Function at 0x1000a287
Capabilities:
Query service status

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1006988e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x35c
push esi
push edi
mov dword [ebp - 0x44], 0x7d214c40
mov dword [ebp - 0x58], 0xffffffff
mov dword [ebp - 0x204], 0x2b5725d3
cmp dword [ebp - 0x44], 0
jne 0x1000a313
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x44]
mov ecx, 0x47c9d5fa
sub ecx, eax
add ecx, 0x4b17afa5
sub ecx, dword [ebp - 0x44]
jne 0x1000a2f0
mov eax, 0xdade0980
test eax, eax
jne 0x1000a2f0
and dword [ebp - 0x120], 0
jmp 0x1000a2fa
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0x120]
add eax, 0x59c45c1d
mov dword [ebp - 0x58], eax
jne 0x1000a313
and dword [ebp - 0xe4], 0
jmp 0x1000a31d
mov dword [ebp - 0xe4], 1
cmp dword [ebp - 0xe4], 0x5052061f
je 0x1000a335
mov dword [ebp - 0x1e0], 1
jmp 0x1000a33c
and dword [ebp - 0x1e0], 0
cmp dword [ebp - 0x1e0], 6
ja 0x1000a351
mov dword [ebp - 0xcc], 1
jmp 0x1000a358
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x204], eax
mov dword [ebp - 0x44], 0xfffffffb
jmp 0x1000a374
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xfffffff4
jl 0x1000a3b4
mov dword [ebp - 0x284], 2
mov dword [ebp - 0x270], 0xa3691f6f
mov dword [ebp - 0x58], 0
jmp 0x1000a39e
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x19
jle 0x1000a3b2
mov eax, dword [ebp - 0x284]
mov dword [ebp - 0x270], eax
jmp 0x1000a397
jmp 0x1000a36d
mov dword [ebp - 0x24], 0x5c5735e4
mov dword [ebp - 0x68], 0x700d
mov dword [ebp - 0xd4], 0
push 8
pop eax
test eax, eax
je 0x1000a4c6
cmp dword [ebp - 0x24], 0
jne 0x1000a4a0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x2fc], eax
mov eax, 0xa4bc4433
sub eax, dword [ebp - 0x68]
cmp dword [ebp - 0x24], eax
jle 0x1000a412
mov eax, 0x29ed7d41
test eax, eax
jne 0x1000a412
and dword [ebp - 0x1e8], 0
jmp 0x1000a41c
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1e8]
sub eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
add eax, 0xfffa
mov ecx, dword [ebp - 0x68]
imul ecx, eax
cmp ecx, dword [ebp - 0x24]
jl 0x1000a450
mov dword [ebp - 0x1f0], 1
jmp 0x1000a457
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x1f0], eax
jge 0x1000a477
mov eax, 0xbbda
test eax, eax
je 0x1000a477
mov dword [ebp - 0xdc], 1
jmp 0x1000a47e
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x68]
imul eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0x24]
lea eax, [eax + ecx - 0x25bb5a27]
cmp eax, dword [ebp - 0x24]
jle 0x1000a4a0
and dword [ebp - 0x1f8], 0
jmp 0x1000a4aa
mov dword [ebp - 0x1f8], 1
mov eax, dword [ebp - 0x1f8]
neg eax
jne 0x1000a4ba
cmp dword [ebp - 0x68], 0
je 0x1000a4c6
mov dword [ebp - 0x210], 1
jmp 0x1000a4cd
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x24]
sub eax, 0xa
cmp eax, 0xfff7
jbe 0x1000a515
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x1000a4f0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x1000a513
push 0
push 0xc5d
push 0x5d6
push 0x17c2
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
jmp 0x1000a531
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x1000a531
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
movzx eax, byte [0x10612968]
test eax, eax
je 0x1000a54f
mov esi, 0x1006f868
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000b956
mov dword [ebp - 0x10], 0xf7fd
mov dword [ebp - 0x30], 0x609d70ca
mov dword [ebp - 0x94], 0xfffffff8
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x1000a57e
cmp dword [ebp - 0x10], 0
jne 0x1000a57e
and dword [ebp - 0x174], 0
jmp 0x1000a588
mov dword [ebp - 0x174], 1
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x10], 0xfffe
jb 0x1000a5a6
mov dword [ebp - 0x200], 1
jmp 0x1000a5ad
and dword [ebp - 0x200], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0x200]
imul eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x10]
jne 0x1000a6f6
mov dword [ebp - 0x254], 0x881826fb
mov dword [ebp - 0x8c], 0
jmp 0x1000a5e9
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000a605
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0x368], 0x4392
jmp 0x1000a5dc
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x1000a621
push 0x131f
push 0xe91
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x318], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x368]
cmp dword [ebp - 0x10], eax
jge 0x1000a647
mov dword [ebp - 0xec], 1
jmp 0x1000a64e
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x10], eax
jge 0x1000a677
mov dword [ebp - 0x1bc], 1
jmp 0x1000a67e
and dword [ebp - 0x1bc], 0
cmp dword [ebp - 0x1bc], 1
jne 0x1000a693
mov dword [ebp - 0xf4], 1
jmp 0x1000a69a
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0xf4]
cmp eax, 0x657689a5
jg 0x1000a6b7
mov dword [ebp - 0x17c], 1
jmp 0x1000a6be
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x17c], eax
jl 0x1000a6d8
mov dword [ebp - 0x214], 1
jmp 0x1000a6df
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x254], eax
jmp 0x1000a8d1
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x70], 8
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x114], 0xfffffffa
mov dword [ebp - 0x224], 0xffffffff
mov dword [ebp - 0x25c], 0x8bf9cc53
mov dword [ebp - 0x64], 6
cmp dword [ebp - 0x10], 0x44688d23
jne 0x1000a748
mov dword [ebp - 0x21c], 1
jmp 0x1000a74f
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x70], 0
jne 0x1000a76d
cmp dword [ebp - 0x64], 0
jne 0x1000a76d
and dword [ebp - 0xfc], 0
jmp 0x1000a777
mov dword [ebp - 0xfc], 1
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0xfc], eax
je 0x1000a78e
mov dword [ebp - 0x1fc], 1
jmp 0x1000a795
and dword [ebp - 0x1fc], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x1fc], eax
jl 0x1000a7ac
mov dword [ebp - 0x104], 1
jmp 0x1000a7b3
and dword [ebp - 0x104], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x104], eax
jl 0x1000a7ca
mov dword [ebp - 0x184], 1
jmp 0x1000a7d1
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x184]
sub eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x70]
cmp dword [ebp - 0x30], eax
jne 0x1000a7f2
mov dword [ebp - 0x10c], 1
jmp 0x1000a7f9
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0xbc]
dec eax
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x30]
jl 0x1000a823
mov dword [ebp - 0x1c4], 1
jmp 0x1000a82a
and dword [ebp - 0x1c4], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x114], eax
jl 0x1000a84d
mov dword [ebp - 0x274], 1
jmp 0x1000a854
and dword [ebp - 0x274], 0
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x10], 0
je 0x1000a87b
mov dword [ebp - 0x18c], 1
jmp 0x1000a882
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x18c], eax
jle 0x1000a8a2
cmp dword [ebp - 0x224], 0
je 0x1000a8a2
mov dword [ebp - 0x11c], 1
jmp 0x1000a8a9
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 5
jne 0x1000a8be
mov dword [ebp - 0x1e4], 1
jmp 0x1000a8c5
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x30], 0
jmp 0x1000a8e1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jg 0x1000a994
push 1
lea ecx, [ebp - 0x2c4]
call fcn.10016555
and dword [ebp - 4], 0
mov dword [ebp - 0x90], 0
jmp 0x1000a915
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1000a937
push dword [ebp - 0x90]
lea ecx, [ebp - 0x2c4]
call fcn.100165f3
mov dword [eax], 0x6ed9
jmp 0x1000a908
mov byte [ebp - 0x4c], 0
movzx eax, byte [ebp - 0x4c]
test eax, eax
je 0x1000a954
push 0
push 0
push 0
push 0x19e5
call dword [sym.imp.GDI32.dll_PolyPolyline]
mov dword [ebp - 0x10], 0
jmp 0x1000a964
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000a980
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2c4]
call fcn.100165f3
mov dword [eax], 0x3e0c
jmp 0x1000a95d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2c4]
call fcn.100165d7
jmp 0x1000a8da
mov dword [ebp - 0x314], 0x1006f868
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x28], 0xa7fe64fd
mov dword [ebp - 0x22c], 0xffffffff
mov dword [ebp - 0x288], 0xae07ea4c
mov dword [ebp - 0x264], 0xcc7c
mov dword [ebp - 0x2d8], 0xffff
mov dword [ebp - 0x3c], 0
jmp 0x1000a9e4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1000a9fa
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x27c], 0
jmp 0x1000a9dd
mov dword [ebp - 0x3c], 0
jmp 0x1000aa0a
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1000aa20
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x308], 0x52fa
jmp 0x1000aa03
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x334], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jne 0x1000aa47
cmp dword [ebp - 0x5c], 0
je 0x1000aa47
mov dword [ebp - 0x194], 1
jmp 0x1000aa4e
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x28], 0xfffffffa
jle 0x1000aa72
mov dword [ebp - 0x124], 1
jmp 0x1000aa79
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x194], eax
jle 0x1000aa99
mov dword [ebp - 0x12c], 1
jmp 0x1000aaa0
and dword [ebp - 0x12c], 0
cmp dword [ebp - 0x12c], 0xc34
jge 0x1000aab8
mov dword [ebp - 0x1cc], 1
jmp 0x1000aabf
and dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp + eax - 0x27c], ecx
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x34c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x27c]
neg eax
je 0x1000ab0a
cmp dword [ebp - 0x28], 0
je 0x1000ab0a
mov dword [ebp - 0x134], 1
jmp 0x1000ab11
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x134]
jl 0x1000ab28
mov dword [ebp - 0x19c], 1
jmp 0x1000ab2f
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x308]
cmp dword [ebp - 0x19c], eax
jne 0x1000ab50
mov dword [ebp - 0x13c], 1
jmp 0x1000ab57
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x288]
cmp dword [ebp - 0x13c], eax
jge 0x1000ab71
mov dword [ebp - 0x1f4], 1
jmp 0x1000ab78
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1f4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x27c]
jne 0x1000ab9c
mov dword [ebp - 0x234], 1
jmp 0x1000aba3
and dword [ebp - 0x234], 0
cmp dword [ebp - 0x264], 0xffffffff
je 0x1000abb8
mov dword [ebp - 0x144], 1
jmp 0x1000abbf
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2f0], 0x1006f86c
mov dword [ebp - 0x18], 0
push 1
lea ecx, [ebp - 0x2ac]
call fcn.10016555
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0x294]
call fcn.10016555
mov byte [ebp - 4], 2
mov dword [ebp - 0xa0], 0x505bc980
mov dword [ebp - 0x244], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x1000ac22
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1000ac3e
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x2ac]
call fcn.100165f3
mov dword [eax], 0x31aa08
jmp 0x1000ac1b
mov dword [ebp - 0x2c], 0
jmp 0x1000ac4e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000ac6a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x294]
call fcn.100165f3
mov dword [eax], 0x6928694a
jmp 0x1000ac47
cmp dword [ebp - 0x18], 0xfffd
ja 0x1000ac7f
mov dword [ebp - 0x1d4], 1
jmp 0x1000ac86
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x18], 1
jbe 0x1000ac98
mov dword [ebp - 0x1a4], 1
jmp 0x1000ac9f
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x1a4]
cmp eax, dword [ebp - 0x18]
jle 0x1000acc0
cmp dword [ebp - 0x18], 0
je 0x1000acc0
mov dword [ebp - 0x14c], 1
jmp 0x1000acc7
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xb051af7f
jne 0x1000acd9
cmp dword [ebp - 0x18], 0
je 0x1000acdd
cmp dword [ebp - 0x18], 0
cmp dword [ebp - 0x18], 0xffffffff
jl 0x1000acef
mov dword [ebp - 0x154], 1
jmp 0x1000acf6
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1d4]
sub eax, dword [ebp - 0x154]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
je 0x1000ad3b
mov dword [ebp - 0x18], 0
jmp 0x1000ad1a
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000ad36
push dword [ebp - 0x18]
lea ecx, [ebp - 0x2ac]
call fcn.100165f3
mov dword [eax], 0x2aff6358
jmp 0x1000ad13
jmp 0x1000ae84
mov dword [ebp - 0x1b4], 0x1e043eef
mov dword [ebp - 0x324], 0x339b8842
mov dword [ebp - 0x15c], 0xffffffff
mov dword [ebp - 0x1dc], 0xecc90c63
mov dword [ebp - 0x16c], 0xc17a3f0a
cmp dword [ebp - 0x1b4], 0
je 0x1000ae62
push 0
lea ecx, [ebp - 0x2ac]
call fcn.100165f3
mov eax, dword [eax]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x280], eax
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x280]
jl 0x1000adc2
mov dword [ebp - 0x1ac], 1
jmp 0x1000adc9
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0x15c], eax
imul eax, dword [ebp - 0x15c], 0xd0fe
test eax, eax
jne 0x1000adfc
push 0
lea ecx, [ebp - 0x294]
call fcn.100165f3
cmp dword [eax], 0
jne 0x1000adfc
cmp dword [ebp - 0x1dc], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.100165f3
mov ecx, dword [ebp - 0x244]
cmp dword [eax], ecx
je 0x1000ae1f
mov dword [ebp - 0x1ec], 1
jmp 0x1000ae26
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x1ec]
sub eax, 0x681c37f5
cmp eax, dword [ebp - 0x16c]
je 0x1000ae45
mov dword [ebp - 0x164], 1
jmp 0x1000ae4c
and dword [ebp - 0x164], 0
mov eax, 0x96e6
sub eax, dword [ebp - 0x164]
je 0x1000ae62
and dword [ebp - 0x26c], 0
jmp 0x1000ae6c
mov dword [ebp - 0x26c], 1
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1dc], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x294]
call fcn.100165d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2ac]
call fcn.100165d7
mov byte [0x10612968], 1
mov dword [ebp - 0x14], 0x2c03342e
mov dword [ebp - 0xb8], 0xffffffff
mov dword [ebp - 0x14], 0
jmp 0x1000aeca
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x1000af5a
push 4
lea ecx, [ebp - 0x2a0]
call fcn.10016555
mov dword [ebp - 4], 3
mov dword [ebp - 0x84], 0
jmp 0x1000af01
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 4
jge 0x1000af23
push dword [ebp - 0x84]
lea ecx, [ebp - 0x2a0]
call fcn.100165f3
mov dword [eax], 0x9aed
jmp 0x1000aef4
push 1
lea ecx, [ebp - 0x2a0]
call fcn.100165f3
cmp dword [eax], 0
je 0x1000af46
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.100165d7
jmp 0x1000af5a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2a0]
call fcn.100165d7
jmp 0x1000aec3
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x14], 0
jne 0x1000b03a
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x1000af85
mov dword [ebp - 0xe0], 1
jmp 0x1000af8c
and dword [ebp - 0xe0], 0
cmp dword [ebp - 0xe0], 1
jbe 0x1000afa1
mov dword [ebp - 0x24c], 1
jmp 0x1000afa8
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x300], eax
mov eax, 0x68f62c4d
cmp eax, 0xe3bf118c
jne 0x1000afc9
mov dword [ebp - 0xe8], 1
jmp 0x1000afd0
and dword [ebp - 0xe8], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xe8], eax
jne 0x1000afe7
mov dword [ebp - 0xf0], 1
jmp 0x1000afee
and dword [ebp - 0xf0], 0
cmp dword [ebp - 0xf0], 1
jb 0x1000b003
mov dword [ebp - 0xf8], 1
jmp 0x1000b00a
and dword [ebp - 0xf8], 0
cmp dword [ebp - 0xf8], 0xffffffff
jge 0x1000b01f
mov dword [ebp - 0x100], 1
jmp 0x1000b026
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x100], eax
jle 0x1000b03a
and dword [ebp - 0x108], 0
jmp 0x1000b044
mov dword [ebp - 0x108], 1
mov eax, dword [ebp - 0x108]
add eax, 0x477a
jne 0x1000b060
cmp dword [ebp - 0x14], 0
jne 0x1000b060
and dword [ebp - 0x110], 0
jmp 0x1000b06a
mov dword [ebp - 0x110], 1
mov eax, dword [ebp - 0xb8]
imul eax, dword [ebp - 0x110]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x32c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x14], 0xd258
je 0x1000b0a7
mov dword [ebp - 0x118], 1
jmp 0x1000b0ae
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x1006f658
mov dword [ebp - 0x190], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x1006f658
mov dword [ebp - 0x9c], eax
push 2
lea ecx, [ebp - 0x2b8]
call fcn.10016555
mov dword [ebp - 4], 4
mov dword [ebp - 0x80], 5
mov dword [ebp - 0x7c], 0
jmp 0x1000b10d
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x1000b126
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x2b8]
call fcn.100165f3
or dword [eax], 0xffffffff
jmp 0x1000b106
mov dword [ebp - 0x80], 1
jmp 0x1000b136
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0
jl 0x1000b171
mov dword [ebp - 0x74], 0xfffffffb
mov dword [ebp - 0x74], 0
jmp 0x1000b153
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x1000b16f
push dword [ebp - 0x74]
lea ecx, [ebp - 0x2b8]
call fcn.100165f3
mov dword [eax], 2
jmp 0x1000b14c
jmp 0x1000b12f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x2b8]
call fcn.100165d7
mov eax, dword [ebp - 0x190]
mov dword [0x1006f868], eax
mov eax, dword [ebp - 0x9c]
mov dword [0x1006f86c], eax
mov dword [ebp - 0x1c], 6
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x188], 0xffffffff
mov dword [ebp - 0x6c], 0x324067bc
mov dword [ebp - 0x88], 0
jmp 0x1000b1ce
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1000b1ea
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xb0], 0xec2e0cf5
jmp 0x1000b1c1
mov dword [ebp - 0x1c], 0
jmp 0x1000b1fa
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1000b503
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x150], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb0]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xb0], 0
jne 0x1000b30c
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0xb0]
cmp dword [ebp + eax - 0xb0], ecx
je 0x1000b270
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0xb0], 0
je 0x1000b270
mov dword [ebp - 0x20c], 1
jmp 0x1000b277
and dword [ebp - 0x20c], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xb0], 0
je 0x1000b2a2
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xb0], 0
je 0x1000b2a2
mov dword [ebp - 0xc0], 1
jmp 0x1000b2a9
and dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb0]
cmp dword [ebp - 0xc0], eax
jle 0x1000b2c7
mov dword [ebp - 0x128], 1
jmp 0x1000b2ce
and dword [ebp - 0x128], 0
cmp dword [ebp - 0x128], 0x7153413f
je 0x1000b2e6
mov dword [ebp - 0x130], 1
jmp 0x1000b2ed
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x1000b30c
push 6
pop eax
test eax, eax
jne 0x1000b30c
and dword [ebp - 0x138], 0
jmp 0x1000b316
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x138]
jge 0x1000b32d
mov dword [ebp - 0x140], 1
jmp 0x1000b334
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb0]
cmp dword [ebp - 0x140], eax
jne 0x1000b352
mov dword [ebp - 0x148], 1
jmp 0x1000b359
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jl 0x1000b388
mov dword [ebp - 0x158], 1
jmp 0x1000b38f
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb0]
imul eax, dword [ebp - 0x158]
cmp eax, 0xfffffff9
jl 0x1000b3b1
mov dword [ebp - 0x160], 1
jmp 0x1000b3b8
and dword [ebp - 0x160], 0
cmp dword [ebp - 0x160], 0xfffffff7
jge 0x1000b3cd
mov dword [ebp - 0x168], 1
jmp 0x1000b3d4
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0x3585
jge 0x1000b3ec
mov dword [ebp - 0x170], 1
jmp 0x1000b3f3
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x188], eax
mov eax, 0x51fe
test eax, eax
jne 0x1000b417
cmp dword [ebp - 0x48], 0
jne 0x1000b417
and dword [ebp - 0x178], 0
jmp 0x1000b421
mov dword [ebp - 0x178], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb0]
cmp dword [ebp - 0x178], eax
jne 0x1000b442
mov dword [ebp - 0x180], 1
jmp 0x1000b449
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x48], 0
jmp 0x1000b462
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x1000b4fe
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x40], 0
jmp 0x1000b486
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jg 0x1000b4b1
mov byte [ebp - 0x49], 0
movzx eax, byte [ebp - 0x49]
test eax, eax
je 0x1000b4af
push 0x1ea9
push 0
push 0x224a
push 0x2fc
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
jmp 0x1000b47f
mov dword [ebp - 0x20], 2
jmp 0x1000b4c1
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x1000b4f9
mov dword [ebp - 0x218], 0xaed0
mov dword [ebp - 0x220], 9
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0x218], eax
mov dword [ebp - 0x40], 0x395f87b7
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x220], eax
jmp 0x1000b4ba
jmp 0x1000b45b
jmp 0x1000b1f3
mov dword [ebp - 0x20], 0xffffffe3
jmp 0x1000b513
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff5
jle 0x1000b552
mov dword [ebp - 0x6c], 0
jmp 0x1000b529
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000b545
mov byte [ebp - 0x4a], 0
movzx eax, byte [ebp - 0x4a]
test eax, eax
je 0x1000b543
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1000b522
cmp dword [ebp - 0x188], 0
je 0x1000b550
jmp 0x1000b50c
jmp 0x1000b50c
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x9c]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + ecx]
call fcn.1000a246
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x1a8], 0xfffffff8
mov dword [ebp - 0x230], 0xec3203bd
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x78], 0
jmp 0x1000b5ba
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1000b5d0
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x248], 0x8108531d
jmp 0x1000b5b3
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x1000b5e9
push 0
push 0x359
call dword [sym.imp.USER32.dll_GetWindowPlacement]
mov dword [ebp - 0x60], 0xfffffffb
jmp 0x1000b5f9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jne 0x1000b7c5
mov dword [ebp - 0x240], 0x7c11
mov dword [ebp - 0x238], 0xfffffff8
mov dword [ebp - 0x2d4], 0xab1943c6
mov dword [ebp - 0x250], 0xaf0a9b27
push 1
lea ecx, [ebp - 0x358]
call fcn.10016555
mov dword [ebp - 4], 5
push 4
lea ecx, [ebp - 0x348]
call fcn.10016555
mov byte [ebp - 4], 6
mov dword [ebp - 0x2dc], 1
mov dword [ebp - 0x2e4], 0xfffffff7
mov dword [ebp - 0x34], 0
jmp 0x1000b674
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1000b690
push dword [ebp - 0x34]
lea ecx, [ebp - 0x358]
call fcn.100165f3
mov dword [eax], 0xd5befa1e
jmp 0x1000b66d
mov dword [ebp - 0x34], 0
jmp 0x1000b6a0
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1000b6bc
push dword [ebp - 0x34]
lea ecx, [ebp - 0x348]
call fcn.100165f3
mov dword [eax], 0x9bca
jmp 0x1000b699
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x228], eax
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x228], 0xcf415d72
jne 0x1000b6ed
mov dword [ebp - 0x198], 1
jmp 0x1000b6f4
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x230]
cmp dword [ebp - 0x238], eax
jl 0x1000b70e
mov dword [ebp - 0x1a0], 1
jmp 0x1000b715
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x198]
add eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x240], eax
jg 0x1000b741
mov dword [ebp - 0x1b0], 1
jmp 0x1000b748
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x1b0]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x248]
cmp eax, 0xe0f758fc
je 0x1000b771
mov dword [ebp - 0x1b8], 1
jmp 0x1000b778
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x1b8]
je 0x1000b78f
mov dword [ebp - 0x1c0], 1
jmp 0x1000b796
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x250], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x348]
call fcn.100165d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x358]
call fcn.100165d7
jmp 0x1000b5f2
push dword [ebp - 0x9c]
mov edx, 0x1006f604
mov ecx, dword [ebp - 0x258]
call fcn.1000a252
pop ecx
mov dword [ebp - 0x38], 0x6915a136
mov dword [ebp - 0xa4], 0x1780eec2
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xd8], 0xffffffff
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2ec], eax
imul eax, dword [ebp - 0x38], 0xfffffff8
cmp eax, 0xcb55
jl 0x1000b821
mov dword [ebp - 0x260], 1
jmp 0x1000b828
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2f4], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0xa4], eax
imul eax, dword [ebp - 0xa4], 0x6eab
cmp eax, 0xffff
ja 0x1000b85a
mov dword [ebp - 0x1c8], 1
jmp 0x1000b861
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c8], eax
je 0x1000b878
mov dword [ebp - 0x1d0], 1
jmp 0x1000b87f
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1d0], eax
jne 0x1000b896
mov dword [ebp - 0x1d8], 1
jmp 0x1000b89d
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
sub eax, dword [ebp - 0xb4]
jne 0x1000b8b7
mov dword [ebp - 0xc4], 1
jmp 0x1000b8be
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0xc4]
jne 0x1000b8db
cmp dword [ebp - 0xa4], 0
jne 0x1000b8db
and dword [ebp - 0xc8], 0
jmp 0x1000b8e5
mov dword [ebp - 0xc8], 1
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0xd8]
jge 0x1000b905
mov dword [ebp - 0x268], 1
jmp 0x1000b90c
and dword [ebp - 0x268], 0
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x38], eax
je 0x1000b923
mov dword [ebp - 0xd0], 1
jmp 0x1000b92a
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 0x4b], 0
movzx eax, byte [ebp - 0x4b]
test eax, eax
je 0x1000b948
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov esi, 0x1006f868
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret