Function at 0x10023384
Capabilities:
Get common file path
Get disk size
Get thread local storage value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10089923
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x630
push esi
mov dword [ebp - 0x1c], 0xfffffff6
mov dword [ebp - 0x174], 0xffffffff
cmp dword [ebp - 0x1c], 0
je 0x1002351d
push 1
lea ecx, [ebp - 0x484]
call fcn.10015911
and dword [ebp - 4], 0
mov dword [ebp - 0xb0], 0
jmp 0x100233e8
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 1
jge 0x1002340a
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x484]
call fcn.1001597e
mov dword [eax], 0xfb0b0297
jmp 0x100233db
mov dword [ebp - 0x1c], 0
jmp 0x1002341a
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jg 0x10023509
mov dword [ebp - 0xec], 0x39ed080c
mov dword [ebp - 0xec], 0
jmp 0x10023447
mov eax, dword [ebp - 0xec]
inc eax
mov dword [ebp - 0xec], eax
cmp dword [ebp - 0xec], 0
jg 0x100234e2
push 1
lea ecx, [ebp - 0x548]
call fcn.10015911
mov byte [ebp - 4], 1
mov dword [ebp - 0xf8], 0
jmp 0x1002347e
mov eax, dword [ebp - 0xf8]
inc eax
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0xf8], 1
jge 0x100234a0
push dword [ebp - 0xf8]
lea ecx, [ebp - 0x548]
call fcn.1001597e
mov dword [eax], 0x5653d423
jmp 0x10023471
mov byte [ebp - 0x59], 0
movzx eax, byte [ebp - 0x59]
test eax, eax
je 0x100234bb
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EndPaint]
push 0
lea ecx, [ebp - 0x548]
call fcn.1001597e
mov dword [eax], 0xfffffffc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x548]
call fcn.10015979
jmp 0x1002343a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x484]
call fcn.1001597e
mov esi, eax
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x484]
call fcn.1001597e
mov ecx, dword [esi]
mov dword [eax], ecx
jmp 0x10023413
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x484]
call fcn.10015979
jmp 0x10023804
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x160], 0xae215169
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x90], 4
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x558], 0x33490ce6
mov dword [ebp - 0x554], 0x33490ce6
mov dword [ebp - 0x550], 0x33490ce6
mov dword [ebp - 0x54c], 0x33490ce6
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x5c0], eax
mov dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x10c], eax
je 0x100235ae
mov dword [ebp - 0x1b0], 1
jmp 0x100235b5
and dword [ebp - 0x1b0], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x1b0], eax
jle 0x100235cc
mov dword [ebp - 0x320], 1
jmp 0x100235d3
and dword [ebp - 0x320], 0
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x320]
mov dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x158], eax
jl 0x100235fc
mov dword [ebp - 0x32c], 1
jmp 0x10023603
and dword [ebp - 0x32c], 0
mov eax, dword [ebp - 0x98]
cmp dword [ebp - 0x32c], eax
jle 0x1002361d
mov dword [ebp - 0x394], 1
jmp 0x10023624
and dword [ebp - 0x394], 0
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x608], eax
push 0xfffffffffffffffe
pop eax
cmp eax, 0x4e785c2f
jae 0x10023646
mov dword [ebp - 0x334], 1
jmp 0x1002364d
and dword [ebp - 0x334], 0
mov dword [ebp - 0x160], 0x48aab564
mov eax, dword [ebp - 0x160]
cmp eax, dword [ebp - 0x334]
jne 0x10023671
mov dword [ebp - 0x168], 1
jmp 0x10023678
and dword [ebp - 0x168], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x168]
jne 0x10023692
mov dword [ebp - 0x33c], 1
jmp 0x10023699
and dword [ebp - 0x33c], 0
cmp dword [ebp - 0x33c], 0xf75d
je 0x100236b1
mov dword [ebp - 0x344], 1
jmp 0x100236b8
and dword [ebp - 0x344], 0
mov eax, dword [ebp - 0x344]
add eax, 0x54953c65
sub eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x174]
jg 0x100236da
mov dword [ebp - 0x26c], 1
jmp 0x100236e1
and dword [ebp - 0x26c], 0
cmp dword [ebp - 0x26c], 0x5063f373
je 0x100236f9
mov dword [ebp - 0x17c], 1
jmp 0x10023700
and dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x17c]
jne 0x1002371a
mov dword [ebp - 0x2f0], 1
jmp 0x10023721
and dword [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x90]
add eax, dword [ebp - 0x2f0]
mov dword [ebp - 0x184], eax
mov eax, dword [ebp - 0x184]
add eax, dword [ebp - 0x98]
jne 0x10023748
cmp dword [ebp - 0x10c], 0
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x98], eax
jge 0x1002375f
mov dword [ebp - 0x3bc], 1
jmp 0x10023766
and dword [ebp - 0x3bc], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x618], eax
push 0xfffffffffffffffb
pop eax
cmp eax, 0xfffa
jne 0x10023791
mov dword [ebp - 0x274], 1
jmp 0x10023798
and dword [ebp - 0x274], 0
imul eax, dword [ebp - 0x274], 0xffff
cmp eax, dword [ebp - 0x90]
jne 0x100237b6
mov dword [ebp - 0x18c], 1
jmp 0x100237bd
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18c]
jl 0x100237d4
mov dword [ebp - 0x2ec], 1
jmp 0x100237db
and dword [ebp - 0x2ec], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x2ec]
mov dword [ebp + eax - 0x558], ecx
mov byte [ebp - 0x4d], 0
movzx eax, byte [ebp - 0x4d]
test eax, eax
je 0x10023804
push 0x8b9
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov byte [ebp - 0x51], 0
movzx eax, byte [ebp - 0x51]
test eax, eax
je 0x10023826
push 0
push 0
push 0xfe5
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
movzx eax, byte [ebp + 0x14]
test eax, eax
je 0x10025dce
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x3fc], eax
push 2
lea ecx, [ebp - 0x424]
call fcn.10015911
mov dword [ebp - 4], 2
mov dword [ebp - 0xa0], 0xfffffffa
mov dword [ebp - 0xc0], 0
jmp 0x10023872
mov eax, dword [ebp - 0xc0]
inc eax
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 2
jge 0x10023894
push dword [ebp - 0xc0]
lea ecx, [ebp - 0x424]
call fcn.1001597e
mov dword [eax], 0xe0a8eac8
jmp 0x10023865
push 0
lea ecx, [ebp - 0x424]
call fcn.1001597e
and dword [eax], 0
jmp 0x100238ca
push 0
lea ecx, [ebp - 0x424]
call fcn.1001597e
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x194]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x424]
call fcn.1001597e
cmp dword [eax], 0xfffffff2
je 0x100238f4
mov dword [ebp - 0x3f4], 0x942a1e94
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0xa0], eax
jmp 0x100238a6
mov dword [ebp - 0xa0], 0x13
jmp 0x1002390d
mov eax, dword [ebp - 0xa0]
dec eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0xfffffffe
jge 0x1002392c
mov byte [ebp - 0x4f], 0
movzx eax, byte [ebp - 0x4f]
test eax, eax
je 0x1002392a
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
jmp 0x10023900
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x424]
call fcn.10015979
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0x39c], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x164], eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe0], 0
jmp 0x10023970
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 0x1a
jge 0x100239a2
mov dword [ebp - 0x80], 0xdb22124f
mov dword [ebp - 0x80], 0
jmp 0x10023990
mov eax, dword [ebp - 0x80]
dec eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0xffffffea
jl 0x100239a0
cmp dword [ebp - 0x80], 0
je 0x1002399e
jmp 0x100239a0
jmp 0x10023989
jmp 0x10023963
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x8c], 0
push 1
lea ecx, [ebp - 0x50c]
call fcn.10015911
mov dword [ebp - 4], 3
mov dword [ebp - 0xc8], 0
jmp 0x100239e2
mov eax, dword [ebp - 0xc8]
inc eax
mov dword [ebp - 0xc8], eax
cmp dword [ebp - 0xc8], 1
jge 0x10023a04
push dword [ebp - 0xc8]
lea ecx, [ebp - 0x50c]
call fcn.1001597e
mov dword [eax], 0x7a876e6b
jmp 0x100239d5
mov dword [ebp - 0x8c], 0xf
jmp 0x10023a1d
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x11
jl 0x10023a78
mov dword [ebp - 0x84], 0xffffffff
mov dword [ebp - 0x84], 0
jmp 0x10023a49
mov eax, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 1
jge 0x10023a6b
push dword [ebp - 0x84]
lea ecx, [ebp - 0x50c]
call fcn.1001597e
mov dword [eax], 4
jmp 0x10023a3c
cmp dword [ebp - 0x8c], 0
je 0x10023a76
jmp 0x10023a10
jmp 0x10023a10
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50c]
call fcn.10015979
mov eax, dword [ebp - 0x3fc]
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0xd0], 0x17571177
mov dword [ebp - 0xf0], 0
jmp 0x10023ab9
mov eax, dword [ebp - 0xf0]
inc eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 1
jge 0x10023ad5
mov eax, dword [ebp - 0xf0]
mov dword [ebp + eax*4 - 0x27c], 0x1dbe
jmp 0x10023aac
mov dword [ebp - 0xd0], 0xfffffff2
jmp 0x10023aee
mov eax, dword [ebp - 0xd0]
dec eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 0xfffffff0
jl 0x10023bd7
mov dword [ebp - 0x36c], 0xfffffff7
mov dword [ebp - 0x368], 0xfffffff7
mov dword [ebp - 0x364], 0xfffffff7
mov dword [ebp - 0x360], 0xfffffff7
mov dword [ebp - 0x404], 0xfffffff8
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x36c], 0
jmp 0x10023b58
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x36c]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x36c], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x36c], 0
jl 0x10023bd2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x36c]
cmp dword [ebp + eax*4 - 0x27c], 0x63a88e00
jge 0x10023b8c
mov dword [ebp - 0x19c], 1
jmp 0x10023b93
and dword [ebp - 0x19c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x36c]
mov eax, dword [ebp + eax*4 - 0x27c]
cmp eax, dword [ebp - 0x19c]
jge 0x10023bba
mov dword [ebp - 0x31c], 1
jmp 0x10023bc1
and dword [ebp - 0x31c], 0
mov eax, dword [ebp - 0x31c]
mov dword [ebp - 0x404], eax
jmp 0x10023b3f
jmp 0x10023ae1
mov dword [ebp - 0x134], 0xb0f73838
mov dword [ebp - 0x114], 0
mov dword [ebp - 0x2f4], 0x2a2b
mov dword [ebp - 0x94], 0xfc3938dd
mov dword [ebp - 0xe8], 0
jmp 0x10023c18
mov eax, dword [ebp - 0xe8]
inc eax
mov dword [ebp - 0xe8], eax
cmp dword [ebp - 0xe8], 3
jge 0x10023c34
mov eax, dword [ebp - 0xe8]
mov dword [ebp + eax*4 - 0x434], 0x70c3099c
jmp 0x10023c0b
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x2f4]
mov dword [ebp - 0x5b4], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x5bc], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x610], eax
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0x114], eax
je 0x10023ca3
mov dword [ebp - 0x1a4], 1
jmp 0x10023caa
and dword [ebp - 0x1a4], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
cmp dword [ebp - 0x1a4], eax
je 0x10023cca
mov dword [ebp - 0x284], 1
jmp 0x10023cd1
and dword [ebp - 0x284], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
cmp dword [ebp - 0x284], eax
jne 0x10023cf1
mov dword [ebp - 0x1ac], 1
jmp 0x10023cf8
and dword [ebp - 0x1ac], 0
cmp dword [ebp - 0x1ac], 0x1c1d99ea
je 0x10023d10
mov dword [ebp - 0x40c], 1
jmp 0x10023d17
and dword [ebp - 0x40c], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x434]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x134]
sub eax, dword [ebp - 0x2f4]
cmp eax, dword [ebp - 0x134]
jne 0x10023d49
mov dword [ebp - 0x1b4], 1
jmp 0x10023d50
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 0x1b4], eax
jle 0x10023d6a
mov dword [ebp - 0x28c], 1
jmp 0x10023d71
and dword [ebp - 0x28c], 0
mov eax, dword [ebp - 0x94]
cmp eax, dword [ebp - 0x28c]
jge 0x10023d8b
mov dword [ebp - 0x1bc], 1
jmp 0x10023d92
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0xd8], 1
push 2
lea ecx, [ebp - 0x454]
call fcn.10015911
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x4a8]
call fcn.10015911
mov byte [ebp - 4], 5
mov dword [ebp - 0x1cc], 0x4ed3
mov dword [ebp - 0x570], 0xfffffffc
mov dword [ebp - 0x578], 0x3fa9dfee
mov dword [ebp - 0x580], 0xb9459240
mov dword [ebp - 0x588], 7
mov dword [ebp - 0x590], 0x3b017290
mov dword [ebp - 0x598], 6
mov dword [ebp - 0x5a4], 0xbab0c3e5
mov dword [ebp - 0x5a8], 0x840cc74b
mov dword [ebp - 0x5b0], 1
mov dword [ebp - 0x1e4], 0xe8236511
mov dword [ebp - 0x2c], 0
jmp 0x10023e4b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10023e67
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x454]
call fcn.1001597e
mov dword [eax], 9
jmp 0x10023e44
mov dword [ebp - 0x2c], 0
jmp 0x10023e77
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x10023e93
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x4a8]
call fcn.1001597e
mov dword [eax], 0xecbe92e3
jmp 0x10023e70
mov dword [ebp - 0xd8], 0x16
jmp 0x10023eac
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0x16
jge 0x10024181
mov dword [ebp - 0xb4], 0
jmp 0x10023ed2
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x10023eee
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x444], 0xf251d69f
jmp 0x10023ec5
push 4
pop eax
shl eax, 1
mov dword [ebp + eax - 0x444], 0x11
jmp 0x10023f19
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x444]
dec eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x444], eax
push 4
pop eax
shl eax, 1
cmp dword [ebp + eax - 0x444], 0xffffffe5
jg 0x10024166
mov dword [ebp - 0x414], 0x2ae45661
mov dword [ebp - 0xbc], 0
jmp 0x10023f4f
mov eax, dword [ebp - 0xbc]
inc eax
mov dword [ebp - 0xbc], eax
cmp dword [ebp - 0xbc], 2
jge 0x10023f6b
mov eax, dword [ebp - 0xbc]
mov dword [ebp + eax*4 - 0x350], 0x3629aa81
jmp 0x10023f42
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x350], 0
jmp 0x10023f99
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
dec eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x350], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x350], 0xfffffff0
jle 0x10024161
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x3c8], 0
mov dword [ebp - 0x38], 1
jmp 0x10023fce
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0
jl 0x1002415c
push dword [ebp - 0x38]
lea ecx, [ebp - 0x454]
call fcn.1001597e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x350]
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x55c], eax
cmp dword [ebp - 0x38], 0xf1edd1ed
jbe 0x1002401a
mov dword [ebp - 0x338], 1
jmp 0x10024021
and dword [ebp - 0x338], 0
push 0
lea ecx, [ebp - 0x4a8]
call fcn.1001597e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x338]
jg 0x1002404a
mov eax, 0xb7be2d3d
test eax, eax
jne 0x1002404a
and dword [ebp - 0x1c4], 0
jmp 0x10024054
mov dword [ebp - 0x1c4], 1
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x1c4], eax
je 0x1002406b
mov dword [ebp - 0x294], 1
jmp 0x10024072
and dword [ebp - 0x294], 0
mov eax, dword [ebp - 0x294]
sub eax, 0xffff
cmp eax, dword [ebp - 0x1cc]
jl 0x10024091
mov dword [ebp - 0x2fc], 1
jmp 0x10024098
and dword [ebp - 0x2fc], 0
push 0
lea ecx, [ebp - 0x4a8]
call fcn.1001597e
mov ecx, dword [ebp - 0x2fc]
cmp ecx, dword [eax]
jne 0x100240c4
cmp dword [ebp - 0x414], 0
je 0x100240c4
mov dword [ebp - 0x29c], 1
jmp 0x100240cb
and dword [ebp - 0x29c], 0
push dword [ebp - 0x38]
lea ecx, [ebp - 0x454]
call fcn.1001597e
mov dword [ebp - 0x1d4], eax
push dword [ebp - 0x38]
lea ecx, [ebp - 0x454]
call fcn.1001597e
mov ecx, dword [ebp - 0x1d4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0x1d4]
mov eax, dword [eax]
neg eax
mov ecx, dword [ebp - 0x29c]
add ecx, 0x5890
cmp eax, ecx
jge 0x1002411d
mov dword [ebp - 0x1dc], 1
jmp 0x10024124
and dword [ebp - 0x1dc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x444]
cmp dword [ebp - 0x1dc], eax
jge 0x10024144
mov dword [ebp - 0x328], 1
jmp 0x1002414b
and dword [ebp - 0x328], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x3c8], eax
jmp 0x10023fc7
jmp 0x10023f7e
jmp 0x10023f00
mov byte [ebp - 0x72], 0
movzx eax, byte [ebp - 0x72]
test eax, eax
je 0x1002417c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
jmp 0x10023e9f
mov eax, dword [ebp - 0x1e4]
dec eax
mov dword [ebp - 0x1e4], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x4a8]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x454]
call fcn.10015979
mov dword [ebp - 0x30], 0
jmp 0x100241bc
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 2
jge 0x100241d2
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x4bc], 0xfffffff9
jmp 0x100241b5
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0x3a8], 8
mov dword [ebp - 0x11c], 8
mov dword [ebp - 0x5c8], 0xffffffff
mov dword [ebp - 0x2a4], 0x9ac54c97
push 2
lea ecx, [ebp - 0x524]
call fcn.10015911
mov dword [ebp - 4], 6
mov dword [ebp - 0xc4], 1
mov dword [ebp - 0x3c4], 9
mov dword [ebp - 0x12c], 0x75df
mov dword [ebp - 0x44], 0
jmp 0x10024246
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10024262
push dword [ebp - 0x44]
lea ecx, [ebp - 0x524]
call fcn.1001597e
mov dword [eax], 2
jmp 0x1002423f
mov dword [ebp - 0x44], 0
jmp 0x10024272
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 2
jge 0x10024288
mov eax, dword [ebp - 0x44]
mov dword [ebp + eax*4 - 0x5e0], 0xc33
jmp 0x1002426b
cmp dword [ebp - 0xa8], 0
je 0x100242a6
cmp dword [ebp - 0xa8], 0
je 0x100242a6
mov dword [ebp - 0x214], 1
jmp 0x100242ad
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x12c]
mov ecx, dword [ebp - 0x12c]
dec ecx
mov dword [ebp - 0x12c], ecx
test eax, eax
je 0x100242d9
cmp dword [ebp - 0xa8], 0
je 0x100242d9
mov dword [ebp - 0x304], 1
jmp 0x100242e0
and dword [ebp - 0x304], 0
mov dword [ebp - 0x2a4], 0x5063f373
mov eax, dword [ebp - 0x2a4]
cmp dword [ebp - 0x11c], eax
jle 0x10024304
mov dword [ebp - 0x1ec], 1
jmp 0x1002430b
and dword [ebp - 0x1ec], 0
cmp dword [ebp - 0x1ec], 0xffffffff
je 0x10024326
cmp dword [ebp - 0x11c], 0
jne 0x10024326
and dword [ebp - 0x1f4], 0
jmp 0x10024330
mov dword [ebp - 0x1f4], 1
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x1f4]
jl 0x1002434a
mov dword [ebp - 0x2ac], 1
jmp 0x10024351
and dword [ebp - 0x2ac], 0
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x3b4], eax
mov eax, dword [ebp - 0x2ac]
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x3b4]
cmp eax, dword [ebp - 0x3a0]
jl 0x10024390
mov dword [ebp - 0x1fc], 1
jmp 0x10024397
and dword [ebp - 0x1fc], 0
cmp dword [ebp - 0x1fc], 0xfa36fe54
je 0x100243af
mov dword [ebp - 0x348], 1
jmp 0x100243b6
and dword [ebp - 0x348], 0
push 0
lea ecx, [ebp - 0x524]
call fcn.1001597e
mov ecx, dword [ebp - 0x348]
cmp ecx, dword [eax]
je 0x100243df
cmp dword [ebp - 0xc4], 0
jne 0x100243df
and dword [ebp - 0x204], 0
jmp 0x100243e9
mov dword [ebp - 0x204], 1
cmp dword [ebp - 0x204], 0xffff
ja 0x10024401
mov dword [ebp - 0x2b4], 1
jmp 0x10024408
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x3c4]
imul eax, dword [ebp - 0x2b4]
test eax, eax
jne 0x1002442b
cmp dword [ebp - 0xa8], 0
jne 0x1002442b
and dword [ebp - 0x20c], 0
jmp 0x10024435
mov dword [ebp - 0x20c], 1
cmp dword [ebp - 0x20c], 0xffffffff
jg 0x1002444a
mov dword [ebp - 0x30c], 1
jmp 0x10024451
and dword [ebp - 0x30c], 0
mov eax, dword [ebp - 0x3a8]
cmp dword [ebp - 0x30c], eax
jg 0x1002446b
mov dword [ebp - 0x2bc], 1
jmp 0x10024472
and dword [ebp - 0x2bc], 0
mov eax, dword [ebp - 0x214]
cmp eax, dword [ebp - 0x2bc]
jge 0x1002448c
mov dword [ebp - 0x21c], 1
jmp 0x10024493
and dword [ebp - 0x21c], 0
cmp dword [ebp - 0x21c], 0
je 0x100244a8
mov dword [ebp - 0x330], 1
jmp 0x100244af
and dword [ebp - 0x330], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x5e0]
add eax, dword [ebp - 0x330]
mov dword [ebp - 0x11c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x524]
call fcn.10015979
mov dword [ebp - 0x30], 0
jmp 0x100244e7
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x100244fa
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x7c], 0x490c4d8e
jmp 0x100244e0
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7c], 1
jmp 0x1002451f
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x7c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x7c], 0
jl 0x10024df0
push 3
lea ecx, [ebp - 0x464]
call fcn.10015911
mov dword [ebp - 4], 7
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x78], 1
push 3
lea ecx, [ebp - 0x35c]
call fcn.10015911
mov byte [ebp - 4], 8
mov dword [ebp - 0x3cc], 1
mov dword [ebp - 0xcc], 0
jmp 0x10024586
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x100245a8
push dword [ebp - 0xcc]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
mov dword [eax], 1
jmp 0x10024579
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x78], 0
jmp 0x100245be
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 2
jg 0x100246fc
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x10], 0
jmp 0x100245e2
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x100245f7
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
jmp 0x100245db
mov dword [ebp - 0x10], 0
jmp 0x10024607
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jg 0x100246f7
push dword [ebp - 0x10]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
cmp dword [eax], 0
jge 0x10024630
mov dword [ebp - 0x224], 1
jmp 0x10024637
and dword [ebp - 0x224], 0
cmp dword [ebp - 0x224], 0xffff
ja 0x1002464f
mov dword [ebp - 0x2c4], 1
jmp 0x10024656
and dword [ebp - 0x2c4], 0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
mov ecx, dword [ebp - 0x2c4]
imul ecx, dword [eax]
test ecx, ecx
je 0x100246df
imul eax, dword [ebp - 0x13c], 7
test eax, eax
jne 0x1002469e
cmp dword [ebp - 0x78], 0
jne 0x1002469e
push dword [ebp - 0x10]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
cmp dword [eax], 0
jne 0x1002469e
and dword [ebp - 0x22c], 0
jmp 0x100246a8
mov dword [ebp - 0x22c], 1
push dword [ebp - 0x10]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
mov ecx, dword [ebp - 0x22c]
cmp ecx, dword [eax]
jl 0x100246df
push dword [ebp - 0x10]
lea ecx, [ebp - 0x35c]
call fcn.1001597e
cmp dword [eax], 0
je 0x100246df
mov dword [ebp - 0x314], 1
jmp 0x100246e6
and dword [ebp - 0x314], 0
mov eax, dword [ebp - 0x314]
mov dword [ebp - 0x3cc], eax
jmp 0x10024600
jmp 0x100245b7
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x35c]
call fcn.10015979
push 0
push 0x1042
lea eax, [ebp - 0x5d0]
push eax
lea eax, [ebp - 0x464]
push eax
push 0x5ef1
call fcn.1002d6ec
add esp, 0x14
push 2
lea ecx, [ebp - 0x464]
call fcn.1001597e
mov dword [eax], 1
jmp 0x10024766
push 2
lea ecx, [ebp - 0x464]
call fcn.1001597e
mov dword [ebp - 0x234], eax
mov eax, dword [ebp - 0x234]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x234]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x464]
call fcn.1001597e
cmp dword [eax], 0
jl 0x10024ddc
mov dword [ebp - 0x9c], 0xd513c61c
push 4
lea ecx, [ebp - 0x384]
call fcn.10015911
mov byte [ebp - 4], 9
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0x14], 0
jmp 0x100247b1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x100247c4
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0xe3556834
jmp 0x100247aa
mov dword [ebp - 0x14], 0
jmp 0x100247d4
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100247ea
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x14c], 0x3606de71
jmp 0x100247cd
mov dword [ebp - 0x14], 0
jmp 0x100247fa
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x10024816
push dword [ebp - 0x14]
lea ecx, [ebp - 0x384]
call fcn.1001597e
mov dword [eax], 0xd66a0756
jmp 0x100247f3
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0x14c], 0
jmp 0x10024844
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
inc eax
push 4
pop ecx
shl ecx, 0
mov dword [ebp + ecx - 0x14c], eax
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x14c], 0
jg 0x1002496c
mov dword [ebp - 0x60], 0xfffffff7
mov dword [ebp - 0xd4], 0
jmp 0x10024878
mov eax, dword [ebp - 0xd4]
inc eax
mov dword [ebp - 0xd4], eax
cmp dword [ebp - 0xd4], 2
jge 0x10024894
mov eax, dword [ebp - 0xd4]
mov dword [ebp + eax*4 - 0x5a0], 0x693009ce
jmp 0x1002486b
mov dword [ebp - 0x60], 0
jmp 0x100248a4
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0
jg 0x10024967
mov eax, dword [ebp - 0x60]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x2cc]
mov dword [ebp + eax*4 - 0x4c], ecx
push 3
lea ecx, [ebp - 0x384]
call fcn.1001597e
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x104]
mov dword [ecx], eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x2cc]
imul ecx, dword [eax]
test ecx, ecx
je 0x10024915
mov byte [ebp - 0x53], 0
movzx eax, byte [ebp - 0x53]
test eax, eax
je 0x10024913
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1002494e
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp - 0x9c], eax
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
push 4
pop ecx
shl ecx, 0
mov ecx, dword [ebp + ecx - 0x14c]
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp + ecx*4 - 0x4c], eax
mov eax, dword [ebp - 0x60]
push 4
pop ecx
shl ecx, 0
mov eax, dword [ebp + eax*4 - 0x4c]
mov dword [ebp + ecx - 0x5a0], eax
jmp 0x1002489d
jmp 0x10024829
push 2
lea ecx, [ebp - 0x384]
call fcn.1001597e
cmp dword [eax], 0
jne 0x10024994
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x4c], 0
jne 0x10024994
and dword [ebp - 0x23c], 0
jmp 0x1002499e
mov dword [ebp - 0x23c], 1
imul eax, dword [ebp - 0x23c], 0xfffffffe
cmp dword [ebp - 0xa4], eax
jne 0x100249b9
mov dword [ebp - 0x340], 1
jmp 0x100249c0
and dword [ebp - 0x340], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
add eax, dword [ebp - 0x340]
cmp eax, dword [ebp - 0xa4]
jg 0x100249e7
mov dword [ebp - 0x244], 1
jmp 0x100249ee
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x244], eax
jg 0x10024a08
mov dword [ebp - 0x2d4], 1
jmp 0x10024a0f
and dword [ebp - 0x2d4], 0
mov eax, dword [ebp - 0x9c]
cmp dword [ebp - 0x2d4], eax
jg 0x10024a29
mov dword [ebp - 0x24c], 1
jmp 0x10024a30
and dword [ebp - 0x24c], 0
mov eax, dword [ebp - 0x24c]
mov dword [ebp - 0x9c], eax
mov esi, dword [ebp - 0x9c]
push 3
lea ecx, [ebp - 0x384]
call fcn.1001597e
cmp esi, dword [eax]
jg 0x10024a5f
mov dword [ebp - 0x108], 1
jmp 0x10024a66
and dword [ebp - 0x108], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x108]
mov dword [ebp + eax - 0x4c], ecx
mov eax, dword [ebp - 0x108]
sub eax, 0x1225a9a7
jne 0x10024a8f
mov dword [ebp - 0x3b0], 1
jmp 0x10024a96
and dword [ebp - 0x3b0], 0
cmp dword [ebp - 0xa4], 0xf529
jne 0x10024aae
mov dword [ebp - 0x2e4], 1
jmp 0x10024ab5
and dword [ebp - 0x2e4], 0
cmp dword [ebp - 0x2e4], 0x2efe8e60
jne 0x10024acd
mov dword [ebp - 0x254], 1
jmp 0x10024ad4
and dword [ebp - 0x254], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp dword [ebp - 0x254], eax
jg 0x10024af5
mov dword [ebp - 0x2dc], 1
jmp 0x10024afc
and dword [ebp - 0x2dc], 0
mov eax, dword [ebp - 0x2dc]
neg eax
cmp eax, 0xb3d385e1
jae 0x10024b17
mov dword [ebp - 0x25c], 1
jmp 0x10024b1e
and dword [ebp - 0x25c], 0
push 1
lea ecx, [ebp - 0x384]
call fcn.1001597e
mov ecx, dword [ebp - 0x25c]
cmp ecx, dword [eax]
jg 0x10024b41
mov dword [ebp - 0x2e8], 1
jmp 0x10024b48
and dword [ebp - 0x2e8], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x14c]
cmp eax, dword [ebp - 0x2e8]
jg 0x10024b69
mov dword [ebp - 0x264], 1
jmp 0x10024b70
and dword [ebp - 0x264], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x264], eax
jge 0x10024b8a
mov dword [ebp - 0x16c], 1
jmp 0x10024b91
and dword [ebp - 0x16c], 0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0xa4], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x384]
call fcn.10015979
mov dword [ebp - 0x3d4], 0x23498e64
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov eax, dword [ebp + eax*4 - 0x4bc]
mov dword [ebp - 0x170], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x7c]
mov ecx, dword [ebp - 0x170]
mov dword [ebp + eax*4 - 0x4bc], ecx
cmp dword [ebp - 0x170], 0xffffffff
jle 0x10024bf9
mov dword [ebp - 0x178], 1
jmp 0x10024c00
and dword [ebp - 0x178], 0
mov eax, dword [ebp - 0x178]
mov dword [ebp - 0x3d4], eax
mov dword [ebp - 0x5d8], 0
mov dword [ebp - 0x5e4], 0xdada439b
mov dword [ebp - 0x60c], 0xdc4b4e12
mov dword [ebp - 0x614], 0xa624cdb
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0x624], 0x3921ded6
mov dword [ebp - 0x5ac], 0xffffffff
push 3
lea ecx, [ebp - 0x53c]
call fcn.10015911
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xdc], 0
jmp 0x10024c7c
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 3
jge 0x10024c9b
push dword [ebp - 0xdc]
lea ecx, [ebp - 0x53c]
call fcn.1001597e
or dword [eax], 0xffffffff
jmp 0x10024c6f
push 1
lea ecx, [ebp - 0x53c]
call fcn.1001597e
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x180]
mov dword [ecx], eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x53c]
call fcn.10015979
mov byte [ebp - 0x55], 0
push 1
lea ecx, [ebp - 0x490]
call fcn.10015911
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x68], 6
mov dword [ebp - 0x3b8], 0x7b5ca986
mov dword [ebp - 0xe4], 0
jmp 0x10024d0d
mov eax, dword [ebp - 0xe4]
inc eax
mov dword [ebp - 0xe4], eax
cmp dword [ebp - 0xe4], 1
jge 0x10024d2c
push dword [ebp - 0xe4]
lea ecx, [ebp - 0x490]
call fcn.1001597e
or dword [eax], 0xffffffff
jmp 0x10024d00
mov byte [ebp - 0x61], 0
movzx eax, byte [ebp - 0x61]
test eax, eax
je 0x10024d40
push 0
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [ebp - 0x68], 0
jmp 0x10024d50
mov eax, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
jl 0x10024db0
push dword [ebp - 0x68]
lea ecx, [ebp - 0x490]
call fcn.1001597e
mov eax, dword [eax]
neg eax
mov dword [ebp - 0x188], eax
push dword [ebp - 0x68]
lea ecx, [ebp - 0x490]
call fcn.1001597e
mov ecx, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x68]
cmp dword [ebp - 0x188], eax
jne 0x10024d9b
mov dword [ebp - 0x190], 1
jmp 0x10024da2
and dword [ebp - 0x190], 0
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x3b8], eax
jmp 0x10024d49
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x490]
call fcn.10015979
push 0x3b54
push 0
push 0x4ea3
lea eax, [ebp - 0x55]
push eax
call fcn.10027143
add esp, 0x10
jmp 0x10024742
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x464]
call fcn.10015979
jmp 0x1002450a
mov dword [ebp - 0x118], 0xc874
mov dword [ebp - 0x70], 0xfadf6285
mov dword [ebp - 0x564], 5
mov dword [ebp - 0x3c0], 0x4b7c7008
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x468], 1
mov dword [ebp - 0x34], 0x21cd4309
mov dword [ebp - 0x5c4], 0xc18ab9c
mov dword [ebp - 0xac], 0xb28787d6
mov dword [ebp - 0x1a8], 0xa33a4d1b
push 3
lea ecx, [ebp - 0x390]
call fcn.10015911
mov dword [ebp - 4], 0xc
push 3
lea ecx, [ebp - 0x378]
call fcn.10015911
mov byte [ebp - 4], 0xd
push 3
lea ecx, [ebp - 0x49c]
call fcn.10015911
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x210], 8
mov dword [ebp - 0x18], 0
jmp 0x10024e9e
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10024eb7
push dword [ebp - 0x18]
lea ecx, [ebp - 0x390]
call fcn.1001597e
and dword [eax], 0
jmp 0x10024e97
mov dword [ebp - 0x18], 0
jmp 0x10024ec7
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10024ee3
push dword [ebp - 0x18]
lea ecx, [ebp - 0x378]
call fcn.1001597e
mov dword [eax], 0x5a8df044
jmp 0x10024ec0
mov dword [ebp - 0x18], 0
jmp 0x10024ef3
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10024f0f
push dword [ebp - 0x18]
lea ecx, [ebp - 0x49c]
call fcn.1001597e
mov dword [eax], 0xc0ce695e
jmp 0x10024eec
cmp dword [ebp - 0x118], 0
je 0x1002504d
push 0
lea ecx, [ebp - 0x390]
call fcn.1001597e
cmp dword [eax], 0x6ffe
jl 0x10024f3d
mov dword [ebp - 0x3dc], 1
jmp 0x10024f44
and dword [ebp - 0x3dc], 0
push 2
lea ecx, [ebp - 0x49c]
call fcn.1001597e
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x198]
mov dword [ecx], eax
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x56c], eax
push 2
lea ecx, [ebp - 0x49c]
call fcn.1001597e
mov eax, dword [eax]
inc eax
cmp eax, 3
je 0x10024fa4
push 2
lea ecx, [ebp - 0x390]
call fcn.1001597e
cmp dword [eax], 0
jne 0x10024fa4
and dword [ebp - 0x1a0], 0
jmp 0x10024fae
mov dword [ebp - 0x1a0], 1
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x1a8], eax
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x150], eax
push 0
lea ecx, [ebp - 0x390]
call fcn.1001597e
mov ecx, dword [ebp - 0x150]
mov dword [eax], ecx
cmp dword [ebp - 0x150], 0
jne 0x10024ff6
mov eax, 0x33e
test eax, eax
jne 0x10024ff6
and dword [ebp - 0x1b8], 0
jmp 0x10025000
mov dword [ebp - 0x1b8], 1
push 0
lea ecx, [ebp - 0x378]
call fcn.1001597e
mov dword [ebp - 0x110], eax
mov eax, dword [ebp - 0x110]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x110]
mov dword [ecx], eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0x1b8]
lea eax, [ecx + eax - 0x3dcedb1a]
mov ecx, dword [ebp - 0x110]
imul eax, dword [ecx]
test eax, eax
jge 0x1002504d
mov dword [ebp - 0x1c0], 1
jmp 0x10025054
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x1c0], eax
jge 0x1002506b
mov dword [ebp - 0x1c8], 1
jmp 0x10025072
and dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0xac]
imul eax, dword [ebp - 0x1c8]
cmp eax, dword [ebp - 0xac]
jne 0x10025093
mov dword [ebp - 0x1d0], 1
jmp 0x1002509a
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0x1d0], eax
je 0x100250b4
mov dword [ebp - 0x1d8], 1
jmp 0x100250bb
and dword [ebp - 0x1d8], 0
mov eax, dword [ebp - 0x118]
cmp eax, dword [ebp - 0x1d8]
jle 0x100250d5
mov dword [ebp - 0x1e0], 1
jmp 0x100250dc
and dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x210]
cmp dword [ebp - 0x1e0], eax
jne 0x100250f6
mov dword [ebp - 0x1e8], 1
jmp 0x100250fd
and dword [ebp - 0x1e8], 0
cmp dword [ebp - 0x1e8], 1
je 0x10025112
mov dword [ebp - 0x1f0], 1
jmp 0x10025119
and dword [ebp - 0x1f0], 0
mov eax, dword [ebp - 0x118]
cmp dword [ebp - 0x1f0], eax
jge 0x10025133
mov dword [ebp - 0x1f8], 1
jmp 0x1002513a
and dword [ebp - 0x1f8], 0
mov eax, dword [ebp - 0x70]
cmp dword [ebp - 0x1f8], eax
je 0x10025151
mov dword [ebp - 0x200], 1
jmp 0x10025158
and dword [ebp - 0x200], 0
mov eax, dword [ebp - 0x200]
add eax, 0x59f7c1ae
mov dword [ebp - 0x34], eax
je 0x10025177
mov dword [ebp - 0xac], 0
jmp 0x100253f6
mov dword [ebp - 0x20], 1
mov dword [ebp - 0x3ec], 0
mov dword [ebp - 0x3d0], 0xd081fb71
cmp dword [ebp - 0x20], 0
je 0x100252d9
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x5f8], eax
mov eax, 0x8b32
test eax, eax
je 0x100251e1
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jg 0x100251c2
mov dword [ebp - 0x208], 1
jmp 0x100251c9
and dword [ebp - 0x208], 0
cmp dword [ebp - 0x208], 0x60ee42ac
je 0x100251e1
mov dword [ebp - 0x3e4], 1
jmp 0x100251e8
and dword [ebp - 0x3e4], 0
push 2
lea ecx, [ebp - 0x378]
call fcn.1001597e
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x574], eax
mov esi, dword [ebp - 0x20]
push 1
lea ecx, [ebp - 0x390]
call fcn.1001597e
cmp esi, dword [eax]
jl 0x1002521b
cmp dword [ebp - 0x210], 0
je 0x10025230
mov eax, 0x2cbeb03c
test eax, eax
je 0x10025230
mov dword [ebp - 0x218], 1
jmp 0x10025237
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x218]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jne 0x10025258
cmp dword [ebp - 0x20], 0
je 0x10025258
mov dword [ebp - 0x220], 1
jmp 0x1002525f
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x220], eax
jg 0x10025276
mov dword [ebp - 0x228], 1
jmp 0x1002527d
and dword [ebp - 0x228], 0
mov eax, dword [ebp - 0x3ec]
cmp dword [ebp - 0x228], eax
jg 0x10025297
mov dword [ebp - 0x230], 1
jmp 0x1002529e
and dword [ebp - 0x230], 0
mov eax, dword [ebp - 0x418]
cmp dword [ebp - 0x230], eax
je 0x100252b8
mov dword [ebp - 0x238], 1
jmp 0x100252bf
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x3d0]
cmp dword [ebp - 0x238], eax
jne 0x100252d9
mov dword [ebp - 0x240], 1
jmp 0x100252e0
and dword [ebp - 0x240], 0
push 0
lea ecx, [ebp - 0x378]
call fcn.1001597e
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [eax]
jl 0x10025303
mov dword [ebp - 0x248], 1
jmp 0x1002530a
and dword [ebp - 0x248], 0
mov eax, dword [ebp - 0x468]
cmp dword [ebp - 0x248], eax
jl 0x10025342
mov byte [ebp - 0x71], 0
movzx eax, byte [ebp - 0x71]
test eax, eax
je 0x1002533d
push 0x1247
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
jmp 0x100253f6
mov dword [ebp - 0x5cc], 0xd320
mov dword [ebp - 0x34], 0
jmp 0x1002535c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x19
jne 0x10025390
mov dword [ebp - 0x70], 0
jmp 0x10025372
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1002538e
push dword [ebp - 0x70]
lea ecx, [ebp - 0x378]
call fcn.1001597e
mov dword [eax], 0x2d1e5678
jmp 0x1002536b
jmp 0x10025355
mov dword [ebp - 0x20], 0
jmp 0x100253a0
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0xfffffff9
jl 0x100253f6
mov dword [ebp - 0xf4], 0
jmp 0x100253bf
mov eax, dword [ebp - 0xf4]
inc eax
mov dword [ebp - 0xf4], eax
cmp dword [ebp - 0xf4], 3
jge 0x100253db
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x5f4], 0
jmp 0x100253b2
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x5f4]
inc eax
push 4
pop ecx
shl ecx, 1
mov dword [ebp + ecx - 0x5f4], eax
jmp 0x10025399
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x49c]
call fcn.10015979
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x378]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x390]
call fcn.10015979
cmp dword [ebp - 0x138], 0
jle 0x10025dcc
mov dword [ebp - 0x28], 3
mov dword [ebp - 0x278], 0xfffffffe
mov dword [ebp - 0x3e0], 0
mov dword [ebp - 0x270], 0xe283d1f0
mov dword [ebp - 0x120], 0xcc9f
mov dword [ebp - 0x3c], 0
jmp 0x1002546f
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 3
jge 0x10025485
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x518], 9
jmp 0x10025468
mov dword [ebp - 0x3c], 0
jmp 0x10025495
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 2
jge 0x100254ab
mov eax, dword [ebp - 0x3c]
mov dword [ebp + eax*4 - 0x63c], 0xcb2d505b
jmp 0x1002548e
cmp dword [ebp - 0x28], 0
je 0x100254c3
cmp dword [ebp - 0x28], 0
je 0x100254c3
mov dword [ebp - 0x250], 1
jmp 0x100254ca
and dword [ebp - 0x250], 0
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x250]
jne 0x10025506
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x620], eax
mov eax, 0x3735b263
cmp eax, 0x38e85a7
jge 0x100254ff
mov dword [ebp - 0x258], 1
jmp 0x10025506
and dword [ebp - 0x258], 0
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x28]
imul ecx, dword [ebp - 0x28]
sub eax, ecx
cmp eax, 0x6cc9
jg 0x10025528
mov dword [ebp - 0x260], 1
jmp 0x1002552f
and dword [ebp - 0x260], 0
cmp dword [ebp - 0x260], 0xfffffffb
je 0x10025544
mov dword [ebp - 0x268], 1
jmp 0x1002554b
and dword [ebp - 0x268], 0
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x268]
mov dword [ebp + eax - 0x518], ecx
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x518]
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x428], eax
mov eax, dword [ebp - 0x120]
dec eax
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x3d8]
cmp eax, dword [ebp - 0x428]
je 0x100255a4
mov dword [ebp - 0x288], 1
jmp 0x100255ab
and dword [ebp - 0x288], 0
mov dword [ebp - 0x278], 1
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x518]
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0
jne 0x100255e3
cmp dword [ebp - 0x278], 0
jne 0x100255e3
and dword [ebp - 0x280], 0
jmp 0x100255ed
mov dword [ebp - 0x280], 1
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x280], eax
jg 0x10025604
mov dword [ebp - 0x290], 1
jmp 0x1002560b
and dword [ebp - 0x290], 0
mov eax, dword [ebp - 0x288]
add eax, dword [ebp - 0x290]
cmp eax, 0x1dd8e181
jle 0x1002562a
mov dword [ebp - 0x298], 1
jmp 0x10025631
and dword [ebp - 0x298], 0
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x3e0], eax
mov dword [ebp - 0x398], 0xd509
mov dword [ebp - 0x40], 0x6b8f3d42
mov dword [ebp - 0x48], 9
mov dword [ebp - 0x4f4], 0xfffffff6
mov dword [ebp - 0x4f0], 0xfffffff6
mov dword [ebp - 0x4ec], 0xfffffff6
mov dword [ebp - 0x4e8], 0xfffffff6
lea ecx, [ebp - 0x121]
call fcn.10009843
push eax
lea eax, [ebp - 0x4e4]
push eax
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x62c]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x4b4]
call fcn.10015953
mov dword [ebp - 4], 0xf
mov byte [ebp - 0x57], 0
movzx eax, byte [ebp - 0x57]
test eax, eax
je 0x100256d3
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
cmp dword [ebp - 0x40], 0
jne 0x1002574d
cmp dword [ebp - 0x40], 0x6b471dfd
jl 0x100256ee
mov dword [ebp - 0x478], 1
jmp 0x100256f5
and dword [ebp - 0x478], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x584], eax
cmp dword [ebp - 0x40], 0x8e85
jg 0x10025713
mov dword [ebp - 0x2a0], 1
jmp 0x1002571a
and dword [ebp - 0x2a0], 0
mov eax, dword [ebp - 0x2a0]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x48], eax
je 0x10025737
mov dword [ebp - 0x3e8], 1
jmp 0x1002573e
and dword [ebp - 0x3e8], 0
cmp dword [ebp - 0x48], 0
jne 0x1002574d
and dword [ebp - 0x128], 0
jmp 0x10025757
mov dword [ebp - 0x128], 1
push 1
lea ecx, [ebp - 0x4b4]
call fcn.1001597e
mov ecx, dword [ebp - 0x128]
mov dword [eax], ecx
cmp dword [ebp - 0x128], 0x31aa
jle 0x10025784
mov dword [ebp - 0x2a8], 1
jmp 0x1002578b
and dword [ebp - 0x2a8], 0
cmp dword [ebp - 0x2a8], 8
jb 0x100257a0
mov dword [ebp - 0x438], 1
jmp 0x100257a7
and dword [ebp - 0x438], 0
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x5d4], eax
push 1
lea ecx, [ebp - 0x4b4]
call fcn.1001597e
xor eax, eax
inc eax
je 0x100257db
mov byte [ebp - 0x69], 0
movzx eax, byte [ebp - 0x69]
test eax, eax
je 0x100257d6
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
jmp 0x100258ce
mov dword [ebp - 0x3f0], 0x3ca4d9a5
mov dword [ebp - 0x448], 0xfffffffc
mov dword [ebp - 0x40], 0
jmp 0x100257ff
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x33
jne 0x10025897
mov dword [ebp - 0x474], 1
mov dword [ebp - 0x3f8], 0x403132d6
cmp dword [ebp - 0x3f0], 0
je 0x1002583b
cmp dword [ebp - 0x474], 0
je 0x1002583b
mov dword [ebp - 0x2b0], 1
jmp 0x10025842
and dword [ebp - 0x2b0], 0
push 1
lea ecx, [ebp - 0x4b4]
call fcn.1001597e
mov eax, dword [eax]
cmp eax, dword [ebp - 0x2b0]
jle 0x10025865
mov dword [ebp - 0x2b8], 1
jmp 0x1002586c
and dword [ebp - 0x2b8], 0
mov eax, dword [ebp - 0x2b8]
mov dword [ebp - 0x3f8], eax
mov byte [ebp - 0x4e], 0
movzx eax, byte [ebp - 0x4e]
test eax, eax
je 0x10025892
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
jmp 0x100257f8
mov dword [ebp - 0x48], 0
jmp 0x100258a7
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0xfffffffd
jle 0x100258ce
mov byte [ebp - 0x50], 0
movzx eax, byte [ebp - 0x50]
test eax, eax
je 0x100258c1
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
cmp dword [ebp - 0x448], 0
je 0x100258cc
jmp 0x100258a0
jmp 0x100258a0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x4b4]
call fcn.10015979
mov dword [ebp - 0x408], 0xfffffff6
mov dword [ebp - 0x46c], 0x56411d7f
mov dword [ebp - 0x88], 0x2bea
push 2
lea ecx, [ebp - 0x500]
call fcn.10015911
mov dword [ebp - 4], 0x10
mov dword [ebp - 0xfc], 0
jmp 0x10025928
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 2
jge 0x1002594a
push dword [ebp - 0xfc]
lea ecx, [ebp - 0x500]
call fcn.1001597e
mov dword [eax], 0xecb45710
jmp 0x1002591b
mov esi, dword [ebp - 0x88]
push 1
lea ecx, [ebp - 0x500]
call fcn.1001597e
mov dword [eax], esi
mov dword [ebp - 0x88], 0
jmp 0x10025978
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jg 0x1002599c
mov byte [ebp - 0x52], 0
movzx eax, byte [ebp - 0x52]
test eax, eax
je 0x1002599a
push 0x1c0d
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
jmp 0x1002596b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x500]
call fcn.10015979
mov dword [ebp - 0x400], 1
mov dword [ebp - 0x4e0], 1
mov dword [ebp - 0x4dc], 1
mov dword [ebp - 0x4d8], 1
mov dword [ebp - 0x4d4], 1
lea ecx, [ebp - 0xfd]
call fcn.10009843
push eax
lea eax, [ebp - 0x4d0]
push eax
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x634]
call fcn.1001598d
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x604]
call fcn.10015953
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x458], 0xb0d58e7e
mov dword [ebp - 0x410], 0x898d08f4
mov dword [ebp - 0x470], 0x4fe10ef7
push 2
lea ecx, [ebp - 0x530]
call fcn.10015911
mov byte [ebp - 4], 0x12
mov dword [ebp - 0xb8], 0
jmp 0x10025a61
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 2
jge 0x10025a83
push dword [ebp - 0xb8]
lea ecx, [ebp - 0x530]
call fcn.1001597e
mov dword [eax], 0xbd1a6f32
jmp 0x10025a54
push 0x7774
lea eax, [ebp - 0x400]
push eax
lea eax, [ebp - 0x530]
push eax
lea eax, [ebp - 0x46c]
push eax
lea eax, [ebp - 0x408]
push eax
lea eax, [ebp - 0x604]
push eax
push 0x76a1
lea eax, [ebp - 0x458]
push eax
lea eax, [ebp - 0x410]
push eax
lea eax, [ebp - 0x470]
push eax
push 0
push 0x6b0
lea eax, [ebp - 0x398]
push eax
call fcn.10026b0b
add esp, 0x34
mov byte [ebp - 0x54], 0
movzx eax, byte [ebp - 0x54]
test eax, eax
je 0x10025af2
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x530]
call fcn.10015979
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x604]
call fcn.10015979
mov dword [ebp - 0x4cc], 5
mov dword [ebp - 0x4c8], 5
mov dword [ebp - 0x4c4], 5
mov dword [ebp - 0x4c0], 5
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x130], 0x45d811f0
mov dword [ebp - 0x310], 0xdb6084ed
mov dword [ebp - 0x24], 3
jmp 0x10025b63
cmp dword [ebp - 0x24], 0
jl 0x10025b75
jmp 0x10025e00
mov eax, dword [ebp + 8]
mov dword [ebp - 0x3a4], eax
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp - 0x3ac]
movzx eax, byte [eax]
test eax, eax
je 0x10025e00
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret