Function at 0x10009249
Capabilities:
Get common file path
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10083699
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1124
call fcn.1007f7d0
push esi
push edi
mov dword [ebp - 0x30], 0x1097
mov dword [ebp - 0x124], 0x1ee4cff1
push 3
lea ecx, [ebp - 0x998]
call fcn.10016405
and dword [ebp - 4], 0
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x2e0], 3
mov dword [ebp - 0xb04], 0x8f949145
mov dword [ebp - 0xdd0], 0xe133
mov dword [ebp - 0xd78], 0
mov dword [ebp - 0x810], 0x6e7
mov dword [ebp - 0xd80], 0xffff
mov dword [ebp - 0x2d8], 0
jmp 0x100092ee
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x1000930d
push dword [ebp - 0x2d8]
lea ecx, [ebp - 0x998]
call fcn.1001646b
or dword [eax], 0xffffffff
jmp 0x100092e1
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jle 0x1000932a
mov dword [ebp - 0x534], 1
jmp 0x10009331
and dword [ebp - 0x534], 0
cmp dword [ebp - 0x534], 0xc570
je 0x10009349
mov dword [ebp - 0x908], 1
jmp 0x10009350
and dword [ebp - 0x908], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x908], eax
jle 0x10009367
mov dword [ebp - 0x910], 1
jmp 0x1000936e
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x910]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x124]
imul eax, eax, 0xc44d
cmp eax, 0x71a0
jne 0x1000939c
mov dword [ebp - 0xa08], 1
jmp 0x100093a3
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xdd4], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x918], eax
push 0
lea ecx, [ebp - 0x998]
call fcn.1001646b
mov ecx, dword [ebp - 0x918]
mov dword [eax], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x918], eax
jne 0x100093f3
mov eax, 0xe58ed0bd
test eax, eax
je 0x100093f3
mov dword [ebp - 0x920], 1
jmp 0x100093fa
and dword [ebp - 0x920], 0
mov eax, dword [ebp - 0x920]
add eax, 0x57673425
cmp eax, 0xb2fa
jge 0x10009418
mov dword [ebp - 0x928], 1
jmp 0x1000941f
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x928]
jl 0x10009436
mov dword [ebp - 0x39c], 1
jmp 0x1000943d
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x39c]
jne 0x1000945d
cmp dword [ebp - 0x90], 0
jne 0x1000945d
and dword [ebp - 0x8d8], 0
jmp 0x10009467
mov dword [ebp - 0x8d8], 1
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x8d8], eax
jle 0x10009481
mov dword [ebp - 0x3a4], 1
jmp 0x10009488
and dword [ebp - 0x3a4], 0
cmp dword [ebp - 0x3a4], 0xfffffff9
jle 0x1000949d
mov dword [ebp - 0xaf4], 1
jmp 0x100094a4
and dword [ebp - 0xaf4], 0
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x90]
mov dword [ebp - 0xafc], 1
jmp 0x100094c6
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xde4], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xdec], eax
mov dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x2e0]
imul eax, dword [ebp - 0x90]
test eax, eax
je 0x1000950b
cmp dword [ebp - 0x90], 0
je 0x1000950b
mov dword [ebp - 0x8e8], 1
jmp 0x10009512
and dword [ebp - 0x8e8], 0
mov eax, dword [ebp - 0x8e8]
mov dword [ebp - 0xb04], eax
mov dword [ebp - 0x124], 0
jmp 0x10009537
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xfffffff7
jge 0x100097fe
mov dword [ebp - 0x5c], 0xcf58a412
push 3
lea ecx, [ebp - 0xcf8]
call fcn.10016405
mov byte [ebp - 4], 1
push 1
lea ecx, [ebp - 0xf6c]
call fcn.10016405
mov byte [ebp - 4], 2
mov dword [ebp - 0xdf4], 0xa200
mov dword [ebp - 0x8c], 0
jmp 0x10009590
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x100095b2
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xcf8]
call fcn.1001646b
mov dword [eax], 0xa26b1312
jmp 0x10009583
mov dword [ebp - 0x8c], 0
jmp 0x100095cb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 1
jge 0x100095ed
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xf6c]
call fcn.1001646b
mov dword [eax], 1
jmp 0x100095be
cmp dword [ebp - 0x30], 0
jne 0x10009669
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0xdfc], eax
mov esi, dword [ebp - 0x5c]
push 2
lea ecx, [ebp - 0x998]
call fcn.1001646b
mov ecx, dword [ebp - 0x5c]
imul ecx, dword [eax]
add esi, ecx
je 0x10009628
cmp dword [ebp - 0x5c], 0
je 0x10009628
mov dword [ebp - 0x3ac], 1
jmp 0x1000962f
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0xfffffff6
jae 0x10009650
mov dword [ebp - 0x8f0], 1
jmp 0x10009657
and dword [ebp - 0x8f0], 0
cmp dword [ebp - 0x8f0], 5
je 0x10009669
and dword [ebp - 0x3b4], 0
jmp 0x10009673
mov dword [ebp - 0x3b4], 1
push 2
lea ecx, [ebp - 0x998]
call fcn.1001646b
mov ecx, dword [ebp - 0x3b4]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x5c]
jl 0x1000969a
mov dword [ebp - 0x8f8], 1
jmp 0x100096a1
and dword [ebp - 0x8f8], 0
cmp dword [ebp - 0x8f8], 0x7c19c50e
jl 0x100096b9
mov dword [ebp - 0xb0c], 1
jmp 0x100096c0
and dword [ebp - 0xb0c], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x90]
cmp eax, dword [ebp - 0x5c]
jge 0x100096da
mov dword [ebp - 0x2e4], 1
jmp 0x100096e1
and dword [ebp - 0x2e4], 0
push 1
lea ecx, [ebp - 0xcf8]
call fcn.1001646b
mov ecx, dword [ebp - 0x2e4]
mov dword [eax], ecx
cmp dword [ebp - 0x2e4], 0xffffffff
jg 0x1000970b
mov dword [ebp - 0x900], 1
jmp 0x10009712
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x900], eax
jle 0x10009729
mov dword [ebp - 0x3c0], 1
jmp 0x10009730
and dword [ebp - 0x3c0], 0
cmp dword [ebp - 0x3c0], 0xfffd
ja 0x1000974e
cmp dword [ebp - 0x5c], 0
je 0x1000974e
mov dword [ebp - 0x6a4], 1
jmp 0x10009755
and dword [ebp - 0x6a4], 0
cmp dword [ebp - 0x6a4], 1
jne 0x1000976a
mov dword [ebp - 0x3c8], 1
jmp 0x10009771
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x3c8]
jge 0x10009788
mov dword [ebp - 0x698], 1
jmp 0x1000978f
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
sub eax, dword [ebp - 0x124]
sub eax, dword [ebp - 0x5c]
cmp eax, 0xf29a
jne 0x100097b1
mov dword [ebp - 0x3d0], 1
jmp 0x100097b8
and dword [ebp - 0x3d0], 0
imul esi, dword [ebp - 0x3d0], 0xffffffff
push 0
lea ecx, [ebp - 0x998]
call fcn.1001646b
mov dword [eax], esi
mov eax, dword [ebp - 0x810]
dec eax
mov dword [ebp - 0x810], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xf6c]
call fcn.10016466
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xcf8]
call fcn.10016466
jmp 0x1000952a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x998]
call fcn.10016466
mov dword [ebp - 0x68], 0xa1836ccb
mov dword [ebp - 0x12c], 0xdb856137
mov dword [ebp - 0xb14], 0
push 3
lea ecx, [ebp - 0xd10]
call fcn.10016405
mov dword [ebp - 4], 3
mov dword [ebp - 0x110], 0
jmp 0x10009855
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 4
jge 0x10009871
mov eax, dword [ebp - 0x110]
mov dword [ebp + eax*4 - 0x1070], 0xdd1edb6b
jmp 0x10009848
mov dword [ebp - 0x110], 0
jmp 0x1000988a
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 3
jge 0x100098ac
push dword [ebp - 0x110]
lea ecx, [ebp - 0xd10]
call fcn.1001646b
mov dword [eax], 1
jmp 0x1000987d
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe04], eax
mov eax, 0x1078
test eax, eax
je 0x100098d5
mov eax, dword [ebp - 0x68]
add eax, dword [ebp - 0x12c]
je 0x100098d5
mov dword [ebp - 0x3d8], 1
jmp 0x100098dc
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x3d8]
jle 0x100098f6
mov dword [ebp - 0x6a0], 1
jmp 0x100098fd
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 1
jg 0x10009912
mov dword [ebp - 0x3e0], 1
jmp 0x10009919
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0xfc2da8af
ja 0x10009931
mov dword [ebp - 0x808], 1
jmp 0x10009938
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x68]
cmp eax, dword [ebp - 0x808]
jne 0x1000994f
mov dword [ebp - 0x3e8], 1
jmp 0x10009956
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x3e8], eax
je 0x10009970
mov dword [ebp - 0x6a8], 1
jmp 0x10009977
and dword [ebp - 0x6a8], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x6a8], eax
jle 0x1000998e
mov dword [ebp - 0x3f0], 1
jmp 0x10009995
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x3f0], eax
je 0x100099af
mov dword [ebp - 0x7fc], 1
jmp 0x100099b6
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x7fc], eax
je 0x100099cd
mov dword [ebp - 0x3f8], 1
jmp 0x100099d4
and dword [ebp - 0x3f8], 0
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0xb14], eax
mov eax, 0xffff
test eax, eax
je 0x10009a5d
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1070], 0
je 0x10009a37
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0xb1c], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb1c]
mov dword [ebp + eax - 0x1070], ecx
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0xe0c], eax
cmp dword [ebp - 0x12c], 0xcc7
jl 0x10009a37
mov dword [ebp - 0x6b0], 1
jmp 0x10009a3e
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
sub eax, dword [ebp - 0x12c]
cmp eax, 0xb171c250
jb 0x10009a5d
mov dword [ebp - 0x400], 1
jmp 0x10009a64
and dword [ebp - 0x400], 0
cmp dword [ebp - 0x400], 0x70b1b9b9
jle 0x10009a7c
mov dword [ebp - 0x894], 1
jmp 0x10009a83
and dword [ebp - 0x894], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x894], eax
je 0x10009a9a
mov dword [ebp - 0x408], 1
jmp 0x10009aa1
and dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x12c]
cmp eax, dword [ebp - 0x408]
jle 0x10009abb
mov dword [ebp - 0x6b8], 1
jmp 0x10009ac2
and dword [ebp - 0x6b8], 0
mov eax, dword [ebp - 0x6b8]
add eax, 6
cmp eax, dword [ebp - 0x68]
jg 0x10009adc
mov dword [ebp - 0x410], 1
jmp 0x10009ae3
and dword [ebp - 0x410], 0
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x410], eax
jge 0x10009b07
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1070], 0
jne 0x10009b07
and dword [ebp - 0x804], 0
jmp 0x10009b11
mov dword [ebp - 0x804], 1
push 0
lea ecx, [ebp - 0xd10]
call fcn.1001646b
mov ecx, dword [ebp - 0x804]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd10]
call fcn.10016466
push 2
lea ecx, [ebp - 0xd28]
call fcn.10016405
mov dword [ebp - 4], 4
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0xe14], 0x3292c5eb
mov dword [ebp - 0x36c], 0xfff7
mov dword [ebp - 0x98], 0
jmp 0x10009b80
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 2
jge 0x10009b9f
push dword [ebp - 0x98]
lea ecx, [ebp - 0xd28]
call fcn.1001646b
or dword [eax], 0xffffffff
jmp 0x10009b73
mov dword [ebp - 0x98], 0
jmp 0x10009bb8
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10009bd4
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0xb2c], 0
jmp 0x10009bab
mov dword [ebp - 0x1bc], 0
jmp 0x10009bed
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jg 0x10009d19
mov dword [ebp - 0xe1c], 0x1e4f1f13
mov dword [ebp - 0xe24], 0xe66c619a
mov dword [ebp - 0xd8], 0
jmp 0x10009c27
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x10009c43
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x1100], 0x4df6f978
jmp 0x10009c1a
mov dword [ebp - 0xd8], 0
jmp 0x10009c5c
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 1
jge 0x10009c78
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0xe2c], 1
jmp 0x10009c4f
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0xb24], eax
mov eax, dword [ebp - 0x36c]
dec eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0xb24], 0x278e
jle 0x10009ca9
mov dword [ebp - 0x418], 1
jmp 0x10009cb0
and dword [ebp - 0x418], 0
cmp dword [ebp - 0x418], 0x161ab6ec
je 0x10009cc8
mov dword [ebp - 0x6c0], 1
jmp 0x10009ccf
and dword [ebp - 0x6c0], 0
imul esi, dword [ebp - 0x6c0], 0xffff
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xd28]
call fcn.1001646b
cmp esi, dword [eax]
jne 0x10009cfa
mov dword [ebp - 0x420], 1
jmp 0x10009d01
and dword [ebp - 0x420], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x420]
mov dword [ebp + eax - 0xb2c], ecx
jmp 0x10009be0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd28]
call fcn.10016466
mov dword [ebp - 0x38], 0x1097
mov dword [ebp - 0x3c], 0xfffffffb
mov byte [ebp - 0x11e], 0
movzx eax, byte [ebp - 0x11e]
test eax, eax
je 0x10009d55
push 0x1105
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryW]
mov dword [ebp - 0x3c], 0
jmp 0x10009d65
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xfffffff6
jle 0x1000a124
push 1
lea ecx, [ebp - 0x938]
call fcn.10016405
mov dword [ebp - 4], 5
mov dword [ebp - 0x134], 0xd03248c6
mov dword [ebp - 0x13c], 0xffffffff
mov dword [ebp - 0xb3c], 0xfffffffe
mov dword [ebp - 0x89c], 0x352601c8
mov dword [ebp - 0xb44], 0xfffffff9
mov dword [ebp - 0x244], 0
jmp 0x10009dce
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 1
jge 0x10009df0
push dword [ebp - 0x244]
lea ecx, [ebp - 0x938]
call fcn.1001646b
mov dword [eax], 0xfffffffb
jmp 0x10009dc1
mov dword [ebp - 0x134], 0
jmp 0x10009e09
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0
jg 0x1000a110
push 1
lea ecx, [ebp - 0xbe0]
call fcn.10016405
mov byte [ebp - 4], 6
mov dword [ebp - 0x288], 0
jmp 0x10009e40
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 1
jge 0x10009e62
push dword [ebp - 0x288]
lea ecx, [ebp - 0xbe0]
call fcn.1001646b
mov dword [eax], 0x17f4039e
jmp 0x10009e33
push dword [ebp - 0x134]
lea ecx, [ebp - 0x938]
call fcn.1001646b
push 0
lea ecx, [ebp - 0x938]
call fcn.1001646b
mov ecx, dword [ebp - 0x3c]
cmp dword [eax], ecx
jne 0x10009e93
mov dword [ebp - 0x90c], 1
jmp 0x10009e9a
and dword [ebp - 0x90c], 0
push dword [ebp - 0x134]
lea ecx, [ebp - 0x938]
call fcn.1001646b
mov eax, dword [eax]
cmp eax, dword [ebp - 0x90c]
jg 0x10009ec1
mov dword [ebp - 0x428], 1
jmp 0x10009ec8
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0x7fa3dfad
jge 0x10009ee0
mov dword [ebp - 0x6c8], 1
jmp 0x10009ee7
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x3c]
cmp eax, dword [ebp - 0x6c8]
jl 0x10009efe
mov dword [ebp - 0x430], 1
jmp 0x10009f05
and dword [ebp - 0x430], 0
cmp dword [ebp - 0x430], 0x1c5a
jne 0x10009f1d
mov dword [ebp - 0x80c], 1
jmp 0x10009f24
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x80c], eax
je 0x10009f41
cmp dword [ebp - 0x3c], 0
je 0x10009f41
mov dword [ebp - 0x438], 1
jmp 0x10009f48
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x438]
cmp eax, 8
jae 0x10009f65
mov dword [ebp - 0x368], 1
jmp 0x10009f6c
and dword [ebp - 0x368], 0
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1001646b
mov ecx, dword [ebp - 0x368]
mov dword [eax], ecx
mov eax, dword [ebp - 0x368]
neg eax
imul eax, dword [ebp - 0x3c]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x13c], 0
jmp 0x10009fac
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jg 0x1000a0fc
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x938]
call fcn.1001646b
cmp dword [eax], 0
jne 0x10009fea
push 0
lea ecx, [ebp - 0x938]
call fcn.1001646b
cmp dword [eax], 0
jne 0x10009fea
and dword [ebp - 0xb34], 0
jmp 0x10009ff4
mov dword [ebp - 0xb34], 1
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xe34], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xe3c], eax
push dword [ebp - 0x13c]
lea ecx, [ebp - 0x938]
call fcn.1001646b
mov ecx, dword [ebp - 0xb3c]
cmp dword [eax], ecx
jle 0x1000a02d
mov dword [ebp - 0x6d0], 1
jmp 0x1000a034
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x6d0], eax
jle 0x1000a051
mov eax, 0x5ef1
test eax, eax
jne 0x1000a051
and dword [ebp - 0x440], 0
jmp 0x1000a05b
mov dword [ebp - 0x440], 1
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x89c], eax
cmp dword [ebp - 0x89c], 0xfffffffb
jl 0x1000a07c
mov dword [ebp - 0x448], 1
jmp 0x1000a083
and dword [ebp - 0x448], 0
cmp dword [ebp - 0x448], 0x53d9
jne 0x1000a09b
mov dword [ebp - 0x6d8], 1
jmp 0x1000a0a2
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0x20f620a3
jle 0x1000a0ba
mov dword [ebp - 0x450], 1
jmp 0x1000a0c1
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0xbe0]
call fcn.1001646b
mov ecx, dword [ebp - 0x450]
cmp ecx, dword [eax]
jl 0x1000a0e4
mov dword [ebp - 0x814], 1
jmp 0x1000a0eb
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0xb44], eax
jmp 0x10009f9f
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xbe0]
call fcn.10016466
jmp 0x10009dfc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x938]
call fcn.10016466
jmp 0x10009d5e
mov dword [ebp - 0x144], 0x1ee4cff1
push 3
lea ecx, [ebp - 0x9a4]
call fcn.10016405
mov dword [ebp - 4], 7
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x21c], 3
mov dword [ebp - 0x1c], 0x653d
mov dword [ebp - 0x20], 0xb3e713e1
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe44], eax
mov eax, 0x67e6aa16
test eax, eax
je 0x1000a18d
cmp dword [ebp - 0x1c], 0
je 0x1000a18d
or eax, 0xffffffff
je 0x1000a18d
mov dword [ebp - 0x458], 1
jmp 0x1000a194
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x458], eax
jle 0x1000a1ab
mov dword [ebp - 0x6e0], 1
jmp 0x1000a1b2
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x6e0], eax
je 0x1000a1c9
mov dword [ebp - 0x460], 1
jmp 0x1000a1d0
and dword [ebp - 0x460], 0
cmp dword [ebp - 0x460], 0x591b
je 0x1000a1e8
mov dword [ebp - 0x8ec], 1
jmp 0x1000a1ef
and dword [ebp - 0x8ec], 0
mov eax, dword [ebp - 0x8ec]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x20], eax
jle 0x1000a20c
mov dword [ebp - 0x468], 1
jmp 0x1000a213
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x468]
cmp eax, dword [ebp - 0x1c]
je 0x1000a225
cmp dword [ebp - 0x20], 0
cmp dword [ebp - 0x1c], 0
jne 0x1000a237
mov dword [ebp - 0x6e8], 1
jmp 0x1000a23e
and dword [ebp - 0x6e8], 0
cmp dword [ebp - 0x6e8], 0x16b5
jle 0x1000a256
mov dword [ebp - 0x470], 1
jmp 0x1000a25d
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x470]
cmp eax, dword [ebp - 0x1c]
jne 0x1000a278
mov dword [ebp - 0x81c], 1
jmp 0x1000a27f
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x81c], eax
jg 0x1000a2c3
mov dword [ebp - 0xb4c], 0xd7feae21
mov dword [ebp - 0x20], 0x13
jmp 0x1000a2a4
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xb
jg 0x1000a2be
mov dword [ebp - 0xb4c], 0xe80c6548
cmp dword [ebp - 0x20], 0
je 0x1000a2bc
jmp 0x1000a2be
jmp 0x1000a29d
jmp 0x1000a53b
push 1
lea ecx, [ebp - 0xb7c]
call fcn.10016405
mov byte [ebp - 4], 8
push 4
lea ecx, [ebp - 0xbec]
call fcn.10016405
mov byte [ebp - 4], 9
mov dword [ebp - 0x2ec], 0x76e30f4a
mov dword [ebp - 0x334], 0xffffffff
mov dword [ebp - 0xb64], 0xfb6f8a3e
mov dword [ebp - 0xa0], 0
jmp 0x1000a31c
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 1
jge 0x1000a33e
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xb7c]
call fcn.1001646b
mov dword [eax], 0x131dda87
jmp 0x1000a30f
mov dword [ebp - 0xa0], 0
jmp 0x1000a357
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1000a376
push dword [ebp - 0xa0]
lea ecx, [ebp - 0xbec]
call fcn.1001646b
or dword [eax], 0xffffffff
jmp 0x1000a34a
push 2
lea ecx, [ebp - 0xbec]
call fcn.1001646b
mov dword [eax], 0xac39b398
cmp dword [ebp - 0x20], 0xac39b398
jne 0x1000a39f
push 2
lea ecx, [ebp - 0xbec]
call fcn.1001646b
mov dword [ebp - 0x2ec], 7
mov eax, dword [ebp - 0x2ec]
cmp dword [ebp - 0x20], eax
jg 0x1000a3c0
mov dword [ebp - 0x478], 1
jmp 0x1000a3c7
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x478], eax
jg 0x1000a3e4
cmp dword [ebp - 0x2ec], 0
jne 0x1000a3e4
and dword [ebp - 0x6f0], 0
jmp 0x1000a3ee
mov dword [ebp - 0x6f0], 1
push 0
lea ecx, [ebp - 0xb7c]
call fcn.1001646b
mov ecx, dword [ebp - 0x6f0]
sub ecx, dword [eax]
cmp ecx, 0xb751
jg 0x1000a417
mov dword [ebp - 0x480], 1
jmp 0x1000a41e
and dword [ebp - 0x480], 0
mov eax, dword [ebp - 0x480]
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 0
je 0x1000a43f
mov dword [ebp - 0x8a4], 1
jmp 0x1000a446
and dword [ebp - 0x8a4], 0
push 0
lea ecx, [ebp - 0xb7c]
call fcn.1001646b
mov ecx, dword [ebp - 0x1c]
imul ecx, dword [ebp - 0x8a4]
mov eax, dword [eax]
sub eax, ecx
cmp eax, dword [ebp - 0x20]
jle 0x1000a472
mov dword [ebp - 0x488], 1
jmp 0x1000a479
and dword [ebp - 0x488], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x488], eax
je 0x1000a490
mov dword [ebp - 0xb54], 1
jmp 0x1000a497
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe4c], eax
cmp dword [ebp - 0x20], 4
jbe 0x1000a4b2
mov dword [ebp - 0x6f8], 1
jmp 0x1000a4b9
and dword [ebp - 0x6f8], 0
cmp dword [ebp - 0x6f8], 0xffff
je 0x1000a4d1
mov dword [ebp - 0x490], 1
jmp 0x1000a4d8
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x490], eax
jl 0x1000a4ef
mov dword [ebp - 0xb5c], 1
jmp 0x1000a4f6
and dword [ebp - 0xb5c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xb64], eax
push 0
lea ecx, [ebp - 0xb7c]
call fcn.1001646b
mov eax, dword [eax]
mov dword [ebp - 0x334], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xbec]
call fcn.10016466
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb7c]
call fcn.10016466
mov dword [ebp - 0xa14], 0x8f949145
mov dword [ebp - 0xe5c], 0xe133
mov dword [ebp - 0xe64], 0
mov dword [ebp - 0x204], 0xffffffff
mov dword [ebp - 0x204], 0xf
jmp 0x1000a57c
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0x19
jl 0x1000a5cf
mov dword [ebp - 0x290], 0
mov dword [ebp - 0x290], 0xfffffff6
jmp 0x1000a5a8
mov eax, dword [ebp - 0x290]
dec eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 0xffffffe2
jl 0x1000a5cd
mov byte [ebp - 0x14d], 0
movzx eax, byte [ebp - 0x14d]
test eax, eax
je 0x1000a5cb
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x1000a59b
jmp 0x1000a56f
mov dword [ebp - 0x8bc], 0x6e7
push 4
lea ecx, [ebp - 0x1f4]
call fcn.10016405
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1a8], 0x72159124
mov dword [ebp - 0x214], 0x238e486a
mov dword [ebp - 0x6c], 0x68cd546
mov dword [ebp - 0xe6c], 0xfffffffd
mov dword [ebp - 0x4e8], 0x4593f6a0
mov dword [ebp - 0xe74], 0xfffffffe
mov dword [ebp - 0xe7c], 1
push 3
lea ecx, [ebp - 0xf7c]
call fcn.10016405
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x1dc], 0x4912
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2c], 0
jmp 0x1000a662
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1000a67b
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
and dword [eax], 0
jmp 0x1000a65b
mov dword [ebp - 0x2c], 0
jmp 0x1000a68b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000a6a1
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd40], 0xffffffff
jmp 0x1000a684
mov dword [ebp - 0x2c], 0
jmp 0x1000a6b1
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000a6cd
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf7c]
call fcn.1001646b
mov dword [eax], 0x5708880d
jmp 0x1000a6aa
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov esi, eax
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1000a6fb
mov dword [ebp - 0x824], 1
jmp 0x1000a702
and dword [ebp - 0x824], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov ecx, dword [ebp - 0x824]
cmp ecx, dword [eax]
jg 0x1000a725
mov dword [ebp - 0x498], 1
jmp 0x1000a72c
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x1a8], eax
push 0
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov eax, dword [eax]
mov dword [ebp - 0x1a8], eax
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp dword [eax], 0
je 0x1000a772
push 5
pop eax
test eax, eax
je 0x1000a772
mov dword [ebp - 0x700], 1
jmp 0x1000a779
and dword [ebp - 0x700], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp dword [eax], 0
je 0x1000a79c
xor eax, eax
inc eax
je 0x1000a79c
mov dword [ebp - 0x4a0], 1
jmp 0x1000a7a3
and dword [ebp - 0x4a0], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov ecx, dword [ebp - 0x700]
add ecx, dword [ebp - 0x4a0]
cmp dword [eax], ecx
jg 0x1000a7cc
mov dword [ebp - 0x92c], 1
jmp 0x1000a7d3
and dword [ebp - 0x92c], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x214], eax
mov esi, dword [ebp - 0x214]
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp esi, dword [eax]
jg 0x1000a80e
mov dword [ebp - 0x4a8], 1
jmp 0x1000a815
and dword [ebp - 0x4a8], 0
mov esi, dword [ebp - 0x6c]
imul esi, dword [ebp - 0x4a8]
push 3
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp esi, dword [eax]
jne 0x1000a83c
mov dword [ebp - 0x708], 1
jmp 0x1000a843
and dword [ebp - 0x708], 0
cmp dword [ebp - 0x708], 0x9387
jne 0x1000a85b
mov dword [ebp - 0x4b0], 1
jmp 0x1000a862
and dword [ebp - 0x4b0], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov ecx, dword [ebp - 0x4b0]
cmp ecx, dword [eax]
jge 0x1000a885
mov dword [ebp - 0xb6c], 1
jmp 0x1000a88c
and dword [ebp - 0xb6c], 0
push 1
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp dword [ebp - 0x214], 0
je 0x1000a91b
mov dword [ebp - 0xe84], 0xfffffff6
mov dword [ebp - 0xe8c], 0x1fb9a31c
mov dword [ebp - 0xe94], 0xfffffffa
mov dword [ebp - 0xe9c], 0xffffffff
mov dword [ebp - 0xea4], 0x1aedf47
mov dword [ebp - 0x20c], 0
jmp 0x1000a8ed
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x1000a909
mov eax, dword [ebp - 0x20c]
mov dword [ebp + eax*4 - 0xeac], 0xfffffffe
jmp 0x1000a8e0
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
jmp 0x1000adbf
mov dword [ebp - 0x35c], 6
mov dword [ebp - 0x4e0], 0xcf10aa6f
mov dword [ebp - 0x6c], 0
jmp 0x1000a93f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jg 0x1000adbf
mov dword [ebp - 0xbac], 4
mov dword [ebp - 0x298], 0
jmp 0x1000a96c
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x1000a988
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0xbd4], 0x46d8da56
jmp 0x1000a95f
mov dword [ebp - 0x1dc], 0
jmp 0x1000a9a1
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jg 0x1000adb0
mov dword [ebp - 0x304], 0xe8591f28
mov dword [ebp - 0xb9c], 0x54fcfb0f
push 1
lea ecx, [ebp - 0xc04]
call fcn.10016405
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xf8], 0
jmp 0x1000a9ec
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 2
jge 0x1000aa08
mov eax, dword [ebp - 0xf8]
mov dword [ebp + eax*4 - 0xc3c], 0
jmp 0x1000a9df
mov dword [ebp - 0xf8], 0
jmp 0x1000aa21
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x1000aa43
push dword [ebp - 0xf8]
lea ecx, [ebp - 0xc04]
call fcn.1001646b
mov dword [eax], 0x97c8
jmp 0x1000aa14
mov eax, dword [ebp - 0x6c]
inc eax
push eax
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
cmp dword [eax], 0
jne 0x1000aace
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0x1f4]
call fcn.1001646b
mov ecx, dword [ebp - 0x35c]
cmp dword [eax], ecx
jge 0x1000aa7f
mov dword [ebp - 0x82c], 1
jmp 0x1000aa86
and dword [ebp - 0x82c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp - 0x82c], eax
jge 0x1000aaa7
mov dword [ebp - 0x4b8], 1
jmp 0x1000aaae
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp - 0x304]
sub eax, 5
jne 0x1000aace
and dword [ebp - 0xb94], 0
jmp 0x1000aad8
mov dword [ebp - 0xb94], 1
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0xeb4], eax
xor eax, eax
inc eax
cmp eax, 0xffff
ja 0x1000aafa
mov dword [ebp - 0x2f4], 1
jmp 0x1000ab01
and dword [ebp - 0x2f4], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x2f4]
mov dword [ebp + eax - 0xc3c], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp - 0x2f4], eax
jg 0x1000ab35
mov dword [ebp - 0x710], 1
jmp 0x1000ab3c
and dword [ebp - 0x710], 0
mov eax, dword [ebp - 0x1a8]
cmp dword [ebp - 0x710], eax
jle 0x1000ab56
mov dword [ebp - 0x4c0], 1
jmp 0x1000ab5d
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x4c0]
add eax, 6
cmp eax, dword [ebp - 0xb9c]
jne 0x1000ab7a
mov dword [ebp - 0x8ac], 1
jmp 0x1000ab81
and dword [ebp - 0x8ac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp - 0x8ac], eax
je 0x1000aba1
mov dword [ebp - 0x4c8], 1
jmp 0x1000aba8
and dword [ebp - 0x4c8], 0
cmp dword [ebp - 0x4c8], 0xffffffff
jb 0x1000abbd
mov dword [ebp - 0x718], 1
jmp 0x1000abc4
and dword [ebp - 0x718], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp - 0x718], eax
jne 0x1000abe5
mov dword [ebp - 0x4d0], 1
jmp 0x1000abec
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xffffffff
jne 0x1000ac01
mov dword [ebp - 0x834], 1
jmp 0x1000ac08
and dword [ebp - 0x834], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
cmp dword [ebp - 0x834], eax
jl 0x1000ac29
mov dword [ebp - 0x4d8], 1
jmp 0x1000ac30
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 0xff5532cf
je 0x1000ac48
mov dword [ebp - 0xba4], 1
jmp 0x1000ac4f
and dword [ebp - 0xba4], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0xebc], eax
cmp dword [ebp - 0x35c], 0
je 0x1000ac74
xor eax, eax
je 0x1000ac74
mov dword [ebp - 0x720], 1
jmp 0x1000ac7b
and dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x4e0], eax
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0xec4], eax
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0xecc], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc3c], 0
jne 0x1000acc5
mov eax, dword [ebp - 0x6c]
cmp dword [ebp + eax*4 - 0xd40], 0
jne 0x1000acc5
and dword [ebp - 0x8f4], 0
jmp 0x1000accf
mov dword [ebp - 0x8f4], 1
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp + eax*4 - 0xd40]
imul eax, dword [ebp - 0x8f4]
cmp eax, 0xfffd
je 0x1000acf3
mov dword [ebp - 0x33c], 1
jmp 0x1000acfa
and dword [ebp - 0x33c], 0
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x33c]
mov dword [ebp + eax*4 - 0xd40], ecx
mov eax, dword [ebp - 0x33c]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0xed4], eax
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd4]
mov dword [ebp - 0xedc], eax
cmp dword [ebp - 0x304], 0
je 0x1000ad5c
push 0
lea ecx, [ebp - 0xc04]
call fcn.1001646b
cmp dword [eax], 0
je 0x1000ad5c
mov dword [ebp - 0x728], 1
jmp 0x1000ad63
and dword [ebp - 0x728], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x728], eax
jge 0x1000ad7a
mov dword [ebp - 0x4f0], 1
jmp 0x1000ad81
and dword [ebp - 0x4f0], 0
push 0
lea ecx, [ebp - 0xc04]
call fcn.1001646b
mov ecx, dword [ebp - 0x4f0]
add ecx, dword [eax]
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc04]
call fcn.10016466
jmp 0x1000a994
mov dword [ebp - 0xbac], 5
jmp 0x1000a938
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xf7c]
call fcn.10016466
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x1f4]
call fcn.10016466
mov dword [ebp - 0xee4], 0xffff
mov dword [ebp - 0x2a0], 0
jmp 0x1000ae00
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 3
jge 0x1000ae1f
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0x9a4]
call fcn.1001646b
or dword [eax], 0xffffffff
jmp 0x1000adf3
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xeec], eax
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x38], eax
jle 0x1000ae3c
mov dword [ebp - 0x83c], 1
jmp 0x1000ae43
and dword [ebp - 0x83c], 0
cmp dword [ebp - 0x83c], 0xc570
je 0x1000ae5b
mov dword [ebp - 0x4f8], 1
jmp 0x1000ae62
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x4f8], eax
jle 0x1000ae79
mov dword [ebp - 0x730], 1
jmp 0x1000ae80
and dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x144]
imul eax, eax, 0xc44d
cmp eax, 0x71a0
jne 0x1000aeae
mov dword [ebp - 0xbb4], 1
jmp 0x1000aeb5
and dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xef4], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xefc], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x500], eax
push 0
lea ecx, [ebp - 0x9a4]
call fcn.1001646b
mov ecx, dword [ebp - 0x500]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x500], eax
jne 0x1000af05
mov eax, 0xe58ed0bd
test eax, eax
je 0x1000af05
mov dword [ebp - 0x8b4], 1
jmp 0x1000af0c
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
add eax, 0x57673425
cmp eax, 0xb2fa
jge 0x1000af2a
mov dword [ebp - 0x508], 1
jmp 0x1000af31
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x508]
jl 0x1000af48
mov dword [ebp - 0x738], 1
jmp 0x1000af4f
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x738]
jne 0x1000af6f
cmp dword [ebp - 0xa8], 0
jne 0x1000af6f
and dword [ebp - 0x510], 0
jmp 0x1000af79
mov dword [ebp - 0x510], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x510], eax
jle 0x1000af93
mov dword [ebp - 0x844], 1
jmp 0x1000af9a
and dword [ebp - 0x844], 0
cmp dword [ebp - 0x844], 0xfffffff9
jle 0x1000afaf
mov dword [ebp - 0xa78], 1
jmp 0x1000afb6
and dword [ebp - 0xa78], 0
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0xa8]
mov dword [ebp - 0xa58], 1
jmp 0x1000afd8
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xf04], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xf0c], eax
mov dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
imul eax, dword [ebp - 0xa8]
test eax, eax
je 0x1000b01d
cmp dword [ebp - 0xa8], 0
je 0x1000b01d
mov dword [ebp - 0x518], 1
jmp 0x1000b024
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov dword [ebp - 0xa14], eax
mov dword [ebp - 0x144], 0
jmp 0x1000b049
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xfffffff7
jge 0x1000b2f2
mov dword [ebp - 0x64], 0xcf58a412
push 3
lea ecx, [ebp - 0xd58]
call fcn.10016405
mov byte [ebp - 4], 0xd
push 1
lea ecx, [ebp - 0xf8c]
call fcn.10016405
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xf14], 0xa200
mov dword [ebp - 0x78], 0
jmp 0x1000b099
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x1000b0b5
push dword [ebp - 0x78]
lea ecx, [ebp - 0xd58]
call fcn.1001646b
mov dword [eax], 0xa26b1312
jmp 0x1000b092
mov dword [ebp - 0x78], 0
jmp 0x1000b0c5
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1000b0e1
push dword [ebp - 0x78]
lea ecx, [ebp - 0xf8c]
call fcn.1001646b
mov dword [eax], 1
jmp 0x1000b0be
cmp dword [ebp - 0x38], 0
jne 0x1000b15d
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xf1c], eax
mov esi, dword [ebp - 0x64]
push 2
lea ecx, [ebp - 0x9a4]
call fcn.1001646b
mov ecx, dword [ebp - 0x64]
imul ecx, dword [eax]
add esi, ecx
je 0x1000b11c
cmp dword [ebp - 0x64], 0
je 0x1000b11c
mov dword [ebp - 0x740], 1
jmp 0x1000b123
and dword [ebp - 0x740], 0
mov eax, dword [ebp - 0x740]
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 0xfffffff6
jae 0x1000b144
mov dword [ebp - 0x520], 1
jmp 0x1000b14b
and dword [ebp - 0x520], 0
cmp dword [ebp - 0x520], 5
je 0x1000b15d
and dword [ebp - 0x914], 0
jmp 0x1000b167
mov dword [ebp - 0x914], 1
push 2
lea ecx, [ebp - 0x9a4]
call fcn.1001646b
mov ecx, dword [ebp - 0x914]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x64]
jl 0x1000b18e
mov dword [ebp - 0x528], 1
jmp 0x1000b195
and dword [ebp - 0x528], 0
cmp dword [ebp - 0x528], 0x7c19c50e
jl 0x1000b1ad
mov dword [ebp - 0xa9c], 1
jmp 0x1000b1b4
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x64]
jge 0x1000b1ce
mov dword [ebp - 0x364], 1
jmp 0x1000b1d5
and dword [ebp - 0x364], 0
push 1
lea ecx, [ebp - 0xd58]
call fcn.1001646b
mov ecx, dword [ebp - 0x364]
mov dword [eax], ecx
cmp dword [ebp - 0x364], 0xffffffff
jg 0x1000b1ff
mov dword [ebp - 0x748], 1
jmp 0x1000b206
and dword [ebp - 0x748], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x748], eax
jle 0x1000b21d
mov dword [ebp - 0x530], 1
jmp 0x1000b224
and dword [ebp - 0x530], 0
cmp dword [ebp - 0x530], 0xfffd
ja 0x1000b242
cmp dword [ebp - 0x64], 0
je 0x1000b242
mov dword [ebp - 0x84c], 1
jmp 0x1000b249
and dword [ebp - 0x84c], 0
cmp dword [ebp - 0x84c], 1
jne 0x1000b25e
mov dword [ebp - 0x538], 1
jmp 0x1000b265
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x538]
jge 0x1000b27c
mov dword [ebp - 0x750], 1
jmp 0x1000b283
and dword [ebp - 0x750], 0
mov eax, dword [ebp - 0x750]
sub eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x64]
cmp eax, 0xf29a
jne 0x1000b2a5
mov dword [ebp - 0x540], 1
jmp 0x1000b2ac
and dword [ebp - 0x540], 0
imul esi, dword [ebp - 0x540], 0xffffffff
push 0
lea ecx, [ebp - 0x9a4]
call fcn.1001646b
mov dword [eax], esi
mov eax, dword [ebp - 0x8bc]
dec eax
mov dword [ebp - 0x8bc], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xf8c]
call fcn.10016466
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xd58]
call fcn.10016466
jmp 0x1000b03c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9a4]
call fcn.10016466
mov dword [ebp - 0xe0], 0xffffffff
mov dword [ebp - 0x758], 4
mov dword [ebp - 0xaa4], 0
mov dword [ebp - 0x2a8], 0
jmp 0x1000b338
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 1
jge 0x1000b354
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x30c], 0x648261f
jmp 0x1000b32b
mov dword [ebp - 0xe0], 0
jmp 0x1000b36d
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1000b389
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x30c], 0x29be1d92
jmp 0x1000b360
mov dword [ebp - 0xe0], 0
jmp 0x1000b3a2
mov eax, dword [ebp - 0xe0]
dec eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0xffffffea
jle 0x1000b449
mov dword [ebp - 0xa1c], 2
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x30c]
mov dword [ebp - 0xf24], eax
mov eax, 0xfc22
test eax, eax
jne 0x1000b40f
mov eax, 0xf3d3
test eax, eax
je 0x1000b3f3
cmp dword [ebp - 0xa1c], 0
je 0x1000b3f3
mov dword [ebp - 0x548], 1
jmp 0x1000b3fa
and dword [ebp - 0x548], 0
cmp dword [ebp - 0x548], 0xf5872d9e
jne 0x1000b40f
and dword [ebp - 0x344], 0
jmp 0x1000b419
mov dword [ebp - 0x344], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x344]
mov dword [ebp + eax - 0x30c], ecx
mov eax, dword [ebp - 0x344]
mov dword [ebp - 0x758], eax
mov eax, dword [ebp - 0x758]
mov dword [ebp - 0xaa4], eax
jmp 0x1000b395
push 4
lea ecx, [ebp - 0xd4c]
call fcn.10016405
mov dword [ebp - 4], 0xf
mov dword [ebp - 0xf2c], 0xa3b3f365
mov dword [ebp - 0xf34], 1
mov dword [ebp - 0xf3c], 4
mov dword [ebp - 0xf44], 0xf9953e80
mov dword [ebp - 0xf4c], 0
mov dword [ebp - 0xf54], 0x49235799
push 2
lea ecx, [ebp - 0xd70]
call fcn.10016405
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xf5c], 0xb6ac39b3
mov dword [ebp - 0x10], 0
jmp 0x1000b4c4
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x1000b4e0
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd4c]
call fcn.1001646b
mov dword [eax], 0x997
jmp 0x1000b4bd
mov dword [ebp - 0x10], 0
jmp 0x1000b4f0
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000b506
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x10b4], 1
jmp 0x1000b4e9
mov dword [ebp - 0x10], 0
jmp 0x1000b516
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1000b52c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1024], 0x43a64e78
jmp 0x1000b50f
mov dword [ebp - 0x10], 0
jmp 0x1000b53c
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1000b558
push dword [ebp - 0x10]
lea ecx, [ebp - 0xd70]
call fcn.1001646b
mov dword [eax], 0x594484f7
jmp 0x1000b535
push 3
lea ecx, [ebp - 0xd4c]
call fcn.1001646b
cmp dword [eax], 1
jg 0x1000b576
mov dword [ebp - 0x550], 1
jmp 0x1000b57d
and dword [ebp - 0x550], 0
push 1
lea ecx, [ebp - 0xd70]
call fcn.1001646b
mov ecx, dword [ebp - 0x550]
mov dword [eax], ecx
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1000b5ac
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xd70]
call fcn.10016466
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd4c]
call fcn.10016466
mov dword [ebp - 0x34], 0x1097
mov dword [ebp - 0x164], 0x1ee4cff1
mov dword [ebp - 0x102c], 0x7c7c
push 2
lea ecx, [ebp - 0xf9c]
call fcn.10016405
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x1034], 0xfffffffb
mov dword [ebp - 0x103c], 0xffffffff
mov dword [ebp - 0x1044], 0
mov dword [ebp - 0x854], 0xf0a9b27f
mov dword [ebp - 0x224], 0
jmp 0x1000b63a
mov eax, dword [ebp - 0x224]
inc eax
mov dword [ebp - 0x224], eax
cmp dword [ebp - 0x224], 2
jge 0x1000b65c
push dword [ebp - 0x224]
lea ecx, [ebp - 0xf9c]
call fcn.1001646b
mov dword [eax], 0xfffffffa
jmp 0x1000b62d
mov eax, dword [ebp - 0x854]
inc eax
mov dword [ebp - 0x854], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf9c]
call fcn.10016466
push 3
lea ecx, [ebp - 0x98c]
call fcn.10016405
mov dword [ebp - 4], 0x12
mov dword [ebp - 0xc8], 1
mov dword [ebp - 0x24c], 3
mov dword [ebp - 0x1b4], 4
mov dword [ebp - 0x560], 0xfffffffb
mov dword [ebp - 0x768], 5
mov dword [ebp - 0x578], 0x80d68f98
mov dword [ebp - 0xa24], 0xffffffff
mov dword [ebp - 0x2b0], 0
jmp 0x1000b6eb
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 3
jge 0x1000b707
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0xce0], 0x9884cb8
jmp 0x1000b6de
cmp dword [ebp - 0x1b4], 0
je 0x1000b7e4
mov eax, dword [ebp - 0x1b4]
add eax, 0xdafb
cmp dword [ebp - 0x1b4], eax
jle 0x1000b733
mov dword [ebp - 0x558], 1
jmp 0x1000b73a
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x1b4]
cmp dword [ebp - 0x558], eax
jg 0x1000b754
mov dword [ebp - 0x760], 1
jmp 0x1000b75b
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x1b4]
sub eax, dword [ebp - 0x560]
cmp eax, dword [ebp - 0x1b4]
jge 0x1000b787
mov dword [ebp - 0x8fc], 1
jmp 0x1000b78e
and dword [ebp - 0x8fc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xce0]
add eax, dword [ebp - 0x8fc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xce0]
jg 0x1000b7bc
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 1
ja 0x1000b800
mov dword [ebp - 0x85c], 1
jmp 0x1000b807
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
mov dword [ebp - 0x578], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xce0]
cmp dword [ebp - 0x578], eax
je 0x1000b834
mov dword [ebp - 0x770], 1
jmp 0x1000b83b
and dword [ebp - 0x770], 0
cmp dword [ebp - 0x770], 1
je 0x1000b850
mov dword [ebp - 0x580], 1
jmp 0x1000b857
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
mov dword [ebp - 0xa24], eax
mov dword [ebp - 0xad4], 0x8f949145
mov dword [ebp - 0x104c], 0xe133
mov dword [ebp - 0x1054], 0
mov dword [ebp - 0x474], 0x6e7
mov dword [ebp - 0x74], 0xa1836ccb
mov dword [ebp - 0x14c], 0xdb856137
mov dword [ebp - 0xaac], 0
push 3
lea ecx, [ebp - 0xcec]
call fcn.10016405
mov byte [ebp - 4], 0x13
mov dword [ebp - 0xb0], 0
jmp 0x1000b8d0