Function at 0x1000a5b4
Capabilities:
Get disk information
Start service

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008fef6
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x16bc
call fcn.100789f0
push esi
push edi
mov dword [ebp - 0x188], 0x15256ee9
mov dword [ebp - 0x1fc], 1
mov dword [ebp - 0xcb0], 1
push 2
lea ecx, [ebp - 0xfc4]
call fcn.1001b24b
and dword [ebp - 4], 0
mov dword [ebp - 0x208], 0xc7fffaa2
mov dword [ebp - 0x14cc], 0xf0e77da1
mov dword [ebp - 0xef0], 0x67606e82
mov dword [ebp - 0xaf8], 0x503b5b0d
mov dword [ebp - 0x14b0], 0xfffffffd
mov dword [ebp - 0xf24], 7
push 3
lea ecx, [ebp - 0x1064]
call fcn.1001b24b
mov byte [ebp - 4], 1
mov dword [ebp - 0xf1c], 1
mov dword [ebp - 0x18], 0
jmp 0x1000a66e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 1
jge 0x1000a681
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0x37c0
jmp 0x1000a667
mov dword [ebp - 0x18], 0
jmp 0x1000a691
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000a6aa
push dword [ebp - 0x18]
lea ecx, [ebp - 0xfc4]
call fcn.1001b2e9
or dword [eax], 0xffffffff
jmp 0x1000a68a
mov dword [ebp - 0x18], 0
jmp 0x1000a6ba
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1000a6d6
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1064]
call fcn.1001b2e9
mov dword [eax], 0x422f8dc7
jmp 0x1000a6b3
mov dword [ebp - 0x18], 0
jmp 0x1000a6e6
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 2
jge 0x1000a6fc
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x109c], 0xffffffff
jmp 0x1000a6df
mov dword [ebp - 0x18], 0
jmp 0x1000a70c
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x1000a722
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1684], 0xffff
jmp 0x1000a705
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7c]
cmp dword [ebp + eax - 0x7c], ecx
jg 0x1000a744
mov dword [ebp - 0x9a4], 1
jmp 0x1000a74b
and dword [ebp - 0x9a4], 0
cmp dword [ebp - 0x9a4], 0x934f
jge 0x1000a763
mov dword [ebp - 0xca0], 1
jmp 0x1000a76a
and dword [ebp - 0xca0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp eax, dword [ebp - 0xca0]
jl 0x1000a7b2
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x188]
cmp dword [ebp + eax - 0x7c], ecx
mov eax, dword [ebp - 0x1fc]
imul eax, dword [ebp - 0x188]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x7c]
inc eax
je 0x1000a7b2
mov dword [ebp - 0xda0], 1
jmp 0x1000a7b9
and dword [ebp - 0xda0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
add eax, 0x9102
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x7c]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x7c]
jge 0x1000a7f7
mov dword [ebp - 0xca8], 1
jmp 0x1000a7fe
and dword [ebp - 0xca8], 0
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0xcb0], eax
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0xcb8], eax
push 1
lea ecx, [ebp - 0xfc4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xcb8]
mov dword [eax], ecx
cmp dword [ebp - 0xcb8], 0
jne 0x1000a840
mov dword [ebp - 0xcc0], 1
jmp 0x1000a847
and dword [ebp - 0xcc0], 0
mov eax, dword [ebp - 0xcc0]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
je 0x1000a8e3
mov dword [ebp - 0xed0], 1
mov byte [ebp - 0x183], 0
movzx eax, byte [ebp - 0x183]
test eax, eax
je 0x1000a898
push 0x2396
push 0xbcd
push 0x20c
push 0x3f1
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov eax, dword [ebp - 0xed0]
mov dword [ebp - 0x13c8], eax
push 1
lea ecx, [ebp - 0xfc4]
call fcn.1001b2e9
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x7c]
cmp dword [eax], ecx
jg 0x1000a8cb
mov dword [ebp - 0xcc8], 1
jmp 0x1000a8d2
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0xcc8]
mov dword [ebp - 0x208], eax
jmp 0x1000ab91
mov dword [ebp - 0x3ec], 0xdb756fd8
mov dword [ebp - 0x3e4], 0xac155ea0
mov dword [ebp - 0x45c], 0x92ce4ca0
mov dword [ebp - 0x49c], 0x4e821fd1
mov dword [ebp - 0x294], 0
jmp 0x1000a924
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 4
jge 0x1000a940
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0x1288], 0xdcd6a9b0
jmp 0x1000a917
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov dword [ebp - 0x3ec], eax
cmp dword [ebp - 0xaf8], 0
je 0x1000a972
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
je 0x1000a972
mov dword [ebp - 0xcd0], 1
jmp 0x1000a979
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x3e4], eax
imul esi, dword [ebp - 0x3e4], 6
add esi, dword [ebp - 0x45c]
push 1
lea ecx, [ebp - 0xfc4]
call fcn.1001b2e9
cmp esi, dword [eax]
je 0x1000a9af
mov dword [ebp - 0xcd8], 1
jmp 0x1000a9b6
and dword [ebp - 0xcd8], 0
cmp dword [ebp - 0xcd8], 0xffffffff
ja 0x1000a9d1
cmp dword [ebp - 0x188], 0
jne 0x1000a9d1
and dword [ebp - 0xce0], 0
jmp 0x1000a9db
mov dword [ebp - 0xce0], 1
cmp dword [ebp - 0xce0], 0x4902
jle 0x1000a9f3
mov dword [ebp - 0xed8], 1
jmp 0x1000a9fa
and dword [ebp - 0xed8], 0
mov dword [ebp - 0x45c], 0xba24
mov eax, dword [ebp - 0x45c]
add eax, 6
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x1288]
jne 0x1000aa30
cmp dword [ebp - 0x3e4], 0
je 0x1000aa30
mov dword [ebp - 0xce8], 1
jmp 0x1000aa37
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x3ec]
cmp eax, dword [ebp - 0xce8]
jg 0x1000aa51
mov dword [ebp - 0xcf0], 1
jmp 0x1000aa58
and dword [ebp - 0xcf0], 0
mov eax, dword [ebp - 0xcf0]
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x153c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x1288], 0xa547
jle 0x1000aa8f
mov dword [ebp - 0xee0], 1
jmp 0x1000aa96
and dword [ebp - 0xee0], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1288]
mov dword [ebp - 0x13d0], eax
push 0
lea ecx, [ebp - 0x1064]
call fcn.1001b2e9
cmp dword [eax], 0
je 0x1000aacf
cmp dword [ebp - 0x49c], 0
je 0x1000aacf
mov dword [ebp - 0xcf8], 1
jmp 0x1000aad6
and dword [ebp - 0xcf8], 0
mov esi, dword [ebp - 0x188]
sub esi, dword [ebp - 0xcf8]
push 1
lea ecx, [ebp - 0x1064]
call fcn.1001b2e9
imul esi, dword [eax]
cmp esi, 3
jb 0x1000ab03
mov dword [ebp - 0xd00], 1
jmp 0x1000ab0a
and dword [ebp - 0xd00], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
cmp dword [ebp - 0xd00], eax
jne 0x1000ab28
mov dword [ebp - 0xee8], 1
jmp 0x1000ab2f
and dword [ebp - 0xee8], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x14b8], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x109c]
dec eax
mov dword [ebp - 0xd08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd08]
mov dword [ebp + eax - 0x109c], ecx
cmp dword [ebp - 0xd08], 0xfffffff7
je 0x1000ab77
mov dword [ebp - 0xd10], 1
jmp 0x1000ab7e
and dword [ebp - 0xd10], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xd10]
mov dword [ebp + eax - 0x1288], ecx
mov dword [ebp - 0x1fc], 0
jmp 0x1000abaa
mov eax, dword [ebp - 0x1fc]
inc eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0xa
jne 0x1000acb6
mov dword [ebp - 0x268], 0x5445d8d6
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xef0]
cmp dword [ebp + eax - 0x1684], ecx
jne 0x1000abf9
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x13d8], eax
mov eax, dword [ebp - 0x268]
add eax, 8
je 0x1000abf9
mov dword [ebp - 0xd18], 1
jmp 0x1000ac00
and dword [ebp - 0xd18], 0
cmp dword [ebp - 0xd18], 0x7a9f
jge 0x1000ac18
mov dword [ebp - 0xd20], 1
jmp 0x1000ac1f
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0xd20]
add eax, 4
cmp eax, dword [ebp - 0xaf8]
je 0x1000ac3c
mov dword [ebp - 0xf14], 1
jmp 0x1000ac43
and dword [ebp - 0xf14], 0
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x13f0], eax
cmp dword [ebp - 0x268], 0
jne 0x1000ac6a
cmp dword [ebp - 0xf1c], 0
jne 0x1000ac6a
and dword [ebp - 0x528], 0
jmp 0x1000ac74
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 5
jge 0x1000ac9b
cmp dword [ebp - 0x268], 0
jne 0x1000ac9b
and dword [ebp - 0xb00], 0
jmp 0x1000aca5
mov dword [ebp - 0xb00], 1
mov eax, dword [ebp - 0xb00]
mov dword [ebp - 0xf24], eax
jmp 0x1000ab9d
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1064]
call fcn.1001b2cd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc4]
call fcn.1001b2cd
mov dword [ebp - 0x210], 0x8e41
mov dword [ebp - 0xb18], 0xfffffff8
mov dword [ebp - 0x464], 0
mov dword [ebp - 0x298], 0
jmp 0x1000ad0b
mov eax, dword [ebp - 0x298]
inc eax
mov dword [ebp - 0x298], eax
cmp dword [ebp - 0x298], 4
jge 0x1000ad27
mov eax, dword [ebp - 0x298]
mov dword [ebp + eax*4 - 0x15e4], 0x30dfddae
jmp 0x1000acfe
mov byte [ebp - 0x15c], 0
movzx eax, byte [ebp - 0x15c]
test eax, eax
je 0x1000ad43
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
cmp dword [ebp - 0x210], 1
jl 0x1000ad61
mov eax, 0xffff
test eax, eax
je 0x1000ad61
mov dword [ebp - 0x530], 1
jmp 0x1000ad68
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x210]
cmp eax, dword [ebp - 0x530]
jge 0x1000ad82
mov dword [ebp - 0xb08], 1
jmp 0x1000ad89
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0xb08], eax
jg 0x1000ada3
mov dword [ebp - 0x538], 1
jmp 0x1000adaa
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0xb18]
cmp dword [ebp - 0x538], eax
jg 0x1000adc4
mov dword [ebp - 0xb10], 1
jmp 0x1000adcb
and dword [ebp - 0xb10], 0
mov eax, dword [ebp - 0xb10]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x464]
sub eax, 0x32f3
cmp eax, 1
jl 0x1000adf3
mov dword [ebp - 0x540], 1
jmp 0x1000adfa
and dword [ebp - 0x540], 0
cmp dword [ebp - 0x540], 1
jae 0x1000ae0f
mov dword [ebp - 0xf2c], 1
jmp 0x1000ae16
and dword [ebp - 0xf2c], 0
mov eax, dword [ebp - 0xb18]
mov dword [ebp - 0x13e0], eax
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0x13f8], eax
mov eax, dword [ebp - 0x210]
add eax, 0x1355fff
neg eax
je 0x1000ae46
mov eax, 0xe071
test eax, eax
jne 0x1000ae58
cmp dword [ebp - 0x210], 0
jne 0x1000ae58
and dword [ebp - 0x548], 0
jmp 0x1000ae62
mov dword [ebp - 0x548], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x548]
mov dword [ebp + eax - 0x15e4], ecx
mov dword [ebp - 0x1f0], 0x15256ee9
mov dword [ebp - 0xd9c], 0x7f6af112
mov dword [ebp - 0xd98], 0x7f6af112
mov dword [ebp - 0xd94], 0x7f6af112
mov dword [ebp - 0xd90], 0x7f6af112
mov dword [ebp - 0x74], 0xffffffff
mov dword [ebp - 0xf4c], 0xffffffff
mov dword [ebp - 0x4c4], 0xfffffff8
mov dword [ebp - 0x3f4], 0xd8ef068c
push 3
lea ecx, [ebp - 0x11e4]
call fcn.1001b24b
mov dword [ebp - 4], 2
mov dword [ebp - 0x31c], 0
jmp 0x1000aef8
mov eax, dword [ebp - 0x31c]
inc eax
mov dword [ebp - 0x31c], eax
cmp dword [ebp - 0x31c], 3
jge 0x1000af17
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x11e4]
call fcn.1001b2e9
or dword [eax], 0xffffffff
jmp 0x1000aeeb
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xd9c], 0
jmp 0x1000af42
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd9c]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xd9c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xd9c], 0x1c
je 0x1000b08b
push 1
lea ecx, [ebp - 0x11cc]
call fcn.1001b24b
mov byte [ebp - 4], 3
mov dword [ebp - 0xcc], 0
jmp 0x1000af7f
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1000afa1
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x11cc]
call fcn.1001b2e9
mov dword [eax], 0xd83d
jmp 0x1000af72
mov dword [ebp - 0xcc], 0
jmp 0x1000afba
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x1000afd6
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0xf3c], 1
jmp 0x1000afad
cmp dword [ebp - 0x74], 0
je 0x1000b066
mov dword [ebp - 0x74], 0x19
jmp 0x1000aff0
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x2b
je 0x1000b03b
mov dword [ebp - 0x2a0], 0xfffffff6
mov dword [ebp - 0x2a0], 0
jmp 0x1000b019
mov eax, dword [ebp - 0x2a0]
dec eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 0xfffffff7
jne 0x1000b039
mov dword [ebp - 0xf34], 0xffffffff
cmp dword [ebp - 0xf34], 0
je 0x1000b037
jmp 0x1000b039
jmp 0x1000b00c
jmp 0x1000afe9
mov dword [ebp - 0x74], 0
jmp 0x1000b04b
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x1000b064
push dword [ebp - 0x74]
lea ecx, [ebp - 0x11cc]
call fcn.1001b2e9
and dword [eax], 0
jmp 0x1000b044
jmp 0x1000b077
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf3c], 0xffffffff
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x11cc]
call fcn.1001b2cd
jmp 0x1000af29
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xf44], eax
mov eax, dword [ebp - 0x3f4]
dec eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0xf44], 0xfffffff8
je 0x1000b0b9
mov dword [ebp - 0x550], 1
jmp 0x1000b0c0
and dword [ebp - 0x550], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xd9c]
mov dword [ebp - 0xb20], eax
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0xb20]
mov dword [ebp + eax - 0xd9c], ecx
mov eax, dword [ebp - 0x74]
add eax, dword [ebp - 0xb20]
add eax, dword [ebp - 0x550]
cmp eax, dword [ebp - 0x74]
jne 0x1000b106
mov dword [ebp - 0x558], 1
jmp 0x1000b10d
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x4c4]
cmp dword [ebp - 0x74], eax
je 0x1000b124
mov dword [ebp - 0xb28], 1
jmp 0x1000b12b
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x13e8], eax
mov eax, dword [ebp - 0xf4c]
cmp dword [ebp - 0x558], eax
jge 0x1000b15d
mov dword [ebp - 0xb30], 1
jmp 0x1000b164
and dword [ebp - 0xb30], 0
push 0
lea ecx, [ebp - 0x11e4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xb30]
mov dword [eax], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x11e4]
call fcn.1001b2cd
mov dword [ebp - 0x260], 1
mov dword [ebp - 0xb90], 1
mov dword [ebp - 0x248], 0x75c9
push 1
lea ecx, [ebp - 0x122c]
call fcn.1001b24b
mov dword [ebp - 4], 4
mov dword [ebp - 0x320], 0
jmp 0x1000b1d3
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 1
jge 0x1000b1f5
push dword [ebp - 0x320]
lea ecx, [ebp - 0x122c]
call fcn.1001b2e9
mov dword [eax], 0xe87df2f4
jmp 0x1000b1c6
mov esi, dword [ebp - 0x248]
push 0
lea ecx, [ebp - 0x122c]
call fcn.1001b2e9
mov dword [eax], esi
mov dword [ebp - 0x248], 0xfffffffd
jmp 0x1000b223
mov eax, dword [ebp - 0x248]
dec eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 0xffffffe6
jge 0x1000b24f
mov byte [ebp - 0x180], 0
movzx eax, byte [ebp - 0x180]
test eax, eax
je 0x1000b24d
push 0xf7e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
jmp 0x1000b216
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x122c]
call fcn.1001b2cd
push 2
lea ecx, [ebp - 0xfd4]
call fcn.1001b24b
mov dword [ebp - 4], 5
mov dword [ebp - 0x11ac], 0xd6c05baf
mov dword [ebp - 0x11a8], 0xd6c05baf
mov dword [ebp - 0x11a4], 0xd6c05baf
mov dword [ebp - 0x11a0], 0xd6c05baf
lea ecx, [ebp - 0x4bd]
call fcn.1000a403
push eax
lea eax, [ebp - 0x119c]
push eax
lea eax, [ebp - 0x11ac]
push eax
lea ecx, [ebp - 0x1624]
call fcn.1001b2f8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x3cc]
call fcn.1001b2a7
mov byte [ebp - 4], 6
mov dword [ebp - 0xb68], 0xfffffff9
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
and dword [eax], 0
jmp 0x1000b313
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x560]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
cmp dword [eax], 0x15
jl 0x1000b705
mov dword [ebp - 0xa0], 0x4074dd03
mov dword [ebp - 0x3fc], 0xffffffff
mov dword [ebp - 0xa0], 0
jmp 0x1000b356
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffffe
jge 0x1000b700
mov dword [ebp - 0xa8], 0x27fa
mov dword [ebp - 0x218], 0x1fa4
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xa0]
imul ecx, dword [eax]
cmp ecx, 0xd1d2
jle 0x1000b3a1
mov dword [ebp - 0xb38], 1
jmp 0x1000b3a8
and dword [ebp - 0xb38], 0
mov eax, 0x7c14
sub eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0xb38]
jne 0x1000b3c7
mov dword [ebp - 0x568], 1
jmp 0x1000b3ce
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x568], eax
jne 0x1000b3e8
mov dword [ebp - 0xb40], 1
jmp 0x1000b3ef
and dword [ebp - 0xb40], 0
imul eax, dword [ebp - 0xb40], 0x639
cmp eax, 0x4137
jne 0x1000b40c
mov dword [ebp - 0xf54], 1
jmp 0x1000b413
and dword [ebp - 0xf54], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x1504], eax
cmp dword [ebp - 0xa0], 1
jge 0x1000b434
mov dword [ebp - 0x570], 1
jmp 0x1000b43b
and dword [ebp - 0x570], 0
mov eax, dword [ebp - 0x570]
dec eax
cmp dword [ebp - 0xa8], eax
jne 0x1000b456
mov dword [ebp - 0xb48], 1
jmp 0x1000b45d
and dword [ebp - 0xb48], 0
mov eax, dword [ebp - 0xa8]
imul eax, dword [ebp - 0xb48]
cmp eax, dword [ebp - 0xa8]
jle 0x1000b47e
mov dword [ebp - 0xf5c], 1
jmp 0x1000b485
and dword [ebp - 0xf5c], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x13fc], eax
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], eax
jg 0x1000b4b8
mov dword [ebp - 0x578], 1
jmp 0x1000b4bf
and dword [ebp - 0x578], 0
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov esi, dword [ebp - 0x578]
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
add esi, dword [eax]
cmp esi, 9
jge 0x1000b4f4
mov dword [ebp - 0xb50], 1
jmp 0x1000b4fb
and dword [ebp - 0xb50], 0
imul eax, dword [ebp - 0xb50], 0
cmp eax, dword [ebp - 0xa8]
jl 0x1000b516
mov dword [ebp - 0x580], 1
jmp 0x1000b51d
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x580]
sub eax, dword [ebp - 0xa8]
jne 0x1000b53d
cmp dword [ebp - 0xa8], 0
jne 0x1000b53d
and dword [ebp - 0xb58], 0
jmp 0x1000b547
mov dword [ebp - 0xb58], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xb58], eax
jle 0x1000b561
mov dword [ebp - 0x588], 1
jmp 0x1000b568
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0xb68], eax
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x1000b69a
cmp dword [ebp - 0x3fc], 0
je 0x1000b62e
push 2
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x1000b5be
cmp dword [ebp - 0x218], 0xffff
ja 0x1000b5be
and dword [ebp - 0xb60], 0
jmp 0x1000b5c8
mov dword [ebp - 0xb60], 1
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0xb60]
cmp eax, dword [ebp - 0x3fc]
je 0x1000b5e8
mov dword [ebp - 0x590], 1
jmp 0x1000b5ef
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
neg eax
cmp eax, dword [ebp - 0x218]
jge 0x1000b60b
mov dword [ebp - 0xf64], 1
jmp 0x1000b612
and dword [ebp - 0xf64], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x14c0], eax
xor eax, eax
je 0x1000b62e
mov dword [ebp - 0x598], 1
jmp 0x1000b635
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0xb68]
cmp dword [ebp - 0x598], eax
jl 0x1000b64f
mov dword [ebp - 0xb70], 1
jmp 0x1000b656
and dword [ebp - 0xb70], 0
push 3
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xb70]
cmp ecx, dword [eax]
jge 0x1000b679
mov dword [ebp - 0x5a0], 1
jmp 0x1000b680
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x5a0]
test eax, eax
jne 0x1000b69a
and dword [ebp - 0xb78], 0
jmp 0x1000b6a4
mov dword [ebp - 0xb78], 1
mov eax, dword [ebp - 0x218]
cmp dword [ebp - 0xb78], eax
jne 0x1000b6be
mov dword [ebp - 0x5a8], 1
jmp 0x1000b6c5
and dword [ebp - 0x5a8], 0
push 3
lea ecx, [ebp - 0x3cc]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x5a8]
cmp ecx, dword [eax]
je 0x1000b6e8
mov dword [ebp - 0xb80], 1
jmp 0x1000b6ef
and dword [ebp - 0xb80], 0
mov eax, dword [ebp - 0xb80]
mov dword [ebp - 0x3fc], eax
jmp 0x1000b349
jmp 0x1000b2ef
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x3cc]
call fcn.1001b2cd
mov dword [ebp - 0x220], 0xc7fffaa2
mov dword [ebp - 0x1404], 0xf0e77da1
mov dword [ebp - 0xf94], 0x67606e82
mov dword [ebp - 0x5f8], 0x503b5b0d
mov dword [ebp - 0x1524], 0xfffffffd
mov dword [ebp - 0xfac], 7
push 3
lea ecx, [ebp - 0x1088]
call fcn.1001b24b
mov byte [ebp - 4], 7
mov dword [ebp - 0xfa4], 1
mov dword [ebp - 0x14], 0
jmp 0x1000b77b
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1000b791
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x84], 0x37c0
jmp 0x1000b774
mov dword [ebp - 0x14], 0
jmp 0x1000b7a1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000b7ba
push dword [ebp - 0x14]
lea ecx, [ebp - 0xfd4]
call fcn.1001b2e9
or dword [eax], 0xffffffff
jmp 0x1000b79a
mov dword [ebp - 0x14], 0
jmp 0x1000b7ca
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1000b7e6
push dword [ebp - 0x14]
lea ecx, [ebp - 0x1088]
call fcn.1001b2e9
mov dword [eax], 0x422f8dc7
jmp 0x1000b7c3
mov dword [ebp - 0x14], 0
jmp 0x1000b7f6
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1000b80c
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x10b4], 0xffffffff
jmp 0x1000b7ef
mov dword [ebp - 0x14], 0
jmp 0x1000b81c
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x1000b832
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x163c], 0xffff
jmp 0x1000b815
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x84]
cmp dword [ebp + eax - 0x84], ecx
jg 0x1000b85a
mov dword [ebp - 0x5b0], 1
jmp 0x1000b861
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0x934f
jge 0x1000b879
mov dword [ebp - 0xb88], 1
jmp 0x1000b880
and dword [ebp - 0xb88], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp eax, dword [ebp - 0xb88]
jl 0x1000b8d1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1f0]
cmp dword [ebp + eax - 0x84], ecx
mov eax, dword [ebp - 0x260]
imul eax, dword [ebp - 0x1f0]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x84]
inc eax
je 0x1000b8d1
mov dword [ebp - 0xf6c], 1
jmp 0x1000b8d8
and dword [ebp - 0xf6c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
add eax, 0x9102
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x84]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x84]
jge 0x1000b91f
mov dword [ebp - 0x5b8], 1
jmp 0x1000b926
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xb90]
mov dword [ebp - 0x5c0], eax
push 1
lea ecx, [ebp - 0xfd4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x5c0]
mov dword [eax], ecx
cmp dword [ebp - 0x5c0], 0
jne 0x1000b968
mov dword [ebp - 0xb98], 1
jmp 0x1000b96f
and dword [ebp - 0xb98], 0
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
je 0x1000ba0e
mov dword [ebp - 0xf74], 1
mov byte [ebp - 0x15e], 0
movzx eax, byte [ebp - 0x15e]
test eax, eax
je 0x1000b9c0
push 0x2396
push 0xbcd
push 0x20c
push 0x3f1
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov eax, dword [ebp - 0xf74]
mov dword [ebp - 0x140c], eax
push 1
lea ecx, [ebp - 0xfd4]
call fcn.1001b2e9
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x84]
cmp dword [eax], ecx
jg 0x1000b9f6
mov dword [ebp - 0x5c8], 1
jmp 0x1000b9fd
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x220], eax
jmp 0x1000bcc5
mov dword [ebp - 0x40c], 0xdb756fd8
mov dword [ebp - 0x404], 0xac155ea0
mov dword [ebp - 0x46c], 0x92ce4ca0
mov dword [ebp - 0x4ac], 0x4e821fd1
mov dword [ebp - 0x2a8], 0
jmp 0x1000ba4f
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 4
jge 0x1000ba6b
mov eax, dword [ebp - 0x2a8]
mov dword [ebp + eax*4 - 0x12b8], 0xdcd6a9b0
jmp 0x1000ba42
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x5f8], 0
je 0x1000baa3
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x1000baa3
mov dword [ebp - 0xbc8], 1
jmp 0x1000baaa
and dword [ebp - 0xbc8], 0
mov eax, dword [ebp - 0xbc8]
mov dword [ebp - 0x404], eax
imul esi, dword [ebp - 0x404], 6
add esi, dword [ebp - 0x46c]
push 1
lea ecx, [ebp - 0xfd4]
call fcn.1001b2e9
cmp esi, dword [eax]
je 0x1000bae0
mov dword [ebp - 0x5d0], 1
jmp 0x1000bae7
and dword [ebp - 0x5d0], 0
cmp dword [ebp - 0x5d0], 0xffffffff
ja 0x1000bb02
cmp dword [ebp - 0x1f0], 0
jne 0x1000bb02
and dword [ebp - 0xbd0], 0
jmp 0x1000bb0c
mov dword [ebp - 0xbd0], 1
cmp dword [ebp - 0xbd0], 0x4902
jle 0x1000bb24
mov dword [ebp - 0xf7c], 1
jmp 0x1000bb2b
and dword [ebp - 0xf7c], 0
mov dword [ebp - 0x46c], 0xba24
mov eax, dword [ebp - 0x46c]
add eax, 6
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x12b8]
jne 0x1000bb61
cmp dword [ebp - 0x404], 0
je 0x1000bb61
mov dword [ebp - 0x5d8], 1
jmp 0x1000bb68
and dword [ebp - 0x5d8], 0
mov eax, dword [ebp - 0x40c]
cmp eax, dword [ebp - 0x5d8]
jg 0x1000bb82
mov dword [ebp - 0xbd8], 1
jmp 0x1000bb89
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0xbd8]
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x14c8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x12b8], 0xa547
jle 0x1000bbc0
mov dword [ebp - 0xf84], 1
jmp 0x1000bbc7
and dword [ebp - 0xf84], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x12b8]
mov dword [ebp - 0x1414], eax
push 0
lea ecx, [ebp - 0x1088]
call fcn.1001b2e9
cmp dword [eax], 0
je 0x1000bc00
cmp dword [ebp - 0x4ac], 0
je 0x1000bc00
mov dword [ebp - 0x5e0], 1
jmp 0x1000bc07
and dword [ebp - 0x5e0], 0
mov esi, dword [ebp - 0x1f0]
sub esi, dword [ebp - 0x5e0]
push 1
lea ecx, [ebp - 0x1088]
call fcn.1001b2e9
imul esi, dword [eax]
cmp esi, 3
jb 0x1000bc34
mov dword [ebp - 0xbe0], 1
jmp 0x1000bc3b
and dword [ebp - 0xbe0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xbe0], eax
jne 0x1000bc5c
mov dword [ebp - 0xf8c], 1
jmp 0x1000bc63
and dword [ebp - 0xf8c], 0
mov eax, dword [ebp - 0x40c]
mov dword [ebp - 0x150c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x10b4]
dec eax
mov dword [ebp - 0x5e8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5e8]
mov dword [ebp + eax - 0x10b4], ecx
cmp dword [ebp - 0x5e8], 0xfffffff7
je 0x1000bcab
mov dword [ebp - 0xbe8], 1
jmp 0x1000bcb2
and dword [ebp - 0xbe8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xbe8]
mov dword [ebp + eax - 0x12b8], ecx
mov dword [ebp - 0x260], 0
jmp 0x1000bcde
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xa
jne 0x1000bdea
mov dword [ebp - 0x250], 0x5445d8d6
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xf94]
cmp dword [ebp + eax - 0x163c], ecx
jne 0x1000bd2d
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x141c], eax
mov eax, dword [ebp - 0x250]
add eax, 8
je 0x1000bd2d
mov dword [ebp - 0x5f0], 1
jmp 0x1000bd34
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 0x7a9f
jge 0x1000bd4c
mov dword [ebp - 0xbf0], 1
jmp 0x1000bd53
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0xbf0]
add eax, 4
cmp eax, dword [ebp - 0x5f8]
je 0x1000bd70
mov dword [ebp - 0xf9c], 1
jmp 0x1000bd77
and dword [ebp - 0xf9c], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x12f0], eax
cmp dword [ebp - 0x250], 0
jne 0x1000bd9e
cmp dword [ebp - 0xfa4], 0
jne 0x1000bd9e
and dword [ebp - 0xbf8], 0
jmp 0x1000bda8
mov dword [ebp - 0xbf8], 1
mov eax, dword [ebp - 0xbf8]
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 5
jge 0x1000bdcf
cmp dword [ebp - 0x250], 0
jne 0x1000bdcf
and dword [ebp - 0x600], 0
jmp 0x1000bdd9
mov dword [ebp - 0x600], 1
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xfac], eax
jmp 0x1000bcd1
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1088]
call fcn.1001b2cd
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfd4]
call fcn.1001b2cd
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x1134], 0x510212ae
mov dword [ebp - 0x1130], 0x510212ae
mov dword [ebp - 0x112c], 0x510212ae
mov dword [ebp - 0x1128], 0x510212ae
lea ecx, [ebp - 0x4f1]
call fcn.1000a403
push eax
lea eax, [ebp - 0x1124]
push eax
lea eax, [ebp - 0x1134]
push eax
lea ecx, [ebp - 0x159c]
call fcn.1001b2f8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xff4]
call fcn.1001b2a7
mov dword [ebp - 4], 8
cmp dword [ebp - 0x28], 0
je 0x1000be89
xor eax, eax
je 0x1000be89
mov dword [ebp - 0xc00], 1
jmp 0x1000be90
and dword [ebp - 0xc00], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xc00]
jle 0x1000bea7
mov dword [ebp - 0x608], 1
jmp 0x1000beae
and dword [ebp - 0x608], 0
cmp dword [ebp - 0x608], 0x22a149ce
jge 0x1000bec6
mov dword [ebp - 0xc08], 1
jmp 0x1000becd
and dword [ebp - 0xc08], 0
cmp dword [ebp - 0xc08], 0xc0bf
jle 0x1000c325
push 4
lea ecx, [ebp - 0xfe4]
call fcn.1001b24b
mov byte [ebp - 4], 9
mov dword [ebp - 0x1c4], 1
mov dword [ebp - 0x648], 0xfffffffd
mov dword [ebp - 0xe0], 0
jmp 0x1000bf1b
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 4
jge 0x1000bf3d
push dword [ebp - 0xe0]
lea ecx, [ebp - 0xfe4]
call fcn.1001b2e9
mov dword [eax], 4
jmp 0x1000bf0e
mov dword [ebp - 0xe0], 0
jmp 0x1000bf56
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 1
jge 0x1000bf72
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0xf90], 0xe735
jmp 0x1000bf49
mov dword [ebp - 0x28], 3
jmp 0x1000bf82
mov eax, dword [ebp - 0x28]
dec eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jl 0x1000c138
mov dword [ebp - 0x1f8], 4
mov dword [ebp - 0x37c], 0
jmp 0x1000bfaf
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 1
jge 0x1000bfcb
mov eax, dword [ebp - 0x37c]
mov dword [ebp + eax*4 - 0x610], 0xe815
jmp 0x1000bfa2
mov dword [ebp - 0x1f8], 3
jmp 0x1000bfe4
mov eax, dword [ebp - 0x1f8]
dec eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jl 0x1000c133
mov dword [ebp - 0xc18], 0x59ec1348
mov byte [ebp - 0x160], 0
movzx eax, byte [ebp - 0x160]
test eax, eax
je 0x1000c013
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
push dword [ebp - 0x28]
lea ecx, [ebp - 0xfe4]
call fcn.1001b2e9
cmp dword [eax], 1
jne 0x1000c032
mov dword [ebp - 0xfb4], 1
jmp 0x1000c039
and dword [ebp - 0xfb4], 0
mov eax, dword [ebp - 0x1f8]
mov dword [ebp - 0x12f4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x610], 0xfffffffa
ja 0x1000c061
mov dword [ebp - 0x474], 1
jmp 0x1000c068
and dword [ebp - 0x474], 0
push dword [ebp - 0x28]
lea ecx, [ebp - 0xfe4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x474]
mov dword [eax], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x610]
cmp eax, dword [ebp - 0x474]
je 0x1000c09f
mov dword [ebp - 0xc10], 1
jmp 0x1000c0a6
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xc10], eax
jne 0x1000c0bd
mov dword [ebp - 0x618], 1
jmp 0x1000c0c4
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x618]
mov dword [ebp - 0xc18], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf90]
cmp dword [ebp - 0xc18], eax
je 0x1000c0f1
mov dword [ebp - 0x620], 1
jmp 0x1000c0f8
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
sub eax, 6
jne 0x1000c115
cmp dword [ebp - 0x1f8], 0
jne 0x1000c115
and dword [ebp - 0xc20], 0
jmp 0x1000c11f
mov dword [ebp - 0xc20], 1
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xc20]
mov dword [ebp - 0x1c4], eax
jmp 0x1000bfd7
jmp 0x1000bf7b
mov dword [ebp - 0x1c4], 0xffffffea
jmp 0x1000c151
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0xfffffff0
jg 0x1000c314
mov dword [ebp - 0xdac], 0x9919139f
mov dword [ebp - 0x2b0], 0
jmp 0x1000c181
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 4
jge 0x1000c19d
mov eax, dword [ebp - 0x2b0]
mov dword [ebp + eax*4 - 0x1278], 0x35e45db0
jmp 0x1000c174
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x1278], 0
je 0x1000c297
push 4
pop eax
shl eax, 1
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x1278]
cmp dword [ebp + eax - 0x1278], ecx
jg 0x1000c1d6
mov dword [ebp - 0x628], 1
jmp 0x1000c1dd
and dword [ebp - 0x628], 0
mov eax, dword [ebp - 0x628]
sub eax, dword [ebp - 0x648]
cmp eax, 1
jl 0x1000c1fa
mov dword [ebp - 0xc28], 1
jmp 0x1000c201
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0xc28]
sub eax, dword [ebp - 0x1c4]
add eax, 4
cmp eax, 0xfffffff7
je 0x1000c221
mov dword [ebp - 0x630], 1
jmp 0x1000c228
and dword [ebp - 0x630], 0
cmp dword [ebp - 0x630], 1
je 0x1000c23d
mov dword [ebp - 0xc30], 1
jmp 0x1000c244
and dword [ebp - 0xc30], 0
push 3
lea ecx, [ebp - 0xfe4]
call fcn.1001b2e9
and dword [eax], 0
cmp dword [ebp - 0xc30], 0
jl 0x1000c269
mov dword [ebp - 0x414], 1
jmp 0x1000c270
and dword [ebp - 0x414], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x414]
mov dword [ebp + eax - 0x1278], ecx
cmp dword [ebp - 0x414], 0
je 0x1000c297
mov dword [ebp - 0x638], 1
jmp 0x1000c29e
and dword [ebp - 0x638], 0
cmp dword [ebp - 0x638], 0x34071e99
je 0x1000c2bc
cmp dword [ebp - 0xdac], 0
jne 0x1000c2bc
and dword [ebp - 0xc38], 0
jmp 0x1000c2c6
mov dword [ebp - 0xc38], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xc38], eax
je 0x1000c2dd
mov dword [ebp - 0x640], 1
jmp 0x1000c2e4
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0x2495
jge 0x1000c2fc
mov dword [ebp - 0xc40], 1
jmp 0x1000c303
and dword [ebp - 0xc40], 0
mov eax, dword [ebp - 0xc40]
mov dword [ebp - 0x648], eax
jmp 0x1000c144
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xfe4]
call fcn.1001b2cd
jmp 0x1000c33d
mov byte [ebp - 0x17e], 0
movzx eax, byte [ebp - 0x17e]
test eax, eax
je 0x1000c33d
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x28], 0
jmp 0x1000c34d
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1000c399
push dword [ebp - 0x28]
lea ecx, [ebp - 0xff4]
call fcn.1001b2e9
mov esi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0xff4]
call fcn.1001b2e9
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0xff4]
call fcn.1001b2e9
mov esi, eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0xff4]
call fcn.1001b2e9
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000c346
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xff4]
call fcn.1001b2cd
mov dword [ebp - 0x1ec], 0x15256ee9
mov dword [ebp - 0x200], 1
mov dword [ebp - 0x88], 9
mov dword [ebp - 0x194], 1
push 3
lea ecx, [ebp - 0x3b4]
call fcn.1001b24b
mov dword [ebp - 4], 0xa
mov dword [ebp - 0xdb4], 0xe338ae63
mov dword [ebp - 0xb8], 0
jmp 0x1000c407
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x1000c429
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov dword [eax], 0xc46bc227
jmp 0x1000c3fa
mov dword [ebp - 0xb8], 0
jmp 0x1000c442
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x1000c45e
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x10a4], 0xffffffff
jmp 0x1000c435
cmp dword [ebp - 0x88], 0
je 0x1000c667
mov dword [ebp - 0x328], 0x87f2
mov dword [ebp - 0xec8], 0xd926128f
mov dword [ebp - 0xe30], 0xffffffff
mov dword [ebp - 0xef4], 0x1031
cmp dword [ebp - 0x328], 0
jne 0x1000c4a8
mov dword [ebp - 0xc70], 1
jmp 0x1000c4af
and dword [ebp - 0xc70], 0
cmp dword [ebp - 0x88], 0
ja 0x1000c4c4
mov dword [ebp - 0xc48], 1
jmp 0x1000c4cb
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0xc48], eax
jle 0x1000c4e5
mov dword [ebp - 0x650], 1
jmp 0x1000c4ec
and dword [ebp - 0x650], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x650], eax
jg 0x1000c506
mov dword [ebp - 0xc50], 1
jmp 0x1000c50d
and dword [ebp - 0xc50], 0
cmp dword [ebp - 0xc50], 2
jne 0x1000c522
mov dword [ebp - 0x658], 1
jmp 0x1000c529
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x658], eax
jle 0x1000c543
mov dword [ebp - 0xc58], 1
jmp 0x1000c54a
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0xc58]
cmp eax, dword [ebp - 0xec8]
je 0x1000c56b
mov dword [ebp - 0x660], 1
jmp 0x1000c572
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x660]
je 0x1000c598
mov dword [ebp - 0xc60], 1
jmp 0x1000c59f
and dword [ebp - 0xc60], 0
cmp dword [ebp - 0xc60], 0x3d87e3bc
jne 0x1000c5c0
mov eax, 0xe5077045
test eax, eax
je 0x1000c5c0
mov dword [ebp - 0x668], 1
jmp 0x1000c5c7
and dword [ebp - 0x668], 0
cmp dword [ebp - 0x668], 0x59ea
jg 0x1000c5df
mov dword [ebp - 0xc68], 1
jmp 0x1000c5e6
and dword [ebp - 0xc68], 0
cmp dword [ebp - 0xc68], 0x735e
jg 0x1000c5fe
mov dword [ebp - 0x670], 1
jmp 0x1000c605
and dword [ebp - 0x670], 0
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x670]
cmp ecx, dword [eax]
jle 0x1000c628
mov dword [ebp - 0x678], 1
jmp 0x1000c62f
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0xc70]
add eax, dword [ebp - 0x678]
cmp eax, dword [ebp - 0xe30]
jg 0x1000c64f
mov dword [ebp - 0xc78], 1
jmp 0x1000c656
and dword [ebp - 0xc78], 0
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0xef4], eax
jmp 0x1000cb89
mov dword [ebp - 0xd0], 0xfffffffd
mov dword [ebp - 0x88], 0xb
jmp 0x1000c68a
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x19
jle 0x1000cb89
push 2
lea ecx, [ebp - 0x518]
call fcn.1001b24b
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x10c], 5
mov dword [ebp - 0xd24], 0x3fee22e7
mov dword [ebp - 0x12fc], 4
mov dword [ebp - 0x1304], 0xcae1
mov dword [ebp - 0x2b8], 0
jmp 0x1000c6e9
mov eax, dword [ebp - 0x2b8]
inc eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 2
jge 0x1000c708
push dword [ebp - 0x2b8]
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
and dword [eax], 0
jmp 0x1000c6dc
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov dword [ebp - 0x194], 0xfffffffa
cmp dword [ebp - 0x194], 0
je 0x1000c8a1
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
cmp dword [eax], 0x23d12ef6
je 0x1000c74d
mov dword [ebp - 0x680], 1
jmp 0x1000c754
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x88]
imul eax, dword [ebp - 0x680]
cmp eax, 0x5201
jge 0x1000c774
mov dword [ebp - 0xc80], 1
jmp 0x1000c77b
and dword [ebp - 0xc80], 0
mov eax, dword [ebp - 0xc80]
mov dword [ebp - 0x194], eax
mov esi, dword [ebp - 0x88]
mov edi, dword [ebp - 0x194]
push 1
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
imul edi, dword [eax]
sub edi, esi
push 1
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
cmp edi, dword [eax]
jle 0x1000c7c2
mov dword [ebp - 0x688], 1
jmp 0x1000c7c9
and dword [ebp - 0x688], 0
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x688]
cmp ecx, dword [eax]
jg 0x1000c7ec
mov dword [ebp - 0xc88], 1
jmp 0x1000c7f3
and dword [ebp - 0xc88], 0
push 1
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xc88]
cmp ecx, dword [eax]
jle 0x1000c825
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x1000c825
and dword [ebp - 0x690], 0
jmp 0x1000c82f
mov dword [ebp - 0x690], 1
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x690]
cmp ecx, dword [eax]
jle 0x1000c852
mov dword [ebp - 0xc90], 1
jmp 0x1000c859
and dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xc90], eax
jl 0x1000c873
mov dword [ebp - 0xc98], 1
jmp 0x1000c87a
and dword [ebp - 0xc98], 0
mov esi, dword [ebp - 0xc98]
sub esi, dword [ebp - 0xd0]
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
imul esi, dword [eax]
imul esi, dword [ebp - 0x88]
test esi, esi
jne 0x1000c8bc
push 1
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x1000c8bc
and dword [ebp - 0x69c], 0
jmp 0x1000c8c6
mov dword [ebp - 0x69c], 1
cmp dword [ebp - 0x69c], 0
jae 0x1000c8db
mov dword [ebp - 0x9f4], 1
jmp 0x1000c8e2
and dword [ebp - 0x9f4], 0
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x9f4]
cmp ecx, dword [eax]
je 0x1000c90c
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1000c90c
mov dword [ebp - 0x6a4], 1
jmp 0x1000c913
and dword [ebp - 0x6a4], 0
mov eax, dword [ebp - 0x6a4]
neg eax
jne 0x1000c938
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
cmp dword [eax], 0
jne 0x1000c938
and dword [ebp - 0xbc0], 0
jmp 0x1000c942
mov dword [ebp - 0xbc0], 1
push 0
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xbc0]
cmp ecx, dword [eax]
jle 0x1000c965
mov dword [ebp - 0x6ac], 1
jmp 0x1000c96c
and dword [ebp - 0x6ac], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x6ac], eax
je 0x1000c986
mov dword [ebp - 0x9fc], 1
jmp 0x1000c98d
and dword [ebp - 0x9fc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x9fc], eax
je 0x1000c9a7
mov dword [ebp - 0x6b4], 1
jmp 0x1000c9ae
and dword [ebp - 0x6b4], 0
push 0
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x6b4]
cmp ecx, dword [eax]
je 0x1000c9d1
mov dword [ebp - 0xbb0], 1
jmp 0x1000c9d8
and dword [ebp - 0xbb0], 0
mov eax, dword [ebp - 0xdb4]
cmp dword [ebp - 0xbb0], eax
jne 0x1000c9f2
mov dword [ebp - 0xf04], 1
jmp 0x1000c9f9
and dword [ebp - 0xf04], 0
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x130c], eax
mov eax, dword [ebp - 0x10c]
imul eax, dword [ebp - 0xd0]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x10a4], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x10a4], 0xde47
jle 0x1000ca3e
mov dword [ebp - 0x6bc], 1
jmp 0x1000ca45
and dword [ebp - 0x6bc], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x6bc], eax
jge 0x1000ca5f
mov dword [ebp - 0xdbc], 1
jmp 0x1000ca66
and dword [ebp - 0xdbc], 0
mov eax, dword [ebp - 0xd0]
mov dword [ebp - 0x1314], eax
mov esi, dword [ebp - 0xd0]
push 1
lea ecx, [ebp - 0x518]
call fcn.1001b2e9
cmp esi, dword [eax]
jge 0x1000ca95
mov dword [ebp - 0xa04], 1
jmp 0x1000ca9c
and dword [ebp - 0xa04], 0
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0xa04]
cmp ecx, dword [eax]
je 0x1000cabf
mov dword [ebp - 0x6c4], 1
jmp 0x1000cac6
and dword [ebp - 0x6c4], 0
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x6c4]
mov dword [ebp - 0xd24], eax
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xd24], eax
jge 0x1000caf2
mov dword [ebp - 0x6cc], 1
jmp 0x1000caf9
and dword [ebp - 0x6cc], 0
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1001b2e9
mov ecx, dword [ebp - 0x6cc]
cmp ecx, dword [eax]
jl 0x1000cb26
mov dword [ebp - 0xf0c], 0x7f9cd946
mov dword [ebp - 0xf0c], 0xa5bdb26f
jmp 0x1000cb75
mov dword [ebp - 0xa0c], 0x294ba750
mov dword [ebp - 0x10c], 0
jmp 0x1000cb49
mov eax, dword [ebp - 0x10c]
inc eax
mov dword [ebp - 0x10c], eax
cmp dword [ebp - 0x10c], 0xc
jne 0x1000cb75
mov dword [ebp - 0x131c], 0x3c4fb361
mov dword [ebp - 0x1324], 0x4d67785d
mov eax, dword [ebp - 0xa0c]
inc eax
mov dword [ebp - 0xa0c], eax
jmp 0x1000cb3c
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x518]
call fcn.1001b2cd
jmp 0x1000c67d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x3b4]
call fcn.1001b2cd
mov dword [ebp - 0x76c], 1
push 2
lea ecx, [ebp - 0x1014]
call fcn.1001b24b
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x204], 0xc7fffaa2
mov dword [ebp - 0x2c0], 7
mov dword [ebp - 0x364], 0
jmp 0x1000cbe3
mov eax, dword [ebp - 0x364]
inc eax
mov dword [ebp - 0x364], eax
cmp dword [ebp - 0x364], 4
jge 0x1000cbff
mov eax, dword [ebp - 0x364]
mov dword [ebp + eax*4 - 0x15fc], 0x2afe01bd
jmp 0x1000cbd6
mov dword [ebp - 0x2c0], 0
jmp 0x1000cc18
mov eax, dword [ebp - 0x2c0]
inc eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 5
jne 0x1000cd57
mov dword [ebp - 0x1184], 0xe8c9f369
mov dword [ebp - 0x1180], 0xe8c9f369
mov dword [ebp - 0x117c], 0xe8c9f369
mov dword [ebp - 0x1178], 0xe8c9f369
lea ecx, [ebp - 0x3d9]
call fcn.1000a403
push eax
lea eax, [ebp - 0x1174]
push eax
lea eax, [ebp - 0x1184]
push eax
lea ecx, [ebp - 0x15c4]
call fcn.1001b2f8
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1070]
call fcn.1001b2a7
mov byte [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0x1070]
call fcn.1001b2e9
mov dword [eax], 3
jmp 0x1000ccbf
push 3
lea ecx, [ebp - 0x1070]
call fcn.1001b2e9
mov dword [ebp - 0x6d4], eax
mov eax, dword [ebp - 0x6d4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6d4]
mov dword [ecx], eax
push 3
lea ecx, [ebp - 0x1070]
call fcn.1001b2e9
cmp dword [eax], 0
jl 0x1000cd43
mov dword [ebp - 0x330], 0xfffffffd
mov dword [ebp - 0x330], 3
jmp 0x1000ccf4
mov eax, dword [ebp - 0x330]
dec eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 0
jl 0x1000cd3e
mov dword [ebp - 0x228], 0x6d6092f6
mov dword [ebp - 0x228], 0
jmp 0x1000cd20
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 4
jge 0x1000cd3c
mov eax, dword [ebp - 0x228]
mov dword [ebp + eax*4 - 0x15fc], 1
jmp 0x1000cd13
jmp 0x1000cce7
jmp 0x1000cc9b
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1070]
call fcn.1001b2cd
jmp 0x1000cc0b
mov dword [ebp - 0x132c], 0xf0e77da1
mov dword [ebp - 0x2c8], 0x2ba39464
mov dword [ebp - 0x1334], 0xfffffff9
mov dword [ebp - 0x2d0], 0x3fbb4ebb
mov dword [ebp - 0x5c], 0
jmp 0x1000cd8f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000cda5
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x133c], 0xc93
jmp 0x1000cd88
mov dword [ebp - 0x5c], 0
jmp 0x1000cdb5
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x1000cdcb
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x16c8], 0xa149cec7
jmp 0x1000cdae
mov dword [ebp - 0x5c], 0
jmp 0x1000cddb
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 1
jge 0x1000cdf1
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x1344], 0x2e77e815
jmp 0x1000cdd4
mov dword [ebp - 0x2c8], 0
jmp 0x1000ce0a
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 0
jg 0x1000cf02
mov dword [ebp - 0x134c], 0xe63e3155
mov dword [ebp - 0x1354], 0xf90a2337
mov dword [ebp - 0x135c], 1
mov dword [ebp - 0x1364], 0xffffffff
mov dword [ebp - 0x136c], 0xfe012d2c
push 2
lea ecx, [ebp - 0x1438]
call fcn.1001b24b
mov byte [ebp - 4], 0xe
mov dword [ebp - 0xbb4], 2
mov dword [ebp - 0x38c], 0
jmp 0x1000ce7d
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
cmp dword [ebp - 0x38c], 2
jge 0x1000ce9f
push dword [ebp - 0x38c]
lea ecx, [ebp - 0x1438]
call fcn.1001b2e9
mov dword [eax], 0x2d91509c
jmp 0x1000ce70
mov eax, dword [ebp - 0xbb4]
dec eax
mov dword [ebp - 0xbb4], eax
mov dword [ebp - 0x2d0], 0
jmp 0x1000cec5
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 0
jg 0x1000ceee
mov byte [ebp - 0x162], 0
movzx eax, byte [ebp - 0x162]
test eax, eax
je 0x1000ceec
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
jmp 0x1000ceb8
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1438]
call fcn.1001b2cd
jmp 0x1000cdfd
mov dword [ebp - 0xdfc], 0x67606e82
push 4
lea ecx, [ebp - 0x1004]
call fcn.1001b24b
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x338], 0
jmp 0x1000cf36
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 4
jge 0x1000cf58
push dword [ebp - 0x338]
lea ecx, [ebp - 0x1004]
call fcn.1001b2e9
mov dword [eax], 1
jmp 0x1000cf29
push 2
lea ecx, [ebp - 0x1004]
call fcn.1001b2e9
and dword [eax], 0
jmp 0x1000cf8e
push 2
lea ecx, [ebp - 0x1004]
call fcn.1001b2e9
mov dword [ebp - 0x6dc], eax
mov eax, dword [ebp - 0x6dc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x6dc]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x1004]
call fcn.1001b2e9
cmp dword [eax], 0xffffffe9
je 0x1000cfb7
mov dword [ebp - 0xdc4], 0
cmp dword [ebp - 0xdc4], 0
je 0x1000cfb5
jmp 0x1000cfb7
jmp 0x1000cf6a
mov byte [ebp - 0x17a], 0
movzx eax, byte [ebp - 0x17a]
test eax, eax
je 0x1000cfd4
push 0x1e1e
call dword [sym.imp.KERNEL32.dll_TlsFree]
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x1004]
call fcn.1001b2cd
mov dword [ebp - 0xc8c], 0x503b5b0d
mov dword [ebp - 0x1374], 0xfffffffd
mov dword [ebp - 0x270], 0x8e41
mov dword [ebp - 0x6f4], 0xfffffff8
mov dword [ebp - 0x4e4], 0
mov dword [ebp - 0x2d8], 0
jmp 0x1000d02e
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 4
jge 0x1000d04a
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x166c], 0x30dfddae
jmp 0x1000d021
mov byte [ebp - 0x164], 0
movzx eax, byte [ebp - 0x164]
test eax, eax
je 0x1000d066
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
cmp dword [ebp - 0x270], 1
jl 0x1000d084
mov eax, 0xffff
test eax, eax
je 0x1000d084
mov dword [ebp - 0xa14], 1
jmp 0x1000d08b
and dword [ebp - 0xa14], 0
mov eax, dword [ebp - 0x270]
cmp eax, dword [ebp - 0xa14]
jge 0x1000d0a5
mov dword [ebp - 0x6e4], 1
jmp 0x1000d0ac
and dword [ebp - 0x6e4], 0
mov eax, dword [ebp - 0x270]
cmp dword [ebp - 0x6e4], eax
jg 0x1000d0c6
mov dword [ebp - 0xc74], 1
jmp 0x1000d0cd
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0x6f4]
cmp dword [ebp - 0xc74], eax
jg 0x1000d0e7
mov dword [ebp - 0x6ec], 1
jmp 0x1000d0ee
and dword [ebp - 0x6ec], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x4e4], eax
mov eax, dword [ebp - 0x4e4]
sub eax, 0x32f3
cmp eax, 1
jl 0x1000d116
mov dword [ebp - 0xa1c], 1
jmp 0x1000d11d
and dword [ebp - 0xa1c], 0
cmp dword [ebp - 0xa1c], 1
jae 0x1000d132
mov dword [ebp - 0xf00], 1
jmp 0x1000d139
and dword [ebp - 0xf00], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0x137c], eax
mov eax, dword [ebp - 0x4e4]
mov dword [ebp - 0x1384], eax
mov eax, dword [ebp - 0x270]
add eax, 0x1355fff
neg eax
je 0x1000d169
mov eax, 0xe071
test eax, eax
jne 0x1000d17b
cmp dword [ebp - 0x270], 0
jne 0x1000d17b