Function at 0x100306e7
Capabilities:
Create pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008bebc
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x26c
push esi
jmp 0x10030722
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
add eax, 4
mov ecx, dword [ebp + 0x10]
mov dword [ecx], eax
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
add eax, 4
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
cmp dword [eax], 0
je 0x100318c5
mov dword [ebp - 0x23c], 0xd33a
mov dword [ebp - 0x230], 0xffffffff
mov dword [ebp - 0x24c], 8
mov dword [ebp - 0x238], 0x7a888ada
mov dword [ebp - 0x260], 0
push 4
lea ecx, [ebp - 0x258]
call fcn.10018816
and dword [ebp - 4], 0
mov dword [ebp - 0x170], 0x5735
mov dword [ebp - 0x60], 0
jmp 0x1003078d
mov eax, dword [ebp - 0x60]
inc eax
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 4
jge 0x100307a9
push dword [ebp - 0x60]
lea ecx, [ebp - 0x258]
call fcn.10018883
mov dword [eax], 8
jmp 0x10030786
mov eax, dword [ebp - 0x170]
dec eax
mov dword [ebp - 0x170], eax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x258]
call fcn.1001887e
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
and eax, 0x80000000
je 0x10030a9f
mov dword [ebp - 0x50], 0x7d8e6e83
mov dword [ebp - 0x48], 0x5155
mov dword [ebp - 0x30], 0x3923ccde
mov dword [ebp - 0x1f4], 0xfffffffe
mov dword [ebp - 0x1f0], 0xfffffffe
mov dword [ebp - 0x1ec], 0xfffffffe
mov dword [ebp - 0x1e8], 0xfffffffe
lea ecx, [ebp - 0x81]
call fcn.1000a853
push eax
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x278]
call fcn.10018892
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x218]
call fcn.10018858
mov dword [ebp - 4], 1
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x240], eax
xor eax, eax
jne 0x1003086c
cmp dword [ebp - 0x50], 0
jne 0x1003086c
and dword [ebp - 0x184], 0
jmp 0x10030876
mov dword [ebp - 0x184], 1
cmp dword [ebp - 0x184], 1
jg 0x1003088b
mov dword [ebp - 0x18c], 1
jmp 0x10030892
and dword [ebp - 0x18c], 0
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0x18c], eax
jg 0x100308a9
mov dword [ebp - 0x100], 1
jmp 0x100308b0
and dword [ebp - 0x100], 0
mov eax, dword [ebp - 0x50]
cmp eax, dword [ebp - 0x100]
jne 0x100308c7
mov dword [ebp - 0xb0], 1
jmp 0x100308ce
and dword [ebp - 0xb0], 0
cmp dword [ebp - 0xb0], 0xe1b6
jle 0x100308e6
mov dword [ebp - 0x134], 1
jmp 0x100308ed
and dword [ebp - 0x134], 0
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x25c], eax
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0xb8], eax
push 3
lea ecx, [ebp - 0x218]
call fcn.10018883
mov ecx, dword [ebp - 0xb8]
mov dword [eax], ecx
mov eax, dword [ebp - 0x48]
cmp dword [ebp - 0xb8], eax
jne 0x10030a32
mov dword [ebp - 0x1a8], 0xfffffffd
mov dword [ebp - 0x13c], 2
mov dword [ebp - 0xc0], 0x6a218f0e
mov dword [ebp - 0xd0], 0xeed0
mov dword [ebp - 0x30], 0xfffffffe
mov dword [ebp - 0x13c], 0xfffffff6
mov eax, dword [ebp - 0x13c]
sub eax, 0x3cacd8f
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0x452a
jge 0x10030991
mov dword [ebp - 0x144], 1
jmp 0x10030998
and dword [ebp - 0x144], 0
cmp dword [ebp - 0x144], 1
ja 0x100309ad
mov dword [ebp - 0xc8], 1
jmp 0x100309b4
and dword [ebp - 0xc8], 0
mov eax, dword [ebp - 0xd0]
cmp dword [ebp - 0xc8], eax
jl 0x100309ce
mov dword [ebp - 0x14c], 1
jmp 0x100309d5
and dword [ebp - 0x14c], 0
imul eax, dword [ebp - 0x14c], 0x618d
cmp eax, dword [ebp - 0xd0]
jg 0x100309f3
mov dword [ebp - 0x154], 1
jmp 0x100309fa
and dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x1a8]
cmp eax, dword [ebp - 0x154]
jne 0x10030a14
mov dword [ebp - 0xd8], 1
jmp 0x10030a1b
and dword [ebp - 0xd8], 0
push 2
lea ecx, [ebp - 0x218]
call fcn.10018883
mov ecx, dword [ebp - 0xd8]
mov dword [eax], ecx
jmp 0x10030a5f
mov dword [ebp - 0x1c0], 0x425a
mov dword [ebp - 0x30], 0xffffffe3
jmp 0x10030a4c
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x18
je 0x10030a5f
cmp dword [ebp - 0x1c0], 0
je 0x10030a5d
jmp 0x10030a5f
jmp 0x10030a45
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x218]
call fcn.1001887e
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
and eax, 0xffff
push eax
mov eax, dword [ebp + 8]
push dword [eax]
push 0x2871
push 0x2988
call fcn.100277ad
pop ecx
pop ecx
call eax
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
mov dword [ecx], eax
jmp 0x100310f7
mov dword [ebp - 0x6c], 0xc93b4e1
mov dword [ebp - 0x58], 0
jmp 0x10030ab6
mov eax, dword [ebp - 0x58]
inc eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 2
jge 0x10030acc
mov eax, dword [ebp - 0x58]
mov dword [ebp + eax*4 - 0x248], 0xf13e13a6
jmp 0x10030aaf
mov dword [ebp - 0x6c], 0x19
jmp 0x10030adc
mov eax, dword [ebp - 0x6c]
dec eax
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x10
jne 0x10030d0e
push 1
lea ecx, [ebp - 0x1a4]
call fcn.10018816
mov dword [ebp - 4], 2
mov dword [ebp - 0x38], 0xed3
mov dword [ebp - 0x74], 0
jmp 0x10030b11
mov eax, dword [ebp - 0x74]
inc eax
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 1
jge 0x10030b2d
push dword [ebp - 0x74]
lea ecx, [ebp - 0x1a4]
call fcn.10018883
mov dword [eax], 0xc17633ef
jmp 0x10030b0a
mov byte [ebp - 0x2b], 0
movzx eax, byte [ebp - 0x2b]
test eax, eax
je 0x10030b4f
push 0
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.USER32.dll_DrawFocusRect]
push 0
lea ecx, [ebp - 0x1a4]
call fcn.10018883
mov dword [eax], 0x15
jmp 0x10030b88
push 0
lea ecx, [ebp - 0x1a4]
call fcn.10018883
mov dword [ebp - 0x15c], eax
mov eax, dword [ebp - 0x15c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x15c]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x1a4]
call fcn.10018883
cmp dword [eax], 9
jl 0x10030cfa
mov dword [ebp - 0x70], 0x1551da62
mov byte [ebp - 0x2a], 0
movzx eax, byte [ebp - 0x2a]
test eax, eax
je 0x10030bb9
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov dword [ebp - 0x70], 0
jmp 0x10030bc9
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 4
jl 0x10030cf5
push 0
lea ecx, [ebp - 0x1a4]
call fcn.10018883
cmp dword [eax], 0x2d2c87a7
jl 0x10030bf4
mov dword [ebp - 0xe0], 1
jmp 0x10030bfb
and dword [ebp - 0xe0], 0
imul eax, dword [ebp - 0x38], 0x5d0d
cmp eax, dword [ebp - 0xe0]
jle 0x10030c16
mov dword [ebp - 0x164], 1
jmp 0x10030c1d
and dword [ebp - 0x164], 0
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x164]
mov dword [ebp + eax - 0x248], ecx
mov dword [ebp - 0x38], 0
jmp 0x10030c40
mov eax, dword [ebp - 0x38]
dec eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffe9
jge 0x10030cf0
mov dword [ebp - 0x68], 0
jmp 0x10030c5a
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 1
jge 0x10030c6d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x34], 0
jmp 0x10030c53
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34], 0
jmp 0x10030c92
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x34]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x34], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x34], 0
jl 0x10030cdd
mov dword [ebp - 0x5c], 0xfffffff9
mov dword [ebp - 0x5c], 0x14
jmp 0x10030cb6
mov eax, dword [ebp - 0x5c]
dec eax
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0xfffffff8
jne 0x10030cdb
mov byte [ebp - 0x29], 0
movzx eax, byte [ebp - 0x29]
test eax, eax
je 0x10030cd9
push 0x92
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePipe]
jmp 0x10030caf
jmp 0x10030c7d
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x34], 0xffffffff
jmp 0x10030c39
jmp 0x10030bc2
jmp 0x10030b64
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1a4]
call fcn.1001887e
jmp 0x10030ad5
mov byte [ebp - 0x2c], 0
movzx eax, byte [ebp - 0x2c]
test eax, eax
je 0x10030d24
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov eax, dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp + 0xc]
add ecx, dword [eax]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x18], 0x29be1d92
push 4
lea ecx, [ebp - 0xa4]
call fcn.10018816
mov dword [ebp - 4], 3
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x64], 0
jmp 0x10030d66
mov eax, dword [ebp - 0x64]
inc eax
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 4
jge 0x10030d82
push dword [ebp - 0x64]
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov dword [eax], 0x6df37d45
jmp 0x10030d5f
mov dword [ebp - 0x18], 0x648261f9
cmp dword [ebp - 0x18], 0
je 0x10030f0c
mov dword [ebp - 0x78], 0
mov dword [ebp - 0xf0], 8
mov dword [ebp - 0x17c], 0x9da97273
mov dword [ebp - 0x1d8], 6
mov dword [ebp - 0x18], 0
jmp 0x10030dc8
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 4
jge 0x10030de4
push dword [ebp - 0x18]
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov dword [eax], 0xfffffffa
jmp 0x10030dc1
cmp dword [ebp - 0x78], 0
je 0x10030ee0
push 3
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov ecx, dword [ebp - 0x18]
cmp dword [eax], ecx
jl 0x10030e0e
mov dword [ebp - 0xe8], 1
jmp 0x10030e15
and dword [ebp - 0xe8], 0
imul eax, dword [ebp - 0xe8], 0xd549
mov dword [ebp - 0x16c], eax
push 2
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov ecx, dword [ebp - 0x16c]
mov dword [eax], ecx
cmp dword [ebp - 0x16c], 0
jne 0x10030e61
push 0
lea ecx, [ebp - 0xa4]
call fcn.10018883
cmp dword [eax], 0
je 0x10030e61
mov dword [ebp - 0x1ac], 1
jmp 0x10030e68
and dword [ebp - 0x1ac], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x22c], eax
mov eax, 0xc4e2bf5f
add eax, 0x5eafb5d1
mov dword [ebp - 0x28], eax
jne 0x10030e92
mov eax, 0x12afd77c
test eax, eax
jne 0x10030e92
and dword [ebp - 0x1d0], 0
jmp 0x10030e9c
mov dword [ebp - 0x1d0], 1
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0xf0], 0xf4f9
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0xf0], eax
jge 0x10030ec6
mov dword [ebp - 0x174], 1
jmp 0x10030ecd
and dword [ebp - 0x174], 0
mov eax, dword [ebp - 0x174]
mov dword [ebp - 0x17c], eax
cmp dword [ebp - 0x17c], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x78], eax
je 0x10030ef4
mov dword [ebp - 0xf8], 1
jmp 0x10030efb
and dword [ebp - 0xf8], 0
mov eax, dword [ebp - 0xf8]
mov dword [ebp - 0x1d8], eax
jmp 0x100310b0
mov dword [ebp - 0x1c], 0xbd79
mov dword [ebp - 0x128], 7
mov dword [ebp - 0x1c], 0
mov esi, dword [ebp - 0x1c]
push 0
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov dword [eax], esi
cmp dword [ebp - 0x1c], 0
jne 0x10030f48
mov dword [ebp - 0xfc], 1
jmp 0x10030f4f
and dword [ebp - 0xfc], 0
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0xfc], eax
je 0x10030f66
mov dword [ebp - 0x148], 1
jmp 0x10030f6d
and dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x148]
sub eax, dword [ebp - 0x28]
cmp eax, 0xfffffff9
je 0x10030f87
mov dword [ebp - 0x108], 1
jmp 0x10030f8e
and dword [ebp - 0x108], 0
cmp dword [ebp - 0x108], 1
jg 0x10030fa3
mov dword [ebp - 0x188], 1
jmp 0x10030faa
and dword [ebp - 0x188], 0
cmp dword [ebp - 0x188], 0x927d
jle 0x10030fc2
mov dword [ebp - 0x110], 1
jmp 0x10030fc9
and dword [ebp - 0x110], 0
push 2
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov ecx, dword [ebp - 0x110]
add ecx, dword [eax]
jne 0x10030ff0
push 4
pop eax
test eax, eax
jne 0x10030ff0
and dword [ebp - 0x150], 0
jmp 0x10030ffa
mov dword [ebp - 0x150], 1
mov eax, dword [ebp - 0x150]
sub eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x1c]
jle 0x10031017
mov dword [ebp - 0x118], 1
jmp 0x1003101e
and dword [ebp - 0x118], 0
mov eax, dword [ebp - 0x118]
sub eax, 0x5099a728
cmp eax, 0x9d8
jge 0x1003103f
cmp dword [ebp - 0x1c], 0
jne 0x1003103f
and dword [ebp - 0xa8], 0
jmp 0x10031049
mov dword [ebp - 0xa8], 1
push 2
lea ecx, [ebp - 0xa4]
call fcn.10018883
mov ecx, dword [ebp - 0xa8]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x1c]
jge 0x10031070
mov dword [ebp - 0x120], 1
jmp 0x10031077
and dword [ebp - 0x120], 0
mov eax, dword [ebp - 0x120]
sub eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x28], eax
jne 0x1003109d
mov dword [ebp - 0x158], 1
jmp 0x100310a4
and dword [ebp - 0x158], 0
mov eax, dword [ebp - 0x158]
mov dword [ebp - 0x128], eax
push 1
lea ecx, [ebp - 0xa4]
call fcn.10018883
and dword [eax], 0
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xa4]
call fcn.1001887e
mov eax, dword [ebp - 0x1e0]
inc eax
inc eax
push eax
mov eax, dword [ebp + 8]
push dword [eax]
push 0x2871
push 0x2988
call fcn.100277ad
pop ecx
pop ecx
call eax
mov ecx, dword [ebp + 0x14]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov dword [ebp - 0x1b0], 0xffffffff
push 3
lea ecx, [ebp - 0x224]
call fcn.10018816
mov dword [ebp - 4], 4
push 1
lea ecx, [ebp - 0x20c]
call fcn.10018816
mov byte [ebp - 4], 5
push 3
lea ecx, [ebp - 0x200]
call fcn.10018816
mov byte [ebp - 4], 6
mov dword [ebp - 0x1c8], 0x9c1464f1
mov dword [ebp - 0x80], 0xfffffff7
mov dword [ebp - 0x14], 0
jmp 0x10031158
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x10031174
push dword [ebp - 0x14]
lea ecx, [ebp - 0x224]
call fcn.10018883
mov dword [eax], 0x2d149feb
jmp 0x10031151
mov dword [ebp - 0x14], 0
jmp 0x10031184
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x1003119d
push dword [ebp - 0x14]
lea ecx, [ebp - 0x20c]
call fcn.10018883
or dword [eax], 0xffffffff
jmp 0x1003117d
mov dword [ebp - 0x14], 0
jmp 0x100311ad
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jge 0x100311c9
push dword [ebp - 0x14]
lea ecx, [ebp - 0x200]
call fcn.10018883
mov dword [eax], 0xfffffff6
jmp 0x100311a6
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x98], eax
push 0
lea ecx, [ebp - 0x224]
call fcn.10018883
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
push 0
lea ecx, [ebp - 0x20c]
call fcn.10018883
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x80]
mov dword [ebp - 0x180], eax
push 1
lea ecx, [ebp - 0x200]
call fcn.10018883
mov ecx, dword [ebp - 0x180]
mov dword [eax], ecx
mov eax, dword [ebp - 0x98]
cmp eax, dword [ebp - 0x180]
jg 0x1003123e
mov dword [ebp - 0x130], 1
jmp 0x10031245
and dword [ebp - 0x130], 0
mov eax, dword [ebp - 0x130]
mov dword [ebp - 0x1c8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x200]
call fcn.1001887e
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x20c]
call fcn.1001887e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x224]
call fcn.1001887e
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
cmp dword [eax], 0
jne 0x100318c0
mov eax, dword [ebp + 0x18]
and dword [eax], 0
push 3
lea ecx, [ebp - 0x94]
call fcn.10018816
mov dword [ebp - 4], 7
push 1
lea ecx, [ebp - 0x44]
call fcn.10018816
mov byte [ebp - 4], 8
push 2
lea ecx, [ebp - 0x1bc]
call fcn.10018816
mov byte [ebp - 4], 9
mov dword [ebp - 0x1c4], 0xcaad
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x10], 0
jmp 0x100312e9
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 3
jge 0x10031305
push dword [ebp - 0x10]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov dword [eax], 0x9841b3c6
jmp 0x100312e2
mov dword [ebp - 0x10], 0
jmp 0x10031315
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 1
jge 0x1003132b
push dword [ebp - 0x10]
lea ecx, [ebp - 0x44]
call fcn.10018883
or dword [eax], 0xffffffff
jmp 0x1003130e
mov dword [ebp - 0x10], 0
jmp 0x1003133b
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 2
jge 0x10031354
push dword [ebp - 0x10]
lea ecx, [ebp - 0x1bc]
call fcn.10018883
or dword [eax], 0xffffffff
jmp 0x10031334
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
and dword [eax], 0
jmp 0x10031384
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x160]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
cmp dword [eax], 2
jg 0x10031894
mov dword [ebp - 0x20], 0x9f7fd1e8
mov dword [ebp - 0x88], 0xffffffff
push 2
lea ecx, [ebp - 0x198]
call fcn.10018816
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x4c], 0
jmp 0x100313c9
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 2
jge 0x100313e5
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x198]
call fcn.10018883
mov dword [eax], 0x9bc00ead
jmp 0x100313c2
mov byte [ebp - 0x21], 0
movzx eax, byte [ebp - 0x21]
test eax, eax
je 0x10031404
push 0
push 0x2692
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov dword [ebp - 0x20], 2
jmp 0x10031414
mov eax, dword [ebp - 0x20]
dec eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jl 0x10031880
mov dword [ebp - 0x7c], 0x430688cd
mov dword [ebp - 0x228], 0xfffffffa
mov dword [ebp - 0x54], 0
jmp 0x1003143f
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 4
jge 0x10031455
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x270], 0
jmp 0x10031438
cmp dword [ebp - 0x20], 0
je 0x10031626
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x138], eax
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018883
mov ecx, dword [ebp - 0x138]
mov dword [eax], ecx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x88], eax
mov esi, dword [ebp - 0x88]
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
cmp esi, dword [eax]
jge 0x100314a9
mov dword [ebp - 0x178], 1
jmp 0x100314b0
and dword [ebp - 0x178], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
mov ecx, dword [ebp - 0x178]
cmp ecx, dword [eax]
jne 0x100314d0
mov dword [ebp - 0x140], 1
jmp 0x100314d7
and dword [ebp - 0x140], 0
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x140], eax
jg 0x100314ee
mov dword [ebp - 0x168], 1
jmp 0x100314f5
and dword [ebp - 0x168], 0
cmp dword [ebp - 0x168], 0
ja 0x1003150a
mov dword [ebp - 0x1dc], 1
jmp 0x10031511
and dword [ebp - 0x1dc], 0
push 0
lea ecx, [ebp - 0x198]
call fcn.10018883
cmp dword [ebp - 0x1c4], 0xde81
jl 0x10031552
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
cmp dword [eax], 0
je 0x10031552
mov dword [ebp - 0xf4], 1
jmp 0x10031559
and dword [ebp - 0xf4], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov ecx, dword [ebp - 0xf4]
cmp ecx, dword [eax]
jl 0x10031586
mov dword [ebp - 0x104], 1
jmp 0x1003158d
and dword [ebp - 0x104], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov ecx, dword [ebp - 0x104]
cmp ecx, dword [eax]
jle 0x100315ba
mov dword [ebp - 0x10c], 1
jmp 0x100315c1
and dword [ebp - 0x10c], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov esi, dword [ebp - 0x10c]
sub esi, dword [eax]
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
cmp esi, dword [eax]
je 0x10031607
mov dword [ebp - 0x114], 1
jmp 0x1003160e
and dword [ebp - 0x114], 0
cmp dword [ebp - 0x114], 0x6749efed
jg 0x10031626
mov dword [ebp - 0x11c], 1
jmp 0x1003162d
and dword [ebp - 0x11c], 0
cmp dword [ebp - 0x11c], 0xc87a
je 0x10031645
mov dword [ebp - 0x124], 1
jmp 0x1003164c
and dword [ebp - 0x124], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov esi, eax
push 2
lea ecx, [ebp - 0x94]
call fcn.10018883
mov ecx, dword [esi]
imul ecx, dword [eax]
cmp ecx, dword [ebp - 0x124]
jl 0x1003168b
mov dword [ebp - 0x12c], 1
jmp 0x10031692
and dword [ebp - 0x12c], 0
mov eax, dword [ebp - 0x12c]
mov dword [ebp - 0x7c], eax
push 0
lea ecx, [ebp - 0x198]
call fcn.10018883
cmp dword [eax], 0
je 0x10031770
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018883
mov dword [eax], 1
xor eax, eax
inc eax
je 0x100316db
cmp dword [ebp - 0x7c], 0
je 0x100316db
mov dword [ebp - 0xac], 1
jmp 0x100316e2
and dword [ebp - 0xac], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
mov ecx, dword [ebp - 0xac]
cmp ecx, dword [eax]
je 0x10031702
mov dword [ebp - 0xbc], 1
jmp 0x10031709
and dword [ebp - 0xbc], 0
push 4
pop eax
imul eax, eax, 3
lea eax, [ebp + eax - 0x270]
mov dword [ebp - 0xb4], eax
push 0
lea ecx, [ebp - 0x198]
call fcn.10018883
mov ecx, dword [ebp - 0xb4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
cmp eax, dword [ebp - 0xbc]
jle 0x1003174f
mov dword [ebp - 0xc4], 1
jmp 0x10031756
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x88]
cmp dword [ebp - 0xc4], eax
jge 0x10031770
mov dword [ebp - 0xcc], 1
jmp 0x10031777
and dword [ebp - 0xcc], 0
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
mov ecx, dword [ebp - 0xcc]
imul ecx, dword [eax]
test ecx, ecx
jne 0x1003179c
or eax, 0xffffffff
jne 0x1003179c
and dword [ebp - 0xd4], 0
jmp 0x100317a6
mov dword [ebp - 0xd4], 1
push 1
lea ecx, [ebp - 0x198]
call fcn.10018883
mov ecx, dword [ebp - 0xd4]
cmp ecx, dword [eax]
jne 0x100317db
push 0
lea ecx, [ebp - 0x1bc]
call fcn.10018883
cmp dword [eax], 0
je 0x100317db
mov dword [ebp - 0xdc], 1
jmp 0x100317e2
and dword [ebp - 0xdc], 0
mov eax, dword [ebp - 0x7c]
cmp eax, dword [ebp - 0xdc]
jge 0x100317f9
mov dword [ebp - 0x1d4], 1
jmp 0x10031800
and dword [ebp - 0x1d4], 0
push 0
lea ecx, [ebp - 0x198]
call fcn.10018883
cmp dword [ebp - 0x20], 0x1b4bc71f
push 0
lea ecx, [ebp - 0x44]
call fcn.10018883
push dword [eax]
lea ecx, [ebp - 0x94]
call fcn.10018883
mov dword [ebp - 0xe4], eax
push 0
lea ecx, [ebp - 0x94]
call fcn.10018883
mov ecx, dword [ebp - 0xe4]
mov eax, dword [eax]
mov dword [ecx], eax
mov eax, dword [ebp - 0xe4]
cmp dword [eax], 0
je 0x10031868
mov eax, 0xd86a
test eax, eax
je 0x10031868
mov dword [ebp - 0xec], 1
jmp 0x1003186f
and dword [ebp - 0xec], 0
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0x1cc], eax
jmp 0x1003140d
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x198]
call fcn.1001887e
jmp 0x10031363
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x1bc]
call fcn.1001887e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x44]
call fcn.1001887e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.1001887e
jmp 0x100318c5
jmp 0x10030708
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret