Function at 0x1000dd14
Capabilities:
Accept command line arguments
Create process on windows
Get common file path
Get system information on windows
Query environment variable
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100872ce
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x11f4
call fcn.10083300
push esi
push edi
mov dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x7c0], 0xc9ca3191
mov dword [ebp - 0x1b4], 2
mov dword [ebp - 0x250], 9
cmp dword [ebp - 0x20], 0xffffffff
jl 0x1000dd6f
mov dword [ebp - 0xaac], 1
jmp 0x1000dd76
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x7c0], eax
cmp dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
je 0x1000dd9a
mov dword [ebp - 0xa9c], 1
jmp 0x1000dda1
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0xa9c]
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jne 0x1000ddc8
mov eax, 0x2aff
test eax, eax
jne 0x1000ddc8
and dword [ebp - 0xaa4], 0
jmp 0x1000ddd2
mov dword [ebp - 0xaa4], 1
imul eax, dword [ebp - 0xaa4], 0xfffffff6
cmp dword [ebp - 0xaac], eax
jl 0x1000dded
mov dword [ebp - 0xab4], 1
jmp 0x1000ddf4
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xab4]
cmp eax, 1
jg 0x1000de14
cmp dword [ebp - 0x20], 0
je 0x1000de14
mov dword [ebp - 0xb38], 1
jmp 0x1000de1b
and dword [ebp - 0xb38], 0
cmp dword [ebp - 0x20], 0xffffffff
je 0x1000de2d
mov dword [ebp - 0xabc], 1
jmp 0x1000de34
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xabc]
cmp eax, dword [ebp - 0x20]
jle 0x1000de4f
mov dword [ebp - 0xac4], 1
jmp 0x1000de56
and dword [ebp - 0xac4], 0
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0xac4]
cmp eax, dword [ebp - 0x20]
jne 0x1000de70
mov dword [ebp - 0xacc], 1
jmp 0x1000de77
and dword [ebp - 0xacc], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0xacc]
imul eax, dword [ebp - 0x20]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x250], 0xffffffe5
jmp 0x1000dea4
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jg 0x1000df25
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1000decd
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov dword [ebp - 0x1b4], 0
jmp 0x1000dee6
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0x19
jne 0x1000df20
mov dword [ebp - 0x20], 0
jmp 0x1000deff
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1a
je 0x1000df1e
mov dword [ebp - 0xad4], 0xffffffff
mov eax, dword [ebp - 0xad4]
inc eax
mov dword [ebp - 0xad4], eax
jmp 0x1000def8
jmp 0x1000ded9
jmp 0x1000de97
mov dword [ebp - 0x18], 0xffff
mov dword [ebp - 0xadc], 0xc9ca3191
mov dword [ebp - 0x18c], 2
mov dword [ebp - 0x1ec], 9
cmp dword [ebp - 0x18], 0xffffffff
jl 0x1000df5c
mov dword [ebp - 0x924], 1
jmp 0x1000df63
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xadc], eax
cmp dword [ebp - 0xadc], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
je 0x1000df87
mov dword [ebp - 0xae8], 1
jmp 0x1000df8e
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0xae8]
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0
jne 0x1000dfb5
mov eax, 0x2aff
test eax, eax
jne 0x1000dfb5
and dword [ebp - 0x608], 0
jmp 0x1000dfbf
mov dword [ebp - 0x608], 1
imul eax, dword [ebp - 0x608], 0xfffffff6
cmp dword [ebp - 0x924], eax
jl 0x1000dfda
mov dword [ebp - 0x49c], 1
jmp 0x1000dfe1
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x49c]
cmp eax, 1
jg 0x1000e001
cmp dword [ebp - 0x18], 0
je 0x1000e001
mov dword [ebp - 0xbd8], 1
jmp 0x1000e008
and dword [ebp - 0xbd8], 0
cmp dword [ebp - 0x18], 0xffffffff
je 0x1000e01a
mov dword [ebp - 0x92c], 1
jmp 0x1000e021
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x92c]
cmp eax, dword [ebp - 0x18]
jle 0x1000e03c
mov dword [ebp - 0x4a4], 1
jmp 0x1000e043
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0x18]
jne 0x1000e05d
mov dword [ebp - 0x934], 1
jmp 0x1000e064
and dword [ebp - 0x934], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x934]
imul eax, dword [ebp - 0x18]
mov dword [ebp - 0x1ec], eax
mov dword [ebp - 0x1ec], 0xffffffe5
jmp 0x1000e091
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 2
jg 0x1000e112
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000e0ba
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov dword [ebp - 0x18c], 0
jmp 0x1000e0d3
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x19
jne 0x1000e10d
mov dword [ebp - 0x18], 0
jmp 0x1000e0ec
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x1a
je 0x1000e10b
mov dword [ebp - 0x4ac], 0xffffffff
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0x4ac], eax
jmp 0x1000e0e5
jmp 0x1000e0c6
jmp 0x1000e084
mov dword [ebp - 0xa0], 0xac12
mov dword [ebp - 0x4b4], 0xfffffffd
mov dword [ebp - 0x3a4], 0xf7919adb
mov dword [ebp - 0x4d4], 0x1f6f49c2
mov dword [ebp - 0xbe0], 0xffffffff
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xf28], eax
cmp dword [ebp - 0xa0], 0
jne 0x1000e16b
cmp dword [ebp - 0xa0], 0
jne 0x1000e16b
and dword [ebp - 0x93c], 0
jmp 0x1000e175
mov dword [ebp - 0x93c], 1
cmp dword [ebp - 0x93c], 0xfffa
jbe 0x1000e18d
mov dword [ebp - 0x944], 1
jmp 0x1000e194
and dword [ebp - 0x944], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x1010], eax
mov dword [ebp - 0x4b4], 0xaee5
mov eax, dword [ebp - 0x4b4]
cmp dword [ebp - 0x944], eax
jg 0x1000e1c4
mov dword [ebp - 0x4bc], 1
jmp 0x1000e1cb
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x4bc], eax
jl 0x1000e1e5
mov dword [ebp - 0x94c], 1
jmp 0x1000e1ec
and dword [ebp - 0x94c], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x94c], eax
je 0x1000e206
mov dword [ebp - 0x4c4], 1
jmp 0x1000e20d
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
dec eax
imul eax, dword [ebp - 0xa0]
test eax, eax
jne 0x1000e22d
or eax, 0xffffffff
jne 0x1000e22d
and dword [ebp - 0x954], 0
jmp 0x1000e237
mov dword [ebp - 0x954], 1
mov eax, dword [ebp - 0x954]
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
je 0x1000e261
cmp dword [ebp - 0x3a4], 0
je 0x1000e261
mov dword [ebp - 0x4cc], 1
jmp 0x1000e268
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
sub eax, 0x50608375
cmp eax, 0x32e3
je 0x1000e286
mov dword [ebp - 0x95c], 1
jmp 0x1000e28d
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x95c]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x4d4]
add eax, dword [ebp - 0xa0]
mov dword [ebp - 0xbe0], eax
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1000e2c3
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0x458], 0xffff
mov dword [ebp - 0x454], 0xffff
mov dword [ebp - 0x450], 0xffff
mov dword [ebp - 0x44c], 0xffff
mov dword [ebp - 0x90], 0x2c36544d
mov dword [ebp - 0x70], 0x19a6fdd8
mov dword [ebp - 0xd8], 0x790660d6
mov dword [ebp - 0xc08], 0xbdccb4f7
xor eax, eax
jne 0x1000e403
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x458], 0
jne 0x1000e3c8
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x458]
cmp dword [ebp + eax - 0x458], ecx
je 0x1000e352
mov dword [ebp - 0x964], 1
jmp 0x1000e359
and dword [ebp - 0x964], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x458]
cmp dword [ebp - 0x964], eax
jl 0x1000e37a
mov dword [ebp - 0x4dc], 1
jmp 0x1000e381
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0x5ed7
jle 0x1000e399
mov dword [ebp - 0xbe8], 1
jmp 0x1000e3a0
and dword [ebp - 0xbe8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x458]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0x458]
test eax, eax
jne 0x1000e3c8
and dword [ebp - 0xbf0], 0
jmp 0x1000e3d2
mov dword [ebp - 0xbf0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x10e4], eax
mov eax, 0x55a63a74
test eax, eax
jne 0x1000e403
and dword [ebp - 0x96c], 0
jmp 0x1000e40d
mov dword [ebp - 0x96c], 1
mov eax, dword [ebp - 0x70]
add eax, dword [ebp - 0x96c]
add eax, dword [ebp - 0x70]
imul eax, dword [ebp - 0xd8]
test eax, eax
je 0x1000e452
cmp dword [ebp - 0xd8], 0
je 0x1000e452
mov byte [ebp - 0x151], 0
movzx eax, byte [ebp - 0x151]
test eax, eax
je 0x1000e44d
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
jmp 0x1000e782
mov dword [ebp - 0x1cc], 5
mov dword [ebp - 0x26c], 0x4322e7c6
mov dword [ebp - 0xe34], 6
mov dword [ebp - 0xe30], 6
mov dword [ebp - 0xe2c], 6
mov dword [ebp - 0xe28], 6
lea ecx, [ebp - 0x469]
call fcn.1000db63
push eax
lea eax, [ebp - 0xe24]
push eax
lea eax, [ebp - 0xe34]
push eax
lea ecx, [ebp - 0x11f8]
call fcn.1001b8c1
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xea8]
call fcn.1001b883
and dword [ebp - 4], 0
mov dword [ebp - 0x70], 0
jmp 0x1000e4d7
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1000e642
mov dword [ebp - 0x444], 0xffffffff
mov dword [ebp - 0x90], 0
jmp 0x1000e504
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jg 0x1000e63d
mov dword [ebp - 0xc00], 6
mov eax, dword [ebp - 0x90]
cmp dword [ebp + eax*4 - 0x458], 0
je 0x1000e548
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1000e543
call dword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x1000e638
mov dword [ebp - 0x4e4], 0xc8a81d5f
mov dword [ebp - 0xbf8], 0xe74fd574
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1000e576
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
mov dword [ebp - 0x4e4], 0xa966896e
mov eax, dword [ebp - 0xbf8]
cmp dword [ebp - 0x4e4], eax
jg 0x1000e59a
mov dword [ebp - 0x974], 1
jmp 0x1000e5a1
and dword [ebp - 0x974], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1018], eax
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0xf24], eax
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0xf2c], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x458]
sub eax, dword [ebp - 0x444]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x974], eax
jne 0x1000e604
mov dword [ebp - 0x4ec], 1
jmp 0x1000e60b
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x26c]
cmp dword [ebp - 0x4ec], eax
je 0x1000e625
mov dword [ebp - 0x97c], 1
jmp 0x1000e62c
and dword [ebp - 0x97c], 0
mov eax, dword [ebp - 0x97c]
mov dword [ebp - 0xc00], eax
jmp 0x1000e4f7
jmp 0x1000e4d0
mov eax, dword [ebp - 0x26c]
mov dword [ebp - 0x90], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x458]
cmp dword [ebp - 0x90], eax
jl 0x1000e669
cmp dword [ebp - 0x1cc], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd8]
cmp dword [ebp + eax - 0x458], ecx
jg 0x1000e68a
mov dword [ebp - 0x3ac], 1
jmp 0x1000e691
and dword [ebp - 0x3ac], 0
push 2
lea ecx, [ebp - 0xea8]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x3ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x70]
cmp eax, dword [ebp - 0x3ac]
jge 0x1000e6bd
mov dword [ebp - 0x4f4], 1
jmp 0x1000e6c4
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0xd8], eax
je 0x1000e6ea
mov dword [ebp - 0x984], 1
jmp 0x1000e6f1
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x984], eax
jg 0x1000e711
cmp dword [ebp - 0xc08], 0
jne 0x1000e711
and dword [ebp - 0xc10], 0
jmp 0x1000e71b
mov dword [ebp - 0xc10], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x458]
mov dword [ebp - 0xf34], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xf3c], eax
mov eax, dword [ebp - 0x1cc]
cmp dword [ebp - 0x70], eax
jl 0x1000e75d
push 3
lea ecx, [ebp - 0xea8]
call fcn.1001b8b2
cmp dword [eax], 0
jne 0x1000e75d
and dword [ebp - 0x4fc], 0
jmp 0x1000e767
mov dword [ebp - 0x4fc], 1
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x26c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xea8]
call fcn.1001b8ad
mov dword [ebp - 0x194], 0xb9f9b319
mov dword [ebp - 0x418], 0xed99ea7
mov dword [ebp - 0x194], 0xffffffe8
jmp 0x1000e7af
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 0xffffffee
jl 0x1000e94f
mov dword [ebp - 0xe0], 0xfe5f36f6
mov dword [ebp - 0x268], 0
jmp 0x1000e7df
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 4
jge 0x1000e7fb
mov eax, dword [ebp - 0x268]
mov dword [ebp + eax*4 - 0x1158], 0xfffffff8
jmp 0x1000e7d2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1158]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x1000e822
mov dword [ebp - 0x514], 1
jmp 0x1000e829
and dword [ebp - 0x514], 0
cmp dword [ebp - 0xe0], 0
jne 0x1000e847
mov eax, 0x1510
test eax, eax
je 0x1000e847
mov dword [ebp - 0x98c], 1
jmp 0x1000e84e
and dword [ebp - 0x98c], 0
cmp dword [ebp - 0x98c], 0xbd13d8c5
ja 0x1000e866
mov dword [ebp - 0x504], 1
jmp 0x1000e86d
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x418], eax
imul eax, dword [ebp - 0x418], 0x8e13
cmp dword [ebp - 0x194], eax
jg 0x1000e8a3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1158], 0
jne 0x1000e8a3
and dword [ebp - 0x994], 0
jmp 0x1000e8ad
mov dword [ebp - 0x994], 1
imul eax, dword [ebp - 0x994], 0x11c3
cmp eax, dword [ebp - 0x194]
jl 0x1000e8cb
mov dword [ebp - 0x50c], 1
jmp 0x1000e8d2
and dword [ebp - 0x50c], 0
cmp dword [ebp - 0x50c], 0x42bb
jne 0x1000e8ea
mov dword [ebp - 0x99c], 1
jmp 0x1000e8f1
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x99c]
dec eax
cmp dword [ebp - 0x514], eax
jne 0x1000e930
mov dword [ebp - 0xe0], 3
jmp 0x1000e919
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jl 0x1000e92e
mov dword [ebp - 0x418], 0x617a9413
jmp 0x1000e90c
jmp 0x1000e94a
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000e94a
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
jmp 0x1000e7a2
mov dword [ebp - 0x1c], 0xffff
mov dword [ebp - 0x2e8], 0xf6af1124
mov dword [ebp - 0x2e8], 6
jmp 0x1000e979
mov eax, dword [ebp - 0x2e8]
dec eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 0xffffffef
jle 0x1000e9bf
mov byte [ebp - 0x139], 0
movzx eax, byte [ebp - 0x139]
test eax, eax
je 0x1000e9a3
push 0x18bc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1000e9bd
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
jmp 0x1000e96c
mov dword [ebp - 0x5a4], 0xc9ca3191
push 1
lea ecx, [ebp - 0x388]
call fcn.1001b841
mov dword [ebp - 4], 1
mov dword [ebp - 0x328], 0x7c9d5fac
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x19c], 0xcb4e76ab
push 4
lea ecx, [ebp - 0x184]
call fcn.1001b841
mov byte [ebp - 4], 2
mov dword [ebp - 0x38], 0xfffffffa
mov dword [ebp - 0xc18], 0x9adb
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x88], 0
jmp 0x1000ea47
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000ea69
push dword [ebp - 0x88]
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov dword [eax], 0x1f665683
jmp 0x1000ea3a
mov dword [ebp - 0x88], 0
jmp 0x1000ea82
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1000eaa4
push dword [ebp - 0x88]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov dword [eax], 0xa9864ba8
jmp 0x1000ea75
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0
jne 0x1000eb88
cmp dword [ebp - 0x3b4], 0
je 0x1000ead6
mov dword [ebp - 0x9a4], 1
jmp 0x1000eadd
and dword [ebp - 0x9a4], 0
cmp dword [ebp - 0x9a4], 0
je 0x1000eaf8
cmp dword [ebp - 0x1bc], 0
jne 0x1000eaf8
and dword [ebp - 0x51c], 0
jmp 0x1000eb02
mov dword [ebp - 0x51c], 1
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x51c]
cmp ecx, dword [eax]
jg 0x1000eb25
mov dword [ebp - 0x524], 1
jmp 0x1000eb2c
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0xc18]
mov dword [ebp - 0x9ac], eax
push 1
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9ac]
mov dword [eax], ecx
mov eax, dword [ebp - 0x9ac]
add eax, dword [ebp - 0x524]
cmp eax, dword [ebp - 0x328]
jl 0x1000eb6d
mov dword [ebp - 0x9b4], 1
jmp 0x1000eb74
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x9b4]
jne 0x1000eb88
and dword [ebp - 0x52c], 0
jmp 0x1000eb92
mov dword [ebp - 0x52c], 1
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x52c], eax
jl 0x1000ebac
mov dword [ebp - 0x9bc], 1
jmp 0x1000ebb3
and dword [ebp - 0x9bc], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x9bc]
jne 0x1000ebd6
mov dword [ebp - 0x534], 1
jmp 0x1000ebdd
and dword [ebp - 0x534], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov eax, dword [eax]
cmp eax, dword [ebp - 0x534]
jge 0x1000ec00
mov dword [ebp - 0x9c4], 1
jmp 0x1000ec07
and dword [ebp - 0x9c4], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9c4]
cmp ecx, dword [eax]
jne 0x1000ec2a
mov dword [ebp - 0x53c], 1
jmp 0x1000ec31
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x53c], eax
jne 0x1000ec4e
cmp dword [ebp - 0x10], 0
jne 0x1000ec4e
and dword [ebp - 0x9cc], 0
jmp 0x1000ec58
mov dword [ebp - 0x9cc], 1
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov eax, dword [eax]
sub eax, dword [ebp - 0x9cc]
cmp eax, dword [ebp - 0x3b4]
jg 0x1000f009
mov dword [ebp - 0x470], 0xe8dce9db
mov dword [ebp - 0x270], 0xaee4
mov dword [ebp - 0x564], 0x98381653
mov dword [ebp - 0x10], 0
jmp 0x1000eca7
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jg 0x1000f004
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
cmp dword [ebp - 0x470], 0
jne 0x1000ece8
mov eax, 0xce72
test eax, eax
jne 0x1000ece8
and dword [ebp - 0x544], 0
jmp 0x1000ecf2
mov dword [ebp - 0x544], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x544]
cmp ecx, dword [eax]
jle 0x1000ed16
mov dword [ebp - 0xc20], 1
jmp 0x1000ed1d
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xf44], eax
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x328]
cmp dword [eax], ecx
je 0x1000ed5a
mov dword [ebp - 0xc28], 1
jmp 0x1000ed61
and dword [ebp - 0xc28], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov esi, dword [ebp - 0x270]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
imul esi, dword [eax]
cmp esi, 0xa0c2010
jg 0x1000ed99
mov dword [ebp - 0x9d4], 1
jmp 0x1000eda0
and dword [ebp - 0x9d4], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9d4]
cmp ecx, dword [eax]
jg 0x1000edc4
mov dword [ebp - 0x54c], 1
jmp 0x1000edcb
and dword [ebp - 0x54c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [eax]
je 0x1000edef
mov dword [ebp - 0x9dc], 1
jmp 0x1000edf6
and dword [ebp - 0x9dc], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9dc]
cmp ecx, dword [eax]
jne 0x1000ee1a
mov dword [ebp - 0x554], 1
jmp 0x1000ee21
and dword [ebp - 0x554], 0
cmp dword [ebp - 0x554], 0x737b
jle 0x1000ee39
mov dword [ebp - 0x9e4], 1
jmp 0x1000ee40
and dword [ebp - 0x9e4], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9e4]
cmp ecx, dword [eax]
jle 0x1000ee64
mov dword [ebp - 0xcb4], 1
jmp 0x1000ee6b
and dword [ebp - 0xcb4], 0
mov eax, dword [ebp - 0x19c]
sub eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x1bc]
je 0x1000ee8b
mov dword [ebp - 0x55c], 1
jmp 0x1000ee92
and dword [ebp - 0x55c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x55c]
cmp ecx, dword [eax]
jge 0x1000eeb6
mov dword [ebp - 0x9ec], 1
jmp 0x1000eebd
and dword [ebp - 0x9ec], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9ec]
add ecx, 0x2bc90638
mov esi, dword [eax]
sub esi, ecx
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
add esi, dword [eax]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
sub esi, dword [eax]
mov dword [ebp - 0x564], esi
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xf4c], eax
mov eax, dword [ebp - 0x270]
mov dword [ebp - 0xf54], eax
mov esi, dword [ebp - 0x564]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
cmp esi, dword [eax]
jl 0x1000ef3c
mov dword [ebp - 0x9f4], 1
jmp 0x1000ef43
and dword [ebp - 0x9f4], 0
push 1
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x9f4]
cmp ecx, dword [eax]
jne 0x1000ef6f
cmp dword [ebp - 0x1bc], 0
je 0x1000ef6f
mov dword [ebp - 0x56c], 1
jmp 0x1000ef76
and dword [ebp - 0x56c], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x56c]
sub ecx, dword [eax]
cmp ecx, 1
jl 0x1000ef9d
mov dword [ebp - 0x9fc], 1
jmp 0x1000efa4
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0x470]
cmp dword [ebp - 0x9fc], eax
jge 0x1000efbe
mov dword [ebp - 0x574], 1
jmp 0x1000efc5
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x574]
mov dword [ebp - 0x328], eax
mov esi, dword [ebp - 0x328]
push dword [ebp - 0x10]
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
mov dword [eax], esi
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1000efff
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
jmp 0x1000eca0
jmp 0x1000f298
mov dword [ebp - 0x1dc], 0
mov dword [ebp - 0xe8], 0xfffffff8
mov dword [ebp - 0x38], 0xfffffff1
jmp 0x1000f02d
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x20
jg 0x1000f210
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xf5c], eax
cmp dword [ebp - 0x10], 0xebcd
jne 0x1000f06c
mov dword [ebp - 0xa04], 1
jmp 0x1000f073
and dword [ebp - 0xa04], 0
cmp dword [ebp - 0xa04], 0xfffffffa
jg 0x1000f08e
cmp dword [ebp - 0x19c], 0
jne 0x1000f08e
and dword [ebp - 0x57c], 0
jmp 0x1000f098
mov dword [ebp - 0x57c], 1
mov eax, dword [ebp - 0x57c]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
neg eax
cmp eax, dword [ebp - 0x1f4]
jle 0x1000f0c0
mov dword [ebp - 0xa0c], 1
jmp 0x1000f0c7
and dword [ebp - 0xa0c], 0
mov eax, dword [ebp - 0x1f4]
sub eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0x1dc]
jne 0x1000f0e7
mov dword [ebp - 0x584], 1
jmp 0x1000f0ee
and dword [ebp - 0x584], 0
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xf64], eax
cmp dword [ebp - 0x1f4], 0
je 0x1000f131
mov eax, dword [ebp - 0x594]
sub eax, 0x34bea37b
jne 0x1000f125
cmp dword [ebp - 0x1dc], 0
je 0x1000f131
mov dword [ebp - 0xa14], 1
jmp 0x1000f138
and dword [ebp - 0xa14], 0
mov esi, dword [ebp - 0xa14]
add esi, 0xa1d0
push 3
lea ecx, [ebp - 0x184]
call fcn.1001b8b2
cmp esi, dword [eax]
jge 0x1000f161
mov dword [ebp - 0x58c], 1
jmp 0x1000f168
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x58c], eax
je 0x1000f182
mov dword [ebp - 0xa1c], 1
jmp 0x1000f189
and dword [ebp - 0xa1c], 0
push 0
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov ecx, dword [ebp - 0xa1c]
cmp ecx, dword [eax]
jl 0x1000f1ac
mov dword [ebp - 0xa24], 1
jmp 0x1000f1b3
and dword [ebp - 0xa24], 0
mov eax, dword [ebp - 0x594]
cmp dword [ebp - 0xa24], eax
jg 0x1000f1cd
mov dword [ebp - 0x59c], 1
jmp 0x1000f1d4
and dword [ebp - 0x59c], 0
mov dword [ebp - 0xe8], 0x83d52604
mov eax, dword [ebp - 0xe8]
cmp eax, dword [ebp - 0x59c]
jge 0x1000f1f8
mov dword [ebp - 0xa2c], 1
jmp 0x1000f1ff
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x19c], eax
jmp 0x1000f026
mov dword [ebp - 0xe8], 0
jmp 0x1000f229
mov eax, dword [ebp - 0xe8]
dec eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 0xffffffe5
jle 0x1000f298
mov dword [ebp - 0x1dc], 0
jmp 0x1000f24b
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 5
jge 0x1000f296
mov dword [ebp - 0xcbc], 0x5eb91548
mov dword [ebp - 0x38], 0
jmp 0x1000f26e
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1000f28a
push dword [ebp - 0x38]
lea ecx, [ebp - 0x388]
call fcn.1001b8b2
mov dword [eax], 0xe582b275
jmp 0x1000f267
mov dword [ebp - 0xcbc], 3
jmp 0x1000f23e
jmp 0x1000f21c
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1000f2b2
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x184]
call fcn.1001b8ad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x388]
call fcn.1001b8ad
mov dword [ebp - 0x1a4], 2
mov dword [ebp - 0x224], 9
cmp dword [ebp - 0x1c], 0xffffffff
jl 0x1000f2f6
mov dword [ebp - 0xa3c], 1
jmp 0x1000f2fd
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x5a4], eax
cmp dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
je 0x1000f321
mov dword [ebp - 0xa34], 1
jmp 0x1000f328
and dword [ebp - 0xa34], 0
mov eax, dword [ebp - 0xa34]
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0
jne 0x1000f34f
mov eax, 0x2aff
test eax, eax
jne 0x1000f34f
and dword [ebp - 0x5ac], 0
jmp 0x1000f359
mov dword [ebp - 0x5ac], 1
imul eax, dword [ebp - 0x5ac], 0xfffffff6
cmp dword [ebp - 0xa3c], eax
jl 0x1000f374
mov dword [ebp - 0x5b4], 1
jmp 0x1000f37b
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x5b4]
cmp eax, 1
jg 0x1000f39b
cmp dword [ebp - 0x1c], 0
je 0x1000f39b
mov dword [ebp - 0xcc4], 1
jmp 0x1000f3a2
and dword [ebp - 0xcc4], 0
cmp dword [ebp - 0x1c], 0xffffffff
je 0x1000f3b4
mov dword [ebp - 0xa44], 1
jmp 0x1000f3bb
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa44]
cmp eax, dword [ebp - 0x1c]
jle 0x1000f3d6
mov dword [ebp - 0x5bc], 1
jmp 0x1000f3dd
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x5bc]
cmp eax, dword [ebp - 0x1c]
jne 0x1000f3f7
mov dword [ebp - 0xa4c], 1
jmp 0x1000f3fe
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0xa4c]
imul eax, dword [ebp - 0x1c]
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x224], 0xffffffe5
jmp 0x1000f42b
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jg 0x1000f4ac
mov byte [ebp - 0x161], 0
movzx eax, byte [ebp - 0x161]
test eax, eax
je 0x1000f454
push 0
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_VariantTimeToDosDateTime]
mov dword [ebp - 0x1a4], 0
jmp 0x1000f46d
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0x19
jne 0x1000f4a7
mov dword [ebp - 0x1c], 0
jmp 0x1000f486
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
je 0x1000f4a5
mov dword [ebp - 0x5c4], 0xffffffff
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
jmp 0x1000f47f
jmp 0x1000f460
jmp 0x1000f41e
push 2
lea ecx, [ebp - 0xe54]
call fcn.1001b841
mov dword [ebp - 4], 3
mov dword [ebp - 0x1fc], 0xbeb0647d
mov dword [ebp - 0x278], 0
jmp 0x1000f4e3
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 2
jge 0x1000f505
push dword [ebp - 0x278]
lea ecx, [ebp - 0xe54]
call fcn.1001b8b2
mov dword [eax], 0xca631852
jmp 0x1000f4d6
mov dword [ebp - 0x1fc], 1
jmp 0x1000f51e
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
jl 0x1000f559
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xe54]
call fcn.1001b8b2
cmp dword [eax], 0
je 0x1000f53f
jmp 0x1000f559
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1000f557
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x1000f511
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe54]
call fcn.1001b8ad
mov dword [ebp - 0xa8], 0xac12
mov dword [ebp - 0x5cc], 0xfffffffd
mov dword [ebp - 0x3bc], 0xf7919adb
mov dword [ebp - 0x5ec], 0x1f6f49c2
mov dword [ebp - 0xcb8], 0xffffffff
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xf6c], eax
cmp dword [ebp - 0xa8], 0
jne 0x1000f5c1
cmp dword [ebp - 0xa8], 0
jne 0x1000f5c1
and dword [ebp - 0xa54], 0
jmp 0x1000f5cb
mov dword [ebp - 0xa54], 1
cmp dword [ebp - 0xa54], 0xfffa
jbe 0x1000f5e3
mov dword [ebp - 0xa5c], 1
jmp 0x1000f5ea
and dword [ebp - 0xa5c], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xf74], eax
mov dword [ebp - 0x5cc], 0xaee5
mov eax, dword [ebp - 0x5cc]
cmp dword [ebp - 0xa5c], eax
jg 0x1000f61a
mov dword [ebp - 0x5d4], 1
jmp 0x1000f621
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x5d4], eax
jl 0x1000f63b
mov dword [ebp - 0xa64], 1
jmp 0x1000f642
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xa64], eax
je 0x1000f65c
mov dword [ebp - 0x5dc], 1
jmp 0x1000f663
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x5dc]
dec eax
imul eax, dword [ebp - 0xa8]
test eax, eax
jne 0x1000f683
or eax, 0xffffffff
jne 0x1000f683
and dword [ebp - 0xa6c], 0
jmp 0x1000f68d
mov dword [ebp - 0xa6c], 1
mov eax, dword [ebp - 0xa6c]
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 0
je 0x1000f6b7
cmp dword [ebp - 0x3bc], 0
je 0x1000f6b7
mov dword [ebp - 0x5e4], 1
jmp 0x1000f6be
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x5e4]
sub eax, 0x50608375
cmp eax, 0x32e3
je 0x1000f6dc
mov dword [ebp - 0xa74], 1
jmp 0x1000f6e3
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0x5ec], eax
mov eax, dword [ebp - 0x5ec]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0xcb8], eax
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1000f719
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0xf8], 0x1824a8c6
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0xf0], 0xfa1a8f1
mov dword [ebp - 0x5fc], 0xb6b7be2d
mov dword [ebp - 0xf8], 0
jmp 0x1000f75a
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 0xf
jg 0x1000f8ba
mov dword [ebp - 0x2f0], 0
jmp 0x1000f780
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 2
jge 0x1000f79c
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x47c], 7
jmp 0x1000f773
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x47c], 0xffffffe8
jmp 0x1000f7ca
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x47c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x47c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x47c], 0xfffffffa
jne 0x1000f878
mov dword [ebp - 0xbd0], 0x717be9fb
mov dword [ebp - 0x280], 0
jmp 0x1000f801
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x1000f81d
mov eax, dword [ebp - 0x280]
mov dword [ebp + eax*4 - 0xcd0], 0xccb03629
jmp 0x1000f7f4
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xcd0], 0
jmp 0x1000f84b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcd0]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcd0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcd0], 0x1c
jg 0x1000f873
mov dword [ebp - 0xb44], 0x250d
mov eax, dword [ebp - 0xb44]
mov dword [ebp - 0xbd0], eax
jmp 0x1000f830
jmp 0x1000f7af
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x47c]
cmp dword [ebp + eax - 0x47c], ecx
jl 0x1000f8a0
mov dword [ebp - 0xa7c], 1
jmp 0x1000f8a7
and dword [ebp - 0xa7c], 0
xor eax, eax
sub eax, dword [ebp - 0xa7c]
mov dword [ebp - 0x1c4], eax
jmp 0x1000f74d
mov dword [ebp - 0xf8], 3
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xf7c], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xf84], eax
cmp dword [ebp - 0x1c4], 0
je 0x1000f8f1
mov dword [ebp - 0x5f4], 1
jmp 0x1000f8f8
and dword [ebp - 0x5f4], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x5f4], eax
jge 0x1000f912
mov dword [ebp - 0xa84], 1
jmp 0x1000f919
and dword [ebp - 0xa84], 0
mov eax, dword [ebp - 0xa84]
mov dword [ebp - 0x1c4], eax
imul eax, dword [ebp - 0x1c4], 0
sub eax, dword [ebp - 0xf0]
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0x8254
jge 0x1000f950
mov dword [ebp - 0xa8c], 1
jmp 0x1000f957
and dword [ebp - 0xa8c], 0
mov eax, dword [ebp - 0xf0]
add eax, dword [ebp - 0xa8c]
jne 0x1000f977
cmp dword [ebp - 0xf0], 0
jne 0x1000f977
and dword [ebp - 0xb90], 0
jmp 0x1000f981
mov dword [ebp - 0xb90], 1
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0
je 0x1000fa6b
push 1
lea ecx, [ebp - 0xd60]
call fcn.1001b841
mov dword [ebp - 4], 4
mov dword [ebp - 0xc7c], 0
mov dword [ebp - 0x348], 0
jmp 0x1000f9d1
mov eax, dword [ebp - 0x348]
inc eax
mov dword [ebp - 0x348], eax
cmp dword [ebp - 0x348], 1
jge 0x1000f9f3
push dword [ebp - 0x348]
lea ecx, [ebp - 0xd60]
call fcn.1001b8b2
mov dword [eax], 0xfffffff8
jmp 0x1000f9c4
push 0
lea ecx, [ebp - 0xd60]
call fcn.1001b8b2
mov eax, dword [eax]
mov dword [ebp - 0xf0], eax
push 0
lea ecx, [ebp - 0xd60]
call fcn.1001b8b2
cmp dword [eax], 0
jne 0x1000fa26
mov dword [ebp - 0xa94], 1
jmp 0x1000fa2d
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xa94], eax
je 0x1000fa47
mov dword [ebp - 0x60c], 1
jmp 0x1000fa4e
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x60c]
mov dword [ebp - 0xc7c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd60]
call fcn.1001b8ad
jmp 0x1000fa8b
mov dword [ebp - 0xb4c], 0x4e5477a
mov dword [ebp - 0xc24], 1
mov eax, dword [ebp - 0xb4c]
mov dword [ebp - 0xc24], eax
push 2
lea ecx, [ebp - 0xed8]
call fcn.1001b841
mov dword [ebp - 4], 5
mov dword [ebp - 0x23c], 0xbeb0647d
mov dword [ebp - 0x288], 0
jmp 0x1000fac2
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 2
jge 0x1000fae4
push dword [ebp - 0x288]
lea ecx, [ebp - 0xed8]
call fcn.1001b8b2
mov dword [eax], 0xca631852
jmp 0x1000fab5
mov dword [ebp - 0x23c], 1
jmp 0x1000fafd
mov eax, dword [ebp - 0x23c]
dec eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 0
jl 0x1000fb38
push dword [ebp - 0x23c]
lea ecx, [ebp - 0xed8]
call fcn.1001b8b2
cmp dword [eax], 0
je 0x1000fb1e
jmp 0x1000fb38
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000fb36
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
jmp 0x1000faf0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xed8]
call fcn.1001b8ad
mov dword [ebp - 0x9c], 0xac12
mov dword [ebp - 0x610], 0xfffffffd
mov dword [ebp - 0x420], 0xf7919adb
mov dword [ebp - 0x630], 0x1f6f49c2
mov dword [ebp - 0xb54], 0xffffffff
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xf8c], eax
cmp dword [ebp - 0x9c], 0
jne 0x1000fba0
cmp dword [ebp - 0x9c], 0
jne 0x1000fba0
and dword [ebp - 0x880], 0
jmp 0x1000fbaa
mov dword [ebp - 0x880], 1
cmp dword [ebp - 0x880], 0xfffa
jbe 0x1000fbc2
mov dword [ebp - 0xa58], 1
jmp 0x1000fbc9
and dword [ebp - 0xa58], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xf94], eax
mov dword [ebp - 0x610], 0xaee5
mov eax, dword [ebp - 0x610]
cmp dword [ebp - 0xa58], eax
jg 0x1000fbf9
mov dword [ebp - 0x618], 1
jmp 0x1000fc00
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x618], eax
jl 0x1000fc1a
mov dword [ebp - 0x888], 1
jmp 0x1000fc21
and dword [ebp - 0x888], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x888], eax
je 0x1000fc3b
mov dword [ebp - 0x620], 1
jmp 0x1000fc42
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
dec eax
imul eax, dword [ebp - 0x9c]
test eax, eax
jne 0x1000fc62
or eax, 0xffffffff
jne 0x1000fc62
and dword [ebp - 0x9c0], 0
jmp 0x1000fc6c
mov dword [ebp - 0x9c0], 1
mov eax, dword [ebp - 0x9c0]
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
je 0x1000fc96
cmp dword [ebp - 0x420], 0
je 0x1000fc96
mov dword [ebp - 0x628], 1
jmp 0x1000fc9d
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
sub eax, 0x50608375
cmp eax, 0x32e3
je 0x1000fcbb
mov dword [ebp - 0x890], 1
jmp 0x1000fcc2
and dword [ebp - 0x890], 0
mov eax, dword [ebp - 0x890]
mov dword [ebp - 0x630], eax
mov eax, dword [ebp - 0x630]
add eax, dword [ebp - 0x9c]
mov dword [ebp - 0xb54], eax
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000fcf8
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
mov dword [ebp - 0xf9c], 2
mov dword [ebp - 0xfa4], 1
mov dword [ebp - 0xfac], 0xb457102d
mov dword [ebp - 0xfb4], 0x6748f69f
mov dword [ebp - 0xfbc], 0x14b733c6
mov dword [ebp - 0xfc4], 0x6b6eb6b9
mov dword [ebp - 0xfcc], 0xaa29c146
mov dword [ebp - 0xfd4], 0xfffffff6
mov dword [ebp - 0xfdc], 0x182abbf9
mov dword [ebp - 0xfe4], 0xffffffff
mov dword [ebp - 0xaa8], 0x5a519d81
mov dword [ebp - 0x2f8], 0
jmp 0x1000fd7f
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 2
jge 0x1000fd9b
mov eax, dword [ebp - 0x2f8]
mov dword [ebp + eax*4 - 0x1114], 0x865b49d5
jmp 0x1000fd72
mov eax, dword [ebp - 0xaa8]
dec eax
mov dword [ebp - 0xaa8], eax
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1114], 0x4145c174
mov dword [ebp - 0x108], 0x1824a8c6
mov dword [ebp - 0x1ac], 1
mov dword [ebp - 0x100], 0xfa1a8f1
mov dword [ebp - 0x9c8], 0xb6b7be2d
mov dword [ebp - 0x108], 0
jmp 0x1000fdfa
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xf
jg 0x1000ff5a
mov dword [ebp - 0x290], 0
jmp 0x1000fe20
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x1000fe3c
mov eax, dword [ebp - 0x290]
mov dword [ebp + eax*4 - 0x48c], 7
jmp 0x1000fe13
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x48c], 0xffffffe8
jmp 0x1000fe6a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x48c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x48c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x48c], 0xfffffffa
jne 0x1000ff18
mov dword [ebp - 0xb5c], 0x717be9fb
mov dword [ebp - 0x330], 0
jmp 0x1000fea1
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 3
jge 0x1000febd
mov eax, dword [ebp - 0x330]
mov dword [ebp + eax*4 - 0xd78], 0xccb03629
jmp 0x1000fe94
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd78], 0
jmp 0x1000feeb
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd78]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd78], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd78], 0x1c
jg 0x1000ff13
mov dword [ebp - 0xc84], 0x250d
mov eax, dword [ebp - 0xc84]
mov dword [ebp - 0xb5c], eax
jmp 0x1000fed0
jmp 0x1000fe4f
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x48c]
cmp dword [ebp + eax - 0x48c], ecx
jl 0x1000ff40
mov dword [ebp - 0x638], 1
jmp 0x1000ff47
and dword [ebp - 0x638], 0
xor eax, eax
sub eax, dword [ebp - 0x638]
mov dword [ebp - 0x1ac], eax
jmp 0x1000fded
mov dword [ebp - 0x108], 3
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0xfec], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xff4], eax
cmp dword [ebp - 0x1ac], 0
je 0x1000ff91
mov dword [ebp - 0x898], 1
jmp 0x1000ff98
and dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x1ac]
cmp dword [ebp - 0x898], eax
jge 0x1000ffb2
mov dword [ebp - 0x640], 1
jmp 0x1000ffb9
and dword [ebp - 0x640], 0
mov eax, dword [ebp - 0x640]
mov dword [ebp - 0x1ac], eax
imul eax, dword [ebp - 0x1ac], 0
sub eax, dword [ebp - 0x100]
mov dword [ebp - 0x9c8], eax
cmp dword [ebp - 0x9c8], 0x8254
jge 0x1000fff0
mov dword [ebp - 0x648], 1
jmp 0x1000fff7
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x100]
add eax, dword [ebp - 0x648]
jne 0x10010017
cmp dword [ebp - 0x100], 0
jne 0x10010017
and dword [ebp - 0xc2c], 0
jmp 0x10010021
mov dword [ebp - 0xc2c], 1
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0
je 0x1001010b
push 1
lea ecx, [ebp - 0xd90]
call fcn.1001b841
mov dword [ebp - 4], 6
mov dword [ebp - 0xb64], 0
mov dword [ebp - 0x298], 0
jmp 0x10010071
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 1
jge 0x10010093
push dword [ebp - 0x298]
lea ecx, [ebp - 0xd90]
call fcn.1001b8b2
mov dword [eax], 0xfffffff8
jmp 0x10010064
push 0
lea ecx, [ebp - 0xd90]
call fcn.1001b8b2
mov eax, dword [eax]
mov dword [ebp - 0x100], eax
push 0
lea ecx, [ebp - 0xd90]
call fcn.1001b8b2
cmp dword [eax], 0
jne 0x100100c6
mov dword [ebp - 0x8a0], 1
jmp 0x100100cd
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x8a0], eax
je 0x100100e7
mov dword [ebp - 0x650], 1
jmp 0x100100ee
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x650]
mov dword [ebp - 0xb64], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd90]
call fcn.1001b8ad
jmp 0x1001012b
mov dword [ebp - 0xc8c], 0x4e5477a
mov dword [ebp - 0xb6c], 1
mov eax, dword [ebp - 0xc8c]
mov dword [ebp - 0xb6c], eax
mov dword [ebp - 0xb24], 0
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0xb1c], 0
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0x3cc], 0xcd53bc6e
mov dword [ebp - 0x22c], 0xffff
push 2
lea ecx, [ebp - 0xe90]
call fcn.1001b841
mov dword [ebp - 4], 7
mov dword [ebp - 0x3d4], 0xffffffff
mov dword [ebp - 0x670], 0xfffffffe
mov dword [ebp - 0xffc], 0x9e13c95
mov dword [ebp - 0x300], 0
jmp 0x100101b2
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 2
jge 0x100101d4
push dword [ebp - 0x300]
lea ecx, [ebp - 0xe90]
call fcn.1001b8b2
mov dword [eax], 1
jmp 0x100101a5
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xb24]
mov dword [ebp - 0xa60], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa60]
mov dword [ebp + eax - 0xb24], ecx
mov eax, dword [ebp - 0xa60]
mov dword [ebp - 0x3cc], eax
cmp dword [ebp - 0x3cc], 0
jne 0x10010229
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0x22c]
inc eax
je 0x100103f3
mov dword [ebp - 0x204], 0
mov dword [ebp - 0xb74], 0
mov dword [ebp - 0x428], 0x8dc5
mov dword [ebp - 0x660], 0xb35f1971
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x10010269
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x1004], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x100c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x204]
cmp dword [ebp + eax - 0xb24], ecx
jne 0x100102a2
mov dword [ebp - 0x658], 1
jmp 0x100102a9
and dword [ebp - 0x658], 0
cmp dword [ebp - 0x658], 0x7d6b
je 0x100102c1
mov dword [ebp - 0x3c4], 1
jmp 0x100102c8
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0xe90]
call fcn.1001b8b2
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xb24]
cmp eax, dword [ebp - 0x3c4]
jge 0x100102fe
mov dword [ebp - 0xc3c], 1
jmp 0x10010305
and dword [ebp - 0xc3c], 0
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x1014], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xb74]
cmp dword [ebp + eax - 0xb24], ecx
jge 0x10010331
mov dword [ebp - 0x42c], 1
jmp 0x10010338
and dword [ebp - 0x42c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x42c]
mov dword [ebp + eax - 0xb24], ecx
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0x42c], eax
jle 0x1001036b
cmp dword [ebp - 0x428], 0
jne 0x1001036b
and dword [ebp - 0x8a8], 0
jmp 0x10010375
mov dword [ebp - 0x8a8], 1
mov eax, dword [ebp - 0x3cc]
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x660], eax
mov eax, dword [ebp - 0x660]
mov dword [ebp - 0x3d4], eax
mov eax, dword [ebp - 0x3d4]
cmp dword [ebp - 0x204], eax
jg 0x100103ad
mov dword [ebp - 0x9d0], 1
jmp 0x100103b4
and dword [ebp - 0x9d0], 0
cmp dword [ebp - 0x9d0], 0x5c6a81d6
jl 0x100103c9
cmp dword [ebp - 0x428], 0
je 0x100103de
mov eax, 0x68fc
test eax, eax
je 0x100103de
mov dword [ebp - 0x668], 1
jmp 0x100103e5
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0x670], eax
jmp 0x1001040d
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1001040d
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov eax, dword [ebp - 0x3d4]
imul eax, dword [ebp - 0x22c]
cmp eax, 0x7e12fd89
jge 0x1001042d
mov dword [ebp - 0x8b0], 1
jmp 0x10010434
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x670], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe90]
call fcn.1001b8ad
push 2
lea ecx, [ebp - 0xec0]
call fcn.1001b841
mov dword [ebp - 4], 8
mov dword [ebp - 0x20c], 0xbeb0647d
mov dword [ebp - 0x2a0], 0
jmp 0x10010486
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jge 0x100104a8
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0xec0]
call fcn.1001b8b2
mov dword [eax], 0xca631852
jmp 0x10010479
mov dword [ebp - 0x20c], 1
jmp 0x100104c1
cmp dword [ebp - 0x20c], 0
jl 0x100104fc