Function at 0x10009784
Capabilities:
Get common file path
Get disk information
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080327
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xcd8
push esi
push edi
mov dword [ebp - 0xa0], 0xfecafe8
mov dword [ebp - 0xf4], 0xfffffff8
mov dword [ebp - 0x48], 6
mov dword [ebp - 0x2a8], 0x6a9d9e17
mov dword [ebp - 0xac8], 0x531defce
mov dword [ebp - 0x810], 0xfffffff7
mov dword [ebp - 0x864], 1
cmp dword [ebp - 0xa0], 0
jne 0x10009805
cmp dword [ebp - 0xa0], 0
jne 0x10009805
mov dword [ebp - 0x5b4], 1
jmp 0x1000980c
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
neg eax
mov ecx, dword [ebp - 0xa0]
add ecx, dword [ebp - 0x5b4]
cmp eax, ecx
jne 0x10009877
mov eax, dword [ebp - 0xf4]
sub eax, 0x492527ea
cmp eax, dword [ebp - 0x48]
je 0x1000984c
mov dword [ebp - 0x7a8], 1
jmp 0x10009853
and dword [ebp - 0x7a8], 0
imul eax, dword [ebp - 0x7a8], 0xfff7
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xa0], eax
jle 0x10009877
and dword [ebp - 0x7b0], 0
jmp 0x10009881
mov dword [ebp - 0x7b0], 1
cmp dword [ebp - 0x7b0], 0xa05d7627
ja 0x10009899
mov dword [ebp - 0x7b8], 1
jmp 0x100098a0
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x7b8], eax
jne 0x100098b7
mov dword [ebp - 0x7d8], 1
jmp 0x100098be
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x7d8]
add eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x48]
jle 0x100098dc
mov dword [ebp - 0x7e0], 1
jmp 0x100098e3
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x7e0], eax
jl 0x100098fa
mov dword [ebp - 0x7e8], 1
jmp 0x10009901
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 0
je 0x100099ef
mov dword [ebp - 0x800], 0x55db
mov dword [ebp - 0x284], 0xfffffff9
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xb60], eax
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0x810]
add eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x284]
add ecx, eax
je 0x10009970
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10009970
and dword [ebp - 0x7f0], 0
jmp 0x1000997a
mov dword [ebp - 0x7f0], 1
mov eax, dword [ebp - 0x284]
cmp dword [ebp - 0x7f0], eax
jg 0x1000999a
cmp dword [ebp - 0x284], 0
jne 0x1000999a
and dword [ebp - 0x7f8], 0
jmp 0x100099a4
mov dword [ebp - 0x7f8], 1
mov dword [ebp - 0x800], 0xd8eb7bfb
mov eax, dword [ebp - 0x7f8]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x800]
sub eax, dword [ebp - 0x810]
cmp eax, dword [ebp - 0x2a8]
jne 0x100099da
mov dword [ebp - 0x818], 1
jmp 0x100099e1
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x864], eax
jmp 0x10009a2d
mov dword [ebp - 0xf4], 0
jmp 0x10009a08
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffef
je 0x10009a2d
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10009a2b
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x100099fb
mov dword [ebp - 0x2c], 0xad3b3152
mov dword [ebp - 0x6b8], 0x40c18ab9
mov dword [ebp - 0x398], 0x3a4d1b40
mov dword [ebp - 0x8cc], 0xd214
mov dword [ebp - 0x2b0], 0
jmp 0x10009a6b
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x10009a87
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x334], 0x5f70ad6f
jmp 0x10009a5e
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x334], 0
jmp 0x10009ab5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x334], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x334], 0xf
jne 0x10009ae1
mov byte [ebp - 0xd6], 0
movzx eax, byte [ebp - 0xd6]
test eax, eax
je 0x10009adf
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x10009a9a
mov dword [ebp - 0x2c], 2
jmp 0x10009af1
mov eax, dword [ebp - 0x2c]
dec eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jl 0x10009c57
push 1
lea ecx, [ebp - 0x9a4]
call fcn.10014d59
and dword [ebp - 4], 0
mov dword [ebp - 0x26c], 0
jmp 0x10009b25
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x10009b47
push dword [ebp - 0x26c]
lea ecx, [ebp - 0x9a4]
call fcn.10014dc6
mov dword [eax], 0xcc4b7c70
jmp 0x10009b18
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0xb68], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0x820], eax
push 0
lea ecx, [ebp - 0x9a4]
call fcn.10014dc6
mov ecx, dword [ebp - 0x820]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
cmp dword [ebp - 0x820], eax
jge 0x10009ba3
mov dword [ebp - 0x828], 1
jmp 0x10009baa
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
cmp dword [ebp - 0x828], eax
jle 0x10009bce
cmp dword [ebp - 0x2c], 0
je 0x10009bce
mov dword [ebp - 0x82c], 1
jmp 0x10009bd5
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
imul eax, dword [ebp - 0x82c]
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
mov dword [ebp - 0xc48], eax
mov dword [ebp - 0x398], 0x8787d636
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0x334]
mov dword [ebp - 0xb70], eax
mov eax, dword [ebp - 0x398]
mov dword [ebp - 0xbe8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x334]
mov dword [ebp - 0x8cc], eax
mov esi, dword [ebp - 0x2c]
push 0
lea ecx, [ebp - 0x9a4]
call fcn.10014dc6
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.10014dc1
jmp 0x10009aea
mov dword [ebp - 0xac], 0xd69f4288
push 1
lea ecx, [ebp - 0x848]
call fcn.10014d59
mov dword [ebp - 4], 1
mov dword [ebp - 0xfc], 8
mov dword [ebp - 0x14c], 7
mov dword [ebp - 0x194], 8
mov dword [ebp - 0x3a0], 0x2715ee56
mov dword [ebp - 0x8e4], 0xce3044b1
mov dword [ebp - 0x1c], 0
jmp 0x10009cb7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10009cd3
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x848]
call fcn.10014dc6
mov dword [eax], 1
jmp 0x10009cb0
mov dword [ebp - 0x1c], 0
jmp 0x10009ce3
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x10009cf9
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c4], 7
jmp 0x10009cdc
mov dword [ebp - 0x1c], 0
jmp 0x10009d09
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x10009d1f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6d8], 0xd345464c
jmp 0x10009d02
mov eax, dword [ebp - 0x194]
mov ecx, dword [ebp - 0x194]
inc ecx
mov dword [ebp - 0x194], ecx
test eax, eax
je 0x10009e2b
cmp dword [ebp - 0xfc], 0
jne 0x10009dcc
cmp dword [ebp - 0x14c], 0
je 0x10009d65
mov eax, 0x26f39384
test eax, eax
je 0x10009d65
mov dword [ebp - 0x6c0], 1
jmp 0x10009d6c
and dword [ebp - 0x6c0], 0
mov eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x3a0], eax
mov esi, dword [ebp - 0x3a0]
push 0
lea ecx, [ebp - 0x848]
call fcn.10014dc6
cmp esi, dword [eax]
je 0x10009d9f
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x10009d9f
and dword [ebp - 0x6c8], 0
jmp 0x10009da9
mov dword [ebp - 0x6c8], 1
push 0
lea ecx, [ebp - 0x848]
call fcn.10014dc6
mov eax, dword [eax]
imul eax, dword [ebp - 0x6c8]
test eax, eax
jne 0x10009dcc
and dword [ebp - 0x3a8], 0
jmp 0x10009dd6
mov dword [ebp - 0x3a8], 1
push 0
lea ecx, [ebp - 0x848]
call fcn.10014dc6
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [eax]
je 0x10009df4
cmp dword [ebp - 0x194], 0
push 0
lea ecx, [ebp - 0x848]
call fcn.10014dc6
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
add eax, dword [ebp + ecx - 0x7c4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x7c4]
je 0x10009e2b
mov dword [ebp - 0x8d4], 1
jmp 0x10009e32
and dword [ebp - 0x8d4], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb78], eax
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0xac], eax
jg 0x10009e53
push 5
pop eax
test eax, eax
je 0x10009e77
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x10009e72
push 0
push 0xaff
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x10009f83
mov dword [ebp - 0xab8], 0x11f0b9f5
mov dword [ebp - 0x14c], 1
jmp 0x10009e9a
mov eax, dword [ebp - 0x14c]
dec eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jl 0x10009f5f
mov dword [ebp - 0xac], 0
jmp 0x10009ec0
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jg 0x10009f5a
mov dword [ebp - 0xaa4], 0xffffffff
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x10009ef8
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0xfc], 0
jmp 0x10009f11
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 1
jg 0x10009f55
mov dword [ebp - 0x8dc], 0x2870b1b9
mov eax, dword [ebp - 0xfc]
cmp dword [ebp + eax*4 - 0x7c4], 1
jg 0x10009f40
mov dword [ebp - 0x6d0], 1
jmp 0x10009f47
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x8dc], eax
jmp 0x10009f04
jmp 0x10009eb3
jmp 0x10009e8d
mov byte [ebp - 0xd0], 0
movzx eax, byte [ebp - 0xd0]
test eax, eax
je 0x10009f83
push 0x1ecf
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6d8], 0xc3bc
jg 0x10009fa2
mov dword [ebp - 0x3b0], 1
jmp 0x10009fa9
and dword [ebp - 0x3b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7c4]
cmp dword [ebp - 0x3b0], eax
jge 0x10009fca
mov dword [ebp - 0x3b8], 1
jmp 0x10009fd1
and dword [ebp - 0x3b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6d8]
cmp dword [ebp - 0x3b8], eax
jge 0x10009ff2
mov dword [ebp - 0x6e0], 1
jmp 0x10009ff9
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x6e0], eax
jne 0x1000a013
mov dword [ebp - 0x2cc], 1
jmp 0x1000a01a
and dword [ebp - 0x2cc], 0
push 0
lea ecx, [ebp - 0x848]
call fcn.10014dc6
mov ecx, dword [ebp - 0x2cc]
mov dword [eax], ecx
cmp dword [ebp - 0x2cc], 0
je 0x1000a054
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c4], 0
je 0x1000a054
mov dword [ebp - 0x3c0], 1
jmp 0x1000a05b
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x3c0], eax
je 0x1000a07b
cmp dword [ebp - 0xac], 0
jne 0x1000a07b
and dword [ebp - 0x6e8], 0
jmp 0x1000a085
mov dword [ebp - 0x6e8], 1
mov eax, dword [ebp - 0x6e8]
mov dword [ebp - 0x8e4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x848]
call fcn.10014dc1
mov dword [ebp - 0xbc], 0xfecafe8
mov dword [ebp - 0x104], 0xfffffff8
mov dword [ebp - 0x50], 6
mov dword [ebp - 0x1a4], 0x6a9d9e17
mov dword [ebp - 0x9e8], 0x2d5e48d3
mov dword [ebp - 0x9e4], 0x2d5e48d3
mov dword [ebp - 0x9e0], 0x2d5e48d3
mov dword [ebp - 0x9dc], 0x2d5e48d3
mov dword [ebp - 0x4c], 0x52061f6
mov dword [ebp - 0x4c], 0
jmp 0x1000a104
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jg 0x1000a120
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp + eax*4 - 0x9e8]
mov dword [ebp + ecx*4 - 0x9e8], eax
jmp 0x1000a0fd
mov dword [ebp - 0x4c], 0
jmp 0x1000a130
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1000a152
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000a150
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
jmp 0x1000a129
mov dword [ebp - 0xaa8], 0x531defce
mov dword [ebp - 0x3f0], 0xfffffff7
mov dword [ebp - 0x920], 1
mov dword [ebp - 0x8ec], 0xba772304
mov dword [ebp - 0x264], 0
jmp 0x1000a193
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 1
jge 0x1000a1af
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0x19c], 7
jmp 0x1000a186
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x19c], 0x1d
jmp 0x1000a1dd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x19c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x19c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x19c], 0xffffffe6
jle 0x1000a205
mov dword [ebp - 0x918], 0xfffffffc
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x918], eax
jmp 0x1000a1c2
cmp dword [ebp - 0xbc], 0
jne 0x1000a223
cmp dword [ebp - 0xbc], 0
jne 0x1000a223
mov dword [ebp - 0x3c8], 1
jmp 0x1000a22a
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
neg eax
mov ecx, dword [ebp - 0xbc]
add ecx, dword [ebp - 0x3c8]
cmp eax, ecx
jne 0x1000a295
mov eax, dword [ebp - 0x104]
sub eax, 0x492527ea
cmp eax, dword [ebp - 0x50]
je 0x1000a26a
mov dword [ebp - 0x6f0], 1
jmp 0x1000a271
and dword [ebp - 0x6f0], 0
imul eax, dword [ebp - 0x6f0], 0xfff7
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xbc], eax
jle 0x1000a295
and dword [ebp - 0x3d0], 0
jmp 0x1000a29f
mov dword [ebp - 0x3d0], 1
cmp dword [ebp - 0x3d0], 0xa05d7627
ja 0x1000a2b7
mov dword [ebp - 0x6f8], 1
jmp 0x1000a2be
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x6f8], eax
jne 0x1000a2d5
mov dword [ebp - 0x3d8], 1
jmp 0x1000a2dc
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x3d8]
add eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x50]
jle 0x1000a2fa
mov dword [ebp - 0x700], 1
jmp 0x1000a301
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x700], eax
jl 0x1000a318
mov dword [ebp - 0x3e0], 1
jmp 0x1000a31f
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x50]
imul eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
je 0x1000a40d
mov dword [ebp - 0x710], 0x55db
mov dword [ebp - 0x28c], 0xfffffff9
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0x28c]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
sub eax, dword [ebp - 0x3f0]
add eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x28c]
add ecx, eax
je 0x1000a38e
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1000a38e
and dword [ebp - 0x708], 0
jmp 0x1000a398
mov dword [ebp - 0x708], 1
mov eax, dword [ebp - 0x28c]
cmp dword [ebp - 0x708], eax
jg 0x1000a3b8
cmp dword [ebp - 0x28c], 0
jne 0x1000a3b8
and dword [ebp - 0x3e8], 0
jmp 0x1000a3c2
mov dword [ebp - 0x3e8], 1
mov dword [ebp - 0x710], 0xd8eb7bfb
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x1a4], eax
mov eax, dword [ebp - 0x710]
sub eax, dword [ebp - 0x3f0]
cmp eax, dword [ebp - 0x1a4]
jne 0x1000a3f8
mov dword [ebp - 0x718], 1
jmp 0x1000a3ff
and dword [ebp - 0x718], 0
mov eax, dword [ebp - 0x718]
mov dword [ebp - 0x920], eax
jmp 0x1000a44b
mov dword [ebp - 0x104], 0
jmp 0x1000a426
mov eax, dword [ebp - 0x104]
dec eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 0xffffffef
je 0x1000a44b
mov byte [ebp - 0xd2], 0
movzx eax, byte [ebp - 0xd2]
test eax, eax
je 0x1000a449
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x1000a419
push 2
lea ecx, [ebp - 0x2c8]
call fcn.10014d59
mov dword [ebp - 4], 2
mov dword [ebp - 0x44], 0x79763266
mov dword [ebp - 0x224], 0xcc92ea21
push 1
lea ecx, [ebp - 0x860]
call fcn.10014d59
mov byte [ebp - 4], 3
mov dword [ebp - 0x324], 0x1b713623
mov dword [ebp - 0x928], 0x377963f6
mov dword [ebp - 0x2d4], 0xeb4e
mov dword [ebp - 0x64], 0
jmp 0x1000a4af
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1000a4cb
push dword [ebp - 0x64]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov dword [eax], 0xfffffffd
jmp 0x1000a4a8
mov dword [ebp - 0x64], 0
jmp 0x1000a4db
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x1000a4f7
push dword [ebp - 0x64]
lea ecx, [ebp - 0x860]
call fcn.10014dc6
mov dword [eax], 0x4e1c2e93
jmp 0x1000a4d4
mov dword [ebp - 0x44], 1
jmp 0x1000a507
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1000a8bc
mov dword [ebp - 0x314], 0x800ff68e
mov dword [ebp - 0x30c], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
cmp dword [eax], 0
jne 0x1000a546
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
cmp dword [ebp - 0x44], 0
jne 0x1000a567
push 1
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
cmp dword [eax], 0
jne 0x1000a567
and dword [ebp - 0x3f8], 0
jmp 0x1000a571
mov dword [ebp - 0x3f8], 1
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov ecx, dword [ebp - 0x3f8]
cmp ecx, dword [eax]
jl 0x1000a595
mov dword [ebp - 0x720], 1
jmp 0x1000a59c
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x224], eax
mov esi, dword [ebp - 0x224]
push 0
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
imul esi, dword [eax]
add esi, 0xb96c
push 0
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
cmp dword [eax], esi
jge 0x1000a5e1
mov dword [ebp - 0x304], 1
jmp 0x1000a5e8
and dword [ebp - 0x304], 0
push 0
lea ecx, [ebp - 0x860]
call fcn.10014dc6
mov ecx, dword [ebp - 0x304]
mov dword [eax], ecx
cmp dword [ebp - 0x304], 0
je 0x1000a624
push 0
lea ecx, [ebp - 0x860]
call fcn.10014dc6
cmp dword [eax], 0
je 0x1000a624
mov dword [ebp - 0x400], 1
jmp 0x1000a62b
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x1dab
jg 0x1000a643
mov dword [ebp - 0x728], 1
jmp 0x1000a64a
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x324], eax
mov dword [ebp - 0x314], 2
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0xadc], eax
push 0
lea ecx, [ebp - 0x860]
call fcn.10014dc6
cmp dword [ebp - 0x928], 0xffffffff
jne 0x1000a68e
mov dword [ebp - 0x930], 1
jmp 0x1000a695
and dword [ebp - 0x930], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov esi, eax
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x1000a6c5
mov dword [ebp - 0x408], 1
jmp 0x1000a6cc
and dword [ebp - 0x408], 0
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov ecx, dword [ebp - 0x408]
add ecx, dword [eax]
cmp ecx, 0xf314d41b
jne 0x1000a6f6
mov dword [ebp - 0x730], 1
jmp 0x1000a6fd
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp - 0x30c]
add eax, dword [ebp - 0x2d4]
cmp eax, dword [ebp - 0x2d4]
jge 0x1000a729
mov dword [ebp - 0x410], 1
jmp 0x1000a730
and dword [ebp - 0x410], 0
cmp dword [ebp - 0x410], 0xfffffff6
jne 0x1000a745
mov dword [ebp - 0x738], 1
jmp 0x1000a74c
and dword [ebp - 0x738], 0
cmp dword [ebp - 0x738], 0x64f9
jne 0x1000a8a1
mov dword [ebp - 0x31c], 0xfffffffe
cmp dword [ebp - 0x30c], 0
jne 0x1000a781
cmp dword [ebp - 0x314], 0
jne 0x1000a781
and dword [ebp - 0x418], 0
jmp 0x1000a78b
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x31c]
imul eax, dword [ebp - 0x418]
test eax, eax
je 0x1000a7b1
cmp dword [ebp - 0x324], 0
je 0x1000a7b1
mov dword [ebp - 0x740], 1
jmp 0x1000a7b8
and dword [ebp - 0x740], 0
push 1
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
mov esi, eax
push 0
lea ecx, [ebp - 0x860]
call fcn.10014dc6
mov eax, dword [eax]
add eax, dword [ebp - 0x740]
cmp dword [esi], eax
jle 0x1000a7ec
mov dword [ebp - 0x420], 1
jmp 0x1000a7f3
and dword [ebp - 0x420], 0
mov esi, dword [ebp - 0x31c]
imul esi, dword [ebp - 0x420]
push dword [ebp - 0x44]
lea ecx, [ebp - 0x2c8]
call fcn.10014dc6
cmp esi, dword [eax]
jg 0x1000a827
cmp dword [ebp - 0x31c], 0
je 0x1000a827
mov dword [ebp - 0x748], 1
jmp 0x1000a82e
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
je 0x1000a85a
mov dword [ebp - 0x938], 0xffffffff
cmp dword [ebp - 0x938], 0
je 0x1000a858
jmp 0x1000a8bc
jmp 0x1000a891
mov byte [ebp - 0xd4], 0
movzx eax, byte [ebp - 0xd4]
test eax, eax
je 0x1000a879
push 0x680
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1000a891
call dword [sym.imp.USER32.dll_GetMessageTime]
cmp dword [ebp - 0x324], 0
je 0x1000a89f
jmp 0x1000a500
jmp 0x1000a8b7
mov dword [ebp - 0x940], 0xffffffff
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0x940], eax
jmp 0x1000a500
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x860]
call fcn.10014dc1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c8]
call fcn.10014dc1
mov dword [ebp - 0xa4], 0xfecafe8
push 1
lea ecx, [ebp - 0x998]
call fcn.10014d59
mov dword [ebp - 4], 4
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x948], 0x3248c66
mov dword [ebp - 0x1ac], 0
jmp 0x1000a925
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x1000a947
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x998]
call fcn.10014dc6
mov dword [eax], 0x5d6c05ba
jmp 0x1000a918
mov dword [ebp - 0x154], 0
jmp 0x1000a960
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 1
jge 0x1000a982
push dword [ebp - 0x154]
lea ecx, [ebp - 0x998]
call fcn.10014dc6
mov dword [eax], 3
jmp 0x1000a953
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xae4], eax
mov esi, dword [ebp - 0x948]
push 0
lea ecx, [ebp - 0x998]
call fcn.10014dc6
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x998]
call fcn.10014dc1
mov dword [ebp - 0x114], 0xfffffff8
mov dword [ebp - 0x6c], 1
mov dword [ebp - 0xaec], 0xfffffffd
mov dword [ebp - 0xaf4], 0x6684
mov dword [ebp - 0xafc], 0xa219909d
mov dword [ebp - 0x8c], 0
jmp 0x1000a9fa
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000aa16
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xce4], 0xfffffffc
jmp 0x1000a9ed
mov dword [ebp - 0x8c], 0
jmp 0x1000aa2f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 4
jge 0x1000aa4b
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xccc], 0
jmp 0x1000aa22
mov dword [ebp - 0x6c], 0
jmp 0x1000aa5b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000aa7a
mov dword [ebp - 0x428], 0xffffffff
mov eax, dword [ebp - 0x428]
inc eax
mov dword [ebp - 0x428], eax
jmp 0x1000aa54
mov dword [ebp - 0x6c], 0
jmp 0x1000aa8a
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0xffffffe7
jle 0x1000ac0d
mov dword [ebp - 0x758], 0x36b1
mov dword [ebp - 0x750], 0x38e85a7b
mov dword [ebp - 0xb04], 0
push 3
lea ecx, [ebp - 0xbd4]
call fcn.10014d59
mov dword [ebp - 4], 5
mov dword [ebp - 0xb0c], 0xffffffff
mov dword [ebp - 0xb14], 0x683a7ef2
mov dword [ebp - 0x448], 0x514faf14
mov dword [ebp - 0x950], 7
mov dword [ebp - 0x220], 0
jmp 0x1000ab07
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x1000ab29
push dword [ebp - 0x220]
lea ecx, [ebp - 0xbd4]
call fcn.10014dc6
mov dword [eax], 1
jmp 0x1000aafa
mov eax, dword [ebp - 0x758]
cmp dword [ebp - 0x6c], eax
jl 0x1000ab40
mov dword [ebp - 0x760], 1
jmp 0x1000ab47
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0xb1c], eax
cmp dword [ebp - 0x750], 0xdd79
jge 0x1000ab6b
mov dword [ebp - 0x430], 1
jmp 0x1000ab72
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x750]
imul eax, dword [ebp - 0x430]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xccc]
jl 0x1000ab9a
mov dword [ebp - 0x438], 1
jmp 0x1000aba1
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x758]
cmp dword [ebp - 0x438], eax
jle 0x1000abbb
mov dword [ebp - 0x440], 1
jmp 0x1000abc2
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x760]
cmp eax, dword [ebp - 0x440]
jg 0x1000abdc
mov dword [ebp - 0x768], 1
jmp 0x1000abe3
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x448], eax
mov dword [ebp - 0x950], 0x782ecc90
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbd4]
call fcn.10014dc1
jmp 0x1000aa83
mov dword [ebp - 0x58], 6
mov dword [ebp - 0x250], 0x6a9d9e17
mov dword [ebp - 0xb24], 0x531defce
push 2
lea ecx, [ebp - 0x388]
call fcn.10014d59
mov dword [ebp - 4], 6
mov dword [ebp - 0x450], 0xec3203bd
mov dword [ebp - 0x958], 7
mov dword [ebp - 0x1b4], 0
jmp 0x1000ac69
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 2
jge 0x1000ac8b
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x388]
call fcn.10014dc6
mov dword [eax], 0xfff7
jmp 0x1000ac5c
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1000acb3
push 0
push 0
push 0x145f
push 0x4f8
push 0
call dword [sym.imp.USER32.dll_InsertMenuW]
push 0
lea ecx, [ebp - 0x388]
call fcn.10014dc6
cmp dword [eax], 0xffffffff
jge 0x1000acd1
mov dword [ebp - 0x458], 1
jmp 0x1000acd8
and dword [ebp - 0x458], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.10014dc6
push 0
lea ecx, [ebp - 0x388]
call fcn.10014dc6
cmp dword [eax], 0
jne 0x1000ad05
xor eax, eax
inc eax
jne 0x1000ad05
and dword [ebp - 0x770], 0
jmp 0x1000ad0f
mov dword [ebp - 0x770], 1
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x450], eax
mov esi, dword [ebp - 0x450]
push 1
lea ecx, [ebp - 0x388]
call fcn.10014dc6
cmp esi, dword [eax]
jg 0x1000ad3e
mov dword [ebp - 0x778], 1
jmp 0x1000ad45
and dword [ebp - 0x778], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.10014dc6
mov ecx, dword [ebp - 0x778]
imul ecx, dword [eax]
cmp ecx, 0x1f90ef30
jge 0x1000ad6f
mov dword [ebp - 0x780], 1
jmp 0x1000ad76
and dword [ebp - 0x780], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.10014dc6
mov ecx, dword [ebp - 0x458]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x780]
jge 0x1000ada0
mov dword [ebp - 0x460], 1
jmp 0x1000ada7
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0xffffffff
jne 0x1000adbc
mov dword [ebp - 0x788], 1
jmp 0x1000adc3
and dword [ebp - 0x788], 0
push 1
lea ecx, [ebp - 0x388]
call fcn.10014dc6
mov ecx, dword [ebp - 0x788]
add ecx, dword [eax]
mov dword [ebp - 0x958], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x388]
call fcn.10014dc1
mov dword [ebp - 0x694], 0xfffffff7
mov dword [ebp - 0x980], 1
push 3
lea ecx, [ebp - 0xbf4]
call fcn.10014d59
mov dword [ebp - 4], 7
push 2
lea ecx, [ebp - 0xbe4]
call fcn.10014d59
mov byte [ebp - 4], 8
mov dword [ebp - 0x230], 0xcee61780
mov dword [ebp - 0x14], 0
jmp 0x1000ae40
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000ae5c
push dword [ebp - 0x14]
lea ecx, [ebp - 0xbf4]
call fcn.10014dc6
mov dword [eax], 0xae9714a
jmp 0x1000ae39
mov dword [ebp - 0x14], 0
jmp 0x1000ae6c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000ae85
push dword [ebp - 0x14]
lea ecx, [ebp - 0xbe4]
call fcn.10014dc6
and dword [eax], 0
jmp 0x1000ae65
mov dword [ebp - 0x14], 0
jmp 0x1000ae95
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000aeab
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa90], 0xfffffff8
jmp 0x1000ae8e
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa90]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa90], eax
mov dword [ebp - 0x230], 0xfffffffc
jmp 0x1000aedd
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0xffffffe6
jle 0x1000af41
mov dword [ebp - 0x1bc], 2
mov dword [ebp - 0x1bc], 0
jmp 0x1000af09
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jg 0x1000af2e
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1000af2c
push 0
call dword [sym.imp.ADVAPI32.dll_GetLengthSid]
jmp 0x1000aefc
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 0
je 0x1000af3f
jmp 0x1000af41
jmp 0x1000aed0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xbe4]
call fcn.10014dc1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf4]
call fcn.10014dc1
cmp dword [ebp - 0xa4], 0
jne 0x1000af7d
cmp dword [ebp - 0xa4], 0
jne 0x1000af7d
mov dword [ebp - 0x468], 1
jmp 0x1000af84
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
neg eax
mov ecx, dword [ebp - 0xa4]
add ecx, dword [ebp - 0x468]
cmp eax, ecx
jne 0x1000afef
mov eax, dword [ebp - 0x114]
sub eax, 0x492527ea
cmp eax, dword [ebp - 0x58]
je 0x1000afc4
mov dword [ebp - 0x790], 1
jmp 0x1000afcb
and dword [ebp - 0x790], 0
imul eax, dword [ebp - 0x790], 0xfff7
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0xa4], eax
jle 0x1000afef
and dword [ebp - 0x470], 0
jmp 0x1000aff9
mov dword [ebp - 0x470], 1
cmp dword [ebp - 0x470], 0xa05d7627
ja 0x1000b011
mov dword [ebp - 0x798], 1
jmp 0x1000b018
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x798], eax
jne 0x1000b02f
mov dword [ebp - 0x7a0], 1
jmp 0x1000b036
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x7a0]
add eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0x58]
jle 0x1000b054
mov dword [ebp - 0x47c], 1
jmp 0x1000b05b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x47c], eax
jl 0x1000b072
mov dword [ebp - 0x65c], 1
jmp 0x1000b079
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x58]
imul eax, dword [ebp - 0x65c]
mov dword [ebp - 0x250], eax
push 1
lea ecx, [ebp - 0x364]
call fcn.10014d59
mov dword [ebp - 4], 9
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x238], 0x213ec752
push 4
lea ecx, [ebp - 0xc04]
call fcn.10014d59
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x94], 0
jmp 0x1000b0db
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 1
jge 0x1000b0fd
push dword [ebp - 0x94]
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov dword [eax], 0xb0f7
jmp 0x1000b0ce
mov dword [ebp - 0x94], 0
jmp 0x1000b116
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 4
jge 0x1000b138
push dword [ebp - 0x94]
lea ecx, [ebp - 0xc04]
call fcn.10014dc6
mov dword [eax], 0xdc02
jmp 0x1000b109
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov eax, dword [eax]
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x238], 0x66bb
je 0x1000b165
mov dword [ebp - 0x484], 1
jmp 0x1000b16c
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xffff
ja 0x1000b193
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
cmp dword [eax], 0
jne 0x1000b193
and dword [ebp - 0x74c], 0
jmp 0x1000b19d
mov dword [ebp - 0x74c], 1
cmp dword [ebp - 0x74c], 1
jg 0x1000b1b2
mov dword [ebp - 0x48c], 1
jmp 0x1000b1b9
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x238]
imul eax, dword [ebp - 0x48c]
imul eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x238], eax
mov esi, dword [ebp - 0x238]
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
cmp esi, dword [eax]
jl 0x1000b1f6
mov dword [ebp - 0x664], 1
jmp 0x1000b1fd
and dword [ebp - 0x664], 0
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov ecx, dword [ebp - 0x664]
cmp ecx, dword [eax]
jg 0x1000b22f
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
cmp dword [eax], 0
jne 0x1000b22f
and dword [ebp - 0x494], 0
jmp 0x1000b239
mov dword [ebp - 0x494], 1
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jne 0x1000b25c
mov dword [ebp - 0x7c8], 1
jmp 0x1000b263
and dword [ebp - 0x7c8], 0
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov ecx, dword [ebp - 0x7c8]
cmp ecx, dword [eax]
je 0x1000b286
mov dword [ebp - 0x49c], 1
jmp 0x1000b28d
and dword [ebp - 0x49c], 0
push 0
lea ecx, [ebp - 0x364]
call fcn.10014dc6
mov ecx, dword [ebp - 0x49c]
sub ecx, dword [ebp - 0x1c4]
cmp dword [eax], ecx
jl 0x1000b2b6
mov dword [ebp - 0x66c], 1
jmp 0x1000b2bd
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc04]
call fcn.10014dc1
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x364]
call fcn.10014dc1
cmp dword [ebp - 0x250], 0
je 0x1000ba3e
mov dword [ebp - 0x3c], 0xad3b3152
mov dword [ebp - 0x674], 0x40c18ab9
mov dword [ebp - 0x4b4], 0x3a4d1b40
mov dword [ebp - 0x960], 0xd214
mov dword [ebp - 0x240], 0
jmp 0x1000b332
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x1000b34e
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x2e8], 0x5f70ad6f
jmp 0x1000b325
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x2e8], 0
jmp 0x1000b37c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2e8], 0xf
jne 0x1000b3a8
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000b3a6
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x1000b361
mov dword [ebp - 0x3c], 2
jmp 0x1000b3b8
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jl 0x1000b521
push 1
lea ecx, [ebp - 0x9b0]
call fcn.10014d59
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1cc], 0
jmp 0x1000b3ef
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1000b411
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0x9b0]
call fcn.10014dc6
mov dword [eax], 0xcc4b7c70
jmp 0x1000b3e2
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xb2c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
mov dword [ebp - 0xb34], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
mov dword [ebp - 0x4a4], eax
push 0
lea ecx, [ebp - 0x9b0]
call fcn.10014dc6
mov ecx, dword [ebp - 0x4a4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
cmp dword [ebp - 0x4a4], eax
jge 0x1000b46d
mov dword [ebp - 0x754], 1
jmp 0x1000b474
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
cmp dword [ebp - 0x754], eax
jle 0x1000b498
cmp dword [ebp - 0x3c], 0
je 0x1000b498
mov dword [ebp - 0x4ac], 1
jmp 0x1000b49f
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
imul eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x674], eax
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0xb3c], eax
mov dword [ebp - 0x4b4], 0x8787d636
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0x2e8]
mov dword [ebp - 0xb44], eax
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0xb4c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2e8]
mov dword [ebp - 0x960], eax
mov esi, dword [ebp - 0x3c]
push 0
lea ecx, [ebp - 0x9b0]
call fcn.10014dc6
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b0]
call fcn.10014dc1
jmp 0x1000b3b1
mov dword [ebp - 0x4ec], 0x55db
mov dword [ebp - 0xb4], 0xd69f4288
push 1
lea ecx, [ebp - 0x83c]
call fcn.10014d59
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x10c], 8
mov dword [ebp - 0x150], 7
mov dword [ebp - 0x248], 8
mov dword [ebp - 0x4bc], 0x2715ee56
mov dword [ebp - 0x978], 0xce3044b1
mov dword [ebp - 0x18], 0
jmp 0x1000b58b
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000b5a7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
mov dword [eax], 1
jmp 0x1000b584
mov dword [ebp - 0x18], 0
jmp 0x1000b5b7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000b5cd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7d0], 7
jmp 0x1000b5b0
mov dword [ebp - 0x18], 0
jmp 0x1000b5dd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000b5f3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x684], 0xd345464c
jmp 0x1000b5d6
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x248]
inc ecx
mov dword [ebp - 0x248], ecx
test eax, eax
je 0x1000b6ff
cmp dword [ebp - 0x10c], 0
jne 0x1000b6a0
cmp dword [ebp - 0x150], 0
je 0x1000b639
mov eax, 0x26f39384
test eax, eax
je 0x1000b639
mov dword [ebp - 0x808], 1
jmp 0x1000b640
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x4bc], eax
mov esi, dword [ebp - 0x4bc]
push 0
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
cmp esi, dword [eax]
je 0x1000b673
push 0xfffffffffffffff7
pop eax
test eax, eax
jne 0x1000b673
and dword [ebp - 0x67c], 0
jmp 0x1000b67d
mov dword [ebp - 0x67c], 1
push 0
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
mov eax, dword [eax]
imul eax, dword [ebp - 0x67c]
test eax, eax
jne 0x1000b6a0
and dword [ebp - 0x4c4], 0
jmp 0x1000b6aa
mov dword [ebp - 0x4c4], 1
push 0
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
mov ecx, dword [ebp - 0x4c4]
cmp ecx, dword [eax]
je 0x1000b6c8
cmp dword [ebp - 0x248], 0
push 0
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
add eax, dword [ebp + ecx - 0x7d0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x7d0]
je 0x1000b6ff
mov dword [ebp - 0x968], 1
jmp 0x1000b706
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0xb54], eax
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0xb4], eax
jg 0x1000b727
push 5
pop eax
test eax, eax
je 0x1000b74b
mov byte [ebp - 0xd7], 0
movzx eax, byte [ebp - 0xd7]
test eax, eax
je 0x1000b746
push 0
push 0xaff
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconW]
jmp 0x1000b857
mov dword [ebp - 0xb5c], 0x11f0b9f5
mov dword [ebp - 0x150], 1
jmp 0x1000b76e
mov eax, dword [ebp - 0x150]
dec eax
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0
jl 0x1000b833
mov dword [ebp - 0xb4], 0
jmp 0x1000b794
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jg 0x1000b82e
mov dword [ebp - 0xb64], 0xffffffff
mov byte [ebp - 0x148], 0
movzx eax, byte [ebp - 0x148]
test eax, eax
je 0x1000b7cc
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
mov dword [ebp - 0x10c], 0
jmp 0x1000b7e5
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x1000b829
mov dword [ebp - 0x970], 0x2870b1b9
mov eax, dword [ebp - 0x10c]
cmp dword [ebp + eax*4 - 0x7d0], 1
jg 0x1000b814
mov dword [ebp - 0x75c], 1
jmp 0x1000b81b
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x970], eax
jmp 0x1000b7d8
jmp 0x1000b787
jmp 0x1000b761
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1000b857
push 0x1ecf
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x684], 0xc3bc
jg 0x1000b876
mov dword [ebp - 0x4cc], 1
jmp 0x1000b87d
and dword [ebp - 0x4cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x7d0]
cmp dword [ebp - 0x4cc], eax
jge 0x1000b89e
mov dword [ebp - 0x4d4], 1
jmp 0x1000b8a5
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x684]
cmp dword [ebp - 0x4d4], eax
jge 0x1000b8c6
mov dword [ebp - 0x7d4], 1
jmp 0x1000b8cd
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x7d4], eax
jne 0x1000b8e7
mov dword [ebp - 0x2d8], 1
jmp 0x1000b8ee
and dword [ebp - 0x2d8], 0
push 0
lea ecx, [ebp - 0x83c]
call fcn.10014dc6
mov ecx, dword [ebp - 0x2d8]
mov dword [eax], ecx
cmp dword [ebp - 0x2d8], 0
je 0x1000b928
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7d0], 0
je 0x1000b928
mov dword [ebp - 0x4dc], 1
jmp 0x1000b92f
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x4dc], eax
je 0x1000b94f
cmp dword [ebp - 0xb4], 0
jne 0x1000b94f
and dword [ebp - 0x68c], 0
jmp 0x1000b959
mov dword [ebp - 0x68c], 1
mov eax, dword [ebp - 0x68c]
mov dword [ebp - 0x978], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.10014dc1
mov dword [ebp - 0x1d4], 0xfffffff9
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
sub eax, dword [ebp - 0x694]
add eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x1d4]
add ecx, eax
je 0x1000b9bc
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1000b9bc
and dword [ebp - 0x4e4], 0
jmp 0x1000b9c6
mov dword [ebp - 0x4e4], 1
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x4e4], eax
jg 0x1000b9e6
cmp dword [ebp - 0x1d4], 0
jne 0x1000b9e6
and dword [ebp - 0x764], 0
jmp 0x1000b9f0
mov dword [ebp - 0x764], 1
mov dword [ebp - 0x4ec], 0xd8eb7bfb
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x250], eax
mov eax, dword [ebp - 0x4ec]
sub eax, dword [ebp - 0x694]
cmp eax, dword [ebp - 0x250]
jne 0x1000ba26
mov dword [ebp - 0x4f4], 1
jmp 0x1000ba2d
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x980], eax
jmp 0x1000bb10
mov dword [ebp - 0x114], 0
jmp 0x1000ba57
mov eax, dword [ebp - 0x114]
dec eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xffffffef
je 0x1000bb10
mov dword [ebp - 0xa00], 0x2d5e48d3
mov dword [ebp - 0x9fc], 0x2d5e48d3
mov dword [ebp - 0x9f8], 0x2d5e48d3
mov dword [ebp - 0x9f4], 0x2d5e48d3
mov dword [ebp - 0x54], 0x52061f6
mov dword [ebp - 0x54], 0
jmp 0x1000baa3
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jg 0x1000babf
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp + eax*4 - 0xa00]
mov dword [ebp + ecx*4 - 0xa00], eax
jmp 0x1000ba9c
mov dword [ebp - 0x54], 0
jmp 0x1000bacf
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x1000baf1
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1000baef
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgnIndirect]
jmp 0x1000bac8
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000bb0b
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
jmp 0x1000ba4a
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x6b4], 4
mov dword [ebp - 0x868], 0x622cfb64
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1000bb58
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
je 0x1000bdcc
mov eax, 0xbc9fa8bc
test eax, eax
je 0x1000bcb9
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xb74], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x38]
jg 0x1000bb92
mov dword [ebp - 0x80c], 1
jmp 0x1000bb99
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
sub eax, 0x3c2f893b
je 0x1000bbb8
cmp dword [ebp - 0x38], 0
je 0x1000bbb8
mov dword [ebp - 0x4fc], 1
jmp 0x1000bbbf
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
add eax, 0xffff
jne 0x1000bbd9
xor eax, eax
jne 0x1000bbd9
and dword [ebp - 0x69c], 0
jmp 0x1000bbe3
mov dword [ebp - 0x69c], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x69c], eax
jg 0x1000bbfa
mov dword [ebp - 0x97c], 1
jmp 0x1000bc01
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xb7c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xb84], eax
mov eax, 0x1260e2ef
test eax, eax
jne 0x1000bc2b
cmp dword [ebp - 0x20], 0
jne 0x1000bc2b
and dword [ebp - 0x504], 0
jmp 0x1000bc35
mov dword [ebp - 0x504], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x504], eax
jne 0x1000bc4c
mov dword [ebp - 0x76c], 1
jmp 0x1000bc53
and dword [ebp - 0x76c], 0
cmp dword [ebp - 0x76c], 0x3d385e13
jne 0x1000bc6b
mov dword [ebp - 0x50c], 1
jmp 0x1000bc72
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x50c]
sub eax, dword [ebp - 0x38]
je 0x1000bc8e
xor eax, eax
inc eax
je 0x1000bc8e
mov dword [ebp - 0x6a4], 1
jmp 0x1000bc95
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
sub eax, 4
je 0x1000bcb2
cmp dword [ebp - 0x20], 0
je 0x1000bcb2
mov dword [ebp - 0x514], 1
jmp 0x1000bcb9
and dword [ebp - 0x514], 0
cmp dword [ebp - 0x20], 1
jne 0x1000bccb
mov dword [ebp - 0x7dc], 1
jmp 0x1000bcd2
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x7dc], eax
jl 0x1000bcef
cmp dword [ebp - 0x20], 0
je 0x1000bcef
mov dword [ebp - 0x51c], 1
jmp 0x1000bcf6
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x51c], eax
jge 0x1000bd0d
mov dword [ebp - 0x6ac], 1
jmp 0x1000bd14
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x6ac], eax
jge 0x1000bd2b
mov dword [ebp - 0x524], 1
jmp 0x1000bd32
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x524]
sub eax, dword [ebp - 0x20]
shl eax, 2
test eax, eax
jne 0x1000bd51
cmp dword [ebp - 0x38], 0
jne 0x1000bd51
and dword [ebp - 0x774], 0
jmp 0x1000bd5b
mov dword [ebp - 0x774], 1
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x774]
cmp eax, dword [ebp - 0x20]
je 0x1000bd7c
cmp dword [ebp - 0x38], 0
je 0x1000bd7c
mov dword [ebp - 0x52c], 1
jmp 0x1000bd83
and dword [ebp - 0x52c], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x6b4], eax
mov eax, dword [ebp - 0x52c]
add eax, 0x5601
cmp dword [ebp - 0x6b4], eax
jge 0x1000bdab
mov dword [ebp - 0x534], 1
jmp 0x1000bdb2
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x534]
test eax, eax
je 0x1000bdcc
mov dword [ebp - 0x824], 1
jmp 0x1000bdd3
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x868], eax
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x574], 4
mov dword [ebp - 0x87c], 0x622cfb64
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1000be27
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
je 0x1000c09b
mov eax, 0xbc9fa8bc
test eax, eax
je 0x1000bf88
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb8c], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x30]
jg 0x1000be61
mov dword [ebp - 0x53c], 1
jmp 0x1000be68
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
sub eax, 0x3c2f893b
je 0x1000be87
cmp dword [ebp - 0x30], 0
je 0x1000be87
mov dword [ebp - 0x6bc], 1
jmp 0x1000be8e
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0x6bc]
add eax, 0xffff
jne 0x1000bea8
xor eax, eax
jne 0x1000bea8
and dword [ebp - 0x544], 0
jmp 0x1000beb2
mov dword [ebp - 0x544], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x544], eax
jg 0x1000bec9
mov dword [ebp - 0x8c4], 1
jmp 0x1000bed0
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xb94], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xb9c], eax
mov eax, 0x1260e2ef
test eax, eax
jne 0x1000befa
cmp dword [ebp - 0x28], 0
jne 0x1000befa
and dword [ebp - 0x77c], 0
jmp 0x1000bf04
mov dword [ebp - 0x77c], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x77c], eax
jne 0x1000bf1b
mov dword [ebp - 0x54c], 1
jmp 0x1000bf22
and dword [ebp - 0x54c], 0
cmp dword [ebp - 0x54c], 0x3d385e13
jne 0x1000bf3a
mov dword [ebp - 0x6c4], 1
jmp 0x1000bf41
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x6c4]
sub eax, dword [ebp - 0x30]
je 0x1000bf5d
xor eax, eax
inc eax
je 0x1000bf5d
mov dword [ebp - 0x554], 1
jmp 0x1000bf64
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
sub eax, 4
je 0x1000bf81
cmp dword [ebp - 0x28], 0
je 0x1000bf81
mov dword [ebp - 0x7e4], 1
jmp 0x1000bf88
and dword [ebp - 0x7e4], 0
cmp dword [ebp - 0x28], 1
jne 0x1000bf9a
mov dword [ebp - 0x55c], 1
jmp 0x1000bfa1
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x55c], eax
jl 0x1000bfbe
cmp dword [ebp - 0x28], 0
je 0x1000bfbe
mov dword [ebp - 0x6cc], 1
jmp 0x1000bfc5
and dword [ebp - 0x6cc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x6cc], eax
jge 0x1000bfdc
mov dword [ebp - 0x564], 1
jmp 0x1000bfe3
and dword [ebp - 0x564], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x564], eax
jge 0x1000bffa
mov dword [ebp - 0x784], 1
jmp 0x1000c001
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
sub eax, dword [ebp - 0x28]
shl eax, 2
test eax, eax
jne 0x1000c020
cmp dword [ebp - 0x30], 0
jne 0x1000c020
and dword [ebp - 0x56c], 0
jmp 0x1000c02a
mov dword [ebp - 0x56c], 1
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x28]
je 0x1000c04b
cmp dword [ebp - 0x30], 0
je 0x1000c04b
mov dword [ebp - 0x6d4], 1
jmp 0x1000c052
and dword [ebp - 0x6d4], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x6d4]
add eax, 0x5601
cmp dword [ebp - 0x574], eax
jge 0x1000c07a
mov dword [ebp - 0x814], 1
jmp 0x1000c081
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x28]
imul eax, dword [ebp - 0x814]
test eax, eax
je 0x1000c09b
mov dword [ebp - 0x57c], 1
jmp 0x1000c0a2
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x87c], eax
mov dword [ebp - 0x878], 0xba772304
mov dword [ebp - 0x1dc], 0
jmp 0x1000c0d1
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 1
jge 0x1000c0ed
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0x258], 7
jmp 0x1000c0c4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x258], 0x1d
jmp 0x1000c11b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x258]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x258], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x258], 0xffffffe6
jle 0x1000c143
mov dword [ebp - 0x8fc], 0xfffffffc
mov eax, dword [ebp - 0x878]
mov dword [ebp - 0x8fc], eax
jmp 0x1000c100
mov dword [ebp - 0x880], 0xba772304
mov dword [ebp - 0x1e4], 0
jmp 0x1000c166
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x1000c182
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x260], 7
jmp 0x1000c159
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x260], 0x1d
jmp 0x1000c1b0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x260]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x260], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x260], 0xffffffe6
jle 0x1000c1d8
mov dword [ebp - 0x944], 0xfffffffc
mov eax, dword [ebp - 0x880]
mov dword [ebp - 0x944], eax
jmp 0x1000c195
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x830], 4
mov dword [ebp - 0x908], 0x622cfb64
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000c220
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateHalftonePalette]
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
je 0x1000c494
mov eax, 0xbc9fa8bc
test eax, eax
je 0x1000c381
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x34]
jg 0x1000c25a
mov dword [ebp - 0x6dc], 1
jmp 0x1000c261
and dword [ebp - 0x6dc], 0
mov eax, dword [ebp - 0x6dc]
sub eax, 0x3c2f893b
je 0x1000c280
cmp dword [ebp - 0x34], 0
je 0x1000c280
mov dword [ebp - 0x584], 1
jmp 0x1000c287
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
add eax, 0xffff
jne 0x1000c2a1
xor eax, eax
jne 0x1000c2a1
and dword [ebp - 0x78c], 0
jmp 0x1000c2ab
mov dword [ebp - 0x78c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x78c], eax
jg 0x1000c2c2
mov dword [ebp - 0x888], 1
jmp 0x1000c2c9
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xbb4], eax
mov eax, 0x1260e2ef
test eax, eax
jne 0x1000c2f3
cmp dword [ebp - 0x24], 0
jne 0x1000c2f3
and dword [ebp - 0x58c], 0
jmp 0x1000c2fd
mov dword [ebp - 0x58c], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x58c], eax
jne 0x1000c314
mov dword [ebp - 0x6e4], 1
jmp 0x1000c31b
and dword [ebp - 0x6e4], 0
cmp dword [ebp - 0x6e4], 0x3d385e13
jne 0x1000c333
mov dword [ebp - 0x594], 1
jmp 0x1000c33a
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x594]
sub eax, dword [ebp - 0x34]
je 0x1000c356
xor eax, eax
inc eax
je 0x1000c356
mov dword [ebp - 0x7ec], 1
jmp 0x1000c35d
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x7ec]
sub eax, 4
je 0x1000c37a
cmp dword [ebp - 0x24], 0
je 0x1000c37a
and dword [ebp - 0x59c], 0
cmp dword [ebp - 0x24], 1
jne 0x1000c393
mov dword [ebp - 0x6ec], 1
jmp 0x1000c39a
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x6ec], eax
jl 0x1000c3b7
cmp dword [ebp - 0x24], 0
je 0x1000c3b7
mov dword [ebp - 0x5a4], 1
jmp 0x1000c3be
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x5a4], eax
jge 0x1000c3d5
mov dword [ebp - 0x794], 1
jmp 0x1000c3dc
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x794], eax
jge 0x1000c3f3
mov dword [ebp - 0x5ac], 1
jmp 0x1000c3fa
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5ac]
sub eax, dword [ebp - 0x24]
shl eax, 2
test eax, eax
jne 0x1000c419
cmp dword [ebp - 0x34], 0
jne 0x1000c419
and dword [ebp - 0x6f4], 0
jmp 0x1000c423
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x6f4]
cmp eax, dword [ebp - 0x24]
je 0x1000c444
cmp dword [ebp - 0x34], 0
je 0x1000c444
mov dword [ebp - 0x38c], 1
jmp 0x1000c44b
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x38c]
add eax, 0x5601
cmp dword [ebp - 0x830], eax
jge 0x1000c473
mov dword [ebp - 0x5bc], 1
jmp 0x1000c47a
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x5bc]
test eax, eax
je 0x1000c494
mov dword [ebp - 0x6fc], 1
jmp 0x1000c49b
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x908], eax
mov dword [ebp - 0x890], 0xba772304
mov dword [ebp - 0x1ec], 0
jmp 0x1000c4ca
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 1
jge 0x1000c4e6
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0x268], 7
jmp 0x1000c4bd
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x268], 0x1d
jmp 0x1000c514
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x268]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x268], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x268], 0xffffffe6
jle 0x1000c53c
mov dword [ebp - 0x964], 0xfffffffc
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x964], eax
jmp 0x1000c4f9
mov dword [ebp - 0x11c], 0x30f94f37
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x1f4], 0
jmp 0x1000c569
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 1
jge 0x1000c585
mov eax, dword [ebp - 0x1f4]
mov dword [ebp + eax*4 - 0x1fc], 0xc2e0cf57
jmp 0x1000c55c
mov dword [ebp - 0x11c], 0
jmp 0x1000c59e
cmp dword [ebp - 0x11c], 0
jl 0x1000c6f3
mov dword [ebp - 0xa8], 0xccbad86e
mov dword [ebp - 0x898], 1
mov dword [ebp - 0xa8], 0
jmp 0x1000c5d8
cmp dword [ebp - 0xa8], 0
jg 0x1000c653
mov dword [ebp - 0x270], 0x80e3580d
mov dword [ebp - 0x270], 0
jmp 0x1000c604
mov eax, dword [ebp - 0x11c]
cmp dword [ebp + eax*4 - 0x1fc], 0
je 0x1000c67d
mov byte [ebp - 0x147], 0
movzx eax, byte [ebp - 0x147]
test eax, eax
je 0x1000c71e
push 0x1711
push 0x1c5a
push 0
push 0x1adf
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov dword [ebp - 0x8a0], 0xba772304
mov dword [ebp - 0x278], 0
jmp 0x1000c741
cmp dword [ebp - 0x278], 1
jge 0x1000c75d