Function at 0x1001117a
Capabilities:
Accept command line arguments
Contain obfuscated stackstrings
Get disk information
Get memory capacity
Get system information on windows
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10070f96
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0xad0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x6d4], 0xfffffff6
mov dword [ebp - 0x73c], 0xfffffffe
mov dword [ebp - 0x968], 0x2304b25b
mov dword [ebp - 0xa14], 0x4d073ff8
mov dword [ebp - 0x95c], 0xfffffffa
mov dword [ebp - 0x9f4], 4
mov dword [ebp - 0x964], 0xffffffff
push 1
lea ecx, [ebp - 0x8d0]
call fcn.10022698
and dword [ebp - 4], 0
mov dword [ebp - 0x54], 0
jmp 0x10011206
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1001121c
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xa34], 0xbd2ab60e
jmp 0x100111ff
mov dword [ebp - 0x54], 0
jmp 0x1001122c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10011248
push dword [ebp - 0x54]
lea ecx, [ebp - 0x8d0]
call fcn.1002273f
mov dword [eax], 0xca6c
jmp 0x10011225
push 0
lea ecx, [ebp - 0x8d0]
call fcn.1002273f
mov dword [ebp - 0x204], eax
mov eax, dword [ebp - 0x6d4]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x204]
mov eax, dword [eax]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp - 0x204]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x204]
mov dword [ecx], eax
mov eax, dword [ebp - 0x72c]
cmp eax, dword [ebp - 0x734]
je 0x100112a0
mov dword [ebp - 0x4c8], 1
jmp 0x100112a7
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x73c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8d0]
call fcn.1002271a
cmp dword [0x10c36024], 0
jne 0x10014d92
mov dword [ebp - 0x14], 0xa9ac70c3
mov dword [ebp - 0x254], 0x850270f9
mov dword [ebp - 0x664], 0xffffffff
mov dword [ebp - 0x744], 7
cmp dword [ebp - 0x14], 0
je 0x1001148b
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x10011312
mov dword [ebp - 0x62c], 1
jmp 0x10011319
and dword [ebp - 0x62c], 0
mov eax, dword [ebp - 0x62c]
mov dword [ebp - 0x254], eax
cmp dword [ebp - 0x254], 0xcf5aa05d
jne 0x1001133d
mov dword [ebp - 0x634], 1
jmp 0x10011344
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x634]
jle 0x1001135b
mov dword [ebp - 0x63c], 1
jmp 0x10011362
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x63c], eax
je 0x10011379
mov dword [ebp - 0x65c], 1
jmp 0x10011380
and dword [ebp - 0x65c], 0
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x65c]
mov dword [ebp - 0x664], eax
jne 0x100113a3
cmp dword [ebp - 0x254], 0
jne 0x100113a3
and dword [ebp - 0x66c], 0
jmp 0x100113ad
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x66c]
sub eax, dword [ebp - 0x14]
jne 0x100113c4
mov dword [ebp - 0x674], 1
jmp 0x100113cb
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x674], eax
jle 0x100113e2
mov dword [ebp - 0x67c], 1
jmp 0x100113e9
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x67c]
cmp eax, 0x2522abf7
jg 0x10011406
mov dword [ebp - 0x684], 1
jmp 0x1001140d
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0x684]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jne 0x10011427
mov dword [ebp - 0x68c], 1
jmp 0x1001142e
and dword [ebp - 0x68c], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x68c], eax
jl 0x10011445
mov dword [ebp - 0x694], 1
jmp 0x1001144c
and dword [ebp - 0x694], 0
mov eax, dword [ebp - 0x694]
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x14]
jle 0x10011466
mov dword [ebp - 0x648], 1
jmp 0x1001146d
and dword [ebp - 0x648], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x648], eax
jle 0x1001148b
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1001148b
mov dword [ebp - 0x390], 1
jmp 0x10011492
and dword [ebp - 0x390], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x390]
mov ecx, dword [ebp - 0x14]
add ecx, eax
jne 0x100114b2
cmp dword [ebp - 0x14], 0
jne 0x100114b2
and dword [ebp - 0x564], 0
jmp 0x100114bc
mov dword [ebp - 0x564], 1
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x744], eax
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x100114e9
push 0
push 0
push 0x18b3
call dword [sym.imp.USER32.dll_SetPropA]
mov dword [ebp - 0x44], 0
jmp 0x100114f9
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x1001150f
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0xa60], 0xfffffff9
jmp 0x100114f2
mov dword [ebp - 0x44], 0
jmp 0x1001151f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10011535
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x6b0], 0xc45cdbe8
jmp 0x10011518
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x6b0], 1
jmp 0x10011563
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b0]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x6b0], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6b0], 0
jl 0x10011593
mov byte [ebp - 0xa0], 0
movzx eax, byte [ebp - 0xa0]
test eax, eax
je 0x10011591
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x10011548
mov byte [ebp - 0xa2], 0
movzx eax, byte [ebp - 0xa2]
test eax, eax
je 0x100115b5
push 0x8c1
push 0xcfd
call dword [sym.imp.USER32.dll_IsDlgButtonChecked]
mov dword [ebp - 0x124], 0xc1188e17
mov dword [ebp - 0x8c], 0xd210ec32
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x268], 0xffff
mov dword [ebp - 0x48], 0
jmp 0x100115ed
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 2
jge 0x10011603
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0x29c], 0xfffffffe
jmp 0x100115e6
mov dword [ebp - 0x48], 0
jmp 0x10011613
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 3
jge 0x10011629
mov eax, dword [ebp - 0x48]
mov dword [ebp + eax*4 - 0xa58], 0x9e8bd61c
jmp 0x1001160c
mov eax, dword [ebp - 0x124]
cmp eax, dword [ebp - 0x124]
je 0x10011643
mov dword [ebp - 0x74c], 1
jmp 0x1001164a
and dword [ebp - 0x74c], 0
cmp dword [ebp - 0x8c], 0
je 0x10011668
cmp dword [ebp - 0x8c], 0
je 0x10011668
mov dword [ebp - 0x2d8], 1
jmp 0x1001166f
and dword [ebp - 0x2d8], 0
cmp dword [ebp - 0x2d8], 0xb65720b9
ja 0x10011687
mov dword [ebp - 0x56c], 1
jmp 0x1001168e
and dword [ebp - 0x56c], 0
mov eax, dword [ebp - 0x56c]
add eax, 0xffff
je 0x100116b0
cmp dword [ebp - 0x8c], 0
je 0x100116b0
mov dword [ebp - 0x784], 1
jmp 0x100116b7
and dword [ebp - 0x784], 0
mov eax, 0xffff
cmp eax, 0x3dfa
jae 0x100116cf
mov dword [ebp - 0x2e0], 1
jmp 0x100116d6
and dword [ebp - 0x2e0], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x2e0], eax
jge 0x100116f0
mov dword [ebp - 0x574], 1
jmp 0x100116f7
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x574], eax
je 0x10011711
mov dword [ebp - 0x2e8], 1
jmp 0x10011718
and dword [ebp - 0x2e8], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x2e8], eax
je 0x10011732
mov dword [ebp - 0x57c], 1
jmp 0x10011739
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x57c]
add eax, 0xffff
imul eax, eax, 0xf43b
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x29c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29c], 0
jne 0x10011773
mov dword [ebp - 0x78c], 1
jmp 0x1001177a
and dword [ebp - 0x78c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
add eax, dword [ebp - 0x8c]
cmp eax, 0x38ca8c98
je 0x100117a0
mov dword [ebp - 0x794], 1
jmp 0x100117a7
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
sub eax, 9
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x29c]
add ecx, eax
cmp dword [ebp - 0x8c], ecx
je 0x100117df
mov dword [ebp - 0x2f0], 1
jmp 0x100117e6
and dword [ebp - 0x2f0], 0
imul eax, dword [ebp - 0x2f0], 0x4fa7
test eax, eax
je 0x10011838
mov dword [ebp - 0x96c], 0x94dfd996
mov dword [ebp - 0x998], 0x914a3a6d
mov dword [ebp - 0x974], 0x5ef1355
mov dword [ebp - 0x9a0], 0xdd253d97
mov dword [ebp - 0x9fc], 1
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
jmp 0x10011ae1
push 2
lea ecx, [ebp - 0x8e8]
call fcn.10022698
mov dword [ebp - 4], 1
mov dword [ebp - 0x20c], 0xd497c242
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0x9b0], 1
mov dword [ebp - 0xa04], 6
mov dword [ebp - 0x9c0], 0xc5119b5f
push 4
lea ecx, [ebp - 0x980]
call fcn.10022698
mov byte [ebp - 4], 2
mov dword [ebp - 0x91c], 0xc853
mov dword [ebp - 0x320], 0xf31a33ff
mov dword [ebp - 0x7c], 0
jmp 0x100118bd
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 2
jge 0x100118d9
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x8e8]
call fcn.1002273f
mov dword [eax], 1
jmp 0x100118b6
mov dword [ebp - 0x7c], 0
jmp 0x100118e9
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x10011905
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x980]
call fcn.1002273f
mov dword [eax], 0x28f0e43d
jmp 0x100118e2
push 1
lea ecx, [ebp - 0x8e8]
call fcn.1002273f
mov dword [ebp - 0x270], eax
mov eax, dword [ebp - 0x270]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x270]
mov dword [ecx], eax
mov eax, dword [ebp - 0x270]
cmp dword [eax], 0xbfee
je 0x10011943
mov dword [ebp - 0x318], 1
jmp 0x1001194a
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x20c]
je 0x10011964
mov dword [ebp - 0x584], 1
jmp 0x1001196b
and dword [ebp - 0x584], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x29c]
cmp dword [ebp - 0x584], eax
jge 0x1001198c
mov dword [ebp - 0x2f8], 1
jmp 0x10011993
and dword [ebp - 0x2f8], 0
cmp dword [ebp - 0x2f8], 0x2489afff
jne 0x100119ab
mov dword [ebp - 0x58c], 1
jmp 0x100119b2
and dword [ebp - 0x58c], 0
cmp dword [ebp - 0x58c], 0
je 0x100119c7
mov dword [ebp - 0x300], 1
jmp 0x100119ce
and dword [ebp - 0x300], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x300], eax
jl 0x100119e8
mov dword [ebp - 0x594], 1
jmp 0x100119ef
and dword [ebp - 0x594], 0
cmp dword [ebp - 0x594], 0
je 0x10011a04
mov dword [ebp - 0x308], 1
jmp 0x10011a0b
and dword [ebp - 0x308], 0
cmp dword [ebp - 0x308], 0xfffffff9
jge 0x10011a20
mov dword [ebp - 0x59c], 1
jmp 0x10011a27
and dword [ebp - 0x59c], 0
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x20c]
add eax, dword [ebp - 0x59c]
mov dword [ebp - 0x310], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x310]
mov dword [ebp + eax - 0x29c], ecx
mov eax, dword [ebp - 0x268]
imul eax, dword [ebp - 0x310]
cmp dword [ebp - 0x1f0], eax
jg 0x10011a79
mov dword [ebp - 0x5a4], 1
jmp 0x10011a80
and dword [ebp - 0x5a4], 0
cmp dword [ebp - 0x5a4], 0xfffffffe
jne 0x10011a95
mov dword [ebp - 0x5ac], 1
jmp 0x10011a9c
and dword [ebp - 0x5ac], 0
mov eax, dword [ebp - 0x318]
imul eax, dword [ebp - 0x5ac]
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0xa58], eax
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x980]
call fcn.1002271a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8e8]
call fcn.1002271a
mov byte [ebp - 0x10c], 3
mov byte [ebp - 0x10b], 0xf0
mov byte [ebp - 0x10a], 8
mov byte [ebp - 0x109], 0x40
mov byte [ebp - 0x108], 7
mov byte [ebp - 0x107], 0x1c
mov byte [ebp - 0x106], 9
mov byte [ebp - 0x105], 0x56
mov byte [ebp - 0x104], 1
mov byte [ebp - 0x103], 0xb8
mov byte [ebp - 0x102], 0
mov byte [ebp - 0x101], 0x2f
mov byte [ebp - 0x100], 2
mov byte [ebp - 0xff], 0x39
mov byte [ebp - 0xfe], 0xb
mov byte [ebp - 0xfd], 0x1e
mov byte [ebp - 0xfc], 0xa
mov byte [ebp - 0xfb], 0
mov byte [ebp - 0xfa], 4
mov byte [ebp - 0xf9], 9
mov byte [ebp - 0xf8], 1
mov byte [ebp - 0xf7], 0
mov byte [ebp - 0xf6], 6
mov byte [ebp - 0xf5], 0x56
mov byte [ebp - 0xf4], 5
mov byte [ebp - 0xf3], 0x5f
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x10c]
and eax, 0x9e
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x10c]
or ecx, 0x9e
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
mov word [ebp + eax*2 - 0x914], cx
mov dword [ebp - 0x1c], 2
and dword [ebp - 0x114], 0
jmp 0x10011bee
mov eax, dword [ebp - 0x1c]
inc eax
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0x1a
jae 0x100127a0
push 2
lea ecx, [ebp - 0x27c]
call fcn.10022698
mov dword [ebp - 4], 3
mov dword [ebp - 0x1e0], 0
mov dword [ebp - 0x1e8], 0x606e82a7
mov dword [ebp - 0x1b4], 1
mov dword [ebp - 0x16c], 0
jmp 0x10011c43
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 2
jge 0x10011c65
push dword [ebp - 0x16c]
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov dword [eax], 1
jmp 0x10011c36
push 0
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov esi, eax
push 0
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x10011dff
mov dword [ebp - 0xcc], 1
cmp dword [ebp - 0xcc], 0
jne 0x10011caa
mov dword [ebp - 0x5b4], 1
jmp 0x10011cb1
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x5b4], eax
je 0x10011ccb
mov dword [ebp - 0x328], 1
jmp 0x10011cd2
and dword [ebp - 0x328], 0
cmp dword [ebp - 0x328], 0x93d0b548
jne 0x10011cea
mov dword [ebp - 0x5bc], 1
jmp 0x10011cf1
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0xcc]
cmp eax, dword [ebp - 0x5bc]
je 0x10011d0b
mov dword [ebp - 0x330], 1
jmp 0x10011d12
and dword [ebp - 0x330], 0
imul esi, dword [ebp - 0x330], 0x7727
push 1
lea ecx, [ebp - 0x27c]
call fcn.1002273f
cmp esi, dword [eax]
jne 0x10011d39
mov dword [ebp - 0x5c4], 1
jmp 0x10011d40
and dword [ebp - 0x5c4], 0
cmp dword [ebp - 0x5c4], 0xfe24307a
jb 0x10011d58
mov dword [ebp - 0x338], 1
jmp 0x10011d5f
and dword [ebp - 0x338], 0
cmp dword [ebp - 0x338], 0xef4a0426
jbe 0x10011d77
mov dword [ebp - 0x5cc], 1
jmp 0x10011d7e
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0xcc]
mov ecx, dword [ebp - 0x5cc]
lea eax, [ecx + eax + 9]
cmp dword [ebp - 0xcc], eax
jne 0x10011da2
mov dword [ebp - 0x79c], 1
jmp 0x10011da9
and dword [ebp - 0x79c], 0
push 0
lea ecx, [ebp - 0x27c]
call fcn.1002273f
cmp dword [eax], 3
jae 0x10011dc7
mov dword [ebp - 0x340], 1
jmp 0x10011dce
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0xcc], eax
mov byte [ebp - 0xa4], 0
movzx eax, byte [ebp - 0xa4]
test eax, eax
je 0x10011dfa
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x10012163
mov dword [ebp - 0x5ec], 2
mov dword [ebp - 0x5c], 0
jmp 0x10011e19
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 3
jge 0x10011e2f
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x994], 0xecce35a1
jmp 0x10011e12
mov dword [ebp - 0x5c], 0
jmp 0x10011e3f
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10011e55
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x2a4], 0xde5a82a6
jmp 0x10011e38
mov eax, 0xea28c7ff
test eax, eax
je 0x10011f6a
push 1
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
je 0x10011ec7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a4]
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 0xffffffff
jle 0x10011ea6
mov dword [ebp - 0x5d4], 1
jmp 0x10011ead
and dword [ebp - 0x5d4], 0
mov eax, dword [ebp - 0x1e0]
cmp dword [ebp - 0x5d4], eax
jl 0x10011ec7
mov dword [ebp - 0x348], 1
jmp 0x10011ece
and dword [ebp - 0x348], 0
cmp dword [ebp - 0x348], 1
jg 0x10011ee3
mov dword [ebp - 0x5dc], 1
jmp 0x10011eea
and dword [ebp - 0x5dc], 0
push 4
pop eax
shl eax, 0
lea eax, [ebp + eax - 0x994]
mov dword [ebp - 0x350], eax
push 0
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov ecx, dword [ebp - 0x350]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x5dc]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1b4]
sub ecx, dword [ebp + eax - 0x2a4]
mov eax, dword [ebp - 0x350]
cmp dword [eax], ecx
je 0x10011f49
mov dword [ebp - 0x5e4], 1
jmp 0x10011f50
and dword [ebp - 0x5e4], 0
imul eax, dword [ebp - 0x5e4], 0xfffa
test eax, eax
je 0x10011f6a
mov dword [ebp - 0x214], 1
jmp 0x10011f71
and dword [ebp - 0x214], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x214]
mov dword [ebp + eax - 0x2a4], ecx
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0x214], eax
jg 0x10011f9e
mov dword [ebp - 0x358], 1
jmp 0x10011fa5
and dword [ebp - 0x358], 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov ecx, dword [ebp - 0x358]
add ecx, dword [eax]
cmp ecx, 0x3faa
jg 0x1001212f
mov dword [ebp - 0x60c], 0xffffffff
mov eax, dword [ebp - 0x60c]
neg eax
cmp eax, 0x8f497c31
je 0x10011feb
mov dword [ebp - 0x360], 1
jmp 0x10011ff2
and dword [ebp - 0x360], 0
mov eax, dword [ebp - 0x5ec]
cmp dword [ebp - 0x360], eax
jge 0x1001200c
mov dword [ebp - 0x5f4], 1
jmp 0x10012013
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0x42c5
jne 0x1001202b
mov dword [ebp - 0x368], 1
jmp 0x10012032
and dword [ebp - 0x368], 0
cmp dword [ebp - 0x368], 1
jl 0x10012047
mov dword [ebp - 0x5fc], 1
jmp 0x1001204e
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x5fc]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebp - 0x1e8]
mov dword [ebp - 0x1b4], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
imul eax, dword [ebp - 0x1b4]
push 4
pop ecx
shl ecx, 1
cmp dword [ebp + ecx - 0x994], eax
jle 0x10012094
mov dword [ebp - 0x370], 1
jmp 0x1001209b
and dword [ebp - 0x370], 0
push 1
lea ecx, [ebp - 0x27c]
call fcn.1002273f
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [eax]
je 0x100120be
mov dword [ebp - 0x604], 1
jmp 0x100120c5
and dword [ebp - 0x604], 0
cmp dword [ebp - 0x604], 1
jne 0x100120da
mov dword [ebp - 0x378], 1
jmp 0x100120e1
and dword [ebp - 0x378], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a4]
add eax, dword [ebp - 0x378]
mov ecx, dword [ebp - 0x60c]
add ecx, eax
jne 0x10012110
mov eax, 0xfffe
test eax, eax
jne 0x10012110
and dword [ebp - 0x380], 0
jmp 0x1001211a
mov dword [ebp - 0x380], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp + eax - 0x2a4], ecx
jmp 0x1001214b
mov byte [ebp - 0xa6], 0
movzx eax, byte [ebp - 0xa6]
test eax, eax
je 0x1001214b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov byte [ebp - 0xa8], 0
movzx eax, byte [ebp - 0xa8]
test eax, eax
je 0x10012163
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov byte [ebp - 0xaa], 0
movzx eax, byte [ebp - 0xaa]
test eax, eax
je 0x1001217d
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatus]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x27c]
call fcn.1002271a
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x10c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x1c], eax
jne 0x1001270b
mov dword [ebp - 0x30], 0xfffffff7
mov dword [ebp - 0x388], 0x7921e124
mov dword [ebp - 0x7ac], 0xbf7c2f5a
mov dword [ebp - 0x614], 0x240f
mov dword [ebp - 0x7a4], 0x1000798c
cmp dword [ebp - 0x614], 0x26d5
jle 0x10012290
and dword [ebp - 0x17c], 0
jmp 0x100121fc
mov eax, dword [ebp - 0x17c]
inc eax
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0x1375
jge 0x10012290
and dword [ebp - 0x174], 0
jmp 0x10012222
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0x7072
jge 0x1001228b
and dword [ebp - 0x1f4], 0
jmp 0x10012244
mov eax, dword [ebp - 0x1f4]
inc eax
mov dword [ebp - 0x1f4], eax
cmp dword [ebp - 0x1f4], 0x7274
jge 0x10012289
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x1f4]
shl eax, cl
and eax, dword [ebp - 0x17c]
cdq
mov dword [ebp - 0x758], eax
mov dword [ebp - 0x754], edx
push dword [ebp - 0x754]
push dword [ebp - 0x758]
mov ecx, 0x10618e18
call fcn.1002244f
jmp 0x10012237
jmp 0x10012215
jmp 0x100121ef
mov dword [ebp - 0x1bc], 0
jmp 0x100122a9
mov eax, dword [ebp - 0x1bc]
inc eax
mov dword [ebp - 0x1bc], eax
cmp dword [ebp - 0x1bc], 2
jge 0x100122c5
mov eax, dword [ebp - 0x1bc]
mov dword [ebp + eax*4 - 0x988], 8
jmp 0x1001229c
mov dword [ebp - 4], 4
cmp dword [ebp - 0x614], 0x22f8
jge 0x100122e8
mov edx, dword [ebp - 0x7a4]
mov ecx, 0x10618e18
call fcn.1002579c
jmp 0x10012304
or dword [ebp - 4], 0xffffffff
jmp 0x1001230e
mov byte [ebp - 0x9b], 0
movzx eax, byte [ebp - 0x9b]
test eax, eax
je 0x10012339
push 0
push 0
push 0x167c
push 0x1a28
push 0x175c
call dword [sym.imp.USER32.dll_SendDlgItemMessageA]
mov dword [ebp - 0x30], 0xffffffe2
jmp 0x10012349
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffea
jg 0x100124cc
mov dword [ebp - 0x250], 0x57863718
mov dword [ebp - 0x184], 0
jmp 0x10012376
mov eax, dword [ebp - 0x184]
inc eax
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 3
jge 0x10012392
mov eax, dword [ebp - 0x184]
mov dword [ebp + eax*4 - 0x9bc], 1
jmp 0x10012369
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x988], 4
mov dword [ebp - 0x388], 4
mov eax, dword [ebp - 0x388]
cmp eax, dword [ebp - 0x30]
jne 0x100123c4
mov dword [ebp - 0x520], 1
jmp 0x100123cb
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x250]
sub eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x250]
je 0x100123e8
mov dword [ebp - 0x61c], 1
jmp 0x100123ef
and dword [ebp - 0x61c], 0
cmp dword [ebp - 0x61c], 0xb0cf
jle 0x10012407
mov dword [ebp - 0x624], 1
jmp 0x1001240e
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x624]
sub eax, dword [ebp - 0x250]
add eax, dword [ebp - 0x520]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x10012434
mov dword [ebp - 0x398], 1
jmp 0x1001243b
and dword [ebp - 0x398], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9bc]
cmp dword [ebp - 0x398], eax
je 0x1001245c
mov dword [ebp - 0x5e8], 1
jmp 0x10012463
and dword [ebp - 0x5e8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x5e8]
add ecx, dword [ebp - 0x30]
cmp ecx, dword [ebp + eax - 0x9bc]
jle 0x1001248a
mov dword [ebp - 0x3a0], 1
jmp 0x10012491
and dword [ebp - 0x3a0], 0
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x3a0]
lea eax, [eax + ecx + 8]
cmp eax, dword [ebp - 0x30]
jle 0x100124b1
xor eax, eax
inc eax
jne 0x100124b1
and dword [ebp - 0x528], 0
jmp 0x100124bb
mov dword [ebp - 0x528], 1
mov eax, dword [ebp - 0x528]
mov dword [ebp - 0x7ac], eax
jmp 0x10012342
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x10c]
inc eax
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x10c]
mov ecx, dword [ebp - 0x1c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x7bc], 0xfffffff9
mov dword [ebp - 0x3a8], 0xffffffff
mov dword [ebp - 0x828], 0x2f1fcc10
mov dword [ebp - 0x74], 0
jmp 0x10012521
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 4
jge 0x10012537
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x6a8], 0xc4f3
jmp 0x1001251a
mov dword [ebp - 0x74], 0
jmp 0x10012547
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 3
jge 0x1001255d
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0xac4], 0xb586fa66
jmp 0x10012540
push 5
pop eax
test eax, eax
je 0x100126f3
mov dword [ebp - 0x3a8], 0xfffffffd
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x3a8]
cmp ecx, dword [ebp + eax - 0x6a8]
jg 0x10012593
mov dword [ebp - 0x7b4], 1
jmp 0x1001259a
and dword [ebp - 0x7b4], 0
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x6a8], 1
jle 0x100125b6
mov dword [ebp - 0x688], 1
jmp 0x100125bd
and dword [ebp - 0x688], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
imul eax, dword [ebp - 0x688]
cmp dword [ebp - 0x7bc], eax
jl 0x100125e5
mov dword [ebp - 0x3b0], 1
jmp 0x100125ec
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x6a8]
add ecx, dword [ebp - 0x3b0]
cmp ecx, dword [ebp + eax - 0x6a8]
jne 0x1001261a
mov dword [ebp - 0x7c4], 1
jmp 0x10012621
and dword [ebp - 0x7c4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6a8]
inc eax
imul eax, eax, 0x659e
test eax, eax
jne 0x1001264b
mov eax, 0xd59ff446
test eax, eax
jne 0x1001264b
and dword [ebp - 0x530], 0
jmp 0x10012655
mov dword [ebp - 0x530], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
cmp dword [ebp - 0x530], eax
jle 0x10012676
mov dword [ebp - 0x3b8], 1
jmp 0x1001267d
and dword [ebp - 0x3b8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
cmp dword [ebp - 0x3b8], eax
jg 0x1001269e
mov dword [ebp - 0x5f0], 1
jmp 0x100126a5
and dword [ebp - 0x5f0], 0
mov eax, dword [ebp - 0x5f0]
neg eax
jne 0x100126c8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x6a8], 0
jne 0x100126c8
and dword [ebp - 0x3c0], 0
jmp 0x100126d2
mov dword [ebp - 0x3c0], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6a8]
cmp dword [ebp - 0x3c0], eax
jne 0x100126f3
mov dword [ebp - 0x538], 1
jmp 0x100126fa
and dword [ebp - 0x538], 0
mov eax, dword [ebp - 0x538]
mov dword [ebp - 0x828], eax
jmp 0x10011be6
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x10e]
movzx eax, word [ebp + eax*2 - 0x914]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x10b]
and ecx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x10e]
movzx eax, word [ebp + eax*2 - 0x914]
mov edx, dword [ebp - 0x1c]
movzx edx, byte [ebp + edx - 0x10b]
and edx, eax
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x114]
movzx eax, byte [ebp + eax - 0x10e]
movzx eax, word [ebp + eax*2 - 0x914]
mov esi, dword [ebp - 0x1c]
movzx esi, byte [ebp + esi - 0x10b]
add esi, eax
sub esi, edx
sub esi, ecx
mov eax, dword [ebp - 0x1c]
movzx eax, byte [ebp + eax - 0x10c]
mov word [ebp + eax*2 - 0x914], si
and dword [ebp - 0x114], 0
jmp 0x10011be6
push 2
lea ecx, [ebp - 0x264]
call fcn.10022698
mov dword [ebp - 4], 6
mov dword [ebp - 0x34], 0xfffffffc
push 3
lea ecx, [ebp - 0x844]
call fcn.10022698
mov byte [ebp - 4], 7
mov dword [ebp - 0x3e0], 0xcbbbc25
mov dword [ebp - 0x64], 0
jmp 0x100127e6
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10012802
push dword [ebp - 0x64]
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov dword [eax], 1
jmp 0x100127df
mov dword [ebp - 0x64], 0
jmp 0x10012812
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 3
jge 0x1001282e
push dword [ebp - 0x64]
lea ecx, [ebp - 0x844]
call fcn.1002273f
mov dword [eax], 0x992f1e5c
jmp 0x1001280b
mov dword [ebp - 0x34], 1
jmp 0x1001283e
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jl 0x10012ad0
mov dword [ebp - 0xb0], 0xffff
mov dword [ebp - 0x12c], 0x7e784b52
push dword [ebp - 0x34]
lea ecx, [ebp - 0x264]
call fcn.1002273f
cmp dword [eax], 0
je 0x10012874
jmp 0x10012ad0
mov esi, dword [ebp - 0x34]
push 0
lea ecx, [ebp - 0x264]
call fcn.1002273f
cmp dword [eax], esi
jl 0x100129b6
push dword [ebp - 0x34]
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov esi, eax
push 1
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov eax, dword [eax]
cmp eax, dword [esi]
je 0x100128bb
mov dword [ebp - 0x3c8], 1
jmp 0x100128c2
and dword [ebp - 0x3c8], 0
imul eax, dword [ebp - 0x3c8], 7
mov dword [ebp - 0x650], eax
push 0
lea ecx, [ebp - 0x844]
call fcn.1002273f
mov ecx, dword [ebp - 0x650]
mov dword [eax], ecx
cmp dword [ebp - 0x650], 0xec2184e5
jbe 0x100128fc
mov dword [ebp - 0x3d0], 1
jmp 0x10012903
and dword [ebp - 0x3d0], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov ecx, dword [ebp - 0x3d0]
cmp ecx, dword [eax]
jl 0x10012927
mov dword [ebp - 0x540], 1
jmp 0x1001292e
and dword [ebp - 0x540], 0
push 1
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov esi, dword [ebp - 0x540]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x264]
call fcn.1002273f
imul esi, dword [eax]
cmp esi, 0xf9a4d91f
jne 0x10012967
mov dword [ebp - 0x3d8], 1
jmp 0x1001296e
and dword [ebp - 0x3d8], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov ecx, dword [ebp - 0x3d8]
cmp ecx, dword [eax]
jne 0x10012992
mov dword [ebp - 0x5f8], 1
jmp 0x10012999
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0xb0]
add eax, dword [ebp - 0x5f8]
mov dword [ebp - 0x3e0], eax
jne 0x100129b6
and dword [ebp - 0x548], 0
jmp 0x100129c0
mov dword [ebp - 0x548], 1
mov eax, dword [ebp - 0xb0]
cmp dword [ebp - 0x548], eax
jge 0x100129da
mov dword [ebp - 0x3e8], 1
jmp 0x100129e1
and dword [ebp - 0x3e8], 0
mov eax, dword [ebp - 0xb0]
imul eax, dword [ebp - 0x3e8]
cmp eax, 4
je 0x100129ff
mov dword [ebp - 0x678], 1
jmp 0x10012a06
and dword [ebp - 0x678], 0
push dword [ebp - 0x34]
lea ecx, [ebp - 0x264]
call fcn.1002273f
mov ecx, dword [ebp - 0x678]
cmp ecx, dword [eax]
je 0x10012a2a
mov dword [ebp - 0x824], 1
jmp 0x10012a31
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x34]
neg eax
je 0x10012a56
push 2
lea ecx, [ebp - 0x844]
call fcn.1002273f
cmp dword [eax], 0
je 0x10012a56
mov dword [ebp - 0x3f0], 1
jmp 0x10012a5d
and dword [ebp - 0x3f0], 0
mov eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0xb0], 0
jmp 0x10012a82
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jg 0x10012acb
mov dword [ebp - 0x12c], 1
jmp 0x10012aa4
mov eax, dword [ebp - 0x12c]
dec eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jl 0x10012ac9
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x10012ac7
push 0
call dword [sym.imp.COMDLG32.dll_FindTextW]
jmp 0x10012a97
jmp 0x10012a75
jmp 0x10012837
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x844]
call fcn.1002271a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x264]
call fcn.1002271a
push 2
pop eax
imul eax, eax, 0xc
xor ecx, ecx
mov word [ebp + eax - 0x914], cx
push 2
lea ecx, [ebp - 0x6c4]
call fcn.10022698
mov dword [ebp - 4], 8
mov dword [ebp - 0x24], 0xffffffff
push 1
lea ecx, [ebp - 0x288]
call fcn.10022698
mov byte [ebp - 4], 9
mov dword [ebp - 0x600], 0xa7ef5d87
mov dword [ebp - 0x78], 0
jmp 0x10012b44
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10012b60
push dword [ebp - 0x78]
lea ecx, [ebp - 0x6c4]
call fcn.1002273f
mov dword [eax], 0xfffffff8
jmp 0x10012b3d
mov dword [ebp - 0x78], 0
jmp 0x10012b70
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x10012b89
push dword [ebp - 0x78]
lea ecx, [ebp - 0x288]
call fcn.1002273f
or dword [eax], 0xffffffff
jmp 0x10012b69
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1002273f
and dword [eax], 0
jmp 0x10012bbf
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1002273f
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x550]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1002273f
cmp dword [eax], 0xffffffff
jl 0x10012e1c
mov dword [ebp - 0x8c4], 0xc34eea2a
mov dword [ebp - 0x8c0], 0xc34eea2a
mov dword [ebp - 0x8bc], 0xc34eea2a
mov dword [ebp - 0x8b8], 0xc34eea2a
lea ecx, [ebp - 0x249]
call fcn.100227a1
push eax
lea eax, [ebp - 0x8b4]
push eax
lea eax, [ebp - 0x8c4]
push eax
lea ecx, [ebp - 0xa70]
call fcn.100227a4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x874]
call fcn.100226f4
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x3f8], 0x6a58
mov dword [ebp - 0x7e0], 0x100079e8
cmp dword [ebp - 0x3f8], 0x6deb
jle 0x10012ce3
push 0x765
push 0x2681
call dword [sym.imp.GDI32.dll_SetROP2]
and dword [ebp - 0x1dc], 0
jmp 0x10012c80
mov eax, dword [ebp - 0x1dc]
inc eax
mov dword [ebp - 0x1dc], eax
cmp dword [ebp - 0x1dc], 0x2b85
jge 0x10012ce3
and dword [ebp - 0x18c], 0
jmp 0x10012ca2
mov eax, dword [ebp - 0x18c]
inc eax
mov dword [ebp - 0x18c], eax
cmp dword [ebp - 0x18c], 0x2c7a
jge 0x10012ce1
mov eax, dword [ebp - 0x1dc]
mov ecx, dword [ebp - 0x18c]
sar eax, cl
cdq
mov dword [ebp - 0x764], eax
mov dword [ebp - 0x760], edx
push dword [ebp - 0x760]
push dword [ebp - 0x764]
mov ecx, 0x10618e18
call fcn.1002244f
jmp 0x10012c95
jmp 0x10012c73
mov dword [ebp - 0x21c], 0xffffffff
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x3f8], 0x675c
jge 0x10012d0d
mov edx, dword [ebp - 0x7e0]
mov ecx, 0x10618e18
call fcn.1002579c
jmp 0x10012d29
mov dword [ebp - 4], 0xa
jmp 0x10012d39
mov dword [ebp - 0x724], 0x13e1
mov dword [ebp - 0x6e0], 1
push 3
lea ecx, [ebp - 0x874]
call fcn.1002273f
cmp dword [eax], 0
je 0x10012dd3
mov dword [ebp - 0x24], 0xfffffffb
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x7dc], eax
push 0
lea ecx, [ebp - 0x288]
call fcn.1002273f
mov ecx, dword [ebp - 0x7dc]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x6c4]
call fcn.1002273f
mov eax, dword [eax]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0x920], eax
push 0
lea ecx, [ebp - 0x874]
call fcn.1002273f
mov esi, eax
push 1
lea ecx, [ebp - 0x874]
call fcn.1002273f
mov eax, dword [eax]
cmp eax, dword [esi]
jg 0x10012dd3
mov dword [ebp - 0x400], 1
jmp 0x10012dda
and dword [ebp - 0x400], 0
mov eax, dword [ebp - 0x400]
mov dword [ebp - 0x21c], eax
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x928], eax
mov dword [ebp - 0x724], 0x9dcee34e
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x6e0], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x874]
call fcn.1002271a
jmp 0x10012b9b
mov dword [ebp - 0x24], 0
jmp 0x10012e2c
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x10012f5f
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
cmp dword [eax], 0
jne 0x10012f1b
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
cmp dword [eax], 0xc857
jne 0x10012e6f
mov dword [ebp - 0x558], 1
jmp 0x10012e76
and dword [ebp - 0x558], 0
mov eax, dword [ebp - 0x24]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
push 5
pop esi
sub esi, dword [eax]
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
cmp esi, dword [eax]
jne 0x10012eaa
mov dword [ebp - 0x408], 1
jmp 0x10012eb1
and dword [ebp - 0x408], 0
cmp dword [ebp - 0x408], 0x3e1b
jg 0x10012ec9
mov dword [ebp - 0x658], 1
jmp 0x10012ed0
and dword [ebp - 0x658], 0
push 0
lea ecx, [ebp - 0x288]
call fcn.1002273f
mov ecx, dword [ebp - 0x658]
cmp ecx, dword [eax]
jge 0x10012ef3
mov dword [ebp - 0x410], 1
jmp 0x10012efa
and dword [ebp - 0x410], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
mov ecx, dword [ebp - 0x410]
sub ecx, dword [eax]
jne 0x10012f1b
and dword [ebp - 0x560], 0
jmp 0x10012f25
mov dword [ebp - 0x560], 1
cmp dword [ebp - 0x560], 0x8d5f
jge 0x10012f3d
mov dword [ebp - 0x418], 1
jmp 0x10012f44
and dword [ebp - 0x418], 0
push dword [ebp - 0x24]
lea ecx, [ebp - 0x288]
call fcn.1002273f
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
jmp 0x10012e25
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x288]
call fcn.1002271a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c4]
call fcn.1002271a
lea eax, [ebp - 0x914]
push eax
lea ecx, [ebp - 0xaa0]
call fcn.1002258c
mov dword [ebp - 0x7a8], eax
mov eax, dword [ebp - 0x7a8]
mov dword [ebp - 0x6e8], eax
mov dword [ebp - 4], 0xd
push dword [ebp - 0x6e8]
call fcn.1000b100
pop ecx
mov dword [ebp - 0x394], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaa0]
call fcn.100225b1
mov dword [ebp - 0xec], 0
mov dword [ebp - 0x7e4], 1
mov dword [ebp - 0x1c4], 0
jmp 0x10012ff6
mov eax, dword [ebp - 0x1c4]
inc eax
mov dword [ebp - 0x1c4], eax
cmp dword [ebp - 0x1c4], 3
jge 0x10013012
mov eax, dword [ebp - 0x1c4]
mov dword [ebp + eax*4 - 0x7d4], 1
jmp 0x10012fe9
mov dword [ebp - 0xec], 0
jmp 0x1001302b
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 2
jg 0x100132dd
mov dword [ebp - 0xe4], 0x1265ab3e
mov dword [ebp - 0xe4], 2
jmp 0x1001305b
mov eax, dword [ebp - 0xe4]
dec eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 0
jl 0x100132d8
mov dword [ebp - 0xf0], 1
mov dword [ebp - 0xf0], 0
jmp 0x1001308b
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 2
jg 0x100132c2
mov dword [ebp - 0x6c], 0
jmp 0x100130a8
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x100130be
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x2ac], 6
jmp 0x100130a1
mov dword [ebp - 0x6c], 0
jmp 0x100130ce
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x100130e4
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xd4], 0x1245c810
jmp 0x100130c7
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x2ac], 0
jmp 0x10013112
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x2ac], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ac], 2
jg 0x1001316c
mov dword [ebp - 0x11c], 1
mov dword [ebp - 0x11c], 2
jmp 0x10013145
mov eax, dword [ebp - 0x11c]
dec eax
mov dword [ebp - 0x11c], eax
cmp dword [ebp - 0x11c], 0
jl 0x1001316a
mov eax, dword [ebp - 0xe4]
mov eax, dword [ebp + eax*4 - 0x7d4]
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + ecx*4 - 0x7d4], eax
jmp 0x10013138
jmp 0x100130f7
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xd4], 0
jmp 0x1001319a
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xd4]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xd4], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd4], 2
jg 0x100132bd
mov dword [ebp - 0xb8], 0x3f6085e0
mov dword [ebp - 0xb8], 0
jmp 0x100131d1
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jg 0x1001329e
mov eax, dword [ebp - 0xb8]
mov ecx, 0xffff
sub ecx, dword [ebp + eax*4 - 0x2ac]
cmp ecx, 0xfff7
jae 0x10013204
mov dword [ebp - 0x608], 1
jmp 0x1001320b
and dword [ebp - 0x608], 0
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp + eax*4 - 0x2ac]
add eax, dword [ebp - 0x608]
cmp eax, dword [ebp - 0xec]
je 0x1001323b
cmp dword [ebp - 0x7e4], 0
je 0x1001323b
mov dword [ebp - 0x420], 1
jmp 0x10013242
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x420]
neg eax
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd4]
cmp dword [ebp + ecx*4 - 0x7d4], eax
jl 0x1001326c
mov dword [ebp - 0x6f0], 1
jmp 0x10013273
and dword [ebp - 0x6f0], 0
mov eax, dword [ebp - 0xb8]
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0xf0]
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0xd4]
mov dword [ebp + ecx*4 - 0x7d4], eax
jmp 0x100131c4
mov byte [ebp - 0x9d], 0
movzx eax, byte [ebp - 0x9d]
test eax, eax
je 0x100132b8
push 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1001317f
jmp 0x1001307e
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0x7d4], 0xffffffff
jmp 0x1001304e
jmp 0x1001301e
mov byte [ebp - 0xb9], 0
movzx eax, byte [ebp - 0xb9]
test eax, eax
je 0x10013305
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
and dword [ebp - 0x1ec], 0
jmp 0x1001331b
mov eax, dword [ebp - 0x1ec]
inc eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x1ec], 0xd
jae 0x100135d5
mov dword [ebp - 0x610], 0x4c8d3c89
mov dword [ebp - 0x578], 0
mov dword [ebp - 0x6f8], 0x3203bd65
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x94], 0x4959
mov dword [ebp - 0x194], 0
jmp 0x10013373
mov eax, dword [ebp - 0x194]
inc eax
mov dword [ebp - 0x194], eax
cmp dword [ebp - 0x194], 3
jge 0x1001338f
mov eax, dword [ebp - 0x194]
mov dword [ebp + eax*4 - 0x2b8], 0
jmp 0x10013366
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x938], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x2b8], 0
je 0x100133c2
xor eax, eax
inc eax
je 0x100133c2
mov dword [ebp - 0x7b0], 1
jmp 0x100133c9
and dword [ebp - 0x7b0], 0
cmp dword [ebp - 0x230], 0
je 0x100133de
mov dword [ebp - 0x568], 1
jmp 0x100133e5
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x568]
jg 0x1001340c
mov dword [ebp - 0x428], 1
jmp 0x10013413
and dword [ebp - 0x428], 0
cmp dword [ebp - 0x428], 0xb551
jg 0x1001342b
mov dword [ebp - 0x698], 1
jmp 0x10013432
and dword [ebp - 0x698], 0
mov eax, dword [ebp - 0x698]
mov dword [ebp - 0x230], eax
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x6f8]
jne 0x10013458
mov dword [ebp - 0x430], 1
jmp 0x1001345f
and dword [ebp - 0x430], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x430], eax
jne 0x10013486
cmp dword [ebp - 0x230], 0
jne 0x10013486
and dword [ebp - 0x570], 0
jmp 0x10013490
mov dword [ebp - 0x570], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x570]
sub ecx, dword [ebp + eax - 0x2b8]
cmp ecx, 0xffffffff
jne 0x100134b4
mov dword [ebp - 0x438], 1
jmp 0x100134bb
and dword [ebp - 0x438], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x438], eax
jl 0x100134dc
mov dword [ebp - 0x440], 1
jmp 0x100134e3
and dword [ebp - 0x440], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2b8]
mov dword [ebp - 0x610], eax
mov eax, dword [ebp - 0x610]
mov dword [ebp - 0x578], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x2b8]
add ecx, dword [ebp - 0x440]
mov edx, dword [ebp - 0x578]
imul edx, ecx
cmp edx, dword [ebp + eax - 0x2b8]
jl 0x10013538
mov dword [ebp - 0x448], 1
jmp 0x1001353f
and dword [ebp - 0x448], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2b8]
cmp dword [ebp - 0x448], eax
jle 0x100135a9
mov dword [ebp - 0x94], 0xfffffff6
jmp 0x1001356d
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x36
jne 0x100135a7
mov dword [ebp - 0x7ec], 0x94dfd996
mov byte [ebp - 0x9f], 0
movzx eax, byte [ebp - 0x9f]
test eax, eax
je 0x1001359a
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
cmp dword [ebp - 0x7ec], 0
je 0x100135a5
jmp 0x100135a7
jmp 0x10013560
jmp 0x100135c0
mov dword [ebp - 0x660], 0x549c4b05
mov eax, dword [ebp - 0x660]
dec eax
mov dword [ebp - 0x660], eax
xor eax, eax
mov ecx, dword [ebp - 0x1ec]
mov word [ebp + ecx*2 - 0x914], ax
jmp 0x1001330e
cmp dword [ebp - 0x394], 0
je 0x10014d92
mov dword [ebp - 0x940], 0xfffffffc
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1001361b
push 0
push 0
push 0
push 0xbda
push 0x1439
push 0
push 0xee5
call dword [sym.imp.GDI32.dll_GetTextExtentExPointA]
mov byte [ebp - 0x99], 0
movzx eax, byte [ebp - 0x99]
test eax, eax
je 0x1001363b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov byte [ebp - 0x15c], 0
mov byte [ebp - 0x15b], 0x3f
mov byte [ebp - 0x15a], 1
mov byte [ebp - 0x159], 0xa1
mov byte [ebp - 0x158], 4
mov byte [ebp - 0x157], 0x35
mov byte [ebp - 0x156], 9
mov byte [ebp - 0x155], 0x16
mov byte [ebp - 0x154], 2
mov byte [ebp - 0x153], 0x10
mov byte [ebp - 0x152], 0xd
mov byte [ebp - 0x151], 7
mov byte [ebp - 0x150], 8
mov byte [ebp - 0x14f], 0x17
mov byte [ebp - 0x14e], 0xb
mov byte [ebp - 0x14d], 1
mov byte [ebp - 0x14c], 3
mov byte [ebp - 0x14b], 0x35
mov byte [ebp - 0x14a], 0xc
mov byte [ebp - 0x149], 0x23
mov byte [ebp - 0x148], 0xa
mov byte [ebp - 0x147], 1
mov byte [ebp - 0x146], 1
mov byte [ebp - 0x145], 0x17
mov byte [ebp - 0x144], 7
mov byte [ebp - 0x143], 0x24
mov byte [ebp - 0x142], 6
mov byte [ebp - 0x141], 0x22
mov byte [ebp - 0x140], 5
mov byte [ebp - 0x13f], 0xc
xor eax, eax
inc eax
shl eax, 0
movzx eax, byte [ebp + eax - 0x15c]
and eax, 0x78
xor ecx, ecx
inc ecx
shl ecx, 0
movzx ecx, byte [ebp + ecx - 0x15c]
or ecx, 0x78
sub ecx, eax
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
mov byte [ebp + eax - 0x838], cl
mov dword [ebp - 0x7f4], 0xfffffff6
mov dword [ebp - 0x718], 0xfffffffe
mov dword [ebp - 0x948], 0x2304b25b
mov dword [ebp - 0x950], 0x4d073ff8
mov dword [ebp - 0x958], 0xfffffffa
mov dword [ebp - 0x960], 4
mov dword [ebp - 0x918], 0xffffffff
push 1
lea ecx, [ebp - 0x8dc]
call fcn.10022698
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x580], 0x6c07
mov dword [ebp - 0x700], 0x2192
cmp dword [ebp - 0x700], 0xeed
jge 0x10013976
lea ecx, [ebp - 0x88c]
call fcn.100222f2
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa4c]
call fcn.100222f2
mov byte [ebp - 4], 0x10
xor eax, eax
inc eax
je 0x10013958
lea edx, [ebp - 0x88c]
mov ecx, 0x10618ed0
call fcn.10025a00
mov edx, 0x10007a50
lea ecx, [ebp - 0x88c]
call fcn.10025a25
movzx eax, al
test eax, eax
je 0x10013817
jmp 0x10013958
lea ecx, [ebp - 0x88c]
call fcn.1002237c
mov dword [ebp - 0x7b8], eax
lea ecx, [ebp - 0xa4c]
call fcn.1002234d
and dword [ebp - 0x88], 0
jmp 0x10013849
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x88]
cmp eax, dword [ebp - 0x7b8]
jge 0x10013907
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88c]
call fcn.1002235d
movsx eax, byte [eax]
push eax
call fcn.1005b5ca
pop ecx
test eax, eax
jne 0x10013899
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88c]
call fcn.1002235d
movsx eax, byte [eax]
push eax
call fcn.1005b574
pop ecx
test eax, eax
je 0x10013902
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88c]
call fcn.1002235d
movsx eax, byte [eax]
push eax
call fcn.1005b5ca
pop ecx
test eax, eax
je 0x100138d7
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88c]
call fcn.1002235d
movsx eax, byte [eax]
add eax, 0x20
mov dword [ebp - 0x450], eax
jmp 0x100138f1
push dword [ebp - 0x88]
lea ecx, [ebp - 0x88c]
call fcn.1002235d
movsx eax, byte [eax]
mov dword [ebp - 0x450], eax
push dword [ebp - 0x450]
lea ecx, [ebp - 0xa4c]
call fcn.1002233c
jmp 0x1001383c
lea eax, [ebp - 0xa4c]
push eax
call fcn.1001111d
pop ecx
movzx eax, al
test eax, eax
je 0x10013938
push 0x10025a47
mov edx, 0x10007a5c
mov ecx, 0x10618e18
call fcn.1002579c
mov ecx, eax
call fcn.10022443
jmp 0x10013953
push 0x10025a47
mov edx, 0x10007a60
mov ecx, 0x10618e18
call fcn.1002579c
mov ecx, eax
call fcn.10022443
jmp 0x100137e2
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xa4c]
call fcn.10022332
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x88c]
call fcn.10022332
mov dword [ebp - 0x708], 0x10007a64
cmp dword [ebp - 0x580], 0x6ede
jle 0x10013a03
and dword [ebp - 0x19c], 0
jmp 0x100139a2
mov eax, dword [ebp - 0x19c]
inc eax
mov dword [ebp - 0x19c], eax
cmp dword [ebp - 0x19c], 0x455b
jge 0x10013a03
and dword [ebp - 0x1cc], 0
jmp 0x100139c4
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 0x2c11
jge 0x10013a01
mov eax, dword [ebp - 0x19c]
xor eax, dword [ebp - 0x1cc]
cdq
mov dword [ebp - 0x770], eax
mov dword [ebp - 0x76c], edx
push dword [ebp - 0x76c]
push dword [ebp - 0x770]
mov ecx, 0x10618e18
call fcn.1002244f
jmp 0x100139b7
jmp 0x10013995
mov dword [ebp - 0x80], 0
jmp 0x10013a13
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10013a29
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x970], 0xbd2ab60e
jmp 0x10013a0c
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x580], 0x6b9f
jge 0x10013a49
mov edx, dword [ebp - 0x708]
mov ecx, 0x10618e18
call fcn.1002579c
jmp 0x10013a65
mov dword [ebp - 4], 0xe
jmp 0x10013a75
mov dword [ebp - 0x80], 0
jmp 0x10013a85
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10013aa1
push dword [ebp - 0x80]
lea ecx, [ebp - 0x8dc]
call fcn.1002273f
mov dword [eax], 0xca6c
jmp 0x10013a7e
push 0
lea ecx, [ebp - 0x8dc]
call fcn.1002273f
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x7f4]
mov dword [ebp - 0x710], eax
mov eax, dword [ebp - 0x224]
mov eax, dword [eax]
mov dword [ebp - 0x7c0], eax
mov eax, dword [ebp - 0x224]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x224]
mov dword [ecx], eax
mov eax, dword [ebp - 0x710]
cmp eax, dword [ebp - 0x7c0]
je 0x10013af9
mov dword [ebp - 0x458], 1
jmp 0x10013b00
and dword [ebp - 0x458], 0
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0x718], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8dc]
call fcn.1002271a
mov dword [ebp - 0x2c], 2
and dword [ebp - 0x190], 0
jmp 0x10013b33
mov eax, dword [ebp - 0x2c]
inc eax
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x1e
jae 0x100144f7
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x1a4], 0
jmp 0x10013b60
mov eax, dword [ebp - 0x1a4]
inc eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 3
jge 0x10013b7c
mov eax, dword [ebp - 0x1a4]
mov dword [ebp + eax*4 - 0x9cc], 0
jmp 0x10013b53
mov dword [ebp - 0x90], 0
jmp 0x10013b95
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jg 0x10013c67
mov dword [ebp - 0x468], 8
mov dword [ebp - 0x234], 0x4896e6a3
cmp dword [ebp - 0x468], 0x6b471dfd
jl 0x10013bce
mov dword [ebp - 0x618], 1
jmp 0x10013bd5
and dword [ebp - 0x618], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
cmp dword [ebp - 0x618], eax
je 0x10013bfb
mov dword [ebp - 0x7fc], 1
jmp 0x10013c02
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x9f0], eax
cmp dword [ebp - 0x90], 1
jg 0x10013c23
mov dword [ebp - 0x588], 1
jmp 0x10013c2a
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp + eax*4 - 0x9cc]
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x460]
mov dword [ebp + eax*4 - 0x9cc], ecx
mov eax, dword [ebp - 0x460]
sub eax, dword [ebp - 0x588]
mov dword [ebp - 0x468], eax
jmp 0x10013b88
mov byte [ebp - 0xa3], 0
movzx eax, byte [ebp - 0xa3]
test eax, eax
je 0x10013c85
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
xor eax, eax
inc eax
imul eax, eax, 0
movzx eax, byte [ebp + eax - 0x15c]
lea eax, [eax + eax + 2]
cmp dword [ebp - 0x2c], eax
jne 0x10013f7e
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x15c]
inc eax
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x9f8], 0x5d16df25
mov dword [ebp - 0xa00], 6
mov dword [ebp - 0x168], 0x1891f782
mov dword [ebp - 0x110], 1
mov dword [ebp - 0x8b0], 0x50db8561
mov dword [ebp - 0x8ac], 0x50db8561
mov dword [ebp - 0x8a8], 0x50db8561
mov dword [ebp - 0x8a4], 0x50db8561
lea ecx, [ebp - 0x225]
call fcn.100227a1
push eax
lea eax, [ebp - 0x8a0]
push eax
lea eax, [ebp - 0x8b0]
push eax
lea ecx, [ebp - 0xa68]
call fcn.100227a4
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9dc]
call fcn.100226f4
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x1e4], 0
jmp 0x10013d61
mov eax, dword [ebp - 0x1e4]
inc eax
mov dword [ebp - 0x1e4], eax
cmp dword [ebp - 0x1e4], 3
jge 0x10013d7d
mov eax, dword [ebp - 0x1e4]
mov dword [ebp + eax*4 - 0xad0], 0xa810d21d
jmp 0x10013d54
push 3
lea ecx, [ebp - 0x9dc]
call fcn.1002273f
mov dword [ebp - 0x680], eax
mov eax, dword [ebp - 0x680]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x680]
mov dword [ecx], eax
mov dword [ebp - 0x110], 0x12
jmp 0x10013dba
mov eax, dword [ebp - 0x110]
inc eax
mov dword [ebp - 0x110], eax
cmp dword [ebp - 0x110], 0x1a
jl 0x10013f55
mov dword [ebp - 0x620], 0xfffffffd
mov dword [ebp - 0x1ac], 0
jmp 0x10013dea
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jge 0x10013e06
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0x7c8], 0xaa2d
jmp 0x10013ddd
mov dword [ebp - 0x1d4], 0xffffffec
jmp 0x10013e1f
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 5
jle 0x10013f50
mov dword [ebp - 0x720], 4
cmp dword [ebp - 0x720], 0
je 0x10013e7f
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10013e5d
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x10013e7d
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
jmp 0x10013ee9
mov dword [ebp - 0x478], 1
cmp dword [ebp - 0x110], 0
je 0x10013e9e
mov dword [ebp - 0x470], 1
jmp 0x10013ea5
and dword [ebp - 0x470], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c8]
add eax, dword [ebp - 0x470]
cmp eax, 3
jg 0x10013ec9
mov dword [ebp - 0x590], 1
jmp 0x10013ed0
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x620], eax
mov eax, dword [ebp - 0x478]
dec eax
mov dword [ebp - 0x478], eax
mov dword [ebp - 0x168], 3
jmp 0x10013f02
mov eax, dword [ebp - 0x168]
dec eax
mov dword [ebp - 0x168], eax
cmp dword [ebp - 0x168], 0
jl 0x10013f4b
mov dword [ebp - 0x728], 0x25739271
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x620], eax
mov byte [ebp - 0xa5], 0
movzx eax, byte [ebp - 0xa5]
test eax, eax
je 0x10013f49
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
jmp 0x10013ef5
jmp 0x10013e12
jmp 0x10013dad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9dc]
call fcn.1002271a
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x15c]
mov ecx, dword [ebp - 0x2c]
lea eax, [ecx + eax - 1]
mov dword [ebp - 0x2c], eax
jmp 0x10013b2b
mov dword [ebp - 0x118], 0xda115252
mov dword [ebp - 0x170], 0
jmp 0x10013fa1
mov eax, dword [ebp - 0x170]
inc eax
mov dword [ebp - 0x170], eax
cmp dword [ebp - 0x170], 1
jge 0x10013fbd
mov eax, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x480], 9
jmp 0x10013f94
mov dword [ebp - 0x118], 0
jmp 0x10013fd6
mov eax, dword [ebp - 0x118]
dec eax
mov dword [ebp - 0x118], eax
cmp dword [ebp - 0x118], 0
jl 0x1001402c
mov dword [ebp - 0x178], 0xfffffffc
mov dword [ebp - 0x178], 0
jmp 0x10014002
mov eax, dword [ebp - 0x178]
dec eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0
jl 0x1001402a
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x10014028
push 0x1cd4
call dword [sym.imp.USER32.dll_DrawMenuBar]
jmp 0x10013ff5
jmp 0x10013fc9
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x480]
imul ecx, dword [ebp + eax - 0x480]
mov dword [ebp - 0x118], ecx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x190]
movzx eax, byte [ebp + eax - 0x15e]
movsx eax, byte [ebp + eax - 0x838]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x15b]
and ecx, eax
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x190]
movzx eax, byte [ebp + eax - 0x15e]
movsx eax, byte [ebp + eax - 0x838]
mov edx, dword [ebp - 0x2c]
movzx edx, byte [ebp + edx - 0x15b]
or edx, eax
sub edx, ecx
mov eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x15c]
mov byte [ebp + eax - 0x838], dl
mov dword [ebp - 0x598], 0xd81
mov dword [ebp - 0x730], 0x10007aa8
cmp dword [ebp - 0x598], 0xeaa
jle 0x1001417c
push 0x125f
call dword [sym.imp.USER32.dll_GetSysColorBrush]
and dword [ebp - 0x180], 0
jmp 0x100140f2
mov eax, dword [ebp - 0x180]
inc eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0x116d
jge 0x1001417c
and dword [ebp - 0x188], 0
jmp 0x10014114
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0x196d
jge 0x10014177
mov eax, dword [ebp - 0x180]
or eax, dword [ebp - 0x188]
cdq
mov dword [ebp - 0x77c], eax
mov dword [ebp - 0x778], edx
push dword [ebp - 0x778]
push dword [ebp - 0x77c]
lea ecx, [ebp - 0xab8]
call fcn.1000a633
pop ecx
pop ecx
mov dword [ebp - 0x804], eax
mov ecx, dword [ebp - 0x804]
call fcn.10022371
push eax
call fcn.1005b12f
pop ecx
lea ecx, [ebp - 0xab8]
call fcn.10022332
jmp 0x10014107
jmp 0x100140e5
mov dword [ebp - 0x23c], 0xd65121ac
mov dword [ebp - 4], 0x14
cmp dword [ebp - 0x598], 0xacf
jge 0x100141a5
push dword [ebp - 0x730]
call fcn.1005b12f
pop ecx
jmp 0x100141c1
or dword [ebp - 4], 0xffffffff
jmp 0x100141cb
push 4
lea ecx, [ebp - 0x868]
call fcn.10022698
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x488], 6
mov dword [ebp - 0x238], 0xfffffff9
push 1
lea ecx, [ebp - 0x850]
call fcn.10022698
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x4a8], 5
mov dword [ebp - 0xa08], 1
mov dword [ebp - 0x80c], 0xe4a6
mov dword [ebp - 0x22c], 0xffff
mov dword [ebp - 0x5a8], 0xffff
mov dword [ebp - 0x738], 7
mov dword [ebp - 0x814], 0
mov dword [ebp - 0x4c], 0
jmp 0x1001425a
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x10014276
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x868]
call fcn.1002273f
mov dword [eax], 0x285ce96b
jmp 0x10014253
mov dword [ebp - 0x4c], 0
jmp 0x10014286
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 1
jge 0x1001429f
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x850]
call fcn.1002273f
and dword [eax], 0
jmp 0x1001427f
mov byte [ebp - 0xa7], 0
movzx eax, byte [ebp - 0xa7]
test eax, eax
je 0x100142b7
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
cmp dword [ebp - 0x23c], 0
je 0x100142d5
mov eax, 0xba8dad4f
test eax, eax
je 0x100142d5
mov dword [ebp - 0x7d8], 1
jmp 0x100142dc
and dword [ebp - 0x7d8], 0
mov dword [ebp - 0x488], 0
cmp dword [ebp - 0x488], 0
je 0x10014304
cmp dword [ebp - 0x5a8], 0
je 0x10014304
mov dword [ebp - 0x668], 1
jmp 0x1001430b
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x238]
cmp eax, dword [ebp - 0x668]
jge 0x10014325
mov dword [ebp - 0x490], 1
jmp 0x1001432c
and dword [ebp - 0x490], 0
mov eax, dword [ebp - 0x23c]
cmp dword [ebp - 0x490], eax
je 0x10014346
mov dword [ebp - 0x5a0], 1
jmp 0x1001434d
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x738]
cmp dword [ebp - 0x5a0], eax
jge 0x10014367
mov dword [ebp - 0x498], 1
jmp 0x1001436e
and dword [ebp - 0x498], 0
mov eax, dword [ebp - 0x498]
inc eax
inc eax
cmp eax, dword [ebp - 0x80c]
jne 0x1001438a
mov dword [ebp - 0x740], 1
jmp 0x10014391
and dword [ebp - 0x740], 0
push 0
lea ecx, [ebp - 0x850]
call fcn.1002273f
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0xa10], eax
push 0
lea ecx, [ebp - 0x850]
call fcn.1002273f
mov eax, dword [ebp - 0x22c]
imul eax, dword [ebp - 0x814]
mov dword [ebp - 0x748], eax
mov eax, dword [ebp - 0x22c]
dec eax
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x748], 0
jb 0x100143ec
mov dword [ebp - 0x628], 1
jmp 0x100143f3
and dword [ebp - 0x628], 0
push 2
lea ecx, [ebp - 0x868]
call fcn.1002273f
mov ecx, dword [ebp - 0x628]
cmp ecx, dword [eax]
jl 0x10014416
mov dword [ebp - 0x4a0], 1
jmp 0x1001441d
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x23c]
cmp eax, dword [ebp - 0x4a0]
jge 0x10014437
mov dword [ebp - 0x244], 1
jmp 0x1001443e
and dword [ebp - 0x244], 0
push 3
lea ecx, [ebp - 0x868]
call fcn.1002273f
mov ecx, dword [ebp - 0x244]
mov dword [eax], ecx
mov eax, dword [ebp - 0x244]
sub eax, dword [ebp - 0x238]
add eax, dword [ebp - 0x5a8]
cmp eax, 0x9898
jge 0x10014478
mov dword [ebp - 0x690], 1
jmp 0x1001447f
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x4a8]
add eax, dword [ebp - 0x690]
cmp eax, 0xffff
jb 0x1001449e
mov dword [ebp - 0x4b0], 1
jmp 0x100144a5
and dword [ebp - 0x4b0], 0
cmp dword [ebp - 0x4b0], 1
jl 0x100144ba
mov dword [ebp - 0x5b0], 1
jmp 0x100144c1
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x238], eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x850]
call fcn.1002271a
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x868]
call fcn.1002271a
and dword [ebp - 0x190], 0
jmp 0x10013b2b
xor eax, eax
inc eax
imul eax, eax, 0xe
mov byte [ebp + eax - 0x838], 0
mov dword [ebp - 0x98], 0x24a8c6a5
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x258], 3
mov dword [ebp - 0x750], 0x3aa9
mov dword [ebp - 0x98], 0xffffffe3
jmp 0x10014543
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0x1a
jne 0x10014800
mov dword [ebp - 0x18], 0x1891f782
mov dword [ebp - 0x198], 0
jmp 0x10014570
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x1001458c
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x120], 0x9f42
jmp 0x10014563
mov dword [ebp - 0x18], 0
jmp 0x1001459c
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jl 0x10014674
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ebp + ecx*4 - 0x120]
sub ecx, 0x4057
cmp ecx, dword [ebp + eax*4 - 0x120]
jne 0x100145ce
mov dword [ebp - 0x4b8], 1
jmp 0x100145d5
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0xa18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x120]
mov dword [ebp - 0xa20], eax
cmp dword [ebp - 0x98], 0xda7b
jge 0x10014612
cmp dword [ebp - 0x18], 0
jne 0x10014612
and dword [ebp - 0x630], 0
jmp 0x1001461c
mov dword [ebp - 0x630], 1
cmp dword [ebp - 0x630], 0
jg 0x10014631
mov dword [ebp - 0x4c0], 1
jmp 0x10014638
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x120]
cmp dword [ebp - 0x4c0], eax
jne 0x1001465c
cmp dword [ebp - 0x18], 0
je 0x1001465c
mov dword [ebp - 0x5b8], 1
jmp 0x10014663
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x5b8]
mov dword [ebp - 0x258], eax
jmp 0x10014595
cmp dword [ebp - 0x258], 0
jne 0x100147e8
cmp dword [ebp - 0x20], 0
je 0x100147c9
cmp dword [ebp - 0x20], 0xffff
jne 0x100146a0
mov dword [ebp - 0x2cc], 1
jmp 0x100146a7
and dword [ebp - 0x2cc], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2cc], eax
jge 0x100146be
mov dword [ebp - 0x808], 1
jmp 0x100146c5
and dword [ebp - 0x808], 0
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0xa28], eax
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x18]
je 0x100146e8
mov dword [ebp - 0x670], 1
jmp 0x100146ef
and dword [ebp - 0x670], 0
cmp dword [ebp - 0x670], 1
jge 0x10014704
mov dword [ebp - 0x4d0], 1
jmp 0x1001470b
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x750]
cmp dword [ebp - 0x4d0], eax
jg 0x10014725
mov dword [ebp - 0x5c0], 1
jmp 0x1001472c
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x5c0]
jle 0x10014746
mov dword [ebp - 0x7e8], 1
jmp 0x1001474d
and dword [ebp - 0x7e8], 0
cmp dword [ebp - 0x20], 0
je 0x1001475f
mov dword [ebp - 0x4d8], 1
jmp 0x10014766
and dword [ebp - 0x4d8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x120]
cmp dword [ebp - 0x4d8], eax
jne 0x10014787
mov dword [ebp - 0x638], 1
jmp 0x1001478e
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x638]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x18]
jne 0x100147ab
mov dword [ebp - 0x75c], 1
jmp 0x100147b2
and dword [ebp - 0x75c], 0
xor eax, eax
inc eax
je 0x100147c9
cmp dword [ebp - 0x18], 0
je 0x100147c9
mov dword [ebp - 0x4e0], 1
jmp 0x100147d0
and dword [ebp - 0x4e0], 0
cmp dword [ebp - 0x4e0], 0
jle 0x100147df
cmp dword [ebp - 0x18], 0
jne 0x100147e8
and dword [ebp - 0x5c8], 0
jmp 0x100147f2
mov dword [ebp - 0x5c8], 1
mov eax, dword [ebp - 0x5c8]
mov dword [ebp - 0x18], eax
jmp 0x10014536
mov dword [ebp - 0x20], 0xffffffe9
jmp 0x10014810
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0x1b
jl 0x1001491e
mov dword [ebp - 0xdc], 0x9025b0d6
mov dword [ebp - 0x768], 1
cmp dword [ebp - 0xdc], 0x830a
je 0x10014846
mov dword [ebp - 0x644], 1
jmp 0x1001484d
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0x20]
jge 0x10014864
mov dword [ebp - 0x81c], 1
jmp 0x1001486b
and dword [ebp - 0x81c], 0
cmp dword [ebp - 0x98], 0
je 0x10014886
cmp dword [ebp - 0x20], 0
je 0x10014886
mov dword [ebp - 0x4e8], 1
jmp 0x1001488d
and dword [ebp - 0x4e8], 0
cmp dword [ebp - 0x4e8], 0x764fe605
jle 0x100148a5
mov dword [ebp - 0x4f0], 1
jmp 0x100148ac
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0x644]
cmp eax, dword [ebp - 0x4f0]
jl 0x100148c6
mov dword [ebp - 0x5d0], 1
jmp 0x100148cd
and dword [ebp - 0x5d0], 0
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x768], eax
mov dword [ebp - 0xdc], 0xfffffff6
jmp 0x100148f2
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x13
je 0x10014919
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x10014917
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
jmp 0x100148e5
jmp 0x10014809
lea eax, [ebp - 0x838]
push eax
lea ecx, [ebp - 0xa88]
call fcn.100225f8
mov dword [ebp - 4], 0x18
and dword [ebp - 0x1a0], 0
jmp 0x1001494d
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xf
jae 0x10014d65
push 1
lea ecx, [ebp - 0x13c]
call fcn.10022698
mov byte [ebp - 4], 0x19
mov dword [ebp - 0xd0], 0xcb4c23af
mov dword [ebp - 0x58], 0xcda2ae7b
mov dword [ebp - 0x810], 0xffffffff
mov dword [ebp - 0x50], 0
jmp 0x10014996
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x100149ac
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x6d0], 0xec2e0cf5
jmp 0x1001498f
mov dword [ebp - 0x50], 0
jmp 0x100149bc
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x100149d8
push dword [ebp - 0x50]
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov dword [eax], 0x730f94f3
jmp 0x100149b5
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
and dword [eax], 0
jmp 0x10014a0e
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x4f8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4f8]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
cmp dword [eax], 2
jg 0x10014c78
mov dword [ebp - 0x7f0], 0x2b82
mov dword [ebp - 0xd0], 1
cmp dword [ebp - 0xd0], 0
je 0x10014bcf
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7f0]
cmp ecx, dword [ebp + eax*4 - 0x6d0]
jne 0x10014a6f
mov dword [ebp - 0x640], 1
jmp 0x10014a76
and dword [ebp - 0x640], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x6d0]
cmp dword [ebp - 0x640], eax
jle 0x10014aa0
mov dword [ebp - 0x500], 1
jmp 0x10014aa7
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0x500], eax
jle 0x10014ac1
mov dword [ebp - 0x5d8], 1
jmp 0x10014ac8
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0x79cc099a
jl 0x10014ae0
mov dword [ebp - 0x508], 1
jmp 0x10014ae7
and dword [ebp - 0x508], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x6d0]
add eax, dword [ebp - 0x508]
cmp eax, 2
jne 0x10014b14
mov dword [ebp - 0x774], 1
jmp 0x10014b1b
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xa30], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0xa24], eax
cmp dword [ebp - 0x58], 0xfffffffc
jle 0x10014b3f
mov dword [ebp - 0x64c], 1
jmp 0x10014b46
and dword [ebp - 0x64c], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x6d0]
cmp eax, dword [ebp - 0x64c]
jle 0x10014b70
mov dword [ebp - 0x510], 1
jmp 0x10014b77
and dword [ebp - 0x510], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x6d0]
cmp dword [ebp - 0x510], eax
je 0x10014bb7
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
cmp dword [ebp + eax*4 - 0x6d0], 0
jne 0x10014bb7
and dword [ebp - 0x5e0], 0
jmp 0x10014bc1
mov dword [ebp - 0x5e0], 1
mov eax, dword [ebp - 0x5e0]
mov dword [ebp - 0xd0], eax
jmp 0x10014c4d
mov dword [ebp - 0x58], 2
jmp 0x10014bdf
mov eax, dword [ebp - 0x58]
dec eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0
jl 0x10014c4d
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
cmp dword [eax], 0
je 0x10014c17
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x10014c15
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_UnionRect]
jmp 0x10014c4b
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10014c31
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x10014c4b
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
jmp 0x10014bd8
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x10014c73
push 0
push 0x1470
push 0
push 0x14e0
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
jmp 0x100149ea
mov esi, dword [ebp - 0x58]
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
add esi, dword [eax]
jne 0x10014c9e
cmp dword [ebp - 0xd0], 0
jne 0x10014c9e
and dword [ebp - 0x518], 0
jmp 0x10014ca8
mov dword [ebp - 0x518], 1
mov eax, dword [ebp - 0x810]
cmp dword [ebp - 0x518], eax
jle 0x10014cc2
mov dword [ebp - 0x654], 1
jmp 0x10014cc9
and dword [ebp - 0x654], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov esi, eax
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov eax, dword [eax]
sub eax, dword [esi]
cmp dword [ebp - 0x654], eax
jge 0x10014cfd
mov dword [ebp - 0x240], 1
jmp 0x10014d04
and dword [ebp - 0x240], 0
push 0
lea ecx, [ebp - 0x13c]
call fcn.1002273f
mov ecx, dword [ebp - 0x240]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
cmp dword [ebp - 0x240], eax
jg 0x10014d30
mov dword [ebp - 0x38c], 1
jmp 0x10014d37
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0xd0], eax
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x13c]
call fcn.1002271a
mov eax, dword [ebp - 0x1a0]
mov byte [ebp + eax - 0x838], 0
jmp 0x10014940
push 1
push 0
lea eax, [ebp - 0xa88]
push eax
push dword [ebp - 0x394]
call fcn.100163fa
add esp, 0x10
mov dword [0x10c36024], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa88]
call fcn.1002261b
mov dword [ebp - 0x28], 0x457102d1
mov dword [ebp - 0x800], 0xfff7
mov dword [ebp - 0x60], 0
jmp 0x10014db3
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 3
jge 0x10014dc9
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x200], 0
jmp 0x10014dac
mov dword [ebp - 0x60], 0
jmp 0x10014dd9
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x10014def
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x2c8], 0xa9b65cab
jmp 0x10014dd2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x200]
mov dword [ebp - 0x28], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x200], 1
jne 0x10014e19
mov dword [ebp - 0x3cc], 1
jmp 0x10014e20
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x200], 0x2e4145c1
jg 0x10014e3f
mov dword [ebp - 0x39c], 1
jmp 0x10014e46
and dword [ebp - 0x39c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x200]
cmp dword [ebp - 0x39c], eax
jl 0x10014e66
mov dword [ebp - 0x3a4], 1
jmp 0x10014e6d
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x28], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp + eax - 0x200]
jne 0x10014e93
mov dword [ebp - 0x3ac], 1
jmp 0x10014e9a
and dword [ebp - 0x3ac], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x200]
cmp dword [ebp - 0x3ac], eax
je 0x10014eba
mov dword [ebp - 0x3b4], 1
jmp 0x10014ec1
and dword [ebp - 0x3b4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3b4]
sub ecx, dword [ebp + eax - 0x200]
jne 0x10014eed
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x200], 0
jne 0x10014eed
and dword [ebp - 0x3bc], 0
jmp 0x10014ef7
mov dword [ebp - 0x3bc], 1
cmp dword [ebp - 0x3bc], 0xf257
jg 0x10014f0f
mov dword [ebp - 0x3c4], 1
jmp 0x10014f16
and dword [ebp - 0x3c4], 0
imul eax, dword [ebp - 0x3c4], 6
cmp dword [ebp - 0x3cc], eax
jl 0x100154df
mov dword [ebp - 0x40], 0xbc8f
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x84], 0x8a59c2d1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp eax, dword [ebp - 0x40]
jge 0x10014f62
mov dword [ebp - 0x3d4], 1
jmp 0x10014f69
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
je 0x10014f93
mov eax, 0xfffbd094
test eax, eax
je 0x10014f93
mov dword [ebp - 0x3e4], 1
jmp 0x10014f9a
and dword [ebp - 0x3e4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp + eax - 0x200]
jge 0x10014fb8
mov dword [ebp - 0x3dc], 1
jmp 0x10014fbf
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x40]
imul eax, dword [ebp - 0x3dc]
neg eax
cmp eax, 1
je 0x10014fdc
mov dword [ebp - 0x3ec], 1
jmp 0x10014fe3
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3e4]
cmp eax, dword [ebp - 0x3ec]
jle 0x10014ffd
mov dword [ebp - 0x3f4], 1
jmp 0x10015004
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x3f4], eax
je 0x1001501b
mov dword [ebp - 0x780], 1
jmp 0x10015022
and dword [ebp - 0x780], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x2c8]
mov dword [ebp - 0x99c], eax
or eax, 0xffffffff
jne 0x10015052
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x200], 0
jne 0x10015052
and dword [ebp - 0x3fc], 0
jmp 0x1001505c
mov dword [ebp - 0x3fc], 1
cmp dword [ebp - 0x3fc], 8
jl 0x10015071
mov dword [ebp - 0x404], 1
jmp 0x10015078
and dword [ebp - 0x404], 0
cmp dword [ebp - 0x404], 0xc5eb
je 0x10015096
cmp dword [ebp - 0x40], 0
je 0x10015096
mov dword [ebp - 0x40c], 1
jmp 0x1001509d
and dword [ebp - 0x40c], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40c], eax
jl 0x100150b4
mov dword [ebp - 0x414], 1
jmp 0x100150bb
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x84], eax
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x40]
imul edx, edx, 0x46ac
sub edx, dword [ebp + ecx - 0x2c8]
cmp edx, dword [ebp + eax - 0x2c8]
jne 0x100150fe
mov dword [ebp - 0x41c], 1
jmp 0x10015105
and dword [ebp - 0x41c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x41c]
mov dword [ebp + eax - 0x2c8], ecx
mov dword [ebp - 0x84], 0xfffffffd
jmp 0x10015131
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0xffffffe7
jge 0x100154da
mov dword [ebp - 0xd8], 0x5a1b
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x248], 0xfffffffa
mov dword [ebp - 0x1a8], 0
jmp 0x10015175
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 2
jge 0x10015191
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0x9ac], 7
jmp 0x10015168
cmp dword [ebp - 0xd8], 0
je 0x10015333
mov eax, dword [ebp - 0xd8]
neg eax
cmp eax, dword [ebp - 0xd8]
jg 0x100151ba
mov dword [ebp - 0x7f8], 1
jmp 0x100151c1
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xa2c], eax
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0xd8]
jg 0x100151e7
mov dword [ebp - 0x424], 1
jmp 0x100151ee
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x424], eax
jg 0x10015205
mov dword [ebp - 0x42c], 1
jmp 0x1001520c
and dword [ebp - 0x42c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x42c], eax
jne 0x1001522d
mov dword [ebp - 0x434], 1
jmp 0x10015234
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 1
jbe 0x10015249
mov dword [ebp - 0x43c], 1
jmp 0x10015250
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x84]
imul eax, dword [ebp - 0x43c]
cmp dword [ebp - 0x160], eax
je 0x10015271
mov dword [ebp - 0x444], 1
jmp 0x10015278
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
add eax, 0xfff7
mov dword [ebp - 0x248], eax
jne 0x10015299
or eax, 0xffffffff
jne 0x10015299
and dword [ebp - 0x44c], 0
jmp 0x100152a3
mov dword [ebp - 0x44c], 1
cmp dword [ebp - 0x44c], 0xfffffffa
jg 0x100152b8
mov dword [ebp - 0x788], 1
jmp 0x100152bf
and dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x924], eax
mov eax, 0x4231368d
test eax, eax
je 0x100152e4
xor eax, eax
je 0x100152e4
mov dword [ebp - 0x454], 1
jmp 0x100152eb
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
sub eax, 0x1b24
cmp eax, 0x3fa0
jl 0x10015309
mov dword [ebp - 0x45c], 1
jmp 0x10015310
and dword [ebp - 0x45c], 0
mov eax, dword [ebp - 0x45c]
mov dword [ebp - 0x128], eax
mov eax, dword [ebp - 0x128]
cmp eax, dword [ebp - 0x40]
jl 0x10015333
mov dword [ebp - 0x464], 1
jmp 0x1001533a
and dword [ebp - 0x464], 0
cmp dword [ebp - 0x464], 2
jge 0x1001534f
mov dword [ebp - 0x46c], 1
jmp 0x10015356
and dword [ebp - 0x46c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x46c], eax
jge 0x10015377
mov dword [ebp - 0x26c], 1
jmp 0x1001537e
and dword [ebp - 0x26c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x26c]
mov dword [ebp + eax - 0x9ac], ecx
mov eax, dword [ebp - 0x26c]
add eax, 0x679c
cmp dword [ebp - 0x40], eax
jge 0x100153ad
mov dword [ebp - 0x474], 1
jmp 0x100153b4
and dword [ebp - 0x474], 0
cmp dword [ebp - 0x474], 0x3a2bbebc
jg 0x100153c7
cmp dword [ebp - 0x248], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp eax, dword [ebp - 0xd8]
jle 0x100153e8
mov dword [ebp - 0x820], 1
jmp 0x100153ef
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x9d0], eax
mov eax, 0x3fec
cmp eax, 0x6155
jne 0x10015413
mov dword [ebp - 0x790], 1
jmp 0x1001541a
and dword [ebp - 0x790], 0
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x40]
cmp eax, 0xfffc
jbe 0x10015433
mov dword [ebp - 0x47c], 1
jmp 0x1001543a
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x160]
cmp dword [ebp - 0x47c], eax
jle 0x10015454
mov dword [ebp - 0x208], 1
jmp 0x1001545b
and dword [ebp - 0x208], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x208]
mov dword [ebp + eax - 0x2c8], ecx
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x208], eax
jge 0x10015485
mov dword [ebp - 0x484], 1
jmp 0x1001548c
and dword [ebp - 0x484], 0
cmp dword [ebp - 0x484], 0xffffffff
jl 0x100154a1
mov dword [ebp - 0x48c], 1
jmp 0x100154a8
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x48c]
cmp eax, dword [ebp - 0x84]
jne 0x100154c5
mov dword [ebp - 0x494], 1
jmp 0x100154cc
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0x28], eax
jmp 0x10015124
jmp 0x1001577e
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0x1b0], 0
jmp 0x10015502
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 4
jge 0x1001551e
mov eax, dword [ebp - 0x1b0]
mov dword [ebp + eax*4 - 0x8f8], 0x264d6f6c
jmp 0x100154f5
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xc0]
jl 0x10015657
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0xc0]
je 0x1001554a
mov dword [ebp - 0x49c], 1
jmp 0x10015551
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0xc0]
add eax, dword [ebp - 0x49c]
jne 0x10015571
mov eax, 0x924d9c5e
test eax, eax
jne 0x10015571
and dword [ebp - 0x4a4], 0
jmp 0x1001557b
mov dword [ebp - 0x4a4], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x200]
cmp dword [ebp - 0x4a4], eax
jne 0x1001559c
mov dword [ebp - 0x4ac], 1
jmp 0x100155a3
and dword [ebp - 0x4ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x4ac], eax
jle 0x100155c4
mov dword [ebp - 0x4b4], 1
jmp 0x100155cb
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x4b4], eax
je 0x100155e5
mov dword [ebp - 0x4bc], 1
jmp 0x100155ec
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0xc0]
cmp dword [ebp - 0x4bc], eax
jg 0x10015606
mov dword [ebp - 0x4c4], 1
jmp 0x1001560d
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0xc0], eax
push 4
pop eax
shl eax, 1
imul ecx, dword [ebp - 0xc0], 0
imul ecx, dword [ebp + eax - 0x200]
cmp ecx, 0x9973
je 0x10015642
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x200], 0
mov eax, 0x2ea524b1
test eax, eax
je 0x10015657
mov dword [ebp - 0x4cc], 1
jmp 0x1001565e
and dword [ebp - 0x4cc], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2c8]
cmp dword [ebp - 0x4cc], eax
jne 0x1001567f
mov dword [ebp - 0x4d4], 1
jmp 0x10015686
and dword [ebp - 0x4d4], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x4d4]
sub ecx, dword [ebp + eax - 0x8f8]
je 0x100156ad
cmp dword [ebp - 0x28], 0
je 0x100156ad
mov dword [ebp - 0x4dc], 1
jmp 0x100156b4
and dword [ebp - 0x4dc], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x8f8]
cmp dword [ebp - 0x4dc], eax
jl 0x100156d5
mov dword [ebp - 0x4e4], 1
jmp 0x100156dc
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0xfffffff8
je 0x100156f1
mov dword [ebp - 0x4ec], 1
jmp 0x100156f8
and dword [ebp - 0x4ec], 0
push 4
pop eax
imul eax, eax, 3
push 4
pop ecx
shl ecx, 1
mov ecx, dword [ebp + ecx - 0x200]
mov edx, dword [ebp - 0x4ec]
lea ecx, [edx + ecx - 0xf588]
cmp ecx, dword [ebp + eax - 0x8f8]
jge 0x1001572c
mov dword [ebp - 0x4f4], 1
jmp 0x10015733
and dword [ebp - 0x4f4], 0
imul eax, dword [ebp - 0x4f4], 0x9909
test eax, eax
jne 0x1001574f
push 4
pop eax
imul eax, eax, 3
cmp dword [ebp + eax - 0x8f8], 0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2c8], 0
jbe 0x1001576b
mov dword [ebp - 0x4fc], 1
jmp 0x10015772
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x800], eax
cmp dword [0x10c36024], 0
je 0x100161c0
mov dword [ebp - 0x3c], 0xd035
mov dword [ebp - 0x70], 1
mov dword [ebp - 0xe0], 0x59ea4d59
mov dword [ebp - 0x210], 0xffff
push 3
lea ecx, [ebp - 0x85c]
call fcn.10022698
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x68], 0
jmp 0x100157d1
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x100157ea
push dword [ebp - 0x68]
lea ecx, [ebp - 0x85c]
call fcn.1002273f
and dword [eax], 0
jmp 0x100157ca
mov dword [ebp - 0x68], 0
jmp 0x100157fa
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10015810
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x6b8], 0x33ac
jmp 0x100157f3
cmp dword [ebp - 0x3c], 0xb57a
jne 0x10015825
mov dword [ebp - 0x504], 1
jmp 0x1001582c
and dword [ebp - 0x504], 0
imul eax, dword [ebp - 0x504], 0xf3b8
cmp eax, dword [ebp - 0x3c]
jne 0x10015847
mov dword [ebp - 0x50c], 1
jmp 0x1001584e
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x50c], eax
je 0x1001586b
cmp dword [ebp - 0x3c], 0
je 0x1001586b
mov dword [ebp - 0x514], 1
jmp 0x10015872
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x514], eax
jge 0x1001588c
mov dword [ebp - 0x51c], 1
jmp 0x10015893
and dword [ebp - 0x51c], 0
mov eax, dword [ebp - 0x51c]
add eax, 0x446cd5fe
cmp eax, dword [ebp - 0x210]
jne 0x100158b2
mov dword [ebp - 0x524], 1
jmp 0x100158b9
and dword [ebp - 0x524], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x524]
sub eax, 0x51d77f17
cmp dword [ebp - 0x70], eax
je 0x100158db
mov dword [ebp - 0x52c], 1
jmp 0x100158e2
and dword [ebp - 0x52c], 0
imul eax, dword [ebp - 0x52c], 5
imul eax, dword [ebp - 0x210]
mov dword [ebp - 0x534], eax
push 0
lea ecx, [ebp - 0x85c]
call fcn.1002273f
mov ecx, dword [ebp - 0x534]
mov dword [eax], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x6b8]
cmp dword [ebp - 0x534], eax
jle 0x1001592c
mov dword [ebp - 0x798], 1
jmp 0x10015933
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x92c], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0xa0c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x70]
cmp ecx, dword [ebp + eax - 0x6b8]
jne 0x10015963
mov dword [ebp - 0x818], 1
jmp 0x1001596a
and dword [ebp - 0x818], 0
push 0xfffffffffffffff8
pop eax
cmp eax, 0xf0bd
je 0x10015980
mov dword [ebp - 0x53c], 1
jmp 0x10015987
and dword [ebp - 0x53c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x6b8]
cmp dword [ebp - 0x53c], eax
jl 0x100159ea
mov dword [ebp - 0x3c], 0
jmp 0x100159ac
mov eax, dword [ebp - 0x3c]
dec eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xffffffe7
jle 0x100159e5
mov dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0
je 0x100159c7
jmp 0x100159e5
mov byte [ebp - 0xb1], 0
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x100159e3
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
jmp 0x100159a5
jmp 0x10015bb4
mov dword [ebp - 0x6d8], 0x219ff40b
mov dword [ebp - 0x70], 0
jmp 0x10015a04
mov eax, dword [ebp - 0x70]
dec eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0xffffffe5
jg 0x10015b9a
mov dword [ebp - 0x2e4], 3
mov dword [ebp - 0xe0], 0xfffffff3
jmp 0x10015a31
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1a
jg 0x10015b87
mov dword [ebp - 0x1b8], 0xcdac3690
mov dword [ebp - 0x6dc], 0xffffffff
cmp dword [ebp - 0x210], 0
jne 0x10015a67
mov dword [ebp - 0x2d4], 1
jmp 0x10015a6e
and dword [ebp - 0x2d4], 0
push 0
lea ecx, [ebp - 0x85c]
call fcn.1002273f
cmp dword [eax], 0
je 0x10015aa2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x6b8], 0
je 0x10015aa2
cmp dword [ebp - 0x3c], 0
je 0x10015aa2
mov dword [ebp - 0x544], 1
jmp 0x10015aa9
and dword [ebp - 0x544], 0
cmp dword [ebp - 0x544], 5
jne 0x10015abe
mov dword [ebp - 0x54c], 1
jmp 0x10015ac5
and dword [ebp - 0x54c], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x54c], eax
jg 0x10015ae5
cmp dword [ebp - 0x6d8], 0
jne 0x10015ae5
and dword [ebp - 0x554], 0
jmp 0x10015aef
mov dword [ebp - 0x554], 1
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x554], eax
jle 0x10015b09
mov dword [ebp - 0x55c], 1
jmp 0x10015b10
and dword [ebp - 0x55c], 0
mov eax, dword [ebp - 0x1b8]
cmp dword [ebp - 0x55c], eax
je 0x10015b2a
mov dword [ebp - 0x2d0], 1
jmp 0x10015b31
and dword [ebp - 0x2d0], 0
push 4
pop eax
sub eax, dword [ebp - 0x2d0]
cmp dword [ebp - 0x2d4], eax
jle 0x10015b57
mov eax, 0xede5
test eax, eax
je 0x10015b57
mov dword [ebp - 0x2dc], 1
jmp 0x10015b5e
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x1b8]
sub eax, dword [ebp - 0x2dc]
jne 0x10015b70
cmp dword [ebp - 0x70], 0
mov eax, dword [ebp - 0x1b8]
add eax, dword [ebp - 0x2e4]
mov dword [ebp - 0x6dc], eax
jmp 0x10015a24
cmp dword [ebp - 0x2e4], 0
je 0x10015b95
jmp 0x100159fd
jmp 0x100159fd
mov byte [ebp - 0x9a], 0
movzx eax, byte [ebp - 0x9a]
test eax, eax
je 0x10015bb4
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x85c]
call fcn.1002271a
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6e4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x6fc], eax
mov dword [ebp - 0x130], 5
mov dword [ebp - 0x130], 1
jmp 0x10015bf8
mov eax, dword [ebp - 0x130]
dec eax
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0xfffffff3
jg 0x10015cdc
mov dword [ebp - 0x1c0], 0x6d444182
mov dword [ebp - 0x1c0], 0xfffffff7
jmp 0x10015c28
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 0x1d
jg 0x10015cd7
mov dword [ebp - 0x1c8], 5
mov dword [ebp - 0x1c8], 0
jmp 0x10015c58
mov eax, dword [ebp - 0x1c8]
dec eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 0xffffffed
jne 0x10015cb4
mov dword [ebp - 0x1d0], 7
mov byte [ebp - 0x9c], 0
movzx eax, byte [ebp - 0x9c]
test eax, eax
je 0x10015c83
call dword [sym.imp.KERNEL32.dll_GetCommandLineA]
mov dword [ebp - 0x1d0], 0
jmp 0x10015c9c
mov eax, dword [ebp - 0x1d0]
dec eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 0xfffffffd
jne 0x10015cb2
cmp dword [ebp - 0x130], 0
je 0x10015cb0
jmp 0x10015cb2
jmp 0x10015c8f
jmp 0x10015c4b
mov byte [ebp - 0x9e], 0
movzx eax, byte [ebp - 0x9e]
test eax, eax
je 0x10015cd2
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_CopySid]
jmp 0x10015c1b
jmp 0x10015beb
mov eax, dword [ebp - 0x6e4]
mov dword [ebp - 0x714], eax
push 2
lea ecx, [ebp - 0x294]
call fcn.10022698
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x89c], 1
mov dword [ebp - 0x898], 1
mov dword [ebp - 0x894], 1
mov dword [ebp - 0x890], 1
mov dword [ebp - 0x6ec], 0x9bad2ce6
mov dword [ebp - 0x6f4], 1
mov dword [ebp - 0x1d8], 0
jmp 0x10015d58
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10015d7a
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0x294]
call fcn.1002273f
mov dword [eax], 0x9f9b
jmp 0x10015d4b
mov dword [ebp - 0x38], 0
jmp 0x10015d8a
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jg 0x10016045
mov dword [ebp - 0xe8], 0x8470ed99
mov dword [ebp - 0x334], 0x87662b0a
mov dword [ebp - 0x33c], 0x74d4a788
push dword [ebp - 0x38]
lea ecx, [ebp - 0x294]
call fcn.1002273f
cmp dword [eax], 0
jne 0x10015f71
push 1
lea ecx, [ebp - 0x294]
call fcn.1002273f
cmp dword [ebp - 0xe8], 0
je 0x10015e02
push 0
lea ecx, [ebp - 0x294]
call fcn.1002273f
imul eax, dword [eax], 0x209f0
test eax, eax
je 0x10015e02
mov dword [ebp - 0x2ec], 1
jmp 0x10015e09
and dword [ebp - 0x2ec], 0
cmp dword [ebp - 0x2ec], 0x4bdb
jg 0x10015e21
mov dword [ebp - 0x2f4], 1
jmp 0x10015e28
and dword [ebp - 0x2f4], 0
cmp dword [ebp - 0x2f4], 0x9eb11de2
ja 0x10015e40
mov dword [ebp - 0x2fc], 1
jmp 0x10015e47
and dword [ebp - 0x2fc], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.1002273f
mov ecx, dword [ebp - 0x2fc]
cmp ecx, dword [eax]
je 0x10015e6a
mov dword [ebp - 0x304], 1
jmp 0x10015e71
and dword [ebp - 0x304], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x294]
call fcn.1002273f
mov ecx, dword [ebp - 0x304]
cmp ecx, dword [eax]
jg 0x10015e95
mov dword [ebp - 0x30c], 1
jmp 0x10015e9c
and dword [ebp - 0x30c], 0
push 0
lea ecx, [ebp - 0x294]
call fcn.1002273f
mov ecx, dword [ebp - 0x30c]
cmp ecx, dword [eax]
jge 0x10015ebf
mov dword [ebp - 0x218], 1
jmp 0x10015ec6
and dword [ebp - 0x218], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x89c], ecx
cmp dword [ebp - 0x218], 0
jne 0x10015ef4
cmp dword [ebp - 0xe8], 0
jne 0x10015ef4
and dword [ebp - 0x314], 0
jmp 0x10015efe
mov dword [ebp - 0x314], 1
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x314], eax
jge 0x10015f18
mov dword [ebp - 0x31c], 1
jmp 0x10015f1f
and dword [ebp - 0x31c], 0
mov esi, dword [ebp - 0x31c]
sub esi, dword [ebp - 0x38]
push dword [ebp - 0x38]
lea ecx, [ebp - 0x294]
call fcn.1002273f
cmp esi, dword [eax]
jg 0x10015f53
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x89c], 0
jne 0x10015f53
and dword [ebp - 0x324], 0
jmp 0x10015f5d
mov dword [ebp - 0x324], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x324], eax
jg 0x10015f71
and dword [ebp - 0x32c], 0
jmp 0x10015f7b
mov dword [ebp - 0x32c], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x32c], eax
jg 0x10015f8d
cmp dword [ebp - 0xe8], 0
mov dword [ebp - 0x334], 3
mov eax, dword [ebp - 0x334]
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 0
jne 0x10015fb8
mov dword [ebp - 0x344], 1
jmp 0x10015fbf
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x344], eax
jg 0x10015fd6
mov dword [ebp - 0x34c], 1
jmp 0x10015fdd
and dword [ebp - 0x34c], 0
push 1
lea ecx, [ebp - 0x294]
call fcn.1002273f
mov ecx, dword [ebp - 0x34c]
cmp ecx, dword [eax]
jne 0x10016000
mov dword [ebp - 0x354], 1
jmp 0x10016007
and dword [ebp - 0x354], 0
mov eax, dword [ebp - 0xe8]
cmp dword [ebp - 0x354], eax
je 0x10016021
mov dword [ebp - 0x35c], 1
jmp 0x10016028
and dword [ebp - 0x35c], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0xe8]
mov dword [ebp - 0x6f4], eax
jmp 0x10015d83
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x294]
call fcn.1002271a
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x70c], eax
mov dword [ebp - 0x220], 0xea68
mov dword [ebp - 0x364], 0x121a
mov dword [ebp - 0x37c], 4
mov dword [ebp - 0x934], 0x56890c54
mov dword [ebp - 0x9e0], 0xed4a55f0
mov dword [ebp - 0x93c], 0xd373ee76
mov dword [ebp - 0x9e4], 0x24b54114
mov dword [ebp - 0x944], 0xd8143836
mov dword [ebp - 0x9e8], 0x33c7d24b
mov dword [ebp - 0x94c], 0x398963ec
mov dword [ebp - 0x384], 0xb0881dd
mov dword [ebp - 0x9ec], 0xf0ef
mov dword [ebp - 0x164], 0
jmp 0x100160f1
mov eax, dword [ebp - 0x164]
inc eax
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 4
jge 0x1001610d
mov eax, dword [ebp - 0x164]
mov dword [ebp + eax*4 - 0xae0], 1
jmp 0x100160e4
mov eax, dword [ebp - 0x220]
cmp eax, dword [ebp - 0x220]
jge 0x10016127
mov dword [ebp - 0x36c], 1
jmp 0x1001612e
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x364]
imul eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x364]
imul ecx, eax
cmp dword [ebp - 0x36c], ecx
jl 0x10016158
mov dword [ebp - 0x704], 1
jmp 0x1001615f
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x954], eax
mov eax, 0xce96b779
test eax, eax
jb 0x10016180
mov dword [ebp - 0x374], 1
jmp 0x10016187
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
push dword [ebp - 0x70c]
push dword [ebp - 0x714]
call dword [0x10c36024]
mov dword [ebp - 0x71c], eax
mov eax, dword [ebp - 0x71c]
jmp 0x100161c2
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret