Function at 0x10008db5
Capabilities:
Get file attributes
Start service

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd74
push esi
push edi
mov dword [ebp - 0xf8], 0x2121f90e
mov dword [ebp - 0x2b4], 0xfffffff9
mov dword [ebp - 0x2f0], 0x197e
mov dword [ebp - 0xa3c], 5
mov dword [ebp - 0x2ac], 0
jmp 0x10008e01
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 2
jge 0x10008e1d
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xc08], 0x720b963a
jmp 0x10008df4
xor eax, eax
inc eax
je 0x10008e37
cmp dword [ebp - 0xf8], 0
je 0x10008e37
mov dword [ebp - 0x870], 1
jmp 0x10008e3e
and dword [ebp - 0x870], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x8bc], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8bc]
mov dword [ebp + eax - 0xc08], ecx
mov eax, dword [ebp - 0xf8]
imul eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x8bc], eax
je 0x10008e7e
mov dword [ebp - 0x8c4], 1
jmp 0x10008e85
and dword [ebp - 0x8c4], 0
mov dword [ebp - 0x2b4], 0xffff
mov eax, dword [ebp - 0x2b4]
cmp eax, dword [ebp - 0x8c4]
jne 0x10008ea9
mov dword [ebp - 0x8cc], 1
jmp 0x10008eb0
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x8cc]
jle 0x10008eca
mov dword [ebp - 0x978], 1
jmp 0x10008ed1
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xb78], eax
cmp dword [ebp - 0x2f0], 0
jne 0x10008ef8
cmp dword [ebp - 0x2b4], 0
jne 0x10008ef8
and dword [ebp - 0x8d4], 0
jmp 0x10008f02
mov dword [ebp - 0x8d4], 1
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x8d4], eax
jge 0x10008f1c
mov dword [ebp - 0xa34], 1
jmp 0x10008f23
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x2b4], eax
jne 0x10008f49
mov dword [ebp - 0x8dc], 1
jmp 0x10008f50
and dword [ebp - 0x8dc], 0
mov eax, dword [ebp - 0x8dc]
sub eax, 8
mov dword [ebp - 0xa3c], eax
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x10008f80
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0xb9c], 0x6b0f7383
mov dword [ebp - 0xba4], 0
mov dword [ebp - 0xbac], 0x9ac70c30
mov dword [ebp - 0xbb4], 0x4822b165
mov dword [ebp - 0xbbc], 0xfffffffa
mov dword [ebp - 0xbc4], 1
mov dword [ebp - 0x8e4], 0xf82baef6
mov dword [ebp - 0x2bc], 0
jmp 0x10008fdf
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 1
jge 0x10008ffb
mov eax, dword [ebp - 0x2bc]
mov dword [ebp + eax*4 - 0xbcc], 0xffffffff
jmp 0x10008fd2
mov eax, dword [ebp - 0x8e4]
dec eax
mov dword [ebp - 0x8e4], eax
mov dword [ebp - 0x104], 0x2121f90e
mov dword [ebp - 8], 0xb457102d
mov dword [ebp - 0xa6c], 0xc1dea90c
mov dword [ebp - 0x38], 0
jmp 0x10009033
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10009049
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x318], 0xd1af
jmp 0x1000902c
mov dword [ebp - 0x38], 0
jmp 0x10009059
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 4
jge 0x1000906f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x954], 7
jmp 0x10009052
push 2
pop eax
test eax, eax
je 0x100090f1
mov eax, dword [ebp - 8]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0xbe4], eax
mov eax, dword [ebp - 8]
inc eax
cmp dword [ebp - 8], eax
jle 0x100090a6
mov dword [ebp - 0xa44], 1
jmp 0x100090ad
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 8]
mov dword [ebp - 0xbec], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x318], 1
jge 0x100090d2
mov dword [ebp - 0x8ec], 1
jmp 0x100090d9
and dword [ebp - 0x8ec], 0
cmp dword [ebp - 0x8ec], 0x65c829ed
jge 0x100090f1
mov dword [ebp - 0x8f4], 1
jmp 0x100090f8
and dword [ebp - 0x8f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x8f4], eax
jle 0x10009119
mov dword [ebp - 0xa64], 1
jmp 0x10009120
and dword [ebp - 0xa64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
neg eax
cmp dword [ebp - 8], eax
jle 0x10009140
mov dword [ebp - 0x8fc], 1
jmp 0x10009147
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x954]
cmp dword [ebp - 0x8fc], eax
jl 0x10009180
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x1000917b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
jmp 0x1000939a
mov dword [ebp - 0x18c], 0xcab43068
mov dword [ebp - 8], 0
jmp 0x1000919a
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jg 0x1000939a
mov dword [ebp - 0xa74], 0x98a9a262
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x954]
mov ecx, dword [ebp - 8]
sub eax, dword [ebp + ecx*4 - 0x954]
cmp eax, dword [ebp - 0x18c]
jl 0x100091d6
mov dword [ebp - 0x398], 1
jmp 0x100091dd
and dword [ebp - 0x398], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x954]
sub eax, 0x6e8d3d18
mov ecx, dword [ebp - 8]
sub eax, dword [ebp + ecx*4 - 0x954]
jne 0x10009204
mov dword [ebp - 0x904], 1
jmp 0x1000920b
and dword [ebp - 0x904], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x954]
cmp dword [ebp - 0x904], eax
jle 0x1000922c
mov dword [ebp - 0x90c], 1
jmp 0x10009233
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x954]
cmp dword [ebp - 0x90c], eax
jle 0x10009251
mov dword [ebp - 0x934], 1
jmp 0x10009258
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x954]
mov ecx, dword [ebp - 0x934]
lea eax, [ecx + eax - 0x3a38c8a2]
test eax, eax
jne 0x1000927f
mov dword [ebp - 0x740], 1
jmp 0x10009286
and dword [ebp - 0x740], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x740]
sub ecx, dword [ebp + eax - 0x954]
mov eax, dword [ebp - 8]
cmp ecx, dword [ebp + eax*4 - 0x954]
jle 0x100092b1
mov dword [ebp - 0x6f4], 1
jmp 0x100092b8
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x6f4]
jle 0x100092d2
mov dword [ebp - 0x3a0], 1
jmp 0x100092d9
and dword [ebp - 0x3a0], 0
cmp dword [ebp - 0x3a0], 0
jg 0x100092ee
mov dword [ebp - 0x6fc], 1
jmp 0x100092f5
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x6fc], eax
jle 0x1000930c
mov dword [ebp - 0x3a8], 1
jmp 0x10009313
and dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3a8]
sub eax, dword [ebp - 0x18c]
cmp eax, 8
jne 0x10009339
cmp dword [ebp - 0x18c], 0
je 0x10009339
mov dword [ebp - 0x704], 1
jmp 0x10009340
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x18c]
cmp dword [ebp - 0x704], eax
je 0x1000935a
mov dword [ebp - 0x3b0], 1
jmp 0x10009361
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0x3b0], 0xffffffff
jge 0x10009376
mov dword [ebp - 0x70c], 1
jmp 0x1000937d
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0xa6c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0xa74], eax
jmp 0x10009193
mov dword [ebp - 0x2e4], 0xfffffff9
mov dword [ebp - 0x320], 0x197e
mov dword [ebp - 0xa8c], 5
mov dword [ebp - 0x2c4], 0
jmp 0x100093d1
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x100093ed
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xc14], 0x720b963a
jmp 0x100093c4
xor eax, eax
inc eax
je 0x10009407
cmp dword [ebp - 0x104], 0
je 0x10009407
mov dword [ebp - 0x3b8], 1
jmp 0x1000940e
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x714], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x714]
mov dword [ebp + eax - 0xc14], ecx
mov eax, dword [ebp - 0x104]
imul eax, dword [ebp - 0x104]
cmp dword [ebp - 0x714], eax
je 0x1000944e
mov dword [ebp - 0x3c0], 1
jmp 0x10009455
and dword [ebp - 0x3c0], 0
mov dword [ebp - 0x2e4], 0xffff
mov eax, dword [ebp - 0x2e4]
cmp eax, dword [ebp - 0x3c0]
jne 0x10009479
mov dword [ebp - 0x71c], 1
jmp 0x10009480
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x71c]
jle 0x1000949a
mov dword [ebp - 0xa7c], 1
jmp 0x100094a1
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbf4], eax
cmp dword [ebp - 0x320], 0
jne 0x100094c8
cmp dword [ebp - 0x2e4], 0
jne 0x100094c8
and dword [ebp - 0x3c8], 0
jmp 0x100094d2
mov dword [ebp - 0x3c8], 1
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x3c8], eax
jge 0x100094ec
mov dword [ebp - 0xa84], 1
jmp 0x100094f3
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0x320]
cmp dword [ebp - 0x2e4], eax
jne 0x10009519
mov dword [ebp - 0x724], 1
jmp 0x10009520
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x724]
sub eax, 8
mov dword [ebp - 0xa8c], eax
mov byte [ebp - 0x95], 0
movzx eax, byte [ebp - 0x95]
test eax, eax
je 0x10009550
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x60], 0xf2c29a3d
mov dword [ebp - 0x328], 0xd3f46721
mov dword [ebp - 0x3f0], 0xffffffff
mov dword [ebp - 0xa9c], 0xfffffffe
mov dword [ebp - 0x2ec], 0
jmp 0x1000958e
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jge 0x100095aa
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0x110], 0xaf1124f0
jmp 0x10009581
mov dword [ebp - 0x60], 0
jmp 0x100095ba
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jg 0x1000974c
mov dword [ebp - 0x2b8], 0xfffffff7
mov dword [ebp - 0xa94], 0xfffffffa
cmp dword [ebp - 0x328], 0
je 0x100095e6
jmp 0x1000974c
cmp dword [ebp - 0x2b8], 0
jne 0x10009629
cmp dword [ebp - 0x2b8], 0
je 0x10009604
mov dword [ebp - 0x3d0], 1
jmp 0x1000960b
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0x3d0], eax
je 0x10009629
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10009629
and dword [ebp - 0x72c], 0
jmp 0x10009633
mov dword [ebp - 0x72c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x72c], eax
jge 0x10009654
mov dword [ebp - 0x3d8], 1
jmp 0x1000965b
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x2b8]
cmp dword [ebp - 0x3d8], eax
jl 0x10009675
mov dword [ebp - 0x734], 1
jmp 0x1000967c
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x734]
sub eax, dword [ebp - 0x328]
add eax, dword [ebp - 0x60]
cmp eax, 0xe6768459
je 0x1000969e
mov dword [ebp - 0x3e0], 1
jmp 0x100096a5
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x3e0], eax
jne 0x100096cf
mov eax, 0x6fbfcc01
test eax, eax
je 0x100096cf
mov dword [ebp - 0x73c], 1
jmp 0x100096d6
and dword [ebp - 0x73c], 0
cmp dword [ebp - 0x73c], 0xef339200
jae 0x100096f0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x110], 0
push 0xfffffffffffffff8
pop eax
cmp eax, 0x5d64f689
ja 0x10009706
mov dword [ebp - 0x3e8], 1
jmp 0x1000970d
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0xa94]
imul eax, dword [ebp - 0x3e8]
cmp eax, 1
jg 0x10009731
mov eax, 0xc5a74d4b
test eax, eax
jne 0x10009731
and dword [ebp - 0x744], 0
jmp 0x1000973b
mov dword [ebp - 0x744], 1
mov eax, dword [ebp - 0x744]
mov dword [ebp - 0x3f0], eax
jmp 0x100095b3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0xc94], eax
cmp dword [ebp - 0x3f0], 0x2c6eb81f
jle 0x10009777
mov dword [ebp - 0x74c], 1
jmp 0x1000977e
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x74c]
dec eax
cmp eax, dword [ebp - 0x60]
jg 0x10009796
mov dword [ebp - 0x3f8], 1
jmp 0x1000979d
and dword [ebp - 0x3f8], 0
cmp dword [ebp - 0x3f8], 1
jne 0x100097cc
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x100097c7
push 0
push 0x1dd0
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x1000991a
mov dword [ebp - 0x754], 0x50190031
mov dword [ebp - 0x410], 0xffffffff
mov dword [ebp - 0x1dc], 0
jmp 0x100097f9
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 3
jge 0x10009815
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xce4], 0xfffffff9
jmp 0x100097ec
cmp dword [ebp - 0x328], 0
je 0x100098fb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
mov dword [ebp - 0xc9c], eax
mov dword [ebp - 0x754], 0x870c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x110]
cmp dword [ebp - 0x754], eax
je 0x10009860
mov dword [ebp - 0x400], 1
jmp 0x10009867
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x101e
jne 0x1000987f
mov dword [ebp - 0x75c], 1
jmp 0x10009886
and dword [ebp - 0x75c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xce4]
cmp dword [ebp - 0x75c], eax
jge 0x100098a7
mov dword [ebp - 0x330], 1
jmp 0x100098ae
and dword [ebp - 0x330], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x330]
mov dword [ebp + eax - 0xce4], ecx
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jb 0x100098db
mov dword [ebp - 0x408], 1
jmp 0x100098e2
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x408]
add eax, 0x4adcf861
je 0x100098fb
mov dword [ebp - 0x764], 1
jmp 0x10009902
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xa9c], eax
mov dword [ebp - 0x8c], 0x2121f90e
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x24], 0x55a44198
mov dword [ebp - 0x24c], 0xfffffff9
mov dword [ebp - 0x784], 0xe4ed
mov dword [ebp - 0xb1c], 1
mov dword [ebp - 0xb18], 1
mov dword [ebp - 0xb14], 1
mov dword [ebp - 0xb10], 1
mov dword [ebp - 0xaa4], 7
or eax, 0xffffffff
je 0x10009a38
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xca4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xcac], eax
mov eax, dword [ebp - 0x18]
inc eax
je 0x100099ae
mov eax, 0xcd333563
test eax, eax
je 0x100099ae
mov dword [ebp - 0x76c], 1
jmp 0x100099b5
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x76c], eax
jge 0x100099cc
mov dword [ebp - 0x418], 1
jmp 0x100099d3
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x418]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jl 0x100099f3
mov dword [ebp - 0x774], 1
jmp 0x100099fa
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x774], eax
jl 0x10009a11
mov dword [ebp - 0x420], 1
jmp 0x10009a18
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x18]
imul ecx, dword [ebp - 0x420], 0x3f91
imul eax, ecx
test eax, eax
je 0x10009a38
mov dword [ebp - 0x77c], 1
jmp 0x10009a3f
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0xcb4], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xcbc], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x24], eax
jl 0x10009a74
mov dword [ebp - 0x428], 1
jmp 0x10009a7b
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x428], eax
je 0x10009aa2
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x10009aa0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
jmp 0x10009aaf
mov eax, dword [ebp - 0x784]
dec eax
mov dword [ebp - 0x784], eax
mov dword [ebp - 0x24], 3
jmp 0x10009abf
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jl 0x10009b4a
mov dword [ebp - 0xac4], 0x2ae45661
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb1c]
mov dword [ebp - 0xcc4], eax
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x24c], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb1c]
cmp dword [ebp - 0x24c], eax
je 0x10009b0d
mov dword [ebp - 0x430], 1
jmp 0x10009b14
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0xb1c]
cmp eax, dword [ebp - 0x430]
jg 0x10009b32
mov dword [ebp - 0x78c], 1
jmp 0x10009b39
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0xac4], eax
jmp 0x10009ab8
mov dword [ebp - 0x27c], 0xfffffff9
mov dword [ebp - 0x58], 0x5c8094a
mov dword [ebp - 0x1e4], 0
jmp 0x10009b74
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x10009b90
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x254], 0x9b31
jmp 0x10009b67
mov dword [ebp - 0x58], 0
jmp 0x10009ba0
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jg 0x10009d52
mov dword [ebp - 0x1ec], 0xffffffff
mov dword [ebp - 0x7c], 0x7a98815c
mov dword [ebp - 0x184], 9
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x254]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x254]
mov dword [ebp - 0xcd4], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x1ec], eax
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x254]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x1ec]
add eax, dword [ebp - 0x7c]
je 0x10009ce8
mov dword [ebp - 0x338], 1
mov dword [ebp - 0x79c], 0
mov eax, 0x7bb0
test eax, eax
je 0x10009c90
cmp dword [ebp - 0x338], 0
jne 0x10009c3f
cmp dword [ebp - 0x7c], 0
jne 0x10009c3f
and dword [ebp - 0x438], 0
jmp 0x10009c49
mov dword [ebp - 0x438], 1
cmp dword [ebp - 0x338], 0x8c53
jne 0x10009c61
mov dword [ebp - 0x794], 1
jmp 0x10009c68
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x438]
add ecx, dword [ebp - 0x794]
imul eax, ecx
cmp eax, 0xa7eb8e13
je 0x10009c90
mov dword [ebp - 0x440], 1
jmp 0x10009c97
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp + eax*4 - 0x254]
add eax, dword [ebp - 0x440]
mov dword [ebp - 0x79c], eax
cmp dword [ebp - 0x79c], 0xfc0233fd
je 0x10009cc5
mov dword [ebp - 0x448], 1
jmp 0x10009ccc
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x338], 0
je 0x10009ce6
jmp 0x10009b99
jmp 0x10009d4d
mov dword [ebp - 0x184], 0
jmp 0x10009d01
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jg 0x10009d4d
cmp dword [ebp - 0x1ec], 0
je 0x10009d15
jmp 0x10009d4d
mov dword [ebp - 0x7c], 0
jmp 0x10009d25
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jg 0x10009d4b
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x10009d49
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
jmp 0x10009d1e
jmp 0x10009cf4
jmp 0x10009b99
mov dword [ebp - 0x348], 0x197e
mov dword [ebp - 0x19c], 0xe53d
mov dword [ebp - 0x25c], 0
jmp 0x10009d7f
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 1
jge 0x10009d9b
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xd20], 7
jmp 0x10009d72
mov dword [ebp - 0x19c], 0xa5d6c05b
mov dword [ebp - 0x19c], 0xffffffe2
jmp 0x10009dbe
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x18
jl 0x10009e1d
mov dword [ebp - 0x1f4], 0xfffffffb
mov dword [ebp - 0x1f4], 0
jmp 0x10009dea
mov eax, dword [ebp - 0x1f4]
dec eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0
jl 0x10009e1b
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10009e19
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
jmp 0x10009ddd
jmp 0x10009db1
mov dword [ebp - 0x984], 5
mov dword [ebp - 0x84], 0x91a049fe
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x40], 0
jmp 0x10009e48
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
jge 0x10009e5e
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x7bc], 0xffffffff
jmp 0x10009e41
mov dword [ebp - 0x40], 0
jmp 0x10009e6e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10009e84
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xb34], 0x6b5b3847
jmp 0x10009e67
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x10009ec4
push 0
push 0x1bdb
push 0
push 0
push 0x1f10
push 0x1c24
push 0x2609
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_ExtTextOutA]
mov dword [ebp - 0x84], 0
jmp 0x10009edd
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffee
je 0x1000a271
mov dword [ebp - 0x264], 0
jmp 0x10009f03
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x10009f1f
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x974], 0xfffffff7
jmp 0x10009ef6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x974], 0
jne 0x1000a04f
push 4
pop eax
shl eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x974]
cmp dword [ebp + eax - 0x974], ecx
jle 0x10009f5b
mov dword [ebp - 0x7a4], 1
jmp 0x10009f62
and dword [ebp - 0x7a4], 0
cmp dword [ebp - 0x7a4], 0xe525
jl 0x10009f7a
mov dword [ebp - 0x450], 1
jmp 0x10009f81
and dword [ebp - 0x450], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x974]
cmp dword [ebp - 0x450], eax
jl 0x10009fa2
mov dword [ebp - 0x7ac], 1
jmp 0x10009fa9
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x84]
imul ecx, dword [ebp - 0x7ac]
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb34]
jle 0x10009fda
mov dword [ebp - 0x458], 1
jmp 0x10009fe1
and dword [ebp - 0x458], 0
cmp dword [ebp - 0x458], 0xfa9b64fd
ja 0x10009ff9
mov dword [ebp - 0x7b4], 1
jmp 0x1000a000
and dword [ebp - 0x7b4], 0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7bc], 0x42374b1b
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x7b4]
add eax, 0x42374b1b
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xb34]
jg 0x1000a03b
mov dword [ebp - 0x460], 1
jmp 0x1000a042
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0
je 0x1000a23f
mov dword [ebp - 0x7e4], 0xffffffff
mov dword [ebp - 0x1fc], 0
jmp 0x1000a072
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 2
jge 0x1000a08e
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xab0], 0x116971db
jmp 0x1000a065
mov dword [ebp - 0x54], 0
jmp 0x1000a09e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x1000a232
mov dword [ebp - 0xad4], 0xfffffffb
mov dword [ebp - 0x488], 0xe54384f3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb34], 0
jne 0x1000a0d7
mov dword [ebp - 0x7cc], 1
jmp 0x1000a0de
and dword [ebp - 0x7cc], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb34], 0
je 0x1000a103
mov eax, 0x8e7ea1b1
test eax, eax
je 0x1000a103
mov dword [ebp - 0x7c4], 1
jmp 0x1000a10a
and dword [ebp - 0x7c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x84]
cmp dword [ebp + eax - 0xab0], ecx
jl 0x1000a12b
mov dword [ebp - 0x468], 1
jmp 0x1000a132
and dword [ebp - 0x468], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7bc]
cmp dword [ebp - 0x468], eax
jge 0x1000a153
mov dword [ebp - 0x470], 1
jmp 0x1000a15a
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x7c4]
cmp eax, dword [ebp - 0x470]
je 0x1000a174
mov dword [ebp - 0x478], 1
jmp 0x1000a17b
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x7cc]
cmp eax, dword [ebp - 0x478]
je 0x1000a195
mov dword [ebp - 0x7d4], 1
jmp 0x1000a19c
and dword [ebp - 0x7d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xab0]
cmp dword [ebp - 0x7d4], eax
jg 0x1000a1bd
mov dword [ebp - 0xacc], 1
jmp 0x1000a1c4
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0xad4]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xab0]
jne 0x1000a1ee
mov eax, 0xf5063f37
test eax, eax
je 0x1000a1ee
mov dword [ebp - 0x480], 1
jmp 0x1000a1f5
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x480], 0x7cdd5376
jl 0x1000a20d
mov dword [ebp - 0x7dc], 1
jmp 0x1000a214
and dword [ebp - 0x7dc], 0
imul eax, dword [ebp - 0x7dc], 6
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x7e4], eax
jmp 0x1000a097
cmp dword [ebp - 0x7e4], 0
je 0x1000a23d
jmp 0x1000a271
jmp 0x1000a26c
mov dword [ebp - 0x54], 0
jmp 0x1000a24f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x25
jle 0x1000a26c
mov dword [ebp - 0xadc], 0xffffffff
cmp dword [ebp - 0xadc], 0
je 0x1000a26a
jmp 0x1000a26c
jmp 0x1000a248
jmp 0x10009ed0
mov dword [ebp - 0x118], 0x7f0a
mov dword [ebp - 0x274], 8
mov dword [ebp - 0x204], 0x952f3411
mov dword [ebp - 0x350], 1
mov dword [ebp - 0x30c], 0
mov dword [ebp - 0x804], 1
mov dword [ebp - 0x4b0], 0xa0becc33
mov dword [ebp - 0xafc], 5
mov dword [ebp - 0x26c], 0
jmp 0x1000a2da
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 4
jge 0x1000a2f6
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xb6c], 0xfffffffa
jmp 0x1000a2cd
cmp dword [ebp - 0x118], 0
je 0x1000a312
push 9
pop eax
test eax, eax
je 0x1000a312
mov dword [ebp - 0x7ec], 1
jmp 0x1000a319
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x274], eax
jle 0x1000a33f
mov dword [ebp - 0x490], 1
jmp 0x1000a346
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0x9f36
jle 0x1000a35e
mov dword [ebp - 0x354], 1
jmp 0x1000a365
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax - 0xb6c], ecx
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x354], eax
jge 0x1000a391
mov dword [ebp - 0xae4], 1
jmp 0x1000a398
and dword [ebp - 0xae4], 0
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xd28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb6c]
imul eax, dword [ebp - 0x118]
cmp dword [ebp - 0x7ec], eax
jge 0x1000a3cc
mov dword [ebp - 0x498], 1
jmp 0x1000a3d3
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x204]
imul eax, dword [ebp - 0x498]
test eax, eax
jne 0x1000a3fc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb6c], 0
jne 0x1000a3fc
and dword [ebp - 0x7f4], 0
jmp 0x1000a406
mov dword [ebp - 0x7f4], 1
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0xd30], eax
mov eax, dword [ebp - 0x30c]
cmp dword [ebp - 0x118], eax
jl 0x1000a438
mov dword [ebp - 0x4a0], 1
jmp 0x1000a43f
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x274]
cmp dword [ebp - 0x4a0], eax
je 0x1000a459
mov dword [ebp - 0x4a8], 1
jmp 0x1000a460
and dword [ebp - 0x4a8], 0
imul eax, dword [ebp - 0x30c], 0x83e7
cmp eax, dword [ebp - 0x350]
jge 0x1000a47e
mov dword [ebp - 0x7fc], 1
jmp 0x1000a485
and dword [ebp - 0x7fc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp + eax - 0xb6c], ecx
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x4b0], eax
jne 0x1000a4bd
mov dword [ebp - 0xaec], 1
jmp 0x1000a4c4
and dword [ebp - 0xaec], 0
mov eax, dword [ebp - 0x30c]
mov dword [ebp - 0xd40], eax
mov eax, dword [ebp - 0x4a8]
sub eax, dword [ebp - 0x804]
sub eax, 0x494f
imul eax, dword [ebp - 0x204]
test eax, eax
je 0x1000a501
cmp dword [ebp - 0x274], 0
je 0x1000a501
mov dword [ebp - 0xaf4], 1
jmp 0x1000a508
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0xafc], eax
mov dword [ebp - 0x20c], 0
jmp 0x1000a52d
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1000a549
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xc20], 0x720b963a
jmp 0x1000a520
xor eax, eax
inc eax
je 0x1000a563
cmp dword [ebp - 0x8c], 0
je 0x1000a563
mov dword [ebp - 0x80c], 1
jmp 0x1000a56a
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x4b8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4b8]
mov dword [ebp + eax - 0xc20], ecx
mov eax, dword [ebp - 0x8c]
imul eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x4b8], eax
je 0x1000a5aa
mov dword [ebp - 0x814], 1
jmp 0x1000a5b1
and dword [ebp - 0x814], 0
mov dword [ebp - 0x27c], 0xffff
mov eax, dword [ebp - 0x27c]
cmp eax, dword [ebp - 0x814]
jne 0x1000a5d5
mov dword [ebp - 0x4c0], 1
jmp 0x1000a5dc
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x4c0]
jle 0x1000a5f6
mov dword [ebp - 0xaa0], 1
jmp 0x1000a5fd
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xd48], eax
cmp dword [ebp - 0x348], 0
jne 0x1000a624
cmp dword [ebp - 0x27c], 0
jne 0x1000a624
and dword [ebp - 0x81c], 0
jmp 0x1000a62e
mov dword [ebp - 0x81c], 1
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x81c], eax
jge 0x1000a648
mov dword [ebp - 0xa2c], 1
jmp 0x1000a64f
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0xd50], eax
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x27c], eax
jne 0x1000a675
mov dword [ebp - 0x4c8], 1
jmp 0x1000a67c
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
sub eax, 8
mov dword [ebp - 0x984], eax
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x214], 0
jmp 0x1000a6ae
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x1000a6ca
mov eax, dword [ebp - 0x214]
mov dword [ebp + eax*4 - 0x95c], 3
jmp 0x1000a6a1
mov dword [ebp - 0x94], 0
jmp 0x1000a6e3
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0xffffffea
jle 0x1000a8e3
mov dword [ebp - 0x284], 0
jmp 0x1000a709
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x1000a725
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0x2d0], 0xcdf98a59
jmp 0x1000a6fc
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2d0], 0xfffffff8
jmp 0x1000a753
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2d0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d0], 1
jle 0x1000a776
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x95c], 0x4ebb0cb8
jmp 0x1000a738
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x94], eax
jg 0x1000a790
mov dword [ebp - 0x824], 1
jmp 0x1000a797
and dword [ebp - 0x824], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x2d0]
add ecx, dword [ebp - 0x824]
imul eax, ecx
test eax, eax
je 0x1000a7d3
cmp dword [ebp - 0x94], 0
je 0x1000a7d3
mov dword [ebp - 0x988], 1
jmp 0x1000a7da
and dword [ebp - 0x988], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2d0], 0xf84255eb
je 0x1000a7f9
mov dword [ebp - 0x4d0], 1
jmp 0x1000a800
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xffffffff
jle 0x1000a825
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x95c], 0
je 0x1000a825
mov dword [ebp - 0x82c], 1
jmp 0x1000a82c
and dword [ebp - 0x82c], 0
cmp dword [ebp - 0x82c], 0
jne 0x1000a841
mov dword [ebp - 0x4d8], 1
jmp 0x1000a848
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x4d8]
sub ecx, dword [ebp + eax - 0x95c]
push 4
pop eax
shl eax, 0
imul ecx, dword [ebp + eax - 0x95c]
cmp ecx, 0x5d58
jne 0x1000a87d
mov dword [ebp - 0x834], 1
jmp 0x1000a884
and dword [ebp - 0x834], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2d0]
cmp eax, dword [ebp - 0x834]
je 0x1000a8a5
mov dword [ebp - 0x4e0], 1
jmp 0x1000a8ac
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x4225
jg 0x1000a8c4
mov dword [ebp - 0x83c], 1
jmp 0x1000a8cb
and dword [ebp - 0x83c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x83c]
mov dword [ebp + eax - 0x2d0], ecx
jmp 0x1000a6d6
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0x21c], 0
jmp 0x1000a906
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x1000a922
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xb40], 0xfffffffa
jmp 0x1000a8f9
mov dword [ebp - 0x9c], 2
jmp 0x1000a93b
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0
jl 0x1000a960
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0x9c]
mov eax, dword [ebp + eax*4 - 0xb40]
mov dword [ebp + ecx*4 - 0xb40], eax
jmp 0x1000a92e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xb40]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0xad], 0
mov dword [ebp - 0xd4c], 0x6b0f7383
mov dword [ebp - 0xb70], 0
mov dword [ebp - 0xc6c], 0x9ac70c30
mov dword [ebp - 0xb80], 0x4822b165
mov dword [ebp - 0xce8], 0xfffffffa
mov dword [ebp - 0xb88], 1
mov dword [ebp - 0x4e8], 0xf82baef6
mov dword [ebp - 0x28c], 0
jmp 0x1000a9d8
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 1
jge 0x1000a9f4
mov eax, dword [ebp - 0x28c]
mov dword [ebp + eax*4 - 0xc78], 0xffffffff
jmp 0x1000a9cb
mov eax, dword [ebp - 0x4e8]
dec eax
mov dword [ebp - 0x4e8], eax
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000aa1b
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_FlashWindow]
mov dword [ebp - 0x70], 0xf2c29a3d
mov dword [ebp - 0x2fc], 0xd3f46721
mov dword [ebp - 0x864], 0xffffffff
mov dword [ebp - 0x990], 0xfffffffe
mov dword [ebp - 0x224], 0
jmp 0x1000aa59
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 1
jge 0x1000aa75
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0x140], 0xaf1124f0
jmp 0x1000aa4c
mov dword [ebp - 0x70], 0
jmp 0x1000aa85
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jg 0x1000ac17
mov dword [ebp - 0x294], 0xfffffff7
mov dword [ebp - 0xa5c], 0xfffffffa
cmp dword [ebp - 0x2fc], 0
je 0x1000aab1
jmp 0x1000ac17
cmp dword [ebp - 0x294], 0
jne 0x1000aaf4
cmp dword [ebp - 0x294], 0
je 0x1000aacf
mov dword [ebp - 0x844], 1
jmp 0x1000aad6
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x844], eax
je 0x1000aaf4
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1000aaf4
and dword [ebp - 0x4f0], 0
jmp 0x1000aafe
mov dword [ebp - 0x4f0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x4f0], eax
jge 0x1000ab1f
mov dword [ebp - 0x84c], 1
jmp 0x1000ab26
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0x294]
cmp dword [ebp - 0x84c], eax
jl 0x1000ab40
mov dword [ebp - 0x4f8], 1
jmp 0x1000ab47
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x4f8]
sub eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x70]
cmp eax, 0xe6768459
je 0x1000ab69
mov dword [ebp - 0x854], 1
jmp 0x1000ab70
and dword [ebp - 0x854], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x854], eax
jne 0x1000ab9a
mov eax, 0x6fbfcc01
test eax, eax
je 0x1000ab9a
mov dword [ebp - 0x500], 1
jmp 0x1000aba1
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xef339200
jae 0x1000abbb
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x140], 0
push 0xfffffffffffffff8
pop eax
cmp eax, 0x5d64f689
ja 0x1000abd1
mov dword [ebp - 0x85c], 1
jmp 0x1000abd8
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0xa5c]
imul eax, dword [ebp - 0x85c]
cmp eax, 1
jg 0x1000abfc
mov eax, 0xc5a74d4b
test eax, eax
jne 0x1000abfc
and dword [ebp - 0x508], 0
jmp 0x1000ac06
mov dword [ebp - 0x508], 1
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x864], eax
jmp 0x1000aa7e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0xb90], eax
cmp dword [ebp - 0x864], 0x2c6eb81f
jle 0x1000ac42
mov dword [ebp - 0x510], 1
jmp 0x1000ac49
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
dec eax
cmp eax, dword [ebp - 0x70]
jg 0x1000ac61
mov dword [ebp - 0x86c], 1
jmp 0x1000ac68
and dword [ebp - 0x86c], 0
cmp dword [ebp - 0x86c], 1
jne 0x1000ac97
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1000ac92
push 0
push 0x1dd0
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
jmp 0x1000ade5
mov dword [ebp - 0x518], 0x50190031
mov dword [ebp - 0x884], 0xffffffff
mov dword [ebp - 0x22c], 0
jmp 0x1000acc4
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 3
jge 0x1000ace0
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0xcf4], 0xfffffff9
jmp 0x1000acb7
cmp dword [ebp - 0x2fc], 0
je 0x1000adc6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
mov dword [ebp - 0xd2c], eax
mov dword [ebp - 0x518], 0x870c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x140]
cmp dword [ebp - 0x518], eax
je 0x1000ad2b
mov dword [ebp - 0x874], 1
jmp 0x1000ad32
and dword [ebp - 0x874], 0
cmp dword [ebp - 0x874], 0x101e
jne 0x1000ad4a
mov dword [ebp - 0x520], 1
jmp 0x1000ad51
and dword [ebp - 0x520], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcf4]
cmp dword [ebp - 0x520], eax
jge 0x1000ad72
mov dword [ebp - 0x334], 1
jmp 0x1000ad79
and dword [ebp - 0x334], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x334]
mov dword [ebp + eax - 0xcf4], ecx
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jb 0x1000ada6
mov dword [ebp - 0x87c], 1
jmp 0x1000adad
and dword [ebp - 0x87c], 0
mov eax, dword [ebp - 0x87c]
add eax, 0x4adcf861
je 0x1000adc6
mov dword [ebp - 0x528], 1
jmp 0x1000adcd
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x884], eax
mov eax, dword [ebp - 0x884]
mov dword [ebp - 0x990], eax
mov dword [ebp - 0xa4], 0xfffffff6
mov dword [ebp - 0x64], 0xfffffff8
mov dword [ebp - 0x548], 0x718bd850
mov dword [ebp - 0xa50], 0x3d3b0cf5
cmp dword [ebp - 0xa4], 0
jne 0x1000aebf
cmp dword [ebp - 0xa4], 0
jne 0x1000ae5b
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xa4], eax
jg 0x1000ae37
mov dword [ebp - 0x530], 1
jmp 0x1000ae3e
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x530]
cmp eax, 0xa8fe
jle 0x1000ae5b
and dword [ebp - 0x88c], 0
jmp 0x1000ae65
mov dword [ebp - 0x88c], 1
cmp dword [ebp - 0x88c], 0x921e
jg 0x1000ae7d
mov dword [ebp - 0x538], 1
jmp 0x1000ae84
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0x64]
cmp dword [ebp - 0xa4], eax
jne 0x1000aea1
mov dword [ebp - 0x894], 1
jmp 0x1000aea8
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x894], eax
je 0x1000aebf
and dword [ebp - 0x540], 0
jmp 0x1000aec9
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xb691
jle 0x1000aee7
mov dword [ebp - 0x89c], 1
jmp 0x1000aeee
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x89c]
imul eax, eax, 0xe1fc
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0xa50], eax
mov dword [ebp - 0x64], 0x19
jmp 0x1000af23
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0xffffffe4
jle 0x1000af8f
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x1000af64
push 0x2c
push 0x21c9
push 0x97e
push 0x2598
push 0x177d
push 0x951
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RoundRect]
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000af8d
push 0x1df2
push 0x3d2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
jmp 0x1000af1c
mov dword [ebp - 0x180], 0xe53d8da8
mov dword [ebp - 0x998], 0xffff
mov dword [ebp - 0x8a4], 5
mov dword [ebp - 0x8b4], 0xab1943c6
cmp dword [ebp - 0x180], 0
jne 0x1000b074
mov eax, dword [ebp - 0x180]
sub eax, dword [ebp - 0x998]
mov dword [ebp - 0x8a4], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x180], eax
jge 0x1000aff0
mov dword [ebp - 0x550], 1
jmp 0x1000aff7
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x8a4]
cmp dword [ebp - 0x550], eax
je 0x1000b011
mov dword [ebp - 0x8ac], 1
jmp 0x1000b018
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0x8ac]
mov dword [ebp - 0x8b4], eax
cmp dword [ebp - 0x8b4], 0x1188
jg 0x1000b03c
mov dword [ebp - 0x56c], 1
jmp 0x1000b043
and dword [ebp - 0x56c], 0
imul eax, dword [ebp - 0x56c], 0x23a2
add eax, dword [ebp - 0x180]
jne 0x1000b074
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000b072
push 0x26de
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x1000b091
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000b091
push 0x16ef
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 4], 0xb457102d
mov dword [ebp - 0xa58], 0xc1dea90c
mov dword [ebp - 0x48], 0
jmp 0x1000b0b2
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 1
jge 0x1000b0c8
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x304], 0xd1af
jmp 0x1000b0ab
mov dword [ebp - 0x48], 0
jmp 0x1000b0d8
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 4
jge 0x1000b0ee
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x944], 7
jmp 0x1000b0d1
push 2
pop eax
test eax, eax
je 0x1000b170
mov eax, dword [ebp - 4]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xc84], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0xba0], eax
mov eax, dword [ebp - 4]
inc eax
cmp dword [ebp - 4], eax
jle 0x1000b125
mov dword [ebp - 0xae8], 1
jmp 0x1000b12c
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0xcf8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x304], 1
jge 0x1000b151
mov dword [ebp - 0x560], 1
jmp 0x1000b158
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0x65c829ed
jge 0x1000b170
mov dword [ebp - 0x8e8], 1
jmp 0x1000b177
and dword [ebp - 0x8e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
cmp dword [ebp - 0x8e8], eax
jle 0x1000b198
mov dword [ebp - 0x9a0], 1
jmp 0x1000b19f
and dword [ebp - 0x9a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x304]
neg eax
cmp dword [ebp - 4], eax
jle 0x1000b1bf
mov dword [ebp - 0x568], 1
jmp 0x1000b1c6
and dword [ebp - 0x568], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x944]
cmp dword [ebp - 0x568], eax
jl 0x1000b1ff
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000b1fa
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_HideCaret]
jmp 0x1000b419
mov dword [ebp - 0x1b4], 0xcab43068
mov dword [ebp - 4], 0
jmp 0x1000b219
cmp dword [ebp - 4], 3
jg 0x1000b419
mov dword [ebp - 0x9a8], 0x98a9a262
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x944]
mov ecx, dword [ebp - 4]
sub eax, dword [ebp + ecx*4 - 0x944]
cmp eax, dword [ebp - 0x1b4]
jl 0x1000b255
mov dword [ebp - 0x750], 1
jmp 0x1000b25c
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x944]
sub eax, 0x6e8d3d18
mov ecx, dword [ebp - 4]
sub eax, dword [ebp + ecx*4 - 0x944]
jne 0x1000b283
mov dword [ebp - 0x748], 1
jmp 0x1000b28a
and dword [ebp - 0x748], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x944]
cmp dword [ebp - 0x748], eax
jle 0x1000b2ab
mov dword [ebp - 0x570], 1
jmp 0x1000b2b2
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x944]
cmp dword [ebp - 0x570], eax
jle 0x1000b2d0
mov dword [ebp - 0x838], 1
jmp 0x1000b2d7
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x944]
mov ecx, dword [ebp - 0x838]
lea eax, [ecx + eax - 0x3a38c8a2]
test eax, eax
jne 0x1000b2fe
mov dword [ebp - 0x578], 1
jmp 0x1000b305
and dword [ebp - 0x578], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x578]
sub ecx, dword [ebp + eax - 0x944]
mov eax, dword [ebp - 4]
cmp ecx, dword [ebp + eax*4 - 0x944]
jle 0x1000b330
mov dword [ebp - 0x580], 1
jmp 0x1000b337
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x750]
cmp eax, dword [ebp - 0x580]
jle 0x1000b351
mov dword [ebp - 0x8b0], 1
jmp 0x1000b358
and dword [ebp - 0x8b0], 0
cmp dword [ebp - 0x8b0], 0
jg 0x1000b36d
mov dword [ebp - 0x6c], 0xf2c29a3d
mov dword [ebp - 0x308], 0xd3f46721
mov dword [ebp - 0x770], 0xffffffff
mov dword [ebp - 0x9b0], 0xfffffffe
mov dword [ebp - 0x29c], 0
jmp 0x1000b457
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1000b473
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x120], 0xaf1124f0
jmp 0x1000b44a
mov dword [ebp - 0x6c], 0
jmp 0x1000b483
cmp dword [ebp - 0x6c], 0
jg 0x1000b615
mov dword [ebp - 0x2a4], 0xfffffff7
mov dword [ebp - 0xaa8], 0xfffffffa
cmp dword [ebp - 0x308], 0
je 0x1000b4af
jmp 0x1000b615
cmp dword [ebp - 0x2a4], 0
jne 0x1000b4f2
cmp dword [ebp - 0x2a4], 0
je 0x1000b4cd
mov dword [ebp - 0x760], 1
jmp 0x1000b4d4
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x760], eax
je 0x1000b4f2
mov dword [ebp - 0x5a0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x5a0], eax
jge 0x1000b51d
mov dword [ebp - 0x908], 1
jmp 0x1000b524
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x908], eax
jl 0x1000b53e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
mov dword [ebp - 0xba8], eax
cmp dword [ebp - 0x770], 0x2c6eb81f
jle 0x1000b640
mov dword [ebp - 0x5c0], 1
jmp 0x1000b647
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
dec eax
cmp eax, dword [ebp - 0x6c]
jg 0x1000b65f
mov dword [ebp - 0x8b8], 1
jmp 0x1000b666
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 1
jne 0x1000b695
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x1000b690
mov dword [ebp - 0x5c8], 0x50190031
mov dword [ebp - 0x780], 0xffffffff
mov dword [ebp - 0x238], 0
jmp 0x1000b6c2