090fc
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xc38], 0xc15d0d65
jmp 0x100090d3
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
mov dword [ebp - 0xd74], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc38]
cmp dword [ebp + eax - 0x3f4], ecx
jg 0x10009137
mov dword [ebp - 0x948], 1
jmp 0x1000913e
and dword [ebp - 0x948], 0
cmp dword [ebp - 0x948], 0
jl 0x10009153
mov dword [ebp - 0x420], 1
jmp 0x1000915a
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x10], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0xd7c], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xe14], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xe1c], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3f4]
cmp dword [ebp + eax - 0xc38], ecx
je 0x100091b5
mov dword [ebp - 0xb30], 1
jmp 0x100091bc
and dword [ebp - 0xb30], 0
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0xe24], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3f4], 0
jne 0x100091e3
mov dword [ebp - 0x950], 1
jmp 0x100091ea
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x950]
cmp eax, 1
jl 0x10009208
mov dword [ebp - 0x428], 1
jmp 0x1000920f
and dword [ebp - 0x428], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x428], eax
je 0x1000922f
mov dword [ebp - 0x958], 1
jmp 0x10009236
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0x1fc]
cmp dword [ebp - 0x958], eax
jg 0x10009250
mov dword [ebp - 0x430], 1
jmp 0x10009257
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x1fc], eax
mov dword [ebp - 0x1c4], 0xfffffff8
jmp 0x1000927c
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xffffffeb
je 0x100096d0
mov dword [ebp - 0x1cc], 2
mov dword [ebp - 0x968], 0xfffffff7
mov dword [ebp - 0x1e4], 0xfffffffe
mov dword [ebp - 0xe2c], 2
mov dword [ebp - 0xb38], 0xb5d6
mov dword [ebp - 0x10], 0
jmp 0x100092cb
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xc
je 0x10009592
mov dword [ebp - 0x21c], 0xd9236f91
mov dword [ebp - 0x454], 0xfffffffb
mov dword [ebp - 0x46c], 0xa9fc5c2d
cmp dword [ebp - 0x1cc], 0
je 0x1000954f
mov dword [ebp - 0x170], 0xa3b
mov dword [ebp - 0x960], 0xfffffffa
mov dword [ebp - 0x970], 0xfffffff8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc38]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x170], eax
je 0x1000934a
mov dword [ebp - 0x848], 1
jmp 0x10009351
and dword [ebp - 0x848], 0
mov dword [ebp - 0x960], 0xfffffffe
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x960], eax
jg 0x10009375
mov dword [ebp - 0x438], 1
jmp 0x1000937c
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0x968], eax
mov eax, dword [ebp - 0x968]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x970]
cmp dword [ebp - 0x21c], eax
jg 0x100093ae
mov dword [ebp - 0x470], 1
jmp 0x100093b5
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x470], eax
jle 0x100093cf
mov dword [ebp - 0x468], 1
jmp 0x100093d6
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0xdfce
jne 0x100093ee
mov dword [ebp - 0x44c], 1
jmp 0x100093f5
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x1cc]
imul eax, dword [ebp - 0x44c]
test eax, eax
jne 0x10009418
mov eax, 0xf510
test eax, eax
jne 0x10009418
and dword [ebp - 0x6f4], 0
jmp 0x10009422
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x454], eax
jle 0x10009454
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3f4], 0
jne 0x10009454
and dword [ebp - 0x45c], 0
jmp 0x1000945e
mov dword [ebp - 0x45c], 1
mov eax, dword [ebp - 0x848]
sub eax, dword [ebp - 0x45c]
cmp eax, dword [ebp - 0x170]
jle 0x1000947e
mov dword [ebp - 0x6fc], 1
jmp 0x10009485
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0x9e4a0435
jbe 0x1000949d
mov dword [ebp - 0x464], 1
jmp 0x100094a4
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x464], eax
jl 0x100094be
mov dword [ebp - 0x84c], 1
jmp 0x100094c5
and dword [ebp - 0x84c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
imul eax, dword [ebp - 0x84c]
mov dword [ebp - 0x46c], eax
mov eax, dword [ebp - 0x170]
cmp dword [ebp - 0x46c], eax
jg 0x100094f8
mov dword [ebp - 0x704], 1
jmp 0x100094ff
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x21c]
cmp dword [ebp - 0x704], eax
jge 0x10009519
mov dword [ebp - 0x474], 1
jmp 0x10009520
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x474], eax
jne 0x1000953a
mov dword [ebp - 0x97c], 1
jmp 0x10009541
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0x1e4], eax
jmp 0x1000956c
mov byte [ebp - 0x149], 0
movzx eax, byte [ebp - 0x149]
test eax, eax
je 0x1000956c
push 0x1061
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov byte [ebp - 0x166], 0
movzx eax, byte [ebp - 0x166]
test eax, eax
je 0x1000958d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x100092c4
mov dword [ebp - 0x10], 3
jmp 0x100095a2
mov eax, dword [ebp - 0x10]
dec eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jl 0x100096cb
mov dword [ebp - 0x1e4], 2
jmp 0x100095c5
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl 0x10009606
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x10009604
push 0
push 0x67c
push 0
push 0x933
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x100095b8
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x3f4], 0
jne 0x100096a1
cmp dword [ebp - 0xb38], 1
jle 0x10009630
push 8
pop eax
test eax, eax
jne 0x10009630
and dword [ebp - 0x47c], 0
jmp 0x1000963a
mov dword [ebp - 0x47c], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x3f4]
cmp eax, dword [ebp - 0x47c]
je 0x10009658
mov dword [ebp - 0x70c], 1
jmp 0x1000965f
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x3f4]
cmp dword [ebp - 0x70c], eax
jge 0x1000967d
mov dword [ebp - 0x484], 1
jmp 0x10009684
and dword [ebp - 0x484], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x484], eax
je 0x100096b3
cmp dword [ebp - 0x1cc], 0
je 0x100096b3
cmp dword [ebp - 0x10], 0
je 0x100096b3
mov dword [ebp - 0x854], 1
jmp 0x100096ba
and dword [ebp - 0x854], 0
mov eax, dword [ebp - 0x854]
mov dword [ebp - 0xb40], eax
jmp 0x1000959b
jmp 0x1000926f
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x2f8], 0
jmp 0x100096fa
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 3
jge 0x10009716
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xc5c], 0x25a8
jmp 0x100096ed
mov dword [ebp - 0x38], 0x14
jmp 0x10009726
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xfffffffa
jge 0x10009742
mov dword [ebp - 0xb54], 0x8cb4c23a
mov dword [ebp - 0xb54], 1
jmp 0x1000971f
mov dword [ebp - 0x38], 2
jmp 0x10009752
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x100097e4
mov dword [ebp - 0x494], 0xba29f583
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0xc5c], 1
jbe 0x1000977f
mov dword [ebp - 0x48c], 1
jmp 0x10009786
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0xc5c]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe3c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc5c], 0xffffffff
jl 0x100097bb
mov dword [ebp - 0x714], 1
jmp 0x100097c2
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x714]
mov dword [ebp - 0x494], eax
mov dword [ebp - 0x494], 7
jmp 0x1000974b
mov dword [ebp - 0x224], 0
jmp 0x100097fd
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 3
jge 0x10009819
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x1140], 1
jmp 0x100097f0
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x10009841
push 0x1352
push 0
push 0
push 0x1fda
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x10009862
push 0x21bd
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x344], 0
jmp 0x1000987b
mov eax, dword [ebp - 0x344]
inc eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x11
je 0x10009f86
mov dword [ebp - 0x9f0], 1
mov dword [ebp - 0x9ec], 1
mov dword [ebp - 0x9e8], 1
mov dword [ebp - 0x9e4], 1
mov dword [ebp - 0xb64], 0xfffffffa
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x9f0], 0xfffffff8
jmp 0x100098e5
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x9f0]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x9f0], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9f0], 0xfffffff4
jge 0x10009ad7
mov dword [ebp - 0x22c], 0
jmp 0x10009911
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 2
jge 0x1000992d
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x9c8], 0x25260
jmp 0x10009904
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x9c8], 0
jmp 0x1000995b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9c8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x9c8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9c8], 0x16
je 0x10009ac7
mov dword [ebp - 0xb5c], 0xedad94e8
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x9f0], 0
je 0x100099bc
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x100099a6
push 0x113a
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x9f0], 0
je 0x100099b7
jmp 0x10009940
jmp 0x10009ac2
mov dword [ebp - 0x300], 0xffffffff
mov dword [ebp - 0x300], 0xd
jmp 0x100099df
mov eax, dword [ebp - 0x300]
dec eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 0xa
jl 0x10009aa2
mov dword [ebp - 0x334], 1
mov dword [ebp - 0x234], 0
jmp 0x10009a0f
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x10009a2b
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x1078], 0xd0da0bdb
jmp 0x10009a02
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1078], 0xcc2443ac
mov dword [ebp - 0x334], 0
jmp 0x10009a55
mov eax, dword [ebp - 0x334]
dec eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0xfffffff0
jl 0x10009a9d
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x10009a90
push 0
push 0x1fd4
push 0
push 0x21ce
push 0x2644
push 0
push 0x3e7
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
cmp dword [ebp - 0xb5c], 0
je 0x10009a9b
jmp 0x10009a9d
jmp 0x10009a48
jmp 0x100099d2
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x10009ac2
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
jmp 0x10009940
cmp dword [ebp - 0xb64], 0
je 0x10009ad2
jmp 0x10009ad7
jmp 0x100098cc
mov dword [ebp - 0x7c], 0xfd41e559
mov dword [ebp - 0x308], 0
cmp dword [ebp - 0x7c], 0
je 0x10009d46
mov dword [ebp - 0xdc], 0xb4c8f0d0
mov dword [ebp - 0x100], 0xfffffffc
mov dword [ebp - 0x374], 0
mov dword [ebp - 0x3cc], 4
mov dword [ebp - 0x23c], 0
jmp 0x10009b33
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 4
jge 0x10009b4f
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1098], 0xfffffffd
jmp 0x10009b26
cmp dword [ebp - 0x7c], 0
je 0x10009caa
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
je 0x10009c75
cmp dword [ebp - 0x100], 0
jne 0x10009bbc
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0xdc], eax
jg 0x10009b95
cmp dword [ebp - 0x308], 0
jne 0x10009b95
and dword [ebp - 0x8f4], 0
jmp 0x10009b9f
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0x308]
jne 0x10009bbc
and dword [ebp - 0x49c], 0
jmp 0x10009bc6
mov dword [ebp - 0x49c], 1
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0xdc], eax
jle 0x10009c16
cmp dword [ebp - 0x100], 0
je 0x10009c16
mov dword [ebp - 0x71c], 1
jmp 0x10009c1d
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x71c], eax
je 0x10009c3b
push 0xfffffffffffffffd
pop eax
test eax, eax
jne 0x10009c3b
and dword [ebp - 0x4a4], 0
jmp 0x10009c45
mov dword [ebp - 0x4a4], 1
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x4a4], eax
jge 0x10009c5f
mov dword [ebp - 0x85c], 1
jmp 0x10009c66
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
sub eax, dword [ebp - 0x100]
cmp eax, dword [ebp - 0x7c]
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x7c], eax
je 0x10009c8c
mov dword [ebp - 0x4ac], 1
jmp 0x10009c93
and dword [ebp - 0x4ac], 0
imul eax, dword [ebp - 0x4ac], 0xffffffff
test eax, eax
je 0x10009caa
mov dword [ebp - 0x724], 1
jmp 0x10009cb1
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x308]
cmp dword [ebp - 0x724], eax
jle 0x10009ccb
mov dword [ebp - 0x4b4], 1
jmp 0x10009cd2
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x4b4], eax
jge 0x10009cec
mov dword [ebp - 0x944], 1
jmp 0x10009cf3
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x944]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0
jne 0x10009d1a
cmp dword [ebp - 0x3cc], 0
jne 0x10009d1a
and dword [ebp - 0xb6c], 0
jmp 0x10009d24
mov dword [ebp - 0xb6c], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xec8], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1098], 1
jmp 0x10009dc7
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0x244], 0
jmp 0x10009d69
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x10009d85
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x1068], 0
jmp 0x10009d5c
mov dword [ebp - 0x7c], 0
jmp 0x10009d95
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jg 0x10009dc7
mov dword [ebp - 0xb74], 0x2c298c24
mov byte [ebp - 0xf4], 0
movzx eax, byte [ebp - 0xf4]
test eax, eax
je 0x10009dc5
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x10009d8e
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x10009f56
mov dword [ebp - 0x178], 0x1928c176
mov dword [ebp - 0xbb8], 0x3b6f9b69
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x354], 0
jmp 0x10009e14
mov eax, dword [ebp - 0x354]
inc eax
mov dword [ebp - 0x354], eax
cmp dword [ebp - 0x354], 2
jge 0x10009e30
mov eax, dword [ebp - 0x354]
mov dword [ebp + eax*4 - 0xd88], 0xfecf7921
jmp 0x10009e07
mov dword [ebp - 0x178], 0
jmp 0x10009e49
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 2
je 0x10009f2e
mov dword [ebp - 0x198], 0x74006310
mov dword [ebp - 0xbc0], 0x6270e7ad
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0xed8], eax
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x198], eax
jg 0x10009e9c
mov dword [ebp - 0x3d4], 1
jmp 0x10009ea3
and dword [ebp - 0x3d4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp + eax - 0xd88], ecx
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x3d4]
jge 0x10009ed0
mov dword [ebp - 0xbb0], 1
jmp 0x10009ed7
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xbb8]
mov dword [ebp - 0xee0], eax
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0x198], eax
jle 0x10009efd
mov dword [ebp - 0x4bc], 1
jmp 0x10009f04
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x4bc]
lea eax, [ecx + eax - 0x61c2]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0xbc0], eax
jmp 0x10009e3c
push 0x1913
push 0x1e40
push 0x1ccd
push 0x156b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10009f81
push 0x1f6b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x1000986e
mov dword [ebp - 0x24c], 1
mov dword [ebp - 0x24c], 0
jmp 0x10009fa9
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0x11
je 0x1000a019
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x10009fec
push 0x1913
push 0x1e40
push 0x1ccd
push 0x156b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x1000a017
push 0x1f6b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x10009f9c
mov dword [ebp - 0x310], 1
mov dword [ebp - 0x310], 0
jmp 0x1000a03c
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x11
je 0x1000a0ac
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000a07f
push 0x1913
push 0x1e40
push 0x1ccd
push 0x156b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Ellipse]
mov byte [ebp - 0x159], 0
movzx eax, byte [ebp - 0x159]
test eax, eax
je 0x1000a0aa
push 0x1f6b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetLayout]
jmp 0x1000a02f
mov dword [ebp - 0x50], 0x4a8b108f
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xbe0], 0xecdc0f1f
mov dword [ebp - 0xbf8], 0x38140a97
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x50], eax
jl 0x1000a0e5
mov dword [ebp - 0x4c4], 1
jmp 0x1000a0ec
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xbc], eax
imul eax, dword [ebp - 0xbc], 0xd94b
sub eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x4c4]
cmp eax, 0x5ce96b77
jl 0x1000a11b
mov dword [ebp - 0x864], 1
jmp 0x1000a122
and dword [ebp - 0x864], 0
cmp dword [ebp - 0x864], 5
jle 0x1000a137
mov dword [ebp - 0x4cc], 1
jmp 0x1000a13e
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x4cc]
add eax, ecx
cmp eax, dword [ebp - 0x50]
je 0x1000a18a
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xbc], eax
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x1000a185
push 0x164a
push 0
push 0xcff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
jmp 0x1000a31e
mov dword [ebp - 0x254], 0x4b5e
mov dword [ebp - 0x3c0], 0x4b2e809b
mov dword [ebp - 0xbe8], 7
mov dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp - 0x254]
cmp dword [ebp - 0x3c0], eax
jne 0x1000a1d8
mov dword [ebp - 0x734], 1
jmp 0x1000a1df
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 3
jae 0x1000a1f4
mov dword [ebp - 0x4d4], 1
jmp 0x1000a1fb
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x4d4]
imul eax, eax, 0x2167
cmp eax, 1
jl 0x1000a21e
mov dword [ebp - 0x8fc], 1
jmp 0x1000a225
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x3c0]
cmp eax, dword [ebp - 0x8fc]
jle 0x1000a23f
mov dword [ebp - 0x4dc], 1
jmp 0x1000a246
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x4dc]
sub eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0xbc]
jg 0x1000a263
mov dword [ebp - 0x73c], 1
jmp 0x1000a26a
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
sub eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xbe0], eax
mov eax, 0xd7c8a36a
test eax, eax
je 0x1000a29a
cmp dword [ebp - 0xbe8], 0
je 0x1000a29a
mov dword [ebp - 0x4e4], 1
jmp 0x1000a2a1
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x254]
sub eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0xbc], eax
jl 0x1000a2c1
mov dword [ebp - 0x86c], 1
jmp 0x1000a2c8
and dword [ebp - 0x86c], 0
mov eax, dword [ebp - 0x86c]
add eax, 0x4a10
sub eax, dword [ebp - 0x254]
mov dword [ebp - 0xbc], eax
jne 0x1000a2ed
mov dword [ebp - 0x4ec], 1
jmp 0x1000a2f4
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x4ec], eax
jl 0x1000a30b
mov dword [ebp - 0x744], 1
jmp 0x1000a312
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0xbf0], eax
mov dword [ebp - 0xbf8], 1
mov dword [ebp - 0x58], 0x532fe223
mov dword [ebp - 0x84], 0x18f4c6f4
mov dword [ebp - 0x1f4], 0xfffc
mov dword [ebp - 0x51c], 0x90eb1f0c
mov dword [ebp - 0x94], 0
jmp 0x1000a366
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x1000a382
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0x9a0], 0xb9b5
jmp 0x1000a359
mov dword [ebp - 0x94], 0
jmp 0x1000a39b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1000a3b7
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xe74], 0xf6b34c2
jmp 0x1000a38e
mov dword [ebp - 0x58], 0
jmp 0x1000a3c7
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jg 0x1000a71a
mov dword [ebp - 0xd4], 0xfffffffe
mov dword [ebp - 0x514], 0xfffffffc
mov dword [ebp - 0xf70], 5
mov dword [ebp - 0xf6c], 5
mov dword [ebp - 0xf68], 5
mov dword [ebp - 0xf64], 5
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x9a0], 0
je 0x1000a561
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x9a0]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xef8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a0]
mov dword [ebp - 0xc00], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xc00]
mov dword [ebp + eax - 0xe74], ecx
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xf00], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a0]
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xd4], eax
jl 0x1000a4a2
mov dword [ebp - 0x4f4], 1
jmp 0x1000a4a9
and dword [ebp - 0x4f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4f4]
sub ecx, dword [ebp + eax - 0x9a0]
cmp ecx, 0xffffffff
je 0x1000a4cd
mov dword [ebp - 0x96c], 1
jmp 0x1000a4d4
and dword [ebp - 0x96c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9a0]
cmp dword [ebp - 0x96c], eax
jge 0x1000a502
mov eax, dword [ebp - 0x58]
cmp dword [ebp + eax*4 - 0x9a0], 0
je 0x1000a502
mov dword [ebp - 0x4fc], 1
jmp 0x1000a509
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x9a0]
add eax, dword [ebp - 0x4fc]
jne 0x1000a52b
push 0xfffffffffffffff6
pop eax
test eax, eax
jne 0x1000a52b
and dword [ebp - 0x74c], 0
jmp 0x1000a535
mov dword [ebp - 0x74c], 1
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x74c]
mov ecx, dword [ebp - 0x58]
cmp eax, dword [ebp + ecx*4 - 0x9a0]
jne 0x1000a561
mov dword [ebp - 0x504], 1
jmp 0x1000a568
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x504], eax
jle 0x1000a582
mov dword [ebp - 0x874], 1
jmp 0x1000a589
and dword [ebp - 0x874], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x874], eax
jl 0x1000a5a9
mov eax, 0xc321
test eax, eax
jne 0x1000a5a9
and dword [ebp - 0x50c], 0
jmp 0x1000a5b3
mov dword [ebp - 0x50c], 1
mov eax, dword [ebp - 0x50c]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x1f4], 0
je 0x1000a708
mov dword [ebp - 0xf18], 0
mov dword [ebp - 0x84], 3
jmp 0x1000a5ef
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jl 0x1000a6d0
mov dword [ebp - 0x33c], 0
jmp 0x1000a615
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 3
jge 0x1000a631
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xfd0], 0xfffffff7
jmp 0x1000a608
mov dword [ebp - 0x1f4], 0
jmp 0x1000a64a
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 3
jg 0x1000a686
mov dword [ebp - 0x754], 0xdc870af0
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x1000a677
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x754]
dec eax
mov dword [ebp - 0x754], eax
jmp 0x1000a63d
mov dword [ebp - 0x514], 0x51aaf19
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xfd0]
cmp eax, dword [ebp - 0x514]
jne 0x1000a6b1
mov dword [ebp - 0x904], 1
jmp 0x1000a6b8
and dword [ebp - 0x904], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x904]
mov dword [ebp + eax - 0xe74], ecx
jmp 0x1000a5e2
mov dword [ebp - 0x84], 0x12
jmp 0x1000a6e9
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0x1c
jge 0x1000a706
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9a0], 0
je 0x1000a704
jmp 0x1000a706
jmp 0x1000a6dc
jmp 0x1000a715
mov eax, dword [ebp - 0x51c]
dec eax
mov dword [ebp - 0x51c], eax
jmp 0x1000a3c0
mov dword [ebp - 0x318], 0xfb871c7b
mov dword [ebp - 0xf90], 0xffffffff
mov dword [ebp - 0xf8c], 0xffffffff
mov dword [ebp - 0xf88], 0xffffffff
mov dword [ebp - 0xf84], 0xffffffff
mov dword [ebp - 0x25c], 0
jmp 0x1000a765
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000a781
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0x1128], 0x64a6847d
jmp 0x1000a758
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x1000a7b5
push 0
push 0
push 0x1726
push 0
push 0xe7c
push 0
push 0x758
push 0x1695
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x318], 0
jmp 0x1000a7ce
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 2
jg 0x1000a85e
mov dword [ebp - 0xf20], 0x50e6da50
mov dword [ebp - 0xe7c], 0
mov dword [ebp - 0xca8], 0xbfc4f27d
mov dword [ebp - 0xfa4], 0
mov dword [ebp - 0xfa0], 0
mov dword [ebp - 0xf9c], 0
mov dword [ebp - 0xf98], 0
mov dword [ebp - 0x75c], 0x9d44c039
mov eax, dword [ebp - 0x75c]
dec eax
mov dword [ebp - 0x75c], eax
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1000a859
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ClientToScreen]
jmp 0x1000a7c1
mov dword [ebp - 0x60], 0x4a8b108f
mov dword [ebp - 0x3e4], 0
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x3dc], 0
mov dword [ebp - 0x3d8], 0
mov dword [ebp - 0x14], 0xa8ed40a1
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x1ec], 0xa82e77e8
mov dword [ebp - 0xbfc], 2
mov dword [ebp - 0x264], 0
jmp 0x1000a8cb
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1000a8e7
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xc2c], 0xc15d0d65
jmp 0x1000a8be
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0xe40], eax
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0xc2c]
cmp dword [ebp + eax - 0x3e4], ecx
jg 0x1000a922
mov dword [ebp - 0x524], 1
jmp 0x1000a929
and dword [ebp - 0x524], 0
cmp dword [ebp - 0x524], 0
jl 0x1000a93e
mov dword [ebp - 0x87c], 1
jmp 0x1000a945
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x14], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e4]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe90], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xcb8], eax
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x3e4]
cmp dword [ebp + eax - 0xc2c], ecx
je 0x1000a9a0
mov dword [ebp - 0xc08], 1
jmp 0x1000a9a7
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe48], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3e4], 0
jne 0x1000a9ce
mov dword [ebp - 0x52c], 1
jmp 0x1000a9d5
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x1d4]
imul eax, dword [ebp - 0x52c]
cmp eax, 1
jl 0x1000a9f3
mov dword [ebp - 0x764], 1
jmp 0x1000a9fa
and dword [ebp - 0x764], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e4]
cmp dword [ebp - 0x764], eax
je 0x1000aa1a
mov dword [ebp - 0x534], 1
jmp 0x1000aa21
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x534], eax
jg 0x1000aa3b
mov dword [ebp - 0x94c], 1
jmp 0x1000aa42
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0x94c]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1ec], 0xfffffff8
jmp 0x1000aa67
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xffffffeb
je 0x1000aebb
mov dword [ebp - 0x1bc], 2
mov dword [ebp - 0x544], 0xfffffff7
mov dword [ebp - 0x1dc], 0xfffffffe
mov dword [ebp - 0xcc0], 2
mov dword [ebp - 0xbcc], 0xb5d6
mov dword [ebp - 0x14], 0
jmp 0x1000aab6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0xc
je 0x1000ad7d
mov dword [ebp - 0x34c], 0xd9236f91
mov dword [ebp - 0x55c], 0xfffffffb
mov dword [ebp - 0x574], 0xa9fc5c2d
cmp dword [ebp - 0x1bc], 0
je 0x1000ad3a
mov dword [ebp - 0x180], 0xa3b
mov dword [ebp - 0x53c], 0xfffffffa
mov dword [ebp - 0x884], 0xfffffff8
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc2c]
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x180], eax
je 0x1000ab35
mov dword [ebp - 0x77c], 1
jmp 0x1000ab3c
and dword [ebp - 0x77c], 0
mov dword [ebp - 0x53c], 0xfffffffe
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x53c], eax
jg 0x1000ab60
mov dword [ebp - 0x76c], 1
jmp 0x1000ab67
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
cmp dword [ebp - 0x34c], eax
jg 0x1000ab99
mov dword [ebp - 0x54c], 1
jmp 0x1000aba0
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x54c], eax
jle 0x1000abba
mov dword [ebp - 0x774], 1
jmp 0x1000abc1
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0xdfce
jne 0x1000abd9
mov dword [ebp - 0x554], 1
jmp 0x1000abe0
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x1bc]
imul eax, dword [ebp - 0x554]
test eax, eax
jne 0x1000ac03
mov eax, 0xf510
test eax, eax
jne 0x1000ac03
and dword [ebp - 0x90c], 0
jmp 0x1000ac0d
mov dword [ebp - 0x90c], 1
mov eax, dword [ebp - 0x90c]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x55c], eax
jle 0x1000ac3f
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3e4], 0
jne 0x1000ac3f
and dword [ebp - 0x564], 0
jmp 0x1000ac49
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x77c]
sub eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0x180]
jle 0x1000ac69
mov dword [ebp - 0x88c], 1
jmp 0x1000ac70
and dword [ebp - 0x88c], 0
cmp dword [ebp - 0x88c], 0x9e4a0435
jbe 0x1000ac88
mov dword [ebp - 0x56c], 1
jmp 0x1000ac8f
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x56c], eax
jl 0x1000aca9
mov dword [ebp - 0x784], 1
jmp 0x1000acb0
and dword [ebp - 0x784], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e4]
imul eax, dword [ebp - 0x784]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x574], eax
jg 0x1000ace3
mov dword [ebp - 0x98c], 1
jmp 0x1000acea
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x34c]
cmp dword [ebp - 0x98c], eax
jge 0x1000ad04
mov dword [ebp - 0x57c], 1
jmp 0x1000ad0b
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x57c], eax
jne 0x1000ad25
mov dword [ebp - 0x78c], 1
jmp 0x1000ad2c
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x1dc], eax
jmp 0x1000ad57
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x1000ad57
push 0x1061
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov byte [ebp - 0x163], 0
movzx eax, byte [ebp - 0x163]
test eax, eax
je 0x1000ad78
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
jmp 0x1000aaaf
mov dword [ebp - 0x14], 3
jmp 0x1000ad8d
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1000aeb6
mov dword [ebp - 0x1dc], 2
jmp 0x1000adb0
mov eax, dword [ebp - 0x1dc]
dec eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0
jl 0x1000adf1
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000adef
push 0
push 0x67c
push 0
push 0x933
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawTextExW]
jmp 0x1000ada3
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x3e4], 0
jne 0x1000ae8c
cmp dword [ebp - 0xbcc], 1
jle 0x1000ae1b
push 8
pop eax
test eax, eax
jne 0x1000ae1b
and dword [ebp - 0x584], 0
jmp 0x1000ae25
mov dword [ebp - 0x584], 1
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x3e4]
cmp eax, dword [ebp - 0x584]
je 0x1000ae43
mov dword [ebp - 0x894], 1
jmp 0x1000ae4a
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0x3e4]
cmp dword [ebp - 0x894], eax
jge 0x1000ae68
mov dword [ebp - 0x58c], 1
jmp 0x1000ae6f
and dword [ebp - 0x58c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3e4]
cmp dword [ebp - 0x58c], eax
je 0x1000ae9e
cmp dword [ebp - 0x1bc], 0
je 0x1000ae9e
cmp dword [ebp - 0x14], 0
je 0x1000ae9e
mov dword [ebp - 0x794], 1
jmp 0x1000aea5
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0xbfc], eax
jmp 0x1000ad86
jmp 0x1000aa5a
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x26c], 0
jmp 0x1000aee5
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1000af01
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xc68], 0x25a8
jmp 0x1000aed8
mov dword [ebp - 0x30], 0x14
jmp 0x1000af11
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffffa
jge 0x1000af2d
mov dword [ebp - 0xb48], 0x8cb4c23a
mov dword [ebp - 0xb48], 1
jmp 0x1000af0a
mov dword [ebp - 0x30], 2
jmp 0x1000af3d
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1000afcf
mov dword [ebp - 0x59c], 0xba29f583
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0xc68], 1
jbe 0x1000af6a
mov dword [ebp - 0x594], 1
jmp 0x1000af71
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0xc68]
mov dword [ebp - 0xe98], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xcc8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc68], 0xffffffff
jl 0x1000afa6
mov dword [ebp - 0x914], 1
jmp 0x1000afad
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x594]
imul eax, dword [ebp - 0x914]
mov dword [ebp - 0x59c], eax
mov dword [ebp - 0x59c], 7
jmp 0x1000af36
mov dword [ebp - 0xb28], 0xecdc0f1f
mov dword [ebp - 0xa64], 0x38140a97
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x60], eax
jl 0x1000aff7
mov dword [ebp - 0x79c], 1
jmp 0x1000affe
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc4], eax
imul eax, dword [ebp - 0xc4], 0xd94b
sub eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x79c]
cmp eax, 0x5ce96b77
jl 0x1000b02d
mov dword [ebp - 0x5a4], 1
jmp 0x1000b034
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 5
jle 0x1000b049
mov dword [ebp - 0x89c], 1
jmp 0x1000b050
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x60]
add ecx, dword [ebp - 0x89c]
add eax, ecx
cmp eax, dword [ebp - 0x60]
je 0x1000b09c
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xc4], eax
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1000b097
push 0x164a
push 0
push 0xcff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
jmp 0x1000b230
mov dword [ebp - 0x320], 0x4b5e
mov dword [ebp - 0x3d0], 0x4b2e809b
mov dword [ebp - 0xa5c], 7
mov dword [ebp - 0xb4c], 0
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0xe50], eax
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x3d0], eax
jne 0x1000b0ea
mov dword [ebp - 0x5ac], 1
jmp 0x1000b0f1
and dword [ebp - 0x5ac], 0
cmp dword [ebp - 0x5ac], 3
jae 0x1000b106
mov dword [ebp - 0x7a4], 1
jmp 0x1000b10d
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0xc4]
add eax, dword [ebp - 0x7a4]
imul eax, eax, 0x2167
cmp eax, 1
jl 0x1000b130
mov dword [ebp - 0x5b4], 1
jmp 0x1000b137
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x3d0]
cmp eax, dword [ebp - 0x5b4]
jle 0x1000b151
mov dword [ebp - 0x954], 1
jmp 0x1000b158
and dword [ebp - 0x954], 0
mov eax, dword [ebp - 0x954]
sub eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0xc4]
jg 0x1000b175
mov dword [ebp - 0x5bc], 1
jmp 0x1000b17c
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
sub eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xb28], eax
mov eax, 0xd7c8a36a
test eax, eax
je 0x1000b1ac
cmp dword [ebp - 0xa5c], 0
je 0x1000b1ac
mov dword [ebp - 0x7ac], 1
jmp 0x1000b1b3
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x320]
sub eax, dword [ebp - 0x7ac]
cmp dword [ebp - 0xc4], eax
jl 0x1000b1d3
mov dword [ebp - 0x5c4], 1
jmp 0x1000b1da
and dword [ebp - 0x5c4], 0
mov eax, dword [ebp - 0x5c4]
add eax, 0x4a10
sub eax, dword [ebp - 0x320]
mov dword [ebp - 0xc4], eax
jne 0x1000b1ff
mov dword [ebp - 0x8a4], 1
jmp 0x1000b206
and dword [ebp - 0x8a4], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x8a4], eax
jl 0x1000b21d
mov dword [ebp - 0x5cc], 1
jmp 0x1000b224
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x5cc]
mov dword [ebp - 0xb4c], eax
mov dword [ebp - 0xa64], 1
mov dword [ebp - 0xcd0], 1
mov dword [ebp - 0xbc8], 5
mov dword [ebp - 0x7bc], 0xfffffff6
mov dword [ebp - 0xbc4], 0xe5849968
mov dword [ebp - 0xea0], 0xee0cd979
mov dword [ebp - 0xb58], 0x785734cb
mov dword [ebp - 0xb50], 0xa2967684
mov dword [ebp - 0xa6c], 0x5d8d3410
mov dword [ebp - 0xa74], 0xfffffff9
mov dword [ebp - 0xc88], 5
mov dword [ebp - 0xc84], 5
mov dword [ebp - 0xc80], 5
mov dword [ebp - 0xc7c], 5
mov dword [ebp - 0xcd8], 0x1f56
mov dword [ebp - 0xe58], 0xfffffffd
mov dword [ebp - 0xa4], 0
jmp 0x1000b2e9
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x1000b305
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xfe8], 0x6e40424b
jmp 0x1000b2dc
mov dword [ebp - 0xa4], 0
jmp 0x1000b31e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1000b33a
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xd94], 0xfffffff9
jmp 0x1000b311
mov dword [ebp - 0xbc8], 1
cmp dword [ebp - 0xa6c], 0
je 0x1000b369
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xd94], 0
je 0x1000b369
mov dword [ebp - 0x5d4], 1
jmp 0x1000b370
and dword [ebp - 0x5d4], 0
mov eax, 0x4a9b8364
test eax, eax
je 0x1000b3c2
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xfe8], 0xeff85a04
mov eax, 0xeff85a04
test eax, eax
je 0x1000b39a
cmp dword [ebp - 0xb50], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc88]
mov dword [ebp - 0xce0], eax
cmp dword [ebp - 0xa74], 0
je 0x1000b3c2
mov dword [ebp - 0x7b4], 1
jmp 0x1000b3c9
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0xbc4]
add eax, dword [ebp - 0x7b4]
je 0x1000b3ec
cmp dword [ebp - 0x7bc], 0
je 0x1000b3ec
mov dword [ebp - 0x91c], 1
jmp 0x1000b3f3
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x91c]
jg 0x1000b40d
mov dword [ebp - 0xa7c], 1
jmp 0x1000b414
and dword [ebp - 0xa7c], 0
cmp dword [ebp - 0xb58], 0xffffffff
jl 0x1000b429
mov dword [ebp - 0x5dc], 1
jmp 0x1000b430
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 0x5c], 0x4a8b108f
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xa84], 0xecdc0f1f
mov dword [ebp - 0xb60], 0x38140a97
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x5c], eax
jl 0x1000b475
mov dword [ebp - 0x5e4], 1
jmp 0x1000b47c
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xe4], eax
imul eax, dword [ebp - 0xe4], 0xd94b
sub eax, dword [ebp - 0x5c]
sub eax, dword [ebp - 0x5e4]
cmp eax, 0x5ce96b77
jl 0x1000b4ab
mov dword [ebp - 0x8ac], 1
jmp 0x1000b4b2
and dword [ebp - 0x8ac], 0
cmp dword [ebp - 0x8ac], 5
jle 0x1000b4c7
mov dword [ebp - 0x5ec], 1
jmp 0x1000b4ce
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x5c]
add ecx, dword [ebp - 0x5ec]
add eax, ecx
cmp eax, dword [ebp - 0x5c]
je 0x1000b51a
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000b515
push 0x164a
push 0
push 0xcff
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemTextW]
jmp 0x1000b6ae
mov dword [ebp - 0x274], 0x4b5e
mov dword [ebp - 0x380], 0x4b2e809b
mov dword [ebp - 0xbd0], 7
mov dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x274]
mov dword [ebp - 0xea8], eax
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x380], eax
jne 0x1000b568
mov dword [ebp - 0x7c4], 1
jmp 0x1000b56f
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 3
jae 0x1000b584
mov dword [ebp - 0x5f4], 1
jmp 0x1000b58b
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0xe4]
add eax, dword [ebp - 0x5f4]
imul eax, eax, 0x2167
cmp eax, 1
jl 0x1000b5ae
mov dword [ebp - 0x974], 1
jmp 0x1000b5b5
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x380]
cmp eax, dword [ebp - 0x974]
jle 0x1000b5cf
mov dword [ebp - 0x5fc], 1
jmp 0x1000b5d6
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
sub eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0xe4]
jg 0x1000b5f3
mov dword [ebp - 0x7cc], 1
jmp 0x1000b5fa
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
sub eax, dword [ebp - 0x380]
mov dword [ebp - 0xa84], eax
mov eax, 0xd7c8a36a
test eax, eax
je 0x1000b62a
cmp dword [ebp - 0xbd0], 0
je 0x1000b62a
mov dword [ebp - 0x604], 1
jmp 0x1000b631
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x274]
sub eax, dword [ebp - 0x604]
cmp dword [ebp - 0xe4], eax
jl 0x1000b651
mov dword [ebp - 0x8b4], 1
jmp 0x1000b658
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
add eax, 0x4a10
sub eax, dword [ebp - 0x274]
mov dword [ebp - 0xe4], eax
jne 0x1000b67d
mov dword [ebp - 0x60c], 1
jmp 0x1000b684
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x60c], eax
jl 0x1000b69b
mov dword [ebp - 0x7d4], 1
jmp 0x1000b6a2
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0xa8c], eax
mov dword [ebp - 0xb60], 1
mov dword [ebp - 0xce8], 1
mov dword [ebp - 0xa94], 5
mov dword [ebp - 0x624], 0xfffffff6
mov dword [ebp - 0xaa4], 0xe5849968
mov dword [ebp - 0xe68], 0xee0cd979
mov dword [ebp - 0xaac], 0x785734cb
mov dword [ebp - 0xa9c], 0xa2967684
mov dword [ebp - 0xbd8], 0x5d8d3410
mov dword [ebp - 0xb68], 0xfffffff9
mov dword [ebp - 0xc98], 5
mov dword [ebp - 0xc94], 5
mov dword [ebp - 0xc90], 5
mov dword [ebp - 0xc8c], 5
mov dword [ebp - 0xcf0], 0x1f56
mov dword [ebp - 0xeb0], 0xfffffffd
mov dword [ebp - 0x64], 0
jmp 0x1000b75e
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000b774
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x1000], 0x6e40424b
jmp 0x1000b757
mov dword [ebp - 0x64], 0
jmp 0x1000b784
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1000b79a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xda0], 0xfffffff9
jmp 0x1000b77d
mov dword [ebp - 0xa94], 1
cmp dword [ebp - 0xbd8], 0
je 0x1000b7c9
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xda0], 0
je 0x1000b7c9
mov dword [ebp - 0x924], 1
jmp 0x1000b7d0
and dword [ebp - 0x924], 0
mov eax, 0x4a9b8364
test eax, eax
je 0x1000b822
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1000], 0xeff85a04
mov eax, 0xeff85a04
test eax, eax
je 0x1000b7fa
cmp dword [ebp - 0xa9c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc98]
mov dword [ebp - 0xcf8], eax
cmp dword [ebp - 0xb68], 0
je 0x1000b822
mov dword [ebp - 0x614], 1
jmp 0x1000b829
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0xaa4]
add eax, dword [ebp - 0x614]
je 0x1000b84c
cmp dword [ebp - 0x624], 0
je 0x1000b84c
mov dword [ebp - 0x61c], 1
jmp 0x1000b853
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x924]
cmp eax, dword [ebp - 0x61c]
jg 0x1000b86d
mov dword [ebp - 0xbec], 1
jmp 0x1000b874
and dword [ebp - 0xbec], 0
cmp dword [ebp - 0xaac], 0xffffffff
jl 0x1000b889
mov dword [ebp - 0x7dc], 1
jmp 0x1000b890
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
mov dword [ebp - 0x624], eax
mov dword [ebp - 0xe78], 1
mov dword [ebp - 0xb70], 5
mov dword [ebp - 0x95c], 0xfffffff6
mov dword [ebp - 0xb78], 0xe5849968
mov dword [ebp - 0xd00], 0xee0cd979
mov dword [ebp - 0xb94], 0x785734cb
mov dword [ebp - 0xbd4], 0xa2967684
mov dword [ebp - 0xab4], 0x5d8d3410
mov dword [ebp - 0xabc], 0xfffffff9
mov dword [ebp - 0xc78], 5
mov dword [ebp - 0xc74], 5
mov dword [ebp - 0xc70], 5
mov dword [ebp - 0xc6c], 5
mov dword [ebp - 0xeb8], 0x1f56
mov dword [ebp - 0xd08], 0xfffffffd
mov dword [ebp - 0x8c], 0
jmp 0x1000b94b
cmp dword [ebp - 0x8c], 3
jge 0x1000b967