Function at 0x1000d7b0
Capabilities:
Check for time delay via gettickcount
Check for time delay via queryperformancecounter
Create thread
Enumerate processes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100444c4
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x1005b034]
xor eax, esp
mov dword [esp + 0x250], eax
push ebx
push esi
push edi
mov eax, dword [0x1005b034]
xor eax, esp
push eax
lea eax, [esp + 0x268]
mov dword fs:[0], eax
xor edi, edi
mov dword [esp + 0x20], edi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push edi
push 0x410
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [0x10174a6c], eax
cmp eax, edi
jne 0x1000d849
lea eax, [esp + 0x2c]
push eax
lea ecx, [esp + 0xec]
mov dword [esp + 0x30], str.Fill_process_id
call dword [sym.imp.MSVCR100.dll_public:_void___thiscall_std::exception::constructor_char_const__const_const__]
push 0x100525ec
lea ecx, [esp + 0xec]
push ecx
mov dword [esp + 0xf0], vtable.std::invalid_argument.0
call sub.MSVCR100.dll__CxxThrowException
push str.cmdvrt32.dll
mov dword [esp + 0x274], edi
call fcn.100176c0
push str.SxIn.dll
mov bl, al
call fcn.100176c0
push str.SbieDll.dll
mov byte [esp + 0x2f], al
call fcn.100176c0
test bl, bl
je 0x1000d893
mov edi, 0x2c
mov eax, str.X8eMQ85keSlZXvAhfJbCm52yT5wlaz4MpBeq0P16pw
mov esi, 0x10177544
call fcn.10002d20
mov eax, 0x1004e4f8
jmp 0x1000d8d2
cmp byte [esp + 0x2b], 0
je 0x1000d8b5
mov edi, 0x2c
mov eax, str.X8eMQ85keSlZXvAhfJbCm52yT5wlaz4MpBeq0P16pw
mov esi, 0x10177544
call fcn.10002d20
mov eax, 0x1004e4fc
jmp 0x1000d8d2
test al, al
je 0x1000d8f8
mov edi, 0x2c
mov eax, str.X8eMQ85keSlZXvAhfJbCm52yT5wlaz4MpBeq0P16pw
mov esi, 0x10177544
call fcn.10002d20
mov eax, 0x1004e500
mov edi, 3
mov esi, 0x10177528
call fcn.10002d20
push 0
push 0
push 0
push 0x10037100
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor edi, edi
push edi
push 2
mov dword [esp + 0x13c], 0x128
call dword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
lea edx, [esp + 0x134]
mov ebx, eax
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_Process32First]
cmp eax, edi
je 0x1000dbb0
lea eax, [esp + 0x84]
lea ecx, [esp + 0x38]
mov dword [esp + 0x2c], eax
mov dword [esp + 0x24], ecx
jmp 0x1000d940
mov esi, dword [esp + 0x13c]
lea ecx, [esp + 0x84]
mov dword [esp + 0x34], 0x1004e1b8
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push edi
push edi
lea edx, [esp + 0x40]
mov byte [esp + 0x278], 1
or dword [esp + 0x28], 1
push edx
lea ecx, [esp + 0x40]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [esp + 0x270], 2
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea ecx, [esp + 0x38]
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [esp + 0x38], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], 4
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 4
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [esp + 0x114]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e504
lea ecx, [esp + 0x118]
mov byte [esp + 0x274], 5
call fcn.10008150
cmp dword [esp + 0x128], 0x10
mov eax, dword [esp + 0x114]
jae 0x1000da08
lea eax, [esp + 0x114]
mov esi, dword [sym.imp.KERNEL32.dll_OpenMutexA]
push eax
push edi
push 0x1f0001
call esi
mov dword [0x10174644], eax
cmp eax, edi
je 0x1000da34
mov edx, dword [esp + 0x13c]
mov byte [0x100613a7], 0
mov dword [0x10174640], edx
lea ecx, [esp + 0xf4]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e6cc
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 6
call fcn.10008150
cmp dword [esp + 0x108], 0x10
mov eax, dword [esp + 0xf4]
jae 0x1000da77
lea eax, [esp + 0xf4]
push eax
push edi
push 0x1f0001
call esi
mov dword [0x1017463c], eax
cmp eax, edi
je 0x1000da9c
mov eax, dword [esp + 0x13c]
mov dword [0x10174534], eax
mov byte [0x100643bf], 0
cmp dword [esp + 0x108], 0x10
jb 0x1000dab7
mov ecx, dword [esp + 0xf4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
cmp dword [esp + 0x128], 0x10
mov esi, 0xf
mov dword [esp + 0x108], esi
mov dword [esp + 0x104], edi
mov byte [esp + 0xf4], 0
jb 0x1000daed
mov edx, dword [esp + 0x114]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x128], esi
mov dword [esp + 0x124], edi
mov byte [esp + 0x114], 0
mov ecx, dword [eax + 4]
mov dword [esp + ecx + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [esp + 0x38], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov byte [esp + 0x270], 8
test byte [esp + 0x78], 1
je 0x1000db39
mov edx, dword [esp + 0x48]
mov eax, dword [edx]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push edi
push edi
push edi
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov eax, dword [esp + 0x4c]
mov dword [eax], edi
mov ecx, dword [esp + 0x5c]
mov dword [ecx], edi
mov edx, dword [esp + 0x6c]
mov dword [edx], edi
and dword [esp + 0x78], 0xfffffffe
lea ecx, [esp + 0x38]
mov dword [esp + 0x74], edi
mov byte [esp + 0x270], 7
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov byte [esp + 0x270], 0
mov eax, dword [esp + 0x34]
mov ecx, dword [eax + 4]
mov edx, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [esp + ecx + 0x34], edx
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
lea eax, [esp + 0x134]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_Process32Next]
cmp eax, edi
jne 0x1000d940
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp byte [0x100643bf], 0
je 0x1000dd7f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea ecx, [esp + 0x84]
mov esi, eax
mov dword [esp + 0x34], 0x1004e1b8
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push edi
push edi
lea ecx, [esp + 0x40]
push ecx
mov byte [esp + 0x27c], 9
or dword [esp + 0x2c], 2
lea ecx, [esp + 0x40]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [esp + 0x270], 0xa
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x38]
mov dword [esp + eax + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov ebx, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [esp + 0x38], ebx
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], 4
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 0xc
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [esp + 0xf4]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e6cc
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 0xd
call fcn.10008150
mov eax, dword [esp + 0xf4]
mov dword [0x10174534], esi
mov esi, 0x10
cmp dword [esp + 0x108], esi
jae 0x1000dc98
lea eax, [esp + 0xf4]
push eax
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [0x1017463c], eax
cmp dword [esp + 0x108], esi
jb 0x1000dcc1
mov ecx, dword [esp + 0xf4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x108], 0xf
mov dword [esp + 0x104], edi
mov byte [esp + 0xf4], 0
mov ecx, dword [eax + 4]
lea edx, [esp + 0x84]
mov dword [esp + 0x2c], edx
mov dword [esp + ecx + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea edx, [esp + 0x38]
mov dword [esp + 0x24], edx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x270], 0xf
test byte [esp + 0x78], 1
je 0x1000dd20
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push edi
push edi
push edi
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov ecx, dword [esp + 0x4c]
mov dword [ecx], edi
mov edx, dword [esp + 0x5c]
mov dword [edx], edi
mov eax, dword [esp + 0x6c]
mov dword [eax], edi
and dword [esp + 0x78], 0xfffffffe
lea ecx, [esp + 0x38]
mov dword [esp + 0x74], edi
mov byte [esp + 0x270], 0xe
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov byte [esp + 0x270], 0
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov eax, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
lea ecx, [esp + 0x84]
mov dword [esp + edx + 0x34], eax
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
cmp byte [0x100613a7], 0
je 0x1000df47
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea ecx, [esp + 0x84]
mov esi, eax
mov dword [esp + 0x34], 0x1004e1b8
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push edi
push edi
lea ecx, [esp + 0x40]
push ecx
mov byte [esp + 0x27c], 0x10
or dword [esp + 0x2c], 4
lea ecx, [esp + 0x40]
call dword [sym.imp.MSVCP100.dll_public:_void___thiscall_std::basic_ostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char_____bool_]
mov dword [esp + 0x270], 0x11
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
lea ecx, [esp + 0x38]
mov dword [esp + eax + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov ebx, vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [esp + 0x38], ebx
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], 4
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 0x13
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [esp + 0xf4]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e504
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 0x14
call fcn.10008150
mov eax, dword [esp + 0xf4]
mov dword [0x10174640], esi
mov esi, 0x10
cmp dword [esp + 0x108], esi
jae 0x1000de60
lea eax, [esp + 0xf4]
push eax
push 1
push edi
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [0x10174644], eax
cmp dword [esp + 0x108], esi
jb 0x1000de89
mov ecx, dword [esp + 0xf4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x108], 0xf
mov dword [esp + 0x104], edi
mov byte [esp + 0xf4], 0
mov ecx, dword [eax + 4]
lea edx, [esp + 0x84]
mov dword [esp + 0x2c], edx
mov dword [esp + ecx + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea edx, [esp + 0x38]
mov dword [esp + 0x24], edx
mov dword [esp + 0x38], ebx
mov byte [esp + 0x270], 0x16
test byte [esp + 0x78], 1
je 0x1000dee8
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
push edi
push edi
push edi
lea ecx, [esp + 0x44]
call dword [sym.imp.MSVCP100.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::setg_char___char___char__]
mov ecx, dword [esp + 0x4c]
mov dword [ecx], edi
mov edx, dword [esp + 0x5c]
mov dword [edx], edi
mov eax, dword [esp + 0x6c]
mov dword [eax], edi
and dword [esp + 0x78], 0xfffffffe
lea ecx, [esp + 0x38]
mov dword [esp + 0x74], edi
mov byte [esp + 0x270], 0x15
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::destructor_void_]
mov byte [esp + 0x270], 0
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov eax, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
lea ecx, [esp + 0x84]
mov dword [esp + edx + 0x34], eax
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
xor ebx, ebx
lea ecx, [esp + 0xd4]
push ecx
mov dword [esp + 0x24], ebx
mov edi, 0x1f4
mov dword [esp + 0x28], ebx
mov dword [esp + 0x34], ebx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea edx, [esp + 0xcc]
push edx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
call fcn.10036f40
mov byte [0x1017759d], 1
mov dword [0x10176558], 0xea60
lea esp, [esp]
cmp edi, 0x1f4
jbe 0x1000df9c
xor esi, esi
jmp 0x1000dfa3
mov esi, 0x1f4
sub esi, edi
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, esi
jae 0x1000dfcb
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, edi
cmp eax, esi
jb 0x1000dfb7
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea eax, [esp + 0xdc]
push eax
mov dword [0x100686cc], 1
call esi
lea ecx, [esp + 0xd4]
push ecx
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea edx, [esp + 0xcc]
push edx
call esi
mov ecx, dword [esp + 0x20]
mov eax, ecx
and eax, 7
inc ecx
mov dword [esp + 0x20], ecx
cmp eax, 6
ja case.0x1000e014.3
jmp dword [eax*4 + 0x1000e5c8]
mov eax, 0x1003d340
test eax, eax
jne 0x1000e02d
mov dword [esp + 0x124], ebx
jmp 0x1000e051
lea ecx, [esp + 0x114]
mov dword [esp + method.std::tr1::_Impl_no_alloc0_struct_std::tr1::_Callable_fun_void____cdecl__const__void___0___void_.virtual_0], vtable.std::tr1::_Impl_no_alloc0_struct_std::tr1::_Callable_fun_void____cdecl__const__void___0___void_.0
mov dword [esp + 0x118], 0x1003d340
mov dword [esp + 0x124], ecx
push 0x40
push 0x1000
push 0x18
push ebx
mov byte [esp + 0x280], 0x17
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
cmp esi, ebx
je 0x1000e0c9
mov edx, dword [esp + 0x114]
mov dword [esi], edx
mov eax, dword [esp + 0x118]
mov dword [esi + 4], eax
mov ecx, dword [esp + 0x11c]
mov dword [esi + 8], ecx
mov edx, dword [esp + 0x120]
mov dword [esi + 0xc], edx
mov eax, dword [esp + 0x124]
mov dword [esi + 0x10], eax
mov ecx, dword [esp + 0x128]
mov dword [esi + 0x14], ecx
mov ecx, dword [esi + 0x10]
cmp ecx, ebx
je 0x1000e5c2
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
push 0x8000
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov byte [esp + 0x270], 0
mov ecx, dword [esp + 0x124]
cmp ecx, ebx
je 0x1000e0fa
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0x114]
cmp ecx, eax
setne al
movzx eax, al
push eax
call edx
mov dword [esp + 0x124], ebx
mov esi, dword [sym.imp.USER32.dll_EnumWindows]
push ebx
push 0x10017890
call esi
cmp byte [0x100643bf], 0
je case.0x1000e014.3
push ebx
push 0x100313b0
call esi
jmp case.0x1000e014.3
cmp byte [0x100643bf], 0
je 0x1000e137
push ebx
push 0x100321c0
call dword [sym.imp.USER32.dll_EnumWindows]
mov byte [0x1017653a], 1
jmp case.0x1000e014.3
push ebx
push 0x10017890
call dword [sym.imp.USER32.dll_EnumWindows]
jmp case.0x1000e014.3
push ebx
push 0x100382d0
call dword [sym.imp.USER32.dll_EnumWindows]
jmp case.0x1000e014.3
cmp byte [0x100613a7], 0
je 0x1000e17c
cmp byte [0x1017759d], 0
je 0x1000e17c
call fcn.10036590
mov eax, 0x1003d340
test eax, eax
jne 0x1000e18e
mov dword [esp + 0x104], ebx
jmp 0x1000e1b2
lea ecx, [esp + 0xf4]
mov dword [esp + 0xf4], vtable.std::tr1::_Impl_no_alloc0_struct_std::tr1::_Callable_fun_void____cdecl__const__void___0___void_.0
mov dword [esp + 0xf8], 0x1003d340
mov dword [esp + 0x104], ecx
push 0x40
push 0x1000
push 0x18
push ebx
mov byte [esp + 0x280], 0x18
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
cmp esi, ebx
je 0x1000e22a
mov edx, dword [esp + 0xf4]
mov dword [esi], edx
mov eax, dword [esp + 0xf8]
mov dword [esi + 4], eax
mov ecx, dword [esp + 0xfc]
mov dword [esi + 8], ecx
mov edx, dword [esp + 0x100]
mov dword [esi + 0xc], edx
mov eax, dword [esp + 0x104]
mov dword [esi + 0x10], eax
mov ecx, dword [esp + 0x108]
mov dword [esi + 0x14], ecx
mov ecx, dword [esi + 0x10]
cmp ecx, ebx
je 0x1000e5c2
mov edx, dword [ecx]
mov eax, dword [edx + 4]
call eax
push 0x8000
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov byte [esp + 0x270], 0
mov ecx, dword [esp + 0x104]
cmp ecx, ebx
je case.0x1000e014.3
mov edx, dword [ecx]
mov edx, dword [edx + 0xc]
lea eax, [esp + 0xf4]
cmp ecx, eax
setne al
movzx eax, al
push eax
call edx
jmp case.0x1000e014.3
cmp byte [0x100643bf], 0
je case.0x1000e014.3
call fcn.10035b40
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
sub eax, dword [esp + 0x24]
cmp eax, 0x7d0
jbe 0x1000e546
mov ecx, dword [esp + 0x30]
mov eax, 0xcccccccd
mul ecx
shr edx, 2
mov eax, ecx
lea edx, [edx + edx*4]
sub eax, edx
inc ecx
mov dword [esp + 0x30], ecx
cmp eax, 4
ja case.0x1000e29e.2
jmp dword [eax*4 + 0x1000e5e4]
cmp byte [0x101774da], 0
je case.0x1000e29e.2
call fcn.1001ef20
jmp case.0x1000e29e.2
cmp byte [0x100643bf], 0
je case.0x1000e29e.2
push ebx
push 0x100386e0
call dword [sym.imp.USER32.dll_EnumWindows]
jmp case.0x1000e29e.2
push ebx
push 0x10017890
call dword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x100613a7], 0
jne case.0x1000e29e.2
call fcn.1000d410
test al, al
jne case.0x1000e29e.2
mov byte [0x100613a7], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov esi, eax
lea eax, [esp + 0x34]
push eax
call fcn.1000b7f0
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 0x19
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [esp + 0xf4]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e504
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 0x1a
call fcn.10008150
mov eax, dword [esp + 0xf4]
mov dword [0x10174640], esi
mov esi, 0x10
cmp dword [esp + 0x108], esi
jae 0x1000e379
lea eax, [esp + 0xf4]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [0x10174644], eax
cmp dword [esp + 0x108], esi
jb 0x1000e3a2
mov ecx, dword [esp + 0xf4]
push ecx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, dword [esp + 0x34]
mov dword [esp + 0x108], 0xf
mov dword [esp + 0x104], ebx
mov byte [esp + 0xf4], 0
mov ecx, dword [eax + 4]
lea edx, [esp + 0x84]
mov dword [esp + 0x24], edx
mov dword [esp + ecx + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea ecx, [esp + 0x38]
mov byte [esp + 0x270], 0x1b
call fcn.1000b8c0
mov byte [esp + 0x270], 0
mov edx, dword [esp + 0x34]
mov eax, dword [edx + 4]
mov ecx, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [esp + eax + 0x34], ecx
jmp 0x1000e533
push ebx
push 0x10017890
call dword [sym.imp.USER32.dll_EnumWindows]
cmp byte [0x100643bf], 0
jne case.0x1000e29e.2
call fcn.1000d4e0
test al, al
je 0x1000e434
call fcn.1000d5b0
test al, al
jne case.0x1000e29e.2
mov byte [0x100643bf], 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea edx, [esp + 0x34]
push edx
mov esi, eax
call fcn.1000b7f0
push esi
lea ecx, [esp + 0x38]
mov byte [esp + 0x274], 0x1c
call dword [sym.imp.MSVCP100.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [esp + 0xf4]
lea eax, [esp + 0x34]
call fcn.1000b8a0
push 1
mov eax, 0x1004e6cc
lea ecx, [esp + 0xf8]
mov byte [esp + 0x274], 0x1d
call fcn.10008150
mov eax, dword [esp + 0xf4]
mov dword [0x10174534], esi
mov esi, 0x10
cmp dword [esp + 0x108], esi
jae 0x1000e4ad
lea eax, [esp + 0xf4]
push eax
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [0x1017463c], eax
cmp dword [esp + 0x108], esi
jb 0x1000e4d6
mov eax, dword [esp + 0xf4]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov edx, dword [esp + 0x34]
mov dword [esp + 0x108], 0xf
mov dword [esp + 0x104], ebx
mov byte [esp + 0xf4], 0
mov eax, dword [edx + 4]
lea ecx, [esp + 0x84]
mov dword [esp + 0x24], ecx
mov dword [esp + eax + 0x34], vtable.std::basic_ostringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
lea ecx, [esp + 0x38]
mov byte [esp + 0x270], 0x1e
call fcn.1000b8c0
mov byte [esp + 0x270], 0
mov ecx, dword [esp + 0x34]
mov edx, dword [ecx + 4]
mov eax, dword [sym.imp.MSVCP100.dll_const_std::basic_ostream_char__struct_std::char_traits_char__::vftable]
mov dword [esp + edx + 0x34], eax
lea ecx, [esp + 0x84]
call dword [sym.imp.MSVCP100.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
call edi
mov dword [esp + 0x24], eax
mov esi, dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
lea ecx, [esp + 0xdc]
push ecx
call esi
mov edx, dword [esp + 0xdc]
sub edx, dword [esp + 0xcc]
mov eax, dword [esp + 0xe0]
sbb eax, dword [esp + 0xd0]
push ebx
push 0xf4240
push eax
push edx
call fcn.1003f6e0
mov ecx, dword [esp + 0xd8]
push ecx
mov ecx, dword [esp + 0xd8]
push ecx
push edx
push eax
call fcn.1003f630
push ebx
push 0x3e8
push edx
push eax
call fcn.1003f630
lea edx, [esp + 0xd4]
push edx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
lea eax, [esp + 0xcc]
push eax
call esi
jmp 0x1000df90
call dword [sym.imp.MSVCP100.dll_void___cdecl_std::tr1::_Xfunc_void_]
sbb esp, eax
add byte [eax], dl
and ah, cl
add byte [eax], dl
inc ebx
loope 268494291
adc byte [edx], ah
adc byte [ecx], dl
adc byte [ebp - 0x1f], ah
add byte [eax], dl
push esi
loop 268494307
adc byte [ebp - 0x43efff1e], ah
loop 0x1000e5eb
adc byte [eax - 0x1b], al
add byte [eax], dl
invalid