Function at 0x1002fc48
Capabilities:
Get common file path
Get disk information
Query environment variable
Query service status

Disassembly:
mov eax, 0x10061588
call fcn.10060104
sub esp, 0x2c8
push ebx
xor ebx, ebx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x3c], 0xec79cf18
mov dword [ebp - 0x40], 0x673292c5
mov dword [ebp - 0x34], 0x6887e08a
mov dword [ebp - 0x2c], 0xedbcc772
push esi
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0xffffffff
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x184], ebx
jg 0x1002fe25
xor edx, edx
inc edx
mov dword [ebp - 0x30], 0x96a485bf
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x24], 0x96141e4f
mov dword [ebp - 0x3c], 0xf7b40076
mov dword [ebp - 0x20], 0x3f6d1d89
mov dword [ebp - 0x18], ebx
jmp 0x1002fcd0
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x7c], 0xb96c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002fcc2
mov dword [ebp - 0x18], ebx
jmp 0x1002fceb
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0x80a3888a
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1002fcda
cmp dword [ebp - 0x30], ebx
jne 0x1002fd01
mov eax, dword [ebp - 0x24]
inc dword [ebp - 0x24]
neg eax
mov eax, ebx
je 0x1002fd03
mov eax, edx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x7c]
cmp dword [ebp - 0x3c], ebx
jne 0x1002fd7c
mov eax, dword [ebp - 0x30]
or ecx, 0xffffffff
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x40]
dec dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x7c]
sub ecx, eax
mov eax, dword [ebp - 0x34]
cmp ecx, 2
setge dl
xor ecx, ecx
cmp edx, eax
sete cl
xor eax, eax
cmp ecx, 0x5aba
setle al
xor edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setg cl
xor eax, eax
cmp ecx, 0xfffffffe
setg al
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x3c], eax
jg 0x1002fd66
mov esi, ebx
cmp dword [ebp - 0x3c], ebx
je 0x1002fd68
mov esi, edx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp esi, eax
setl cl
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], ebx
jne 0x1002fd7c
mov edx, ebx
mov eax, dword [ebp - 0x7c]
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x8c]
setl cl
add eax, ecx
je 0x1002fdb1
mov dword [ebp - 0x18], 7
mov dword [ebp - 0x30], 0xffffffe2
jmp 0x1002fda9
mov eax, dword [ebp - 0x7c]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 8
jle 0x1002fda0
jmp 0x1002fe15
mov dword [ebp - 0x38], 0xdeab2dd2
mov dword [ebp - 0x20], ebx
jmp 0x1002fdd1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1002fdce
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysFreeString]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0x3c
jle 0x1002fdbd
mov dword [ebp - 0x18], ebx
jmp 0x1002fe0f
mov dword [ebp - 0x3c], 0x6a781b38
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x8c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ebx
jne 0x1002fe15
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffffa
jne 0x1002fddc
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffff
push 1
pop edx
jle 0x1002fc9e
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e990]
lea eax, [ebp - 0x1f4]
push eax
lea eax, [ebp - 0x204]
mov dword [ebp - 0x18], 0xd313dd33
push eax
push ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xb0], ebx
movdqu xmmword [ebp - 0x204], xmm0
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa8], ebx
call fcn.100096b7
mov dword [ebp - 0x38], 0x3758
mov dword [ebp - 0x2c], 0xc369029e
mov dword [ebp - 0x24], ebx
jmp 0x1002fe8f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x18c], 0x3ac25417
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1002fe7e
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xfffffff6
jle 0x1002ff3d
mov esi, dword [ebp - 0xb0]
mov dword [ebp - 0x34], 0xe8c9
mov dword [ebp - 0x40], 0x2d7bc352
mov dword [ebp - 0x24], 0xcd5fec46
mov dword [ebp - 0x40], 0x6b586fa6
mov dword [ebp - 0x34], 0xfffffff8
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x24], 3
sbb ecx, ecx
xor edx, edx
inc ecx
add ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xb0]
mov dword [eax], ecx
mov dword [ebp - 0x40], 1
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x38]
cmp eax, 0xe55459ee
mov eax, dword [ebp - 0x38]
setne dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x18]
cmp ecx, 0x2f82
jl 0x1002ff27
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [esi + 8]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jg 0x1002fea8
lea ecx, [ebp - 0xb0]
call fcn.10006788
push 0x6f
pop eax
push 2
mov esi, ebx
mov dword [ebp - 0x78], 0x33067702
mov dword [ebp - 0x74], 0x3a033005
mov dword [ebp - 0x70], 0x2b00e9be
mov dword [ebp - 0x6c], 0xd042b01
mov word [ebp - 0x68], 0x303
mov word [ebp - 0x130], ax
pop edi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x38], edi
cmp edi, 0x12
jae 0x1003079c
mov dword [ebp - 0x24], 0x1b3c692b
mov dword [ebp - 0x4c], 0x6748f69f
mov dword [ebp - 0x24], ebx
jmp 0x1002ffb4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1002ffb1
push ebx
push ebx
push 0x1989
call dword [sym.imp.USER32.dll_SetWindowRgn]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 8
jl 0x1002ff9b
movzx eax, byte [ebp - 0x78]
lea eax, [eax*2 + 2]
cmp edi, eax
jne 0x100303ee
mov dword [ebp - 0x20], 3
mov dword [ebp - 0x34], 0xc0549ec7
mov dword [ebp - 0x24], ebx
jmp 0x1002ffed
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x25c], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x1002ffe0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
add edx, 0xffffce06
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
imul ecx, dword [ebp - 0x34]
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
cmp eax, 1
setg cl
xor edx, edx
mov dword [ebp - 0x25c], ecx
mov eax, dword [ebp - 0x20]
cmp eax, 0x616d21b1
mov eax, dword [ebp - 0x20]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
add ecx, dword [ebp - 0x20]
mov byte [ebp - 0x19], bl
je 0x1003006d
cmp byte [ebp - 0x19], 0
je 0x10030082
push ebx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
jmp 0x10030082
cmp byte [ebp - 0x19], 0
je 0x10030082
push ebx
push 1
push 0x1388
push ebx
call dword [sym.imp.USER32.dll_GetMenuItemInfoW]
movzx eax, byte [ebp + edi - 0x78]
mov dword [ebp - 0x30], 1
mov dword [ebp - 0x48], 0x37ddc4ea
mov dword [ebp - 0xe4], ebx
mov dword [ebp - 0x10c], 0x3d8e
lea esi, [eax + 1]
mov dword [ebp - 0x28], 0xa83adab8
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x24], ebx
jmp 0x100300cb
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x84], 0xfffffffe
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100300ba
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100300e2
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], 0xb
jne 0x100303e3
mov dword [ebp - 0x18], 0x167fa5c6
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x40], 0xffffffff
mov dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], ebx
jl 0x100303d0
mov dword [ebp - 0x20], 0x367f5ed9
mov dword [ebp - 0x40], 0xa000286f
mov dword [ebp - 0xfc], 0xbbd88186
mov dword [ebp - 0x2c], 0x4e3e
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x10030350
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e9a0]
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x234]
mov dword [ebp - 0x3c], 0xba095a97
push eax
mov dword [ebp - 0x24], 0xffffffff
lea ecx, [ebp - 0xbc]
push ebx
movdqu xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
call fcn.100096b7
mov dword [ebp - 4], ebx
mov dword [ebp - 0x3c], ebx
cmp dword [ebp - 0x3c], 1
jg 0x10030291
mov edi, dword [ebp - 0xbc]
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e9c0]
lea eax, [ebp - 0x1e4]
push eax
lea eax, [ebp - 0x1f4]
mov dword [ebp - 0xc8], ebx
push eax
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc4], ebx
movdqu xmmword [ebp - 0x1f4], xmm0
mov dword [ebp - 0xc0], ebx
call fcn.100096b7
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10030212
push ebx
push 0x707
push 0x202e
push 0x1f6d
push 0x1c1a
push 0x1db3
push ebx
call dword [sym.imp.USER32.dll_TrackPopupMenu]
mov esi, dword [ebp - 0xc8]
xor edx, edx
inc edx
mov dword [esi + 4], ebx
mov dword [ebp - 0x40], 0xb64d
xor ecx, ecx
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
mov eax, dword [esi + 4]
mov eax, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0xc8]
cmp dword [eax], edx
setg cl
xor eax, eax
cmp ecx, dword [esi + 4]
setg al
cmp eax, 4
sbb eax, eax
inc eax
neg eax
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
cmp dword [ebp - 0x18], ebx
je 0x10030260
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor eax, eax
cmp dword [esi + 4], ebx
setne al
mov dword [edi + 0xc], eax
inc dword [esi + 4]
cmp dword [esi + 4], edx
jle 0x1003021e
lea ecx, [ebp - 0xc8]
call fcn.10006788
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 1
jle 0x100301a9
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x84], ebx
je 0x10030315
mov eax, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x14e
mov eax, dword [ebp - 0x84]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
neg ecx
mov dword [ebp - 0x48], ecx
je 0x100302ca
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0xe4]
mov eax, dword [ebp - 0x18]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setl cl
sub ecx, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x28], 1
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x84], 0xfffffffc
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], ebx
je 0x10030315
xor ecx, ecx
inc ecx
jmp 0x10030317
mov ecx, ebx
mov eax, dword [ebp - 0x30]
xor edx, edx
sub ecx, eax
mov eax, dword [ebp - 0xbc]
cmp ecx, 0x27df
setg dl
xor ecx, ecx
cmp edx, dword [eax + 0xc]
setle cl
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0xbc]
or dword [ebp - 4], 0xffffffff
call fcn.10006788
dec dword [ebp - 0x20]
jns 0x10030146
mov dword [ebp - 0x28], ebx
jmp 0x100303c1
xor ecx, ecx
mov dword [ebp - 0x24], 0xfffffffe
mov eax, dword [ebp - 0x3c]
cmp eax, 1
setle cl
inc ecx
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0xfc]
sub ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setne dl
sub edx, eax
add edx, dword [ebp - 0x24]
je 0x10030393
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, 0x94bf
setl cl
mov dword [ebp - 0x40], ecx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffe9
jge 0x10030355
dec dword [ebp - 0x18]
jns 0x10030117
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 0xb
je 0x100300ef
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x38]
mov eax, dword [ebp - 0x4c]
dec eax
add edi, eax
jmp 0x10030794
push 3
lea ecx, [ebp - 0x174]
call fcn.10006705
mov dword [ebp - 4], 1
mov dword [ebp - 0x18], 0xad95e17c
mov dword [ebp - 0x4c], 0x3b0a6d08
mov dword [ebp - 0x24], ebx
jmp 0x10030428
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0x2db58e46
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10030415
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10030444
push 1
push 0x2573
call dword [sym.imp.USER32.dll_EnableWindow]
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1003051f
push 3
pop edi
push 1
lea ecx, [ebp - 0x108]
call fcn.10006705
xor edx, edx
mov dword [ebp - 0x28], 0x90aec51
mov dword [ebp - 0x24], ebx
inc edx
jmp 0x10030482
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10030473
mov eax, dword [ebp - 0x108]
push 2
pop ecx
mov dword [eax], ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x3c], 0xbbde
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x28], ebx
jmp 0x100304ca
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x4c], 0x4361a6b7
mov dword [ebp - 0x3c], ebx
jmp 0x100304c2
mov dword [ebp - 0x4c], edx
inc dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ecx
jle 0x100304bc
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jle 0x100304a4
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], edi
jge 0x100304f2
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x174]
mov dword [eax + ecx*4], 0xac30bca0
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edi
jl 0x100304d7
push 2
pop ecx
mov eax, dword [ebp - 0x108]
dec dword [eax]
jns 0x10030492
lea ecx, [ebp - 0x108]
cmp dword [ebp - 0x18], ebx
jne 0x10030517
call fcn.10006788
dec dword [ebp - 0x18]
jns 0x10030457
jmp 0x1003051c
call fcn.10006788
mov edi, dword [ebp - 0x38]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x174]
call fcn.10006788
mov dword [ebp - 0x40], 0x3622
cmp dword [ebp - 0x40], 0x36f2
jle 0x100305ae
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x48], ebx
mov edi, esi
mov dword [ebp - 0x2c], 0x7dd6
mov esi, dword [ebp - 0x24]
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x2bc]
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10030570
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2bc]
call fcn.10006cdf
dec edi
dec dword [ebp - 0x2c]
jne 0x10030552
mov esi, dword [ebp - 0x48]
inc esi
mov dword [ebp - 0x48], esi
cmp esi, 0x44c1
jl 0x10030546
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x3129
jl 0x10030541
mov esi, dword [ebp - 0x34]
mov edi, dword [ebp - 0x38]
movzx edx, byte [ebp + edi - 0x77]
mov eax, edi
sub eax, esi
movzx eax, byte [ebp + eax - 0x7a]
movzx eax, word [ebp + eax*2 - 0x134]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
cmp dword [ebp - 0x40], 0x348d
movzx eax, byte [ebp + edi - 0x78]
mov word [ebp + eax*2 - 0x134], cx
jge 0x100305ed
push str.tleh_kadr_wjul_dydrf_xdmcdixrt_cugfkf_twjbmhj
call fcn.1004823d
pop ecx
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x2c], 0xe81d534a
mov dword [ebp - 0x18], ebx
jmp 0x10030785
push 4
pop esi
mov dword [ebp - 0x20], 0xecb45710
lea ecx, [ebp - 0xe0]
push esi
call fcn.10006705
mov dword [ebp - 4], esi
lea eax, [ebp - 0x214]
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e9b0]
lea ecx, [ebp - 0xf8]
push eax
lea eax, [ebp - 0x224]
mov dword [ebp - 0x48], 0xfffffffc
push eax
push ebx
movdqu xmmword [ebp - 0x224], xmm0
mov dword [ebp - 0xf8], ebx
mov dword [ebp - 0xf4], ebx
mov dword [ebp - 0xf0], ebx
call fcn.100096b7
mov dword [ebp - 0x24], ebx
jmp 0x1003067e
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xaa29c146
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 4
jl 0x1003066b
mov dword [ebp - 0x20], ebx
jmp 0x100306a5
mov dword [ebp - 0x2c], 0x63384304
inc dword [ebp - 0x2c]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100306a2
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffef
jne 0x10030689
cmp dword [ebp - 0x20], ebx
je 0x10030725
mov dword [ebp - 0x4c], 0x2092
mov dword [ebp - 0x20], ebx
jmp 0x100306cf
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x100306bc
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x18]
jne 0x100306e2
cmp dword [ebp - 0x48], ebx
je 0x100306e5
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp edx, eax
mov eax, 0xf2fdad5a
setg cl
cmp eax, ecx
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xc]
mov eax, dword [ebp - 0xf8]
inc ecx
mov dword [eax + 4], ecx
jmp 0x10030765
mov dword [ebp - 0x40], 0x12bad479
mov dword [ebp - 0x2c], 0x2e8b5a47
cmp dword [ebp - 0x48], ebx
je 0x1003073b
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10030758
mov eax, dword [ebp - 0xe0]
cmp dword [eax + 0xc], ebx
jne 0x10030758
mov edx, ebx
jmp 0x1003075b
xor edx, edx
inc edx
mov eax, dword [ebp - 0x40]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp - 0xf8]
call fcn.10006788
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe0]
call fcn.10006788
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xa
jl 0x10030607
mov esi, ebx
mov dword [ebp - 0x34], ebx
add edi, 2
jmp 0x1002ff7c
mov dword [ebp - 0x4c], 6
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100307b3
push ebx
call dword [sym.imp.COMDLG32.dll_GetSaveFileNameW]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100307c9
push ebx
push ebx
push 0x42f
call dword [sym.imp.USER32.dll_EnumChildWindows]
xor eax, eax
mov dword [ebp - 0x198], 7
mov word [ebp - 0x126], ax
lea ecx, [ebp - 0x1ac]
mov word [ebp - 0x1ac], ax
lea eax, [ebp - 0x134]
push eax
mov dword [ebp - 0x19c], ebx
call fcn.10006e7d
mov dword [ebp - 4], 5
lea edi, [ebp - 0x134]
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e950]
lea ecx, [ebp - 0x118]
xor eax, eax
mov dword [ebp - 0x118], ebx
stosd dword es:[edi], eax
movdqu xmmword [ebp - 0x244], xmm0
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x234]
push eax
mov dword [ebp - 0x4c], 0x297
lea eax, [ebp - 0x244]
mov dword [ebp - 0x4c], 1
push eax
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x4c], 0xaa39ed08
mov dword [ebp - 0x4c], 0x509978f3
push ebx
call fcn.100096b7
mov dword [ebp - 0x4c], 0x8eb9
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x4c], 0xfffffffb
mov dword [ebp - 0x2c], 0x71b35d56
mov dword [ebp - 0x4c], 0x91a049fe
inc dword [ebp - 0x2c]
call fcn.10006788
push dword [ebp - 0x44]
lea ecx, [ebp - 0x1e4]
call fcn.1000627f
mov byte [ebp - 4], 6
mov dword [ebp - 0x48], 0x4dec
cmp dword [ebp - 0x48], 0x500e
jle 0x10030906
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x2c], 0x1bf5
mov eax, edi
lea ecx, [ebp - 0x274]
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100308e1
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x274]
call fcn.10006cdf
add edi, esi
dec dword [ebp - 0x2c]
jne 0x100308c7
inc esi
cmp esi, 0x4444
jl 0x100308be
cmp dword [ebp - 0x48], 0x4ad5
jge 0x1003091a
push str.vpduj_kbuamy_qwhggpya_dhhdtw_rax_gfe_iavhfjy_hjlvqgt_igce_utce
call fcn.1004823d
pop ecx
mov dword [ebp - 4], 6
mov dword [ebp - 0x48], 0x24de
cmp dword [ebp - 0x48], 0x2850
jle 0x10030987
push ebx
call dword [sym.imp.USER32.dll_DestroyMenu]
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov eax, esi
mov dword [ebp - 0x44], ebx
xor eax, edi
mov dword [ebp - 0x4c], eax
mov edi, eax
mov eax, edi
mov ecx, 0x1007b9d8
or eax, ebx
cdq
push edx
push eax
call fcn.1000616a
inc ebx
cmp ebx, 0x7c63
jl 0x1003094b
mov edi, dword [ebp - 0x2c]
inc esi
push 0
pop ebx
cmp esi, 0x1d1
jl 0x1003093f
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x5073
jl 0x1003093d
push ebx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov byte [ebp - 4], 9
cmp dword [ebp - 0x48], 0x2127
jge 0x100309c1
mov edx, str.pzbc_dhmdxyj_fmuxim_oit_wad_fmooyo_ydia_hdwzqguuc_fixpzwbf_lyd_wloyrr_woetqu
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x100309c1
push 3
lea ecx, [ebp - 0x124]
mov dword [ebp - 4], 6
call fcn.10006705
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x44], 0x7ea4c57
mov dword [ebp - 0x18], ebx
jmp 0x100309f5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x124]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100309e5
mov dword [ebp - 0x18], ebx
jmp 0x10030a11
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xa4], 0xdada439b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10030a00
mov dword [ebp - 0xa4], 2
cmp dword [ebp - 0xa4], ebx
jl 0x10030c35
mov dword [ebp - 0x2c], 0x62c3
cmp dword [ebp - 0x2c], 0x6438
jle 0x10030aa9
push 0x1894
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
xor edx, ecx
lea ecx, [ebp - 0x28c]
mov eax, edx
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10030a73
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x28c]
call fcn.10006cdf
mov ecx, dword [ebp - 0x34]
inc esi
cmp esi, 0x411d
jl 0x10030a52
inc edi
cmp edi, 0x58ca
jl 0x10030a50
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x7abe
jl 0x10030a4e
mov dword [ebp - 0x28], 0x4cdb8faa
cmp dword [ebp - 0x2c], 0x61af
jge 0x10030ac4
push str.mtjxunbah_vjsfpa_lqjifpsui_wbigf_fbjpir_qxeuz_meseunh_ndwhmydb_nncekoo_kzqlkxwsv_kpao
call fcn.1004823d
pop ecx
push 2
lea ecx, [ebp - 0x168]
mov dword [ebp - 4], 0xb
call fcn.10006705
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x2c], 0x2eef
cmp dword [ebp - 0x2c], 0x2f02
jle 0x10030b4b
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov esi, ebx
mov eax, edi
cdq
idiv esi
lea eax, [ecx + edx]
cdq
lea ecx, [ebp - 0x2a4]
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10030b15
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2a4]
call fcn.10006cdf
mov ecx, dword [ebp - 0x34]
inc esi
cmp esi, 0x763a
jl 0x10030af5
inc edi
cmp edi, 0x20b8
jl 0x10030af3
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x410c
jl 0x10030af1
cmp dword [ebp - 0x2c], 0x2ead
jge 0x10030b5f
push str.ypqnipd_csbgkwa_gryndh_fnqgbcuso_gsywaw_vqwzi_tsoza_wncdxcbk_luo_tigdjjls_mvgbvbx_bigtna_uwga
call fcn.1004823d
pop ecx
push 2
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x38], ebx
pop edx
jmp 0x10030b81
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x168]
mov dword [eax + ecx*4], 0x383c67ee
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], edx
jl 0x10030b6e
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], ebx
jl 0x10030c02
mov esi, dword [ebp - 0x168]
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x2c], 0xffffffff
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ecx + eax*4]
add eax, dword [ecx + edx*4]
xor edx, edx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xa4]
add ecx, 9
cmp ecx, eax
mov eax, dword [ebp - 0x2c]
setl dl
xor ecx, ecx
cmp dword [esi + 4], edx
setle cl
xor edx, edx
inc eax
cmp eax, ecx
setg dl
sub edx, 0x2d7a
neg edx
sbb edx, edx
inc edx
add edx, dword [ebp - 0xa4]
mov dword [esi + 4], edx
dec dword [ebp - 0x28]
jns 0x10030b94
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x124]
cmp dword [eax + ecx*4], 0xffff
lea ecx, [ebp - 0x168]
sbb eax, eax
inc eax
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 0xb
call fcn.10006788
dec dword [ebp - 0xa4]
jmp 0x10030a21
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 6
call fcn.10006788
mov dword [ebp - 0x28], 0xd5e48d32
mov dword [ebp - 0x24], 0x8b35
mov dword [ebp - 0x2c], 0xfffffff8
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10030c6d
push 0xc36
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
mov dword [ebp - 0x28], 0xfffffffe
cmp dword [ebp - 0x28], 0x15
jl 0x10030e21
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x44], 0xfffffffd
mov dword [ebp - 0x18], 0x6746
cmp dword [ebp - 0x18], 0x67cc
jle 0x10030cf7
mov edi, ebx
mov dword [ebp - 0x40], ebx
mov esi, ebx
mov eax, edi
mov dword [ebp - 0x48], 0x33d2
cdq
idiv esi
mov dword [ebp - 0x2c], edx
mov edi, ebx
mov ebx, dword [ebp - 0x2c]
mov ecx, edi
mov eax, ebx
shl eax, cl
mov ecx, 0x1007b9d8
cdq
push edx
push eax
call fcn.1000616a
inc edi
cmp edi, 0x5693
jl 0x10030cb7
dec ebx
dec dword [ebp - 0x48]
push 0
mov dword [ebp - 0x2c], ebx
pop ebx
jne 0x10030cb2
mov edi, dword [ebp - 0x40]
inc esi
cmp esi, 0x162f
jl 0x10030ca3
inc edi
mov dword [ebp - 0x40], edi
cmp edi, 0x31c1
jl 0x10030ca1
mov eax, dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], ebx
je 0x10030d35
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
sub eax, 0x65e3
neg eax
sbb eax, eax
inc eax
cmp eax, 0xfffe
sbb eax, eax
inc eax
sub ecx, eax
neg ecx
sbb ecx, ecx
add ecx, 0x57ce14de
sub ecx, dword [ebp - 0x28]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x24]
jg 0x10030d35
xor eax, eax
inc eax
jmp 0x10030d37
mov eax, ebx
add eax, 0xfffffffb
imul eax, dword [ebp - 0x3c]
test eax, eax
je 0x10030da6
mov dword [ebp - 0x44], 4
mov dword [ebp - 0x38], ebx
jmp 0x10030d5f
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x250], 1
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 3
jl 0x10030d4e
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x24]
dec edx
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setge cl
imul eax, ecx, 0xe5f5
test eax, eax
je 0x10030d8f
cmp dword [ebp - 0x250], ebx
jne 0x10030d8f
mov edx, ebx
jmp 0x10030d92
xor edx, edx
inc edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x3c], ebx
jne 0x10030e19
jmp 0x10030dd8
mov dword [ebp - 0x34], 9
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x34]
inc eax
je 0x10030dd3
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp eax, 0x3c394a73
setle cl
sub ecx, dword [ebp - 0x24]
je 0x10030dd3
xor eax, eax
inc eax
jmp 0x10030dd5
mov eax, ebx
mov dword [ebp - 0x44], eax
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x18], 0x6367
jge 0x10030e12
mov edx, str.zkmvorxw_uxubdk_uqx_jnbplvo_vggdbcqj_goojyul_qyyss
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x10030e12
mov dword [ebp - 4], 6
inc dword [ebp - 0x28]
jmp 0x10030c74
push 0x5c
pop eax
push 2
mov byte [ebp - 0x50], bl
mov ecx, ebx
mov word [ebp - 0x4f], 0x1d2
mov byte [ebp - 0x4d], 0x89
mov word [ebp - 0x58], ax
pop esi
cmp esi, 2
jne 0x10030e43
push esi
pop ecx
jmp 0x10030e6a
movzx edx, byte [ebp + esi - 0x4f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx eax, word [ebp + eax*2 - 0x58]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x50]
mov word [ebp + eax*2 - 0x58], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10030e3a
xor eax, eax
mov dword [ebp - 0x148], 7
mov word [ebp - 0x56], ax
lea ecx, [ebp - 0x15c]
mov word [ebp - 0x15c], ax
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 0x14c], ebx
call fcn.10006e7d
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x40], 0x7106
cmp dword [ebp - 0x40], 0x7203
jle 0x10030f4a
mov dword [ebp - 0x34], ebx
mov edi, ebx
mov dword [ebp - 0x48], ebx
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov edx, edi
mov dword [ebp - 0x44], ebx
mov ecx, esi
mov edi, ebx
mov esi, dword [ebp - 0x34]
sar edx, cl
mov dword [ebp - 0x4c], edx
mov eax, edi
lea ecx, [ebp - 0x2d4]
xor eax, edx
or eax, esi
cdq
push edx
push eax
call fcn.10001a84
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10030ef9
mov eax, dword [eax]
push eax
call fcn.1004823d
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2d4]
call fcn.10006cdf
mov edx, dword [ebp - 0x4c]
inc edi
cmp edi, 0x3e78
jl 0x10030edb
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x48]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x644c
jl 0x10030eca
inc edi
mov dword [ebp - 0x48], edi
cmp edi, 0x2f03
jl 0x10030ec5
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x44ec
jl 0x10030ec0
push 3
pop edi
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x40], 0x6f2b
jge 0x10030f64
push str.curtxf_zwbmgas_xeduap_rycjfzx_izniplq_tbpedv_tps_wxcrr_hyulvctr_uxyqliwvj
call fcn.1004823d
pop ecx
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x48], 0xe605
mov dword [ebp - 0x20], 0xfffffffa
jmp 0x10031005
mov dword [ebp - 0x38], 0x8306
xor edx, edx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x2c], 0x4082
mov dword [ebp - 0x24], 0x31bb000e
mov dword [ebp - 0x44], 0x78254981
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
setge dl
cmp edx, 0x83de
je 0x10030fd4
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], 0x3cea2ff3
cmp dword [ebp - 0x18], 0xffffffff
jne 0x10030ffd
cmp dword [ebp - 0x20], ebx
je 0x10030ffd
xor eax, eax
inc eax
jmp 0x10030fff
mov eax, ebx
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffff8
jg 0x10030f85
cmp dword [ebp - 0x18], ebx
je 0x10031017
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xd4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x48]
push dword [ebp - 0x44]
movdqa xmm0, xmmword [0x1006e9d0]
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x214]
mov dword [ebp - 0x28], 0xa10b913a
push eax
push ebx
mov dword [ebp - 0x58], ebx
movdqu xmmword [ebp - 0x214], xmm0
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0xd0], ebx
mov dword [ebp - 0xcc], ebx
call fcn.100096b7
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x30], 0xe5ccc90a
mov dword [ebp - 0x44], 0xfffffffc
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], ebx
jl 0x100311e3
mov dword [ebp - 0x28], 0xfff9
mov dword [ebp - 0x48], 0x501f
cmp dword [ebp - 0x48], 0x5141
jle 0x1003110f
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x44], ebx
mov ebx, esi
xor ebx, edi
mov edi, dword [ebp - 0x44]
mov eax, edi
mov ecx, 0x1007b9d8
or eax, ebx
cdq
push edx
push eax
call fcn.1000616a
inc edi
cmp edi, 0x3a6b
jl 0x100310ca
mov edi, dword [ebp - 0x2c]
inc esi
push 0
pop ebx
cmp esi, 0x429d
jl 0x100310c0
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x2b4a
jl 0x100310be
push 0x221c
push 0x1a1
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x18], ebx
jmp 0x10031121
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x194], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10031114
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x48], 0x4f7e
jge 0x10031161
mov edx, str.bomyrmfbd_odznszlrn_jdpopslbm_pprx_esovjn_cfhfnhic_sbughld_xycy_klvnbzrrw_nptyfgc_iitrfo
mov ecx, 0x1007b9d8
call fcn.10008de6
jmp 0x10031161
mov dword [ebp - 4], 0x16
mov dword [ebp - 0x18], ebx
jmp 0x1003117e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1cc], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003116d
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0xd4]
mov dword [eax + 8], ecx
dec ecx
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x30]
setg dl
sub eax, edx
neg eax
sbb eax, eax
add eax, 0xfe3e
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x44], eax
dec dword [ebp - 0x30]
jmp 0x10031099
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x13
call fcn.10006788
push 0x5f
pop eax
push 2
pop edx
mov byte [ebp - 0x60], bl
mov esi, edx
mov dword [ebp - 0x5f], 0x8010318
mov ecx, ebx
mov byte [ebp - 0x5b], 0x44
mov word [ebp - 0x64], ax
cmp esi, edx
jne 0x10031219
push 4
pop ecx
push ecx
pop esi
jmp 0x10031245
movzx edx, byte [ebp + esi - 0x5f]
mov eax, esi
sub eax, ecx
push 2
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0x64]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x60]
add ecx, edx
pop edx
mov word [ebp + eax*2 - 0x64], cx
mov ecx, ebx
add esi, edx
cmp esi, 6
jb 0x1003120e
xor eax, eax
mov word [ebp - 0x62], ax
mov dword [ebp - 0x30], 0x5020f89b
mov dword [ebp - 0x34], 0xa20b2878
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x44], 0xfffffffa
mov dword [ebp - 0x18], ebx
jmp 0x10031280
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x94], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003126f
mov dword [ebp - 0x18], ebx
jmp 0x1003129b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xec], 9
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1003128a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0x30]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 8
sete al
sub edx, eax
mov eax, dword [ebp - 0x30]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp eax, edx
setne cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
imul ecx, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
mov dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x34]
add ecx, eax
mov eax, dword [ebp - 0x90]
cmp ecx, eax
mov eax, dword [ebp - 0xe8]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x94]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0xe8]
sete dl
sub edx, eax
jne 0x1003132d
cmp dword [ebp - 0x90], ebx
jne 0x1003132d
mov eax, ebx
jmp 0x10031330
xor eax, eax
inc eax
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0x2c]
sub ecx, eax
mov dword [ebp - 0x1b0], 7
xor eax, eax
mov dword [ebp - 0x44], ecx
mov word [ebp - 0x1c4], ax
lea ecx, [ebp - 0x1c4]
lea eax, [ebp - 0x64]
mov dword [ebp - 0x1b4], ebx
push eax
call fcn.10006e7d
mov byte [ebp - 4], 0x19
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x30], 0xf9c2
mov dword [ebp - 0x18], 0xd29be1d9
mov dword [ebp - 0x20], 0x872d
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x28], 0x4709ba87
mov dword [ebp - 0x44], 0xfffffff6
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
imul ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
inc dword [ebp - 0x20]
cmp eax, ecx
jne 0x100313b2
xor eax, eax
inc eax
jmp 0x100313b4
mov eax, ebx
cmp dword [ebp - 0x30], eax
jg 0x1003146d
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
jne 0x100313d7
cmp dword [ebp - 0x18], ebx
jne 0x100313d7
mov eax, ebx
jmp 0x100313da
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
xor edx, edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], 0x1600d549
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
neg edx
cmp edx, 0xfffffffa
jg 0x10031406
cmp dword [ebp - 0x20], ebx
jne 0x1003146d
push 2
lea ecx, [ebp - 0x180]
call fcn.10006705
mov dword [ebp - 0x44], 0xd7547197
mov dword [ebp - 0x44], 0xaa30d26b
mov dword [ebp - 0x38], ebx
jmp 0x10031439
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x180]
mov dword [eax + ecx*4], 9
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 2
jl 0x10031426
mov dword [ebp - 0x20], ebx
jmp 0x10031457
mov dword [ebp - 0x44], ebx
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x180]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jle 0x10031444
lea ecx, [ebp - 0x180]
call fcn.10006788
jmp 0x100315c7
xor ecx, ecx
inc ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x40], 0x37ec
mov dword [ebp - 0x38], ebx
jmp 0x10031490
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x144], 0xe2bf
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 4
jl 0x1003147f
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 3
jg 0x100315c7
jmp 0x100314a8
xor ecx, ecx
inc ecx
mov dword [ebp - 0x2c], 0xd5ab883e
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x38], ebx
jmp 0x100314c5
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0x54], 0xffff
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], ecx
jl 0x100314b7
mov dword [ebp - 0x30], ebx
jmp 0x10031599
mov dword [ebp - 0x48], 0xffffffff
xor edx, edx
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0x144], ecx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp + eax*4 - 0x144]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x144], esi
mov eax, dword [ebp - 0x30]
cmp eax, 1
mov eax, dword [ebp - 0x54]
setg dl
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 0x48]
cmp edx, eax
setge cl
xor edx, edx
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x48]
setge dl
xor ecx, ecx
add edx, esi
cmp edx, eax
setge cl
sub ecx, 0x1c50
jne 0x10031549
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x30]
sub ecx, eax
sub ecx, dword [ebp - 0x24]
jne 0x10031559
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x144]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
imul edx, eax
mov eax, dword [ebp - 0x54]
cmp edx, eax
mov eax, dword [ebp - 0x54]
sete cl
xor edx, edx
cmp ecx, 0xfffffffb
setg dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x4c], ecx
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], 3
jle 0x100314d2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100315ba
push ebx
push ebx
push 0x1baf
push ebx
call dword [sym.imp.USER32.dll_SetMenuItemInfoW]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x100314a5
push dword [ebp - 0x14c]
cmp dword [ebp - 0x148], 8
lea eax, [ebp - 0x15c]
push ebx
cmovae eax, dword [ebp - 0x15c]
lea ecx, [ebp - 0x1e4]
push eax
call fcn.10006f37
cmp eax, 0xffffffff
je 0x1003160d
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1c4]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1e4]
call fcn.10009280
jmp 0x100315c7
mov ecx, dword [ebp - 0x88]
lea eax, [ebp - 0x1e4]
push eax
lea edx, [ebp - 0x1ac]
call fcn.10031967
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1c4]
call fcn.10006fda
push ebx
push 1
lea ecx, [ebp - 0x15c]
call fcn.10006fda
push ebx
push 1
lea ecx, [ebp - 0x1e4]
call fcn.10006fda
push ebx
push 1
lea ecx, [ebp - 0x1ac]
call fcn.10006fda
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x88]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret