Function at 0x10008cf1
Capabilities:
Check os version
Delete file
Get disk size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10074871
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1024
call fcn.10070ab0
push esi
push edi
mov dword [ebp - 0x224], 1
mov dword [ebp - 0x294], 0
jmp 0x10008d38
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 1
jge 0x10008d54
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xd20], 0xfffffffb
jmp 0x10008d2b
mov dword [ebp - 0x224], 0
jmp 0x10008d6d
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 0
jg 0x10008d9b
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x10008d99
push 0
push 0x2688
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
jmp 0x10008d60
push 1
lea ecx, [ebp - 0xb74]
call fcn.10014568
and dword [ebp - 4], 0
mov dword [ebp - 0x374], 5
push 2
lea ecx, [ebp - 0xbfc]
call fcn.10014568
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], 0
jmp 0x10008dd7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10008ded
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c4], 0xfffc
jmp 0x10008dd0
mov dword [ebp - 0x18], 0
jmp 0x10008dfd
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x10008e19
push dword [ebp - 0x18]
lea ecx, [ebp - 0xb74]
call fcn.100145f4
mov dword [eax], 0x9cdf9c77
jmp 0x10008df6
mov dword [ebp - 0x18], 0
jmp 0x10008e29
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x10008e45
push dword [ebp - 0x18]
lea ecx, [ebp - 0xbfc]
call fcn.100145f4
mov dword [eax], 0x1eb64d0
jmp 0x10008e22
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3c4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c4], 0x95ae649f
jae 0x10008ecd
push 0
lea ecx, [ebp - 0xb74]
call fcn.100145f4
mov dword [eax], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3c4], 1
jne 0x10008ea2
mov dword [ebp - 0x4b8], 1
jmp 0x10008ea9
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x6c1d
jge 0x10008ecd
mov dword [ebp - 0x920], 1
jmp 0x10008ed4
and dword [ebp - 0x920], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
cmp dword [ebp - 0x920], eax
jge 0x10008eee
xor eax, eax
inc eax
je 0x10008f0c
push 0
lea ecx, [ebp - 0xb74]
call fcn.100145f4
cmp dword [eax], 0
je 0x10008f0c
mov dword [ebp - 0x96c], 1
jmp 0x10008f13
and dword [ebp - 0x96c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3c4]
cmp dword [ebp - 0x374], eax
jl 0x10008f34
mov dword [ebp - 0x928], 1
jmp 0x10008f3b
and dword [ebp - 0x928], 0
push 1
lea ecx, [ebp - 0xbfc]
call fcn.100145f4
mov ecx, dword [ebp - 0x928]
mov dword [eax], ecx
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xbfc]
call fcn.100145ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb74]
call fcn.100145ef
mov dword [ebp - 0x22c], 1
mov dword [ebp - 0x2ec], 0
jmp 0x10008f91
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jge 0x10008fad
mov eax, dword [ebp - 0x2ec]
mov dword [ebp + eax*4 - 0xd74], 0xfffffffb
jmp 0x10008f84
mov dword [ebp - 0x22c], 0
jmp 0x10008fc6
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0
jg 0x10008ff4
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x10008ff2
push 0
push 0x2688
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
jmp 0x10008fb9
mov dword [ebp - 0x20], 0x83d1f0df
mov dword [ebp - 0x3e4], 0xffffffff
mov dword [ebp - 0x3e0], 0xffffffff
mov dword [ebp - 0x3dc], 0xffffffff
mov dword [ebp - 0x3d8], 0xffffffff
mov dword [ebp - 0x234], 0xffffffff
mov dword [ebp - 0x2d4], 0x717824ff
mov dword [ebp - 0x29c], 0
jmp 0x10009050
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x10009069
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x14], 0x8876
jmp 0x10009043
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x1000908c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
jne 0x1000908c
and dword [ebp - 0x410], 0
jmp 0x10009096
mov dword [ebp - 0x410], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
je 0x100090be
mov eax, 0x43cc9f19
test eax, eax
je 0x100090be
mov dword [ebp - 0xa90], 1
jmp 0x100090c5
and dword [ebp - 0xa90], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xd7c], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x14], 0x123d
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jge 0x100090fb
mov dword [ebp - 0x934], 1
jmp 0x10009102
and dword [ebp - 0x934], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x934], eax
jg 0x1000912d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x1000912d
mov dword [ebp - 0x6d4], 1
jmp 0x10009134
and dword [ebp - 0x6d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x6d4], eax
jg 0x10009152
mov dword [ebp - 0x3f0], 1
jmp 0x10009159
and dword [ebp - 0x3f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
sub eax, dword [ebp - 0x3f0]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jne 0x10009181
mov dword [ebp - 0x8b0], 1
jmp 0x10009188
and dword [ebp - 0x8b0], 0
cmp dword [ebp - 0x8b0], 8
jne 0x100091a3
mov eax, 0x514f
test eax, eax
jne 0x100091a3
and dword [ebp - 0x3f8], 0
jmp 0x100091ad
mov dword [ebp - 0x3f8], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x3f8], eax
jle 0x100091cb
mov dword [ebp - 0x328], 1
jmp 0x100091d2
and dword [ebp - 0x328], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x328]
mov dword [ebp + eax - 0x3e4], ecx
cmp dword [ebp - 0x328], 0xfffffff9
jge 0x100091fa
mov dword [ebp - 0x8b8], 1
jmp 0x10009201
and dword [ebp - 0x8b8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x8b8], eax
jne 0x1000921f
mov dword [ebp - 0x400], 1
jmp 0x10009226
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0
je 0x10009248
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x10009248
mov dword [ebp - 0x8c0], 1
jmp 0x1000924f
and dword [ebp - 0x8c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x8c0], eax
jle 0x1000926d
mov dword [ebp - 0x408], 1
jmp 0x10009274
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 1
jb 0x10009289
mov dword [ebp - 0x8c8], 1
jmp 0x10009290
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x8c8]
mov dword [ebp - 0x234], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x234], eax
jge 0x100092c7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x14], 0
je 0x100092c7
mov dword [ebp - 0x8d0], 1
jmp 0x100092ce
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x410]
cmp eax, dword [ebp - 0x8d0]
je 0x100092e8
mov dword [ebp - 0xa98], 1
jmp 0x100092ef
and dword [ebp - 0xa98], 0
mov eax, 0x5996fd0f
test eax, eax
je 0x100094a3
mov dword [ebp - 0x1c4], 0xffffffff
mov dword [ebp - 0x20], 0
jmp 0x10009316
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x100094a1
mov dword [ebp - 0x378], 0xb303a67d
mov eax, 0x58d3
test eax, eax
je 0x1000933c
cmp dword [ebp - 0x1c4], 0
jne 0x100093a5
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x378]
cmp dword [ebp - 0x1c4], eax
jge 0x10009362
mov dword [ebp - 0x418], 1
jmp 0x10009369
and dword [ebp - 0x418], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x418], eax
jge 0x10009383
mov dword [ebp - 0x8d8], 1
jmp 0x1000938a
and dword [ebp - 0x8d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
cmp dword [ebp - 0x8d8], eax
je 0x100093a5
and dword [ebp - 0x420], 0
jmp 0x100093af
mov dword [ebp - 0x420], 1
cmp dword [ebp - 0x420], 0x177106cf
jg 0x100093c7
mov dword [ebp - 0xaa0], 1
jmp 0x100093ce
and dword [ebp - 0xaa0], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xd8c], eax
mov eax, 0x9949
test eax, eax
jne 0x100093ef
mov dword [ebp - 0xaa8], 1
jmp 0x100093f6
and dword [ebp - 0xaa8], 0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3e4]
mov dword [ebp - 0xab0], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0xab0]
mov dword [ebp + eax*4 - 0x3e4], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14]
mov dword [ebp - 0xdb8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0xdc8], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp + eax*4 - 0x3e4]
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 0x6770d28c
jle 0x1000946d
mov dword [ebp - 0x8e0], 1
jmp 0x10009474
and dword [ebp - 0x8e0], 0
cmp dword [ebp - 0x8e0], 8
jg 0x10009489
mov dword [ebp - 0x428], 1
jmp 0x10009490
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x378], eax
jmp 0x1000930f
jmp 0x100094b6
mov dword [ebp - 0xab8], 0x7a897151
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xab8], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xdd0], eax
imul eax, dword [ebp - 0x20], 0x6032
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x14]
jne 0x100094e1
mov dword [ebp - 0x8e8], 1
jmp 0x100094e8
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
neg eax
sub eax, dword [ebp - 0x234]
neg eax
cmp eax, 0x7ce1
jne 0x10009511
mov dword [ebp - 0x430], 1
jmp 0x10009518
and dword [ebp - 0x430], 0
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x430], eax
jl 0x10009532
mov dword [ebp - 0x8f0], 1
jmp 0x10009539
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8f0]
sub eax, dword [ebp - 0x2d4]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0x3e4]
cmp eax, 0xffffd9b7
je 0x10009564
mov dword [ebp - 0x438], 1
jmp 0x1000956b
and dword [ebp - 0x438], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e4]
cmp eax, dword [ebp - 0x438]
jg 0x1000958c
mov dword [ebp - 0x8f8], 1
jmp 0x10009593
and dword [ebp - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3e4]
imul eax, dword [ebp - 0x8f8]
push 4
pop ecx
imul ecx, ecx, 3
mov dword [ebp + ecx - 0x3e4], eax
mov dword [ebp - 0xb0], 0xd8b9dbea
push 2
lea ecx, [ebp - 0xac8]
call fcn.10014568
mov dword [ebp - 4], 2
mov dword [ebp - 0xb64], 0xd329
mov dword [ebp - 0x908], 8
mov dword [ebp - 0x330], 0x8700d35d
mov dword [ebp - 0xa4c], 0
mov dword [ebp - 0x23c], 0
jmp 0x10009613
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 2
jge 0x10009635
push dword [ebp - 0x23c]
lea ecx, [ebp - 0xac8]
call fcn.100145f4
mov dword [eax], 0xe3b372ba
jmp 0x10009606
cmp dword [ebp - 0xb0], 0
jne 0x10009681
imul eax, dword [ebp - 0xb0], 7
test eax, eax
je 0x10009678
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0x440], eax
push 0
lea ecx, [ebp - 0xac8]
call fcn.100145f4
mov ecx, dword [ebp - 0x440]
mov dword [eax], ecx
mov eax, dword [ebp - 0xb64]
cmp dword [ebp - 0x440], eax
jg 0x10009681
and dword [ebp - 0x900], 0
jmp 0x1000968b
mov dword [ebp - 0x900], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x900], eax
jne 0x100096ab
mov eax, 0xd9a2
test eax, eax
jne 0x100096ab
and dword [ebp - 0x448], 0
jmp 0x100096b5
mov dword [ebp - 0x448], 1
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x908], eax
mov eax, dword [ebp - 0x908]
mov dword [ebp - 0xdd8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xde0], eax
push 0
lea ecx, [ebp - 0xac8]
call fcn.100145f4
cmp dword [eax], 0
jg 0x100096f7
mov dword [ebp - 0x450], 1
jmp 0x100096fe
and dword [ebp - 0x450], 0
mov eax, dword [ebp - 0x450]
sub eax, dword [ebp - 0xb0]
sub eax, 0xb7a1
imul eax, eax, 0x8722
cmp eax, 0xc895
jle 0x10009728
mov dword [ebp - 0x910], 1
jmp 0x1000972f
and dword [ebp - 0x910], 0
cmp dword [ebp - 0x910], 5
jle 0x10009744
mov dword [ebp - 0x918], 1
jmp 0x1000974b
and dword [ebp - 0x918], 0
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0x330], eax
mov eax, dword [ebp - 0x330]
mov dword [ebp - 0xa4c], eax
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x330], eax
jl 0x1000977d
mov dword [ebp - 0x45c], 1
jmp 0x10009784
and dword [ebp - 0x45c], 0
push 0
lea ecx, [ebp - 0xac8]
call fcn.100145f4
mov ecx, dword [ebp - 0x45c]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xac8]
call fcn.100145ef
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x2a4], 9
mov dword [ebp - 0x5c], 0
jmp 0x100097cc
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 4
jge 0x100097e2
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1030], 1
jmp 0x100097c5
mov dword [ebp - 0x5c], 0
jmp 0x100097f2
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10009808
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0xad8], 8
jmp 0x100097eb
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xad8], 3
jmp 0x10009836
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad8]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xad8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xad8], 0
jl 0x10009890
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10009875
push 0
push 0x66
push 0
push 0xe69
push 0x1ee6
push 0
push 0xb3d
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xad8]
cmp dword [ebp + eax*4 - 0x1030], 0
je 0x1000988e
jmp 0x1000981b
jmp 0x1000981b
mov dword [ebp - 0x2a4], 0
jmp 0x100098a9
mov eax, dword [ebp - 0x2a4]
inc eax
mov dword [ebp - 0x2a4], eax
cmp dword [ebp - 0x2a4], 3
jg 0x1000990e
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x100098da
push 0
push 0
push 0x2055
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageA]
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x1000990c
push 0
push 0x26e
push 0x1bab
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
jmp 0x1000989c
mov dword [ebp - 0x244], 0
jmp 0x10009927
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x10009943
mov eax, dword [ebp - 0x244]
mov dword [ebp + eax*4 - 0xde8], 0xfffffffb
jmp 0x1000991a
mov dword [ebp - 0x2fc], 0
jmp 0x1000995c
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
jg 0x10009ff0
mov dword [ebp - 0x24c], 0xfffffffc
mov dword [ebp - 0x24c], 0
jmp 0x1000998c
mov eax, dword [ebp - 0x24c]
dec eax
mov dword [ebp - 0x24c], eax
cmp dword [ebp - 0x24c], 0xffffffe5
je 0x10009a97
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x2ac], 0
jmp 0x100099b9
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 1
jge 0x100099d5
mov eax, dword [ebp - 0x2ac]
mov dword [ebp + eax*4 - 0x97c], 0x13244d51
jmp 0x100099ac
cmp dword [ebp - 0x30], 0
je 0x10009a07
mov dword [ebp - 0xa88], 0x568d
mov dword [ebp - 0x9c8], 0x8588d0d3
mov dword [ebp - 0x30], 0xfffffff7
mov eax, dword [ebp - 0xa88]
mov dword [ebp - 0x9c8], eax
jmp 0x10009a8b
mov dword [ebp - 0x30], 9
jmp 0x10009a17
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xe
jge 0x10009a5e
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1d0], 0
jmp 0x10009a40
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jge 0x10009a5c
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0x97c], 1
jmp 0x10009a33
jmp 0x10009a10
mov dword [ebp - 0x30], 0xffffffe4
jmp 0x10009a6e
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 8
jne 0x10009a8b
mov dword [ebp - 0xb1c], 0x1c17c774
cmp dword [ebp - 0xb1c], 0
je 0x10009a89
jmp 0x10009a8b
jmp 0x10009a67
mov dword [ebp - 0x30], 0x61b583dc
jmp 0x1000997f
mov dword [ebp - 0x984], 4
mov dword [ebp - 0xa54], 0xfffffffc
push 3
lea ecx, [ebp - 0xbf0]
call fcn.10014568
mov dword [ebp - 4], 3
mov dword [ebp - 0xdf0], 0xa5efa20b
mov dword [ebp - 0xdf8], 0x35e4b783
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x254], 0
jmp 0x10009af6
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 3
jge 0x10009b15
push dword [ebp - 0x254]
lea ecx, [ebp - 0xbf0]
call fcn.100145f4
or dword [eax], 0xffffffff
jmp 0x10009ae9
push 1
lea ecx, [ebp - 0xbf0]
call fcn.100145f4
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x39c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x39c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x984]
mov ecx, dword [ebp - 0x39c]
cmp eax, dword [ecx]
jl 0x10009b55
mov dword [ebp - 0x814], 1
jmp 0x10009b5c
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0xa54], eax
mov eax, dword [ebp - 0x464]
inc eax
mov dword [ebp - 0x464], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbf0]
call fcn.100145ef
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x10009feb
push 1
lea ecx, [ebp - 0x94c]
call fcn.10014568
mov dword [ebp - 4], 4
mov dword [ebp - 0xb8], 0x4f204795
mov dword [ebp - 0xba8], 0x3817d1dc
mov dword [ebp - 0xba4], 0x3817d1dc
mov dword [ebp - 0xba0], 0x3817d1dc
mov dword [ebp - 0xb9c], 0x3817d1dc
lea ecx, [ebp - 0x3a5]
call fcn.10014603
push eax
lea eax, [ebp - 0xb98]
push eax
lea eax, [ebp - 0xba8]
push eax
lea ecx, [ebp - 0xff0]
call fcn.10014606
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xe88]
call fcn.100145c9
mov byte [ebp - 4], 5
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x994], 0
mov dword [ebp - 0x7c], 0
jmp 0x10009c3a
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10009c56
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x94c]
call fcn.100145f4
mov dword [eax], 2
jmp 0x10009c33
mov dword [ebp - 0x7c], 0
jmp 0x10009c66
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10009c79
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x44], 0x184c506d
jmp 0x10009c5f
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x44], 0
jmp 0x10009c9e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x44], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jg 0x10009f3f
mov dword [ebp - 0x47c], 0x12af0488
mov dword [ebp - 0xe00], 1
mov dword [ebp - 0x338], 2
mov dword [ebp - 0x380], 0xfffffffc
push 3
lea ecx, [ebp - 0xc08]
call fcn.10014568
mov byte [ebp - 4], 6
mov dword [ebp - 0x2dc], 0
jmp 0x10009d01
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 3
jge 0x10009d23
push dword [ebp - 0x2dc]
lea ecx, [ebp - 0xc08]
call fcn.100145f4
mov dword [eax], 0xfffffff9
jmp 0x10009cf4
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x24], ecx
test eax, eax
jne 0x10009e1a
cmp dword [ebp - 0x380], 1
je 0x10009d4a
mov dword [ebp - 0x6dc], 1
jmp 0x10009d51
and dword [ebp - 0x6dc], 0
cmp dword [ebp - 0x6dc], 0xfffffffc
jle 0x10009d66
mov dword [ebp - 0x46c], 1
jmp 0x10009d6d
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0x338], eax
mov eax, dword [ebp - 0x380]
cmp dword [ebp - 0x338], eax
jle 0x10009d93
mov dword [ebp - 0x8b4], 1
jmp 0x10009d9a
and dword [ebp - 0x8b4], 0
cmp dword [ebp - 0x8b4], 7
jg 0x10009daf
mov dword [ebp - 0x474], 1
jmp 0x10009db6
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x474], eax
jg 0x10009dd0
mov dword [ebp - 0x6e4], 1
jmp 0x10009dd7
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x47c], eax
cmp dword [ebp - 0x47c], 0
jne 0x10009dfd
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
jne 0x10009dfd
cmp dword [ebp - 0x24], 0
push 3
lea ecx, [ebp - 0xe88]
call fcn.100145f4
cmp dword [eax], 0
je 0x10009e1a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x44], 0
push 2
lea ecx, [ebp - 0xc08]
call fcn.100145f4
cmp dword [eax], 5
je 0x10009e38
mov dword [ebp - 0x98c], 1
jmp 0x10009e3f
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0xe08], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x44]
mov dword [ebp - 0xe10], eax
mov eax, 0xe87f
cmp eax, 0x4380
jge 0x10009e73
mov dword [ebp - 0x81c], 1
jmp 0x10009e7a
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0
je 0x10009e8a
cmp dword [ebp - 0x338], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x44]
lea ecx, [ebp - 0x94c]
call fcn.100145f4
mov eax, dword [eax]
mov dword [ebp - 0xb8], eax
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x44]
lea ecx, [ebp - 0x94c]
call fcn.100145f4
mov esi, eax
push 0
lea ecx, [ebp - 0x94c]
call fcn.100145f4
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x10009edd
mov dword [ebp - 0xabc], 1
jmp 0x10009ee4
and dword [ebp - 0xabc], 0
push 0
lea ecx, [ebp - 0x94c]
call fcn.100145f4
cmp dword [ebp - 0x380], 0
je 0x10009f18
push 0
lea ecx, [ebp - 0x94c]
call fcn.100145f4
cmp dword [eax], 0
je 0x10009f18
mov dword [ebp - 0x484], 1
jmp 0x10009f1f
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x994], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc08]
call fcn.100145ef
jmp 0x10009c89
mov dword [ebp - 0xb8], 3
jmp 0x10009f58
mov eax, dword [ebp - 0xb8]
dec eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 0
jl 0x10009fbc
mov dword [ebp - 0x24], 0
jmp 0x10009f71
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x10009f84
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x44], 0x46bac60
jmp 0x10009f6a
mov dword [ebp - 0x24], 0
jmp 0x10009f94
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10009fba
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x10009fb8
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x10009f8d
jmp 0x10009f4b
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xe88]
call fcn.100145ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94c]
call fcn.100145ef
push 0
push 0x2688
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VerSetConditionMask]
jmp 0x1000994f
mov dword [ebp - 0xe18], 1
mov dword [ebp - 0xe20], 0xdada439b
mov dword [ebp - 0xe28], 0xdc4b4e12
mov dword [ebp - 0xe30], 0x90a624cd
mov dword [ebp - 0xe38], 0xeb9ae77a
mov dword [ebp - 0xe40], 1
mov dword [ebp - 0xe48], 0x707dfe4
mov dword [ebp - 0xe50], 1
push 2
lea ecx, [ebp - 0xe98]
call fcn.10014568
mov dword [ebp - 4], 7
mov dword [ebp - 0xe58], 0xfffffff8
mov dword [ebp - 0x6ec], 0
mov dword [ebp - 0x25c], 0
jmp 0x1000a081
mov eax, dword [ebp - 0x25c]
inc eax
mov dword [ebp - 0x25c], eax
cmp dword [ebp - 0x25c], 2
jge 0x1000a0a0
push dword [ebp - 0x25c]
lea ecx, [ebp - 0xe98]
call fcn.100145f4
and dword [eax], 0
jmp 0x1000a074
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000a0b8
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov eax, dword [ebp - 0x6ec]
inc eax
mov dword [ebp - 0x6ec], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe98]
call fcn.100145ef
mov dword [ebp - 0xe60], 1
mov dword [ebp - 0xe68], 0xdada439b
mov dword [ebp - 0xe70], 0xdc4b4e12
mov dword [ebp - 0xe78], 0x90a624cd
mov dword [ebp - 0xf90], 0xeb9ae77a
mov dword [ebp - 0xf98], 1
mov dword [ebp - 0xfa0], 0x707dfe4
mov dword [ebp - 0xfa8], 1
push 2
lea ecx, [ebp - 0xea8]
call fcn.10014568
mov dword [ebp - 4], 8
mov dword [ebp - 0xfb0], 0xfffffff8
mov dword [ebp - 0x48c], 0
mov dword [ebp - 0x2b4], 0
jmp 0x1000a165
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1000a184
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0xea8]
call fcn.100145f4
and dword [eax], 0
jmp 0x1000a158
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1000a19c
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov eax, dword [ebp - 0x48c]
inc eax
mov dword [ebp - 0x48c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.100145ef
mov dword [ebp - 0xfb8], 9
mov dword [ebp - 0x494], 0
mov dword [ebp - 0xb68], 0x480
mov dword [ebp - 0x180], 0x2d1a4e66
mov dword [ebp - 0x9a4], 0xaba4a2c6
mov dword [ebp - 0xfc0], 0x7f9f41ad
mov dword [ebp - 0x64], 0
jmp 0x1000a204
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1000a21a
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xc38], 7
jmp 0x1000a1fd
mov dword [ebp - 0x64], 0
jmp 0x1000a22a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x1000a240
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x960], 0
jmp 0x1000a223
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x960]
cmp dword [ebp + eax - 0xc38], ecx
jg 0x1000a275
mov dword [ebp - 0xa5c], 1
jmp 0x1000a27c
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0x180]
push 4
pop ecx
shl ecx, 0
add eax, dword [ebp + ecx - 0xc38]
cmp dword [ebp - 0x180], eax
jle 0x1000a2a3
mov dword [ebp - 0x904], 1
jmp 0x1000a2aa
and dword [ebp - 0x904], 0
mov eax, dword [ebp - 0x904]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0xfc8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x960]
mov dword [ebp - 0xfd0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x960]
mov dword [ebp - 0xfd8], eax
cmp dword [ebp - 0x180], 0
je 0x1000a301
xor eax, eax
je 0x1000a301
mov dword [ebp - 0x6f4], 1
jmp 0x1000a308
and dword [ebp - 0x6f4], 0
cmp dword [ebp - 0x6f4], 0xfffa
ja 0x1000a320
mov dword [ebp - 0x49c], 1
jmp 0x1000a327
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x180]
add eax, dword [ebp - 0x49c]
jne 0x1000a34c
mov eax, 0xa996
test eax, eax
jne 0x1000a34c
xor eax, eax
inc eax
jne 0x1000a34c
and dword [ebp - 0x99c], 0
jmp 0x1000a356
mov dword [ebp - 0x99c], 1
mov eax, dword [ebp - 0xb68]
mov dword [ebp - 0x824], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x824]
mov dword [ebp + eax - 0xc38], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x960]
add eax, dword [ebp - 0x824]
cmp eax, 0x8c38ec32
je 0x1000a39b
mov dword [ebp - 0x4a4], 1
jmp 0x1000a3a2
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x9a4], eax
mov dword [ebp - 0xfe0], 1
push 1
lea ecx, [ebp - 0xb80]
call fcn.10014568
mov dword [ebp - 4], 9
mov dword [ebp - 0x340], 5
push 2
lea ecx, [ebp - 0xc50]
call fcn.10014568
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1c], 0
jmp 0x1000a3f7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000a40d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x3bc], 0xfffc
jmp 0x1000a3f0
mov dword [ebp - 0x1c], 0
jmp 0x1000a41d
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jge 0x1000a439
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb80]
call fcn.100145f4
mov dword [eax], 0x9cdf9c77
jmp 0x1000a416
mov dword [ebp - 0x1c], 0
jmp 0x1000a449
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000a465
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xc50]
call fcn.100145f4
mov dword [eax], 0x1eb64d0
jmp 0x1000a442
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3bc]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x3bc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3bc], 0x95ae649f
jae 0x1000a4ed
push 0
lea ecx, [ebp - 0xb80]
call fcn.100145f4
mov dword [eax], 1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3bc], 1
jne 0x1000a4c2
mov dword [ebp - 0x6fc], 1
jmp 0x1000a4c9
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 0x6c1d
jge 0x1000a4ed
mov dword [ebp - 0x4ac], 1
jmp 0x1000a4f4
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3bc]
cmp dword [ebp - 0x4ac], eax
jge 0x1000a50e
xor eax, eax
inc eax
je 0x1000a52c
push 0
lea ecx, [ebp - 0xb80]
call fcn.100145f4
cmp dword [eax], 0
je 0x1000a52c
mov dword [ebp - 0xa64], 1
jmp 0x1000a533
and dword [ebp - 0xa64], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3bc]
cmp dword [ebp - 0x340], eax
jl 0x1000a554
mov dword [ebp - 0x8bc], 1
jmp 0x1000a55b
and dword [ebp - 0x8bc], 0
push 1
lea ecx, [ebp - 0xc50]
call fcn.100145f4
mov ecx, dword [ebp - 0x8bc]
mov dword [eax], ecx
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xc50]
call fcn.100145ef
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb80]
call fcn.100145ef
mov dword [ebp - 0xfe8], 0xdada439b
mov dword [ebp - 0xe7c], 0xdc4b4e12
mov dword [ebp - 0xf0c], 0x90a624cd
mov dword [ebp - 0xcd8], 0xeb9ae77a
mov dword [ebp - 0xe2c], 1
mov dword [ebp - 0xce0], 0x707dfe4
mov dword [ebp - 0xf9c], 1
push 2
lea ecx, [ebp - 0xeb8]
call fcn.10014568
mov dword [ebp - 4], 0xb
mov dword [ebp - 0xce8], 0xfffffff8
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x264], 0
jmp 0x1000a615
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 2
jge 0x1000a634
push dword [ebp - 0x264]
lea ecx, [ebp - 0xeb8]
call fcn.100145f4
and dword [eax], 0
jmp 0x1000a608
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000a64c
call dword [sym.imp.USER32.dll_CreatePopupMenu]
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0x4b4], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb8]
call fcn.100145ef
mov dword [ebp - 0x1c0], 0xfffffffc
mov dword [ebp - 0xa6c], 0xfffffffe
mov dword [ebp - 0x2f4], 0
jmp 0x1000a695
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 3
jge 0x1000a6b1
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0xec8], 0x5e17
jmp 0x1000a688
mov dword [ebp - 0x1c0], 2
mov dword [ebp - 0x1c0], 2
jmp 0x1000a6d4
mov eax, dword [ebp - 0x1c0]
dec eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0
jl 0x1000a8db
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xc0], 2
jmp 0x1000a704
mov eax, dword [ebp - 0xc0]
dec eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
jl 0x1000a8d6
mov dword [ebp - 0x1a4], 0xfffffff8
mov dword [ebp - 0x9b4], 0x3cf68729
mov dword [ebp - 0x1a4], 2
jmp 0x1000a73e
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jl 0x1000a8d1
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x48], 0
jmp 0x1000a762
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jg 0x1000a8c2
mov dword [ebp - 0x4c4], 0xfffffffb
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xe34], eax
cmp dword [ebp - 0xc0], 0
jne 0x1000a797
cmp dword [ebp - 0x48], 0
jne 0x1000a797
and dword [ebp - 0x9ac], 0
jmp 0x1000a7a1
mov dword [ebp - 0x9ac], 1
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xcf0], eax
cmp dword [ebp - 0xc0], 0xfff9
jae 0x1000a7c2
mov dword [ebp - 0x704], 1
jmp 0x1000a7c9
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x1c0]
cmp eax, dword [ebp - 0x704]
jne 0x1000a7e3
mov dword [ebp - 0x4bc], 1
jmp 0x1000a7ea
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x1a4]
mov eax, dword [ebp + eax*4 - 0xec8]
cmp eax, dword [ebp - 0x4bc]
jle 0x1000a80b
mov dword [ebp - 0x82c], 1
jmp 0x1000a812
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x4c4], eax
imul eax, dword [ebp - 0x4c4], 0
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xec8]
cmp eax, 0xfb1a
jne 0x1000a845
mov dword [ebp - 0xacc], 1
jmp 0x1000a84c
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xf1c], eax
mov eax, 0x3388
test eax, eax
je 0x1000a86a
mov dword [ebp - 0x9b4], 1
jmp 0x1000a88c
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1000a88c
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp dword [ebp - 0x1a4], 0
jne 0x1000a8a7
cmp dword [ebp - 0xc0], 0
jne 0x1000a8a7
and dword [ebp - 0x70c], 0
jmp 0x1000a8b1
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0xa6c], eax
jmp 0x1000a75b
imul eax, dword [ebp - 0x48], 0x3e32
mov dword [ebp - 0x48], eax
jmp 0x1000a731
jmp 0x1000a6f7
jmp 0x1000a6c7
mov dword [ebp - 0x18c], 0xfffffffc
mov dword [ebp - 0xa74], 0xfffffffe
mov dword [ebp - 0x26c], 0
jmp 0x1000a908
mov eax, dword [ebp - 0x26c]
inc eax
mov dword [ebp - 0x26c], eax
cmp dword [ebp - 0x26c], 3
jge 0x1000a924
mov eax, dword [ebp - 0x26c]
mov dword [ebp + eax*4 - 0xed8], 0x5e17
jmp 0x1000a8fb
mov dword [ebp - 0x18c], 2
mov dword [ebp - 0x18c], 2
jmp 0x1000a947
mov eax, dword [ebp - 0x18c]
dec eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jl 0x1000ab4e
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0xc8], 2
jmp 0x1000a977
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0
jl 0x1000ab49
mov dword [ebp - 0x1b4], 0xfffffff8
mov dword [ebp - 0x9c4], 0x3cf68729
mov dword [ebp - 0x1b4], 2
jmp 0x1000a9b1
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x1000ab44
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x38], 0
jmp 0x1000a9d5
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jg 0x1000ab35
mov dword [ebp - 0x714], 0xfffffffb
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xcf8], eax
cmp dword [ebp - 0xc8], 0
jne 0x1000aa0a
cmp dword [ebp - 0x38], 0
jne 0x1000aa0a
and dword [ebp - 0x9bc], 0
jmp 0x1000aa14
mov dword [ebp - 0x9bc], 1
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xe3c], eax
cmp dword [ebp - 0xc8], 0xfff9
jae 0x1000aa35
mov dword [ebp - 0x4cc], 1
jmp 0x1000aa3c
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x4cc]
jne 0x1000aa56
mov dword [ebp - 0x92c], 1
jmp 0x1000aa5d
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp + eax*4 - 0xed8]
cmp eax, dword [ebp - 0x92c]
jle 0x1000aa7e
mov dword [ebp - 0x4d4], 1
jmp 0x1000aa85
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x714], eax
imul eax, dword [ebp - 0x714], 0
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xed8]
cmp eax, 0xfb1a
jne 0x1000aab8
mov dword [ebp - 0xb2c], 1
jmp 0x1000aabf
and dword [ebp - 0xb2c], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xd00], eax
mov eax, 0x3388
test eax, eax
je 0x1000aadd
mov dword [ebp - 0x9c4], 1
jmp 0x1000aaff
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x1000aaff
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp dword [ebp - 0x1b4], 0
jne 0x1000ab1a
cmp dword [ebp - 0xc8], 0
jne 0x1000ab1a
and dword [ebp - 0x4dc], 0
jmp 0x1000ab24
mov dword [ebp - 0x4dc], 1
mov eax, dword [ebp - 0x4dc]
mov dword [ebp - 0xa74], eax
jmp 0x1000a9ce
imul eax, dword [ebp - 0x38], 0x3e32
mov dword [ebp - 0x38], eax
jmp 0x1000a9a4
jmp 0x1000a96a
jmp 0x1000a93a
push 2
lea ecx, [ebp - 0xae8]
call fcn.10014568
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x78], 0x2ee76f50
mov dword [ebp - 0x2bc], 0
jmp 0x1000ab82
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 2
jge 0x1000aba1
push dword [ebp - 0x2bc]
lea ecx, [ebp - 0xae8]
call fcn.100145f4
or dword [eax], 0xffffffff
jmp 0x1000ab75
mov dword [ebp - 0x78], 1
jmp 0x1000abb1
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x1000acc9
mov dword [ebp - 0xd0], 0xc3ad3b31
mov dword [ebp - 0xd0], 1
jmp 0x1000abde
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0
jl 0x1000ac1b
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1000ac01
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0xd0]
lea ecx, [ebp - 0xae8]
call fcn.100145f4
cmp dword [eax], 0
je 0x1000ac19
jmp 0x1000abd1
jmp 0x1000abd1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0xfc4], eax
push dword [ebp - 0x78]
lea ecx, [ebp - 0xae8]
call fcn.100145f4
mov ecx, dword [ebp - 0xd0]
cmp dword [eax], ecx
jne 0x1000ac48
mov dword [ebp - 0x9cc], 1
jmp 0x1000ac4f
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x78], 0x78acc4b7
jl 0x1000ac64
mov dword [ebp - 0x834], 1
jmp 0x1000ac6b
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x834]
dec eax
sub eax, dword [ebp - 0x78]
cmp eax, 1
jne 0x1000ac86
mov dword [ebp - 0x4e4], 1
jmp 0x1000ac8d
and dword [ebp - 0x4e4], 0
push dword [ebp - 0x78]
lea ecx, [ebp - 0xae8]
call fcn.100145f4
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4e4]
jge 0x1000acb1
mov dword [ebp - 0x71c], 1
jmp 0x1000acb8
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x71c]
mov dword [ebp - 0xd0], eax
jmp 0x1000abaa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xae8]
call fcn.100145ef
push 3
lea ecx, [ebp - 0xee8]
call fcn.10014568
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x2e4], 0xaeef20fe
mov dword [ebp - 0x274], 0
jmp 0x1000ad0f
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 3
jge 0x1000ad31
push dword [ebp - 0x274]
lea ecx, [ebp - 0xee8]
call fcn.100145f4
mov dword [eax], 0x7571177e
jmp 0x1000ad02
mov dword [ebp - 0x2e4], 0
jmp 0x1000ad4a
mov eax, dword [ebp - 0x2e4]
inc eax
mov dword [ebp - 0x2e4], eax
cmp dword [ebp - 0x2e4], 2
jg 0x1000ad7c
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000ad7a
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_DialogBoxParamA]
jmp 0x1000ad3d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xee8]
call fcn.100145ef
mov dword [ebp - 0x194], 0xfffffffc
mov dword [ebp - 0x9dc], 0xfffffffe
mov dword [ebp - 0x27c], 0
jmp 0x1000adb8
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 3
jge 0x1000add4
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xef8], 0x5e17
jmp 0x1000adab
mov dword [ebp - 0x194], 2
mov dword [ebp - 0x194], 2
jmp 0x1000adf7
mov eax, dword [ebp - 0x194]
dec eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0
jl 0x1000affe
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xd8], 2
jmp 0x1000ae27
mov eax, dword [ebp - 0xd8]
dec eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jl 0x1000aff9
mov dword [ebp - 0x1ac], 0xfffffff8
mov dword [ebp - 0xa7c], 0x3cf68729
mov dword [ebp - 0x1ac], 2
jmp 0x1000ae61
mov eax, dword [ebp - 0x1ac]
dec eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 0
jl 0x1000aff4
mov dword [ebp - 0x3c], 3
mov dword [ebp - 0x3c], 0
jmp 0x1000ae85
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jg 0x1000afe5
mov dword [ebp - 0x724], 0xfffffffb
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd08], eax
cmp dword [ebp - 0xd8], 0
jne 0x1000aeba
cmp dword [ebp - 0x3c], 0
jne 0x1000aeba
and dword [ebp - 0xadc], 0
jmp 0x1000aec4
mov dword [ebp - 0xadc], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xe44], eax
cmp dword [ebp - 0xd8], 0xfff9
jae 0x1000aee5
mov dword [ebp - 0x4ec], 1
jmp 0x1000aeec
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x4ec]
jne 0x1000af06
mov dword [ebp - 0x8c4], 1
jmp 0x1000af0d
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0x1ac]
mov eax, dword [ebp + eax*4 - 0xef8]
cmp eax, dword [ebp - 0x8c4]
jle 0x1000af2e
mov dword [ebp - 0x4f4], 1
jmp 0x1000af35
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0x724], eax
imul eax, dword [ebp - 0x724], 0
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0xef8]
cmp eax, 0xfb1a
jne 0x1000af68
mov dword [ebp - 0x9d4], 1
jmp 0x1000af6f
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xd10], eax
mov eax, 0x3388
test eax, eax
je 0x1000af8d
mov dword [ebp - 0xa7c], 1
jmp 0x1000afaf
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1000afaf
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
cmp dword [ebp - 0x1ac], 0
jne 0x1000afca
cmp dword [ebp - 0xd8], 0
jne 0x1000afca
and dword [ebp - 0x4fc], 0
jmp 0x1000afd4
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x9dc], eax
jmp 0x1000ae7e
imul eax, dword [ebp - 0x3c], 0x3e32
mov dword [ebp - 0x3c], eax
jmp 0x1000ae54
jmp 0x1000ae1a
jmp 0x1000adea
mov dword [ebp - 0x84], 1
mov dword [ebp - 0x1f0], 0xf6efba1a
mov dword [ebp - 0x3a0], 9
mov dword [ebp - 0x19c], 0xffffffff
mov dword [ebp - 0xf2c], 0xab81d4b4
mov dword [ebp - 0xd18], 0xfffffffb
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x3a0], eax
cmp dword [ebp - 0x3a0], 0x9519
jg 0x1000b05e
mov dword [ebp - 0x83c], 1
jmp 0x1000b065
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x83c]
jle 0x1000b07f
mov dword [ebp - 0x504], 1
jmp 0x1000b086
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x504]
jne 0x1000b0ac
mov dword [ebp - 0x50c], 1
jmp 0x1000b0b3
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x84]
inc eax
inc eax
imul eax, dword [ebp - 0x84]
cmp eax, 1
jl 0x1000b0d3
mov dword [ebp - 0x72c], 1
jmp 0x1000b0da
and dword [ebp - 0x72c], 0
imul eax, dword [ebp - 0x72c], 0x1fbf
cmp dword [ebp - 0x50c], eax
jge 0x1000b101
mov eax, 0x93f9
test eax, eax
je 0x1000b101
mov dword [ebp - 0x90c], 1
jmp 0x1000b108
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x84]
cmp dword [ebp - 0x90c], eax
je 0x1000b122
mov dword [ebp - 0xb5c], 1
jmp 0x1000b129
and dword [ebp - 0xb5c], 0
imul eax, dword [ebp - 0x1f0], 0xffff
sub eax, dword [ebp - 0x84]
mov dword [ebp - 0x19c], eax
je 0x1000b315
mov dword [ebp - 0xe0], 0xb1857497
mov dword [ebp - 0x514], 0xb51404fc
mov dword [ebp - 0x734], 0xbcfb656d
mov dword [ebp - 0xcb8], 0xffffffff
mov dword [ebp - 0xcb4], 0xffffffff
mov dword [ebp - 0xcb0], 0xffffffff
mov dword [ebp - 0xcac], 0xffffffff
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0xe4c], eax
mov eax, 0xf0bb
test eax, eax
je 0x1000b1c1
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 0
je 0x1000b1c1
mov dword [ebp - 0x844], 1
jmp 0x1000b1c8
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x734]
cmp dword [ebp - 0xe0], eax
jl 0x1000b1ee
mov dword [ebp - 0x51c], 1
jmp 0x1000b1f5
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0x51c]
cmp dword [ebp - 0x844], eax
jl 0x1000b215
mov dword [ebp - 0x524], 1
jmp 0x1000b21c
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0xe0]
imul eax, dword [ebp - 0x524]
cmp eax, dword [ebp - 0xe0]
jge 0x1000b23d
mov dword [ebp - 0x73c], 1
jmp 0x1000b244
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x3a0]
imul eax, dword [ebp - 0x73c]
imul eax, eax, 0
cmp eax, dword [ebp - 0x84]
je 0x1000b268
mov dword [ebp - 0x52c], 1
jmp 0x1000b26f
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 1
jge 0x1000b284
mov dword [ebp - 0x8cc], 1
jmp 0x1000b28b
and dword [ebp - 0x8cc], 0
mov eax, dword [ebp - 0x8cc]
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 0xa60d
jle 0x1000b2af
mov dword [ebp - 0x534], 1
jmp 0x1000b2b6
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0x24a1
jne 0x1000b2ce
mov dword [ebp - 0x744], 1
jmp 0x1000b2d5
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0xfff7
ja 0x1000b2f6
mov eax, 0x57638ff4
test eax, eax
je 0x1000b2f6
mov dword [ebp - 0x53c], 1
jmp 0x1000b2fd
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x53c]
mov dword [ebp + eax - 0xcb8], ecx
jmp 0x1000b437
mov dword [ebp - 0x284], 0xfffffff9
push 2
lea ecx, [ebp - 0xf08]
call fcn.10014568
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2c4], 0
jmp 0x1000b34c
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 2
jge 0x1000b36e
push dword [ebp - 0x2c4]
lea ecx, [ebp - 0xf08]
call fcn.100145f4
mov dword [eax], 0x84f7a324
jmp 0x1000b33f
mov dword [ebp - 0x19c], 0xf
jmp 0x1000b387
mov eax, dword [ebp - 0x19c]
dec eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0xfffffff1
jle 0x1000b402
mov dword [ebp - 0x84c], 1
mov eax, dword [ebp - 0x84c]
inc eax
mov dword [ebp - 0x84c], eax
mov dword [ebp - 0x284], 1
jmp 0x1000b3c0
mov eax, dword [ebp - 0x284]
dec eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 0
jl 0x1000b3fd
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000b3e1
call dword [sym.imp.USER32.dll_WaitMessage]
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000b3fb
push 0
call dword [sym.imp.OLEAUT32.dll_VariantClear]
jmp 0x1000b3b3
jmp 0x1000b37a
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1000b428
push 0x199d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf08]
call fcn.100145ef
movzx eax, byte [0x10666f40]
test eax, eax
je 0x1000b455
mov esi, 0x1007b5b0
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x1000fd9b
mov dword [ebp - 0x1bc], 0xfffffffa
mov dword [ebp - 0x75c], 0xfffffff7
mov dword [ebp - 0x200], 0xffffffff
mov dword [ebp - 0x1bc], 0
jmp 0x1000b48c
cmp dword [ebp - 0x1bc], 0xfffffff5
jge 0x1000b6e8
mov dword [ebp - 0x1d8], 0xe2167fa5
push 3
lea ecx, [ebp - 0xaf8]
call fcn.10014568
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x55c], 0xffffffff
mov dword [ebp - 0x304], 0
jmp 0x1000b4da
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 3
jge 0x1000b4fc
push dword [ebp - 0x304]
lea ecx, [ebp - 0xaf8]
call fcn.100145f4
mov dword [eax], 0xc3a60813
jmp 0x1000b4cd
cmp dword [ebp - 0x1d8], 0x7963ba20
jg 0x1000b514
mov dword [ebp - 0x930], 1
jmp 0x1000b51b
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0xccc], eax
mov eax, dword [ebp - 0x1bc]
add eax, 0xffff
cmp eax, dword [ebp - 0x1d8]
je 0x1000b54d
push 2
lea ecx, [ebp - 0xb08]
call fcn.10014568
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x6c], 0x2ee76f50
mov dword [ebp - 0x28c], 0
jmp 0x1000b71c
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 2
jge 0x1000b73b
push dword [ebp - 0x28c]
lea ecx, [ebp - 0xb08]
call fcn.100145f4
or dword [eax], 0xffffffff
jmp 0x1000b70f
mov dword [ebp - 0x6c], 1
jmp 0x1000b74b
cmp dword [ebp - 0x6c], 0
jl 0x1000b863
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret