Function at 0x10011f99
Capabilities:
Get session user name

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008cf01
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x2b0
push esi
push edi
and dword [ebp - 0x64], 0
mov dword [ebp - 0x50], 0x638ecf54
mov dword [ebp - 0x20], 0xd8f8f576
mov dword [ebp - 0x8c], 0xffffffff
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x7c], 0
jmp 0x10011fef
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 1
jge 0x10012005
mov eax, dword [ebp - 0x7c]
mov dword [ebp + eax*4 - 0x16c], 0x61fc42ff
jmp 0x10011fe8
mov byte [ebp - 0x35], 0
movzx eax, byte [ebp - 0x35]
test eax, eax
je 0x1001201f
push 0
push 0x324d
call fcn.100140d4
pop ecx
pop ecx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x20], 0x565e08cc
cmp dword [ebp - 0x20], 0
jne 0x1001203b
cmp dword [ebp - 0x20], 0
je 0x1001204f
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x50], eax
jl 0x1001204f
mov dword [ebp - 0x1b8], 1
jmp 0x10012056
and dword [ebp - 0x1b8], 0
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x50], eax
je 0x10012216
mov dword [ebp - 0x3c], 4
mov dword [ebp - 0xe0], 0xce7aebb
mov dword [ebp - 0x1c0], 0xffffffff
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x16c]
cmp dword [ebp - 0x3c], eax
je 0x100120b0
mov dword [ebp - 0x180], 1
jmp 0x100120b7
and dword [ebp - 0x180], 0
cmp dword [ebp - 0x3c], 0
je 0x100120d9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x16c], 0
je 0x100120d9
mov dword [ebp - 0xf4], 1
jmp 0x100120e0
and dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0xf4]
jne 0x100120fa
cmp dword [ebp - 0x3c], 0
jne 0x100120fa
and dword [ebp - 0xc0], 0
jmp 0x10012104
mov dword [ebp - 0xc0], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0xc0], eax
jl 0x1001211b
mov dword [ebp - 0x178], 1
jmp 0x10012122
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x178], eax
jge 0x10012139
mov dword [ebp - 0xc8], 1
jmp 0x10012140
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0xc8]
cmp eax, dword [ebp - 0x3c]
jle 0x1001215b
mov dword [ebp - 0xd0], 1
jmp 0x10012162
and dword [ebp - 0xd0], 0
mov eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0xd0]
jl 0x1001217c
mov dword [ebp - 0x188], 1
jmp 0x10012183
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0xab4d
jg 0x100121a1
cmp dword [ebp - 0x8c], 0
jne 0x100121a1
and dword [ebp - 0xd8], 0
jmp 0x100121ab
mov dword [ebp - 0xd8], 1
cmp dword [ebp - 0xd8], 1
je 0x100121bd
cmp dword [ebp - 0x204], 0
jne 0x100121cf
mov eax, 0x221ebc5f
test eax, eax
jne 0x100121cf
and dword [ebp - 0x190], 0
jmp 0x100121d9
mov dword [ebp - 0x190], 1
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0
jne 0x100121fe
push 9
pop eax
test eax, eax
jne 0x100121fe
and dword [ebp - 0x198], 0
jmp 0x10012208
mov dword [ebp - 0x198], 1
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1c0], eax
jmp 0x1001224e
mov dword [ebp - 0x20], 0xffffffe2
jmp 0x10012226
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff4
jge 0x1001224e
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1001224c
push 0x27ea
push 0x4123
push 0
call fcn.10015e4d
add esp, 0xc
jmp 0x1001221f
mov eax, dword [0x10681170]
and eax, 1
jne 0x10012282
mov eax, dword [0x10681170]
or eax, 1
mov dword [0x10681170], eax
and dword [ebp - 4], 0
mov ecx, 0x1068119c
call fcn.100187e1
push 0x1008f960
call fcn.10075756
pop ecx
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp + 0xc]
call fcn.100114b1
mov dword [ebp - 0xa4], eax
push 3
lea ecx, [ebp - 0x25c]
call fcn.10018732
mov dword [ebp - 4], 1
lea eax, [ebp - 0x25c]
push eax
push 0x2e4d
lea eax, [ebp - 0x244]
push eax
push 0
call fcn.100183b4
add esp, 0x10
mov byte [ebp - 0x33], 0
movzx eax, byte [ebp - 0x33]
test eax, eax
je 0x100122df
push 0xaea
push 0xa64
push 0
call dword [sym.imp.USER32.dll_DeleteMenu]
mov byte [ebp - 0x37], 0
movzx eax, byte [ebp - 0x37]
test eax, eax
je 0x100122ff
push 0x1de2
push 0
push 0x304b
call fcn.10013364
add esp, 0xc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x25c]
call fcn.100187b9
cmp dword [ebp - 0xa4], 3
jae 0x10012706
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1fc], eax
lea eax, [ebp - 0x210]
push eax
mov ecx, 0x1068119c
call fcn.10018898
push eax
lea eax, [ebp - 0x1fc]
push eax
lea eax, [ebp - 0x224]
push eax
mov ecx, 0x1068119c
call fcn.100188a6
mov ecx, eax
call fcn.100188bb
movzx eax, al
test eax, eax
je 0x10012706
mov dword [ebp - 0xe8], 0x85c9e53
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x80], 0x3531f145
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0xe8], 1
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xe8], eax
jg 0x100123aa
mov dword [ebp - 0xfc], 1
jmp 0x100123b1
and dword [ebp - 0xfc], 0
cmp dword [ebp - 0x18], 1
jne 0x100123c3
mov dword [ebp - 0x1a0], 1
jmp 0x100123ca
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1a0], eax
jge 0x100123e1
mov dword [ebp - 0x1a8], 1
jmp 0x100123e8
and dword [ebp - 0x1a8], 0
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x1a8]
jge 0x100123ff
mov dword [ebp - 0xf0], 1
jmp 0x10012406
and dword [ebp - 0xf0], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x68], eax
jl 0x10012423
mov dword [ebp - 0x17c], 1
jmp 0x1001242a
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xfc], eax
jg 0x1001244a
mov dword [ebp - 0x154], 1
jmp 0x10012451
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x154], eax
jne 0x10012468
mov dword [ebp - 0x104], 1
jmp 0x1001246f
and dword [ebp - 0x104], 0
cmp dword [ebp - 0x104], 0xffffffff
jg 0x10012484
mov dword [ebp - 0x194], 1
jmp 0x1001248b
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x194]
cmp eax, 0xa4c
jg 0x100124a7
mov dword [ebp - 0x10c], 1
jmp 0x100124ae
and dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x10c]
neg eax
je 0x100124dd
mov byte [ebp - 0x2e], 0
movzx eax, byte [ebp - 0x2e]
test eax, eax
je 0x100124d8
push 0x43f6
push 0
push 0x5b5
call fcn.10016abd
add esp, 0xc
jmp 0x100126b6
mov dword [ebp - 0x14], 0x8bc0
mov dword [ebp - 0xa0], 0xffffffff
mov dword [ebp - 0x1d0], 0xffffffff
mov dword [ebp - 0x208], 0x31364f2c
mov dword [ebp - 0x1e8], 0xa83cd0cd
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x68], eax
je 0x1001252f
mov dword [ebp - 0x15c], 1
jmp 0x10012536
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x15c], eax
jle 0x1001254d
mov dword [ebp - 0x114], 1
jmp 0x10012554
and dword [ebp - 0x114], 0
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0x14]
jge 0x1001256e
mov dword [ebp - 0x184], 1
jmp 0x10012575
and dword [ebp - 0x184], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x184]
jg 0x1001258c
mov dword [ebp - 0x11c], 1
jmp 0x10012593
and dword [ebp - 0x11c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x11c]
je 0x100125a5
push 0xfffffffffffffffc
pop eax
test eax, eax
jne 0x100125b7
cmp dword [ebp - 0x98], 0
jne 0x100125b7
and dword [ebp - 0x164], 0
jmp 0x100125c1
mov dword [ebp - 0x164], 1
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x164], eax
jle 0x100125db
mov dword [ebp - 0x124], 1
jmp 0x100125e2
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x14], eax
je 0x10012614
mov dword [ebp - 0x1a4], 1
jmp 0x1001261b
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1a4], eax
jge 0x10012662
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x200], 0x1552b9cb
push 0x1a55
push 0
lea eax, [ebp - 0x18]
push eax
push 0x658c
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp - 0x1c8]
push eax
call fcn.100134fb
add esp, 0x18
jmp 0x1001267c
mov byte [ebp - 0x30], 0
movzx eax, byte [ebp - 0x30]
test eax, eax
je 0x1001267c
push 0x2dc5
push 0
call fcn.10015db9
pop ecx
pop ecx
push 0
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x98]
push eax
push 0x5c1a
lea eax, [ebp - 0x1e8]
push eax
push 0xa8f
lea eax, [ebp - 0x1d0]
push eax
push 0x2e33
push 0x3ffa
call fcn.10016648
add esp, 0x24
mov byte [ebp - 0x32], 0
push 0x4424
lea eax, [ebp - 0x32]
push eax
push 0
push 0xa2b
call fcn.10013409
add esp, 0x10
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x1f8], eax
lea eax, [ebp - 0x1f8]
push eax
mov ecx, 0x1068119c
call fcn.10018835
push eax
mov ecx, dword [ebp + 8]
call fcn.10018604
mov eax, dword [ebp - 0x64]
or eax, 1
mov dword [ebp - 0x64], eax
mov eax, dword [ebp + 8]
jmp 0x10013261
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x1c], 0xe0f7
mov dword [ebp - 0x1f0], 0xb0badcab
mov dword [ebp - 0x88], 0
jmp 0x10012737
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x10012750
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x2c], 0xb194
jmp 0x1001272a
mov byte [ebp - 0x34], 0
movzx eax, byte [ebp - 0x34]
test eax, eax
je 0x10012761
call fcn.10011def
mov dword [ebp - 0x24], 0
jmp 0x10012771
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jne 0x10012a9f
mov dword [ebp - 0x10], 0x8531d14
mov eax, 0xe6f7fbf2
test eax, eax
je 0x100127e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 1
jl 0x100127a4
mov dword [ebp - 0x12c], 1
jmp 0x100127ab
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x12c], eax
jge 0x100127c8
cmp dword [ebp - 0x10], 0
je 0x100127c8
mov dword [ebp - 0xb8], 1
jmp 0x100127cf
and dword [ebp - 0xb8], 0
cmp dword [ebp - 0xb8], 0x98aa
jl 0x100127e7
mov dword [ebp - 0x134], 1
jmp 0x100127ee
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x134]
sub eax, ecx
je 0x10012811
cmp dword [ebp - 0x10], 0
je 0x10012811
mov dword [ebp - 0x18c], 1
jmp 0x10012818
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18c]
je 0x10012982
mov dword [ebp - 0xa8], 0x39e6a413
cmp dword [ebp - 0x10], 0
jne 0x10012843
mov dword [ebp - 0xec], 1
jmp 0x1001284a
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x1c], 0
je 0x1001286e
cmp dword [ebp - 0x24], 0
je 0x1001286e
mov dword [ebp - 0x13c], 1
jmp 0x10012875
and dword [ebp - 0x13c], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x13c], eax
jg 0x1001288c
mov dword [ebp - 0x174], 1
jmp 0x10012893
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x174]
test eax, eax
je 0x100128ba
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
je 0x100128ba
mov dword [ebp - 0x144], 1
jmp 0x100128c1
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x144], eax
jle 0x100128d8
mov dword [ebp - 0x19c], 1
jmp 0x100128df
and dword [ebp - 0x19c], 0
cmp dword [ebp - 0x19c], 1
jle 0x100128f4
mov dword [ebp - 0x14c], 1
jmp 0x100128fb
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 1
jl 0x10012910
mov dword [ebp - 0x1d8], 1
jmp 0x10012917
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x22c], eax
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xec], eax
jle 0x1001293a
mov dword [ebp - 0xf8], 1
jmp 0x10012941
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0xf8]
lea eax, [ecx + eax - 0x51232810]
cmp eax, 0x1912
jg 0x10012964
mov dword [ebp - 0x100], 1
jmp 0x1001296b
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x100]
mov dword [ebp - 0x1f0], eax
jmp 0x10012a9a
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1bc], 0x1fa46b4c
mov dword [ebp - 0x1c], 0
jmp 0x100129a6
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10012a84
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1e0]
cmp dword [ebp + eax*4 - 0x2c], ecx
jl 0x10012a48
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c], 0
jl 0x100129dc
mov dword [ebp - 0x108], 1
jmp 0x100129e3
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x108], eax
jl 0x100129fa
mov dword [ebp - 0x110], 1
jmp 0x10012a01
and dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x2c]
add eax, dword [ebp - 0x110]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x2c]
jl 0x10012a26
mov dword [ebp - 0x118], 1
jmp 0x10012a2d
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x2c]
cmp dword [ebp - 0x118], eax
jle 0x10012a48
mov dword [ebp - 0x120], 1
jmp 0x10012a4f
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x10], 0
jmp 0x10012a6b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x10012a7f
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x2c], 0
je 0x10012a7d
jmp 0x10012a7f
jmp 0x10012a64
jmp 0x1001299f
mov byte [ebp - 0x36], 0
movzx eax, byte [ebp - 0x36]
test eax, eax
je 0x10012a9a
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x1001276a
lea eax, [ebp - 0x2bc]
push eax
call fcn.100097d9
pop ecx
mov esi, eax
lea edi, [ebp - 0x29c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x29c]
lea edi, [ebp - 0x2a8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x44], 0x32ffab8c
push 2
lea ecx, [ebp - 0x1b4]
call fcn.10018732
mov dword [ebp - 4], 2
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x228], 8
push 1
lea ecx, [ebp - 0x26c]
call fcn.10018732
mov byte [ebp - 4], 3
mov dword [ebp - 0x240], 0x2ad14ca7
mov dword [ebp - 0x168], 0
push 0
push 0x7e4d
push 0x462
push 0x35a
push 0x508e
push 0x43fd
push 0x2f96
push 0x11b6
lea eax, [ebp - 0x48]
push eax
push 0x4edd
lea eax, [ebp - 0x1b4]
push eax
push 0x6c02
push 0x77d6
push 0x362a
call fcn.100141cb
add esp, 0x38
mov dword [ebp - 0x48], 0
jmp 0x10012b7d
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10012b93
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x2b0], 1
jmp 0x10012b76
push 0
push 0x59c8
lea eax, [ebp - 0x26c]
push eax
lea eax, [ebp - 0x48]
push eax
push 0x5db4
call fcn.1001659e
add esp, 0x14
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jne 0x10012d23
mov eax, 0xc8748afa
test eax, eax
je 0x10012d1a
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x260], eax
mov eax, 0xffff
test eax, eax
jne 0x10012bfc
mov eax, 0xe11a
test eax, eax
jne 0x10012bfc
and dword [ebp - 0x128], 0
jmp 0x10012c06
mov dword [ebp - 0x128], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x128], eax
jg 0x10012c1d
mov dword [ebp - 0x130], 1
jmp 0x10012c24
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x28]
test eax, eax
jne 0x10012c44
cmp dword [ebp - 0x28], 0
jne 0x10012c44
and dword [ebp - 0x138], 0
jmp 0x10012c4e
mov dword [ebp - 0x138], 1
mov esi, dword [ebp - 0x44]
imul esi, dword [ebp - 0x138]
push 0
lea ecx, [ebp - 0x1b4]
call fcn.100187be
cmp esi, dword [eax]
jl 0x10012c75
mov dword [ebp - 0x140], 1
jmp 0x10012c7c
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x140], eax
jl 0x10012c93
mov dword [ebp - 0x148], 1
jmp 0x10012c9a
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x148]
neg eax
je 0x10012cb7
xor eax, eax
je 0x10012cb7
mov dword [ebp - 0x1c4], 1
jmp 0x10012cbe
and dword [ebp - 0x1c4], 0
push 0
lea ecx, [ebp - 0x1b4]
call fcn.100187be
mov esi, eax
push 0
lea ecx, [ebp - 0x1b4]
call fcn.100187be
mov ecx, dword [esi]
add ecx, dword [eax]
jne 0x10012cef
cmp dword [ebp - 0x44], 0
jne 0x10012cef
and dword [ebp - 0x150], 0
jmp 0x10012cf9
mov dword [ebp - 0x150], 1
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
je 0x10012d1a
push 1
lea ecx, [ebp - 0x1b4]
call fcn.100187be
cmp dword [eax], 0
jne 0x10012d23
and dword [ebp - 0x158], 0
jmp 0x10012d2d
mov dword [ebp - 0x158], 1
push 0
lea ecx, [ebp - 0x1b4]
call fcn.100187be
mov ecx, dword [ebp - 0x158]
cmp ecx, dword [eax]
jl 0x10012d50
mov dword [ebp - 0x160], 1
jmp 0x10012d57
and dword [ebp - 0x160], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x26c]
call fcn.100187b9
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1b4]
call fcn.100187b9
mov ecx, dword [ebp + 0xc]
call fcn.100115ad
mov dword [ebp - 0x1e4], eax
mov dword [ebp - 0x84], 0xd3df75dc
mov dword [ebp - 0x1d4], 2
mov dword [ebp - 0x4c], 2
mov dword [ebp - 0x74], 0
jmp 0x10012dc7
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x10012ddd
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x290], 0x2189f42
jmp 0x10012dc0
mov dword [ebp - 0x84], 0
jmp 0x10012df6
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xa
jg 0x10012ed5
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x54], 0x590f0234
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
je 0x10012e36
push 0xfffffffffffffffa
pop eax
test eax, eax
je 0x10012e36
mov dword [ebp - 0x1dc], 1
jmp 0x10012e3d
and dword [ebp - 0x1dc], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x238], eax
mov eax, dword [ebp - 0x90]
sub eax, dword [ebp - 0x90]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x4c], 2
jmp 0x10012e68
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jl 0x10012ed0
mov dword [ebp - 0x54], 0
jmp 0x10012e7e
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jg 0x10012ece
mov eax, dword [ebp - 0x4c]
cmp dword [ebp + eax*4 - 0x290], 0
je 0x10012e93
jmp 0x10012ece
mov byte [ebp - 0x2f], 0
movzx eax, byte [ebp - 0x2f]
test eax, eax
je 0x10012ecc
push 1
push 0x94f
push 0x47ad
push 0x484
push 0x7111
push 0x1230
push 0x5186
push 0x5676
call fcn.10011e03
add esp, 0x20
jmp 0x10012e77
jmp 0x10012e61
jmp 0x10012de9
lea eax, [ebp - 0x2a8]
push eax
push dword [ebp - 0x1e4]
push dword [ebp - 0xa4]
lea eax, [ebp - 0x284]
push eax
call fcn.100117f0
add esp, 0x10
mov dword [ebp - 4], 4
mov dword [ebp - 0x94], 0xdbe8e56f
push 1
lea ecx, [ebp - 0xb4]
call fcn.10018732
mov byte [ebp - 4], 5
mov dword [ebp - 0x60], 0xa9b8fa48
mov dword [ebp - 0x5c], 0xfffffffa
mov dword [ebp - 0x70], 0x55f992db
mov dword [ebp - 0x9c], 0xfffffff6
mov dword [ebp - 0x58], 0xb03be465
mov dword [ebp - 0x6c], 0
jmp 0x10012f4f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x10012f68
push dword [ebp - 0x6c]
lea ecx, [ebp - 0xb4]
call fcn.100187be
or dword [eax], 0xffffffff
jmp 0x10012f48
push 0
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x70]
push eax
push 0x2c46
lea eax, [ebp - 0xb4]
push eax
push 0x6640
lea eax, [ebp - 0x60]
push eax
call fcn.10016374
add esp, 0x28
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
cmp dword [ebp - 0x70], 0
je 0x100130e6
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x94], eax
jg 0x10012fd5
cmp dword [ebp - 0x58], 0
je 0x10012fd5
mov dword [ebp - 0x170], 1
jmp 0x10012fdc
and dword [ebp - 0x170], 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
mov eax, dword [eax]
add eax, dword [ebp - 0x170]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jle 0x1001300c
mov dword [ebp - 0xbc], 1
jmp 0x10013013
and dword [ebp - 0xbc], 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
mov ecx, dword [ebp - 0xbc]
cmp ecx, dword [eax]
jge 0x10013036
mov dword [ebp - 0x1ec], 1
jmp 0x1001303d
and dword [ebp - 0x1ec], 0
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x220], eax
mov eax, 0xb1f05996
test eax, eax
jne 0x1001305e
cmp dword [ebp - 0x60], 0
jne 0x1001305e
and dword [ebp - 0xc4], 0
jmp 0x10013068
mov dword [ebp - 0xc4], 1
mov esi, dword [ebp - 0xc4]
neg esi
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
imul esi, dword [eax]
test esi, esi
jle 0x10013090
mov dword [ebp - 0xcc], 1
jmp 0x10013097
and dword [ebp - 0xcc], 0
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
jne 0x100130b5
cmp dword [ebp - 0x5c], 0
jne 0x100130b5
and dword [ebp - 0x1f4], 0
jmp 0x100130bf
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x5c], 0
je 0x100130e6
mov eax, 0xe11f
test eax, eax
je 0x100130e6
mov dword [ebp - 0xd4], 1
jmp 0x100130ed
and dword [ebp - 0xd4], 0
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [eax]
jg 0x10013110
mov dword [ebp - 0xdc], 1
jmp 0x10013117
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0xdc], eax
jl 0x10013137
mov eax, 0x8383
test eax, eax
jne 0x10013137
and dword [ebp - 0xe4], 0
jmp 0x10013141
mov dword [ebp - 0xe4], 1
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x5c], eax
push 0
lea ecx, [ebp - 0xb4]
call fcn.100187be
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xb4]
call fcn.100187b9
cmp dword [ebp - 0xa4], 3
jae 0x10013237
push 3
lea ecx, [ebp - 0x250]
call fcn.10018732
mov byte [ebp - 4], 6
mov dword [ebp - 0x78], 1
push 0x2aa4
lea eax, [ebp - 0x250]
push eax
lea eax, [ebp - 0x214]
push eax
push 0x6df3
push 0
call fcn.100132bd
add esp, 0x14
mov dword [ebp - 0x78], 2
jmp 0x100131c5
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jl 0x100131df
mov byte [ebp - 0x2d], 0
movzx eax, byte [ebp - 0x2d]
test eax, eax
je 0x100131dd
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
jmp 0x100131be
mov byte [ebp - 0x31], 0
movzx eax, byte [ebp - 0x31]
test eax, eax
je 0x1001320e
push 0x99c
push 0x40e0
push 0x6206
push 0
push 0x34e2
push 0x5f0a
call fcn.10015b74
add esp, 0x18
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x250]
call fcn.100187b9
push 0x1068119c
push 1
lea eax, [ebp - 0x284]
push eax
lea eax, [ebp + 0xc]
push eax
call fcn.10011f3d
add esp, 0x10
lea eax, [ebp - 0x284]
push eax
mov ecx, dword [ebp + 8]
call fcn.1001863b
mov eax, dword [ebp - 0x64]
or eax, 1
mov dword [ebp - 0x64], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x284]
call fcn.10018694
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret