Function at 0x1003d0c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10099b33
mov eax, dword fs:[0]
push eax
sub esp, 0xe0
mov eax, dword [0x100c520c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x28]
push 0x16
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.AdjustProcessPrivilege
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 2
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003d18a
call fcn.10003550
push 1
push 0x1003cf70
mov dword [eax], fcn.10028fa0
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003d1ed
call fcn.10003550
push 1
push 0x1003cf70
mov dword [eax], fcn.10028fa0
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x28]
push 0x10
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetProcIDsByName
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 6
lea eax, [ebp - 0x28]
push eax
push 0x10029c70
lea ecx, [ebp - 0xec]
call fcn.1003bb60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.10028c90
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x28]
push 0x14
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetProcIDsByWndTitle
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x28]
push eax
push 0x10029df0
lea ecx, [ebp - 0x98]
call fcn.1003bb60
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10028c90
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov dword [ebp - 4], 0xd
mov dword [ebp - 0x18], 0
push 0x14
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push str.GetProcIDsBYWndClass
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x28]
push eax
push fcn.10029b40
lea ecx, [ebp - 0xb4]
call fcn.1003bb60
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
push 0xe
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetProcThreads
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003d480
call fcn.10003550
push 1
push 0x1003c520
mov dword [eax], 0x10029f20
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003d4e3
call fcn.10003550
push 1
push 0x1003c520
mov dword [eax], 0x10029f20
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov dword [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
push 0xd
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 0x100a0498
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x16
lea eax, [ebp - 0x28]
push eax
push 0x1002a260
lea ecx, [ebp - 0xb4]
call fcn.1003bd40
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.10028c90
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
mov dword [ebp - 4], 0x19
lea ecx, [ebp - 0x28]
push 0xa
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.WriteValue
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x28]
push eax
push 0x1002a3a0
lea ecx, [ebp - 0x98]
call fcn.1003bde0
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10028c90
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
mov dword [ebp - 4], 0x1d
mov dword [ebp - 0x18], 0
push 8
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push str.GetValue
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x1e
lea eax, [ebp - 0x28]
push eax
push 0x1002a080
lea ecx, [ebp - 0xec]
call fcn.1003bc00
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe8]
call fcn.10028c90
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x28]
push 0xd
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.close_process
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x22
lea eax, [ebp - 0x28]
push eax
push 0x100296d0
lea ecx, [ebp - 0xd0]
call fcn.1003bd40
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0x28]
push 4
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.exec
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x26
lea eax, [ebp - 0x28]
push eax
push 0x10029910
lea ecx, [ebp - 0x7c]
call fcn.1003be80
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x29
lea ecx, [ebp - 0x28]
push 0xa
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.write_buff
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x2a
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003d8a0
call fcn.10003550
push 1
push 0x1003cc10
mov dword [eax], 0x1002a290
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003d903
call fcn.10003550
push 1
push 0x1003cc10
mov dword [eax], 0x1002a290
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x2d
lea ecx, [ebp - 0x28]
push 5
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.alloc
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x2e
lea eax, [ebp - 0x28]
push eax
push 0x10029020
lea ecx, [ebp - 0x7c]
call fcn.1003bc00
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov dword [ebp - 4], 0x31
lea ecx, [ebp - 0x28]
push 3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 0x100a04ec
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x32
lea eax, [ebp - 0x28]
push eax
push 0x1002a9a0
lea ecx, [ebp - 0xd0]
call fcn.1003be80
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x35
mov dword [ebp - 0x18], 0
push 0xd
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push str.IsModuleExist
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x36
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003dae3
call fcn.10003550
push 1
push 0x1003cf90
mov dword [eax], 0x1002a100
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003db46
call fcn.10003550
push 1
push 0x1003cf90
mov dword [eax], 0x1002a100
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x39
lea ecx, [ebp - 0x28]
push 0xd
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetModuleBase
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x3a
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003dbfc
call fcn.10003550
push 1
push 0x1003ca10
mov dword [eax], 0x10029a70
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003dc5f
call fcn.10003550
push 1
push 0x1003ca10
mov dword [eax], 0x10029a70
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x3d
lea ecx, [ebp - 0x28]
push 0x12
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetFirstModuleBase
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x3e
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003dd15
call fcn.10003550
push 1
push 0x1003c740
mov dword [eax], 0x10029970
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003dd78
call fcn.10003550
push 1
push 0x1003c740
mov dword [eax], 0x10029970
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x41
lea ecx, [ebp - 0x28]
push 3
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 0x100a0524
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x42
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003de2e
call fcn.10003550
push 1
push 0x1003ccd0
mov dword [eax], 0x10029070
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003de91
call fcn.10003550
push 1
push 0x1003ccd0
mov dword [eax], 0x10029070
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x41
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x45
lea ecx, [ebp - 0x28]
push 5
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.asm_c
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x46
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003df47
call fcn.10003550
push 1
push 0x1003cdc0
mov dword [eax], 0x100295a0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003dfaa
call fcn.10003550
push 1
push 0x1003cdc0
mov dword [eax], 0x100295a0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x45
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x49
lea ecx, [ebp - 0x28]
push 5
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.sleep
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x4a
lea eax, [ebp - 0x28]
push eax
push 0x1002a250
lea ecx, [ebp - 0x7c]
call fcn.1003bd40
mov byte [ebp - 4], 0x49
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x4d
lea ecx, [ebp - 0x28]
push 0xa
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.findwindow
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x4e
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003e0e9
call fcn.10003550
push 1
push 0x1003c890
mov dword [eax], 0x1002a590
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003e14c
call fcn.10003550
push 1
push 0x1003c890
mov dword [eax], 0x1002a590
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x51
lea ecx, [ebp - 0x28]
push 0xd
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.getwindowlong
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x28]
push eax
push 0x1002a670
lea ecx, [ebp - 0x7c]
call fcn.1003bc00
mov byte [ebp - 4], 0x51
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xd0], esi
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov dword [ebp - 4], 0x55
lea ecx, [ebp - 0x28]
push 0xd
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.setwindowlong
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x28]
push eax
push 0x1002a790
lea ecx, [ebp - 0xd0]
call fcn.1003bde0
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xcc]
call fcn.10028c90
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xb4], esi
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0x9c], 0xf
mov byte [ebp - 0xb0], 0
mov dword [ebp - 4], 0x59
mov dword [ebp - 0x18], 0
push 0xb
mov dword [ebp - 0x14], 0
lea ecx, [ebp - 0x28]
push str.sendmessage
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x28]
push eax
push 0x1002a770
lea ecx, [ebp - 0xb4]
call fcn.1003bca0
mov byte [ebp - 4], 0x59
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xb0]
call fcn.10028c90
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0xf
mov byte [ebp - 0x94], 0
mov dword [ebp - 4], 0x5d
lea ecx, [ebp - 0x28]
push 0xb
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.postmessage
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x5e
lea eax, [ebp - 0x28]
push eax
push 0x1002a6f0
lea ecx, [ebp - 0x98]
call fcn.1003bca0
mov byte [ebp - 4], 0x5d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x94]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x61
lea ecx, [ebp - 0x28]
push 0xf
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.terminatethread
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x62
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003e468
call fcn.10003550
push 1
push 0x1003cb60
mov dword [eax], 0x1002a7b0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003e4cb
call fcn.10003550
push 1
push 0x1003cb60
mov dword [eax], 0x1002a7b0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x61
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x65
lea ecx, [ebp - 0x28]
push 9
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.GetSwitch
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x66
lea eax, [ebp - 0x28]
push eax
push 0x1002a010
lea ecx, [ebp - 0x7c]
call fcn.1003bf20
mov byte [ebp - 4], 0x65
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x44], esi
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
mov dword [ebp - 4], 0x69
lea ecx, [ebp - 0x28]
push 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.download
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x6a
cmp dword [ebp - 0x30], 0
push 4
push dword [ebp - 0x44]
jne 0x1003e60a
call fcn.10003550
push 1
push 0x1003c300
mov dword [eax], 0x10029700
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003e66d
call fcn.10003550
push 1
push 0x1003c300
mov dword [eax], 0x10029700
push dword [ebp - 0x44]
call fcn.10002410
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
cmovae eax, dword [ebp - 0x40]
push eax
push dword [ebp - 0x44]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x44]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x44]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x40]
call fcn.10028c90
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x7c], esi
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
mov dword [ebp - 4], 0x6d
lea ecx, [ebp - 0x28]
push 6
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.reload
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x6e
lea eax, [ebp - 0x28]
push eax
push 0x1002a1d0
lea ecx, [ebp - 0x7c]
call fcn.1003bf20
mov byte [ebp - 4], 0x6d
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.10028c90
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
mov dword [ebp - 4], 0x71
lea ecx, [ebp - 0x28]
push 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push str.location
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.1002a8b0
mov byte [ebp - 4], 0x72
cmp dword [ebp - 0x4c], 0
push 4
push dword [ebp - 0x60]
jne 0x1003e7ac
call fcn.10003550
push 1
push 0x1003c450
mov dword [eax], 0x100299e0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100027d0
add esp, 0x1c
jmp 0x1003e80f
call fcn.10003550
push 1
push 0x1003c450
mov dword [eax], 0x100299e0
push dword [ebp - 0x60]
call fcn.10002410
cmp dword [ebp - 0x48], 0x10
lea eax, [ebp - 0x5c]
cmovae eax, dword [ebp - 0x5c]
push eax
push dword [ebp - 0x60]
call fcn.10002560
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
push dword [ebp - 0x60]
call fcn.100022e0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001bb0
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10002840
push 0xfffffffffffffffd
push dword [ebp - 0x60]
call fcn.10001960
add esp, 0x3c
mov byte [ebp - 4], 0x71
lea ecx, [ebp - 0x28]
call fcn.10028c90
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5c]
call fcn.10028c90
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10067217
mov esp, ebp
pop ebp
ret