Function at 0x1000912f
Capabilities:
Enumerate gui resources
Get disk information
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x13ac
call fcn.1007f8f0
push esi
push edi
mov dword [ebp - 0x9c], 1
mov dword [ebp - 0xbac], 0x7f37c04c
mov dword [ebp - 0xbcc], 0xf05f4326
mov dword [ebp - 0xc04], 0xb8fa48a2
mov dword [ebp - 0xc2c], 0x11fb8eb5
mov dword [ebp - 0xd48], 0xabff5ecc
mov dword [ebp - 0x320], 0
jmp 0x10009193
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 4
jge 0x100091af
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0x12e4], 6
jmp 0x10009186
mov eax, dword [ebp - 0x9c]
sub eax, 0xb5486b6
jne 0x100091ce
mov eax, 0xaed
test eax, eax
jne 0x100091ce
and dword [ebp - 0xc80], 0
jmp 0x100091d8
mov dword [ebp - 0xc80], 1
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xfb4], eax
push 0xfffffffffffffffc
pop eax
cmp eax, 0xfffffffa
jne 0x100091f8
mov dword [ebp - 0xd40], 1
jmp 0x100091ff
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x10b4], eax
cmp dword [ebp - 0x9c], 0
jne 0x10009226
cmp dword [ebp - 0x9c], 0
jne 0x10009226
and dword [ebp - 0xa50], 0
jmp 0x10009230
mov dword [ebp - 0xa50], 1
cmp dword [ebp - 0xa50], 0x94ab
jg 0x10009248
mov dword [ebp - 0xbb4], 1
jmp 0x1000924f
and dword [ebp - 0xbb4], 0
mov dword [ebp - 0xbac], 1
mov eax, dword [ebp - 0xbac]
add eax, dword [ebp - 0xbb4]
cmp eax, dword [ebp - 0x9c]
jg 0x10009279
mov dword [ebp - 0xbbc], 1
jmp 0x10009280
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0x9c]
cmp eax, dword [ebp - 0xbbc]
jle 0x1000929a
mov dword [ebp - 0xbc4], 1
jmp 0x100092a1
and dword [ebp - 0xbc4], 0
mov eax, dword [ebp - 0xbc4]
mov dword [ebp - 0xbcc], eax
mov eax, dword [ebp - 0xbcc]
mov dword [ebp - 0xc04], eax
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0xc04], eax
jne 0x100092d3
mov dword [ebp - 0xc0c], 1
jmp 0x100092da
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0xc0c]
mov dword [ebp - 0xc2c], eax
mov eax, dword [ebp - 0xc2c]
add eax, dword [ebp - 0x9c]
mov dword [ebp - 0xc18], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xc18]
mov dword [ebp + eax - 0x12e4], ecx
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0xd48], eax
mov byte [ebp - 0x126], 0
movzx eax, byte [ebp - 0x126]
test eax, eax
je 0x10009336
push 0x24a3
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0xdc], 0
jmp 0x1000934f
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 2
jge 0x1000936b
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0x129c], 0x26bdde0b
jmp 0x10009342
mov dword [ebp - 0xdc], 0
jmp 0x10009384
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x100093a0
mov eax, dword [ebp - 0xdc]
mov dword [ebp + eax*4 - 0xe44], 0xbe8e56f9
jmp 0x10009377
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe44], 1
jmp 0x100093ce
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe44]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe44], 0
jl 0x10009463
mov dword [ebp - 0x32c], 0x23ed15d
mov byte [ebp - 0x129], 0
movzx eax, byte [ebp - 0x129]
test eax, eax
je 0x10009408
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x32c], 0
jmp 0x10009421
mov eax, dword [ebp - 0x32c]
inc eax
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 1
jg 0x1000945e
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1000945c
push 0
push 0x12c3
push 0xbc8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x10009414
jmp 0x100093b3
mov byte [ebp - 0x12b], 0
movzx eax, byte [ebp - 0x12b]
test eax, eax
je 0x10009484
push 0
push 0x3df
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov dword [ebp - 0xa4], 1
mov dword [ebp - 0x904], 0x7f37c04c
mov dword [ebp - 0x914], 0xf05f4326
mov dword [ebp - 0x468], 0xb8fa48a2
mov dword [ebp - 0x470], 0x11fb8eb5
mov dword [ebp - 0xd60], 0xabff5ecc
mov dword [ebp - 0x24c], 0
jmp 0x100094d9
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 4
jge 0x100094f5
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0x1344], 6
jmp 0x100094cc
mov eax, dword [ebp - 0xa4]
sub eax, 0xb5486b6
jne 0x10009514
mov eax, 0xaed
test eax, eax
jne 0x10009514
and dword [ebp - 0xd50], 0
jmp 0x1000951e
mov dword [ebp - 0xd50], 1
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x1040], eax
push 0xfffffffffffffffc
pop eax
cmp eax, 0xfffffffa
jne 0x1000953e
mov dword [ebp - 0xd58], 1
jmp 0x10009545
and dword [ebp - 0xd58], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x10a4], eax
cmp dword [ebp - 0xa4], 0
jne 0x1000956c
cmp dword [ebp - 0xa4], 0
jne 0x1000956c
and dword [ebp - 0x990], 0
jmp 0x10009576
mov dword [ebp - 0x990], 1
cmp dword [ebp - 0x990], 0x94ab
jg 0x1000958e
mov dword [ebp - 0x458], 1
jmp 0x10009595
and dword [ebp - 0x458], 0
mov dword [ebp - 0x904], 1
mov eax, dword [ebp - 0x904]
add eax, dword [ebp - 0x458]
cmp eax, dword [ebp - 0xa4]
jg 0x100095bf
mov dword [ebp - 0x90c], 1
jmp 0x100095c6
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0xa4]
cmp eax, dword [ebp - 0x90c]
jle 0x100095e0
mov dword [ebp - 0x460], 1
jmp 0x100095e7
and dword [ebp - 0x460], 0
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x914], eax
mov eax, dword [ebp - 0x914]
mov dword [ebp - 0x468], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x468], eax
jne 0x10009619
mov dword [ebp - 0x91c], 1
jmp 0x10009620
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
add eax, dword [ebp - 0xa4]
mov dword [ebp - 0x924], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x924]
mov dword [ebp + eax - 0x1344], ecx
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0xd60], eax
mov byte [ebp - 0x1a1], 0
movzx eax, byte [ebp - 0x1a1]
test eax, eax
je 0x1000967c
push 0x24a3
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0xd7c], 0
mov dword [ebp - 0x140], 0xd8169b41
mov dword [ebp - 0x344], 0x7b364fe
mov dword [ebp - 0x2e0], 0
jmp 0x100096bd
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 1
jge 0x100096d9
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x2e8], 0x48261f9c
jmp 0x100096b0
mov dword [ebp - 0x1d0], 0
jmp 0x100096f2
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jl 0x10009cac
mov dword [ebp - 0x78], 0x37d45db3
mov dword [ebp - 0x984], 0x11e9056f
mov dword [ebp - 0xde8], 0
mov dword [ebp - 0x78], 0
jmp 0x1000972a
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x10009ca7
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x2f0], 0x15e4
mov dword [ebp - 0x974], 0xe4f9f010
mov dword [ebp - 0x22c], 0x23668f78
cmp dword [ebp - 0x1d0], 0
jne 0x10009771
mov dword [ebp - 0x480], 1
jmp 0x10009778
and dword [ebp - 0x480], 0
cmp dword [ebp - 0x138], 0xfad0d727
jbe 0x10009790
mov dword [ebp - 0x478], 1
jmp 0x10009797
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x478], eax
jle 0x100097b1
mov dword [ebp - 0x92c], 1
jmp 0x100097b8
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x92c], eax
jne 0x100097cf
mov dword [ebp - 0x934], 1
jmp 0x100097d6
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x480]
cmp eax, dword [ebp - 0x934]
jl 0x100097f9
mov eax, 0xe6a0122d
test eax, eax
je 0x100097f9
mov dword [ebp - 0x488], 1
jmp 0x10009800
and dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0xf5e3d1aa
jae 0x10009818
mov dword [ebp - 0x93c], 1
jmp 0x1000981f
and dword [ebp - 0x93c], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0x93c], eax
je 0x10009839
mov dword [ebp - 0x490], 1
jmp 0x10009840
and dword [ebp - 0x490], 0
cmp dword [ebp - 0x490], 0x95e04a27
jbe 0x10009858
mov dword [ebp - 0x944], 1
jmp 0x1000985f
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0x78]
imul eax, dword [ebp - 0x944]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2e8]
jg 0x10009884
mov dword [ebp - 0x498], 1
jmp 0x1000988b
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x498], eax
jl 0x100098a5
mov dword [ebp - 0x94c], 1
jmp 0x100098ac
and dword [ebp - 0x94c], 0
cmp dword [ebp - 0x94c], 0x59ba
jl 0x100098c4
mov dword [ebp - 0x4a0], 1
jmp 0x100098cb
and dword [ebp - 0x4a0], 0
cmp dword [ebp - 0x4a0], 0x6e9f0866
jle 0x100098e3
mov dword [ebp - 0x954], 1
jmp 0x100098ea
and dword [ebp - 0x954], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
imul eax, dword [ebp - 0x954]
cmp eax, 0xfd43
jne 0x10009911
mov dword [ebp - 0xd74], 1
jmp 0x10009918
and dword [ebp - 0xd74], 0
mov eax, dword [ebp - 0xd7c]
mov dword [ebp - 0x1048], eax
mov dword [ebp - 0x140], 1
cmp dword [ebp - 0x140], 0xc46d767c
jb 0x10009946
mov dword [ebp - 0x4a8], 1
jmp 0x1000994d
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x2f0], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x344], eax
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x344], eax
je 0x1000998f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e8], 0
je 0x1000998f
mov dword [ebp - 0xd84], 1
jmp 0x10009996
and dword [ebp - 0xd84], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x10c4], eax
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xea0], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xea4], eax
mov eax, 0x6a3f
test eax, eax
jne 0x100099cf
cmp dword [ebp - 0x78], 0
jne 0x100099cf
and dword [ebp - 0x95c], 0
jmp 0x100099d9
mov dword [ebp - 0x95c], 1
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x95c], eax
jge 0x100099f3
mov dword [ebp - 0x4b0], 1
jmp 0x100099fa
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x4b0], eax
jle 0x10009b1b
mov dword [ebp - 0x21c], 0
jmp 0x10009a22
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 3
jge 0x10009a3e
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0x105c], 0x5e3164c1
jmp 0x10009a15
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x105c], 0x6dc7
jg 0x10009a5d
mov dword [ebp - 0x964], 1
jmp 0x10009a64
and dword [ebp - 0x964], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x105c]
cmp eax, dword [ebp - 0x964]
jl 0x10009a85
mov dword [ebp - 0x4b8], 1
jmp 0x10009a8c
and dword [ebp - 0x4b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
cmp eax, dword [ebp - 0x4b8]
jne 0x10009aad
mov dword [ebp - 0x96c], 1
jmp 0x10009ab4
and dword [ebp - 0x96c], 0
mov eax, dword [ebp - 0x96c]
add eax, 8
cmp eax, 0xf7f2
jle 0x10009ad0
mov dword [ebp - 0x4c0], 1
jmp 0x10009ad7
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x974], eax
mov eax, dword [ebp - 0x974]
add eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x140], eax
jl 0x10009b03
mov dword [ebp - 0x4c8], 1
jmp 0x10009b0a
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x22c], eax
jmp 0x10009ca2
mov dword [ebp - 0xd8c], 1
mov dword [ebp - 0xde0], 0xbb39d90d
mov dword [ebp - 0x224], 0
jmp 0x10009b48
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x10009b64
mov eax, dword [ebp - 0x224]
mov dword [ebp + eax*4 - 0xe70], 0x6aef
jmp 0x10009b3b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe70]
mov dword [ebp - 0xd8c], eax
mov eax, dword [ebp - 0x2f0]
add eax, 0xbc4d
cmp eax, dword [ebp - 0x78]
je 0x10009b93
mov dword [ebp - 0x97c], 1
jmp 0x10009b9a
and dword [ebp - 0x97c], 0
cmp dword [ebp - 0x97c], 0xffffffff
jae 0x10009baf
mov dword [ebp - 0xdd8], 1
jmp 0x10009bb6
and dword [ebp - 0xdd8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe70]
mov dword [ebp - 0xeac], eax
cmp dword [ebp - 0x78], 0xffffffff
jg 0x10009bdb
mov dword [ebp - 0x4d0], 1
jmp 0x10009be2
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0x344], eax
mov dword [ebp - 0x984], 0xb43c6211
mov eax, dword [ebp - 0xde0]
cmp dword [ebp - 0x984], eax
jne 0x10009c12
mov dword [ebp - 0x4d8], 1
jmp 0x10009c19
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 0x46fedea8
jge 0x10009c31
mov dword [ebp - 0x98c], 1
jmp 0x10009c38
and dword [ebp - 0x98c], 0
mov dword [ebp - 0x22c], 0x58db2edf
mov eax, dword [ebp - 0x22c]
cmp eax, dword [ebp - 0x98c]
jle 0x10009c65
mov eax, 0xb128
test eax, eax
je 0x10009c65
mov dword [ebp - 0x4e0], 1
jmp 0x10009c6c
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0x519c81b9
jne 0x10009c84
mov dword [ebp - 0x994], 1
jmp 0x10009c8b
and dword [ebp - 0x994], 0
mov eax, dword [ebp - 0x994]
mov dword [ebp - 0xde8], eax
cmp dword [ebp - 0x22c], 0
je 0x10009ca2
jmp 0x10009ca7
jmp 0x10009723
jmp 0x100096e5
mov dword [ebp - 0x140], 0
jmp 0x10009cc5
mov eax, dword [ebp - 0x140]
dec eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 0xffffffeb
jg 0x10009cf9
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x10009cf7
push 0x1f1b
push 0
push 0x812
push 0x192c
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x10009cb8
mov dword [ebp - 0x99c], 0x336de018
mov dword [ebp - 0x1e8], 1
mov dword [ebp - 0x8c], 0
jmp 0x10009d26
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x10009d42
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xbd8], 0
jmp 0x10009d19
mov dword [ebp - 0x8c], 0
jmp 0x10009d5b
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x10009d77
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xc38], 1
jmp 0x10009d4e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd8]
mov dword [ebp - 0xeb4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd8]
mov dword [ebp - 0x4e8], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x4e8]
mov dword [ebp + eax - 0xbd8], ecx
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x99c], eax
mov eax, dword [ebp - 0x99c]
mov dword [ebp - 0xebc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
mov dword [ebp - 0xec4], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd8]
sub eax, 0x50a4049a
jne 0x10009e08
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xbd8], 0
jne 0x10009e08
and dword [ebp - 0x4f0], 0
jmp 0x10009e12
mov dword [ebp - 0x4f0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
cmp dword [ebp - 0x4f0], eax
jne 0x10009e33
mov dword [ebp - 0x9a4], 1
jmp 0x10009e3a
and dword [ebp - 0x9a4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
cmp dword [ebp - 0x9a4], eax
jle 0x10009e5b
mov dword [ebp - 0x4f8], 1
jmp 0x10009e62
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0x3367
jle 0x10009e7a
mov dword [ebp - 0x9ac], 1
jmp 0x10009e81
and dword [ebp - 0x9ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
cmp dword [ebp - 0x9ac], eax
jge 0x10009ea2
mov dword [ebp - 0x500], 1
jmp 0x10009ea9
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 1
jl 0x10009ebe
mov dword [ebp - 0x9b4], 1
jmp 0x10009ec5
and dword [ebp - 0x9b4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc38]
cmp dword [ebp - 0x9b4], eax
je 0x10009ee6
mov dword [ebp - 0xdf0], 1
jmp 0x10009eed
and dword [ebp - 0xdf0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc38]
mov dword [ebp - 0xecc], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc38], 0xfffffffe
mov dword [ebp - 0x1e8], 0xfffffffe
mov dword [ebp - 0x1e8], 1
jmp 0x10009f34
mov eax, dword [ebp - 0x1e8]
dec eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0
jl 0x10009f5b
mov byte [ebp - 0x169], 0
movzx eax, byte [ebp - 0x169]
test eax, eax
je 0x10009f59
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x10009f27
mov dword [ebp - 0xec], 1
mov dword [ebp - 0xed4], 0x3b91
mov dword [ebp - 0xedc], 0x8d4081c2
mov dword [ebp - 0x508], 9
mov dword [ebp - 0xfc], 0
jmp 0x10009f9c
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 3
jge 0x10009fb8
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x1360], 0xe7937d8e
jmp 0x10009f8f
mov dword [ebp - 0xfc], 0
jmp 0x10009fd1
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 4
jge 0x10009fed
mov eax, dword [ebp - 0xfc]
mov dword [ebp + eax*4 - 0x139c], 1
jmp 0x10009fc4
mov eax, dword [ebp - 0x508]
inc eax
mov dword [ebp - 0x508], eax
mov dword [ebp - 0xa64], 0x7f37c04c
mov dword [ebp - 0x148], 0xf6af1124
mov dword [ebp - 0xdf8], 0x89226c31
mov dword [ebp - 0x148], 6
jmp 0x1000a031
mov eax, dword [ebp - 0x148]
dec eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0xfffffff3
jle 0x1000a0cc
mov byte [ebp - 0x12f], 0
movzx eax, byte [ebp - 0x12f]
test eax, eax
je 0x1000a058
push 0
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x148]
cmp dword [ebp - 0x148], eax
jg 0x1000a079
mov dword [ebp - 0x9bc], 1
jmp 0x1000a080
and dword [ebp - 0x9bc], 0
cmp dword [ebp - 0x9bc], 0x91
jle 0x1000a098
mov dword [ebp - 0x510], 1
jmp 0x1000a09f
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0xffffffff
je 0x1000a0b4
mov dword [ebp - 0x9c4], 1
jmp 0x1000a0bb
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0xdf8], eax
jmp 0x1000a024
mov dword [ebp - 0xa74], 0xf05f4326
mov dword [ebp - 0x5c8], 0xb8fa48a2
mov dword [ebp - 0xac], 0x622ba394
mov dword [ebp - 0x90], 0
jmp 0x1000a103
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000a11f
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xd98], 0xffffffff
jmp 0x1000a0f6
mov dword [ebp - 0x90], 0
jmp 0x1000a138
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000a154
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf00], 0x7525d2d9
jmp 0x1000a12b
mov dword [ebp - 0xac], 0
jmp 0x1000a16d
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jg 0x1000a244
mov byte [ebp - 0x191], 0
movzx eax, byte [ebp - 0x191]
test eax, eax
je 0x1000a197
push 0x1c7d
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0xd98]
mov dword [ebp - 0xee4], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [ebp + eax*4 - 0xd98]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0xac]
mov ecx, 0x2337
sub ecx, dword [ebp - 0xac]
cmp dword [ebp + eax*4 - 0xd98], ecx
jg 0x1000a1e3
mov dword [ebp - 0x518], 1
jmp 0x1000a1ea
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0x63e31551
je 0x1000a202
mov dword [ebp - 0x9cc], 1
jmp 0x1000a209
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x9cc], 0xfffffffc
jl 0x1000a21e
mov dword [ebp - 0x520], 1
jmp 0x1000a225
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x520]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf00], eax
jmp 0x1000a160
mov dword [ebp - 0x5d0], 0x11fb8eb5
mov dword [ebp - 0x150], 0xb999fb02
mov dword [ebp - 0xe30], 2
mov dword [ebp - 0x3f0], 0x2b7b
mov dword [ebp - 0xe28], 0x531e
mov dword [ebp - 0xa04], 0x9606
mov dword [ebp - 0xef4], 0x8f497c3
mov dword [ebp - 0xe4], 0
jmp 0x1000a2a3
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x1000a2bf
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x2f8], 0x89a9b8fa
jmp 0x1000a296
mov dword [ebp - 0xe4], 0
jmp 0x1000a2d8
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 2
jge 0x1000a2f4
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x338], 0x707e294
jmp 0x1000a2cb
cmp dword [ebp - 0x150], 0
je 0x1000a3f6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x338], 1
jne 0x1000a31d
mov dword [ebp - 0x9d4], 1
jmp 0x1000a324
and dword [ebp - 0x9d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x9d4], eax
jne 0x1000a345
mov dword [ebp - 0x528], 1
jmp 0x1000a34c
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x528], eax
jge 0x1000a366
mov dword [ebp - 0xe00], 1
jmp 0x1000a36d
and dword [ebp - 0xe00], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x338]
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp - 0x3f0]
dec eax
mov dword [ebp - 0x3f0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x338]
cmp dword [ebp - 0x3f0], eax
jg 0x1000a3ae
mov dword [ebp - 0x9dc], 1
jmp 0x1000a3b5
and dword [ebp - 0x9dc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x9dc], eax
jg 0x1000a3d6
mov dword [ebp - 0xe20], 1
jmp 0x1000a3dd
and dword [ebp - 0xe20], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x100c], eax
mov eax, 0x5d482642
test eax, eax
je 0x1000a3f6
xor eax, eax
jne 0x1000a40f
mov eax, 0xffff
test eax, eax
jne 0x1000a40f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x338], 0
je 0x1000a42b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x338], 0
je 0x1000a42b
mov dword [ebp - 0x530], 1
jmp 0x1000a432
and dword [ebp - 0x530], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x530], eax
jne 0x1000a453
mov dword [ebp - 0x9e4], 1
jmp 0x1000a45a
and dword [ebp - 0x9e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9e4]
mov dword [ebp + eax - 0x2f8], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x338]
mov dword [ebp - 0x1014], eax
cmp dword [ebp - 0x150], 0x643c8f43
jge 0x1000a49e
mov eax, 0xffff
test eax, eax
jne 0x1000a49e
and dword [ebp - 0x538], 0
jmp 0x1000a4a8
mov dword [ebp - 0x538], 1
mov eax, dword [ebp - 0x538]
sub eax, dword [ebp - 0xe28]
je 0x1000a4cb
mov eax, 0x73ecfb86
test eax, eax
je 0x1000a4cb
mov dword [ebp - 0x9ec], 1
jmp 0x1000a4d2
and dword [ebp - 0x9ec], 0
cmp dword [ebp - 0x9ec], 0xffff
jb 0x1000a4ea
mov dword [ebp - 0x540], 1
jmp 0x1000a4f1
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
neg eax
cmp eax, dword [ebp - 0x150]
jg 0x1000a50d
mov dword [ebp - 0x9f4], 1
jmp 0x1000a514
and dword [ebp - 0x9f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x338]
cmp dword [ebp - 0x9f4], eax
jge 0x1000a535
mov dword [ebp - 0x548], 1
jmp 0x1000a53c
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x150]
inc eax
inc eax
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x338]
add ecx, dword [ebp - 0x548]
cmp eax, ecx
je 0x1000a567
mov dword [ebp - 0x9fc], 1
jmp 0x1000a56e
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x150]
mov ecx, dword [ebp - 0x9fc]
neg ecx
sub eax, ecx
je 0x1000a595
mov eax, 0xfffa
test eax, eax
je 0x1000a595
mov dword [ebp - 0x550], 1
jmp 0x1000a59c
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0xa04], eax
cmp dword [ebp - 0xa04], 0
jne 0x1000a5bf
or eax, 0xffffffff
jne 0x1000a5bf
and dword [ebp - 0x558], 0
jmp 0x1000a5c9
mov dword [ebp - 0x558], 1
mov eax, dword [ebp - 0x558]
mov dword [ebp - 0xe30], eax
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x10c], 0xe81a7ecc
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
jne 0x1000a5fa
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x58], eax
je 0x1000a5fa
cmp dword [ebp - 0x58], 0
cmp dword [ebp - 0x58], 0
je 0x1000a612
cmp dword [ebp - 0x58], 0
je 0x1000a612
mov dword [ebp - 0xa0c], 1
jmp 0x1000a619
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0xa0c], eax
jle 0x1000a696
mov dword [ebp - 0x234], 0
jmp 0x1000a640
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 3
jge 0x1000a65c
mov eax, dword [ebp - 0x234]
mov dword [ebp + eax*4 - 0x11e0], 0x6ddcd166
jmp 0x1000a633
mov dword [ebp - 0x10c], 0
jmp 0x1000a675
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 3
jge 0x1000a691
mov eax, dword [ebp - 0x10c]
mov dword [ebp + eax*4 - 0x11e0], 0xbdbdf7cd
jmp 0x1000a668
jmp 0x1000a8f1
mov dword [ebp - 0x3f8], 0xd8ff8cd3
mov dword [ebp - 0x560], 0xffffffff
mov dword [ebp - 0xb4], 0
jmp 0x1000a6c3
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x1000a6df
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1294], 0x94486cae
jmp 0x1000a6b6
mov dword [ebp - 0xb4], 0
jmp 0x1000a6f8
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1000a714
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0xf0c], 0xfffffffb
jmp 0x1000a6eb
mov byte [ebp - 0x131], 0
movzx eax, byte [ebp - 0x131]
test eax, eax
je 0x1000a733
push 0xeaf
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov dword [ebp - 0x58], 0
jmp 0x1000a743
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jne 0x1000a8f1
mov dword [ebp - 0x158], 0
mov eax, 0xffff
test eax, eax
je 0x1000a786
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
cmp dword [ebp - 0x3f8], eax
jl 0x1000a786
mov dword [ebp - 0xa1c], 1
jmp 0x1000a78d
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0x158], 1
jge 0x1000a7a2
mov dword [ebp - 0xa14], 1
jmp 0x1000a7a9
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x3f8]
cmp dword [ebp - 0xa14], eax
jne 0x1000a7c3
mov dword [ebp - 0xe38], 1
jmp 0x1000a7ca
and dword [ebp - 0xe38], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x101c], eax
cmp dword [ebp - 0x158], 0
jne 0x1000a7eb
mov dword [ebp - 0x568], 1
jmp 0x1000a7f2
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x568], eax
jge 0x1000a809
mov dword [ebp - 0x570], 1
jmp 0x1000a810
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xa1c]
cmp eax, dword [ebp - 0x570]
jg 0x1000a82a
mov dword [ebp - 0xa24], 1
jmp 0x1000a831
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x158]
cmp dword [ebp - 0xa24], eax
jne 0x1000a84b
mov dword [ebp - 0x578], 1
jmp 0x1000a852
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 1
jl 0x1000a867
mov dword [ebp - 0xa2c], 1
jmp 0x1000a86e
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0xf4c6
je 0x1000a886
mov dword [ebp - 0x400], 1
jmp 0x1000a88d
and dword [ebp - 0x400], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x400]
mov dword [ebp + eax - 0x1294], ecx
cmp dword [ebp - 0x400], 0
je 0x1000a8be
cmp dword [ebp - 0x158], 0
je 0x1000a8be
mov dword [ebp - 0x580], 1
jmp 0x1000a8c5
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x158]
sub eax, dword [ebp - 0x580]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xf0c], eax
cmp dword [ebp - 0x158], 0
je 0x1000a8ec
jmp 0x1000a73c
jmp 0x1000a73c
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x10c]
mov dword [ebp - 0x10c], eax
mov dword [ebp - 0xd78], 0xabff5ecc
mov dword [ebp - 0x70], 0x1c1ec2db
mov dword [ebp - 0x3d4], 0
mov dword [ebp - 0xd38], 0
mov dword [ebp - 0x1024], 0xc309ab83
mov dword [ebp - 0x102c], 0x3ec3e1b8
mov dword [ebp - 0x1034], 8
mov dword [ebp - 0x103c], 0
mov dword [ebp - 0x1154], 0xb14898d0
mov dword [ebp - 0x1150], 0xb14898d0
mov dword [ebp - 0x114c], 0xb14898d0
mov dword [ebp - 0x1148], 0xb14898d0
mov dword [ebp - 0xa54], 8
mov dword [ebp - 0x300], 0
jmp 0x1000a99b
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 4
jge 0x1000a9b7
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0x11c4], 0xa049fe38
jmp 0x1000a98e
mov dword [ebp - 0x70], 0
jmp 0x1000a9c7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1000ab2b
mov dword [ebp - 0x598], 1
mov dword [ebp - 0xa4c], 3
cmp dword [ebp - 0x70], 0
je 0x1000aa66
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x11c4]
mov dword [ebp - 0x1044], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x104c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x1104], eax
cmp dword [ebp - 0x70], 0x8d5f
jle 0x1000aa22
mov dword [ebp - 0xa34], 1
jmp 0x1000aa29
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0x3d4]
imul eax, dword [ebp - 0xa34]
cmp eax, dword [ebp - 0x598]
jge 0x1000aa4a
mov dword [ebp - 0x588], 1
jmp 0x1000aa51
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0xffffffff
jae 0x1000aa66
mov dword [ebp - 0xa3c], 1
jmp 0x1000aa6d
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0xa3c]
inc eax
cmp eax, dword [ebp - 0x70]
jle 0x1000aa85
mov dword [ebp - 0x590], 1
jmp 0x1000aa8c
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x590], eax
jge 0x1000aaac
mov eax, 0xeae21516
test eax, eax
jne 0x1000aaac
and dword [ebp - 0xa44], 0
jmp 0x1000aab6
mov dword [ebp - 0xa44], 1
mov eax, dword [ebp - 0xa44]
sub eax, dword [ebp - 0x3d4]
cmp eax, 0x732a
jg 0x1000aad5
mov dword [ebp - 0xe0c], 1
jmp 0x1000aadc
and dword [ebp - 0xe0c], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x110c], eax
mov eax, 0xd2ae857b
neg eax
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp + eax*4 - 0x11c4]
cmp eax, dword [ebp - 0xa4c]
jle 0x1000ab13
mov dword [ebp - 0x5a0], 1
jmp 0x1000ab1a
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0xd38], eax
jmp 0x1000a9c0
mov eax, dword [ebp - 0xa54]
dec eax
mov dword [ebp - 0xa54], eax
mov dword [ebp - 0x23c], 0
jmp 0x1000ab51
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 4
jge 0x1000ab6d
mov eax, dword [ebp - 0x23c]
mov dword [ebp + eax*4 - 0x1304], 6
jmp 0x1000ab44
mov dword [ebp - 0xc8c], 0xb7f609b2
mov dword [ebp - 0xbc], 0
jmp 0x1000ab90
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1000abac
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xe50], 0xb9b55bb2
jmp 0x1000ab83
mov dword [ebp - 0xbc], 0
jmp 0x1000abc5
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x1000abe1
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0xc44], 0xe2236432
jmp 0x1000abb8
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xc44], 0
jmp 0x1000ac0f
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc44]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xc44], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc44], 2
jg 0x1000acb9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc44]
mov eax, dword [ebp + eax*4 - 0xe50]
mov dword [ebp - 0x1114], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc44]
mov eax, dword [ebp + eax*4 - 0xe50]
push 4
pop ecx
shl ecx, 0
sub eax, dword [ebp + ecx - 0xe50]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0xc44]
jge 0x1000ac78
mov dword [ebp - 0x5a8], 1
jmp 0x1000ac7f
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0xfffffffb
jl 0x1000ac94
mov dword [ebp - 0xa5c], 1
jmp 0x1000ac9b
and dword [ebp - 0xa5c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa5c]
sub ecx, dword [ebp + eax - 0xe50]
mov dword [ebp - 0xc8c], ecx
jmp 0x1000abf4
mov eax, dword [ebp - 0xec]
sub eax, 0xb5486b6
jne 0x1000acd8
mov eax, 0xaed
test eax, eax
jne 0x1000acd8
and dword [ebp - 0xdf4], 0
jmp 0x1000ace2
mov dword [ebp - 0xdf4], 1
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1128], eax
push 0xfffffffffffffffc
pop eax
cmp eax, 0xfffffffa
jne 0x1000ad02
mov dword [ebp - 0xc94], 1
jmp 0x1000ad09
and dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1130], eax
cmp dword [ebp - 0xec], 0
jne 0x1000ad30
cmp dword [ebp - 0xec], 0
jne 0x1000ad30
and dword [ebp - 0x5b0], 0
jmp 0x1000ad3a
mov dword [ebp - 0x5b0], 1
cmp dword [ebp - 0x5b0], 0x94ab
jg 0x1000ad52
mov dword [ebp - 0x5b8], 1
jmp 0x1000ad59
and dword [ebp - 0x5b8], 0
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0xa64]
add eax, dword [ebp - 0x5b8]
cmp eax, dword [ebp - 0xec]
jg 0x1000ad83
mov dword [ebp - 0xa6c], 1
jmp 0x1000ad8a
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0xec]
cmp eax, dword [ebp - 0xa6c]
jle 0x1000ada4
mov dword [ebp - 0x5c0], 1
jmp 0x1000adab
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xa74], eax
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x5c8], eax
mov eax, dword [ebp - 0xec]
cmp dword [ebp - 0x5c8], eax
jne 0x1000addd
mov dword [ebp - 0xa7c], 1
jmp 0x1000ade4
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x5d0], eax
mov eax, dword [ebp - 0x5d0]
add eax, dword [ebp - 0xec]
mov dword [ebp - 0xa84], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xa84]
mov dword [ebp + eax - 0x1304], ecx
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0xd78], eax
mov dword [ebp - 0xc4], 0
jmp 0x1000ae3a
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x1000ae56
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x12c4], 0x26bdde0b
jmp 0x1000ae2d
mov dword [ebp - 0xc4], 0
jmp 0x1000ae6f
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jge 0x1000ae8b
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0xe68], 0xbe8e56f9
jmp 0x1000ae62
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe68], 1
jmp 0x1000aeb9
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe68]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe68], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe68], 0
jl 0x1000af4e
mov dword [ebp - 0x308], 0x23ed15d
mov byte [ebp - 0x171], 0
movzx eax, byte [ebp - 0x171]
test eax, eax
je 0x1000aef3
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x308], 0
jmp 0x1000af0c
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jg 0x1000af49
mov byte [ebp - 0x133], 0
movzx eax, byte [ebp - 0x133]
test eax, eax
je 0x1000af47
push 0
push 0x12c3
push 0xbc8
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetWindowExtEx]
jmp 0x1000aeff
jmp 0x1000ae9e
mov byte [ebp - 0x1b1], 0
movzx eax, byte [ebp - 0x1b1]
test eax, eax
je 0x1000af6f
push 0
push 0x3df
push 0
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000af8e
push 0x24a3
push 0
call dword [sym.imp.KERNEL32.dll_IsValidLocale]
mov dword [ebp - 0x1e4], 0xffffffff
mov dword [ebp - 0xe2c], 0
mov dword [ebp - 0x168], 0xd8169b41
mov dword [ebp - 0x34c], 0x7b364fe
mov dword [ebp - 0x244], 0
jmp 0x1000afcf
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x1000afeb
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0x318], 0x48261f9c
jmp 0x1000afc2
mov dword [ebp - 0x1e4], 0
jmp 0x1000b004
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
jl 0x1000b5be
mov dword [ebp - 0x64], 0x37d45db3
mov dword [ebp - 0xae4], 0x11e9056f
mov dword [ebp - 0xcb4], 0
mov dword [ebp - 0x64], 0
jmp 0x1000b03c
cmp dword [ebp - 0x64], 0
jl 0x1000b5b9
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x254], 0x15e4
mov dword [ebp - 0xad4], 0xe4f9f010
mov dword [ebp - 0x31c], 0x23668f78
cmp dword [ebp - 0x1e4], 0
jne 0x1000b083
mov dword [ebp - 0x5e0], 1
jmp 0x1000b08a
and dword [ebp - 0x5e0], 0
cmp dword [ebp - 0x160], 0xfad0d727
jbe 0x1000b0a2
mov dword [ebp - 0x5d8], 1
jmp 0x1000b0a9
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x5d8], eax
jle 0x1000b0c3
mov dword [ebp - 0xa8c], 1
jmp 0x1000b0ca
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xa8c], eax
jne 0x1000b0e1
mov dword [ebp - 0xa94], 1
jmp 0x1000b0e8
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x5e0]
cmp eax, dword [ebp - 0xa94]
jl 0x1000b10b
mov eax, 0xe6a0122d
test eax, eax
je 0x1000b10b
mov dword [ebp - 0x5e8], 1
jmp 0x1000b112
and dword [ebp - 0x5e8], 0
cmp dword [ebp - 0x5e8], 0xf5e3d1aa
jae 0x1000b12a
mov dword [ebp - 0xa9c], 1
jmp 0x1000b131
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x1e4]
cmp dword [ebp - 0xa9c], eax
je 0x1000b14b
mov dword [ebp - 0x5f0], 1
jmp 0x1000b152
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0x95e04a27
jbe 0x1000b16a
mov dword [ebp - 0xaa4], 1
jmp 0x1000b171
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x64]
imul eax, dword [ebp - 0xaa4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x318]
jg 0x1000b196
mov dword [ebp - 0x5f8], 1
jmp 0x1000b19d
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x5f8], eax
jl 0x1000b1b7
mov dword [ebp - 0xaac], 1
jmp 0x1000b1be
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 0x59ba
jl 0x1000b1d6
mov dword [ebp - 0x600], 1
jmp 0x1000b1dd
and dword [ebp - 0x600], 0
cmp dword [ebp - 0x600], 0x6e9f0866
jle 0x1000b1f5
jmp 0x1000aff7
mov dword [ebp - 0x168], 0
jmp 0x1000b5d7
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0xffffffeb
jg 0x1000b60b
mov byte [ebp - 0x179], 0
movzx eax, byte [ebp - 0x179]
test eax, eax
je 0x1000b609
push 0x1f1b
push 0
push 0x812
push 0x192c
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x1000b5ca
mov dword [ebp - 4], 0
mov dword [ebp - 0x2cc], 0xfffffffd
mov dword [ebp - 0x1c8], 0xfffffff8
mov dword [ebp - 0x28], 0
jmp 0x1000b636
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jge 0x1000b64c
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x438], 1
jmp 0x1000b62f
mov dword [ebp - 0x28], 0
jmp 0x1000b65c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1000b672
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x3f4], 1
jmp 0x1000b655
mov dword [ebp - 0x28], 0
jmp 0x1000b682
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1000b698
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x1354], 1
jmp 0x1000b67b
mov eax, dword [ebp - 4]
mov dword [ebp - 0xeb0], eax
cmp dword [ebp - 4], 1
jg 0x1000b6b9
cmp dword [ebp - 4], 0
je 0x1000b6b9
mov dword [ebp - 0x648], 1
jmp 0x1000b6c0
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0x4952
jl 0x1000b6d8
mov dword [ebp - 0xafc], 1
jmp 0x1000b6df
and dword [ebp - 0xafc], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xafc]
jne 0x1000b6f1
cmp dword [ebp - 0x1c8], 0
mov eax, 0x37fc
sub eax, 0xb27f
jne 0x1000b709
mov dword [ebp - 0x650], 1
jmp 0x1000b710
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x650], eax
jne 0x1000b727
mov dword [ebp - 0xb04], 1
jmp 0x1000b72e
and dword [ebp - 0xb04], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0xb04], eax
jge 0x1000b745