Function at 0x1002382
Capabilities:
Get session user name

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x2e88
call fcn.01012120
mov eax, dword [0x1013024]
push ebx
xor ebx, ebx
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x1b4c]
mov dword [ebp - 0x2e0c], eax
xor eax, eax
mov ecx, 0x6d1
lea esi, [ebp + 8]
lea edi, [ebp - 0x2df4]
rep movsd dword es:[edi], dword [esi]
push 0xf
mov word [ebp - 0x10b4], bx
mov ecx, 0xff
lea edi, [ebp - 0x10b2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
pop ecx
xor eax, eax
mov word [ebp - 0x2c0], bx
lea edi, [ebp - 0x2be]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7e
pop ecx
xor eax, eax
mov word [ebp - 0x4bc], bx
lea edi, [ebp - 0x4ba]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7e
pop ecx
xor eax, eax
mov word [ebp - 0x6b8], bx
lea edi, [ebp - 0x6b6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0xab8], bx
lea edi, [ebp - 0xab6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x7f
pop ecx
xor eax, eax
mov word [ebp - 0x8b8], bx
lea edi, [ebp - 0x8b6]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push 0x1f
pop ecx
xor eax, eax
lea edi, [ebp - 0x80]
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x2e24], ebx
mov dword [ebp - 0x2e1c], ebx
mov dword [ebp - 0x2e18], ebx
mov dword [ebp - 0x2e34], ebx
mov dword [ebp - 0x2e38], ebx
mov dword [ebp - 0x2e84], ebx
mov dword [ebp - 0x2e2c], ebx
mov dword [ebp - 0x2e20], ebx
mov dword [ebp - 0x2e28], ebx
mov word [ebp - 0x2e7c], bx
mov word [ebp - 0x2e7a], bx
mov word [ebp - 0x2e78], bx
mov word [ebp - 0x2e76], bx
mov word [ebp - 0x2e74], bx
mov word [ebp - 0x2e72], bx
mov word [ebp - 0x2e70], bx
mov word [ebp - 0x2e6e], bx
rep stosd dword es:[edi], eax
mov dword [ebp - 0x2e14], ebx
mov dword [ebp - 0x2dfc], ebx
mov dword [ebp - 0x2e6c], ebx
push 0xc
pop ecx
push 0x7e
lea edi, [ebp - 0x2e68]
rep stosd dword es:[edi], eax
pop ecx
mov dword [ebp - 0x280], ebx
lea edi, [ebp - 0x27c]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x1eb4]
mov esi, 0xfe
push eax
mov dword [ebp - 0x2e88], ebx
mov word [ebp - 0x2e68], 0x30
mov word [ebp - 0x2e66], bx
mov word [ebp - 0x2e3c], bx
mov dword [ebp - 0x2e04], ebx
mov dword [ebp - 0x2e10], ebx
mov dword [ebp - 0x2df8], ebx
mov dword [ebp - 0x2e08], 1
mov dword [ebp - 0x2e80], esi
mov dword [ebp - 0x2e30], ebx
call fcn.010057f0
test eax, eax
jne 0x1002569
push 0xa5
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
push 0xcd
jmp 0x1004238
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x1eb4]
push eax
call edi
cmp eax, 0xef
jg 0x100425f
lea eax, [ebp - 0x1eb4]
push eax
call edi
test eax, eax
je 0x100425f
lea eax, [ebp - 0x14c0]
push eax
call edi
cmp eax, 0x106
jg 0x1004258
lea eax, [ebp - 0x14c0]
push eax
call edi
test eax, eax
je 0x1004258
lea eax, [ebp - 0x2bec]
push eax
call edi
push 0x40
pop ebx
cmp eax, ebx
jg 0x1004251
lea eax, [ebp - 0x27f4]
push eax
call edi
cmp eax, ebx
jg 0x1004251
lea eax, [ebp - 0x29f0]
push eax
call edi
cmp eax, ebx
jg 0x1004233
lea eax, [ebp - 0x25f8]
push eax
call edi
cmp eax, ebx
jg 0x1004233
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 1
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jne 0x1002669
lea eax, [ebp - 0x29f0]
push eax
call edi
test eax, eax
jne 0x1002669
lea eax, [ebp - 0x2bec]
push eax
call edi
test eax, eax
je 0x1002669
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call ebx
test eax, eax
je 0x1002669
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call ebx
test eax, eax
je 0x1002669
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x200
lea eax, [ebp - 0x10b4]
push eax
lea eax, [ebp - 0x1eb4]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
push 0x20
lea eax, [ebp - 0x2c0]
push eax
lea eax, [ebp - 0x1ab4]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
push 0x100
lea eax, [ebp - 0xab8]
push eax
lea eax, [ebp - 0x14c0]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fcd5
cmp eax, 1
mov ebx, dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov edi, 0x400
jne 0x10028ef
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10028ef
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x10028ef
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x10028ef
mov ecx, dword [ebp - 0x2e0c]
xor eax, eax
cmp dword [ecx + 8], eax
sete al
push eax
push esi
lea eax, [ebp - 0x25f8]
push eax
push esi
lea eax, [ebp - 0x27f4]
push eax
lea eax, [ebp - 0x2df4]
push eax
call fcn.01010241
test eax, eax
je 0x1002779
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x1002779
cmp eax, 0x50010001
je 0x10027ae
cmp eax, 0xa0010001
jne 0x10027b5
push 0x1fc
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
call fcn.0100dd58
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
xor esi, esi
inc esi
jmp 0x1003045
and dword [ebp - 0x2e08], 0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100324d
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x2bec]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 0
mov dword [ebp - 0x2df8], 1
jne 0x10028c4
lea eax, [ebp - 0x4bc]
push 0x30
mov dword [ebp - 0x2e04], eax
call dword [sym.imp.USER32.dll_MessageBeep]
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x40
lea eax, [ebp - 0x84]
push eax
call fcn.0100e49c
test eax, eax
je 0x1003040
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x100288d
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x40
jg 0x1004233
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10028e0
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x84]
jmp 0x10028d2
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x29f0]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
mov dword [ebp - 0x2e10], 1
jmp 0x100324d
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fcd5
test eax, eax
jne 0x1002bf0
cmp word [ebp + 0x1b54], 1
jne 0x1002bf0
mov ecx, dword [ebp - 0x2e0c]
cmp dword [ecx + 8], eax
sete al
push eax
push esi
lea eax, [ebp - 0x25f8]
push eax
push esi
lea eax, [ebp - 0x27f4]
push eax
lea eax, [ebp - 0x2df4]
push eax
call fcn.01010241
test eax, eax
je 0x1002779
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x100296c
cmp eax, 0x50010001
mov ebx, dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov edi, 0x400
je 0x1002998
cmp eax, 0xa0010001
jne 0x1002afc
push 0x1fc
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
call fcn.0100dd58
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
jmp 0x10027a0
and dword [ebp - 0x2e08], 0
lea eax, [ebp - 0x27f4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1002afc
lea eax, [ebp - 0x2e80]
push eax
lea eax, [ebp - 0x27f4]
push eax
push 2
call sub.Secur32.dll_GetUserNameExW
test al, al
jne 0x10029d7
push 0x90
jmp 0x1004238
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x27f4]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
lea eax, [ebp - 0x4bc]
push 0x30
mov dword [ebp - 0x2e04], eax
call dword [sym.imp.USER32.dll_MessageBeep]
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ad
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x40
lea eax, [ebp - 0x29f0]
push eax
call fcn.0100e49c
test eax, eax
je 0x1003040
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1002ab9
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x40
jg 0x1004233
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1002afc
push esi
lea eax, [ebp - 0x6b8]
push eax
lea eax, [ebp - 0x29f0]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x27f4]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 1
jne 0x1002cbe
push 0x100129c
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1002cda
lea eax, [ebp - 0x4bc]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x29f0]
push 0x40
push eax
call fcn.0100e49c
test eax, eax
je 0x1003040
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1002bc7
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x40
jg 0x1004233
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x29f0]
jmp 0x1002ccc
cmp word [ebp + 0x1b54], 4
jne 0x1002f29
mov ebx, dword [ebp - 0x2e0c]
xor eax, eax
cmp dword [ebx + 8], eax
sete al
push eax
push esi
lea eax, [ebp - 0x25f8]
push eax
push esi
lea eax, [ebp - 0x27f4]
push eax
lea eax, [ebp - 0x2df4]
push eax
call fcn.01010241
test eax, eax
je 0x1002779
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x1002779
cmp eax, 0x50010001
je 0x1002c56
cmp eax, 0xa0010001
je 0x1002779
jmp 0x1002c5d
and dword [ebp - 0x2e08], 0
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x27f4]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
cmp dword [ebx + 0xc], 1
mov ebx, dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov edi, 0x400
jne 0x1002ca9
push 0x100129c
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1002bdd
jmp 0x1002b42
lea eax, [ebp - 0x25f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1002b42
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x25f8]
push eax
call fcn.0100e142
test eax, eax
je 0x1003040
xor eax, eax
inc eax
mov dword [ebp - 0x2df8], eax
mov dword [ebp - 0x2e10], eax
lea eax, [ebp - 0x2df4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1002e3a
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1002e3a
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x2bec]
push eax
call fcn.0100e142
test eax, eax
je 0x1003774
lea eax, [ebp - 0x29f0]
push eax
mov dword [ebp - 0x2df8], 1
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1002e30
push 0x100129c
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1003612
lea eax, [ebp - 0x4bc]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x40
lea eax, [ebp - 0x84]
push eax
call fcn.0100e49c
test eax, eax
je 0x1003774
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1002ded
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x40
jg 0x10031f7
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1002e30
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0100e142
test eax, eax
je 0x1003774
mov dword [ebp - 0x2e10], 1
cmp word [ebp + 0x1b54], 2
je 0x1002e52
cmp word [ebp + 0x1b54], 6
jne 0x1003625
cmp dword [ebp - 0x2df8], 1
jne 0x1003625
cmp dword [ebp - 0x2e10], 0
jne 0x100338b
lea eax, [ebp - 0x4bc]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x40
lea eax, [ebp - 0x29f0]
push eax
call fcn.0100e49c
test eax, eax
je 0x1003774
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x29f0]
push eax
call edi
test eax, eax
jne 0x1002ef3
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x29f0]
push eax
call edi
cmp eax, 0x40
jg 0x10031f7
lea eax, [ebp - 0x29f0]
push eax
call edi
test eax, eax
je 0x100338b
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x29f0]
jmp 0x1003766
lea eax, [ebp - 0x2df4]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100324d
cmp word [ebp + 0x1b54], 2
je 0x1002f56
cmp word [ebp + 0x1b54], 6
jne 0x100324d
mov ecx, dword [ebp - 0x2e0c]
xor eax, eax
cmp dword [ecx + 8], eax
sete al
push eax
push esi
lea eax, [ebp - 0x25f8]
push eax
push esi
lea eax, [ebp - 0x27f4]
push eax
lea eax, [ebp - 0x2df4]
push eax
call fcn.01010241
test eax, eax
je 0x1002779
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x4c3
je 0x1002779
cmp eax, 0x50010001
je 0x1002fae
cmp eax, 0xa0010001
je 0x1002779
jmp 0x1002fb5
and dword [ebp - 0x2e08], 0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1003028
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x1003028
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x1003028
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10030d1
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x2bec]
push eax
call fcn.0100e142
test eax, eax
jne 0x10030d1
jmp 0x1003774
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x2bec]
push eax
call fcn.0100e142
test eax, eax
jne 0x100304c
mov esi, 0x80004005
push 0
jmp 0x100422a
lea eax, [ebp - 0x10b4]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0xca
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 1
jne 0x10030c7
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x10030c7
push 0xfc
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov dword [ebp - 0x2e30], 1
lea eax, [ebp - 0x27f4]
push eax
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
mov eax, dword [ebp - 0x2e0c]
je 0x10033eb
cmp dword [eax + 0xc], 1
jne 0x10033c4
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100341c
push 0x100129c
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100341c
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x100341c
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x100341c
lea eax, [ebp - 0x4bc]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x84]
push 0x40
push eax
call fcn.0100e49c
test eax, eax
je 0x1003774
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10031e5
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x84]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
cmp eax, 0x40
jle 0x1003215
push 0x1ff
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
jmp 0x1003774
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0100e142
test eax, eax
je 0x1003774
xor eax, eax
inc eax
cmp dword [ebp - 0x2e30], 0
mov dword [ebp - 0x2df8], eax
mov dword [ebp - 0x2e10], eax
jne 0x10035b1
cmp word [ebp + 0x1b54], 2
jne 0x1003499
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x100327c
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 0
je 0x100333c
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10032a2
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100333c
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10032c4
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 0
je 0x100333c
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10032eb
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100333c
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100330d
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 0
je 0x100333c
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10034a3
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10034a3
lea eax, [ebp - 0x10b4]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0xca
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov dword [ebp - 0x2e30], 1
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100b46b
test eax, eax
mov dword [ebp - 0x2e10], eax
jne 0x100377b
cmp dword [ebp - 0x2e08], 1
jne 0x10033ba
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fffa
mov esi, 0x80004005
jmp 0x1004224
cmp dword [ebp - 0x2e30], 0
jne 0x1003231
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1003231
jmp 0x1003160
cmp dword [eax + 0xc], 1
jne 0x100342f
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x100341c
push 0x100129c
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x1003160
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x29f0]
jmp 0x1003223
lea eax, [ebp - 0x25f8]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1003453
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x25f8]
jmp 0x1003223
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
je 0x1003231
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x1003231
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
jmp 0x10033de
cmp word [ebp + 0x1b54], 6
jne 0x10034c5
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x10034c5
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
test eax, eax
jne 0x1003539
cmp word [ebp + 0x1b54], 2
je 0x10034d9
cmp word [ebp + 0x1b54], 6
jne 0x10034fb
push 0x10012c0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10034fb
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 1
je 0x1003539
cmp word [ebp + 0x1b54], 2
je 0x1003513
cmp word [ebp + 0x1b54], 6
jne 0x10035b1
push 0x10012b0
lea eax, [ebp - 0x2bec]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x10035b1
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 0xc], 1
jne 0x10035b1
lea eax, [ebp - 0x10b4]
mov dword [ebp - 0x2e04], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0xca
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0xfc
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
xor eax, eax
inc eax
mov dword [ebp - 0x2df8], eax
mov dword [ebp - 0x2e10], eax
mov dword [ebp - 0x2e30], eax
jmp 0x1002e3a
mov ax, word [ebp + 0x1b54]
cmp ax, 1
je 0x1002ce9
cmp ax, 4
je 0x1002ce9
cmp ax, 2
je 0x1002ce9
cmp ax, 6
je 0x1002ce9
push 0x1001224
lea eax, [ebp - 0x29f0]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x1002ce9
mov ecx, dword [ebp - 0x2e0c]
cmp dword [ecx + 0xc], 1
sete al
mov dword [ebp - 0x2e10], eax
jmp 0x1002e3a
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x29f0]
jmp 0x1002e22
cmp dword [ebp - 0x2df8], 0
jne 0x100338b
lea eax, [ebp - 0x2e80]
push eax
lea eax, [ebp - 0x12b0]
push eax
push 2
call sub.Secur32.dll_GetUserNameExW
test al, al
jne 0x1003655
push 0x90
jmp 0x10031fc
push esi
lea eax, [ebp - 0x4bc]
push eax
lea eax, [ebp - 0x12b0]
push eax
call fcn.0100e142
test eax, eax
je 0x1003774
lea eax, [ebp - 0x4bc]
push 0x30
mov dword [ebp - 0x2e04], eax
call dword [sym.imp.USER32.dll_MessageBeep]
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ad
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push edi
push 0
push 0x1ab
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x40
lea eax, [ebp - 0x84]
push eax
call fcn.0100e49c
test eax, eax
je 0x1003774
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x84]
push eax
call edi
test eax, eax
jne 0x1003735
push 0x20a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
lea eax, [ebp - 0x84]
push eax
call edi
cmp eax, 0x40
jg 0x10031f7
lea eax, [ebp - 0x84]
push eax
call edi
test eax, eax
je 0x100338b
lea eax, [ebp - 0x6b8]
push esi
push eax
lea eax, [ebp - 0x84]
push eax
call fcn.0100e142
test eax, eax
jne 0x100338b
push 0
jmp 0x1004279
mov ecx, dword [eax]
lea edx, [ebp - 0x2dfc]
push edx
push 0x100120c
push 0x10011ec
lea edx, [ebp - 0x10b4]
push edx
push eax
call dword [ecx + 0x20]
mov edi, 0x80070050
cmp eax, edi
mov dword [ebp - 0x2df8], eax
jne 0x10037dd
push 0x8a
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
cmp dword [ebp - 0x2e08], 1
jne 0x10037d6
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fffa
mov esi, edi
jmp 0x1004224
test eax, eax
jge 0x10037ec
push eax
call fcn.0100b380
jmp 0x1004209
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2e14]
push edx
push 0x1001590
push eax
call dword [ecx]
mov edi, eax
test edi, edi
mov dword [ebp - 0x2df8], edi
jl 0x10038e7
and word [ebp - 0xcb4], 0
push 0x7e
pop ecx
xor eax, eax
lea edi, [ebp - 0xcb2]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
lea eax, [ebp - 0xcb4]
push eax
lea eax, [ebp - 0x8b8]
push eax
lea eax, [ebp - 0xab8]
push eax
call fcn.010021c5
cmp eax, 1
jne 0x1003866
mov eax, dword [ebp - 0x2e14]
test eax, eax
je 0x1003859
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
test eax, eax
jmp 0x1004201
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
lea edx, [ebp - 0x8b8]
push edx
push eax
call dword [ecx + 0x80]
mov edi, eax
test edi, edi
jl 0x10038e7
lea eax, [ebp - 0x8b8]
push 0x5c
push eax
call dword [sym.imp.msvcrt.dll_wcsrchr]
test eax, eax
pop ecx
pop ecx
je 0x100389b
and word [eax], 0
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
lea edx, [ebp - 0x8b8]
push edx
push eax
call dword [ecx + 0x90]
mov edi, eax
test edi, edi
jl 0x10038e7
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
lea edx, [ebp - 0xcb4]
push edx
push eax
call dword [ecx + 0x88]
mov edi, eax
test edi, edi
jl 0x10038e7
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
push 2
push eax
call dword [ecx + 0x70]
mov edi, eax
test edi, edi
jge 0x10038ef
push edi
call fcn.0100b380
jmp 0x100395b
cmp dword [ebp - 0x2e30], 1
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
jne 0x1003909
push 0
push 0x10012ac
jmp 0x1003917
lea edx, [ebp - 0x6b8]
push edx
lea edx, [ebp - 0x4bc]
push edx
push eax
call dword [ecx + 0x78]
mov edi, eax
test edi, edi
jge 0x1003984
cmp edi, 0x80041312
je 0x1003984
push edi
call fcn.0100b380
mov eax, dword [sym.imp.msvcrt.dll__iob]
push 0x10012a8
add eax, 0x20
push eax
call fcn.0100e8c4
push 0x198
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov eax, dword [ebp - 0x2e14]
test eax, eax
je 0x100396b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
test eax, eax
je 0x10037c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x10037c1
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax], 0
je 0x10039c8
lea eax, [ebp - 0x2e7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x2e76]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
mov dword [ebp - 0x2e24], eax
mov eax, dword [ebp - 0x2e7a]
mov dword [ebp - 0x2e1c], eax
mov eax, dword [ebp - 0x2e7c]
mov dword [ebp - 0x2e18], eax
jmp 0x10039fc
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x18b8]
push eax
call edi
test eax, eax
jle 0x10039fc
lea eax, [ebp - 0x2e18]
push eax
lea eax, [ebp - 0x2e1c]
push eax
lea eax, [ebp - 0x2e24]
push eax
lea eax, [ebp - 0x18b8]
push eax
call fcn.01005c7f
mov eax, dword [ebp - 0x2e0c]
cmp dword [eax + 4], 0
je 0x1003a44
cmp dword [ebp + 0x1b50], 9
je 0x1003a44
lea eax, [ebp - 0x2e7c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov eax, dword [ebp - 0x2e74]
mov dword [ebp - 0x2e34], eax
mov eax, dword [ebp - 0x2e72]
mov dword [ebp - 0x2e38], eax
mov eax, dword [ebp - 0x2e70]
mov dword [ebp - 0x2e84], eax
jmp 0x1003a72
lea eax, [ebp - 0x1ab4]
push eax
call edi
test eax, eax
jle 0x1003a72
lea eax, [ebp - 0x2e84]
push eax
lea eax, [ebp - 0x2e38]
push eax
lea eax, [ebp - 0x2e34]
push eax
lea eax, [ebp - 0x1ab4]
push eax
call fcn.01004fda
cmp dword [ebp + 0x1b50], 9
jne 0x1003aa6
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
push 0x10
push eax
call dword [ecx + 0x70]
push 0xa
lea eax, [ebp - 0x1ef4]
push eax
call fcn.0100e262
mov ecx, dword [ebp - 0x2dfc]
mov edx, dword [ecx]
push 0
push eax
push ecx
call dword [edx + 0x28]
mov eax, dword [ebp - 0x2dfc]
mov ecx, dword [eax]
lea edx, [ebp - 0x2e6c]
push edx
lea edx, [ebp - 0x2e88]
push edx
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x2df8], eax
jge 0x1003b20
mov esi, eax
push esi
call fcn.0100b380
mov eax, dword [ebp - 0x2e14]
test eax, eax
je 0x1003ae2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2e6c]
test eax, eax
je 0x1003af2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
test eax, eax
je 0x1003b02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x2e08], 1
jne 0x1004224
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fffa
jmp 0x1004224
mov ecx, dword [ebp + 0x1b50]
lea eax, [ecx - 1]
cmp eax, 8
ja case.default.0x1003b32
jmp dword [eax*4 + 0x1004292]
xor eax, eax
inc eax
mov dword [ebp - 0x2e48], eax
mov word [ebp - 0x2e44], ax
push 0xa
lea eax, [ebp - 0x1ffc]
push eax
call fcn.0100e262
mov dword [ebp - 0x2e50], eax
mov dword [ebp - 0x2e54], 0x5a0
jmp 0x1003c59
xor eax, eax
inc eax
mov dword [ebp - 0x2e48], eax
mov word [ebp - 0x2e44], ax
push 0xa
lea eax, [ebp - 0x1ffc]
push eax
call fcn.0100e262
imul eax, eax, 0x3c
movzx eax, ax
jmp 0x1003b57
mov ax, word [ebp - 0x2e24]
mov word [ebp - 0x2e60], ax
mov ax, word [ebp - 0x2e1c]
mov word [ebp - 0x2e62], ax
mov ax, word [ebp - 0x2e18]
mov word [ebp - 0x2e64], ax
mov ax, word [ebp - 0x2e34]
mov word [ebp - 0x2e58], ax
mov ax, word [ebp - 0x2e38]
mov word [ebp - 0x2e56], ax
lea eax, [ebp - 0x1ffc]
push eax
mov dword [ebp - 0x2e48], 1
call edi
test eax, eax
jle 0x1003c09
push 0xa
lea eax, [ebp - 0x1ffc]
push eax
call fcn.0100e262
mov word [ebp - 0x2e44], ax
jmp 0x1003c9f
lea eax, [ebp - 0x1fbc]
push eax
call fcn.010051a0
mov word [ebp - 0x2e42], ax
mov word [ebp - 0x2e44], 1
jmp 0x1003c9f
push 0xa
lea eax, [ebp - 0x1ffc]
push eax
mov dword [ebp - 0x2e48], 2
call fcn.0100e262
mov word [ebp - 0x2e44], ax
lea eax, [ebp - 0x1fbc]
push eax
call fcn.010051a0
mov word [ebp - 0x2e42], ax
mov ax, word [ebp - 0x2e34]
mov word [ebp - 0x2e58], ax
mov ax, word [ebp - 0x2e38]
mov word [ebp - 0x2e56], ax
mov ax, word [ebp - 0x2e24]
mov word [ebp - 0x2e60], ax
mov ax, word [ebp - 0x2e1c]
mov word [ebp - 0x2e62], ax
mov ax, word [ebp - 0x2e18]
mov word [ebp - 0x2e64], ax
lea eax, [ebp - 0x16bc]
push eax
call edi
test eax, eax
jle 0x1003ffe
lea eax, [ebp - 0x2e20]
push eax
lea eax, [ebp - 0x2e28]
push eax
lea eax, [ebp - 0x2e2c]
push eax
lea eax, [ebp - 0x16bc]
push eax
mov dword [ebp - 0x2e4c], 1
call fcn.01005c7f
mov ax, word [ebp - 0x2e2c]
mov word [ebp - 0x2e5a], ax
mov ax, word [ebp - 0x2e28]
mov word [ebp - 0x2e5c], ax
mov ax, word [ebp - 0x2e20]
mov word [ebp - 0x2e5e], ax
jmp 0x1003ffe
mov ax, word [ebp - 0x2e34]
mov word [ebp - 0x2e58], ax
mov ax, word [ebp - 0x2e38]
mov word [ebp - 0x2e56], ax
mov ax, word [ebp - 0x2e24]
mov word [ebp - 0x2e60], ax
mov ax, word [ebp - 0x2e1c]
mov word [ebp - 0x2e62], ax
mov ax, word [ebp - 0x2e18]
mov word [ebp - 0x2e64], ax
lea eax, [ebp - 0x16bc]
push eax
call edi
test eax, eax
jle 0x1003db2
lea eax, [ebp - 0x2e20]
push eax
lea eax, [ebp - 0x2e28]
push eax
lea eax, [ebp - 0x2e2c]
push eax
lea eax, [ebp - 0x16bc]
push eax
mov dword [ebp - 0x2e4c], 1
call fcn.01005c7f
mov ax, word [ebp - 0x2e2c]
mov word [ebp - 0x2e5a], ax
mov ax, word [ebp - 0x2e28]
mov word [ebp - 0x2e5c], ax
mov ax, word [ebp - 0x2e20]
mov word [ebp - 0x2e5e], ax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jle 0x1003f45
push 0xa
lea eax, [ebp - 0x1ffc]
push eax
call fcn.0100e262
cmp eax, 1
mov dword [ebp - 0x2e30], eax
jl 0x1003e2a
cmp eax, 0xc
jg 0x1003e2a
lea eax, [ebp - 0x1fbc]
push eax
call edi
test eax, eax
jne 0x1003df1
inc eax
jmp 0x1003e02
push 0xa
lea eax, [ebp - 0x1fbc]
push eax
call fcn.0100e262
movzx eax, ax
push dword [ebp - 0x2e30]
lea ecx, [eax - 1]
xor eax, eax
inc eax
shl eax, cl
mov dword [ebp - 0x2e48], 3
mov dword [ebp - 0x2e44], eax
call fcn.01005561
jmp 0x1003f39
push 0x1f2
call fcn.0100ec7a
mov edi, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003e77
push dword [ebp - 0x2e18]
lea eax, [ebp - 0x1f58]
push eax
mov dword [ebp - 0x2e48], 3
call fcn.010055db
mov ecx, eax
xor eax, eax
dec ecx
inc eax
shl eax, cl
mov dword [ebp - 0x2e44], eax
jmp 0x1003f2d
push 0x1d7
call fcn.0100ec7a
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003e92
inc eax
jmp 0x1003f09
push 0x1d8
call fcn.0100ec7a
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003eae
push 2
jmp 0x1003f00
push 0x1d9
call fcn.0100ec7a
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003eca
push 3
jmp 0x1003f00
push 0x1da
call fcn.0100ec7a
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003ee6
push 4
jmp 0x1003f00
push 0x1db
call fcn.0100ec7a
push eax
lea eax, [ebp - 0x1ffc]
push eax
call edi
test eax, eax
jne 0x1003f03
push 5
pop eax
jmp 0x1003f09
mov eax, dword [ebp - 0x2e88]
mov word [ebp - 0x2e44], ax
lea eax, [ebp - 0x1fbc]
push eax
mov dword [ebp - 0x2e48], 4
call fcn.010051a0
mov word [ebp - 0x2e42], ax
lea eax, [ebp - 0x1f58]
push eax
call fcn.0100533e
mov word [ebp - 0x2e40], ax
jmp 0x1003ffe
lea eax, [ebp - 0x1f58]
push eax
mov dword [ebp - 0x2e48], 3
call fcn.0100533e
mov word [ebp - 0x2e40], ax
push 0xa
lea eax, [ebp - 0x1fbc]
push eax
call fcn.0100e262
xor edx, edx
movzx eax, ax
inc edx
cmp eax, edx
jbe 0x1003f7f
lea ecx, [eax - 1]
shl edx, cl
mov dword [ebp - 0x2e44], edx
jmp 0x1003ffe
mov ax, word [ebp - 0x2e34]
and dword [ebp - 0x2e48], 0
mov word [ebp - 0x2e58], ax
mov ax, word [ebp - 0x2e38]
mov word [ebp - 0x2e56], ax
jmp 0x1003fd4
cmp ecx, 8
push 7
pop eax
jne 0x1003fba
mov dword [ebp - 0x2e48], eax
cmp ecx, eax
jne 0x1003fd4
mov dword [ebp - 0x2e48], 6
jmp 0x1003fd4
mov dword [ebp - 0x2e48], 5
mov ax, word [ebp - 0x2e24]
mov word [ebp - 0x2e60], ax
mov ax, word [ebp - 0x2e1c]
mov word [ebp - 0x2e62], ax
mov ax, word [ebp - 0x2e18]
mov word [ebp - 0x2e64], ax
lea eax, [ebp - 0x1eb4]
mov dword [ebp - 0x2e04], eax
mov eax, dword [ebp - 0x2e6c]
mov ecx, dword [eax]
lea edx, [ebp - 0x2e68]
push edx
push eax
call dword [ecx + 0xc]
xor edi, edi
cmp eax, edi
mov dword [ebp - 0x2df8], eax
je 0x1004090
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push 0x400
push edi
push 0x89
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
mov eax, dword [ebp - 0x2e14]
cmp eax, edi
je 0x1004075
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2e6c]
cmp eax, edi
je 0x1004085
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
jmp 0x10041ff
mov eax, dword [ebp - 0x2e14]
mov ecx, dword [eax]
push 1
push edi
push eax
call dword [ecx + 0x18]
cmp eax, edi
mov dword [ebp - 0x2df8], eax
jge 0x100419d
cmp dword [ebp - 0x2df8], 0x80041315
lea eax, [ebp - 0x1eb4]
mov dword [ebp - 0x2e04], eax
jne 0x10040e1
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push 0x400
push edi
push 0x207
jmp 0x100412f
cmp dword [ebp - 0x2df8], 0x800706b5
jne 0x1004115
lea eax, [ebp - 0x2df4]
mov dword [ebp - 0x2e00], eax
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push 0x400
push edi
push 0x208
jmp 0x100412f
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push 0x400
push edi
push 0xfb
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov eax, dword [ebp - 0x2e14]
cmp eax, edi
je 0x1004161
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2e6c]
cmp eax, edi
je 0x1004171
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
cmp eax, edi
je 0x1004181
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x2e08], 1
jne 0x1004196
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fffa
xor esi, esi
jmp 0x1004224
lea eax, [ebp - 0x2e04]
push eax
push esi
lea eax, [ebp - 0x280]
push eax
push 0x400
push edi
push 0x12e
call fcn.0100ec7a
push eax
push 0x2400
call ebx
lea eax, [ebp - 0x280]
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x20
push eax
call fcn.0100e8c4
mov eax, dword [ebp - 0x2e14]
cmp eax, edi
je 0x10041e9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2dfc]
cmp eax, edi
je 0x10041f9
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x2e6c]
cmp eax, edi
je 0x1004209
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x2e08], 1
jne 0x100421e
lea eax, [ebp - 0x2df4]
push eax
call fcn.0100fffa
mov esi, dword [ebp - 0x2df8]
push dword [ebp - 0x2e10]
call fcn.0100b324
mov eax, esi
jmp 0x1004283
push 0x1ff
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
jmp 0x1003040
push 0x200
jmp 0x1004238
push 0x96
jmp 0x1004238
push 0x8e
call fcn.0100ec7a
push eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
push eax
call fcn.0100e8c4
push ebx
call fcn.0100b324
mov eax, 0x80004005
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100db46
leave
ret 0x1b50