Function at 0x10008d79
Capabilities:
Get disk information
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10081c8c
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf48
push esi
push edi
mov dword [ebp - 0x2ac], 0xffffffff
mov dword [ebp - 0xbe0], 0x2961c0f8
mov dword [ebp - 0xc68], 0x7b5ca986
mov dword [ebp - 0xc50], 0x185a1fa1
mov dword [ebp - 0xc6c], 0x39e3cf95
mov dword [ebp - 0xd4c], 0
mov dword [ebp - 0xc78], 0xffffffff
push 4
lea ecx, [ebp - 0xb28]
call fcn.10015f8b
and dword [ebp - 4], 0
mov dword [ebp - 0xa4], 0
jmp 0x10008e09
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x10008e25
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xee8], 0
jmp 0x10008dfc
mov dword [ebp - 0xa4], 0
jmp 0x10008e3e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 4
jge 0x10008e60
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xb28]
call fcn.10015ff8
mov dword [eax], 8
jmp 0x10008e31
mov dword [ebp - 0x2ac], 0x10
jmp 0x10008e79
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 0x12
jge 0x10008f09
push 2
lea ecx, [ebp - 0x934]
call fcn.10015f8b
mov byte [ebp - 4], 1
mov dword [ebp - 0x184], 0
jmp 0x10008eb0
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 2
jge 0x10008ed2
push dword [ebp - 0x184]
lea ecx, [ebp - 0x934]
call fcn.10015ff8
mov dword [eax], 0x6e87
jmp 0x10008ea3
push 0
lea ecx, [ebp - 0x934]
call fcn.10015ff8
cmp dword [eax], 0
je 0x10008ef5
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x934]
call fcn.10015ff3
jmp 0x10008f09
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x934]
call fcn.10015ff3
jmp 0x10008e6c
push 3
lea ecx, [ebp - 0xb28]
call fcn.10015ff8
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x42c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb28]
call fcn.10015ff3
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0xda4], 0x2961c0f8
mov dword [ebp - 0xc80], 0x7b5ca986
mov dword [ebp - 0xd54], 0x185a1fa1
mov dword [ebp - 0xc88], 0x39e3cf95
mov dword [ebp - 0xd8c], 0
mov dword [ebp - 0xc90], 0xffffffff
push 4
lea ecx, [ebp - 0xb40]
call fcn.10015f8b
mov dword [ebp - 4], 2
mov dword [ebp - 0x58], 0
jmp 0x10008fa6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10008fbc
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xf00], 0
jmp 0x10008f9f
mov dword [ebp - 0x58], 0
jmp 0x10008fcc
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 4
jge 0x10008fe8
push dword [ebp - 0x58]
lea ecx, [ebp - 0xb40]
call fcn.10015ff8
mov dword [eax], 8
jmp 0x10008fc5
mov dword [ebp - 0x224], 0x10
jmp 0x10009001
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0x12
jge 0x10009091
push 2
lea ecx, [ebp - 0x9e8]
call fcn.10015f8b
mov byte [ebp - 4], 3
mov dword [ebp - 0x18c], 0
jmp 0x10009038
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 2
jge 0x1000905a
push dword [ebp - 0x18c]
lea ecx, [ebp - 0x9e8]
call fcn.10015ff8
mov dword [eax], 0x6e87
jmp 0x1000902b
push 0
lea ecx, [ebp - 0x9e8]
call fcn.10015ff8
cmp dword [eax], 0
je 0x1000907d
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9e8]
call fcn.10015ff3
jmp 0x10009091
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x9e8]
call fcn.10015ff3
jmp 0x10008ff4
push 3
lea ecx, [ebp - 0xb40]
call fcn.10015ff8
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x72c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb40]
call fcn.10015ff3
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0xd5c], 0x2961c0f8
mov dword [ebp - 0xc98], 0x7b5ca986
push 2
lea ecx, [ebp - 0x854]
call fcn.10015f8b
mov dword [ebp - 4], 4
mov dword [ebp - 0x274], 0
jmp 0x1000910f
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x10009131
push dword [ebp - 0x274]
lea ecx, [ebp - 0x854]
call fcn.10015ff8
mov dword [eax], 0xac64a684
jmp 0x10009102
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x1000914b
push 0
call dword [sym.imp.GDI32.dll_CreatePalette]
push 0
lea ecx, [ebp - 0x854]
call fcn.10015ff8
mov dword [eax], 0xfffffff6
jmp 0x10009184
push 0
lea ecx, [ebp - 0x854]
call fcn.10015ff8
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x734]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x854]
call fcn.10015ff8
cmp dword [eax], 5
jle 0x100091b9
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x100091b7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_RemovePropA]
jmp 0x10009160
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.10015ff3
mov dword [ebp - 0xdb4], 0x185a1fa1
push 3
lea ecx, [ebp - 0x140]
call fcn.10015f8b
mov dword [ebp - 4], 5
mov dword [ebp - 0x8ec], 1
mov dword [ebp - 0x8e8], 1
mov dword [ebp - 0x8e4], 1
mov dword [ebp - 0x8e0], 1
mov dword [ebp - 0x88], 0
jmp 0x10009227
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10009243
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xb0], 0xaf1124f0
jmp 0x1000921a
mov dword [ebp - 0x88], 0
jmp 0x1000925c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000927b
push dword [ebp - 0x88]
lea ecx, [ebp - 0x140]
call fcn.10015ff8
and dword [eax], 0
jmp 0x1000924f
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
and dword [eax], 0
jmp 0x100092b1
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov dword [ebp - 0x73c], eax
mov eax, dword [ebp - 0x73c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x73c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
cmp dword [eax], 0
jg 0x100096f4
mov dword [ebp - 0x60], 0xdd3f4672
push 4
lea ecx, [ebp - 0x864]
call fcn.10015f8b
mov byte [ebp - 4], 6
mov dword [ebp - 0x350], 6
mov dword [ebp - 0x548], 0x101eae88
mov dword [ebp - 0x194], 0
jmp 0x1000930c
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 4
jge 0x1000932e
push dword [ebp - 0x194]
lea ecx, [ebp - 0x864]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x100092ff
mov dword [ebp - 0x60], 0
jmp 0x1000933e
mov eax, dword [ebp - 0x60]
dec eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jl 0x100096b4
mov dword [ebp - 0x7d4], 0xa4a2c6eb
mov dword [ebp - 0x7e4], 0xf121adf5
mov dword [ebp - 0x22c], 0
jmp 0x10009375
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 1
jge 0x1000938e
mov eax, dword [ebp - 0x22c]
mov dword [ebp + eax*4 - 0x18], 0x9fb37b04
jmp 0x10009368
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x18], 0
jmp 0x100093b3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x18], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
jl 0x1000969d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp + eax*4 - 0xb0], 0
jne 0x1000946c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x18], 0
je 0x10009451
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
imul eax, dword [eax], 0x2812
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x18]
jne 0x10009414
mov dword [ebp - 0x744], 1
jmp 0x1000941b
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x744], eax
jg 0x10009432
mov dword [ebp - 0x640], 1
jmp 0x10009439
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0xaedf47f2
jb 0x10009451
mov dword [ebp - 0x70c], 1
jmp 0x10009458
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x70c], eax
jge 0x1000946c
and dword [ebp - 0x900], 0
jmp 0x10009476
mov dword [ebp - 0x900], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov dword [ebp - 0xca8], eax
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0xd64], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
cmp dword [ebp + eax*4 - 0xb0], 0
jbe 0x100094b2
mov dword [ebp - 0x364], 1
jmp 0x100094b9
and dword [ebp - 0x364], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov ecx, dword [ebp - 0x364]
cmp ecx, dword [eax]
jge 0x100094dc
mov dword [ebp - 0x7dc], 1
jmp 0x100094e3
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0xcb8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
mov dword [ebp - 0xd94], eax
push 0
lea ecx, [ebp - 0x864]
call fcn.10015ff8
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0x18]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
mov dword [ebp - 0x548], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8ec]
cmp dword [ebp - 0x548], eax
jg 0x1000954a
mov dword [ebp - 0x358], 1
jmp 0x10009551
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0x358]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x18]
jle 0x10009573
mov dword [ebp - 0x6c0], 1
jmp 0x1000957a
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x18]
mov eax, dword [ebp + eax*4 - 0xb0]
cmp eax, dword [ebp - 0x6c0]
jne 0x1000959f
mov dword [ebp - 0x360], 1
jmp 0x100095a6
and dword [ebp - 0x360], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov ecx, dword [ebp - 0x360]
cmp ecx, dword [eax]
jl 0x100095c9
mov dword [ebp - 0x550], 1
jmp 0x100095d0
and dword [ebp - 0x550], 0
cmp dword [ebp - 0x550], 1
jbe 0x100095f7
push 0
lea ecx, [ebp - 0x864]
call fcn.10015ff8
cmp dword [eax], 0
je 0x100095f7
mov dword [ebp - 0x368], 1
jmp 0x100095fe
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 0xb5a40a7b
jae 0x10009616
mov dword [ebp - 0x648], 1
jmp 0x1000961d
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xfe2d
jge 0x10009635
mov dword [ebp - 0x370], 1
jmp 0x1000963c
and dword [ebp - 0x370], 0
push 0
lea ecx, [ebp - 0x864]
call fcn.10015ff8
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
jle 0x10009668
mov eax, 0x60700c0d
test eax, eax
je 0x10009668
mov dword [ebp - 0x558], 1
jmp 0x1000966f
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 0xfffffffd
jle 0x10009684
mov dword [ebp - 0x378], 1
jmp 0x1000968b
and dword [ebp - 0x378], 0
mov eax, dword [ebp - 0x378]
inc eax
mov dword [ebp - 0x7e4], eax
jmp 0x1000939e
mov eax, dword [ebp - 0x60]
cmp dword [ebp + eax*4 - 0xb0], 0
je 0x100096af
jmp 0x10009337
jmp 0x10009337
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov esi, dword [eax]
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov eax, dword [eax]
mov ecx, dword [ebp + esi*4 - 0xb0]
mov dword [ebp + eax*4 - 0xb0], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x864]
call fcn.10015ff3
jmp 0x1000928d
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0x8ec]
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
cmp esi, dword [eax]
jg 0x1000971e
mov dword [ebp - 0x560], 1
jmp 0x10009725
and dword [ebp - 0x560], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xb0]
cmp dword [eax], ecx
jl 0x1000974f
mov dword [ebp - 0x700], 1
jmp 0x10009756
and dword [ebp - 0x700], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8ec]
cmp dword [ebp - 0x700], eax
jg 0x10009777
mov dword [ebp - 0x380], 1
jmp 0x1000977e
and dword [ebp - 0x380], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov ecx, dword [ebp - 0x380]
add ecx, dword [eax]
cmp dword [ebp - 0x560], ecx
jne 0x100097a7
mov dword [ebp - 0x388], 1
jmp 0x100097ae
and dword [ebp - 0x388], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x8ec]
cmp dword [ebp - 0x388], eax
jge 0x100097ce
mov dword [ebp - 0x7ec], 1
jmp 0x100097d5
and dword [ebp - 0x7ec], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
push 0
lea ecx, [ebp - 0x140]
call fcn.10015ff8
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov esi, eax
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov ecx, dword [esi]
cmp ecx, dword [eax]
jge 0x1000981d
mov dword [ebp - 0x650], 1
jmp 0x10009824
and dword [ebp - 0x650], 0
push 2
lea ecx, [ebp - 0x140]
call fcn.10015ff8
mov ecx, dword [ebp - 0x650]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.10015ff3
mov dword [ebp - 0xcc8], 0x39e3cf95
mov dword [ebp - 0xac], 0
push 2
lea ecx, [ebp - 0x94c]
call fcn.10015f8b
mov dword [ebp - 4], 7
mov dword [ebp - 0x98], 0xfffffffa
mov dword [ebp - 0x29c], 5
push 4
lea ecx, [ebp - 0x768]
call fcn.10015f8b
mov byte [ebp - 4], 8
mov dword [ebp - 0x14], 0
jmp 0x100098a5
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x100098c1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x94c]
call fcn.10015ff8
mov dword [eax], 0xec7516a2
jmp 0x1000989e
mov dword [ebp - 0x14], 0
jmp 0x100098d1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x100098ed
push dword [ebp - 0x14]
lea ecx, [ebp - 0x768]
call fcn.10015ff8
mov dword [eax], 0x477ae271
jmp 0x100098ca
mov dword [ebp - 0x14], 0
jmp 0x100098fd
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10009913
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xca4], 0x7736
jmp 0x100098f6
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xb98], eax
mov eax, dword [ebp - 0xac]
neg eax
cmp eax, 0xfffffff8
jae 0x10009a70
cmp dword [ebp - 0xac], 0xa5f2
jne 0x10009948
mov dword [ebp - 0x390], 1
jmp 0x1000994f
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x390], eax
jl 0x10009969
mov dword [ebp - 0x568], 1
jmp 0x10009970
and dword [ebp - 0x568], 0
cmp dword [ebp - 0x568], 0xfffffffa
jl 0x10009985
mov dword [ebp - 0x398], 1
jmp 0x1000998c
and dword [ebp - 0x398], 0
cmp dword [ebp - 0x398], 0xffff
jb 0x1000999f
cmp dword [ebp - 0xac], 0
mov eax, dword [ebp - 0xac]
add eax, 4
mov dword [ebp - 0x98], eax
je 0x100099c5
cmp dword [ebp - 0x98], 0
je 0x100099c5
mov dword [ebp - 0x6c8], 1
jmp 0x100099cc
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
dec eax
je 0x100099f3
mov eax, 0xcc51
test eax, eax
jne 0x100099f3
and dword [ebp - 0x3a0], 0
jmp 0x100099fd
mov dword [ebp - 0x3a0], 1
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x3a0], eax
jle 0x10009a17
mov dword [ebp - 0x570], 1
jmp 0x10009a1e
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x570], eax
jge 0x10009a38
mov dword [ebp - 0x7f4], 1
jmp 0x10009a3f
and dword [ebp - 0x7f4], 0
push 1
lea ecx, [ebp - 0x94c]
call fcn.10015ff8
mov dword [eax], 1
push 0
lea ecx, [ebp - 0x94c]
call fcn.10015ff8
cmp dword [eax], 0
je 0x10009a70
mov dword [ebp - 0x308], 1
jmp 0x10009a77
and dword [ebp - 0x308], 0
push 2
lea ecx, [ebp - 0x768]
call fcn.10015ff8
mov ecx, dword [ebp - 0x308]
mov dword [eax], ecx
cmp dword [ebp - 0x308], 0xfff8
je 0x10009aa4
mov dword [ebp - 0x3a8], 1
jmp 0x10009aab
and dword [ebp - 0x3a8], 0
cmp dword [ebp - 0x3a8], 0x336d065
jge 0x10009bf3
mov dword [ebp - 0x19c], 0
jmp 0x10009ad4
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 4
jge 0x10009af0
mov eax, dword [ebp - 0x19c]
mov dword [ebp + eax*4 - 0xec4], 0xedb553a8
jmp 0x10009ac7
mov dword [ebp - 0x98], 3
jmp 0x10009b09
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jl 0x10009bf1
push dword [ebp - 0x98]
lea ecx, [ebp - 0x768]
call fcn.10015ff8
cmp dword [eax], 0
jne 0x10009b41
mov eax, 0xe8e5
test eax, eax
jne 0x10009b41
mov dword [ebp - 0x658], 1
jmp 0x10009b48
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0xe01afec1
je 0x10009b60
mov dword [ebp - 0x3b0], 1
jmp 0x10009b67
and dword [ebp - 0x3b0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca4]
cmp dword [ebp - 0x3b0], eax
jle 0x10009b88
mov dword [ebp - 0x578], 1
jmp 0x10009b8f
and dword [ebp - 0x578], 0
push dword [ebp - 0x98]
lea ecx, [ebp - 0x768]
call fcn.10015ff8
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0xec4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca4]
cmp dword [ebp - 0x578], eax
jge 0x10009bd0
mov dword [ebp - 0x3b8], 1
jmp 0x10009bd7
and dword [ebp - 0x3b8], 0
push 2
lea ecx, [ebp - 0x768]
call fcn.10015ff8
mov ecx, dword [ebp - 0x3b8]
mov dword [eax], ecx
jmp 0x10009afc
jmp 0x10009c3b
mov dword [ebp - 0x7fc], 1
mov dword [ebp - 0x7ac], 0xd890f6da
cmp dword [ebp - 0x7fc], 0
jne 0x10009c1c
mov dword [ebp - 0x728], 1
jmp 0x10009c23
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x29c]
mov dword [ebp - 0x7ac], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x768]
call fcn.10015ff3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94c]
call fcn.10015ff3
mov dword [ebp - 0x68], 0xa53d06ce
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x104], 0x37f1bd53
mov dword [ebp - 0xb90], 7
mov dword [ebp - 0xb8c], 7
mov dword [ebp - 0xb88], 7
mov dword [ebp - 0xb84], 7
mov dword [ebp - 0x318], 0x764fe605
mov dword [ebp - 0x598], 1
mov dword [ebp - 0x1a4], 0xb76a
mov dword [ebp - 0xa28], 0x8d4885c3
mov dword [ebp - 0xa24], 0x8d4885c3
mov dword [ebp - 0xa20], 0x8d4885c3
mov dword [ebp - 0xa1c], 0x8d4885c3
mov dword [ebp - 0x824], 0x546d79c1
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
je 0x10009d30
mov dword [ebp - 0x3c0], 0xffff
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10009d1e
push 0x2af
push 0
call dword [sym.imp.USER32.dll_CharUpperBuffW]
mov eax, dword [ebp - 0x3c0]
dec eax
mov dword [ebp - 0x3c0], eax
jmp 0x10009ea2
mov dword [ebp - 0x150], 0xfffffff7
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x1c], eax
jle 0x10009d4e
mov dword [ebp - 0x580], 1
jmp 0x10009d55
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x580], eax
jl 0x10009d75
cmp dword [ebp - 0x1c], 0
je 0x10009d75
mov dword [ebp - 0x3c8], 1
jmp 0x10009d7c
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3c8], eax
jle 0x10009d93
mov dword [ebp - 0x80c], 1
jmp 0x10009d9a
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xb9c], eax
cmp dword [ebp - 0x1c], 1
jg 0x10009db8
cmp dword [ebp - 0x68], 0
jne 0x10009db8
and dword [ebp - 0x660], 0
jmp 0x10009dc2
mov dword [ebp - 0x660], 1
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x660], eax
jne 0x10009ddc
mov dword [ebp - 0x3d0], 1
jmp 0x10009de3
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
sub eax, 0xa
cmp dword [ebp - 0x1c], eax
je 0x10009dfd
mov dword [ebp - 0x588], 1
jmp 0x10009e04
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x588]
jge 0x10009e1e
mov dword [ebp - 0x814], 1
jmp 0x10009e25
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0xba4], eax
mov eax, 0x467b47e0
add eax, 0xfffffffd
je 0x10009e56
cmp dword [ebp - 0x68], 0
je 0x10009e56
cmp dword [ebp - 0x150], 0
je 0x10009e56
mov dword [ebp - 0x3d8], 1
jmp 0x10009e5d
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x3d8], eax
jge 0x10009e74
mov dword [ebp - 0x6d0], 1
jmp 0x10009e7b
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x6d0]
jl 0x10009e92
mov dword [ebp - 0x3e0], 1
jmp 0x10009e99
and dword [ebp - 0x3e0], 0
mov eax, dword [ebp - 0x3e0]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbac], eax
imul eax, dword [ebp - 0x68], 0xb964
test eax, eax
jne 0x10009ecb
mov eax, 0xffff
test eax, eax
jne 0x10009ecb
and dword [ebp - 0x590], 0
jmp 0x10009ed5
mov dword [ebp - 0x590], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x590]
mov dword [ebp + eax - 0xb90], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbb4], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x318], eax
jge 0x10009f1d
mov eax, 0xddd0c6a3
test eax, eax
jne 0x10009f1d
and dword [ebp - 0x3e8], 0
jmp 0x10009f27
mov dword [ebp - 0x3e8], 1
cmp dword [ebp - 0x3e8], 0x8c6a
jge 0x10009f3f
mov dword [ebp - 0x668], 1
jmp 0x10009f46
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x668]
je 0x10009f6a
or eax, 0xffffffff
je 0x10009f6a
or eax, 0xffffffff
je 0x10009f6a
mov dword [ebp - 0x3f0], 1
jmp 0x10009f71
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x598], eax
jg 0x10009f97
mov dword [ebp - 0x3f8], 1
jmp 0x10009f9e
and dword [ebp - 0x3f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa28]
cmp dword [ebp - 0x3f8], eax
jg 0x10009fbf
mov dword [ebp - 0x2e8], 1
jmp 0x10009fc6
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2e8]
mov dword [ebp + eax - 0xa28], ecx
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x2e8], eax
jge 0x10009ff3
mov dword [ebp - 0x708], 1
jmp 0x10009ffa
and dword [ebp - 0x708], 0
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x708]
dec ecx
sub eax, ecx
cmp eax, dword [ebp - 0x68]
jge 0x1000a017
mov dword [ebp - 0x400], 1
jmp 0x1000a01e
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x1a4]
cmp dword [ebp - 0x400], eax
jl 0x1000a038
mov dword [ebp - 0x5a0], 1
jmp 0x1000a03f
and dword [ebp - 0x5a0], 0
cmp dword [ebp - 0x5a0], 1
jge 0x1000a054
mov dword [ebp - 0x408], 1
jmp 0x1000a05b
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x408]
jge 0x1000a07b
mov dword [ebp - 0x81c], 1
jmp 0x1000a082
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xbbc], eax
cmp dword [ebp - 0x318], 0
jne 0x1000a0a9
cmp dword [ebp - 0x1a4], 0
jne 0x1000a0a9
and dword [ebp - 0x670], 0
jmp 0x1000a0b3
mov dword [ebp - 0x670], 1
mov eax, dword [ebp - 0x670]
mov dword [ebp - 0x824], eax
mov dword [ebp - 0xbc4], 0
mov dword [ebp - 0xbcc], 0xffffffff
push 4
lea ecx, [ebp - 0xb58]
call fcn.10015f8b
mov dword [ebp - 4], 9
mov dword [ebp - 0x90], 0
jmp 0x1000a100
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000a11c
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf18], 0
jmp 0x1000a0f3
mov dword [ebp - 0x90], 0
jmp 0x1000a135
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1000a157
push dword [ebp - 0x90]
lea ecx, [ebp - 0xb58]
call fcn.10015ff8
mov dword [eax], 8
jmp 0x1000a128
mov dword [ebp - 0x234], 0x10
jmp 0x1000a170
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x12
jge 0x1000a200
push 2
lea ecx, [ebp - 0x9c4]
call fcn.10015f8b
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1ac], 0
jmp 0x1000a1a7
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 2
jge 0x1000a1c9
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0x9c4]
call fcn.10015ff8
mov dword [eax], 0x6e87
jmp 0x1000a19a
push 0
lea ecx, [ebp - 0x9c4]
call fcn.10015ff8
cmp dword [eax], 0
je 0x1000a1ec
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x9c4]
call fcn.10015ff3
jmp 0x1000a200
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x9c4]
call fcn.10015ff3
jmp 0x1000a163
push 3
lea ecx, [ebp - 0xb58]
call fcn.10015ff8
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x410]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb58]
call fcn.10015ff3
push 2
lea ecx, [ebp - 0xcb4]
call fcn.10015f8b
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1b4], 5
mov dword [ebp - 0x27c], 0
jmp 0x1000a26a
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x1000a28c
push dword [ebp - 0x27c]
lea ecx, [ebp - 0xcb4]
call fcn.10015ff8
mov dword [eax], 0xffff
jmp 0x1000a25d
mov dword [ebp - 0x1b4], 1
jmp 0x1000a2a5
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x1000a353
mov dword [ebp - 0x23c], 0x7a888ada
mov dword [ebp - 0x23c], 1
jmp 0x1000a2d5
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jl 0x1000a34e
mov dword [ebp - 0x10c], 0xfb5a5efa
mov dword [ebp - 0x82c], 0xfffffffd
mov dword [ebp - 0x10c], 0
jmp 0x1000a30b
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 1
jg 0x1000a333
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000a331
push 0x177a
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x1000a2fe
mov dword [ebp - 0x10c], 0xfffffff9
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x82c], eax
jmp 0x1000a2c8
jmp 0x1000a298
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcb4]
call fcn.10015ff3
push 2
lea ecx, [ebp - 0xcc4]
call fcn.10015f8b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x2bc], 5
mov dword [ebp - 0x1bc], 0
jmp 0x1000a399
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x1000a3bb
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xcc4]
call fcn.10015ff8
mov dword [eax], 0xffff
jmp 0x1000a38c
mov dword [ebp - 0x2bc], 1
jmp 0x1000a3d4
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 0
jl 0x1000a482
mov dword [ebp - 0x1c4], 0x7a888ada
mov dword [ebp - 0x1c4], 1
jmp 0x1000a404
mov eax, dword [ebp - 0x1c4]
dec eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0
jl 0x1000a47d
mov dword [ebp - 0x11c], 0xfb5a5efa
mov dword [ebp - 0x834], 0xfffffffd
mov dword [ebp - 0x11c], 0
jmp 0x1000a43a
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1000a462
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x1000a460
push 0x177a
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x1000a42d
mov dword [ebp - 0x11c], 0xfffffff9
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x834], eax
jmp 0x1000a3f7
jmp 0x1000a3c7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc4]
call fcn.10015ff3
mov dword [ebp - 0x114], 1
push 1
lea ecx, [ebp - 0xb70]
call fcn.10015f8b
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x83c], 0xffffffff
mov dword [ebp - 0x244], 0
jmp 0x1000a4d2
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x1000a4f4
push dword [ebp - 0x244]
lea ecx, [ebp - 0xb70]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x1000a4c5
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xbd4], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xbdc], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xbe4], eax
cmp dword [ebp - 0x114], 0xffffffff
jl 0x1000a52d
mov dword [ebp - 0x5a8], 1
jmp 0x1000a534
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x5a8], eax
je 0x1000a54e
mov dword [ebp - 0x418], 1
jmp 0x1000a555
and dword [ebp - 0x418], 0
mov esi, dword [ebp - 0x114]
add esi, dword [ebp - 0x418]
push 0
lea ecx, [ebp - 0xb70]
call fcn.10015ff8
sub esi, dword [eax]
mov dword [ebp - 0x83c], esi
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1000a597
push 0
push 0x183d
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb70]
call fcn.10015ff3
push 2
lea ecx, [ebp - 0xcd4]
call fcn.10015f8b
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x284], 5
mov dword [ebp - 0x1cc], 0
jmp 0x1000a5dd
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x1000a5ff
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xcd4]
call fcn.10015ff8
mov dword [eax], 0xffff
jmp 0x1000a5d0
mov dword [ebp - 0x284], 1
jmp 0x1000a618
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x1000a6c6
mov dword [ebp - 0x1d4], 0x7a888ada
mov dword [ebp - 0x1d4], 1
jmp 0x1000a648
mov eax, dword [ebp - 0x1d4]
dec eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jl 0x1000a6c1
mov dword [ebp - 0x124], 0xfb5a5efa
mov dword [ebp - 0x844], 0xfffffffd
mov dword [ebp - 0x124], 0
jmp 0x1000a67e
mov eax, dword [ebp - 0x124]
inc eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 1
jg 0x1000a6a6
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000a6a4
push 0x177a
call dword [sym.imp.KERNEL32.dll_ExitThread]
jmp 0x1000a671
mov dword [ebp - 0x124], 0xfffffff9
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x844], eax
jmp 0x1000a63b
jmp 0x1000a60b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd4]
call fcn.10015ff3
mov dword [ebp - 0x160], 0xa87013dc
mov dword [ebp - 0xbec], 0xf6f08421
mov dword [ebp - 0xbf4], 0xfffffff9
mov dword [ebp - 0xbfc], 0xd594d035
mov dword [ebp - 0xc04], 0xfffffff7
mov dword [ebp - 0xc0c], 0x39d6b9c2
mov dword [ebp - 0x24c], 0
jmp 0x1000a72a
mov eax, dword [ebp - 0x24c]
inc eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 1
jge 0x1000a746
mov eax, dword [ebp - 0x24c]
mov dword [ebp + eax*4 - 0xc14], 0
jmp 0x1000a71d
mov dword [ebp - 0x160], 0xd7f825e
mov dword [ebp - 0x160], 0
jmp 0x1000a769
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jg 0x1000a813
mov dword [ebp - 0x2a4], 0xfc0272a
mov dword [ebp - 0x1dc], 0
jmp 0x1000a799
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x1000a7b5
mov eax, dword [ebp - 0x1dc]
mov dword [ebp + eax*4 - 0xe94], 0xf3d4e677
jmp 0x1000a78c
mov dword [ebp - 0x2a4], 0
jmp 0x1000a7ce
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 0
jg 0x1000a80e
mov dword [ebp - 0xc1c], 0xfffffffd
mov dword [ebp - 0xc24], 0xffffffff
mov dword [ebp - 0xc2c], 0x3f0244c3
mov dword [ebp - 0x6d8], 0x81ec
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
jmp 0x1000a7c1
jmp 0x1000a75c
mov dword [ebp - 0x108], 1
push 1
lea ecx, [ebp - 0xb64]
call fcn.10015f8b
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x7cc], 0xffffffff
mov dword [ebp - 0x1e4], 0
jmp 0x1000a854
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x1000a876
push dword [ebp - 0x1e4]
lea ecx, [ebp - 0xb64]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x1000a847
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc34], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc3c], eax
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xc44], eax
cmp dword [ebp - 0x108], 0xffffffff
jl 0x1000a8af
mov dword [ebp - 0x420], 1
jmp 0x1000a8b6
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x420], eax
je 0x1000a8d0
mov dword [ebp - 0x5b0], 1
jmp 0x1000a8d7
and dword [ebp - 0x5b0], 0
mov esi, dword [ebp - 0x108]
add esi, dword [ebp - 0x5b0]
push 0
lea ecx, [ebp - 0xb64]
call fcn.10015ff8
sub esi, dword [eax]
mov dword [ebp - 0x7cc], esi
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x1000a919
push 0
push 0x183d
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb64]
call fcn.10015ff3
mov dword [ebp - 0x110], 1
push 1
lea ecx, [ebp - 0xb4c]
call fcn.10015f8b
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x804], 0xffffffff
mov dword [ebp - 0x254], 0
jmp 0x1000a969
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x1000a98b
push dword [ebp - 0x254]
lea ecx, [ebp - 0xb4c]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x1000a95c
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xc4c], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xc54], eax
mov eax, dword [ebp - 0x110]
mov dword [ebp - 0xc60], eax
cmp dword [ebp - 0x110], 0xffffffff
jl 0x1000a9c4
mov dword [ebp - 0x428], 1
jmp 0x1000a9cb
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x110]
cmp dword [ebp - 0x428], eax
je 0x1000a9e5
mov dword [ebp - 0x678], 1
jmp 0x1000a9ec
and dword [ebp - 0x678], 0
mov esi, dword [ebp - 0x110]
add esi, dword [ebp - 0x678]
push 0
lea ecx, [ebp - 0xb4c]
call fcn.10015ff8
sub esi, dword [eax]
mov dword [ebp - 0x804], esi
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000aa2e
push 0
push 0x183d
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4c]
call fcn.10015ff3
mov dword [ebp - 0x28c], 0x5b9b55bb
mov dword [ebp - 0xa88], 0x609b
mov dword [ebp - 0xa84], 0x609b
mov dword [ebp - 0xa80], 0x609b
mov dword [ebp - 0xa7c], 0x609b
lea ecx, [ebp - 0x2d5]
call fcn.10008b33
push eax
lea eax, [ebp - 0xa78]
push eax
lea eax, [ebp - 0xa88]
push eax
lea ecx, [ebp - 0xe34]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xdcc]
call fcn.10015fcd
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x1ec], 0
jmp 0x1000aac4
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 4
jge 0x1000aae0
mov eax, dword [ebp - 0x1ec]
mov dword [ebp + eax*4 - 0xf34], 1
jmp 0x1000aab7
mov dword [ebp - 0x28c], 0xe
jmp 0x1000aaf9
mov eax, dword [ebp - 0x28c]
dec eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0xffffffe4
jl 0x1000acae
mov dword [ebp - 0xad8], 0x60417be1
mov dword [ebp - 0xad4], 0x60417be1
mov dword [ebp - 0xad0], 0x60417be1
mov dword [ebp - 0xacc], 0x60417be1
lea ecx, [ebp - 0x2cd]
call fcn.10008b33
push eax
lea eax, [ebp - 0xac8]
push eax
lea eax, [ebp - 0xad8]
push eax
lea ecx, [ebp - 0xeb4]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x964]
call fcn.10015fcd
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xc7c], 0xffffffff
mov dword [ebp - 0xc84], 0xcd16652d
push 4
lea ecx, [ebp - 0xce4]
call fcn.10015f8b
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xc8c], 4
mov dword [ebp - 0x1f4], 0
jmp 0x1000abaf
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 4
jge 0x1000abd1
push dword [ebp - 0x1f4]
lea ecx, [ebp - 0xce4]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x1000aba2
push 2
lea ecx, [ebp - 0x964]
call fcn.10015ff8
mov dword [eax], 3
jmp 0x1000ac0a
push 2
lea ecx, [ebp - 0x964]
call fcn.10015ff8
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x430]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x964]
call fcn.10015ff8
cmp dword [eax], 0
jl 0x1000ac8b
mov dword [ebp - 0xc94], 0x5e81a7ec
mov dword [ebp - 0xd48], 0xffffffff
mov dword [ebp - 0xd50], 4
mov dword [ebp - 0x5b8], 0xc321a078
mov dword [ebp - 0x25c], 0
jmp 0x1000ac5d
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 3
jge 0x1000ac79
mov eax, dword [ebp - 0x25c]
mov dword [ebp + eax*4 - 0xef4], 0xffffffff
jmp 0x1000ac50
mov eax, dword [ebp - 0x5b8]
dec eax
mov dword [ebp - 0x5b8], eax
jmp 0x1000abe6
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0xce4]
call fcn.10015ff3
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x964]
call fcn.10015ff3
jmp 0x1000aaec
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdcc]
call fcn.10015ff3
and dword [ebp - 0xa60], 0
and dword [ebp - 0xa5c], 0
and dword [ebp - 0xa58], 0
and dword [ebp - 0xa54], 0
lea ecx, [ebp - 0x2c1]
call fcn.10008b33
push eax
lea eax, [ebp - 0xa50]
push eax
lea eax, [ebp - 0xa60]
push eax
lea ecx, [ebp - 0xecc]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x330]
call fcn.10015fcd
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x30], 3
jmp 0x1000ad2c
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1000ae62
mov dword [ebp - 0x8b4], 0xe26c12a7
mov esi, dword [ebp - 0x30]
push dword [ebp - 0x30]
lea ecx, [ebp - 0x330]
call fcn.10015ff8
cmp esi, dword [eax]
jl 0x1000ad61
mov dword [ebp - 0x7b8], 1
jmp 0x1000ad68
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xd58], eax
push 2
lea ecx, [ebp - 0x330]
call fcn.10015ff8
imul eax, dword [eax], 0x23dc
test eax, eax
je 0x1000ad96
push dword [ebp - 0x30]
lea ecx, [ebp - 0x330]
call fcn.10015ff8
push dword [ebp - 0x30]
lea ecx, [ebp - 0x330]
call fcn.10015ff8
mov esi, eax
push 2
lea ecx, [ebp - 0x330]
call fcn.10015ff8
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1000add4
push 3
lea ecx, [ebp - 0x330]
call fcn.10015ff8
cmp dword [eax], 0
jne 0x1000add4
and dword [ebp - 0x438], 0
jmp 0x1000adde
mov dword [ebp - 0x438], 1
push dword [ebp - 0x30]
lea ecx, [ebp - 0x330]
call fcn.10015ff8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x438]
jge 0x1000ae02
mov dword [ebp - 0x738], 1
jmp 0x1000ae09
and dword [ebp - 0x738], 0
push dword [ebp - 0x30]
lea ecx, [ebp - 0x330]
call fcn.10015ff8
mov eax, dword [eax]
cmp eax, dword [ebp - 0x738]
je 0x1000ae2d
mov dword [ebp - 0x440], 1
jmp 0x1000ae34
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x8b4], eax
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1000ae5d
push 0x19a9
call dword [sym.imp.USER32.dll_GetSystemMetrics]
jmp 0x1000ad25
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x330]
call fcn.10015ff3
mov dword [ebp - 0x158], 0xa87013dc
mov dword [ebp - 0xd60], 0xf6f08421
mov dword [ebp - 0xd68], 0xfffffff9
mov dword [ebp - 0xd70], 0xd594d035
mov dword [ebp - 0xd78], 0xfffffff7
mov dword [ebp - 0xd80], 0x39d6b9c2
mov dword [ebp - 0x1fc], 0
jmp 0x1000aec6
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x1000aee2
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0xd88], 0
jmp 0x1000aeb9
mov dword [ebp - 0x158], 0xd7f825e
mov dword [ebp - 0x158], 0
jmp 0x1000af05
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 0
jg 0x1000afaf
mov dword [ebp - 0x204], 0xfc0272a
mov dword [ebp - 0x2b4], 0
jmp 0x1000af35
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1000af51
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0xe7c], 0xf3d4e677
jmp 0x1000af28
mov dword [ebp - 0x204], 0
jmp 0x1000af6a
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jg 0x1000afaa
mov dword [ebp - 0xd90], 0xfffffffd
mov dword [ebp - 0xd98], 0xffffffff
mov dword [ebp - 0xda0], 0x3f0244c3
mov dword [ebp - 0x5c0], 0x81ec
mov eax, dword [ebp - 0x5c0]
inc eax
mov dword [ebp - 0x5c0], eax
jmp 0x1000af5d
jmp 0x1000aef8
mov dword [ebp - 0x144], 0xa32b1cec
mov dword [ebp - 0x264], 0
jmp 0x1000afd2
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x1000afee
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xea4], 0xffffffff
jmp 0x1000afc5
mov dword [ebp - 0x144], 3
jmp 0x1000b007
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
jl 0x1000b042
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1000b02e
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
mov eax, dword [ebp - 0x144]
cmp dword [ebp + eax*4 - 0xea4], 0
je 0x1000b040
jmp 0x1000affa
jmp 0x1000affa
mov dword [ebp - 0xa08], 0xbdde
mov dword [ebp - 0xa04], 0xbdde
mov dword [ebp - 0xa00], 0xbdde
mov dword [ebp - 0x9fc], 0xbdde
mov dword [ebp - 0x20c], 0xe56f9b2c
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x20c], 3
jmp 0x1000b094
mov eax, dword [ebp - 0x20c]
dec eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 0
jl 0x1000b380
mov dword [ebp - 0x70], 0
push 4
lea ecx, [ebp - 0x798]
call fcn.10015f8b
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x294], 0
jmp 0x1000b0d5
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000b0f7
push dword [ebp - 0x294]
lea ecx, [ebp - 0x798]
call fcn.10015ff8
mov dword [eax], 0xfffffff9
jmp 0x1000b0c8
push 1
lea ecx, [ebp - 0x798]
call fcn.10015ff8
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x1000b21f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa08], 0
jne 0x1000b133
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x1000b133
and dword [ebp - 0x448], 0
jmp 0x1000b13d
mov dword [ebp - 0x448], 1
cmp dword [ebp - 0x448], 0x26c7f05f
jg 0x1000b155
mov dword [ebp - 0x680], 1
jmp 0x1000b15c
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x680]
cmp eax, 0x260389a9
je 0x1000b178
mov dword [ebp - 0x7c0], 1
jmp 0x1000b17f
and dword [ebp - 0x7c0], 0
mov esi, dword [ebp - 0x70]
push 3
lea ecx, [ebp - 0x798]
call fcn.10015ff8
cmp esi, dword [eax]
jne 0x1000b19f
mov dword [ebp - 0x450], 1
jmp 0x1000b1a6
and dword [ebp - 0x450], 0
cmp dword [ebp - 0x450], 0xfffffffb
jl 0x1000b1bb
mov dword [ebp - 0x5c8], 1
jmp 0x1000b1c2
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
sub eax, 0x28c7fffa
cmp eax, 0xffff
jne 0x1000b1e0
mov dword [ebp - 0x458], 1
jmp 0x1000b1e7
and dword [ebp - 0x458], 0
mov esi, dword [ebp - 0x40]
add esi, dword [ebp - 0x458]
push 1
lea ecx, [ebp - 0x798]
call fcn.10015ff8
cmp esi, dword [eax]
je 0x1000b20d
mov dword [ebp - 0x6e0], 1
jmp 0x1000b214
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x6e0]
jle 0x1000b22e
cmp dword [ebp - 0x70], 0
jne 0x1000b22e
and dword [ebp - 0x460], 0
jmp 0x1000b238
mov dword [ebp - 0x460], 1
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xa08]
cmp dword [ebp - 0x460], eax
jne 0x1000b259
mov dword [ebp - 0x5d0], 1
jmp 0x1000b260
and dword [ebp - 0x5d0], 0
imul eax, dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x70], eax
jle 0x1000b314
push 3
lea ecx, [ebp - 0xaf8]
call fcn.10015f8b
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x214], 0
jmp 0x1000b29a
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 3
jge 0x1000b2bc
push dword [ebp - 0x214]
lea ecx, [ebp - 0xaf8]
call fcn.10015ff8
mov dword [eax], 6
jmp 0x1000b28d
push 2
lea ecx, [ebp - 0xaf8]
call fcn.10015ff8
mov dword [eax], 0x20b2455f
mov dword [ebp - 0x40], 0
jmp 0x1000b2df
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jg 0x1000b303
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000b301
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x1000b2d8
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xaf8]
call fcn.10015ff3
jmp 0x1000b36c
mov dword [ebp - 0x70], 0
jmp 0x1000b324
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1000b36c
push dword [ebp - 0x70]
lea ecx, [ebp - 0x798]
call fcn.10015ff8
cmp dword [eax], 0
je 0x1000b33f
jmp 0x1000b36c
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x1000b36a
push 0x7a2
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RestoreDC]
jmp 0x1000b31d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x798]
call fcn.10015ff3
jmp 0x1000b087
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x148], 0xa87013dc
mov dword [ebp - 0xda8], 0xf6f08421
mov dword [ebp - 0xdb0], 0xfffffff9
mov dword [ebp - 0xdb8], 0xd594d035
mov dword [ebp - 0xdc0], 0xfffffff7
mov dword [ebp - 0xdac], 0x39d6b9c2
mov dword [ebp - 0x26c], 0
jmp 0x1000b3db
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 1
jge 0x1000b3f7
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xd84], 0
jmp 0x1000b3ce
mov dword [ebp - 0x148], 0xd7f825e
mov dword [ebp - 0x148], 0
jmp 0x1000b41a
mov eax, dword [ebp - 0x148]
inc eax
mov dword [ebp - 0x148], eax
cmp dword [ebp - 0x148], 0
jg 0x1000b4c4
mov dword [ebp - 0x178], 0xfc0272a
mov dword [ebp - 0x21c], 0
jmp 0x1000b44a
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 2
jge 0x1000b466
mov eax, dword [ebp - 0x21c]
mov dword [ebp + eax*4 - 0xeac], 0xf3d4e677
jmp 0x1000b43d
mov dword [ebp - 0x178], 0
jmp 0x1000b47f
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jg 0x1000b4bf
mov dword [ebp - 0xd6c], 0xfffffffd
mov dword [ebp - 0xba0], 0xffffffff
mov dword [ebp - 0xcd8], 0x3f0244c3
mov dword [ebp - 0x468], 0x81ec
mov eax, dword [ebp - 0x468]
inc eax
mov dword [ebp - 0x468], eax
jmp 0x1000b472
jmp 0x1000b40d
mov dword [ebp - 0x188], 0x5b9b55bb
mov dword [ebp - 0xa74], 0x609b
mov dword [ebp - 0xa70], 0x609b
mov dword [ebp - 0xa6c], 0x609b
mov dword [ebp - 0xa68], 0x609b
lea ecx, [ebp - 0x309]
call fcn.10008b33
push eax
lea eax, [ebp - 0xa64]
push eax
lea eax, [ebp - 0xa74]
push eax
lea ecx, [ebp - 0xe8c]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe2c]
call fcn.10015fcd
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x180], 0
jmp 0x1000b54b
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 4
jge 0x1000b567
mov eax, dword [ebp - 0x180]
mov dword [ebp + eax*4 - 0xf54], 1
jmp 0x1000b53e
mov dword [ebp - 0x188], 0xe
jmp 0x1000b580
mov eax, dword [ebp - 0x188]
dec eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xffffffe4
jl 0x1000b735
mov dword [ebp - 0xa9c], 0x60417be1
mov dword [ebp - 0xa98], 0x60417be1
mov dword [ebp - 0xa94], 0x60417be1
mov dword [ebp - 0xa90], 0x60417be1
lea ecx, [ebp - 0x311]
call fcn.10008b33
push eax
lea eax, [ebp - 0xa8c]
push eax
lea eax, [ebp - 0xa9c]
push eax
lea ecx, [ebp - 0xe84]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9ac]
call fcn.10015fcd
mov byte [ebp - 4], 0x18
mov dword [ebp - 0xba8], 0xffffffff
mov dword [ebp - 0xd1c], 0xcd16652d
push 4
lea ecx, [ebp - 0xcf4]
call fcn.10015f8b
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xbb0], 4
mov dword [ebp - 0x170], 0
jmp 0x1000b636
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 4
jge 0x1000b658
push dword [ebp - 0x170]
lea ecx, [ebp - 0xcf4]
call fcn.10015ff8
mov dword [eax], 1
jmp 0x1000b629
push 2
lea ecx, [ebp - 0x9ac]
call fcn.10015ff8
mov dword [eax], 3
jmp 0x1000b691
push 2
lea ecx, [ebp - 0x9ac]
call fcn.10015ff8
cmp dword [eax], 0
jl 0x1000b712
mov dword [ebp - 0xce8], 0x5e81a7ec
mov dword [ebp - 0xbb8], 0xffffffff
mov dword [ebp - 0xd20], 4
mov dword [ebp - 0x470], 0xc321a078
mov dword [ebp - 0x190], 0
jmp 0x1000b6e4
cmp dword [ebp - 0x190], 3
jge 0x1000b700
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0xcf4]
call fcn.10015ff3
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x9ac]
call fcn.10015ff3
jmp 0x1000b573
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe2c]
call fcn.10015ff3
movzx eax, byte [0x10675ba0]
test eax, eax
je 0x1000b762
mov esi, 0x10089838
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000f4c8
and dword [ebp - 0xac4], 0
and dword [ebp - 0xac0], 0
and dword [ebp - 0xabc], 0
and dword [ebp - 0xab8], 0
lea ecx, [ebp - 0x313]
call fcn.10008b33
push eax
lea eax, [ebp - 0xab4]
push eax
lea eax, [ebp - 0xac4]
push eax
lea ecx, [ebp - 0xe4c]
call fcn.10016007
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x33c]
call fcn.10015fcd
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x28], 3
jmp 0x1000b7d1
cmp dword [ebp - 0x28], 0
jl 0x1000b907
mov dword [ebp - 0x7c8], 0xe26c12a7
mov esi, dword [ebp - 0x28]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x33c]
call fcn.10015ff8
cmp esi, dword [eax]
jl 0x1000b806
mov dword [ebp - 0x7a8], 1
jmp 0x1000b80d
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xbc0], eax
push 2
lea ecx, [ebp - 0x33c]
call fcn.10015ff8
imul eax, dword [eax], 0x23dc
test eax, eax
je 0x1000b83b
push dword [ebp - 0x28]
lea ecx, [ebp - 0x33c]
call fcn.10015ff8
push dword [ebp - 0x28]
lea ecx, [ebp - 0x33c]
call fcn.10015ff8
mov esi, eax
push 2
lea ecx, [ebp - 0x33c]
call fcn.10015ff8
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1000b879
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
call fcn.10015ff3
mov dword [ebp - 0x48], 0xe64f1479
mov dword [ebp - 0x5e0], 0xfffffffc
mov dword [ebp - 0x5e8], 0
mov dword [ebp - 0x5f0], 0xffffffff
mov dword [ebp - 0x8b0], 0
mov dword [ebp - 0x198], 0
jmp 0x1000b95e
cmp dword [ebp - 0x198], 3
jge 0x1000b97a
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0xe08], 0xc37fc054
jmp 0x1000b951
cmp dword [ebp - 0x48], 0
je 0x1000b9f3
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret