Function at 0x1002cfa4
Capabilities:
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008454e
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1294
call fcn.1007f8d0
push esi
push edi
mov dword [ebp - 0x5c], 0x9d29be1d
mov dword [ebp - 0x3c0], 0x4f2887cf
push 2
lea ecx, [ebp - 0xc34]
call fcn.1000c0a5
and dword [ebp - 4], 0
mov dword [ebp - 0xb30], 0xfffffffd
mov dword [ebp - 0x2a0], 0
jmp 0x1002d00d
mov eax, dword [ebp - 0x2a0]
inc eax
mov dword [ebp - 0x2a0], eax
cmp dword [ebp - 0x2a0], 2
jge 0x1002d02f
push dword [ebp - 0x2a0]
lea ecx, [ebp - 0xc34]
call fcn.1000c112
mov dword [eax], 7
jmp 0x1002d000
cmp dword [ebp - 0x5c], 0
je 0x1002d047
cmp dword [ebp - 0x5c], 0
je 0x1002d047
mov dword [ebp - 0x5ac], 1
jmp 0x1002d04e
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x5c]
add eax, dword [ebp - 0x5ac]
mov dword [ebp - 0x3c0], eax
mov dword [ebp - 0x5c], 1
jmp 0x1002d06d
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
jl 0x1002d23b
mov dword [ebp - 0x400], 0
mov dword [ebp - 0x1d4], 0xffffffff
mov dword [ebp - 0xb40], 0x379a1d12
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x400], eax
xor eax, eax
jne 0x1002d0b4
push 1
lea ecx, [ebp - 0xc34]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002d0e5
cmp dword [ebp - 0x5c], 1
jg 0x1002d0c6
mov dword [ebp - 0x9bc], 1
jmp 0x1002d0cd
and dword [ebp - 0x9bc], 0
cmp dword [ebp - 0x9bc], 0x8142
jge 0x1002d0e5
mov dword [ebp - 0x9c4], 1
jmp 0x1002d0ec
and dword [ebp - 0x9c4], 0
cmp dword [ebp - 0x9c4], 0x8a6e
jge 0x1002d105
xor eax, eax
jne 0x1002d105
and dword [ebp - 0x9dc], 0
jmp 0x1002d10f
mov dword [ebp - 0x9dc], 1
mov eax, dword [ebp - 0x9dc]
sub eax, dword [ebp - 0x400]
cmp eax, dword [ebp - 0x5c]
jg 0x1002d12c
mov dword [ebp - 0xc14], 1
jmp 0x1002d133
and dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe9c], eax
cmp dword [ebp - 0x1d4], 0x800f4d4e
jne 0x1002d169
push 1
lea ecx, [ebp - 0xc34]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002d169
mov dword [ebp - 0x9e4], 1
jmp 0x1002d170
and dword [ebp - 0x9e4], 0
mov eax, dword [ebp - 0x3c0]
cmp dword [ebp - 0x9e4], eax
jle 0x1002d18a
mov dword [ebp - 0xb28], 1
jmp 0x1002d191
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe44], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe4c], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0xe54], eax
mov eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x400], eax
jl 0x1002d1cc
mov dword [ebp - 0x9ec], 1
jmp 0x1002d1d3
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0xb30]
cmp dword [ebp - 0x9ec], eax
jg 0x1002d1ed
mov dword [ebp - 0xb38], 1
jmp 0x1002d1f4
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0xe5c], eax
imul eax, dword [ebp - 0x1d4], 0x15e4
test eax, eax
je 0x1002d223
mov eax, 0x8307
test eax, eax
je 0x1002d223
mov dword [ebp - 0x9f4], 1
jmp 0x1002d22a
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
mov dword [ebp - 0xb40], eax
jmp 0x1002d066
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc34]
call fcn.1000c10d
mov dword [ebp - 0x28], 0xffffffff
push 3
lea ecx, [ebp - 0x490]
call fcn.1000c0a5
mov dword [ebp - 4], 1
push 2
lea ecx, [ebp - 0x448]
call fcn.1000c0a5
mov byte [ebp - 4], 2
mov dword [ebp - 0x424], 2
mov dword [ebp - 0xb58], 0x475678d5
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x3c], 0
jmp 0x1002d2a4
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x1002d2c0
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov dword [eax], 0x2071
jmp 0x1002d29d
mov dword [ebp - 0x3c], 0
jmp 0x1002d2d0
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002d2ec
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov dword [eax], 1
jmp 0x1002d2c9
mov dword [ebp - 0x3c], 0
jmp 0x1002d2fc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x1002d312
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x420], 0xde7504ed
jmp 0x1002d2f5
xor eax, eax
jne 0x1002d38b
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xed8], eax
push 0
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov ecx, dword [ebp - 0x28]
cmp dword [eax], ecx
je 0x1002d33f
mov dword [ebp - 0x9fc], 1
jmp 0x1002d346
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x9fc], 0xb583
jle 0x1002d370
push 0
lea ecx, [ebp - 0x490]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002d370
mov dword [ebp - 0xa04], 1
jmp 0x1002d377
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa04], eax
jne 0x1002d38b
and dword [ebp - 0xa0c], 0
jmp 0x1002d395
mov dword [ebp - 0xa0c], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xa0c], eax
jl 0x1002d3ac
mov dword [ebp - 0x9d0], 1
jmp 0x1002d3b3
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9d0]
sub eax, 0xa9da
mov dword [ebp - 0x4a0], eax
push 0
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov ecx, dword [ebp - 0x4a0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x4a0]
jl 0x1002d3f0
mov dword [ebp - 0x9b4], 1
jmp 0x1002d3f7
and dword [ebp - 0x9b4], 0
push 0
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov ecx, dword [ebp - 0x9b4]
cmp ecx, dword [eax]
jg 0x1002d41a
mov dword [ebp - 0x4a4], 1
jmp 0x1002d421
and dword [ebp - 0x4a4], 0
cmp dword [ebp - 0x4a4], 0xa167
jne 0x1002d439
mov dword [ebp - 0x8b8], 1
jmp 0x1002d440
and dword [ebp - 0x8b8], 0
cmp dword [ebp - 0x8b8], 8
jge 0x1002d542
mov dword [ebp - 0xb48], 0x2a3
mov dword [ebp - 0x28], 0
jmp 0x1002d467
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x17
jl 0x1002d53d
mov dword [ebp - 0x288], 1
mov dword [ebp - 0x320], 0
jmp 0x1002d494
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 3
jge 0x1002d4b0
mov eax, dword [ebp - 0x320]
mov dword [ebp + eax*4 - 0x11b8], 0x2a04f777
jmp 0x1002d487
push 1
lea ecx, [ebp - 0x448]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002d4c4
jmp 0x1002d53d
mov dword [ebp - 0x288], 0
jmp 0x1002d4dd
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 0xe
jne 0x1002d538
mov eax, dword [ebp - 0xb48]
add eax, dword [ebp - 0x288]
je 0x1002d512
push 1
lea ecx, [ebp - 0x448]
call fcn.1000c112
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x11b8], eax
jmp 0x1002d536
mov byte [ebp - 0x196], 0
movzx eax, byte [ebp - 0x196]
test eax, eax
je 0x1002d536
push 0
push 0x22cb
push 0xbf
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x1002d4d0
jmp 0x1002d460
jmp 0x1002d722
mov dword [ebp - 0x2a8], 0xfffb
mov dword [ebp - 0x28], 0
jmp 0x1002d55c
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 2
jg 0x1002d5fb
mov dword [ebp - 0xb50], 0xffffffff
push dword [ebp - 0x28]
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov dword [ebp - 0x4a8], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov ecx, dword [ebp - 0x4a8]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov dword [ebp - 0x760], eax
mov eax, dword [ebp - 0x760]
mov ecx, dword [ebp - 0x4a8]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x760]
mov eax, dword [eax]
mov dword [ebp - 0x2a8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2a8]
mov dword [ebp + eax - 0x420], ecx
push dword [ebp - 0x28]
lea ecx, [ebp - 0x490]
call fcn.1000c112
mov eax, dword [eax]
mov dword [ebp - 0xb50], eax
jmp 0x1002d555
cmp dword [ebp - 0x2a8], 0
je 0x1002d619
mov eax, 0x9cde30ec
test eax, eax
je 0x1002d619
mov dword [ebp - 0x768], 1
jmp 0x1002d620
and dword [ebp - 0x768], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x420]
mov dword [ebp - 0xee0], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x420]
imul esi, dword [ebp - 0x424]
push 0
lea ecx, [ebp - 0x448]
call fcn.1000c112
cmp esi, dword [eax]
jg 0x1002d664
mov dword [ebp - 0x4b0], 1
jmp 0x1002d66b
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 0
jle 0x1002d680
mov dword [ebp - 0x968], 1
jmp 0x1002d687
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x968]
sub eax, 0xc7bc
cmp dword [ebp - 0x28], eax
jge 0x1002d6a3
mov dword [ebp - 0x4b8], 1
jmp 0x1002d6aa
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x2a8]
cmp dword [ebp - 0x4b8], eax
jl 0x1002d6c4
mov dword [ebp - 0x4c0], 1
jmp 0x1002d6cb
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x768]
cmp eax, dword [ebp - 0x4c0]
je 0x1002d6e5
mov dword [ebp - 0x8c0], 1
jmp 0x1002d6ec
and dword [ebp - 0x8c0], 0
push 0
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov ecx, dword [ebp - 0x8c0]
cmp ecx, dword [eax]
je 0x1002d70f
mov dword [ebp - 0x4c8], 1
jmp 0x1002d716
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0xb58], eax
cmp dword [ebp - 0x3c8], 0
jne 0x1002d797
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x420], 0x3b9fe29
jg 0x1002d74a
mov dword [ebp - 0xb60], 1
jmp 0x1002d751
and dword [ebp - 0xb60], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x420]
mov dword [ebp - 0xee8], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0xef0], eax
mov eax, dword [ebp - 0x3c8]
mov dword [ebp - 0xef8], eax
push 0
lea ecx, [ebp - 0x490]
call fcn.1000c112
cmp dword [eax], 0
jne 0x1002d797
and dword [ebp - 0x770], 0
jmp 0x1002d7a1
mov dword [ebp - 0x770], 1
cmp dword [ebp - 0x770], 6
jne 0x1002d7b6
mov dword [ebp - 0x4d0], 1
jmp 0x1002d7bd
and dword [ebp - 0x4d0], 0
mov esi, dword [ebp - 0x4d0]
neg esi
push 0
lea ecx, [ebp - 0x448]
call fcn.1000c112
cmp esi, dword [eax]
je 0x1002d7e2
mov dword [ebp - 0x9c0], 1
jmp 0x1002d7e9
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [ebp - 0x9c0]
jge 0x1002d803
mov dword [ebp - 0x4d8], 1
jmp 0x1002d80a
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x424]
cmp dword [ebp - 0x4d8], eax
jg 0x1002d824
mov dword [ebp - 0x778], 1
jmp 0x1002d82b
and dword [ebp - 0x778], 0
push 1
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov ecx, dword [ebp - 0x778]
cmp ecx, dword [eax]
jg 0x1002d84e
mov dword [ebp - 0x4e0], 1
jmp 0x1002d855
and dword [ebp - 0x4e0], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x420], 0x2619
mov ecx, dword [ebp - 0x4e0]
add ecx, 6
cmp eax, ecx
jge 0x1002d87f
mov dword [ebp - 0x8c8], 1
jmp 0x1002d886
and dword [ebp - 0x8c8], 0
cmp dword [ebp - 0x8c8], 0xf95
jl 0x1002d89e
mov dword [ebp - 0x4e8], 1
jmp 0x1002d8a5
and dword [ebp - 0x4e8], 0
push 0
lea ecx, [ebp - 0x448]
call fcn.1000c112
mov ecx, dword [ebp - 0x4e8]
add ecx, dword [eax]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x420], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x448]
call fcn.1000c10d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x490]
call fcn.1000c10d
mov dword [ebp - 0x54], 0x9d29be1d
mov dword [ebp - 0x3d0], 0x4f2887cf
mov dword [ebp - 0x210], 0x62d5e48d
mov dword [ebp - 0x210], 0
jmp 0x1002d919
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 0x14
jl 0x1002dabf
mov dword [ebp - 0x4c], 0xfffa
mov dword [ebp - 0x780], 0xedade098
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x780], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x780], eax
jge 0x1002d957
mov dword [ebp - 0x4f0], 1
jmp 0x1002d95e
and dword [ebp - 0x4f0], 0
cmp dword [ebp - 0x4f0], 0xc45c1d10
jne 0x1002d976
mov dword [ebp - 0x970], 1
jmp 0x1002d97d
and dword [ebp - 0x970], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x970], eax
jg 0x1002d994
mov dword [ebp - 0x4f8], 1
jmp 0x1002d99b
and dword [ebp - 0x4f8], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x4f8], eax
jne 0x1002d9b5
mov dword [ebp - 0x788], 1
jmp 0x1002d9bc
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x788], eax
jl 0x1002d9d3
mov dword [ebp - 0x500], 1
jmp 0x1002d9da
and dword [ebp - 0x500], 0
cmp dword [ebp - 0x500], 0xcba86ba4
je 0x1002d9f2
mov dword [ebp - 0x8d0], 1
jmp 0x1002d9f9
and dword [ebp - 0x8d0], 0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x8d0]
sub eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], eax
jg 0x1002da16
mov dword [ebp - 0xb68], 1
jmp 0x1002da1d
and dword [ebp - 0xb68], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xf00], eax
xor eax, eax
je 0x1002da8b
mov dword [ebp - 0x4c], 0x11
jmp 0x1002da3a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x31
jl 0x1002da89
mov dword [ebp - 0x360], 0
jmp 0x1002da59
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
cmp dword [ebp - 0x360], 1
jge 0x1002da75
mov eax, dword [ebp - 0x360]
mov dword [ebp + eax*4 - 0xb70], 0x3691f6f4
jmp 0x1002da4c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xb70], 0
je 0x1002da87
jmp 0x1002da89
jmp 0x1002da33
jmp 0x1002daba
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x1002daba
push 0
push 0x1e3c
push 0x8e6
push 0
push 0x1b1b
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
jmp 0x1002d90c
push 2
lea ecx, [ebp - 0xc40]
call fcn.1000c0a5
mov dword [ebp - 4], 3
mov dword [ebp - 0xc18], 0xfffffffd
mov dword [ebp - 0x2b0], 0
jmp 0x1002daf6
mov eax, dword [ebp - 0x2b0]
inc eax
mov dword [ebp - 0x2b0], eax
cmp dword [ebp - 0x2b0], 2
jge 0x1002db18
push dword [ebp - 0x2b0]
lea ecx, [ebp - 0xc40]
call fcn.1000c112
mov dword [eax], 7
jmp 0x1002dae9
cmp dword [ebp - 0x54], 0
je 0x1002db30
cmp dword [ebp - 0x54], 0
je 0x1002db30
mov dword [ebp - 0x508], 1
jmp 0x1002db37
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x54]
add eax, dword [ebp - 0x508]
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x54], 1
jmp 0x1002db56
mov eax, dword [ebp - 0x54]
dec eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0
jl 0x1002dd24
mov dword [ebp - 0x408], 0
mov dword [ebp - 0x1ac], 0xffffffff
mov dword [ebp - 0xc28], 0x379a1d12
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x408], eax
xor eax, eax
jne 0x1002db9d
push 1
lea ecx, [ebp - 0xc40]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002dbce
cmp dword [ebp - 0x54], 1
jg 0x1002dbaf
mov dword [ebp - 0x790], 1
jmp 0x1002dbb6
and dword [ebp - 0x790], 0
cmp dword [ebp - 0x790], 0x8142
jge 0x1002dbce
mov dword [ebp - 0x510], 1
jmp 0x1002dbd5
and dword [ebp - 0x510], 0
cmp dword [ebp - 0x510], 0x8a6e
jge 0x1002dbee
xor eax, eax
jne 0x1002dbee
and dword [ebp - 0xa08], 0
jmp 0x1002dbf8
mov dword [ebp - 0xa08], 1
mov eax, dword [ebp - 0xa08]
sub eax, dword [ebp - 0x408]
cmp eax, dword [ebp - 0x54]
jg 0x1002dc15
mov dword [ebp - 0xc08], 1
jmp 0x1002dc1c
and dword [ebp - 0xc08], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xf08], eax
cmp dword [ebp - 0x1ac], 0x800f4d4e
jne 0x1002dc52
push 1
lea ecx, [ebp - 0xc40]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002dc52
mov dword [ebp - 0x518], 1
jmp 0x1002dc59
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x518], eax
jle 0x1002dc73
mov dword [ebp - 0xc10], 1
jmp 0x1002dc7a
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xf10], eax
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xf18], eax
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0xf20], eax
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x408], eax
jl 0x1002dcb5
mov dword [ebp - 0x798], 1
jmp 0x1002dcbc
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0xc18]
cmp dword [ebp - 0x798], eax
jg 0x1002dcd6
mov dword [ebp - 0xc20], 1
jmp 0x1002dcdd
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0x1ac]
mov dword [ebp - 0xf28], eax
imul eax, dword [ebp - 0x1ac], 0x15e4
test eax, eax
je 0x1002dd0c
mov eax, 0x8307
test eax, eax
je 0x1002dd0c
mov dword [ebp - 0x520], 1
jmp 0x1002dd13
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0xc28], eax
jmp 0x1002db4f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc40]
call fcn.1000c10d
mov dword [ebp - 0x78], 0x8a61928c
mov dword [ebp - 0x114], 0x2a2b3b7b
mov dword [ebp - 0xcd8], 0xcabf
mov dword [ebp - 0xcd4], 0xcabf
mov dword [ebp - 0xcd0], 0xcabf
mov dword [ebp - 0xccc], 0xcabf
lea ecx, [ebp - 0x39d]
call fcn.1000c121
push eax
lea eax, [ebp - 0xcc8]
push eax
lea eax, [ebp - 0xcd8]
push eax
lea ecx, [ebp - 0x1208]
call fcn.1000c124
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc4c]
call fcn.1000c0e7
mov dword [ebp - 4], 4
mov dword [ebp - 0x78], 0
jmp 0x1002ddb8
mov eax, dword [ebp - 0x78]
dec eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0xfffffff1
jne 0x1002ddfa
mov dword [ebp - 0x8d8], 0
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x8d8], eax
jg 0x1002dddf
mov dword [ebp - 0x528], 1
jmp 0x1002dde6
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x8d8]
add eax, dword [ebp - 0x528]
mov dword [ebp - 0x114], eax
jmp 0x1002ddb1
mov dword [ebp - 0x114], 0
jmp 0x1002de13
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jg 0x1002df80
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x78], 0
jmp 0x1002de3a
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jg 0x1002df7b
mov dword [ebp - 0x250], 1
mov dword [ebp - 0xb20], 0
mov dword [ebp - 0x250], 3
jmp 0x1002de71
mov eax, dword [ebp - 0x250]
dec eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 0
jl 0x1002df76
mov dword [ebp - 0x1ec], 8
mov dword [ebp - 0x1ec], 3
jmp 0x1002dea1
mov eax, dword [ebp - 0x1ec]
dec eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0
jl 0x1002df0d
xor eax, eax
jne 0x1002decd
push dword [ebp - 0x114]
lea ecx, [ebp - 0xc4c]
call fcn.1000c112
cmp dword [eax], 0
jne 0x1002decd
and dword [ebp - 0xb7c], 0
jmp 0x1002ded7
mov dword [ebp - 0xb7c], 1
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x250]
mov dword [ebp - 0xb20], eax
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xf30], eax
mov esi, dword [ebp - 0x204]
push dword [ebp - 0x1ec]
lea ecx, [ebp - 0xc4c]
call fcn.1000c112
mov dword [eax], esi
jmp 0x1002de94
mov dword [ebp - 0x204], 3
jmp 0x1002df26
mov eax, dword [ebp - 0x204]
dec eax
mov dword [ebp - 0x204], eax
cmp dword [ebp - 0x204], 0
jl 0x1002df71
push dword [ebp - 0x114]
lea ecx, [ebp - 0xc4c]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002df47
jmp 0x1002df71
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x1002df6f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1002df19
jmp 0x1002de64
jmp 0x1002de33
jmp 0x1002de06
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4c]
call fcn.1000c10d
push 4
lea ecx, [ebp - 0xff0]
call fcn.1000c0a5
mov dword [ebp - 4], 5
mov dword [ebp - 0xf38], 0x9b95
mov dword [ebp - 0x2b8], 0xfffffff6
mov dword [ebp - 0x7a0], 0xfff6
mov dword [ebp - 0x44], 0
jmp 0x1002dfd1
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x1002dfe7
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x328], 0x4a6847df
jmp 0x1002dfca
mov dword [ebp - 0x44], 0
jmp 0x1002dff7
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 4
jge 0x1002e013
push dword [ebp - 0x44]
lea ecx, [ebp - 0xff0]
call fcn.1000c112
mov dword [eax], 0x3c4ab274
jmp 0x1002dff0
mov dword [ebp - 0x44], 0
jmp 0x1002e023
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1002e039
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x1220], 4
jmp 0x1002e01c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x328], 0
jmp 0x1002e067
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x328]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x328], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x328], 0xfffffff6
je 0x1002e142
mov dword [ebp - 0xf40], 0x92443250
mov dword [ebp - 0xf48], 1
mov dword [ebp - 0xf50], 1
mov dword [ebp - 0xf58], 0
push 2
lea ecx, [ebp - 0xfe0]
call fcn.1000c0a5
mov byte [ebp - 4], 6
mov dword [ebp - 0x9c], 0
jmp 0x1002e0cd
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1002e0ec
push dword [ebp - 0x9c]
lea ecx, [ebp - 0xfe0]
call fcn.1000c112
and dword [eax], 0
jmp 0x1002e0c0
mov dword [ebp - 0x9c], 0
jmp 0x1002e105
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x1002e121
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x1260], 1
jmp 0x1002e0f8
mov eax, dword [ebp - 0x7a0]
dec eax
mov dword [ebp - 0x7a0], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xfe0]
call fcn.1000c10d
jmp 0x1002e04c
mov dword [ebp - 0x2b8], 1
jmp 0x1002e15b
mov eax, dword [ebp - 0x2b8]
dec eax
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jl 0x1002e17e
mov byte [ebp - 0x198], 0
movzx eax, byte [ebp - 0x198]
test eax, eax
je 0x1002e17c
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x1002e14e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xff0]
call fcn.1000c10d
mov dword [ebp - 0x88], 0x8a61928c
mov dword [ebp - 0x11c], 0x2a2b3b7b
mov dword [ebp - 0xd28], 0xcabf
mov dword [ebp - 0xd24], 0xcabf
mov dword [ebp - 0xd20], 0xcabf
mov dword [ebp - 0xd1c], 0xcabf
lea ecx, [ebp - 0x3f5]
call fcn.1000c121
push eax
lea eax, [ebp - 0xd18]
push eax
lea eax, [ebp - 0xd28]
push eax
lea ecx, [ebp - 0x1230]
call fcn.1000c124
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc64]
call fcn.1000c0e7
mov dword [ebp - 4], 7
mov dword [ebp - 0x88], 0
jmp 0x1002e21e
mov eax, dword [ebp - 0x88]
dec eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0xfffffff1
jne 0x1002e266
mov dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0x530], eax
jg 0x1002e24b
mov dword [ebp - 0x978], 1
jmp 0x1002e252
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x530]
add eax, dword [ebp - 0x978]
mov dword [ebp - 0x11c], eax
jmp 0x1002e211
mov dword [ebp - 0x11c], 0
jmp 0x1002e27f
mov eax, dword [ebp - 0x11c]
inc eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 3
jg 0x1002e3fb
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x88], 0
jmp 0x1002e2af
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jg 0x1002e3f6
mov dword [ebp - 0x270], 1
mov dword [ebp - 0xa50], 0
mov dword [ebp - 0x270], 3
jmp 0x1002e2e9
mov eax, dword [ebp - 0x270]
dec eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jl 0x1002e3f1
mov dword [ebp - 0x1b4], 8
mov dword [ebp - 0x1b4], 3
jmp 0x1002e319
mov eax, dword [ebp - 0x1b4]
dec eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 0
jl 0x1002e388
xor eax, eax
jne 0x1002e345
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xc64]
call fcn.1000c112
cmp dword [eax], 0
jne 0x1002e345
and dword [ebp - 0xa5c], 0
jmp 0x1002e34f
mov dword [ebp - 0xa5c], 1
mov eax, dword [ebp - 0x88]
sub eax, dword [ebp - 0x270]
mov dword [ebp - 0xa50], eax
mov eax, dword [ebp - 0x1b4]
mov dword [ebp - 0xf60], eax
mov esi, dword [ebp - 0x220]
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0xc64]
call fcn.1000c112
mov dword [eax], esi
jmp 0x1002e30c
mov dword [ebp - 0x220], 3
jmp 0x1002e3a1
mov eax, dword [ebp - 0x220]
dec eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 0
jl 0x1002e3ec
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xc64]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002e3c2
jmp 0x1002e3ec
mov byte [ebp - 0xf3], 0
movzx eax, byte [ebp - 0xf3]
test eax, eax
je 0x1002e3ea
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1002e394
jmp 0x1002e2dc
jmp 0x1002e2a2
jmp 0x1002e272
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc64]
call fcn.1000c10d
mov dword [ebp - 0x58], 0x9d29be1d
mov dword [ebp - 0x438], 0x4f2887cf
push 4
lea ecx, [ebp - 0x1010]
call fcn.1000c0a5
mov dword [ebp - 4], 8
mov dword [ebp - 0xf68], 0x9b95
mov dword [ebp - 0x2c0], 0xfffffff6
mov dword [ebp - 0x538], 0xfff6
mov dword [ebp - 0x2c], 0
jmp 0x1002e45d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1002e473
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x380], 0x4a6847df
jmp 0x1002e456
mov dword [ebp - 0x2c], 0
jmp 0x1002e483
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002e49f
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x1010]
call fcn.1000c112
mov dword [eax], 0x3c4ab274
jmp 0x1002e47c
mov dword [ebp - 0x2c], 0
jmp 0x1002e4af
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002e4c5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1280], 4
jmp 0x1002e4a8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x380], 0
jmp 0x1002e4f3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x380]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x380], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x380], 0xfffffff6
je 0x1002e5ce
mov dword [ebp - 0xf70], 0x92443250
mov dword [ebp - 0xf78], 1
mov dword [ebp - 0xf80], 1
mov dword [ebp - 0xf88], 0
push 2
lea ecx, [ebp - 0x1000]
call fcn.1000c0a5
mov byte [ebp - 4], 9
mov dword [ebp - 0xb4], 0
jmp 0x1002e559
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1002e578
push dword [ebp - 0xb4]
lea ecx, [ebp - 0x1000]
call fcn.1000c112
and dword [eax], 0
jmp 0x1002e54c
mov dword [ebp - 0xb4], 0
jmp 0x1002e591
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 2
jge 0x1002e5ad
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x1240], 1
jmp 0x1002e584
mov eax, dword [ebp - 0x538]
dec eax
mov dword [ebp - 0x538], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1000]
call fcn.1000c10d
jmp 0x1002e4d8
mov dword [ebp - 0x2c0], 1
jmp 0x1002e5e7
mov eax, dword [ebp - 0x2c0]
dec eax
mov dword [ebp - 0x2c0], eax
cmp dword [ebp - 0x2c0], 0
jl 0x1002e60a
mov byte [ebp - 0x197], 0
movzx eax, byte [ebp - 0x197]
test eax, eax
je 0x1002e608
call dword [sym.imp.USER32.dll_EndMenu]
jmp 0x1002e5da
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1010]
call fcn.1000c10d
push 2
lea ecx, [ebp - 0xc7c]
call fcn.1000c0a5
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x2c8], 0xfff8
mov dword [ebp - 0xa4], 4
mov dword [ebp - 0xc0], 0xffffffff
mov dword [ebp - 0x12c], 0xfffffffc
push 1
lea ecx, [ebp - 0xdd0]
call fcn.1000c0a5
mov byte [ebp - 4], 0xb
mov dword [ebp - 0xa7c], 0x262
mov dword [ebp - 0xf90], 0xfffffff8
mov dword [ebp - 0x330], 0
jmp 0x1002e693
mov eax, dword [ebp - 0x330]
inc eax
mov dword [ebp - 0x330], eax
cmp dword [ebp - 0x330], 1
jge 0x1002e6b2
push dword [ebp - 0x330]
lea ecx, [ebp - 0xdd0]
call fcn.1000c112
or dword [eax], 0xffffffff
jmp 0x1002e686
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
add eax, 0xb8f3
jne 0x1002e70a
cmp dword [ebp - 0x2c8], 0xfffffffb
jge 0x1002e6e0
mov dword [ebp - 0xa64], 1
jmp 0x1002e6e7
and dword [ebp - 0xa64], 0
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0xf98], eax
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0xa4], eax
jl 0x1002e70a
and dword [ebp - 0x7a8], 0
jmp 0x1002e714
mov dword [ebp - 0x7a8], 1
mov eax, dword [ebp - 0x7a8]
add eax, 0xf34f
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x2c8]
cmp dword [ebp - 0xc0], eax
jge 0x1002e94d
mov dword [ebp - 0x540], 0
mov dword [ebp - 0xbdc], 0x2199
mov dword [ebp - 0xb94], 0xfffffffb
mov dword [ebp - 0xc0], 0
jmp 0x1002e76e
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 4
jl 0x1002e948
mov dword [ebp - 0x124], 0x8ed7c3b7
mov dword [ebp - 0xa74], 0xfffffff6
mov dword [ebp - 0x368], 0
jmp 0x1002e7a8
mov eax, dword [ebp - 0x368]
inc eax
mov dword [ebp - 0x368], eax
cmp dword [ebp - 0x368], 1
jge 0x1002e7c4
mov eax, dword [ebp - 0x368]
mov dword [ebp + eax*4 - 0xb8c], 0xe469209a
jmp 0x1002e79b
mov eax, dword [ebp - 0x12c]
neg eax
cmp dword [ebp - 0x124], eax
je 0x1002e7e0
mov dword [ebp - 0x3d8], 1
jmp 0x1002e7e7
and dword [ebp - 0x3d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d8]
mov dword [ebp + eax - 0xb8c], ecx
mov eax, dword [ebp - 0x540]
add eax, dword [ebp - 0x3d8]
je 0x1002e81d
cmp dword [ebp - 0x12c], 0
je 0x1002e81d
mov dword [ebp - 0x8e0], 1
jmp 0x1002e824
and dword [ebp - 0x8e0], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x540], eax
jg 0x1002e83e
mov dword [ebp - 0xa6c], 1
jmp 0x1002e845
and dword [ebp - 0xa6c], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xfa0], eax
mov eax, dword [ebp - 0xbdc]
cmp dword [ebp - 0x124], eax
jle 0x1002e86b
mov dword [ebp - 0x548], 1
jmp 0x1002e872
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x8e0]
add eax, dword [ebp - 0x548]
sub eax, dword [ebp - 0x12c]
je 0x1002e89b
cmp dword [ebp - 0xc0], 0
je 0x1002e89b
mov dword [ebp - 0x7b0], 1
jmp 0x1002e8a2
and dword [ebp - 0x7b0], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x7b0]
cmp eax, 0xffffffff
jl 0x1002e8c0
mov dword [ebp - 0x550], 1
jmp 0x1002e8c7
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0x550]
test eax, eax
jne 0x1002e8ea
mov eax, 0xd0fe
test eax, eax
jne 0x1002e8ea
and dword [ebp - 0x9c8], 0
jmp 0x1002e8f4
mov dword [ebp - 0x9c8], 1
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x9c8], eax
jl 0x1002e90e
mov dword [ebp - 0x558], 1
jmp 0x1002e915
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 1
jg 0x1002e92a
mov dword [ebp - 0x7b8], 1
jmp 0x1002e931
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0xa74]
add eax, dword [ebp - 0x7b8]
mov dword [ebp - 0xb94], eax
jmp 0x1002e761
jmp 0x1002e9d2
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1002e972
push 0
push 0
push 0x4e0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
mov dword [ebp - 0x12c], 0
jmp 0x1002e98b
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jg 0x1002e9d2
mov dword [ebp - 0xa4], 0
jmp 0x1002e9ad
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0
jg 0x1002e9d0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xdd0]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002e9ce
jmp 0x1002e9d0
jmp 0x1002e9a0
jmp 0x1002e97e
mov eax, dword [ebp - 0xa7c]
mov dword [ebp - 0xc0], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xdd0]
call fcn.1000c10d
mov dword [ebp - 0xba4], 0xfffffffd
mov dword [ebp - 0xc04], 0xfffffffa
mov dword [ebp - 0x258], 0xf0b96ca2
push 3
lea ecx, [ebp - 0x1020]
call fcn.1000c0a5
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x2d0], 0
jmp 0x1002ea35
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 3
jge 0x1002ea57
push dword [ebp - 0x2d0]
lea ecx, [ebp - 0x1020]
call fcn.1000c112
mov dword [eax], 0x443250e6
jmp 0x1002ea28
mov eax, dword [ebp - 0xc04]
mov dword [ebp - 0x258], eax
mov dword [ebp - 0x258], 2
jmp 0x1002ea7c
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jl 0x1002eab6
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1002eab4
push 0
push 0xa8c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
jmp 0x1002ea6f
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x1020]
call fcn.1000c10d
mov dword [ebp - 0x338], 0
jmp 0x1002eade
mov eax, dword [ebp - 0x338]
inc eax
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x338], 2
jge 0x1002eb00
push dword [ebp - 0x338]
lea ecx, [ebp - 0xc7c]
call fcn.1000c112
mov dword [eax], 7
jmp 0x1002ead1
cmp dword [ebp - 0x58], 0
je 0x1002eb18
cmp dword [ebp - 0x58], 0
je 0x1002eb18
mov dword [ebp - 0x560], 1
jmp 0x1002eb1f
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x560]
mov dword [ebp - 0x438], eax
mov dword [ebp - 0x58], 1
jmp 0x1002eb3e
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x1002efb1
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0xbc], 0xffffffff
mov dword [ebp - 0xa8c], 0xfffffffe
mov dword [ebp - 0x2d8], 0
jmp 0x1002eb7f
mov eax, dword [ebp - 0x2d8]
inc eax
mov dword [ebp - 0x2d8], eax
cmp dword [ebp - 0x2d8], 3
jge 0x1002eb9b
mov eax, dword [ebp - 0x2d8]
mov dword [ebp + eax*4 - 0x11dc], 0xeac8b13e
jmp 0x1002eb72
mov dword [ebp - 0xbc], 0
jmp 0x1002ebb4
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jg 0x1002ed01
mov dword [ebp - 0x7c0], 0x210e164c
mov dword [ebp - 0xa84], 1
cmp dword [ebp - 0xbc], 0
jge 0x1002ebea
mov dword [ebp - 0x8e8], 1
jmp 0x1002ebf1
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0
je 0x1002ec06
mov dword [ebp - 0x568], 1
jmp 0x1002ec0d
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x7c0]
sub eax, dword [ebp - 0x568]
jne 0x1002ec53
cmp dword [ebp - 0xa84], 0x4e79
jl 0x1002ec33
mov dword [ebp - 0xb9c], 1
jmp 0x1002ec3a
and dword [ebp - 0xb9c], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x11dc], 0
jne 0x1002ec53
and dword [ebp - 0x570], 0
jmp 0x1002ec5d
mov dword [ebp - 0x570], 1
mov eax, dword [ebp - 0x7c0]
imul eax, dword [ebp - 0x570]
test eax, eax
je 0x1002eccc
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1002ecca
push 0x1ebd
push 0xf4e
push 0
push 0
push 0xf29
push 0xf26
push 0xa71
push 0x242e
push 0x4d7
push 0x22fa
push 0xbca
push 0x1ef3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchDIBits]
jmp 0x1002ecfc
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1002ecfc
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
jmp 0x1002eba7
mov dword [ebp - 0xbc], 0
jmp 0x1002ed1a
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 0x1c
jge 0x1002edf7
mov dword [ebp - 0x390], 0
jmp 0x1002ed40
mov eax, dword [ebp - 0x390]
inc eax
mov dword [ebp - 0x390], eax
cmp dword [ebp - 0x390], 4
jge 0x1002ed5c
mov eax, dword [ebp - 0x390]
mov dword [ebp + eax*4 - 0xe20], 3
jmp 0x1002ed33
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xe20], 0xd
jmp 0x1002ed8a
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xe20]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xe20], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xe20], 0x11
jl 0x1002ede4
mov dword [ebp - 0x2e0], 0xf1e283d1
mov dword [ebp - 0x2e0], 0xffffffe2
jmp 0x1002edbd
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x2e0], 0xffffffe7
jg 0x1002ede2
mov byte [ebp - 0xf7], 0
movzx eax, byte [ebp - 0xf7]
test eax, eax
je 0x1002ede0
push 0
call dword [sym.imp.KERNEL32.dll_FindClose]
jmp 0x1002edb0
jmp 0x1002ed6f
cmp dword [ebp - 0xa8c], 0
je 0x1002edf2
jmp 0x1002ed0d
jmp 0x1002ed0d
mov dword [ebp - 0x1dc], 0xffffffff
mov dword [ebp - 0xc24], 0x379a1d12
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x3e0], eax
xor eax, eax
jne 0x1002ee2a
push 1
lea ecx, [ebp - 0xc7c]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002ee5b
cmp dword [ebp - 0x58], 1
jg 0x1002ee3c
mov dword [ebp - 0x980], 1
jmp 0x1002ee43
and dword [ebp - 0x980], 0
cmp dword [ebp - 0x980], 0x8142
jge 0x1002ee5b
mov dword [ebp - 0x578], 1
jmp 0x1002ee62
and dword [ebp - 0x578], 0
cmp dword [ebp - 0x578], 0x8a6e
jge 0x1002ee7b
xor eax, eax
jne 0x1002ee7b
and dword [ebp - 0x7c8], 0
jmp 0x1002ee85
mov dword [ebp - 0x7c8], 1
mov eax, dword [ebp - 0x7c8]
sub eax, dword [ebp - 0x3e0]
cmp eax, dword [ebp - 0x58]
jg 0x1002eea2
mov dword [ebp - 0xbe4], 1
jmp 0x1002eea9
and dword [ebp - 0xbe4], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xfa8], eax
cmp dword [ebp - 0x1dc], 0x800f4d4e
jne 0x1002eedf
push 1
lea ecx, [ebp - 0xc7c]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002eedf
mov dword [ebp - 0x580], 1
jmp 0x1002eee6
and dword [ebp - 0x580], 0
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x580], eax
jle 0x1002ef00
mov dword [ebp - 0xa94], 1
jmp 0x1002ef07
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xfb0], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xfb8], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0xfc0], eax
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x3e0], eax
jl 0x1002ef42
mov dword [ebp - 0x8f0], 1
jmp 0x1002ef49
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0xba4]
cmp dword [ebp - 0x8f0], eax
jg 0x1002ef63
mov dword [ebp - 0xa9c], 1
jmp 0x1002ef6a
and dword [ebp - 0xa9c], 0
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0xfc8], eax
imul eax, dword [ebp - 0x1dc], 0x15e4
test eax, eax
je 0x1002ef99
mov eax, 0x8307
test eax, eax
je 0x1002ef99
mov dword [ebp - 0x588], 1
jmp 0x1002efa0
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0xc24], eax
jmp 0x1002eb37
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc7c]
call fcn.1000c10d
mov dword [ebp - 0x134], 3
push 2
lea ecx, [ebp - 0xdc4]
call fcn.1000c0a5
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x8f8], 7
mov dword [ebp - 0x2e8], 0x1480
mov dword [ebp - 0x1bc], 0xc8a81d5f
mov dword [ebp - 0x340], 0
jmp 0x1002f015
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x340], 2
jge 0x1002f037
push dword [ebp - 0x340]
lea ecx, [ebp - 0xdc4]
call fcn.1000c112
mov dword [eax], 0x9a2f3817
jmp 0x1002f008
mov dword [ebp - 0x134], 0xffffffe3
jmp 0x1002f050
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jl 0x1002f363
mov dword [ebp - 0x228], 0xfffffffa
mov dword [ebp - 0x13c], 0x9cc25fa
mov dword [ebp - 0xaac], 0x392ad588
mov eax, 0xa2c7
test eax, eax
je 0x1002f0a3
mov dword [ebp - 0x228], 0x950b
cmp dword [ebp - 0x228], 0
je 0x1002f0a3
mov dword [ebp - 0x7d0], 1
jmp 0x1002f0aa
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x7d0]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
je 0x1002f2dd
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xfd0], eax
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x590], eax
push 0
lea ecx, [ebp - 0xdc4]
call fcn.1000c112
mov ecx, dword [ebp - 0x590]
mov dword [eax], ecx
cmp dword [ebp - 0x590], 0
jne 0x1002f146
cmp dword [ebp - 0x228], 0x29855eec
jl 0x1002f111
mov dword [ebp - 0x9cc], 1
jmp 0x1002f118
and dword [ebp - 0x9cc], 0
cmp dword [ebp - 0x9cc], 1
jg 0x1002f12d
mov dword [ebp - 0x598], 1
jmp 0x1002f134
and dword [ebp - 0x598], 0
cmp dword [ebp - 0x598], 0xffffffff
je 0x1002f146
and dword [ebp - 0x7d8], 0
jmp 0x1002f150
mov dword [ebp - 0x7d8], 1
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x7d8], eax
jg 0x1002f16a
mov dword [ebp - 0x5a0], 1
jmp 0x1002f171
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp - 0x13c]
cmp dword [ebp - 0x8f8], eax
jge 0x1002f197
mov dword [ebp - 0x5a8], 1
jmp 0x1002f19e
and dword [ebp - 0x5a8], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x5a8], eax
je 0x1002f1b8
mov dword [ebp - 0xaa4], 1
jmp 0x1002f1bf
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x1124], eax
or eax, 0xffffffff
dec eax
add eax, dword [ebp - 0x2e8]
cmp eax, dword [ebp - 0x2e8]
jg 0x1002f1f5
mov dword [ebp - 0x7e0], 1
jmp 0x1002f1fc
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x228]
cmp dword [ebp - 0x7e0], eax
jl 0x1002f216
mov dword [ebp - 0x5b0], 1
jmp 0x1002f21d
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0xffffffff
jl 0x1002f232
mov dword [ebp - 0x988], 1
jmp 0x1002f239
and dword [ebp - 0x988], 0
cmp dword [ebp - 0x988], 0x896e
je 0x1002f251
mov dword [ebp - 0x5b8], 1
jmp 0x1002f258
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 0
je 0x1002f2dd
mov dword [ebp - 0x7e8], 9
cmp dword [ebp - 0x13c], 0xfffa
jb 0x1002f298
cmp dword [ebp - 0x2e8], 0
je 0x1002f298
mov dword [ebp - 0x5c0], 1
jmp 0x1002f29f
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x13c]
mov dword [ebp - 0x7e8], eax
mov eax, dword [ebp - 0x7e8]
cmp eax, dword [ebp - 0x5c0]
jg 0x1002f2c5
mov dword [ebp - 0x900], 1
jmp 0x1002f2cc
and dword [ebp - 0x900], 0
mov eax, dword [ebp - 0x900]
mov dword [ebp - 0x13c], eax
jmp 0x1002f35e
mov dword [ebp - 0xbac], 0xaf75d592
mov byte [ebp - 0x165], 0
movzx eax, byte [ebp - 0x165]
test eax, eax
je 0x1002f304
push 0x89f
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0x1bc], 0
jmp 0x1002f31d
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 1
jg 0x1002f35e
mov dword [ebp - 0x112c], 0x66ba0539
xor eax, eax
jne 0x1002f346
cmp dword [ebp - 0xbac], 0
jne 0x1002f346
and dword [ebp - 0x5c8], 0
jmp 0x1002f350
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0xaac], eax
jmp 0x1002f310
jmp 0x1002f043
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc4]
call fcn.1000c10d
mov dword [ebp - 0x70], 0x8a61928c
mov dword [ebp - 0x144], 0x2a2b3b7b
mov dword [ebp - 0xcec], 0xcabf
mov dword [ebp - 0xce8], 0xcabf
mov dword [ebp - 0xce4], 0xcabf
mov dword [ebp - 0xce0], 0xcabf
lea ecx, [ebp - 0x3b9]
call fcn.1000c121
push eax
lea eax, [ebp - 0xcdc]
push eax
lea eax, [ebp - 0xcec]
push eax
lea ecx, [ebp - 0x1270]
call fcn.1000c124
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xc94]
call fcn.1000c0e7
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x70], 0
jmp 0x1002f3f7
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xfffffff1
jne 0x1002f439
mov dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x7f0], eax
jg 0x1002f41e
mov dword [ebp - 0x5d0], 1
jmp 0x1002f425
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x7f0]
add eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x144], eax
jmp 0x1002f3f0
mov dword [ebp - 0x144], 0
jmp 0x1002f452
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jg 0x1002f5bf
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x70], 0
jmp 0x1002f479
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jg 0x1002f5ba
mov dword [ebp - 0x280], 1
mov dword [ebp - 0xab4], 0
mov dword [ebp - 0x280], 3
jmp 0x1002f4b0
mov eax, dword [ebp - 0x280]
dec eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 0
jl 0x1002f5b5
mov dword [ebp - 0x1fc], 8
mov dword [ebp - 0x1fc], 3
jmp 0x1002f4e0
mov eax, dword [ebp - 0x1fc]
dec eax
mov dword [ebp - 0x1fc], eax
cmp dword [ebp - 0x1fc], 0
jl 0x1002f54c
xor eax, eax
jne 0x1002f50c
push dword [ebp - 0x144]
lea ecx, [ebp - 0xc94]
call fcn.1000c112
cmp dword [eax], 0
jne 0x1002f50c
and dword [ebp - 0xbec], 0
jmp 0x1002f516
mov dword [ebp - 0xbec], 1
mov eax, dword [ebp - 0x70]
sub eax, dword [ebp - 0x280]
mov dword [ebp - 0xab4], eax
mov eax, dword [ebp - 0x1fc]
mov dword [ebp - 0x1134], eax
mov esi, dword [ebp - 0x230]
push dword [ebp - 0x1fc]
lea ecx, [ebp - 0xc94]
call fcn.1000c112
mov dword [eax], esi
jmp 0x1002f4d3
mov dword [ebp - 0x230], 3
jmp 0x1002f565
mov eax, dword [ebp - 0x230]
dec eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 0
jl 0x1002f5b0
push dword [ebp - 0x144]
lea ecx, [ebp - 0xc94]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002f586
jmp 0x1002f5b0
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1002f5ae
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
jmp 0x1002f558
jmp 0x1002f4a3
jmp 0x1002f472
jmp 0x1002f445
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc94]
call fcn.1000c10d
mov dword [ebp - 0x478], 1
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x470], 1
mov dword [ebp - 0x46c], 1
mov dword [ebp - 0x1c4], 0xfa017779
mov dword [ebp - 0x5e0], 0
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1002f626
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x478], 0
jne 0x1002f767
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x478]
mov dword [ebp - 0x113c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x478], 0
jne 0x1002f684
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x478]
push 4
pop ecx
shl ecx, 1
imul eax, dword [ebp + ecx - 0x478]
test eax, eax
jne 0x1002f684
and dword [ebp - 0x9d4], 0
jmp 0x1002f68e
mov dword [ebp - 0x9d4], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x9d4]
sub ecx, dword [ebp + eax - 0x478]
cmp ecx, 0x1fc9a57b
jne 0x1002f6b5
mov dword [ebp - 0x5d8], 1
jmp 0x1002f6bc
and dword [ebp - 0x5d8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x478]
imul eax, dword [ebp - 0x5d8]
test eax, eax
je 0x1002f6f0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x478], 0
je 0x1002f6f0
mov dword [ebp - 0x7f8], 1
jmp 0x1002f6f7
and dword [ebp - 0x7f8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x478]
cmp dword [ebp - 0x7f8], eax
je 0x1002f725
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x478], 0
jne 0x1002f725
and dword [ebp - 0x410], 0
jmp 0x1002f72f
mov dword [ebp - 0x410], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x410]
mov dword [ebp + eax - 0x478], ecx
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x1c4], eax
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0x5e0], eax
mov eax, dword [ebp - 0x5e0]
add eax, 0x6178
je 0x1002f780
mov dword [ebp - 0x908], 3
mov eax, dword [ebp - 0x908]
inc eax
mov dword [ebp - 0x908], eax
jmp 0x1002f7dc
mov byte [ebp - 0xfb], 0
movzx eax, byte [ebp - 0xfb]
test eax, eax
je 0x1002f798
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
mov dword [ebp - 0x1c4], 0xffffffe9
jmp 0x1002f7b1
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 0x12
je 0x1002f7dc
mov dword [ebp - 0xbb4], 0x4ddb84c6
mov dword [ebp - 0xabc], 0xc869b7d6
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0xabc], eax
jmp 0x1002f7a4
mov dword [ebp - 0x14c], 3
push 2
lea ecx, [ebp - 0xd7c]
call fcn.1000c0a5
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x600], 7
mov dword [ebp - 0x370], 0x1480
mov dword [ebp - 0x1e4], 0xc8a81d5f
mov dword [ebp - 0x290], 0
jmp 0x1002f831
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 2
jge 0x1002f853
push dword [ebp - 0x290]
lea ecx, [ebp - 0xd7c]
call fcn.1000c112
mov dword [eax], 0x9a2f3817
jmp 0x1002f824
mov dword [ebp - 0x14c], 0xffffffe3
jmp 0x1002f86c
mov eax, dword [ebp - 0x14c]
inc eax
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 1
jl 0x1002fb7f
mov dword [ebp - 0x260], 0xfffffffa
mov dword [ebp - 0x154], 0x9cc25fa
mov dword [ebp - 0xbbc], 0x392ad588
mov eax, 0xa2c7
test eax, eax
je 0x1002f8bf
mov dword [ebp - 0x260], 0x950b
cmp dword [ebp - 0x260], 0
je 0x1002f8bf
mov dword [ebp - 0x5e8], 1
jmp 0x1002f8c6
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x5e8]
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 0
je 0x1002faf9
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0x1144], eax
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x800], eax
push 0
lea ecx, [ebp - 0xd7c]
call fcn.1000c112
mov ecx, dword [ebp - 0x800]
mov dword [eax], ecx
cmp dword [ebp - 0x800], 0
jne 0x1002f962
cmp dword [ebp - 0x260], 0x29855eec
jl 0x1002f92d
mov dword [ebp - 0x5f0], 1
jmp 0x1002f934
and dword [ebp - 0x5f0], 0
cmp dword [ebp - 0x5f0], 1
jg 0x1002f949
mov dword [ebp - 0x990], 1
jmp 0x1002f950
and dword [ebp - 0x990], 0
cmp dword [ebp - 0x990], 0xffffffff
je 0x1002f962
and dword [ebp - 0x5f8], 0
jmp 0x1002f96c
mov dword [ebp - 0x5f8], 1
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x5f8], eax
jg 0x1002f986
mov dword [ebp - 0x808], 1
jmp 0x1002f98d
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x808]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x600], eax
jge 0x1002f9b3
mov dword [ebp - 0x910], 1
jmp 0x1002f9ba
and dword [ebp - 0x910], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x910], eax
je 0x1002f9d4
mov dword [ebp - 0xc0c], 1
jmp 0x1002f9db
and dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x370]
mov dword [ebp - 0x114c], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x1154], eax
or eax, 0xffffffff
dec eax
add eax, dword [ebp - 0x370]
cmp eax, dword [ebp - 0x370]
jg 0x1002fa11
mov dword [ebp - 0x608], 1
jmp 0x1002fa18
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0x260]
cmp dword [ebp - 0x608], eax
jl 0x1002fa32
mov dword [ebp - 0x810], 1
jmp 0x1002fa39
and dword [ebp - 0x810], 0
cmp dword [ebp - 0x810], 0xffffffff
jl 0x1002fa4e
mov dword [ebp - 0x610], 1
jmp 0x1002fa55
and dword [ebp - 0x610], 0
cmp dword [ebp - 0x610], 0x896e
je 0x1002fa6d
mov dword [ebp - 0x9f0], 1
jmp 0x1002fa74
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x9f0]
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 0
je 0x1002faf9
mov dword [ebp - 0x618], 9
cmp dword [ebp - 0x154], 0xfffa
jb 0x1002fab4
cmp dword [ebp - 0x370], 0
je 0x1002fab4
mov dword [ebp - 0x818], 1
jmp 0x1002fabb
and dword [ebp - 0x818], 0
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0x618], eax
mov eax, dword [ebp - 0x618]
cmp eax, dword [ebp - 0x818]
jg 0x1002fae1
mov dword [ebp - 0x620], 1
jmp 0x1002fae8
and dword [ebp - 0x620], 0
mov eax, dword [ebp - 0x620]
mov dword [ebp - 0x154], eax
jmp 0x1002fb7a
mov dword [ebp - 0xac4], 0xaf75d592
mov byte [ebp - 0x185], 0
movzx eax, byte [ebp - 0x185]
test eax, eax
je 0x1002fb20
push 0x89f
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0x1e4], 0
jmp 0x1002fb39
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 1
jg 0x1002fb7a
mov dword [ebp - 0x1184], 0x66ba0539
xor eax, eax
jne 0x1002fb62
cmp dword [ebp - 0xac4], 0
jne 0x1002fb62
and dword [ebp - 0x918], 0
jmp 0x1002fb6c
mov dword [ebp - 0x918], 1
mov eax, dword [ebp - 0x918]
mov dword [ebp - 0xbbc], eax
jmp 0x1002fb2c
jmp 0x1002f85f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd7c]
call fcn.1000c10d
mov dword [ebp - 0x24], 0xffffffff
push 3
lea ecx, [ebp - 0x484]
call fcn.1000c0a5
mov dword [ebp - 4], 0x10
push 2
lea ecx, [ebp - 0x3b4]
call fcn.1000c0a5
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x430], 2
mov dword [ebp - 0xad4], 0x475678d5
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x38], 0
jmp 0x1002fbe8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1002fc04
push dword [ebp - 0x38]
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov dword [eax], 0x2071
jmp 0x1002fbe1
mov dword [ebp - 0x38], 0
jmp 0x1002fc14
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1002fc30
push dword [ebp - 0x38]
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
mov dword [eax], 1
jmp 0x1002fc0d
mov dword [ebp - 0x38], 0
jmp 0x1002fc40
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 2
jge 0x1002fc56
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x42c], 0xde7504ed
jmp 0x1002fc39
xor eax, eax
jne 0x1002fccf
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x118c], eax
push 0
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov ecx, dword [ebp - 0x24]
cmp dword [eax], ecx
je 0x1002fc83
mov dword [ebp - 0x628], 1
jmp 0x1002fc8a
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xb583
jle 0x1002fcb4
push 0
lea ecx, [ebp - 0x484]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002fcb4
mov dword [ebp - 0x820], 1
jmp 0x1002fcbb
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x820], eax
jne 0x1002fccf
and dword [ebp - 0x630], 0
jmp 0x1002fcd9
mov dword [ebp - 0x630], 1
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x630], eax
jl 0x1002fcf0
mov dword [ebp - 0x998], 1
jmp 0x1002fcf7
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x998]
sub eax, 0xa9da
mov dword [ebp - 0x638], eax
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
mov ecx, dword [ebp - 0x638]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x638]
jl 0x1002fd34
mov dword [ebp - 0x828], 1
jmp 0x1002fd3b
and dword [ebp - 0x828], 0
push 0
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov ecx, dword [ebp - 0x828]
cmp ecx, dword [eax]
jg 0x1002fd5e
mov dword [ebp - 0x640], 1
jmp 0x1002fd65
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0xa167
jne 0x1002fd7d
mov dword [ebp - 0x920], 1
jmp 0x1002fd84
and dword [ebp - 0x920], 0
cmp dword [ebp - 0x920], 8
jge 0x1002fe86
mov dword [ebp - 0xacc], 0x2a3
mov dword [ebp - 0x24], 0
jmp 0x1002fdab
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x17
jl 0x1002fe81
mov dword [ebp - 0x238], 1
mov dword [ebp - 0x2f0], 0
jmp 0x1002fdd8
mov eax, dword [ebp - 0x2f0]
inc eax
mov dword [ebp - 0x2f0], eax
cmp dword [ebp - 0x2f0], 3
jge 0x1002fdf4
mov eax, dword [ebp - 0x2f0]
mov dword [ebp + eax*4 - 0x11c4], 0x2a04f777
jmp 0x1002fdcb
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
cmp dword [eax], 0
je 0x1002fe08
jmp 0x1002fe81
mov dword [ebp - 0x238], 0
jmp 0x1002fe21
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 0xe
jne 0x1002fe7c
mov eax, dword [ebp - 0xacc]
add eax, dword [ebp - 0x238]
je 0x1002fe56
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
mov dword [ebp + ecx - 0x11c4], eax
jmp 0x1002fe7a
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1002fe7a
push 0
push 0x22cb
push 0xbf
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
jmp 0x1002fe14
jmp 0x1002fda4
jmp 0x10030066
mov dword [ebp - 0x348], 0xfffb
mov dword [ebp - 0x24], 0
jmp 0x1002fea0
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 2
jg 0x1002ff3f
mov dword [ebp - 0xbf4], 0xffffffff
push dword [ebp - 0x24]
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov dword [ebp - 0x648], eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov ecx, dword [ebp - 0x648]
mov eax, dword [eax]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
mov dword [ebp - 0x830], eax
mov eax, dword [ebp - 0x830]
mov ecx, dword [ebp - 0x648]
mov ecx, dword [ecx]
mov dword [eax], ecx
mov eax, dword [ebp - 0x830]
mov eax, dword [eax]
mov dword [ebp - 0x348], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x42c], ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x484]
call fcn.1000c112
mov eax, dword [eax]
mov dword [ebp - 0xbf4], eax
jmp 0x1002fe99
cmp dword [ebp - 0x348], 0
je 0x1002ff5d
mov eax, 0x9cde30ec
test eax, eax
je 0x1002ff5d
mov dword [ebp - 0x838], 1
jmp 0x1002ff64
and dword [ebp - 0x838], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
mov dword [ebp - 0x1194], eax
push 4
pop eax
imul eax, eax, 0
mov esi, dword [ebp + eax - 0x42c]
imul esi, dword [ebp - 0x430]
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
cmp esi, dword [eax]
jg 0x1002ffa8
mov dword [ebp - 0x650], 1
jmp 0x1002ffaf
and dword [ebp - 0x650], 0
cmp dword [ebp - 0x650], 0
jle 0x1002ffc4
mov dword [ebp - 0x9d8], 1
jmp 0x1002ffcb
and dword [ebp - 0x9d8], 0
mov eax, dword [ebp - 0x9d8]
sub eax, 0xc7bc
cmp dword [ebp - 0x24], eax
jge 0x1002ffe7
mov dword [ebp - 0x658], 1
jmp 0x1002ffee
and dword [ebp - 0x658], 0
mov eax, dword [ebp - 0x348]
cmp dword [ebp - 0x658], eax
jl 0x10030008
mov dword [ebp - 0x660], 1
jmp 0x1003000f
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x838]
cmp eax, dword [ebp - 0x660]
je 0x10030029
mov dword [ebp - 0x928], 1
jmp 0x10030030
and dword [ebp - 0x928], 0
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
mov ecx, dword [ebp - 0x928]
cmp ecx, dword [eax]
je 0x10030053
mov dword [ebp - 0x668], 1
jmp 0x1003005a
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
mov dword [ebp - 0xad4], eax
cmp dword [ebp - 0x3e8], 0
jne 0x100300db
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x42c], 0x3b9fe29
jg 0x1003008e
mov dword [ebp - 0xbc4], 1
jmp 0x10030095
and dword [ebp - 0xbc4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
mov dword [ebp - 0x119c], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x11a4], eax
mov eax, dword [ebp - 0x3e8]
mov dword [ebp - 0x11ac], eax
push 0
lea ecx, [ebp - 0x484]
call fcn.1000c112
cmp dword [eax], 0
jne 0x100300db
and dword [ebp - 0x840], 0
jmp 0x100300e5
mov dword [ebp - 0x840], 1
cmp dword [ebp - 0x840], 6
jne 0x100300fa
mov dword [ebp - 0x670], 1
jmp 0x10030101
and dword [ebp - 0x670], 0
mov esi, dword [ebp - 0x670]
neg esi
push 0
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
cmp esi, dword [eax]
je 0x10030126
mov dword [ebp - 0x9a0], 1
jmp 0x1003012d
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x3e8]
cmp eax, dword [ebp - 0x9a0]
jge 0x10030147
mov dword [ebp - 0x678], 1
jmp 0x1003014e
and dword [ebp - 0x678], 0
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x678], eax
jg 0x10030168
mov dword [ebp - 0x848], 1
jmp 0x1003016f
and dword [ebp - 0x848], 0
push 1
lea ecx, [ebp - 0x3b4]
call fcn.1000c112
mov ecx, dword [ebp - 0x848]
cmp ecx, dword [eax]
jg 0x10030192
mov dword [ebp - 0x680], 1
jmp 0x10030199
and dword [ebp - 0x680], 0
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x42c], 0x2619
mov ecx, dword [ebp - 0x680]
add ecx, 6
cmp eax, ecx
jge 0x100301c3
mov dword [ebp - 0x930], 1
jmp 0x100301ca
and dword [ebp - 0x930], 0
cmp dword [ebp - 0x930], 0xf95
jl 0x100301e2