Function at 0x1002e804
Capabilities:
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10057f55
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x3a4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x274], 0x4c8d3c89
mov dword [ebp - 0x5c], 0
jmp 0x1002e84a
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xffffffef
jle 0x1002e88b
mov dword [ebp - 0x70], 0
jmp 0x1002e860
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1002e876
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x270], 0x74dd0324
jmp 0x1002e859
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x270]
mov dword [ebp - 0x274], eax
jmp 0x1002e843
mov dword [ebp - 0x5c], 1
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa0], 0
jmp 0x1002e8b5
mov eax, dword [ebp - 0xa0]
inc eax
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 4
jge 0x1002e8d1
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x3b4], 0xc93b4e1
jmp 0x1002e8a8
mov dword [ebp - 0x98], 0
jmp 0x1002e8ea
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 3
jg 0x1002e923
mov byte [ebp - 0x3e], 0
movzx eax, byte [ebp - 0x3e]
test eax, eax
je 0x1002e907
push 0
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov byte [ebp - 0x3d], 0
movzx eax, byte [ebp - 0x3d]
test eax, eax
je 0x1002e921
push 0
push 0
push 0
push 0
call dword [sym.imp.ADVAPI32.dll_RegGetKeySecurity]
jmp 0x1002e8dd
movzx eax, byte [0x10442db5]
test eax, eax
je 0x1002e941
mov esi, 0x10070d4c
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
jmp 0x100301c6
mov dword [ebp - 0x2e0], 0xfffffffc
mov dword [ebp - 0x2dc], 0xfffffffc
mov dword [ebp - 0x2d8], 0xfffffffc
mov dword [ebp - 0x2d4], 0xfffffffc
lea ecx, [ebp - 0xd1]
call fcn.10006467
push eax
lea eax, [ebp - 0x2d0]
push eax
lea eax, [ebp - 0x2e0]
push eax
lea ecx, [ebp - 0x384]
call fcn.1000646a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf4]
call fcn.10006416
and dword [ebp - 4], 0
mov dword [ebp - 0x18], 0x6673e7ed
mov dword [ebp - 0x2f4], 4
mov dword [ebp - 0x2f0], 4
mov dword [ebp - 0x2ec], 4
mov dword [ebp - 0x2e8], 4
lea ecx, [ebp - 0xc1]
call fcn.10006467
push eax
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x2f4]
push eax
lea ecx, [ebp - 0x38c]
call fcn.1000646a
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x300]
call fcn.10006416
mov byte [ebp - 4], 1
mov dword [ebp - 0x80], 0
jmp 0x1002ea1a
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1002ea30
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x334], 0xfffffffc
jmp 0x1002ea13
push 0
lea ecx, [ebp - 0xf4]
call fcn.10006458
mov esi, eax
push 3
lea ecx, [ebp - 0xf4]
call fcn.10006458
mov eax, dword [eax]
cmp eax, dword [esi]
jl 0x1002ea5e
mov dword [ebp - 0x254], 1
jmp 0x1002ea65
and dword [ebp - 0x254], 0
push 1
lea ecx, [ebp - 0xf4]
call fcn.10006458
cmp dword [eax], 0
jne 0x1002ea92
push 1
lea ecx, [ebp - 0xf4]
call fcn.10006458
cmp dword [eax], 0
jne 0x1002ea92
and dword [ebp - 0x260], 0
jmp 0x1002ea9c
mov dword [ebp - 0x260], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x260]
mov dword [ebp + eax - 0x334], ecx
push 3
lea ecx, [ebp - 0xf4]
call fcn.10006458
cmp dword [eax], 5
jbe 0x1002eacd
mov dword [ebp - 0x244], 1
jmp 0x1002ead4
and dword [ebp - 0x244], 0
mov eax, dword [ebp - 0x244]
mov dword [ebp - 0x18], eax
push 3
lea ecx, [ebp - 0x300]
call fcn.10006458
mov esi, eax
push 3
lea ecx, [ebp - 0xf4]
call fcn.10006458
mov eax, dword [eax]
mov dword [esi], eax
push 0
lea ecx, [ebp - 0xf4]
call fcn.10006458
mov ecx, dword [ebp - 0x254]
cmp ecx, dword [eax]
jle 0x1002ecf0
mov byte [ebp - 0x3f], 0
movzx eax, byte [ebp - 0x3f]
test eax, eax
je 0x1002eb31
push 0
push 0x26b9
call dword [sym.imp.USER32.dll_GetWindowRect]
mov dword [ebp - 0x18], 0xe
jmp 0x1002eb41
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff7
jne 0x1002ecee
mov dword [ebp - 0x2a4], 0x4d
mov dword [ebp - 0x25c], 0x3eb3
mov dword [ebp - 0x29c], str.cbngw_ildgc_naxyvjf_eufogjkv_srqz
cmp dword [ebp - 0x25c], 0x4143
jle 0x1002ec61
push 0
push 0x6f8
call dword [sym.imp.USER32.dll_GetWindowInfo]
and dword [ebp - 0xa4], 0
jmp 0x1002eb9c
mov eax, dword [ebp - 0xa4]
inc eax
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x76c6
jge 0x1002ec61
and dword [ebp - 0x94], 0
jmp 0x1002ebc2
mov eax, dword [ebp - 0x94]
inc eax
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x572c
jge 0x1002ec5c
and dword [ebp - 0xac], 0
jmp 0x1002ebe8
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x7dc6
jge 0x1002ec57
and dword [ebp - 0x8c], 0
jmp 0x1002ec0a
mov eax, dword [ebp - 0x8c]
inc eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x5ac3
jge 0x1002ec55
mov eax, dword [ebp - 0xac]
add eax, dword [ebp - 0x8c]
mov ecx, dword [ebp - 0xa4]
add ecx, dword [ebp - 0x94]
or eax, ecx
cdq
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x278], edx
push dword [ebp - 0x278]
push dword [ebp - 0x27c]
mov ecx, 0x10071338
call fcn.100060aa
jmp 0x1002ebfd
jmp 0x1002ebdb
jmp 0x1002ebb5
jmp 0x1002eb8f
mov dword [ebp - 0x264], 0x5c29478c
mov byte [ebp - 4], 2
cmp dword [ebp - 0x25c], 0x3c4b
jge 0x1002ec8b
mov edx, dword [ebp - 0x29c]
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1002eca7
mov dword [ebp - 4], 1
jmp 0x1002ecb7
mov dword [ebp - 0x2ac], 0xe5849968
push 0
lea ecx, [ebp - 0xf4]
call fcn.10006458
xor eax, eax
inc eax
sub eax, dword [ebp - 0x2a4]
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x2ac], eax
jmp 0x1002eb3a
jmp 0x1002ed25
mov dword [ebp - 0x18], 0
jmp 0x1002ed00
mov eax, dword [ebp - 0x18]
dec eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0xfffffff0
je 0x1002ed25
mov byte [ebp - 0x3c], 0
movzx eax, byte [ebp - 0x3c]
test eax, eax
je 0x1002ed23
push 0
push 0x8c4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
jmp 0x1002ecf9
mov dword [ebp - 0x18], 3
jmp 0x1002ed35
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 7
je 0x1002ed70
mov dword [ebp - 0x50], 1
mov dword [ebp - 0x50], 0
jmp 0x1002ed52
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1002ed6e
push dword [ebp - 0x50]
lea ecx, [ebp - 0x300]
call fcn.10006458
mov dword [eax], 4
jmp 0x1002ed4b
jmp 0x1002ed2e
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x300]
call fcn.1000643c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xf4]
call fcn.1000643c
mov dword [ebp - 0x338], 0x10070d4c
mov dword [ebp - 0x34c], 0x10070d50
mov dword [ebp - 0x26c], 0xfffffffe
mov dword [ebp - 0x58], 1
mov dword [ebp - 0x1dc], 0xedd1edb6
push 4
lea ecx, [ebp - 0x324]
call fcn.100063b9
mov dword [ebp - 4], 4
mov dword [ebp - 0x354], 0
mov dword [ebp - 0x13c], 0xfa9dfeee
mov dword [ebp - 0x2c], 0
jmp 0x1002edf5
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 2
jge 0x1002ee0b
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xc0], 0xffffffff
jmp 0x1002edee
mov dword [ebp - 0x2c], 0
jmp 0x1002ee1b
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 4
jge 0x1002ee37
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x324]
call fcn.10006458
mov dword [eax], 0xb6ba00b6
jmp 0x1002ee14
mov dword [ebp - 0x26c], 3
cmp dword [ebp - 0x26c], 0x68aa
jge 0x1002ee59
mov dword [ebp - 0x2b4], 1
jmp 0x1002ee60
and dword [ebp - 0x2b4], 0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x360], eax
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
mov dword [ebp - 0x358], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp + eax - 0xc0]
test ecx, ecx
jg 0x1002ee9c
mov dword [ebp - 0x10c], 1
jmp 0x1002eea3
and dword [ebp - 0x10c], 0
cmp dword [ebp - 0x10c], 5
jl 0x1002eec4
cmp dword [ebp - 0x58], 0
jne 0x1002eec4
mov eax, 0x42573927
test eax, eax
jne 0x1002eec4
and dword [ebp - 0x1c4], 0
jmp 0x1002eece
mov dword [ebp - 0x1c4], 1
cmp dword [ebp - 0x1c4], 0x1078
jne 0x1002eee6
mov dword [ebp - 0x114], 1
jmp 0x1002eeed
and dword [ebp - 0x114], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
cmp eax, dword [ebp - 0x114]
jne 0x1002ef0e
mov dword [ebp - 0x1cc], 1
jmp 0x1002ef15
and dword [ebp - 0x1cc], 0
mov eax, dword [ebp - 0x1cc]
sub eax, dword [ebp - 0x58]
je 0x1002ef3c
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xc0], 0
je 0x1002ef3c
mov dword [ebp - 0x11c], 1
jmp 0x1002ef43
and dword [ebp - 0x11c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
cmp dword [ebp - 0x11c], eax
je 0x1002ef64
mov dword [ebp - 0x1d4], 1
jmp 0x1002ef6b
and dword [ebp - 0x1d4], 0
cmp dword [ebp - 0x1d4], 0xe467b47e
jb 0x1002ef83
mov dword [ebp - 0x124], 1
jmp 0x1002ef8a
and dword [ebp - 0x124], 0
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
cmp eax, dword [ebp - 0x58]
je 0x1002efad
mov dword [ebp - 0x12c], 1
jmp 0x1002efb4
and dword [ebp - 0x12c], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
cmp eax, dword [ebp - 0x12c]
je 0x1002efd5
mov dword [ebp - 0x1e4], 1
jmp 0x1002efdc
and dword [ebp - 0x1e4], 0
cmp dword [ebp - 0x1e4], 0x47825498
jle 0x1002eff4
mov dword [ebp - 0x134], 1
jmp 0x1002effb
and dword [ebp - 0x134], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0xc0]
cmp dword [ebp - 0x134], eax
je 0x1002f01c
mov dword [ebp - 0x1ec], 1
jmp 0x1002f023
and dword [ebp - 0x1ec], 0
push 4
pop eax
shl eax, 0
mov esi, dword [ebp + eax - 0xc0]
imul esi, dword [ebp - 0x1ec]
push 3
lea ecx, [ebp - 0x324]
call fcn.10006458
mov dword [eax], esi
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x324]
call fcn.1000643c
mov byte [0x10442db5], 1
xor eax, eax
inc eax
imul eax, eax, 0x148
add eax, 0x10070840
mov dword [ebp - 0x140], eax
mov dword [ebp - 0xdc], 0xfffc
mov dword [ebp - 0x30], 5
mov dword [ebp - 0xd8], 0x935ff574
mov dword [ebp - 0x16c], 0x7e91c178
mov dword [ebp - 0xb4], 0
jmp 0x1002f0bb
mov eax, dword [ebp - 0xb4]
inc eax
mov dword [ebp - 0xb4], eax
cmp dword [ebp - 0xb4], 3
jge 0x1002f0d7
mov eax, dword [ebp - 0xb4]
mov dword [ebp + eax*4 - 0x100], 0x64a6847d
jmp 0x1002f0ae
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x100], 0xffffffea
jmp 0x1002f105
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
inc eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x100], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 9
jg 0x1002f17c
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x9c], 0
jmp 0x1002f135
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 3
jge 0x1002f151
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x370], 0
jmp 0x1002f128
mov dword [ebp - 0x54], 0
jmp 0x1002f161
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1002f177
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x370], 0xa5043c4a
jmp 0x1002f15a
jmp 0x1002f0ea
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x348], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0xdc]
dec eax
mov dword [ebp - 0xdc], eax
cmp dword [ebp - 0x2bc], 0x31f145ba
jne 0x1002f1c0
mov dword [ebp - 0x20c], 1
jmp 0x1002f1c7
and dword [ebp - 0x20c], 0
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jle 0x1002f1db
mov dword [ebp - 0x1f4], 1
jmp 0x1002f1e2
and dword [ebp - 0x1f4], 0
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x1f4]
cmp eax, dword [ebp - 0x30]
jle 0x1002f1fd
mov dword [ebp - 0x1fc], 1
jmp 0x1002f204
and dword [ebp - 0x1fc], 0
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x144], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x144]
mov dword [ebp + eax - 0x100], ecx
mov eax, dword [ebp - 0x144]
cmp eax, dword [ebp - 0x1fc]
jle 0x1002f243
mov dword [ebp - 0x14c], 1
jmp 0x1002f24a
and dword [ebp - 0x14c], 0
cmp dword [ebp - 0x14c], 0xfffc
jbe 0x1002f262
mov dword [ebp - 0x204], 1
jmp 0x1002f269
and dword [ebp - 0x204], 0
imul eax, dword [ebp - 0x204], 0xd015
cmp eax, dword [ebp - 0xd8]
jle 0x1002f287
mov dword [ebp - 0x154], 1
jmp 0x1002f28e
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0xd8]
cmp dword [ebp - 0x154], eax
jge 0x1002f2a8
mov dword [ebp - 0x15c], 1
jmp 0x1002f2af
and dword [ebp - 0x15c], 0
mov eax, dword [ebp - 0x20c]
cmp eax, dword [ebp - 0x15c]
jge 0x1002f2c9
mov dword [ebp - 0x214], 1
jmp 0x1002f2d0
and dword [ebp - 0x214], 0
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x214]
imul eax, dword [ebp - 0xd8]
cmp eax, dword [ebp - 0x30]
jle 0x1002f2f1
mov dword [ebp - 0x164], 1
jmp 0x1002f2f8
and dword [ebp - 0x164], 0
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x164], eax
jge 0x1002f30f
mov dword [ebp - 0x2b0], 1
jmp 0x1002f316
and dword [ebp - 0x2b0], 0
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x35c], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x100], 0
je 0x1002f340
xor eax, eax
inc eax
je 0x1002f340
mov dword [ebp - 0x21c], 1
jmp 0x1002f347
and dword [ebp - 0x21c], 0
mov eax, dword [ebp - 0x21c]
mov dword [ebp - 0x16c], eax
cmp dword [ebp - 0x16c], 5
jge 0x1002f368
mov dword [ebp - 0x280], 1
jmp 0x1002f36f
and dword [ebp - 0x280], 0
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x100]
mov dword [ebp - 0x30], eax
xor eax, eax
inc eax
imul eax, eax, 0x1c
add eax, 0x10070840
mov dword [ebp - 0xcc], eax
push 3
lea ecx, [ebp - 0x6c]
call fcn.100063b9
mov dword [ebp - 4], 5
mov dword [ebp - 0x174], 0x978f3c34
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x224], 0x505b
mov dword [ebp - 0x2b8], str.rxfm_rwvidwb_syhnj_ywc_lcrfefgy_wrk_uxiiumldw_ileeouuna_xbaweyxbs_pzgzb_tsicytpg_igebwn
cmp dword [ebp - 0x224], 0x533c
jle 0x1002f44e
and dword [ebp - 0x7c], 0
jmp 0x1002f3e2
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0x6c87
jge 0x1002f440
and dword [ebp - 0x88], 0
jmp 0x1002f401
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x3166
jge 0x1002f43e
mov eax, dword [ebp - 0x7c]
cdq
idiv dword [ebp - 0x88]
mov eax, edx
cdq
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], edx
push dword [ebp - 0x284]
push dword [ebp - 0x288]
mov ecx, 0x10071338
call fcn.100060aa
jmp 0x1002f3f4
jmp 0x1002f3db
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0x1f8], 0xfffffffd
mov byte [ebp - 4], 6
cmp dword [ebp - 0x224], 0x4da1
jge 0x1002f478
mov edx, dword [ebp - 0x2b8]
mov ecx, 0x10071338
call fcn.1000aac1
jmp 0x1002f494
mov dword [ebp - 4], 5
jmp 0x1002f4a4
mov dword [ebp - 0x28c], 0xec0d
mov dword [ebp - 0x104], 0xfffffff9
push 1
lea ecx, [ebp - 0x318]
call fcn.100063b9
mov byte [ebp - 4], 8
mov dword [ebp - 0x20], 0
jmp 0x1002f4d9
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002f4f2
push dword [ebp - 0x20]
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov dword [eax], 0x114768c0
jmp 0x1002f4d2
mov dword [ebp - 0x20], 0
jmp 0x1002f502
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1002f51b
push dword [ebp - 0x20]
lea ecx, [ebp - 0x318]
call fcn.10006458
or dword [eax], 0xffffffff
jmp 0x1002f4fb
mov byte [ebp - 0x3a], 0
movzx eax, byte [ebp - 0x3a]
test eax, eax
je 0x1002f543
push 1
push 0x16af
push 0x2608
push 0x24da
push 0xd08
call dword [sym.imp.USER32.dll_SetScrollRange]
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
cmp dword [eax], 0
je 0x1002f579
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov eax, dword [eax]
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
je 0x1002f579
mov dword [ebp - 0x1a8], 1
jmp 0x1002f580
and dword [ebp - 0x1a8], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
cmp dword [eax], 0
jne 0x1002f726
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov eax, dword [eax]
add eax, 0xfffe
mov dword [ebp - 0x22c], 1
jmp 0x1002f5b7
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov ecx, dword [ebp - 0x22c]
cmp ecx, dword [eax]
jge 0x1002f5d7
mov dword [ebp - 0x17c], 1
jmp 0x1002f5de
and dword [ebp - 0x17c], 0
cmp dword [ebp - 0x17c], 0xdb2b
jge 0x1002f5f6
mov dword [ebp - 0x234], 1
jmp 0x1002f5fd
and dword [ebp - 0x234], 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov ecx, dword [ebp - 0x234]
sub ecx, dword [eax]
mov dword [ebp - 0xd0], ecx
mov esi, dword [ebp - 0xd0]
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
add esi, dword [eax]
cmp esi, 0xab56
jge 0x1002f63b
mov dword [ebp - 0x23c], 1
jmp 0x1002f642
and dword [ebp - 0x23c], 0
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov ecx, dword [ebp - 0x23c]
sub ecx, dword [eax]
je 0x1002f66b
mov eax, 0xcaa5d732
test eax, eax
je 0x1002f66b
mov dword [ebp - 0x188], 1
jmp 0x1002f672
and dword [ebp - 0x188], 0
mov eax, dword [ebp - 0x188]
mov dword [ebp - 0x1f8], eax
mov esi, dword [ebp - 0x1f8]
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
add esi, dword [eax]
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
cmp esi, dword [eax]
jge 0x1002f6aa
mov dword [ebp - 0x190], 1
jmp 0x1002f6b1
and dword [ebp - 0x190], 0
push 0
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov ecx, dword [ebp - 0x190]
cmp ecx, dword [eax]
jge 0x1002f6d1
mov dword [ebp - 0x230], 1
jmp 0x1002f6d8
and dword [ebp - 0x230], 0
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
mov ecx, dword [ebp - 0x230]
cmp ecx, dword [eax]
je 0x1002f6f8
mov dword [ebp - 0x198], 1
jmp 0x1002f6ff
and dword [ebp - 0x198], 0
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x28c], eax
push 2
lea ecx, [ebp - 0x6c]
call fcn.10006458
cmp dword [eax], 0xc309ab83
jbe 0x1002f726
and dword [ebp - 0x200], 0
jmp 0x1002f730
mov dword [ebp - 0x200], 1
cmp dword [ebp - 0x200], 0xfffe
jb 0x1002f74f
push 0xfffffffffffffff7
pop eax
test eax, eax
je 0x1002f74f
mov dword [ebp - 0x1a0], 1
jmp 0x1002f756
and dword [ebp - 0x1a0], 0
mov eax, dword [ebp - 0x1a0]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 0x1a8], eax
jle 0x1002f782
cmp dword [ebp - 0xd0], 0
jne 0x1002f782
and dword [ebp - 0x208], 0
jmp 0x1002f78c
mov dword [ebp - 0x208], 1
push 0
lea ecx, [ebp - 0x318]
call fcn.10006458
mov ecx, dword [ebp - 0x208]
mov dword [eax], ecx
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x318]
call fcn.1000643c
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x6c]
call fcn.1000643c
mov eax, dword [ebp - 0x140]
mov dword [0x10070d4c], eax
mov dword [ebp - 0x14], 0xffffffff
mov dword [ebp - 0x1c8], 0x9e22401d
mov dword [ebp - 0x2c4], 0x2a284868
mov dword [ebp - 0x90], 0
jmp 0x1002f7fb
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 3
jge 0x1002f817
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0xe8], 0xfffffffc
jmp 0x1002f7ee
mov dword [ebp - 0x14], 2
jmp 0x1002f827
mov eax, dword [ebp - 0x14]
dec eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jl 0x1002faa0
mov dword [ebp - 0x258], 0xfffffffa
mov dword [ebp - 0x268], 0
mov dword [ebp - 0x2c0], 0xff57440e
mov dword [ebp - 0x34], 0
jmp 0x1002f85f
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 1
jge 0x1002f875
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x298], 0xfffffff7
jmp 0x1002f858
mov dword [ebp - 0x34], 0
jmp 0x1002f885
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 2
jge 0x1002f89b
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x344], 4
jmp 0x1002f87e
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x350], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 0
je 0x1002f9ab
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0xe8], 0
jne 0x1002f8d2
xor eax, eax
jne 0x1002f8d2
and dword [ebp - 0x1b0], 0
jmp 0x1002f8dc
mov dword [ebp - 0x1b0], 1
push 4
pop eax
shl eax, 1
mov eax, dword [ebp + eax - 0xe8]
cmp dword [ebp - 0x1b0], eax
jne 0x1002f8fc
mov dword [ebp - 0x238], 1
jmp 0x1002f903
and dword [ebp - 0x238], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x238], eax
jl 0x1002f91a
mov dword [ebp - 0x1b8], 1
jmp 0x1002f921
and dword [ebp - 0x1b8], 0
cmp dword [ebp - 0x1b8], 1
jne 0x1002f936
mov dword [ebp - 0x210], 1
jmp 0x1002f93d
and dword [ebp - 0x210], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x210], eax
jne 0x1002f968
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 0
je 0x1002f968
mov dword [ebp - 0x1c0], 1
jmp 0x1002f96f
and dword [ebp - 0x1c0], 0
mov eax, dword [ebp - 0x1c0]
mov dword [ebp - 0x258], eax
mov eax, dword [ebp - 0x258]
mov dword [ebp - 0x1c8], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1c8]
add ecx, dword [ebp + eax - 0xe8]
cmp ecx, 1
je 0x1002f9ab
mov dword [ebp - 0x218], 1
jmp 0x1002f9b2
and dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x2c4]
add eax, dword [ebp - 0x218]
cmp eax, 0xf860
jg 0x1002f9d1
mov dword [ebp - 0x1d0], 1
jmp 0x1002f9d8
and dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x1d0], eax
je 0x1002f9ef
mov dword [ebp - 0x240], 1
jmp 0x1002f9f6
and dword [ebp - 0x240], 0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
cmp dword [ebp - 0x240], eax
jge 0x1002fa14
mov dword [ebp - 0x1d8], 1
jmp 0x1002fa1b
and dword [ebp - 0x1d8], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x1d8]
mov dword [ebp + eax - 0x298], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xe8]
mov dword [ebp - 0x364], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0xe8], 0xfa025ec5
jne 0x1002fa5a
mov dword [ebp - 0x220], 1
jmp 0x1002fa61
and dword [ebp - 0x220], 0
mov eax, dword [ebp - 0x220]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x1e0], eax
push 4
pop eax
shl eax, 0
mov ecx, dword [ebp - 0x1e0]
mov dword [ebp + eax - 0x344], ecx
mov eax, dword [ebp - 0x1e0]
mov dword [ebp - 0x268], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x2c0], eax
jmp 0x1002f820
mov byte [ebp - 0x39], 0
movzx eax, byte [ebp - 0x39]
test eax, eax
je 0x1002fab4
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov eax, dword [ebp - 0xcc]
mov dword [0x10070d50], eax
mov dword [ebp - 0x48], 3
mov dword [ebp - 0x1c], 0x4dbb
mov dword [ebp - 0x1e8], 0x31f3
mov dword [ebp - 0x2cc], str.gzty_swymq_qjfejtlhw_det
cmp dword [ebp - 0x1e8], 0x323f
jle 0x1002fb6c
and dword [ebp - 0x78], 0
jmp 0x1002fafa
mov eax, dword [ebp - 0x78]
inc eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x2c5d
jge 0x1002fb6c
and dword [ebp - 0x74], 0
jmp 0x1002fb10
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0xde
jge 0x1002fb6a
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x74]
cdq
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x290], edx
push dword [ebp - 0x290]
push dword [ebp - 0x294]
lea ecx, [ebp - 0x3a4]
call fcn.10001a99
pop ecx
pop ecx
mov dword [ebp - 0x2a0], eax
mov ecx, dword [ebp - 0x2a0]
call fcn.10005da8
push eax
call fcn.1004027d
pop ecx
lea ecx, [ebp - 0x3a4]
call fcn.10005d9e
jmp 0x1002fb09
jmp 0x1002faf3
mov dword [ebp - 0xa8], 0xc70ab227
mov dword [ebp - 4], 9
cmp dword [ebp - 0x1e8], 0x2ffc
jge 0x1002fb95
push dword [ebp - 0x2cc]
call fcn.1004027d
pop ecx
jmp 0x1002fbb1
or dword [ebp - 4], 0xffffffff
jmp 0x1002fbbb
mov dword [ebp - 0x44], 0
push 4
lea ecx, [ebp - 0x250]
call fcn.100063b9
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x4c], 0xfffffff9
mov dword [ebp - 0x184], 0x856cd833
mov dword [ebp - 0x19c], 0xdd484073
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x24], 0
jmp 0x1002fc0b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 1
jge 0x1002fc21
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc8], 6
jmp 0x1002fc04
mov dword [ebp - 0x24], 0
jmp 0x1002fc31
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 4
jge 0x1002fc4d
push dword [ebp - 0x24]
lea ecx, [ebp - 0x250]
call fcn.10006458
mov dword [eax], 2
jmp 0x1002fc2a
mov eax, dword [ebp - 0xa8]
dec eax
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x228], eax
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x228]
mov dword [ebp + eax - 0xc8], ecx
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x44]
cmp eax, dword [ebp - 0x48]
jne 0x1002fc96
mov dword [ebp - 0x1f0], 1
jmp 0x1002fc9d
and dword [ebp - 0x1f0], 0
push 1
lea ecx, [ebp - 0x250]
call fcn.10006458
mov ecx, dword [ebp - 0x1f0]
mov dword [eax], ecx
mov dword [ebp - 0x4c], 0x7457
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x33c], eax
mov esi, dword [ebp - 0x4c]
push 1
lea ecx, [ebp - 0x250]
call fcn.10006458
cmp esi, dword [eax]
jl 0x1002fce2
mov dword [ebp - 0x180], 1
jmp 0x1002fce9
and dword [ebp - 0x180], 0
mov eax, dword [ebp - 0x180]
mov dword [ebp - 0x184], eax
cmp dword [ebp - 0x184], 0
jne 0x1002fd0d
cmp dword [ebp - 0x4c], 0
jne 0x1002fd0d
and dword [ebp - 0x18c], 0
jmp 0x1002fd17
mov dword [ebp - 0x18c], 1
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x18c], eax
jne 0x1002fd2e
mov dword [ebp - 0x194], 1
jmp 0x1002fd35
and dword [ebp - 0x194], 0
mov eax, dword [ebp - 0x194]
mov dword [ebp - 0x19c], eax
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x1c]
jg 0x1002fd58
mov dword [ebp - 0x1a4], 1
jmp 0x1002fd5f
and dword [ebp - 0x1a4], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1a4], eax
jne 0x1002fd76
mov dword [ebp - 0x1ac], 1
jmp 0x1002fd7d
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x1ac], eax
jg 0x1002fd94
mov dword [ebp - 0x1b4], 1
jmp 0x1002fd9b
and dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x48]
imul eax, dword [ebp - 0x1b4]
imul eax, dword [ebp - 0x48]
cmp eax, 0x7fc0
jle 0x1002fdbc
mov dword [ebp - 0x1bc], 1
jmp 0x1002fdc3
and dword [ebp - 0x1bc], 0
mov eax, dword [ebp - 0x1bc]
add eax, 0xae3d
cmp eax, dword [ebp - 0x48]
jle 0x1002fddf
mov dword [ebp - 0x108], 1
jmp 0x1002fde6
and dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1c], 0
jmp 0x1002fe02
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jg 0x1002ff66
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x128], 1
mov dword [ebp - 0x44], 3
jmp 0x1002fe2d
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1002ff4d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0xc8], 0xffffffff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x250]
call fcn.10006458
cmp dword [eax], 0xffffffff
jl 0x1002febf
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x28]
jne 0x1002fe6f
mov dword [ebp - 0x110], 1
jmp 0x1002fe76
and dword [ebp - 0x110], 0
cmp dword [ebp - 0x110], 0xffff
jb 0x1002fe8e
mov dword [ebp - 0x118], 1
jmp 0x1002fe95
and dword [ebp - 0x118], 0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x250]
call fcn.10006458
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x250]
call fcn.10006458
cmp dword [eax], 0
jne 0x1002febf
and dword [ebp - 0x120], 0
jmp 0x1002fec9
mov dword [ebp - 0x120], 1
mov eax, dword [ebp - 0xa8]
cmp dword [ebp - 0x120], eax
jle 0x1002fee5
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x250]
call fcn.10006458
mov eax, dword [ebp - 0x28]
sub eax, 6
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0xfffffff7
je 0x1002ff09
mov dword [ebp - 0x130], 1
jmp 0x1002ff10
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x28], 0
jmp 0x1002ff32
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 1
jge 0x1002ff48
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xc8], 0
jmp 0x1002ff2b
jmp 0x1002fe26
mov byte [ebp - 0x3b], 0
movzx eax, byte [ebp - 0x3b]
test eax, eax
je 0x1002ff61
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
jmp 0x1002fdfb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x250]
call fcn.1000643c
push 4
pop eax
imul eax, eax, 0
push 4
pop ecx
imul ecx, ecx, 0
mov edx, dword [ebp - 0xcc]
mov edx, dword [edx + eax]
mov eax, dword [ebp - 0x140]
mov ecx, dword [eax + ecx]
call fcn.10013ad6
mov dword [ebp - 0x2a8], eax
push 2
lea ecx, [ebp - 0x30c]
call fcn.100063b9
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x60], 0xdf1febae
mov dword [ebp - 0x32c], 0xfffffff7
mov dword [ebp - 0xb0], 0
jmp 0x1002ffdc
mov eax, dword [ebp - 0xb0]
inc eax
mov dword [ebp - 0xb0], eax
cmp dword [ebp - 0xb0], 2
jge 0x1002fffb
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x30c]
call fcn.10006458
or dword [eax], 0xffffffff
jmp 0x1002ffcf
mov dword [ebp - 0x60], 0
jmp 0x1003000b
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 2
jge 0x10030027
push dword [ebp - 0x60]
lea ecx, [ebp - 0x30c]
call fcn.10006458
mov dword [eax], 0x20fe
jmp 0x10030004
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x30c]
call fcn.1000643c
push dword [ebp - 0xcc]
mov edx, 0x10070c1c
mov ecx, dword [ebp - 0x2a8]
call fcn.1002e7cf
pop ecx
mov dword [ebp - 0x38], 0x4e6d4f28
mov dword [ebp - 0x148], 0xfd43ddca
mov dword [ebp - 0x84], 0x64a11600
mov dword [ebp - 0x170], 0xffffffff
mov dword [ebp - 0x178], 0x13f5e3d1
mov dword [ebp - 0xb8], 0
jmp 0x10030095
mov eax, dword [ebp - 0xb8]
inc eax
mov dword [ebp - 0xb8], eax
cmp dword [ebp - 0xb8], 3
jge 0x100300b1
mov eax, dword [ebp - 0xb8]
mov dword [ebp + eax*4 - 0x37c], 1
jmp 0x10030088
cmp dword [ebp - 0x38], 0xcf2e5664
je 0x1003016f
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x328], eax
mov eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x38]
jge 0x100300df
mov dword [ebp - 0x2c8], 1
jmp 0x100300e6
and dword [ebp - 0x2c8], 0
mov dword [ebp - 0x148], 0x245f
mov eax, dword [ebp - 0x148]
cmp eax, dword [ebp - 0x38]
jg 0x10030107
mov dword [ebp - 0x150], 1
jmp 0x1003010e
and dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x38]
cmp dword [ebp - 0x150], eax
je 0x10030125
mov dword [ebp - 0x158], 1
jmp 0x1003012c
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x84], 0
jb 0x1003014d
mov dword [ebp - 0x160], 1
jmp 0x10030154
and dword [ebp - 0x160], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x37c]
add eax, dword [ebp - 0x160]
je 0x1003016f
cmp dword [ebp - 0x38], 0
jne 0x1003018a
cmp dword [ebp - 0x170], 0
jne 0x1003018a
mov eax, 0x30c4e2bf
test eax, eax
jne 0x1003018a
and dword [ebp - 0x168], 0
jmp 0x10030194
mov dword [ebp - 0x168], 1
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x178], eax
mov esi, 0x10070d4c
mov edi, dword [ebp + 8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret