Function at 0x10008f05
Capabilities:
Create pipe
Get geographical location

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe60
push esi
push edi
mov dword [ebp - 0xc5c], 0x5dce
mov dword [ebp - 0xaf4], 0xfffffffe
mov dword [ebp - 0xafc], 0xffffffff
mov dword [ebp - 0xb04], 0xfffffffc
mov dword [ebp - 0xb0c], 0xe31d8329
mov dword [ebp - 0xb14], 1
mov dword [ebp - 0xb1c], 0x144ad72d
mov dword [ebp - 0xb24], 7
mov dword [ebp - 0xb2c], 1
mov dword [ebp - 0xb34], 0xffffffff
mov dword [ebp - 0xb3c], 0
mov dword [ebp - 0xb44], 0x1d11
mov dword [ebp - 0x400], 0xfffffffe
mov dword [ebp - 0x1d8], 0
jmp 0x10008fab
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 4
jge 0x10008fc7
mov eax, dword [ebp - 0x1d8]
mov dword [ebp + eax*4 - 0xe40], 0
jmp 0x10008f9e
mov eax, dword [ebp - 0x400]
dec eax
mov dword [ebp - 0x400], eax
mov dword [ebp - 0xb4c], 0x5dce
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0x250], 0
jmp 0x10009001
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 3
jge 0x1000901d
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xd58], 0x48bb
jmp 0x10008ff4
mov dword [ebp - 0x140], 0
jmp 0x10009036
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jge 0x10009052
mov eax, dword [ebp - 0x140]
mov dword [ebp + eax*4 - 0xd58], 1
jmp 0x10009029
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000907f
push 0x19d8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0xb54], 0xfffffffe
mov dword [ebp - 0xbc0], 0xffffffff
mov dword [ebp - 0xbc8], 0xfffffffc
mov dword [ebp - 0xbd0], 0xe31d8329
mov dword [ebp - 0x170], 0xd4e06482
mov dword [ebp - 0x100], 0x116e074f
mov dword [ebp - 0x38], 0
jmp 0x100090cb
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x100090e1
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x2b8], 0xffffffff
jmp 0x100090c4
mov dword [ebp - 0x38], 0
jmp 0x100090f1
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10009107
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xe24], 0x2e5664dc
jmp 0x100090ea
mov dword [ebp - 0x170], 0
jmp 0x10009120
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 0xffffffff
je 0x100091cb
mov dword [ebp - 0xbd8], 9
mov dword [ebp - 0xbe0], 0x7cccaea0
mov dword [ebp - 0xd04], 4
mov dword [ebp - 0xd00], 4
mov dword [ebp - 0xcfc], 4
mov dword [ebp - 0xcf8], 4
mov dword [ebp - 0x210], 0
jmp 0x10009182
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jge 0x1000919e
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0xbe8], 1
jmp 0x10009175
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2b8], eax
mov eax, dword [ebp - 0x100]
dec eax
mov dword [ebp - 0x100], eax
jmp 0x10009113
mov dword [ebp - 0x100], 0
jmp 0x100091e4
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
jg 0x1000920c
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1000920a
push 0x20a2
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x100091d7
mov dword [ebp - 0xbf0], 1
mov dword [ebp - 0x2c8], 0x73bf38c0
mov dword [ebp - 0x724], 8
mov dword [ebp - 0x73c], 0xfffe
mov dword [ebp - 0x2d0], 0xbffbefa5
mov dword [ebp - 0x264], 0xfffffffb
mov dword [ebp - 0x81c], 1
mov dword [ebp - 0x7c], 0
jmp 0x10009262
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x10009278
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x960], 1
jmp 0x1000925b
mov dword [ebp - 0x7c], 0
jmp 0x10009288
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x1000929e
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x7dc], 0xfffffff6
jmp 0x10009281
mov dword [ebp - 0x724], 0xb101aae
cmp dword [ebp - 0x724], 0
je 0x100092cd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x960], 0
je 0x100092cd
mov dword [ebp - 0x2c0], 1
jmp 0x100092d4
and dword [ebp - 0x2c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x960]
cmp eax, dword [ebp - 0x2c0]
jle 0x100092f5
mov dword [ebp - 0x72c], 1
jmp 0x100092fc
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x73c]
cmp dword [ebp - 0x72c], eax
jne 0x10009316
mov dword [ebp - 0x734], 1
jmp 0x1000931d
and dword [ebp - 0x734], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x960]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x734]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x264]
cmp dword [ebp - 0x2d0], eax
jle 0x1000935c
mov dword [ebp - 0x2d8], 1
jmp 0x10009363
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 0x73c]
cmp dword [ebp - 0x2d8], eax
jge 0x1000937d
mov dword [ebp - 0x744], 1
jmp 0x10009384
and dword [ebp - 0x744], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7dc]
cmp dword [ebp - 0x744], eax
jle 0x100093a5
mov dword [ebp - 0x2e0], 1
jmp 0x100093ac
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
je 0x100093dd
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x960], 0
je 0x100093dd
mov dword [ebp - 0x74c], 1
jmp 0x100093e4
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
mov dword [ebp - 0x81c], eax
mov dword [ebp - 0xbf8], 0x144ad72d
mov dword [ebp - 0x24], 0x8a137b18
mov dword [ebp - 0x754], 0x187110e6
mov dword [ebp - 0x178], 0x9740826f
mov dword [ebp - 0x40], 0
jmp 0x10009425
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000943b
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x9bc], 0x58900fdb
jmp 0x1000941e
mov dword [ebp - 0x40], 0
jmp 0x1000944b
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10009461
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x324], 1
jmp 0x10009444
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc00], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jne 0x10009487
mov dword [ebp - 0x2f0], 1
jmp 0x1000948e
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x24]
neg eax
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0x9bc], ecx
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x754], eax
mov eax, dword [ebp - 0x754]
cmp eax, dword [ebp - 0x2f0]
je 0x100094d2
mov dword [ebp - 0x75c], 1
jmp 0x100094d9
and dword [ebp - 0x75c], 0
cmp dword [ebp - 0x75c], 0
jae 0x100094ee
mov dword [ebp - 0x2f8], 1
jmp 0x100094f5
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2f8], eax
jle 0x1000950c
mov dword [ebp - 0x764], 1
jmp 0x10009513
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x764]
cmp eax, dword [ebp - 0x178]
jne 0x10009530
mov dword [ebp - 0x300], 1
jmp 0x10009537
and dword [ebp - 0x300], 0
cmp dword [ebp - 0x300], 0x4257
jne 0x1000954f
mov dword [ebp - 0x76c], 1
jmp 0x10009556
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x178]
cmp dword [ebp - 0x76c], eax
jg 0x10009570
mov dword [ebp - 0x668], 1
jmp 0x10009577
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x178], eax
jg 0x1000959a
mov dword [ebp - 0x30c], 1
jmp 0x100095a1
and dword [ebp - 0x30c], 0
cmp dword [ebp - 0x30c], 0x2e4ed383
jge 0x100095b9
mov dword [ebp - 0x560], 1
jmp 0x100095c0
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x560], eax
jg 0x100095d7
mov dword [ebp - 0x314], 1
jmp 0x100095de
and dword [ebp - 0x314], 0
imul eax, dword [ebp - 0x314], 0x47e0
test eax, eax
jne 0x100095fe
mov eax, 0xa8f1
test eax, eax
jne 0x100095fe
and dword [ebp - 0x554], 0
jmp 0x10009608
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x554]
jne 0x1000961f
mov dword [ebp - 0x31c], 1
jmp 0x10009626
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
add eax, 0xedb6
cmp eax, dword [ebp - 0x24]
jg 0x10009642
mov dword [ebp - 0x66c], 1
jmp 0x10009649
and dword [ebp - 0x66c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x66c]
mov dword [ebp + eax - 0x324], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x324]
mov dword [ebp + ecx - 0x9bc], eax
mov dword [ebp - 0xc10], 7
mov dword [ebp - 0xc18], 1
mov dword [ebp - 0xc20], 0xffffffff
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc6c], 0x1d11
mov dword [ebp - 0x55c], 0xfffffffe
mov dword [ebp - 0x258], 0
jmp 0x100096cb
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 4
jge 0x100096e7
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xe50], 0
jmp 0x100096be
mov eax, dword [ebp - 0x55c]
dec eax
mov dword [ebp - 0x55c], eax
mov dword [ebp - 0xc74], 0x5dce
mov dword [ebp - 0xc7c], 0xfffffffe
mov dword [ebp - 0xc84], 0xffffffff
mov dword [ebp - 0xc8c], 0xfffffffc
mov dword [ebp - 0xc94], 0xe31d8329
mov dword [ebp - 0xc9c], 1
mov dword [ebp - 0xca4], 0x144ad72d
mov dword [ebp - 0x120], 8
mov dword [ebp - 0x180], 0
jmp 0x1000975d
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 1
jge 0x10009779
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0x2a8], 1
jmp 0x10009750
mov dword [ebp - 0x120], 0
jmp 0x10009792
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 0
jl 0x100097f7
mov dword [ebp - 0x154], 0x8a137b18
mov dword [ebp - 0x154], 0
jmp 0x100097be
mov eax, dword [ebp - 0x154]
dec eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
jl 0x100097db
mov eax, dword [ebp - 0x154]
cmp dword [ebp + eax*4 - 0x2a8], 0
je 0x100097d9
jmp 0x100097db
jmp 0x100097b1
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x120]
mov eax, dword [ebp + eax*4 - 0x2a8]
mov dword [ebp + ecx*4 - 0x2a8], eax
jmp 0x10009785
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10009811
push 0
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0xcb8], 7
mov dword [ebp - 0xcc0], 1
mov dword [ebp - 0xcc8], 0xffffffff
mov dword [ebp - 0xcd0], 0
mov dword [ebp - 0x18], 0xbe1d925b
mov dword [ebp - 0x270], 0xfffffffa
mov dword [ebp - 0x33c], 0x2bf5f40e
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x82c], 1
mov dword [ebp - 0x218], 0
jmp 0x10009881
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 3
jge 0x1000989d
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xa18], 0x77cccaea
jmp 0x10009874
mov dword [ebp - 0x18], 0x8261f9c2
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
je 0x100098b8
mov dword [ebp - 0x32c], 1
jmp 0x100098bf
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x32c], eax
jl 0x100098d6
mov dword [ebp - 0x768], 1
jmp 0x100098dd
and dword [ebp - 0x768], 0
cmp dword [ebp - 0x768], 0xffff
ja 0x100098f5
mov dword [ebp - 0x334], 1
jmp 0x100098fc
and dword [ebp - 0x334], 0
imul eax, dword [ebp - 0x334], 0xa5ea
cmp eax, dword [ebp - 0x18]
jge 0x10009917
mov dword [ebp - 0x824], 1
jmp 0x1000991e
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0x33c]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0xa18]
neg eax
cmp eax, dword [ebp - 0x104]
jg 0x1000995f
mov dword [ebp - 0x564], 1
jmp 0x10009966
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x564]
sub eax, dword [ebp - 0x18]
sub eax, 9
cmp eax, dword [ebp - 0x33c]
je 0x10009986
mov dword [ebp - 0x670], 1
jmp 0x1000998d
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x670]
add eax, ecx
je 0x100099af
cmp dword [ebp - 0x18], 0
je 0x100099af
mov dword [ebp - 0x344], 1
jmp 0x100099b6
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x82c]
cmp dword [ebp - 0x344], eax
jge 0x100099d0
mov dword [ebp - 0x56c], 1
jmp 0x100099d7
and dword [ebp - 0x56c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x56c]
sub ecx, dword [ebp + eax - 0xa18]
je 0x10009a03
mov dword [ebp - 0x89c], 0x791f9e6a
mov eax, dword [ebp - 0x89c]
mov dword [ebp - 0x270], eax
jmp 0x10009a38
mov dword [ebp - 0x104], 0
jmp 0x10009a1c
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jge 0x10009a38
mov eax, dword [ebp - 0x104]
mov dword [ebp + eax*4 - 0xa18], 0x4d4e2095
jmp 0x10009a0f
mov dword [ebp - 0xce0], 0x1d11
mov dword [ebp - 0x34c], 0xfffffffe
mov dword [ebp - 0x14c], 0xffffffff
mov dword [ebp - 0x188], 0
jmp 0x10009a6f
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 3
jge 0x10009a8b
mov eax, dword [ebp - 0x188]
mov dword [ebp + eax*4 - 0xd70], 0x48bb
jmp 0x10009a62
mov dword [ebp - 0x14c], 0
jmp 0x10009aa4
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 3
jge 0x10009ac0
mov eax, dword [ebp - 0x14c]
mov dword [ebp + eax*4 - 0xd70], 1
jmp 0x10009a97
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x10009aed
push 0x19d8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
mov dword [ebp - 0x260], 0
jmp 0x10009b06
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 4
jge 0x10009b22
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xe60], 0
jmp 0x10009af9
mov eax, dword [ebp - 0x34c]
dec eax
mov dword [ebp - 0x34c], eax
mov dword [ebp - 0xce8], 0x3a4a
mov dword [ebp - 0xcf0], 8
mov dword [ebp - 0xa90], 0xfffffff9
mov dword [ebp - 0xbf4], 0xc9f3690f
mov dword [ebp - 0xa98], 0xfffffffc
mov dword [ebp - 0x6f0], 0xaa0a5dec
mov dword [ebp - 0x190], 0
jmp 0x10009b84
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 2
jge 0x10009ba0
mov eax, dword [ebp - 0x190]
mov dword [ebp + eax*4 - 0xd90], 0xa20bd035
jmp 0x10009b77
mov eax, dword [ebp - 0x6f0]
dec eax
mov dword [ebp - 0x6f0], eax
mov dword [ebp - 0xc90], 0x3a4a
mov dword [ebp - 0x25c], 0xd4e06482
mov dword [ebp - 0x124], 0x116e074f
mov dword [ebp - 0x70], 0
jmp 0x10009bdb
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x10009bf1
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x354], 0xffffffff
jmp 0x10009bd4
mov dword [ebp - 0x70], 0
jmp 0x10009c01
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10009c17
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xe30], 0x2e5664dc
jmp 0x10009bfa
mov dword [ebp - 0x25c], 0
jmp 0x10009c30
mov eax, dword [ebp - 0x25c]
dec eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 0xffffffff
je 0x10009cdb
mov dword [ebp - 0xaa0], 9
mov dword [ebp - 0xbfc], 0x7cccaea0
mov dword [ebp - 0xd18], 4
mov dword [ebp - 0xd14], 4
mov dword [ebp - 0xd10], 4
mov dword [ebp - 0xd0c], 4
mov dword [ebp - 0x198], 0
jmp 0x10009c92
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x10009cae
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xaa8], 1
jmp 0x10009c85
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x354], eax
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
jmp 0x10009c23
mov dword [ebp - 0x124], 0
jmp 0x10009cf4
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0
jg 0x10009d1c
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10009d1a
push 0x20a2
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
jmp 0x10009ce7
mov dword [ebp - 0xcd4], 8
mov dword [ebp - 0x364], 0x73bf38c0
mov dword [ebp - 0x574], 8
mov dword [ebp - 0x730], 0xfffe
mov dword [ebp - 0x36c], 0xbffbefa5
mov dword [ebp - 0x290], 0xfffffffb
mov dword [ebp - 0x8ac], 1
mov dword [ebp - 0x48], 0
jmp 0x10009d72
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10009d88
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x9b4], 1
jmp 0x10009d6b
mov dword [ebp - 0x48], 0
jmp 0x10009d98
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x10009dae
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x8a4], 0xfffffff6
jmp 0x10009d91
mov dword [ebp - 0x574], 0xb101aae
cmp dword [ebp - 0x574], 0
je 0x10009ddd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x9b4], 0
je 0x10009ddd
mov dword [ebp - 0x35c], 1
jmp 0x10009de4
and dword [ebp - 0x35c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9b4]
cmp eax, dword [ebp - 0x35c]
jle 0x10009e05
mov dword [ebp - 0x678], 1
jmp 0x10009e0c
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x730]
cmp dword [ebp - 0x678], eax
jne 0x10009e26
mov dword [ebp - 0x57c], 1
jmp 0x10009e2d
and dword [ebp - 0x57c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9b4]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
sub eax, dword [ebp - 0x57c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp - 0x290]
cmp dword [ebp - 0x36c], eax
jle 0x10009e6c
mov dword [ebp - 0x374], 1
jmp 0x10009e73
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x730]
cmp dword [ebp - 0x374], eax
jge 0x10009e8d
mov dword [ebp - 0x584], 1
jmp 0x10009e94
and dword [ebp - 0x584], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8a4]
cmp dword [ebp - 0x584], eax
jle 0x10009eb5
mov dword [ebp - 0x37c], 1
jmp 0x10009ebc
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0
je 0x10009eed
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x9b4], 0
je 0x10009eed
mov dword [ebp - 0x680], 1
jmp 0x10009ef4
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x8ac], eax
mov dword [ebp - 0xab0], 0xfffffff9
mov dword [ebp - 0x2c], 0x8a137b18
mov dword [ebp - 0x58c], 0x187110e6
mov dword [ebp - 0x224], 0x9740826f
mov dword [ebp - 0x84], 0
jmp 0x10009f3e
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 2
jge 0x10009f5a
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x9c4], 0x58900fdb
jmp 0x10009f31
mov dword [ebp - 0x84], 0
jmp 0x10009f73
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10009f8f
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x690], 1
jmp 0x10009f66
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], eax
jne 0x10009fb5
mov dword [ebp - 0x38c], 1
jmp 0x10009fbc
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x2c]
neg eax
mov dword [ebp - 0x384], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax - 0x9c4], ecx
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x58c]
cmp eax, dword [ebp - 0x38c]
je 0x1000a000
mov dword [ebp - 0x6f8], 1
jmp 0x1000a007
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0
jae 0x1000a01c
mov dword [ebp - 0x394], 1
jmp 0x1000a023
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x394], eax
jle 0x1000a03a
mov dword [ebp - 0x594], 1
jmp 0x1000a041
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x594]
cmp eax, dword [ebp - 0x224]
jne 0x1000a05e
mov dword [ebp - 0x39c], 1
jmp 0x1000a065
and dword [ebp - 0x39c], 0
cmp dword [ebp - 0x39c], 0x4257
jne 0x1000a07d
mov dword [ebp - 0x688], 1
jmp 0x1000a084
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x688], eax
jg 0x1000a09e
mov dword [ebp - 0x3a4], 1
jmp 0x1000a0a5
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x224], eax
jg 0x1000a0c8
mov dword [ebp - 0x59c], 1
jmp 0x1000a0cf
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x59c], 0x2e4ed383
jge 0x1000a0e7
mov dword [ebp - 0x3ac], 1
jmp 0x1000a0ee
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x3ac], eax
jg 0x1000a105
mov dword [ebp - 0x750], 1
jmp 0x1000a10c
and dword [ebp - 0x750], 0
imul eax, dword [ebp - 0x750], 0x47e0
test eax, eax
jne 0x1000a12c
mov eax, 0xa8f1
test eax, eax
jne 0x1000a12c
and dword [ebp - 0x3b4], 0
jmp 0x1000a136
mov dword [ebp - 0x3b4], 1
mov eax, dword [ebp - 0x2c]
cmp eax, dword [ebp - 0x3b4]
jne 0x1000a14d
mov dword [ebp - 0x5a4], 1
jmp 0x1000a154
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
add eax, 0xedb6
cmp eax, dword [ebp - 0x2c]
jg 0x1000a170
mov dword [ebp - 0x3bc], 1
jmp 0x1000a177
and dword [ebp - 0x3bc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0x690], ecx
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax - 0x690]
mov dword [ebp + ecx - 0x9c4], eax
mov dword [ebp - 0xc98], 0xc9f3690f
mov dword [ebp - 0xac0], 0xfffffffc
mov dword [ebp - 0x3c4], 0xaa0a5dec
mov dword [ebp - 0x1a0], 0
jmp 0x1000a1db
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 2
jge 0x1000a1f7
mov eax, dword [ebp - 0x1a0]
mov dword [ebp + eax*4 - 0xe08], 0xa20bd035
jmp 0x1000a1ce
mov eax, dword [ebp - 0x3c4]
dec eax
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0xbc], 0xbac64a68
mov dword [ebp - 0xbc], 0
jmp 0x1000a227
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0xfffffff9
je 0x1000a420
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x278], 1
mov dword [ebp - 0x2a0], 0x22401dbd
mov dword [ebp - 0x698], 0xfffffffe
mov dword [ebp - 0x244], 0
jmp 0x1000a275
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 4
jge 0x1000a291
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xda0], 0x4a938f73
jmp 0x1000a268
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xac8], eax
cmp dword [ebp - 0x10c], 0
jne 0x1000a2be
mov dword [ebp - 0x8e8], 1
jmp 0x1000a2c5
and dword [ebp - 0x8e8], 0
push 3
pop eax
test eax, eax
je 0x1000a2d5
cmp dword [ebp - 0x10c], 0
jne 0x1000a2e7
cmp dword [ebp - 0x10c], 0
jne 0x1000a2e7
and dword [ebp - 0x5ac], 0
jmp 0x1000a2f1
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x5ac]
sub eax, 0xa4c
cmp eax, 0x6c4a
jg 0x1000a30f
mov dword [ebp - 0x3cc], 1
jmp 0x1000a316
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 0xfce6
jge 0x1000a32e
mov dword [ebp - 0x700], 1
jmp 0x1000a335
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x700], eax
jl 0x1000a34f
mov dword [ebp - 0x3d4], 1
jmp 0x1000a356
and dword [ebp - 0x3d4], 0
cmp dword [ebp - 0x3d4], 0x2daa
je 0x1000a36e
mov dword [ebp - 0x5b4], 1
jmp 0x1000a375
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x5b4], eax
jle 0x1000a398
cmp dword [ebp - 0x278], 0
je 0x1000a398
mov dword [ebp - 0x3dc], 1
jmp 0x1000a39f
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x2a0], eax
mov eax, dword [ebp - 0x278]
cmp dword [ebp - 0x2a0], eax
jle 0x1000a3c6
mov dword [ebp - 0x8f0], 1
jmp 0x1000a3cd
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0xd08], eax
mov dword [ebp - 0x698], 1
cmp dword [ebp - 0x698], 0
je 0x1000a401
cmp dword [ebp - 0x2a0], 0
je 0x1000a401
mov dword [ebp - 0x3e4], 1
jmp 0x1000a408
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0xda0], ecx
jmp 0x1000a21a
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xad0], 0x3a4a
mov dword [ebp - 0xc14], 8
mov dword [ebp - 0xad8], 0xfffffff9
mov dword [ebp - 0xca0], 0xc9f3690f
mov dword [ebp - 0xae0], 0xfffffffc
mov dword [ebp - 0x5bc], 0xaa0a5dec
mov dword [ebp - 0x1a8], 0
jmp 0x1000a481
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x1000a49d
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xdf0], 0xa20bd035
jmp 0x1000a474
mov eax, dword [ebp - 0x5bc]
dec eax
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x3ec], 0xfffffff9
mov dword [ebp - 0x22c], 0
jmp 0x1000a4d7
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x1000a4f3
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x784], 1
jmp 0x1000a4ca
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x784]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x88], 2
jmp 0x1000a51e
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jl 0x1000a81f
mov dword [ebp - 0x12c], 0xb8faaaeb
mov dword [ebp - 0x1b0], 0
jmp 0x1000a54e
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x1000a56a
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x7e8], 0x2b2faa96
jmp 0x1000a541
mov eax, dword [ebp - 0x88]
cmp dword [ebp + eax*4 - 0x784], 0
je 0x1000a57f
jmp 0x1000a81f
mov dword [ebp - 0x12c], 2
jmp 0x1000a598
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x1000a81a
mov dword [ebp - 0x10], 0x55595070
mov dword [ebp - 0x404], 0x3b83
mov dword [ebp - 0x254], 0
jmp 0x1000a5cf
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x1000a5eb
mov eax, dword [ebp - 0x254]
mov dword [ebp + eax*4 - 0x8b0], 0xfffffffd
jmp 0x1000a5c2
mov dword [ebp - 0x10], 2
jmp 0x1000a5fb
cmp dword [ebp - 0x10], 0
jl 0x1000a815
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x15c], 2
jmp 0x1000a628
cmp dword [ebp - 0x15c], 0
jl 0x1000a68d
jmp 0x1000a58b
jmp 0x1000a511
mov dword [ebp - 0xc4], 0xbac64a68
mov dword [ebp - 0xc4], 0
jmp 0x1000a842
cmp dword [ebp - 0xc4], 0xfffffff9
je 0x1000aa3b
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x280], 1
mov dword [ebp - 0x298], 0x22401dbd
mov dword [ebp - 0x5dc], 0xfffffffe
mov dword [ebp - 0x234], 0
jmp 0x1000a890
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 4
jge 0x1000a8ac
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0xdb0], 0x4a938f73
jmp 0x1000a883
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xaf0], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xc24], eax
cmp dword [ebp - 0x114], 0
jne 0x1000a8d9
mov dword [ebp - 0x7f0], 1
jmp 0x1000a8e0
and dword [ebp - 0x7f0], 0
push 3
pop eax
test eax, eax
je 0x1000a8f0
cmp dword [ebp - 0x114], 0
jne 0x1000a902
cmp dword [ebp - 0x114], 0
jne 0x1000a902
and dword [ebp - 0x708], 0
jmp 0x1000a90c
mov dword [ebp - 0x708], 1
mov eax, dword [ebp - 0x708]
sub eax, 0xa4c
cmp eax, 0x6c4a
jg 0x1000a92a
mov dword [ebp - 0x414], 1
jmp 0x1000a931
and dword [ebp - 0x414], 0
cmp dword [ebp - 0x414], 0xfce6
jge 0x1000a949
mov dword [ebp - 0x5d4], 1
jmp 0x1000a950
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x5d4], eax
jl 0x1000a96a
mov dword [ebp - 0x41c], 1
jmp 0x1000a971
and dword [ebp - 0x41c], 0
cmp dword [ebp - 0x41c], 0x2daa
je 0x1000a989
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0x24c], 0x57976326
mov dword [ebp - 0x1c0], 0
jmp 0x1000aa6a
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jge 0x1000aa86
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xdd0], 0
jmp 0x1000aa5d
mov dword [ebp - 0x24c], 1
jmp 0x1000aa9f
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0
jl 0x1000aad0
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000aace
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetBkColor]
jmp 0x1000aa92
mov dword [ebp - 0xcc], 0xbac64a68
mov dword [ebp - 0xcc], 0
jmp 0x1000aaf3
cmp dword [ebp - 0xcc], 0xfffffff9
je 0x1000acec
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x268], 0x22401dbd
mov dword [ebp - 0x5ec], 0xfffffffe
mov dword [ebp - 0x1c8], 0
jmp 0x1000ab41
cmp dword [ebp - 0x1c8], 4
jge 0x1000ab5d
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0xdc8], 0x4a938f73
jmp 0x1000ab34
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xb00], eax
cmp dword [ebp - 0x134], 0
jne 0x1000ab8a
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x710], 0xfffffff9
mov dword [ebp - 0x23c], 0
jmp 0x1000ad25
cmp dword [ebp - 0x23c], 3
jge 0x1000ad41
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x790], 1
jmp 0x1000ad18
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x790]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 2
jmp 0x1000ad6c