Function at 0x10020748
Capabilities:
Enumerate gui resources
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x584
push esi
movzx eax, byte [ebp + 0x18]
test eax, eax
je 0x1002284f
mov dword [ebp - 0x418], 0x8c6a53d0
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x1002077c
push 0
call dword [sym.imp.USER32.dll_CreateIconIndirect]
mov byte [ebp - 0x75], 0
movzx eax, byte [ebp - 0x75]
test eax, eax
je 0x10020794
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x304], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x23c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x118], eax
mov eax, dword [ebp - 0x310]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x18], 0x1b05
mov dword [ebp - 0x84], 0xfc88eb98
mov dword [ebp - 0x4c], 0x1a969ac5
mov dword [ebp - 0x3c], 0x19f23e52
mov dword [ebp - 0x3b4], 0
mov dword [ebp - 0xe4], 0
jmp 0x10020809
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x10020825
mov eax, dword [ebp - 0xe4]
mov dword [ebp + eax*4 - 0xa4], 0xd56974ed
jmp 0x100207fc
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x18]
add eax, ecx
je 0x10020856
cmp dword [ebp - 0x84], 0xef5d
je 0x10020856
mov dword [ebp - 0x1e4], 1
jmp 0x1002085d
and dword [ebp - 0x1e4], 0
mov eax, dword [ebp - 0x1e4]
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x10020887
mov dword [ebp - 0x130], 1
jmp 0x1002088e
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x130], eax
jg 0x100208a5
mov dword [ebp - 0x2dc], 1
jmp 0x100208ac
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0
jmp 0x100208c8
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0
jg 0x10020abe
mov dword [ebp - 0x7c], 0xe215169f
mov dword [ebp - 0xc8], 0
jmp 0x100208f2
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 3
jge 0x1002090e
mov eax, dword [ebp - 0xc8]
mov dword [ebp + eax*4 - 0x538], 0xb9567464
jmp 0x100208e5
mov dword [ebp - 0x4c], 0
jmp 0x1002091e
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
jg 0x10020ab9
mov dword [ebp - 0x2a8], 0x7d59
mov byte [ebp - 0x65], 0
movzx eax, byte [ebp - 0x65]
test eax, eax
je 0x10020955
push 0x1c1b
push 0x1b32
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_CheckDlgButton]
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x45c], eax
mov eax, dword [ebp - 0x7c]
add eax, 0xfffc
cmp eax, dword [ebp - 0x7c]
jge 0x1002097d
cmp dword [ebp - 0x7c], 0
je 0x1002097d
mov dword [ebp - 0x208], 1
jmp 0x10020984
and dword [ebp - 0x208], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xa4]
cmp eax, dword [ebp - 0x208]
jl 0x100209a2
mov dword [ebp - 0xf4], 1
jmp 0x100209a9
and dword [ebp - 0xf4], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0xf4]
mov dword [ebp + eax - 0x538], ecx
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xf4], eax
je 0x100209d2
mov dword [ebp - 0x138], 1
jmp 0x100209d9
and dword [ebp - 0x138], 0
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x2a8], eax
mov eax, dword [ebp - 0x3b4]
cmp dword [ebp - 0x2a8], eax
jg 0x100209ff
mov dword [ebp - 0x3ac], 1
jmp 0x10020a06
and dword [ebp - 0x3ac], 0
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x464], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x18], eax
jl 0x10020a23
mov dword [ebp - 0x140], 1
jmp 0x10020a2a
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp + eax*4 - 0xa4]
imul eax, dword [ebp - 0x140]
test eax, eax
jne 0x10020a51
cmp dword [ebp - 0x84], 0
jne 0x10020a51
mov eax, 0x376e
test eax, eax
je 0x10020a66
mov eax, 0xf4aedf2f
test eax, eax
je 0x10020a66
mov dword [ebp - 0x210], 1
jmp 0x10020a6d
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x210]
sub esi, dword [ebp + edx*4 - 0xa4]
imul ecx, esi
cmp dword [ebp + eax*4 - 0xa4], ecx
jge 0x10020a9e
cmp dword [ebp - 0x4c], 0
jne 0x10020a9e
and dword [ebp - 0x148], 0
jmp 0x10020aa8
mov dword [ebp - 0x148], 1
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x84], eax
jmp 0x10020917
jmp 0x100208c1
mov dword [ebp - 0xd0], 0x2e91a049
mov dword [ebp - 0x150], 0xcd50997
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x2f4], 1
mov dword [ebp - 0x2f0], 1
mov dword [ebp - 0x2ec], 1
mov dword [ebp - 0x46c], 0xd569
mov dword [ebp - 0xd0], 0xfffffff8
jmp 0x10020b1d
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xffffffed
jge 0x10020bf9
mov dword [ebp - 0x2fc], 0xfffb
mov dword [ebp - 0x4c0], 1
mov dword [ebp - 0x4c8], 0x8eb98764
mov dword [ebp - 0x4d0], 0xdee21afa
mov dword [ebp - 0x4f8], 0
mov dword [ebp - 0xfc], 1
mov dword [ebp - 0xac], 0
jmp 0x10020b7f
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 4
jge 0x10020b9b
mov eax, dword [ebp - 0xac]
mov dword [ebp + eax*4 - 0x584], 1
jmp 0x10020b72
mov eax, dword [ebp - 0x2fc]
mov dword [ebp - 0x398], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x398]
cmp eax, dword [ebp - 0x300]
je 0x10020bda
mov dword [ebp - 0x278], 1
jmp 0x10020be1
and dword [ebp - 0x278], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x278]
mov dword [ebp + eax - 0x2f8], ecx
jmp 0x10020b10
push 4
pop eax
imul eax, eax, 3
mov eax, dword [ebp + eax - 0x2f8]
mov dword [ebp - 0x150], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x2f8]
cmp dword [ebp - 0x150], eax
jne 0x10020c2d
mov dword [ebp - 0x218], 1
jmp 0x10020c34
and dword [ebp - 0x218], 0
push 4
pop eax
imul eax, eax, 3
mov ecx, dword [ebp - 0x218]
mov dword [ebp + eax - 0x2f8], ecx
mov dword [ebp - 0x1c], 0x4fd3df75
mov dword [ebp - 0x11c], 0xffffffff
mov dword [ebp - 0x2c], 0
jmp 0x10020c68
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10020c7e
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x550], 0x33337672
jmp 0x10020c61
mov dword [ebp - 0x2c], 0
jmp 0x10020c8e
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 3
jge 0x10020ca4
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x544], 0x5008d6db
jmp 0x10020c87
mov dword [ebp - 0x1c], 0
jmp 0x10020cb4
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0xffffffe2
jge 0x10020f5f
mov dword [ebp - 0x30], 0x7a3a
mov dword [ebp - 0x50], 1
mov dword [ebp - 0xb4], 0xfffffffd
mov dword [ebp - 0xd8], 0
jmp 0x10020cef
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 3
jge 0x10020d0b
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x4e0], 0x8cf1d65f
jmp 0x10020ce2
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x1c], 0
jg 0x10020d8e
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x1c], eax
jge 0x10020d37
mov dword [ebp - 0x368], 1
jmp 0x10020d3e
and dword [ebp - 0x368], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4d4], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x408], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x49c], eax
cmp dword [ebp - 0x1c], 0
je 0x10020d77
mov eax, 0xe02189f4
test eax, eax
je 0x10020d77
and dword [ebp - 0x158], 0
jmp 0x10020d81
mov dword [ebp - 0x158], 1
cmp dword [ebp - 0x158], 0
je 0x10020e1c
mov dword [ebp - 0x2d0], 0x7a10dd66
mov dword [ebp - 0x220], 0xae7bf199
mov dword [ebp - 0x30], 0
jmp 0x10020db2
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jg 0x10020e17
mov eax, dword [ebp - 0x2d0]
inc eax
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x50], 2
jmp 0x10020dd5
mov eax, dword [ebp - 0x50]
dec eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jl 0x10020e15
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x4e0]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x160]
mov dword [ebp + eax*4 - 0x4e0], ecx
mov eax, dword [ebp - 0x160]
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0xb4], eax
jmp 0x10020dce
jmp 0x10020dab
jmp 0x10020f5a
mov dword [ebp - 0x104], 0xfffffff9
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x420], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4c4], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x4a4], eax
mov eax, dword [ebp - 0x104]
neg eax
cmp eax, 0x3f36
jge 0x10020e6e
mov dword [ebp - 0x168], 1
jmp 0x10020e75
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x11c], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x4f4], eax
mov eax, dword [ebp - 0xb4]
cmp dword [ebp - 0x1c], eax
je 0x10020eb0
mov dword [ebp - 0x280], 1
jmp 0x10020eb7
and dword [ebp - 0x280], 0
mov eax, dword [ebp - 0xb4]
cmp eax, dword [ebp - 0x280]
je 0x10020ed1
mov dword [ebp - 0x170], 1
jmp 0x10020ed8
and dword [ebp - 0x170], 0
mov eax, dword [ebp - 0x170]
neg eax
cmp eax, dword [ebp - 0x1c]
jle 0x10020ef1
mov dword [ebp - 0x228], 1
jmp 0x10020ef8
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x228]
jg 0x10020f0f
mov dword [ebp - 0x114], 1
jmp 0x10020f16
and dword [ebp - 0x114], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x550], ecx
cmp dword [ebp - 0x114], 0x57289c08
jg 0x10020f41
mov dword [ebp - 0x178], 1
jmp 0x10020f48
and dword [ebp - 0x178], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x178]
mov dword [ebp + eax - 0x544], ecx
jmp 0x10020cad
mov dword [ebp - 0x44], 0
jmp 0x10020f6f
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 1
jge 0x10020f82
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x64], 0xffffffff
jmp 0x10020f68
mov dword [ebp - 0x44], 0
jmp 0x10020f92
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 3
jge 0x10020fa8
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x514], 0
jmp 0x10020f8b
mov dword [ebp - 0x14], 3
mov dword [ebp - 0x5c], 0xf81320f2
mov dword [ebp - 0x90], 8
mov dword [ebp - 8], 0
jmp 0x10020fd0
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 4
jge 0x10020fe6
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3f4], 0xf5cd
jmp 0x10020fc9
mov dword [ebp - 8], 0
jmp 0x10020ff6
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 1
jge 0x1002100c
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x238], 0xd76ce4a6
jmp 0x10020fef
mov dword [ebp - 8], 0
jmp 0x1002101c
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 2
jge 0x10021032
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x3fc], 0x3e5ec352
jmp 0x10021015
mov dword [ebp - 8], 0
jmp 0x10021042
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 3
jge 0x10021058
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x52c], 0x85fafe44
jmp 0x1002103b
cmp dword [ebp - 0x14], 0xa017779a
jae 0x1002106d
mov dword [ebp - 0x2b0], 1
jmp 0x10021074
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x2b0]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x5c], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
add eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x14]
je 0x100210a0
mov dword [ebp - 0x308], 1
jmp 0x100210a7
and dword [ebp - 0x308], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x438], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0x180], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x180]
mov dword [ebp + eax - 0x238], ecx
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x180], eax
jle 0x100210f6
mov dword [ebp - 0x3c8], 1
jmp 0x100210fd
and dword [ebp - 0x3c8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x14]
cmp dword [ebp + eax - 0x3f4], ecx
jl 0x1002111a
mov dword [ebp - 0x230], 1
jmp 0x10021121
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x230]
cmp eax, 0xffff
jb 0x1002113e
mov dword [ebp - 0x188], 1
jmp 0x10021145
and dword [ebp - 0x188], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x188]
cmp dword [ebp + eax - 0x3f4], ecx
jg 0x10021168
mov dword [ebp - 0x288], 1
jmp 0x1002116f
and dword [ebp - 0x288], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x288]
mov dword [ebp + eax - 0x3fc], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x4ac], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x90]
mov dword [ebp + eax - 0x52c], ecx
mov dword [ebp - 0x90], 1
jmp 0x100211b7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x17
jge 0x10021290
mov dword [ebp - 0xe0], 0
jmp 0x100211dd
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jge 0x100211f9
mov eax, dword [ebp - 0xe0]
mov dword [ebp + eax*4 - 0x404], 1
jmp 0x100211d0
mov dword [ebp - 0x14], 0
jmp 0x10021209
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jne 0x1002128b
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x3fc]
mov dword [ebp - 0x440], eax
push 4
pop eax
imul eax, eax, 0
imul eax, dword [ebp + eax - 0x404], 0x6848
cmp eax, 0xf45b6d4f
ja 0x10021246
mov dword [ebp - 0x190], 1
jmp 0x1002124d
and dword [ebp - 0x190], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x190]
mov dword [ebp + eax - 0x238], ecx
mov dword [ebp - 0x5c], 0
jmp 0x10021270
mov eax, dword [ebp - 0x5c]
inc eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 2
jge 0x10021286
mov eax, dword [ebp - 0x5c]
mov dword [ebp + eax*4 - 0x404], 1
jmp 0x10021269
jmp 0x10021202
jmp 0x100211aa
mov byte [ebp - 0x57], 0
mov dword [ebp - 0x80], 0xffff
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x80], 0
jmp 0x100212b2
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x19
je 0x1002136a
mov dword [ebp - 0xe8], 0x1c0f8067
mov dword [ebp - 0xbc], 0
jmp 0x100212df
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 3
jge 0x100212fb
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x574], 0x6ff55e00
jmp 0x100212d2
mov dword [ebp - 0xe8], 0
jmp 0x10021314
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 2
jg 0x10021365
mov dword [ebp - 0xc4], 0
jmp 0x10021336
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 2
jge 0x10021352
mov eax, dword [ebp - 0xc4]
mov dword [ebp + eax*4 - 0x478], 0xffffffff
jmp 0x10021329
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x478], 0x17ad2
jmp 0x10021307
jmp 0x100212ab
push 0
push 0x544c
lea eax, [ebp - 0x57]
push eax
call fcn.10026ad2
add esp, 0xc
mov eax, 0xe8588d0d
test eax, eax
je 0x100213e5
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x64]
neg eax
add eax, 0x61b583dc
cmp eax, 0x244d
jne 0x100213b5
mov dword [ebp - 0x198], 1
jmp 0x100213bc
and dword [ebp - 0x198], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
imul eax, dword [ebp - 0x198]
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x64]
jne 0x100213e5
mov dword [ebp - 0x2c8], 1
jmp 0x100213ec
and dword [ebp - 0x2c8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp - 0x2c8]
jl 0x1002140a
mov dword [ebp - 0x1a0], 1
jmp 0x10021411
and dword [ebp - 0x1a0], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp eax, dword [ebp - 0x1a0]
jle 0x1002142f
mov dword [ebp - 0x240], 1
jmp 0x10021436
and dword [ebp - 0x240], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x64]
cmp dword [ebp - 0x240], eax
jl 0x10021454
mov dword [ebp - 0x1a8], 1
jmp 0x1002145b
and dword [ebp - 0x1a8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp + eax - 0x514], ecx
mov dword [ebp - 0x24], 0xd5e48d32
mov dword [ebp - 0x24], 0
jmp 0x10021484
mov eax, dword [ebp - 0x24]
dec eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0xfffffff2
je 0x10021560
mov dword [ebp - 0x1b0], 0xa971
mov dword [ebp - 0x248], 0xf4990069
mov dword [ebp - 0x2e0], 1
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jne 0x100214c9
mov dword [ebp - 0x290], 1
jmp 0x100214d0
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x290]
sub eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x24]
jg 0x100214ea
mov dword [ebp - 0x1b8], 1
jmp 0x100214f1
and dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b0], 0x822e
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x248], eax
mov eax, dword [ebp - 0x248]
cmp eax, dword [ebp - 0x1b8]
jne 0x10021521
mov dword [ebp - 0x2b8], 1
jmp 0x10021528
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x24]
imul eax, dword [ebp - 0x2b8]
cmp eax, dword [ebp - 0x24]
jge 0x10021543
mov dword [ebp - 0x1c0], 1
jmp 0x1002154a
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
add eax, 0x59c4
mov dword [ebp - 0x2e0], eax
jmp 0x1002147d
mov byte [ebp - 0x6d], 0
movzx eax, byte [ebp - 0x6d]
test eax, eax
je 0x10021574
push 0
call dword [sym.imp.USER32.dll_SetKeyboardState]
cmp dword [ebp - 0x110], 0
jle 0x1002284a
mov dword [ebp - 4], 1
mov dword [ebp - 0x48], 0x8abb75da
mov dword [ebp - 0x8c], 0x3efe35fe
mov dword [ebp - 0xf0], 0
jmp 0x100215b2
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x100215ce
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x378], 0xffffffff
jmp 0x100215a5
cmp dword [ebp - 4], 0xe5411aa8
jbe 0x100215e3
mov dword [ebp - 0x250], 1
jmp 0x100215ea
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x250]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x10021608
cmp dword [ebp - 0x48], 0
jne 0x10021608
and dword [ebp - 0x1c8], 0
jmp 0x10021612
mov dword [ebp - 0x1c8], 1
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1c8]
jge 0x10021629
mov dword [ebp - 0x298], 1
jmp 0x10021630
and dword [ebp - 0x298], 0
cmp dword [ebp - 0x298], 0x35dd
jle 0x10021648
mov dword [ebp - 0x370], 1
jmp 0x1002164f
and dword [ebp - 0x370], 0
mov eax, dword [ebp - 4]
mov dword [ebp - 0x448], eax
mov eax, 0x2a7e9f21
test eax, eax
je 0x10021673
cmp dword [ebp - 4], 0
je 0x10021673
mov dword [ebp - 0x1d0], 1
jmp 0x1002167a
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d0], eax
jge 0x10021691
mov dword [ebp - 0x258], 1
jmp 0x10021698
and dword [ebp - 0x258], 0
cmp dword [ebp - 0x258], 1
je 0x100216ad
mov dword [ebp - 0x1d8], 1
jmp 0x100216b4
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1d8], eax
jl 0x100216cb
mov dword [ebp - 0x2d8], 1
jmp 0x100216d2
and dword [ebp - 0x2d8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2d8], eax
jg 0x100216ec
cmp dword [ebp - 0x48], 0
jne 0x100216ec
and dword [ebp - 0x1e0], 0
jmp 0x100216f6
mov dword [ebp - 0x1e0], 1
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1e0], eax
jge 0x1002170d
mov dword [ebp - 0x260], 1
jmp 0x10021714
and dword [ebp - 0x260], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x260]
jge 0x1002172b
mov dword [ebp - 0x1e8], 1
jmp 0x10021732
and dword [ebp - 0x1e8], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x1e8], eax
je 0x10021749
mov dword [ebp - 0x2a0], 1
jmp 0x10021750
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x2a0], eax
jge 0x10021767
mov dword [ebp - 0x1f0], 1
jmp 0x1002176e
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x1f0]
jne 0x1002178b
cmp dword [ebp - 4], 0
je 0x1002178b
mov dword [ebp - 0x268], 1
jmp 0x10021792
and dword [ebp - 0x268], 0
cmp dword [ebp - 0x268], 0xb059
jl 0x100217aa
mov dword [ebp - 0x1f8], 1
jmp 0x100217b1
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1f8]
imul eax, eax, 0xfffffffc
test eax, eax
jne 0x100217d0
cmp dword [ebp - 0x48], 0
jne 0x100217d0
and dword [ebp - 0x2c0], 0
jmp 0x100217da
mov dword [ebp - 0x2c0], 1
mov eax, dword [ebp - 4]
imul eax, dword [ebp - 0x2c0]
test eax, eax
je 0x100217fa
cmp dword [ebp - 0x48], 0
je 0x100217fa
mov dword [ebp - 0x200], 1
jmp 0x10021801
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x8c], eax
jl 0x10021869
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x10021844
push 0
push 0x1c60
push 0x22f
push 0
push 0x1d01
push 0x2418
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 4], 0
jmp 0x10021854
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 9
jle 0x10021864
cmp dword [ebp - 4], 0
je 0x10021862
jmp 0x10021864
jmp 0x1002184d
jmp 0x10021a85
mov dword [ebp - 0x88], 0xfffffffa
mov dword [ebp - 0x3a0], 0x691445a1
mov dword [ebp - 0x164], 0xaa2df500
mov dword [ebp - 0x328], 7
mov dword [ebp - 0xcc], 0
jmp 0x100218aa
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 1
jge 0x100218c6
mov eax, dword [ebp - 0xcc]
mov dword [ebp + eax*4 - 0x318], 0xfffffffd
jmp 0x1002189d
mov byte [ebp - 0x5d], 0
movzx eax, byte [ebp - 0x5d]
test eax, eax
je 0x100218dc
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x4b4], eax
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x88]
lea eax, [eax + ecx + 3]
cmp eax, dword [ebp - 0x88]
jge 0x1002190c
mov dword [ebp - 0x270], 1
jmp 0x10021913
and dword [ebp - 0x270], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x270], eax
jle 0x1002192a
mov dword [ebp - 0x12c], 1
jmp 0x10021931
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x12c], eax
jge 0x10021948
mov dword [ebp - 0x134], 1
jmp 0x1002194f
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x318]
cmp dword [ebp - 0x134], eax
jg 0x10021970
mov dword [ebp - 0x13c], 1
jmp 0x10021977
and dword [ebp - 0x13c], 0
cmp dword [ebp - 0x13c], 0xdf38
jge 0x1002198f
mov dword [ebp - 0x144], 1
jmp 0x10021996
and dword [ebp - 0x144], 0
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x450], eax
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x4e4], eax
mov eax, 0x783e
sub eax, dword [ebp - 4]
add eax, 0x21ba
cmp eax, dword [ebp - 0x3a0]
jne 0x100219d5
mov dword [ebp - 0x14c], 1
jmp 0x100219dc
and dword [ebp - 0x14c], 0
mov eax, dword [ebp - 0x8c]
cmp eax, dword [ebp - 0x14c]
je 0x100219f6
mov dword [ebp - 0x154], 1
jmp 0x100219fd
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x8c]
cmp dword [ebp - 0x154], eax
jle 0x10021a17
mov dword [ebp - 0x15c], 1
jmp 0x10021a1e
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x164]
cmp dword [ebp - 0x15c], eax
jge 0x10021a38
mov dword [ebp - 0x16c], 1
jmp 0x10021a3f
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x164]
imul eax, dword [ebp - 0x16c]
cmp eax, 0xe3cec334
je 0x10021a5f
mov dword [ebp - 0x320], 1
jmp 0x10021a66
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x458], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x378]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x3b8], 0xfffffffd
mov dword [ebp - 0x4bc], 0xfffffff7
mov dword [ebp - 0x460], 0xa810d21d
mov dword [ebp - 0x330], 0
mov dword [ebp - 0x490], 0xe92e
mov dword [ebp - 0x174], 6
mov dword [ebp - 0x34], 0
jmp 0x10021ad1
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x10021ae7
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x558], 0xd69f4288
jmp 0x10021aca
mov dword [ebp - 0x34], 0
jmp 0x10021af7
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x10021b0d
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x468], 0x2743
jmp 0x10021af0
mov eax, dword [ebp - 0x174]
inc eax
mov dword [ebp - 0x174], eax
mov eax, dword [ebp - 0x3b8]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x22c], 8
mov dword [ebp - 0x498], 0xe57bf5cd
mov dword [ebp - 0xdc], 0xa6deec54
mov dword [ebp - 0xf8], 0xfffffffe
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x19c], 0xea2ff3e1
mov dword [ebp - 0x38], 0
jmp 0x10021b6f
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x10021b85
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x3d8], 0xa8c6a53d
jmp 0x10021b68
mov dword [ebp - 0x38], 0
jmp 0x10021b95
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x10021bab
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x338], 0xc4438182
jmp 0x10021b8e
mov dword [ebp - 0x20], 2
jmp 0x10021bbb
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10021c79
mov dword [ebp - 0xec], 0x891f782a
mov dword [ebp - 0x17c], 0x7439cb61
mov dword [ebp - 0xec], 2
jmp 0x10021bf2
mov eax, dword [ebp - 0xec]
dec eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jl 0x10021c65
mov dword [ebp - 0x184], 0xffffffff
mov dword [ebp - 0xd4], 0
jmp 0x10021c1e
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 4
jge 0x10021c3a
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x568], 0xffffffff
jmp 0x10021c11
mov dword [ebp - 0x17c], 0x283066c9
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0x184], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x184]
mov dword [ebp + eax - 0x568], ecx
jmp 0x10021be5
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x3d8], 0
je 0x10021c74
jmp 0x10021c79
jmp 0x10021bb4
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x3d8], 0
je 0x10021d56
cmp dword [ebp - 0x20], 0xe
jle 0x10021c9f
mov dword [ebp - 0x380], 1
jmp 0x10021ca6
and dword [ebp - 0x380], 0
mov eax, 0x3de467b4
neg eax
imul eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0x20]
jl 0x10021cc2
mov dword [ebp - 0x18c], 1
jmp 0x10021cc9
and dword [ebp - 0x18c], 0
imul eax, dword [ebp - 0x18c], 0xffffffff
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x3d8]
jg 0x10021ceb
mov dword [ebp - 0x194], 1
jmp 0x10021cf2
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x20]
imul eax, dword [ebp - 0x194]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x19c]
push 4
pop edx
shl edx, 1
imul ecx, dword [ebp + edx - 0x3d8]
imul eax, ecx
push 4
pop ecx
imul ecx, ecx, 0
cmp eax, dword [ebp + ecx - 0x338]
jle 0x10021d36
mov dword [ebp - 0x1a4], 1
jmp 0x10021d3d
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x1a4]
sub eax, 0xfffb
je 0x10021d56
mov dword [ebp - 0x1ac], 1
jmp 0x10021d5d
and dword [ebp - 0x1ac], 0
imul eax, dword [ebp - 0x1ac], 0x4b83
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xa0], 0xfffffffc
mov dword [ebp - 0x6c], 0xfffffffb
mov dword [ebp - 0x6c], 0
jmp 0x10021d8b
mov eax, dword [ebp - 0x6c]
inc eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 8
jle 0x10021f13
mov dword [ebp - 0x74], 0xfffffffc
mov dword [ebp - 0x74], 0x14
jmp 0x10021dac
mov eax, dword [ebp - 0x74]
dec eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xfffffff6
je 0x10021f0e
mov dword [ebp - 0x40], 0
jmp 0x10021dc6
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 4
jge 0x10021ddc
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x508], 0xfffffff8
jmp 0x10021dbf
mov dword [ebp - 0x40], 0
jmp 0x10021dec
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x10021e02
mov eax, dword [ebp - 0x40]
mov dword [ebp + eax*4 - 0x3c4], 0xba47c9d5
jmp 0x10021de5
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c4], 0
jne 0x10021ec1
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x470], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3c4]
cmp dword [ebp - 0x6c], eax
jne 0x10021e4a
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3c4], 0
jne 0x10021e4a
and dword [ebp - 0x1b4], 0
jmp 0x10021e54
mov dword [ebp - 0x1b4], 1
mov eax, dword [ebp - 0x6c]
cmp dword [ebp - 0x1b4], eax
jle 0x10021e74
mov eax, 0xffff
test eax, eax
je 0x10021e74
mov dword [ebp - 0x3a8], 1
jmp 0x10021e7b
and dword [ebp - 0x3a8], 0
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0x3c4], 0xb166
cmp eax, 0x3ca3691f
jge 0x10021e9f
mov dword [ebp - 0x340], 1
jmp 0x10021ea6
and dword [ebp - 0x340], 0
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x4a0], eax
mov eax, 0x23edb395
test eax, eax
jne 0x10021ec1
and dword [ebp - 0x388], 0
jmp 0x10021ecb
mov dword [ebp - 0x388], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x508]
inc eax
mov dword [ebp - 0x348], eax
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x348]
mov dword [ebp + eax - 0x508], ecx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x47c], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x74]
mov dword [ebp + eax - 0x3c4], ecx
jmp 0x10021da5
jmp 0x10021d84
cmp dword [ebp - 0x22c], 0
je 0x10021f3b
mov byte [ebp - 0x76], 0
movzx eax, byte [ebp - 0x76]
test eax, eax
je 0x10021f36
push 0
push 0x322c
call fcn.10022a2c
pop ecx
pop ecx
jmp 0x10021fd4
mov dword [ebp - 0x48c], 0xa136951a
mov dword [ebp - 0x488], 1
mov dword [ebp - 0x4b0], 0x8f6c74aa
mov dword [ebp - 0x4b8], 0x6b87d0fa
mov dword [ebp - 0x4a8], 0xfffffff8
mov dword [ebp - 0x98], 0
jmp 0x10021f86
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x10021fa2
mov eax, dword [ebp - 0x98]
mov dword [ebp + eax*4 - 0x1bc], 0x4d14
jmp 0x10021f79
mov byte [ebp - 0x54], 0
push 0
push 0x20eb
lea eax, [ebp - 0x54]
push eax
call fcn.10026c45
add esp, 0xc
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x1bc]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x1bc], eax
mov dword [ebp - 0x1f4], 0x44ad72d7
mov dword [ebp - 0x2e8], 0x4727cad7
mov dword [ebp - 0x40c], 0
mov dword [ebp - 0x1cc], 0xff8ee1d1
mov dword [ebp - 0x3b0], 0x8cf1d65f
mov dword [ebp - 0x10c], 0xf6b9
mov dword [ebp - 0x360], 1
mov dword [ebp - 0x10], 0
jmp 0x1002202a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10022040
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x124], 0
jmp 0x10022023
mov dword [ebp - 0x10], 0
jmp 0x10022050
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x10022066
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x390], 0xffffffff
jmp 0x10022049
mov dword [ebp - 0x10], 0
jmp 0x10022076
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x1002208c
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x484], 0x4ed832cb
jmp 0x1002206f
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x3cc], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x10c]
dec eax
mov dword [ebp - 0x10c], eax
mov eax, dword [ebp - 0x3cc]
cmp eax, dword [ebp - 0x350]
jg 0x100220d2
mov dword [ebp - 0x1d4], 1
jmp 0x100220d9
and dword [ebp - 0x1d4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x390]
cmp dword [ebp - 0x1cc], eax
jl 0x100220fa
mov dword [ebp - 0x1c4], 1
jmp 0x10022101
and dword [ebp - 0x1c4], 0
cmp dword [ebp - 0x1c4], 9
jne 0x10022116
mov dword [ebp - 0x358], 1
jmp 0x1002211d
and dword [ebp - 0x358], 0
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x414], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x124]
mov ecx, dword [ebp - 0x1f4]
lea eax, [eax + ecx + 0xc4ad]
push 4
pop ecx
imul ecx, ecx, 0
sub eax, dword [ebp + ecx - 0x124]
jne 0x1002216b
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0
jne 0x1002216b
and dword [ebp - 0x1dc], 0
jmp 0x10022175
mov dword [ebp - 0x1dc], 1
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x1dc]
jle 0x1002218f
mov dword [ebp - 0x128], 1
jmp 0x10022196
and dword [ebp - 0x128], 0
mov eax, dword [ebp - 0x3b0]
cmp dword [ebp - 0x128], eax
jle 0x100221b0
mov dword [ebp - 0x1ec], 1
jmp 0x100221b7
and dword [ebp - 0x1ec], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x484]
imul eax, dword [ebp - 0x1ec]
cmp dword [ebp - 0x1f4], eax
jg 0x100221df
mov dword [ebp - 0x1fc], 1
jmp 0x100221e6
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0x402e31d8
jl 0x100221fe
mov dword [ebp - 0x204], 1
jmp 0x10022205
and dword [ebp - 0x204], 0
mov eax, dword [ebp - 0x360]
imul eax, dword [ebp - 0x204]
test eax, eax
jne 0x10022226
push 4
pop eax
test eax, eax
jne 0x10022226
and dword [ebp - 0x20c], 0
jmp 0x10022230
mov dword [ebp - 0x20c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x20c]
mov dword [ebp + eax - 0x124], ecx
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x124], 0
je 0x10022264
or eax, 0xffffffff
je 0x10022264
mov dword [ebp - 0x214], 1
jmp 0x1002226b
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x214]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0xdc], 0
jmp 0x10022290
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0xffffffe5
jne 0x100223f5
mov dword [ebp - 0x94], 0x177
mov dword [ebp - 0x9c], 0
jmp 0x100222c0
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x100222dc
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x3e4], 0x243e5ec3
jmp 0x100222b3
cmp dword [ebp - 0xa0], 0
jne 0x100222f1
mov dword [ebp - 0x21c], 1
jmp 0x100222f8
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0x21c]
sub ecx, dword [ebp - 0x94]
sub eax, ecx
neg eax
add eax, dword [ebp - 0x94]
je 0x1002235a
cmp dword [ebp - 0xf8], 0
jne 0x10022331
cmp dword [ebp - 0x94], 0
jne 0x10022331
and dword [ebp - 0x224], 0
jmp 0x1002233b
mov dword [ebp - 0x224], 1
mov eax, dword [ebp - 0x94]
add eax, dword [ebp - 0x224]
je 0x1002235a
xor eax, eax
inc eax
je 0x1002235a
mov dword [ebp - 0x2e4], 1
jmp 0x10022361
and dword [ebp - 0x2e4], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x41c], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x3e4], 0xfffffffc
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e4], 0
jne 0x100223b8
mov eax, dword [ebp - 0x22c]
mov dword [ebp - 0x424], eax
mov eax, dword [ebp - 0xf8]
cmp dword [ebp - 0xa0], eax
jg 0x100223b8
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e4], 6
ja 0x100223bf
cmp dword [ebp - 0xa0], 0
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x3e4], 0xc7e12fd8
jne 0x100223dd
mov dword [ebp - 0x234], 1
jmp 0x100223e4
and dword [ebp - 0x234], 0
mov eax, dword [ebp - 0x234]
mov dword [ebp - 0xa0], eax
jmp 0x10022283
push 4
push 0x1000
push dword [ebp - 0x110]
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0xc]
push ecx
push 0x400e
push 0x47ce
call fcn.1001fb46
pop ecx
pop ecx
call eax
mov ecx, dword [ebp - 0x118]
mov dword [ecx], eax
mov dword [ebp - 0x31c], 0xfffffff8
mov dword [ebp - 0x314], 0x8f92
mov dword [ebp - 0x30c], 0x4129b857
mov dword [ebp - 0x32c], 8
mov dword [ebp - 0x334], 0xfffffffa
mov dword [ebp - 0x324], 1
mov byte [ebp - 0x56], 0
movzx eax, byte [ebp - 0x56]
test eax, eax
je 0x10022498
push 0x44eb
push 0x5fd6
push 0x521e
push 0
push 0x536b
push 0x721b
call fcn.10029abe
add esp, 0x18
push 0xfbd
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x314]
push eax
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x324]
push eax
lea eax, [ebp - 0x32c]
push eax
push 0
push 0x37b0
push 0x2de0
lea eax, [ebp - 0x334]
push eax
push 0x4358
call fcn.10020748
add esp, 0x2c
mov dword [ebp - 0xb0], 6
mov dword [ebp - 0xa8], 0
jmp 0x10022503
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1002251f
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x42c], 0
jmp 0x100224f6
mov byte [ebp - 0x55], 0
movzx eax, byte [ebp - 0x55]
test eax, eax
je 0x1002253a
push 0x1f9e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov dword [ebp - 0xb0], 0
jmp 0x10022553
mov eax, dword [ebp - 0xb0]
dec eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 0
jl 0x10022572
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10022570
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
jmp 0x10022546
push 0
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.100232a3
add esp, 0xc
mov dword [ebp - 0xc0], 1
mov dword [ebp - 0xb8], 0xfffffffa
mov dword [ebp - 0x254], 0x85dc1b6e
mov dword [ebp - 0x26c], 4
mov dword [ebp - 0x33c], 0xa37d7c86
mov dword [ebp - 0x344], 0x1521fafb
mov dword [ebp - 0x354], 1
mov dword [ebp - 0x434], 0x86c7a88f
mov dword [ebp - 0xc], 0
jmp 0x100225ea
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 3
jge 0x10022600
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x520], 5
jmp 0x100225e3
mov dword [ebp - 0xc], 0
jmp 0x10022610
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 1
jge 0x10022626
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x34c], 0x9ca4
jmp 0x10022609
mov dword [ebp - 0xc], 0
jmp 0x10022636
cmp dword [ebp - 0xc], 3
jge 0x1002264c
mov eax, dword [ebp - 0xc]
mov dword [ebp + eax*4 - 0x4f0], 0
jmp 0x1002262f
cmp dword [ebp - 0xc0], 0
jne 0x10022778
jmp 0x10022a27
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0x35c], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x36c], eax
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0x374], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x384], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x364]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x29c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
jne 0x100228de
mov dword [ebp - 0x2bc], 1
jmp 0x100228e5
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x28]
imul eax, dword [ecx]
shl eax, 1
mov ecx, dword [ebp - 0x28]
cmp eax, dword [ecx]
jge 0x1002290d
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
je 0x1002290d
mov dword [ebp - 0x38c], 1
jmp 0x10022914
and dword [ebp - 0x38c], 0
mov eax, dword [ebp - 0x29c]
mov eax, dword [eax]
mov dword [ebp - 0x43c], eax
mov eax, dword [ebp - 0x394]
mov eax, dword [eax]
sub eax, 4
je 0x10022946
mov eax, dword [ebp - 0x29c]
cmp dword [eax], 0
je 0x10022946
mov dword [ebp - 0x2a4], 1
jmp 0x1002294d
and dword [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
imul eax, dword [ebp - 0x2a4]
test eax, eax
jne 0x1002296e
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
jne 0x1002296e
and dword [ebp - 0x2ac], 0
jmp 0x10022978
mov dword [ebp - 0x2ac], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
cmp dword [ebp - 0x2ac], eax
jle 0x10022991
mov dword [ebp - 0x2b4], 1
jmp 0x10022998
and dword [ebp - 0x2b4], 0
cmp dword [ebp - 0x2b4], 0xb37d
jge 0x100229b0
mov dword [ebp - 0x2c4], 1
jmp 0x100229b7
and dword [ebp - 0x2c4], 0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x44c], eax
mov eax, dword [ebp - 0x2bc]
imul eax, dword [ebp - 0x2c4]
imul eax, eax, 0xfffa
mov ecx, dword [ebp - 0x2cc]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
mov dword [ebp - 0x454], eax
or eax, 0xffffffff
je 0x10022a12
mov eax, dword [ebp - 0x39c]
cmp dword [eax], 0
je 0x10022a12
mov dword [ebp - 0x2d4], 1
jmp 0x10022a19
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [ebp - 0x2d4]
mov dword [eax], ecx
pop esi
mov esp, ebp
pop ebp
ret