Function at 0x1000a8d4
Capabilities:
Delete file
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10088d1f
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf10
push esi
push edi
mov dword [ebp - 0xa8], 0x3f7bf48c
mov dword [ebp - 0x970], 0xfffffff9
mov dword [ebp - 0x40], 0
jmp 0x1000a918
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000a92e
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xc10], 0x7182b47
jmp 0x1000a911
mov dword [ebp - 0x40], 0
jmp 0x1000a93e
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000a954
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0xec4], 6
jmp 0x1000a937
cmp dword [ebp - 0xa8], 0
jne 0x1000a97a
mov eax, dword [ebp - 0xa8]
sub eax, dword [ebp - 0xa8]
cmp dword [ebp - 0xa8], eax
jl 0x1000a97a
and dword [ebp - 0x7b0], 0
jmp 0x1000a984
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x7b0], eax
jle 0x1000a99e
mov dword [ebp - 0x874], 1
jmp 0x1000a9a5
and dword [ebp - 0x874], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc10]
cmp dword [ebp - 0x874], eax
jge 0x1000a9c8
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc10], 0
jne 0x1000a9cf
cmp dword [ebp - 0xa8], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x87c], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x87c]
mov dword [ebp + eax - 0xc10], ecx
cmp dword [ebp - 0x87c], 0x82aa
jge 0x1000aa05
mov dword [ebp - 0x884], 1
jmp 0x1000aa0c
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x884]
sub eax, dword [ebp - 0xa8]
je 0x1000aafc
mov dword [ebp - 0xce0], 0x30eca6d7
mov dword [ebp - 0xcdc], 0xffffffff
mov dword [ebp - 0x2d4], 0xfffffffd
mov dword [ebp - 0x248], 0
jmp 0x1000aa55
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 4
jge 0x1000aa71
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xe98], 0xcb8f2ba1
jmp 0x1000aa48
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe98]
mov dword [ebp - 0x970], eax
mov eax, dword [ebp - 0x2d4]
mov dword [ebp - 0xa04], eax
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0xa04], 0x198ab79a
jne 0x1000aab5
mov dword [ebp - 0x88c], 1
jmp 0x1000aabc
and dword [ebp - 0x88c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xec4]
shl eax, 2
cmp dword [ebp - 0x88c], eax
jg 0x1000aae0
mov dword [ebp - 0x894], 1
jmp 0x1000aae7
and dword [ebp - 0x894], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x894]
mov dword [ebp + eax - 0xe98], ecx
jmp 0x1000ab4f
mov byte [ebp - 0x14e], 0
movzx eax, byte [ebp - 0x14e]
test eax, eax
je 0x1000ab2e
push 0
push 0xd2a
push 0
push 0x13a0
push 0x1754
push 0
push 0x26b5
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov byte [ebp - 0xfe], 0
movzx eax, byte [ebp - 0xfe]
test eax, eax
je 0x1000ab4f
push 0
push 0xe06
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0xc8], 0x3f7bf48c
mov dword [ebp - 0xa0c], 0xfffffff9
mov dword [ebp - 0x54], 0
jmp 0x1000ab73
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000ab89
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xc1c], 0x7182b47
jmp 0x1000ab6c
mov dword [ebp - 0x54], 0
jmp 0x1000ab99
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1000abaf
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xed0], 6
jmp 0x1000ab92
cmp dword [ebp - 0xc8], 0
jne 0x1000abd5
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jl 0x1000abd5
and dword [ebp - 0x89c], 0
jmp 0x1000abdf
mov dword [ebp - 0x89c], 1
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x89c], eax
jle 0x1000abf9
mov dword [ebp - 0x8a4], 1
jmp 0x1000ac00
and dword [ebp - 0x8a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc1c]
cmp dword [ebp - 0x8a4], eax
jge 0x1000ac23
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc1c], 0
jne 0x1000ac2a
cmp dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0x8ac], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x8ac]
mov dword [ebp + eax - 0xc1c], ecx
cmp dword [ebp - 0x8ac], 0x82aa
jge 0x1000ac60
mov dword [ebp - 0x8b4], 1
jmp 0x1000ac67
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
sub eax, dword [ebp - 0xc8]
je 0x1000ad57
mov dword [ebp - 0xe88], 0x30eca6d7
mov dword [ebp - 0xce4], 0xffffffff
mov dword [ebp - 0x2dc], 0xfffffffd
mov dword [ebp - 0x250], 0
jmp 0x1000acb0
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 4
jge 0x1000accc
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0xea8], 0xcb8f2ba1
jmp 0x1000aca3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xea8]
mov dword [ebp - 0xa0c], eax
mov eax, dword [ebp - 0x2dc]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0xa2c], 0x198ab79a
jne 0x1000ad10
mov dword [ebp - 0x8bc], 1
jmp 0x1000ad17
and dword [ebp - 0x8bc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xed0]
shl eax, 2
cmp dword [ebp - 0x8bc], eax
jg 0x1000ad3b
mov dword [ebp - 0x8c4], 1
jmp 0x1000ad42
and dword [ebp - 0x8c4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8c4]
mov dword [ebp + eax - 0xea8], ecx
jmp 0x1000adaa
mov byte [ebp - 0x100], 0
movzx eax, byte [ebp - 0x100]
test eax, eax
je 0x1000ad89
push 0
push 0xd2a
push 0
push 0x13a0
push 0x1754
push 0
push 0x26b5
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov byte [ebp - 0x102], 0
movzx eax, byte [ebp - 0x102]
test eax, eax
je 0x1000adaa
push 0
push 0xe06
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0xa34], 0xffffffff
mov dword [ebp - 0x6ec], 6
mov dword [ebp - 0x6d4], 6
push 1
lea ecx, [ebp - 0xad4]
call fcn.1001a98c
and dword [ebp - 4], 0
mov dword [ebp - 0xa44], 0xcc90
mov dword [ebp - 0x44], 0
jmp 0x1000adf3
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x1000ae09
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1a4], 4
jmp 0x1000adec
mov dword [ebp - 0x44], 0
jmp 0x1000ae19
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1000ae35
push dword [ebp - 0x44]
lea ecx, [ebp - 0xad4]
call fcn.1001aa1a
mov dword [eax], 1
jmp 0x1000ae12
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x1a4], 0xffffffee
jmp 0x1000ae63
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1a4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a4], 1
jg 0x1000aeab
mov byte [ebp - 0x104], 0
movzx eax, byte [ebp - 0x104]
test eax, eax
je 0x1000aea9
push 0x4e8
push 0
push 0
push 0
push 0
push 0xff8
push 0x1d40
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_ScrollWindowEx]
jmp 0x1000ae48
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x1a4]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x1a4]
jle 0x1000aee1
mov dword [ebp - 0x8cc], 1
jmp 0x1000aee8
and dword [ebp - 0x8cc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x1a4]
cmp dword [ebp - 0x8cc], eax
jle 0x1000af08
mov dword [ebp - 0x6cc], 1
jmp 0x1000af0f
and dword [ebp - 0x6cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a4]
cmp dword [ebp - 0x6cc], eax
jg 0x1000af30
mov dword [ebp - 0x34c], 1
jmp 0x1000af37
and dword [ebp - 0x34c], 0
imul eax, dword [ebp - 0x34c], 0xc9f1
cmp eax, 0x6c8c
jg 0x1000af6d
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x1a4], 0
je 0x1000af6d
cmp dword [ebp - 0xa34], 0
je 0x1000af6d
mov dword [ebp - 0xa3c], 1
jmp 0x1000af74
and dword [ebp - 0xa3c], 0
mov eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6d4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1a4]
sub eax, dword [ebp - 0x6d4]
jne 0x1000afa1
mov dword [ebp - 0x354], 1
jmp 0x1000afa8
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0x1a4]
add esi, dword [ebp - 0x354]
push 0
lea ecx, [ebp - 0xad4]
call fcn.1001aa1a
cmp esi, dword [eax]
je 0x1000afd7
mov dword [ebp - 0x6dc], 1
jmp 0x1000afde
and dword [ebp - 0x6dc], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x6dc]
cmp ecx, dword [eax]
je 0x1000b001
mov dword [ebp - 0x35c], 1
jmp 0x1000b008
and dword [ebp - 0x35c], 0
push 0
lea ecx, [ebp - 0xad4]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x35c]
cmp ecx, dword [eax]
je 0x1000b02b
mov dword [ebp - 0x6e4], 1
jmp 0x1000b032
and dword [ebp - 0x6e4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
cmp eax, dword [ebp - 0x6e4]
jge 0x1000b053
mov dword [ebp - 0x364], 1
jmp 0x1000b05a
and dword [ebp - 0x364], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1a4]
imul eax, dword [ebp - 0x364]
add eax, dword [ebp - 0x6ec]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x1a4]
jne 0x1000b093
push 3
pop eax
test eax, eax
jne 0x1000b093
and dword [ebp - 0x36c], 0
jmp 0x1000b09d
mov dword [ebp - 0x36c], 1
cmp dword [ebp - 0x36c], 1
jne 0x1000b0b2
mov dword [ebp - 0x6f4], 1
jmp 0x1000b0b9
and dword [ebp - 0x6f4], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0xa44], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xad4]
call fcn.1001aa15
mov dword [ebp - 0x114], 1
mov dword [ebp - 0x37c], 0xd3740063
mov dword [ebp - 0x280], 0xa38d0672
mov dword [ebp - 0x114], 4
jmp 0x1000b10b
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0xa
jne 0x1000b28c
mov dword [ebp - 0xb0], 1
mov dword [ebp - 0x258], 0
jmp 0x1000b13b
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 3
jge 0x1000b157
mov eax, dword [ebp - 0x258]
mov dword [ebp + eax*4 - 0xc28], 0x4edc0223
jmp 0x1000b12e
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xde8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xd1c], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xdf8], eax
mov eax, dword [ebp - 0xb0]
mov dword [ebp - 0xd20], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xe78], eax
mov eax, dword [ebp - 0x114]
inc eax
cmp eax, 0x6371
jg 0x1000b1b9
mov dword [ebp - 0x374], 1
jmp 0x1000b1c0
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x374]
cmp eax, dword [ebp - 0xb0]
jl 0x1000b1e1
mov dword [ebp - 0x6fc], 1
jmp 0x1000b1e8
and dword [ebp - 0x6fc], 0
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x6fc], eax
je 0x1000b202
mov dword [ebp - 0xa4c], 1
jmp 0x1000b209
and dword [ebp - 0xa4c], 0
mov dword [ebp - 0x37c], 0x3938
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0xd28], eax
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x280]
mov dword [ebp - 0xe08], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc28]
mov dword [ebp - 0xd30], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc28], 0
jne 0x1000b26a
cmp dword [ebp - 0x280], 0
jne 0x1000b26a
and dword [ebp - 0x704], 0
jmp 0x1000b274
mov dword [ebp - 0x704], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x704]
mov dword [ebp + eax - 0xc28], ecx
jmp 0x1000b0fe
mov dword [ebp - 0xc0], 0x3f7bf48c
mov dword [ebp - 0xa8c], 0xfffffff9
mov dword [ebp - 0x30], 0xd925
mov dword [ebp - 0x188], 5
mov dword [ebp - 0x2fc], 0x89fff12f
mov dword [ebp - 0x304], 0x3631af66
mov dword [ebp - 0xa64], 1
mov dword [ebp - 0x1b4], 0
jmp 0x1000b2e8
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1000b304
mov eax, dword [ebp - 0x1b4]
mov dword [ebp + eax*4 - 0x184], 0xaa12afd7
jmp 0x1000b2db
cmp dword [ebp - 0x30], 0
jne 0x1000b319
cmp dword [ebp - 0x30], 0
jne 0x1000b319
and dword [ebp - 0x384], 0
jmp 0x1000b323
mov dword [ebp - 0x384], 1
mov eax, dword [ebp - 0x384]
sub eax, dword [ebp - 0x30]
cmp dword [ebp - 0x30], eax
jge 0x1000b33d
mov dword [ebp - 0x70c], 1
jmp 0x1000b344
and dword [ebp - 0x70c], 0
cmp dword [ebp - 0x70c], 1
je 0x1000b359
mov dword [ebp - 0x38c], 1
jmp 0x1000b360
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x38c]
je 0x1000b377
mov dword [ebp - 0x714], 1
jmp 0x1000b37e
and dword [ebp - 0x714], 0
mov eax, dword [ebp - 0x714]
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 0
jne 0x1000b3a5
mov eax, 0x866
test eax, eax
jne 0x1000b3a5
and dword [ebp - 0x394], 0
jmp 0x1000b3af
mov dword [ebp - 0x394], 1
cmp dword [ebp - 0x394], 0xffffffff
jbe 0x1000b3c4
mov dword [ebp - 0xa54], 1
jmp 0x1000b3cb
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xe60], eax
cmp dword [ebp - 0x2fc], 0xd1cb
jg 0x1000b3ec
mov dword [ebp - 0x71c], 1
jmp 0x1000b3f3
and dword [ebp - 0x71c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x71c], eax
jg 0x1000b40a
mov dword [ebp - 0x39c], 1
jmp 0x1000b411
and dword [ebp - 0x39c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x39c], eax
jg 0x1000b428
mov dword [ebp - 0x724], 1
jmp 0x1000b42f
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x188]
add eax, dword [ebp - 0x724]
cmp eax, dword [ebp - 0x30]
je 0x1000b455
mov dword [ebp - 0x3a4], 1
jmp 0x1000b45c
and dword [ebp - 0x3a4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3a4]
mov dword [ebp + eax - 0x184], ecx
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30]
cmp dword [ebp + eax - 0x184], ecx
jg 0x1000b48d
mov dword [ebp - 0xa5c], 1
jmp 0x1000b494
and dword [ebp - 0xa5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
mov dword [ebp - 0xd38], eax
cmp dword [ebp - 0x304], 0
je 0x1000b4c5
cmp dword [ebp - 0xa64], 0
je 0x1000b4c5
mov dword [ebp - 0x72c], 1
jmp 0x1000b4cc
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x72c], eax
je 0x1000b4f1
or eax, 0xffffffff
jne 0x1000b4f1
cmp dword [ebp - 0x304], 0
jne 0x1000b4f1
and dword [ebp - 0x3ac], 0
jmp 0x1000b4fb
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x3ac]
sub eax, 0x4bbea1c0
cmp eax, 1
je 0x1000b517
mov dword [ebp - 0x734], 1
jmp 0x1000b51e
and dword [ebp - 0x734], 0
mov eax, dword [ebp - 0x304]
cmp dword [ebp - 0x734], eax
jge 0x1000b53e
mov eax, 0x5379a1d1
test eax, eax
jne 0x1000b53e
and dword [ebp - 0xa6c], 0
jmp 0x1000b548
mov dword [ebp - 0xa6c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x184]
mov dword [ebp - 0xe18], eax
or eax, 0xffffffff
cmp eax, 1
jbe 0x1000b56f
mov dword [ebp - 0x30c], 1
jmp 0x1000b576
and dword [ebp - 0x30c], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x30c]
mov dword [ebp + eax - 0x184], ecx
mov eax, dword [ebp - 0x188]
cmp dword [ebp - 0x30c], eax
jl 0x1000b5a3
mov dword [ebp - 0x3b4], 1
jmp 0x1000b5aa
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xf4fc6a3f
jne 0x1000b5c2
mov dword [ebp - 0x73c], 1
jmp 0x1000b5c9
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x188], eax
mov dword [ebp - 0x48], 0
jmp 0x1000b5e5
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000b5fb
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xc58], 0x7182b47
jmp 0x1000b5de
mov dword [ebp - 0x48], 0
jmp 0x1000b60b
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x1000b621
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xedc], 6
jmp 0x1000b604
mov dword [ebp - 0xa74], 0x6652d0da
push 1
lea ecx, [ebp - 0xc40]
call fcn.1001a98c
mov dword [ebp - 4], 1
mov dword [ebp - 0x84], 0
jmp 0x1000b658
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 3
jge 0x1000b674
mov eax, dword [ebp - 0x84]
mov dword [ebp + eax*4 - 0x94c], 0x25b9b55b
jmp 0x1000b64b
mov dword [ebp - 0x84], 0
jmp 0x1000b68d
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x1000b6af
push dword [ebp - 0x84]
lea ecx, [ebp - 0xc40]
call fcn.1001aa1a
mov dword [eax], 1
jmp 0x1000b680
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x94c], 0
jmp 0x1000b6dd
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x94c]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x94c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x94c], 0xffffffeb
je 0x1000b844
mov dword [ebp - 0x170], 0xecc2443a
mov dword [ebp - 0x3cc], 0x5da2282d
mov dword [ebp - 0xa7c], 0xdac842f8
mov dword [ebp - 0xa84], 0xffffffff
cmp dword [ebp - 0x170], 0
jne 0x1000b746
push 0
lea ecx, [ebp - 0xc40]
call fcn.1001aa1a
mov dword [ebp - 0x308], eax
mov eax, dword [ebp - 0x308]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x308]
mov dword [ecx], eax
mov eax, dword [ebp - 0xa74]
mov dword [ebp - 0xa7c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x170]
cmp dword [ebp + eax - 0x94c], ecx
jg 0x1000b773
mov dword [ebp - 0x3bc], 1
jmp 0x1000b77a
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x3bc], eax
jg 0x1000b794
mov dword [ebp - 0x744], 1
jmp 0x1000b79b
and dword [ebp - 0x744], 0
mov eax, dword [ebp - 0x170]
sub eax, dword [ebp - 0x744]
cmp eax, 7
jle 0x1000b7b8
mov dword [ebp - 0x3c4], 1
jmp 0x1000b7bf
and dword [ebp - 0x3c4], 0
cmp dword [ebp - 0x3c4], 0xb30498d2
jae 0x1000b7d7
mov dword [ebp - 0x74c], 1
jmp 0x1000b7de
and dword [ebp - 0x74c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x94c]
cmp dword [ebp - 0x74c], eax
jg 0x1000b7ff
mov dword [ebp - 0x754], 1
jmp 0x1000b806
and dword [ebp - 0x754], 0
mov eax, dword [ebp - 0x3cc]
cmp dword [ebp - 0x754], eax
jge 0x1000b820
mov dword [ebp - 0x3d4], 1
jmp 0x1000b827
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0xa84], eax
jmp 0x1000b6c2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc40]
call fcn.1001aa15
cmp dword [ebp - 0xc0], 0
jne 0x1000b879
mov eax, dword [ebp - 0xc0]
sub eax, dword [ebp - 0xc0]
cmp dword [ebp - 0xc0], eax
jl 0x1000b879
and dword [ebp - 0x75c], 0
jmp 0x1000b883
mov dword [ebp - 0x75c], 1
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x75c], eax
jle 0x1000b89d
mov dword [ebp - 0x3dc], 1
jmp 0x1000b8a4
and dword [ebp - 0x3dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xc58]
cmp dword [ebp - 0x3dc], eax
jge 0x1000b8c7
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xc58], 0
jne 0x1000b8ce
cmp dword [ebp - 0xc0], 0
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x764], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x764]
mov dword [ebp + eax - 0xc58], ecx
cmp dword [ebp - 0x764], 0x82aa
jge 0x1000b904
mov dword [ebp - 0x3e4], 1
jmp 0x1000b90b
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x3e4]
sub eax, dword [ebp - 0xc0]
je 0x1000b9fb
mov dword [ebp - 0xd40], 0x30eca6d7
mov dword [ebp - 0xe2c], 0xffffffff
mov dword [ebp - 0x288], 0xfffffffd
mov dword [ebp - 0x240], 0
jmp 0x1000b954
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jge 0x1000b970
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0xeb8], 0xcb8f2ba1
jmp 0x1000b947
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xeb8]
mov dword [ebp - 0xa8c], eax
mov eax, dword [ebp - 0x288]
mov dword [ebp - 0xa94], eax
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0xa94], 0x198ab79a
jne 0x1000b9b4
mov dword [ebp - 0x76c], 1
jmp 0x1000b9bb
and dword [ebp - 0x76c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xedc]
shl eax, 2
cmp dword [ebp - 0x76c], eax
jg 0x1000b9df
mov dword [ebp - 0x3ec], 1
jmp 0x1000b9e6
and dword [ebp - 0x3ec], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp + eax - 0xeb8], ecx
jmp 0x1000ba4e
mov byte [ebp - 0x106], 0
movzx eax, byte [ebp - 0x106]
test eax, eax
je 0x1000ba2d
push 0
push 0xd2a
push 0
push 0x13a0
push 0x1754
push 0
push 0x26b5
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x1000ba4e
push 0
push 0xe06
push 0
call dword [sym.imp.OLEAUT32.dll_SafeArrayDestroy]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x124], 0x18
jmp 0x1000ba71
mov eax, dword [ebp - 0x124]
dec eax
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0xffffffeb
jg 0x1000bd63
push 2
lea ecx, [ebp - 0x8e4]
call fcn.1001a98c
mov dword [ebp - 4], 2
mov dword [ebp - 0x60], 0
jmp 0x1000baa2
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1000babe
push dword [ebp - 0x60]
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
mov dword [eax], 0xfffffffb
jmp 0x1000ba9b
mov dword [ebp - 0x60], 0
jmp 0x1000bace
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x1000bae4
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xbcc], 0x137b1891
jmp 0x1000bac7
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbcc], 0
jmp 0x1000bb0f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbcc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbcc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbcc], 1
jg 0x1000bd32
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xaa4], 0xfffffff8
mov dword [ebp - 0xb8], 0
jmp 0x1000bb4f
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jg 0x1000bd2d
mov dword [ebp - 0x11c], 0xffffffff
push 3
lea ecx, [ebp - 0xae4]
call fcn.1001a98c
mov byte [ebp - 4], 3
mov dword [ebp - 0x1b8], 0
jmp 0x1000bb90
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 3
jge 0x1000bbb2
push dword [ebp - 0x1b8]
lea ecx, [ebp - 0xae4]
call fcn.1001aa1a
mov dword [eax], 0x80997408
jmp 0x1000bb83
mov dword [ebp - 0x11c], 0
jmp 0x1000bbcb
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 1
jg 0x1000bc16
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
mov esi, eax
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x1000bc14
jmp 0x1000bc16
jmp 0x1000bbbe
push 1
lea ecx, [ebp - 0xae4]
call fcn.1001aa1a
cmp dword [eax], 1
jle 0x1000bc34
mov dword [ebp - 0xa9c], 1
jmp 0x1000bc3b
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd48], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbcc]
mov dword [ebp - 0xe28], eax
push 0
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
cmp dword [ebp - 0x124], 0
je 0x1000bc8e
push 2
pop eax
test eax, eax
je 0x1000bc8e
mov dword [ebp - 0x774], 1
jmp 0x1000bc95
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0xb8]
cmp dword [ebp - 0x774], eax
jl 0x1000bce2
push 2
lea ecx, [ebp - 0xae4]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000bce2
push 1
lea ecx, [ebp - 0xae4]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000bce2
push 1
lea ecx, [ebp - 0x8e4]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000bce2
and dword [ebp - 0x3f4], 0
jmp 0x1000bcec
mov dword [ebp - 0x3f4], 1
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x3f4]
jge 0x1000bd06
mov dword [ebp - 0x77c], 1
jmp 0x1000bd0d
and dword [ebp - 0x77c], 0
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0xaa4], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xae4]
call fcn.1001aa15
jmp 0x1000bb42
jmp 0x1000baf6
cmp dword [ebp - 0x124], 0
je 0x1000bd4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e4]
call fcn.1001aa15
jmp 0x1000ba64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e4]
call fcn.1001aa15
jmp 0x1000ba64
mov dword [ebp - 0x244], 0
mov dword [ebp - 0x244], 0xfffffff2
jmp 0x1000bd86
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 0x1a
jg 0x1000be97
push 1
lea ecx, [ebp - 0xd64]
call fcn.1001a98c
mov dword [ebp - 4], 4
push 1
lea ecx, [ebp - 0xaf4]
call fcn.1001a98c
mov byte [ebp - 4], 5
mov dword [ebp - 0x80], 0
jmp 0x1000bdc8
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1000bde4
push dword [ebp - 0x80]
lea ecx, [ebp - 0xd64]
call fcn.1001aa1a
mov dword [eax], 0x683c8fc5
jmp 0x1000bdc1
mov dword [ebp - 0x80], 0
jmp 0x1000bdf4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x1000be10
push dword [ebp - 0x80]
lea ecx, [ebp - 0xaf4]
call fcn.1001aa1a
mov dword [eax], 0xee7d214c
jmp 0x1000bded
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x1000be46
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1001aa1a
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x3fc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1001aa1a
cmp dword [eax], 0
jg 0x1000be74
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x1000be72
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x1000be22
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xaf4]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd64]
call fcn.1001aa15
jmp 0x1000bd79
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x1000beb5
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x134], 0x18
jmp 0x1000bed8
mov eax, dword [ebp - 0x134]
dec eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 0xffffffeb
jg 0x1000c1ca
push 2
lea ecx, [ebp - 0x8f4]
call fcn.1001a98c
mov dword [ebp - 4], 6
mov dword [ebp - 0x68], 0
jmp 0x1000bf09
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1000bf25
push dword [ebp - 0x68]
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
mov dword [eax], 0xfffffffb
jmp 0x1000bf02
mov dword [ebp - 0x68], 0
jmp 0x1000bf35
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1000bf4b
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xbdc], 0x137b1891
jmp 0x1000bf2e
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbdc], 0
jmp 0x1000bf76
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbdc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbdc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbdc], 1
jg 0x1000c199
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xab4], 0xfffffff8
mov dword [ebp - 0xa4], 0
jmp 0x1000bfb6
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 1
jg 0x1000c194
mov dword [ebp - 0x12c], 0xffffffff
push 3
lea ecx, [ebp - 0xb04]
call fcn.1001a98c
mov byte [ebp - 4], 7
mov dword [ebp - 0x1bc], 0
jmp 0x1000bff7
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 3
jge 0x1000c019
push dword [ebp - 0x1bc]
lea ecx, [ebp - 0xb04]
call fcn.1001aa1a
mov dword [eax], 0x80997408
jmp 0x1000bfea
mov dword [ebp - 0x12c], 0
jmp 0x1000c032
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 1
jg 0x1000c07d
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
mov esi, eax
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x1000c07b
jmp 0x1000c07d
jmp 0x1000c025
push 1
lea ecx, [ebp - 0xb04]
call fcn.1001aa1a
cmp dword [eax], 1
jle 0x1000c09b
mov dword [ebp - 0xaac], 1
jmp 0x1000c0a2
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x12c], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xd50], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbdc]
mov dword [ebp - 0xe30], eax
push 0
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
cmp dword [ebp - 0x134], 0
je 0x1000c0f5
push 2
pop eax
test eax, eax
je 0x1000c0f5
mov dword [ebp - 0x784], 1
jmp 0x1000c0fc
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x784], eax
jl 0x1000c149
push 2
lea ecx, [ebp - 0xb04]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c149
push 1
lea ecx, [ebp - 0xb04]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c149
push 1
lea ecx, [ebp - 0x8f4]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c149
and dword [ebp - 0x404], 0
jmp 0x1000c153
mov dword [ebp - 0x404], 1
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0x404]
jge 0x1000c16d
mov dword [ebp - 0x78c], 1
jmp 0x1000c174
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x78c]
mov dword [ebp - 0xab4], eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb04]
call fcn.1001aa15
jmp 0x1000bfa9
jmp 0x1000bf5d
cmp dword [ebp - 0x134], 0
je 0x1000c1b6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f4]
call fcn.1001aa15
jmp 0x1000becb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8f4]
call fcn.1001aa15
jmp 0x1000becb
push 2
lea ecx, [ebp - 0x270]
call fcn.1001a98c
mov dword [ebp - 4], 8
mov dword [ebp - 0x24], 0x8e5ccc90
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x20c], 0
jmp 0x1000c208
mov eax, dword [ebp - 0x20c]
inc eax
mov dword [ebp - 0x20c], eax
cmp dword [ebp - 0x20c], 2
jge 0x1000c22a
push dword [ebp - 0x20c]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov dword [eax], 0xdf75dcec
jmp 0x1000c1fb
mov dword [ebp - 0x24], 0
jmp 0x1000c23a
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jg 0x1000c3fd
mov dword [ebp - 0x414], 0xed4bca92
mov dword [ebp - 0xb70], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
cmp dword [eax], 0x257a10dd
jle 0x1000c288
mov dword [ebp - 0xabc], 1
jmp 0x1000c28f
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xd58], eax
push 0
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
push 1
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov eax, dword [eax]
shl eax, 3
mov dword [ebp - 0x2f8], eax
mov eax, dword [ebp - 0x2f8]
imul eax, dword [ebp - 0x24]
cmp eax, 0xcfcb8f1f
jb 0x1000c2f6
mov dword [ebp - 0x40c], 1
jmp 0x1000c2fd
and dword [ebp - 0x40c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x40c]
cmp ecx, dword [eax]
jge 0x1000c321
mov dword [ebp - 0x794], 1
jmp 0x1000c328
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x414], eax
mov esi, dword [ebp - 0x414]
push 0
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
imul esi, dword [eax]
test esi, esi
je 0x1000c363
cmp dword [ebp - 0x2f8], 0
je 0x1000c363
mov dword [ebp - 0x79c], 1
jmp 0x1000c36a
and dword [ebp - 0x79c], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x79c]
cmp eax, 7
ja 0x1000c385
mov dword [ebp - 0xac4], 1
jmp 0x1000c38c
and dword [ebp - 0xac4], 0
push 1
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov esi, eax
push 1
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x1000c3ba
mov dword [ebp - 0x41c], 1
jmp 0x1000c3c1
and dword [ebp - 0x41c], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x270]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x41c]
cmp ecx, dword [eax]
jne 0x1000c3e5
mov dword [ebp - 0x7a4], 1
jmp 0x1000c3ec
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x7a4]
mov dword [ebp - 0xb70], eax
jmp 0x1000c233
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x270]
call fcn.1001aa15
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x144], 0x18
jmp 0x1000c42f
mov eax, dword [ebp - 0x144]
dec eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0xffffffeb
jg 0x1000c73f
push 2
lea ecx, [ebp - 0x904]
call fcn.1001a98c
mov dword [ebp - 4], 9
mov dword [ebp - 0x90], 0
jmp 0x1000c469
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000c48b
push dword [ebp - 0x90]
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
mov dword [eax], 0xfffffffb
jmp 0x1000c45c
mov dword [ebp - 0x90], 0
jmp 0x1000c4a4
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1000c4c0
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xbbc], 0x137b1891
jmp 0x1000c497
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xbbc], 0
jmp 0x1000c4eb
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbbc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xbbc], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xbbc], 1
jg 0x1000c70e
mov dword [ebp - 0xac], 0
mov dword [ebp - 0x9fc], 0xfffffff8
mov dword [ebp - 0xac], 0
jmp 0x1000c52b
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 1
jg 0x1000c709
mov dword [ebp - 0x13c], 0xffffffff
push 3
lea ecx, [ebp - 0xb14]
call fcn.1001a98c
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x1c4], 0
jmp 0x1000c56c
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x1000c58e
push dword [ebp - 0x1c4]
lea ecx, [ebp - 0xb14]
call fcn.1001aa1a
mov dword [eax], 0x80997408
jmp 0x1000c55f
mov dword [ebp - 0x13c], 0
jmp 0x1000c5a7
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jg 0x1000c5f2
push dword [ebp - 0xac]
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
mov esi, eax
push dword [ebp - 0xac]
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
mov ecx, dword [esi]
mov dword [eax], ecx
push dword [ebp - 0xac]
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x1000c5f0
jmp 0x1000c5f2
jmp 0x1000c59a
push 1
lea ecx, [ebp - 0xb14]
call fcn.1001aa1a
cmp dword [eax], 1
jle 0x1000c610
mov dword [ebp - 0x980], 1
jmp 0x1000c617
and dword [ebp - 0x980], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0xe38], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xbbc]
mov dword [ebp - 0xd68], eax
push 0
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
cmp dword [ebp - 0x144], 0
je 0x1000c66a
push 2
pop eax
test eax, eax
je 0x1000c66a
mov dword [ebp - 0x424], 1
jmp 0x1000c671
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x424], eax
jl 0x1000c6be
push 2
lea ecx, [ebp - 0xb14]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c6be
push 1
lea ecx, [ebp - 0xb14]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c6be
push 1
lea ecx, [ebp - 0x904]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000c6be
and dword [ebp - 0x7ac], 0
jmp 0x1000c6c8
mov dword [ebp - 0x7ac], 1
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x7ac]
jge 0x1000c6e2
mov dword [ebp - 0x42c], 1
jmp 0x1000c6e9
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x9fc], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xb14]
call fcn.1001aa15
jmp 0x1000c51e
jmp 0x1000c4d2
cmp dword [ebp - 0x144], 0
je 0x1000c72b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x904]
call fcn.1001aa15
jmp 0x1000c422
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x904]
call fcn.1001aa15
jmp 0x1000c422
mov dword [ebp - 0x70], 0
jmp 0x1000c74f
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jge 0x1000c765
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xca4], 0xfffffffc
jmp 0x1000c748
mov dword [ebp - 0x70], 0
jmp 0x1000c775
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1000c78b
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x91c], 2
jmp 0x1000c76e
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000c7ac
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xca4], 0
je 0x1000c810
push 4
pop eax
shl eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x91c]
cmp dword [ebp + eax - 0x91c], ecx
jl 0x1000c7e6
push 5
pop eax
test eax, eax
jne 0x1000c7e6
and dword [ebp - 0x7b4], 0
jmp 0x1000c7f0
mov dword [ebp - 0x7b4], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x91c]
cmp eax, dword [ebp - 0x7b4]
jl 0x1000c810
mov dword [ebp - 0x434], 1
jmp 0x1000c817
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xda0
jne 0x1000c82f
mov dword [ebp - 0x7bc], 1
jmp 0x1000c836
and dword [ebp - 0x7bc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x91c]
add eax, dword [ebp - 0x7bc]
push 4
pop ecx
shl ecx, 1
cmp eax, dword [ebp + ecx - 0x91c]
jle 0x1000c86e
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x91c], 0
jne 0x1000c86e
and dword [ebp - 0x9c4], 0
jmp 0x1000c878
mov dword [ebp - 0x9c4], 1
mov eax, 0x498d20b
test eax, eax
jne 0x1000c891
push 6
pop eax
test eax, eax
jne 0x1000c891
and dword [ebp - 0x43c], 0
jmp 0x1000c89b
mov dword [ebp - 0x43c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x43c]
sub ecx, dword [ebp + eax - 0xca4]
push 4
pop eax
shl eax, 1
sub ecx, dword [ebp + eax - 0x91c]
push 4
pop eax
shl eax, 0
cmp ecx, dword [ebp + eax - 0x91c]
jne 0x1000c8d5
mov dword [ebp - 0x7c4], 1
jmp 0x1000c8dc
and dword [ebp - 0x7c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca4]
cmp eax, dword [ebp - 0x7c4]
jl 0x1000c8fd
mov dword [ebp - 0x444], 1
jmp 0x1000c904
and dword [ebp - 0x444], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x444]
mov dword [ebp + eax - 0xca4], ecx
mov dword [ebp - 0x234], 0
mov dword [ebp - 0x234], 0xfffffff2
jmp 0x1000c93a
mov eax, dword [ebp - 0x234]
inc eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0x1a
jg 0x1000ca69
push 1
lea ecx, [ebp - 0xd74]
call fcn.1001a98c
mov dword [ebp - 4], 0xb
push 1
lea ecx, [ebp - 0xb24]
call fcn.1001a98c
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x88], 0
jmp 0x1000c985
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000c9a7
push dword [ebp - 0x88]
lea ecx, [ebp - 0xd74]
call fcn.1001aa1a
mov dword [eax], 0x683c8fc5
jmp 0x1000c978
mov dword [ebp - 0x88], 0
jmp 0x1000c9c0
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1000c9e2
push dword [ebp - 0x88]
lea ecx, [ebp - 0xb24]
call fcn.1001aa1a
mov dword [eax], 0xee7d214c
jmp 0x1000c9b3
push 0
lea ecx, [ebp - 0xb24]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x1000ca18
push 0
lea ecx, [ebp - 0xb24]
call fcn.1001aa1a
mov dword [ebp - 0x7cc], eax
mov eax, dword [ebp - 0x7cc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x7cc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xb24]
call fcn.1001aa1a
cmp dword [eax], 0
jg 0x1000ca46
mov byte [ebp - 0x152], 0
movzx eax, byte [ebp - 0x152]
test eax, eax
je 0x1000ca44
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x1000c9f4
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb24]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd74]
call fcn.1001aa15
jmp 0x1000c92d
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x1000ca87
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
push 1
lea ecx, [ebp - 0xf0]
call fcn.1001a98c
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x14], 0xc4d8e5cc
mov dword [ebp - 0x1cc], 0
jmp 0x1000cabb
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 1
jge 0x1000cadd
push dword [ebp - 0x1cc]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov dword [eax], 0xd3df75dc
jmp 0x1000caae
mov dword [ebp - 0x14], 0
jmp 0x1000caed
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1000ce89
mov dword [ebp - 0x988], 6
mov dword [ebp - 0xa68], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000cbea
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov esi, dword [eax]
add esi, 0x4f6b903c
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp esi, dword [eax]
jl 0x1000cb8e
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000cb8e
and dword [ebp - 0x44c], 0
jmp 0x1000cb98
mov dword [ebp - 0x44c], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x44c]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1000cbce
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000cbce
and dword [ebp - 0x7d4], 0
jmp 0x1000cbd8
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x7d4]
inc eax
jne 0x1000cbea
and dword [ebp - 0x454], 0
jmp 0x1000cbf4
mov dword [ebp - 0x454], 1
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x454]
add ecx, dword [eax]
cmp ecx, 0x95d7c15
jg 0x1000cc1d
mov dword [ebp - 0x7dc], 1
jmp 0x1000cc24
and dword [ebp - 0x7dc], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x7dc]
cmp ecx, dword [eax]
jle 0x1000cc48
mov dword [ebp - 0x45c], 1
jmp 0x1000cc4f
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0x1704d9fa
je 0x1000cc67
mov dword [ebp - 0x7e4], 1
jmp 0x1000cc6e
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
add eax, 0x372625aa
cmp eax, 1
jg 0x1000cc8a
mov dword [ebp - 0x984], 1
jmp 0x1000cc91
and dword [ebp - 0x984], 0
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
push 5
pop eax
test eax, eax
je 0x1000ccc4
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp dword [eax], 0
je 0x1000ccc4
mov dword [ebp - 0x464], 1
jmp 0x1000cccb
and dword [ebp - 0x464], 0
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x464]
cmp ecx, dword [eax]
jg 0x1000ccee
mov dword [ebp - 0x7ec], 1
jmp 0x1000ccf5
and dword [ebp - 0x7ec], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x7ec]
cmp ecx, dword [eax]
jl 0x1000cd1f
cmp dword [ebp - 0x14], 0
je 0x1000cd1f
mov dword [ebp - 0x46c], 1
jmp 0x1000cd26
and dword [ebp - 0x46c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x46c]
cmp ecx, dword [eax]
jle 0x1000cd4a
mov dword [ebp - 0x7f4], 1
jmp 0x1000cd51
and dword [ebp - 0x7f4], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x7f4], eax
jle 0x1000cd68
mov dword [ebp - 0xad8], 1
jmp 0x1000cd6f
and dword [ebp - 0xad8], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x988]
cmp dword [eax], ecx
jge 0x1000cda1
mov dword [ebp - 0x474], 1
jmp 0x1000cda8
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0x474]
neg eax
jne 0x1000cdce
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp dword [eax], 0
jne 0x1000cdce
and dword [ebp - 0x7fc], 0
jmp 0x1000cdd8
mov dword [ebp - 0x7fc], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov esi, dword [ebp - 0x7fc]
add esi, dword [eax]
push 0
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
cmp esi, dword [eax]
jg 0x1000ce0b
mov dword [ebp - 0x47c], 1
jmp 0x1000ce12
and dword [ebp - 0x47c], 0
push dword [ebp - 0x14]
lea ecx, [ebp - 0xf0]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x47c]
cmp ecx, dword [eax]
jne 0x1000ce36
mov dword [ebp - 0x804], 1
jmp 0x1000ce3d
and dword [ebp - 0x804], 0
cmp dword [ebp - 0x804], 0xffff
je 0x1000ce55
mov dword [ebp - 0x484], 1
jmp 0x1000ce5c
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 9
jbe 0x1000ce71
mov dword [ebp - 0x80c], 1
jmp 0x1000ce78
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x80c]
mov dword [ebp - 0xa68], eax
jmp 0x1000cae6
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf0]
call fcn.1001aa15
mov dword [ebp - 0xe34], 4
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000ceba
call dword [sym.imp.USER32.dll_GetCaretBlinkTime]
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x1000cee2
push 0x1441
push 0
push 0
push 0x12ac
push 0
call dword [sym.imp.SHELL32.dll_ExtractIconExW]
push 2
lea ecx, [ebp - 0x27c]
call fcn.1001a98c
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x2c], 0x8e5ccc90
mov dword [ebp - 0x290], 1
mov dword [ebp - 0x214], 0
jmp 0x1000cf20
mov eax, dword [ebp - 0x214]
inc eax
mov dword [ebp - 0x214], eax
cmp dword [ebp - 0x214], 2
jge 0x1000cf42
push dword [ebp - 0x214]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov dword [eax], 0xdf75dcec
jmp 0x1000cf13
mov dword [ebp - 0x2c], 0
jmp 0x1000cf52
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jg 0x1000d115
mov dword [ebp - 0x494], 0xed4bca92
mov dword [ebp - 0x998], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
cmp dword [eax], 0x257a10dd
jle 0x1000cfa0
mov dword [ebp - 0x990], 1
jmp 0x1000cfa7
and dword [ebp - 0x990], 0
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0xd78], eax
push 0
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
push 1
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov eax, dword [eax]
shl eax, 3
mov dword [ebp - 0x290], eax
mov eax, dword [ebp - 0x290]
imul eax, dword [ebp - 0x2c]
cmp eax, 0xcfcb8f1f
jb 0x1000d00e
mov dword [ebp - 0x48c], 1
jmp 0x1000d015
and dword [ebp - 0x48c], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x48c]
cmp ecx, dword [eax]
jge 0x1000d039
mov dword [ebp - 0x814], 1
jmp 0x1000d040
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x494], eax
mov esi, dword [ebp - 0x494]
push 0
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
imul esi, dword [eax]
test esi, esi
je 0x1000d07b
cmp dword [ebp - 0x290], 0
je 0x1000d07b
mov dword [ebp - 0x81c], 1
jmp 0x1000d082
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x81c]
cmp eax, 7
ja 0x1000d09d
mov dword [ebp - 0xb48], 1
jmp 0x1000d0a4
and dword [ebp - 0xb48], 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov esi, eax
push 1
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov ecx, dword [esi]
cmp ecx, dword [eax]
jg 0x1000d0d2
mov dword [ebp - 0x49c], 1
jmp 0x1000d0d9
and dword [ebp - 0x49c], 0
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x27c]
call fcn.1001aa1a
mov ecx, dword [ebp - 0x49c]
cmp ecx, dword [eax]
jne 0x1000d0fd
mov dword [ebp - 0x824], 1
jmp 0x1000d104
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x998], eax
jmp 0x1000cf4b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
call fcn.1001aa15
mov dword [ebp - 0xa70], 9
mov dword [ebp - 0x82c], 0x8f8256a
mov dword [ebp - 0x9a0], 6
push 2
lea ecx, [ebp - 0xd84]
call fcn.1001a98c
mov dword [ebp - 4], 0xf
push 2
lea ecx, [ebp - 0xc64]
call fcn.1001a98c
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x78], 0
jmp 0x1000d177
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1000d193
push dword [ebp - 0x78]
lea ecx, [ebp - 0xd84]
call fcn.1001aa1a
mov dword [eax], 0xe2bbef7d
jmp 0x1000d170
mov dword [ebp - 0x78], 0
jmp 0x1000d1a3
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x1000d1bc
push dword [ebp - 0x78]
lea ecx, [ebp - 0xc64]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x1000d19c
cmp dword [ebp - 0xa70], 1
jg 0x1000d1d1
mov dword [ebp - 0x4a4], 1
jmp 0x1000d1d8
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x4a4]
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x9a0], eax
push 1
lea ecx, [ebp - 0xc64]
call fcn.1001aa1a
mov dword [ebp - 0x4ac], eax
mov eax, dword [ebp - 0x4ac]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x4ac]
mov dword [ecx], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xc64]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd84]
call fcn.1001aa15
mov dword [ebp - 0x1d4], 0
mov dword [ebp - 0x1d4], 0xfffffff2
jmp 0x1000d255
cmp dword [ebp - 0x1d4], 0x1a
jg 0x1000d366
push 1
lea ecx, [ebp - 0xd94]
call fcn.1001a98c
mov dword [ebp - 4], 0x11
push 1
lea ecx, [ebp - 0xb34]
call fcn.1001a98c
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x58], 0
jmp 0x1000d297
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000d2b3
push dword [ebp - 0x58]
lea ecx, [ebp - 0xd94]
call fcn.1001aa1a
mov dword [eax], 0x683c8fc5
jmp 0x1000d290
mov dword [ebp - 0x58], 0
jmp 0x1000d2c3
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 1
jge 0x1000d2df
push dword [ebp - 0x58]
lea ecx, [ebp - 0xb34]
call fcn.1001aa1a
mov dword [eax], 0xee7d214c
jmp 0x1000d2bc
push 0
lea ecx, [ebp - 0xb34]
call fcn.1001aa1a
and dword [eax], 0
jmp 0x1000d315
push 0
lea ecx, [ebp - 0xb34]
call fcn.1001aa1a
cmp dword [eax], 0
jg 0x1000d343
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1000d341
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb34]
call fcn.1001aa15
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd94]
call fcn.1001aa15
jmp 0x1000d248
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000d384
push 0
push 0
push 0
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
push 1
lea ecx, [ebp - 0xda4]
call fcn.1001a98c
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x254], 0
jmp 0x1000d3b1
mov eax, dword [ebp - 0x254]
inc eax
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 1
jge 0x1000d3d0
push dword [ebp - 0x254]
lea ecx, [ebp - 0xda4]
call fcn.1001aa1a
or dword [eax], 0xffffffff
jmp 0x1000d3a4
mov byte [ebp - 0x150], 0
movzx eax, byte [ebp - 0x150]
test eax, eax
je 0x1000d3f7
push 0
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
push 0
push 0
call dword [sym.imp.USER32.dll_CreateDialogParamA]
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1000d411
push 0
call dword [sym.imp.USER32.dll_RegisterClassW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xda4]
call fcn.1001aa15
mov dword [ebp - 0x5c], 0
jmp 0x1000d430
cmp dword [ebp - 0x5c], 4
jge 0x1000d446