Function at 0x1002671b
Capabilities:
Get disk information
Query environment variable

Disassembly:
mov eax, 0x100620b7
call fcn.10061410
sub esp, 0x2a8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push 2
pop esi
mov dword [ebp - 0x58], ecx
lea ecx, [ebp - 0xc0]
push esi
mov dword [ebp - 0x48], edx
call fcn.10012962
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x18], 0xb02971c
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10026769
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xc0]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1002675a
xor edi, edi
inc edi
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], ebx
jl 0x1002678c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
cmp dword [eax + ecx*4], ebx
jne 0x1002678c
dec dword [ebp - 0x18]
jns 0x10026779
mov dword [ebp - 0x18], ebx
or esi, 0xffffffff
cmp dword [ebp - 0x18], edi
jg 0x10026907
mov dword [ebp - 0x20], 0x2304
cmp dword [ebp - 0x20], 0x251e
jle 0x10026816
mov eax, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov dword [ebp - 0x24], ebx
add eax, ecx
mov dword [ebp - 0x30], 0x32c0
mov dword [ebp - 0x28], eax
cdq
lea ecx, [ebp - 0x274]
push edx
push eax
call fcn.1000d0ee
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100267d9
mov eax, dword [eax]
push eax
call fcn.1004c14f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x274]
call fcn.10012ee2
mov eax, dword [ebp - 0x28]
dec eax
dec dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
jne 0x100267c1
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x5622
jl 0x100267b5
inc eax
mov dword [ebp - 0x38], eax
cmp eax, 0x498a
jl 0x100267b0
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x20], 0x1f21
jge 0x1002682d
push 0x10009140
call fcn.1004c14f
pop ecx
mov dword [ebp - 4], ebx
xor eax, eax
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x2c], 0xebdab6ac
mov dword [ebp - 0x2c], ecx
cmp dword [ecx + 4], ebx
setne al
cmp esi, eax
sbb eax, eax
neg eax
neg eax
je 0x10026858
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
neg eax
sbb eax, eax
neg eax
cmp eax, edi
sbb eax, eax
xor edx, edx
inc eax
cmp eax, esi
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setl cl
cmp ecx, dword [eax + 4]
je 0x10026892
mov eax, ebx
cmp dword [ebp - 0x14], ebx
je 0x10026894
mov eax, edi
xor ecx, ecx
mov dword [ebp - 0x28], 0x38591b68
cmp eax, esi
mov eax, dword [ebp - 0x14]
sete cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc0]
setle dl
mov dword [ebp - 0x2c], edx
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov edx, dword [ebp - 0x18]
imul edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x14]
setle cl
mov dword [ebp - 0x2c], ecx
xor ecx, ecx
cmp dword [ebp - 0x2c], eax
setg cl
neg ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
jmp 0x10026792
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], esi
call fcn.100129e4
mov dword [ebp - 0x2c], esi
lea ecx, [ebp - 0x11c]
push 3
call fcn.10012962
mov dword [ebp - 0x14], 0x3187110e
mov dword [ebp - 0x20], ebx
jmp 0x10026940
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10026931
dec dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
jmp 0x10026963
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x1002694e
lea ecx, [ebp - 0x11c]
call fcn.100129e4
mov eax, dword [0x1060af7c]
test al, 1
jne 0x10026a0a
or eax, edi
mov dword [0x1060af7c], eax
push ebx
mov dword [ebp - 4], 3
push ebx
mov dword [0x1060afa0], ebx
mov dword [0x1060afa4], ebx
call fcn.10014f5e
mov dword [0x1060afa0], eax
mov dword [0x1060afa8], ebx
mov dword [0x1060afb0], ebx
mov byte [ebp - 4], 5
mov ecx, 0x1060afa8
mov dword [ebp - 0xd4], eax
lea eax, [ebp - 0xd4]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x190]
mov dword [0x1060afbc], 0x3f800000
push eax
mov dword [0x1060afac], ebx
call fcn.10014d36
push 0x10062946
mov dword [0x1060afb4], 7
mov dword [0x1060afb8], 8
call fcn.1004c125
pop ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], 0xaeef20fe
lea ecx, [ebp - 0x140]
push 4
call fcn.10012962
mov dword [ebp - 4], 6
mov dword [ebp - 0x18], ebx
jmp 0x10026a34
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x50], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10026a2a
mov dword [ebp - 0x18], ebx
jmp 0x10026a4d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10026a3e
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x10026b70
mov eax, dword [ebp - 0x140]
mov dword [eax + 0xc], esi
mov dword [ebp - 0x38], 0xf147909b
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], ebx
jl 0x10026a8a
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], ecx
dec dword [ebp - 0x38]
jns 0x10026a77
mov dword [ebp - 0x20], 0x5cb6
cmp dword [ebp - 0x20], 0x5dc7
jle 0x10026b13
push 0x2624
push 0x13a5
push ebx
push 0x1de0
call dword [sym.imp.USER32.dll_DrawEdge]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x30], ebx
cdq
idiv ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x28], 0x6caa
mov dword [ebp - 0x2c], ebx
mov eax, ebx
mov ecx, 0x10609d98
and eax, dword [ebp - 0x38]
cdq
push edx
push eax
call fcn.1001273a
inc ebx
cmp ebx, 0x2707
jl 0x10026acd
mov eax, dword [ebp - 0x34]
add dword [ebp - 0x38], eax
dec dword [ebp - 0x28]
push 0
pop ebx
jne 0x10026aca
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x30], ecx
cmp ecx, 0x6fd4
jl 0x10026aba
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x3b12
jl 0x10026ab5
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp + eax*4 - 0x50]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x50], ecx
mov byte [ebp - 4], 7
cmp dword [ebp - 0x20], 0x5a15
jge 0x10026b61
mov edx, 0x10009198
mov ecx, 0x10609d98
call fcn.1001505e
jmp 0x10026b61
mov dword [ebp - 4], 6
dec dword [ebp - 0x14]
jmp 0x10026a56
lea ecx, [ebp - 0x140]
mov dword [ebp - 4], esi
call fcn.100129e4
imul eax, dword [ebp - 0x58], 0x2710
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x30], 0xc12a7b09
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x20], ebx
jmp 0x10026bb4
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1cc], 0x278c007c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10026ba3
cmp dword [ebp - 0x38], ebx
jne 0x10026bcc
mov eax, dword [ebp - 0x24]
mov ecx, ebx
sub eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x24]
jl 0x10026bce
mov ecx, edi
mov eax, dword [ebp - 0x1c4]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x38]
sete dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp dword [ebp - 0x38], ecx
je 0x10026bf1
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x10026bf3
mov eax, edi
add eax, 0xab1c0ea9
xor ecx, ecx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, 4
setle cl
imul eax, ecx, 0x57a1
cmp eax, dword [ebp - 0x1c0]
jl 0x10026c19
cmp dword [ebp - 0x24], ebx
je 0x10026c20
mov eax, edi
cmp dword [ebp - 0x30], ebx
jne 0x10026c22
mov eax, ebx
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x74]
push eax
call fcn.1002828e
mov eax, dword [eax]
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], 0xffffffe4
mov dword [ebp - 0x38], eax
jle 0x10026c74
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0x14
jmp 0x10026c62
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10026c5f
push ebx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe7
jg 0x10026c4f
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe4
jg 0x10026c43
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x10026e4d
mov dword [ebp - 0x20], 0x7571177e
mov dword [ebp - 0x20], ebx
jmp 0x10026c95
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x20c], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10026c88
mov dword [ebp - 0x20], ebx
jmp 0x10026d75
mov dword [ebp - 0x14], 0x2c0d37ad
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10026d72
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x28], 0xfffffffa
mov dword [ebp - 0x48], 0xf9e6b99b
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], ebx
jl 0x10026d69
mov dword [ebp - 0x28], 0x547507af
xor edx, edx
mov dword [ebp - 0x28], 0x7497f3c8
mov dword [ebp - 0x48], esi
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x20]
je 0x10026d1f
mov dword [ebp - 0x28], edi
cmp dword [ebp - 0x14], ebx
jne 0x10026d22
mov dword [ebp - 0x28], ebx
mov eax, dword [ebp - 0x14]
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x20c]
mov eax, dword [ebp - 0x18]
cmp ecx, dword [ebp - 0x28]
setg dl
mov dword [ebp + eax*4 - 0x20c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x48]
cmp edx, eax
setle cl
neg ecx
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp edx, eax
setne cl
mov dword [ebp - 0x48], ecx
dec dword [ebp - 0x18]
jns 0x10026cdf
dec dword [ebp - 0x14]
jns 0x10026cba
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jle 0x10026ca3
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x14], edi
push 3
mov dword [ebp - 0xb4], eax
call fcn.10012962
mov dword [ebp - 0x20], ebx
jmp 0x10026db0
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x1c1ec2db
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x10026d9d
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x14], 2
cmp dword [ebp - 0x14], ebx
jl 0x10026ddf
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x128]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
dec dword [ebp - 0x14]
jns 0x10026dc8
lea ecx, [ebp - 0x128]
call fcn.100129e4
mov dword [ebp - 0x48], 0x47c7
cmp dword [ebp - 0x48], 0x4982
jle 0x100281fa
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], 0x4e05
mov edi, ebx
mov ebx, dword [ebp - 0x28]
mov eax, edi
mov ecx, 0x10609d98
or eax, ebx
cdq
push edx
push eax
call fcn.1001273a
inc edi
cmp edi, 0x6def
jl 0x10026e0f
add ebx, esi
dec dword [ebp - 0x30]
push 0
mov dword [ebp - 0x28], ebx
pop ebx
jne 0x10026e0a
inc esi
cmp esi, 0x8051
jl 0x10026e00
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
jmp 0x100281fa
mov dword [ebp - 0x14], edi
xor edx, edx
mov dword [ebp - 0x20], 0x9351f200
mov dword [ebp - 0x2c], 0xa5a165f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe4
jge 0x10026f3b
push 4
lea ecx, [ebp - 0xec]
call fcn.10012962
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x34], 0xbe3d0e72
mov dword [ebp - 0x14], ebx
jmp 0x10026eb5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0x672a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10026ea2
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10026f20
mov dword [ebp - 0x2c], 0x34ccbb24
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xec]
mov edx, dword [ebp - 0xec]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x10026ef7
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xfffffffa
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xa0d
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
jns 0x10026ec7
lea ecx, [ebp - 0xec]
call fcn.100129e4
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe4
jl 0x10026e7b
or esi, 0xffffffff
mov eax, dword [0x1060af7c]
test al, 2
jne 0x10026fd2
or eax, 2
mov dword [0x1060af7c], eax
push ebx
mov dword [ebp - 4], 0xb
push ebx
mov dword [0x1060af80], ebx
mov dword [0x1060af84], ebx
call fcn.10014f5e
mov dword [0x1060af80], eax
mov dword [0x1060af88], ebx
mov dword [0x1060af90], ebx
mov byte [ebp - 4], 0xd
mov ecx, 0x1060af88
mov dword [ebp - 0xc4], eax
lea eax, [ebp - 0xc4]
push eax
push 0x10
push ebx
lea eax, [ebp - 0x178]
mov dword [0x1060af9c], 0x3f800000
push eax
mov dword [0x1060af8c], ebx
call fcn.10014d36
push 0x10062941
mov dword [0x1060af94], 7
mov dword [0x1060af98], 8
call fcn.1004c125
pop ecx
mov dword [ebp - 4], esi
mov dword [ebp - 0x30], 0x2595
cmp dword [ebp - 0x30], 0x297c
jle 0x1002704d
mov edx, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
add eax, ecx
lea ecx, [ebp - 0x244]
add eax, edx
cdq
push edx
push eax
call fcn.1000d0ee
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002700d
mov eax, dword [eax]
push eax
call fcn.1004c14f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x244]
call fcn.10012ee2
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
inc eax
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
cmp eax, 0x4240
jl 0x10026ff1
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x3058
jl 0x10026fec
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x45e9
jl 0x10026fe7
cmp dword [ebp - 0x30], 0x2411
jge 0x10027061
push 0x10009208
call fcn.1004c14f
pop ecx
mov dword [ebp - 4], esi
xor edx, edx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x20], 0x9351f200
mov dword [ebp - 0x2c], 0xa5a165f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
setge dl
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 0xffffffe4
jge 0x10027152
push 4
lea ecx, [ebp - 0xf8]
call fcn.10012962
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x34], 0xbe3d0e72
mov dword [ebp - 0x14], ebx
jmp 0x100270cc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0x672a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100270b9
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], ebx
jl 0x10027137
mov dword [ebp - 0x2c], 0x34ccbb24
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xf8]
mov edx, dword [ebp - 0xf8]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
test eax, eax
jne 0x1002710e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x2c], 0xfffffffa
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
add edx, 0xa0d
cmp edx, eax
setle cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x14]
jns 0x100270de
lea ecx, [ebp - 0xf8]
call fcn.100129e4
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe4
jl 0x10027092
or esi, 0xffffffff
xorps xmm0, xmm0
movdqu xmmword [ebp - 0x98], xmm0
mov dword [ebp - 0x18], 0x6cef3cf6
mov dword [ebp - 0x20], ebx
jmp 0x10027177
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x44], 0xac204e2d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10027169
mov dword [ebp - 0x44], ebx
cmp dword [ebp - 0x44], 7
jne 0x100272af
mov dword [ebp - 0x20], 0xfffffffb
mov dword [ebp - 0x2c], 0xf9d66de6
mov dword [ebp - 0x30], 0x7cd
cmp dword [ebp - 0x30], 0x7e1
jle 0x10027217
mov dword [ebp - 0x20], ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
cdq
idiv ecx
mov eax, dword [ebp - 0x20]
mov ecx, edx
sar eax, cl
lea ecx, [ebp - 0x25c]
cdq
push edx
push eax
call fcn.1000d0ee
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100271d7
mov eax, dword [eax]
push eax
call fcn.1004c14f
pop ecx
push ebx
push edi
lea ecx, [ebp - 0x25c]
call fcn.10012ee2
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
inc ecx
mov dword [ebp - 0x28], ecx
cmp ecx, 0x3cd3
jl 0x100271b5
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x407
jl 0x100271b0
mov ecx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x5c08
jl 0x100271ab
mov byte [ebp - 0x19], bl
cmp dword [ebp - 0x30], 0x547
jge 0x1002722e
push 0x10009258
call fcn.1004c14f
pop ecx
mov dword [ebp - 4], esi
cmp byte [ebp - 0x19], 0
je 0x10027252
push 0x132
push ebx
push 0x726
push 0x659
push 0x1c6d
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov dword [ebp - 0x20], ebx
jmp 0x100272a1
mov dword [ebp - 0x34], 0xfffffffd
mov ecx, ebx
mov dword [ebp - 0x24], 7
mov dword [ebp - 0x24], 0x30de
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x44], ebx
je 0x10027281
mov ecx, edi
mov eax, dword [ebp - 0x2c]
sub ecx, eax
jne 0x1002728f
mov edx, ebx
cmp dword [ebp - 0x44], ebx
je 0x10027291
mov edx, edi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, edx
setne cl
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x1d
jge 0x10027257
inc dword [ebp - 0x44]
jmp 0x10027180
mov dword [ebp - 0x18], ebx
jmp 0x10027380
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x28], 0x930e
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], ebx
jl 0x1002736c
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], 0x70d9
jle 0x100272f8
cmp dword [ebp - 0x44], ebx
je 0x100272f8
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], ebx
jne 0x100272eb
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], ebx
je 0x10027308
mov edx, edi
cmp dword [ebp - 0x14], ebx
jne 0x1002730a
mov edx, ebx
mov eax, dword [ebp - 0x14]
xor ecx, ecx
cmp edx, eax
setg cl
sub ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [ebp + eax*4 - 0x44]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, 0xa6dad3f0
jne 0x10027333
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x28]
neg eax
je 0x1002734a
mov eax, edi
cmp dword [ebp - 0x18], ebx
jne 0x1002734c
mov eax, ebx
add eax, 0xffffe4dd
mov ecx, 0x93e32883
cmp ecx, eax
mov eax, dword [ebp - 0x14]
sbb ecx, ecx
neg ecx
mov dword [ebp + eax*4 - 0x44], ecx
dec dword [ebp - 0x14]
jns 0x100272cd
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002737d
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommTimeouts]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jle 0x100272b7
lea eax, [ebp - 0x58]
push eax
call fcn.100282f0
mov eax, dword [eax]
mov dword [ebp - 0x30], 0x1694
cmp dword [ebp - 0x30], 0x1712
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], eax
jle 0x100273fd
mov ecx, ebx
mov dword [ebp - 0x24], ebx
mov eax, ebx
mov dword [ebp - 0x28], ebx
mov edx, ecx
mov dword [ebp - 0x34], ebx
mov ecx, eax
sar edx, cl
mov dword [ebp - 0x14], edx
mov eax, ebx
mov ecx, 0x10609d98
xor eax, edx
cdq
push edx
push eax
call fcn.1001273a
mov edx, dword [ebp - 0x14]
inc ebx
cmp ebx, 0x5bbc
jl 0x100273c0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x28], eax
push 0
pop ebx
cmp eax, 0x1c21
jl 0x100273b4
inc ecx
mov dword [ebp - 0x24], ecx
cmp ecx, 0x5d83
jl 0x100273af
mov eax, 0x3556
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], eax
mov dword [ebp - 0x160], eax
mov dword [ebp - 0x15c], eax
push edi
call fcn.10012962
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x14], ebx
jmp 0x1002744c
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x70]
mov dword [eax + ecx*4], 0x606de713
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002743c
mov eax, dword [ebp - 0x70]
mov edi, 0xb4746a1c
mov dword [eax], ebx
jmp 0x10027460
or esi, 0xffffffff
push dword [ebp + 8]
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x88], edi
push eax
lea eax, [ebp - 0x1ec]
mov dword [ebp - 0x84], edi
push eax
mov dword [ebp - 0x80], edi
lea ecx, [ebp - 0xd0]
xorps xmm0, xmm0
mov dword [ebp - 0x7c], edi
mov dword [ebp - 0x28], 0xe2efe8e
push ebx
movdqu xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
call fcn.10015a6b
mov eax, dword [ebp - 0x84]
xor edx, edx
mov ecx, dword [ebp - 0x70]
mov eax, dword [ecx]
mov ecx, dword [ecx]
mov dword [ebp + eax*4 - 0x168], esi
lea eax, [ecx - 1]
cmp eax, esi
setne dl
add edx, ecx
sub edx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x70]
neg edx
sbb edx, edx
add edx, 0xf9d5b4ec
neg edx
sbb edx, edx
inc edx
sub edx, dword [eax]
mov dword [ebp - 0x28], edx
xor edx, edx
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x70]
cmp ecx, dword [eax]
mov ecx, 0xd385e13c
setle dl
add edx, 0x35928791
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x84]
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0x84]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x70]
setle dl
xor ecx, ecx
cmp edx, dword [eax]
mov edx, dword [eax]
mov eax, dword [ebp - 0x80]
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
sete cl
xor eax, eax
cmp ecx, 0x4ccc
setle al
xor ecx, ecx
cmp eax, 0xe82aa9da
setne cl
xor eax, eax
sub ecx, edx
cmp ecx, edx
setle al
xor ecx, ecx
cmp eax, edx
setge cl
mov eax, dword [ebp - 0x88]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x70]
setne dl
sub edx, dword [eax]
mov eax, dword [ebp - 0x84]
neg edx
mov esi, dword [ebp - 0x70]
sbb edx, edx
xor ecx, ecx
inc edx
imul eax, edx
cmp eax, dword [esi]
mov eax, dword [ebp - 0xd0]
setl cl
xor edx, edx
cmp ecx, 0xffffffff
lea ecx, [ebp - 0xd0]
setge dl
mov dword [eax + 4], edx
mov dword [ebp - 0x34], edx
call fcn.100129e4
inc dword [esi]
cmp dword [esi], 3
jle 0x1002745d
lea ecx, [ebp - 0x70]
call fcn.100129e4
mov dword [ebp - 4], 0x13
cmp dword [ebp - 0x30], 0x141e
jge 0x100275e5
mov edx, 0x100092c0
mov ecx, 0x10609d98
call fcn.1001505e
or dword [ebp - 4], 0xffffffff
mov edi, dword [ebp - 0x20]
mov al, byte [ebp + 0xc]
test al, al
jne 0x100275fb
test edi, edi
jne 0x10027b60
lea ecx, [ebp - 0x2b4]
mov dl, al
push ecx
mov ecx, dword [ebp - 0x58]
call fcn.1001b1ca
movdqa xmm0, xmmword [0x1000bc20]
lea edi, [ebp - 0x98]
mov esi, eax
mov dword [ebp - 0xe0], ebx
pop ecx
push dword [ebp + 8]
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0xdc], ebx
movsd dword es:[edi], dword [esi]
lea ecx, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x1bc]
mov dword [ebp - 0xd8], ebx
push eax
movsd dword es:[edi], dword [esi]
push ebx
movdqu xmmword [ebp - 0x1bc], xmm0
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.10015a6b
xor esi, esi
mov dword [ebp - 4], 0x15
inc esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x827
cmp dword [ebp - 0x18], 0x92d
jle 0x100276ec
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0x9c5
mov edi, ebx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x28c]
cdq
push edx
push eax
call fcn.1000d0ee
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100276a5
mov eax, dword [eax]
push eax
call fcn.1004c14f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x28c]
call fcn.10012ee2
mov eax, dword [ebp - 0x24]
inc edi
cmp edi, 0x5b15
jl 0x10027689
mov edi, dword [ebp - 0x30]
add eax, edi
dec dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
jne 0x10027687
mov eax, dword [ebp - 0x14]
dec edi
mov dword [ebp - 0x30], edi
cmp edi, 0xffffc7bc
jg 0x1002767d
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x3c56
jl 0x1002767a
mov dword [ebp - 0x14], ebx
jmp 0x10027729
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x78], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002771f
cmp dword [ebp - 0x18], 0x7c6
jge 0x10027742
push 0x10009308
call fcn.1004c14f
pop ecx
mov dword [ebp - 4], 0x15
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027764
push 0x2330
push ebx
push 0x150
push ebx
call dword [sym.imp.USER32.dll_LoadStringA]
mov dword [ebp - 0x34], 0x2182
cmp dword [ebp - 0x34], 0x22a5
jle 0x100277c0
mov dword [ebp - 0x24], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x30], 0x2de1
mov ebx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov eax, ebx
or eax, ecx
mov ecx, 0x10609d98
cdq
push edx
push eax
call fcn.1001273a
mov ecx, dword [ebp - 0x28]
add ecx, edi
dec dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
jne 0x10027788
inc edi
push 0
pop ebx
cmp edi, 0x1bcc
jl 0x10027779
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x54d1
jl 0x10027777
mov edi, dword [ebp - 0xe0]
mov dword [edi + 4], ebx
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x24], 0x32d683a7
mov dword [ebp - 0x14], ebx
jmp 0x100277e6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x54], 0x42a1e948
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100277d8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100277fb
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov dword [ebp - 0x54], ebx
cmp dword [ebp - 0x54], ebx
jl 0x10027823
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002781e
push 0x1db8
push ebx
push ebx
push 0x26de
call dword [sym.imp.GDI32.dll_PolyPolygon]
dec dword [ebp - 0x54]
jns 0x10027803
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x100278ff
mov dword [ebp - 0x14], 0xb16b471d
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x28], 0x1e28
push esi
call fcn.10012962
mov dword [ebp - 0x14], ebx
jmp 0x10027861
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x8d514faf
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002784e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002787b
push ebx
push 0x25a2
call dword [sym.imp.GDI32.dll_CreateHatchBrush]
mov dword [ebp - 0x14], ebx
jmp 0x100278e6
xor edx, edx
mov dword [ebp - 0x30], 0xcc9f196e
mov eax, dword [ebp - 0x30]
cmp eax, esi
mov eax, dword [ebp - 0x28]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, 0x9ca3191b
setl cl
sub eax, ecx
add eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
inc eax
cmp eax, 0xed7c3b7c
je 0x100278b8
mov edx, ebx
cmp dword [ebp - 0x24], ebx
je 0x100278ba
mov edx, esi
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x78], ecx
xor eax, eax
cmp edx, 0xffff
setne al
add ecx, 0xffffb96e
add ecx, eax
mov eax, dword [ebp - 0x134]
mov dword [eax], ecx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jle 0x10027880
lea ecx, [ebp - 0x134]
call fcn.100129e4
dec dword [ebp - 0x18]
jns 0x1002782f
inc dword [edi + 4]
cmp dword [edi + 4], 0
jle 0x100277c9
mov byte [ebp - 4], 0x18
cmp dword [ebp - 0x34], 0x1f8c
jge 0x1002794f
mov edx, 0x1000938c
mov ecx, 0x10609d98
call fcn.1001505e
jmp 0x1002794f
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.100129e4
cmp byte [ebp + 0xc], 0
je 0x10027b60
cmp dword [ebp - 0x90], 0
je 0x10027b60
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000bc50]
lea eax, [ebp - 0x1cc]
push eax
lea eax, [ebp - 0x1dc]
mov dword [ebp - 0x110], ebx
push eax
push ebx
lea ecx, [ebp - 0x110]
mov dword [ebp - 0x10c], ebx
movdqu xmmword [ebp - 0x1dc], xmm0
mov dword [ebp - 0x108], ebx
call fcn.10015a6b
mov dword [ebp - 0x14], 0xc4d8e5cc
mov dword [ebp - 0x14], ebx
jmp 0x100279f1
mov dword [ebp - 0x24], 0x31d83293
mov dword [ebp - 0x24], 3
cmp dword [ebp - 0x24], ebx
jl 0x100279ee
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100279e9
push 0x14a5
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
dec dword [ebp - 0x24]
jns 0x100279d3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x100279c0
lea ecx, [ebp - 0x110]
call fcn.100129e4
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x18], ebx
jmp 0x10027a24
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10027a16
mov dword [ebp - 0x18], ebx
jmp 0x10027a3f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x180], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10027a2e
mov dword [ebp - 0x4c], 0xffffffe8
cmp dword [ebp - 0x4c], 8
je 0x10027b4e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027a65
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027b46
mov dword [ebp - 0x34], 0x5ab0
cmp dword [ebp - 0x34], 0x5d1f
jle 0x10027b1a
push 0x17fd
push ebx
push 0xf87
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov ecx, edi
mov edx, ebx
sar eax, cl
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x28], eax
mov edi, ebx
mov eax, edx
mov ecx, edi
shl eax, cl
lea ecx, [ebp - 0x2a4]
and eax, dword [ebp - 0x28]
cdq
push edx
push eax
call fcn.1000d0ee
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10027ad1
mov eax, dword [eax]
push eax
call fcn.1004c14f
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x2a4]
call fcn.10012ee2
mov edx, dword [ebp - 0x24]
inc edi
cmp edi, 0xe77
jl 0x10027ab0
inc edx
mov dword [ebp - 0x24], edx
cmp edx, 0x38b4
jl 0x10027aae
mov edi, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x1fb2
jl 0x10027aa2
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0xfd
jl 0x10027a9d
push ebx
push ebx
push ebx
push ebx
push 0x6e2
push esi
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
cmp dword [ebp - 0x34], 0x585d
jge 0x10027b42
push 0x100093dc
call fcn.1004c14f
pop ecx
or dword [ebp - 4], 0xffffffff
inc dword [ebp - 0x4c]
jmp 0x10027a4b
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0xac], eax
mov eax, 0xf112
xor esi, esi
mov dword [ebp - 0x1ac], eax
inc esi
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x1a4], eax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x14], 0x29a3df60
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x14], ebx
jmp 0x10027ba0
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x17c], 0x72c25fcc
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10027b8f
push 3
pop edi
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], ebx
jl 0x10027bdf
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x10027bda
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027bd5
push ebx
push 0x177f
push ebx
call dword [sym.imp.GDI32.dll_ExtCreateRegion]
dec dword [ebp - 0x24]
jns 0x10027bbf
dec dword [ebp - 0x14]
jns 0x10027bb0
inc dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
test ecx, ecx
jne 0x100280d9
cmp dword [ebp - 0x98], ecx
jle 0x100280d9
mov dword [ebp - 0x14], 0x41b3c692
mov dword [ebp - 0x2c], 0x46b6eb6
mov dword [ebp - 0x14], 0xfffffff8
jmp 0x10027c69
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000bc20]
lea eax, [ebp - 0x1ec]
push eax
lea eax, [ebp - 0x1fc]
mov dword [ebp - 0xa4], ebx
push eax
push ebx
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xa0], ebx
movdqu xmmword [ebp - 0x1fc], xmm0
mov dword [ebp - 0x9c], ebx
call fcn.10015a6b
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0xa4]
mov eax, dword [eax + 8]
mov dword [ebp - 0x2c], eax
call fcn.100129e4
dec dword [ebp - 0x14]
cmp dword [ebp - 0x14], 0xffffffe8
je 0x10027c10
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027c7f
push ebx
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
mov dword [ebp - 0x2c], 0xffffffff
lea ecx, [ebp - 0x14c]
push edi
call fcn.10012962
mov dword [ebp - 0x14], 0x3187110e
mov dword [ebp - 0x18], ebx
jmp 0x10027cad
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10027c9e
dec dword [ebp - 0x14]
mov dword [ebp - 0x14], ebx
jmp 0x10027ccf
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14c]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x10027cba
lea ecx, [ebp - 0x14c]
call fcn.100129e4
cmp dword [ebp - 0x94], 0
je 0x100280d9
mov dword [ebp - 0x20], 0xffffffff
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x18], 0x56890c54
mov dword [ebp - 0x28], 6
push esi
call fcn.10012962
mov dword [ebp - 4], 0x1c
lea eax, [ebp - 0x20c]
push dword [ebp + 8]
movdqa xmm0, xmmword [0x1000bc30]
lea ecx, [ebp - 0x104]
push eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x24], 0xe57c1f2
push eax
mov dword [ebp - 0x2c], 0xfffffffc
push ebx
movdqu xmmword [ebp - 0x21c], xmm0
mov dword [ebp - 0x104], ebx
mov dword [ebp - 0x100], ebx
mov dword [ebp - 0xfc], ebx
call fcn.10015a6b
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x2c], 0x45a0ae89
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10027d82
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10027d76
mov dword [ebp - 0x18], ebx
jmp 0x10027d9d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x174], 0xfffffff9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x10027d8c
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x20]
cmp eax, 0x32a8
jne 0x10027dbc
mov eax, ebx
cmp dword [ebp - 0x20], ebx
je 0x10027dbe
mov eax, esi
cmp eax, dword [ebp - 0x20]
jge 0x10027dca
mov edx, esi
cmp dword [ebp - 0x18], ebx
jne 0x10027dcc
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov ecx, 0xef72d4ea
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
neg eax
cmp eax, 0xe2bb
setle cl
xor eax, eax
cmp ecx, edx
setne al
sub eax, 0xffff
neg eax
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x28]
jge 0x10027f7c
mov dword [ebp - 0x14], 0x6ae3
mov dword [ebp - 0x2c], 0x5cc9e520
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x2c], 0xf9898791
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10027e31
push esi
push 0xef1
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jg 0x10027ffe
mov dword [ebp - 0x24], 0x13988832
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x64]
cmp dword [ecx + eax*4], ebx
je 0x10027ee4
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x2c], eax
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x64]
setge dl
xor ecx, ecx
add edx, dword [eax + esi*4]
mov eax, dword [ebp - 0x14]
cmp edx, 0x5cb2
setge cl
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0x64]
dec ecx
cmp ecx, dword [eax + edi*4]
mov eax, dword [ebp - 0x14]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x16c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
sete cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x16c]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
add ecx, 0x9cde
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp dword [ecx], ebx
mov esi, dword [ebp - 0x18]
mov edi, dword [ebp - 0x18]
setne dl
xor ecx, ecx
cmp edx, 0x7c2923f8
mov edx, dword [ebp - 0x64]
setle cl
mov eax, dword [edx + eax*4]
sub eax, ecx
xor ecx, ecx
cmp eax, 0xc5cc
setg cl
xor eax, eax
cmp ecx, 0x8b50
setg al
xor ecx, ecx
cmp eax, dword [edx + esi*4]
setl cl
imul ecx, dword [edx + edi*4]
test ecx, ecx
je 0x10027f41
mov dword [ebp - 0x24], 0x3efbb05d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x24], eax
jmp 0x10027f58
mov eax, dword [ebp - 0x18]
xor edx, edx
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ecx + eax*4]
cmp eax, dword [ecx + esi*4]
setl dl
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x24], 0x15f1d345
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10027e3d
xor esi, esi
push 3
inc esi
pop edi
jmp 0x10027ffe
mov dword [ebp - 0x30], 0xffffffff
lea ecx, [ebp - 0x19c]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0x372bb134
push esi
call fcn.10012962
mov dword [ebp - 0x14], ebx
jmp 0x10027fae
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x19c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10027f9e
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jge 0x10027fc1
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
add eax, 0x4638
add edx, eax
sub edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x64]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x19c]
inc dword [ebp - 0x2c]
call fcn.100129e4
mov dword [ebp - 0x18], 0xffffffed
jmp 0x10028014
mov dword [ebp - 0x2c], 0x2f93
mov dword [ebp - 0x2c], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x16
jge 0x10028007
lea ecx, [ebp - 0x104]
call fcn.100129e4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.100129e4
mov ecx, dword [ebp - 0x94]
call fcn.100266db
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], ebx
jmp 0x10028051
mov ecx, dword [ebp - 0x24]
mov dword [ebp + ecx*4 - 0x3c], edi
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x10028047
mov dword [ebp - 0x18], ebx
jmp 0x100280b2
mov dword [ebp - 0x2c], 0xd96711db
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp dword [ebp - 0x3c], eax
jne 0x10028075
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x18]
inc eax
imul ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], ecx
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp - 0x2c], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1002805b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100280cb
push 0x2438
call dword [sym.imp.USER32.dll_ShowCaret]
lea eax, [ebp - 0x58]
push eax
call fcn.100282f0
mov ecx, dword [ebp - 0x20]
mov dword [eax], ecx
mov dword [ebp - 0x34], 0xbeaa32b1
lea ecx, [ebp - 0x158]
push edi
call fcn.10012962
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], 2
mov dword [ebp - 0x24], ebx
jmp 0x10028120
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0xfffffff7
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jl 0x1002810d
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x158]
mov dword [eax + 8], ecx
lea ecx, [ebp - 0x158]
inc dword [ebp - 0x2c]
call fcn.100129e4
lea ecx, [ebp - 0x98]
call fcn.10022035
mov eax, dword [ebp - 0x38]
test eax, eax
jne 0x100281fa
mov edi, dword [ebp - 0x20]
test edi, edi
je 0x100281fa
mov dword [ebp - 0x2c], 0x4dd03248
lea ecx, [ebp - 0x18c]
push esi
call fcn.10012962
mov dword [ebp - 0x18], ebx
jmp 0x10028185
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa8], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10028178
mov dword [ebp - 0x18], ebx
jmp 0x100281a0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x22c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1002818f
mov dword [ebp - 0x18], ebx
jmp 0x100281be
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0xa9c4c8d3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100281ab
mov eax, dword [ebp - 0xa8]
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x2c], eax
call fcn.100129e4
mov edx, dword [ebp - 0x48]
mov ecx, edi
call fcn.10026711
mov esi, eax
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0xb4], esi
call fcn.1002828e
mov dword [eax], esi
mov eax, dword [ebp + 8]
lea esi, [ebp - 0xb4]
mov ecx, dword [ebp - 0xc]
mov edi, eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret