Function at 0x1002820a
Capabilities:
Create directory
Delete directory
Get disk information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10082d68
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x10b4
call fcn.1007e240
push esi
push edi
mov dword [ebp - 0x90], 1
mov dword [ebp - 0x9b0], 0xfffffffa
mov dword [ebp - 0x9a8], 0xfffffffd
mov dword [ebp - 0x324], 0
jmp 0x10028265
mov eax, dword [ebp - 0x324]
inc eax
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 1
jge 0x10028281
mov eax, dword [ebp - 0x324]
mov dword [ebp + eax*4 - 0xaf0], 1
jmp 0x10028258
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x90], 0x1a
jmp 0x100282a7
mov eax, dword [ebp - 0x90]
dec eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 8
jle 0x10028728
or dword [ebp - 0xd4c], 0xffffffff
or dword [ebp - 0xd48], 0xffffffff
or dword [ebp - 0xd44], 0xffffffff
or dword [ebp - 0xd40], 0xffffffff
lea ecx, [ebp - 0x3c1]
call fcn.10009580
push eax
lea eax, [ebp - 0xd3c]
push eax
lea eax, [ebp - 0xd4c]
push eax
lea ecx, [ebp - 0x1048]
call fcn.10009583
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa9c]
call fcn.10009546
and dword [ebp - 4], 0
mov dword [ebp - 0x358], 0x1ac7eb23
mov dword [ebp - 0x9d8], 0x86f80366
mov dword [ebp - 0xae8], 0
mov dword [ebp - 0x1a8], 0
jmp 0x10028340
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 4
jge 0x1002835c
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xd88], 0x72ba29f5
jmp 0x10028333
push 2
lea ecx, [ebp - 0xa9c]
call fcn.10009571
and dword [eax], 0
jmp 0x10028392
push 2
lea ecx, [ebp - 0xa9c]
call fcn.10009571
mov dword [ebp - 0x6ec], eax
mov eax, dword [ebp - 0x6ec]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6ec]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa9c]
call fcn.10009571
cmp dword [eax], 0xc
je 0x10028714
push 2
lea ecx, [ebp - 0xc4c]
call fcn.10009504
mov byte [ebp - 4], 1
mov dword [ebp - 0x1b0], 0xe33a79cc
mov dword [ebp - 0xf78], 1
mov dword [ebp - 0x1b8], 0xfffffffc
mov dword [ebp - 0xe58], 0xffffffff
mov dword [ebp - 0x1a0], 0xd35da2a0
mov dword [ebp - 0xf4c], 0xe81de982
mov dword [ebp - 0xb00], 0x1b07fb07
mov dword [ebp - 0x320], 0
jmp 0x10028418
mov eax, dword [ebp - 0x320]
inc eax
mov dword [ebp - 0x320], eax
cmp dword [ebp - 0x320], 2
jge 0x10028437
push dword [ebp - 0x320]
lea ecx, [ebp - 0xc4c]
call fcn.10009571
or dword [eax], 0xffffffff
jmp 0x1002840b
cmp dword [ebp - 0x90], 0
jne 0x100285cf
cmp dword [ebp - 0x90], 0xfffffffe
jge 0x10028459
mov dword [ebp - 0x998], 1
jmp 0x10028460
and dword [ebp - 0x998], 0
mov eax, dword [ebp - 0x998]
neg eax
sub eax, 0x7848f28
cmp eax, 0x507b
jle 0x10028480
mov dword [ebp - 0x9a0], 1
jmp 0x10028487
and dword [ebp - 0x9a0], 0
push 1
lea ecx, [ebp - 0xa9c]
call fcn.10009571
mov ecx, dword [ebp - 0x9a0]
cmp ecx, dword [eax]
je 0x100284aa
mov dword [ebp - 0xad0], 1
jmp 0x100284b1
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0x9a8]
add eax, dword [ebp - 0xae8]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x9b0]
mov dword [ebp - 0xe60], eax
cmp dword [ebp - 0x9b0], 0xffffffff
jg 0x100284e4
mov dword [ebp - 0x9b8], 1
jmp 0x100284eb
and dword [ebp - 0x9b8], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0xd88]
imul eax, dword [ebp - 0x9b8], 5
sub esi, eax
push 0
lea ecx, [ebp - 0xc4c]
call fcn.10009571
cmp esi, dword [eax]
jge 0x1002851d
mov dword [ebp - 0x9c8], 1
jmp 0x10028524
and dword [ebp - 0x9c8], 0
mov eax, dword [ebp - 0x9d8]
mov dword [ebp - 0x9c0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9c0]
mov dword [ebp + eax - 0xaf0], ecx
mov eax, dword [ebp - 0x9c0]
cmp eax, dword [ebp - 0x9c8]
jne 0x1002855d
mov dword [ebp - 0x9d0], 1
jmp 0x10028564
and dword [ebp - 0x9d0], 0
imul eax, dword [ebp - 0x9d0], 0xfffa
cmp eax, dword [ebp - 0x9d8]
jle 0x10028582
mov dword [ebp - 0xaf8], 1
jmp 0x10028589
and dword [ebp - 0xaf8], 0
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0xf8c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd88]
mov dword [ebp - 0xe68], eax
push 2
lea ecx, [ebp - 0xa9c]
call fcn.10009571
cmp dword [eax], 0
jne 0x100285cf
and dword [ebp - 0x9e0], 0
jmp 0x100285d9
mov dword [ebp - 0x9e0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xd88]
imul eax, dword [ebp - 0x9e0]
test eax, eax
jne 0x10028602
mov eax, 0x3309
test eax, eax
jne 0x10028602
and dword [ebp - 0x9e8], 0
jmp 0x1002860c
mov dword [ebp - 0x9e8], 1
push 0
lea ecx, [ebp - 0xc4c]
call fcn.10009571
mov ecx, dword [ebp - 0x9e8]
cmp ecx, dword [eax]
jl 0x10028627
xor eax, eax
jne 0x10028637
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x10028637
and dword [ebp - 0x3bc], 0
jmp 0x10028641
mov dword [ebp - 0x3bc], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp + eax - 0xd88], ecx
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0xb00], eax
mov dword [ebp - 0x1b0], 0xfffffffa
jmp 0x10028679
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 7
jge 0x10028700
mov dword [ebp - 0x808], 0xfeddd8d7
mov dword [ebp - 0x1a0], 0x14
jmp 0x100286a5
mov eax, dword [ebp - 0x1a0]
dec eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 0xfffffffa
jne 0x100286ee
mov dword [ebp - 0x1b8], 0x10
jmp 0x100286c7
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 0x1d
jl 0x100286ec
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x100286ea
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x100286ba
jmp 0x10028698
mov eax, dword [ebp - 0x808]
dec eax
mov dword [ebp - 0x808], eax
jmp 0x1002866c
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xc4c]
call fcn.1000956c
jmp 0x1002836e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa9c]
call fcn.1000956c
jmp 0x1002829a
mov dword [ebp - 0x98], 1
mov dword [ebp - 0xa0], 0xa631
mov dword [ebp - 0xa60], 5
mov dword [ebp - 0xa5c], 5
mov dword [ebp - 0xa58], 5
mov dword [ebp - 0xa54], 5
mov dword [ebp - 0x2c8], 0
jmp 0x1002877d
mov eax, dword [ebp - 0x2c8]
inc eax
mov dword [ebp - 0x2c8], eax
cmp dword [ebp - 0x2c8], 1
jge 0x10028799
mov eax, dword [ebp - 0x2c8]
mov dword [ebp + eax*4 - 0x42c], 0x5cc7
jmp 0x10028770
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa0], 0
jmp 0x100287bf
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jg 0x100289eb
mov dword [ebp - 0x1c0], 0xfffffff6
mov dword [ebp - 0xf54], 0
cmp dword [ebp - 0x1c0], 0
jne 0x1002880c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa60]
add eax, dword [ebp - 0x1c0]
cmp eax, 0x77a1
jg 0x1002880c
and dword [ebp - 0x414], 0
jmp 0x10028816
mov dword [ebp - 0x414], 1
mov eax, dword [ebp - 0x1c0]
imul eax, dword [ebp - 0x414]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xa60]
cmp eax, 0x6085e071
jle 0x10028842
mov dword [ebp - 0x810], 1
jmp 0x10028849
and dword [ebp - 0x810], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa60]
cmp eax, dword [ebp - 0x810]
jne 0x1002886a
mov dword [ebp - 0x41c], 1
jmp 0x10028871
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x1c0]
cmp dword [ebp - 0x41c], eax
je 0x1002888b
mov dword [ebp - 0x818], 1
jmp 0x10028892
and dword [ebp - 0x818], 0
cmp dword [ebp - 0x818], 0x2301
jle 0x100288aa
mov dword [ebp - 0x424], 1
jmp 0x100288b1
and dword [ebp - 0x424], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa60]
cmp eax, dword [ebp - 0x424]
jne 0x100288d2
mov dword [ebp - 0x820], 1
jmp 0x100288d9
and dword [ebp - 0x820], 0
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp - 0x820]
mov dword [ebp + eax*4 - 0xa60], ecx
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0xa60], 0xe071a051
mov eax, 0xe071a051
test eax, eax
je 0x10028965
mov dword [ebp - 0xe70], 0x894ff545
mov dword [ebp - 0x300], 0
jmp 0x10028929
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 3
jge 0x10028945
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0x109c], 0x3813bf58
jmp 0x1002891c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x42c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x42c], eax
jmp 0x100289e6
push 3
lea ecx, [ebp - 0xc7c]
call fcn.10009504
mov dword [ebp - 4], 2
mov dword [ebp - 0x1c8], 0
jmp 0x10028992
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 3
jge 0x100289b4
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0xc7c]
call fcn.10009571
mov dword [eax], 0xdbca
jmp 0x10028985
push 2
lea ecx, [ebp - 0xc7c]
call fcn.10009571
cmp dword [eax], 0
je 0x100289d7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc7c]
call fcn.1000956c
jmp 0x100289eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc7c]
call fcn.1000956c
jmp 0x100287b2
mov dword [ebp - 0x870], 0xfffffffa
mov dword [ebp - 0x474], 0xfffffffd
mov dword [ebp - 0xf0], 0x949f4ffc
mov dword [ebp - 0x850], 2
mov dword [ebp - 0x454], 0x552ded14
mov dword [ebp - 0x78], 0
jmp 0x10028a2d
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jge 0x10028a43
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x34c], 1
jmp 0x10028a26
mov dword [ebp - 0x78], 0
jmp 0x10028a53
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 3
jge 0x10028a69
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0xc94], 4
jmp 0x10028a4c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0xec0], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xffffffff
jbe 0x10028aa4
mov dword [ebp - 0x828], 1
jmp 0x10028aab
and dword [ebp - 0x828], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x828]
sub ecx, dword [ebp + eax - 0x34c]
cmp ecx, 0x2152
jg 0x10028adb
cmp dword [ebp - 0xf0], 0
je 0x10028adb
mov dword [ebp - 0x434], 1
jmp 0x10028ae2
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xfffffffe
je 0x10028af7
mov dword [ebp - 0x830], 1
jmp 0x10028afe
and dword [ebp - 0x830], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp eax, dword [ebp - 0x830]
jg 0x10028b1f
mov dword [ebp - 0x43c], 1
jmp 0x10028b26
and dword [ebp - 0x43c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
add eax, 0xb99
cmp eax, dword [ebp - 0x43c]
jg 0x10028b4c
mov dword [ebp - 0x838], 1
jmp 0x10028b53
and dword [ebp - 0x838], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x34c]
cmp dword [ebp - 0x838], eax
je 0x10028b74
mov dword [ebp - 0x444], 1
jmp 0x10028b7b
and dword [ebp - 0x444], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x444]
mov dword [ebp + eax - 0xc94], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc94]
cmp dword [ebp - 0x850], eax
jle 0x10028baf
mov dword [ebp - 0x3d4], 1
jmp 0x10028bb6
and dword [ebp - 0x3d4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3d4]
mov dword [ebp + eax - 0xc94], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
add eax, 0x81d6e6e
cmp eax, dword [ebp - 0x3d4]
jle 0x10028bef
mov dword [ebp - 0x840], 1
jmp 0x10028bf6
and dword [ebp - 0x840], 0
cmp dword [ebp - 0x840], 0x8fe4de5a
jae 0x10028c0e
mov dword [ebp - 0x44c], 1
jmp 0x10028c15
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0
jle 0x10028c2a
mov dword [ebp - 0x848], 1
jmp 0x10028c31
and dword [ebp - 0x848], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34c]
imul eax, dword [ebp - 0x848]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jne 0x10028c62
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xc94], 0
mov eax, dword [ebp - 0xf0]
add eax, 0x5f0e77da
je 0x10028c84
cmp dword [ebp - 0x850], 0
je 0x10028c84
mov dword [ebp - 0x45c], 1
jmp 0x10028c8b
and dword [ebp - 0x45c], 0
cmp dword [ebp - 0x45c], 0xd69b
je 0x10028ca3
mov dword [ebp - 0x858], 1
jmp 0x10028caa
and dword [ebp - 0x858], 0
mov eax, dword [ebp - 0xf0]
cmp eax, dword [ebp - 0x858]
jne 0x10028cc4
mov dword [ebp - 0x464], 1
jmp 0x10028ccb
and dword [ebp - 0x464], 0
mov eax, dword [ebp - 0x464]
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xe78], 0
mov dword [ebp - 0xec4], 0
mov dword [ebp - 0xec8], 0x7689351f
mov dword [ebp - 0xf5c], 0xffffffff
mov dword [ebp - 0xed4], 0xfffffffd
mov dword [ebp - 0x58], 0
jmp 0x10028d19
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10028d2f
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x10b4], 0x7a73d2d6
jmp 0x10028d12
mov dword [ebp - 0x58], 0
jmp 0x10028d3f
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x10028d55
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xea8], 1
jmp 0x10028d38
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xea8]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xea8], eax
mov dword [ebp - 0x2d0], 0
jmp 0x10028d87
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
cmp dword [ebp - 0x2d0], 1
jge 0x10028da3
mov eax, dword [ebp - 0x2d0]
mov dword [ebp + eax*4 - 0xb64], 1
jmp 0x10028d7a
mov dword [ebp - 0x1d0], 0
jmp 0x10028dbc
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x10028dd8
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xa40], 0
jmp 0x10028daf
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa40], 0
jmp 0x10028e06
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa40]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa40], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa40], 0xfffffff9
jle 0x10028e43
mov byte [ebp - 0xe4], 0
movzx eax, byte [ebp - 0xe4]
test eax, eax
je 0x10028e41
push 0x1807
push 0x1009
push 0
push 0x680
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x10028deb
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x98], 0x1a
jmp 0x10028e69
mov eax, dword [ebp - 0x98]
dec eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 8
jle 0x100292ed
or dword [ebp - 0xd60], 0xffffffff
or dword [ebp - 0xd5c], 0xffffffff
or dword [ebp - 0xd58], 0xffffffff
or dword [ebp - 0xd54], 0xffffffff
lea ecx, [ebp - 0x3c9]
call fcn.10009580
push eax
lea eax, [ebp - 0xd50]
push eax
lea eax, [ebp - 0xd60]
push eax
lea ecx, [ebp - 0x1030]
call fcn.10009583
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa84]
call fcn.10009546
mov dword [ebp - 4], 3
mov dword [ebp - 0x3dc], 0x1ac7eb23
mov dword [ebp - 0x48c], 0x86f80366
mov dword [ebp - 0xb5c], 0
mov dword [ebp - 0x264], 0
jmp 0x10028f05
mov eax, dword [ebp - 0x264]
inc eax
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 4
jge 0x10028f21
mov eax, dword [ebp - 0x264]
mov dword [ebp + eax*4 - 0xdd8], 0x72ba29f5
jmp 0x10028ef8
push 2
lea ecx, [ebp - 0xa84]
call fcn.10009571
and dword [eax], 0
jmp 0x10028f57
push 2
lea ecx, [ebp - 0xa84]
call fcn.10009571
mov dword [ebp - 0x860], eax
mov eax, dword [ebp - 0x860]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x860]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa84]
call fcn.10009571
cmp dword [eax], 0xc
je 0x100292d9
push 2
lea ecx, [ebp - 0xcac]
call fcn.10009504
mov byte [ebp - 4], 4
mov dword [ebp - 0x274], 0xe33a79cc
mov dword [ebp - 0xf94], 1
mov dword [ebp - 0x27c], 0xfffffffc
mov dword [ebp - 0xee0], 0xffffffff
mov dword [ebp - 0x1e0], 0xd35da2a0
mov dword [ebp - 0xf64], 0xe81de982
mov dword [ebp - 0xb74], 0x1b07fb07
mov dword [ebp - 0x1d8], 0
jmp 0x10028fdd
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 2
jge 0x10028ffc
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xcac]
call fcn.10009571
or dword [eax], 0xffffffff
jmp 0x10028fd0
cmp dword [ebp - 0x98], 0
jne 0x10029194
cmp dword [ebp - 0x98], 0xfffffffe
jge 0x1002901e
mov dword [ebp - 0x46c], 1
jmp 0x10029025
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
neg eax
sub eax, 0x7848f28
cmp eax, 0x507b
jle 0x10029045
mov dword [ebp - 0x868], 1
jmp 0x1002904c
and dword [ebp - 0x868], 0
push 1
lea ecx, [ebp - 0xa84]
call fcn.10009571
mov ecx, dword [ebp - 0x868]
cmp ecx, dword [eax]
je 0x1002906f
mov dword [ebp - 0xb54], 1
jmp 0x10029076
and dword [ebp - 0xb54], 0
mov eax, dword [ebp - 0x474]
add eax, dword [ebp - 0xb5c]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x870]
mov dword [ebp - 0xeec], eax
cmp dword [ebp - 0x870], 0xffffffff
jg 0x100290a9
mov dword [ebp - 0x47c], 1
jmp 0x100290b0
and dword [ebp - 0x47c], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0xdd8]
imul eax, dword [ebp - 0x47c], 5
sub esi, eax
push 0
lea ecx, [ebp - 0xcac]
call fcn.10009571
cmp esi, dword [eax]
jge 0x100290e2
mov dword [ebp - 0x484], 1
jmp 0x100290e9
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x48c]
mov dword [ebp - 0x878], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x878]
mov dword [ebp + eax - 0xb64], ecx
mov eax, dword [ebp - 0x878]
cmp eax, dword [ebp - 0x484]
jne 0x10029122
mov dword [ebp - 0x880], 1
jmp 0x10029129
and dword [ebp - 0x880], 0
imul eax, dword [ebp - 0x880], 0xfffa
cmp eax, dword [ebp - 0x48c]
jle 0x10029147
mov dword [ebp - 0xb6c], 1
jmp 0x1002914e
and dword [ebp - 0xb6c], 0
mov eax, dword [ebp - 0x3dc]
inc eax
mov dword [ebp - 0x3dc], eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0xff0], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdd8]
mov dword [ebp - 0xefc], eax
push 2
lea ecx, [ebp - 0xa84]
call fcn.10009571
cmp dword [eax], 0
jne 0x10029194
and dword [ebp - 0x888], 0
jmp 0x1002919e
mov dword [ebp - 0x888], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdd8]
imul eax, dword [ebp - 0x888]
test eax, eax
jne 0x100291c7
mov eax, 0x3309
test eax, eax
jne 0x100291c7
and dword [ebp - 0x494], 0
jmp 0x100291d1
mov dword [ebp - 0x494], 1
push 0
lea ecx, [ebp - 0xcac]
call fcn.10009571
mov ecx, dword [ebp - 0x494]
cmp ecx, dword [eax]
jl 0x100291ec
xor eax, eax
jne 0x100291fc
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x100291fc
and dword [ebp - 0x3e4], 0
jmp 0x10029206
mov dword [ebp - 0x3e4], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3e4]
mov dword [ebp + eax - 0xdd8], ecx
mov eax, dword [ebp - 0x3e4]
mov dword [ebp - 0xb74], eax
mov dword [ebp - 0x274], 0xfffffffa
jmp 0x1002923e
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 7
jge 0x100292c5
mov dword [ebp - 0x890], 0xfeddd8d7
mov dword [ebp - 0x1e0], 0x14
jmp 0x1002926a
mov eax, dword [ebp - 0x1e0]
dec eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 0xfffffffa
jne 0x100292b3
mov dword [ebp - 0x27c], 0x10
jmp 0x1002928c
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 0x1d
jl 0x100292b1
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x100292af
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x1002927f
jmp 0x1002925d
mov eax, dword [ebp - 0x890]
dec eax
mov dword [ebp - 0x890], eax
jmp 0x10029231
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcac]
call fcn.1000956c
jmp 0x10028f33
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa84]
call fcn.1000956c
jmp 0x10028e5c
mov dword [ebp - 0xf6c], 0xfe387fb0
mov dword [ebp - 0x49c], 0xaa39ed0
mov dword [ebp - 0x1e8], 0
jmp 0x1002931a
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 1
jge 0x10029336
mov eax, dword [ebp - 0x1e8]
mov dword [ebp + eax*4 - 0xf0c], 1
jmp 0x1002930d
mov byte [ebp - 0xe6], 0
movzx eax, byte [ebp - 0xe6]
test eax, eax
je 0x10029366
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [ebp - 0x49c]
inc eax
mov dword [ebp - 0x49c], eax
mov dword [ebp - 0x94], 1
mov dword [ebp - 0x940], 0xfffffffa
mov dword [ebp - 0xf10], 0x68cd546
mov dword [ebp - 0xf18], 1
mov dword [ebp - 0x898], 0xc328129e
mov dword [ebp - 0x284], 0
jmp 0x100293be
mov eax, dword [ebp - 0x284]
inc eax
mov dword [ebp - 0x284], eax
cmp dword [ebp - 0x284], 1
jge 0x100293da
mov eax, dword [ebp - 0x284]
mov dword [ebp + eax*4 - 0xf8], 0xf1124f01
jmp 0x100293b1
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x10029407
push 0x12c7
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MapWindowPoints]
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf8], 0
jmp 0x10029435
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf8], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0xb
jl 0x100295b1
mov dword [ebp - 0x160], 0x32fd2d1a
mov dword [ebp - 0x28c], 0xc5a74d4b
mov dword [ebp - 0xdf8], 0x663c10b4
mov dword [ebp - 0xdf4], 0x663c10b4
mov dword [ebp - 0xdf0], 0x663c10b4
mov dword [ebp - 0xdec], 0x663c10b4
push 4
pop eax
imul eax, eax, 0
xor ecx, ecx
sub ecx, dword [ebp + eax - 0xf8]
je 0x100294a6
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0
jne 0x100294af
mov eax, 0x64f6
test eax, eax
je 0x100294d1
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x100294cc
push 0x1d1e
call dword [sym.imp.USER32.dll_BeginDeferWindowPos]
jmp 0x100295ac
mov dword [ebp - 0x1f0], 0
jmp 0x100294ea
mov eax, dword [ebp - 0x1f0]
inc eax
mov dword [ebp - 0x1f0], eax
cmp dword [ebp - 0x1f0], 1
jge 0x10029506
mov eax, dword [ebp - 0x1f0]
mov dword [ebp + eax*4 - 0xb7c], 0x1aedf47f
jmp 0x100294dd
mov eax, dword [ebp - 0x898]
inc eax
mov dword [ebp - 0x898], eax
mov dword [ebp - 0x28c], 0
jmp 0x1002952c
mov eax, dword [ebp - 0x28c]
inc eax
mov dword [ebp - 0x28c], eax
cmp dword [ebp - 0x28c], 0
jg 0x100295ac
mov dword [ebp - 0x3ec], 0xba5fc02
mov dword [ebp - 0x160], 0
jmp 0x10029558
mov eax, dword [ebp - 0x160]
inc eax
mov dword [ebp - 0x160], eax
cmp dword [ebp - 0x160], 0
jg 0x100295a7
mov eax, dword [ebp - 0x160]
cmp dword [ebp + eax*4 - 0xb7c], 0
jne 0x10029589
mov eax, dword [ebp - 0x3ec]
dec eax
mov dword [ebp - 0x3ec], eax
jne 0x10029589
and dword [ebp - 0x4a4], 0
jmp 0x10029593
mov dword [ebp - 0x4a4], 1
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x4a4]
mov dword [ebp + eax - 0xdf8], ecx
jmp 0x1002954b
jmp 0x1002951f
jmp 0x1002941a
mov dword [ebp - 0x544], 0xfffffffd
mov dword [ebp - 0x140], 0xffffffff
mov dword [ebp - 0xfa4], 0x647c2c9e
mov dword [ebp - 0xfa0], 0x647c2c9e
mov dword [ebp - 0xf9c], 0x647c2c9e
mov dword [ebp - 0xf98], 0x647c2c9e
mov dword [ebp - 0x140], 0
jmp 0x10029606
mov eax, dword [ebp - 0x140]
inc eax
mov dword [ebp - 0x140], eax
cmp dword [ebp - 0x140], 8
jge 0x100296d2
mov dword [ebp - 0xb84], 0x1d8b
mov dword [ebp - 0xb8c], 1
mov dword [ebp - 0x1f8], 0
jmp 0x10029640
mov eax, dword [ebp - 0x1f8]
inc eax
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 2
jge 0x1002965c
mov eax, dword [ebp - 0x1f8]
mov dword [ebp + eax*4 - 0xcfc], 0
jmp 0x10029633
cmp dword [ebp - 0xb84], 0
jne 0x1002966c
cmp dword [ebp - 0x140], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x140]
cmp dword [ebp + eax - 0xcfc], ecx
jg 0x1002968d
mov dword [ebp - 0x8a0], 1
jmp 0x10029694
and dword [ebp - 0x8a0], 0
cmp dword [ebp - 0x8a0], 0
jg 0x100296b9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xcfc], 0
je 0x100296b9
mov dword [ebp - 0x4ac], 1
jmp 0x100296c0
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
inc eax
mov dword [ebp - 0xb8c], eax
jmp 0x100295f9
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x100296f3
push 1
push 0x84b
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [ebp - 0x100], 0xffffffff
mov dword [ebp - 0xfb8], 0x647c2c9e
mov dword [ebp - 0xfb4], 0x647c2c9e
mov dword [ebp - 0xfb0], 0x647c2c9e
mov dword [ebp - 0xfac], 0x647c2c9e
mov dword [ebp - 0x100], 0
jmp 0x1002973e
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 8
jge 0x1002980a
mov dword [ebp - 0xb94], 0x1d8b
mov dword [ebp - 0xb9c], 1
mov dword [ebp - 0x294], 0
jmp 0x10029778
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x10029794
mov eax, dword [ebp - 0x294]
mov dword [ebp + eax*4 - 0xd1c], 0
jmp 0x1002976b
cmp dword [ebp - 0xb94], 0
jne 0x100297a4
cmp dword [ebp - 0x100], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x100]
cmp dword [ebp + eax - 0xd1c], ecx
jg 0x100297c5
mov dword [ebp - 0x8a8], 1
jmp 0x100297cc
and dword [ebp - 0x8a8], 0
cmp dword [ebp - 0x8a8], 0
jg 0x100297f1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd1c], 0
je 0x100297f1
mov dword [ebp - 0x4b4], 1
jmp 0x100297f8
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
inc eax
mov dword [ebp - 0xb9c], eax
jmp 0x10029731
mov byte [ebp - 0xd9], 0
movzx eax, byte [ebp - 0xd9]
test eax, eax
je 0x1002982b
push 1
push 0x84b
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
mov dword [ebp - 0x200], 0
jmp 0x10029844
mov eax, dword [ebp - 0x200]
inc eax
mov dword [ebp - 0x200], eax
cmp dword [ebp - 0x200], 1
jge 0x10029860
mov eax, dword [ebp - 0x200]
mov dword [ebp + eax*4 - 0xbcc], 1
jmp 0x10029837
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x29c], 0
jmp 0x10029897
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 3
jge 0x100298b3
mov eax, dword [ebp - 0x29c]
mov dword [ebp + eax*4 - 0x404], 1
jmp 0x1002988a
mov dword [ebp - 0x50], 2
jmp 0x100298c3
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10029ad1
mov dword [ebp - 0xbb4], 0
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x404], 0
je 0x10029a3e
mov eax, dword [ebp - 0x50]
cmp dword [ebp + eax*4 - 0x404], 0
jae 0x10029901
mov dword [ebp - 0x8b0], 1
jmp 0x10029908
and dword [ebp - 0x8b0], 0
mov eax, dword [ebp - 0x8b0]
neg eax
je 0x10029924
cmp dword [ebp - 0x50], 0
je 0x10029924
mov dword [ebp - 0x4bc], 1
jmp 0x1002992b
and dword [ebp - 0x4bc], 0
cmp dword [ebp - 0x4bc], 5
jl 0x10029940
mov dword [ebp - 0x8b8], 1
jmp 0x10029947
and dword [ebp - 0x8b8], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x404]
cmp dword [ebp - 0x8b8], eax
jne 0x10029965
mov dword [ebp - 0x4c4], 1
jmp 0x1002996c
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x4c4]
je 0x10029983
mov dword [ebp - 0x8c0], 1
jmp 0x1002998a
and dword [ebp - 0x8c0], 0
cmp dword [ebp - 0x8c0], 0xffffffff
jne 0x1002999f
mov dword [ebp - 0x4cc], 1
jmp 0x100299a6
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x404]
cmp dword [ebp - 0x4cc], eax
jge 0x100299c4
mov dword [ebp - 0x8c8], 1
jmp 0x100299cb
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x8c8], eax
jge 0x100299eb
mov eax, 0x9a01c77d
test eax, eax
jne 0x100299eb
and dword [ebp - 0x4d4], 0
jmp 0x100299f5
mov dword [ebp - 0x4d4], 1
cmp dword [ebp - 0x4d4], 0x9b37
jle 0x10029a0d
mov dword [ebp - 0xba4], 1
jmp 0x10029a14
and dword [ebp - 0xba4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xfa8], eax
imul eax, dword [ebp - 0xa8], 0
test eax, eax
je 0x10029a3e
mov dword [ebp - 0x8d0], 1
jmp 0x10029a45
and dword [ebp - 0x8d0], 0
cmp dword [ebp - 0x8d0], 2
jae 0x10029a5a
mov dword [ebp - 0x4dc], 1
jmp 0x10029a61
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp + eax*4 - 0x404]
cmp dword [ebp - 0x4dc], eax
jl 0x10029a7f
mov dword [ebp - 0x8d8], 1
jmp 0x10029a86
and dword [ebp - 0x8d8], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x404]
cmp dword [ebp - 0x8d8], eax
jle 0x10029aa6
mov dword [ebp - 0xbac], 1
jmp 0x10029aad
and dword [ebp - 0xbac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x404]
mov dword [ebp - 0xf1c], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0xbb4], eax
jmp 0x100298bc
mov dword [ebp - 0xa8], 0
jmp 0x10029aea
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jge 0x10029b06
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x404], 0x65ab4d25
jmp 0x10029add
mov dword [ebp - 0x94], 0x1a
jmp 0x10029b1f
mov eax, dword [ebp - 0x94]
dec eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 8
jle 0x1002a665
or dword [ebp - 0xd38], 0xffffffff
or dword [ebp - 0xd34], 0xffffffff
or dword [ebp - 0xd30], 0xffffffff
or dword [ebp - 0xd2c], 0xffffffff
lea ecx, [ebp - 0x3a1]
call fcn.10009580
push eax
lea eax, [ebp - 0xd28]
push eax
lea eax, [ebp - 0xd38]
push eax
lea ecx, [ebp - 0x1070]
call fcn.10009583
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa90]
call fcn.10009546
mov dword [ebp - 4], 5
mov dword [ebp - 0x360], 0x1ac7eb23
mov dword [ebp - 0x55c], 0x86f80366
mov dword [ebp - 0xbc4], 0
mov dword [ebp - 0x8c], 0xa631
mov dword [ebp - 0xa78], 5
mov dword [ebp - 0xa74], 5
mov dword [ebp - 0xa70], 5
mov dword [ebp - 0xa6c], 5
mov dword [ebp - 0x208], 0
jmp 0x10029bed
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 1
jge 0x10029c09
mov eax, dword [ebp - 0x208]
mov dword [ebp + eax*4 - 0x4fc], 0x5cc7
jmp 0x10029be0
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x8c], 0
jmp 0x10029c2f
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jg 0x10029e55
mov dword [ebp - 0x2a4], 0xfffffff6
mov dword [ebp - 0xe00], 0
cmp dword [ebp - 0x2a4], 0
jne 0x10029c7c
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
add eax, dword [ebp - 0x2a4]
cmp eax, 0x77a1
jg 0x10029c7c
and dword [ebp - 0x4e4], 0
jmp 0x10029c86
mov dword [ebp - 0x4e4], 1
mov eax, dword [ebp - 0x2a4]
imul eax, dword [ebp - 0x4e4]
push 4
pop ecx
shl ecx, 1
sub eax, dword [ebp + ecx - 0xa78]
cmp eax, 0x6085e071
jle 0x10029cb2
mov dword [ebp - 0x8e0], 1
jmp 0x10029cb9
and dword [ebp - 0x8e0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp eax, dword [ebp - 0x8e0]
jne 0x10029cda
mov dword [ebp - 0x4ec], 1
jmp 0x10029ce1
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x4ec], eax
je 0x10029cfb
mov dword [ebp - 0x8e8], 1
jmp 0x10029d02
and dword [ebp - 0x8e8], 0
cmp dword [ebp - 0x8e8], 0x2301
jle 0x10029d1a
mov dword [ebp - 0x4f4], 1
jmp 0x10029d21
and dword [ebp - 0x4f4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa78]
cmp eax, dword [ebp - 0x4f4]
jne 0x10029d42
mov dword [ebp - 0x8f0], 1
jmp 0x10029d49
and dword [ebp - 0x8f0], 0
mov eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0x8f0]
mov dword [ebp + eax*4 - 0xa78], ecx
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xa78], 0xe071a051
mov eax, 0xe071a051
test eax, eax
je 0x10029dd2
mov dword [ebp - 0xe04], 0x894ff545
mov dword [ebp - 0x210], 0
jmp 0x10029d99
mov eax, dword [ebp - 0x210]
inc eax
mov dword [ebp - 0x210], eax
cmp dword [ebp - 0x210], 3
jge 0x10029db5
mov eax, dword [ebp - 0x210]
mov dword [ebp + eax*4 - 0x10a8], 0x3813bf58
jmp 0x10029d8c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x4fc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x4fc], eax
jmp 0x10029e50
push 3
lea ecx, [ebp - 0xcc4]
call fcn.10009504
mov byte [ebp - 4], 6
mov dword [ebp - 0x2ac], 0
jmp 0x10029dfc
mov eax, dword [ebp - 0x2ac]
inc eax
mov dword [ebp - 0x2ac], eax
cmp dword [ebp - 0x2ac], 3
jge 0x10029e1e
push dword [ebp - 0x2ac]
lea ecx, [ebp - 0xcc4]
call fcn.10009571
mov dword [eax], 0xdbca
jmp 0x10029def
push 2
lea ecx, [ebp - 0xcc4]
call fcn.10009571
cmp dword [eax], 0
je 0x10029e41
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcc4]
call fcn.1000956c
jmp 0x10029e55
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcc4]
call fcn.1000956c
jmp 0x10029c22
mov dword [ebp - 0x218], 0
jmp 0x10029e6e
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 4
jge 0x10029e8a
mov eax, dword [ebp - 0x218]
mov dword [ebp + eax*4 - 0xda8], 0x72ba29f5
jmp 0x10029e61
mov dword [ebp - 0x150], 0x949f4ffc
mov dword [ebp - 0x920], 2
mov dword [ebp - 0x524], 0x552ded14
mov dword [ebp - 0x70], 0
jmp 0x10029eb8
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x10029ece
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x354], 1
jmp 0x10029eb1
mov dword [ebp - 0x70], 0
jmp 0x10029ede
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x10029ef4
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xcdc], 4
jmp 0x10029ed7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0xe0c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
mov dword [ebp - 0x150], eax
cmp dword [ebp - 0x150], 0xffffffff
jbe 0x10029f2f
mov dword [ebp - 0x8f8], 1
jmp 0x10029f36
and dword [ebp - 0x8f8], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x8f8]
sub ecx, dword [ebp + eax - 0x354]
cmp ecx, 0x2152
jg 0x10029f66
cmp dword [ebp - 0x150], 0
je 0x10029f66
mov dword [ebp - 0x504], 1
jmp 0x10029f6d
and dword [ebp - 0x504], 0
cmp dword [ebp - 0x504], 0xfffffffe
je 0x10029f82
mov dword [ebp - 0x900], 1
jmp 0x10029f89
and dword [ebp - 0x900], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp eax, dword [ebp - 0x900]
jg 0x10029faa
mov dword [ebp - 0x50c], 1
jmp 0x10029fb1
and dword [ebp - 0x50c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
add eax, 0xb99
cmp eax, dword [ebp - 0x50c]
jg 0x10029fd7
mov dword [ebp - 0x908], 1
jmp 0x10029fde
and dword [ebp - 0x908], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x354]
cmp dword [ebp - 0x908], eax
je 0x10029fff
mov dword [ebp - 0x514], 1
jmp 0x1002a006
and dword [ebp - 0x514], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x514]
mov dword [ebp + eax - 0xcdc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xcdc]
cmp dword [ebp - 0x920], eax
jle 0x1002a03a
mov dword [ebp - 0x3b0], 1
jmp 0x1002a041
and dword [ebp - 0x3b0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b0]
mov dword [ebp + eax - 0xcdc], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
add eax, 0x81d6e6e
cmp eax, dword [ebp - 0x3b0]
jle 0x1002a07a
mov dword [ebp - 0x910], 1
jmp 0x1002a081
and dword [ebp - 0x910], 0
cmp dword [ebp - 0x910], 0x8fe4de5a
jae 0x1002a099
mov dword [ebp - 0x51c], 1
jmp 0x1002a0a0
and dword [ebp - 0x51c], 0
cmp dword [ebp - 0x51c], 0
jle 0x1002a0b5
mov dword [ebp - 0x918], 1
jmp 0x1002a0bc
and dword [ebp - 0x918], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x354]
imul eax, dword [ebp - 0x918]
mov dword [ebp - 0x524], eax
cmp dword [ebp - 0x524], 0
jne 0x1002a0ed
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xcdc], 0
mov eax, dword [ebp - 0x150]
add eax, 0x5f0e77da
je 0x1002a10f
cmp dword [ebp - 0x920], 0
je 0x1002a10f
mov dword [ebp - 0x52c], 1
jmp 0x1002a116
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0xd69b
je 0x1002a12e
mov dword [ebp - 0x928], 1
jmp 0x1002a135
and dword [ebp - 0x928], 0
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x928]
jne 0x1002a14f
mov dword [ebp - 0x534], 1
jmp 0x1002a156
and dword [ebp - 0x534], 0
mov eax, dword [ebp - 0x534]
mov dword [ebp - 0x150], eax
push 2
lea ecx, [ebp - 0xa90]
call fcn.10009571
and dword [eax], 0
jmp 0x1002a198
push 2
lea ecx, [ebp - 0xa90]
call fcn.10009571
mov dword [ebp - 0x930], eax
mov eax, dword [ebp - 0x930]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x930]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa90]
call fcn.10009571
cmp dword [eax], 0xc
je 0x1002a651
mov dword [ebp - 0xe14], 0
mov dword [ebp - 0xe1c], 0
mov dword [ebp - 0xe24], 0x7689351f
mov dword [ebp - 0xe2c], 0xffffffff
mov dword [ebp - 0xe34], 0xfffffffd
mov dword [ebp - 0x80], 0
jmp 0x1002a1f0
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1002a206
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x10c0], 0x7a73d2d6
jmp 0x1002a1e9
mov dword [ebp - 0x80], 0
jmp 0x1002a216
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 3
jge 0x1002a22c
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0xebc], 1
jmp 0x1002a20f
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xebc]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0xebc], eax
push 2
lea ecx, [ebp - 0xcf4]
call fcn.10009504
mov byte [ebp - 4], 7
mov dword [ebp - 0x2bc], 0xe33a79cc
mov dword [ebp - 0x2b4], 0
jmp 0x1002a279
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1002a295
mov eax, dword [ebp - 0x2b4]
mov dword [ebp + eax*4 - 0xa68], 0
jmp 0x1002a26c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xa68], 0
jmp 0x1002a2c3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xa68]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xa68], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xa68], 0xfffffff9
jle 0x1002a300
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1002a2fe
push 0x1807
push 0x1009
push 0
push 0x680
push 0
call dword [sym.imp.USER32.dll_GetMenuStringW]
jmp 0x1002a2a8
mov dword [ebp - 0xe3c], 1
mov dword [ebp - 0x2c4], 0xfffffffc
mov dword [ebp - 0xe44], 0xffffffff
mov dword [ebp - 0x228], 0xd35da2a0
mov dword [ebp - 0xe4c], 0xe81de982
mov dword [ebp - 0xc20], 0x1b07fb07
mov dword [ebp - 0x220], 0
jmp 0x1002a355
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x1002a374
push dword [ebp - 0x220]
lea ecx, [ebp - 0xcf4]
call fcn.10009571
or dword [eax], 0xffffffff
jmp 0x1002a348
cmp dword [ebp - 0x94], 0
jne 0x1002a50c
cmp dword [ebp - 0x94], 0xfffffffe
jge 0x1002a396
mov dword [ebp - 0x53c], 1
jmp 0x1002a39d
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x53c]
neg eax
sub eax, 0x7848f28
cmp eax, 0x507b
jle 0x1002a3bd
mov dword [ebp - 0x938], 1
jmp 0x1002a3c4
and dword [ebp - 0x938], 0
push 1
lea ecx, [ebp - 0xa90]
call fcn.10009571
mov ecx, dword [ebp - 0x938]
cmp ecx, dword [eax]
je 0x1002a3e7
mov dword [ebp - 0xbbc], 1
jmp 0x1002a3ee
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0x544]
add eax, dword [ebp - 0xbc4]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x940]
mov dword [ebp - 0xe54], eax
cmp dword [ebp - 0x940], 0xffffffff
jg 0x1002a421
mov dword [ebp - 0x54c], 1
jmp 0x1002a428
and dword [ebp - 0x54c], 0
push 4
pop eax
shl eax, 1
mov esi, dword [ebp + eax - 0xda8]
imul eax, dword [ebp - 0x54c], 5
sub esi, eax
push 0
lea ecx, [ebp - 0xcf4]
call fcn.10009571
cmp esi, dword [eax]
jge 0x1002a45a
mov dword [ebp - 0x554], 1
jmp 0x1002a461
and dword [ebp - 0x554], 0
mov eax, dword [ebp - 0x55c]
mov dword [ebp - 0x948], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x948]
mov dword [ebp + eax - 0xbcc], ecx
mov eax, dword [ebp - 0x948]
cmp eax, dword [ebp - 0x554]
jne 0x1002a49a
mov dword [ebp - 0x950], 1
jmp 0x1002a4a1
and dword [ebp - 0x950], 0
imul eax, dword [ebp - 0x950], 0xfffa
cmp eax, dword [ebp - 0x55c]
jle 0x1002a4bf
mov dword [ebp - 0xbd4], 1
jmp 0x1002a4c6
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0x360]
inc eax
mov dword [ebp - 0x360], eax
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0xe5c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xda8]
mov dword [ebp - 0xe64], eax
push 2
lea ecx, [ebp - 0xa90]
call fcn.10009571
cmp dword [eax], 0
jne 0x1002a50c
and dword [ebp - 0x958], 0
jmp 0x1002a516
mov dword [ebp - 0x958], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xda8]
imul eax, dword [ebp - 0x958]
test eax, eax
jne 0x1002a53f
mov eax, 0x3309
test eax, eax
jne 0x1002a53f
and dword [ebp - 0x564], 0
jmp 0x1002a549
mov dword [ebp - 0x564], 1
push 0
lea ecx, [ebp - 0xcf4]
call fcn.10009571
mov ecx, dword [ebp - 0x564]
cmp ecx, dword [eax]
jl 0x1002a564
xor eax, eax
jne 0x1002a574
push 0xfffffffffffffffa
pop eax
test eax, eax
jne 0x1002a574
and dword [ebp - 0x3ac], 0
jmp 0x1002a57e
mov dword [ebp - 0x3ac], 1
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x3ac]
mov dword [ebp + eax - 0xda8], ecx
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0x2bc], 0xfffffffa
jmp 0x1002a5b6
mov eax, dword [ebp - 0x2bc]
inc eax
mov dword [ebp - 0x2bc], eax
cmp dword [ebp - 0x2bc], 7
jge 0x1002a63d
mov dword [ebp - 0x960], 0xfeddd8d7
mov dword [ebp - 0x228], 0x14
jmp 0x1002a5e2
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xfffffffa
jne 0x1002a62b
mov dword [ebp - 0x2c4], 0x10
jmp 0x1002a604
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 0x1d
jl 0x1002a629
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1002a627
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
jmp 0x1002a5f7
jmp 0x1002a5d5
mov eax, dword [ebp - 0x960]
dec eax
mov dword [ebp - 0x960], eax
jmp 0x1002a5a9
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcf4]
call fcn.1000956c
jmp 0x1002a174
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa90]
call fcn.1000956c
jmp 0x10029b12
mov dword [ebp - 0x48], 0xffffffff
mov dword [ebp - 0xc28], 0xffffffff
mov dword [ebp - 0x230], 0
jmp 0x1002a68f
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 4
jge 0x1002a6ab
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0x1090], 0
jmp 0x1002a682
cmp dword [ebp - 0x48], 0
jne 0x1002a6c3
cmp dword [ebp - 0x48], 0x1d1fc
jg 0x1002a6c3
and dword [ebp - 0x56c], 0
jmp 0x1002a6cd
mov dword [ebp - 0x56c], 1
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x56c]
cmp eax, dword [ebp - 0x48]
jne 0x1002a6e8
mov dword [ebp - 0x968], 1
jmp 0x1002a6ef
and dword [ebp - 0x968], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x968], eax
jne 0x1002a706
mov dword [ebp - 0x574], 1
jmp 0x1002a70d
and dword [ebp - 0x574], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x574], eax
jne 0x1002a724
mov dword [ebp - 0x57c], 1
jmp 0x1002a72b
and dword [ebp - 0x57c], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x970], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x970]
mov dword [ebp + eax - 0x1090], ecx
mov eax, dword [ebp - 0x970]
cmp eax, dword [ebp - 0x57c]
jge 0x1002a761
mov dword [ebp - 0x978], 1
jmp 0x1002a768
and dword [ebp - 0x978], 0
mov eax, dword [ebp - 0x978]
mov dword [ebp - 0xc28], eax
mov dword [ebp - 0x48], 0
jmp 0x1002a784
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xe
je 0x1002a7ab
mov byte [ebp - 0xcb], 0
movzx eax, byte [ebp - 0xcb]
test eax, eax
je 0x1002a7a9
push 0
push 0x169c
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x1002a77d
mov dword [ebp - 0xe6c], 0xfe387fb0
mov dword [ebp - 0x584], 0xaa39ed0
mov dword [ebp - 0x2cc], 0
jmp 0x1002a7d8
mov eax, dword [ebp - 0x2cc]
inc eax
mov dword [ebp - 0x2cc], eax
cmp dword [ebp - 0x2cc], 1
jge 0x1002a7f4
mov eax, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0xe74], 1
jmp 0x1002a7cb
mov byte [ebp - 0xdf], 0
movzx eax, byte [ebp - 0xdf]
test eax, eax
je 0x1002a824
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [ebp - 0x584]
inc eax
mov dword [ebp - 0x584], eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0xc30], 0xffffffff
mov dword [ebp - 0x238], 0
jmp 0x1002a85b
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 4
jge 0x1002a877
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0x1068], 0
jmp 0x1002a84e
cmp dword [ebp - 0x3c], 0
jne 0x1002a88f
cmp dword [ebp - 0x3c], 0x1d1fc
jg 0x1002a88f
and dword [ebp - 0x980], 0
jmp 0x1002a899
mov dword [ebp - 0x980], 1
mov eax, dword [ebp - 0x3c]
imul eax, dword [ebp - 0x980]
cmp eax, dword [ebp - 0x3c]
jne 0x1002a8b4
mov dword [ebp - 0x58c], 1
jmp 0x1002a8bb
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x58c], eax
jne 0x1002a8d2
mov dword [ebp - 0x988], 1
jmp 0x1002a8d9
and dword [ebp - 0x988], 0
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x988], eax
jne 0x1002a8f0
mov dword [ebp - 0x5c8], 1
jmp 0x1002a8f7
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x990], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x990]
mov dword [ebp + eax - 0x1068], ecx
mov eax, dword [ebp - 0x990]
cmp eax, dword [ebp - 0x5c8]
jge 0x1002a92d
mov dword [ebp - 0x5c0], 1
jmp 0x1002a934
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0x3c], 0
jmp 0x1002a950
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0xe
je 0x1002a977
mov byte [ebp - 0xdb], 0
movzx eax, byte [ebp - 0xdb]
test eax, eax
je 0x1002a975
push 0
push 0x169c
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x1002a949
mov dword [ebp - 0xe7c], 0xfe387fb0
mov dword [ebp - 0x97c], 0xaa39ed0
mov dword [ebp - 0x2d4], 0
jmp 0x1002a9a4
mov eax, dword [ebp - 0x2d4]
inc eax
mov dword [ebp - 0x2d4], eax
cmp dword [ebp - 0x2d4], 1
jge 0x1002a9c0
mov eax, dword [ebp - 0x2d4]
mov dword [ebp + eax*4 - 0xe88], 1
jmp 0x1002a997
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1002a9f0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov eax, dword [ebp - 0x97c]
inc eax
mov dword [ebp - 0x97c], eax
mov dword [ebp - 0xe94], 0xa53d06ce
mov byte [ebp - 0xe3], 0
movzx eax, byte [ebp - 0xe3]
test eax, eax
je 0x1002aa21
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov byte [ebp - 0xcf], 0
movzx eax, byte [ebp - 0xcf]
test eax, eax
je 0x1002aa48
push 0
push 0
push 0xb83
push 0
push 1
push 0
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0x44], 0xffffffff
mov dword [ebp - 0xc38], 0xffffffff
mov dword [ebp - 0x240], 0
jmp 0x1002aa72
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 4
jge 0x1002aa8e
mov eax, dword [ebp - 0x240]
mov dword [ebp + eax*4 - 0x1040], 0
jmp 0x1002aa65
cmp dword [ebp - 0x44], 0
jne 0x1002aaa6
cmp dword [ebp - 0x44], 0x1d1fc
jg 0x1002aaa6
and dword [ebp - 0x5ac], 0
jmp 0x1002aab0
mov dword [ebp - 0x5ac], 1
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x5ac]
cmp eax, dword [ebp - 0x44]
jne 0x1002aacb
mov dword [ebp - 0x7dc], 1
jmp 0x1002aad2
and dword [ebp - 0x7dc], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x7dc], eax
jne 0x1002aae9
mov dword [ebp - 0x5b4], 1
jmp 0x1002aaf0
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x5b4], eax
jne 0x1002ab07
mov dword [ebp - 0x5bc], 1
jmp 0x1002ab0e
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x8f4], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8f4]
mov dword [ebp + eax - 0x1040], ecx
mov eax, dword [ebp - 0x8f4]
cmp eax, dword [ebp - 0x5bc]
jge 0x1002ab44
mov dword [ebp - 0x7e4], 1
jmp 0x1002ab4b
and dword [ebp - 0x7e4], 0
mov eax, dword [ebp - 0x7e4]
mov dword [ebp - 0xc38], eax
mov dword [ebp - 0x44], 0
jmp 0x1002ab67
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0xe
je 0x1002ab8e
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1002ab8c
push 0
push 0x169c
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
jmp 0x1002ab60
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x148], 0xffffffff
mov dword [ebp - 0x108], 1
mov dword [ebp - 0xadc], 0
mov dword [ebp - 0x65c], 0xa6dd7547
mov dword [ebp - 0x2e4], 0xffffffff
push 2
lea ecx, [ebp - 0xcd0]
call fcn.10009504
mov dword [ebp - 4], 8
mov dword [ebp - 0x68], 0
jmp 0x1002abeb
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1002abfe
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x38], 0xc116e074
jmp 0x1002abe4
mov dword [ebp - 0x68], 0
jmp 0x1002ac0e
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1002ac2a
push dword [ebp - 0x68]
lea ecx, [ebp - 0xcd0]
call fcn.10009571
mov dword [eax], 2
jmp 0x1002ac07
mov dword [ebp - 0x30], 0
jmp 0x1002ac3a
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x16
jne 0x1002b076
mov dword [ebp - 0x20], 0xfffffff7
mov dword [ebp - 0x20], 4
jmp 0x1002ac5b
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xffffffe3
je 0x1002b04e
mov dword [ebp - 0xbf8], 0xd77cccae
mov dword [ebp - 0x5fc], 0xdb40437e
mov dword [ebp - 0x2dc], 0
jmp 0x1002ac92
mov eax, dword [ebp - 0x2dc]
inc eax
mov dword [ebp - 0x2dc], eax
cmp dword [ebp - 0x2dc], 4
jge 0x1002acae
mov eax, dword [ebp - 0x2dc]
mov dword [ebp + eax*4 - 0xabc], 1
jmp 0x1002ac85
mov byte [ebp - 0xd1], 0
movzx eax, byte [ebp - 0xd1]
test eax, eax
je 0x1002acc8
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0xabc], 0xffffffe2
jmp 0x1002acf3
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0xabc], 9
jne 0x1002b049
mov dword [ebp - 0x5c4], 0x23703acb
mov dword [ebp - 0xc40], 0x658d83f7
mov dword [ebp - 0x370], 0xc46d
mov dword [ebp - 0x248], 0
jmp 0x1002ad3d
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x1002ad59
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0xe84], 0x791f9e6a
jmp 0x1002ad30
mov eax, dword [ebp - 0x5c4]
inc eax
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x20], 0
jge 0x1002ad78
mov dword [ebp - 0x9c4], 1
jmp 0x1002ad7f
and dword [ebp - 0x9c4], 0
cmp dword [ebp - 0x9c4], 0
jne 0x1002ad94
mov dword [ebp - 0x368], 1
jmp 0x1002ad9b
and dword [ebp - 0x368], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x368]
mov dword [ebp + eax - 0xe84], ecx
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x368], eax
jle 0x1002adc5
mov dword [ebp - 0x5cc], 1
jmp 0x1002adcc
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x5cc], eax
jge 0x1002adf0
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1002adf0
mov dword [ebp - 0x3b4], 1
jmp 0x1002adf7
and dword [ebp - 0x3b4], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x3b4]
mov dword [ebp + eax - 0x38], ecx
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xabc]
cmp dword [ebp - 0x3b4], eax
jle 0x1002ae2d
mov eax, 0xaa4f69a7
test eax, eax
jne 0x1002ae2d
and dword [ebp - 0x7ec], 0
jmp 0x1002ae37
mov dword [ebp - 0x7ec], 1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x7ec], eax
jg 0x1002ae4e
mov dword [ebp - 0x5d4], 1
jmp 0x1002ae55
and dword [ebp - 0x5d4], 0
cmp dword [ebp - 0x5d4], 1
jle 0x1002ae6a
mov dword [ebp - 0x8fc], 1
jmp 0x1002ae71
and dword [ebp - 0x8fc], 0
mov eax, dword [ebp - 0xc40]
cmp dword [ebp - 0x8fc], eax
je 0x1002ae86
cmp dword [ebp - 0x370], 0
cmp dword [ebp - 0x30], 0
je 0x1002aea5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x38], 0
je 0x1002aea5
mov dword [ebp - 0x5dc], 1
jmp 0x1002aeac
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0x370]
cmp dword [ebp - 0x5dc], eax
jne 0x1002aec7
xor eax, eax
jne 0x1002aec7
and dword [ebp - 0x7f4], 0
jmp 0x1002aed1
mov dword [ebp - 0x7f4], 1
mov eax, 0x289fff12
sub eax, dword [ebp - 0x7f4]
cmp eax, 0xfffc
je 0x1002aeef
mov dword [ebp - 0x5e4], 1
jmp 0x1002aef6
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x370]
cmp dword [ebp - 0x5e4], eax
jge 0x1002af10
mov dword [ebp - 0x984], 1
jmp 0x1002af17
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x984]
sub eax, ecx
jne 0x1002af33
mov dword [ebp - 0x5ec], 1
jmp 0x1002af3a
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x5ec], eax
jne 0x1002af51
mov dword [ebp - 0xc34], 1
jmp 0x1002af58
and dword [ebp - 0xc34], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xabc]
mov dword [ebp - 0xf20], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xbf8]
cmp dword [ebp + eax - 0xabc], ecx
je 0x1002af8a
mov dword [ebp - 0x7fc], 1
jmp 0x1002af91
and dword [ebp - 0x7fc], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x7fc]
cmp eax, dword [ebp - 0x5fc]
jne 0x1002afb2
mov dword [ebp - 0x5f4], 1
jmp 0x1002afb9
and dword [ebp - 0x5f4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xabc]
imul eax, dword [ebp - 0x5f4]
cmp eax, 9
jle 0x1002afdd
jmp 0x1002ac54
mov dword [ebp - 0x20], 0
jmp 0x1002b05e
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1002b071
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x38], 0xfffffffb
jmp 0x1002b057
jmp 0x1002ac33
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0x108]
jne 0x1002b096
mov eax, 0x412d
test eax, eax
jne 0x1002b096
and dword [ebp - 0xa1c], 0
jmp 0x1002b0a0
mov dword [ebp - 0xa1c], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp eax, dword [ebp - 0xa1c]
jl 0x1002b0be
mov dword [ebp - 0xae0], 1
jmp 0x1002b0c5
and dword [ebp - 0xae0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x108]
mov ecx, dword [ebp - 0x65c]
lea eax, [eax + ecx - 0x8f94]
cmp dword [ebp - 0xadc], eax
jle 0x1002b0fc
mov dword [ebp - 0x60c], 1
jmp 0x1002b103
and dword [ebp - 0x60c], 0
mov eax, dword [ebp - 0x108]
cmp dword [ebp - 0x60c], eax
jge 0x1002b11d
mov dword [ebp - 0x80c], 1
jmp 0x1002b124
and dword [ebp - 0x80c], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x80c], eax
jne 0x1002b13e
mov dword [ebp - 0x614], 1
jmp 0x1002b145
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
add eax, 0xc4a2
cmp eax, 0xdce64f81
jb 0x1002b163
mov dword [ebp - 0x90c], 1
jmp 0x1002b16a
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x90c], eax
jle 0x1002b181
mov dword [ebp - 0x61c], 1
jmp 0x1002b188
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x61c], eax
jl 0x1002b1a2
mov dword [ebp - 0x814], 1
jmp 0x1002b1a9
and dword [ebp - 0x814], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x814], eax
jle 0x1002b1c3
mov dword [ebp - 0x624], 1
jmp 0x1002b1ca
and dword [ebp - 0x624], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x624], eax
jne 0x1002b1e4
mov dword [ebp - 0x98c], 1
jmp 0x1002b1eb
and dword [ebp - 0x98c], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x98c], eax
jle 0x1002b202
mov dword [ebp - 0x62c], 1
jmp 0x1002b209
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x62c], eax
jne 0x1002b227
mov dword [ebp - 0x81c], 1
jmp 0x1002b22e
and dword [ebp - 0x81c], 0
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
je 0x1002b249
mov dword [ebp - 0x634], 1
jmp 0x1002b250
and dword [ebp - 0x634], 0
cmp dword [ebp - 0x634], 0
jne 0x1002b269
push 9
pop eax
test eax, eax
jne 0x1002b269
and dword [ebp - 0x914], 0
jmp 0x1002b273
mov dword [ebp - 0x914], 1
cmp dword [ebp - 0x914], 0xfffffff8
jle 0x1002b288
mov dword [ebp - 0x63c], 1
jmp 0x1002b28f
and dword [ebp - 0x63c], 0
mov eax, dword [ebp - 0x108]
cmp eax, dword [ebp - 0x63c]
jle 0x1002b2a9
mov dword [ebp - 0x824], 1
jmp 0x1002b2b0
and dword [ebp - 0x824], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x824], eax
jge 0x1002b2ca
mov dword [ebp - 0x644], 1
jmp 0x1002b2d1
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x644], eax
je 0x1002b2f1
cmp dword [ebp - 0x30], 0
je 0x1002b2f1
mov dword [ebp - 0x9cc], 1
jmp 0x1002b2f8
and dword [ebp - 0x9cc], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x9cc], eax
jge 0x1002b312
mov dword [ebp - 0x64c], 1
jmp 0x1002b319
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x108], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
imul eax, dword [ebp - 0x108]
mov dword [ebp - 0x82c], eax
push 0
lea ecx, [ebp - 0xcd0]
call fcn.10009571
mov ecx, dword [ebp - 0x82c]
mov dword [eax], ecx
cmp dword [ebp - 0x82c], 0
jb 0x1002b366
mov dword [ebp - 0x654], 1
jmp 0x1002b36d
and dword [ebp - 0x654], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x38]
cmp dword [ebp - 0x654], eax
jl 0x1002b38b
mov dword [ebp - 0x91c], 1
jmp 0x1002b392
and dword [ebp - 0x91c], 0
mov eax, dword [ebp - 0x91c]
add eax, 0xe90e
mov dword [ebp - 0x65c], eax
push 0
lea ecx, [ebp - 0xcd0]
call fcn.10009571
push 4
pop ecx
imul ecx, ecx, 0
mov ecx, dword [ebp + ecx - 0x38]
cmp dword [eax], ecx
jl 0x1002b3ca
mov dword [ebp - 0x834], 1
jmp 0x1002b3d1
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x148]
imul eax, dword [ebp - 0x834]
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x38], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcd0]
call fcn.1000956c
movzx eax, byte [0x14b1f440]
test eax, eax
je 0x1002b415
mov esi, 0x10673794
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x10030182
mov dword [ebp - 0xf30], 0x68cd546
mov dword [ebp - 0xf38], 1
mov dword [ebp - 0x664], 0xc328129e
mov dword [ebp - 0x250], 0
jmp 0x1002b44c
cmp dword [ebp - 0x250], 1
jge 0x1002b468
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x110], 0xf1124f01
jmp 0x1002b43f
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1002b495
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret