Function at 0x101189c0
Capabilities:
Query or enumerate registry key
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x12b0
call fcn.101f99e0
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0x61c]
push esi
push edi
push 0x208
push 0
push eax
mov dword [ebp - 0x128c], ecx
mov dword [ebp - 0x1250], ebx
mov dword [ebp - 0x1288], 0
mov dword [ebp - 0x1248], 0
mov dword [ebp - 0x1284], 0
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x800
lea eax, [ebp - 0x122c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x824]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x30
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10118a6c
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x2f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10118a8b
lea ecx, [ebp - 0x1288]
push ecx
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZoneMapDomains
push ebx
call eax
jmp 0x10118a9e
lea eax, [ebp - 0x1288]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZoneMapDomains
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, eax
test esi, esi
je 0x10118aad
push esi
call ebx
test edi, edi
jne 0x1011a8aa
mov dword [ebp - 0x1280], edi
jmp 0x10118ac0
mov edi, dword [ebp - 0x1288]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10118adc
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3b
call fcn.10003680
add esp, 4
push 0x103
test eax, eax
je 0x10118b01
lea ecx, [ebp - 0x61c]
push ecx
push dword [ebp - 0x1280]
push edi
call eax
jmp 0x10118b15
lea eax, [ebp - 0x61c]
push eax
push dword [ebp - 0x1280]
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
mov edi, eax
test esi, esi
je 0x10118b1e
push esi
call ebx
test edi, edi
jne 0x1011a89f
cmp dword [ebp - 0x1280], 0xc8
jg 0x1011a89f
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea edi, [eax + 0x10]
lea eax, [ebp - 0x61c]
mov dword [ebp - 0x124c], edi
test eax, 0xffff0000
jne 0x10118c59
push 0
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x10118c8a
lea ecx, [ebp - 0x61c]
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1254], eax
lea ebx, [ebx]
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10118bb8
lea edx, [ebp - 0x61c]
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10118bd6
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x10118c8a
mov eax, dword [ebp - 0x1254]
jmp 0x10118b90
test esi, esi
je 0x10118c8a
push 6
push dword [ebp - 0x1254]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x10118c8a
lea edx, [ebp - 0x61c]
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x10118c8a
movzx edx, word [ebx]
mov ecx, 1
mov eax, dword [edi - 8]
mov esi, edx
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x10118c3c
push esi
lea ecx, [ebp - 0x124c]
call fcn.10003310
movzx edx, word [ebx]
mov edi, dword [ebp - 0x124c]
movzx ecx, dx
lea eax, [ebx + 2]
push ecx
push eax
push esi
push edi
call fcn.101eb860
add esp, 0x10
mov dword [edi - 0xc], esi
xor eax, eax
mov word [edi + esi*2], ax
jmp 0x10118c8a
lea ecx, [ebp - 0x61c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10118c62
sub ecx, edx
lea eax, [ebp - 0x61c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x124c]
call fcn.10003740
mov edi, dword [ebp - 0x124c]
lea eax, [ebp - 0x61c]
push eax
push str.SoftwareMicrosoftWindowsCurrentVersionInternet_SettingsZoneMapDomains
push 0x102040c0
lea eax, [ebp - 0x824]
push 0x207
push eax
call fcn.100269c0
add esp, 0x14
mov dword [ebp - 0x1248], 0
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10118ccf
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x2f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10118cf5
lea ecx, [ebp - 0x1248]
push ecx
lea ecx, [ebp - 0x824]
push ecx
push dword [ebp - 0x1250]
call eax
jmp 0x10118d0f
lea eax, [ebp - 0x1248]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x1250]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov ebx, eax
test esi, esi
je 0x10118d1c
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x10119894
mov dword [ebp - 0x1240], ebx
mov dword [ebp - 0x1254], ebx
mov dword [ebp - 0x1278], 0x800
mov dword [ebp - 0x1244], 0x104
mov edi, dword [ebp - 0x1248]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10118d60
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10118d99
lea ecx, [ebp - 0x1278]
push ecx
lea ecx, [ebp - 0x122c]
push ecx
lea ecx, [ebp - 0x1254]
push ecx
push 0
lea ecx, [ebp - 0x1244]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
push ebx
push edi
call eax
jmp 0x10118dc6
lea eax, [ebp - 0x1278]
push eax
lea eax, [ebp - 0x122c]
push eax
lea eax, [ebp - 0x1254]
push eax
push 0
lea eax, [ebp - 0x1244]
push eax
lea eax, [ebp - 0x20c]
push eax
push ebx
push edi
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov edi, eax
test esi, esi
je 0x10118dd5
push esi
call ebx
test edi, edi
jne 0x10119852
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea edi, [eax + 0x10]
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x1238], edi
test eax, 0xffff0000
jne 0x10118efe
push 0
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x10118f2f
lea ecx, [ebp - 0x20c]
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x123c], eax
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10118e59
lea edx, [ebp - 0x20c]
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10118e77
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x10118f2f
mov eax, dword [ebp - 0x123c]
jmp 0x10118e31
test esi, esi
je 0x10118f2f
push 6
push dword [ebp - 0x123c]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x10118f2f
lea edx, [ebp - 0x20c]
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x10118f2f
movzx edx, word [ebx]
mov ecx, 1
mov eax, dword [edi - 8]
mov esi, edx
sub ecx, dword [edi - 4]
sub eax, esi
or eax, ecx
jge 0x10118ee1
push esi
lea ecx, [ebp - 0x1238]
call fcn.10003310
movzx edx, word [ebx]
mov edi, dword [ebp - 0x1238]
movzx ecx, dx
lea eax, [ebx + 2]
push ecx
push eax
push esi
push edi
call fcn.101eb860
add esp, 0x10
mov dword [edi - 0xc], esi
xor eax, eax
mov word [edi + esi*2], ax
jmp 0x10118f2f
lea ecx, [ebp - 0x20c]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10118f07
sub ecx, edx
lea eax, [ebp - 0x20c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1238]
call fcn.10003740
mov edi, dword [ebp - 0x1238]
mov ecx, dword [edi - 0x10]
lea eax, [edi - 0x10]
mov dword [ebp - 0x1238], eax
test ecx, ecx
je 0x10118f48
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10118f54
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov ebx, dword [edi - 0xc]
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov dword [ebp - 0x1230], ebx
lea esi, [eax + 0x10]
mov eax, dword [esi - 8]
lea edx, [ebx + 3]
sub eax, edx
mov dword [ebp - 0x123c], esi
or eax, ecx
jge 0x10118f93
push edx
lea ecx, [ebp - 0x123c]
call fcn.10003310
mov esi, dword [ebp - 0x123c]
add ebx, ebx
push ebx
push edi
push ebx
push esi
call fcn.10004510
lea ecx, [ebx + esi]
add esp, 0x10
test ecx, ecx
jne 0x10118fba
call sub.msvcrt.dll__errno
mov dword [eax], 0x16
call fcn.101e6c20
jmp 0x10118fcb
mov eax, dword [0x10202b4c]
mov dword [ecx], eax
mov ax, word [0x10202b50]
mov word [ecx + 4], ax
mov eax, dword [ebp - 0x1230]
xor ecx, ecx
add eax, 3
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x10118fed
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10118ff9
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
mov ebx, dword [esi - 0xc]
mov ecx, 1
sub ecx, dword [eax + 0xc]
mov dword [ebp - 0x1230], ebx
lea edi, [eax + 0x10]
mov eax, dword [ebp - 0x124c]
mov dword [ebp - 0x123c], edi
mov eax, dword [eax - 0xc]
mov dword [ebp - 0x1234], eax
lea edx, [ebx + eax]
mov eax, dword [edi - 8]
sub eax, edx
or eax, ecx
jge 0x10119047
push edx
lea ecx, [ebp - 0x123c]
call fcn.10003310
mov edi, dword [ebp - 0x123c]
add ebx, ebx
push ebx
push esi
push ebx
push edi
call fcn.10004510
mov eax, dword [ebp - 0x1234]
add eax, eax
push eax
push dword [ebp - 0x124c]
push eax
lea eax, [ebx + edi]
push eax
call fcn.10004510
mov eax, dword [ebp - 0x1230]
lea edx, [esi - 0x10]
add eax, dword [ebp - 0x1234]
xor ecx, ecx
mov dword [edi - 0xc], eax
add esp, 0x20
mov word [edi + eax*2], cx
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011909b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1238]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101190b6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x122c]
test al, 2
je 0x10119445
push 0
push ecx
lea eax, [edi - 0x10]
mov esi, esp
push eax
call fcn.10002a60
add esp, 4
add eax, 0x10
mov dword [esi], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x125c], eax
mov eax, 0x10202940
shr eax, 0x10
mov dword [ebp - 0x1234], eax
push 0
test eax, eax
jne 0x1011921f
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x1011922f
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x123c], eax
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10119159
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10119177
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x1011922f
mov eax, dword [ebp - 0x123c]
jmp 0x10119132
test esi, esi
je 0x1011922f
push 6
push dword [ebp - 0x123c]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011922f
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1011922f
movzx edx, word [ebx]
mov ecx, dword [ebp - 0x125c]
mov eax, edx
mov esi, edx
mov dword [ebp - 0x1230], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or edx, eax
jge 0x101191f0
push esi
lea ecx, [ebp - 0x125c]
call fcn.10003310
movzx eax, word [ebx]
mov ecx, dword [ebp - 0x125c]
jmp 0x101191f6
mov eax, dword [ebp - 0x1230]
movzx edx, ax
lea eax, [ebx + 2]
push edx
push eax
push esi
push ecx
call fcn.101eb860
mov eax, dword [ebp - 0x125c]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x125c]
mov word [eax + esi*2], cx
jmp 0x1011922f
push 0x10202940
lea ecx, [ebp - 0x125c]
call fcn.10003740
lea eax, [ebp - 0x125c]
push eax
lea eax, [ebp - 0x1294]
push 0x9cc5
push eax
call fcn.100053d0
add esp, 0xc
mov eax, dword [eax]
mov dword [ebp - 0x1238], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x1234], 0
mov dword [ebp - 0x1258], eax
push 0
jne 0x1011938e
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x1011939e
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x123c], eax
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x101192c8
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x101192e6
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x1011939e
mov eax, dword [ebp - 0x123c]
jmp 0x101192a1
test esi, esi
je 0x1011939e
push 6
push dword [ebp - 0x123c]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011939e
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1011939e
movzx edx, word [ebx]
mov ecx, dword [ebp - 0x1258]
mov eax, edx
mov esi, edx
mov dword [ebp - 0x1230], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or edx, eax
jge 0x1011935f
push esi
lea ecx, [ebp - 0x1258]
call fcn.10003310
movzx eax, word [ebx]
mov ecx, dword [ebp - 0x1258]
jmp 0x10119365
mov eax, dword [ebp - 0x1230]
movzx edx, ax
lea eax, [ebx + 2]
push edx
push eax
push esi
push ecx
call fcn.101eb860
mov eax, dword [ebp - 0x1258]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x1258]
mov word [eax + esi*2], cx
jmp 0x1011939e
push 0x10202940
lea ecx, [ebp - 0x1258]
call fcn.10003740
lea eax, [ebp - 0x1258]
push eax
lea eax, [ebp - 0x1290]
push 0x27b5
push eax
call fcn.100053d0
mov ecx, dword [ebp - 0x128c]
add esp, 0xc
push dword [ebp - 0x1238]
push dword [eax]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x1250]
call fcn.10116e00
mov edx, dword [ebp - 0x1290]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101193fe
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1258]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011941c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1294]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011943a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x125c]
jmp 0x101197cf
test al, 4
je 0x101197e7
push 1
push ecx
lea eax, [edi - 0x10]
mov esi, esp
push eax
call fcn.10002a60
add esp, 4
add eax, 0x10
mov dword [esi], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1264], eax
mov eax, 0x10202940
shr eax, 0x10
mov dword [ebp - 0x1234], eax
push 0
test eax, eax
jne 0x101195a9
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x101195b9
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x123c], eax
jmp 0x101194c0
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x101194e7
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10119505
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x101195b9
mov eax, dword [ebp - 0x123c]
jmp 0x101194c0
test esi, esi
je 0x101195b9
push 6
push dword [ebp - 0x123c]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x101195b9
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x101195b9
movzx edx, word [ebx]
mov ecx, dword [ebp - 0x1264]
mov eax, edx
mov esi, edx
mov dword [ebp - 0x1230], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or edx, eax
jge 0x1011957a
push esi
lea ecx, [ebp - 0x1264]
call fcn.10003310
movzx eax, word [ebx]
mov ecx, dword [ebp - 0x1264]
jmp 0x10119580
mov eax, dword [ebp - 0x1230]
movzx edx, ax
lea eax, [ebx + 2]
push edx
push eax
push esi
push ecx
call fcn.101eb860
mov eax, dword [ebp - 0x1264]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x1264]
mov word [eax + esi*2], cx
jmp 0x101195b9
push 0x10202940
lea ecx, [ebp - 0x1264]
call fcn.10003740
lea eax, [ebp - 0x1264]
push eax
lea eax, [ebp - 0x129c]
push 0x9cc6
push eax
call fcn.100053d0
add esp, 0xc
mov eax, dword [eax]
mov dword [ebp - 0x1238], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x1234], 0
mov dword [ebp - 0x1260], eax
push 0
jne 0x1011971d
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
mov ebx, 1
test esi, esi
je 0x1011972d
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x123c], eax
jmp 0x10119630
push 0
push eax
push 6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10119657
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push esi
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10119675
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov esi, eax
inc ebx
test esi, esi
je 0x1011972d
mov eax, dword [ebp - 0x123c]
jmp 0x10119630
test esi, esi
je 0x1011972d
push 6
push dword [ebp - 0x123c]
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011972d
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push esi
call fcn.10003980
mov ebx, eax
add esp, 0xc
test ebx, ebx
je 0x1011972d
movzx edx, word [ebx]
mov ecx, dword [ebp - 0x1260]
mov eax, edx
mov esi, edx
mov dword [ebp - 0x1230], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, esi
or edx, eax
jge 0x101196ee
push esi
lea ecx, [ebp - 0x1260]
call fcn.10003310
movzx eax, word [ebx]
mov ecx, dword [ebp - 0x1260]
jmp 0x101196f4
mov eax, dword [ebp - 0x1230]
movzx edx, ax
lea eax, [ebx + 2]
push edx
push eax
push esi
push ecx
call fcn.101eb860
mov eax, dword [ebp - 0x1260]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], esi
mov eax, dword [ebp - 0x1260]
mov word [eax + esi*2], cx
jmp 0x1011972d
push 0x10202940
lea ecx, [ebp - 0x1260]
call fcn.10003740
lea eax, [ebp - 0x1260]
push eax
lea eax, [ebp - 0x1298]
push 0x27b6
push eax
call fcn.100053d0
mov ecx, dword [ebp - 0x128c]
add esp, 0xc
push dword [ebp - 0x1238]
push dword [eax]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x1250]
call fcn.10116e00
mov edx, dword [ebp - 0x1298]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011978d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1260]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101197ab
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x129c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101197c9
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1264]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x101197e7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x800
lea eax, [ebp - 0x122c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
mov ebx, dword [ebp - 0x1240]
add esp, 0x18
inc ebx
mov dword [ebp - 0x1278], 0x800
mov dword [ebp - 0x1244], 0x104
add edi, 0xfffffff0
mov dword [ebp - 0x1240], ebx
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x10118d44
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x10118d44
mov edi, dword [ebp - 0x1248]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x1011986e
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x44
call fcn.10003680
add esp, 4
push edi
test eax, eax
je 0x10119881
call eax
jmp 0x10119887
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x1011988e
push esi
call ebx
mov edi, dword [ebp - 0x124c]
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0xa2c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
mov dword [ebp - 0x1284], 0
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x101198dd
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x2f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10119903
lea ecx, [ebp - 0x1284]
push ecx
lea ecx, [ebp - 0x824]
push ecx
push dword [ebp - 0x1250]
call eax
jmp 0x1011991d
lea eax, [ebp - 0x1284]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x1250]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov ebx, eax
test esi, esi
je 0x1011992a
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x1011a85c
mov dword [ebp - 0x1278], ebx
jmp 0x10119940
mov ebx, dword [ebp - 0x1284]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x1011995c
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3b
call fcn.10003680
add esp, 4
push 0x103
test eax, eax
je 0x10119981
lea ecx, [ebp - 0x414]
push ecx
push dword [ebp - 0x1278]
push ebx
call eax
jmp 0x10119995
lea eax, [ebp - 0x414]
push eax
push dword [ebp - 0x1278]
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyW]
mov ebx, eax
test esi, esi
je 0x101199a2
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x1011a818
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x414]
mov dword [ebp - 0x1238], esi
test eax, 0xffff0000
jne 0x10119aeb
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1244], 1
test ebx, ebx
je 0x10119b1c
lea ecx, [ebp - 0x414]
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1240], eax
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10119a2a
lea edx, [ebp - 0x414]
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10119a52
push dword [ebp - 0x1244]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1244]
mov ebx, eax
test ebx, ebx
je 0x10119b1c
mov eax, dword [ebp - 0x1240]
jmp 0x10119a02
test ebx, ebx
je 0x10119b1c
push 6
push dword [ebp - 0x1240]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x10119b1c
lea edx, [ebp - 0x414]
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1240], eax
test eax, eax
je 0x10119b1c
movzx edx, word [eax]
mov ecx, 1
mov eax, dword [esi - 8]
mov ebx, edx
sub ecx, dword [esi - 4]
sub eax, ebx
or eax, ecx
jge 0x10119ac8
push ebx
lea ecx, [ebp - 0x1238]
call fcn.10003310
mov ecx, dword [ebp - 0x1240]
mov esi, dword [ebp - 0x1238]
movzx edx, word [ecx]
jmp 0x10119ace
mov ecx, dword [ebp - 0x1240]
movzx eax, dx
push eax
lea eax, [ecx + 2]
push eax
push ebx
push esi
call fcn.1010ec10
add esp, 0x10
mov dword [esi - 0xc], ebx
xor eax, eax
mov word [esi + ebx*2], ax
jmp 0x10119b1c
lea ecx, [ebp - 0x414]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10119af4
sub ecx, edx
lea eax, [ebp - 0x414]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x1238]
call fcn.10003740
mov esi, dword [ebp - 0x1238]
mov ecx, dword [esi - 0x10]
lea ebx, [esi - 0x10]
test ecx, ecx
je 0x10119b2f
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10119b3b
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
push 1
push 0x10209640
push dword [esi - 0xc]
add eax, 0x10
mov dword [ebp - 0x1240], eax
lea eax, [ebp - 0x1240]
push esi
push eax
call fcn.1007e160
mov esi, dword [ebp - 0x1240]
add esp, 0x14
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x10119b7b
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10119b87
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
push dword [edi - 0xc]
add eax, 0x10
push edi
push dword [esi - 0xc]
mov dword [ebp - 0x1240], eax
lea eax, [ebp - 0x1240]
push esi
push eax
call fcn.1007e160
add esp, 0x14
lea edx, [esi - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10119bc6
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x10119bdb
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
lea eax, [ebp - 0x414]
push eax
lea eax, [ebp - 0x824]
push eax
push 0x102040c0
lea eax, [ebp - 0xa2c]
push 0x207
push eax
call fcn.100269c0
add esp, 0x14
mov dword [ebp - 0x1248], 0
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10119c22
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x2f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10119c48
lea ecx, [ebp - 0x1248]
push ecx
lea ecx, [ebp - 0xa2c]
push ecx
push dword [ebp - 0x1250]
call eax
jmp 0x10119c62
lea eax, [ebp - 0x1248]
push eax
lea eax, [ebp - 0xa2c]
push eax
push dword [ebp - 0x1250]
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyW]
mov edi, eax
test esi, esi
je 0x10119c6f
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
mov edi, dword [ebp - 0x1240]
jne 0x1011a7d5
mov dword [ebp - 0x1244], 0
mov dword [ebp - 0x1240], 0
mov dword [ebp - 0x123c], 0x7ff
mov dword [ebp - 0x1254], 0x103
mov ebx, dword [ebp - 0x1248]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x10119cc1
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3f
call fcn.10003680
add esp, 4
test eax, eax
je 0x10119cff
lea ecx, [ebp - 0x123c]
push ecx
lea ecx, [ebp - 0x122c]
push ecx
lea ecx, [ebp - 0x1240]
push ecx
push 0
lea ecx, [ebp - 0x1254]
push ecx
lea ecx, [ebp - 0x20c]
push ecx
push dword [ebp - 0x1244]
push ebx
call eax
jmp 0x10119d31
lea eax, [ebp - 0x123c]
push eax
lea eax, [ebp - 0x122c]
push eax
lea eax, [ebp - 0x1240]
push eax
push 0
lea eax, [ebp - 0x1254]
push eax
lea eax, [ebp - 0x20c]
push eax
push dword [ebp - 0x1244]
push ebx
call dword [sym.imp.ADVAPI32.dll_RegEnumValueW]
mov ebx, eax
test esi, esi
je 0x10119d3e
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
jne 0x1011a795
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x20c]
mov dword [ebp - 0x1238], esi
test eax, 0xffff0000
jne 0x10119e89
push ebx
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1234], 1
test ebx, ebx
je 0x10119eba
lea ecx, [ebp - 0x20c]
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1230], eax
mov edi, edi
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x10119dc8
lea edx, [ebp - 0x20c]
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x10119df0
push dword [ebp - 0x1234]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1234]
mov ebx, eax
test ebx, ebx
je 0x10119eba
mov eax, dword [ebp - 0x1230]
jmp 0x10119da0
test ebx, ebx
je 0x10119eba
push 6
push dword [ebp - 0x1230]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x10119eba
lea edx, [ebp - 0x20c]
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1230], eax
test eax, eax
je 0x10119eba
movzx edx, word [eax]
mov ecx, 1
mov eax, dword [esi - 8]
mov ebx, edx
sub ecx, dword [esi - 4]
sub eax, ebx
or eax, ecx
jge 0x10119e66
push ebx
lea ecx, [ebp - 0x1238]
call fcn.10003310
mov ecx, dword [ebp - 0x1230]
mov esi, dword [ebp - 0x1238]
movzx edx, word [ecx]
jmp 0x10119e6c
mov ecx, dword [ebp - 0x1230]
movzx eax, dx
push eax
lea eax, [ecx + 2]
push eax
push ebx
push esi
call fcn.1010ec10
add esp, 0x10
mov dword [esi - 0xc], ebx
xor eax, eax
mov word [esi + ebx*2], ax
jmp 0x10119eba
lea eax, [ebp - 0x20c]
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10119e92
sub eax, edx
lea ecx, [ebp - 0x1238]
sar eax, 1
push eax
lea eax, [ebp - 0x20c]
push eax
call fcn.10003740
mov esi, dword [ebp - 0x1238]
mov ecx, dword [esi - 0x10]
lea ebx, [esi - 0x10]
test ecx, ecx
je 0x10119ecd
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10119ed9
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
push 3
push 0x10202b4c
push dword [esi - 0xc]
add eax, 0x10
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x1230]
push esi
push eax
call fcn.1007e160
mov esi, dword [ebp - 0x1230]
add esp, 0x14
mov ecx, dword [esi - 0x10]
test ecx, ecx
je 0x10119f19
mov eax, dword [ecx]
call dword [eax + 0x10]
test eax, eax
jne 0x10119f25
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
push dword [edi - 0xc]
add eax, 0x10
push edi
push dword [esi - 0xc]
mov dword [ebp - 0x1230], eax
lea eax, [ebp - 0x1230]
push esi
push eax
call fcn.1007e160
add esp, 0x14
lea edx, [esi - 0x10]
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10119f64
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
or eax, 0xffffffff
lock xadd dword [ebx + 0xc], eax
dec eax
test eax, eax
jg 0x10119f79
mov ecx, dword [ebx]
push ebx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x122c]
mov esi, dword [ebp - 0x1230]
test al, 2
je 0x1011a34e
push 0
push ecx
lea eax, [esi - 0x10]
mov ebx, esp
push eax
call fcn.10002a60
add esp, 4
add eax, 0x10
mov dword [ebx], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x126c], eax
mov eax, 0x10202940
shr eax, 0x10
mov dword [ebp - 0x1238], eax
push 0
test eax, eax
jne 0x1011a107
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1234], 1
test ebx, ebx
je 0x1011a117
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1230], eax
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1011a027
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1011a04f
push dword [ebp - 0x1234]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1234]
mov ebx, eax
test ebx, ebx
je 0x1011a117
mov eax, dword [ebp - 0x1230]
jmp 0x1011a000
test ebx, ebx
je 0x1011a117
push 6
push dword [ebp - 0x1230]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011a117
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1230], eax
test eax, eax
je 0x1011a117
movzx edx, word [eax]
mov ecx, dword [ebp - 0x126c]
mov eax, edx
mov ebx, edx
mov dword [ebp - 0x1234], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, ebx
or edx, eax
jge 0x1011a0d2
push ebx
lea ecx, [ebp - 0x126c]
call fcn.10003310
mov edx, dword [ebp - 0x1230]
mov ecx, dword [ebp - 0x126c]
movzx eax, word [edx]
jmp 0x1011a0de
mov edx, dword [ebp - 0x1230]
mov eax, dword [ebp - 0x1234]
movzx eax, ax
push eax
lea eax, [edx + 2]
push eax
push ebx
push ecx
call fcn.1010ec10
mov eax, dword [ebp - 0x126c]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], ebx
mov eax, dword [ebp - 0x126c]
mov word [eax + ebx*2], cx
jmp 0x1011a117
push 0x10202940
lea ecx, [ebp - 0x126c]
call fcn.10003740
lea eax, [ebp - 0x126c]
push eax
lea eax, [ebp - 0x12a4]
push 0x9cc5
push eax
call fcn.100053d0
add esp, 0xc
mov eax, dword [eax]
mov dword [ebp - 0x127c], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x1238], 0
mov dword [ebp - 0x1268], eax
push 0
jne 0x1011a297
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1234], 1
test ebx, ebx
je 0x1011a2a7
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1230], eax
mov edi, edi
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1011a1b7
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1011a1df
push dword [ebp - 0x1234]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1234]
mov ebx, eax
test ebx, ebx
je 0x1011a2a7
mov eax, dword [ebp - 0x1230]
jmp 0x1011a190
test ebx, ebx
je 0x1011a2a7
push 6
push dword [ebp - 0x1230]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011a2a7
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1230], eax
test eax, eax
je 0x1011a2a7
movzx edx, word [eax]
mov ecx, dword [ebp - 0x1268]
mov eax, edx
mov ebx, edx
mov dword [ebp - 0x1234], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, ebx
or edx, eax
jge 0x1011a262
push ebx
lea ecx, [ebp - 0x1268]
call fcn.10003310
mov edx, dword [ebp - 0x1230]
mov ecx, dword [ebp - 0x1268]
movzx eax, word [edx]
jmp 0x1011a26e
mov edx, dword [ebp - 0x1230]
mov eax, dword [ebp - 0x1234]
movzx eax, ax
push eax
lea eax, [edx + 2]
push eax
push ebx
push ecx
call fcn.1010ec10
mov eax, dword [ebp - 0x1268]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], ebx
mov eax, dword [ebp - 0x1268]
mov word [eax + ebx*2], cx
jmp 0x1011a2a7
push 0x10202940
lea ecx, [ebp - 0x1268]
call fcn.10003740
lea eax, [ebp - 0x1268]
push eax
lea eax, [ebp - 0x12a0]
push 0x27b5
push eax
call fcn.100053d0
mov ecx, dword [ebp - 0x128c]
add esp, 0xc
push dword [ebp - 0x127c]
push dword [eax]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xa2c]
push eax
push dword [ebp - 0x1250]
call fcn.10116e00
mov edx, dword [ebp - 0x12a0]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a307
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1268]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a325
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x12a4]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a343
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x126c]
jmp 0x1011a719
test al, 4
je 0x1011a731
push 1
push ecx
lea eax, [esi - 0x10]
mov ebx, esp
push eax
call fcn.10002a60
add esp, 4
add eax, 0x10
mov dword [ebx], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0x1274], eax
mov eax, 0x10202940
shr eax, 0x10
mov dword [ebp - 0x1238], eax
push 0
test eax, eax
jne 0x1011a4d7
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1234], 1
test ebx, ebx
je 0x1011a4e7
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1230], eax
lea esp, [esp]
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1011a3f7
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1011a41f
push dword [ebp - 0x1234]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1234]
mov ebx, eax
test ebx, ebx
je 0x1011a4e7
mov eax, dword [ebp - 0x1230]
jmp 0x1011a3d0
test ebx, ebx
je 0x1011a4e7
push 6
push dword [ebp - 0x1230]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011a4e7
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1230], eax
test eax, eax
je 0x1011a4e7
movzx edx, word [eax]
mov ecx, dword [ebp - 0x1274]
mov eax, edx
mov ebx, edx
mov dword [ebp - 0x127c], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, ebx
or edx, eax
jge 0x1011a4a2
push ebx
lea ecx, [ebp - 0x1274]
call fcn.10003310
mov edx, dword [ebp - 0x1230]
mov ecx, dword [ebp - 0x1274]
movzx eax, word [edx]
jmp 0x1011a4ae
mov edx, dword [ebp - 0x1230]
mov eax, dword [ebp - 0x127c]
movzx eax, ax
push eax
lea eax, [edx + 2]
push eax
push ebx
push ecx
call fcn.1010ec10
mov eax, dword [ebp - 0x1274]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], ebx
mov eax, dword [ebp - 0x1274]
mov word [eax + ebx*2], cx
jmp 0x1011a4e7
push 0x10202940
lea ecx, [ebp - 0x1274]
call fcn.10003740
lea eax, [ebp - 0x1274]
push eax
lea eax, [ebp - 0x12b0]
push 0x9cc6
push eax
call fcn.100053d0
add esp, 0xc
mov eax, dword [eax]
mov dword [ebp - 0x12a8], eax
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
cmp dword [ebp - 0x1238], 0
mov dword [ebp - 0x1270], eax
push 0
jne 0x1011a667
mov ecx, 0x1025bea0
call fcn.101beff4
mov ebx, eax
mov dword [ebp - 0x1234], 1
test ebx, ebx
je 0x1011a677
mov ecx, 0x10202940
movzx eax, cx
shr eax, 4
inc eax
mov dword [ebp - 0x1230], eax
mov edi, edi
push 0
push eax
push 6
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x1011a587
mov edx, 0x10202940
movzx ecx, dx
push ecx
push eax
push ebx
call fcn.10003980
add esp, 0xc
test eax, eax
jne 0x1011a5af
push dword [ebp - 0x1234]
mov ecx, 0x1025bea0
call fcn.101beff4
inc dword [ebp - 0x1234]
mov ebx, eax
test ebx, ebx
je 0x1011a677
mov eax, dword [ebp - 0x1230]
jmp 0x1011a560
test ebx, ebx
je 0x1011a677
push 6
push dword [ebp - 0x1230]
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
test ecx, ecx
je 0x1011a677
mov edx, 0x10202940
movzx eax, dx
push eax
push ecx
push ebx
call fcn.10003980
add esp, 0xc
mov dword [ebp - 0x1230], eax
test eax, eax
je 0x1011a677
movzx edx, word [eax]
mov ecx, dword [ebp - 0x1270]
mov eax, edx
mov ebx, edx
mov dword [ebp - 0x127c], eax
mov edx, 1
mov eax, dword [ecx - 8]
sub edx, dword [ecx - 4]
sub eax, ebx
or edx, eax
jge 0x1011a632
push ebx
lea ecx, [ebp - 0x1270]
call fcn.10003310
mov edx, dword [ebp - 0x1230]
mov ecx, dword [ebp - 0x1270]
movzx eax, word [edx]
jmp 0x1011a63e
mov edx, dword [ebp - 0x1230]
mov eax, dword [ebp - 0x127c]
movzx eax, ax
push eax
lea eax, [edx + 2]
push eax
push ebx
push ecx
call fcn.1010ec10
mov eax, dword [ebp - 0x1270]
add esp, 0x10
xor ecx, ecx
mov dword [eax - 0xc], ebx
mov eax, dword [ebp - 0x1270]
mov word [eax + ebx*2], cx
jmp 0x1011a677
push 0x10202940
lea ecx, [ebp - 0x1270]
call fcn.10003740
lea eax, [ebp - 0x1270]
push eax
lea eax, [ebp - 0x12ac]
push 0x27b6
push eax
call fcn.100053d0
mov ecx, dword [ebp - 0x128c]
add esp, 0xc
push dword [ebp - 0x12a8]
push dword [eax]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0xa2c]
push eax
push dword [ebp - 0x1250]
call fcn.10116e00
mov edx, dword [ebp - 0x12ac]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a6d7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1270]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a6f5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x12b0]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a713
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x1274]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1011a731
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0x800
lea eax, [ebp - 0x122c]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
inc dword [ebp - 0x1244]
add esp, 0x18
mov dword [ebp - 0x123c], 0x7ff
add esi, 0xfffffff0
mov dword [ebp - 0x1254], 0x103
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10119ca5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x10119ca5
mov ebx, dword [ebp - 0x1248]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x1011a7b1
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x44
call fcn.10003680
add esp, 4
push ebx
test eax, eax
je 0x1011a7c4
call eax
jmp 0x1011a7ca
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
test esi, esi
je 0x1011a7d5
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x208
lea eax, [ebp - 0x414]
push 0
push eax
call sub.msvcrt.dll_memset
inc dword [ebp - 0x1278]
lea edx, [edi - 0x10]
add esp, 0xc
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
mov edi, dword [ebp - 0x124c]
test eax, eax
jg 0x10119940
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x10119940
mov ebx, dword [ebp - 0x1284]
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x1011a834
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x44
call fcn.10003680
add esp, 4
push ebx
test eax, eax
je 0x1011a847
call eax
jmp 0x1011a84d
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
je 0x1011a862
push esi
call ebx
jmp 0x1011a862
mov ebx, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x208
lea eax, [ebp - 0x61c]
push 0
push eax
call sub.msvcrt.dll_memset
inc dword [ebp - 0x1280]
add esp, 0xc
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x10118ac0
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x10118ac0
push dword [ebp - 0x1288]
call fcn.10034ac0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 4