Function at 0x1005116d
Capabilities:
Create directory
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100873ab
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd18
push esi
push edi
mov dword [ebp - 0x144], 0xfffffff8
mov dword [ebp - 0xf8], 0x5c0de450
mov dword [ebp - 0xf0], 0xddbf4df7
mov dword [ebp - 0x294], 0xda3bb1d4
mov dword [ebp - 0x83c], 3
mov dword [ebp - 0x938], 0x939efd91
mov dword [ebp - 0x258], 0
jmp 0x100511e2
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 2
jge 0x100511fe
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0x198], 0xc80fc3a0
jmp 0x100511d5
cmp dword [ebp - 0x144], 0
je 0x100512a7
cmp dword [ebp - 0x144], 0
je 0x100512a7
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
mov dword [ebp - 0xbec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
mov dword [ebp - 0xb54], eax
cmp dword [ebp - 0x144], 0
je 0x1005125c
mov eax, 0x5bfb
test eax, eax
je 0x1005125c
mov dword [ebp - 0x738], 1
jmp 0x10051263
and dword [ebp - 0x738], 0
mov eax, dword [ebp - 0x738]
sub eax, 4
cmp eax, 0x3dc99cdf
jg 0x1005127f
mov dword [ebp - 0x804], 1
jmp 0x10051286
and dword [ebp - 0x804], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
add eax, dword [ebp - 0x804]
je 0x100512a7
mov dword [ebp - 0x80c], 1
jmp 0x100512ae
and dword [ebp - 0x80c], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
cmp dword [ebp - 0x80c], eax
jle 0x100512cf
mov dword [ebp - 0x814], 1
jmp 0x100512d6
and dword [ebp - 0x814], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x814]
sub ecx, dword [ebp + eax - 0x198]
cmp ecx, 1
je 0x100512fa
mov dword [ebp - 0x81c], 1
jmp 0x10051301
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x81c], 0x2167fa5c
jle 0x10051319
mov dword [ebp - 0x880], 1
jmp 0x10051320
and dword [ebp - 0x880], 0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0xb64], eax
mov dword [ebp - 0xf0], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x198]
cmp dword [ebp - 0xf0], eax
jne 0x10051363
mov dword [ebp - 0x824], 1
jmp 0x1005136a
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x824], eax
jle 0x10051384
mov dword [ebp - 0x82c], 1
jmp 0x1005138b
and dword [ebp - 0x82c], 0
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x294], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
cmp dword [ebp - 0x294], eax
jl 0x100513b8
mov dword [ebp - 0x834], 1
jmp 0x100513bf
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x834]
mov dword [ebp - 0x83c], eax
mov eax, dword [ebp - 0x83c]
cmp dword [ebp - 0xf8], eax
jg 0x100513e5
mov dword [ebp - 0x844], 1
jmp 0x100513ec
and dword [ebp - 0x844], 0
mov eax, dword [ebp - 0x844]
sub eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0xf0]
je 0x1005140c
mov dword [ebp - 0x84c], 1
jmp 0x10051413
and dword [ebp - 0x84c], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x84c]
je 0x1005142d
mov dword [ebp - 0x340], 1
jmp 0x10051434
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x340], eax
jne 0x1005144e
mov dword [ebp - 0x6ec], 1
jmp 0x10051455
and dword [ebp - 0x6ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x198]
imul eax, dword [ebp - 0x6ec]
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0xf0]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
jae 0x1005148d
mov dword [ebp - 0x348], 1
jmp 0x10051494
and dword [ebp - 0x348], 0
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x348]
je 0x100514c4
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x198], 0
jne 0x100514c4
mov eax, 0xa8b1460d
test eax, eax
jne 0x100514c4
and dword [ebp - 0x6f4], 0
jmp 0x100514ce
mov dword [ebp - 0x6f4], 1
mov eax, dword [ebp - 0x6f4]
dec eax
jne 0x100514f9
cmp dword [ebp - 0x294], 0
jne 0x100514f9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x198], 0
jne 0x100514f9
and dword [ebp - 0x350], 0
jmp 0x10051503
mov dword [ebp - 0x350], 1
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0x350], eax
jne 0x1005151d
mov dword [ebp - 0x6fc], 1
jmp 0x10051524
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0xf8]
cmp eax, dword [ebp - 0x6fc]
jge 0x1005153e
mov dword [ebp - 0x358], 1
jmp 0x10051545
and dword [ebp - 0x358], 0
cmp dword [ebp - 0x358], 0xd145
jne 0x1005155d
mov dword [ebp - 0x704], 1
jmp 0x10051564
and dword [ebp - 0x704], 0
cmp dword [ebp - 0x704], 0xffffffff
jge 0x10051579
mov dword [ebp - 0x360], 1
jmp 0x10051580
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x938], eax
push 2
lea ecx, [ebp - 0x174]
call fcn.100189bc
and dword [ebp - 4], 0
mov dword [ebp - 0x28], 0xa66fe7d8
mov dword [ebp - 0x984], 0x2b5b
mov dword [ebp - 0x398], 0xfffffff7
push 2
lea ecx, [ebp - 0xac4]
call fcn.100189bc
mov byte [ebp - 4], 1
mov dword [ebp - 0x34], 0
jmp 0x100515d9
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x100515f5
push dword [ebp - 0x34]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov dword [eax], 0xffff
jmp 0x100515d2
mov dword [ebp - 0x34], 0
jmp 0x10051605
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1005161b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x2f4], 0x9a0165d3
jmp 0x100515fe
mov dword [ebp - 0x34], 0
jmp 0x1005162b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10051647
push dword [ebp - 0x34]
lea ecx, [ebp - 0xac4]
call fcn.10018a43
mov dword [eax], 0xc987
jmp 0x10051624
mov dword [ebp - 0x28], 1
jmp 0x10051657
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x10051aa1
mov dword [ebp - 0x38], 0x772304b2
mov dword [ebp - 0x72c], 0
mov dword [ebp - 0x190], 0xfffffff8
mov dword [ebp - 0x38], 1
jmp 0x1005168c
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x10051a42
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xb6c], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov esi, dword [eax]
add esi, dword [ebp - 0x38]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
imul esi, dword [eax]
push 1
lea ecx, [ebp - 0x174]
call fcn.10018a43
cmp esi, dword [eax]
jl 0x100516e0
mov dword [ebp - 0x70c], 1
jmp 0x100516e7
and dword [ebp - 0x70c], 0
mov eax, dword [ebp - 0x70c]
neg eax
cmp eax, 0xfc24489
jl 0x10051702
mov dword [ebp - 0x368], 1
jmp 0x10051709
and dword [ebp - 0x368], 0
push 1
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x368]
cmp ecx, dword [eax]
jle 0x1005172c
mov dword [ebp - 0x714], 1
jmp 0x10051733
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x714]
jl 0x1005174a
mov dword [ebp - 0x370], 1
jmp 0x10051751
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x370], eax
jg 0x10051768
mov dword [ebp - 0x71c], 1
jmp 0x1005176f
and dword [ebp - 0x71c], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x71c]
imul ecx, dword [eax]
imul eax, ecx, 0x70d2
cmp eax, 0x4879
jge 0x1005179f
mov dword [ebp - 0x378], 1
jmp 0x100517a6
and dword [ebp - 0x378], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x378]
cmp ecx, dword [eax]
jge 0x100517ca
mov dword [ebp - 0x724], 1
jmp 0x100517d1
and dword [ebp - 0x724], 0
push 0
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x724]
imul ecx, dword [eax]
sub ecx, dword [ebp - 0x38]
jne 0x100517fe
cmp dword [ebp - 0x28], 0
jne 0x100517fe
mov dword [ebp - 0x380], 1
jmp 0x10051805
and dword [ebp - 0x380], 0
mov eax, dword [ebp - 0x380]
mov dword [ebp - 0x72c], eax
cmp dword [ebp - 0x72c], 1
jne 0x1005182c
cmp dword [ebp - 0x28], 0
je 0x1005182c
mov dword [ebp - 0x388], 1
jmp 0x10051833
and dword [ebp - 0x388], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x388]
cmp ecx, dword [eax]
jle 0x10051857
mov dword [ebp - 0x940], 1
jmp 0x1005185e
and dword [ebp - 0x940], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
push 4
pop eax
imul eax, eax, 0
lea eax, [ebp + eax - 0x2f4]
mov dword [ebp - 0x734], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov ecx, dword [ebp - 0x734]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x734]
cmp dword [eax], 0
je 0x100518be
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f4], 0
je 0x100518be
mov dword [ebp - 0x390], 1
jmp 0x100518c5
and dword [ebp - 0x390], 0
cmp dword [ebp - 0x390], 0xdda259c
je 0x100518dd
mov dword [ebp - 0x948], 1
jmp 0x100518e4
and dword [ebp - 0x948], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0xb74], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2f4], 0
je 0x1005192a
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
cmp dword [eax], 0
je 0x1005192a
mov dword [ebp - 0x73c], 1
jmp 0x10051931
and dword [ebp - 0x73c], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0x73c]
jl 0x10051955
mov dword [ebp - 0x950], 1
jmp 0x1005195c
and dword [ebp - 0x950], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov eax, dword [ebp - 0x984]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0x398]
add eax, 3
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x190], 0xfffffff4
jmp 0x1005199e
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 7
jg 0x10051a3d
mov dword [ebp - 0x120], 0x54656e2e
mov dword [ebp - 0x260], 0
jmp 0x100519ce
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 2
jge 0x100519ea
mov eax, dword [ebp - 0x260]
mov dword [ebp + eax*4 - 0xb80], 0xffffffff
jmp 0x100519c1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x120]
mov dword [ebp + eax - 0xb80], ecx
mov dword [ebp - 0x120], 0
jmp 0x10051a16
mov eax, dword [ebp - 0x120]
inc eax
mov dword [ebp - 0x120], eax
cmp dword [ebp - 0x120], 2
jge 0x10051a38
push dword [ebp - 0x120]
lea ecx, [ebp - 0x174]
call fcn.10018a43
mov dword [eax], 0x56cf
jmp 0x10051a09
jmp 0x10051991
jmp 0x10051685
mov dword [ebp - 0x38], 0
jmp 0x10051a52
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jg 0x10051a9c
mov dword [ebp - 0xbb8], 0xffffffff
mov dword [ebp - 0xbc0], 0x15f74462
mov dword [ebp - 0xbc8], 0x85b5f732
push 0
lea ecx, [ebp - 0xac4]
call fcn.10018a43
mov dword [ebp - 0x744], eax
mov eax, dword [ebp - 0x744]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x744]
mov dword [ecx], eax
jmp 0x10051a4b
jmp 0x10051650
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xac4]
call fcn.10018a3e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10018a3e
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x100], 0xffffffff
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xbd0], eax
cmp dword [ebp - 0x90], 1
jg 0x10051af4
mov dword [ebp - 0x3a0], 1
jmp 0x10051afb
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x3a0], eax
jne 0x10051b15
mov dword [ebp - 0x74c], 1
jmp 0x10051b1c
and dword [ebp - 0x74c], 0
mov eax, dword [ebp - 0x90]
cmp dword [ebp - 0x74c], eax
jle 0x10051b36
mov dword [ebp - 0x3a8], 1
jmp 0x10051b3d
and dword [ebp - 0x3a8], 0
imul eax, dword [ebp - 0x3a8], 0
cmp eax, 0xffff
jne 0x10051b57
mov dword [ebp - 0x754], 1
jmp 0x10051b5e
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x754]
sub eax, 0x4b10994f
cmp eax, dword [ebp - 0x100]
jg 0x10051b7d
mov dword [ebp - 0x3b0], 1
jmp 0x10051b84
and dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x100]
cmp dword [ebp - 0x3b0], eax
jl 0x10051c21
mov dword [ebp - 0x98c], 0xfffffffd
mov dword [ebp - 0x90], 0xfffffffe
jmp 0x10051bb9
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x18
jle 0x10051c1f
mov dword [ebp - 0x100], 0
jmp 0x10051bdb
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 0x1b
jne 0x10051c1d
mov dword [ebp - 0x994], 0xa01c77dc
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10051c0f
push 0xab3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpynW]
mov eax, dword [ebp - 0x98c]
mov dword [ebp - 0x994], eax
jmp 0x10051bce
jmp 0x10051bac
jmp 0x10051c61
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10051c3b
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x10051c61
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CloseEnhMetaFile]
mov dword [ebp - 0x138], 0xfffffff8
mov dword [ebp - 0x58], 0xadae8c9f
mov dword [ebp - 0x304], 0xce55459e
mov dword [ebp - 0x64], 0xf3f7e813
mov dword [ebp - 0x3c], 0xa0246c38
mov dword [ebp - 0x314], 0x3758185f
mov dword [ebp - 0xa4], 6
mov dword [ebp - 0x3e8], 0xce88636e
mov dword [ebp - 0x30c], 0xffffffff
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xbd8], eax
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0xbe0], eax
mov eax, dword [ebp - 0x304]
sub eax, 0x2835357f
cmp dword [ebp - 0x58], eax
jle 0x10051ce3
mov dword [ebp - 0x75c], 1
jmp 0x10051cea
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
sub eax, dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xbe8], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xbf0], eax
cmp dword [ebp - 0x58], 0x2e65251c
jne 0x10051d1d
mov dword [ebp - 0x3b8], 1
jmp 0x10051d24
and dword [ebp - 0x3b8], 0
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3c], eax
jle 0x10052102
mov dword [ebp - 0x98], 1
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x9ac], 0x4f90bf56
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0xbf8], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x64], eax
jl 0x10051d74
mov dword [ebp - 0x99c], 1
jmp 0x10051d7b
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x64]
cmp dword [ebp - 0x314], eax
jg 0x10051d92
mov dword [ebp - 0x764], 1
jmp 0x10051d99
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jne 0x10051dc0
cmp dword [ebp - 0x98], 0
jne 0x10051dc0
and dword [ebp - 0x3c0], 0
jmp 0x10051dca
mov dword [ebp - 0x3c0], 1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c0], eax
jg 0x10051de1
mov dword [ebp - 0x9a4], 1
jmp 0x10051de8
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x64], eax
je 0x10051dfc
mov dword [ebp - 0x76c], 1
jmp 0x10051e03
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x76c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x98]
jge 0x10051e2f
mov dword [ebp - 0x3c8], 1
jmp 0x10051e36
and dword [ebp - 0x3c8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x3c8], eax
jne 0x10051e50
mov dword [ebp - 0x774], 1
jmp 0x10051e57
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x774], eax
jne 0x10051e6e
mov dword [ebp - 0x3d0], 1
jmp 0x10051e75
and dword [ebp - 0x3d0], 0
mov eax, dword [ebp - 0x3d0]
sub eax, dword [ebp - 0x3e8]
je 0x10051e98
cmp dword [ebp - 0x98], 0
je 0x10051e98
mov dword [ebp - 0x77c], 1
jmp 0x10051e9f
and dword [ebp - 0x77c], 0
mov eax, 0x5fec46bc
sub eax, dword [ebp - 0x77c]
sub eax, 0x6df
cmp eax, dword [ebp - 0x98]
jg 0x10051ec3
mov dword [ebp - 0x3d8], 1
jmp 0x10051eca
and dword [ebp - 0x3d8], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x3d8], eax
jle 0x10051ee4
mov dword [ebp - 0x784], 1
jmp 0x10051eeb
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
neg eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0xfffffff7
jg 0x10051f15
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x10051f15
mov dword [ebp - 0x3e0], 1
jmp 0x10051f1c
and dword [ebp - 0x3e0], 0
cmp dword [ebp - 0x3e0], 0x605d
jl 0x10051f34
mov dword [ebp - 0x78c], 1
jmp 0x10051f3b
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0x9ac], eax
mov dword [ebp - 0x58], 0xd
jmp 0x10051f57
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x13
jne 0x100520fd
mov dword [ebp - 0x794], 1
mov dword [ebp - 0x2fc], 0xebc5f7c0
mov dword [ebp - 0x79c], 0
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10051fa5
push 0
push 0x167c
push 0
push 0x71d
call dword [sym.imp.KERNEL32.dll_GetStringTypeW]
mov dword [ebp - 0xa4], 0x19
jmp 0x10051fbe
mov eax, dword [ebp - 0xa4]
dec eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x18
jg 0x100520f8
push 2
lea ecx, [ebp - 0xa00]
call fcn.100189bc
mov dword [ebp - 4], 2
mov dword [ebp - 0x268], 0
jmp 0x10051ff8
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 2
jge 0x1005201a
push dword [ebp - 0x268]
lea ecx, [ebp - 0xa00]
call fcn.10018a43
mov dword [eax], 0x2782
jmp 0x10051feb
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x160], eax
mov esi, dword [ebp - 0x160]
push 0
lea ecx, [ebp - 0xa00]
call fcn.10018a43
mov dword [eax], esi
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xc00], eax
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc08], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0xc10], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xc18], eax
mov dword [ebp - 0x794], 0xde8ed5e
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x2fc], eax
mov eax, dword [ebp - 0x2fc]
imul eax, dword [ebp - 0x79c]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x100520c1
mov dword [ebp - 0x3f0], 1
jmp 0x100520c8
and dword [ebp - 0x3f0], 0
push 0
lea ecx, [ebp - 0xa00]
call fcn.10018a43
mov ecx, dword [ebp - 0x3f0]
imul ecx, dword [eax]
mov dword [ebp - 0x79c], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa00]
call fcn.10018a3e
jmp 0x10051fb1
jmp 0x10051f50
jmp 0x10052297
mov dword [ebp - 0x9b4], 0xfb43b78c
mov dword [ebp - 0x3c], 0
jmp 0x1005211c
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 7
jl 0x10052297
mov dword [ebp - 0x7a4], 0
mov dword [ebp - 0x9d8], 0xa49df3c4
mov dword [ebp - 0x408], 0xe3f4d677
mov dword [ebp - 0x270], 0
jmp 0x1005215d
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 4
jge 0x10052179
mov eax, dword [ebp - 0x270]
mov dword [ebp + eax*4 - 0xd18], 0x4ba75048
jmp 0x10052150
cmp dword [ebp - 0x9b4], 0x9cd94668
ja 0x10052191
mov dword [ebp - 0x9bc], 1
jmp 0x10052198
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0x9d8], 0x7dc4cae1
mov eax, dword [ebp - 0x408]
add eax, dword [ebp - 0x304]
cmp dword [ebp - 0x30c], eax
jge 0x100521ce
mov dword [ebp - 0x31c], 1
jmp 0x100521d5
and dword [ebp - 0x31c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x31c]
mov dword [ebp + eax - 0xd18], ecx
mov eax, dword [ebp - 0x314]
cmp eax, dword [ebp - 0x31c]
je 0x10052202
mov dword [ebp - 0x3f8], 1
jmp 0x10052209
and dword [ebp - 0x3f8], 0
imul eax, dword [ebp - 0x3f8], 0xffffffff
cmp eax, 0xffffffff
jge 0x10052221
mov dword [ebp - 0x400], 1
jmp 0x10052228
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x7a4]
cmp dword [ebp - 0x400], eax
jg 0x10052242
mov dword [ebp - 0x7ac], 1
jmp 0x10052249
and dword [ebp - 0x7ac], 0
mov eax, dword [ebp - 0x7ac]
sub eax, dword [ebp - 0x408]
cmp eax, 0xffffffff
je 0x10052266
mov dword [ebp - 0x7b4], 1
jmp 0x1005226d
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x7b4]
mov dword [ebp - 0x64], eax
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x10052292
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x10052115
mov dword [ebp - 0x118], 0x5c0de450
mov dword [ebp - 0x110], 0xddbf4df7
mov dword [ebp - 0x154], 6
mov dword [ebp - 0x240], 0xfffffff8
mov dword [ebp - 0xc28], 0x5b1b6fd4
mov dword [ebp - 0x140], 0xfffffff8
mov dword [ebp - 0xc30], 7
mov dword [ebp - 0x280], 1
push 4
lea ecx, [ebp - 0xad0]
call fcn.100189bc
mov dword [ebp - 4], 3
mov dword [ebp - 0x278], 0
jmp 0x10052314
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 4
jge 0x10052333
push dword [ebp - 0x278]
lea ecx, [ebp - 0xad0]
call fcn.10018a43
or dword [eax], 0xffffffff
jmp 0x10052307
mov dword [ebp - 0x154], 0xa
jmp 0x1005234c
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0x1a
jne 0x1005244e
mov dword [ebp - 0x410], 0x6df37d45
push 2
lea ecx, [ebp - 0xa54]
call fcn.100189bc
mov byte [ebp - 4], 4
mov dword [ebp - 0x284], 0
jmp 0x1005238d
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 2
jge 0x100523af
push dword [ebp - 0x284]
lea ecx, [ebp - 0xa54]
call fcn.10018a43
mov dword [eax], 0xc8959310
jmp 0x10052380
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x100523ce
push 0x674
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0xc38], eax
mov eax, dword [ebp - 0x410]
cmp dword [ebp - 0x154], eax
je 0x100523f4
mov dword [ebp - 0x7bc], 1
jmp 0x100523fb
and dword [ebp - 0x7bc], 0
push 0
lea ecx, [ebp - 0xa54]
call fcn.10018a43
mov ecx, dword [ebp - 0x7bc]
cmp ecx, dword [eax]
jge 0x1005241e
mov dword [ebp - 0x418], 1
jmp 0x10052425
and dword [ebp - 0x418], 0
push 1
lea ecx, [ebp - 0xa54]
call fcn.10018a43
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xa54]
call fcn.10018a3e
jmp 0x1005233f
mov dword [ebp - 0x280], 0
jmp 0x10052467
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0x22
jle 0x100524e0
cmp dword [ebp - 0x140], 0
je 0x1005247b
jmp 0x100524e0
mov dword [ebp - 0x240], 3
jmp 0x10052494
mov eax, dword [ebp - 0x240]
dec eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 0
jl 0x100524db
mov dword [ebp - 0x140], 0
jmp 0x100524b6
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 3
jg 0x100524d9
push dword [ebp - 0x140]
lea ecx, [ebp - 0xad0]
call fcn.10018a43
cmp dword [eax], 0
je 0x100524d7
jmp 0x100524d9
jmp 0x100524a9
jmp 0x10052487
jmp 0x1005245a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad0]
call fcn.10018a3e
mov dword [ebp - 0x2e8], 0xda3bb1d4
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x17c], 0xff68e10d
mov dword [ebp - 0x7d4], 0x2377963f
mov dword [ebp - 0x430], 0xffffffff
mov dword [ebp - 0x7fc], 0x8968f25c
mov dword [ebp - 0x1c0], 0
jmp 0x10052541
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 3
jge 0x1005255d
mov eax, dword [ebp - 0x1c0]
mov dword [ebp + eax*4 - 0xccc], 0
jmp 0x10052534
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], eax
jg 0x10052571
mov dword [ebp - 0x7c4], 1
jmp 0x10052578
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x7c4]
cmp eax, dword [ebp - 0x1c]
je 0x10052592
mov dword [ebp - 0x420], 1
jmp 0x10052599
and dword [ebp - 0x420], 0
imul eax, dword [ebp - 0x420], 0x1d93
imul eax, dword [ebp - 0x1c]
test eax, eax
je 0x100525bd
cmp dword [ebp - 0x1c], 0
je 0x100525bd
mov dword [ebp - 0x9d4], 1
jmp 0x100525c4
and dword [ebp - 0x9d4], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc40], eax
mov eax, 0x622b
imul eax, eax, 0xf271
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
je 0x100525ee
cmp dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0
jne 0x10052606
cmp dword [ebp - 0x1c], 0
jne 0x10052606
and dword [ebp - 0x7cc], 0
jmp 0x10052610
mov dword [ebp - 0x7cc], 1
cmp dword [ebp - 0x7cc], 0
jg 0x10052625
mov dword [ebp - 0x930], 1
jmp 0x1005262c
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x1c], 0xa3888ad
jge 0x10052641
mov dword [ebp - 0x428], 1
jmp 0x10052648
and dword [ebp - 0x428], 0
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x7d4], eax
mov eax, dword [ebp - 0x7d4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x430], eax
je 0x1005267a
cmp dword [ebp - 0x17c], 0
je 0x1005267a
mov dword [ebp - 0x7dc], 1
jmp 0x10052681
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x7dc]
jle 0x10052698
mov dword [ebp - 0x88c], 1
jmp 0x1005269f
and dword [ebp - 0x88c], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc48], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc50], eax
or eax, 0xffffffff
cmp eax, 0xffffffff
jge 0x100526c5
mov dword [ebp - 0x438], 1
jmp 0x100526cc
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x438], eax
jge 0x100526e3
mov dword [ebp - 0x7e4], 1
jmp 0x100526ea
and dword [ebp - 0x7e4], 0
imul eax, dword [ebp - 0x7e4], 0
cmp eax, 0x4c3eec73
jg 0x10052704
mov dword [ebp - 0x440], 1
jmp 0x1005270b
and dword [ebp - 0x440], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x440], eax
jge 0x10052722
mov dword [ebp - 0x7ec], 1
jmp 0x10052729
and dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x7ec], eax
jg 0x10052740
mov dword [ebp - 0x448], 1
jmp 0x10052747
and dword [ebp - 0x448], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x448], eax
jge 0x1005275e
mov dword [ebp - 0x7f4], 1
jmp 0x10052765
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x7fc], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x7fc]
mov dword [ebp + eax - 0xccc], ecx
mov dword [ebp - 0x4a8], 3
mov dword [ebp - 0x970], 0x939efd91
mov dword [ebp - 0x248], 0
jmp 0x100527b5
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x100527d1
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x1a0], 0xc80fc3a0
jmp 0x100527a8
push 1
lea ecx, [ebp - 0xec]
call fcn.100189bc
mov dword [ebp - 4], 5
mov dword [ebp - 0x250], 0
jmp 0x100527fe
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x10052820
push dword [ebp - 0x250]
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov dword [eax], 0xfffffffe
jmp 0x100527f1
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov esi, eax
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov ecx, dword [esi]
cmp ecx, dword [eax]
je 0x1005284e
mov dword [ebp - 0x450], 1
jmp 0x10052855
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov esi, eax
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov ecx, dword [esi]
cmp ecx, dword [eax]
jl 0x10052883
mov dword [ebp - 0x960], 1
jmp 0x1005288a
and dword [ebp - 0x960], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov eax, dword [eax]
dec eax
imul eax, eax, 0x5d72
cmp dword [ebp - 0x450], eax
jl 0x100528c1
mov dword [ebp - 0x660], 1
jmp 0x100528c8
and dword [ebp - 0x660], 0
cmp dword [ebp - 0x660], 0
je 0x10052c9f
mov dword [ebp - 0x128], 0xd6b65720
mov dword [ebp - 0xc58], 0xfffffff6
mov dword [ebp - 0xc60], 0xffffffff
push 2
lea ecx, [ebp - 0xc88]
call fcn.100189bc
mov byte [ebp - 4], 6
mov dword [ebp - 0xc68], 0
mov dword [ebp - 0x1cc], 0
jmp 0x10052927
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 2
jge 0x10052946
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xc88]
call fcn.10018a43
and dword [eax], 0
jmp 0x1005291a
mov dword [ebp - 0x128], 0
jmp 0x1005295f
mov eax, dword [ebp - 0x128]
dec eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xffffffe3
jne 0x10052c8b
mov dword [ebp - 0x22c], 0xfffffff7
mov dword [ebp - 0xc70], 0
mov dword [ebp - 0x22c], 0
jmp 0x10052999
mov eax, dword [ebp - 0x22c]
inc eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x22c], 0x13
jne 0x10052c86
mov dword [ebp - 0x108], 0xfffffffe
mov dword [ebp - 0x15c], 0x7c914a3a
mov dword [ebp - 0xc78], 0xf40bf68
mov dword [ebp - 0x108], 5
jmp 0x100529dd
mov eax, dword [ebp - 0x108]
dec eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 0xfffffff7
je 0x10052c81
mov dword [ebp - 0x460], 0xfffffff9
mov dword [ebp - 0x45c], 0xfffffff9
mov dword [ebp - 0x458], 0xfffffff9
mov dword [ebp - 0x454], 0xfffffff9
mov dword [ebp - 0xcb8], 0x40b319
mov dword [ebp - 0xcc0], 4
mov dword [ebp - 0x1d4], 0
jmp 0x10052a3f
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 1
jge 0x10052a5b
mov eax, dword [ebp - 0x1d4]
mov dword [ebp + eax*4 - 0xca4], 0xa061fa46
jmp 0x10052a32
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x460], 0
jmp 0x10052a89
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x460]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x460], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x460], 0
jg 0x10052c7c
mov dword [ebp - 0xba4], 0xfbf3
mov dword [ebp - 0xbe4], 0xeedf6679
mov dword [ebp - 0xaf0], 0xc8ff05c8
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x460]
lea ecx, [ebp - 0xec]
call fcn.10018a43
cmp dword [eax], 0
jne 0x10052bb4
cmp dword [ebp - 0x128], 0
je 0x10052bab
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
imul eax, dword [eax], 0xf3b0639e
cmp eax, dword [ebp - 0x108]
jl 0x10052b1d
mov dword [ebp - 0x894], 1
jmp 0x10052b24
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x108], 0
je 0x10052b56
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x460]
lea ecx, [ebp - 0xec]
call fcn.10018a43
cmp dword [eax], 0
je 0x10052b56
mov dword [ebp - 0x468], 1
jmp 0x10052b5d
and dword [ebp - 0x468], 0
cmp dword [ebp - 0x468], 0x5674
jle 0x10052b75
mov dword [ebp - 0x760], 1
jmp 0x10052b7c
and dword [ebp - 0x760], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x760], eax
jge 0x10052b96
mov dword [ebp - 0x470], 1
jmp 0x10052b9d
and dword [ebp - 0x470], 0
mov eax, dword [ebp - 0x15c]
cmp dword [ebp - 0x470], eax
jle 0x10052bb4
and dword [ebp - 0x668], 0
jmp 0x10052bbe
mov dword [ebp - 0x668], 1
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x460]
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0x668]
jne 0x10052bec
mov dword [ebp - 0x478], 1
jmp 0x10052bf3
and dword [ebp - 0x478], 0
push 4
pop eax
shl eax, 0
push dword [ebp + eax - 0x460]
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov ecx, dword [ebp - 0x478]
mov dword [eax], ecx
mov dword [ebp - 0x15c], 0xffffffff
jmp 0x10052c2c
mov eax, dword [ebp - 0x15c]
dec eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 0xfffffffe
jne 0x10052c77
mov dword [ebp - 0x9b8], 0xc8d535dd
mov dword [ebp - 0xc54], 0xfffffff6
mov dword [ebp - 0xaf8], 3
mov dword [ebp - 0x7e0], 0x605
cmp dword [ebp - 0x9b8], 0
je 0x10052c68
jmp 0x10052c77
mov eax, dword [ebp - 0x7e0]
dec eax
mov dword [ebp - 0x7e0], eax
jmp 0x10052c1f
jmp 0x10052a6e
jmp 0x100529d0
jmp 0x1005298c
jmp 0x10052952
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc88]
call fcn.10018a3e
jmp 0x10052d94
mov dword [ebp - 0x25c], 4
mov eax, dword [ebp - 0x25c]
mov dword [ebp - 0xae4], eax
cmp dword [ebp - 0x25c], 0x825d
jge 0x10052ccd
mov dword [ebp - 0x480], 1
jmp 0x10052cd4
and dword [ebp - 0x480], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0x480]
jge 0x10052cf7
mov dword [ebp - 0x89c], 1
jmp 0x10052cfe
and dword [ebp - 0x89c], 0
mov esi, dword [ebp - 0x25c]
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
cmp esi, dword [eax]
jg 0x10052d21
mov dword [ebp - 0x968], 1
jmp 0x10052d28
and dword [ebp - 0x968], 0
cmp dword [ebp - 0x25c], 0xfffa
jne 0x10052d40
mov dword [ebp - 0x8a4], 1
jmp 0x10052d47
and dword [ebp - 0x8a4], 0
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov esi, eax
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov ecx, dword [esi]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov esi, eax
push 0
lea ecx, [ebp - 0xec]
call fcn.10018a43
mov ecx, dword [esi]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec]
call fcn.10018a3e
cmp dword [ebp - 0x138], 0
je 0x10052e4c
cmp dword [ebp - 0x138], 0
je 0x10052e4c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0xb00], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0x138], 0
je 0x10052e01
mov eax, 0x5bfb
test eax, eax
je 0x10052e01
mov dword [ebp - 0x670], 1
jmp 0x10052e08
and dword [ebp - 0x670], 0
mov eax, dword [ebp - 0x670]
sub eax, 4
cmp eax, 0x3dc99cdf
jg 0x10052e24
mov dword [ebp - 0x488], 1
jmp 0x10052e2b
and dword [ebp - 0x488], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
add eax, dword [ebp - 0x488]
je 0x10052e4c
mov dword [ebp - 0x768], 1
jmp 0x10052e53
and dword [ebp - 0x768], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x768], eax
jle 0x10052e74
mov dword [ebp - 0x490], 1
jmp 0x10052e7b
and dword [ebp - 0x490], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x490]
sub ecx, dword [ebp + eax - 0x1a0]
cmp ecx, 1
je 0x10052e9f
mov dword [ebp - 0x678], 1
jmp 0x10052ea6
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0x2167fa5c
jle 0x10052ebe
mov dword [ebp - 0x9dc], 1
jmp 0x10052ec5
and dword [ebp - 0x9dc], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0xb08], eax
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0xbf4], eax
mov dword [ebp - 0x110], 0xfffffffc
push 2
lea ecx, [ebp - 0xaac]
call fcn.100189bc
mov dword [ebp - 4], 7
mov dword [ebp - 0x168], 0xeef20fe6
mov dword [ebp - 0x1dc], 0
jmp 0x10052f1e
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 2
jge 0x10052f40
push dword [ebp - 0x1dc]
lea ecx, [ebp - 0xaac]
call fcn.10018a43
mov dword [eax], 0x571177e8
jmp 0x10052f11
mov dword [ebp - 0x168], 1
jmp 0x10052f59
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x10052ff4
mov dword [ebp - 0x234], 1
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x10052f8c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
mov dword [ebp - 0x234], 1
jmp 0x10052fa5
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x10052fef
mov dword [ebp - 0x8ac], 0x909b7928
push dword [ebp - 0x168]
lea ecx, [ebp - 0xaac]
call fcn.10018a43
cmp dword [eax], 0
jne 0x10052fda
mov dword [ebp - 0x498], 1
jmp 0x10052fe1
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
mov dword [ebp - 0x8ac], eax
jmp 0x10052f98
jmp 0x10052f4c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaac]
call fcn.10018a3e
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x110], eax
jne 0x10053024
mov dword [ebp - 0x820], 1
jmp 0x1005302b
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x820], eax
jle 0x10053045
mov dword [ebp - 0x4a0], 1
jmp 0x1005304c
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x2e8], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
cmp dword [ebp - 0x2e8], eax
jl 0x10053079
mov dword [ebp - 0x680], 1
jmp 0x10053080
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x4a8], eax
mov eax, dword [ebp - 0x4a8]
cmp dword [ebp - 0x118], eax
jg 0x100530a6
mov dword [ebp - 0x770], 1
jmp 0x100530ad
and dword [ebp - 0x770], 0
mov eax, dword [ebp - 0x770]
sub eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x110]
je 0x100530cd
mov dword [ebp - 0x4b0], 1
jmp 0x100530d4
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x110]
cmp eax, dword [ebp - 0x4b0]
je 0x100530ee
mov dword [ebp - 0x688], 1
jmp 0x100530f5
and dword [ebp - 0x688], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x688], eax
jne 0x1005310f
mov dword [ebp - 0x4b8], 1
jmp 0x10053116
and dword [ebp - 0x4b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a0]
imul eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
jae 0x1005314e
mov dword [ebp - 0x7e8], 1
jmp 0x10053155
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x138]
cmp eax, dword [ebp - 0x7e8]
je 0x10053185
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1a0], 0
jne 0x10053185
mov eax, 0xa8b1460d
test eax, eax
jne 0x10053185
and dword [ebp - 0x4c0], 0
jmp 0x1005318f
mov dword [ebp - 0x4c0], 1
mov eax, dword [ebp - 0x4c0]
dec eax
jne 0x100531ba
cmp dword [ebp - 0x2e8], 0
jne 0x100531ba
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a0], 0
jne 0x100531ba
and dword [ebp - 0x690], 0
jmp 0x100531c4
mov dword [ebp - 0x690], 1
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x690], eax
jne 0x100531de
mov dword [ebp - 0x4c8], 1
jmp 0x100531e5
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x4c8]
jge 0x100531ff
mov dword [ebp - 0x778], 1
jmp 0x10053206
and dword [ebp - 0x778], 0
cmp dword [ebp - 0x778], 0xd145
jne 0x1005321e
mov dword [ebp - 0x4d0], 1
jmp 0x10053225
and dword [ebp - 0x4d0], 0
cmp dword [ebp - 0x4d0], 0xffffffff
jge 0x1005323a
mov dword [ebp - 0x698], 1
jmp 0x10053241
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x970], eax
mov dword [ebp - 0xa70], 0xfffffff9
mov dword [ebp - 0xa6c], 0xfffffff9
mov dword [ebp - 0xa68], 0xfffffff9
mov dword [ebp - 0xa64], 0xfffffff9
lea ecx, [ebp - 0x2d9]
call fcn.10009073
push eax
lea eax, [ebp - 0xa60]
push eax
lea eax, [ebp - 0xa70]
push eax
lea ecx, [ebp - 0xcf8]
call fcn.10018a52
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x290]
call fcn.10018a18
mov dword [ebp - 4], 8
mov dword [ebp - 0x20], 6
mov dword [ebp - 0x130], 0x7582ba8d
mov dword [ebp - 0x1f4], 0xffffffff
mov dword [ebp - 0x23c], 5
mov dword [ebp - 0x20], 0
jmp 0x100532e6
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jg 0x1005381a
mov dword [ebp - 0x788], 0xe8e036b6
mov dword [ebp - 0x1e4], 0
jmp 0x10053313
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jge 0x1005332c
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0x40], 9
jmp 0x10053306
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x40], 0
jmp 0x10053351
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 3
jg 0x10053737
mov dword [ebp - 0x2e0], 0xfc5c2f00
mov dword [ebp - 0x2a0], 0x269945c6
mov dword [ebp - 0x274], 0
jmp 0x1005338f
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jge 0x100533ab
mov eax, dword [ebp - 0x274]
mov dword [ebp + eax*4 - 0x8b4], 0x87c3cb87
jmp 0x10053382
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp dword [eax], 0
je 0x100533c8
cmp dword [ebp - 0x20], 0
jne 0x100534bc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xb10], eax
imul esi, dword [ebp - 0x20], 0x9b50
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp esi, dword [eax]
jg 0x100533fd
mov dword [ebp - 0x4d8], 1
jmp 0x10053404
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x40]
imul esi, dword [ebp - 0x4d8]
push 0
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp esi, dword [eax]
jg 0x10053432
mov dword [ebp - 0x840], 1
jmp 0x10053439
and dword [ebp - 0x840], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
cmp dword [ebp - 0x840], eax
jle 0x10053457
mov dword [ebp - 0x4e0], 1
jmp 0x1005345e
and dword [ebp - 0x4e0], 0
imul eax, dword [ebp - 0x4e0], 0x748a
cmp eax, 7
je 0x10053479
mov dword [ebp - 0x6a0], 1
jmp 0x10053480
and dword [ebp - 0x6a0], 0
cmp dword [ebp - 0x6a0], 5
ja 0x10053495
mov dword [ebp - 0x4e8], 1
jmp 0x1005349c
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0x4e8]
sub eax, dword [ebp - 0x20]
jne 0x100534ae
cmp dword [ebp - 0x130], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
mov ecx, dword [ebp - 0x20]
cmp dword [eax], ecx
jl 0x100534dd
mov dword [ebp - 0x780], 1
jmp 0x100534e4
and dword [ebp - 0x780], 0
cmp dword [ebp - 0x780], 0
jle 0x1005350b
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x10053509
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
jmp 0x10053589
mov dword [ebp - 0x130], 0
jmp 0x10053524
mov eax, dword [ebp - 0x130]
inc eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 3
jg 0x10053589
mov dword [ebp - 0x1ec], 1
mov dword [ebp - 0x1ec], 3
jmp 0x10053550
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jl 0x10053587
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x10053585
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_CreateEnhMetaFileW]
jmp 0x10053543
jmp 0x10053517
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
jne 0x100535e1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
je 0x100535aa
cmp dword [ebp - 0x2e0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xc5c], eax
imul eax, dword [ebp - 0x20], 0xe2d0
mov dword [ebp - 0x2e0], eax
mov eax, dword [ebp - 0x2e0]
imul eax, dword [ebp - 0x1f4]
test eax, eax
jne 0x100535e1
and dword [ebp - 0x4f0], 0
jmp 0x100535eb
mov dword [ebp - 0x4f0], 1
imul eax, dword [ebp - 0x4f0], 0
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x40]
jne 0x1005360a
mov dword [ebp - 0x6a8], 1
jmp 0x10053611
and dword [ebp - 0x6a8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
mov ecx, dword [ebp - 0x6a8]
cmp ecx, dword [eax]
jne 0x1005363e
cmp dword [ebp - 0x2a0], 0
je 0x1005363e
mov dword [ebp - 0x4f8], 1
jmp 0x10053645
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x4f8]
mov edx, dword [ebp - 0x23c]
inc edx
mov dword [ebp - 0x23c], edx
cmp eax, ecx
je 0x1005367e
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8b4], 0
je 0x1005367e
mov dword [ebp - 0x7f0], 1
jmp 0x10053685
and dword [ebp - 0x7f0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7f0]
jg 0x100536a9
mov dword [ebp - 0x9c0], 1
jmp 0x100536b0
and dword [ebp - 0x9c0], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x40]
mov dword [ebp - 0xb18], eax
mov esi, dword [ebp - 0x2a0]
push 2
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp esi, dword [eax]
jl 0x100536f1
mov dword [ebp - 0x500], 1
jmp 0x100536f8
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0x500]
imul eax, dword [ebp - 0x2a0]
cmp eax, 0x83ea6de4
jae 0x1005371f
mov dword [ebp - 0x6b0], 1
jmp 0x10053726
and dword [ebp - 0x6b0], 0
mov eax, dword [ebp - 0x6b0]
mov dword [ebp - 0x1f4], eax
jmp 0x1005333c
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp dword [eax], 0x3cec3345
jge 0x10053759
mov dword [ebp - 0x6b8], 1
jmp 0x10053760
and dword [ebp - 0x6b8], 0
push dword [ebp - 0x20]
lea ecx, [ebp - 0x290]
call fcn.10018a43
cmp dword [eax], 0
jne 0x1005377f
mov dword [ebp - 0x508], 1
jmp 0x10053786
and dword [ebp - 0x508], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x40], 0
jne 0x1005379f
mov dword [ebp - 0x510], 1
jmp 0x100537a6
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x788], eax
mov esi, dword [ebp - 0x788]
push 1
lea ecx, [ebp - 0x290]
call fcn.10018a43
mov ecx, dword [ebp - 0x510]
sub ecx, dword [eax]
cmp esi, ecx
jl 0x100537dd
mov dword [ebp - 0x518], 1
jmp 0x100537e4
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x1f4], 0
je 0x10053802
cmp dword [ebp - 0x23c], 0
je 0x10053802
mov dword [ebp - 0x828], 1
jmp 0x10053809
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x828]
mov dword [ebp - 0x1f4], eax
jmp 0x100532df
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x290]
call fcn.10018a3e
mov dword [ebp - 0x14], 0x9b4e94f9
mov dword [ebp - 0xd4], 0x126c7f05
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0x6c], 0xce35a12a
mov dword [ebp - 0x980], 0xfffffff6
mov dword [ebp - 0x264], 0
jmp 0x1005386e
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 3
jge 0x1005388a
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xab8], 0xfffffffe
jmp 0x10053861
push 8
pop eax
test eax, eax
je 0x10053906
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0xf4], eax
jge 0x100538c4
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x100538c4
mov dword [ebp - 0x520], 1
jmp 0x100538cb
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x520]
sub eax, 0x4a15d739
cmp eax, dword [ebp - 0x14]
je 0x100538eb
mov dword [ebp - 0x8bc], 1
jmp 0x100538f2
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xbfc], eax
mov eax, 0xfb26c4f3
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x6c]
cmp dword [ebp - 0xd4], 0
je 0x10053920
or eax, 0xffffffff
je 0x10053920
mov dword [ebp - 0x6c0], 1
jmp 0x10053927
and dword [ebp - 0x6c0], 0
cmp dword [ebp - 0x6c0], 0x5f992db7
jle 0x1005393f
mov dword [ebp - 0x528], 1
jmp 0x10053946
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x528]
je 0x10053963
mov eax, 0x8c658163
test eax, eax
jne 0x10053963
and dword [ebp - 0x790], 0
jmp 0x1005396d
mov dword [ebp - 0x790], 1
mov eax, dword [ebp - 0x14]
add eax, 0xfff7
cmp eax, dword [ebp - 0x790]
jle 0x10053989
mov dword [ebp - 0x530], 1
jmp 0x10053990
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x530], eax
jg 0x100539a7
mov dword [ebp - 0x6c8], 1
jmp 0x100539ae
and dword [ebp - 0x6c8], 0
mov eax, dword [ebp - 0x6c8]
sub eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x6c]
jl 0x100539c8
mov dword [ebp - 0x538], 1
jmp 0x100539cf
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x538], eax
jg 0x100539ef
mov eax, 0xb03b
test eax, eax
je 0x100539ef
mov dword [ebp - 0x7f8], 1
jmp 0x100539f6
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x7f8]
neg eax
cmp eax, dword [ebp - 0x14]
jle 0x10053a15
cmp dword [ebp - 0xd4], 0
jne 0x10053a15
and dword [ebp - 0x540], 0
jmp 0x10053a1f
mov dword [ebp - 0x540], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x540], eax
jne 0x10053c74
mov dword [ebp - 0x2e4], 1
mov dword [ebp - 0x548], 0xbbb531ea
mov dword [ebp - 0x9e4], 0x585f1c2b
mov dword [ebp - 0x8cc], 8
mov dword [ebp - 0x1fc], 0
jmp 0x10053a6f
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 1
jge 0x10053a8b
mov eax, dword [ebp - 0x1fc]
mov dword [ebp + eax*4 - 0x2a8], 5
jmp 0x10053a62
mov dword [ebp - 0xf4], 0
jmp 0x10053aa4
mov eax, dword [ebp - 0xf4]
dec eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 0xffffffed
jg 0x10053c72
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x14], 0
jmp 0x10053acb
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 8
jne 0x10053af9
mov dword [ebp - 0x6c], 0
jmp 0x10053ae1
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 3
jge 0x10053af7
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xab8], 0xd4826422
jmp 0x10053ada
jmp 0x10053ac4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x2e4]
dec eax
mov dword [ebp - 0x2e4], eax
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0xa8], eax
jle 0x10053b29
mov dword [ebp - 0x6d0], 1
jmp 0x10053b30
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x6d0]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x978], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x978]
mov dword [ebp + eax - 0x2a8], ecx
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xca8], eax
mov eax, 0xffff
test eax, eax
je 0x10053b9a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a8]
imul eax, dword [ebp - 0xa8]
test eax, eax
je 0x10053b9a
mov dword [ebp - 0x8c4], 1
jmp 0x10053ba1
and dword [ebp - 0x8c4], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xb28], eax
cmp dword [ebp - 0x14], 0
jg 0x10053bbc
cmp dword [ebp - 0xd4], 0
je 0x10053bcc
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a8], 0
jne 0x10053bd3
cmp dword [ebp - 0xa8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xab8]
mov dword [ebp - 0xc04], eax
mov dword [ebp - 0xd4], 0x89ef
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xd4], eax
jl 0x10053c0a
mov dword [ebp - 0x798], 1
jmp 0x10053c11
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x9e4]
mov dword [ebp - 0xc64], eax
mov eax, dword [ebp - 0xa8]
add eax, dword [ebp - 0x8cc]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0xab8]
jl 0x10053c56
mov dword [ebp - 0x550], 1
jmp 0x10053c5d
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x6c]
imul eax, dword [ebp - 0x550]
mov dword [ebp - 0x980], eax
jmp 0x10053a97
jmp 0x10053c87
mov dword [ebp - 0x8d4], 0xca00
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x8d4], eax
mov dword [ebp - 0xfc], 0x8ade19d2
mov dword [ebp - 0x9d0], 0xfffffffe
mov dword [ebp - 0x2b0], 0x3fe662db
mov dword [ebp - 0x8dc], 0x725245f5
mov dword [ebp - 0x568], 1
mov dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x9d0], eax
cmp dword [ebp - 0xfc], 0
je 0x10053d20
cmp dword [ebp - 0xfc], 0
je 0x10053d01
mov dword [ebp - 0x2b0], 0x7ccc8959
mov eax, dword [ebp - 0x2b0]
neg eax
je 0x10053d01
mov dword [ebp - 0x6d8], 1
jmp 0x10053d08
and dword [ebp - 0x6d8], 0
cmp dword [ebp - 0x6d8], 0xb8d9
jne 0x10053d20
mov dword [ebp - 0x558], 1
jmp 0x10053d27
and dword [ebp - 0x558], 0
mov eax, 0xc2285faa
sub eax, dword [ebp - 0x558]
cmp eax, dword [ebp - 0x8dc]
je 0x10053d46
mov dword [ebp - 0x850], 1
jmp 0x10053d4d
and dword [ebp - 0x850], 0
mov eax, dword [ebp - 0x568]
cmp dword [ebp - 0x850], eax
jg 0x10053d67
mov dword [ebp - 0x560], 1
jmp 0x10053d6e
and dword [ebp - 0x560], 0
cmp dword [ebp - 0x560], 0xdb34
jge 0x10053db7
mov dword [ebp - 0x6e0], 1
mov eax, dword [ebp - 0x6e0]
inc eax
mov dword [ebp - 0x6e0], eax
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x10053db2
push 0
push 0x26f3
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayGetLBound]
jmp 0x10053eac
mov dword [ebp - 0x244], 0xb5d1cb6a
mov dword [ebp - 0x2ec], 0x7276cc72
mov dword [ebp - 0x570], 0x1f9e6a01
cmp dword [ebp - 0x244], 0
jne 0x10053e8a
mov eax, dword [ebp - 0x568]
add eax, dword [ebp - 0x2ec]
mov ecx, 0xf9034e10
sub ecx, eax
neg ecx
imul eax, ecx, 0xf390
cmp eax, 1
jae 0x10053e0e
mov dword [ebp - 0x7a0], 1
jmp 0x10053e15
and dword [ebp - 0x7a0], 0
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x570], eax
cmp dword [ebp - 0x570], 0
je 0x10053e31
cmp dword [ebp - 0x2ec], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x2ec], eax
jle 0x10053e4b
mov dword [ebp - 0x6e8], 1
jmp 0x10053e52
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0x6e8], eax
jle 0x10053e6c
mov dword [ebp - 0x578], 1
jmp 0x10053e73
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x244]
cmp dword [ebp - 0x578], eax
jl 0x10053e8a
and dword [ebp - 0x800], 0
jmp 0x10053e94
mov dword [ebp - 0x800], 1
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x244], eax
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x104], 6
mov dword [ebp - 0x164], 0x144ad72d
mov dword [ebp - 0x588], 0x4cacff8e
push 1
lea ecx, [ebp - 0xaa0]
call fcn.100189bc
mov dword [ebp - 4], 9
mov dword [ebp - 0x204], 0
jmp 0x10053ef7
mov eax, dword [ebp - 0x204]
inc eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 1
jge 0x10053f19
push dword [ebp - 0x204]
lea ecx, [ebp - 0xaa0]
call fcn.10018a43
mov dword [eax], 8
jmp 0x10053eea
mov dword [ebp - 0x164], 0x7a3a
cmp dword [ebp - 0x164], 0x715f
jge 0x10053f3b
mov dword [ebp - 0x580], 1
jmp 0x10053f42
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x104]
cmp eax, dword [ebp - 0x580]
jne 0x10053f7e
cmp dword [ebp - 0x104], 0x4727cad7
jne 0x10053f71
cmp dword [ebp - 0x588], 0
je 0x10053f71
mov dword [ebp - 0x6f0], 1
jmp 0x10053f78
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0x164]
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x104], eax
jg 0x10053f98
mov dword [ebp - 0x7a8], 1
jmp 0x10053f9f
and dword [ebp - 0x7a8], 0
mov eax, dword [ebp - 0x588]
cmp dword [ebp - 0x7a8], eax
jle 0x10053fd1
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x10053fcc
push 0
push 0x18de
call dword [sym.imp.KERNEL32.dll_TlsSetValue]
jmp 0x1005408a
mov dword [ebp - 0x27c], 0xfffffffb
mov dword [ebp - 0x830], 0x63a5bed8
mov eax, dword [ebp - 0x164]
mov dword [ebp - 0xb38], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0xc0c], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0xb40], eax
mov eax, dword [ebp - 0x27c]
mov dword [ebp - 0x590], eax
push 0
lea ecx, [ebp - 0xaa0]
call fcn.10018a43
mov ecx, dword [ebp - 0x590]
mov dword [eax], ecx
mov eax, dword [ebp - 0x590]
sub eax, dword [ebp - 0x104]
cmp dword [ebp - 0x27c], eax
jge 0x1005404a
mov dword [ebp - 0x6f8], 1
jmp 0x10054051
and dword [ebp - 0x6f8], 0
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x6f8], eax
jle 0x1005406b
mov dword [ebp - 0x598], 1
jmp 0x10054072
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x598]
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x830]
mov dword [ebp - 0x164], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa0]
call fcn.10018a3e
mov dword [ebp - 0x12c], 0xfffffff8
push 1
lea ecx, [ebp - 0x9cc]
call fcn.100189bc
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x20c], 0
jmp 0x100540d0
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 1
jge 0x100540f2
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x9cc]
call fcn.10018a43
mov dword [eax], 0xd3df75dc
jmp 0x100540c3
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10018a43
mov dword [eax], 7
jmp 0x1005412b
push 0
lea ecx, [ebp - 0x9cc]
call fcn.10018a43
cmp dword [eax], 0xfffffffe
jl 0x100541f2