Function at 0x2e006e9e
Capabilities:
Accept command line arguments
Check mutex on windows
Check os version

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
mov eax, dword [0x2e006e74]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [0x2e0130f8]
push ebx
xor ebx, ebx
or eax, dword [0x2e0130fc]
push esi
push edi
mov dword [ebp - 0x120], ecx
mov dword [ebp - 0x140], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x16c], ebx
mov dword [ebp - 0x168], ebx
mov dword [ebp - 0x11c], ebx
jne 0x2e006f42
cmp byte [0x2e0130f4], bl
je 0x2e008627
cmp byte [0x2e0130f5], bl
je 0x2e0086bc
mov ecx, 0x2e013380
push ecx
push ebx
mov eax, ecx
cdq
push ebx
mov dword [0x2e0130fc], edx
lea edx, [ebp - 0x13c]
push edx
push 1
mov dword [0x2e0130f8], eax
mov eax, 0x2e00190c
push eax
push ecx
push 0x2e00e35c
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], ebx
call dword [sym.imp.ADVAPI32.dll_RegisterTraceGuidsW]
mov esi, 0x40000000
cmp dword [0x2e0133a4], ebx
jne 0x2e0086db
push 0x2e00726c
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebp - 0x128], eax
cmp eax, ebx
je 0x2e008760
cmp dword [0x2e0133a4], ebx
jne 0x2e008857
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
mov eax, dword [ebp - 0x120]
cmp dword [eax + 0x50], ebx
je 0x2e006fd9
cmp dword [ebp - 0x11c], ebx
jne 0x2e0088ec
push 0x2e00276c
push ebx
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov edi, eax
cmp edi, ebx
je 0x2e006fcd
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x11c], ebx
jne 0x2e0089b5
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax]
lea edx, [ebp - 0x12c]
push edx
push eax
call dword [ecx + 0x20]
cmp eax, ebx
mov dword [ebp - 0x124], eax
jl 0x2e0071b6
cmp dword [ebp - 0x12c], ebx
je 0x2e008a7e
lea eax, [ebp - 0x130]
push eax
push ebx
push ebx
push 2
call fcn.2e003832
cmp eax, ebx
mov dword [ebp - 0x124], eax
jl 0x2e0071b6
cmp dword [ebp - 0x130], ebx
je 0x2e008b49
push ebx
mov eax, 0x400
push eax
push eax
push ebx
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_PeekMessageW]
lea ecx, [ebp - 0x16c]
call fcn.2e0034d0
mov eax, dword [ebp - 0x120]
mov edi, dword [sym.imp.USER32.dll_SetTimer]
cmp dword [eax + 0x58], ebx
jne 0x2e008c18
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
cmp eax, ebx
mov dword [ebp - 0x124], eax
jl 0x2e0071b6
mov eax, dword [ebp - 0x120]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
cmp eax, ebx
mov dword [ebp - 0x124], eax
jl 0x2e0071b6
mov eax, dword [ebp - 0x120]
cmp dword [eax + 0x54], ebx
jne 0x2e008c2e
mov edi, eax
mov eax, dword [edi]
push edi
call dword [eax + 0x2c]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x11c], ebx
jne 0x2e008c46
mov dl, byte [0x2e0133a8]
cmp dword [0x2e0133a4], ebx
jne 0x2e008d17
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [edi + 0x54], ebx
jne 0x2e008dac
call fcn.2e005433
push ebx
push ebx
push ebx
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_GetMessageW]
cmp eax, ebx
mov dword [ebp - 0x138], eax
jle 0x2e0071a9
cmp dword [ebp - 0x15c], 0x113
je 0x2e008dbb
cmp dword [ebp - 0x15c], 0x218
je 0x2e008f7d
lea eax, [ebp - 0x140]
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x160]
push eax
lea ecx, [ebp - 0x16c]
call fcn.2e0072ac
cmp dword [ebp - 0x134], ebx
jne 0x2e007184
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea eax, [ebp - 0x160]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
cmp dword [ebp - 0x134], ebx
jne 0x2e007184
cmp dword [0x2e0136a0], ebx
je 0x2e0070e9
cmp dword [ebp - 0x144], ebx
je 0x2e009074
cmp dword [ebp - 0x11c], ebx
jne 0x2e009085
push dword [ebp - 0x140]
push 1
call fcn.2e002185
cmp dword [ebp - 0x138], 0xffffffff
je 0x2e009161
push 0x10d0
call fcn.2e005aa0
mov edi, dword [ebp - 0x120]
mov eax, dword [edi + 0x68]
cmp eax, ebx
jne 0x2e009180
mov eax, dword [edi]
push edi
call dword [eax + 0x34]
mov eax, dword [edi + 0x64]
cmp eax, ebx
jne 0x2e009190
call fcn.2e0020ca
mov eax, dword [edi]
push edi
call dword [eax + 0x1c]
cmp dword [ebp - 0x11c], ebx
jne 0x2e0091a0
cmp byte [0x2e0130f4], bl
je 0x2e007246
mov esi, dword [0x2e0130f8]
mov eax, dword [0x2e0130fc]
mov ecx, esi
or ecx, eax
je 0x2e007246
cmp byte [0x2e0130f5], bl
je 0x2e009308
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.ADVAPI32.dll_UnregisterTraceGuids]
mov dword [esi + 0x20], ebx
mov byte [esi + 0x28], bl
mov dword [esi + 8], ebx
mov dword [esi + 0xc], ebx
mov dword [esi], ebx
mov dword [esi + 4], ebx
mov dword [0x2e0130f8], ebx
mov dword [0x2e0130fc], ebx
push dword [ebp - 0x168]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.2e005b14
leave
ret
lea eax, [ebp - 0x118]
push eax
mov dword [ebp - 0x118], 0x114
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
test eax, eax
je 0x2e008655
cmp dword [ebp - 0x114], 6
setb al
mov byte [0x2e0130f5], al
cmp al, bl
jne 0x2e0086b0
push 0x2e00aafc
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
cmp edi, ebx
je 0x2e0086a9
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x2e00aaf0
push edi
call esi
mov dword [0x2e0138e0], eax
cmp eax, ebx
je 0x2e0086a9
push 0x2e00aae0
push edi
call esi
mov dword [0x2e013894], eax
cmp eax, ebx
je 0x2e00869f
push 0x2e00aad0
push edi
call esi
mov dword [0x2e0138e4], eax
cmp eax, ebx
jne 0x2e0086b0
mov dword [0x2e013894], 0x2e00e417
mov byte [0x2e0130f5], 1
mov byte [0x2e0130f4], 1
jmp 0x2e006ef9
push 0x2e0130f8
push 0x2e013380
push 0x2e00e3c7
push 0x2e00190c
call dword [0x2e013894]
jmp 0x2e006f42
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008703
cmp al, 5
jae 0x2e0086f4
cmp al, bl
jne 0x2e006f53
test byte [0x2e0133a0], 2
je 0x2e006f53
jmp 0x2e00874b
cmp al, 5
jae 0x2e00870f
cmp al, bl
jne 0x2e006f53
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e006f53
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e006f53
cmp edx, edi
jne 0x2e006f53
push 0x400
call fcn.2e003024
pop ecx
mov dword [ebp - 0x11c], eax
cmp eax, ebx
jne 0x2e00876f
mov dword [ebp - 0x124], 0x8007000e
jmp 0x2e0071b6
lea eax, [ebp - 0x128]
push eax
mov dword [ebp - 0x128], ebx
call fcn.2e003e50
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009830
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x20
cmp dword [0x2e0133a4], ebx
je 0x2e006f53
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e0087e9
cmp al, 5
jae 0x2e0087da
cmp al, bl
jne 0x2e006f53
test byte [0x2e0133a0], 2
je 0x2e006f53
jmp 0x2e008831
cmp al, 5
jae 0x2e0087f5
cmp al, bl
jne 0x2e006f53
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e006f53
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e006f53
cmp edx, edi
jne 0x2e006f53
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e006f53
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e00887f
cmp al, 5
jae 0x2e008870
cmp al, bl
jne 0x2e006f7c
test byte [0x2e0133a0], 0x10
je 0x2e006f7c
jmp 0x2e0088c7
cmp al, 5
jae 0x2e00888b
cmp al, bl
jne 0x2e006f7c
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 0x10
and ecx, esi
or eax, ecx
je 0x2e006f7c
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 0x10
and edx, esi
cmp ecx, eax
jne 0x2e006f7c
cmp edx, edi
jne 0x2e006f7c
push 0x2e0097e8
push 0x2e009318
push 0x2e009328
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e006f7c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009768
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x18
cmp dword [0x2e0133a4], ebx
je 0x2e006f9f
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008947
cmp al, 5
jae 0x2e008938
cmp al, bl
jne 0x2e006f9f
test byte [0x2e0133a0], 2
je 0x2e006f9f
jmp 0x2e00898f
cmp al, 5
jae 0x2e008953
cmp al, bl
jne 0x2e006f9f
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e006f9f
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e006f9f
cmp edx, edi
jne 0x2e006f9f
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e006f9f
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e0096f0
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x18
cmp dword [0x2e0133a4], ebx
je 0x2e006fd9
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008a10
cmp al, 5
jae 0x2e008a01
cmp al, bl
jne 0x2e006fd9
test byte [0x2e0133a0], 2
je 0x2e006fd9
jmp 0x2e008a58
cmp al, 5
jae 0x2e008a1c
cmp al, bl
jne 0x2e006fd9
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e006fd9
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e006fd9
cmp edx, edi
jne 0x2e006fd9
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e006fd9
cmp dword [ebp - 0x11c], ebx
je 0x2e008b3e
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009660
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x18
cmp dword [0x2e0133a4], ebx
je 0x2e008b32
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008ad9
cmp al, 5
jae 0x2e008ace
cmp al, bl
jne 0x2e008b32
test byte [0x2e0133a0], 2
je 0x2e008b32
jmp 0x2e008b11
cmp al, 5
jae 0x2e008ae1
cmp al, bl
jne 0x2e008b32
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e008b32
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e008b32
cmp edx, edi
jne 0x2e008b32
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
cmp dword [ebp - 0x12c], ebx
jne 0x2e007006
mov dword [ebp - 0x124], ebx
jmp 0x2e0071b6
cmp dword [ebp - 0x11c], ebx
je 0x2e008c09
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e0095b8
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x18
cmp dword [0x2e0133a4], ebx
je 0x2e008bfd
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008ba4
cmp al, 5
jae 0x2e008b99
cmp al, bl
jne 0x2e008bfd
test byte [0x2e0133a0], 2
je 0x2e008bfd
jmp 0x2e008bdc
cmp al, 5
jae 0x2e008bac
cmp al, bl
jne 0x2e008bfd
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e008bfd
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e008bfd
cmp edx, edi
jne 0x2e008bfd
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
cmp dword [ebp - 0x130], ebx
jne 0x2e007030
mov dword [ebp - 0x124], 0x80004005
jmp 0x2e0071b6
push ebx
push dword [eax + 0x60]
push ebx
push ebx
call edi
mov ecx, dword [ebp - 0x120]
mov dword [ecx + 0x68], eax
jmp 0x2e00707a
push ebx
push dword [eax + 0x5c]
push ebx
push ebx
call edi
mov ecx, dword [ebp - 0x120]
mov dword [ecx + 0x64], eax
mov edi, ecx
jmp 0x2e0070db
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009530
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x1c
cmp dword [0x2e0133a4], ebx
je 0x2e0070cf
mov dl, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008ca4
cmp dl, 5
jae 0x2e008c95
cmp dl, bl
jne 0x2e0070c3
test byte [0x2e0133a0], 2
je 0x2e0070c3
jmp 0x2e008cf1
cmp dl, 5
jae 0x2e008cb1
cmp dl, bl
jne 0x2e0070c3
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e0070c3
mov eax, dword [0x2e013398]
mov ecx, dword [0x2e01339c]
and eax, 2
and ecx, esi
cmp eax, dword [0x2e013398]
jne 0x2e0070c3
cmp ecx, dword [0x2e01339c]
jne 0x2e0070c3
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e0070bd
cmp byte [0x2e0130f5], bl
je 0x2e008d3b
cmp dl, 5
jae 0x2e008d2c
cmp dl, bl
jne 0x2e0070cf
test byte [0x2e0133a0], 0x10
je 0x2e0070cf
jmp 0x2e008d87
cmp dl, 5
jae 0x2e008d48
cmp dl, bl
jne 0x2e0070cf
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 0x10
and ecx, esi
or eax, ecx
je 0x2e0070cf
mov edx, dword [0x2e013398]
mov ecx, dword [0x2e01339c]
mov eax, edx
and eax, 0x10
and ecx, esi
cmp eax, edx
jne 0x2e0070cf
cmp ecx, dword [0x2e01339c]
jne 0x2e0070cf
push 0x2e0097e8
push 0x2e009318
push 0x2e009328
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e0070cf
push 0x10cf
call fcn.2e005aa0
jmp 0x2e0070e4
mov eax, dword [edi + 0x64]
cmp dword [ebp - 0x158], eax
jne 0x2e008f52
push eax
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [edi]
push edi
mov dword [edi + 0x64], ebx
call dword [eax + 0x2c]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x11c], ebx
je 0x2e008ea1
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009530
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x1c
cmp dword [0x2e0133a4], ebx
je 0x2e008f27
mov dl, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008e43
cmp dl, 5
jae 0x2e008e38
cmp dl, bl
jne 0x2e008ea7
test byte [0x2e0133a0], 2
je 0x2e008ea7
jmp 0x2e008e80
cmp dl, 5
jae 0x2e008e4c
cmp dl, bl
jne 0x2e008ea7
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e008ea7
mov eax, dword [0x2e013398]
mov ecx, dword [0x2e01339c]
and eax, 2
and ecx, esi
cmp eax, dword [0x2e013398]
jne 0x2e008ea7
cmp ecx, dword [0x2e01339c]
jne 0x2e008ea7
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
mov dl, byte [0x2e0133a8]
cmp dword [0x2e0133a4], ebx
je 0x2e008f27
cmp byte [0x2e0130f5], bl
je 0x2e008ecb
cmp dl, 5
jae 0x2e008ec0
cmp dl, bl
jne 0x2e008f27
test byte [0x2e0133a0], 0x10
je 0x2e008f27
jmp 0x2e008f07
cmp dl, 5
jae 0x2e008ed4
cmp dl, bl
jne 0x2e008f27
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 0x10
and ecx, esi
or eax, ecx
je 0x2e008f27
mov edx, dword [0x2e013398]
mov ecx, dword [0x2e01339c]
mov eax, edx
and eax, 0x10
and ecx, esi
cmp eax, edx
jne 0x2e008f27
cmp ecx, dword [0x2e01339c]
jne 0x2e008f27
push 0x2e0097e8
push 0x2e009318
push 0x2e009328
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
push dword [ebp - 0x128]
call dword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [edi + 0x54], ebx
jne 0x2e00714e
push 0x10cf
call fcn.2e005aa0
mov dword [edi + 0x54], 1
jmp 0x2e00714e
mov eax, dword [edi + 0x68]
cmp dword [ebp - 0x158], eax
jne 0x2e007127
push eax
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov eax, dword [edi]
push edi
mov dword [edi + 0x68], ebx
call dword [eax + 0x30]
mov dword [ebp - 0x124], eax
jmp 0x2e00714e
push dword [ebp - 0x158]
mov eax, dword [edi]
push edi
call dword [eax + 0x28]
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x11c], ebx
je 0x2e00714e
push eax
push dword [ebp - 0x158]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009498
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x20
cmp dword [0x2e0133a4], ebx
je 0x2e00714e
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e008ffd
cmp al, 5
jae 0x2e008fee
cmp al, bl
jne 0x2e00714e
test byte [0x2e0133a0], 2
je 0x2e00714e
jmp 0x2e009043
cmp al, 5
jae 0x2e009009
cmp al, bl
jne 0x2e00714e
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e00714e
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e009069
cmp edx, edi
jne 0x2e009069
mov edi, dword [ebp - 0x120]
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e00714e
mov edi, dword [ebp - 0x120]
jmp 0x2e00714e
cmp dword [0x2e01304c], ebx
jne 0x2e007190
jmp 0x2e0071a9
mov eax, 0x2e009464
cmp dword [ebp - 0x144], ebx
jne 0x2e009097
mov eax, 0x2e0098c0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009408
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x1c
cmp dword [0x2e0133a4], ebx
je 0x2e00719c
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e0090f3
cmp al, 5
jae 0x2e0090e4
cmp al, bl
jne 0x2e00719c
test byte [0x2e0133a0], 2
je 0x2e00719c
jmp 0x2e00913b
cmp al, 5
jae 0x2e0090ff
cmp al, bl
jne 0x2e00719c
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e00719c
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e00719c
cmp edx, edi
jne 0x2e00719c
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
jmp 0x2e00719c
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x2e009175
and eax, 0xffff
or eax, 0x80070000
mov dword [ebp - 0x124], eax
jmp 0x2e0071b6
push eax
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [edi + 0x68], ebx
jmp 0x2e0071d1
push eax
push ebx
call dword [sym.imp.USER32.dll_KillTimer]
mov dword [edi + 0x64], ebx
jmp 0x2e0071e2
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009390
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x1c
cmp dword [0x2e0133a4], ebx
je 0x2e009249
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e0091f0
cmp al, 5
jae 0x2e0091e5
cmp al, bl
jne 0x2e009249
test byte [0x2e0133a0], 2
je 0x2e009249
jmp 0x2e009228
cmp al, 5
jae 0x2e0091f8
cmp al, bl
jne 0x2e009249
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e009249
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e009249
cmp edx, edi
jne 0x2e009249
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
push dword [ebp - 0x124]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push 0x2e0036b8
push 0x2e009338
push 0xffffffffffffffff
push 0x200
push dword [ebp - 0x11c]
call dword [sym.imp.MSVCR90.dll__snwprintf_s]
add esp, 0x1c
cmp dword [0x2e0133a4], ebx
je 0x2e0092f7
mov al, byte [0x2e0133a8]
cmp byte [0x2e0130f5], bl
je 0x2e00929e
cmp al, 5
jae 0x2e009293
cmp al, bl
jne 0x2e0092f7
test byte [0x2e0133a0], 2
je 0x2e0092f7
jmp 0x2e0092d6
cmp al, 5
jae 0x2e0092a6
cmp al, bl
jne 0x2e0092f7
mov eax, dword [0x2e013390]
mov ecx, dword [0x2e013394]
and eax, 2
and ecx, esi
or eax, ecx
je 0x2e0092f7
mov eax, dword [0x2e013398]
mov edi, dword [0x2e01339c]
mov ecx, eax
mov edx, edi
and ecx, 2
and edx, esi
cmp ecx, eax
jne 0x2e0092f7
cmp edx, edi
jne 0x2e0092f7
push dword [ebp - 0x11c]
push 0x2e00aab0
push 0x2e00aac0
push dword [0x2e0130fc]
push dword [0x2e0130f8]
call fcn.2e00e57e
push dword [ebp - 0x11c]
call sub.MSVCR90.dll____V_YAXPAX_Z
pop ecx
jmp 0x2e0071f9
push eax
push esi
call dword [0x2e0138e4]
jmp 0x2e00723a