Function at 0x10009544
Capabilities:
Check os version
Create thread
Enumerate gui resources

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10ec
call fcn.1006bb60
push esi
push edi
mov dword [ebp - 0x11c], 8
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x934], 0x76270e7a
mov dword [ebp - 0x984], 0xffffffff
mov dword [ebp - 0x11c], 0
jmp 0x10009594
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0x13
jg 0x100096fb
mov dword [ebp - 0x134], 0xa8fecf79
mov dword [ebp - 0x93c], 0x84edc022
mov dword [ebp - 0x1c0], 0
jmp 0x100095ce
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x100095ea
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0x548], 0x41fd9d08
jmp 0x100095c1
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xfdc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x548], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x548], 0x3b6f
cmp eax, 1
jne 0x1000962b
mov dword [ebp - 0x914], 1
jmp 0x10009632
and dword [ebp - 0x914], 0
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0x914]
cmp eax, dword [ebp - 0x154]
jl 0x10009653
mov dword [ebp - 0x91c], 1
jmp 0x1000965a
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
sub eax, dword [ebp - 0x11c]
cmp eax, 0xffffffff
jne 0x10009683
mov dword [ebp - 0x924], 1
jmp 0x1000968a
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x924], eax
jl 0x100096a4
mov dword [ebp - 0x92c], 1
jmp 0x100096ab
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x934], eax
mov eax, dword [ebp - 0x934]
sub eax, dword [ebp - 0x93c]
cmp eax, dword [ebp - 0x93c]
jge 0x100096e3
mov dword [ebp - 0x7e8], 1
jmp 0x100096ea
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x984], eax
jmp 0x10009587
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x1000971a
push 0x162b
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0xde0], 0xffffffff
mov dword [ebp - 0x1f4], 0xb733c633
mov dword [ebp - 0x258], 8
mov dword [ebp - 0xa54], 0xfffffffa
mov dword [ebp - 0x260], 0x9d70cadd
mov dword [ebp - 0x8a4], 0xbc00eadd
mov dword [ebp - 0xae8], 0x901516ea
mov dword [ebp - 0x160], 0
jmp 0x10009779
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 2
jge 0x10009795
mov eax, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0xe24], 0xb6eb6b9d
jmp 0x1000976c
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0xa4c], 3
jae 0x100097c3
mov dword [ebp - 0x8ac], 1
jmp 0x100097ca
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x1f4]
cmp dword [ebp - 0xa54], eax
jl 0x100097e4
mov dword [ebp - 0x330], 1
jmp 0x100097eb
and dword [ebp - 0x330], 0
mov eax, dword [ebp - 0x1f4]
add eax, dword [ebp - 0x330]
je 0x10009878
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x260]
inc ecx
mov dword [ebp - 0x260], ecx
test eax, eax
jne 0x10009822
mov eax, 0xce9
test eax, eax
jne 0x10009822
and dword [ebp - 0x89c], 0
jmp 0x1000982c
mov dword [ebp - 0x89c], 1
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0xe889
jge 0x10009850
mov dword [ebp - 0x338], 1
jmp 0x10009857
and dword [ebp - 0x338], 0
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x338], eax
jl 0x10009878
push 2
pop eax
test eax, eax
je 0x10009878
mov dword [ebp - 0x340], 1
jmp 0x1000987f
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x340], eax
jge 0x10009899
mov dword [ebp - 0x348], 1
jmp 0x100098a0
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x8ac]
imul eax, dword [ebp - 0x348]
cmp eax, dword [ebp - 0xae8]
jne 0x100098c1
mov dword [ebp - 0x8b4], 1
jmp 0x100098c8
and dword [ebp - 0x8b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8b4]
mov dword [ebp + eax - 0xe24], ecx
mov dword [ebp - 0x8bc], 0x16f93bd5
mov dword [ebp - 0x8cc], 0
mov dword [ebp - 0xaf8], 0x9f486485
mov dword [ebp - 0x58], 0
jmp 0x10009909
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x1000991f
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xc98], 0xffffffff
jmp 0x10009902
mov dword [ebp - 0x58], 0
jmp 0x1000992f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10009945
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x2e8], 0
jmp 0x10009928
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000995f
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc98]
mov dword [ebp - 0xde8], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xc98]
mov dword [ebp - 0xdf0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e8], 0xe7ad53a
jg 0x100099a4
mov dword [ebp - 0xaf0], 1
jmp 0x100099ab
and dword [ebp - 0xaf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0xdf8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0xe00], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc98]
cmp dword [ebp - 0x8cc], eax
jl 0x100099f2
mov dword [ebp - 0x350], 1
jmp 0x100099f9
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x8bc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp dword [ebp - 0x8bc], eax
jg 0x10009a26
mov dword [ebp - 0x358], 1
jmp 0x10009a2d
and dword [ebp - 0x358], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp dword [ebp - 0x358], eax
jge 0x10009a4e
mov dword [ebp - 0x8c4], 1
jmp 0x10009a55
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x8c4]
sub eax, 0xf5a2
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2e8]
jge 0x10009a7b
mov dword [ebp - 0x360], 1
jmp 0x10009a82
and dword [ebp - 0x360], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc98]
cmp eax, dword [ebp - 0x360]
jge 0x10009aa3
mov dword [ebp - 0x368], 1
jmp 0x10009aaa
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x8cc]
add eax, dword [ebp - 0x368]
cmp eax, 6
je 0x10009ac7
mov dword [ebp - 0x8d4], 1
jmp 0x10009ace
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0x8d4]
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0x144], 8
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x18], 0xed9ba07e
mov dword [ebp - 0x168], 0xd9ee1c97
mov dword [ebp - 0xc0], 0xfd77ccca
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0xb28], 0xfffffffe
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10009b47
push 0
push 0x9c
push 0
push 0
push 0x474
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe08], eax
mov dword [ebp - 0x168], 0x85faafe3
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0xe10], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xe18], eax
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], eax
je 0x10009b89
mov dword [ebp - 0x370], 1
jmp 0x10009b90
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x370], eax
jl 0x10009bad
cmp dword [ebp - 0xc0], 0
jne 0x10009bad
and dword [ebp - 0x8dc], 0
jmp 0x10009bb7
mov dword [ebp - 0x8dc], 1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x18], eax
jge 0x10009bd1
mov dword [ebp - 0x378], 1
jmp 0x10009bd8
and dword [ebp - 0x378], 0
imul eax, dword [ebp - 0x378], 0x78ef
sub eax, 0xffff
cmp eax, 2
je 0x10009bf8
mov dword [ebp - 0x8e4], 1
jmp 0x10009bff
and dword [ebp - 0x8e4], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8e4], eax
jle 0x10009c16
mov dword [ebp - 0x380], 1
jmp 0x10009c1d
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x168]
cmp dword [ebp - 0x380], eax
je 0x10009c37
mov dword [ebp - 0x8ec], 1
jmp 0x10009c3e
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8ec], eax
jne 0x10009c55
mov dword [ebp - 0x388], 1
jmp 0x10009c5c
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x388]
je 0x10009c73
mov dword [ebp - 0x8f4], 1
jmp 0x10009c7a
and dword [ebp - 0x8f4], 0
mov eax, dword [ebp - 0x168]
add eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0xc0]
jge 0x10009c9a
mov dword [ebp - 0x390], 1
jmp 0x10009ca1
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x390]
imul eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0xb20]
jl 0x10009cc2
mov dword [ebp - 0x8fc], 1
jmp 0x10009cc9
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x8fc], eax
jg 0x10009ce2
or eax, 0xffffffff
jne 0x10009ce2
and dword [ebp - 0x398], 0
jmp 0x10009cec
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x398]
neg eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x1af6658d
jne 0x10009d17
or eax, 0xffffffff
je 0x10009d17
mov dword [ebp - 0x904], 1
jmp 0x10009d1e
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xeb8], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0x42c], 0x76270e7a
mov dword [ebp - 0x1fc], 0x22e9
mov dword [ebp - 0xb38], 0
mov dword [ebp - 0x684], 0xfffe
mov dword [ebp - 0x80], 0
jmp 0x10009d71
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10009d87
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xdc], 0xfffffff7
jmp 0x10009d6a
mov dword [ebp - 0x80], 0
jmp 0x10009d97
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x10009dad
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x1028], 0xfffffff6
jmp 0x10009d90
push 4
pop eax
test eax, eax
je 0x10009e92
mov eax, dword [ebp - 0x1fc]
mov ecx, dword [ebp - 0x1fc]
sub ecx, 0x4111d018
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xdc]
jge 0x10009de8
mov dword [ebp - 0x90c], 1
jmp 0x10009def
and dword [ebp - 0x90c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
cmp eax, dword [ebp - 0x90c]
jl 0x10009e10
mov dword [ebp - 0x3a4], 1
jmp 0x10009e17
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xffffffff
jg 0x10009e2c
mov dword [ebp - 0xb30], 1
jmp 0x10009e33
and dword [ebp - 0xb30], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0xec0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
mov dword [ebp - 0x67c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x67c]
mov dword [ebp + eax - 0x1028], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xdc]
imul eax, dword [ebp - 0x67c]
sub eax, 0x36efa05e
je 0x10009e92
mov dword [ebp - 0x3ac], 1
jmp 0x10009e99
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0xc576
jne 0x10009eb1
mov dword [ebp - 0x7f4], 1
jmp 0x10009eb8
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x7f4]
sub eax, 0x61a6b719
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0xdc]
sub eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0x1fc]
je 0x10009eeb
mov dword [ebp - 0x3b4], 1
jmp 0x10009ef2
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0x684]
dec eax
mov dword [ebp - 0x684], eax
mov dword [ebp - 0x9a8], 0xffffffff
mov dword [ebp - 0x2d8], 0
mov dword [ebp - 0xc8], 0x70c3099c
mov dword [ebp - 0xb40], 0xfd9d0890
mov dword [ebp - 0xb24], 0xffffffff
mov dword [ebp - 0xa44], 0x9b69
mov dword [ebp - 0xec8], 0xdad816f9
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0xbd0], 1
mov dword [ebp - 0xbcc], 1
mov dword [ebp - 0xbc8], 1
mov dword [ebp - 0xbc4], 1
mov dword [ebp - 0xb0c], 1
mov dword [ebp - 0x998], 1
mov dword [ebp - 0x60], 0
jmp 0x10009fa7
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10009fbd
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xc40], 0x3718bd85
jmp 0x10009fa0
mov dword [ebp - 0x60], 0
jmp 0x10009fcd
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10009fe3
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xba0], 0
jmp 0x10009fc6
mov dword [ebp - 0x2d8], 0xfffffff9
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x2d8], eax
jne 0x1000a007
mov dword [ebp - 0x3bc], 1
jmp 0x1000a00e
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0xc8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba0]
sub eax, 0x30b6
cmp eax, dword [ebp - 0xc8]
jg 0x1000a03f
mov dword [ebp - 0x8e8], 1
jmp 0x1000a046
and dword [ebp - 0x8e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xba0]
cmp dword [ebp - 0x8e8], eax
jle 0x1000a067
mov dword [ebp - 0x68c], 1
jmp 0x1000a06e
and dword [ebp - 0x68c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc40]
mov dword [ebp - 0x3c4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c4]
mov dword [ebp + eax - 0xc40], ecx
mov eax, dword [ebp - 0x3c4]
cmp eax, dword [ebp - 0x68c]
jle 0x1000a0ae
mov dword [ebp - 0x3cc], 1
jmp 0x1000a0b5
and dword [ebp - 0x3cc], 0
mov eax, dword [ebp - 0xb40]
cmp dword [ebp - 0x3cc], eax
jne 0x1000a0cf
mov dword [ebp - 0xb48], 1
jmp 0x1000a0d6
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xb24]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0xa44]
add eax, dword [ebp - 0xc8]
cmp eax, 0x8491f199
ja 0x1000a101
mov dword [ebp - 0x694], 1
jmp 0x1000a108
and dword [ebp - 0x694], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbd0]
dec eax
mov dword [ebp - 0x7f0], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp + eax - 0xbd0], ecx
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
imul eax, dword [ebp - 0x694]
sub eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jl 0x1000a160
mov dword [ebp - 0x3dc], 1
jmp 0x1000a167
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
shl eax, 3
cmp dword [ebp - 0x2d8], eax
jl 0x1000a184
mov dword [ebp - 0x898], 1
jmp 0x1000a18b
and dword [ebp - 0x898], 0
cmp dword [ebp - 0x898], 0xc769867f
je 0x1000a1a3
mov dword [ebp - 0x990], 1
jmp 0x1000a1aa
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xed8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba0]
mov dword [ebp - 0xee0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xba0]
cmp dword [ebp - 0xb0c], eax
je 0x1000a1e0
xor eax, eax
je 0x1000a1fc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc40], 0
je 0x1000a1fc
mov dword [ebp - 0x3e4], 1
jmp 0x1000a203
and dword [ebp - 0x3e4], 0
imul eax, dword [ebp - 0x3e4], 0xf455
mov dword [ebp - 0x998], eax
mov dword [ebp - 0x144], 0
jmp 0x1000a22c
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0x13
jg 0x1000a877
mov dword [ebp - 0x9c], 0x32b1cecb
mov dword [ebp - 0x20c], 0xfffffffa
mov dword [ebp - 0x90], 0
jmp 0x1000a266
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000a282
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x110], 0
jmp 0x1000a259
mov dword [ebp - 0x90], 0
jmp 0x1000a29b
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1000a2b7
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1078], 0x8d239be9
jmp 0x1000a28e
mov dword [ebp - 0x9c], 0
jmp 0x1000a2d0
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1000a5ca
mov dword [ebp - 0xf8], 0x9f7fd1e8
mov dword [ebp - 0x178], 1
mov dword [ebp - 0xee8], 0x145c
mov dword [ebp - 0xab4], 0xa4087b33
mov dword [ebp - 0x170], 0
jmp 0x1000a31e
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 3
jge 0x1000a33a
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x1034], 4
jmp 0x1000a311
mov dword [ebp - 0xf8], 0
jmp 0x1000a353
mov eax, dword [ebp - 0xf8]
dec eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0
jl 0x1000a458
mov dword [ebp - 0xa0], 0xb9dd952e
mov dword [ebp - 0x204], 0xfffffffd
mov dword [ebp - 0xef0], 0xffffffff
mov dword [ebp - 0xef8], 0x253a34c8
mov dword [ebp - 0xa0], 0
jmp 0x1000a3a1
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1000a3c3
mov dword [ebp - 0x69c], 0xffffffff
mov eax, dword [ebp - 0x69c]
inc eax
mov dword [ebp - 0x69c], eax
jmp 0x1000a394
mov dword [ebp - 0x204], 0
jmp 0x1000a3dc
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jg 0x1000a453
mov dword [ebp - 0xa0], 0
jmp 0x1000a3fe
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0
jl 0x1000a44e
mov dword [ebp - 0x178], 0
jmp 0x1000a420
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1000a44c
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000a44a
push 0
push 0x1981
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
jmp 0x1000a413
jmp 0x1000a3f1
jmp 0x1000a3cf
jmp 0x1000a346
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x110]
mov dword [ebp - 0xf00], eax
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x3ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp + eax - 0x1034], ecx
cmp dword [ebp - 0x3ec], 0
je 0x1000a4b9
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x20c], eax
jl 0x1000a4b9
or eax, 0xffffffff
je 0x1000a4b9
mov dword [ebp - 0x7f8], 1
jmp 0x1000a4c0
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x7f8]
jge 0x1000a4da
mov dword [ebp - 0x3f4], 1
jmp 0x1000a4e1
and dword [ebp - 0x3f4], 0
cmp dword [ebp - 0x3f4], 0xb2bc
jge 0x1000a4f9
mov dword [ebp - 0x6a4], 1
jmp 0x1000a500
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x20c]
cmp dword [ebp - 0x6a4], eax
je 0x1000a51a
mov dword [ebp - 0x3fc], 1
jmp 0x1000a521
and dword [ebp - 0x3fc], 0
cmp dword [ebp - 0x3fc], 7
jae 0x1000a536
mov dword [ebp - 0x928], 1
jmp 0x1000a53d
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x928]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0xf08], eax
mov eax, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0x110]
mov dword [ebp - 0xf10], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x110], 0xc28c
test eax, eax
jne 0x1000a58f
cmp dword [ebp - 0xf8], 0
jne 0x1000a58f
and dword [ebp - 0x268], 0
jmp 0x1000a599
mov dword [ebp - 0x268], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x1078], ecx
mov eax, dword [ebp - 0xab4]
add eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp + ecx*4 - 0x110], eax
jmp 0x1000a2c3
mov dword [ebp - 0x124], 0xa8fecf79
mov dword [ebp - 0xb2c], 0x8acc4b7c
mov dword [ebp - 0x180], 0
jmp 0x1000a5f7
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 3
jge 0x1000a613
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x318], 0x7ddc85f7
jmp 0x1000a5ea
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x318], 0
jmp 0x1000a63e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x318]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x318], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x318], 0xfffffff4
jge 0x1000a727
mov dword [ebp - 0x9a0], 1
mov dword [ebp - 0x6ac], 0xc58bdfad
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x318], 0xfffffffd
jl 0x1000a680
mov dword [ebp - 0x404], 1
jmp 0x1000a687
and dword [ebp - 0x404], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x318]
cmp eax, dword [ebp - 0x404]
jne 0x1000a6c4
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x318]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x318]
mov dword [ebp - 0x6ac], eax
jne 0x1000a6c4
and dword [ebp - 0x40c], 0
jmp 0x1000a6ce
mov dword [ebp - 0x40c], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x40c], eax
jl 0x1000a6ee
mov dword [ebp - 0x800], 1
jmp 0x1000a6f5
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x9a0]
cmp eax, dword [ebp - 0x800]
jle 0x1000a70f
mov dword [ebp - 0x414], 1
jmp 0x1000a716
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0xb2c], eax
jmp 0x1000a625
mov dword [ebp - 0x808], 0x84edc022
mov dword [ebp - 0x214], 0
jmp 0x1000a74a
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 1
jge 0x1000a766
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x6b4], 0x41fd9d08
jmp 0x1000a73d
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0xf18], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x124]
mov dword [ebp + eax - 0x6b4], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x6b4], 0x3b6f
cmp eax, 1
jne 0x1000a7a7
mov dword [ebp - 0x41c], 1
jmp 0x1000a7ae
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x41c]
cmp eax, dword [ebp - 0x188]
jl 0x1000a7cf
mov dword [ebp - 0x8a0], 1
jmp 0x1000a7d6
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x8a0]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
sub eax, dword [ebp - 0x144]
cmp eax, 0xffffffff
jne 0x1000a7ff
mov dword [ebp - 0x424], 1
jmp 0x1000a806
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x424], eax
jl 0x1000a820
mov dword [ebp - 0x6bc], 1
jmp 0x1000a827
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
sub eax, dword [ebp - 0x808]
cmp eax, dword [ebp - 0x808]
jge 0x1000a85f
mov dword [ebp - 0x434], 1
jmp 0x1000a866
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x9a8], eax
jmp 0x1000a21f
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x68], 0
jmp 0x1000a891
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1000a8a7
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1090], 0xe48d327c
jmp 0x1000a88a
mov dword [ebp - 0x68], 0
jmp 0x1000a8b7
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1000a8cd
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xbe0], 0xdb505206
jmp 0x1000a8b0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xbe0], 0
jmp 0x1000a8fb
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbe0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbe0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbe0], 4
jge 0x1000a925
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbe0]
mov dword [ebp + eax*4 - 0x1090], 0
jmp 0x1000a8e0
mov dword [ebp - 0x21c], 0xfffffff8
jmp 0x1000a93e
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xfffffffa
jne 0x1000a97c
mov dword [ebp - 0xabc], 0x3707
cmp dword [ebp - 0xabc], 0
je 0x1000a95c
jmp 0x1000a97c
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1000a97a
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1000a931
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1000a99b
push 0x162b
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0x95c], 0xffffffff
mov dword [ebp - 0x958], 0xffffffff
mov dword [ebp - 0x954], 0xffffffff
mov dword [ebp - 0x950], 0xffffffff
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x818], 0xce01153a
mov dword [ebp - 0xcc8], 0x6bbb3073
mov dword [ebp - 0xcc4], 0x6bbb3073
mov dword [ebp - 0xcc0], 0x6bbb3073
mov dword [ebp - 0xcbc], 0x6bbb3073
mov dword [ebp - 0x190], 0
jmp 0x1000aa15
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 4
jge 0x1000aa31
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xbf0], 0x1f94964a
jmp 0x1000aa08
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xbf0], 0
jmp 0x1000aa5f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbf0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xbf0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xbf0], 3
jg 0x1000ab0e
mov dword [ebp - 0x224], 0
jmp 0x1000aa8c
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x1000aaa8
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x198], 0xffffffff
jmp 0x1000aa7f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x198], 0
jmp 0x1000aad6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x198], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 3
jg 0x1000ab09
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1000ab07
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
jmp 0x1000aabb
jmp 0x1000aa44
mov dword [ebp - 0x2c], 3
jmp 0x1000ab1e
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x1000adc8
mov dword [ebp - 0x38], 0xcafe8b0d
mov dword [ebp - 0x6cc], 4
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x8a8], 5
mov dword [ebp - 0xb14], 0x57a772be
mov dword [ebp - 0x38], 0
jmp 0x1000ab67
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jg 0x1000ad6b
mov dword [ebp - 0x45c], 0xfffffffc
mov eax, 0xef6e229e
test eax, eax
je 0x1000ad5d
cmp dword [ebp - 0x38], 0
jne 0x1000acaa
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x95c]
cmp dword [ebp - 0x38], eax
je 0x1000abad
mov dword [ebp - 0x6c4], 1
jmp 0x1000abb4
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x95c]
cmp dword [ebp - 0x6c4], eax
je 0x1000abd2
mov dword [ebp - 0x9b0], 1
jmp 0x1000abd9
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x95c]
mov dword [ebp - 0xf20], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x95c]
mov dword [ebp - 0xf28], eax
cmp dword [ebp - 0x38], 0x509b9552
je 0x1000ac11
mov dword [ebp - 0x2b0], 1
jmp 0x1000ac18
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0xbf0], ecx
cmp dword [ebp - 0x2b0], 0
jne 0x1000ac41
push 2
pop eax
test eax, eax
jne 0x1000ac41
and dword [ebp - 0x43c], 0
jmp 0x1000ac4b
mov dword [ebp - 0x43c], 1
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x43c], eax
je 0x1000ac62
mov dword [ebp - 0x8f0], 1
jmp 0x1000ac69
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
sub eax, 0xc010
cmp eax, dword [ebp - 0x38]
je 0x1000ac85
mov dword [ebp - 0x444], 1
jmp 0x1000ac8c
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x6cc], eax
cmp dword [ebp - 0x6cc], 0
jne 0x1000acaa
and dword [ebp - 0x44c], 0
jmp 0x1000acb4
mov dword [ebp - 0x44c], 1
imul eax, dword [ebp - 0x44c], 0xfff9
sub eax, dword [ebp - 0x38]
je 0x1000acd5
cmp dword [ebp - 0x38], 0
je 0x1000acd5
mov dword [ebp - 0x810], 1
jmp 0x1000acdc
and dword [ebp - 0x810], 0
mov eax, dword [ebp - 0x810]
mov dword [ebp - 0x454], eax
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x95c]
cmp eax, dword [ebp - 0x454]
je 0x1000ad06
mov dword [ebp - 0x6d4], 1
jmp 0x1000ad0d
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x8a8], eax
mov eax, dword [ebp - 0x8a8]
mov dword [ebp - 0xf30], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xf38], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp + eax*4 - 0x95c], 0x67dc
jle 0x1000ad56
mov dword [ebp - 0x464], 1
jmp 0x1000ad5d
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xb14], eax
jmp 0x1000ab60
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0xf40], eax
cmp dword [ebp - 0x38], 1
jne 0x1000ad89
mov dword [ebp - 0x6dc], 1
jmp 0x1000ad90
and dword [ebp - 0x6dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xcc8]
cmp dword [ebp - 0x6dc], eax
jne 0x1000adb0
mov dword [ebp - 0x46c], 1
jmp 0x1000adb7
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x818], eax
jmp 0x1000ab17
mov dword [ebp - 0x14c], 8
mov dword [ebp - 0x24c], 0
mov dword [ebp - 0x13c], 8
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x6ec], 0x76270e7a
mov dword [ebp - 0x9b8], 0xffffffff
mov dword [ebp - 0x13c], 0
jmp 0x1000ae1d
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0x13
jg 0x1000af84
mov dword [ebp - 0x12c], 0xa8fecf79
mov dword [ebp - 0x48c], 0x84edc022
mov dword [ebp - 0x22c], 0
jmp 0x1000ae57
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1000ae73
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x474], 0x41fd9d08
jmp 0x1000ae4a
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0xf48], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x12c]
mov dword [ebp + eax - 0x474], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x474], 0x3b6f
cmp eax, 1
jne 0x1000aeb4
mov dword [ebp - 0x6e4], 1
jmp 0x1000aebb
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x12c]
imul eax, dword [ebp - 0x6e4]
cmp eax, dword [ebp - 0x1a0]
jl 0x1000aedc
mov dword [ebp - 0x47c], 1
jmp 0x1000aee3
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a0]
sub eax, dword [ebp - 0x13c]
cmp eax, 0xffffffff
jne 0x1000af0c
mov dword [ebp - 0x918], 1
jmp 0x1000af13
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x918], eax
jl 0x1000af2d
mov dword [ebp - 0x484], 1
jmp 0x1000af34
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
sub eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x48c]
jge 0x1000af6c
mov dword [ebp - 0x820], 1
jmp 0x1000af73
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x9b8], eax
jmp 0x1000ae10
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1000afa3
push 0x162b
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0x56c], 0x76270e7a
mov dword [ebp - 0xe8], 0x4cd
mov dword [ebp - 0x49c], 0xffffffff
mov dword [ebp - 0x88], 0
jmp 0x1000afda
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1000aff6
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xa6c], 1
jmp 0x1000afcd
mov dword [ebp - 0x88], 0
jmp 0x1000b00f
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000b02b
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xb94], 6
jmp 0x1000b002
mov dword [ebp - 0xe8], 0xffffffff
mov dword [ebp - 0xe8], 0
jmp 0x1000b04e
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 1
jg 0x1000b30d
mov dword [ebp - 0x2c4], 0x4d513c61
mov dword [ebp - 0xf50], 1
mov dword [ebp - 0x4bc], 0xaf072071
mov dword [ebp - 0xf58], 0x46a1c17c
mov dword [ebp - 0x28], 0
jmp 0x1000b093
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b0a9
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xbc0], 0x7ab61b58
jmp 0x1000b08c
mov dword [ebp - 0x28], 0
jmp 0x1000b0b9
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000b0cf
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x10d4], 3
jmp 0x1000b0b2
mov dword [ebp - 0x28], 0
jmp 0x1000b0df
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b0f5
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xa60], 0xcdd7
jmp 0x1000b0d8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa6c], 0
je 0x1000b19c
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb94], 0
jne 0x1000b124
mov dword [ebp - 0x494], 1
jmp 0x1000b12b
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
sub eax, 0x53f41df9
cmp eax, 4
jg 0x1000b147
mov dword [ebp - 0x6f4], 1
jmp 0x1000b14e
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x49c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
cmp eax, dword [ebp - 0x49c]
je 0x1000b17b
mov dword [ebp - 0x8b0], 1
jmp 0x1000b182
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x4bc]
cmp dword [ebp - 0x8b0], eax
jge 0x1000b19c
mov dword [ebp - 0x4a4], 1
jmp 0x1000b1a3
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb94]
cmp dword [ebp - 0x4a4], eax
jle 0x1000b1c4
mov dword [ebp - 0x6fc], 1
jmp 0x1000b1cb
and dword [ebp - 0x6fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6fc]
sub ecx, dword [ebp + eax - 0xbc0]
cmp ecx, 0xfffffff6
je 0x1000b1ef
mov dword [ebp - 0x4ac], 1
jmp 0x1000b1f6
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
shl eax, 1
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xa6c]
jne 0x1000b214
cmp dword [ebp - 0x2c4], 0
or eax, 0xffffffff
jne 0x1000b22b
mov eax, 0xfb64
test eax, eax
jne 0x1000b22b
and dword [ebp - 0x828], 0
jmp 0x1000b235
mov dword [ebp - 0x828], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa60]
mov dword [ebp - 0xac4], eax
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x9c0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa60]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa60], eax
mov eax, dword [ebp - 0xac4]
cmp eax, dword [ebp - 0x9c0]
je 0x1000b289
mov dword [ebp - 0x270], 1
jmp 0x1000b290
and dword [ebp - 0x270], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x270]
mov dword [ebp + eax - 0xbc0], ecx
mov eax, dword [ebp - 0x270]
sub eax, 4
mov dword [ebp - 0x2c4], eax
mov eax, dword [ebp - 0x2c4]
mov dword [ebp - 0x4b4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4b4]
mov dword [ebp + eax - 0xb94], ecx
mov eax, dword [ebp - 0xe8]
mov eax, dword [ebp + eax*4 - 0xa6c]
cmp eax, dword [ebp - 0x4b4]
jne 0x1000b2f2
mov dword [ebp - 0x704], 1
jmp 0x1000b2f9
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x704]
sub eax, 3
mov dword [ebp - 0x4bc], eax
jmp 0x1000b041
mov dword [ebp - 0x9e8], 0xffffffff
mov dword [ebp - 0x14c], 0
jmp 0x1000b330
cmp dword [ebp - 0x14c], 0x13
jg 0x1000bd26
mov dword [ebp - 0x234], 5
mov dword [ebp - 0x70c], 1
xor eax, eax
inc eax
je 0x1000b3dd
cmp dword [ebp - 0x234], 0
jne 0x1000b375
cmp dword [ebp - 0x234], 0
jne 0x1000b375
and dword [ebp - 0x8f8], 0
jmp 0x1000b37f
mov dword [ebp - 0x8f8], 1
mov eax, dword [ebp - 0x234]
cmp eax, dword [ebp - 0x8f8]
jg 0x1000b399
mov dword [ebp - 0x4c4], 1
jmp 0x1000b3a0
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x70c], eax
mov eax, dword [ebp - 0x234]
add eax, dword [ebp - 0x70c]
je 0x1000b3dd
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x1000b3db
push 0
push 0x2654
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
jmp 0x1000b3f9
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1000b3f9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [ebp - 0x114], 0xa8fecf79
mov dword [ebp - 0xf60], 0xffffffff
mov dword [ebp - 0x23c], 0xb733c633
mov dword [ebp - 0x278], 8
mov dword [ebp - 0x9c8], 0xfffffffa
mov dword [ebp - 0x2b8], 0x9d70cadd
mov dword [ebp - 0x714], 0xbc00eadd
mov dword [ebp - 0xacc], 0x901516ea
mov dword [ebp - 0x1a8], 0
jmp 0x1000b462
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1000b47e
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xe30], 0xb6eb6b9d
jmp 0x1000b455
mov eax, dword [ebp - 0x278]
mov dword [ebp - 0xb3c], eax
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0xb3c], 3
jae 0x1000b4ac
mov dword [ebp - 0x8b8], 1
jmp 0x1000b4b3
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x9c8], eax
jl 0x1000b4cd
mov dword [ebp - 0x4cc], 1
jmp 0x1000b4d4
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x23c]
add eax, dword [ebp - 0x4cc]
je 0x1000b561
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b8]
inc ecx
mov dword [ebp - 0x2b8], ecx
test eax, eax
jne 0x1000b50b
mov eax, 0xce9
test eax, eax
jne 0x1000b50b
and dword [ebp - 0x830], 0
jmp 0x1000b515
mov dword [ebp - 0x830], 1
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0xe889
jge 0x1000b539
mov dword [ebp - 0x4d4], 1
jmp 0x1000b540
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0x4d4], eax
jl 0x1000b561
push 2
pop eax
test eax, eax
je 0x1000b561
mov dword [ebp - 0x4dc], 1
jmp 0x1000b568
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0x4dc], eax
jge 0x1000b582
mov dword [ebp - 0x4e4], 1
jmp 0x1000b589
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x8b8]
imul eax, dword [ebp - 0x4e4]
cmp eax, dword [ebp - 0xacc]
jne 0x1000b5aa
mov dword [ebp - 0x71c], 1
jmp 0x1000b5b1
and dword [ebp - 0x71c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x71c]
mov dword [ebp + eax - 0xe30], ecx
mov dword [ebp - 0x838], 0x16f93bd5
mov dword [ebp - 0x938], 0
mov dword [ebp - 0xb1c], 0x9f486485
mov dword [ebp - 0x70], 0
jmp 0x1000b5f2
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x1000b608
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xca8], 0xffffffff
jmp 0x1000b5eb
mov dword [ebp - 0x70], 0
jmp 0x1000b618
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000b62e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x2e0], 0
jmp 0x1000b611
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1000b648
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca8]
mov dword [ebp - 0xf68], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xca8]
mov dword [ebp - 0xf70], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e0], 0xe7ad53a
jg 0x1000b68d
mov dword [ebp - 0x9d0], 1
jmp 0x1000b694
and dword [ebp - 0x9d0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0xf78], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
mov dword [ebp - 0xf80], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca8]
cmp dword [ebp - 0x938], eax
jl 0x1000b6db
mov dword [ebp - 0x4ec], 1
jmp 0x1000b6e2
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x4ec]
mov dword [ebp - 0x838], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x838], eax
jg 0x1000b70f
mov dword [ebp - 0x4f4], 1
jmp 0x1000b716
and dword [ebp - 0x4f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e0]
cmp dword [ebp - 0x4f4], eax
jge 0x1000b737
mov dword [ebp - 0x724], 1
jmp 0x1000b73e
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
sub eax, 0xf5a2
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2e0]
jge 0x1000b764
mov dword [ebp - 0x4fc], 1
jmp 0x1000b76b
and dword [ebp - 0x4fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xca8]
cmp eax, dword [ebp - 0x4fc]
jge 0x1000b78c
mov dword [ebp - 0x504], 1
jmp 0x1000b793
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x938]
add eax, dword [ebp - 0x504]
cmp eax, 6
je 0x1000b7b0
mov dword [ebp - 0x72c], 1
jmp 0x1000b7b7
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x72c]
mov dword [ebp - 0xb1c], eax
mov dword [ebp - 0x858], 0x84edc022
mov dword [ebp - 0x24], 0xed9ba07e
mov dword [ebp - 0x1b0], 0xd9ee1c97
mov dword [ebp - 0xd0], 0xfd77ccca
mov dword [ebp - 0x9d8], 0
mov dword [ebp - 0xad4], 0xfffffffe
mov byte [ebp - 0xb0], 0
movzx eax, byte [ebp - 0xb0]
test eax, eax
je 0x1000b826
push 0
push 0x9c
push 0
push 0
push 0x474
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf88], eax
mov dword [ebp - 0x1b0], 0x85faafe3
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0xf90], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd0], eax
je 0x1000b868
mov dword [ebp - 0x50c], 1
jmp 0x1000b86f
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x50c], eax
jl 0x1000b88c
cmp dword [ebp - 0xd0], 0
jne 0x1000b88c
and dword [ebp - 0x840], 0
jmp 0x1000b896
mov dword [ebp - 0x840], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x24], eax
jge 0x1000b8b0
mov dword [ebp - 0x514], 1
jmp 0x1000b8b7
and dword [ebp - 0x514], 0
imul eax, dword [ebp - 0x514], 0x78ef
sub eax, 0xffff
cmp eax, 2
je 0x1000b8d7
mov dword [ebp - 0x734], 1
jmp 0x1000b8de
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x734], eax
jle 0x1000b8f5
mov dword [ebp - 0x51c], 1
jmp 0x1000b8fc
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x51c], eax
je 0x1000b916
mov dword [ebp - 0x8c0], 1
jmp 0x1000b91d
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x8c0], eax
jne 0x1000b934
mov dword [ebp - 0x524], 1
jmp 0x1000b93b
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x524]
je 0x1000b952
mov dword [ebp - 0x73c], 1
jmp 0x1000b959
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x1b0]
add eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0xd0]
jge 0x1000b979
mov dword [ebp - 0x52c], 1
jmp 0x1000b980
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x52c]
imul eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x9d8]
jl 0x1000b9a1
mov dword [ebp - 0x848], 1
jmp 0x1000b9a8
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x848], eax
jg 0x1000b9c1
or eax, 0xffffffff
jne 0x1000b9c1
and dword [ebp - 0x534], 0
jmp 0x1000b9cb
mov dword [ebp - 0x534], 1
mov eax, dword [ebp - 0x534]
neg eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0x1af6658d
jne 0x1000b9f6
or eax, 0xffffffff
je 0x1000b9f6
mov dword [ebp - 0x744], 1
jmp 0x1000b9fd
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xad4], eax
mov dword [ebp - 0x244], 0
jmp 0x1000ba31
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x1000ba4d
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x754], 0x41fd9d08
jmp 0x1000ba24
mov dword [ebp - 0x1b8], 0x22e9
mov dword [ebp - 0xb34], 0
mov dword [ebp - 0x554], 0xfffe
mov dword [ebp - 0x48], 0
jmp 0x1000ba7b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1000ba91
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x108], 0xfffffff7
jmp 0x1000ba74
mov dword [ebp - 0x48], 0
jmp 0x1000baa1
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000bab7
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x1040], 0xfffffff6
jmp 0x1000ba9a
push 4
pop eax
test eax, eax
je 0x1000bb9c
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1b8]
sub ecx, 0x4111d018
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x108]
jge 0x1000baf2
mov dword [ebp - 0x53c], 1
jmp 0x1000baf9
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x108]
cmp eax, dword [ebp - 0x53c]
jl 0x1000bb1a
mov dword [ebp - 0x900], 1
jmp 0x1000bb21
and dword [ebp - 0x900], 0
cmp dword [ebp - 0x900], 0xffffffff
jg 0x1000bb36
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x74c], 0xc576
jne 0x1000bbbb
mov dword [ebp - 0x54c], 1
jmp 0x1000bbc2
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x54c]
sub eax, 0x61a6b719
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x108]
sub eax, dword [ebp - 0x1b8]
cmp eax, dword [ebp - 0x1b8]
je 0x1000bbf5
mov dword [ebp - 0x850], 1
jmp 0x1000bbfc
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x850]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0x554]
dec eax
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0xfb0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x754], ecx
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x754], 0x3b6f
cmp eax, 1
jne 0x1000bc56
mov dword [ebp - 0x280], 0
mov dword [ebp - 0xd8], 0x70c3099c
mov dword [ebp - 0xadc], 0xfd9d0890
mov dword [ebp - 0xafc], 0xffffffff
mov dword [ebp - 0x9f8], 0x9b69
mov dword [ebp - 0xfb8], 0xdad816f9
mov dword [ebp - 0x860], 0
mov dword [ebp - 0xc10], 1
mov dword [ebp - 0xc0c], 1
mov dword [ebp - 0xc08], 1
mov dword [ebp - 0xc04], 1
mov dword [ebp - 0xa00], 1
mov dword [ebp - 0xb00], 1
mov dword [ebp - 0x94], 0
jmp 0x1000bdc1
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1000bddd
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xc4c], 0x3718bd85
jmp 0x1000bdb4
mov dword [ebp - 0x94], 0
jmp 0x1000bdf6
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1000be12
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xbb8], 0
jmp 0x1000bde9
mov dword [ebp - 0x280], 0xfffffff9
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x280], eax
jne 0x1000be36
mov dword [ebp - 0x764], 1
jmp 0x1000be3d
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0xd8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbb8]
sub eax, 0x30b6
cmp eax, dword [ebp - 0xd8]
jg 0x1000be6e
mov dword [ebp - 0x57c], 1
jmp 0x1000be75
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbb8]
cmp dword [ebp - 0x57c], eax
jle 0x1000be96
mov dword [ebp - 0x584], 1
jmp 0x1000be9d
and dword [ebp - 0x584], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc4c]
mov dword [ebp - 0x920], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x920]
mov dword [ebp + eax - 0xc4c], ecx
mov eax, dword [ebp - 0x920]
cmp eax, dword [ebp - 0x584]
jle 0x1000bedd
mov dword [ebp - 0x76c], 1
jmp 0x1000bee4
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0xadc]
cmp dword [ebp - 0x76c], eax
jne 0x1000befe
mov dword [ebp - 0x9f0], 1
jmp 0x1000bf05
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0xafc]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x9f8]
add eax, dword [ebp - 0xd8]
cmp eax, 0x8491f199
ja 0x1000bf30
mov dword [ebp - 0x594], 1
jmp 0x1000bf37
and dword [ebp - 0x594], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc10]
dec eax
mov dword [ebp - 0x58c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x58c]
mov dword [ebp + eax - 0xc10], ecx
mov eax, dword [ebp - 0x58c]
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x860]
imul eax, dword [ebp - 0x594]
sub eax, dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], eax
jl 0x1000bf8f
mov dword [ebp - 0x774], 1
jmp 0x1000bf96
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x774]
shl eax, 3
cmp dword [ebp - 0x280], eax
jl 0x1000bfb3
mov dword [ebp - 0x59c], 1
jmp 0x1000bfba
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0xc769867f
je 0x1000bfd2
mov dword [ebp - 0xae4], 1
jmp 0x1000bfd9
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xfc8], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbb8]
mov dword [ebp - 0xfd0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbb8]
cmp dword [ebp - 0xa00], eax
je 0x1000c00f
xor eax, eax
je 0x1000c02b
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc4c], 0
je 0x1000c02b
mov dword [ebp - 0x8d0], 1
jmp 0x1000c032
and dword [ebp - 0x8d0], 0
imul eax, dword [ebp - 0x8d0], 0xf455
mov dword [ebp - 0xb00], eax
mov byte [ebp - 0xb4], 0
mov dword [ebp - 0x254], 0
mov dword [ebp - 0x78], 0
jmp 0x1000c063
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1000c079
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x10b0], 0xe48d327c
jmp 0x1000c05c
mov dword [ebp - 0x78], 0
jmp 0x1000c089
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1000c09f
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xc28], 0xdb505206
jmp 0x1000c082
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc28], 0
jmp 0x1000c0cd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc28]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc28], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc28], 4
jge 0x1000c0f7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc28]
mov dword [ebp + eax*4 - 0x10b0], 0
jmp 0x1000c0b2
mov dword [ebp - 0x254], 0xfffffff8
jmp 0x1000c110
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xfffffffa
jne 0x1000c14e
mov dword [ebp - 0xa08], 0x3707
cmp dword [ebp - 0xa08], 0
je 0x1000c12e
jmp 0x1000c14e
mov byte [ebp - 0xb2], 0
movzx eax, byte [ebp - 0xb2]
test eax, eax
je 0x1000c14c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
jmp 0x1000c103
movzx eax, byte [ebp - 0xb4]
test eax, eax
je 0x1000c4dd
mov dword [ebp - 0x98], 0x32b1cecb
mov dword [ebp - 0x1d0], 0xfffffffa
mov dword [ebp - 0x50], 0
jmp 0x1000c181
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1000c197
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x118], 0
jmp 0x1000c17a
mov dword [ebp - 0x50], 0
jmp 0x1000c1a7
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1000c1bd
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x10a0], 0x8d239be9
jmp 0x1000c1a0
mov dword [ebp - 0x98], 0
jmp 0x1000c1d6
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x1000c4d0
mov dword [ebp - 0xf0], 0x9f7fd1e8
mov dword [ebp - 0x210], 1
mov dword [ebp - 0xfd8], 0x145c
mov dword [ebp - 0xaec], 0xa4087b33
mov dword [ebp - 0x230], 0
jmp 0x1000c224
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1000c240
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x1058], 4
jmp 0x1000c217
mov dword [ebp - 0xf0], 0
jmp 0x1000c259
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
jl 0x1000c35e
mov dword [ebp - 0xa4], 0xb9dd952e
mov dword [ebp - 0x1c8], 0xfffffffd
mov dword [ebp - 0xfe0], 0xffffffff
mov dword [ebp - 0xe64], 0x253a34c8
mov dword [ebp - 0xa4], 0
jmp 0x1000c2a7
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1000c2c9
mov dword [ebp - 0x5a4], 0xffffffff
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
jmp 0x1000c29a
mov dword [ebp - 0x1c8], 0
jmp 0x1000c2e2
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0
jg 0x1000c359
mov dword [ebp - 0xa4], 0
jmp 0x1000c304
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jl 0x1000c354
mov dword [ebp - 0x210], 0
jmp 0x1000c326
cmp dword [ebp - 0x210], 0
jl 0x1000c352
mov byte [ebp - 0xb6], 0
movzx eax, byte [ebp - 0xb6]
test eax, eax
je 0x1000c350
push 0
push 0x1981
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayLock]
jmp 0x1000c319
jmp 0x1000c2f7
jmp 0x1000c2d5
jmp 0x1000c24c
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x118]
mov dword [ebp - 0xd04], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x77c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x77c]
mov dword [ebp + eax - 0x1058], ecx
cmp dword [ebp - 0x77c], 0
je 0x1000c3bf
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
cmp dword [ebp - 0x1d0], eax
jl 0x1000c3bf
or eax, 0xffffffff
je 0x1000c3bf
mov dword [ebp - 0x5ac], 1
jmp 0x1000c3c6
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x5ac]
jge 0x1000c3e0
mov dword [ebp - 0x868], 1
jmp 0x1000c3e7
and dword [ebp - 0x868], 0
cmp dword [ebp - 0x868], 0xb2bc
jge 0x1000c3ff
mov dword [ebp - 0x5b4], 1
jmp 0x1000c406
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x5b4], eax
je 0x1000c420
mov dword [ebp - 0x784], 1
jmp 0x1000c427
and dword [ebp - 0x784], 0
cmp dword [ebp - 0x784], 7
jae 0x1000c43c
mov dword [ebp - 0x5bc], 1
jmp 0x1000c443
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x5bc]
mov dword [ebp - 0x1d0], eax
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x98]
mov eax, dword [ebp + eax*4 - 0x118]
mov dword [ebp - 0xd0c], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x118], 0xc28c
test eax, eax
jne 0x1000c495
cmp dword [ebp - 0xf0], 0
jne 0x1000c495
and dword [ebp - 0x2c8], 0
jmp 0x1000c49f
mov dword [ebp - 0x2c8], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x2c8]
mov dword [ebp + eax - 0x10a0], ecx
mov eax, dword [ebp - 0xaec]
add eax, dword [ebp - 0x2c8]
mov ecx, dword [ebp - 0x98]
mov dword [ebp + ecx*4 - 0x118], eax
jmp 0x1000c1c9
push 0x162b
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
mov dword [ebp - 0x54], 0xfffffff7
mov dword [ebp - 0x908], 0xfffffff7
mov dword [ebp - 0x7a4], 0x1b76e1ee
mov dword [ebp - 0x78c], 0xc9bf5e4d
mov dword [ebp - 0xa18], 0x2542
mov dword [ebp - 0x5fc], 1
mov dword [ebp - 0xaf4], 0x4aca62e2
mov dword [ebp - 0xeac], 0x18e8dce9
mov dword [ebp - 0xd14], 0xfffffffb
mov dword [ebp - 0xf94], 4
mov dword [ebp - 0xd1c], 1
mov dword [ebp - 0xeb4], 5
mov dword [ebp - 0xd24], 0xe7924a04
mov dword [ebp - 0xf4c], 0xe0ad50a0
mov dword [ebp - 0xd2c], 0xfffffff7
mov dword [ebp - 0xebc], 0x48eca1ae
mov dword [ebp - 0xd34], 0xd2d97b6e
mov dword [ebp - 0xfbc], 0xc31937da
mov dword [ebp - 0xd3c], 0x43232af7
mov dword [ebp - 0xec4], 0
mov dword [ebp - 0xd44], 0xad706983
mov dword [ebp - 0xf54], 0xff0f9ab1
mov dword [ebp - 0xd4c], 0xc7d87010
mov dword [ebp - 0xecc], 0x61f0846d
mov dword [ebp - 4], 0
jmp 0x1000c5da
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
jge 0x1000c5f0
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xcb8], 0x327c
jmp 0x1000c5d3
mov dword [ebp - 4], 0
jmp 0x1000c600
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x1000c616
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xd54], 0x44d9913d
jmp 0x1000c5f9
mov dword [ebp - 4], 0
jmp 0x1000c626
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 2
jge 0x1000c63c
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1060], 0xaa3630dd
jmp 0x1000c61f
mov dword [ebp - 4], 0
jmp 0x1000c64c
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 1
jge 0x1000c662
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x930], 0
jmp 0x1000c645
mov dword [ebp - 0x54], 3
jmp 0x1000c672
cmp dword [ebp - 0x54], 0
jl 0x1000c9a6
mov dword [ebp - 0x100], 0x3edb3952
mov dword [ebp - 0x288], 0xffffffff
mov dword [ebp - 0x2c0], 0xffffffff
mov dword [ebp - 0x250], 0
jmp 0x1000c6b3
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x1000c6cf
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x1010], 0xc40a98ce
jmp 0x1000c6a6
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0xcb8]
mov dword [ebp - 0xf9c], eax
mov dword [ebp - 0x908], 0x74d
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xa10], eax
push 4
pop eax
imul eax, eax, 0
push 0xfffffffffffffff7
pop ecx
sub ecx, dword [ebp + eax - 0x1010]
mov eax, dword [ebp - 0x908]
add eax, ecx
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0x288]
dec eax
mov dword [ebp - 0x288], eax
mov eax, dword [ebp - 0xa10]
cmp eax, dword [ebp - 0xb08]
jge 0x1000c73a
mov dword [ebp - 0x5c4], 1
jmp 0x1000c741
and dword [ebp - 0x5c4], 0
mov eax, 0xc193
sub eax, dword [ebp - 0x5c4]
mov dword [ebp - 0x78c], eax
mov eax, dword [ebp - 0x78c]
neg eax
mov ecx, dword [ebp - 0x54]
cmp eax, dword [ebp + ecx*4 - 0xcb8]
jle 0x1000c772
mov dword [ebp - 0x5cc], 1
jmp 0x1000c779
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0xffff
jne 0x1000c791
mov dword [ebp - 0x870], 1
jmp 0x1000c798
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x870], eax
je 0x1000c7b9
push 4
pop eax
test eax, eax
je 0x1000c7b9
mov dword [ebp - 0x5d4], 1
jmp 0x1000c7c0
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0xa18]
jge 0x1000c7de
mov dword [ebp - 0x794], 1
jmp 0x1000c7e5
and dword [ebp - 0x794], 0
cmp dword [ebp - 0x794], 0x9d88
jg 0x1000c7fd
mov dword [ebp - 0x5dc], 1
jmp 0x1000c804
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x2c0]
add eax, dword [ebp - 0x5dc]
cmp eax, 0xab2aee5a
jae 0x1000c823
mov dword [ebp - 0x8d8], 1
jmp 0x1000c82a
and dword [ebp - 0x8d8], 0
cmp dword [ebp - 0x8d8], 0x2f1e
jne 0x1000c848
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x930]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x930], eax
mov dword [ebp - 0x3c], 0xcb363f9e
mov dword [ebp - 0x2d0], 0x7909
mov dword [ebp - 0x1e8], 0x27f08e22
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x7bc], 0xb6890635
mov dword [ebp - 0x5c], 0
jmp 0x1000ca00
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000ca16
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x980], 0x9d221e9c
jmp 0x1000c9f9
mov dword [ebp - 0x5c], 0
jmp 0x1000ca26
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000ca3c
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xa8c], 8
jmp 0x1000ca1f
mov eax, 0xf6efba1a
test eax, eax
je 0x1000cae6
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd5c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xf5c], eax
cmp dword [ebp - 0x3c], 0x9beab1d6
jb 0x1000ca82
mov dword [ebp - 0x604], 1
jmp 0x1000ca89
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 1
jge 0x1000ca9e
mov dword [ebp - 0x60c], 1
jmp 0x1000caa5
and dword [ebp - 0x60c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
inc eax
mov dword [ebp - 0x7ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7ac]
mov dword [ebp + eax - 0x980], ecx
mov eax, dword [ebp - 0x7ac]
cmp eax, dword [ebp - 0x60c]
jg 0x1000cae6
mov dword [ebp - 0x880], 1
jmp 0x1000caed
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x2d0]
mov dword [ebp - 0xd6c], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0xedc], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x980]
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
imul eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x7bc]
jg 0x1000cd24
mov dword [ebp - 0x290], 0xfffffffe
mov dword [ebp - 0x238], 3
mov dword [ebp - 0x1e0], 0x7ad46d2
mov dword [ebp - 0xd74], 0x2129e5e2
mov dword [ebp - 0x7c4], 0xd96456cf
mov dword [ebp - 0x218], 0
jmp 0x1000cb90
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x1000cbac
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0x10ec], 1
jmp 0x1000cb83
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x3c], eax
je 0x1000cbcf
mov dword [ebp - 0x614], 1
jmp 0x1000cbd6
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x614], eax
jge 0x1000cbf0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0xa30], 1
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0xee4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
cmp dword [ebp - 0x120], eax
jg 0x1000cd77
cmp dword [ebp - 0x1e8], 0
je 0x1000cd77
cmp dword [ebp - 0x2d0], 0
je 0x1000cd77
mov dword [ebp - 0x63c], 1
jmp 0x1000cd7e
and dword [ebp - 0x63c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x980]
cmp dword [ebp - 0x63c], eax
je 0x1000cd9f
mov dword [ebp - 0x910], 1
jmp 0x1000cda6
and dword [ebp - 0x910], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x910]
sub ecx, dword [ebp + eax - 0xa8c]
mov dword [ebp - 0x120], ecx
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xf64], eax
imul eax, dword [ebp - 0x298], 0xffa2
cmp eax, dword [ebp - 0xa30]
jg 0x1000cdf2
mov dword [ebp - 0x644], 1
jmp 0x1000cdf9
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x644]
mov dword [ebp - 0x298], eax
mov byte [ebp - 0xb8], 0
movzx eax, byte [ebp - 0xb8]
test eax, eax
je 0x1000ce28