Function at 0x100be75
Capabilities:
Check os version

Disassembly:
mov dword [ebp - 0x8404], ebx
lea eax, [ebp - 0x8404]
push eax
lea ecx, [ebp - 0xdec]
mov byte [ebp - 4], 0x14
call fcn.0100721a
mov esi, eax
cmp esi, ebx
jge 0x1012b7b
cmp esi, 0x800705b4
je 0x1012bc8
mov ecx, dword [ebp - 0x8404]
cmp ecx, ebx
mov byte [ebp - 4], 0x13
jne 0x1012bcf
cmp esi, ebx
jge 0x100719b
lea ecx, [ebp - 0x841c]
mov byte [ebp - 4], 0x12
call fcn.0100e10c
lea ecx, [ebp - 0xdec]
mov byte [ebp - 4], 0x11
call fcn.0100268d
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x10
call fcn.0100e711
jmp 0x1012bdb
xor edi, edi
cmp dword [ebp + 8], 0xa
jge 0x100d1f5
call fcn.0100a267
cmp eax, ebx
jl 0x10128cb
mov dword [ebp - 0x8454], ebx
mov dword [ebp - 0x8450], ebx
mov dword [ebp - 0x844c], ebx
mov dword [ebp - 0x8448], ebx
mov dword [ebp - 0x8444], ebx
push 1
push ebx
lea ecx, [ebp - 0x8454]
mov byte [ebp - 4], 0xc
call fcn.0100aba7
mov dword [ebp - 0x840c], ebx
lea eax, [ebp - 0x840c]
push eax
push 0x11
mov byte [ebp - 4], 0xd
call fcn.0100a064
cmp eax, ebx
jl 0x10128f3
push 1
push dword [ebp - 0x840c]
lea ecx, [ebp - 0x8454]
call fcn.0100a830
cmp edi, ebx
push ebx
push ebx
push ebx
jne 0x100d1e0
push 2
push 5
push ebx
push ebx
push 0xffffffffffffffff
push dword [ebp - 0x8454]
call dword [sym.imp.ole32.dll_CoInitializeSecurity]
cmp eax, ebx
jl 0x101291b
mov esi, dword [ebp - 0x8408]
push esi
mov edi, 0x102928c
call fcn.010098ad
push esi
lea edi, [ebp - 0x8440]
call fcn.0100996f
cmp eax, ebx
jl 0x1012943
push esi
lea edi, [ebp - 0x843c]
call fcn.01009a3b
cmp eax, ebx
jl 0x1012952
lea ecx, [ebp - 0x264]
mov dword [ebp - 0x8404], ebx
mov dword [ebp - 0x8418], ebx
mov dword [ebp - 0x8408], ebx
call fcn.01002dd3
lea ecx, [ebp - 0x1600]
call fcn.01002fac
lea eax, [ebp - 0x1600]
push eax
lea eax, [ebp - 0x8408]
push eax
lea eax, [ebp - 0x8418]
push eax
lea eax, [ebp - 0x8404]
push eax
push esi
lea ebx, [ebp - 0x264]
mov byte [ebp - 4], 0xf
call fcn.0100aa60
push esi
lea eax, [ebp - 0x398]
push eax
push dword [0x1029034]
lea eax, [ebp - 0x1600]
push eax
mov eax, ebx
push eax
push dword [ebp - 0x8408]
lea eax, [ebp - 0x1d0]
push dword [ebp - 0x8418]
push dword [ebp - 0x8404]
push dword [ebp - 0x843c]
push dword [ebp - 0x8440]
push eax
call fcn.0100a01d
xor ebx, ebx
cmp eax, ebx
jl 0x1012961
lea ecx, [ebp - 0x1600]
call fcn.01002feb
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0xd
call fcn.010018ff
push esi
mov edi, 0x1029294
call fcn.01008503
cmp eax, ebx
jl 0x1012994
cmp dword [0x1029294], ebx
je 0x1012994
mov dword [section..data], ebx
lea eax, [ebp - 0x304]
push eax
lea ecx, [ebp - 0x68]
mov dword [0x1029028], 1
call fcn.010086ab
mov eax, dword [ebp - 0x68]
push 0xffffffffffffffff
push dword [ebp - 0x5c]
lea ecx, [ebp - 0x68]
push 0x1007e94
mov byte [ebp - 4], 0x10
call dword [eax + 0x10]
push dword [ebp - 0x64]
push ebx
push 0x1f0003
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push eax
mov ecx, 0x102b8cc
call fcn.0100187b
cmp dword [0x102b8d0], ebx
je 0x10129ad
push esi
mov edi, 0x102902c
mov dword [0x102902c], 3
call fcn.010085cd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea ecx, [ebp - 0x120]
mov dword [0x102901c], eax
call fcn.01009018
mov dword [ebp - 0x120], 0x100217c
push dword [ebp - 0x300]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0x11
call fcn.010089d1
cmp eax, ebx
jl 0x10129e9
cmp dword [0x102b8d4], ebx
mov eax, dword [0x102b8d0]
mov dword [ebp - 0x118], eax
jne 0x1012a11
push dword [0x102901c]
lea ecx, [ebp - 0x120]
push ebx
call fcn.01008f59
mov eax, dword [0x102901c]
not eax
push eax
push 1
lea ecx, [ebp - 0x120]
call fcn.01008f59
lea ecx, [ebp - 0x120]
call fcn.0100892f
cmp eax, ebx
jl 0x1012a20
lea ecx, [ebp - 0xdec]
mov dword [ebp - 0xc0], 0x7530
call fcn.01004ab4
lea eax, [ebp - 0x120]
push eax
lea ecx, [ebp - 0xdec]
mov byte [ebp - 4], 0x12
call fcn.01008701
lea ecx, [ebp - 0xdec]
call fcn.01008718
cmp eax, ebx
jl 0x1012a48
mov esi, dword [sym.imp.KERNEL32.dll_GetHandleInformation]
or dword [ebp - 0xc0], 0xffffffff
lea eax, [ebp - 0x8414]
push eax
push dword [0x102b8dc]
mov dword [ebp - 0x8414], ebx
call esi
test eax, eax
je 0x1012a83
mov eax, dword [0x102b8dc]
mov dword [ebp - 0x114], eax
lea eax, [ebp - 0x8414]
push eax
push dword [0x102b8c8]
call esi
test eax, eax
je 0x1012abf
lea eax, [ebp - 0x8414]
push eax
push dword [0x102b8b0]
call esi
test eax, eax
jne 0x1012b37
jmp 0x1012afb
mov byte [ebp - 4], 0x13
xor esi, esi
cmp esi, dword [ebp - 0x8410]
jae 0x100719b
push dword [ebp - 0x8438]
mov edi, esi
imul edi, edi, 0x370
lea ecx, [ebp + edi - 0x8124]
call fcn.010050eb
push ebx
lea ecx, [ebp + edi - 0x8400]
call fcn.01008d82
cmp eax, ebx
jl 0x1012b53
inc esi
jmp 0x1008d3f
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x1009341
sub eax, edx
sar eax, 1
je 0x1012c7a
push dword [esi + 8]
lea ecx, [ebp - 0x304]
call fcn.01009234
cmp dword [ebp - 0x2f8], ebx
mov byte [ebp - 4], 5
je 0x101282e
mov eax, dword [ebp - 0x8404]
push dword [eax + 0xc]
mov esi, dword [sym.imp.msvcrt.dll__wtoi]
call esi
cmp eax, ebx
pop ecx
mov dword [ebp - 0x8410], eax
je 0x1012c4e
cmp eax, 0x20
ja 0x1012c4e
mov edi, dword [ebp - 0x8404]
xor eax, eax
inc eax
cmp eax, dword [ebp - 0x8410]
sbb eax, eax
neg eax
mov dword [0x1029034], eax
push dword [edi + 0x10]
call esi
pop ecx
mov dword [0x1029020], eax
mov ecx, dword [edi + 0x14]
push ebx
mov edi, 0x20019
push edi
push ecx
mov dword [ebp - 0x8408], ecx
push eax
lea ecx, [ebp - 0x438]
call fcn.0100774c
push edi
push 0x10076b8
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 6
call fcn.01007635
lea eax, [ebp - 0x8458]
push eax
push 0x100950c
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 7
call fcn.010076e1
cmp eax, ebx
je 0x1009423
cmp dword [ebp - 0x8458], ebx
jne 0x1012857
mov eax, dword [ebp - 0x8404]
push dword [eax + 0x18]
lea ecx, [ebp - 0x1d0]
call fcn.01005090
cmp dword [ebp - 0x1c4], ebx
mov byte [ebp - 4], 8
je 0x1012866
mov eax, dword [ebp - 0x8404]
push dword [eax + 0x1c]
lea ecx, [ebp - 0x398]
call fcn.01009234
push ebx
push edi
push dword [ebp - 0x8408]
lea ecx, [ebp - 0x4d8]
push dword [0x1029020]
mov byte [ebp - 4], 9
mov dword [ebp - 0x8418], 0x4650
call fcn.0100774c
push edi
push 0x10076b8
lea eax, [ebp - 0x4d8]
push eax
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xa
call fcn.01007635
lea eax, [ebp - 0x8418]
push eax
push 0x10094e0
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xb
call fcn.010076e1
push dword [ebp - 0x8418]
push ebx
push dword [ebp - 0x394]
call fcn.0100952b
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 0xa
call fcn.01006dcd
jmp 0x101288f
push 0x28
mov byte [ebp - 4], 3
call dword [0x102b89c]
mov ecx, eax
mov dword [ebp - 0x8438], ecx
cmp ecx, ebx
mov byte [ebp - 4], 4
je 0x100d1ee
push 3
push ebx
push 0x11
mov eax, 0x100330f
push eax
push eax
call fcn.01009719
cmp eax, ebx
mov byte [ebp - 4], 3
mov dword [0x1029030], eax
je 0x1012801
cmp esi, ebx
je 0x1012cd2
cmp dword [ebp + 8], ebx
je 0x1012cd2
cmp dword [ebp + 8], 9
jl 0x1012ca6
push 0x1009888
push dword [esi + 0x20]
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
pop ecx
pop ecx
jne 0x1012ca6
mov eax, dword [esi + 4]
cmp eax, ebx
mov dword [ebp - 0x8438], eax
je 0x1012c7a
lea edx, [eax + 2]
jmp 0x1009341
mov edi, edi
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1024806
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x8594
call fcn.010027e3
mov eax, dword [0x1029004]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov esi, dword [ebp + 0xc]
xor ebx, ebx
push ebx
push ebx
xor edi, edi
inc edi
push edi
push ebx
mov dword [ebp - 0x8404], esi
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push edi
call dword [sym.imp.msvcrt.dll__set_error_mode]
pop ecx
push 2
call fcn.0100c1e5
cmp eax, ebx
jl 0x100d1e7
push edi
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
jmp 0x10126d4
lea ecx, [ebp - 0x845c]
call fcn.0100782f
push ebx
mov dword [ebp - 4], edi
call fcn.0100c0de
call fcn.0100b1c5
push fcn.0100e2a9
push 0x100bf55
push 0x20
push 0x370
lea eax, [ebp - 0x8400]
push eax
mov dword [ebp - 0x8410], ebx
call fcn.010091af
cmp byte [0x102b914], bl
mov byte [ebp - 4], 2
jne 0x1012792
lea eax, [ebp - 0x17c]
push eax
mov dword [ebp - 0x17c], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
jmp 0x10126df
push 3
jmp 0x1007bc2
push 3
jmp 0x100bedd
xor eax, eax
jmp 0x1009829
mov eax, dword [ebp - 0x8404]
push dword [eax + 0x24]
call esi
mov edi, eax
cmp edi, 1
pop ecx
jne 0x1007b45
call fcn.0100d22f
cmp eax, ebx
jl 0x10128a3
cmp dword [0x1029038], ebx
jne 0x1007b45
jmp 0x10128a3
mov dword [ebp - 4], 2
mov edi, dword [ebp - 0x8410]
cmp edi, ebx
jbe 0x100d78b
lea esi, [ebp - 0x8400]
mov ecx, esi
call fcn.0100e32b
add esi, 0x370
dec edi
jne 0x100d77b
mov eax, dword [0x1029024]
cmp eax, ebx
je 0x100d7a0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov dword [0x1029024], ebx
mov ecx, dword [0x1029030]
cmp ecx, ebx
je 0x100d7b6
mov eax, dword [ecx]
push 1
call dword [eax]
mov dword [0x1029030], ebx
push dword [0x1029038]
call dword [0x102b8a0]
push dword [0x102903c]
mov dword [0x1029038], ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esi, 0x100d7f8
push esi
push dword [0x102b8bc]
mov dword [0x102903c], ebx
push dword [0x102b8b8]
call dword [0x102b8b4]
jmp 0x1012d20
xor eax, eax
jmp 0x1012a53
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.01001750
leave
ret
call dword [sym.imp.MSSHooks.dll_LoadMSSearchHooks]
jmp 0x100bee8
cmp eax, ebx
je 0x10126fa
cmp dword [ebp - 0x178], 6
setb al
cmp al, bl
mov byte [0x102ba19], al
jne 0x1012783
push 0x1012df4
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
cmp esi, ebx
je 0x1012758
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x1012de8
push esi
call edi
cmp eax, ebx
mov dword [0x102ba1c], eax
je 0x1012758
push 0x1012dd8
push esi
call edi
cmp eax, ebx
mov dword [0x102b934], eax
je 0x101274e
push 0x1012dc8
push esi
call edi
cmp eax, ebx
mov dword [0x102b938], eax
jne 0x1012761
mov dword [0x102b938], 0x101943c
mov dword [0x102b934], 0x10193f3
mov al, 1
mov byte [0x102ba19], al
jmp 0x1012783
push 0x1012db8
push esi
call edi
cmp eax, ebx
mov dword [0x102b8b4], eax
jne 0x101277e
mov dword [0x102b8b4], 0x1019483
jmp 0x1012744
mov al, byte [0x102ba19]
mov esi, dword [ebp - 0x8404]
mov byte [0x102b914], 1
jmp 0x1012797
mov al, byte [0x102ba19]
mov cl, al
neg cl
push 0x102b8b8
sbb ecx, ecx
and ecx, 0x102ba00
neg al
push ecx
sbb eax, eax
and eax, 0x1019389
push eax
push 0x1012d88
call dword [0x102b934]
mov edi, 0x1012da8
push edi
push dword [0x102b8bc]
push dword [0x102b8b8]
call dword [0x102b8b4]
test al, al
je 0x10097f8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1012d98
push edi
push dword [0x102b8bc]
push dword [0x102b8b8]
call fcn.0102250a
jmp 0x10097f8
push 0x8007000e
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x853c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x853c]
push eax
call sub.msvcrt.dll__CxxThrowException
push 0x80070057
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x856c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x856c]
jmp 0x1012828
mov dword [0x102b8d4], 1
jmp 0x1009423
push 0x80070057
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84ec]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84ec]
jmp 0x1012828
lea ecx, [ebp - 0x4d8]
mov byte [ebp - 4], 9
call fcn.01006dcd
jmp 0x1007b39
push eax
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x854c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x854c]
jmp 0x1012828
push eax
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x850c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x850c]
jmp 0x1012828
push eax
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x847c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x847c]
jmp 0x1012828
push eax
lea ecx, [ebp - 0x8424]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x849c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x849c]
jmp 0x1012828
mov dword [ebp - 0x8440], 0x14
jmp 0x1007c01
mov dword [ebp - 0x843c], 0x14
jmp 0x1007c15
cmp eax, 0x80040d37
je 0x1007cb5
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84bc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84bc]
jmp 0x1012828
mov dword [0x1029294], 4
mov dword [section..data], 1
jmp 0x1007cf4
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10129c1
and eax, 0xffff
or eax, 0x80070000
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84dc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84dc]
jmp 0x1012828
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84fc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84fc]
jmp 0x1012828
mov dword [ebp - 0xc0], 0x7530
jmp 0x1007db3
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x851c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x851c]
jmp 0x1012828
cmp eax, 0x800705b4
je 0x100df4e
cmp eax, ebx
jge 0x1007e18
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x846c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x846c]
jmp 0x1012828
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1012a97
and eax, 0xffff
or eax, 0x80070000
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x855c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x855c]
jmp 0x1012828
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1012ad3
and eax, 0xffff
or eax, 0x80070000
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x857c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x857c]
jmp 0x1012828
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x1012b0f
and eax, 0xffff
or eax, 0x80070000
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x859c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x859c]
jmp 0x1012828
push 0x1012e08
push 0xffffffffffffffff
call fcn.0101f981
lea ecx, [ebp - 0x841c]
call fcn.0100925c
jmp 0x1008d39
push eax
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x848c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x848c]
jmp 0x1012828
push 0x10291f0
lea ecx, [ebp - 0x8408]
call fcn.010021a5
push dword [ebp - 0x8404]
mov ecx, dword [0x1029030]
mov byte [ebp - 4], 0x15
call fcn.0100336e
mov ecx, dword [eax]
cmp ecx, ebx
je 0x1012bab
call fcn.0101cd75
cmp dword [ebp - 0x8408], ebx
je 0x10071c1
push dword [ebp - 0x8408]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x10071c1
xor esi, esi
jmp 0x10071cd
push 1
call fcn.01002638
jmp 0x10071df
lea ecx, [ebp - 0x68]
call fcn.01001763
cmp dword [ebp - 0x840c], ebx
mov byte [ebp - 4], 0xc
je 0x1012bfb
push dword [ebp - 0x840c]
call dword [0x102b8a0]
lea ecx, [ebp - 0x8454]
mov byte [ebp - 4], 9
call fcn.0100dff7
lea ecx, [ebp - 0x398]
call fcn.010018ff
lea ecx, [ebp - 0x1d0]
call fcn.01001763
lea ecx, [ebp - 0x578]
mov byte [ebp - 4], 6
call fcn.01006dcd
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 5
call fcn.01006dcd
lea ecx, [ebp - 0x304]
call fcn.010018ff
jmp 0x100d764
push 0x80070057
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x858c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x858c]
jmp 0x1012828
push 0x80070057
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84ac]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84ac]
jmp 0x1012828
push 0x80070057
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x852c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x852c]
jmp 0x1012828
push 0x80070057
lea ecx, [ebp - 0x8434]
call fcn.01019efc
mov esi, eax
lea edi, [ebp - 0x84cc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0x1026770
lea eax, [ebp - 0x84cc]
jmp 0x1012828
test al, al
je 0x1012d42
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x1012d98
push esi
push dword [0x102b8bc]
push dword [0x102b8b8]
call fcn.0102250a
push dword [0x102b8bc]
push dword [0x102b8b8]
call dword [0x102b938]
push fcn.0100e2a9
push 0x20
push 0x370
lea eax, [ebp - 0x8400]
push eax
mov byte [ebp - 4], 1
call fcn.0100d9b6
mov byte [ebp - 4], bl
call fcn.0100d840
call fcn.0100dd81
call dword [sym.imp.ole32.dll_CoUninitialize]
jmp 0x100df55