Function at 0xf1203
Capabilities:
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 0x85
push 0
push 0
dec ecx
jne 0xf070d
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0xf3efe
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xb6], 0
mov eax, dword [ebp + 0xc]
call fcn.000192c0
mov eax, dword [ebp + 8]
xor edx, edx
mov dword [eax], edx
lea edx, [ebp - 0xd0]
mov eax, 0xf3f14
call fcn.00031d88
push dword [ebp - 0xd0]
push dword [ebp - 4]
lea edx, [ebp - 0xd4]
mov eax, 0xf3f28
call fcn.00031d88
push dword [ebp - 0xd4]
lea eax, [ebp - 0xcc]
mov edx, 3
call fcn.00013f8c
mov edx, dword [ebp - 0xcc]
lea eax, [ebp - 0xc8]
call fcn.000144c4
push dword [ebp - 0xc8]
push dword [ebp + 0x18]
push 0xf3f30
push dword [ebp + 0x1c]
push 0xf3f30
push dword [ebp - 8]
lea edx, [ebp - 0xe0]
mov eax, 0xf3f34
call fcn.00031d88
push dword [ebp - 0xe0]
mov eax, dword [ebp - 0xc]
xor edx, edx
push edx
push eax
lea eax, [ebp - 0xe4]
call fcn.00033468
push dword [ebp - 0xe4]
lea edx, [ebp - 0xe8]
mov eax, 0xf3f38
call fcn.00031d88
push dword [ebp - 0xe8]
lea eax, [ebp - 0xdc]
mov edx, 3
call fcn.00013f8c
mov edx, dword [ebp - 0xdc]
lea eax, [ebp - 0xd8]
call fcn.000144c4
push dword [ebp - 0xd8]
lea eax, [ebp - 0xc4]
mov edx, 7
call fcn.00014618
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp + 0xc]
call fcn.0001987c
call sub.kernel32.dll_GetTickCount
mov edx, dword [0x2a7474]
call fcn.0002cde4
cmp eax, 0xbb8
ja 0xf099b
mov eax, dword [0x2a74c0]
mov edx, dword [ebp - 8]
call fcn.00014660
jne 0xf099b
mov eax, dword [0x2a74c8]
cmp eax, dword [ebp - 0xc]
jne 0xf099b
lea edx, [ebp - 0xf8]
mov eax, 0xf3f3c
call fcn.00031d88
push dword [ebp - 0xf8]
push dword [ebp - 4]
lea edx, [ebp - 0xfc]
mov eax, 0xf3f4c
call fcn.00031d88
push dword [ebp - 0xfc]
lea eax, [ebp - 0xf4]
mov edx, 3
call fcn.00013f8c
mov edx, dword [ebp - 0xf4]
lea eax, [ebp - 0xf0]
call fcn.000144c4
push dword [ebp - 0xf0]
push dword [ebp + 0x18]
push 0xf3f30
push dword [ebp + 0x1c]
push 0xf3f30
push dword [ebp - 8]
lea edx, [ebp - 0x108]
mov eax, 0xf3f58
call fcn.00031d88
push dword [ebp - 0x108]
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x10c]
call fcn.0002c174
push dword [ebp - 0x10c]
lea edx, [ebp - 0x110]
mov eax, 0xf3f64
call fcn.00031d88
push dword [ebp - 0x110]
lea edx, [ebp - 0x114]
mov eax, dword [0x2a7458]
call fcn.00033438
push dword [ebp - 0x114]
lea edx, [ebp - 0x118]
mov eax, 0xf3f78
call fcn.00031d88
push dword [ebp - 0x118]
lea eax, [ebp - 0x104]
mov edx, 5
call fcn.00013f8c
mov edx, dword [ebp - 0x104]
lea eax, [ebp - 0x100]
call fcn.000144c4
push dword [ebp - 0x100]
lea eax, [ebp - 0xec]
mov edx, 7
call fcn.00014618
mov eax, dword [ebp - 0xec]
mov edx, dword [ebp + 0xc]
call fcn.0001987c
jmp 0xf3b91
mov byte [ebp - 0x95], 0
xor eax, eax
mov dword [0x2a7474], eax
mov eax, 0x2a74c0
call fcn.00014314
mov dword [0x2a74c8], 0xffffffff
xor eax, eax
push ebp
push 0xf0a23
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xb6], 1
call fcn.000e162c
mov byte [ebp - 0x19], al
lea eax, [ebp - 0x80]
mov edx, dword [ebp + 0x18]
call fcn.00014350
mov edx, dword [ebp - 8]
mov eax, 0xf3f80
call fcn.00014874
mov esi, eax
test esi, esi
jne 0xf0a05
lea eax, [ebp - 0x70]
mov edx, dword [ebp - 8]
call fcn.00014350
jmp 0xf0a19
lea eax, [ebp - 0x70]
push eax
lea edx, [esi + 1]
mov ecx, 0xc8
mov eax, dword [ebp - 8]
call fcn.000146fc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf0a8a
mov byte [ebp - 0xb6], 2
xor eax, eax
push ebp
push 0xf0ab1
push dword fs:[eax]
mov dword fs:[eax], esp
call fcn.000ef804
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf0b36
mov eax, 0x400
call fcn.00019248
mov dword [ebp - 0xb0], eax
mov byte [ebp - 0xb6], 3
xor eax, eax
push ebp
push 0xf38c7
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
push ebp
push 0xf3829
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [0x2a7458], eax
mov eax, 0x2a7468
call fcn.00014314
mov eax, 0x2a7470
call fcn.00014314
mov eax, 0x2a746c
call fcn.00014314
mov byte [ebp - 0xb6], 6
call fcn.000e0400
mov byte [ebp - 0xa9], al
call fcn.000e06f0
mov byte [ebp - 0xd], al
lea eax, [ebp - 0x138]
mov edx, dword [ebp - 0x70]
call fcn.00013e94
mov eax, dword [ebp - 0x138]
lea edx, [ebp - 0x134]
call fcn.00033054
mov eax, dword [ebp - 0x134]
push eax
lea eax, [ebp - 0x144]
call fcn.0005e3f8
mov edx, dword [ebp - 0x144]
lea eax, [ebp - 0x140]
call fcn.00013e94
mov eax, dword [ebp - 0x140]
lea edx, [ebp - 0x13c]
call fcn.00033054
mov edx, dword [ebp - 0x13c]
pop eax
call fcn.00013fdc
sete byte [ebp - 0xb5]
call fcn.000e68f8
test al, al
je 0xf0d17
cmp byte [ebp - 0xd], 0
jne 0xf0d17
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 0xc]
push eax
cmp byte [ebp - 0xa9], 0
je 0xf0c3f
cmp byte [ebp - 0xb5], 0
je 0xf0c43
xor edx, edx
jmp 0xf0c45
mov dl, 1
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.000f017c
lea edx, [ebp - 0x14c]
mov eax, 0xf3fa8
call fcn.00031d88
push dword [ebp - 0x14c]
lea edx, [ebp - 0x150]
mov al, byte [ebp - 0xa9]
call fcn.0002d050
push dword [ebp - 0x150]
lea edx, [ebp - 0x154]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x154]
lea edx, [ebp - 0x158]
xor eax, eax
mov al, byte [ebp - 0xd]
call fcn.00033438
push dword [ebp - 0x158]
lea edx, [ebp - 0x15c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x15c]
lea edx, [ebp - 0x160]
mov al, byte [ebp - 0xb5]
call fcn.0002d050
push dword [ebp - 0x160]
lea eax, [ebp - 0x148]
mov edx, 6
call fcn.00013f8c
mov eax, dword [ebp - 0x148]
mov edx, dword [ebp + 0xc]
call fcn.00019b10
lea edx, [ebp - 0x164]
mov eax, 0xf3fb0
call fcn.00031d88
mov eax, dword [ebp - 0x164]
mov edx, dword [ebp + 0xc]
call fcn.00019b10
jmp 0xf29c4
mov eax, dword [ebp - 0x70]
call fcn.00014548
test eax, eax
jle 0xf299f
mov eax, dword [ebp - 0x70]
call fcn.00014548
cmp eax, 0xc8
jge 0xf299f
mov byte [ebp - 0xb6], 7
mov byte [ebp - 0xb6], 8
mov eax, dword [ebp + 0x1c]
push eax
mov eax, dword [ebp - 0x80]
push eax
mov eax, dword [ebp + 0x14]
push eax
mov eax, dword [ebp + 0x10]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov eax, dword [ebp + 8]
push eax
mov cl, byte [ebp + 0x20]
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
call fcn.000ee218
mov esi, eax
test esi, esi
jge 0xf0e26
mov byte [ebp - 0x95], 1
push 0xf3fcc
push dword [ebp - 8]
lea edx, [ebp - 0x174]
mov eax, 0xf4028
call fcn.00031d88
push dword [ebp - 0x174]
lea edx, [ebp - 0x178]
mov eax, esi
call fcn.00033438
push dword [ebp - 0x178]
lea edx, [ebp - 0x17c]
mov eax, 0xf3f38
call fcn.00031d88
push dword [ebp - 0x17c]
lea edx, [ebp - 0x180]
mov eax, dword [ebp + 8]
mov eax, dword [eax]
call fcn.0002b100
push dword [ebp - 0x180]
lea eax, [ebp - 0x170]
mov edx, 4
call fcn.00013f8c
mov edx, dword [ebp - 0x170]
lea eax, [ebp - 0x16c]
call fcn.000144c4
push dword [ebp - 0x16c]
lea eax, [ebp - 0x168]
mov edx, 3
call fcn.00014618
mov eax, dword [ebp - 0x168]
mov edx, dword [ebp + 0xc]
call fcn.000199bc
jmp 0xf29c4
mov byte [ebp - 0xb6], 9
lea edx, [ebp - 0x184]
mov eax, 0xf4038
call fcn.00031d88
lea eax, [ebp - 0x184]
push eax
lea edx, [ebp - 0x188]
mov eax, esi
call fcn.0002c174
mov edx, dword [ebp - 0x188]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x184]
mov edx, dword [ebp + 0xc]
call fcn.00019a5c
mov byte [ebp - 0xb6], 0xa
xor eax, eax
mov dword [ebp - 0xb4], eax
xor eax, eax
mov dword [ebp - 0x68], eax
xor eax, eax
mov dword [ebp - 0x64], eax
xor eax, eax
push ebp
push 0xf1903
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x64]
push eax
mov eax, dword [0x2a9118]
mov eax, dword [eax]
add eax, 0x20019
push eax
push 0
lea eax, [ebp - 0x18c]
call fcn.00025394
mov eax, dword [ebp - 0x18c]
call fcn.00014090
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExA_1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0xf1895
lea edx, [ebp - 0x194]
mov eax, dword [ebp - 0xb4]
inc eax
call fcn.0002d08c
mov ecx, dword [ebp - 0x194]
lea eax, [ebp - 0x190]
mov edx, 0xf4050
call fcn.00013f18
mov edx, dword [ebp - 0x190]
lea eax, [ebp - 0x5c]
call fcn.000144c4
lea eax, [ebp - 0x1a0]
call fcn.00025394
mov edx, dword [ebp - 0x1a0]
lea eax, [ebp - 0x19c]
call fcn.000144c4
mov eax, dword [ebp - 0x19c]
lea edx, [ebp - 0x198]
call fcn.0001d8bc
mov edx, dword [ebp - 0x198]
lea eax, [ebp - 0x58]
mov ecx, dword [ebp - 0x5c]
call fcn.000145b4
lea eax, [ebp - 0x14]
call fcn.00014314
lea eax, [ebp - 0x8c]
call fcn.00014314
lea eax, [ebp - 0x24]
call fcn.00014314
lea eax, [ebp - 0x7c]
call fcn.00014314
xor eax, eax
mov dword [ebp - 0x4c], eax
xor eax, eax
push ebp
push 0xf1844
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x4c]
push eax
mov eax, dword [0x2a9118]
mov eax, dword [eax]
add eax, 0x20019
push eax
push 0
mov eax, dword [ebp - 0x58]
call fcn.00014538
push eax
push 0x80000002
call sub.advapi32.dll_RegOpenKeyExW
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0xf12eb
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0xf4054
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xb0]
call fcn.00018af4
test eax, eax
jne 0xf1030
cmp dword [ebp - 0x90], 1
jne 0xf1030
cmp dword [ebp - 0xa0], 0
jbe 0xf1030
mov eax, dword [ebp - 0xb0]
call fcn.00018ad0
cmp eax, dword [ebp - 0xa0]
jbe 0xf1030
lea edx, [ebp - 0x14]
mov eax, dword [ebp - 0xb0]
call fcn.00018adc
lea eax, [ebp - 0x14]
push eax
mov ecx, 0x3c
mov edx, 1
mov eax, dword [ebp - 0x14]
call fcn.000146fc
jmp 0xf107f
lea edx, [ebp - 0x1a8]
mov eax, 0xf4070
call fcn.00031d88
push dword [ebp - 0x1a8]
push 0xf4098
lea edx, [ebp - 0x1ac]
mov eax, 0xf40a8
call fcn.00031d88
push dword [ebp - 0x1ac]
lea eax, [ebp - 0x1a4]
mov edx, 3
call fcn.00013f8c
mov edx, dword [ebp - 0x1a4]
lea eax, [ebp - 0x14]
call fcn.000144c4
lea eax, [ebp - 0x8c]
call fcn.00014314
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0xb0]
call fcn.00018abc
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0xf40ac
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0xb0]
call fcn.00018af4
test eax, eax
jne 0xf1100
cmp dword [ebp - 0x90], 1
jne 0xf1100
cmp dword [ebp - 0xa0], 0
jbe 0xf1100
mov eax, dword [ebp - 0xb0]
call fcn.00018ad0
cmp eax, dword [ebp - 0xa0]
jb 0xf1100
lea edx, [ebp - 0x8c]
mov eax, dword [ebp - 0xb0]
call fcn.00018adc
mov eax, dword [ebp - 0x8c]
call fcn.00014548
cmp eax, 4
jge 0xf111b
lea eax, [ebp - 0x8c]
call fcn.00014314
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa0]
push eax
push 0
lea eax, [ebp - 0x90]
push eax
push 0
push 0xf40b8
mov eax, dword [ebp - 0x4c]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x24]
call fcn.00014314
mov esi, dword [ebp - 0xa0]
cmp esi, 1
jle 0xf1203
cmp esi, 0x100000
jg 0xf1203
lea eax, [esi + 4]
call fcn.00019248
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
xor eax, eax
push ebp
push 0xf11fc
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0xf40b8
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
call fcn.00018af4
test eax, eax
jne 0xf11e6
cmp dword [ebp - 0x90], 1
jne 0xf11e6
cmp dword [ebp - 0xa0], 0
jbe 0xf11e6
mov eax, dword [ebp - 0x2c]
call fcn.00018ad0
cmp eax, dword [ebp - 0xa0]
jbe 0xf11e6
lea edx, [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
call fcn.00018adc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf1203
lea eax, [ebp - 0x2c]
call fcn.00019258
ret
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
lea eax, [ebp - 0xa0]
push eax
push 0
lea eax, [ebp - 0x90]
push eax
push 0
push 0xf40c4
mov eax, dword [ebp - 0x4c]
push eax
call sub.advapi32.dll_RegQueryValueExW
lea eax, [ebp - 0x7c]
call fcn.00014314
mov esi, dword [ebp - 0xa0]
cmp esi, 1
jle 0xf1337
cmp esi, 0x100000
jg 0xf1337
lea eax, [esi + 4]
call fcn.00019248
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0xa0], eax
xor eax, eax
mov dword [ebp - 0x90], eax
xor eax, eax
push ebp
push 0xf12e4
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 0x90]
push eax
lea eax, [ebp - 0xa0]
push eax
mov ecx, 0xf40c4
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
call fcn.00018af4
test eax, eax
jne 0xf12ce
cmp dword [ebp - 0x90], 1
jne 0xf12ce
cmp dword [ebp - 0xa0], 0
jbe 0xf12ce
mov eax, dword [ebp - 0x2c]
call fcn.00018ad0
cmp eax, dword [ebp - 0xa0]
jbe 0xf12ce
lea edx, [ebp - 0x7c]
mov eax, dword [ebp - 0x2c]
call fcn.00018adc
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf1337
lea eax, [ebp - 0x2c]
call fcn.00019258
ret
cmp dword [ebp - 0x48], 2
je 0xf1337
mov byte [ebp - 0x95], 1
lea edx, [ebp - 0x1b0]
mov eax, 0xf40d4
call fcn.00031d88
lea eax, [ebp - 0x1b0]
push eax
lea edx, [ebp - 0x1b4]
mov eax, dword [ebp - 0x48]
call fcn.0002b100
mov edx, dword [ebp - 0x1b4]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x1b0]
mov edx, dword [ebp + 0xc]
call fcn.00019bc4
lea eax, [ebp - 0x18]
mov ecx, 0xf3f80
mov edx, dword [ebp - 0x70]
call fcn.000145b4
lea eax, [ebp - 0x60]
mov edx, dword [ebp - 0x24]
call fcn.00014350
mov al, byte [0xf4104]
push eax
push 0
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x1bc]
call fcn.0004a6b0
mov ecx, dword [ebp - 0x1bc]
mov edx, 0xf410c
mov eax, dword [ebp - 0x60]
call fcn.00041fec
mov edx, dword [ebp - 0x1b8]
mov eax, dword [0x2a7498]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x2a7498]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf1576
mov eax, dword [0x2a7498]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf1576
inc ebx
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x1c0]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1c0]
call fcn.00014548
test eax, eax
jle 0xf156c
lea ecx, [ebp - 0x1c8]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1c8]
lea edx, [ebp - 0x1c4]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1c4]
push eax
lea edx, [ebp - 0x1cc]
mov eax, dword [ebp - 0x18]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1cc]
pop edx
call fcn.00014874
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
je 0xf147d
lea edx, [ebp - 0x1d0]
mov eax, dword [ebp - 0x70]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x1d8]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x1d8]
lea edx, [ebp - 0x1d4]
call fcn.0001e5f8
mov edx, dword [ebp - 0x1d4]
pop eax
call fcn.00014660
jne 0xf156c
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x18]
call fcn.00014548
mov ecx, eax
lea eax, [ebp - 0x40]
mov edx, 1
call fcn.00014748
mov eax, dword [ebp - 0x40]
call fcn.00014548
test eax, eax
jle 0xf14ca
push dword [ebp - 0x40]
push 0xf3f80
push dword [ebp - 0x14]
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00014618
jmp 0xf14d5
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x14]
call fcn.00014350
mov eax, dword [ebp - 0x40]
call fcn.00014548
test eax, eax
jle 0xf156c
mov edx, dword [ebp - 0x40]
mov eax, dword [0x2a7444]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf156c
cmp byte [ebp - 0x19], 0
jne 0xf150d
mov edx, dword [ebp - 0x14]
mov eax, dword [0x2a7434]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf1539
mov edx, dword [ebp - 0x40]
mov eax, dword [0x2a7444]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x14]
mov eax, dword [0x2a7434]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x2a745c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0xf156c
push 0xf4114
push dword [ebp - 0x14]
push 0xf4150
push dword [ebp - 0x40]
push 0xf415c
lea eax, [ebp - 0x1dc]
mov edx, 5
call fcn.00014618
mov eax, dword [ebp - 0x1dc]
mov edx, dword [ebp + 0xc]
call fcn.0001987c
inc dword [ebp - 0x3c]
dec ebx
jne 0xf13be
mov eax, dword [0x2a90e4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf1822
mov eax, dword [0x2a90e4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf1822
inc ebx
xor esi, esi
lea ecx, [ebp - 0x1e0]
mov eax, dword [0x2a90e4]
mov eax, dword [eax]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1e0]
lea eax, [ebp - 0x18]
mov ecx, 0xf3f80
call fcn.000145b4
lea eax, [ebp - 0x60]
mov edx, dword [ebp - 0x7c]
call fcn.00014350
mov al, byte [0xf4104]
push eax
push 0
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1e8]
call fcn.0004a6b0
mov ecx, dword [ebp - 0x1e8]
mov edx, 0xf410c
mov eax, dword [ebp - 0x60]
call fcn.00041fec
mov edx, dword [ebp - 0x1e4]
mov eax, dword [0x2a7498]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov eax, dword [0x2a7498]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf181a
mov eax, dword [0x2a7498]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0xf181a
inc eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x3c], 0
lea ecx, [ebp - 0x1ec]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1ec]
call fcn.00014548
test eax, eax
jle 0xf180b
lea ecx, [ebp - 0x1f4]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x1f4]
lea edx, [ebp - 0x1f0]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1f0]
push eax
lea edx, [ebp - 0x1f8]
mov eax, dword [ebp - 0x18]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1f8]
pop edx
call fcn.00014874
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
je 0xf171c
lea ecx, [ebp - 0x200]
mov eax, dword [0x2a90e4]
mov eax, dword [eax]
mov edx, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x200]
lea edx, [ebp - 0x1fc]
call fcn.0001e5f8
mov eax, dword [ebp - 0x1fc]
push eax
lea ecx, [ebp - 0x208]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x208]
lea edx, [ebp - 0x204]
call fcn.0001e5f8
mov edx, dword [ebp - 0x204]
pop eax
call fcn.00014660
jne 0xf180b
lea ecx, [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov eax, dword [0x2a7498]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x18]
call fcn.00014548
mov ecx, eax
lea eax, [ebp - 0x40]
mov edx, 1
call fcn.00014748
mov eax, dword [ebp - 0x40]
call fcn.00014548
test eax, eax
jle 0xf1769
push dword [ebp - 0x40]
push 0xf3f80
push dword [ebp - 0x14]
lea eax, [ebp - 0x40]
mov edx, 3
call fcn.00014618
jmp 0xf1774
lea eax, [ebp - 0x40]
mov edx, dword [ebp - 0x14]
call fcn.00014350
mov eax, dword [ebp - 0x40]
call fcn.00014548
test eax, eax
jle 0xf180b
mov edx, dword [ebp - 0x40]
mov eax, dword [0x2a7444]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf180b
cmp byte [ebp - 0x19], 0
jne 0xf17ac
mov edx, dword [ebp - 0x14]
mov eax, dword [0x2a7434]
mov ecx, dword [eax]
call dword [ecx + 0x54]
test eax, eax
jge 0xf17d8
mov edx, dword [ebp - 0x40]
mov eax, dword [0x2a7444]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x14]
mov eax, dword [0x2a7434]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov edx, dword [ebp - 0x8c]
mov eax, dword [0x2a745c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
jmp 0xf180b
push 0xf4164
push dword [ebp - 0x14]
push 0xf4150
push dword [ebp - 0x40]
push 0xf415c
lea eax, [ebp - 0x20c]
mov edx, 5
call fcn.00014618
mov eax, dword [ebp - 0x20c]
mov edx, dword [ebp + 0xc]
call fcn.0001987c
inc dword [ebp - 0x3c]
dec dword [ebp - 0xc0]
jne 0xf1646
inc esi
dec ebx
jne 0xf15a4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf184b
cmp dword [ebp - 0x4c], 0
je 0xf183e
mov eax, dword [ebp - 0x4c]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x4c], eax
ret
cmp dword [ebp - 0x48], 2
je 0xf18e1
mov byte [ebp - 0x95], 1
lea edx, [ebp - 0x210]
mov eax, 0xf419c
call fcn.00031d88
lea eax, [ebp - 0x210]
push eax
lea edx, [ebp - 0x214]
mov eax, dword [ebp - 0x48]
call fcn.0002b100
mov edx, dword [ebp - 0x214]
pop eax
call fcn.00013ed4
mov eax, dword [ebp - 0x210]
mov edx, dword [ebp + 0xc]
call fcn.00019bc4
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf190a
cmp dword [ebp - 0x64], 0
je 0xf18fd
mov eax, dword [ebp - 0x64]
push eax
call sub.advapi32.dll_RegCloseKey_1
xor eax, eax
mov dword [ebp - 0x64], eax
ret
mov byte [ebp - 0x95], 1
lea edx, [ebp - 0x2cc]
mov eax, 0xf4348
call fcn.00031d88
mov eax, dword [ebp - 0x2cc]
mov edx, dword [ebp + 0xc]
call fcn.00019bc4
mov byte [ebp - 0xb6], 0x15
mov eax, dword [0x2a74b8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2a24
mov eax, dword [0x2a74b8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2a24
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2d0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74b8]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2d0]
mov eax, dword [0x2a7464]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf29f5
mov eax, dword [0x2a7494]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2a7d
mov eax, dword [0x2a7494]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2a7d
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2d4]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7494]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2d4]
mov eax, dword [0x2a7448]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2a4e
mov eax, dword [0x2a7490]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2ad6
mov eax, dword [0x2a7490]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2ad6
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2d8]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7490]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2d8]
mov eax, dword [0x2a743c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2aa7
mov eax, dword [0x2a74c4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2b2f
mov eax, dword [0x2a74c4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2b2f
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2dc]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74c4]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2dc]
mov eax, dword [0x2a7440]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2b00
mov eax, dword [0x2a74a4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2b88
mov eax, dword [0x2a74a4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2b88
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2e0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74a4]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e0]
mov eax, dword [0x2a744c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2b59
mov eax, dword [0x2a74bc]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2be1
mov eax, dword [0x2a74bc]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2be1
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2e4]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74bc]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e4]
mov eax, dword [0x2a7450]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2bb2
mov eax, dword [0x2a749c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2c3a
mov eax, dword [0x2a749c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2c3a
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2e8]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a749c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2e8]
mov eax, dword [0x2a7438]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2c0b
mov eax, dword [0x2a74b0]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2c93
mov eax, dword [0x2a74b0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2c93
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2ec]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74b0]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2ec]
mov eax, dword [0x2a7460]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2c64
mov eax, dword [0x2a74a8]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2cec
mov eax, dword [0x2a74a8]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2cec
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2f0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74a8]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2f0]
mov eax, dword [0x2a7454]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2cbd
mov byte [ebp - 0xb6], 0xf
mov eax, dword [0x2a7484]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2d4c
mov eax, dword [0x2a7484]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2d4c
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2f4]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7484]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2f4]
mov eax, dword [0x2a7464]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2d1d
mov eax, dword [0x2a74a0]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2da5
mov eax, dword [0x2a74a0]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2da5
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2f8]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74a0]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2f8]
mov eax, dword [0x2a7448]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2d76
mov eax, dword [0x2a747c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2dfe
mov eax, dword [0x2a747c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2dfe
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x2fc]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a747c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x2fc]
mov eax, dword [0x2a743c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2dcf
mov eax, dword [0x2a748c]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2e57
mov eax, dword [0x2a748c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2e57
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x300]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a748c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x300]
mov eax, dword [0x2a7440]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2e28
mov eax, dword [0x2a74b4]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2eb0
mov eax, dword [0x2a74b4]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2eb0
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x304]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74b4]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x304]
mov eax, dword [0x2a744c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2e81
mov eax, dword [0x2a7488]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2f09
mov eax, dword [0x2a7488]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2f09
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x308]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7488]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x308]
mov eax, dword [0x2a7450]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2eda
mov eax, dword [0x2a7478]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2f62
mov eax, dword [0x2a7478]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2f62
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x30c]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7478]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x30c]
mov eax, dword [0x2a7438]
mov ecx, dword [eax]
call dword [ecx + 0x34]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2f33
mov eax, dword [0x2a74ac]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf2fbb
mov eax, dword [0x2a74ac]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf2fbb
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x310]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a74ac]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x310]
mov eax, dword [0x2a7460]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2f8c
mov eax, dword [0x2a7480]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jle 0xf3014
mov eax, dword [0x2a7480]
mov edx, dword [eax]
call dword [edx + 0x14]
mov ebx, eax
dec ebx
test ebx, ebx
jl 0xf3014
inc ebx
mov dword [ebp - 0xb4], 0
lea ecx, [ebp - 0x314]
mov edx, dword [ebp - 0xb4]
mov eax, dword [0x2a7480]
mov esi, dword [eax]
call dword [esi + 0xc]
mov edx, dword [ebp - 0x314]
mov eax, dword [0x2a7454]
mov ecx, dword [eax]
call dword [ecx + 0x38]
inc dword [ebp - 0xb4]
dec ebx
jne 0xf2fe5
mov eax, dword [0x2a7464]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf3046
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf3068
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7440]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf308a
mov eax, dword [0x2a7440]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a744c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf30ac
mov eax, dword [0x2a744c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7450]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf30ce
mov eax, dword [0x2a7450]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7438]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf30f0
mov eax, dword [0x2a7438]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7460]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf3112
mov eax, dword [0x2a7460]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7454]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jle 0xf3134
mov eax, dword [0x2a7454]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7464]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7440]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a744c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7450]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7438]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7460]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf31e2
mov eax, dword [0x2a7454]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
je 0xf340f
mov byte [ebp - 0x95], 1
lea edx, [ebp - 0x31c]
mov eax, 0xf4368
call fcn.00031d88
push dword [ebp - 0x31c]
lea edx, [ebp - 0x320]
mov eax, dword [ebp - 0xb4]
call fcn.00033438
push dword [ebp - 0x320]
lea edx, [ebp - 0x324]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x324]
mov eax, dword [0x2a7464]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x328]
call fcn.00033438
push dword [ebp - 0x328]
lea edx, [ebp - 0x32c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x32c]
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x330]
call fcn.00033438
push dword [ebp - 0x330]
lea edx, [ebp - 0x334]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x334]
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x338]
call fcn.00033438
push dword [ebp - 0x338]
lea edx, [ebp - 0x33c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x33c]
mov eax, dword [0x2a7440]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x340]
call fcn.00033438
push dword [ebp - 0x340]
lea edx, [ebp - 0x344]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x344]
mov eax, dword [0x2a744c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x348]
call fcn.00033438
push dword [ebp - 0x348]
lea edx, [ebp - 0x34c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x34c]
mov eax, dword [0x2a7450]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x350]
call fcn.00033438
push dword [ebp - 0x350]
lea edx, [ebp - 0x354]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x354]
mov eax, dword [0x2a7438]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x358]
call fcn.00033438
push dword [ebp - 0x358]
lea edx, [ebp - 0x35c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x35c]
mov eax, dword [0x2a7460]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x360]
call fcn.00033438
push dword [ebp - 0x360]
lea edx, [ebp - 0x364]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x364]
mov eax, dword [0x2a7454]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x368]
call fcn.00033438
push dword [ebp - 0x368]
lea eax, [ebp - 0x318]
mov edx, 0x14
call fcn.00013f8c
mov eax, dword [ebp - 0x318]
mov edx, dword [ebp + 0xc]
call fcn.00019bc4
jmp 0xf340f
lea edx, [ebp - 0x36c]
mov eax, 0xf4378
call fcn.00031d88
mov edx, dword [ebp - 0x36c]
mov eax, dword [0x2a7464]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x2a7464]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf33ef
jmp 0xf3432
mov edx, 0xf4380
mov eax, dword [0x2a7448]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf3423
jmp 0xf3455
mov edx, 0xf4380
mov eax, dword [0x2a743c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a743c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf3446
jmp 0xf3478
mov edx, 0xf4380
mov eax, dword [0x2a7440]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7440]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf3469
jmp 0xf349b
mov edx, 0xf4380
mov eax, dword [0x2a744c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a744c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf348c
jmp 0xf34be
mov edx, 0xf4380
mov eax, dword [0x2a7450]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7450]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf34af
jmp 0xf34e1
mov edx, 0xf4390
mov eax, dword [0x2a7438]
mov ecx, dword [eax]
call dword [ecx + 0x34]
mov eax, dword [0x2a7438]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf34d2
jmp 0xf3504
mov edx, 0xf4380
mov eax, dword [0x2a7460]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7460]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf34f5
jmp 0xf3527
mov edx, 0xf4380
mov eax, dword [0x2a7454]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7454]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf3518
mov eax, dword [0x2a7434]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7444]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jge 0xf356b
mov eax, dword [0x2a7444]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a745c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jge 0xf358d
mov eax, dword [0x2a745c]
mov edx, dword [eax]
call dword [edx + 0x14]
mov dword [ebp - 0xb4], eax
mov eax, dword [0x2a7434]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf35c7
mov eax, dword [0x2a7444]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jne 0xf35c7
mov eax, dword [0x2a745c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
je 0xf36bd
mov byte [ebp - 0x95], 1
lea edx, [ebp - 0x374]
mov eax, 0xf4394
call fcn.00031d88
push dword [ebp - 0x374]
lea edx, [ebp - 0x378]
mov eax, dword [ebp - 0xb4]
call fcn.00033438
push dword [ebp - 0x378]
lea edx, [ebp - 0x37c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x37c]
mov eax, dword [0x2a7434]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x380]
call fcn.00033438
push dword [ebp - 0x380]
lea edx, [ebp - 0x384]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x384]
mov eax, dword [0x2a7444]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x388]
call fcn.00033438
push dword [ebp - 0x388]
lea edx, [ebp - 0x38c]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x38c]
mov eax, dword [0x2a745c]
mov edx, dword [eax]
call dword [edx + 0x14]
lea edx, [ebp - 0x390]
call fcn.00033438
push dword [ebp - 0x390]
lea eax, [ebp - 0x370]
mov edx, 8
call fcn.00013f8c
mov eax, dword [ebp - 0x370]
mov edx, dword [ebp + 0xc]
call fcn.00019bc4
jmp 0xf36bd
mov edx, 0xf4380
mov eax, dword [0x2a7434]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7434]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf36ae
jmp 0xf36e0
mov edx, 0xf4380
mov eax, dword [0x2a7444]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a7444]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf36d1
jmp 0xf3703
mov edx, 0xf4380
mov eax, dword [0x2a745c]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [0x2a745c]
mov edx, dword [eax]
call dword [edx + 0x14]
cmp eax, dword [ebp - 0xb4]
jl 0xf36f4
mov eax, dword [0x2a7448]
mov edx, dword [eax]
call dword [edx + 0x14]
test eax, eax
jne 0xf381c
call fcn.000e68f8
test al, al
je 0xf381c
cmp byte [ebp - 0xd], 0
je 0xf374d
cmp byte [ebp - 0xd], 1
je 0xf374d
cmp byte [ebp - 0xb5], 0
je 0xf381c
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp + 0xc]
push eax
cmp byte [ebp - 0xa9], 0
je 0xf3767
cmp byte [ebp - 0xb5], 0
je 0xf376b
xor edx, edx
jmp 0xf376d
mov dl, 1
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 4]
call fcn.000f017c
lea edx, [ebp - 0x398]
mov eax, 0xf43a4
call fcn.00031d88
push dword [ebp - 0x398]
lea edx, [ebp - 0x39c]
mov al, byte [ebp - 0xa9]
call fcn.0002d050
push dword [ebp - 0x39c]
lea edx, [ebp - 0x3a0]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x3a0]
lea edx, [ebp - 0x3a4]
xor eax, eax
mov al, byte [ebp - 0xd]
call fcn.00033438
push dword [ebp - 0x3a4]
lea edx, [ebp - 0x3a8]
mov eax, 0xf3fa4
call fcn.00031d88
push dword [ebp - 0x3a8]
lea edx, [ebp - 0x3ac]
mov al, byte [ebp - 0xb5]
call fcn.0002d050
push dword [ebp - 0x3ac]
lea eax, [ebp - 0x394]
mov edx, 6
call fcn.00013f8c
mov eax, dword [ebp - 0x394]
mov edx, dword [ebp + 0xc]
call fcn.00019a5c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0xf38ae
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf38ce
lea eax, [ebp - 0xb0]
call fcn.00019258
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0xf3f08
lea eax, [ebp - 0x42c]
mov edx, 4
call fcn.00013c60
lea eax, [ebp - 0x41c]
call fcn.00014314
lea eax, [ebp - 0x418]
mov edx, 3
call fcn.00013c60
lea eax, [ebp - 0x40c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x404]
mov edx, 0xa
call fcn.00013c60
lea eax, [ebp - 0x3dc]
call fcn.00014314
lea eax, [ebp - 0x3d8]
mov edx, 5
call fcn.00013c60
lea eax, [ebp - 0x3c4]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x3bc]
mov edx, 0x2a
call fcn.00013c60
lea eax, [ebp - 0x314]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x30c]
call fcn.00013c3c
lea eax, [ebp - 0x308]
mov edx, 5
call fcn.0001432c
lea eax, [ebp - 0x2f4]
call fcn.00013c3c
lea eax, [ebp - 0x2f0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x2e8]
call fcn.00013c3c
lea eax, [ebp - 0x2e4]
mov edx, 5
call fcn.0001432c
lea eax, [ebp - 0x2d0]
mov edx, 5
call fcn.00013c60
lea eax, [ebp - 0x2bc]
call fcn.00014314
lea eax, [ebp - 0x2b8]
call fcn.00013c3c
lea eax, [ebp - 0x2b4]
mov edx, 3
call fcn.0001432c
lea eax, [ebp - 0x2a8]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x298]
call fcn.00013c3c
lea eax, [ebp - 0x2a0]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0x294]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x28c]
call fcn.00013c3c
lea eax, [ebp - 0x288]
call fcn.00014314
lea eax, [ebp - 0x284]
mov edx, 3
call fcn.00013c60
lea eax, [ebp - 0x278]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x270]
call fcn.00013c3c
lea eax, [ebp - 0x26c]
call fcn.00014314
lea eax, [ebp - 0x268]
mov edx, 0xe
call fcn.00013c60
lea eax, [ebp - 0x230]
call fcn.00014314
lea eax, [ebp - 0x22c]
call fcn.00013c3c
lea eax, [ebp - 0x228]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x220]
mov edx, 5
call fcn.00013c60
lea eax, [ebp - 0x20c]
mov edx, 0x16
call fcn.0001432c
lea eax, [ebp - 0x1b4]
mov edx, 6
call fcn.00013c60
lea eax, [ebp - 0x19c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x194]
mov edx, 0xa
call fcn.00013c60
lea eax, [ebp - 0x16c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x164]
mov edx, 8
call fcn.00013c60
lea eax, [ebp - 0x144]
call fcn.00014314
lea eax, [ebp - 0x140]
mov edx, 0xa
call fcn.00013c60
lea eax, [ebp - 0xf4]
call fcn.00013c3c
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x118]
mov edx, 6
call fcn.00013c60
lea eax, [ebp - 0x100]
call fcn.00014314
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00013c60
lea eax, [ebp - 0xe8]
mov edx, 4
call fcn.00013c60
lea eax, [ebp - 0xd8]
call fcn.00014314
lea eax, [ebp - 0xd4]
mov edx, 3
call fcn.00013c60
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x94]
call fcn.00014314
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x74]
mov edx, 3
call fcn.0001432c
lea eax, [ebp - 0x60]
mov edx, 4
call fcn.0001432c
lea eax, [ebp - 0x44]
call fcn.00013c3c
lea eax, [ebp - 0x40]
call fcn.00014314
lea eax, [ebp - 0x38]
mov edx, 3
call fcn.0001432c
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0001432c
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0001432c
ret