Function at 0x1002fe6f
Capabilities:
Accept command line arguments
Allocate thread local storage
Check os version
Clear file content
Connect pipe
Create pipe
Create thread
Delete file
Enumerate files on windows
Enumerate gui resources
Get common file path
Get disk information
Get disk size
Get file attributes
Identify system language via api
Parse pe header
Query service status
Read .ini file
Resume thread

Disassembly:
mov eax, 0x10080839
call fcn.1007f0f8
mov eax, 0x127c
call fcn.100683e0
push ebx
push esi
push edi
push 0x19
pop edi
mov ebx, 0xbac64a68
mov byte [ebp - 0x6d], dl
xor eax, eax
mov dword [ebp - 0x20], ebx
push 0xffffffffffffffff
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], eax
pop esi
jmp 0x1002feaa
mov dword [ebp - 0x3c], esi
inc dword [ebp - 0x3c]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jne 0x1002fea1
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], al
je 0x1002fec0
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
xor eax, eax
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x2c], 0x3185
mov dword [ebp - 0x2c], 0x9beb0647
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfaaaeb9a
mov dword [ebp - 0x2c], 0xed680444
mov dword [ebp - 0x3c], 0x7dfe4d9e
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x1002ff04
push eax
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
xor eax, eax
inc dword [ebp - 0x3c]
mov dword [ebp - 0x20], eax
jmp 0x1002ff15
mov dword [ebp - 0x3c], esi
inc dword [ebp - 0x3c]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jne 0x1002ff0c
push 3
pop esi
mov dword [ebp - 0x10], 7
lea ecx, [ebp - 0xfc]
push esi
call fcn.10017e9c
xor eax, eax
lea ecx, [ebp - 0xc74]
xor ebx, ebx
mov dword [ebp - 4], eax
inc ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x2c], 0xca9f8d1
push ebx
call fcn.10017e9c
mov byte [ebp - 4], bl
mov eax, 0xffff
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x54], 0xe128
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x1002ff88
push dword [ebp - 0x10]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
mov dword [eax], 0x89b5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1002ff6a
xor eax, eax
mov dword [ebp - 0x10], eax
push 0xfffffffffffffffe
pop edi
cmp dword [ebp - 0x10], ebx
jge 0x1002ffad
push dword [ebp - 0x10]
lea ecx, [ebp - 0xc74]
call fcn.10017f3a
mov dword [eax], edi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x1002ff93
xor eax, eax
mov dword [ebp - 0x10], 0x1a
cmp dword [ebp - 0x10], edi
mov edi, dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 2
pop ecx
jl 0x10030277
mov dword [ebp - 0x24], 0xffab8c3a
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x34], 0x62ee6d05
mov dword [ebp - 0x38], 0xa9bacde9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x10030059
mov dword [ebp - 0x2c], 0x6eff
lea ecx, [ebp - 0xd94]
mov dword [ebp - 0x2c], ebx
push ebx
call fcn.10017e9c
push 2
pop eax
mov byte [ebp - 4], al
xor eax, eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003002e
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd94]
call fcn.10017f3a
mov dword [eax], 0x19e95d1c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030010
xor eax, eax
dec dword [ebp - 0x1c]
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x1003003e
push eax
push eax
call edi
lea ecx, [ebp - 0xd94]
mov byte [ebp - 4], bl
call fcn.10017f1e
inc dword [ebp - 0x24]
push 2
pop ecx
cmp dword [ebp - 0x24], ecx
jle 0x1002ffea
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jg 0x10030267
or esi, 0xffffffff
mov dword [ebp - 0x40], esi
lea ecx, [ebp - 0xfc]
push dword [ebp - 0x1c]
call fcn.10017f3a
xor ebx, ebx
cmp dword [eax], ebx
je 0x100301ee
push 3
pop ebx
mov dword [ebp - 0x3c], 0x6de21e5
lea ecx, [ebp - 0x8a0]
push ebx
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], bl
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100300c4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8a0]
call fcn.10017f3a
mov dword [eax], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100300a6
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x100300d7
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
cmp dword [eax], 0
je 0x100301c0
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0xfc]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov edx, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x54]
xor eax, eax
sub edx, 0x20250f4b
cmp edx, ecx
lea ecx, [ebp - 0xfc]
setge al
xor ebx, ebx
add eax, dword [ebp - 0x38]
cmp eax, dword [esi]
push dword [ebp - 0x1c]
setne bl
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ebx, ecx
setge dl
imul ecx, edx, 0x566e
xor edx, edx
cmp ecx, dword [eax]
setg dl
cmp edx, dword [ebp - 0x10]
jl 0x1003016e
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
cmp dword [eax], 0
je 0x1003016e
xor eax, eax
inc eax
jmp 0x10030170
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0xfc]
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0xfc]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x8a0]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
or esi, 0xffffffff
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
mov eax, dword [ebp - 0x54]
xor ecx, ecx
test eax, eax
setns cl
xor ebx, ebx
mov dword [ebp - 0x38], ecx
inc ebx
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 4], bl
call fcn.10017f1e
jmp 0x10030253
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
cmp dword [eax], ebx
je 0x1003020f
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
mov ecx, 0xfff7
sub ecx, dword [eax]
mov eax, dword [ebp - 0x10]
add eax, ecx
jne 0x10030242
push eax
lea ecx, [ebp - 0xfc]
call fcn.10017f3a
cmp dword [eax], ebx
jne 0x10030242
xor ebx, ebx
xor eax, eax
inc ebx
jmp 0x10030247
xor ebx, ebx
inc ebx
mov eax, ebx
cmp eax, 0xd92edcdd
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x58], esi
inc dword [ebp - 0x1c]
push 2
pop ecx
cmp dword [ebp - 0x1c], ecx
jle 0x10030068
xor eax, eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffe
jge 0x1002ffc6
push 3
pop esi
lea ecx, [ebp - 0xc74]
call fcn.10017f1e
or eax, 0xffffffff
lea ecx, [ebp - 0xfc]
mov dword [ebp - 4], eax
call fcn.10017f1e
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], al
je 0x100302a6
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
xor eax, eax
mov dword [ebp - 0x28], 0x25b0e446
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcc895931
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x95e
mov dword [ebp - 0x40], 0xa4f6
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfe30f587
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x1003040e
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 4
cmp dword [ebp - 0x10], 0xfffffff9
jl 0x10030408
mov dword [ebp - 0x20], 0xfff7
lea ecx, [ebp - 0xa5c]
push esi
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 4
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10030354
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa5c]
call fcn.10017f3a
push 2
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10030337
xor eax, eax
mov dword [ebp - 0x20], 0xfffd
cmp dword [ebp - 0x20], eax
jne 0x100303cc
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
sub edx, 0x34e1054d
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, dword [ebp - 0x38]
je 0x10030399
mov esi, ebx
cmp dword [ebp - 0x24], eax
jne 0x1003039b
mov esi, eax
push ebx
lea ecx, [ebp - 0xa5c]
call fcn.10017f3a
mov dword [eax], esi
xor eax, eax
test esi, esi
je 0x100303bb
cmp dword [ebp - 0x28], eax
je 0x100303bb
mov ecx, ebx
cmp dword [ebp - 0x24], eax
jne 0x100303bd
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ecx
jle 0x100303cc
xor eax, eax
jmp 0x100303ce
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xa5c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10017f1e
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff9
push 3
pop esi
jge 0x10030313
xor eax, eax
inc dword [ebp - 0x28]
push 3
pop esi
cmp dword [ebp - 0x28], 0x2c
jge 0x100302f8
push 3
pop esi
mov dword [ebp - 0x48], 7
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 0x3c], eax
push esi
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10030457
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x78], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10030442
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x10030479
push dword [ebp - 0x10]
lea ecx, [ebp - 0x8b8]
call fcn.10017f3a
mov dword [eax], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1003045f
xor eax, eax
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x1c
jge 0x10030675
mov dword [ebp - 0x10], 0x7ad95e17
mov dword [ebp - 0x54], 0xb5a26cde
mov dword [ebp - 0x10], eax
jmp 0x10030658
mov dword [ebp - 0x28], 0x290be443
or ecx, 0xffffffff
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x100304c9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5b0], 0xa0b8
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100304b1
xor eax, eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xfffffff9
jge 0x100305c0
push 2
pop ebx
mov dword [ebp - 0x1c], 0xcb143e95
mov dword [ebp - 0x40], 0xc5764361
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], eax
jl 0x100305b0
mov dword [ebp - 0x24], 5
mov dword [ebp - 0x24], eax
jmp 0x10030547
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10030520
push 0x1a28
push eax
push 0x140e
push 0x86c
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10030544
push 0x2000
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
xor eax, eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x100304ff
mov eax, dword [ebp - 0x1c]
xor edx, edx
push 0
mov ecx, dword [ebp + eax*4 - 0x5b0]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp eax, 0xbc42
mov eax, dword [ebp - 0x24]
setg cl
sub edx, ecx
xor ecx, ecx
cmp edx, eax
setge cl
or eax, 0xffffffff
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x5b0]
mov eax, dword [ebp - 0x78]
cmp ecx, eax
setge dl
xor eax, eax
cmp edx, ebx
setne al
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x1c]
pop eax
push 2
pop ebx
jns 0x100304f3
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffff9
jl 0x100304d9
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x78]
dec ecx
neg ecx
sbb ecx, ecx
inc ecx
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setl dl
imul edx, dword [ebp - 0x5ac]
test edx, edx
jne 0x100305f1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x5a8]
xor eax, eax
cmp dword [ebp - 0x10], eax
je 0x1003060e
mov ecx, ebx
cmp dword [ebp - 0x5a8], eax
jne 0x10030610
mov ecx, eax
mov eax, dword [ebp - 0x78]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setl dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0xfffffffd
jle 0x10030630
mov eax, dword [ebp - 0x10]
push 2
pop eax
push eax
lea ecx, [ebp - 0x8b8]
call fcn.10017f3a
mov ecx, dword [ebp - 0x78]
sub ecx, dword [ebp - 0x48]
neg ecx
push 0
sbb ecx, ecx
inc ecx
imul ecx, ecx, 0x385e
mov dword [eax], ecx
dec dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], 0xffffffec
je 0x1003049c
mov eax, dword [ebp - 0x10]
inc dword [ebp - 0x78]
cmp dword [ebp - 0x78], 0x1c
push 0
pop eax
jl 0x10030486
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x1003068c
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextW]
or esi, 0xffffffff
lea ecx, [ebp - 0x8b8]
mov dword [ebp - 4], esi
call fcn.10017f1e
push ebx
lea ecx, [ebp - 0x530]
call fcn.10017e9c
mov dword [ebp - 4], 6
xor eax, eax
mov dword [ebp - 0x2c], 0xceafd94
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xf054a20a
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100306f2
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x530]
call fcn.10017f3a
mov dword [eax], 0x9f9b3198
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100306d4
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x1003070e
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd54], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100306fa
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x10030731
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7f0], 0x37ac
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10030719
xor eax, eax
push eax
lea ecx, [ebp - 0x530]
call fcn.10017f3a
and dword [eax], 0
jmp 0x1003079c
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xe34]
mov dword [ebp - 0x2c], esi
push 4
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 7
mov dword [ebp - 0x20], eax
jmp 0x10030771
push dword [ebp - 0x20]
call fcn.10017f3a
mov dword [eax], 0x37bb0086
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
lea ecx, [ebp - 0xe34]
jl 0x10030760
inc dword [ebp - 0x7ec]
mov byte [ebp - 4], 6
call fcn.10017f1e
xor eax, eax
lea ecx, [ebp - 0x530]
push eax
call fcn.10017f3a
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x530]
push eax
call fcn.10017f3a
cmp dword [eax], 0xb
jg 0x10030742
lea ecx, [ebp - 0x530]
mov dword [ebp - 4], esi
call fcn.10017f1e
xor eax, eax
mov dword [ebp - 0x38], 0xbac64a68
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x19
push 8
pop ebx
je 0x10030a95
movdqa xmm0, xmmword [0x10009390]
lea eax, [ebp - 0xeb4]
push eax
lea eax, [ebp - 0xec4]
mov dword [ebp - 0x54], esi
push eax
lea ecx, [ebp - 0x11cc]
movdqu xmmword [ebp - 0xec4], xmm0
call fcn.10017f49
lea ecx, [ebp - 0x1f1]
mov esi, eax
call fcn.1000a553
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x2b4]
push dword [esi]
call fcn.10017ef8
mov dword [ebp - 4], ebx
xor eax, eax
push 2
mov dword [ebp - 0x40], 0x63446b7d
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x10030845
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x434], 0xfd5464b5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10030834
push ecx
lea ecx, [ebp - 0x2b4]
call fcn.10017f3a
push 2
lea ecx, [ebp - 0x2b4]
mov dword [eax], 1
pop eax
push eax
call fcn.10017f3a
cmp dword [eax], 0
jl 0x10030a5a
push 2
pop ebx
mov dword [ebp - 0x28], 0x2c36544d
lea ecx, [ebp - 0x2b4]
push ebx
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x2b4]
mov esi, eax
call fcn.10017f3a
push 2
xor ebx, ebx
mov ecx, dword [eax]
mov ecx, dword [ebp + ecx*4 - 0x434]
mov eax, dword [esi]
mov eax, dword [ebp + eax*4 - 0x434]
cmp eax, ecx
pop eax
push eax
lea ecx, [ebp - 0x2b4]
sete bl
call fcn.10017f3a
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x434]
imul eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0x11
cmp dword [ebp - 0x28], 0xfffffffe
jle 0x10030a31
xor eax, eax
mov dword [ebp - 0x10], 0x87f6fb80
mov dword [ebp - 0x40], 0x2d14b432
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
jl 0x10030a24
push 3
pop ecx
mov dword [ebp - 0x3c], 0x259dba5c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x10030927
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x554], 0x7cc42477
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1003090f
xor eax, eax
mov dword [ebp - 0x54c], 0xffffffef
cmp dword [ebp - 0x54c], 0xffffffea
jge 0x10030a0b
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x40], 0x2426f379
mov dword [ebp - 0x30], 0xa966896e
mov dword [ebp - 0x24], 0xffffffed
jmp 0x100309e8
mov dword [ebp - 0x3c], 0x95e19f8c
cmp dword [ebp - 0x10], eax
je 0x100309a7
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x10030984
push eax
lea ecx, [ebp - 0x2b4]
call fcn.10017f3a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
sub eax, 0xf49dcb7b
neg eax
sbb eax, eax
inc eax
cmp eax, 0x3279329b
jle 0x100309a5
xor ebx, ebx
inc ebx
mov ecx, ebx
jmp 0x100309ac
xor eax, eax
xor ebx, ebx
mov ecx, eax
inc ebx
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffffffff
setg cl
xor eax, eax
cmp dword [ebp - 0x28], ecx
jge 0x100309df
cmp dword [ebp - 0x54c], eax
je 0x100309df
mov eax, ebx
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
push 0
pop eax
cmp dword [ebp - 0x24], 0xc
jg 0x1003095f
dec dword [ebp - 0x54c]
cmp dword [ebp - 0x54c], 0xffffffea
push 0
pop eax
jl 0x1003093e
push 3
pop ecx
mov eax, dword [ebp - 0x434]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
push 0
pop eax
jge 0x10030900
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffe
jg 0x100308e2
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x2b4]
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x2b4]
dec dword [eax]
call fcn.10017f3a
cmp dword [eax], 0
jge 0x10030877
push 8
pop ebx
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], al
je 0x10030a72
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
or esi, 0xffffffff
lea ecx, [ebp - 0x2b4]
mov dword [ebp - 4], esi
call fcn.10017f1e
inc dword [ebp - 0x54]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x19
jne 0x100307d6
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10030c46
mov dword [ebp - 0x1c], esi
or ebx, 0xffffffff
xor esi, esi
inc esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x64], 0xb6046e74
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x7e09fa0
cmp dword [ebp - 0x1c], eax
jne 0x10030b14
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
setl dl
add eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, esi
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setge cl
xor edx, edx
cmp ecx, 0xb06c
setne dl
sub edx, eax
imul edx, dword [ebp - 0x1c]
test edx, edx
jne 0x10030b14
xor eax, eax
mov edx, eax
jmp 0x10030b16
mov edx, esi
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
push 2
setg cl
xor edx, edx
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setg dl
xor ecx, ecx
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setg cl
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x3c], ebx
pop eax
mov dword [ebp - 0x24], 0xf84
mov dword [ebp - 0x40], eax
xor eax, eax
push 3
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x10030b78
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1160], 0x47fd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10030b67
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setl dl
xor ebx, ebx
cmp edx, 0xfffffffa
setne bl
xor ecx, ecx
sub ebx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x24]
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setl cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle bl
xor edx, edx
sub ebx, 0x42d63d2c
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
cmp eax, 0x2c25470e
setne cl
xor eax, eax
cmp ecx, 0xa9257de9
setne al
cmp eax, dword [ebp - 0x1c]
jge 0x10030bec
xor eax, eax
mov ecx, eax
cmp dword [ebp - 0x1c], eax
je 0x10030bee
mov ecx, esi
mov eax, dword [ebp - 0x3c]
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xe816
mov eax, dword [ebp - 0x58]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x115c]
mov ecx, 0xb1a88af1
setle dl
sub edx, eax
mov eax, dword [ebp - 0x18]
imul eax, edx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
xor eax, eax
jmp 0x10030c49
xor esi, esi
inc esi
mov dword [ebp - 0x28], 0x25b0e446
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcc895931
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x95e
mov dword [ebp - 0x40], 0xa4f6
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfe30f587
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x10030db7
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 4
cmp dword [ebp - 0x10], 0xfffffff9
jl 0x10030db4
push 3
pop ebx
mov dword [ebp - 0x20], 0xfff7
lea ecx, [ebp - 0xa38]
push ebx
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 0xa
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10030cfa
push dword [ebp - 0x20]
lea ecx, [ebp - 0xa38]
call fcn.10017f3a
push 2
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10030cdd
xor eax, eax
mov dword [ebp - 0x20], 0xfffd
cmp dword [ebp - 0x20], eax
jne 0x10030d7b
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
sub edx, 0x34e1054d
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, dword [ebp - 0x38]
je 0x10030d3d
cmp dword [ebp - 0x24], eax
jne 0x10030d3f
mov esi, eax
xor eax, eax
lea ecx, [ebp - 0xa38]
inc eax
push eax
call fcn.10017f3a
mov dword [eax], esi
xor eax, eax
test esi, esi
je 0x10030d67
cmp dword [ebp - 0x28], eax
je 0x10030d67
cmp dword [ebp - 0x24], eax
je 0x10030d67
xor esi, esi
inc esi
mov ecx, esi
jmp 0x10030d6c
xor esi, esi
mov ecx, eax
inc esi
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ecx
jle 0x10030d7b
xor eax, eax
jmp 0x10030d7d
mov eax, esi
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xa38]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10017f1e
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff9
jge 0x10030cb9
xor eax, eax
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x2c
jge 0x10030c9b
push 2
pop eax
push eax
lea ecx, [ebp - 0x1b4]
call fcn.10017e9c
mov dword [ebp - 4], 0xb
xor ebx, ebx
mov dword [ebp - 0x28], 0x3fa75c1
inc ebx
mov dword [ebp - 0x1c], 0xe1df
xor eax, eax
mov dword [ebp - 0x10], 0x2fd2d1a4
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x58], 0x76d2
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10030e30
push dword [ebp - 0x20]
lea ecx, [ebp - 0x1b4]
call fcn.10017f3a
or ecx, 0xffffffff
push 2
mov dword [eax], ecx
inc dword [ebp - 0x20]
pop eax
cmp dword [ebp - 0x20], eax
jl 0x10030e10
xor eax, eax
push eax
lea ecx, [ebp - 0x1b4]
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x1b4]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
neg esi
sbb esi, esi
neg esi
call fcn.10017f3a
xor eax, eax
mov dword [ebp - 0x28], esi
push eax
lea ecx, [ebp - 0x1b4]
call fcn.10017f3a
xor ecx, ecx
cmp dword [eax], 0xfffffff7
sete cl
xor eax, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x1b4]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp ecx, dword [eax]
setl dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xfffc
setge dl
imul edx, dword [ebp - 0x58]
cmp eax, edx
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jne 0x10030f94
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10030f94
mov dword [ebp - 0x34], 0x26d8f9c3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10031020
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1b4]
call fcn.10017f3a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x10030f5f
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x1b4]
push eax
call fcn.10017f3a
imul edx, dword [ebp - 0x1c], 0xffff
mov esi, eax
mov ecx, dword [ebp - 0x18]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setle al
xor edx, edx
add eax, 0xa2c6
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp dword [esi], ecx
lea ecx, [ebp - 0x1b4]
setl al
imul eax, eax, 0xf947
mov dword [ebp - 0x18], eax
push dword [ebp - 0x28]
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
imul ecx, dword [eax]
cmp ecx, 0xfc02
jge 0x10030f5d
mov eax, dword [ebp - 0x58]
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x10030f86
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10030f81
push 0x1bac
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x10030f6a
dec dword [ebp - 0x28]
jns 0x10030ed8
jmp 0x10031020
mov dword [ebp - 0x40], 0xc74f
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 0x20], 0x821d2a6a
mov dword [ebp - 0x3c], 9
push ebx
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
mov ecx, 0xffff
mov eax, dword [ebp - 0x34]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xb50d
setne cl
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x1b4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
mov dword [ebp - 0x3c], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x7bfe1a27
setle al
mov dword [ebp - 0x28], eax
or esi, 0xffffffff
lea ecx, [ebp - 0x1b4]
mov dword [ebp - 4], esi
call fcn.10017f1e
mov dword [ebp - 0x10], 0xbf90edca
xor eax, eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x2679f1a7
mov dword [ebp - 0x2c], 0x6398c3d3
mov dword [ebp - 0x2c], 0x9233c9e4
mov dword [ebp - 0x20], eax
jmp 0x1003106b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa4], 0xff57440e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003105a
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
push 2
cmp eax, edx
setle cl
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
setg cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xa4]
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x40], 0xd5c0
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0xf6066fa4
mov dword [ebp - 0x2c], 0xc655ef1c
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0x3c6e85a6
mov dword [ebp - 0x3c], 0x89736453
mov eax, dword [ebp - 0xa4]
imul eax, dword [ebp - 0x10]
test eax, eax
jne 0x100310f8
cmp dword [ebp - 0xa4], eax
je 0x100310fa
mov eax, ebx
imul ecx, eax, 0xfffc
mov eax, dword [ebp - 0xa4]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x28]
imul ecx, ecx, 9
sub ecx, eax
imul ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
cmp dword [ebp - 0x34], eax
jne 0x1003112d
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xa4]
lea ecx, [ebp - 0x114]
neg eax
push 3
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x3c]
pop esi
mov dword [ebp - 0x10], 7
push esi
call fcn.10017e9c
mov dword [ebp - 4], 0xe
lea ecx, [ebp - 0xdac]
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x2c], 0xca9f8d1
push ebx
call fcn.10017e9c
mov byte [ebp - 4], 0xf
mov eax, 0xffff
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x54], 0xe128
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100311ad
push dword [ebp - 0x10]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
mov dword [eax], 0x89b5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1003118f
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100311d3
push dword [ebp - 0x10]
lea ecx, [ebp - 0xdac]
call fcn.10017f3a
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100311b5
xor eax, eax
mov dword [ebp - 0x10], 0x1a
cmp dword [ebp - 0x10], 0xfffffffe
jl 0x10031497
push 2
pop ecx
mov dword [ebp - 0x24], 0xffab8c3a
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x34], 0x62ee6d05
mov dword [ebp - 0x38], 0xa9bacde9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x1003127c
mov dword [ebp - 0x2c], 0x6eff
lea ecx, [ebp - 0xc8c]
mov dword [ebp - 0x2c], ebx
push ebx
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 0x10
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003124d
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc8c]
call fcn.10017f3a
mov dword [eax], 0x19e95d1c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003122f
xor eax, eax
dec dword [ebp - 0x1c]
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x1003125d
push eax
push eax
call edi
lea ecx, [ebp - 0xc8c]
mov byte [ebp - 4], 0xf
call fcn.10017f1e
inc dword [ebp - 0x24]
push 2
pop eax
cmp dword [ebp - 0x24], eax
jle 0x1003120b
push 2
xor eax, eax
pop ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jg 0x1003148a
or eax, 0xffffffff
lea ecx, [ebp - 0x114]
mov dword [ebp - 0x40], eax
push dword [ebp - 0x1c]
call fcn.10017f3a
xor ebx, ebx
cmp dword [eax], ebx
je 0x1003140d
mov dword [ebp - 0x3c], 0x6de21e5
lea ecx, [ebp - 0x8d0]
push esi
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x100312e5
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8d0]
call fcn.10017f3a
mov dword [eax], 1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100312c7
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x100312f8
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
cmp dword [eax], 0
je 0x100313e1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x114]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov edx, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x54]
xor eax, eax
sub edx, 0x20250f4b
cmp edx, ecx
lea ecx, [ebp - 0x114]
setge al
xor ebx, ebx
add eax, dword [ebp - 0x38]
cmp eax, dword [esi]
push dword [ebp - 0x1c]
setne bl
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ebx, ecx
setge dl
imul ecx, edx, 0x566e
xor edx, edx
cmp ecx, dword [eax]
setg dl
cmp edx, dword [ebp - 0x10]
jl 0x1003138f
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
cmp dword [eax], 0
je 0x1003138f
xor eax, eax
inc eax
jmp 0x10031391
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x114]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x8d0]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
push 3
pop esi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
mov eax, dword [ebp - 0x54]
xor ecx, ecx
test eax, eax
setns cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 4], 0xf
call fcn.10017f1e
jmp 0x1003146d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
cmp dword [eax], ebx
je 0x1003142e
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x114]
call fcn.10017f3a
mov ecx, 0xfff7
sub ecx, dword [eax]
mov eax, dword [ebp - 0x10]
add eax, ecx
jne 0x1003145e
push eax
lea ecx, [ebp - 0x114]
call fcn.10017f3a
cmp dword [eax], ebx
jne 0x1003145e
xor eax, eax
jmp 0x10031461
xor eax, eax
inc eax
cmp eax, 0xd92edcdd
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
or eax, 0xffffffff
mov dword [ebp - 0x58], eax
inc dword [ebp - 0x1c]
push 2
pop eax
cmp dword [ebp - 0x1c], eax
jle 0x10031288
xor ebx, ebx
xor eax, eax
push 2
inc ebx
pop ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffe
jge 0x100311e7
lea ecx, [ebp - 0xdac]
call fcn.10017f1e
or esi, 0xffffffff
lea ecx, [ebp - 0x114]
mov dword [ebp - 4], esi
call fcn.10017f1e
push ebx
lea ecx, [ebp - 0x56c]
call fcn.10017e9c
mov dword [ebp - 4], 0x12
xor eax, eax
mov dword [ebp - 0x2c], 0xceafd94
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xf054a20a
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031508
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x56c]
call fcn.10017f3a
mov dword [eax], 0x9f9b3198
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x100314ea
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031524
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xe1c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031510
xor eax, eax
push 2
mov dword [ebp - 0x1c], eax
pop ecx
cmp dword [ebp - 0x1c], ecx
jge 0x10031547
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c0], 0x37ac
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1003152f
xor eax, eax
push eax
lea ecx, [ebp - 0x56c]
call fcn.10017f3a
and dword [eax], 0
jmp 0x100315b2
mov dword [ebp - 0x2c], ebx
lea ecx, [ebp - 0xca4]
mov dword [ebp - 0x2c], esi
push 4
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 0x13
mov dword [ebp - 0x20], eax
jmp 0x10031587
push dword [ebp - 0x20]
call fcn.10017f3a
mov dword [eax], 0x37bb0086
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
lea ecx, [ebp - 0xca4]
jl 0x10031576
inc dword [ebp - 0x7bc]
mov byte [ebp - 4], 0x12
call fcn.10017f1e
xor eax, eax
lea ecx, [ebp - 0x56c]
push eax
call fcn.10017f3a
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x56c]
push eax
call fcn.10017f3a
cmp dword [eax], 0xb
jg 0x10031558
lea ecx, [ebp - 0x56c]
mov dword [ebp - 4], esi
call fcn.10017f1e
mov dword [ebp - 0x24], 0x8c176b0f
lea ecx, [ebp - 0x584]
mov dword [ebp - 0x1c], 5
push ebx
call fcn.10017e9c
mov dword [ebp - 4], 0x14
xor eax, eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x20], eax
jmp 0x1003160f
push dword [ebp - 0x20]
call fcn.10017f3a
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x20]
lea ecx, [ebp - 0x584]
cmp dword [ebp - 0x20], ebx
jl 0x100315fe
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x1003169f
mov dword [ebp - 0x18], 0x1546
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], 0x9f48
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], esi
mov eax, dword [ebp - 0x1c]
sub eax, 9
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x24]
push 8
pop edx
sub edx, ecx
mov dword [eax], edx
xor eax, eax
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x100316f1
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x584]
call fcn.10017f3a
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031684
jmp 0x100316ef
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x18], 0x1e2cd849
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x584]
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x40]
xor edx, edx
sub ecx, 0x4b13
cmp ecx, dword [eax]
setg dl
xor eax, eax
cmp edx, 0xfffffff8
setl al
mov dword [ebp - 0x1c], eax
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x1003170c
push 0x225b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
lea ecx, [ebp - 0x584]
mov dword [ebp - 4], esi
call fcn.10017f1e
movdqa xmm0, xmmword [0x10009390]
lea eax, [ebp - 0xf74]
push eax
lea eax, [ebp - 0xf84]
push eax
lea ecx, [ebp - 0x11a4]
movdqu xmmword [ebp - 0xf84], xmm0
call fcn.10017f49
lea ecx, [ebp - 0x1de]
mov esi, eax
call fcn.1000a553
push eax
push dword [esi + 4]
lea ecx, [ebp - 0x2e4]
push dword [esi]
call fcn.10017ef8
mov dword [ebp - 4], 0x15
xor eax, eax
push 2
mov dword [ebp - 0x40], 0x63446b7d
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x1003178a
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x43c], 0xfd5464b5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10031779
push ecx
lea ecx, [ebp - 0x2e4]
call fcn.10017f3a
push 2
lea ecx, [ebp - 0x2e4]
mov dword [eax], ebx
pop eax
push eax
call fcn.10017f3a
cmp dword [eax], 0
jl 0x1003199b
push 2
pop ebx
mov dword [ebp - 0x28], 0x2c36544d
lea ecx, [ebp - 0x2e4]
push ebx
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x2e4]
mov esi, eax
call fcn.10017f3a
push 2
xor ebx, ebx
mov ecx, dword [eax]
mov ecx, dword [ebp + ecx*4 - 0x43c]
mov eax, dword [esi]
mov eax, dword [ebp + eax*4 - 0x43c]
cmp eax, ecx
pop eax
push eax
lea ecx, [ebp - 0x2e4]
sete bl
call fcn.10017f3a
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x43c]
imul eax, ebx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x28], 0x11
cmp dword [ebp - 0x28], 0xfffffffe
jle 0x10031972
xor eax, eax
mov dword [ebp - 0x10], 0x87f6fb80
mov dword [ebp - 0x40], 0x2d14b432
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffe2
jl 0x10031965
push 3
pop ecx
mov dword [ebp - 0x3c], 0x259dba5c
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ecx
jge 0x10031868
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x470], 0x7cc42477
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10031850
xor eax, eax
mov dword [ebp - 0x468], 0xffffffef
cmp dword [ebp - 0x468], 0xffffffea
jge 0x1003194c
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x40], 0x2426f379
mov dword [ebp - 0x30], 0xa966896e
mov dword [ebp - 0x24], 0xffffffed
jmp 0x10031929
mov dword [ebp - 0x3c], 0x95e19f8c
cmp dword [ebp - 0x10], eax
je 0x100318e8
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x100318c5
push eax
lea ecx, [ebp - 0x2e4]
call fcn.10017f3a
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
sub eax, 0xf49dcb7b
neg eax
sbb eax, eax
inc eax
cmp eax, 0x3279329b
jle 0x100318e6
xor ebx, ebx
inc ebx
mov ecx, ebx
jmp 0x100318ed
xor eax, eax
xor ebx, ebx
mov ecx, eax
inc ebx
mov eax, dword [ebp - 0x10]
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 0x3c]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, 0xffffffff
setg cl
xor eax, eax
cmp dword [ebp - 0x28], ecx
jge 0x10031920
cmp dword [ebp - 0x468], eax
je 0x10031920
mov eax, ebx
mov dword [ebp - 0x40], eax
inc dword [ebp - 0x24]
push 0
pop eax
cmp dword [ebp - 0x24], 0xc
jg 0x100318a0
dec dword [ebp - 0x468]
cmp dword [ebp - 0x468], 0xffffffea
push 0
pop eax
jl 0x1003187f
push 3
pop ecx
mov eax, dword [ebp - 0x43c]
mov dword [ebp - 0x40], eax
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffe2
push 0
pop eax
jge 0x10031841
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfffffffe
jg 0x10031823
push 2
pop ebx
push ebx
lea ecx, [ebp - 0x2e4]
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x2e4]
dec dword [eax]
call fcn.10017f3a
cmp dword [eax], 0
jge 0x100317b8
xor ebx, ebx
inc ebx
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], al
je 0x100319b3
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
or eax, 0xffffffff
lea ecx, [ebp - 0x2e4]
mov dword [ebp - 4], eax
call fcn.10017f1e
xor eax, eax
mov dword [ebp - 0x24], 0xbac64a68
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x19
push 3
pop esi
je 0x10031ca3
or ecx, 0xffffffff
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x18], 6
mov dword [ebp - 0x64], 0xb6046e74
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x2c], 0x7e09fa0
cmp dword [ebp - 0x1c], eax
jne 0x10031a4c
mov ecx, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
setl dl
add eax, edx
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, ebx
setg dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x34]
setge cl
xor edx, edx
cmp ecx, 0xb06c
setne dl
sub edx, eax
imul edx, dword [ebp - 0x1c]
test edx, edx
jne 0x10031a4c
xor eax, eax
mov edx, eax
jmp 0x10031a4e
mov edx, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
cmp eax, edx
push 2
setg cl
xor edx, edx
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
setg dl
xor ecx, ecx
sub edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setg cl
mov dword [ebp - 0x64], ecx
mov eax, dword [ebp - 0x64]
or eax, 0xffffffff
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], 0xf84
pop eax
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x40], 0xfffffffc
mov dword [ebp - 0x20], eax
jmp 0x10031ab0
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1070], 0x47fd
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10031a9f
mov ecx, dword [ebp - 0x38]
xor edx, edx
mov eax, dword [ebp - 0x3c]
cmp eax, ecx
setl dl
xor ebx, ebx
cmp edx, 0xfffffffa
setne bl
xor ecx, ecx
sub ebx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
cmp ebx, eax
mov eax, dword [ebp - 0x38]
setl cl
xor ebx, ebx
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setle bl
xor edx, edx
sub ebx, 0x42d63d2c
cmp eax, ebx
mov eax, dword [ebp - 0x18]
setl dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x40], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x34]
cmp eax, 0x2c25470e
setne cl
xor eax, eax
cmp ecx, 0xa9257de9
setne al
cmp eax, dword [ebp - 0x1c]
jge 0x10031b29
xor eax, eax
cmp dword [ebp - 0x1c], eax
jne 0x10031b29
xor ebx, ebx
mov ecx, eax
inc ebx
jmp 0x10031b2e
xor ebx, ebx
inc ebx
mov ecx, ebx
mov eax, dword [ebp - 0x3c]
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0xe816
mov eax, dword [ebp - 0x58]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setge cl
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x106c]
mov ecx, 0xb1a88af1
setle dl
sub edx, eax
mov eax, dword [ebp - 0x18]
imul eax, edx
cmp ecx, eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x64], eax
or eax, 0xffffffff
mov dword [ebp - 0x54], eax
xor eax, eax
mov dword [ebp - 0x10], 0xbf90edca
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0x2679f1a7
mov dword [ebp - 0x2c], 0x6398c3d3
mov dword [ebp - 0x2c], 0x9233c9e4
mov dword [ebp - 0x20], eax
jmp 0x10031bb9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xc4], 0xff57440e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10031ba8
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov edx, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
push 2
cmp eax, edx
setle cl
mov dword [ebp - 0x10], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp eax, ebx
setg cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc4]
or eax, 0xffffffff
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x40], 0xd5c0
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], 0xfffffff7
mov dword [ebp - 0x2c], 0xf6066fa4
mov dword [ebp - 0x2c], 0xc655ef1c
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0x3c6e85a6
mov dword [ebp - 0x3c], 0x89736453
mov eax, dword [ebp - 0xc4]
imul eax, dword [ebp - 0x10]
test eax, eax
jne 0x10031c49
cmp dword [ebp - 0xc4], eax
je 0x10031c4b
mov eax, ebx
imul ecx, eax, 0xfffc
mov eax, dword [ebp - 0xc4]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x28]
imul ecx, ecx, 9
sub ecx, eax
imul ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x34]
neg ecx
sbb ecx, ecx
neg ecx
add eax, ecx
cmp dword [ebp - 0x34], eax
jne 0x10031c7e
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc4]
neg eax
push 0
sbb eax, eax
neg eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x3c]
inc dword [ebp - 0x54]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
pop eax
jne 0x100319dd
mov dword [ebp - 0x2c], 0x3185
mov dword [ebp - 0x2c], 0x9beb0647
mov dword [ebp - 0x2c], 0xfffffff8
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfaaaeb9a
mov dword [ebp - 0x2c], 0xed680444
mov dword [ebp - 0x3c], 0x7dfe4d9e
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10031ce4
push eax
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
xor eax, eax
inc dword [ebp - 0x3c]
lea ecx, [ebp - 0x500]
mov byte [ebp - 0x11], al
mov dword [ebp - 0x24], 0x8c176b0f
mov dword [ebp - 0x1c], 5
push ebx
call fcn.10017e9c
mov dword [ebp - 4], 0x19
or ecx, 0xffffffff
xor eax, eax
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10031d3a
push dword [ebp - 0x20]
lea ecx, [ebp - 0x500]
call fcn.10017f3a
mov dword [eax], 0xfffffff7
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10031d1b
or ecx, 0xffffffff
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x10031dcc
mov dword [ebp - 0x18], 0x1546
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x40], 0x9f48
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
lea ecx, [ebp - 0x500]
mov eax, dword [ebp - 0x1c]
sub eax, 9
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x24]
push 8
pop edx
sub edx, ecx
mov dword [eax], edx
or eax, 0xffffffff
mov dword [ebp - 0x40], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jge 0x10031e24
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x500]
call fcn.10017f3a
and dword [eax], 0
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jl 0x10031db1
jmp 0x10031e22
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0x500]
mov dword [ebp - 0x18], 0x1e2cd849
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x500]
mov eax, dword [ebp - 0x18]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x40]
xor edx, edx
sub ecx, 0x4b13
cmp ecx, dword [eax]
setg dl
xor eax, eax
cmp edx, 0xfffffff8
setl al
mov dword [ebp - 0x1c], eax
xor eax, eax
mov byte [ebp - 0x4d], al
cmp byte [ebp - 0x4d], 0
je 0x10031e3f
push 0x225b
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MonitorFromWindow]
or eax, 0xffffffff
lea ecx, [ebp - 0x500]
mov dword [ebp - 4], eax
call fcn.10017f1e
cmp byte [ebp - 0x11], 0
je 0x10031ea1
mov dword [ebp - 0x2c], 0x3185
mov dword [ebp - 0x2c], 0x9beb0647
push 0xfffffffffffffff8
pop eax
mov dword [ebp - 0x2c], eax
xor eax, eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], 0xfaaaeb9a
mov dword [ebp - 0x2c], 0xed680444
mov dword [ebp - 0x3c], 0x7dfe4d9e
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10031e97
push eax
push eax
push eax
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
xor eax, eax
inc dword [ebp - 0x3c]
push eax
call dword [sym.imp.KERNEL32.dll_GetThreadPriority]
mov dword [ebp - 0x3c], 0xcdbe8e56
lea ecx, [ebp - 0x770]
or eax, 0xffffffff
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x54], 0x6210b999
mov dword [ebp - 0x2c], 0xd15de05d
mov dword [ebp - 0x2c], 0xd00585b
mov dword [ebp - 0x58], 0x4ccb63e
mov dword [ebp - 0x30], 0xdead9bac
push ebx
call fcn.10017e9c
mov dword [ebp - 4], 0x1a
xor eax, eax
mov dword [ebp - 0x34], 0x6f94
mov dword [ebp - 0x40], 0x140d
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x10031f21
push dword [ebp - 0x20]
lea ecx, [ebp - 0x770]
call fcn.10017f3a
mov dword [eax], 0xe94f934f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x10031f03
xor eax, eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x770]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10031f6e
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x770]
mov eax, dword [ebp - 0x54]
xor eax, eax
push eax
call fcn.10017f3a
mov eax, dword [ebp - 0x40]
cmp ebx, eax
sbb eax, eax
neg eax
add eax, 0xcc8e
sub eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x58]
test eax, eax
jne 0x10031f71
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x770]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
or eax, 0xffffffff
mov dword [ebp - 0x48], 0x3fdda78c
mov dword [ebp - 4], eax
call fcn.10017f1e
mov dword [ebp - 0x28], 0x25b0e446
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x10], 0xcc895931
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0x95e
mov dword [ebp - 0x40], 0xa4f6
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xfe30f587
sbb eax, eax
neg eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
xor eax, eax
mov dword [ebp - 0x28], eax
jmp 0x100320fc
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x10], 4
cmp dword [ebp - 0x10], 0xfffffff9
jl 0x100320f6
mov dword [ebp - 0x20], 0xfff7
lea ecx, [ebp - 0xb40]
push esi
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 0x1b
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10032042
push dword [ebp - 0x20]
lea ecx, [ebp - 0xb40]
call fcn.10017f3a
push 2
pop ecx
mov dword [eax], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10032025
xor eax, eax
mov dword [ebp - 0x20], 0xfffd
cmp dword [ebp - 0x20], eax
jne 0x100320ba
mov eax, dword [ebp - 0x24]
xor edx, edx
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setle dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
setg dl
sub edx, 0x34e1054d
neg edx
sbb edx, edx
xor eax, eax
inc edx
cmp edx, dword [ebp - 0x38]
je 0x10032087
mov esi, ebx
cmp dword [ebp - 0x24], eax
jne 0x10032089
mov esi, eax
push ebx
lea ecx, [ebp - 0xb40]
call fcn.10017f3a
mov dword [eax], esi
xor eax, eax
test esi, esi
je 0x100320a9
cmp dword [ebp - 0x28], eax
je 0x100320a9
mov ecx, ebx
cmp dword [ebp - 0x24], eax
jne 0x100320ab
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], ecx
jle 0x100320ba
xor eax, eax
jmp 0x100320bc
mov eax, ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x3c]
sub ecx, eax
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0xb40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
or eax, 0xffffffff
mov dword [ebp - 4], eax
call fcn.10017f1e
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffff9
push 3
pop esi
jge 0x10032001
xor eax, eax
inc dword [ebp - 0x28]
push 3
pop esi
cmp dword [ebp - 0x28], 0x2c
jge 0x10031fe6
push 2
pop eax
push eax
lea ecx, [ebp - 0x29c]
call fcn.10017e9c
push ebx
lea ecx, [ebp - 0x174]
mov dword [ebp - 4], 0x1c
call fcn.10017e9c
mov byte [ebp - 4], 0x1d
xor eax, eax
mov dword [ebp - 0x34], 0x5f27
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x10032161
push dword [ebp - 0x10]
lea ecx, [ebp - 0x29c]
call fcn.10017f3a
push 2
mov dword [eax], 0x42eb90da
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x10032140
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x10032187
push dword [ebp - 0x10]
lea ecx, [ebp - 0x174]
call fcn.10017f3a
mov dword [eax], 0x3638ecf5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x10032169
xor eax, eax
push eax
lea ecx, [ebp - 0x174]
call fcn.10017f3a
and dword [eax], 0
jmp 0x100322d6
mov dword [ebp - 0x24], 0xc4530722
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], eax
jl 0x100321f9
jmp 0x100321ba
xor eax, eax
push eax
lea ecx, [ebp - 0x174]
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
mov esi, eax
lea ecx, [ebp - 0x174]
xor eax, eax
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
mov ecx, dword [esi]
mov dword [eax], ecx
dec dword [ebp - 0x24]
jns 0x100321b8
mov dword [ebp - 0x24], ebx
lea ecx, [ebp - 0x174]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
xor ecx, ecx
cmp dword [eax], 0xcd409884
setne cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x29c]
push dword [eax]
call fcn.10017f3a
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, 0xd022
setl dl
add edx, dword [eax]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x34]
jle 0x100322b7
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x34], eax
je 0x100322b9
mov edx, ebx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x174]
push eax
call fcn.10017f3a
cmp dword [eax], ebx
jle 0x1003219b
lea ecx, [ebp - 0x174]
call fcn.10017f1e
or esi, 0xffffffff
lea ecx, [ebp - 0x29c]
mov dword [ebp - 4], esi
call fcn.10017f1e
push 2
pop eax
push eax
lea ecx, [ebp - 0x18c]
call fcn.10017e9c
mov dword [ebp - 4], 0x1e
xor eax, eax
mov dword [ebp - 0x28], 0x3fa75c1
mov dword [ebp - 0x1c], 0xe1df
mov dword [ebp - 0x10], 0x2fd2d1a4
mov dword [ebp - 0x24], 0xfffffff6
mov dword [ebp - 0x58], 0x76d2
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], ebx
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10032371
push dword [ebp - 0x20]
lea ecx, [ebp - 0x18c]
call fcn.10017f3a
push 2
mov dword [eax], esi
inc dword [ebp - 0x20]
pop eax
cmp dword [ebp - 0x20], eax
jl 0x10032354
xor eax, eax
push eax
lea ecx, [ebp - 0x18c]
call fcn.10017f3a
push ebx
lea ecx, [ebp - 0x18c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
neg esi
sbb esi, esi
neg esi
call fcn.10017f3a
xor eax, eax
mov dword [ebp - 0x28], esi
push eax
lea ecx, [ebp - 0x18c]
call fcn.10017f3a
xor ecx, ecx
cmp dword [eax], 0xfffffff7
sete cl
xor eax, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x18c]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp ecx, dword [eax]
setl dl
mov dword [ebp - 0x24], edx
xor edx, edx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xfffc
setge dl
imul edx, dword [ebp - 0x58]
cmp eax, edx
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x1c]
jne 0x100324d5
xor eax, eax
cmp dword [ebp - 0x1c], eax
je 0x100324d5
mov dword [ebp - 0x34], 0x26d8f9c3
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], eax
jl 0x10032561
push dword [ebp - 0x28]
lea ecx, [ebp - 0x18c]
call fcn.10017f3a
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x100324a0
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x18c]
push eax
call fcn.10017f3a
imul edx, dword [ebp - 0x1c], 0xffff
mov esi, eax
mov ecx, dword [ebp - 0x18]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x18]
setle al
xor edx, edx
add eax, 0xa2c6
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp dword [esi], ecx
lea ecx, [ebp - 0x18c]
setl al
imul eax, eax, 0xf947
mov dword [ebp - 0x18], eax
push dword [ebp - 0x28]
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
imul ecx, dword [eax]
cmp ecx, 0xfc02
jge 0x1003249e
mov eax, dword [ebp - 0x58]
xor eax, eax
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x10], ebx
cmp dword [ebp - 0x10], eax
jl 0x100324c7
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x100324c2
push 0x1bac
push eax
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeA]
xor eax, eax
dec dword [ebp - 0x10]
jns 0x100324ab
dec dword [ebp - 0x28]
jns 0x10032419
jmp 0x10032561
mov dword [ebp - 0x40], 0xc74f
lea ecx, [ebp - 0x18c]
mov dword [ebp - 0x20], 0x821d2a6a
mov dword [ebp - 0x3c], 9
push ebx
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
mov ecx, 0xffff
mov eax, dword [ebp - 0x34]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xb50d
setne cl
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x18c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0x20]
cmp ecx, eax
setg dl
mov dword [ebp - 0x3c], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x7bfe1a27
setle al
mov dword [ebp - 0x28], eax
or esi, 0xffffffff
lea ecx, [ebp - 0x18c]
mov dword [ebp - 4], esi
call fcn.10017f1e
mov dword [ebp - 0x3c], 0xcdbe8e56
lea ecx, [ebp - 0x788]
mov dword [ebp - 0x48], esi
mov dword [ebp - 0x54], 0x6210b999
mov dword [ebp - 0x2c], 0xd15de05d
mov dword [ebp - 0x2c], 0xd00585b
mov dword [ebp - 0x58], 0x4ccb63e
mov dword [ebp - 0x30], 0xdead9bac
push ebx
call fcn.10017e9c
mov dword [ebp - 4], 0x1f
xor eax, eax
mov dword [ebp - 0x34], 0x6f94
mov dword [ebp - 0x40], 0x140d
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x100325ef
push dword [ebp - 0x20]
lea ecx, [ebp - 0x788]
call fcn.10017f3a
mov dword [eax], 0xe94f934f
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x100325d1
xor eax, eax
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x788]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x1003263c
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x788]
mov eax, dword [ebp - 0x54]
xor eax, eax
push eax
call fcn.10017f3a
mov eax, dword [ebp - 0x40]
cmp ebx, eax
sbb eax, eax
neg eax
add eax, 0xcc8e
sub eax, dword [ebp - 0x48]
neg eax
sbb eax, eax
inc eax
imul eax, dword [ebp - 0x58]
test eax, eax
jne 0x1003263f
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x3c]
lea ecx, [ebp - 0x788]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x48], 0x3fdda78c
mov dword [ebp - 4], esi
call fcn.10017f1e
push 3
pop esi
mov dword [ebp - 0x10], 7
lea ecx, [ebp - 0x108]
push esi
call fcn.10017e9c
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0xcbc]
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x2c], 0xca9f8d1
push ebx
call fcn.10017e9c
mov byte [ebp - 4], 0x21
mov eax, 0xffff
mov dword [ebp - 0x1c], eax
xor eax, eax
mov dword [ebp - 0x54], 0xe128
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100326cb
push dword [ebp - 0x10]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
mov dword [eax], 0x89b5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100326ad
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jge 0x100326f1
push dword [ebp - 0x10]
lea ecx, [ebp - 0xcbc]
call fcn.10017f3a
mov dword [eax], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jl 0x100326d3
xor eax, eax
mov dword [ebp - 0x10], 0x1a
cmp dword [ebp - 0x10], 0xfffffffe
jl 0x100329b4
push 2
pop ecx
mov dword [ebp - 0x24], 0xffab8c3a
mov dword [ebp - 0x18], 0xfffffff8
mov dword [ebp - 0x34], 0x62ee6d05
mov dword [ebp - 0x38], 0xa9bacde9
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x1003279a
mov dword [ebp - 0x2c], 0x6eff
lea ecx, [ebp - 0xe88]
mov dword [ebp - 0x2c], ebx
push ebx
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 0x22
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
jge 0x1003276b
push dword [ebp - 0x20]
lea ecx, [ebp - 0xe88]
call fcn.10017f3a
mov dword [eax], 0x19e95d1c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jl 0x1003274d
xor eax, eax
dec dword [ebp - 0x1c]
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x1003277b
push eax
push eax
call edi
lea ecx, [ebp - 0xe88]
mov byte [ebp - 4], 0x21
call fcn.10017f1e
inc dword [ebp - 0x24]
push 2
pop eax
cmp dword [ebp - 0x24], eax
jle 0x10032729
push 2
xor eax, eax
pop ecx
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ecx
jg 0x100329a7
or eax, 0xffffffff
lea ecx, [ebp - 0x108]
mov dword [ebp - 0x40], eax
push dword [ebp - 0x1c]
call fcn.10017f3a
xor ebx, ebx
cmp dword [eax], ebx
je 0x1003292a
mov dword [ebp - 0x3c], 0x6de21e5
lea ecx, [ebp - 0x8e8]
push esi
call fcn.10017e9c
xor eax, eax
mov byte [ebp - 4], 0x23
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10032802
push dword [ebp - 0x20]
lea ecx, [ebp - 0x8e8]
call fcn.10017f3a
xor ecx, ecx
inc ecx
mov dword [eax], ecx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x100327e5
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032815
push eax
push eax
push eax
push eax
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
cmp dword [eax], 0
je 0x100328fe
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
mov eax, dword [ebp - 0x38]
lea ecx, [ebp - 0x108]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov edx, dword [ebp - 0x34]
mov esi, eax
mov ecx, dword [ebp - 0x54]
xor eax, eax
sub edx, 0x20250f4b
cmp edx, ecx
lea ecx, [ebp - 0x108]
setge al
xor ebx, ebx
add eax, dword [ebp - 0x38]
cmp eax, dword [esi]
push dword [ebp - 0x1c]
setne bl
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
xor edx, edx
cmp ebx, ecx
setge dl
imul ecx, edx, 0x566e
xor edx, edx
cmp ecx, dword [eax]
setg dl
cmp edx, dword [ebp - 0x10]
jl 0x100328ac
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
cmp dword [eax], 0
je 0x100328ac
xor eax, eax
inc eax
jmp 0x100328ae
xor eax, eax
mov dword [ebp - 0x3c], eax
lea ecx, [ebp - 0x108]
mov eax, dword [ebp - 0x3c]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x108]
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x1c]
call fcn.10017f3a
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x8e8]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
push 3
pop esi
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
mov eax, dword [ebp - 0x54]
xor ecx, ecx
test eax, eax
setns cl
mov dword [ebp - 0x38], ecx
lea ecx, [ebp - 0x8e8]
mov byte [ebp - 4], 0x21
call fcn.10017f1e
jmp 0x1003298a
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
cmp dword [eax], ebx
je 0x1003294b
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x58]
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x108]
call fcn.10017f3a
mov ecx, 0xfff7
sub ecx, dword [eax]
mov eax, dword [ebp - 0x10]
add eax, ecx
jne 0x1003297b
push eax
lea ecx, [ebp - 0x108]
call fcn.10017f3a
cmp dword [eax], ebx
jne 0x1003297b
xor eax, eax
jmp 0x1003297e
xor eax, eax
inc eax
cmp eax, 0xd92edcdd
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
or eax, 0xffffffff
mov dword [ebp - 0x58], eax
inc dword [ebp - 0x1c]
push 2
pop eax
cmp dword [ebp - 0x1c], eax
jle 0x100327a6
xor ebx, ebx
xor eax, eax
push 2
inc ebx
pop ecx
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffe
jge 0x10032705
lea ecx, [ebp - 0xcbc]
call fcn.10017f1e
or edi, 0xffffffff
lea ecx, [ebp - 0x108]
mov dword [ebp - 4], edi
call fcn.10017f1e
push 0xfffffffffffffff8
pop eax
mov dword [ebp - 0x4c], 0x25b0e446
lea ecx, [ebp - 0xa50]
push 2
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x3c], eax
pop eax
push eax
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 0x24
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 4
jge 0x10032a16
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x620], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x10032a01
xor eax, eax
push 2
mov dword [ebp - 0x10], eax
pop eax
push 8
pop ebx
cmp dword [ebp - 0x10], eax
jge 0x10032a3c
push dword [ebp - 0x10]
lea ecx, [ebp - 0xa50]
call fcn.10017f3a
push 2
mov dword [eax], ebx
inc dword [ebp - 0x10]
pop eax
jmp 0x10032a1f
mov eax, dword [ebp - 0x61c]
xor ecx, ecx
mov eax, dword [ebp - 0x61c]
mov eax, dword [ebp - 0x61c]
mov eax, dword [ebp - 0x61c]
mov eax, dword [ebp - 0x61c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
cmp eax, 0xf7fb
mov esi, dword [ebp - 0x614]
setl cl
xor eax, eax
inc eax
add esi, ecx
push eax
lea ecx, [ebp - 0xa50]
call fcn.10017f3a
mov ecx, dword [ebp - 0x61c]
xor edx, edx
add ecx, esi
mov dword [ebp - 4], edi
cmp ecx, 0x5bef
lea ecx, [ebp - 0xa50]
setl dl
mov dword [eax], edx
call fcn.10017f1e
xor eax, eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x2c], edi
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10032ac4
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_QueryServiceStatus]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032ad8
push eax
push eax
push eax
call dword [sym.imp.ADVAPI32.dll_RegLoadKeyW]
xor eax, eax
mov dword [ebp - 0x38], 0xcc895931
xor esi, esi
mov dword [ebp - 0x24], edi
inc esi
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x30], 0x4225189d
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10032b19
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x94], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10032b01
xor eax, eax
cmp dword [ebp - 0x24], eax
je 0x10032b4d
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x94]
imul eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
xor eax, eax
cmp dword [ebp - 0x24], eax
jne 0x10032b50
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ebp - 0x94]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
mov eax, dword [ebp - 0x24]
sete dl
xor ecx, ecx
cmp eax, edx
setge cl
xor eax, eax
imul ecx, dword [ebp - 0x94]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 0xec0a
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10032ba7
push eax
push eax
push 0xc32
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032bc0
push eax
push 0x1de6
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor eax, eax
mov dword [ebp - 0x3c], 0x95e
mov dword [ebp - 0x24], 0x2c03342e
mov dword [ebp - 0x54], 5
mov dword [ebp - 0x10], 0xb6182eac
mov dword [ebp - 0x24], eax
jmp 0x10032bee
mov dword [ebp - 0x3c], 0x63126ff2
dec dword [ebp - 0x3c]
dec dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0xffffffe3
jl 0x10032be1
cmp dword [ebp - 0x54], eax
je 0x10032c00
mov ecx, esi
cmp dword [ebp - 0x10], eax
jne 0x10032c02
mov ecx, eax
mov eax, dword [ebp - 0x54]
sub eax, ecx
je 0x10032c18
mov dword [ebp - 0x40], 0xbbd0a708
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
jmp 0x10032c88
push 2
pop eax
push eax
lea ecx, [ebp - 0x900]
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 0x25
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10032c5c
push dword [ebp - 0x20]
lea ecx, [ebp - 0x900]
call fcn.10017f3a
push 2
mov dword [eax], 0xfffffffa
inc dword [ebp - 0x20]
pop eax
cmp dword [ebp - 0x20], eax
jl 0x10032c3b
xor eax, eax
mov dword [ebp - 0x10], eax
jmp 0x10032c72
push dword [ebp - 0x10]
call fcn.10017f3a
mov dword [eax], 0xfffffffd
inc dword [ebp - 0x10]
push 2
pop eax
lea ecx, [ebp - 0x900]
cmp dword [ebp - 0x10], eax
jl 0x10032c61
mov dword [ebp - 4], edi
call fcn.10017f1e
mov dword [ebp - 0x40], 0xa4f6
mov eax, 0xffff
mov dword [ebp - 0x34], eax
xor eax, eax
mov dword [ebp - 0x18], 0x5d16df25
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x48], 0xf8b4
mov dword [ebp - 0x3c], eax
push 3
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x10032ccc
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xdc4], 0x789328a
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10032cbb
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x54]
sub ecx, eax
mov eax, dword [ebp - 0xdbc]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0xdbc]
setl dl
sub edx, eax
mov eax, dword [ebp - 0x34]
sub edx, eax
imul eax, edx, 9
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x48]
dec eax
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x4c]
cmp dword [ebp - 0x4c], 0xfe30f587
sbb eax, eax
neg eax
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x38], eax
xor eax, eax
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x28], 0x807c
mov dword [ebp - 0x3c], 0x7911b9c6
mov dword [ebp - 0x3c], 0x214c259d
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x13
jl 0x10032f06
mov dword [ebp - 0x54], 0x3817d1dc
lea ecx, [ebp - 0x7a0]
push esi
call fcn.10017e9c
mov dword [ebp - 4], 0x26
xor eax, eax
mov dword [ebp - 0x10], 0x86c8a81d
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10032dc4
push dword [ebp - 0x20]
lea ecx, [ebp - 0x7a0]
call fcn.10017f3a
mov dword [eax], 6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10032da6
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x10032ed9
mov dword [ebp - 0x40], 6
mov dword [ebp - 0x24], 0xbc41bbbb
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], esi
jge 0x10032dfb
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x5a4], 0xfffffffa
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10032de3
xor eax, eax
cmp dword [ebp - 0x54], eax
jne 0x10032e31
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov edx, esi
sub edx, eax
mov eax, dword [ebp - 0x28]
cmp edx, eax
setg cl
xor edx, edx
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
setl dl
xor eax, eax
cmp edx, 0xfffffffd
jne 0x10032e2d
cmp dword [ebp - 0x28], eax
jne 0x10032e33
mov esi, eax
jmp 0x10032e33
xor eax, eax
push eax
lea ecx, [ebp - 0x7a0]
call fcn.10017f3a
lea ecx, [ebp - 0x7a0]
mov dword [eax], esi
mov eax, dword [ebp - 0x10]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x28]
xor edx, edx
cmp ecx, dword [eax]
mov eax, dword [ebp - 0x28]
setne dl
xor ecx, ecx
add eax, edx
xor esi, esi
mov dword [ebp - 0x3c], eax
inc esi
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x54]
cmp eax, esi
setle cl
xor eax, eax
cmp ecx, edi
mov dword [ebp - 0x5a4], ecx
setge al
xor ecx, ecx
cmp eax, edi
setne cl
imul ecx, dword [ebp - 0x10]
xor eax, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x24], eax
jmp 0x10032ed2
mov dword [ebp - 0x10], eax
jmp 0x10032eca
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032ec7
push eax
push eax
push 0x8a0
push eax
push 0x2a9
push eax
push 0x172b
push 0x1ca5
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
xor eax, eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], eax
jle 0x10032e9e
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], eax
jle 0x10032e99
jmp 0x10032ee9
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10032ee9
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
lea ecx, [ebp - 0x7a0]
mov dword [ebp - 4], edi
call fcn.10017f1e
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0x13
jge 0x10032d78
xor eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, 0x5bb2c213
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x2c
jl 0x100337df
jmp 0x10032f22
xor eax, eax
mov dword [ebp - 0x860], ecx
mov dword [ebp - 0x85c], ecx
mov dword [ebp - 0x858], ecx
mov dword [ebp - 0x854], ecx
push 3
mov dword [ebp - 0x18], eax
pop ecx
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], eax
jl 0x10032f7b
mov dword [ebp - 0x24], 0x10f7a73
cmp dword [ebp - 0x85c], eax
jne 0x10032f7b
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ecx
jg 0x10032f76
mov eax, dword [ebp - 0x24]
cmp dword [ebp + eax*4 - 0x860], 0
jne 0x10032f74
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jle 0x10032f5f
xor eax, eax
dec dword [ebp - 0x18]
jns 0x10032f48
movdqa xmm0, xmmword [0x10009330]
lea ecx, [ebp - 0x11d4]
mov dword [ebp - 0x18], 0xfffffff6
mov dword [ebp - 0x20], 0x9dada439
mov dword [ebp - 0x2c], eax
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0xed4]
push eax
lea eax, [ebp - 0xee4]
mov dword [ebp - 0x3c], 0x8100c430
mov dword [ebp - 0x2c], 0x611bc38
push eax
movdqu xmmword [ebp - 0xee4], xmm0
call fcn.10017f49
lea ecx, [ebp - 0x1a6]
mov esi, eax
call fcn.1000a553
push eax
push dword [esi + 4]
lea ecx, [ebp - 0xcd4]
push dword [esi]
call fcn.10017ef8
xor eax, eax
mov dword [ebp - 4], 0x27
push 3
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x10033016
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1100], 0xfffffff9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x10032ffe
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033028
push eax
call dword [sym.imp.KERNEL32.dll_ClearCommBreak]
xor eax, eax
push 2
pop ecx
xor esi, esi
mov dword [ebp - 0x20], ecx
inc esi
cmp dword [ebp - 0x20], eax
jl 0x10033080
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0x52733582
mov dword [ebp - 0x2c], 0xfffffff9
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x2c], 0xd0f4f230
mov dword [ebp - 0x2c], 0xfffffffa
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x1100], 0
jne 0x10033080
xor eax, eax
mov dword [ebp - 0x3c], esi
push eax
lea ecx, [ebp - 0xcd4]
call fcn.10017f3a
mov ecx, dword [ebp - 0x3c]
mov dword [eax], ecx
dec dword [ebp - 0x20]
jns 0x10033036
or eax, 0xffffffff
lea ecx, [ebp - 0xcd4]
mov dword [ebp - 4], eax
call fcn.10017f1e
xor eax, eax
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x28], 0xb457102d
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x3c], esi
push 2
mov dword [ebp - 0x20], eax
pop ecx
cmp dword [ebp - 0x20], ecx
jge 0x100330c6
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x2fc], 0xfdad5a51
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x100330ae
xor eax, eax
cmp dword [ebp - 0x28], eax
je 0x100330f4
mov eax, dword [ebp - 0x28]
sub eax, 0x6ad155d7
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0xf9ac
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x2f8]
xor eax, eax
mov dword [ebp - 0x40], 0xfd59
or ecx, 0xffffffff
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], esi
jg 0x100331e9
or edi, ecx
push 3
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], eax
pop ecx
jmp 0x1003312b
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1088], 0x38bf9cc5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1003311a
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x2fc], 0
jne 0x1003318a
mov ecx, dword [ebp - 0x24]
xor edx, edx
mov eax, dword [ebp - 0x24]
cmp ecx, eax
setge dl
sub edx, 0x652f5217
cmp edx, dword [ebp - 0x24]
jg 0x1003315e
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x24], eax
je 0x10033160
mov edx, esi
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x2fc]
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x2fc], ecx
mov dword [ebp - 0x3c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
cmp eax, edx
setl cl
cmp ecx, dword [ebp - 0x40]
je 0x1003318a
xor eax, eax
jmp 0x1003318c
mov eax, esi
add eax, 0x88a615b3
xor ecx, ecx
cmp eax, esi
mov eax, dword [ebp - 0x28]
push 0
setl cl
xor edx, edx
cmp ecx, 0x1fffe
setg dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x24]
setl bl
xor ecx, ecx
cmp ebx, eax
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x1084]
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
inc dword [ebp - 0x28]
pop eax
cmp dword [ebp - 0x28], esi
jle 0x1003310f
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 8
pop ebx
mov dword [ebp - 0x38], 4
cmp dword [ebp - 0x38], 0xfffffff9
jl 0x100337cd
jmp 0x100331fe
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xb0], esi
mov dword [ebp - 0xac], esi
mov dword [ebp - 0xa8], esi
push 3
mov dword [ebp - 0x20], eax
pop ecx
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], eax
jl 0x1003323d
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033235
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor eax, eax
dec dword [ebp - 0x20]
jns 0x10033224
push 3
pop ecx
mov dword [ebp - 0x1c], 0xfff7
mov dword [ebp - 0x10], 0x4643cdf9
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 4
jge 0x10033270
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x668], 0xc93b4e1
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10033257
xor eax, eax
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], eax
jl 0x10033322
jmp 0x10033280
mov dword [ebp - 0x40], 0xfffffffa
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033297
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov eax, dword [ebp - 0x10]
xor edx, edx
imul ecx, dword [ebp + eax*4 - 0x668], 0x758e
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov ecx, dword [ebp - 0x664]
mov eax, dword [ebp - 0x10]
setle dl
sub ecx, edx
mov eax, dword [ebp + eax*4 - 0x668]
sub ecx, eax
je 0x100332d9
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x668], 0
je 0x100332d9
mov eax, esi
mov dword [ebp - 0x3c], eax
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x660]
mov eax, dword [ebp - 0x10]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
mov eax, dword [ebp + eax*4 - 0x668]
cmp eax, 0xe31551da
sete cl
xor eax, eax
cmp edx, 0x461e
setne al
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x40], ecx
dec dword [ebp - 0x10]
jns 0x1003327e
push ecx
lea ecx, [ebp - 0x918]
call fcn.10017e9c
mov dword [ebp - 4], 0x29
or eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xfffffffc
mov dword [ebp - 0x24], 0x16
jmp 0x100333c1
mov dword [ebp - 0x20], 0x2d149fe
mov dword [ebp - 0x28], 0x4b733c63
dec dword [ebp - 0x28]
mov dword [ebp - 0x20], 0xffffffe5
jmp 0x100333b8
cmp dword [ebp - 0x20], 0xffffffec
jne 0x10033365
cmp dword [ebp - 0x24], 7
jge 0x1003334b
mov edx, dword [ebp - 0x10]
xor ecx, ecx
imul edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
push esi
cmp eax, edx
setg cl
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xae0]
call fcn.10017e9c
push 3
pop eax
mov byte [ebp - 4], 0x2a
lea ecx, [ebp - 0xcec]
mov dword [ebp - 0x2c], 0x7831e42a
push eax
call fcn.10017e9c
push 3
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xe4c]
pop eax
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x2c], eax
or eax, 0xffffffff
mov dword [ebp - 0x2c], eax
push 4
call fcn.10017e9c
mov byte [ebp - 4], 0x2c
xor eax, eax
mov dword [ebp - 0x3c], 7
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], esi
jge 0x10033454
push dword [ebp - 0x1c]
lea ecx, [ebp - 0xae0]
call fcn.10017f3a
mov dword [eax], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1003343a
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 3
jge 0x10033484
inc dword [ebp - 0x4c]
mov ecx, 0x5bb2c213
cmp dword [ebp - 0x4c], 0x2c
jge 0x10032f20
push 2
pop ebx
push ebx
lea ecx, [ebp - 0xa68]
call fcn.10017e9c
xor eax, eax
mov dword [ebp - 4], 0x2e
mov dword [ebp - 0x18], eax
jmp 0x1003380a
push dword [ebp - 0x18]
call fcn.10017f3a
and dword [eax], 0
inc dword [ebp - 0x18]
lea ecx, [ebp - 0xa68]
cmp dword [ebp - 0x18], ebx
jl 0x100337fc
push esi
call fcn.10017f3a
mov ebx, dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
mov dword [eax], 0xfffffffd
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], al
je 0x10033834
push eax
call ebx
or eax, 0xffffffff
lea ecx, [ebp - 0xa68]
mov dword [ebp - 4], eax
call fcn.10017f1e
push 2
pop eax
push eax
lea ecx, [ebp - 0x2cc]
call fcn.10017e9c
push esi
lea ecx, [ebp - 0x150]
mov dword [ebp - 4], 0x2f
call fcn.10017e9c
mov byte [ebp - 4], 0x30
xor eax, eax
mov dword [ebp - 0x34], 0x5f27
push 2
mov dword [ebp - 0x10], eax
pop ecx
cmp dword [ebp - 0x10], ecx
jge 0x100338a0
push dword [ebp - 0x10]
lea ecx, [ebp - 0x2cc]
call fcn.10017f3a
push 2
mov dword [eax], 0x42eb90da
inc dword [ebp - 0x10]
pop eax
cmp dword [ebp - 0x10], eax
jl 0x1003387f
xor eax, eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], esi
jge 0x100338c6
push dword [ebp - 0x10]
lea ecx, [ebp - 0x150]
call fcn.10017f3a
mov dword [eax], 0x3638ecf5
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x100338a8
xor eax, eax
push eax
lea ecx, [ebp - 0x150]
call fcn.10017f3a
and dword [eax], 0
jmp 0x10033a18
mov dword [ebp - 0x24], 0xc4530722
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x40], 0xfffffff7
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], eax
jl 0x1003393b
jmp 0x100338f9
xor eax, eax
push eax
lea ecx, [ebp - 0x150]
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
mov esi, eax
lea ecx, [ebp - 0x150]
xor eax, eax
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
mov ecx, dword [esi]
mov dword [eax], ecx
dec dword [ebp - 0x24]
jns 0x100338f7
xor esi, esi
inc esi
mov dword [ebp - 0x24], esi
lea ecx, [ebp - 0x150]
mov eax, dword [ebp - 0x24]
xor eax, eax
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
xor eax, eax
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
xor ecx, ecx
cmp dword [eax], 0xcd409884
setne cl
xor eax, eax
mov dword [ebp - 0x3c], ecx
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
lea ecx, [ebp - 0x2cc]
push dword [eax]
call fcn.10017f3a
mov ecx, dword [ebp - 0x3c]
xor edx, edx
cmp ecx, 0xd022
setl dl
add edx, dword [eax]
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp - 0x34]
jle 0x100339f9
xor eax, eax
mov edx, eax
cmp dword [ebp - 0x34], eax
je 0x100339fb
mov edx, esi
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setg cl
xor eax, eax
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
inc dword [eax]
xor eax, eax
lea ecx, [ebp - 0x150]
push eax
call fcn.10017f3a
cmp dword [eax], esi
jle 0x100338da
lea ecx, [ebp - 0x150]
call fcn.10017f1e
or eax, 0xffffffff
lea ecx, [ebp - 0x2cc]
mov dword [ebp - 4], eax
call fcn.10017f1e
push 2
pop eax
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10017e9c
mov dword [ebp - 4], 0x31
xor eax, eax
mov dword [ebp - 0x28], 0x3fa75c1
mov dword [ebp - 0x38], 0xe1df
mov dword [ebp - 0x10], 0x2fd2d1a4
mov dword [ebp - 0x64], 0xfffffff6
mov dword [ebp - 0x20], 0x76d2
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x34], esi
push 2
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10033abc
or edi, 0xffffffff
push dword [ebp - 0x18]
lea ecx, [ebp - 0x1c4]
call fcn.10017f3a
push 2
mov dword [eax], edi
inc dword [ebp - 0x18]
pop eax
cmp dword [ebp - 0x18], eax
jl 0x10033a99
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
xor eax, eax
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10017f3a
lea ecx, [ebp - 0x1c4]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov esi, dword [ebp - 0x28]
neg esi
sbb esi, esi
xor eax, eax
inc eax
neg esi
push eax
call fcn.10017f3a
xor eax, eax
mov dword [ebp - 0x28], esi
push eax
lea ecx, [ebp - 0x1c4]
call fcn.10017f3a
xor ecx, ecx
cmp dword [eax], 0xfffffff7
sete cl
xor eax, eax
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0x1c4]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x10]
xor edx, edx
cmp ecx, dword [eax]
setl dl
mov dword [ebp - 0x64], edx
xor edx, edx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
mov eax, 0xfffc
setge dl
imul edx, dword [ebp - 0x20]
cmp eax, edx
sbb eax, eax
inc eax
cmp eax, dword [ebp - 0x38]
jne 0x10033c29
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x10033c29
xor esi, esi
mov dword [ebp - 0x34], 0x26d8f9c3
inc esi
mov dword [ebp - 0x58], esi
mov dword [ebp - 0x28], esi
cmp dword [ebp - 0x28], eax
jl 0x10033cb8
push dword [ebp - 0x28]
lea ecx, [ebp - 0x1c4]
call fcn.10017f3a
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
xor eax, eax
cmp dword [ebp - 0x10], eax
jne 0x10033bf4
dec dword [ebp - 0x34]
lea ecx, [ebp - 0x1c4]
push eax
call fcn.10017f3a
imul edx, dword [ebp - 0x38], 0xffff
mov esi, eax
mov ecx, dword [ebp - 0x58]
xor eax, eax
cmp edx, ecx
mov ecx, dword [ebp - 0x58]
setle al
xor edx, edx
add eax, 0xa2c6
cmp ecx, eax
mov eax, dword [ebp - 0x34]
setle dl
xor ecx, ecx
cmp eax, edx
setle cl
xor eax, eax
cmp dword [esi], ecx
lea ecx, [ebp - 0x1c4]
setl al
imul eax, eax, 0xf947
mov dword [ebp - 0x58], eax
push dword [ebp - 0x28]
call fcn.10017f3a
mov ecx, dword [ebp - 0x58]
xor esi, esi
imul ecx, dword [eax]
cmp ecx, 0xfc02
jge 0x10033bf1
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x10], esi
cmp dword [ebp - 0x10], eax
jl 0x10033c1b
xor esi, esi
mov dword [ebp - 0x40], 0xc74f
inc esi
mov dword [ebp - 0x18], 0x821d2a6a
mov dword [ebp - 0x3c], 9
lea ecx, [ebp - 0x1c4]
push esi
call fcn.10017f3a
mov eax, dword [ebp - 0x34]
mov ecx, 0xffff
mov eax, dword [ebp - 0x34]
cmp ecx, eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, 0xb50d
setne cl
mov dword [ebp - 0x40], ecx
lea ecx, [ebp - 0x1c4]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
xor eax, eax
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
mov dword [ebp - 0x3c], edx
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x7bfe1a27
setle al
mov dword [ebp - 0x28], eax
or eax, 0xffffffff
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 4], eax
call fcn.10017f1e
xor eax, eax
push 3
mov dword [ebp - 0x18], eax
pop ecx
cmp dword [ebp - 0x18], ecx
jge 0x10033cee
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1148], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10033cd6
xor eax, eax
mov byte [ebp - 0x11], al
cmp byte [ebp - 0x11], 0
je 0x10033cff
push eax
push eax
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
mov dword [ebp - 0x1140], 0xb90da115
lea ecx, [ebp - 0x6bc]
mov dword [ebp - 0x3c], 0xcdbe8e56
or eax, 0xffffffff
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x54], 0x6210b999
mov dword [ebp - 0x2c], 0xd15de05d
mov dword [ebp - 0x2c], 0xd00585b
mov dword [ebp - 0x58], 0x4ccb63e
mov dword [ebp - 0x30], 0xdead9bac
push esi
call fcn.10017e9c
mov dword [ebp - 4], 0x32
xor eax, eax
mov dword [ebp - 0x34], 0x6f94
mov dword [ebp - 0x40], 0x140d
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], esi
jge 0x10033d89
push dword [ebp - 0x18]
lea ecx, [ebp - 0x6bc]
call fcn.10017f3a
mov dword [eax], 0xe94f934f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10033d6b
inc dword [ebp - 0x34]
lea ecx, [ebp - 0x6bc]
push eax
call fcn.10017f3a
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
xor eax, eax
cmp dword [ebp - 0x34], eax
je 0x10033dd6