Function at 0x100342db
Capabilities:
Get session user name

Disassembly:
mov eax, 0x10088810
call fcn.10087058
sub esp, 0x398
push ebx
push esi
mov dword [ebp - 0x20], 0x25b0
xor ebx, ebx
push edi
mov dword [ebp - 0x2c], 0xee1c
push 2
pop eax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], eax
mov dword [ebp - 0x248], eax
push 3
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x3c], 0xffffffff
pop ecx
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x22d800f4
mov dword [ebp - 0xd8], edx
mov dword [ebp - 0x10], ebx
jmp 0x1003434f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x350], 0x42c78ef8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1003433e
mov eax, dword [ebp - 0x20]
mov esi, ebx
push 1
pop edi
cmp dword [ebp - 0x20], ebx
je 0x10034363
mov esi, edi
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
inc dword [ebp - 0x3c]
mov dword [ebp - 0x254], ebx
mov eax, dword [ebp - 0x2c]
test eax, eax
setg cl
xor edx, edx
cmp ecx, 0x9f9034e1
setne dl
mov dword [ebp - 0x348], edx
mov eax, dword [ebp - 0x20]
imul eax, edx
cmp esi, eax
jl 0x1003439b
mov ecx, ebx
cmp dword [ebp - 0x2c], ebx
je 0x1003439d
mov ecx, edi
mov eax, dword [ebp - 0x38]
imul eax, ecx
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x100343bf
push 0x1d51
push 0x1e95
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 0x40], 0x25b0
lea ecx, [ebp - 0x140]
push 2
call fcn.100097db
mov dword [ebp - 4], ebx
mov dword [ebp - 0x24], 8
mov dword [ebp - 0x38], 4
mov dword [ebp - 0x10], ebx
jmp 0x100343fc
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], 0xdf99ff60
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100343e9
mov dword [ebp - 0x24], edi
cmp dword [ebp - 0x24], ebx
jl 0x100344da
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x20], edi
cmp dword [ebp - 0x20], ebx
jl 0x100344cc
push edi
lea ecx, [ebp - 0x1b0]
call fcn.100097db
mov dword [ebp - 0x10], ebx
jmp 0x1003444c
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1b0]
mov dword [eax + ecx*4], 0x6aa1c33
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x10034439
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x140]
cmp dword [ecx + eax*4], ebx
jne 0x1003448a
xor eax, eax
cmp dword [ecx], 0xb713
sete al
imul ecx, eax, 0xc164
mov eax, dword [ebp - 0x1b0]
add ecx, 0x6361599c
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
sub eax, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], ebx
jmp 0x100344b2
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x100344af
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff9
jge 0x1003449f
lea ecx, [ebp - 0x1b0]
call fcn.1000985d
dec dword [ebp - 0x20]
jns 0x10034428
cmp dword [ebp - 0x1c], ebx
jne 0x100344da
dec dword [ebp - 0x24]
jns 0x1003440e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.1000985d
push 3
pop esi
mov dword [ebp - 0x44], 0xee1c
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x1c], 0x105fa2ef
push esi
call fcn.100097db
mov dword [ebp - 4], edi
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], esi
push esi
call fcn.100097db
push 4
lea ecx, [ebp - 0x18c]
mov byte [ebp - 4], 2
call fcn.100097db
mov dword [ebp - 0x14], ebx
jmp 0x10034541
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x234]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10034531
mov dword [ebp - 0x14], ebx
jmp 0x1003455e
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], 0xd978029
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1003454b
mov dword [ebp - 0x14], ebx
jmp 0x1003457b
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18c]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10034568
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x234]
mov eax, dword [esi]
cmp eax, dword [esi + 8]
mov eax, dword [ebp - 0x1c]
setge cl
xor edx, edx
add ecx, 0x636c1cd8
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setne dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [esi + 8]
setle cl
sub eax, ecx
xor ecx, ecx
sub eax, 0x7935
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp eax, edi
mov eax, dword [ebp - 0x158]
setle cl
add ecx, 3
mov dword [eax + 8], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18c]
mov ecx, dword [esi + 8]
mov dword [eax + 4], ecx
mov dword [ebp - 0x14], ebx
jmp 0x1003461a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x158]
cmp dword [eax + ecx*4], ebx
jne 0x10034620
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jle 0x10034609
lea ecx, [ebp - 0x18c]
call fcn.1000985d
lea ecx, [ebp - 0x158]
call fcn.1000985d
or edi, 0xffffffff
lea ecx, [ebp - 0x234]
mov dword [ebp - 4], edi
call fcn.1000985d
push 2
pop eax
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], eax
mov dword [ebp - 0x25c], eax
mov dword [ebp - 0x258], eax
push 0xfffffffffffffff6
pop eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x24], 0x5352f76e
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x2c], 6
mov dword [ebp - 0x2c], 0xeaf6082f
mov dword [ebp - 0x2c], 0x5835a7ab
mov dword [ebp - 0x30], 0xa3a7221e
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x10], ebx
jmp 0x100346aa
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1bc], 0xfffffff9
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034699
xor esi, esi
mov dword [ebp - 0x1c], 0xffffffe9
inc esi
cmp dword [ebp - 0x1c], 5
jle 0x100346e3
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1bc], eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1bc]
inc dword [ebp - 0x1c]
jmp 0x100346ba
mov dword [ebp - 0x1c], edi
xor edx, edx
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov ecx, dword [ebp - 0x24]
setl dl
cmp edx, 0xfff9
sbb eax, eax
sub ecx, dword [ebp - 0x20]
neg eax
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, eax
mov eax, dword [ebp - 0x24]
neg ecx
sbb ecx, ecx
neg ecx
imul eax, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
sub edx, eax
mov eax, dword [ebp - 0x20]
cmp eax, edx
setl cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], ebx
je 0x1003474b
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x30]
imul eax, dword [ebp - 0x3c]
test eax, eax
jne 0x10034763
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x10034765
mov eax, esi
mov edx, dword [ebp - 0x24]
xor ecx, ecx
cmp eax, 0xbb1b
mov dword [ebp - 0x1bc], edx
push 8
setne cl
xor eax, eax
cmp ecx, 0xb13
setge al
sub edx, eax
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x30], edi
mov edi, dword [sym.imp.USER32.dll_GetDC]
pop eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0x10], 0x5a60d005
mov dword [ebp - 0x14], esi
cmp dword [ebp - 0xf0], ebx
je 0x1003490c
push 2
lea ecx, [ebp - 0x84]
call fcn.100097db
mov dword [ebp - 0x20], 0xed15
mov dword [ebp - 0x3c], 0xbe46552d
mov dword [ebp - 0x38], 0x2e5f
mov dword [ebp - 0x10], ebx
jmp 0x100347f8
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x100347e9
mov eax, dword [ebp - 0x84]
cmp dword [eax + 4], ebx
je 0x10034811
dec dword [ebp - 0x14]
jmp 0x100348e7
mov dword [ebp - 0x38], 0xfb26c4f3
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], esi
jg 0x100348e7
mov dword [ebp - 0x10], ebx
jmp 0x1003483a
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2e4], 0xcce35a12
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034829
mov dword [ebp - 0x20], ebx
jmp 0x10034858
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x84]
mov dword [eax + ecx*4], 0xf934f545
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10034845
mov dword [ebp - 0x10], 3
cmp dword [ebp - 0x10], ebx
jl 0x100348d5
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp + eax*4 - 0xf4]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x2e0]
dec eax
dec eax
jne 0x10034891
cmp dword [ebp - 0xec], ebx
jne 0x10034891
mov esi, ebx
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov edi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x84]
push 1
cmp esi, dword [eax + ecx*4]
setl dl
xor eax, eax
inc eax
cmp eax, edx
mov eax, dword [ebp - 0x2dc]
mov edx, dword [ebp - 0x84]
sbb esi, esi
xor ecx, ecx
inc esi
sub esi, eax
cmp esi, dword [edx]
pop esi
setg cl
xor eax, eax
cmp ecx, 5
setne al
mov dword [edx + edi*4], eax
dec dword [ebp - 0x10]
jns 0x1003486a
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jle 0x10034824
mov edi, dword [sym.imp.USER32.dll_GetDC]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x84]
mov eax, dword [eax]
dec dword [ebp - 0x3c]
cmp eax, ecx
mov eax, esi
lea ecx, [ebp - 0x84]
cmove eax, ebx
mov dword [ebp - 0x38], eax
call fcn.1000985d
jmp 0x10034938
mov dword [ebp - 0x14], ebx
jmp 0x10034932
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x1003492f
push 0x25f3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jle 0x10034911
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x10], 0x76820624
mov dword [ebp - 0x10], 0xfffffffd
jmp 0x10034973
cmp byte [ebp - 0x15], 0
je 0x10034970
push 0x1e0d
push 0x17dc
push 0xb6f
push 0x1d00
push ebx
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xfffffffb
mov byte [ebp - 0x15], bl
jne 0x1003494f
cmp byte [ebp - 0x15], 0
je 0x1003498a
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
mov dword [ebp - 0x38], 0x22d800f4
lea ecx, [ebp - 0x1f8]
mov eax, 0x5bb2c213
mov dword [ebp - 0x180], eax
mov dword [ebp - 0x17c], eax
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x28], 0xf7a73d2
mov dword [ebp - 0x28], ebx
push 3
call fcn.100097db
push 3
pop edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x1c], ebx
jmp 0x100349e1
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xd0], 0xd6c3f0bc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100349d0
mov dword [ebp - 0x1c], ebx
jmp 0x100349fe
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1f8]
mov dword [eax + ecx*4], 0xf88d
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x100349eb
cmp dword [ebp - 0x174], ebx
je 0x10034a32
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034acc
push 0x25f3
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call edi
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
jmp 0x10034acc
mov dword [ebp - 0x20], esi
lea ecx, [ebp - 0x2f0]
push 2
call fcn.100097db
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x10], ebx
jmp 0x10034a5d
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x2f0]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034a4a
push 3
pop edx
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x10034aaf
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0x28], 0x7ecc2443
mov dword [ebp - 0x28], 0xd16652d0
mov dword [ebp - 0x10], ebx
jmp 0x10034a98
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x38c], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10034a87
mov eax, dword [ebp - 0x20]
dec dword [ecx + 8]
mov eax, dword [ebp + eax*4 - 0x180]
dec dword [ebp - 0x20]
jns 0x10034a74
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034ac1
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_UnionRect]
lea ecx, [ebp - 0x2f0]
call fcn.1000985d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1f8]
call fcn.1000985d
mov dword [ebp - 0x10], 0xbef7d651
lea ecx, [ebp - 0xc4]
push esi
call fcn.100097db
push 2
lea ecx, [ebp - 0x14c]
mov dword [ebp - 4], 4
call fcn.100097db
push 5
pop edx
mov byte [ebp - 4], dl
mov dword [ebp - 0x1c], 0x2e809b4a
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x24], 0x38140a97
mov dword [ebp - 0x38], 0xaeb9d376
mov dword [ebp - 0x14], ebx
jmp 0x10034b38
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x10034b25
mov dword [ebp - 0x14], ebx
jmp 0x10034b55
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0xc58f5537
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x10034b42
mov dword [ebp - 0x14], ebx
jmp 0x10034b6d
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x374], edx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x10034b60
mov eax, dword [ebp - 0x14c]
cmp dword [eax + 4], ebx
je 0x10034b84
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x3c]
xor edx, edx
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
mov eax, dword [ebp - 0xc4]
setg dl
xor ecx, ecx
cmp edx, 0xb339
setle cl
mov dword [eax], ecx
test ecx, ecx
je 0x10034bb1
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
xor ecx, ecx
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x1c], ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xc4]
cmp dword [eax], ebx
mov eax, dword [ebp - 0x14c]
setne cl
mov dword [eax], ecx
mov dword [ebp - 0x24], ebx
jmp 0x10034c87
push 2
lea ecx, [ebp - 0x31c]
call fcn.100097db
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x10034c0f
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x31c]
mov dword [eax + ecx*4], 0x74f98987
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034bfc
mov eax, dword [ebp - 0xc4]
cmp dword [eax], ebx
je 0x10034c5b
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034c3c
push 0x907
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x1c], ebx
jmp 0x10034c54
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0xd863e320
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10034c41
jmp 0x10034c79
mov dword [ebp - 0x28], 0xfffffff7
mov dword [ebp - 0x10], ebx
jmp 0x10034c71
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034c67
inc dword [ebp - 0x68]
lea ecx, [ebp - 0x31c]
call fcn.1000985d
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x19
jne 0x10034be3
lea ecx, [ebp - 0x14c]
call fcn.1000985d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc4]
call fcn.1000985d
mov dword [ebp - 0x10], ebx
jmp 0x10034cc1
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x338], 0x42c78ef8
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x10034cb0
mov dword [ebp - 0x28], 0x6482
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034cdf
push ebx
push ebx
call dword [sym.imp.USER32.dll_LoadIconA]
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034cf3
push 0xf88
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x40], ebx
jne 0x10034cfd
mov esi, ebx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
inc dword [ebp - 0x30]
mov dword [ebp - 0x264], ebx
mov eax, dword [ebp - 0x44]
test eax, eax
setg cl
xor edx, edx
cmp ecx, 0x9f9034e1
setne dl
mov dword [ebp - 0x330], edx
mov eax, dword [ebp - 0x40]
imul eax, edx
cmp esi, eax
jl 0x10034d37
cmp dword [ebp - 0x44], ebx
jne 0x10034d37
mov ecx, ebx
jmp 0x10034d3c
xor eax, eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x34]
imul eax, ecx
push 3
pop esi
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], 0xffffffe7
jmp 0x10034d81
mov dword [ebp - 0x10], ebx
jmp 0x10034d6d
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2c4], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034d5c
cmp dword [ebp - 0x38], ebx
jne 0x10034d87
mov eax, dword [ebp - 0x2c4]
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffed
jle 0x10034d57
push dword [ebp - 0xd0]
movdqa xmm0, xmmword [0x10008440]
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x32c]
mov byte [ebp - 0x15], bl
push eax
push ebx
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x64], ebx
movdqu xmmword [ebp - 0x32c], xmm0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
call fcn.10009d08
push esi
lea ecx, [ebp - 0xac]
mov dword [ebp - 4], 6
call fcn.100097db
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x10034df1
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xac]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x10034de2
mov eax, dword [ebp - 0xac]
mov dword [eax], ebx
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x3c], 0xde09
mov dword [ebp - 0x2c], 0xf7c8b166
mov dword [ebp - 0x10], ebx
jmp 0x10034e29
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0xcc], 0xffffffff
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10034e18
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x10034eb3
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x64]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0xcc]
mov eax, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xac]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x64]
mov esi, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x64]
imul esi, esi
neg esi
sbb esi, esi
xor edx, edx
neg esi
cmp esi, dword [eax + ecx*4]
mov eax, dword [ebp - 0xac]
setle dl
xor ecx, ecx
cmp edx, dword [eax]
setle cl
mov dword [ebp - 0x38], ecx
dec dword [ebp - 0x1c]
jns 0x10034e37
push 3
pop esi
mov eax, dword [ebp - 0xac]
inc dword [eax]
cmp dword [eax], esi
jle 0x10034dfe
lea ecx, [ebp - 0xac]
call fcn.1000985d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x64]
call fcn.1000985d
cmp byte [ebp - 0x15], 0
je 0x10035160
xor esi, esi
lea ecx, [ebp - 0x50]
inc esi
push esi
call fcn.100097db
mov dword [ebp - 4], 7
lea ecx, [ebp - 0x2d0]
mov dword [ebp - 0x24], 0x81c2900
push 2
call fcn.100097db
mov byte [ebp - 4], 8
mov dword [ebp - 0x1c], ebx
jmp 0x10034f24
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov dword [eax + ecx*4], 0x1713b910
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x10034f14
mov dword [ebp - 0x1c], ebx
jmp 0x10034f41
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x2d0]
mov dword [eax + ecx*4], 0x3ed86378
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10034f2e
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x10035138
mov dword [ebp - 0x1c], 0x62751c76
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x1c], ebx
jmp 0x10035126
mov dword [ebp - 0x2c], 0xa30b9130
mov dword [ebp - 0x34], 0xd070feea
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
cmp dword [eax + ecx*4], ebx
je 0x10034f98
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10035114
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
jmp 0x10035114
mov dword [ebp - 0xa0], 0x215e1abe
mov dword [ebp - 0x9c], 0x215e1abe
mov dword [ebp - 0x98], 0x215e1abe
mov dword [ebp - 0x94], 0x215e1abe
mov dword [ebp - 0x2c], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x10034fd8
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
mov dword [ebp - 0xa0], ebx
jmp 0x10035108
mov dword [ebp - 0x20], 0x8b6b0e1b
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10035102
mov dword [ebp - 0x14], 0x1013923c
mov dword [ebp - 0x14], ebx
cmp dword [ebp - 0x14], ebx
jl 0x100350f9
push 2
lea ecx, [ebp - 0x1c8]
call fcn.100097db
mov dword [ebp - 0x10], ebx
jmp 0x1003502e
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x1c8]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1003501b
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0x50]
cmp dword [eax + ecx*4], ebx
je 0x100350cf
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
cmp dword [eax + ecx*4], ebx
je 0x1003505c
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
cmp dword [eax + ecx*4], ebx
jne 0x1003505e
mov esi, ebx
mov ecx, dword [ebp - 0x14]
xor edx, edx
mov eax, dword [ebp - 0x20]
neg esi
cmp esi, eax
mov eax, dword [ebp - 0x50]
setle dl
imul edx, dword [eax]
sub edx, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x50]
mov dword [eax + ecx*4], edx
xor ecx, ecx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x38]
cmp eax, 0xfffffffb
setl cl
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], 0xffffffff
jle 0x100350a2
cmp dword [ebp - 0x14], ebx
jne 0x100350a2
xor esi, esi
mov eax, ebx
inc esi
jmp 0x100350a7
xor esi, esi
inc esi
mov eax, esi
xor edx, edx
mov ecx, 0xfff8
sub ecx, eax
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c8]
mov edx, esi
setle cl
cmp ecx, dword [eax + 4]
jg 0x100350d1
mov edx, ebx
mov eax, dword [ebp - 0x34]
xor ecx, ecx
cmp edx, eax
setne cl
xor eax, eax
cmp ecx, esi
lea ecx, [ebp - 0x1c8]
setg al
mov dword [ebp - 0x2c], eax
call fcn.1000985d
dec dword [ebp - 0x14]
jns 0x10035009
dec dword [ebp - 0x20]
jns 0x10034ff6
inc dword [ebp - 0xa0]
cmp dword [ebp - 0xa0], ebx
jle 0x10034fe3
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10034f65
dec dword [ebp - 0x24]
jns 0x10034f53
lea ecx, [ebp - 0x2d0]
call fcn.1000985d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x50]
call fcn.1000985d
push 0x1d51
push 0x1e95
push ebx
call dword [sym.imp.USER32.dll_InflateRect]
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x2c], 0x998ab545
mov dword [ebp - 0x3c], 0x12af0488
mov dword [ebp - 0x10], ebx
jmp 0x10035180
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x10035176
xor esi, esi
mov dword [ebp - 0x1c], ebx
inc esi
jmp 0x100351fd
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x30], 0x1465ee6
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x70], ebx
je 0x100351bb
mov eax, dword [ebp - 0x70]
inc dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
test eax, eax
sete cl
sub ecx, dword [ebp - 0x2c]
neg ecx
sbb ecx, ecx
inc ecx
cmp ecx, dword [ebp - 0x38]
jne 0x100351e6
mov eax, ebx
cmp dword [ebp - 0x1c], ebx
je 0x100351e8
mov eax, esi
imul eax, eax, 7
mov dword [ebp - 0x30], eax
mov eax, ebx
cmp dword [ebp - 0x30], ebx
je 0x100351f7
mov eax, esi
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jle 0x1003518e
mov dword [ebp - 0x10], 0xfffffff6
mov dword [ebp - 0x10], ebx
jmp 0x1003521b
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x35c], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 3
jl 0x1003520e
mov dword [ebp - 0x10], ebx
jmp 0x10035233
mov dword [ebp - 0x2c], 0xb0c
inc dword [ebp - 0x2c]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jle 0x10035226
push 3
lea ecx, [ebp - 0x104]
call fcn.100097db
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x2fc]
mov dword [ebp - 0x28], 0x8bd4dfbd
mov dword [ebp - 0x28], 0xb34c266d
push 2
call fcn.100097db
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x228]
mov dword [ebp - 0x28], 0xadc9fe9a
mov dword [ebp - 0x28], 0xf5c9b8db
push esi
call fcn.100097db
mov byte [ebp - 4], 0xb
push 3
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100352a2
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3a4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x10035295
mov dword [ebp - 0x14], ebx
jmp 0x100352bc
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x104]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100352ac
push 2
mov dword [ebp - 0x14], ebx
pop edx
jmp 0x100352d8
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2fc]
mov dword [eax + ecx*4], esi
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edx
jl 0x100352c9
mov dword [ebp - 0x14], ebx
jmp 0x100352f5
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x228]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x100352e2
mov esi, dword [ebp - 0x104]
mov dword [ebp - 0x34], esi
mov dword [esi + 8], edx
mov dword [ebp - 0x20], 0x25260417
mov dword [ebp - 0x10], ebx
jmp 0x1003531f
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x2d8], ebx
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jl 0x10035312
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x10035447
mov dword [ebp - 0x28], ebx
lea ecx, [ebp - 0x294]
mov dword [ebp - 0x28], 0xfffffffc
mov dword [ebp - 0x28], 0xffffffff
push edx
call fcn.100097db
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x2a0]
mov dword [ebp - 0x2c], 0xffff
xor esi, esi
mov dword [ebp - 0x28], 0xfffffff8
inc esi
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x28], 0xd0e7
mov dword [ebp - 0x28], 8
push esi
call fcn.100097db
push esi
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 0xd
call fcn.100097db
mov dword [ebp - 0x38], 0xc64e719b
mov dword [ebp - 0x14], ebx
jmp 0x100353b2
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x294]
mov dword [eax + ecx*4], 0xbdbdf7cd
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003539f
xor edx, edx
mov dword [ebp - 0x14], ebx
inc edx
cmp dword [ebp - 0x14], 3
jge 0x100353d3
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x398], edx
inc dword [ebp - 0x14]
jmp 0x100353be
mov dword [ebp - 0x14], ebx
jmp 0x100353eb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x228]
neg ecx
sbb ecx, ecx
neg ecx
mov dword [eax], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x104]
imul eax, dword [eax], 0xc83b
cmp eax, 1
setle cl
xor eax, eax
cmp ecx, dword [esi + 8]
mov dword [ebp - 0x2d4], ecx
setge al
dec dword [esi + 8]
mov dword [ebp - 0x20], eax
jns 0x10035306
lea ecx, [ebp - 0x228]
call fcn.1000985d
lea ecx, [ebp - 0x2fc]
call fcn.1000985d
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.1000985d
mov dword [ebp - 0x3c], 0x25b0
mov dword [ebp - 0x38], 0xfffffff8
mov dword [ebp - 0x2c], ebx
push 3
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x1c], ebx
pop esi
jmp 0x100354dc
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x128], 0xe971
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x100354cb
mov dword [ebp - 0x1c], ebx
jmp 0x100354f7