Function at 0x10039fde
Capabilities:
Get file size

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10077a8b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1004
call fcn.100729d0
push esi
push edi
or dword [ebp - 0xaa0], 0xffffffff
or dword [ebp - 0xa9c], 0xffffffff
or dword [ebp - 0xa98], 0xffffffff
or dword [ebp - 0xa94], 0xffffffff
lea ecx, [ebp - 0x2b1]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa90]
push eax
lea eax, [ebp - 0xaa0]
push eax
lea ecx, [ebp - 0xfa0]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9b8]
call fcn.10023ff8
and dword [ebp - 4], 0
push 1
lea ecx, [ebp - 0xb18]
call fcn.10023f9c
mov byte [ebp - 4], 1
mov dword [ebp - 0x760], 6
mov dword [ebp - 0x38], 0
jmp 0x1003a082
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003a098
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xcd4], 0x568d
jmp 0x1003a07b
mov dword [ebp - 0x38], 0
jmp 0x1003a0a8
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 1
jge 0x1003a0c4
push dword [ebp - 0x38]
lea ecx, [ebp - 0xb18]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
jmp 0x1003a0a1
mov dword [ebp - 0x38], 0
jmp 0x1003a0d4
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 3
jge 0x1003a0ea
mov eax, dword [ebp - 0x38]
mov dword [ebp + eax*4 - 0xef0], 1
jmp 0x1003a0cd
push 0
lea ecx, [ebp - 0x9b8]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003a120
push 0
lea ecx, [ebp - 0x9b8]
call fcn.1002403a
mov dword [ebp - 0x500], eax
mov eax, dword [ebp - 0x500]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x500]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9b8]
call fcn.1002403a
cmp dword [eax], 0xffffffe6
jge 0x1003a414
push 4
lea ecx, [ebp - 0x8ac]
call fcn.10023f9c
mov byte [ebp - 4], 2
mov dword [ebp - 0x768], 0xffffffff
mov dword [ebp - 0xdb4], 0xffffffff
push 3
lea ecx, [ebp - 0xd04]
call fcn.10023f9c
mov byte [ebp - 4], 3
mov dword [ebp - 0x7c], 0
jmp 0x1003a17c
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 4
jge 0x1003a198
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x8ac]
call fcn.1002403a
mov dword [eax], 9
jmp 0x1003a175
mov dword [ebp - 0x7c], 0
jmp 0x1003a1a8
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 3
jge 0x1003a1c4
push dword [ebp - 0x7c]
lea ecx, [ebp - 0xd04]
call fcn.1002403a
mov dword [eax], 0x83acdd71
jmp 0x1003a1a1
push 1
lea ecx, [ebp - 0x8ac]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003a1fa
push 1
lea ecx, [ebp - 0x8ac]
call fcn.1002403a
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x740]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x8ac]
call fcn.1002403a
cmp dword [eax], 0xffffffe2
je 0x1003a3e5
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0xd38], 0x78d7cbae
push 2
lea ecx, [ebp - 0xcf4]
call fcn.10023f9c
mov byte [ebp - 4], 4
mov dword [ebp - 0xe48], 0x786ff529
mov dword [ebp - 0x280], 0
jmp 0x1003a258
mov eax, dword [ebp - 0x280]
inc eax
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 2
jge 0x1003a27a
push dword [ebp - 0x280]
lea ecx, [ebp - 0xcf4]
call fcn.1002403a
mov dword [eax], 0xfffffffa
jmp 0x1003a24b
mov byte [ebp - 0xbc], 0
movzx eax, byte [ebp - 0xbc]
test eax, eax
je 0x1003a294
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0xd0], 0
jmp 0x1003a2ad
mov eax, dword [ebp - 0xd0]
inc eax
mov dword [ebp - 0xd0], eax
cmp dword [ebp - 0xd0], 2
jg 0x1003a3d1
mov dword [ebp - 0x750], 1
mov dword [ebp - 0xe60], 0x73063d62
push 1
lea ecx, [ebp - 0xce4]
call fcn.10023f9c
mov byte [ebp - 4], 5
mov dword [ebp - 0x188], 0
jmp 0x1003a2f8
mov eax, dword [ebp - 0x188]
inc eax
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 1
jge 0x1003a31a
push dword [ebp - 0x188]
lea ecx, [ebp - 0xce4]
call fcn.1002403a
mov dword [eax], 6
jmp 0x1003a2eb
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0xcd4], 0
je 0x1003a349
mov eax, dword [ebp - 0xd0]
cmp dword [ebp + eax*4 - 0xcd4], 0xfa8bc07c
jb 0x1003a349
mov dword [ebp - 0x748], 1
jmp 0x1003a350
and dword [ebp - 0x748], 0
push 0
lea ecx, [ebp - 0xb18]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, dword [ebp - 0x748]
mov dword [ebp - 0x750], eax
imul eax, dword [ebp - 0x750], 0x563f
test eax, eax
je 0x1003a397
cmp dword [ebp - 0xd0], 0
je 0x1003a397
mov dword [ebp - 0x758], 1
jmp 0x1003a39e
and dword [ebp - 0x758], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x758]
mov dword [ebp + eax - 0xef0], ecx
mov eax, dword [ebp - 0x760]
inc eax
mov dword [ebp - 0x760], eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xce4]
call fcn.1002401e
jmp 0x1003a2a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xcf4]
call fcn.1002401e
jmp 0x1003a1d6
mov eax, dword [ebp - 0x768]
mov dword [ebp - 0x768], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd04]
call fcn.1002401e
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x8ac]
call fcn.1002401e
jmp 0x1003a0fc
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb18]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9b8]
call fcn.1002401e
or dword [ebp - 0xa14], 0xffffffff
or dword [ebp - 0xa10], 0xffffffff
or dword [ebp - 0xa0c], 0xffffffff
or dword [ebp - 0xa08], 0xffffffff
lea ecx, [ebp - 0x311]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa04]
push eax
lea eax, [ebp - 0xa14]
push eax
lea ecx, [ebp - 0xfb8]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9d0]
call fcn.10023ff8
mov dword [ebp - 4], 6
push 1
lea ecx, [ebp - 0xb78]
call fcn.10023f9c
mov byte [ebp - 4], 7
mov dword [ebp - 0x38c], 6
mov dword [ebp - 0x20], 0
jmp 0x1003a4b5
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003a4cb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xd14], 0x568d
jmp 0x1003a4ae
mov dword [ebp - 0x20], 0
jmp 0x1003a4db
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 1
jge 0x1003a4f7
push dword [ebp - 0x20]
lea ecx, [ebp - 0xb78]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
jmp 0x1003a4d4
mov dword [ebp - 0x20], 0
jmp 0x1003a507
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 3
jge 0x1003a51d
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xf20], 1
jmp 0x1003a500
push 0
lea ecx, [ebp - 0x9d0]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003a553
push 0
lea ecx, [ebp - 0x9d0]
call fcn.1002403a
mov dword [ebp - 0x738], eax
mov eax, dword [ebp - 0x738]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x738]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9d0]
call fcn.1002403a
cmp dword [eax], 0xffffffe6
jge 0x1003a865
push 4
lea ecx, [ebp - 0x8bc]
call fcn.10023f9c
mov byte [ebp - 4], 8
mov dword [ebp - 0x584], 0xffffffff
mov dword [ebp - 0xd64], 0xffffffff
push 3
lea ecx, [ebp - 0xd44]
call fcn.10023f9c
mov byte [ebp - 4], 9
mov dword [ebp - 0x88], 0
jmp 0x1003a5b8
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 4
jge 0x1003a5da
push dword [ebp - 0x88]
lea ecx, [ebp - 0x8bc]
call fcn.1002403a
mov dword [eax], 9
jmp 0x1003a5ab
mov dword [ebp - 0x88], 0
jmp 0x1003a5f3
mov eax, dword [ebp - 0x88]
inc eax
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 3
jge 0x1003a615
push dword [ebp - 0x88]
lea ecx, [ebp - 0xd44]
call fcn.1002403a
mov dword [eax], 0x83acdd71
jmp 0x1003a5e6
push 1
lea ecx, [ebp - 0x8bc]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003a64b
push 1
lea ecx, [ebp - 0x8bc]
call fcn.1002403a
mov dword [ebp - 0x37c], eax
mov eax, dword [ebp - 0x37c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x37c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x8bc]
call fcn.1002403a
cmp dword [eax], 0xffffffe2
je 0x1003a836
mov dword [ebp - 0xd8], 1
mov dword [ebp - 0xec0], 0x78d7cbae
push 2
lea ecx, [ebp - 0xd34]
call fcn.10023f9c
mov byte [ebp - 4], 0xa
mov dword [ebp - 0xd74], 0x786ff529
mov dword [ebp - 0x208], 0
jmp 0x1003a6a9
mov eax, dword [ebp - 0x208]
inc eax
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 2
jge 0x1003a6cb
push dword [ebp - 0x208]
lea ecx, [ebp - 0xd34]
call fcn.1002403a
mov dword [eax], 0xfffffffa
jmp 0x1003a69c
mov byte [ebp - 0xf6], 0
movzx eax, byte [ebp - 0xf6]
test eax, eax
je 0x1003a6e5
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0xd8], 0
jmp 0x1003a6fe
mov eax, dword [ebp - 0xd8]
inc eax
mov dword [ebp - 0xd8], eax
cmp dword [ebp - 0xd8], 2
jg 0x1003a822
mov dword [ebp - 0x384], 1
mov dword [ebp - 0xe68], 0x73063d62
push 1
lea ecx, [ebp - 0xd24]
call fcn.10023f9c
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x190], 0
jmp 0x1003a749
mov eax, dword [ebp - 0x190]
inc eax
mov dword [ebp - 0x190], eax
cmp dword [ebp - 0x190], 1
jge 0x1003a76b
push dword [ebp - 0x190]
lea ecx, [ebp - 0xd24]
call fcn.1002403a
mov dword [eax], 6
jmp 0x1003a73c
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0xd14], 0
je 0x1003a79a
mov eax, dword [ebp - 0xd8]
cmp dword [ebp + eax*4 - 0xd14], 0xfa8bc07c
jb 0x1003a79a
mov dword [ebp - 0x57c], 1
jmp 0x1003a7a1
and dword [ebp - 0x57c], 0
push 0
lea ecx, [ebp - 0xb78]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, dword [ebp - 0x57c]
mov dword [ebp - 0x384], eax
imul eax, dword [ebp - 0x384], 0x563f
test eax, eax
je 0x1003a7e8
cmp dword [ebp - 0xd8], 0
je 0x1003a7e8
mov dword [ebp - 0x67c], 1
jmp 0x1003a7ef
and dword [ebp - 0x67c], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x67c]
mov dword [ebp + eax - 0xf20], ecx
mov eax, dword [ebp - 0x38c]
inc eax
mov dword [ebp - 0x38c], eax
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0xd24]
call fcn.1002401e
jmp 0x1003a6f1
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd34]
call fcn.1002401e
jmp 0x1003a627
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x584], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0xd44]
call fcn.1002401e
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x8bc]
call fcn.1002401e
jmp 0x1003a52f
mov byte [ebp - 4], 6
lea ecx, [ebp - 0xb78]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9d0]
call fcn.1002401e
mov dword [ebp - 0x134], 0xb58e469a
mov dword [ebp - 0xd84], 0xfffffff7
mov dword [ebp - 0xdf8], 0x30de9bf9
mov dword [ebp - 0xd94], 0xfffffffc
mov dword [ebp - 0xbfc], 5
mov dword [ebp - 0xc04], 2
mov dword [ebp - 0x394], 0x886a6c65
mov dword [ebp - 0x248], 0
jmp 0x1003a8e2
mov eax, dword [ebp - 0x248]
inc eax
mov dword [ebp - 0x248], eax
cmp dword [ebp - 0x248], 1
jge 0x1003a8fe
mov eax, dword [ebp - 0x248]
mov dword [ebp + eax*4 - 0x820], 1
jmp 0x1003a8d5
mov dword [ebp - 0x134], 0
jmp 0x1003a917
mov eax, dword [ebp - 0x134]
inc eax
mov dword [ebp - 0x134], eax
cmp dword [ebp - 0x134], 1
jge 0x1003a933
mov eax, dword [ebp - 0x134]
mov dword [ebp + eax*4 - 0x820], 0
jmp 0x1003a90a
mov eax, dword [ebp - 0x394]
dec eax
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x198], 0
jmp 0x1003a959
mov eax, dword [ebp - 0x198]
inc eax
mov dword [ebp - 0x198], eax
cmp dword [ebp - 0x198], 1
jge 0x1003a975
mov eax, dword [ebp - 0x198]
mov dword [ebp + eax*4 - 0x210], 0
jmp 0x1003a94c
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x210], 9
jmp 0x1003a9a3
push 4
pop eax
imul eax, eax, 0
mov eax, dword [ebp + eax - 0x210]
dec eax
push 4
pop ecx
imul ecx, ecx, 0
mov dword [ebp + ecx - 0x210], eax
push 4
pop eax
imul eax, eax, 0
cmp dword [ebp + eax - 0x210], 0xffffffe2
jge 0x1003a9ca
mov dword [ebp - 0x85c], 0xfffffff9
cmp dword [ebp - 0x85c], 0
je 0x1003a9c8
jmp 0x1003a9ca
jmp 0x1003a988
push 1
lea ecx, [ebp - 0xee0]
call fcn.10023f9c
mov dword [ebp - 4], 0xc
mov dword [ebp - 0xac], 0x70bb743d
mov dword [ebp - 0xc0c], 0
mov dword [ebp - 0xc14], 0xca9869ec
mov dword [ebp - 0xc1c], 8
mov dword [ebp - 0xc24], 0xe6e2bfbd
mov dword [ebp - 0x1a0], 0
jmp 0x1003aa29
mov eax, dword [ebp - 0x1a0]
inc eax
mov dword [ebp - 0x1a0], eax
cmp dword [ebp - 0x1a0], 1
jge 0x1003aa4b
push dword [ebp - 0x1a0]
lea ecx, [ebp - 0xee0]
call fcn.1002403a
mov dword [eax], 0xfffffff8
jmp 0x1003aa1c
mov dword [ebp - 0xac], 0
jmp 0x1003aa64
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x1003aad0
mov byte [ebp - 0xba], 0
movzx eax, byte [ebp - 0xba]
test eax, eax
je 0x1003aace
push 0x17e
push 0x1239
push 0x3c4
push 0x1efd
push 0x936
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0x4c0
push 0x21f5
push 0xdd0
push 0x90e
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_StretchBlt]
jmp 0x1003aa57
mov dword [ebp - 0xac], 0
jmp 0x1003aae9
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0
jg 0x1003ab84
mov dword [ebp - 0xc2c], 0xfffffffb
mov dword [ebp - 0xa28], 0x80be39e3
mov dword [ebp - 0xa24], 0x80be39e3
mov dword [ebp - 0xa20], 0x80be39e3
mov dword [ebp - 0xa1c], 0x80be39e3
lea ecx, [ebp - 0x291]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0xa28]
push eax
lea ecx, [ebp - 0xfb0]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0xf38]
call fcn.10023ff8
mov dword [ebp - 0x6fc], 0xcf5a8b06
mov eax, dword [ebp - 0x6fc]
inc eax
mov dword [ebp - 0x6fc], eax
lea ecx, [ebp - 0xf38]
call fcn.1002401e
jmp 0x1003aadc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xee0]
call fcn.1002401e
or dword [ebp - 0xa3c], 0xffffffff
or dword [ebp - 0xa38], 0xffffffff
or dword [ebp - 0xa34], 0xffffffff
or dword [ebp - 0xa30], 0xffffffff
lea ecx, [ebp - 0x312]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0xa3c]
push eax
lea ecx, [ebp - 0xfc0]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x9c4]
call fcn.10023ff8
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x268], 0xba394643
mov dword [ebp - 0x884], 2
mov dword [ebp - 0xc34], 0xe63e3155
mov dword [ebp - 0x86c], 0xfffffffe
mov dword [ebp - 0xc3c], 0xe672ca3c
mov dword [ebp - 0xc44], 0x1247adf1
mov dword [ebp - 0xc4c], 0xffffffff
mov dword [ebp - 0xc54], 0x92758e92
mov dword [ebp - 0xc5c], 0x40a16501
mov dword [ebp - 0x864], 0xfffffffa
mov dword [ebp - 0x684], 0xe64f6cbc
mov dword [ebp - 0x88c], 0x7e815f84
mov dword [ebp - 0x874], 2
mov dword [ebp - 0x87c], 3
mov dword [ebp - 0x68], 0
jmp 0x1003ac87
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 4
jge 0x1003ac9d
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0x1010], 0xfffffff7
jmp 0x1003ac80
mov dword [ebp - 0x68], 0
jmp 0x1003acad
mov eax, dword [ebp - 0x68]
inc eax
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 3
jge 0x1003acc3
mov eax, dword [ebp - 0x68]
mov dword [ebp + eax*4 - 0xf50], 0x1658a600
jmp 0x1003aca6
mov dword [ebp - 0x268], 3
jmp 0x1003acdc
mov eax, dword [ebp - 0x268]
dec eax
mov dword [ebp - 0x268], eax
cmp dword [ebp - 0x268], 0
jl 0x1003ad8a
mov dword [ebp - 0xc64], 0
mov dword [ebp - 0xc6c], 7
mov dword [ebp - 0xc74], 1
mov dword [ebp - 0xc7c], 0x12d2c87a
mov dword [ebp - 0xc84], 0xfffffffc
mov dword [ebp - 0x39c], 0x34886255
mov dword [ebp - 0x1a8], 0
jmp 0x1003ad3e
mov eax, dword [ebp - 0x1a8]
inc eax
mov dword [ebp - 0x1a8], eax
cmp dword [ebp - 0x1a8], 1
jge 0x1003ad5a
mov eax, dword [ebp - 0x1a8]
mov dword [ebp + eax*4 - 0xc8c], 5
jmp 0x1003ad31
mov byte [ebp - 0xbb], 0
movzx eax, byte [ebp - 0xbb]
test eax, eax
je 0x1003ad78
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov eax, dword [ebp - 0x39c]
dec eax
mov dword [ebp - 0x39c], eax
jmp 0x1003accf
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x1010]
mov dword [ebp - 0xc94], eax
mov eax, dword [ebp - 0x864]
mov dword [ebp - 0xc9c], eax
cmp dword [ebp - 0x86c], 0
je 0x1003adc2
xor eax, eax
je 0x1003adc2
mov dword [ebp - 0x58c], 1
jmp 0x1003adc9
and dword [ebp - 0x58c], 0
mov eax, dword [ebp - 0x874]
cmp dword [ebp - 0x58c], eax
jl 0x1003ade3
mov dword [ebp - 0x3a4], 1
jmp 0x1003adea
and dword [ebp - 0x3a4], 0
mov eax, dword [ebp - 0x3a4]
add eax, 0x3c3fa3c
jne 0x1003ae10
push 4
pop eax
shl eax, 0
cmp dword [ebp + eax - 0xf50], 0
jne 0x1003ae10
and dword [ebp - 0x3ac], 0
jmp 0x1003ae1a
mov dword [ebp - 0x3ac], 1
mov eax, dword [ebp - 0x87c]
mov dword [ebp - 0x684], eax
mov eax, dword [ebp - 0x684]
cmp eax, dword [ebp - 0x3ac]
jge 0x1003ae40
mov dword [ebp - 0x594], 1
jmp 0x1003ae47
and dword [ebp - 0x594], 0
mov eax, dword [ebp - 0x884]
cmp eax, dword [ebp - 0x594]
jne 0x1003ae61
mov dword [ebp - 0x3b4], 1
jmp 0x1003ae68
and dword [ebp - 0x3b4], 0
cmp dword [ebp - 0x3b4], 0xfffffffe
jne 0x1003ae7d
mov dword [ebp - 0x73c], 1
jmp 0x1003ae84
and dword [ebp - 0x73c], 0
mov eax, dword [ebp - 0x73c]
mov dword [ebp - 0x88c], eax
push 1
lea ecx, [ebp - 0xb84]
call fcn.10023f9c
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x5a4], 6
mov dword [ebp - 0x30], 0
jmp 0x1003aebb
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1003aed1
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xe58], 0x568d
jmp 0x1003aeb4
mov dword [ebp - 0x30], 0
jmp 0x1003aee1
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 1
jge 0x1003aefd
push dword [ebp - 0x30]
lea ecx, [ebp - 0xb84]
call fcn.1002403a
mov dword [eax], 0x4746a1c1
jmp 0x1003aeda
mov dword [ebp - 0x30], 0
jmp 0x1003af0d
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x1003af23
mov eax, dword [ebp - 0x30]
mov dword [ebp + eax*4 - 0xf68], 1
jmp 0x1003af06
push 0
lea ecx, [ebp - 0x9c4]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003af59
push 0
lea ecx, [ebp - 0x9c4]
call fcn.1002403a
mov dword [ebp - 0x3bc], eax
mov eax, dword [ebp - 0x3bc]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x3bc]
mov dword [ecx], eax
push 0
lea ecx, [ebp - 0x9c4]
call fcn.1002403a
cmp dword [eax], 0xffffffe6
jge 0x1003b24d
push 4
lea ecx, [ebp - 0x8cc]
call fcn.10023f9c
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x3d4], 0xffffffff
mov dword [ebp - 0xca4], 0xffffffff
push 3
lea ecx, [ebp - 0xd60]
call fcn.10023f9c
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x4c], 0
jmp 0x1003afb5
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 4
jge 0x1003afd1
push dword [ebp - 0x4c]
lea ecx, [ebp - 0x8cc]
call fcn.1002403a
mov dword [eax], 9
jmp 0x1003afae
mov dword [ebp - 0x4c], 0
jmp 0x1003afe1
mov eax, dword [ebp - 0x4c]
inc eax
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 3
jge 0x1003affd
push dword [ebp - 0x4c]
lea ecx, [ebp - 0xd60]
call fcn.1002403a
mov dword [eax], 0x83acdd71
jmp 0x1003afda
push 1
lea ecx, [ebp - 0x8cc]
call fcn.1002403a
and dword [eax], 0
jmp 0x1003b033
push 1
lea ecx, [ebp - 0x8cc]
call fcn.1002403a
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
mov eax, dword [eax]
dec eax
mov ecx, dword [ebp - 0x59c]
mov dword [ecx], eax
push 1
lea ecx, [ebp - 0x8cc]
call fcn.1002403a
cmp dword [eax], 0xffffffe2
je 0x1003b21e
mov dword [ebp - 0xe0], 1
mov dword [ebp - 0xcac], 0x78d7cbae
push 2
lea ecx, [ebp - 0xd50]
call fcn.10023f9c
mov byte [ebp - 4], 0x11
mov dword [ebp - 0xcb4], 0x786ff529
mov dword [ebp - 0x218], 0
jmp 0x1003b091
mov eax, dword [ebp - 0x218]
inc eax
mov dword [ebp - 0x218], eax
cmp dword [ebp - 0x218], 2
jge 0x1003b0b3
push dword [ebp - 0x218]
lea ecx, [ebp - 0xd50]
call fcn.1002403a
mov dword [eax], 0xfffffffa
jmp 0x1003b084
mov byte [ebp - 0xbd], 0
movzx eax, byte [ebp - 0xbd]
test eax, eax
je 0x1003b0cd
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov dword [ebp - 0xe0], 0
jmp 0x1003b0e6
mov eax, dword [ebp - 0xe0]
inc eax
mov dword [ebp - 0xe0], eax
cmp dword [ebp - 0xe0], 2
jg 0x1003b20a
mov dword [ebp - 0x68c], 1
mov dword [ebp - 0xcbc], 0x73063d62
push 1
lea ecx, [ebp - 0xea0]
call fcn.10023f9c
mov byte [ebp - 4], 0x12
mov dword [ebp - 0x1b0], 0
jmp 0x1003b131
mov eax, dword [ebp - 0x1b0]
inc eax
mov dword [ebp - 0x1b0], eax
cmp dword [ebp - 0x1b0], 1
jge 0x1003b153
push dword [ebp - 0x1b0]
lea ecx, [ebp - 0xea0]
call fcn.1002403a
mov dword [eax], 6
jmp 0x1003b124
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0xe58], 0
je 0x1003b182
mov eax, dword [ebp - 0xe0]
cmp dword [ebp + eax*4 - 0xe58], 0xfa8bc07c
jb 0x1003b182
mov dword [ebp - 0x3c4], 1
jmp 0x1003b189
and dword [ebp - 0x3c4], 0
push 0
lea ecx, [ebp - 0xb84]
call fcn.1002403a
mov dword [eax], 0x563f
mov eax, 0xe3e7
sub eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x68c], eax
imul eax, dword [ebp - 0x68c], 0x563f
test eax, eax
je 0x1003b1d0
cmp dword [ebp - 0xe0], 0
je 0x1003b1d0
mov dword [ebp - 0x3cc], 1
jmp 0x1003b1d7
and dword [ebp - 0x3cc], 0
push 4
pop eax
shl eax, 1
mov ecx, dword [ebp - 0x3cc]
mov dword [ebp + eax - 0xf68], ecx
mov eax, dword [ebp - 0x5a4]
inc eax
mov dword [ebp - 0x5a4], eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xea0]
call fcn.1002401e
jmp 0x1003b0d9
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xd50]
call fcn.1002401e
jmp 0x1003b00f
mov eax, dword [ebp - 0x3d4]
mov dword [ebp - 0x3d4], eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xd60]
call fcn.1002401e
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x8cc]
call fcn.1002401e
jmp 0x1003af35
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xb84]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x9c4]
call fcn.1002401e
mov dword [ebp - 0x154], 0xe76f5020
push 2
lea ecx, [ebp - 0xb48]
call fcn.10023f9c
mov dword [ebp - 4], 0x13
mov dword [ebp - 0x50], 0
jmp 0x1003b299
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 4
jge 0x1003b2af
mov eax, dword [ebp - 0x50]
mov dword [ebp + eax*4 - 0xa00], 0xdc85
jmp 0x1003b292
mov dword [ebp - 0x50], 0
jmp 0x1003b2bf
mov eax, dword [ebp - 0x50]
inc eax
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 2
jge 0x1003b2db
push dword [ebp - 0x50]
lea ecx, [ebp - 0xb48]
call fcn.1002403a
mov dword [eax], 0xd743ccc
jmp 0x1003b2b8
mov dword [ebp - 0x154], 0
jmp 0x1003b2f4
mov eax, dword [ebp - 0x154]
inc eax
mov dword [ebp - 0x154], eax
cmp dword [ebp - 0x154], 3
jg 0x1003b4f6
mov dword [ebp - 0x40], 0xffffffff
push 1
lea ecx, [ebp - 0xb00]
call fcn.10023f9c
mov byte [ebp - 4], 0x14
mov dword [ebp - 0x250], 0
jmp 0x1003b332
mov eax, dword [ebp - 0x250]
inc eax
mov dword [ebp - 0x250], eax
cmp dword [ebp - 0x250], 1
jge 0x1003b354
push dword [ebp - 0x250]
lea ecx, [ebp - 0xb00]
call fcn.1002403a
mov dword [eax], 0x595a2e71
jmp 0x1003b325
mov dword [ebp - 0x40], 3
jmp 0x1003b364
mov eax, dword [ebp - 0x40]
dec eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1003b4c6
mov dword [ebp - 0x2fc], 1
mov dword [ebp - 0x894], 0xfffffffc
mov eax, dword [ebp - 0x40]
cmp dword [ebp + eax*4 - 0xa00], 0
jne 0x1003b404
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0xcc4], eax
cmp dword [ebp - 0x2fc], 0
jne 0x1003b3bc
cmp dword [ebp - 0x2fc], 0
jne 0x1003b3bc
cmp dword [ebp - 0x894], 0
jne 0x1003b3bc
and dword [ebp - 0x704], 0
jmp 0x1003b3c6
mov dword [ebp - 0x704], 1
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp + eax*4 - 0xa00]
cmp dword [ebp - 0x704], eax
jge 0x1003b3ea
cmp dword [ebp - 0x40], 0
je 0x1003b3ea
mov dword [ebp - 0x3dc], 1
jmp 0x1003b3f1
and dword [ebp - 0x3dc], 0
mov eax, dword [ebp - 0x2fc]
imul eax, dword [ebp - 0x3dc]
cmp eax, dword [ebp - 0x154]
mov eax, 0x96d4
test eax, eax
je 0x1003b422
mov eax, 0xffff
test eax, eax
je 0x1003b422
mov dword [ebp - 0x5ac], 1
jmp 0x1003b429
and dword [ebp - 0x5ac], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0xa00]
cmp dword [ebp - 0x5ac], eax
jg 0x1003b44a
mov dword [ebp - 0x3e4], 1
jmp 0x1003b451
and dword [ebp - 0x3e4], 0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp + ecx*4 - 0xa00]
imul ecx, dword [ebp - 0x3e4]
dec ecx
cmp dword [ebp + eax*4 - 0xa00], ecx
jne 0x1003b47b
mov dword [ebp - 0x694], 1
jmp 0x1003b482
and dword [ebp - 0x694], 0
push 0
lea ecx, [ebp - 0xb00]
call fcn.1002403a
mov ecx, dword [ebp - 0x694]
cmp ecx, dword [eax]
je 0x1003b4a5
mov dword [ebp - 0x3ec], 1
jmp 0x1003b4ac
and dword [ebp - 0x3ec], 0
push 0
lea ecx, [ebp - 0xb48]
call fcn.1002403a
mov ecx, dword [ebp - 0x3ec]
mov dword [eax], ecx
jmp 0x1003b35d
mov byte [ebp - 0xbf], 0
movzx eax, byte [ebp - 0xbf]
test eax, eax
je 0x1003b4e2
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xb00]
call fcn.1002401e
jmp 0x1003b2e7
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb48]
call fcn.1002401e
mov dword [ebp - 0x13c], 0xb58e469a
mov dword [ebp - 0xe3c], 0xfffffff7
mov dword [ebp - 0xe44], 0x30de9bf9
mov dword [ebp - 0xe4c], 0xfffffffc
mov dword [ebp - 0xe5c], 5
mov dword [ebp - 0xe64], 2
mov dword [ebp - 0x5b4], 0x886a6c65
mov dword [ebp - 0x1b8], 0
jmp 0x1003b564
mov eax, dword [ebp - 0x1b8]
inc eax
mov dword [ebp - 0x1b8], eax
cmp dword [ebp - 0x1b8], 1
jge 0x1003b580
mov eax, dword [ebp - 0x1b8]
mov dword [ebp + eax*4 - 0x89c], 1
jmp 0x1003b557
mov dword [ebp - 0x13c], 0
jmp 0x1003b599
mov eax, dword [ebp - 0x13c]
inc eax
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 1
jge 0x1003b5b5
mov eax, dword [ebp - 0x13c]
mov dword [ebp + eax*4 - 0x89c], 0
jmp 0x1003b58c
mov eax, dword [ebp - 0x5b4]
dec eax
mov dword [ebp - 0x5b4], eax
mov dword [ebp - 0xa64], 0xffff
mov dword [ebp - 0xa60], 0xffff
mov dword [ebp - 0xa5c], 0xffff
mov dword [ebp - 0xa58], 0xffff
lea ecx, [ebp - 0x2a9]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa54]
push eax
lea eax, [ebp - 0xa64]
push eax
lea ecx, [ebp - 0xfd0]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x348]
call fcn.10023ff8
mov dword [ebp - 4], 0x15
mov dword [ebp - 0x28], 1
mov dword [ebp - 0x164], 1
push 2
lea ecx, [ebp - 0xb30]
call fcn.10023f9c
mov byte [ebp - 4], 0x16
mov dword [ebp - 0x7a0], 0xb0a94fe8
mov dword [ebp - 0x910], 0xfffffffd
mov dword [ebp - 0x220], 0
jmp 0x1003b675
mov eax, dword [ebp - 0x220]
inc eax
mov dword [ebp - 0x220], eax
cmp dword [ebp - 0x220], 2
jge 0x1003b697
push dword [ebp - 0x220]
lea ecx, [ebp - 0xb30]
call fcn.1002403a
mov dword [eax], 8
jmp 0x1003b668
mov dword [ebp - 0x28], 0
jmp 0x1003b6a7
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 3
jg 0x1003b89c
mov dword [ebp - 0x414], 0x85b3d925
cmp dword [ebp - 0x164], 2
jge 0x1003b6d6
cmp dword [ebp - 0x164], 0
jne 0x1003b6d6
and dword [ebp - 0x3f4], 0
jmp 0x1003b6e0
mov dword [ebp - 0x3f4], 1
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
mov ecx, dword [ebp - 0x3f4]
cmp ecx, dword [eax]
jge 0x1003b704
mov dword [ebp - 0x75c], 1
jmp 0x1003b70b
and dword [ebp - 0x75c], 0
mov eax, dword [ebp - 0x75c]
mov dword [ebp - 0x164], eax
cmp dword [ebp - 0x164], 0
jne 0x1003b72c
mov dword [ebp - 0x3fc], 1
jmp 0x1003b733
and dword [ebp - 0x3fc], 0
mov esi, dword [ebp - 0x164]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003b757
mov dword [ebp - 0x5bc], 1
jmp 0x1003b75e
and dword [ebp - 0x5bc], 0
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x5bc]
jg 0x1003b775
mov dword [ebp - 0x404], 1
jmp 0x1003b77c
and dword [ebp - 0x404], 0
push 1
lea ecx, [ebp - 0x348]
call fcn.1002403a
mov eax, dword [eax]
mov ecx, dword [ebp - 0x404]
lea eax, [ecx + eax - 1]
imul eax, eax, 9
cmp eax, 4
jle 0x1003b7a9
mov dword [ebp - 0x69c], 1
jmp 0x1003b7b0
and dword [ebp - 0x69c], 0
cmp dword [ebp - 0x69c], 0
jb 0x1003b7c5
mov dword [ebp - 0x40c], 1
jmp 0x1003b7cc
and dword [ebp - 0x40c], 0
push 2
lea ecx, [ebp - 0x348]
call fcn.1002403a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x40c]
jle 0x1003b7ef
mov dword [ebp - 0x5c4], 1
jmp 0x1003b7f6
and dword [ebp - 0x5c4], 0
mov esi, dword [ebp - 0x5c4]
add esi, 0x69393dda
push 1
lea ecx, [ebp - 0xb30]
call fcn.1002403a
mov dword [eax], esi
mov dword [ebp - 0x414], 0xfffffffe
mov esi, dword [ebp - 0x414]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
sub esi, dword [eax]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
imul esi, dword [eax]
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003b860
mov dword [ebp - 0x83c], 1
jmp 0x1003b867
and dword [ebp - 0x83c], 0
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xe6c], eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x348]
call fcn.1002403a
mov eax, dword [eax]
sub eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x7a0], eax
cmp dword [ebp - 0x910], 0
je 0x1003b897
jmp 0x1003b89c
jmp 0x1003b6a0
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0xb30]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x348]
call fcn.1002401e
mov dword [ebp - 0x9a4], 0
mov dword [ebp - 0x7b8], 0
mov dword [ebp - 0x70c], 0xffffffff
mov dword [ebp - 0x320], 1
mov dword [ebp - 0x2bc], 0xfffa
mov dword [ebp - 0x6a4], 0xfc4b
mov dword [ebp - 0x920], 0
mov dword [ebp - 0xb94], 0xfffffff8
mov dword [ebp - 0xb90], 0xfffffff8
mov dword [ebp - 0xb8c], 0xfffffff8
mov dword [ebp - 0xb88], 0xfffffff8
mov dword [ebp - 0x9ac], 0x22a19820
mov dword [ebp - 0x7c0], 0
mov dword [ebp - 0x54], 0
jmp 0x1003b94c
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 1
jge 0x1003b962
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0x7a8], 0x3e9323d1
jmp 0x1003b945
mov dword [ebp - 0x54], 0
jmp 0x1003b972
mov eax, dword [ebp - 0x54]
inc eax
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 3
jge 0x1003b988
mov eax, dword [ebp - 0x54]
mov dword [ebp + eax*4 - 0xf80], 0x2a42bbd4
jmp 0x1003b96b
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7a8], 1
mov dword [ebp - 0x70c], 1
mov eax, dword [ebp - 0x70c]
imul eax, dword [ebp - 0x320]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xf80]
jne 0x1003b9d0
cmp dword [ebp - 0x9a4], 0
jne 0x1003b9d0
and dword [ebp - 0x7b0], 0
jmp 0x1003b9da
mov dword [ebp - 0x7b0], 1
mov eax, dword [ebp - 0x320]
mov dword [ebp - 0xe74], eax
mov eax, dword [ebp - 0x920]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xb94]
cmp dword [ebp - 0x7b8], eax
jl 0x1003ba0e
mov dword [ebp - 0x41c], 1
jmp 0x1003ba15
and dword [ebp - 0x41c], 0
mov eax, dword [ebp - 0x2bc]
dec eax
mov dword [ebp - 0x2bc], eax
mov eax, dword [ebp - 0x6a4]
add eax, dword [ebp - 0x41c]
cmp dword [ebp - 0x2bc], eax
jle 0x1003ba42
mov dword [ebp - 0x5cc], 1
jmp 0x1003ba49
and dword [ebp - 0x5cc], 0
mov eax, dword [ebp - 0x9ac]
cmp dword [ebp - 0x5cc], eax
jl 0x1003ba63
mov dword [ebp - 0x424], 1
jmp 0x1003ba6a
and dword [ebp - 0x424], 0
mov eax, dword [ebp - 0x424]
sub eax, dword [ebp - 0x7c0]
cmp eax, dword [ebp - 0x6a4]
jle 0x1003ba8a
mov dword [ebp - 0x42c], 1
jmp 0x1003ba91
and dword [ebp - 0x42c], 0
mov eax, dword [ebp - 0x42c]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x144], 0xe76f5020
push 2
lea ecx, [ebp - 0xaf4]
call fcn.10023f9c
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x80], 0
jmp 0x1003bacb
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 4
jge 0x1003bae1
mov eax, dword [ebp - 0x80]
mov dword [ebp + eax*4 - 0x9e0], 0xdc85
jmp 0x1003bac4
mov dword [ebp - 0x80], 0
jmp 0x1003baf1
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 2
jge 0x1003bb0d
push dword [ebp - 0x80]
lea ecx, [ebp - 0xaf4]
call fcn.1002403a
mov dword [eax], 0xd743ccc
jmp 0x1003baea
mov dword [ebp - 0x144], 0
jmp 0x1003bb26
mov eax, dword [ebp - 0x144]
inc eax
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 3
jg 0x1003bd28
mov dword [ebp - 0x48], 0xffffffff
push 1
lea ecx, [ebp - 0xb60]
call fcn.10023f9c
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x1c0], 0
jmp 0x1003bb64
mov eax, dword [ebp - 0x1c0]
inc eax
mov dword [ebp - 0x1c0], eax
cmp dword [ebp - 0x1c0], 1
jge 0x1003bb86
push dword [ebp - 0x1c0]
lea ecx, [ebp - 0xb60]
call fcn.1002403a
mov dword [eax], 0x595a2e71
jmp 0x1003bb57
mov dword [ebp - 0x48], 3
jmp 0x1003bb96
mov eax, dword [ebp - 0x48]
dec eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x1003bcf8
mov dword [ebp - 0x2c4], 1
mov dword [ebp - 0x928], 0xfffffffc
mov eax, dword [ebp - 0x48]
cmp dword [ebp + eax*4 - 0x9e0], 0
jne 0x1003bc36
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0xe7c], eax
cmp dword [ebp - 0x2c4], 0
jne 0x1003bbee
cmp dword [ebp - 0x2c4], 0
jne 0x1003bbee
cmp dword [ebp - 0x928], 0
jne 0x1003bbee
and dword [ebp - 0x5d4], 0
jmp 0x1003bbf8
mov dword [ebp - 0x5d4], 1
mov eax, dword [ebp - 0x48]
mov eax, dword [ebp + eax*4 - 0x9e0]
cmp dword [ebp - 0x5d4], eax
jge 0x1003bc1c
cmp dword [ebp - 0x48], 0
je 0x1003bc1c
mov dword [ebp - 0x434], 1
jmp 0x1003bc23
and dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x2c4]
imul eax, dword [ebp - 0x434]
cmp eax, dword [ebp - 0x144]
mov eax, 0x96d4
test eax, eax
je 0x1003bc54
mov eax, 0xffff
test eax, eax
je 0x1003bc54
mov dword [ebp - 0x744], 1
jmp 0x1003bc5b
and dword [ebp - 0x744], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9e0]
cmp dword [ebp - 0x744], eax
jg 0x1003bc7c
mov dword [ebp - 0x43c], 1
jmp 0x1003bc83
and dword [ebp - 0x43c], 0
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ebp + ecx*4 - 0x9e0]
imul ecx, dword [ebp - 0x43c]
dec ecx
cmp dword [ebp + eax*4 - 0x9e0], ecx
jne 0x1003bcad
mov dword [ebp - 0x5dc], 1
jmp 0x1003bcb4
and dword [ebp - 0x5dc], 0
push 0
lea ecx, [ebp - 0xb60]
call fcn.1002403a
mov ecx, dword [ebp - 0x5dc]
cmp ecx, dword [eax]
je 0x1003bcd7
mov dword [ebp - 0x444], 1
jmp 0x1003bcde
and dword [ebp - 0x444], 0
push 0
lea ecx, [ebp - 0xaf4]
call fcn.1002403a
mov ecx, dword [ebp - 0x444]
mov dword [eax], ecx
jmp 0x1003bb8f
mov byte [ebp - 0xc1], 0
movzx eax, byte [ebp - 0xc1]
test eax, eax
je 0x1003bd14
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0xb60]
call fcn.1002401e
jmp 0x1003bb19
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xaf4]
call fcn.1002401e
push 3
lea ecx, [ebp - 0x8dc]
call fcn.10023f9c
mov dword [ebp - 4], 0x19
mov dword [ebp - 0x44c], 6
mov dword [ebp - 0x5e4], 4
mov dword [ebp - 0x278], 0
jmp 0x1003bd78
mov eax, dword [ebp - 0x278]
inc eax
mov dword [ebp - 0x278], eax
cmp dword [ebp - 0x278], 3
jge 0x1003bd9a
push dword [ebp - 0x278]
lea ecx, [ebp - 0x8dc]
call fcn.1002403a
mov dword [eax], 0x7ddc85f7
jmp 0x1003bd6b
push 2
lea ecx, [ebp - 0x8dc]
call fcn.1002403a
mov dword [eax], 0xfffffff4
jmp 0x1003bdd3
push 2
lea ecx, [ebp - 0x8dc]
call fcn.1002403a
mov dword [ebp - 0x6ac], eax
mov eax, dword [ebp - 0x6ac]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x6ac]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8dc]
call fcn.1002403a
cmp dword [eax], 0xfffffff8
je 0x1003be2f
mov dword [ebp - 0x7c8], 0xffffffff
mov dword [ebp - 0x44c], 0xffffffff
mov eax, dword [ebp - 0x44c]
mov dword [ebp - 0x5e4], eax
cmp dword [ebp - 0x5e4], 0xfffffffd
jae 0x1003be1a
mov dword [ebp - 0x454], 1
jmp 0x1003be21
and dword [ebp - 0x454], 0
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x7c8], eax
jmp 0x1003bdaf
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8dc]
call fcn.1002401e
mov dword [ebp - 0x15c], 0xb58e469a
mov dword [ebp - 0xe84], 0xfffffff7
mov dword [ebp - 0xe8c], 0x30de9bf9
mov dword [ebp - 0xe94], 0xfffffffc
mov dword [ebp - 0xea4], 5
mov dword [ebp - 0xeac], 2
mov dword [ebp - 0x714], 0x886a6c65
mov dword [ebp - 0x1c8], 0
jmp 0x1003be9d
mov eax, dword [ebp - 0x1c8]
inc eax
mov dword [ebp - 0x1c8], eax
cmp dword [ebp - 0x1c8], 1
jge 0x1003beb9
mov eax, dword [ebp - 0x1c8]
mov dword [ebp + eax*4 - 0x9a8], 1
jmp 0x1003be90
mov dword [ebp - 0x15c], 0
jmp 0x1003bed2
mov eax, dword [ebp - 0x15c]
inc eax
mov dword [ebp - 0x15c], eax
cmp dword [ebp - 0x15c], 1
jge 0x1003beee
mov eax, dword [ebp - 0x15c]
mov dword [ebp + eax*4 - 0x9a8], 0
jmp 0x1003bec5
mov eax, dword [ebp - 0x714]
dec eax
mov dword [ebp - 0x714], eax
mov dword [ebp - 0xa8c], 0xffff
mov dword [ebp - 0xa88], 0xffff
mov dword [ebp - 0xa84], 0xffff
mov dword [ebp - 0xa80], 0xffff
lea ecx, [ebp - 0x285]
call fcn.1000a775
push eax
lea eax, [ebp - 0xa7c]
push eax
lea eax, [ebp - 0xa8c]
push eax
lea ecx, [ebp - 0xfe8]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x360]
call fcn.10023ff8
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x14], 1
mov dword [ebp - 0x14c], 1
push 2
lea ecx, [ebp - 0xb0c]
call fcn.10023f9c
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x930], 0xb0a94fe8
mov dword [ebp - 0x7d8], 0xfffffffd
mov dword [ebp - 0x228], 0
jmp 0x1003bfae
mov eax, dword [ebp - 0x228]
inc eax
mov dword [ebp - 0x228], eax
cmp dword [ebp - 0x228], 2
jge 0x1003bfd0
push dword [ebp - 0x228]
lea ecx, [ebp - 0xb0c]
call fcn.1002403a
mov dword [eax], 8
jmp 0x1003bfa1
mov dword [ebp - 0x14], 0
jmp 0x1003bfe0
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 3
jg 0x1003c1d5
mov dword [ebp - 0x47c], 0x85b3d925
cmp dword [ebp - 0x14c], 2
jge 0x1003c00f
cmp dword [ebp - 0x14c], 0
jne 0x1003c00f
and dword [ebp - 0x45c], 0
jmp 0x1003c019
mov dword [ebp - 0x45c], 1
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
mov ecx, dword [ebp - 0x45c]
cmp ecx, dword [eax]
jge 0x1003c03d
mov dword [ebp - 0x5ec], 1
jmp 0x1003c044
and dword [ebp - 0x5ec], 0
mov eax, dword [ebp - 0x5ec]
mov dword [ebp - 0x14c], eax
cmp dword [ebp - 0x14c], 0
jne 0x1003c065
mov dword [ebp - 0x464], 1
jmp 0x1003c06c
and dword [ebp - 0x464], 0
mov esi, dword [ebp - 0x14c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003c090
mov dword [ebp - 0x6b4], 1
jmp 0x1003c097
and dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp - 0x6b4]
jg 0x1003c0ae
mov dword [ebp - 0x46c], 1
jmp 0x1003c0b5
and dword [ebp - 0x46c], 0
push 1
lea ecx, [ebp - 0x360]
call fcn.1002403a
mov eax, dword [eax]
mov ecx, dword [ebp - 0x46c]
lea eax, [ecx + eax - 1]
imul eax, eax, 9
cmp eax, 4
jle 0x1003c0e2
mov dword [ebp - 0x5f4], 1
jmp 0x1003c0e9
and dword [ebp - 0x5f4], 0
cmp dword [ebp - 0x5f4], 0
jb 0x1003c0fe
mov dword [ebp - 0x474], 1
jmp 0x1003c105
and dword [ebp - 0x474], 0
push 2
lea ecx, [ebp - 0x360]
call fcn.1002403a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x474]
jle 0x1003c128
mov dword [ebp - 0x76c], 1
jmp 0x1003c12f
and dword [ebp - 0x76c], 0
mov esi, dword [ebp - 0x76c]
add esi, 0x69393dda
push 1
lea ecx, [ebp - 0xb0c]
call fcn.1002403a
mov dword [eax], esi
mov dword [ebp - 0x47c], 0xfffffffe
mov esi, dword [ebp - 0x47c]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
sub esi, dword [eax]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
imul esi, dword [eax]
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003c199
mov dword [ebp - 0x7d0], 1
jmp 0x1003c1a0
and dword [ebp - 0x7d0], 0
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0xeb4], eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0x360]
call fcn.1002403a
mov eax, dword [eax]
sub eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x7d8], 0
je 0x1003c1d0
jmp 0x1003c1d5
jmp 0x1003bfd9
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0xb0c]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x360]
call fcn.1002401e
mov dword [ebp - 0x100], 1
mov dword [ebp - 0x970], 1
mov dword [ebp - 0x100], 0
jmp 0x1003c220
mov eax, dword [ebp - 0x100]
inc eax
mov dword [ebp - 0x100], eax
cmp dword [ebp - 0x100], 1
je 0x1003c2c0
mov dword [ebp - 0x304], 1
mov byte [ebp - 0xc3], 0
movzx eax, byte [ebp - 0xc3]
test eax, eax
je 0x1003c251
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x100]
imul eax, dword [ebp - 0x304]
test eax, eax
je 0x1003c272
cmp dword [ebp - 0x304], 0
je 0x1003c272
cmp dword [ebp - 0x100], 0
xor eax, eax
cmp eax, 0x3773672d
jle 0x1003c287
mov dword [ebp - 0x5fc], 1
jmp 0x1003c28e
and dword [ebp - 0x5fc], 0
mov eax, dword [ebp - 0x304]
cmp eax, dword [ebp - 0x5fc]
jge 0x1003c2a8
mov dword [ebp - 0x484], 1
jmp 0x1003c2af
and dword [ebp - 0x484], 0
mov eax, dword [ebp - 0x484]
mov dword [ebp - 0x970], eax
jmp 0x1003c213
mov dword [ebp - 0x938], 0
mov dword [ebp - 0x7f0], 0
mov dword [ebp - 0x6bc], 0xffffffff
mov dword [ebp - 0x318], 1
mov dword [ebp - 0x2cc], 0xfffa
mov dword [ebp - 0x71c], 0xfc4b
mov dword [ebp - 0x990], 0
mov dword [ebp - 0xba4], 0xfffffff8
mov dword [ebp - 0xba0], 0xfffffff8
mov dword [ebp - 0xb9c], 0xfffffff8
mov dword [ebp - 0xb98], 0xfffffff8
mov dword [ebp - 0x940], 0x22a19820
mov dword [ebp - 0x7f8], 0
mov dword [ebp - 0x70], 0
jmp 0x1003c352
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 1
jge 0x1003c368
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0x7e0], 0x3e9323d1
jmp 0x1003c34b
mov dword [ebp - 0x70], 0
jmp 0x1003c378
mov eax, dword [ebp - 0x70]
inc eax
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 3
jge 0x1003c38e
mov eax, dword [ebp - 0x70]
mov dword [ebp + eax*4 - 0xf98], 0x2a42bbd4
jmp 0x1003c371
push 4
pop eax
imul eax, eax, 0
mov dword [ebp + eax - 0x7e0], 1
mov dword [ebp - 0x6bc], 1
mov eax, dword [ebp - 0x6bc]
imul eax, dword [ebp - 0x318]
push 4
pop ecx
shl ecx, 1
add eax, dword [ebp + ecx - 0xf98]
jne 0x1003c3d6
cmp dword [ebp - 0x938], 0
jne 0x1003c3d6
and dword [ebp - 0x7e8], 0
jmp 0x1003c3e0
mov dword [ebp - 0x7e8], 1
mov eax, dword [ebp - 0x318]
mov dword [ebp - 0xebc], eax
mov eax, dword [ebp - 0x990]
push 4
pop ecx
imul ecx, ecx, 3
imul eax, dword [ebp + ecx - 0xba4]
cmp dword [ebp - 0x7f0], eax
jl 0x1003c414
mov dword [ebp - 0x48c], 1
jmp 0x1003c41b
and dword [ebp - 0x48c], 0
mov eax, dword [ebp - 0x2cc]
dec eax
mov dword [ebp - 0x2cc], eax
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x48c]
cmp dword [ebp - 0x2cc], eax
jle 0x1003c448
mov dword [ebp - 0x604], 1
jmp 0x1003c44f
and dword [ebp - 0x604], 0
mov eax, dword [ebp - 0x940]
cmp dword [ebp - 0x604], eax
jl 0x1003c469
mov dword [ebp - 0x494], 1
jmp 0x1003c470
and dword [ebp - 0x494], 0
mov eax, dword [ebp - 0x494]
sub eax, dword [ebp - 0x7f8]
cmp eax, dword [ebp - 0x71c]
jle 0x1003c490
mov dword [ebp - 0x49c], 1
jmp 0x1003c497
and dword [ebp - 0x49c], 0
mov eax, dword [ebp - 0x49c]
mov dword [ebp - 0x318], eax
push 2
lea ecx, [ebp - 0xd70]
call fcn.10023f9c
mov dword [ebp - 4], 0x1c
mov dword [ebp - 0x258], 0x57976326
mov dword [ebp - 0x1d0], 0
jmp 0x1003c4da
mov eax, dword [ebp - 0x1d0]
inc eax
mov dword [ebp - 0x1d0], eax
cmp dword [ebp - 0x1d0], 2
jge 0x1003c4fc
push dword [ebp - 0x1d0]
lea ecx, [ebp - 0xd70]
call fcn.1002403a
mov dword [eax], 0xfffffff7
jmp 0x1003c4cd
mov dword [ebp - 0x258], 1
jmp 0x1003c515
mov eax, dword [ebp - 0x258]
dec eax
mov dword [ebp - 0x258], eax
cmp dword [ebp - 0x258], 0
jl 0x1003c542
mov byte [ebp - 0xc5], 0
movzx eax, byte [ebp - 0xc5]
test eax, eax
je 0x1003c540
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
jmp 0x1003c508
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xd70]
call fcn.1002401e
mov dword [ebp - 0x12c], 0xe76f5020
push 2
lea ecx, [ebp - 0xb3c]
call fcn.10023f9c
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x90], 0
jmp 0x1003c588
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 4
jge 0x1003c5a4
mov eax, dword [ebp - 0x90]
mov dword [ebp + eax*4 - 0x9f0], 0xdc85
jmp 0x1003c57b
mov dword [ebp - 0x90], 0
jmp 0x1003c5bd
mov eax, dword [ebp - 0x90]
inc eax
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 2
jge 0x1003c5df
push dword [ebp - 0x90]
lea ecx, [ebp - 0xb3c]
call fcn.1002403a
mov dword [eax], 0xd743ccc
jmp 0x1003c5b0
mov dword [ebp - 0x12c], 0
jmp 0x1003c5f8
mov eax, dword [ebp - 0x12c]
inc eax
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 3
jg 0x1003c7fa
mov dword [ebp - 0x44], 0xffffffff
push 1
lea ecx, [ebp - 0xb24]
call fcn.10023f9c
mov byte [ebp - 4], 0x1e
mov dword [ebp - 0x1d8], 0
jmp 0x1003c636
mov eax, dword [ebp - 0x1d8]
inc eax
mov dword [ebp - 0x1d8], eax
cmp dword [ebp - 0x1d8], 1
jge 0x1003c658
push dword [ebp - 0x1d8]
lea ecx, [ebp - 0xb24]
call fcn.1002403a
mov dword [eax], 0x595a2e71
jmp 0x1003c629
mov dword [ebp - 0x44], 3
jmp 0x1003c668
mov eax, dword [ebp - 0x44]
dec eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jl 0x1003c7ca
mov dword [ebp - 0x2d4], 1
mov dword [ebp - 0x978], 0xfffffffc
mov eax, dword [ebp - 0x44]
cmp dword [ebp + eax*4 - 0x9f0], 0
jne 0x1003c708
mov eax, dword [ebp - 0x44]
mov dword [ebp - 0xec4], eax
cmp dword [ebp - 0x2d4], 0
jne 0x1003c6c0
cmp dword [ebp - 0x2d4], 0
jne 0x1003c6c0
cmp dword [ebp - 0x978], 0
jne 0x1003c6c0
and dword [ebp - 0x60c], 0
jmp 0x1003c6ca
mov dword [ebp - 0x60c], 1
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp + eax*4 - 0x9f0]
cmp dword [ebp - 0x60c], eax
jge 0x1003c6ee
cmp dword [ebp - 0x44], 0
je 0x1003c6ee
mov dword [ebp - 0x4a4], 1
jmp 0x1003c6f5
and dword [ebp - 0x4a4], 0
mov eax, dword [ebp - 0x2d4]
imul eax, dword [ebp - 0x4a4]
cmp eax, dword [ebp - 0x12c]
mov eax, 0x96d4
test eax, eax
je 0x1003c726
mov eax, 0xffff
test eax, eax
je 0x1003c726
mov dword [ebp - 0x6c4], 1
jmp 0x1003c72d
and dword [ebp - 0x6c4], 0
push 4
pop eax
shl eax, 0
mov eax, dword [ebp + eax - 0x9f0]
cmp dword [ebp - 0x6c4], eax
jg 0x1003c74e
mov dword [ebp - 0x4ac], 1
jmp 0x1003c755
and dword [ebp - 0x4ac], 0
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
mov ecx, dword [ebp + ecx*4 - 0x9f0]
imul ecx, dword [ebp - 0x4ac]
dec ecx
cmp dword [ebp + eax*4 - 0x9f0], ecx
jne 0x1003c77f
mov dword [ebp - 0x614], 1
jmp 0x1003c786
and dword [ebp - 0x614], 0
push 0
lea ecx, [ebp - 0xb24]
call fcn.1002403a
mov ecx, dword [ebp - 0x614]
cmp ecx, dword [eax]
je 0x1003c7a9
mov dword [ebp - 0x4b4], 1
jmp 0x1003c7b0
and dword [ebp - 0x4b4], 0
push 0
lea ecx, [ebp - 0xb3c]
call fcn.1002403a
mov ecx, dword [ebp - 0x4b4]
mov dword [eax], ecx
jmp 0x1003c661
mov byte [ebp - 0xc7], 0
movzx eax, byte [ebp - 0xc7]
test eax, eax
je 0x1003c7e6
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareFileTime]
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0xb24]
call fcn.1002401e
jmp 0x1003c5eb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb3c]
call fcn.1002401e
push 3
lea ecx, [ebp - 0x8ec]
call fcn.10023f9c
mov dword [ebp - 4], 0x1f
mov dword [ebp - 0x4bc], 6
mov dword [ebp - 0x61c], 4
mov dword [ebp - 0x230], 0
jmp 0x1003c84a
mov eax, dword [ebp - 0x230]
inc eax
mov dword [ebp - 0x230], eax
cmp dword [ebp - 0x230], 3
jge 0x1003c86c
push dword [ebp - 0x230]
lea ecx, [ebp - 0x8ec]
call fcn.1002403a
mov dword [eax], 0x7ddc85f7
jmp 0x1003c83d
push 2
lea ecx, [ebp - 0x8ec]
call fcn.1002403a
mov dword [eax], 0xfffffff4
jmp 0x1003c8a5
push 2
lea ecx, [ebp - 0x8ec]
call fcn.1002403a
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp - 0x74c]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x74c]
mov dword [ecx], eax
push 2
lea ecx, [ebp - 0x8ec]
call fcn.1002403a
cmp dword [eax], 0xfffffff8
je 0x1003c901
mov dword [ebp - 0x800], 0xffffffff
mov dword [ebp - 0x4bc], 0xffffffff
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x61c], eax
cmp dword [ebp - 0x61c], 0xfffffffd
jae 0x1003c8ec
mov dword [ebp - 0x4c4], 1
jmp 0x1003c8f3
and dword [ebp - 0x4c4], 0
mov eax, dword [ebp - 0x4c4]
mov dword [ebp - 0x800], eax
jmp 0x1003c881
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x8ec]
call fcn.1002401e
mov dword [ebp - 0xab4], 0xffff
mov dword [ebp - 0xab0], 0xffff
mov dword [ebp - 0xaac], 0xffff
mov dword [ebp - 0xaa8], 0xffff
lea ecx, [ebp - 0x2e9]
call fcn.1000a775
push eax
lea eax, [ebp - 0xaa4]
push eax
lea eax, [ebp - 0xab4]
push eax
lea ecx, [ebp - 0xff8]
call fcn.10024049
push dword [eax + 4]
push dword [eax]
lea ecx, [ebp - 0x33c]
call fcn.10023ff8
mov dword [ebp - 4], 0x20
mov dword [ebp - 0x1c], 1
mov dword [ebp - 0x130], 1
push 2
lea ecx, [ebp - 0xb54]
call fcn.10023f9c
mov byte [ebp - 4], 0x21
mov dword [ebp - 0x808], 0xb0a94fe8
mov dword [ebp - 0x9a0], 0xfffffffd
mov dword [ebp - 0x1e0], 0
jmp 0x1003c9c3
mov eax, dword [ebp - 0x1e0]
inc eax
mov dword [ebp - 0x1e0], eax
cmp dword [ebp - 0x1e0], 2
jge 0x1003c9e5
push dword [ebp - 0x1e0]
lea ecx, [ebp - 0xb54]
call fcn.1002403a
mov dword [eax], 8
jmp 0x1003c9b6
mov dword [ebp - 0x1c], 0
jmp 0x1003c9f5
cmp dword [ebp - 0x1c], 3
jg 0x1003cbea
mov dword [ebp - 0x6d4], 0x85b3d925
cmp dword [ebp - 0x130], 2
jge 0x1003ca24
cmp dword [ebp - 0x130], 0
jne 0x1003ca24
and dword [ebp - 0x6cc], 0
jmp 0x1003ca2e
mov dword [ebp - 0x6cc], 1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x33c]
call fcn.1002403a
mov ecx, dword [ebp - 0x6cc]
cmp ecx, dword [eax]
jge 0x1003ca52
mov dword [ebp - 0x4cc], 1
jmp 0x1003ca59
and dword [ebp - 0x4cc], 0
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x130], eax
cmp dword [ebp - 0x130], 0
jne 0x1003ca7a
mov dword [ebp - 0x624], 1
jmp 0x1003ca81
and dword [ebp - 0x624], 0
mov esi, dword [ebp - 0x130]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x33c]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003caa5
mov dword [ebp - 0x4d4], 1
jmp 0x1003caac
and dword [ebp - 0x4d4], 0
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x4d4]
jg 0x1003cac3
mov dword [ebp - 0x724], 1
jmp 0x1003caca
and dword [ebp - 0x724], 0
push 1
lea ecx, [ebp - 0x33c]
call fcn.1002403a
mov eax, dword [eax]
mov ecx, dword [ebp - 0x724]
lea eax, [ecx + eax - 1]
imul eax, eax, 9
cmp eax, 4
jle 0x1003caf7
mov dword [ebp - 0x4dc], 1
jmp 0x1003cafe
and dword [ebp - 0x4dc], 0
cmp dword [ebp - 0x4dc], 0
jb 0x1003cb13
mov dword [ebp - 0x62c], 1
jmp 0x1003cb1a
and dword [ebp - 0x62c], 0
push 2
lea ecx, [ebp - 0x33c]
call fcn.1002403a
mov eax, dword [eax]
cmp eax, dword [ebp - 0x62c]
jle 0x1003cb3d
mov dword [ebp - 0x4e4], 1
jmp 0x1003cb44
and dword [ebp - 0x4e4], 0
mov esi, dword [ebp - 0x4e4]
add esi, 0x69393dda
push 1
lea ecx, [ebp - 0xb54]
call fcn.1002403a
mov dword [eax], esi
mov dword [ebp - 0x6d4], 0xfffffffe
mov esi, dword [ebp - 0x6d4]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x33c]
call fcn.1002403a
sub esi, dword [eax]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x33c]
call fcn.1002403a
imul esi, dword [eax]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x33c]
call fcn.1002403a
cmp esi, dword [eax]
jl 0x1003cbae
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0xb54]
call fcn.1002401e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x33c]
call fcn.1002401e
mov dword [ebp - 0x108], 1
mov dword [ebp - 0x810], 1
mov dword [ebp - 0x108], 0
jmp 0x1003cc35
mov eax, dword [ebp - 0x108]
inc eax
mov dword [ebp - 0x108], eax
cmp dword [ebp - 0x108], 1
je 0x1003ccd5
mov dword [ebp - 0x30c], 1
mov byte [ebp - 0xc9], 0
movzx eax, byte [ebp - 0xc9]
test eax, eax
je 0x1003cc66
push 0
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov eax, dword [ebp - 0x108]
imul eax, dword [ebp - 0x30c]
test eax, eax
je 0x1003cc87
cmp dword [ebp - 0x30c], 0
je 0x1003cc87
cmp dword [ebp - 0x108], 0
xor eax, eax
cmp eax, 0x3773672d
jle 0x1003cc9c
mov dword [ebp - 0x4ec], 1
jmp 0x1003cca3
and dword [ebp - 0x4ec], 0
mov eax, dword [ebp - 0x30c]
cmp eax, dword [ebp - 0x4ec]
jge 0x1003ccbd
mov dword [ebp - 0x634], 1
jmp 0x1003ccc4
and dword [ebp - 0x634], 0
mov eax, dword [ebp - 0x634]
mov dword [ebp - 0x810], eax
jmp 0x1003cc28
mov dword [ebp - 0x78], 0xfffffffc
mov dword [ebp - 0x128], 9
mov dword [ebp - 0x270], 0
mov dword [ebp - 0x31c], 7
mov dword [ebp - 0x2e4], 0x23020f62
mov dword [ebp - 0x78], 0xfffffffb
jmp 0x1003cd14
cmp dword [ebp - 0x78], 0x17
jle 0x1003ce78
mov dword [ebp - 0x138], 0x5534
mov dword [ebp - 0x2dc], 0x65256810
mov dword [ebp - 0x6dc], 0xffffffff
mov dword [ebp - 0x818], 0xfa4c8210
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x128], eax
jg 0x1003cd60
mov dword [ebp - 0x4f4], 1
jmp 0x1003cd67
and dword [ebp - 0x4f4], 0
mov eax, dword [ebp - 0x138]
cmp dword [ebp - 0x4f4], eax
jle 0x1003cd81
mov dword [ebp - 0x764], 1
jmp 0x1003cd88
and dword [ebp - 0x764], 0
mov dword [ebp - 0x2dc], 0x6d210ec3
mov eax, dword [ebp - 0x2dc]
cmp eax, dword [ebp - 0x764]
je 0x1003cdac
mov dword [ebp - 0x4fc], 1
jmp 0x1003cdb3
and dword [ebp - 0x4fc], 0
mov eax, dword [ebp - 0x138]
add eax, dword [ebp - 0x4fc]
cmp eax, 0xa9bca7b5
ja 0x1003cdd2
mov dword [ebp - 0x950], 1
jmp 0x1003cdd9
and dword [ebp - 0x950], 0
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0xed4], eax
mov eax, dword [ebp - 0x78]
cmp dword [ebp - 0x2dc], eax
jg 0x1003cdfc
mov eax, dword [ebp - 0x31c]
cmp dword [ebp - 0x128], eax
jg 0x1003ce92
mov dword [ebp - 0x64c], 1
jmp 0x1003ce99
and dword [ebp - 0x64c], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x78], eax
jne 0x1003ceb0
mov dword [ebp - 0x644], 1
jmp 0x1003ceb7
and dword [ebp - 0x644], 0
cmp dword [ebp - 0x644], 7
je 0x1003cecc
mov dword [ebp - 0x514], 1
jmp 0x1003ced3
and dword [ebp - 0x514], 0
mov eax, dword [ebp - 0x2e4]
cmp dword [ebp - 0x514], eax
jne 0x1003ceed
mov dword [ebp - 0x72c], 1
jmp 0x1003cef4
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x128]
cmp dword [ebp - 0x72c], eax
je 0x1003cf0e