Function at 0x1003cd75
Capabilities:
Check for time delay via queryperformancecounter
Delete registry key
Enumerate gui resources
Get file system object information

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007fdba
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xf7c
push esi
push edi
push 3
lea ecx, [ebp - 0xd24]
call fcn.10012956
and dword [ebp - 4], 0
mov dword [ebp - 0xd10], 0x3f7e813a
mov dword [ebp - 0xcc4], 0xfffffff6
mov dword [ebp - 0xd80], 1
mov dword [ebp - 0x358], 0xdac3
mov dword [ebp - 0x58], 0
jmp 0x1003cdde
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1003cdf4
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0xe28], 0xffffffff
jmp 0x1003cdd7
mov dword [ebp - 0x58], 0
jmp 0x1003ce04
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 3
jge 0x1003ce20
push dword [ebp - 0x58]
lea ecx, [ebp - 0xd24]
call fcn.100129c3
mov dword [eax], 0xadae8c9f
jmp 0x1003cdfd
mov eax, dword [ebp - 0x358]
mov dword [ebp - 0x87c], eax
mov eax, dword [ebp - 0x358]
inc eax
mov dword [ebp - 0x358], eax
cmp dword [ebp - 0x87c], 4
jne 0x1003ce4e
mov dword [ebp - 0x3f0], 1
jmp 0x1003ce55
and dword [ebp - 0x3f0], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp + eax - 0xe28], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd24]
call fcn.100129be
push 3
lea ecx, [ebp - 0xd34]
call fcn.10012956
mov dword [ebp - 4], 1
mov dword [ebp - 0xccc], 0x3f7e813a
mov dword [ebp - 0xdfc], 0xfffffff6
mov dword [ebp - 0xcd4], 1
mov dword [ebp - 0x2e0], 0xdac3
mov dword [ebp - 0x8c], 0
jmp 0x1003cecb
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1003cee7
mov eax, dword [ebp - 0x8c]
mov dword [ebp + eax*4 - 0xe40], 0xffffffff
jmp 0x1003cebe
mov dword [ebp - 0x8c], 0
jmp 0x1003cf00
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 3
jge 0x1003cf22
push dword [ebp - 0x8c]
lea ecx, [ebp - 0xd34]
call fcn.100129c3
mov dword [eax], 0xadae8c9f
jmp 0x1003cef3
mov eax, dword [ebp - 0x2e0]
mov dword [ebp - 0x8bc], eax
mov eax, dword [ebp - 0x2e0]
inc eax
mov dword [ebp - 0x2e0], eax
cmp dword [ebp - 0x8bc], 4
jne 0x1003cf50
mov dword [ebp - 0x7c8], 1
jmp 0x1003cf57
and dword [ebp - 0x7c8], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp + eax - 0xe40], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd34]
call fcn.100129be
mov dword [ebp - 0x14c], 0x53d8da8e
push 2
lea ecx, [ebp - 0x854]
call fcn.10012956
mov dword [ebp - 4], 2
mov dword [ebp - 0x320], 0x598aaf0a
mov dword [ebp - 0x36c], 0x7e7c14ab
mov dword [ebp - 0x7d0], 0xdab551fa
mov dword [ebp - 0x384], 0xfffffff8
mov dword [ebp - 0x19c], 1
mov dword [ebp - 0x38c], 0xdd2e91c8
mov dword [ebp - 0x394], 0x38ca8c98
mov dword [ebp - 0x97c], 0xc914a3a6
mov dword [ebp - 0xd88], 0x550e3526
mov dword [ebp - 0x294], 0
jmp 0x1003d009
mov eax, dword [ebp - 0x294]
inc eax
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 2
jge 0x1003d02b
push dword [ebp - 0x294]
lea ecx, [ebp - 0x854]
call fcn.100129c3
mov dword [eax], 9
jmp 0x1003cffc
push 0
lea ecx, [ebp - 0x854]
call fcn.100129c3
mov eax, dword [ebp - 0x14c]
sub eax, dword [ebp - 0x14c]
mov dword [ebp - 0x8c4], eax
push 0
lea ecx, [ebp - 0x854]
call fcn.100129c3
mov ecx, dword [ebp - 0x8c4]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14c]
mov dword [ebp - 0xcdc], eax
mov eax, dword [ebp - 0x320]
dec eax
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x36c], 0xfffffff9
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x7d0], eax
mov eax, dword [ebp - 0x320]
dec eax
cmp eax, dword [ebp - 0x7d0]
jl 0x1003d0a9
mov dword [ebp - 0x374], 1
jmp 0x1003d0b0
and dword [ebp - 0x374], 0
mov eax, dword [ebp - 0x374]
mov dword [ebp - 0x384], eax
cmp dword [ebp - 0x19c], 1
jb 0x1003d0d1
mov dword [ebp - 0x7d8], 1
jmp 0x1003d0d8
and dword [ebp - 0x7d8], 0
cmp dword [ebp - 0x7d8], 0x1f90ef30
je 0x1003d0f0
mov dword [ebp - 0x37c], 1
jmp 0x1003d0f7
and dword [ebp - 0x37c], 0
mov eax, dword [ebp - 0x14c]
cmp dword [ebp - 0x37c], eax
je 0x1003d111
mov dword [ebp - 0x7e0], 1
jmp 0x1003d118
and dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x19c]
cmp dword [ebp - 0x7e0], eax
jl 0x1003d14a
cmp dword [ebp - 0x384], 0
jne 0x1003d14a
push 1
lea ecx, [ebp - 0x854]
call fcn.100129c3
cmp dword [eax], 0
jne 0x1003d14a
and dword [ebp - 0x7e8], 0
jmp 0x1003d154
mov dword [ebp - 0x7e8], 1
mov eax, dword [ebp - 0x7e8]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
mov dword [ebp - 0x38c], eax
mov eax, dword [ebp - 0x38c]
cmp dword [ebp - 0x14c], eax
je 0x1003d186
mov dword [ebp - 0x7f0], 1
jmp 0x1003d18d
and dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x394], eax
cmp dword [ebp - 0x394], 0
je 0x1003d1c0
mov byte [ebp - 0xad], 0
movzx eax, byte [ebp - 0xad]
test eax, eax
je 0x1003d1be
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x1003d1e0
mov dword [ebp - 0x96c], 0xfff8
mov dword [ebp - 0x974], 0xfa8fad74
mov eax, dword [ebp - 0x96c]
mov dword [ebp - 0x974], eax
mov esi, dword [ebp - 0x97c]
push 0
lea ecx, [ebp - 0x854]
call fcn.100129c3
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x854]
call fcn.100129be
mov dword [ebp - 0x30], 0xf2c29a3d
mov dword [ebp - 0x60], 0
jmp 0x1003d21b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 1
jge 0x1003d231
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0x22c], 0xaf1124f0
jmp 0x1003d214
mov dword [ebp - 0x60], 0
jmp 0x1003d241
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x1003d257
mov eax, dword [ebp - 0x60]
mov dword [ebp + eax*4 - 0xcf0], 0x2d1a4e66
jmp 0x1003d23a
mov dword [ebp - 0x30], 0
jmp 0x1003d267
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
jl 0x1003d2eb
mov eax, dword [ebp - 0x30]
cmp dword [ebp + eax*4 - 0x22c], 0
jne 0x1003d2c5
mov eax, 0xb048
test eax, eax
jne 0x1003d2c5
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp + eax*4 - 0x22c]
mov dword [ebp - 0xdcc], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x22c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x22c]
imul eax, dword [ebp - 0x30]
imul eax, eax, 0xffff
test eax, eax
jne 0x1003d2c5
and dword [ebp - 0x7f8], 0
jmp 0x1003d2cf
mov dword [ebp - 0x7f8], 1
imul eax, dword [ebp - 0x7f8], 0x98ca
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0xcf0], eax
jmp 0x1003d260
mov dword [ebp - 0x30], 0x19
jmp 0x1003d2fb
mov eax, dword [ebp - 0x30]
dec eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xfffffff1
jge 0x1003d396
push 1
lea ecx, [ebp - 0xd44]
call fcn.10012956
mov dword [ebp - 4], 3
mov dword [ebp - 0x800], 0x67684593
mov dword [ebp - 0x50], 0
jmp 0x1003d333
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 1
jge 0x1003d34f
push dword [ebp - 0x50]
lea ecx, [ebp - 0xd44]
call fcn.100129c3
mov dword [eax], 0xef06
jmp 0x1003d32c
mov dword [ebp - 0x50], 0
jmp 0x1003d35f
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 3
jge 0x1003d375
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xf68], 0xb349387
jmp 0x1003d358
mov eax, dword [ebp - 0x800]
inc eax
mov dword [ebp - 0x800], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd44]
call fcn.100129be
jmp 0x1003d2f4
mov dword [ebp - 0x174], 0xffffffff
mov dword [ebp - 0x77c], 0xfffffffc
mov dword [ebp - 0x6f4], 0
mov dword [ebp - 0x174], 0
jmp 0x1003d3cd
mov eax, dword [ebp - 0x174]
dec eax
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0xffffffe7
je 0x1003d59c
mov dword [ebp - 0x1a4], 0xfffffffd
mov dword [ebp - 0x1a4], 0xe
jmp 0x1003d3fd
mov eax, dword [ebp - 0x1a4]
dec eax
mov dword [ebp - 0x1a4], eax
cmp dword [ebp - 0x1a4], 0xffffffed
jle 0x1003d56a
mov dword [ebp - 0xa2c], 3
mov dword [ebp - 0xa28], 3
mov dword [ebp - 0xa24], 3
mov dword [ebp - 0xa20], 3
mov dword [ebp - 0xa8], 1
mov dword [ebp - 0xa8], 0
jmp 0x1003d455
mov eax, dword [ebp - 0xa8]
inc eax
mov dword [ebp - 0xa8], eax
cmp dword [ebp - 0xa8], 3
jg 0x1003d565
mov dword [ebp - 0x98c], 0xbeab1d6a
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xa2c]
mov dword [ebp - 0xce4], eax
push 4
pop eax
shl eax, 0
imul eax, dword [ebp + eax - 0xa2c], 0xfffffff7
cmp eax, dword [ebp - 0x174]
jge 0x1003d4a1
mov dword [ebp - 0x3c0], 1
jmp 0x1003d4a8
and dword [ebp - 0x3c0], 0
mov eax, dword [ebp - 0x3c0]
mov dword [ebp - 0x77c], eax
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xa2c]
cmp eax, dword [ebp - 0x77c]
jg 0x1003d4d5
mov dword [ebp - 0x3ac], 1
jmp 0x1003d4dc
and dword [ebp - 0x3ac], 0
cmp dword [ebp - 0x3ac], 0x89d221e9
jb 0x1003d4f4
mov dword [ebp - 0x5dc], 1
jmp 0x1003d4fb
and dword [ebp - 0x5dc], 0
mov eax, dword [ebp - 0xa8]
mov eax, dword [ebp + eax*4 - 0xa2c]
cmp dword [ebp - 0x5dc], eax
jg 0x1003d51c
mov dword [ebp - 0x984], 1
jmp 0x1003d523
and dword [ebp - 0x984], 0
mov eax, dword [ebp - 0x6f4]
mov dword [ebp - 0xd90], eax
cmp dword [ebp - 0x98c], 0
je 0x1003d54d
cmp dword [ebp - 0xa8], 0
je 0x1003d54d
mov dword [ebp - 0x3b4], 1
jmp 0x1003d554
and dword [ebp - 0x3b4], 0
mov eax, dword [ebp - 0x3b4]
mov dword [ebp - 0x6f4], eax
jmp 0x1003d448
jmp 0x1003d3f0
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1003d597
push 0xf83
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Polygon]
jmp 0x1003d3c0
push 3
lea ecx, [ebp - 0xd54]
call fcn.10012956
mov dword [ebp - 4], 4
push 2
lea ecx, [ebp - 0x9c8]
call fcn.10012956
mov byte [ebp - 4], 5
mov dword [ebp - 0x2e8], 5
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0xbd4], 0xe280
mov dword [ebp - 0xbd0], 0xe280
mov dword [ebp - 0xbcc], 0xe280
mov dword [ebp - 0xbc8], 0xe280
mov dword [ebp - 0x274], 0
jmp 0x1003d616
mov eax, dword [ebp - 0x274]
inc eax
mov dword [ebp - 0x274], eax
cmp dword [ebp - 0x274], 2
jge 0x1003d635
push dword [ebp - 0x274]
lea ecx, [ebp - 0x9c8]
call fcn.100129c3
and dword [eax], 0
jmp 0x1003d609
push 0
lea ecx, [ebp - 0x9c8]
call fcn.100129c3
and dword [eax], 0
jmp 0x1003d66b
push 0
lea ecx, [ebp - 0x9c8]
call fcn.100129c3
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9c8]
call fcn.100129c3
cmp dword [eax], 0xfffffffa
jl 0x1003d8b9
mov dword [ebp - 0x154], 7
mov dword [ebp - 0xd8], 0xfffffff9
mov dword [ebp - 0xab8], 0xa6e4
mov dword [ebp - 0xab4], 0xa6e4
mov dword [ebp - 0xab0], 0xa6e4
mov dword [ebp - 0xaac], 0xa6e4
lea ecx, [ebp - 0x30d]
call fcn.100129d2
push eax
lea eax, [ebp - 0xaa8]
push eax
lea eax, [ebp - 0xab8]
push eax
lea ecx, [ebp - 0xedc]
call fcn.100129d5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa44]
call fcn.10012998
mov byte [ebp - 4], 6
mov dword [ebp - 0xbe4], 0x214d2fc5
mov dword [ebp - 0xbe0], 0x214d2fc5
mov dword [ebp - 0xbdc], 0x214d2fc5
mov dword [ebp - 0xbd8], 0x214d2fc5
mov eax, dword [ebp - 0x154]
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0
jle 0x1003d73f
mov dword [ebp - 0x5e4], 1
jmp 0x1003d746
and dword [ebp - 0x5e4], 0
mov eax, dword [ebp - 0x154]
cmp dword [ebp - 0x5e4], eax
jl 0x1003d760
mov dword [ebp - 0x3c4], 1
jmp 0x1003d767
and dword [ebp - 0x3c4], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x3c4], eax
jge 0x1003d781
mov dword [ebp - 0x7c4], 1
jmp 0x1003d788
and dword [ebp - 0x7c4], 0
mov eax, dword [ebp - 0x7c4]
shl eax, 3
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 0xfffffff6
je 0x1003d7ac
mov dword [ebp - 0x3cc], 1
jmp 0x1003d7b3
and dword [ebp - 0x3cc], 0
cmp dword [ebp - 0x3cc], 1
jg 0x1003d7c8
mov dword [ebp - 0x5ec], 1
jmp 0x1003d7cf
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x2e8], eax
mov eax, dword [ebp - 0x2e8]
mov dword [ebp - 0x16c], eax
mov esi, dword [ebp - 0x2e8]
push 2
lea ecx, [ebp - 0xa44]
call fcn.100129c3
push 4
pop ecx
shl ecx, 0
mov eax, dword [eax]
sub eax, dword [ebp + ecx - 0xbd4]
cmp esi, eax
jge 0x1003d819
mov dword [ebp - 0x9a0], 1
jmp 0x1003d820
and dword [ebp - 0x9a0], 0
push 1
lea ecx, [ebp - 0xa44]
call fcn.100129c3
push 1
lea ecx, [ebp - 0xa44]
call fcn.100129c3
mov ecx, dword [ebp - 0x154]
cmp dword [eax], ecx
je 0x1003d856
cmp dword [ebp - 0x154], 0
jne 0x1003d856
and dword [ebp - 0x3d4], 0
jmp 0x1003d860
mov dword [ebp - 0x3d4], 1
mov dword [ebp - 0xd8], 0x44ad
mov eax, dword [ebp - 0xd8]
imul eax, dword [ebp - 0x154]
cmp eax, dword [ebp - 0x3d4]
jge 0x1003d88b
mov dword [ebp - 0x6fc], 1
jmp 0x1003d892
and dword [ebp - 0x6fc], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp + eax - 0xbe4], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xa44]
call fcn.100129be
jmp 0x1003d647
mov dword [ebp - 0x16c], 0xffffffe9
jmp 0x1003d8d2
mov eax, dword [ebp - 0x16c]
inc eax
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 0xc
jle 0x1003d977
mov dword [ebp - 0x9a8], 0x7a0211e9
mov dword [ebp - 0x3dc], 1
mov byte [ebp - 0x111], 0
movzx eax, byte [ebp - 0x111]
test eax, eax
je 0x1003d91e
push 0x6da
push 0x341
push 0
push 0xb7b
push 0
call dword [sym.imp.SHELL32.dll_SHGetFileInfoW]
mov eax, dword [ebp - 0x9a8]
mov dword [ebp - 0x3dc], eax
cmp dword [ebp - 0x3dc], 0
je 0x1003d956
mov byte [ebp - 0xbe], 0
movzx eax, byte [ebp - 0xbe]
test eax, eax
je 0x1003d954
push 0
push 0x10d0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObjectEx]
jmp 0x1003d972
mov byte [ebp - 0xe1], 0
movzx eax, byte [ebp - 0xe1]
test eax, eax
je 0x1003d972
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
jmp 0x1003d8c5
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x9c8]
call fcn.100129be
mov dword [ebp - 0xc18], 0x3f7e813a
mov dword [ebp - 0x3f4], 9
mov dword [ebp - 0x5fc], 3
mov dword [ebp - 0x15c], 0xfd77ccca
mov dword [ebp - 0xc20], 0xfffffff9
mov dword [ebp - 0x68], 0
jmp 0x1003d9c8
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x1003d9de
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xe0], 0x1d925b0e
jmp 0x1003d9c1
mov dword [ebp - 0x68], 0
jmp 0x1003d9ee
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 2
jge 0x1003da04
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x8d0], 0xffffffff
jmp 0x1003d9e7
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe0], 0
jne 0x1003db9c
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x3f4], eax
jge 0x1003da39
mov dword [ebp - 0x5f4], 1
jmp 0x1003da40
and dword [ebp - 0x5f4], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x5f4], eax
jg 0x1003da61
mov dword [ebp - 0x3e4], 1
jmp 0x1003da68
and dword [ebp - 0x3e4], 0
cmp dword [ebp - 0x3e4], 0xcd2466e9
jbe 0x1003da80
mov dword [ebp - 0x784], 1
jmp 0x1003da87
and dword [ebp - 0x784], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp dword [ebp - 0x784], eax
jne 0x1003daa8
mov dword [ebp - 0x3ec], 1
jmp 0x1003daaf
and dword [ebp - 0x3ec], 0
mov eax, dword [ebp - 0x3ec]
mov dword [ebp - 0x5fc], eax
cmp dword [ebp - 0x5fc], 0
jne 0x1003dad6
mov eax, 0x623b
test eax, eax
jne 0x1003dad6
and dword [ebp - 0x9b0], 0
jmp 0x1003dae0
mov dword [ebp - 0x9b0], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0xc28], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
mov dword [ebp - 0xc30], eax
mov eax, 0x4c55
inc eax
cmp eax, 0x5f40
jg 0x1003db1f
mov dword [ebp - 0x704], 1
jmp 0x1003db26
and dword [ebp - 0x704], 0
mov eax, dword [ebp - 0x3f4]
imul eax, dword [ebp - 0x704]
add eax, dword [ebp - 0x15c]
jne 0x1003db4d
cmp dword [ebp - 0x15c], 0
jne 0x1003db4d
and dword [ebp - 0x3fc], 0
jmp 0x1003db57
mov dword [ebp - 0x3fc], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe0]
cmp eax, dword [ebp - 0x3fc]
jl 0x1003db78
mov dword [ebp - 0x604], 1
jmp 0x1003db7f
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x604]
sub eax, dword [ebp - 0x15c]
mov dword [ebp - 0x15c], eax
jne 0x1003db9c
and dword [ebp - 0x404], 0
jmp 0x1003dba6
mov dword [ebp - 0x404], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x404]
mov dword [ebp + eax - 0x8d0], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8d0], 0
je 0x1003dc09
mov dword [ebp - 0x9b8], 0xe1054d81
mov byte [ebp - 0xc0], 0
movzx eax, byte [ebp - 0xc0]
test eax, eax
je 0x1003dbf4
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x9b8]
mov dword [ebp + eax - 0x8d0], ecx
jmp 0x1003dc25
mov byte [ebp - 0x122], 0
movzx eax, byte [ebp - 0x122]
test eax, eax
je 0x1003dc25
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0xc38], 0xfffffff6
mov dword [ebp - 0xc40], 1
mov dword [ebp - 0xacc], 5
mov dword [ebp - 0xac8], 5
mov dword [ebp - 0xac4], 5
mov dword [ebp - 0xac0], 5
lea ecx, [ebp - 0x315]
call fcn.100129d2
push eax
lea eax, [ebp - 0xabc]
push eax
lea eax, [ebp - 0xacc]
push eax
lea ecx, [ebp - 0xe84]
call fcn.100129d5
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xa8c]
call fcn.10012998
mov byte [ebp - 4], 7
push 0
lea ecx, [ebp - 0xa8c]
call fcn.100129c3
mov dword [eax], 0xfffffff6
jmp 0x1003dcd3
push 0
lea ecx, [ebp - 0xa8c]
call fcn.100129c3
mov dword [ebp - 0x804], eax
mov eax, dword [ebp - 0x804]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x804]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0xa8c]
call fcn.100129c3
cmp dword [eax], 0xfffffffd
jg 0x1003dd22
mov byte [ebp - 0xc2], 0
movzx eax, byte [ebp - 0xc2]
test eax, eax
je 0x1003dd06
push 0xeb9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualQuery]
mov byte [ebp - 0xe9], 0
movzx eax, byte [ebp - 0xe9]
test eax, eax
je 0x1003dd20
push 0
call dword [sym.imp.KERNEL32.dll_EncodePointer]
jmp 0x1003dcaf
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xa8c]
call fcn.100129be
mov dword [ebp - 0x340], 0xdac3
mov dword [ebp - 0x94], 0
jmp 0x1003dd54
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1003dd70
mov eax, dword [ebp - 0x94]
mov dword [ebp + eax*4 - 0xe58], 0xffffffff
jmp 0x1003dd47
mov dword [ebp - 0x234], 2
mov dword [ebp - 0x1ac], 0
jmp 0x1003dd93
mov eax, dword [ebp - 0x1ac]
inc eax
mov dword [ebp - 0x1ac], eax
cmp dword [ebp - 0x1ac], 3
jge 0x1003ddaf
mov eax, dword [ebp - 0x1ac]
mov dword [ebp + eax*4 - 0xf5c], 0x1c08901
jmp 0x1003dd86
mov byte [ebp - 0xc4], 0
movzx eax, byte [ebp - 0xc4]
test eax, eax
je 0x1003ddd1
push 0x1e0b
push 0x2023
call dword [sym.imp.KERNEL32.dll_Beep]
mov dword [ebp - 0x234], 2
jmp 0x1003ddea
mov eax, dword [ebp - 0x234]
dec eax
mov dword [ebp - 0x234], eax
cmp dword [ebp - 0x234], 0
jl 0x1003de0c
mov dword [ebp - 0x40c], 0x1591
mov eax, dword [ebp - 0x40c]
inc eax
mov dword [ebp - 0x40c], eax
jmp 0x1003dddd
mov dword [ebp - 0x94], 0
jmp 0x1003de25
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 3
jge 0x1003de47
push dword [ebp - 0x94]
lea ecx, [ebp - 0xd54]
call fcn.100129c3
mov dword [eax], 0xadae8c9f
jmp 0x1003de18
mov eax, dword [ebp - 0x340]
mov dword [ebp - 0x8b4], eax
mov eax, dword [ebp - 0x340]
inc eax
mov dword [ebp - 0x340], eax
cmp dword [ebp - 0x8b4], 4
jne 0x1003de75
mov dword [ebp - 0x60c], 1
jmp 0x1003de7c
and dword [ebp - 0x60c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x60c]
mov dword [ebp + eax - 0xe58], ecx
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd54]
call fcn.100129be
push 1
lea ecx, [ebp - 0x83c]
call fcn.10012956
mov dword [ebp - 4], 8
mov dword [ebp - 0x1b4], 0
jmp 0x1003deca
mov eax, dword [ebp - 0x1b4]
inc eax
mov dword [ebp - 0x1b4], eax
cmp dword [ebp - 0x1b4], 1
jge 0x1003deec
push dword [ebp - 0x1b4]
lea ecx, [ebp - 0x83c]
call fcn.100129c3
mov dword [eax], 0x7e2799ac
jmp 0x1003debd
push 0
lea ecx, [ebp - 0x83c]
call fcn.100129c3
mov dword [eax], 0xfffffffe
jmp 0x1003df25
push 0
lea ecx, [ebp - 0x83c]
call fcn.100129c3
mov dword [ebp - 0x414], eax
mov eax, dword [ebp - 0x414]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x414]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x83c]
call fcn.100129c3
cmp dword [eax], 7
jge 0x1003df67
mov byte [ebp - 0x119], 0
movzx eax, byte [ebp - 0x119]
test eax, eax
je 0x1003df51
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0
lea ecx, [ebp - 0x83c]
call fcn.100129c3
cmp dword [eax], 0
je 0x1003df65
jmp 0x1003df67
jmp 0x1003df01
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x83c]
call fcn.100129be
mov dword [ebp - 0x17c], 0x53d8da8e
push 2
lea ecx, [ebp - 0x86c]
call fcn.10012956
mov dword [ebp - 4], 9
mov dword [ebp - 0x2f0], 0x598aaf0a
mov dword [ebp - 0x70c], 0x7e7c14ab
mov dword [ebp - 0x41c], 0xdab551fa
mov dword [ebp - 0x61c], 0xfffffff8
mov dword [ebp - 0x1bc], 1
mov dword [ebp - 0x714], 0xdd2e91c8
mov dword [ebp - 0x624], 0x38ca8c98
mov dword [ebp - 0x9fc], 0xc914a3a6
mov dword [ebp - 0xc48], 0x550e3526
mov dword [ebp - 0x2b4], 0
jmp 0x1003e007
mov eax, dword [ebp - 0x2b4]
inc eax
mov dword [ebp - 0x2b4], eax
cmp dword [ebp - 0x2b4], 2
jge 0x1003e029
push dword [ebp - 0x2b4]
lea ecx, [ebp - 0x86c]
call fcn.100129c3
mov dword [eax], 9
jmp 0x1003dffa
push 0
lea ecx, [ebp - 0x86c]
call fcn.100129c3
mov eax, dword [ebp - 0x17c]
sub eax, dword [ebp - 0x17c]
mov dword [ebp - 0x888], eax
push 0
lea ecx, [ebp - 0x86c]
call fcn.100129c3
mov ecx, dword [ebp - 0x888]
mov dword [eax], ecx
mov eax, dword [ebp - 0x17c]
mov dword [ebp - 0xc50], eax
mov eax, dword [ebp - 0x2f0]
dec eax
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x70c], 0xfffffff9
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x41c], eax
mov eax, dword [ebp - 0x2f0]
dec eax
cmp eax, dword [ebp - 0x41c]
jl 0x1003e0a7
mov dword [ebp - 0x614], 1
jmp 0x1003e0ae
and dword [ebp - 0x614], 0
mov eax, dword [ebp - 0x614]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x1bc], 1
jb 0x1003e0cf
mov dword [ebp - 0x424], 1
jmp 0x1003e0d6
and dword [ebp - 0x424], 0
cmp dword [ebp - 0x424], 0x1f90ef30
je 0x1003e0ee
mov dword [ebp - 0x78c], 1
jmp 0x1003e0f5
and dword [ebp - 0x78c], 0
mov eax, dword [ebp - 0x17c]
cmp dword [ebp - 0x78c], eax
je 0x1003e10f
mov dword [ebp - 0x42c], 1
jmp 0x1003e116
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x1bc]
cmp dword [ebp - 0x42c], eax
jl 0x1003e148
cmp dword [ebp - 0x61c], 0
jne 0x1003e148
push 1
lea ecx, [ebp - 0x86c]
call fcn.100129c3
cmp dword [eax], 0
jne 0x1003e148
and dword [ebp - 0x434], 0
jmp 0x1003e152
mov dword [ebp - 0x434], 1
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x714], eax
mov eax, dword [ebp - 0x714]
cmp dword [ebp - 0x17c], eax
je 0x1003e184
mov dword [ebp - 0x43c], 1
jmp 0x1003e18b
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x624], eax
cmp dword [ebp - 0x624], 0
je 0x1003e1be
mov byte [ebp - 0xc6], 0
movzx eax, byte [ebp - 0xc6]
test eax, eax
je 0x1003e1bc
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x1003e1de
mov dword [ebp - 0x988], 0xfff8
mov dword [ebp - 0x890], 0xfa8fad74
mov eax, dword [ebp - 0x988]
mov dword [ebp - 0x890], eax
mov esi, dword [ebp - 0x9fc]
push 0
lea ecx, [ebp - 0x86c]
call fcn.100129c3
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x86c]
call fcn.100129be
push 1
lea ecx, [ebp - 0x824]
call fcn.10012956
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x23c], 0
jmp 0x1003e22f
mov eax, dword [ebp - 0x23c]
inc eax
mov dword [ebp - 0x23c], eax
cmp dword [ebp - 0x23c], 1
jge 0x1003e251
push dword [ebp - 0x23c]
lea ecx, [ebp - 0x824]
call fcn.100129c3
mov dword [eax], 0x7e2799ac
jmp 0x1003e222
push 0
lea ecx, [ebp - 0x824]
call fcn.100129c3
mov dword [eax], 0xfffffffe
jmp 0x1003e28a
push 0
lea ecx, [ebp - 0x824]
call fcn.100129c3
mov dword [ebp - 0x444], eax
mov eax, dword [ebp - 0x444]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x444]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x824]
call fcn.100129c3
cmp dword [eax], 7
jge 0x1003e2cc
mov byte [ebp - 0xf1], 0
movzx eax, byte [ebp - 0xf1]
test eax, eax
je 0x1003e2b6
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0
lea ecx, [ebp - 0x824]
call fcn.100129c3
cmp dword [eax], 0
je 0x1003e2ca
jmp 0x1003e2cc
jmp 0x1003e266
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x824]
call fcn.100129be
mov dword [ebp - 0x45c], 9
mov dword [ebp - 0x71c], 3
mov dword [ebp - 0x140], 0xfd77ccca
mov dword [ebp - 0xc58], 0xfffffff9
mov dword [ebp - 0x70], 0
jmp 0x1003e313
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003e329
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xe8], 0x1d925b0e
jmp 0x1003e30c
mov dword [ebp - 0x70], 0
jmp 0x1003e339
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 2
jge 0x1003e34f
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x8dc], 0xffffffff
jmp 0x1003e332
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0
jne 0x1003e4e7
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x45c], eax
jge 0x1003e384
mov dword [ebp - 0x7cc], 1
jmp 0x1003e38b
and dword [ebp - 0x7cc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x7cc], eax
jg 0x1003e3ac
mov dword [ebp - 0x44c], 1
jmp 0x1003e3b3
and dword [ebp - 0x44c], 0
cmp dword [ebp - 0x44c], 0xcd2466e9
jbe 0x1003e3cb
mov dword [ebp - 0x62c], 1
jmp 0x1003e3d2
and dword [ebp - 0x62c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x62c], eax
jne 0x1003e3f3
mov dword [ebp - 0x454], 1
jmp 0x1003e3fa
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x71c], eax
cmp dword [ebp - 0x71c], 0
jne 0x1003e421
mov eax, 0x623b
test eax, eax
jne 0x1003e421
and dword [ebp - 0x898], 0
jmp 0x1003e42b
mov dword [ebp - 0x898], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0xc60], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
mov dword [ebp - 0xc68], eax
mov eax, 0x4c55
inc eax
cmp eax, 0x5f40
jg 0x1003e46a
mov dword [ebp - 0x634], 1
jmp 0x1003e471
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x45c]
imul eax, dword [ebp - 0x634]
add eax, dword [ebp - 0x140]
jne 0x1003e498
cmp dword [ebp - 0x140], 0
jne 0x1003e498
and dword [ebp - 0x464], 0
jmp 0x1003e4a2
mov dword [ebp - 0x464], 1
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xe8]
cmp eax, dword [ebp - 0x464]
jl 0x1003e4c3
mov dword [ebp - 0x794], 1
jmp 0x1003e4ca
and dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x794]
sub eax, dword [ebp - 0x140]
mov dword [ebp - 0x140], eax
jne 0x1003e4e7
and dword [ebp - 0x46c], 0
jmp 0x1003e4f1
mov dword [ebp - 0x46c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x46c]
mov dword [ebp + eax - 0x8dc], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8dc], 0
je 0x1003e554
mov dword [ebp - 0x908], 0xe1054d81
mov byte [ebp - 0xc8], 0
movzx eax, byte [ebp - 0xc8]
test eax, eax
je 0x1003e53f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x908]
mov dword [ebp + eax - 0x8dc], ecx
jmp 0x1003e570
mov byte [ebp - 0x123], 0
movzx eax, byte [ebp - 0x123]
test eax, eax
je 0x1003e570
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0xa4], 0xd837
mov dword [ebp - 0x328], 0xffff
mov dword [ebp - 0x1c4], 0
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x494], 2
mov dword [ebp - 0xc70], 0
mov dword [ebp - 0xc78], 0xe1c2a911
mov dword [ebp - 0xc80], 5
mov dword [ebp - 0x654], 0xffff
push 1
lea ecx, [ebp - 0xb60]
call fcn.10012956
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x90], 0
jmp 0x1003e5f7
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1003e613
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xf08], 0x56e3f0e2
jmp 0x1003e5ea
mov dword [ebp - 0x90], 0
jmp 0x1003e62c
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 1
jge 0x1003e64e
push dword [ebp - 0x90]
lea ecx, [ebp - 0xb60]
call fcn.100129c3
mov dword [eax], 0x3b6ac891
jmp 0x1003e61f
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0xa4], eax
je 0x1003e674
mov dword [ebp - 0x8a0], 1
jmp 0x1003e67b
and dword [ebp - 0x8a0], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc88], eax
cmp dword [ebp - 0xa4], 0xffffffff
je 0x1003e69c
mov dword [ebp - 0x63c], 1
jmp 0x1003e6a3
and dword [ebp - 0x63c], 0
cmp dword [ebp - 0x63c], 0x8c9d
jne 0x1003e6bb
mov dword [ebp - 0x474], 1
jmp 0x1003e6c2
and dword [ebp - 0x474], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x474], eax
jne 0x1003e6dc
mov dword [ebp - 0x724], 1
jmp 0x1003e6e3
and dword [ebp - 0x724], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x724], eax
jne 0x1003e6fd
mov dword [ebp - 0x47c], 1
jmp 0x1003e704
and dword [ebp - 0x47c], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x47c], eax
jle 0x1003e71e
mov dword [ebp - 0x644], 1
jmp 0x1003e725
and dword [ebp - 0x644], 0
mov eax, dword [ebp - 0x328]
cmp dword [ebp - 0x644], eax
jge 0x1003e73f
mov dword [ebp - 0x484], 1
jmp 0x1003e746
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0xa4]
cmp dword [ebp - 0x484], eax
jle 0x1003e760
mov dword [ebp - 0x7ec], 1
jmp 0x1003e767
and dword [ebp - 0x7ec], 0
imul eax, dword [ebp - 0x7ec], 0x791e
cmp eax, 3
jne 0x1003e782
mov dword [ebp - 0x90c], 1
jmp 0x1003e789
and dword [ebp - 0x90c], 0
mov eax, dword [ebp - 0x1c4]
mov dword [ebp - 0xc90], eax
mov dword [ebp - 0x2f8], 3
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x2f8], eax
jne 0x1003e7b9
mov dword [ebp - 0x48c], 1
jmp 0x1003e7c0
and dword [ebp - 0x48c], 0
cmp dword [ebp - 0x48c], 0x1a812c00
jge 0x1003e7d8
mov dword [ebp - 0x64c], 1
jmp 0x1003e7df
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x64c]
mov dword [ebp - 0x494], eax
cmp dword [ebp - 0x494], 0
jne 0x1003e809
cmp dword [ebp - 0x2f8], 0
jne 0x1003e809
mov dword [ebp - 0x72c], 1
jmp 0x1003e810
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x1c4]
cmp dword [ebp - 0x72c], eax
jg 0x1003e82a
mov dword [ebp - 0x8a8], 1
jmp 0x1003e831
and dword [ebp - 0x8a8], 0
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0xc98], eax
mov eax, 0xca3c47a
test eax, eax
je 0x1003e8cc
mov eax, 0x967684ab
test eax, eax
je 0x1003e8cc
mov dword [ebp - 0x49c], 3
mov dword [ebp - 0xca0], 0
mov dword [ebp - 0xca8], 0xffffffff
mov dword [ebp - 0xcb0], 6
mov dword [ebp - 0x27c], 0
jmp 0x1003e894
mov eax, dword [ebp - 0x27c]
inc eax
mov dword [ebp - 0x27c], eax
cmp dword [ebp - 0x27c], 2
jge 0x1003e8b0
mov eax, dword [ebp - 0x27c]
mov dword [ebp + eax*4 - 0xee4], 0x87697ab8
jmp 0x1003e887
mov eax, dword [ebp - 0x49c]
dec eax
mov dword [ebp - 0x49c], eax
mov eax, dword [ebp - 0x654]
inc eax
mov dword [ebp - 0x654], eax
jmp 0x1003e918
mov dword [ebp - 0x4a4], 0xc25c
mov dword [ebp - 0x1cc], 0
jmp 0x1003e8ef
mov eax, dword [ebp - 0x1cc]
inc eax
mov dword [ebp - 0x1cc], eax
cmp dword [ebp - 0x1cc], 4
jge 0x1003e90b
mov eax, dword [ebp - 0x1cc]
mov dword [ebp + eax*4 - 0xf78], 1
jmp 0x1003e8e2
mov eax, dword [ebp - 0x4a4]
dec eax
mov dword [ebp - 0x4a4], eax
push 0
lea ecx, [ebp - 0xb60]
call fcn.100129c3
mov dword [ebp - 0x79c], eax
mov eax, dword [ebp - 0x79c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x79c]
mov dword [ecx], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb60]
call fcn.100129be
mov dword [ebp - 0x144], 0x53d8da8e
push 2
lea ecx, [ebp - 0x830]
call fcn.10012956
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x350], 0x598aaf0a
mov dword [ebp - 0x4ac], 0x7e7c14ab
mov dword [ebp - 0x65c], 0xdab551fa
mov dword [ebp - 0x4c4], 0xfffffff8
mov dword [ebp - 0x1d4], 1
mov dword [ebp - 0x4cc], 0xdd2e91c8
mov dword [ebp - 0x4d4], 0x38ca8c98
mov dword [ebp - 0x8b8], 0xc914a3a6
mov dword [ebp - 0xcb8], 0x550e3526
mov dword [ebp - 0x244], 0
jmp 0x1003e9dc
mov eax, dword [ebp - 0x244]
inc eax
mov dword [ebp - 0x244], eax
cmp dword [ebp - 0x244], 2
jge 0x1003e9fe
push dword [ebp - 0x244]
lea ecx, [ebp - 0x830]
call fcn.100129c3
mov dword [eax], 9
jmp 0x1003e9cf
push 0
lea ecx, [ebp - 0x830]
call fcn.100129c3
mov eax, dword [ebp - 0x144]
sub eax, dword [ebp - 0x144]
mov dword [ebp - 0x914], eax
push 0
lea ecx, [ebp - 0x830]
call fcn.100129c3
mov ecx, dword [ebp - 0x914]
mov dword [eax], ecx
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0xcc0], eax
mov eax, dword [ebp - 0x350]
dec eax
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x4ac], 0xfffffff9
mov eax, dword [ebp - 0x4ac]
mov dword [ebp - 0x65c], eax
mov eax, dword [ebp - 0x350]
dec eax
cmp eax, dword [ebp - 0x65c]
jl 0x1003ea7c
mov dword [ebp - 0x4b4], 1
jmp 0x1003ea83
and dword [ebp - 0x4b4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x4c4], eax
cmp dword [ebp - 0x1d4], 1
jb 0x1003eaa4
mov dword [ebp - 0x734], 1
jmp 0x1003eaab
and dword [ebp - 0x734], 0
cmp dword [ebp - 0x734], 0x1f90ef30
je 0x1003eac3
mov dword [ebp - 0x4bc], 1
jmp 0x1003eaca
and dword [ebp - 0x4bc], 0
mov eax, dword [ebp - 0x144]
cmp dword [ebp - 0x4bc], eax
je 0x1003eae4
mov dword [ebp - 0x664], 1
jmp 0x1003eaeb
and dword [ebp - 0x664], 0
mov eax, dword [ebp - 0x1d4]
cmp dword [ebp - 0x664], eax
jl 0x1003eb1d
cmp dword [ebp - 0x4c4], 0
jne 0x1003eb1d
push 1
lea ecx, [ebp - 0x830]
call fcn.100129c3
cmp dword [eax], 0
jne 0x1003eb1d
and dword [ebp - 0x7d4], 0
jmp 0x1003eb27
mov dword [ebp - 0x7d4], 1
mov eax, dword [ebp - 0x7d4]
mov dword [ebp - 0x1d4], eax
mov eax, dword [ebp - 0x1d4]
mov dword [ebp - 0x4cc], eax
mov eax, dword [ebp - 0x4cc]
cmp dword [ebp - 0x144], eax
je 0x1003eb59
mov dword [ebp - 0x66c], 1
jmp 0x1003eb60
and dword [ebp - 0x66c], 0
mov eax, dword [ebp - 0x66c]
mov dword [ebp - 0x4d4], eax
cmp dword [ebp - 0x4d4], 0
je 0x1003eb93
mov byte [ebp - 0xca], 0
movzx eax, byte [ebp - 0xca]
test eax, eax
je 0x1003eb91
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyA]
jmp 0x1003ebb3
mov dword [ebp - 0x8b0], 0xfff8
mov dword [ebp - 0x91c], 0xfa8fad74
mov eax, dword [ebp - 0x8b0]
mov dword [ebp - 0x91c], eax
mov esi, dword [ebp - 0x8b8]
push 0
lea ecx, [ebp - 0x830]
call fcn.100129c3
mov dword [eax], esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x830]
call fcn.100129be
mov dword [ebp - 0xf0], 0xfffffff8
mov dword [ebp - 0x148], 0xfffffff7
mov dword [ebp - 0x92c], 0x5d06f629
mov dword [ebp - 0xf0], 0xfffffffb
jmp 0x1003ec0e
mov eax, dword [ebp - 0xf0]
dec eax
mov dword [ebp - 0xf0], eax
cmp dword [ebp - 0xf0], 0xfffffff8
jle 0x1003ed94
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x934], 0xaf1e2cd8
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xcc8], eax
cmp dword [ebp - 0x148], 0xfffe
jne 0x1003ec50
mov dword [ebp - 0x73c], 1
jmp 0x1003ec57
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x73c]
cmp eax, dword [ebp - 0xf0]
jg 0x1003ec74
mov dword [ebp - 0x924], 1
jmp 0x1003ec7b
and dword [ebp - 0x924], 0
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xcd0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0xcd8], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xce0], eax
mov eax, 0xbf7c2f5a
sub eax, dword [ebp - 0x148]
neg eax
add eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x40]
jne 0x1003ecb5
cmp dword [ebp - 0x40], 0
imul eax, dword [ebp - 0x40], 0xdacb
cmp eax, 0xffff
jae 0x1003eccf
mov dword [ebp - 0x4dc], 1
jmp 0x1003ecd6
and dword [ebp - 0x4dc], 0
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x4dc], eax
jg 0x1003eced
mov dword [ebp - 0x674], 1
jmp 0x1003ecf4
and dword [ebp - 0x674], 0
mov eax, dword [ebp - 0x148]
cmp dword [ebp - 0x674], eax
jl 0x1003ed0e
mov dword [ebp - 0x4e4], 1
jmp 0x1003ed15
and dword [ebp - 0x4e4], 0
cmp dword [ebp - 0x4e4], 0x74006310
jg 0x1003ed2d
mov dword [ebp - 0x7a4], 1
jmp 0x1003ed34
and dword [ebp - 0x7a4], 0
mov eax, dword [ebp - 0x40]
cmp eax, dword [ebp - 0x7a4]
jg 0x1003ed4b
mov dword [ebp - 0x8c0], 1
jmp 0x1003ed52
and dword [ebp - 0x8c0], 0
mov eax, dword [ebp - 0x92c]
mov dword [ebp - 0xce8], eax
cmp dword [ebp - 0x40], 0xffff
je 0x1003ed73
mov dword [ebp - 0x8c8], 1
jmp 0x1003ed7a
and dword [ebp - 0x8c8], 0
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0xcf4], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x934], eax
jmp 0x1003ec01
mov byte [ebp - 0xf9], 0
movzx eax, byte [ebp - 0xf9]
test eax, eax
je 0x1003edba
push 0x117c
push 0
push 0x1a01
push 0
call dword [sym.imp.USER32.dll_LoadStringA]
mov dword [ebp - 0x10], 0x30f94f37
mov dword [ebp - 0x12c], 0x64de8cc1
mov dword [ebp - 0x78], 0
jmp 0x1003eddb
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1003edee
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x28], 0xcf57
jmp 0x1003edd4
mov dword [ebp - 0x78], 0
jmp 0x1003edfe
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 1
jge 0x1003ee14
mov eax, dword [ebp - 0x78]
mov dword [ebp + eax*4 - 0x330], 0x52324067
jmp 0x1003edf7
mov byte [ebp - 0xcc], 0
movzx eax, byte [ebp - 0xcc]
test eax, eax
je 0x1003ee30
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x10], 0
jmp 0x1003ee40
cmp dword [ebp - 0x10], 0
jg 0x1003f122
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x28], 0
je 0x1003ee59
jmp 0x1003f122
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x28]
dec eax
dec eax
mov ecx, dword [ebp - 0x10]
cmp eax, dword [ebp + ecx*4 - 0x28]
jne 0x1003ee77
mov dword [ebp - 0x4ec], 1
jmp 0x1003ee7e
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4ec], eax
jge 0x1003ee95
mov dword [ebp - 0x67c], 1
jmp 0x1003ee9c
and dword [ebp - 0x67c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x67c], eax
jge 0x1003eeb7
mov dword [ebp - 0x4f4], 1
jmp 0x1003eebe
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x4f4], eax
je 0x1003eed5
mov dword [ebp - 0x744], 1
jmp 0x1003eedc
and dword [ebp - 0x744], 0
cmp dword [ebp - 0x744], 0
ja 0x1003eef1
mov dword [ebp - 0x4fc], 1
jmp 0x1003eef8
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jne 0x1003ef20
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x28], 0
jne 0x1003ef20
and dword [ebp - 0x684], 0
jmp 0x1003ef2a
mov dword [ebp - 0x684], 1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x28]
cmp dword [ebp - 0x684], eax
je 0x1003ef45
mov dword [ebp - 0x504], 1
jmp 0x1003ef4c
and dword [ebp - 0x504], 0
mov eax, dword [ebp - 0x10]
cmp dword [ebp - 0x504], eax
jge 0x1003ef6c
mov eax, 0x7dfcc86f
test eax, eax
je 0x1003ef6c
mov dword [ebp - 0x7fc], 1
jmp 0x1003ef73
and dword [ebp - 0x7fc], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x28]
cmp eax, dword [ebp - 0x7fc]
jne 0x1003ef91
mov dword [ebp - 0x300], 1
jmp 0x1003ef98
and dword [ebp - 0x300], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x300]
mov dword [ebp + eax - 0x330], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x28]
add eax, dword [ebp - 0x300]
je 0x1003efcc
cmp dword [ebp - 0x10], 0
je 0x1003efcc
and dword [ebp - 0x50c], 0
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x28]
cmp eax, dword [ebp - 0x50c]
jne 0x1003efee
push 1
lea ecx, [ebp - 0x848]
call fcn.10012956
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x29c], 0
jmp 0x1003f14f
mov eax, dword [ebp - 0x29c]
inc eax
mov dword [ebp - 0x29c], eax
cmp dword [ebp - 0x29c], 1
jge 0x1003f171
push dword [ebp - 0x29c]
lea ecx, [ebp - 0x848]
call fcn.100129c3
mov dword [eax], 0x7e2799ac
jmp 0x1003f142
push 0
lea ecx, [ebp - 0x848]
call fcn.100129c3
mov dword [eax], 0xfffffffe
jmp 0x1003f1aa
push 0
lea ecx, [ebp - 0x848]
call fcn.100129c3
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x524]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x848]
call fcn.100129c3
cmp dword [eax], 7
jge 0x1003f1ec
mov byte [ebp - 0xce], 0
movzx eax, byte [ebp - 0xce]
test eax, eax
je 0x1003f1d6
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0
lea ecx, [ebp - 0x848]
call fcn.100129c3
cmp dword [eax], 0
je 0x1003f1ea
jmp 0x1003f1ec
jmp 0x1003f186
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x848]
call fcn.100129be
mov dword [ebp - 0x53c], 9
mov dword [ebp - 0x754], 3
mov dword [ebp - 0x150], 0xfd77ccca
mov dword [ebp - 0xcfc], 0xfffffff9
mov dword [ebp - 0x88], 0
jmp 0x1003f23c
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 1
jge 0x1003f258
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0xf8], 0x1d925b0e
jmp 0x1003f22f
mov dword [ebp - 0x88], 0
jmp 0x1003f271
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 2
jge 0x1003f28d
mov eax, dword [ebp - 0x88]
mov dword [ebp + eax*4 - 0x8e8], 0xffffffff
jmp 0x1003f264
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xf8], 0
jne 0x1003f425
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x53c], eax
jge 0x1003f2c2
mov dword [ebp - 0x7ac], 1
jmp 0x1003f2c9
and dword [ebp - 0x7ac], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xf8]
cmp dword [ebp - 0x7ac], eax
jg 0x1003f2ea
mov dword [ebp - 0x52c], 1
jmp 0x1003f2f1
and dword [ebp - 0x52c], 0
cmp dword [ebp - 0x52c], 0xcd2466e9
jbe 0x1003f309
mov dword [ebp - 0x54c], 1
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x54c]
mov dword [ebp + eax - 0x8e8], ecx
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0x8e8], 0
je 0x1003f492
mov dword [ebp - 0x8e0], 0xe1054d81
mov byte [ebp - 0x101], 0
movzx eax, byte [ebp - 0x101]
test eax, eax
je 0x1003f47d
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowInfo]
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x8e0]
mov dword [ebp + eax - 0x8e8], ecx
jmp 0x1003f4ae
mov byte [ebp - 0xae], 0
movzx eax, byte [ebp - 0xae]
test eax, eax
je 0x1003f4ae
push 0
push 0
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [ebp - 0x100], 0xfffffff8
mov dword [ebp - 0x158], 0xfffffff7
mov dword [ebp - 0x94c], 0x5d06f629
mov dword [ebp - 0x100], 0xfffffffb
jmp 0x1003f4e5