Function at 0x10009404
Capabilities:
Accept command line arguments
Create pipe
Query environment variable
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008d820
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x132c
call fcn.10089590
push esi
push edi
push 2
lea ecx, [ebp - 0xef4]
call fcn.10019c20
and dword [ebp - 4], 0
push 3
lea ecx, [ebp - 0xd40]
call fcn.10019c20
mov byte [ebp - 4], 1
mov dword [ebp - 0xa4], 0
jmp 0x10009463
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 2
jge 0x10009485
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xef4]
call fcn.10019cac
mov dword [eax], 1
jmp 0x10009456
mov dword [ebp - 0xa4], 0
jmp 0x1000949e
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 3
jge 0x100094c0
push dword [ebp - 0xa4]
lea ecx, [ebp - 0xd40]
call fcn.10019cac
mov dword [eax], 0xfffffffb
jmp 0x10009491
push 2
lea ecx, [ebp - 0xd40]
call fcn.10019cac
and dword [eax], 0
jmp 0x100094f6
push 2
lea ecx, [ebp - 0xd40]
call fcn.10019cac
mov dword [ebp - 0xb90], eax
mov eax, dword [ebp - 0xb90]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb90]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd40]
call fcn.10019cac
cmp dword [eax], 1
jg 0x100095d6
push 1
lea ecx, [ebp - 0xbe8]
call fcn.10019c20
mov byte [ebp - 4], 2
mov dword [ebp - 0x39c], 0
jmp 0x10009536
mov eax, dword [ebp - 0x39c]
inc eax
mov dword [ebp - 0x39c], eax
cmp dword [ebp - 0x39c], 1
jge 0x10009558
push dword [ebp - 0x39c]
lea ecx, [ebp - 0xbe8]
call fcn.10019cac
mov dword [eax], 0x6444696a
jmp 0x10009529
push 0
lea ecx, [ebp - 0xbe8]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000958e
push 0
lea ecx, [ebp - 0xbe8]
call fcn.10019cac
mov dword [ebp - 0xb5c], eax
mov eax, dword [ebp - 0xb5c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb5c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xbe8]
call fcn.10019cac
cmp dword [eax], 2
jge 0x100095c2
push 0
lea ecx, [ebp - 0xbe8]
call fcn.10019cac
push dword [eax]
lea ecx, [ebp - 0xef4]
call fcn.10019cac
mov dword [eax], 0x5cbd9454
jmp 0x1000956a
mov byte [ebp - 4], 1
lea ecx, [ebp - 0xbe8]
call fcn.10019ca7
jmp 0x100094d2
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xd40]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xef4]
call fcn.10019ca7
push 2
lea ecx, [ebp - 0xeb8]
call fcn.10019c20
mov dword [ebp - 4], 3
push 3
lea ecx, [ebp - 0xd50]
call fcn.10019c20
mov byte [ebp - 4], 4
mov dword [ebp - 0xcc], 0
jmp 0x10009632
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 2
jge 0x10009654
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xeb8]
call fcn.10019cac
mov dword [eax], 1
jmp 0x10009625
mov dword [ebp - 0xcc], 0
jmp 0x1000966d
mov eax, dword [ebp - 0xcc]
inc eax
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 3
jge 0x1000968f
push dword [ebp - 0xcc]
lea ecx, [ebp - 0xd50]
call fcn.10019cac
mov dword [eax], 0xfffffffb
jmp 0x10009660
push 2
lea ecx, [ebp - 0xd50]
call fcn.10019cac
and dword [eax], 0
jmp 0x100096c5
push 2
lea ecx, [ebp - 0xd50]
call fcn.10019cac
mov dword [ebp - 0xb64], eax
mov eax, dword [ebp - 0xb64]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb64]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd50]
call fcn.10019cac
cmp dword [eax], 1
jg 0x100097a5
push 1
lea ecx, [ebp - 0xc00]
call fcn.10019c20
mov byte [ebp - 4], 5
mov dword [ebp - 0x380], 0
jmp 0x10009705
mov eax, dword [ebp - 0x380]
inc eax
mov dword [ebp - 0x380], eax
cmp dword [ebp - 0x380], 1
jge 0x10009727
push dword [ebp - 0x380]
lea ecx, [ebp - 0xc00]
call fcn.10019cac
mov dword [eax], 0x6444696a
jmp 0x100096f8
push 0
lea ecx, [ebp - 0xc00]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000975d
push 0
lea ecx, [ebp - 0xc00]
call fcn.10019cac
mov dword [ebp - 0xb6c], eax
mov eax, dword [ebp - 0xb6c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xb6c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xc00]
call fcn.10019cac
cmp dword [eax], 2
jge 0x10009791
push 0
lea ecx, [ebp - 0xc00]
call fcn.10019cac
push dword [eax]
lea ecx, [ebp - 0xeb8]
call fcn.10019cac
mov dword [eax], 0x5cbd9454
jmp 0x10009739
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc00]
call fcn.10019ca7
jmp 0x100096a1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xd50]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xeb8]
call fcn.10019ca7
mov dword [ebp - 0x228], 1
mov dword [ebp - 0xfdc], 0x2006887e
mov dword [ebp - 0xf6c], 0x141e4f1f
mov dword [ebp - 0xf70], 0xfffffff7
mov dword [ebp - 0xf78], 0x3a4df6f9
mov dword [ebp - 0xf80], 0xc92ea21e
mov dword [ebp - 0xf5c], 0x2b96ce02
mov dword [ebp - 0xf64], 1
mov dword [ebp - 0xfa0], 1
mov dword [ebp - 0xfa8], 0x37e0d1b7
mov dword [ebp - 0xfb0], 8
mov dword [ebp - 0xfb8], 6
mov dword [ebp - 0xfc0], 0xfffffffa
mov dword [ebp - 0x1270], 1
mov dword [ebp - 0x126c], 1
mov dword [ebp - 0x1268], 1
mov dword [ebp - 0x1264], 1
mov dword [ebp - 0xb74], 3
mov dword [ebp - 0x228], 0x1b
jmp 0x10009890
mov eax, dword [ebp - 0x228]
dec eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 0xfffffff5
je 0x1000992d
mov dword [ebp - 0xfc8], 6
mov dword [ebp - 0xfd0], 0x444696a4
mov dword [ebp - 0xfd8], 0xbd94543b
mov dword [ebp - 0xfe0], 0
mov dword [ebp - 0x334], 0
jmp 0x100098de
mov eax, dword [ebp - 0x334]
inc eax
mov dword [ebp - 0x334], eax
cmp dword [ebp - 0x334], 2
jge 0x100098fa
mov eax, dword [ebp - 0x334]
mov dword [ebp + eax*4 - 0x12c4], 0xfffffffe
jmp 0x100098d1
mov byte [ebp - 0x145], 0
movzx eax, byte [ebp - 0x145]
test eax, eax
je 0x1000991b
push 0x622
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0xb74]
inc eax
mov dword [ebp - 0xb74], eax
jmp 0x10009883
mov dword [ebp - 0xac], 0x15a13695
mov dword [ebp - 0xfc], 0x59229a27
mov dword [ebp - 0x398], 0xfff7
mov dword [ebp - 0x4b0], 0x98ba832a
mov dword [ebp - 0x174], 0x4adb5d23
mov dword [ebp - 0x230], 0
jmp 0x10009978
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x10009994
mov eax, dword [ebp - 0x230]
mov dword [ebp + eax*4 - 0xd60], 1
jmp 0x1000996b
cmp dword [ebp - 0xac], 0
jne 0x10009bae
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
cmp dword [ebp - 0xac], eax
jle 0x100099c8
mov dword [ebp - 0xb9c], 1
jmp 0x100099cf
and dword [ebp - 0xb9c], 0
push 4
pop eax
shl eax, 0
mov dword [ebp + eax - 0xd60], 6
push 6
pop eax
test eax, eax
jne 0x10009a00
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd60], 0
jne 0x10009a00
and dword [ebp - 0xb7c], 0
jmp 0x10009a0a
mov dword [ebp - 0xb7c], 1
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xb7c], eax
jl 0x10009a24
mov dword [ebp - 0xb84], 1
jmp 0x10009a2b
and dword [ebp - 0xb84], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xb84], eax
jg 0x10009a4b
mov eax, 0xd4f5
test eax, eax
jne 0x10009a4b
and dword [ebp - 0xc10], 0
jmp 0x10009a55
mov dword [ebp - 0xc10], 1
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xfe8], eax
cmp dword [ebp - 0xac], 0x7293cc9d
jg 0x10009a86
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd60], 0
jne 0x10009a86
and dword [ebp - 0xb8c], 0
jmp 0x10009a90
mov dword [ebp - 0xb8c], 1
cmp dword [ebp - 0xb8c], 1
jne 0x10009ab5
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xd60], 0
je 0x10009ab5
mov dword [ebp - 0xb94], 1
jmp 0x10009abc
and dword [ebp - 0xb94], 0
mov eax, dword [ebp - 0xac]
cmp dword [ebp - 0xb94], eax
jne 0x10009ad6
mov dword [ebp - 0xc60], 1
jmp 0x10009add
and dword [ebp - 0xc60], 0
mov eax, dword [ebp - 0xac]
mov dword [ebp - 0xff0], eax
mov eax, dword [ebp - 0x398]
imul eax, dword [ebp - 0xb9c]
cmp eax, 0xffffffff
jne 0x10009b07
mov dword [ebp - 0xba4], 1
jmp 0x10009b0e
and dword [ebp - 0xba4], 0
imul eax, dword [ebp - 0xba4], 0x8967
cmp eax, dword [ebp - 0xac]
je 0x10009b2c
mov dword [ebp - 0xbac], 1
jmp 0x10009b33
and dword [ebp - 0xbac], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0xbac], eax
jge 0x10009b4d
mov dword [ebp - 0xbb4], 1
jmp 0x10009b54
and dword [ebp - 0xbb4], 0
cmp dword [ebp - 0xbb4], 1
jl 0x10009b69
mov dword [ebp - 0xbbc], 1
jmp 0x10009b70
and dword [ebp - 0xbbc], 0
mov eax, dword [ebp - 0x398]
cmp dword [ebp - 0xbbc], eax
jne 0x10009b8a
mov dword [ebp - 0xbc4], 1
jmp 0x10009b91
and dword [ebp - 0xbc4], 0
or eax, 0xffffffff
sub eax, dword [ebp - 0xbc4]
imul eax, dword [ebp - 0x398]
test eax, eax
jne 0x10009bae
and dword [ebp - 0xb98], 0
jmp 0x10009bb8
mov dword [ebp - 0xb98], 1
mov eax, dword [ebp - 0xb98]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x4b0]
mov dword [ebp - 0x174], eax
mov dword [ebp - 0xfc], 0
jmp 0x10009be9
mov eax, dword [ebp - 0xfc]
inc eax
mov dword [ebp - 0xfc], eax
cmp dword [ebp - 0xfc], 0x17
jg 0x10009c2a
mov dword [ebp - 0x174], 2
jmp 0x10009c0b
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jl 0x10009c28
mov eax, dword [ebp - 0x174]
cmp dword [ebp + eax*4 - 0xd60], 0
je 0x10009c26
jmp 0x10009c28
jmp 0x10009bfe
jmp 0x10009bdc
push 2
lea ecx, [ebp - 0xe58]
call fcn.10019c20
mov dword [ebp - 4], 6
mov dword [ebp - 0x33c], 1
push 1
lea ecx, [ebp - 0xee8]
call fcn.10019c20
mov byte [ebp - 4], 7
mov dword [ebp - 0x238], 0
jmp 0x10009c72
mov eax, dword [ebp - 0x238]
inc eax
mov dword [ebp - 0x238], eax
cmp dword [ebp - 0x238], 1
jge 0x10009c91
push dword [ebp - 0x238]
lea ecx, [ebp - 0xee8]
call fcn.10019cac
or dword [eax], 0xffffffff
jmp 0x10009c65
mov dword [ebp - 0x33c], 0xffffffeb
jmp 0x10009caa
mov eax, dword [ebp - 0x33c]
inc eax
mov dword [ebp - 0x33c], eax
cmp dword [ebp - 0x33c], 1
jl 0x10009cdf
mov dword [ebp - 0x994], 0xf7a73d2
push 0
lea ecx, [ebp - 0xee8]
call fcn.10019cac
mov dword [eax], 0x32a27689
mov eax, dword [ebp - 0x994]
dec eax
mov dword [ebp - 0x994], eax
jmp 0x10009c9d
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xee8]
call fcn.10019ca7
push 3
lea ecx, [ebp - 0xd70]
call fcn.10019c20
mov byte [ebp - 4], 8
mov dword [ebp - 0x4c], 0x8cff0ea7
mov dword [ebp - 0x428], 1
or dword [ebp - 0xe28], 0xffffffff
or dword [ebp - 0xe24], 0xffffffff
or dword [ebp - 0xe20], 0xffffffff
or dword [ebp - 0xe1c], 0xffffffff
lea ecx, [ebp - 0x3e9]
call fcn.100091c3
push eax
lea eax, [ebp - 0xe18]
push eax
lea eax, [ebp - 0xe28]
push eax
lea ecx, [ebp - 0x12f4]
call fcn.10019cbb
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x1148]
call fcn.10019c81
mov byte [ebp - 4], 9
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x9ac], 0xffffffff
mov dword [ebp - 0x4e8], 0x2e4a6b2c
mov dword [ebp - 0x430], 0xffffffff
mov dword [ebp - 0x4c], 0
jmp 0x10009d9d
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0xfffffffe
je 0x10009dcd
mov byte [ebp - 0x16f], 0
movzx eax, byte [ebp - 0x16f]
test eax, eax
je 0x10009dc2
push 0x2100
push 0
call dword [sym.imp.OLEAUT32.dll_SysReAllocStringLen]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x428], eax
jmp 0x10009d96
cmp dword [ebp - 0x4c], 0x9333
jge 0x10009de2
mov dword [ebp - 0x4b8], 1
jmp 0x10009de9
and dword [ebp - 0x4b8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4b8], eax
jne 0x10009e00
mov dword [ebp - 0x99c], 1
jmp 0x10009e07
and dword [ebp - 0x99c], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x99c]
jne 0x10009e1e
mov dword [ebp - 0x3c4], 1
jmp 0x10009e25
and dword [ebp - 0x3c4], 0
push 3
lea ecx, [ebp - 0x1148]
call fcn.10019cac
mov ecx, dword [ebp - 0x3c4]
mov dword [eax], ecx
cmp dword [ebp - 0x3c4], 0xcd833989
jb 0x10009e52
mov dword [ebp - 0x4c0], 1
jmp 0x10009e59
and dword [ebp - 0x4c0], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x4c0], eax
jne 0x10009e73
mov dword [ebp - 0x9a4], 1
jmp 0x10009e7a
and dword [ebp - 0x9a4], 0
mov eax, dword [ebp - 0x4c]
cmp eax, dword [ebp - 0x9a4]
jne 0x10009e91
mov dword [ebp - 0x4c8], 1
jmp 0x10009e98
and dword [ebp - 0x4c8], 0
mov dword [ebp - 0x428], 0xfffffff8
mov eax, dword [ebp - 0x4c8]
mov dword [ebp - 0x9ac], eax
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x428], eax
jge 0x10009ec8
mov dword [ebp - 0x4d0], 1
jmp 0x10009ecf
and dword [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x4d0], eax
jne 0x10009ee9
mov dword [ebp - 0x9b4], 1
jmp 0x10009ef0
and dword [ebp - 0x9b4], 0
mov eax, dword [ebp - 0x9b4]
add eax, 0x3359002
cmp eax, dword [ebp - 0x1b0]
jl 0x10009f0f
mov dword [ebp - 0x4d8], 1
jmp 0x10009f16
and dword [ebp - 0x4d8], 0
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4d8], eax
jle 0x10009f2d
mov dword [ebp - 0x9bc], 1
jmp 0x10009f34
and dword [ebp - 0x9bc], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x9bc], eax
je 0x10009f4e
mov dword [ebp - 0x4e0], 1
jmp 0x10009f55
and dword [ebp - 0x4e0], 0
mov eax, dword [ebp - 0x1b0]
cmp dword [ebp - 0x4e0], eax
jg 0x10009f6f
mov dword [ebp - 0x9c4], 1
jmp 0x10009f76
and dword [ebp - 0x9c4], 0
mov eax, dword [ebp - 0x9c4]
mov dword [ebp - 0x4e8], eax
mov eax, dword [ebp - 0x4e8]
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
cmp dword [ebp - 0x4c], eax
jle 0x10009fab
cmp dword [ebp - 0x430], 0
jne 0x10009fab
and dword [ebp - 0x9cc], 0
jmp 0x10009fb5
mov dword [ebp - 0x9cc], 1
mov eax, dword [ebp - 0x9cc]
mov dword [ebp - 0x4c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1148]
call fcn.10019ca7
mov dword [ebp - 0x90], 0
jmp 0x10009fe6
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1000a008
push dword [ebp - 0x90]
lea ecx, [ebp - 0xe58]
call fcn.10019cac
mov dword [eax], 1
jmp 0x10009fd9
mov dword [ebp - 0x90], 0
jmp 0x1000a021
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1000a043
push dword [ebp - 0x90]
lea ecx, [ebp - 0xd70]
call fcn.10019cac
mov dword [eax], 0xfffffffb
jmp 0x1000a014
push 2
lea ecx, [ebp - 0xd70]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000a079
push 2
lea ecx, [ebp - 0xd70]
call fcn.10019cac
mov dword [ebp - 0x4f0], eax
mov eax, dword [ebp - 0x4f0]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0xd70]
call fcn.10019cac
cmp dword [eax], 1
jg 0x1000a159
push 1
lea ecx, [ebp - 0xbdc]
call fcn.10019c20
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x240], 0
jmp 0x1000a0b9
mov eax, dword [ebp - 0x240]
inc eax
mov dword [ebp - 0x240], eax
cmp dword [ebp - 0x240], 1
jge 0x1000a0db
push dword [ebp - 0x240]
lea ecx, [ebp - 0xbdc]
call fcn.10019cac
mov dword [eax], 0x6444696a
jmp 0x1000a0ac
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000a111
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10019cac
mov dword [ebp - 0x9d4], eax
mov eax, dword [ebp - 0x9d4]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x9d4]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10019cac
cmp dword [eax], 2
jge 0x1000a145
push 0
lea ecx, [ebp - 0xbdc]
call fcn.10019cac
push dword [eax]
lea ecx, [ebp - 0xe58]
call fcn.10019cac
mov dword [eax], 0x5cbd9454
jmp 0x1000a0ed
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xbdc]
call fcn.10019ca7
jmp 0x1000a055
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xd70]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe58]
call fcn.10019ca7
mov dword [ebp - 0x374], 0x53b26bdd
mov dword [ebp - 0xff8], 0x6318d581
mov dword [ebp - 0x1000], 0xe8e1b881
mov dword [ebp - 0x1008], 0xfffffffd
mov dword [ebp - 0x1010], 0
mov dword [ebp - 0x374], 0
jmp 0x1000a1c2
mov eax, dword [ebp - 0x374]
inc eax
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0x16
jg 0x1000a255
mov dword [ebp - 0x1018], 0x3ed1
mov dword [ebp - 0x1020], 0x5a60d005
mov dword [ebp - 0x1028], 0xfffffffa
mov dword [ebp - 0x4f8], 0xffffffff
mov dword [ebp - 0x9dc], 0xfeb9
mov dword [ebp - 0x248], 0
jmp 0x1000a21a
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 3
jge 0x1000a236
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x132c], 2
jmp 0x1000a20d
mov eax, dword [ebp - 0x4f8]
inc eax
mov dword [ebp - 0x4f8], eax
mov eax, dword [ebp - 0x9dc]
inc eax
mov dword [ebp - 0x9dc], eax
jmp 0x1000a1b5
mov dword [ebp - 0x344], 1
mov dword [ebp - 0x1030], 0x2006887e
mov dword [ebp - 0x1038], 0x141e4f1f
mov dword [ebp - 0x1040], 0xfffffff7
mov dword [ebp - 0x1048], 0x3a4df6f9
mov dword [ebp - 0x1050], 0xc92ea21e
mov dword [ebp - 0x1058], 0x2b96ce02
mov dword [ebp - 0x1060], 1
mov dword [ebp - 0x1068], 1
mov dword [ebp - 0x1070], 0x37e0d1b7
mov dword [ebp - 0x1078], 8
mov dword [ebp - 0x1080], 6
mov dword [ebp - 0x1088], 0xfffffffa
mov dword [ebp - 0x1284], 1
mov dword [ebp - 0x1280], 1
mov dword [ebp - 0x127c], 1
mov dword [ebp - 0x1278], 1
mov dword [ebp - 0x500], 3
mov dword [ebp - 0x344], 0x1b
jmp 0x1000a322
mov eax, dword [ebp - 0x344]
dec eax
mov dword [ebp - 0x344], eax
cmp dword [ebp - 0x344], 0xfffffff5
je 0x1000a3bf
mov dword [ebp - 0x1090], 6
mov dword [ebp - 0x1098], 0x444696a4
mov dword [ebp - 0x10a0], 0xbd94543b
mov dword [ebp - 0x10a8], 0
mov dword [ebp - 0x250], 0
jmp 0x1000a370
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 2
jge 0x1000a38c
mov eax, dword [ebp - 0x250]
mov dword [ebp + eax*4 - 0x130c], 0xfffffffe
jmp 0x1000a363
mov byte [ebp - 0x11d], 0
movzx eax, byte [ebp - 0x11d]
test eax, eax
je 0x1000a3ad
push 0x622
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0x500]
inc eax
mov dword [ebp - 0x500], eax
jmp 0x1000a315
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x94], 0x664dc9ed
mov dword [ebp - 0xc68], 0
push 4
lea ecx, [ebp - 0x1158]
call fcn.10019c20
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x37c], 0
jmp 0x1000a40a
mov eax, dword [ebp - 0x37c]
inc eax
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 4
jge 0x1000a42c
push dword [ebp - 0x37c]
lea ecx, [ebp - 0x1158]
call fcn.10019cac
mov dword [eax], 0x37a5
jmp 0x1000a3fd
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cmp dword [ebp - 0x104], eax
jne 0x1000a46c
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x94], eax
je 0x1000a46c
mov dword [ebp - 0x9e4], 1
jmp 0x1000a473
and dword [ebp - 0x9e4], 0
cmp dword [ebp - 0x9e4], 0xf9c28ade
jb 0x1000a48b
mov dword [ebp - 0x508], 1
jmp 0x1000a492
and dword [ebp - 0x508], 0
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0xc68], eax
mov dword [ebp - 0x94], 0
jmp 0x1000a4b7
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jg 0x1000a502
mov dword [ebp - 0x104], 0
jmp 0x1000a4d9
mov eax, dword [ebp - 0x104]
inc eax
mov dword [ebp - 0x104], eax
cmp dword [ebp - 0x104], 3
jg 0x1000a500
mov byte [ebp - 0x16e], 0
movzx eax, byte [ebp - 0x16e]
test eax, eax
je 0x1000a4fe
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x1000a4cc
jmp 0x1000a4aa
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1158]
call fcn.10019ca7
mov dword [ebp - 0x258], 0x53b26bdd
mov dword [ebp - 0x10b0], 0x6318d581
mov dword [ebp - 0x10b8], 0xe8e1b881
mov dword [ebp - 0x10c0], 0xfffffffd
mov dword [ebp - 0x10c8], 0
mov dword [ebp - 0x258], 0
jmp 0x1000a55c
mov eax, dword [ebp - 0x258]
inc eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0x16
jg 0x1000a5ef
mov dword [ebp - 0x10d0], 0x3ed1
mov dword [ebp - 0x10d8], 0x5a60d005
mov dword [ebp - 0x10e0], 0xfffffffa
mov dword [ebp - 0x9ec], 0xffffffff
mov dword [ebp - 0x510], 0xfeb9
mov dword [ebp - 0x34c], 0
jmp 0x1000a5b4
mov eax, dword [ebp - 0x34c]
inc eax
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 3
jge 0x1000a5d0
mov eax, dword [ebp - 0x34c]
mov dword [ebp + eax*4 - 0x1320], 2
jmp 0x1000a5a7
mov eax, dword [ebp - 0x9ec]
inc eax
mov dword [ebp - 0x9ec], eax
mov eax, dword [ebp - 0x510]
inc eax
mov dword [ebp - 0x510], eax
jmp 0x1000a54f
mov dword [ebp - 0x10c], 0x4530
mov dword [ebp - 0xa04], 0xfffffffe
mov dword [ebp - 0xc70], 1
mov dword [ebp - 0xa14], 7
push 1
lea ecx, [ebp - 0xe70]
call fcn.10019c20
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x10e8], 1
mov dword [ebp - 0x10f0], 0xa3a7
push 1
lea ecx, [ebp - 0xed0]
call fcn.10019c20
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x98], 0
jmp 0x1000a669
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1000a68b
push dword [ebp - 0x98]
lea ecx, [ebp - 0xe70]
call fcn.10019cac
mov dword [eax], 1
jmp 0x1000a65c
mov dword [ebp - 0x98], 0
jmp 0x1000a6a4
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 1
jge 0x1000a6c6
push dword [ebp - 0x98]
lea ecx, [ebp - 0xed0]
call fcn.10019cac
mov dword [eax], 0x30b137d3
jmp 0x1000a697
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x10c], eax
jge 0x1000a6e0
mov dword [ebp - 0x9fc], 1
jmp 0x1000a6e7
and dword [ebp - 0x9fc], 0
cmp dword [ebp - 0x10c], 0
jne 0x1000a6fc
mov dword [ebp - 0x9f4], 1
jmp 0x1000a703
and dword [ebp - 0x9f4], 0
mov eax, dword [ebp - 0x9f4]
add eax, 0xb8f6
cmp eax, dword [ebp - 0x10c]
je 0x1000a722
mov dword [ebp - 0x518], 1
jmp 0x1000a729
and dword [ebp - 0x518], 0
mov eax, dword [ebp - 0x518]
mov ecx, dword [ebp - 0x9fc]
lea eax, [ecx + eax + 0x10994e85]
add eax, dword [ebp - 0xa04]
cmp eax, dword [ebp - 0x10c]
jne 0x1000a756
mov dword [ebp - 0x520], 1
jmp 0x1000a75d
and dword [ebp - 0x520], 0
mov eax, dword [ebp - 0x10c]
cmp dword [ebp - 0x520], eax
jne 0x1000a780
cmp dword [ebp - 0xa04], 0
je 0x1000a780
mov dword [ebp - 0x528], 1
jmp 0x1000a787
and dword [ebp - 0x528], 0
mov eax, dword [ebp - 0x10c]
cmp eax, dword [ebp - 0x528]
jg 0x1000a7aa
cmp dword [ebp - 0xc70], 0
je 0x1000a7aa
mov dword [ebp - 0xa0c], 1
jmp 0x1000a7b1
and dword [ebp - 0xa0c], 0
cmp dword [ebp - 0xa0c], 0xfffffffb
jb 0x1000a7c6
mov dword [ebp - 0x530], 1
jmp 0x1000a7cd
and dword [ebp - 0x530], 0
mov eax, dword [ebp - 0x530]
mov dword [ebp - 0xa14], eax
cmp dword [ebp - 0xa14], 0xffffffff
jb 0x1000a7ee
mov dword [ebp - 0x538], 1
jmp 0x1000a7f5
and dword [ebp - 0x538], 0
push 0
lea ecx, [ebp - 0xe70]
call fcn.10019cac
mov ecx, dword [ebp - 0x538]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xed0]
call fcn.10019cac
mov dword [ebp - 0xa1c], eax
mov eax, dword [ebp - 0xa1c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0xa1c]
mov dword [ecx], eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xed0]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe70]
call fcn.10019ca7
mov dword [ebp - 0x260], 1
mov dword [ebp - 0x10f8], 0x2006887e
mov dword [ebp - 0x1100], 0x141e4f1f
mov dword [ebp - 0x1108], 0xfffffff7
mov dword [ebp - 0x1110], 0x3a4df6f9
mov dword [ebp - 0x1118], 0xc92ea21e
mov dword [ebp - 0x1120], 0x2b96ce02
mov dword [ebp - 0x1128], 1
mov dword [ebp - 0x1130], 1
mov dword [ebp - 0x1138], 0x37e0d1b7
mov dword [ebp - 0x1234], 8
mov dword [ebp - 0x123c], 6
mov dword [ebp - 0x1244], 0xfffffffa
mov dword [ebp - 0x1298], 1
mov dword [ebp - 0x1294], 1
mov dword [ebp - 0x1290], 1
mov dword [ebp - 0x128c], 1
mov dword [ebp - 0x540], 3
mov dword [ebp - 0x260], 0x1b
jmp 0x1000a919
mov eax, dword [ebp - 0x260]
dec eax
mov dword [ebp - 0x260], eax
cmp dword [ebp - 0x260], 0xfffffff5
je 0x1000a9b6
mov dword [ebp - 0x124c], 6
mov dword [ebp - 0x1254], 0x444696a4
mov dword [ebp - 0x125c], 0xbd94543b
mov dword [ebp - 0x1260], 0
mov dword [ebp - 0x2f4], 0
jmp 0x1000a967
mov eax, dword [ebp - 0x2f4]
inc eax
mov dword [ebp - 0x2f4], eax
cmp dword [ebp - 0x2f4], 2
jge 0x1000a983
mov eax, dword [ebp - 0x2f4]
mov dword [ebp + eax*4 - 0x12cc], 0xfffffffe
jmp 0x1000a95a
mov byte [ebp - 0x125], 0
movzx eax, byte [ebp - 0x125]
test eax, eax
je 0x1000a9a4
push 0x622
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
mov eax, dword [ebp - 0x540]
inc eax
mov dword [ebp - 0x540], eax
jmp 0x1000a90c
mov dword [ebp - 0x10], 0x890
push 1
lea ecx, [ebp - 0xd90]
call fcn.10019c20
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x198], 0xaaf7cc73
mov dword [ebp - 0x578], 0x7c7a5019
mov dword [ebp - 0x268], 0
jmp 0x1000a9fe
mov eax, dword [ebp - 0x268]
inc eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 1
jge 0x1000aa20
push dword [ebp - 0x268]
lea ecx, [ebp - 0xd90]
call fcn.10019cac
mov dword [eax], 0xfffffff9
jmp 0x1000a9f1
cmp dword [ebp - 0x10], 0
je 0x1000abf2
mov dword [ebp - 0x10], 0
jmp 0x1000aa3a
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0x36
jge 0x1000abbf
push 3
lea ecx, [ebp - 0xd80]
call fcn.10019c20
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x2f8], 0
jmp 0x1000aa6e
mov eax, dword [ebp - 0x2f8]
inc eax
mov dword [ebp - 0x2f8], eax
cmp dword [ebp - 0x2f8], 3
jge 0x1000aa90
push dword [ebp - 0x2f8]
lea ecx, [ebp - 0xd80]
call fcn.10019cac
mov dword [eax], 0x54fddd3f
jmp 0x1000aa61
push 0
lea ecx, [ebp - 0xd80]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000aac6
push 0
lea ecx, [ebp - 0xd80]
call fcn.10019cac
mov dword [ebp - 0xa24], eax
mov eax, dword [ebp - 0xa24]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xa24]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xd80]
call fcn.10019cac
cmp dword [eax], 0x1b
je 0x1000abab
mov dword [ebp - 0x270], 0xfffffff9
mov dword [ebp - 0xc14], 0
mov dword [ebp - 0x270], 0
jmp 0x1000ab09
mov eax, dword [ebp - 0x270]
inc eax
mov dword [ebp - 0x270], eax
cmp dword [ebp - 0x270], 0x11
jg 0x1000aba6
mov dword [ebp - 0x300], 0
jmp 0x1000ab2f
mov eax, dword [ebp - 0x300]
inc eax
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x300], 4
jge 0x1000ab4b
mov eax, dword [ebp - 0x300]
mov dword [ebp + eax*4 - 0xf04], 0xffffffff
jmp 0x1000ab22
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xf04], 0
jmp 0x1000ab79
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf04]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xf04], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf04], 0xffffffe7
je 0x1000aba1
mov dword [ebp - 0xc78], 0xffffffff
mov eax, dword [ebp - 0xc78]
mov dword [ebp - 0xc14], eax
jmp 0x1000ab5e
jmp 0x1000aafc
jmp 0x1000aaa2
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xd80]
call fcn.10019ca7
jmp 0x1000aa33
mov byte [ebp - 0x168], 0
movzx eax, byte [ebp - 0x168]
test eax, eax
je 0x1000abed
push 0x2554
push 0x6a3
push 0xbf3
push 0x1320
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x1000af72
mov dword [ebp - 0xf54], 6
mov dword [ebp - 0xf50], 6
mov dword [ebp - 0xf4c], 6
mov dword [ebp - 0xf48], 6
push 3
lea ecx, [ebp - 0xbf4]
call fcn.10019c20
mov byte [ebp - 4], 0x10
push 4
lea ecx, [ebp - 0xeac]
call fcn.10019c20
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x34], 0
jmp 0x1000ac4c
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x1000ac65
push dword [ebp - 0x34]
lea ecx, [ebp - 0xbf4]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000ac45
mov dword [ebp - 0x34], 0
jmp 0x1000ac75
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1000ac8b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0xc90], 1
jmp 0x1000ac6e
mov dword [ebp - 0x34], 0
jmp 0x1000ac9b
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 4
jge 0x1000acb7
push dword [ebp - 0x34]
lea ecx, [ebp - 0xeac]
call fcn.10019cac
mov dword [eax], 0x52ee8b72
jmp 0x1000ac94
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x548], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x548]
mov dword [ebp + eax - 0xf54], ecx
cmp dword [ebp - 0x548], 0
jne 0x1000ad36
cmp dword [ebp - 0x10], 0
je 0x1000ad19
cmp dword [ebp - 0x10], 0
je 0x1000acfa
cmp dword [ebp - 0x10], 0
je 0x1000acfa
mov dword [ebp - 0xa2c], 1
jmp 0x1000ad01
and dword [ebp - 0xa2c], 0
cmp dword [ebp - 0xa2c], 0x4f68
je 0x1000ad19
mov dword [ebp - 0x550], 1
jmp 0x1000ad20
and dword [ebp - 0x550], 0
mov eax, dword [ebp - 0x550]
add eax, 0xc5a7
jne 0x1000ad36
and dword [ebp - 0xa34], 0
jmp 0x1000ad40
mov dword [ebp - 0xa34], 1
push 0
lea ecx, [ebp - 0xd90]
call fcn.10019cac
mov ecx, dword [ebp - 0xa34]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x1250], eax
push 2
lea ecx, [ebp - 0xbf4]
call fcn.10019cac
mov ecx, dword [ebp - 0x10]
cmp dword [eax], ecx
je 0x1000ad8d
push 2
lea ecx, [ebp - 0xbf4]
call fcn.10019cac
cmp dword [eax], 0
jne 0x1000ad8d
and dword [ebp - 0x558], 0
jmp 0x1000ad97
mov dword [ebp - 0x558], 1
push 1
lea ecx, [ebp - 0xbf4]
call fcn.10019cac
mov ecx, dword [ebp - 0x558]
cmp ecx, dword [eax]
jl 0x1000adba
mov dword [ebp - 0xa3c], 1
jmp 0x1000adc1
and dword [ebp - 0xa3c], 0
cmp dword [ebp - 0xa3c], 0xfffffffa
jge 0x1000ade8
push 0
lea ecx, [ebp - 0xd90]
call fcn.10019cac
cmp dword [eax], 0
je 0x1000ade8
mov dword [ebp - 0x560], 1
jmp 0x1000adef
and dword [ebp - 0x560], 0
push 0
lea ecx, [ebp - 0xbf4]
call fcn.10019cac
mov ecx, dword [ebp - 0x560]
cmp ecx, dword [eax]
jle 0x1000ae12
mov dword [ebp - 0xa44], 1
jmp 0x1000ae19
and dword [ebp - 0xa44], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0xa44], eax
jg 0x1000ae30
mov dword [ebp - 0x568], 1
jmp 0x1000ae37
and dword [ebp - 0x568], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x568], eax
jge 0x1000ae4e
mov dword [ebp - 0xa4c], 1
jmp 0x1000ae55
and dword [ebp - 0xa4c], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0xa4c], eax
jge 0x1000ae6f
mov dword [ebp - 0x570], 1
jmp 0x1000ae76
and dword [ebp - 0x570], 0
cmp dword [ebp - 0x570], 0xce570888
je 0x1000ae8e
mov dword [ebp - 0xa54], 1
jmp 0x1000ae95
and dword [ebp - 0xa54], 0
mov eax, dword [ebp - 0x198]
cmp dword [ebp - 0xa54], eax
jle 0x1000aeaf
mov dword [ebp - 0xc88], 1
jmp 0x1000aeb6
and dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0xf60], eax
mov dword [ebp - 0x578], 0xfffffffe
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0xa5c], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0xa5c]
mov dword [ebp + eax - 0xc90], ecx
cmp dword [ebp - 0xa5c], 0xfffffffd
ja 0x1000aefd
mov dword [ebp - 0x580], 1
jmp 0x1000af04
and dword [ebp - 0x580], 0
mov esi, dword [ebp - 0x10]
imul esi, dword [ebp - 0x580]
push 2
lea ecx, [ebp - 0xeac]
call fcn.10019cac
mov dword [eax], esi
mov dword [ebp - 0x198], 7
jmp 0x1000af36
mov eax, dword [ebp - 0x198]
dec eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 0xfffffffc
jne 0x1000af54
push 0
lea ecx, [ebp - 0xd90]
call fcn.10019cac
mov dword [eax], 0x700c0d35
jmp 0x1000af29
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xeac]
call fcn.10019ca7
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0xbf4]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd90]
call fcn.10019ca7
mov dword [ebp - 0x40], 1
mov dword [ebp - 0x180], 1
mov dword [ebp - 0x40], 0
jmp 0x1000afa2
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 1
je 0x1000aff9
mov dword [ebp - 0x278], 0xfffffff7
mov dword [ebp - 0x278], 0xffffffe2
jmp 0x1000afcb
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 0x1a
jl 0x1000aff7
mov byte [ebp - 0x12d], 0
movzx eax, byte [ebp - 0x12d]
test eax, eax
je 0x1000aff5
push 0x157e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
jmp 0x1000afbe
jmp 0x1000af9b
mov dword [ebp - 0x40], 0
jmp 0x1000b009
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xfffffffc
jne 0x1000b325
mov dword [ebp - 0xdc], 0x2c36544d
mov dword [ebp - 0x50], 0xbc106ec6
mov dword [ebp - 0x438], 0x4801465e
cmp dword [ebp - 0x40], 0
jne 0x1000b04e
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x40]
jne 0x1000b04e
and dword [ebp - 0xa64], 0
jmp 0x1000b058
mov dword [ebp - 0xa64], 1
mov eax, dword [ebp - 0xa64]
mov dword [ebp - 0x180], eax
mov dword [ebp - 0xdc], 0x10
jmp 0x1000b07d
mov eax, dword [ebp - 0xdc]
inc eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0xdc], 0x1c
jle 0x1000b320
mov dword [ebp - 0x1d4], 0x9df9481f
mov dword [ebp - 0x308], 0
jmp 0x1000b0ad
mov eax, dword [ebp - 0x308]
inc eax
mov dword [ebp - 0x308], eax
cmp dword [ebp - 0x308], 1
jge 0x1000b0c9
mov eax, dword [ebp - 0x308]
mov dword [ebp + eax*4 - 0xc98], 0xffffffff
jmp 0x1000b0a0
mov eax, 0xf048
test eax, eax
je 0x1000b213
cmp dword [ebp - 0xdc], 0
jne 0x1000b0eb
mov dword [ebp - 0xa7c], 1
jmp 0x1000b0f2
and dword [ebp - 0xa7c], 0
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xf88], eax
mov eax, dword [ebp - 0x438]
mov dword [ebp - 0xf68], eax
cmp dword [ebp - 0x40], 0x7430
jg 0x1000b11c
mov dword [ebp - 0x588], 1
jmp 0x1000b123
and dword [ebp - 0x588], 0
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x588], eax
jl 0x1000b13d
mov dword [ebp - 0xa6c], 1
jmp 0x1000b144
and dword [ebp - 0xa6c], 0
imul eax, dword [ebp - 0xa6c], 0
test eax, eax
je 0x1000b16a
cmp dword [ebp - 0x438], 0
je 0x1000b16a
cmp dword [ebp - 0x40], 0
je 0x1000b16a
mov dword [ebp - 0x590], 1
jmp 0x1000b171
and dword [ebp - 0x590], 0
mov eax, dword [ebp - 0x590]
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0xdc]
cmp dword [ebp - 0x50], eax
jle 0x1000b191
mov dword [ebp - 0xa74], 1
jmp 0x1000b198
and dword [ebp - 0xa74], 0
mov eax, dword [ebp - 0xdc]
cmp eax, dword [ebp - 0xa74]
jge 0x1000b1b2
mov dword [ebp - 0x598], 1
jmp 0x1000b1b9
and dword [ebp - 0x598], 0
mov eax, dword [ebp - 0x1d4]
cmp eax, dword [ebp - 0x598]
jne 0x1000b1d3
mov dword [ebp - 0x5a0], 1
jmp 0x1000b1da
and dword [ebp - 0x5a0], 0
mov eax, dword [ebp - 0xa7c]
cmp eax, dword [ebp - 0x5a0]
jg 0x1000b1f4
mov dword [ebp - 0xa84], 1
jmp 0x1000b1fb
and dword [ebp - 0xa84], 0
cmp dword [ebp - 0xa84], 0xcb7b
jg 0x1000b213
mov dword [ebp - 0x5a8], 1
jmp 0x1000b21a
and dword [ebp - 0x5a8], 0
cmp dword [ebp - 0x5a8], 0x95e1
je 0x1000b22f
cmp dword [ebp - 0x180], 0
je 0x1000b245
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc98], 1
jmp 0x1000b31b
mov dword [ebp - 0xa8c], 0xffffffff
mov dword [ebp - 0x50], 0
jmp 0x1000b25f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
jg 0x1000b2f7
mov dword [ebp - 0x180], 0
jmp 0x1000b282
mov eax, dword [ebp - 0x180]
dec eax
mov dword [ebp - 0x180], eax
cmp dword [ebp - 0x180], 0
jl 0x1000b2f2
mov dword [ebp - 0x1d4], 0
jmp 0x1000b2a4
mov eax, dword [ebp - 0x1d4]
inc eax
mov dword [ebp - 0x1d4], eax
cmp dword [ebp - 0x1d4], 0
jg 0x1000b2d0
mov byte [ebp - 0x16c], 0
movzx eax, byte [ebp - 0x16c]
test eax, eax
je 0x1000b2ce
push 0x622
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableW]
jmp 0x1000b297
mov byte [ebp - 0x135], 0
movzx eax, byte [ebp - 0x135]
test eax, eax
je 0x1000b2f0
push 0
push 1
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
jmp 0x1000b275
jmp 0x1000b258
mov dword [ebp - 0x50], 0xfffffff0
jmp 0x1000b307
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0xfffffff9
jl 0x1000b31b
mov eax, dword [ebp - 0xa8c]
mov dword [ebp - 0xa8c], eax
jmp 0x1000b300
jmp 0x1000b070
jmp 0x1000b002
mov dword [ebp - 0x114], 0
mov dword [ebp - 0xc4], 0x664dc9ed
mov dword [ebp - 0xca0], 0
push 4
lea ecx, [ebp - 0x1168]
call fcn.10019c20
mov dword [ebp - 4], 0x12
mov dword [ebp - 0x280], 0
jmp 0x1000b370
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 4
jge 0x1000b392
push dword [ebp - 0x280]
lea ecx, [ebp - 0x1168]
call fcn.10019cac
mov dword [eax], 0x37a5
jmp 0x1000b363
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xc4]
cmp dword [ebp - 0x114], eax
jne 0x1000b3d2
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x114]
cmp dword [ebp - 0xc4], eax
je 0x1000b3d2
mov dword [ebp - 0x5b0], 1
jmp 0x1000b3d9
and dword [ebp - 0x5b0], 0
cmp dword [ebp - 0x5b0], 0xf9c28ade
jb 0x1000b3f1
mov dword [ebp - 0xa94], 1
jmp 0x1000b3f8
and dword [ebp - 0xa94], 0
mov eax, dword [ebp - 0xa94]
mov dword [ebp - 0xca0], eax
mov dword [ebp - 0xc4], 0
jmp 0x1000b41d
mov eax, dword [ebp - 0xc4]
inc eax
mov dword [ebp - 0xc4], eax
cmp dword [ebp - 0xc4], 3
jg 0x1000b468
mov dword [ebp - 0x114], 0
jmp 0x1000b43f
mov eax, dword [ebp - 0x114]
inc eax
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 3
jg 0x1000b466
mov byte [ebp - 0x16a], 0
movzx eax, byte [ebp - 0x16a]
test eax, eax
je 0x1000b464
push 0
push 0
call dword [sym.imp.SHELL32.dll_CommandLineToArgvW]
jmp 0x1000b432
jmp 0x1000b410
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1168]
call fcn.10019ca7
mov dword [ebp - 0x310], 0x53b26bdd
mov dword [ebp - 0xf90], 0x6318d581
mov dword [ebp - 0xf98], 0xe8e1b881
mov dword [ebp - 0xf74], 0xfffffffd
mov dword [ebp - 0x10c4], 0
mov dword [ebp - 0x310], 0
jmp 0x1000b4c2
mov eax, dword [ebp - 0x310]
inc eax
mov dword [ebp - 0x310], eax
cmp dword [ebp - 0x310], 0x16
jg 0x1000b555
mov dword [ebp - 0xf7c], 0x3ed1
mov dword [ebp - 0x119c], 0x5a60d005
mov dword [ebp - 0xf84], 0xfffffffa
mov dword [ebp - 0x5b8], 0xffffffff
mov dword [ebp - 0xa9c], 0xfeb9
mov dword [ebp - 0x288], 0
jmp 0x1000b51a
mov eax, dword [ebp - 0x288]
inc eax
mov dword [ebp - 0x288], eax
cmp dword [ebp - 0x288], 3
jge 0x1000b536
mov eax, dword [ebp - 0x288]
mov dword [ebp + eax*4 - 0x1338], 2
jmp 0x1000b50d
mov eax, dword [ebp - 0x5b8]
inc eax
mov dword [ebp - 0x5b8], eax
mov eax, dword [ebp - 0xa9c]
inc eax
mov dword [ebp - 0xa9c], eax
jmp 0x1000b4b5
mov dword [ebp - 0x11c], 0x4530
mov dword [ebp - 0x5d0], 0xfffffffe
mov dword [ebp - 0xca8], 1
mov dword [ebp - 0x5e0], 7
push 1
lea ecx, [ebp - 0xec4]
call fcn.10019c20
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x10cc], 1
mov dword [ebp - 0xf8c], 0xa3a7
push 1
lea ecx, [ebp - 0xe88]
call fcn.10019c20
mov byte [ebp - 4], 0x14
mov dword [ebp - 0xb4], 0
jmp 0x1000b5cf
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1000b5f1
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xec4]
call fcn.10019cac
mov dword [eax], 1
jmp 0x1000b5c2
mov dword [ebp - 0xb4], 0
jmp 0x1000b60a
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 1
jge 0x1000b62c
push dword [ebp - 0xb4]
lea ecx, [ebp - 0xe88]
call fcn.10019cac
mov dword [eax], 0x30b137d3
jmp 0x1000b5fd
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0x11c], eax
jge 0x1000b646
mov dword [ebp - 0x5c8], 1
jmp 0x1000b64d
and dword [ebp - 0x5c8], 0
cmp dword [ebp - 0x11c], 0
jne 0x1000b662
mov dword [ebp - 0x5c0], 1
jmp 0x1000b669
and dword [ebp - 0x5c0], 0
mov eax, dword [ebp - 0x5c0]
add eax, 0xb8f6
cmp eax, dword [ebp - 0x11c]
je 0x1000b688
mov dword [ebp - 0xaa4], 1
jmp 0x1000b68f
and dword [ebp - 0xaa4], 0
mov eax, dword [ebp - 0xaa4]
mov ecx, dword [ebp - 0x5c8]
lea eax, [ecx + eax + 0x10994e85]
add eax, dword [ebp - 0x5d0]
cmp eax, dword [ebp - 0x11c]
jne 0x1000b6bc
mov dword [ebp - 0xaac], 1
jmp 0x1000b6c3
and dword [ebp - 0xaac], 0
mov eax, dword [ebp - 0x11c]
cmp dword [ebp - 0xaac], eax
jne 0x1000b6e6
cmp dword [ebp - 0x5d0], 0
je 0x1000b6e6
mov dword [ebp - 0xab4], 1
jmp 0x1000b6ed
and dword [ebp - 0xab4], 0
mov eax, dword [ebp - 0x11c]
cmp eax, dword [ebp - 0xab4]
jg 0x1000b710
cmp dword [ebp - 0xca8], 0
je 0x1000b710
mov dword [ebp - 0x5d8], 1
jmp 0x1000b717
and dword [ebp - 0x5d8], 0
cmp dword [ebp - 0x5d8], 0xfffffffb
jb 0x1000b72c
mov dword [ebp - 0xabc], 1
jmp 0x1000b733
and dword [ebp - 0xabc], 0
mov eax, dword [ebp - 0xabc]
mov dword [ebp - 0x5e0], eax
cmp dword [ebp - 0x5e0], 0xffffffff
jb 0x1000b754
mov dword [ebp - 0xac4], 1
jmp 0x1000b75b
and dword [ebp - 0xac4], 0
push 0
lea ecx, [ebp - 0xec4]
call fcn.10019cac
mov ecx, dword [ebp - 0xac4]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0xe88]
call fcn.10019cac
mov dword [ebp - 0x5e8], eax
mov eax, dword [ebp - 0x5e8]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x5e8]
mov dword [ecx], eax
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xe88]
call fcn.10019ca7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xec4]
call fcn.10019ca7
mov dword [ebp - 0x18], 0x890
push 1
lea ecx, [ebp - 0xdb0]
call fcn.10019c20
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x190], 0xaaf7cc73
mov dword [ebp - 0x620], 0x7c7a5019
mov dword [ebp - 0x318], 0
jmp 0x1000b7fa
mov eax, dword [ebp - 0x318]
inc eax
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 1
jge 0x1000b81c
push dword [ebp - 0x318]
lea ecx, [ebp - 0xdb0]
call fcn.10019cac
mov dword [eax], 0xfffffff9
jmp 0x1000b7ed
cmp dword [ebp - 0x18], 0
je 0x1000b9ee
mov dword [ebp - 0x18], 0
jmp 0x1000b836
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0x36
jge 0x1000b9bb
push 3
lea ecx, [ebp - 0xda0]
call fcn.10019c20
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x290], 0
jmp 0x1000b86a
mov eax, dword [ebp - 0x290]
inc eax
mov dword [ebp - 0x290], eax
cmp dword [ebp - 0x290], 3
jge 0x1000b88c
push dword [ebp - 0x290]
lea ecx, [ebp - 0xda0]
call fcn.10019cac
mov dword [eax], 0x54fddd3f
jmp 0x1000b85d
push 0
lea ecx, [ebp - 0xda0]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000b8c2
push 0
lea ecx, [ebp - 0xda0]
call fcn.10019cac
mov dword [ebp - 0xacc], eax
mov eax, dword [ebp - 0xacc]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0xacc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xda0]
call fcn.10019cac
cmp dword [eax], 0x1b
je 0x1000b9a7
mov dword [ebp - 0x320], 0xfffffff9
mov dword [ebp - 0xcb8], 0
mov dword [ebp - 0x320], 0
jmp 0x1000b905
cmp dword [ebp - 0x320], 0x11
jg 0x1000b9a2
mov dword [ebp - 0x298], 0
jmp 0x1000b92b
cmp dword [ebp - 0x298], 4
jge 0x1000b947
jmp 0x1000b89e
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xda0]
call fcn.10019ca7
jmp 0x1000b82f
mov byte [ebp - 0x13d], 0
movzx eax, byte [ebp - 0x13d]
test eax, eax
je 0x1000b9e9
push 0x2554
push 0x6a3
push 0xbf3
push 0x1320
push 0
call dword [sym.imp.USER32.dll_CheckMenuRadioItem]
jmp 0x1000bd6e
mov dword [ebp - 0xf44], 6
mov dword [ebp - 0xf40], 6
mov dword [ebp - 0xf3c], 6
mov dword [ebp - 0xf38], 6
push 3
lea ecx, [ebp - 0xc0c]
call fcn.10019c20
mov byte [ebp - 4], 0x17
push 4
lea ecx, [ebp - 0xea0]
call fcn.10019c20
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x28], 0
jmp 0x1000ba48
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jge 0x1000ba61
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc0c]
call fcn.10019cac
and dword [eax], 0
jmp 0x1000ba41
mov dword [ebp - 0x28], 0
jmp 0x1000ba71
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1000ba87
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xcc8], 1
jmp 0x1000ba6a
mov dword [ebp - 0x28], 0
jmp 0x1000ba97
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 4
jge 0x1000bab3
push dword [ebp - 0x28]
lea ecx, [ebp - 0xea0]
call fcn.10019cac
mov dword [eax], 0x52ee8b72
jmp 0x1000ba90
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x5f0], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x5f0]
mov dword [ebp + eax - 0xf44], ecx
cmp dword [ebp - 0x5f0], 0
jne 0x1000bb32
cmp dword [ebp - 0x18], 0
je 0x1000bb15
cmp dword [ebp - 0x18], 0
je 0x1000baf6
cmp dword [ebp - 0x18], 0
je 0x1000baf6
and dword [ebp - 0xad4], 0
cmp dword [ebp - 0xad4], 0x4f68
je 0x1000bb15
and dword [ebp - 0x5f8], 0
mov eax, dword [ebp - 0x5f8]
add eax, 0xc5a7
jne 0x1000bb32
and dword [ebp - 0xadc], 0
jmp 0x1000bb3c
mov dword [ebp - 0xadc], 1
push 0
lea ecx, [ebp - 0xdb0]
call fcn.10019cac
mov ecx, dword [ebp - 0xadc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1230], eax
push 2
lea ecx, [ebp - 0xc0c]
call fcn.10019cac
mov ecx, dword [ebp - 0x18]
cmp dword [eax], ecx
je 0x1000bb89
push 2
lea ecx, [ebp - 0xc0c]
call fcn.10019cac
cmp dword [eax], 0
jne 0x1000bb89
and dword [ebp - 0x600], 0
jmp 0x1000bb93
mov dword [ebp - 0x600], 1
push 1
lea ecx, [ebp - 0xc0c]
call fcn.10019cac
mov ecx, dword [ebp - 0x600]
cmp ecx, dword [eax]
jl 0x1000bbb6
mov dword [ebp - 0xae4], 1
jmp 0x1000bbbd
and dword [ebp - 0xae4], 0
cmp dword [ebp - 0xae4], 0xfffffffa
jge 0x1000bbe4
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xdb0]
call fcn.10019ca7
mov dword [ebp - 0x124], 0
mov dword [ebp - 0xc8], 0x664dc9ed
mov dword [ebp - 0xcd0], 0
push 4
lea ecx, [ebp - 0x1178]
call fcn.10019c20
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x328], 0
jmp 0x1000bdc8
mov eax, dword [ebp - 0x328]
inc eax
mov dword [ebp - 0x328], eax
cmp dword [ebp - 0x328], 4
jge 0x1000bdea
push dword [ebp - 0x328]
lea ecx, [ebp - 0x1178]
call fcn.10019cac
mov dword [eax], 0x37a5
jmp 0x1000bdbb
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0xc8]
cmp dword [ebp - 0x124], eax
jne 0x1000be2a
mov eax, dword [ebp - 0xc8]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x124]
cmp dword [ebp - 0xc8], eax
je 0x1000be2a
mov dword [ebp - 0x63c], 1
jmp 0x1000be31
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0xf9c28ade
jb 0x1000be49
mov dword [ebp - 0x630], 1
jmp 0x1000be50
and dword [ebp - 0x630], 0
mov eax, dword [ebp - 0x630]
mov dword [ebp - 0xcd0], eax
mov dword [ebp - 0xc8], 0
jmp 0x1000be75
cmp dword [ebp - 0xc8], 3
jg 0x1000bec0