Function at 0x10008d34
Capabilities:
Get geographical location

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10078152
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd78
push esi
push edi
mov dword [ebp - 0x18], 0xe387
mov dword [ebp - 0x2e8], 0xffffffff
mov dword [ebp - 0x294], 0x16b5b384
mov dword [ebp - 0x6b4], 0x7f4a7d2a
mov dword [ebp - 0x360], 0xc0ec0dce
mov dword [ebp - 0x978], 0xb9c309ab
mov dword [ebp - 0x200], 0
jmp 0x10008da6
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 4
jge 0x10008dc2
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0x9c0], 0xfffc
jmp 0x10008d99
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x18], 0
jmp 0x10008dd9
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jg 0x10008fa4
cmp dword [ebp - 0x2e8], 1
jb 0x10008df8
mov dword [ebp - 0x888], 1
jmp 0x10008dff
and dword [ebp - 0x888], 0
cmp dword [ebp - 0x18], 0
je 0x10008e1e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x9c0], 0
je 0x10008e1e
mov dword [ebp - 0x700], 1
jmp 0x10008e25
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c0]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x700]
mov dword [ebp - 0x294], eax
mov eax, dword [ebp - 0x294]
mov dword [ebp - 0xbbc], eax
cmp dword [ebp - 0x2e8], 0x54207647
jl 0x10008e65
mov dword [ebp - 0x970], 1
jmp 0x10008e6c
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c0]
mov dword [ebp - 0xcac], eax
cmp dword [ebp - 0x294], 0
je 0x10008e9e
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x9c0], 0
je 0x10008e9e
mov dword [ebp - 0x340], 1
jmp 0x10008ea5
and dword [ebp - 0x340], 0
cmp dword [ebp - 0x340], 0x80c6548a
ja 0x10008ebd
mov dword [ebp - 0x6a4], 1
jmp 0x10008ec4
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c0]
cmp dword [ebp - 0x6a4], eax
jg 0x10008ee2
mov dword [ebp - 0x348], 1
jmp 0x10008ee9
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x348]
add eax, 0xae21
cmp eax, dword [ebp - 0x2e8]
je 0x10008f08
mov dword [ebp - 0x6ac], 1
jmp 0x10008f0f
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c0]
cmp dword [ebp - 0x6ac], eax
jg 0x10008f2d
mov dword [ebp - 0x350], 1
jmp 0x10008f34
and dword [ebp - 0x350], 0
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x6b4], eax
cmp dword [ebp - 0x6b4], 0x57b1a094
jge 0x10008f58
mov dword [ebp - 0x358], 1
jmp 0x10008f5f
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x358]
sub ecx, dword [ebp + eax*4 - 0x9c0]
cmp ecx, 0xfffffffa
jge 0x10008f80
mov dword [ebp - 0x6bc], 1
jmp 0x10008f87
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x978], eax
jmp 0x10008dd2
mov dword [ebp - 0x88], 0xfffffffa
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x6cc], 4
mov dword [ebp - 0x1b0], 0x811f
push 1
lea ecx, [ebp - 0xac4]
call fcn.1001540a
and dword [ebp - 4], 0
mov dword [ebp - 0x378], 1
mov dword [ebp - 0x248], 0
jmp 0x10009000
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x10009022
push dword [ebp - 0x248]
lea ecx, [ebp - 0xac4]
call fcn.10015477
mov dword [eax], 1
jmp 0x10008ff3
mov dword [ebp - 0x88], 0
jmp 0x1000903b
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x16
jne 0x10009070
mov dword [ebp - 0x980], 0xca0029bf
mov dword [ebp - 0x988], 0x90be4438
mov eax, dword [ebp - 0x980]
mov dword [ebp - 0xbcc], eax
mov dword [ebp - 0x988], 7
jmp 0x1000902e
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x88], eax
jle 0x10009096
mov dword [ebp - 0x6dc], 1
jmp 0x1000909d
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x90], 0x6dd2cc91
jne 0x100090b5
mov dword [ebp - 0x6c4], 1
jmp 0x100090bc
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6cc]
cmp dword [ebp - 0x6c4], eax
jg 0x100090d1
cmp dword [ebp - 0x90], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x90], eax
je 0x100090eb
mov dword [ebp - 0x368], 1
jmp 0x100090f2
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x368]
cmp eax, dword [ebp - 0x1b0]
jg 0x10009112
mov dword [ebp - 0x990], 1
jmp 0x10009119
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xd20], eax
cmp dword [ebp - 0x1b0], 0
je 0x10009143
cmp dword [ebp - 0x6cc], 0
je 0x10009143
mov dword [ebp - 0x370], 1
jmp 0x1000914a
and dword [ebp - 0x370], 0
push 0
lea ecx, [ebp - 0xac4]
call fcn.10015477
mov ecx, dword [ebp - 0x370]
add ecx, dword [eax]
jne 0x10009173
cmp dword [ebp - 0x1b0], 0
jne 0x10009173
and dword [ebp - 0x6d4], 0
jmp 0x1000917d
mov dword [ebp - 0x6d4], 1
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x378], eax
mov eax, dword [ebp - 0x378]
imul eax, dword [ebp - 0x6dc]
cmp eax, 0x77b69c93
jne 0x100091a9
mov dword [ebp - 0x380], 1
jmp 0x100091b0
and dword [ebp - 0x380], 0
cmp dword [ebp - 0x380], 0x83e731e7
jae 0x100091c8
mov dword [ebp - 0x6e4], 1
jmp 0x100091cf
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 0x5cbf
je 0x100091e7
mov dword [ebp - 0x388], 1
jmp 0x100091ee
and dword [ebp - 0x388], 0
mov eax, dword [ebp - 0x388]
mov dword [ebp - 0x90], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac4]
call fcn.10015472
mov dword [ebp - 0xb8], 0xc4ab274b
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x6c], 2
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x250], 0
jmp 0x10009244
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x10009260
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xa88], 0xfffffff8
jmp 0x10009237
mov dword [ebp - 0x6c], 0
jmp 0x10009270
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffed
jg 0x10009566
mov dword [ebp - 0x170], 0xbbe5
xor eax, eax
inc eax
je 0x1000938a
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x170], eax
je 0x100092a4
mov dword [ebp - 0x6ec], 1
jmp 0x100092ab
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6ec], eax
jg 0x100092c2
mov dword [ebp - 0x390], 1
jmp 0x100092c9
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0
je 0x100092de
mov dword [ebp - 0x6f4], 1
jmp 0x100092e5
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x6f4], eax
jle 0x100092fc
mov dword [ebp - 0x398], 1
jmp 0x10009303
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x398], eax
jl 0x10009320
cmp dword [ebp - 0x6c], 0
je 0x10009320
mov dword [ebp - 0x6fc], 1
jmp 0x10009327
and dword [ebp - 0x6fc], 0
cmp dword [ebp - 0x6fc], 0xd373
jle 0x1000933f
mov dword [ebp - 0x3a0], 1
jmp 0x10009346
and dword [ebp - 0x3a0], 0
imul eax, dword [ebp - 0x3a0], 0x7637
cmp eax, dword [ebp - 0x170]
jge 0x10009364
mov dword [ebp - 0x704], 1
jmp 0x1000936b
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x170]
add eax, dword [ebp - 0x704]
cmp eax, 0x714ffd81
jle 0x1000938a
mov dword [ebp - 0x3a8], 1
jmp 0x10009391
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x48], 0xfffffffb
jmp 0x100093aa
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xffffffe5
jg 0x10009561
mov dword [ebp - 0x164], 0x6717b38e
mov dword [ebp - 0x1b8], 0
jmp 0x100093d7
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x100093f3
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0xd58], 0xf6c5533f
jmp 0x100093ca
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1000940f
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xa88], 0x442b7a8a
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xad8], eax
cmp dword [ebp - 0x164], 0
jne 0x10009447
mov eax, 0x1e33ecdc
test eax, eax
jne 0x10009447
and dword [ebp - 0x70c], 0
jmp 0x10009451
mov dword [ebp - 0x70c], 1
cmp dword [ebp - 0x70c], 4
jne 0x10009466
mov dword [ebp - 0x3b0], 1
jmp 0x1000946d
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x164]
jl 0x1000948e
mov dword [ebp - 0x714], 1
jmp 0x10009495
and dword [ebp - 0x714], 0
cmp dword [ebp - 0x714], 1
ja 0x100094aa
mov dword [ebp - 0x3b8], 1
jmp 0x100094b1
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa88]
cmp dword [ebp - 0x3b8], eax
jg 0x100094d2
mov dword [ebp - 0x71c], 1
jmp 0x100094d9
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x170]
cmp eax, dword [ebp - 0x71c]
je 0x100094f3
mov dword [ebp - 0x3c0], 1
jmp 0x100094fa
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x3c0], eax
je 0x10009514
mov dword [ebp - 0x724], 1
jmp 0x1000951b
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
sub eax, dword [ebp - 0x164]
imul eax, eax, 0xfffffffb
test eax, eax
jne 0x10009540
mov eax, 0xd6ba
test eax, eax
jne 0x10009540
and dword [ebp - 0x3c8], 0
jmp 0x1000954a
mov dword [ebp - 0x3c8], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0xd58], ecx
jmp 0x100093a3
jmp 0x10009269
mov dword [ebp - 0x48], 0
jmp 0x10009576
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000958c
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xa88], 0x3c12d493
jmp 0x1000956f
mov dword [ebp - 0x480], 0xfffffffe
mov dword [ebp - 0x2a0], 0xd94fe5f3
mov dword [ebp - 0x9e4], 0x98815cbc
mov dword [ebp - 0x3d8], 8
mov dword [ebp - 0x73c], 0xfffffffe
mov dword [ebp - 0x9ec], 0x4456e348
mov dword [ebp - 0x258], 0
jmp 0x100095e1
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 4
jge 0x100095fd
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xd74], 4
jmp 0x100095d4
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x72c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x72c]
mov dword [ebp + eax - 0xd74], ecx
mov eax, dword [ebp - 0x9e4]
cmp eax, dword [ebp - 0x72c]
jle 0x10009636
mov dword [ebp - 0x3d0], 1
jmp 0x1000963d
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x2a0]
cmp eax, dword [ebp - 0x3d0]
jle 0x10009657
mov dword [ebp - 0x734], 1
jmp 0x1000965e
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x2a0]
add eax, dword [ebp - 0x73c]
cmp eax, 0xef98
jne 0x10009695
mov dword [ebp - 0x3e0], 1
jmp 0x1000969c
and dword [ebp - 0x3e0], 0
mov eax, 0xa8f9
sub eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x9ec], eax
push 2
lea ecx, [ebp - 0x9a0]
call fcn.1001540a
mov dword [ebp - 4], 1
mov dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x184], 0x2526041
push 4
lea ecx, [ebp - 0xba8]
call fcn.1001540a
mov byte [ebp - 4], 2
mov dword [ebp - 0x1c0], 0
jmp 0x100096ff
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 4
jge 0x10009721
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xba8]
call fcn.10015477
mov dword [eax], 0x95010f7a
jmp 0x100096f2
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x310], eax
imul eax, dword [ebp - 0x310], 0xffffffff
mov dword [ebp - 0x184], eax
mov dword [ebp - 0x184], 3
jmp 0x10009753
mov eax, dword [ebp - 0x184]
dec eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jl 0x1000977e
mov byte [ebp - 0x118], 0
movzx eax, byte [ebp - 0x118]
test eax, eax
je 0x1000977c
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
jmp 0x10009746
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xba8]
call fcn.10015472
mov dword [ebp - 0x14c], 0xfffd
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0xa0], 0xfffb
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x2a8], 0x12630673
push 2
lea ecx, [ebp - 0x824]
call fcn.1001540a
mov byte [ebp - 4], 3
mov dword [ebp - 0x9dc], 0
mov dword [ebp - 0x260], 0
jmp 0x100097fa
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x1000981c
push dword [ebp - 0x260]
lea ecx, [ebp - 0x824]
call fcn.10015477
mov dword [eax], 2
jmp 0x100097ed
mov dword [ebp - 0x28], 0
jmp 0x1000982c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 6
jge 0x10009ac1
mov dword [ebp - 0x38], 0x1891f782
mov dword [ebp - 0x268], 0xb000e2e4
mov dword [ebp - 0x1c8], 0
jmp 0x10009860
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x10009879
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x24], 0x51d69f42
jmp 0x10009853
mov dword [ebp - 0x38], 0
jmp 0x10009889
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10009a42
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x24], 0
jne 0x100098d7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
cmp dword [ebp - 0x28], eax
je 0x100098b8
mov dword [ebp - 0x744], 1
jmp 0x100098bf
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0x7392
jne 0x100098d7
mov dword [ebp - 0x3e8], 1
jmp 0x100098de
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3e8], eax
jg 0x100098f5
mov dword [ebp - 0x74c], 1
jmp 0x100098fc
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
je 0x10009926
cmp dword [ebp - 0x268], 0
je 0x10009926
mov dword [ebp - 0x9d8], 1
jmp 0x1000992d
and dword [ebp - 0x9d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
mov dword [ebp - 0xae0], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp + eax*4 - 0x24], 0x7825
jge 0x10009956
mov dword [ebp - 0x3f0], 1
jmp 0x1000995d
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
imul eax, dword [ebp - 0x3f0]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x24]
je 0x1000998c
mov dword [ebp - 0x754], 1
jmp 0x10009993
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x24]
cmp eax, dword [ebp - 0x754]
je 0x100099ae
mov dword [ebp - 0x3f8], 1
jmp 0x100099b5
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 0xd437f1bd
jae 0x100099cd
mov dword [ebp - 0x75c], 1
jmp 0x100099d4
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x24]
cmp eax, dword [ebp - 0x75c]
je 0x100099f5
cmp dword [ebp - 0x28], 0
je 0x100099f5
mov dword [ebp - 0x400], 1
jmp 0x100099fc
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp + eax*4 - 0x24]
cmp eax, dword [ebp - 0x400]
jl 0x10009a17
mov dword [ebp - 0x908], 1
jmp 0x10009a1e
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xae8], eax
mov eax, dword [ebp - 0x38]
mov ecx, 0xae055a24
sub ecx, dword [ebp + eax*4 - 0x24]
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x24], ecx
jmp 0x10009882
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xa0], eax
jle 0x10009a68
mov dword [ebp - 0x764], 1
jmp 0x10009a6f
and dword [ebp - 0x764], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x24]
sub eax, dword [ebp - 0x764]
je 0x10009a96
cmp dword [ebp - 0x268], 0
je 0x10009a96
mov dword [ebp - 0x408], 1
jmp 0x10009a9d
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
sub eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xaf8], eax
mov dword [ebp - 0x98], 5
jmp 0x10009825
cmp dword [ebp - 0x98], 0xfffffff8
je 0x10009ad6
mov dword [ebp - 0x76c], 1
jmp 0x10009add
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0xffff
jbe 0x10009b01
mov dword [ebp - 0x410], 1
jmp 0x10009b08
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x410], eax
jg 0x10009b22
mov dword [ebp - 0x774], 1
jmp 0x10009b29
and dword [ebp - 0x774], 0
cmp dword [ebp - 0x774], 0x6c07
jle 0x10009b41
mov dword [ebp - 0x418], 1
jmp 0x10009b48
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0xfffffff8
je 0x10009b5d
mov dword [ebp - 0x77c], 1
jmp 0x10009b64
and dword [ebp - 0x77c], 0
push 0
lea ecx, [ebp - 0x824]
call fcn.10015477
mov ecx, dword [ebp - 0x77c]
cmp ecx, dword [eax]
jg 0x10009b87
mov dword [ebp - 0x420], 1
jmp 0x10009b8e
and dword [ebp - 0x420], 0
cmp dword [ebp - 0x420], 0xc008b242
je 0x10009ba6
mov dword [ebp - 0x784], 1
jmp 0x10009bad
and dword [ebp - 0x784], 0
mov dword [ebp - 0x28], 0x70b7
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x784]
je 0x10009bcb
mov dword [ebp - 0x428], 1
jmp 0x10009bd2
and dword [ebp - 0x428], 0
push 0
lea ecx, [ebp - 0x824]
call fcn.10015477
mov ecx, dword [ebp - 0x428]
cmp ecx, dword [eax]
jl 0x10009bf5
mov dword [ebp - 0x78c], 1
jmp 0x10009bfc
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x78c], eax
jg 0x10009c1f
cmp dword [ebp - 0x11c], 0
je 0x10009c1f
mov dword [ebp - 0x430], 1
jmp 0x10009c26
and dword [ebp - 0x430], 0
mov esi, dword [ebp - 0x430]
sub esi, dword [ebp - 0x98]
push 0
lea ecx, [ebp - 0x824]
call fcn.10015477
cmp esi, dword [eax]
jne 0x10009c4f
mov dword [ebp - 0x794], 1
jmp 0x10009c56
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x98]
imul eax, dword [ebp - 0x794]
test eax, eax
jne 0x10009c79
cmp dword [ebp - 0x2a8], 0
jne 0x10009c79
and dword [ebp - 0x438], 0
jmp 0x10009c83
mov dword [ebp - 0x438], 1
push 0
lea ecx, [ebp - 0x824]
call fcn.10015477
mov ecx, dword [ebp - 0x438]
cmp ecx, dword [eax]
jge 0x10009ca6
mov dword [ebp - 0x79c], 1
jmp 0x10009cad
and dword [ebp - 0x79c], 0
mov esi, dword [ebp - 0xa0]
imul esi, dword [ebp - 0x79c]
push 1
lea ecx, [ebp - 0x824]
call fcn.10015477
add esi, dword [eax]
sub esi, dword [ebp - 0xa0]
inc esi
cmp esi, dword [ebp - 0x11c]
jle 0x10009ce4
mov dword [ebp - 0x440], 1
jmp 0x10009ceb
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0x10009d10
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x10009d10
and dword [ebp - 0x894], 0
jmp 0x10009d1a
mov dword [ebp - 0x894], 1
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xb00], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xb08], eax
push 0
lea ecx, [ebp - 0x824]
call fcn.10015477
mov eax, 0xd8a5
imul eax, eax, 0xb5db
cmp eax, 0x89a4
je 0x10009d5d
mov dword [ebp - 0x7a4], 1
jmp 0x10009d64
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x7a4], eax
jle 0x10009d7e
mov dword [ebp - 0x448], 1
jmp 0x10009d85
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x9dc], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x824]
call fcn.10015472
mov dword [ebp - 0x2f0], 0xabefa025
mov dword [ebp - 0xb10], 0x24039b64
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x10009ddf
push 0x390
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x10009e04
push 0
push 0
push 0x913
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
mov dword [ebp - 0x7d4], 0x15b01d97
mov dword [ebp - 0x124], 0xffffffff
mov dword [ebp - 0x964], 0
mov dword [ebp - 0x124], 0xfffffffb
jmp 0x10009e3b
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xe
jg 0x10009f4c
mov dword [ebp - 0x1d0], 0x8f0d
mov dword [ebp - 0x8a4], 0xffffffff
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10009e7f
push 0x1527
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
mov eax, dword [ebp - 0x1d0]
sub eax, 0x5f2b9e1d
cmp eax, dword [ebp - 0x1d0]
jl 0x10009e9e
mov dword [ebp - 0x7ac], 1
jmp 0x10009ea5
and dword [ebp - 0x7ac], 0
cmp dword [ebp - 0x7ac], 1
jle 0x10009eba
mov dword [ebp - 0x89c], 1
jmp 0x10009ec1
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xb18], eax
cmp dword [ebp - 0x124], 0
je 0x10009ee9
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x10009ee9
mov dword [ebp - 0x450], 1
jmp 0x10009ef0
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x450], eax
jl 0x10009f0a
mov dword [ebp - 0x7b4], 1
jmp 0x10009f11
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x7b4], eax
jg 0x10009f31
cmp dword [ebp - 0x964], 0
jne 0x10009f31
and dword [ebp - 0x458], 0
jmp 0x10009f3b
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x8a4], eax
jmp 0x10009e2e
mov dword [ebp - 0x270], 0
jmp 0x10009f65
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 2
jge 0x10009f87
push dword [ebp - 0x270]
lea ecx, [ebp - 0x9a0]
call fcn.10015477
mov dword [eax], 0xdae4f9db
jmp 0x10009f58
push 2
lea ecx, [ebp - 0x9f8]
call fcn.1001540a
mov byte [ebp - 4], 4
mov dword [ebp - 0x40], 0x504cd453
mov dword [ebp - 0x1d8], 0
jmp 0x10009fb8
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10009fda
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x9f8]
call fcn.10015477
mov dword [eax], 8
jmp 0x10009fab
mov dword [ebp - 0x40], 0
jmp 0x10009fea
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000a006
push dword [ebp - 0x40]
lea ecx, [ebp - 0x9f8]
call fcn.10015477
mov dword [eax], 1
jmp 0x10009fe3
mov dword [ebp - 0x40], 0
jmp 0x1000a016
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000a032
push dword [ebp - 0x40]
lea ecx, [ebp - 0x9f8]
call fcn.10015477
mov dword [eax], 0xa473
jmp 0x1000a00f
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x9f8]
call fcn.10015472
cmp dword [ebp - 0xb8], 0x4325
jg 0x1000a059
mov dword [ebp - 0x478], 1
jmp 0x1000a060
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0xb8], eax
je 0x1000a07a
mov dword [ebp - 0x7bc], 1
jmp 0x1000a081
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x480]
imul eax, dword [ebp - 0x7bc]
cmp dword [ebp - 0x16c], eax
jle 0x1000a0a2
mov dword [ebp - 0x460], 1
jmp 0x1000a0a9
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x460], eax
jle 0x1000a0c3
mov dword [ebp - 0x9a4], 1
jmp 0x1000a0ca
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xb20], eax
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10015477
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10015477
imul esi, dword [eax], 0
push 0
lea ecx, [ebp - 0x9a0]
call fcn.10015477
cmp esi, dword [eax]
jne 0x1000a110
mov dword [ebp - 0x7c4], 1
jmp 0x1000a117
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x7c4], eax
jge 0x1000a131
mov dword [ebp - 0x468], 1
jmp 0x1000a138
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
neg eax
cmp eax, 1
jle 0x1000a15d
mov dword [ebp - 0x7cc], 1
jmp 0x1000a164
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x7cc], eax
jl 0x1000a17e
mov dword [ebp - 0x470], 1
jmp 0x1000a185
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x7d4]
add eax, dword [ebp - 0x470]
je 0x1000a1a8
cmp dword [ebp - 0x7d4], 0
je 0x1000a1a8
mov dword [ebp - 0x7dc], 1
jmp 0x1000a1af
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x478]
imul eax, dword [ebp - 0x7dc]
cmp eax, 0xffff
jbe 0x1000a1d8
cmp dword [ebp - 0x2f0], 0
je 0x1000a1d8
mov dword [ebp - 0x7e4], 1
jmp 0x1000a1df
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x480]
cmp dword [ebp - 0x7e4], eax
jge 0x1000a1f9
mov dword [ebp - 0x488], 1
jmp 0x1000a200
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x14c], 0
jmp 0x1000a225
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jg 0x1000a4d1
mov dword [ebp - 0x16c], 0
jmp 0x1000a24b
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 1
jg 0x1000a4cc
mov dword [ebp - 0xa8], 0xfffffffa
mov dword [ebp - 0xb0], 0xffffffff
mov dword [ebp - 0x7f4], 4
mov dword [ebp - 0x1e0], 0x811f
push 1
lea ecx, [ebp - 0xaa0]
call fcn.1001540a
mov byte [ebp - 4], 5
mov dword [ebp - 0x4a0], 1
mov dword [ebp - 0x278], 0
jmp 0x1000a2b4
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jge 0x1000a2d6
push dword [ebp - 0x278]
lea ecx, [ebp - 0xaa0]
call fcn.10015477
mov dword [eax], 1
jmp 0x1000a2a7
mov dword [ebp - 0xa8], 0
jmp 0x1000a2ef
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 0x16
jne 0x1000a324
mov dword [ebp - 0x8ac], 0xca0029bf
mov dword [ebp - 0x96c], 0x90be4438
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0xb28], eax
mov dword [ebp - 0x96c], 7
jmp 0x1000a2e2
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0xa8], eax
jle 0x1000a34a
mov dword [ebp - 0x804], 1
jmp 0x1000a351
and dword [ebp - 0x804], 0
cmp dword [ebp - 0xb0], 0x6dd2cc91
jne 0x1000a369
mov dword [ebp - 0x7ec], 1
jmp 0x1000a370
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7f4]
cmp dword [ebp - 0x7ec], eax
jg 0x1000a385
cmp dword [ebp - 0xb0], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0xb0], eax
je 0x1000a39f
mov dword [ebp - 0x490], 1
jmp 0x1000a3a6
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x490]
cmp eax, dword [ebp - 0x1e0]
jg 0x1000a3c6
mov dword [ebp - 0x8b4], 1
jmp 0x1000a3cd
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb30], eax
cmp dword [ebp - 0x1e0], 0
je 0x1000a3f7
cmp dword [ebp - 0x7f4], 0
je 0x1000a3f7
mov dword [ebp - 0x498], 1
jmp 0x1000a3fe
and dword [ebp - 0x498], 0
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10015477
mov ecx, dword [ebp - 0x498]
add ecx, dword [eax]
jne 0x1000a427
cmp dword [ebp - 0x1e0], 0
jne 0x1000a427
and dword [ebp - 0x7fc], 0
jmp 0x1000a431
mov dword [ebp - 0x7fc], 1
mov eax, dword [ebp - 0x7fc]
mov dword [ebp - 0x4a0], eax
mov eax, dword [ebp - 0x4a0]
imul eax, dword [ebp - 0x804]
cmp eax, 0x77b69c93
jne 0x1000a45d
mov dword [ebp - 0x4a8], 1
jmp 0x1000a464
and dword [ebp - 0x4a8], 0
cmp dword [ebp - 0x4a8], 0x83e731e7
jae 0x1000a47c
mov dword [ebp - 0x80c], 1
jmp 0x1000a483
and dword [ebp - 0x80c], 0
cmp dword [ebp - 0x80c], 0x5cbf
je 0x1000a49b
mov dword [ebp - 0x814], 1
jmp 0x1000a4a2
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xaa0]
call fcn.10015472
mov dword [ebp - 0xb8], 0xfffffffb
jmp 0x1000a23e
jmp 0x1000a218
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a0]
call fcn.10015472
mov dword [ebp - 0xc0], 0xc4ab274b
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x690], 0xfffffffe
push 2
lea ecx, [ebp - 0x9b0]
call fcn.1001540a
mov dword [ebp - 4], 6
mov dword [ebp - 0x12c], 0xfffd
mov dword [ebp - 0x2b0], 0xabefa025
mov dword [ebp - 0x4cc], 0x15b01d97
mov dword [ebp - 0x280], 0
jmp 0x1000a549
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1000a56b
push dword [ebp - 0x280]
lea ecx, [ebp - 0x9b0]
call fcn.10015477
mov dword [eax], 0xdae4f9db
jmp 0x1000a53c
cmp dword [ebp - 0xc0], 0x4325
jg 0x1000a583
mov dword [ebp - 0x760], 1
jmp 0x1000a58a
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], eax
je 0x1000a5a4
mov dword [ebp - 0x4b4], 1
jmp 0x1000a5ab
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x690]
imul eax, dword [ebp - 0x4b4]
cmp dword [ebp - 0x194], eax
jle 0x1000a5cc
mov dword [ebp - 0x684], 1
jmp 0x1000a5d3
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x684], eax
jle 0x1000a5ed
mov dword [ebp - 0x9e8], 1
jmp 0x1000a5f4
and dword [ebp - 0x9e8], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xb38], eax
push 0
lea ecx, [ebp - 0x9b0]
call fcn.10015477
push 0
lea ecx, [ebp - 0x9b0]
call fcn.10015477
imul esi, dword [eax], 0
push 0
lea ecx, [ebp - 0x9b0]
call fcn.10015477
cmp esi, dword [eax]
jne 0x1000a63a
mov dword [ebp - 0x4bc], 1
jmp 0x1000a641
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x4bc], eax
jge 0x1000a65b
mov dword [ebp - 0x7c8], 1
jmp 0x1000a662
and dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
neg eax
cmp eax, 1
jle 0x1000a687
mov dword [ebp - 0x4c4], 1
jmp 0x1000a68e
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x4c4], eax
jl 0x1000a6a8
mov dword [ebp - 0x688], 1
jmp 0x1000a6af
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x4cc]
add eax, dword [ebp - 0x688]
je 0x1000a6d2
cmp dword [ebp - 0x4cc], 0
je 0x1000a6d2
mov dword [ebp - 0x4d4], 1
jmp 0x1000a6d9
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x760]
imul eax, dword [ebp - 0x4d4]
cmp eax, 0xffff
jbe 0x1000a702
cmp dword [ebp - 0x2b0], 0
je 0x1000a702
mov dword [ebp - 0x4dc], 1
jmp 0x1000a709
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x690]
cmp dword [ebp - 0x4dc], eax
jge 0x1000a723
mov dword [ebp - 0x800], 1
jmp 0x1000a72a
and dword [ebp - 0x800], 0
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x12c], 0
jmp 0x1000a74f
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jg 0x1000a788
mov dword [ebp - 0x194], 0
jmp 0x1000a771
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 1
jg 0x1000a786
mov dword [ebp - 0xc0], 0xfffffffb
jmp 0x1000a764
jmp 0x1000a742
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b0]
call fcn.10015472
mov dword [ebp - 0xc8], 0xc4ab274b
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x6a8], 0xfffffffe
push 2
lea ecx, [ebp - 0x9cc]
call fcn.1001540a
mov dword [ebp - 4], 7
mov dword [ebp - 0x144], 0xfffd
mov dword [ebp - 0x330], 0xabefa025
mov dword [ebp - 0x4fc], 0x15b01d97
mov dword [ebp - 0x1e8], 0
jmp 0x1000a800
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x1000a822
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0x9cc]
call fcn.10015477
mov dword [eax], 0xdae4f9db
jmp 0x1000a7f3
cmp dword [ebp - 0xc8], 0x4325
jg 0x1000a83a
mov dword [ebp - 0x7d0], 1
jmp 0x1000a841
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
je 0x1000a85b
mov dword [ebp - 0x4e4], 1
jmp 0x1000a862
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x6a8]
imul eax, dword [ebp - 0x4e4]
cmp dword [ebp - 0x174], eax
jle 0x1000a883
mov dword [ebp - 0x698], 1
jmp 0x1000a88a
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x698], eax
jle 0x1000a8a4
mov dword [ebp - 0x8bc], 1
jmp 0x1000a8ab
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xb40], eax
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10015477
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10015477
imul esi, dword [eax], 0
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10015477
cmp esi, dword [eax]
jne 0x1000a8f1
mov dword [ebp - 0x4ec], 1
jmp 0x1000a8f8
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x4ec], eax
jge 0x1000a912
mov dword [ebp - 0x768], 1
jmp 0x1000a919
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
neg eax
cmp eax, 1
jle 0x1000a93e
mov dword [ebp - 0x4f4], 1
jmp 0x1000a945
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x4f4], eax
jl 0x1000a95f
mov dword [ebp - 0x6a0], 1
jmp 0x1000a966
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x4fc]
add eax, dword [ebp - 0x6a0]
je 0x1000a989
cmp dword [ebp - 0x4fc], 0
je 0x1000a989
mov dword [ebp - 0x504], 1
jmp 0x1000a990
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x7d0]
imul eax, dword [ebp - 0x504]
cmp eax, 0xffff
jbe 0x1000a9b9
cmp dword [ebp - 0x330], 0
je 0x1000a9b9
mov dword [ebp - 0x50c], 1
jmp 0x1000a9c0
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x6a8]
cmp dword [ebp - 0x50c], eax
jge 0x1000a9da
mov dword [ebp - 0x770], 1
jmp 0x1000a9e1
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x144], 0
jmp 0x1000aa06
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 1
jg 0x1000aa3f
mov dword [ebp - 0x174], 0
jmp 0x1000aa28
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 1
jg 0x1000aa3d
mov dword [ebp - 0xc8], 0xfffffffb
jmp 0x1000aa1b
jmp 0x1000a9f9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9cc]
call fcn.10015472
mov dword [ebp - 0x58], 0xfd41
mov dword [ebp - 0xd38], 0xe216
mov dword [ebp - 0xd34], 0xe216
mov dword [ebp - 0xd30], 0xe216
mov dword [ebp - 0xd2c], 0xe216
mov dword [ebp - 0x134], 4
mov dword [ebp - 0x288], 0
jmp 0x1000aaa0
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x1000aabc
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x2f8], 1
jmp 0x1000aa93
cmp dword [ebp - 0x58], 0
je 0x1000aade
mov dword [ebp - 0x514], 0xd9a924c0
mov eax, dword [ebp - 0x514]
dec eax
mov dword [ebp - 0x514], eax
jmp 0x1000adb2
mov dword [ebp - 0x3c], 0xfffffffb
mov dword [ebp - 0x58], 0
jmp 0x1000aaf5
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x17
jle 0x1000aca3
mov dword [ebp - 0x18c], 0xf9c7
mov dword [ebp - 0x2b8], 0x10f1939
mov dword [ebp - 0x52c], 0x98934ec
mov dword [ebp - 0x974], 0x264a3a20
cmp dword [ebp - 0x18c], 0
je 0x1000ab3c
mov dword [ebp - 0x6b0], 1
jmp 0x1000ab43
and dword [ebp - 0x6b0], 0
imul eax, dword [ebp - 0x6b0], 0xb09c
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xb48], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x18c]
imul eax, ecx
test eax, eax
je 0x1000ab8e
cmp dword [ebp - 0x18c], 0
je 0x1000ab8e
mov dword [ebp - 0x51c], 1
jmp 0x1000ab95
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x51c]
jg 0x1000abac
mov dword [ebp - 0x838], 1
jmp 0x1000abb3
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x838], eax
jle 0x1000abca
mov dword [ebp - 0x524], 1
jmp 0x1000abd1
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
mov dword [ebp - 0x2b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x2b8], eax
jge 0x1000abfe
mov dword [ebp - 0x6b8], 1
jmp 0x1000ac05
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
sub eax, dword [ebp - 0x18c]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x52c], eax
cmp dword [ebp - 0x52c], 0
je 0x1000ac47
cmp dword [ebp - 0x2b8], 0
je 0x1000ac47
mov dword [ebp - 0x778], 1
jmp 0x1000ac4e
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0xffffffff
jl 0x1000ac63
mov dword [ebp - 0x534], 1
jmp 0x1000ac6a
and dword [ebp - 0x534], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp eax, dword [ebp - 0x534]
jg 0x1000ac8b
mov dword [ebp - 0x6c0], 1
jmp 0x1000ac92
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x974], eax
jmp 0x1000aaee
mov dword [ebp - 0x134], 3
jmp 0x1000acbc
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jl 0x1000adb2
mov dword [ebp - 0xb50], 1
mov dword [ebp - 0x58], 3
jmp 0x1000ace3
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1000adad
mov dword [ebp - 0x1f0], 0
jmp 0x1000ad06
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x1000ad22
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xa0c], 0x9ab67338
jmp 0x1000acf9
mov dword [ebp - 0x3c], 0
jmp 0x1000ad32
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x1000ad8d
mov byte [ebp - 0x115], 0
movzx eax, byte [ebp - 0x115]
test eax, eax
je 0x1000ad6a
push 0
push 0x837
push 0x121c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1000ad8b
push 0x2316
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_OpenServiceW]
jmp 0x1000ad2b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa0c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa0c], eax
jmp 0x1000acdc
jmp 0x1000acaf
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000add1
push 0x854
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [ebp - 0x70], 0xfd41
mov dword [ebp - 0xd4c], 0xe216
mov dword [ebp - 0xd48], 0xe216
mov dword [ebp - 0xd44], 0xe216
mov dword [ebp - 0xd40], 0xe216
mov dword [ebp - 0x154], 4
mov dword [ebp - 0x290], 0
jmp 0x1000ae23
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 1
jge 0x1000ae3f
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x318], 1
jmp 0x1000ae16
cmp dword [ebp - 0x70], 0
je 0x1000ae61
mov dword [ebp - 0x53c], 0xd9a924c0
mov eax, dword [ebp - 0x53c]
dec eax
mov dword [ebp - 0x53c], eax
jmp 0x1000b135
mov dword [ebp - 0x44], 0xfffffffb
mov dword [ebp - 0x70], 0
jmp 0x1000ae78
cmp dword [ebp - 0x70], 0x17
jle 0x1000b026
mov dword [ebp - 0x17c], 0xf9c7
mov dword [ebp - 0x2c0], 0x10f1939
mov dword [ebp - 0x554], 0x98934ec
mov dword [ebp - 0x8c4], 0x264a3a20
cmp dword [ebp - 0x17c], 0
je 0x1000aebf
mov dword [ebp - 0x7d8], 1
jmp 0x1000aec6
and dword [ebp - 0x7d8], 0
imul eax, dword [ebp - 0x7d8], 0xb09c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0xb58], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x17c]
imul eax, ecx
test eax, eax
je 0x1000af11
cmp dword [ebp - 0x17c], 0
je 0x1000af11
mov dword [ebp - 0x544], 1
jmp 0x1000af18
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x544]
jg 0x1000af2f
mov dword [ebp - 0x6c8], 1
jmp 0x1000af36
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x6c8], eax
jle 0x1000af4d
mov dword [ebp - 0x54c], 1
jmp 0x1000af54
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0x54c]
mov dword [ebp - 0x2c0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x2c0], eax
jge 0x1000af81
mov dword [ebp - 0x780], 1
jmp 0x1000af88
and dword [ebp - 0x780], 0
mov eax, dword [ebp - 0x780]
sub eax, dword [ebp - 0x17c]
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x554], eax
cmp dword [ebp - 0x554], 0
je 0x1000afca
cmp dword [ebp - 0x2c0], 0
je 0x1000afca
and dword [ebp - 0x6d0], 0
cmp dword [ebp - 0x6d0], 0xffffffff
jl 0x1000afe6
mov dword [ebp - 0x154], 3
jmp 0x1000b03f
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x1000b135
mov dword [ebp - 0xb60], 1
mov dword [ebp - 0x70], 3
jmp 0x1000b066
cmp dword [ebp - 0x70], 0
jl 0x1000b130
mov dword [ebp - 0x244], 0
jmp 0x1000b089
cmp dword [ebp - 0x244], 2
jge 0x1000b0a5
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xa14], 0x9ab67338
jmp 0x1000b07c
mov dword [ebp - 0x44], 0
jmp 0x1000b0b5
jmp 0x1000b032
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000b154
push 0x854
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
mov dword [ebp - 0xd0], 0xde21
mov dword [ebp - 0xd8], 0xffffffff
push 4
lea ecx, [ebp - 0x834]
call fcn.1001540a
mov dword [ebp - 4], 8
mov dword [ebp - 0x328], 0x4a0d461e
mov dword [ebp - 0x564], 0x299fa9ef
mov dword [ebp - 0x56c], 0x7972e7eb
mov dword [ebp - 0x300], 0x402be2ff
push 1
lea ecx, [ebp - 0xab8]
call fcn.1001540a
mov byte [ebp - 4], 9
mov dword [ebp - 0x8dc], 0xffffffff
mov dword [ebp - 0x924], 7
mov dword [ebp - 0x64], 0
jmp 0x1000b1d9
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x1000b1f5
push dword [ebp - 0x64]
lea ecx, [ebp - 0x834]
call fcn.10015477
mov dword [eax], 0xa095a979
jmp 0x1000b1d2
mov dword [ebp - 0x64], 0
jmp 0x1000b205
cmp dword [ebp - 0x64], 1
jge 0x1000b221