Function at 0x10009229
Capabilities:
Create directory
Set thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10085f99
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x15cc
call fcn.10081890
push esi
push edi
mov dword [ebp - 0x208], 0xfffffff8
mov dword [ebp - 0x204], 0x5c0de450
mov dword [ebp - 0x1fc], 0xddbf4df7
mov dword [ebp - 0x450], 0xda3bb1d4
mov dword [ebp - 0xd38], 3
mov dword [ebp - 0xf74], 0x939efd91
mov dword [ebp - 0x3f4], 0
jmp 0x100092a2
mov eax, dword [ebp - 0x3f4]
inc eax
mov dword [ebp - 0x3f4], eax
cmp dword [ebp - 0x3f4], 2
jge 0x100092be
mov eax, dword [ebp - 0x3f4]
mov dword [ebp + eax*4 - 0x294], 0xc80fc3a0
jmp 0x10009295
cmp dword [ebp - 0x208], 0
je 0x10009367
cmp dword [ebp - 0x208], 0
je 0x10009367
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
mov dword [ebp - 0x148c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
mov dword [ebp - 0x12e8], eax
cmp dword [ebp - 0x208], 0
je 0x1000931c
mov eax, 0x5bfb
test eax, eax
je 0x1000931c
mov dword [ebp - 0xbd4], 1
jmp 0x10009323
and dword [ebp - 0xbd4], 0
mov eax, dword [ebp - 0xbd4]
sub eax, 4
cmp eax, 0x3dc99cdf
jg 0x1000933f
mov dword [ebp - 0xd00], 1
jmp 0x10009346
and dword [ebp - 0xd00], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
add eax, dword [ebp - 0xd00]
je 0x10009367
mov dword [ebp - 0xd08], 1
jmp 0x1000936e
and dword [ebp - 0xd08], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0xd08], eax
jle 0x1000938f
mov dword [ebp - 0xd10], 1
jmp 0x10009396
and dword [ebp - 0xd10], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xd10]
sub ecx, dword [ebp + eax - 0x294]
cmp ecx, 1
je 0x100093ba
mov dword [ebp - 0xd18], 1
jmp 0x100093c1
and dword [ebp - 0xd18], 0
cmp dword [ebp - 0xd18], 0x2167fa5c
jle 0x100093d9
mov dword [ebp - 0xdf4], 1
jmp 0x100093e0
and dword [ebp - 0xdf4], 0
mov eax, dword [ebp - 0x208]
mov dword [ebp - 0x12f0], eax
mov eax, dword [ebp - 0x204]
mov dword [ebp - 0x12f8], eax
mov dword [ebp - 0x1fc], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x1fc], eax
jne 0x10009423
mov dword [ebp - 0xd20], 1
jmp 0x1000942a
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xd20], eax
jle 0x10009444
mov dword [ebp - 0xd28], 1
jmp 0x1000944b
and dword [ebp - 0xd28], 0
mov eax, dword [ebp - 0xd28]
mov dword [ebp - 0x450], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
cmp dword [ebp - 0x450], eax
jl 0x10009478
mov dword [ebp - 0xd30], 1
jmp 0x1000947f
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0xd30]
mov dword [ebp - 0xd38], eax
mov eax, dword [ebp - 0xd38]
cmp dword [ebp - 0x204], eax
jg 0x100094a5
mov dword [ebp - 0xd40], 1
jmp 0x100094ac
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0xd40]
sub eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0x1fc]
je 0x100094cc
mov dword [ebp - 0xd48], 1
jmp 0x100094d3
and dword [ebp - 0xd48], 0
mov eax, dword [ebp - 0x1fc]
cmp eax, dword [ebp - 0xd48]
je 0x100094ed
mov dword [ebp - 0xd50], 1
jmp 0x100094f4
and dword [ebp - 0xd50], 0
mov eax, dword [ebp - 0x208]
cmp dword [ebp - 0xd50], eax
jne 0x1000950e
mov dword [ebp - 0xd58], 1
jmp 0x10009515
and dword [ebp - 0xd58], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x294]
imul eax, dword [ebp - 0xd58]
mov dword [ebp - 0x1fc], eax
mov eax, dword [ebp - 0x1fc]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
jae 0x1000954d
mov dword [ebp - 0xd60], 1
jmp 0x10009554
and dword [ebp - 0xd60], 0
mov eax, dword [ebp - 0x208]
cmp eax, dword [ebp - 0xd60]
je 0x10009584
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x294], 0
jne 0x10009584
mov eax, 0xa8b1460d
test eax, eax
jne 0x10009584
and dword [ebp - 0xd68], 0
jmp 0x1000958e
mov dword [ebp - 0xd68], 1
mov eax, dword [ebp - 0xd68]
dec eax
jne 0x100095b9
cmp dword [ebp - 0x450], 0
jne 0x100095b9
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x294], 0
jne 0x100095b9
and dword [ebp - 0xd70], 0
jmp 0x100095c3
mov dword [ebp - 0xd70], 1
mov eax, dword [ebp - 0x204]
cmp dword [ebp - 0xd70], eax
jne 0x100095dd
mov dword [ebp - 0xd78], 1
jmp 0x100095e4
and dword [ebp - 0xd78], 0
mov eax, dword [ebp - 0x204]
cmp eax, dword [ebp - 0xd78]
jge 0x100095fe
mov dword [ebp - 0xbb8], 1
jmp 0x10009605
and dword [ebp - 0xbb8], 0
cmp dword [ebp - 0xbb8], 0xd145
jne 0x1000961d
mov dword [ebp - 0x570], 1
jmp 0x10009624
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0xffffffff
jge 0x10009639
mov dword [ebp - 0xbc0], 1
jmp 0x10009640
and dword [ebp - 0xbc0], 0
mov eax, dword [ebp - 0xbc0]
mov dword [ebp - 0xf74], eax
mov dword [ebp - 0x1d0], 0xfffffff8
mov dword [ebp - 0x198], 0x5c0de450
mov dword [ebp - 0x20c], 0xddbf4df7
mov dword [ebp - 0x4ec], 0xda3bb1d4
mov dword [ebp - 0x598], 3
mov dword [ebp - 0xf84], 0x939efd91
mov dword [ebp - 0x3fc], 0
jmp 0x100096a1
mov eax, dword [ebp - 0x3fc]
inc eax
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 2
jge 0x100096bd
mov eax, dword [ebp - 0x3fc]
mov dword [ebp + eax*4 - 0x2ac], 0xc80fc3a0
jmp 0x10009694
cmp dword [ebp - 0x1d0], 0
je 0x10009766
cmp dword [ebp - 0x1d0], 0
je 0x10009766
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
mov dword [ebp - 0x1300], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
mov dword [ebp - 0x1308], eax
cmp dword [ebp - 0x1d0], 0
je 0x1000971b
mov eax, 0x5bfb
test eax, eax
je 0x1000971b
mov dword [ebp - 0x578], 1
jmp 0x10009722
and dword [ebp - 0x578], 0
mov eax, dword [ebp - 0x578]
sub eax, 4
cmp eax, 0x3dc99cdf
jg 0x1000973e
mov dword [ebp - 0xbc8], 1
jmp 0x10009745
and dword [ebp - 0xbc8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
add eax, dword [ebp - 0xbc8]
je 0x10009766
mov dword [ebp - 0x580], 1
jmp 0x1000976d
and dword [ebp - 0x580], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x580], eax
jle 0x1000978e
mov dword [ebp - 0xbd0], 1
jmp 0x10009795
and dword [ebp - 0xbd0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xbd0]
sub ecx, dword [ebp + eax - 0x2ac]
cmp ecx, 1
je 0x100097b9
mov dword [ebp - 0x588], 1
jmp 0x100097c0
and dword [ebp - 0x588], 0
cmp dword [ebp - 0x588], 0x2167fa5c
jle 0x100097d8
mov dword [ebp - 0xf7c], 1
jmp 0x100097df
and dword [ebp - 0xf7c], 0
mov eax, dword [ebp - 0x1d0]
mov dword [ebp - 0x1310], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x1318], eax
mov dword [ebp - 0x20c], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x20c], eax
jne 0x10009822
mov dword [ebp - 0xbd8], 1
jmp 0x10009829
and dword [ebp - 0xbd8], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0xbd8], eax
jle 0x10009843
mov dword [ebp - 0x590], 1
jmp 0x1000984a
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x4ec], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
cmp dword [ebp - 0x4ec], eax
jl 0x10009877
mov dword [ebp - 0xbe0], 1
jmp 0x1000987e
and dword [ebp - 0xbe0], 0
mov eax, dword [ebp - 0xbe0]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
cmp dword [ebp - 0x198], eax
jg 0x100098a4
mov dword [ebp - 0xbe8], 1
jmp 0x100098ab
and dword [ebp - 0xbe8], 0
mov eax, dword [ebp - 0xbe8]
sub eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x20c]
je 0x100098cb
mov dword [ebp - 0x5a0], 1
jmp 0x100098d2
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x5a0]
je 0x100098ec
mov dword [ebp - 0xbf0], 1
jmp 0x100098f3
and dword [ebp - 0xbf0], 0
mov eax, dword [ebp - 0x1d0]
cmp dword [ebp - 0xbf0], eax
jne 0x1000990d
mov dword [ebp - 0x5a8], 1
jmp 0x10009914
and dword [ebp - 0x5a8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2ac]
imul eax, dword [ebp - 0x5a8]
mov dword [ebp - 0x20c], eax
mov eax, dword [ebp - 0x20c]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
jae 0x1000994c
mov dword [ebp - 0xbf8], 1
jmp 0x10009953
and dword [ebp - 0xbf8], 0
mov eax, dword [ebp - 0x1d0]
cmp eax, dword [ebp - 0xbf8]
je 0x10009983
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2ac], 0
jne 0x10009983
mov eax, 0xa8b1460d
test eax, eax
jne 0x10009983
and dword [ebp - 0x5b0], 0
jmp 0x1000998d
mov dword [ebp - 0x5b0], 1
mov eax, dword [ebp - 0x5b0]
dec eax
jne 0x100099b8
cmp dword [ebp - 0x4ec], 0
jne 0x100099b8
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2ac], 0
jne 0x100099b8
and dword [ebp - 0xc00], 0
jmp 0x100099c2
mov dword [ebp - 0xc00], 1
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0xc00], eax
jne 0x100099dc
mov dword [ebp - 0x5b8], 1
jmp 0x100099e3
and dword [ebp - 0x5b8], 0
mov eax, dword [ebp - 0x198]
cmp eax, dword [ebp - 0x5b8]
jge 0x100099fd
mov dword [ebp - 0xc08], 1
jmp 0x10009a04
and dword [ebp - 0xc08], 0
cmp dword [ebp - 0xc08], 0xd145
jne 0x10009a1c
mov dword [ebp - 0x5c0], 1
jmp 0x10009a23
and dword [ebp - 0x5c0], 0
cmp dword [ebp - 0x5c0], 0xffffffff
jge 0x10009a38
mov dword [ebp - 0xc10], 1
jmp 0x10009a3f
and dword [ebp - 0xc10], 0
mov eax, dword [ebp - 0xc10]
mov dword [ebp - 0xf84], eax
mov dword [ebp - 0x1a0], 0xfffffff8
push 2
lea ecx, [ebp - 0x14c8]
call fcn.100189bc
and dword [ebp - 4], 0
mov dword [ebp - 0x404], 0
jmp 0x10009a7f
mov eax, dword [ebp - 0x404]
inc eax
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 2
jge 0x10009aa1
push dword [ebp - 0x404]
lea ecx, [ebp - 0x14c8]
call fcn.10018a43
mov dword [eax], 0x1928
jmp 0x10009a72
mov byte [ebp - 0x157], 0
movzx eax, byte [ebp - 0x157]
test eax, eax
je 0x10009abb
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov byte [ebp - 0x13f], 0
movzx eax, byte [ebp - 0x13f]
test eax, eax
je 0x10009adb
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14c8]
call fcn.10018a3e
mov dword [ebp - 0x1d8], 0x5c0de450
mov dword [ebp - 0x80], 0xdde0bcd8
push 3
lea ecx, [ebp - 0x1088]
call fcn.100189bc
mov dword [ebp - 4], 1
mov dword [ebp - 0x514], 7
mov dword [ebp - 0xc40], 9
mov dword [ebp - 0xfec], 0x11f31773
mov dword [ebp - 0xb8], 0
jmp 0x10009b46
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x10009b68
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x1088]
call fcn.10018a43
mov dword [eax], 0xbacc5d9b
jmp 0x10009b39
mov dword [ebp - 0xb8], 0
jmp 0x10009b81
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 1
jge 0x10009b9d
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x51c], 1
jmp 0x10009b74
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0xfffffff9
jmp 0x10009bb4
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x23
jle 0x10009f2c
mov dword [ebp - 0xf8c], 2
mov dword [ebp - 0x504], 0xe1b88146
mov dword [ebp - 0xfbc], 0x5ee28fde
mov dword [ebp - 0xfe4], 0xffffffff
mov dword [ebp - 0x1378], 0x23e93d0b
mov dword [ebp - 0x1380], 0x9e9d60a2
mov dword [ebp - 0xfc4], 0
mov dword [ebp - 0xfb4], 0x720348f4
mov dword [ebp - 0x1388], 0x4307a329
mov dword [ebp - 0x1390], 0xfffffffd
mov dword [ebp - 0xfd4], 0x8e10e5e5
mov dword [ebp - 0x4f4], 0x260389a9
mov dword [ebp - 0x40c], 0
jmp 0x10009c4f
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
cmp dword [ebp - 0x40c], 1
jge 0x10009c6b
mov eax, dword [ebp - 0x40c]
mov dword [ebp + eax*4 - 0xfcc], 1
jmp 0x10009c42
mov eax, dword [ebp - 0xf8c]
mov dword [ebp - 0xf94], eax
mov eax, dword [ebp - 0x4f4]
mov dword [ebp - 0xfac], eax
mov eax, dword [ebp - 0x4f4]
dec eax
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0xf94]
cmp eax, dword [ebp - 0xfac]
jg 0x10009caa
mov dword [ebp - 0x5f8], 1
jmp 0x10009cb1
and dword [ebp - 0x5f8], 0
push 1
lea ecx, [ebp - 0x1088]
call fcn.10018a43
mov dword [eax], 1
cmp dword [ebp - 0x504], 0xffffffff
jg 0x10009cd9
mov dword [ebp - 0x4fc], 1
jmp 0x10009ce0
and dword [ebp - 0x4fc], 0
push 2
lea ecx, [ebp - 0x1088]
call fcn.10018a43
mov ecx, dword [ebp - 0x4fc]
mov dword [eax], ecx
cmp dword [ebp - 0x4fc], 0xb9ce
jne 0x10009d0d
mov dword [ebp - 0x5c8], 1
jmp 0x10009d14
and dword [ebp - 0x5c8], 0
mov eax, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0x5c8]
test eax, eax
je 0x10009d3a
mov eax, 0x95866b38
test eax, eax
je 0x10009d3a
mov dword [ebp - 0xc18], 1
jmp 0x10009d41
and dword [ebp - 0xc18], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0xc18], eax
je 0x10009d5e
cmp dword [ebp - 0xfbc], 0
jne 0x10009d5e
and dword [ebp - 0x5d0], 0
jmp 0x10009d68
mov dword [ebp - 0x5d0], 1
mov eax, dword [ebp - 0x5d0]
mov dword [ebp - 0x514], eax
cmp dword [ebp - 0x514], 1
jg 0x10009d89
mov dword [ebp - 0xc20], 1
jmp 0x10009d90
and dword [ebp - 0xc20], 0
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x504], eax
cmp dword [ebp - 0x504], 0
je 0x10009db7
cmp dword [ebp - 0x80], 0
je 0x10009db7
mov dword [ebp - 0x5d8], 1
jmp 0x10009dbe
and dword [ebp - 0x5d8], 0
mov eax, 0xe5a82a6f
sub eax, dword [ebp - 0x5d8]
add eax, dword [ebp - 0xfc4]
je 0x10009ded
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xfcc], 0
je 0x10009ded
mov dword [ebp - 0xc28], 1
jmp 0x10009df4
and dword [ebp - 0xc28], 0
mov eax, dword [ebp - 0xfd4]
cmp dword [ebp - 0xc28], eax
jle 0x10009e17
cmp dword [ebp - 0x514], 0
je 0x10009e17
mov dword [ebp - 0x5e0], 1
jmp 0x10009e1e
and dword [ebp - 0x5e0], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x5e0], eax
je 0x10009e35
mov dword [ebp - 0xc30], 1
jmp 0x10009e3c
and dword [ebp - 0xc30], 0
cmp dword [ebp - 0xc30], 0
jl 0x10009e51
mov dword [ebp - 0x5e8], 1
jmp 0x10009e58
and dword [ebp - 0x5e8], 0
mov eax, dword [ebp - 0x80]
cmp dword [ebp - 0x5e8], eax
jge 0x10009e6f
mov dword [ebp - 0xc38], 1
jmp 0x10009e76
and dword [ebp - 0xc38], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
cmp dword [ebp - 0xc38], eax
je 0x10009e97
mov dword [ebp - 0x5f0], 1
jmp 0x10009e9e
and dword [ebp - 0x5f0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
cmp dword [ebp - 0x5f0], eax
je 0x10009ebf
mov dword [ebp - 0xfdc], 1
jmp 0x10009ec6
and dword [ebp - 0xfdc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x51c]
mov dword [ebp - 0x1398], eax
mov eax, dword [ebp - 0xfe4]
inc eax
mov dword [ebp - 0xc40], eax
imul eax, dword [ebp - 0xc40], 0x42c5
mov ecx, dword [ebp - 0x80]
add ecx, dword [ebp - 0x5f8]
cmp ecx, eax
jle 0x10009f09
mov dword [ebp - 0xc48], 1
jmp 0x10009f10
and dword [ebp - 0xc48], 0
mov eax, dword [ebp - 0xc48]
mov dword [ebp - 0xfec], eax
cmp dword [ebp - 0x80], 0
je 0x10009f27
jmp 0x10009bad
jmp 0x10009bad
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1088]
call fcn.10018a3e
mov dword [ebp - 0x1f0], 0xddbf4df7
mov dword [ebp - 0xe0], 7
mov dword [ebp - 0x600], 0x147909b7
mov dword [ebp - 0xff4], 0xffffffff
mov dword [ebp - 0x608], 0xe9120837
mov dword [ebp - 0xffc], 0x796840eb
mov dword [ebp - 0x414], 0
jmp 0x10009f90
mov eax, dword [ebp - 0x414]
inc eax
mov dword [ebp - 0x414], eax
cmp dword [ebp - 0x414], 2
jge 0x10009fac
mov eax, dword [ebp - 0x414]
mov dword [ebp + eax*4 - 0x1324], 0x6950a4ba
jmp 0x10009f83
mov eax, dword [ebp - 0xe0]
mov dword [ebp - 0x600], eax
mov eax, dword [ebp - 0x600]
mov dword [ebp - 0xff4], eax
cmp dword [ebp - 0xe0], 1
je 0x10009fd9
mov dword [ebp - 0xc50], 1
jmp 0x10009fe0
and dword [ebp - 0xc50], 0
mov eax, dword [ebp - 0xc50]
mov dword [ebp - 0x608], eax
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x608], eax
jg 0x1000a006
mov dword [ebp - 0xc58], 1
jmp 0x1000a00d
and dword [ebp - 0xc58], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0xc58], eax
jne 0x1000a027
mov dword [ebp - 0x524], 1
jmp 0x1000a02e
and dword [ebp - 0x524], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x524]
mov dword [ebp + eax - 0x1324], ecx
mov eax, dword [ebp - 0xe0]
sub eax, dword [ebp - 0xe0]
add eax, dword [ebp - 0x524]
cmp eax, 0x3245f1db
jle 0x1000a066
mov dword [ebp - 0x610], 1
jmp 0x1000a06d
and dword [ebp - 0x610], 0
mov eax, dword [ebp - 0xe0]
cmp dword [ebp - 0x610], eax
jle 0x1000a090
cmp dword [ebp - 0xe0], 0
je 0x1000a090
mov dword [ebp - 0xc60], 1
jmp 0x1000a097
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xc60]
mov dword [ebp - 0xffc], eax
mov dword [ebp - 0x530], 0xda3bb1d4
mov dword [ebp - 0x688], 3
mov dword [ebp - 0x1040], 0x939efd91
mov dword [ebp - 0x424], 9
mov dword [ebp - 0x13a0], 0x21c3a23f
mov dword [ebp - 0x13a8], 0x7ecc2443
mov dword [ebp - 0x13b0], 1
mov dword [ebp - 0x618], 0xe7528ace
mov dword [ebp - 0x41c], 0
jmp 0x1000a10c
mov eax, dword [ebp - 0x41c]
inc eax
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 1
jge 0x1000a128
mov eax, dword [ebp - 0x41c]
mov dword [ebp + eax*4 - 0x13b8], 1
jmp 0x1000a0ff
mov dword [ebp - 0x424], 0xffffffeb
jmp 0x1000a141
mov eax, dword [ebp - 0x424]
inc eax
mov dword [ebp - 0x424], eax
cmp dword [ebp - 0x424], 0xfffffff1
jl 0x1000a175
mov dword [ebp - 0x13c0], 0x6652
mov dword [ebp - 0x13c8], 0xb7f609b2
mov dword [ebp - 0x618], 1
cmp dword [ebp - 0x618], 0
je 0x1000a173
jmp 0x1000a134
jmp 0x1000a134
mov dword [ebp - 0x42c], 0
jmp 0x1000a18e
mov eax, dword [ebp - 0x42c]
inc eax
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 2
jge 0x1000a1aa
mov eax, dword [ebp - 0x42c]
mov dword [ebp + eax*4 - 0x2a4], 0xc80fc3a0
jmp 0x1000a181
mov dword [ebp - 0x53c], 0xfffffffe
mov dword [ebp - 0x274], 1
mov dword [ebp - 0xca8], 0xffffffff
mov dword [ebp - 0x1014], 0xe88b1495
mov dword [ebp - 0xcc], 0
jmp 0x1000a1eb
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000a207
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x29c], 0
jmp 0x1000a1de
mov dword [ebp - 0xcc], 0
jmp 0x1000a220
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x1000a23c
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x1114], 1
jmp 0x1000a213
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jge 0x1000a265
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jne 0x1000a265
and dword [ebp - 0xc68], 0
jmp 0x1000a26f
mov dword [ebp - 0xc68], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
cmp dword [ebp - 0xc68], eax
jle 0x1000a290
mov dword [ebp - 0x620], 1
jmp 0x1000a297
and dword [ebp - 0x620], 0
cmp dword [ebp - 0x620], 0xff23
jge 0x1000a2bc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jne 0x1000a2bc
and dword [ebp - 0xc70], 0
jmp 0x1000a2c6
mov dword [ebp - 0xc70], 1
cmp dword [ebp - 0xc70], 0x409884cb
je 0x1000a2de
mov dword [ebp - 0x628], 1
jmp 0x1000a2e5
and dword [ebp - 0x628], 0
cmp dword [ebp - 0x628], 0xecf54c3c
ja 0x1000a30a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jne 0x1000a30a
and dword [ebp - 0x1004], 0
jmp 0x1000a314
mov dword [ebp - 0x1004], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x13d0], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x29c], 0
je 0x1000a678
mov dword [ebp - 0xdf0], 0x5f27a412
mov dword [ebp - 0xdec], 0x5f27a412
mov dword [ebp - 0xde8], 0x5f27a412
mov dword [ebp - 0xde4], 0x5f27a412
mov dword [ebp - 0x1074], 0xc9aa6f57
mov dword [ebp - 0xc0], 0
jmp 0x1000a386
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 3
jge 0x1000a3a2
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x1568], 1
jmp 0x1000a379
mov dword [ebp - 0xc0], 0
jmp 0x1000a3bb
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 1
jge 0x1000a3d7
mov eax, dword [ebp - 0xc0]
mov dword [ebp + eax*4 - 0x100c], 0x7da828c0
jmp 0x1000a3ae
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x29c]
mov dword [ebp - 0x13d8], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x29c], 0
jl 0x1000a406
mov dword [ebp - 0xc78], 1
jmp 0x1000a40d
and dword [ebp - 0xc78], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdf0]
cmp dword [ebp - 0xc78], eax
jg 0x1000a42e
mov dword [ebp - 0x52c], 1
jmp 0x1000a435
and dword [ebp - 0x52c], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x52c]
mov dword [ebp + eax - 0x29c], ecx
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xdf0]
cmp dword [ebp - 0x52c], eax
jg 0x1000a469
mov dword [ebp - 0x630], 1
jmp 0x1000a470
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
imul eax, dword [ebp - 0x53c]
mov dword [ebp - 0xc80], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xc80]
mov dword [ebp + eax - 0x1568], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xdf0]
cmp dword [ebp - 0xc80], eax
jne 0x1000a4b7
mov dword [ebp - 0x638], 1
jmp 0x1000a4be
and dword [ebp - 0x638], 0
mov eax, dword [ebp - 0x53c]
cmp dword [ebp - 0x638], eax
jl 0x1000a4de
cmp dword [ebp - 0x274], 0
jne 0x1000a4de
and dword [ebp - 0xc88], 0
jmp 0x1000a4e8
mov dword [ebp - 0xc88], 1
cmp dword [ebp - 0xc88], 0xffffffff
je 0x1000a4fd
mov dword [ebp - 0x640], 1
jmp 0x1000a504
and dword [ebp - 0x640], 0
cmp dword [ebp - 0x640], 0x718b9628
jne 0x1000a51c
mov dword [ebp - 0xc90], 1
jmp 0x1000a523
and dword [ebp - 0xc90], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1114]
add eax, dword [ebp - 0xc90]
cmp eax, 1
jae 0x1000a547
mov dword [ebp - 0x648], 1
jmp 0x1000a54e
and dword [ebp - 0x648], 0
cmp dword [ebp - 0x648], 0xfffffffa
je 0x1000a569
cmp dword [ebp - 0xca8], 0
jne 0x1000a569
and dword [ebp - 0x534], 0
jmp 0x1000a573
mov dword [ebp - 0x534], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x534]
mov dword [ebp + eax - 0x100c], ecx
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x534]
sub ecx, dword [ebp + eax - 0x1114]
cmp dword [ebp - 0x53c], ecx
jl 0x1000a5ad
mov dword [ebp - 0xc98], 1
jmp 0x1000a5b4
and dword [ebp - 0xc98], 0
cmp dword [ebp - 0xc98], 0x4c3d
je 0x1000a5cc
mov dword [ebp - 0x650], 1
jmp 0x1000a5d3
and dword [ebp - 0x650], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdf0]
cmp dword [ebp - 0x650], eax
je 0x1000a5f3
mov dword [ebp - 0xca0], 1
jmp 0x1000a5fa
and dword [ebp - 0xca0], 0
cmp dword [ebp - 0xca0], 0x1700
je 0x1000a612
mov dword [ebp - 0x658], 1
jmp 0x1000a619
and dword [ebp - 0x658], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xdf0]
cmp eax, dword [ebp - 0x658]
jl 0x1000a642
cmp dword [ebp - 0x1014], 0
je 0x1000a642
mov dword [ebp - 0x660], 1
jmp 0x1000a649
and dword [ebp - 0x660], 0
mov eax, dword [ebp - 0xca8]
cmp dword [ebp - 0x660], eax
je 0x1000a663
mov dword [ebp - 0xcb0], 1
jmp 0x1000a66a
and dword [ebp - 0xcb0], 0
mov eax, dword [ebp - 0xcb0]
mov dword [ebp - 0x1074], eax
jmp 0x1000a6ba
mov dword [ebp - 0x274], 0
jmp 0x1000a691
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 1
jg 0x1000a6ba
mov byte [ebp - 0x153], 0
movzx eax, byte [ebp - 0x153]
test eax, eax
je 0x1000a6b8
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
jmp 0x1000a684
mov byte [ebp - 0x141], 0
movzx eax, byte [ebp - 0x141]
test eax, eax
je 0x1000a6e9
push 0
push 0xfa4
push 0xd77
push 0
push 0x66
push 0x12e7
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp dword [ebp - 0x1a0], 0
je 0x1000a792
cmp dword [ebp - 0x1a0], 0
je 0x1000a792
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
mov dword [ebp - 0x13e0], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
mov dword [ebp - 0x13e8], eax
cmp dword [ebp - 0x1a0], 0
je 0x1000a747
mov eax, 0x5bfb
test eax, eax
je 0x1000a747
mov dword [ebp - 0x668], 1
jmp 0x1000a74e
and dword [ebp - 0x668], 0
mov eax, dword [ebp - 0x668]
sub eax, 4
cmp eax, 0x3dc99cdf
jg 0x1000a76a
mov dword [ebp - 0xcb8], 1
jmp 0x1000a771
and dword [ebp - 0xcb8], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
add eax, dword [ebp - 0xcb8]
je 0x1000a792
mov dword [ebp - 0x670], 1
jmp 0x1000a799
and dword [ebp - 0x670], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0x670], eax
jle 0x1000a7ba
mov dword [ebp - 0xcc0], 1
jmp 0x1000a7c1
and dword [ebp - 0xcc0], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0xcc0]
sub ecx, dword [ebp + eax - 0x2a4]
cmp ecx, 1
je 0x1000a7e5
mov dword [ebp - 0x678], 1
jmp 0x1000a7ec
and dword [ebp - 0x678], 0
cmp dword [ebp - 0x678], 0x2167fa5c
jle 0x1000a804
mov dword [ebp - 0x107c], 1
jmp 0x1000a80b
and dword [ebp - 0x107c], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x13f0], eax
mov eax, dword [ebp - 0x1d8]
mov dword [ebp - 0x13f8], eax
mov dword [ebp - 0x1f0], 0xfffffffc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0x1f0], eax
jne 0x1000a84e
mov dword [ebp - 0xcc8], 1
jmp 0x1000a855
and dword [ebp - 0xcc8], 0
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0xcc8], eax
jle 0x1000a86f
mov dword [ebp - 0x680], 1
jmp 0x1000a876
and dword [ebp - 0x680], 0
mov eax, dword [ebp - 0x680]
mov dword [ebp - 0x530], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
cmp dword [ebp - 0x530], eax
jl 0x1000a8a3
mov dword [ebp - 0xcd0], 1
jmp 0x1000a8aa
and dword [ebp - 0xcd0], 0
mov eax, dword [ebp - 0xcd0]
mov dword [ebp - 0x688], eax
mov eax, dword [ebp - 0x688]
cmp dword [ebp - 0x1d8], eax
jg 0x1000a8d0
mov dword [ebp - 0xcd8], 1
jmp 0x1000a8d7
and dword [ebp - 0xcd8], 0
mov eax, dword [ebp - 0xcd8]
sub eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0x1f0]
je 0x1000a8f7
mov dword [ebp - 0x690], 1
jmp 0x1000a8fe
and dword [ebp - 0x690], 0
mov eax, dword [ebp - 0x1f0]
cmp eax, dword [ebp - 0x690]
je 0x1000a918
mov dword [ebp - 0xce0], 1
jmp 0x1000a91f
and dword [ebp - 0xce0], 0
mov eax, dword [ebp - 0x1a0]
cmp dword [ebp - 0xce0], eax
jne 0x1000a939
mov dword [ebp - 0x698], 1
jmp 0x1000a940
and dword [ebp - 0x698], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2a4]
imul eax, dword [ebp - 0x698]
mov dword [ebp - 0x1f0], eax
mov eax, dword [ebp - 0x1f0]
sub eax, 0x73980710
cmp eax, 0xe2192fe2
jae 0x1000a978
mov dword [ebp - 0xce8], 1
jmp 0x1000a97f
and dword [ebp - 0xce8], 0
mov eax, dword [ebp - 0x1a0]
cmp eax, dword [ebp - 0xce8]
je 0x1000a9af
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x2a4], 0
jne 0x1000a9af
mov eax, 0xa8b1460d
test eax, eax
jne 0x1000a9af
and dword [ebp - 0x6a0], 0
jmp 0x1000a9b9
mov dword [ebp - 0x6a0], 1
mov eax, dword [ebp - 0x6a0]
dec eax
jne 0x1000a9e4
cmp dword [ebp - 0x530], 0
jne 0x1000a9e4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x2a4], 0
jne 0x1000a9e4
and dword [ebp - 0xcf0], 0
jmp 0x1000a9ee
mov dword [ebp - 0xcf0], 1
mov eax, dword [ebp - 0x1d8]
cmp dword [ebp - 0xcf0], eax
jne 0x1000aa08
mov dword [ebp - 0xcf8], 1
jmp 0x1000aa0f
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0x1d8]
cmp eax, dword [ebp - 0xcf8]
jge 0x1000aa29
mov dword [ebp - 0x6ac], 1
jmp 0x1000aa30
and dword [ebp - 0x6ac], 0
cmp dword [ebp - 0x6ac], 0xd145
jne 0x1000aa48
mov dword [ebp - 0x6b0], 1
jmp 0x1000aa4f
and dword [ebp - 0x6b0], 0
cmp dword [ebp - 0x6b0], 0xffffffff
jge 0x1000aa64
mov dword [ebp - 0xcc4], 1
jmp 0x1000aa6b
and dword [ebp - 0xcc4], 0
mov eax, dword [ebp - 0xcc4]
mov dword [ebp - 0x1040], eax
push 4
lea ecx, [ebp - 0xd88]
call fcn.100189bc
mov dword [ebp - 4], 2
mov dword [ebp - 0xc8], 0xb0881d
mov dword [ebp - 0xd4], 0
jmp 0x1000aaae
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x1000aacd
push dword [ebp - 0xd4]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
and dword [eax], 0
jmp 0x1000aaa1
mov dword [ebp - 0xd4], 0
jmp 0x1000aae6
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 1
jge 0x1000ab02
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x8c], 0xe1e87df2
jmp 0x1000aad9
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x8c], 0
jmp 0x1000ab30
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x8c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 3
jg 0x1000ae10
push 3
lea ecx, [ebp - 0x554]
call fcn.100189bc
mov byte [ebp - 4], 3
mov dword [ebp - 0x3e8], 0x761be360
mov dword [ebp - 0x434], 0
jmp 0x1000ab78
mov eax, dword [ebp - 0x434]
inc eax
mov dword [ebp - 0x434], eax
cmp dword [ebp - 0x434], 3
jge 0x1000ab9a
push dword [ebp - 0x434]
lea ecx, [ebp - 0x554]
call fcn.10018a43
mov dword [eax], 0x801fc3ee
jmp 0x1000ab6b
push 1
lea ecx, [ebp - 0x554]
call fcn.10018a43
and dword [eax], 0
jmp 0x1000abd0
push 1
lea ecx, [ebp - 0x554]
call fcn.10018a43
mov dword [ebp - 0x6b8], eax
mov eax, dword [ebp - 0x6b8]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6b8]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x554]
call fcn.10018a43
cmp dword [eax], 3
jg 0x1000ac1c
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x8c]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
mov esi, eax
push 1
lea ecx, [ebp - 0x554]
call fcn.10018a43
push dword [eax]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000abac
mov eax, 0x890c5440
test eax, eax
je 0x1000ad0e
cmp dword [ebp - 0x3e8], 0xfffffff6
jle 0x1000ac3e
mov dword [ebp - 0xa34], 1
jmp 0x1000ac45
and dword [ebp - 0xa34], 0
push 3
lea ecx, [ebp - 0xd88]
call fcn.10018a43
mov ecx, dword [ebp - 0xa34]
cmp ecx, dword [eax]
jne 0x1000ac68
mov dword [ebp - 0xfa0], 1
jmp 0x1000ac6f
and dword [ebp - 0xfa0], 0
push 1
lea ecx, [ebp - 0x554]
call fcn.10018a43
mov esi, dword [ebp - 0x3e8]
push 2
lea ecx, [ebp - 0x554]
call fcn.10018a43
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x554]
call fcn.10018a43
cmp dword [eax], 0x37c57f39
jne 0x1000acc2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0
je 0x1000acc2
mov dword [ebp - 0x6c0], 1
jmp 0x1000acc9
and dword [ebp - 0x6c0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
cmp dword [ebp - 0x6c0], eax
je 0x1000acea
mov dword [ebp - 0xbec], 1
jmp 0x1000acf1
and dword [ebp - 0xbec], 0
mov eax, dword [ebp - 0x3e8]
imul eax, dword [ebp - 0xbec]
test eax, eax
je 0x1000ad0e
mov dword [ebp - 0x6c8], 1
jmp 0x1000ad15
and dword [ebp - 0x6c8], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x8c]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0x6c8]
jge 0x1000ad43
mov dword [ebp - 0xa3c], 1
jmp 0x1000ad4a
and dword [ebp - 0xa3c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x8c]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
mov eax, dword [eax]
add eax, dword [ebp - 0xa3c]
jne 0x1000ad7e
cmp dword [ebp - 0xc8], 0
jne 0x1000ad7e
and dword [ebp - 0xe00], 0
jmp 0x1000ad88
mov dword [ebp - 0xe00], 1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x8c]
lea ecx, [ebp - 0xd88]
call fcn.10018a43
cmp dword [ebp - 0x3e8], 0xd21f1eb3
jb 0x1000ade4
mov dword [ebp - 0xc8], 0
jmp 0x1000adc5
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jg 0x1000ade2
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x8c], 0
je 0x1000ade0
jmp 0x1000ade2
jmp 0x1000adb8
jmp 0x1000adfc
mov byte [ebp - 0x143], 0
movzx eax, byte [ebp - 0x143]
test eax, eax
je 0x1000adfc
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x554]
call fcn.10018a3e
jmp 0x1000ab15
mov dword [ebp - 0xc8], 0xfffffff8
jmp 0x1000ae29
mov eax, dword [ebp - 0xc8]
dec eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 0xffffffe5
jle 0x1000ae67
mov dword [ebp - 0xf6c], 0x8e5161e3
mov dword [ebp - 0xe3c], 0xfffffff7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x8c]
mov dword [ebp - 0x1400], eax
mov eax, dword [ebp - 0xf6c]
mov dword [ebp - 0xe3c], eax
jmp 0x1000ae1c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd88]
call fcn.10018a3e
mov dword [ebp - 0x14], 0x9b4e94f9
mov dword [ebp - 0x150], 0x126c7f05
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0xa0], 0xce35a12a
mov dword [ebp - 0xe18], 0xfffffff6
mov dword [ebp - 0x3b4], 0
jmp 0x1000aebe
mov eax, dword [ebp - 0x3b4]
inc eax
mov dword [ebp - 0x3b4], eax
cmp dword [ebp - 0x3b4], 3
jge 0x1000aeda
mov eax, dword [ebp - 0x3b4]
mov dword [ebp + eax*4 - 0x115c], 0xfffffffe
jmp 0x1000aeb1
push 8
pop eax
test eax, eax
je 0x1000af59
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x150], eax
mov eax, dword [ebp - 0x150]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1a8], eax
jge 0x1000af14
push 0xfffffffffffffff8
pop eax
test eax, eax
je 0x1000af14
mov dword [ebp - 0x6d0], 1
jmp 0x1000af1b
and dword [ebp - 0x6d0], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x6d0]
sub eax, 0x4a15d739
cmp eax, dword [ebp - 0x14]
je 0x1000af3b
mov dword [ebp - 0x1078], 1
jmp 0x1000af42
and dword [ebp - 0x1078], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1408], eax
mov eax, 0xfb26c4f3
sub eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x150], 0
je 0x1000af73
or eax, 0xffffffff
je 0x1000af73
mov dword [ebp - 0xd34], 1
jmp 0x1000af7a
and dword [ebp - 0xd34], 0
cmp dword [ebp - 0xd34], 0x5f992db7
jle 0x1000af92
mov dword [ebp - 0x6d8], 1
jmp 0x1000af99
and dword [ebp - 0x6d8], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x6d8]
je 0x1000afb6
mov eax, 0x8c658163
test eax, eax
jne 0x1000afb6
and dword [ebp - 0xa44], 0
jmp 0x1000afc0
mov dword [ebp - 0xa44], 1
mov eax, dword [ebp - 0x14]
add eax, 0xfff7
cmp eax, dword [ebp - 0xa44]
jle 0x1000afdc
mov dword [ebp - 0x6e0], 1
jmp 0x1000afe3
and dword [ebp - 0x6e0], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x6e0], eax
jg 0x1000affd
mov dword [ebp - 0xbf4], 1
jmp 0x1000b004
and dword [ebp - 0xbf4], 0
mov eax, dword [ebp - 0xbf4]
sub eax, dword [ebp - 0xa0]
cmp eax, dword [ebp - 0xa0]
jl 0x1000b024
mov dword [ebp - 0x6e8], 1
jmp 0x1000b02b
and dword [ebp - 0x6e8], 0
mov eax, dword [ebp - 0xa0]
cmp dword [ebp - 0x6e8], eax
jg 0x1000b04e
mov eax, 0xb03b
test eax, eax
je 0x1000b04e
mov dword [ebp - 0xa4c], 1
jmp 0x1000b055
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0xa4c]
neg eax
cmp eax, dword [ebp - 0x14]
jle 0x1000b074
cmp dword [ebp - 0x150], 0
jne 0x1000b074
and dword [ebp - 0x6f0], 0
jmp 0x1000b07e
mov dword [ebp - 0x6f0], 1
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x6f0], eax
jne 0x1000b2e5
mov dword [ebp - 0x4d8], 1
mov dword [ebp - 0x6f8], 0xbbb531ea
mov dword [ebp - 0xe10], 0x585f1c2b
mov dword [ebp - 0x1000], 8
mov dword [ebp - 0x2c4], 0
jmp 0x1000b0ce
mov eax, dword [ebp - 0x2c4]
inc eax
mov dword [ebp - 0x2c4], eax
cmp dword [ebp - 0x2c4], 1
jge 0x1000b0ea
mov eax, dword [ebp - 0x2c4]
mov dword [ebp + eax*4 - 0x45c], 5
jmp 0x1000b0c1
mov dword [ebp - 0x1a8], 0
jmp 0x1000b103
mov eax, dword [ebp - 0x1a8]
dec eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 0xffffffed
jg 0x1000b2e3
mov dword [ebp - 0x104], 1
mov dword [ebp - 0x14], 0
jmp 0x1000b12a
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 8
jne 0x1000b167
mov dword [ebp - 0xa0], 0
jmp 0x1000b149
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 3
jge 0x1000b165
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x115c], 0xd4826422
jmp 0x1000b13c
jmp 0x1000b123
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1410], eax
mov eax, dword [ebp - 0x4d8]
dec eax
mov dword [ebp - 0x4d8], eax
mov eax, dword [ebp - 0x4d8]
cmp dword [ebp - 0x104], eax
jle 0x1000b197
mov dword [ebp - 0xccc], 1
jmp 0x1000b19e
and dword [ebp - 0xccc], 0
mov eax, dword [ebp - 0xccc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x6f8], eax
mov eax, dword [ebp - 0x6f8]
mov dword [ebp - 0xe08], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xe08]
mov dword [ebp + eax - 0x45c], ecx
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1418], eax
mov eax, 0xffff
test eax, eax
je 0x1000b208
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x45c]
imul eax, dword [ebp - 0x104]
test eax, eax
je 0x1000b208
mov dword [ebp - 0xf58], 1
jmp 0x1000b20f
and dword [ebp - 0xf58], 0
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x1420], eax
cmp dword [ebp - 0x14], 0
jg 0x1000b22a
cmp dword [ebp - 0x150], 0
je 0x1000b23a
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x45c], 0
jne 0x1000b241
cmp dword [ebp - 0x104], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x115c]
mov dword [ebp - 0x1428], eax
mov dword [ebp - 0x150], 0x89ef
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x150], eax
jl 0x1000b278
mov dword [ebp - 0xa54], 1
jmp 0x1000b27f
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0xa54]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1430], eax
mov eax, dword [ebp - 0xe10]
mov dword [ebp - 0x1438], eax
mov eax, dword [ebp - 0x104]
add eax, dword [ebp - 0x1000]
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x115c]
jl 0x1000b2c4
mov dword [ebp - 0x700], 1
jmp 0x1000b2cb
and dword [ebp - 0x700], 0
mov eax, dword [ebp - 0xa0]
imul eax, dword [ebp - 0x700]
mov dword [ebp - 0xe18], eax
jmp 0x1000b0f6
jmp 0x1000b2f8
mov dword [ebp - 0xf60], 0xca00
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xf60], eax
push 4
lea ecx, [ebp - 0xd98]
call fcn.100189bc
mov dword [ebp - 4], 4
mov dword [ebp - 0xdc], 0xb0881d
mov dword [ebp - 0xa8], 0
jmp 0x1000b32f
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 4
jge 0x1000b34e
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
and dword [eax], 0
jmp 0x1000b322
mov dword [ebp - 0xa8], 0
jmp 0x1000b367
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1000b383
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x84], 0xe1e87df2
jmp 0x1000b35a
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x84], 0
jmp 0x1000b3b1
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 3
jg 0x1000b691
push 3
lea ecx, [ebp - 0x560]
call fcn.100189bc
mov byte [ebp - 4], 5
mov dword [ebp - 0x2cc], 0x761be360
mov dword [ebp - 0x3bc], 0
jmp 0x1000b3f9
mov eax, dword [ebp - 0x3bc]
inc eax
mov dword [ebp - 0x3bc], eax
cmp dword [ebp - 0x3bc], 3
jge 0x1000b41b
push dword [ebp - 0x3bc]
lea ecx, [ebp - 0x560]
call fcn.10018a43
mov dword [eax], 0x801fc3ee
jmp 0x1000b3ec
push 1
lea ecx, [ebp - 0x560]
call fcn.10018a43
and dword [eax], 0
jmp 0x1000b451
push 1
lea ecx, [ebp - 0x560]
call fcn.10018a43
mov dword [ebp - 0xbfc], eax
mov eax, dword [ebp - 0xbfc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xbfc]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x560]
call fcn.10018a43
cmp dword [eax], 3
jg 0x1000b49d
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
mov esi, eax
push 1
lea ecx, [ebp - 0x560]
call fcn.10018a43
push dword [eax]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000b42d
mov eax, 0x890c5440
test eax, eax
je 0x1000b58f
cmp dword [ebp - 0x2cc], 0xfffffff6
jle 0x1000b4bf
mov dword [ebp - 0x708], 1
jmp 0x1000b4c6
and dword [ebp - 0x708], 0
push 3
lea ecx, [ebp - 0xd98]
call fcn.10018a43
mov ecx, dword [ebp - 0x708]
cmp ecx, dword [eax]
jne 0x1000b4e9
mov dword [ebp - 0xe20], 1
jmp 0x1000b4f0
and dword [ebp - 0xe20], 0
push 1
lea ecx, [ebp - 0x560]
call fcn.10018a43
mov esi, dword [ebp - 0x2cc]
push 2
lea ecx, [ebp - 0x560]
call fcn.10018a43
mov dword [eax], esi
push 0
lea ecx, [ebp - 0x560]
call fcn.10018a43
cmp dword [eax], 0x37c57f39
jne 0x1000b543
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x84], 0
je 0x1000b543
and dword [ebp - 0xa5c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
cmp dword [ebp - 0xa5c], eax
je 0x1000b56b
and dword [ebp - 0xd6c], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
mov eax, dword [eax]
cmp eax, dword [ebp - 0xd6c]
jge 0x1000b5c4
mov dword [ebp - 0x718], 1
jmp 0x1000b5cb
and dword [ebp - 0x718], 0
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
mov eax, dword [eax]
add eax, dword [ebp - 0x718]
jne 0x1000b5ff
cmp dword [ebp - 0xdc], 0
jne 0x1000b5ff
and dword [ebp - 0x103c], 0
jmp 0x1000b609
mov dword [ebp - 0x103c], 1
push 4
pop eax
imul eax, eax, 0
push dword [ebp + eax - 0x84]
lea ecx, [ebp - 0xd98]
call fcn.10018a43
cmp dword [ebp - 0x2cc], 0xd21f1eb3
jb 0x1000b665
mov dword [ebp - 0xdc], 0
jmp 0x1000b646
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1000b67d
mov dword [ebp - 0xdc], 0xfffffff8
jmp 0x1000b6aa
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe5
jle 0x1000b6e8
mov dword [ebp - 0xe28], 0x8e5161e3
mov dword [ebp - 0xf68], 0xfffffff7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x84]
mov dword [ebp - 0x1440], eax
mov eax, dword [ebp - 0xe28]
mov dword [ebp - 0xf68], eax
jmp 0x1000b69d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd98]
call fcn.10018a3e
push 2
lea ecx, [ebp - 0x28c]
call fcn.100189bc
mov dword [ebp - 4], 6
mov dword [ebp - 0x34], 0xa66fe7d8
mov dword [ebp - 0xf70], 0x2b5b
mov dword [ebp - 0x750], 0xfffffff7
push 2
lea ecx, [ebp - 0x1168]
call fcn.100189bc
mov byte [ebp - 4], 7
mov dword [ebp - 0x50], 0
jmp 0x1000b747
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1000b763
push dword [ebp - 0x50]
lea ecx, [ebp - 0x28c]
call fcn.10018a43
mov dword [eax], 0xffff
jmp 0x1000b740
mov dword [ebp - 0x50], 0
jmp 0x1000b773
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1000b789
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0x4d4], 0x9a0165d3
jmp 0x1000b76c
mov dword [ebp - 0x50], 0
jmp 0x1000b799
cmp dword [ebp - 0x50], 2
jge 0x1000b7b5
push dword [ebp - 0x50]
lea ecx, [ebp - 0x1168]
call fcn.10018a43
mov dword [eax], 0xc987
jmp 0x1000b792
mov dword [ebp - 0x34], 1
jmp 0x1000b7c5