Function at 0x1000900a
Capabilities:
Check os version
Get file attributes
Get file system object information
Start service

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1178
call fcn.10077a60
push esi
push edi
mov dword [ebp - 0xb2c], 0xe91a049f
mov dword [ebp - 0xb28], 0xe91a049f
mov dword [ebp - 0xb24], 0xe91a049f
mov dword [ebp - 0xb20], 0xe91a049f
mov dword [ebp - 0x198], 2
mov dword [ebp - 0x33c], 0
jmp 0x10009064
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jge 0x10009080
mov eax, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xd8], 9
jmp 0x10009057
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd8], 0
jmp 0x100090ae
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 4
jge 0x100090d8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
mov dword [ebp + eax*4 - 0xb2c], 1
jmp 0x10009093
mov dword [ebp - 0x198], 3
jmp 0x100090f1
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0
jl 0x100092dd
mov dword [ebp - 0x24], 0
jmp 0x1000910e
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jge 0x10009124
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x844], 0xfffffffe
jmp 0x10009107
mov dword [ebp - 0x24], 0
jmp 0x10009134
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 3
jge 0x1000914a
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xe00], 0xd870a326
jmp 0x1000912d
mov dword [ebp - 0x24], 0
jmp 0x1000915a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x10009170
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xf84], 1
jmp 0x10009153
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x844], 3
jmp 0x1000919e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x844]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x844], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x844], 0
jl 0x100092d8
mov dword [ebp - 0x1c0], 0
jmp 0x100091cb
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x100091e7
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xacc], 0x38591b68
jmp 0x100091be
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xacc]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xf84]
sub eax, dword [ebp - 0x198]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xf84]
je 0x10009223
mov dword [ebp - 0x5b8], 1
jmp 0x1000922a
and dword [ebp - 0x5b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xacc]
cmp eax, dword [ebp - 0x5b8]
jne 0x10009264
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd8], 0
je 0x10009264
mov eax, 0x86f25db2
test eax, eax
je 0x10009264
mov dword [ebp - 0x79c], 1
jmp 0x1000926b
and dword [ebp - 0x79c], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xe00], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd8]
add eax, dword [ebp - 0x79c]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0xacc], eax
jle 0x100092b9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe00], 0
je 0x100092b9
mov dword [ebp - 0x7a4], 1
jmp 0x100092c0
and dword [ebp - 0x7a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7a4]
mov dword [ebp + eax - 0xd8], ecx
jmp 0x10009183
jmp 0x100090e4
mov dword [ebp - 0x344], 0x1928c176
mov dword [ebp - 0x948], 0
mov dword [ebp - 0xc54], 0xd193e056
mov dword [ebp - 0x920], 0xffffffff
mov dword [ebp - 0xb98], 0x7d50f82b
mov dword [ebp - 0x6c], 0
jmp 0x1000931f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x10009335
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc6c], 0x515466bc
jmp 0x10009318
mov dword [ebp - 0x6c], 0
jmp 0x10009345
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1000935b
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xc78], 0x939c
jmp 0x1000933e
mov dword [ebp - 0x344], 0x1a
jmp 0x10009374
mov eax, dword [ebp - 0x344]
dec eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0x15
jl 0x100096c6
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0xba0], 0x29edca8f
mov dword [ebp - 0xba8], 0
mov dword [ebp - 0x7b4], 0xf11caf1e
mov dword [ebp - 0x34c], 0
jmp 0x100093c2
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jne 0x100096c1
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0xbb0], 0
mov dword [ebp - 0x940], 0xffffffff
mov dword [ebp - 0xbb8], 0x2d5fba25
mov dword [ebp - 0x7ac], 0xe9f4
mov dword [ebp - 0x938], 1
mov dword [ebp - 0x1c8], 0
jmp 0x10009424
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x10009440
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x97c], 0xfffd
jmp 0x10009417
mov dword [ebp - 0x1ac], 0
jmp 0x10009459
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jg 0x100096bc
mov dword [ebp - 0x1d0], 0xededb5ca
mov dword [ebp - 0xbc0], 0xffffffff
mov dword [ebp - 0x930], 0x3b1067dc
mov dword [ebp - 0x2d8], 0
jmp 0x1000949d
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 2
jge 0x100094b9
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x864], 0xa7c7
jmp 0x10009490
mov dword [ebp - 0x1d0], 0
jmp 0x100094d2
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0
jl 0x10009590
mov dword [ebp - 0xbc8], 0x24dc41fd
mov dword [ebp - 0xbd0], 0xb6dad816
mov dword [ebp - 0xeec], 0xd850
mov dword [ebp - 0xee8], 0xd850
mov dword [ebp - 0xee4], 0xd850
mov dword [ebp - 0xee0], 0xd850
mov dword [ebp - 0xbd8], 0x84edc02
mov dword [ebp - 0x35c], 0
jmp 0x1000953e
mov eax, dword [ebp - 0x35c]
inc eax
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 1
jge 0x1000955a
mov eax, dword [ebp - 0x35c]
mov dword [ebp + eax*4 - 0xbe0], 0xfffffff7
jmp 0x10009531
mov eax, dword [ebp - 0x7ac]
inc eax
mov dword [ebp - 0x7ac], eax
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x1000958b
push 0x57c
push 0x9cd
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
jmp 0x100094c5
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp + eax*4 - 0x97c], 0x9b95520
je 0x100095af
mov dword [ebp - 0x1d8], 1
jmp 0x100095b6
and dword [ebp - 0x1d8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0xc6c], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0xc78], ecx
mov eax, dword [ebp - 0x1d8]
neg eax
mov dword [ebp - 0x7b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x864]
inc ecx
push 4
pop edx
shl edx, 0
mov dword [ebp + edx - 0x864], ecx
test eax, eax
je 0x10009685
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x864]
cmp dword [ebp - 0x920], eax
je 0x10009637
mov dword [ebp - 0x7bc], 1
jmp 0x1000963e
and dword [ebp - 0x7bc], 0
mov eax, dword [ebp - 0x7b4]
cmp eax, dword [ebp - 0x7bc]
jg 0x10009658
mov dword [ebp - 0x928], 1
jmp 0x1000965f
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x930]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0x938]
cmp dword [ebp - 0x940], eax
je 0x10009685
mov dword [ebp - 0x7c4], 1
jmp 0x1000968c
and dword [ebp - 0x7c4], 0
cmp dword [ebp - 0x7c4], 0xb249
jge 0x100096a4
mov dword [ebp - 0x7cc], 1
jmp 0x100096ab
and dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x948], eax
jmp 0x1000944c
jmp 0x100093b5
jmp 0x10009367
mov dword [ebp - 0x1b4], 0x5d6c05ba
mov dword [ebp - 0xbf0], 0xfffffff7
mov dword [ebp - 0xbf8], 0xd7f19125
mov dword [ebp - 0x2e0], 0
jmp 0x100096fd
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 3
jge 0x10009719
mov eax, dword [ebp - 0x2e0]
mov dword [ebp + eax*4 - 0x10c4], 0x79d
jmp 0x100096f0
mov dword [ebp - 0x1b4], 0
jmp 0x10009732
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0xa
je 0x10009906
mov dword [ebp - 0xc00], 0x249aaed6
mov dword [ebp - 0xc08], 0
mov dword [ebp - 0xc10], 0xffffffff
mov dword [ebp - 0x950], 1
mov dword [ebp - 0x1e0], 0
jmp 0x10009780
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 1
jge 0x1000979c
mov eax, dword [ebp - 0x1e0]
mov dword [ebp + eax*4 - 0x320], 0xeede0b40
jmp 0x10009773
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x320], 5
jmp 0x100097ca
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x320]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x320], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x320], 0xc
jge 0x10009901
mov dword [ebp - 0x1e8], 0xfffffff7
mov dword [ebp - 0x960], 0x7d7c1188
mov dword [ebp - 0xc18], 0xffffffff
mov dword [ebp - 0x38c], 0x7b5cf1c9
mov dword [ebp - 0x1e8], 0
jmp 0x1000981f
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xa
jl 0x100098fc
mov dword [ebp - 0xc20], 0x3ab1943c
mov dword [ebp - 0xc28], 0x6d210ec3
mov dword [ebp - 0xc30], 0x52568108
mov dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x38c]
dec eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 1
jle 0x10009876
mov dword [ebp - 0x7d4], 1
jmp 0x1000987d
and dword [ebp - 0x7d4], 0
mov eax, dword [ebp - 0x950]
cmp dword [ebp - 0x7d4], eax
jg 0x10009897
mov dword [ebp - 0x7dc], 1
jmp 0x1000989e
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x7dc]
neg eax
cmp eax, 4
jne 0x100098b7
mov dword [ebp - 0x958], 1
jmp 0x100098be
and dword [ebp - 0x958], 0
mov eax, dword [ebp - 0x960]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x1b4]
inc eax
cmp eax, 0x7967
jl 0x100098e4
mov dword [ebp - 0x7e4], 1
jmp 0x100098eb
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0x968], eax
jmp 0x10009812
jmp 0x100097af
jmp 0x10009725
mov dword [ebp - 0x3c], 0xa7c2
mov dword [ebp - 0x2e8], 0xfffffff6
mov dword [ebp - 0x7ec], 0x7ddbf4d
mov dword [ebp - 0x980], 0x3b06d9e9
mov dword [ebp - 0x60], 0
jmp 0x1000993b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10009951
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x10ac], 0
jmp 0x10009934
mov dword [ebp - 0x60], 0
jmp 0x10009961
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10009977
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xff0], 0x8169c147
jmp 0x1000995a
xor eax, eax
jne 0x1000998b
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc40], eax
cmp dword [ebp - 0x3c], 0xc9b996a5
jae 0x100099a9
mov dword [ebp - 0x970], 1
jmp 0x100099b0
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x7ec], eax
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x7ec], eax
jle 0x100099e2
mov dword [ebp - 0x978], 1
jmp 0x100099e9
and dword [ebp - 0x978], 0
cmp dword [ebp - 0x3c], 0x5daa
jl 0x100099ff
xor eax, eax
jne 0x100099ff
and dword [ebp - 0x398], 0
jmp 0x10009a09
mov dword [ebp - 0x398], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x398]
mov dword [ebp + eax - 0x10ac], ecx
mov eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x398]
jge 0x10009a3f
mov dword [ebp - 0x83c], 1
jmp 0x10009a46
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0xfffffffa
jg 0x10009a5b
mov dword [ebp - 0x838], 1
jmp 0x10009a62
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
sub eax, dword [ebp - 0x3c]
cmp eax, 0x26b5
jne 0x10009a7e
mov dword [ebp - 0x640], 1
jmp 0x10009a85
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x640]
cmp eax, dword [ebp - 0x3c]
jl 0x10009aa0
mov dword [ebp - 0x794], 1
jmp 0x10009aa7
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x794], eax
jl 0x10009abe
mov dword [ebp - 0x3a0], 1
jmp 0x10009ac5
and dword [ebp - 0x3a0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a0]
mov dword [ebp + eax - 0xff0], ecx
mov eax, dword [ebp - 0x3a0]
mov dword [ebp - 0x980], eax
mov byte [ebp - 0xf8], 0
movzx eax, byte [ebp - 0xf8]
test eax, eax
je 0x10009b01
push 0x1a32
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0xa0], 0
jmp 0x10009b1a
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 2
jge 0x10009b36
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xc84], 0x7862fd41
jmp 0x10009b0d
mov dword [ebp - 0xa0], 0
jmp 0x10009b4f
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x10009b6b
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x124], 0x57a7c203
jmp 0x10009b42
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x124], 1
jmp 0x10009b99
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x124], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0
jl 0x10009bd6
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x124]
cmp dword [ebp + eax*4 - 0xc84], 0
je 0x10009bc2
jmp 0x10009bd6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0
je 0x10009bd4
jmp 0x10009b7e
jmp 0x10009b7e
mov dword [ebp - 0x68], 0
jmp 0x10009be6
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10009bfc
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xc90], 0x7862fd41
jmp 0x10009bdf
mov dword [ebp - 0x68], 0
jmp 0x10009c0c
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10009c22
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x158], 0x57a7c203
jmp 0x10009c05
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x158], 1
jmp 0x10009c50
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x158], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
jl 0x10009c8d
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x158]
cmp dword [ebp + eax*4 - 0xc90], 0
je 0x10009c79
jmp 0x10009c8d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x158], 0
je 0x10009c8b
jmp 0x10009c35
jmp 0x10009c35
mov dword [ebp - 0x90], 0
jmp 0x10009ca6
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10009cc2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xc9c], 0x7862fd41
jmp 0x10009c99
mov dword [ebp - 0x90], 0
jmp 0x10009cdb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x10009cf7
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x160], 0x57a7c203
jmp 0x10009cce
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x160], 1
jmp 0x10009d25
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x160], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x160], 0
jl 0x10009d62
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x160]
cmp dword [ebp + eax*4 - 0xc9c], 0
je 0x10009d4e
jmp 0x10009d62
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x160], 0
je 0x10009d60
jmp 0x10009d0a
jmp 0x10009d0a
mov dword [ebp - 0xc], 0x24f0
mov dword [ebp - 0x1f0], 0
jmp 0x10009d82
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 2
jge 0x10009d9e
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xe0], 0x1f2c29a
jmp 0x10009d75
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x424], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax - 0xe0], ecx
cmp dword [ebp - 0x424], 0
je 0x1000a0f0
mov dword [ebp - 0x340], 0xfffffffa
mov dword [ebp - 0x658], 0x7f7ffff9
mov byte [ebp - 0xfa], 0
movzx eax, byte [ebp - 0xfa]
test eax, eax
je 0x10009dfe
push 0
push 0
push 0x18b
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 0xc], 1
jmp 0x10009e0e
mov eax, dword [ebp - 0xc]
dec eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jl 0x1000a0ee
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0xe0], 0x2e1dfe00
jl 0x10009e34
mov dword [ebp - 0x644], 1
jmp 0x10009e3b
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 0
jae 0x10009e50
mov dword [ebp - 0x42c], 1
jmp 0x10009e57
and dword [ebp - 0x42c], 0
cmp dword [ebp - 0x42c], 0xbc3e
je 0x10009e6f
mov dword [ebp - 0x748], 1
jmp 0x10009e76
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x748]
add eax, 8
jne 0x10009e8a
xor eax, eax
inc eax
je 0x1000a0d6
mov dword [ebp - 0x3a8], 0x1f94
mov eax, dword [ebp - 0xc]
cmp dword [ebp + eax*4 - 0xe0], 0
je 0x10009ead
mov dword [ebp - 0x43c], 1
jmp 0x10009eb4
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x340]
cmp dword [ebp + eax*4 - 0xe0], ecx
jge 0x10009ed2
mov dword [ebp - 0x434], 1
jmp 0x10009ed9
and dword [ebp - 0x434], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
add eax, dword [ebp - 0x434]
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0xe0]
jg 0x10009f04
mov dword [ebp - 0x648], 1
jmp 0x10009f0b
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x648]
sub ecx, dword [ebp + eax*4 - 0xe0]
sub ecx, dword [ebp - 0xc]
cmp dword [ebp - 0x43c], ecx
jle 0x10009f32
mov dword [ebp - 0x82c], 1
jmp 0x10009f39
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
dec eax
mov ecx, dword [ebp - 0xc]
cmp eax, dword [ebp + ecx*4 - 0xe0]
jne 0x10009f80
mov eax, dword [ebp - 0xc]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp + ecx - 0xe0], eax
mov byte [ebp - 0xfc], 0
movzx eax, byte [ebp - 0xfc]
test eax, eax
je 0x10009f7b
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1000a0d4
mov dword [ebp - 0x998], 0xffffffff
mov eax, 0xfff6
test eax, eax
je 0x1000a024
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
imul eax, dword [ebp - 0x3a8]
cmp eax, dword [ebp - 0x3a8]
jle 0x10009fbc
mov dword [ebp - 0x444], 1
jmp 0x10009fc3
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
imul eax, dword [ebp - 0x444]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xe0]
jle 0x10009fef
mov dword [ebp - 0x988], 1
jmp 0x10009ff6
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0xc58], eax
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
cmp dword [ebp - 0x3a8], eax
je 0x1000a024
mov dword [ebp - 0x650], 1
jmp 0x1000a02b
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0xf689
je 0x1000a043
mov dword [ebp - 0x44c], 1
jmp 0x1000a04a
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xffffffff
jbe 0x1000a05f
mov dword [ebp - 0x990], 1
jmp 0x1000a066
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
mov dword [ebp - 0xc60], eax
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xdb8], eax
mov eax, dword [ebp - 0x340]
cmp dword [ebp - 0x340], eax
jle 0x1000a09c
mov dword [ebp - 0x750], 1
jmp 0x1000a0a3
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0xc]
mov eax, dword [ebp + eax*4 - 0xe0]
cmp dword [ebp - 0x750], eax
jne 0x1000a0c1
mov dword [ebp - 0x454], 1
jmp 0x1000a0c8
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x998], eax
jmp 0x1000a0e0
mov dword [ebp - 0x658], 0x1490a
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x658], eax
jmp 0x10009e07
jmp 0x1000a13e
mov dword [ebp - 0xc], 0
jmp 0x1000a100
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 4
je 0x1000a13e
mov dword [ebp - 0x9dc], 1
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x1000a131
push 0
push 0xa98
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
cmp dword [ebp - 0x9dc], 0
je 0x1000a13c
jmp 0x1000a13e
jmp 0x1000a0f9
mov dword [ebp - 4], 0x24f0
mov dword [ebp - 0x1f8], 0
jmp 0x1000a15e
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1000a17a
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xbc], 0x1f2c29a
jmp 0x1000a151
mov eax, dword [ebp - 4]
mov dword [ebp - 0x45c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x45c]
mov dword [ebp + eax - 0xbc], ecx
cmp dword [ebp - 0x45c], 0
je 0x1000a4cc
mov dword [ebp - 0x2f0], 0xfffffffa
mov dword [ebp - 0x760], 0x7f7ffff9
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x1000a1da
push 0
push 0
push 0x18b
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 4], 1
jmp 0x1000a1ea
mov eax, dword [ebp - 4]
dec eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jl 0x1000a4ca
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xbc], 0x2e1dfe00
jl 0x1000a210
mov dword [ebp - 0x7d0], 1
jmp 0x1000a217
and dword [ebp - 0x7d0], 0
cmp dword [ebp - 0x7d0], 0
jae 0x1000a22c
mov dword [ebp - 0x464], 1
jmp 0x1000a233
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 0xbc3e
je 0x1000a24b
mov dword [ebp - 0x660], 1
jmp 0x1000a252
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
add eax, 8
jne 0x1000a266
xor eax, eax
inc eax
je 0x1000a4b2
mov dword [ebp - 0x3b0], 0x1f94
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0xbc], 0
je 0x1000a289
mov dword [ebp - 0x474], 1
jmp 0x1000a290
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x2f0]
cmp dword [ebp + eax*4 - 0xbc], ecx
jge 0x1000a2ae
mov dword [ebp - 0x46c], 1
jmp 0x1000a2b5
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbc]
add eax, dword [ebp - 0x46c]
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0xbc]
jg 0x1000a2e0
mov dword [ebp - 0x758], 1
jmp 0x1000a2e7
and dword [ebp - 0x758], 0
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x758]
sub ecx, dword [ebp + eax*4 - 0xbc]
sub ecx, dword [ebp - 4]
cmp dword [ebp - 0x474], ecx
jle 0x1000a30e
mov dword [ebp - 0x668], 1
jmp 0x1000a315
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
dec eax
mov ecx, dword [ebp - 4]
cmp eax, dword [ebp + ecx*4 - 0xbc]
jne 0x1000a35c
mov eax, dword [ebp - 4]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp + ecx - 0xbc], eax
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1000a357
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1000a4b0
mov dword [ebp - 0x9f4], 0xffffffff
mov eax, 0xfff6
test eax, eax
je 0x1000a400
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
imul eax, dword [ebp - 0x3b0]
cmp eax, dword [ebp - 0x3b0]
jle 0x1000a398
mov dword [ebp - 0x47c], 1
jmp 0x1000a39f
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
imul eax, dword [ebp - 0x47c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xbc]
jle 0x1000a3cb
mov dword [ebp - 0x9e4], 1
jmp 0x1000a3d2
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
cmp dword [ebp - 0x3b0], eax
je 0x1000a400
mov dword [ebp - 0x834], 1
jmp 0x1000a407
and dword [ebp - 0x834], 0
cmp dword [ebp - 0x834], 0xf689
je 0x1000a41f
mov dword [ebp - 0x484], 1
jmp 0x1000a426
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xffffffff
jbe 0x1000a43b
mov dword [ebp - 0x9ec], 1
jmp 0x1000a442
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0x2f0]
mov dword [ebp - 0xdd0], eax
mov eax, dword [ebp - 0x2f0]
cmp dword [ebp - 0x2f0], eax
jle 0x1000a478
mov dword [ebp - 0x670], 1
jmp 0x1000a47f
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0xbc]
cmp dword [ebp - 0x670], eax
jne 0x1000a49d
mov dword [ebp - 0x48c], 1
jmp 0x1000a4a4
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x9f4], eax
jmp 0x1000a4bc
mov dword [ebp - 0x760], 0x1490a
mov eax, dword [ebp - 4]
mov dword [ebp - 0x760], eax
jmp 0x1000a1e3
jmp 0x1000a51a
mov dword [ebp - 4], 0
jmp 0x1000a4dc
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 4
je 0x1000a51a
mov dword [ebp - 0x9fc], 1
mov byte [ebp - 0x104], 0
movzx eax, byte [ebp - 0x104]
test eax, eax
je 0x1000a50d
push 0
push 0xa98
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
cmp dword [ebp - 0x9fc], 0
je 0x1000a518
jmp 0x1000a51a
jmp 0x1000a4d5
mov dword [ebp - 8], 0x24f0
mov dword [ebp - 0x200], 0
jmp 0x1000a53a
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 2
jge 0x1000a556
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xc8], 0x1f2c29a
jmp 0x1000a52d
mov eax, dword [ebp - 8]
mov dword [ebp - 0x494], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x494]
mov dword [ebp + eax - 0xc8], ecx
cmp dword [ebp - 0x494], 0
je 0x1000a8a8
mov dword [ebp - 0x328], 0xfffffffa
mov dword [ebp - 0x690], 0x7f7ffff9
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x1000a5b6
push 0
push 0
push 0x18b
push 0
call dword [sym.imp.KERNEL32.dll_VerifyVersionInfoW]
mov dword [ebp - 8], 1
jmp 0x1000a5c6
mov eax, dword [ebp - 8]
dec eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jl 0x1000a8a6
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xc8], 0x2e1dfe00
jl 0x1000a5ec
mov dword [ebp - 0x678], 1
jmp 0x1000a5f3
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0
jae 0x1000a608
mov dword [ebp - 0x49c], 1
jmp 0x1000a60f
and dword [ebp - 0x49c], 0
cmp dword [ebp - 0x49c], 0xbc3e
je 0x1000a627
mov dword [ebp - 0x7d8], 1
jmp 0x1000a62e
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
add eax, 8
jne 0x1000a642
xor eax, eax
inc eax
je 0x1000a88e
mov dword [ebp - 0x3b8], 0x1f94
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0xc8], 0
je 0x1000a665
mov dword [ebp - 0x4ac], 1
jmp 0x1000a66c
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x328]
cmp dword [ebp + eax*4 - 0xc8], ecx
jge 0x1000a68a
mov dword [ebp - 0x4a4], 1
jmp 0x1000a691
and dword [ebp - 0x4a4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc8]
add eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 8]
cmp eax, dword [ebp + ecx*4 - 0xc8]
jg 0x1000a6bc
mov dword [ebp - 0x680], 1
jmp 0x1000a6c3
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x680]
sub ecx, dword [ebp + eax*4 - 0xc8]
sub ecx, dword [ebp - 8]
cmp dword [ebp - 0x4ac], ecx
jle 0x1000a6ea
mov dword [ebp - 0x768], 1
jmp 0x1000a6f1
and dword [ebp - 0x768], 0
mov eax, dword [ebp - 0x768]
dec eax
mov ecx, dword [ebp - 8]
cmp eax, dword [ebp + ecx*4 - 0xc8]
jne 0x1000a738
mov eax, dword [ebp - 8]
push 4
pop ecx
imul ecx, ecx, 0
mov eax, dword [ebp + eax*4 - 0xc8]
mov dword [ebp + ecx - 0xc8], eax
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x1000a733
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1000a88c
mov dword [ebp - 0xa50], 0xffffffff
mov eax, 0xfff6
test eax, eax
je 0x1000a7dc
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
imul eax, dword [ebp - 0x3b8]
cmp eax, dword [ebp - 0x3b8]
jle 0x1000a774
mov dword [ebp - 0x4b4], 1
jmp 0x1000a77b
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
imul eax, dword [ebp - 0x4b4]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0xc8]
jle 0x1000a7a7
mov dword [ebp - 0xa40], 1
jmp 0x1000a7ae
and dword [ebp - 0xa40], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
cmp dword [ebp - 0x3b8], eax
je 0x1000a7dc
mov dword [ebp - 0x688], 1
jmp 0x1000a7e3
and dword [ebp - 0x688], 0
cmp dword [ebp - 0x688], 0xf689
je 0x1000a7fb
mov dword [ebp - 0x4bc], 1
jmp 0x1000a802
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 0xffffffff
jbe 0x1000a817
mov dword [ebp - 0xa48], 1
jmp 0x1000a81e
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
mov dword [ebp - 0xde0], eax
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x328], eax
jle 0x1000a854
mov dword [ebp - 0x820], 1
jmp 0x1000a85b
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0xc8]
cmp dword [ebp - 0x820], eax
jne 0x1000a879
mov dword [ebp - 0x4c4], 1
jmp 0x1000a880
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0xa50], eax
jmp 0x1000a898
mov dword [ebp - 0x690], 0x1490a
mov eax, dword [ebp - 8]
mov dword [ebp - 0x690], eax
jmp 0x1000a5bf
jmp 0x1000a8f6
mov dword [ebp - 8], 0
jmp 0x1000a8b8
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
je 0x1000a8f6
mov dword [ebp - 0xa58], 1
mov byte [ebp - 0x120], 0
movzx eax, byte [ebp - 0x120]
test eax, eax
je 0x1000a8e9
push 0
push 0xa98
push 0
call dword [sym.imp.ADVAPI32.dll_StartServiceW]
cmp dword [ebp - 0xa58], 0
je 0x1000a8f4
jmp 0x1000a8f6
jmp 0x1000a8b1
mov dword [ebp - 0x208], 0xd5e48d32
mov byte [ebp - 0xff], 0
movzx eax, byte [ebp - 0xff]
test eax, eax
je 0x1000a91c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x208], 0xfffffff6
jmp 0x1000a935
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0xfffffff9
jl 0x1000aa06
mov dword [ebp - 0x210], 0xee7d214c
mov dword [ebp - 0x2f8], 0
jmp 0x1000a965
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 2
jge 0x1000a981
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0xca8], 0x5683c8fc
jmp 0x1000a958
mov dword [ebp - 0x210], 0
jmp 0x1000a99a
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 1
jg 0x1000aa01
mov dword [ebp - 0x1bc], 0x7822e6e7
mov byte [ebp - 0x11a], 0
movzx eax, byte [ebp - 0x11a]
test eax, eax
je 0x1000a9c9
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov dword [ebp - 0x1bc], 0
jmp 0x1000a9e2
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jg 0x1000a9ff
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp + eax*4 - 0xca8], 0
je 0x1000a9fd
jmp 0x1000a9ff
jmp 0x1000a9d5
jmp 0x1000a98d
jmp 0x1000a928
mov dword [ebp - 0xdf0], 0x91df82
mov dword [ebp - 0x9f8], 0xfffffff6
mov dword [ebp - 0xe78], 7
mov dword [ebp - 0x4dc], 0xc3ec3d4e
mov dword [ebp - 0x3c0], 0x3268
mov dword [ebp - 0x918], 0
mov dword [ebp - 0x70], 0
jmp 0x1000aa52
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1000aa68
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x3f4], 0x67215912
jmp 0x1000aa4b
mov dword [ebp - 0x70], 0
jmp 0x1000aa78
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1000aa8e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xfc0], 0x38330377
jmp 0x1000aa71
mov eax, 0xc19c5a65
test eax, eax
je 0x1000aab3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3f4], 0
je 0x1000aab3
mov dword [ebp - 0xa60], 1
jmp 0x1000aaba
and dword [ebp - 0xa60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0xe80], eax
mov eax, dword [ebp - 0x3c0]
mov ecx, dword [ebp - 0x3c0]
inc ecx
mov dword [ebp - 0x3c0], ecx
test eax, eax
jne 0x1000abac
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x3f4], 0x3fc2
cmp eax, 0xc0b333ee
jbe 0x1000ab0c
mov dword [ebp - 0x4cc], 1
jmp 0x1000ab13
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x9f8]
cmp eax, 0xa083
jge 0x1000ab32
mov dword [ebp - 0x770], 1
jmp 0x1000ab39
and dword [ebp - 0x770], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x770], eax
je 0x1000ab5a
mov dword [ebp - 0x3c8], 1
jmp 0x1000ab61
and dword [ebp - 0x3c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp + eax - 0xfc0], ecx
mov eax, dword [ebp - 0x4dc]
cmp dword [ebp - 0x3c8], eax
jle 0x1000ab8e
mov dword [ebp - 0x4d4], 1
jmp 0x1000ab95
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x918]
cmp dword [ebp - 0x4d4], eax
jge 0x1000abac
and dword [ebp - 0x698], 0
jmp 0x1000abb6
mov dword [ebp - 0x698], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x698], eax
jl 0x1000abd7
mov dword [ebp - 0x8b4], 1
jmp 0x1000abde
and dword [ebp - 0x8b4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0xe88], eax
mov dword [ebp - 0x4dc], 0xa9c5a74d
mov dword [ebp - 0x350], 0xd5e48d32
mov byte [ebp - 0x11c], 0
movzx eax, byte [ebp - 0x11c]
test eax, eax
je 0x1000ac21
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x350], 0xfffffff6
jmp 0x1000ac3a
mov eax, dword [ebp - 0x350]
inc eax
mov dword [ebp - 0x350], eax
cmp dword [ebp - 0x350], 0xfffffff9
jl 0x1000ad0b
mov dword [ebp - 0x300], 0xee7d214c
mov dword [ebp - 0x218], 0
jmp 0x1000ac6a
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x1000ac86
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xcb4], 0x5683c8fc
jmp 0x1000ac5d
mov dword [ebp - 0x300], 0
jmp 0x1000ac9f
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 1
jg 0x1000ad06
mov dword [ebp - 0x1a8], 0x7822e6e7
mov byte [ebp - 0xeb], 0
movzx eax, byte [ebp - 0xeb]
test eax, eax
je 0x1000acce
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov dword [ebp - 0x1a8], 0
jmp 0x1000ace7
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jg 0x1000ad04
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp + eax*4 - 0xcb4], 0
je 0x1000ad02
jmp 0x1000ad04
jmp 0x1000acda
jmp 0x1000ac92
jmp 0x1000ac2d
mov dword [ebp - 0x9d4], 0
mov dword [ebp - 0x220], 0
jmp 0x1000ad2e
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 3
jge 0x1000ad4a
mov eax, dword [ebp - 0x220]
mov dword [ebp + eax*4 - 0x1008], 0xd925b0e4
jmp 0x1000ad21
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x1008], 0
xor eax, eax
cmp eax, 0x45db34e6
jge 0x1000ad70
mov dword [ebp - 0x7e0], 1
jmp 0x1000ad77
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x9d4], eax
mov byte [ebp - 0x11b], 0
movzx eax, byte [ebp - 0x11b]
test eax, eax
je 0x1000ada1
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
mov dword [ebp - 0x330], 0xd5e48d32
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000adc7
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 0x330], 0xfffffff6
jmp 0x1000ade0
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0xfffffff9
jl 0x1000aeb1
mov dword [ebp - 0x308], 0xee7d214c
mov dword [ebp - 0x228], 0
jmp 0x1000ae10
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1000ae2c
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0xcc0], 0x5683c8fc
jmp 0x1000ae03
mov dword [ebp - 0x308], 0
jmp 0x1000ae45
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jg 0x1000aeac
mov dword [ebp - 0x170], 0x7822e6e7
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000ae74
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
mov dword [ebp - 0x170], 0
jmp 0x1000ae8d
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jg 0x1000aeaa
mov eax, dword [ebp - 0x170]
cmp dword [ebp + eax*4 - 0xcc0], 0
je 0x1000aea8
jmp 0x1000aeaa
jmp 0x1000ae80
jmp 0x1000ae38
jmp 0x1000add3
mov dword [ebp - 0x110], 0xc45cdbe8
mov dword [ebp - 0x4ec], 0xe86a6760
mov dword [ebp - 0xe90], 1
mov dword [ebp - 0xe98], 0xfffffff8
mov dword [ebp - 0x1c], 0
jmp 0x1000aee9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000aeff
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xa08], 1
jmp 0x1000aee2
mov dword [ebp - 0x1c], 0
jmp 0x1000af0f
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000af25
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe10], 1
jmp 0x1000af08
mov dword [ebp - 0x1c], 0
jmp 0x1000af35
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000af4b
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6b8], 0x386b9bdd
jmp 0x1000af2e
mov dword [ebp - 0x110], 0
jmp 0x1000af64
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 1
jg 0x1000b341
mov dword [ebp - 0x238], 0xc5d9b4e9
mov dword [ebp - 0x6b0], 0xffff
mov dword [ebp - 0x230], 0
jmp 0x1000af9e
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1000afba
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x388], 0xffffffff
jmp 0x1000af91
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x388], 1
jmp 0x1000afe8
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x388], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x388], 0
jl 0x1000b2d4
mov dword [ebp - 0x12c], 0x5a60d005
mov dword [ebp - 0x150], 0x61b8ce22
mov dword [ebp - 0x2b0], 0
jmp 0x1000b029
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 1
jge 0x1000b045
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x9bc], 0xf34d89bb
jmp 0x1000b01c
mov dword [ebp - 0x12c], 1
jmp 0x1000b05e
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x1000b08d
mov byte [ebp - 0xef], 0
movzx eax, byte [ebp - 0xef]
test eax, eax
je 0x1000b081
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov dword [ebp - 0x238], 8
jmp 0x1000b051
xor eax, eax
inc eax
je 0x1000b0e7
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xea0], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x388], 0xb245
cmp eax, dword [ebp - 0x110]
jl 0x1000b0c3
mov dword [ebp - 0x4e4], 1
jmp 0x1000b0ca
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x6b0]
mov ecx, dword [ebp - 0x4e4]
lea eax, [ecx + eax + 0xa]
test eax, eax
je 0x1000b0e7
and dword [ebp - 0x8bc], 0
jmp 0x1000b0f1
mov dword [ebp - 0x8bc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
mov dword [ebp - 0xea8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
mov dword [ebp - 0x12c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
mov dword [ebp - 0xeb0], eax
cmp dword [ebp - 0x110], 9
jle 0x1000b13f
mov dword [ebp - 0x6a0], 1
jmp 0x1000b146
and dword [ebp - 0x6a0], 0
mov eax, dword [ebp - 0x6a0]
mov dword [ebp - 0x4ec], eax
mov eax, dword [ebp - 0x238]
cmp dword [ebp - 0x4ec], eax
jle 0x1000b16c
mov dword [ebp - 0x778], 1
jmp 0x1000b173
and dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x238]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x388]
cmp eax, dword [ebp - 0x150]
jg 0x1000b1a6
mov dword [ebp - 0x4f4], 1
jmp 0x1000b1ad
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x150]
add eax, dword [ebp - 0x4f4]
push 4
pop ecx
imul ecx, ecx, 0
add eax, dword [ebp + ecx - 0x388]
cmp eax, 0xffffffff
jg 0x1000b1d7
mov dword [ebp - 0x6a8], 1
jmp 0x1000b1de
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x6a8], eax
jge 0x1000b1f8
mov dword [ebp - 0x4fc], 1
jmp 0x1000b1ff
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x4fc], eax
jle 0x1000b219
mov dword [ebp - 0x830], 1
jmp 0x1000b220
and dword [ebp - 0x830], 0
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x150], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x9bc]
cmp dword [ebp - 0x150], eax
jg 0x1000b24d
mov dword [ebp - 0x504], 1
jmp 0x1000b254
and dword [ebp - 0x504], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
imul eax, dword [ebp - 0x504]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x388]
je 0x1000b283
mov dword [ebp - 0x8c4], 1
jmp 0x1000b28a
and dword [ebp - 0x8c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x388]
mov dword [ebp - 0xeb8], eax
cmp dword [ebp - 0x6b0], 0x473ecfb8
jg 0x1000b2b5
mov dword [ebp - 0x50c], 1
jmp 0x1000b2bc
and dword [ebp - 0x50c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x50c]
mov dword [ebp + eax - 0xe10], ecx
jmp 0x1000afcd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe10], 0xb42d
jle 0x1000b2f3
mov dword [ebp - 0x780], 1
jmp 0x1000b2fa
and dword [ebp - 0x780], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa08]
imul eax, dword [ebp - 0x780]
cmp dword [ebp - 0x110], eax
je 0x1000b322
mov dword [ebp - 0x514], 1
jmp 0x1000b329
and dword [ebp - 0x514], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x514]
mov dword [ebp + eax - 0x388], ecx
jmp 0x1000af57
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x6b8], eax
mov dword [ebp - 0xec0], 0x91df82
mov dword [ebp - 0x8cc], 0xfffffff6
mov dword [ebp - 0xec8], 7
mov dword [ebp - 0x52c], 0xc3ec3d4e
mov dword [ebp - 0x3ec], 0x3268
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0xb0], 0
jmp 0x1000b3b1
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1000b3cd
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x404], 0x67215912
jmp 0x1000b3a4
mov dword [ebp - 0xb0], 0
jmp 0x1000b3e6
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 3
jge 0x1000b402
mov eax, dword [ebp - 0xb0]
mov dword [ebp + eax*4 - 0x1038], 0x38330377
jmp 0x1000b3d9
mov eax, 0xc19c5a65
test eax, eax
je 0x1000b427
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x404], 0
je 0x1000b427
mov dword [ebp - 0x9a8], 1
jmp 0x1000b42e
and dword [ebp - 0x9a8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xed0], eax
mov eax, dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x3ec]
inc ecx
mov dword [ebp - 0x3ec], ecx
test eax, eax
jne 0x1000b520
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x404], 0x3fc2
cmp eax, 0xc0b333ee
jbe 0x1000b480
mov dword [ebp - 0x51c], 1
jmp 0x1000b487
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
sub eax, dword [ebp - 0x8cc]
cmp eax, 0xa083
jge 0x1000b4a6
mov dword [ebp - 0x7e8], 1
jmp 0x1000b4ad
and dword [ebp - 0x7e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x7e8], eax
je 0x1000b4ce
mov dword [ebp - 0x3e0], 1
jmp 0x1000b4d5
and dword [ebp - 0x3e0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp + eax - 0x1038], ecx
mov eax, dword [ebp - 0x52c]
cmp dword [ebp - 0x3e0], eax
jle 0x1000b502
mov dword [ebp - 0x524], 1
jmp 0x1000b509
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0xa4c]
cmp dword [ebp - 0x524], eax
jge 0x1000b520
and dword [ebp - 0x6c0], 0
jmp 0x1000b52a
mov dword [ebp - 0x6c0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x6c0], eax
jl 0x1000b54b
mov dword [ebp - 0x8d4], 1
jmp 0x1000b552
and dword [ebp - 0x8d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xed8], eax
mov dword [ebp - 0x52c], 0xa9c5a74d
mov dword [ebp - 0xb0c], 0xe91a049f
mov dword [ebp - 0xb08], 0xe91a049f
mov dword [ebp - 0xb04], 0xe91a049f
mov dword [ebp - 0xb00], 0xe91a049f
mov dword [ebp - 0x164], 2
mov dword [ebp - 0x2ac], 0
jmp 0x1000b5ba
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jge 0x1000b5d6
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0xd0], 9
jmp 0x1000b5ad
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd0], 0
jmp 0x1000b604
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 4
jge 0x1000b62e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
mov dword [ebp + eax*4 - 0xb0c], 1
jmp 0x1000b5e9
mov dword [ebp - 0x164], 3
jmp 0x1000b647
mov eax, dword [ebp - 0x164]
dec eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jl 0x1000b833
mov dword [ebp - 0x2c], 0
jmp 0x1000b664
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1000b67a
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x874], 0xfffffffe
jmp 0x1000b65d
mov dword [ebp - 0x2c], 0
jmp 0x1000b68a
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000b6a0
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xe20], 0xd870a326
jmp 0x1000b683
mov dword [ebp - 0x2c], 0
jmp 0x1000b6b0
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1000b6c6
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xf94], 1
jmp 0x1000b6a9
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x874], 3
jmp 0x1000b6f4
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x874]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x874], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x874], 0
jl 0x1000b82e
mov dword [ebp - 0x240], 0
jmp 0x1000b721
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 3
jge 0x1000b73d
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xa9c], 0x38591b68
jmp 0x1000b714
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xf94]
sub eax, dword [ebp - 0x164]
push 4
pop ecx
imul ecx, ecx, 3
cmp eax, dword [ebp + ecx - 0xf94]
je 0x1000b779
mov dword [ebp - 0x788], 1
jmp 0x1000b780
and dword [ebp - 0x788], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa9c]
cmp eax, dword [ebp - 0x788]
jne 0x1000b7ba
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd0], 0
je 0x1000b7ba
mov eax, 0x86f25db2
test eax, eax
je 0x1000b7ba
mov dword [ebp - 0x534], 1
jmp 0x1000b7c1
and dword [ebp - 0x534], 0
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xe20], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd0]
add eax, dword [ebp - 0x534]
push 4
pop ecx
shl ecx, 0
cmp dword [ebp + ecx - 0xa9c], eax
jle 0x1000b80f
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe20], 0
je 0x1000b80f
mov dword [ebp - 0x6c8], 1
jmp 0x1000b816
and dword [ebp - 0x6c8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6c8]
mov dword [ebp + eax - 0xd0], ecx
jmp 0x1000b6d9
jmp 0x1000b63a
mov dword [ebp - 0xebc], 0x91df82
mov dword [ebp - 0x8dc], 0xfffffff6
mov dword [ebp - 0xb4c], 7
mov dword [ebp - 0x54c], 0xc3ec3d4e
mov dword [ebp - 0x394], 0x3268
mov dword [ebp - 0xa00], 0
mov dword [ebp - 0x4c], 0
jmp 0x1000b87f
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x1000b895
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0x414], 0x67215912
jmp 0x1000b878
mov dword [ebp - 0x4c], 0
jmp 0x1000b8a5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1000b8bb
mov eax, dword [ebp - 0x4c]
mov dword [ebp + eax*4 - 0xfcc], 0x38330377
jmp 0x1000b89e
mov eax, 0xc19c5a65
test eax, eax
je 0x1000b8e0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x414], 0
je 0x1000b8e0
mov dword [ebp - 0x9b0], 1
jmp 0x1000b8e7
and dword [ebp - 0x9b0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x394]
inc ecx
mov dword [ebp - 0x394], ecx
test eax, eax
jne 0x1000b9d9
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x414], 0x3fc2
cmp eax, 0xc0b333ee
jbe 0x1000b939
mov dword [ebp - 0x53c], 1
jmp 0x1000b940
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
sub eax, dword [ebp - 0x8dc]
cmp eax, 0xa083
jge 0x1000b95f
mov dword [ebp - 0x828], 1
jmp 0x1000b966
and dword [ebp - 0x828], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x828], eax
je 0x1000b987
mov dword [ebp - 0x3cc], 1
jmp 0x1000b98e
and dword [ebp - 0x3cc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xfcc], ecx
mov eax, dword [ebp - 0x54c]
cmp dword [ebp - 0x3cc], eax
jle 0x1000b9bb
mov dword [ebp - 0x544], 1
jmp 0x1000b9c2
and dword [ebp - 0x544], 0
mov eax, dword [ebp - 0xa00]
cmp dword [ebp - 0x544], eax
jge 0x1000b9d9
and dword [ebp - 0x6d0], 0
jmp 0x1000b9e3
mov dword [ebp - 0x6d0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x414]
cmp dword [ebp - 0x6d0], eax
jl 0x1000ba04
mov dword [ebp - 0x8e4], 1
jmp 0x1000ba0b
and dword [ebp - 0x8e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x414]
mov dword [ebp - 0xb54], eax
mov dword [ebp - 0x54c], 0xa9c5a74d
mov dword [ebp - 0xe64], 0xa11600d5
mov dword [ebp - 0xb5c], 0xa87a
mov dword [ebp - 0x6d8], 0xcc72b752
mov dword [ebp - 0x78], 0
jmp 0x1000ba56
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1000ba6c
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xa90], 0x4e064826
jmp 0x1000ba4f
mov dword [ebp - 0x78], 0
jmp 0x1000ba7c
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 4
jge 0x1000ba92
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x1158], 0x45fe46c2
jmp 0x1000ba75
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xa90], 0
jmp 0x1000babd
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xa90]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xa90], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xa90], 4
jg 0x1000bb76
mov dword [ebp - 0x39c], 0x1c97412d
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1000bb05
push 0x21f8
push 0x857
push 0
push 0x2234
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xa90], 0
jne 0x1000bb3a
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0xa90], 0x285faafe
jge 0x1000bb3a
cmp dword [ebp - 0x39c], 0
jne 0x1000bb3a
and dword [ebp - 0x790], 0
jmp 0x1000bb44
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x39c]
cmp dword [ebp - 0x790], eax
je 0x1000bb5e
mov dword [ebp - 0x554], 1
jmp 0x1000bb65
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x554]
mov dword [ebp - 0x39c], eax
jmp 0x1000baa4
mov eax, dword [ebp - 0x6d8]
inc eax
mov dword [ebp - 0x6d8], eax
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x2c4], 0
jmp 0x1000bba6
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 3
jge 0x1000bbc2
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0xfe4], 0xd925b0e4
jmp 0x1000bb99
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xfe4], 0
xor eax, eax
cmp eax, 0x45db34e6
jge 0x1000bbe8
mov dword [ebp - 0x55c], 1
jmp 0x1000bbef
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x9b8], eax
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x1000bc19
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
movzx eax, byte [0x10cb53f8]
test eax, eax
je 0x1000bc37
mov esi, 0x1007e830
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10010665
mov dword [ebp - 0x894], 0x5299dada
mov dword [ebp - 0x890], 0x5299dada
mov dword [ebp - 0x88c], 0x5299dada
mov dword [ebp - 0x888], 0x5299dada
mov dword [ebp - 0x798], 0x977a1245
mov dword [ebp - 0x574], 0xf545
mov dword [ebp - 0x248], 0
jmp 0x1000bc8c
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1000bca8
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x56c], 0
jmp 0x1000bc7f
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x894], 0
jmp 0x1000bcd3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x894], 0
jg 0x1000bda3
mov dword [ebp - 0x154], 0xffffffff
mov dword [ebp - 0x564], 0xd9edbda7
mov dword [ebp - 0x6e0], 0
mov dword [ebp - 0x8ec], 0xa18e418a
mov dword [ebp - 0x154], 0
jmp 0x1000bd27
cmp dword [ebp - 0x154], 0
jl 0x1000bd79
mov eax, dword [ebp - 0x154]
cmp dword [ebp + eax*4 - 0x56c], 0
jb 0x1000bd4c
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x894]
mov eax, dword [ebp + eax*4 - 0x56c]
mov dword [ebp - 0x798], eax
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x154], eax
jmp 0x1000bcba
mov eax, dword [ebp - 0x574]
dec eax
mov dword [ebp - 0x574], eax
mov dword [ebp - 0xa3c], 0
mov dword [ebp - 0x2cc], 0
jmp 0x1000bdd3
cmp dword [ebp - 0x2cc], 3
jge 0x1000bdef
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xffc], 0xd925b0e4
jmp 0x1000bdc6
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xffc], 0
xor eax, eax
cmp eax, 0x45db34e6
jge 0x1000be15
pop edi
pop esi
mov esp, ebp
pop ebp
ret