Function at 0x10009a89
Capabilities:
Get common file path
Get disk size
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100892c0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf7c
push esi
push edi
mov dword [ebp - 0x54], 0
jmp 0x10009ab9
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 2
jge 0x10009acf
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xbf0], 0xfffffff9
jmp 0x10009ab2
mov dword [ebp - 0x54], 0
jmp 0x10009adf
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x10009af5
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x114], 0x490c4d8e
jmp 0x10009ad8
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x114], 1
jmp 0x10009b23
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x114], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x114], 0
jl 0x10009c6d
push 3
lea ecx, [ebp - 0xa38]
call fcn.10015911
and dword [ebp - 4], 0
mov dword [ebp - 0x258], 0
jmp 0x10009b61
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 3
jge 0x10009b83
push dword [ebp - 0x258]
lea ecx, [ebp - 0xa38]
call fcn.1001597e
mov dword [eax], 0x31d83293
jmp 0x10009b54
push 2
lea ecx, [ebp - 0xa38]
call fcn.1001597e
mov dword [eax], 1
jmp 0x10009bbc
push 2
lea ecx, [ebp - 0xa38]
call fcn.1001597e
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x410]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa38]
call fcn.1001597e
cmp dword [eax], 0
jl 0x10009c59
mov dword [ebp - 0x950], 0x23498e64
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov eax, dword [ebp + eax*4 - 0xbf0]
mov dword [ebp - 0x880], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x114]
mov ecx, dword [ebp - 0x880]
mov dword [ebp + eax*4 - 0xbf0], ecx
cmp dword [ebp - 0x880], 0xffffffff
jle 0x10009c25
mov dword [ebp - 0x414], 1
jmp 0x10009c2c
and dword [ebp - 0x414], 0
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x950], eax
mov byte [ebp - 0xa1], 0
movzx eax, byte [ebp - 0xa1]
test eax, eax
je 0x10009c54
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x10009b98
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa38]
call fcn.10015979
jmp 0x10009b08
mov dword [ebp - 0x44], 3
mov dword [ebp - 0x35c], 0xfffffffe
mov dword [ebp - 0x9b8], 0
mov dword [ebp - 0x7a8], 0xe283d1f0
mov dword [ebp - 0x2a8], 0xcc9f
mov dword [ebp - 0x68], 0
jmp 0x10009cac
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x10009cc2
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xca8], 9
jmp 0x10009ca5
mov dword [ebp - 0x68], 0
jmp 0x10009cd2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x10009ce8
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xf58], 0xcb2d505b
jmp 0x10009ccb
cmp dword [ebp - 0x44], 0
je 0x10009d00
cmp dword [ebp - 0x44], 0
je 0x10009d00
mov dword [ebp - 0x798], 1
jmp 0x10009d07
and dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x798]
jne 0x10009d43
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xf28], eax
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xe8c], eax
mov eax, 0x3735b263
cmp eax, 0x38e85a7
jge 0x10009d3c
mov dword [ebp - 0x34c], 1
jmp 0x10009d43
and dword [ebp - 0x34c], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x44]
imul ecx, dword [ebp - 0x44]
sub eax, ecx
cmp eax, 0x6cc9
jg 0x10009d65
mov dword [ebp - 0x7a0], 1
jmp 0x10009d6c
and dword [ebp - 0x7a0], 0
cmp dword [ebp - 0x7a0], 0xfffffffb
je 0x10009d81
mov dword [ebp - 0x354], 1
jmp 0x10009d88
and dword [ebp - 0x354], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x354]
mov dword [ebp + eax - 0xca8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca8]
mov dword [ebp - 0x9a8], eax
mov eax, dword [ebp - 0x2a8]
mov dword [ebp - 0x9b0], eax
mov eax, dword [ebp - 0x2a8]
dec eax
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x9a8]
cmp eax, dword [ebp - 0x9b0]
je 0x10009de1
mov dword [ebp - 0x364], 1
jmp 0x10009de8
and dword [ebp - 0x364], 0
mov dword [ebp - 0x35c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xca8]
mov dword [ebp - 0x7a8], eax
cmp dword [ebp - 0x7a8], 0
jne 0x10009e20
cmp dword [ebp - 0x35c], 0
jne 0x10009e20
and dword [ebp - 0x7b0], 0
jmp 0x10009e2a
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x7b0], eax
jg 0x10009e41
mov dword [ebp - 0x7b8], 1
jmp 0x10009e48
and dword [ebp - 0x7b8], 0
mov eax, dword [ebp - 0x364]
add eax, dword [ebp - 0x7b8]
cmp eax, 0x1dd8e181
jle 0x10009e67
mov dword [ebp - 0x36c], 1
jmp 0x10009e6e
and dword [ebp - 0x36c], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x9b8], eax
mov dword [ebp - 0x64], 0
jmp 0x10009e8a
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 2
jge 0x10009ea0
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0xbd8], 0xfffffff9
jmp 0x10009e83
mov dword [ebp - 0x64], 0
jmp 0x10009eb0
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 1
jge 0x10009ec6
mov eax, dword [ebp - 0x64]
mov dword [ebp + eax*4 - 0x138], 0x490c4d8e
jmp 0x10009ea9
mov dword [ebp - 0x7c], 0x6b8f3d42
mov dword [ebp - 0x9c], 9
mov dword [ebp - 0xc18], 0xfffffff6
mov dword [ebp - 0xc14], 0xfffffff6
mov dword [ebp - 0xc10], 0xfffffff6
mov dword [ebp - 0xc0c], 0xfffffff6
lea ecx, [ebp - 0x28d]
call fcn.10009843
push eax
lea eax, [ebp - 0xc08]
push eax
lea eax, [ebp - 0xc18]
push eax
lea ecx, [ebp - 0xf60]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xb34]
call fcn.10015953
mov dword [ebp - 4], 1
mov byte [ebp - 0xaf], 0
movzx eax, byte [ebp - 0xaf]
test eax, eax
je 0x10009f5b
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
cmp dword [ebp - 0x7c], 0
jne 0x10009fde
cmp dword [ebp - 0x7c], 0x6b471dfd
jl 0x10009f76
mov dword [ebp - 0x9c0], 1
jmp 0x10009f7d
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0xdf0], eax
cmp dword [ebp - 0x7c], 0x8e85
jg 0x10009f9b
mov dword [ebp - 0x7c0], 1
jmp 0x10009fa2
and dword [ebp - 0x7c0], 0
mov eax, dword [ebp - 0x7c0]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x9c], eax
je 0x10009fc5
mov dword [ebp - 0x9c8], 1
jmp 0x10009fcc
and dword [ebp - 0x9c8], 0
cmp dword [ebp - 0x9c], 0
jne 0x10009fde
and dword [ebp - 0x2e8], 0
jmp 0x10009fe8
mov dword [ebp - 0x2e8], 1
push 1
lea ecx, [ebp - 0xb34]
call fcn.1001597e
mov ecx, dword [ebp - 0x2e8]
mov dword [eax], ecx
cmp dword [ebp - 0x2e8], 0x31aa
jle 0x1000a015
mov dword [ebp - 0x374], 1
jmp 0x1000a01c
and dword [ebp - 0x374], 0
cmp dword [ebp - 0x374], 8
jb 0x1000a031
mov dword [ebp - 0x9d0], 1
jmp 0x1000a038
and dword [ebp - 0x9d0], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0xf3c], eax
push 1
lea ecx, [ebp - 0xb34]
call fcn.1001597e
xor eax, eax
inc eax
je 0x1000a075
mov byte [ebp - 0x107], 0
movzx eax, byte [ebp - 0x107]
test eax, eax
je 0x1000a070
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x1000a180
mov dword [ebp - 0x9d8], 0x3ca4d9a5
mov dword [ebp - 0x9f0], 0xfffffffc
mov dword [ebp - 0x7c], 0
jmp 0x1000a099
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x33
jne 0x1000a137
mov dword [ebp - 0x9e0], 1
mov dword [ebp - 0x9e8], 0x403132d6
cmp dword [ebp - 0x9d8], 0
je 0x1000a0d5
cmp dword [ebp - 0x9e0], 0
je 0x1000a0d5
mov dword [ebp - 0x7c8], 1
jmp 0x1000a0dc
and dword [ebp - 0x7c8], 0
push 1
lea ecx, [ebp - 0xb34]
call fcn.1001597e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x7c8]
jle 0x1000a0ff
mov dword [ebp - 0x37c], 1
jmp 0x1000a106
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x9e8], eax
mov byte [ebp - 0xa9], 0
movzx eax, byte [ebp - 0xa9]
test eax, eax
je 0x1000a132
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1000a092
mov dword [ebp - 0x9c], 0
jmp 0x1000a150
mov eax, dword [ebp - 0x9c]
dec eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0xfffffffd
jle 0x1000a180
mov byte [ebp - 0xed], 0
movzx eax, byte [ebp - 0xed]
test eax, eax
je 0x1000a173
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
cmp dword [ebp - 0x9f0], 0
je 0x1000a17e
jmp 0x1000a143
jmp 0x1000a143
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb34]
call fcn.10015979
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x138], 1
jmp 0x1000a1bd
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x138], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x138], 0
jl 0x1000a3c7
push 3
lea ecx, [ebp - 0xa48]
call fcn.10015911
mov dword [ebp - 4], 2
mov dword [ebp - 0x178], 0x2bea
push 2
lea ecx, [ebp - 0xccc]
call fcn.10015911
mov byte [ebp - 4], 3
mov dword [ebp - 0x1c0], 0
jmp 0x1000a219
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 2
jge 0x1000a23b
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xccc]
call fcn.1001597e
mov dword [eax], 0xecb45710
jmp 0x1000a20c
mov esi, dword [ebp - 0x178]
push 1
lea ecx, [ebp - 0xccc]
call fcn.1001597e
mov dword [eax], esi
mov dword [ebp - 0x178], 0
jmp 0x1000a269
mov eax, dword [ebp - 0x178]
inc eax
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 1
jg 0x1000a293
mov byte [ebp - 0xab], 0
movzx eax, byte [ebp - 0xab]
test eax, eax
je 0x1000a291
push 0x1c0d
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x1000a25c
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xccc]
call fcn.10015979
mov dword [ebp - 0x228], 0
jmp 0x1000a2bb
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 3
jge 0x1000a2dd
push dword [ebp - 0x228]
lea ecx, [ebp - 0xa48]
call fcn.1001597e
mov dword [eax], 0x31d83293
jmp 0x1000a2ae
push 2
lea ecx, [ebp - 0xa48]
call fcn.1001597e
mov dword [eax], 1
jmp 0x1000a316
push 2
lea ecx, [ebp - 0xa48]
call fcn.1001597e
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x7d0]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x7d0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa48]
call fcn.1001597e
cmp dword [eax], 0
jl 0x1000a3b3
mov dword [ebp - 0x9f8], 0x23498e64
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
mov eax, dword [ebp + eax*4 - 0xbd8]
mov dword [ebp - 0x384], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x138]
mov ecx, dword [ebp - 0x384]
mov dword [ebp + eax*4 - 0xbd8], ecx
cmp dword [ebp - 0x384], 0xffffffff
jle 0x1000a37f
mov dword [ebp - 0x7d8], 1
jmp 0x1000a386
and dword [ebp - 0x7d8], 0
mov eax, dword [ebp - 0x7d8]
mov dword [ebp - 0x9f8], eax
mov byte [ebp - 0x109], 0
movzx eax, byte [ebp - 0x109]
test eax, eax
je 0x1000a3ae
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x1000a2f2
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa48]
call fcn.10015979
jmp 0x1000a1a2
mov dword [ebp - 0xbc], 0xd509
mov dword [ebp - 0x130], 0xfffffff6
mov dword [ebp - 0x120], 0x56411d7f
mov dword [ebp - 0x7e0], 1
mov dword [ebp - 0xc2c], 1
mov dword [ebp - 0xc28], 1
mov dword [ebp - 0xc24], 1
mov dword [ebp - 0xc20], 1
lea ecx, [ebp - 0x29d]
call fcn.10009843
push eax
lea eax, [ebp - 0xc1c]
push eax
lea eax, [ebp - 0xc2c]
push eax
lea ecx, [ebp - 0xf80]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8b0]
call fcn.10015953
mov dword [ebp - 4], 4
mov dword [ebp - 0x3a4], 0xb0d58e7e
mov dword [ebp - 0x2b0], 0x898d08f4
mov dword [ebp - 0x800], 0x4fe10ef7
push 2
lea ecx, [ebp - 0xcfc]
call fcn.10015911
mov byte [ebp - 4], 5
mov dword [ebp - 0x1c8], 0
jmp 0x1000a49b
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 2
jge 0x1000a4bd
push dword [ebp - 0x1c8]
lea ecx, [ebp - 0xcfc]
call fcn.1001597e
mov dword [eax], 0xbd1a6f32
jmp 0x1000a48e
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xdf8], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x130], eax
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0xe94], eax
cmp dword [ebp - 0x130], 0
je 0x1000a4ff
cmp dword [ebp - 0x120], 0
je 0x1000a4ff
mov dword [ebp - 0x38c], 1
jmp 0x1000a506
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x38c]
mov dword [ebp - 0x7e0], eax
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0xf0c], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xe24], eax
mov esi, dword [ebp - 0x120]
push 0
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
cmp esi, dword [eax]
jne 0x1000a54d
mov dword [ebp - 0x394], 1
jmp 0x1000a554
and dword [ebp - 0x394], 0
push 1
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
mov ecx, dword [ebp - 0x394]
cmp ecx, dword [eax]
je 0x1000a577
mov dword [ebp - 0x7e8], 1
jmp 0x1000a57e
and dword [ebp - 0x7e8], 0
mov eax, dword [ebp - 0x7e8]
sub eax, dword [ebp - 0xbc]
sub eax, 0x617c0ec0
cmp dword [ebp - 0xbc], eax
jne 0x1000a5a9
cmp dword [ebp - 0x120], 0
jne 0x1000a5a9
and dword [ebp - 0x39c], 0
jmp 0x1000a5b3
mov dword [ebp - 0x39c], 1
push 3
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
mov ecx, dword [ebp - 0x39c]
cmp ecx, dword [eax]
jle 0x1000a5d6
mov dword [ebp - 0xa00], 1
jmp 0x1000a5dd
and dword [ebp - 0xa00], 0
push 0
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
push 0
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
mov dword [ebp - 0x7f0], eax
push 1
lea ecx, [ebp - 0x8b0]
call fcn.1001597e
mov ecx, dword [ebp - 0x7f0]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x7f0]
mov eax, dword [eax]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0xbc]
add eax, dword [ebp - 0x2b0]
cmp eax, dword [ebp - 0xbc]
jne 0x1000a64e
mov dword [ebp - 0x7f8], 1
jmp 0x1000a655
and dword [ebp - 0x7f8], 0
mov eax, dword [ebp - 0xbc]
cmp dword [ebp - 0x7f8], eax
jg 0x1000a66f
mov dword [ebp - 0xa08], 1
jmp 0x1000a676
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0xeb0], eax
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x120]
cmp eax, 0x4643a64e
jne 0x1000a6a1
mov dword [ebp - 0x3ac], 1
jmp 0x1000a6a8
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0xbc]
imul eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x800], eax
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0xe2c], eax
mov eax, dword [ebp - 0x130]
imul eax, dword [ebp - 0xbc]
test eax, eax
je 0x1000a6ed
mov eax, 0x9b39
test eax, eax
je 0x1000a6ed
mov dword [ebp - 0x3b4], 1
jmp 0x1000a6f4
and dword [ebp - 0x3b4], 0
push 0
lea ecx, [ebp - 0xcfc]
call fcn.1001597e
mov ecx, dword [ebp - 0x3b4]
mov dword [eax], ecx
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1000a726
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xcfc]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8b0]
call fcn.10015979
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x128], 1
push 3
lea ecx, [ebp - 0x898]
call fcn.10015911
mov dword [ebp - 4], 6
mov dword [ebp - 0xa10], 1
mov dword [ebp - 0x280], 0
jmp 0x1000a78c
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 3
jge 0x1000a7ae
push dword [ebp - 0x280]
lea ecx, [ebp - 0x898]
call fcn.1001597e
mov dword [eax], 1
jmp 0x1000a77f
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x128], 0
jmp 0x1000a7d0
mov eax, dword [ebp - 0x128]
inc eax
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 2
jg 0x1000a914
mov dword [ebp - 0x308], 0
mov dword [ebp - 0x1c], 0
jmp 0x1000a7f7
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1000a80c
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
jmp 0x1000a7f0
mov dword [ebp - 0x1c], 0
jmp 0x1000a81c
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jg 0x1000a90f
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x898]
call fcn.1001597e
cmp dword [eax], 0
jge 0x1000a845
mov dword [ebp - 0x808], 1
jmp 0x1000a84c
and dword [ebp - 0x808], 0
cmp dword [ebp - 0x808], 0xffff
ja 0x1000a864
mov dword [ebp - 0x3bc], 1
jmp 0x1000a86b
and dword [ebp - 0x3bc], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x898]
call fcn.1001597e
mov ecx, dword [ebp - 0x3bc]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000a8f7
imul eax, dword [ebp - 0x308], 7
test eax, eax
jne 0x1000a8b6
cmp dword [ebp - 0x128], 0
jne 0x1000a8b6
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x898]
call fcn.1001597e
cmp dword [eax], 0
jne 0x1000a8b6
and dword [ebp - 0x810], 0
jmp 0x1000a8c0
mov dword [ebp - 0x810], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x898]
call fcn.1001597e
mov ecx, dword [ebp - 0x810]
cmp ecx, dword [eax]
jl 0x1000a8f7
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x898]
call fcn.1001597e
cmp dword [eax], 0
je 0x1000a8f7
mov dword [ebp - 0x3c4], 1
jmp 0x1000a8fe
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0xa10], eax
jmp 0x1000a815
jmp 0x1000a7c3
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x898]
call fcn.10015979
mov dword [ebp - 0x150], 0xd513c61c
push 4
lea ecx, [ebp - 0x940]
call fcn.10015911
mov dword [ebp - 4], 7
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x2c], 0
jmp 0x1000a95b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1000a971
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x98], 0xe3556834
jmp 0x1000a954
mov dword [ebp - 0x2c], 0
jmp 0x1000a981
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x1000a997
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x33c], 0x3606de71
jmp 0x1000a97a
mov dword [ebp - 0x2c], 0
jmp 0x1000a9a7
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1000a9c3
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x940]
call fcn.1001597e
mov dword [eax], 0xd66a0756
jmp 0x1000a9a0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x33c], 0
jmp 0x1000a9f1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x33c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x33c], 0
jg 0x1000ab49
mov dword [ebp - 0xc4], 0xfffffff7
mov dword [ebp - 0x1d0], 0
jmp 0x1000aa28
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x1000aa44
mov eax, dword [ebp - 0x1d0]
mov dword [ebp + eax*4 - 0xe04], 0x693009ce
jmp 0x1000aa1b
mov dword [ebp - 0xc4], 0
jmp 0x1000aa5d
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 0
jg 0x1000ab44
mov eax, dword [ebp - 0xc4]
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp - 0x818], eax
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebp - 0x818]
mov dword [ebp + eax*4 - 0x98], ecx
push 3
lea ecx, [ebp - 0x940]
call fcn.1001597e
mov dword [ebp - 0x2b8], eax
mov eax, dword [ebp - 0x2b8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x2b8]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x818]
imul ecx, dword [eax]
test ecx, ecx
je 0x1000aae3
mov byte [ebp - 0xf5], 0
movzx eax, byte [ebp - 0xf5]
test eax, eax
je 0x1000aae1
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1000ab25
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp - 0x150], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x33c]
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp + ecx*4 - 0x98], eax
mov eax, dword [ebp - 0xc4]
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax*4 - 0x98]
mov dword [ebp + ecx - 0xe04], eax
jmp 0x1000aa50
jmp 0x1000a9d6
push 2
lea ecx, [ebp - 0x940]
call fcn.1001597e
cmp dword [eax], 0
jne 0x1000ab74
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x98], 0
jne 0x1000ab74
and dword [ebp - 0x3cc], 0
jmp 0x1000ab7e
mov dword [ebp - 0x3cc], 1
imul eax, dword [ebp - 0x3cc], 0xfffffffe
cmp dword [ebp - 0x190], eax
jne 0x1000ab99
mov dword [ebp - 0x820], 1
jmp 0x1000aba0
and dword [ebp - 0x820], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
add eax, dword [ebp - 0x820]
cmp eax, dword [ebp - 0x190]
jg 0x1000abc7
mov dword [ebp - 0x3d4], 1
jmp 0x1000abce
and dword [ebp - 0x3d4], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x3d4], eax
jg 0x1000abe8
mov dword [ebp - 0x828], 1
jmp 0x1000abef
and dword [ebp - 0x828], 0
mov eax, dword [ebp - 0x150]
cmp dword [ebp - 0x828], eax
jg 0x1000ac09
mov dword [ebp - 0x3dc], 1
jmp 0x1000ac10
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x150], eax
mov esi, dword [ebp - 0x150]
push 3
lea ecx, [ebp - 0x940]
call fcn.1001597e
cmp esi, dword [eax]
jg 0x1000ac3f
mov dword [ebp - 0x2f0], 1
jmp 0x1000ac46
and dword [ebp - 0x2f0], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp + eax - 0x98], ecx
mov eax, dword [ebp - 0x2f0]
sub eax, 0x1225a9a7
jne 0x1000ac72
mov dword [ebp - 0xa18], 1
jmp 0x1000ac79
and dword [ebp - 0xa18], 0
cmp dword [ebp - 0x190], 0xf529
jne 0x1000ac91
mov dword [ebp - 0x830], 1
jmp 0x1000ac98
and dword [ebp - 0x830], 0
cmp dword [ebp - 0x830], 0x2efe8e60
jne 0x1000acb0
mov dword [ebp - 0x3e4], 1
jmp 0x1000acb7
and dword [ebp - 0x3e4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x33c]
cmp dword [ebp - 0x3e4], eax
jg 0x1000acd8
mov dword [ebp - 0x838], 1
jmp 0x1000acdf
and dword [ebp - 0x838], 0
mov eax, dword [ebp - 0x838]
neg eax
cmp eax, 0xb3d385e1
jae 0x1000acfa
mov dword [ebp - 0x3ec], 1
jmp 0x1000ad01
and dword [ebp - 0x3ec], 0
push 1
lea ecx, [ebp - 0x940]
call fcn.1001597e
mov ecx, dword [ebp - 0x3ec]
cmp ecx, dword [eax]
jg 0x1000ad24
mov dword [ebp - 0x840], 1
jmp 0x1000ad2b
and dword [ebp - 0x840], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x33c]
cmp eax, dword [ebp - 0x840]
jg 0x1000ad4c
mov dword [ebp - 0x3f4], 1
jmp 0x1000ad53
and dword [ebp - 0x3f4], 0
mov eax, dword [ebp - 0x190]
cmp dword [ebp - 0x3f4], eax
jge 0x1000ad6d
mov dword [ebp - 0x848], 1
jmp 0x1000ad74
and dword [ebp - 0x848], 0
mov eax, dword [ebp - 0x848]
mov dword [ebp - 0x190], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x940]
call fcn.10015979
mov dword [ebp - 0x6c], 0
jmp 0x1000ad9f
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 2
jge 0x1000adb5
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0xbc0], 0xfffffff9
jmp 0x1000ad98
mov dword [ebp - 0x6c], 0
jmp 0x1000adc5
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 1
jge 0x1000addb
mov eax, dword [ebp - 0x6c]
mov dword [ebp + eax*4 - 0x118], 0x490c4d8e
jmp 0x1000adbe
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x118], 1
jmp 0x1000ae09
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x118], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x118], 0
jl 0x1000b554
mov dword [ebp - 0xf4c], 0
mov dword [ebp - 0xe34], 0xdada439b
mov dword [ebp - 0xeb8], 0xdc4b4e12
mov dword [ebp - 0xe3c], 0xa624cdb
mov dword [ebp - 0xf14], 0
mov dword [ebp - 0xd58], 0x3921ded6
mov dword [ebp - 0xd5c], 0xffffffff
push 3
lea ecx, [ebp - 0xc6c]
call fcn.10015911
mov dword [ebp - 4], 8
mov dword [ebp - 0x230], 0
jmp 0x1000ae90
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1000aeaf
push dword [ebp - 0x230]
lea ecx, [ebp - 0xc6c]
call fcn.1001597e
or dword [eax], 0xffffffff
jmp 0x1000ae83
push 1
lea ecx, [ebp - 0xc6c]
call fcn.1001597e
mov dword [ebp - 0x3fc], eax
mov eax, dword [ebp - 0x3fc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3fc]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc6c]
call fcn.10015979
push 3
lea ecx, [ebp - 0xa58]
call fcn.10015911
mov dword [ebp - 4], 9
push 1
lea ecx, [ebp - 0xba0]
call fcn.10015911
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xcc], 6
mov dword [ebp - 0xa20], 0x7b5ca986
mov dword [ebp - 0x1d8], 0
jmp 0x1000af34
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1000af53
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xba0]
call fcn.1001597e
or dword [eax], 0xffffffff
jmp 0x1000af27
mov byte [ebp - 0x10b], 0
movzx eax, byte [ebp - 0x10b]
test eax, eax
je 0x1000af6d
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [ebp - 0xcc], 0
jmp 0x1000af86
mov eax, dword [ebp - 0xcc]
dec eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
jl 0x1000aff2
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xba0]
call fcn.1001597e
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x850], eax
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xba0]
call fcn.1001597e
mov ecx, dword [ebp - 0x850]
mov dword [eax], ecx
mov eax, dword [ebp - 0xcc]
cmp dword [ebp - 0x850], eax
jne 0x1000afdd
mov dword [ebp - 0x404], 1
jmp 0x1000afe4
and dword [ebp - 0x404], 0
mov eax, dword [ebp - 0x404]
mov dword [ebp - 0xa20], eax
jmp 0x1000af79
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xba0]
call fcn.10015979
mov dword [ebp - 0x260], 0
jmp 0x1000b01a
mov eax, dword [ebp - 0x260]
inc eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 3
jge 0x1000b03c
push dword [ebp - 0x260]
lea ecx, [ebp - 0xa58]
call fcn.1001597e
mov dword [eax], 0x31d83293
jmp 0x1000b00d
push 2
lea ecx, [ebp - 0xa58]
call fcn.1001597e
mov dword [eax], 1
jmp 0x1000b075
push 2
lea ecx, [ebp - 0xa58]
call fcn.1001597e
mov dword [ebp - 0x858], eax
mov eax, dword [ebp - 0x858]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x858]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xa58]
call fcn.1001597e
cmp dword [eax], 0
jl 0x1000b540
mov dword [ebp - 0xbd0], 5
mov dword [ebp - 0xbcc], 5
mov dword [ebp - 0xbc8], 5
mov dword [ebp - 0xbc4], 5
mov dword [ebp - 0x48], 0xfffffffa
mov dword [ebp - 0x2c0], 0x45d811f0
mov dword [ebp - 0x42c], 0xdb6084ed
mov dword [ebp - 0x48], 3
jmp 0x1000b0de
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1000b0f0
mov dword [ebp - 0x2c0], 0xffffffff
jmp 0x1000b0d7
mov dword [ebp - 0x2c0], 0
cmp dword [ebp - 0x2c0], 0
jne 0x1000b10f
mov dword [ebp - 0x448], 1
jmp 0x1000b116
and dword [ebp - 0x448], 0
mov eax, 0x1546
test eax, eax
je 0x1000b155
cmp dword [ebp - 0x48], 0x5de1fc65
jne 0x1000b134
mov dword [ebp - 0x860], 1
jmp 0x1000b13b
and dword [ebp - 0x860], 0
mov eax, dword [ebp - 0x860]
sub eax, dword [ebp - 0x48]
cmp eax, 5
jae 0x1000b155
mov dword [ebp - 0x420], 1
jmp 0x1000b15c
and dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x448]
cmp eax, dword [ebp - 0x420]
jg 0x1000b176
mov dword [ebp - 0x7ec], 1
jmp 0x1000b17d
and dword [ebp - 0x7ec], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xbd0]
cmp dword [ebp - 0x7ec], eax
jg 0x1000b19e
mov dword [ebp - 0x41c], 1
jmp 0x1000b1a5
and dword [ebp - 0x41c], 0
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0xbd0]
cmp dword [ebp - 0x41c], eax
jne 0x1000b1c6
mov dword [ebp - 0x64c], 1
jmp 0x1000b1cd
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x64c], eax
jg 0x1000b1e4
mov dword [ebp - 0x424], 1
jmp 0x1000b1eb
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x424], eax
je 0x1000b205
mov dword [ebp - 0x764], 1
jmp 0x1000b20c
and dword [ebp - 0x764], 0
mov eax, dword [ebp - 0x48]
cmp eax, dword [ebp - 0x764]
jg 0x1000b223
mov dword [ebp - 0x654], 1
jmp 0x1000b22a
and dword [ebp - 0x654], 0
mov eax, dword [ebp - 0x42c]
cmp dword [ebp - 0x654], eax
jne 0x1000b244
mov dword [ebp - 0x434], 1
jmp 0x1000b24b
and dword [ebp - 0x434], 0
cmp dword [ebp - 0x434], 0xffffffff
jne 0x1000b260
mov dword [ebp - 0x834], 1
jmp 0x1000b267
and dword [ebp - 0x834], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x834], eax
je 0x1000b27e
mov dword [ebp - 0x43c], 1
jmp 0x1000b285
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0xa28], 0x23498e64
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov eax, dword [ebp + eax*4 - 0xbc0]
mov dword [ebp - 0x65c], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x118]
mov ecx, dword [ebp - 0x65c]
mov dword [ebp + eax*4 - 0xbc0], ecx
cmp dword [ebp - 0x65c], 0xffffffff
jle 0x1000b2e1
mov dword [ebp - 0x444], 1
jmp 0x1000b2e8
and dword [ebp - 0x444], 0
mov eax, dword [ebp - 0x444]
mov dword [ebp - 0xa28], eax
mov byte [ebp - 0xb1], 0
mov dword [ebp - 0x50], 3
mov dword [ebp - 0x45c], 0xfffffffe
mov dword [ebp - 0xb18], 0
mov dword [ebp - 0x7f4], 0xe283d1f0
mov dword [ebp - 0x318], 0xcc9f
mov dword [ebp - 0x8c], 0
jmp 0x1000b343
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1000b35f
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xc84], 9
jmp 0x1000b336
mov dword [ebp - 0x8c], 0
jmp 0x1000b378
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 2
jge 0x1000b394
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xf70], 0xcb2d505b
jmp 0x1000b36b
cmp dword [ebp - 0x50], 0
je 0x1000b3ac
cmp dword [ebp - 0x50], 0
je 0x1000b3ac
mov dword [ebp - 0x76c], 1
jmp 0x1000b3b3
and dword [ebp - 0x76c], 0
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x76c]
jne 0x1000b3ef
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xd64], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0xd6c], eax
mov eax, 0x3735b263
cmp eax, 0x38e85a7
jge 0x1000b3e8
mov dword [ebp - 0x44c], 1
jmp 0x1000b3ef
and dword [ebp - 0x44c], 0
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x50]
sub ecx, dword [ebp - 0x50]
imul ecx, dword [ebp - 0x50]
sub eax, ecx
cmp eax, 0x6cc9
jg 0x1000b411
mov dword [ebp - 0x664], 1
jmp 0x1000b418
and dword [ebp - 0x664], 0
cmp dword [ebp - 0x664], 0xfffffffb
je 0x1000b42d
mov dword [ebp - 0x454], 1
jmp 0x1000b434
and dword [ebp - 0x454], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x454]
mov dword [ebp + eax - 0xc84], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
mov dword [ebp - 0xb28], eax
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xaf4], eax
mov eax, dword [ebp - 0x318]
dec eax
mov dword [ebp - 0x318], eax
mov eax, dword [ebp - 0xb28]
cmp eax, dword [ebp - 0xaf4]
je 0x1000b48d
mov dword [ebp - 0x464], 1
jmp 0x1000b494
and dword [ebp - 0x464], 0
mov dword [ebp - 0x45c], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xc84]
mov dword [ebp - 0x7f4], eax
cmp dword [ebp - 0x7f4], 0
jne 0x1000b4cc
cmp dword [ebp - 0x45c], 0
jne 0x1000b4cc
and dword [ebp - 0x66c], 0
jmp 0x1000b4d6
mov dword [ebp - 0x66c], 1
mov eax, dword [ebp - 0x50]
cmp dword [ebp - 0x66c], eax
jg 0x1000b4ed
mov dword [ebp - 0x774], 1
jmp 0x1000b4f4
and dword [ebp - 0x774], 0
mov eax, dword [ebp - 0x464]
add eax, dword [ebp - 0x774]
cmp eax, 0x1dd8e181
jle 0x1000b513
mov dword [ebp - 0x46c], 1
jmp 0x1000b51a
and dword [ebp - 0x46c], 0
mov eax, dword [ebp - 0x46c]
mov dword [ebp - 0xb18], eax
movzx eax, byte [ebp - 0xb1]
test eax, eax
je 0x1000b53b
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
jmp 0x1000b051
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa58]
call fcn.10015979
jmp 0x1000adee
mov dword [ebp - 0xd4], 0xd509
mov dword [ebp - 0x124], 0xfffffff6
mov dword [ebp - 0x11c], 0x56411d7f
mov dword [ebp - 0x474], 1
mov dword [ebp - 0xc54], 1
mov dword [ebp - 0xc50], 1
mov dword [ebp - 0xc4c], 1
mov dword [ebp - 0xc48], 1
lea ecx, [ebp - 0x295]
call fcn.10009843
push eax
lea eax, [ebp - 0xc44]
push eax
lea eax, [ebp - 0xc54]
push eax
lea ecx, [ebp - 0xf68]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8a4]
call fcn.10015953
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x77c], 0xb0d58e7e
mov dword [ebp - 0x2c8], 0x898d08f4
mov dword [ebp - 0x494], 0x4fe10ef7
push 2
lea ecx, [ebp - 0xc9c]
call fcn.10015911
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x1e0], 0
jmp 0x1000b628
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1000b64a
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xc9c]
call fcn.1001597e
mov dword [eax], 0xbd1a6f32
jmp 0x1000b61b
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xd74], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xd7c], eax
cmp dword [ebp - 0x124], 0
je 0x1000b68c
cmp dword [ebp - 0x11c], 0
je 0x1000b68c
mov dword [ebp - 0x674], 1
jmp 0x1000b693
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x674]
mov dword [ebp - 0x474], eax
mov eax, dword [ebp - 0x474]
mov dword [ebp - 0xd84], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd8c], eax
mov esi, dword [ebp - 0x11c]
push 0
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
cmp esi, dword [eax]
jne 0x1000b6da
mov dword [ebp - 0x87c], 1
jmp 0x1000b6e1
and dword [ebp - 0x87c], 0
push 1
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
mov ecx, dword [ebp - 0x87c]
cmp ecx, dword [eax]
je 0x1000b704
mov dword [ebp - 0x47c], 1
jmp 0x1000b70b
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x47c]
sub eax, dword [ebp - 0xd4]
sub eax, 0x617c0ec0
cmp dword [ebp - 0xd4], eax
jne 0x1000b736
cmp dword [ebp - 0x11c], 0
jne 0x1000b736
and dword [ebp - 0x67c], 0
jmp 0x1000b740
mov dword [ebp - 0x67c], 1
push 3
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
mov ecx, dword [ebp - 0x67c]
cmp ecx, dword [eax]
jle 0x1000b763
mov dword [ebp - 0x9a0], 1
jmp 0x1000b76a
and dword [ebp - 0x9a0], 0
push 0
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
push 0
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
mov dword [ebp - 0x484], eax
push 1
lea ecx, [ebp - 0x8a4]
call fcn.1001597e
mov ecx, dword [ebp - 0x484]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x484]
mov eax, dword [eax]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0x77c]
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0xd4]
add eax, dword [ebp - 0x2c8]
cmp eax, dword [ebp - 0xd4]
jne 0x1000b7db
mov dword [ebp - 0x48c], 1
jmp 0x1000b7e2
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0xd4]
cmp dword [ebp - 0x48c], eax
jg 0x1000b7fc
mov dword [ebp - 0x95c], 1
jmp 0x1000b803
and dword [ebp - 0x95c], 0
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0xd94], eax
mov eax, dword [ebp - 0x2c8]
sub eax, dword [ebp - 0x11c]
cmp eax, 0x4643a64e
jne 0x1000b82e
mov dword [ebp - 0x684], 1
jmp 0x1000b835
and dword [ebp - 0x684], 0
mov eax, dword [ebp - 0xd4]
imul eax, dword [ebp - 0x684]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x494]
mov dword [ebp - 0xd9c], eax
mov eax, dword [ebp - 0x124]
imul eax, dword [ebp - 0xd4]
test eax, eax
je 0x1000b87a
mov eax, 0x9b39
test eax, eax
je 0x1000b87a
mov dword [ebp - 0x7fc], 1
jmp 0x1000b881
and dword [ebp - 0x7fc], 0
push 0
lea ecx, [ebp - 0xc9c]
call fcn.1001597e
mov ecx, dword [ebp - 0x7fc]
mov dword [eax], ecx
mov byte [ebp - 0xfd], 0
movzx eax, byte [ebp - 0xfd]
test eax, eax
je 0x1000b8b3
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xc9c]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8a4]
call fcn.10015979
mov dword [ebp - 0xda4], 0x2799
mov byte [ebp - 0xb3], 0
movzx eax, byte [ebp - 0xb3]
test eax, eax
je 0x1000b8fd
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov byte [ebp - 0x10d], 0
movzx eax, byte [ebp - 0x10d]
test eax, eax
je 0x1000b923
push 0x11e4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [ebp - 0x74], 0x6b8f3d42
mov dword [ebp - 0xa0], 9
mov dword [ebp - 0xc04], 0xfffffff6
mov dword [ebp - 0xc00], 0xfffffff6
mov dword [ebp - 0xbfc], 0xfffffff6
mov dword [ebp - 0xbf8], 0xfffffff6
lea ecx, [ebp - 0x2dd]
call fcn.10009843
push eax
lea eax, [ebp - 0xbf4]
push eax
lea eax, [ebp - 0xc04]
push eax
lea ecx, [ebp - 0xf78]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xbb8]
call fcn.10015953
mov dword [ebp - 4], 0xd
mov byte [ebp - 0xb5], 0
movzx eax, byte [ebp - 0xb5]
test eax, eax
je 0x1000b9b8
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
cmp dword [ebp - 0x74], 0
jne 0x1000ba3b
cmp dword [ebp - 0x74], 0x6b471dfd
jl 0x1000b9d3
mov dword [ebp - 0xa2c], 1
jmp 0x1000b9da
and dword [ebp - 0xa2c], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0xdac], eax
cmp dword [ebp - 0x74], 0x8e85
jg 0x1000b9f8
mov dword [ebp - 0x49c], 1
jmp 0x1000b9ff
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x74]
cmp dword [ebp - 0xa0], eax
je 0x1000ba22
mov dword [ebp - 0x964], 1
jmp 0x1000ba29
and dword [ebp - 0x964], 0
cmp dword [ebp - 0xa0], 0
jne 0x1000ba3b
and dword [ebp - 0x2f8], 0
jmp 0x1000ba45
mov dword [ebp - 0x2f8], 1
push 1
lea ecx, [ebp - 0xbb8]
call fcn.1001597e
mov ecx, dword [ebp - 0x2f8]
mov dword [eax], ecx
cmp dword [ebp - 0x2f8], 0x31aa
jle 0x1000ba72
mov dword [ebp - 0x68c], 1
jmp 0x1000ba79
and dword [ebp - 0x68c], 0
cmp dword [ebp - 0x68c], 8
jb 0x1000ba8e
mov dword [ebp - 0xb20], 1
jmp 0x1000ba95
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0xdb4], eax
push 1
lea ecx, [ebp - 0xbb8]
call fcn.1001597e
xor eax, eax
inc eax
je 0x1000bad2
mov byte [ebp - 0x105], 0
movzx eax, byte [ebp - 0x105]
test eax, eax
je 0x1000bacd
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x1000bbdd
mov dword [ebp - 0x96c], 0x3ca4d9a5
mov dword [ebp - 0xb1c], 0xfffffffc
mov dword [ebp - 0x74], 0
jmp 0x1000baf6
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x33
jne 0x1000bb94
mov dword [ebp - 0xa3c], 1
mov dword [ebp - 0x974], 0x403132d6
cmp dword [ebp - 0x96c], 0
je 0x1000bb32
cmp dword [ebp - 0xa3c], 0
je 0x1000bb32
mov dword [ebp - 0x4a4], 1
jmp 0x1000bb39
and dword [ebp - 0x4a4], 0
push 1
lea ecx, [ebp - 0xbb8]
call fcn.1001597e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x4a4]
jle 0x1000bb5c
mov dword [ebp - 0x784], 1
jmp 0x1000bb63
and dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x974], eax
mov byte [ebp - 0xb7], 0
movzx eax, byte [ebp - 0xb7]
test eax, eax
je 0x1000bb8f
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x1000baef
mov dword [ebp - 0xa0], 0
jmp 0x1000bbad
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffffd
jle 0x1000bbdd
mov byte [ebp - 0x10f], 0
movzx eax, byte [ebp - 0x10f]
test eax, eax
je 0x1000bbd0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
cmp dword [ebp - 0xb1c], 0
je 0x1000bbdb
jmp 0x1000bba0
jmp 0x1000bba0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbb8]
call fcn.10015979
mov dword [ebp - 0xdc], 0xd509
mov dword [ebp - 0x158], 0x2bea
push 2
lea ecx, [ebp - 0xcf0]
call fcn.10015911
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x238], 0
jmp 0x1000bc2d
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 2
jge 0x1000bc4f
push dword [ebp - 0x238]
lea ecx, [ebp - 0xcf0]
call fcn.1001597e
mov dword [eax], 0xecb45710
jmp 0x1000bc20
mov esi, dword [ebp - 0x158]
push 1
lea ecx, [ebp - 0xcf0]
call fcn.1001597e
mov dword [eax], esi
mov dword [ebp - 0x158], 0
jmp 0x1000bc7d
mov eax, dword [ebp - 0x158]
inc eax
mov dword [ebp - 0x158], eax
cmp dword [ebp - 0x158], 1
jg 0x1000bca7
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1000bca5
push 0x1c0d
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x1000bc70
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcf0]
call fcn.10015979
mov dword [ebp - 0x134], 0xfffffff6
mov dword [ebp - 0x12c], 0x56411d7f
mov dword [ebp - 0x694], 1
mov dword [ebp - 0xc40], 1
mov dword [ebp - 0xc3c], 1
mov dword [ebp - 0xc38], 1
mov dword [ebp - 0xc34], 1
lea ecx, [ebp - 0x31d]
call fcn.10009843
push eax
lea eax, [ebp - 0xc30]
push eax
lea eax, [ebp - 0xc40]
push eax
lea ecx, [ebp - 0xf88]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x8bc]
call fcn.10015953
mov dword [ebp - 4], 0xf
mov dword [ebp - 0x4c4], 0xb0d58e7e
mov dword [ebp - 0x2d0], 0x898d08f4
mov dword [ebp - 0x6a4], 0x4fe10ef7
push 2
lea ecx, [ebp - 0xd08]
call fcn.10015911
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x1e8], 0
jmp 0x1000bd80
mov eax, dword [ebp - 0x1e8]
inc eax
mov dword [ebp - 0x1e8], eax
cmp dword [ebp - 0x1e8], 2
jge 0x1000bda2
push dword [ebp - 0x1e8]
lea ecx, [ebp - 0xd08]
call fcn.1001597e
mov dword [eax], 0xbd1a6f32
jmp 0x1000bd73
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xdbc], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0xdc4], eax
cmp dword [ebp - 0x134], 0
je 0x1000bde4
cmp dword [ebp - 0x12c], 0
je 0x1000bde4
mov dword [ebp - 0x4ac], 1
jmp 0x1000bdeb
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x694], eax
mov eax, dword [ebp - 0x694]
mov dword [ebp - 0xdcc], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xdd4], eax
mov esi, dword [ebp - 0x12c]
push 0
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
cmp esi, dword [eax]
jne 0x1000be32
mov dword [ebp - 0x4b4], 1
jmp 0x1000be39
and dword [ebp - 0x4b4], 0
push 1
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
mov ecx, dword [ebp - 0x4b4]
cmp ecx, dword [eax]
je 0x1000be5c
mov dword [ebp - 0x83c], 1
jmp 0x1000be63
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x83c]
sub eax, dword [ebp - 0xdc]
sub eax, 0x617c0ec0
cmp dword [ebp - 0xdc], eax
jne 0x1000be8e
cmp dword [ebp - 0x12c], 0
jne 0x1000be8e
and dword [ebp - 0x4bc], 0
jmp 0x1000be98
mov dword [ebp - 0x4bc], 1
push 3
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
mov ecx, dword [ebp - 0x4bc]
cmp ecx, dword [eax]
jle 0x1000bebb
mov dword [ebp - 0x97c], 1
jmp 0x1000bec2
and dword [ebp - 0x97c], 0
push 0
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
push 0
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
mov dword [ebp - 0x69c], eax
push 1
lea ecx, [ebp - 0x8bc]
call fcn.1001597e
mov ecx, dword [ebp - 0x69c]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x69c]
mov eax, dword [eax]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0xdc]
add eax, dword [ebp - 0x2d0]
cmp eax, dword [ebp - 0xdc]
jne 0x1000bf33
mov dword [ebp - 0x78c], 1
jmp 0x1000bf3a
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x78c], eax
jg 0x1000bf54
mov dword [ebp - 0xa4c], 1
jmp 0x1000bf5b
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0xddc], eax
mov eax, dword [ebp - 0x2d0]
sub eax, dword [ebp - 0x12c]
cmp eax, 0x4643a64e
jne 0x1000bf86
mov dword [ebp - 0x4cc], 1
jmp 0x1000bf8d
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0xdc]
imul eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x6a4], eax
mov eax, dword [ebp - 0x6a4]
mov dword [ebp - 0xde4], eax
mov eax, dword [ebp - 0x134]
imul eax, dword [ebp - 0xdc]
test eax, eax
je 0x1000bfd2
mov eax, 0x9b39
test eax, eax
je 0x1000bfd2
mov dword [ebp - 0x4d4], 1
jmp 0x1000bfd9
and dword [ebp - 0x4d4], 0
push 0
lea ecx, [ebp - 0xd08]
call fcn.1001597e
mov ecx, dword [ebp - 0x4d4]
mov dword [eax], ecx
mov byte [ebp - 0x10e], 0
movzx eax, byte [ebp - 0x10e]
test eax, eax
je 0x1000c00b
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xd08]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8bc]
call fcn.10015979
mov dword [ebp - 0xdec], 0x2799
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1000c055
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov byte [ebp - 0x108], 0
movzx eax, byte [ebp - 0x108]
test eax, eax
je 0x1000c07b
push 0x11e4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x4fc], 0xffffffff
cmp dword [ebp - 0x24], 0
je 0x1000c1fe
push 1
lea ecx, [ebp - 0xb4c]
call fcn.10015911
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x278], 0
jmp 0x1000c0c3
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 1
jge 0x1000c0e5
push dword [ebp - 0x278]
lea ecx, [ebp - 0xb4c]
call fcn.1001597e
mov dword [eax], 0xfb0b0297
jmp 0x1000c0b6
mov dword [ebp - 0x24], 0
jmp 0x1000c0f5
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jg 0x1000c1ea
mov dword [ebp - 0x1f0], 0x39ed080c
mov dword [ebp - 0x1f0], 0
jmp 0x1000c122
cmp dword [ebp - 0x1f0], 0
jg 0x1000c1c3
push 1
lea ecx, [ebp - 0xd20]
call fcn.10015911
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x240], 0
jmp 0x1000c159
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x1000c17b
push dword [ebp - 0x240]
lea ecx, [ebp - 0xd20]
call fcn.1001597e
mov dword [eax], 0x5653d423
jmp 0x1000c14c
mov byte [ebp - 0xcd], 0
movzx eax, byte [ebp - 0xcd]
test eax, eax
je 0x1000c19c
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
push 0
lea ecx, [ebp - 0xd20]
call fcn.1001597e
mov dword [eax], 0xfffffffc
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xd20]
call fcn.10015979
jmp 0x1000c115
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb4c]
call fcn.1001597e
mov esi, eax
push dword [ebp - 0x24]
lea ecx, [ebp - 0xb4c]
call fcn.1001597e
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x1000c0ee
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb4c]
call fcn.10015979
jmp 0x1000c4eb
mov dword [ebp - 0x180], 0
mov dword [ebp - 0x794], 0xae215169
mov dword [ebp - 0x310], 0
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x160], 4
mov dword [ebp - 0x50c], 0
mov dword [ebp - 0xd30], 0x33490ce6
mov dword [ebp - 0xd2c], 0x33490ce6
mov dword [ebp - 0xd28], 0x33490ce6
mov dword [ebp - 0xd24], 0x33490ce6
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0xdf4], eax
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x310], eax
je 0x1000c28f
mov dword [ebp - 0x804], 1
jmp 0x1000c296
and dword [ebp - 0x804], 0
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x804], eax
jle 0x1000c2ad
mov dword [ebp - 0x4dc], 1
jmp 0x1000c2b4
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x4dc]
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x6ac], eax
jl 0x1000c2dd
mov dword [ebp - 0x4e4], 1
jmp 0x1000c2e4
and dword [ebp - 0x4e4], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x4e4], eax
jle 0x1000c2fe
mov dword [ebp - 0x984], 1
jmp 0x1000c305
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0xdfc], eax
push 0xfffffffffffffffe
pop eax
cmp eax, 0x4e785c2f
jae 0x1000c327
mov dword [ebp - 0x4ec], 1
jmp 0x1000c32e
and dword [ebp - 0x4ec], 0
mov dword [ebp - 0x794], 0x48aab564
mov eax, dword [ebp - 0x794]
cmp eax, dword [ebp - 0x4ec]
jne 0x1000c352
mov dword [ebp - 0x6b4], 1
jmp 0x1000c359
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x160]
add eax, dword [ebp - 0x6b4]
jne 0x1000c373
mov dword [ebp - 0x4f4], 1
jmp 0x1000c37a
and dword [ebp - 0x4f4], 0
cmp dword [ebp - 0x4f4], 0xf75d
je 0x1000c392
mov dword [ebp - 0x85c], 1
jmp 0x1000c399
and dword [ebp - 0x85c], 0
mov eax, dword [ebp - 0x85c]
add eax, 0x54953c65
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x4fc]
jg 0x1000c3bb
mov dword [ebp - 0x6bc], 1
jmp 0x1000c3c2
and dword [ebp - 0x6bc], 0
cmp dword [ebp - 0x6bc], 0x5063f373
je 0x1000c3da
mov byte [ebp - 0xd5], 0
movzx eax, byte [ebp - 0xd5]
test eax, eax
je 0x1000c513
push 0
push 0
push 0xfe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
mov dword [ebp - 0xf2c], 0x2799
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x1000c53f
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov byte [ebp - 0xdd], 0
movzx eax, byte [ebp - 0xdd]
test eax, eax
je 0x1000c565
push 0x11e4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push 2
lea ecx, [ebp - 0xa68]
call fcn.10015911
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x140], 0xfffffffa
mov dword [ebp - 0x1f8], 0
jmp 0x1000c59c
cmp dword [ebp - 0x1f8], 2
jge 0x1000c5be