Function at 0x10008f11
Capabilities:
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10080039
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1334
call fcn.1007c170
push esi
push edi
mov dword [ebp - 0x114], 5
mov dword [ebp - 0x350], 0x95ed7c6a
mov dword [ebp - 0xaf8], 3
mov dword [ebp - 0x9c], 0
jmp 0x10008f6c
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10008f88
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x12e8], 0x6d54ec7e
jmp 0x10008f5f
mov dword [ebp - 0x9c], 0
jmp 0x10008fa1
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 2
jge 0x10008fbd
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0xf18], 0x9bfaead2
jmp 0x10008f94
cmp dword [ebp - 0x114], 0
je 0x100091ba
mov dword [ebp - 0x3fc], 0xe60e7790
push 1
lea ecx, [ebp - 0xf4c]
call fcn.10016f28
and dword [ebp - 4], 0
mov dword [ebp - 0x80], 0
jmp 0x10008ff5
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1000900b
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x3dc], 0
jmp 0x10008fee
mov dword [ebp - 0x80], 0
jmp 0x1000901b
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 1
jge 0x10009037
push dword [ebp - 0x80]
lea ecx, [ebp - 0xf4c]
call fcn.10016fc6
mov dword [eax], 5
jmp 0x10009014
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x114]
mov dword [ebp + eax - 0x3dc], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
mov dword [ebp - 0x1264], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x350]
add eax, 5
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3dc]
jle 0x1000908f
or eax, 0xffffffff
jne 0x1000908f
and dword [ebp - 0x9cc], 0
jmp 0x10009099
mov dword [ebp - 0x9cc], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
add eax, dword [ebp - 0x9cc]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3dc]
cmp eax, dword [ebp - 0x114]
jle 0x100090ce
mov dword [ebp - 0xae0], 1
jmp 0x100090d5
and dword [ebp - 0xae0], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3dc]
cmp dword [ebp - 0xae0], eax
jl 0x100090f6
mov dword [ebp - 0xae8], 1
jmp 0x100090fd
and dword [ebp - 0xae8], 0
mov eax, dword [ebp - 0x114]
cmp eax, dword [ebp - 0xae8]
je 0x10009119
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3dc], 0
mov eax, dword [ebp - 0x350]
cmp dword [ebp - 0x114], eax
jle 0x10009133
mov dword [ebp - 0xaf0], 1
jmp 0x1000913a
and dword [ebp - 0xaf0], 0
mov eax, dword [ebp - 0xaf0]
sub eax, dword [ebp - 0x3fc]
mov dword [ebp - 0xaf8], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xaf8], eax
je 0x10009166
mov dword [ebp - 0xb08], 1
jmp 0x1000916d
and dword [ebp - 0xb08], 0
mov eax, dword [ebp - 0xb08]
mov dword [ebp - 0x3fc], eax
mov esi, dword [ebp - 0x3fc]
push 0
lea ecx, [ebp - 0xf4c]
call fcn.10016fc6
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf18]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf18], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4c]
call fcn.10016faa
jmp 0x100091fa
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x100091e2
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
mov byte [ebp - 0xe8], 0
movzx eax, byte [ebp - 0xe8]
test eax, eax
je 0x100091fa
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x11c], 5
mov dword [ebp - 0x404], 0x95ed7c6a
mov dword [ebp - 0xb30], 3
mov dword [ebp - 0xa4], 0
jmp 0x10009231
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x1000924d
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x12f0], 0x6d54ec7e
jmp 0x10009224
mov dword [ebp - 0xa4], 0
jmp 0x10009266
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10009282
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0xf28], 0x9bfaead2
jmp 0x10009259
cmp dword [ebp - 0x11c], 0
je 0x10009482
mov dword [ebp - 0x40c], 0xe60e7790
push 1
lea ecx, [ebp - 0xf94]
call fcn.10016f28
mov dword [ebp - 4], 1
mov dword [ebp - 0x74], 0
jmp 0x100092bd
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 2
jge 0x100092d3
mov eax, dword [ebp - 0x74]
mov dword [ebp + eax*4 - 0x3e8], 0
jmp 0x100092b6
mov dword [ebp - 0x74], 0
jmp 0x100092e3
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x100092ff
push dword [ebp - 0x74]
lea ecx, [ebp - 0xf94]
call fcn.10016fc6
mov dword [eax], 5
jmp 0x100092dc
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x11c]
mov dword [ebp + eax - 0x3e8], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e8]
mov dword [ebp - 0x1120], eax
mov eax, dword [ebp - 0x11c]
mov dword [ebp - 0x404], eax
mov eax, dword [ebp - 0x404]
add eax, 5
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3e8]
jle 0x10009357
or eax, 0xffffffff
jne 0x10009357
and dword [ebp - 0xb10], 0
jmp 0x10009361
mov dword [ebp - 0xb10], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e8]
add eax, dword [ebp - 0xb10]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3e8]
cmp eax, dword [ebp - 0x11c]
jle 0x10009396
mov dword [ebp - 0xb18], 1
jmp 0x1000939d
and dword [ebp - 0xb18], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3e8]
cmp dword [ebp - 0xb18], eax
jl 0x100093be
mov dword [ebp - 0xb20], 1
jmp 0x100093c5
and dword [ebp - 0xb20], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xb20]
je 0x100093e1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3e8], 0
mov eax, dword [ebp - 0x404]
cmp dword [ebp - 0x11c], eax
jle 0x100093fb
mov dword [ebp - 0xb28], 1
jmp 0x10009402
and dword [ebp - 0xb28], 0
mov eax, dword [ebp - 0xb28]
sub eax, dword [ebp - 0x40c]
mov dword [ebp - 0xb30], eax
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xb30], eax
je 0x1000942e
mov dword [ebp - 0xb38], 1
jmp 0x10009435
and dword [ebp - 0xb38], 0
mov eax, dword [ebp - 0xb38]
mov dword [ebp - 0x40c], eax
mov esi, dword [ebp - 0x40c]
push 0
lea ecx, [ebp - 0xf94]
call fcn.10016fc6
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf28]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf28], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf94]
call fcn.10016faa
jmp 0x100094c2
mov byte [ebp - 0x16d], 0
movzx eax, byte [ebp - 0x16d]
test eax, eax
je 0x100094aa
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
mov byte [ebp - 0xea], 0
movzx eax, byte [ebp - 0xea]
test eax, eax
je 0x100094c2
call dword [sym.imp.USER32.dll_GetCapture]
push 2
lea ecx, [ebp - 0x434]
call fcn.10016f28
mov dword [ebp - 4], 2
mov dword [ebp - 0x998], 0xb15a
mov dword [ebp - 0xc7c], 0xee1d459
push 1
lea ecx, [ebp - 0xf64]
call fcn.10016f28
mov byte [ebp - 4], 3
mov dword [ebp - 0xc84], 0xcbedfa90
mov dword [ebp - 0x2c], 0
jmp 0x10009515
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10009531
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov dword [eax], 0xafa2fafd
jmp 0x1000950e
mov dword [ebp - 0x2c], 0
jmp 0x10009541
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 1
jge 0x1000955d
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xf64]
call fcn.10016fc6
mov dword [eax], 0xc099
jmp 0x1000953a
mov dword [ebp - 0x2c], 0
jmp 0x1000956d
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x10009583
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x12e0], 0xb347d170
jmp 0x10009566
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov eax, 0x5b8
test eax, eax
je 0x100095f3
push 1
lea ecx, [ebp - 0x434]
call fcn.10016fc6
cmp dword [eax], 0
je 0x100095c9
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
cmp dword [eax], 0
je 0x100095c9
mov dword [ebp - 0x440], 1
jmp 0x100095d0
and dword [ebp - 0x440], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov ecx, dword [ebp - 0x440]
cmp ecx, dword [eax]
jge 0x100095f3
mov dword [ebp - 0x988], 1
jmp 0x100095fa
and dword [ebp - 0x988], 0
push 1
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x988]
jne 0x1000961d
mov dword [ebp - 0x448], 1
jmp 0x10009624
and dword [ebp - 0x448], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov ecx, dword [ebp - 0x448]
add ecx, 0x279a20b2
cmp dword [eax], ecx
jne 0x1000964d
mov dword [ebp - 0x990], 1
jmp 0x10009654
and dword [ebp - 0x990], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov ecx, dword [ebp - 0x990]
cmp ecx, dword [eax]
jle 0x10009677
mov dword [ebp - 0xc10], 1
jmp 0x1000967e
and dword [ebp - 0xc10], 0
push 1
lea ecx, [ebp - 0x434]
call fcn.10016fc6
cmp dword [eax], 0
ja 0x1000969c
mov dword [ebp - 0xc74], 1
jmp 0x100096a3
and dword [ebp - 0xc74], 0
mov eax, dword [ebp - 0x998]
mov dword [ebp - 0x1208], eax
cmp dword [ebp - 0xc7c], 0
je 0x100096cb
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x100096cb
mov dword [ebp - 0x450], 1
jmp 0x100096d2
and dword [ebp - 0x450], 0
push 0
lea ecx, [ebp - 0x434]
call fcn.10016fc6
mov esi, dword [ebp - 0x450]
imul esi, dword [eax]
push 0
lea ecx, [ebp - 0xf64]
call fcn.10016fc6
imul esi, dword [eax]
test esi, esi
jae 0x10009708
mov dword [ebp - 0x414], 1
jmp 0x1000970f
and dword [ebp - 0x414], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x414]
mov dword [ebp + eax - 0x12e0], ecx
cmp dword [ebp - 0x414], 0
jne 0x1000973d
cmp dword [ebp - 0x998], 0
jne 0x1000973d
and dword [ebp - 0x458], 0
jmp 0x10009747
mov dword [ebp - 0x458], 1
mov eax, dword [ebp - 0x458]
mov dword [ebp - 0xc84], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xf64]
call fcn.10016faa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x434]
call fcn.10016faa
mov dword [ebp - 0xce8], 2
mov dword [ebp - 0xcf0], 0x22124f84
mov dword [ebp - 0x1128], 0xfffffff9
push 4
lea ecx, [ebp - 0x1224]
call fcn.10016f28
mov dword [ebp - 4], 4
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x2e8], 0
jmp 0x100097c6
mov eax, dword [ebp - 0x2e8]
inc eax
mov dword [ebp - 0x2e8], eax
cmp dword [ebp - 0x2e8], 4
jge 0x100097e8
push dword [ebp - 0x2e8]
lea ecx, [ebp - 0x1224]
call fcn.10016fc6
mov dword [eax], 0xcd50997
jmp 0x100097b9
cmp dword [ebp - 0xce8], 1
jg 0x100097fd
mov dword [ebp - 0x9a0], 1
jmp 0x10009804
and dword [ebp - 0x9a0], 0
mov eax, dword [ebp - 0x9a0]
mov dword [ebp - 0xcf0], eax
mov eax, dword [ebp - 0x460]
inc eax
mov dword [ebp - 0x460], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1224]
call fcn.10016faa
mov dword [ebp - 0x134], 5
mov dword [ebp - 0x364], 0x95ed7c6a
mov dword [ebp - 0xac], 0x3c40
mov dword [ebp - 0xc8], 0x74579933
mov dword [ebp - 0x470], 0x8db8846b
mov dword [ebp - 0xd08], 0xe4a6b2c4
mov dword [ebp - 0x2fc], 0
jmp 0x10009881
mov eax, dword [ebp - 0x2fc]
inc eax
mov dword [ebp - 0x2fc], eax
cmp dword [ebp - 0x2fc], 2
jge 0x1000989d
mov eax, dword [ebp - 0x2fc]
mov dword [ebp + eax*4 - 0x12c0], 0x216709e1
jmp 0x10009874
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x11c0], eax
mov eax, dword [ebp - 0xac]
shl eax, 1
cmp eax, 1
jne 0x100098c2
mov dword [ebp - 0x9a8], 1
jmp 0x100098c9
and dword [ebp - 0x9a8], 0
mov eax, dword [ebp - 0xac]
neg eax
mov ecx, dword [ebp - 0x9a8]
sub ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xac]
lea ecx, [ecx + edx + 0x7d24]
cmp eax, ecx
jl 0x100098fa
mov dword [ebp - 0x468], 1
jmp 0x10009901
and dword [ebp - 0x468], 0
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x468], eax
jl 0x1000991b
mov dword [ebp - 0x9b0], 1
jmp 0x10009922
and dword [ebp - 0x9b0], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x9b0], eax
jl 0x1000993c
mov dword [ebp - 0xcf8], 1
jmp 0x10009943
and dword [ebp - 0xcf8], 0
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xff8], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x100c], eax
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x1014], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0xc8], eax
jg 0x10009981
mov dword [ebp - 0xd00], 1
jmp 0x10009988
and dword [ebp - 0xd00], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0x101c], eax
mov eax, dword [ebp - 0xc8]
imul eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xc8]
mov dword [ebp - 0x470], eax
mov eax, dword [ebp - 0x470]
mov dword [ebp - 0x102c], eax
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xd08], eax
mov byte [ebp - 0xe5], 0
movzx eax, byte [ebp - 0xe5]
test eax, eax
je 0x100099df
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
mov dword [ebp - 0xa88], 3
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x1034], 3
mov dword [ebp - 0x103c], 0xfffffffe
mov dword [ebp - 0x1044], 0
mov dword [ebp - 0x104c], 0xdfe012d2
mov dword [ebp - 0x1054], 0x25d2d915
mov dword [ebp - 0x105c], 0x13a6c9cd
mov dword [ebp - 0x1064], 0x5ebda184
mov dword [ebp - 0x480], 0
mov dword [ebp - 0x304], 0
jmp 0x10009a5c
mov eax, dword [ebp - 0x304]
inc eax
mov dword [ebp - 0x304], eax
cmp dword [ebp - 0x304], 4
jge 0x10009a78
mov eax, dword [ebp - 0x304]
mov dword [ebp + eax*4 - 0x1310], 1
jmp 0x10009a4f
cmp dword [ebp - 0x230], 0x3fbb
jl 0x10009a90
mov dword [ebp - 0x9b8], 1
jmp 0x10009a97
and dword [ebp - 0x9b8], 0
cmp dword [ebp - 0x9b8], 0xffff59d7
jle 0x10009aaf
mov dword [ebp - 0x478], 1
jmp 0x10009ab6
and dword [ebp - 0x478], 0
cmp dword [ebp - 0x478], 0
jbe 0x10009acb
mov dword [ebp - 0x9c0], 1
jmp 0x10009ad2
and dword [ebp - 0x9c0], 0
mov eax, dword [ebp - 0x230]
cmp eax, dword [ebp - 0x9c0]
jg 0x10009aee
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x230], eax
jmp 0x10009b0a
mov byte [ebp - 0x10c], 0
movzx eax, byte [ebp - 0x10c]
test eax, eax
je 0x10009b0a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov eax, dword [ebp - 0x480]
dec eax
mov dword [ebp - 0x480], eax
mov dword [ebp - 0x124], 0x8e418a52
mov dword [ebp - 0x41c], 0xffffffff
push 2
lea ecx, [ebp - 0xdb8]
call fcn.10016f28
mov dword [ebp - 4], 5
mov dword [ebp - 0x9e8], 0x6b37990
mov dword [ebp - 0xd18], 0x1ee4cff1
mov dword [ebp - 0x2a8], 0
jmp 0x10009b6c
mov eax, dword [ebp - 0x2a8]
inc eax
mov dword [ebp - 0x2a8], eax
cmp dword [ebp - 0x2a8], 2
jge 0x10009b8e
push dword [ebp - 0x2a8]
lea ecx, [ebp - 0xdb8]
call fcn.10016fc6
mov dword [eax], 0x71a0513
jmp 0x10009b5f
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x10009bb5
cmp dword [ebp - 0x41c], 0
jne 0x10009bb5
and dword [ebp - 0x9c8], 0
jmp 0x10009bbf
mov dword [ebp - 0x9c8], 1
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x9c8], eax
jl 0x10009bd9
mov dword [ebp - 0xd10], 1
jmp 0x10009be0
and dword [ebp - 0xd10], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x106c], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0x124], eax
je 0x10009c06
mov dword [ebp - 0x488], 1
jmp 0x10009c0d
and dword [ebp - 0x488], 0
mov esi, dword [ebp - 0x124]
imul esi, dword [ebp - 0x124]
imul esi, dword [ebp - 0x488]
push 1
lea ecx, [ebp - 0xdb8]
call fcn.10016fc6
cmp esi, dword [eax]
jg 0x10009c44
mov eax, 0x9a13
test eax, eax
jne 0x10009c44
and dword [ebp - 0x9d0], 0
jmp 0x10009c4e
mov dword [ebp - 0x9d0], 1
cmp dword [ebp - 0x9d0], 8
jae 0x10009c63
mov dword [ebp - 0x490], 1
jmp 0x10009c6a
and dword [ebp - 0x490], 0
push 1
lea ecx, [ebp - 0xdb8]
call fcn.10016fc6
mov ecx, dword [ebp - 0x490]
add ecx, dword [eax]
cmp ecx, 1
jne 0x10009c90
mov dword [ebp - 0x9d8], 1
jmp 0x10009c97
and dword [ebp - 0x9d8], 0
push 0
lea ecx, [ebp - 0xdb8]
call fcn.10016fc6
mov ecx, dword [ebp - 0x9d8]
imul ecx, dword [eax]
cmp ecx, 0x14b1
jl 0x10009cc1
mov dword [ebp - 0x498], 1
jmp 0x10009cc8
and dword [ebp - 0x498], 0
cmp dword [ebp - 0x498], 0xfffffffe
jl 0x10009cdd
mov dword [ebp - 0x9e0], 1
jmp 0x10009ce4
and dword [ebp - 0x9e0], 0
cmp dword [ebp - 0x9e0], 0xffffffff
je 0x10009cf9
mov dword [ebp - 0x4a0], 1
jmp 0x10009d00
and dword [ebp - 0x4a0], 0
mov eax, dword [ebp - 0x4a0]
mov dword [ebp - 0x9e8], eax
mov eax, dword [ebp - 0x9e8]
mov dword [ebp - 0xd18], eax
mov byte [ebp - 0x10a], 0
movzx eax, byte [ebp - 0x10a]
test eax, eax
je 0x10009d39
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_KillTimer]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb8]
call fcn.10016faa
mov dword [ebp - 0x90], 0
jmp 0x10009d61
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10009d7d
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x1290], 0x6d54ec7e
jmp 0x10009d54
mov dword [ebp - 0x90], 0
jmp 0x10009d96
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x10009db2
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf20], 0x9bfaead2
jmp 0x10009d89
cmp dword [ebp - 0x134], 0
je 0x1000a772
mov dword [ebp - 0x180], 0xb34e6d4f
mov dword [ebp - 0x35c], 0
mov dword [ebp - 0x68], 0x5872
mov dword [ebp - 0x12c], 0x623b4709
mov dword [ebp - 0x54], 0x78ef
mov dword [ebp - 0x64], 0xcc72b752
mov dword [ebp - 0xa00], 0xc0a1033
mov dword [ebp - 0x4c0], 0xf537
mov dword [ebp - 0x420], 9
mov dword [ebp - 0x3bc], 0x927d
mov dword [ebp - 0xa68], 0
mov dword [ebp - 0x1258], 0xfffffff7
mov dword [ebp - 0x1254], 0xfffffff7
mov dword [ebp - 0x1250], 0xfffffff7
mov dword [ebp - 0x124c], 0xfffffff7
mov dword [ebp - 0x238], 0
jmp 0x10009e65
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 3
jge 0x10009e81
mov eax, dword [ebp - 0x238]
mov dword [ebp + eax*4 - 0xbac], 2
jmp 0x10009e58
mov byte [ebp - 0xec], 0
movzx eax, byte [ebp - 0xec]
test eax, eax
je 0x10009ea0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x35c], eax
cmp dword [ebp - 0x35c], 0xb0e4
jl 0x10009ec4
mov dword [ebp - 0xa28], 1
jmp 0x10009ecb
and dword [ebp - 0xa28], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x1074], eax
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x107c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x1084], eax
push 5
pop eax
cmp eax, 1
jb 0x10009f00
mov dword [ebp - 0x4a8], 1
jmp 0x10009f07
and dword [ebp - 0x4a8], 0
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x64]
sub eax, dword [ebp - 0x180]
cmp eax, dword [ebp - 0x68]
jge 0x10009f2a
mov dword [ebp - 0x9f0], 1
jmp 0x10009f31
and dword [ebp - 0x9f0], 0
mov eax, dword [ebp - 0x68]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x108c], eax
cmp dword [ebp - 0x180], 0x6ac116e0
jg 0x10009f55
mov dword [ebp - 0x4b0], 1
jmp 0x10009f5c
and dword [ebp - 0x4b0], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0x4b0], eax
jg 0x10009f73
mov dword [ebp - 0x9f8], 1
jmp 0x10009f7a
and dword [ebp - 0x9f8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x9f8], eax
jne 0x10009f94
mov dword [ebp - 0x4b8], 1
jmp 0x10009f9b
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4b8]
inc eax
mov dword [ebp - 0xa00], eax
mov eax, dword [ebp - 0xa00]
mov dword [ebp - 0x1094], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x109c], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x10a4], eax
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x4c0], eax
je 0x10009fe0
mov dword [ebp - 0xa08], 1
jmp 0x10009fe7
and dword [ebp - 0xa08], 0
mov eax, dword [ebp - 0x4c0]
cmp dword [ebp - 0xa08], eax
je 0x1000a001
mov dword [ebp - 0x4c8], 1
jmp 0x1000a008
and dword [ebp - 0x4c8], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x4c8], eax
jle 0x1000a022
mov dword [ebp - 0xa10], 1
jmp 0x1000a029
and dword [ebp - 0xa10], 0
mov eax, dword [ebp - 0x54]
cmp dword [ebp - 0xa10], eax
jne 0x1000a040
mov dword [ebp - 0x4d0], 1
jmp 0x1000a047
and dword [ebp - 0x4d0], 0
imul eax, dword [ebp - 0x4d0], 0xffffffff
test eax, eax
jne 0x1000a064
mov eax, 0xc256fae7
test eax, eax
jne 0x1000a064
and dword [ebp - 0xa18], 0
jmp 0x1000a06e
mov dword [ebp - 0xa18], 1
mov eax, dword [ebp - 0xa18]
sub eax, dword [ebp - 0x420]
add eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x12c]
jge 0x1000a094
mov dword [ebp - 0x4d8], 1
jmp 0x1000a09b
and dword [ebp - 0x4d8], 0
cmp dword [ebp - 0x4d8], 1
jg 0x1000a0b0
mov dword [ebp - 0xa20], 1
jmp 0x1000a0b7
and dword [ebp - 0xa20], 0
mov eax, dword [ebp - 0x12c]
add eax, dword [ebp - 0xa20]
sub eax, dword [ebp - 0x420]
cmp dword [ebp - 0x68], eax
jl 0x1000a0da
mov dword [ebp - 0x4e0], 1
jmp 0x1000a0e1
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x4e0], eax
je 0x1000a0fb
mov dword [ebp - 0x4e8], 1
jmp 0x1000a102
and dword [ebp - 0x4e8], 0
mov eax, dword [ebp - 0xa28]
cmp eax, dword [ebp - 0x4e8]
jg 0x1000a11c
mov dword [ebp - 0xd20], 1
jmp 0x1000a123
and dword [ebp - 0xd20], 0
mov eax, dword [ebp - 0x3bc]
mov dword [ebp - 0x10ac], eax
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xbac], 0xfffffffc
push 0xfffffffffffffffc
pop eax
test eax, eax
je 0x1000a310
mov dword [ebp - 0x424], 0x140da8f9
mov dword [ebp - 0x64], 2
jmp 0x1000a165
mov eax, dword [ebp - 0x64]
dec eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0
jl 0x1000a2a6
mov dword [ebp - 0x10b4], 0xffffffff
mov dword [ebp - 0x10bc], 0x29358db
mov dword [ebp - 0x10c4], 0x825d0bc5
mov dword [ebp - 0x10cc], 0xf73ecb6a
mov dword [ebp - 0xd28], 0x330c202e
mov dword [ebp - 0x2f4], 0
jmp 0x1000a1ba
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 4
jge 0x1000a1d6
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x1330], 0xbbe75688
jmp 0x1000a1ad
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0xbac], 0
jne 0x1000a1f9
mov eax, dword [ebp - 0x64]
cmp dword [ebp + eax*4 - 0xbac], 0
jne 0x1000a1f9
and dword [ebp - 0xa30], 0
jmp 0x1000a203
mov dword [ebp - 0xa30], 1
xor eax, eax
inc eax
je 0x1000a220
cmp dword [ebp - 0x424], 0xc23faab9
ja 0x1000a220
mov dword [ebp - 0x4f0], 1
jmp 0x1000a227
and dword [ebp - 0x4f0], 0
mov eax, dword [ebp - 0xa30]
cmp eax, dword [ebp - 0x4f0]
je 0x1000a241
mov dword [ebp - 0xa38], 1
jmp 0x1000a248
and dword [ebp - 0xa38], 0
mov eax, dword [ebp - 0xd28]
cmp dword [ebp - 0xa38], eax
jg 0x1000a262
mov dword [ebp - 0x4f8], 1
jmp 0x1000a269
and dword [ebp - 0x4f8], 0
cmp dword [ebp - 0x4f8], 0xfffffffb
jg 0x1000a27e
mov dword [ebp - 0xd30], 1
jmp 0x1000a285
and dword [ebp - 0xd30], 0
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x10d4], eax
mov eax, dword [ebp - 0x64]
mov ecx, dword [ebp - 0x424]
mov dword [ebp + eax*4 - 0xbac], ecx
jmp 0x1000a15e
mov dword [ebp - 0x54], 4
jmp 0x1000a2b6
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x22
je 0x1000a30b
mov byte [ebp - 0xee], 0
movzx eax, byte [ebp - 0xee]
test eax, eax
je 0x1000a2e2
push 0
push 0x85a
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetDlgItemTextA]
mov dword [ebp - 0x68], 0
jmp 0x1000a2f2
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jg 0x1000a309
mov eax, dword [ebp - 0x68]
cmp dword [ebp + eax*4 - 0xbac], 0
je 0x1000a307
jmp 0x1000a309
jmp 0x1000a2eb
jmp 0x1000a2af
jmp 0x1000a561
mov dword [ebp - 0x60], 1
cmp dword [ebp - 0x60], 0
je 0x1000a32f
cmp dword [ebp - 0x54], 0
je 0x1000a32f
mov dword [ebp - 0xa40], 1
jmp 0x1000a336
and dword [ebp - 0xa40], 0
cmp dword [ebp - 0xa40], 6
jl 0x1000a34b
mov dword [ebp - 0x500], 1
jmp 0x1000a352
and dword [ebp - 0x500], 0
mov eax, dword [ebp - 0x180]
cmp dword [ebp - 0x500], eax
je 0x1000a36c
mov dword [ebp - 0xa48], 1
jmp 0x1000a373
and dword [ebp - 0xa48], 0
mov eax, dword [ebp - 0xa48]
neg eax
cmp eax, dword [ebp - 0x60]
jge 0x1000a390
xor eax, eax
je 0x1000a390
mov dword [ebp - 0x508], 1
jmp 0x1000a397
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x12c]
cmp dword [ebp - 0x508], eax
jne 0x1000a3ba
cmp dword [ebp - 0xa68], 0
je 0x1000a3ba
mov dword [ebp - 0xa50], 1
jmp 0x1000a3c1
and dword [ebp - 0xa50], 0
mov eax, dword [ebp - 0x60]
imul eax, dword [ebp - 0xa50]
sub eax, 0x2319b07f
cmp dword [ebp - 0x60], eax
jge 0x1000a3e1
mov dword [ebp - 0x510], 1
jmp 0x1000a3e8
and dword [ebp - 0x510], 0
mov eax, dword [ebp - 0x510]
sub eax, 0x4946
cmp eax, 0x72a6dd75
jle 0x1000a406
mov dword [ebp - 0xd38], 1
jmp 0x1000a40d
and dword [ebp - 0xd38], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xbac]
cmp dword [ebp - 0x68], eax
jle 0x1000a431
cmp dword [ebp - 0x420], 0
jne 0x1000a431
and dword [ebp - 0xa58], 0
jmp 0x1000a43b
mov dword [ebp - 0xa58], 1
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xa58], eax
jne 0x1000a452
mov dword [ebp - 0x518], 1
jmp 0x1000a459
and dword [ebp - 0x518], 0
cmp dword [ebp - 0x518], 0x6330
je 0x1000a471
mov dword [ebp - 0xa60], 1
jmp 0x1000a478
and dword [ebp - 0xa60], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0xa60], eax
jge 0x1000a48f
mov dword [ebp - 0x520], 1
jmp 0x1000a496
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x520]
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x10dc], eax
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x10e4], eax
mov eax, dword [ebp - 0x54]
imul eax, dword [ebp - 0x60]
mov ecx, 0xaf4644de
sub ecx, eax
cmp ecx, dword [ebp - 0xa68]
jne 0x1000a4d6
mov dword [ebp - 0x528], 1
jmp 0x1000a4dd
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x60]
cmp dword [ebp - 0x528], eax
je 0x1000a4f4
mov dword [ebp - 0xa70], 1
jmp 0x1000a4fb
and dword [ebp - 0xa70], 0
mov eax, dword [ebp - 0xa70]
sub eax, dword [ebp - 0x54]
cmp eax, 0x262d
jg 0x1000a51d
mov eax, 0x59f0ad7
test eax, eax
jne 0x1000a51d
and dword [ebp - 0x530], 0
jmp 0x1000a527
mov dword [ebp - 0x530], 1
mov eax, dword [ebp - 0x3bc]
cmp eax, dword [ebp - 0x530]
jg 0x1000a541
mov dword [ebp - 0xd40], 1
jmp 0x1000a548
and dword [ebp - 0xd40], 0
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x10ec], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x60]
mov dword [ebp + eax - 0xbac], ecx
mov dword [ebp - 0x400], 0xe60e7790
push 1
lea ecx, [ebp - 0xfc4]
call fcn.10016f28
mov dword [ebp - 4], 6
mov dword [ebp - 0xa8], 0
jmp 0x1000a598
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 2
jge 0x1000a5b4
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x3f4], 0
jmp 0x1000a58b
mov dword [ebp - 0xa8], 0
jmp 0x1000a5cd
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 1
jge 0x1000a5ef
push dword [ebp - 0xa8]
lea ecx, [ebp - 0xfc4]
call fcn.10016fc6
mov dword [eax], 5
jmp 0x1000a5c0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x134]
mov dword [ebp + eax - 0x3f4], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f4]
mov dword [ebp - 0x10f4], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x364]
add eax, 5
push 4
pop ecx
shl ecx, 0
cmp eax, dword [ebp + ecx - 0x3f4]
jle 0x1000a647
or eax, 0xffffffff
jne 0x1000a647
and dword [ebp - 0xa78], 0
jmp 0x1000a651
mov dword [ebp - 0xa78], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f4]
add eax, dword [ebp - 0xa78]
push 4
pop ecx
imul ecx, ecx, 0
imul eax, dword [ebp + ecx - 0x3f4]
cmp eax, dword [ebp - 0x134]
jle 0x1000a686
mov dword [ebp - 0x538], 1
jmp 0x1000a68d
and dword [ebp - 0x538], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x3f4]
cmp dword [ebp - 0x538], eax
jl 0x1000a6ae
mov dword [ebp - 0xa80], 1
jmp 0x1000a6b5
and dword [ebp - 0xa80], 0
mov eax, dword [ebp - 0x134]
cmp eax, dword [ebp - 0xa80]
je 0x1000a6d1
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x3f4], 0
mov eax, dword [ebp - 0x364]
cmp dword [ebp - 0x134], eax
jle 0x1000a6eb
mov dword [ebp - 0x540], 1
jmp 0x1000a6f2
and dword [ebp - 0x540], 0
mov eax, dword [ebp - 0x540]
sub eax, dword [ebp - 0x400]
mov dword [ebp - 0xa88], eax
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0xa88], eax
je 0x1000a71e
mov dword [ebp - 0x548], 1
jmp 0x1000a725
and dword [ebp - 0x548], 0
mov eax, dword [ebp - 0x548]
mov dword [ebp - 0x400], eax
mov esi, dword [ebp - 0x400]
push 0
lea ecx, [ebp - 0xfc4]
call fcn.10016fc6
mov dword [eax], esi
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf20]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf20], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xfc4]
call fcn.10016faa
jmp 0x1000a7b2
mov byte [ebp - 0xf0], 0
movzx eax, byte [ebp - 0xf0]
test eax, eax
je 0x1000a79a
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_RectVisible]
mov byte [ebp - 0x155], 0
movzx eax, byte [ebp - 0x155]
test eax, eax
je 0x1000a7b2
call dword [sym.imp.USER32.dll_GetCapture]
push 2
lea ecx, [ebp - 0xdc8]
call fcn.10016f28
mov dword [ebp - 4], 7
push 3
lea ecx, [ebp - 0xb48]
call fcn.10016f28
mov byte [ebp - 4], 8
push 2
lea ecx, [ebp - 0xf04]
call fcn.10016f28
mov byte [ebp - 4], 9
mov dword [ebp - 0xd58], 1
mov dword [ebp - 0xd78], 0x9ff4c90e
mov dword [ebp - 0x40], 0
jmp 0x1000a80c
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000a828
push dword [ebp - 0x40]
lea ecx, [ebp - 0xdc8]
call fcn.10016fc6
mov dword [eax], 0xfffffff9
jmp 0x1000a805
mov dword [ebp - 0x40], 0
jmp 0x1000a838
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 3
jge 0x1000a854
push dword [ebp - 0x40]
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
mov dword [eax], 0xfffffff7
jmp 0x1000a831
mov dword [ebp - 0x40], 0
jmp 0x1000a864
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 2
jge 0x1000a880
push dword [ebp - 0x40]
lea ecx, [ebp - 0xf04]
call fcn.10016fc6
mov dword [eax], 0xbdbdf7cd
jmp 0x1000a85d
push 1
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
mov dword [eax], 1
jmp 0x1000a8b9
push 1
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
mov dword [ebp - 0xa90], eax
mov eax, dword [ebp - 0xa90]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa90]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
cmp dword [eax], 0
jl 0x1000abf2
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x570], 0xa73d2d67
mov dword [ebp - 0x10fc], 0
mov dword [ebp - 0xd70], 0xffffffff
mov dword [ebp - 0x1104], 8
mov dword [ebp - 0x110c], 0xd8ea5f34
mov dword [ebp - 0x36c], 6
mov dword [ebp - 0x1ac], 0
jmp 0x1000a92e
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 1
jg 0x1000abed
mov dword [ebp - 0xaa8], 0xffffffff
mov dword [ebp - 0xd68], 0
mov dword [ebp - 0xd48], 0x6edad94e
mov dword [ebp - 0x1114], 0x2f88d967
push 2
lea ecx, [ebp - 0xea4]
call fcn.10016f28
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x240], 0
jmp 0x1000a98d
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 2
jge 0x1000a9af
push dword [ebp - 0x240]
lea ecx, [ebp - 0xea4]
call fcn.10016fc6
mov dword [eax], 0x9d73df2e
jmp 0x1000a980
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xdc8]
call fcn.10016fc6
mov eax, dword [eax]
mov dword [ebp - 0x570], eax
push 1
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x111c], eax
mov eax, dword [ebp - 0x36c]
inc eax
mov dword [ebp - 0x36c], eax
cmp dword [ebp - 0xd48], 0
jne 0x1000aa12
push 0
lea ecx, [ebp - 0xf04]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000aa12
and dword [ebp - 0x550], 0
jmp 0x1000aa1c
mov dword [ebp - 0x550], 1
push 0
lea ecx, [ebp - 0xea4]
call fcn.10016fc6
mov ecx, dword [ebp - 0x550]
cmp ecx, dword [eax]
jl 0x1000aa3f
mov dword [ebp - 0xd50], 1
jmp 0x1000aa46
and dword [ebp - 0xd50], 0
push 0
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
mov esi, eax
push dword [ebp - 0x1ac]
lea ecx, [ebp - 0xdc8]
call fcn.10016fc6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1000aa78
mov dword [ebp - 0xa98], 1
jmp 0x1000aa7f
and dword [ebp - 0xa98], 0
cmp dword [ebp - 0xa98], 0x3fa9
jl 0x1000aa97
mov dword [ebp - 0x558], 1
jmp 0x1000aa9e
and dword [ebp - 0x558], 0
cmp dword [ebp - 0x558], 2
jb 0x1000aab3
mov dword [ebp - 0x3c4], 1
jmp 0x1000aaba
and dword [ebp - 0x3c4], 0
push 1
lea ecx, [ebp - 0xf04]
call fcn.10016fc6
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
cmp dword [ebp - 0x3c4], 0
jne 0x1000ab05
push 1
lea ecx, [ebp - 0xb48]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000ab05
push 0
lea ecx, [ebp - 0xdc8]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000ab05
and dword [ebp - 0xaa0], 0
jmp 0x1000ab0f
mov dword [ebp - 0xaa0], 1
mov eax, dword [ebp - 0xd58]
add eax, dword [ebp - 0xaa0]
cmp eax, dword [ebp - 0xaa8]
jne 0x1000ab2f
mov dword [ebp - 0xd60], 1
jmp 0x1000ab36
and dword [ebp - 0xd60], 0
push 0
lea ecx, [ebp - 0xea4]
call fcn.10016fc6
cmp dword [eax], 0xea418246
jb 0x1000ab57
mov dword [ebp - 0x560], 1
jmp 0x1000ab5e
and dword [ebp - 0x560], 0
mov eax, dword [ebp - 0x560]
inc eax
inc eax
je 0x1000ab7d
cmp dword [ebp - 0xd68], 0
je 0x1000ab7d
mov dword [ebp - 0x568], 1
jmp 0x1000ab84
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0xaa8]
cmp dword [ebp - 0x568], eax
jg 0x1000ab9e
mov dword [ebp - 0xab0], 1
jmp 0x1000aba5
and dword [ebp - 0xab0], 0
mov eax, dword [ebp - 0xd70]
imul eax, dword [ebp - 0xab0]
cmp eax, dword [ebp - 0x570]
jne 0x1000abc6
mov dword [ebp - 0xab8], 1
jmp 0x1000abcd
and dword [ebp - 0xab8], 0
mov eax, dword [ebp - 0xab8]
mov dword [ebp - 0xd78], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xea4]
call fcn.10016faa
jmp 0x1000a921
jmp 0x1000a895
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xf04]
call fcn.10016faa
mov byte [ebp - 4], 7
lea ecx, [ebp - 0xb48]
call fcn.10016faa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdc8]
call fcn.10016faa
push 3
lea ecx, [ebp - 0xbc4]
call fcn.10016f28
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x1124], 0xffffffff
mov dword [ebp - 0x2b0], 5
mov dword [ebp - 0x112c], 0x7d393e75
mov dword [ebp - 0xd88], 0x2afa0177
mov dword [ebp - 0x1d4], 0x5acee617
mov dword [ebp - 0x1c8], 0x9e885dc1
mov dword [ebp - 0x37c], 0
push 2
lea ecx, [ebp - 0xb58]
call fcn.10016f28
mov byte [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0xbdc]
call fcn.10016f28
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x5ac], 0xffffffff
mov dword [ebp - 0xd90], 0x69fbc0ae
mov dword [ebp - 0xd98], 0xbfe21dab
mov dword [ebp - 0x1c], 0
jmp 0x1000acc9
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000ace5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
mov dword [eax], 0x87d0fa51
jmp 0x1000acc2
mov dword [ebp - 0x1c], 0
jmp 0x1000acf5
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 2
jge 0x1000ad11
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
mov dword [eax], 0xf2d6273
jmp 0x1000acee
mov dword [ebp - 0x1c], 0
jmp 0x1000ad21
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x1000ad3d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
mov dword [eax], 0xc6a37d7c
jmp 0x1000ad1a
push 2
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
push 1
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000adff
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
mov dword [ebp - 0x374], eax
mov eax, dword [ebp - 0x374]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x374]
mov dword [ecx], eax
mov eax, dword [ebp - 0x374]
cmp dword [eax], 0x9229a275
jae 0x1000ad9e
mov dword [ebp - 0x578], 1
jmp 0x1000ada5
and dword [ebp - 0x578], 0
mov dword [ebp - 0x1c8], 9
cmp dword [ebp - 0x1c8], 0x1718
jl 0x1000adc7
mov dword [ebp - 0xd80], 1
jmp 0x1000adce
and dword [ebp - 0xd80], 0
push 0
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
push 1
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
imul eax, dword [eax], 0xfa3f
cmp dword [ebp - 0x578], eax
jne 0x1000adff
and dword [ebp - 0xac0], 0
jmp 0x1000ae09
mov dword [ebp - 0xac0], 1
mov eax, dword [ebp - 0x5ac]
cmp dword [ebp - 0xac0], eax
jle 0x1000ae23
mov dword [ebp - 0x580], 1
jmp 0x1000ae2a
and dword [ebp - 0x580], 0
cmp dword [ebp - 0x580], 0
jae 0x1000ae3f
mov dword [ebp - 0xac8], 1
jmp 0x1000ae46
and dword [ebp - 0xac8], 0
push 2
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
mov eax, dword [eax]
cmp eax, dword [ebp - 0xac8]
jg 0x1000ae69
mov dword [ebp - 0x588], 1
jmp 0x1000ae70
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0xd88]
add eax, dword [ebp - 0x588]
cmp eax, dword [ebp - 0x2b0]
jg 0x1000ae90
mov dword [ebp - 0xad0], 1
jmp 0x1000ae97
and dword [ebp - 0xad0], 0
mov eax, dword [ebp - 0x37c]
cmp dword [ebp - 0xad0], eax
jl 0x1000aeb1
mov dword [ebp - 0xad8], 1
jmp 0x1000aeb8
and dword [ebp - 0xad8], 0
mov eax, dword [ebp - 0xad8]
add eax, 6
je 0x1000aed8
mov eax, 0x8fc7
test eax, eax
je 0x1000aed8
mov dword [ebp - 0x418], 1
jmp 0x1000aedf
and dword [ebp - 0x418], 0
push 1
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
mov ecx, dword [ebp - 0x418]
mov dword [eax], ecx
mov eax, dword [ebp - 0x2b0]
cmp dword [ebp - 0x418], eax
jge 0x1000af0e
mov dword [ebp - 0x5b8], 1
jmp 0x1000af15
and dword [ebp - 0x5b8], 0
push 2
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
mov ecx, dword [ebp - 0x5b8]
cmp ecx, dword [eax]
jge 0x1000af38
mov dword [ebp - 0x5b0], 1
jmp 0x1000af3f
and dword [ebp - 0x5b0], 0
mov eax, dword [ebp - 0x5b0]
mov dword [ebp - 0x1d4], eax
push 1
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000afa2
push 1
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
cmp dword [eax], 0
je 0x1000af84
cmp dword [ebp - 0x1d4], 0
je 0x1000af84
mov dword [ebp - 0x59c], 1
jmp 0x1000af8b
and dword [ebp - 0x59c], 0
imul eax, dword [ebp - 0x59c], 0x9f41
test eax, eax
jne 0x1000afa2
and dword [ebp - 0x87c], 0
jmp 0x1000afac
mov dword [ebp - 0x87c], 1
push 2
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
mov ecx, dword [ebp - 0x87c]
cmp ecx, dword [eax]
jg 0x1000afcf
mov dword [ebp - 0x5a4], 1
jmp 0x1000afd6
and dword [ebp - 0x5a4], 0
mov eax, dword [ebp - 0x5a4]
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov dword [ebp - 0x1134], eax
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x113c], eax
cmp dword [ebp - 0x1d4], 0x501494d8
jle 0x1000b012
mov dword [ebp - 0x9ec], 1
jmp 0x1000b019
and dword [ebp - 0x9ec], 0
mov eax, dword [ebp - 0x9ec]
add eax, 0xc
je 0x1000b039
cmp dword [ebp - 0x1c8], 0
je 0x1000b039
mov dword [ebp - 0x3d4], 1
jmp 0x1000b040
and dword [ebp - 0x3d4], 0
push 2
lea ecx, [ebp - 0xbc4]
call fcn.10016fc6
mov ecx, dword [ebp - 0x3d4]
mov dword [eax], ecx
cmp dword [ebp - 0x3d4], 0xffffffff
je 0x1000b06a
mov dword [ebp - 0x884], 1
jmp 0x1000b071
and dword [ebp - 0x884], 0
mov eax, dword [ebp - 0x5ac]
cmp dword [ebp - 0x884], eax
je 0x1000b08b
mov dword [ebp - 0x5b4], 1
jmp 0x1000b092
and dword [ebp - 0x5b4], 0
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1c8]
cmp dword [ebp - 0x1d4], eax
je 0x1000b0b8
mov dword [ebp - 0xaa4], 1
jmp 0x1000b0bf
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0xaa4]
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b0]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebp - 0x1c8]
mov dword [ebp - 0x1144], eax
mov eax, dword [ebp - 0xd98]
mov dword [ebp - 0x114c], eax
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
push 1
lea ecx, [ebp - 0xbdc]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000b11e
push 7
pop eax
test eax, eax
jne 0x1000b11e
and dword [ebp - 0x5bc], 0
jmp 0x1000b128
mov dword [ebp - 0x5bc], 1
push 1
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
mov ecx, dword [ebp - 0x5bc]
cmp ecx, dword [eax]
jg 0x1000b14b
mov dword [ebp - 0x88c], 1
jmp 0x1000b152
and dword [ebp - 0x88c], 0
push 1
lea ecx, [ebp - 0xb58]
call fcn.10016fc6
mov ecx, dword [ebp - 0x88c]
mov dword [eax], ecx
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xbdc]
call fcn.10016faa
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb58]
call fcn.10016faa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc4]
call fcn.10016faa
push 2
lea ecx, [ebp - 0xdd8]
call fcn.10016f28
mov dword [ebp - 4], 0xe
push 3
lea ecx, [ebp - 0xb68]
call fcn.10016f28
mov byte [ebp - 4], 0xf
push 2
lea ecx, [ebp - 0xeec]
call fcn.10016f28
mov byte [ebp - 4], 0x10
mov dword [ebp - 0xc6c], 1
mov dword [ebp - 0xc28], 0x9ff4c90e
mov dword [ebp - 0x34], 0
jmp 0x1000b1ee
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1000b20a
push dword [ebp - 0x34]
lea ecx, [ebp - 0xdd8]
call fcn.10016fc6
mov dword [eax], 0xfffffff9
jmp 0x1000b1e7
mov dword [ebp - 0x34], 0
jmp 0x1000b21a
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1000b236
push dword [ebp - 0x34]
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
mov dword [eax], 0xfffffff7
jmp 0x1000b213
mov dword [ebp - 0x34], 0
jmp 0x1000b246
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1000b262
push dword [ebp - 0x34]
lea ecx, [ebp - 0xeec]
call fcn.10016fc6
mov dword [eax], 0xbdbdf7cd
jmp 0x1000b23f
push 1
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
mov dword [eax], 1
jmp 0x1000b29b
push 1
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
mov dword [ebp - 0x5c4], eax
mov eax, dword [ebp - 0x5c4]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5c4]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
cmp dword [eax], 0
jl 0x1000b5d4
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x9fc], 0xa73d2d67
mov dword [ebp - 0x1154], 0
mov dword [ebp - 0xe0c], 0xffffffff
mov dword [ebp - 0x115c], 8
mov dword [ebp - 0x1164], 0xd8ea5f34
mov dword [ebp - 0x384], 6
mov dword [ebp - 0x1d0], 0
jmp 0x1000b310
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 1
jg 0x1000b5cf
mov dword [ebp - 0x5dc], 0xffffffff
mov dword [ebp - 0xc20], 0
mov dword [ebp - 0xda0], 0x6edad94e
mov dword [ebp - 0x116c], 0x2f88d967
push 2
lea ecx, [ebp - 0xebc]
call fcn.10016f28
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x248], 0
jmp 0x1000b36f
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 2
jge 0x1000b391
push dword [ebp - 0x248]
lea ecx, [ebp - 0xebc]
call fcn.10016fc6
mov dword [eax], 0x9d73df2e
jmp 0x1000b362
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xdd8]
call fcn.10016fc6
mov eax, dword [eax]
mov dword [ebp - 0x9fc], eax
push 1
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
mov eax, dword [ebp - 0x384]
mov dword [ebp - 0x1174], eax
mov eax, dword [ebp - 0x384]
inc eax
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0xda0], 0
jne 0x1000b3f4
push 0
lea ecx, [ebp - 0xeec]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000b3f4
and dword [ebp - 0x9f4], 0
jmp 0x1000b3fe
mov dword [ebp - 0x9f4], 1
push 0
lea ecx, [ebp - 0xebc]
call fcn.10016fc6
mov ecx, dword [ebp - 0x9f4]
cmp ecx, dword [eax]
jl 0x1000b421
mov dword [ebp - 0xda8], 1
jmp 0x1000b428
and dword [ebp - 0xda8], 0
push 0
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
mov esi, eax
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xdd8]
call fcn.10016fc6
mov ecx, dword [esi]
cmp ecx, dword [eax]
jne 0x1000b45a
mov dword [ebp - 0x5cc], 1
jmp 0x1000b461
and dword [ebp - 0x5cc], 0
cmp dword [ebp - 0x5cc], 0x3fa9
jl 0x1000b479
mov dword [ebp - 0x894], 1
jmp 0x1000b480
and dword [ebp - 0x894], 0
cmp dword [ebp - 0x894], 2
jb 0x1000b495
mov dword [ebp - 0x408], 1
jmp 0x1000b49c
and dword [ebp - 0x408], 0
push 1
lea ecx, [ebp - 0xeec]
call fcn.10016fc6
mov ecx, dword [ebp - 0x408]
mov dword [eax], ecx
cmp dword [ebp - 0x408], 0
jne 0x1000b4e7
push 1
lea ecx, [ebp - 0xb68]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000b4e7
push 0
lea ecx, [ebp - 0xdd8]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000b4e7
and dword [ebp - 0x5d4], 0
jmp 0x1000b4f1
mov dword [ebp - 0x5d4], 1
mov eax, dword [ebp - 0xc6c]
add eax, dword [ebp - 0x5d4]
cmp eax, dword [ebp - 0x5dc]
jne 0x1000b511
mov dword [ebp - 0xc1c], 1
jmp 0x1000b518
and dword [ebp - 0xc1c], 0
push 0
lea ecx, [ebp - 0xebc]
call fcn.10016fc6
cmp dword [eax], 0xea418246
jb 0x1000b539
mov dword [ebp - 0xb34], 1
jmp 0x1000b540
and dword [ebp - 0xb34], 0
mov eax, dword [ebp - 0xb34]
inc eax
inc eax
je 0x1000b55f
cmp dword [ebp - 0xc20], 0
je 0x1000b55f
mov dword [ebp - 0x89c], 1
jmp 0x1000b566
and dword [ebp - 0x89c], 0
mov eax, dword [ebp - 0x5dc]
cmp dword [ebp - 0x89c], eax
jg 0x1000b580
mov dword [ebp - 0x5e4], 1
jmp 0x1000b587
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0xe0c]
imul eax, dword [ebp - 0x5e4]
cmp eax, dword [ebp - 0x9fc]
jne 0x1000b5a8
mov dword [ebp - 0x5ec], 1
jmp 0x1000b5af
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0xc28], eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xebc]
call fcn.10016faa
jmp 0x1000b303
jmp 0x1000b277
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xeec]
call fcn.10016faa
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xb68]
call fcn.10016faa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdd8]
call fcn.10016faa
push 1
lea ecx, [ebp - 0xf34]
call fcn.10016f28
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x21c], 0xf73838a
mov dword [ebp - 0x2ec], 0
jmp 0x1000b638
mov eax, dword [ebp - 0x2ec]
inc eax
mov dword [ebp - 0x2ec], eax
cmp dword [ebp - 0x2ec], 1
jge 0x1000b657
push dword [ebp - 0x2ec]
lea ecx, [ebp - 0xf34]
call fcn.10016fc6
and dword [eax], 0
jmp 0x1000b62b
mov dword [ebp - 0x21c], 0
jmp 0x1000b670
mov eax, dword [ebp - 0x21c]
inc eax
mov dword [ebp - 0x21c], eax
cmp dword [ebp - 0x21c], 1
jge 0x1000b692
push dword [ebp - 0x21c]
lea ecx, [ebp - 0xf34]
call fcn.10016fc6
mov dword [eax], 6
jmp 0x1000b663
mov byte [ebp - 0xf2], 0
movzx eax, byte [ebp - 0xf2]
test eax, eax
je 0x1000b6b2
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf34]
call fcn.10016faa
push 3
lea ecx, [ebp - 0xbb8]
call fcn.10016f28
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x117c], 0xffffffff
mov dword [ebp - 0x250], 5
mov dword [ebp - 0x1184], 0x7d393e75
mov dword [ebp - 0xc30], 0x2afa0177
mov dword [ebp - 0x218], 0x5acee617
mov dword [ebp - 0x18c], 0x9e885dc1
mov dword [ebp - 0x394], 0
push 2
lea ecx, [ebp - 0xb78]
call fcn.10016f28
mov byte [ebp - 4], 0x14
push 3
lea ecx, [ebp - 0xba0]
call fcn.10016f28
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x624], 0xffffffff
mov dword [ebp - 0xe48], 0x69fbc0ae
mov dword [ebp - 0xc38], 0xbfe21dab
mov dword [ebp - 0x20], 0
jmp 0x1000b76b
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1000b787
push dword [ebp - 0x20]
lea ecx, [ebp - 0xbb8]
call fcn.10016fc6
mov dword [eax], 0x87d0fa51
jmp 0x1000b764
mov dword [ebp - 0x20], 0
jmp 0x1000b797
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 2
jge 0x1000b7b3
push dword [ebp - 0x20]
lea ecx, [ebp - 0xb78]
call fcn.10016fc6
mov dword [eax], 0xf2d6273
jmp 0x1000b790
mov dword [ebp - 0x20], 0
jmp 0x1000b7c3
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1000b7df
push dword [ebp - 0x20]
lea ecx, [ebp - 0xba0]
call fcn.10016fc6
mov dword [eax], 0xc6a37d7c
jmp 0x1000b7bc
push 2
lea ecx, [ebp - 0xbb8]
call fcn.10016fc6
push 1
lea ecx, [ebp - 0xbb8]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000b8a1
push 0
lea ecx, [ebp - 0xba0]
call fcn.10016fc6
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x38c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38c]
cmp dword [eax], 0x9229a275
jae 0x1000b840
mov dword [ebp - 0x8a4], 1
jmp 0x1000b847
and dword [ebp - 0x8a4], 0
mov dword [ebp - 0x18c], 9
cmp dword [ebp - 0x18c], 0x1718
jl 0x1000b869
mov dword [ebp - 0xd64], 1
jmp 0x1000b870
and dword [ebp - 0xd64], 0
push 0
lea ecx, [ebp - 0xb78]
call fcn.10016fc6
push 1
lea ecx, [ebp - 0xb78]
call fcn.10016fc6
imul eax, dword [eax], 0xfa3f
cmp dword [ebp - 0x8a4], eax
jne 0x1000b8a1
and dword [ebp - 0x5f4], 0
jmp 0x1000b8ab
mov dword [ebp - 0x5f4], 1
mov eax, dword [ebp - 0x624]
cmp dword [ebp - 0x5f4], eax
jle 0x1000b8c5
mov dword [ebp - 0xaac], 1
jmp 0x1000b8cc
and dword [ebp - 0xaac], 0
cmp dword [ebp - 0xaac], 0
jae 0x1000b8e1
mov dword [ebp - 0x5fc], 1
jmp 0x1000b8e8
and dword [ebp - 0x5fc], 0
push 2
lea ecx, [ebp - 0xbb8]
call fcn.10016fc6
mov eax, dword [eax]
cmp eax, dword [ebp - 0x5fc]
jg 0x1000b90b
mov dword [ebp - 0x8ac], 1
jmp 0x1000b912
and dword [ebp - 0x8ac], 0
mov eax, dword [ebp - 0xc30]
add eax, dword [ebp - 0x8ac]
cmp eax, dword [ebp - 0x250]
jg 0x1000b932
mov dword [ebp - 0x604], 1
jmp 0x1000b939
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x394]
cmp dword [ebp - 0x604], eax
jl 0x1000b953
mov dword [ebp - 0xa04], 1
jmp 0x1000b95a
and dword [ebp - 0xa04], 0
mov eax, dword [ebp - 0xa04]
add eax, 6
je 0x1000b97a
mov eax, 0x8fc7
test eax, eax
je 0x1000b97a
mov dword [ebp - 0x3e0], 1
jmp 0x1000b981
and dword [ebp - 0x3e0], 0
push 1
lea ecx, [ebp - 0xb78]
call fcn.10016fc6
mov ecx, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x250]
cmp dword [ebp - 0x3e0], eax
jge 0x1000b9b0
mov dword [ebp - 0x60c], 1
jmp 0x1000b9b7
and dword [ebp - 0x60c], 0
push 2
lea ecx, [ebp - 0xbb8]
call fcn.10016fc6
mov ecx, dword [ebp - 0x60c]
cmp ecx, dword [eax]
jge 0x1000b9da
mov dword [ebp - 0x8b4], 1
jmp 0x1000b9e1
and dword [ebp - 0x8b4], 0
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x218], eax
push 1
lea ecx, [ebp - 0xba0]
call fcn.10016fc6
cmp dword [eax], 0
jne 0x1000ba44
push 1
lea ecx, [ebp - 0xb78]
call fcn.10016fc6
cmp dword [eax], 0
je 0x1000ba26
cmp dword [ebp - 0x218], 0
je 0x1000ba26
mov dword [ebp - 0x614], 1
jmp 0x1000ba2d
and dword [ebp - 0x614], 0
imul eax, dword [ebp - 0x614], 0x9f41
test eax, eax
jne 0x1000ba44
and dword [ebp - 0xb0c], 0
jmp 0x1000ba4e
mov dword [ebp - 0xb0c], 1
push 2
lea ecx, [ebp - 0xba0]
call fcn.10016fc6
mov ecx, dword [ebp - 0xb0c]
cmp ecx, dword [eax]
jg 0x1000ba71
mov dword [ebp - 0x61c], 1
jmp 0x1000ba78
and dword [ebp - 0x61c], 0
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x394], eax
mov eax, dword [ebp - 0x394]
mov dword [ebp - 0x118c], eax
mov eax, dword [ebp - 0xe48]
mov dword [ebp - 0x1194], eax
cmp dword [ebp - 0x218], 0x501494d8
jle 0x1000bab4
mov dword [ebp - 0x8bc], 1
jmp 0x1000babb
and dword [ebp - 0x8bc], 0
mov eax, dword [ebp - 0x8bc]
add eax, 0xc
je 0x1000badb