Function at 0x10030bd3
Capabilities:
Delete file
Query service status
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x1007ef5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x1f0
push ebx
push esi
mov dword [esp + 0x48], edx
or eax, 0xffffffff
push edi
mov dword [esp + 0xc], eax
mov edi, ecx
xor ebx, ebx
mov dword [esp + 0x20], 1
mov dword [esp + 0x74], edi
mov dword [esp + 0x18], ebx
jmp 0x10030c2b
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1c4], 0x624039b6
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jl 0x10030c18
push 2
pop esi
mov dword [esp + 0xc], esi
cmp dword [esp + 0xc], ebx
jl 0x10030c72
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], bl
je 0x10030c51
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], bl
je 0x10030c6c
push 0x1b9f
push 0x541
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFree]
dec dword [esp + 0xc]
jns 0x10030c3f
mov dword [esp + 0xb8], 0xfffffffd
mov dword [esp + 0xb0], 8
mov dword [esp + 0x18], 0x81c2900
mov dword [esp + 0x18], ebx
jmp 0x10030ca9
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0x1dc], 0x3b91
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jl 0x10030c96
mov dword [esp + 0x18], ebx
jmp 0x10030cd6
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], bl
je 0x10030cd2
push 0x1028
push ebx
push 0x13f0
push ebx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jle 0x10030cb6
push dword [esp + 0x48]
movdqa xmm0, xmmword [0x100080e0]
lea eax, [esp + 0x194]
push eax
lea eax, [esp + 0x188]
mov dword [esp + 0xbc], 0xffff
push eax
push ebx
lea ecx, [esp + 0x98]
mov dword [esp + 0x98], ebx
movdqu xmmword [esp + 0x190], xmm0
mov dword [esp + 0x9c], ebx
mov dword [esp + 0xa0], ebx
call fcn.1000971b
mov dword [esp + 0x204], ebx
mov eax, 0x8373b2c
mov byte [esp + 0x1f], bl
mov dword [esp + 0x14], 0x17571177
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], 0xffffffe2
jge 0x10030eff
push esi
lea ecx, [esp + 0x10c]
call fcn.10009161
mov dword [esp + 0x10], 8
mov dword [esp + 0xc], 0x1cb27f08
mov dword [esp + 0x20], 5
mov dword [esp + 0x18], ebx
jmp 0x10030dac
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x108]
mov dword [eax + ecx*4], 0x1479
inc dword [esp + 0x18]
cmp dword [esp + 0x18], esi
jl 0x10030d96
mov eax, dword [esp + 0x14]
xor edx, edx
mov dword [esp + 0x10], 7
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
cmp eax, ecx
setge dl
sub edx, dword [esp + 0x14]
jne 0x10030ddd
cmp dword [esp + 0x7c], ebx
jne 0x10030ddd
mov eax, ebx
jmp 0x10030de0
xor eax, eax
inc eax
mov esi, dword [esp + 0x108]
xor ecx, ecx
cmp dword [esi + 4], eax
sete cl
xor eax, eax
cmp ecx, dword [esi]
setle al
cmp eax, 7
jbe 0x10030e54
mov dword [esp + 0x10], 0x15
jmp 0x10030e4b
mov dword [esp + 0x18], ebx
jmp 0x10030e1e
mov eax, dword [esp + 0x18]
mov dword [esp + eax*4 + 0xc8], 0x4495231f
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 4
jl 0x10030e0b
mov dword [esp + 0xcc], ebx
jmp 0x10030e3d
mov dword [esp + 0xc], 2
inc dword [esp + 0xcc]
cmp dword [esp + 0xcc], 3
jle 0x10030e2e
dec dword [esp + 0x10]
cmp dword [esp + 0x10], 0xfffffff3
je 0x10030e05
jmp 0x10030e65
mov byte [esp + 0x2b], bl
cmp byte [esp + 0x2b], 0
je 0x10030e65
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov ecx, dword [esp + 0x7c]
xor eax, eax
cmp dword [esi + 4], 0xfffffffc
setl al
sub ecx, eax
mov eax, dword [esp + 0x78]
add eax, ecx
cmp eax, dword [esp + 0x14]
jl 0x10030e84
mov eax, dword [esp + 0x7c]
imul ecx, dword [esp + 0x14], 0xa2464a4
xor edx, edx
mov eax, dword [esp + 0x10]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0xfffffff8
setne al
sub eax, dword [esp + 0x14]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 4
mov eax, dword [esp + 0x7c]
setle cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x10]
setle dl
xor ecx, ecx
cmp edx, eax
sete cl
mov dword [esp + 0x10], ecx
xor ecx, ecx
mov eax, dword [esp + 0x10]
cmp eax, dword [esi + 4]
mov eax, dword [esp + 0x20]
setge cl
imul eax, ecx
lea ecx, [esp + 0x108]
mov dword [esp + 0xc], eax
call fcn.1000933d
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffe2
push 2
pop esi
jl 0x10030d6b
cmp byte [esp + 0x1f], 0
je 0x10030f23
push 0x2a1e
push 0x1c3
push 0xf96
push ebx
push 0x67fb
call fcn.1003436f
add esp, 0x14
lea eax, [esp + 0xb4]
push eax
push ebx
push 0x5858
lea eax, [esp + 0x94]
push eax
lea eax, [esp + 0xc0]
push eax
lea eax, [esp + 0xcc]
push eax
call fcn.10035500
add esp, 0x18
mov dword [esp + 0x14], 0x2799ac78
mov dword [esp + 0x18], 0xbbb66efe
lea ecx, [esp + 0xe4]
push 1
call fcn.10009161
xor edx, edx
mov dword [esp + 0x24], ebx
inc edx
jmp 0x10030f8e
mov ecx, dword [esp + 0x24]
mov eax, dword [esp + 0xe4]
mov dword [eax + ecx*4], 0xfffffffd
inc dword [esp + 0x24]
cmp dword [esp + 0x24], edx
jl 0x10030f78
mov dword [esp + 0x14], 0x16
jmp 0x10031021
mov dword [esp + 0x20], 0x5f0b
mov dword [esp + 0x2c], 0xd3ecf04b
mov dword [esp + 0x2c], 0xfffffff9
mov dword [esp + 0x2c], 0xbde283bc
mov dword [esp + 0x2c], 8
mov dword [esp + 0x2c], 0xfffffff8
mov dword [esp + 0x24], ebx
jmp 0x10030fea
mov eax, dword [esp + 0x24]
mov dword [esp + eax*4 + 0x1a0], 0x5b641b44
inc dword [esp + 0x24]
cmp dword [esp + 0x24], esi
jl 0x10030fd7
mov eax, dword [esp + 0x20]
xor ecx, ecx
cmp eax, edx
setl cl
cmp ecx, dword [esp + 0x14]
jl 0x10031007
cmp dword [esp + 0x18], ebx
je 0x1003100f
mov eax, edx
cmp dword [esp + 0x14], ebx
jne 0x10031011
mov eax, ebx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0x2c], eax
dec dword [esp + 0x14]
cmp dword [esp + 0x14], 0xffffffe2
jl 0x10030fa1
mov dword [esp + 0x18], ebx
cmp dword [esp + 0x18], ebx
jl 0x100311dd
or edi, 0xffffffff
mov dword [esp + 0x2c], edx
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], ebx
jg 0x100311cf
mov dword [esp + 0x10], ebx
jmp 0x10031065
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x5c], 0xfffffffa
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x10031055
mov dword [esp + 0x10], ebx
jmp 0x10031085
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x15c], 0x85869
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10031072
mov dword [esp + 0x5c], ebx
jmp 0x100311b4
mov dword [esp + 0x24], 0xd0127420
mov dword [esp + 0x24], ebx
cmp dword [esp + 0x24], ebx
jl 0x100311b0
mov dword [esp + 0xc], 0x232c2a4e
mov dword [esp + 0x20], edi
mov dword [esp + 0xc], ebx
jmp 0x1003119c
mov dword [esp + 0x34], edi
mov ecx, dword [esp + 0x5c]
mov eax, dword [esp + 0xe4]
cmp dword [eax + ecx*4], ebx
jne 0x100311a6
mov dword [esp + 0x34], ebx
cmp dword [esp + 0x34], ebx
jl 0x10031198
mov dword [esp + 0x10], 0xa44bf8e1
mov dword [esp + 0x20], 0xf5771bf3
cmp dword [esp + 0x24], ebx
je 0x10031153
cmp dword [esp + 0x5c], 0x47fd326d
jge 0x10031109
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x2c]
mov eax, dword [esp + 0x10]
cmp dword [esp + 0x10], ebx
je 0x1003111b
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x64]
xor edx, edx
sub eax, 0x9d76
cmp eax, 0x32d4
mov eax, dword [esp + 0x10]
setne dl
xor ecx, ecx
cmp edx, eax
setne cl
imul ecx, dword [esp + 0x24]
imul eax, ecx, 0x41bd
test eax, eax
jne 0x1003114e
cmp dword [esp + 0x20], ebx
je 0x10031153
xor ecx, ecx
inc ecx
jmp 0x10031155
mov ecx, ebx
mov eax, dword [esp + 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x2c]
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esp + 0x15c]
setl cl
xor edx, edx
add ecx, eax
mov eax, dword [esp + 0x10]
cmp ecx, eax
mov eax, dword [esp + 0x60]
setl dl
xor ecx, ecx
cmp eax, edx
setg cl
mov dword [esp + 0x20], ecx
dec dword [esp + 0x34]
jns 0x100310e5
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ebx
jle 0x100310bf
dec dword [esp + 0x24]
jns 0x100310aa
inc dword [esp + 0x5c]
cmp dword [esp + 0x5c], ebx
jle 0x10031094
inc dword [esp + 0x14]
cmp dword [esp + 0x14], ebx
jle 0x1003104f
xor edx, edx
inc edx
dec dword [esp + 0x18]
jns 0x1003103d
mov edi, dword [esp + 0x74]
lea ecx, [esp + 0xe4]
call fcn.1000933d
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0x88]
call fcn.1000933d
push 1
lea ecx, [esp + 0x6c]
call fcn.10009161
xor edx, edx
inc edx
mov dword [esp + 0x204], edx
mov dword [esp + 0x14], 0xfffffff6
mov dword [esp + 0x24], 0xed99ea7
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0xc], 0x100f83bf
mov dword [esp + 0xc], ebx
jmp 0x1003124b
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x68]
mov dword [eax + ecx*4], 0x9f9b3198
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edx
jl 0x10031238
mov dword [esp + 0x14], ebx
cmp dword [esp + 0x14], ebx
jl 0x10031351
mov dword [esp + 0x18], 0xf617a941
lea ecx, [esp + 0xbc]
mov dword [esp + 0xc], 0x38d10fbf
mov dword [esp + 0x20], 0x5718a84d
mov dword [esp + 0x34], edx
mov dword [esp + 0x2c], 0x6f861669
push 3
call fcn.10009161
mov dword [esp + 0x10], ebx
jmp 0x100312aa
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x12c], 0xffffffff
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10031297
mov dword [esp + 0x10], ebx
jmp 0x100312cc
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xbc]
mov dword [eax + ecx*4], 1
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 3
jl 0x100312b6
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
cmp dword [eax + ecx*4], 0xca968364
jne 0x100312fb
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
neg edx
mov eax, dword [esp + 0x68]
sbb edx, edx
neg edx
cmp dword [eax + ecx*4], edx
jne 0x100312ff
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
xor edx, edx
mov eax, dword [esp + 0x68]
inc edx
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
setge cl
sub ecx, dword [esp + 0x18]
add ecx, dword [esp + 0x24]
mov dword [esp + 0x18], ecx
mov dword [esp + 0xc], 0xf2a6ca0c
cmp dword [esp + 0xc], ebx
je 0x10031372
mov dword [esp + 0x2c], 0x3d925d3c
cmp dword [esp + 0x2c], ebx
je 0x10031396
lea ecx, [esp + 0xbc]
call fcn.1000933d
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0x68]
call fcn.1000933d
cmp dword [edi + 0x10], ebx
jne 0x1003147f
xor al, al
jmp 0x10031f99
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031396
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PlayEnhMetaFile]
xor edx, edx
inc edx
cmp dword [esp + 0x14], ebx
jne 0x100313cb
cmp dword [esp + 0x20], ebx
mov ecx, dword [esp + 0x68]
jne 0x100313ac
mov eax, ebx
cmp dword [ecx], ebx
je 0x100313ae
mov eax, edx
mov dword [ecx], eax
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x18]
sub eax, 6
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
mov eax, dword [eax + ecx*4]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x24]
cmp dword [esp + 0x34], ebx
je 0x100313fe
mov eax, dword [esp + 0x68]
mov ecx, edx
cmp dword [eax], ebx
jne 0x10031400
mov ecx, ebx
mov eax, 0x70c85724
mov dword [esp + 0x2c], 0x23e6
sub eax, ecx
add eax, dword [esp + 0x2c]
jne 0x10031423
cmp dword [esp + 0x24], ebx
jne 0x10031423
mov ecx, ebx
cmp dword [esp + 0xc], ebx
je 0x10031425
mov ecx, edx
mov eax, dword [esp + 0x14]
imul eax, ecx
test eax, eax
jne 0x1003143f
mov ecx, dword [esp + 0x14]
mov eax, dword [esp + 0x68]
cmp dword [eax + ecx*4], ebx
mov eax, ebx
je 0x10031441
mov eax, edx
mov dword [esp + 0x130], eax
mov ecx, dword [esp + 0x20]
add ecx, eax
sub ecx, dword [esp + 0x24]
mov eax, dword [esp + 0xbc]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax + 4], ecx
lea ecx, [esp + 0xbc]
call fcn.1000933d
dec dword [esp + 0x14]
js 0x10031351
xor edx, edx
inc edx
jmp 0x1003125f
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0xd8]
push esi
mov dword [eax], ebx
mov dword [esp + 0x18], 0x399841b3
call fcn.10009161
mov dword [esp + 0x18], 0xd3cd3624
mov dword [esp + 0x20], 0x52174d4a
mov dword [esp + 0x20], 7
mov dword [esp + 0xc], ebx
jmp 0x100314ce
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xd8]
mov dword [eax + ecx*4], 1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x100314b8
mov dword [esp + 0x14], ebx
jmp 0x10031696
mov dword [esp + 0x24], 0xffffffff
mov dword [esp + 0x18], ebx
mov dword [esp + 0x24], 1
cmp dword [esp + 0x24], ebx
jl 0x10031692
mov dword [esp + 0x10], 0x43046b6e
mov dword [esp + 0x20], 0xbc8f9611
mov dword [esp + 0x10], ebx
jmp 0x1003167d
mov dword [esp + 0xc], ebx
jmp 0x1003152d
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x13c], 0xb416c28c
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x1003151a
mov edx, dword [esp + 0x24]
mov ecx, dword [esp + 0xd8]
mov eax, dword [esp + 0x10]
cmp dword [ecx + edx*4], eax
jne 0x10031563
mov edx, dword [esp + 0x24]
xor ecx, ecx
mov eax, dword [esp + 0x14]
add edx, 7
cmp edx, eax
setle cl
cmp ecx, dword [esp + 0x24]
jg 0x10031563
mov ecx, ebx
jmp 0x10031566
xor ecx, ecx
inc ecx
mov eax, dword [esp + 0x14]
xor edx, edx
imul eax, ecx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x10]
mov dword [esp + 0x18], 0xffff
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], ebx
mov eax, dword [esp + 0x20]
cmp eax, 1
setge dl
xor ecx, ecx
mov dword [esp + 0x140], edx
mov eax, dword [esp + 0x14]
sub edx, eax
mov eax, dword [esp + 0x14]
cmp edx, eax
setle cl
cmp ecx, dword [esp + 0x10]
mov dword [esp + 0xc], ebx
je 0x10031658
jmp 0x100315e0
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x1e8], 1
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x100315cd
mov dword [esp + 0x18], 1
cmp dword [esp + 0x18], ebx
jl 0x1003160c
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031606
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
dec dword [esp + 0x18]
jns 0x100315f5
mov dword [esp + 0x18], 1
cmp dword [esp + 0x18], ebx
jl 0x10031679
mov dword [esp + 0x20], 0xb46
mov ecx, 0xb6c411e6
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x20]
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [esp + 0x20], eax
dec dword [esp + 0x18]
jns 0x1003161a
jmp 0x10031679
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x150], 0xab66969e
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10031645
dec dword [esp + 0x154]
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031679
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadMenuW]
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jle 0x10031514
dec dword [esp + 0x24]
jns 0x100314fb
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 4
jle 0x100314dd
lea ecx, [esp + 0xd8]
call fcn.1000933d
push dword [esp + 0x48]
lea eax, [esp + 0x1a4]
mov dword [esp + 0x28], 0xe63e3155
push eax
lea eax, [esp + 0x198]
mov dword [esp + 0x28], ebx
push eax
xorps xmm0, xmm0
mov dword [esp + 0xa0], ebx
push ebx
lea ecx, [esp + 0xa4]
mov dword [esp + 0xa8], ebx
movdqu xmmword [esp + 0x1a0], xmm0
mov dword [esp + 0xac], ebx
call fcn.1000971b
xor ecx, ecx
inc ecx
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0xc], ebx
jmp 0x1003171c
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x48], 0xcb1a7a81
inc dword [esp + 0xc]
cmp dword [esp + 0xc], ecx
jl 0x1003170c
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x48]
sub ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x94]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [eax + 8], ecx
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x24]
neg eax
sbb eax, eax
xor ecx, ecx
inc eax
neg eax
test eax, eax
setle cl
xor edx, edx
add ecx, dword [esp + 0x24]
mov eax, dword [esp + 0x24]
cmp ecx, eax
mov eax, dword [esp + 0x20]
setl dl
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [esp + 0x2c], ecx
lea ecx, [esp + 0x94]
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x2c], eax
call fcn.1000933d
push esi
lea ecx, [esp + 0x100]
call fcn.10009161
mov dword [esp + 0x20], 0x7dc4b4e1
mov dword [esp + 0xc], ebx
jmp 0x100317c2
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xfc]
mov dword [eax + ecx*4], 0x1852
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x100317ac
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x100317da
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov eax, dword [esp + 0xfc]
lea ecx, [esp + 0xfc]
dec dword [eax + 4]
call fcn.1000933d
xor esi, esi
lea ecx, [esp + 0x50]
inc esi
push esi
call fcn.10009161
push 2
pop eax
mov dword [esp + 0x204], eax
lea ecx, [esp + 0x114]
mov dword [esp + 0x14], 0xffffffff
mov dword [esp + 0x18], 0x6ab2aee5
mov dword [esp + 0xc], 0x213af72b
mov dword [esp + 0x20], 0x1c57511e
mov dword [esp + 0x2c], esi
push eax
call fcn.10009161
mov dword [esp + 0xc], ebx
jmp 0x10031854
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x114]
mov dword [eax + ecx*4], 0xd55adb51
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 2
jl 0x1003183e
mov ecx, dword [esp + 0x14]
xor edx, edx
mov eax, dword [esp + 0x14]
cmp ecx, eax
mov ecx, esi
setne dl
sub edx, dword [esp + 0x14]
neg edx
sbb edx, edx
inc edx
mov dword [esp + 0x18], edx
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
sub ecx, eax
neg ecx
sbb ecx, ecx
neg ecx
mov dword [esp + 0xc], ecx
mov eax, dword [esp + 0x14]
cmp dword [esp + 0xc], ebx
jne 0x100318e4
mov dword [esp + 0x18], 0xfffffff8
xor edx, edx
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
cmp eax, ecx
setg dl
cmp dword [esp + 0x18], edx
jle 0x100318c8
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], 0x2041
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x114]
mov dword [eax + 4], ecx
lea ecx, [esp + 0x114]
call fcn.1000933d
mov dword [esp + 0x10], 0x5f7626a9
mov dword [esp + 0x10], 0xb26bdde0
mov dword [esp + 0x10], ebx
jmp 0x10031977
mov dword [esp + 0xc], 0x18d58162
mov dword [esp + 0x20], 0xf4ffcf33
mov dword [esp + 0x20], 0xb5486b6
cmp dword [esp + 0xc], ebx
jne 0x1003197e
cmp dword [esp + 0x10], ebx
jne 0x1003195b
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0xc]
imul eax, dword [esp + 0xc]
cmp eax, dword [esp + 0x10]
jg 0x1003195b
mov eax, ebx
cmp dword [esp + 0x10], ebx
je 0x1003195d
mov eax, esi
mov dword [esp + 0x20], eax
xor ecx, ecx
mov eax, dword [esp + 0x20]
cmp eax, 0x5de05dae
setl cl
mov dword [esp + 0x20], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 6
jne 0x1003191c
mov dword [esp + 0x18], 0xf5d1cc0c
mov dword [esp + 0x30], ebx
jmp 0x1003199c
mov eax, dword [esp + 0x30]
mov dword [esp + eax*4 + 0x3c], 0xffff
inc dword [esp + 0x30]
cmp dword [esp + 0x30], 3
jl 0x1003198c
push 0x652b
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x38]
push ebx
push eax
call fcn.10034aa0
add esp, 0x10
mov dword [esp + 0x30], ebx
jmp 0x100319d4
mov eax, dword [esp + 0x30]
mov dword [esp + eax*4 + 0x1b8], 0x67dcc35
inc dword [esp + 0x30]
cmp dword [esp + 0x30], 3
jl 0x100319c1
mov eax, dword [esp + 0x50]
mov dword [eax], ebx
jmp 0x10031ac3
mov eax, dword [eax]
xor edx, edx
mov dword [esp + 0x20], 0xe1fc6578
mov eax, dword [esp + eax*4 + 0x3c]
mov dword [esp + 0x20], esi
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov ecx, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0x44]
cmp eax, ecx
mov eax, dword [esp + 0x50]
setl dl
mov eax, dword [eax]
mov ecx, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0x50]
add ecx, edx
mov eax, dword [eax]
mov eax, dword [esp + eax*4 + 0x3c]
mov edx, dword [esp + 0x3c]
imul eax, ecx
xor ecx, ecx
imul edx, eax
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
mov eax, dword [esp + eax*4 + 0x3c]
cmp edx, eax
setne cl
mov dword [esp + 0x10], ecx
mov dword [esp + 0x10], ebx
jmp 0x10031ab6
mov dword [esp + 0x20], 0xdf11caf1
xor edx, edx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0x50]
mov eax, dword [eax]
add ecx, dword [esp + eax*4 + 0x3c]
mov eax, dword [esp + 0x10]
cmp ecx, 0x580
setle dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x3c]
cmp eax, edx
setl cl
mov dword [esp + 0x20], ecx
mov eax, dword [esp + 0x10]
mov eax, dword [esp + eax*4 + 0x3c]
mov edx, dword [esp + 0x20]
sub edx, eax
mov eax, dword [esp + 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x3c]
inc edx
cmp edx, eax
setg cl
mov dword [esp + 0x18], ecx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 2
jle 0x10031a4c
mov eax, dword [esp + 0x50]
inc dword [eax]
mov eax, dword [esp + 0x50]
cmp dword [eax], 2
jle 0x100319e6
mov dword [esp + 0x18], ebx
jmp 0x10031ae7
push 0x129c
push ebx
call fcn.10035776
dec dword [esp + 0x20]
pop ecx
pop ecx
cmp dword [esp + 0x18], 0xffffffe5
jne 0x10031ad6
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0x50]
call fcn.1000933d
push 2
pop esi
push esi
lea ecx, [esp + 0x148]
call fcn.10009161
mov dword [esp + 0xc], 0xbdba76aa
mov dword [esp + 0xc], ebx
jmp 0x10031b33
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x144]
mov dword [eax + ecx*4], 0xfffd
inc dword [esp + 0xc]
cmp dword [esp + 0xc], esi
jl 0x10031b1d
mov dword [esp + 0xc], ebx
jmp 0x10031b53
mov dword [esp + 0x20], 0x1d8987f2
mov dword [esp + 0x20], 0x888adae8
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 1
jle 0x10031b3f
lea ecx, [esp + 0x144]
call fcn.1000933d
cmp dword [edi + 0x14], 0x10
jb 0x10031b70
mov ecx, dword [edi]
jmp 0x10031b72
mov ecx, edi
cmp dword [edi + 0x14], 0x10
mov dword [esp + 0x38], ecx
jb 0x10031b80
mov edx, dword [edi]
jmp 0x10031b82
mov edx, edi
mov eax, dword [edi + 0x10]
add eax, edx
cmp ecx, eax
je 0x10031f31
mov dword [esp + 0x14], 0x91c5
lea ecx, [esp + 0xf0]
mov dword [esp + 0x20], 0xf0aa6e6f
mov dword [esp + 0xc], 7
mov dword [esp + 0x10], 0xfa4c8210
push 1
call fcn.10009161
mov dword [esp + 0x204], 3
mov dword [esp + 0x2c], 0xffffffff
mov dword [esp + 0x10], ebx
jmp 0x10031be8
mov ecx, dword [esp + 0x10]
mov eax, dword [esp + 0xf0]
mov dword [eax + ecx*4], ebx
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 1
jl 0x10031bd6
mov dword [esp + 0x10], ebx
jmp 0x10031c08
mov eax, dword [esp + 0x10]
mov dword [esp + eax*4 + 0x134], 0xfffffff9
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jl 0x10031bf5
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setge cl
cmp ecx, dword [esp + 0x14]
jne 0x10031c32
cmp dword [esp + 0x14], ebx
jne 0x10031c32
mov eax, ebx
jmp 0x10031c35
xor eax, eax
inc eax
mov dword [esp + 0xc], eax
xor edx, edx
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x14]
sub ecx, eax
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0xf0]
cmp ecx, dword [eax]
setne dl
sub edx, 0x38ca8c98
neg edx
sbb edx, edx
inc edx
mov dword [esp + 0x134], edx
mov eax, dword [esp + 0x14]
imul eax, edx
test eax, eax
je 0x10031cce
mov dword [esp + 0x10], ebx
jmp 0x10031cc3
mov dword [esp + 0x14], ebx
jmp 0x10031cb8
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031cb4
push ebx
call fcn.10034617
pop ecx
inc dword [esp + 0x14]
cmp dword [esp + 0x14], 1
jle 0x10031ca2
inc dword [esp + 0x10]
cmp dword [esp + 0x10], esi
jge 0x10031c9c
jmp 0x10031d94
mov dword [esp + 0x20], 0x18eb0bad
lea ecx, [esp + 0x120]
push 3
call fcn.10009161
mov byte [esp + 0x204], 4
mov dword [esp + 0x20], 0xfffffffa
mov dword [esp + 0xc], ebx
jmp 0x10031d10
mov ecx, dword [esp + 0xc]
mov eax, dword [esp + 0x120]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10031cfa
mov dword [esp + 0x10], ebx
jmp 0x10031d81
mov dword [esp + 0x20], 0xfffffff9
lea ecx, [esp + 0x164]
mov dword [esp + 0x20], ebx
push 3
call fcn.10009161
lea eax, [esp + 0x164]
mov byte [esp + 0x204], 5
push eax
push ebx
lea eax, [esp + 0xb4]
mov dword [esp + 0x28], 0x68d270c1
push eax
push 0x14ea
call fcn.10033c1c
add esp, 0x10
lea ecx, [esp + 0x164]
inc dword [esp + 0x2c]
mov byte [esp + 0x204], 4
call fcn.1000933d
inc dword [esp + 0x10]
cmp dword [esp + 0x10], 0x13
jl 0x10031d1d
lea ecx, [esp + 0x120]
call fcn.1000933d
or dword [esp + 0x204], 0xffffffff
lea ecx, [esp + 0xf0]
call fcn.1000933d
mov eax, dword [esp + 0x38]
mov al, byte [eax]
cmp al, 0x30
jl 0x10031ec6
cmp al, 0x39
jg 0x10031ec6
push dword [esp + 0xac]
lea eax, [esp + 0x184]
mov dword [esp + 0xa4], ebx
push eax
lea eax, [esp + 0x178]
mov dword [esp + 0xac], ebx
push eax
xorps xmm0, xmm0
mov dword [esp + 0xb4], ebx
push ebx
lea ecx, [esp + 0xb0]
movdqu xmmword [esp + 0x180], xmm0
call fcn.1000971b
mov dword [esp + 0x204], 6
or edi, 0xffffffff
mov esi, dword [esp + 0xa0]
mov dword [esp + 0xc], 0xfffffffb
mov dword [esp + 0x20], 1
mov dword [esi + 4], ebx
mov dword [esp + 0x20], 0x9dfc
cmp dword [esp + 0x20], ebx
je 0x10031e3e
xor eax, eax
inc eax
jmp 0x10031e40
mov eax, ebx
cmp edi, dword [esi + 4]
mov dword [esp + 0xc], eax
sbb eax, eax
neg eax
cmp dword [esp + 0xc], eax
jl 0x10031e60
cmp dword [esp + 0xc], ebx
jne 0x10031e85
push ebx
call fcn.1003403d
pop ecx
jmp 0x10031e7c
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031e7c
push 0x182b
push 0x1e41
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
dec dword [esi + 4]
cmp dword [esi + 4], 0xfffffff3
jg 0x10031e2b
lea ecx, [esp + 0xa0]
mov dword [esp + 0x204], edi
call fcn.1000933d
lea eax, [esp + 0x38]
push eax
lea eax, [esp + 0x50]
push eax
push 0x57c2
push 0x5a8d
push ebx
call fcn.100346c9
mov ecx, dword [esp + 0x4c]
add esp, 0x14
mov edi, dword [esp + 0x74]
inc ecx
push 2
pop esi
jmp 0x10031b72
mov dword [esp + 0xc], 0xe83c773
mov dword [esp + 0xc], ebx
jmp 0x10031ee7
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x1d0], 0xfffffffa
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 3
jl 0x10031ed4
mov dword [esp + 0xc], esi
cmp dword [esp + 0xc], ebx
jl 0x10031f0a
xor dl, dl
mov ecx, 0x465c
call fcn.10030795
dec dword [esp + 0xc]
jns 0x10031ef8
mov byte [esp + 0x1f], bl
cmp byte [esp + 0x1f], 0
je 0x10031f21
push ebx
push 0x1d8f
call dword [sym.imp.KERNEL32.dll_GetCPInfo]
mov dl, 1
lea ecx, [esp + 0x4c]
call fcn.10030795
jmp 0x1003136b
mov dword [esp + 0x24], 9
mov dword [esp + 0x24], 0xcff0ea75
mov dword [esp + 0x24], ebx
jmp 0x10031f90
or eax, 0xffffffff
mov dword [esp + 0x18], eax
mov dword [esp + 0xc], ebx
jmp 0x10031f67
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x1a8], 0x801f
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x10031f54
mov dword [esp + 0x18], ebx
jmp 0x10031f85
mov eax, dword [esp + 0x18]
cmp dword [esp + eax*4 + 0x1a8], ebx
jne 0x10031f8c
inc dword [esp + 0x18]
cmp dword [esp + 0x18], 3
jle 0x10031f74
inc dword [esp + 0x24]
cmp dword [esp + 0x24], 0x39
jg 0x10031f47
mov al, 1
mov ecx, dword [esp + 0x1fc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret