Function at 0xf1bec
Capabilities:
Check http status code

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0xcc
push 0
push 0
dec ecx
jne 0xf1bf5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xf4bf1
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x7d], 0
mov eax, dword [ebp + 8]
call fcn.000143f0
mov eax, dword [ebp + 0xc]
xor edx, edx
mov dword [eax], edx
lea eax, [ebp - 0x5c]
call fcn.000143f0
cmp dword [ebp + 0x10], 0
je 0xf1cf3
push 0xf4c0c
push dword [ebp - 4]
push 0xf4c28
lea eax, [ebp - 0xc4]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0xc4]
lea eax, [ebp - 0xc0]
call fcn.000145ac
push dword [ebp - 0xc0]
push dword [ebp + 0x1c]
push 0xf4c30
push dword [ebp + 0x20]
push 0xf4c30
push dword [ebp - 8]
push 0xf4c3c
mov eax, dword [ebp - 0xc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xd0]
call fcn.0003009c
push dword [ebp - 0xd0]
push 0xf4c48
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc8]
call fcn.000145ac
push dword [ebp - 0xc8]
lea eax, [ebp - 0xbc]
mov edx, 7
call fcn.00014700
mov edx, dword [ebp - 0xbc]
lea ecx, [ebp - 0xb8]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x250640]
call fcn.000292ac
cmp eax, 0xbb8
ja 0xf1e78
mov eax, dword [0x250644]
mov edx, dword [ebp - 8]
call fcn.00014748
jne 0xf1e78
mov eax, dword [0x250658]
cmp eax, dword [ebp - 0xc]
jne 0xf1e78
push 0xf4c54
push dword [ebp - 4]
push 0xf4c68
lea eax, [ebp - 0xd8]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0xd8]
lea eax, [ebp - 0xd4]
call fcn.000145ac
push dword [ebp - 0xd4]
push dword [ebp + 0x1c]
push 0xf4c30
push dword [ebp + 0x20]
push 0xf4c30
push dword [ebp - 8]
push 0xf4c7c
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x1e4]
call fcn.00047530
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0xe4]
call fcn.00013f4c
push dword [ebp - 0xe4]
push 0xf4c90
lea edx, [ebp - 0x1e8]
mov eax, dword [0x250628]
call fcn.0003006c
push dword [ebp - 0x1e8]
push 0xf4cac
lea eax, [ebp - 0xe0]
mov edx, 5
call fcn.00014068
mov edx, dword [ebp - 0xe0]
lea eax, [ebp - 0xdc]
call fcn.000145ac
push dword [ebp - 0xdc]
lea eax, [ebp - 0x5c]
mov edx, 7
call fcn.00014700
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x5c]
call fcn.0001442c
cmp dword [ebp + 0x10], 0
je 0xf4849
push 0xf4cb8
lea edx, [ebp - 0x1f8]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
call fcn.00027478
push dword [ebp - 0x1f8]
push 0xf4c48
lea eax, [ebp - 0x1f4]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0x1f4]
lea eax, [ebp - 0x1f0]
call fcn.000145ac
lea eax, [ebp - 0x1f0]
mov edx, dword [ebp - 0x5c]
call fcn.0001463c
mov edx, dword [ebp - 0x1f0]
lea ecx, [ebp - 0x1ec]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
jmp 0xf4849
mov byte [ebp - 0x99], 0
xor eax, eax
mov dword [0x250640], eax
mov eax, 0x250644
call fcn.000143f0
mov dword [0x250658], 0xffffffff
xor eax, eax
push ebp
push 0xf1f14
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0x7d], 1
call fcn.0004ded4
mov byte [ebp - 0xa1], al
lea eax, [ebp - 0x4c]
mov edx, dword [ebp + 0x1c]
call fcn.0001442c
lea eax, [ebp - 0x68]
mov edx, 0x800
call fcn.000271f0
mov edx, dword [ebp - 8]
mov eax, 0xf4cc4
call fcn.0001495c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0xf1ef2
lea eax, [ebp - 0x74]
mov edx, dword [ebp - 8]
call fcn.0001442c
jmp 0xf1f07
lea eax, [ebp - 0x74]
push eax
mov edx, dword [ebp - 0x18]
inc edx
mov ecx, 0xc8
mov eax, dword [ebp - 8]
call fcn.000147e4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf1fd2
mov byte [ebp - 0x7d], 2
xor eax, eax
push ebp
push 0xf1ff6
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.000f14a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf20bd
mov byte [ebp - 0x7d], 3
xor edx, edx
push ebp
push 0xf4574
push dword fs:[edx]
mov dword fs:[edx], esp
xor eax, eax
mov dword [0x250628], eax
mov eax, 0x250630
call fcn.000143f0
mov eax, 0x250618
call fcn.000143f0
mov eax, 0x250620
call fcn.000143f0
mov byte [ebp - 0x7d], 6
call fcn.0004d1c4
call fcn.0004d4d4
lea eax, [ebp - 0x228]
mov edx, dword [ebp - 0x74]
call fcn.00013f70
mov eax, dword [ebp - 0x228]
lea edx, [ebp - 0x224]
call fcn.0002fd54
mov eax, dword [ebp - 0x224]
push eax
lea eax, [ebp - 0x234]
call fcn.0004bde4
mov edx, dword [ebp - 0x234]
lea eax, [ebp - 0x230]
call fcn.00013f70
mov eax, dword [ebp - 0x230]
lea edx, [ebp - 0x22c]
call fcn.0002fd54
mov edx, dword [ebp - 0x22c]
pop eax
call fcn.000140b8
sete al
mov eax, dword [ebp - 0x74]
call fcn.00014630
test eax, eax
jle 0xf3bad
mov eax, dword [ebp - 0x74]
call fcn.00014630
cmp eax, 0xc8
jge 0xf3bad
mov byte [ebp - 0x7d], 7
mov byte [ebp - 0x7d], 8
mov eax, dword [ebp + 0x20]
push eax
mov eax, dword [ebp - 0x4c]
push eax
mov eax, dword [ebp + 0x18]
push eax
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
lea eax, [ebp - 0x5c]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov cl, byte [ebp + 0x24]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.0009e04c
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jge 0xf22e3
mov byte [ebp - 0x99], 1
push 0xf4d08
push dword [ebp - 8]
push 0xf4d6c
lea edx, [ebp - 0x240]
mov eax, dword [ebp - 0x18]
call fcn.0003006c
push dword [ebp - 0x240]
push 0xf4d84
lea eax, [ebp - 0x23c]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0x23c]
lea eax, [ebp - 0x238]
call fcn.000145ac
push dword [ebp - 0x238]
lea eax, [ebp - 0x244]
call fcn.0004818c
push dword [ebp - 0x244]
lea edx, [ebp - 0x24c]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
call fcn.00027478
mov edx, dword [ebp - 0x24c]
lea eax, [ebp - 0x248]
call fcn.000145ac
push dword [ebp - 0x248]
lea eax, [ebp - 0x250]
call fcn.0004818c
push dword [ebp - 0x250]
push dword [ebp - 0x5c]
lea eax, [ebp - 0x5c]
mov edx, 7
call fcn.00014700
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf229d
lea eax, [ebp - 0x254]
call fcn.0004818c
mov edx, dword [ebp - 0x254]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x258]
call fcn.0002a3b8
push dword [ebp - 0x258]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf3c28
lea ecx, [ebp - 0x25c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
jmp 0xf3c28
mov byte [ebp - 0x7d], 9
cmp dword [ebp + 0x10], 0
je 0xf2336
lea edx, [ebp - 0x1e4]
mov eax, dword [ebp - 0x18]
call fcn.00047530
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0x268]
call fcn.00013f4c
mov ecx, dword [ebp - 0x268]
lea eax, [ebp - 0x264]
mov edx, 0xf4d90
call fcn.00013ff4
mov edx, dword [ebp - 0x264]
lea ecx, [ebp - 0x260]
mov eax, dword [ebp + 0x10]
call fcn.00049df8
mov byte [ebp - 0x7d], 0xa
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, case.0x1ffea.3
push eax
push 0
lea eax, [ebp - 0x26c]
call fcn.00026f98
mov eax, dword [ebp - 0x26c]
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0xf2dd8
lea edx, [ebp - 0x1e4]
lea eax, [ebx + 1]
call fcn.000294dc
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0x274]
call fcn.00013f4c
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x270]
mov edx, 0xf4da8
call fcn.00013ff4
mov edx, dword [ebp - 0x270]
lea eax, [ebp - 0xac]
call fcn.000145ac
lea eax, [ebp - 0x280]
call fcn.00026f98
mov edx, dword [ebp - 0x280]
lea eax, [ebp - 0x27c]
call fcn.000145ac
mov eax, dword [ebp - 0x27c]
lea edx, [ebp - 0x278]
call fcn.0001b994
mov edx, dword [ebp - 0x278]
lea eax, [ebp - 0x24]
mov ecx, dword [ebp - 0xac]
call fcn.0001469c
lea eax, [ebp - 0x90]
call fcn.000143f0
lea eax, [ebp - 0x8c]
call fcn.000143f0
lea eax, [ebp - 0x6c]
call fcn.000143f0
lea eax, [ebp - 0x54]
call fcn.000143f0
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, case.0x1ffea.3
push eax
push 0
mov eax, dword [ebp - 0x24]
call fcn.00014620
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExW
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0xf26e2
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4dac
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf24f0
cmp dword [ebp - 0x40], 1
jne 0xf24f0
cmp dword [ebp - 0x20], 0
jbe 0xf24f0
cmp dword [ebp - 0x20], 0x7fe
jae 0xf24f0
lea eax, [ebp - 0x90]
mov edx, dword [ebp - 0x68]
call fcn.00014548
lea eax, [ebp - 0x90]
push eax
mov ecx, 0x3c
mov edx, 1
mov eax, dword [ebp - 0x90]
call fcn.000147e4
jmp 0xf2500
lea eax, [ebp - 0x90]
mov edx, 0xf4dcc
call fcn.0001442c
lea eax, [ebp - 0x8c]
call fcn.000143f0
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e24
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf2562
cmp dword [ebp - 0x40], 1
jne 0xf2562
cmp dword [ebp - 0x20], 0
jbe 0xf2562
cmp dword [ebp - 0x20], 0x208
ja 0xf2562
lea eax, [ebp - 0x8c]
mov edx, dword [ebp - 0x68]
call fcn.00014548
mov eax, dword [ebp - 0x8c]
call fcn.00014630
cmp eax, 4
jge 0xf257d
lea eax, [ebp - 0x8c]
call fcn.000143f0
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e30
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x6c]
call fcn.000143f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jle 0xf2629
cmp dword [ebp - 0x18], 0x100000
jg 0xf2629
mov eax, dword [ebp - 0x18]
add eax, 2
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.000271f0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e30
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf2618
cmp dword [ebp - 0x40], 1
jne 0xf2618
cmp dword [ebp - 0x20], 0
jbe 0xf2618
lea eax, [ebp - 0x6c]
mov edx, dword [ebp - 0x94]
call fcn.00014548
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.00027218
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e3c
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x54]
call fcn.000143f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jle 0xf2792
cmp dword [ebp - 0x18], 0x100000
jg 0xf2792
mov eax, dword [ebp - 0x18]
add eax, 2
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.000271f0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e3c
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf26cc
cmp dword [ebp - 0x40], 1
jne 0xf26cc
cmp dword [ebp - 0x20], 0
jbe 0xf26cc
lea eax, [ebp - 0x54]
mov edx, dword [ebp - 0x94]
call fcn.00014548
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.00027218
jmp 0xf2792
cmp dword [ebp - 0x98], 2
je 0xf2792
mov byte [ebp - 0x99], 1
lea edx, [ebp - 0x288]
mov eax, dword [ebp - 0x98]
call fcn.00027478
mov ecx, dword [ebp - 0x288]
lea eax, [ebp - 0x284]
mov edx, 0xf4e54
call fcn.00013ff4
mov edx, dword [ebp - 0x284]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf2755
lea eax, [ebp - 0x28c]
call fcn.0004818c
mov edx, dword [ebp - 0x28c]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x290]
call fcn.0002a3b8
push dword [ebp - 0x290]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf2792
lea ecx, [ebp - 0x294]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
lea eax, [ebp - 0x2c]
mov ecx, 0xf4cc4
mov edx, dword [ebp - 0x74]
call fcn.0001469c
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x6c]
call fcn.0001442c
mov al, byte [0xf4e84]
push eax
push 0
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x29c]
call fcn.0004818c
mov ecx, dword [ebp - 0x29c]
mov edx, 0xf4e8c
mov eax, dword [ebp - 0x3c]
call fcn.0003f924
mov edx, dword [ebp - 0x298]
mov eax, dword [0x250638]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x250638]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2a46
mov eax, dword [0x250638]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf2a46
inc esi
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x2a0]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2a0]
call fcn.00014630
test eax, eax
jle 0xf2a3c
lea ecx, [ebp - 0x2a8]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2a8]
lea edx, [ebp - 0x2a4]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2a4]
push eax
lea edx, [ebp - 0x2ac]
mov eax, dword [ebp - 0x2c]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2ac]
pop edx
call fcn.0001495c
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
je 0xf28de
lea edx, [ebp - 0x2b0]
mov eax, dword [ebp - 0x74]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2b0]
push eax
lea ecx, [ebp - 0x2b8]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2b8]
lea edx, [ebp - 0x2b4]
call fcn.0001c9b0
mov edx, dword [ebp - 0x2b4]
pop eax
call fcn.00014748
jne 0xf2a3c
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.00014630
mov ecx, eax
lea eax, [ebp - 0x10]
mov edx, 1
call fcn.00014830
mov eax, dword [ebp - 0x10]
call fcn.00014630
test eax, eax
jle 0xf292e
push dword [ebp - 0x10]
push 0xf4cc4
push dword [ebp - 0x90]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00014700
jmp 0xf293c
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x90]
call fcn.0001442c
mov eax, dword [ebp - 0x10]
call fcn.00014630
test eax, eax
jle 0xf2a3c
mov edx, dword [ebp - 0x10]
mov eax, dword [0x250608]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf2a3c
cmp byte [ebp - 0xa1], 0
jne 0xf297e
mov edx, dword [ebp - 0x90]
mov eax, dword [0x250600]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf29b0
mov edx, dword [ebp - 0x10]
mov eax, dword [0x250608]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x250600]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x250624]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0xf2a3c
push 0xf4e94
push dword [ebp - 0x90]
push 0xf4ed0
push dword [ebp - 0x10]
push 0xf4edc
lea eax, [ebp - 0x5c]
mov edx, 5
call fcn.00014700
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf29ff
lea eax, [ebp - 0x2bc]
call fcn.0004818c
mov edx, dword [ebp - 0x2bc]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x2c0]
call fcn.0002a320
push dword [ebp - 0x2c0]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf2a3c
lea ecx, [ebp - 0x2c4]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
inc dword [ebp - 0x7c]
dec esi
jne 0xf2819
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2d70
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf2d70
inc esi
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x2c8]
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x2c8]
lea eax, [ebp - 0x2c]
mov ecx, 0xf4cc4
call fcn.0001469c
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x54]
call fcn.0001442c
mov al, byte [0xf4e84]
push eax
push 0
lea eax, [ebp - 0x2cc]
push eax
lea eax, [ebp - 0x2d0]
call fcn.0004818c
mov ecx, dword [ebp - 0x2d0]
mov edx, 0xf4e8c
mov eax, dword [ebp - 0x3c]
call fcn.0003f924
mov edx, dword [ebp - 0x2cc]
mov eax, dword [0x250638]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x250638]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2d66
mov eax, dword [0x250638]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0xf2d66
inc eax
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x2d4]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2d4]
call fcn.00014630
test eax, eax
jle 0xf2d57
lea ecx, [ebp - 0x2dc]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2dc]
lea edx, [ebp - 0x2d8]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2d8]
push eax
lea edx, [ebp - 0x2e0]
mov eax, dword [ebp - 0x2c]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2e0]
pop edx
call fcn.0001495c
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
je 0xf2bf9
lea ecx, [ebp - 0x2e8]
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2e8]
lea edx, [ebp - 0x2e4]
call fcn.0001c9b0
mov eax, dword [ebp - 0x2e4]
push eax
lea ecx, [ebp - 0x2f0]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2f0]
lea edx, [ebp - 0x2ec]
call fcn.0001c9b0
mov edx, dword [ebp - 0x2ec]
pop eax
call fcn.00014748
jne 0xf2d57
lea ecx, [ebp - 0x10]
mov edx, dword [ebp - 0x7c]
mov eax, dword [0x250638]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x2c]
call fcn.00014630
mov ecx, eax
lea eax, [ebp - 0x10]
mov edx, 1
call fcn.00014830
mov eax, dword [ebp - 0x10]
call fcn.00014630
test eax, eax
jle 0xf2c49
push dword [ebp - 0x10]
push 0xf4cc4
push dword [ebp - 0x90]
lea eax, [ebp - 0x10]
mov edx, 3
call fcn.00014700
jmp 0xf2c57
lea eax, [ebp - 0x10]
mov edx, dword [ebp - 0x90]
call fcn.0001442c
mov eax, dword [ebp - 0x10]
call fcn.00014630
test eax, eax
jle 0xf2d57
mov edx, dword [ebp - 0x10]
mov eax, dword [0x250608]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf2d57
cmp byte [ebp - 0xa1], 0
jne 0xf2c99
mov edx, dword [ebp - 0x90]
mov eax, dword [0x250600]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf2ccb
mov edx, dword [ebp - 0x10]
mov eax, dword [0x250608]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x250600]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x250624]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0xf2d57
push 0xf4ee4
push dword [ebp - 0x90]
push 0xf4ed0
push dword [ebp - 0x10]
push 0xf4edc
lea eax, [ebp - 0x5c]
mov edx, 5
call fcn.00014700
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf2d1a
lea eax, [ebp - 0x2f4]
call fcn.0004818c
mov edx, dword [ebp - 0x2f4]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x2f8]
call fcn.0002a320
push dword [ebp - 0x2f8]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf2d57
lea ecx, [ebp - 0x2fc]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
inc dword [ebp - 0x7c]
dec dword [ebp - 0xb4]
jne 0xf2b1c
inc dword [ebp - 0x18]
dec esi
jne 0xf2a79
cmp dword [ebp - 0x38], 0
je 0xf2d7f
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x38], eax
inc ebx
inc dword [ebp - 0xa8]
cmp dword [ebp - 0x98], 0
jne 0xf2e88
mov eax, dword [0x2515a0]
mov eax, dword [eax]
mov edx, dword [0x251718]
add eax, dword [edx]
add eax, 0x64
cdq
push edx
push eax
mov eax, dword [ebp - 0xa8]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0xf2dcb
cmp eax, dword [esp]
pop edx
pop eax
jbe 0xf2390
jmp 0xf2e88
pop edx
pop eax
jle 0xf2390
jmp 0xf2e88
cmp dword [ebp - 0x98], 2
je 0xf2e88
mov byte [ebp - 0x99], 1
lea edx, [ebp - 0x304]
mov eax, dword [ebp - 0x98]
call fcn.00027478
mov ecx, dword [ebp - 0x304]
lea eax, [ebp - 0x300]
mov edx, 0xf4f24
call fcn.00013ff4
mov edx, dword [ebp - 0x300]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf2e4b
lea eax, [ebp - 0x308]
call fcn.0004818c
mov edx, dword [ebp - 0x308]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x30c]
call fcn.0002a3b8
push dword [ebp - 0x30c]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf2e88
lea ecx, [ebp - 0x310]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
cmp dword [ebp - 0x34], 0
je 0xf2e97
mov eax, dword [ebp - 0x34]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x7d], 0xb
mov byte [ebp - 0x7d], 0xc
xor ebx, ebx
xor eax, eax
mov dword [ebp - 0xa8], eax
xor eax, eax
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, case.0x1ffea.3
push eax
push 0
lea eax, [ebp - 0x314]
call fcn.00026f98
mov eax, dword [ebp - 0x314]
call fcn.0001416c
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0xf3ae7
lea edx, [ebp - 0x1e4]
lea eax, [ebx + 1]
call fcn.000294dc
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0x31c]
call fcn.00013f4c
mov ecx, dword [ebp - 0x31c]
lea eax, [ebp - 0x318]
mov edx, 0xf4f5c
call fcn.00013ff4
mov edx, dword [ebp - 0x318]
lea eax, [ebp - 0xac]
call fcn.000145ac
lea eax, [ebp - 0x328]
call fcn.00026f98
mov edx, dword [ebp - 0x328]
lea eax, [ebp - 0x324]
call fcn.000145ac
mov eax, dword [ebp - 0x324]
lea edx, [ebp - 0x320]
call fcn.0001b994
mov edx, dword [ebp - 0x320]
lea eax, [ebp - 0x24]
mov ecx, dword [ebp - 0xac]
call fcn.0001469c
lea eax, [ebp - 0x44]
call fcn.000143f0
lea eax, [ebp - 0x30]
call fcn.000143f0
lea eax, [ebp - 0x70]
call fcn.000143f0
lea eax, [ebp - 0x28]
call fcn.000143f0
lea eax, [ebp - 0x78]
call fcn.000143f0
lea eax, [ebp - 0x88]
call fcn.00013d18
lea eax, [ebp - 0x48]
mov edx, 0xf4e8c
call fcn.0001442c
lea eax, [ebp - 0x1c]
call fcn.000143f0
lea eax, [ebp - 0x14]
call fcn.000143f0
xor eax, eax
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [0x2514d0]
mov eax, dword [eax]
add eax, case.0x1ffea.3
push eax
push 0
mov eax, dword [ebp - 0x24]
call fcn.00014620
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExW
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0
jne 0xf34f4
mov byte [ebp - 0x7d], 0xe
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4dac
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf307f
cmp dword [ebp - 0x40], 1
jne 0xf307f
cmp dword [ebp - 0x20], 1
jbe 0xf307f
cmp dword [ebp - 0x20], 0x7fe
jae 0xf307f
lea eax, [ebp - 0x44]
mov edx, dword [ebp - 0x68]
call fcn.00014548
lea eax, [ebp - 0x44]
push eax
mov ecx, 0x3c
mov edx, 1
mov eax, dword [ebp - 0x44]
call fcn.000147e4
jmp 0xf308c
lea eax, [ebp - 0x44]
mov edx, 0xf4dcc
call fcn.0001442c
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4f60
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf30e2
cmp dword [ebp - 0x40], 1
jne 0xf30e2
cmp dword [ebp - 0x20], 0
jbe 0xf30e2
cmp dword [ebp - 0x20], 0x208
ja 0xf30e2
lea eax, [ebp - 0x30]
mov edx, dword [ebp - 0x68]
call fcn.00014548
jmp 0xf30ef
lea eax, [ebp - 0x30]
mov edx, 0xf4f78
call fcn.0001442c
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4fcc
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf3145
cmp dword [ebp - 0x40], 1
jne 0xf3145
cmp dword [ebp - 0x20], 0
jbe 0xf3145
cmp dword [ebp - 0x20], 0x208
ja 0xf3145
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 0x68]
call fcn.00014548
jmp 0xf3152
lea eax, [ebp - 0x70]
mov edx, 0xf4ff0
call fcn.0001442c
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf5050
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf31a8
cmp dword [ebp - 0x40], 1
jne 0xf31a8
cmp dword [ebp - 0x20], 0
jbe 0xf31a8
cmp dword [ebp - 0x20], 0x208
ja 0xf31a8
lea eax, [ebp - 0x28]
mov edx, dword [ebp - 0x68]
call fcn.00014548
jmp 0xf31b5
lea eax, [ebp - 0x28]
mov edx, 0xf5084
call fcn.0001442c
lea eax, [ebp - 0x78]
call fcn.000143f0
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e24
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf3211
cmp dword [ebp - 0x40], 1
jne 0xf3211
cmp dword [ebp - 0x20], 0
jbe 0xf3211
cmp dword [ebp - 0x20], 0x208
ja 0xf3211
lea eax, [ebp - 0x78]
mov edx, dword [ebp - 0x68]
call fcn.00014548
mov eax, dword [ebp - 0x78]
call fcn.00014630
cmp eax, 4
jge 0xf3226
lea eax, [ebp - 0x78]
call fcn.000143f0
mov dword [ebp - 0x20], 0x7fe
mov edx, 0x800
mov eax, dword [ebp - 0x68]
call fcn.00018100
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x68]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf50f0
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf3287
cmp dword [ebp - 0x40], 1
jne 0xf3287
cmp dword [ebp - 0x20], 0
jbe 0xf3287
lea eax, [ebp - 0x32c]
mov edx, dword [ebp - 0x68]
call fcn.00014548
mov edx, dword [ebp - 0x32c]
lea eax, [ebp - 0x88]
call fcn.00013f70
jmp 0xf3292
lea eax, [ebp - 0x88]
call fcn.00013d18
mov eax, dword [ebp - 0x88]
call fcn.00013fa8
cmp eax, 4
jne 0xf32b2
lea eax, [ebp - 0x88]
mov edx, 0xf5114
call fcn.00013fb0
mov eax, dword [ebp - 0x88]
call fcn.00013fa8
cmp eax, 5
je 0xf32de
lea eax, [ebp - 0x330]
call fcn.0004d18c
mov edx, dword [ebp - 0x330]
lea eax, [ebp - 0x88]
call fcn.00013db0
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf5118
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x48]
mov edx, 0xf4e8c
call fcn.0001442c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jle 0xf338f
cmp dword [ebp - 0x18], 0x100000
jg 0xf338f
mov eax, dword [ebp - 0x18]
add eax, 2
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.000271f0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf5118
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf337e
cmp dword [ebp - 0x40], 1
jne 0xf337e
cmp dword [ebp - 0x20], 3
jbe 0xf337e
lea eax, [ebp - 0x48]
mov edx, dword [ebp - 0x94]
call fcn.00014548
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.00027218
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e30
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x1c]
call fcn.000143f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jle 0xf343b
cmp dword [ebp - 0x18], 0x100000
jg 0xf343b
mov eax, dword [ebp - 0x18]
add eax, 2
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.000271f0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e30
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf342a
cmp dword [ebp - 0x40], 1
jne 0xf342a
cmp dword [ebp - 0x20], 0
jbe 0xf342a
lea eax, [ebp - 0x1c]
mov edx, dword [ebp - 0x94]
call fcn.00014548
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.00027218
xor eax, eax
mov dword [ebp - 0x20], eax
xor eax, eax
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e3c
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x14]
call fcn.000143f0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jle 0xf35a4
cmp dword [ebp - 0x18], 0x100000
jg 0xf35a4
mov eax, dword [ebp - 0x18]
add eax, 2
mov dword [ebp - 0x20], eax
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.000271f0
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push 0
push 0xf4e3c
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegQueryValueExW
test eax, eax
jne 0xf34de
cmp dword [ebp - 0x40], 1
jne 0xf34de
cmp dword [ebp - 0x20], 0
jbe 0xf34de
lea eax, [ebp - 0x14]
mov edx, dword [ebp - 0x94]
call fcn.00014548
mov edx, dword [ebp - 0x20]
add edx, 4
lea eax, [ebp - 0x94]
call fcn.00027218
jmp 0xf35a4
cmp dword [ebp - 0x98], 2
je 0xf35a4
mov byte [ebp - 0x99], 1
lea edx, [ebp - 0x338]
mov eax, dword [ebp - 0x98]
call fcn.00027478
mov ecx, dword [ebp - 0x338]
lea eax, [ebp - 0x334]
mov edx, 0xf5130
call fcn.00013ff4
mov edx, dword [ebp - 0x334]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf3567
lea eax, [ebp - 0x33c]
call fcn.0004818c
mov edx, dword [ebp - 0x33c]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x340]
call fcn.0002a3b8
push dword [ebp - 0x340]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf35a4
lea ecx, [ebp - 0x344]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
mov byte [ebp - 0x7d], 0x10
mov eax, dword [ebp - 0x48]
call fcn.00014630
cmp eax, 3
jl 0xf37c4
mov eax, dword [ebp - 0x44]
call fcn.00014630
test eax, eax
jle 0xf37c4
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf37c4
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf37c4
inc esi
mov dword [ebp - 0x18], 0
push 0xf4e8c
lea ecx, [ebp - 0x348]
mov edx, dword [ebp - 0x18]
mov eax, dword [0x250600]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x348]
push 0xf4e8c
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00014700
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x24]
call fcn.0001495c
test eax, eax
jle 0xf37ba
mov eax, dword [ebp - 0x44]
cmp word [eax], 0x24
je 0xf367f
inc dword [0x250628]
mov eax, dword [0x250630]
call fcn.00014630
test eax, eax
jne 0xf367f
mov eax, 0x250630
mov edx, dword [ebp - 0x30]
call fcn.0001442c
mov eax, 0x250618
mov edx, dword [ebp - 0x70]
call fcn.0001442c
mov eax, 0x250620
mov edx, dword [ebp - 0x28]
call fcn.0001442c
lea ecx, [ebp - 0x350]
mov edx, dword [ebp - 0x18]
mov eax, dword [0x250608]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x350]
push 0xf4cc4
push dword [ebp - 0x44]
lea eax, [ebp - 0x34c]
mov edx, 3
call fcn.00014700
mov edx, dword [ebp - 0x34c]
mov eax, dword [0x250678]
mov ecx, dword [eax]
call dword [ecx + 0x38]
lea eax, [ebp - 0x35c]
mov edx, dword [ebp - 0x30]
call fcn.00013f70
mov eax, dword [ebp - 0x35c]
lea edx, [ebp - 0x358]
call fcn.00029338
mov eax, dword [ebp - 0x358]
lea edx, [ebp - 0x354]
call fcn.0002fd90
mov eax, dword [ebp - 0x354]
push eax
lea eax, [ebp - 0x364]
call fcn.000264a4
mov eax, dword [ebp - 0x364]
lea edx, [ebp - 0x360]
call fcn.0002fd90
mov edx, dword [ebp - 0x360]
pop eax
call fcn.000140b8
jne 0xf3769
lea edx, [ebp - 0x368]
mov eax, dword [ebp - 0x28]
call fcn.0001bc38
mov eax, dword [ebp - 0x368]
push eax
lea eax, [ebp - 0x370]
call fcn.00027744
mov eax, dword [ebp - 0x370]
lea edx, [ebp - 0x36c]
call fcn.0001b994
mov edx, dword [ebp - 0x36c]
lea eax, [ebp - 0x30]
pop ecx
call fcn.0001469c
lea eax, [ebp - 0x28]
call fcn.000143f0
mov edx, dword [ebp - 0x30]
mov eax, dword [0x250634]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x250664]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x28]
mov eax, dword [0x250654]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x78]
mov eax, dword [0x25066c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x25063c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x250648]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x18]
dec esi
jne 0xf35f8
mov byte [ebp - 0x7d], 0x11
push 0xf4e8c
push dword [ebp - 0x74]
push 0xf4e8c
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00014700
mov eax, dword [ebp - 0x24]
call fcn.00014630
push eax
mov eax, dword [ebp - 0x24]
call fcn.00014620
push eax
call sub.user32.dll_CharUpperBuffW
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x1c]
call fcn.0001442c
mov eax, dword [ebp - 0x3c]
call fcn.00014630
push eax
mov eax, dword [ebp - 0x3c]
call fcn.00014620
push eax
call sub.user32.dll_CharUpperBuffW
mov byte [ebp - 0x7d], 0x12
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
call fcn.0001495c
test eax, eax
jle 0xf38f9
mov eax, dword [ebp - 0x44]
call fcn.00014630
test eax, eax
jle 0xf38f9
mov edx, dword [ebp - 0x44]
mov eax, dword [0x25065c]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf38f9
mov eax, dword [ebp - 0x44]
cmp word [eax], 0x24
je 0xf389b
inc dword [0x250628]
mov eax, dword [0x250630]
call fcn.00014630
test eax, eax
jne 0xf389b
mov eax, 0x250630
mov edx, dword [ebp - 0x30]
call fcn.0001442c
mov eax, 0x250618
mov edx, dword [ebp - 0x70]
call fcn.0001442c
mov eax, 0x250620
mov edx, dword [ebp - 0x28]
call fcn.0001442c
mov edx, dword [ebp - 0x44]
mov eax, dword [0x25065c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x30]
mov eax, dword [0x250670]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x250660]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x28]
mov eax, dword [0x250650]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x78]
mov eax, dword [0x250668]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x250674]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x25064c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov byte [ebp - 0x7d], 0x13
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3a7f
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3a7f
inc esi
mov dword [ebp - 0x18], 0
push 0xf4e8c
lea ecx, [ebp - 0x374]
mov eax, dword [0x25149c]
mov eax, dword [eax]
mov edx, dword [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0xc]
push dword [ebp - 0x374]
push 0xf4e8c
lea eax, [ebp - 0x24]
mov edx, 3
call fcn.00014700
mov eax, dword [ebp - 0x24]
call fcn.00014630
push eax
mov eax, dword [ebp - 0x24]
call fcn.00014620
push eax
call sub.user32.dll_CharUpperBuffW
lea eax, [ebp - 0x3c]
mov edx, dword [ebp - 0x14]
call fcn.0001442c
mov eax, dword [ebp - 0x3c]
call fcn.00014630
push eax
mov eax, dword [ebp - 0x3c]
call fcn.00014620
push eax
call sub.user32.dll_CharUpperBuffW
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
call fcn.0001495c
test eax, eax
jle 0xf3a75
mov eax, dword [ebp - 0x44]
call fcn.00014630
test eax, eax
jle 0xf3a75
mov edx, dword [ebp - 0x44]
mov eax, dword [0x25065c]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf3a75
mov eax, dword [ebp - 0x44]
cmp word [eax], 0x24
je 0xf3a17
inc dword [0x250628]
mov eax, dword [0x250630]
call fcn.00014630
test eax, eax
jne 0xf3a17
mov eax, 0x250630
mov edx, dword [ebp - 0x30]
call fcn.0001442c
mov eax, 0x250618
mov edx, dword [ebp - 0x70]
call fcn.0001442c
mov eax, 0x250620
mov edx, dword [ebp - 0x28]
call fcn.0001442c
mov edx, dword [ebp - 0x44]
mov eax, dword [0x25065c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x30]
mov eax, dword [0x250670]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x70]
mov eax, dword [0x250660]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x28]
mov eax, dword [0x250650]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x78]
mov eax, dword [0x250668]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x88]
mov eax, dword [0x250674]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov edx, dword [ebp - 0x48]
mov eax, dword [0x25064c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0x18]
dec esi
jne 0xf3930
cmp dword [ebp - 0x38], 0
je 0xf3a8e
mov eax, dword [ebp - 0x38]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x38], eax
inc ebx
inc dword [ebp - 0xa8]
cmp dword [ebp - 0x98], 0
jne 0xf3b97
mov eax, dword [0x2515a0]
mov eax, dword [eax]
mov edx, dword [0x251718]
add eax, dword [edx]
add eax, 0x64
cdq
push edx
push eax
mov eax, dword [ebp - 0xa8]
xor edx, edx
cmp edx, dword [esp + 4]
jne 0xf3ada
cmp eax, dword [esp]
pop edx
pop eax
jbe 0xf2efa
jmp 0xf3b97
pop edx
pop eax
jle 0xf2efa
jmp 0xf3b97
cmp dword [ebp - 0x98], 2
je 0xf3b97
mov byte [ebp - 0x99], 1
lea edx, [ebp - 0x37c]
mov eax, dword [ebp - 0x98]
call fcn.00027478
mov ecx, dword [ebp - 0x37c]
lea eax, [ebp - 0x378]
mov edx, 0xf5168
call fcn.00013ff4
mov edx, dword [ebp - 0x378]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf3b5a
lea eax, [ebp - 0x380]
call fcn.0004818c
mov edx, dword [ebp - 0x380]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x384]
call fcn.0002a3b8
push dword [ebp - 0x384]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf3b97
lea ecx, [ebp - 0x388]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
cmp dword [ebp - 0x34], 0
je 0xf3ba6
mov eax, dword [ebp - 0x34]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x34], eax
jmp 0xf3c28
mov byte [ebp - 0x99], 1
lea eax, [ebp - 0x5c]
mov edx, 0xf519c
call fcn.0001442c
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf3beb
lea eax, [ebp - 0x38c]
call fcn.0004818c
mov edx, dword [ebp - 0x38c]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x390]
call fcn.0002a3b8
push dword [ebp - 0x390]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf3c28
lea ecx, [ebp - 0x394]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
mov byte [ebp - 0x7d], 0x15
mov eax, dword [0x25065c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3c74
mov eax, dword [0x25065c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3c74
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x398]
mov edx, ebx
mov eax, dword [0x25065c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x398]
mov eax, dword [0x25061c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3c4e
mov eax, dword [0x250670]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3cbc
mov eax, dword [0x250670]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3cbc
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x39c]
mov edx, ebx
mov eax, dword [0x250670]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x39c]
mov eax, dword [0x2505fc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3c96
mov eax, dword [0x250660]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3d04
mov eax, dword [0x250660]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3d04
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3a0]
mov edx, ebx
mov eax, dword [0x250660]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3a0]
mov eax, dword [0x250614]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3cde
mov eax, dword [0x250650]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3d4c
mov eax, dword [0x250650]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3d4c
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3a4]
mov edx, ebx
mov eax, dword [0x250650]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3a4]
mov eax, dword [0x250610]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3d26
mov eax, dword [0x250668]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3d94
mov eax, dword [0x250668]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3d94
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3a8]
mov edx, ebx
mov eax, dword [0x250668]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3a8]
mov eax, dword [0x25062c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3d6e
mov eax, dword [0x250674]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3ddc
mov eax, dword [0x250674]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3ddc
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3ac]
mov edx, ebx
mov eax, dword [0x250674]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3ac]
mov eax, dword [0x25060c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc ebx
dec esi
jne 0xf3db6
mov eax, dword [0x25064c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3e24
mov eax, dword [0x25064c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3e24
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3b0]
mov edx, ebx
mov eax, dword [0x25064c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3b0]
mov eax, dword [0x250604]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3dfe
mov byte [ebp - 0x7d], 0xf
mov eax, dword [0x250678]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3e70
mov eax, dword [0x250678]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3e70
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3b4]
mov edx, ebx
mov eax, dword [0x250678]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3b4]
mov eax, dword [0x25061c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3e4a
mov eax, dword [0x250634]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3eb8
mov eax, dword [0x250634]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3eb8
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3b8]
mov edx, ebx
mov eax, dword [0x250634]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3b8]
mov eax, dword [0x2505fc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3e92
mov eax, dword [0x250664]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3f00
mov eax, dword [0x250664]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3f00
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3bc]
mov edx, ebx
mov eax, dword [0x250664]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3bc]
mov eax, dword [0x250614]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3eda
mov eax, dword [0x250654]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3f48
mov eax, dword [0x250654]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3f48
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3c0]
mov edx, ebx
mov eax, dword [0x250654]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c0]
mov eax, dword [0x250610]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3f22
mov eax, dword [0x25066c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3f90
mov eax, dword [0x25066c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3f90
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3c4]
mov edx, ebx
mov eax, dword [0x25066c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c4]
mov eax, dword [0x25062c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3f6a
mov eax, dword [0x25063c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3fd8
mov eax, dword [0x25063c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf3fd8
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3c8]
mov edx, ebx
mov eax, dword [0x25063c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3c8]
mov eax, dword [0x25060c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc ebx
dec esi
jne 0xf3fb2
mov eax, dword [0x250648]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf4020
mov eax, dword [0x250648]
mov edx, dword [eax]
call dword [edx + 0x14]
mov esi, eax
dec esi
test esi, esi
jl 0xf4020
inc esi
xor ebx, ebx
lea ecx, [ebp - 0x3cc]
mov edx, ebx
mov eax, dword [0x250648]
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x3cc]
mov eax, dword [0x250604]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc ebx
dec esi
jne 0xf3ffa
mov eax, dword [0x25061c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf4046
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250614]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf4060
mov eax, dword [0x250614]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250610]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf407a
mov eax, dword [0x250610]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x25062c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf4094
mov eax, dword [0x25062c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x25060c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf40ae
mov eax, dword [0x25060c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250604]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jge 0xf40c8
mov eax, dword [0x250604]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x25061c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x250614]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x250610]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x25062c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x25060c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf412e
mov eax, dword [0x250604]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
je 0xf42c3
mov byte [ebp - 0x99], 1
push 0xf51e4
lea edx, [ebp - 0x3d4]
mov eax, ebx
call fcn.0003006c
push dword [ebp - 0x3d4]
push 0xf4d00
mov eax, dword [0x25061c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3d8]
call fcn.0003006c
push dword [ebp - 0x3d8]
push 0xf4d00
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3dc]
call fcn.0003006c
push dword [ebp - 0x3dc]
push 0xf4d00
mov eax, dword [0x250614]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3e0]
call fcn.0003006c
push dword [ebp - 0x3e0]
push 0xf4d00
mov eax, dword [0x250610]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3e4]
call fcn.0003006c
push dword [ebp - 0x3e4]
push 0xf4d00
mov eax, dword [0x25062c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3e8]
call fcn.0003006c
push dword [ebp - 0x3e8]
push 0xf4d00
mov eax, dword [0x25060c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3ec]
call fcn.0003006c
push dword [ebp - 0x3ec]
push 0xf4d00
mov eax, dword [0x250604]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x3f0]
call fcn.0003006c
push dword [ebp - 0x3f0]
lea eax, [ebp - 0x3d0]
mov edx, 0x10
call fcn.00014068
mov edx, dword [ebp - 0x3d0]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf4275
lea eax, [ebp - 0x3f4]
call fcn.0004818c
mov edx, dword [ebp - 0x3f4]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x3f8]
call fcn.0002a320
push dword [ebp - 0x3f8]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf42c3
lea ecx, [ebp - 0x3fc]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
jmp 0xf42c3
mov edx, 0xf51f8
mov eax, dword [0x25061c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x25061c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf42b4
jmp 0xf42e2
mov edx, 0xf51f8
mov eax, dword [0x2505fc]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf42d3
jmp 0xf4301
mov edx, 0xf51f8
mov eax, dword [0x250614]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250614]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf42f2
jmp 0xf4320
mov edx, 0xf51f8
mov eax, dword [0x250610]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250610]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf4311
jmp 0xf433f
mov edx, 0xf51f8
mov eax, dword [0x25062c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x25062c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf4330
jmp 0xf435e
mov edx, 0xf5208
mov eax, dword [0x25060c]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x25060c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf434f
jmp 0xf437d
mov edx, 0xf51f8
mov eax, dword [0x250604]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250604]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf436e
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250608]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jle 0xf43b1
mov eax, dword [0x250608]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250624]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jle 0xf43cb
mov eax, dword [0x250624]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf43f9
mov eax, dword [0x250608]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jne 0xf43f9
mov eax, dword [0x250624]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
je 0xf450e
mov byte [ebp - 0x99], 1
push 0xf5214
lea edx, [ebp - 0x404]
mov eax, ebx
call fcn.0003006c
push dword [ebp - 0x404]
push 0xf4d00
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x408]
call fcn.0003006c
push dword [ebp - 0x408]
push 0xf4d00
mov eax, dword [0x250608]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x40c]
call fcn.0003006c
push dword [ebp - 0x40c]
push 0xf4d00
mov eax, dword [0x250624]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x410]
call fcn.0003006c
push dword [ebp - 0x410]
lea eax, [ebp - 0x400]
mov edx, 8
call fcn.00014068
mov edx, dword [ebp - 0x400]
lea eax, [ebp - 0x5c]
call fcn.000145ac
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf44c0
lea eax, [ebp - 0x414]
call fcn.0004818c
mov edx, dword [ebp - 0x414]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
push dword [eax]
lea eax, [ebp - 0x418]
call fcn.0002a3b8
push dword [ebp - 0x418]
push dword [ebp - 0x5c]
mov eax, dword [ebp + 8]
mov edx, 3
call fcn.00014700
cmp dword [ebp + 0x10], 0
je 0xf450e
lea ecx, [ebp - 0x41c]
mov edx, dword [ebp - 0x5c]
mov eax, dword [ebp + 0x10]
call fcn.0004a8e8
jmp 0xf450e
mov edx, 0xf51f8
mov eax, dword [0x250600]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250600]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf44ff
jmp 0xf452d
mov edx, 0xf51f8
mov eax, dword [0x250608]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250608]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf451e
jmp 0xf454c
mov edx, 0xf51f8
mov eax, dword [0x250624]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x250624]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp ebx, eax
jg 0xf453d
lea eax, [ebp - 0x68]
mov edx, 0x800
call fcn.00027218
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf463b
cmp byte [ebp - 0x99], 0
jne 0xf4663
call sub.kernel32.dll_GetTickCount
mov dword [0x250640], eax
mov eax, 0x250644
mov edx, dword [ebp - 8]
call fcn.0001442c
mov eax, dword [ebp - 0xc]
mov dword [0x250658], eax
push 0xf4c54
push dword [ebp - 4]
push 0xf5244
lea edx, [ebp - 0x43c]
xor eax, eax
mov al, byte [ebp - 0x7d]
call fcn.0003006c
push dword [ebp - 0x43c]
push 0xf5244
lea eax, [ebp - 0x438]
mov edx, 5
call fcn.00014068
mov edx, dword [ebp - 0x438]
lea eax, [ebp - 0x434]
call fcn.000145ac
push dword [ebp - 0x434]
push dword [ebp + 0x1c]
push 0xf4c30
push dword [ebp + 0x20]
push 0xf4c30
push dword [ebp - 8]
push 0xf4c7c
mov eax, dword [0x2505fc]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x1e4]
call fcn.00047530
lea edx, [ebp - 0x1e4]
lea eax, [ebp - 0x448]
call fcn.00013f4c
push dword [ebp - 0x448]
push 0xf4c90
lea edx, [ebp - 0x44c]
mov eax, dword [0x250628]
call fcn.0003006c
push dword [ebp - 0x44c]
push 0xf5250
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
sete al
lea edx, [ebp - 0x550]
call fcn.000294b8
lea edx, [ebp - 0x550]
lea eax, [ebp - 0x450]
call fcn.00013f4c
push dword [ebp - 0x450]
push 0xf4d00
lea edx, [ebp - 0x654]
mov al, byte [ebp - 0x99]
call fcn.000294b8
lea edx, [ebp - 0x654]
lea eax, [ebp - 0x554]
call fcn.00013f4c
push dword [ebp - 0x554]
lea eax, [ebp - 0x444]
mov edx, 8
call fcn.00014068
mov edx, dword [ebp - 0x444]
lea eax, [ebp - 0x440]
call fcn.000145ac
push dword [ebp - 0x440]
lea eax, [ebp - 0x5c]
mov edx, 7
call fcn.00014700
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.00014630
test eax, eax
jle 0xf47d2
lea eax, [ebp - 0x658]
call fcn.0004818c
mov edx, dword [ebp - 0x658]
mov eax, dword [ebp + 8]
call fcn.0001463c
mov eax, dword [ebp + 8]
mov eax, dword [ebp + 8]
mov edx, dword [ebp - 0x5c]
call fcn.0001463c
mov eax, dword [ebp + 8]
cmp dword [ebp + 0x10], 0
je 0xf4849
push 0xf4cb8
lea edx, [ebp - 0x668]
mov eax, dword [ebp + 0xc]
mov eax, dword [eax]
call fcn.00027478
push dword [ebp - 0x668]
push 0xf4c48
lea eax, [ebp - 0x664]
mov edx, 3
call fcn.00014068
mov edx, dword [ebp - 0x664]
lea eax, [ebp - 0x660]
call fcn.000145ac
lea eax, [ebp - 0x660]
mov edx, dword [ebp - 0x5c]
call fcn.0001463c
mov edx, dword [ebp - 0x660]
lea ecx, [ebp - 0x65c]
mov eax, dword [ebp + 0x10]
call fcn.00049e60
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf4bfb
lea eax, [ebp - 0x668]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x660]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x554]
call fcn.00013d18
lea eax, [ebp - 0x450]
mov edx, 4
call fcn.00013d3c
lea eax, [ebp - 0x440]
call fcn.000143f0
lea eax, [ebp - 0x43c]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x434]
mov edx, 4
call fcn.00014408
lea eax, [ebp - 0x424]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x41c]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x410]
mov edx, 5
call fcn.00013d3c
lea eax, [ebp - 0x3fc]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x3f0]
mov edx, 9
call fcn.00013d3c
lea eax, [ebp - 0x3cc]
call fcn.000143f0
lea eax, [ebp - 0x3c8]
call fcn.00013d18
lea eax, [ebp - 0x3c4]
mov edx, 6
call fcn.00014408
lea eax, [ebp - 0x3ac]
call fcn.00013d18
lea eax, [ebp - 0x3a8]
mov edx, 0xb
call fcn.00014408
lea eax, [ebp - 0x37c]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x374]
mov edx, 4
call fcn.00014408
lea eax, [ebp - 0x364]
mov edx, 5
call fcn.00013d3c
lea eax, [ebp - 0x350]
mov edx, 6
call fcn.00014408
lea eax, [ebp - 0x338]
mov edx, 3
call fcn.00013d3c
lea eax, [ebp - 0x32c]
call fcn.000143f0
lea eax, [ebp - 0x328]
call fcn.00013d18
lea eax, [ebp - 0x324]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x31c]
mov edx, 3
call fcn.00013d3c
lea eax, [ebp - 0x310]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x304]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x2fc]
mov edx, 8
call fcn.00014408
lea eax, [ebp - 0x2d8]
call fcn.000143f0
lea eax, [ebp - 0x2dc]
call fcn.000143f0
lea eax, [ebp - 0x2d4]
mov edx, 0x13
call fcn.00014408
lea eax, [ebp - 0x288]
mov edx, 3
call fcn.00013d3c
lea eax, [ebp - 0x27c]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x274]
mov edx, 6
call fcn.00013d3c
lea eax, [ebp - 0x25c]
mov edx, 4
call fcn.00014408
lea eax, [ebp - 0x24c]
call fcn.00013d18
lea eax, [ebp - 0x248]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x240]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x238]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x230]
mov edx, 4
call fcn.00013d3c
lea eax, [ebp - 0x220]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x214]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0x20c]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x200]
mov edx, 4
call fcn.00013d3c
lea eax, [ebp - 0x1f0]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x1e8]
call fcn.00013d18
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0xdc]
call fcn.000143f0
lea eax, [ebp - 0xd8]
call fcn.00013d18
lea eax, [ebp - 0xd4]
call fcn.000143f0
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00013d3c
lea eax, [ebp - 0xc8]
call fcn.000143f0
lea eax, [ebp - 0xc4]
call fcn.00013d18
lea eax, [ebp - 0xc0]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0xac]
call fcn.000143f0
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00014408
lea eax, [ebp - 0x88]
call fcn.00013d18
lea eax, [ebp - 0x78]
mov edx, 4
call fcn.00014408
lea eax, [ebp - 0x5c]
call fcn.000143f0
lea eax, [ebp - 0x54]
call fcn.000143f0
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.00014408
lea eax, [ebp - 0x3c]
call fcn.000143f0
lea eax, [ebp - 0x30]
mov edx, 4
call fcn.00014408
lea eax, [ebp - 0x1c]
call fcn.000143f0
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00014408
ret